diff --git a/.browserslistrc b/.browserslistrc deleted file mode 100644 index c71c8b9c717b..000000000000 --- a/.browserslistrc +++ /dev/null @@ -1,11 +0,0 @@ -# https://github.com/browserslist/browserslist#readme - ->= 0.5% -last 2 major versions -not dead -Chrome >= 60 -Firefox >= 60 -Firefox ESR -iOS >= 12 -Safari >= 12 -not Explorer <= 11 diff --git a/.cspell.json b/.cspell.json deleted file mode 100644 index 22ca567e94da..000000000000 --- a/.cspell.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version": "0.1", - "language": "en", - "ignorePaths": [ - "**/node_modules/**", - "**/vscode-extension/**", - "**/.git/**", - ".vscode", - "megalinter", - "package-lock.json", - "report" - ], - "words": [] -} diff --git a/.editorconfig b/.editorconfig index 54e4850b2e88..259e72a0f6d1 100644 --- a/.editorconfig +++ b/.editorconfig @@ -1,6 +1,3 @@ -# Editor configuration, see http://editorconfig.org -root = true - [*] charset = utf-8 end_of_line = lf @@ -8,7 +5,700 @@ indent_size = 2 indent_style = space insert_final_newline = true trim_trailing_whitespace = true +max_line_length = 100 +tab_width = 2 +ij_continuation_indent_size = 2 +ij_formatter_off_tag = @formatter:off +ij_formatter_on_tag = @formatter:on +ij_formatter_tags_enabled = true +ij_smart_tabs = false +ij_visual_guides = 100 +ij_wrap_on_typing = false + +[*.css] +ij_visual_guides = none +ij_css_align_closing_brace_with_properties = false +ij_css_blank_lines_around_nested_selector = 1 +ij_css_blank_lines_between_blocks = 1 +ij_css_brace_placement = end_of_line +ij_css_enforce_quotes_on_format = false +ij_css_hex_color_long_format = false +ij_css_hex_color_lower_case = false +ij_css_hex_color_short_format = false +ij_css_hex_color_upper_case = false +ij_css_keep_blank_lines_in_code = 2 +ij_css_keep_indents_on_empty_lines = false +ij_css_keep_single_line_blocks = false +ij_css_properties_order = font,font-family,font-size,font-weight,font-style,font-variant,font-size-adjust,font-stretch,line-height,position,z-index,top,right,bottom,left,display,visibility,float,clear,overflow,overflow-x,overflow-y,clip,zoom,align-content,align-items,align-self,flex,flex-flow,flex-basis,flex-direction,flex-grow,flex-shrink,flex-wrap,justify-content,order,box-sizing,width,min-width,max-width,height,min-height,max-height,margin,margin-top,margin-right,margin-bottom,margin-left,padding,padding-top,padding-right,padding-bottom,padding-left,table-layout,empty-cells,caption-side,border-spacing,border-collapse,list-style,list-style-position,list-style-type,list-style-image,content,quotes,counter-reset,counter-increment,resize,cursor,user-select,nav-index,nav-up,nav-right,nav-down,nav-left,transition,transition-delay,transition-timing-function,transition-duration,transition-property,transform,transform-origin,animation,animation-name,animation-duration,animation-play-state,animation-timing-function,animation-delay,animation-iteration-count,animation-direction,text-align,text-align-last,vertical-align,white-space,text-decoration,text-emphasis,text-emphasis-color,text-emphasis-style,text-emphasis-position,text-indent,text-justify,letter-spacing,word-spacing,text-outline,text-transform,text-wrap,text-overflow,text-overflow-ellipsis,text-overflow-mode,word-wrap,word-break,tab-size,hyphens,pointer-events,opacity,color,border,border-width,border-style,border-color,border-top,border-top-width,border-top-style,border-top-color,border-right,border-right-width,border-right-style,border-right-color,border-bottom,border-bottom-width,border-bottom-style,border-bottom-color,border-left,border-left-width,border-left-style,border-left-color,border-radius,border-top-left-radius,border-top-right-radius,border-bottom-right-radius,border-bottom-left-radius,border-image,border-image-source,border-image-slice,border-image-width,border-image-outset,border-image-repeat,outline,outline-width,outline-style,outline-color,outline-offset,background,background-color,background-image,background-repeat,background-attachment,background-position,background-position-x,background-position-y,background-clip,background-origin,background-size,box-decoration-break,box-shadow,text-shadow +ij_css_space_after_colon = true +ij_css_space_before_opening_brace = true +ij_css_use_double_quotes = true +ij_css_value_alignment = do_not_align + +[*.ejs] +ij_visual_guides = none + +[*.feature] +tab_width = 4 +ij_visual_guides = none +ij_gherkin_keep_indents_on_empty_lines = false + +[*.haml] +tab_width = 4 +ij_visual_guides = none +ij_haml_keep_indents_on_empty_lines = false + +[*.less] +tab_width = 4 +ij_visual_guides = none +ij_less_align_closing_brace_with_properties = false +ij_less_blank_lines_around_nested_selector = 1 +ij_less_blank_lines_between_blocks = 1 +ij_less_brace_placement = 0 +ij_less_enforce_quotes_on_format = false +ij_less_hex_color_long_format = false +ij_less_hex_color_lower_case = false +ij_less_hex_color_short_format = false +ij_less_hex_color_upper_case = false +ij_less_keep_blank_lines_in_code = 2 +ij_less_keep_indents_on_empty_lines = false +ij_less_keep_single_line_blocks = false +ij_less_properties_order = font,font-family,font-size,font-weight,font-style,font-variant,font-size-adjust,font-stretch,line-height,position,z-index,top,right,bottom,left,display,visibility,float,clear,overflow,overflow-x,overflow-y,clip,zoom,align-content,align-items,align-self,flex,flex-flow,flex-basis,flex-direction,flex-grow,flex-shrink,flex-wrap,justify-content,order,box-sizing,width,min-width,max-width,height,min-height,max-height,margin,margin-top,margin-right,margin-bottom,margin-left,padding,padding-top,padding-right,padding-bottom,padding-left,table-layout,empty-cells,caption-side,border-spacing,border-collapse,list-style,list-style-position,list-style-type,list-style-image,content,quotes,counter-reset,counter-increment,resize,cursor,user-select,nav-index,nav-up,nav-right,nav-down,nav-left,transition,transition-delay,transition-timing-function,transition-duration,transition-property,transform,transform-origin,animation,animation-name,animation-duration,animation-play-state,animation-timing-function,animation-delay,animation-iteration-count,animation-direction,text-align,text-align-last,vertical-align,white-space,text-decoration,text-emphasis,text-emphasis-color,text-emphasis-style,text-emphasis-position,text-indent,text-justify,letter-spacing,word-spacing,text-outline,text-transform,text-wrap,text-overflow,text-overflow-ellipsis,text-overflow-mode,word-wrap,word-break,tab-size,hyphens,pointer-events,opacity,color,border,border-width,border-style,border-color,border-top,border-top-width,border-top-style,border-top-color,border-right,border-right-width,border-right-style,border-right-color,border-bottom,border-bottom-width,border-bottom-style,border-bottom-color,border-left,border-left-width,border-left-style,border-left-color,border-radius,border-top-left-radius,border-top-right-radius,border-bottom-right-radius,border-bottom-left-radius,border-image,border-image-source,border-image-slice,border-image-width,border-image-outset,border-image-repeat,outline,outline-width,outline-style,outline-color,outline-offset,background,background-color,background-image,background-repeat,background-attachment,background-position,background-position-x,background-position-y,background-clip,background-origin,background-size,box-decoration-break,box-shadow,text-shadow +ij_less_space_after_colon = true +ij_less_space_before_opening_brace = true +ij_less_use_double_quotes = true +ij_less_value_alignment = 0 + +[*.sass] +tab_width = 4 +ij_visual_guides = none +ij_sass_align_closing_brace_with_properties = false +ij_sass_blank_lines_around_nested_selector = 1 +ij_sass_blank_lines_between_blocks = 1 +ij_sass_brace_placement = 0 +ij_sass_enforce_quotes_on_format = false +ij_sass_hex_color_long_format = false +ij_sass_hex_color_lower_case = false +ij_sass_hex_color_short_format = false +ij_sass_hex_color_upper_case = false +ij_sass_keep_blank_lines_in_code = 2 +ij_sass_keep_indents_on_empty_lines = false +ij_sass_keep_single_line_blocks = false +ij_sass_properties_order = font,font-family,font-size,font-weight,font-style,font-variant,font-size-adjust,font-stretch,line-height,position,z-index,top,right,bottom,left,display,visibility,float,clear,overflow,overflow-x,overflow-y,clip,zoom,align-content,align-items,align-self,flex,flex-flow,flex-basis,flex-direction,flex-grow,flex-shrink,flex-wrap,justify-content,order,box-sizing,width,min-width,max-width,height,min-height,max-height,margin,margin-top,margin-right,margin-bottom,margin-left,padding,padding-top,padding-right,padding-bottom,padding-left,table-layout,empty-cells,caption-side,border-spacing,border-collapse,list-style,list-style-position,list-style-type,list-style-image,content,quotes,counter-reset,counter-increment,resize,cursor,user-select,nav-index,nav-up,nav-right,nav-down,nav-left,transition,transition-delay,transition-timing-function,transition-duration,transition-property,transform,transform-origin,animation,animation-name,animation-duration,animation-play-state,animation-timing-function,animation-delay,animation-iteration-count,animation-direction,text-align,text-align-last,vertical-align,white-space,text-decoration,text-emphasis,text-emphasis-color,text-emphasis-style,text-emphasis-position,text-indent,text-justify,letter-spacing,word-spacing,text-outline,text-transform,text-wrap,text-overflow,text-overflow-ellipsis,text-overflow-mode,word-wrap,word-break,tab-size,hyphens,pointer-events,opacity,color,border,border-width,border-style,border-color,border-top,border-top-width,border-top-style,border-top-color,border-right,border-right-width,border-right-style,border-right-color,border-bottom,border-bottom-width,border-bottom-style,border-bottom-color,border-left,border-left-width,border-left-style,border-left-color,border-radius,border-top-left-radius,border-top-right-radius,border-bottom-right-radius,border-bottom-left-radius,border-image,border-image-source,border-image-slice,border-image-width,border-image-outset,border-image-repeat,outline,outline-width,outline-style,outline-color,outline-offset,background,background-color,background-image,background-repeat,background-attachment,background-position,background-position-x,background-position-y,background-clip,background-origin,background-size,box-decoration-break,box-shadow,text-shadow +ij_sass_space_after_colon = true +ij_sass_space_before_opening_brace = true +ij_sass_use_double_quotes = true +ij_sass_value_alignment = 0 + +[*.scss] +tab_width = 4 +ij_visual_guides = none +ij_scss_align_closing_brace_with_properties = false +ij_scss_blank_lines_around_nested_selector = 1 +ij_scss_blank_lines_between_blocks = 1 +ij_scss_brace_placement = 0 +ij_scss_enforce_quotes_on_format = false +ij_scss_hex_color_long_format = false +ij_scss_hex_color_lower_case = false +ij_scss_hex_color_short_format = false +ij_scss_hex_color_upper_case = false +ij_scss_keep_blank_lines_in_code = 2 +ij_scss_keep_indents_on_empty_lines = false +ij_scss_keep_single_line_blocks = false +ij_scss_properties_order = font,font-family,font-size,font-weight,font-style,font-variant,font-size-adjust,font-stretch,line-height,position,z-index,top,right,bottom,left,display,visibility,float,clear,overflow,overflow-x,overflow-y,clip,zoom,align-content,align-items,align-self,flex,flex-flow,flex-basis,flex-direction,flex-grow,flex-shrink,flex-wrap,justify-content,order,box-sizing,width,min-width,max-width,height,min-height,max-height,margin,margin-top,margin-right,margin-bottom,margin-left,padding,padding-top,padding-right,padding-bottom,padding-left,table-layout,empty-cells,caption-side,border-spacing,border-collapse,list-style,list-style-position,list-style-type,list-style-image,content,quotes,counter-reset,counter-increment,resize,cursor,user-select,nav-index,nav-up,nav-right,nav-down,nav-left,transition,transition-delay,transition-timing-function,transition-duration,transition-property,transform,transform-origin,animation,animation-name,animation-duration,animation-play-state,animation-timing-function,animation-delay,animation-iteration-count,animation-direction,text-align,text-align-last,vertical-align,white-space,text-decoration,text-emphasis,text-emphasis-color,text-emphasis-style,text-emphasis-position,text-indent,text-justify,letter-spacing,word-spacing,text-outline,text-transform,text-wrap,text-overflow,text-overflow-ellipsis,text-overflow-mode,word-wrap,word-break,tab-size,hyphens,pointer-events,opacity,color,border,border-width,border-style,border-color,border-top,border-top-width,border-top-style,border-top-color,border-right,border-right-width,border-right-style,border-right-color,border-bottom,border-bottom-width,border-bottom-style,border-bottom-color,border-left,border-left-width,border-left-style,border-left-color,border-radius,border-top-left-radius,border-top-right-radius,border-bottom-right-radius,border-bottom-left-radius,border-image,border-image-source,border-image-slice,border-image-width,border-image-outset,border-image-repeat,outline,outline-width,outline-style,outline-color,outline-offset,background,background-color,background-image,background-repeat,background-attachment,background-position,background-position-x,background-position-y,background-clip,background-origin,background-size,box-decoration-break,box-shadow,text-shadow +ij_scss_space_after_colon = true +ij_scss_space_before_opening_brace = true +ij_scss_use_double_quotes = true +ij_scss_value_alignment = 0 + +[*.styl] +tab_width = 4 +ij_visual_guides = none +ij_stylus_align_closing_brace_with_properties = false +ij_stylus_blank_lines_around_nested_selector = 1 +ij_stylus_blank_lines_between_blocks = 1 +ij_stylus_brace_placement = 0 +ij_stylus_enforce_quotes_on_format = false +ij_stylus_hex_color_long_format = false +ij_stylus_hex_color_lower_case = false +ij_stylus_hex_color_short_format = false +ij_stylus_hex_color_upper_case = false +ij_stylus_keep_blank_lines_in_code = 2 +ij_stylus_keep_indents_on_empty_lines = false +ij_stylus_keep_single_line_blocks = false +ij_stylus_properties_order = font,font-family,font-size,font-weight,font-style,font-variant,font-size-adjust,font-stretch,line-height,position,z-index,top,right,bottom,left,display,visibility,float,clear,overflow,overflow-x,overflow-y,clip,zoom,align-content,align-items,align-self,flex,flex-flow,flex-basis,flex-direction,flex-grow,flex-shrink,flex-wrap,justify-content,order,box-sizing,width,min-width,max-width,height,min-height,max-height,margin,margin-top,margin-right,margin-bottom,margin-left,padding,padding-top,padding-right,padding-bottom,padding-left,table-layout,empty-cells,caption-side,border-spacing,border-collapse,list-style,list-style-position,list-style-type,list-style-image,content,quotes,counter-reset,counter-increment,resize,cursor,user-select,nav-index,nav-up,nav-right,nav-down,nav-left,transition,transition-delay,transition-timing-function,transition-duration,transition-property,transform,transform-origin,animation,animation-name,animation-duration,animation-play-state,animation-timing-function,animation-delay,animation-iteration-count,animation-direction,text-align,text-align-last,vertical-align,white-space,text-decoration,text-emphasis,text-emphasis-color,text-emphasis-style,text-emphasis-position,text-indent,text-justify,letter-spacing,word-spacing,text-outline,text-transform,text-wrap,text-overflow,text-overflow-ellipsis,text-overflow-mode,word-wrap,word-break,tab-size,hyphens,pointer-events,opacity,color,border,border-width,border-style,border-color,border-top,border-top-width,border-top-style,border-top-color,border-right,border-right-width,border-right-style,border-right-color,border-bottom,border-bottom-width,border-bottom-style,border-bottom-color,border-left,border-left-width,border-left-style,border-left-color,border-radius,border-top-left-radius,border-top-right-radius,border-bottom-right-radius,border-bottom-left-radius,border-image,border-image-source,border-image-slice,border-image-width,border-image-outset,border-image-repeat,outline,outline-width,outline-style,outline-color,outline-offset,background,background-color,background-image,background-repeat,background-attachment,background-position,background-position-x,background-position-y,background-clip,background-origin,background-size,box-decoration-break,box-shadow,text-shadow +ij_stylus_space_after_colon = true +ij_stylus_space_before_opening_brace = true +ij_stylus_use_double_quotes = true +ij_stylus_value_alignment = 0 + +[*.vue] +ij_continuation_indent_size = 4 +ij_visual_guides = none +ij_vue_indent_children_of_top_level = template +ij_vue_interpolation_new_line_after_start_delimiter = true +ij_vue_interpolation_new_line_before_end_delimiter = true +ij_vue_interpolation_wrap = off +ij_vue_keep_indents_on_empty_lines = false +ij_vue_spaces_within_interpolation_expressions = true +ij_vue_uniform_indent = true + +[.editorconfig] +ij_visual_guides = none +ij_editorconfig_align_group_field_declarations = false +ij_editorconfig_space_after_colon = false +ij_editorconfig_space_after_comma = true +ij_editorconfig_space_before_colon = false +ij_editorconfig_space_before_comma = false +ij_editorconfig_spaces_around_assignment_operators = true + +[{*.ant,*.fxml,*.jhm,*.jnlp,*.jrxml,*.rng,*.tld,*.wsdl,*.xml,*.xsd,*.xsl,*.xslt,*.xul}] +indent_size = 4 +tab_width = 4 +ij_visual_guides = none +ij_xml_align_attributes = true +ij_xml_align_text = false +ij_xml_attribute_wrap = normal +ij_xml_block_comment_at_first_column = true +ij_xml_keep_blank_lines = 2 +ij_xml_keep_indents_on_empty_lines = false +ij_xml_keep_line_breaks = true +ij_xml_keep_line_breaks_in_text = true +ij_xml_keep_whitespaces = false +ij_xml_keep_whitespaces_around_cdata = preserve +ij_xml_keep_whitespaces_inside_cdata = false +ij_xml_line_comment_at_first_column = true +ij_xml_space_after_tag_name = false +ij_xml_space_around_equals_in_attribute = false +ij_xml_space_inside_empty_tag = false +ij_xml_text_wrap = normal + +[{*.ats,*.ts,*.tsx}] +ij_continuation_indent_size = 2 +ij_visual_guides = none +ij_typescript_align_imports = false +ij_typescript_align_multiline_array_initializer_expression = false +ij_typescript_align_multiline_binary_operation = false +ij_typescript_align_multiline_chained_methods = false +ij_typescript_align_multiline_extends_list = false +ij_typescript_align_multiline_for = false +ij_typescript_align_multiline_parameters = false +ij_typescript_align_multiline_parameters_in_calls = false +ij_typescript_align_multiline_ternary_operation = false +ij_typescript_align_object_properties = 0 +ij_typescript_align_union_types = false +ij_typescript_align_var_statements = 0 +ij_typescript_array_initializer_new_line_after_left_brace = true +ij_typescript_array_initializer_right_brace_on_new_line = true +ij_typescript_array_initializer_wrap = on_every_item +ij_typescript_assignment_wrap = on_every_item +ij_typescript_binary_operation_sign_on_next_line = true +ij_typescript_binary_operation_wrap = on_every_item +ij_typescript_blacklist_imports = rxjs/Rx,node_modules/**,**/node_modules/**,@angular/material,@angular/material/typings/** +ij_typescript_blank_lines_after_imports = 1 +ij_typescript_blank_lines_around_class = 1 +ij_typescript_blank_lines_around_field = 0 +ij_typescript_blank_lines_around_field_in_interface = 0 +ij_typescript_blank_lines_around_function = 1 +ij_typescript_blank_lines_around_method = 1 +ij_typescript_blank_lines_around_method_in_interface = 1 +ij_typescript_block_brace_style = end_of_line +ij_typescript_call_parameters_new_line_after_left_paren = false +ij_typescript_call_parameters_right_paren_on_new_line = false +ij_typescript_call_parameters_wrap = on_every_item +ij_typescript_catch_on_new_line = false +ij_typescript_chained_call_dot_on_new_line = true +ij_typescript_class_brace_style = end_of_line +ij_typescript_comma_on_new_line = false +ij_typescript_do_while_brace_force = always +ij_typescript_else_on_new_line = false +ij_typescript_enforce_trailing_comma = remove +ij_typescript_extends_keyword_wrap = off +ij_typescript_extends_list_wrap = off +ij_typescript_field_prefix = _ +ij_typescript_file_name_style = relaxed +ij_typescript_finally_on_new_line = false +ij_typescript_for_brace_force = always +ij_typescript_for_statement_new_line_after_left_paren = false +ij_typescript_for_statement_right_paren_on_new_line = false +ij_typescript_for_statement_wrap = off +ij_typescript_force_quote_style = true +ij_typescript_force_semicolon_style = true +ij_typescript_function_expression_brace_style = end_of_line +ij_typescript_if_brace_force = always +ij_typescript_import_merge_members = global +ij_typescript_import_prefer_absolute_path = global +ij_typescript_import_sort_members = true +ij_typescript_import_sort_module_name = false +ij_typescript_import_use_node_resolution = true +ij_typescript_imports_wrap = on_every_item +ij_typescript_indent_case_from_switch = true +ij_typescript_indent_chained_calls = true +ij_typescript_indent_package_children = 0 +ij_typescript_jsdoc_include_types = false +ij_typescript_jsx_attribute_value = braces +ij_typescript_keep_blank_lines_in_code = 1 +ij_typescript_keep_first_column_comment = true +ij_typescript_keep_indents_on_empty_lines = false +ij_typescript_keep_line_breaks = true +ij_typescript_keep_simple_blocks_in_one_line = true +ij_typescript_keep_simple_methods_in_one_line = true +ij_typescript_line_comment_add_space = true +ij_typescript_line_comment_at_first_column = false +ij_typescript_method_brace_style = end_of_line +ij_typescript_method_call_chain_wrap = on_every_item +ij_typescript_method_parameters_new_line_after_left_paren = false +ij_typescript_method_parameters_right_paren_on_new_line = false +ij_typescript_method_parameters_wrap = on_every_item +ij_typescript_object_literal_wrap = on_every_item +ij_typescript_parentheses_expression_new_line_after_left_paren = false +ij_typescript_parentheses_expression_right_paren_on_new_line = false +ij_typescript_place_assignment_sign_on_next_line = false +ij_typescript_prefer_as_type_cast = false +ij_typescript_prefer_explicit_types_function_expression_returns = false +ij_typescript_prefer_explicit_types_function_returns = false +ij_typescript_prefer_explicit_types_vars_fields = false +ij_typescript_prefer_parameters_wrap = false +ij_typescript_reformat_c_style_comments = true +ij_typescript_space_after_colon = true +ij_typescript_space_after_comma = true +ij_typescript_space_after_dots_in_rest_parameter = false +ij_typescript_space_after_generator_mult = true +ij_typescript_space_after_property_colon = true +ij_typescript_space_after_quest = true +ij_typescript_space_after_type_colon = true +ij_typescript_space_after_unary_not = false +ij_typescript_space_before_async_arrow_lparen = true +ij_typescript_space_before_catch_keyword = true +ij_typescript_space_before_catch_left_brace = true +ij_typescript_space_before_catch_parentheses = true +ij_typescript_space_before_class_lbrace = true +ij_typescript_space_before_class_left_brace = true +ij_typescript_space_before_colon = true +ij_typescript_space_before_comma = false +ij_typescript_space_before_do_left_brace = true +ij_typescript_space_before_else_keyword = true +ij_typescript_space_before_else_left_brace = true +ij_typescript_space_before_finally_keyword = true +ij_typescript_space_before_finally_left_brace = true +ij_typescript_space_before_for_left_brace = true +ij_typescript_space_before_for_parentheses = true +ij_typescript_space_before_for_semicolon = false +ij_typescript_space_before_function_left_parenth = true +ij_typescript_space_before_generator_mult = false +ij_typescript_space_before_if_left_brace = true +ij_typescript_space_before_if_parentheses = true +ij_typescript_space_before_method_call_parentheses = false +ij_typescript_space_before_method_left_brace = true +ij_typescript_space_before_method_parentheses = false +ij_typescript_space_before_property_colon = false +ij_typescript_space_before_quest = true +ij_typescript_space_before_switch_left_brace = true +ij_typescript_space_before_switch_parentheses = true +ij_typescript_space_before_try_left_brace = true +ij_typescript_space_before_type_colon = false +ij_typescript_space_before_unary_not = false +ij_typescript_space_before_while_keyword = true +ij_typescript_space_before_while_left_brace = true +ij_typescript_space_before_while_parentheses = true +ij_typescript_spaces_around_additive_operators = true +ij_typescript_spaces_around_arrow_function_operator = true +ij_typescript_spaces_around_assignment_operators = true +ij_typescript_spaces_around_bitwise_operators = true +ij_typescript_spaces_around_equality_operators = true +ij_typescript_spaces_around_logical_operators = true +ij_typescript_spaces_around_multiplicative_operators = true +ij_typescript_spaces_around_relational_operators = true +ij_typescript_spaces_around_shift_operators = true +ij_typescript_spaces_around_unary_operator = false +ij_typescript_spaces_within_array_initializer_brackets = false +ij_typescript_spaces_within_brackets = false +ij_typescript_spaces_within_catch_parentheses = false +ij_typescript_spaces_within_for_parentheses = false +ij_typescript_spaces_within_if_parentheses = false +ij_typescript_spaces_within_imports = true +ij_typescript_spaces_within_interpolation_expressions = false +ij_typescript_spaces_within_method_call_parentheses = false +ij_typescript_spaces_within_method_parentheses = false +ij_typescript_spaces_within_object_literal_braces = true +ij_typescript_spaces_within_object_type_braces = true +ij_typescript_spaces_within_parentheses = false +ij_typescript_spaces_within_switch_parentheses = false +ij_typescript_spaces_within_type_assertion = false +ij_typescript_spaces_within_union_types = true +ij_typescript_spaces_within_while_parentheses = false +ij_typescript_special_else_if_treatment = true +ij_typescript_ternary_operation_signs_on_next_line = true +ij_typescript_ternary_operation_wrap = on_every_item +ij_typescript_union_types_wrap = on_every_item +ij_typescript_use_chained_calls_group_indents = false +ij_typescript_use_double_quotes = false +ij_typescript_use_explicit_js_extension = auto +ij_typescript_use_path_mapping = always +ij_typescript_use_public_modifier = false +ij_typescript_use_semicolon_after_statement = true +ij_typescript_var_declaration_wrap = on_every_item +ij_typescript_while_brace_force = always +ij_typescript_while_on_new_line = false +ij_typescript_wrap_comments = false + +[{*.bash,*.sh,*.zsh}] +ij_visual_guides = none +ij_shell_binary_ops_start_line = false +ij_shell_keep_column_alignment_padding = false +ij_shell_minify_program = false +ij_shell_redirect_followed_by_space = false +ij_shell_switch_cases_indented = false + +[{*.cjs,*.es6,*.js,*.mjs,*.jsx}] +indent_size = 2 +tab_width = 2 +ij_continuation_indent_size = 2 +ij_javascript_align_imports = false +ij_javascript_align_multiline_array_initializer_expression = false +ij_javascript_align_multiline_binary_operation = false +ij_javascript_align_multiline_chained_methods = false +ij_javascript_align_multiline_extends_list = false +ij_javascript_align_multiline_for = false +ij_javascript_align_multiline_parameters = false +ij_javascript_align_multiline_parameters_in_calls = false +ij_javascript_align_multiline_ternary_operation = false +ij_javascript_align_object_properties = 0 +ij_javascript_align_union_types = false +ij_javascript_align_var_statements = 0 +ij_javascript_array_initializer_new_line_after_left_brace = true +ij_javascript_array_initializer_right_brace_on_new_line = true +ij_javascript_array_initializer_wrap = on_every_item +ij_javascript_assignment_wrap = off +ij_javascript_binary_operation_sign_on_next_line = false +ij_javascript_binary_operation_wrap = normal +ij_javascript_blacklist_imports = rxjs/Rx,node_modules/**,**/node_modules/**,@angular/material,@angular/material/typings/** +ij_javascript_blank_lines_after_imports = 1 +ij_javascript_blank_lines_around_class = 1 +ij_javascript_blank_lines_around_field = 0 +ij_javascript_blank_lines_around_function = 1 +ij_javascript_blank_lines_around_method = 1 +ij_javascript_block_brace_style = end_of_line +ij_javascript_block_comment_add_space = false +ij_javascript_block_comment_at_first_column = true +ij_javascript_call_parameters_new_line_after_left_paren = false +ij_javascript_call_parameters_right_paren_on_new_line = false +ij_javascript_call_parameters_wrap = normal +ij_javascript_catch_on_new_line = false +ij_javascript_chained_call_dot_on_new_line = false +ij_javascript_class_brace_style = end_of_line +ij_javascript_class_decorator_wrap = split_into_lines +ij_javascript_class_field_decorator_wrap = off +ij_javascript_class_method_decorator_wrap = off +ij_javascript_comma_on_new_line = false +ij_javascript_do_while_brace_force = never +ij_javascript_else_on_new_line = false +ij_javascript_enforce_trailing_comma = whenmultiline +ij_javascript_extends_keyword_wrap = off +ij_javascript_extends_list_wrap = off +ij_javascript_field_prefix = _ +ij_javascript_file_name_style = relaxed +ij_javascript_finally_on_new_line = false +ij_javascript_for_brace_force = never +ij_javascript_for_statement_new_line_after_left_paren = false +ij_javascript_for_statement_right_paren_on_new_line = false +ij_javascript_for_statement_wrap = off +ij_javascript_force_quote_style = true +ij_javascript_force_semicolon_style = true +ij_javascript_function_expression_brace_style = end_of_line +ij_javascript_function_parameter_decorator_wrap = off +ij_javascript_if_brace_force = never +ij_javascript_import_merge_members = global +ij_javascript_import_prefer_absolute_path = global +ij_javascript_import_sort_members = true +ij_javascript_import_sort_module_name = false +ij_javascript_import_use_node_resolution = true +ij_javascript_imports_wrap = on_every_item +ij_javascript_indent_case_from_switch = true +ij_javascript_indent_chained_calls = true +ij_javascript_indent_package_children = 0 +ij_javascript_jsx_attribute_value = braces +ij_javascript_keep_blank_lines_in_code = 1 +ij_javascript_keep_first_column_comment = true +ij_javascript_keep_indents_on_empty_lines = false +ij_javascript_keep_line_breaks = true +ij_javascript_keep_simple_blocks_in_one_line = true +ij_javascript_keep_simple_methods_in_one_line = true +ij_javascript_line_comment_add_space = true +ij_javascript_line_comment_at_first_column = false +ij_javascript_method_brace_style = end_of_line +ij_javascript_method_call_chain_wrap = on_every_item +ij_javascript_method_parameters_new_line_after_left_paren = true +ij_javascript_method_parameters_right_paren_on_new_line = false +ij_javascript_method_parameters_wrap = normal +ij_javascript_object_literal_wrap = on_every_item +ij_javascript_object_types_wrap = on_every_item +ij_javascript_parentheses_expression_new_line_after_left_paren = false +ij_javascript_parentheses_expression_right_paren_on_new_line = false +ij_javascript_place_assignment_sign_on_next_line = false +ij_javascript_prefer_as_type_cast = false +ij_javascript_prefer_explicit_types_function_expression_returns = false +ij_javascript_prefer_explicit_types_function_returns = false +ij_javascript_prefer_explicit_types_vars_fields = false +ij_javascript_prefer_parameters_wrap = false +ij_javascript_property_prefix = +ij_javascript_reformat_c_style_comments = false +ij_javascript_space_after_colon = true +ij_javascript_space_after_comma = true +ij_javascript_space_after_dots_in_rest_parameter = false +ij_javascript_space_after_generator_mult = true +ij_javascript_space_after_property_colon = true +ij_javascript_space_after_quest = true +ij_javascript_space_after_type_colon = true +ij_javascript_space_after_unary_not = false +ij_javascript_space_before_async_arrow_lparen = true +ij_javascript_space_before_catch_keyword = true +ij_javascript_space_before_catch_left_brace = true +ij_javascript_space_before_catch_parentheses = true +ij_javascript_space_before_class_lbrace = true +ij_javascript_space_before_class_left_brace = true +ij_javascript_space_before_colon = true +ij_javascript_space_before_comma = false +ij_javascript_space_before_do_left_brace = true +ij_javascript_space_before_else_keyword = true +ij_javascript_space_before_else_left_brace = true +ij_javascript_space_before_finally_keyword = true +ij_javascript_space_before_finally_left_brace = true +ij_javascript_space_before_for_left_brace = true +ij_javascript_space_before_for_parentheses = true +ij_javascript_space_before_for_semicolon = false +ij_javascript_space_before_function_left_parenth = true +ij_javascript_space_before_generator_mult = true +ij_javascript_space_before_if_left_brace = true +ij_javascript_space_before_if_parentheses = true +ij_javascript_space_before_method_call_parentheses = false +ij_javascript_space_before_method_left_brace = true +ij_javascript_space_before_method_parentheses = true +ij_javascript_space_before_property_colon = false +ij_javascript_space_before_quest = true +ij_javascript_space_before_switch_left_brace = true +ij_javascript_space_before_switch_parentheses = true +ij_javascript_space_before_try_left_brace = true +ij_javascript_space_before_type_colon = false +ij_javascript_space_before_unary_not = false +ij_javascript_space_before_while_keyword = true +ij_javascript_space_before_while_left_brace = true +ij_javascript_space_before_while_parentheses = true +ij_javascript_spaces_around_additive_operators = true +ij_javascript_spaces_around_arrow_function_operator = true +ij_javascript_spaces_around_assignment_operators = true +ij_javascript_spaces_around_bitwise_operators = true +ij_javascript_spaces_around_equality_operators = true +ij_javascript_spaces_around_logical_operators = true +ij_javascript_spaces_around_multiplicative_operators = true +ij_javascript_spaces_around_relational_operators = true +ij_javascript_spaces_around_shift_operators = true +ij_javascript_spaces_around_unary_operator = false +ij_javascript_spaces_within_array_initializer_brackets = false +ij_javascript_spaces_within_brackets = false +ij_javascript_spaces_within_catch_parentheses = false +ij_javascript_spaces_within_for_parentheses = false +ij_javascript_spaces_within_if_parentheses = false +ij_javascript_spaces_within_imports = true +ij_javascript_spaces_within_interpolation_expressions = false +ij_javascript_spaces_within_method_call_parentheses = false +ij_javascript_spaces_within_method_parentheses = false +ij_javascript_spaces_within_object_literal_braces = true +ij_javascript_spaces_within_object_type_braces = true +ij_javascript_spaces_within_parentheses = false +ij_javascript_spaces_within_switch_parentheses = false +ij_javascript_spaces_within_type_assertion = false +ij_javascript_spaces_within_union_types = true +ij_javascript_spaces_within_while_parentheses = false +ij_javascript_special_else_if_treatment = true +ij_javascript_ternary_operation_signs_on_next_line = true +ij_javascript_ternary_operation_wrap = on_every_item +ij_javascript_union_types_wrap = on_every_item +ij_javascript_use_chained_calls_group_indents = false +ij_javascript_use_double_quotes = false +ij_javascript_use_explicit_js_extension = auto +ij_javascript_use_import_type = auto +ij_javascript_use_path_mapping = always +ij_javascript_use_public_modifier = false +ij_javascript_use_semicolon_after_statement = false +ij_javascript_var_declaration_wrap = normal +ij_javascript_while_brace_force = never +ij_javascript_while_on_new_line = false +ij_javascript_wrap_comments = false + +[{*.cjsx,*.coffee}] +ij_continuation_indent_size = 2 +ij_visual_guides = none +ij_coffeescript_align_function_body = false +ij_coffeescript_align_imports = false +ij_coffeescript_align_multiline_array_initializer_expression = true +ij_coffeescript_align_multiline_parameters = true +ij_coffeescript_align_multiline_parameters_in_calls = false +ij_coffeescript_align_object_properties = 0 +ij_coffeescript_align_union_types = false +ij_coffeescript_align_var_statements = 0 +ij_coffeescript_array_initializer_new_line_after_left_brace = false +ij_coffeescript_array_initializer_right_brace_on_new_line = false +ij_coffeescript_array_initializer_wrap = normal +ij_coffeescript_blacklist_imports = rxjs/Rx,node_modules/**,**/node_modules/**,@angular/material,@angular/material/typings/** +ij_coffeescript_blank_lines_around_function = 1 +ij_coffeescript_call_parameters_new_line_after_left_paren = false +ij_coffeescript_call_parameters_right_paren_on_new_line = false +ij_coffeescript_call_parameters_wrap = normal +ij_coffeescript_chained_call_dot_on_new_line = true +ij_coffeescript_comma_on_new_line = false +ij_coffeescript_enforce_trailing_comma = keep +ij_coffeescript_field_prefix = _ +ij_coffeescript_file_name_style = relaxed +ij_coffeescript_force_quote_style = false +ij_coffeescript_force_semicolon_style = false +ij_coffeescript_function_expression_brace_style = end_of_line +ij_coffeescript_import_merge_members = global +ij_coffeescript_import_prefer_absolute_path = global +ij_coffeescript_import_sort_members = true +ij_coffeescript_import_sort_module_name = false +ij_coffeescript_import_use_node_resolution = true +ij_coffeescript_imports_wrap = on_every_item +ij_coffeescript_indent_chained_calls = true +ij_coffeescript_indent_package_children = 0 +ij_coffeescript_jsx_attribute_value = braces +ij_coffeescript_keep_blank_lines_in_code = 2 +ij_coffeescript_keep_first_column_comment = true +ij_coffeescript_keep_indents_on_empty_lines = false +ij_coffeescript_keep_line_breaks = true +ij_coffeescript_keep_simple_methods_in_one_line = false +ij_coffeescript_method_parameters_new_line_after_left_paren = false +ij_coffeescript_method_parameters_right_paren_on_new_line = false +ij_coffeescript_method_parameters_wrap = off +ij_coffeescript_object_literal_wrap = on_every_item +ij_coffeescript_prefer_as_type_cast = false +ij_coffeescript_prefer_explicit_types_function_expression_returns = false +ij_coffeescript_prefer_explicit_types_function_returns = false +ij_coffeescript_prefer_explicit_types_vars_fields = false +ij_coffeescript_reformat_c_style_comments = false +ij_coffeescript_space_after_comma = true +ij_coffeescript_space_after_dots_in_rest_parameter = false +ij_coffeescript_space_after_generator_mult = true +ij_coffeescript_space_after_property_colon = true +ij_coffeescript_space_after_type_colon = true +ij_coffeescript_space_after_unary_not = false +ij_coffeescript_space_before_async_arrow_lparen = true +ij_coffeescript_space_before_class_lbrace = true +ij_coffeescript_space_before_comma = false +ij_coffeescript_space_before_function_left_parenth = true +ij_coffeescript_space_before_generator_mult = false +ij_coffeescript_space_before_property_colon = false +ij_coffeescript_space_before_type_colon = false +ij_coffeescript_space_before_unary_not = false +ij_coffeescript_spaces_around_additive_operators = true +ij_coffeescript_spaces_around_arrow_function_operator = true +ij_coffeescript_spaces_around_assignment_operators = true +ij_coffeescript_spaces_around_bitwise_operators = true +ij_coffeescript_spaces_around_equality_operators = true +ij_coffeescript_spaces_around_logical_operators = true +ij_coffeescript_spaces_around_multiplicative_operators = true +ij_coffeescript_spaces_around_relational_operators = true +ij_coffeescript_spaces_around_shift_operators = true +ij_coffeescript_spaces_around_unary_operator = false +ij_coffeescript_spaces_within_array_initializer_braces = false +ij_coffeescript_spaces_within_array_initializer_brackets = false +ij_coffeescript_spaces_within_imports = false +ij_coffeescript_spaces_within_index_brackets = false +ij_coffeescript_spaces_within_interpolation_expressions = false +ij_coffeescript_spaces_within_method_call_parentheses = false +ij_coffeescript_spaces_within_method_parentheses = false +ij_coffeescript_spaces_within_object_braces = false +ij_coffeescript_spaces_within_object_literal_braces = false +ij_coffeescript_spaces_within_object_type_braces = true +ij_coffeescript_spaces_within_range_brackets = false +ij_coffeescript_spaces_within_type_assertion = false +ij_coffeescript_spaces_within_union_types = true +ij_coffeescript_union_types_wrap = on_every_item +ij_coffeescript_use_chained_calls_group_indents = false +ij_coffeescript_use_double_quotes = true +ij_coffeescript_use_explicit_js_extension = global +ij_coffeescript_use_path_mapping = always +ij_coffeescript_use_public_modifier = false +ij_coffeescript_use_semicolon_after_statement = false +ij_coffeescript_var_declaration_wrap = normal + +[{*.har,*.jsb2,*.jsb3,*.json,.babelrc,.eslintrc,.prettierrc,.stylelintrc,bowerrc,jest.config}] +tab_width = 4 +ij_visual_guides = none +ij_json_keep_blank_lines_in_code = 0 +ij_json_keep_indents_on_empty_lines = false +ij_json_keep_line_breaks = true +ij_json_space_after_colon = true +ij_json_space_after_comma = true +ij_json_space_before_colon = true +ij_json_space_before_comma = false +ij_json_spaces_within_braces = false +ij_json_spaces_within_brackets = false +ij_json_wrap_long_lines = false + +[{*.htm,*.html,*.ng,*.sht,*.shtm,*.shtml}] +indent_size = 2 +tab_width = 2 +ij_continuation_indent_size = 2 +ij_visual_guides = none +ij_html_add_new_line_before_tags = body,div,p,form,h1,h2,h3 +ij_html_align_attributes = true +ij_html_align_text = false +ij_html_attribute_wrap = on_every_item +ij_html_block_comment_at_first_column = true +ij_html_do_not_align_children_of_min_lines = 0 +ij_html_do_not_break_if_inline_tags = title,h1,h2,h3,h4,h5,h6,p +ij_html_do_not_indent_children_of_tags = +ij_html_enforce_quotes = false +ij_html_inline_tags = a,abbr,acronym,b,basefont,bdo,big,br,cite,cite,code,dfn,em,font,i,img,input,kbd,label,q,s,samp,select,small,span,strike,strong,sub,sup,textarea,tt,u,var +ij_html_keep_blank_lines = 1 +ij_html_keep_indents_on_empty_lines = false +ij_html_keep_line_breaks = true +ij_html_keep_line_breaks_in_text = true +ij_html_keep_whitespaces = false +ij_html_keep_whitespaces_inside = span,pre,textarea +ij_html_line_comment_at_first_column = true +ij_html_new_line_after_last_attribute = when_multiline +ij_html_new_line_before_first_attribute = when_multiline +ij_html_quote_style = double +ij_html_remove_new_line_before_tags = br +ij_html_space_after_tag_name = false +ij_html_space_around_equality_in_attribute = false +ij_html_space_inside_empty_tag = false +ij_html_text_wrap = off +ij_html_uniform_ident = false + +[{*.jade,*.pug}] +indent_size = 4 +tab_width = 4 +ij_visual_guides = none + +[{*.markdown,*.md}] +indent_size = 2 +tab_width = 2 +ij_continuation_indent_size = 2 +ij_visual_guides = none +ij_markdown_force_one_space_after_blockquote_symbol = true +ij_markdown_force_one_space_after_header_symbol = true +ij_markdown_force_one_space_after_list_bullet = true +ij_markdown_force_one_space_between_words = true +ij_markdown_keep_indents_on_empty_lines = false +ij_markdown_max_lines_around_block_elements = 1 +ij_markdown_max_lines_around_header = 1 +ij_markdown_max_lines_between_paragraphs = 1 +ij_markdown_min_lines_around_block_elements = 1 +ij_markdown_min_lines_around_header = 1 +ij_markdown_min_lines_between_paragraphs = 1 -[*.md] -max_line_length = off -trim_trailing_whitespace = false +[{*.yaml,*.yml}] +ij_visual_guides = none +ij_yaml_align_values_properties = do_not_align +ij_yaml_autoinsert_sequence_marker = true +ij_yaml_block_mapping_on_new_line = false +ij_yaml_indent_sequence_value = true +ij_yaml_keep_indents_on_empty_lines = false +ij_yaml_keep_line_breaks = true +ij_yaml_sequence_on_new_line = false +ij_yaml_space_before_colon = false +ij_yaml_spaces_within_braces = true +ij_yaml_spaces_within_brackets = true diff --git a/.env b/.env deleted file mode 100644 index b30889fdb059..000000000000 --- a/.env +++ /dev/null @@ -1,5 +0,0 @@ -PORT=3000 -CHOKIDAR_USEPOLLING=true -BROWSER=none -GENERATE_SOURCEMAP=false -WDS_SOCKET_PORT=3000 diff --git a/.eslintrc.cjs b/.eslintrc.cjs deleted file mode 100644 index 1b849791174c..000000000000 --- a/.eslintrc.cjs +++ /dev/null @@ -1,43 +0,0 @@ -module.exports = { - env: { - browser: true, - es6: true, - node: true, - }, - parserOptions: { - ecmaVersion: 'latest', - sourceType: 'module', - ecmaFeatures: { - jsx: true, - }, - }, - settings: { - react: { - version: 'detect', - }, - 'import/resolver': { - // added for `import {component} from 'src/component' style imports` - 'eslint-import-resolver-custom-alias': { - alias: { - src: './src', - }, - extensions: ['.js', '.jsx', '.json'], - }, - }, - }, - extends: [ - 'eslint:recommended', - 'plugin:import/recommended', - 'plugin:react/recommended', - 'plugin:react/jsx-runtime', - 'plugin:react-hooks/recommended', - 'plugin:prettier/recommended', - ], - plugins: ['react-hooks', 'import'], - rules: { - 'no-unused-vars': 'off', - 'react/prop-types': 'warn', - // this rule is annoying on strings with quotes in them - 'react/no-unescaped-entities': 'off', - }, -} diff --git a/.gitattributes b/.gitattributes index 205021e49dd1..fbd75d33c401 100644 --- a/.gitattributes +++ b/.gitattributes @@ -1,2 +1 @@ -# Enforce Unix newlines -* text=auto eol=lf +* text=lf \ No newline at end of file diff --git a/.github/ISSUE_TEMPLATE/CLA.yml b/.github/ISSUE_TEMPLATE/CLA.yml deleted file mode 100644 index c2180bb38d05..000000000000 --- a/.github/ISSUE_TEMPLATE/CLA.yml +++ /dev/null @@ -1,54 +0,0 @@ -name: CLA - Contributor License Agreement -description: Sign the CLA for CIPP and CIPP-API -labels: [CLA] - -body: -- type: markdown - attributes: - value: > - CONTRIBUTOR LICENSE AGREEMENT ("Agreement") - - Version 1.0 - - 1. Definitions - - "Contribution" means any original work of authorship, including any modifications or additions to an existing work, that is intentionally submitted by You to Kelvin Tegelaar for inclusion in, or documentation of, any of the products owned or managed by Kelvin Tegelaar (the "Work"). For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to Kelvin Tegelaar or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, Kelvin Tegelaar for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by You as "Not a Contribution." - - "You" (or "Your") means the copyright owner or legal entity authorized by the copyright owner that is making this Agreement with Kelvin Tegelaar. For legal entities, the entity making a Contribution and all other entities that control, are controlled by, or are under common control with that entity are considered to be a single contributor. This Agreement applies both to future Contributions and Contributions made prior to the date of this Agreement. - - 2. Grant of Copyright License - - Subject to the terms and conditions of this Agreement, You hereby grant to Kelvin Tegelaar and to recipients of software distributed by Kelvin Tegelaar a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Your Contributions and such derivative works for the purpose of dual licensing the application. - - 3. Grant of Patent License - - You grant Kelvin Tegelaar, and those who receive the Contribution directly or indirectly from Kelvin Tegelaar, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license under Your patent claims that are necessarily infringed by the Contribution or the combination of the Contribution with the Project to which it was submitted, to make, have made, use, offer to sell, sell, import, and otherwise dispose of the Contribution alone or with the Project. - - 4. Other Rights Reserved - - Each party reserves all rights not expressly granted in this Agreement. No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are granted by implication, exhaustion, estoppel, or otherwise. - - You are not expected to provide support for your Contributions, except to the extent you desire to provide - support. You may provide support for free, for a fee, or not at all. Unless required by applicable law or agreed to in - writing, you provide your Contributions on an “AS IS” BASIS, WITHOUT WARRANTIES OR CONDITIONS OF - ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES - OR CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A - PARTICULAR PURPOSE. - - 5. Representations - - You represent that you are legally entitled to grant the above licenses. If your employer(s) has rights to intellectual property that you create, you represent that you have received permission to make Contributions on behalf of that employer, or that your employer has waived such rights for your Contributions to Kelvin Tegelaar. - - You represent that each of Your Contributions is Your original creation. You represent that Your Contribution submissions include complete details of any third-party license or other restriction (including, but not limited to, related patents and trademarks) of which you are personally aware and which are associated with any part of Your Contributions. - - 6. Project Sale - - In the event that the Project is sold or otherwise transferred in ownership in its entirety to a third party, a sum equivalent to fifteen percent (15%) of the total sale price or value of the consideration received shall be set aside. This sum shall be divided amongst all Contributors who have entered into this Agreement, with each Contributor receiving a portion proportional to the relative quantity and significance of their Contributions to the Project, as determined by Kelvin Tegelaar. The method and timeframe of the distribution shall be at the discretion of Kelvin Tegelaar and shall be communicated - -- type: textarea - attributes: - label: Description - description: > - Type "I Agree" in the text area. - validations: - required: true diff --git a/.github/ISSUE_TEMPLATE/bug.yml b/.github/ISSUE_TEMPLATE/bug.yml index 1e0e6afd8faa..db613f4551c2 100644 --- a/.github/ISSUE_TEMPLATE/bug.yml +++ b/.github/ISSUE_TEMPLATE/bug.yml @@ -1,42 +1,92 @@ -name: 🐞 Bug report -description: Report errors or unexpected behaviors for CIPP and CIPP-API -labels: [unconfirmed-by-user , bug] +name: "🐞 Bug report" +description: "Report errors or unexpected behaviors for CIPP and CIPP-API" +title: "[Bug]: " +labels: + - "unconfirmed-by-user" + - "bug" body: -- type: markdown - attributes: - value: > - Thanks for reporting. - - - Make sure you are able to reproduce this issue on the latest released version of CIPP & CIPP-API. - - - Please search the existing issues to see if there has been a similar issue filed - - - This is not the location for support. Issues that request support or are not a bug will be closed. -- type: textarea - attributes: - label: Description - description: > - Please describe the issue and expected result. You can include a screenshot by pasting it. Issues with a description that is too short or does not explain each step in detail will be closed. - - Example: - - 1.) go to Settings - 2.) Click on a tenant in access check - 3.) Click on the green pixel in the bottom right corner - 4.) A bug appears. - validations: - required: true -- type: textarea - attributes: - label: Environment data - description: > - Please let us know your environment information. This must follow this format or the ticket will be closed: - Sponsored / Non-sponsored instance - Front end version number: - Back end version number: - Tried Tenant Cache Clear: true/false - Tried Token Cache Clear: true/false - render: PowerShell - validations: - required: true + - type: markdown + attributes: + value: | + **Thank you for taking the time to report a potential bug for CIPP and CIPP-API!** + + Please follow the instructions below and provide as much detail as possible to help us understand and reproduce the issue. + + - type: checkboxes + id: confirmations + attributes: + label: "Required confirmations before submitting" + description: "Please check all boxes that apply." + options: + - label: "**I can reproduce this issue on the latest released versions** of both CIPP and CIPP-API." + required: true + - label: "**I have searched existing issues** (both open and closed) to avoid duplicates." + required: true + - label: "I am **not** requesting general support; this is an actual bug report." + required: true + + # 3) Description / Steps to reproduce + - type: textarea + id: description + attributes: + label: "Issue Description" + description: | + **Describe the issue clearly and provide step-by-step instructions to reproduce it.** + Screenshots can be attached by pasting them here. + + Example steps to reproduce: + 1. Go to **Settings** + 2. Click on a tenant in **Access Check** + 3. Click on the green pixel in the bottom-right corner + 4. Observe the unexpected behavior + validations: + required: true + + # 4) Environment type (Sponsored vs. Non-sponsored) + - type: dropdown + id: environment_type + attributes: + label: "Environment Type" + description: "Select whether you are using currently a paying user of the product, or if you are utilizing the free version" + options: + - "Sponsored (paying) user" + - "Non-sponsored user" + validations: + required: true + + # 5) Front End / Back End versions + - type: input + id: front_end_version + attributes: + label: "Front End Version" + description: "Please specify the front end version number (e.g., v1.2.3)." + validations: + required: true + + - type: input + id: back_end_version + attributes: + label: "Back End Version" + description: "Please specify the back end version number (e.g., v1.2.3)." + validations: + required: true + + # 7) Additional logs or trace (optional) + - type: textarea + id: logs + attributes: + label: "Relevant Logs / Stack Trace" + description: | + If available, please share any relevant logs or stack trace data. + Remove or redact any sensitive info before posting. + render: plaintext + validations: + required: false + + # 8) Closing note + - type: markdown + attributes: + value: | + Thank you for your submission! A maintainer will review your report. + Please watch the issue for follow-up questions or status updates. diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml new file mode 100644 index 000000000000..9fa384883c3b --- /dev/null +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -0,0 +1,9 @@ +blank_issues_enabled: false +contact_links: + - name: Security Reports + url: https://github.com/KelvinTegelaar/CIPP/security/advisories + about: Please report security vulnerabilities here. + - name: Community Discord + url: https://discord.gg/cyberdrain + about: Join our discord community here. + diff --git a/.github/ISSUE_TEMPLATE/feature.yml b/.github/ISSUE_TEMPLATE/feature.yml index de839daf7a30..4978afebd026 100644 --- a/.github/ISSUE_TEMPLATE/feature.yml +++ b/.github/ISSUE_TEMPLATE/feature.yml @@ -1,32 +1,84 @@ -name: ✨ Feature request -description: Suggest a new feature or improvement -title: '[Feature Request]: ' -labels: [enhancement, no-priority] +name: "✨ Feature request" +description: "Suggest a new feature or improvement" +title: "[Feature Request]: " +labels: + - "enhancement" + - "no-priority" body: -- type: markdown - attributes: - value: > - Thanks for suggesting a feature! - - - Please search the existing feature request to see if there has been a similar issue filed. - - - If a feature has been filed before, but not followed up by a contributor, you can develop the feature yourself by checking the development documentation [here](https://docs.cipp.app/dev-documentation/cipp-dev-guide/setting-up-for-local-development). - - - Repeat feature requests are allowed if the previous request has been closed for more than 30 days - - - drive-by feature requests without effort will be closed. - - - A feature request has 14 days to be fullfilled before automatically being closed. if you want to work on the feature yourself use the phrase "I'd like to work on this please!" - - - Feature requests that are detrimental to security will also be closed without notice. -- type: textarea - attributes: - label: Description of the new feature - must be an in-depth explanation of the feature you want, reasoning why, and the added benefits for MSPs as a whole. - validations: - required: true -- type: textarea - attributes: - label: PowerShell commands you would normally use to achieve above request - validations: - required: false + # Introductory Markdown + - type: markdown + attributes: + value: | + **Thank you for suggesting a new feature or improvement for CIPP** + + Before creating a request, please: + + 1. Check that you have an active sponsorship, only users that are sponsoring CIPP at the $99,- sponsorship level can create feature requests. + 1. Search existing **open and closed** feature requests to avoid duplicates. + 2. Note that **repeat feature requests** are permitted if a previous request was closed more than 30 days ago. + 3. Consider implementing the feature yourself by reviewing the [development documentation](https://docs.cipp.app/dev-documentation/cipp-dev-guide/setting-up-for-local-development). + 4. Feature requests that lack sufficient detail or feasibility may be closed at any time. + 5. **This request will auto-close in 14 days** if no meaningful progress or collaboration occurs. + 6. If you would like to work on this feature, comment `"I'd like to work on this please!"` + 7. Any request that is detrimental to security or the product’s stability will be closed without notice. + + # Checkboxes for Confirmations + - type: checkboxes + id: confirmations + attributes: + label: "Please confirm:" + description: "Check all boxes that apply." + options: + - label: "**I have searched existing feature requests** (open and closed) and found no duplicates." + required: true + - label: "**me or my organization is currently an active sponsor of the product at the $99,- level." + required: true + + - type: textarea + id: problem-statement + attributes: + label: "Problem Statement" + description: | + **What problem does this feature solve or what gap does it fill?** + Provide a concise explanation. For example: + - "When I need to enable MFA for all users, it takes a lot of time to do it per user. I'd like to enable this for all users in button press" + - "To update a user property for exchange I need to go through 5 portals and 2 systems to be able to make a change." + validations: + required: true + + # Field 2: Benefits for MSPs + - type: textarea + id: msp-benefits + attributes: + label: "Benefits for MSPs" + description: | + **How would this feature help MSPs in their day-to-day tasks or overall operations?** + - Does it reduce manual work? + - Does it improve security or scalability? + - Does it offer clarity or automation to commonly repeated tasks? + validations: + required: true + + # Field 3: Value or Importance + - type: textarea + id: feature-value + attributes: + label: "Value or Importance" + description: | + **Why is this feature particularly valuable or important to add?** + - If it's critical, explain why. + - If it's optional or nice-to-have, describe how it still adds notable value. + validations: + required: true + + # Optional field for PowerShell commands + - type: textarea + id: powershell-commands + attributes: + label: "PowerShell Commands (Optional)" + description: | + If you currently achieve this functionality or a similar workaround using PowerShell, please share your scripts or snippets here. + This information helps contributors understand the existing workflow and aids in development. + validations: + required: false diff --git a/.github/agents/CIPP-Alert-Agent.md b/.github/agents/CIPP-Alert-Agent.md new file mode 100644 index 000000000000..6b29ec142fed --- /dev/null +++ b/.github/agents/CIPP-Alert-Agent.md @@ -0,0 +1,45 @@ +--- +name: CIPP Frontend Alert Registrar +description: > + Adds new alert entries to src/data/alerts.json in the CIPP frontend. + The agent must never modify any other file or perform any other change. +--- + +# CIPP Frontend Alert Registrar + +## Mission + +You are a **frontend alert registrar** responsible for updating the `src/data/alerts.json` file to include new alerts. + +Your role is **strictly limited** to adding a new JSON entry describing the alert’s metadata. +You do not touch or inspect any other part of the codebase. + +--- + +## Scope of Work + +This agent is used when a new alert must be surfaced to the frontend — for example, after a new backend `Get-CIPPAlert*.ps1` alert has been added. + +Tasks include: + +- Opening `src/data/alerts.json` +- Appending one new JSON object describing the new alert +- Preserving JSON structure, indentation, and trailing commas exactly as in the existing file +- Validating that the resulting JSON is syntactically correct + + +## Alert Format + +Each alert entry in `src/data/alerts.json` is a JSON object with the following structure: + +```json +{ + "name": "", + "label": "A nice label for the alert", + "requiresInput": true, + "inputType": "switch", + "inputLabel": "Exclude disabled users?", + "inputName": "InactiveLicensedUsersExcludeDisabled", + "recommendedRunInterval": "1d" +} +``` diff --git a/.github/agents/CIPP-Frontend-Alert-Agent.md b/.github/agents/CIPP-Frontend-Alert-Agent.md new file mode 100644 index 000000000000..6b29ec142fed --- /dev/null +++ b/.github/agents/CIPP-Frontend-Alert-Agent.md @@ -0,0 +1,45 @@ +--- +name: CIPP Frontend Alert Registrar +description: > + Adds new alert entries to src/data/alerts.json in the CIPP frontend. + The agent must never modify any other file or perform any other change. +--- + +# CIPP Frontend Alert Registrar + +## Mission + +You are a **frontend alert registrar** responsible for updating the `src/data/alerts.json` file to include new alerts. + +Your role is **strictly limited** to adding a new JSON entry describing the alert’s metadata. +You do not touch or inspect any other part of the codebase. + +--- + +## Scope of Work + +This agent is used when a new alert must be surfaced to the frontend — for example, after a new backend `Get-CIPPAlert*.ps1` alert has been added. + +Tasks include: + +- Opening `src/data/alerts.json` +- Appending one new JSON object describing the new alert +- Preserving JSON structure, indentation, and trailing commas exactly as in the existing file +- Validating that the resulting JSON is syntactically correct + + +## Alert Format + +Each alert entry in `src/data/alerts.json` is a JSON object with the following structure: + +```json +{ + "name": "", + "label": "A nice label for the alert", + "requiresInput": true, + "inputType": "switch", + "inputLabel": "Exclude disabled users?", + "inputName": "InactiveLicensedUsersExcludeDisabled", + "recommendedRunInterval": "1d" +} +``` diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md new file mode 100644 index 000000000000..faf864265ea9 --- /dev/null +++ b/.github/copilot-instructions.md @@ -0,0 +1,40 @@ +## Commit messages + +Generate all commit messages in **Conventional Commits** format: + +``` +(): + +[optional body] + +[optional footer(s)] +``` + +**Rules:** + +- **Type** is required and must be one of: + - `feat` — a new feature + - `fix` — a bug fix + - `docs` — documentation only + - `style` — formatting, whitespace, no code-behavior change + - `refactor` — code change that neither fixes a bug nor adds a feature + - `perf` — a performance improvement + - `test` — adding or correcting tests + - `build` — build system or dependency changes + - `ci` — CI/CD configuration changes + - `chore` — routine maintenance, no production code change + - `revert` — reverts a previous commit +- **Scope** is optional and given in parentheses after the type (e.g. `feat(identity):`). Use a short, lowercase area name when it adds clarity. +- **Description** is a short, imperative-mood summary ("add", not "added"/"adds"), lowercase, no trailing period, ideally ≤ 72 characters. +- **Body** (optional) explains the *what* and *why*, not the *how*. Separate it from the description with one blank line. +- **Breaking changes** are indicated with a `!` before the colon (e.g. `feat!:`) and/or a `BREAKING CHANGE:` footer describing the change. +- Reference issues/PRs in the footer where relevant (e.g. `Closes #123`). + +**Examples:** + +``` +feat(identity): add bulk user offboarding endpoint +fix(graph): handle expired token on retry +docs: update authentication model overview +refactor(standards)!: rename remediation parameter +``` diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000000..d6c9564cdd27 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,17 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "npm" # See documentation for possible values + directory: "/" # Location of package manifests + schedule: + interval: "weekly" + target-branch: "dev" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + target-branch: "dev" diff --git a/.github/scripts/validate-json.mjs b/.github/scripts/validate-json.mjs new file mode 100644 index 000000000000..0f626b1c4ba1 --- /dev/null +++ b/.github/scripts/validate-json.mjs @@ -0,0 +1,71 @@ +import { readFile, readdir, writeFile, appendFile } from "node:fs/promises"; +import path from "node:path"; + +// Usage: node validate-json.mjs [--strip ] [dir...] +// --strip removes a leading path prefix from reported filenames, so a PR checked +// out into a subdirectory still reports repo-relative paths. +const argv = process.argv.slice(2); +let strip = ""; +const roots = []; +for (let i = 0; i < argv.length; i++) { + if (argv[i] === "--strip") { + strip = argv[++i] ?? ""; + } else { + roots.push(argv[i]); + } +} + +async function collect(dir) { + let entries; + try { + entries = await readdir(dir, { withFileTypes: true }); + } catch (error) { + if (error.code === "ENOENT") return []; + throw error; + } + const files = []; + for (const entry of entries) { + const full = path.join(dir, entry.name); + if (entry.isDirectory()) { + if (entry.name === "node_modules") continue; + files.push(...(await collect(full))); + } else if (entry.name.endsWith(".json")) { + files.push(full); + } + } + return files; +} + +const report = (file) => { + const normalised = file.split(path.sep).join("/"); + return strip && normalised.startsWith(strip) ? normalised.slice(strip.length) : normalised; +}; + +const failures = []; +let checked = 0; + +for (const root of roots) { + for (const file of await collect(root)) { + checked++; + const contents = await readFile(file, "utf8"); + try { + JSON.parse(contents); + } catch (error) { + failures.push({ file: report(file), message: error.message.replace(/\r?\n/g, " ") }); + } + } +} + +for (const { file, message } of failures) { + // Annotate the PR diff via a GitHub Actions error command. + console.log(`::error file=${file}::${message}`); +} +console.log(`Checked ${checked} JSON file(s), ${failures.length} invalid.`); + +// Hand the results to the workflow so it can comment on the PR. +if (process.env.GITHUB_OUTPUT) { + await appendFile(process.env.GITHUB_OUTPUT, `invalid_count=${failures.length}\n`); +} +await writeFile("json-validation-results.json", JSON.stringify(failures, null, 2)); + +process.exit(failures.length > 0 ? 1 : 0); diff --git a/.github/workflows/Assign_Issue_Volunteer.yml b/.github/workflows/Assign_Issue_Volunteer.yml index 08f1e82701d0..d320a5be96c1 100644 --- a/.github/workflows/Assign_Issue_Volunteer.yml +++ b/.github/workflows/Assign_Issue_Volunteer.yml @@ -1,10 +1,12 @@ --- -name: 'Assign Issue to Volunteer' -on: [issue_comment] # yamllint disable-line rule:truthy +name: "Issue volunteer assignment" +on: + issue_comment: + types: [created] jobs: - build: - runs-on: ubuntu-latest + volunteer: + runs-on: ubuntu-slim steps: - - uses: bhermann/issue-volunteer@v0.1.12 + - uses: kris6673/issue-volunteer@v0.2.0 with: - GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}' + GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" diff --git a/.github/workflows/Check_for_Version_Update.yml b/.github/workflows/Check_for_Version_Update.yml index ec6f3e68769b..de9156a94582 100644 --- a/.github/workflows/Check_for_Version_Update.yml +++ b/.github/workflows/Check_for_Version_Update.yml @@ -7,17 +7,17 @@ on: jobs: build: if: github.repository_owner == 'KelvinTegelaar' - name: 'Check for Version Update' - runs-on: ubuntu-latest + name: "Check for Version Update" + runs-on: ubuntu-slim steps: - name: Check for Changed Files - uses: brettcannon/check-for-changed-files@v1.1.0 + uses: brettcannon/check-for-changed-files@v1.2.1 with: - file-pattern: version_latest.txt - failure-message: 'You have not updated version_latest.txt. This is a required file to update at each PR. Please sync your latest changes and update the version number.' + file-pattern: public/version.json + failure-message: "You have not updated version.json. This is a required file to update at each PR. Please sync your latest changes and update the version number." - name: Prevent changes to workflow files uses: DovnarAlexander/github-action-file-detection@v0.3.0 with: - wildcard: '.github/workflows/*.yml' + wildcard: ".github/workflows/*.yml" exit_code_found: 1 exit_code_not_found: 0 diff --git a/.github/workflows/Close_Stale_Issues.yml b/.github/workflows/Close_Stale_Issues.yml new file mode 100644 index 000000000000..ec88789e827d --- /dev/null +++ b/.github/workflows/Close_Stale_Issues.yml @@ -0,0 +1,20 @@ +--- +name: "Close stale issues" +on: + schedule: + - cron: "30 1 * * *" +jobs: + stale: + if: github.repository_owner == 'KelvinTegelaar' + runs-on: ubuntu-slim + steps: + - uses: actions/stale@v10 + with: + stale-issue-message: "This issue is stale because it has been open for 10 days with no activity. Please do not bump feature requests unless you are actively working on them, as bumps interfere with our triage process and make it harder to maintain a current list of feature requests. If you want this feature implemented, you can contribute it yourself; see https://docs.cipp.app/dev-documentation/contributing-to-the-code. Please notify the team if you are working on this." + close-issue-message: "This issue was closed because it has been stalled for 14 days without activity. We auto-close inactive feature requests to keep the backlog focused and actionable. If this request is still needed, you may submit it again after 30 days." + stale-issue-label: "no-activity" + exempt-issue-labels: "planned,bug,roadmap" + days-before-stale: 9 + days-before-close: 5 + days-before-pr-stale: -1 + days-before-pr-close: -1 diff --git a/.github/workflows/Close_Stale_Issues_and_PRs.yml b/.github/workflows/Close_Stale_Issues_and_PRs.yml deleted file mode 100644 index 41dc1be235d7..000000000000 --- a/.github/workflows/Close_Stale_Issues_and_PRs.yml +++ /dev/null @@ -1,18 +0,0 @@ ---- -name: 'Close stale issues and PRs' -on: - schedule: - - cron: '30 1 * * *' -jobs: - stale: - if: github.repository_owner == 'KelvinTegelaar' - runs-on: ubuntu-latest - steps: - - uses: actions/stale@v4 - with: - stale-issue-message: 'This issue is stale because it has been open 10 days with no activity. We will close this issue soon. If you want this feature implemented you can contribute it. See: https://docs.cipp.app/dev-documentation/contributing-to-the-code . Please notify the team if you are working on this yourself.' - close-issue-message: 'This issue was closed because it has been stalled for 14 days with no activity.' - stale-issue-label: 'no-activity' - exempt-issue-labels: 'planned' - days-before-stale: 9 - days-before-close: 14 diff --git a/.github/workflows/CodeQL_Analyser.yml b/.github/workflows/CodeQL_Analyser.yml index 043426a1d69f..027a7d589437 100644 --- a/.github/workflows/CodeQL_Analyser.yml +++ b/.github/workflows/CodeQL_Analyser.yml @@ -1,10 +1,14 @@ ---- -name: 'CodeQL' +# OPTIONAL UPGRADE to the existing CodeQL_Analyser.yml (already deployed in CIPP). +# Changes vs. current: adds push trigger on main/dev, security-extended query suite, +# and javascript-typescript language alias. +name: "CodeQL" on: + push: + branches: [main, dev] pull_request: branches: [master, main, dev, react] schedule: - - cron: '26 17 * * 0' + - cron: "26 17 * * 0" jobs: analyze: if: github.repository_owner == 'KelvinTegelaar' @@ -17,15 +21,16 @@ jobs: strategy: fail-fast: false matrix: - language: ['javascript'] + language: ["javascript-typescript"] steps: - name: Checkout Repository - uses: actions/checkout@v2 + uses: actions/checkout@v6 - name: Initialize CodeQL - uses: github/codeql-action/init@v1 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} + queries: security-extended - name: Autobuild - uses: github/codeql-action/autobuild@v1 + uses: github/codeql-action/autobuild@v4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v1 + uses: github/codeql-action/analyze@v4 diff --git a/.github/workflows/Comment_on_Issues.yml b/.github/workflows/Comment_on_Issues.yml index 38e9a5405a28..6a6014f38dcd 100644 --- a/.github/workflows/Comment_on_Issues.yml +++ b/.github/workflows/Comment_on_Issues.yml @@ -7,24 +7,16 @@ on: jobs: add-comment_bug: if: github.repository_owner == 'KelvinTegelaar' && github.event.label.name == 'unconfirmed-by-user' - runs-on: ubuntu-latest + runs-on: ubuntu-slim permissions: issues: write steps: - name: Add Comment - uses: peter-evans/create-or-update-comment@v3 + uses: peter-evans/create-or-update-comment@v5 with: issue-number: ${{ github.event.issue.number }} body: | - Thank you for creating a bug. Please make sure your bug is indeed a unique case by checking current and past issues, and reading the complete documentation at https://docs.cipp.app/ - If your bug is a known documentation issue, it will be closed without notice by a contributor. To confirm that this is not a bug found in the documentation, please copy and paste the following comment: "I confirm that I have checked the documentation thoroughly and believe this to be an actual bug." + Thank you for reporting a potential bug. If you would like to work on this bug, please comment: + > I would like to work on this please! - Without confirming, your report will be closed in 24 hours. If you'd like this bug to be assigned to you, please comment "I would like to work on this please!". - add-comment_fr: - if: github.repository_owner == 'KelvinTegelaar' && github.event.label.name == 'enhancement' - runs-on: ubuntu-latest - permissions: - issues: write - steps: - - name: Add Comment - uses: peter-evans/create-or-update@v3 + Thank you for helping us maintain the project! diff --git a/.github/workflows/Conventional_Commits.yml b/.github/workflows/Conventional_Commits.yml new file mode 100644 index 000000000000..a5a669b02e55 --- /dev/null +++ b/.github/workflows/Conventional_Commits.yml @@ -0,0 +1,65 @@ +name: Conventional Commits Check + +on: + # Using pull_request_target instead of pull_request for secure handling of fork PRs + pull_request_target: + # Re-run on title edits so a corrected title clears the check + types: [opened, synchronize, reopened, edited] + # Only check PRs targeting the dev branch + branches: + - dev + +permissions: + pull-requests: write + issues: write + +jobs: + conventional-commits: + name: Validate Conventional Commits + runs-on: ubuntu-slim + steps: + - name: Validate PR title + uses: actions/github-script@v9 + with: + github-token: ${{ secrets.GITHUB_TOKEN }} + script: | + const title = context.payload.pull_request.title || ''; + const pattern = /^(feat|fix|docs|style|refactor|perf|test|chore|ci|build|revert)(\(.+\))?!?: .+/i; + + if (pattern.test(title)) { + console.log(`✓ PR title follows Conventional Commits format: "${title}"`); + return; + } + + console.log(`❌ PR title does not follow Conventional Commits format: "${title}"`); + + const message = [ + '❌ **This PR title does not follow the [Conventional Commits](https://www.conventionalcommits.org/) format.**', + '', + 'Expected format: `type(scope)?: description`', + '', + 'Allowed types: `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `chore`, `ci`, `build`, `revert`', + '', + 'Examples:', + '- `feat: add tenant filter to the user table`', + '- `fix(auth): handle expired refresh tokens`', + '- `docs: update self-hosting guide`', + '', + `Received: \`${title}\``, + '', + '🔒 This PR has been automatically closed. Please update the title to match the format above and reopen the PR.' + ].join('\n'); + + await github.rest.issues.createComment({ + ...context.repo, + issue_number: context.issue.number, + body: message + }); + + await github.rest.pulls.update({ + ...context.repo, + pull_number: context.issue.number, + state: 'closed' + }); + + core.setFailed(`PR title does not follow Conventional Commits format: "${title}"`); diff --git a/.github/workflows/Label_Issues.yml b/.github/workflows/Label_Issues.yml index a0ec41e47894..cc0032ee08e8 100644 --- a/.github/workflows/Label_Issues.yml +++ b/.github/workflows/Label_Issues.yml @@ -7,23 +7,23 @@ on: jobs: label_issues_bugs: if: github.repository_owner == 'KelvinTegelaar' && contains(github.event.issue.title, 'Bug') - runs-on: ubuntu-latest + runs-on: ubuntu-slim permissions: issues: write steps: - name: Label Issues - uses: andymckay/labeler@5c59dabdfd4dd5bd9c6e6d255b01b9d764af4414 + uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 with: - add-labels: 'unconfirmed-by-user' + add-labels: "not-assigned" repo-token: ${{ secrets.GITHUB_TOKEN }} label_issues_frs: if: github.repository_owner == 'KelvinTegelaar' && contains(github.event.issue.title, 'Feature') - runs-on: ubuntu-latest + runs-on: ubuntu-slim permissions: issues: write steps: - name: Label Issues - uses: andymckay/labeler@5c59dabdfd4dd5bd9c6e6d255b01b9d764af4414 + uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 with: - add-labels: 'enhancement, no-priority' + add-labels: "enhancement, not-assigned" repo-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/Node_Project_Check.yml b/.github/workflows/Node_Project_Check.yml index b135c589ea7b..1d675b9fed7c 100644 --- a/.github/workflows/Node_Project_Check.yml +++ b/.github/workflows/Node_Project_Check.yml @@ -15,12 +15,12 @@ jobs: runs-on: ubuntu-latest strategy: matrix: - node-version: [16.x] + node-version: ["22.13.0"] os: [ubuntu-latest] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v6 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v2 + uses: actions/setup-node@v7.0.0 with: node-version: ${{ matrix.node-version }} - name: Install and Build Test diff --git a/.github/workflows/Validate_JSON.yml b/.github/workflows/Validate_JSON.yml new file mode 100644 index 000000000000..9db12dd5dc03 --- /dev/null +++ b/.github/workflows/Validate_JSON.yml @@ -0,0 +1,117 @@ +--- +name: Validate JSON +on: + # pull_request_target (not pull_request) so the token can comment on fork PRs. + # The PR's own code is never executed: it is checked out into ./pr as data only, + # and parsed by the validator script from the trusted base checkout. + pull_request_target: + types: [opened, synchronize, reopened] + branches: + - main + - dev + paths: + - "public/**/*.json" + - "src/data/**/*.json" + - ".github/workflows/Validate_JSON.yml" + - ".github/scripts/validate-json.mjs" + push: + branches: + - dev + paths: + - "public/**/*.json" + - "src/data/**/*.json" + - ".github/workflows/Validate_JSON.yml" + - ".github/scripts/validate-json.mjs" +concurrency: + group: ${{ github.workflow }}-${{ github.event_name == 'pull_request_target' && github.event.pull_request.number || github.ref }} + cancel-in-progress: true +permissions: + contents: read + pull-requests: write +jobs: + validate: + name: Parse JSON in public and src/data + runs-on: ubuntu-latest + steps: + - name: Checkout base (trusted validator script) + uses: actions/checkout@v6 + + - name: Checkout PR head (untrusted, data only) + if: github.event_name == 'pull_request_target' + uses: actions/checkout@v6 + with: + repository: ${{ github.event.pull_request.head.repo.full_name }} + ref: ${{ github.event.pull_request.head.sha }} + path: pr + persist-credentials: false + + - name: Validate JSON files + id: validate + continue-on-error: true + env: + ROOT: ${{ github.event_name == 'pull_request_target' && 'pr/' || '' }} + run: node .github/scripts/validate-json.mjs --strip "$ROOT" "${ROOT}public" "${ROOT}src/data" + + - name: Comment on PR + if: github.event_name == 'pull_request_target' + uses: actions/github-script@v9 + with: + github-token: ${{ secrets.GITHUB_TOKEN }} + script: | + const fs = require('fs'); + const marker = ''; + const resultsFile = 'json-validation-results.json'; + if (!fs.existsSync(resultsFile)) { + // The validator crashed before reporting; let its own error stand. + core.warning('No validation results found — skipping PR comment.'); + return; + } + const failures = JSON.parse(fs.readFileSync(resultsFile, 'utf8')); + + // Find a previous comment from this workflow so we update instead of piling up. + const { data: comments } = await github.rest.issues.listComments({ + ...context.repo, + issue_number: context.issue.number, + per_page: 100, + }); + const existing = comments.find( + (c) => c.user.type === 'Bot' && c.body.includes(marker) + ); + + let body; + if (failures.length > 0) { + const list = failures + .map(({ file, message }) => `- \`${file}\`\n > ${message}`) + .join('\n'); + body = + `${marker}\n### ⚠️ Invalid JSON detected\n\n` + + `${failures.length} JSON file(s) in this PR could not be parsed. ` + + `These files are loaded directly by CIPP, so a syntax error here breaks the app at runtime.\n\n` + + `${list}\n\n` + + `Please fix the syntax and push again — this comment will update automatically.`; + } else if (existing) { + body = `${marker}\n### ✅ JSON is valid\n\nAll JSON files in \`public\` and \`src/data\` parse correctly. Thanks for fixing it!`; + } else { + // Nothing was ever broken — stay quiet. + return; + } + + if (existing) { + await github.rest.issues.updateComment({ + ...context.repo, + comment_id: existing.id, + body, + }); + } else { + await github.rest.issues.createComment({ + ...context.repo, + issue_number: context.issue.number, + body, + }); + } + + - name: Fail if any JSON is invalid + if: steps.validate.outputs.invalid_count != '0' + run: | + echo "::error::${{ steps.validate.outputs.invalid_count }} invalid JSON file(s). See annotations above." + exit 1 diff --git a/.github/workflows/auto_comments.yml b/.github/workflows/auto_comments.yml new file mode 100644 index 000000000000..89a9908a6748 --- /dev/null +++ b/.github/workflows/auto_comments.yml @@ -0,0 +1,83 @@ +name: "Handle Comment Commands" + +on: + issue_comment: + types: + - created + +jobs: + handle_comment: + runs-on: ubuntu-slim + # We need permissions to modify issue comments. + # 'issues: write' is required for deleting comments. + permissions: + issues: write + + steps: + # 1) If the comment includes '!notasponsor', delete it using GitHub Script + - name: Delete !notasponsor comment + if: contains(github.event.comment.body, '!notasponsor') + uses: actions/github-script@v9 + with: + github-token: ${{ secrets.GITHUB_TOKEN }} + script: | + await github.rest.issues.deleteComment({ + owner: context.repo.owner, + repo: context.repo.repo, + comment_id: context.payload.comment.id + }); + + # 2) Post a sponsor-specific reply + - name: Reply to !notasponsor + if: contains(github.event.comment.body, '!notasponsor') + uses: peter-evans/create-or-update-comment@v5 + with: + issue-number: ${{ github.event.issue.number }} + body: | + Hello, + + Thank you for your interest in improving CIPP! + To keep our development process focused and manageable, **feature requests are limited to paying users**. This policy helps us prioritize improvements that directly benefit those actively supporting CIPP and ensures we can sustain our development and support. + + When a sponsor makes a feature request, their support covers training, development, documentation, and security checks. Allowing non-sponsor requests could lead to a backlog that slows down updates and stretches resources thin, ultimately affecting the quality and sustainability of CIPP. + + While we’ve closed this request, we appreciate your input. You’re always welcome to participate in ongoing discussions or contribute to open issues. If you are a developer, feel free to open a PR that includes your feature request or comment "**I’d like to work on this!**" to assign the issue to yourself. + + **Did you get this notification in error?** Reply with a screenshot of your sponsorship payment and we’ll reopen the issue. + + _Thank you for understanding,_ + **The CIPP Team** + + # 3) If the comment includes '!support', classify as a support request + - name: Reply to !support + if: contains(github.event.comment.body, '!support') + uses: peter-evans/create-or-update-comment@v5 + with: + issue-number: ${{ github.event.issue.number }} + body: | + Hello, + + Thank you for reaching out! This report has been classified as a **support request** rather than a bug or feature request. To keep our development process focused, support requests are limited to paying users. This policy allows us to prioritize resources for those actively supporting CIPP, helping us maintain high-quality development and support. + + Sponsors can contact our helpdesk directly via email for assistance with any issues or questions. For non-sponsor support, please refer to our documentation and community discussions—many questions have been answered there. + + **Did you get this notification in error?** Reply with a screenshot of your sponsorship payment, and we’ll gladly reopen the request. + + _Thank you for your understanding,_ + **The CIPP Team** + + # 4) If the comment includes '!incomplete', note the bug or feature request is incomplete + - name: Reply to !incomplete + if: contains(github.event.comment.body, '!incomplete') + uses: peter-evans/create-or-update-comment@v5 + with: + issue-number: ${{ github.event.issue.number }} + body: | + Hello, + + Thank you for your submission! It appears this **bug report or feature request is incomplete**. We need a clear description, steps to reproduce (for bugs), or a comprehensive overview of the requested feature. + + Please submit a new request with all the necessary details. Without sufficient information, it’s difficult for contributors to triage or implement solutions. + + _Thank you!_ + **The CIPP Team** diff --git a/.github/workflows/cipp_api_tests.yml b/.github/workflows/cipp_api_tests.yml new file mode 100644 index 000000000000..0ff94a0c41da --- /dev/null +++ b/.github/workflows/cipp_api_tests.yml @@ -0,0 +1,67 @@ +--- +name: CIPP API Tests +on: + pull_request: + branches: + - dev + - main +concurrency: + group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.ref }} + cancel-in-progress: true +jobs: + api-tests: + if: github.repository_owner == 'KelvinTegelaar' + name: API Shape & Integration Tests + runs-on: ubuntu-latest + timeout-minutes: 30 + steps: + - uses: actions/checkout@v6 + + - name: Run Shape Tests + id: shape-tests + shell: pwsh + env: + CIPP_API_URL: ${{ secrets.CIPP_TEST_API_URL }} + CIPP_CLIENT_ID: ${{ secrets.CIPP_TEST_CLIENT_ID }} + CIPP_CLIENT_SECRET: ${{ secrets.CIPP_TEST_CLIENT_SECRET }} + CIPP_TENANT_ID: ${{ secrets.CIPP_TEST_TENANT_ID }} + CIPP_API_SCOPE: ${{ secrets.CIPP_TEST_API_SCOPE }} + CIPP_TENANT_FILTER: ${{ secrets.CIPP_TEST_TENANT_FILTER }} + run: | + ./Tools/Invoke-CippShapeTests.ps1 ` + -CippApiUrl $env:CIPP_API_URL ` + -CippClientId $env:CIPP_CLIENT_ID ` + -CippClientSecret $env:CIPP_CLIENT_SECRET ` + -CippTenantId $env:CIPP_TENANT_ID ` + -CippApiScope $env:CIPP_API_SCOPE ` + -TenantFilter $env:CIPP_TENANT_FILTER ` + -CI + + - name: Run Integration Tests + if: always() + id: integration-tests + shell: pwsh + env: + CIPP_API_URL: ${{ secrets.CIPP_TEST_API_URL }} + CIPP_CLIENT_ID: ${{ secrets.CIPP_TEST_CLIENT_ID }} + CIPP_CLIENT_SECRET: ${{ secrets.CIPP_TEST_CLIENT_SECRET }} + CIPP_TENANT_ID: ${{ secrets.CIPP_TEST_TENANT_ID }} + CIPP_API_SCOPE: ${{ secrets.CIPP_TEST_API_SCOPE }} + CIPP_TENANT_FILTER: ${{ secrets.CIPP_TEST_TENANT_FILTER }} + run: | + ./Tools/Invoke-CippIntegrationTests.ps1 ` + -CippApiUrl $env:CIPP_API_URL ` + -CippClientId $env:CIPP_CLIENT_ID ` + -CippClientSecret $env:CIPP_CLIENT_SECRET ` + -CippTenantId $env:CIPP_TENANT_ID ` + -CippApiScope $env:CIPP_API_SCOPE ` + -TenantFilter $env:CIPP_TENANT_FILTER ` + -CI + + - name: Upload Test Results + if: always() + uses: actions/upload-artifact@v7 + with: + name: test-results + path: Tests/Shapes/test-results.json + retention-days: 30 diff --git a/.github/workflows/cipp_dev_build.yml b/.github/workflows/cipp_dev_build.yml new file mode 100644 index 000000000000..39cd58108cb1 --- /dev/null +++ b/.github/workflows/cipp_dev_build.yml @@ -0,0 +1,63 @@ +name: CIPP Frontend Dev Build + +on: + push: + branches: + - dev + workflow_dispatch: + +jobs: + build: + if: github.event.repository.fork == false + name: Build and Upload CIPP Frontend + runs-on: ubuntu-latest + + steps: + # Checkout the repository + - name: Checkout Code + uses: actions/checkout@v6 + + # Set up Node.js + - name: Get Node version + id: get_node_version + run: | + node_raw_version=$(node -p "require('./package.json').engines.node") + node_sanitized_version=$(echo $node_raw_version | sed -E 's/[^0-9.]+//g') + echo "node_version=$node_sanitized_version" >> $GITHUB_OUTPUT + + - name: Set up Node.js + uses: actions/setup-node@v7.0.0 + with: + node-version: ${{ steps.get_node_version.outputs.node_version }} + + # Install dependencies + - name: Install Dependencies + run: yarn install + + # Build the project + - name: Build Project + run: npm run build + + # Update version.json with commit hash + - name: Update version.json + run: | + VERSION=$(jq -r '.version' public/version.json) + SHORT_SHA="${GITHUB_SHA::7}" + echo "{\"version\": \"${VERSION}\", \"commit\": \"${SHORT_SHA}\"}" > out/version.json + + # Create ZIP File in a New Source Directory + - name: Prepare and Zip Build Files + run: | + mkdir -p build + cp staticwebapp.config.json out/ + zip -r build/dev.zip out + + # Upload to Azure Blob Storage + - name: Azure Blob Upload + uses: LanceMcCarthy/Action-AzureBlobUpload@v3.15.0 + with: + connection_string: ${{ secrets.AZURE_CONNECTION_STRING }} + container_name: cipp + source_folder: build/ + destination_folder: / + delete_if_exists: true diff --git a/.github/workflows/cipp_frontend_build.yml b/.github/workflows/cipp_frontend_build.yml new file mode 100644 index 000000000000..a09cc2565105 --- /dev/null +++ b/.github/workflows/cipp_frontend_build.yml @@ -0,0 +1,63 @@ +name: CIPP Frontend Build + +on: + push: + branches: + - main + workflow_dispatch: + +jobs: + build: + if: github.event.repository.fork == false + name: Build and Upload CIPP Frontend + runs-on: ubuntu-latest + + steps: + # Checkout the repository + - name: Checkout Code + uses: actions/checkout@v6 + + # Set up Node.js + - name: Get Node version + id: get_node_version + run: | + node_raw_version=$(node -p "require('./package.json').engines.node") + node_sanitized_version=$(echo $node_raw_version | sed -E 's/[^0-9.]+//g') + echo "node_version=$node_sanitized_version" >> $GITHUB_OUTPUT + + - name: Set up Node.js + uses: actions/setup-node@v7.0.0 + with: + node-version: ${{ steps.get_node_version.outputs.node_version }} + + # Install dependencies + - name: Install Dependencies + run: yarn install + + # Build the project + - name: Build Project + run: npm run build + + # Update version.json with commit hash + - name: Update version.json + run: | + VERSION=$(jq -r '.version' public/version.json) + SHORT_SHA="${GITHUB_SHA::7}" + echo "{\"version\": \"${VERSION}\", \"commit\": \"${SHORT_SHA}\"}" > out/version.json + + # Create ZIP File in a New Source Directory + - name: Prepare and Zip Build Files + run: | + mkdir -p build + cp staticwebapp.config.json out/ + zip -r build/latest.zip out + + # Upload to Azure Blob Storage + - name: Azure Blob Upload + uses: LanceMcCarthy/Action-AzureBlobUpload@v3.15.0 + with: + connection_string: ${{ secrets.AZURE_CONNECTION_STRING }} + container_name: cipp + source_folder: build/ + destination_folder: / + delete_if_exists: true diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 000000000000..770bfb53a7e1 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,28 @@ +# SCA: Fails PRs that introduce dependencies with known vulnerabilities +# ISO 27001:2022 A.8.28/8.29 evidence — Software Composition Analysis at merge time +name: Dependency Review +on: + pull_request: + branches: [main, dev] + +permissions: + contents: read + pull-requests: write + +jobs: + dependency-review: + if: github.repository_owner == 'KelvinTegelaar' + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v6 + + - name: Dependency review + uses: actions/dependency-review-action@v5 + with: + # Block merge on known vulnerabilities of moderate severity or higher + fail-on-severity: moderate + # Surface results as a PR comment for contributor visibility + comment-summary-in-pr: on-failure + # Optional: block copyleft-incompatible licenses (adjust for AGPL-3.0 project policy) + # deny-licenses: GPL-1.0-only diff --git a/.github/workflows/dev_deploy.yml b/.github/workflows/dev_deploy.yml index 6e1c3fe8b8c6..027b23b85658 100644 --- a/.github/workflows/dev_deploy.yml +++ b/.github/workflows/dev_deploy.yml @@ -11,21 +11,21 @@ jobs: runs-on: ubuntu-latest name: Build and Deploy Job steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: submodules: true - name: Build And Deploy id: builddeploy uses: Azure/static-web-apps-deploy@v1 with: - azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN }} # change this to your repository secret name + azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_AMBITIOUS_MOSS_0A047A40F }} # change this to your repository secret name repo_token: ${{ secrets.GITHUB_TOKEN }} # Used for Github integrations (i.e. PR comments) action: 'upload' ###### Repository/Build Configurations - These values can be configured to match your app requirements. ###### # For more information regarding Static Web App workflow configurations, please visit: https://aka.ms/swaworkflowconfig app_location: '/' # App source code path api_location: '' # Api source code path - optional - output_location: '' # Built app content directory - optional + output_location: '/out' # Built app content directory - optional ###### End of Repository/Build Configurations ###### close_pull_request_job: @@ -37,5 +37,5 @@ jobs: id: closepullrequest uses: Azure/static-web-apps-deploy@v1 with: - azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN }} # change this to your repository secret name + azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_AMBITIOUS_MOSS_0A047A40F }} # change this to your repository secret name action: 'close' diff --git a/.github/workflows/label_sponsor_requests.yml b/.github/workflows/label_sponsor_requests.yml index 479cad06c728..28b84ea4e9b6 100644 --- a/.github/workflows/label_sponsor_requests.yml +++ b/.github/workflows/label_sponsor_requests.yml @@ -1,4 +1,3 @@ ---- name: Label Issues on: issues: @@ -7,11 +6,13 @@ on: jobs: label_issues_bugs: if: github.repository_owner == 'KelvinTegelaar' && contains(github.event.issue.title, 'Bug') - runs-on: ubuntu-latest + runs-on: ubuntu-slim permissions: issues: write steps: - name: Sponsor Labels - uses: JasonEtco/is-sponsor-label-action@v1.2.0 + uses: JasonEtco/is-sponsor-label-action@v2.0.0 with: - label: 'Sponsor Request' + label: "Sponsor Priority" + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/pr_check.yml b/.github/workflows/pr_check.yml new file mode 100644 index 000000000000..84555d0e0ebb --- /dev/null +++ b/.github/workflows/pr_check.yml @@ -0,0 +1,86 @@ +name: PR Branch Check + +on: + # Using pull_request_target instead of pull_request for secure handling of fork PRs + pull_request_target: + # Only run on these PR events + types: [opened, synchronize, reopened] + # Only check PRs targeting these branches + branches: + - main + - master + +permissions: + pull-requests: write + issues: write + +jobs: + check-branch: + runs-on: ubuntu-slim + steps: + - name: Check and Comment on PR + # Only process fork PRs with specific branch conditions + # Must be a fork AND (source is main/master OR target is main/master) + if: | + github.event.pull_request.head.repo.fork == true && + ((github.event.pull_request.head.ref == 'main' || github.event.pull_request.head.ref == 'master') || + (github.event.pull_request.base.ref == 'main' || github.event.pull_request.base.ref == 'master')) + uses: actions/github-script@v9 + with: + github-token: ${{ secrets.GITHUB_TOKEN }} + script: | + let message = ''; + + // Check if the fork has open PRs (indicates pull bot or similar is active) + const forkOwner = context.payload.pull_request.head.repo.owner.login; + const forkRepo = context.payload.pull_request.head.repo.name; + const forkPullsUrl = context.payload.pull_request.head.repo.html_url + '/pulls'; + + let openPRs = []; + try { + const { data: prs } = await github.rest.pulls.list({ + owner: forkOwner, + repo: forkRepo, + state: 'open', + per_page: 5 + }); + openPRs = prs; + } catch (e) { + // Can't read fork PRs — skip + } + + message += '🔄 If you are attempting to update your CIPP repo please follow the instructions at: https://docs.cipp.app/setup/self-hosting-guide/updating. Are you a sponsor? Contact the helpdesk for direct assistance with updating to the latest version.'; + + if (openPRs.length > 0) { + message += ` It looks like you may already have a pending update PR on your fork — check your [open pull requests](${forkPullsUrl}) to accept it.`; + } else { + message += ` You can enable [Pull Bot](https://github.com/apps/pull) or [Repo Sync](https://github.com/apps/repo-sync) to automatically keep your fork up to date.`; + } + message += '\n\n'; + + // Check if PR is targeting main/master + if (context.payload.pull_request.base.ref === 'main' || context.payload.pull_request.base.ref === 'master') { + message += '⚠️ PRs cannot target the main branch directly. If you are attempting to contribute code please PR to the dev branch.\n\n'; + } + + // Check if PR is from a fork's main/master branch + if (context.payload.pull_request.head.repo.fork && + (context.payload.pull_request.head.ref === 'main' || context.payload.pull_request.head.ref === 'master')) { + message += '⚠️ This PR cannot be merged because it originates from your fork\'s main/master branch. If you are attempting to contribute code please PR from your dev branch or another non-main/master branch.\n\n'; + } + + message += '🔒 This PR will now be automatically closed due to the above rules.'; + + // Post the comment + await github.rest.issues.createComment({ + ...context.repo, + issue_number: context.issue.number, + body: message + }); + + // Close the PR + await github.rest.pulls.update({ + ...context.repo, + pull_number: context.issue.number, + state: 'closed' + }); diff --git a/.github/workflows/zap-scan.yml b/.github/workflows/zap-scan.yml new file mode 100644 index 000000000000..e1dceb031496 --- /dev/null +++ b/.github/workflows/zap-scan.yml @@ -0,0 +1,55 @@ +# DAST: OWASP ZAP scans against the CIPP staging deployment +# ISO 27001:2022 A.8.29 evidence — Dynamic Application Security Testing +# +# Prerequisites: +# - Repo variable STAGING_URL pointing at a staging deployment (test-tenant data only, never production) +# - Optional: .zap/rules.tsv to suppress documented false positives (annotate each with justification) +name: DAST - OWASP ZAP Scan +on: + schedule: + - cron: "0 4 * * 1" # Weekly, Monday 04:00 UTC + workflow_dispatch: # Run on demand before each versioned release + inputs: + full_scan: + description: "Run full (active) scan instead of baseline" + type: boolean + default: false + +permissions: + contents: read + issues: write # ZAP action files findings as GitHub issues + +jobs: + zap_baseline: + if: github.repository_owner == 'KelvinTegelaar' && (github.event_name == 'schedule' || !inputs.full_scan) + name: ZAP Baseline Scan (passive) + runs-on: ubuntu-latest + steps: + - name: Checkout (for .zap rules file) + uses: actions/checkout@v6 + + - name: ZAP baseline scan + uses: zaproxy/action-baseline@v0.15.0 + with: + target: ${{ vars.STAGING_URL }} + rules_file_name: ".zap/rules.tsv" + allow_issue_writing: true + issue_title: "ZAP baseline scan findings" + artifact_name: zap-baseline-report + + zap_full: + if: github.repository_owner == 'KelvinTegelaar' && github.event_name == 'workflow_dispatch' && inputs.full_scan + name: ZAP Full Scan (active, pre-release) + runs-on: ubuntu-latest + steps: + - name: Checkout (for .zap rules file) + uses: actions/checkout@v6 + + - name: ZAP full scan + uses: zaproxy/action-full-scan@v0.13.0 + with: + target: ${{ vars.STAGING_URL }} + rules_file_name: ".zap/rules.tsv" + allow_issue_writing: true + issue_title: "ZAP full scan findings (pre-release)" + artifact_name: zap-full-report diff --git a/.gitignore b/.gitignore index 47dfb11e20c3..2758639d59a4 100644 --- a/.gitignore +++ b/.gitignore @@ -1,18 +1,22 @@ -# See https://help.github.com/ignore-files/ for more about ignoring files. +# See https://help.github.com/articles/ignoring-files/ for more about ignoring files. # dependencies -/node_modules - +node_modules +.pnp +.pnp.js +build +package-lock.json # testing -/coverage +coverage # production -/build +.next +out # misc -.eslintcache .DS_Store -.idea +.eslintcache +.env .env.local .env.development.local .env.test.local @@ -21,4 +25,20 @@ npm-debug.log* yarn-debug.log* yarn-error.log* -__* \ No newline at end of file + +# vscode debug logs +debug.log +app.log + +# AI rules +.*/rules +AGENTS.md + +# jetbrains +.idea + +# azurite +__* +AzuriteConfig +# Claude/Cursor worktrees and local AI tooling +.claude/ diff --git a/.jscpd.json b/.jscpd.json deleted file mode 100644 index 2cee5f5d5be7..000000000000 --- a/.jscpd.json +++ /dev/null @@ -1,15 +0,0 @@ -{ - "threshold": 0, - "reporters": ["html", "markdown"], - "ignore": [ - "**/node_modules/**", - "**/.git/**", - "**/.rbenv/**", - "**/.venv/**", - "**/*cache*/**", - "**/.github/**", - "**/.idea/**", - "**/report/**", - "**/*.svg" - ] -} diff --git a/.mega-linter.yml b/.mega-linter.yml deleted file mode 100644 index 1eccaa23246b..000000000000 --- a/.mega-linter.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -# Configuration file for MegaLinter -# See all available variables at https://megalinter.github.io/configuration/ and in linters documentation -APPLY_FIXES: none -SHOW_ELAPSED_TIME: true -FILEIO_REPORTER: false -ENABLE: [CSS, HTML, JSON, YAML, JSX, ACTION, CREDENTIALS] -DISABLE_LINTERS: [CSS_SCSS_LINT, YAML_PRETTIER] -SHOW_SKIPPED_LINTERS: false diff --git a/.node-version b/.node-version deleted file mode 100644 index 3c032078a4a2..000000000000 --- a/.node-version +++ /dev/null @@ -1 +0,0 @@ -18 diff --git a/.npmrc b/.npmrc new file mode 100644 index 000000000000..3d47a5118882 --- /dev/null +++ b/.npmrc @@ -0,0 +1,27 @@ +# Supply-chain hardening for CIPP +# npm honors this file. yarn classic does NOT read `ignore-scripts` from +# .npmrc (only registry/auth keys); the yarn equivalents live in .yarnrc. +# Any change here should be reviewed for CI/CD impact. + +# Refuse to execute package lifecycle scripts (pre/postinstall, prepare, etc.) +# on dependency install. CIPP has zero of its own lifecycle scripts in +# package.json, so the only scripts this would block are from third-party +# packages — exactly the attack surface we want to close. +ignore-scripts=true + +# Pin the registry explicitly so an inherited per-user .npmrc cannot redirect +# CI / contributor installs to a malicious mirror. +registry=https://registry.npmjs.org/ + +# Severity threshold at which `npm audit` exits non-zero. (Integrity hashes +# are always verified against the lockfile on install; that needs no flag.) +audit-level=high + +# Write exact versions to package.json when adding deps via `npm install `, +# so a future lockfile regeneration cannot drift to a newer release. +# npm-only; the yarn equivalent is `yarn add --exact`. +save-exact=true + +# Disable funding/notifier noise so CI logs only show real signal. +fund=false +update-notifier=false diff --git a/.prettierignore b/.prettierignore index 1611c469b3e9..9bcdd5aba5a1 100644 --- a/.prettierignore +++ b/.prettierignore @@ -1,4 +1,2 @@ -dist/ -build/ -importsMap.jsx -Generate-Import-Map.js \ No newline at end of file +build +out diff --git a/.prettierrc.json b/.prettierrc.json index c3d9bfa563ed..fa51da29e7fa 100644 --- a/.prettierrc.json +++ b/.prettierrc.json @@ -1,7 +1,6 @@ { + "trailingComma": "es5", + "tabWidth": 2, "semi": false, - "trailingComma": "all", - "singleQuote": true, - "printWidth": 100, - "tabWidth": 2 + "singleQuote": true } diff --git a/.secretlintignore b/.secretlintignore deleted file mode 100644 index 2490a64364c0..000000000000 --- a/.secretlintignore +++ /dev/null @@ -1,2 +0,0 @@ -# Ignore VSCode development certificate private key. -**/.vscode/key.key diff --git a/.secretlintrc.json b/.secretlintrc.json deleted file mode 100644 index 7a1a5df3c28e..000000000000 --- a/.secretlintrc.json +++ /dev/null @@ -1,7 +0,0 @@ -{ - "rules": [ - { - "id": "@secretlint/secretlint-rule-preset-recommend" - } - ] -} diff --git a/.storybook/main.mjs b/.storybook/main.mjs new file mode 100644 index 000000000000..605b66065a98 --- /dev/null +++ b/.storybook/main.mjs @@ -0,0 +1,111 @@ +import path from 'node:path' +import { fileURLToPath } from 'node:url' + +const dirname = path.dirname(fileURLToPath(import.meta.url)) + +/** @type { import('@storybook/react-vite').StorybookConfig } */ +const config = { + stories: ['../tests/**/*.mdx', '../tests/**/*.stories.@(js|jsx|mjs|ts|tsx)'], + addons: [ + '@storybook/addon-a11y', + '@storybook/addon-docs', + '@storybook/addon-themes', + '@storybook/addon-vitest', + 'msw-storybook-addon', + ], + features: { + sidebarOnboardingChecklist: false, + }, + core: { + disableWhatsNewNotifications: true, + }, + framework: '@storybook/react-vite', + async viteFinal(config) { + return { + ...config, + plugins: [ + ...(config.plugins || []), + { + // Real Microsoft auth can't run in Storybook (MSAL popups, device codes), + // so every import of CIPPM365OAuthButton resolves to a mock that reports + // instant auth success. Relative imports can't be object-alias'd, hence a + // resolveId hook instead of an entry in resolve.alias below. + name: 'cipp-mock-m365-oauth-button', + enforce: 'pre', + resolveId(source) { + if (source.endsWith('CippComponents/CIPPM365OAuthButton')) { + return path.resolve(dirname, '../tests/mocks/cipp-m365-oauth-button.jsx') + } + }, + }, + ], + resolve: { + ...config.resolve, + // CIPP is a Next.js app but uses @storybook/react-vite because @storybook/nextjs + // doesn't work with this project. These aliases replace Next.js modules with + // lightweight mocks so components render without a Next.js runtime. + alias: { + ...config.resolve?.alias, + // stub for mui-tiptap's uninstalled required peer @tiptap/extension-image + '@tiptap/extension-image': path.resolve( + dirname, + '../tests/mocks/tiptap-extension-image.js', + ), + 'next/dynamic': path.resolve(dirname, '../tests/mocks/next-dynamic.js'), + 'next/router': path.resolve(dirname, '../tests/mocks/next-router.js'), + 'next/navigation': path.resolve(dirname, '../tests/mocks/next-navigation.js'), + 'next/head': path.resolve(dirname, '../tests/mocks/next-head.js'), + 'next/image': path.resolve(dirname, '../tests/mocks/next-image.js'), + 'next/link': path.resolve(dirname, '../tests/mocks/next-link.js'), + }, + }, + define: { + ...(config.define || {}), + // Next.js components reference process.env and global, these don't exist in a + // pure Vite browser context, so we shim them to avoid ReferenceErrors. + 'process.env': '{}', + global: 'window', + }, + esbuild: { + ...config.esbuild, + // The codebase uses .js files with JSX syntax. Vite's default esbuild loader + // only handles JSX in .jsx files, so we override the loader for all .js files. + jsx: 'automatic', + jsxImportSource: 'react', + loader: 'jsx', + include: /(src|tests|\.storybook)\/.*\.(js|jsx)$/, + exclude: [], + }, + build: { + ...config.build, + rollupOptions: { + ...config.build?.rollupOptions, + onwarn(warning, warn) { + // Suppress "use client" directive warnings from React Server Components-aware + // libraries (e.g. @mui/material). These directives are harmless in Storybook + // since everything runs client-side, but Rollup treats them as errors. + if (warning.code === 'MODULE_LEVEL_DIRECTIVE') return + warn(warning) + }, + }, + }, + optimizeDeps: { + ...config.optimizeDeps, + // Same JSX-in-.js fix as above, but for Vite's dependency pre-bundling step + // (esbuild runs separately for optimizeDeps vs transform). + esbuildOptions: { + ...config.optimizeDeps?.esbuildOptions, + jsx: 'automatic', + jsxImportSource: 'react', + loader: { + '.js': 'jsx', + '.jsx': 'jsx', + }, + }, + }, + } + }, + staticDirs: ['../public'], +} + +export default config diff --git a/.storybook/preview.jsx b/.storybook/preview.jsx new file mode 100644 index 000000000000..5bb024c91d5d --- /dev/null +++ b/.storybook/preview.jsx @@ -0,0 +1,107 @@ +import React from 'react' +import { ThemeProvider } from '@mui/material/styles' +import CssBaseline from '@mui/material/CssBaseline' +import { withThemeFromJSXProvider } from '@storybook/addon-themes' +import { Provider } from 'react-redux' +import { configureStore } from '@reduxjs/toolkit' +import { QueryClient, QueryClientProvider } from '@tanstack/react-query' +import { setupWorker } from 'msw/browser' +import { mswLoader } from 'msw-storybook-addon/csf3' +import { LocalizationProvider } from '@mui/x-date-pickers' +import { AdapterDateFns } from '@mui/x-date-pickers/AdapterDateFns' +import TimeAgo from 'javascript-time-ago' +import en from 'javascript-time-ago/locale/en.json' +import { createTheme } from '../src/theme' +import { SettingsContext } from '../src/contexts/settings-context' +import { handlers } from '../tests/mocks/handlers' +// require.context polyfill must load in the storybook dev server too, the vitest +// setup files don't run there +import '../tests/mocks/require-context' + +const mockSettings = { + currentTenant: 'testdomain.com', + currentTheme: { value: 'light', label: 'light' }, + paletteMode: 'light', + direction: 'ltr', + pinNav: true, + showDevtools: false, + handleUpdate: () => {}, + handleReset: () => {}, + isCustom: false, +} + +TimeAgo.addDefaultLocale(en) + +const darkTheme = createTheme({ + colorPreset: 'orange', + direction: 'ltr', + paletteMode: 'dark', + contrast: 'high', +}) + +const lightTheme = createTheme({ + colorPreset: 'orange', + direction: 'ltr', + paletteMode: 'light', + contrast: 'high', +}) + +const mockStore = configureStore({ + reducer: { + toasts: (state = { toasts: [] }) => state, + }, +}) + +/** @type { import('@storybook/react').Preview } */ +const preview = { + parameters: { + controls: { + matchers: { + color: /(background|color)$/i, + date: /Date$/i, + }, + }, + msw: { + handlers, + }, + }, + // custom setup instead of the addon default: 'bypass' silences MSW warnings for + // unhandled requests (Vite module imports, static assets, unmocked /api routes), + // 'quiet' suppresses console logging for handled requests + loaders: [ + mswLoader(async () => { + const worker = setupWorker() + await worker.start({ onUnhandledRequest: 'bypass', quiet: true }) + return worker + }), + ], + decorators: [ + withThemeFromJSXProvider({ + themes: { + light: lightTheme, + dark: darkTheme, + }, + defaultTheme: 'light', + Provider: ThemeProvider, + GlobalStyles: CssBaseline, + }), + (Story) => { + const queryClient = new QueryClient({ + defaultOptions: { queries: { retry: false } }, + }) + return ( + + + + + + + + + + ) + }, + ], +} + +export default preview diff --git a/.storybook/vitest.setup.js b/.storybook/vitest.setup.js new file mode 100644 index 000000000000..b26d0bf2f15b --- /dev/null +++ b/.storybook/vitest.setup.js @@ -0,0 +1,5 @@ +import { configure } from 'storybook/test' +import '../tests/mocks/require-context' + +// coverage instrumentation slows lazy chunks and fetches past the 1s default +configure({ asyncUtilTimeout: 10000 }) diff --git a/.stylelintrc.json b/.stylelintrc.json deleted file mode 100644 index a89421b2dbbc..000000000000 --- a/.stylelintrc.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "extends": "stylelint-config-sass-guidelines", - "rules": { - "selector-class-pattern": null, - "max-nesting-depth": 6, - "selector-no-qualifying-type": [ - true, - { - "ignore": ["attribute", "class"] - } - ], - "selector-max-compound-selectors": 5 - } -} diff --git a/.vscode/extensions.json b/.vscode/extensions.json index c21abba6989f..6eaf6dd1ea6f 100644 --- a/.vscode/extensions.json +++ b/.vscode/extensions.json @@ -1,11 +1,6 @@ { - "recommendations": [ - "github.vscode-codeql", - "dbaeumer.vscode-eslint", - "eg2.vscode-npm-script", - "christian-kohler.npm-intellisense", - "esbenp.prettier-vscode", - "stylelint.vscode-stylelint", - "editorconfig.editorconfig" - ] + "recommendations": [ + "editorconfig.editorconfig", + "streetsidesoftware.code-spell-checker", + ] } diff --git a/.vscode/launch.json b/.vscode/launch.json index b0363910187c..3622dc676b7c 100644 --- a/.vscode/launch.json +++ b/.vscode/launch.json @@ -15,7 +15,7 @@ "type": "node-terminal" }, { - "command": "npm start", + "command": "yarn run dev", "name": "Run Frontend", "request": "launch", "type": "node-terminal", @@ -33,7 +33,21 @@ "name": "Launch in Windows Terminal", "request": "launch", "cwd": "${cwd}", - "script": ". '${cwd}\\Tools\\Start-CippDevEmulators.ps1'" + "script": ". '${cwd}\\Tools\\Start-CIPPDevEmulators.ps1'" + }, + { + "type": "PowerShell", + "name": "Launch in Windows Terminal with Offloading Proc and HTTP only workers", + "request": "launch", + "cwd": "${cwd}", + "script": ". '${cwd}\\Tools\\Start-CippOffloadSimulation.ps1'" + }, + { + "type": "PowerShell", + "name": "Launch in Kitty Terminal", + "request": "launch", + "cwd": "${cwd}", + "script": ". '${cwd}${pathSeparator}Tools${pathSeparator}Start-CippDevEmulatorsWithKitty.ps1'" } ], "compounds": [ diff --git a/.vscode/settings.json b/.vscode/settings.json new file mode 100644 index 000000000000..9e26dfeeb6e6 --- /dev/null +++ b/.vscode/settings.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/.vscode/tasks.json b/.vscode/tasks.json index 1bcdb9744954..91a6a5c671f2 100644 --- a/.vscode/tasks.json +++ b/.vscode/tasks.json @@ -10,6 +10,12 @@ "type": "shell", "command": "azurite --location ../", "isBackground": true, + "options": { + "env": { + "LC_ALL": "en-US.UTF-8", + "LANG": "en-US" + } + }, "problemMatcher": { "pattern": [ { diff --git a/.yamllint.yaml b/.yamllint.yaml deleted file mode 100644 index e907140bfe4d..000000000000 --- a/.yamllint.yaml +++ /dev/null @@ -1,2 +0,0 @@ ---- -extends: default diff --git a/.yarnrc b/.yarnrc new file mode 100644 index 000000000000..8dda1e5efe50 --- /dev/null +++ b/.yarnrc @@ -0,0 +1,18 @@ +# Supply-chain hardening for CIPP (yarn 1 / classic) +# +# This complements .npmrc but is not redundant with it: yarn 1 does NOT +# honor `ignore-scripts` from .npmrc, so for yarn installs these per-command +# flags are the protection, not defense in depth. + +# Refuse to execute lifecycle scripts on `yarn install` / `yarn add` / +# `yarn upgrade`. Mirrors `ignore-scripts=true` in .npmrc. +--install.ignore-scripts true +--add.ignore-scripts true +--upgrade.ignore-scripts true + +# Pin the registry so a poisoned per-user .yarnrc cannot redirect installs. +registry "https://registry.npmjs.org/" + +# Disable yarn's self-update check — CI should never auto-update its own +# yarn binary mid-build. +disable-self-update-check true diff --git a/CLA.md b/CLA.md new file mode 100644 index 000000000000..1f94b337f7bf --- /dev/null +++ b/CLA.md @@ -0,0 +1,83 @@ +# Contributor License Agreement (CLA) + +This Contributor License Agreement ("Agreement") is entered into by the individual or entity ("You") submitting a Contribution to this project. By submitting a Contribution, You agree to the following terms and conditions: + +--- + +## 1. Definitions + +1. **"Contribution"** means any original work of authorship, including modifications or additions to existing works, submitted in any form (including source code, object code, documentation, or other materials) to this repository. +2. **"CyberDrain"** means the maintainers, owners, or legal rights holders of this repository, including successors and assigns. +3. **"Project License"** refers to the **GNU Affero General Public License, version 3 (AGPL-3.0)** under which this project is distributed, unless CyberDrain elects to relicense under a custom license. + +--- + +## 2. Copyright Assignment + +You hereby assign to CyberDrain, effective on submission of any Contribution, **all right, title, and interest worldwide in and to the copyright** of Your Contributions. + +This assignment includes, without limitation, the exclusive rights to: + +* Reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Contributions in any medium, and +* Relicense the Contributions under the AGPL-3.0 license, any future versions of that license, or under custom/commercial licenses as CyberDrain deems appropriate. + +To the extent that applicable law prohibits the assignment of certain moral rights or similar rights, You hereby irrevocably waive those rights to the maximum extent permitted by law. + +--- + +## 3. Patent Grant + +You hereby grant to CyberDrain, its successors, assigns, and licensees a **perpetual, worldwide, non-exclusive, transferable, irrevocable, royalty-free, fully paid-up license** under any patents that You own or control, to make, have made, use, offer to sell, sell, import, and otherwise transfer Your Contributions. + +This patent license extends only to the combination of Your Contributions with the Project to which they were submitted. + +--- + +## 4. License Grant Back to You + +CyberDrain hereby grants You a non-exclusive, worldwide, royalty-free, irrevocable license to use, reproduce, and prepare derivative works of Your Contributions for any purpose, **provided such use does not conflict with the licensing terms applied by CyberDrain** (including AGPL-3.0 or custom licenses). + +--- + +## 5. Representations and Warranties + +By submitting a Contribution, You represent and warrant that: + +1. The Contribution is Your original creation, or You have sufficient rights to submit it. +2. The Contribution does not knowingly violate or infringe any third-party intellectual property rights. +3. You are legally entitled to assign copyright and grant the licenses described herein. +4. The Contribution is submitted free of any encumbrances, liens, or claims by any third party. + +--- + +## 6. Custom Licensing + +CyberDrain reserves the right to distribute the Project, including Your Contributions, under: + +* The **AGPL-3.0 license**, and/or +* **Custom or commercial licenses**, including licenses granted to sponsors via GitHub Sponsorships. + +Contributors acknowledge and agree that: + +* Their Contributions may be included under such custom licenses. +* No royalties, fees, or other compensation shall be due to Contributors in connection with such relicensing. + +--- + +## 7. Disclaimer of Warranty + +Except as expressly stated in this Agreement, You provide Contributions **“AS IS”**, without warranties or conditions of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. + +--- + +## 8. Limitation of Liability + +In no event shall You be liable for any direct, indirect, incidental, special, exemplary, or consequential damages arising out of or in connection with Your Contributions, even if advised of the possibility of such damages. + +--- + +## 9. Acceptance + +By submitting a Contribution to this repository, You acknowledge that You have read and understood this Agreement, and that You agree to be legally bound by its terms. + +No signature is required — **submission of a Contribution constitutes acceptance**. diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md new file mode 100644 index 000000000000..219f861658e2 --- /dev/null +++ b/CONTRIBUTING.md @@ -0,0 +1,47 @@ +# Contributing to This Project + +First of all – thank you for considering contributing! 🎉 Contributions help improve this project for everyone, and we welcome issues, discussions, and pull requests. + +Please read through this document before contributing. + +--- + +## Contributor License Agreement (CLA) + +By contributing to this repository, you agree to the terms of our **Contributor License Agreement (CLA):** + +* **Copyright Transfer**: All contributions (commits, pull requests, issues, or code reviews) are automatically assigned to **CyberDrain**. +* Contributors give up ownership rights of their contributions and transfer them fully to CyberDrain. +* CyberDrain may use, modify, distribute, sublicense, or relicense the contributions under any terms it deems fit, including custom or commercial licenses. +* **You do not need to sign anything** – the act of contributing implies agreement with this CLA. + +--- + +## Custom Licenses + +This project is generally open source, but we also provide **custom licensing options**: + +* Custom licenses are available **upon agreement**. +* Sponsors who arrange a custom license are **not required** to publish their license terms in this repository. +* Since copyright of contributions is transferred to CyberDrain, CyberDrain has full authority to include contributions under such custom licensing terms. + + +--- + +## How to Contribute + +As this project is ever evolving, we recommend checking out the contributions docs on our doc page here: + +- https://docs.cipp.app/dev-documentation/contributing-to-the-code +- https://docs.cipp.app/dev-documentation/cipp-dev-guide +- https://docs.cipp.app/dev-documentation/contributing-to-the-documentation + +--- + +## Code of Conduct + +We expect all contributors to follow respectful, inclusive, and collaborative practices. +Please help keep this project a safe and welcoming place for everyone. + +👉 By contributing to this repository, you acknowledge that your contributions are automatically and irrevocably transferred in copyright to **CyberDrain**, and that they are covered by the CLA described above. + diff --git a/Generate-Import-Map.js b/Generate-Import-Map.js deleted file mode 100644 index d8b23547c55b..000000000000 --- a/Generate-Import-Map.js +++ /dev/null @@ -1,35 +0,0 @@ -// Using ES Module syntax compatible with Node.js 18 and ensuring cross-platform compatibility -import fs from 'fs/promises' -import path from 'path' -import { fileURLToPath } from 'url' - -// Convert __dirname equivalent for ES Modules -const __filename = fileURLToPath(import.meta.url) -const __dirname = path.dirname(__filename) - -// Adjust the relative path as necessary to point to your routes.json location -const routesPath = path.join(__dirname, './src/routes.json') // Example path - -// Load routes.json with an import assertion for JSON -const routes = await import(`file://${routesPath}`, { assert: { type: 'json' } }).then( - (module) => module.default, -) - -let importsMap = "import React from 'react'\n export const importsMap = {\n" - -routes.forEach((route) => { - if (route.component) { - // Adjust the import path to be relative to the importsMap.js file location - const importPath = route.component.replace('views', './views') - // Ensure paths are Unix-like for the dynamic import to work cross-platform - const unixImportPath = importPath.split(path.sep).join('/') - importsMap += ` "${route.path}": React.lazy(() => import('${unixImportPath}')), \n` - } -}) - -importsMap += '}\nexport default importsMap' - -// Specify the output file path for the generated imports map -const outputPath = path.join(__dirname, './src/importsMap.jsx') -await fs.writeFile(outputPath, importsMap) -console.log('Import map generated.') diff --git a/Importmap.ps1 b/Importmap.ps1 deleted file mode 100644 index 357c3af5d1ce..000000000000 --- a/Importmap.ps1 +++ /dev/null @@ -1,22 +0,0 @@ -// generate-imports-map.js -const fs = require('fs') -const path = require('path') -const routes = require('./path/to/routes.json') - -let importsMap = 'export const importsMap = {\n' - -routes.forEach(route => { - if (route.component) { - // Convert the path to a format that's relative to where you'll be importing from - const importPath = route.component.replace('views', './views') - const componentName = path.basename(importPath) - - // Create an import statement for the component - importsMap += "${route.path}": React.lazy(() = > import('${importPath}')), \n`; - } - }) - -importsMap += '};\n' - -fs.writeFileSync(path.resolve(__dirname,'./src/importsMap.js'), importsMap) -console.log('Import map generated.') diff --git a/LICENSE.CustomLicenses b/LICENSE.CustomLicenses deleted file mode 100644 index c66793baf6d3..000000000000 --- a/LICENSE.CustomLicenses +++ /dev/null @@ -1,3 +0,0 @@ -Custom licenses are available upon agreement via Github Sponsorships. Custom licenses will not have to be published in this repository. All contributors automatically agree with this provision. - -A CLA is signed by contributors if they have contributed before these provisions. Only contributions currently in the running latest release require the CLA to be signed. The CLA is signed by creating a issue using the issue template "CLA". the agreement will be related directly to available CLA template. diff --git a/LICENSE.CustomLicenses.md b/LICENSE.CustomLicenses.md new file mode 100644 index 000000000000..2c8ebfbe3dea --- /dev/null +++ b/LICENSE.CustomLicenses.md @@ -0,0 +1,14 @@ +1. Availability of Custom Licenses +Custom licenses are available to sponsors via GitHub Sponsorships. Upon mutual agreement between the project maintainers and the sponsor, such licenses shall apply to the sponsored party. + +2. Publication Exemption +Custom licenses granted through GitHub Sponsorships are exempt from publication in this repository. Sponsors and maintainers may keep such agreements private. + +3. Contributor License Agreement (CLA) +By contributing to this repository in any form (including but not limited to commits, pull requests, and code reviews), contributors explicitly agree to the terms of this Contributor License Agreement. + +4. Coverage of Contributions +Any and all commits made to this repository are automatically considered covered under this CLA. Contributors retain copyright to their individual contributions, while granting the maintainers the necessary rights to use, modify, distribute, and sublicense such contributions in accordance with the terms of the project. + +5. Automatic Acceptance +All contributors to this repository, by the act of contribution, automatically and irrevocably agree to the provisions of this CLA and the terms herein. diff --git a/LICENSE.md b/LICENSE.md index 162676cbef61..29ebfa545f55 100644 --- a/LICENSE.md +++ b/LICENSE.md @@ -1,178 +1,178 @@ GNU AFFERO GENERAL PUBLIC LICENSE Version 3, 19 November 2007 -Copyright (C) 2007 Free Software Foundation, Inc. -Everyone is permitted to copy and distribute verbatim copies -of this license document, but changing it is not allowed. + Copyright (C) 2007 Free Software Foundation, Inc. + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. Preamble -The GNU Affero General Public License is a free, copyleft license for + The GNU Affero General Public License is a free, copyleft license for software and other kinds of works, specifically designed to ensure cooperation with the community in the case of network server software. -The licenses for most software and other practical works are designed -to take away your freedom to share and change the works. By contrast, + The licenses for most software and other practical works are designed +to take away your freedom to share and change the works. By contrast, our General Public Licenses are intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. -When we speak of free software, we are referring to freedom, not -price. Our General Public Licenses are designed to make sure that you + When we speak of free software, we are referring to freedom, not +price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things. -Developers that use our General Public Licenses protect your rights + Developers that use our General Public Licenses protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License which gives you legal permission to copy, distribute and/or modify the software. -A secondary benefit of defending all users' freedom is that + A secondary benefit of defending all users' freedom is that improvements made in alternate versions of the program, if they receive widespread use, become available for other developers to -incorporate. Many developers of free software are heartened and -encouraged by the resulting cooperation. However, in the case of +incorporate. Many developers of free software are heartened and +encouraged by the resulting cooperation. However, in the case of software used on network servers, this result may fail to come about. The GNU General Public License permits making a modified version and letting the public access it on a server without ever releasing its source code to the public. -The GNU Affero General Public License is designed specifically to + The GNU Affero General Public License is designed specifically to ensure that, in such cases, the modified source code becomes available -to the community. It requires the operator of a network server to +to the community. It requires the operator of a network server to provide the source code of the modified version running there to the -users of that server. Therefore, public use of a modified version, on +users of that server. Therefore, public use of a modified version, on a publicly accessible server, gives the public access to the source code of the modified version. -An older license, called the Affero General Public License and -published by Affero, was designed to accomplish similar goals. This is + An older license, called the Affero General Public License and +published by Affero, was designed to accomplish similar goals. This is a different license, not a version of the Affero GPL, but Affero has released a new version of the Affero GPL which permits relicensing under this license. -The precise terms and conditions for copying, distribution and + The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS -0. Definitions. + 0. Definitions. -"This License" refers to version 3 of the GNU Affero General Public License. + "This License" refers to version 3 of the GNU Affero General Public License. -"Copyright" also means copyright-like laws that apply to other kinds of + "Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks. -"The Program" refers to any copyrightable work licensed under this -License. Each licensee is addressed as "you". "Licensees" and + "The Program" refers to any copyrightable work licensed under this +License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations. -To "modify" a work means to copy from or adapt all or part of the work + To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an -exact copy. The resulting work is called a "modified version" of the +exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work. -A "covered work" means either the unmodified Program or a work based + A "covered work" means either the unmodified Program or a work based on the Program. -To "propagate" a work means to do anything with it that, without + To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a -computer or modifying a private copy. Propagation includes copying, +computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well. -To "convey" a work means any kind of propagation that enables other -parties to make or receive copies. Mere interaction with a user through + To "convey" a work means any kind of propagation that enables other +parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying. -An interactive user interface displays "Appropriate Legal Notices" + An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the -work under this License, and how to view a copy of this License. If +work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion. -1. Source Code. + 1. Source Code. -The "source code" for a work means the preferred form of the work -for making modifications to it. "Object code" means any non-source + The "source code" for a work means the preferred form of the work +for making modifications to it. "Object code" means any non-source form of a work. -A "Standard Interface" means an interface that either is an official + A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language. -The "System Libraries" of an executable work include anything, other + The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an -implementation is available to the public in source code form. A +implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it. -The "Corresponding Source" for a work in object code form means all + The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to -control those activities. However, it does not include the work's +control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but -which are not part of the work. For example, Corresponding Source +which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work. -The Corresponding Source need not include anything that users + The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source. -The Corresponding Source for a work in source code form is that + The Corresponding Source for a work in source code form is that same work. -2. Basic Permissions. + 2. Basic Permissions. -All rights granted under this License are granted for the term of + All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated -conditions are met. This License explicitly affirms your unlimited -permission to run the unmodified Program. The output from running a +conditions are met. This License explicitly affirms your unlimited +permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its -content, constitutes a covered work. This License acknowledges your +content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law. -You may make, run and propagate covered works that you do not + You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains -in force. You may convey covered works to others for the sole purpose +in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do -not control copyright. Those thus making or running the covered works +not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you. -Conveying under any other circumstances is permitted solely under -the conditions stated below. Sublicensing is not allowed; section 10 + Conveying under any other circumstances is permitted solely under +the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary. -3. Protecting Users' Legal Rights From Anti-Circumvention Law. + 3. Protecting Users' Legal Rights From Anti-Circumvention Law. -No covered work shall be deemed part of an effective technological + No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures. -When you convey a covered work, you waive any legal power to forbid + When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or @@ -180,9 +180,9 @@ modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures. -4. Conveying Verbatim Copies. + 4. Conveying Verbatim Copies. -You may convey verbatim copies of the Program's source code as you + You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any @@ -190,12 +190,12 @@ non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program. -You may charge any price or no price for each copy that you convey, + You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. -5. Conveying Modified Source Versions. + 5. Conveying Modified Source Versions. -You may convey a work based on the Program, or the modifications to + You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions: @@ -220,19 +220,19 @@ terms of section 4, provided that you also meet all of these conditions: interfaces that do not display Appropriate Legal Notices, your work need not make them do so. -A compilation of a covered work with other separate and independent + A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users -beyond what the individual works permit. Inclusion of a covered work +beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate. -6. Conveying Non-Source Forms. + 6. Conveying Non-Source Forms. -You may convey a covered work in object code form under the terms + You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways: @@ -278,75 +278,75 @@ in one of these ways: Source of the work are being offered to the general public at no charge under subsection 6d. -A separable portion of the object code, whose source code is excluded + A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work. -A "User Product" is either (1) a "consumer product", which means any + A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation -into a dwelling. In determining whether a product is a consumer product, -doubtful cases shall be resolved in favor of coverage. For a particular +into a dwelling. In determining whether a product is a consumer product, +doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user -actually uses, or expects or is expected to use, the product. A product +actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product. -"Installation Information" for a User Product means any methods, + "Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from -a modified version of its Corresponding Source. The information must +a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made. -If you convey an object code work under this section in, or with, or + If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied -by the Installation Information. But this requirement does not apply +by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM). -The requirement to provide Installation Information does not include a + The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for -the User Product in which it has been modified or installed. Access to a +the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network. -Corresponding Source conveyed, and Installation Information provided, + Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying. -7. Additional Terms. + 7. Additional Terms. -"Additional permissions" are terms that supplement the terms of this + "Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent -that they are valid under applicable law. If additional permissions +that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. -When you convey a copy of a covered work, you may at your option + When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of -it. (Additional permissions may be written to require their own -removal in certain cases when you modify the work.) You may place +it. (Additional permissions may be written to require their own +removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission. -Notwithstanding any other provision of this License, for material you + Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms: @@ -373,74 +373,74 @@ that material) supplement the terms of this License with terms: any liability that these contractual assumptions directly impose on those licensors and authors. -All other non-permissive additional terms are considered "further -restrictions" within the meaning of section 10. If the Program as you + All other non-permissive additional terms are considered "further +restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further -restriction, you may remove that term. If a license document contains +restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying. -If you add terms to a covered work in accord with this section, you + If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms. -Additional terms, permissive or non-permissive, may be stated in the + Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way. -8. Termination. + 8. Termination. -You may not propagate or modify a covered work except as expressly -provided under this License. Any attempt otherwise to propagate or + You may not propagate or modify a covered work except as expressly +provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11). -However, if you cease all violation of this License, then your + However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. -Moreover, your license from a particular copyright holder is + Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice. -Termination of your rights under this section does not terminate the + Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under -this License. If your rights have been terminated and not permanently +this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10. -9. Acceptance Not Required for Having Copies. + 9. Acceptance Not Required for Having Copies. -You are not required to accept this License in order to receive or -run a copy of the Program. Ancillary propagation of a covered work + You are not required to accept this License in order to receive or +run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission -to receive a copy likewise does not require acceptance. However, +to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or -modify any covered work. These actions infringe copyright if you do -not accept this License. Therefore, by modifying or propagating a +modify any covered work. These actions infringe copyright if you do +not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so. -10. Automatic Licensing of Downstream Recipients. + 10. Automatic Licensing of Downstream Recipients. -Each time you convey a covered work, the recipient automatically + Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and -propagate that work, subject to this License. You are not responsible +propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License. -An "entity transaction" is a transaction transferring control of an + An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an -organization, or merging organizations. If propagation of a covered +organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could @@ -448,43 +448,43 @@ give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts. -You may not impose any further restrictions on the exercise of the -rights granted or affirmed under this License. For example, you may + You may not impose any further restrictions on the exercise of the +rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it. -11. Patents. + 11. Patents. -A "contributor" is a copyright holder who authorizes use under this -License of the Program or a work on which the Program is based. The + A "contributor" is a copyright holder who authorizes use under this +License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version". -A contributor's "essential patent claims" are all patent claims + A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a -consequence of further modification of the contributor version. For +consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License. -Each contributor grants you a non-exclusive, worldwide, royalty-free + Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. -In the following three paragraphs, a "patent license" is any express + In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to -sue for patent infringement). To "grant" such a patent license to a +sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party. -If you convey a covered work, knowingly relying on a patent license, + If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, @@ -492,13 +492,13 @@ then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent -license to downstream recipients. "Knowingly relying" means you have +license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid. -If, pursuant to or in connection with a single transaction or + If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify @@ -506,10 +506,10 @@ or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it. -A patent license is "discriminatory" if it does not include within + A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are -specifically granted under this License. You may not convey a covered +specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying @@ -521,83 +521,83 @@ for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007. -Nothing in this License shall be construed as excluding or limiting + Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law. -12. No Surrender of Others' Freedom. + 12. No Surrender of Others' Freedom. -If conditions are imposed on you (whether by court order, agreement or + If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not -excuse you from the conditions of this License. If you cannot convey a +excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may -not convey it at all. For example, if you agree to terms that obligate you +not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program. -13. Remote Network Interaction; Use with the GNU General Public License. + 13. Remote Network Interaction; Use with the GNU General Public License. -Notwithstanding any other provision of this License, if you modify the + Notwithstanding any other provision of this License, if you modify the Program, your modified version must prominently offer all users interacting with it remotely through a computer network (if your version supports such interaction) an opportunity to receive the Corresponding Source of your version by providing access to the Corresponding Source from a network server at no charge, through some standard or customary -means of facilitating copying of software. This Corresponding Source +means of facilitating copying of software. This Corresponding Source shall include the Corresponding Source for any work covered by version 3 of the GNU General Public License that is incorporated pursuant to the following paragraph. -Notwithstanding any other provision of this License, you have + Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU General Public License into a single -combined work, and to convey the resulting work. The terms of this +combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the work with which it is combined will remain governed by version 3 of the GNU General Public License. -14. Revised Versions of this License. + 14. Revised Versions of this License. -The Free Software Foundation may publish revised and/or new versions of -the GNU Affero General Public License from time to time. Such new versions + The Free Software Foundation may publish revised and/or new versions of +the GNU Affero General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. -Each version is given a distinguishing version number. If the + Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU Affero General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software -Foundation. If the Program does not specify a version number of the +Foundation. If the Program does not specify a version number of the GNU Affero General Public License, you may choose any version ever published by the Free Software Foundation. -If the Program specifies that a proxy can decide which future + If the Program specifies that a proxy can decide which future versions of the GNU Affero General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program. -Later license versions may give you additional or different -permissions. However, no additional obligations are imposed on any + Later license versions may give you additional or different +permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version. -15. Disclaimer of Warranty. + 15. Disclaimer of Warranty. -THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY -APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT + THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY +APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR -PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM -IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF +PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM +IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. -16. Limitation of Liability. + 16. Limitation of Liability. -IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING + IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE @@ -607,9 +607,9 @@ PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. -17. Interpretation of Sections 15 and 16. + 17. Interpretation of Sections 15 and 16. -If the disclaimer of warranty and limitation of liability provided + If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the @@ -620,11 +620,11 @@ copy of the Program in return for a fee. How to Apply These Terms to Your New Programs -If you develop a new program, and you want it to be of the greatest + If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. -To do so, attach the following notices to the program. It is safest + To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. @@ -647,15 +647,15 @@ the "copyright" line and a pointer to where the full notice is found. Also add information on how to contact you by electronic and paper mail. -If your software can interact with users remotely through a computer + If your software can interact with users remotely through a computer network, you should also make sure that it provides a way for users to -get its source. For example, if your program is a web application, its +get its source. For example, if your program is a web application, its interface could display a "Source" link that leads users to an archive -of the code. There are many ways you could offer source, and different +of the code. There are many ways you could offer source, and different solutions will be better for different programs; see section 13 for the specific requirements. -You should also get your employer (if you work as a programmer) or school, + You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU AGPL, see -. +. \ No newline at end of file diff --git a/Tests/Shapes/GetCippAlerts.json b/Tests/Shapes/GetCippAlerts.json new file mode 100644 index 000000000000..3addc99f5f79 --- /dev/null +++ b/Tests/Shapes/GetCippAlerts.json @@ -0,0 +1,14 @@ +{ + "_metadata": { + "endpoint": "GetCippAlerts", + "generatedAt": "2026-04-03T23:40:00.7267346+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "Alert": "string", + "link": "string", + "title": "string", + "type": "string" + } +} diff --git a/Tests/Shapes/GetVersion.json b/Tests/Shapes/GetVersion.json new file mode 100644 index 000000000000..87b1af1ed425 --- /dev/null +++ b/Tests/Shapes/GetVersion.json @@ -0,0 +1,16 @@ +{ + "_metadata": { + "endpoint": "GetVersion", + "generatedAt": "2026-04-03T23:40:01.5268074+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "LocalCIPPAPIVersion": "string", + "LocalCIPPVersion": "null", + "OutOfDateCIPP": "bool", + "OutOfDateCIPPAPI": "bool", + "RemoteCIPPAPIVersion": "string", + "RemoteCIPPVersion": "string" + } +} diff --git a/Tests/Shapes/ListAdminPortalLicenses.json b/Tests/Shapes/ListAdminPortalLicenses.json new file mode 100644 index 000000000000..d5edcbcbd6dc --- /dev/null +++ b/Tests/Shapes/ListAdminPortalLicenses.json @@ -0,0 +1,38 @@ +{ + "_metadata": { + "endpoint": "ListAdminPortalLicenses", + "generatedAt": "2026-04-03T23:40:50.5295175+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "aadSkuId": "string", + "aadSkuPartNumber": "string", + "allotments": "null", + "allotmentsMetadata": { + "allotmentsCount": "number", + "catalogIdsCount": {}, + "consumedUnits": "number", + "licenseCount": "number" + }, + "appliesTo": "string", + "capabilityStatus": "string", + "consumedUnits": "number", + "displayName": "string", + "prepaidUnits": { + "enabled": "number", + "suspended": "number", + "warning": "number" + }, + "services": { + "_type": "array", + "_element": { + "appliesTo": "truncated", + "displayName": "truncated", + "provisioningStatus": "truncated", + "serviceId": "truncated", + "serviceName": "truncated" + } + } + } +} diff --git a/Tests/Shapes/ListAlertsQueue.json b/Tests/Shapes/ListAlertsQueue.json new file mode 100644 index 000000000000..365337de6e16 --- /dev/null +++ b/Tests/Shapes/ListAlertsQueue.json @@ -0,0 +1,49 @@ +{ + "_metadata": { + "endpoint": "ListAlertsQueue", + "generatedAt": "2026-04-03T23:40:51.8531891+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Actions": "string", + "AlertComment": "string", + "Conditions": "string", + "EventType": "string", + "excludedTenants": { + "addedFields": { + "customerId": "truncated", + "defaultDomainName": "truncated", + "displayName": "truncated" + }, + "label": "string", + "type": "string", + "value": "string" + }, + "LogType": "string", + "PartitionKey": "string", + "RawAlert": { + "Actions": { + "label": "truncated", + "value": "truncated" + }, + "AlertComment": "string", + "Conditions": { + "_type": "array", + "_element": "truncated" + }, + "PartitionKey": "string", + "RowKey": "string", + "Tenants": { + "addedFields": "truncated", + "label": "truncated", + "type": "truncated", + "value": "truncated" + }, + "type": "string" + }, + "RepeatsEvery": "string", + "RowKey": "string", + "Tenants": "string" + } +} diff --git a/Tests/Shapes/ListAntiPhishingFilters.json b/Tests/Shapes/ListAntiPhishingFilters.json new file mode 100644 index 000000000000..a6b8b3b80e78 --- /dev/null +++ b/Tests/Shapes/ListAntiPhishingFilters.json @@ -0,0 +1,91 @@ +{ + "_metadata": { + "endpoint": "ListAntiPhishingFilters", + "generatedAt": "2026-04-03T23:40:54.7333324+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AdminDisplayName": "string", + "AuthenticationFailAction": "string", + "DistinguishedName": "string", + "DmarcQuarantineAction": "string", + "DmarcRejectAction": "string", + "Enabled": "bool", + "EnableFirstContactSafetyTips": "bool", + "EnableMailboxIntelligence": "bool", + "EnableMailboxIntelligenceProtection": "bool", + "EnableOrganizationDomainsProtection": "bool", + "EnableSimilarDomainsSafetyTips": "bool", + "EnableSimilarUsersSafetyTips": "bool", + "EnableSpoofIntelligence": "bool", + "EnableSuspiciousSafetyTip": "bool", + "EnableTargetedDomainsProtection": "bool", + "EnableTargetedUserProtection": "bool", + "EnableUnauthenticatedSender": "bool", + "EnableUnusualCharactersSafetyTips": "bool", + "EnableViaTag": "bool", + "ExchangeObjectId": "string", + "ExchangeObjectId@data.type": "string", + "ExchangeObjectId@odata.type": "string", + "ExchangeVersion": "string", + "ExcludedDomains": "null", + "ExcludedDomains@odata.type": "string", + "ExcludedSenders": "null", + "ExcludedSenders@odata.type": "string", + "ExcludedSubDomains": "null", + "ExcludedSubDomains@odata.type": "string", + "Guid": "string", + "Guid@data.type": "string", + "Guid@odata.type": "string", + "HonorDmarcPolicy": "bool", + "Id": "string", + "Identity": "string", + "ImpersonationProtectionState": "string", + "IsDefault": "bool", + "IsValid": "bool", + "MailboxIntelligenceProtectionAction": "string", + "MailboxIntelligenceProtectionActionRecipients": "null", + "MailboxIntelligenceProtectionActionRecipients@odata.type": "string", + "MailboxIntelligenceQuarantineTag": "string", + "Name": "string", + "ObjectCategory": "string", + "ObjectClass": { + "_type": "array", + "_element": "string" + }, + "ObjectClass@odata.type": "string", + "OrganizationalUnitRoot": "string", + "OrganizationId": "string", + "OriginatingServer": "string", + "PhishThresholdLevel": "number", + "PhishThresholdLevel@data.type": "string", + "PolicyTag": "string", + "Priority": "null", + "RecipientDomainIs": "null", + "RecommendedPolicyType": "string", + "RuleName": "null", + "SpoofQuarantineTag": "string", + "State": "null", + "TargetedDomainActionRecipients": "null", + "TargetedDomainActionRecipients@odata.type": "string", + "TargetedDomainProtectionAction": "string", + "TargetedDomainQuarantineTag": "string", + "TargetedDomainsToProtect": "null", + "TargetedDomainsToProtect@odata.type": "string", + "TargetedUserActionRecipients": "null", + "TargetedUserActionRecipients@odata.type": "string", + "TargetedUserProtectionAction": "string", + "TargetedUserQuarantineTag": "string", + "TargetedUsersToProtect": "null", + "TargetedUsersToProtect@odata.type": "string", + "WhenChanged": "datetime", + "WhenChanged@data.type": "string", + "WhenChangedUTC": "datetime", + "WhenChangedUTC@data.type": "string", + "WhenCreated": "datetime", + "WhenCreated@data.type": "string", + "WhenCreatedUTC": "datetime", + "WhenCreatedUTC@data.type": "string" + } +} diff --git a/Tests/Shapes/ListApiTest.json b/Tests/Shapes/ListApiTest.json new file mode 100644 index 000000000000..66c11086a815 --- /dev/null +++ b/Tests/Shapes/ListApiTest.json @@ -0,0 +1,244 @@ +{ + "_metadata": { + "endpoint": "ListApiTest", + "generatedAt": "2026-04-03T22:07:31.9259387+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "AllowedGroups": "null", + "AllowedTenants": "null", + "EnvironmentVariables": { + "_": "string", + "APP_UID": "string", + "APPINSIGHTS_INSTRUMENTATIONKEY": "string", + "ApplicationID": "string", + "APPLICATIONINSIGHTS_CONNECTION_STRING": "string", + "APPSETTING_APPINSIGHTS_INSTRUMENTATIONKEY": "string", + "APPSETTING_APPLICATIONINSIGHTS_CONNECTION_STRING": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__Console__IsEnabled": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Azure": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Azure.Core": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Azure.Storage": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Default": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__DurableTask": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Function": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Host": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Host.Function": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Microsoft": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__Microsoft.Azure.WebJobs.Script.WebHost.Middleware": "string", + "APPSETTING_AzureFunctionsJobHost__Logging__LogLevel__System": "string", + "APPSETTING_AzureWebJobsStorage": "string", + "APPSETTING_CIPP_BUSINESS_HOURS_END": "string", + "APPSETTING_CIPP_BUSINESS_HOURS_START": "string", + "APPSETTING_CIPP_CONSOLE_LOG_LEVEL": "string", + "APPSETTING_CIPP_HOSTED": "string", + "APPSETTING_CIPP_HOSTED_KV_SUB": "string", + "APPSETTING_DEBUG_ENV_VARS": "string", + "APPSETTING_DEPLOYMENT_STORAGE_CONNECTION_STRING": "string", + "APPSETTING_FUNCTIONS_EXTENSION_VERSION": "string", + "APPSETTING_john_test": "string", + "APPSETTING_REMOTEDEBUGGINGVERSION": "string", + "APPSETTING_ScmType": "string", + "APPSETTING_WEBSITE_AUTH_AAD_ALLOWED_TENANTS": "string", + "APPSETTING_WEBSITE_DEFAULT_HOSTNAME": "string", + "APPSETTING_WEBSITE_ENABLE_SYNC_UPDATE_SITE": "string", + "APPSETTING_WEBSITE_RESOURCE_GROUP": "string", + "APPSETTING_WEBSITE_SITE_NAME": "string", + "APPSETTING_WEBSITE_SLOT_NAME": "string", + "APPSETTING_WEBSITE_TIME_ZONE": "string", + "ASPNET_VERSION": "string", + "ASPNETCORE_CONTENTROOT": "string", + "ASPNETCORE_HTTP_PORTS": "string", + "ASPNETCORE_URLS": "string", + "AzureFunctionsJobHost__Logging__Console__IsEnabled": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Azure": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Azure.Core": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Azure.Storage": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Default": "string", + "AzureFunctionsJobHost__Logging__LogLevel__DurableTask": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Function": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Host": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Host.Function": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Microsoft": "string", + "AzureFunctionsJobHost__Logging__LogLevel__Microsoft.Azure.WebJobs.Script.WebHost.Middleware": "string", + "AzureFunctionsJobHost__Logging__LogLevel__System": "string", + "AZUREPS_CHECK_FOR_UPGRADE": "string", + "AZUREPS_HOST_ENVIRONMENT": "string", + "AZUREPS_OUTPUT_PLAINTEXT_AZACCESSTOKEN": "string", + "AzureWebEncryptionKey": "string", + "AzureWebJobsScriptRoot": "string", + "CIPP_BUSINESS_HOURS_END": "string", + "CIPP_BUSINESS_HOURS_START": "string", + "CIPP_CONSOLE_LOG_LEVEL": "string", + "CIPP_HOSTED": "string", + "CIPP_HOSTED_KV_SUB": "string", + "CippVersion": "string", + "CONTAINER_ENCRYPTION_KEY": "string", + "CONTAINER_NAME": "string", + "CONTAINER_SPECIALIZATION_CONTEXT_MOUNT_PATH": "string", + "DEBUG_ENV_VARS": "string", + "DOTNET_RUNNING_IN_CONTAINER": "string", + "DOTNET_USE_POLLING_FILE_WATCHER": "string", + "DOTNET_VERSION": "string", + "FUNCTIONS_ALWAYSREADY_INSTANCE": "string", + "FUNCTIONS_APPLICATION_DIRECTORY": "string", + "FUNCTIONS_EXTENSION_VERSION": "string", + "FUNCTIONS_METRICS_PUBLISH_PATH": "string", + "FUNCTIONS_PLATFORM_CONFIG_FILE_PATH": "string", + "FUNCTIONS_ROLLOUT_STAGE": "string", + "FUNCTIONS_SITE_UPDATE_ID": "string", + "FUNCTIONS_TARGET_GROUP": "string", + "FUNCTIONS_WORKER_DIRECTORY": "string", + "FUNCTIONS_WORKER_RUNTIME": "string", + "FUNCTIONS_WORKER_RUNTIME_VERSION": "string", + "HOME": "string", + "HOST_VERSION": "string", + "IDENTITY_ENDPOINT": "string", + "IDENTITY_HEADER": "string", + "INITIALIZED_FROM_PLACEHOLDER": "string", + "john_test": "string", + "LANG": "string", + "LEGION_SERVICE_HOST": "string", + "LocalSitePackagesPath": "string", + "LOGNAME": "string", + "MESH_INIT_URI": "string", + "MSI_ENDPOINT": "string", + "MSI_SECRET": "string", + "PATH": "string", + "POWERSHELL_DISTRIBUTION_CHANNEL": "string", + "PSModulePath": "string", + "PSWorkerInProcConcurrencyUpperBound": "string", + "PWD": "string", + "REGION_NAME": "string", + "REMOTEDEBUGGINGVERSION": "string", + "ScmType": "string", + "SetFromProfile": "string", + "SHELL": "string", + "SHLVL": "string", + "SUDO_COMMAND": "string", + "SUDO_GID": "string", + "SUDO_UID": "string", + "SUDO_USER": "string", + "TenantID": "string", + "TERM": "string", + "TZ": "string", + "USER": "string", + "WEBSITE_AUTH_AAD_ALLOWED_TENANTS": "string", + "WEBSITE_AUTH_CLIENT_ID": "string", + "WEBSITE_AUTH_ENABLED": "string", + "WEBSITE_AUTH_ENCRYPTION_KEY": "string", + "WEBSITE_AUTH_SIGNING_KEY": "string", + "WEBSITE_AUTH_V2_CONFIG_JSON": "string", + "WEBSITE_CLOUD_NAME": "string", + "WEBSITE_CONTAINER_READY": "string", + "WEBSITE_DEFAULT_HOSTNAME": "string", + "WEBSITE_DEPLOYMENT_ID": "string", + "WEBSITE_ENABLE_SYNC_UPDATE_SITE": "string", + "WEBSITE_FUNCTIONS_AZUREMONITOR_CATEGORIES": "string", + "WEBSITE_HOME_STAMPNAME": "string", + "WEBSITE_HOSTNAME": "string", + "WEBSITE_OWNER_NAME": "string", + "WEBSITE_PLACEHOLDER_MODE": "string", + "WEBSITE_POD_NAME": "string", + "WEBSITE_RESOURCE_GROUP": "string", + "WEBSITE_SITE_NAME": "string", + "WEBSITE_SKU": "string", + "WEBSITE_SLOT_NAME": "string", + "WEBSITE_TIME_ZONE": "string" + }, + "Request": { + "Body": "null", + "Headers": { + "accept-encoding": "truncated", + "authorization": "truncated", + "client-ip": "truncated", + "connection": "truncated", + "disguised-host": "truncated", + "host": "truncated", + "max-forwards": "truncated", + "user-agent": "truncated", + "was-default-hostname": "truncated", + "x-appservice-proto": "truncated", + "x-arr-log-id": "truncated", + "x-arr-ssl": "truncated", + "x-forwarded-for": "truncated", + "x-forwarded-proto": "truncated", + "x-forwarded-tlsversion": "truncated", + "x-ms-client-principal": "truncated", + "x-ms-client-principal-id": "truncated", + "x-ms-client-principal-idp": "truncated", + "x-ms-client-principal-name": "truncated", + "x-original-url": "truncated", + "x-site-deployment-id": "truncated", + "x-waws-unencoded-url": "truncated" + }, + "Method": "string", + "Params": { + "CIPPEndpoint": "truncated" + }, + "Query": {}, + "RawBody": "null", + "Url": "string" + }, + "ResourceGraphTest": { + "count": "number", + "data": { + "_type": "array", + "_element": "truncated" + }, + "facets": "null", + "resultTruncated": "string", + "totalRecords": "number" + }, + "TriggerMetadata": { + "$request": { + "Body": "null", + "Headers": "truncated", + "Method": "truncated", + "Params": "truncated", + "Query": "truncated", + "RawBody": "null", + "Url": "truncated" + }, + "CIPPEndpoint": "string", + "FunctionDirectory": "string", + "FunctionName": "string", + "Headers": { + "Accept-Encoding": "truncated", + "Authorization": "truncated", + "CLIENT-IP": "truncated", + "Connection": "truncated", + "DISGUISED-HOST": "truncated", + "Host": "truncated", + "Max-Forwards": "truncated", + "User-Agent": "truncated", + "WAS-DEFAULT-HOSTNAME": "truncated", + "X-AppService-Proto": "truncated", + "X-ARR-LOG-ID": "truncated", + "X-ARR-SSL": "truncated", + "X-Forwarded-For": "truncated", + "X-Forwarded-Proto": "truncated", + "X-Forwarded-TlsVersion": "truncated", + "X-MS-CLIENT-PRINCIPAL": "truncated", + "X-MS-CLIENT-PRINCIPAL-ID": "truncated", + "X-MS-CLIENT-PRINCIPAL-IDP": "truncated", + "X-MS-CLIENT-PRINCIPAL-NAME": "truncated", + "X-Original-URL": "truncated", + "X-SITE-DEPLOYMENT-ID": "truncated", + "X-WAWS-Unencoded-URL": "truncated" + }, + "InvocationId": "string", + "Query": {}, + "Request": { + "Body": "null", + "Headers": "truncated", + "Method": "truncated", + "Params": "truncated", + "Query": "truncated", + "RawBody": "null", + "Url": "truncated" + } + } + } +} diff --git a/Tests/Shapes/ListAppApprovalTemplates.json b/Tests/Shapes/ListAppApprovalTemplates.json new file mode 100644 index 000000000000..53db3f589b33 --- /dev/null +++ b/Tests/Shapes/ListAppApprovalTemplates.json @@ -0,0 +1,31 @@ +{ + "_metadata": { + "endpoint": "ListAppApprovalTemplates", + "generatedAt": "2026-04-03T23:40:02.4726473+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "AppId": "string", + "AppName": "string", + "AppType": "string", + "CreatedBy": "string", + "CreatedOn": "datetime", + "GUID": "string", + "Permissions": { + "00000002-0000-0ff1-ce00-000000000000": { + "applicationPermissions": "truncated", + "delegatedPermissions": "truncated" + }, + "00000003-0000-0000-c000-000000000000": { + "applicationPermissions": "truncated", + "delegatedPermissions": "truncated" + } + }, + "PermissionSetId": "string", + "PermissionSetName": "string", + "TemplateId": "string", + "TemplateName": "string", + "Timestamp": "datetime" + } +} diff --git a/Tests/Shapes/ListAppConsentRequests.json b/Tests/Shapes/ListAppConsentRequests.json new file mode 100644 index 000000000000..7f20a243a279 --- /dev/null +++ b/Tests/Shapes/ListAppConsentRequests.json @@ -0,0 +1,25 @@ +{ + "_metadata": { + "endpoint": "ListAppConsentRequests", + "generatedAt": "2026-04-03T23:40:59.3076014+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "appDisplayName": "string", + "appId": "string", + "consentUrl": "string", + "requestDate": "datetime", + "requestReason": "string", + "requestStatus": "string", + "requestUser": "string", + "reviewedBy": "string", + "reviewedDate": "null", + "reviewedJustification": "string", + "reviewedStatus": "string", + "scopes": { + "_type": "array", + "_element": "string" + } + } +} diff --git a/Tests/Shapes/ListAppProtectionPolicies.json b/Tests/Shapes/ListAppProtectionPolicies.json new file mode 100644 index 000000000000..895021d5c2ee --- /dev/null +++ b/Tests/Shapes/ListAppProtectionPolicies.json @@ -0,0 +1,133 @@ +{ + "_metadata": { + "endpoint": "ListAppProtectionPolicies", + "generatedAt": "2026-04-03T23:41:03.6413020+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "allowedAndroidDeviceManufacturers": "null", + "allowedAndroidDeviceModels": "null", + "allowedDataIngestionLocations": { + "_type": "array", + "_element": "string" + }, + "allowedDataStorageLocations": { + "_type": "array", + "_element": "string" + }, + "allowedInboundDataTransferSources": "string", + "allowedOutboundClipboardSharingExceptionLength": "number", + "allowedOutboundClipboardSharingLevel": "string", + "allowedOutboundDataTransferDestinations": "string", + "appActionIfAccountIsClockedOut": "null", + "appActionIfAndroidDeviceManufacturerNotAllowed": "string", + "appActionIfAndroidDeviceModelNotAllowed": "string", + "appActionIfAndroidSafetyNetAppsVerificationFailed": "string", + "appActionIfAndroidSafetyNetDeviceAttestationFailed": "string", + "appActionIfDeviceComplianceRequired": "string", + "appActionIfDeviceLockNotSet": "string", + "appActionIfDevicePasscodeComplexityLessThanHigh": "null", + "appActionIfDevicePasscodeComplexityLessThanLow": "null", + "appActionIfDevicePasscodeComplexityLessThanMedium": "string", + "appActionIfMaximumPinRetriesExceeded": "string", + "appActionIfSamsungKnoxAttestationRequired": "null", + "appActionIfUnableToAuthenticateUser": "string", + "appGroupType": "string", + "approvedKeyboards": "null", + "assignments": { + "id": "string", + "source": "string", + "sourceId": "string", + "target": { + "@odata.type": "truncated", + "deviceAndAppManagementAssignmentFilterId": "null", + "deviceAndAppManagementAssignmentFilterType": "truncated", + "groupId": "truncated" + } + }, + "assignments@odata.context": "string", + "biometricAuthenticationBlocked": "bool", + "blockAfterCompanyPortalUpdateDeferralInDays": "number", + "blockDataIngestionIntoOrganizationDocuments": "bool", + "connectToVpnOnLaunch": "bool", + "contactSyncBlocked": "bool", + "createdDateTime": "datetime", + "customBrowserDisplayName": "string", + "customBrowserPackageId": "string", + "customDialerAppDisplayName": "string", + "customDialerAppPackageId": "string", + "dataBackupBlocked": "bool", + "deployedAppCount": "number", + "description": "string", + "deviceComplianceRequired": "bool", + "deviceLockRequired": "bool", + "dialerRestrictionLevel": "string", + "disableAppEncryptionIfDeviceEncryptionIsEnabled": "bool", + "disableAppPinIfDevicePinIsSet": "bool", + "displayName": "string", + "encryptAppData": "bool", + "exemptedAppPackages": "null", + "fingerprintAndBiometricEnabled": "null", + "fingerprintBlocked": "bool", + "gracePeriodToBlockAppsDuringOffClockHours": "null", + "id": "string", + "isAssigned": "bool", + "keyboardsRestricted": "bool", + "lastModifiedDateTime": "datetime", + "managedBrowser": "string", + "managedBrowserToOpenLinksRequired": "bool", + "maximumAllowedDeviceThreatLevel": "string", + "maximumPinRetries": "number", + "maximumRequiredOsVersion": "null", + "maximumWarningOsVersion": "null", + "maximumWipeOsVersion": "null", + "messagingRedirectAppDisplayName": "null", + "messagingRedirectAppPackageId": "null", + "minimumPinLength": "number", + "minimumRequiredAppVersion": "null", + "minimumRequiredCompanyPortalVersion": "null", + "minimumRequiredOsVersion": "null", + "minimumRequiredPatchVersion": "string", + "minimumWarningAppVersion": "null", + "minimumWarningCompanyPortalVersion": "null", + "minimumWarningOsVersion": "null", + "minimumWarningPatchVersion": "string", + "minimumWipeAppVersion": "null", + "minimumWipeCompanyPortalVersion": "null", + "minimumWipeOsVersion": "null", + "minimumWipePatchVersion": "string", + "mobileThreatDefensePartnerPriority": "null", + "mobileThreatDefenseRemediationAction": "string", + "notificationRestriction": "string", + "organizationalCredentialsRequired": "bool", + "periodBeforePinReset": "string", + "periodOfflineBeforeAccessCheck": "string", + "periodOfflineBeforeWipeIsEnforced": "string", + "periodOnlineBeforeAccessCheck": "string", + "pinCharacterSet": "string", + "pinRequired": "bool", + "pinRequiredInsteadOfBiometricTimeout": "string", + "PolicyAssignment": "string", + "PolicyExclude": "string", + "PolicySource": "string", + "PolicyTypeName": "string", + "previousPinBlockCount": "number", + "printBlocked": "bool", + "protectedMessagingRedirectAppType": "string", + "requireClass3Biometrics": "bool", + "requiredAndroidSafetyNetAppsVerificationType": "string", + "requiredAndroidSafetyNetDeviceAttestationType": "string", + "requiredAndroidSafetyNetEvaluationType": "string", + "requirePinAfterBiometricChange": "bool", + "roleScopeTagIds": "string", + "saveAsBlocked": "bool", + "screenCaptureBlocked": "bool", + "simplePinBlocked": "bool", + "targetedAppManagementLevels": "string", + "URLName": "string", + "version": "string", + "warnAfterCompanyPortalUpdateDeferralInDays": "number", + "wipeAfterCompanyPortalUpdateDeferralInDays": "number" + } +} diff --git a/Tests/Shapes/ListAppTemplates.json b/Tests/Shapes/ListAppTemplates.json new file mode 100644 index 000000000000..b5c364953a32 --- /dev/null +++ b/Tests/Shapes/ListAppTemplates.json @@ -0,0 +1,21 @@ +{ + "_metadata": { + "endpoint": "ListAppTemplates", + "generatedAt": "2026-04-03T23:40:03.1471998+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "appCount": "number", + "appNames": "string", + "Apps": { + "appName": "string", + "appType": "string", + "config": "string" + }, + "appTypes": "string", + "description": "string", + "displayName": "string", + "GUID": "string" + } +} diff --git a/Tests/Shapes/ListApplicationQueue.json b/Tests/Shapes/ListApplicationQueue.json new file mode 100644 index 000000000000..24d949b1f59c --- /dev/null +++ b/Tests/Shapes/ListApplicationQueue.json @@ -0,0 +1,16 @@ +{ + "_metadata": { + "endpoint": "ListApplicationQueue", + "generatedAt": "2026-04-03T23:40:03.9716316+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "applicationName": "string", + "assignTo": "string", + "cmdLine": "null", + "id": "string", + "status": "string", + "tenantName": "string" + } +} diff --git a/Tests/Shapes/ListApps.json b/Tests/Shapes/ListApps.json new file mode 100644 index 000000000000..c8f9bdcfe289 --- /dev/null +++ b/Tests/Shapes/ListApps.json @@ -0,0 +1,40 @@ +{ + "_metadata": { + "endpoint": "ListApps", + "generatedAt": "2026-04-03T23:41:06.0611589+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "@odata.type": "string", + "AppAssignment": "string", + "AppExclude": "string", + "assignments": "null", + "assignments@odata.context": "string", + "createdDateTime": "datetime", + "dependentAppCount": "number", + "description": "string", + "developer": "null", + "displayName": "string", + "id": "string", + "informationUrl": "null", + "installExperience": { + "runAsAccount": "string" + }, + "isAssigned": "bool", + "isFeatured": "bool", + "largeIcon": "null", + "lastModifiedDateTime": "datetime", + "manifestHash": "null", + "notes": "null", + "owner": "null", + "packageIdentifier": "string", + "privacyInformationUrl": "null", + "publisher": "null", + "publishingState": "string", + "roleScopeTagIds": "null", + "supersededAppCount": "number", + "supersedingAppCount": "number", + "uploadState": "number" + } +} diff --git a/Tests/Shapes/ListAssignmentFilterTemplates.json b/Tests/Shapes/ListAssignmentFilterTemplates.json new file mode 100644 index 000000000000..a4ae43456654 --- /dev/null +++ b/Tests/Shapes/ListAssignmentFilterTemplates.json @@ -0,0 +1,16 @@ +{ + "_metadata": { + "endpoint": "ListAssignmentFilterTemplates", + "generatedAt": "2026-04-03T23:40:04.7013725+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "assignmentFilterManagementType": "string", + "description": "string", + "displayName": "string", + "GUID": "string", + "platform": "string", + "rule": "string" + } +} diff --git a/Tests/Shapes/ListAssignmentFilters.json b/Tests/Shapes/ListAssignmentFilters.json new file mode 100644 index 000000000000..f64440da2f0e --- /dev/null +++ b/Tests/Shapes/ListAssignmentFilters.json @@ -0,0 +1,20 @@ +{ + "_metadata": { + "endpoint": "ListAssignmentFilters", + "generatedAt": "2026-04-03T23:41:08.2148339+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "assignmentFilterManagementType": "string", + "createdDateTime": "datetime", + "description": "string", + "displayName": "string", + "id": "string", + "lastModifiedDateTime": "datetime", + "payloads": "null", + "platform": "string", + "roleScopeTags": "string", + "rule": "string" + } +} diff --git a/Tests/Shapes/ListAuditLogSearches.json b/Tests/Shapes/ListAuditLogSearches.json new file mode 100644 index 000000000000..9e12608de1f6 --- /dev/null +++ b/Tests/Shapes/ListAuditLogSearches.json @@ -0,0 +1,36 @@ +{ + "_metadata": { + "endpoint": "ListAuditLogSearches", + "generatedAt": "2026-04-03T23:41:18.3933214+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "CippStatus": "string", + "EndTime": "datetime", + "MatchedLogs": "null", + "MatchedRules": "null", + "Query": { + "@odata.context": "string", + "administrativeUnitIdFilters": "null", + "displayName": "string", + "filterEndDateTime": "datetime", + "filterStartDateTime": "datetime", + "id": "string", + "ipAddressFilters": "null", + "keywordFilter": "null", + "objectIdFilters": "null", + "operationFilters": "null", + "recordTypeFilters": { + "_type": "array", + "_element": "truncated" + }, + "serviceFilters": "string", + "status": "string", + "userPrincipalNameFilters": "null" + }, + "SearchId": "string", + "StartTime": "datetime", + "TotalLogs": "null" + } +} diff --git a/Tests/Shapes/ListAvailableTests.json b/Tests/Shapes/ListAvailableTests.json new file mode 100644 index 000000000000..daff3ae6be9c --- /dev/null +++ b/Tests/Shapes/ListAvailableTests.json @@ -0,0 +1,29 @@ +{ + "_metadata": { + "endpoint": "ListAvailableTests", + "generatedAt": "2026-04-03T22:07:37.5221655+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "CustomTests": "null", + "DevicesTests": { + "_type": "array", + "_element": { + "category": "truncated", + "id": "truncated", + "name": "truncated", + "testFolder": "truncated" + } + }, + "IdentityTests": { + "_type": "array", + "_element": { + "category": "truncated", + "id": "truncated", + "name": "truncated", + "testFolder": "truncated" + } + } + } +} diff --git a/Tests/Shapes/ListAzureADConnectStatus.json b/Tests/Shapes/ListAzureADConnectStatus.json new file mode 100644 index 000000000000..17684a522ed1 --- /dev/null +++ b/Tests/Shapes/ListAzureADConnectStatus.json @@ -0,0 +1,54 @@ +{ + "_metadata": { + "endpoint": "ListAzureADConnectStatus", + "generatedAt": "2026-04-03T23:41:32.9840750+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AzureADConnectSettings": { + "dirSyncEnabled": "bool", + "numberOfHoursFromLastSync": "null", + "raw": { + "assignedPlans": "truncated", + "businessPhones": "truncated", + "city": "truncated", + "country": "null", + "countryLetterCode": "truncated", + "createdDateTime": "truncated", + "defaultUsageLocation": "null", + "deletedDateTime": "null", + "directorySizeQuota": "truncated", + "displayName": "truncated", + "id": "truncated", + "isMultipleDataLocationsForServicesEnabled": "null", + "marketingNotificationEmails": "truncated", + "onPremisesLastPasswordSyncDateTime": "null", + "onPremisesLastSyncDateTime": "null", + "onPremisesSyncEnabled": "null", + "onPremisesSyncStatus": "null", + "partnerTenantType": "null", + "postalCode": "truncated", + "preferredLanguage": "truncated", + "privacyProfile": "truncated", + "provisionedPlans": "truncated", + "securityComplianceNotificationMails": "null", + "securityComplianceNotificationPhones": "null", + "state": "truncated", + "street": "truncated", + "technicalNotificationMails": "truncated", + "tenantType": "truncated", + "verifiedDomains": "truncated" + } + }, + "ObjectsInError": { + "_type": "array", + "_element": { + "displayName": "truncated", + "id": "truncated", + "ObjectType": "truncated", + "onPremisesProvisioningErrors": "null" + } + } + } +} diff --git a/Tests/Shapes/ListBPA.json b/Tests/Shapes/ListBPA.json new file mode 100644 index 000000000000..6fa0537d8263 --- /dev/null +++ b/Tests/Shapes/ListBPA.json @@ -0,0 +1,46 @@ +{ + "_metadata": { + "endpoint": "ListBPA", + "generatedAt": "2026-04-03T23:41:35.3945829+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Columns": { + "_type": "array", + "_element": { + "formatter": "truncated", + "name": "truncated", + "value": "truncated" + } + }, + "Data": { + "_type": "array", + "_element": { + "AnonymousPrivacyReports": "truncated", + "CurrentSecureScore": "truncated", + "ETag": "truncated", + "GUID": "truncated", + "LastRefresh": "truncated", + "MessageCopyforSentAsDisabled": "truncated", + "MFANudgeState": "truncated", + "OAuthAppConsent": "truncated", + "PartitionKey": "truncated", + "PasswordNeverExpires": "truncated", + "RowKey": "truncated", + "SecureDefaultState": "truncated", + "SharedMailboxeswithenabledusers": "truncated", + "TAPEnabled": "truncated", + "Tenant": "truncated", + "Timestamp": "truncated", + "UnifiedAuditLog": "truncated", + "Unusedlicenses": "truncated" + } + }, + "Keys": { + "_type": "array", + "_element": "string" + }, + "Style": "string" + } +} diff --git a/Tests/Shapes/ListBPATemplates.json b/Tests/Shapes/ListBPATemplates.json new file mode 100644 index 000000000000..5aef54e50246 --- /dev/null +++ b/Tests/Shapes/ListBPATemplates.json @@ -0,0 +1,22 @@ +{ + "_metadata": { + "endpoint": "ListBPATemplates", + "generatedAt": "2026-04-03T23:40:05.8565442+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "Data": { + "_type": "array", + "_element": { + "FrontendFields": "truncated", + "name": "truncated", + "StoreAs": "truncated", + "UseExistingInfo": "truncated" + } + }, + "GUID": "string", + "Name": "string", + "Style": "string" + } +} diff --git a/Tests/Shapes/ListCAtemplates.json b/Tests/Shapes/ListCAtemplates.json new file mode 100644 index 000000000000..96e08d5ec1b0 --- /dev/null +++ b/Tests/Shapes/ListCAtemplates.json @@ -0,0 +1,55 @@ +{ + "_metadata": { + "endpoint": "ListCAtemplates", + "generatedAt": "2026-04-03T23:40:07.1076349+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "conditions": { + "@odata.type": "string", + "agents": "null", + "applications": { + "@odata.type": "truncated", + "applicationFilter": "null", + "excludeApplications": "null", + "includeApplications": "truncated", + "includeAuthenticationContextClassReferences": "null", + "includeUserActions": "null" + }, + "clientApplications": "null", + "clientAppTypes": "string", + "devices": "null", + "deviceStates": "null", + "locations": "null", + "platforms": "null", + "signInRiskLevels": "null", + "times": "null", + "userRiskLevels": "null", + "users": { + "@odata.type": "truncated", + "excludeGroups": "truncated", + "excludeGuestsOrExternalUsers": "null", + "excludeRoles": "truncated", + "excludeUsers": "null", + "includeGroups": "null", + "includeGuestsOrExternalUsers": "null", + "includeRoles": "null", + "includeUsers": "truncated" + } + }, + "displayName": "string", + "grantControls": { + "@odata.type": "string", + "authenticationStrength": "null", + "builtInControls": "string", + "customAuthenticationFactors": "null", + "operator": "string", + "termsOfUse": "null" + }, + "GUID": "string", + "isSynced": "bool", + "source": "string", + "state": "string" + } +} diff --git a/Tests/Shapes/ListCommunityRepos.json b/Tests/Shapes/ListCommunityRepos.json new file mode 100644 index 000000000000..46e6ff55a8e2 --- /dev/null +++ b/Tests/Shapes/ListCommunityRepos.json @@ -0,0 +1,27 @@ +{ + "_metadata": { + "endpoint": "ListCommunityRepos", + "generatedAt": "2026-04-03T23:40:07.6491051+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "DefaultBranch": "string", + "Description": "string", + "FullName": "string", + "Id": "string", + "Name": "string", + "Owner": "string", + "RepoPermissions": { + "admin": "bool", + "maintain": "bool", + "pull": "bool", + "push": "bool", + "triage": "bool" + }, + "UploadBranch": "string", + "URL": "string", + "Visibility": "string", + "WriteAccess": "bool" + } +} diff --git a/Tests/Shapes/ListCompliancePolicies.json b/Tests/Shapes/ListCompliancePolicies.json new file mode 100644 index 000000000000..3ce18121b198 --- /dev/null +++ b/Tests/Shapes/ListCompliancePolicies.json @@ -0,0 +1,60 @@ +{ + "_metadata": { + "endpoint": "ListCompliancePolicies", + "generatedAt": "2026-04-03T23:41:56.1849612+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "@odata.type": "string", + "activeFirewallRequired": "bool", + "antiSpywareRequired": "bool", + "antivirusRequired": "bool", + "assignments": "null", + "assignments@odata.context": "string", + "bitLockerEnabled": "bool", + "codeIntegrityEnabled": "bool", + "configurationManagerComplianceRequired": "bool", + "createdDateTime": "datetime", + "defenderEnabled": "bool", + "defenderVersion": "null", + "description": "null", + "deviceCompliancePolicyScript": "null", + "deviceThreatProtectionEnabled": "bool", + "deviceThreatProtectionRequiredSecurityLevel": "string", + "displayName": "string", + "earlyLaunchAntiMalwareDriverEnabled": "bool", + "firmwareProtectionEnabled": "bool", + "id": "string", + "kernelDmaProtectionEnabled": "bool", + "lastModifiedDateTime": "datetime", + "memoryIntegrityEnabled": "bool", + "mobileOsMaximumVersion": "null", + "mobileOsMinimumVersion": "null", + "osMaximumVersion": "null", + "osMinimumVersion": "null", + "passwordBlockSimple": "bool", + "passwordExpirationDays": "null", + "passwordMinimumCharacterSetCount": "null", + "passwordMinimumLength": "null", + "passwordMinutesOfInactivityBeforeLock": "null", + "passwordPreviousPasswordBlockCount": "null", + "passwordRequired": "bool", + "passwordRequiredToUnlockFromIdle": "bool", + "passwordRequiredType": "string", + "PolicyAssignment": "string", + "PolicyExclude": "string", + "PolicyTypeName": "string", + "requireHealthyDeviceReport": "bool", + "roleScopeTagIds": "string", + "rtpEnabled": "bool", + "secureBootEnabled": "bool", + "signatureOutOfDate": "bool", + "storageRequireEncryption": "bool", + "tpmRequired": "bool", + "validOperatingSystemBuildRanges": "null", + "version": "number", + "virtualizationBasedSecurityEnabled": "bool", + "wslDistributions": "null" + } +} diff --git a/Tests/Shapes/ListConditionalAccessPolicies.json b/Tests/Shapes/ListConditionalAccessPolicies.json new file mode 100644 index 000000000000..35111155db81 --- /dev/null +++ b/Tests/Shapes/ListConditionalAccessPolicies.json @@ -0,0 +1,37 @@ +{ + "_metadata": { + "endpoint": "ListConditionalAccessPolicies", + "generatedAt": "2026-04-03T23:42:02.5933538+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "builtInControls": "string", + "clientAppTypes": "string", + "createdDateTime": "datetime", + "customAuthenticationFactors": "string", + "customer": "null", + "displayName": "string", + "excludeApplications": "string", + "excludeGroups": "string", + "excludeLocations": "string", + "excludePlatforms": "string", + "excludeRoles": "string", + "excludeUsers": "string", + "grantControlsOperator": "string", + "id": "string", + "includeApplications": "string", + "includeAuthenticationContextClassReferences": "string", + "includeGroups": "string", + "includeLocations": "string", + "includePlatforms": "string", + "includeRoles": "string", + "includeUserActions": "string", + "includeUsers": "string", + "modifiedDateTime": "datetime", + "rawjson": "string", + "state": "string", + "Tenant": "string", + "termsOfUse": "string" + } +} diff --git a/Tests/Shapes/ListConnectionFilter.json b/Tests/Shapes/ListConnectionFilter.json new file mode 100644 index 000000000000..5b0e02514a21 --- /dev/null +++ b/Tests/Shapes/ListConnectionFilter.json @@ -0,0 +1,36 @@ +{ + "_metadata": { + "endpoint": "ListConnectionFilter", + "generatedAt": "2026-04-03T23:42:04.7261137+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AdminDisplayName": "string", + "DirectoryBasedEdgeBlockMode": "string", + "DistinguishedName": "string", + "EnableSafeList": "bool", + "ExchangeObjectId": "string", + "ExchangeVersion": "string", + "Guid": "string", + "Id": "string", + "Identity": "string", + "IPAllowList": "null", + "IPBlockList": "null", + "IsDefault": "bool", + "IsValid": "bool", + "Name": "string", + "ObjectCategory": "string", + "ObjectClass": { + "_type": "array", + "_element": "string" + }, + "OrganizationalUnitRoot": "string", + "OrganizationId": "string", + "OriginatingServer": "string", + "WhenChanged": "datetime", + "WhenChangedUTC": "datetime", + "WhenCreated": "datetime", + "WhenCreatedUTC": "datetime" + } +} diff --git a/Tests/Shapes/ListConnectionFilterTemplates.json b/Tests/Shapes/ListConnectionFilterTemplates.json new file mode 100644 index 000000000000..30063cb5697c --- /dev/null +++ b/Tests/Shapes/ListConnectionFilterTemplates.json @@ -0,0 +1,16 @@ +{ + "_metadata": { + "endpoint": "ListConnectionFilterTemplates", + "generatedAt": "2026-04-03T23:40:08.2680466+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "comments": "null", + "EnableSafeList": "bool", + "GUID": "string", + "IPAllowList": "null", + "IPBlockList": "null", + "name": "string" + } +} diff --git a/Tests/Shapes/ListContactTemplates.json b/Tests/Shapes/ListContactTemplates.json new file mode 100644 index 000000000000..2724dc630f37 --- /dev/null +++ b/Tests/Shapes/ListContactTemplates.json @@ -0,0 +1,18 @@ +{ + "_metadata": { + "endpoint": "ListContactTemplates", + "generatedAt": "2026-04-03T23:40:08.8205669+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "comments": "string", + "displayName": "string", + "email": "string", + "firstName": "string", + "GUID": "string", + "hidefromGAL": "bool", + "lastName": "string", + "name": "string" + } +} diff --git a/Tests/Shapes/ListContacts.json b/Tests/Shapes/ListContacts.json new file mode 100644 index 000000000000..5571dd1376f6 --- /dev/null +++ b/Tests/Shapes/ListContacts.json @@ -0,0 +1,20 @@ +{ + "_metadata": { + "endpoint": "ListContacts", + "generatedAt": "2026-04-03T23:42:06.7536493+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "City": "string", + "Company": "string", + "Department": "string", + "DisplayName": "string", + "FirstName": "string", + "graphId": "string", + "Guid": "string", + "IsDirSynced": "bool", + "LastName": "string", + "WindowsEmailAddress": "string" + } +} diff --git a/Tests/Shapes/ListCustomDataMappings.json b/Tests/Shapes/ListCustomDataMappings.json new file mode 100644 index 000000000000..26f7904a327d --- /dev/null +++ b/Tests/Shapes/ListCustomDataMappings.json @@ -0,0 +1,30 @@ +{ + "_metadata": { + "endpoint": "ListCustomDataMappings", + "generatedAt": "2026-04-03T23:42:07.5544216+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "customDataAttribute": { + "addedFields": { + "dataType": "truncated", + "isMultiValued": "truncated", + "targetObject": "truncated", + "type": "truncated" + }, + "label": "string", + "value": "string" + }, + "dataset": "string", + "directoryObject": "string", + "id": "string", + "manualEntryFieldLabel": "null", + "sourceType": "string", + "syncProperty": { + "_type": "array", + "_element": "string" + }, + "tenant": "string" + } +} diff --git a/Tests/Shapes/ListCustomRole.json b/Tests/Shapes/ListCustomRole.json new file mode 100644 index 000000000000..e3d419ac1e79 --- /dev/null +++ b/Tests/Shapes/ListCustomRole.json @@ -0,0 +1,18 @@ +{ + "_metadata": { + "endpoint": "ListCustomRole", + "generatedAt": "2026-04-03T23:40:09.5302498+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "AllowedTenants": "string", + "BlockedTenants": "null", + "EntraGroup": "null", + "EntraGroupId": "null", + "IPRange": "null", + "Permissions": "string", + "RoleName": "string", + "Type": "string" + } +} diff --git a/Tests/Shapes/ListCustomVariables.json b/Tests/Shapes/ListCustomVariables.json new file mode 100644 index 000000000000..3e41715dde4a --- /dev/null +++ b/Tests/Shapes/ListCustomVariables.json @@ -0,0 +1,15 @@ +{ + "_metadata": { + "endpoint": "ListCustomVariables", + "generatedAt": "2026-04-03T23:42:08.3032803+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Category": "string", + "Description": "string", + "Name": "string", + "Type": "string", + "Variable": "string" + } +} diff --git a/Tests/Shapes/ListDiagnosticsPresets.json b/Tests/Shapes/ListDiagnosticsPresets.json new file mode 100644 index 000000000000..e179e75bb9f2 --- /dev/null +++ b/Tests/Shapes/ListDiagnosticsPresets.json @@ -0,0 +1,13 @@ +{ + "_metadata": { + "endpoint": "ListDiagnosticsPresets", + "generatedAt": "2026-04-03T23:40:11.0585232+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "GUID": "string", + "name": "string", + "query": "string" + } +} diff --git a/Tests/Shapes/ListDomainAnalyser.json b/Tests/Shapes/ListDomainAnalyser.json new file mode 100644 index 000000000000..b524e1a320a2 --- /dev/null +++ b/Tests/Shapes/ListDomainAnalyser.json @@ -0,0 +1,40 @@ +{ + "_metadata": { + "endpoint": "ListDomainAnalyser", + "generatedAt": "2026-04-03T23:42:14.1104497+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "ActualMXRecords": { + "Hostname": "string", + "Priority": "number" + }, + "ActualSPFRecord": "string", + "DKIMEnabled": "bool", + "DKIMRecords": "string", + "DMARCActionPolicy": "string", + "DMARCFullPolicy": "string", + "DMARCPercentagePass": "string", + "DMARCPresent": "bool", + "DMARCReportingActive": "string", + "DNSSECPresent": "bool", + "Domain": "string", + "EnterpriseEnrollment": "string", + "EnterpriseRegistration": "string", + "ExpectedSPFRecord": "string", + "GUID": "string", + "LastRefresh": "datetime", + "MailProvider": "string", + "MaximumScore": "number", + "MSCNAMEDKIMSelectors": "string", + "MXPassTest": "bool", + "NSRecords": "null", + "Score": "number", + "ScoreExplanation": "string", + "ScorePercentage": "number", + "SPFPassAll": "bool", + "Tenant": "string", + "TenantID": "string" + } +} diff --git a/Tests/Shapes/ListDomainHealth.json b/Tests/Shapes/ListDomainHealth.json new file mode 100644 index 000000000000..63dc4971c0dd --- /dev/null +++ b/Tests/Shapes/ListDomainHealth.json @@ -0,0 +1,9 @@ +{ + "_metadata": { + "endpoint": "ListDomainHealth", + "generatedAt": "2026-04-03T23:40:11.6325606+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": "string" +} diff --git a/Tests/Shapes/ListDomains.json b/Tests/Shapes/ListDomains.json new file mode 100644 index 000000000000..a21b291790b7 --- /dev/null +++ b/Tests/Shapes/ListDomains.json @@ -0,0 +1,13 @@ +{ + "_metadata": { + "endpoint": "ListDomains", + "generatedAt": "2026-04-03T23:42:15.7918264+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "id": "string", + "isDefault": "bool", + "isInitial": "bool" + } +} diff --git a/Tests/Shapes/ListExcludedLicenses.json b/Tests/Shapes/ListExcludedLicenses.json new file mode 100644 index 000000000000..1555c94fc5da --- /dev/null +++ b/Tests/Shapes/ListExcludedLicenses.json @@ -0,0 +1,17 @@ +{ + "_metadata": { + "endpoint": "ListExcludedLicenses", + "generatedAt": "2026-04-03T23:40:12.7414555+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "ETag": "string", + "GUID": "string", + "PartitionKey": "string", + "Product_Display_Name": "string", + "RowKey": "string", + "table": "string", + "Timestamp": "datetime" + } +} diff --git a/Tests/Shapes/ListExtensionCacheData.json b/Tests/Shapes/ListExtensionCacheData.json new file mode 100644 index 000000000000..965c260ccf18 --- /dev/null +++ b/Tests/Shapes/ListExtensionCacheData.json @@ -0,0 +1,561 @@ +{ + "_metadata": { + "endpoint": "ListExtensionCacheData", + "generatedAt": "2026-04-03T23:42:28.3002761+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AllRoles": { + "_type": "array", + "_element": { + "deletedDateTime": "null", + "description": "truncated", + "displayName": "truncated", + "id": "truncated", + "roleTemplateId": "truncated" + } + }, + "AllRoles_01261149-b2bf-41ef-b179-aece71d1b760": "null", + "AllRoles_014003df-7923-45d5-80f6-7d9a80217002": "null", + "AllRoles_07b9b25f-e19c-4a93-8529-2a5bb542c60a": { + "@odata.type": "string", + "displayName": "string", + "id": "string" + }, + "AllRoles_10c85f49-4386-4316-b86c-b31d1b41c07f": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "AllRoles_1c3d5d51-32b9-4b13-a238-5f005d3df6cd": "null", + "AllRoles_2f130545-a8f4-4d17-ba37-67955adbcd7f": "null", + "AllRoles_394dab2f-200a-432f-8e82-2574790be643": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated" + } + }, + "AllRoles_4279d1d7-d44a-4172-8a59-84a8b4d86a74": "null", + "AllRoles_4f820435-6936-44cf-88e8-e7aca7ade225": "null", + "AllRoles_52d3a037-ef63-4799-aa33-964a086760f1": "null", + "AllRoles_56216f63-4923-445f-9bb5-45329de6d673": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "AllRoles_5dc2b105-260c-4fce-b95f-572c69f0615f": "null", + "AllRoles_6d7ca563-f415-4175-ba67-fb5ee8ea75a0": "null", + "AllRoles_97dc5f36-0edd-488b-b7a7-2dd751b05b50": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated" + } + }, + "AllRoles_ba53dfb5-2013-475a-bc5a-4147d28ff28b": { + "@odata.type": "string", + "displayName": "string", + "id": "string" + }, + "AllRoles_c77e4401-614b-4b47-bb38-8099f921dfa5": "null", + "AllRoles_cc28e354-ab66-4e0b-a433-845d95085a08": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "AllRoles_cd0c6bf4-8b5f-4c74-8828-34ace7055cf2": "null", + "AllRoles_f0ceafe4-47de-4b6d-ac4c-233a33a6871c": "null", + "CASMailbox": { + "_type": "array", + "_element": { + "@odata.editLink": "truncated", + "@odata.id": "truncated", + "ActiveSyncEnabled": "truncated", + "DisplayName": "truncated", + "ECPEnabled": "truncated", + "EmailAddresses": "truncated", + "EwsEnabled": "truncated", + "ExchangeVersion": "truncated", + "ExternalDirectoryObjectId": "truncated", + "Guid": "truncated", + "Identity": "truncated", + "ImapEnabled": "truncated", + "MAPIEnabled": "truncated", + "Name": "truncated", + "ObjectKey": "truncated", + "OrganizationId": "truncated", + "OWAEnabled": "truncated", + "PopEnabled": "truncated", + "PrimarySmtpAddress": "truncated", + "ServerLegacyDN": "truncated" + } + }, + "ConditionalAccess": { + "_type": "array", + "_element": { + "conditions": "truncated", + "createdDateTime": "truncated", + "deletedDateTime": "null", + "displayName": "truncated", + "grantControls": "truncated", + "id": "truncated", + "modifiedDateTime": "truncated", + "partialEnablementStrategy": "null", + "sessionControls": "null", + "state": "truncated", + "templateId": "null" + } + }, + "DeviceApps": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "createdDateTime": "truncated", + "description": "truncated", + "displayName": "truncated", + "id": "truncated", + "isAssigned": "truncated", + "lastModifiedDateTime": "truncated", + "publisher": "null" + } + }, + "DeviceCompliancePolicies": "null", + "DeviceCompliancePolicies_df556623-85f1-4be6-9aa9-2acc70fa9b5f": "null", + "Devices": "null", + "Domains": { + "_type": "array", + "_element": { + "authenticationType": "truncated", + "availabilityStatus": "null", + "id": "truncated", + "isAdminManaged": "truncated", + "isDefault": "truncated", + "isInitial": "truncated", + "isRoot": "truncated", + "isVerified": "truncated", + "passwordNotificationWindowInDays": "null", + "passwordValidityPeriodInDays": "null", + "state": "null", + "supportedServices": "null" + } + }, + "Groups": { + "_type": "array", + "_element": { + "createdDateTime": "truncated", + "description": "truncated", + "displayName": "truncated", + "groupTypes": "truncated", + "id": "truncated", + "mail": "null", + "mailEnabled": "truncated", + "mailNickname": "truncated", + "membershipRule": "truncated", + "onPremisesSamAccountName": "null", + "onPremisesSyncEnabled": "null", + "organizationId": "truncated", + "resourceProvisioningOptions": "null", + "securityEnabled": "truncated", + "visibility": "null" + } + }, + "Groups_050dd2e6-9047-4c21-8fbb-9ca228cb226e": "null", + "Groups_0ab73631-5cd7-46ef-95f0-20617a978019": "null", + "Groups_15282c83-5fd5-4f1b-866d-c78b1ae6ddef": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_2267c5f3-cd23-4ccd-bcd2-05067d592bca": { + "@odata.type": "string", + "displayName": "string", + "id": "string", + "userPrincipalName": "string" + }, + "Groups_298659eb-7c2b-4cac-9610-a613ba130a11": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_29d0d220-1c71-4907-80ab-663041b12296": { + "@odata.type": "string", + "displayName": "string", + "id": "string", + "userPrincipalName": "string" + }, + "Groups_2c851bac-ea1d-4481-a870-644a93063354": "null", + "Groups_32a0d260-c5e6-4cfa-a97c-0a4331a51ddf": "null", + "Groups_354e0c8e-4f0f-44db-bb71-1962346f9dfe": "null", + "Groups_3679f7b3-66a6-43ce-a404-b9243c95d8c5": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_47733010-21df-44f9-9e61-157bc32743ec": "null", + "Groups_5e81b640-b614-422d-a8a4-cd58167af8c2": "null", + "Groups_5ee0dfe9-bf82-4ae5-bc05-9172a3b33b66": { + "@odata.type": "string", + "displayName": "string", + "id": "string", + "userPrincipalName": "string" + }, + "Groups_62092ce4-ad27-460c-950d-2dfda668069a": "null", + "Groups_6ba8371e-e8b0-49af-8a85-e96d206ca0b2": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_6d989ed9-289f-4fd6-b5c0-828397da7227": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_7901e7a2-1139-48f3-a21c-e73a1aba5992": "null", + "Groups_79ed3598-3f17-464f-88ae-98d2a964ed7f": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_7f0d5349-6622-4447-931d-50c3a327a5dc": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_85e19417-d8f8-43fe-8a8c-8c5760580378": "null", + "Groups_8fd9c508-e2d0-4b50-ac87-61d4ac169704": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_a143372a-dbd5-4834-85a8-81c780709b5f": "null", + "Groups_a9a00ac0-947c-4058-a3a7-d9eaf7cfa01e": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_b1d8904f-3297-4d60-8d17-7a01da3b1779": "null", + "Groups_bccd4820-49cb-4740-a589-e059ed68a938": "null", + "Groups_c554a7b1-d645-4d68-a8dc-2852e16cc810": { + "_type": "array", + "_element": { + "@odata.type": "truncated", + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "Groups_ced5b7cd-b182-4d1a-9246-c120e37aae90": "null", + "Groups_d5196069-5001-4fa8-ad82-02e2e8f5f7be": "null", + "Groups_e91fc9e9-bac1-496c-ad97-8c6ac869e582": "null", + "Groups_f0c3d5f2-a3eb-4b35-9c02-eab18e4ac8cd": "null", + "Groups_f5cb0bbf-0a71-4317-b5df-9c0874092b8a": "null", + "Groups_ff26e185-9fc1-4d57-b745-95abfa44df22": { + "@odata.type": "string", + "displayName": "string", + "id": "string", + "userPrincipalName": "string" + }, + "Licenses": { + "_type": "array", + "_element": { + "accountId": "truncated", + "accountName": "truncated", + "appliesTo": "truncated", + "capabilityStatus": "truncated", + "consumedUnits": "truncated", + "id": "truncated", + "prepaidUnits": "truncated", + "servicePlans": "truncated", + "skuId": "truncated", + "skuPartNumber": "truncated", + "subscriptionIds": "truncated" + } + }, + "Mailboxes": { + "_type": "array", + "_element": { + "AdditionalEmailAddresses": "null", + "ArchiveGuid": "truncated", + "DeliverToMailboxAndForward": "truncated", + "displayName": "truncated", + "ExchangeGuid": "truncated", + "ExternalDirectoryObjectId": "truncated", + "ForwardingSmtpAddress": "truncated", + "HiddenFromAddressListsEnabled": "truncated", + "Id": "truncated", + "InternalForwardingAddress": "null", + "MessageCopyForSendOnBehalfEnabled": "truncated", + "MessageCopyForSentAsEnabled": "truncated", + "primarySmtpAddress": "truncated", + "recipientType": "truncated", + "recipientTypeDetails": "truncated", + "UPN": "truncated", + "WhenSoftDeleted": "null" + } + }, + "MailboxPermissions": { + "_type": "array", + "_element": { + "AccessRights": "truncated", + "AccessRights@odata.type": "truncated", + "Deny": "truncated", + "Identity": "truncated", + "InheritanceType": "truncated", + "IsInherited": "truncated", + "IsOwner": "truncated", + "IsValid": "truncated", + "User": "truncated", + "UserSid": "truncated", + "UserWithDisplayName": "null", + "UserWithDisplayName@odata.type": "truncated" + } + }, + "MailboxUsage": { + "_type": "array", + "_element": { + "createdDate": "truncated", + "deletedDate": "null", + "deletedItemCount": "truncated", + "deletedItemQuota": "truncated", + "deletedItemSizeInBytes": "truncated", + "displayName": "truncated", + "hasArchive": "truncated", + "isDeleted": "truncated", + "issueWarningQuotaInBytes": "truncated", + "itemCount": "truncated", + "lastActivityDate": "null", + "prohibitSendQuotaInBytes": "truncated", + "prohibitSendReceiveQuotaInBytes": "truncated", + "recipientType": "truncated", + "reportPeriod": "truncated", + "reportRefreshDate": "truncated", + "storageUsedInBytes": "truncated", + "userPrincipalName": "truncated" + } + }, + "OneDriveUsage": { + "_type": "array", + "_element": { + "activeFileCount": "truncated", + "fileCount": "truncated", + "isDeleted": "truncated", + "lastActivityDate": "null", + "ownerDisplayName": "truncated", + "ownerPrincipalName": "truncated", + "reportPeriod": "truncated", + "reportRefreshDate": "truncated", + "siteId": "truncated", + "siteUrl": "truncated", + "storageAllocatedInBytes": "truncated", + "storageUsedInBytes": "truncated" + } + }, + "SecureScore": { + "activeUserCount": "number", + "averageComparativeScores": { + "_type": "array", + "_element": "truncated" + }, + "azureTenantId": "string", + "controlScores": { + "_type": "array", + "_element": "truncated" + }, + "createdDateTime": "datetime", + "currentScore": "number", + "enabledServices": { + "_type": "array", + "_element": "truncated" + }, + "id": "string", + "licensedUserCount": "number", + "maxScore": "number", + "vendorInformation": { + "provider": "truncated", + "providerVersion": "null", + "subProvider": "null", + "vendor": "truncated" + } + }, + "SecureScoreControlProfiles": { + "_type": "array", + "_element": { + "actionType": "truncated", + "actionUrl": "truncated", + "azureTenantId": "truncated", + "complianceInformation": "null", + "controlCategory": "truncated", + "controlStateUpdates": "truncated", + "deprecated": "truncated", + "id": "truncated", + "implementationCost": "truncated", + "lastModifiedDateTime": "null", + "maxScore": "truncated", + "rank": "truncated", + "remediation": "truncated", + "remediationImpact": "truncated", + "service": "truncated", + "threats": "truncated", + "tier": "truncated", + "title": "truncated", + "userImpact": "truncated", + "vendorInformation": "truncated" + } + }, + "Subscriptions": { + "_type": "array", + "_element": { + "commerceSubscriptionId": "truncated", + "createdDateTime": "truncated", + "id": "truncated", + "isTrial": "truncated", + "nextLifecycleDateTime": "null", + "ocpSubscriptionId": "truncated", + "ownerId": "null", + "ownerTenantId": "null", + "ownerType": "null", + "serviceStatus": "truncated", + "skuId": "truncated", + "skuPartNumber": "truncated", + "status": "truncated", + "totalLicenses": "truncated" + } + }, + "TenantDetails": { + "assignedPlans": { + "_type": "array", + "_element": "truncated" + }, + "businessPhones": "string", + "city": "string", + "country": "null", + "countryLetterCode": "string", + "createdDateTime": "datetime", + "defaultUsageLocation": "null", + "deletedDateTime": "null", + "directorySizeQuota": { + "total": "truncated", + "used": "truncated" + }, + "displayName": "string", + "id": "string", + "isMultipleDataLocationsForServicesEnabled": "null", + "marketingNotificationEmails": "string", + "onPremisesLastPasswordSyncDateTime": "null", + "onPremisesLastSyncDateTime": "null", + "onPremisesSyncEnabled": "null", + "onPremisesSyncStatus": "null", + "partnerTenantType": "null", + "postalCode": "string", + "preferredLanguage": "string", + "privacyProfile": { + "contactEmail": "truncated", + "statementUrl": "null" + }, + "provisionedPlans": { + "_type": "array", + "_element": "truncated" + }, + "securityComplianceNotificationMails": "null", + "securityComplianceNotificationPhones": "null", + "state": "string", + "street": "string", + "technicalNotificationMails": "string", + "tenantType": "string", + "verifiedDomains": { + "_type": "array", + "_element": "truncated" + } + }, + "Users": { + "_type": "array", + "_element": { + "accountEnabled": "truncated", + "assignedLicenses": "null", + "businessPhones": "null", + "city": "null", + "companyName": "null", + "country": "null", + "createdDateTime": "truncated", + "department": "null", + "displayName": "truncated", + "faxNumber": "null", + "givenName": "null", + "id": "truncated", + "isResourceAccount": "null", + "jobTitle": "null", + "mail": "truncated", + "mailNickname": "truncated", + "mobilePhone": "null", + "officeLocation": "null", + "onPremisesDistinguishedName": "null", + "onPremisesLastSyncDateTime": "null", + "onPremisesSyncEnabled": "null", + "otherMails": "null", + "postalCode": "null", + "preferredDataLocation": "null", + "preferredLanguage": "truncated", + "proxyAddresses": "truncated", + "showInAddressList": "null", + "state": "null", + "streetAddress": "null", + "surname": "truncated", + "usageLocation": "null", + "userPrincipalName": "truncated", + "userType": "truncated" + } + } + } +} diff --git a/Tests/Shapes/ListExtensionSync.json b/Tests/Shapes/ListExtensionSync.json new file mode 100644 index 000000000000..e791bab24748 --- /dev/null +++ b/Tests/Shapes/ListExtensionSync.json @@ -0,0 +1,21 @@ +{ + "_metadata": { + "endpoint": "ListExtensionSync", + "generatedAt": "2026-04-03T23:40:13.8303124+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "ExecutedTime": "string", + "Name": "string", + "PartitionKey": "string", + "RepeatsEvery": "string", + "Results": { + "Results": "string" + }, + "RowKey": "string", + "ScheduledTime": "string", + "SyncType": "string", + "Tenant": "string" + } +} diff --git a/Tests/Shapes/ListFeatureFlags.json b/Tests/Shapes/ListFeatureFlags.json new file mode 100644 index 000000000000..94fd46f1ce0b --- /dev/null +++ b/Tests/Shapes/ListFeatureFlags.json @@ -0,0 +1,24 @@ +{ + "_metadata": { + "endpoint": "ListFeatureFlags", + "generatedAt": "2026-04-03T23:40:14.4966100+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "AllowUserToggle": "bool", + "Description": "string", + "Enabled": "bool", + "Endpoints": { + "_type": "array", + "_element": "string" + }, + "Id": "string", + "Name": "string", + "Pages": { + "_type": "array", + "_element": "string" + }, + "Timers": "string" + } +} diff --git a/Tests/Shapes/ListGDAPInvite.json b/Tests/Shapes/ListGDAPInvite.json new file mode 100644 index 000000000000..ac2f94392079 --- /dev/null +++ b/Tests/Shapes/ListGDAPInvite.json @@ -0,0 +1,25 @@ +{ + "_metadata": { + "endpoint": "ListGDAPInvite", + "generatedAt": "2026-04-03T23:40:15.2734230+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "ETag": "string", + "InviteUrl": "string", + "OnboardingUrl": "string", + "PartitionKey": "string", + "RoleMappings": { + "_type": "array", + "_element": { + "GroupId": "truncated", + "GroupName": "truncated", + "roleDefinitionId": "truncated", + "RoleName": "truncated" + } + }, + "RowKey": "string", + "Timestamp": "datetime" + } +} diff --git a/Tests/Shapes/ListGDAPRoles.json b/Tests/Shapes/ListGDAPRoles.json new file mode 100644 index 000000000000..12dd077cc6ee --- /dev/null +++ b/Tests/Shapes/ListGDAPRoles.json @@ -0,0 +1,14 @@ +{ + "_metadata": { + "endpoint": "ListGDAPRoles", + "generatedAt": "2026-04-03T23:40:15.7852513+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "GroupId": "string", + "GroupName": "string", + "roleDefinitionId": "string", + "RoleName": "string" + } +} diff --git a/Tests/Shapes/ListGlobalAddressList.json b/Tests/Shapes/ListGlobalAddressList.json new file mode 100644 index 000000000000..695cc9f3c9dc --- /dev/null +++ b/Tests/Shapes/ListGlobalAddressList.json @@ -0,0 +1,28 @@ +{ + "_metadata": { + "endpoint": "ListGlobalAddressList", + "generatedAt": "2026-04-03T23:42:58.1072171+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AddressListMembership": { + "_type": "array", + "_element": "string" + }, + "Alias": "string", + "DisplayName": "string", + "EmailAddresses": { + "_type": "array", + "_element": "string" + }, + "ExternalDirectoryObjectId": "string", + "HiddenFromAddressListsEnabled": "bool", + "Identity": "string", + "IsDirSynced": "bool", + "PrimarySmtpAddress": "string", + "RecipientType": "string", + "RecipientTypeDetails": "string", + "SKUAssigned": "null" + } +} diff --git a/Tests/Shapes/ListGroupTemplates.json b/Tests/Shapes/ListGroupTemplates.json new file mode 100644 index 000000000000..7b25d4f58b43 --- /dev/null +++ b/Tests/Shapes/ListGroupTemplates.json @@ -0,0 +1,19 @@ +{ + "_metadata": { + "endpoint": "ListGroupTemplates", + "generatedAt": "2026-04-03T23:40:16.9564752+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "allowExternal": "null", + "description": "null", + "displayName": "string", + "groupType": "string", + "GUID": "string", + "isSynced": "bool", + "membershipRules": "null", + "source": "string", + "username": "string" + } +} diff --git a/Tests/Shapes/ListGroups.json b/Tests/Shapes/ListGroups.json new file mode 100644 index 000000000000..05ff99a47105 --- /dev/null +++ b/Tests/Shapes/ListGroups.json @@ -0,0 +1,34 @@ +{ + "_metadata": { + "endpoint": "ListGroups", + "generatedAt": "2026-04-03T23:42:59.6581352+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "assignedLicenses": "null", + "calculatedGroupType": "string", + "createdDateTime": "datetime", + "description": "string", + "displayName": "string", + "dynamicGroupBool": "bool", + "groupType": "string", + "groupTypes": "string", + "id": "string", + "licenseProcessingState": "null", + "mail": "string", + "mailEnabled": "bool", + "mailNickname": "string", + "membersCsv": "string", + "membershipRule": "null", + "onPremisesSamAccountName": "null", + "onPremisesSyncEnabled": "null", + "organizationId": "string", + "primDomain": "string", + "resourceProvisioningOptions": "null", + "securityEnabled": "bool", + "SID": "string", + "teamsEnabled": "bool", + "visibility": "string" + } +} diff --git a/Tests/Shapes/ListInactiveAccounts.json b/Tests/Shapes/ListInactiveAccounts.json new file mode 100644 index 000000000000..57f02fb76048 --- /dev/null +++ b/Tests/Shapes/ListInactiveAccounts.json @@ -0,0 +1,23 @@ +{ + "_metadata": { + "endpoint": "ListInactiveAccounts", + "generatedAt": "2026-04-03T23:43:00.5847314+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "accountEnabled": "bool", + "azureAdUserId": "string", + "createdDateTime": "datetime", + "daysSinceLastSignIn": "null", + "displayName": "string", + "lastNonInteractiveSignInDateTime": "null", + "lastRefreshedDateTime": "datetime", + "lastSignInDateTime": "null", + "numberOfAssignedLicenses": "number", + "tenantDisplayName": "string", + "tenantId": "string", + "userPrincipalName": "string", + "userType": "string" + } +} diff --git a/Tests/Shapes/ListIntunePolicy.json b/Tests/Shapes/ListIntunePolicy.json new file mode 100644 index 000000000000..0705f6bb03c6 --- /dev/null +++ b/Tests/Shapes/ListIntunePolicy.json @@ -0,0 +1,32 @@ +{ + "_metadata": { + "endpoint": "ListIntunePolicy", + "generatedAt": "2026-04-03T23:43:05.7276359+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "@odata.type": "string", + "assignments": { + "id": "string", + "intent": "string", + "source": "string", + "sourceId": "string", + "target": { + "@odata.type": "truncated", + "deviceAndAppManagementAssignmentFilterId": "null", + "deviceAndAppManagementAssignmentFilterType": "truncated" + } + }, + "assignments@odata.context": "string", + "description": "string", + "displayName": "string", + "id": "string", + "lastModifiedDateTime": "datetime", + "PolicyAssignment": "string", + "PolicyExclude": "string", + "PolicyTypeName": "string", + "roleScopeTagIds": "string", + "URLName": "string" + } +} diff --git a/Tests/Shapes/ListIntuneReusableSettingTemplates.json b/Tests/Shapes/ListIntuneReusableSettingTemplates.json new file mode 100644 index 000000000000..48151cc27354 --- /dev/null +++ b/Tests/Shapes/ListIntuneReusableSettingTemplates.json @@ -0,0 +1,15 @@ +{ + "_metadata": { + "endpoint": "ListIntuneReusableSettingTemplates", + "generatedAt": "2026-04-03T23:40:17.8066858+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "description": "string", + "displayName": "string", + "GUID": "string", + "isSynced": "bool", + "RawJSON": "string" + } +} diff --git a/Tests/Shapes/ListIntuneReusableSettings.json b/Tests/Shapes/ListIntuneReusableSettings.json new file mode 100644 index 000000000000..d6611fe1b6fd --- /dev/null +++ b/Tests/Shapes/ListIntuneReusableSettings.json @@ -0,0 +1,29 @@ +{ + "_metadata": { + "endpoint": "ListIntuneReusableSettings", + "generatedAt": "2026-04-03T23:43:06.9642517+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "createdDateTime": "datetime", + "description": "string", + "displayName": "string", + "id": "string", + "lastModifiedDateTime": "datetime", + "RawJSON": "string", + "referencingConfigurationPolicyCount": "number", + "settingDefinitionId": "string", + "settingInstance": { + "@odata.type": "string", + "auditRuleInformation": "null", + "groupSettingCollectionValue": { + "children": "truncated", + "settingValueTemplateReference": "null" + }, + "settingDefinitionId": "string", + "settingInstanceTemplateReference": "null" + }, + "version": "number" + } +} diff --git a/Tests/Shapes/ListIntuneTemplates.json b/Tests/Shapes/ListIntuneTemplates.json new file mode 100644 index 000000000000..1e207593473e --- /dev/null +++ b/Tests/Shapes/ListIntuneTemplates.json @@ -0,0 +1,15 @@ +{ + "_metadata": { + "endpoint": "ListIntuneTemplates", + "generatedAt": "2026-04-03T23:40:20.0464133+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "Description": "string", + "Displayname": "string", + "GUID": "string", + "RAWJson": "string", + "Type": "string" + } +} diff --git a/Tests/Shapes/ListJITAdmin.json b/Tests/Shapes/ListJITAdmin.json new file mode 100644 index 000000000000..9ec5021a12e5 --- /dev/null +++ b/Tests/Shapes/ListJITAdmin.json @@ -0,0 +1,26 @@ +{ + "_metadata": { + "endpoint": "ListJITAdmin", + "generatedAt": "2026-04-03T23:43:12.6934036+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "accountEnabled": "bool", + "displayName": "string", + "id": "string", + "jitAdminCreatedBy": "null", + "jitAdminEnabled": "bool", + "jitAdminExpiration": "datetime", + "jitAdminReason": "null", + "jitAdminStartDate": "null", + "memberOf": { + "_type": "array", + "_element": { + "displayName": "truncated", + "id": "truncated" + } + }, + "userPrincipalName": "string" + } +} diff --git a/Tests/Shapes/ListLicenses.json b/Tests/Shapes/ListLicenses.json new file mode 100644 index 000000000000..e90a4797e220 --- /dev/null +++ b/Tests/Shapes/ListLicenses.json @@ -0,0 +1,48 @@ +{ + "_metadata": { + "endpoint": "ListLicenses", + "generatedAt": "2026-04-03T23:43:21.5557070+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AssignedGroups": "null", + "AssignedUsers": { + "_type": "array", + "_element": { + "displayName": "truncated", + "id": "truncated", + "userPrincipalName": "truncated" + } + }, + "availableUnits": "number", + "CountAvailable": "number", + "CountUsed": "string", + "License": "string", + "ServicePlans": { + "_type": "array", + "_element": { + "appliesTo": "truncated", + "provisioningStatus": "truncated", + "servicePlanId": "truncated", + "servicePlanName": "truncated", + "servicePlanType": "truncated" + } + }, + "skuId": "string", + "skuPartNumber": "string", + "Tenant": "string", + "TermInfo": { + "CSPSubscriptionId": "string", + "DaysUntilRenew": "number", + "IsTrial": "bool", + "NextLifecycle": "datetime", + "OCPSubscriptionId": "string", + "Status": "string", + "SubscriptionId": "string", + "Term": "string", + "TotalLicenses": "number" + }, + "TotalLicenses": "string" + } +} diff --git a/Tests/Shapes/ListMDEOnboarding.json b/Tests/Shapes/ListMDEOnboarding.json new file mode 100644 index 000000000000..cae10a72bbc6 --- /dev/null +++ b/Tests/Shapes/ListMDEOnboarding.json @@ -0,0 +1,12 @@ +{ + "_metadata": { + "endpoint": "ListMDEOnboarding", + "generatedAt": "2026-04-03T23:43:23.0049911+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "partnerState": "string", + "Tenant": "string" + } +} diff --git a/Tests/Shapes/ListMFAUsers.json b/Tests/Shapes/ListMFAUsers.json new file mode 100644 index 000000000000..a33cbe374a89 --- /dev/null +++ b/Tests/Shapes/ListMFAUsers.json @@ -0,0 +1,35 @@ +{ + "_metadata": { + "endpoint": "ListMFAUsers", + "generatedAt": "2026-04-03T23:43:36.4955495+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AccountEnabled": "bool", + "CAPolicies": { + "_type": "array", + "_element": { + "AllApps": "truncated", + "DisplayName": "truncated", + "PolicyState": "truncated", + "UserIncluded": "truncated" + } + }, + "CoveredByCA": "string", + "CoveredBySD": "bool", + "DisplayName": "string", + "ID": "string", + "IsAdmin": "bool", + "isLicensed": "bool", + "MFACapable": "null", + "MFAMethods": "null", + "MFARegistration": "null", + "PartitionKey": "string", + "PerUser": "string", + "RowKey": "string", + "Tenant": "string", + "UPN": "string", + "UserType": "string" + } +} diff --git a/Tests/Shapes/ListMailboxCAS.json b/Tests/Shapes/ListMailboxCAS.json new file mode 100644 index 000000000000..a071e0bf2341 --- /dev/null +++ b/Tests/Shapes/ListMailboxCAS.json @@ -0,0 +1,19 @@ +{ + "_metadata": { + "endpoint": "ListMailboxCAS", + "generatedAt": "2026-04-03T23:43:47.9978919+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "activesyncenabled": "bool", + "displayName": "string", + "ecpenabled": "bool", + "ewsenabled": "null", + "imapenabled": "bool", + "mapienabled": "bool", + "owaenabled": "bool", + "popenabled": "bool", + "primarySmtpAddress": "string" + } +} diff --git a/Tests/Shapes/ListMailboxForwarding.json b/Tests/Shapes/ListMailboxForwarding.json new file mode 100644 index 000000000000..53cb6110a723 --- /dev/null +++ b/Tests/Shapes/ListMailboxForwarding.json @@ -0,0 +1,19 @@ +{ + "_metadata": { + "endpoint": "ListMailboxForwarding", + "generatedAt": "2026-04-03T23:44:00.4117728+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "DeliverToMailboxAndForward": "bool", + "DisplayName": "string", + "ForwardingSmtpAddress": "string", + "ForwardingType": "string", + "ForwardTo": "string", + "InternalForwardingAddress": "string", + "PrimarySmtpAddress": "string", + "RecipientTypeDetails": "string", + "UPN": "string" + } +} diff --git a/Tests/Shapes/ListMailboxes.json b/Tests/Shapes/ListMailboxes.json new file mode 100644 index 000000000000..f0386d91120f --- /dev/null +++ b/Tests/Shapes/ListMailboxes.json @@ -0,0 +1,36 @@ +{ + "_metadata": { + "endpoint": "ListMailboxes", + "generatedAt": "2026-04-03T23:44:10.4588770+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AdditionalEmailAddresses": "null", + "ArchiveGuid": "string", + "ComplianceTagHoldApplied": "bool", + "DeliverToMailboxAndForward": "bool", + "displayName": "string", + "ExchangeGuid": "string", + "ExternalDirectoryObjectId": "string", + "ForwardingSmtpAddress": "string", + "HiddenFromAddressListsEnabled": "bool", + "Id": "string", + "InPlaceHolds": "null", + "InternalForwardingAddress": "null", + "IsDirSynced": "bool", + "LicensedForLitigationHold": "bool", + "LitigationHoldDate": "datetime", + "LitigationHoldDuration": "string", + "LitigationHoldEnabled": "bool", + "MessageCopyForSendOnBehalfEnabled": "bool", + "MessageCopyForSentAsEnabled": "bool", + "primarySmtpAddress": "string", + "recipientType": "string", + "recipientTypeDetails": "string", + "RetentionHoldEnabled": "bool", + "RetentionPolicy": "string", + "UPN": "string", + "WhenSoftDeleted": "null" + } +} diff --git a/Tests/Shapes/ListMalwareFilters.json b/Tests/Shapes/ListMalwareFilters.json new file mode 100644 index 000000000000..ed347dd9da93 --- /dev/null +++ b/Tests/Shapes/ListMalwareFilters.json @@ -0,0 +1,70 @@ +{ + "_metadata": { + "endpoint": "ListMalwareFilters", + "generatedAt": "2026-04-03T23:44:11.9100474+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AdminDisplayName": "string", + "CustomExternalBody": "string", + "CustomExternalSubject": "string", + "CustomFromAddress": "string", + "CustomFromName": "string", + "CustomInternalBody": "string", + "CustomInternalSubject": "string", + "CustomNotifications": "bool", + "DistinguishedName": "string", + "EnableExternalSenderAdminNotifications": "bool", + "EnableFileFilter": "bool", + "EnableInternalSenderAdminNotifications": "bool", + "ExchangeObjectId": "string", + "ExchangeObjectId@data.type": "string", + "ExchangeObjectId@odata.type": "string", + "ExchangeVersion": "string", + "ExternalSenderAdminAddress": "string", + "FileTypeAction": "string", + "FileTypes": { + "_type": "array", + "_element": "string" + }, + "FileTypes@odata.type": "string", + "Guid": "string", + "Guid@data.type": "string", + "Guid@odata.type": "string", + "Id": "string", + "Identity": "string", + "InternalSenderAdminAddress": "string", + "IsDefault": "bool", + "IsPolicyOverrideApplied": "bool", + "IsValid": "bool", + "Name": "string", + "ObjectCategory": "string", + "ObjectClass": { + "_type": "array", + "_element": "string" + }, + "ObjectClass@odata.type": "string", + "OrganizationalUnitRoot": "string", + "OrganizationId": "string", + "OriginatingServer": "string", + "Priority": "number", + "QuarantineTag": "string", + "RecipientDomainIs": { + "_type": "array", + "_element": "string" + }, + "RecommendedPolicyType": "string", + "RuleName": "string", + "State": "string", + "WhenChanged": "datetime", + "WhenChanged@data.type": "string", + "WhenChangedUTC": "datetime", + "WhenChangedUTC@data.type": "string", + "WhenCreated": "datetime", + "WhenCreated@data.type": "string", + "WhenCreatedUTC": "datetime", + "WhenCreatedUTC@data.type": "string", + "ZapEnabled": "bool" + } +} diff --git a/Tests/Shapes/ListMessageTrace.json b/Tests/Shapes/ListMessageTrace.json new file mode 100644 index 000000000000..d2f0541f6a62 --- /dev/null +++ b/Tests/Shapes/ListMessageTrace.json @@ -0,0 +1,11 @@ +{ + "_metadata": { + "endpoint": "ListMessageTrace", + "generatedAt": "2026-04-03T23:44:13.5102130+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Status": "string" + } +} diff --git a/Tests/Shapes/ListOAuthApps.json b/Tests/Shapes/ListOAuthApps.json new file mode 100644 index 000000000000..5a7d7dbcc443 --- /dev/null +++ b/Tests/Shapes/ListOAuthApps.json @@ -0,0 +1,16 @@ +{ + "_metadata": { + "endpoint": "ListOAuthApps", + "generatedAt": "2026-04-03T23:44:20.5019097+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "ApplicationID": "string", + "Name": "string", + "ObjectID": "string", + "Scope": "string", + "StartTime": "datetime", + "Tenant": "string" + } +} diff --git a/Tests/Shapes/ListPerUserMFA.json b/Tests/Shapes/ListPerUserMFA.json new file mode 100644 index 000000000000..bc9a172f5ba1 --- /dev/null +++ b/Tests/Shapes/ListPerUserMFA.json @@ -0,0 +1,15 @@ +{ + "_metadata": { + "endpoint": "ListPerUserMFA", + "generatedAt": "2026-04-03T23:44:29.9939591+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "PerUserMFAState": { + "_type": "array", + "_element": "string" + }, + "UserPrincipalName": "null" + } +} diff --git a/Tests/Shapes/ListQuarantinePolicy.json b/Tests/Shapes/ListQuarantinePolicy.json new file mode 100644 index 000000000000..0c7d25f8a623 --- /dev/null +++ b/Tests/Shapes/ListQuarantinePolicy.json @@ -0,0 +1,46 @@ +{ + "_metadata": { + "endpoint": "ListQuarantinePolicy", + "generatedAt": "2026-04-03T23:44:31.5380357+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AllowSender": "bool", + "BlockSender": "bool", + "Builtin": "bool", + "Delete": "bool", + "DistinguishedName": "string", + "Download": "bool", + "EndUserQuarantinePermissions": "string", + "ESNEnabled": "bool", + "ExchangeObjectId": "string", + "ExchangeVersion": "string", + "Guid": "string", + "Id": "string", + "Identity": "string", + "IncludeMessagesFromBlockedSenderAddress": "bool", + "IsValid": "bool", + "Name": "string", + "ObjectCategory": "string", + "ObjectClass": { + "_type": "array", + "_element": "string" + }, + "OrganizationalUnitRoot": "string", + "OrganizationId": "string", + "OriginatingServer": "string", + "Preview": "bool", + "QuarantineNotification": "bool", + "QuarantinePolicyType": "string", + "QuarantineRetentionDays": "number", + "Release": "bool", + "ReleaseActionPreference": "string", + "RequestRelease": "bool", + "ViewHeader": "bool", + "WhenChanged": "datetime", + "WhenChangedUTC": "datetime", + "WhenCreated": "datetime", + "WhenCreatedUTC": "datetime" + } +} diff --git a/Tests/Shapes/ListReportBuilderTemplates.json b/Tests/Shapes/ListReportBuilderTemplates.json new file mode 100644 index 000000000000..748bce93a4a5 --- /dev/null +++ b/Tests/Shapes/ListReportBuilderTemplates.json @@ -0,0 +1,29 @@ +{ + "_metadata": { + "endpoint": "ListReportBuilderTemplates", + "generatedAt": "2026-04-03T23:40:20.5902281+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "Blocks": { + "content": "null", + "dbType": "null", + "format": "null", + "selectedHeaders": "null", + "static": "bool", + "status": "string", + "testCategory": "string", + "testId": "string", + "title": "string", + "type": "string" + }, + "CreatedAt": "datetime", + "CustomCount": "number", + "GUID": "string", + "Name": "string", + "RowKey": "string", + "Sections": "number", + "TestCount": "number" + } +} diff --git a/Tests/Shapes/ListRooms.json b/Tests/Shapes/ListRooms.json new file mode 100644 index 000000000000..769f4df34980 --- /dev/null +++ b/Tests/Shapes/ListRooms.json @@ -0,0 +1,36 @@ +{ + "_metadata": { + "endpoint": "ListRooms", + "generatedAt": "2026-04-03T23:44:36.4582941+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "accountDisabled": "bool", + "audioDeviceName": "null", + "bookingType": "null", + "building": "null", + "capacity": "number", + "city": "null", + "countryOrRegion": "null", + "displayDeviceName": "null", + "displayName": "string", + "floor": "null", + "floorLabel": "null", + "hiddenFromAddressListsEnabled": "bool", + "id": "string", + "isDirSynced": "null", + "isWheelChairAccessible": "null", + "mail": "string", + "mailNickname": "string", + "mtrEnabled": "null", + "phone": "null", + "postalCode": "null", + "resourceDelegates": "null", + "spaceType": "null", + "state": "null", + "street": "null", + "tags": "null", + "videoDeviceName": "null" + } +} diff --git a/Tests/Shapes/ListSafeAttachmentsFilters.json b/Tests/Shapes/ListSafeAttachmentsFilters.json new file mode 100644 index 000000000000..867a8c389808 --- /dev/null +++ b/Tests/Shapes/ListSafeAttachmentsFilters.json @@ -0,0 +1,57 @@ +{ + "_metadata": { + "endpoint": "ListSafeAttachmentsFilters", + "generatedAt": "2026-04-03T23:44:37.7154855+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Action": "string", + "AdminDisplayName": "string", + "DistinguishedName": "string", + "Enable": "bool", + "EnableBlockingEncryptedAttachments": "bool", + "EnableOrganizationBranding": "bool", + "ExchangeObjectId": "string", + "ExchangeObjectId@data.type": "string", + "ExchangeObjectId@odata.type": "string", + "ExchangeVersion": "string", + "ExcludedTypesFromBlockingEncryptedAttachments": "null", + "ExcludedTypesFromBlockingEncryptedAttachments@odata.type": "string", + "Guid": "string", + "Guid@data.type": "string", + "Guid@odata.type": "string", + "Id": "string", + "Identity": "string", + "IsBuiltInProtection": "bool", + "IsDefault": "bool", + "IsValid": "bool", + "Name": "string", + "ObjectCategory": "string", + "ObjectClass": { + "_type": "array", + "_element": "string" + }, + "ObjectClass@odata.type": "string", + "OrganizationalUnitRoot": "string", + "OrganizationId": "string", + "OriginatingServer": "string", + "Priority": "null", + "QuarantineTag": "string", + "QuarantineTagForBlockingEncryptedAttachments": "string", + "RecipientDomainIs": "null", + "RecommendedPolicyType": "string", + "Redirect": "bool", + "RedirectAddress": "string", + "RuleName": "null", + "State": "null", + "WhenChanged": "datetime", + "WhenChanged@data.type": "string", + "WhenChangedUTC": "datetime", + "WhenChangedUTC@data.type": "string", + "WhenCreated": "datetime", + "WhenCreated@data.type": "string", + "WhenCreatedUTC": "datetime", + "WhenCreatedUTC@data.type": "string" + } +} diff --git a/Tests/Shapes/ListSafeLinksPolicy.json b/Tests/Shapes/ListSafeLinksPolicy.json new file mode 100644 index 000000000000..e0959eb1fee8 --- /dev/null +++ b/Tests/Shapes/ListSafeLinksPolicy.json @@ -0,0 +1,41 @@ +{ + "_metadata": { + "endpoint": "ListSafeLinksPolicy", + "generatedAt": "2026-04-03T23:44:39.8331506+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AdminDisplayName": "string", + "AllowClickThrough": "bool", + "ConfigurationStatus": "string", + "CustomNotificationText": "string", + "DeliverMessageAfterScan": "bool", + "Description": "string", + "DisableUrlRewrite": "bool", + "DoNotRewriteUrls": "null", + "EnableForInternalSenders": "bool", + "EnableOrganizationBranding": "bool", + "EnableSafeLinksForEmail": "bool", + "EnableSafeLinksForOffice": "bool", + "EnableSafeLinksForTeams": "bool", + "ExceptIfRecipientDomainIs": "null", + "ExceptIfSentTo": "null", + "ExceptIfSentToMemberOf": "null", + "IsBuiltIn": "bool", + "IsValid": "bool", + "Name": "string", + "PolicyName": "string", + "Priority": "number", + "RecipientDomainIs": { + "_type": "array", + "_element": "string" + }, + "RuleName": "string", + "ScanUrls": "bool", + "SentTo": "null", + "SentToMemberOf": "null", + "State": "string", + "TrackClicks": "bool" + } +} diff --git a/Tests/Shapes/ListSafeLinksPolicyTemplates.json b/Tests/Shapes/ListSafeLinksPolicyTemplates.json new file mode 100644 index 000000000000..8c280a0da759 --- /dev/null +++ b/Tests/Shapes/ListSafeLinksPolicyTemplates.json @@ -0,0 +1,32 @@ +{ + "_metadata": { + "endpoint": "ListSafeLinksPolicyTemplates", + "generatedAt": "2026-04-03T23:40:21.0615923+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "AdminDisplayName": "string", + "AllowClickThrough": "bool", + "DeliverMessageAfterScan": "bool", + "DisableUrlRewrite": "bool", + "DoNotRewriteUrls": "null", + "EnableForInternalSenders": "bool", + "EnableOrganizationBranding": "bool", + "EnableSafeLinksForEmail": "bool", + "EnableSafeLinksForOffice": "bool", + "EnableSafeLinksForTeams": "bool", + "ExceptIfRecipientDomainIs": "null", + "ExceptIfSentToMemberOf": "null", + "GUID": "string", + "PolicyName": "string", + "RecipientDomainIs": "null", + "RuleName": "string", + "ScanUrls": "bool", + "SentToMemberOf": "null", + "State": "bool", + "TemplateDescription": "string", + "TemplateName": "string", + "TrackClicks": "bool" + } +} diff --git a/Tests/Shapes/ListServiceHealth.json b/Tests/Shapes/ListServiceHealth.json new file mode 100644 index 000000000000..1a99c6beae15 --- /dev/null +++ b/Tests/Shapes/ListServiceHealth.json @@ -0,0 +1,16 @@ +{ + "_metadata": { + "endpoint": "ListServiceHealth", + "generatedAt": "2026-04-03T23:44:42.2897756+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "DefaultDomainName": "null", + "desc": "string", + "issueId": "string", + "service": "string", + "TenantName": "null", + "type": "string" + } +} diff --git a/Tests/Shapes/ListSharepointAdminUrl.json b/Tests/Shapes/ListSharepointAdminUrl.json new file mode 100644 index 000000000000..284ba17d0556 --- /dev/null +++ b/Tests/Shapes/ListSharepointAdminUrl.json @@ -0,0 +1,9 @@ +{ + "_metadata": { + "endpoint": "ListSharepointAdminUrl", + "generatedAt": "2026-04-03T23:46:41.1736512+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": "string" +} diff --git a/Tests/Shapes/ListSharepointQuota.json b/Tests/Shapes/ListSharepointQuota.json new file mode 100644 index 000000000000..8d2822d59f09 --- /dev/null +++ b/Tests/Shapes/ListSharepointQuota.json @@ -0,0 +1,14 @@ +{ + "_metadata": { + "endpoint": "ListSharepointQuota", + "generatedAt": "2026-04-03T23:46:44.2810324+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Dashboard": "string", + "GeoUsedStorageMB": "string", + "Percentage": "number", + "TenantStorageMB": "string" + } +} diff --git a/Tests/Shapes/ListSharepointSettings.json b/Tests/Shapes/ListSharepointSettings.json new file mode 100644 index 000000000000..639f224d4e2d --- /dev/null +++ b/Tests/Shapes/ListSharepointSettings.json @@ -0,0 +1,46 @@ +{ + "_metadata": { + "endpoint": "ListSharepointSettings", + "generatedAt": "2026-04-03T23:40:22.9080923+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "@odata.context": "string", + "allowedDomainGuidsForSyncApp": "null", + "availableManagedPathsForSiteCreation": { + "_type": "array", + "_element": "string" + }, + "deletedUserPersonalSiteRetentionPeriodInDays": "number", + "excludedFileExtensionsForSyncApp": "null", + "idleSessionSignOut": { + "isEnabled": "bool", + "signOutAfterInSeconds": "number", + "warnAfterInSeconds": "number" + }, + "imageTaggingOption": "string", + "isCommentingOnSitePagesEnabled": "bool", + "isFileActivityNotificationEnabled": "bool", + "isLegacyAuthProtocolsEnabled": "bool", + "isLoopEnabled": "bool", + "isMacSyncAppEnabled": "bool", + "isResharingByExternalUsersEnabled": "bool", + "isSharePointMobileNotificationEnabled": "bool", + "isSharePointNewsfeedEnabled": "bool", + "isSiteCreationEnabled": "bool", + "isSiteCreationUIEnabled": "bool", + "isSitePagesCreationEnabled": "bool", + "isSitesStorageLimitAutomatic": "bool", + "isSyncButtonHiddenOnPersonalSite": "bool", + "isUnmanagedSyncAppForTenantRestricted": "bool", + "personalSiteDefaultStorageLimitInMB": "number", + "sharingAllowedDomainList": "null", + "sharingBlockedDomainList": "null", + "sharingCapability": "string", + "sharingDomainRestrictionMode": "string", + "siteCreationDefaultManagedPath": "string", + "siteCreationDefaultStorageLimitInMB": "number", + "tenantDefaultTimezone": "string" + } +} diff --git a/Tests/Shapes/ListSignIns.json b/Tests/Shapes/ListSignIns.json new file mode 100644 index 000000000000..848706bfcdf9 --- /dev/null +++ b/Tests/Shapes/ListSignIns.json @@ -0,0 +1,175 @@ +{ + "_metadata": { + "endpoint": "ListSignIns", + "generatedAt": "2026-04-03T23:46:50.9607317+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "additionalDetails": "null", + "agent": { + "agentSubjectParentId": "string", + "agentSubjectType": "string", + "agentType": "string", + "parentAppId": "string" + }, + "appDisplayName": "string", + "appId": "string", + "appliedConditionalAccessPolicies": { + "_type": "array", + "_element": { + "authenticationStrength": "null", + "conditionsNotSatisfied": "truncated", + "conditionsSatisfied": "truncated", + "displayName": "truncated", + "enforcedGrantControls": "truncated", + "enforcedSessionControls": "null", + "excludeRulesSatisfied": "null", + "id": "truncated", + "includeRulesSatisfied": "truncated", + "result": "truncated", + "sessionControlsNotSatisfied": "null" + } + }, + "appliedEventListeners": "null", + "appOwnerTenantId": "string", + "authenticationAppDeviceDetails": "null", + "authenticationAppPolicyEvaluationDetails": "null", + "authenticationContextClassReferences": { + "detail": "string", + "id": "string" + }, + "authenticationDetails": { + "authenticationMethod": "string", + "authenticationMethodDetail": "string", + "authenticationStepDateTime": "datetime", + "authenticationStepRequirement": "string", + "authenticationStepResultDetail": "string", + "succeeded": "bool" + }, + "authenticationMethodsUsed": "null", + "authenticationProcessingDetails": { + "_type": "array", + "_element": { + "key": "truncated", + "value": "truncated" + } + }, + "authenticationProtocol": "string", + "authenticationRequirement": "string", + "authenticationRequirementPolicies": { + "_type": "array", + "_element": { + "detail": "truncated", + "requirementProvider": "truncated" + } + }, + "autonomousSystemNumber": "number", + "clientAppUsed": "string", + "clientCredentialType": "string", + "conditionalAccessAudiences": { + "_type": "array", + "_element": "string" + }, + "conditionalAccessStatus": "string", + "correlationId": "string", + "createdDateTime": "datetime", + "crossTenantAccessType": "string", + "deviceDetail": { + "browser": "string", + "deviceId": "string", + "displayName": "string", + "isCompliant": "bool", + "isManaged": "bool", + "operatingSystem": "string", + "trustType": "null" + }, + "errorCode": "number", + "federatedCredentialId": "null", + "flaggedForReview": "bool", + "globalSecureAccessIpAddress": "string", + "homeTenantId": "string", + "homeTenantName": "string", + "id": "string", + "incomingTokenType": "string", + "ipAddress": "string", + "ipAddressFromResourceProvider": "null", + "isInteractive": "bool", + "isTenantRestricted": "bool", + "isThroughGlobalSecureAccess": "bool", + "location": { + "city": "string", + "countryOrRegion": "string", + "geoCoordinates": { + "altitude": "null", + "latitude": "truncated", + "longitude": "truncated" + }, + "state": "string" + }, + "locationcipp": "string", + "managedServiceIdentity": { + "associatedResourceId": "null", + "federatedTokenId": "null", + "federatedTokenIssuer": "null", + "msiType": "string" + }, + "mfaDetail": "null", + "networkLocationDetails": { + "_type": "array", + "_element": { + "networkNames": "truncated", + "networkType": "truncated" + } + }, + "originalRequestId": "string", + "originalTransferMethod": "string", + "privateLinkDetails": { + "policyId": "string", + "policyName": "string", + "policyTenantId": "null", + "resourceId": "string" + }, + "processingTimeInMilliseconds": "number", + "resourceDisplayName": "string", + "resourceId": "string", + "resourceOwnerTenantId": "string", + "resourceServicePrincipalId": "string", + "resourceTenantId": "string", + "riskDetail": "string", + "riskEventTypes_v2": "null", + "riskLevelAggregated": "string", + "riskLevelDuringSignIn": "string", + "riskState": "string", + "servicePrincipalCredentialKeyId": "null", + "servicePrincipalCredentialThumbprint": "string", + "servicePrincipalId": "string", + "servicePrincipalName": "null", + "sessionId": "string", + "sessionLifetimePolicies": { + "detail": "string", + "expirationRequirement": "string" + }, + "signInEventTypes": "string", + "signInIdentifier": "string", + "signInIdentifierType": "null", + "signInTokenProtectionStatus": "string", + "status": { + "additionalDetails": "null", + "errorCode": "number", + "failureReason": "string" + }, + "tokenIssuerName": "string", + "tokenIssuerType": "string", + "tokenProtectionStatusDetails": { + "signInSessionStatus": "string", + "signInSessionStatusCode": "number" + }, + "uniqueTokenIdentifier": "string", + "userAgent": "string", + "userDisplayName": "string", + "userId": "string", + "userPrincipalName": "string", + "userType": "string" + } +} diff --git a/Tests/Shapes/ListSites.json b/Tests/Shapes/ListSites.json new file mode 100644 index 000000000000..a2b7f821cfbe --- /dev/null +++ b/Tests/Shapes/ListSites.json @@ -0,0 +1,26 @@ +{ + "_metadata": { + "endpoint": "ListSites", + "generatedAt": "2026-04-03T23:47:14.3463174+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AutoMapUrl": "string", + "createdDateTime": "datetime", + "displayName": "null", + "fileCount": "number", + "lastActivityDate": "string", + "ownerDisplayName": "string", + "ownerPrincipalName": "null", + "reportRefreshDate": "string", + "rootWebTemplate": "string", + "siteId": "string", + "storageAllocatedInBytes": "number", + "storageAllocatedInGigabytes": "number", + "storageUsedInBytes": "number", + "storageUsedInGigabytes": "number", + "webId": "string", + "webUrl": "string" + } +} diff --git a/Tests/Shapes/ListSpamFilterTemplates.json b/Tests/Shapes/ListSpamFilterTemplates.json new file mode 100644 index 000000000000..5df1076ec5a0 --- /dev/null +++ b/Tests/Shapes/ListSpamFilterTemplates.json @@ -0,0 +1,60 @@ +{ + "_metadata": { + "endpoint": "ListSpamFilterTemplates", + "generatedAt": "2026-04-03T23:40:32.9226082+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "AddXHeaderValue": "string", + "AdminDisplayName": "string", + "AllowedSenderDomains": "null", + "AllowedSenders": "null", + "BlockedSenderDomains": "null", + "BlockedSenders": "null", + "BulkQuarantineTag": "string", + "BulkSpamAction": "string", + "BulkThreshold": "number", + "comments": "null", + "DownloadLink": "bool", + "EnableLanguageBlockList": "bool", + "EnableRegionBlockList": "bool", + "GUID": "string", + "HighConfidencePhishAction": "string", + "HighConfidencePhishQuarantineTag": "string", + "HighConfidenceSpamAction": "string", + "HighConfidenceSpamQuarantineTag": "string", + "IncreaseScoreWithBizOrInfoUrls": "string", + "IncreaseScoreWithImageLinks": "string", + "IncreaseScoreWithNumericIps": "string", + "IncreaseScoreWithRedirectToOtherPort": "string", + "InlineSafetyTipsEnabled": "bool", + "LanguageBlockList": "null", + "MarkAsSpamBulkMail": "string", + "MarkAsSpamEmbedTagsInHtml": "string", + "MarkAsSpamEmptyMessages": "string", + "MarkAsSpamFormTagsInHtml": "string", + "MarkAsSpamFramesInHtml": "string", + "MarkAsSpamFromAddressAuthFail": "string", + "MarkAsSpamJavaScriptInHtml": "string", + "MarkAsSpamNdrBackscatter": "string", + "MarkAsSpamObjectTagsInHtml": "string", + "MarkAsSpamSensitiveWordList": "string", + "MarkAsSpamSpfRecordHardFail": "string", + "MarkAsSpamWebBugsInHtml": "string", + "ModifySubjectValue": "string", + "name": "string", + "PhishQuarantineTag": "string", + "PhishSpamAction": "string", + "PhishZapEnabled": "bool", + "QuarantineRetentionPeriod": "number", + "RecommendedPolicyType": "string", + "RedirectToRecipients": "null", + "RegionBlockList": "null", + "SpamAction": "string", + "SpamQuarantineTag": "string", + "SpamZapEnabled": "bool", + "TestModeAction": "string", + "TestModeBccToRecipients": "null" + } +} diff --git a/Tests/Shapes/ListSpamfilter.json b/Tests/Shapes/ListSpamfilter.json new file mode 100644 index 000000000000..c47d694f8bbc --- /dev/null +++ b/Tests/Shapes/ListSpamfilter.json @@ -0,0 +1,84 @@ +{ + "_metadata": { + "endpoint": "ListSpamfilter", + "generatedAt": "2026-04-03T23:46:39.4265774+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "AddXHeaderValue": "string", + "AdminDisplayName": "string", + "AllowedSenderDomains": "null", + "AllowedSenders": "null", + "BlockedSenderDomains": "null", + "BlockedSenders": "null", + "BulkMovesEnabled": "string", + "BulkQuarantineTag": "string", + "BulkSpamAction": "string", + "BulkThreshold": "number", + "DistinguishedName": "string", + "DownloadLink": "bool", + "EnableLanguageBlockList": "bool", + "EnableRegionBlockList": "bool", + "ExchangeObjectId": "string", + "ExchangeVersion": "string", + "FalsePositiveAdditionalRecipients": "null", + "Guid": "string", + "HighConfidencePhishAction": "string", + "HighConfidencePhishQuarantineTag": "string", + "HighConfidenceSpamAction": "string", + "HighConfidenceSpamQuarantineTag": "string", + "Id": "string", + "Identity": "string", + "IncreaseScoreWithBizOrInfoUrls": "string", + "IncreaseScoreWithImageLinks": "string", + "IncreaseScoreWithNumericIps": "string", + "IncreaseScoreWithRedirectToOtherPort": "string", + "InlineSafetyTipsEnabled": "bool", + "IntraOrgFilterState": "string", + "IsDefault": "bool", + "IsValid": "bool", + "LanguageBlockList": "null", + "MarkAsSpamBulkMail": "string", + "MarkAsSpamEmbedTagsInHtml": "string", + "MarkAsSpamEmptyMessages": "string", + "MarkAsSpamFormTagsInHtml": "string", + "MarkAsSpamFramesInHtml": "string", + "MarkAsSpamFromAddressAuthFail": "string", + "MarkAsSpamJavaScriptInHtml": "string", + "MarkAsSpamNdrBackscatter": "string", + "MarkAsSpamObjectTagsInHtml": "string", + "MarkAsSpamSensitiveWordList": "string", + "MarkAsSpamSpfRecordHardFail": "string", + "MarkAsSpamWebBugsInHtml": "string", + "ModifySubjectValue": "string", + "Name": "string", + "ObjectCategory": "string", + "ObjectClass": { + "_type": "array", + "_element": "string" + }, + "OrganizationalUnitRoot": "string", + "OrganizationId": "string", + "OriginatingServer": "string", + "PhishQuarantineTag": "string", + "PhishSpamAction": "string", + "PhishZapEnabled": "bool", + "QuarantineRetentionPeriod": "number", + "RecommendedPolicyType": "string", + "RedirectToRecipients": "null", + "RegionBlockList": "null", + "rulePrio": "null", + "ruleState": "null", + "SpamAction": "string", + "SpamQuarantineTag": "string", + "SpamZapEnabled": "bool", + "TestModeAction": "string", + "TestModeBccToRecipients": "null", + "WhenChanged": "datetime", + "WhenChangedUTC": "datetime", + "WhenCreated": "datetime", + "WhenCreatedUTC": "datetime", + "ZapEnabled": "bool" + } +} diff --git a/Tests/Shapes/ListStandardsCompare.json b/Tests/Shapes/ListStandardsCompare.json new file mode 100644 index 000000000000..90a46add4209 --- /dev/null +++ b/Tests/Shapes/ListStandardsCompare.json @@ -0,0 +1,235 @@ +{ + "_metadata": { + "endpoint": "ListStandardsCompare", + "generatedAt": "2026-04-03T23:47:15.5389612+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "standards.AntiPhishPolicy": { + "CurrentValue": "string", + "ExpectedValue": "string", + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "bool" + }, + "standards.AuditLog": { + "CurrentValue": { + "UnifiedAuditLogIngestionEnabled": "truncated" + }, + "ExpectedValue": { + "UnifiedAuditLogIngestionEnabled": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.ConditionalAccessTemplate.5fe01a7f-8d81-419c-8a0d-0ef047cd9732": { + "CurrentValue": { + "Differences": "truncated" + }, + "ExpectedValue": { + "Differences": "null" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.DisableBasicAuthSMTP": { + "CurrentValue": { + "SmtpClientAuthenticationDisabled": "truncated", + "UsersWithSmtpAuthEnabled": "null" + }, + "ExpectedValue": { + "SmtpClientAuthenticationDisabled": "truncated", + "UsersWithSmtpAuthEnabled": "null" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.04e77498-4bb1-4f0b-9726-8ab3352d056e": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.212e1653-551f-4592-903c-7dd32b2edd8c": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.257ebf97-40cd-4861-a7a0-f19ada1e2316": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.5e0c779e-21cf-459a-ae17-8bafa9982620": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.6c9e2009-f72e-4aba-9393-ed58b328a201": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.872ccbb0-0152-4dc9-94a6-0f785b6b70e8": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.92d4d6e0-b818-4c52-bffa-5921a6e30921": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.9fcfd67e-9f82-4a97-9364-50528bdeee88": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.c39e5044-929b-49ea-818f-d6585810aa2f": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "standards.IntuneTemplate.f59b1553-9e7a-431d-9334-ab2c330e6215": { + "CurrentValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "ExpectedValue": { + "description": "truncated", + "displayName": "truncated", + "isAssigned": "truncated", + "isCompliant": "truncated" + }, + "LastRefresh": "datetime", + "LicenseAvailable": "bool", + "TemplateId": "string", + "Value": "null" + }, + "tenantFilter": "string" + } +} diff --git a/Tests/Shapes/ListTeams.json b/Tests/Shapes/ListTeams.json new file mode 100644 index 000000000000..117a88b81e36 --- /dev/null +++ b/Tests/Shapes/ListTeams.json @@ -0,0 +1,15 @@ +{ + "_metadata": { + "endpoint": "ListTeams", + "generatedAt": "2026-04-03T23:47:17.0206982+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "description": "string", + "displayName": "string", + "id": "string", + "mailNickname": "string", + "visibility": "string" + } +} diff --git a/Tests/Shapes/ListTeamsActivity.json b/Tests/Shapes/ListTeamsActivity.json new file mode 100644 index 000000000000..03dddaff3866 --- /dev/null +++ b/Tests/Shapes/ListTeamsActivity.json @@ -0,0 +1,15 @@ +{ + "_metadata": { + "endpoint": "ListTeamsActivity", + "generatedAt": "2026-04-03T23:47:18.9720145+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "CallCount": "string", + "LastActive": "string", + "MeetingCount": "string", + "TeamsChat": "string", + "UPN": "string" + } +} diff --git a/Tests/Shapes/ListTenantAlignment.json b/Tests/Shapes/ListTenantAlignment.json new file mode 100644 index 000000000000..3efced5b87d4 --- /dev/null +++ b/Tests/Shapes/ListTenantAlignment.json @@ -0,0 +1,18 @@ +{ + "_metadata": { + "endpoint": "ListTenantAlignment", + "generatedAt": "2026-04-03T23:47:28.9148618+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "alignmentScore": "number", + "combinedAlignmentScore": "number", + "latestDataCollection": "datetime", + "LicenseMissingPercentage": "number", + "standardId": "string", + "standardName": "string", + "standardType": "string", + "tenantFilter": "string" + } +} diff --git a/Tests/Shapes/ListTenantAllowBlockListTemplates.json b/Tests/Shapes/ListTenantAllowBlockListTemplates.json new file mode 100644 index 000000000000..e21a0eef1095 --- /dev/null +++ b/Tests/Shapes/ListTenantAllowBlockListTemplates.json @@ -0,0 +1,18 @@ +{ + "_metadata": { + "endpoint": "ListTenantAllowBlockListTemplates", + "generatedAt": "2026-04-03T23:40:33.8106968+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "entries": "string", + "GUID": "string", + "listMethod": "string", + "listType": "string", + "NoExpiration": "bool", + "notes": "string", + "RemoveAfter": "bool", + "templateName": "string" + } +} diff --git a/Tests/Shapes/ListTenantDetails.json b/Tests/Shapes/ListTenantDetails.json new file mode 100644 index 000000000000..410320482405 --- /dev/null +++ b/Tests/Shapes/ListTenantDetails.json @@ -0,0 +1,44 @@ +{ + "_metadata": { + "endpoint": "ListTenantDetails", + "generatedAt": "2026-04-03T23:47:30.6447502+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "assignedPlans": { + "_type": "array", + "_element": { + "assignedDateTime": "truncated", + "capabilityStatus": "truncated", + "service": "truncated", + "servicePlanId": "truncated" + } + }, + "businessPhones": "string", + "city": "string", + "country": "null", + "countryLetterCode": "string", + "createdDateTime": "datetime", + "customProperties": {}, + "displayName": "string", + "Groups": { + "_type": "array", + "_element": { + "Description": "truncated", + "GroupType": "truncated", + "Id": "truncated", + "Name": "truncated" + } + }, + "id": "string", + "onPremisesLastPasswordSyncDateTime": "null", + "onPremisesLastSyncDateTime": "null", + "onPremisesSyncEnabled": "null", + "postalCode": "string", + "state": "string", + "street": "string", + "technicalNotificationMails": "string", + "tenantType": "string" + } +} diff --git a/Tests/Shapes/ListTenantDrift.json b/Tests/Shapes/ListTenantDrift.json new file mode 100644 index 000000000000..5d02b1fbad09 --- /dev/null +++ b/Tests/Shapes/ListTenantDrift.json @@ -0,0 +1,83 @@ +{ + "_metadata": { + "endpoint": "ListTenantDrift", + "generatedAt": "2026-04-03T23:47:37.4944459+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "acceptedDeviations": "null", + "acceptedDeviationsCount": "number", + "alignedCount": "number", + "alignmentScore": "number", + "allDeviations": { + "_type": "array", + "_element": { + "CurrentValue": "truncated", + "ExpectedValue": "truncated", + "lastChangedByUser": "null", + "LicenseAvailable": "truncated", + "Reason": "null", + "receivedValue": "truncated", + "standardDescription": "null", + "standardDisplayName": "truncated", + "standardName": "truncated", + "state": "truncated", + "Status": "truncated" + } + }, + "currentDeviations": { + "_type": "array", + "_element": { + "CurrentValue": "truncated", + "ExpectedValue": "truncated", + "lastChangedByUser": "null", + "LicenseAvailable": "truncated", + "Reason": "null", + "receivedValue": "truncated", + "standardDescription": "null", + "standardDisplayName": "truncated", + "standardName": "truncated", + "state": "truncated", + "Status": "truncated" + } + }, + "currentDeviationsCount": "number", + "customerSpecificDeviations": "null", + "customerSpecificDeviationsCount": "number", + "deniedDeviations": "null", + "deniedDeviationsCount": "number", + "driftSettings": { + "AlignmentScore": "number", + "CombinedScore": "number", + "ComparisonDetails": { + "_type": "array", + "_element": "truncated" + }, + "CompliantStandards": "number", + "driftAlertDisableEmail": "bool", + "driftAlertEmail": "string", + "driftAlertWebhook": "string", + "LatestDataCollection": "datetime", + "LicenseMissingPercentage": "number", + "LicenseMissingStandards": "number", + "NonCompliantStandards": "number", + "ReportingDisabledCount": "number", + "StandardId": "string", + "StandardName": "string", + "standardSettings": { + "AuditLog": "truncated", + "ConditionalAccessTemplate": "truncated", + "IntuneTemplate": "truncated" + }, + "standardType": "string", + "TenantFilter": "string", + "TotalStandards": "number" + }, + "latestDataCollection": "datetime", + "newDeviationsCount": "number", + "standardId": "string", + "standardName": "string", + "tenantFilter": "string" + } +} diff --git a/Tests/Shapes/ListTenantGroups.json b/Tests/Shapes/ListTenantGroups.json new file mode 100644 index 000000000000..8d62a04a6ceb --- /dev/null +++ b/Tests/Shapes/ListTenantGroups.json @@ -0,0 +1,24 @@ +{ + "_metadata": { + "endpoint": "ListTenantGroups", + "generatedAt": "2026-04-03T23:47:38.4908740+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Description": "string", + "DynamicRules": "null", + "GroupType": "string", + "Id": "string", + "Members": { + "_type": "array", + "_element": { + "customerId": "truncated", + "defaultDomainName": "truncated", + "displayName": "truncated" + } + }, + "Name": "string", + "RuleLogic": "string" + } +} diff --git a/Tests/Shapes/ListTenantOnboarding.json b/Tests/Shapes/ListTenantOnboarding.json new file mode 100644 index 000000000000..0babd4dd5f85 --- /dev/null +++ b/Tests/Shapes/ListTenantOnboarding.json @@ -0,0 +1,52 @@ +{ + "_metadata": { + "endpoint": "ListTenantOnboarding", + "generatedAt": "2026-04-03T23:40:35.0233147+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "CustomerId": "string", + "ETag": "string", + "Exception": "string", + "Logs": { + "_type": "array", + "_element": { + "Date": "truncated", + "Log": "truncated" + } + }, + "OnboardingSteps": { + "_type": "array", + "_element": { + "Message": "truncated", + "Status": "truncated", + "Title": "truncated" + } + }, + "PartitionKey": "string", + "Relationship": { + "@odata.context": "string", + "@odata.etag": "string", + "accessDetails": { + "unifiedRoles": "truncated" + }, + "activatedDateTime": "datetime", + "autoExtendDuration": "string", + "createdDateTime": "datetime", + "customer": { + "displayName": "truncated", + "tenantId": "truncated" + }, + "displayName": "string", + "duration": "string", + "endDateTime": "datetime", + "id": "string", + "lastModifiedDateTime": "datetime", + "status": "string" + }, + "RowKey": "string", + "Status": "string", + "Timestamp": "datetime" + } +} diff --git a/Tests/Shapes/ListTenants.json b/Tests/Shapes/ListTenants.json new file mode 100644 index 000000000000..7fde13f94cc3 --- /dev/null +++ b/Tests/Shapes/ListTenants.json @@ -0,0 +1,32 @@ +{ + "_metadata": { + "endpoint": "ListTenants", + "generatedAt": "2026-04-03T23:47:39.2555145+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "ComplianceUrl": "string", + "customerId": "string", + "defaultDomainName": "string", + "delegatedPrivilegeStatus": "string", + "displayName": "string", + "domains": "string", + "ETag": "string", + "Excluded": "bool", + "ExcludeDate": "string", + "ExcludeUser": "string", + "GraphErrorCount": "number", + "hasAutoExtend": "bool", + "initialDomainName": "string", + "LastGraphError": "string", + "LastRefresh": "datetime", + "PartitionKey": "string", + "relationshipCount": "number", + "relationshipEnd": "datetime", + "RequiresRefresh": "bool", + "RowKey": "string", + "SharepointAdminUrl": "string", + "Timestamp": "datetime" + } +} diff --git a/Tests/Shapes/ListTestReports.json b/Tests/Shapes/ListTestReports.json new file mode 100644 index 000000000000..5c16a242a99d --- /dev/null +++ b/Tests/Shapes/ListTestReports.json @@ -0,0 +1,16 @@ +{ + "_metadata": { + "endpoint": "ListTestReports", + "generatedAt": "2026-04-03T23:40:36.0072185+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "description": "string", + "id": "string", + "name": "string", + "source": "string", + "type": "string", + "version": "string" + } +} diff --git a/Tests/Shapes/ListTests.json b/Tests/Shapes/ListTests.json new file mode 100644 index 000000000000..e79c73d8eb9f --- /dev/null +++ b/Tests/Shapes/ListTests.json @@ -0,0 +1,204 @@ +{ + "_metadata": { + "endpoint": "ListTests", + "generatedAt": "2026-04-03T23:47:45.3938682+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "LatestReportTimeStamp": "datetime", + "LicenseData": { + "AssignedGroups": "null", + "AssignedUsers": { + "_type": "array", + "_element": "truncated" + }, + "availableUnits": "number", + "CountAvailable": "number", + "CountUsed": "string", + "License": "string", + "ServicePlans": { + "_type": "array", + "_element": "truncated" + }, + "skuId": "string", + "skuPartNumber": "string", + "Tenant": "string", + "TermInfo": { + "CSPSubscriptionId": "truncated", + "DaysUntilRenew": "truncated", + "IsTrial": "truncated", + "NextLifecycle": "truncated", + "OCPSubscriptionId": "truncated", + "Status": "truncated", + "SubscriptionId": "truncated", + "Term": "truncated", + "TotalLicenses": "truncated" + }, + "TotalLicenses": "string" + }, + "MFAState": { + "_type": "array", + "_element": { + "AccountEnabled": "truncated", + "CAPolicies": "truncated", + "CoveredByCA": "truncated", + "CoveredBySD": "truncated", + "DisplayName": "truncated", + "ID": "truncated", + "IsAdmin": "truncated", + "isLicensed": "truncated", + "MFACapable": "truncated", + "MFAMethods": "null", + "MFARegistration": "truncated", + "PartitionKey": "truncated", + "PerUser": "truncated", + "RowKey": "truncated", + "Tenant": "truncated", + "UPN": "truncated", + "UserType": "truncated" + } + }, + "SecureScore": { + "_type": "array", + "_element": { + "activeUserCount": "truncated", + "averageComparativeScores": "truncated", + "azureTenantId": "truncated", + "controlScores": "truncated", + "createdDateTime": "truncated", + "currentScore": "truncated", + "enabledServices": "truncated", + "id": "truncated", + "licensedUserCount": "truncated", + "maxScore": "truncated", + "vendorInformation": "truncated" + } + }, + "TenantCounts": { + "AdminConsentRequestPolicy": "number", + "AppRoleAssignments": "number", + "Apps": "number", + "AuthenticationMethodsPolicy": "number", + "AuthenticationStrengths": "number", + "AuthorizationPolicy": "number", + "BitlockerKeys": "number", + "CalendarPermissions": "number", + "CASMailbox": "number", + "ConditionalAccessPolicies": "number", + "CopilotReadinessActivity": "number", + "CopilotUsageUserDetail": "number", + "CopilotUserCountSummary": "number", + "CopilotUserCountTrend": "number", + "CredentialUserRegistrationDetails": "number", + "CrossTenantAccessPolicy": "number", + "DefaultAppManagementPolicy": "number", + "DetectedApps": "number", + "DeviceRegistrationPolicy": "number", + "Devices": "number", + "DeviceSettings": "number", + "DirectoryRecommendations": "number", + "DlpCompliancePolicies": "number", + "Domains": "number", + "ExoAcceptedDomains": "number", + "ExoAdminAuditLogConfig": "number", + "ExoAntiPhishPolicies": "number", + "ExoAntiPhishRules": "number", + "ExoAtpPolicyForO365": "number", + "ExoDkimSigningConfig": "number", + "ExoHostedContentFilterPolicy": "number", + "ExoHostedOutboundSpamFilterPolicy": "number", + "ExoMalwareFilterPolicies": "number", + "ExoMalwareFilterRules": "number", + "ExoOrganizationConfig": "number", + "ExoQuarantinePolicy": "number", + "ExoRemoteDomain": "number", + "ExoSafeAttachmentPolicies": "number", + "ExoSafeAttachmentRules": "number", + "ExoSafeLinksPolicies": "number", + "ExoSafeLinksRules": "number", + "ExoSharingPolicy": "number", + "ExoTenantAllowBlockList": "number", + "ExoTransportConfig": "number", + "ExoTransportRules": "number", + "Groups": "number", + "Guests": "number", + "IntuneAndroidAppProtectionPolicies": "number", + "IntuneAppProtectionPolicies": "number", + "IntuneConfigurationPolicies": "number", + "IntuneDeviceCompliancePolicies": "number", + "IntuneDeviceConfigurations": "number", + "IntuneDeviceEnrollmentConfigurations": "number", + "IntuneIosAppProtectionPolicies": "number", + "IntuneMobileAppConfigurations": "number", + "IntuneMobileApps": "number", + "IntuneWindowsAutopilotDeploymentProfiles": "number", + "LicenseOverview": "number", + "Mailboxes": "number", + "MailboxPermissions": "number", + "MailboxRules": "number", + "MailboxUsage": "number", + "ManagedDevices": "number", + "MDEOnboarding": "number", + "MFAState": "number", + "NamedLocations": "number", + "OAuth2PermissionGrants": "number", + "OfficeActivations": "number", + "OneDriveUsage": "number", + "Organization": "number", + "RiskyUsers": "number", + "Roles": "number", + "SecureScore": "number", + "SecureScoreControlProfiles": "number", + "SensitivityLabels": "number", + "ServicePrincipals": "number", + "Settings": "number", + "UserRegistrationDetails": "number" + }, + "TestCounts": { + "Custom": { + "Failed": "truncated", + "Informational": "truncated", + "Passed": "truncated", + "Skipped": "truncated", + "Total": "truncated" + }, + "Devices": { + "Failed": "truncated", + "Informational": "truncated", + "NeedsAttention": "truncated", + "Passed": "truncated", + "Skipped": "truncated", + "Total": "truncated" + }, + "Identity": { + "Failed": "truncated", + "Informational": "truncated", + "NeedsAttention": "truncated", + "Passed": "truncated", + "Skipped": "truncated", + "Total": "truncated" + } + }, + "TestResults": { + "_type": "array", + "_element": { + "Category": "truncated", + "Description": "truncated", + "ETag": "truncated", + "ImplementationEffort": "truncated", + "Name": "truncated", + "PartitionKey": "truncated", + "Pillar": "truncated", + "ResultDataJson": "truncated", + "ResultMarkdown": "truncated", + "Risk": "truncated", + "RowKey": "truncated", + "Status": "truncated", + "TestType": "truncated", + "Timestamp": "truncated", + "UserImpact": "truncated" + } + } + } +} diff --git a/Tests/Shapes/ListTransportRules.json b/Tests/Shapes/ListTransportRules.json new file mode 100644 index 000000000000..cd0f334130e8 --- /dev/null +++ b/Tests/Shapes/ListTransportRules.json @@ -0,0 +1,222 @@ +{ + "_metadata": { + "endpoint": "ListTransportRules", + "generatedAt": "2026-04-03T23:47:47.2581792+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Actions": "string", + "Actions@odata.type": "string", + "ActivationDate": "null", + "ADComparisonAttribute": "null", + "ADComparisonOperator": "null", + "AddManagerAsRecipientType": "null", + "AddToRecipients": "null", + "AnyOfCcHeader": "null", + "AnyOfCcHeaderMemberOf": "null", + "AnyOfRecipientAddressContainsWords": "null", + "AnyOfRecipientAddressMatchesPatterns": "null", + "AnyOfToCcHeader": "null", + "AnyOfToCcHeaderMemberOf": "null", + "AnyOfToHeader": "null", + "AnyOfToHeaderMemberOf": "null", + "ApplyClassification": "null", + "ApplyHtmlDisclaimerFallbackAction": "null", + "ApplyHtmlDisclaimerLocation": "null", + "ApplyHtmlDisclaimerText": "null", + "ApplyOME": "bool", + "ApplyRightsProtectionCustomizationTemplate": "null", + "ApplyRightsProtectionTemplate": "null", + "AttachmentContainsWords": "null", + "AttachmentExtensionMatchesWords": "null", + "AttachmentHasExecutableContent": "bool", + "AttachmentIsPasswordProtected": "bool", + "AttachmentIsUnsupported": "bool", + "AttachmentMatchesPatterns": "null", + "AttachmentNameMatchesPatterns": "null", + "AttachmentProcessingLimitExceeded": "bool", + "AttachmentPropertyContainsWords": "null", + "AttachmentSizeOver": "null", + "BetweenMemberOf1": "null", + "BetweenMemberOf2": "null", + "BlindCopyTo": "null", + "Comments": "null", + "Conditions": "string", + "Conditions@odata.type": "string", + "ContentCharacterSetContainsWords": "null", + "ContentMatchesPrompt": "null", + "ContentMatchesPromptVerdict": "null", + "CopyTo": "null", + "CreatedBy": "string", + "DeleteMessage": "bool", + "Description": "string", + "Disconnect": "bool", + "DistinguishedName": "string", + "DlpPolicy": "null", + "DlpPolicyId": "string", + "DlpPolicyId@data.type": "string", + "DlpPolicyId@odata.type": "string", + "ExceptIfADComparisonAttribute": "null", + "ExceptIfADComparisonOperator": "null", + "ExceptIfAnyOfCcHeader": "null", + "ExceptIfAnyOfCcHeaderMemberOf": "null", + "ExceptIfAnyOfRecipientAddressContainsWords": "null", + "ExceptIfAnyOfRecipientAddressMatchesPatterns": "null", + "ExceptIfAnyOfToCcHeader": "null", + "ExceptIfAnyOfToCcHeaderMemberOf": "null", + "ExceptIfAnyOfToHeader": "null", + "ExceptIfAnyOfToHeaderMemberOf": "null", + "ExceptIfAttachmentContainsWords": "null", + "ExceptIfAttachmentExtensionMatchesWords": "null", + "ExceptIfAttachmentHasExecutableContent": "bool", + "ExceptIfAttachmentIsPasswordProtected": "bool", + "ExceptIfAttachmentIsUnsupported": "bool", + "ExceptIfAttachmentMatchesPatterns": "null", + "ExceptIfAttachmentNameMatchesPatterns": "null", + "ExceptIfAttachmentProcessingLimitExceeded": "bool", + "ExceptIfAttachmentPropertyContainsWords": "null", + "ExceptIfAttachmentSizeOver": "null", + "ExceptIfBetweenMemberOf1": "null", + "ExceptIfBetweenMemberOf2": "null", + "ExceptIfContentCharacterSetContainsWords": "null", + "ExceptIfContentMatchesPrompt": "null", + "ExceptIfContentMatchesPromptVerdict": "null", + "ExceptIfFrom": "null", + "ExceptIfFromAddressContainsWords": "null", + "ExceptIfFromAddressMatchesPatterns": "null", + "ExceptIfFromMemberOf": "null", + "ExceptIfFromScope": "null", + "ExceptIfHasClassification": "null", + "ExceptIfHasNoClassification": "bool", + "ExceptIfHasSenderOverride": "bool", + "ExceptIfHeaderContainsMessageHeader": "null", + "ExceptIfHeaderContainsWords": "null", + "ExceptIfHeaderMatchesMessageHeader": "null", + "ExceptIfHeaderMatchesPatterns": "null", + "ExceptIfManagerAddresses": "null", + "ExceptIfManagerForEvaluatedUser": "null", + "ExceptIfMessageContainsAllDataClassifications": "null", + "ExceptIfMessageContainsDataClassifications": "null", + "ExceptIfMessageSizeOver": "null", + "ExceptIfMessageTypeMatches": "null", + "ExceptIfRecipientADAttributeContainsWords": "null", + "ExceptIfRecipientADAttributeMatchesPatterns": "null", + "ExceptIfRecipientAddressContainsWords": "null", + "ExceptIfRecipientAddressMatchesPatterns": "null", + "ExceptIfRecipientDomainIs": "null", + "ExceptIfRecipientInSenderList": "null", + "ExceptIfSCLOver": "null", + "ExceptIfSenderADAttributeContainsWords": "null", + "ExceptIfSenderADAttributeMatchesPatterns": "null", + "ExceptIfSenderDomainIs": "null", + "ExceptIfSenderInRecipientList": "null", + "ExceptIfSenderIpRanges": "null", + "ExceptIfSenderManagementRelationship": "null", + "ExceptIfSentTo": "null", + "ExceptIfSentToMemberOf": "null", + "ExceptIfSentToScope": "null", + "ExceptIfSubjectContainsWords": "null", + "ExceptIfSubjectMatchesPatterns": "null", + "ExceptIfSubjectOrBodyContainsWords": "null", + "ExceptIfSubjectOrBodyMatchesPatterns": "null", + "ExceptIfWithImportance": "null", + "Exceptions": "null", + "ExpiryDate": "null", + "From": "string", + "From@odata.type": "string", + "FromAddressContainsWords": "null", + "FromAddressMatchesPatterns": "null", + "FromMemberOf": "null", + "FromScope": "null", + "GenerateIncidentReport": "null", + "GenerateNotification": "null", + "Guid": "string", + "Guid@data.type": "string", + "Guid@odata.type": "string", + "HasClassification": "null", + "HasNoClassification": "bool", + "HasSenderOverride": "bool", + "HeaderContainsMessageHeader": "null", + "HeaderContainsWords": "null", + "HeaderMatchesMessageHeader": "null", + "HeaderMatchesPatterns": "null", + "Identity": "string", + "ImmutableId": "string", + "ImmutableId@data.type": "string", + "ImmutableId@odata.type": "string", + "IncidentReportContent": "null", + "IsRuleConfigurationSupported": "bool", + "IsValid": "bool", + "LastModifiedBy": "string", + "LogEventText": "null", + "ManagerAddresses": "null", + "ManagerForEvaluatedUser": "null", + "ManuallyModified": "bool", + "MessageContainsAllDataClassifications": "null", + "MessageContainsDataClassifications": "null", + "MessageSizeOver": "null", + "MessageTypeMatches": "null", + "Mode": "string", + "ModerateMessageByManager": "bool", + "ModerateMessageByUser": "null", + "Name": "string", + "OrganizationId": "string", + "PrependSubject": "null", + "Priority": "number", + "Priority@data.type": "string", + "Quarantine": "bool", + "RecipientADAttributeContainsWords": "null", + "RecipientADAttributeMatchesPatterns": "null", + "RecipientAddressContainsWords": "null", + "RecipientAddressMatchesPatterns": "null", + "RecipientAddressType": "string", + "RecipientDomainIs": "null", + "RecipientInSenderList": "null", + "RedirectMessageTo": "null", + "RegexSize": "number", + "RegexSize@data.type": "string", + "RejectMessageEnhancedStatusCode": "string", + "RejectMessageReasonText": "string", + "RemoveHeader": "null", + "RemoveOME": "bool", + "RemoveOMEv2": "bool", + "RemoveRMSAttachmentEncryption": "bool", + "RouteMessageOutboundConnector": "null", + "RouteMessageOutboundRequireTls": "bool", + "RuleConfigurationUnsupportedReason": "string", + "RuleErrorAction": "string", + "RuleSubType": "string", + "RuleVersion": "string", + "SCLOver": "null", + "SenderADAttributeContainsWords": "null", + "SenderADAttributeMatchesPatterns": "null", + "SenderAddressLocation": "string", + "SenderDomainIs": "null", + "SenderInRecipientList": "null", + "SenderIpRanges": "null", + "SenderManagementRelationship": "null", + "SenderNotificationType": "null", + "SentTo": "null", + "SentToMemberOf": "null", + "SentToScope": "null", + "SetAuditSeverity": "null", + "SetHeaderName": "null", + "SetHeaderValue": "null", + "SetSCL": "null", + "Size": "number", + "Size@data.type": "string", + "SmtpRejectMessageRejectStatusCode": "null", + "SmtpRejectMessageRejectText": "null", + "State": "string", + "StopRuleProcessing": "bool", + "SubjectContainsWords": "null", + "SubjectMatchesPatterns": "null", + "SubjectOrBodyContainsWords": "null", + "SubjectOrBodyMatchesPatterns": "null", + "UseLegacyRegex": "bool", + "WhenChanged": "datetime", + "WhenChanged@data.type": "string", + "WithImportance": "null" + } +} diff --git a/Tests/Shapes/ListTransportRulesTemplates.json b/Tests/Shapes/ListTransportRulesTemplates.json new file mode 100644 index 000000000000..f131a144d3e9 --- /dev/null +++ b/Tests/Shapes/ListTransportRulesTemplates.json @@ -0,0 +1,45 @@ +{ + "_metadata": { + "endpoint": "ListTransportRulesTemplates", + "generatedAt": "2026-04-03T23:40:37.1963005+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "ApplyOME": "bool", + "AttachmentExtensionMatchesWords": { + "_type": "array", + "_element": "string" + }, + "AttachmentHasExecutableContent": "bool", + "AttachmentIsPasswordProtected": "bool", + "AttachmentIsUnsupported": "bool", + "AttachmentProcessingLimitExceeded": "bool", + "comments": "string", + "DeleteMessage": "bool", + "ExceptIfAttachmentHasExecutableContent": "bool", + "ExceptIfAttachmentIsPasswordProtected": "bool", + "ExceptIfAttachmentIsUnsupported": "bool", + "ExceptIfAttachmentProcessingLimitExceeded": "bool", + "ExceptIfHasNoClassification": "bool", + "ExceptIfHasSenderOverride": "bool", + "GUID": "string", + "HasNoClassification": "bool", + "HasSenderOverride": "bool", + "Mode": "string", + "ModerateMessageByManager": "bool", + "name": "string", + "Quarantine": "bool", + "RecipientAddressType": "string", + "RemoveOME": "bool", + "RemoveOMEv2": "bool", + "RemoveRMSAttachmentEncryption": "bool", + "RouteMessageOutboundRequireTls": "bool", + "RuleErrorAction": "string", + "RuleSubType": "string", + "SenderAddressLocation": "string", + "SetAuditSeverity": "string", + "StopRuleProcessing": "bool", + "UseLegacyRegex": "bool" + } +} diff --git a/Tests/Shapes/ListUserCounts.json b/Tests/Shapes/ListUserCounts.json new file mode 100644 index 000000000000..e1c5a7e655e2 --- /dev/null +++ b/Tests/Shapes/ListUserCounts.json @@ -0,0 +1,14 @@ +{ + "_metadata": { + "endpoint": "ListUserCounts", + "generatedAt": "2026-04-03T23:47:48.8664374+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Gas": "number", + "Guests": "number", + "LicUsers": "number", + "Users": "number" + } +} diff --git a/Tests/Shapes/ListUserPhoto.json b/Tests/Shapes/ListUserPhoto.json new file mode 100644 index 000000000000..c0f7d25aa38b --- /dev/null +++ b/Tests/Shapes/ListUserPhoto.json @@ -0,0 +1,19 @@ +{ + "_metadata": { + "endpoint": "ListUserPhoto", + "generatedAt": "2026-04-03T23:40:39.3475364+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "error": { + "code": "string", + "innerError": { + "client-request-id": "truncated", + "date": "truncated", + "request-id": "truncated" + }, + "message": "string" + } + } +} diff --git a/Tests/Shapes/ListUserSettings.json b/Tests/Shapes/ListUserSettings.json new file mode 100644 index 000000000000..e983dddcea26 --- /dev/null +++ b/Tests/Shapes/ListUserSettings.json @@ -0,0 +1,68 @@ +{ + "_metadata": { + "endpoint": "ListUserSettings", + "generatedAt": "2026-04-03T23:40:40.0340526+02:00", + "tenantFilter": null, + "requiresTenant": false + }, + "shape": { + "bookmarkPopover": "bool", + "bookmarkSidebar": "bool", + "compactNav": "bool", + "customBranding": { + "colour": "string", + "ETag": "string", + "logo": "string", + "PartitionKey": "string", + "RowKey": "string", + "Timestamp": "datetime" + }, + "offboardingDefaults": { + "ClearImmutableId": "bool", + "ConvertToShared": "bool", + "DeleteUser": "bool", + "DisableSignIn": "bool", + "HideFromGAL": "bool", + "KeepCopy": "bool", + "removeCalendarInvites": "bool", + "RemoveGroups": "bool", + "RemoveLicenses": "bool", + "RemoveMFADevices": "bool", + "RemoveMobile": "bool", + "removePermissions": "bool", + "RemoveRules": "bool", + "RemoveTeamsPhoneDID": "bool", + "ResetPass": "bool", + "RevokeSessions": "bool" + }, + "persistFilters": "bool", + "portalLinks": { + "Azure_Portal": "bool", + "Compliance_Portal": "bool", + "Entra_Portal": "bool", + "Exchange_Portal": "bool", + "Intune_Portal": "bool", + "M365_Portal": "bool", + "Power_BI_Portal": "bool", + "Power_Platform_Portal": "bool", + "Security_Portal": "bool", + "SharePoint_Admin": "bool", + "Teams_Portal": "bool" + }, + "tablePageSize": { + "label": "string", + "value": "string" + }, + "usageLocation": { + "label": "string", + "value": "string" + }, + "userAttributes": { + "_type": "array", + "_element": { + "label": "truncated", + "value": "truncated" + } + } + } +} diff --git a/Tests/Shapes/ListUsers.json b/Tests/Shapes/ListUsers.json new file mode 100644 index 000000000000..cc27cce2728d --- /dev/null +++ b/Tests/Shapes/ListUsers.json @@ -0,0 +1,139 @@ +{ + "_metadata": { + "endpoint": "ListUsers", + "generatedAt": "2026-04-03T23:48:27.4825432+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "accountEnabled": "bool", + "ageGroup": "null", + "agentIdentityBlueprintId": "null", + "Aliases": "string", + "assignedLicenses": { + "disabledPlans": "null", + "skuId": "string" + }, + "assignedPlans": { + "_type": "array", + "_element": { + "assignedDateTime": "truncated", + "capabilityStatus": "truncated", + "service": "truncated", + "servicePlanId": "truncated" + } + }, + "authorizationInfo": { + "certificateUserIds": "null" + }, + "businessPhones": "null", + "city": "null", + "cloudRealtimeCommunicationInfo": { + "isSipEnabled": "bool" + }, + "companyName": "null", + "consentProvidedForMinor": "null", + "country": "null", + "createdDateTime": "datetime", + "creationType": "null", + "deletedDateTime": "null", + "department": "null", + "deviceKeys": "null", + "displayName": "string", + "employeeHireDate": "null", + "employeeId": "null", + "employeeLeaveDateTime": "null", + "employeeOrgData": "null", + "employeeType": "null", + "externalUserConvertedOn": "null", + "externalUserState": "null", + "externalUserStateChangeDateTime": "null", + "faxNumber": "null", + "givenName": "null", + "id": "string", + "identities": { + "issuer": "string", + "issuerAssignedId": "string", + "signInType": "string" + }, + "identityParentId": "null", + "imAddresses": "string", + "infoCatalogs": "null", + "isLicenseReconciliationNeeded": "bool", + "isManagementRestricted": "null", + "isResourceAccount": "null", + "jobTitle": "null", + "legalAgeGroupClassification": "null", + "LicJoined": "string", + "mail": "string", + "mailNickname": "string", + "mobilePhone": "null", + "officeLocation": "null", + "onPremisesDistinguishedName": "null", + "onPremisesDomainName": "null", + "onPremisesExtensionAttributes": { + "extensionAttribute1": "null", + "extensionAttribute10": "null", + "extensionAttribute11": "null", + "extensionAttribute12": "null", + "extensionAttribute13": "null", + "extensionAttribute14": "null", + "extensionAttribute15": "null", + "extensionAttribute2": "null", + "extensionAttribute3": "null", + "extensionAttribute4": "null", + "extensionAttribute5": "null", + "extensionAttribute6": "null", + "extensionAttribute7": "null", + "extensionAttribute8": "null", + "extensionAttribute9": "null" + }, + "onPremisesImmutableId": "null", + "onPremisesLastSyncDateTime": "null", + "onPremisesObjectIdentifier": "null", + "onPremisesProvisioningErrors": "null", + "onPremisesSamAccountName": "null", + "onPremisesSecurityIdentifier": "null", + "onPremisesSipInfo": { + "isSipEnabled": "bool", + "sipDeploymentLocation": "null", + "sipPrimaryAddress": "null" + }, + "onPremisesSyncEnabled": "bool", + "onPremisesUserPrincipalName": "null", + "otherMails": "null", + "passwordPolicies": "null", + "passwordProfile": "null", + "postalCode": "null", + "preferredDataLocation": "null", + "preferredLanguage": "string", + "primDomain": { + "label": "string", + "value": "string" + }, + "provisionedPlans": { + "_type": "array", + "_element": { + "capabilityStatus": "truncated", + "provisioningStatus": "truncated", + "service": "truncated" + } + }, + "proxyAddresses": { + "_type": "array", + "_element": "string" + }, + "refreshTokensValidFromDateTime": "datetime", + "securityIdentifier": "string", + "serviceProvisioningErrors": "null", + "showInAddressList": "bool", + "signInSessionsValidFromDateTime": "datetime", + "state": "null", + "streetAddress": "null", + "surname": "string", + "usageLocation": "string", + "username": "string", + "userPrincipalName": "string", + "userType": "string" + } +} diff --git a/Tests/Shapes/ListmailboxPermissions.json b/Tests/Shapes/ListmailboxPermissions.json new file mode 100644 index 000000000000..b1ca123ff55c --- /dev/null +++ b/Tests/Shapes/ListmailboxPermissions.json @@ -0,0 +1,12 @@ +{ + "_metadata": { + "endpoint": "ListmailboxPermissions", + "generatedAt": "2026-04-03T23:48:41.6210602+02:00", + "tenantFilter": "7ngn50.onmicrosoft.com", + "requiresTenant": true + }, + "shape": { + "Permissions": "string", + "User": "string" + } +} diff --git a/Tests/Shapes/test-results.json b/Tests/Shapes/test-results.json new file mode 100644 index 000000000000..e118bb7da989 --- /dev/null +++ b/Tests/Shapes/test-results.json @@ -0,0 +1,704 @@ +[ + { + "Endpoint": "GetCippAlerts", + "Status": "PASS", + "Message": "", + "Duration": 1.39 + }, + { + "Endpoint": "GetVersion", + "Status": "PASS", + "Message": "", + "Duration": 0.73 + }, + { + "Endpoint": "ListAppApprovalTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.88 + }, + { + "Endpoint": "ListAppTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.91 + }, + { + "Endpoint": "ListApplicationQueue", + "Status": "PASS", + "Message": "", + "Duration": 0.9 + }, + { + "Endpoint": "ListAssignmentFilterTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.95 + }, + { + "Endpoint": "ListBPATemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.9 + }, + { + "Endpoint": "ListCAtemplates", + "Status": "PASS", + "Message": "", + "Duration": 1.53 + }, + { + "Endpoint": "ListCommunityRepos", + "Status": "PASS", + "Message": "", + "Duration": 0.55 + }, + { + "Endpoint": "ListConnectionFilterTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.56 + }, + { + "Endpoint": "ListContactTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.62 + }, + { + "Endpoint": "ListCustomRole", + "Status": "PASS", + "Message": "", + "Duration": 0.74 + }, + { + "Endpoint": "ListCustomScripts", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 0.89 + }, + { + "Endpoint": "ListDiagnosticsPresets", + "Status": "PASS", + "Message": "", + "Duration": 0.92 + }, + { + "Endpoint": "ListDomainHealth", + "Status": "PASS", + "Message": "", + "Duration": 0.82 + }, + { + "Endpoint": "ListExConnectorTemplates", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.02 + }, + { + "Endpoint": "ListExcludedLicenses", + "Status": "PASS", + "Message": "", + "Duration": 0.95 + }, + { + "Endpoint": "ListExtensionSync", + "Status": "PASS", + "Message": "", + "Duration": 1.65 + }, + { + "Endpoint": "ListFeatureFlags", + "Status": "PASS", + "Message": "", + "Duration": 0.78 + }, + { + "Endpoint": "ListGDAPInvite", + "Status": "PASS", + "Message": "", + "Duration": 1.38 + }, + { + "Endpoint": "ListGDAPRoles", + "Status": "PASS", + "Message": "", + "Duration": 8.8 + }, + { + "Endpoint": "ListGitHubReleaseNotes", + "Status": "ERROR", + "Message": "Could not connect (HTTP 500)", + "Duration": 0.87 + }, + { + "Endpoint": "ListGroupTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.67 + }, + { + "Endpoint": "ListIntuneReusableSettingTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.86 + }, + { + "Endpoint": "ListIntuneTemplates", + "Status": "PASS", + "Message": "", + "Duration": 2.77 + }, + { + "Endpoint": "ListReportBuilderTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.59 + }, + { + "Endpoint": "ListSafeLinksPolicyTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.77 + }, + { + "Endpoint": "ListSharepointSettings", + "Status": "PASS", + "Message": "", + "Duration": 1.85 + }, + { + "Endpoint": "ListSnoozedAlerts", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 0.56 + }, + { + "Endpoint": "ListSpamFilterTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.97 + }, + { + "Endpoint": "ListTenantAllowBlockListTemplates", + "Status": "PASS", + "Message": "", + "Duration": 0.55 + }, + { + "Endpoint": "ListTenantOnboarding", + "Status": "PASS", + "Message": "", + "Duration": 0.89 + }, + { + "Endpoint": "ListTestReports", + "Status": "PASS", + "Message": "", + "Duration": 0.59 + }, + { + "Endpoint": "ListTransportRulesTemplates", + "Status": "ERROR", + "Message": "Changed Shape ($.AttachmentExtensionMatchesWords : removed; $.SetAuditSeverity : removed; $.applyome : added; $.attachmenthasexecutablecontent : added; $.attachmentispasswordprotected : added ... and 27 more)", + "Duration": 0.97 + }, + { + "Endpoint": "ListUserPhoto", + "Status": "PASS", + "Message": "", + "Duration": 1.36 + }, + { + "Endpoint": "ListUserSettings", + "Status": "PASS", + "Message": "", + "Duration": 0.73 + }, + { + "Endpoint": "ListWebhookAlert", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 0.88 + }, + { + "Endpoint": "ListAPDevices", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 2.57 + }, + { + "Endpoint": "ListAdminPortalLicenses", + "Status": "PASS", + "Message": "", + "Duration": 5.12 + }, + { + "Endpoint": "ListAlertsQueue", + "Status": "PASS", + "Message": "", + "Duration": 1.41 + }, + { + "Endpoint": "ListAntiPhishingFilters", + "Status": "PASS", + "Message": "", + "Duration": 2.63 + }, + { + "Endpoint": "ListAppConsentRequests", + "Status": "PASS", + "Message": "", + "Duration": 3.65 + }, + { + "Endpoint": "ListAppProtectionPolicies", + "Status": "PASS", + "Message": "", + "Duration": 4.65 + }, + { + "Endpoint": "ListApps", + "Status": "PASS", + "Message": "", + "Duration": 2.15 + }, + { + "Endpoint": "ListAssignmentFilters", + "Status": "PASS", + "Message": "", + "Duration": 2.13 + }, + { + "Endpoint": "ListAuditLogSearches", + "Status": "PASS", + "Message": "", + "Duration": 17.49 + }, + { + "Endpoint": "ListAuditLogs", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.05 + }, + { + "Endpoint": "ListAutopilotconfig", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 0.73 + }, + { + "Endpoint": "ListAzureADConnectStatus", + "Status": "PASS", + "Message": "", + "Duration": 17.0 + }, + { + "Endpoint": "ListBPA", + "Status": "ERROR", + "Message": "Changed Shape ($.System.Management.Automation.OrderedHashtable : removed; $.System.Collections.Specialized.OrderedDictionary : added)", + "Duration": 2.27 + }, + { + "Endpoint": "ListBasicAuth", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 15.79 + }, + { + "Endpoint": "ListCompliancePolicies", + "Status": "PASS", + "Message": "", + "Duration": 2.05 + }, + { + "Endpoint": "ListConditionalAccessPolicies", + "Status": "PASS", + "Message": "", + "Duration": 7.81 + }, + { + "Endpoint": "ListConditionalAccessPolicyChanges", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.22 + }, + { + "Endpoint": "ListConnectionFilter", + "Status": "PASS", + "Message": "", + "Duration": 1.53 + }, + { + "Endpoint": "ListContacts", + "Status": "PASS", + "Message": "", + "Duration": 2.16 + }, + { + "Endpoint": "ListCustomDataMappings", + "Status": "PASS", + "Message": "", + "Duration": 1.73 + }, + { + "Endpoint": "ListCustomVariables", + "Status": "PASS", + "Message": "", + "Duration": 0.7 + }, + { + "Endpoint": "ListDefenderState", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 2.76 + }, + { + "Endpoint": "ListDeletedItems", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.83 + }, + { + "Endpoint": "ListDomainAnalyser", + "Status": "PASS", + "Message": "", + "Duration": 1.02 + }, + { + "Endpoint": "ListDomains", + "Status": "PASS", + "Message": "", + "Duration": 1.79 + }, + { + "Endpoint": "ListEquipment", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.5 + }, + { + "Endpoint": "ListExchangeConnectors", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.54 + }, + { + "Endpoint": "ListExtensionCacheData", + "Status": "PASS", + "Message": "", + "Duration": 10.02 + }, + { + "Endpoint": "ListGeneratedReports", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.65 + }, + { + "Endpoint": "ListGlobalAddressList", + "Status": "PASS", + "Message": "", + "Duration": 28.53 + }, + { + "Endpoint": "ListGroups", + "Status": "PASS", + "Message": "", + "Duration": 1.0 + }, + { + "Endpoint": "ListInactiveAccounts", + "Status": "PASS", + "Message": "", + "Duration": 0.99 + }, + { + "Endpoint": "ListIntunePolicy", + "Status": "PASS", + "Message": "", + "Duration": 5.41 + }, + { + "Endpoint": "ListIntuneReusableSettings", + "Status": "PASS", + "Message": "", + "Duration": 1.83 + }, + { + "Endpoint": "ListIntuneScript", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 3.69 + }, + { + "Endpoint": "ListJITAdmin", + "Status": "PASS", + "Message": "", + "Duration": 2.57 + }, + { + "Endpoint": "ListJITAdminTemplates", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.08 + }, + { + "Endpoint": "ListLicenses", + "Status": "PASS", + "Message": "", + "Duration": 6.17 + }, + { + "Endpoint": "ListMDEOnboarding", + "Status": "PASS", + "Message": "", + "Duration": 2.45 + }, + { + "Endpoint": "ListMFAUsers", + "Status": "PASS", + "Message": "", + "Duration": 14.73 + }, + { + "Endpoint": "ListMailQuarantine", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 4.72 + }, + { + "Endpoint": "ListMailboxCAS", + "Status": "PASS", + "Message": "", + "Duration": 7.1 + }, + { + "Endpoint": "ListMailboxForwarding", + "Status": "PASS", + "Message": "", + "Duration": 5.84 + }, + { + "Endpoint": "ListMailboxRestores", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.62 + }, + { + "Endpoint": "ListMailboxes", + "Status": "PASS", + "Message": "", + "Duration": 8.72 + }, + { + "Endpoint": "ListMalwareFilters", + "Status": "PASS", + "Message": "", + "Duration": 1.7 + }, + { + "Endpoint": "ListMessageTrace", + "Status": "PASS", + "Message": "", + "Duration": 1.76 + }, + { + "Endpoint": "ListNewUserDefaults", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 0.61 + }, + { + "Endpoint": "ListOAuthApps", + "Status": "PASS", + "Message": "", + "Duration": 6.47 + }, + { + "Endpoint": "ListPerUserMFA", + "Status": "PASS", + "Message": "", + "Duration": 11.67 + }, + { + "Endpoint": "ListQuarantinePolicy", + "Status": "PASS", + "Message": "", + "Duration": 1.78 + }, + { + "Endpoint": "ListRestrictedUsers", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.58 + }, + { + "Endpoint": "ListRoomLists", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 1.24 + }, + { + "Endpoint": "ListRooms", + "Status": "PASS", + "Message": "", + "Duration": 1.57 + }, + { + "Endpoint": "ListSafeAttachmentsFilters", + "Status": "PASS", + "Message": "", + "Duration": 1.58 + }, + { + "Endpoint": "ListSafeLinksPolicy", + "Status": "PASS", + "Message": "", + "Duration": 2.06 + }, + { + "Endpoint": "ListScheduledItems", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 0.95 + }, + { + "Endpoint": "ListServiceHealth", + "Status": "PASS", + "Message": "", + "Duration": 1.52 + }, + { + "Endpoint": "ListSharedMailboxAccountEnabled", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 107.21 + }, + { + "Endpoint": "ListSpamfilter", + "Status": "PASS", + "Message": "", + "Duration": 2.04 + }, + { + "Endpoint": "ListSharepointAdminUrl", + "Status": "PASS", + "Message": "", + "Duration": 1.68 + }, + { + "Endpoint": "ListSharepointQuota", + "Status": "PASS", + "Message": "", + "Duration": 8.97 + }, + { + "Endpoint": "ListSignIns", + "Status": "PASS", + "Message": "", + "Duration": 6.74 + }, + { + "Endpoint": "ListSites", + "Status": "PASS", + "Message": "", + "Duration": 26.3 + }, + { + "Endpoint": "ListStandards", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 0.57 + }, + { + "Endpoint": "ListStandardsCompare", + "Status": "PASS", + "Message": "", + "Duration": 0.72 + }, + { + "Endpoint": "ListTeams", + "Status": "PASS", + "Message": "", + "Duration": 1.45 + }, + { + "Endpoint": "ListTeamsActivity", + "Status": "PASS", + "Message": "", + "Duration": 2.33 + }, + { + "Endpoint": "ListTeamsLisLocation", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 3.82 + }, + { + "Endpoint": "ListTeamsVoice", + "Status": "WARN", + "Message": "No Results (allowed empty)", + "Duration": 3.85 + }, + { + "Endpoint": "ListTenantAlignment", + "Status": "PASS", + "Message": "", + "Duration": 2.63 + }, + { + "Endpoint": "ListTenantDetails", + "Status": "PASS", + "Message": "", + "Duration": 2.08 + }, + { + "Endpoint": "ListTenantDrift", + "Status": "PASS", + "Message": "", + "Duration": 7.44 + }, + { + "Endpoint": "ListTenantGroups", + "Status": "PASS", + "Message": "", + "Duration": 0.82 + }, + { + "Endpoint": "ListTenants", + "Status": "PASS", + "Message": "", + "Duration": 0.64 + }, + { + "Endpoint": "ListTests", + "Status": "PASS", + "Message": "", + "Duration": 12.89 + }, + { + "Endpoint": "ListTransportRules", + "Status": "PASS", + "Message": "", + "Duration": 1.77 + }, + { + "Endpoint": "ListUserCounts", + "Status": "PASS", + "Message": "", + "Duration": 1.85 + }, + { + "Endpoint": "ListUsers", + "Status": "PASS", + "Message": "", + "Duration": 40.01 + }, + { + "Endpoint": "ListmailboxPermissions", + "Status": "ERROR", + "Message": "Could not connect (HTTP 500)", + "Duration": 46.27 + } +] diff --git a/Tools/Invoke-CippShapeTests.ps1 b/Tools/Invoke-CippShapeTests.ps1 new file mode 100644 index 000000000000..7f3bde6ac01c --- /dev/null +++ b/Tools/Invoke-CippShapeTests.ps1 @@ -0,0 +1,593 @@ +<# +.SYNOPSIS + CIPP API Shape Tests - validates that all LIST/GET endpoints return expected response shapes. + +.DESCRIPTION + Calls every read-only API endpoint and compares the response structure (property names + basic types) + against saved baselines. Reports shape changes, connection errors, and empty responses. + + Authenticates via OAuth2 client_credentials flow against Azure AD, then calls the CIPP API + with a Bearer token. + +.PARAMETER CippApiUrl + Base URL of the CIPP-API instance (e.g., https://cipp-api.example.com) + +.PARAMETER CippClientId + Azure AD Application (client) ID of the CIPP API client. + +.PARAMETER CippClientSecret + Azure AD Application client secret. + +.PARAMETER CippTenantId + Azure AD tenant ID where the CIPP API client is registered. + +.PARAMETER CippApiScope + OAuth2 scope for the CIPP API. Typically api://{CIPP-SAM-App-Id}/.default + +.PARAMETER TenantFilter + Tenant domain to use for tenant-specific endpoints. + +.PARAMETER ShapesPath + Path to the Shapes directory. Defaults to ../Tests/Shapes relative to this script. + +.PARAMETER UpdateBaselines + When set, saves current API response shapes as new baselines instead of comparing. + +.PARAMETER CI + When set, emits GitHub Actions annotations and step summary. + +.EXAMPLE + ./Invoke-CippShapeTests.ps1 -CippApiUrl "https://my-cipp.com" -CippClientId "..." -CippClientSecret "..." -CippTenantId "..." -CippApiScope "api://.../.default" -UpdateBaselines +#> +[CmdletBinding()] +param( + [Parameter(Mandatory)][string]$CippApiUrl, + [Parameter(Mandatory)][string]$CippClientId, + [Parameter(Mandatory)][string]$CippClientSecret, + [Parameter(Mandatory)][string]$CippTenantId, + [Parameter(Mandatory)][string]$CippApiScope, + [string]$TenantFilter = '7ngn50.onmicrosoft.com', + [string]$ShapesPath, + [switch]$UpdateBaselines, + [switch]$CI +) + +$ErrorActionPreference = 'Stop' +$ProgressPreference = 'SilentlyContinue' + +if (-not $ShapesPath) { + $ShapesPath = Join-Path (Split-Path $PSScriptRoot -Parent) 'Tests' 'Shapes' +} + +$CippApiUrl = $CippApiUrl.TrimEnd('/') + +# ─── OAuth2 Token Acquisition ──────────────────────────────────────────────────── + +function Get-CippAccessToken { + $tokenUrl = "https://login.microsoftonline.com/$CippTenantId/oauth2/v2.0/token" + $body = @{ + client_id = $CippClientId + client_secret = $CippClientSecret + scope = $CippApiScope + grant_type = 'client_credentials' + } + $response = Invoke-RestMethod -Uri $tokenUrl -Method POST -Body $body -ContentType 'application/x-www-form-urlencoded' -ErrorAction Stop + return $response.access_token +} + +Write-Host 'Acquiring OAuth2 access token...' -ForegroundColor Cyan +try { + $script:AccessToken = Get-CippAccessToken + Write-Host 'Token acquired successfully.' -ForegroundColor Green +} catch { + Write-Host "Failed to acquire OAuth2 token: $($_.Exception.Message)" -ForegroundColor Red + exit 1 +} + +# ─── Endpoint Registry ────────────────────────────────────────────────────────── +# Each entry: Name, RequiresTenant, ExtraParams (optional hashtable), AllowEmpty (optional bool) +# +# Endpoints that need a specific resource ID (userId, siteId, etc.) are excluded entirely +# since we can't generically test them without knowing a valid ID. +# +# Skipped endpoints (need resource IDs or special POST bodies): +# ListAppsRepository - needs POST body with Search param +# ListContactPermissions - needs UserID param +# ListDBCache - needs type param for meaningful results +# ListOoO - needs userid param +# ListSiteMembers - needs SiteId param +# ListAuditLogTest - needs params +# ListDevices - skip per request +# ListGraphRequest - meta-endpoint, needs Endpoint param +# ListGraphBulkRequest - POST body with requests array +# ListDirectoryObjects - POST body with ids array +# ListExoRequest - POST body with Cmdlet param +# ListMailQuarantineMessage - needs Identity param +# ListScheduledItemDetails - needs RowKey param +# ListSafeLinksPolicyDetails - needs PolicyName param +# ListGroupSenderAuthentication - needs GroupId param +# ListUserConditionalAccessPolicies - needs userId param +# ListUserGroups - needs userId param +# ListUserMailboxDetails - needs userId param +# ListUserMailboxRules - needs userId param +# ListUserTrustedBlockedSenders - needs userId param +# ListUserDevices - needs userId param +# ListUserSigninLogs - needs userId param +# ListMailboxMobileDevices - needs userId param +# ListMailboxRules - needs userId param +# ListCalendarPermissions - needs userId param +# ListSharedMailboxStatistics - times out consistently (>120s, iterates all shared mailboxes) + +$EndpointRegistry = @( + # ── Global endpoints (no tenantFilter) ────────────────────────────────────── + @{ Name = 'GetCippAlerts'; RequiresTenant = $false } + @{ Name = 'GetVersion'; RequiresTenant = $false } + @{ Name = 'ListAppApprovalTemplates'; RequiresTenant = $false } + @{ Name = 'ListAppTemplates'; RequiresTenant = $false } + @{ Name = 'ListApplicationQueue'; RequiresTenant = $false; AllowEmpty = $true } + @{ Name = 'ListAssignmentFilterTemplates'; RequiresTenant = $false } + @{ Name = 'ListCAtemplates'; RequiresTenant = $false } + @{ Name = 'ListCommunityRepos'; RequiresTenant = $false } + @{ Name = 'ListConnectionFilterTemplates'; RequiresTenant = $false } + @{ Name = 'ListContactTemplates'; RequiresTenant = $false } + @{ Name = 'ListCustomRole'; RequiresTenant = $false; AllowEmpty = $true } + @{ Name = 'ListCustomScripts'; RequiresTenant = $false; AllowEmpty = $true } + @{ Name = 'ListDiagnosticsPresets'; RequiresTenant = $false; AllowEmpty = $true } + @{ Name = 'ListDomainHealth'; RequiresTenant = $false } + @{ Name = 'ListExConnectorTemplates'; RequiresTenant = $false; AllowEmpty = $true } + @{ Name = 'ListExcludedLicenses'; RequiresTenant = $false } + @{ Name = 'ListExtensionSync'; RequiresTenant = $false } + @{ Name = 'ListFeatureFlags'; RequiresTenant = $false } + @{ Name = 'ListGDAPInvite'; RequiresTenant = $false } + @{ Name = 'ListGDAPRoles'; RequiresTenant = $false } + @{ Name = 'ListGroupTemplates'; RequiresTenant = $false } + @{ Name = 'ListIntuneReusableSettingTemplates'; RequiresTenant = $false } + @{ Name = 'ListIntuneTemplates'; RequiresTenant = $false } + @{ Name = 'ListReportBuilderTemplates'; RequiresTenant = $false } + @{ Name = 'ListSafeLinksPolicyTemplates'; RequiresTenant = $false } + @{ Name = 'ListSharepointSettings'; RequiresTenant = $false } + @{ Name = 'ListSnoozedAlerts'; RequiresTenant = $false; AllowEmpty = $true } + @{ Name = 'ListSpamFilterTemplates'; RequiresTenant = $false } + @{ Name = 'ListTenantAllowBlockListTemplates'; RequiresTenant = $false } + @{ Name = 'ListTenantOnboarding'; RequiresTenant = $false } + @{ Name = 'ListTestReports'; RequiresTenant = $false; AllowEmpty = $true } + @{ Name = 'ListUserPhoto'; RequiresTenant = $false } + @{ Name = 'ListUserSettings'; RequiresTenant = $false } + @{ Name = 'ListWebhookAlert'; RequiresTenant = $false; AllowEmpty = $true } + + # ── Tenant-specific endpoints ─────────────────────────────────────────────── + @{ Name = 'ListAPDevices'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListAdminPortalLicenses'; RequiresTenant = $true } + @{ Name = 'ListAlertsQueue'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListAntiPhishingFilters'; RequiresTenant = $true } + @{ Name = 'ListAppConsentRequests'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListAppProtectionPolicies'; RequiresTenant = $true } + @{ Name = 'ListApps'; RequiresTenant = $true } + @{ Name = 'ListAssignmentFilters'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListAuditLogSearches'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListAuditLogs'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListAutopilotconfig'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListAzureADConnectStatus'; RequiresTenant = $true } + @{ Name = 'ListBasicAuth'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListCompliancePolicies'; RequiresTenant = $true } + @{ Name = 'ListConditionalAccessPolicies'; RequiresTenant = $true } + @{ Name = 'ListConditionalAccessPolicyChanges'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListConnectionFilter'; RequiresTenant = $true } + @{ Name = 'ListContacts'; RequiresTenant = $true } + @{ Name = 'ListCustomDataMappings'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListCustomVariables'; RequiresTenant = $true } + @{ Name = 'ListDefenderState'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListDeletedItems'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListDomainAnalyser'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListDomains'; RequiresTenant = $true } + @{ Name = 'ListEquipment'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListExchangeConnectors'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListExtensionCacheData'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListGeneratedReports'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListGlobalAddressList'; RequiresTenant = $true } + @{ Name = 'ListGroups'; RequiresTenant = $true } + @{ Name = 'ListInactiveAccounts'; RequiresTenant = $true } + @{ Name = 'ListIntunePolicy'; RequiresTenant = $true } + @{ Name = 'ListIntuneReusableSettings'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListIntuneScript'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListJITAdmin'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListJITAdminTemplates'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListLicenses'; RequiresTenant = $true } + @{ Name = 'ListMDEOnboarding'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListMFAUsers'; RequiresTenant = $true } + @{ Name = 'ListMailQuarantine'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListMailboxCAS'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListMailboxForwarding'; RequiresTenant = $true } + @{ Name = 'ListMailboxRestores'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListMailboxes'; RequiresTenant = $true } + @{ Name = 'ListMalwareFilters'; RequiresTenant = $true } + @{ Name = 'ListMessageTrace'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListNewUserDefaults'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListOAuthApps'; RequiresTenant = $true } + @{ Name = 'ListPerUserMFA'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListQuarantinePolicy'; RequiresTenant = $true } + @{ Name = 'ListRestrictedUsers'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListRoomLists'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListRooms'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListSafeAttachmentsFilters'; RequiresTenant = $true } + @{ Name = 'ListSafeLinksPolicy'; RequiresTenant = $true } + @{ Name = 'ListScheduledItems'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListServiceHealth'; RequiresTenant = $true } + @{ Name = 'ListSharedMailboxAccountEnabled'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListSpamfilter'; RequiresTenant = $true } + @{ Name = 'ListSharepointAdminUrl'; RequiresTenant = $true } + @{ Name = 'ListSharepointQuota'; RequiresTenant = $true } + @{ Name = 'ListSignIns'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListSites'; RequiresTenant = $true; ExtraParams = @{ Type = 'SharePointSiteUsage' } } + @{ Name = 'ListStandards'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListStandardsCompare'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListTeams'; RequiresTenant = $true; ExtraParams = @{ type = 'List' }; AllowEmpty = $true } + @{ Name = 'ListTeamsActivity'; RequiresTenant = $true; ExtraParams = @{ Type = 'TeamsUserActivityUser' }; AllowEmpty = $true } + @{ Name = 'ListTeamsLisLocation'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListTeamsVoice'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListTenantAlignment'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListTenantDetails'; RequiresTenant = $true } + @{ Name = 'ListTenantDrift'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListTenantGroups'; RequiresTenant = $true } + @{ Name = 'ListTenants'; RequiresTenant = $true } + @{ Name = 'ListTests'; RequiresTenant = $true; AllowEmpty = $true } + @{ Name = 'ListTransportRules'; RequiresTenant = $true } + @{ Name = 'ListUserCounts'; RequiresTenant = $true } + @{ Name = 'ListUsers'; RequiresTenant = $true } +) + +# ─── Helper Functions ──────────────────────────────────────────────────────────── + +function Invoke-CippApiCall { + param( + [string]$Endpoint, + [hashtable]$QueryParams = @{}, + [string]$Method = 'GET', + [hashtable]$Body + ) + + $headers = @{ + 'Authorization' = "Bearer $script:AccessToken" + 'Content-Type' = 'application/json' + } + + $uri = "$CippApiUrl/api/$Endpoint" + if ($QueryParams.Count -gt 0) { + $queryString = ($QueryParams.GetEnumerator() | ForEach-Object { "$($_.Key)=$([System.Uri]::EscapeDataString($_.Value))" }) -join '&' + $uri = "$uri`?$queryString" + } + + $params = @{ + Uri = $uri + Method = $Method + Headers = $headers + TimeoutSec = 120 + ErrorAction = 'Stop' + } + + if ($Body) { + $params['Body'] = ($Body | ConvertTo-Json -Depth 10) + } + + Invoke-RestMethod @params +} + +function Get-FirstResultObject { + param($Response) + + if ($null -eq $Response) { return $null } + + # If response has a Results property, use it + if ($Response.PSObject.Properties.Name -contains 'Results') { + $results = $Response.Results + if ($null -eq $results) { return $null } + if ($results -is [array]) { + if ($results.Count -eq 0) { return $null } + return $results[0] + } + return $results + } + + # If response itself is an array + if ($Response -is [array]) { + if ($Response.Count -eq 0) { return $null } + return $Response[0] + } + + # Single object response + return $Response +} + +function Get-ObjectShape { + param( + $Object, + [int]$MaxDepth = 3, + [int]$CurrentDepth = 0 + ) + + if ($null -eq $Object) { return 'null' } + if ($CurrentDepth -ge $MaxDepth) { return 'truncated' } + + # Primitive types + if ($Object -is [string]) { return 'string' } + if ($Object -is [bool]) { return 'bool' } + if ($Object -is [int] -or $Object -is [long] -or $Object -is [double] -or $Object -is [decimal] -or $Object -is [float]) { return 'number' } + + # Arrays + if ($Object -is [array] -or $Object -is [System.Collections.IList]) { + $arr = @($Object) + if ($arr.Count -eq 0) { + return [ordered]@{ '_type' = 'array'; '_element' = 'unknown' } + } + $elementShape = Get-ObjectShape -Object $arr[0] -MaxDepth $MaxDepth -CurrentDepth ($CurrentDepth + 1) + return [ordered]@{ '_type' = 'array'; '_element' = $elementShape } + } + + # Objects (PSCustomObject, hashtable) + if ($Object -is [System.Management.Automation.PSCustomObject] -or $Object -is [hashtable]) { + $shape = [ordered]@{} + $properties = if ($Object -is [hashtable]) { + $Object.Keys | Sort-Object + } else { + $Object.PSObject.Properties.Name | Sort-Object + } + foreach ($prop in $properties) { + $value = if ($Object -is [hashtable]) { $Object[$prop] } else { $Object.$prop } + $shape[$prop] = Get-ObjectShape -Object $value -MaxDepth $MaxDepth -CurrentDepth ($CurrentDepth + 1) + } + return $shape + } + + # Fallback + return $Object.GetType().Name.ToLower() +} + +function Compare-Shape { + param( + $Baseline, + $Current, + [string]$Path = '$' + ) + + $differences = [System.Collections.Generic.List[string]]::new() + + # Both are simple type strings + if ($Baseline -is [string] -and $Current -is [string]) { + if ($Baseline -ne $Current) { + $differences.Add("$Path : $Baseline -> $Current") + } + return $differences + } + + # Normalize: treat all dictionary types as equivalent (OrderedDictionary, OrderedHashtable, Hashtable) + $baselineIsDict = $Baseline -is [System.Collections.IDictionary] + $currentIsDict = $Current -is [System.Collections.IDictionary] + + # Type mismatch (one is string, other is dict, etc.) - but not dict-vs-dict + if (-not ($baselineIsDict -and $currentIsDict)) { + if ($Baseline.GetType().Name -ne $Current.GetType().Name) { + $differences.Add("$Path : type changed ($($Baseline.GetType().Name) -> $($Current.GetType().Name))") + return $differences + } + } + + # Both are dicts (object shapes or array markers) + if ($baselineIsDict -and $currentIsDict) { + # Check for array type marker + if ($Baseline.Contains('_type') -and $Baseline['_type'] -eq 'array') { + if (-not $Current.Contains('_type') -or $Current['_type'] -ne 'array') { + $differences.Add("$Path : was array, now is not") + return $differences + } + $subDiffs = Compare-Shape -Baseline $Baseline['_element'] -Current $Current['_element'] -Path "$Path[]" + if ($subDiffs) { $differences.AddRange(@($subDiffs)) } + return $differences + } + + # Object comparison - check for removed properties + foreach ($key in $Baseline.Keys) { + if ($key -eq '_type' -or $key -eq '_element') { continue } + if (-not $Current.Contains($key)) { + $differences.Add("$Path.$key : removed") + } else { + $subDiffs = Compare-Shape -Baseline $Baseline[$key] -Current $Current[$key] -Path "$Path.$key" + if ($subDiffs) { $differences.AddRange(@($subDiffs)) } + } + } + + # Check for added properties + foreach ($key in $Current.Keys) { + if ($key -eq '_type' -or $key -eq '_element') { continue } + if (-not $Baseline.Contains($key)) { + $differences.Add("$Path.$key : added") + } + } + } + + return $differences +} + +# ─── Main Execution ────────────────────────────────────────────────────────────── + +if (-not (Test-Path $ShapesPath)) { + New-Item -ItemType Directory -Path $ShapesPath -Force | Out-Null +} + +$results = [System.Collections.Generic.List[PSCustomObject]]::new() +$passCount = 0 +$failCount = 0 +$warnCount = 0 +$skipCount = 0 + +Write-Host "`n=== CIPP API Shape Tests ===" -ForegroundColor Cyan +Write-Host "API: $CippApiUrl" +Write-Host "Tenant: $TenantFilter" +Write-Host "Endpoints: $($EndpointRegistry.Count)" +Write-Host "Mode: $(if ($UpdateBaselines) { 'Update Baselines' } else { 'Compare' })`n" + +foreach ($ep in $EndpointRegistry) { + $endpointName = $ep.Name + $sw = [System.Diagnostics.Stopwatch]::StartNew() + + # Build query params: tenantFilter + any extra params for this endpoint + $queryParams = @{} + if ($ep.RequiresTenant) { + $queryParams['tenantFilter'] = $TenantFilter + } + if ($ep.ExtraParams) { + foreach ($kv in $ep.ExtraParams.GetEnumerator()) { + $queryParams[$kv.Key] = $kv.Value + } + } + + $status = 'PASS' + $message = '' + $isAllowedEmpty = [bool]$ep.AllowEmpty + + try { + $response = Invoke-CippApiCall -Endpoint $endpointName -QueryParams $queryParams + $firstObj = Get-FirstResultObject -Response $response + + if ($null -eq $firstObj) { + if ($isAllowedEmpty) { + $status = 'WARN' + $message = 'No Results (allowed empty)' + $warnCount++ + } else { + $status = 'ERROR' + $message = 'No Results' + $failCount++ + } + } else { + $shape = Get-ObjectShape -Object $firstObj + $shapeFile = Join-Path $ShapesPath "$endpointName.json" + + if ($UpdateBaselines) { + $shapeData = [ordered]@{ + '_metadata' = [ordered]@{ + 'endpoint' = $endpointName + 'generatedAt' = (Get-Date -Format 'o') + 'tenantFilter' = if ($ep.RequiresTenant) { $TenantFilter } else { $null } + 'requiresTenant' = $ep.RequiresTenant + } + 'shape' = $shape + } + $shapeData | ConvertTo-Json -Depth 20 | Set-Content -Path $shapeFile -Encoding UTF8 + $status = 'SAVED' + $message = "Baseline saved to $endpointName.json" + $passCount++ + } else { + if (-not (Test-Path $shapeFile)) { + $status = 'SKIP' + $message = 'No baseline file found (run with -UpdateBaselines first)' + $skipCount++ + } else { + $baseline = Get-Content $shapeFile -Raw | ConvertFrom-Json -AsHashtable + $baselineShape = $baseline['shape'] + + $diffs = Compare-Shape -Baseline $baselineShape -Current $shape + if ($diffs.Count -gt 0) { + $status = 'ERROR' + $diffSummary = ($diffs | Select-Object -First 5) -join '; ' + if ($diffs.Count -gt 5) { $diffSummary += " ... and $($diffs.Count - 5) more" } + $message = "Changed Shape ($diffSummary)" + $failCount++ + } else { + $passCount++ + } + } + } + } + } catch { + $status = 'ERROR' + $statusCode = $null + if ($_.Exception.Response) { + $statusCode = [int]$_.Exception.Response.StatusCode + } + if ($statusCode) { + $message = "Could not connect (HTTP $statusCode)" + } else { + $message = "Could not connect ($($_.Exception.Message))" + } + $failCount++ + } + + $sw.Stop() + $duration = $sw.Elapsed.TotalSeconds + + $result = [PSCustomObject]@{ + Endpoint = $endpointName + Status = $status + Message = $message + Duration = [math]::Round($duration, 2) + } + $results.Add($result) + + # Console output + $color = switch ($status) { + 'PASS' { 'Green' } + 'SAVED' { 'Green' } + 'WARN' { 'Yellow' } + 'SKIP' { 'DarkGray' } + default { 'Red' } + } + $statusTag = "[$status]".PadRight(8) + $line = "API /$endpointName - $statusTag" + if ($message) { $line += " $message" } + $line += " (${duration}s)" + Write-Host $line -ForegroundColor $color + + # GitHub Actions annotations + if ($CI) { + switch ($status) { + 'ERROR' { Write-Host "::error title=API Shape Test Failed::/$endpointName - $message" } + 'WARN' { Write-Host "::warning title=API Shape Test Warning::/$endpointName - $message" } + } + } +} + +# ─── Summary ───────────────────────────────────────────────────────────────────── + +Write-Host "`n=== Summary ===" -ForegroundColor Cyan +Write-Host "PASS: $passCount | FAIL: $failCount | WARN: $warnCount | SKIP: $skipCount" +Write-Host "Total: $($results.Count) endpoints tested" + +# Export results as JSON +$resultsFile = Join-Path $ShapesPath 'test-results.json' +$results | ConvertTo-Json -Depth 5 | Set-Content -Path $resultsFile -Encoding UTF8 + +# GitHub Actions step summary +if ($CI -and $env:GITHUB_STEP_SUMMARY) { + $summary = @" +## CIPP Shape Test Results + +| Status | Count | +|--------|-------| +| PASS | $passCount | +| FAIL | $failCount | +| WARN | $warnCount | +| SKIP | $skipCount | + +### Failed Endpoints + +"@ + $failed = $results | Where-Object { $_.Status -eq 'ERROR' } + if ($failed) { + foreach ($f in $failed) { + $summary += "- **/$($f.Endpoint)** - $($f.Message)`n" + } + } else { + $summary += "_None_`n" + } + + $summary | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append -Encoding UTF8 +} + +# Exit code +if ($failCount -gt 0) { + Write-Host "`nShape tests FAILED with $failCount error(s)." -ForegroundColor Red + exit 1 +} else { + Write-Host "`nShape tests PASSED." -ForegroundColor Green + exit 0 +} diff --git a/Tools/Start-CippDevEmulators.ps1 b/Tools/Start-CippDevEmulators.ps1 index bde7511caac1..ecf6855fe1e5 100644 --- a/Tools/Start-CippDevEmulators.ps1 +++ b/Tools/Start-CippDevEmulators.ps1 @@ -1,12 +1,52 @@ -Write-Host 'Starting CIPP Dev Emulators' +Write-Host 'Starting CIPP Dev Emulators' -ForegroundColor Cyan + +# Verify Windows Terminal is available +Get-Command wt -ErrorAction Stop | Out-Null + +# Stop any existing node processes Get-Process node -ErrorAction SilentlyContinue | Stop-Process -ErrorAction SilentlyContinue + +# Get paths $Path = (Get-Item $PSScriptRoot).Parent.Parent.FullName -$Process = Read-Host -Prompt 'Start Process Function (y/N)?' +# Run installation script to ensure dependencies are installed and updated before starting emulators +pwsh -File (Join-Path $PSScriptRoot 'Start-CippDevInstallation.ps1') +$ApiPath = Join-Path -Path $Path -ChildPath 'CIPP-API' +$FrontendPath = Join-Path -Path $Path -ChildPath 'CIPP' + +Write-Host 'Starting emulators...' -ForegroundColor Cyan -if ($Process -eq 'y') { - wt --title CIPP`; new-tab --title 'Azurite' -d $Path pwsh -c azurite`; new-tab --title 'FunctionApp' -d $Path\CIPP-API pwsh -c func start`; new-tab --title 'CIPP Frontend' -d $Path\CIPP pwsh -c npm run start`; new-tab --title 'SWA' -d $Path\CIPP pwsh -c npm run start-swa`; new-tab --title 'CIPP-API-Processor' -d $Path\CIPP-API-Processor pwsh -c func start --port 7072 -} else { - wt --title CIPP`; new-tab --title 'Azurite' -d $Path pwsh -c azurite`; new-tab --title 'FunctionApp' -d $Path\CIPP-API pwsh -c func start`; new-tab --title 'CIPP Frontend' -d $Path\CIPP pwsh -c npm run start`; new-tab --title 'SWA' -d $Path\CIPP pwsh -c npm run start-swa +# Build commands with error handling +$azuriteCommand = 'try { azurite } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' +$apiCommand = @' +try { + # Use a stable local identity so timer node selection treats this as the catch-all host. + $env:WEBSITE_SITE_NAME = "cipp" + $env:CIPP_PROCESSOR = "false" + $env:AzureFunctionsWebHost__hostid = "cipp-single" + + # Ensure prior offload simulation env overrides do not disable triggers in this shell. + Remove-Item -Path "Env:AzureWebJobs.CIPPTimer.Disabled" -ErrorAction SilentlyContinue + Remove-Item -Path "Env:AzureWebJobs.CIPPActivityFunction.Disabled" -ErrorAction SilentlyContinue + Remove-Item -Path "Env:AzureWebJobs.CIPPOrchestrator.Disabled" -ErrorAction SilentlyContinue + Remove-Item -Path "Env:AzureWebJobs.CIPPQueueTrigger.Disabled" -ErrorAction SilentlyContinue + Remove-Item -Path "Env:AzureWebJobs.CIPPHttpTrigger.Disabled" -ErrorAction SilentlyContinue + + func start +} catch { + Write-Error $_.Exception.Message +} finally { + Read-Host "Press Enter to exit" } +'@ +$frontendCommand = 'try { npm run dev } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' +$swaCommand = 'try { npm run start-swa } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' + +# Encode commands to avoid parsing issues with multi-line strings +$azuriteEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($azuriteCommand)) +$apiEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($apiCommand)) +$frontendEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($frontendCommand)) +$swaEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($swaCommand)) +# Start Windows Terminal with all tabs +wt --title CIPP`; new-tab --title 'Azurite' -d $Path pwsh -EncodedCommand $azuriteEncoded`; new-tab --title 'FunctionApp' -d $ApiPath pwsh -EncodedCommand $apiEncoded`; new-tab --title 'CIPP Frontend' -d $FrontendPath pwsh -EncodedCommand $frontendEncoded`; new-tab --title 'SWA' -d $FrontendPath pwsh -EncodedCommand $swaEncoded diff --git a/Tools/Start-CippDevEmulatorsWithKitty.ps1 b/Tools/Start-CippDevEmulatorsWithKitty.ps1 new file mode 100644 index 000000000000..7013c054f375 --- /dev/null +++ b/Tools/Start-CippDevEmulatorsWithKitty.ps1 @@ -0,0 +1,27 @@ +Get-Command kitty -ErrorAction Stop | Out-Null +Get-Process node -ErrorAction SilentlyContinue | Stop-Process -ErrorAction SilentlyContinue +$Path = (Get-Item $PSScriptRoot).Parent.Parent.FullName + +pwsh -file (Join-Path $PSScriptRoot 'Start-CippDevInstallation.ps1') + +Write-Host 'Starting CIPP Dev Emulators' + +if (Test-Path (Join-Path $Path 'CIPP-API-Processor')) { + $Process = Read-Host -Prompt 'Start Process Function (y/N)?' +} + +if ($Process -eq 'y') { + kitty --detach --title 'CIPP' -o allow_remote_control=yes -- pwsh -c " + kitty @new-window --new-tab --tab-title `"Azurite`" --cwd $Path -- azurite ; + kitty @new-window --new-tab --tab-title `"FunctionApp`" --cwd (Join-Path $Path `"CIPP-API`") -- func start; + kitty @new-window --new-tab --tab-title `"CIPP Frontend`" --cwd (Join-Path $Path `"CIPP`") -- yarn run dev ; + kitty @new-window --new-tab --tab-title `"SWA`" --cwd (Join-Path $Path `"CIPP`") -- yarn run start-swa; + kitty @new-window --new-tab --tab-title `"CIPP-API-Processor`" --cwd (Join-Path $Path `"CIPP-API-Processor`") -- func start --port 7072" + +} else { + kitty --detach --title 'CIPP' -o allow_remote_control=yes -- pwsh -c " + kitty @new-window --new-tab --tab-title `"Azurite`" --cwd $Path -- azurite ; + kitty @new-window --new-tab --tab-title `"FunctionApp`" --cwd (Join-Path $Path `"CIPP-API`") -- func start; + kitty @new-window --new-tab --tab-title `"CIPP Frontend`" --cwd (Join-Path $Path `"CIPP`") -- yarn run dev ; + kitty @new-window --new-tab --tab-title `"SWA`" --cwd (Join-Path $Path `"CIPP`") -- yarn run start-swa" +} diff --git a/Tools/Start-CippDevInstallation.ps1 b/Tools/Start-CippDevInstallation.ps1 new file mode 100644 index 000000000000..0cc8c07f8633 --- /dev/null +++ b/Tools/Start-CippDevInstallation.ps1 @@ -0,0 +1,33 @@ +$Path = (Get-Item $PSScriptRoot).Parent.Parent.FullName + +if (-not((Get-Command npm -ErrorAction SilentlyContinue) -or (Get-Command yarn -ErrorAction SilentlyContinue))) { + throw 'npm or yarn is required to install the CIPP development environment.' +} + +if (-not(Get-Command yarn -ErrorAction SilentlyContinue)) { + Write-Host 'Installing Yarn' + npm install --global yarn +} + +if (-not(Get-Command azurite -ErrorAction SilentlyContinue)) { + Write-Host 'Installing Azurite' + yarn global add 'azurite' +} + +if (-not(Get-Command swa -ErrorAction SilentlyContinue)) { + Write-Host 'Installing @azure/static-web-apps-cli' + yarn global add '@azure/static-web-apps-cli' +} + +if (-not(Get-Command func -ErrorAction SilentlyContinue)) { + Write-Host 'Installing Azure Functions Core Tools' + yarn global add 'azure-functions-core-tools@4' +} + +if (-not(yarn global list | Select-String -Pattern 'next')) { + Write-Host 'Installing Next.js' + yarn global add 'next' +} + +Write-Host 'Running yarn install for CIPP frontend...' -ForegroundColor Cyan +yarn install --cwd (Join-Path $Path 'CIPP') --network-timeout 500000 diff --git a/Tools/Start-CippOffloadSimulation.ps1 b/Tools/Start-CippOffloadSimulation.ps1 new file mode 100644 index 000000000000..594f271ad305 --- /dev/null +++ b/Tools/Start-CippOffloadSimulation.ps1 @@ -0,0 +1,83 @@ +[CmdletBinding()] +param( + [int]$HttpPort = 7071, + [int]$ProcessorPort = 7072, + [switch]$NoFrontend +) + +Write-Host 'Starting CIPP local offload simulation' -ForegroundColor Cyan + +# Verify Windows Terminal is available +Get-Command wt -ErrorAction Stop | Out-Null + +# Stop any existing node processes +Get-Process node -ErrorAction SilentlyContinue | Stop-Process -ErrorAction SilentlyContinue + +# Run installation script to ensure dependencies are installed and updated before starting emulators +pwsh -File (Join-Path $PSScriptRoot 'Start-CippDevInstallation.ps1') +Write-Host 'Starting emulators...' -ForegroundColor Cyan + +$repoRoot = (Get-Item $PSScriptRoot).Parent.Parent.FullName +$apiPath = Join-Path -Path $repoRoot -ChildPath 'CIPP-API' +$frontendPath = Join-Path -Path $repoRoot -ChildPath 'CIPP' + +if (-not (Test-Path $apiPath)) { + throw "CIPP-API path not found: $apiPath" +} + +$azuriteCommand = 'try { azurite } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' + +$httpHostCommand = @' +try { + $env:WEBSITE_SITE_NAME = "cipp-http" + $env:CIPP_PROCESSOR = "false" + $env:AzureFunctionsWebHost__hostid = "cipp-http" + + Set-Item -Path "Env:AzureWebJobs.CIPPTimer.Disabled" -Value "1" + Set-Item -Path "Env:AzureWebJobs.CIPPActivityFunction.Disabled" -Value "1" + Set-Item -Path "Env:AzureWebJobs.CIPPOrchestrator.Disabled" -Value "1" + Set-Item -Path "Env:AzureWebJobs.CIPPQueueTrigger.Disabled" -Value "1" + + func start --port {HTTP_PORT} +} catch { + Write-Error $_.Exception.Message +} finally { + Read-Host "Press Enter to exit" +} +'@ + +$processorHostCommand = @' +try { + $env:WEBSITE_SITE_NAME = "cipp-proc" + $env:CIPP_PROCESSOR = "true" + $env:AzureFunctionsWebHost__hostid = "cipp-proc" + + Set-Item -Path "Env:AzureWebJobs.CIPPHttpTrigger.Disabled" -Value "1" + + func start --port {PROCESSOR_PORT} +} catch { + Write-Error $_.Exception.Message +} finally { + Read-Host "Press Enter to exit" +} +'@ + +$httpHostCommand = $httpHostCommand.Replace('{HTTP_PORT}', $HttpPort.ToString()) +$processorHostCommand = $processorHostCommand.Replace('{PROCESSOR_PORT}', $ProcessorPort.ToString()) + +$frontendCommand = 'try { npm run dev } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' +$swaCommand = 'try { npm run start-swa } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' + +$azuriteEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($azuriteCommand)) +$httpHostEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($httpHostCommand)) +$processorHostEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($processorHostCommand)) +$frontendEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($frontendCommand)) +$swaEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($swaCommand)) + +if ($NoFrontend) { + wt --title CIPP-Offload-Sim`; new-tab --title 'Azurite' -d $repoRoot pwsh -EncodedCommand $azuriteEncoded`; new-tab --title 'FunctionApp-HTTP' -d $apiPath pwsh -EncodedCommand $httpHostEncoded`; new-tab --title 'FunctionApp-Processor' -d $apiPath pwsh -EncodedCommand $processorHostEncoded +} else { + wt --title CIPP-Offload-Sim`; new-tab --title 'Azurite' -d $repoRoot pwsh -EncodedCommand $azuriteEncoded`; new-tab --title 'FunctionApp-HTTP' -d $apiPath pwsh -EncodedCommand $httpHostEncoded`; new-tab --title 'FunctionApp-Processor' -d $apiPath pwsh -EncodedCommand $processorHostEncoded`; new-tab --title 'CIPP Frontend' -d $frontendPath pwsh -EncodedCommand $frontendEncoded`; new-tab --title 'SWA' -d $frontendPath pwsh -EncodedCommand $swaEncoded +} + +Write-Host "Started offload simulation tabs (HTTP:$HttpPort, Processor:$ProcessorPort)." -ForegroundColor Green diff --git a/Tools/Update intune Templates.ps1 b/Tools/Update intune Templates.ps1 new file mode 100644 index 000000000000..cef6f14963a8 --- /dev/null +++ b/Tools/Update intune Templates.ps1 @@ -0,0 +1,31 @@ +Import-Module Microsoft.Graph +Connect-MgGraph -Scopes 'DeviceManagementConfiguration.Read.All', 'DeviceManagementServiceConfig.Read.All' +$i = 0 +$settingsUrl = "https://graph.microsoft.com/beta/deviceManagement/configurationSettings?`$top=999&`$skip=$i" +$Settings = do { + $settingsResponse = Invoke-MgGraphRequest -Method Get -Uri $settingsUrl + Write-Host "Getting settings from $i to $($i + 999): $settingsUrl" + if ($null -ne $settingsResponse.value) { + foreach ($setting in $settingsResponse.value) { + + $options = if ($setting.options -ne $null) { + $setting.options | ForEach-Object { + [pscustomobject]@{ + id = $_.itemId + displayName = $_.displayName + description = $_.description + } + } + } + + [pscustomobject]@{ + id = $setting.id + displayName = $setting.displayName + options = $options + } + } + } + $i += 999 + $settingsUrl = "https://graph.microsoft.com/beta/deviceManagement/configurationSettings?`$top=999&`$skip=$i" + Write-Host "last setting is $($settingsResponse.value[-1].id)" +} while ($null -ne $settingsResponse.value.id) diff --git a/context7.json b/context7.json new file mode 100644 index 000000000000..3a0b7c321b31 --- /dev/null +++ b/context7.json @@ -0,0 +1,11 @@ +{ + "$schema": "https://context7.com/schema/context7.json", + "projectTitle": "CIPP - Cyberdrain Improved Partner Portal", + "description": "The CyberDrain Improved Partner Portal is a portal to help manage administration for Microsoft Partners.", + "folders": [], + "excludeFolders": [], + "excludeFiles": [], + "rules": [], + "previousVersions": [], + "branch": "docs" +} diff --git a/cspell.json b/cspell.json new file mode 100644 index 000000000000..00a5c1785b77 --- /dev/null +++ b/cspell.json @@ -0,0 +1,83 @@ +{ + "version": "0.2", + "ignorePaths": [], + "dictionaryDefinitions": [], + "dictionaries": [], + "words": [ + "ADMS", + "AITM", + "AOSP", + "Augmentt", + "Automapping", + "Autotask", + "Choco", + "cipp", + "CIPP", + "CIPP-API", + "CISA", + "Datto", + "DMARC", + "EIDSCA", + "Entra", + "ESET", + "GDAP", + "HIBP", + "Hudu", + "ImmyBot", + "Intune", + "LCID", + "OBEE", + "passwordless", + "Passwordless", + "pwpush", + "Reshare", + "Rewst", + "Sherweb", + "superadmin", + "Syncro", + "TERRL", + "unconfigured", + "Yubikey" + ], + "ignoreWords": [ + "Addins", + "Disablex", + "Displayname", + "CIPPAPI", + "PSTN", + "TNEF", + "Equivio", + "defaultvalues", + "Excludedfile", + "exo_individualsharing", + "exo_mailboxaudit", + "exo_mailtipsenabled", + "exo_outlookaddins", + "exo_storageproviderrestricted", + "donotchange", + "locationcipp", + "mdo_antiphishingpolicies", + "mdo_autoforwardingmode", + "mdo_blockmailforward", + "mdo_commonattachmentsfilter", + "mdo_highconfidencephishaction", + "mdo_highconfidencespamaction", + "mdo_phishthresholdlevel", + "mdo_phisspamacation", + "mdo_safeattachmentpolicy", + "mdo_safeattachments", + "mdo_safedocuments", + "mdo_safelinksforOfficeApps", + "mdo_safelinksforemail", + "mdo_spam_notifications_only_for_admins", + "mdo_zapmalware", + "mdo_zapphish", + "mdo_zapspam", + "microsoftonline", + "mip_search_auditlog", + "winmail", + "onmicrosoft.com", + "MOERA" + ], + "import": [] +} diff --git a/deployment/AzureDeploymentTemplate.json b/deployment/AzureDeploymentTemplate.json index ff7e9a97bada..54cacf9f1064 100644 --- a/deployment/AzureDeploymentTemplate.json +++ b/deployment/AzureDeploymentTemplate.json @@ -22,13 +22,6 @@ "metadata": { "description": "Your Github Repository token (see https://docs.microsoft.com/en-us/azure/static-web-apps/publish-azure-resource-manager?tabs=azure-cli#create-a-github-personal-access-token" } - }, - "GithubAPIRepository": { - "defaultValue": "https://github.com/KelvinTegelaar/CIPP-API", - "type": "string", - "metadata": { - "description": "URL to your Github backend fork." - } } }, "variables": { @@ -57,7 +50,7 @@ "objectId": "[reference(resourceId('Microsoft.Web/sites', variables('funcAppName')),'2019-08-01', 'full').identity.principalId]", "permissions": { "keys": [], - "secrets": ["all"], + "secrets": [ "all" ], "certificates": [] } } @@ -116,7 +109,7 @@ ] } ], - "dependsOn": ["[resourceId('Microsoft.Web/sites', variables('funcAppName'))]"] + "dependsOn": [ "[resourceId('Microsoft.Web/sites', variables('funcAppName'))]" ] }, { "apiVersion": "2015-08-01", @@ -135,7 +128,7 @@ "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', variables('serverFarmName'))]", "siteConfig": { "Use32BitWorkerProcess": false, - "powerShellVersion": "7.2", + "powerShellVersion": "7.4", "appSettings": [ { "name": "AzureWebJobsStorage", @@ -154,20 +147,8 @@ "value": "~4" }, { - "name": "ApplicationID", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/ApplicationId)')]" - }, - { - "name": "ApplicationSecret", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/ApplicationSecret)')]" - }, - { - "name": "RefreshToken", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/RefreshToken)')]" - }, - { - "name": "TenantID", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/tenantid)')]" + "name": "WEBSITE_RUN_FROM_PACKAGE", + "value": "1" }, { "name": "FUNCTIONS_WORKER_RUNTIME", @@ -175,24 +156,19 @@ } ] } - }, - "resources": [ - { - "apiVersion": "2015-08-01", - "name": "web", - "type": "sourcecontrols", - "dependsOn": ["[resourceId('Microsoft.Web/sites/', variables('funcAppName'))]"], - "properties": { - "RepoUrl": "[parameters('GithubAPIRepository')]", - "repositoryToken": "[parameters('GithubToken')]", - "token": "[parameters('GithubToken')]", - - "branch": "master", - "publishRunbook": true, - "IsManualIntegration": true - } - } - ] + } + }, + { + "name": "[concat(variables('funcAppName'), '/ZipDeploy')]", + "type": "Microsoft.Web/sites/extensions", + "apiVersion": "2021-02-01", + "location": "[resourceGroup().location]", + "dependsOn": [ + "[resourceId('Microsoft.Web/sites', variables('funcAppName'))]" + ], + "properties": { + "packageUri": "https://cippreleases.blob.core.windows.net/cipp-api/latest.zip" + } }, { "type": "Microsoft.Storage/storageAccounts", @@ -200,7 +176,7 @@ "name": "[variables('funcStorageName')]", "location": "[resourceGroup().location]", "tags": { - "displayName": "funStorageName" + "displayName": "funcStorageName" }, "sku": { "name": "Standard_LRS" @@ -244,7 +220,7 @@ "buildProperties": { "appLocation": "/", "apiLocation": "", - "appArtifactLocation": "" + "outputLocation": "/out" } }, "sku": { @@ -265,6 +241,19 @@ "functionAppResourceId": "[resourceId('Microsoft.Web/sites/', variables('funcAppName'))]", "functionAppRegion": "[resourceGroup().location]" } + }, + { + "type": "Microsoft.Authorization/roleAssignments", + "apiVersion": "2022-04-01", + "name": "[guid(resourceGroup().id, variables('funcAppName'), 'Contributor')]", + "dependsOn": [ + "[resourceId('Microsoft.Web/sites', variables('funcAppName'))]" + ], + "properties": { + "roleDefinitionId": "[concat(subscription().id, '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c')]", + "principalId": "[reference(resourceId('Microsoft.Web/sites', variables('funcAppName')),'2019-08-01', 'full').identity.principalId]", + "scope": "[resourceGroup().id]" + } } ], "outputs": {} diff --git a/deployment/AzureDeploymentTemplate_regionoptions.json b/deployment/AzureDeploymentTemplate_regionoptions.json index bc2f24089d4d..71e0cef97aca 100644 --- a/deployment/AzureDeploymentTemplate_regionoptions.json +++ b/deployment/AzureDeploymentTemplate_regionoptions.json @@ -6,7 +6,7 @@ "defaultValue": "CIPP", "type": "string", "metadata": { - "description": "Name use as base-template to named the resources deployed in Azure." + "description": "Name used as base-template to name the resources deployed in Azure." } }, "GithubRepository": { @@ -20,14 +20,7 @@ "defaultValue": "GeneratedPassword", "type": "string", "metadata": { - "description": "Your Github Repository token (see https://docs.microsoft.com/en-us/azure/static-web-apps/publish-azure-resource-manager?tabs=azure-cli#create-a-github-personal-access-token" - } - }, - "GithubAPIRepository": { - "defaultValue": "https://github.com/KelvinTegelaar/CIPP-API", - "type": "string", - "metadata": { - "description": "URL to your Github backend fork." + "description": "Your Github Repository token (see https://docs.microsoft.com/en-us/azure/static-web-apps/publish-azure-resource-manager?tabs=azure-cli#create-a-github-personal-access-token)" } } }, @@ -57,7 +50,7 @@ "objectId": "[reference(resourceId('Microsoft.Web/sites', variables('funcAppName')),'2019-08-01', 'full').identity.principalId]", "permissions": { "keys": [], - "secrets": ["all"], + "secrets": [ "all" ], "certificates": [] } } @@ -116,7 +109,7 @@ ] } ], - "dependsOn": ["[resourceId('Microsoft.Web/sites', variables('funcAppName'))]"] + "dependsOn": [ "[resourceId('Microsoft.Web/sites', variables('funcAppName'))]" ] }, { "apiVersion": "2015-08-01", @@ -135,7 +128,7 @@ "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', variables('serverFarmName'))]", "siteConfig": { "Use32BitWorkerProcess": false, - "powerShellVersion": "7.2", + "powerShellVersion": "7.4", "appSettings": [ { "name": "AzureWebJobsStorage", @@ -154,20 +147,8 @@ "value": "~4" }, { - "name": "ApplicationID", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/ApplicationId)')]" - }, - { - "name": "ApplicationSecret", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/ApplicationSecret)')]" - }, - { - "name": "RefreshToken", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/RefreshToken)')]" - }, - { - "name": "TenantID", - "value": "[concat('@Microsoft.KeyVault(SecretUri=https://',variables('uniqueResourceNameBase'), '.vault.azure.net/secrets/tenantid)')]" + "name": "WEBSITE_RUN_FROM_PACKAGE", + "value": "1" }, { "name": "FUNCTIONS_WORKER_RUNTIME", @@ -175,21 +156,19 @@ } ] } - }, - "resources": [ - { - "apiVersion": "2015-08-01", - "name": "web", - "type": "sourcecontrols", - "dependsOn": ["[resourceId('Microsoft.Web/sites/', variables('funcAppName'))]"], - "properties": { - "RepoUrl": "[parameters('GithubAPIRepository')]", - "branch": "master", - "publishRunbook": true, - "IsManualIntegration": true - } - } - ] + } + }, + { + "name": "[concat(variables('funcAppName'), '/ZipDeploy')]", + "type": "Microsoft.Web/sites/extensions", + "apiVersion": "2021-02-01", + "location": "[resourceGroup().location]", + "dependsOn": [ + "[resourceId('Microsoft.Web/sites', variables('funcAppName'))]" + ], + "properties": { + "packageUri": "https://cippreleases.blob.core.windows.net/cipp-api/latest.zip" + } }, { "type": "Microsoft.Storage/storageAccounts", @@ -197,7 +176,7 @@ "name": "[variables('funcStorageName')]", "location": "[resourceGroup().location]", "tags": { - "displayName": "funStorageName" + "displayName": "funcStorageName" }, "sku": { "name": "Standard_LRS" @@ -241,7 +220,7 @@ "buildProperties": { "appLocation": "/", "apiLocation": "", - "appArtifactLocation": "" + "outputLocation": "/out" } }, "sku": { @@ -262,6 +241,19 @@ "functionAppResourceId": "[resourceId('Microsoft.Web/sites/', variables('funcAppName'))]", "functionAppRegion": "[resourceGroup().location]" } + }, + { + "type": "Microsoft.Authorization/roleAssignments", + "apiVersion": "2022-04-01", + "name": "[guid(resourceGroup().id, variables('funcAppName'), 'Contributor')]", + "dependsOn": [ + "[resourceId('Microsoft.Web/sites', variables('funcAppName'))]" + ], + "properties": { + "roleDefinitionId": "[concat(subscription().id, '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c')]", + "principalId": "[reference(resourceId('Microsoft.Web/sites', variables('funcAppName')),'2019-08-01', 'full').identity.principalId]", + "scope": "[resourceGroup().id]" + } } ], "outputs": {} diff --git a/deployment/DevAzureDeploymentTemplate.json b/deployment/DevAzureDeploymentTemplate.json index 8beefadd450c..5e6077beab41 100644 --- a/deployment/DevAzureDeploymentTemplate.json +++ b/deployment/DevAzureDeploymentTemplate.json @@ -6,7 +6,7 @@ "defaultValue": "CIPPDev", "type": "string", "metadata": { - "description": "Name use as base-template to named the resources deployed in Azure." + "description": "Name used as base-template to name the resources deployed in Azure." } }, "TenantID": { @@ -48,7 +48,7 @@ "defaultValue": "GeneratedPassword", "type": "string", "metadata": { - "description": "Your Github Repository token (see https://docs.microsoft.com/en-us/azure/static-web-apps/publish-azure-resource-manager?tabs=azure-cli#create-a-github-personal-access-token" + "description": "Your Github Repository token (see https://docs.microsoft.com/en-us/azure/static-web-apps/publish-azure-resource-manager?tabs=azure-cli#create-a-github-personal-access-token)" } }, "GithubAPIRepository": { @@ -250,7 +250,7 @@ "name": "[variables('funcStorageName')]", "location": "[resourceGroup().location]", "tags": { - "displayName": "funStorageName" + "displayName": "funcStorageName" }, "sku": { "name": "Standard_LRS" diff --git a/deployment/DevAzureDeploymentTemplate_regionoptions.json b/deployment/DevAzureDeploymentTemplate_regionoptions.json index 0fb300af06c9..f17135c01057 100644 --- a/deployment/DevAzureDeploymentTemplate_regionoptions.json +++ b/deployment/DevAzureDeploymentTemplate_regionoptions.json @@ -6,7 +6,7 @@ "defaultValue": "CIPP", "type": "string", "metadata": { - "description": "Name use as base-template to named the resources deployed in Azure." + "description": "Name used as base-template to name the resources deployed in Azure." } }, "TenantID": { @@ -48,7 +48,7 @@ "defaultValue": "GeneratedPassword", "type": "string", "metadata": { - "description": "Your Github Repository token (see https://docs.microsoft.com/en-us/azure/static-web-apps/publish-azure-resource-manager?tabs=azure-cli#create-a-github-personal-access-token" + "description": "Your Github Repository token (see https://docs.microsoft.com/en-us/azure/static-web-apps/publish-azure-resource-manager?tabs=azure-cli#create-a-github-personal-access-token)" } }, "GithubAPIRepository": { @@ -294,7 +294,9 @@ "buildProperties": { "appLocation": "/", "apiLocation": "", + "appArtifactLocation": "" + "outputLocation": "/out" } }, "sku": { diff --git a/eslint.config.mjs b/eslint.config.mjs new file mode 100644 index 000000000000..fd4045f93c13 --- /dev/null +++ b/eslint.config.mjs @@ -0,0 +1,44 @@ +import { defineConfig, globalIgnores } from 'eslint/config' +import eslintConfigNext from 'eslint-config-next' +import eslintConfigPrettier from 'eslint-config-prettier' + +/** @type {import('eslint').Linter.Config[]} */ +const eslintConfig = defineConfig([ + ...eslintConfigNext, + eslintConfigPrettier, + { + rules: { + 'no-unused-vars': 'off', + // this rule is annoying on strings with quotes in them + 'react/no-unescaped-entities': 'off', + 'jsx-a11y/alt-text': 'off', + '@next/next/no-img-element': 'off', + '@next/next/no-page-custom-font': 'off', + 'react/display-name': 'off', + 'react/no-children-prop': 'off', + 'react/jsx-max-props-per-line': [ + 0, + { + maximum: 10, + }, + ], + }, + }, + { + // csf meta is an anonymous default export by convention + files: ['tests/**/*.stories.jsx', '.storybook/**'], + rules: { + 'import/no-anonymous-default-export': 'off', + }, + }, + // Override default ignores of eslint-config-next. + globalIgnores([ + // Default ignores of eslint-config-next: + '.next/**', + 'out/**', + 'build/**', + 'next-env.d.ts', + ]), +]) + +export default eslintConfig diff --git a/generate-placeholders.js b/generate-placeholders.js new file mode 100644 index 000000000000..304e6402e4ed --- /dev/null +++ b/generate-placeholders.js @@ -0,0 +1,181 @@ +const fs = require("fs"); +const path = require("path"); + +const pages = [ + { title: "Dashboard", path: "/" }, + { title: "Administration", path: "/identity/administration" }, + { title: "Users", path: "/identity/users" }, + { title: "Risky Users", path: "/identity/administration/risky-users" }, + { title: "Groups", path: "/identity/administration/groups" }, + { title: "Devices", path: "/identity/administration/devices" }, + { title: "Deploy Group Template", path: "/identity/administration/deploy-group-template" }, + { title: "Group Templates", path: "/identity/administration/group-templates" }, + { title: "Deleted Items", path: "/identity/administration/deleted-items" }, + { title: "Roles", path: "/identity/administration/roles" }, + { title: "JIT Admin", path: "/identity/administration/jit-admin" }, + { title: "Offboarding Wizard", path: "/identity/administration/offboarding-wizard" }, + { title: "Reports", path: "/identity/reports" }, + { title: "MFA Report", path: "/identity/reports/mfa-report" }, + { title: "Inactive Users", path: "/identity/reports/inactive-users-report" }, + { title: "Sign-in Report", path: "/identity/reports/signin-report" }, + { title: "AAD Connect Report", path: "/identity/reports/azure-ad-connect-report" }, + { title: "Risk Detections", path: "/identity/reports/risk-detections" }, + { title: "Administration", path: "/tenant/administration" }, + { title: "Tenants", path: "/tenant/administration/tenants" }, + { title: "Alert Configuration", path: "/tenant/administration/alert-configuration" }, + { title: "Audit Logs", path: "/tenant/administration/audit-logs" }, + { title: "Enterprise Applications", path: "/tenant/administration/enterprise-apps" }, + { title: "Secure Score", path: "/tenant/administration/securescore" }, + { title: "App Consent Requests", path: "/tenant/administration/app-consent-requests" }, + { title: "Authentication Methods", path: "/tenant/administration/authentication-methods" }, + { title: "Tenant Onboarding", path: "/tenant/administration/tenant-onboarding" }, + { title: "Tenant Offboarding", path: "/tenant/administration/tenant-offboarding-wizard" }, + { title: "Partner Relationships", path: "/tenant/administration/partner-relationships" }, + { title: "Configuration Backup", path: "/cipp/gdap" }, + { title: "Backup Wizard", path: "/tenant/backup/backup-wizard" }, + { title: "Restore Wizard", path: "/tenant/backup/restore-wizard" }, + { title: "Tools", path: "/tenant/administration" }, + { title: "Graph Explorer", path: "/tenant/tools/graph-explorer" }, + { title: "Application Approval", path: "/tenant/tools/appapproval" }, + { title: "IP Database", path: "/tenant/tools/geoiplookup" }, + { title: "Tenant Lookup", path: "/tenant/administration/tenantlookup" }, + { title: "Individual Domain Check", path: "/tenant/tools/individual-domains" }, + { title: "BPA Report Builder", path: "/tenant/tools/bpa-report-builder" }, + { title: "Standards", path: "/tenant/standards" }, + { title: "Edit Standards", path: "/tenant/standards/list-applied-standards" }, + { title: "List Standards", path: "/tenant/standards" }, + { title: "Best Practice Analyser", path: "/tenant/standards/bpa-report" }, + { title: "Domains Analyser", path: "/tenant/standards/domains-analyser" }, + { title: "Conditional Access", path: "/tenant/administration" }, + { title: "CA Policies", path: "/tenant/conditional/list-policies" }, + { title: "Deploy CA Policies", path: "/tenant/conditional/deploy" }, + { title: "CA Policy Tester", path: "/tenant/conditional/test-policy" }, + { title: "CA Vacation Mode", path: "/tenant/conditional/deploy-vacation" }, + { title: "CA Templates", path: "/tenant/conditional/list-template" }, + { title: "Named Locations", path: "/tenant/conditional/list-named-locations" }, + { title: "Deploy Named Locations", path: "/tenant/conditional/deploy-named-location" }, + { title: "GDAP Management", path: "/cipp/gdap" }, + { title: "Invite Wizard", path: "/tenant/administration/gdap-invite-wizard" }, + { title: "Invite List", path: "/tenant/administration/gdap-invites" }, + { title: "GDAP Relationships", path: "/tenant/administration/gdap-relationships" }, + { title: "Role Wizard", path: "/tenant/administration/gdap-role-wizard" }, + { title: "GDAP Roles", path: "/tenant/administration/gdap-roles" }, + { title: "Reports", path: "/tenant/reports" }, + { title: "Licence Report", path: "/tenant/administration/list-licenses" }, + { title: "Consented Applications", path: "/tenant/administration/application-consent" }, + { title: "Service Health", path: "/tenant/administration/service-health" }, + { title: "Incidents", path: "/security/incidents/list-incidents" }, + { title: "Alerts", path: "/security/incidents/list-alerts" }, + { title: "Defender Status", path: "/security/defender/list-defender" }, + { title: "Defender Deployment", path: "/security/defender/deployment" }, + { title: "Vulnerabilities", path: "/security/defender/list-defender-tvm" }, + { title: "Device Compliance", path: "/security/reports/list-device-compliance" }, + { title: "Safe Links", path: "/security/safelinks/safelinks" }, + { title: "Safe Links Templates", path: "/security/safelinks/safelinks-template" }, + { title: "Applications", path: "/endpoint/applications/list" }, + { title: "Application Queue", path: "/endpoint/applications/queue" }, + { title: "Add Choco App", path: "/endpoint/applications/add-choco-app" }, + { title: "Add Store App", path: "/endpoint/applications/add-winget-app" }, + { title: "Add Office App", path: "/endpoint/applications/add-office-app" }, + { title: "Add MSP App", path: "/endpoint/applications/add-rmm-app" }, + { title: "Autopilot Devices", path: "/endpoint/autopilot/list-devices" }, + { title: "Add Autopilot Device", path: "/endpoint/autopilot/add-device" }, + { title: "Profiles", path: "/endpoint/autopilot/list-profiles" }, + { title: "Add Profile", path: "/endpoint/autopilot/add-profile" }, + { title: "Status Pages", path: "/endpoint/autopilot/list-status-pages" }, + { title: "Devices", path: "/endpoint/MEM/devices" }, + { title: "Configuration Policies", path: "/endpoint/MEM/list-policies" }, + { title: "Compliance Policies", path: "/endpoint/MEM/list-compliance-policies" }, + { title: "Protection Policies", path: "/endpoint/MEM/list-appprotection-policies" }, + { title: "Apply Policy", path: "/endpoint/MEM/add-policy" }, + { title: "Policy Templates", path: "/endpoint/MEM/list-templates" }, + { title: "Add Policy Template", path: "/endpoint/MEM/add-policy-template" }, + { title: "OneDrive", path: "/teams-share/onedrive/list" }, + { title: "SharePoint", path: "/teams-share/sharepoint/list-sharepoint" }, + { title: "Teams", path: "/teams-share/teams/list-team" }, + { title: "Add Team", path: "/teams-share/teams/add-team" }, + { title: "Teams Activity", path: "/teams-share/teams/teams-activity" }, + { title: "Business Voice", path: "/teams-share/teams/business-voice" }, + { title: "Mailboxes", path: "/email/administration/mailboxes" }, + { title: "Deleted Mailboxes", path: "/email/administration/deleted-mailboxes" }, + { title: "Mailbox Rules", path: "/email/administration/mailbox-rules" }, + { title: "Contacts", path: "/email/administration/contacts" }, + { title: "Contact Templates", path: "/email/administration/contacts-template" }, + { title: "Quarantine", path: "/email/administration/quarantine" }, + { title: "Tenant Allow/Block Lists", path: "/email/administration/tenant-allow-block-lists" }, + { title: "Mailbox Restore Wizard", path: "/email/tools/mailbox-restore-wizard" }, + { title: "Mailbox Restores", path: "/email/tools/mailbox-restores" }, + { title: "Mail Test", path: "/email/tools/mail-test" }, + { title: "Message Viewer", path: "/email/tools/message-viewer" }, + { title: "Transport rules", path: "/email/transport/list-rules" }, + { title: "Deploy Transport rule", path: "/email/transport/deploy-rules" }, + { title: "Transport Templates", path: "/email/transport/list-templates" }, + { title: "Connectors", path: "/email/transport/list-connectors" }, + { title: "Deploy Connector Templates", path: "/email/connectors/deploy-connector" }, + { title: "Connector Templates", path: "/email/transport/list-connector-templates" }, + { title: "Spamfilter", path: "/email/spamfilter/list-spamfilter" }, + { title: "Apply Spamfilter Template", path: "/email/spamfilter/deploy" }, + { title: "Templates", path: "/email/spamfilter/list-templates" }, + { title: "Rooms", path: "/resources/management/list-rooms" }, + { title: "Room Lists", path: "/resources/management/room-lists" }, + { title: "Mailbox Statistics", path: "/email/reports/mailbox-statistics" }, + { title: "Mailbox Client Access Settings", path: "/email/reports/mailbox-cas-settings" }, + { title: "Message Trace", path: "/email/reports/message-trace" }, + { title: "Anti-Phishing Filters", path: "/email/reports/antiphishing-filters" }, + { title: "Malware Filters", path: "/email/reports/malware-filters" }, + { title: "Safe Attachments Filters", path: "/email/reports/safeattachments-filters" }, + { + title: "Shared Mailbox with Enabled Account", + path: "/email/reports/SharedMailboxEnabledAccount", + }, + { title: "Settings", path: "/cipp/settings" }, + { title: "Extensions Settings", path: "/cipp/extensions" }, + { title: "Extension Sync", path: "/cipp/extension-sync" }, + { title: "User Settings", path: "/cipp/user-settings" }, + { title: "Scheduler", path: "/cipp/scheduler" }, + { title: "Logbook", path: "/cipp/logs" }, + { title: "Statistics", path: "/cipp/statistics" }, + { title: "SAM Setup Wizard", path: "/onboarding" }, + { title: "Log Out", path: "/logout" }, +]; + +// Template for the placeholder page +const placeholderTemplate = (title) => ` +import { Layout as DashboardLayout } from "/src/layouts/index.js"; + +const Page = () => { + const pageTitle = "${title}"; + + return ( +
+

{pageTitle}

+

This is a placeholder page for the ${title.toLowerCase()} section.

+
+ ); +}; + +Page.getLayout = (page) => {page}; + +export default Page; +`; + +// Function to create the placeholder pages +const createPlaceholderPages = () => { + pages.forEach(({ path: pagePath, title }) => { + const dirPath = path.join(__dirname, "src", "pages", ...pagePath.split("/")); + const filePath = path.join(dirPath, "index.js"); + + // Ensure the directory exists + fs.mkdirSync(dirPath, { recursive: true }); + + // Check if the file already exists + if (!fs.existsSync(filePath)) { + // Write the placeholder page + fs.writeFileSync(filePath, placeholderTemplate(title), "utf8"); + } else { + } + }); +}; + +// Run the function to create the pages +createPlaceholderPages(); diff --git a/index.html b/index.html deleted file mode 100644 index 0715762939da..000000000000 --- a/index.html +++ /dev/null @@ -1,37 +0,0 @@ - - - - - - - - - - CIPP - - - - - - - - - - - -
- - - diff --git a/jsconfig.json b/jsconfig.json deleted file mode 100644 index 35496702afff..000000000000 --- a/jsconfig.json +++ /dev/null @@ -1,11 +0,0 @@ -{ - "compilerOptions": { - "module": "ESNext", - "baseUrl": "./", - "checkJs": false, - "moduleResolution": "node", - "jsx": "react" - }, - "include": ["./src"], - "exclude": ["node_modules/"] -} diff --git a/next.config.js b/next.config.js new file mode 100644 index 000000000000..f2bc28bcd2bb --- /dev/null +++ b/next.config.js @@ -0,0 +1,44 @@ +const disableOptimizePackageImports = process.env.NEXT_DISABLE_OPTIMIZE_PACKAGE_IMPORTS === '1' + +/** @type {import('next').NextConfig} */ +const config = { + reactStrictMode: false, + experimental: { + optimizePackageImports: disableOptimizePackageImports + ? [] + : [ + '@mui/material', + '@mui/icons-material', + '@mui/lab', + '@mui/system', + '@mui/x-date-pickers', + 'material-react-table', + 'mui-tiptap', + 'recharts', + '@react-pdf/renderer', + 'lodash', + ], + webpackMemoryOptimizations: true, + preloadEntriesOnStart: false, + turbopackFileSystemCacheForDev: false, + turbopackMemoryLimit: 4096, + }, + images: { + unoptimized: true, + }, + turbopack: { + rules: { + '*.svg': { + loaders: ['@svgr/webpack'], + as: '*.js', + }, + }, + }, + async redirects() { + return [] + }, + output: 'export', + distDir: './out', +} + +module.exports = config diff --git a/package-lock.json b/package-lock.json deleted file mode 100644 index 52097c7d8d38..000000000000 --- a/package-lock.json +++ /dev/null @@ -1,9380 +0,0 @@ -{ - "name": "cipp", - "version": "6.2.2", - "lockfileVersion": 3, - "requires": true, - "packages": { - "": { - "name": "cipp", - "version": "6.2.2", - "license": "AGPL-3.0", - "dependencies": { - "@coreui/chartjs": "^3.0.0", - "@coreui/coreui": "^4.3.0", - "@coreui/react": "^4.11.0", - "@coreui/react-chartjs": "^2.1.3", - "@coreui/utils": "^1.3.1", - "@fortawesome/fontawesome-svg-core": "^6.5.1", - "@fortawesome/free-brands-svg-icons": "^6.5.1", - "@fortawesome/free-regular-svg-icons": "^6.5.1", - "@fortawesome/free-solid-svg-icons": "^6.5.1", - "@fortawesome/react-fontawesome": "^0.2.0", - "@monaco-editor/react": "^4.5.2", - "@popperjs/core": "^2.10.2", - "@reduxjs/toolkit": "^1.9.7", - "@rjsf/bootstrap-4": "^5.12.1", - "@rjsf/core": "^5.12.1", - "@rjsf/utils": "^5.12.1", - "@rjsf/validator-ajv8": "^5.12.1", - "@uiw/react-json-view": "^2.0.0-alpha.23", - "axios": "^1.6.2", - "buffer": "^6.0.3", - "chart.js": "^3.5.1", - "classnames": "^2.3.1", - "core-js": "^3.18.3", - "dompurify": "^3.1.6", - "eml-parse-js": "^1.1.14", - "enzyme": "^3.11.0", - "final-form": "^4.20.4", - "final-form-arrays": "^3.1.0", - "fuse.js": "^7.0.0", - "fuzzysort": "^1.1.4", - "javascript-time-ago": "^2.5.9", - "jspdf": "^2.4.0", - "jspdf-autotable": "^3.5.23", - "lodash-es": "^4.17.21", - "moment": "^2.29.1", - "prop-types": "^15.7.2", - "react": "^18.2.0", - "react-app-polyfill": "^2.0.0", - "react-bootstrap": "^1.6.5", - "react-circular-progressbar": "^2.1.0", - "react-copy-to-clipboard": "^5.1.0", - "react-data-table-component": "^7.4.5", - "react-datepicker": "^4.10.0", - "react-dom": "^18.2.0", - "react-dropzone": "^14.2.3", - "react-final-form": "^6.5.9", - "react-final-form-arrays": "^3.1.4", - "react-final-form-listeners": "^1.0.3", - "react-helmet-async": "^1.3.0", - "react-hotkeys-hook": "^3.4.4", - "react-html-parser": "^2.0.2", - "react-loading-skeleton": "^3.1.0", - "react-masonry-component": "^6.3.0", - "react-media-hook": "^0.4.9", - "react-papaparse": "^3.18.2", - "react-redux": "^7.2.5", - "react-router-dom": "^6.1.1", - "react-select": "^5.3.0", - "react-select-search": "^3.0.8", - "react-syntax-highlighter": "^15.4.5", - "react-time-ago": "^7.2.1", - "redux": "4.1.1", - "redux-persist": "^6.0.0", - "simplebar-react": "^2.3.6", - "source-map-loader": "^3.0.0", - "styled-components": "^5.3.11" - }, - "devDependencies": { - "@types/react": "^18.2.39", - "@types/react-helmet": "^6.1.5", - "@vitejs/plugin-react": "^4.2.1", - "auto-changelog": "~2.3.0", - "browserslist-to-esbuild": "^1.2.0", - "eslint": "^8.54.0", - "eslint-config-prettier": "^8.3.0", - "eslint-import-resolver-custom-alias": "^1.3.2", - "eslint-plugin-import": "^2.29.0", - "eslint-plugin-prettier": "^4.0.0", - "eslint-plugin-react": "^7.33.2", - "eslint-plugin-react-hooks": "^4.6.0", - "eslint-plugin-react-refresh": "^0.4.4", - "husky": "^7.0.4", - "postcss-scss": "^4.0.3", - "prettier": "2.4.1", - "redux-immutable-state-invariant": "^2.1.0", - "sass": "^1.64.2", - "stylelint": "^14.3.0", - "stylelint-config-sass-guidelines": "^9.0.1", - "stylelint-order": "^5.0.0", - "vite": "^5.0.6", - "vite-plugin-eslint": "^1.8.1" - }, - "engines": { - "node": "18", - "npm": ">=8.3.0" - } - }, - "node_modules/@aashutoshrathi/word-wrap": { - "version": "1.2.6", - "resolved": "https://registry.npmjs.org/@aashutoshrathi/word-wrap/-/word-wrap-1.2.6.tgz", - "integrity": "sha512-1Yjs2SvM8TflER/OD3cOjhWWOZb58A2t7wpE2S9XfBYTiIl+XFhQG2bjy4Pu1I+EAlCNUzRDYDdFwFYUKvXcIA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/@ampproject/remapping": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz", - "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==", - "dependencies": { - "@jridgewell/gen-mapping": "^0.3.5", - "@jridgewell/trace-mapping": "^0.3.24" - }, - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@babel/code-frame": { - "version": "7.23.5", - "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.23.5.tgz", - "integrity": "sha512-CgH3s1a96LipHCmSUmYFPwY7MNx8C3avkq7i4Wl3cfa662ldtUe4VM1TPXX70pfmrlWTb6jLqTYrZyT2ZTJBgA==", - "dependencies": { - "@babel/highlight": "^7.23.4", - "chalk": "^2.4.2" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/compat-data": { - "version": "7.23.5", - "resolved": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.23.5.tgz", - "integrity": "sha512-uU27kfDRlhfKl+w1U6vp16IuvSLtjAxdArVXPa9BvLkrr7CYIsxH5adpHObeAGY/41+syctUWOZ140a2Rvkgjw==", - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/core": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.24.0.tgz", - "integrity": "sha512-fQfkg0Gjkza3nf0c7/w6Xf34BW4YvzNfACRLmmb7XRLa6XHdR+K9AlJlxneFfWYf6uhOzuzZVTjF/8KfndZANw==", - "dependencies": { - "@ampproject/remapping": "^2.2.0", - "@babel/code-frame": "^7.23.5", - "@babel/generator": "^7.23.6", - "@babel/helper-compilation-targets": "^7.23.6", - "@babel/helper-module-transforms": "^7.23.3", - "@babel/helpers": "^7.24.0", - "@babel/parser": "^7.24.0", - "@babel/template": "^7.24.0", - "@babel/traverse": "^7.24.0", - "@babel/types": "^7.24.0", - "convert-source-map": "^2.0.0", - "debug": "^4.1.0", - "gensync": "^1.0.0-beta.2", - "json5": "^2.2.3", - "semver": "^6.3.1" - }, - "engines": { - "node": ">=6.9.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/babel" - } - }, - "node_modules/@babel/generator": { - "version": "7.23.6", - "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.23.6.tgz", - "integrity": "sha512-qrSfCYxYQB5owCmGLbl8XRpX1ytXlpueOb0N0UmQwA073KZxejgQTzAmJezxvpwQD9uGtK2shHdi55QT+MbjIw==", - "dependencies": { - "@babel/types": "^7.23.6", - "@jridgewell/gen-mapping": "^0.3.2", - "@jridgewell/trace-mapping": "^0.3.17", - "jsesc": "^2.5.1" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-annotate-as-pure": { - "version": "7.22.5", - "resolved": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.22.5.tgz", - "integrity": "sha512-LvBTxu8bQSQkcyKOU+a1btnNFQ1dMAd0R6PyW3arXes06F6QLWLIrd681bxRPIXlrMGR3XYnW9JyML7dP3qgxg==", - "dependencies": { - "@babel/types": "^7.22.5" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-compilation-targets": { - "version": "7.23.6", - "resolved": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.23.6.tgz", - "integrity": "sha512-9JB548GZoQVmzrFgp8o7KxdgkTGm6xs9DW0o/Pim72UDjzr5ObUQ6ZzYPqA+g9OTS2bBQoctLJrky0RDCAWRgQ==", - "dependencies": { - "@babel/compat-data": "^7.23.5", - "@babel/helper-validator-option": "^7.23.5", - "browserslist": "^4.22.2", - "lru-cache": "^5.1.1", - "semver": "^6.3.1" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-environment-visitor": { - "version": "7.22.20", - "resolved": "https://registry.npmjs.org/@babel/helper-environment-visitor/-/helper-environment-visitor-7.22.20.tgz", - "integrity": "sha512-zfedSIzFhat/gFhWfHtgWvlec0nqB9YEIVrpuwjruLlXfUSnA8cJB0miHKwqDnQ7d32aKo2xt88/xZptwxbfhA==", - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-function-name": { - "version": "7.23.0", - "resolved": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.23.0.tgz", - "integrity": "sha512-OErEqsrxjZTJciZ4Oo+eoZqeW9UIiOcuYKRJA4ZAgV9myA+pOXhhmpfNCKjEH/auVfEYVFJ6y1Tc4r0eIApqiw==", - "dependencies": { - "@babel/template": "^7.22.15", - "@babel/types": "^7.23.0" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-hoist-variables": { - "version": "7.22.5", - "resolved": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.22.5.tgz", - "integrity": "sha512-wGjk9QZVzvknA6yKIUURb8zY3grXCcOZt+/7Wcy8O2uctxhplmUPkOdlgoNhmdVee2c92JXbf1xpMtVNbfoxRw==", - "dependencies": { - "@babel/types": "^7.22.5" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-module-imports": { - "version": "7.22.15", - "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.22.15.tgz", - "integrity": "sha512-0pYVBnDKZO2fnSPCrgM/6WMc7eS20Fbok+0r88fp+YtWVLZrp4CkafFGIp+W0VKw4a22sgebPT99y+FDNMdP4w==", - "dependencies": { - "@babel/types": "^7.22.15" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-module-transforms": { - "version": "7.23.3", - "resolved": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.23.3.tgz", - "integrity": "sha512-7bBs4ED9OmswdfDzpz4MpWgSrV7FXlc3zIagvLFjS5H+Mk7Snr21vQ6QwrsoCGMfNC4e4LQPdoULEt4ykz0SRQ==", - "dependencies": { - "@babel/helper-environment-visitor": "^7.22.20", - "@babel/helper-module-imports": "^7.22.15", - "@babel/helper-simple-access": "^7.22.5", - "@babel/helper-split-export-declaration": "^7.22.6", - "@babel/helper-validator-identifier": "^7.22.20" - }, - "engines": { - "node": ">=6.9.0" - }, - "peerDependencies": { - "@babel/core": "^7.0.0" - } - }, - "node_modules/@babel/helper-plugin-utils": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.24.0.tgz", - "integrity": "sha512-9cUznXMG0+FxRuJfvL82QlTqIzhVW9sL0KjMPHhAOOvpQGL8QtdxnBKILjBqxlHyliz0yCa1G903ZXI/FuHy2w==", - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-simple-access": { - "version": "7.22.5", - "resolved": "https://registry.npmjs.org/@babel/helper-simple-access/-/helper-simple-access-7.22.5.tgz", - "integrity": "sha512-n0H99E/K+Bika3++WNL17POvo4rKWZ7lZEp1Q+fStVbUi8nxPQEBOlTmCOxW/0JsS56SKKQ+ojAe2pHKJHN35w==", - "dependencies": { - "@babel/types": "^7.22.5" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-split-export-declaration": { - "version": "7.22.6", - "resolved": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.22.6.tgz", - "integrity": "sha512-AsUnxuLhRYsisFiaJwvp1QF+I3KjD5FOxut14q/GzovUe6orHLesW2C7d754kRm53h5gqrz6sFl6sxc4BVtE/g==", - "dependencies": { - "@babel/types": "^7.22.5" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-string-parser": { - "version": "7.23.4", - "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.23.4.tgz", - "integrity": "sha512-803gmbQdqwdf4olxrX4AJyFBV/RTr3rSmOj0rKwesmzlfhYNDEs+/iOcznzpNWlJlIlTJC2QfPFcHB6DlzdVLQ==", - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-validator-identifier": { - "version": "7.22.20", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.22.20.tgz", - "integrity": "sha512-Y4OZ+ytlatR8AI+8KZfKuL5urKp7qey08ha31L8b3BwewJAoJamTzyvxPR/5D+KkdJCGPq/+8TukHBlY10FX9A==", - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helper-validator-option": { - "version": "7.23.5", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.23.5.tgz", - "integrity": "sha512-85ttAOMLsr53VgXkTbkx8oA6YTfT4q7/HzXSLEYmjcSTJPMPQtvq1BD79Byep5xMUYbGRzEpDsjUf3dyp54IKw==", - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/helpers": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.24.0.tgz", - "integrity": "sha512-ulDZdc0Aj5uLc5nETsa7EPx2L7rM0YJM8r7ck7U73AXi7qOV44IHHRAYZHY6iU1rr3C5N4NtTmMRUJP6kwCWeA==", - "dependencies": { - "@babel/template": "^7.24.0", - "@babel/traverse": "^7.24.0", - "@babel/types": "^7.24.0" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/highlight": { - "version": "7.23.4", - "resolved": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.23.4.tgz", - "integrity": "sha512-acGdbYSfp2WheJoJm/EBBBLh/ID8KDc64ISZ9DYtBmC8/Q204PZJLHyzeB5qMzJ5trcOkybd78M4x2KWsUq++A==", - "dependencies": { - "@babel/helper-validator-identifier": "^7.22.20", - "chalk": "^2.4.2", - "js-tokens": "^4.0.0" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/parser": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.24.0.tgz", - "integrity": "sha512-QuP/FxEAzMSjXygs8v4N9dvdXzEHN4W1oF3PxuWAtPo08UdM17u89RDMgjLn/mlc56iM0HlLmVkO/wgR+rDgHg==", - "bin": { - "parser": "bin/babel-parser.js" - }, - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@babel/plugin-syntax-jsx": { - "version": "7.23.3", - "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.23.3.tgz", - "integrity": "sha512-EB2MELswq55OHUoRZLGg/zC7QWUKfNLpE57m/S2yr1uEneIgsTgrSzXP3NXEsMkVn76OlaVVnzN+ugObuYGwhg==", - "dependencies": { - "@babel/helper-plugin-utils": "^7.22.5" - }, - "engines": { - "node": ">=6.9.0" - }, - "peerDependencies": { - "@babel/core": "^7.0.0-0" - } - }, - "node_modules/@babel/plugin-transform-react-jsx-self": { - "version": "7.23.3", - "resolved": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-self/-/plugin-transform-react-jsx-self-7.23.3.tgz", - "integrity": "sha512-qXRvbeKDSfwnlJnanVRp0SfuWE5DQhwQr5xtLBzp56Wabyo+4CMosF6Kfp+eOD/4FYpql64XVJ2W0pVLlJZxOQ==", - "dev": true, - "dependencies": { - "@babel/helper-plugin-utils": "^7.22.5" - }, - "engines": { - "node": ">=6.9.0" - }, - "peerDependencies": { - "@babel/core": "^7.0.0-0" - } - }, - "node_modules/@babel/plugin-transform-react-jsx-source": { - "version": "7.23.3", - "resolved": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-source/-/plugin-transform-react-jsx-source-7.23.3.tgz", - "integrity": "sha512-91RS0MDnAWDNvGC6Wio5XYkyWI39FMFO+JK9+4AlgaTH+yWwVTsw7/sn6LK0lH7c5F+TFkpv/3LfCJ1Ydwof/g==", - "dev": true, - "dependencies": { - "@babel/helper-plugin-utils": "^7.22.5" - }, - "engines": { - "node": ">=6.9.0" - }, - "peerDependencies": { - "@babel/core": "^7.0.0-0" - } - }, - "node_modules/@babel/runtime": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.24.0.tgz", - "integrity": "sha512-Chk32uHMg6TnQdvw2e9IlqPpFX/6NLuK0Ys2PqLb7/gL5uFn9mXvK715FGLlOLQrcO4qIkNHkvPGktzzXexsFw==", - "dependencies": { - "regenerator-runtime": "^0.14.0" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/template": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.24.0.tgz", - "integrity": "sha512-Bkf2q8lMB0AFpX0NFEqSbx1OkTHf0f+0j82mkw+ZpzBnkk7e9Ql0891vlfgi+kHwOk8tQjiQHpqh4LaSa0fKEA==", - "dependencies": { - "@babel/code-frame": "^7.23.5", - "@babel/parser": "^7.24.0", - "@babel/types": "^7.24.0" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/traverse": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.24.0.tgz", - "integrity": "sha512-HfuJlI8qq3dEDmNU5ChzzpZRWq+oxCZQyMzIMEqLho+AQnhMnKQUzH6ydo3RBl/YjPCuk68Y6s0Gx0AeyULiWw==", - "dependencies": { - "@babel/code-frame": "^7.23.5", - "@babel/generator": "^7.23.6", - "@babel/helper-environment-visitor": "^7.22.20", - "@babel/helper-function-name": "^7.23.0", - "@babel/helper-hoist-variables": "^7.22.5", - "@babel/helper-split-export-declaration": "^7.22.6", - "@babel/parser": "^7.24.0", - "@babel/types": "^7.24.0", - "debug": "^4.3.1", - "globals": "^11.1.0" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@babel/types": { - "version": "7.24.0", - "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.24.0.tgz", - "integrity": "sha512-+j7a5c253RfKh8iABBhywc8NSfP5LURe7Uh4qpsh6jc+aLJguvmIUBdjSdEMQv2bENrCR5MfRdjGo7vzS/ob7w==", - "dependencies": { - "@babel/helper-string-parser": "^7.23.4", - "@babel/helper-validator-identifier": "^7.22.20", - "to-fast-properties": "^2.0.0" - }, - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/@coreui/chartjs": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@coreui/chartjs/-/chartjs-3.1.2.tgz", - "integrity": "sha512-d3MGk3KZNAt29VRKP/XYiGmT56KTqtuOhLEg5HNwb7P7ZmEgOJoHxFHVCVE4I36hfgQCjZZVknsuk2ZTfF/2fw==", - "dependencies": { - "@coreui/coreui": "^4.2.6", - "chart.js": "^3.9.1" - } - }, - "node_modules/@coreui/coreui": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/@coreui/coreui/-/coreui-4.3.0.tgz", - "integrity": "sha512-2bx5E9YT17td4K7hZapudypSPx7a5jYg8NpSCTLRStPTWOBlL5XVF7fz3yUn2S6DQE1VmnbrXQpuS5LzmptRLQ==", - "dependencies": { - "postcss-combine-duplicated-selectors": "^10.0.3" - }, - "peerDependencies": { - "@popperjs/core": "^2.11.6" - } - }, - "node_modules/@coreui/react": { - "version": "4.11.1", - "resolved": "https://registry.npmjs.org/@coreui/react/-/react-4.11.1.tgz", - "integrity": "sha512-2EYnV6kpyH8/648+iffRy/I/xCEnD2MnEOuo1LPiUSX7EqoHn5M3fI+sf4vM9Wrqz4Gv2gxCl8DNRpk2xcLANQ==", - "peerDependencies": { - "@coreui/coreui": "4.3.0", - "react": ">=17", - "react-dom": ">=17" - } - }, - "node_modules/@coreui/react-chartjs": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@coreui/react-chartjs/-/react-chartjs-2.1.3.tgz", - "integrity": "sha512-Boj2LhlGlAVIdPRDDIyF5nbupIg9ohhpdLXW28ch0A0ZMpJvf0AwBoibV4Uo6agcN7jSq2uvgudNC3aJTMg/8w==", - "dependencies": { - "@coreui/chartjs": "^3.1.1", - "chart.js": "3.9.1" - }, - "peerDependencies": { - "react": ">=17", - "react-dom": ">=17" - } - }, - "node_modules/@coreui/utils": { - "version": "1.3.1", - "resolved": "https://registry.npmjs.org/@coreui/utils/-/utils-1.3.1.tgz", - "integrity": "sha512-WuWHX7bg89cJH34TWVsLe9RsxzBhTApj+X2Ja19xhjcpxt5Gv11Ozm+fwYt6DD7DgncTvpwYrMcnNlpp701UOg==", - "engines": { - "node": ">=8.9.0", - "npm": ">= 5.6.0" - } - }, - "node_modules/@csstools/selector-specificity": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-2.2.0.tgz", - "integrity": "sha512-+OJ9konv95ClSTOJCmMZqpd5+YGsB2S+x6w3E1oaM8UuR5j8nTNHYSz8c9BEPGDOCMQYIEEGlVPj/VY64iTbGw==", - "dev": true, - "engines": { - "node": "^14 || ^16 || >=18" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/csstools" - }, - "peerDependencies": { - "postcss-selector-parser": "^6.0.10" - } - }, - "node_modules/@emotion/babel-plugin": { - "version": "11.11.0", - "resolved": "https://registry.npmjs.org/@emotion/babel-plugin/-/babel-plugin-11.11.0.tgz", - "integrity": "sha512-m4HEDZleaaCH+XgDDsPF15Ht6wTLsgDTeR3WYj9Q/k76JtWhrJjcP4+/XlG8LGT/Rol9qUfOIztXeA84ATpqPQ==", - "dependencies": { - "@babel/helper-module-imports": "^7.16.7", - "@babel/runtime": "^7.18.3", - "@emotion/hash": "^0.9.1", - "@emotion/memoize": "^0.8.1", - "@emotion/serialize": "^1.1.2", - "babel-plugin-macros": "^3.1.0", - "convert-source-map": "^1.5.0", - "escape-string-regexp": "^4.0.0", - "find-root": "^1.1.0", - "source-map": "^0.5.7", - "stylis": "4.2.0" - } - }, - "node_modules/@emotion/babel-plugin/node_modules/convert-source-map": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz", - "integrity": "sha512-ASFBup0Mz1uyiIjANan1jzLQami9z1PoYSZCiiYW2FczPbenXc45FZdBZLzOT+r6+iciuEModtmCti+hjaAk0A==" - }, - "node_modules/@emotion/babel-plugin/node_modules/escape-string-regexp": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz", - "integrity": "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==", - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/@emotion/babel-plugin/node_modules/source-map": { - "version": "0.5.7", - "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz", - "integrity": "sha512-LbrmJOMUSdEVxIKvdcJzQC+nQhe8FUZQTXQy6+I75skNgn3OoQ0DZA8YnFa7gp8tqtL3KPf1kmo0R5DoApeSGQ==", - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/@emotion/cache": { - "version": "11.11.0", - "resolved": "https://registry.npmjs.org/@emotion/cache/-/cache-11.11.0.tgz", - "integrity": "sha512-P34z9ssTCBi3e9EI1ZsWpNHcfY1r09ZO0rZbRO2ob3ZQMnFI35jB536qoXbkdesr5EUhYi22anuEJuyxifaqAQ==", - "dependencies": { - "@emotion/memoize": "^0.8.1", - "@emotion/sheet": "^1.2.2", - "@emotion/utils": "^1.2.1", - "@emotion/weak-memoize": "^0.3.1", - "stylis": "4.2.0" - } - }, - "node_modules/@emotion/hash": { - "version": "0.9.1", - "resolved": "https://registry.npmjs.org/@emotion/hash/-/hash-0.9.1.tgz", - "integrity": "sha512-gJB6HLm5rYwSLI6PQa+X1t5CFGrv1J1TWG+sOyMCeKz2ojaj6Fnl/rZEspogG+cvqbt4AE/2eIyD2QfLKTBNlQ==" - }, - "node_modules/@emotion/is-prop-valid": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@emotion/is-prop-valid/-/is-prop-valid-1.2.2.tgz", - "integrity": "sha512-uNsoYd37AFmaCdXlg6EYD1KaPOaRWRByMCYzbKUX4+hhMfrxdVSelShywL4JVaAeM/eHUOSprYBQls+/neX3pw==", - "dependencies": { - "@emotion/memoize": "^0.8.1" - } - }, - "node_modules/@emotion/memoize": { - "version": "0.8.1", - "resolved": "https://registry.npmjs.org/@emotion/memoize/-/memoize-0.8.1.tgz", - "integrity": "sha512-W2P2c/VRW1/1tLox0mVUalvnWXxavmv/Oum2aPsRcoDJuob75FC3Y8FbpfLwUegRcxINtGUMPq0tFCvYNTBXNA==" - }, - "node_modules/@emotion/react": { - "version": "11.11.4", - "resolved": "https://registry.npmjs.org/@emotion/react/-/react-11.11.4.tgz", - "integrity": "sha512-t8AjMlF0gHpvvxk5mAtCqR4vmxiGHCeJBaQO6gncUSdklELOgtwjerNY2yuJNfwnc6vi16U/+uMF+afIawJ9iw==", - "dependencies": { - "@babel/runtime": "^7.18.3", - "@emotion/babel-plugin": "^11.11.0", - "@emotion/cache": "^11.11.0", - "@emotion/serialize": "^1.1.3", - "@emotion/use-insertion-effect-with-fallbacks": "^1.0.1", - "@emotion/utils": "^1.2.1", - "@emotion/weak-memoize": "^0.3.1", - "hoist-non-react-statics": "^3.3.1" - }, - "peerDependencies": { - "react": ">=16.8.0" - }, - "peerDependenciesMeta": { - "@types/react": { - "optional": true - } - } - }, - "node_modules/@emotion/serialize": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/@emotion/serialize/-/serialize-1.1.3.tgz", - "integrity": "sha512-iD4D6QVZFDhcbH0RAG1uVu1CwVLMWUkCvAqqlewO/rxf8+87yIBAlt4+AxMiiKPLs5hFc0owNk/sLLAOROw3cA==", - "dependencies": { - "@emotion/hash": "^0.9.1", - "@emotion/memoize": "^0.8.1", - "@emotion/unitless": "^0.8.1", - "@emotion/utils": "^1.2.1", - "csstype": "^3.0.2" - } - }, - "node_modules/@emotion/sheet": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@emotion/sheet/-/sheet-1.2.2.tgz", - "integrity": "sha512-0QBtGvaqtWi+nx6doRwDdBIzhNdZrXUppvTM4dtZZWEGTXL/XE/yJxLMGlDT1Gt+UHH5IX1n+jkXyytE/av7OA==" - }, - "node_modules/@emotion/stylis": { - "version": "0.8.5", - "resolved": "https://registry.npmjs.org/@emotion/stylis/-/stylis-0.8.5.tgz", - "integrity": "sha512-h6KtPihKFn3T9fuIrwvXXUOwlx3rfUvfZIcP5a6rh8Y7zjE3O06hT5Ss4S/YI1AYhuZ1kjaE/5EaOOI2NqSylQ==" - }, - "node_modules/@emotion/unitless": { - "version": "0.8.1", - "resolved": "https://registry.npmjs.org/@emotion/unitless/-/unitless-0.8.1.tgz", - "integrity": "sha512-KOEGMu6dmJZtpadb476IsZBclKvILjopjUii3V+7MnXIQCYh8W3NgNcgwo21n9LXZX6EDIKvqfjYxXebDwxKmQ==" - }, - "node_modules/@emotion/use-insertion-effect-with-fallbacks": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/@emotion/use-insertion-effect-with-fallbacks/-/use-insertion-effect-with-fallbacks-1.0.1.tgz", - "integrity": "sha512-jT/qyKZ9rzLErtrjGgdkMBn2OP8wl0G3sQlBb3YPryvKHsjvINUhVaPFfP+fpBcOkmrVOVEEHQFJ7nbj2TH2gw==", - "peerDependencies": { - "react": ">=16.8.0" - } - }, - "node_modules/@emotion/utils": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/@emotion/utils/-/utils-1.2.1.tgz", - "integrity": "sha512-Y2tGf3I+XVnajdItskUCn6LX+VUDmP6lTL4fcqsXAv43dnlbZiuW4MWQW38rW/BVWSE7Q/7+XQocmpnRYILUmg==" - }, - "node_modules/@emotion/weak-memoize": { - "version": "0.3.1", - "resolved": "https://registry.npmjs.org/@emotion/weak-memoize/-/weak-memoize-0.3.1.tgz", - "integrity": "sha512-EsBwpc7hBUJWAsNPBmJy4hxWx12v6bshQsldrVmjxJoc3isbxhOrF2IcCpaXxfvq03NwkI7sbsOLXbYuqF/8Ww==" - }, - "node_modules/@esbuild/aix-ppc64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.19.12.tgz", - "integrity": "sha512-bmoCYyWdEL3wDQIVbcyzRyeKLgk2WtWLTWz1ZIAZF/EGbNOwSA6ew3PftJ1PqMiOOGu0OyFMzG53L0zqIpPeNA==", - "cpu": [ - "ppc64" - ], - "dev": true, - "optional": true, - "os": [ - "aix" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/android-arm": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.19.12.tgz", - "integrity": "sha512-qg/Lj1mu3CdQlDEEiWrlC4eaPZ1KztwGJ9B6J+/6G+/4ewxJg7gqj8eVYWvao1bXrqGiW2rsBZFSX3q2lcW05w==", - "cpu": [ - "arm" - ], - "dev": true, - "optional": true, - "os": [ - "android" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/android-arm64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.19.12.tgz", - "integrity": "sha512-P0UVNGIienjZv3f5zq0DP3Nt2IE/3plFzuaS96vihvD0Hd6H/q4WXUGpCxD/E8YrSXfNyRPbpTq+T8ZQioSuPA==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "android" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/android-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.19.12.tgz", - "integrity": "sha512-3k7ZoUW6Q6YqhdhIaq/WZ7HwBpnFBlW905Fa4s4qWJyiNOgT1dOqDiVAQFwBH7gBRZr17gLrlFCRzF6jFh7Kew==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "android" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/darwin-arm64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.19.12.tgz", - "integrity": "sha512-B6IeSgZgtEzGC42jsI+YYu9Z3HKRxp8ZT3cqhvliEHovq8HSX2YX8lNocDn79gCKJXOSaEot9MVYky7AKjCs8g==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/darwin-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.19.12.tgz", - "integrity": "sha512-hKoVkKzFiToTgn+41qGhsUJXFlIjxI/jSYeZf3ugemDYZldIXIxhvwN6erJGlX4t5h417iFuheZ7l+YVn05N3A==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/freebsd-arm64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.19.12.tgz", - "integrity": "sha512-4aRvFIXmwAcDBw9AueDQ2YnGmz5L6obe5kmPT8Vd+/+x/JMVKCgdcRwH6APrbpNXsPz+K653Qg8HB/oXvXVukA==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "freebsd" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/freebsd-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.19.12.tgz", - "integrity": "sha512-EYoXZ4d8xtBoVN7CEwWY2IN4ho76xjYXqSXMNccFSx2lgqOG/1TBPW0yPx1bJZk94qu3tX0fycJeeQsKovA8gg==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "freebsd" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-arm": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.19.12.tgz", - "integrity": "sha512-J5jPms//KhSNv+LO1S1TX1UWp1ucM6N6XuL6ITdKWElCu8wXP72l9MM0zDTzzeikVyqFE6U8YAV9/tFyj0ti+w==", - "cpu": [ - "arm" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-arm64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.19.12.tgz", - "integrity": "sha512-EoTjyYyLuVPfdPLsGVVVC8a0p1BFFvtpQDB/YLEhaXyf/5bczaGeN15QkR+O4S5LeJ92Tqotve7i1jn35qwvdA==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-ia32": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.19.12.tgz", - "integrity": "sha512-Thsa42rrP1+UIGaWz47uydHSBOgTUnwBwNq59khgIwktK6x60Hivfbux9iNR0eHCHzOLjLMLfUMLCypBkZXMHA==", - "cpu": [ - "ia32" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-loong64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.19.12.tgz", - "integrity": "sha512-LiXdXA0s3IqRRjm6rV6XaWATScKAXjI4R4LoDlvO7+yQqFdlr1Bax62sRwkVvRIrwXxvtYEHHI4dm50jAXkuAA==", - "cpu": [ - "loong64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-mips64el": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.19.12.tgz", - "integrity": "sha512-fEnAuj5VGTanfJ07ff0gOA6IPsvrVHLVb6Lyd1g2/ed67oU1eFzL0r9WL7ZzscD+/N6i3dWumGE1Un4f7Amf+w==", - "cpu": [ - "mips64el" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-ppc64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.19.12.tgz", - "integrity": "sha512-nYJA2/QPimDQOh1rKWedNOe3Gfc8PabU7HT3iXWtNUbRzXS9+vgB0Fjaqr//XNbd82mCxHzik2qotuI89cfixg==", - "cpu": [ - "ppc64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-riscv64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.19.12.tgz", - "integrity": "sha512-2MueBrlPQCw5dVJJpQdUYgeqIzDQgw3QtiAHUC4RBz9FXPrskyyU3VI1hw7C0BSKB9OduwSJ79FTCqtGMWqJHg==", - "cpu": [ - "riscv64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-s390x": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.19.12.tgz", - "integrity": "sha512-+Pil1Nv3Umes4m3AZKqA2anfhJiVmNCYkPchwFJNEJN5QxmTs1uzyy4TvmDrCRNT2ApwSari7ZIgrPeUx4UZDg==", - "cpu": [ - "s390x" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/linux-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.19.12.tgz", - "integrity": "sha512-B71g1QpxfwBvNrfyJdVDexenDIt1CiDN1TIXLbhOw0KhJzE78KIFGX6OJ9MrtC0oOqMWf+0xop4qEU8JrJTwCg==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/netbsd-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.19.12.tgz", - "integrity": "sha512-3ltjQ7n1owJgFbuC61Oj++XhtzmymoCihNFgT84UAmJnxJfm4sYCiSLTXZtE00VWYpPMYc+ZQmB6xbSdVh0JWA==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "netbsd" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/openbsd-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.19.12.tgz", - "integrity": "sha512-RbrfTB9SWsr0kWmb9srfF+L933uMDdu9BIzdA7os2t0TXhCRjrQyCeOt6wVxr79CKD4c+p+YhCj31HBkYcXebw==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "openbsd" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/sunos-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.19.12.tgz", - "integrity": "sha512-HKjJwRrW8uWtCQnQOz9qcU3mUZhTUQvi56Q8DPTLLB+DawoiQdjsYq+j+D3s9I8VFtDr+F9CjgXKKC4ss89IeA==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "sunos" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/win32-arm64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.19.12.tgz", - "integrity": "sha512-URgtR1dJnmGvX864pn1B2YUYNzjmXkuJOIqG2HdU62MVS4EHpU2946OZoTMnRUHklGtJdJZ33QfzdjGACXhn1A==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/win32-ia32": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.19.12.tgz", - "integrity": "sha512-+ZOE6pUkMOJfmxmBZElNOx72NKpIa/HFOMGzu8fqzQJ5kgf6aTGrcJaFsNiVMH4JKpMipyK+7k0n2UXN7a8YKQ==", - "cpu": [ - "ia32" - ], - "dev": true, - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@esbuild/win32-x64": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.19.12.tgz", - "integrity": "sha512-T1QyPSDCyMXaO3pzBkF96E8xMkiRYbUEZADd29SyPGabqxMViNoii+NcK7eWJAEoU6RZyEm5lVSIjTmcdoB9HA==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">=12" - } - }, - "node_modules/@eslint-community/eslint-utils": { - "version": "4.4.0", - "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.4.0.tgz", - "integrity": "sha512-1/sA4dwrzBAyeUoQ6oxahHKmrZvsnLCg4RfxW3ZFGGmQkSNQPFNLV9CUEFQP1x9EYXHTo5p6xdhZM1Ne9p/AfA==", - "dev": true, - "dependencies": { - "eslint-visitor-keys": "^3.3.0" - }, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - }, - "peerDependencies": { - "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0" - } - }, - "node_modules/@eslint-community/regexpp": { - "version": "4.10.0", - "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.10.0.tgz", - "integrity": "sha512-Cu96Sd2By9mCNTx2iyKOmq10v22jUVQv0lQnlGNy16oE9589yE+QADPbrMGCkA51cKZSg3Pu/aTJVTGfL/qjUA==", - "dev": true, - "engines": { - "node": "^12.0.0 || ^14.0.0 || >=16.0.0" - } - }, - "node_modules/@eslint/eslintrc": { - "version": "2.1.4", - "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-2.1.4.tgz", - "integrity": "sha512-269Z39MS6wVJtsoUl10L60WdkhJVdPG24Q4eZTH3nnF6lpvSShEK3wQjDX9JRWAUPvPh7COouPpU9IrqaZFvtQ==", - "dev": true, - "dependencies": { - "ajv": "^6.12.4", - "debug": "^4.3.2", - "espree": "^9.6.0", - "globals": "^13.19.0", - "ignore": "^5.2.0", - "import-fresh": "^3.2.1", - "js-yaml": "^4.1.0", - "minimatch": "^3.1.2", - "strip-json-comments": "^3.1.1" - }, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - }, - "funding": { - "url": "https://opencollective.com/eslint" - } - }, - "node_modules/@eslint/eslintrc/node_modules/ajv": { - "version": "6.12.6", - "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz", - "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", - "dev": true, - "dependencies": { - "fast-deep-equal": "^3.1.1", - "fast-json-stable-stringify": "^2.0.0", - "json-schema-traverse": "^0.4.1", - "uri-js": "^4.2.2" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/epoberezkin" - } - }, - "node_modules/@eslint/eslintrc/node_modules/globals": { - "version": "13.24.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz", - "integrity": "sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==", - "dev": true, - "dependencies": { - "type-fest": "^0.20.2" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/@eslint/eslintrc/node_modules/json-schema-traverse": { - "version": "0.4.1", - "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz", - "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==", - "dev": true - }, - "node_modules/@eslint/eslintrc/node_modules/type-fest": { - "version": "0.20.2", - "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz", - "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==", - "dev": true, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/@eslint/js": { - "version": "8.57.0", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.57.0.tgz", - "integrity": "sha512-Ys+3g2TaW7gADOJzPt83SJtCDhMjndcDMFVQ/Tj9iA1BfJzFKD9mAUXT3OenpuPHbI6P/myECxRJrofUsDx/5g==", - "dev": true, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - } - }, - "node_modules/@floating-ui/core": { - "version": "1.6.0", - "resolved": "https://registry.npmjs.org/@floating-ui/core/-/core-1.6.0.tgz", - "integrity": "sha512-PcF++MykgmTj3CIyOQbKA/hDzOAiqI3mhuoN44WRCopIs1sgoDoU4oty4Jtqaj/y3oDU6fnVSm4QG0a3t5i0+g==", - "dependencies": { - "@floating-ui/utils": "^0.2.1" - } - }, - "node_modules/@floating-ui/dom": { - "version": "1.6.3", - "resolved": "https://registry.npmjs.org/@floating-ui/dom/-/dom-1.6.3.tgz", - "integrity": "sha512-RnDthu3mzPlQ31Ss/BTwQ1zjzIhr3lk1gZB1OC56h/1vEtaXkESrOqL5fQVMfXpwGtRwX+YsZBdyHtJMQnkArw==", - "dependencies": { - "@floating-ui/core": "^1.0.0", - "@floating-ui/utils": "^0.2.0" - } - }, - "node_modules/@floating-ui/utils": { - "version": "0.2.1", - "resolved": "https://registry.npmjs.org/@floating-ui/utils/-/utils-0.2.1.tgz", - "integrity": "sha512-9TANp6GPoMtYzQdt54kfAyMmz1+osLlXdg2ENroU7zzrtflTLrrC/lgrIfaSe+Wu0b89GKccT7vxXA0MoAIO+Q==" - }, - "node_modules/@fortawesome/fontawesome-common-types": { - "version": "6.5.1", - "resolved": "https://registry.npmjs.org/@fortawesome/fontawesome-common-types/-/fontawesome-common-types-6.5.1.tgz", - "integrity": "sha512-GkWzv+L6d2bI5f/Vk6ikJ9xtl7dfXtoRu3YGE6nq0p/FFqA1ebMOAWg3XgRyb0I6LYyYkiAo+3/KrwuBp8xG7A==", - "hasInstallScript": true, - "engines": { - "node": ">=6" - } - }, - "node_modules/@fortawesome/fontawesome-svg-core": { - "version": "6.5.1", - "resolved": "https://registry.npmjs.org/@fortawesome/fontawesome-svg-core/-/fontawesome-svg-core-6.5.1.tgz", - "integrity": "sha512-MfRCYlQPXoLlpem+egxjfkEuP9UQswTrlCOsknus/NcMoblTH2g0jPrapbcIb04KGA7E2GZxbAccGZfWoYgsrQ==", - "hasInstallScript": true, - "dependencies": { - "@fortawesome/fontawesome-common-types": "6.5.1" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/@fortawesome/free-brands-svg-icons": { - "version": "6.5.1", - "resolved": "https://registry.npmjs.org/@fortawesome/free-brands-svg-icons/-/free-brands-svg-icons-6.5.1.tgz", - "integrity": "sha512-093l7DAkx0aEtBq66Sf19MgoZewv1zeY9/4C7vSKPO4qMwEsW/2VYTUTpBtLwfb9T2R73tXaRDPmE4UqLCYHfg==", - "hasInstallScript": true, - "dependencies": { - "@fortawesome/fontawesome-common-types": "6.5.1" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/@fortawesome/free-regular-svg-icons": { - "version": "6.5.1", - "resolved": "https://registry.npmjs.org/@fortawesome/free-regular-svg-icons/-/free-regular-svg-icons-6.5.1.tgz", - "integrity": "sha512-m6ShXn+wvqEU69wSP84coxLbNl7sGVZb+Ca+XZq6k30SzuP3X4TfPqtycgUh9ASwlNh5OfQCd8pDIWxl+O+LlQ==", - "hasInstallScript": true, - "dependencies": { - "@fortawesome/fontawesome-common-types": "6.5.1" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/@fortawesome/free-solid-svg-icons": { - "version": "6.5.1", - "resolved": "https://registry.npmjs.org/@fortawesome/free-solid-svg-icons/-/free-solid-svg-icons-6.5.1.tgz", - "integrity": "sha512-S1PPfU3mIJa59biTtXJz1oI0+KAXW6bkAb31XKhxdxtuXDiUIFsih4JR1v5BbxY7hVHsD1RKq+jRkVRaf773NQ==", - "hasInstallScript": true, - "dependencies": { - "@fortawesome/fontawesome-common-types": "6.5.1" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/@fortawesome/react-fontawesome": { - "version": "0.2.0", - "resolved": "https://registry.npmjs.org/@fortawesome/react-fontawesome/-/react-fontawesome-0.2.0.tgz", - "integrity": "sha512-uHg75Rb/XORTtVt7OS9WoK8uM276Ufi7gCzshVWkUJbHhh3svsUUeqXerrM96Wm7fRiDzfKRwSoahhMIkGAYHw==", - "dependencies": { - "prop-types": "^15.8.1" - }, - "peerDependencies": { - "@fortawesome/fontawesome-svg-core": "~1 || ~6", - "react": ">=16.3" - } - }, - "node_modules/@humanwhocodes/config-array": { - "version": "0.11.14", - "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.11.14.tgz", - "integrity": "sha512-3T8LkOmg45BV5FICb15QQMsyUSWrQ8AygVfC7ZG32zOalnqrilm018ZVCw0eapXux8FtA33q8PSRSstjee3jSg==", - "dev": true, - "dependencies": { - "@humanwhocodes/object-schema": "^2.0.2", - "debug": "^4.3.1", - "minimatch": "^3.0.5" - }, - "engines": { - "node": ">=10.10.0" - } - }, - "node_modules/@humanwhocodes/module-importer": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz", - "integrity": "sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==", - "dev": true, - "engines": { - "node": ">=12.22" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/nzakas" - } - }, - "node_modules/@humanwhocodes/object-schema": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/@humanwhocodes/object-schema/-/object-schema-2.0.2.tgz", - "integrity": "sha512-6EwiSjwWYP7pTckG6I5eyFANjPhmPjUX9JRLUSfNPC7FX7zK9gyZAfUEaECL6ALTpGX5AjnBq3C9XmVWPitNpw==", - "dev": true - }, - "node_modules/@jridgewell/gen-mapping": { - "version": "0.3.5", - "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.5.tgz", - "integrity": "sha512-IzL8ZoEDIBRWEzlCcRhOaCupYyN5gdIK+Q6fbFdPDg6HqX6jpkItn7DFIpW9LQzXG6Df9sA7+OKnq0qlz/GaQg==", - "dependencies": { - "@jridgewell/set-array": "^1.2.1", - "@jridgewell/sourcemap-codec": "^1.4.10", - "@jridgewell/trace-mapping": "^0.3.24" - }, - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@jridgewell/resolve-uri": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", - "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@jridgewell/set-array": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.2.1.tgz", - "integrity": "sha512-R8gLRTZeyp03ymzP/6Lil/28tGeGEzhx1q2k703KGWRAI1VdvPIXdG70VJc2pAMw3NA6JKL5hhFu1sJX0Mnn/A==", - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@jridgewell/source-map": { - "version": "0.3.6", - "resolved": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.6.tgz", - "integrity": "sha512-1ZJTZebgqllO79ue2bm3rIGud/bOe0pP5BjSRCRxxYkEZS8STV7zN84UBbiYu7jy+eCKSnVIUgoWWE/tt+shMQ==", - "peer": true, - "dependencies": { - "@jridgewell/gen-mapping": "^0.3.5", - "@jridgewell/trace-mapping": "^0.3.25" - } - }, - "node_modules/@jridgewell/sourcemap-codec": { - "version": "1.4.15", - "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.15.tgz", - "integrity": "sha512-eF2rxCRulEKXHTRiDrDy6erMYWqNw4LPdQ8UQA4huuxaQsVeRPFl2oM8oDGxMFhJUWZf9McpLtJasDDZb/Bpeg==" - }, - "node_modules/@jridgewell/trace-mapping": { - "version": "0.3.25", - "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.25.tgz", - "integrity": "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ==", - "dependencies": { - "@jridgewell/resolve-uri": "^3.1.0", - "@jridgewell/sourcemap-codec": "^1.4.14" - } - }, - "node_modules/@juggle/resize-observer": { - "version": "3.4.0", - "resolved": "https://registry.npmjs.org/@juggle/resize-observer/-/resize-observer-3.4.0.tgz", - "integrity": "sha512-dfLbk+PwWvFzSxwk3n5ySL0hfBog779o8h68wK/7/APo/7cgyWp5jcXockbxdk5kFRkbeXWm4Fbi9FrdN381sA==" - }, - "node_modules/@monaco-editor/loader": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/@monaco-editor/loader/-/loader-1.4.0.tgz", - "integrity": "sha512-00ioBig0x642hytVspPl7DbQyaSWRaolYie/UFNjoTdvoKPzo6xrXLhTk9ixgIKcLH5b5vDOjVNiGyY+uDCUlg==", - "dependencies": { - "state-local": "^1.0.6" - }, - "peerDependencies": { - "monaco-editor": ">= 0.21.0 < 1" - } - }, - "node_modules/@monaco-editor/react": { - "version": "4.6.0", - "resolved": "https://registry.npmjs.org/@monaco-editor/react/-/react-4.6.0.tgz", - "integrity": "sha512-RFkU9/i7cN2bsq/iTkurMWOEErmYcY6JiQI3Jn+WeR/FGISH8JbHERjpS9oRuSOPvDMJI0Z8nJeKkbOs9sBYQw==", - "dependencies": { - "@monaco-editor/loader": "^1.4.0" - }, - "peerDependencies": { - "monaco-editor": ">= 0.25.0 < 1", - "react": "^16.8.0 || ^17.0.0 || ^18.0.0", - "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0" - } - }, - "node_modules/@nodelib/fs.scandir": { - "version": "2.1.5", - "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz", - "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==", - "dev": true, - "dependencies": { - "@nodelib/fs.stat": "2.0.5", - "run-parallel": "^1.1.9" - }, - "engines": { - "node": ">= 8" - } - }, - "node_modules/@nodelib/fs.stat": { - "version": "2.0.5", - "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz", - "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==", - "dev": true, - "engines": { - "node": ">= 8" - } - }, - "node_modules/@nodelib/fs.walk": { - "version": "1.2.8", - "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz", - "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==", - "dev": true, - "dependencies": { - "@nodelib/fs.scandir": "2.1.5", - "fastq": "^1.6.0" - }, - "engines": { - "node": ">= 8" - } - }, - "node_modules/@popperjs/core": { - "version": "2.11.8", - "resolved": "https://registry.npmjs.org/@popperjs/core/-/core-2.11.8.tgz", - "integrity": "sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A==", - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/popperjs" - } - }, - "node_modules/@react-icons/all-files": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/@react-icons/all-files/-/all-files-4.1.0.tgz", - "integrity": "sha512-hxBI2UOuVaI3O/BhQfhtb4kcGn9ft12RWAFVMUeNjqqhLsHvFtzIkFaptBJpFDANTKoDfdVoHTKZDlwKCACbMQ==", - "peerDependencies": { - "react": "*" - } - }, - "node_modules/@reduxjs/toolkit": { - "version": "1.9.7", - "resolved": "https://registry.npmjs.org/@reduxjs/toolkit/-/toolkit-1.9.7.tgz", - "integrity": "sha512-t7v8ZPxhhKgOKtU+uyJT13lu4vL7az5aFi4IdoDs/eS548edn2M8Ik9h8fxgvMjGoAUVFSt6ZC1P5cWmQ014QQ==", - "dependencies": { - "immer": "^9.0.21", - "redux": "^4.2.1", - "redux-thunk": "^2.4.2", - "reselect": "^4.1.8" - }, - "peerDependencies": { - "react": "^16.9.0 || ^17.0.0 || ^18", - "react-redux": "^7.2.1 || ^8.0.2" - }, - "peerDependenciesMeta": { - "react": { - "optional": true - }, - "react-redux": { - "optional": true - } - } - }, - "node_modules/@reduxjs/toolkit/node_modules/redux": { - "version": "4.2.1", - "resolved": "https://registry.npmjs.org/redux/-/redux-4.2.1.tgz", - "integrity": "sha512-LAUYz4lc+Do8/g7aeRa8JkyDErK6ekstQaqWQrNRW//MY1TvCEpMtpTWvlQ+FPbWCx+Xixu/6SHt5N0HR+SB4w==", - "dependencies": { - "@babel/runtime": "^7.9.2" - } - }, - "node_modules/@remix-run/router": { - "version": "1.15.3", - "resolved": "https://registry.npmjs.org/@remix-run/router/-/router-1.15.3.tgz", - "integrity": "sha512-Oy8rmScVrVxWZVOpEF57ovlnhpZ8CCPlnIIumVcV9nFdiSIrus99+Lw78ekXyGvVDlIsFJbSfmSovJUhCWYV3w==", - "engines": { - "node": ">=14.0.0" - } - }, - "node_modules/@restart/context": { - "version": "2.1.4", - "resolved": "https://registry.npmjs.org/@restart/context/-/context-2.1.4.tgz", - "integrity": "sha512-INJYZQJP7g+IoDUh/475NlGiTeMfwTXUEr3tmRneckHIxNolGOW9CTq83S8cxq0CgJwwcMzMJFchxvlwe7Rk8Q==", - "peerDependencies": { - "react": ">=16.3.2" - } - }, - "node_modules/@restart/hooks": { - "version": "0.4.16", - "resolved": "https://registry.npmjs.org/@restart/hooks/-/hooks-0.4.16.tgz", - "integrity": "sha512-f7aCv7c+nU/3mF7NWLtVVr0Ra80RqsO89hO72r+Y/nvQr5+q0UFGkocElTH6MJApvReVh6JHUFYn2cw1WdHF3w==", - "dependencies": { - "dequal": "^2.0.3" - }, - "peerDependencies": { - "react": ">=16.8.0" - } - }, - "node_modules/@rjsf/bootstrap-4": { - "version": "5.17.1", - "resolved": "https://registry.npmjs.org/@rjsf/bootstrap-4/-/bootstrap-4-5.17.1.tgz", - "integrity": "sha512-23NZ5qB0eYmJRY1UgI66mTAp4lyGXSgduyr7UX35fsBFy91CzP/FozL1P/muRcEslRqBJhDgrWbMdw99eLSO1w==", - "dependencies": { - "@react-icons/all-files": "^4.1.0" - }, - "engines": { - "node": ">=14" - }, - "peerDependencies": { - "@rjsf/core": "^5.16.x", - "@rjsf/utils": "^5.16.x", - "react": "^16.14.0 || >=17", - "react-bootstrap": "^1.6.5" - } - }, - "node_modules/@rjsf/core": { - "version": "5.17.1", - "resolved": "https://registry.npmjs.org/@rjsf/core/-/core-5.17.1.tgz", - "integrity": "sha512-COZSuumwHskWN8Pz3RxdxvuQUP6M/qBMXAkIi+TSWLFLaF6SUugpLiceMT1jGemDCr7fOSTiPxjkToSsgpvueQ==", - "dependencies": { - "lodash": "^4.17.21", - "lodash-es": "^4.17.21", - "markdown-to-jsx": "^7.4.1", - "nanoid": "^3.3.7", - "prop-types": "^15.8.1" - }, - "engines": { - "node": ">=14" - }, - "peerDependencies": { - "@rjsf/utils": "^5.16.x", - "react": "^16.14.0 || >=17" - } - }, - "node_modules/@rjsf/utils": { - "version": "5.17.1", - "resolved": "https://registry.npmjs.org/@rjsf/utils/-/utils-5.17.1.tgz", - "integrity": "sha512-q1Igz/cuM2hi+jiXFkoaXqdRTUFB+a0jfVKNmZlHmvPmfYeeJfcfyOTzO8dQ41fHNHUFb15ryxa/TblDQimwkA==", - "dependencies": { - "json-schema-merge-allof": "^0.8.1", - "jsonpointer": "^5.0.1", - "lodash": "^4.17.21", - "lodash-es": "^4.17.21", - "react-is": "^18.2.0" - }, - "engines": { - "node": ">=14" - }, - "peerDependencies": { - "react": "^16.14.0 || >=17" - } - }, - "node_modules/@rjsf/validator-ajv8": { - "version": "5.17.1", - "resolved": "https://registry.npmjs.org/@rjsf/validator-ajv8/-/validator-ajv8-5.17.1.tgz", - "integrity": "sha512-KdvHsjDQ60b04fqnoqhfkiCv7E4n4NIHli8QU8dtpuUAVS/TOqDuOtDJVz6bv/rd/QNROGpxlO/OCccE0rmxLQ==", - "dependencies": { - "ajv": "^8.12.0", - "ajv-formats": "^2.1.1", - "lodash": "^4.17.21", - "lodash-es": "^4.17.21" - }, - "engines": { - "node": ">=14" - }, - "peerDependencies": { - "@rjsf/utils": "^5.16.x" - } - }, - "node_modules/@rollup/pluginutils": { - "version": "4.2.1", - "resolved": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-4.2.1.tgz", - "integrity": "sha512-iKnFXr7NkdZAIHiIWE+BX5ULi/ucVFYWD6TbAV+rZctiRTY2PL6tsIKhoIOaoskiWAkgu+VsbXgUVDNLHf+InQ==", - "dev": true, - "dependencies": { - "estree-walker": "^2.0.1", - "picomatch": "^2.2.2" - }, - "engines": { - "node": ">= 8.0.0" - } - }, - "node_modules/@rollup/rollup-android-arm-eabi": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.13.0.tgz", - "integrity": "sha512-5ZYPOuaAqEH/W3gYsRkxQATBW3Ii1MfaT4EQstTnLKViLi2gLSQmlmtTpGucNP3sXEpOiI5tdGhjdE111ekyEg==", - "cpu": [ - "arm" - ], - "dev": true, - "optional": true, - "os": [ - "android" - ] - }, - "node_modules/@rollup/rollup-android-arm64": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.13.0.tgz", - "integrity": "sha512-BSbaCmn8ZadK3UAQdlauSvtaJjhlDEjS5hEVVIN3A4bbl3X+otyf/kOJV08bYiRxfejP3DXFzO2jz3G20107+Q==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "android" - ] - }, - "node_modules/@rollup/rollup-darwin-arm64": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.13.0.tgz", - "integrity": "sha512-Ovf2evVaP6sW5Ut0GHyUSOqA6tVKfrTHddtmxGQc1CTQa1Cw3/KMCDEEICZBbyppcwnhMwcDce9ZRxdWRpVd6g==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "darwin" - ] - }, - "node_modules/@rollup/rollup-darwin-x64": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.13.0.tgz", - "integrity": "sha512-U+Jcxm89UTK592vZ2J9st9ajRv/hrwHdnvyuJpa5A2ngGSVHypigidkQJP+YiGL6JODiUeMzkqQzbCG3At81Gg==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "darwin" - ] - }, - "node_modules/@rollup/rollup-linux-arm-gnueabihf": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.13.0.tgz", - "integrity": "sha512-8wZidaUJUTIR5T4vRS22VkSMOVooG0F4N+JSwQXWSRiC6yfEsFMLTYRFHvby5mFFuExHa/yAp9juSphQQJAijQ==", - "cpu": [ - "arm" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@rollup/rollup-linux-arm64-gnu": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.13.0.tgz", - "integrity": "sha512-Iu0Kno1vrD7zHQDxOmvweqLkAzjxEVqNhUIXBsZ8hu8Oak7/5VTPrxOEZXYC1nmrBVJp0ZcL2E7lSuuOVaE3+w==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@rollup/rollup-linux-arm64-musl": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.13.0.tgz", - "integrity": "sha512-C31QrW47llgVyrRjIwiOwsHFcaIwmkKi3PCroQY5aVq4H0A5v/vVVAtFsI1nfBngtoRpeREvZOkIhmRwUKkAdw==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@rollup/rollup-linux-riscv64-gnu": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.13.0.tgz", - "integrity": "sha512-Oq90dtMHvthFOPMl7pt7KmxzX7E71AfyIhh+cPhLY9oko97Zf2C9tt/XJD4RgxhaGeAraAXDtqxvKE1y/j35lA==", - "cpu": [ - "riscv64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@rollup/rollup-linux-x64-gnu": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.13.0.tgz", - "integrity": "sha512-yUD/8wMffnTKuiIsl6xU+4IA8UNhQ/f1sAnQebmE/lyQ8abjsVyDkyRkWop0kdMhKMprpNIhPmYlCxgHrPoXoA==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@rollup/rollup-linux-x64-musl": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.13.0.tgz", - "integrity": "sha512-9RyNqoFNdF0vu/qqX63fKotBh43fJQeYC98hCaf89DYQpv+xu0D8QFSOS0biA7cGuqJFOc1bJ+m2rhhsKcw1hw==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@rollup/rollup-win32-arm64-msvc": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.13.0.tgz", - "integrity": "sha512-46ue8ymtm/5PUU6pCvjlic0z82qWkxv54GTJZgHrQUuZnVH+tvvSP0LsozIDsCBFO4VjJ13N68wqrKSeScUKdA==", - "cpu": [ - "arm64" - ], - "dev": true, - "optional": true, - "os": [ - "win32" - ] - }, - "node_modules/@rollup/rollup-win32-ia32-msvc": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.13.0.tgz", - "integrity": "sha512-P5/MqLdLSlqxbeuJ3YDeX37srC8mCflSyTrUsgbU1c/U9j6l2g2GiIdYaGD9QjdMQPMSgYm7hgg0551wHyIluw==", - "cpu": [ - "ia32" - ], - "dev": true, - "optional": true, - "os": [ - "win32" - ] - }, - "node_modules/@rollup/rollup-win32-x64-msvc": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.13.0.tgz", - "integrity": "sha512-UKXUQNbO3DOhzLRwHSpa0HnhhCgNODvfoPWv2FCXme8N/ANFfhIPMGuOT+QuKd16+B5yxZ0HdpNlqPvTMS1qfw==", - "cpu": [ - "x64" - ], - "dev": true, - "optional": true, - "os": [ - "win32" - ] - }, - "node_modules/@sinonjs/text-encoding": { - "version": "0.7.2", - "resolved": "https://registry.npmjs.org/@sinonjs/text-encoding/-/text-encoding-0.7.2.tgz", - "integrity": "sha512-sXXKG+uL9IrKqViTtao2Ws6dy0znu9sOaP1di/jKGW1M6VssO8vlpXCQcpZ+jisQ1tTFAC5Jo/EOzFbggBagFQ==" - }, - "node_modules/@types/babel__core": { - "version": "7.20.5", - "resolved": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz", - "integrity": "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==", - "dev": true, - "dependencies": { - "@babel/parser": "^7.20.7", - "@babel/types": "^7.20.7", - "@types/babel__generator": "*", - "@types/babel__template": "*", - "@types/babel__traverse": "*" - } - }, - "node_modules/@types/babel__generator": { - "version": "7.6.8", - "resolved": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.6.8.tgz", - "integrity": "sha512-ASsj+tpEDsEiFr1arWrlN6V3mdfjRMZt6LtK/Vp/kreFLnr5QH5+DhvD5nINYZXzwJvXeGq+05iUXcAzVrqWtw==", - "dev": true, - "dependencies": { - "@babel/types": "^7.0.0" - } - }, - "node_modules/@types/babel__template": { - "version": "7.4.4", - "resolved": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz", - "integrity": "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==", - "dev": true, - "dependencies": { - "@babel/parser": "^7.1.0", - "@babel/types": "^7.0.0" - } - }, - "node_modules/@types/babel__traverse": { - "version": "7.20.5", - "resolved": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.20.5.tgz", - "integrity": "sha512-WXCyOcRtH37HAUkpXhUduaxdm82b4GSlyTqajXviN4EfiuPgNYR109xMCKvpl6zPIpua0DGlMEDCq+g8EdoheQ==", - "dev": true, - "dependencies": { - "@babel/types": "^7.20.7" - } - }, - "node_modules/@types/eslint": { - "version": "8.56.5", - "resolved": "https://registry.npmjs.org/@types/eslint/-/eslint-8.56.5.tgz", - "integrity": "sha512-u5/YPJHo1tvkSF2CE0USEkxon82Z5DBy2xR+qfyYNszpX9qcs4sT6uq2kBbj4BXY1+DBGDPnrhMZV3pKWGNukw==", - "dependencies": { - "@types/estree": "*", - "@types/json-schema": "*" - } - }, - "node_modules/@types/eslint-scope": { - "version": "3.7.7", - "resolved": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.7.tgz", - "integrity": "sha512-MzMFlSLBqNF2gcHWO0G1vP/YQyfvrxZ0bF+u7mzUdZ1/xK4A4sru+nraZz5i3iEIk1l1uyicaDVTB4QbbEkAYg==", - "peer": true, - "dependencies": { - "@types/eslint": "*", - "@types/estree": "*" - } - }, - "node_modules/@types/estree": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.5.tgz", - "integrity": "sha512-/kYRxGDLWzHOB7q+wtSUQlFrtcdUccpfy+X+9iMBpHK8QLLhx2wIPYuS5DYtR9Wa/YlZAbIovy7qVdB1Aq6Lyw==" - }, - "node_modules/@types/hast": { - "version": "2.3.10", - "resolved": "https://registry.npmjs.org/@types/hast/-/hast-2.3.10.tgz", - "integrity": "sha512-McWspRw8xx8J9HurkVBfYj0xKoE25tOFlHGdx4MJ5xORQrMGZNqJhVQWaIbm6Oyla5kYOXtDiopzKRJzEOkwJw==", - "dependencies": { - "@types/unist": "^2" - } - }, - "node_modules/@types/hoist-non-react-statics": { - "version": "3.3.5", - "resolved": "https://registry.npmjs.org/@types/hoist-non-react-statics/-/hoist-non-react-statics-3.3.5.tgz", - "integrity": "sha512-SbcrWzkKBw2cdwRTwQAswfpB9g9LJWfjtUeW/jvNwbhC8cpmmNYVePa+ncbUe0rGTQ7G3Ff6mYUN2VMfLVr+Sg==", - "dependencies": { - "@types/react": "*", - "hoist-non-react-statics": "^3.3.0" - } - }, - "node_modules/@types/invariant": { - "version": "2.2.37", - "resolved": "https://registry.npmjs.org/@types/invariant/-/invariant-2.2.37.tgz", - "integrity": "sha512-IwpIMieE55oGWiXkQPSBY1nw1nFs6bsKXTFskNY8sdS17K24vyEBRQZEwlRS7ZmXCWnJcQtbxWzly+cODWGs2A==" - }, - "node_modules/@types/json-schema": { - "version": "7.0.15", - "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz", - "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==" - }, - "node_modules/@types/json5": { - "version": "0.0.29", - "resolved": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz", - "integrity": "sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==", - "dev": true - }, - "node_modules/@types/minimist": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@types/minimist/-/minimist-1.2.5.tgz", - "integrity": "sha512-hov8bUuiLiyFPGyFPE1lwWhmzYbirOXQNNo40+y3zow8aFVTeyn3VWL0VFFfdNddA8S4Vf0Tc062rzyNr7Paag==", - "dev": true - }, - "node_modules/@types/node": { - "version": "20.11.26", - "resolved": "https://registry.npmjs.org/@types/node/-/node-20.11.26.tgz", - "integrity": "sha512-YwOMmyhNnAWijOBQweOJnQPl068Oqd4K3OFbTc6AHJwzweUwwWG3GIFY74OKks2PJUDkQPeddOQES9mLn1CTEQ==", - "dependencies": { - "undici-types": "~5.26.4" - } - }, - "node_modules/@types/normalize-package-data": { - "version": "2.4.4", - "resolved": "https://registry.npmjs.org/@types/normalize-package-data/-/normalize-package-data-2.4.4.tgz", - "integrity": "sha512-37i+OaWTh9qeK4LSHPsyRC7NahnGotNuZvjLSgcPzblpHB3rrCJxAOgI5gCdKm7coonsaX1Of0ILiTcnZjbfxA==", - "dev": true - }, - "node_modules/@types/papaparse": { - "version": "5.3.14", - "resolved": "https://registry.npmjs.org/@types/papaparse/-/papaparse-5.3.14.tgz", - "integrity": "sha512-LxJ4iEFcpqc6METwp9f6BV6VVc43m6MfH0VqFosHvrUgfXiFe6ww7R3itkOQ+TCK6Y+Iv/+RnnvtRZnkc5Kc9g==", - "dependencies": { - "@types/node": "*" - } - }, - "node_modules/@types/parse-json": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/@types/parse-json/-/parse-json-4.0.2.tgz", - "integrity": "sha512-dISoDXWWQwUquiKsyZ4Ng+HX2KsPL7LyHKHQwgGFEA3IaKac4Obd+h2a/a6waisAoepJlBcx9paWqjA8/HVjCw==" - }, - "node_modules/@types/prop-types": { - "version": "15.7.11", - "resolved": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.11.tgz", - "integrity": "sha512-ga8y9v9uyeiLdpKddhxYQkxNDrfvuPrlFb0N1qnZZByvcElJaXthF1UhvCh9TLWJBEHeNtdnbysW7Y6Uq8CVng==" - }, - "node_modules/@types/raf": { - "version": "3.4.3", - "resolved": "https://registry.npmjs.org/@types/raf/-/raf-3.4.3.tgz", - "integrity": "sha512-c4YAvMedbPZ5tEyxzQdMoOhhJ4RD3rngZIdwC2/qDN3d7JpEhB6fiBRKVY1lg5B7Wk+uPBjn5f39j1/2MY1oOw==", - "optional": true - }, - "node_modules/@types/react": { - "version": "18.2.65", - "resolved": "https://registry.npmjs.org/@types/react/-/react-18.2.65.tgz", - "integrity": "sha512-98TsY0aW4jqx/3RqsUXwMDZSWR1Z4CUlJNue8ueS2/wcxZOsz4xmW1X8ieaWVRHcmmQM3R8xVA4XWB3dJnWwDQ==", - "dependencies": { - "@types/prop-types": "*", - "@types/scheduler": "*", - "csstype": "^3.0.2" - } - }, - "node_modules/@types/react-helmet": { - "version": "6.1.11", - "resolved": "https://registry.npmjs.org/@types/react-helmet/-/react-helmet-6.1.11.tgz", - "integrity": "sha512-0QcdGLddTERotCXo3VFlUSWO3ztraw8nZ6e3zJSgG7apwV5xt+pJUS8ewPBqT4NYB1optGLprNQzFleIY84u/g==", - "dev": true, - "dependencies": { - "@types/react": "*" - } - }, - "node_modules/@types/react-redux": { - "version": "7.1.33", - "resolved": "https://registry.npmjs.org/@types/react-redux/-/react-redux-7.1.33.tgz", - "integrity": "sha512-NF8m5AjWCkert+fosDsN3hAlHzpjSiXlVy9EgQEmLoBhaNXbmyeGs/aj5dQzKuF+/q+S7JQagorGDW8pJ28Hmg==", - "dependencies": { - "@types/hoist-non-react-statics": "^3.3.0", - "@types/react": "*", - "hoist-non-react-statics": "^3.3.0", - "redux": "^4.0.0" - } - }, - "node_modules/@types/react-transition-group": { - "version": "4.4.10", - "resolved": "https://registry.npmjs.org/@types/react-transition-group/-/react-transition-group-4.4.10.tgz", - "integrity": "sha512-hT/+s0VQs2ojCX823m60m5f0sL5idt9SO6Tj6Dg+rdphGPIeJbJ6CxvBYkgkGKrYeDjvIpKTR38UzmtHJOGW3Q==", - "dependencies": { - "@types/react": "*" - } - }, - "node_modules/@types/scheduler": { - "version": "0.16.8", - "resolved": "https://registry.npmjs.org/@types/scheduler/-/scheduler-0.16.8.tgz", - "integrity": "sha512-WZLiwShhwLRmeV6zH+GkbOFT6Z6VklCItrDioxUnv+u4Ll+8vKeFySoFyK/0ctcRpOmwAicELfmys1sDc/Rw+A==" - }, - "node_modules/@types/unist": { - "version": "2.0.10", - "resolved": "https://registry.npmjs.org/@types/unist/-/unist-2.0.10.tgz", - "integrity": "sha512-IfYcSBWE3hLpBg8+X2SEa8LVkJdJEkT2Ese2aaLs3ptGdVtABxndrMaxuFlQ1qdFf9Q5rDvDpxI3WwgvKFAsQA==" - }, - "node_modules/@types/warning": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/@types/warning/-/warning-3.0.3.tgz", - "integrity": "sha512-D1XC7WK8K+zZEveUPY+cf4+kgauk8N4eHr/XIHXGlGYkHLud6hK9lYfZk1ry1TNh798cZUCgb6MqGEG8DkJt6Q==" - }, - "node_modules/@uiw/react-json-view": { - "version": "2.0.0-alpha.23", - "resolved": "https://registry.npmjs.org/@uiw/react-json-view/-/react-json-view-2.0.0-alpha.23.tgz", - "integrity": "sha512-GT0fy/K7+xSsfhvV4PVx2qPRomr/RjzFnerCjglfTYX0oEjFe9S2UwnhqOBaSHrfaCL6ccALZ2c+qV73eqop9Q==", - "funding": { - "url": "https://jaywcjlove.github.io/#/sponsor" - }, - "peerDependencies": { - "@babel/runtime": ">=7.10.0", - "react": ">=18.0.0", - "react-dom": ">=18.0.0" - } - }, - "node_modules/@ungap/structured-clone": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.2.0.tgz", - "integrity": "sha512-zuVdFrMJiuCDQUMCzQaD6KL28MjnqqN8XnAqiEq9PNm/hCPTSGfrXCOfwj1ow4LFb/tNymJPwsNbVePc1xFqrQ==", - "dev": true - }, - "node_modules/@vitejs/plugin-react": { - "version": "4.2.1", - "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-4.2.1.tgz", - "integrity": "sha512-oojO9IDc4nCUUi8qIR11KoQm0XFFLIwsRBwHRR4d/88IWghn1y6ckz/bJ8GHDCsYEJee8mDzqtJxh15/cisJNQ==", - "dev": true, - "dependencies": { - "@babel/core": "^7.23.5", - "@babel/plugin-transform-react-jsx-self": "^7.23.3", - "@babel/plugin-transform-react-jsx-source": "^7.23.3", - "@types/babel__core": "^7.20.5", - "react-refresh": "^0.14.0" - }, - "engines": { - "node": "^14.18.0 || >=16.0.0" - }, - "peerDependencies": { - "vite": "^4.2.0 || ^5.0.0" - } - }, - "node_modules/@webassemblyjs/ast": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.6.tgz", - "integrity": "sha512-IN1xI7PwOvLPgjcf180gC1bqn3q/QaOCwYUahIOhbYUu8KA/3tw2RT/T0Gidi1l7Hhj5D/INhJxiICObqpMu4Q==", - "peer": true, - "dependencies": { - "@webassemblyjs/helper-numbers": "1.11.6", - "@webassemblyjs/helper-wasm-bytecode": "1.11.6" - } - }, - "node_modules/@webassemblyjs/floating-point-hex-parser": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.11.6.tgz", - "integrity": "sha512-ejAj9hfRJ2XMsNHk/v6Fu2dGS+i4UaXBXGemOfQ/JfQ6mdQg/WXtwleQRLLS4OvfDhv8rYnVwH27YJLMyYsxhw==", - "peer": true - }, - "node_modules/@webassemblyjs/helper-api-error": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.11.6.tgz", - "integrity": "sha512-o0YkoP4pVu4rN8aTJgAyj9hC2Sv5UlkzCHhxqWj8butaLvnpdc2jOwh4ewE6CX0txSfLn/UYaV/pheS2Txg//Q==", - "peer": true - }, - "node_modules/@webassemblyjs/helper-buffer": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.11.6.tgz", - "integrity": "sha512-z3nFzdcp1mb8nEOFFk8DrYLpHvhKC3grJD2ardfKOzmbmJvEf/tPIqCY+sNcwZIY8ZD7IkB2l7/pqhUhqm7hLA==", - "peer": true - }, - "node_modules/@webassemblyjs/helper-numbers": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.11.6.tgz", - "integrity": "sha512-vUIhZ8LZoIWHBohiEObxVm6hwP034jwmc9kuq5GdHZH0wiLVLIPcMCdpJzG4C11cHoQ25TFIQj9kaVADVX7N3g==", - "peer": true, - "dependencies": { - "@webassemblyjs/floating-point-hex-parser": "1.11.6", - "@webassemblyjs/helper-api-error": "1.11.6", - "@xtuc/long": "4.2.2" - } - }, - "node_modules/@webassemblyjs/helper-wasm-bytecode": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.11.6.tgz", - "integrity": "sha512-sFFHKwcmBprO9e7Icf0+gddyWYDViL8bpPjJJl0WHxCdETktXdmtWLGVzoHbqUcY4Be1LkNfwTmXOJUFZYSJdA==", - "peer": true - }, - "node_modules/@webassemblyjs/helper-wasm-section": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.11.6.tgz", - "integrity": "sha512-LPpZbSOwTpEC2cgn4hTydySy1Ke+XEu+ETXuoyvuyezHO3Kjdu90KK95Sh9xTbmjrCsUwvWwCOQQNta37VrS9g==", - "peer": true, - "dependencies": { - "@webassemblyjs/ast": "1.11.6", - "@webassemblyjs/helper-buffer": "1.11.6", - "@webassemblyjs/helper-wasm-bytecode": "1.11.6", - "@webassemblyjs/wasm-gen": "1.11.6" - } - }, - "node_modules/@webassemblyjs/ieee754": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.11.6.tgz", - "integrity": "sha512-LM4p2csPNvbij6U1f19v6WR56QZ8JcHg3QIJTlSwzFcmx6WSORicYj6I63f9yU1kEUtrpG+kjkiIAkevHpDXrg==", - "peer": true, - "dependencies": { - "@xtuc/ieee754": "^1.2.0" - } - }, - "node_modules/@webassemblyjs/leb128": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.11.6.tgz", - "integrity": "sha512-m7a0FhE67DQXgouf1tbN5XQcdWoNgaAuoULHIfGFIEVKA6tu/edls6XnIlkmS6FrXAquJRPni3ZZKjw6FSPjPQ==", - "peer": true, - "dependencies": { - "@xtuc/long": "4.2.2" - } - }, - "node_modules/@webassemblyjs/utf8": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.11.6.tgz", - "integrity": "sha512-vtXf2wTQ3+up9Zsg8sa2yWiQpzSsMyXj0qViVP6xKGCUT8p8YJ6HqI7l5eCnWx1T/FYdsv07HQs2wTFbbof/RA==", - "peer": true - }, - "node_modules/@webassemblyjs/wasm-edit": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.11.6.tgz", - "integrity": "sha512-Ybn2I6fnfIGuCR+Faaz7YcvtBKxvoLV3Lebn1tM4o/IAJzmi9AWYIPWpyBfU8cC+JxAO57bk4+zdsTjJR+VTOw==", - "peer": true, - "dependencies": { - "@webassemblyjs/ast": "1.11.6", - "@webassemblyjs/helper-buffer": "1.11.6", - "@webassemblyjs/helper-wasm-bytecode": "1.11.6", - "@webassemblyjs/helper-wasm-section": "1.11.6", - "@webassemblyjs/wasm-gen": "1.11.6", - "@webassemblyjs/wasm-opt": "1.11.6", - "@webassemblyjs/wasm-parser": "1.11.6", - "@webassemblyjs/wast-printer": "1.11.6" - } - }, - "node_modules/@webassemblyjs/wasm-gen": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.11.6.tgz", - "integrity": "sha512-3XOqkZP/y6B4F0PBAXvI1/bky7GryoogUtfwExeP/v7Nzwo1QLcq5oQmpKlftZLbT+ERUOAZVQjuNVak6UXjPA==", - "peer": true, - "dependencies": { - "@webassemblyjs/ast": "1.11.6", - "@webassemblyjs/helper-wasm-bytecode": "1.11.6", - "@webassemblyjs/ieee754": "1.11.6", - "@webassemblyjs/leb128": "1.11.6", - "@webassemblyjs/utf8": "1.11.6" - } - }, - "node_modules/@webassemblyjs/wasm-opt": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.6.tgz", - "integrity": "sha512-cOrKuLRE7PCe6AsOVl7WasYf3wbSo4CeOk6PkrjS7g57MFfVUF9u6ysQBBODX0LdgSvQqRiGz3CXvIDKcPNy4g==", - "peer": true, - "dependencies": { - "@webassemblyjs/ast": "1.11.6", - "@webassemblyjs/helper-buffer": "1.11.6", - "@webassemblyjs/wasm-gen": "1.11.6", - "@webassemblyjs/wasm-parser": "1.11.6" - } - }, - "node_modules/@webassemblyjs/wasm-parser": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.11.6.tgz", - "integrity": "sha512-6ZwPeGzMJM3Dqp3hCsLgESxBGtT/OeCvCZ4TA1JUPYgmhAx38tTPR9JaKy0S5H3evQpO/h2uWs2j6Yc/fjkpTQ==", - "peer": true, - "dependencies": { - "@webassemblyjs/ast": "1.11.6", - "@webassemblyjs/helper-api-error": "1.11.6", - "@webassemblyjs/helper-wasm-bytecode": "1.11.6", - "@webassemblyjs/ieee754": "1.11.6", - "@webassemblyjs/leb128": "1.11.6", - "@webassemblyjs/utf8": "1.11.6" - } - }, - "node_modules/@webassemblyjs/wast-printer": { - "version": "1.11.6", - "resolved": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.11.6.tgz", - "integrity": "sha512-JM7AhRcE+yW2GWYaKeHL5vt4xqee5N2WcezptmgyhNS+ScggqcT1OtXykhAb13Sn5Yas0j2uv9tHgrjwvzAP4A==", - "peer": true, - "dependencies": { - "@webassemblyjs/ast": "1.11.6", - "@xtuc/long": "4.2.2" - } - }, - "node_modules/@xtuc/ieee754": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz", - "integrity": "sha512-DX8nKgqcGwsc0eJSqYt5lwP4DH5FlHnmuWWBRy7X0NcaGR0ZtuyeESgMwTYVEtxmsNGY+qit4QYT/MIYTOTPeA==", - "peer": true - }, - "node_modules/@xtuc/long": { - "version": "4.2.2", - "resolved": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz", - "integrity": "sha512-NuHqBY1PB/D8xU6s/thBgOAiAP7HOYDQ32+BFZILJ8ivkUkAHQnWfn6WhL79Owj1qmUnoN/YPhktdIoucipkAQ==", - "peer": true - }, - "node_modules/abab": { - "version": "2.0.6", - "resolved": "https://registry.npmjs.org/abab/-/abab-2.0.6.tgz", - "integrity": "sha512-j2afSsaIENvHZN2B8GOpF566vZ5WVk5opAiMTvWgaQT8DkbOqsTfvNAvHoRGU2zzP8cPoqys+xHTRDWW8L+/BA==", - "deprecated": "Use your platform's native atob() and btoa() methods instead" - }, - "node_modules/acorn": { - "version": "8.11.3", - "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.11.3.tgz", - "integrity": "sha512-Y9rRfJG5jcKOE0CLisYbojUjIrIEE7AGMzA/Sm4BslANhbS+cDMpgBdcPT91oJ7OuJ9hYJBx59RjbhxVnrF8Xg==", - "bin": { - "acorn": "bin/acorn" - }, - "engines": { - "node": ">=0.4.0" - } - }, - "node_modules/acorn-import-assertions": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/acorn-import-assertions/-/acorn-import-assertions-1.9.0.tgz", - "integrity": "sha512-cmMwop9x+8KFhxvKrKfPYmN6/pKTYYHBqLa0DfvVZcKMJWNyWLnaqND7dx/qn66R7ewM1UX5XMaDVP5wlVTaVA==", - "peer": true, - "peerDependencies": { - "acorn": "^8" - } - }, - "node_modules/acorn-jsx": { - "version": "5.3.2", - "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz", - "integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==", - "dev": true, - "peerDependencies": { - "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0" - } - }, - "node_modules/ajv": { - "version": "8.12.0", - "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.12.0.tgz", - "integrity": "sha512-sRu1kpcO9yLtYxBKvqfTeh9KzZEwO3STyX1HT+4CaDzC6HpTGYhIhPIzj9XuKU7KYDwnaeh5hcOwjy1QuJzBPA==", - "dependencies": { - "fast-deep-equal": "^3.1.1", - "json-schema-traverse": "^1.0.0", - "require-from-string": "^2.0.2", - "uri-js": "^4.2.2" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/epoberezkin" - } - }, - "node_modules/ajv-formats": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", - "integrity": "sha512-Wx0Kx52hxE7C18hkMEggYlEifqWZtYaRgouJor+WMdPnQyEK13vgEWyVNup7SoeeoLMsr4kf5h6dOW11I15MUA==", - "dependencies": { - "ajv": "^8.0.0" - }, - "peerDependencies": { - "ajv": "^8.0.0" - }, - "peerDependenciesMeta": { - "ajv": { - "optional": true - } - } - }, - "node_modules/ansi-regex": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", - "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/ansi-styles": { - "version": "3.2.1", - "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz", - "integrity": "sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==", - "dependencies": { - "color-convert": "^1.9.0" - }, - "engines": { - "node": ">=4" - } - }, - "node_modules/anymatch": { - "version": "3.1.3", - "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz", - "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==", - "dev": true, - "dependencies": { - "normalize-path": "^3.0.0", - "picomatch": "^2.0.4" - }, - "engines": { - "node": ">= 8" - } - }, - "node_modules/argparse": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz", - "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==", - "dev": true - }, - "node_modules/array-buffer-byte-length": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/array-buffer-byte-length/-/array-buffer-byte-length-1.0.1.tgz", - "integrity": "sha512-ahC5W1xgou+KTXix4sAO8Ki12Q+jf4i0+tmk3sC+zgcynshkHxzpXdImBehiUYKKKDwvfFiJl1tZt6ewscS1Mg==", - "dependencies": { - "call-bind": "^1.0.5", - "is-array-buffer": "^3.0.4" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/array-includes": { - "version": "3.1.7", - "resolved": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.7.tgz", - "integrity": "sha512-dlcsNBIiWhPkHdOEEKnehA+RNUWDc4UqFtnIXU4uuYDPtA4LDkr7qip2p0VvFAEXNDr0yWZ9PJyIRiGjRLQzwQ==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1", - "get-intrinsic": "^1.2.1", - "is-string": "^1.0.7" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/array-union": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz", - "integrity": "sha512-HGyxoOTYUyCM6stUe6EJgnd4EoewAI7zMdfqO+kGjnlZmBDz/cR5pf8r/cR4Wq60sL/p0IkcjUEEPwS3GFrIyw==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/array.prototype.filter": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/array.prototype.filter/-/array.prototype.filter-1.0.3.tgz", - "integrity": "sha512-VizNcj/RGJiUyQBgzwxzE5oHdeuXY5hSbbmKMlphj1cy1Vl7Pn2asCGbSrru6hSQjmCzqTBPVWAF/whmEOVHbw==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1", - "es-array-method-boxes-properly": "^1.0.0", - "is-string": "^1.0.7" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/array.prototype.findlast": { - "version": "1.2.4", - "resolved": "https://registry.npmjs.org/array.prototype.findlast/-/array.prototype.findlast-1.2.4.tgz", - "integrity": "sha512-BMtLxpV+8BD+6ZPFIWmnUBpQoy+A+ujcg4rhp2iwCRJYA7PEh2MS4NL3lz8EiDlLrJPp2hg9qWihr5pd//jcGw==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.5", - "define-properties": "^1.2.1", - "es-abstract": "^1.22.3", - "es-errors": "^1.3.0", - "es-shim-unscopables": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/array.prototype.findlastindex": { - "version": "1.2.4", - "resolved": "https://registry.npmjs.org/array.prototype.findlastindex/-/array.prototype.findlastindex-1.2.4.tgz", - "integrity": "sha512-hzvSHUshSpCflDR1QMUBLHGHP1VIEBegT4pix9H/Z92Xw3ySoy6c2qh7lJWTJnRJ8JCZ9bJNCgTyYaJGcJu6xQ==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.5", - "define-properties": "^1.2.1", - "es-abstract": "^1.22.3", - "es-errors": "^1.3.0", - "es-shim-unscopables": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/array.prototype.flat": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.3.2.tgz", - "integrity": "sha512-djYB+Zx2vLewY8RWlNCUdHjDXs2XOgm602S9E7P/UpHgfeHL00cRiIF+IN/G/aUJ7kGPb6yO/ErDI5V2s8iycA==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1", - "es-shim-unscopables": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/array.prototype.flatmap": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/array.prototype.flatmap/-/array.prototype.flatmap-1.3.2.tgz", - "integrity": "sha512-Ewyx0c9PmpcsByhSW4r+9zDU7sGjFc86qf/kKtuSCRdhfbk0SNLLkaT5qvcHnRGgc5NP/ly/y+qkXkqONX54CQ==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1", - "es-shim-unscopables": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/array.prototype.toreversed": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/array.prototype.toreversed/-/array.prototype.toreversed-1.1.2.tgz", - "integrity": "sha512-wwDCoT4Ck4Cz7sLtgUmzR5UV3YF5mFHUlbChCzZBQZ+0m2cl/DH3tKgvphv1nKgFsJ48oCSg6p91q2Vm0I/ZMA==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1", - "es-shim-unscopables": "^1.0.0" - } - }, - "node_modules/array.prototype.tosorted": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/array.prototype.tosorted/-/array.prototype.tosorted-1.1.3.tgz", - "integrity": "sha512-/DdH4TiTmOKzyQbp/eadcCVexiCb36xJg7HshYOYJnNZFDj33GEv0P7GxsynpShhq4OLYJzbGcBDkLsDt7MnNg==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.5", - "define-properties": "^1.2.1", - "es-abstract": "^1.22.3", - "es-errors": "^1.1.0", - "es-shim-unscopables": "^1.0.2" - } - }, - "node_modules/arraybuffer.prototype.slice": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.3.tgz", - "integrity": "sha512-bMxMKAjg13EBSVscxTaYA4mRc5t1UAXa2kXiGTNfZ079HIWXEkKmkgFrh/nJqamaLSrXO5H4WFFkPEaLJWbs3A==", - "dependencies": { - "array-buffer-byte-length": "^1.0.1", - "call-bind": "^1.0.5", - "define-properties": "^1.2.1", - "es-abstract": "^1.22.3", - "es-errors": "^1.2.1", - "get-intrinsic": "^1.2.3", - "is-array-buffer": "^3.0.4", - "is-shared-array-buffer": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/arrify": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz", - "integrity": "sha512-3CYzex9M9FGQjCGMGyi6/31c8GJbgb0qGyrx5HWxPd0aCwh4cB2YjMb2Xf9UuoogrMrlO9cTqnB5rI5GHZTcUA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/asap": { - "version": "2.0.6", - "resolved": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz", - "integrity": "sha512-BSHWgDSAiKs50o2Re8ppvp3seVHXSRM44cdSsT9FfNEUUZLOGWVCsiWaRPWM1Znn+mqZ1OfVZ3z3DWEzSp7hRA==" - }, - "node_modules/astral-regex": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz", - "integrity": "sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/asynciterator.prototype": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/asynciterator.prototype/-/asynciterator.prototype-1.0.0.tgz", - "integrity": "sha512-wwHYEIS0Q80f5mosx3L/dfG5t5rjEa9Ft51GTaNt862EnpyGHpgz2RkZvLPp1oF5TnAiTohkEKVEu8pQPJI7Vg==", - "dev": true, - "dependencies": { - "has-symbols": "^1.0.3" - } - }, - "node_modules/asynckit": { - "version": "0.4.0", - "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz", - "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==" - }, - "node_modules/atob": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz", - "integrity": "sha512-Wm6ukoaOGJi/73p/cl2GvLjTI5JM1k/O14isD73YML8StrH/7/lRFgmg8nICZgD3bZZvjwCGxtMOD3wWNAu8cg==", - "bin": { - "atob": "bin/atob.js" - }, - "engines": { - "node": ">= 4.5.0" - } - }, - "node_modules/attr-accept": { - "version": "2.2.2", - "resolved": "https://registry.npmjs.org/attr-accept/-/attr-accept-2.2.2.tgz", - "integrity": "sha512-7prDjvt9HmqiZ0cl5CRjtS84sEyhsHP2coDkaZKRKVfCDo9s7iw7ChVmar78Gu9pC4SoR/28wFu/G5JJhTnqEg==", - "engines": { - "node": ">=4" - } - }, - "node_modules/auto-changelog": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/auto-changelog/-/auto-changelog-2.3.0.tgz", - "integrity": "sha512-S2B+RtTgytsa7l5iFGBoWT9W9ylITT5JJ8OaMJ7nrwvnlRm1dSS2tghaYueDeInZZafOE+1llH3tUQjMDRVS1g==", - "dev": true, - "dependencies": { - "commander": "^5.0.0", - "handlebars": "^4.7.3", - "node-fetch": "^2.6.0", - "parse-github-url": "^1.0.2", - "semver": "^6.3.0" - }, - "bin": { - "auto-changelog": "src/index.js" - }, - "engines": { - "node": ">=8.3" - } - }, - "node_modules/available-typed-arrays": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz", - "integrity": "sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==", - "dependencies": { - "possible-typed-array-names": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/axios": { - "version": "1.6.7", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.7.tgz", - "integrity": "sha512-/hDJGff6/c7u0hDkvkGxR/oy6CbCs8ziCsC7SqmhjfozqiJGc8Z11wrv9z9lYfY4K8l+H9TpjcMDX0xOZmx+RA==", - "dependencies": { - "follow-redirects": "^1.15.4", - "form-data": "^4.0.0", - "proxy-from-env": "^1.1.0" - } - }, - "node_modules/babel-plugin-macros": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/babel-plugin-macros/-/babel-plugin-macros-3.1.0.tgz", - "integrity": "sha512-Cg7TFGpIr01vOQNODXOOaGz2NpCU5gl8x1qJFbb6hbZxR7XrcE2vtbAsTAbJ7/xwJtUuJEw8K8Zr/AE0LHlesg==", - "dependencies": { - "@babel/runtime": "^7.12.5", - "cosmiconfig": "^7.0.0", - "resolve": "^1.19.0" - }, - "engines": { - "node": ">=10", - "npm": ">=6" - } - }, - "node_modules/babel-plugin-styled-components": { - "version": "2.1.4", - "resolved": "https://registry.npmjs.org/babel-plugin-styled-components/-/babel-plugin-styled-components-2.1.4.tgz", - "integrity": "sha512-Xgp9g+A/cG47sUyRwwYxGM4bR/jDRg5N6it/8+HxCnbT5XNKSKDT9xm4oag/osgqjC2It/vH0yXsomOG6k558g==", - "dependencies": { - "@babel/helper-annotate-as-pure": "^7.22.5", - "@babel/helper-module-imports": "^7.22.5", - "@babel/plugin-syntax-jsx": "^7.22.5", - "lodash": "^4.17.21", - "picomatch": "^2.3.1" - }, - "peerDependencies": { - "styled-components": ">= 2" - } - }, - "node_modules/balanced-match": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", - "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", - "dev": true - }, - "node_modules/base64-arraybuffer": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-1.0.2.tgz", - "integrity": "sha512-I3yl4r9QB5ZRY3XuJVEPfc2XhZO6YweFPI+UovAzn+8/hb3oJ6lnysaFcjVpkCPfVWFUDvoZ8kmVDP7WyRtYtQ==", - "optional": true, - "engines": { - "node": ">= 0.6.0" - } - }, - "node_modules/base64-js": { - "version": "1.5.1", - "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", - "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ] - }, - "node_modules/batch-processor": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/batch-processor/-/batch-processor-1.0.0.tgz", - "integrity": "sha512-xoLQD8gmmR32MeuBHgH0Tzd5PuSZx71ZsbhVxOCRbgktZEPe4SQy7s9Z50uPp0F/f7iw2XmkHN2xkgbMfckMDA==" - }, - "node_modules/binary-extensions": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz", - "integrity": "sha512-jDctJ/IVQbZoJykoeHbhXpOlNBqGNcwXJKJog42E5HDPUwQTSdjCHdihjj0DlnheQ7blbT6dHOafNAiS8ooQKA==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/boolbase": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz", - "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==" - }, - "node_modules/brace-expansion": { - "version": "1.1.11", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", - "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==", - "dev": true, - "dependencies": { - "balanced-match": "^1.0.0", - "concat-map": "0.0.1" - } - }, - "node_modules/braces": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz", - "integrity": "sha512-b8um+L1RzM3WDSzvhm6gIz1yfTbBt6YTlcEKAvsmqCZZFw46z626lVj9j1yEPW33H5H+lBQpZMP1k8l+78Ha0A==", - "dev": true, - "dependencies": { - "fill-range": "^7.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/browserslist": { - "version": "4.23.0", - "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.23.0.tgz", - "integrity": "sha512-QW8HiM1shhT2GuzkvklfjcKDiWFXHOeFCIA/huJPwHsslwcydgk7X+z2zXpEijP98UCY7HbubZt5J2Zgvf0CaQ==", - "funding": [ - { - "type": "opencollective", - "url": "https://opencollective.com/browserslist" - }, - { - "type": "tidelift", - "url": "https://tidelift.com/funding/github/npm/browserslist" - }, - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "dependencies": { - "caniuse-lite": "^1.0.30001587", - "electron-to-chromium": "^1.4.668", - "node-releases": "^2.0.14", - "update-browserslist-db": "^1.0.13" - }, - "bin": { - "browserslist": "cli.js" - }, - "engines": { - "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7" - } - }, - "node_modules/browserslist-to-esbuild": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/browserslist-to-esbuild/-/browserslist-to-esbuild-1.2.0.tgz", - "integrity": "sha512-ftrrbI/VHBgEnmnSyhkqvQVMp6jAKybfs0qMIlm7SLBrQTGMsdCIP4q3BoKeLsZTBQllIQtY9kbxgRYV2WU47g==", - "dev": true, - "dependencies": { - "browserslist": "^4.17.3" - }, - "engines": { - "node": ">=12" - } - }, - "node_modules/btoa": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/btoa/-/btoa-1.2.1.tgz", - "integrity": "sha512-SB4/MIGlsiVkMcHmT+pSmIPoNDoHg+7cMzmt3Uxt628MTz2487DKSqK/fuhFBrkuqrYv5UCEnACpF4dTFNKc/g==", - "bin": { - "btoa": "bin/btoa.js" - }, - "engines": { - "node": ">= 0.4.0" - } - }, - "node_modules/buffer": { - "version": "6.0.3", - "resolved": "https://registry.npmjs.org/buffer/-/buffer-6.0.3.tgz", - "integrity": "sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ], - "dependencies": { - "base64-js": "^1.3.1", - "ieee754": "^1.2.1" - } - }, - "node_modules/buffer-from": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz", - "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==", - "peer": true - }, - "node_modules/call-bind": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.7.tgz", - "integrity": "sha512-GHTSNSYICQ7scH7sZ+M2rFopRoLh8t2bLSW6BbgrtLsahOIB5iyAVJf9GjWK3cYTDaMj4XdBpM1cA6pIS0Kv2w==", - "dependencies": { - "es-define-property": "^1.0.0", - "es-errors": "^1.3.0", - "function-bind": "^1.1.2", - "get-intrinsic": "^1.2.4", - "set-function-length": "^1.2.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/callsites": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz", - "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==", - "engines": { - "node": ">=6" - } - }, - "node_modules/camelcase": { - "version": "5.3.1", - "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz", - "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==", - "dev": true, - "engines": { - "node": ">=6" - } - }, - "node_modules/camelcase-keys": { - "version": "6.2.2", - "resolved": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-6.2.2.tgz", - "integrity": "sha512-YrwaA0vEKazPBkn0ipTiMpSajYDSe+KjQfrjhcBMxJt/znbvlHd8Pw/Vamaz5EB4Wfhs3SUR3Z9mwRu/P3s3Yg==", - "dev": true, - "dependencies": { - "camelcase": "^5.3.1", - "map-obj": "^4.0.0", - "quick-lru": "^4.0.1" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/camelize": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/camelize/-/camelize-1.0.1.tgz", - "integrity": "sha512-dU+Tx2fsypxTgtLoE36npi3UqcjSSMNYfkqgmoEhtZrraP5VWq0K7FkWVTYa8eMPtnU/G2txVsfdCJTn9uzpuQ==", - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/can-use-dom": { - "version": "0.1.0", - "resolved": "https://registry.npmjs.org/can-use-dom/-/can-use-dom-0.1.0.tgz", - "integrity": "sha512-ceOhN1DL7Y4O6M0j9ICgmTYziV89WMd96SvSl0REd8PMgrY0B/WBOPoed5S1KUmJqXgUXh8gzSe6E3ae27upsQ==" - }, - "node_modules/caniuse-lite": { - "version": "1.0.30001597", - "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001597.tgz", - "integrity": "sha512-7LjJvmQU6Sj7bL0j5b5WY/3n7utXUJvAe1lxhsHDbLmwX9mdL86Yjtr+5SRCyf8qME4M7pU2hswj0FpyBVCv9w==", - "funding": [ - { - "type": "opencollective", - "url": "https://opencollective.com/browserslist" - }, - { - "type": "tidelift", - "url": "https://tidelift.com/funding/github/npm/caniuse-lite" - }, - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ] - }, - "node_modules/canvg": { - "version": "3.0.10", - "resolved": "https://registry.npmjs.org/canvg/-/canvg-3.0.10.tgz", - "integrity": "sha512-qwR2FRNO9NlzTeKIPIKpnTY6fqwuYSequ8Ru8c0YkYU7U0oW+hLUvWadLvAu1Rl72OMNiFhoLu4f8eUjQ7l/+Q==", - "optional": true, - "dependencies": { - "@babel/runtime": "^7.12.5", - "@types/raf": "^3.4.0", - "core-js": "^3.8.3", - "raf": "^3.4.1", - "regenerator-runtime": "^0.13.7", - "rgbcolor": "^1.0.1", - "stackblur-canvas": "^2.0.0", - "svg-pathdata": "^6.0.3" - }, - "engines": { - "node": ">=10.0.0" - } - }, - "node_modules/canvg/node_modules/regenerator-runtime": { - "version": "0.13.11", - "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.11.tgz", - "integrity": "sha512-kY1AZVr2Ra+t+piVaJ4gxaFaReZVH40AKNo7UCX6W+dEwBo/2oZJzqfuN1qLq1oL45o56cPaTXELwrTh8Fpggg==", - "optional": true - }, - "node_modules/chalk": { - "version": "2.4.2", - "resolved": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz", - "integrity": "sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==", - "dependencies": { - "ansi-styles": "^3.2.1", - "escape-string-regexp": "^1.0.5", - "supports-color": "^5.3.0" - }, - "engines": { - "node": ">=4" - } - }, - "node_modules/character-entities": { - "version": "1.2.4", - "resolved": "https://registry.npmjs.org/character-entities/-/character-entities-1.2.4.tgz", - "integrity": "sha512-iBMyeEHxfVnIakwOuDXpVkc54HijNgCyQB2w0VfGQThle6NXn50zU6V/u+LDhxHcDUPojn6Kpga3PTAD8W1bQw==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/character-entities-legacy": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/character-entities-legacy/-/character-entities-legacy-1.1.4.tgz", - "integrity": "sha512-3Xnr+7ZFS1uxeiUDvV02wQ+QDbc55o97tIV5zHScSPJpcLm/r0DFPcoY3tYRp+VZukxuMeKgXYmsXQHO05zQeA==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/character-reference-invalid": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/character-reference-invalid/-/character-reference-invalid-1.1.4.tgz", - "integrity": "sha512-mKKUkUbhPpQlCOfIuZkvSEgktjPFIsZKRRbC6KWVEMvlzblj3i3asQv5ODsrwt0N3pHAEvjP8KTQPHkp0+6jOg==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/chart.js": { - "version": "3.9.1", - "resolved": "https://registry.npmjs.org/chart.js/-/chart.js-3.9.1.tgz", - "integrity": "sha512-Ro2JbLmvg83gXF5F4sniaQ+lTbSv18E+TIf2cOeiH1Iqd2PGFOtem+DUufMZsCJwFE7ywPOpfXFBwRTGq7dh6w==" - }, - "node_modules/cheerio": { - "version": "1.0.0-rc.12", - "resolved": "https://registry.npmjs.org/cheerio/-/cheerio-1.0.0-rc.12.tgz", - "integrity": "sha512-VqR8m68vM46BNnuZ5NtnGBKIE/DfN0cRIzg9n40EIq9NOv90ayxLBXA8fXC5gquFRGJSTRqBq25Jt2ECLR431Q==", - "dependencies": { - "cheerio-select": "^2.1.0", - "dom-serializer": "^2.0.0", - "domhandler": "^5.0.3", - "domutils": "^3.0.1", - "htmlparser2": "^8.0.1", - "parse5": "^7.0.0", - "parse5-htmlparser2-tree-adapter": "^7.0.0" - }, - "engines": { - "node": ">= 6" - }, - "funding": { - "url": "https://github.com/cheeriojs/cheerio?sponsor=1" - } - }, - "node_modules/cheerio-select": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/cheerio-select/-/cheerio-select-2.1.0.tgz", - "integrity": "sha512-9v9kG0LvzrlcungtnJtpGNxY+fzECQKhK4EGJX2vByejiMX84MFNQw4UxPJl3bFbTMw+Dfs37XaIkCwTZfLh4g==", - "dependencies": { - "boolbase": "^1.0.0", - "css-select": "^5.1.0", - "css-what": "^6.1.0", - "domelementtype": "^2.3.0", - "domhandler": "^5.0.3", - "domutils": "^3.0.1" - }, - "funding": { - "url": "https://github.com/sponsors/fb55" - } - }, - "node_modules/chokidar": { - "version": "3.6.0", - "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz", - "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==", - "dev": true, - "dependencies": { - "anymatch": "~3.1.2", - "braces": "~3.0.2", - "glob-parent": "~5.1.2", - "is-binary-path": "~2.1.0", - "is-glob": "~4.0.1", - "normalize-path": "~3.0.0", - "readdirp": "~3.6.0" - }, - "engines": { - "node": ">= 8.10.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - }, - "optionalDependencies": { - "fsevents": "~2.3.2" - } - }, - "node_modules/chokidar/node_modules/glob-parent": { - "version": "5.1.2", - "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz", - "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==", - "dev": true, - "dependencies": { - "is-glob": "^4.0.1" - }, - "engines": { - "node": ">= 6" - } - }, - "node_modules/chrome-trace-event": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.3.tgz", - "integrity": "sha512-p3KULyQg4S7NIHixdwbGX+nFHkoBiA4YQmyWtjb8XngSKV124nJmRysgAeujbUVb15vh+RvFUfCPqU7rXk+hZg==", - "peer": true, - "engines": { - "node": ">=6.0" - } - }, - "node_modules/classnames": { - "version": "2.5.1", - "resolved": "https://registry.npmjs.org/classnames/-/classnames-2.5.1.tgz", - "integrity": "sha512-saHYOzhIQs6wy2sVxTM6bUDsQO4F50V9RQ22qBpEdCW+I+/Wmke2HOl6lS6dTpdxVhb88/I6+Hs+438c3lfUow==" - }, - "node_modules/color-convert": { - "version": "1.9.3", - "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz", - "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==", - "dependencies": { - "color-name": "1.1.3" - } - }, - "node_modules/color-name": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz", - "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==" - }, - "node_modules/colord": { - "version": "2.9.3", - "resolved": "https://registry.npmjs.org/colord/-/colord-2.9.3.tgz", - "integrity": "sha512-jeC1axXpnb0/2nn/Y1LPuLdgXBLH7aDcHu4KEKfqw3CUhX7ZpfBSlPKyqXE6btIgEzfWtrX3/tyBCaCvXvMkOw==", - "dev": true - }, - "node_modules/combined-stream": { - "version": "1.0.8", - "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz", - "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==", - "dependencies": { - "delayed-stream": "~1.0.0" - }, - "engines": { - "node": ">= 0.8" - } - }, - "node_modules/comma-separated-tokens": { - "version": "1.0.8", - "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-1.0.8.tgz", - "integrity": "sha512-GHuDRO12Sypu2cV70d1dkA2EUmXHgntrzbpvOB+Qy+49ypNfGgFQIC2fhhXbnyrJRynDCAARsT7Ou0M6hirpfw==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/commander": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/commander/-/commander-5.1.0.tgz", - "integrity": "sha512-P0CysNDQ7rtVw4QIQtm+MRxV66vKFSvlsQvGYXZWR3qFU0jlMKHZZZgw8e+8DSah4UDKMqnknRDQz+xuQXQ/Zg==", - "dev": true, - "engines": { - "node": ">= 6" - } - }, - "node_modules/compute-gcd": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/compute-gcd/-/compute-gcd-1.2.1.tgz", - "integrity": "sha512-TwMbxBNz0l71+8Sc4czv13h4kEqnchV9igQZBi6QUaz09dnz13juGnnaWWJTRsP3brxOoxeB4SA2WELLw1hCtg==", - "dependencies": { - "validate.io-array": "^1.0.3", - "validate.io-function": "^1.0.2", - "validate.io-integer-array": "^1.0.0" - } - }, - "node_modules/compute-lcm": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/compute-lcm/-/compute-lcm-1.1.2.tgz", - "integrity": "sha512-OFNPdQAXnQhDSKioX8/XYT6sdUlXwpeMjfd6ApxMJfyZ4GxmLR1xvMERctlYhlHwIiz6CSpBc2+qYKjHGZw4TQ==", - "dependencies": { - "compute-gcd": "^1.2.1", - "validate.io-array": "^1.0.3", - "validate.io-function": "^1.0.2", - "validate.io-integer-array": "^1.0.0" - } - }, - "node_modules/concat-map": { - "version": "0.0.1", - "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", - "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==", - "dev": true - }, - "node_modules/convert-source-map": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", - "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==" - }, - "node_modules/copy-to-clipboard": { - "version": "3.3.3", - "resolved": "https://registry.npmjs.org/copy-to-clipboard/-/copy-to-clipboard-3.3.3.tgz", - "integrity": "sha512-2KV8NhB5JqC3ky0r9PMCAZKbUHSwtEo4CwCs0KXgruG43gX5PMqDEBbVU4OUzw2MuAWUfsuFmWvEKG5QRfSnJA==", - "dependencies": { - "toggle-selection": "^1.0.6" - } - }, - "node_modules/core-js": { - "version": "3.36.0", - "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.36.0.tgz", - "integrity": "sha512-mt7+TUBbTFg5+GngsAxeKBTl5/VS0guFeJacYge9OmHb+m058UwwIm41SE9T4Den7ClatV57B6TYTuJ0CX1MAw==", - "hasInstallScript": true, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/core-js" - } - }, - "node_modules/cosmiconfig": { - "version": "7.1.0", - "resolved": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.1.0.tgz", - "integrity": "sha512-AdmX6xUzdNASswsFtmwSt7Vj8po9IuqXm0UXz7QKPuEUmPB4XyjGfaAr2PSuELMwkRMVH1EpIkX5bTZGRB3eCA==", - "dependencies": { - "@types/parse-json": "^4.0.0", - "import-fresh": "^3.2.1", - "parse-json": "^5.0.0", - "path-type": "^4.0.0", - "yaml": "^1.10.0" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/create-react-class": { - "version": "15.7.0", - "resolved": "https://registry.npmjs.org/create-react-class/-/create-react-class-15.7.0.tgz", - "integrity": "sha512-QZv4sFWG9S5RUvkTYWbflxeZX+JG7Cz0Tn33rQBJ+WFQTqTfUTjMjiv9tnfXazjsO5r0KhPs+AqCjyrQX6h2ng==", - "dependencies": { - "loose-envify": "^1.3.1", - "object-assign": "^4.1.1" - } - }, - "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", - "dev": true, - "dependencies": { - "path-key": "^3.1.0", - "shebang-command": "^2.0.0", - "which": "^2.0.1" - }, - "engines": { - "node": ">= 8" - } - }, - "node_modules/css-color-keywords": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/css-color-keywords/-/css-color-keywords-1.0.0.tgz", - "integrity": "sha512-FyyrDHZKEjXDpNJYvVsV960FiqQyXc/LlYmsxl2BcdMb2WPx0OGRVgTg55rPSyLSNMqP52R9r8geSp7apN3Ofg==", - "engines": { - "node": ">=4" - } - }, - "node_modules/css-functions-list": { - "version": "3.2.1", - "resolved": "https://registry.npmjs.org/css-functions-list/-/css-functions-list-3.2.1.tgz", - "integrity": "sha512-Nj5YcaGgBtuUmn1D7oHqPW0c9iui7xsTsj5lIX8ZgevdfhmjFfKB3r8moHJtNJnctnYXJyYX5I1pp90HM4TPgQ==", - "dev": true, - "engines": { - "node": ">=12 || >=16" - } - }, - "node_modules/css-line-break": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/css-line-break/-/css-line-break-2.1.0.tgz", - "integrity": "sha512-FHcKFCZcAha3LwfVBhCQbW2nCNbkZXn7KVUJcsT5/P8YmfsVja0FMPJr0B903j/E69HUphKiV9iQArX8SDYA4w==", - "optional": true, - "dependencies": { - "utrie": "^1.0.2" - } - }, - "node_modules/css-select": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/css-select/-/css-select-5.1.0.tgz", - "integrity": "sha512-nwoRF1rvRRnnCqqY7updORDsuqKzqYJ28+oSMaJMMgOauh3fvwHqMS7EZpIPqK8GL+g9mKxF1vP/ZjSeNjEVHg==", - "dependencies": { - "boolbase": "^1.0.0", - "css-what": "^6.1.0", - "domhandler": "^5.0.2", - "domutils": "^3.0.1", - "nth-check": "^2.0.1" - }, - "funding": { - "url": "https://github.com/sponsors/fb55" - } - }, - "node_modules/css-to-react-native": { - "version": "3.2.0", - "resolved": "https://registry.npmjs.org/css-to-react-native/-/css-to-react-native-3.2.0.tgz", - "integrity": "sha512-e8RKaLXMOFii+02mOlqwjbD00KSEKqblnpO9e++1aXS1fPQOpS1YoqdVHBqPjHNoxeF2mimzVqawm2KCbEdtHQ==", - "dependencies": { - "camelize": "^1.0.0", - "css-color-keywords": "^1.0.0", - "postcss-value-parser": "^4.0.2" - } - }, - "node_modules/css-what": { - "version": "6.1.0", - "resolved": "https://registry.npmjs.org/css-what/-/css-what-6.1.0.tgz", - "integrity": "sha512-HTUrgRJ7r4dsZKU6GjmpfRK1O76h97Z8MfS1G0FozR+oF2kG6Vfe8JE6zwrkbxigziPHinCJ+gCPjA9EaBDtRw==", - "engines": { - "node": ">= 6" - }, - "funding": { - "url": "https://github.com/sponsors/fb55" - } - }, - "node_modules/cssesc": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz", - "integrity": "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==", - "bin": { - "cssesc": "bin/cssesc" - }, - "engines": { - "node": ">=4" - } - }, - "node_modules/csstype": { - "version": "3.1.3", - "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.1.3.tgz", - "integrity": "sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw==" - }, - "node_modules/date-fns": { - "version": "2.30.0", - "resolved": "https://registry.npmjs.org/date-fns/-/date-fns-2.30.0.tgz", - "integrity": "sha512-fnULvOpxnC5/Vg3NCiWelDsLiUc9bRwAPs/+LfTLNvetFCtCTN+yQz15C/fs4AwX1R9K5GLtLfn8QW+dWisaAw==", - "dependencies": { - "@babel/runtime": "^7.21.0" - }, - "engines": { - "node": ">=0.11" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/date-fns" - } - }, - "node_modules/debug": { - "version": "4.3.4", - "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz", - "integrity": "sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==", - "dependencies": { - "ms": "2.1.2" - }, - "engines": { - "node": ">=6.0" - }, - "peerDependenciesMeta": { - "supports-color": { - "optional": true - } - } - }, - "node_modules/decamelize": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz", - "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/decamelize-keys": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/decamelize-keys/-/decamelize-keys-1.1.1.tgz", - "integrity": "sha512-WiPxgEirIV0/eIOMcnFBA3/IJZAZqKnwAwWyvvdi4lsr1WCN22nhdf/3db3DoZcUjTV2SqfzIwNyp6y2xs3nmg==", - "dev": true, - "dependencies": { - "decamelize": "^1.1.0", - "map-obj": "^1.0.0" - }, - "engines": { - "node": ">=0.10.0" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/decamelize-keys/node_modules/map-obj": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz", - "integrity": "sha512-7N/q3lyZ+LVCp7PzuxrJr4KMbBE2hW7BT7YNia330OFxIf4d3r5zVpicP2650l7CPN6RM9zOJRl3NGpqSiw3Eg==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/deep-is": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz", - "integrity": "sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==", - "dev": true - }, - "node_modules/deepmerge": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz", - "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==", - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/define-data-property": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz", - "integrity": "sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==", - "dependencies": { - "es-define-property": "^1.0.0", - "es-errors": "^1.3.0", - "gopd": "^1.0.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/define-properties": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/define-properties/-/define-properties-1.2.1.tgz", - "integrity": "sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==", - "dependencies": { - "define-data-property": "^1.0.1", - "has-property-descriptors": "^1.0.0", - "object-keys": "^1.1.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/delayed-stream": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz", - "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==", - "engines": { - "node": ">=0.4.0" - } - }, - "node_modules/dequal": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", - "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", - "engines": { - "node": ">=6" - } - }, - "node_modules/desandro-matches-selector": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/desandro-matches-selector/-/desandro-matches-selector-2.0.2.tgz", - "integrity": "sha512-+1q0nXhdzg1IpIJdMKalUwvvskeKnYyEe3shPRwedNcWtnhEKT3ZxvFjzywHDeGcKViIxTCAoOYQWP1qD7VNyg==" - }, - "node_modules/dir-glob": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz", - "integrity": "sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA==", - "dev": true, - "dependencies": { - "path-type": "^4.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/discontinuous-range": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", - "integrity": "sha512-c68LpLbO+7kP/b1Hr1qs8/BJ09F5khZGTxqxZuhzxpmwJKOgRFHJWIb9/KmqnqHhLdO55aOxFH/EGBvUQbL/RQ==" - }, - "node_modules/doctrine": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz", - "integrity": "sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w==", - "dev": true, - "dependencies": { - "esutils": "^2.0.2" - }, - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/dom-helpers": { - "version": "5.2.1", - "resolved": "https://registry.npmjs.org/dom-helpers/-/dom-helpers-5.2.1.tgz", - "integrity": "sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==", - "dependencies": { - "@babel/runtime": "^7.8.7", - "csstype": "^3.0.2" - } - }, - "node_modules/dom-serializer": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-2.0.0.tgz", - "integrity": "sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==", - "dependencies": { - "domelementtype": "^2.3.0", - "domhandler": "^5.0.2", - "entities": "^4.2.0" - }, - "funding": { - "url": "https://github.com/cheeriojs/dom-serializer?sponsor=1" - } - }, - "node_modules/domelementtype": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz", - "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/fb55" - } - ] - }, - "node_modules/domhandler": { - "version": "5.0.3", - "resolved": "https://registry.npmjs.org/domhandler/-/domhandler-5.0.3.tgz", - "integrity": "sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==", - "dependencies": { - "domelementtype": "^2.3.0" - }, - "engines": { - "node": ">= 4" - }, - "funding": { - "url": "https://github.com/fb55/domhandler?sponsor=1" - } - }, - "node_modules/dompurify": { - "version": "3.1.6", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.1.6.tgz", - "integrity": "sha512-cTOAhc36AalkjtBpfG6O8JimdTMWNXjiePT2xQH/ppBGi/4uIpmj8eKyIkMJErXWARyINV/sB38yf8JCLF5pbQ==" - }, - "node_modules/domutils": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/domutils/-/domutils-3.1.0.tgz", - "integrity": "sha512-H78uMmQtI2AhgDJjWeQmHwJJ2bLPD3GMmO7Zja/ZZh84wkm+4ut+IUnUdRa8uCGX88DiVx1j6FRe1XfxEgjEZA==", - "dependencies": { - "dom-serializer": "^2.0.0", - "domelementtype": "^2.3.0", - "domhandler": "^5.0.3" - }, - "funding": { - "url": "https://github.com/fb55/domutils?sponsor=1" - } - }, - "node_modules/electron-to-chromium": { - "version": "1.4.701", - "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.701.tgz", - "integrity": "sha512-K3WPQ36bUOtXg/1+69bFlFOvdSm0/0bGqmsfPDLRXLanoKXdA+pIWuf/VbA9b+2CwBFuONgl4NEz4OEm+OJOKA==" - }, - "node_modules/element-resize-detector": { - "version": "1.2.4", - "resolved": "https://registry.npmjs.org/element-resize-detector/-/element-resize-detector-1.2.4.tgz", - "integrity": "sha512-Fl5Ftk6WwXE0wqCgNoseKWndjzZlDCwuPTcoVZfCP9R3EHQF8qUtr3YUPNETegRBOKqQKPW3n4kiIWngGi8tKg==", - "dependencies": { - "batch-processor": "1.0.0" - } - }, - "node_modules/eml-parse-js": { - "version": "1.1.14", - "resolved": "https://registry.npmjs.org/eml-parse-js/-/eml-parse-js-1.1.14.tgz", - "integrity": "sha512-6wUmZQ4k67CHGaQdNTukUMtCQ77e/676pRRsn/ga6CdaIwitzbQwqA/YTq/Wk+l1gghFJTPhbRyQphrAptK/GA==", - "dependencies": { - "@sinonjs/text-encoding": "^0.7.2", - "js-base64": "^3.7.2" - } - }, - "node_modules/emoji-regex": { - "version": "8.0.0", - "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", - "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", - "dev": true - }, - "node_modules/enhanced-resolve": { - "version": "5.16.0", - "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.16.0.tgz", - "integrity": "sha512-O+QWCviPNSSLAD9Ucn8Awv+poAkqn3T1XY5/N7kR7rQO9yfSGWkYZDwpJ+iKF7B8rxaQKWngSqACpgzeapSyoA==", - "peer": true, - "dependencies": { - "graceful-fs": "^4.2.4", - "tapable": "^2.2.0" - }, - "engines": { - "node": ">=10.13.0" - } - }, - "node_modules/entities": { - "version": "4.5.0", - "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz", - "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==", - "engines": { - "node": ">=0.12" - }, - "funding": { - "url": "https://github.com/fb55/entities?sponsor=1" - } - }, - "node_modules/enzyme": { - "version": "3.11.0", - "resolved": "https://registry.npmjs.org/enzyme/-/enzyme-3.11.0.tgz", - "integrity": "sha512-Dw8/Gs4vRjxY6/6i9wU0V+utmQO9kvh9XLnz3LIudviOnVYDEe2ec+0k+NQoMamn1VrjKgCUOWj5jG/5M5M0Qw==", - "dependencies": { - "array.prototype.flat": "^1.2.3", - "cheerio": "^1.0.0-rc.3", - "enzyme-shallow-equal": "^1.0.1", - "function.prototype.name": "^1.1.2", - "has": "^1.0.3", - "html-element-map": "^1.2.0", - "is-boolean-object": "^1.0.1", - "is-callable": "^1.1.5", - "is-number-object": "^1.0.4", - "is-regex": "^1.0.5", - "is-string": "^1.0.5", - "is-subset": "^0.1.1", - "lodash.escape": "^4.0.1", - "lodash.isequal": "^4.5.0", - "object-inspect": "^1.7.0", - "object-is": "^1.0.2", - "object.assign": "^4.1.0", - "object.entries": "^1.1.1", - "object.values": "^1.1.1", - "raf": "^3.4.1", - "rst-selector-parser": "^2.2.3", - "string.prototype.trim": "^1.2.1" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/enzyme-shallow-equal": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/enzyme-shallow-equal/-/enzyme-shallow-equal-1.0.7.tgz", - "integrity": "sha512-/um0GFqUXnpM9SvKtje+9Tjoz3f1fpBC3eXRFrNs8kpYn69JljciYP7KZTqM/YQbUY9KUjvKB4jo/q+L6WGGvg==", - "dependencies": { - "hasown": "^2.0.0", - "object-is": "^1.1.5" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/error-ex": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz", - "integrity": "sha512-7dFHNmqeFSEt2ZBsCriorKnn3Z2pj+fd9kmI6QoWw4//DL+icEBfc0U7qJCisqrTsKTjw4fNFy2pW9OqStD84g==", - "dependencies": { - "is-arrayish": "^0.2.1" - } - }, - "node_modules/es-abstract": { - "version": "1.22.5", - "resolved": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.22.5.tgz", - "integrity": "sha512-oW69R+4q2wG+Hc3KZePPZxOiisRIqfKBVo/HLx94QcJeWGU/8sZhCvc829rd1kS366vlJbzBfXf9yWwf0+Ko7w==", - "dependencies": { - "array-buffer-byte-length": "^1.0.1", - "arraybuffer.prototype.slice": "^1.0.3", - "available-typed-arrays": "^1.0.7", - "call-bind": "^1.0.7", - "es-define-property": "^1.0.0", - "es-errors": "^1.3.0", - "es-set-tostringtag": "^2.0.3", - "es-to-primitive": "^1.2.1", - "function.prototype.name": "^1.1.6", - "get-intrinsic": "^1.2.4", - "get-symbol-description": "^1.0.2", - "globalthis": "^1.0.3", - "gopd": "^1.0.1", - "has-property-descriptors": "^1.0.2", - "has-proto": "^1.0.3", - "has-symbols": "^1.0.3", - "hasown": "^2.0.1", - "internal-slot": "^1.0.7", - "is-array-buffer": "^3.0.4", - "is-callable": "^1.2.7", - "is-negative-zero": "^2.0.3", - "is-regex": "^1.1.4", - "is-shared-array-buffer": "^1.0.3", - "is-string": "^1.0.7", - "is-typed-array": "^1.1.13", - "is-weakref": "^1.0.2", - "object-inspect": "^1.13.1", - "object-keys": "^1.1.1", - "object.assign": "^4.1.5", - "regexp.prototype.flags": "^1.5.2", - "safe-array-concat": "^1.1.0", - "safe-regex-test": "^1.0.3", - "string.prototype.trim": "^1.2.8", - "string.prototype.trimend": "^1.0.7", - "string.prototype.trimstart": "^1.0.7", - "typed-array-buffer": "^1.0.2", - "typed-array-byte-length": "^1.0.1", - "typed-array-byte-offset": "^1.0.2", - "typed-array-length": "^1.0.5", - "unbox-primitive": "^1.0.2", - "which-typed-array": "^1.1.14" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/es-array-method-boxes-properly": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/es-array-method-boxes-properly/-/es-array-method-boxes-properly-1.0.0.tgz", - "integrity": "sha512-wd6JXUmyHmt8T5a2xreUwKcGPq6f1f+WwIJkijUqiGcJz1qqnZgP6XIK+QyIWU5lT7imeNxUll48bziG+TSYcA==" - }, - "node_modules/es-define-property": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.0.tgz", - "integrity": "sha512-jxayLKShrEqqzJ0eumQbVhTYQM27CfT1T35+gCgDFoL82JLsXqTJ76zv6A0YLOgEnLUMvLzsDsGIrl8NFpT2gQ==", - "dependencies": { - "get-intrinsic": "^1.2.4" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/es-errors": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", - "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/es-iterator-helpers": { - "version": "1.0.17", - "resolved": "https://registry.npmjs.org/es-iterator-helpers/-/es-iterator-helpers-1.0.17.tgz", - "integrity": "sha512-lh7BsUqelv4KUbR5a/ZTaGGIMLCjPGPqJ6q+Oq24YP0RdyptX1uzm4vvaqzk7Zx3bpl/76YLTTDj9L7uYQ92oQ==", - "dev": true, - "dependencies": { - "asynciterator.prototype": "^1.0.0", - "call-bind": "^1.0.7", - "define-properties": "^1.2.1", - "es-abstract": "^1.22.4", - "es-errors": "^1.3.0", - "es-set-tostringtag": "^2.0.2", - "function-bind": "^1.1.2", - "get-intrinsic": "^1.2.4", - "globalthis": "^1.0.3", - "has-property-descriptors": "^1.0.2", - "has-proto": "^1.0.1", - "has-symbols": "^1.0.3", - "internal-slot": "^1.0.7", - "iterator.prototype": "^1.1.2", - "safe-array-concat": "^1.1.0" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/es-module-lexer": { - "version": "1.4.1", - "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-1.4.1.tgz", - "integrity": "sha512-cXLGjP0c4T3flZJKQSuziYoq7MlT+rnvfZjfp7h+I7K9BNX54kP9nyWvdbwjQ4u1iWbOL4u96fgeZLToQlZC7w==", - "peer": true - }, - "node_modules/es-set-tostringtag": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.0.3.tgz", - "integrity": "sha512-3T8uNMC3OQTHkFUsFq8r/BwAXLHvU/9O9mE0fBc/MY5iq/8H7ncvO947LmYA6ldWw9Uh8Yhf25zu6n7nML5QWQ==", - "dependencies": { - "get-intrinsic": "^1.2.4", - "has-tostringtag": "^1.0.2", - "hasown": "^2.0.1" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/es-shim-unscopables": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/es-shim-unscopables/-/es-shim-unscopables-1.0.2.tgz", - "integrity": "sha512-J3yBRXCzDu4ULnQwxyToo/OjdMx6akgVC7K6few0a7F/0wLtmKKN7I73AH5T2836UuXRqN7Qg+IIUw/+YJksRw==", - "dependencies": { - "hasown": "^2.0.0" - } - }, - "node_modules/es-to-primitive": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz", - "integrity": "sha512-QCOllgZJtaUo9miYBcLChTUaHNjJF3PYs1VidD7AwiEj1kYxKeQTctLAezAOH5ZKRH0g2IgPn6KwB4IT8iRpvA==", - "dependencies": { - "is-callable": "^1.1.4", - "is-date-object": "^1.0.1", - "is-symbol": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/esbuild": { - "version": "0.19.12", - "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.19.12.tgz", - "integrity": "sha512-aARqgq8roFBj054KvQr5f1sFu0D65G+miZRCuJyJ0G13Zwx7vRar5Zhn2tkQNzIXcBrNVsv/8stehpj+GAjgbg==", - "dev": true, - "hasInstallScript": true, - "bin": { - "esbuild": "bin/esbuild" - }, - "engines": { - "node": ">=12" - }, - "optionalDependencies": { - "@esbuild/aix-ppc64": "0.19.12", - "@esbuild/android-arm": "0.19.12", - "@esbuild/android-arm64": "0.19.12", - "@esbuild/android-x64": "0.19.12", - "@esbuild/darwin-arm64": "0.19.12", - "@esbuild/darwin-x64": "0.19.12", - "@esbuild/freebsd-arm64": "0.19.12", - "@esbuild/freebsd-x64": "0.19.12", - "@esbuild/linux-arm": "0.19.12", - "@esbuild/linux-arm64": "0.19.12", - "@esbuild/linux-ia32": "0.19.12", - "@esbuild/linux-loong64": "0.19.12", - "@esbuild/linux-mips64el": "0.19.12", - "@esbuild/linux-ppc64": "0.19.12", - "@esbuild/linux-riscv64": "0.19.12", - "@esbuild/linux-s390x": "0.19.12", - "@esbuild/linux-x64": "0.19.12", - "@esbuild/netbsd-x64": "0.19.12", - "@esbuild/openbsd-x64": "0.19.12", - "@esbuild/sunos-x64": "0.19.12", - "@esbuild/win32-arm64": "0.19.12", - "@esbuild/win32-ia32": "0.19.12", - "@esbuild/win32-x64": "0.19.12" - } - }, - "node_modules/escalade": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.1.2.tgz", - "integrity": "sha512-ErCHMCae19vR8vQGe50xIsVomy19rg6gFu3+r3jkEO46suLMWBksvVyoGgQV+jOfl84ZSOSlmv6Gxa89PmTGmA==", - "engines": { - "node": ">=6" - } - }, - "node_modules/escape-string-regexp": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz", - "integrity": "sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==", - "engines": { - "node": ">=0.8.0" - } - }, - "node_modules/eslint": { - "version": "8.57.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.57.0.tgz", - "integrity": "sha512-dZ6+mexnaTIbSBZWgou51U6OmzIhYM2VcNdtiTtI7qPNZm35Akpr0f6vtw3w1Kmn5PYo+tZVfh13WrhpS6oLqQ==", - "dev": true, - "dependencies": { - "@eslint-community/eslint-utils": "^4.2.0", - "@eslint-community/regexpp": "^4.6.1", - "@eslint/eslintrc": "^2.1.4", - "@eslint/js": "8.57.0", - "@humanwhocodes/config-array": "^0.11.14", - "@humanwhocodes/module-importer": "^1.0.1", - "@nodelib/fs.walk": "^1.2.8", - "@ungap/structured-clone": "^1.2.0", - "ajv": "^6.12.4", - "chalk": "^4.0.0", - "cross-spawn": "^7.0.2", - "debug": "^4.3.2", - "doctrine": "^3.0.0", - "escape-string-regexp": "^4.0.0", - "eslint-scope": "^7.2.2", - "eslint-visitor-keys": "^3.4.3", - "espree": "^9.6.1", - "esquery": "^1.4.2", - "esutils": "^2.0.2", - "fast-deep-equal": "^3.1.3", - "file-entry-cache": "^6.0.1", - "find-up": "^5.0.0", - "glob-parent": "^6.0.2", - "globals": "^13.19.0", - "graphemer": "^1.4.0", - "ignore": "^5.2.0", - "imurmurhash": "^0.1.4", - "is-glob": "^4.0.0", - "is-path-inside": "^3.0.3", - "js-yaml": "^4.1.0", - "json-stable-stringify-without-jsonify": "^1.0.1", - "levn": "^0.4.1", - "lodash.merge": "^4.6.2", - "minimatch": "^3.1.2", - "natural-compare": "^1.4.0", - "optionator": "^0.9.3", - "strip-ansi": "^6.0.1", - "text-table": "^0.2.0" - }, - "bin": { - "eslint": "bin/eslint.js" - }, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - }, - "funding": { - "url": "https://opencollective.com/eslint" - } - }, - "node_modules/eslint-config-prettier": { - "version": "8.10.0", - "resolved": "https://registry.npmjs.org/eslint-config-prettier/-/eslint-config-prettier-8.10.0.tgz", - "integrity": "sha512-SM8AMJdeQqRYT9O9zguiruQZaN7+z+E4eAP9oiLNGKMtomwaB1E9dcgUD6ZAn/eQAb52USbvezbiljfZUhbJcg==", - "dev": true, - "bin": { - "eslint-config-prettier": "bin/cli.js" - }, - "peerDependencies": { - "eslint": ">=7.0.0" - } - }, - "node_modules/eslint-import-resolver-custom-alias": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/eslint-import-resolver-custom-alias/-/eslint-import-resolver-custom-alias-1.3.2.tgz", - "integrity": "sha512-wBPcZA2k6/IXaT8FsLMyiyVSG6WVEuaYIAbeKLXeGwr523BmeB9lKAAoLJWSqp3txsnU4gpkgD2x1q6K8k0uDQ==", - "dev": true, - "dependencies": { - "glob-parent": "^6.0.2", - "resolve": "^1.22.2" - }, - "peerDependencies": { - "eslint-plugin-import": ">=2.2.0" - } - }, - "node_modules/eslint-import-resolver-node": { - "version": "0.3.9", - "resolved": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.9.tgz", - "integrity": "sha512-WFj2isz22JahUv+B788TlO3N6zL3nNJGU8CcZbPZvVEkBPaJdCV4vy5wyghty5ROFbCRnm132v8BScu5/1BQ8g==", - "dev": true, - "dependencies": { - "debug": "^3.2.7", - "is-core-module": "^2.13.0", - "resolve": "^1.22.4" - } - }, - "node_modules/eslint-import-resolver-node/node_modules/debug": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz", - "integrity": "sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==", - "dev": true, - "dependencies": { - "ms": "^2.1.1" - } - }, - "node_modules/eslint-module-utils": { - "version": "2.8.1", - "resolved": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.8.1.tgz", - "integrity": "sha512-rXDXR3h7cs7dy9RNpUlQf80nX31XWJEyGq1tRMo+6GsO5VmTe4UTwtmonAD4ZkAsrfMVDA2wlGJ3790Ys+D49Q==", - "dev": true, - "dependencies": { - "debug": "^3.2.7" - }, - "engines": { - "node": ">=4" - }, - "peerDependenciesMeta": { - "eslint": { - "optional": true - } - } - }, - "node_modules/eslint-module-utils/node_modules/debug": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz", - "integrity": "sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==", - "dev": true, - "dependencies": { - "ms": "^2.1.1" - } - }, - "node_modules/eslint-plugin-import": { - "version": "2.29.1", - "resolved": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.29.1.tgz", - "integrity": "sha512-BbPC0cuExzhiMo4Ff1BTVwHpjjv28C5R+btTOGaCRC7UEz801up0JadwkeSk5Ued6TG34uaczuVuH6qyy5YUxw==", - "dev": true, - "dependencies": { - "array-includes": "^3.1.7", - "array.prototype.findlastindex": "^1.2.3", - "array.prototype.flat": "^1.3.2", - "array.prototype.flatmap": "^1.3.2", - "debug": "^3.2.7", - "doctrine": "^2.1.0", - "eslint-import-resolver-node": "^0.3.9", - "eslint-module-utils": "^2.8.0", - "hasown": "^2.0.0", - "is-core-module": "^2.13.1", - "is-glob": "^4.0.3", - "minimatch": "^3.1.2", - "object.fromentries": "^2.0.7", - "object.groupby": "^1.0.1", - "object.values": "^1.1.7", - "semver": "^6.3.1", - "tsconfig-paths": "^3.15.0" - }, - "engines": { - "node": ">=4" - }, - "peerDependencies": { - "eslint": "^2 || ^3 || ^4 || ^5 || ^6 || ^7.2.0 || ^8" - } - }, - "node_modules/eslint-plugin-import/node_modules/debug": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz", - "integrity": "sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==", - "dev": true, - "dependencies": { - "ms": "^2.1.1" - } - }, - "node_modules/eslint-plugin-import/node_modules/doctrine": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/doctrine/-/doctrine-2.1.0.tgz", - "integrity": "sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==", - "dev": true, - "dependencies": { - "esutils": "^2.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/eslint-plugin-prettier": { - "version": "4.2.1", - "resolved": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-4.2.1.tgz", - "integrity": "sha512-f/0rXLXUt0oFYs8ra4w49wYZBG5GKZpAYsJSm6rnYL5uVDjd+zowwMwVZHnAjf4edNrKpCDYfXDgmRE/Ak7QyQ==", - "dev": true, - "dependencies": { - "prettier-linter-helpers": "^1.0.0" - }, - "engines": { - "node": ">=12.0.0" - }, - "peerDependencies": { - "eslint": ">=7.28.0", - "prettier": ">=2.0.0" - }, - "peerDependenciesMeta": { - "eslint-config-prettier": { - "optional": true - } - } - }, - "node_modules/eslint-plugin-react": { - "version": "7.34.0", - "resolved": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.34.0.tgz", - "integrity": "sha512-MeVXdReleBTdkz/bvcQMSnCXGi+c9kvy51IpinjnJgutl3YTHWsDdke7Z1ufZpGfDG8xduBDKyjtB9JH1eBKIQ==", - "dev": true, - "dependencies": { - "array-includes": "^3.1.7", - "array.prototype.findlast": "^1.2.4", - "array.prototype.flatmap": "^1.3.2", - "array.prototype.toreversed": "^1.1.2", - "array.prototype.tosorted": "^1.1.3", - "doctrine": "^2.1.0", - "es-iterator-helpers": "^1.0.17", - "estraverse": "^5.3.0", - "jsx-ast-utils": "^2.4.1 || ^3.0.0", - "minimatch": "^3.1.2", - "object.entries": "^1.1.7", - "object.fromentries": "^2.0.7", - "object.hasown": "^1.1.3", - "object.values": "^1.1.7", - "prop-types": "^15.8.1", - "resolve": "^2.0.0-next.5", - "semver": "^6.3.1", - "string.prototype.matchall": "^4.0.10" - }, - "engines": { - "node": ">=4" - }, - "peerDependencies": { - "eslint": "^3 || ^4 || ^5 || ^6 || ^7 || ^8" - } - }, - "node_modules/eslint-plugin-react-hooks": { - "version": "4.6.0", - "resolved": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-4.6.0.tgz", - "integrity": "sha512-oFc7Itz9Qxh2x4gNHStv3BqJq54ExXmfC+a1NjAta66IAN87Wu0R/QArgIS9qKzX3dXKPI9H5crl9QchNMY9+g==", - "dev": true, - "engines": { - "node": ">=10" - }, - "peerDependencies": { - "eslint": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0" - } - }, - "node_modules/eslint-plugin-react-refresh": { - "version": "0.4.5", - "resolved": "https://registry.npmjs.org/eslint-plugin-react-refresh/-/eslint-plugin-react-refresh-0.4.5.tgz", - "integrity": "sha512-D53FYKJa+fDmZMtriODxvhwrO+IOqrxoEo21gMA0sjHdU6dPVH4OhyFip9ypl8HOF5RV5KdTo+rBQLvnY2cO8w==", - "dev": true, - "peerDependencies": { - "eslint": ">=7" - } - }, - "node_modules/eslint-plugin-react/node_modules/doctrine": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/doctrine/-/doctrine-2.1.0.tgz", - "integrity": "sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==", - "dev": true, - "dependencies": { - "esutils": "^2.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/eslint-plugin-react/node_modules/resolve": { - "version": "2.0.0-next.5", - "resolved": "https://registry.npmjs.org/resolve/-/resolve-2.0.0-next.5.tgz", - "integrity": "sha512-U7WjGVG9sH8tvjW5SmGbQuui75FiyjAX72HX15DwBBwF9dNiQZRQAg9nnPhYy+TUnE0+VcrttuvNI8oSxZcocA==", - "dev": true, - "dependencies": { - "is-core-module": "^2.13.0", - "path-parse": "^1.0.7", - "supports-preserve-symlinks-flag": "^1.0.0" - }, - "bin": { - "resolve": "bin/resolve" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/eslint-scope": { - "version": "7.2.2", - "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-7.2.2.tgz", - "integrity": "sha512-dOt21O7lTMhDM+X9mB4GX+DZrZtCUJPL/wlcTqxyrx5IvO0IYtILdtrQGQp+8n5S0gwSVmOf9NQrjMOgfQZlIg==", - "dev": true, - "dependencies": { - "esrecurse": "^4.3.0", - "estraverse": "^5.2.0" - }, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - }, - "funding": { - "url": "https://opencollective.com/eslint" - } - }, - "node_modules/eslint-visitor-keys": { - "version": "3.4.3", - "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz", - "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==", - "dev": true, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - }, - "funding": { - "url": "https://opencollective.com/eslint" - } - }, - "node_modules/eslint/node_modules/ajv": { - "version": "6.12.6", - "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz", - "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", - "dev": true, - "dependencies": { - "fast-deep-equal": "^3.1.1", - "fast-json-stable-stringify": "^2.0.0", - "json-schema-traverse": "^0.4.1", - "uri-js": "^4.2.2" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/epoberezkin" - } - }, - "node_modules/eslint/node_modules/ansi-styles": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", - "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", - "dev": true, - "dependencies": { - "color-convert": "^2.0.1" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/chalk/ansi-styles?sponsor=1" - } - }, - "node_modules/eslint/node_modules/chalk": { - "version": "4.1.2", - "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz", - "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==", - "dev": true, - "dependencies": { - "ansi-styles": "^4.1.0", - "supports-color": "^7.1.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/chalk/chalk?sponsor=1" - } - }, - "node_modules/eslint/node_modules/color-convert": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", - "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", - "dev": true, - "dependencies": { - "color-name": "~1.1.4" - }, - "engines": { - "node": ">=7.0.0" - } - }, - "node_modules/eslint/node_modules/color-name": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", - "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", - "dev": true - }, - "node_modules/eslint/node_modules/escape-string-regexp": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz", - "integrity": "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==", - "dev": true, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/eslint/node_modules/globals": { - "version": "13.24.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz", - "integrity": "sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==", - "dev": true, - "dependencies": { - "type-fest": "^0.20.2" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/eslint/node_modules/has-flag": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", - "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/eslint/node_modules/json-schema-traverse": { - "version": "0.4.1", - "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz", - "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==", - "dev": true - }, - "node_modules/eslint/node_modules/supports-color": { - "version": "7.2.0", - "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz", - "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==", - "dev": true, - "dependencies": { - "has-flag": "^4.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/eslint/node_modules/type-fest": { - "version": "0.20.2", - "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz", - "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==", - "dev": true, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/espree": { - "version": "9.6.1", - "resolved": "https://registry.npmjs.org/espree/-/espree-9.6.1.tgz", - "integrity": "sha512-oruZaFkjorTpF32kDSI5/75ViwGeZginGGy2NoOSg3Q9bnwlnmDm4HLnkl0RE3n+njDXR037aY1+x58Z/zFdwQ==", - "dev": true, - "dependencies": { - "acorn": "^8.9.0", - "acorn-jsx": "^5.3.2", - "eslint-visitor-keys": "^3.4.1" - }, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - }, - "funding": { - "url": "https://opencollective.com/eslint" - } - }, - "node_modules/esquery": { - "version": "1.5.0", - "resolved": "https://registry.npmjs.org/esquery/-/esquery-1.5.0.tgz", - "integrity": "sha512-YQLXUplAwJgCydQ78IMJywZCceoqk1oH01OERdSAJc/7U2AylwjhSCLDEtqwg811idIS/9fIU5GjG73IgjKMVg==", - "dev": true, - "dependencies": { - "estraverse": "^5.1.0" - }, - "engines": { - "node": ">=0.10" - } - }, - "node_modules/esrecurse": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz", - "integrity": "sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==", - "dependencies": { - "estraverse": "^5.2.0" - }, - "engines": { - "node": ">=4.0" - } - }, - "node_modules/estraverse": { - "version": "5.3.0", - "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz", - "integrity": "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==", - "engines": { - "node": ">=4.0" - } - }, - "node_modules/estree-walker": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz", - "integrity": "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==", - "dev": true - }, - "node_modules/esutils": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz", - "integrity": "sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/ev-emitter": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/ev-emitter/-/ev-emitter-1.1.1.tgz", - "integrity": "sha512-ipiDYhdQSCZ4hSbX4rMW+XzNKMD1prg/sTvoVmSLkuQ1MVlwjJQQA+sW8tMYR3BLUr9KjodFV4pvzunvRhd33Q==" - }, - "node_modules/events": { - "version": "3.3.0", - "resolved": "https://registry.npmjs.org/events/-/events-3.3.0.tgz", - "integrity": "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==", - "peer": true, - "engines": { - "node": ">=0.8.x" - } - }, - "node_modules/fast-deep-equal": { - "version": "3.1.3", - "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", - "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==" - }, - "node_modules/fast-diff": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.3.0.tgz", - "integrity": "sha512-VxPP4NqbUjj6MaAOafWeUn2cXWLcCtljklUtZf0Ind4XQ+QPtmA0b18zZy0jIQx+ExRVCR/ZQpBmik5lXshNsw==", - "dev": true - }, - "node_modules/fast-glob": { - "version": "3.3.2", - "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.2.tgz", - "integrity": "sha512-oX2ruAFQwf/Orj8m737Y5adxDQO0LAB7/S5MnxCdTNDd4p6BsyIVsv9JQsATbTSq8KHRpLwIHbVlUNatxd+1Ow==", - "dev": true, - "dependencies": { - "@nodelib/fs.stat": "^2.0.2", - "@nodelib/fs.walk": "^1.2.3", - "glob-parent": "^5.1.2", - "merge2": "^1.3.0", - "micromatch": "^4.0.4" - }, - "engines": { - "node": ">=8.6.0" - } - }, - "node_modules/fast-glob/node_modules/glob-parent": { - "version": "5.1.2", - "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz", - "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==", - "dev": true, - "dependencies": { - "is-glob": "^4.0.1" - }, - "engines": { - "node": ">= 6" - } - }, - "node_modules/fast-json-stable-stringify": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz", - "integrity": "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==" - }, - "node_modules/fast-levenshtein": { - "version": "2.0.6", - "resolved": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz", - "integrity": "sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==", - "dev": true - }, - "node_modules/fastest-levenshtein": { - "version": "1.0.16", - "resolved": "https://registry.npmjs.org/fastest-levenshtein/-/fastest-levenshtein-1.0.16.tgz", - "integrity": "sha512-eRnCtTTtGZFpQCwhJiUOuxPQWRXVKYDn0b2PeHfXL6/Zi53SLAzAHfVhVWK2AryC/WH05kGfxhFIPvTF0SXQzg==", - "dev": true, - "engines": { - "node": ">= 4.9.1" - } - }, - "node_modules/fastq": { - "version": "1.17.1", - "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.17.1.tgz", - "integrity": "sha512-sRVD3lWVIXWg6By68ZN7vho9a1pQcN/WBFaAAsDDFzlJjvoGx0P8z7V1t72grFJfJhu3YPZBuu25f7Kaw2jN1w==", - "dev": true, - "dependencies": { - "reusify": "^1.0.4" - } - }, - "node_modules/fault": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/fault/-/fault-1.0.4.tgz", - "integrity": "sha512-CJ0HCB5tL5fYTEA7ToAq5+kTwd++Borf1/bifxd9iT70QcXr4MRrO3Llf8Ifs70q+SJcGHFtnIE/Nw6giCtECA==", - "dependencies": { - "format": "^0.2.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/fflate": { - "version": "0.4.8", - "resolved": "https://registry.npmjs.org/fflate/-/fflate-0.4.8.tgz", - "integrity": "sha512-FJqqoDBR00Mdj9ppamLa/Y7vxm+PRmNWA67N846RvsoYVMKB4q3y/de5PA7gUmRMYK/8CMz2GDZQmCRN1wBcWA==" - }, - "node_modules/file-entry-cache": { - "version": "6.0.1", - "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz", - "integrity": "sha512-7Gps/XWymbLk2QLYK4NzpMOrYjMhdIxXuIvy2QBsLE6ljuodKvdkWs/cpyJJ3CVIVpH0Oi1Hvg1ovbMzLdFBBg==", - "dev": true, - "dependencies": { - "flat-cache": "^3.0.4" - }, - "engines": { - "node": "^10.12.0 || >=12.0.0" - } - }, - "node_modules/file-selector": { - "version": "0.6.0", - "resolved": "https://registry.npmjs.org/file-selector/-/file-selector-0.6.0.tgz", - "integrity": "sha512-QlZ5yJC0VxHxQQsQhXvBaC7VRJ2uaxTf+Tfpu4Z/OcVQJVpZO+DGU0rkoVW5ce2SccxugvpBJoMvUs59iILYdw==", - "dependencies": { - "tslib": "^2.4.0" - }, - "engines": { - "node": ">= 12" - } - }, - "node_modules/fill-range": { - "version": "7.0.1", - "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz", - "integrity": "sha512-qOo9F+dMUmC2Lcb4BbVvnKJxTPjCm+RRpe4gDuGrzkL7mEVl/djYSu2OdQ2Pa302N4oqkSg9ir6jaLWJ2USVpQ==", - "dev": true, - "dependencies": { - "to-regex-range": "^5.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/final-form": { - "version": "4.20.10", - "resolved": "https://registry.npmjs.org/final-form/-/final-form-4.20.10.tgz", - "integrity": "sha512-TL48Pi1oNHeMOHrKv1bCJUrWZDcD3DIG6AGYVNOnyZPr7Bd/pStN0pL+lfzF5BNoj/FclaoiaLenk4XUIFVYng==", - "dependencies": { - "@babel/runtime": "^7.10.0" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/final-form" - } - }, - "node_modules/final-form-arrays": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/final-form-arrays/-/final-form-arrays-3.1.0.tgz", - "integrity": "sha512-TWBvun+AopgBLw9zfTFHBllnKMVNEwCEyDawphPuBGGqNsuhGzhT7yewHys64KFFwzIs6KEteGLpKOwvTQEscQ==", - "peerDependencies": { - "final-form": "^4.20.8" - } - }, - "node_modules/find-root": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/find-root/-/find-root-1.1.0.tgz", - "integrity": "sha512-NKfW6bec6GfKc0SGx1e07QZY9PE99u0Bft/0rzSD5k3sO/vwkVUpDUKVm5Gpp5Ue3YfShPFTX2070tDs5kB9Ng==" - }, - "node_modules/find-up": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz", - "integrity": "sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==", - "dev": true, - "dependencies": { - "locate-path": "^6.0.0", - "path-exists": "^4.0.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/fizzy-ui-utils": { - "version": "2.0.7", - "resolved": "https://registry.npmjs.org/fizzy-ui-utils/-/fizzy-ui-utils-2.0.7.tgz", - "integrity": "sha512-CZXDVXQ1If3/r8s0T+v+qVeMshhfcuq0rqIFgJnrtd+Bu8GmDmqMjntjUePypVtjHXKJ6V4sw9zeyox34n9aCg==", - "dependencies": { - "desandro-matches-selector": "^2.0.0" - } - }, - "node_modules/flat-cache": { - "version": "3.2.0", - "resolved": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.2.0.tgz", - "integrity": "sha512-CYcENa+FtcUKLmhhqyctpclsq7QF38pKjZHsGNiSQF5r4FtoKDWabFDl3hzaEQMvT1LHEysw5twgLvpYYb4vbw==", - "dev": true, - "dependencies": { - "flatted": "^3.2.9", - "keyv": "^4.5.3", - "rimraf": "^3.0.2" - }, - "engines": { - "node": "^10.12.0 || >=12.0.0" - } - }, - "node_modules/flatted": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz", - "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==", - "dev": true - }, - "node_modules/follow-redirects": { - "version": "1.15.5", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.5.tgz", - "integrity": "sha512-vSFWUON1B+yAw1VN4xMfxgn5fTUiaOzAJCKBwIIgT/+7CuGy9+r+5gITvP62j3RmaD5Ph65UaERdOSRGUzZtgw==", - "funding": [ - { - "type": "individual", - "url": "https://github.com/sponsors/RubenVerborgh" - } - ], - "engines": { - "node": ">=4.0" - }, - "peerDependenciesMeta": { - "debug": { - "optional": true - } - } - }, - "node_modules/for-each": { - "version": "0.3.3", - "resolved": "https://registry.npmjs.org/for-each/-/for-each-0.3.3.tgz", - "integrity": "sha512-jqYfLp7mo9vIyQf8ykW2v7A+2N4QjeCeI5+Dz9XraiO1ign81wjiH7Fb9vSOWvQfNtmSa4H2RoQTrrXivdUZmw==", - "dependencies": { - "is-callable": "^1.1.3" - } - }, - "node_modules/form-data": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz", - "integrity": "sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==", - "dependencies": { - "asynckit": "^0.4.0", - "combined-stream": "^1.0.8", - "mime-types": "^2.1.12" - }, - "engines": { - "node": ">= 6" - } - }, - "node_modules/format": { - "version": "0.2.2", - "resolved": "https://registry.npmjs.org/format/-/format-0.2.2.tgz", - "integrity": "sha512-wzsgA6WOq+09wrU1tsJ09udeR/YZRaeArL9e1wPbFg3GG2yDnC2ldKpxs4xunpFF9DgqCqOIra3bc1HWrJ37Ww==", - "engines": { - "node": ">=0.4.x" - } - }, - "node_modules/fs.realpath": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", - "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==", - "dev": true - }, - "node_modules/fsevents": { - "version": "2.3.3", - "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", - "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", - "dev": true, - "hasInstallScript": true, - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": "^8.16.0 || ^10.6.0 || >=11.0.0" - } - }, - "node_modules/function-bind": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", - "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/function.prototype.name": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.1.6.tgz", - "integrity": "sha512-Z5kx79swU5P27WEayXM1tBi5Ze/lbIyiNgU3qyXUOf9b2rgXYyF9Dy9Cx+IQv/Lc8WCG6L82zwUPpSS9hGehIg==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1", - "functions-have-names": "^1.2.3" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/functions-have-names": { - "version": "1.2.3", - "resolved": "https://registry.npmjs.org/functions-have-names/-/functions-have-names-1.2.3.tgz", - "integrity": "sha512-xckBUXyTIqT97tq2x2AMb+g163b5JFysYk0x4qxNFwbfQkmNZoiRHb6sPzI9/QV33WeuvVYBUIiD4NzNIyqaRQ==", - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/fuse.js": { - "version": "7.0.0", - "resolved": "https://registry.npmjs.org/fuse.js/-/fuse.js-7.0.0.tgz", - "integrity": "sha512-14F4hBIxqKvD4Zz/XjDc3y94mNZN6pRv3U13Udo0lNLCWRBUsrMv2xwcF/y/Z5sV6+FQW+/ow68cHpm4sunt8Q==", - "engines": { - "node": ">=10" - } - }, - "node_modules/fuzzysort": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/fuzzysort/-/fuzzysort-1.9.0.tgz", - "integrity": "sha512-MOxCT0qLTwLqmEwc7UtU045RKef7mc8Qz8eR4r2bLNEq9dy/c3ZKMEFp6IEst69otkQdFZ4FfgH2dmZD+ddX1g==" - }, - "node_modules/gensync": { - "version": "1.0.0-beta.2", - "resolved": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz", - "integrity": "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==", - "engines": { - "node": ">=6.9.0" - } - }, - "node_modules/get-intrinsic": { - "version": "1.2.4", - "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.4.tgz", - "integrity": "sha512-5uYhsJH8VJBTv7oslg4BznJYhDoRI6waYCxMmCdnTrcCrHA/fCFKoTFz2JKKE0HdDFUF7/oQuhzumXJK7paBRQ==", - "dependencies": { - "es-errors": "^1.3.0", - "function-bind": "^1.1.2", - "has-proto": "^1.0.1", - "has-symbols": "^1.0.3", - "hasown": "^2.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/get-size": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/get-size/-/get-size-2.0.3.tgz", - "integrity": "sha512-lXNzT/h/dTjTxRbm9BXb+SGxxzkm97h/PCIKtlN/CBCxxmkkIVV21udumMS93MuVTDX583gqc94v3RjuHmI+2Q==" - }, - "node_modules/get-symbol-description": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.0.2.tgz", - "integrity": "sha512-g0QYk1dZBxGwk+Ngc+ltRH2IBp2f7zBkBMBJZCDerh6EhlhSR6+9irMCuT/09zD6qkarHUSn529sK/yL4S27mg==", - "dependencies": { - "call-bind": "^1.0.5", - "es-errors": "^1.3.0", - "get-intrinsic": "^1.2.4" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/glob": { - "version": "7.2.3", - "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", - "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", - "dev": true, - "dependencies": { - "fs.realpath": "^1.0.0", - "inflight": "^1.0.4", - "inherits": "2", - "minimatch": "^3.1.1", - "once": "^1.3.0", - "path-is-absolute": "^1.0.0" - }, - "engines": { - "node": "*" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, - "node_modules/glob-parent": { - "version": "6.0.2", - "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz", - "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==", - "dev": true, - "dependencies": { - "is-glob": "^4.0.3" - }, - "engines": { - "node": ">=10.13.0" - } - }, - "node_modules/glob-to-regexp": { - "version": "0.4.1", - "resolved": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz", - "integrity": "sha512-lkX1HJXwyMcprw/5YUZc2s7DrpAiHB21/V+E1rHUrVNokkvB6bqMzT0VfV6/86ZNabt1k14YOIaT7nDvOX3Iiw==", - "peer": true - }, - "node_modules/global-modules": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/global-modules/-/global-modules-2.0.0.tgz", - "integrity": "sha512-NGbfmJBp9x8IxyJSd1P+otYK8vonoJactOogrVfFRIAEY1ukil8RSKDz2Yo7wh1oihl51l/r6W4epkeKJHqL8A==", - "dev": true, - "dependencies": { - "global-prefix": "^3.0.0" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/global-prefix": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/global-prefix/-/global-prefix-3.0.0.tgz", - "integrity": "sha512-awConJSVCHVGND6x3tmMaKcQvwXLhjdkmomy2W+Goaui8YPgYgXJZewhg3fWC+DlfqqQuWg8AwqjGTD2nAPVWg==", - "dev": true, - "dependencies": { - "ini": "^1.3.5", - "kind-of": "^6.0.2", - "which": "^1.3.1" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/global-prefix/node_modules/which": { - "version": "1.3.1", - "resolved": "https://registry.npmjs.org/which/-/which-1.3.1.tgz", - "integrity": "sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==", - "dev": true, - "dependencies": { - "isexe": "^2.0.0" - }, - "bin": { - "which": "bin/which" - } - }, - "node_modules/globals": { - "version": "11.12.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz", - "integrity": "sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA==", - "engines": { - "node": ">=4" - } - }, - "node_modules/globalthis": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/globalthis/-/globalthis-1.0.3.tgz", - "integrity": "sha512-sFdI5LyBiNTHjRd7cGPWapiHWMOXKyuBNX/cWJ3NfzrZQVa8GI/8cofCl74AOVqq9W5kNmguTIzJ/1s2gyI9wA==", - "dependencies": { - "define-properties": "^1.1.3" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/globby": { - "version": "11.1.0", - "resolved": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz", - "integrity": "sha512-jhIXaOzy1sb8IyocaruWSn1TjmnBVs8Ayhcy83rmxNJ8q2uWKCAj3CnJY+KpGSXCueAPc0i05kVvVKtP1t9S3g==", - "dev": true, - "dependencies": { - "array-union": "^2.1.0", - "dir-glob": "^3.0.1", - "fast-glob": "^3.2.9", - "ignore": "^5.2.0", - "merge2": "^1.4.1", - "slash": "^3.0.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/globjoin": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/globjoin/-/globjoin-0.1.4.tgz", - "integrity": "sha512-xYfnw62CKG8nLkZBfWbhWwDw02CHty86jfPcc2cr3ZfeuK9ysoVPPEUxf21bAD/rWAgk52SuBrLJlefNy8mvFg==", - "dev": true - }, - "node_modules/gopd": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.0.1.tgz", - "integrity": "sha512-d65bNlIadxvpb/A2abVdlqKqV563juRnZ1Wtk6s1sIR8uNsXR70xqIzVqxVf1eTqDunwT2MkczEeaezCKTZhwA==", - "dependencies": { - "get-intrinsic": "^1.1.3" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/graceful-fs": { - "version": "4.2.11", - "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", - "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", - "peer": true - }, - "node_modules/graphemer": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/graphemer/-/graphemer-1.4.0.tgz", - "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==", - "dev": true - }, - "node_modules/handlebars": { - "version": "4.7.8", - "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.8.tgz", - "integrity": "sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==", - "dev": true, - "dependencies": { - "minimist": "^1.2.5", - "neo-async": "^2.6.2", - "source-map": "^0.6.1", - "wordwrap": "^1.0.0" - }, - "bin": { - "handlebars": "bin/handlebars" - }, - "engines": { - "node": ">=0.4.7" - }, - "optionalDependencies": { - "uglify-js": "^3.1.4" - } - }, - "node_modules/hard-rejection": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/hard-rejection/-/hard-rejection-2.1.0.tgz", - "integrity": "sha512-VIZB+ibDhx7ObhAe7OVtoEbuP4h/MuOTHJ+J8h/eBXotJYl0fBgR72xDFCKgIh22OJZIOVNxBMWuhAr10r8HdA==", - "dev": true, - "engines": { - "node": ">=6" - } - }, - "node_modules/has": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/has/-/has-1.0.4.tgz", - "integrity": "sha512-qdSAmqLF6209RFj4VVItywPMbm3vWylknmB3nvNiUIs72xAimcM8nVYxYr7ncvZq5qzk9MKIZR8ijqD/1QuYjQ==", - "engines": { - "node": ">= 0.4.0" - } - }, - "node_modules/has-bigints": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/has-bigints/-/has-bigints-1.0.2.tgz", - "integrity": "sha512-tSvCKtBr9lkF0Ex0aQiP9N+OpV4zi2r/Nee5VkRDbaqv35RLYMzbwQfFSZZH0kR+Rd6302UJZ2p/bJCEoR3VoQ==", - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/has-flag": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz", - "integrity": "sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==", - "engines": { - "node": ">=4" - } - }, - "node_modules/has-property-descriptors": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz", - "integrity": "sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==", - "dependencies": { - "es-define-property": "^1.0.0" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/has-proto": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/has-proto/-/has-proto-1.0.3.tgz", - "integrity": "sha512-SJ1amZAJUiZS+PhsVLf5tGydlaVB8EdFpaSO4gmiUKUOxk8qzn5AIy4ZeJUmh22znIdk/uMAUT2pl3FxzVUH+Q==", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/has-symbols": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz", - "integrity": "sha512-l3LCuF6MgDNwTDKkdYGEihYjt5pRPbEg46rtlmnSPlUbgmB8LOIrKJbYYFBSbnPaJexMKtiPO8hmeRjRz2Td+A==", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/has-tostringtag": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz", - "integrity": "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==", - "dependencies": { - "has-symbols": "^1.0.3" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/hasown": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", - "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==", - "dependencies": { - "function-bind": "^1.1.2" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/hast-util-parse-selector": { - "version": "2.2.5", - "resolved": "https://registry.npmjs.org/hast-util-parse-selector/-/hast-util-parse-selector-2.2.5.tgz", - "integrity": "sha512-7j6mrk/qqkSehsM92wQjdIgWM2/BW61u/53G6xmC8i1OmEdKLHbk419QKQUjz6LglWsfqoiHmyMRkP1BGjecNQ==", - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/unified" - } - }, - "node_modules/hastscript": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/hastscript/-/hastscript-6.0.0.tgz", - "integrity": "sha512-nDM6bvd7lIqDUiYEiu5Sl/+6ReP0BMk/2f4U/Rooccxkj0P5nm+acM5PrGJ/t5I8qPGiqZSE6hVAwZEdZIvP4w==", - "dependencies": { - "@types/hast": "^2.0.0", - "comma-separated-tokens": "^1.0.0", - "hast-util-parse-selector": "^2.0.0", - "property-information": "^5.0.0", - "space-separated-tokens": "^1.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/unified" - } - }, - "node_modules/highlight.js": { - "version": "10.7.3", - "resolved": "https://registry.npmjs.org/highlight.js/-/highlight.js-10.7.3.tgz", - "integrity": "sha512-tzcUFauisWKNHaRkN4Wjl/ZA07gENAjFl3J/c480dprkGTg5EQstgaNFqBfUqCq54kZRIEcreTsAgF/m2quD7A==", - "engines": { - "node": "*" - } - }, - "node_modules/hoist-non-react-statics": { - "version": "3.3.2", - "resolved": "https://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz", - "integrity": "sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==", - "dependencies": { - "react-is": "^16.7.0" - } - }, - "node_modules/hoist-non-react-statics/node_modules/react-is": { - "version": "16.13.1", - "resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", - "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==" - }, - "node_modules/hosted-git-info": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-4.1.0.tgz", - "integrity": "sha512-kyCuEOWjJqZuDbRHzL8V93NzQhwIB71oFWSyzVo+KPZI+pnQPPxucdkrOZvkLRnrf5URsQM+IJ09Dw29cRALIA==", - "dev": true, - "dependencies": { - "lru-cache": "^6.0.0" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/hosted-git-info/node_modules/lru-cache": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz", - "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==", - "dev": true, - "dependencies": { - "yallist": "^4.0.0" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/hosted-git-info/node_modules/yallist": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", - "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", - "dev": true - }, - "node_modules/hotkeys-js": { - "version": "3.9.4", - "resolved": "https://registry.npmjs.org/hotkeys-js/-/hotkeys-js-3.9.4.tgz", - "integrity": "sha512-2zuLt85Ta+gIyvs4N88pCYskNrxf1TFv3LR9t5mdAZIX8BcgQQ48F2opUptvHa6m8zsy5v/a0i9mWzTrlNWU0Q==" - }, - "node_modules/html-element-map": { - "version": "1.3.1", - "resolved": "https://registry.npmjs.org/html-element-map/-/html-element-map-1.3.1.tgz", - "integrity": "sha512-6XMlxrAFX4UEEGxctfFnmrFaaZFNf9i5fNuV5wZ3WWQ4FVaNP1aX1LkX9j2mfEx1NpjeE/rL3nmgEn23GdFmrg==", - "dependencies": { - "array.prototype.filter": "^1.0.0", - "call-bind": "^1.0.2" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/html-tags": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/html-tags/-/html-tags-3.3.1.tgz", - "integrity": "sha512-ztqyC3kLto0e9WbNp0aeP+M3kTt+nbaIveGmUxAtZa+8iFgKLUOD4YKM5j+f3QD89bra7UeumolZHKuOXnTmeQ==", - "dev": true, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/html2canvas": { - "version": "1.4.1", - "resolved": "https://registry.npmjs.org/html2canvas/-/html2canvas-1.4.1.tgz", - "integrity": "sha512-fPU6BHNpsyIhr8yyMpTLLxAbkaK8ArIBcmZIRiBLiDhjeqvXolaEmDGmELFuX9I4xDcaKKcJl+TKZLqruBbmWA==", - "optional": true, - "dependencies": { - "css-line-break": "^2.1.0", - "text-segmentation": "^1.0.3" - }, - "engines": { - "node": ">=8.0.0" - } - }, - "node_modules/htmlparser2": { - "version": "8.0.2", - "resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-8.0.2.tgz", - "integrity": "sha512-GYdjWKDkbRLkZ5geuHs5NY1puJ+PXwP7+fHPRz06Eirsb9ugf6d8kkXav6ADhcODhFFPMIXyxkxSuMf3D6NCFA==", - "funding": [ - "https://github.com/fb55/htmlparser2?sponsor=1", - { - "type": "github", - "url": "https://github.com/sponsors/fb55" - } - ], - "dependencies": { - "domelementtype": "^2.3.0", - "domhandler": "^5.0.3", - "domutils": "^3.0.1", - "entities": "^4.4.0" - } - }, - "node_modules/husky": { - "version": "7.0.4", - "resolved": "https://registry.npmjs.org/husky/-/husky-7.0.4.tgz", - "integrity": "sha512-vbaCKN2QLtP/vD4yvs6iz6hBEo6wkSzs8HpRah1Z6aGmF2KW5PdYuAd7uX5a+OyBZHBhd+TFLqgjUgytQr4RvQ==", - "dev": true, - "bin": { - "husky": "lib/bin.js" - }, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/typicode" - } - }, - "node_modules/iconv-lite": { - "version": "0.6.3", - "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz", - "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==", - "dependencies": { - "safer-buffer": ">= 2.1.2 < 3.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/ieee754": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz", - "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ] - }, - "node_modules/ignore": { - "version": "5.3.1", - "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.1.tgz", - "integrity": "sha512-5Fytz/IraMjqpwfd34ke28PTVMjZjJG2MPn5t7OE4eUCUNf8BAa7b5WUS9/Qvr6mwOQS7Mk6vdsMno5he+T8Xw==", - "dev": true, - "engines": { - "node": ">= 4" - } - }, - "node_modules/imagesloaded": { - "version": "4.1.4", - "resolved": "https://registry.npmjs.org/imagesloaded/-/imagesloaded-4.1.4.tgz", - "integrity": "sha512-ltiBVcYpc/TYTF5nolkMNsnREHW+ICvfQ3Yla2Sgr71YFwQ86bDwV9hgpFhFtrGPuwEx5+LqOHIrdXBdoWwwsA==", - "dependencies": { - "ev-emitter": "^1.0.0" - } - }, - "node_modules/immer": { - "version": "9.0.21", - "resolved": "https://registry.npmjs.org/immer/-/immer-9.0.21.tgz", - "integrity": "sha512-bc4NBHqOqSfRW7POMkHd51LvClaeMXpm8dx0e8oE2GORbq5aRK7Bxl4FyzVLdGtLmvLKL7BTDBG5ACQm4HWjTA==", - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/immer" - } - }, - "node_modules/immutable": { - "version": "4.3.5", - "resolved": "https://registry.npmjs.org/immutable/-/immutable-4.3.5.tgz", - "integrity": "sha512-8eabxkth9gZatlwl5TBuJnCsoTADlL6ftEr7A4qgdaTsPyreilDSnUk57SO+jfKcNtxPa22U5KK6DSeAYhpBJw==", - "dev": true - }, - "node_modules/import-fresh": { - "version": "3.3.0", - "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz", - "integrity": "sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==", - "dependencies": { - "parent-module": "^1.0.0", - "resolve-from": "^4.0.0" - }, - "engines": { - "node": ">=6" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/import-lazy": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/import-lazy/-/import-lazy-4.0.0.tgz", - "integrity": "sha512-rKtvo6a868b5Hu3heneU+L4yEQ4jYKLtjpnPeUdK7h0yzXGmyBTypknlkCvHFBqfX9YlorEiMM6Dnq/5atfHkw==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/imurmurhash": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz", - "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==", - "dev": true, - "engines": { - "node": ">=0.8.19" - } - }, - "node_modules/indent-string": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz", - "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/inflight": { - "version": "1.0.6", - "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", - "integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==", - "dev": true, - "dependencies": { - "once": "^1.3.0", - "wrappy": "1" - } - }, - "node_modules/inherits": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", - "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==" - }, - "node_modules/ini": { - "version": "1.3.8", - "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", - "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", - "dev": true - }, - "node_modules/internal-slot": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.0.7.tgz", - "integrity": "sha512-NGnrKwXzSms2qUUih/ILZ5JBqNTSa1+ZmP6flaIp6KmSElgE9qdndzS3cqjrDovwFdmwsGsLdeFgB6suw+1e9g==", - "dependencies": { - "es-errors": "^1.3.0", - "hasown": "^2.0.0", - "side-channel": "^1.0.4" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/invariant": { - "version": "2.2.4", - "resolved": "https://registry.npmjs.org/invariant/-/invariant-2.2.4.tgz", - "integrity": "sha512-phJfQVBuaJM5raOpJjSfkiD6BpbCE4Ns//LaXl6wGYtUBY83nWS6Rf9tXm2e8VaK60JEjYldbPif/A2B1C2gNA==", - "dependencies": { - "loose-envify": "^1.0.0" - } - }, - "node_modules/is-alphabetical": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/is-alphabetical/-/is-alphabetical-1.0.4.tgz", - "integrity": "sha512-DwzsA04LQ10FHTZuL0/grVDk4rFoVH1pjAToYwBrHSxcrBIGQuXrQMtD5U1b0U2XVgKZCTLLP8u2Qxqhy3l2Vg==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/is-alphanumerical": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/is-alphanumerical/-/is-alphanumerical-1.0.4.tgz", - "integrity": "sha512-UzoZUr+XfVz3t3v4KyGEniVL9BDRoQtY7tOyrRybkVNjDFWyo1yhXNGrrBTQxp3ib9BLAWs7k2YKBQsFRkZG9A==", - "dependencies": { - "is-alphabetical": "^1.0.0", - "is-decimal": "^1.0.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/is-array-buffer": { - "version": "3.0.4", - "resolved": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.4.tgz", - "integrity": "sha512-wcjaerHw0ydZwfhiKbXJWLDY8A7yV7KhjQOpb83hGgGfId/aQa4TOvwyzn2PuswW2gPCYEL/nEAiSVpdOj1lXw==", - "dependencies": { - "call-bind": "^1.0.2", - "get-intrinsic": "^1.2.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-arrayish": { - "version": "0.2.1", - "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz", - "integrity": "sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==" - }, - "node_modules/is-async-function": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/is-async-function/-/is-async-function-2.0.0.tgz", - "integrity": "sha512-Y1JXKrfykRJGdlDwdKlLpLyMIiWqWvuSd17TvZk68PLAOGOoF4Xyav1z0Xhoi+gCYjZVeC5SI+hYFOfvXmGRCA==", - "dev": true, - "dependencies": { - "has-tostringtag": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-bigint": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.0.4.tgz", - "integrity": "sha512-zB9CruMamjym81i2JZ3UMn54PKGsQzsJeo6xvN3HJJ4CAsQNB6iRutp2To77OfCNuoxspsIhzaPoO1zyCEhFOg==", - "dependencies": { - "has-bigints": "^1.0.1" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-binary-path": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz", - "integrity": "sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==", - "dev": true, - "dependencies": { - "binary-extensions": "^2.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/is-boolean-object": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.1.2.tgz", - "integrity": "sha512-gDYaKHJmnj4aWxyj6YHyXVpdQawtVLHU5cb+eztPGczf6cjuTdwve5ZIEfgXqH4e57An1D1AKf8CZ3kYrQRqYA==", - "dependencies": { - "call-bind": "^1.0.2", - "has-tostringtag": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-callable": { - "version": "1.2.7", - "resolved": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz", - "integrity": "sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA==", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-core-module": { - "version": "2.13.1", - "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.13.1.tgz", - "integrity": "sha512-hHrIjvZsftOsvKSn2TRYl63zvxsgE0K+0mYMoH6gD4omR5IWB2KynivBQczo3+wF1cCkjzvptnI9Q0sPU66ilw==", - "dependencies": { - "hasown": "^2.0.0" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-date-object": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.5.tgz", - "integrity": "sha512-9YQaSxsAiSwcvS33MBk3wTCVnWK+HhF8VZR2jRxehM16QcVOdHqPn4VPHmRK4lSr38n9JriurInLcP90xsYNfQ==", - "dependencies": { - "has-tostringtag": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-decimal": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/is-decimal/-/is-decimal-1.0.4.tgz", - "integrity": "sha512-RGdriMmQQvZ2aqaQq3awNA6dCGtKpiDFcOzrTWrDAT2MiWrKQVPmxLGHl7Y2nNu6led0kEyoX0enY0qXYsv9zw==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/is-extglob": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz", - "integrity": "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/is-finalizationregistry": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/is-finalizationregistry/-/is-finalizationregistry-1.0.2.tgz", - "integrity": "sha512-0by5vtUJs8iFQb5TYUHHPudOR+qXYIMKtiUzvLIZITZUjknFmziyBJuLhVRc+Ds0dREFlskDNJKYIdIzu/9pfw==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.2" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-fullwidth-code-point": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", - "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/is-generator-function": { - "version": "1.0.10", - "resolved": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.0.10.tgz", - "integrity": "sha512-jsEjy9l3yiXEQ+PsXdmBwEPcOxaXWLspKdplFUVI9vq1iZgIekeC0L167qeu86czQaxed3q/Uzuw0swL0irL8A==", - "dev": true, - "dependencies": { - "has-tostringtag": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-glob": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz", - "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==", - "dev": true, - "dependencies": { - "is-extglob": "^2.1.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/is-hexadecimal": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/is-hexadecimal/-/is-hexadecimal-1.0.4.tgz", - "integrity": "sha512-gyPJuv83bHMpocVYoqof5VDiZveEoGoFL8m3BXNb2VW8Xs+rz9kqO8LOQ5DH6EsuvilT1ApazU0pyl+ytbPtlw==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/is-map": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/is-map/-/is-map-2.0.3.tgz", - "integrity": "sha512-1Qed0/Hr2m+YqxnM09CjA2d/i6YZNfF6R2oRAOj36eUdS6qIV/huPJNSEpKbupewFs+ZsJlxsjjPbc0/afW6Lw==", - "dev": true, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-negative-zero": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/is-negative-zero/-/is-negative-zero-2.0.3.tgz", - "integrity": "sha512-5KoIu2Ngpyek75jXodFvnafB6DJgr3u8uuK0LEZJjrU19DrMD3EVERaR8sjz8CCGgpZvxPl9SuE1GMVPFHx1mw==", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-number": { - "version": "7.0.0", - "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz", - "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==", - "dev": true, - "engines": { - "node": ">=0.12.0" - } - }, - "node_modules/is-number-object": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.0.7.tgz", - "integrity": "sha512-k1U0IRzLMo7ZlYIfzRu23Oh6MiIFasgpb9X76eqfFZAqwH44UI4KTBvBYIZ1dSL9ZzChTB9ShHfLkR4pdW5krQ==", - "dependencies": { - "has-tostringtag": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-path-inside": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz", - "integrity": "sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/is-plain-obj": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz", - "integrity": "sha512-yvkRyxmFKEOQ4pNXCmJG5AEQNlXJS5LaONXo5/cLdTZdWvsZ1ioJEonLGAosKlMWE8lwUy/bJzMjcw8az73+Fg==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/is-plain-object": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz", - "integrity": "sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/is-regex": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.4.tgz", - "integrity": "sha512-kvRdxDsxZjhzUX07ZnLydzS1TU/TJlTUHHY4YLL87e37oUA49DfkLqgy+VjFocowy29cKvcSiu+kIv728jTTVg==", - "dependencies": { - "call-bind": "^1.0.2", - "has-tostringtag": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-set": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/is-set/-/is-set-2.0.3.tgz", - "integrity": "sha512-iPAjerrse27/ygGLxw+EBR9agv9Y6uLeYVJMu+QNCoouJ1/1ri0mGrcWpfCqFZuzzx3WjtwxG098X+n4OuRkPg==", - "dev": true, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-shared-array-buffer": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.3.tgz", - "integrity": "sha512-nA2hv5XIhLR3uVzDDfCIknerhx8XUKnstuOERPNNIinXG7v9u+ohXF67vxm4TPTEPU6lm61ZkwP3c9PCB97rhg==", - "dependencies": { - "call-bind": "^1.0.7" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-string": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/is-string/-/is-string-1.0.7.tgz", - "integrity": "sha512-tE2UXzivje6ofPW7l23cjDOMa09gb7xlAqG6jG5ej6uPV32TlWP3NKPigtaGeHNu9fohccRYvIiZMfOOnOYUtg==", - "dependencies": { - "has-tostringtag": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-subset": { - "version": "0.1.1", - "resolved": "https://registry.npmjs.org/is-subset/-/is-subset-0.1.1.tgz", - "integrity": "sha512-6Ybun0IkarhmEqxXCNw/C0bna6Zb/TkfUX9UbwJtK6ObwAVCxmAP308WWTHviM/zAqXk05cdhYsUsZeGQh99iw==" - }, - "node_modules/is-symbol": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.4.tgz", - "integrity": "sha512-C/CPBqKWnvdcxqIARxyOh4v1UUEOCHpgDa0WYgpKDFMszcrPcffg5uhwSgPCLD2WWxmq6isisz87tzT01tuGhg==", - "dependencies": { - "has-symbols": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-typed-array": { - "version": "1.1.13", - "resolved": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.13.tgz", - "integrity": "sha512-uZ25/bUAlUY5fR4OKT4rZQEBrzQWYV9ZJYGGsUmEJ6thodVJ1HX64ePQ6Z0qPWP+m+Uq6e9UugrE38jeYsDSMw==", - "dependencies": { - "which-typed-array": "^1.1.14" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-weakmap": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz", - "integrity": "sha512-K5pXYOm9wqY1RgjpL3YTkF39tni1XajUIkawTLUo9EZEVUFga5gSQJF8nNS7ZwJQ02y+1YCNYcMh+HIf1ZqE+w==", - "dev": true, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-weakref": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.0.2.tgz", - "integrity": "sha512-qctsuLZmIQ0+vSSMfoVvyFe2+GSEvnmZ2ezTup1SBse9+twCCeial6EEi3Nc2KFcf6+qz2FBPnjXsk8xhKSaPQ==", - "dependencies": { - "call-bind": "^1.0.2" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/is-weakset": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/is-weakset/-/is-weakset-2.0.3.tgz", - "integrity": "sha512-LvIm3/KWzS9oRFHugab7d+M/GcBXuXX5xZkzPmN+NxihdQlZUQ4dWuSV1xR/sq6upL1TJEDrfBgRepHFdBtSNQ==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.7", - "get-intrinsic": "^1.2.4" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/isarray": { - "version": "2.0.5", - "resolved": "https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz", - "integrity": "sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==" - }, - "node_modules/isexe": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", - "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", - "dev": true - }, - "node_modules/iterator.prototype": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/iterator.prototype/-/iterator.prototype-1.1.2.tgz", - "integrity": "sha512-DR33HMMr8EzwuRL8Y9D3u2BMj8+RqSE850jfGu59kS7tbmPLzGkZmVSfyCFSDxuZiEY6Rzt3T2NA/qU+NwVj1w==", - "dev": true, - "dependencies": { - "define-properties": "^1.2.1", - "get-intrinsic": "^1.2.1", - "has-symbols": "^1.0.3", - "reflect.getprototypeof": "^1.0.4", - "set-function-name": "^2.0.1" - } - }, - "node_modules/javascript-time-ago": { - "version": "2.5.9", - "resolved": "https://registry.npmjs.org/javascript-time-ago/-/javascript-time-ago-2.5.9.tgz", - "integrity": "sha512-pQ8mNco/9g9TqWXWWjP0EWl6i/lAQScOyEeXy5AB+f7MfLSdgyV9BJhiOD1zrIac/lrxPYOWNbyl/IW8CW5n0A==", - "dependencies": { - "relative-time-format": "^1.1.6" - } - }, - "node_modules/jest-worker": { - "version": "27.5.1", - "resolved": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz", - "integrity": "sha512-7vuh85V5cdDofPyxn58nrPjBktZo0u9x1g8WtjQol+jZDaE+fhN+cIvTj11GndBnMnyfrUOG1sZQxCdjKh+DKg==", - "peer": true, - "dependencies": { - "@types/node": "*", - "merge-stream": "^2.0.0", - "supports-color": "^8.0.0" - }, - "engines": { - "node": ">= 10.13.0" - } - }, - "node_modules/jest-worker/node_modules/has-flag": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", - "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", - "peer": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/jest-worker/node_modules/supports-color": { - "version": "8.1.1", - "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz", - "integrity": "sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==", - "peer": true, - "dependencies": { - "has-flag": "^4.0.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/chalk/supports-color?sponsor=1" - } - }, - "node_modules/js-base64": { - "version": "3.7.7", - "resolved": "https://registry.npmjs.org/js-base64/-/js-base64-3.7.7.tgz", - "integrity": "sha512-7rCnleh0z2CkXhH67J8K1Ytz0b2Y+yxTPL+/KOJoa20hfnVQ/3/T6W/KflYI4bRHRagNeXeU2bkNGI3v1oS/lw==" - }, - "node_modules/js-tokens": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz", - "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==" - }, - "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", - "dev": true, - "dependencies": { - "argparse": "^2.0.1" - }, - "bin": { - "js-yaml": "bin/js-yaml.js" - } - }, - "node_modules/jsesc": { - "version": "2.5.2", - "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz", - "integrity": "sha512-OYu7XEzjkCQ3C5Ps3QIZsQfNpqoJyZZA99wd9aWd05NCtC5pWOkShK2mkL6HXQR6/Cy2lbNdPlZBpuQHXE63gA==", - "bin": { - "jsesc": "bin/jsesc" - }, - "engines": { - "node": ">=4" - } - }, - "node_modules/json-buffer": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz", - "integrity": "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==", - "dev": true - }, - "node_modules/json-parse-even-better-errors": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz", - "integrity": "sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==" - }, - "node_modules/json-schema-compare": { - "version": "0.2.2", - "resolved": "https://registry.npmjs.org/json-schema-compare/-/json-schema-compare-0.2.2.tgz", - "integrity": "sha512-c4WYmDKyJXhs7WWvAWm3uIYnfyWFoIp+JEoX34rctVvEkMYCPGhXtvmFFXiffBbxfZsvQ0RNnV5H7GvDF5HCqQ==", - "dependencies": { - "lodash": "^4.17.4" - } - }, - "node_modules/json-schema-merge-allof": { - "version": "0.8.1", - "resolved": "https://registry.npmjs.org/json-schema-merge-allof/-/json-schema-merge-allof-0.8.1.tgz", - "integrity": "sha512-CTUKmIlPJbsWfzRRnOXz+0MjIqvnleIXwFTzz+t9T86HnYX/Rozria6ZVGLktAU9e+NygNljveP+yxqtQp/Q4w==", - "dependencies": { - "compute-lcm": "^1.1.2", - "json-schema-compare": "^0.2.2", - "lodash": "^4.17.20" - }, - "engines": { - "node": ">=12.0.0" - } - }, - "node_modules/json-schema-traverse": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", - "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==" - }, - "node_modules/json-stable-stringify-without-jsonify": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz", - "integrity": "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==", - "dev": true - }, - "node_modules/json-stringify-safe": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz", - "integrity": "sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA==", - "dev": true - }, - "node_modules/json5": { - "version": "2.2.3", - "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz", - "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==", - "bin": { - "json5": "lib/cli.js" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/jsonpointer": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-5.0.1.tgz", - "integrity": "sha512-p/nXbhSEcu3pZRdkW1OfJhpsVtW1gd4Wa1fnQc9YLiTfAjn0312eMKimbdIQzuZl9aa9xUGaRlP9T/CJE/ditQ==", - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/jspdf": { - "version": "2.5.1", - "resolved": "https://registry.npmjs.org/jspdf/-/jspdf-2.5.1.tgz", - "integrity": "sha512-hXObxz7ZqoyhxET78+XR34Xu2qFGrJJ2I2bE5w4SM8eFaFEkW2xcGRVUss360fYelwRSid/jT078kbNvmoW0QA==", - "dependencies": { - "@babel/runtime": "^7.14.0", - "atob": "^2.1.2", - "btoa": "^1.2.1", - "fflate": "^0.4.8" - }, - "optionalDependencies": { - "canvg": "^3.0.6", - "core-js": "^3.6.0", - "dompurify": "^2.2.0", - "html2canvas": "^1.0.0-rc.5" - } - }, - "node_modules/jspdf-autotable": { - "version": "3.8.2", - "resolved": "https://registry.npmjs.org/jspdf-autotable/-/jspdf-autotable-3.8.2.tgz", - "integrity": "sha512-zW1ix99/mtR4MbIni7IqvrpfHmuTaICl6iv6wqjRN86Nxtwaw/QtOeDbpXqYSzHIJK9JvgtLM283sc5x+ipkJg==", - "peerDependencies": { - "jspdf": "^2.5.1" - } - }, - "node_modules/jspdf/node_modules/dompurify": { - "version": "2.5.6", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.6.tgz", - "integrity": "sha512-zUTaUBO8pY4+iJMPE1B9XlO2tXVYIcEA4SNGtvDELzTSCQO7RzH+j7S180BmhmJId78lqGU2z19vgVx2Sxs/PQ==", - "optional": true - }, - "node_modules/jsx-ast-utils": { - "version": "3.3.5", - "resolved": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz", - "integrity": "sha512-ZZow9HBI5O6EPgSJLUb8n2NKgmVWTwCvHGwFuJlMjvLFqlGG6pjirPhtdsseaLZjSibD8eegzmYpUZwoIlj2cQ==", - "dev": true, - "dependencies": { - "array-includes": "^3.1.6", - "array.prototype.flat": "^1.3.1", - "object.assign": "^4.1.4", - "object.values": "^1.1.6" - }, - "engines": { - "node": ">=4.0" - } - }, - "node_modules/keyv": { - "version": "4.5.4", - "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz", - "integrity": "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==", - "dev": true, - "dependencies": { - "json-buffer": "3.0.1" - } - }, - "node_modules/kind-of": { - "version": "6.0.3", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz", - "integrity": "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/known-css-properties": { - "version": "0.26.0", - "resolved": "https://registry.npmjs.org/known-css-properties/-/known-css-properties-0.26.0.tgz", - "integrity": "sha512-5FZRzrZzNTBruuurWpvZnvP9pum+fe0HcK8z/ooo+U+Hmp4vtbyp1/QDsqmufirXy4egGzbaH/y2uCZf+6W5Kg==", - "dev": true - }, - "node_modules/levn": { - "version": "0.4.1", - "resolved": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz", - "integrity": "sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==", - "dev": true, - "dependencies": { - "prelude-ls": "^1.2.1", - "type-check": "~0.4.0" - }, - "engines": { - "node": ">= 0.8.0" - } - }, - "node_modules/lines-and-columns": { - "version": "1.2.4", - "resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz", - "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==" - }, - "node_modules/loader-runner": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.0.tgz", - "integrity": "sha512-3R/1M+yS3j5ou80Me59j7F9IMs4PXs3VqRrm0TU3AbKPxlmpoY1TNscJV/oGJXo8qCatFGTfDbY6W6ipGOYXfg==", - "peer": true, - "engines": { - "node": ">=6.11.5" - } - }, - "node_modules/locate-path": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz", - "integrity": "sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==", - "dev": true, - "dependencies": { - "p-locate": "^5.0.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/lodash": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", - "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" - }, - "node_modules/lodash-es": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz", - "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==" - }, - "node_modules/lodash.debounce": { - "version": "4.0.8", - "resolved": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz", - "integrity": "sha512-FT1yDzDYEoYWhnSGnpE/4Kj1fLZkDFyqRb7fNt6FdYOSxlUWAtp42Eh6Wb0rGIv/m9Bgo7x4GhQbm5Ys4SG5ow==" - }, - "node_modules/lodash.escape": { - "version": "4.0.1", - "resolved": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-4.0.1.tgz", - "integrity": "sha512-nXEOnb/jK9g0DYMr1/Xvq6l5xMD7GDG55+GSYIYmS0G4tBk/hURD4JR9WCavs04t33WmJx9kCyp9vJ+mr4BOUw==" - }, - "node_modules/lodash.flattendeep": { - "version": "4.4.0", - "resolved": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz", - "integrity": "sha512-uHaJFihxmJcEX3kT4I23ABqKKalJ/zDrDg0lsFtc1h+3uw49SIJ5beyhx5ExVRti3AvKoOJngIj7xz3oylPdWQ==" - }, - "node_modules/lodash.isequal": { - "version": "4.5.0", - "resolved": "https://registry.npmjs.org/lodash.isequal/-/lodash.isequal-4.5.0.tgz", - "integrity": "sha512-pDo3lu8Jhfjqls6GkMgpahsF9kCyayhgykjyLMNFTKWrpVdAQtYyB4muAMWozBB4ig/dtWAmsMxLEI8wuz+DYQ==" - }, - "node_modules/lodash.memoize": { - "version": "4.1.2", - "resolved": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-4.1.2.tgz", - "integrity": "sha512-t7j+NzmgnQzTAYXcsHYLgimltOV1MXHtlOWf6GjL9Kj8GK5FInw5JotxvbOs+IvV1/Dzo04/fCGfLVs7aXb4Ag==" - }, - "node_modules/lodash.merge": { - "version": "4.6.2", - "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz", - "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==", - "dev": true - }, - "node_modules/lodash.throttle": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/lodash.throttle/-/lodash.throttle-4.1.1.tgz", - "integrity": "sha512-wIkUCfVKpVsWo3JSZlc+8MB5it+2AN5W8J7YVMST30UrvcQNZ1Okbj+rbVniijTWE6FGYy4XJq/rHkas8qJMLQ==" - }, - "node_modules/lodash.truncate": { - "version": "4.4.2", - "resolved": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz", - "integrity": "sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==", - "dev": true - }, - "node_modules/loose-envify": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz", - "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==", - "dependencies": { - "js-tokens": "^3.0.0 || ^4.0.0" - }, - "bin": { - "loose-envify": "cli.js" - } - }, - "node_modules/lowlight": { - "version": "1.20.0", - "resolved": "https://registry.npmjs.org/lowlight/-/lowlight-1.20.0.tgz", - "integrity": "sha512-8Ktj+prEb1RoCPkEOrPMYUN/nCggB7qAWe3a7OpMjWQkh3l2RD5wKRQ+o8Q8YuI9RG/xs95waaI/E6ym/7NsTw==", - "dependencies": { - "fault": "^1.0.0", - "highlight.js": "~10.7.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/lru-cache": { - "version": "5.1.1", - "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz", - "integrity": "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==", - "dependencies": { - "yallist": "^3.0.2" - } - }, - "node_modules/map-obj": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/map-obj/-/map-obj-4.3.0.tgz", - "integrity": "sha512-hdN1wVrZbb29eBGiGjJbeP8JbKjq1urkHJ/LIP/NY48MZ1QVXUsQBV1G1zvYFHn1XE06cwjBsOI2K3Ulnj1YXQ==", - "dev": true, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/markdown-to-jsx": { - "version": "7.4.2", - "resolved": "https://registry.npmjs.org/markdown-to-jsx/-/markdown-to-jsx-7.4.2.tgz", - "integrity": "sha512-xgEwt13t+pM1kmE5vN0Ch64PX3tGDFt5Xa3e36sCknTnWiqPcnskWzIoaO/tGaPKOd0avCO0IwmBSmVxn/ZAcg==", - "engines": { - "node": ">= 10" - }, - "peerDependencies": { - "react": ">= 0.14.0" - } - }, - "node_modules/masonry-layout": { - "version": "4.2.2", - "resolved": "https://registry.npmjs.org/masonry-layout/-/masonry-layout-4.2.2.tgz", - "integrity": "sha512-iGtAlrpHNyxaR19CvKC3npnEcAwszXoyJiI8ARV2ePi7fmYhIud25MHK8Zx4P0LCC4d3TNO9+rFa1KoK1OEOaA==", - "dependencies": { - "get-size": "^2.0.2", - "outlayer": "^2.1.0" - } - }, - "node_modules/mathml-tag-names": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/mathml-tag-names/-/mathml-tag-names-2.1.3.tgz", - "integrity": "sha512-APMBEanjybaPzUrfqU0IMU5I0AswKMH7k8OTLs0vvV4KZpExkTkY87nR/zpbuTPj+gARop7aGUbl11pnDfW6xg==", - "dev": true, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/memoize-one": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/memoize-one/-/memoize-one-6.0.0.tgz", - "integrity": "sha512-rkpe71W0N0c0Xz6QD0eJETuWAJGnJ9afsl1srmwPrI+yBCkge5EycXXbYRyvL29zZVUWQCY7InPRCv3GDXuZNw==" - }, - "node_modules/meow": { - "version": "9.0.0", - "resolved": "https://registry.npmjs.org/meow/-/meow-9.0.0.tgz", - "integrity": "sha512-+obSblOQmRhcyBt62furQqRAQpNyWXo8BuQ5bN7dG8wmwQ+vwHKp/rCFD4CrTP8CsDQD1sjoZ94K417XEUk8IQ==", - "dev": true, - "dependencies": { - "@types/minimist": "^1.2.0", - "camelcase-keys": "^6.2.2", - "decamelize": "^1.2.0", - "decamelize-keys": "^1.1.0", - "hard-rejection": "^2.1.0", - "minimist-options": "4.1.0", - "normalize-package-data": "^3.0.0", - "read-pkg-up": "^7.0.1", - "redent": "^3.0.0", - "trim-newlines": "^3.0.0", - "type-fest": "^0.18.0", - "yargs-parser": "^20.2.3" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/merge-stream": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz", - "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==", - "peer": true - }, - "node_modules/merge2": { - "version": "1.4.1", - "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz", - "integrity": "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==", - "dev": true, - "engines": { - "node": ">= 8" - } - }, - "node_modules/micromatch": { - "version": "4.0.5", - "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.5.tgz", - "integrity": "sha512-DMy+ERcEW2q8Z2Po+WNXuw3c5YaUSFjAO5GsJqfEl7UjvtIuFKO6ZrKvcItdy98dwFI2N1tg3zNIdKaQT+aNdA==", - "dev": true, - "dependencies": { - "braces": "^3.0.2", - "picomatch": "^2.3.1" - }, - "engines": { - "node": ">=8.6" - } - }, - "node_modules/mime-db": { - "version": "1.52.0", - "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", - "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", - "engines": { - "node": ">= 0.6" - } - }, - "node_modules/mime-types": { - "version": "2.1.35", - "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", - "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", - "dependencies": { - "mime-db": "1.52.0" - }, - "engines": { - "node": ">= 0.6" - } - }, - "node_modules/min-indent": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz", - "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==", - "dev": true, - "engines": { - "node": ">=4" - } - }, - "node_modules/minimatch": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", - "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==", - "dev": true, - "dependencies": { - "brace-expansion": "^1.1.7" - }, - "engines": { - "node": "*" - } - }, - "node_modules/minimist": { - "version": "1.2.8", - "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", - "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", - "dev": true, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/minimist-options": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/minimist-options/-/minimist-options-4.1.0.tgz", - "integrity": "sha512-Q4r8ghd80yhO/0j1O3B2BjweX3fiHg9cdOwjJd2J76Q135c+NDxGCqdYKQ1SKBuFfgWbAUzBfvYjPUEeNgqN1A==", - "dev": true, - "dependencies": { - "arrify": "^1.0.1", - "is-plain-obj": "^1.1.0", - "kind-of": "^6.0.3" - }, - "engines": { - "node": ">= 6" - } - }, - "node_modules/moment": { - "version": "2.30.1", - "resolved": "https://registry.npmjs.org/moment/-/moment-2.30.1.tgz", - "integrity": "sha512-uEmtNhbDOrWPFS+hdjFCBfy9f2YoyzRpwcl+DqpC6taX21FzsTLQVbMV/W7PzNSX6x/bhC1zA3c2UQ5NzH6how==", - "engines": { - "node": "*" - } - }, - "node_modules/monaco-editor": { - "version": "0.47.0", - "resolved": "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.47.0.tgz", - "integrity": "sha512-VabVvHvQ9QmMwXu4du008ZDuyLnHs9j7ThVFsiJoXSOQk18+LF89N4ADzPbFenm0W4V2bGHnFBztIRQTgBfxzw==", - "peer": true - }, - "node_modules/moo": { - "version": "0.5.2", - "resolved": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", - "integrity": "sha512-iSAJLHYKnX41mKcJKjqvnAN9sf0LMDTXDEvFv+ffuRR9a1MIuXLjMNL6EsnDHSkKLTWNqQQ5uo61P4EbU4NU+Q==" - }, - "node_modules/ms": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", - "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==" - }, - "node_modules/nanoid": { - "version": "3.3.7", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.7.tgz", - "integrity": "sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "bin": { - "nanoid": "bin/nanoid.cjs" - }, - "engines": { - "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" - } - }, - "node_modules/natural-compare": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz", - "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==", - "dev": true - }, - "node_modules/nearley": { - "version": "2.20.1", - "resolved": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", - "integrity": "sha512-+Mc8UaAebFzgV+KpI5n7DasuuQCHA89dmwm7JXw3TV43ukfNQ9DnBH3Mdb2g/I4Fdxc26pwimBWvjIw0UAILSQ==", - "dependencies": { - "commander": "^2.19.0", - "moo": "^0.5.0", - "railroad-diagrams": "^1.0.0", - "randexp": "0.4.6" - }, - "bin": { - "nearley-railroad": "bin/nearley-railroad.js", - "nearley-test": "bin/nearley-test.js", - "nearley-unparse": "bin/nearley-unparse.js", - "nearleyc": "bin/nearleyc.js" - }, - "funding": { - "type": "individual", - "url": "https://nearley.js.org/#give-to-nearley" - } - }, - "node_modules/nearley/node_modules/commander": { - "version": "2.20.3", - "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", - "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==" - }, - "node_modules/neo-async": { - "version": "2.6.2", - "resolved": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz", - "integrity": "sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==" - }, - "node_modules/node-fetch": { - "version": "2.7.0", - "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", - "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==", - "dev": true, - "dependencies": { - "whatwg-url": "^5.0.0" - }, - "engines": { - "node": "4.x || >=6.0.0" - }, - "peerDependencies": { - "encoding": "^0.1.0" - }, - "peerDependenciesMeta": { - "encoding": { - "optional": true - } - } - }, - "node_modules/node-releases": { - "version": "2.0.14", - "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.14.tgz", - "integrity": "sha512-y10wOWt8yZpqXmOgRo77WaHEmhYQYGNA6y421PKsKYWEK8aW+cqAphborZDhqfyKrbZEN92CN1X2KbafY2s7Yw==" - }, - "node_modules/normalize-package-data": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-3.0.3.tgz", - "integrity": "sha512-p2W1sgqij3zMMyRC067Dg16bfzVH+w7hyegmpIvZ4JNjqtGOVAIvLmjBx3yP7YTe9vKJgkoNOPjwQGogDoMXFA==", - "dev": true, - "dependencies": { - "hosted-git-info": "^4.0.1", - "is-core-module": "^2.5.0", - "semver": "^7.3.4", - "validate-npm-package-license": "^3.0.1" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/normalize-package-data/node_modules/lru-cache": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz", - "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==", - "dev": true, - "dependencies": { - "yallist": "^4.0.0" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/normalize-package-data/node_modules/semver": { - "version": "7.6.0", - "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.0.tgz", - "integrity": "sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==", - "dev": true, - "dependencies": { - "lru-cache": "^6.0.0" - }, - "bin": { - "semver": "bin/semver.js" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/normalize-package-data/node_modules/yallist": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", - "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", - "dev": true - }, - "node_modules/normalize-path": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz", - "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/nth-check": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz", - "integrity": "sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==", - "dependencies": { - "boolbase": "^1.0.0" - }, - "funding": { - "url": "https://github.com/fb55/nth-check?sponsor=1" - } - }, - "node_modules/object-assign": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", - "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==", - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/object-inspect": { - "version": "1.13.1", - "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.1.tgz", - "integrity": "sha512-5qoj1RUiKOMsCCNLV1CBiPYE10sziTsnmNxkAI/rZhiD63CF7IqdFGC/XzjWjpSgLf0LxXX3bDFIh0E18f6UhQ==", - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/object-is": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/object-is/-/object-is-1.1.6.tgz", - "integrity": "sha512-F8cZ+KfGlSGi09lJT7/Nd6KJZ9ygtvYC0/UYYLI9nmQKLMnydpB9yvbv9K1uSkEu7FU9vYPmVwLg328tX+ot3Q==", - "dependencies": { - "call-bind": "^1.0.7", - "define-properties": "^1.2.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/object-keys": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz", - "integrity": "sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==", - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/object.assign": { - "version": "4.1.5", - "resolved": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.5.tgz", - "integrity": "sha512-byy+U7gp+FVwmyzKPYhW2h5l3crpmGsxl7X2s8y43IgxvG4g3QZ6CffDtsNQy1WsmZpQbO+ybo0AlW7TY6DcBQ==", - "dependencies": { - "call-bind": "^1.0.5", - "define-properties": "^1.2.1", - "has-symbols": "^1.0.3", - "object-keys": "^1.1.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/object.entries": { - "version": "1.1.7", - "resolved": "https://registry.npmjs.org/object.entries/-/object.entries-1.1.7.tgz", - "integrity": "sha512-jCBs/0plmPsOnrKAfFQXRG2NFjlhZgjjcBLSmTnEhU8U6vVTsVe8ANeQJCHTl3gSsI4J+0emOoCgoKlmQPMgmA==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/object.fromentries": { - "version": "2.0.7", - "resolved": "https://registry.npmjs.org/object.fromentries/-/object.fromentries-2.0.7.tgz", - "integrity": "sha512-UPbPHML6sL8PI/mOqPwsH4G6iyXcCGzLin8KvEPenOZN5lpCNBZZQ+V62vdjB1mQHrmqGQt5/OJzemUA+KJmEA==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/object.groupby": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/object.groupby/-/object.groupby-1.0.2.tgz", - "integrity": "sha512-bzBq58S+x+uo0VjurFT0UktpKHOZmv4/xePiOA1nbB9pMqpGK7rUPNgf+1YC+7mE+0HzhTMqNUuCqvKhj6FnBw==", - "dev": true, - "dependencies": { - "array.prototype.filter": "^1.0.3", - "call-bind": "^1.0.5", - "define-properties": "^1.2.1", - "es-abstract": "^1.22.3", - "es-errors": "^1.0.0" - } - }, - "node_modules/object.hasown": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/object.hasown/-/object.hasown-1.1.3.tgz", - "integrity": "sha512-fFI4VcYpRHvSLXxP7yiZOMAd331cPfd2p7PFDVbgUsYOfCT3tICVqXWngbjr4m49OvsBwUBQ6O2uQoJvy3RexA==", - "dev": true, - "dependencies": { - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/object.values": { - "version": "1.1.7", - "resolved": "https://registry.npmjs.org/object.values/-/object.values-1.1.7.tgz", - "integrity": "sha512-aU6xnDFYT3x17e/f0IiiwlGPTy2jzMySGfUB4fq6z7CV8l85CWHDk5ErhyhpfDHhrOMwGFhSQkhMGHaIotA6Ng==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/once": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", - "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", - "dev": true, - "dependencies": { - "wrappy": "1" - } - }, - "node_modules/optionator": { - "version": "0.9.3", - "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.3.tgz", - "integrity": "sha512-JjCoypp+jKn1ttEFExxhetCKeJt9zhAgAve5FXHixTvFDW/5aEktX9bufBKLRRMdU7bNtpLfcGu94B3cdEJgjg==", - "dev": true, - "dependencies": { - "@aashutoshrathi/word-wrap": "^1.2.3", - "deep-is": "^0.1.3", - "fast-levenshtein": "^2.0.6", - "levn": "^0.4.1", - "prelude-ls": "^1.2.1", - "type-check": "^0.4.0" - }, - "engines": { - "node": ">= 0.8.0" - } - }, - "node_modules/outlayer": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/outlayer/-/outlayer-2.1.1.tgz", - "integrity": "sha512-+GplXsCQ3VrbGujAeHEzP9SXsBmJxzn/YdDSQZL0xqBmAWBmortu2Y9Gwdp9J0bgDQ8/YNIPMoBM13nTwZfAhw==", - "dependencies": { - "ev-emitter": "^1.0.0", - "fizzy-ui-utils": "^2.0.0", - "get-size": "^2.0.2" - } - }, - "node_modules/p-limit": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz", - "integrity": "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==", - "dev": true, - "dependencies": { - "yocto-queue": "^0.1.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/p-locate": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz", - "integrity": "sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==", - "dev": true, - "dependencies": { - "p-limit": "^3.0.2" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/p-try": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz", - "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==", - "dev": true, - "engines": { - "node": ">=6" - } - }, - "node_modules/papaparse": { - "version": "5.4.1", - "resolved": "https://registry.npmjs.org/papaparse/-/papaparse-5.4.1.tgz", - "integrity": "sha512-HipMsgJkZu8br23pW15uvo6sib6wne/4woLZPlFf3rpDyMe9ywEXUsuD7+6K9PRkJlVT51j/sCOYDKGGS3ZJrw==" - }, - "node_modules/parent-module": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz", - "integrity": "sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==", - "dependencies": { - "callsites": "^3.0.0" - }, - "engines": { - "node": ">=6" - } - }, - "node_modules/parse-entities": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/parse-entities/-/parse-entities-2.0.0.tgz", - "integrity": "sha512-kkywGpCcRYhqQIchaWqZ875wzpS/bMKhz5HnN3p7wveJTkTtyAB/AlnS0f8DFSqYW1T82t6yEAkEcB+A1I3MbQ==", - "dependencies": { - "character-entities": "^1.0.0", - "character-entities-legacy": "^1.0.0", - "character-reference-invalid": "^1.0.0", - "is-alphanumerical": "^1.0.0", - "is-decimal": "^1.0.0", - "is-hexadecimal": "^1.0.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/parse-github-url": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/parse-github-url/-/parse-github-url-1.0.2.tgz", - "integrity": "sha512-kgBf6avCbO3Cn6+RnzRGLkUsv4ZVqv/VfAYkRsyBcgkshNvVBkRn1FEZcW0Jb+npXQWm2vHPnnOqFteZxRRGNw==", - "dev": true, - "bin": { - "parse-github-url": "cli.js" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/parse-json": { - "version": "5.2.0", - "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz", - "integrity": "sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==", - "dependencies": { - "@babel/code-frame": "^7.0.0", - "error-ex": "^1.3.1", - "json-parse-even-better-errors": "^2.3.0", - "lines-and-columns": "^1.1.6" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/parse5": { - "version": "7.1.2", - "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.1.2.tgz", - "integrity": "sha512-Czj1WaSVpaoj0wbhMzLmWD69anp2WH7FXMB9n1Sy8/ZFF9jolSQVMu1Ij5WIyGmcBmhk7EOndpO4mIpihVqAXw==", - "dependencies": { - "entities": "^4.4.0" - }, - "funding": { - "url": "https://github.com/inikulin/parse5?sponsor=1" - } - }, - "node_modules/parse5-htmlparser2-tree-adapter": { - "version": "7.0.0", - "resolved": "https://registry.npmjs.org/parse5-htmlparser2-tree-adapter/-/parse5-htmlparser2-tree-adapter-7.0.0.tgz", - "integrity": "sha512-B77tOZrqqfUfnVcOrUvfdLbz4pu4RopLD/4vmu3HUPswwTA8OH0EMW9BlWR2B0RCoiZRAHEUu7IxeP1Pd1UU+g==", - "dependencies": { - "domhandler": "^5.0.2", - "parse5": "^7.0.0" - }, - "funding": { - "url": "https://github.com/inikulin/parse5?sponsor=1" - } - }, - "node_modules/path-exists": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz", - "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/path-is-absolute": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", - "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/path-key": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", - "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/path-parse": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz", - "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==" - }, - "node_modules/path-type": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz", - "integrity": "sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==", - "engines": { - "node": ">=8" - } - }, - "node_modules/performance-now": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz", - "integrity": "sha512-7EAHlyLHI56VEIdK57uwHdHKIaAGbnXPiw0yWbarQZOKaKpvUIgW0jWRVLiatnM+XXlSwsanIBH/hzGMJulMow==" - }, - "node_modules/picocolors": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz", - "integrity": "sha512-1fygroTLlHu66zi26VoTDv8yRgm0Fccecssto+MhsZ0D/DGW2sm8E8AjW7NU5VVTRt5GxbeZ5qBuJr+HyLYkjQ==" - }, - "node_modules/picomatch": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz", - "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==", - "engines": { - "node": ">=8.6" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, - "node_modules/possible-typed-array-names": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.0.0.tgz", - "integrity": "sha512-d7Uw+eZoloe0EHDIYoe+bQ5WXnGMOpmiZFTuMWCwpjzzkL2nTjcKiAk4hh8TjnGye2TwWOk3UXucZ+3rbmBa8Q==", - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/postcss": { - "version": "8.4.35", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.35.tgz", - "integrity": "sha512-u5U8qYpBCpN13BsiEB0CbR1Hhh4Gc0zLFuedrHJKMctHCHAGrMdG0PRM/KErzAL3CU6/eckEtmHNB3x6e3c0vA==", - "funding": [ - { - "type": "opencollective", - "url": "https://opencollective.com/postcss/" - }, - { - "type": "tidelift", - "url": "https://tidelift.com/funding/github/npm/postcss" - }, - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "dependencies": { - "nanoid": "^3.3.7", - "picocolors": "^1.0.0", - "source-map-js": "^1.0.2" - }, - "engines": { - "node": "^10 || ^12 || >=14" - } - }, - "node_modules/postcss-combine-duplicated-selectors": { - "version": "10.0.3", - "resolved": "https://registry.npmjs.org/postcss-combine-duplicated-selectors/-/postcss-combine-duplicated-selectors-10.0.3.tgz", - "integrity": "sha512-IP0BmwFloCskv7DV7xqvzDXqMHpwdczJa6ZvIW8abgHdcIHs9mCJX2ltFhu3EwA51ozp13DByng30+Ke+eIExA==", - "dependencies": { - "postcss-selector-parser": "^6.0.4" - }, - "engines": { - "node": "^10.0.0 || ^12.0.0 || >=14.0.0" - }, - "peerDependencies": { - "postcss": "^8.1.0" - } - }, - "node_modules/postcss-media-query-parser": { - "version": "0.2.3", - "resolved": "https://registry.npmjs.org/postcss-media-query-parser/-/postcss-media-query-parser-0.2.3.tgz", - "integrity": "sha512-3sOlxmbKcSHMjlUXQZKQ06jOswE7oVkXPxmZdoB1r5l0q6gTFTQSHxNxOrCccElbW7dxNytifNEo8qidX2Vsig==", - "dev": true - }, - "node_modules/postcss-resolve-nested-selector": { - "version": "0.1.1", - "resolved": "https://registry.npmjs.org/postcss-resolve-nested-selector/-/postcss-resolve-nested-selector-0.1.1.tgz", - "integrity": "sha512-HvExULSwLqHLgUy1rl3ANIqCsvMS0WHss2UOsXhXnQaZ9VCc2oBvIpXrl00IUFT5ZDITME0o6oiXeiHr2SAIfw==", - "dev": true - }, - "node_modules/postcss-safe-parser": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/postcss-safe-parser/-/postcss-safe-parser-6.0.0.tgz", - "integrity": "sha512-FARHN8pwH+WiS2OPCxJI8FuRJpTVnn6ZNFiqAM2aeW2LwTHWWmWgIyKC6cUo0L8aeKiF/14MNvnpls6R2PBeMQ==", - "dev": true, - "engines": { - "node": ">=12.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/postcss/" - }, - "peerDependencies": { - "postcss": "^8.3.3" - } - }, - "node_modules/postcss-scss": { - "version": "4.0.9", - "resolved": "https://registry.npmjs.org/postcss-scss/-/postcss-scss-4.0.9.tgz", - "integrity": "sha512-AjKOeiwAitL/MXxQW2DliT28EKukvvbEWx3LBmJIRN8KfBGZbRTxNYW0kSqi1COiTZ57nZ9NW06S6ux//N1c9A==", - "dev": true, - "funding": [ - { - "type": "opencollective", - "url": "https://opencollective.com/postcss/" - }, - { - "type": "tidelift", - "url": "https://tidelift.com/funding/github/npm/postcss-scss" - }, - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "engines": { - "node": ">=12.0" - }, - "peerDependencies": { - "postcss": "^8.4.29" - } - }, - "node_modules/postcss-selector-parser": { - "version": "6.0.15", - "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.0.15.tgz", - "integrity": "sha512-rEYkQOMUCEMhsKbK66tbEU9QVIxbhN18YiniAwA7XQYTVBqrBy+P2p5JcdqsHgKM2zWylp8d7J6eszocfds5Sw==", - "dependencies": { - "cssesc": "^3.0.0", - "util-deprecate": "^1.0.2" - }, - "engines": { - "node": ">=4" - } - }, - "node_modules/postcss-sorting": { - "version": "7.0.1", - "resolved": "https://registry.npmjs.org/postcss-sorting/-/postcss-sorting-7.0.1.tgz", - "integrity": "sha512-iLBFYz6VRYyLJEJsBJ8M3TCqNcckVzz4wFounSc5Oez35ogE/X+aoC5fFu103Ot7NyvjU3/xqIXn93Gp3kJk4g==", - "dev": true, - "peerDependencies": { - "postcss": "^8.3.9" - } - }, - "node_modules/postcss-value-parser": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz", - "integrity": "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==" - }, - "node_modules/prelude-ls": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz", - "integrity": "sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==", - "dev": true, - "engines": { - "node": ">= 0.8.0" - } - }, - "node_modules/prettier": { - "version": "2.4.1", - "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.4.1.tgz", - "integrity": "sha512-9fbDAXSBcc6Bs1mZrDYb3XKzDLm4EXXL9sC1LqKP5rZkT6KRr/rf9amVUcODVXgguK/isJz0d0hP72WeaKWsvA==", - "dev": true, - "bin": { - "prettier": "bin-prettier.js" - }, - "engines": { - "node": ">=10.13.0" - } - }, - "node_modules/prettier-linter-helpers": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/prettier-linter-helpers/-/prettier-linter-helpers-1.0.0.tgz", - "integrity": "sha512-GbK2cP9nraSSUF9N2XwUwqfzlAFlMNYYl+ShE/V+H8a9uNl/oUqB1w2EL54Jh0OlyRSd8RfWYJ3coVS4TROP2w==", - "dev": true, - "dependencies": { - "fast-diff": "^1.1.2" - }, - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/prismjs": { - "version": "1.29.0", - "resolved": "https://registry.npmjs.org/prismjs/-/prismjs-1.29.0.tgz", - "integrity": "sha512-Kx/1w86q/epKcmte75LNrEoT+lX8pBpavuAbvJWRXar7Hz8jrtF+e3vY751p0R8H9HdArwaCTNDDzHg/ScJK1Q==", - "engines": { - "node": ">=6" - } - }, - "node_modules/promise": { - "version": "8.3.0", - "resolved": "https://registry.npmjs.org/promise/-/promise-8.3.0.tgz", - "integrity": "sha512-rZPNPKTOYVNEEKFaq1HqTgOwZD+4/YHS5ukLzQCypkj+OkYx7iv0mA91lJlpPPZ8vMau3IIGj5Qlwrx+8iiSmg==", - "dependencies": { - "asap": "~2.0.6" - } - }, - "node_modules/prop-types": { - "version": "15.8.1", - "resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz", - "integrity": "sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==", - "dependencies": { - "loose-envify": "^1.4.0", - "object-assign": "^4.1.1", - "react-is": "^16.13.1" - } - }, - "node_modules/prop-types-extra": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/prop-types-extra/-/prop-types-extra-1.1.1.tgz", - "integrity": "sha512-59+AHNnHYCdiC+vMwY52WmvP5dM3QLeoumYuEyceQDi9aEhtwN9zIQ2ZNo25sMyXnbh32h+P1ezDsUpUH3JAew==", - "dependencies": { - "react-is": "^16.3.2", - "warning": "^4.0.0" - }, - "peerDependencies": { - "react": ">=0.14.0" - } - }, - "node_modules/prop-types-extra/node_modules/react-is": { - "version": "16.13.1", - "resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", - "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==" - }, - "node_modules/prop-types/node_modules/react-is": { - "version": "16.13.1", - "resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", - "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==" - }, - "node_modules/property-information": { - "version": "5.6.0", - "resolved": "https://registry.npmjs.org/property-information/-/property-information-5.6.0.tgz", - "integrity": "sha512-YUHSPk+A30YPv+0Qf8i9Mbfe/C0hdPXk1s1jPVToV8pk8BQtpw10ct89Eo7OWkutrwqvT0eicAxlOg3dOAu8JA==", - "dependencies": { - "xtend": "^4.0.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/proxy-from-env": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz", - "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==" - }, - "node_modules/punycode": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", - "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==", - "engines": { - "node": ">=6" - } - }, - "node_modules/queue-microtask": { - "version": "1.2.3", - "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz", - "integrity": "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==", - "dev": true, - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ] - }, - "node_modules/quick-lru": { - "version": "4.0.1", - "resolved": "https://registry.npmjs.org/quick-lru/-/quick-lru-4.0.1.tgz", - "integrity": "sha512-ARhCpm70fzdcvNQfPoy49IaanKkTlRWF2JMzqhcJbhSFRZv7nPTvZJdcY7301IPmvW+/p0RgIWnQDLJxifsQ7g==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/raf": { - "version": "3.4.1", - "resolved": "https://registry.npmjs.org/raf/-/raf-3.4.1.tgz", - "integrity": "sha512-Sq4CW4QhwOHE8ucn6J34MqtZCeWFP2aQSmrlroYgqAV1PjStIhJXxYuTgUIfkEk7zTLjmIjLmU5q+fbD1NnOJA==", - "dependencies": { - "performance-now": "^2.1.0" - } - }, - "node_modules/railroad-diagrams": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", - "integrity": "sha512-cz93DjNeLY0idrCNOH6PviZGRN9GJhsdm9hpn1YCS879fj4W+x5IFJhhkRZcwVgMmFF7R82UA/7Oh+R8lLZg6A==" - }, - "node_modules/randexp": { - "version": "0.4.6", - "resolved": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", - "integrity": "sha512-80WNmd9DA0tmZrw9qQa62GPPWfuXJknrmVmLcxvq4uZBdYqb1wYoKTmnlGUchvVWe0XiLupYkBoXVOxz3C8DYQ==", - "dependencies": { - "discontinuous-range": "1.0.0", - "ret": "~0.1.10" - }, - "engines": { - "node": ">=0.12" - } - }, - "node_modules/randombytes": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz", - "integrity": "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==", - "peer": true, - "dependencies": { - "safe-buffer": "^5.1.0" - } - }, - "node_modules/react": { - "version": "18.2.0", - "resolved": "https://registry.npmjs.org/react/-/react-18.2.0.tgz", - "integrity": "sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==", - "dependencies": { - "loose-envify": "^1.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/react-app-polyfill": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/react-app-polyfill/-/react-app-polyfill-2.0.0.tgz", - "integrity": "sha512-0sF4ny9v/B7s6aoehwze9vJNWcmCemAUYBVasscVr92+UYiEqDXOxfKjXN685mDaMRNF3WdhHQs76oTODMocFA==", - "dependencies": { - "core-js": "^3.6.5", - "object-assign": "^4.1.1", - "promise": "^8.1.0", - "raf": "^3.4.1", - "regenerator-runtime": "^0.13.7", - "whatwg-fetch": "^3.4.1" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/react-app-polyfill/node_modules/regenerator-runtime": { - "version": "0.13.11", - "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.11.tgz", - "integrity": "sha512-kY1AZVr2Ra+t+piVaJ4gxaFaReZVH40AKNo7UCX6W+dEwBo/2oZJzqfuN1qLq1oL45o56cPaTXELwrTh8Fpggg==" - }, - "node_modules/react-bootstrap": { - "version": "1.6.8", - "resolved": "https://registry.npmjs.org/react-bootstrap/-/react-bootstrap-1.6.8.tgz", - "integrity": "sha512-yD6uN78XlFOkETQp6GRuVe0s5509x3XYx8PfPbirwFTYCj5/RfmSs9YZGCwkUrhZNFzj7tZPdpb+3k50mK1E4g==", - "dependencies": { - "@babel/runtime": "^7.14.0", - "@restart/context": "^2.1.4", - "@restart/hooks": "^0.4.7", - "@types/invariant": "^2.2.33", - "@types/prop-types": "^15.7.3", - "@types/react": ">=16.14.8", - "@types/react-transition-group": "^4.4.1", - "@types/warning": "^3.0.0", - "classnames": "^2.3.1", - "dom-helpers": "^5.2.1", - "invariant": "^2.2.4", - "prop-types": "^15.7.2", - "prop-types-extra": "^1.1.0", - "react-overlays": "^5.1.2", - "react-transition-group": "^4.4.1", - "uncontrollable": "^7.2.1", - "warning": "^4.0.3" - }, - "peerDependencies": { - "react": ">=16.8.0", - "react-dom": ">=16.8.0" - } - }, - "node_modules/react-circular-progressbar": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/react-circular-progressbar/-/react-circular-progressbar-2.1.0.tgz", - "integrity": "sha512-xp4THTrod4aLpGy68FX/k1Q3nzrfHUjUe5v6FsdwXBl3YVMwgeXYQKDrku7n/D6qsJA9CuunarAboC2xCiKs1g==", - "peerDependencies": { - "react": "^0.14.0 || ^15.0.0 || ^16.0.0 || ^17.0.0 || ^18.0.0" - } - }, - "node_modules/react-copy-to-clipboard": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/react-copy-to-clipboard/-/react-copy-to-clipboard-5.1.0.tgz", - "integrity": "sha512-k61RsNgAayIJNoy9yDsYzDe/yAZAzEbEgcz3DZMhF686LEyukcE1hzurxe85JandPUG+yTfGVFzuEw3xt8WP/A==", - "dependencies": { - "copy-to-clipboard": "^3.3.1", - "prop-types": "^15.8.1" - }, - "peerDependencies": { - "react": "^15.3.0 || 16 || 17 || 18" - } - }, - "node_modules/react-data-table-component": { - "version": "7.6.2", - "resolved": "https://registry.npmjs.org/react-data-table-component/-/react-data-table-component-7.6.2.tgz", - "integrity": "sha512-nHe7040fmtrJyQr/ieGrTfV0jBflYGK4sLokC6/AFOv3ThjmA9WzKz8Z8/2wMxzRqLU+Rn0CVFg+8+frKLepWQ==", - "dependencies": { - "deepmerge": "^4.3.1" - }, - "peerDependencies": { - "react": ">= 16.8.3", - "styled-components": ">= 5.0.0" - }, - "peerDependenciesMeta": { - "styled-components": { - "optional": false - } - } - }, - "node_modules/react-datepicker": { - "version": "4.25.0", - "resolved": "https://registry.npmjs.org/react-datepicker/-/react-datepicker-4.25.0.tgz", - "integrity": "sha512-zB7CSi44SJ0sqo8hUQ3BF1saE/knn7u25qEMTO1CQGofY1VAKahO8k9drZtp0cfW1DMfoYLR3uSY1/uMvbEzbg==", - "dependencies": { - "@popperjs/core": "^2.11.8", - "classnames": "^2.2.6", - "date-fns": "^2.30.0", - "prop-types": "^15.7.2", - "react-onclickoutside": "^6.13.0", - "react-popper": "^2.3.0" - }, - "peerDependencies": { - "react": "^16.9.0 || ^17 || ^18", - "react-dom": "^16.9.0 || ^17 || ^18" - } - }, - "node_modules/react-dom": { - "version": "18.2.0", - "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz", - "integrity": "sha512-6IMTriUmvsjHUjNtEDudZfuDQUoWXVxKHhlEGSk81n4YFS+r/Kl99wXiwlVXtPBtJenozv2P+hxDsw9eA7Xo6g==", - "dependencies": { - "loose-envify": "^1.1.0", - "scheduler": "^0.23.0" - }, - "peerDependencies": { - "react": "^18.2.0" - } - }, - "node_modules/react-dropzone": { - "version": "14.2.3", - "resolved": "https://registry.npmjs.org/react-dropzone/-/react-dropzone-14.2.3.tgz", - "integrity": "sha512-O3om8I+PkFKbxCukfIR3QAGftYXDZfOE2N1mr/7qebQJHs7U+/RSL/9xomJNpRg9kM5h9soQSdf0Gc7OHF5Fug==", - "dependencies": { - "attr-accept": "^2.2.2", - "file-selector": "^0.6.0", - "prop-types": "^15.8.1" - }, - "engines": { - "node": ">= 10.13" - }, - "peerDependencies": { - "react": ">= 16.8 || 18.0.0" - } - }, - "node_modules/react-fast-compare": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/react-fast-compare/-/react-fast-compare-3.2.2.tgz", - "integrity": "sha512-nsO+KSNgo1SbJqJEYRE9ERzo7YtYbou/OqjSQKxV7jcKox7+usiUVZOAC+XnDOABXggQTno0Y1CpVnuWEc1boQ==" - }, - "node_modules/react-final-form": { - "version": "6.5.9", - "resolved": "https://registry.npmjs.org/react-final-form/-/react-final-form-6.5.9.tgz", - "integrity": "sha512-x3XYvozolECp3nIjly+4QqxdjSSWfcnpGEL5K8OBT6xmGrq5kBqbA6+/tOqoom9NwqIPPbxPNsOViFlbKgowbA==", - "dependencies": { - "@babel/runtime": "^7.15.4" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/final-form" - }, - "peerDependencies": { - "final-form": "^4.20.4", - "react": "^16.8.0 || ^17.0.0 || ^18.0.0" - } - }, - "node_modules/react-final-form-arrays": { - "version": "3.1.4", - "resolved": "https://registry.npmjs.org/react-final-form-arrays/-/react-final-form-arrays-3.1.4.tgz", - "integrity": "sha512-siVFAolUAe29rMR6u8VwepoysUcUdh6MLV2OWnCtKpsPRUdT9VUgECjAPaVMAH2GROZNiVB9On1H9MMrm9gdpg==", - "dependencies": { - "@babel/runtime": "^7.19.4" - }, - "peerDependencies": { - "final-form": "^4.15.0", - "final-form-arrays": ">=1.0.4", - "react": "^16.8.0 || ^17.0.0 || ^18.0.0", - "react-final-form": "^6.2.1" - } - }, - "node_modules/react-final-form-listeners": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/react-final-form-listeners/-/react-final-form-listeners-1.0.3.tgz", - "integrity": "sha512-OrdCNxSS4JQS/EXD+R530kZKFqaPfa+WcXPgVro/h4BpaBDF/Ja+BtHyCzDezCIb5rWaGGdOJIj+tN2YdtvrXg==", - "dependencies": { - "@babel/runtime": "^7.12.5" - }, - "peerDependencies": { - "final-form": ">=4.0.0", - "prop-types": "^15.6.0", - "react": "^15.3.0 || ^16.0.0 || ^17.0.0", - "react-final-form": ">=3.0.0" - } - }, - "node_modules/react-helmet-async": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/react-helmet-async/-/react-helmet-async-1.3.0.tgz", - "integrity": "sha512-9jZ57/dAn9t3q6hneQS0wukqC2ENOBgMNVEhb/ZG9ZSxUetzVIw4iAmEU38IaVg3QGYauQPhSeUTuIUtFglWpg==", - "dependencies": { - "@babel/runtime": "^7.12.5", - "invariant": "^2.2.4", - "prop-types": "^15.7.2", - "react-fast-compare": "^3.2.0", - "shallowequal": "^1.1.0" - }, - "peerDependencies": { - "react": "^16.6.0 || ^17.0.0 || ^18.0.0", - "react-dom": "^16.6.0 || ^17.0.0 || ^18.0.0" - } - }, - "node_modules/react-hotkeys-hook": { - "version": "3.4.7", - "resolved": "https://registry.npmjs.org/react-hotkeys-hook/-/react-hotkeys-hook-3.4.7.tgz", - "integrity": "sha512-+bbPmhPAl6ns9VkXkNNyxlmCAIyDAcWbB76O4I0ntr3uWCRuIQf/aRLartUahe9chVMPj+OEzzfk3CQSjclUEQ==", - "dependencies": { - "hotkeys-js": "3.9.4" - }, - "peerDependencies": { - "react": ">=16.8.1", - "react-dom": ">=16.8.1" - } - }, - "node_modules/react-html-parser": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/react-html-parser/-/react-html-parser-2.0.2.tgz", - "integrity": "sha512-XeerLwCVjTs3njZcgCOeDUqLgNIt/t+6Jgi5/qPsO/krUWl76kWKXMeVs2LhY2gwM6X378DkhLjur0zUQdpz0g==", - "dependencies": { - "htmlparser2": "^3.9.0" - }, - "peerDependencies": { - "react": "^0.14.0 || ^15.0.0 || ^16.0.0-0" - } - }, - "node_modules/react-html-parser/node_modules/dom-serializer": { - "version": "0.2.2", - "resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz", - "integrity": "sha512-2/xPb3ORsQ42nHYiSunXkDjPLBaEj/xTwUO4B7XCZQTRk7EBtTOPaygh10YAAh2OI1Qrp6NWfpAhzswj0ydt9g==", - "dependencies": { - "domelementtype": "^2.0.1", - "entities": "^2.0.0" - } - }, - "node_modules/react-html-parser/node_modules/dom-serializer/node_modules/domelementtype": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz", - "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/fb55" - } - ] - }, - "node_modules/react-html-parser/node_modules/dom-serializer/node_modules/entities": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz", - "integrity": "sha512-p92if5Nz619I0w+akJrLZH0MX0Pb5DX39XOwQTtXSdQQOaYH03S1uIQp4mhOZtAXrxq4ViO67YTiLBo2638o9A==", - "funding": { - "url": "https://github.com/fb55/entities?sponsor=1" - } - }, - "node_modules/react-html-parser/node_modules/domelementtype": { - "version": "1.3.1", - "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz", - "integrity": "sha512-BSKB+TSpMpFI/HOxCNr1O8aMOTZ8hT3pM3GQ0w/mWRmkhEDSFJkkyzz4XQsBV44BChwGkrDfMyjVD0eA2aFV3w==" - }, - "node_modules/react-html-parser/node_modules/domhandler": { - "version": "2.4.2", - "resolved": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz", - "integrity": "sha512-JiK04h0Ht5u/80fdLMCEmV4zkNh2BcoMFBmZ/91WtYZ8qVXSKjiw7fXMgFPnHcSZgOo3XdinHvmnDUeMf5R4wA==", - "dependencies": { - "domelementtype": "1" - } - }, - "node_modules/react-html-parser/node_modules/domutils": { - "version": "1.7.0", - "resolved": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz", - "integrity": "sha512-Lgd2XcJ/NjEw+7tFvfKxOzCYKZsdct5lczQ2ZaQY8Djz7pfAD3Gbp8ySJWtreII/vDlMVmxwa6pHmdxIYgttDg==", - "dependencies": { - "dom-serializer": "0", - "domelementtype": "1" - } - }, - "node_modules/react-html-parser/node_modules/entities": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz", - "integrity": "sha512-f2LZMYl1Fzu7YSBKg+RoROelpOaNrcGmE9AZubeDfrCEia483oW4MI4VyFd5VNHIgQ/7qm1I0wUHK1eJnn2y2w==" - }, - "node_modules/react-html-parser/node_modules/htmlparser2": { - "version": "3.10.1", - "resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz", - "integrity": "sha512-IgieNijUMbkDovyoKObU1DUhm1iwNYE/fuifEoEHfd1oZKZDaONBSkal7Y01shxsM49R4XaMdGez3WnF9UfiCQ==", - "dependencies": { - "domelementtype": "^1.3.1", - "domhandler": "^2.3.0", - "domutils": "^1.5.1", - "entities": "^1.1.1", - "inherits": "^2.0.1", - "readable-stream": "^3.1.1" - } - }, - "node_modules/react-is": { - "version": "18.2.0", - "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.2.0.tgz", - "integrity": "sha512-xWGDIW6x921xtzPkhiULtthJHoJvBbF3q26fzloPCK0hsvxtPVelvftw3zjbHWSkR2km9Z+4uxbDDK/6Zw9B8w==" - }, - "node_modules/react-lifecycles-compat": { - "version": "3.0.4", - "resolved": "https://registry.npmjs.org/react-lifecycles-compat/-/react-lifecycles-compat-3.0.4.tgz", - "integrity": "sha512-fBASbA6LnOU9dOU2eW7aQ8xmYBSXUIWr+UmF9b1efZBazGNO+rcXT/icdKnYm2pTwcRylVUYwW7H1PHfLekVzA==" - }, - "node_modules/react-loading-skeleton": { - "version": "3.4.0", - "resolved": "https://registry.npmjs.org/react-loading-skeleton/-/react-loading-skeleton-3.4.0.tgz", - "integrity": "sha512-1oJEBc9+wn7BbkQQk7YodlYEIjgeR+GrRjD+QXkVjwZN7LGIcAFHrx4NhT7UHGBxNY1+zax3c+Fo6XQM4R7CgA==", - "peerDependencies": { - "react": ">=16.8.0" - } - }, - "node_modules/react-masonry-component": { - "version": "6.3.0", - "resolved": "https://registry.npmjs.org/react-masonry-component/-/react-masonry-component-6.3.0.tgz", - "integrity": "sha512-4ZI78nxMfCpU5yQiS6Rup07Ju++YzcOGAyvbMcl2GfpZTw8GRwT548lkKr0PJarNicRV1qE2D/NiT26UPg1T7A==", - "dependencies": { - "create-react-class": "^15.6.2", - "element-resize-detector": "^1.1.9", - "imagesloaded": "^4.0.0", - "lodash": "^4.17.4", - "masonry-layout": "^4.2.0", - "prop-types": "^15.5.8" - }, - "peerDependencies": { - "react": "^0.14.0 || ^15.0.0-0 || ^16.0.0-0 || ^17.0.0" - } - }, - "node_modules/react-media-hook": { - "version": "0.4.9", - "resolved": "https://registry.npmjs.org/react-media-hook/-/react-media-hook-0.4.9.tgz", - "integrity": "sha512-FZr/2xA1+23vDJ1IZ794yLqMRRkBoCNOiJATdtTfB5GyVc5djf8FL2qEB/68pSkiNgHdHsmKknMSDr0sC4zBKQ==", - "peerDependencies": { - "react": ">=16.8.0" - } - }, - "node_modules/react-onclickoutside": { - "version": "6.13.0", - "resolved": "https://registry.npmjs.org/react-onclickoutside/-/react-onclickoutside-6.13.0.tgz", - "integrity": "sha512-ty8So6tcUpIb+ZE+1HAhbLROvAIJYyJe/1vRrrcmW+jLsaM+/powDRqxzo6hSh9CuRZGSL1Q8mvcF5WRD93a0A==", - "funding": { - "type": "individual", - "url": "https://github.com/Pomax/react-onclickoutside/blob/master/FUNDING.md" - }, - "peerDependencies": { - "react": "^15.5.x || ^16.x || ^17.x || ^18.x", - "react-dom": "^15.5.x || ^16.x || ^17.x || ^18.x" - } - }, - "node_modules/react-overlays": { - "version": "5.2.1", - "resolved": "https://registry.npmjs.org/react-overlays/-/react-overlays-5.2.1.tgz", - "integrity": "sha512-GLLSOLWr21CqtJn8geSwQfoJufdt3mfdsnIiQswouuQ2MMPns+ihZklxvsTDKD3cR2tF8ELbi5xUsvqVhR6WvA==", - "dependencies": { - "@babel/runtime": "^7.13.8", - "@popperjs/core": "^2.11.6", - "@restart/hooks": "^0.4.7", - "@types/warning": "^3.0.0", - "dom-helpers": "^5.2.0", - "prop-types": "^15.7.2", - "uncontrollable": "^7.2.1", - "warning": "^4.0.3" - }, - "peerDependencies": { - "react": ">=16.3.0", - "react-dom": ">=16.3.0" - } - }, - "node_modules/react-papaparse": { - "version": "3.18.2", - "resolved": "https://registry.npmjs.org/react-papaparse/-/react-papaparse-3.18.2.tgz", - "integrity": "sha512-qDth1fWX198VQe7xpkSioK+7MqZc7TqLHCl7hGOz4KWL47AxrFhRjaZMphdX6z43TWCTUf+zhh7BYU2uSMVDkQ==", - "dependencies": { - "@types/papaparse": "^5.3.1", - "papaparse": "^5.3.1" - }, - "engines": { - "node": ">=8", - "npm": ">=5" - } - }, - "node_modules/react-popper": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/react-popper/-/react-popper-2.3.0.tgz", - "integrity": "sha512-e1hj8lL3uM+sgSR4Lxzn5h1GxBlpa4CQz0XLF8kx4MDrDRWY0Ena4c97PUeSX9i5W3UAfDP0z0FXCTQkoXUl3Q==", - "dependencies": { - "react-fast-compare": "^3.0.1", - "warning": "^4.0.2" - }, - "peerDependencies": { - "@popperjs/core": "^2.0.0", - "react": "^16.8.0 || ^17 || ^18", - "react-dom": "^16.8.0 || ^17 || ^18" - } - }, - "node_modules/react-redux": { - "version": "7.2.9", - "resolved": "https://registry.npmjs.org/react-redux/-/react-redux-7.2.9.tgz", - "integrity": "sha512-Gx4L3uM182jEEayZfRbI/G11ZpYdNAnBs70lFVMNdHJI76XYtR+7m0MN+eAs7UHBPhWXcnFPaS+9owSCJQHNpQ==", - "dependencies": { - "@babel/runtime": "^7.15.4", - "@types/react-redux": "^7.1.20", - "hoist-non-react-statics": "^3.3.2", - "loose-envify": "^1.4.0", - "prop-types": "^15.7.2", - "react-is": "^17.0.2" - }, - "peerDependencies": { - "react": "^16.8.3 || ^17 || ^18" - }, - "peerDependenciesMeta": { - "react-dom": { - "optional": true - }, - "react-native": { - "optional": true - } - } - }, - "node_modules/react-redux/node_modules/react-is": { - "version": "17.0.2", - "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz", - "integrity": "sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==" - }, - "node_modules/react-refresh": { - "version": "0.14.0", - "resolved": "https://registry.npmjs.org/react-refresh/-/react-refresh-0.14.0.tgz", - "integrity": "sha512-wViHqhAd8OHeLS/IRMJjTSDHF3U9eWi62F/MledQGPdJGDhodXJ9PBLNGr6WWL7qlH12Mt3TyTpbS+hGXMjCzQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/react-router": { - "version": "6.22.3", - "resolved": "https://registry.npmjs.org/react-router/-/react-router-6.22.3.tgz", - "integrity": "sha512-dr2eb3Mj5zK2YISHK++foM9w4eBnO23eKnZEDs7c880P6oKbrjz/Svg9+nxqtHQK+oMW4OtjZca0RqPglXxguQ==", - "dependencies": { - "@remix-run/router": "1.15.3" - }, - "engines": { - "node": ">=14.0.0" - }, - "peerDependencies": { - "react": ">=16.8" - } - }, - "node_modules/react-router-dom": { - "version": "6.22.3", - "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-6.22.3.tgz", - "integrity": "sha512-7ZILI7HjcE+p31oQvwbokjk6OA/bnFxrhJ19n82Ex9Ph8fNAq+Hm/7KchpMGlTgWhUxRHMMCut+vEtNpWpowKw==", - "dependencies": { - "@remix-run/router": "1.15.3", - "react-router": "6.22.3" - }, - "engines": { - "node": ">=14.0.0" - }, - "peerDependencies": { - "react": ">=16.8", - "react-dom": ">=16.8" - } - }, - "node_modules/react-select": { - "version": "5.8.0", - "resolved": "https://registry.npmjs.org/react-select/-/react-select-5.8.0.tgz", - "integrity": "sha512-TfjLDo58XrhP6VG5M/Mi56Us0Yt8X7xD6cDybC7yoRMUNm7BGO7qk8J0TLQOua/prb8vUOtsfnXZwfm30HGsAA==", - "dependencies": { - "@babel/runtime": "^7.12.0", - "@emotion/cache": "^11.4.0", - "@emotion/react": "^11.8.1", - "@floating-ui/dom": "^1.0.1", - "@types/react-transition-group": "^4.4.0", - "memoize-one": "^6.0.0", - "prop-types": "^15.6.0", - "react-transition-group": "^4.3.0", - "use-isomorphic-layout-effect": "^1.1.2" - }, - "peerDependencies": { - "react": "^16.8.0 || ^17.0.0 || ^18.0.0", - "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0" - } - }, - "node_modules/react-select-search": { - "version": "3.0.10", - "resolved": "https://registry.npmjs.org/react-select-search/-/react-select-search-3.0.10.tgz", - "integrity": "sha512-K3Ww5HfOaoqgjNIZt++DMeSjWgu5T78d2xXt/hEa3ERLvEqfxBwXUML2E23goWGIUQBv2b+kGkb86YnOwH0hUw==", - "optionalDependencies": { - "fuse.js": "^6.6.0" - }, - "peerDependencies": { - "prop-types": "^15.8.1", - "react": "^18.0.1 || ^17.0.1 || ^16.14.0", - "react-dom": "^18.0.1 || ^17.0.1 || ^16.14.0" - } - }, - "node_modules/react-select-search/node_modules/fuse.js": { - "version": "6.6.2", - "resolved": "https://registry.npmjs.org/fuse.js/-/fuse.js-6.6.2.tgz", - "integrity": "sha512-cJaJkxCCxC8qIIcPBF9yGxY0W/tVZS3uEISDxhYIdtk8OL93pe+6Zj7LjCqVV4dzbqcriOZ+kQ/NE4RXZHsIGA==", - "optional": true, - "engines": { - "node": ">=10" - } - }, - "node_modules/react-syntax-highlighter": { - "version": "15.5.0", - "resolved": "https://registry.npmjs.org/react-syntax-highlighter/-/react-syntax-highlighter-15.5.0.tgz", - "integrity": "sha512-+zq2myprEnQmH5yw6Gqc8lD55QHnpKaU8TOcFeC/Lg/MQSs8UknEA0JC4nTZGFAXC2J2Hyj/ijJ7NlabyPi2gg==", - "dependencies": { - "@babel/runtime": "^7.3.1", - "highlight.js": "^10.4.1", - "lowlight": "^1.17.0", - "prismjs": "^1.27.0", - "refractor": "^3.6.0" - }, - "peerDependencies": { - "react": ">= 0.14.0" - } - }, - "node_modules/react-time-ago": { - "version": "7.3.1", - "resolved": "https://registry.npmjs.org/react-time-ago/-/react-time-ago-7.3.1.tgz", - "integrity": "sha512-c6QKSRrnIhZiEbOa2PXdh1InNYpqX3wwXA0fuOFX4r/C2hdt5hNvjvKXbKbGWXAeumMi9DoS3oGPboEpgccnOQ==", - "dependencies": { - "memoize-one": "^6.0.0", - "prop-types": "^15.8.1", - "raf": "^3.4.1" - }, - "peerDependencies": { - "javascript-time-ago": "^2.3.7", - "react": ">=0.16.8", - "react-dom": ">=0.16.8" - } - }, - "node_modules/react-transition-group": { - "version": "4.4.5", - "resolved": "https://registry.npmjs.org/react-transition-group/-/react-transition-group-4.4.5.tgz", - "integrity": "sha512-pZcd1MCJoiKiBR2NRxeCRg13uCXbydPnmB4EOeRrY7480qNWO8IIgQG6zlDkm6uRMsURXPuKq0GWtiM59a5Q6g==", - "dependencies": { - "@babel/runtime": "^7.5.5", - "dom-helpers": "^5.0.1", - "loose-envify": "^1.4.0", - "prop-types": "^15.6.2" - }, - "peerDependencies": { - "react": ">=16.6.0", - "react-dom": ">=16.6.0" - } - }, - "node_modules/read-pkg": { - "version": "5.2.0", - "resolved": "https://registry.npmjs.org/read-pkg/-/read-pkg-5.2.0.tgz", - "integrity": "sha512-Ug69mNOpfvKDAc2Q8DRpMjjzdtrnv9HcSMX+4VsZxD1aZ6ZzrIE7rlzXBtWTyhULSMKg076AW6WR5iZpD0JiOg==", - "dev": true, - "dependencies": { - "@types/normalize-package-data": "^2.4.0", - "normalize-package-data": "^2.5.0", - "parse-json": "^5.0.0", - "type-fest": "^0.6.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/read-pkg-up": { - "version": "7.0.1", - "resolved": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-7.0.1.tgz", - "integrity": "sha512-zK0TB7Xd6JpCLmlLmufqykGE+/TlOePD6qKClNW7hHDKFh/J7/7gCWGR7joEQEW1bKq3a3yUZSObOoWLFQ4ohg==", - "dev": true, - "dependencies": { - "find-up": "^4.1.0", - "read-pkg": "^5.2.0", - "type-fest": "^0.8.1" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/read-pkg-up/node_modules/find-up": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz", - "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==", - "dev": true, - "dependencies": { - "locate-path": "^5.0.0", - "path-exists": "^4.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/read-pkg-up/node_modules/locate-path": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz", - "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==", - "dev": true, - "dependencies": { - "p-locate": "^4.1.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/read-pkg-up/node_modules/p-limit": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz", - "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==", - "dev": true, - "dependencies": { - "p-try": "^2.0.0" - }, - "engines": { - "node": ">=6" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/read-pkg-up/node_modules/p-locate": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz", - "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==", - "dev": true, - "dependencies": { - "p-limit": "^2.2.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/read-pkg-up/node_modules/type-fest": { - "version": "0.8.1", - "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz", - "integrity": "sha512-4dbzIzqvjtgiM5rw1k5rEHtBANKmdudhGyBEajN01fEyhaAIhsoKNy6y7+IN93IfpFtwY9iqi7kD+xwKhQsNJA==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/read-pkg/node_modules/hosted-git-info": { - "version": "2.8.9", - "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz", - "integrity": "sha512-mxIDAb9Lsm6DoOJ7xH+5+X4y1LU/4Hi50L9C5sIswK3JzULS4bwk1FvjdBgvYR4bzT4tuUQiC15FE2f5HbLvYw==", - "dev": true - }, - "node_modules/read-pkg/node_modules/normalize-package-data": { - "version": "2.5.0", - "resolved": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz", - "integrity": "sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==", - "dev": true, - "dependencies": { - "hosted-git-info": "^2.1.4", - "resolve": "^1.10.0", - "semver": "2 || 3 || 4 || 5", - "validate-npm-package-license": "^3.0.1" - } - }, - "node_modules/read-pkg/node_modules/semver": { - "version": "5.7.2", - "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz", - "integrity": "sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==", - "dev": true, - "bin": { - "semver": "bin/semver" - } - }, - "node_modules/read-pkg/node_modules/type-fest": { - "version": "0.6.0", - "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.6.0.tgz", - "integrity": "sha512-q+MB8nYR1KDLrgr4G5yemftpMC7/QLqVndBmEEdqzmNj5dcFOO4Oo8qlwZE3ULT3+Zim1F8Kq4cBnikNhlCMlg==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/readable-stream": { - "version": "3.6.2", - "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", - "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", - "dependencies": { - "inherits": "^2.0.3", - "string_decoder": "^1.1.1", - "util-deprecate": "^1.0.1" - }, - "engines": { - "node": ">= 6" - } - }, - "node_modules/readdirp": { - "version": "3.6.0", - "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz", - "integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==", - "dev": true, - "dependencies": { - "picomatch": "^2.2.1" - }, - "engines": { - "node": ">=8.10.0" - } - }, - "node_modules/redent": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz", - "integrity": "sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==", - "dev": true, - "dependencies": { - "indent-string": "^4.0.0", - "strip-indent": "^3.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/redux": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/redux/-/redux-4.1.1.tgz", - "integrity": "sha512-hZQZdDEM25UY2P493kPYuKqviVwZ58lEmGQNeQ+gXa+U0gYPUBf7NKYazbe3m+bs/DzM/ahN12DbF+NG8i0CWw==", - "dependencies": { - "@babel/runtime": "^7.9.2" - } - }, - "node_modules/redux-immutable-state-invariant": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/redux-immutable-state-invariant/-/redux-immutable-state-invariant-2.1.0.tgz", - "integrity": "sha512-3czbDKs35FwiBRsx/3KabUk5zSOoTXC+cgVofGkpBNv3jQcqIe5JrHcF5AmVt7B/4hyJ8MijBIpCJ8cife6yJg==", - "dev": true, - "dependencies": { - "invariant": "^2.1.0", - "json-stringify-safe": "^5.0.1" - } - }, - "node_modules/redux-persist": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/redux-persist/-/redux-persist-6.0.0.tgz", - "integrity": "sha512-71LLMbUq2r02ng2We9S215LtPu3fY0KgaGE0k8WRgl6RkqxtGfl7HUozz1Dftwsb0D/5mZ8dwAaPbtnzfvbEwQ==", - "peerDependencies": { - "redux": ">4.0.0" - } - }, - "node_modules/redux-thunk": { - "version": "2.4.2", - "resolved": "https://registry.npmjs.org/redux-thunk/-/redux-thunk-2.4.2.tgz", - "integrity": "sha512-+P3TjtnP0k/FEjcBL5FZpoovtvrTNT/UXd4/sluaSyrURlSlhLSzEdfsTBW7WsKB6yPvgd7q/iZPICFjW4o57Q==", - "peerDependencies": { - "redux": "^4" - } - }, - "node_modules/reflect.getprototypeof": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.5.tgz", - "integrity": "sha512-62wgfC8dJWrmxv44CA36pLDnP6KKl3Vhxb7PL+8+qrrFMMoJij4vgiMP8zV4O8+CBMXY1mHxI5fITGHXFHVmQQ==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.5", - "define-properties": "^1.2.1", - "es-abstract": "^1.22.3", - "es-errors": "^1.0.0", - "get-intrinsic": "^1.2.3", - "globalthis": "^1.0.3", - "which-builtin-type": "^1.1.3" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/refractor": { - "version": "3.6.0", - "resolved": "https://registry.npmjs.org/refractor/-/refractor-3.6.0.tgz", - "integrity": "sha512-MY9W41IOWxxk31o+YvFCNyNzdkc9M20NoZK5vq6jkv4I/uh2zkWcfudj0Q1fovjUQJrNewS9NMzeTtqPf+n5EA==", - "dependencies": { - "hastscript": "^6.0.0", - "parse-entities": "^2.0.0", - "prismjs": "~1.27.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/refractor/node_modules/prismjs": { - "version": "1.27.0", - "resolved": "https://registry.npmjs.org/prismjs/-/prismjs-1.27.0.tgz", - "integrity": "sha512-t13BGPUlFDR7wRB5kQDG4jjl7XeuH6jbJGt11JHPL96qwsEHNX2+68tFXqc1/k+/jALsbSWJKUOT/hcYAZ5LkA==", - "engines": { - "node": ">=6" - } - }, - "node_modules/regenerator-runtime": { - "version": "0.14.1", - "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.14.1.tgz", - "integrity": "sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==" - }, - "node_modules/regexp.prototype.flags": { - "version": "1.5.2", - "resolved": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.5.2.tgz", - "integrity": "sha512-NcDiDkTLuPR+++OCKB0nWafEmhg/Da8aUPLPMQbK+bxKKCm1/S5he+AqYa4PlMCVBalb4/yxIRub6qkEx5yJbw==", - "dependencies": { - "call-bind": "^1.0.6", - "define-properties": "^1.2.1", - "es-errors": "^1.3.0", - "set-function-name": "^2.0.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/relative-time-format": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/relative-time-format/-/relative-time-format-1.1.6.tgz", - "integrity": "sha512-aCv3juQw4hT1/P/OrVltKWLlp15eW1GRcwP1XdxHrPdZE9MtgqFpegjnTjLhi2m2WI9MT/hQQtE+tjEWG1hgkQ==" - }, - "node_modules/require-from-string": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", - "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==", - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/reselect": { - "version": "4.1.8", - "resolved": "https://registry.npmjs.org/reselect/-/reselect-4.1.8.tgz", - "integrity": "sha512-ab9EmR80F/zQTMNeneUr4cv+jSwPJgIlvEmVwLerwrWVbpLlBuls9XHzIeTFy4cegU2NHBp3va0LKOzU5qFEYQ==" - }, - "node_modules/resolve": { - "version": "1.22.8", - "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.8.tgz", - "integrity": "sha512-oKWePCxqpd6FlLvGV1VU0x7bkPmmCNolxzjMf4NczoDnQcIWrAF+cPtZn5i6n+RfD2d9i0tzpKnG6Yk168yIyw==", - "dependencies": { - "is-core-module": "^2.13.0", - "path-parse": "^1.0.7", - "supports-preserve-symlinks-flag": "^1.0.0" - }, - "bin": { - "resolve": "bin/resolve" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/resolve-from": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz", - "integrity": "sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==", - "engines": { - "node": ">=4" - } - }, - "node_modules/ret": { - "version": "0.1.15", - "resolved": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", - "integrity": "sha512-TTlYpa+OL+vMMNG24xSlQGEJ3B/RzEfUlLct7b5G/ytav+wPrplCpVMFuwzXbkecJrb6IYo1iFb0S9v37754mg==", - "engines": { - "node": ">=0.12" - } - }, - "node_modules/reusify": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.0.4.tgz", - "integrity": "sha512-U9nH88a3fc/ekCF1l0/UP1IosiuIjyTh7hBvXVMHYgVcfGvt897Xguj2UOLDeI5BG2m7/uwyaLVT6fbtCwTyzw==", - "dev": true, - "engines": { - "iojs": ">=1.0.0", - "node": ">=0.10.0" - } - }, - "node_modules/rgbcolor": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/rgbcolor/-/rgbcolor-1.0.1.tgz", - "integrity": "sha512-9aZLIrhRaD97sgVhtJOW6ckOEh6/GnvQtdVNfdZ6s67+3/XwLS9lBcQYzEEhYVeUowN7pRzMLsyGhK2i/xvWbw==", - "optional": true, - "engines": { - "node": ">= 0.8.15" - } - }, - "node_modules/rimraf": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", - "integrity": "sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==", - "dev": true, - "dependencies": { - "glob": "^7.1.3" - }, - "bin": { - "rimraf": "bin.js" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, - "node_modules/rollup": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.13.0.tgz", - "integrity": "sha512-3YegKemjoQnYKmsBlOHfMLVPPA5xLkQ8MHLLSw/fBrFaVkEayL51DilPpNNLq1exr98F2B1TzrV0FUlN3gWRPg==", - "dev": true, - "dependencies": { - "@types/estree": "1.0.5" - }, - "bin": { - "rollup": "dist/bin/rollup" - }, - "engines": { - "node": ">=18.0.0", - "npm": ">=8.0.0" - }, - "optionalDependencies": { - "@rollup/rollup-android-arm-eabi": "4.13.0", - "@rollup/rollup-android-arm64": "4.13.0", - "@rollup/rollup-darwin-arm64": "4.13.0", - "@rollup/rollup-darwin-x64": "4.13.0", - "@rollup/rollup-linux-arm-gnueabihf": "4.13.0", - "@rollup/rollup-linux-arm64-gnu": "4.13.0", - "@rollup/rollup-linux-arm64-musl": "4.13.0", - "@rollup/rollup-linux-riscv64-gnu": "4.13.0", - "@rollup/rollup-linux-x64-gnu": "4.13.0", - "@rollup/rollup-linux-x64-musl": "4.13.0", - "@rollup/rollup-win32-arm64-msvc": "4.13.0", - "@rollup/rollup-win32-ia32-msvc": "4.13.0", - "@rollup/rollup-win32-x64-msvc": "4.13.0", - "fsevents": "~2.3.2" - } - }, - "node_modules/rst-selector-parser": { - "version": "2.2.3", - "resolved": "https://registry.npmjs.org/rst-selector-parser/-/rst-selector-parser-2.2.3.tgz", - "integrity": "sha512-nDG1rZeP6oFTLN6yNDV/uiAvs1+FS/KlrEwh7+y7dpuApDBy6bI2HTBcc0/V8lv9OTqfyD34eF7au2pm8aBbhA==", - "dependencies": { - "lodash.flattendeep": "^4.4.0", - "nearley": "^2.7.10" - } - }, - "node_modules/run-parallel": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz", - "integrity": "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==", - "dev": true, - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ], - "dependencies": { - "queue-microtask": "^1.2.2" - } - }, - "node_modules/safe-array-concat": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/safe-array-concat/-/safe-array-concat-1.1.2.tgz", - "integrity": "sha512-vj6RsCsWBCf19jIeHEfkRMw8DPiBb+DMXklQ/1SGDHOMlHdPUkZXFQ2YdplS23zESTijAcurb1aSgJA3AgMu1Q==", - "dependencies": { - "call-bind": "^1.0.7", - "get-intrinsic": "^1.2.4", - "has-symbols": "^1.0.3", - "isarray": "^2.0.5" - }, - "engines": { - "node": ">=0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/safe-buffer": { - "version": "5.2.1", - "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", - "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ] - }, - "node_modules/safe-regex-test": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.0.3.tgz", - "integrity": "sha512-CdASjNJPvRa7roO6Ra/gLYBTzYzzPyyBXxIMdGW3USQLyjWEls2RgW5UBTXaQVp+OrpeCK3bLem8smtmheoRuw==", - "dependencies": { - "call-bind": "^1.0.6", - "es-errors": "^1.3.0", - "is-regex": "^1.1.4" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/safer-buffer": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", - "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==" - }, - "node_modules/sass": { - "version": "1.71.1", - "resolved": "https://registry.npmjs.org/sass/-/sass-1.71.1.tgz", - "integrity": "sha512-wovtnV2PxzteLlfNzbgm1tFXPLoZILYAMJtvoXXkD7/+1uP41eKkIt1ypWq5/q2uT94qHjXehEYfmjKOvjL9sg==", - "dev": true, - "dependencies": { - "chokidar": ">=3.0.0 <4.0.0", - "immutable": "^4.0.0", - "source-map-js": ">=0.6.2 <2.0.0" - }, - "bin": { - "sass": "sass.js" - }, - "engines": { - "node": ">=14.0.0" - } - }, - "node_modules/scheduler": { - "version": "0.23.0", - "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.0.tgz", - "integrity": "sha512-CtuThmgHNg7zIZWAXi3AsyIzA3n4xx7aNyjwC2VJldO2LMVDhFK+63xGqq6CsJH4rTAt6/M+N4GhZiDYPx9eUw==", - "dependencies": { - "loose-envify": "^1.1.0" - } - }, - "node_modules/schema-utils": { - "version": "3.3.0", - "resolved": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.3.0.tgz", - "integrity": "sha512-pN/yOAvcC+5rQ5nERGuwrjLlYvLTbCibnZ1I7B1LaiAz9BRBlE9GMgE/eqV30P7aJQUf7Ddimy/RsbYO/GrVGg==", - "peer": true, - "dependencies": { - "@types/json-schema": "^7.0.8", - "ajv": "^6.12.5", - "ajv-keywords": "^3.5.2" - }, - "engines": { - "node": ">= 10.13.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/webpack" - } - }, - "node_modules/schema-utils/node_modules/ajv": { - "version": "6.12.6", - "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz", - "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", - "peer": true, - "dependencies": { - "fast-deep-equal": "^3.1.1", - "fast-json-stable-stringify": "^2.0.0", - "json-schema-traverse": "^0.4.1", - "uri-js": "^4.2.2" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/epoberezkin" - } - }, - "node_modules/schema-utils/node_modules/ajv-keywords": { - "version": "3.5.2", - "resolved": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz", - "integrity": "sha512-5p6WTN0DdTGVQk6VjcEju19IgaHudalcfabD7yhDGeA6bcQnmL+CpveLJq/3hvfwd1aof6L386Ougkx6RfyMIQ==", - "peer": true, - "peerDependencies": { - "ajv": "^6.9.1" - } - }, - "node_modules/schema-utils/node_modules/json-schema-traverse": { - "version": "0.4.1", - "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz", - "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==", - "peer": true - }, - "node_modules/semver": { - "version": "6.3.1", - "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", - "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", - "bin": { - "semver": "bin/semver.js" - } - }, - "node_modules/serialize-javascript": { - "version": "6.0.2", - "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz", - "integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==", - "peer": true, - "dependencies": { - "randombytes": "^2.1.0" - } - }, - "node_modules/set-function-length": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz", - "integrity": "sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg==", - "dependencies": { - "define-data-property": "^1.1.4", - "es-errors": "^1.3.0", - "function-bind": "^1.1.2", - "get-intrinsic": "^1.2.4", - "gopd": "^1.0.1", - "has-property-descriptors": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/set-function-name": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/set-function-name/-/set-function-name-2.0.2.tgz", - "integrity": "sha512-7PGFlmtwsEADb0WYyvCMa1t+yke6daIG4Wirafur5kcf+MhUnPms1UeR0CKQdTZD81yESwMHbtn+TR+dMviakQ==", - "dependencies": { - "define-data-property": "^1.1.4", - "es-errors": "^1.3.0", - "functions-have-names": "^1.2.3", - "has-property-descriptors": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/shallowequal": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/shallowequal/-/shallowequal-1.1.0.tgz", - "integrity": "sha512-y0m1JoUZSlPAjXVtPPW70aZWfIL/dSP7AFkRnniLCrK/8MDKog3TySTBmckD+RObVxH0v4Tox67+F14PdED2oQ==" - }, - "node_modules/shebang-command": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", - "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", - "dev": true, - "dependencies": { - "shebang-regex": "^3.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/shebang-regex": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", - "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/side-channel": { - "version": "1.0.6", - "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.6.tgz", - "integrity": "sha512-fDW/EZ6Q9RiO8eFG8Hj+7u/oW+XrPTIChwCOM2+th2A6OblDtYYIpve9m+KvI9Z4C9qSEXlaGR6bTEYHReuglA==", - "dependencies": { - "call-bind": "^1.0.7", - "es-errors": "^1.3.0", - "get-intrinsic": "^1.2.4", - "object-inspect": "^1.13.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/signal-exit": { - "version": "3.0.7", - "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", - "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", - "dev": true - }, - "node_modules/simplebar": { - "version": "5.3.9", - "resolved": "https://registry.npmjs.org/simplebar/-/simplebar-5.3.9.tgz", - "integrity": "sha512-1vIIpjDvY9sVH14e0LGeiCiTFU3ILqAghzO6OI9axeG+mvU/vMSrvXeAXkBolqFFz3XYaY8n5ahH9MeP3sp2Ag==", - "dependencies": { - "@juggle/resize-observer": "^3.3.1", - "can-use-dom": "^0.1.0", - "core-js": "^3.0.1", - "lodash.debounce": "^4.0.8", - "lodash.memoize": "^4.1.2", - "lodash.throttle": "^4.1.1" - } - }, - "node_modules/simplebar-react": { - "version": "2.4.3", - "resolved": "https://registry.npmjs.org/simplebar-react/-/simplebar-react-2.4.3.tgz", - "integrity": "sha512-Ep8gqAUZAS5IC2lT5RE4t1ZFUIVACqbrSRQvFV9a6NbVUzXzOMnc4P82Hl8Ak77AnPQvmgUwZS7aUKLyBoMAcg==", - "dependencies": { - "prop-types": "^15.6.1", - "simplebar": "^5.3.9" - }, - "peerDependencies": { - "react": "^0.14.9 || ^15.3.0 || ^16.0.0-rc || ^16.0 || ^17.0 || ^18.0.0", - "react-dom": "^0.14.9 || ^15.3.0 || ^16.0.0-rc || ^16.0 || ^17.0 || ^18.0.0" - } - }, - "node_modules/slash": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz", - "integrity": "sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/slice-ansi": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz", - "integrity": "sha512-qMCMfhY040cVHT43K9BFygqYbUPFZKHOg7K73mtTWJRb8pyP3fzf4Ixd5SzdEJQ6MRUg/WBnOLxghZtKKurENQ==", - "dev": true, - "dependencies": { - "ansi-styles": "^4.0.0", - "astral-regex": "^2.0.0", - "is-fullwidth-code-point": "^3.0.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/chalk/slice-ansi?sponsor=1" - } - }, - "node_modules/slice-ansi/node_modules/ansi-styles": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", - "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", - "dev": true, - "dependencies": { - "color-convert": "^2.0.1" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/chalk/ansi-styles?sponsor=1" - } - }, - "node_modules/slice-ansi/node_modules/color-convert": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", - "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", - "dev": true, - "dependencies": { - "color-name": "~1.1.4" - }, - "engines": { - "node": ">=7.0.0" - } - }, - "node_modules/slice-ansi/node_modules/color-name": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", - "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", - "dev": true - }, - "node_modules/source-map": { - "version": "0.6.1", - "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", - "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/source-map-js": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.0.2.tgz", - "integrity": "sha512-R0XvVJ9WusLiqTCEiGCmICCMplcCkIwwR11mOSD9CR5u+IXYdiseeEuXCVAjS54zqwkLcPNnmU4OeJ6tUrWhDw==", - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/source-map-loader": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/source-map-loader/-/source-map-loader-3.0.2.tgz", - "integrity": "sha512-BokxPoLjyl3iOrgkWaakaxqnelAJSS+0V+De0kKIq6lyWrXuiPgYTGp6z3iHmqljKAaLXwZa+ctD8GccRJeVvg==", - "dependencies": { - "abab": "^2.0.5", - "iconv-lite": "^0.6.3", - "source-map-js": "^1.0.1" - }, - "engines": { - "node": ">= 12.13.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/webpack" - }, - "peerDependencies": { - "webpack": "^5.0.0" - } - }, - "node_modules/source-map-support": { - "version": "0.5.21", - "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz", - "integrity": "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==", - "peer": true, - "dependencies": { - "buffer-from": "^1.0.0", - "source-map": "^0.6.0" - } - }, - "node_modules/space-separated-tokens": { - "version": "1.1.5", - "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-1.1.5.tgz", - "integrity": "sha512-q/JSVd1Lptzhf5bkYm4ob4iWPjx0KiRe3sRFBNrVqbJkFaBm5vbbowy1mymoPNLRa52+oadOhJ+K49wsSeSjTA==", - "funding": { - "type": "github", - "url": "https://github.com/sponsors/wooorm" - } - }, - "node_modules/spdx-correct": { - "version": "3.2.0", - "resolved": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.2.0.tgz", - "integrity": "sha512-kN9dJbvnySHULIluDHy32WHRUu3Og7B9sbY7tsFLctQkIqnMh3hErYgdMjTYuqmcXX+lK5T1lnUt3G7zNswmZA==", - "dev": true, - "dependencies": { - "spdx-expression-parse": "^3.0.0", - "spdx-license-ids": "^3.0.0" - } - }, - "node_modules/spdx-exceptions": { - "version": "2.5.0", - "resolved": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", - "integrity": "sha512-PiU42r+xO4UbUS1buo3LPJkjlO7430Xn5SVAhdpzzsPHsjbYVflnnFdATgabnLude+Cqu25p6N+g2lw/PFsa4w==", - "dev": true - }, - "node_modules/spdx-expression-parse": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", - "integrity": "sha512-cbqHunsQWnJNE6KhVSMsMeH5H/L9EpymbzqTQ3uLwNCLZ1Q481oWaofqH7nO6V07xlXwY6PhQdQ2IedWx/ZK4Q==", - "dev": true, - "dependencies": { - "spdx-exceptions": "^2.1.0", - "spdx-license-ids": "^3.0.0" - } - }, - "node_modules/spdx-license-ids": { - "version": "3.0.17", - "resolved": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.17.tgz", - "integrity": "sha512-sh8PWc/ftMqAAdFiBu6Fy6JUOYjqDJBJvIhpfDMyHrr0Rbp5liZqd4TjtQ/RgfLjKFZb+LMx5hpml5qOWy0qvg==", - "dev": true - }, - "node_modules/stackblur-canvas": { - "version": "2.7.0", - "resolved": "https://registry.npmjs.org/stackblur-canvas/-/stackblur-canvas-2.7.0.tgz", - "integrity": "sha512-yf7OENo23AGJhBriGx0QivY5JP6Y1HbrrDI6WLt6C5auYZXlQrheoY8hD4ibekFKz1HOfE48Ww8kMWMnJD/zcQ==", - "optional": true, - "engines": { - "node": ">=0.1.14" - } - }, - "node_modules/state-local": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/state-local/-/state-local-1.0.7.tgz", - "integrity": "sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w==" - }, - "node_modules/string_decoder": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", - "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==", - "dependencies": { - "safe-buffer": "~5.2.0" - } - }, - "node_modules/string-width": { - "version": "4.2.3", - "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", - "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", - "dev": true, - "dependencies": { - "emoji-regex": "^8.0.0", - "is-fullwidth-code-point": "^3.0.0", - "strip-ansi": "^6.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/string.prototype.matchall": { - "version": "4.0.10", - "resolved": "https://registry.npmjs.org/string.prototype.matchall/-/string.prototype.matchall-4.0.10.tgz", - "integrity": "sha512-rGXbGmOEosIQi6Qva94HUjgPs9vKW+dkG7Y8Q5O2OYkWL6wFaTRZO8zM4mhP94uX55wgyrXzfS2aGtGzUL7EJQ==", - "dev": true, - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1", - "get-intrinsic": "^1.2.1", - "has-symbols": "^1.0.3", - "internal-slot": "^1.0.5", - "regexp.prototype.flags": "^1.5.0", - "set-function-name": "^2.0.0", - "side-channel": "^1.0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/string.prototype.trim": { - "version": "1.2.8", - "resolved": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.2.8.tgz", - "integrity": "sha512-lfjY4HcixfQXOfaqCvcBuOIapyaroTXhbkfJN3gcB1OtyupngWK4sEET9Knd0cXd28kTUqu/kHoV4HKSJdnjiQ==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/string.prototype.trimend": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.7.tgz", - "integrity": "sha512-Ni79DqeB72ZFq1uH/L6zJ+DKZTkOtPIHovb3YZHQViE+HDouuU4mBrLOLDn5Dde3RF8qw5qVETEjhu9locMLvA==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/string.prototype.trimstart": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.7.tgz", - "integrity": "sha512-NGhtDFu3jCEm7B4Fy0DpLewdJQOZcQ0rGbwQ/+stjnrp2i+rlKeCvos9hOIeCmqwratM47OBxY7uFZzjxHXmrg==", - "dependencies": { - "call-bind": "^1.0.2", - "define-properties": "^1.2.0", - "es-abstract": "^1.22.1" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/strip-ansi": { - "version": "6.0.1", - "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", - "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", - "dev": true, - "dependencies": { - "ansi-regex": "^5.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/strip-bom": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz", - "integrity": "sha512-vavAMRXOgBVNF6nyEEmL3DBK19iRpDcoIwW+swQ+CbGiu7lju6t+JklA1MHweoWtadgt4ISVUsXLyDq34ddcwA==", - "dev": true, - "engines": { - "node": ">=4" - } - }, - "node_modules/strip-indent": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz", - "integrity": "sha512-laJTa3Jb+VQpaC6DseHhF7dXVqHTfJPCRDaEbid/drOhgitgYku/letMUqOXFoWV0zIIUbjpdH2t+tYj4bQMRQ==", - "dev": true, - "dependencies": { - "min-indent": "^1.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/strip-json-comments": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz", - "integrity": "sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==", - "dev": true, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/style-search": { - "version": "0.1.0", - "resolved": "https://registry.npmjs.org/style-search/-/style-search-0.1.0.tgz", - "integrity": "sha512-Dj1Okke1C3uKKwQcetra4jSuk0DqbzbYtXipzFlFMZtowbF1x7BKJwB9AayVMyFARvU8EDrZdcax4At/452cAg==", - "dev": true - }, - "node_modules/styled-components": { - "version": "5.3.11", - "resolved": "https://registry.npmjs.org/styled-components/-/styled-components-5.3.11.tgz", - "integrity": "sha512-uuzIIfnVkagcVHv9nE0VPlHPSCmXIUGKfJ42LNjxCCTDTL5sgnJ8Z7GZBq0EnLYGln77tPpEpExt2+qa+cZqSw==", - "dependencies": { - "@babel/helper-module-imports": "^7.0.0", - "@babel/traverse": "^7.4.5", - "@emotion/is-prop-valid": "^1.1.0", - "@emotion/stylis": "^0.8.4", - "@emotion/unitless": "^0.7.4", - "babel-plugin-styled-components": ">= 1.12.0", - "css-to-react-native": "^3.0.0", - "hoist-non-react-statics": "^3.0.0", - "shallowequal": "^1.1.0", - "supports-color": "^5.5.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/styled-components" - }, - "peerDependencies": { - "react": ">= 16.8.0", - "react-dom": ">= 16.8.0", - "react-is": ">= 16.8.0" - } - }, - "node_modules/styled-components/node_modules/@emotion/unitless": { - "version": "0.7.5", - "resolved": "https://registry.npmjs.org/@emotion/unitless/-/unitless-0.7.5.tgz", - "integrity": "sha512-OWORNpfjMsSSUBVrRBVGECkhWcULOAJz9ZW8uK9qgxD+87M7jHRcvh/A96XXNhXTLmKcoYSQtBEX7lHMO7YRwg==" - }, - "node_modules/stylelint": { - "version": "14.16.1", - "resolved": "https://registry.npmjs.org/stylelint/-/stylelint-14.16.1.tgz", - "integrity": "sha512-ErlzR/T3hhbV+a925/gbfc3f3Fep9/bnspMiJPorfGEmcBbXdS+oo6LrVtoUZ/w9fqD6o6k7PtUlCOsCRdjX/A==", - "dev": true, - "dependencies": { - "@csstools/selector-specificity": "^2.0.2", - "balanced-match": "^2.0.0", - "colord": "^2.9.3", - "cosmiconfig": "^7.1.0", - "css-functions-list": "^3.1.0", - "debug": "^4.3.4", - "fast-glob": "^3.2.12", - "fastest-levenshtein": "^1.0.16", - "file-entry-cache": "^6.0.1", - "global-modules": "^2.0.0", - "globby": "^11.1.0", - "globjoin": "^0.1.4", - "html-tags": "^3.2.0", - "ignore": "^5.2.1", - "import-lazy": "^4.0.0", - "imurmurhash": "^0.1.4", - "is-plain-object": "^5.0.0", - "known-css-properties": "^0.26.0", - "mathml-tag-names": "^2.1.3", - "meow": "^9.0.0", - "micromatch": "^4.0.5", - "normalize-path": "^3.0.0", - "picocolors": "^1.0.0", - "postcss": "^8.4.19", - "postcss-media-query-parser": "^0.2.3", - "postcss-resolve-nested-selector": "^0.1.1", - "postcss-safe-parser": "^6.0.0", - "postcss-selector-parser": "^6.0.11", - "postcss-value-parser": "^4.2.0", - "resolve-from": "^5.0.0", - "string-width": "^4.2.3", - "strip-ansi": "^6.0.1", - "style-search": "^0.1.0", - "supports-hyperlinks": "^2.3.0", - "svg-tags": "^1.0.0", - "table": "^6.8.1", - "v8-compile-cache": "^2.3.0", - "write-file-atomic": "^4.0.2" - }, - "bin": { - "stylelint": "bin/stylelint.js" - }, - "engines": { - "node": "^12.20.0 || ^14.13.1 || >=16.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/stylelint" - } - }, - "node_modules/stylelint-config-sass-guidelines": { - "version": "9.0.1", - "resolved": "https://registry.npmjs.org/stylelint-config-sass-guidelines/-/stylelint-config-sass-guidelines-9.0.1.tgz", - "integrity": "sha512-N06PsVsrgKijQ3YT5hqKA7x3NUkgELTRI1cbWMqcYiCGG6MjzvNk6Cb5YYA1PrvrksBV76BvY9P9bAswojVMqA==", - "dev": true, - "dependencies": { - "postcss-scss": "^4.0.2", - "stylelint-order": "^5.0.0", - "stylelint-scss": "^4.0.0" - }, - "engines": { - "node": "^12.20.0 || ^14.13.1 || >=16.0.0" - }, - "peerDependencies": { - "postcss": "^8.3.3", - "stylelint": "^14.0.1" - } - }, - "node_modules/stylelint-order": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/stylelint-order/-/stylelint-order-5.0.0.tgz", - "integrity": "sha512-OWQ7pmicXufDw5BlRqzdz3fkGKJPgLyDwD1rFY3AIEfIH/LQY38Vu/85v8/up0I+VPiuGRwbc2Hg3zLAsJaiyw==", - "dev": true, - "dependencies": { - "postcss": "^8.3.11", - "postcss-sorting": "^7.0.1" - }, - "peerDependencies": { - "stylelint": "^14.0.0" - } - }, - "node_modules/stylelint-scss": { - "version": "4.7.0", - "resolved": "https://registry.npmjs.org/stylelint-scss/-/stylelint-scss-4.7.0.tgz", - "integrity": "sha512-TSUgIeS0H3jqDZnby1UO1Qv3poi1N8wUYIJY6D1tuUq2MN3lwp/rITVo0wD+1SWTmRm0tNmGO0b7nKInnqF6Hg==", - "dev": true, - "dependencies": { - "postcss-media-query-parser": "^0.2.3", - "postcss-resolve-nested-selector": "^0.1.1", - "postcss-selector-parser": "^6.0.11", - "postcss-value-parser": "^4.2.0" - }, - "peerDependencies": { - "stylelint": "^14.5.1 || ^15.0.0" - } - }, - "node_modules/stylelint/node_modules/balanced-match": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-2.0.0.tgz", - "integrity": "sha512-1ugUSr8BHXRnK23KfuYS+gVMC3LB8QGH9W1iGtDPsNWoQbgtXSExkBu2aDR4epiGWZOjZsj6lDl/N/AqqTC3UA==", - "dev": true - }, - "node_modules/stylelint/node_modules/resolve-from": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz", - "integrity": "sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/stylis": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/stylis/-/stylis-4.2.0.tgz", - "integrity": "sha512-Orov6g6BB1sDfYgzWfTHDOxamtX1bE/zo104Dh9e6fqJ3PooipYyfJ0pUmrZO2wAvO8YbEyeFrkV91XTsGMSrw==" - }, - "node_modules/supports-color": { - "version": "5.5.0", - "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz", - "integrity": "sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==", - "dependencies": { - "has-flag": "^3.0.0" - }, - "engines": { - "node": ">=4" - } - }, - "node_modules/supports-hyperlinks": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-2.3.0.tgz", - "integrity": "sha512-RpsAZlpWcDwOPQA22aCH4J0t7L8JmAvsCxfOSEwm7cQs3LshN36QaTkwd70DnBOXDWGssw2eUoc8CaRWT0XunA==", - "dev": true, - "dependencies": { - "has-flag": "^4.0.0", - "supports-color": "^7.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/supports-hyperlinks/node_modules/has-flag": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", - "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/supports-hyperlinks/node_modules/supports-color": { - "version": "7.2.0", - "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz", - "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==", - "dev": true, - "dependencies": { - "has-flag": "^4.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/supports-preserve-symlinks-flag": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz", - "integrity": "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/svg-pathdata": { - "version": "6.0.3", - "resolved": "https://registry.npmjs.org/svg-pathdata/-/svg-pathdata-6.0.3.tgz", - "integrity": "sha512-qsjeeq5YjBZ5eMdFuUa4ZosMLxgr5RZ+F+Y1OrDhuOCEInRMA3x74XdBtggJcj9kOeInz0WE+LgCPDkZFlBYJw==", - "optional": true, - "engines": { - "node": ">=12.0.0" - } - }, - "node_modules/svg-tags": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/svg-tags/-/svg-tags-1.0.0.tgz", - "integrity": "sha512-ovssysQTa+luh7A5Weu3Rta6FJlFBBbInjOh722LIt6klpU2/HtdUbszju/G4devcvk8PGt7FCLv5wftu3THUA==", - "dev": true - }, - "node_modules/table": { - "version": "6.8.1", - "resolved": "https://registry.npmjs.org/table/-/table-6.8.1.tgz", - "integrity": "sha512-Y4X9zqrCftUhMeH2EptSSERdVKt/nEdijTOacGD/97EKjhQ/Qs8RTlEGABSJNNN8lac9kheH+af7yAkEWlgneA==", - "dev": true, - "dependencies": { - "ajv": "^8.0.1", - "lodash.truncate": "^4.4.2", - "slice-ansi": "^4.0.0", - "string-width": "^4.2.3", - "strip-ansi": "^6.0.1" - }, - "engines": { - "node": ">=10.0.0" - } - }, - "node_modules/tapable": { - "version": "2.2.1", - "resolved": "https://registry.npmjs.org/tapable/-/tapable-2.2.1.tgz", - "integrity": "sha512-GNzQvQTOIP6RyTfE2Qxb8ZVlNmw0n88vp1szwWRimP02mnTsx3Wtn5qRdqY9w2XduFNUgvOwhNnQsjwCp+kqaQ==", - "peer": true, - "engines": { - "node": ">=6" - } - }, - "node_modules/terser": { - "version": "5.29.1", - "resolved": "https://registry.npmjs.org/terser/-/terser-5.29.1.tgz", - "integrity": "sha512-lZQ/fyaIGxsbGxApKmoPTODIzELy3++mXhS5hOqaAWZjQtpq/hFHAc+rm29NND1rYRxRWKcjuARNwULNXa5RtQ==", - "peer": true, - "dependencies": { - "@jridgewell/source-map": "^0.3.3", - "acorn": "^8.8.2", - "commander": "^2.20.0", - "source-map-support": "~0.5.20" - }, - "bin": { - "terser": "bin/terser" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/terser-webpack-plugin": { - "version": "5.3.10", - "resolved": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.3.10.tgz", - "integrity": "sha512-BKFPWlPDndPs+NGGCr1U59t0XScL5317Y0UReNrHaw9/FwhPENlq6bfgs+4yPfyP51vqC1bQ4rp1EfXW5ZSH9w==", - "peer": true, - "dependencies": { - "@jridgewell/trace-mapping": "^0.3.20", - "jest-worker": "^27.4.5", - "schema-utils": "^3.1.1", - "serialize-javascript": "^6.0.1", - "terser": "^5.26.0" - }, - "engines": { - "node": ">= 10.13.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/webpack" - }, - "peerDependencies": { - "webpack": "^5.1.0" - }, - "peerDependenciesMeta": { - "@swc/core": { - "optional": true - }, - "esbuild": { - "optional": true - }, - "uglify-js": { - "optional": true - } - } - }, - "node_modules/terser/node_modules/commander": { - "version": "2.20.3", - "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", - "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==", - "peer": true - }, - "node_modules/text-segmentation": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/text-segmentation/-/text-segmentation-1.0.3.tgz", - "integrity": "sha512-iOiPUo/BGnZ6+54OsWxZidGCsdU8YbE4PSpdPinp7DeMtUJNJBoJ/ouUSTJjHkh1KntHaltHl/gDs2FC4i5+Nw==", - "optional": true, - "dependencies": { - "utrie": "^1.0.2" - } - }, - "node_modules/text-table": { - "version": "0.2.0", - "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz", - "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==", - "dev": true - }, - "node_modules/to-fast-properties": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz", - "integrity": "sha512-/OaKK0xYrs3DmxRYqL/yDc+FxFUVYhDlXMhRmv3z915w2HF1tnN1omB354j8VUGO/hbRzyD6Y3sA7v7GS/ceog==", - "engines": { - "node": ">=4" - } - }, - "node_modules/to-regex-range": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz", - "integrity": "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==", - "dev": true, - "dependencies": { - "is-number": "^7.0.0" - }, - "engines": { - "node": ">=8.0" - } - }, - "node_modules/toggle-selection": { - "version": "1.0.6", - "resolved": "https://registry.npmjs.org/toggle-selection/-/toggle-selection-1.0.6.tgz", - "integrity": "sha512-BiZS+C1OS8g/q2RRbJmy59xpyghNBqrr6k5L/uKBGRsTfxmu3ffiRnd8mlGPUVayg8pvfi5urfnu8TU7DVOkLQ==" - }, - "node_modules/tr46": { - "version": "0.0.3", - "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", - "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==", - "dev": true - }, - "node_modules/trim-newlines": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.1.tgz", - "integrity": "sha512-c1PTsA3tYrIsLGkJkzHF+w9F2EyxfXGo4UyJc4pFL++FMjnq0HJS69T3M7d//gKrFKwy429bouPescbjecU+Zw==", - "dev": true, - "engines": { - "node": ">=8" - } - }, - "node_modules/tsconfig-paths": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.15.0.tgz", - "integrity": "sha512-2Ac2RgzDe/cn48GvOe3M+o82pEFewD3UPbyoUHHdKasHwJKjds4fLXWf/Ux5kATBKN20oaFGu+jbElp1pos0mg==", - "dev": true, - "dependencies": { - "@types/json5": "^0.0.29", - "json5": "^1.0.2", - "minimist": "^1.2.6", - "strip-bom": "^3.0.0" - } - }, - "node_modules/tsconfig-paths/node_modules/json5": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/json5/-/json5-1.0.2.tgz", - "integrity": "sha512-g1MWMLBiz8FKi1e4w0UyVL3w+iJceWAFBAaBnnGKOpNa5f8TLktkbre1+s6oICydWAm+HRUGTmI+//xv2hvXYA==", - "dev": true, - "dependencies": { - "minimist": "^1.2.0" - }, - "bin": { - "json5": "lib/cli.js" - } - }, - "node_modules/tslib": { - "version": "2.6.3", - "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.6.3.tgz", - "integrity": "sha512-xNvxJEOUiWPGhUuUdQgAJPKOOJfGnIyKySOc09XkKsgdUV/3E2zvwZYdejjmRgPCgcym1juLH3226yA7sEFJKQ==" - }, - "node_modules/type-check": { - "version": "0.4.0", - "resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz", - "integrity": "sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==", - "dev": true, - "dependencies": { - "prelude-ls": "^1.2.1" - }, - "engines": { - "node": ">= 0.8.0" - } - }, - "node_modules/type-fest": { - "version": "0.18.1", - "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.18.1.tgz", - "integrity": "sha512-OIAYXk8+ISY+qTOwkHtKqzAuxchoMiD9Udx+FSGQDuiRR+PJKJHc2NJAXlbhkGwTt/4/nKZxELY1w3ReWOL8mw==", - "dev": true, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/typed-array-buffer": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.2.tgz", - "integrity": "sha512-gEymJYKZtKXzzBzM4jqa9w6Q1Jjm7x2d+sh19AdsD4wqnMPDYyvwpsIc2Q/835kHuo3BEQ7CjelGhfTsoBb2MQ==", - "dependencies": { - "call-bind": "^1.0.7", - "es-errors": "^1.3.0", - "is-typed-array": "^1.1.13" - }, - "engines": { - "node": ">= 0.4" - } - }, - "node_modules/typed-array-byte-length": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/typed-array-byte-length/-/typed-array-byte-length-1.0.1.tgz", - "integrity": "sha512-3iMJ9q0ao7WE9tWcaYKIptkNBuOIcZCCT0d4MRvuuH88fEoEH62IuQe0OtraD3ebQEoTRk8XCBoknUNc1Y67pw==", - "dependencies": { - "call-bind": "^1.0.7", - "for-each": "^0.3.3", - "gopd": "^1.0.1", - "has-proto": "^1.0.3", - "is-typed-array": "^1.1.13" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/typed-array-byte-offset": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/typed-array-byte-offset/-/typed-array-byte-offset-1.0.2.tgz", - "integrity": "sha512-Ous0vodHa56FviZucS2E63zkgtgrACj7omjwd/8lTEMEPFFyjfixMZ1ZXenpgCFBBt4EC1J2XsyVS2gkG0eTFA==", - "dependencies": { - "available-typed-arrays": "^1.0.7", - "call-bind": "^1.0.7", - "for-each": "^0.3.3", - "gopd": "^1.0.1", - "has-proto": "^1.0.3", - "is-typed-array": "^1.1.13" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/typed-array-length": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/typed-array-length/-/typed-array-length-1.0.5.tgz", - "integrity": "sha512-yMi0PlwuznKHxKmcpoOdeLwxBoVPkqZxd7q2FgMkmD3bNwvF5VW0+UlUQ1k1vmktTu4Yu13Q0RIxEP8+B+wloA==", - "dependencies": { - "call-bind": "^1.0.7", - "for-each": "^0.3.3", - "gopd": "^1.0.1", - "has-proto": "^1.0.3", - "is-typed-array": "^1.1.13", - "possible-typed-array-names": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/uglify-js": { - "version": "3.17.4", - "resolved": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.17.4.tgz", - "integrity": "sha512-T9q82TJI9e/C1TAxYvfb16xO120tMVFZrGA3f9/P4424DNu6ypK103y0GPFVa17yotwSyZW5iYXgjYHkGrJW/g==", - "dev": true, - "optional": true, - "bin": { - "uglifyjs": "bin/uglifyjs" - }, - "engines": { - "node": ">=0.8.0" - } - }, - "node_modules/unbox-primitive": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.0.2.tgz", - "integrity": "sha512-61pPlCD9h51VoreyJ0BReideM3MDKMKnh6+V9L08331ipq6Q8OFXZYiqP6n/tbHx4s5I9uRhcye6BrbkizkBDw==", - "dependencies": { - "call-bind": "^1.0.2", - "has-bigints": "^1.0.2", - "has-symbols": "^1.0.3", - "which-boxed-primitive": "^1.0.2" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/uncontrollable": { - "version": "7.2.1", - "resolved": "https://registry.npmjs.org/uncontrollable/-/uncontrollable-7.2.1.tgz", - "integrity": "sha512-svtcfoTADIB0nT9nltgjujTi7BzVmwjZClOmskKu/E8FW9BXzg9os8OLr4f8Dlnk0rYWJIWr4wv9eKUXiQvQwQ==", - "dependencies": { - "@babel/runtime": "^7.6.3", - "@types/react": ">=16.9.11", - "invariant": "^2.2.4", - "react-lifecycles-compat": "^3.0.4" - }, - "peerDependencies": { - "react": ">=15.0.0" - } - }, - "node_modules/undici-types": { - "version": "5.26.5", - "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz", - "integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==" - }, - "node_modules/update-browserslist-db": { - "version": "1.0.13", - "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.0.13.tgz", - "integrity": "sha512-xebP81SNcPuNpPP3uzeW1NYXxI3rxyJzF3pD6sH4jE7o/IX+WtSpwnVU+qIsDPyk0d3hmFQ7mjqc6AtV604hbg==", - "funding": [ - { - "type": "opencollective", - "url": "https://opencollective.com/browserslist" - }, - { - "type": "tidelift", - "url": "https://tidelift.com/funding/github/npm/browserslist" - }, - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "dependencies": { - "escalade": "^3.1.1", - "picocolors": "^1.0.0" - }, - "bin": { - "update-browserslist-db": "cli.js" - }, - "peerDependencies": { - "browserslist": ">= 4.21.0" - } - }, - "node_modules/uri-js": { - "version": "4.4.1", - "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", - "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==", - "dependencies": { - "punycode": "^2.1.0" - } - }, - "node_modules/use-isomorphic-layout-effect": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/use-isomorphic-layout-effect/-/use-isomorphic-layout-effect-1.1.2.tgz", - "integrity": "sha512-49L8yCO3iGT/ZF9QttjwLF/ZD9Iwto5LnH5LmEdk/6cFmXddqi2ulF0edxTwjj+7mqvpVVGQWvbXZdn32wRSHA==", - "peerDependencies": { - "react": "^16.8.0 || ^17.0.0 || ^18.0.0" - }, - "peerDependenciesMeta": { - "@types/react": { - "optional": true - } - } - }, - "node_modules/util-deprecate": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", - "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==" - }, - "node_modules/utrie": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/utrie/-/utrie-1.0.2.tgz", - "integrity": "sha512-1MLa5ouZiOmQzUbjbu9VmjLzn1QLXBhwpUa7kdLUQK+KQ5KA9I1vk5U4YHe/X2Ch7PYnJfWuWT+VbuxbGwljhw==", - "optional": true, - "dependencies": { - "base64-arraybuffer": "^1.0.2" - } - }, - "node_modules/v8-compile-cache": { - "version": "2.4.0", - "resolved": "https://registry.npmjs.org/v8-compile-cache/-/v8-compile-cache-2.4.0.tgz", - "integrity": "sha512-ocyWc3bAHBB/guyqJQVI5o4BZkPhznPYUG2ea80Gond/BgNWpap8TOmLSeeQG7bnh2KMISxskdADG59j7zruhw==", - "dev": true - }, - "node_modules/validate-npm-package-license": { - "version": "3.0.4", - "resolved": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz", - "integrity": "sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==", - "dev": true, - "dependencies": { - "spdx-correct": "^3.0.0", - "spdx-expression-parse": "^3.0.0" - } - }, - "node_modules/validate.io-array": { - "version": "1.0.6", - "resolved": "https://registry.npmjs.org/validate.io-array/-/validate.io-array-1.0.6.tgz", - "integrity": "sha512-DeOy7CnPEziggrOO5CZhVKJw6S3Yi7e9e65R1Nl/RTN1vTQKnzjfvks0/8kQ40FP/dsjRAOd4hxmJ7uLa6vxkg==" - }, - "node_modules/validate.io-function": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/validate.io-function/-/validate.io-function-1.0.2.tgz", - "integrity": "sha512-LlFybRJEriSuBnUhQyG5bwglhh50EpTL2ul23MPIuR1odjO7XaMLFV8vHGwp7AZciFxtYOeiSCT5st+XSPONiQ==" - }, - "node_modules/validate.io-integer": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/validate.io-integer/-/validate.io-integer-1.0.5.tgz", - "integrity": "sha512-22izsYSLojN/P6bppBqhgUDjCkr5RY2jd+N2a3DCAUey8ydvrZ/OkGvFPR7qfOpwR2LC5p4Ngzxz36g5Vgr/hQ==", - "dependencies": { - "validate.io-number": "^1.0.3" - } - }, - "node_modules/validate.io-integer-array": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/validate.io-integer-array/-/validate.io-integer-array-1.0.0.tgz", - "integrity": "sha512-mTrMk/1ytQHtCY0oNO3dztafHYyGU88KL+jRxWuzfOmQb+4qqnWmI+gykvGp8usKZOM0H7keJHEbRaFiYA0VrA==", - "dependencies": { - "validate.io-array": "^1.0.3", - "validate.io-integer": "^1.0.4" - } - }, - "node_modules/validate.io-number": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/validate.io-number/-/validate.io-number-1.0.3.tgz", - "integrity": "sha512-kRAyotcbNaSYoDnXvb4MHg/0a1egJdLwS6oJ38TJY7aw9n93Fl/3blIXdyYvPOp55CNxywooG/3BcrwNrBpcSg==" - }, - "node_modules/vite": { - "version": "5.1.6", - "resolved": "https://registry.npmjs.org/vite/-/vite-5.1.6.tgz", - "integrity": "sha512-yYIAZs9nVfRJ/AiOLCA91zzhjsHUgMjB+EigzFb6W2XTLO8JixBCKCjvhKZaye+NKYHCrkv3Oh50dH9EdLU2RA==", - "dev": true, - "dependencies": { - "esbuild": "^0.19.3", - "postcss": "^8.4.35", - "rollup": "^4.2.0" - }, - "bin": { - "vite": "bin/vite.js" - }, - "engines": { - "node": "^18.0.0 || >=20.0.0" - }, - "funding": { - "url": "https://github.com/vitejs/vite?sponsor=1" - }, - "optionalDependencies": { - "fsevents": "~2.3.3" - }, - "peerDependencies": { - "@types/node": "^18.0.0 || >=20.0.0", - "less": "*", - "lightningcss": "^1.21.0", - "sass": "*", - "stylus": "*", - "sugarss": "*", - "terser": "^5.4.0" - }, - "peerDependenciesMeta": { - "@types/node": { - "optional": true - }, - "less": { - "optional": true - }, - "lightningcss": { - "optional": true - }, - "sass": { - "optional": true - }, - "stylus": { - "optional": true - }, - "sugarss": { - "optional": true - }, - "terser": { - "optional": true - } - } - }, - "node_modules/vite-plugin-eslint": { - "version": "1.8.1", - "resolved": "https://registry.npmjs.org/vite-plugin-eslint/-/vite-plugin-eslint-1.8.1.tgz", - "integrity": "sha512-PqdMf3Y2fLO9FsNPmMX+//2BF5SF8nEWspZdgl4kSt7UvHDRHVVfHvxsD7ULYzZrJDGRxR81Nq7TOFgwMnUang==", - "dev": true, - "dependencies": { - "@rollup/pluginutils": "^4.2.1", - "@types/eslint": "^8.4.5", - "rollup": "^2.77.2" - }, - "peerDependencies": { - "eslint": ">=7", - "vite": ">=2" - } - }, - "node_modules/vite-plugin-eslint/node_modules/rollup": { - "version": "2.79.1", - "resolved": "https://registry.npmjs.org/rollup/-/rollup-2.79.1.tgz", - "integrity": "sha512-uKxbd0IhMZOhjAiD5oAFp7BqvkA4Dv47qpOCtaNvng4HBwdbWtdOh8f5nZNuk2rp51PMGk3bzfWu5oayNEuYnw==", - "dev": true, - "bin": { - "rollup": "dist/bin/rollup" - }, - "engines": { - "node": ">=10.0.0" - }, - "optionalDependencies": { - "fsevents": "~2.3.2" - } - }, - "node_modules/warning": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/warning/-/warning-4.0.3.tgz", - "integrity": "sha512-rpJyN222KWIvHJ/F53XSZv0Zl/accqHR8et1kpaMTD/fLCRxtV8iX8czMzY7sVZupTI3zcUTg8eycS2kNF9l6w==", - "dependencies": { - "loose-envify": "^1.0.0" - } - }, - "node_modules/watchpack": { - "version": "2.4.0", - "resolved": "https://registry.npmjs.org/watchpack/-/watchpack-2.4.0.tgz", - "integrity": "sha512-Lcvm7MGST/4fup+ifyKi2hjyIAwcdI4HRgtvTpIUxBRhB+RFtUh8XtDOxUfctVCnhVi+QQj49i91OyvzkJl6cg==", - "peer": true, - "dependencies": { - "glob-to-regexp": "^0.4.1", - "graceful-fs": "^4.1.2" - }, - "engines": { - "node": ">=10.13.0" - } - }, - "node_modules/webidl-conversions": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", - "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==", - "dev": true - }, - "node_modules/webpack": { - "version": "5.90.3", - "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.90.3.tgz", - "integrity": "sha512-h6uDYlWCctQRuXBs1oYpVe6sFcWedl0dpcVaTf/YF67J9bKvwJajFulMVSYKHrksMB3I/pIagRzDxwxkebuzKA==", - "peer": true, - "dependencies": { - "@types/eslint-scope": "^3.7.3", - "@types/estree": "^1.0.5", - "@webassemblyjs/ast": "^1.11.5", - "@webassemblyjs/wasm-edit": "^1.11.5", - "@webassemblyjs/wasm-parser": "^1.11.5", - "acorn": "^8.7.1", - "acorn-import-assertions": "^1.9.0", - "browserslist": "^4.21.10", - "chrome-trace-event": "^1.0.2", - "enhanced-resolve": "^5.15.0", - "es-module-lexer": "^1.2.1", - "eslint-scope": "5.1.1", - "events": "^3.2.0", - "glob-to-regexp": "^0.4.1", - "graceful-fs": "^4.2.9", - "json-parse-even-better-errors": "^2.3.1", - "loader-runner": "^4.2.0", - "mime-types": "^2.1.27", - "neo-async": "^2.6.2", - "schema-utils": "^3.2.0", - "tapable": "^2.1.1", - "terser-webpack-plugin": "^5.3.10", - "watchpack": "^2.4.0", - "webpack-sources": "^3.2.3" - }, - "bin": { - "webpack": "bin/webpack.js" - }, - "engines": { - "node": ">=10.13.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/webpack" - }, - "peerDependenciesMeta": { - "webpack-cli": { - "optional": true - } - } - }, - "node_modules/webpack-sources": { - "version": "3.2.3", - "resolved": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-3.2.3.tgz", - "integrity": "sha512-/DyMEOrDgLKKIG0fmvtz+4dUX/3Ghozwgm6iPp8KRhvn+eQf9+Q7GWxVNMk3+uCPWfdXYC4ExGBckIXdFEfH1w==", - "peer": true, - "engines": { - "node": ">=10.13.0" - } - }, - "node_modules/webpack/node_modules/eslint-scope": { - "version": "5.1.1", - "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz", - "integrity": "sha512-2NxwbF/hZ0KpepYN0cNbo+FN6XoK7GaHlQhgx/hIZl6Va0bF45RQOOwhLIy8lQDbuCiadSLCBnH2CFYquit5bw==", - "peer": true, - "dependencies": { - "esrecurse": "^4.3.0", - "estraverse": "^4.1.1" - }, - "engines": { - "node": ">=8.0.0" - } - }, - "node_modules/webpack/node_modules/estraverse": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz", - "integrity": "sha512-39nnKffWz8xN1BU/2c79n9nB9HDzo0niYUqx6xyqUnyoAnQyyWpOTdZEeiCch8BBu515t4wp9ZmgVfVhn9EBpw==", - "peer": true, - "engines": { - "node": ">=4.0" - } - }, - "node_modules/whatwg-fetch": { - "version": "3.6.20", - "resolved": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.20.tgz", - "integrity": "sha512-EqhiFU6daOA8kpjOWTL0olhVOF3i7OrFzSYiGsEMB8GcXS+RrzauAERX65xMeNWVqxA6HXH2m69Z9LaKKdisfg==" - }, - "node_modules/whatwg-url": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", - "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==", - "dev": true, - "dependencies": { - "tr46": "~0.0.3", - "webidl-conversions": "^3.0.0" - } - }, - "node_modules/which": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", - "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", - "dev": true, - "dependencies": { - "isexe": "^2.0.0" - }, - "bin": { - "node-which": "bin/node-which" - }, - "engines": { - "node": ">= 8" - } - }, - "node_modules/which-boxed-primitive": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.0.2.tgz", - "integrity": "sha512-bwZdv0AKLpplFY2KZRX6TvyuN7ojjr7lwkg6ml0roIy9YeuSr7JS372qlNW18UQYzgYK9ziGcerWqZOmEn9VNg==", - "dependencies": { - "is-bigint": "^1.0.1", - "is-boolean-object": "^1.1.0", - "is-number-object": "^1.0.4", - "is-string": "^1.0.5", - "is-symbol": "^1.0.3" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/which-builtin-type": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/which-builtin-type/-/which-builtin-type-1.1.3.tgz", - "integrity": "sha512-YmjsSMDBYsM1CaFiayOVT06+KJeXf0o5M/CAd4o1lTadFAtacTUM49zoYxr/oroopFDfhvN6iEcBxUyc3gvKmw==", - "dev": true, - "dependencies": { - "function.prototype.name": "^1.1.5", - "has-tostringtag": "^1.0.0", - "is-async-function": "^2.0.0", - "is-date-object": "^1.0.5", - "is-finalizationregistry": "^1.0.2", - "is-generator-function": "^1.0.10", - "is-regex": "^1.1.4", - "is-weakref": "^1.0.2", - "isarray": "^2.0.5", - "which-boxed-primitive": "^1.0.2", - "which-collection": "^1.0.1", - "which-typed-array": "^1.1.9" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/which-collection": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/which-collection/-/which-collection-1.0.2.tgz", - "integrity": "sha512-K4jVyjnBdgvc86Y6BkaLZEN933SwYOuBFkdmBu9ZfkcAbdVbpITnDmjvZ/aQjRXQrv5EPkTnD1s39GiiqbngCw==", - "dev": true, - "dependencies": { - "is-map": "^2.0.3", - "is-set": "^2.0.3", - "is-weakmap": "^2.0.2", - "is-weakset": "^2.0.3" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/which-typed-array": { - "version": "1.1.15", - "resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.15.tgz", - "integrity": "sha512-oV0jmFtUky6CXfkqehVvBP/LSWJ2sy4vWMioiENyJLePrBO/yKyV9OyJySfAKosh+RYkIl5zJCNZ8/4JncrpdA==", - "dependencies": { - "available-typed-arrays": "^1.0.7", - "call-bind": "^1.0.7", - "for-each": "^0.3.3", - "gopd": "^1.0.1", - "has-tostringtag": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "node_modules/wordwrap": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz", - "integrity": "sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==", - "dev": true - }, - "node_modules/wrappy": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", - "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==", - "dev": true - }, - "node_modules/write-file-atomic": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-4.0.2.tgz", - "integrity": "sha512-7KxauUdBmSdWnmpaGFg+ppNjKF8uNLry8LyzjauQDOVONfFLNKrKvQOxZ/VuTIcS/gge/YNahf5RIIQWTSarlg==", - "dev": true, - "dependencies": { - "imurmurhash": "^0.1.4", - "signal-exit": "^3.0.7" - }, - "engines": { - "node": "^12.13.0 || ^14.15.0 || >=16.0.0" - } - }, - "node_modules/xtend": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz", - "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==", - "engines": { - "node": ">=0.4" - } - }, - "node_modules/yallist": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz", - "integrity": "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==" - }, - "node_modules/yaml": { - "version": "1.10.2", - "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", - "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==", - "engines": { - "node": ">= 6" - } - }, - "node_modules/yargs-parser": { - "version": "20.2.9", - "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.9.tgz", - "integrity": "sha512-y11nGElTIV+CT3Zv9t7VKl+Q3hTQoT9a1Qzezhhl6Rp21gJ/IVTW7Z3y9EWXhuUBC2Shnf+DX0antecpAwSP8w==", - "dev": true, - "engines": { - "node": ">=10" - } - }, - "node_modules/yocto-queue": { - "version": "0.1.0", - "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz", - "integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==", - "dev": true, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - } - } -} diff --git a/package.json b/package.json index b74d149fe82e..5476801e962e 100644 --- a/package.json +++ b/package.json @@ -1,130 +1,156 @@ { "name": "cipp", - "version": "6.3.0", - "description": "The CyberDrain Improved Partner Portal is a portal to help manage administration for Microsoft Partners.", + "version": "10.8.3", + "author": "CIPP Contributors", "homepage": "https://cipp.app/", "bugs": { - "url": "https://github.com/KelvinTegelaar/CIPP/issues" + "url": "https://github.com/CyberDrain/CIPP/issues" + }, + "license": "AGPL-3.0", + "engines": { + "node": "^22.22.0" }, "repository": { "type": "git", - "url": "git@github.com:KelvinTegelaar/CIPP.git" + "url": "git@github.com:CyberDrain/CIPP.git" }, - "type": "module", - "license": "AGPL-3.0", - "author": "CIPP Contributors", "scripts": { - "prebuild": "node Generate-Import-Map.js", - "build": "echo react-scripts build && vite build", - "changelog": "auto-changelog --starting-version 3.0.0 --commit-limit false --hide-credit", - "lint": "eslint \"src/**/*.js\"", - "start": "vite", - "start-swa": "swa start --swa-config-location .vscode http://127.0.0.1:3000 --api-location http://127.0.0.1:7071", - "prepare": "husky install", - "preview": "vite preview" - }, - "config": { - "coreui_library_short_version": "4.1" + "dev": "next -H 127.0.0.1", + "build": "node scripts/skip-export-build-traces.mjs && next build --webpack && rm -rf package.json yarn.lock", + "start": "next start", + "export": "next export", + "lint": "npx eslint .", + "lint-fix": "npx eslint . --fix", + "prettier": "prettier --write '**/*.{js,jsx,json}'", + "start-swa": "swa start --swa-config-location .vscode http://127.0.0.1:3000 --api-location http://127.0.0.1:7071 --verbose=silly", + "storybook": "storybook dev -p 6006 --no-open", + "storybook-build": "npx storybook build -o build-storybook", + "storybook-serve": "npx http-server build-storybook -p 6006", + "test": "vitest run", + "test:watch": "vitest", + "test:unit": "vitest run --project unit", + "test:browser": "vitest run --project storybook --browser.headless=false", + "test:coverage": "vitest run --coverage --testTimeout=30000", + "test:storybook": "vitest run --project storybook" }, "dependencies": { - "@coreui/chartjs": "^3.0.0", - "@coreui/coreui": "^4.3.0", - "@coreui/react": "^4.11.0", - "@coreui/react-chartjs": "^2.1.3", - "@coreui/utils": "^1.3.1", - "@fortawesome/fontawesome-svg-core": "^6.5.1", - "@fortawesome/free-brands-svg-icons": "^6.5.1", - "@fortawesome/free-regular-svg-icons": "^6.5.1", - "@fortawesome/free-solid-svg-icons": "^6.5.1", - "@fortawesome/react-fontawesome": "^0.2.0", - "@monaco-editor/react": "^4.5.2", - "@popperjs/core": "^2.10.2", - "@reduxjs/toolkit": "^1.9.7", - "@rjsf/bootstrap-4": "^5.12.1", - "@rjsf/core": "^5.12.1", - "@rjsf/utils": "^5.12.1", - "@rjsf/validator-ajv8": "^5.12.1", - "@uiw/react-json-view": "^2.0.0-alpha.23", - "axios": "^1.6.2", - "buffer": "^6.0.3", - "chart.js": "^3.5.1", - "classnames": "^2.3.1", - "core-js": "^3.18.3", - "dompurify": "^3.1.6", - "eml-parse-js": "^1.1.14", - "enzyme": "^3.11.0", - "final-form": "^4.20.4", - "final-form-arrays": "^3.1.0", - "fuse.js": "^7.0.0", - "fuzzysort": "^1.1.4", - "javascript-time-ago": "^2.5.9", - "jspdf": "^2.4.0", - "jspdf-autotable": "^3.5.23", - "lodash-es": "^4.17.21", - "moment": "^2.29.1", - "prop-types": "^15.7.2", - "react": "^18.2.0", - "react-app-polyfill": "^2.0.0", - "react-bootstrap": "^1.6.5", - "react-circular-progressbar": "^2.1.0", - "react-copy-to-clipboard": "^5.1.0", - "react-data-table-component": "^7.4.5", - "react-datepicker": "^4.10.0", - "react-dom": "^18.2.0", - "react-dropzone": "^14.2.3", - "react-final-form": "^6.5.9", - "react-final-form-arrays": "^3.1.4", - "react-final-form-listeners": "^1.0.3", - "react-helmet-async": "^1.3.0", - "react-hotkeys-hook": "^3.4.4", + "@emotion/cache": "11.14.0", + "@emotion/react": "11.14.0", + "@emotion/server": "11.11.0", + "@emotion/styled": "11.14.1", + "@heroicons/react": "2.2.0", + "@monaco-editor/react": "^4.6.0", + "@mui/icons-material": "7.3.10", + "@mui/lab": "7.0.0-beta.17", + "@mui/material": "7.3.10", + "@mui/system": "7.3.10", + "@mui/x-date-pickers": "^9.10.1", + "@musement/iso-duration": "^1.0.0", + "@nivo/core": "^0.99.0", + "@nivo/sankey": "^0.99.0", + "@react-pdf/renderer": "^4.5.1", + "@reduxjs/toolkit": "^2.12.0", + "@tanstack/query-sync-storage-persister": "^5.90.25", + "@tanstack/react-query": "^5.101.2", + "@tanstack/react-query-devtools": "^5.101.2", + "@tanstack/react-query-persist-client": "^5.101.2", + "@tanstack/react-table": "^8.19.2", + "@tiptap/core": "^3.29.2", + "@tiptap/extension-heading": "^3.27.3", + "@tiptap/extension-table": "^3.20.5", + "@tiptap/pm": "^3.29.2", + "@tiptap/react": "^3.20.5", + "@tiptap/starter-kit": "^3.20.5", + "@vvo/tzdb": "^6.198.0", + "apexcharts": "6.6.1", + "axios": "1.18.1", + "date-fns": "4.4.0", + "diff": "^9.0.0", + "dompurify": "^3.4.12", + "driver.js": "^1.4.0", + "eml-parse-js": "^1.2.0-beta.0", + "export-to-csv": "^1.3.0", + "formik": "2.4.9", + "gray-matter": "4.0.3", + "javascript-time-ago": "^2.6.2", + "jspdf": "^4.2.0", + "jspdf-autotable": "^5.0.8", + "leaflet": "^1.9.4", + "leaflet.markercluster": "^1.5.3", + "lodash": "^4.18.1", + "lodash.isequal": "4.5.0", + "material-react-table": "^3.0.1", + "monaco-editor": "^0.55.1", + "mui-tiptap": "^1.31.0", + "next": "^16.2.11", + "nprogress": "0.2.0", + "numeral": "2.0.6", + "prop-types": "15.8.1", + "punycode": "^2.3.1", + "react": "19.2.8", + "react-apexcharts": "2.1.1", + "react-beautiful-dnd": "13.1.1", + "react-dom": "19.2.8", + "react-dropzone": "15.0.0", + "react-error-boundary": "^6.1.2", + "react-hook-form": "^7.76.1", + "react-hot-toast": "2.6.0", "react-html-parser": "^2.0.2", - "react-loading-skeleton": "^3.1.0", - "react-masonry-component": "^6.3.0", - "react-media-hook": "^0.4.9", - "react-papaparse": "^3.18.2", - "react-redux": "^7.2.5", - "react-router-dom": "^6.1.1", - "react-select": "^5.3.0", - "react-select-search": "^3.0.8", - "react-syntax-highlighter": "^15.4.5", - "react-time-ago": "^7.2.1", - "redux": "4.1.1", + "react-leaflet": "5.0.0", + "react-leaflet-markercluster": "^5.0.0-rc.0", + "react-markdown": "10.1.0", + "react-media-hook": "^0.5.0", + "react-papaparse": "^4.4.0", + "react-quill": "^2.0.0", + "react-redux": "9.3.0", + "react-syntax-highlighter": "^16.1.0", + "react-time-ago": "^7.3.3", + "react-virtuoso": "^4.18.7", + "recharts": "^3.8.1", + "redux": "5.0.1", "redux-persist": "^6.0.0", - "simplebar-react": "^2.3.6", - "source-map-loader": "^3.0.0", - "styled-components": "^5.3.11" + "rehype-raw": "^7.0.0", + "remark-gfm": "^4.0.0", + "remark-parse": "^11.0.0", + "simplebar": "6.3.3", + "simplebar-react": "3.3.2", + "stylis-plugin-rtl": "2.1.1", + "swagger-ui-dist": "5.32.12", + "unified": "^11.0.5", + "yup": "1.7.1" }, "devDependencies": { - "@types/react": "^18.2.39", - "@types/react-helmet": "^6.1.5", - "@vitejs/plugin-react": "^4.2.1", - "auto-changelog": "~2.3.0", - "browserslist-to-esbuild": "^1.2.0", - "eslint": "^8.54.0", - "eslint-config-prettier": "^8.3.0", - "eslint-import-resolver-custom-alias": "^1.3.2", - "eslint-plugin-import": "^2.29.0", - "eslint-plugin-prettier": "^4.0.0", - "eslint-plugin-react": "^7.33.2", - "eslint-plugin-react-hooks": "^4.6.0", - "eslint-plugin-react-refresh": "^0.4.4", - "husky": "^7.0.4", - "postcss-scss": "^4.0.3", - "prettier": "2.4.1", - "redux-immutable-state-invariant": "^2.1.0", - "sass": "^1.64.2", - "stylelint": "^14.3.0", - "stylelint-config-sass-guidelines": "^9.0.1", - "stylelint-order": "^5.0.0", - "vite": "^5.0.6", - "vite-plugin-eslint": "^1.8.1" + "@storybook/addon-a11y": "10.3.5", + "@storybook/addon-docs": "10.3.5", + "@storybook/addon-themes": "10.3.5", + "@storybook/addon-vitest": "10.3.5", + "@storybook/react-vite": "10.3.5", + "@svgr/webpack": "8.1.0", + "@testing-library/dom": "10.4.1", + "@testing-library/jest-dom": "6.9.1", + "@testing-library/react": "16.3.2", + "@testing-library/user-event": "14.6.1", + "@vitest/browser-playwright": "4.1.10", + "@vitest/coverage-v8": "4.1.10", + "eslint": "^9.39.4", + "eslint-config-next": "^16.2.10", + "eslint-config-prettier": "^10.1.8", + "jsdom": "29.0.1", + "msw": "2.12.14", + "msw-storybook-addon": "3.0.0", + "playwright": "1.59.1", + "prettier": "^3.9.6", + "storybook": "10.3.5", + "typescript": "5.9.3", + "vite": "7.3.6", + "vitest": "4.1.10" }, - "engines": { - "node": "18", - "npm": ">=8.3.0" + "msw": { + "workerDirectory": [ + "public" + ] }, - "overrides": { - "react": "^18.2.0", - "react-dom": "^18.2.0" + "resolutions": { + "vite": "7.3.6" } } diff --git a/public/GDAPRoles.json b/public/GDAPRoles.json deleted file mode 100644 index bf14e31159e5..000000000000 --- a/public/GDAPRoles.json +++ /dev/null @@ -1,722 +0,0 @@ -[ - { - "ExtensionData": {}, - "Description": "Can create and manage all aspects of app registrations and enterprise apps.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Application Administrator", - "ObjectId": "9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3" - }, - { - "ExtensionData": {}, - "Description": "Can create application registrations independent of the \u0027Users can register applications\u0027 setting.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Application Developer", - "ObjectId": "cf1c38e5-3621-4004-a7cb-879624dced7c" - }, - { - "ExtensionData": {}, - "Description": "Can create attack payloads that an administrator can initiate later.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Attack Payload Author", - "ObjectId": "9c6df0f2-1e7c-4dc3-b195-66dfbd24aa8f" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage all aspects of attack simulation campaigns.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Attack Simulation Administrator", - "ObjectId": "c430b396-e693-46cc-96f3-db01bf8bb62a" - }, - { - "ExtensionData": {}, - "Description": "Assign custom security attribute keys and values to supported Azure AD objects.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Attribute Assignment Administrator", - "ObjectId": "58a13ea3-c632-46ae-9ee0-9c0d43cd7f3d" - }, - { - "ExtensionData": {}, - "Description": "Read custom security attribute keys and values for supported Azure AD objects.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Attribute Assignment Reader", - "ObjectId": "ffd52fa5-98dc-465c-991d-fc073eb59f8f" - }, - { - "ExtensionData": {}, - "Description": "Define and manage the definition of custom security attributes.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Attribute Definition Administrator", - "ObjectId": "8424c6f0-a189-499e-bbd0-26c1753c96d4" - }, - { - "ExtensionData": {}, - "Description": "Read the definition of custom security attributes.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Attribute Definition Reader", - "ObjectId": "1d336d2c-4ae8-42ef-9711-b3604ce3fc2c" - }, - { - "ExtensionData": {}, - "Description": "Allowed to view, set and reset authentication method information for any non-admin user.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Authentication Administrator", - "ObjectId": "c4e39bd9-1100-46d3-8c65-fb160da0071f" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage the authentication methods policy, tenant-wide MFA settings, password protection policy, and verifiable credentials.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Authentication Policy Administrator", - "ObjectId": "0526716b-113d-4c15-b2c8-68e3c22b9f80" - }, - { - "ExtensionData": {}, - "Description": "Users assigned to this role are added to the local administrators group on Azure AD-joined devices.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Azure AD Joined Device Local Administrator", - "ObjectId": "9f06204d-73c1-4d4c-880a-6edb90606fd8" - }, - { - "ExtensionData": {}, - "Description": "Can manage Azure DevOps organization policy and settings.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Azure DevOps Administrator", - "ObjectId": "e3973bdf-4987-49ae-837a-ba8e231c7286" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the Azure Information Protection product.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Azure Information Protection Administrator", - "ObjectId": "7495fdc4-34c4-4d15-a289-98788ce399fd" - }, - { - "ExtensionData": {}, - "Description": "Can manage secrets for federation and encryption in the Identity Experience Framework (IEF).", - "IsEnabled": true, - "IsSystem": true, - "Name": "B2C IEF Keyset Administrator", - "ObjectId": "aaf43236-0c0d-4d5f-883a-6955382ac081" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage trust framework policies in the Identity Experience Framework (IEF).", - "IsEnabled": true, - "IsSystem": true, - "Name": "B2C IEF Policy Administrator", - "ObjectId": "3edaf663-341e-4475-9f94-5c398ef6c070" - }, - { - "ExtensionData": {}, - "Description": "Can perform common billing related tasks like updating payment information.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Billing Administrator", - "ObjectId": "b0f54661-2d74-4c50-afa3-1ec803f12efe" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the Cloud App Security product.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Cloud App Security Administrator", - "ObjectId": "892c5842-a9a6-463a-8041-72aa08ca3cf6" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage all aspects of app registrations and enterprise apps except App Proxy.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Cloud Application Administrator", - "ObjectId": "158c047a-c907-4556-b7ef-446551a6b5f7" - }, - { - "ExtensionData": {}, - "Description": "Full access to manage devices in Azure AD.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Cloud Device Administrator", - "ObjectId": "7698a772-787b-4ac8-901f-60d6b08affd2" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of Azure AD and Microsoft services that use Azure AD identities. This role was formerly known as Global Administrator.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Company Administrator", - "ObjectId": "62e90394-69f5-4237-9190-012177145e10" - }, - { - "ExtensionData": {}, - "Description": "Can read and manage compliance configuration and reports in Azure AD and Microsoft 365.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Compliance Administrator", - "ObjectId": "17315797-102d-40b4-93e0-432062caca18" - }, - { - "ExtensionData": {}, - "Description": "Creates and manages compliance content.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Compliance Data Administrator", - "ObjectId": "e6d1a23a-da11-4be4-9570-befc86d067a7" - }, - { - "ExtensionData": {}, - "Description": "Can manage Conditional Access capabilities.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Conditional Access Administrator", - "ObjectId": "b1be1c3e-b65d-4f19-8427-f6fa0d97feb9" - }, - { - "ExtensionData": {}, - "Description": "Can approve Microsoft support requests to access customer organizational data.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Customer LockBox Access Approver", - "ObjectId": "5c4f9dcd-47dc-4cf7-8c9a-9e4207cbfc91" - }, - { - "ExtensionData": {}, - "Description": "Can access and manage Desktop management tools and services.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Desktop Analytics Administrator", - "ObjectId": "38a96431-2bdf-4b4c-8b6e-5d3d8abac1a4" - }, - { - "ExtensionData": {}, - "Description": "Device Join", - "IsEnabled": true, - "IsSystem": true, - "Name": "Device Join", - "ObjectId": "9c094953-4995-41c8-84c8-3ebb9b32c93f" - }, - { - "ExtensionData": {}, - "Description": "Device Users", - "IsEnabled": true, - "IsSystem": true, - "Name": "Device Users", - "ObjectId": "d405c6df-0af8-4e3b-95e4-4d06e542189e" - }, - { - "ExtensionData": {}, - "Description": "Can read basic directory information. Commonly used to grant directory read access to applications and guests.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Directory Readers", - "ObjectId": "88d8e3e3-8f55-4a1e-953a-9b9898b8876b" - }, - { - "ExtensionData": {}, - "Description": "Only used by Azure AD Connect service.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Directory Synchronization Accounts", - "ObjectId": "d29b2b05-8046-44ba-8758-1e26182fcf32" - }, - { - "ExtensionData": {}, - "Description": "Can read and write basic directory information. For granting access to applications, not intended for users.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Directory Writers", - "ObjectId": "9360feb5-f418-4baa-8175-e2a00bac4301" - }, - { - "ExtensionData": {}, - "Description": "Can manage domain names in cloud and on-premises.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Domain Name Administrator", - "ObjectId": "8329153b-31d0-4727-b945-745eb3bc5f31" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the Dynamics 365 product.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Dynamics 365 Administrator", - "ObjectId": "44367163-eba1-44c3-98af-f5787879f96a" - }, - { - "ExtensionData": {}, - "Description": "Manage all aspects of Microsoft Edge.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Edge Administrator", - "ObjectId": "3f1acade-1e04-4fbc-9b69-f0302cd84aef" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the Exchange product.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Exchange Administrator", - "ObjectId": "29232cdf-9323-42fd-ade2-1d097af3e4de" - }, - { - "ExtensionData": {}, - "Description": "Can create or update Exchange Online recipients within the Exchange Online organization.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Exchange Recipient Administrator", - "ObjectId": "31392ffb-586c-42d1-9346-e59415a2cc4e" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage all aspects of user flows.", - "IsEnabled": true, - "IsSystem": true, - "Name": "External ID User Flow Administrator", - "ObjectId": "6e591065-9bad-43ed-90f3-e9424366d2f0" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage the attribute schema available to all user flows.", - "IsEnabled": true, - "IsSystem": true, - "Name": "External ID User Flow Attribute Administrator", - "ObjectId": "0f971eea-41eb-4569-a71e-57bb8a3eff1e" - }, - { - "ExtensionData": {}, - "Description": "Can configure identity providers for use in direct federation.", - "IsEnabled": true, - "IsSystem": true, - "Name": "External Identity Provider Administrator", - "ObjectId": "be2f45a1-457d-42af-a067-6ec1fa63bc45" - }, - { - "ExtensionData": {}, - "Description": "Can read everything that a Global Administrator can, but not update anything.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Global Reader", - "ObjectId": "f2ef992c-3afb-46b9-b7cf-a126ee74c451" - }, - { - "ExtensionData": {}, - "Description": "Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Groups Administrator", - "ObjectId": "fdd7a751-b60b-444a-984c-02652fe8fa1c" - }, - { - "ExtensionData": {}, - "Description": "Can invite guest users independent of the \u0027members can invite guests\u0027 setting.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Guest Inviter", - "ObjectId": "95e79109-95c0-4d8e-aee3-d01accf2d47b" - }, - { - "ExtensionData": {}, - "Description": "Can reset passwords for non-administrators and Helpdesk Administrators.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Helpdesk Administrator", - "ObjectId": "729827e3-9c14-49f7-bb1b-9608f156bbb8" - }, - { - "ExtensionData": {}, - "Description": "Can manage AD to Azure AD cloud provisioning, Azure AD Connect, and federation settings.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Hybrid Identity Administrator", - "ObjectId": "8ac3fc64-6eca-42ea-9e69-59f4c7b60eb2" - }, - { - "ExtensionData": {}, - "Description": "Manage access using Azure AD for identity governance scenarios.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Identity Governance Administrator", - "ObjectId": "45d8d3c5-c802-45c6-b32a-1d70b5e1e86e" - }, - { - "ExtensionData": {}, - "Description": "Has administrative access in the Microsoft 365 Insights app.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Insights Administrator", - "ObjectId": "eb1f4a8d-243a-41f0-9fbd-c7cdf6c5ef7c" - }, - { - "ExtensionData": {}, - "Description": "Access the analytical capabilities in Microsoft Viva Insights and run custom queries.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Insights Analyst", - "ObjectId": "25df335f-86eb-4119-b717-0ff02de207e9" - }, - { - "ExtensionData": {}, - "Description": "Can view and share dashboards and insights via the M365 Insights app.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Insights Business Leader", - "ObjectId": "31e939ad-9672-4796-9c2e-873181342d2d" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the Intune product.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Intune Administrator", - "ObjectId": "3a2c62db-5318-420d-8d74-23affee5d9d5" - }, - { - "ExtensionData": {}, - "Description": "Can manage settings for Microsoft Kaizala.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Kaizala Administrator", - "ObjectId": "74ef975b-6605-40af-a5d2-b9539d836353" - }, - { - "ExtensionData": {}, - "Description": "Can configure knowledge, learning, and other intelligent features.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Knowledge Administrator", - "ObjectId": "b5a8dcf3-09d5-43a9-a639-8e29ef291470" - }, - { - "ExtensionData": {}, - "Description": "Has access to topic management dashboard and can manage content.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Knowledge Manager", - "ObjectId": "744ec460-397e-42ad-a462-8b3f9747a02c" - }, - { - "ExtensionData": {}, - "Description": "Can manage product licenses on users and groups.", - "IsEnabled": true, - "IsSystem": true, - "Name": "License Administrator", - "ObjectId": "4d6ac14f-3453-41d0-bef9-a3e0c569773a" - }, - { - "ExtensionData": {}, - "Description": "Create and manage all aspects of workflows and tasks associated with Lifecycle Workflows in Azure AD.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Lifecycle Workflows Administrator", - "ObjectId": "59d46f88-662b-457b-bceb-5c3809e5908f" - }, - { - "ExtensionData": {}, - "Description": "Can read security messages and updates in Office 365 Message Center only.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Message Center Privacy Reader", - "ObjectId": "ac16e43d-7b2d-40e0-ac05-243ff356ab5b" - }, - { - "ExtensionData": {}, - "Description": "Can read messages and updates for their organization in Office 365 Message Center only.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Message Center Reader", - "ObjectId": "790c1fb9-7f7d-4f88-86a1-ef1f95c05c1b" - }, - { - "ExtensionData": {}, - "Description": "Can manage network locations and review enterprise network design insights for Microsoft 365 Software as a Service applications.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Network Administrator", - "ObjectId": "d37c8bed-0711-4417-ba38-b4abe66ce4c2" - }, - { - "ExtensionData": {}, - "Description": "Can manage Office apps cloud services, including policy and settings management, and manage the ability to select, unselect and publish \u0027what\u0027s new\u0027 feature content to end-user\u0027s devices.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Office Apps Administrator", - "ObjectId": "2b745bdf-0803-4d80-aa65-822c4493daac" - }, - { - "ExtensionData": {}, - "Description": "Do not use - not intended for general use.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Partner Tier1 Support", - "ObjectId": "4ba39ca4-527c-499a-b93d-d9b492c50246" - }, - { - "ExtensionData": {}, - "Description": "Do not use - not intended for general use.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Partner Tier2 Support", - "ObjectId": "e00e864a-17c5-4a4b-9c06-f5b95a8d5bd8" - }, - { - "ExtensionData": {}, - "Description": "Can reset passwords for non-administrators and Password Administrators.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Password Administrator", - "ObjectId": "966707d0-3269-4727-9be2-8c3a10f19b9d" - }, - { - "ExtensionData": {}, - "Description": "Manage all aspects of Entra Permissions Management.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Permissions Management Administrator", - "ObjectId": "af78dc32-cf4d-46f9-ba4e-4428526346b5" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the Power BI product.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Power BI Administrator", - "ObjectId": "a9ea8996-122f-4c74-9520-8edcd192826c" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage all aspects of Microsoft Dynamics 365, PowerApps and Microsoft Flow.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Power Platform Administrator", - "ObjectId": "11648597-926c-4cf3-9c36-bcebb0ba8dcc" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of printers and printer connectors.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Printer Administrator", - "ObjectId": "644ef478-e28f-4e28-b9dc-3fdde9aa0b1f" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of printers and printer connectors.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Printer Technician", - "ObjectId": "e8cef6f1-e4bd-4ea8-bc07-4b8d950f4477" - }, - { - "ExtensionData": {}, - "Description": "Allowed to view, set and reset authentication method information for any user (admin or non-admin).", - "IsEnabled": true, - "IsSystem": true, - "Name": "Privileged Authentication Administrator", - "ObjectId": "7be44c8a-adaf-4e2a-84d6-ab2649e08a13" - }, - { - "ExtensionData": {}, - "Description": "Can manage role assignments in Azure AD, and all aspects of Privileged Identity Management.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Privileged Role Administrator", - "ObjectId": "e8611ab8-c189-46e8-94e1-60213ab1f814" - }, - { - "ExtensionData": {}, - "Description": "Can read sign-in and audit reports.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Reports Reader", - "ObjectId": "4a5d8f65-41da-4de4-8968-e035b65339cf" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage all aspects of Microsoft Search settings.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Search Administrator", - "ObjectId": "0964bb5e-9bdb-4d7b-ac29-58e794862a40" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage the editorial content such as bookmarks, Q and As, locations, floorplan.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Search Editor", - "ObjectId": "8835291a-918c-4fd7-a9ce-faa49f0cf7d9" - }, - { - "ExtensionData": {}, - "Description": "Security Administrator allows ability to read and manage security configuration and reports.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Security Administrator", - "ObjectId": "194ae4cb-b126-40b2-bd5b-6091b380977d" - }, - { - "ExtensionData": {}, - "Description": "Creates and manages security events.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Security Operator", - "ObjectId": "5f2222b1-57c3-48ba-8ad5-d4759f1fde6f" - }, - { - "ExtensionData": {}, - "Description": "Can read security information and reports in Azure AD and Office 365.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Security Reader", - "ObjectId": "5d6b6bb7-de71-4623-b4af-96380a352509" - }, - { - "ExtensionData": {}, - "Description": "Can read service health information and manage support tickets.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Service Support Administrator", - "ObjectId": "f023fd81-a637-4b56-95fd-791ac0226033" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the SharePoint service.", - "IsEnabled": true, - "IsSystem": true, - "Name": "SharePoint Administrator", - "ObjectId": "f28a1f50-f6e7-4571-818b-6a12f2af6b6c" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of the Skype for Business product.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Skype for Business Administrator", - "ObjectId": "75941009-915a-4869-abe7-691bff18279e" - }, - { - "ExtensionData": {}, - "Description": "Can manage the Microsoft Teams service.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Teams Administrator", - "ObjectId": "69091246-20e8-4a56-aa4d-066075b2a7a8" - }, - { - "ExtensionData": {}, - "Description": "Can manage calling and meetings features within the Microsoft Teams service.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Teams Communications Administrator", - "ObjectId": "baf37b3a-610e-45da-9e62-d9d1e5e8914b" - }, - { - "ExtensionData": {}, - "Description": "Can troubleshoot communications issues within Teams using advanced tools.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Teams Communications Support Engineer", - "ObjectId": "f70938a0-fc10-4177-9e90-2178f8765737" - }, - { - "ExtensionData": {}, - "Description": "Can troubleshoot communications issues within Teams using basic tools.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Teams Communications Support Specialist", - "ObjectId": "fcf91098-03e3-41a9-b5ba-6f0ec8188a12" - }, - { - "ExtensionData": {}, - "Description": "Can perform management related tasks on Teams certified devices.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Teams Devices Administrator", - "ObjectId": "3d762c5a-1b6c-493f-843e-55a3b42923d4" - }, - { - "ExtensionData": {}, - "Description": "Can see only tenant level aggregates in Microsoft 365 Usage Analytics and Productivity Score.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Usage Summary Reports Reader", - "ObjectId": "75934031-6c7e-415a-99d7-48dbd49e875e" - }, - { - "ExtensionData": {}, - "Description": "Can manage all aspects of users and groups, including resetting passwords for limited admins.", - "IsEnabled": true, - "IsSystem": true, - "Name": "User Administrator", - "ObjectId": "fe930be7-5e62-47db-91af-98c3a49a38b1" - }, - { - "ExtensionData": {}, - "Description": "Manage and share Virtual Visits information and metrics from admin centers or the Virtual Visits app.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Virtual Visits Administrator", - "ObjectId": "e300d9e7-4a2b-4295-9eff-f1c78b36cc98" - }, - { - "ExtensionData": {}, - "Description": "Manage and configure all aspects of Microsoft Viva Goals.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Viva Goals Administrator", - "ObjectId": "92b086b3-e367-4ef2-b869-1de128fb986e" - }, - { - "ExtensionData": {}, - "Description": "Can manage all settings for Microsoft Viva Pulse app.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Viva Pulse Administrator", - "ObjectId": "87761b17-1ed2-4af3-9acd-92a150038160" - }, - { - "ExtensionData": {}, - "Description": "Can provision and manage all aspects of Cloud PCs.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Windows 365 Administrator", - "ObjectId": "11451d60-acb2-45eb-a7d6-43d0f0125c13" - }, - { - "ExtensionData": {}, - "Description": "Can create and manage all aspects of Windows Update deployments through the Windows Update for Business deployment service.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Windows Update Deployment Administrator", - "ObjectId": "32696413-001a-46ae-978c-ce0f6b3620d2" - }, - { - "ExtensionData": {}, - "Description": "Workplace Device Join", - "IsEnabled": true, - "IsSystem": true, - "Name": "Workplace Device Join", - "ObjectId": "c34f683f-4d5a-4403-affd-6615e00e3a7f" - }, - { - "ExtensionData": {}, - "Description": "Manage all aspects of Yammer.", - "IsEnabled": true, - "IsSystem": true, - "Name": "Yammer Administrator", - "ObjectId": "810a2642-a034-447f-a5e8-41beaa378541" - } -] diff --git a/public/MFAStates.json b/public/MFAStates.json deleted file mode 100644 index fcaf8dc6ceb3..000000000000 --- a/public/MFAStates.json +++ /dev/null @@ -1,14 +0,0 @@ -[ - { - "value": "disabled", - "label": "Disabled" - }, - { - "value": "enabled", - "label": "Enabled" - }, - { - "value": "enforced", - "label": "Enforced" - } -] diff --git a/public/PermissionsList.json b/public/PermissionsList.json deleted file mode 100644 index c91c29126036..000000000000 --- a/public/PermissionsList.json +++ /dev/null @@ -1,7973 +0,0 @@ -[ - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read access reviews, reviewers, decisions and settings in the organization, without a signed-in user.", - "displayName": "Read all access reviews", - "id": "d07a8cc0-3d51-4b77-b3b0-32704d1f69fa", - "isEnabled": true, - "origin": "Application", - "value": "AccessReview.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings in the organization, without a signed-in user.", - "displayName": "Manage all access reviews", - "id": "ef5f7d5c-338f-44b0-86c3-351f46c8bb5f", - "isEnabled": true, - "origin": "Application", - "value": "AccessReview.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings in the organization for group and app memberships, without a signed-in user.", - "displayName": "Manage access reviews for group and app memberships", - "id": "18228521-a591-40f1-b215-5fad4488c117", - "isEnabled": true, - "origin": "Application", - "value": "AccessReview.ReadWrite.Membership" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read all acronyms without a signed-in user.", - "displayName": "Read all acronyms", - "id": "8c0aed2c-0c61-433d-b63c-6370ddc73248", - "isEnabled": true, - "origin": "Application", - "value": "Acronym.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read administrative units and administrative unit membership without a signed-in user.", - "displayName": "Read all administrative units", - "id": "134fd756-38ce-4afd-ba33-e9623dbe66c2", - "isEnabled": true, - "origin": "Application", - "value": "AdministrativeUnit.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership without a signed-in user.", - "displayName": "Read and write all administrative units", - "id": "5eb59dd3-1da2-4329-8733-9dabdc435916", - "isEnabled": true, - "origin": "Application", - "value": "AdministrativeUnit.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read terms of use agreements, without a signed in user.", - "displayName": "Read all terms of use agreements", - "id": "2f3e6f8c-093b-4c57-a58b-ba5ce494a169", - "isEnabled": true, - "origin": "Application", - "value": "Agreement.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write terms of use agreements, without a signed in user.", - "displayName": "Read and write all terms of use agreements", - "id": "c9090d00-6101-42f0-a729-c41074260d47", - "isEnabled": true, - "origin": "Application", - "value": "Agreement.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read terms of use acceptance statuses, without a signed in user.", - "displayName": "Read all terms of use acceptance statuses", - "id": "d8e4ec18-f6c0-4620-8122-c8b1f2bf400e", - "isEnabled": true, - "origin": "Application", - "value": "AgreementAcceptance.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the API connectors used in user authentication flows, without a signed-in user.", - "displayName": "Read API connectors for authentication flows", - "id": "b86848a7-d5b1-41eb-a9b4-54a4e6306e97", - "isEnabled": true, - "origin": "Application", - "value": "APIConnectors.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, create and manage the API connectors used in user authentication flows, without a signed-in user.", - "displayName": "Read and write API connectors for authentication flows", - "id": "1dfe531a-24a6-4f1b-80f4-7a0dc5a0a171", - "isEnabled": true, - "origin": "Application", - "value": "APIConnectors.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read apps in the app catalogs without a signed-in user.", - "displayName": "Read all app catalogs", - "id": "e12dae10-5a57-4817-b79d-dfbec5348930", - "isEnabled": true, - "origin": "Application", - "value": "AppCatalog.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update, and delete apps in the app catalogs without a signed-in user.", - "displayName": "Read and write to all app catalogs", - "id": "dc149144-f292-421e-b185-5953f2e98d7f", - "isEnabled": true, - "origin": "Application", - "value": "AppCatalog.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the remote desktop security configuration for all apps in your organization, without a signed-in user.", - "displayName": "Read and write the remote desktop security configuration for all apps", - "id": "3be0012a-cc4e-426b-895b-f9c836bf6381", - "isEnabled": true, - "origin": "Application", - "value": "Application-RemoteDesktopConfig.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all applications and service principals without a signed-in user.", - "displayName": "Read all applications", - "id": "9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30", - "isEnabled": true, - "origin": "Application", - "value": "Application.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update and delete applications and service principals without a signed-in user. Does not allow management of consent grants.", - "displayName": "Read and write all applications", - "id": "1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9", - "isEnabled": true, - "origin": "Application", - "value": "Application.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create other applications, and fully manage those applications (read, update, update application secrets and delete), without a signed-in user.  It cannot update any apps that it is not an owner of.", - "displayName": "Manage apps that this app creates or owns", - "id": "18a4783c-866b-4cc7-a460-3d5e5662c884", - "isEnabled": true, - "origin": "Application", - "value": "Application.ReadWrite.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, without a signed-in user.", - "displayName": "Manage app permission grants and app role assignments", - "id": "06b708a9-e830-4db3-a914-8e69da51d44f", - "isEnabled": true, - "origin": "Application", - "value": "AppRoleAssignment.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read attack simulation and training data for an organization without a signed-in user.", - "displayName": "Read attack simulation data of an organization", - "id": "93283d0a-6322-4fa8-966b-8c121624760d", - "isEnabled": true, - "origin": "Application", - "value": "AttackSimulation.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, create, and update attack simulation and training data for an organization without a signed-in user.", - "displayName": "Read, create, and update all attack simulation data of an organization", - "id": "e125258e-8c8a-42a8-8f55-ab502afa52f3", - "isEnabled": true, - "origin": "Application", - "value": "AttackSimulation.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and query your audit log activities, without a signed-in user.", - "displayName": "Read all audit log data", - "id": "b0afded3-3588-46d8-8b3d-9842eff778da", - "isEnabled": true, - "origin": "Application", - "value": "AuditLog.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the authentication context information in your organization without a signed-in user.", - "displayName": "Read all authentication context information", - "id": "381f742f-e1f8-4309-b4ab-e3d91ae4c5c1", - "isEnabled": true, - "origin": "Application", - "value": "AuthenticationContext.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and update the authentication context information in your organization without a signed-in user.", - "displayName": "Read and write all authentication context information", - "id": "a88eef72-fed0-4bf7-a2a9-f19df33f8b83", - "isEnabled": true, - "origin": "Application", - "value": "AuthenticationContext.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the billing configuration on all applications without a signed-in user. ", - "displayName": "Read and write application billing configuration", - "id": "9e8be751-7eee-4c09-bcfd-d64f6b087fd8", - "isEnabled": true, - "origin": "Application", - "value": "BillingConfiguration.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read Bookings appointments, businesses, customers, services, and staff without a signed-in user. ", - "displayName": "Read all Bookings related resources.", - "id": "6e98f277-b046-4193-a4f2-6bf6a78cd491", - "isEnabled": true, - "origin": "Application", - "value": "Bookings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read and write Bookings appointments and customers, and additionally allows reading businesses, services, and staff without a signed-in user. ", - "displayName": "Read and write all Bookings related resources.", - "id": "9769393e-5a9f-4302-9e3d-7e018ecb64a7", - "isEnabled": true, - "origin": "Application", - "value": "BookingsAppointment.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read all bookmarks without a signed-in user.", - "displayName": "Read all bookmarks", - "id": "be95e614-8ef3-49eb-8464-1c9503433b86", - "isEnabled": true, - "origin": "Application", - "value": "Bookmark.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read all browser site lists configured for your organization, without a signed-in user.", - "displayName": "Read all browser site lists for your organization", - "id": "c5ee1f21-fc7f-4937-9af0-c91648ff9597", - "isEnabled": true, - "origin": "Application", - "value": "BrowserSiteLists.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read and write all browser site lists configured for your organization, without a signed-in user.", - "displayName": "Read and write all browser site lists for your organization", - "id": "8349ca94-3061-44d5-9bfb-33774ea5e4f9", - "isEnabled": true, - "origin": "Application", - "value": "BrowserSiteLists.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the configurations of business scenarios it owns, without a signed-in user.", - "displayName": "Read all business scenario configurations this app creates or owns", - "id": "acc0fc4d-2cd6-4194-8700-1768d8423d86", - "isEnabled": true, - "origin": "Application", - "value": "BusinessScenarioConfig.Read.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, without a signed-in user.", - "displayName": "Read and write all business scenario configurations this app creates or owns", - "id": "bbea195a-4c47-4a4f-bff2-cba399e11698", - "isEnabled": true, - "origin": "Application", - "value": "BusinessScenarioConfig.ReadWrite.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the data associated with the business scenarios it owns, without a signed-in user.", - "displayName": "Read data for all business scenarios this app creates or owns", - "id": "6c0257fd-cffe-415b-8239-2d0d70fdaa9c", - "isEnabled": true, - "origin": "Application", - "value": "BusinessScenarioData.Read.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to fully manage the data associated with the business scenarios it owns, without a signed-in user.", - "displayName": "Read and write data for all business scenarios this app creates or owns", - "id": "f2d21f22-5d80-499e-91cc-0a8a4ce16f54", - "isEnabled": true, - "origin": "Application", - "value": "BusinessScenarioData.ReadWrite.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read events of all calendars without a signed-in user.", - "displayName": "Read calendars in all mailboxes", - "id": "798ee544-9d2d-430c-a058-570e29e34338", - "isEnabled": true, - "origin": "Application", - "value": "Calendars.Read" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read events of all calendars, except for properties such as body, attachments, and extensions, without a signed-in user.", - "displayName": "Read basic details of calendars in all mailboxes ", - "id": "8ba4a692-bc31-4128-9094-475872af8a53", - "isEnabled": true, - "origin": "Application", - "value": "Calendars.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update, and delete events of all calendars without a signed-in user.", - "displayName": "Read and write calendars in all mailboxes", - "id": "ef54d2bf-783f-4e0f-bca1-3210c0444d99", - "isEnabled": true, - "origin": "Application", - "value": "Calendars.ReadWrite" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read call event information for all users in your organizatio, without a signed-in user.", - "displayName": "Read all call events", - "id": "1abb026f-7572-49f6-9ddd-ad61cbba181e", - "isEnabled": true, - "origin": "Application", - "value": "CallEvents.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all PSTN and direct routing call log data without a signed-in user.", - "displayName": "Read PSTN and direct routing call log data", - "id": "a2611786-80b3-417e-adaa-707d4261a5f0", - "isEnabled": true, - "origin": "Application", - "value": "CallRecord-PstnCalls.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read call records for all calls and online meetings without a signed-in user.", - "displayName": "Read all call records", - "id": "45bbb07e-7321-4fd7-a8f6-3ff27e6a81c8", - "isEnabled": true, - "origin": "Application", - "value": "CallRecords.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to get direct access to media streams in a call, without a signed-in user.", - "displayName": "Access media streams in a call as an app", - "id": "a7a681dc-756e-4909-b988-f160edc6655f", - "isEnabled": true, - "origin": "Application", - "value": "Calls.AccessMedia.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to place outbound calls to a single user and transfer calls to users in your organization’s directory, without a signed-in user.", - "displayName": "Initiate outgoing 1 to 1 calls from the app", - "id": "284383ee-7f6e-4e40-a2a8-e85dcb029101", - "isEnabled": true, - "origin": "Application", - "value": "Calls.Initiate.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to place outbound calls to multiple users and add participants to meetings in your organization, without a signed-in user.", - "displayName": "Initiate outgoing group calls from the app", - "id": "4c277553-8a09-487b-8023-29ee378d8324", - "isEnabled": true, - "origin": "Application", - "value": "Calls.InitiateGroupCall.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to join group calls and scheduled meetings in your organization, without a signed-in user.  The app will be joined with the privileges of a directory user to meetings in your organization.", - "displayName": "Join group calls and meetings as an app", - "id": "f6b49018-60ab-4f81-83bd-22caeabfed2d", - "isEnabled": true, - "origin": "Application", - "value": "Calls.JoinGroupCall.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to anonymously join group calls and scheduled meetings in your organization, without a signed-in user.  The app will be joined as a guest to meetings in your organization.", - "displayName": "Join group calls and meetings as a guest", - "id": "fd7ccf6b-3d28-418b-9701-cd10f5cd2fd4", - "isEnabled": true, - "origin": "Application", - "value": "Calls.JoinGroupCallAsGuest.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Create channels in any team, without a signed-in user.", - "displayName": "Create channels", - "id": "f3a65bd4-b703-46df-8f7e-0174fea562aa", - "isEnabled": true, - "origin": "Application", - "value": "Channel.Create" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Delete channels in any team, without a signed-in user.", - "displayName": "Delete channels", - "id": "6a118a39-1227-45d4-af0c-ea7b40d210bc", - "isEnabled": true, - "origin": "Application", - "value": "Channel.Delete.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read all channel names and channel descriptions, without a signed-in user.", - "displayName": "Read the names and descriptions of all channels", - "id": "59a6b24b-4225-4393-8165-ebaec5f55d7a", - "isEnabled": true, - "origin": "Application", - "value": "Channel.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read the members of all channels, without a signed-in user.", - "displayName": "Read the members of all channels", - "id": "3b55498e-47ec-484f-8136-9013221c06a9", - "isEnabled": true, - "origin": "Application", - "value": "ChannelMember.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Add and remove members from all channels, without a signed-in user. Also allows changing a member's role, for example from owner to non-owner.", - "displayName": "Add and remove members from all channels", - "id": "35930dcf-aceb-4bd1-b99a-8ffed403c974", - "isEnabled": true, - "origin": "Application", - "value": "ChannelMember.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all channel messages in Microsoft Teams", - "displayName": "Read all channel messages", - "id": "7b2449af-6ccd-4f4d-9f78-e550c193f0d1", - "isEnabled": true, - "origin": "Application", - "value": "ChannelMessage.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to update Microsoft Teams channel messages by patching a set of Data Loss Prevention (DLP) policy violation properties to handle the output of DLP processing.", - "displayName": "Flag channel messages for violating policy", - "id": "4d02b0cc-d90b-441f-8d82-4fb55c34d6bb", - "isEnabled": true, - "origin": "Application", - "value": "ChannelMessage.UpdatePolicyViolation.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read all channel names, channel descriptions, and channel settings, without a signed-in user.", - "displayName": "Read the names, descriptions, and settings of all channels", - "id": "c97b873f-f59f-49aa-8a0e-52b32d762124", - "isEnabled": true, - "origin": "Application", - "value": "ChannelSettings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read and write the names, descriptions, and settings of all channels, without a signed-in user.", - "displayName": "Read and write the names, descriptions, and settings of all channels", - "id": "243cded2-bd16-4fd6-a953-ff8177894c3d", - "isEnabled": true, - "origin": "Application", - "value": "ChannelSettings.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create chats without a signed-in user. ", - "displayName": "Create chats", - "id": "d9c48af6-9ad9-47ad-82c3-63757137b9af", - "isEnabled": true, - "origin": "Application", - "value": "Chat.Create" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to delete and recover deleted chats, without a signed-in user.", - "displayName": "Delete and recover deleted chats", - "id": "9c7abde0-eacd-4319-bf9e-35994b1a1717", - "isEnabled": true, - "origin": "Application", - "value": "Chat.ManageDeletion.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all 1-to-1 or group chat messages in Microsoft Teams.", - "displayName": "Read all chat messages", - "id": "6b7d71aa-70aa-4810-a8d9-5d9fb2830017", - "isEnabled": true, - "origin": "Application", - "value": "Chat.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all one-to-one or group chat messages in Microsoft Teams for chats where the associated Teams application is installed, without a signed-in user.", - "displayName": "Read all chat messages for chats where the associated Teams application is installed.", - "id": "1c1b4c8e-3cc7-4c58-8470-9b92c9d5848b", - "isEnabled": true, - "origin": "Application", - "value": "Chat.Read.WhereInstalled" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read names and members of all one-to-one and group chats in Microsoft Teams, without a signed-in user.", - "displayName": "Read names and members of all chat threads", - "id": "b2e060da-3baf-4687-9611-f4ebc0f0cbde", - "isEnabled": true, - "origin": "Application", - "value": "Chat.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read names and members of all one-to-one and group chats in Microsoft Teams where the associated Teams application is installed, without a signed-in user.", - "displayName": "Read names and members of all chat threads where the associated Teams application is installed.", - "id": "818ba5bd-5b3e-4fe0-bbe6-aa4686669073", - "isEnabled": true, - "origin": "Application", - "value": "Chat.ReadBasic.WhereInstalled" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read and write all chat messages in Microsoft Teams, without a signed-in user.", - "displayName": "Read and write all chat messages", - "id": "294ce7c9-31ba-490a-ad7d-97a7d075e4ed", - "isEnabled": true, - "origin": "Application", - "value": "Chat.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all chat messages in Microsoft Teams for chats where the associated Teams application is installed, without a signed-in user.", - "displayName": "Read and write all chat messages for chats where the associated Teams application is installed.", - "id": "ad73ce80-f3cd-40ce-b325-df12c33df713", - "isEnabled": true, - "origin": "Application", - "value": "Chat.ReadWrite.WhereInstalled" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to update Microsoft Teams 1-to-1 or group chat messages by patching a set of Data Loss Prevention (DLP) policy violation properties to handle the output of DLP processing.", - "displayName": "Flag chat messages for violating policy", - "id": "7e847308-e030-4183-9899-5235d7270f58", - "isEnabled": true, - "origin": "Application", - "value": "Chat.UpdatePolicyViolation.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read the members of all chats, without a signed-in user.", - "displayName": "Read the members of all chats", - "id": "a3410be2-8e48-4f32-8454-c29a7465209d", - "isEnabled": true, - "origin": "Application", - "value": "ChatMember.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the members of all chats where the associated Teams application is installed, without a signed-in user.", - "displayName": "Read the members of all chats where the associated Teams application is installed.", - "id": "93e7c9e4-54c5-4a41-b796-f2a5adaacda7", - "isEnabled": true, - "origin": "Application", - "value": "ChatMember.Read.WhereInstalled" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Add and remove members from all chats, without a signed-in user.", - "displayName": "Add and remove members from all chats", - "id": "57257249-34ce-4810-a8a2-a03adf0c5693", - "isEnabled": true, - "origin": "Application", - "value": "ChatMember.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to add and remove members from all chats where the associated Teams application is installed, without a signed-in user.", - "displayName": "Add and remove members from all chats where the associated Teams application is installed.", - "id": "e32c2cd9-0124-4e44-88fc-772cd98afbdb", - "isEnabled": true, - "origin": "Application", - "value": "ChatMember.ReadWrite.WhereInstalled" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all one-to-one and group chats messages in Microsoft Teams, without a signed-in user.", - "displayName": "Read all chat messages", - "id": "b9bb2381-47a4-46cd-aafb-00cb12f68504", - "isEnabled": true, - "origin": "Application", - "value": "ChatMessage.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all details of discovered cloud apps in the organization, without a signed-in user.", - "displayName": "Read all discovered cloud applications data", - "id": "64a59178-dad3-4673-89db-84fdcd622fec", - "isEnabled": true, - "origin": "Application", - "value": "CloudApp-Discovery.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the properties of Cloud PCs, without a signed-in user.", - "displayName": "Read Cloud PCs", - "id": "a9e09520-8ed4-4cde-838e-4fdea192c227", - "isEnabled": true, - "origin": "Application", - "value": "CloudPC.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the properties of Cloud PCs, without a signed-in user.", - "displayName": "Read and write Cloud PCs", - "id": "3b4349e1-8cf5-45a3-95b7-69d1751d3e6a", - "isEnabled": true, - "origin": "Application", - "value": "CloudPC.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read consent requests and approvals without a signed-in user.", - "displayName": "Read all consent requests", - "id": "1260ad83-98fb-4785-abbb-d6cc1806fd41", - "isEnabled": true, - "origin": "Application", - "value": "ConsentRequest.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read app consent requests and approvals, and deny or approve those requests without a signed-in user.", - "displayName": "Read and write all consent requests", - "id": "9f1b81a7-0223-4428-bfa4-0bcb5535f27d", - "isEnabled": true, - "origin": "Application", - "value": "ConsentRequest.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all contacts in all mailboxes without a signed-in user.", - "displayName": "Read contacts in all mailboxes", - "id": "089fe4d0-434a-44c5-8827-41ba8a0b17f5", - "isEnabled": true, - "origin": "Application", - "value": "Contacts.Read" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update, and delete all contacts in all mailboxes without a signed-in user.", - "displayName": "Read and write contacts in all mailboxes", - "id": "6918b873-d17a-4dc1-b314-35f528134491", - "isEnabled": true, - "origin": "Application", - "value": "Contacts.ReadWrite" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem without a signed-in user.", - "displayName": "Read cross-tenant basic information", - "id": "cac88765-0581-4025-9725-5ebc13f729ee", - "isEnabled": true, - "origin": "Application", - "value": "CrossTenantInformation.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.", - "displayName": "Read all shared cross-tenant user profiles and export their data", - "id": "8b919d44-6192-4f3d-8a3b-f86f8069ae3c", - "isEnabled": true, - "origin": "Application", - "value": "CrossTenantUserProfileSharing.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.", - "displayName": "Read all shared cross-tenant user profiles and export or delete their data", - "id": "306785c5-c09b-4ba0-a4ee-023f3da165cb", - "isEnabled": true, - "origin": "Application", - "value": "CrossTenantUserProfileSharing.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's custom authentication extensions without a signed-in user.", - "displayName": "Read all custom authentication extensions", - "id": "88bb2658-5d9e-454f-aacd-a3933e079526", - "isEnabled": true, - "origin": "Application", - "value": "CustomAuthenticationExtension.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read or write your organization's custom authentication extensions without a signed-in user.", - "displayName": "Read and write all custom authentication extensions", - "id": "c2667967-7050-4e7e-b059-4cbbb3811d03", - "isEnabled": true, - "origin": "Application", - "value": "CustomAuthenticationExtension.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows custom authentication extensions associated with the app to receive HTTP requests triggered by an authentication event. The request can include information about a user, client and resource service principals, and other information about the authentication.", - "displayName": "Receive custom authentication extension HTTP requests", - "id": "214e810f-fda8-4fd7-a475-29461495eb00", - "isEnabled": true, - "origin": "Application", - "value": "CustomAuthenticationExtension.Receive.Payload" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read custom security attribute assignments for all principals in the tenant without a signed in user.", - "displayName": "Read custom security attribute assignments", - "id": "3b37c5a4-1226-493d-bec3-5d6c6b866f3f", - "isEnabled": true, - "origin": "Application", - "value": "CustomSecAttributeAssignment.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write custom security attribute assignments for all principals in the tenant without a signed in user.", - "displayName": "Read and write custom security attribute assignments", - "id": "de89b5e4-5b8f-48eb-8925-29c2b33bd8bd", - "isEnabled": true, - "origin": "Application", - "value": "CustomSecAttributeAssignment.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all audit logs for events that contain information about custom security attributes, without a signed-in user.", - "displayName": "Read all custom security attribute audit logs", - "id": "2a4f026d-e829-4e84-bdbf-d981a2703059", - "isEnabled": true, - "origin": "Application", - "value": "CustomSecAttributeAuditLogs.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read custom security attribute definitions for the tenant without a signed in user.", - "displayName": "Read custom security attribute definitions", - "id": "b185aa14-d8d2-42c1-a685-0f5596613624", - "isEnabled": true, - "origin": "Application", - "value": "CustomSecAttributeDefinition.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write custom security attribute definitions for the tenant without a signed in user.", - "displayName": "Read and write custom security attribute definitions", - "id": "12338004-21f4-4896-bf5e-b75dfaf1016d", - "isEnabled": true, - "origin": "Application", - "value": "CustomSecAttributeDefinition.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups without a signed-in user.", - "displayName": "Read Delegated Admin relationships with customers", - "id": "f6e9e124-4586-492f-adc0-c6f96e4823fd", - "isEnabled": true, - "origin": "Application", - "value": "DelegatedAdminRelationship.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers and role assignments to security groups for active Delegated Admin relationships without a signed-in user.", - "displayName": "Manage Delegated Admin relationships with customers", - "id": "cc13eba4-8cd8-44c6-b4d4-f93237adce58", - "isEnabled": true, - "origin": "Application", - "value": "DelegatedAdminRelationship.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all delegated permission grants, without a signed-in user.", - "displayName": "Read all delegated permission grants", - "id": "81b4724a-58aa-41c1-8a55-84ef97466587", - "isEnabled": true, - "origin": "Application", - "value": "DelegatedPermissionGrant.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), without a signed-in user.", - "displayName": "Manage all delegated permission grants", - "id": "8e8e4742-1d95-4f68-9d56-6ee75648c72a", - "isEnabled": true, - "origin": "Application", - "value": "DelegatedPermissionGrant.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's devices' configuration information without a signed-in user.", - "displayName": "Read all devices", - "id": "7438b122-aefc-4978-80ed-43db9fcc7715", - "isEnabled": true, - "origin": "Application", - "value": "Device.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers.", - "displayName": "Read and write devices", - "id": "1138cb37-bd11-4084-a2b7-9f71582aeddb", - "isEnabled": true, - "origin": "Application", - "value": "Device.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read device local credential properties including passwords, without a signed-in user.", - "displayName": "Read device local credential passwords", - "id": "884b599e-4d48-43a5-ba94-15c414d00588", - "isEnabled": true, - "origin": "Application", - "value": "DeviceLocalCredential.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read device local credential properties excluding passwords, without a signed-in user.", - "displayName": "Read device local credential properties", - "id": "db51be59-e728-414b-b800-e0f010df1a79", - "isEnabled": true, - "origin": "Application", - "value": "DeviceLocalCredential.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.", - "displayName": "Read Microsoft Intune apps", - "id": "7a6ee1e7-141e-4cec-ae74-d9db155731ff", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementApps.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.", - "displayName": "Read and write Microsoft Intune apps", - "id": "78145de6-330d-4800-a6ce-494ff2d33d07", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementApps.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.", - "displayName": "Read Microsoft Intune device configuration and policies", - "id": "dc377aa6-52d8-4e23-b271-2a7ae04cedf3", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementConfiguration.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.", - "displayName": "Read and write Microsoft Intune device configuration and policies", - "id": "9241abd9-d0e6-425a-bd4f-47ba86e767a4", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementConfiguration.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune, without a signed-in user.", - "displayName": "Perform user-impacting remote actions on Microsoft Intune devices", - "id": "5b07b0dd-2377-4e44-a38d-703f09a0dc3c", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementManagedDevices.PrivilegedOperations.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the properties of devices managed by Microsoft Intune, without a signed-in user.", - "displayName": "Read Microsoft Intune devices", - "id": "2f51be20-0bb4-4fed-bf7b-db946066c75e", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementManagedDevices.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the properties of devices managed by Microsoft Intune, without a signed-in user. Does not allow high impact operations such as remote wipe and password reset on the device’s owner", - "displayName": "Read and write Microsoft Intune devices", - "id": "243333ab-4d21-40cb-a475-36241daa0842", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementManagedDevices.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.", - "displayName": "Read Microsoft Intune RBAC settings", - "id": "58ca0d9a-1575-47e1-a3cb-007ef2e4583b", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementRBAC.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.", - "displayName": "Read and write Microsoft Intune RBAC settings", - "id": "e330c4f0-4170-414e-a55a-2f022ec2b57b", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementRBAC.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.", - "displayName": "Read Microsoft Intune configuration", - "id": "06a5fe6d-c49d-46a7-b082-56b1b14103c7", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementServiceConfig.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.", - "displayName": "Read and write Microsoft Intune configuration", - "id": "5ac13192-7ace-4fcf-b828-1a26f28068ee", - "isEnabled": true, - "origin": "Application", - "value": "DeviceManagementServiceConfig.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user.", - "displayName": "Read directory data", - "id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61", - "isEnabled": true, - "origin": "Application", - "value": "Directory.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write data in your organization's directory, such as users, and groups, without a signed-in user. Does not allow user or group deletion.", - "displayName": "Read and write directory data", - "id": "19dbc75e-c2e2-444c-a770-ec69d8559fc7", - "isEnabled": true, - "origin": "Application", - "value": "Directory.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage restricted resources based on the other permissions granted to the app, without a signed-in user.", - "displayName": "Manage restricted resources in the directory", - "id": "f20584af-9290-4153-9280-ff8bb2c0ea7f", - "isEnabled": true, - "origin": "Application", - "value": "Directory.Write.Restricted" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all Azure AD recommendations, without a signed-in user. ", - "displayName": "Read all Azure AD recommendations", - "id": "ae73097b-cb2a-4447-b064-5d80f6093921", - "isEnabled": true, - "origin": "Application", - "value": "DirectoryRecommendations.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and update all Azure AD recommendations, without a signed-in user. ", - "displayName": "Read and update all Azure AD recommendations", - "id": "0e9eea12-4f01-45f6-9b8d-3ea4c8144158", - "isEnabled": true, - "origin": "Application", - "value": "DirectoryRecommendations.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all domain properties without a signed-in user.", - "displayName": "Read domains", - "id": "dbb9058a-0e50-45d7-ae91-66909b5d4664", - "isEnabled": true, - "origin": "Application", - "value": "Domain.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all domain properties without a signed in user.  Also allows the app to add,  verify and remove domains.", - "displayName": "Read and write domains", - "id": "7e05723c-0bb0-42da-be95-ae9f08a6e53c", - "isEnabled": true, - "origin": "Application", - "value": "Domain.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects without a signed-in user.", - "displayName": "Read all eDiscovery objects", - "id": "50180013-6191-4d1e-a373-e590ff4e66af", - "isEnabled": true, - "origin": "Application", - "value": "eDiscovery.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects without a signed-in user.", - "displayName": "Read and write all eDiscovery objects", - "id": "b2620db1-3bf7-4c5b-9cb9-576d29eac736", - "isEnabled": true, - "origin": "Application", - "value": "eDiscovery.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read the state and settings of all Microsoft education apps.", - "displayName": "Read Education app settings", - "id": "7c9db06a-ec2d-4e7b-a592-5a1e30992566", - "isEnabled": true, - "origin": "Application", - "value": "EduAdministration.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Manage the state and settings of all Microsoft education apps.", - "displayName": "Manage education app settings", - "id": "9bc431c3-b8bc-4a8d-a219-40f10f92eff6", - "isEnabled": true, - "origin": "Application", - "value": "EduAdministration.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all class assignments with grades for all users without a signed-in user.", - "displayName": "Read all class assignments with grades", - "id": "4c37e1b6-35a1-43bf-926a-6f30f2cdf585", - "isEnabled": true, - "origin": "Application", - "value": "EduAssignments.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all class assignments without grades for all users without a signed-in user.", - "displayName": "Read all class assignments without grades", - "id": "6e0a958b-b7fc-4348-b7c4-a6ab9fd3dd0e", - "isEnabled": true, - "origin": "Application", - "value": "EduAssignments.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update and delete all class assignments with grades for all users without a signed-in user.", - "displayName": "Create, read, update and delete all class assignments with grades", - "id": "0d22204b-6cad-4dd0-8362-3e3f2ae699d9", - "isEnabled": true, - "origin": "Application", - "value": "EduAssignments.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update and delete all class assignments without grades for all users without a signed-in user.", - "displayName": "Create, read, update and delete all class assignments without grades", - "id": "f431cc63-a2de-48c4-8054-a34bc093af84", - "isEnabled": true, - "origin": "Application", - "value": "EduAssignments.ReadWriteBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all modules and resources, without a signed-in user.", - "displayName": "Read all class modules and resources", - "id": "6cdb464c-3a03-40f8-900b-4cb7ea1da9c0", - "isEnabled": true, - "origin": "Application", - "value": "EduCurricula.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all modules and resources, without a signed-in user.", - "displayName": "Read and write all class modules and resources", - "id": "6a0c2318-d59d-4c7d-bf2e-5f3902dc2593", - "isEnabled": true, - "origin": "Application", - "value": "EduCurricula.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the structure of schools and classes in the organization's roster and education-specific information about all users to be read.", - "displayName": "Read the organization's roster", - "id": "e0ac9e1b-cb65-4fc5-87c5-1a8bc181f648", - "isEnabled": true, - "origin": "Application", - "value": "EduRoster.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read a limited subset of properties from both the structure of schools and classes in the organization's roster and education-specific information about all users. Includes name, status, role, email address and photo.", - "displayName": "Read a limited subset of the organization's roster", - "id": "0d412a8c-a06c-439f-b3ec-8abcf54d2f96", - "isEnabled": true, - "origin": "Application", - "value": "EduRoster.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the structure of schools and classes in the organization's roster and education-specific information about all users to be read and written.", - "displayName": "Read and write the organization's roster", - "id": "d1808e82-ce13-47af-ae0d-f9b254e6d58a", - "isEnabled": true, - "origin": "Application", - "value": "EduRoster.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read access packages and related entitlement management resources without a signed-in user.", - "displayName": "Read all entitlement management resources", - "id": "c74fd47d-ed3c-45c3-9a9e-b8676de685d2", - "isEnabled": true, - "origin": "Application", - "value": "EntitlementManagement.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write access packages and related entitlement management resources without a signed-in user.", - "displayName": "Read and write all entitlement management resources", - "id": "9acd699f-1e81-4958-b001-93b1d2506e19", - "isEnabled": true, - "origin": "Application", - "value": "EntitlementManagement.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's authentication event listeners without a signed-in user.", - "displayName": "Read all authentication event listeners", - "id": "b7f6385c-6ce6-4639-a480-e23c42ed9784", - "isEnabled": true, - "origin": "Application", - "value": "EventListener.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read or write your organization's authentication event listeners without a signed-in user.", - "displayName": "Read and write all authentication event listeners", - "id": "0edf5e9e-4ce8-468a-8432-d08631d18c43", - "isEnabled": true, - "origin": "Application", - "value": "EventListener.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all external connections without a signed-in user.", - "displayName": "Read all external connections", - "id": "1914711b-a1cb-4793-b019-c2ce0ed21b8c", - "isEnabled": true, - "origin": "Application", - "value": "ExternalConnection.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all external connections without a signed-in user.", - "displayName": "Read and write all external connections", - "id": "34c37bc0-2b40-4d5e-85e1-2365cd256d79", - "isEnabled": true, - "origin": "Application", - "value": "ExternalConnection.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write external connections without a signed-in user. The app can only read and write external connections that it is authorized to, or it can create new external connections. ", - "displayName": "Read and write external connections", - "id": "f431331c-49a6-499f-be1c-62af19c34a9d", - "isEnabled": true, - "origin": "Application", - "value": "ExternalConnection.ReadWrite.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all external items without a signed-in user.", - "displayName": "Read all external items", - "id": "7a7cffad-37d2-4f48-afa4-c6ab129adcc2", - "isEnabled": true, - "origin": "Application", - "value": "ExternalItem.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allow the app to read or write items in all external datasets that the app is authorized to access", - "displayName": "Read and write items in external datasets", - "id": "38c3d6ee-69ee-422f-b954-e17819665354", - "isEnabled": true, - "origin": "Application", - "value": "ExternalItem.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write external items without a signed-in user. The app can only read external items of the connection that it is authorized to.", - "displayName": "Read and write external items", - "id": "8116ae0f-55c2-452d-9944-d18420f5b2c8", - "isEnabled": true, - "origin": "Application", - "value": "ExternalItem.ReadWrite.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all files in all site collections without a signed in user.", - "displayName": "Read files in all site collections", - "id": "01d4889c-1287-42c6-ac1f-5d1e02578ef6", - "isEnabled": true, - "origin": "Application", - "value": "Files.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, create, update and delete all files in all site collections without a signed in user. ", - "displayName": "Read and write files in all site collections", - "id": "75359482-378d-4052-8f01-80520e7db3cd", - "isEnabled": true, - "origin": "Application", - "value": "Files.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create groups without a signed-in user.", - "displayName": "Create groups", - "id": "bf7b1a76-6e77-406b-b258-bf5c7720e98f", - "isEnabled": true, - "origin": "Application", - "value": "Group.Create" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read group properties and memberships, and read conversations for all groups, without a signed-in user.", - "displayName": "Read all groups", - "id": "5b567255-7703-4780-807c-7be8301ae99b", - "isEnabled": true, - "origin": "Application", - "value": "Group.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create groups, read all group properties and memberships, update group properties and memberships, and delete groups. Also allows the app to read and write conversations. All of these operations can be performed by the app without a signed-in user.", - "displayName": "Read and write all groups", - "id": "62a82d76-70ea-41e2-9197-370581804d09", - "isEnabled": true, - "origin": "Application", - "value": "Group.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read memberships and basic group properties for all groups without a signed-in user.", - "displayName": "Read all group memberships", - "id": "98830695-27a2-44f7-8c18-0c3ebc9698f6", - "isEnabled": true, - "origin": "Application", - "value": "GroupMember.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to list groups, read basic properties, read and update the membership of the groups this app has access to without a signed-in user. Group properties and owners cannot be updated and groups cannot be deleted.", - "displayName": "Read and write all group memberships", - "id": "dbaae8cf-10b5-4b86-a4a1-f871c94c6695", - "isEnabled": true, - "origin": "Application", - "value": "GroupMember.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization’s identity (authentication) providers’ properties without a signed in user.", - "displayName": "Read identity providers", - "id": "e321f0bb-e7f7-481e-bb28-e3b0b32d4bd0", - "isEnabled": true, - "origin": "Application", - "value": "IdentityProvider.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization’s identity (authentication) providers’ properties without a signed in user.", - "displayName": "Read and write identity providers", - "id": "90db2b9a-d928-4d33-a4dd-8442ae3d41e4", - "isEnabled": true, - "origin": "Application", - "value": "IdentityProvider.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the identity risk event information for your organization without a signed in user.", - "displayName": "Read all identity risk event information", - "id": "6e472fd1-ad78-48da-a0f0-97ab2c6b769e", - "isEnabled": true, - "origin": "Application", - "value": "IdentityRiskEvent.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and update identity risk detection information for your organization without a signed-in user. Update operations include confirming risk event detections. ", - "displayName": "Read and write all risk detection information", - "id": "db06fb33-1953-4b7b-a2ac-f1e2c854f7ae", - "isEnabled": true, - "origin": "Application", - "value": "IdentityRiskEvent.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all risky service principal information for your organization, without a signed-in user.", - "displayName": "Read all identity risky service principal information", - "id": "607c7344-0eed-41e5-823a-9695ebe1b7b0", - "isEnabled": true, - "origin": "Application", - "value": "IdentityRiskyServicePrincipal.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and update identity risky service principal for your organization, without a signed-in user.", - "displayName": "Read and write all identity risky service principal information", - "id": "cb8d6980-6bcb-4507-afec-ed6de3a2d798", - "isEnabled": true, - "origin": "Application", - "value": "IdentityRiskyServicePrincipal.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the identity risky user information for your organization without a signed in user.", - "displayName": "Read all identity risky user information", - "id": "dc5007c0-2d7d-4c42-879c-2dab87571379", - "isEnabled": true, - "origin": "Application", - "value": "IdentityRiskyUser.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and update identity risky user information for your organization without a signed-in user.  Update operations include dismissing risky users.", - "displayName": "Read and write all risky user information", - "id": "656f6061-f9fe-4807-9708-6a2e0934df76", - "isEnabled": true, - "origin": "Application", - "value": "IdentityRiskyUser.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's user flows, without a signed-in user.", - "displayName": "Read all identity user flows", - "id": "1b0c317f-dd31-4305-9932-259a8b6e8099", - "isEnabled": true, - "origin": "Application", - "value": "IdentityUserFlow.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read or write your organization's user flows, without a signed-in user.", - "displayName": "Read and write all identity user flows", - "id": "65319a09-a2be-469d-8782-f6b07debf789", - "isEnabled": true, - "origin": "Application", - "value": "IdentityUserFlow.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read data connectors without a signed-in user.", - "displayName": "View data connector definitions", - "id": "7ab52c2f-a2ee-4d98-9ebc-725e3934aae2", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-DataConnector.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write data connectors without a signed-in user.", - "displayName": "Manage data connector definitions", - "id": "eda0971c-482e-4345-b28f-69c309cb8a34", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-DataConnector.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to upload data files to a data connector without a signed-in user.", - "displayName": "Upload files to a data connector", - "id": "9334c44b-a7c6-4350-8036-6bf8e02b4c1f", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-DataConnector.Upload" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read inbound data flows without a signed-in user.", - "displayName": "View inbound flow definitions", - "id": "305f6ba2-049a-4b1b-88bb-fe7e08758a00", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-InboundFlow.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write inbound data flows without a signed-in user.", - "displayName": "Manage inbound flow definitions", - "id": "e688c61f-d4c6-4d64-a197-3bcf6ba1d6ad", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-InboundFlow.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read reference definitions without a signed-in user.", - "displayName": "View reference definitions", - "id": "6ee891c3-74a4-4148-8463-0c834375dfaf", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-ReferenceDefinition.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read current and previous IndustryData runs without a signed-in user.", - "displayName": "View current and previous runs", - "id": "f6f5d10b-3024-4d1d-b674-aae4df4a1a73", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-Run.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read source system definitions without a signed-in user.", - "displayName": "View source system definitions", - "id": "bc167a60-39fe-4865-8b44-78400fc6ed03", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-SourceSystem.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write source system definitions without a signed-in user.", - "displayName": "Manage source system definitions", - "id": "7d866958-e06e-4dd6-91c6-a086b3f5cfeb", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-SourceSystem.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read time period definitions without a signed-in user.", - "displayName": "Read time period definitions", - "id": "7c55c952-b095-4c23-a522-022bce4cc1e3", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-TimePeriod.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write time period definitions without a signed-in user.", - "displayName": "Manage time period definitions", - "id": "7afa7744-a782-4a32-b8c2-e3db637e8de7", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData-TimePeriod.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read basic service and resource information without a signed-in user.", - "displayName": "View basic service and resource information", - "id": "4f5ac95f-62fd-472c-b60f-125d24ca0bc5", - "isEnabled": true, - "origin": "Application", - "value": "IndustryData.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all configurations applicable to users for protecting organizational data, without a signed-in user.", - "displayName": "Read all configurations for protecting organizational data applicable to users", - "id": "14f49b9f-4bf2-4d24-b80e-b27ec58409bd", - "isEnabled": true, - "origin": "Application", - "value": "InformationProtectionConfig.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to sign digests for data without a signed-in user.", - "displayName": "Sign digests for data", - "id": "cbe6c7e4-09aa-4b8d-b3c3-2dbb59af4b54", - "isEnabled": true, - "origin": "Application", - "value": "InformationProtectionContent.Sign.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create protected content without a signed-in user. ", - "displayName": "Create protected content", - "id": "287bd98c-e865-4e8c-bade-1a85523195b9", - "isEnabled": true, - "origin": "Application", - "value": "InformationProtectionContent.Write.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read published sensitivity labels and label policy settings for the entire organization or a specific user, without a signed in user.", - "displayName": "Read all published labels and label policies for an organization.", - "id": "19da66cb-0fb0-4390-b071-ebc76a349482", - "isEnabled": true, - "origin": "Application", - "value": "InformationProtectionPolicy.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all insights related to guest activity, without a signed-in user.", - "displayName": "Read all insights related to guest activity", - "id": "e93bd8c0-c267-45ea-9722-9d3376a7e302", - "isEnabled": true, - "origin": "Application", - "value": "Insights-GuestActivity.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all insights related to guest activity, without a signed-in user.", - "displayName": "Read and write all insights related to guest activity", - "id": "681ded65-ad9c-4d3d-8f7d-962f84cc13d8", - "isEnabled": true, - "origin": "Application", - "value": "Insights-GuestActivity.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read data for all assignments in the organization's directory, without a signed-in user.", - "displayName": "Read all assignments", - "id": "535e6066-2894-49ef-ab33-e2c6d064bb81", - "isEnabled": true, - "origin": "Application", - "value": "LearningAssignedCourse.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, update, read and delete all assignments in the organization's directory, without a signed-in user.", - "displayName": "Read and write all assignments", - "id": "236c1cbd-1187-427f-b0f5-b1852454973b", - "isEnabled": true, - "origin": "Application", - "value": "LearningAssignedCourse.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all learning content in the organization's directory, without a signed-in user.", - "displayName": "Read all learning content", - "id": "8740813e-d8aa-4204-860e-2a0f8f84dbc8", - "isEnabled": true, - "origin": "Application", - "value": "LearningContent.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage all learning content in the organization's directory, without a signed-in user.", - "displayName": "Manage all learning content", - "id": "444d6fcb-b738-41e5-b103-ac4f2a2628a3", - "isEnabled": true, - "origin": "Application", - "value": "LearningContent.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read data for all self-initiated courses in the organization's directory, without a signed-in user.", - "displayName": "Read all self-initiated courses", - "id": "467524fc-ed22-4356-a910-af61191e3503", - "isEnabled": true, - "origin": "Application", - "value": "LearningSelfInitiatedCourse.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, update, read and delete all self-initiated courses in the organization's directory, without a signed-in user.", - "displayName": "Read and write all self-initiated courses", - "id": "7654ed61-8965-4025-846a-0856ec02b5b0", - "isEnabled": true, - "origin": "Application", - "value": "LearningSelfInitiatedCourse.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to manage license assignments for users and groups, without a signed-in user.", - "displayName": "Manage all license assignments", - "id": "5facf0c1-8979-4e95-abcf-ff3d079771c0", - "isEnabled": true, - "origin": "Application", - "value": "LicenseAssignment.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources without a signed-in user.", - "displayName": "Read all lifecycle workflows resources", - "id": "7c67316a-232a-4b84-be22-cea2c0906404", - "isEnabled": true, - "origin": "Application", - "value": "LifecycleWorkflows.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources without a signed-in user.", - "displayName": "Read and write all lifecycle workflows resources", - "id": "5c505cf4-8424-4b8e-aa14-ee06e3bb23e3", - "isEnabled": true, - "origin": "Application", - "value": "LifecycleWorkflows.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read mail in all mailboxes without a signed-in user.", - "displayName": "Read mail in all mailboxes", - "id": "810c84a8-4a9e-49e6-bf7d-12d183f40d01", - "isEnabled": true, - "origin": "Application", - "value": "Mail.Read" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read basic mail properties in all mailboxes without a signed-in user. Includes all properties except body, previewBody, attachments and any extended properties.", - "displayName": "Read basic mail in all mailboxes", - "id": "6be147d2-ea4f-4b5a-a3fa-3eab6f3c140a", - "isEnabled": true, - "origin": "Application", - "value": "Mail.ReadBasic" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read basic mail properties in all mailboxes without a signed-in user. Includes all properties except body, previewBody, attachments and any extended properties.", - "displayName": "Read basic mail in all mailboxes", - "id": "693c5e45-0940-467d-9b8a-1022fb9d42ef", - "isEnabled": true, - "origin": "Application", - "value": "Mail.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail.", - "displayName": "Read and write mail in all mailboxes", - "id": "e2a3a72e-5f79-4c64-b1b1-878b674786c9", - "isEnabled": true, - "origin": "Application", - "value": "Mail.ReadWrite" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to send mail as any user without a signed-in user.", - "displayName": "Send mail as any user", - "id": "b633e1c5-b582-4048-a93e-9f11b44c7e96", - "isEnabled": true, - "origin": "Application", - "value": "Mail.Send" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read user's mailbox settings without a signed-in user. Does not include permission to send mail.", - "displayName": "Read all user mailbox settings", - "id": "40f97065-369a-49f4-947c-6a255697ae91", - "isEnabled": true, - "origin": "Application", - "value": "MailboxSettings.Read" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update, and delete user's mailbox settings without a signed-in user. Does not include permission to send mail.", - "displayName": "Read and write all user mailbox settings", - "id": "6931bccd-447a-43d1-b442-00a195474933", - "isEnabled": true, - "origin": "Application", - "value": "MailboxSettings.ReadWrite" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the memberships of hidden groups and administrative units without a signed-in user.", - "displayName": "Read all hidden memberships", - "id": "658aa5d8-239f-45c4-aa12-864f4fc7e490", - "isEnabled": true, - "origin": "Application", - "value": "Member.Read.Hidden" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all multi-tenant organization details and tenants, without a signed-in user.", - "displayName": "Read all multi-tenant organization details and tenants", - "id": "4f994bc0-31bb-44bb-b480-7a7c1be8c02e", - "isEnabled": true, - "origin": "Application", - "value": "MultiTenantOrganization.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read multi-tenant organization basic details and active tenants, without a signed-in user.", - "displayName": "Read multi-tenant organization basic details and active tenants", - "id": "f9c2b2a7-3895-4b2e-80f6-c924b456e50b", - "isEnabled": true, - "origin": "Application", - "value": "MultiTenantOrganization.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all multi-tenant organization details and tenants, without a signed-in user.", - "displayName": "Read and write all multi-tenant organization details and tenants", - "id": "920def01-ca61-4d2d-b3df-105b46046a70", - "isEnabled": true, - "origin": "Application", - "value": "MultiTenantOrganization.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's network access braches, without a signed-in user.", - "displayName": "Read properties of all branches for network access", - "id": "39ae4a24-1ef0-49e8-9d63-2a66f5c39edd", - "isEnabled": true, - "origin": "Application", - "value": "NetworkAccessBranch.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's network access braches, without a signed-in user.", - "displayName": "Read and write properties of all branches for network access", - "id": "8137102d-ec16-4191-aaf8-7aeda8026183", - "isEnabled": true, - "origin": "Application", - "value": "NetworkAccessBranch.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's network access policies, without a signed-in user.", - "displayName": "Read all security and routing policies for network access", - "id": "8a3d36bf-cb46-4bcc-bec9-8d92829dab84", - "isEnabled": true, - "origin": "Application", - "value": "NetworkAccessPolicy.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's network access policies, without a signed-in user.", - "displayName": "Read and write all security and routing policies for network access", - "id": "f0c341be-8348-4989-8e43-660324294538", - "isEnabled": true, - "origin": "Application", - "value": "NetworkAccessPolicy.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all the OneNote notebooks in your organization, without a signed-in user.", - "displayName": "Read all OneNote notebooks", - "id": "3aeca27b-ee3a-4c2b-8ded-80376e2134a4", - "isEnabled": true, - "origin": "Application", - "value": "Notes.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all the OneNote notebooks in your organization, without a signed-in user.", - "displayName": "Read and write all OneNote notebooks", - "id": "0c458cef-11f3-48c2-a568-c66751c238c0", - "isEnabled": true, - "origin": "Application", - "value": "Notes.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read online meeting artifacts in your organization, without a signed-in user.", - "displayName": "Read online meeting artifacts", - "id": "df01ed3b-eb61-4eca-9965-6b3d789751b2", - "isEnabled": true, - "origin": "Application", - "value": "OnlineMeetingArtifact.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all recordings of all online meetings, without a signed-in user.", - "displayName": "Read all recordings of online meetings.", - "id": "a4a08342-c95d-476b-b943-97e100569c8d", - "isEnabled": true, - "origin": "Application", - "value": "OnlineMeetingRecording.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read online meeting details in your organization, without a signed-in user.", - "displayName": "Read online meeting details", - "id": "c1684f21-1984-47fa-9d61-2dc8c296bb70", - "isEnabled": true, - "origin": "Application", - "value": "OnlineMeetings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and create online meetings as an application in your organization.", - "displayName": "Read and create online meetings", - "id": "b8bb2037-6e08-44ac-a4ea-4674e010e2a4", - "isEnabled": true, - "origin": "Application", - "value": "OnlineMeetings.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all transcripts of all online meetings, without a signed-in user.", - "displayName": "Read all transcripts of online meetings.", - "id": "a4a80d8d-d283-4bd8-8504-555ec3870630", - "isEnabled": true, - "origin": "Application", - "value": "OnlineMeetingTranscript.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all on-premises directory synchronization information for the organization, without a signed-in user.", - "displayName": "Read all on-premises directory synchronization information", - "id": "bb70e231-92dc-4729-aff5-697b3f04be95", - "isEnabled": true, - "origin": "Application", - "value": "OnPremDirectorySynchronization.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all on-premises directory synchronization information for the organization, without a signed-in user.", - "displayName": "Read and write all on-premises directory synchronization information", - "id": "c22a92cc-79bf-4bb1-8b6c-e0a05d3d80ce", - "isEnabled": true, - "origin": "Application", - "value": "OnPremDirectorySynchronization.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, view, update and delete on-premises published resources, on-premises agents and agent groups, as part of a hybrid identity configuration, without a signed in user.", - "displayName": "Manage on-premises published resources", - "id": "0b57845e-aa49-4e6f-8109-ce654fffa618", - "isEnabled": true, - "origin": "Application", - "value": "OnPremisesPublishingProfiles.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.", - "displayName": "Read organization information", - "id": "498476ce-e0fe-48b0-b801-37ba7e2685c6", - "isEnabled": true, - "origin": "Application", - "value": "Organization.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.", - "displayName": "Read and write organization information", - "id": "292d869f-3427-49a8-9dab-8c70152b74e9", - "isEnabled": true, - "origin": "Application", - "value": "Organization.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all organizational contacts without a signed-in user. These contacts are managed by the organization and are different from a user's personal contacts.", - "displayName": "Read organizational contacts", - "id": "e1a88a34-94c4-4418-be12-c87b00e26bea", - "isEnabled": true, - "origin": "Application", - "value": "OrgContact.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read organization-wide apps and services settings, without a signed-in user.", - "displayName": "Read organization-wide apps and services settings", - "id": "56c84fa9-ea1f-4a15-90f2-90ef41ece2c9", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-AppsAndServices.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write organization-wide apps and services settings, without a signed-in user.", - "displayName": "Read and write organization-wide apps and services settings", - "id": "4a8e4191-c1c8-45f8-b801-f9a1a5ee6ad3", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-AppsAndServices.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read organization-wide Dynamics customer voice settings, without a signed-in user.", - "displayName": "Read organization-wide Dynamics customer voice settings", - "id": "c18ae2dc-d9f3-4495-a93f-18980a0e159f", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-DynamicsVoice.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write organization-wide Dynamics customer voice settings, without a signed-in user.", - "displayName": "Read and write organization-wide Dynamics customer voice settings", - "id": "c3f1cc32-8bbd-4ab6-bd33-f270e0d9e041", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-DynamicsVoice.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read organization-wide Microsoft Forms settings, without a signed-in user.", - "displayName": "Read organization-wide Microsoft Forms settings", - "id": "434d7c66-07c6-4b1f-ab21-417cf2cdaaca", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-Forms.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write organization-wide Microsoft Forms settings, without a signed-in user.", - "displayName": "Read and write organization-wide Microsoft Forms settings", - "id": "2cb92fee-97a3-4034-8702-24a6f5d0d1e9", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-Forms.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read organization-wide Microsoft 365 apps installation settings, without a signed-in user.", - "displayName": "Read organization-wide Microsoft 365 apps installation settings", - "id": "6cdf1fb1-b46f-424f-9493-07247caa22e2", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-Microsoft365Install.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings, without a signed-in user. ", - "displayName": "Read and write organization-wide Microsoft 365 apps installation settings", - "id": "83f7232f-763c-47b2-a097-e35d2cbe1da5", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-Microsoft365Install.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read organization-wide Microsoft To Do settings, without a signed-in user.", - "displayName": "Read organization-wide Microsoft To Do settings", - "id": "e4d9cd09-d858-4363-9410-abb96737f0cf", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-Todo.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write organization-wide Microsoft To Do settings, without a signed-in user.", - "displayName": "Read and write organization-wide Microsoft To Do settings", - "id": "5febc9da-e0d0-4576-bd13-ae70b2179a39", - "isEnabled": true, - "origin": "Application", - "value": "OrgSettings-Todo.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read any user's scored list of relevant people, without a signed-in user. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).", - "displayName": "Read all users' relevant people lists", - "id": "b528084d-ad10-4598-8b93-929746b4d7d6", - "isEnabled": true, - "origin": "Application", - "value": "People.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read tenant-wide people settings without a signed-in user.", - "displayName": "Read all tenant-wide people settings", - "id": "ef02f2e7-e22d-4c77-8614-8f765683b86e", - "isEnabled": true, - "origin": "Application", - "value": "PeopleSettings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and write tenant-wide people settings without a signed-in user.", - "displayName": "Read and write all tenant-wide people settings", - "id": "b6890674-9dd5-4e42-bb15-5af07f541ae1", - "isEnabled": true, - "origin": "Application", - "value": "PeopleSettings.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read company places (conference rooms and room lists) for calendar events and other applications, without a signed-in user.", - "displayName": "Read all company places", - "id": "913b9306-0ce1-42b8-9137-6a7df690a760", - "isEnabled": true, - "origin": "Application", - "value": "Place.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all your organization's policies without a signed in user.", - "displayName": "Read your organization's policies", - "id": "246dd0d5-5bd0-4def-940b-0421030a5b68", - "isEnabled": true, - "origin": "Application", - "value": "Policy.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's conditional access policies, without a signed-in user.", - "displayName": "Read your organization's conditional access policies", - "id": "37730810-e9ba-4e46-b07e-8ca78d182097", - "isEnabled": true, - "origin": "Application", - "value": "Policy.Read.ConditionalAccess" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization’s identity protection policy without a signed-in user. ", - "displayName": "Read your organization’s identity protection policy", - "id": "b21b72f6-4e6a-4533-9112-47eea9f97b28", - "isEnabled": true, - "origin": "Application", - "value": "Policy.Read.IdentityProtection" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read policies related to consent and permission grants for applications, without a signed-in user.", - "displayName": "Read consent and permission grant policies", - "id": "9e640839-a198-48fb-8b9a-013fd6f6cbcd", - "isEnabled": true, - "origin": "Application", - "value": "Policy.Read.PermissionGrant" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's directory access review default policy without a signed-in user.", - "displayName": "Read and write your organization's directory access review default policy", - "id": "77c863fd-06c0-47ce-a7eb-49773e89d319", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.AccessReview" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", - "displayName": "Read and write your organization's application configuration policies", - "id": "be74164b-cff1-491c-8741-e671cb536e13", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.ApplicationConfiguration" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all authentication flow policies for the tenant, without a signed-in user.", - "displayName": "Read and write authentication flow policies", - "id": "25f85f3c-f66c-4205-8cd5-de92dd7f0cec", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.AuthenticationFlows" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all authentication method policies for the tenant, without a signed-in user. ", - "displayName": "Read and write all authentication method policies ", - "id": "29c18626-4985-4dcd-85c0-193eef327366", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.AuthenticationMethod" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's authorization policy without a signed in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.", - "displayName": "Read and write your organization's authorization policy", - "id": "fb221be6-99f2-473f-bd32-01c6a0e9ca3b", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.Authorization" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's conditional access policies, without a signed-in user.", - "displayName": "Read and write your organization's conditional access policies", - "id": "01c0a623-fc9b-48e9-b794-0756f8e8f067", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.ConditionalAccess" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's consent requests policy without a signed-in user.", - "displayName": "Read and write your organization's consent request policy", - "id": "999f8c63-0a38-4f1b-91fd-ed1947bdd1a9", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.ConsentRequest" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's cross tenant access policies without a signed-in user.", - "displayName": "Read and write your organization's cross tenant access policies", - "id": "338163d7-f101-4c92-94ba-ca46fe52447c", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.CrossTenantAccess" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and update the organization's external identities policy without a signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.", - "displayName": "Read and write your organization's external identities policy", - "id": "03cc4f92-788e-4ede-b93f-199424d144a5", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.ExternalIdentities" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write feature rollout policies without a signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.", - "displayName": "Read and write feature rollout policies", - "id": "2044e4f1-e56c-435b-925c-44cd8f6ba89a", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.FeatureRollout" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization’s identity protection policy without a signed-in user.", - "displayName": "Read and write your organization’s identity protection policy ", - "id": "2dcf8603-09eb-4078-b1ec-d30a1a76b873", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.IdentityProtection" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage policies related to consent and permission grants for applications, without a signed-in user.", - "displayName": "Manage consent and permission grant policies", - "id": "a402ca1c-2696-4531-972d-6e5ee4aa11ea", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.PermissionGrant" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's security defaults policy, without a signed-in user.", - "displayName": "Read and write your organization's security defaults policy", - "id": "1c6e93a6-28e2-4cbb-9f64-1a46a821124d", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.SecurityDefaults" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write your organization's trust framework policies without a signed in user.", - "displayName": "Read and write your organization's trust framework policies", - "id": "79a677f7-b79d-40d0-a36a-3e6f8688dd7a", - "isEnabled": true, - "origin": "Application", - "value": "Policy.ReadWrite.TrustFramework" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all presence information and write activity and availability of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, time zone and location.", - "displayName": "Read and write presence information for all users", - "id": "83cded22-8297-4ff6-a7fa-e97e9545a259", - "isEnabled": true, - "origin": "Application", - "value": "Presence.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read printers without a signed-in user. ", - "displayName": "Read printers", - "id": "9709bb33-4549-49d4-8ed9-a8f65e45bb0f", - "isEnabled": true, - "origin": "Application", - "value": "Printer.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and update printers without a signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.", - "displayName": "Read and update printers", - "id": "f5b3f73d-6247-44df-a74c-866173fddab0", - "isEnabled": true, - "origin": "Application", - "value": "Printer.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to perform advanced operations like redirecting a print job to another printer without a signed-in user. Also allows the application to read and update the metadata of print jobs.", - "displayName": "Perform advanced operations on print jobs", - "id": "58a52f47-9e36-4b17-9ebe-ce4ef7f3e6c8", - "isEnabled": true, - "origin": "Application", - "value": "PrintJob.Manage.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read the metadata and document content of print jobs without a signed-in user. ", - "displayName": "Read print jobs", - "id": "ac6f956c-edea-44e4-bd06-64b1b4b9aec9", - "isEnabled": true, - "origin": "Application", - "value": "PrintJob.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read the metadata of print jobs without a signed-in user. Does not allow access to print job document content.", - "displayName": "Read basic information for print jobs", - "id": "fbf67eee-e074-4ef7-b965-ab5ce1c1f689", - "isEnabled": true, - "origin": "Application", - "value": "PrintJob.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and update the metadata and document content of print jobs without a signed-in user.", - "displayName": "Read and write print jobs", - "id": "5114b07b-2898-4de7-a541-53b0004e2e13", - "isEnabled": true, - "origin": "Application", - "value": "PrintJob.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and update the metadata of print jobs without a signed-in user. Does not allow access to print job document content.", - "displayName": "Read and write basic information for print jobs", - "id": "57878358-37f4-4d3a-8c20-4816e0d457b1", - "isEnabled": true, - "origin": "Application", - "value": "PrintJob.ReadWriteBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read tenant-wide print settings without a signed-in user.", - "displayName": "Read tenant-wide print settings", - "id": "b5991872-94cf-4652-9765-29535087c6d8", - "isEnabled": true, - "origin": "Application", - "value": "PrintSettings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and update print task definitions without a signed-in user. ", - "displayName": "Read, write and update print task definitions", - "id": "456b71a7-0ee0-4588-9842-c123fcc8f664", - "isEnabled": true, - "origin": "Application", - "value": "PrintTaskDefinition.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles in your organization, without a signed-in user.", - "displayName": "Read privileged access to Azure AD roles", - "id": "4cdc2547-9148-4295-8d11-be0db1391d6b", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAccess.Read.AzureAD" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.", - "displayName": "Read privileged access to Azure AD groups", - "id": "01e37dc9-c035-40bd-b438-b2879c4870a6", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAccess.Read.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read time-based assignment and just-in-time elevation of user privileges to audit Azure resources in your organization, without a signed-in user.", - "displayName": "Read privileged access to Azure resources", - "id": "5df6fe86-1be0-44eb-b916-7bd443a71236", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAccess.Read.AzureResources" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles in your organization, without a signed-in user.", - "displayName": "Read and write privileged access to Azure AD roles", - "id": "854d9ab1-6657-4ec8-be45-823027bcd009", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAccess.ReadWrite.AzureAD" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.", - "displayName": "Read and write privileged access to Azure AD groups", - "id": "2f6817f8-7b12-4f0f-bc18-eeaf60705a9e", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAccess.ReadWrite.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to request and manage time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) in your organization, without a signed-in user.", - "displayName": "Read and write privileged access to Azure resources", - "id": "6f9d5abc-2db6-400b-a267-7de22a40fb87", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAccess.ReadWrite.AzureResources" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read time-based assignment schedules for access to Azure AD groups, without a signed-in user.", - "displayName": "Read assignment schedules for access to Azure AD groups", - "id": "cd4161cb-f098-48f8-a884-1eda9a42434c", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAssignmentSchedule.Read.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, without a signed-in user.", - "displayName": "Read, create, and delete assignment schedules for access to Azure AD groups", - "id": "41202f2c-f7ab-45be-b001-85c9728b9d69", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, without a signed-in user.", - "displayName": "Read eligibility schedules for access to Azure AD groups", - "id": "edb419d6-7edc-42a3-9345-509bfdf5d87c", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedEligibilitySchedule.Read.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, without a signed-in user.", - "displayName": "Read, create, and delete eligibility schedules for access to Azure AD groups", - "id": "618b6020-bca8-4de6-99f6-ef445fa4d857", - "isEnabled": true, - "origin": "Application", - "value": "PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read programs and program controls in the organization, without a signed-in user.", - "displayName": "Read all programs", - "id": "eedb7fdd-7539-4345-a38b-4839e4a84cbd", - "isEnabled": true, - "origin": "Application", - "value": "ProgramControl.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, update, delete and perform actions on programs and program controls in the organization, without a signed-in user.", - "displayName": "Manage all programs", - "id": "60a901ed-09f7-4aa5-a16e-7dd3d6f9de36", - "isEnabled": true, - "origin": "Application", - "value": "ProgramControl.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read all question and answers, without a signed-in user.", - "displayName": "Read all Question and Answers ", - "id": "ee49e170-1dd1-4030-b44c-61ad6e98f743", - "isEnabled": true, - "origin": "Application", - "value": "QnA.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read any data from Records Management, such as configuration, labels, and policies without the signed in user.", - "displayName": "Read Records Management configuration, labels and policies", - "id": "ac3a2b8e-03a3-4da9-9ce0-cbe28bf1accd", - "isEnabled": true, - "origin": "Application", - "value": "RecordsManagement.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies without the signed in user.", - "displayName": "Read and write Records Management configuration, labels and policies", - "id": "eb158f57-df43-4751-8b21-b8932adb3d34", - "isEnabled": true, - "origin": "Application", - "value": "RecordsManagement.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read all service usage reports without a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.", - "displayName": "Read all usage reports", - "id": "230c1aed-a721-4c5d-9cb4-a90514e508ef", - "isEnabled": true, - "origin": "Application", - "value": "Reports.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all admin report settings, such as whether to display concealed information in reports, without a signed-in user.", - "displayName": "Read all admin report settings", - "id": "ee353f83-55ef-4b78-82da-555bfa2b4b95", - "isEnabled": true, - "origin": "Application", - "value": "ReportSettings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and update all admin report settings, such as whether to display concealed information in reports, without a signed-in user.", - "displayName": "Read and write all admin report settings", - "id": "2a60023f-3219-47ad-baa4-40e17cd02a1d", - "isEnabled": true, - "origin": "Application", - "value": "ReportSettings.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all resource specific permissions granted on user accounts, without a signed-in user.", - "displayName": "Read all resource specific permissions granted on user accounts", - "id": "acfca4d5-f49f-40ed-9648-84068b474c73", - "isEnabled": true, - "origin": "Application", - "value": "ResourceSpecificPermissionGrant.ReadForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the active role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.", - "displayName": "Read all active role assignments and role schedules for your company's directory", - "id": "d5fe8ce8-684c-4c83-a52c-46e882ce4be1", - "isEnabled": true, - "origin": "Application", - "value": "RoleAssignmentSchedule.Read.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.", - "displayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", - "id": "dd199f4a-f148-40a4-a2ec-f0069cc799ec", - "isEnabled": true, - "origin": "Application", - "value": "RoleAssignmentSchedule.ReadWrite.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.", - "displayName": "Read all eligible role assignments and role schedules for your company's directory", - "id": "ff278e11-4a33-4d0c-83d2-d01dc58929a5", - "isEnabled": true, - "origin": "Application", - "value": "RoleEligibilitySchedule.Read.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.", - "displayName": "Read, update, and delete all eligible role assignments and schedules for your company's directory", - "id": "fee28b28-e1f3-4841-818e-2704dc62245f", - "isEnabled": true, - "origin": "Application", - "value": "RoleEligibilitySchedule.ReadWrite.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read role-based access control (RBAC) settings for all RBAC providers without a signed-in user. This includes reading role definitions and role assignments.", - "displayName": "Read role management data for all RBAC providers", - "id": "c7fbd983-d9aa-4fa7-84b8-17382c103bc4", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagement.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, without a signed-in user.", - "displayName": "Read Cloud PC RBAC settings", - "id": "031a549a-bb80-49b6-8032-2068448c6a3c", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagement.Read.CloudPC" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes reading directory role templates, directory roles and memberships.", - "displayName": "Read all directory RBAC settings", - "id": "483bed4a-2ad3-4361-a73b-c83ccdbdc53c", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagement.Read.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the role-based access control (RBAC) configuration for your organization's Exchange Online service, without a signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", - "displayName": "Read Exchange Online RBAC configuration", - "id": "c769435f-f061-4d0b-8ff1-3d39870e5f85", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagement.Read.Exchange" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, without a signed-in user. This includes reading and managing Cloud PC role definitions and memberships.", - "displayName": "Read and write all Cloud PC RBAC settings", - "id": "274d0592-d1b6-44bd-af1d-26d259bcb43a", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagement.ReadWrite.CloudPC" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.", - "displayName": "Read and write all directory RBAC settings", - "id": "9e3f62cf-ca93-4989-b6ce-bf83c28f9fe8", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagement.ReadWrite.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, without a signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", - "displayName": "Read and write Exchange Online RBAC configuration", - "id": "025d3225-3f02-4882-b4c0-cd5b541a4e80", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagement.ReadWrite.Exchange" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", - "displayName": "Read all alert data for your company's directory", - "id": "ef31918f-2d50-4755-8943-b8638c0a077e", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagementAlert.Read.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and manage all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", - "displayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory", - "id": "11059518-d6a6-4851-98ed-509268489c4a", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagementAlert.ReadWrite.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read policies in Privileged Identity Management for Groups, without a signed-in user.", - "displayName": "Read all policies in PIM for Groups", - "id": "69e67828-780e-47fd-b28c-7b27d14864e6", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagementPolicy.Read.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.", - "displayName": "Read all policies for privileged role assignments of your company's directory", - "id": "fdc4c997-9942-4479-bfcb-75a36d1138df", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagementPolicy.Read.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, without a signed-in user.", - "displayName": "Read, update, and delete all policies in PIM for Groups", - "id": "b38dcc4d-a239-4ed6-aa84-6c65b284f97c", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagementPolicy.ReadWrite.AzureADGroup" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.", - "displayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", - "id": "31e08e0a-d3f7-4ca2-ac39-7343fb83e8ad", - "isEnabled": true, - "origin": "Application", - "value": "RoleManagementPolicy.ReadWrite.Directory" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.", - "displayName": "Read all schedule items", - "id": "7b2ebf90-d836-437f-b90d-7b62722c4456", - "isEnabled": true, - "origin": "Application", - "value": "Schedule.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.", - "displayName": "Read and write all schedule items", - "id": "b7760610-0545-4e8a-9ec3-cce9e63db01c", - "isEnabled": true, - "origin": "Application", - "value": "Schedule.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read search configurations, without a signed-in user.", - "displayName": "Read your organization's search configuration", - "id": "ada977a5-b8b1-493b-9a91-66c206d76ecf", - "isEnabled": true, - "origin": "Application", - "value": "SearchConfiguration.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write search configurations, without a signed-in user.", - "displayName": "Read and write your organization's search configuration", - "id": "0e778b85-fefa-466d-9eec-750569d92122", - "isEnabled": true, - "origin": "Application", - "value": "SearchConfiguration.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read security actions, without a signed-in user.", - "displayName": "Read your organization's security actions", - "id": "5e0edab9-c148-49d0-b423-ac253e121825", - "isEnabled": true, - "origin": "Application", - "value": "SecurityActions.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read or update security actions, without a signed-in user.", - "displayName": "Read and update your organization's security actions", - "id": "f2bf083f-0179-402a-bedb-b2784de8a49b", - "isEnabled": true, - "origin": "Application", - "value": "SecurityActions.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all security alerts, without a signed-in user.", - "displayName": "Read all security alerts", - "id": "472e4a4d-bb4a-4026-98d1-0b0d74cb74a5", - "isEnabled": true, - "origin": "Application", - "value": "SecurityAlert.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write to all security alerts, without a signed-in user.", - "displayName": "Read and write to all security alerts", - "id": "ed4fca05-be46-441f-9803-1873825f8fdb", - "isEnabled": true, - "origin": "Application", - "value": "SecurityAlert.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read email metadata and security detection details, without a signed-in user. ", - "displayName": "Read metadata and detection details for all emails in your organization", - "id": "b48f7ac2-044d-4281-b02f-75db744d6f5f", - "isEnabled": true, - "origin": "Application", - "value": "SecurityAnalyzedMessage.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read email metadata and security detection details, and execute remediation actions like deleting an email, without a signed-in user.", - "displayName": "Read metadata, detection details, and execute remediation actions on all emails in your organization", - "id": "04c55753-2244-4c25-87fc-704ab82a4f69", - "isEnabled": true, - "origin": "Application", - "value": "SecurityAnalyzedMessage.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization’s security events without a signed-in user.", - "displayName": "Read your organization’s security events", - "id": "bf394140-e372-4bf9-a898-299cfc7564e5", - "isEnabled": true, - "origin": "Application", - "value": "SecurityEvents.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization’s security events without a signed-in user. Also allows the app to update editable properties in security events.", - "displayName": "Read and update your organization’s security events", - "id": "d903a879-88e0-4c09-b0c9-82f6a1333f84", - "isEnabled": true, - "origin": "Application", - "value": "SecurityEvents.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all security incidents, without a signed-in user.", - "displayName": "Read all security incidents", - "id": "45cc0394-e837-488b-a098-1918f48d186c", - "isEnabled": true, - "origin": "Application", - "value": "SecurityIncident.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write to all security incidents, without a signed-in user.", - "displayName": "Read and write to all security incidents", - "id": "34bf0e97-1971-4929-b999-9e2442d941d7", - "isEnabled": true, - "origin": "Application", - "value": "SecurityIncident.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.", - "displayName": "Read service health", - "id": "79c261e0-fe76-4144-aad5-bdc68fbe4037", - "isEnabled": true, - "origin": "Application", - "value": "ServiceHealth.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your tenant's service announcement messages, without a signed-in user. Messages may include information about new or changed features.", - "displayName": "Read service messages", - "id": "1b620472-6534-4fe6-9df2-4680e8aa28ec", - "isEnabled": true, - "origin": "Application", - "value": "ServiceMessage.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read service principal endpoints", - "displayName": "Read service principal endpoints", - "id": "5256681e-b7f6-40c0-8447-2d9db68797a0", - "isEnabled": true, - "origin": "Application", - "value": "ServicePrincipalEndpoint.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to update service principal endpoints", - "displayName": "Read and update service principal endpoints", - "id": "89c8469c-83ad-45f7-8ff2-6e3d4285709e", - "isEnabled": true, - "origin": "Application", - "value": "ServicePrincipalEndpoint.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read the tenant-level settings of SharePoint and OneDrive, without a signed-in user.", - "displayName": "Read SharePoint and OneDrive tenant settings", - "id": "83d4163d-a2d8-4d3b-9695-4ae3ca98f888", - "isEnabled": true, - "origin": "Application", - "value": "SharePointTenantSettings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive, without a signed-in user.", - "displayName": "Read and change SharePoint and OneDrive tenant settings", - "id": "19b94e34-907c-4f43-bde9-38b1909ed408", - "isEnabled": true, - "origin": "Application", - "value": "SharePointTenantSettings.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all the short notes without a signed-in user.", - "displayName": "Read all users' short notes", - "id": "0c7d31ec-31ca-4f58-b6ec-9950b6b0de69", - "isEnabled": true, - "origin": "Application", - "value": "ShortNotes.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, create, edit, and delete all the short notes without a signed-in user.", - "displayName": "Read, create, edit, and delete all users' short notes", - "id": "842c284c-763d-4a97-838d-79787d129bab", - "isEnabled": true, - "origin": "Application", - "value": "ShortNotes.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to have full control of all site collections without a signed in user.", - "displayName": "Have full control of all site collections", - "id": "a82116e5-55eb-4c41-a434-62fe8a61c773", - "isEnabled": true, - "origin": "Application", - "value": "Sites.FullControl.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create or delete document libraries and lists in all site collections without a signed in user.", - "displayName": "Create, edit, and delete items and lists in all site collections", - "id": "0c0bf378-bf22-4481-8f81-9e89a9b4960a", - "isEnabled": true, - "origin": "Application", - "value": "Sites.Manage.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read documents and list items in all site collections without a signed in user.", - "displayName": "Read items in all site collections ", - "id": "332a536c-c7ef-4017-ab91-336970924f0d", - "isEnabled": true, - "origin": "Application", - "value": "Sites.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update, and delete documents and list items in all site collections without a signed in user.", - "displayName": "Read and write items in all site collections", - "id": "9492366f-7969-46a4-8d15-ed1a20078fff", - "isEnabled": true, - "origin": "Application", - "value": "Sites.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allow the application to access a subset of site collections without a signed in user.  The specific site collections and the permissions granted will be configured in SharePoint Online.", - "displayName": "Access selected site collections", - "id": "883ea226-0bf2-4a8f-9f9d-92c9162a727d", - "isEnabled": true, - "origin": "Application", - "value": "Sites.Selected" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read subject rights requests without a signed-in user.", - "displayName": "Read all subject rights requests", - "id": "ee1460f0-368b-4153-870a-4e1ca7e72c42", - "isEnabled": true, - "origin": "Application", - "value": "SubjectRightsRequest.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write subject rights requests without a signed in user.", - "displayName": "Read and write all subject rights requests", - "id": "8387eaa4-1a3c-41f5-b261-f888138e6041", - "isEnabled": true, - "origin": "Application", - "value": "SubjectRightsRequest.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read Azure AD synchronization information, without a signed-in user.", - "displayName": "Read all Azure AD synchronization data. ", - "id": "5ba43d2f-fa88-4db2-bd1c-a67c5f0fb1ce", - "isEnabled": true, - "origin": "Application", - "value": "Synchronization.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to configure the Azure AD synchronization service, without a signed-in user.", - "displayName": "Read and write all Azure AD synchronization data. ", - "id": "9b50c33d-700f-43b1-b2eb-87e89b703581", - "isEnabled": true, - "origin": "Application", - "value": "Synchronization.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to upload bulk user data to the identity synchronization service, without a signed-in user.", - "displayName": "Upload user data to the identity synchronization service", - "id": "db31e92a-b9ea-4d87-bf6a-75a37a9ca35a", - "isEnabled": true, - "origin": "Application", - "value": "SynchronizationData-User.Upload" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all users’ tasks and task lists in your organization, without a signed-in user.", - "displayName": "Read all users’ tasks and tasklist", - "id": "f10e1f91-74ed-437f-a6fd-d6ae88e26c1f", - "isEnabled": true, - "origin": "Application", - "value": "Tasks.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create, read, update and delete all users’ tasks and task lists in your organization, without a signed-in user", - "displayName": "Read and write all users’ tasks and tasklists", - "id": "44e666d1-d276-445b-a5fc-8815eeb81d55", - "isEnabled": true, - "origin": "Application", - "value": "Tasks.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create teams without a signed-in user. ", - "displayName": "Create teams", - "id": "23fc2474-f741-46ce-8465-674744c5c361", - "isEnabled": true, - "origin": "Application", - "value": "Team.Create" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Get a list of all teams, without a signed-in user.", - "displayName": "Get a list of all teams", - "id": "2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e", - "isEnabled": true, - "origin": "Application", - "value": "Team.ReadBasic.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read the members of all teams, without a signed-in user.", - "displayName": "Read the members of all teams", - "id": "660b7406-55f1-41ca-a0ed-0b035e182f3e", - "isEnabled": true, - "origin": "Application", - "value": "TeamMember.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Add and remove members from all teams, without a signed-in user. Also allows changing a team member's role, for example from owner to non-owner.", - "displayName": "Add and remove members from all teams", - "id": "0121dc95-1b9f-4aed-8bac-58c5ac466691", - "isEnabled": true, - "origin": "Application", - "value": "TeamMember.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Add and remove members from all teams, without a signed-in user. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.", - "displayName": "Add and remove members with non-owner role for all teams", - "id": "4437522e-9a86-4a41-a7da-e380edd4a97d", - "isEnabled": true, - "origin": "Application", - "value": "TeamMember.ReadWriteNonOwnerRole.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all users' teamwork activity feed, without a signed-in user.", - "displayName": "Read all users' teamwork activity feed", - "id": "70dec828-f620-4914-aa83-a29117306807", - "isEnabled": true, - "origin": "Application", - "value": "TeamsActivity.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.", - "displayName": "Send a teamwork activity to any user", - "id": "a267235f-af13-44dc-8385-c1dc93023186", - "isEnabled": true, - "origin": "Application", - "value": "TeamsActivity.Send" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the Teams apps that are installed in any chat, without a signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Read installed Teams apps for all chats", - "id": "cc7e7635-2586-41d6-adaa-a8d3bcad5ee5", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadForChat.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the Teams apps that are installed in any team, without a signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Read installed Teams apps for all teams", - "id": "1f615aea-6bf9-4b05-84bd-46388e138537", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadForTeam.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the Teams apps that are installed for any user, without a signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Read installed Teams apps for all users", - "id": "9ce09611-f4f7-4abd-a629-a05450422a97", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any chat, without a signed-in user. Gives the ability to manage permission grants for accessing those specific chats' data.", - "displayName": "Manage installation and permission grants of Teams apps for all chats", - "id": "6e74eff9-4a21-45d6-bc03-3a20f61f8281", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteAndConsentForChat.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Gives the ability to manage permission grants for accessing those specific teams' data.", - "displayName": "Manage installation and permission grants of Teams apps for all teams", - "id": "b0c13be0-8e20-4bc5-8c55-963c23a39ce9", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteAndConsentForTeam.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any user account, without a signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.", - "displayName": "Manage installation and permission grants of Teams apps in a user account", - "id": "32ca478f-f89e-41d0-aaf8-101deb7da510", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteAndConsentForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any chat, without a signed-in user, and manage its permission grants for accessing those specific chats' data.", - "displayName": "Allow the Teams app to manage itself and its permission grants for all chats", - "id": "ba1ba90b-2d8f-487e-9f16-80728d85bb5c", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForChat.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any team, without a signed-in user, and manage its permission grants for accessing those specific teams' data.", - "displayName": "Allow the Teams app to manage itself and its permission grants for all teams", - "id": "1e4be56c-312e-42b8-a2c9-009600d732c0", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any user account, without a signed-in user, and manage its permission grants for accessing those specific users' data.", - "displayName": "Allow the Teams app to manage itself and its permission grants in all user accounts", - "id": "a87076cf-6abd-4e56-8559-4dbdf41bef96", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any chat, without a signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Manage Teams apps for all chats", - "id": "9e19bae1-2623-4c4f-ab6e-2664615ff9a0", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteForChat.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Manage Teams apps for all teams", - "id": "5dad17ba-f6cc-4954-a5a2-a0dcc95154f0", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteForTeam.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps for any user, without a signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Manage Teams apps for all users", - "id": "74ef0291-ca83-4d02-8c7e-d2391e6a444f", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any chat, without a signed-in user.", - "displayName": "Allow the Teams app to manage itself for all chats", - "id": "73a45059-f39c-4baf-9182-4954ac0e55cf", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteSelfForChat.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in any team, without a signed-in user.", - "displayName": "Allow the Teams app to manage itself for all teams", - "id": "9f67436c-5415-4e7f-8ac1-3014a7132630", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteSelfForTeam.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself to any user, without a signed-in user.", - "displayName": "Allow the app to manage itself for all users", - "id": "908de74d-f8b2-4d6b-a9ed-2a17b3b78179", - "isEnabled": true, - "origin": "Application", - "value": "TeamsAppInstallation.ReadWriteSelfForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read all team's settings, without a signed-in user.", - "displayName": "Read all teams' settings", - "id": "242607bd-1d2c-432c-82eb-bdb27baa23ab", - "isEnabled": true, - "origin": "Application", - "value": "TeamSettings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read and change all teams' settings, without a signed-in user.", - "displayName": "Read and change all teams' settings", - "id": "bdd80a03-d9bc-451d-b7c4-ce7c63fe3c8f", - "isEnabled": true, - "origin": "Application", - "value": "TeamSettings.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create tabs in any team in Microsoft Teams, without a signed-in user. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.", - "displayName": "Create tabs in Microsoft Teams.", - "id": "49981c42-fd7b-4530-be03-e77b21aed25e", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.Create" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read the names and settings of tabs inside any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs. ", - "displayName": "Read tabs in Microsoft Teams.", - "id": "46890524-499a-4bb2-ad64-1476b4f3e1cf", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Read and write tabs in any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs.", - "displayName": "Read and write tabs in Microsoft Teams.", - "id": "a96d855f-016b-47d7-b51c-1218a98d791c", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for any chat, without a signed-in user.", - "displayName": "Allow the Teams app to manage all tabs for all chats", - "id": "fd9ce730-a250-40dc-bd44-8dc8d20f39ea", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.ReadWriteForChat.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in any team, without a signed-in user.", - "displayName": "Allow the Teams app to manage all tabs for all teams", - "id": "6163d4f4-fbf8-43da-a7b4-060fe85ed148", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.ReadWriteForTeam.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for any user, without a signed-in user.", - "displayName": "Allow the app to manage all tabs for all users", - "id": "425b4b59-d5af-45c8-832f-bb0b7402348a", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.ReadWriteForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for any chat, without a signed-in user.", - "displayName": "Allow the Teams app to manage only its own tabs for all chats", - "id": "9f62e4a2-a2d6-4350-b28b-d244728c4f86", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.ReadWriteSelfForChat.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in any team, without a signed-in user.", - "displayName": "Allow the Teams app to manage only its own tabs for all teams", - "id": "91c32b81-0ef0-453f-a5c7-4ce2e562f449", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.ReadWriteSelfForTeam.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for any user, without a signed-in user.", - "displayName": "Allow the Teams app to manage only its own tabs for all users", - "id": "3c42dec6-49e8-4a0a-b469-36cff0d9da93", - "isEnabled": true, - "origin": "Application", - "value": "TeamsTab.ReadWriteSelfForUser.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all available Teams Templates, without a signed-user.", - "displayName": "Read all available Teams Templates", - "id": "6323133e-1f6e-46d4-9372-ac33a0870636", - "isEnabled": true, - "origin": "Application", - "value": "TeamTemplates.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create chat and channel messages, without a signed in user. The app specifies which user appears as the sender, and can backdate the message to appear as if it was sent long ago. The messages can be sent to any chat or channel in the organization.", - "displayName": "Create chat and channel messages with anyone's identity and with any timestamp", - "id": "dfb0dd15-61de-45b2-be36-d6a69fba3c79", - "isEnabled": true, - "origin": "Application", - "value": "Teamwork.Migrate.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the Teams app settings without a signed-in user.", - "displayName": "Read Teams app settings", - "id": "475ebe88-f071-4bd7-af2b-642952bd4986", - "isEnabled": true, - "origin": "Application", - "value": "TeamworkAppSettings.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the Teams app settings without a signed-in user.", - "displayName": "Read and write Teams app settings", - "id": "ab5b445e-8f10-45f4-9c79-dd3f8062cc4e", - "isEnabled": true, - "origin": "Application", - "value": "TeamworkAppSettings.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allow the app to read the management data for Teams devices, without a signed-in user.", - "displayName": "Read Teams devices", - "id": "0591bafd-7c1c-4c30-a2a5-2b9aacb1dfe8", - "isEnabled": true, - "origin": "Application", - "value": "TeamworkDevice.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allow the app to read and write the management data for Teams devices, without a signed-in user.", - "displayName": "Read and write Teams devices", - "id": "79c02f5b-bd4f-4713-bc2c-a8a4a66e127b", - "isEnabled": true, - "origin": "Application", - "value": "TeamworkDevice.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read tags in Teams without a signed-in user.", - "displayName": "Read tags in Teams", - "id": "b74fd6c4-4bde-488e-9695-eeb100e4907f", - "isEnabled": true, - "origin": "Application", - "value": "TeamworkTag.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write tags in Teams without a signed-in user.", - "displayName": "Read and write tags in Teams", - "id": "a3371ca5-911d-46d6-901c-42c8c7a937d8", - "isEnabled": true, - "origin": "Application", - "value": "TeamworkTag.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all term store data, without a signed-in user. This includes all sets, groups and terms in the term store.", - "displayName": "Read all term store data", - "id": "ea047cc2-df29-4f3e-83a3-205de61501ca", - "isEnabled": true, - "origin": "Application", - "value": "TermStore.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, edit or write all term store data, without a signed-in user. This includes all sets, groups and terms in the term store.", - "displayName": "Read and write all term store data", - "id": "f12eb8d6-28e3-46e6-b2c0-b7e4dc69fc95", - "isEnabled": true, - "origin": "Application", - "value": "TermStore.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows an app to read your organization's threat assessment requests, without a signed-in user.", - "displayName": "Read threat assessment requests", - "id": "f8f035bb-2cce-47fb-8bf5-7baf3ecbee48", - "isEnabled": true, - "origin": "Application", - "value": "ThreatAssessment.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to run hunting queries, without a signed-in user.", - "displayName": "Run hunting queries", - "id": "dd98c7f5-2d42-42d3-a0e4-633161547251", - "isEnabled": true, - "origin": "Application", - "value": "ThreatHunting.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all the indicators for your organization, without a signed-in user.", - "displayName": "Read all threat indicators", - "id": "197ee4e9-b993-4066-898f-d6aecc55125b", - "isEnabled": true, - "origin": "Application", - "value": "ThreatIndicators.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), without a signed-in user.  It cannot update any threat indicators it does not own.", - "displayName": "Manage threat indicators this app creates or owns", - "id": "21792b6c-c986-4ffc-85de-df9da54b52fa", - "isEnabled": true, - "origin": "Application", - "value": "ThreatIndicators.ReadWrite.OwnedBy" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read threat intellgence information, such as indicators, observations, and and articles, without a signed in user.", - "displayName": "Read all Threat Intelligence Information", - "id": "e0b77adb-e790-44a3-b0a0-257d06303687", - "isEnabled": true, - "origin": "Application", - "value": "ThreatIntelligence.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's threat submissions and to view threat submission policies without a signed-in user.", - "displayName": "Read all of the organization's threat submissions", - "id": "86632667-cd15-4845-ad89-48a88e8412e1", - "isEnabled": true, - "origin": "Application", - "value": "ThreatSubmission.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's threat submissions and threat submission policies without a signed-in user. Also allows the app to create new threat submissions without a signed-in user.", - "displayName": "Read and write all of the organization's threat submissions", - "id": "d72bdbf4-a59b-405c-8b04-5995895819ac", - "isEnabled": true, - "origin": "Application", - "value": "ThreatSubmission.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read your organization's threat submission policies without a signed-in user. Also allows the app to create new threat submission polices without a signed-in user.", - "displayName": "Read and write all of the organization's threat submission policies", - "id": "926a6798-b100-4a20-a22f-a4918f13951d", - "isEnabled": true, - "origin": "Application", - "value": "ThreatSubmissionPolicy.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read trust framework key set properties without a signed-in user.", - "displayName": "Read trust framework key sets", - "id": "fff194f1-7dce-4428-8301-1badb5518201", - "isEnabled": true, - "origin": "Application", - "value": "TrustFrameworkKeySet.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write trust framework key set properties without a signed-in user.", - "displayName": "Read and write trust framework key sets", - "id": "4a771c9a-1cf2-4609-b88e-3d3e02d539cd", - "isEnabled": true, - "origin": "Application", - "value": "TrustFrameworkKeySet.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, without a signed-in user.", - "displayName": "Read all users' lifecycle information", - "id": "8556a004-db57-4d7a-8b82-97a13428e96f", - "isEnabled": true, - "origin": "Application", - "value": "User-LifeCycleInfo.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, without a signed-in user.", - "displayName": "Read and write all users' lifecycle information", - "id": "925f1248-0f97-47b9-8ec8-538c54e01325", - "isEnabled": true, - "origin": "Application", - "value": "User-LifeCycleInfo.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to enable and disable users' accounts, without a signed-in user.", - "displayName": "Enable and disable user accounts", - "id": "3011c876-62b7-4ada-afa2-506cbbecc68c", - "isEnabled": true, - "origin": "Application", - "value": "User.EnableDisableAccount.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).", - "displayName": "Export user's data", - "id": "405a51b5-8d8d-430b-9842-8be4b0e9f324", - "isEnabled": true, - "origin": "Application", - "value": "User.Export.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to invite guest users to the organization, without a signed-in user.", - "displayName": "Invite guest users to the organization", - "id": "09850681-111b-4a89-9bed-3f2cae46d706", - "isEnabled": true, - "origin": "Application", - "value": "User.Invite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read, update and delete identities that are associated with a user's account, without a signed in user. This controls the identities users can sign-in with.", - "displayName": "Manage all users' identities", - "id": "c529cfca-c91b-489c-af2b-d92990b66ce6", - "isEnabled": true, - "origin": "Application", - "value": "User.ManageIdentities.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read user profiles without a signed in user.", - "displayName": "Read all users' full profiles", - "id": "df021288-bdef-4463-88db-98f22de89214", - "isEnabled": true, - "origin": "Application", - "value": "User.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and update user profiles without a signed in user.", - "displayName": "Read and write all users' full profiles", - "id": "741f803b-c850-494e-b5df-cde7c675a1ca", - "isEnabled": true, - "origin": "Application", - "value": "User.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": " Allows the app to read authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", - "displayName": " Read all users' authentication methods", - "id": "38d9df27-64da-44fd-b7c5-a6fbac20248f", - "isEnabled": true, - "origin": "Application", - "value": "UserAuthenticationMethod.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and write authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods", - "displayName": "Read and write all users' authentication methods ", - "id": "50483e42-d915-4231-9639-7fdb7fd190e5", - "isEnabled": true, - "origin": "Application", - "value": "UserAuthenticationMethod.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to send, read, update and delete user’s notifications, without a signed-in user.", - "displayName": "Deliver and manage all user's notifications", - "id": "4e774092-a092-48d1-90bd-baad67c7eb47", - "isEnabled": true, - "origin": "Application", - "value": "UserNotification.ReadWrite.CreatedByApp" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all users' shift schedule preferences without a signed-in user.", - "displayName": "Read all user shift preferences", - "id": "de023814-96df-4f53-9376-1e2891ef5a18", - "isEnabled": true, - "origin": "Application", - "value": "UserShiftPreferences.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage all users' shift schedule preferences without a signed-in user.", - "displayName": "Read and write all user shift preferences", - "id": "d1eec298-80f3-49b0-9efb-d90e224798ac", - "isEnabled": true, - "origin": "Application", - "value": "UserShiftPreferences.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read virtual appointments for all users, without a signed-in user. The app must also be authorized to access an individual user’s data by the online meetings application access policy.", - "displayName": "Read all virtual appointments for users, as authorized by online meetings application access policy", - "id": "d4f67ec2-59b5-4bdc-b4af-d78f6f9c1954", - "isEnabled": true, - "origin": "Application", - "value": "VirtualAppointment.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the application to read and write virtual appointments for all users, without a signed-in user. The app must also be authorized to access an individual user’s data by the online meetings application access policy.", - "displayName": "Read-write all virtual appointments for users, as authorized by online meetings app access policy", - "id": "bf46a256-f47d-448f-ab78-f226fff08d40", - "isEnabled": true, - "origin": "Application", - "value": "VirtualAppointment.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read all virtual events without a signed-in user.", - "displayName": "Read all users' virtual events", - "id": "1dccb351-c4e4-4e09-a8d1-7a9ecbf027cc", - "isEnabled": true, - "origin": "Application", - "value": "VirtualEvent.Read.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to read and write all Windows update deployment settings for the organization without a signed-in user.", - "displayName": "Read and write all Windows update deployment settings", - "id": "7dd1be58-6e76-4401-bf8d-31d1e8180d5b", - "isEnabled": true, - "origin": "Application", - "value": "WindowsUpdates.ReadWrite.All" - }, - { - "allowedMemberTypes": ["Application"], - "description": "Allows the app to manage workforce integrations to synchronize data from Microsoft Teams Shifts, without a signed-in user.", - "displayName": "Read and write workforce integrations", - "id": "202bf709-e8e6-478e-bcfd-5d63c50b68e3", - "isEnabled": true, - "origin": "Application", - "value": "WorkforceIntegration.ReadWrite.All" - }, - { - "description": "Allows the app to read access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization.", - "displayName": "Read all access reviews that user can access", - "id": "ebfcd32b-babb-40f4-a14b-42706e83bd28", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read information on access reviews, reviewers, decisions and settings that you have access to.", - "userConsentDisplayName": "Read access reviews that you can access", - "value": "AccessReview.Read.All" - }, - { - "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization.", - "displayName": "Manage all access reviews that user can access", - "id": "e4aa47b9-9a69-4109-82ed-36ec70d85ff1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update and perform action on access reviews, reviewers, decisions and settings that you have access to.", - "userConsentDisplayName": "Manage access reviews that you can access", - "value": "AccessReview.ReadWrite.All" - }, - { - "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings for group and app memberships that the signed-in user has access to in the organization.", - "displayName": "Manage access reviews for group and app memberships", - "id": "5af8c3f5-baca-439a-97b0-ea58a435e269", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update and perform action on access reviews, reviewers, decisions and settings that you have access to.", - "userConsentDisplayName": "Manage access reviews for group and app memberships", - "value": "AccessReview.ReadWrite.Membership" - }, - { - "description": "Allows an app to read all acronyms that the signed-in user can access.", - "displayName": "Read all acronyms that the user can access", - "id": "9084c10f-a2d6-4713-8732-348def50fe02", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all acronyms you can access.", - "userConsentDisplayName": "Read all acronyms that you have access to", - "value": "Acronym.Read.All" - }, - { - "description": "Allows the app to read administrative units and administrative unit membership on behalf of the signed-in user.", - "displayName": "Read administrative units", - "id": "3361d15d-be43-4de6-b441-3c746d05163d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read administrative units and administrative unit membership on your behalf.", - "userConsentDisplayName": "Read administrative units", - "value": "AdministrativeUnit.Read.All" - }, - { - "description": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership on behalf of the signed-in user.", - "displayName": "Read and write administrative units", - "id": "7b8a2d34-6b3f-4542-a343-54651608ad81", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership on your behalf.", - "userConsentDisplayName": "Read and write administrative units", - "value": "AdministrativeUnit.ReadWrite.All" - }, - { - "description": "Allows the app to read terms of use agreements on behalf of the signed-in user.", - "displayName": "Read all terms of use agreements", - "id": "af2819c9-df71-4dd3-ade7-4d7c9dc653b7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read terms of use agreements on your behalf.", - "userConsentDisplayName": "Read all terms of use agreements", - "value": "Agreement.Read.All" - }, - { - "description": "Allows the app to read and write terms of use agreements on behalf of the signed-in user.", - "displayName": "Read and write all terms of use agreements", - "id": "ef4b5d93-3104-4664-9053-a5c49ab44218", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write terms of use agreements on your behalf.", - "userConsentDisplayName": "Read and write all terms of use agreements", - "value": "Agreement.ReadWrite.All" - }, - { - "description": "Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.", - "displayName": "Read user terms of use acceptance statuses", - "id": "0b7643bb-5336-476f-80b5-18fbfbc91806", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your terms of use acceptance statuses.", - "userConsentDisplayName": "Read your terms of use acceptance statuses", - "value": "AgreementAcceptance.Read" - }, - { - "description": "Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.", - "displayName": "Read terms of use acceptance statuses that user can access", - "id": "a66a5341-e66e-4897-9d52-c2df58c2bfb9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read terms of use acceptance statuses on your behalf.", - "userConsentDisplayName": "Read all terms of use acceptance statuses", - "value": "AgreementAcceptance.Read.All" - }, - { - "description": "Allows the app to read the signed-in user's activity statistics, such as how much time the user has spent on emails, in meetings, or in chat sessions.", - "displayName": "Read user activity statistics", - "id": "e03cf23f-8056-446a-8994-7d93dfc8b50e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your activity statistics, such as how much time you've spent on emails, in meetings, or in chat sessions.", - "userConsentDisplayName": "Read your activity statistics", - "value": "Analytics.Read" - }, - { - "description": "Allows the app to read the API connectors used in user authentication flows, on behalf of the signed-in user.", - "displayName": "Read API connectors for authentication flows", - "id": "1b6ff35f-31df-4332-8571-d31ea5a4893f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the API connectors used in user authentication flows, on your behalf.", - "userConsentDisplayName": "Read API connectors for authentication flows", - "value": "APIConnectors.Read.All" - }, - { - "description": "Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user.", - "displayName": "Read and write API connectors for authentication flows", - "id": "c67b52c5-7c69-48b6-9d48-7b3af3ded914", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, create and manage the API connectors used in user authentication flows, on your behalf.", - "userConsentDisplayName": "Read and write API connectors for authentication flows", - "value": "APIConnectors.ReadWrite.All" - }, - { - "description": "Allows the app to read the apps in the app catalogs.", - "displayName": "Read all app catalogs", - "id": "88e58d74-d3df-44f3-ad47-e89edf4472e4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read apps in the app catalogs.", - "userConsentDisplayName": "Read all app catalogs", - "value": "AppCatalog.Read.All" - }, - { - "description": "Allows the app to create, read, update, and delete apps in the app catalogs.", - "displayName": "Read and write to all app catalogs", - "id": "1ca167d5-1655-44a1-8adf-1414072e1ef9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create, read, update, and delete apps in the app catalogs.", - "userConsentDisplayName": "Read and write to all app catalogs", - "value": "AppCatalog.ReadWrite.All" - }, - { - "description": "Allows the app to submit application packages to the catalog and cancel submissions that are pending review on behalf of the signed-in user.", - "displayName": "Submit application packages to the catalog and cancel pending submissions", - "id": "3db89e36-7fa6-4012-b281-85f3d9d9fd2e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to submit application packages to the catalog and cancel submissions that are pending review on your behalf.", - "userConsentDisplayName": "Submit application packages to your organization's catalog and cancel pending submissions", - "value": "AppCatalog.Submit" - }, - { - "description": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.", - "displayName": "Read the trusted certificate authority configuration for applications", - "id": "af281d3a-030d-4122-886e-146fb30a0413", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on your behalf.", - "userConsentDisplayName": "Read the trusted certificate authority configuration for applications", - "value": "AppCertTrustConfiguration.Read.All" - }, - { - "description": "Allows the app to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.", - "displayName": "Read and write the trusted certificate authority configuration for applications", - "id": "4bae2ed4-473e-4841-a493-9829cfd51d48", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on your behalf.", - "userConsentDisplayName": "Read and write the trusted certificate authority configuration for applications", - "value": "AppCertTrustConfiguration.ReadWrite.All" - }, - { - "description": "Allows the app to read and write other apps' remote desktop security configuration, on behalf of the signed-in user.", - "displayName": "Read and write the remote desktop security configuration for apps", - "id": "ffa91d43-2ad8-45cc-b592-09caddeb24bb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write other apps' remote desktop security configuration, on your behalf.", - "userConsentDisplayName": "Read and write the remote desktop security configuration for apps", - "value": "Application-RemoteDesktopConfig.ReadWrite.All" - }, - { - "description": "Allows the app to read applications and service principals on behalf of the signed-in user.", - "displayName": "Read applications", - "id": "c79f8feb-a9db-4090-85f9-90d820caa0eb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read applications and service principals on your behalf.", - "userConsentDisplayName": "Read applications", - "value": "Application.Read.All" - }, - { - "description": "Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants.", - "displayName": "Read and write all applications", - "id": "bdfbf15f-ee85-4955-8675-146e8e5296b5", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create, read, update and delete applications and service principals on your behalf. Does not allow management of consent grants.", - "userConsentDisplayName": "Read and write applications", - "value": "Application.ReadWrite.All" - }, - { - "description": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on behalf of the signed-in user.", - "displayName": "Manage app permission grants and app role assignments", - "id": "84bccea3-f856-4a8a-967b-dbe0a3d53a64", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on your behalf.", - "userConsentDisplayName": "Manage app permission grants and app role assignments", - "value": "AppRoleAssignment.ReadWrite.All" - }, - { - "description": "Allows the app to read attack simulation and training data for an organization for the signed-in user.", - "displayName": "Read attack simulation data of an organization", - "id": "104a7a4b-ca76-4677-b7e7-2f4bc482f381", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read attack simulation and training data for an organization on your behalf.", - "userConsentDisplayName": "Read attack simulation data of an organization", - "value": "AttackSimulation.Read.All" - }, - { - "description": "Allows the app to read, create, and update attack simulation and training data for an organization for the signed-in user.", - "displayName": "Read, create, and update attack simulation data of an organization", - "id": "27608d7c-2c66-4cad-a657-951d575f5a60", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, create, and update attack simulation and training data for an organization on your behalf.", - "userConsentDisplayName": "Read, create, and update attack simulation data of an organization", - "value": "AttackSimulation.ReadWrite.All" - }, - { - "description": "Allows the app to read and query your audit log activities, on behalf of the signed-in user.", - "displayName": "Read audit log data", - "id": "e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and query your audit log activities, on your behalf.", - "userConsentDisplayName": "Read audit log data", - "value": "AuditLog.Read.All" - }, - { - "description": "Allows the app to read all authentication context information in your organization on behalf of the signed-in user.", - "displayName": "Read all authentication context information", - "id": "57b030f1-8c35-469c-b0d9-e4a077debe70", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all authentication context information in your organization on your behalf.", - "userConsentDisplayName": "Read all authentication context information", - "value": "AuthenticationContext.Read.All" - }, - { - "description": "Allows the app to read and update all authentication context information in your organization on behalf of the signed-in user.", - "displayName": "Read and write all authentication context information", - "id": "ba6d575a-1344-4516-b777-1404f5593057", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and update all authentication context information in your organization on your behalf.", - "userConsentDisplayName": "Read and write all authentication context information", - "value": "AuthenticationContext.ReadWrite.All" - }, - { - "description": "Allows the app to read and write the billing configuration on all applications on behalf of the signed-in user. ", - "displayName": "Read and write application billing configuration", - "id": "2bf6d319-dfca-4c22-9879-f88dcfaee6be", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the billing configuration on all applications on your behalf", - "userConsentDisplayName": "Read and write application billing configuration", - "value": "BillingConfiguration.ReadWrite.All" - }, - { - "description": "Allows the app to read BitLocker keys on behalf of the signed-in user, for their owned devices. Allows read of the recovery key.", - "displayName": "Read BitLocker keys", - "id": "b27a61ec-b99c-4d6a-b126-c4375d08ae30", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read BitLocker keys for your owned devices. Allows read of the recovery key.", - "userConsentDisplayName": "Read your BitLocker keys", - "value": "BitlockerKey.Read.All" - }, - { - "description": "Allows the app to read basic BitLocker key properties on behalf of the signed-in user, for their owned devices. Does not allow read of the recovery key itself.", - "displayName": "Read BitLocker keys basic information", - "id": "5a107bfc-4f00-4e1a-b67e-66451267bc68", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read basic BitLocker key properties for your owned devices. Does not allow read of the recovery key itself.", - "userConsentDisplayName": "Read your BitLocker keys basic information", - "value": "BitlockerKey.ReadBasic.All" - }, - { - "description": "Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.", - "displayName": "Manage bookings information", - "id": "7f36b48e-542f-4d3b-9bcb-8406f0ab9fdb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on your behalf.", - "userConsentDisplayName": "Manage bookings information", - "value": "Bookings.Manage.All" - }, - { - "description": "Allows an app to read bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.", - "displayName": "Read bookings information", - "id": "33b1df99-4b29-4548-9339-7a7b83eaeebc", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read bookings appointments, businesses, customers, services, and staff on your behalf.", - "userConsentDisplayName": "Read bookings information", - "value": "Bookings.Read.All" - }, - { - "description": "Allows an app to read and write bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user. Does not allow create, delete and publish of booking businesses.", - "displayName": "Read and write bookings information", - "id": "948eb538-f19d-4ec5-9ccc-f059e1ea4c72", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read and write Bookings appointments, businesses, customers, services, and staff on your behalf. Does not allow create, delete and publish of booking businesses.", - "userConsentDisplayName": "Read and write bookings information", - "value": "Bookings.ReadWrite.All" - }, - { - "description": "Allows an app to read and write bookings appointments and customers, and additionally allows read businesses information, services, and staff on behalf of the signed-in user.", - "displayName": "Read and write booking appointments", - "id": "02a5a114-36a6-46ff-a102-954d89d9ab02", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read and write bookings appointments and customers, and additionally allows read businesses information, services, and staff on your behalf.", - "userConsentDisplayName": "Read and write booking appointments", - "value": "BookingsAppointment.ReadWrite.All" - }, - { - "description": "Allows an app to read all bookmarks that the signed-in user can access.", - "displayName": "Read all bookmarks that the user can access", - "id": "98b17b35-f3b1-4849-a85f-9f13733002f0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all bookmarks you can access.", - "userConsentDisplayName": "Read all bookmarks that you have access to", - "value": "Bookmark.Read.All" - }, - { - "description": "Allows an app to read the browser site lists configured for your organization, on behalf of the signed-in user.", - "displayName": "Read browser site lists for your organization", - "id": "fb9be2b7-a7fc-4182-aec1-eda4597c43d5", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read the browser site lists configured for your organization, on your behalf.", - "userConsentDisplayName": "Read browser site lists for your organization", - "value": "BrowserSiteLists.Read.All" - }, - { - "description": "Allows an app to read and write the browser site lists configured for your organization, on behalf of the signed-in user.", - "displayName": "Read and write browser site lists for your organization", - "id": "83b34c85-95bf-497b-a04e-b58eca9d49d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read and write the browser site lists configured for your organization, on your behalf.", - "userConsentDisplayName": "Read and write browser site lists for your organization", - "value": "BrowserSiteLists.ReadWrite.All" - }, - { - "description": "Allows the app to read the configurations of your organization's business scenarios, on behalf of the signed-in user.", - "displayName": "Read business scenario configurations", - "id": "d16480b2-e469-4118-846b-d3d177327bee", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the configurations of your organization's business scenarios, on your behalf.", - "userConsentDisplayName": "Read business scenario configurations", - "value": "BusinessScenarioConfig.Read.All" - }, - { - "description": "Allows the app to read the configurations of business scenarios it owns, on behalf of the signed-in user.", - "displayName": "Read business scenario configurations this app creates or owns", - "id": "c47e7b6e-d6f1-4be9-9ffd-1e00f3e32892", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the configurations of business scenarios it owns, on your behalf.", - "userConsentDisplayName": "Read business scenario configurations this app creates or owns", - "value": "BusinessScenarioConfig.Read.OwnedBy" - }, - { - "description": "Allows the app to read and write the configurations of your organization's business scenarios, on behalf of the signed-in user.", - "displayName": "Read and write business scenario configurations", - "id": "755e785b-b658-446f-bb22-5a46abd029ea", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the configurations of your organization's business scenarios, on your behalf.", - "userConsentDisplayName": "Read and write business scenario configurations", - "value": "BusinessScenarioConfig.ReadWrite.All" - }, - { - "description": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, on behalf of the signed-in user.", - "displayName": "Read and write business scenario configurations this app creates or owns", - "id": "b3b7fcff-b4d4-4230-bf6f-90bd91285395", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, on your behalf.", - "userConsentDisplayName": "Read and write business scenario configurations this app creates or owns", - "value": "BusinessScenarioConfig.ReadWrite.OwnedBy" - }, - { - "description": "Allows the app to read all data associated with the business scenarios it owns. Data access will be attributed to the signed-in user.", - "displayName": "Read all data for business scenarios this app creates or owns", - "id": "25b265c4-5d34-4e44-952d-b567f6d3b96d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all data associated with the business scenarios it owns. Data access will be attributed to you.", - "userConsentDisplayName": "Read data for business scenarios this app creates or owns", - "value": "BusinessScenarioData.Read.OwnedBy" - }, - { - "description": "Allows the app to fully manage all data associated with the business scenarios it owns. Data access and changes will be attributed to the signed-in user.", - "displayName": "Read and write all data for business scenarios this app creates or owns", - "id": "19932d57-2952-4c60-8634-3655c79fc527", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to fully manage all data associated with the business scenarios it owns. These changes will be attributed to you.", - "userConsentDisplayName": "Read and write data for business scenarios this app creates or owns", - "value": "BusinessScenarioData.ReadWrite.OwnedBy" - }, - { - "description": "Allows the app to read events in user calendars . ", - "displayName": "Read user calendars ", - "id": "465a38f9-76ea-45b9-9f34-9e8b0d4b0b42", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read events in your calendars. ", - "userConsentDisplayName": "Read your calendars ", - "value": "Calendars.Read" - }, - { - "description": "Allows the app to read events in all calendars that the user can access, including delegate and shared calendars.", - "displayName": "Read user and shared calendars", - "id": "2b9c4092-424d-4249-948d-b43879977640", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read events in all calendars that you can access, including delegate and shared calendars. ", - "userConsentDisplayName": "Read calendars you can access", - "value": "Calendars.Read.Shared" - }, - { - "description": "Allows the app to read events in user calendars, except for properties such as body, attachments, and extensions.", - "displayName": "Read basic details of user calendars", - "id": "662d75ba-a364-42ad-adee-f5f880ea4878", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read events in your calendars, except for properties such as body, attachments, and extensions.", - "userConsentDisplayName": "Read basic details of your calendars", - "value": "Calendars.ReadBasic" - }, - { - "description": "Allows the app to create, read, update, and delete events in user calendars. ", - "displayName": "Have full access to user calendars ", - "id": "1ec239c2-d7c9-4623-a91a-a9775856bb36", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create and delete events in your calendars. ", - "userConsentDisplayName": "Have full access to your calendars ", - "value": "Calendars.ReadWrite" - }, - { - "description": "Allows the app to create, read, update and delete events in all calendars in the organization user has permissions to access. This includes delegate and shared calendars.", - "displayName": "Read and write user and shared calendars", - "id": "12466101-c9b8-439a-8589-dd09ee67e8e9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create and delete events in all calendars in your organization you have permissions to access. This includes delegate and shared calendars.", - "userConsentDisplayName": "Read and write to your and shared calendars", - "value": "Calendars.ReadWrite.Shared" - }, - { - "description": "Create channels in any team, on behalf of the signed-in user.", - "displayName": "Create channels", - "id": "101147cf-4178-4455-9d58-02b5c164e759", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Create channels in any team, on your behalf.", - "userConsentDisplayName": "Create channels", - "value": "Channel.Create" - }, - { - "description": "Delete channels in any team, on behalf of the signed-in user.", - "displayName": "Delete channels", - "id": "cc83893a-e232-4723-b5af-bd0b01bcfe65", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Delete channels in any team, on your behalf.", - "userConsentDisplayName": "Delete channels", - "value": "Channel.Delete.All" - }, - { - "description": "Read channel names and channel descriptions, on behalf of the signed-in user.", - "displayName": "Read the names and descriptions of channels", - "id": "9d8982ae-4365-4f57-95e9-d6032a4c0b87", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read channel names and channel descriptions, on your behalf.", - "userConsentDisplayName": "Read the names and descriptions of channels", - "value": "Channel.ReadBasic.All" - }, - { - "description": "Read the members of channels, on behalf of the signed-in user.", - "displayName": "Read the members of channels", - "id": "2eadaff8-0bce-4198-a6b9-2cfc35a30075", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read the members of channels, on your behalf.", - "userConsentDisplayName": "Read the members of teams and channels", - "value": "ChannelMember.Read.All" - }, - { - "description": "Add and remove members from channels, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.", - "displayName": "Add and remove members from channels", - "id": "0c3e411a-ce45-4cd1-8f30-f99a3efa7b11", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Add and remove members from channels, on your behalf. Also allows changing a member's role, for example from owner to non-owner.", - "userConsentDisplayName": "Add and remove members from teams and channels", - "value": "ChannelMember.ReadWrite.All" - }, - { - "description": "Allows an app to edit channel messages in Microsoft Teams, on behalf of the signed-in user.", - "displayName": "Edit user's channel messages", - "id": "2b61aa8a-6d36-4b2f-ac7b-f29867937c53", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to edit channel messages in Microsoft Teams, on your behalf.", - "userConsentDisplayName": "Edit your channel messages", - "value": "ChannelMessage.Edit" - }, - { - "description": "Allows an app to read a channel's messages in Microsoft Teams, on behalf of the signed-in user.", - "displayName": "Read user channel messages", - "id": "767156cb-16ae-4d10-8f8b-41b657c8c8c8", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read a channel's messages in Microsoft Teams, on your behalf.", - "userConsentDisplayName": "Read your channel messages", - "value": "ChannelMessage.Read.All" - }, - { - "description": "Allows the app to read and write channel messages, on behalf of the signed-in user. This doesn't allow the app to edit the policyViolation of a channel message.", - "displayName": "Read and write user channel messages", - "id": "5922d31f-46c8-4404-9eaf-2117e390a8a4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write channel messages, on your behalf. This doesn't allow the app to edit the policyViolation of a channel message.", - "userConsentDisplayName": "Read and write user channel messages", - "value": "ChannelMessage.ReadWrite" - }, - { - "description": "Allows an app to send channel messages in Microsoft Teams, on behalf of the signed-in user.", - "displayName": "Send channel messages", - "id": "ebf0f66e-9fb1-49e4-a278-222f76911cf4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to send channel messages in Microsoft Teams, on your behalf.", - "userConsentDisplayName": "Send channel messages", - "value": "ChannelMessage.Send" - }, - { - "description": "Read all channel names, channel descriptions, and channel settings, on behalf of the signed-in user.", - "displayName": "Read the names, descriptions, and settings of channels", - "id": "233e0cf1-dd62-48bc-b65b-b38fe87fcf8e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read all channel names, channel descriptions, and channel settings, on your behalf.", - "userConsentDisplayName": "Read the names, descriptions, and settings of channels", - "value": "ChannelSettings.Read.All" - }, - { - "description": "Read and write the names, descriptions, and settings of all channels, on behalf of the signed-in user.", - "displayName": "Read and write the names, descriptions, and settings of channels", - "id": "d649fb7c-72b4-4eec-b2b4-b15acf79e378", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read and write the names, descriptions, and settings of all channels, on your behalf.", - "userConsentDisplayName": "Read and write the names, descriptions, and settings of channels", - "value": "ChannelSettings.ReadWrite.All" - }, - { - "description": "Allows the app to create chats on behalf of the signed-in user.", - "displayName": "Create chats", - "id": "38826093-1258-4dea-98f0-00003be2b8d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create chats on your behalf. ", - "userConsentDisplayName": "Create chats", - "value": "Chat.Create" - }, - { - "description": "Allows the app to delete and recover deleted chats, on behalf of the signed-in user.", - "displayName": "Delete and recover deleted chats", - "id": "bb64e6fc-6b6d-4752-aea0-dd922dbba588", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to delete and recover deleted chats, on your behalf.", - "userConsentDisplayName": "Delete and recover deleted chats", - "value": "Chat.ManageDeletion.All" - }, - { - "description": "Allows an app to read 1 on 1 or group chats threads, on behalf of the signed-in user.", - "displayName": "Read user chat messages", - "id": "f501c180-9344-439a-bca0-6cbf209fd270", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read your 1 on 1 or group chat messages in Microsoft Teams, on your behalf.", - "userConsentDisplayName": "Read your chat messages", - "value": "Chat.Read" - }, - { - "description": "Allows an app to read the members and descriptions of one-to-one and group chat threads, on behalf of the signed-in user.", - "displayName": "Read names and members of user chat threads", - "id": "9547fcb5-d03f-419d-9948-5928bbf71b0f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read the members and descriptions of one-to-one and group chat threads, on your behalf.", - "userConsentDisplayName": "Read names and members of your chat threads", - "value": "Chat.ReadBasic" - }, - { - "description": "Allows an app to read and write 1 on 1 or group chats threads, on behalf of the signed-in user.", - "displayName": "Read and write user chat messages", - "id": "9ff7295e-131b-4d94-90e1-69fde507ac11", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read and write your 1 on 1 or group chat messages in Microsoft Teams, on your behalf.", - "userConsentDisplayName": "Read and write your chat messages", - "value": "Chat.ReadWrite" - }, - { - "description": "Read the members of chats, on behalf of the signed-in user.", - "displayName": "Read the members of chats", - "id": "c5a9e2b1-faf6-41d4-8875-d381aa549b24", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read the members of chats, on your behalf.", - "userConsentDisplayName": "Read the members of chats", - "value": "ChatMember.Read" - }, - { - "description": "Add and remove members from chats, on behalf of the signed-in user.", - "displayName": "Add and remove members from chats", - "id": "dea13482-7ea6-488f-8b98-eb5bbecf033d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Add and remove members from chats, on your behalf.", - "userConsentDisplayName": "Add and remove members from chats", - "value": "ChatMember.ReadWrite" - }, - { - "description": "Allows an app to read one-to-one and group chat messages, on behalf of the signed-in user.", - "displayName": "Read user chat messages", - "id": "cdcdac3a-fd45-410d-83ef-554db620e5c7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read one-to-one or group chat messages in Microsoft Teams, on your behalf.", - "userConsentDisplayName": "Read user chat messages", - "value": "ChatMessage.Read" - }, - { - "description": "Allows an app to send one-to-one and group chat messages in Microsoft Teams, on behalf of the signed-in user.", - "displayName": "Send user chat messages", - "id": "116b7235-7cc6-461e-b163-8e55691d839e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to send one-to-one and group chat messages in Microsoft Teams, on your behalf.", - "userConsentDisplayName": "Send chat messages", - "value": "ChatMessage.Send" - }, - { - "description": "Allows the app to read details of discovered cloud apps in the organization, on behalf of the signed in user.", - "displayName": "Read discovered cloud applications data", - "id": "ad46d60e-1027-4b75-af88-7c14ccf43a19", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read details of discovered cloud apps in the organization, on your behalf.", - "userConsentDisplayName": "Read discovered cloud application data", - "value": "CloudApp-Discovery.Read.All" - }, - { - "description": "Allows the app to read the properties of Cloud PCs on behalf of the signed-in user.", - "displayName": "Read Cloud PCs", - "id": "5252ec4e-fd40-4d92-8c68-89dd1d3c6110", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the properties of Cloud PCs, on your behalf.", - "userConsentDisplayName": "Read Cloud PCs", - "value": "CloudPC.Read.All" - }, - { - "description": "Allows the app to read and write the properties of Cloud PCs on behalf of the signed-in user.", - "displayName": "Read and write Cloud PCs", - "id": "9d77138f-f0e2-47ba-ab33-cd246c8b79d1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the properties of Cloud PCs, on your behalf.", - "userConsentDisplayName": "Read and write Cloud PCs", - "value": "CloudPC.ReadWrite.All" - }, - { - "description": "Allows the app to read consent requests and approvals on behalf of the signed-in user.", - "displayName": "Read consent requests", - "id": "f3bfad56-966e-4590-a536-82ecf548ac1e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read consent requests and approvals, on your behalf.", - "userConsentDisplayName": "Read consent requests", - "value": "ConsentRequest.Read.All" - }, - { - "description": "Allows the app to read app consent requests and approvals, and deny or approve those requests on behalf of the signed-in user.", - "displayName": "Read and write consent requests", - "id": "497d9dfa-3bd1-481a-baab-90895e54568c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read app consent requests for your approval, and deny or approve those request on your behalf.", - "userConsentDisplayName": "Read and write consent requests", - "value": "ConsentRequest.ReadWrite.All" - }, - { - "description": "Allows the app to read user contacts. ", - "displayName": "Read user contacts ", - "id": "ff74d97f-43af-4b68-9f2a-b77ee6968c5d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read contacts in your contact folders. ", - "userConsentDisplayName": "Read your contacts ", - "value": "Contacts.Read" - }, - { - "description": "Allows the app to read contacts a user has permissions to access, including their own and shared contacts.", - "displayName": "Read user and shared contacts", - "id": "242b9d9e-ed24-4d09-9a52-f43769beb9d4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read contacts you have permissions to access, including your own and shared contacts.", - "userConsentDisplayName": "Read your and shared contacts", - "value": "Contacts.Read.Shared" - }, - { - "description": "Allows the app to create, read, update, and delete user contacts. ", - "displayName": "Have full access to user contacts ", - "id": "d56682ec-c09e-4743-aaf4-1a3aac4caa21", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create and delete contacts in your contact folders. ", - "userConsentDisplayName": "Have full access of your contacts ", - "value": "Contacts.ReadWrite" - }, - { - "description": "Allows the app to create, read, update, and delete contacts a user has permissions to, including their own and shared contacts.", - "displayName": "Read and write user and shared contacts", - "id": "afb6c84b-06be-49af-80bb-8f3f77004eab", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create, and delete contacts you have permissions to access, including your own and shared contacts.", - "userConsentDisplayName": "Read and write to your and shared contacts", - "value": "Contacts.ReadWrite.Shared" - }, - { - "description": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user.", - "displayName": "Read cross-tenant basic information", - "id": "81594d25-e88e-49cf-ac8c-fecbff49f994", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on your behalf.", - "userConsentDisplayName": "Read cross-tenant basic information", - "value": "CrossTenantInformation.ReadBasic.All" - }, - { - "description": "Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.", - "displayName": "Read shared cross-tenant user profile and export data", - "id": "cb1ba48f-d22b-4325-a07f-74135a62ee41", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to list and query shared user profile information associated with the current tenant on your behalf.  It also permits the application to export your external user data (e.g. customer content or system-generated logs), associated with the current tenant on your behalf.", - "userConsentDisplayName": "Read shared cross-tenant user profile and export data", - "value": "CrossTenantUserProfileSharing.Read" - }, - { - "description": "Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.", - "displayName": "Read all shared cross-tenant user profiles and export their data", - "id": "759dcd16-3c90-463c-937e-abf89f991c18", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on your behalf.  It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on your behalf.", - "userConsentDisplayName": "Read any shared cross-tenant user profiles and export data", - "value": "CrossTenantUserProfileSharing.Read.All" - }, - { - "description": "Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.", - "displayName": "Read shared cross-tenant user profile and export or delete data", - "id": "eed0129d-dc60-4f30-8641-daf337a39ffd", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to list and query shared user profile information associated with the current tenant on your behalf.  It also permits the application to export and remove your external user data (e.g. customer content or system-generated logs), associated with the current tenant on your behalf.", - "userConsentDisplayName": "Read shared cross-tenant user profile and export or delete data", - "value": "CrossTenantUserProfileSharing.ReadWrite" - }, - { - "description": "Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.", - "displayName": "Read all shared cross-tenant user profiles and export or delete their data", - "id": "64dfa325-cbf8-48e3-938d-51224a0cac01", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on your behalf.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on your behalf.", - "userConsentDisplayName": "Read any shared cross-tenant user profiles and export or delete data", - "value": "CrossTenantUserProfileSharing.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization's custom authentication extensions on behalf of the signed-in user.", - "displayName": "Read your oganization's custom authentication extensions", - "id": "b2052569-c98c-4f36-a5fb-43e5c111e6d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's custom authentication extensions on your behalf.", - "userConsentDisplayName": "Read your organization's custom authentication extensions", - "value": "CustomAuthenticationExtension.Read.All" - }, - { - "description": "Allows the app to read or write your organization's custom authentication extensions on behalf of the signed-in user.", - "displayName": "Read and write your organization's custom authentication extensions", - "id": "8dfcf82f-15d0-43b3-bc78-a958a13a5792", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read or write your organization's custom authentication extensions on your behalf.", - "userConsentDisplayName": "Read and write your organization's custom authentication extensions", - "value": "CustomAuthenticationExtension.ReadWrite.All" - }, - { - "description": "Allows the app to read custom security attribute assignments for all principals in the tenant on behalf of a signed in user.", - "displayName": "Read custom security attribute assignments", - "id": "b46ffa80-fe3d-4822-9a1a-c200932d54d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read custom security attribute assignments for all principals in the tenant on your behalf.", - "userConsentDisplayName": "Read custom security attribute assignments", - "value": "CustomSecAttributeAssignment.Read.All" - }, - { - "description": "Allows the app to read and write custom security attribute assignments for all principals in the tenant on behalf of a signed in user.", - "displayName": "Read and write custom security attribute assignments", - "id": "ca46335e-8453-47cd-a001-8459884efeae", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write custom security attribute assignments for all principals in the tenant on your behalf.", - "userConsentDisplayName": "Read and write custom security attribute assignments", - "value": "CustomSecAttributeAssignment.ReadWrite.All" - }, - { - "description": "Allows the app to read audit logs for events that contain information about custom security attributes, on behalf of the signed-in user.", - "displayName": "Read custom security attribute audit logs", - "id": "1fcdeaab-b519-44dd-bffc-ed1fd15a24e0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read custom security attributes audit logs on your behalf.", - "userConsentDisplayName": "Read custom security attribute audit logs", - "value": "CustomSecAttributeAuditLogs.Read.All" - }, - { - "description": "Allows the app to read custom security attribute definitions for the tenant on behalf of a signed in user.", - "displayName": "Read custom security attribute definitions", - "id": "ce026878-a0ff-4745-a728-d4fedd086c07", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read custom security attribute definitions for the tenant on your behalf.", - "userConsentDisplayName": "Read custom security attribute definitions", - "value": "CustomSecAttributeDefinition.Read.All" - }, - { - "description": "Allows the app to read and write custom security attribute definitions for the tenant on behalf of a signed in user.", - "displayName": "Read and write custom security attribute definitions", - "id": "8b0160d4-5743-482b-bb27-efc0a485ca4a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write custom security attribute definitions for the tenant on your behalf.", - "userConsentDisplayName": "Read and write custom security attribute definitions", - "value": "CustomSecAttributeDefinition.ReadWrite.All" - }, - { - "description": "Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on behalf of the signed-in user.", - "displayName": "Read Delegated Admin relationships with customers", - "id": "0c0064ea-477b-4130-82a5-4c2cc4ff68aa", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read details of Delegated Admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on your behalf.", - "userConsentDisplayName": "Read Delegated Admin relationships with customers", - "value": "DelegatedAdminRelationship.Read.All" - }, - { - "description": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers as well as role assignments to security groups for active Delegated Admin relationships on behalf of the signed-in user.", - "displayName": "Manage Delegated Admin relationships with customers", - "id": "885f682f-a990-4bad-a642-36736a74b0c7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers and role assignments to security groups for active Delegated Admin relationships on your behalf.", - "userConsentDisplayName": "Manage Delegated Admin relationships with customers", - "value": "DelegatedAdminRelationship.ReadWrite.All" - }, - { - "description": "Allows the app to read delegated permission grants, on behalf of the signed in user.", - "displayName": "Read delegated permission grants", - "id": "a197cdc4-a8e8-4d49-9d35-4ca7c83887b4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read delegated permission grants, on your behalf.", - "userConsentDisplayName": "Read delegated permission grants", - "value": "DelegatedPermissionGrant.Read.All" - }, - { - "description": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on behalf of the signed in user.", - "displayName": "Manage all delegated permission grants", - "id": "41ce6ca6-6826-4807-84f1-1c82854f7ee5", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on your behalf. ", - "userConsentDisplayName": "Manage all delegated permission grants", - "value": "DelegatedPermissionGrant.ReadWrite.All" - }, - { - "description": "Allows the app to launch another app or communicate with another app on a user's device on behalf of the signed-in user.", - "displayName": "Communicate with user devices", - "id": "bac3b9c2-b516-4ef4-bd3b-c2ef73d8d804", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to launch another app or communicate with another app on a device that you own.", - "userConsentDisplayName": "Communicate with your other devices", - "value": "Device.Command" - }, - { - "description": "Allows the app to read a user's list of devices on behalf of the signed-in user.", - "displayName": "Read user devices", - "id": "11d4cd79-5ba5-460f-803f-e22c8ab85ccd", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to see your list of devices.", - "userConsentDisplayName": "View your list of devices", - "value": "Device.Read" - }, - { - "description": "Allows the app to read your organization's devices' configuration information on behalf of the signed-in user.", - "displayName": "Read all devices", - "id": "951183d1-1a61-466f-a6d1-1fde911bfd95", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read devices' configuration information on your behalf.", - "userConsentDisplayName": "Read all devices", - "value": "Device.Read.All" - }, - { - "description": "Allows the app to read device local credential properties including passwords, on behalf of the signed-in user.", - "displayName": "Read device local credential passwords", - "id": "280b3b69-0437-44b1-bc20-3b2fca1ee3e9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read device local credential properties including passwords, on your behalf.", - "userConsentDisplayName": "Read device local credential passwords", - "value": "DeviceLocalCredential.Read.All" - }, - { - "description": "Allows the app to read device local credential properties excluding passwords, on behalf of the signed-in user.", - "displayName": "Read device local credential properties", - "id": "9917900e-410b-4d15-846e-42a357488545", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read device local credential properties excluding passwords, on your behalf.", - "userConsentDisplayName": "Read device local credential properties", - "value": "DeviceLocalCredential.ReadBasic.All" - }, - { - "description": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", - "displayName": "Read Microsoft Intune apps", - "id": "4edf5f54-4666-44af-9de9-0144fb4b6e8c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", - "userConsentDisplayName": "Read Microsoft Intune apps", - "value": "DeviceManagementApps.Read.All" - }, - { - "description": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", - "displayName": "Read and write Microsoft Intune apps", - "id": "7b3f05d5-f68c-4b8d-8c59-a2ecd12f24af", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", - "userConsentDisplayName": "Read and write Microsoft Intune apps", - "value": "DeviceManagementApps.ReadWrite.All" - }, - { - "description": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", - "displayName": "Read Microsoft Intune Device Configuration and Policies", - "id": "f1493658-876a-4c87-8fa7-edb559b3476a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", - "userConsentDisplayName": "Read Microsoft Intune Device Configuration and Policies", - "value": "DeviceManagementConfiguration.Read.All" - }, - { - "description": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", - "displayName": "Read and write Microsoft Intune Device Configuration and Policies", - "id": "0883f392-0a7a-443d-8c76-16a6d39c7b63", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", - "userConsentDisplayName": "Read and write Microsoft Intune Device Configuration and Policies", - "value": "DeviceManagementConfiguration.ReadWrite.All" - }, - { - "description": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.", - "displayName": "Perform user-impacting remote actions on Microsoft Intune devices", - "id": "3404d2bf-2b13-457e-a330-c24615765193", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.", - "userConsentDisplayName": "Perform user-impacting remote actions on Microsoft Intune devices", - "value": "DeviceManagementManagedDevices.PrivilegedOperations.All" - }, - { - "description": "Allows the app to read the properties of devices managed by Microsoft Intune.", - "displayName": "Read Microsoft Intune devices", - "id": "314874da-47d6-4978-88dc-cf0d37f0bb82", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the properties of devices managed by Microsoft Intune.", - "userConsentDisplayName": "Read devices Microsoft Intune devices", - "value": "DeviceManagementManagedDevices.Read.All" - }, - { - "description": "Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device’s owner.", - "displayName": "Read and write Microsoft Intune devices", - "id": "44642bfe-8385-4adc-8fc6-fe3cb2c375c3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device’s owner.", - "userConsentDisplayName": "Read and write Microsoft Intune devices", - "value": "DeviceManagementManagedDevices.ReadWrite.All" - }, - { - "description": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", - "displayName": "Read Microsoft Intune RBAC settings", - "id": "49f0cc30-024c-4dfd-ab3e-82e137ee5431", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", - "userConsentDisplayName": "Read Microsoft Intune RBAC settings", - "value": "DeviceManagementRBAC.Read.All" - }, - { - "description": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", - "displayName": "Read and write Microsoft Intune RBAC settings", - "id": "0c5e8a55-87a6-4556-93ab-adc52c4d862d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", - "userConsentDisplayName": "Read and write Microsoft Intune RBAC settings", - "value": "DeviceManagementRBAC.ReadWrite.All" - }, - { - "description": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration.", - "displayName": "Read Microsoft Intune configuration", - "id": "8696daa5-bce5-4b2e-83f9-51b6defc4e1e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration.", - "userConsentDisplayName": "Read Microsoft Intune configuration", - "value": "DeviceManagementServiceConfig.Read.All" - }, - { - "description": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration.", - "displayName": "Read and write Microsoft Intune configuration", - "id": "662ed50a-ac44-4eef-ad86-62eed9be2a29", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration.", - "userConsentDisplayName": "Read and write Microsoft Intune configuration", - "value": "DeviceManagementServiceConfig.ReadWrite.All" - }, - { - "description": "Allows the app to have the same access to information in the directory as the signed-in user.", - "displayName": "Access directory as the signed in user", - "id": "0e263e50-5827-48a4-b97c-d940288653c7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to have the same access to information in your work or school directory as you do.", - "userConsentDisplayName": "Access the directory as you", - "value": "Directory.AccessAsUser.All" - }, - { - "description": "Allows the app to read data in your organization's directory, such as users, groups and apps.", - "displayName": "Read directory data", - "id": "06da0dbc-49e2-44d2-8312-53f166ab848a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read data in your organization's directory.", - "userConsentDisplayName": "Read directory data", - "value": "Directory.Read.All" - }, - { - "description": "Allows the app to read and write data in your organization's directory, such as users, and groups. It does not allow the app to delete users or groups, or reset user passwords.", - "displayName": "Read and write directory data", - "id": "c5366453-9fb0-48a5-a156-24f0c49a4b84", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write data in your organization's directory, such as other users, groups. It does not allow the app to delete users or groups, or reset user passwords.", - "userConsentDisplayName": "Read and write directory data", - "value": "Directory.ReadWrite.All" - }, - { - "description": "Allows the app to manage restricted resources based on the other permissions granted to the app, on behalf of the signed-in user.", - "displayName": "Manage restricted resources in the directory", - "id": "cba5390f-ed6a-4b7f-b657-0efc2210ed20", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage restricted resources based on the other permissions granted to the app, on your behalf.", - "userConsentDisplayName": "Manage restricted resources in the directory", - "value": "Directory.Write.Restricted" - }, - { - "description": "Allows the app to read Azure AD recommendations, on behalf of the signed-in user.", - "displayName": "Read Azure AD recommendations", - "id": "34d3bd24-f6a6-468c-b67c-0c365c1d6410", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read Azure AD recommendations, on your behalf.", - "userConsentDisplayName": "Read Azure AD recommendations", - "value": "DirectoryRecommendations.Read.All" - }, - { - "description": "Allows the app to read and update Azure AD recommendations, on behalf of the signed-in user. ", - "displayName": "Read and update Azure AD recommendations", - "id": "f37235e8-90a0-4189-93e2-e55b53867ccd", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and update Azure AD recommendations, on your behalf.", - "userConsentDisplayName": "Read and update Azure AD recommendations", - "value": "DirectoryRecommendations.ReadWrite.All" - }, - { - "description": "Allows the app to read all domain properties on behalf of the signed-in user.", - "displayName": "Read domains.", - "id": "2f9ee017-59c1-4f1d-9472-bd5529a7b311", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all domain properties on your behalf.", - "userConsentDisplayName": "Read domains.", - "value": "Domain.Read.All" - }, - { - "description": "Allows the app to read and write all domain properties on behalf of the signed-in user. Also allows the app to add, verify and remove domains.", - "displayName": "Read and write domains", - "id": "0b5d694c-a244-4bde-86e6-eb5cd07730fe", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write all domain properties on your behalf. Also allows the app to add, verify and remove domains.", - "userConsentDisplayName": "Read and write domains", - "value": "Domain.ReadWrite.All" - }, - { - "description": "Allows the app to have the same access to mailboxes as the signed-in user via Exchange ActiveSync.", - "displayName": "Access mailboxes via Exchange ActiveSync", - "id": "ff91d191-45a0-43fd-b837-bd682c4a0b0f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app full access to your mailboxes on your behalf.", - "userConsentDisplayName": "Access your mailboxes", - "value": "EAS.AccessAsUser.All" - }, - { - "description": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.", - "displayName": "Read all eDiscovery objects", - "id": "99201db3-7652-4d5a-809a-bdb94f85fe3c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects on your behalf.", - "userConsentDisplayName": "Read all eDiscovery objects", - "value": "eDiscovery.Read.All" - }, - { - "description": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.", - "displayName": "Read and write all eDiscovery objects", - "id": "acb8f680-0834-4146-b69e-4ab1b39745ad", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on your behalf.", - "userConsentDisplayName": "Read and write all eDiscovery objects", - "value": "eDiscovery.ReadWrite.All" - }, - { - "description": "Read the state and settings of all Microsoft education apps on behalf of the user.", - "displayName": "Read education app settings", - "id": "8523895c-6081-45bf-8a5d-f062a2f12c9f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view the state and settings of all Microsoft education apps on your behalf.", - "userConsentDisplayName": "View your education app settings", - "value": "EduAdministration.Read" - }, - { - "description": "Manage the state and settings of all Microsoft education apps on behalf of the user.", - "displayName": "Manage education app settings", - "id": "63589852-04e3-46b4-bae9-15d5b1050748", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage the state and settings of all Microsoft education apps on your behalf.", - "userConsentDisplayName": "Manage your education app settings", - "value": "EduAdministration.ReadWrite" - }, - { - "description": "Allows the app to read assignments and their grades on behalf of the user.", - "displayName": "Read users' class assignments and their grades", - "id": "091460c9-9c4a-49b2-81ef-1f3d852acce2", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view your assignments on your behalf including grades.", - "userConsentDisplayName": "View your assignments and grades", - "value": "EduAssignments.Read" - }, - { - "description": "Allows the app to read assignments without grades on behalf of the user.", - "displayName": "Read users' class assignments without grades", - "id": "c0b0103b-c053-4b2e-9973-9f3a544ec9b8", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view your assignments on your behalf without seeing grades.", - "userConsentDisplayName": "View your assignments without grades", - "value": "EduAssignments.ReadBasic" - }, - { - "description": "Allows the app to read and write assignments and their grades on behalf of the user.", - "displayName": "Read and write users' class assignments and their grades", - "id": "2f233e90-164b-4501-8bce-31af2559a2d3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view and modify your assignments on your behalf including  grades.", - "userConsentDisplayName": "View and modify your assignments and grades", - "value": "EduAssignments.ReadWrite" - }, - { - "description": "Allows the app to read and write assignments without grades on behalf of the user.", - "displayName": "Read and write users' class assignments without grades", - "id": "2ef770a1-622a-47c4-93ee-28d6adbed3a0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view and modify your assignments on your behalf without seeing grades.", - "userConsentDisplayName": "View and modify your assignments without grades", - "value": "EduAssignments.ReadWriteBasic" - }, - { - "description": "Allows the app to read the user's modules and resources on behalf of the signed-in user.", - "displayName": "Read the user's class modules and resources", - "id": "484859e8-b9e2-4e92-b910-84db35dadd29", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read modules and resources on your behalf.", - "userConsentDisplayName": "Read your class modules and resources", - "value": "EduCurricula.Read" - }, - { - "description": "Allows the app to read and write user's modules and resources on behalf of the signed-in user.", - "displayName": "Read and write the user's class modules and resources", - "id": "4793c53b-df34-44fd-8d26-d15c517732f5", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write modules and resources on your behalf.", - "userConsentDisplayName": "Read and write your class modules and resources", - "value": "EduCurricula.ReadWrite" - }, - { - "description": "Allows the app to read the structure of schools and classes in an organization's roster and education-specific information about users to be read on behalf of the user.", - "displayName": "Read users' view of the roster", - "id": "a4389601-22d9-4096-ac18-36a927199112", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view information about schools and classes in your organization and education-related information about you and other users on your behalf.", - "userConsentDisplayName": "View your school, class and user information", - "value": "EduRoster.Read" - }, - { - "description": "Allows the app to read a limited subset of the properties from the structure of schools and classes in an organization's roster and a limited subset of properties about users to be read on behalf of the user. Includes name, status, education role, email address and photo.", - "displayName": "Read a limited subset of users' view of the roster", - "id": "5d186531-d1bf-4f07-8cea-7c42119e1bd9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view minimal  information about both schools and classes in your organization and education-related information about you and other users on your behalf.", - "userConsentDisplayName": "View a limited subset of your school, class and user information", - "value": "EduRoster.ReadBasic" - }, - { - "description": "Allows the app to read and write the structure of schools and classes in an organization's roster and education-specific information about users to be read and written on behalf of the user.", - "displayName": "Read and write users' view of the roster", - "id": "359e19a6-e3fa-4d7f-bcab-d28ec592b51e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view and modify information about schools and classes in your organization and education-related information about you and other users on your behalf.", - "userConsentDisplayName": "View and modify your school, class and user information", - "value": "EduRoster.ReadWrite" - }, - { - "description": "Allows the app to read your users' primary email address", - "displayName": "View users' email address", - "id": "64a6cdd6-aab1-4aaf-94b8-3cc8405e90d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your primary email address", - "userConsentDisplayName": "View your email address", - "value": "email" - }, - { - "description": "Allows the app to read access packages and related entitlement management resources on behalf of the signed-in user.", - "displayName": "Read all entitlement management resources", - "id": "5449aa12-1393-4ea2-a7c7-d0e06c1a56b2", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read access packages and related entitlement management resources that you have access to.", - "userConsentDisplayName": "Read all entitlement management resources", - "value": "EntitlementManagement.Read.All" - }, - { - "description": "Allows the app to request access to and management of access packages and related entitlement management resources on behalf of the signed-in user.", - "displayName": "Read and write entitlement management resources", - "id": "ae7a573d-81d7-432b-ad44-4ed5c9d89038", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to request access to and management of access packages and related entitlement management resources that you have access to.", - "userConsentDisplayName": "Read and write entitlement management resources", - "value": "EntitlementManagement.ReadWrite.All" - }, - { - "description": "Allows the app to manage self-service entitlement management resources on behalf of the signed-in user. This includes operations such as requesting access and approving access of others.", - "displayName": "Read and write entitlement management resources related to self-service operations", - "id": "e9fdcbbb-8807-410f-b9ec-8d5468c7c2ac", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create and manage self-service entitlement management resources that you have access to. This includes operations such as requesting access and approving access for others.", - "userConsentDisplayName": "Read and write self-service entitlement management resources", - "value": "EntitlementMgmt-SubjectAccess.ReadWrite" - }, - { - "description": "Allows the app to read your organization's authentication event listeners on behalf of the signed-in user.", - "displayName": "Read your organization's authentication event listeners", - "id": "f7dd3bed-5eec-48da-bc73-1c0ef50bc9a1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's authentication event listeners on your behalf.", - "userConsentDisplayName": "Read your organization's authentication event listeners", - "value": "EventListener.Read.All" - }, - { - "description": "Allows the app to read or write your organization's authentication event listeners on behalf of the signed-in user.", - "displayName": "Read and write your organization's authentication event listeners", - "id": "d11625a6-fe21-4fc6-8d3d-063eba5525ad", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read or write your organization's authentication event listeners on your behalf.", - "userConsentDisplayName": "Read and write your organization's authentication event listeners", - "value": "EventListener.ReadWrite.All" - }, - { - "description": "Allows the app to have the same access to mailboxes as the signed-in user via Exchange Web Services.", - "displayName": "Access mailboxes as the signed-in user via Exchange Web Services", - "id": "9769c687-087d-48ac-9cb3-c37dde652038", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app full access to your mailboxes on your behalf.", - "userConsentDisplayName": "Access your mailboxes", - "value": "EWS.AccessAsUser.All" - }, - { - "description": "Allows the app to read all external connections on behalf of a signed-in user. The signed-in user must be an administrator.", - "displayName": "Read all external connections", - "id": "a38267a5-26b6-4d76-9493-935b7599116b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all external connections on your behalf. The signed-in user must be an administrator.", - "userConsentDisplayName": "Read all external connections", - "value": "ExternalConnection.Read.All" - }, - { - "description": "Allows the app to read and write all external connections on behalf of a signed-in user. The signed-in user must be an administrator.", - "displayName": "Read and write all external connections", - "id": "bbbbd9b3-3566-4931-ac37-2b2180d9e334", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write all external connections on your behalf. The signed-in user must be an administrator.", - "userConsentDisplayName": "Read and write all external connections", - "value": "ExternalConnection.ReadWrite.All" - }, - { - "description": "Allows the app to read and write settings of external connections on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read and write settings of connections that it is authorized to.", - "displayName": "Read and write external connections", - "id": "4082ad95-c812-4f02-be92-780c4c4f1830", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write external connections on your behalf. The signed-in user must be an administrator. The app can only read and write external connections that it is authorized to, or it can create new external connections. ", - "userConsentDisplayName": "Read and write external connections", - "value": "ExternalConnection.ReadWrite.OwnedBy" - }, - { - "description": "Allow the app to read external datasets and content, on behalf of the signed-in user.", - "displayName": "Read items in external datasets", - "id": "922f9392-b1b7-483c-a4be-0089be7704fb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read external datasets and content that you have access to.", - "userConsentDisplayName": "Read items in external datasets", - "value": "ExternalItem.Read.All" - }, - { - "description": "Allows the app to read and write all external items on behalf of a signed-in user. The signed-in user must be an administrator.", - "displayName": "Read and write all external items", - "id": "b02c54f8-eb48-4c50-a9f0-a149e5a2012f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write all external items on your behalf. The signed-in user must be an administrator.", - "userConsentDisplayName": "Read and write all external items", - "value": "ExternalItem.ReadWrite.All" - }, - { - "description": "Allows the app to read and write external items on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read external items of the connection that it is authorized to.", - "displayName": "Read and write external items", - "id": "4367b9d7-cee7-4995-853c-a0bdfe95c1f9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write external items on your behalf. The signed-in user must be an administrator. The app can only read external items of the connection that it is authorized to.", - "userConsentDisplayName": "Read and write external items", - "value": "ExternalItem.ReadWrite.OwnedBy" - }, - { - "description": "Allows the app to read your family information, members and their basic profile.", - "displayName": "Read your family info", - "id": "3a1e4806-a744-4c70-80fc-223bf8582c46", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your family information, members and their basic profile.", - "userConsentDisplayName": "Read your family info", - "value": "Family.Read" - }, - { - "description": "Allows the app to read the signed-in user's files.", - "displayName": "Read user files", - "id": "10465720-29dd-4523-a11a-6a75c743c9d9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your files.", - "userConsentDisplayName": "Read your files", - "value": "Files.Read" - }, - { - "description": "Allows the app to read all files the signed-in user can access.", - "displayName": "Read all files that user can access", - "id": "df85f4d6-205c-4ac5-a5ea-6bf408dba283", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all files you can access.", - "userConsentDisplayName": "Read all files that you have access to", - "value": "Files.Read.All" - }, - { - "description": "(Preview) Allows the app to read files that the user selects. The app has access for several hours after the user selects a file.", - "displayName": "Read files that the user selects (preview)", - "id": "5447fe39-cb82-4c1a-b977-520e67e724eb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "(Preview) Allows the app to read files that you select. After you select a file, the app has access to the file for several hours.", - "userConsentDisplayName": "Read selected files", - "value": "Files.Read.Selected" - }, - { - "description": "Allows the app to read, create, update and delete the signed-in user's files.", - "displayName": "Have full access to user files", - "id": "5c28f0bf-8a70-41f1-8ab2-9032436ddb65", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, create, update, and delete your files.", - "userConsentDisplayName": "Have full access to your files", - "value": "Files.ReadWrite" - }, - { - "description": "Allows the app to read, create, update and delete all files the signed-in user can access.", - "displayName": "Have full access to all files user can access", - "id": "863451e7-0667-486c-a5d6-d135439485f0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, create, update and delete all files that you can access.", - "userConsentDisplayName": "Have full access to all files you have access to", - "value": "Files.ReadWrite.All" - }, - { - "description": "(Preview) Allows the app to read, create, update and delete files in the application's folder.", - "displayName": "Have full access to the application's folder (preview)", - "id": "8019c312-3263-48e6-825e-2b833497195b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "(Preview) Allows the app to read, create, update and delete files in the application's folder.", - "userConsentDisplayName": "Have full access to the application's folder", - "value": "Files.ReadWrite.AppFolder" - }, - { - "description": "(Preview) Allows the app to read and write files that the user selects. The app has access for several hours after the user selects a file.", - "displayName": "Read and write files that the user selects (preview)", - "id": "17dde5bd-8c17-420f-a486-969730c1b827", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "(Preview) Allows the app to read and write files that you select. After you select a file, the app has access to the file for several hours.", - "userConsentDisplayName": "Read and write selected files", - "value": "Files.ReadWrite.Selected" - }, - { - "description": "Allows the app to read and write financials data on behalf of the signed-in user.", - "displayName": "Read and write financials data", - "id": "f534bf13-55d4-45a9-8f3c-c92fe64d6131", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write financials data on your behalf.", - "userConsentDisplayName": "Read and write financials data", - "value": "Financials.ReadWrite.All" - }, - { - "description": "Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access. ", - "displayName": "Read all groups", - "id": "5f8c59db-677d-491f-a6b8-5f174b11ec1d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to list groups, and to read their properties and all group memberships on your behalf. Also allows the app to read calendar, conversations, files, and other group content for all groups you can access. ", - "userConsentDisplayName": "Read all groups", - "value": "Group.Read.All" - }, - { - "description": "Allows the app to create groups and read all group properties and memberships on behalf of the signed-in user. Additionally allows group owners to manage their groups and allows group members to update group content.", - "displayName": "Read and write all groups", - "id": "4e46008b-f24c-477d-8fff-7bb4ec7aafe0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create groups and read all group properties and memberships on your behalf. Additionally allows the app to manage your groups and to update group content for groups you are a member of.", - "userConsentDisplayName": "Read and write all groups", - "value": "Group.ReadWrite.All" - }, - { - "description": "Allows the app to list groups, read basic group properties and read membership of all groups the signed-in user has access to.", - "displayName": "Read group memberships", - "id": "bc024368-1153-4739-b217-4326f2e966d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to list groups, read basic group properties and read membership of all your groups.", - "userConsentDisplayName": "Read group memberships", - "value": "GroupMember.Read.All" - }, - { - "description": "Allows the app to list groups, read basic properties, read and update the membership of the groups the signed-in user has access to. Group properties and owners cannot be updated and groups cannot be deleted.", - "displayName": "Read and write group memberships", - "id": "f81125ac-d3b7-4573-a3b2-7099cc39df9e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to list groups, read basic properties, read and update the membership of your groups. Group properties and owners cannot be updated and groups cannot be deleted.", - "userConsentDisplayName": "Read and write group memberships", - "value": "GroupMember.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization’s identity (authentication) providers’ properties on behalf of the user.", - "displayName": "Read identity providers", - "id": "43781733-b5a7-4d1b-98f4-e8edff23e1a9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization’s identity (authentication) providers’ properties on your behalf.", - "userConsentDisplayName": "Read identity providers", - "value": "IdentityProvider.Read.All" - }, - { - "description": "Allows the app to read and write your organization’s identity (authentication) providers’ properties on behalf of the user.", - "displayName": "Read and write identity providers", - "id": "f13ce604-1677-429f-90bd-8a10b9f01325", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization’s identity (authentication) providers’ properties on your behalf.", - "userConsentDisplayName": "Read and write identity providers", - "value": "IdentityProvider.ReadWrite.All" - }, - { - "description": "Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user. ", - "displayName": "Read identity risk event information", - "id": "8f6a01e7-0391-4ee5-aa22-a3af122cef27", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user. ", - "userConsentDisplayName": "Read identity risk event information", - "value": "IdentityRiskEvent.Read.All" - }, - { - "description": "Allows the app to read and update identity risk event information for all users in your organization on behalf of the signed-in user. Update operations include confirming risk event detections. ", - "displayName": "Read and write risk event information", - "id": "9e4862a5-b68f-479e-848a-4e07e25c9916", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and update identity risk event information for all users in your organization on your behalf. Update operations include confirming risk event detections. ", - "userConsentDisplayName": "Read and write risk event information", - "value": "IdentityRiskEvent.ReadWrite.All" - }, - { - "description": "Allows the app to read all identity risky service principal information for your organization, on behalf of the signed-in user.", - "displayName": "Read all identity risky service principal information", - "id": "ea5c4ab0-5a73-4f35-8272-5d5337884e5d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all identity risky service principal information for your organization, on your behalf.", - "userConsentDisplayName": "Read all identity risky service principal information", - "value": "IdentityRiskyServicePrincipal.Read.All" - }, - { - "description": "Allows the app to read and update identity risky service principal information for all service principals in your organization, on behalf of the signed-in user. Update operations include dismissing risky service principals.", - "displayName": "Read and write all identity risky service principal information", - "id": "bb6f654c-d7fd-4ae3-85c3-fc380934f515", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and update identity risky service principal information for all service principals in your organization, on your behalf. Update operations include dismissing risky service principals.", - "userConsentDisplayName": "Read and write all identity risky service principal information", - "value": "IdentityRiskyServicePrincipal.ReadWrite.All" - }, - { - "description": "Allows the app to read identity risky user information for all users in your organization on behalf of the signed-in user.", - "displayName": "Read identity risky user information", - "id": "d04bb851-cb7c-4146-97c7-ca3e71baf56c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read identity risky user information for all users in your organization on behalf of the signed-in user.", - "userConsentDisplayName": "Read identity risky user information", - "value": "IdentityRiskyUser.Read.All" - }, - { - "description": "Allows the app to read and update identity risky user information for all users in your organization on behalf of the signed-in user. Update operations include dismissing risky users.", - "displayName": "Read and write risky user information", - "id": "e0a7cdbb-08b0-4697-8264-0069786e9674", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and update identity risky user information for all users in your organization on your behalf. Update operations include dismissing risky users.", - "userConsentDisplayName": "Read and write identity risky user information", - "value": "IdentityRiskyUser.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization's user flows, on behalf of the signed-in user.", - "displayName": "Read all identity user flows", - "id": "2903d63d-4611-4d43-99ce-a33f3f52e343", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's user flows, on your behalf.", - "userConsentDisplayName": "Read all identity user flows", - "value": "IdentityUserFlow.Read.All" - }, - { - "description": "Allows the app to read or write your organization's user flows, on behalf of the signed-in user.", - "displayName": "Read and write all identity user flows", - "id": "281892cc-4dbf-4e3a-b6cc-b21029bb4e82", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read or write your organization's user flows, on your behalf.", - "userConsentDisplayName": "Read and write all identity user flows", - "value": "IdentityUserFlow.ReadWrite.All" - }, - { - "description": "Allows the app to have the same access to mailboxes as the signed-in user via IMAP protocol.", - "displayName": "Read and write access to mailboxes via IMAP.", - "id": "652390e4-393a-48de-9484-05f9b1212954", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.", - "userConsentDisplayName": "Read and write access to your mail.", - "value": "IMAP.AccessAsUser.All" - }, - { - "description": "Allows the app to read data connectors on behalf of the signed-in user.", - "displayName": "View data connector definitions", - "id": "d19c0de5-7ecb-4aba-b090-da35ebcd5425", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read data connectors on your behalf.", - "userConsentDisplayName": "View data connector definitions", - "value": "IndustryData-DataConnector.Read.All" - }, - { - "description": "Allows the app to read and write data connectors on behalf of the signed-in user.", - "displayName": "Manage data connector definitions", - "id": "5ce933ac-3997-4280-aed0-cc072e5c062a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write data connectors on your behalf.", - "userConsentDisplayName": "Manage data connector definitions", - "value": "IndustryData-DataConnector.ReadWrite.All" - }, - { - "description": "Allows the app to upload data files to a data connector on behalf of the signed-in user.", - "displayName": "Upload files to a data connector", - "id": "fc47391d-ab2c-410f-9059-5600f7af660d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to upload data files to a data connector on your behalf.", - "userConsentDisplayName": "Upload files to a data connector", - "value": "IndustryData-DataConnector.Upload" - }, - { - "description": "Allows the app to read inbound data flows on behalf of the signed-in user.", - "displayName": "View inbound flow definitions", - "id": "cb0774da-a605-42af-959c-32f438fb38f4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read inbound data flows on your behalf.", - "userConsentDisplayName": "View inbound flow definitions", - "value": "IndustryData-InboundFlow.Read.All" - }, - { - "description": "Allows the app to read and write inbound data flows on behalf of the signed-in user.", - "displayName": "Manage inbound flow definitions", - "id": "97044676-2cec-40ee-bd70-38df444c9e70", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write inbound data flows on your behalf.", - "userConsentDisplayName": "Manage inbound flow definitions", - "value": "IndustryData-InboundFlow.ReadWrite.All" - }, - { - "description": "Allows the app to read reference definitions on behalf of the signed-in user.", - "displayName": "View reference definitions", - "id": "a3f96ffe-cb84-40a8-ac85-582d7ef97c2a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read reference definitions on your behalf.", - "userConsentDisplayName": "View reference definitions", - "value": "IndustryData-ReferenceDefinition.Read.All" - }, - { - "description": "Allows the app to read current and previous IndustryData runs on behalf of the signed-in user.", - "displayName": "View current and previous runs", - "id": "92685235-50c4-4702-b2c8-36043db6fa79", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read current and previous IndustryData runs on your behalf.", - "userConsentDisplayName": "View current and previous runs", - "value": "IndustryData-Run.Read.All" - }, - { - "description": "Allows the app to read source system definitions on behalf of the signed-in user.", - "displayName": "View source system definitions", - "id": "49b7016c-89ae-41e7-bd6f-b7170c5490bf", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read source system definitions on your behalf.", - "userConsentDisplayName": "View source system definitions", - "value": "IndustryData-SourceSystem.Read.All" - }, - { - "description": "Allows the app to read and write source system definitions on behalf of the signed-in user.", - "displayName": "Manage source system definitions", - "id": "9599f005-05d6-4ea7-b1b1-4929768af5d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write source system definitions on your behalf.", - "userConsentDisplayName": "Manage source system definitions", - "value": "IndustryData-SourceSystem.ReadWrite.All" - }, - { - "description": "Allows the app to read time period definitions on behalf of the signed-in user.", - "displayName": "Read time period definitions", - "id": "c9d51f28-8ccd-42b2-a836-fd8fe9ebf2ae", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read time period definitions on your behalf.", - "userConsentDisplayName": "Read time period definitions", - "value": "IndustryData-TimePeriod.Read.All" - }, - { - "description": "Allows the app to read and write time period definitions on behalf of the signed-in user.", - "displayName": "Manage time period definitions", - "id": "b6d56528-3032-4f9d-830f-5a24a25e6661", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write time period definitions on your behalf.", - "userConsentDisplayName": "Manage time period definitions", - "value": "IndustryData-TimePeriod.ReadWrite.All" - }, - { - "description": "Allows the app to read basic Industry Data service and resource information on behalf of the signed-in user.", - "displayName": "Read basic Industry Data service and resource definitions", - "id": "60382b96-1f5e-46ea-a544-0407e489e588", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read Industry Data basic service and resource information on your behalf.", - "userConsentDisplayName": "Read basic Industry Data service and resource definitions", - "value": "IndustryData.ReadBasic.All" - }, - { - "description": "Allows the app to read the configurations applicable to the signed-in user for protecting organizational data, on behalf of the signed-in user.", - "displayName": "Read configurations for protecting organizational data applicable to the user", - "id": "12f4bffb-b598-413c-984b-db99728f8b54", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the configurations applicable to you for protecting organizational data, on your behalf.", - "userConsentDisplayName": "Read configurations for protecting organizational data applicable to you", - "value": "InformationProtectionConfig.Read" - }, - { - "description": "Allows an app to read information protection sensitivity labels and label policy settings, on behalf of the signed-in user.", - "displayName": "Read user sensitivity labels and label policies.", - "id": "4ad84827-5578-4e18-ad7a-86530b12f884", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read information protection sensitivity labels and label policy settings, on behalf of the signed-in user.", - "userConsentDisplayName": "Read user sensitivity labels and label policies.", - "value": "InformationProtectionPolicy.Read" - }, - { - "description": "Allows the app to read insights related to guest activity, on behalf of the signed-in user.", - "displayName": "Read insights related to guest activity", - "id": "bdd9425e-296d-4e4b-9c15-0a288b4b12e1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read insights related to guest activity, on your behalf.", - "userConsentDisplayName": "Read insights related to guest activity", - "value": "Insights-GuestActivity.Read.All" - }, - { - "description": "Allows the app to read and write insights related to guest activity, on behalf of the signed-in user.", - "displayName": "Read and write insights related to guest activity", - "id": "7e23346e-6931-45b2-b04e-6332b3905b8a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write insights related to guest activity, on your behalf.", - "userConsentDisplayName": "Read and write insights related to guest activity", - "value": "Insights-GuestActivity.ReadWrite.All" - }, - { - "description": "Allows the app to read data for the learner's assignments in the organization's directory, on behalf of the signed-in user.", - "displayName": "Read user's assignments", - "id": "ac08cdae-e845-41db-adf9-5899a0ec9ef6", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read data for your assignments in the organization's directory, on your behalf.", - "userConsentDisplayName": "Read your assignments", - "value": "LearningAssignedCourse.Read" - }, - { - "description": "Allows the app to read learning content in the organization's directory, on behalf of the signed-in user.", - "displayName": "Read learning content", - "id": "ea4c1fd9-6a9f-4432-8e5d-86e06cc0da77", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read learning content in the organization's directory, on your behalf.", - "userConsentDisplayName": "Read learning content", - "value": "LearningContent.Read.All" - }, - { - "description": "Allows the app to manage learning content in the organization's directory, on behalf of the signed-in user.", - "displayName": "Manage learning content", - "id": "53cec1c4-a65f-4981-9dc1-ad75dbf1c077", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage learning content in the organization's directory, on your behalf.", - "userConsentDisplayName": "Manage learning content", - "value": "LearningContent.ReadWrite.All" - }, - { - "description": "Allows the app to read data for the learning provider in the organization's directory, on behalf of the signed-in user.", - "displayName": "Read learning provider", - "id": "dd8ce36f-9245-45ea-a99e-8ac398c22861", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read data for the learning provider in the organization's directory, on your behalf.", - "userConsentDisplayName": "Read learning provider", - "value": "LearningProvider.Read" - }, - { - "description": "Allows the app to create, update, read, and delete data for the learning provider in the organization's directory, on behalf of the signed-in user.", - "displayName": "Manage learning provider", - "id": "40c2eb57-abaf-49f5-9331-e90fd01f7130", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create, update, read, and delete data for the learning provider in the organization's directory, on your behalf.", - "userConsentDisplayName": "Manage learning provider", - "value": "LearningProvider.ReadWrite" - }, - { - "description": "Allows the app to read data for the learner's self-initiated courses in the organization's directory, on behalf of the signed-in user.", - "displayName": "Read user's self-initiated courses", - "id": "f6403ef7-4a96-47be-a190-69ba274c3f11", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read data for your self-initiated courses in the organization's directory, on your behalf.", - "userConsentDisplayName": "Read your self-initiated courses", - "value": "LearningSelfInitiatedCourse.Read" - }, - { - "description": "Allows an app to manage license assignments for users and groups, on behalf of the signed-in user.", - "displayName": "Manage all license assignments", - "id": "f55016cc-149c-447e-8f21-7cf3ec1d6350", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage all license assignments, on your behalf.", - "userConsentDisplayName": "Manage all license assignments", - "value": "LicenseAssignment.ReadWrite.All" - }, - { - "description": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.", - "displayName": "Read all lifecycle workflows resources", - "id": "9bcb9916-765a-42af-bf77-02282e26b01a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on your behalf.", - "userConsentDisplayName": "Read all lifecycle workflows resources", - "value": "LifecycleWorkflows.Read.All" - }, - { - "description": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.", - "displayName": "Read and write all lifecycle workflows resources", - "id": "84b9d731-7db8-4454-8c90-fd9e95350179", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources on your behalf.", - "userConsentDisplayName": "Read and write all lifecycle workflows resources", - "value": "LifecycleWorkflows.ReadWrite.All" - }, - { - "description": "Allows the app to read the signed-in user's mailbox.", - "displayName": "Read user mail ", - "id": "570282fd-fa5c-430d-a7fd-fc8dc98a9dca", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read email in your mailbox. ", - "userConsentDisplayName": "Read your mail ", - "value": "Mail.Read" - }, - { - "description": "Allows the app to read mail a user can access, including their own and shared mail.", - "displayName": "Read user and shared mail", - "id": "7b9103a5-4610-446b-9670-80643382c1fa", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read mail you can access, including shared mail.", - "userConsentDisplayName": "Read mail you can access", - "value": "Mail.Read.Shared" - }, - { - "description": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.", - "displayName": "Read user basic mail", - "id": "a4b8392a-d8d1-4954-a029-8e668a39a170", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.", - "userConsentDisplayName": "Read user basic mail", - "value": "Mail.ReadBasic" - }, - { - "description": "Allows the app to read mail the signed-in user can access, including their own and shared mail, except for body, bodyPreview, uniqueBody, attachments, extensions, and any extended properties.", - "displayName": "Read user and shared basic mail", - "id": "b11fa0e7-fdb7-4dc9-b1f1-59facd463480", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read mail you can access, including shared mail except body, previewBody, uniqueBody, attachments, extensions, and any extended properties. ", - "userConsentDisplayName": "Read basic mail you can access", - "value": "Mail.ReadBasic.Shared" - }, - { - "description": "Allows the app to create, read, update, and delete email in user mailboxes. Does not include permission to send mail. ", - "displayName": "Read and write access to user mail ", - "id": "024d486e-b451-40bb-833d-3e66d98c5c73", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail. ", - "userConsentDisplayName": "Read and write access to your mail ", - "value": "Mail.ReadWrite" - }, - { - "description": "Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail.", - "displayName": "Read and write user and shared mail", - "id": "5df07973-7d5d-46ed-9847-1271055cbd51", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create, and delete mail you have permission to access, including your own and shared mail. Does not allow the app to send mail on your behalf.", - "userConsentDisplayName": "Read and write mail you can access", - "value": "Mail.ReadWrite.Shared" - }, - { - "description": "Allows the app to send mail as users in the organization. ", - "displayName": "Send mail as a user ", - "id": "e383f46e-2787-4529-855e-0e479a3ffac0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to send mail as you. ", - "userConsentDisplayName": "Send mail as you ", - "value": "Mail.Send" - }, - { - "description": "Allows the app to send mail as the signed-in user, including sending on-behalf of others.", - "displayName": "Send mail on behalf of others", - "id": "a367ab51-6b49-43bf-a716-a1fb06d2a174", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to send mail as you or on-behalf of someone else.", - "userConsentDisplayName": "Send mail on behalf of others or yourself", - "value": "Mail.Send.Shared" - }, - { - "description": "Allows the app to the read user's mailbox settings. Does not include permission to send mail.", - "displayName": "Read user mailbox settings", - "id": "87f447af-9fa4-4c32-9dfa-4a57a73d18ce", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your mailbox settings.", - "userConsentDisplayName": "Read your mailbox settings", - "value": "MailboxSettings.Read" - }, - { - "description": "Allows the app to create, read, update, and delete user's mailbox settings. Does not include permission to send mail.", - "displayName": "Read and write user mailbox settings", - "id": "818c620a-27a9-40bd-a6a5-d96f7d610b4b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create, and delete your mailbox settings.", - "userConsentDisplayName": "Read and write to your mailbox settings", - "value": "MailboxSettings.ReadWrite" - }, - { - "description": "Allows the app to read all managed tenant information on behalf of the signed-in user.", - "displayName": "Read all managed tenant information", - "id": "dc34164e-6c4a-41a0-be89-3ae2fbad7cd3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all managed tenant information on your behalf.", - "userConsentDisplayName": "Read all managed tenant information", - "value": "ManagedTenants.Read.All" - }, - { - "description": "Allows the app to read and write all managed tenant information on behalf of the signed-in user.", - "displayName": "Read and write all managed tenant information", - "id": "b31fa710-c9b3-4d9e-8f5e-8036eecddab9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write all managed tenant information on your behalf.", - "userConsentDisplayName": "Read and write all managed tenant information", - "value": "ManagedTenants.ReadWrite.All" - }, - { - "description": "Allows the app to read the memberships of hidden groups and administrative units on behalf of the signed-in user, for those hidden groups and administrative units that the signed-in user has access to.", - "displayName": "Read hidden memberships", - "id": "f6a3db3e-f7e8-4ed2-a414-557c8c9830be", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the memberships of hidden groups or administrative units on your behalf, for those hidden groups or adminstrative units that you have access to.", - "userConsentDisplayName": "Read your hidden memberships", - "value": "Member.Read.Hidden" - }, - { - "description": "Allows the app to read multi-tenant organization details and tenants on behalf of the signed-in user.", - "displayName": "Read multi-tenant organization details and tenants", - "id": "526aa72a-5878-49fe-bf4e-357973af9b06", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read multi-tenant organization details and tenants on your behalf.", - "userConsentDisplayName": "Read multi-tenant organization details and tenants", - "value": "MultiTenantOrganization.Read.All" - }, - { - "description": "Allows the app to read multi-tenant organization basic details and active tenants on behalf of the signed-in user.", - "displayName": "Read multi-tenant organization basic details and active tenants", - "id": "225db56b-15b2-4daa-acb3-0eec2bbe4849", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read multi-tenant organization basic details and active tenants on your behalf.", - "userConsentDisplayName": "Read multi-tenant organization basic details and active tenants", - "value": "MultiTenantOrganization.ReadBasic.All" - }, - { - "description": "Allows the app to read and write multi-tenant organization details and tenants on behalf of the signed-in user.", - "displayName": "Read and write multi-tenant organization details and tenants", - "id": "77af1528-84f3-4023-8d90-d219cd433108", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write multi-tenant organization details and tenants on your behalf.", - "userConsentDisplayName": "Read and write multi-tenant organization details and tenants", - "value": "MultiTenantOrganization.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization's branches for network access on behalf of the signed-in user.", - "displayName": "Read properties of branches for network access", - "id": "4051c7fc-b429-4804-8d80-8f1f8c24a6f7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's branches for network access on your behalf.", - "userConsentDisplayName": "Read properties of branches for network access", - "value": "NetworkAccessBranch.Read.All" - }, - { - "description": "Allows the app to read and write your organization's branches for network access on behalf of the signed-in user.", - "displayName": "Read and write properties of branches for network access", - "id": "b8a36cc2-b810-461a-baa4-a7281e50bd5c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's branches for network access on your behalf.", - "userConsentDisplayName": "Read and write properties of branches for network access", - "value": "NetworkAccessBranch.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization's security and routing network access policies on behalf of the signed-in user.", - "displayName": "Read security and routing policies for network access", - "id": "ba22922b-752c-446f-89d7-a2d92398fceb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's security and routing network access policies on your behalf.", - "userConsentDisplayName": "Read security and routing policies for network access", - "value": "NetworkAccessPolicy.Read.All" - }, - { - "description": "Allows the app to read and write your organization's security and routing network access policies on behalf of the signed-in user.", - "displayName": "Read and write security and routing policies for network access", - "id": "b1fbad0f-ef6e-42ed-8676-bca7fa3e7291", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's security and routing network access policies on your behalf.", - "userConsentDisplayName": "Read and write security and routing policies for network access", - "value": "NetworkAccessPolicy.ReadWrite.All" - }, - { - "description": "Allows the app to read the titles of OneNote notebooks and sections and to create new pages, notebooks, and sections on behalf of the signed-in user.", - "displayName": "Create user OneNote notebooks", - "id": "9d822255-d64d-4b7a-afdb-833b9a97ed02", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to view the titles of your OneNote notebooks and sections and to create new pages, notebooks, and sections on your behalf.", - "userConsentDisplayName": "Create your OneNote notebooks", - "value": "Notes.Create" - }, - { - "description": "Allows the app to read OneNote notebooks on behalf of the signed-in user.", - "displayName": "Read user OneNote notebooks", - "id": "371361e4-b9e2-4a3f-8315-2a301a3b0a3d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read OneNote notebooks on your behalf.", - "userConsentDisplayName": "Read your OneNote notebooks", - "value": "Notes.Read" - }, - { - "description": "Allows the app to read OneNote notebooks that the signed-in user has access to in the organization.", - "displayName": "Read all OneNote notebooks that user can access", - "id": "dfabfca6-ee36-4db2-8208-7a28381419b3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all the OneNote notebooks that you have access to.", - "userConsentDisplayName": "Read all OneNote notebooks that you can access", - "value": "Notes.Read.All" - }, - { - "description": "Allows the app to read, share, and modify OneNote notebooks on behalf of the signed-in user.", - "displayName": "Read and write user OneNote notebooks", - "id": "615e26af-c38a-4150-ae3e-c3b0d4cb1d6a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, share, and modify OneNote notebooks on your behalf.", - "userConsentDisplayName": "Read and write your OneNote notebooks", - "value": "Notes.ReadWrite" - }, - { - "description": "Allows the app to read, share, and modify OneNote notebooks that the signed-in user has access to in the organization.", - "displayName": "Read and write all OneNote notebooks that user can access", - "id": "64ac0503-b4fa-45d9-b544-71a463f05da0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, share, and modify all the OneNote notebooks that you have access to.", - "userConsentDisplayName": "Read and write all OneNote notebooks that you can access", - "value": "Notes.ReadWrite.All" - }, - { - "description": "This is deprecated! Do not use! This permission no longer has any effect. You can safely consent to it. No additional privileges will be granted to the app.", - "displayName": "Limited notebook access (deprecated)", - "id": "ed68249d-017c-4df5-9113-e684c7f8760b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "This permission no longer has any effect. You can safely consent to it. No additional privileges will be granted to the app.", - "userConsentDisplayName": "Limited access to your OneNote notebooks for this app (preview)", - "value": "Notes.ReadWrite.CreatedByApp" - }, - { - "description": "Allows the app to deliver its notifications on behalf of signed-in users. Also allows the app to read, update, and delete the user's notification items for this app.", - "displayName": "Deliver and manage user notifications for this app", - "id": "89497502-6e42-46a2-8cb2-427fd3df970a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to deliver its notifications, on your behalf. Also allows the app to read, update, and delete your notification items for this app.", - "userConsentDisplayName": "Deliver and manage your notifications for this app", - "value": "Notifications.ReadWrite.CreatedByApp" - }, - { - "description": "Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.", - "displayName": "Maintain access to data you have given it access to", - "id": "7427e0e9-2fba-42fe-b0c0-848c9e6a8182", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions.", - "userConsentDisplayName": "Maintain access to data you have given it access to", - "value": "offline_access" - }, - { - "description": "Allows the app to read online meeting artifacts on behalf of the signed-in user.", - "displayName": "Read user's online meeting artifacts", - "id": "110e5abb-a10c-4b59-8b55-9b4daa4ef743", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read online meeting artifacts on your behalf.", - "userConsentDisplayName": "Read user's online meeting artifacts", - "value": "OnlineMeetingArtifact.Read.All" - }, - { - "description": "Allows the app to read all recordings of online meetings, on behalf of the signed-in user.", - "displayName": "Read all recordings of online meetings.", - "id": "190c2bb6-1fdd-4fec-9aa2-7d571b5e1fe3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all recordings of online meetings, on your behalf. ", - "userConsentDisplayName": "Read all recordings of online meetings. ", - "value": "OnlineMeetingRecording.Read.All" - }, - { - "description": "Allows the app to read online meeting details on behalf of the signed-in user.", - "displayName": "Read user's online meetings", - "id": "9be106e1-f4e3-4df5-bdff-e4bc531cbe43", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read online meeting details on your behalf.", - "userConsentDisplayName": "Read your online meetings", - "value": "OnlineMeetings.Read" - }, - { - "description": "Allows the app to read and create online meetings on behalf of the signed-in user.", - "displayName": "Read and create user's online meetings", - "id": "a65f2972-a4f8-4f5e-afd7-69ccb046d5dc", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and create online meetings on your behalf.", - "userConsentDisplayName": "Read and create your online meetings", - "value": "OnlineMeetings.ReadWrite" - }, - { - "description": "Allows the app to read all transcripts of online meetings, on behalf of the signed-in user.", - "displayName": "Read all transcripts of online meetings. ", - "id": "30b87d18-ebb1-45db-97f8-82ccb1f0190c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all transcripts of online meetings, on your behalf.", - "userConsentDisplayName": "Read all transcripts of online meetings.", - "value": "OnlineMeetingTranscript.Read.All" - }, - { - "description": "Allows the app to read all on-premises directory synchronization information for the organization, on behalf of the signed-in user.", - "displayName": "Read all on-premises directory synchronization information", - "id": "f6609722-4100-44eb-b747-e6ca0536989d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all on-premises directory synchronization information for the organization, on your behalf.", - "userConsentDisplayName": "Read all on-premises directory synchronization information", - "value": "OnPremDirectorySynchronization.Read.All" - }, - { - "description": "Allows the app to read and write all on-premises directory synchronization information for the organization, on behalf of the signed-in user.", - "displayName": "Read and write all on-premises directory synchronization information", - "id": "c2d95988-7604-4ba1-aaed-38a5f82a51c7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write all on-premises directory synchronization information for the organization, on your behalf.", - "userConsentDisplayName": "Read and write all on-premises directory synchronization information", - "value": "OnPremDirectorySynchronization.ReadWrite.All" - }, - { - "description": "Allows the app to manage hybrid identity service configuration by creating, viewing, updating and deleting on-premises published resources, on-premises agents and agent groups, on behalf of the signed-in user.", - "displayName": "Manage on-premises published resources", - "id": "8c4d5184-71c2-4bf8-bb9d-bc3378c9ad42", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage hybrid identity service configuration by creating, viewing, updating and deleting on-premises published resources, on-premises agents and agent groups, on your behalf.", - "userConsentDisplayName": "Manage on-premises published resources", - "value": "OnPremisesPublishingProfiles.ReadWrite.All" - }, - { - "description": "Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.", - "displayName": "Sign users in", - "id": "37f7f235-527c-4136-accd-4a02d197296e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows you to sign in to the app with your work or school account and allows the app to read your basic profile information.", - "userConsentDisplayName": "Sign in as you", - "value": "openid" - }, - { - "description": "Allows the app to read the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information.", - "displayName": "Read organization information", - "id": "4908d5b9-3fb2-4b1e-9336-1888b7937185", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the organization and related resources, on your behalf. Related resources include things like subscribed skus and tenant branding information.", - "userConsentDisplayName": "Read organization information", - "value": "Organization.Read.All" - }, - { - "description": "Allows the app to read and write the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information.", - "displayName": "Read and write organization information", - "id": "46ca0847-7e6b-426e-9775-ea810a948356", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the organization and related resources, on your behalf. Related resources include things like subscribed skus and tenant branding information.", - "userConsentDisplayName": "Read and write organization information", - "value": "Organization.ReadWrite.All" - }, - { - "description": "Allows the app to read all organizational contacts on behalf of the signed-in user.  These contacts are managed by the organization and are different from a user's personal contacts.", - "displayName": "Read organizational contacts", - "id": "08432d1b-5911-483c-86df-7980af5cdee0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all organizational contacts on your behalf.  These contacts are managed by the organization and are different from your personal contacts.", - "userConsentDisplayName": "Read organizational contacts", - "value": "OrgContact.Read.All" - }, - { - "description": "Allows the app to read organization-wide apps and services settings on behalf of the signed-in user.", - "displayName": "Read organization-wide apps and services settings", - "id": "1e9b7a7e-4d64-44ff-acf5-2e9651c1519f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read organization-wide apps and services settings on your behalf.", - "userConsentDisplayName": "Read organization-wide apps and services settings", - "value": "OrgSettings-AppsAndServices.Read.All" - }, - { - "description": "Allows the app to read and write organization-wide apps and services settings on behalf of the signed-in user.", - "displayName": "Read and write organization-wide apps and services settings", - "id": "c167b0e7-47c0-48e8-9eee-9892f58018fa", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write organization-wide apps and services settings on your behalf.", - "userConsentDisplayName": "Read and write organization-wide apps and services settings", - "value": "OrgSettings-AppsAndServices.ReadWrite.All" - }, - { - "description": "Allows the app to read organization-wide Dynamics customer voice settings on behalf of the signed-in user.", - "displayName": "Read organization-wide Dynamics customer voice settings", - "id": "9862d930-5aec-4a98-8d4f-7277a8db9bcb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read organization-wide Dynamics customer voice settings on your behalf.", - "userConsentDisplayName": "Read organization-wide dynamics customer voice settings", - "value": "OrgSettings-DynamicsVoice.Read.All" - }, - { - "description": "Allows the app to read and write organization-wide Dynamics customer voice settings on behalf of the signed-in user.", - "displayName": "Read and write organization-wide Dynamics customer voice settings", - "id": "4cea26fb-6967-4234-82c4-c044414743f8", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write organization-wide Dynamics customer voice settings on your behalf.", - "userConsentDisplayName": "Read and write organization-wide Dynamics customer voice settings", - "value": "OrgSettings-DynamicsVoice.ReadWrite.All" - }, - { - "description": "Allows the app to read organization-wide Microsoft Forms settings on behalf of the signed-in user.", - "displayName": "Read organization-wide Microsoft Forms settings", - "id": "210051a0-1ffc-435c-ae76-02d226d05752", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read organization-wide Microsoft Forms settings on your behalf.", - "userConsentDisplayName": "Read organization-wide Microsoft Forms settings", - "value": "OrgSettings-Forms.Read.All" - }, - { - "description": "Allows the app to read and write organization-wide Microsoft Forms settings on behalf of the signed-in user.", - "displayName": "Read and write organization-wide Microsoft Forms settings", - "id": "346c19ff-3fb2-4e81-87a0-bac9e33990c1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write organization-wide Microsoft Forms settings on your behalf.", - "userConsentDisplayName": "Read and write organization-wide Microsoft Forms settings", - "value": "OrgSettings-Forms.ReadWrite.All" - }, - { - "description": "Allows the app to read organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user.", - "displayName": "Read organization-wide Microsoft 365 apps installation settings", - "id": "8cbdb9f6-9c2e-451a-814d-ec606e5d0212", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read organization-wide Microsoft 365 apps installation settings on your behalf.", - "userConsentDisplayName": "Read organization-wide Microsoft 365 apps installation settings", - "value": "OrgSettings-Microsoft365Install.Read.All" - }, - { - "description": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user.", - "displayName": "Read and write organization-wide Microsoft 365 apps installation settings", - "id": "1ff35e91-19eb-42d8-aa2d-cc9891127ae5", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings on your behalf.", - "userConsentDisplayName": "Read and write organization-wide Microsoft 365 apps installation settings", - "value": "OrgSettings-Microsoft365Install.ReadWrite.All" - }, - { - "description": "Allows the app to read organization-wide Microsoft To Do settings on behalf of the signed-in user.", - "displayName": "Read organization-wide Microsoft To Do settings", - "id": "7ff96f41-f022-45ba-acd8-ef3f03063d6b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read organization-wide Microsoft To Do settings on your behalf.", - "userConsentDisplayName": "Read organization-wide Microsoft To Do settings", - "value": "OrgSettings-Todo.Read.All" - }, - { - "description": "Allows the app to read and write organization-wide Microsoft To Do settings on behalf of the signed-in user.", - "displayName": "Read and write organization-wide Microsoft To Do settings", - "id": "087502c2-5263-433e-abe3-8f77231a0627", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write organization-wide Microsoft To Do settings on your behalf.", - "userConsentDisplayName": "Read and write organization-wide Microsoft To Do settings", - "value": "OrgSettings-Todo.ReadWrite.All" - }, - { - "description": "Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).", - "displayName": "Read users' relevant people lists", - "id": "ba47897c-39ec-4d83-8086-ee8256fa737d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read a list of people in the order that's most relevant to you. This includes your local contacts, your contacts from social networking, people listed in your organization's directory, and people from recent communications.", - "userConsentDisplayName": "Read your relevant people list", - "value": "People.Read" - }, - { - "description": "Allows the app to read a scored list of relevant people of the signed-in user or other users in the signed-in user's organization. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).", - "displayName": "Read all users' relevant people lists", - "id": "b89f9189-71a5-4e70-b041-9887f0bc7e4a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read a list of people in the order that is most relevant to you. Allows the app to read a list of people in the order that is most relevant to another user in your organization. These can include local contacts, contacts from social networking, people listed in your organization’s directory, and people from recent communications.", - "userConsentDisplayName": "Read all users’ relevant people lists", - "value": "People.Read.All" - }, - { - "description": "Allows the application to read tenant-wide people settings on behalf of the signed-in user.", - "displayName": "Read tenant-wide people settings", - "id": "ec762c5f-388b-4b16-8693-ac1efbc611bc", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read tenant-wide people settings on your behalf.", - "userConsentDisplayName": "Read tenant-wide people settings", - "value": "PeopleSettings.Read.All" - }, - { - "description": "Allows the application to read and write tenant-wide people settings on behalf of the signed-in user.", - "displayName": "Read and write tenant-wide people settings", - "id": "e67e6727-c080-415e-b521-e3f35d5248e9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and write tenant-wide people settings on your behalf.", - "userConsentDisplayName": "Read and write tenant-wide people settings", - "value": "PeopleSettings.ReadWrite.All" - }, - { - "description": "Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.", - "displayName": "Read all company places", - "id": "cb8f45a0-5c2e-4ea1-b803-84b870a7d7ec", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on your behalf.", - "userConsentDisplayName": "Read all company places", - "value": "Place.Read.All" - }, - { - "description": "Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.", - "displayName": "Read and write organization places", - "id": "4c06a06a-098a-4063-868e-5dfee3827264", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on your behalf.", - "userConsentDisplayName": "Read and write organization places", - "value": "Place.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization's policies on behalf of the signed-in user.", - "displayName": "Read your organization's policies", - "id": "572fea84-0151-49b2-9301-11cb16974376", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's policies on your behalf.", - "userConsentDisplayName": "Read your organization's policies", - "value": "Policy.Read.All" - }, - { - "description": "Allows the app to read your organization's conditional access policies on behalf of the signed-in user.", - "displayName": "Read your organization's conditional access policies", - "id": "633e0fce-8c58-4cfb-9495-12bbd5a24f7c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's conditional access policies on your behalf.", - "userConsentDisplayName": "Read your organization's conditional access policies", - "value": "Policy.Read.ConditionalAccess" - }, - { - "description": "Allows the app to read your organization’s identity protection policy on behalf of the signed-in user. ", - "displayName": "Read your organization’s identity protection policy", - "id": "d146432f-b803-4ed4-8d42-ba74193a6ede", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization’s identity protection policy on your behalf.", - "userConsentDisplayName": "Read your organization’s identity protection policy", - "value": "Policy.Read.IdentityProtection" - }, - { - "description": "Allows the app to read policies related to consent and permission grants for applications, on behalf of the signed-in user.", - "displayName": "Read consent and permission grant policies", - "id": "414de6ea-2d92-462f-b120-6e2a809a6d01", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read policies related to consent and permission grants for applications, on your behalf.", - "userConsentDisplayName": "Read consent and permission grant policies", - "value": "Policy.Read.PermissionGrant" - }, - { - "description": "Allows the app to read and write your organization's directory access review default policy on behalf of the signed-in user.", - "displayName": "Read and write your organization's directory access review default policy", - "id": "4f5bc9c8-ea54-4772-973a-9ca119cb0409", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's directory access review default policy on your behalf.", - "userConsentDisplayName": "Read and write your organization's directory access review default policy", - "value": "Policy.ReadWrite.AccessReview" - }, - { - "description": "Allows the app to read and write your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", - "displayName": "Read and write your organization's application configuration policies", - "id": "b27add92-efb2-4f16-84f5-8108ba77985c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's application configuration policies on your behalf. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", - "userConsentDisplayName": "Read and write your organization's application configuration policies", - "value": "Policy.ReadWrite.ApplicationConfiguration" - }, - { - "description": "Allows the app to read and write the authentication flow policies, on behalf of the signed-in user. ", - "displayName": "Read and write authentication flow policies", - "id": "edb72de9-4252-4d03-a925-451deef99db7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the authentication flow policies for your tenant, on your behalf.", - "userConsentDisplayName": "Read and write your authentication flow policies", - "value": "Policy.ReadWrite.AuthenticationFlows" - }, - { - "description": "Allows the app to read and write the authentication method policies, on behalf of the signed-in user. ", - "displayName": "Read and write authentication method policies", - "id": "7e823077-d88e-468f-a337-e18f1f0e6c7c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the authentication method policies for your tenant, on your behalf.", - "userConsentDisplayName": "Read and write your authentication method policies ", - "value": "Policy.ReadWrite.AuthenticationMethod" - }, - { - "description": "Allows the app to read and write your organization's authorization policy on behalf of the signed-in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.", - "displayName": "Read and write your organization's authorization policy", - "id": "edd3c878-b384-41fd-95ad-e7407dd775be", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's authorization policy on your behalf. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.", - "userConsentDisplayName": "Read and write your organization's authorization policy", - "value": "Policy.ReadWrite.Authorization" - }, - { - "description": "Allows the app to read and write your organization's conditional access policies on behalf of the signed-in user.", - "displayName": "Read and write your organization's conditional access policies", - "id": "ad902697-1014-4ef5-81ef-2b4301988e8c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's conditional access policies on your behalf.", - "userConsentDisplayName": "Read and write your organization's conditional access policies", - "value": "Policy.ReadWrite.ConditionalAccess" - }, - { - "description": "Allows the app to read and write your organization's consent requests policy on behalf of the signed-in user.", - "displayName": "Read and write consent request policy", - "id": "4d135e65-66b8-41a8-9f8b-081452c91774", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's consent request policy on your behalf.", - "userConsentDisplayName": "Read and write consent request policy", - "value": "Policy.ReadWrite.ConsentRequest" - }, - { - "description": "Allows the app to read and write your organization's cross tenant access policies on behalf of the signed-in user.", - "displayName": "Read and write your organization's cross tenant access policies", - "id": "014b43d0-6ed4-4fc6-84dc-4b6f7bae7d85", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's cross tenant access policies on your behalf.", - "userConsentDisplayName": "Read and write your organization's cross tenant access policies", - "value": "Policy.ReadWrite.CrossTenantAccess" - }, - { - "description": "Allows the app to read and write your organization's device configuration policies on behalf of the signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.", - "displayName": "Read and write your organization's device configuration policies", - "id": "40b534c3-9552-4550-901b-23879c90bcf9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's device configuration policies on your behalf. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.", - "userConsentDisplayName": "Read and write your organization's device configuration policies", - "value": "Policy.ReadWrite.DeviceConfiguration" - }, - { - "description": "Allows the application to read and update the organization's external identities policy on behalf of the signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.", - "displayName": "Read and write your organization's external identities policy", - "id": "b5219784-1215-45b5-b3f1-88fe1081f9c0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and update the organization's external identities policy on your behalf. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.", - "userConsentDisplayName": "Read and write your organization's external identities policy", - "value": "Policy.ReadWrite.ExternalIdentities" - }, - { - "description": "Allows the app to read and write your organization's feature rollout policies on behalf of the signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.", - "displayName": "Read and write your organization's feature rollout policies", - "id": "92a38652-f13b-4875-bc77-6e1dbb63e1b2", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's feature rollout policies on your behalf. Includes abilities to assign and remove users and groups to rollout of a specific feature.", - "userConsentDisplayName": "Read and write your organization's feature rollout policies", - "value": "Policy.ReadWrite.FeatureRollout" - }, - { - "description": "Allows the app to read and write your organization’s identity protection policy on behalf of the signed-in user.", - "displayName": "Read and write your organization’s identity protection policy ", - "id": "7256e131-3efb-4323-9854-cf41c6021770", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization’s identity protection policy on your behalf.", - "userConsentDisplayName": "Read and write your organization’s identity protection policy.", - "value": "Policy.ReadWrite.IdentityProtection" - }, - { - "description": "Allows the app to read and write your organization's mobility management policies on behalf of the signed-in user. For example, a mobility management policy can set the enrollment scope for a given mobility management application.", - "displayName": "Read and write your organization's mobility management policies", - "id": "a8ead177-1889-4546-9387-f25e658e2a79", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's mobility management policies on your behalf. For example, a mobility management policy can set the enrollment scope for a given mobility management application.", - "userConsentDisplayName": "Read and write your organization's mobility management policies", - "value": "Policy.ReadWrite.MobilityManagement" - }, - { - "description": "Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user.", - "displayName": "Manage consent and permission grant policies", - "id": "2672f8bb-fd5e-42e0-85e1-ec764dd2614e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user.", - "userConsentDisplayName": "Manage consent and permission grant policies", - "value": "Policy.ReadWrite.PermissionGrant" - }, - { - "description": "Allows the app to read and write your organization's security defaults policy on behalf of the signed-in user.", - "displayName": "Read and write your organization's security defaults policy", - "id": "0b2a744c-2abf-4f1e-ad7e-17a087e2be99", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's security defaults policy on your behalf.", - "userConsentDisplayName": "Read and write your organization's security defaults policy", - "value": "Policy.ReadWrite.SecurityDefaults" - }, - { - "description": "Allows the app to read and write your organization's trust framework policies on behalf of the signed-in user.", - "displayName": "Read and write your organization's trust framework policies", - "id": "cefba324-1a70-4a6e-9c1d-fd670b7ae392", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your organization's trust framework policies on your behalf.", - "userConsentDisplayName": "Read and write trust framework policies", - "value": "Policy.ReadWrite.TrustFramework" - }, - { - "description": "Allows the app to have the same access to mailboxes as the signed-in user via POP protocol.", - "displayName": "Read and write access to mailboxes via POP.", - "id": "d7b7f2d9-0f45-4ea1-9d42-e50810c06991", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.", - "userConsentDisplayName": "Read and write access to your mail.", - "value": "POP.AccessAsUser.All" - }, - { - "description": "Allows the app to read presence information on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", - "displayName": "Read user's presence information", - "id": "76bc735e-aecd-4a1d-8b4c-2b915deabb79", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your presence information on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", - "userConsentDisplayName": "Read your presence information", - "value": "Presence.Read" - }, - { - "description": "Allows the app to read presence information of all users in the directory on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", - "displayName": "Read presence information of all users in your organization", - "id": "9c7a330d-35b3-4aa1-963d-cb2b9f927841", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read presence information of all users in the directory on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", - "userConsentDisplayName": "Read presence information of all users in your organization", - "value": "Presence.Read.All" - }, - { - "description": "Allows the app to read the presence information and write activity and availability on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", - "displayName": "Read and write a user's presence information", - "id": "8d3c54a7-cf58-4773-bf81-c0cd6ad522bb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the presence information and write activity and availability on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", - "userConsentDisplayName": "Read and write your presence information", - "value": "Presence.ReadWrite" - }, - { - "description": "Allows the application to read print connectors on behalf of the signed-in user.", - "displayName": "Read print connectors", - "id": "d69c2d6d-4f72-4f99-a6b9-663e32f8cf68", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read print connectors on your behalf.", - "userConsentDisplayName": "Read print connectors", - "value": "PrintConnector.Read.All" - }, - { - "description": "Allows the application to read and write print connectors on behalf of the signed-in user. ", - "displayName": "Read and write print connectors", - "id": "79ef9967-7d59-4213-9c64-4b10687637d8", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and write print connectors on your behalf.", - "userConsentDisplayName": "Read and write print connectors", - "value": "PrintConnector.ReadWrite.All" - }, - { - "description": "Allows the application to create (register) printers on behalf of the signed-in user. ", - "displayName": "Register printers  ", - "id": "90c30bed-6fd1-4279-bf39-714069619721", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to create (register) printers on your behalf. ", - "userConsentDisplayName": "Register printers  ", - "value": "Printer.Create" - }, - { - "description": "Allows the application to create (register), read, update, and delete (unregister) printers on behalf of the signed-in user. ", - "displayName": "Register, read, update, and unregister printers", - "id": "93dae4bd-43a1-4a23-9a1a-92957e1d9121", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to create (register), read, update, and delete (unregister) printers on your behalf.  ", - "userConsentDisplayName": "Register, read, update, and unregister printers", - "value": "Printer.FullControl.All" - }, - { - "description": "Allows the application to read printers on behalf of the signed-in user. ", - "displayName": "Read printers", - "id": "3a736c8a-018e-460a-b60c-863b2683e8bf", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read printers on your behalf. ", - "userConsentDisplayName": "Read printers", - "value": "Printer.Read.All" - }, - { - "description": "Allows the application to read and update printers on behalf of the signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.", - "displayName": "Read and update printers", - "id": "89f66824-725f-4b8f-928e-e1c5258dc565", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and update printers on your behalf. Does not allow creating (registering) or deleting (unregistering) printers.", - "userConsentDisplayName": "Read and update printers", - "value": "Printer.ReadWrite.All" - }, - { - "description": "Allows the application to read printer shares on behalf of the signed-in user. ", - "displayName": "Read printer shares", - "id": "ed11134d-2f3f-440d-a2e1-411efada2502", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read printer shares on your behalf. ", - "userConsentDisplayName": "Read printer shares", - "value": "PrinterShare.Read.All" - }, - { - "description": "Allows the application to read basic information about printer shares on behalf of the signed-in user. Does not allow reading access control information.", - "displayName": "Read basic information about printer shares", - "id": "5fa075e9-b951-4165-947b-c63396ff0a37", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read basic information about printer shares on your behalf.", - "userConsentDisplayName": "Read basic information about printer shares", - "value": "PrinterShare.ReadBasic.All" - }, - { - "description": "Allows the application to read and update printer shares on behalf of the signed-in user. ", - "displayName": "Read and write printer shares", - "id": "06ceea37-85e2-40d7-bec3-91337a46038f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and update printer shares on your behalf. ", - "userConsentDisplayName": "Read and update printer shares", - "value": "PrinterShare.ReadWrite.All" - }, - { - "description": "Allows the application to create print jobs on behalf of the signed-in user and upload document content to print jobs that the signed-in user created.", - "displayName": "Create print jobs", - "id": "21f0d9c0-9f13-48b3-94e0-b6b231c7d320", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to create print jobs on your behalf and upload document content to print jobs that you created.", - "userConsentDisplayName": "Create your print jobs", - "value": "PrintJob.Create" - }, - { - "description": "Allows the application to read the metadata and document content of print jobs that the signed-in user created.", - "displayName": "Read user's print jobs", - "id": "248f5528-65c0-4c88-8326-876c7236df5e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read the metadata and document content of print jobs that you created.", - "userConsentDisplayName": "Read your print jobs", - "value": "PrintJob.Read" - }, - { - "description": "Allows the application to read the metadata and document content of print jobs on behalf of the signed-in user. ", - "displayName": "Read print jobs", - "id": "afdd6933-a0d8-40f7-bd1a-b5d778e8624b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read the metadata and document content of print jobs on your behalf. ", - "userConsentDisplayName": "Read print jobs", - "value": "PrintJob.Read.All" - }, - { - "description": "Allows the application to read the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.", - "displayName": "Read basic information of user's print jobs", - "id": "6a71a747-280f-4670-9ca0-a9cbf882b274", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read the metadata of print jobs that you created. Does not allow access to print job document content.", - "userConsentDisplayName": "Read basic information of your print jobs", - "value": "PrintJob.ReadBasic" - }, - { - "description": "Allows the application to read the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.", - "displayName": "Read basic information of print jobs", - "id": "04ce8d60-72ce-4867-85cf-6d82f36922f3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read the metadata of print jobs on your behalf. Does not allow access to print job document content.", - "userConsentDisplayName": "Read basic information of print jobs", - "value": "PrintJob.ReadBasic.All" - }, - { - "description": "Allows the application to read and update the metadata and document content of print jobs that the signed-in user created.", - "displayName": "Read and write user's print jobs", - "id": "b81dd597-8abb-4b3f-a07a-820b0316ed04", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and update the metadata and document content of print jobs that you created.", - "userConsentDisplayName": "Read and update your print jobs", - "value": "PrintJob.ReadWrite" - }, - { - "description": "Allows the application to read and update the metadata and document content of print jobs on behalf of the signed-in user. ", - "displayName": "Read and write print jobs", - "id": "036b9544-e8c5-46ef-900a-0646cc42b271", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and update the metadata and document content of print jobs on your behalf. ", - "userConsentDisplayName": "Read and update print jobs", - "value": "PrintJob.ReadWrite.All" - }, - { - "description": "Allows the application to read and update the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.", - "displayName": "Read and write basic information of user's print jobs", - "id": "6f2d22f2-1cb6-412c-a17c-3336817eaa82", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and update the metadata of print jobs that you created. Does not allow access to print job document content.", - "userConsentDisplayName": "Read and write basic information of your print jobs", - "value": "PrintJob.ReadWriteBasic" - }, - { - "description": "Allows the application to read and update the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.", - "displayName": "Read and write basic information of print jobs", - "id": "3a0db2f6-0d2a-4c19-971b-49109b19ad3d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and update the metadata of print jobs on your behalf. Does not allow access to print job document content.", - "userConsentDisplayName": "Read and write basic information of print jobs", - "value": "PrintJob.ReadWriteBasic.All" - }, - { - "description": "Allows the application to read tenant-wide print settings on behalf of the signed-in user.", - "displayName": "Read tenant-wide print settings", - "id": "490f32fd-d90f-4dd7-a601-ff6cdc1a3f6c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read tenant-wide print settings on your behalf.", - "userConsentDisplayName": "Read tenant-wide print settings", - "value": "PrintSettings.Read.All" - }, - { - "description": "Allows the application to read and write tenant-wide print settings on behalf of the signed-in user.", - "displayName": "Read and write tenant-wide print settings", - "id": "9ccc526a-c51c-4e5c-a1fd-74726ef50b8f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and write tenant-wide print settings on your behalf.", - "userConsentDisplayName": "Read and write tenant-wide print settings", - "value": "PrintSettings.ReadWrite.All" - }, - { - "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles, on behalf of the signed-in user.", - "displayName": "Read privileged access to Azure AD", - "id": "b3a539c9-59cb-4ad5-825a-041ddbdc2bdb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles, on your behalf.", - "userConsentDisplayName": "Read privileged access to Azure AD", - "value": "PrivilegedAccess.Read.AzureAD" - }, - { - "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.", - "displayName": "Read privileged access to Azure AD groups", - "id": "d329c81c-20ad-4772-abf9-3f6fdb7e5988", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on your behalf.", - "userConsentDisplayName": "Read privileged access to Azure AD groups", - "value": "PrivilegedAccess.Read.AzureADGroup" - }, - { - "description": "Allows the app to read time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) on behalf of the signed-in user.", - "displayName": "Read privileged access to Azure resources", - "id": "1d89d70c-dcac-4248-b214-903c457af83a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) on your behalf.", - "userConsentDisplayName": "Read privileged access to your Azure resources", - "value": "PrivilegedAccess.Read.AzureResources" - }, - { - "description": "Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on behalf of signed-in users.", - "displayName": "Read and write privileged access to Azure AD", - "id": "3c3c74f5-cdaa-4a97-b7e0-4e788bfcfb37", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on your behalf.", - "userConsentDisplayName": "Read and write privileged access to Azure AD", - "value": "PrivilegedAccess.ReadWrite.AzureAD" - }, - { - "description": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.", - "displayName": "Read and write privileged access to Azure AD groups", - "id": "32531c59-1f32-461f-b8df-6f8a3b89f73b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on your behalf.", - "userConsentDisplayName": "Read and write privileged access to Azure AD groups", - "value": "PrivilegedAccess.ReadWrite.AzureADGroup" - }, - { - "description": "Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage Azure resources (like subscriptions, resource groups, storage, compute) on behalf of the signed-in users.", - "displayName": "Read and write privileged access to Azure resources", - "id": "a84a9652-ffd3-496e-a991-22ba5529156a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage  your Azure resources (like your subscriptions, resource groups, storage, compute) on your behalf.", - "userConsentDisplayName": "Read and write privileged access to Azure resources", - "value": "PrivilegedAccess.ReadWrite.AzureResources" - }, - { - "description": "Allows the app to read time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.", - "displayName": "Read assignment schedules for access to Azure AD groups", - "id": "02a32cc4-7ab5-4b58-879a-0586e0f7c495", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read time-based assignment schedules for access to Azure AD groups, on your behalf.", - "userConsentDisplayName": "Read assignment schedules for access to Azure AD groups", - "value": "PrivilegedAssignmentSchedule.Read.AzureADGroup" - }, - { - "description": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.", - "displayName": "Read, create, and delete assignment schedules for access to Azure AD groups", - "id": "06dbc45d-6708-4ef0-a797-f797ee68bf4b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on your behalf.", - "userConsentDisplayName": "Read, create, and delete assignment schedules for access to Azure AD groups", - "value": "PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup" - }, - { - "description": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.", - "displayName": "Read eligibility schedules for access to Azure AD groups", - "id": "8f44f93d-ecef-46ae-a9bf-338508d44d6b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, on your behalf.", - "userConsentDisplayName": "Read eligibility schedules for access to Azure AD groups", - "value": "PrivilegedEligibilitySchedule.Read.AzureADGroup" - }, - { - "description": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.", - "displayName": "Read, create, and delete eligibility schedules for access to Azure AD groups", - "id": "ba974594-d163-484e-ba39-c330d5897667", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on your behalf.", - "userConsentDisplayName": "Read, create, and delete eligibility schedules for access to Azure AD groups", - "value": "PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup" - }, - { - "description": "Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)", - "displayName": "View users' basic profile", - "id": "14dad69e-099b-42c9-810b-d002981feec1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to see your basic profile (e.g., name, picture, user name, email address)", - "userConsentDisplayName": "View your basic profile", - "value": "profile" - }, - { - "description": "Allows the app to read programs and program controls that the signed-in user has access to in the organization.", - "displayName": "Read all programs that user can access", - "id": "c492a2e1-2f8f-4caa-b076-99bbf6e40fe4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read information on programs and program controls that you have access to.", - "userConsentDisplayName": "Read programs that you can access", - "value": "ProgramControl.Read.All" - }, - { - "description": "Allows the app to read, update, delete and perform actions on programs and program controls that the signed-in user has access to in the organization.", - "displayName": "Manage all programs that user can access", - "id": "50fd364f-9d93-4ae1-b170-300e87cccf84", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update and perform action on programs and program controls that you have access to.", - "userConsentDisplayName": "Manage programs that you can access", - "value": "ProgramControl.ReadWrite.All" - }, - { - "description": "Allows an app to read all question and answer sets that the signed-in user can access.", - "displayName": "Read all Questions and Answers that the user can access.", - "id": "f73fa04f-b9a5-4df9-8843-993ce928925e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all question and answer sets that you can access.", - "userConsentDisplayName": "Read all Questions and Answers that you can access.", - "value": "QnA.Read.All" - }, - { - "description": "Allows the application to read any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.", - "displayName": "Read Records Management configuration, labels, and policies", - "id": "07f995eb-fc67-4522-ad66-2b8ca8ea3efd", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read any data from Records Management, such as configuration, labels and policies on your behalf.", - "userConsentDisplayName": "Read Records Management configuration, labels, and policies", - "value": "RecordsManagement.Read.All" - }, - { - "description": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.", - "displayName": "Read and write Records Management configuration, labels, and policies", - "id": "f2833d75-a4e6-40ab-86d4-6dfe73c97605", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on your behalf.", - "userConsentDisplayName": "Read and write Records Management configuration, labels, and policies", - "value": "RecordsManagement.ReadWrite.All" - }, - { - "description": "Allows an app to read all service usage reports on behalf of the signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.", - "displayName": "Read all usage reports", - "id": "02e97553-ed7b-43d0-ab3c-f8bace0d040c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read all service usage reports on your behalf. Services that provide usage reports include Office 365 and Azure Active Directory.", - "userConsentDisplayName": "Read all usage reports", - "value": "Reports.Read.All" - }, - { - "description": "Allows the app to read admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user", - "displayName": "Read admin report settings", - "id": "84fac5f4-33a9-4100-aa38-a20c6d29e5e7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read admin report settings, such as whether to display concealed information in reports, on your behalf.", - "userConsentDisplayName": "Read admin report settings", - "value": "ReportSettings.Read.All" - }, - { - "description": "Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user.", - "displayName": "Read and write admin report settings", - "id": "b955410e-7715-4a88-a940-dfd551018df3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on your behalf.", - "userConsentDisplayName": "Read and write admin report settings", - "value": "ReportSettings.ReadWrite.All" - }, - { - "description": "Allows the app to read the resource specific permissions granted on a user account, on behalf of the signed-in user.", - "displayName": "Read resource specific permissions granted on a user account", - "id": "f1d91a8f-88e7-4774-8401-b668d5bca0c5", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the resource specific permission granted on your account, on your behalf.", - "userConsentDisplayName": "Read resource specific permissions granted on your user account", - "value": "ResourceSpecificPermissionGrant.ReadForUser" - }, - { - "description": "Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.", - "displayName": "Read all active role assignments for your company's directory", - "id": "344a729c-0285-42c6-9014-f12b9b8d6129", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes reading directory role templates, and directory roles.", - "userConsentDisplayName": "Read all active role assignments for your company's directory", - "value": "RoleAssignmentSchedule.Read.Directory" - }, - { - "description": "Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships.", - "displayName": "Read, update, and delete all active role assignments for your company's directory", - "id": "8c026be3-8e26-4774-9372-8d5d6f21daff", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships.", - "userConsentDisplayName": "Read, update, and delete all active role assignments for your company's directory", - "value": "RoleAssignmentSchedule.ReadWrite.Directory" - }, - { - "description": "Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.", - "displayName": "Read all eligible role assignments for your company's directory", - "id": "eb0788c2-6d4e-4658-8c9e-c0fb8053f03d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes reading directory role templates, and directory roles.", - "userConsentDisplayName": "Read all eligible role assignments for your company's directory", - "value": "RoleEligibilitySchedule.Read.Directory" - }, - { - "description": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.", - "displayName": "Read, update, and delete all eligible role assignments for your company's directory", - "id": "62ade113-f8e0-4bf9-a6ba-5acb31db32fd", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.", - "userConsentDisplayName": "Read, update, and delete all eligible role assignments for your company's directory", - "value": "RoleEligibilitySchedule.ReadWrite.Directory" - }, - { - "description": "Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on behalf of the signed-in user. This includes reading role definitions and role assignments.", - "displayName": "Read role management data for all RBAC providers", - "id": "48fec646-b2ba-4019-8681-8eb31435aded", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on your behalf. This includes reading role definitions and role assignments.", - "userConsentDisplayName": "Read role management data for all RBAC providers", - "value": "RoleManagement.Read.All" - }, - { - "description": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user.  This includes reading Cloud PC role definitions and role assignments.", - "displayName": "Read Cloud PC RBAC settings", - "id": "9619b88a-8a25-48a7-9571-d23be0337a79", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, on your behalf.  This includes reading Cloud PC role definitions and role assignments.", - "userConsentDisplayName": "Read Cloud PC RBAC settings", - "value": "RoleManagement.Read.CloudPC" - }, - { - "description": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, directory roles and memberships.", - "displayName": "Read directory RBAC settings", - "id": "741c54c3-0c1e-44a1-818b-3f97ab4e8c83", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on your behalf. This includes reading directory role templates, directory roles and memberships.", - "userConsentDisplayName": "Read directory RBAC settings", - "value": "RoleManagement.Read.Directory" - }, - { - "description": "Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", - "displayName": "Read Exchange Online RBAC configuration", - "id": "3bc15058-7858-4141-b24f-ae43b4e80b52", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on your behalf. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", - "userConsentDisplayName": "Read Exchange Online RBAC configuration", - "value": "RoleManagement.Read.Exchange" - }, - { - "description": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user. This includes reading and managing Cloud PC role definitions and role assignments.", - "displayName": "Read and write Cloud PC RBAC settings", - "id": "501d06f8-07b8-4f18-b5c6-c191a4af7a82", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on your behalf. This includes reading and managing Cloud PC role definitions and memberships.", - "userConsentDisplayName": "Read and write Cloud PC RBAC settings", - "value": "RoleManagement.ReadWrite.CloudPC" - }, - { - "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.", - "displayName": "Read and write directory RBAC settings", - "id": "d01b97e9-cbc0-49fe-810a-750afd5527a3", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on your behalf. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.", - "userConsentDisplayName": "Read and write directory RBAC settings", - "value": "RoleManagement.ReadWrite.Directory" - }, - { - "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", - "displayName": "Read and write Exchange Online RBAC configuration", - "id": "c1499fe0-52b1-4b22-bed2-7a244e0e879f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on your behalf. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", - "userConsentDisplayName": "Read and write Exchange Online RBAC configuration", - "value": "RoleManagement.ReadWrite.Exchange" - }, - { - "description": "Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", - "displayName": "Read all alert data for your company's directory", - "id": "cce71173-f76d-446e-97ff-efb2d82e11b1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on your behalf. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", - "userConsentDisplayName": "Read all alert data for your company's directory", - "value": "RoleManagementAlert.Read.Directory" - }, - { - "description": "Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", - "displayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory", - "id": "435644c6-a5b1-40bf-8f52-fe8e5b53e19c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on your behalf. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", - "userConsentDisplayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory", - "value": "RoleManagementAlert.ReadWrite.Directory" - }, - { - "description": "Allows the app to read policies in Privileged Identity Management for Groups, on behalf of the signed-in user.", - "displayName": "Read all policies in PIM for Groups", - "id": "7e26fdff-9cb1-4e56-bede-211fe0e420e8", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read policies in Privileged Identity Management for Groups, on your behalf.", - "userConsentDisplayName": "Read all policies in PIM for Groups", - "value": "RoleManagementPolicy.Read.AzureADGroup" - }, - { - "description": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.", - "displayName": "Read all policies for privileged role assignments of your company's directory", - "id": "3de2cdbe-0ff5-47d5-bdee-7f45b4749ead", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on your behalf.", - "userConsentDisplayName": "Read all policies for privileged role assignments of your company's directory", - "value": "RoleManagementPolicy.Read.Directory" - }, - { - "description": "Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, on behalf of the signed-in user.", - "displayName": "Read, update, and delete all policies in PIM for Groups", - "id": "0da165c7-3f15-4236-b733-c0b0f6abe41d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, on your behalf.", - "userConsentDisplayName": "Read, update, and delete all policies in PIM for Groups", - "value": "RoleManagementPolicy.ReadWrite.AzureADGroup" - }, - { - "description": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.", - "displayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", - "id": "1ff1be21-34eb-448c-9ac9-ce1f506b2a68", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on your behalf.", - "userConsentDisplayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", - "value": "RoleManagementPolicy.ReadWrite.Directory" - }, - { - "description": "Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.", - "displayName": "Read user schedule items", - "id": "fccf6dd8-5706-49fa-811f-69e2e1b585d0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on your behalf.", - "userConsentDisplayName": "Read your schedule items", - "value": "Schedule.Read.All" - }, - { - "description": "Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.", - "displayName": "Read and write user schedule items", - "id": "63f27281-c9d9-4f29-94dd-6942f7f1feb0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on your behalf.", - "userConsentDisplayName": "Read and write your schedule items", - "value": "Schedule.ReadWrite.All" - }, - { - "description": "Allows the app to read search configuration, on behalf of the signed-in user.", - "displayName": "Read your organization's search configuration", - "id": "7d307522-aa38-4cd0-bd60-90c6f0ac50bd", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read search configuration, on your behalf.", - "userConsentDisplayName": "Read your organization's search configuration", - "value": "SearchConfiguration.Read.All" - }, - { - "description": "Allows the app to read and write search configuration, on behalf of the signed-in user.", - "displayName": "Read and write your organization's search configuration", - "id": "b1a7d408-cab0-47d2-a2a5-a74a3733600d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write search configuration, on your behalf.", - "userConsentDisplayName": "Read and write your organization's search configuration", - "value": "SearchConfiguration.ReadWrite.All" - }, - { - "description": "Allows the app to read security actions, on behalf of the signed-in user.", - "displayName": "Read your organization's security actions", - "id": "1638cddf-07a4-4de2-8645-69c96cacad73", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read security actions, on your behalf.", - "userConsentDisplayName": "Read your organization's security actions", - "value": "SecurityActions.Read.All" - }, - { - "description": "Allows the app to read or update security actions, on behalf of the signed-in user.", - "displayName": "Read and update your organization's security actions", - "id": "dc38509c-b87d-4da0-bd92-6bec988bac4a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and update security actions, on your behalf.", - "userConsentDisplayName": "Read and update your organization's security actions", - "value": "SecurityActions.ReadWrite.All" - }, - { - "description": "Allows the app to read all security alerts, on behalf of the signed-in user.", - "displayName": "Read all security alerts", - "id": "bc257fb8-46b4-4b15-8713-01e91bfbe4ea", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all security alerts that you have access to.", - "userConsentDisplayName": "Read all alerts", - "value": "SecurityAlert.Read.All" - }, - { - "description": "Allows the app to read and write to all security alerts, on behalf of the signed-in user.", - "displayName": "Read and write to all security alerts", - "id": "471f2a7f-2a42-4d45-a2bf-594d0838070d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write all alerts that you have access to.", - "userConsentDisplayName": "Read and write all alerts", - "value": "SecurityAlert.ReadWrite.All" - }, - { - "description": "Read email metadata and security detection details on behalf of the signed in user.", - "displayName": "Read metadata and detection details for emails in your organization", - "id": "53e6783e-b127-4a35-ab3a-6a52d80a9077", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read email metadata and security detection details on your behalf.", - "userConsentDisplayName": "Read metadata and detection details for emails in your organization", - "value": "SecurityAnalyzedMessage.Read.All" - }, - { - "description": "Read email metadata, security detection details, and execute remediation actions like deleting an email, on behalf of the signed in user.", - "displayName": "Read metadata, detection details, and execute remediation actions on emails in your organization", - "id": "48eb8c83-6e58-46e7-a6d3-8805822f5940", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read email metadata, security detection details, and execute remediation actions like deleting an email, on your behalf.", - "userConsentDisplayName": "Read metadata, detection details, and execute remediation actions on emails in your organization", - "value": "SecurityAnalyzedMessage.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization’s security events on behalf of the signed-in user.", - "displayName": "Read your organization’s security events", - "id": "64733abd-851e-478a-bffb-e47a14b18235", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization’s security events on your behalf.", - "userConsentDisplayName": "Read your organization’s security events", - "value": "SecurityEvents.Read.All" - }, - { - "description": "Allows the app to read your organization’s security events on behalf of the signed-in user. Also allows the app to update editable properties in security events on behalf of the signed-in user.", - "displayName": "Read and update your organization’s security events", - "id": "6aedf524-7e1c-45a7-bd76-ded8cab8d0fc", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization’s security events on your behalf. Also allows you to update editable properties in security events.", - "userConsentDisplayName": "Read and update your organization’s security events", - "value": "SecurityEvents.ReadWrite.All" - }, - { - "description": "Allows the app to read security incidents, on behalf of the signed-in user.", - "displayName": "Read incidents", - "id": "b9abcc4f-94fc-4457-9141-d20ce80ec952", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all security incidents that you have access to.", - "userConsentDisplayName": "Read security incidents", - "value": "SecurityIncident.Read.All" - }, - { - "description": "Allows the app to read and write security incidents, on behalf of the signed-in user.", - "displayName": "Read and write to incidents", - "id": "128ca929-1a19-45e6-a3b8-435ec44a36ba", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write to all security incidents that you have access to.", - "userConsentDisplayName": "Read and write to security incidents", - "value": "SecurityIncident.ReadWrite.All" - }, - { - "description": "Allows the app to read your tenant's service health information on behalf of the signed-in user. Health information may include service issues or service health overviews.", - "displayName": "Read service health", - "id": "55896846-df78-47a7-aa94-8d3d4442ca7f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your tenant's service health information on your behalf.Health information may include service issues or service health overviews.", - "userConsentDisplayName": "Read service health", - "value": "ServiceHealth.Read.All" - }, - { - "description": "Allows the app to read your tenant's service announcement messages on behalf of the signed-in user. Messages may include information about new or changed features.", - "displayName": "Read service announcement messages", - "id": "eda39fa6-f8cf-4c3c-a909-432c683e4c9b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your tenant's service announcement messages on your behalf. Messages may include information about new or changed features.", - "userConsentDisplayName": "Read service messages", - "value": "ServiceMessage.Read.All" - }, - { - "description": "Allows the app to update service announcement messages' user status on behalf of the signed-in user. The message status can be marked as read, archive, or favorite.", - "displayName": "Update user status on service announcement messages", - "id": "636e1b0b-1cc2-4b1c-9aa9-4eeed9b9761b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to update service announcement messages' status on your behalf. Your status for messages can be marked as read, archive, or favorite.", - "userConsentDisplayName": "Update your user status on service announcement messages", - "value": "ServiceMessageViewpoint.Write" - }, - { - "description": "Allows the app to read service principal endpoints", - "displayName": "Read service principal endpoints", - "id": "9f9ce928-e038-4e3b-8faf-7b59049a8ddc", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read service principal endpoints", - "userConsentDisplayName": "Read service principal endpoints", - "value": "ServicePrincipalEndpoint.Read.All" - }, - { - "description": "Allows the app to update service principal endpoints", - "displayName": "Read and update service principal endpoints", - "id": "7297d82c-9546-4aed-91df-3d4f0a9b3ff0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to update service principal endpoints", - "userConsentDisplayName": "Read and update service principal endpoints", - "value": "ServicePrincipalEndpoint.ReadWrite.All" - }, - { - "description": "Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user.", - "displayName": "Read SharePoint and OneDrive tenant settings", - "id": "2ef70e10-5bfd-4ede-a5f6-67720500b258", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read the tenant-level settings in SharePoint and OneDrive on your behalf.", - "userConsentDisplayName": "Read SharePoint and OneDrive tenant settings", - "value": "SharePointTenantSettings.Read.All" - }, - { - "description": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on behalf of the signed-in user.", - "displayName": "Read and change SharePoint and OneDrive tenant settings", - "id": "aa07f155-3612-49b8-a147-6c590df35536", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on your behalf.", - "userConsentDisplayName": "Read and change SharePoint and OneDrive tenant settings", - "value": "SharePointTenantSettings.ReadWrite.All" - }, - { - "description": "Allows the app to read all the short notes a sign-in user has access to.", - "displayName": "Read short notes of the signed-in user", - "id": "50f66e47-eb56-45b7-aaa2-75057d9afe08", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your short notes.", - "userConsentDisplayName": "Read your short notes", - "value": "ShortNotes.Read" - }, - { - "description": "Allows the app to read, create, edit, and delete short notes of a signed-in user.", - "displayName": "Read, create, edit, and delete short notes of the signed-in user", - "id": "328438b7-4c01-4c07-a840-e625a749bb89", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, create, edit, and delete your short notes.", - "userConsentDisplayName": "Read, create, edit, and delete your short notes", - "value": "ShortNotes.ReadWrite" - }, - { - "description": "Allows the application to have full control of all site collections on behalf of the signed-in user.", - "displayName": "Have full control of all site collections", - "id": "5a54b8b3-347c-476d-8f8e-42d5c7424d29", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allow the application to have full control of all site collections on your behalf.", - "userConsentDisplayName": "Have full control of all your site collections", - "value": "Sites.FullControl.All" - }, - { - "description": "Allows the application to create or delete document libraries and lists in all site collections on behalf of the signed-in user.", - "displayName": "Create, edit, and delete items and lists in all site collections", - "id": "65e50fdc-43b7-4915-933e-e8138f11f40a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allow the application to create or delete document libraries and lists in all site collections on your behalf.", - "userConsentDisplayName": "Create, edit, and delete items and lists in all your site collections", - "value": "Sites.Manage.All" - }, - { - "description": "Allows the application to read documents and list items in all site collections on behalf of the signed-in user", - "displayName": "Read items in all site collections", - "id": "205e70e5-aba6-4c52-a976-6d2d46c48043", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allow the application to read documents and list items in all site collections on your behalf", - "userConsentDisplayName": "Read items in all site collections", - "value": "Sites.Read.All" - }, - { - "description": "Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user.", - "displayName": "Edit or delete items in all site collections", - "id": "89fe6a52-be36-487e-b7d8-d061c450a026", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allow the application to edit or delete documents and list items in all site collections on your behalf.", - "userConsentDisplayName": "Edit or delete items in all site collections", - "value": "Sites.ReadWrite.All" - }, - { - "description": "Allows the app to be able to send emails from the user’s mailbox using the SMTP AUTH client submission protocol.", - "displayName": "Send emails from mailboxes using SMTP AUTH.", - "id": "258f6531-6087-4cc4-bb90-092c5fb3ed3f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to send emails on your behalf from your mailbox.", - "userConsentDisplayName": "Access to sending emails from your mailbox.", - "value": "SMTP.Send" - }, - { - "description": "Allows the app to read subject rights requests on behalf of the signed-in user", - "displayName": "Read subject rights requests", - "id": "9c3af74c-fd0f-4db4-b17a-71939e2a9d77", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read subject rights requests on your behalf.", - "userConsentDisplayName": "Read data subject requests", - "value": "SubjectRightsRequest.Read.All" - }, - { - "description": "Allows the app to read and write subject rights requests on behalf of the signed-in user", - "displayName": "Read and write subject rights requests", - "id": "2b8fcc74-bce1-4ae3-a0e8-60c53739299d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write subject rights requests on your behalf.", - "userConsentDisplayName": "Read and write data subject requests", - "value": "SubjectRightsRequest.ReadWrite.All" - }, - { - "description": "Allows the app to read all webhook subscriptions on behalf of the signed-in user.", - "displayName": "Read all webhook subscriptions ", - "id": "5f88184c-80bb-4d52-9ff2-757288b2e9b7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all webhook subscriptions on your behalf.", - "userConsentDisplayName": "Read all webhook subscriptions ", - "value": "Subscription.Read.All" - }, - { - "description": "Allows the app to read Azure AD synchronization information, on behalf of the signed-in user.", - "displayName": "Read all Azure AD synchronization data", - "id": "7aa02aeb-824f-4fbe-a3f7-611f751f5b55", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read Azure AD synchronization information, on your behalf.", - "userConsentDisplayName": "Read all Azure AD synchronization data", - "value": "Synchronization.Read.All" - }, - { - "description": "Allows the app to configure the Azure AD synchronization service, on behalf of the signed-in user.", - "displayName": "Read and write all Azure AD synchronization data", - "id": "7bb27fa3-ea8f-4d67-a916-87715b6188bd", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to configure the Azure AD synchronization service, on your behalf.", - "userConsentDisplayName": "Read and write all Azure AD synchronization data", - "value": "Synchronization.ReadWrite.All" - }, - { - "description": "Allows the app to upload bulk user data to the identity synchronization service, on behalf of the signed-in user.", - "displayName": "Upload user data to the identity synchronization service", - "id": "1a2e7420-4e92-4d2b-94cb-fb2952e9ddf7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to upload bulk user data to the identity synchronization service, on your behalf.", - "userConsentDisplayName": "Bulk upload user data to identity synchronization service", - "value": "SynchronizationData-User.Upload" - }, - { - "description": "Allows the app to read the signed-in user’s tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything.", - "displayName": "Read user's tasks and task lists", - "id": "f45671fb-e0fe-4b4b-be20-3d3ce43f1bcb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your tasks and task lists, including any shared with you. Doesn't include permission to create, delete, or update anything.", - "userConsentDisplayName": "Read your tasks and task lists", - "value": "Tasks.Read" - }, - { - "description": "Allows the app to read tasks a user has permissions to access, including their own and shared tasks.", - "displayName": "Read user and shared tasks", - "id": "88d21fd4-8e5a-4c32-b5e2-4a1c95f34f72", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read tasks you have permissions to access, including your own and shared tasks.", - "userConsentDisplayName": "Read your and shared tasks", - "value": "Tasks.Read.Shared" - }, - { - "description": "Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.", - "displayName": "Create, read, update, and delete user’s tasks and task lists", - "id": "2219042f-cab5-40cc-b0d2-16b1540b4c5f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create, read, update, and delete your tasks and task lists, including any shared with you.", - "userConsentDisplayName": "Create, read, update, and delete your tasks and task lists", - "value": "Tasks.ReadWrite" - }, - { - "description": "Allows the app to create, read, update, and delete tasks a user has permissions to, including their own and shared tasks.", - "displayName": "Read and write user and shared tasks", - "id": "c5ddf11b-c114-4886-8558-8a4e557cd52b", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update, create, and delete tasks you have permissions to access, including your own and shared tasks.", - "userConsentDisplayName": "Read and write to your and shared tasks", - "value": "Tasks.ReadWrite.Shared" - }, - { - "description": "Allows the app to create teams on behalf of the signed-in user.", - "displayName": "Create teams", - "id": "7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create teams on your behalf. ", - "userConsentDisplayName": "Create teams", - "value": "Team.Create" - }, - { - "description": "Read the names and descriptions of teams, on behalf of the signed-in user.", - "displayName": "Read the names and descriptions of teams", - "id": "485be79e-c497-4b35-9400-0e3fa7f2a5d4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read the names and descriptions of teams, on your behalf.", - "userConsentDisplayName": "Read the names and descriptions of teams", - "value": "Team.ReadBasic.All" - }, - { - "description": "Read the members of teams, on behalf of the signed-in user.", - "displayName": "Read the members of teams", - "id": "2497278c-d82d-46a2-b1ce-39d4cdde5570", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read the members of teams, on your behalf.", - "userConsentDisplayName": "Read the members of teams", - "value": "TeamMember.Read.All" - }, - { - "description": "Add and remove members from teams, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.", - "displayName": "Add and remove members from teams", - "id": "4a06efd2-f825-4e34-813e-82a57b03d1ee", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Add and remove members from teams, on your behalf. Also allows changing a member's role, for example from owner to non-owner.", - "userConsentDisplayName": "Add and remove members from teams and channels", - "value": "TeamMember.ReadWrite.All" - }, - { - "description": "Add and remove members from all teams, on behalf of the signed-in user. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.", - "displayName": "Add and remove members with non-owner role for all teams", - "id": "2104a4db-3a2f-4ea0-9dba-143d457dc666", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Add and remove members from all teams, on your behalf. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.", - "userConsentDisplayName": "Add and remove members with non-owner role for all teams", - "value": "TeamMember.ReadWriteNonOwnerRole.All" - }, - { - "description": "Allows the app to read the signed-in user's teamwork activity feed.", - "displayName": "Read user's teamwork activity feed", - "id": "0e755559-83fb-4b44-91d0-4cc721b9323e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your teamwork activity feed.", - "userConsentDisplayName": "Read your teamwork activity feed", - "value": "TeamsActivity.Read" - }, - { - "description": "Allows the app to create new notifications in users' teamwork activity feeds on behalf of the signed in user. These notifications may not be discoverable or be held or governed by compliance policies.", - "displayName": "Send a teamwork activity as the user", - "id": "7ab1d787-bae7-4d5d-8db6-37ea32df9186", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create new activities in your teamwork activity feed, and send new activities to other users' activity feed, on your behalf.", - "userConsentDisplayName": "Send a teamwork activity", - "value": "TeamsActivity.Send" - }, - { - "description": "Allows the app to read the Teams apps that are installed in chats the signed-in user can access. Does not give the ability to read application-specific settings.", - "displayName": "Read installed Teams apps in chats", - "id": "bf3fbf03-f35f-4e93-963e-47e4d874c37a", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the Teams apps that are installed in chats that you can access. Does not give the ability to read application-specific settings.", - "userConsentDisplayName": "Read installed Teams apps in chats", - "value": "TeamsAppInstallation.ReadForChat" - }, - { - "description": "Allows the app to read the Teams apps that are installed in teams the signed-in user can access. Does not give the ability to read application-specific settings.", - "displayName": "Read installed Teams apps in teams", - "id": "5248dcb1-f83b-4ec3-9f4d-a4428a961a72", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the Teams apps that are installed in teams that you can access. Does not give the ability to read application-specific settings.", - "userConsentDisplayName": "Read installed Teams apps in teams", - "value": "TeamsAppInstallation.ReadForTeam" - }, - { - "description": "Allows the app to read the Teams apps that are installed for the signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Read user's installed Teams apps", - "id": "c395395c-ff9a-4dba-bc1f-8372ba9dca84", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the Teams apps that are installed for you. Does not give the ability to read application-specific settings.", - "userConsentDisplayName": "Read your installed Teams apps", - "value": "TeamsAppInstallation.ReadForUser" - }, - { - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.", - "displayName": "Manage installed Teams apps in chats", - "id": "e1408a66-8f82-451b-a2f3-3c3e38f7413f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.", - "userConsentDisplayName": "Manage installation and permission grants of Teams apps in chats", - "value": "TeamsAppInstallation.ReadWriteAndConsentForChat" - }, - { - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.", - "displayName": "Manage installed Teams apps in teams", - "id": "946349d5-2a9d-4535-abc0-7beeacaedd1d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.", - "userConsentDisplayName": "Manage installation and permission grants of Teams apps in teams", - "value": "TeamsAppInstallation.ReadWriteAndConsentForTeam" - }, - { - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in user accounts, on behalf of the signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.", - "displayName": "Manage installation and permission grants of Teams apps in users' personal scope", - "id": "2da62c49-dfbd-40df-ba16-fef3529d391c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps for your account, on your behalf. Gives the ability to manage permission grants for accessing your data.", - "userConsentDisplayName": "Manage installation and permission grants of Teams apps on your user account", - "value": "TeamsAppInstallation.ReadWriteAndConsentForUser" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access, and manage its permission grants for accessing those specific chats' data.", - "displayName": "Allow the Teams app to manage itself and its permission grants in chats", - "id": "a0e0e18b-8fb2-458f-8130-da2d7cab9c75", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access, and manage its permission grants for accessing those specific chats' data.", - "userConsentDisplayName": "Allow the Teams app to manage itself and its permission grants in chats", - "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForChat" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in teams the signed-in user can access, and manage its permission grants for accessing those specific teams' data.", - "displayName": "Allow the Teams app to manage itself and its permission grants in teams", - "id": "4a6bbf29-a0e1-4a4d-a7d1-cef17f772975", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in teams the signed-in user can access, and manage its permission grants for accessing those specific teams' data.", - "userConsentDisplayName": "Allow the Teams app to manage itself and its permission grants in teams", - "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForTeam" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in user accounts, and manage its permission grants for accessing those specific users' data, on behalf of the signed-in user.", - "displayName": "Allow the Teams app to manage itself and its permission grants in user accounts", - "id": "7a349935-c54d-44ab-ab66-1b460d315be7", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in your account, and manage its permission grants for accessing your data, on your behalf.", - "userConsentDisplayName": "Allow the Teams app to manage itself and its permission grants on your user account", - "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForUser" - }, - { - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Does not give the ability to read application-specific settings.", - "displayName": "Manage installed Teams apps in chats", - "id": "aa85bf13-d771-4d5d-a9e6-bca04ce44edf", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats you can access. Does not give the ability to read application-specific settings.", - "userConsentDisplayName": "Manage installed Teams apps in chats", - "value": "TeamsAppInstallation.ReadWriteForChat" - }, - { - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings.", - "displayName": "Manage installed Teams apps in teams", - "id": "2e25a044-2580-450d-8859-42eeb6e996c0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams you can access. Does not give the ability to read application-specific settings.", - "userConsentDisplayName": "Manage installed Teams apps in teams", - "value": "TeamsAppInstallation.ReadWriteForTeam" - }, - { - "description": "Allows the app to read, install, upgrade, and uninstall Teams apps installed for the signed-in user. Does not give the ability to read application-specific settings.", - "displayName": "Manage user's installed Teams apps", - "id": "093f8818-d05f-49b8-95bc-9d2a73e9a43c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps installed for you. Does not give the ability to read application-specific settings.", - "userConsentDisplayName": "Manage your installed Teams apps", - "value": "TeamsAppInstallation.ReadWriteForUser" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access.", - "displayName": "Allow the Teams app to manage itself in chats", - "id": "0ce33576-30e8-43b7-99e5-62f8569a4002", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats you can access.", - "userConsentDisplayName": "Allow the Teams app to manage itself in chats", - "value": "TeamsAppInstallation.ReadWriteSelfForChat" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself to teams the signed-in user can access.", - "displayName": "Allow the app to manage itself in teams", - "id": "0f4595f7-64b1-4e13-81bc-11a249df07a9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself to teams you can access.", - "userConsentDisplayName": "Allow the Teams app to manage itself in teams", - "value": "TeamsAppInstallation.ReadWriteSelfForTeam" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for the signed-in user.", - "displayName": "Allow the Teams app to manage itself for a user", - "id": "207e0cb1-3ce7-4922-b991-5a760c346ebc", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for you.", - "userConsentDisplayName": "Allow the Teams app to manage itself for you", - "value": "TeamsAppInstallation.ReadWriteSelfForUser" - }, - { - "description": "Read all teams' settings, on behalf of the signed-in user.", - "displayName": "Read teams' settings", - "id": "48638b3c-ad68-4383-8ac4-e6880ee6ca57", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read all teams' settings, on your behalf.", - "userConsentDisplayName": "Read teams' settings", - "value": "TeamSettings.Read.All" - }, - { - "description": "Read and change all teams' settings, on behalf of the signed-in user.", - "displayName": "Read and change teams' settings", - "id": "39d65650-9d3e-4223-80db-a335590d027e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read and change all teams' settings, on your behalf.", - "userConsentDisplayName": "Read and change teams' settings", - "value": "TeamSettings.ReadWrite.All" - }, - { - "description": "Allows the app to create tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.", - "displayName": "Create tabs in Microsoft Teams.", - "id": "a9ff19c2-f369-4a95-9a25-ba9d460efc8e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create tabs in any team in Microsoft Teams, on your behalf. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.", - "userConsentDisplayName": "Create tabs in Microsoft Teams.", - "value": "TeamsTab.Create" - }, - { - "description": "Read the names and settings of tabs inside any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs.", - "displayName": "Read tabs in Microsoft Teams.", - "id": "59dacb05-e88d-4c13-a684-59f1afc8cc98", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read the names and settings of tabs inside any team in Microsoft Teams, on your behalf. This does not give access to the content inside the tabs.", - "userConsentDisplayName": "Read tabs in Microsoft Teams.", - "value": "TeamsTab.Read.All" - }, - { - "description": "Read and write tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs.", - "displayName": "Read and write tabs in Microsoft Teams.", - "id": "b98bfd41-87c6-45cc-b104-e2de4f0dafb9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read and write tabs in any team in Microsoft Teams, on your behalf. This does not give access to the content inside the tabs.", - "userConsentDisplayName": "Read and write tabs in Microsoft Teams.", - "value": "TeamsTab.ReadWrite.All" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in chats the signed-in user can access.", - "displayName": "Allow the Teams app to manage all tabs in chats", - "id": "ee928332-e9c2-4747-b4a0-f8c164b68de6", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in chats you can access.", - "userConsentDisplayName": "Allow the Teams app to manage all tabs in chats", - "value": "TeamsTab.ReadWriteForChat" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs to teams the signed-in user can access.", - "displayName": "Allow the Teams app to manage all tabs in teams", - "id": "c975dd04-a06e-4fbb-9704-62daad77bb49", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs to teams you can access.", - "userConsentDisplayName": "Allow the app to manage all tabs in teams", - "value": "TeamsTab.ReadWriteForTeam" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for the signed-in user.", - "displayName": "Allow the Teams app to manage all tabs for a user", - "id": "c37c9b61-7762-4bff-a156-afc0005847a0", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for you.", - "userConsentDisplayName": "Allow the Teams app to manage all tabs for you", - "value": "TeamsTab.ReadWriteForUser" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in chats the signed-in user can access.", - "displayName": "Allow the Teams app to manage only its own tabs in chats", - "id": "0c219d04-3abf-47f7-912d-5cca239e90e6", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in chats you can access.", - "userConsentDisplayName": "Allow the Teams app to manage only its own tabs in chats", - "value": "TeamsTab.ReadWriteSelfForChat" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs to teams the signed-in user can access.", - "displayName": "Allow the Teams app to manage only its own tabs in teams", - "id": "f266662f-120a-4314-b26a-99b08617c7ef", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs to teams you can access.", - "userConsentDisplayName": "Allow the Teams app to manage only its own tabs in teams", - "value": "TeamsTab.ReadWriteSelfForTeam" - }, - { - "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for the signed-in user.", - "displayName": "Allow the Teams app to manage only its own tabs for a user", - "id": "395dfec1-a0b9-465f-a783-8250a430cb8c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for you.", - "userConsentDisplayName": "Allow the Teams app to manage only its own tabs for you", - "value": "TeamsTab.ReadWriteSelfForUser" - }, - { - "description": "Allows the app to read the available Teams templates, on behalf of the signed-in user.", - "displayName": "Read available Teams templates", - "id": "cd87405c-5792-4f15-92f7-debc0db6d1d6", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Read available Teams templates, on your behalf.", - "userConsentDisplayName": "Read available Teams templates", - "value": "TeamTemplates.Read" - }, - { - "description": "Allows the app to read the Teams app settings on behalf of the signed-in user.", - "displayName": "Read Teams app settings", - "id": "44e060c4-bbdc-4256-a0b9-dcc0396db368", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the Teams app settings on your behalf.", - "userConsentDisplayName": "Read Teams app settings", - "value": "TeamworkAppSettings.Read.All" - }, - { - "description": "Allows the app to read and write the Teams app settings on behalf of the signed-in user.", - "displayName": "Read and write Teams app settings", - "id": "87c556f0-2bd9-4eed-bd74-5dd8af6eaf7e", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the Teams app settings on your behalf.", - "userConsentDisplayName": "Read and write Teams app settings", - "value": "TeamworkAppSettings.ReadWrite.All" - }, - { - "description": "Allow the app to read the management data for Teams devices on behalf of the signed-in user.", - "displayName": "Read Teams devices", - "id": "b659488b-9d28-4208-b2be-1c6652b3c970", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allow the app to read the management data for Teams devices on your behalf.", - "userConsentDisplayName": "Read Teams devices", - "value": "TeamworkDevice.Read.All" - }, - { - "description": "Allow the app to read and write the management data for Teams devices on behalf of the signed-in user.", - "displayName": "Read and write Teams devices", - "id": "ddd97ecb-5c31-43db-a235-0ee20e635c40", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allow the app to read and write the management data for Teams devices on your behalf.", - "userConsentDisplayName": "Read and write Teams devices", - "value": "TeamworkDevice.ReadWrite.All" - }, - { - "description": "Allows the app to read tags in Teams, on behalf of the signed-in user.", - "displayName": "Read tags in Teams", - "id": "57587d0b-8399-45be-b207-8050cec54575", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read tags in Teams, on your behalf.", - "userConsentDisplayName": "Read tags in Teams", - "value": "TeamworkTag.Read" - }, - { - "description": "Allows the app to read and write tags in Teams, on behalf of the signed-in user.", - "displayName": "Read and write tags in Teams", - "id": "539dabd7-b5b6-4117-b164-d60cd15a8671", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write tags in Teams, on your behalf.", - "userConsentDisplayName": "Read and write tags in Teams", - "value": "TeamworkTag.ReadWrite" - }, - { - "description": "Allows the app to read the term store data that the signed-in user has access to. This includes all sets, groups and terms in the term store.", - "displayName": "Read term store data", - "id": "297f747b-0005-475b-8fef-c890f5152b38", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the term store data that you have access to. This includes all sets, groups and terms in the term store.", - "userConsentDisplayName": "Read term store data", - "value": "TermStore.Read.All" - }, - { - "description": "Allows the app to read or modify data that the signed-in user has access to. This includes all sets, groups and terms in the term store.", - "displayName": "Read and write term store data", - "id": "6c37c71d-f50f-4bff-8fd3-8a41da390140", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read or modify data that you have access to. This includes all sets, groups and terms in the term store.", - "userConsentDisplayName": "Read and write term store data", - "value": "TermStore.ReadWrite.All" - }, - { - "description": "Allows an app to read your organization's threat assessment requests on behalf of the signed-in user. Also allows the app to create new requests to assess threats received by your organization on behalf of the signed-in user.", - "displayName": "Read and write threat assessment requests", - "id": "cac97e40-6730-457d-ad8d-4852fddab7ad", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows an app to read your organization's threat assessment requests on your behalf. Also allows the app to create new requests to assess threats received by your organization on your behalf.", - "userConsentDisplayName": "Read and write threat assessment requests", - "value": "ThreatAssessment.ReadWrite.All" - }, - { - "description": "Allows the app to run hunting queries, on behalf of the signed-in user.", - "displayName": "Run hunting queries", - "id": "b152eca8-ea73-4a48-8c98-1a6742673d99", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to run hunting queries that you can execute.", - "userConsentDisplayName": "Run hunting queries", - "value": "ThreatHunting.Read.All" - }, - { - "description": "Allows the app to read all the indicators for your organization, on behalf of the signed-in user.", - "displayName": "Read all threat indicators", - "id": "9cc427b4-2004-41c5-aa22-757b755e9796", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read all the indicators for your organization, on your behalf.", - "userConsentDisplayName": "Read all threat indicators", - "value": "ThreatIndicators.Read.All" - }, - { - "description": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), on behalf of the signed-in user.  It cannot update any threat indicators it does not own.", - "displayName": "Manage threat indicators this app creates or owns", - "id": "91e7d36d-022a-490f-a748-f8e011357b42", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), on your behalf.  It cannot update any threat indicators that it is not an owner of.", - "userConsentDisplayName": "Manage threat indicators this app creates or owns", - "value": "ThreatIndicators.ReadWrite.OwnedBy" - }, - { - "description": "Allows the app to read threat intelligence information, such as indicators, observations, and articles, on behalf of the signed-in user.", - "displayName": "Read all threat intelligence information", - "id": "f266d9c0-ccb9-4fb8-a228-01ac0d8d6627", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read threat intelligence information, such as indicators, observations, and articles, on your behalf.", - "userConsentDisplayName": "Read threat intelligence Information", - "value": "ThreatIntelligence.Read.All" - }, - { - "description": "Allows the app to read the threat submissions and threat submission policies owned by the signed-in user.", - "displayName": "Read threat submissions", - "id": "fd5353c6-26dd-449f-a565-c4e16b9fce78", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the threat submissions and threat submission policies that you own on your behalf.", - "userConsentDisplayName": "Read threat submissions", - "value": "ThreatSubmission.Read" - }, - { - "description": "Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user.", - "displayName": "Read all threat submissions", - "id": "7083913a-4966-44b6-9886-c5822a5fd910", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's threat submissions and threat submission policies on your behalf.", - "userConsentDisplayName": "Read all threat submissions", - "value": "ThreatSubmission.Read.All" - }, - { - "description": "Allows the app to read the threat submissions and threat submission policies owned by the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user.", - "displayName": "Read and write threat submissions", - "id": "68a3156e-46c9-443c-b85c-921397f082b5", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the threat submissions and threat submission policies that you own. Also allows the app to create new threat submissions on your behalf.", - "userConsentDisplayName": "Read and write threat submissions", - "value": "ThreatSubmission.ReadWrite" - }, - { - "description": "Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user.", - "displayName": "Read and write all threat submissions", - "id": "8458e264-4eb9-4922-abe9-768d58f13c7f", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's threat submissions and threat submission policies on your behalf. Also allows the app to create new threat submissions on your behalf.", - "userConsentDisplayName": "Read and write all threat submissions", - "value": "ThreatSubmission.ReadWrite.All" - }, - { - "description": "Allows the app to read your organization's threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submission policies on behalf of the signed-in user.", - "displayName": "Read and write all threat submission policies", - "id": "059e5840-5353-4c68-b1da-666a033fc5e8", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your organization's threat submission policies on your behalf. Also allows the app to create new threat submission policies on your behalf.", - "userConsentDisplayName": "Read and write all threat submission policies", - "value": "ThreatSubmissionPolicy.ReadWrite.All" - }, - { - "description": "Allows the app to read trust framework key set properties on behalf of the signed-in user.", - "displayName": "Read trust framework key sets", - "id": "7ad34336-f5b1-44ce-8682-31d7dfcd9ab9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read trust framework key sets, on your behalf.", - "userConsentDisplayName": "Read trust framework key sets", - "value": "TrustFrameworkKeySet.Read.All" - }, - { - "description": "Allows the app to read and write trust framework key set properties on behalf of the signed-in user.", - "displayName": "Read and write trust framework key sets", - "id": "39244520-1e7d-4b4a-aee0-57c65826e427", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read or write trust framework key sets, on your behalf.", - "userConsentDisplayName": "Read and write trust framework key sets", - "value": "TrustFrameworkKeySet.ReadWrite.All" - }, - { - "description": "Allows the app to read basic unified group properties, memberships and owners of the group the signed-in guest is a member of.", - "displayName": "Read unified group memberships as guest", - "id": "73e75199-7c3e-41bb-9357-167164dbb415", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read basic unified group properties, memberships and owners of the group you are a member of.", - "userConsentDisplayName": "Read unified group memberships as guest", - "value": "UnifiedGroupMember.Read.AsGuest" - }, - { - "description": "Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", - "displayName": "Read all users' lifecycle information", - "id": "ed8d2a04-0374-41f1-aefe-da8ac87ccc87", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", - "userConsentDisplayName": "Read all users' lifecycle information", - "value": "User-LifeCycleInfo.Read.All" - }, - { - "description": "Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", - "displayName": "Read and write all users' lifecycle information", - "id": "7ee7473e-bd4b-4c9f-987c-bd58481f5fa2", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", - "userConsentDisplayName": "Read and write all users' lifecycle information", - "value": "User-LifeCycleInfo.ReadWrite.All" - }, - { - "description": "Allows the app to enable and disable users' accounts, on behalf of the signed-in user.", - "displayName": "Enable and disable user accounts", - "id": "f92e74e7-2563-467f-9dd0-902688cb5863", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to enable and disable users' accounts, on your behalf.", - "userConsentDisplayName": "Enable and disable user accounts", - "value": "User.EnableDisableAccount.All" - }, - { - "description": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).", - "displayName": "Export user's data", - "id": "405a51b5-8d8d-430b-9842-8be4b0e9f324", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).", - "userConsentDisplayName": "Export user's data", - "value": "User.Export.All" - }, - { - "description": "Allows the app to invite guest users to the organization, on behalf of the signed-in user.", - "displayName": "Invite guest users to the organization", - "id": "63dd7cd9-b489-4adf-a28c-ac38b9a0f962", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to invite guest users to the organization, on your behalf.", - "userConsentDisplayName": "Invite guest users to the organization", - "value": "User.Invite.All" - }, - { - "description": "Allows the app to read, update and delete identities that are associated with a user's account that the signed-in user has access to. This controls the identities users can sign-in with.", - "displayName": "Manage user identities", - "id": "637d7bec-b31e-4deb-acc9-24275642a2c9", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read, update and delete identities that are associated with a user's account that you have access to. This controls the identities users can sign-in with.", - "userConsentDisplayName": "Manage user identities", - "value": "User.ManageIdentities.All" - }, - { - "description": "Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.", - "displayName": "Sign in and read user profile", - "id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.", - "userConsentDisplayName": "Sign you in and read your profile", - "value": "User.Read" - }, - { - "description": "Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.", - "displayName": "Read all users' full profiles", - "id": "a154be20-db9c-4678-8ab7-66f6cc099a59", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on your behalf.", - "userConsentDisplayName": "Read all users' full profiles", - "value": "User.Read.All" - }, - { - "description": "Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address and photo.", - "displayName": "Read all users' basic profiles", - "id": "b340eb25-3456-403f-be2f-af7a0d370277", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read a basic set of profile properties of other users in your organization on your behalf. Includes display name, first and last name, email address and photo.", - "userConsentDisplayName": "Read all users' basic profiles", - "value": "User.ReadBasic.All" - }, - { - "description": "Allows the app to read your profile. It also allows the app to update your profile information on your behalf.", - "displayName": "Read and write access to user profile", - "id": "b4e74841-8e56-480b-be8b-910348b18b4c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your profile, and discover your group membership, reports and manager. It also allows the app to update your profile information on your behalf.", - "userConsentDisplayName": "Read and update your profile", - "value": "User.ReadWrite" - }, - { - "description": "Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.", - "displayName": "Read and write all users' full profiles", - "id": "204e0828-b5ca-4ad8-b9f3-f32a958e7cc4", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, on your behalf.", - "userConsentDisplayName": "Read and write all users' full profiles", - "value": "User.ReadWrite.All" - }, - { - "description": "Allows the app to read and report the signed-in user's activity in the app.", - "displayName": "Read and write app activity to users' activity feed", - "id": "47607519-5fb1-47d9-99c7-da4b48f369b1", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and report your activity in the app.", - "userConsentDisplayName": "Read and write app activity to your activity feed", - "value": "UserActivity.ReadWrite.CreatedByApp" - }, - { - "description": "Allows the app to read the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods.", - "displayName": "Read user authentication methods.", - "id": "1f6b61c5-2f65-4135-9c9f-31c0f8d32b52", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read your authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like your passwords, or to sign-in or otherwise use your authentication methods.", - "userConsentDisplayName": "Read your authentication methods.", - "value": "UserAuthenticationMethod.Read" - }, - { - "description": "Allows the app to read authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", - "displayName": "Read all users' authentication methods", - "id": "aec28ec7-4d02-4e8c-b864-50163aea77eb", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read authentication methods of all users you have access to in your organization. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", - "userConsentDisplayName": "Read all users' authentication methods", - "value": "UserAuthenticationMethod.Read.All" - }, - { - "description": "Allows the app to read and write the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods. ", - "displayName": "Read and write user authentication methods", - "id": "48971fc1-70d7-4245-af77-0beb29b53ee2", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write your authentication methods, including phone numbers and Authenticator app settings.This does not allow the app to see secret information like your passwords, or to sign-in or otherwise use your authentication methods.", - "userConsentDisplayName": "Read and write your authentication methods", - "value": "UserAuthenticationMethod.ReadWrite" - }, - { - "description": " Allows the app to read and write authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", - "displayName": "Read and write all users' authentication methods.", - "id": "b7887744-6746-4312-813d-72daeaee7e2d", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write authentication methods of all users you have access to in your organization. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", - "userConsentDisplayName": "Read and write all users' authentication methods", - "value": "UserAuthenticationMethod.ReadWrite.All" - }, - { - "description": "Allows the app to send, read, update and delete user’s notifications.", - "displayName": "Deliver and manage user's notifications", - "id": "26e2f3e8-b2a1-47fc-9620-89bb5b042024", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to send, read, update and delete your app-specific notifications.", - "userConsentDisplayName": "Deliver and manage your notifications", - "value": "UserNotification.ReadWrite.CreatedByApp" - }, - { - "description": "Allows the app to report the signed-in user's app activity information to Microsoft Timeline.", - "displayName": "Write app activity to users' timeline", - "id": "367492fc-594d-4972-a9b5-0d58c622c91c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to report your app activity information to Microsoft Timeline.", - "userConsentDisplayName": "Write app activity to your timeline", - "value": "UserTimelineActivity.Write.CreatedByApp" - }, - { - "description": "Allows an application to read virtual appointments for the signed-in user. Only an organizer or participant user can read their virtual appointments.  ", - "displayName": "Read a user's virtual appointments", - "id": "27470298-d3b8-4b9c-aad4-6334312a3eac", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read virtual appointments on your behalf.  ", - "userConsentDisplayName": "Read your virtual appointments ", - "value": "VirtualAppointment.Read" - }, - { - "description": "Allows an application to read and write virtual appointments for the signed-in user. Only an organizer or participant user can read and write their virtual appointments. ", - "displayName": "Read and write a user's virtual appointments  ", - "id": "2ccc2926-a528-4b17-b8bb-860eed29d64c", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write virtual appointments on your behalf.  ", - "userConsentDisplayName": "Read and write your virtual appointments", - "value": "VirtualAppointment.ReadWrite" - }, - { - "description": "Allows the app to read virtual events created by the you", - "displayName": "Read your virtual events", - "id": "6b616635-ae58-433a-a918-8c45e4f304dc", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read virtual events created by the you", - "userConsentDisplayName": "Read your virtual events", - "value": "VirtualEvent.Read" - }, - { - "description": "Allows the app to read and write all Windows update deployment settings for the organization on behalf of the signed-in user.", - "displayName": "Read and write all Windows update deployment settings", - "id": "11776c0c-6138-4db3-a668-ee621bea2555", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read and write all Windows update deployment settings for the organization on your behalf.", - "userConsentDisplayName": "Read and write all Windows update deployment settings", - "value": "WindowsUpdates.ReadWrite.All" - }, - { - "description": "Allows the app to read workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user.", - "displayName": "Read workforce integrations", - "id": "f1ccd5a7-6383-466a-8db8-1a656f7d06fa", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to read workforce integrations, to synchronize data from Microsoft Teams Shifts, on your behalf.", - "userConsentDisplayName": "Read workforce integrations", - "value": "WorkforceIntegration.Read.All" - }, - { - "description": "Allows the app to manage workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user.", - "displayName": "Read and write workforce integrations", - "id": "08c4b377-0d23-4a8b-be2a-23c1c1d88545", - "isEnabled": true, - "origin": "Delegated", - "userConsentDescription": "Allows the app to manage workforce integrations, to synchronize data from Microsoft Teams Shifts, on your behalf.", - "userConsentDisplayName": "Read and write workforce integrations", - "value": "WorkforceIntegration.ReadWrite.All" - } -] diff --git a/public/android-chrome-192x192.png b/public/android-chrome-192x192.png index b1311174e895..f2388ad94457 100644 Binary files a/public/android-chrome-192x192.png and b/public/android-chrome-192x192.png differ diff --git a/public/android-chrome-512x512.png b/public/android-chrome-512x512.png index 9221cc217c35..85f7bba00f59 100644 Binary files a/public/android-chrome-512x512.png and b/public/android-chrome-512x512.png differ diff --git a/public/apple-touch-icon.png b/public/apple-touch-icon.png index 8c81e4e2c7c1..31a8bad5c448 100644 Binary files a/public/apple-touch-icon.png and b/public/apple-touch-icon.png differ diff --git a/public/assets/avatars/avatar-adler-atthowe.jpg b/public/assets/avatars/avatar-adler-atthowe.jpg new file mode 100644 index 000000000000..848b93ce6717 Binary files /dev/null and b/public/assets/avatars/avatar-adler-atthowe.jpg differ diff --git a/public/assets/avatars/avatar-andi-jevons.jpg b/public/assets/avatars/avatar-andi-jevons.jpg new file mode 100644 index 000000000000..5fb7c54a5e98 Binary files /dev/null and b/public/assets/avatars/avatar-andi-jevons.jpg differ diff --git a/public/assets/avatars/avatar-bell-covely.jpg b/public/assets/avatars/avatar-bell-covely.jpg new file mode 100644 index 000000000000..4cde5d81c4ae Binary files /dev/null and b/public/assets/avatars/avatar-bell-covely.jpg differ diff --git a/public/assets/avatars/avatar-candace-royden.jpg b/public/assets/avatars/avatar-candace-royden.jpg new file mode 100644 index 000000000000..6524b8fcb96a Binary files /dev/null and b/public/assets/avatars/avatar-candace-royden.jpg differ diff --git a/public/assets/avatars/avatar-chen-simmons.jpg b/public/assets/avatars/avatar-chen-simmons.jpg new file mode 100644 index 000000000000..8ba07c93dd0a Binary files /dev/null and b/public/assets/avatars/avatar-chen-simmons.jpg differ diff --git a/public/assets/avatars/avatar-eda-annies.jpg b/public/assets/avatars/avatar-eda-annies.jpg new file mode 100644 index 000000000000..3fe0c77f665a Binary files /dev/null and b/public/assets/avatars/avatar-eda-annies.jpg differ diff --git a/public/assets/avatars/avatar-emelia-brizland.jpg b/public/assets/avatars/avatar-emelia-brizland.jpg new file mode 100644 index 000000000000..ca44492cd6e7 Binary files /dev/null and b/public/assets/avatars/avatar-emelia-brizland.jpg differ diff --git a/public/assets/avatars/avatar-fabiano-jorioz.jpg b/public/assets/avatars/avatar-fabiano-jorioz.jpg new file mode 100644 index 000000000000..f1ddab7cdad5 Binary files /dev/null and b/public/assets/avatars/avatar-fabiano-jorioz.jpg differ diff --git a/public/assets/avatars/avatar-giraud-lamlin.jpg b/public/assets/avatars/avatar-giraud-lamlin.jpg new file mode 100644 index 000000000000..af89ad6ecb3f Binary files /dev/null and b/public/assets/avatars/avatar-giraud-lamlin.jpg differ diff --git a/public/assets/avatars/avatar-horia-tepar.jpg b/public/assets/avatars/avatar-horia-tepar.jpg new file mode 100644 index 000000000000..39ef93d3f1fc Binary files /dev/null and b/public/assets/avatars/avatar-horia-tepar.jpg differ diff --git a/public/assets/avatars/avatar-jenilee-felderer.jpg b/public/assets/avatars/avatar-jenilee-felderer.jpg new file mode 100644 index 000000000000..fde03dbd0d57 Binary files /dev/null and b/public/assets/avatars/avatar-jenilee-felderer.jpg differ diff --git a/public/assets/avatars/avatar-meggie-heinonen.jpg b/public/assets/avatars/avatar-meggie-heinonen.jpg new file mode 100644 index 000000000000..b82d688eaed6 Binary files /dev/null and b/public/assets/avatars/avatar-meggie-heinonen.jpg differ diff --git a/public/assets/avatars/avatar-priscilla-parades.jpg b/public/assets/avatars/avatar-priscilla-parades.jpg new file mode 100644 index 000000000000..52a057cdae9c Binary files /dev/null and b/public/assets/avatars/avatar-priscilla-parades.jpg differ diff --git a/public/assets/avatars/avatar-rustin-rathe.jpg b/public/assets/avatars/avatar-rustin-rathe.jpg new file mode 100644 index 000000000000..7d2f8cc169e1 Binary files /dev/null and b/public/assets/avatars/avatar-rustin-rathe.jpg differ diff --git a/public/assets/avatars/avatar-sean-picott.jpg b/public/assets/avatars/avatar-sean-picott.jpg new file mode 100644 index 000000000000..3e474d761960 Binary files /dev/null and b/public/assets/avatars/avatar-sean-picott.jpg differ diff --git a/public/assets/avatars/avatar-wilhelm-engall.jpg b/public/assets/avatars/avatar-wilhelm-engall.jpg new file mode 100644 index 000000000000..7dff34e3f9f9 Binary files /dev/null and b/public/assets/avatars/avatar-wilhelm-engall.jpg differ diff --git a/public/assets/flags/flag-de.svg b/public/assets/flags/flag-de.svg new file mode 100644 index 000000000000..bba6365dccc5 --- /dev/null +++ b/public/assets/flags/flag-de.svg @@ -0,0 +1,6 @@ + + + + + + diff --git a/public/assets/flags/flag-es.svg b/public/assets/flags/flag-es.svg new file mode 100644 index 000000000000..6bb1d4b58d74 --- /dev/null +++ b/public/assets/flags/flag-es.svg @@ -0,0 +1,5 @@ + + + + + diff --git a/public/assets/flags/flag-uk.svg b/public/assets/flags/flag-uk.svg new file mode 100644 index 000000000000..6bd75d83e567 --- /dev/null +++ b/public/assets/flags/flag-uk.svg @@ -0,0 +1,19 @@ + + + + + + + + + + + + + + + + + + + diff --git a/public/assets/home-features-auth.png b/public/assets/home-features-auth.png new file mode 100644 index 000000000000..e7d7aa9da8ef Binary files /dev/null and b/public/assets/home-features-auth.png differ diff --git a/public/assets/home-features-filters.png b/public/assets/home-features-filters.png new file mode 100644 index 000000000000..e8555b0fa3df Binary files /dev/null and b/public/assets/home-features-filters.png differ diff --git a/public/assets/home-features-states.png b/public/assets/home-features-states.png new file mode 100644 index 000000000000..8ec795a542e1 Binary files /dev/null and b/public/assets/home-features-states.png differ diff --git a/public/assets/home-flows.png b/public/assets/home-flows.png new file mode 100644 index 000000000000..17126b704c53 Binary files /dev/null and b/public/assets/home-flows.png differ diff --git a/public/assets/home-hero.png b/public/assets/home-hero.png new file mode 100644 index 000000000000..a0f6bead6cc4 Binary files /dev/null and b/public/assets/home-hero.png differ diff --git a/public/assets/illustration-not-found.svg b/public/assets/illustration-not-found.svg new file mode 100644 index 000000000000..147944880e94 --- /dev/null +++ b/public/assets/illustration-not-found.svg @@ -0,0 +1,41 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/public/assets/illustration-reports.png b/public/assets/illustration-reports.png new file mode 100644 index 000000000000..b54c92e1f4fc Binary files /dev/null and b/public/assets/illustration-reports.png differ diff --git a/public/assets/illustrations/undraw-into-the-night-nd84.svg b/public/assets/illustrations/undraw-into-the-night-nd84.svg new file mode 100644 index 000000000000..a7d05162299b --- /dev/null +++ b/public/assets/illustrations/undraw-into-the-night-nd84.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_analysis_dq08.svg b/public/assets/illustrations/undraw_analysis_dq08.svg new file mode 100644 index 000000000000..b769a4c4c23e --- /dev/null +++ b/public/assets/illustrations/undraw_analysis_dq08.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_apps_re_ienc.svg b/public/assets/illustrations/undraw_apps_re_ienc.svg new file mode 100644 index 000000000000..ffb8135ed6e8 --- /dev/null +++ b/public/assets/illustrations/undraw_apps_re_ienc.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_articles_wbpb.svg b/public/assets/illustrations/undraw_articles_wbpb.svg new file mode 100644 index 000000000000..9199f58c645c --- /dev/null +++ b/public/assets/illustrations/undraw_articles_wbpb.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_audio_conversation_re_3t38.svg b/public/assets/illustrations/undraw_audio_conversation_re_3t38.svg new file mode 100644 index 000000000000..848571b94a0c --- /dev/null +++ b/public/assets/illustrations/undraw_audio_conversation_re_3t38.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_bug_fixing_oc-7-a.svg b/public/assets/illustrations/undraw_bug_fixing_oc-7-a.svg new file mode 100644 index 000000000000..540feb57a01a --- /dev/null +++ b/public/assets/illustrations/undraw_bug_fixing_oc-7-a.svg @@ -0,0 +1 @@ +bug fixing \ No newline at end of file diff --git a/public/assets/illustrations/undraw_business_chat_re_gg4h.svg b/public/assets/illustrations/undraw_business_chat_re_gg4h.svg new file mode 100644 index 000000000000..8f7e0d60af5c --- /dev/null +++ b/public/assets/illustrations/undraw_business_chat_re_gg4h.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_button_style_re_uctt.svg b/public/assets/illustrations/undraw_button_style_re_uctt.svg new file mode 100644 index 000000000000..de17287e0f37 --- /dev/null +++ b/public/assets/illustrations/undraw_button_style_re_uctt.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_cloud_hosting_7xb1.svg b/public/assets/illustrations/undraw_cloud_hosting_7xb1.svg new file mode 100644 index 000000000000..b7f44f846383 --- /dev/null +++ b/public/assets/illustrations/undraw_cloud_hosting_7xb1.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_engineering_team_a7n2.svg b/public/assets/illustrations/undraw_engineering_team_a7n2.svg new file mode 100644 index 000000000000..855f2096bac6 --- /dev/null +++ b/public/assets/illustrations/undraw_engineering_team_a7n2.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_experience_design_re_dmqq.svg b/public/assets/illustrations/undraw_experience_design_re_dmqq.svg new file mode 100644 index 000000000000..6f45d18fa4e9 --- /dev/null +++ b/public/assets/illustrations/undraw_experience_design_re_dmqq.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_innovative_re_rr5i.svg b/public/assets/illustrations/undraw_innovative_re_rr5i.svg new file mode 100644 index 000000000000..cf874d6d1120 --- /dev/null +++ b/public/assets/illustrations/undraw_innovative_re_rr5i.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_lost_re_xqjt.svg b/public/assets/illustrations/undraw_lost_re_xqjt.svg new file mode 100644 index 000000000000..1db6ea192810 --- /dev/null +++ b/public/assets/illustrations/undraw_lost_re_xqjt.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_mindfulness_8gqa.svg b/public/assets/illustrations/undraw_mindfulness_8gqa.svg new file mode 100644 index 000000000000..a3038a9feb6c --- /dev/null +++ b/public/assets/illustrations/undraw_mindfulness_8gqa.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_multitasking_re_ffpb.svg b/public/assets/illustrations/undraw_multitasking_re_ffpb.svg new file mode 100644 index 000000000000..c2fc2d09db89 --- /dev/null +++ b/public/assets/illustrations/undraw_multitasking_re_ffpb.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_not_found_re_bh2e.svg b/public/assets/illustrations/undraw_not_found_re_bh2e.svg new file mode 100644 index 000000000000..8ba6f36ddab1 --- /dev/null +++ b/public/assets/illustrations/undraw_not_found_re_bh2e.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_online_test_re_kyfx.svg b/public/assets/illustrations/undraw_online_test_re_kyfx.svg new file mode 100644 index 000000000000..e6345e9590b1 --- /dev/null +++ b/public/assets/illustrations/undraw_online_test_re_kyfx.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_open_note_6nva.svg b/public/assets/illustrations/undraw_open_note_6nva.svg new file mode 100644 index 000000000000..31677b3f6c49 --- /dev/null +++ b/public/assets/illustrations/undraw_open_note_6nva.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_server_status_re_n8ln.svg b/public/assets/illustrations/undraw_server_status_re_n8ln.svg new file mode 100644 index 000000000000..edbc9c1f7f09 --- /dev/null +++ b/public/assets/illustrations/undraw_server_status_re_n8ln.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_solution_mindset_re_57bf.svg b/public/assets/illustrations/undraw_solution_mindset_re_57bf.svg new file mode 100644 index 000000000000..7bb3cd635f2b --- /dev/null +++ b/public/assets/illustrations/undraw_solution_mindset_re_57bf.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_speed_test_re_pe1f.svg b/public/assets/illustrations/undraw_speed_test_re_pe1f.svg new file mode 100644 index 000000000000..e1e3e3c80006 --- /dev/null +++ b/public/assets/illustrations/undraw_speed_test_re_pe1f.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_undraw_undraw_undraw_sign_up_ln1s_-1-_s4bc_-1-_ee41_-1-_kf4d.svg b/public/assets/illustrations/undraw_undraw_undraw_undraw_sign_up_ln1s_-1-_s4bc_-1-_ee41_-1-_kf4d.svg new file mode 100644 index 000000000000..d1294e322ef0 --- /dev/null +++ b/public/assets/illustrations/undraw_undraw_undraw_undraw_sign_up_ln1s_-1-_s4bc_-1-_ee41_-1-_kf4d.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_website_ij0l.svg b/public/assets/illustrations/undraw_website_ij0l.svg new file mode 100644 index 000000000000..4a35bd0177a0 --- /dev/null +++ b/public/assets/illustrations/undraw_website_ij0l.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/illustrations/undraw_writer_q06d.svg b/public/assets/illustrations/undraw_writer_q06d.svg new file mode 100644 index 000000000000..3f9f5facd4cd --- /dev/null +++ b/public/assets/illustrations/undraw_writer_q06d.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/integrations/autotask.png b/public/assets/integrations/autotask.png new file mode 100644 index 000000000000..cf2940427613 Binary files /dev/null and b/public/assets/integrations/autotask.png differ diff --git a/public/assets/integrations/cipp-api.png b/public/assets/integrations/cipp-api.png new file mode 100644 index 000000000000..48b3e4f2f20c Binary files /dev/null and b/public/assets/integrations/cipp-api.png differ diff --git a/public/assets/integrations/cloudflare.png b/public/assets/integrations/cloudflare.png new file mode 100644 index 000000000000..636ae6831405 Binary files /dev/null and b/public/assets/integrations/cloudflare.png differ diff --git a/public/assets/integrations/connectwise.png b/public/assets/integrations/connectwise.png new file mode 100644 index 000000000000..ef1dfd1234f0 Binary files /dev/null and b/public/assets/integrations/connectwise.png differ diff --git a/public/assets/integrations/github.png b/public/assets/integrations/github.png new file mode 100644 index 000000000000..e03d8dd8bcf0 Binary files /dev/null and b/public/assets/integrations/github.png differ diff --git a/public/assets/integrations/github_dark.png b/public/assets/integrations/github_dark.png new file mode 100644 index 000000000000..c61ab9d0582e Binary files /dev/null and b/public/assets/integrations/github_dark.png differ diff --git a/public/assets/integrations/gradient.png b/public/assets/integrations/gradient.png new file mode 100644 index 000000000000..82b54a3b1626 Binary files /dev/null and b/public/assets/integrations/gradient.png differ diff --git a/public/assets/integrations/gradient_dark.png b/public/assets/integrations/gradient_dark.png new file mode 100644 index 000000000000..d5bf84946a1f Binary files /dev/null and b/public/assets/integrations/gradient_dark.png differ diff --git a/public/assets/integrations/halo.png b/public/assets/integrations/halo.png new file mode 100644 index 000000000000..f86fe30f45ec Binary files /dev/null and b/public/assets/integrations/halo.png differ diff --git a/public/assets/integrations/halo.svg b/public/assets/integrations/halo.svg new file mode 100644 index 000000000000..9d45a2b5d619 --- /dev/null +++ b/public/assets/integrations/halo.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/integrations/hibp.png b/public/assets/integrations/hibp.png new file mode 100644 index 000000000000..552e40755708 Binary files /dev/null and b/public/assets/integrations/hibp.png differ diff --git a/public/assets/integrations/hudu.png b/public/assets/integrations/hudu.png new file mode 100644 index 000000000000..6427d9eea88e Binary files /dev/null and b/public/assets/integrations/hudu.png differ diff --git a/public/assets/integrations/hudu_dark.png b/public/assets/integrations/hudu_dark.png new file mode 100644 index 000000000000..bae61ee3ea2f Binary files /dev/null and b/public/assets/integrations/hudu_dark.png differ diff --git a/public/assets/integrations/kaseya.svg b/public/assets/integrations/kaseya.svg new file mode 100644 index 000000000000..7e34c610d76a --- /dev/null +++ b/public/assets/integrations/kaseya.svg @@ -0,0 +1,3 @@ + + Kaseya BMS + diff --git a/public/assets/integrations/ninjaone.png b/public/assets/integrations/ninjaone.png new file mode 100644 index 000000000000..1853d6fcaf6f Binary files /dev/null and b/public/assets/integrations/ninjaone.png differ diff --git a/public/assets/integrations/ninjaone_dark.png b/public/assets/integrations/ninjaone_dark.png new file mode 100644 index 000000000000..faac382ea491 Binary files /dev/null and b/public/assets/integrations/ninjaone_dark.png differ diff --git a/public/assets/integrations/pwpush_dark.png b/public/assets/integrations/pwpush_dark.png new file mode 100644 index 000000000000..f416a470edc9 Binary files /dev/null and b/public/assets/integrations/pwpush_dark.png differ diff --git a/public/assets/integrations/pwpush_light.png b/public/assets/integrations/pwpush_light.png new file mode 100644 index 000000000000..e52304c4e161 Binary files /dev/null and b/public/assets/integrations/pwpush_light.png differ diff --git a/public/assets/integrations/sherweb.png b/public/assets/integrations/sherweb.png new file mode 100644 index 000000000000..60752341912c Binary files /dev/null and b/public/assets/integrations/sherweb.png differ diff --git a/public/assets/integrations/sherweb_dark.png b/public/assets/integrations/sherweb_dark.png new file mode 100644 index 000000000000..748dc0e67a4d Binary files /dev/null and b/public/assets/integrations/sherweb_dark.png differ diff --git a/public/assets/logo.svg b/public/assets/logo.svg new file mode 100644 index 000000000000..2de656560472 --- /dev/null +++ b/public/assets/logo.svg @@ -0,0 +1,11 @@ + + + + + + + + + + + diff --git a/public/assets/logos/logo-amplify.svg b/public/assets/logos/logo-amplify.svg new file mode 100644 index 000000000000..11f72ee4bc97 --- /dev/null +++ b/public/assets/logos/logo-amplify.svg @@ -0,0 +1,15 @@ + + + + Fill-1 + Created with Sketch. + + + + + + + + + + \ No newline at end of file diff --git a/public/assets/logos/logo-auth0.svg b/public/assets/logos/logo-auth0.svg new file mode 100644 index 000000000000..9bf44793fbf1 --- /dev/null +++ b/public/assets/logos/logo-auth0.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/assets/logos/logo-figma.svg b/public/assets/logos/logo-figma.svg new file mode 100644 index 000000000000..d8fac143157b --- /dev/null +++ b/public/assets/logos/logo-figma.svg @@ -0,0 +1,7 @@ + + + + + + + diff --git a/public/assets/logos/logo-firebase.svg b/public/assets/logos/logo-firebase.svg new file mode 100644 index 000000000000..bd2ee11b4e5b --- /dev/null +++ b/public/assets/logos/logo-firebase.svg @@ -0,0 +1,35 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/public/assets/logos/logo-jwt.svg b/public/assets/logos/logo-jwt.svg new file mode 100644 index 000000000000..4afa1fb51be1 --- /dev/null +++ b/public/assets/logos/logo-jwt.svg @@ -0,0 +1,27 @@ + + + + Group + Created with Sketch. + + + + + \ No newline at end of file diff --git a/public/assets/logos/logo-react.svg b/public/assets/logos/logo-react.svg new file mode 100644 index 000000000000..102ece55ec9a --- /dev/null +++ b/public/assets/logos/logo-react.svg @@ -0,0 +1,4 @@ + + + + diff --git a/public/assets/logos/logo-typescript.svg b/public/assets/logos/logo-typescript.svg new file mode 100644 index 000000000000..341117d0f9fe --- /dev/null +++ b/public/assets/logos/logo-typescript.svg @@ -0,0 +1,4 @@ + + + + diff --git a/public/assets/logos/sharepoint.svg b/public/assets/logos/sharepoint.svg new file mode 100644 index 000000000000..15425374232e --- /dev/null +++ b/public/assets/logos/sharepoint.svg @@ -0,0 +1,42 @@ + + + + + + + + + + + + + + + + + + + diff --git a/public/assets/logos/teams.svg b/public/assets/logos/teams.svg new file mode 100644 index 000000000000..c45b1a623ffc --- /dev/null +++ b/public/assets/logos/teams.svg @@ -0,0 +1,24 @@ + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/public/assets/pages-dropdown.png b/public/assets/pages-dropdown.png new file mode 100644 index 000000000000..935cb9f64290 Binary files /dev/null and b/public/assets/pages-dropdown.png differ diff --git a/public/assets/products/product-1.png b/public/assets/products/product-1.png new file mode 100644 index 000000000000..9fd7f5c224eb Binary files /dev/null and b/public/assets/products/product-1.png differ diff --git a/public/assets/products/product-10.png b/public/assets/products/product-10.png new file mode 100644 index 000000000000..bd38365f51e7 Binary files /dev/null and b/public/assets/products/product-10.png differ diff --git a/public/assets/products/product-2.png b/public/assets/products/product-2.png new file mode 100644 index 000000000000..546ef43128c8 Binary files /dev/null and b/public/assets/products/product-2.png differ diff --git a/public/assets/products/product-3.png b/public/assets/products/product-3.png new file mode 100644 index 000000000000..2faf44bd36cb Binary files /dev/null and b/public/assets/products/product-3.png differ diff --git a/public/assets/products/product-4.png b/public/assets/products/product-4.png new file mode 100644 index 000000000000..badf6ea82b67 Binary files /dev/null and b/public/assets/products/product-4.png differ diff --git a/public/assets/products/product-5.png b/public/assets/products/product-5.png new file mode 100644 index 000000000000..6d15469c4cc6 Binary files /dev/null and b/public/assets/products/product-5.png differ diff --git a/public/assets/products/product-6.png b/public/assets/products/product-6.png new file mode 100644 index 000000000000..f29d24e53012 Binary files /dev/null and b/public/assets/products/product-6.png differ diff --git a/public/assets/products/product-7.png b/public/assets/products/product-7.png new file mode 100644 index 000000000000..ebd63f54e068 Binary files /dev/null and b/public/assets/products/product-7.png differ diff --git a/public/assets/products/product-8.png b/public/assets/products/product-8.png new file mode 100644 index 000000000000..f8b4c54100fb Binary files /dev/null and b/public/assets/products/product-8.png differ diff --git a/public/assets/products/product-9.png b/public/assets/products/product-9.png new file mode 100644 index 000000000000..7c8f645cb260 Binary files /dev/null and b/public/assets/products/product-9.png differ diff --git a/public/assets/support-adrian.png b/public/assets/support-adrian.png new file mode 100644 index 000000000000..b724710b75e9 Binary files /dev/null and b/public/assets/support-adrian.png differ diff --git a/public/assets/support-alexandru.png b/public/assets/support-alexandru.png new file mode 100644 index 000000000000..5f3d5a40f1a7 Binary files /dev/null and b/public/assets/support-alexandru.png differ diff --git a/public/assets/support-stefania.png b/public/assets/support-stefania.png new file mode 100644 index 000000000000..8f9443f617ba Binary files /dev/null and b/public/assets/support-stefania.png differ diff --git a/public/browserconfig.xml b/public/browserconfig.xml deleted file mode 100644 index 1bc305525d1f..000000000000 --- a/public/browserconfig.xml +++ /dev/null @@ -1,9 +0,0 @@ - - - - - - #da532c - - - diff --git a/public/cippy-401.png b/public/cippy-401.png new file mode 100644 index 000000000000..2b8f5835e7a1 Binary files /dev/null and b/public/cippy-401.png differ diff --git a/public/cippy-404.png b/public/cippy-404.png new file mode 100644 index 000000000000..153c727aaf0d Binary files /dev/null and b/public/cippy-404.png differ diff --git a/public/cippy-500.png b/public/cippy-500.png new file mode 100644 index 000000000000..d2721d10a272 Binary files /dev/null and b/public/cippy-500.png differ diff --git a/public/cippy-auth.png b/public/cippy-auth.png new file mode 100644 index 000000000000..ad138a7b01ac Binary files /dev/null and b/public/cippy-auth.png differ diff --git a/public/discord-mark-blue.svg b/public/discord-mark-blue.svg new file mode 100644 index 000000000000..4cadbc7f7ed3 --- /dev/null +++ b/public/discord-mark-blue.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/public/favicon-16x16.png b/public/favicon-16x16.png index 28a3adf917be..248f0b10110b 100644 Binary files a/public/favicon-16x16.png and b/public/favicon-16x16.png differ diff --git a/public/favicon-32x32.png b/public/favicon-32x32.png index bd596be60992..374d45216fdf 100644 Binary files a/public/favicon-32x32.png and b/public/favicon-32x32.png differ diff --git a/public/favicon.ico b/public/favicon.ico index 207000a51a00..ea04bf0fe468 100644 Binary files a/public/favicon.ico and b/public/favicon.ico differ diff --git "a/public/img/NinjaOne\342\224\254\302\253 Logo white@4x.png" "b/public/img/NinjaOne\342\224\254\302\253 Logo white@4x.png" deleted file mode 100644 index 8654c2d79484..000000000000 Binary files "a/public/img/NinjaOne\342\224\254\302\253 Logo white@4x.png" and /dev/null differ diff --git a/public/img/augmentt-dark.png b/public/img/augmentt-dark.png deleted file mode 100644 index f32dea1cfce9..000000000000 Binary files a/public/img/augmentt-dark.png and /dev/null differ diff --git a/public/img/augmentt-light.png b/public/img/augmentt-light.png deleted file mode 100644 index 46bead134eb1..000000000000 Binary files a/public/img/augmentt-light.png and /dev/null differ diff --git a/public/img/datto.png b/public/img/datto.png deleted file mode 100644 index b0fad6f50233..000000000000 Binary files a/public/img/datto.png and /dev/null differ diff --git a/public/img/huntress_teal.png b/public/img/huntress_teal.png deleted file mode 100644 index 96562e74d99d..000000000000 Binary files a/public/img/huntress_teal.png and /dev/null differ diff --git a/public/img/ninjaone.png b/public/img/ninjaone.png deleted file mode 100644 index ca84ac5e450c..000000000000 Binary files a/public/img/ninjaone.png and /dev/null differ diff --git a/public/img/ninjaone_dark.png b/public/img/ninjaone_dark.png deleted file mode 100644 index 47bcc219ead8..000000000000 Binary files a/public/img/ninjaone_dark.png and /dev/null differ diff --git a/public/img/rewst.png b/public/img/rewst.png deleted file mode 100644 index 6d52a7838533..000000000000 Binary files a/public/img/rewst.png and /dev/null differ diff --git a/public/img/rewst_dark.png b/public/img/rewst_dark.png deleted file mode 100644 index b4b215b8ec46..000000000000 Binary files a/public/img/rewst_dark.png and /dev/null differ diff --git a/public/intune-definitions/00.json b/public/intune-definitions/00.json new file mode 100644 index 000000000000..02ac383a1a63 --- /dev/null +++ b/public/intune-definitions/00.json @@ -0,0 +1 @@ +{"0074ff1bc74a6d60":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"003de049caaa490c":{"id":"com.apple.managedclient.preferences_webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84.","description":"The Web Components v0 APIs (Shadow DOM v0, Custom Elements v0, and HTML Imports) were deprecated in 2018, and have been disabled by default starting in M80. This policy allows these features to be selectively re-enabled until M84.\n\n If you set this policy is set to True, the Web Components v0 features will be enabled for all sites.\n\n If you set this policy to False or don't set this policy, the Web Components v0 features will be disabled by default, starting in M80.\n\n This policy will be removed after Microsoft Edge 84.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webcomponentsv0enabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webcomponentsv0enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webcomponentsv0enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"00b5f1d6b93472f6":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower","displayName":"Desktop Power","description":"The settings for a desktop computer.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"008829c16cf8e00a":{"id":"com.apple.mcxprinting_showonlymanagedprinters","displayName":"Show Only Managed Printers","description":"If true, shows only managed printers.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":[{"id":"com.apple.mcxprinting_showonlymanagedprinters_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxprinting_showonlymanagedprinters_true","displayName":"True","description":null,"helpText":null}]},"00b73231e9dd0248":{"id":"com.apple.notificationsettings_notificationsettings_item_soundsenabled","displayName":"Sounds Enabled","description":"If true, enables sounds for this app.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":[{"id":"com.apple.notificationsettings_notificationsettings_item_soundsenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_soundsenabled_true","displayName":"True","description":null,"helpText":null}]},"0066f66c5aa8e263":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifiertype","displayName":"AE Receiver Identifier Type","description":"The type of AEReceiverIdentifier value, either `bundleID` or `path`. This setting is required for AppleEvents service; not valid for other services.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifiertype_0","displayName":"bundleID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifiertype_1","displayName":"path","description":null,"helpText":null}]},"00c3513f627c41ed":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites","description":"Setting the policy lets you make a list of URL patterns that specify sites for which Microsoft Edge can automatically select a client certificate. The value is an array of stringified JSON dictionaries, each with the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts the client certificates the browser automatically selects from. Independent of the filter, only certificates that match the server's certificate request are selected.\n\nExamples for the usage of the $FILTER section:\n\n* When $FILTER is set to { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, only client certificates issued by a certificate with the CommonName $ISSUER_CN are selected.\n\n* When $FILTER contains both the \"ISSUER\" and the \"SUBJECT\" sections, only client certificates that satisfy both conditions are selected.\n\n* When $FILTER contains a \"SUBJECT\" section with the \"O\" value, a certificate needs at least one organization matching the specified value to be selected.\n\n* When $FILTER contains a \"SUBJECT\" section with a \"OU\" value, a certificate needs at least one organizational unit matching the specified value to be selected.\n\n* When $FILTER is set to {}, the selection of client certificates isn't additionally restricted. Filters provided by the web server still apply.\n\nIf you leave the policy unset, there's no autoselection for any site.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"00d1c294e1d514c3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.filesystemreadaskforurls","displayName":"Allow read access via the File System API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\n\nLeaving the policy unset means \"DefaultFileSystemReadGuardSetting\" applies for all sites, if set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemReadBlockedForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"00bf0257c198fabb":{"id":"device_vendor_msft_defender_configuration_throttleforscheduledscanonly","displayName":"Throttle For Scheduled Scan Only","description":"A CPU usage limit can be applied to scheduled scans only, or to scheduled and custom scans. The default value applies a CPU usage limit to scheduled scans only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_throttleforscheduledscanonly_1","displayName":"If you enable this setting, CPU throttling will apply only to scheduled scans.","description":"If you enable this setting, CPU throttling will apply only to scheduled scans.","helpText":null},{"id":"device_vendor_msft_defender_configuration_throttleforscheduledscanonly_0","displayName":"If you disable this setting, CPU throttling will apply to scheduled and custom scans.","description":"If you disable this setting, CPU throttling will apply to scheduled and custom scans.","helpText":null}]},"000cbe14a3ced6ee":{"id":"device_vendor_msft_laps_policies_backupdirectory","displayName":"Backup Directory ","description":"Use this setting to configure which directory the local admin account password is backed up to.\n\nThe allowable settings are:\n\n0=Disabled (password will not be backed up)\n1=Backup the password to Microsoft Entra ID only\n2=Backup the password to Active Directory only\n\nIf not specified, this setting will default to 0.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_backupdirectory_0","displayName":"Disabled (password will not be backed up)","description":"Disabled (password will not be backed up)","helpText":null},{"id":"device_vendor_msft_laps_policies_backupdirectory_1","displayName":"Backup the password to Microsoft Entra ID only","description":"Backup the password to Microsoft Entra ID only","helpText":null},{"id":"device_vendor_msft_laps_policies_backupdirectory_2","displayName":"Backup the password to Active Directory only","description":"Backup the password to Active Directory only","helpText":null}]},"00da37b4e87cacce":{"id":"device_vendor_msft_policy_config_admx_credentialproviders_defaultcredentialprovider_defaultcredentialprovider_message","displayName":"Assign the following credential provider as the default credential provider:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"00d571dd5e23b492":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_allowfastservicestartup","displayName":"Allow antimalware service to startup with normal priority","description":"This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance.\r\n\r\n If you enable or do not configure this setting, the antimalware service will load as a normal priority task.\r\n\r\n If you disable this setting, the antimalware service will load as a low priority task.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-allowfastservicestartup"],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_allowfastservicestartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_allowfastservicestartup_1","displayName":"Enabled","description":null,"helpText":null}]},"008d9cf893b1f59c":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_publishing_server_url_prompt","displayName":"Publishing Server URL","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"00bda77a9b8963bb":{"id":"device_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar","displayName":"Allow Search Suggestionsin Address Bar","description":"This setting lets you decide whether search suggestions should appear in the Address bar of Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsearchsuggestionsinaddressbar"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar_0","displayName":"Block","description":"Prevented/Not allowed. Hide the search suggestions.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar_1","displayName":"Allow","description":"Allowed. Show the search suggestions.","helpText":null}]},"00687ccb5329cc09":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceephemeralprofiles","displayName":"Ephemeral profile","description":"If set to enabled this policy forces the profile to be switched to ephemeral mode. If this policy is specified as an OS policy (e.g. GPO on Windows) it will apply to every profile on the system; if the policy is set as a Cloud policy it will apply only to a profile signed in with a managed account.\r\n\r\nIn this mode the profile data is persisted on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies and web databases are not preserved after the browser is closed. However this does not prevent the user from downloading any data to disk manually, save pages or print them.\r\n\r\nIf the user has enabled sync all this data is preserved in their sync profile just like with regular profiles. Incognito mode is also available if not explicitly disabled by policy.\r\n\r\nIf the policy is set to disabled or left not set signing in leads to regular profiles.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceephemeralprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceephemeralprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},"00d400e7c133dc1a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled","displayName":"Enable DHE cipher suites in TLS","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0016b9201a4e64c7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_renderinhostlistdesc","displayName":"Always render the following URL patterns in the host browser (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"00563498fa877b2c":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility","displayName":"Font Visibility","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Font visibility setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Font\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility_1","displayName":"Enabled","description":null,"helpText":null}]},"005ad3fa0892f521":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"00fce2625732649e":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets","displayName":"Scripting of Java applets","description":"This policy setting allows you to manage whether applets are exposed to scripts within the zone.\n\nIf you enable this policy setting, scripts can access applets automatically without user intervention.\n\nIf you select Prompt in the drop-down box, users are queried to choose whether to allow scripts to access applets.\n\nIf you disable this policy setting, scripts are prevented from accessing applets.\n\nIf you do not configure this policy setting, scripts are prevented from accessing applets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonescriptingofjavaapplets"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_1","displayName":"Enabled","description":null,"helpText":null}]},"00fe284df1cfaa69":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls","displayName":"Block pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from opening pop-up windows.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPopupsSetting' (Default pop-up window setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0025624b7cdca2c5":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect","displayName":"Specify how \"in-page\" navigations to unconfigured sites behave when started from Internet Explorer mode pages","description":"An \"in-page\" navigation is started from a link, a script, or a form on the current page. It can also be a server-side redirect of a previous \"in-page\" navigation attempt. Conversely, a user can start a navigation that isn't \"in-page\" that's independent of the current page in several ways by using the browser controls. For example, using the address bar, the back button, or a favorite link.\r\n\r\nThis setting lets you specify whether navigations from pages loaded in Internet Explorer mode to unconfigured sites (that are not configured in the Enterprise Mode Site List) switch back to Microsoft Edge or remain in Internet Explorer mode.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nIf you disable or don’t configure this policy, only sites configured to open in Internet Explorer mode will open in that mode. Any site not configured to open in Internet Explorer mode will be redirected back to Microsoft Edge.\r\n\r\nIf you set this policy to Default (value 0), only sites configured to open in Internet Explorer mode will open in that mode. Any site not configured to open in Internet Explorer mode will be redirected back to Microsoft Edge.\r\n\r\nIf you set this policy to AutomaticNavigationsOnly (value 1), you get the default experience except that all automatic navigations (such as 302 redirects) to unconfigured sites will be kept in Internet Explorer mode.\r\n\r\nIf you set this policy to AllInPageNavigations (value 2), all navigations from pages loaded in IE mode to unconfigured sites are kept in Internet Explorer mode (Least Recommended).\r\n\r\nIf you enable this policy, you can choose one of the following navigation options:\r\n\r\n* 0 = Default\r\n\r\n* 1 = Keep only automatic navigations in Internet Explorer mode\r\n\r\n* 2 = Keep all in-page navigations in Internet Explorer mode\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2105106","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_1","displayName":"Enabled","description":null,"helpText":null}]},"00c5fba909889995":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled","displayName":"Configure Speech Recognition","description":"Set whether websites can use the W3C Web Speech API to recognize speech from the user. The Microsoft Edge implementation of the Web Speech API uses Azure Cognitive Services, so voice data will leave the machine.\r\n\r\nIf you enable or don't configure this policy, web-based applications that use the Web Speech API can use Speech Recognition.\r\n\r\nIf you disable this policy, Speech Recognition is not available through the Web Speech API.\r\n\r\nRead more about this feature here:\r\nSpeechRecognition API: https://go.microsoft.com/fwlink/?linkid=2143388\r\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2143680","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"00cab67c0e5e77a5":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays","displayName":"Specify the number of days that a site remains on the local IE mode site list","description":"If the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or not configured, users will be able to tell Microsoft Edge to load specific pages in Internet Explorer mode for a limited number of days.\r\n\r\nYou can use this setting to determine how many days that configuration is remembered in the browser. After this period has elapsed, the individual page will no longer automatically load in IE mode.\r\n\r\nIf you disable the 'InternetExplorerIntegrationReloadInIEModeAllowed' policy, this policy has no effect.\r\n\r\nIf you disable or don't configure this policy, the default value of 30 days is used.\r\n\r\nIf you enable this policy, you must enter the number of days for which the sites are retained on the user's local site list in Microsoft Edge. The value can be from 0 to 90 days.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_1","displayName":"Enabled","description":null,"helpText":null}]},"0056c1057213db15":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder_userincontroloftheseapps","displayName":"Let Apps Access Graphics Capture Without Border User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the screen capture border privacy setting for the listed apps. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"00ec291435c85597":{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder","displayName":"Allow Pinned Folder Personal Folder","description":"This policy controls the visibility of the PersonalFolder shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderpersonalfolder"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"003e9e9e9b1685ac":{"id":"device_vendor_msft_policy_config_update_updateserviceurl","displayName":"Update Service Url","description":"ImportantStarting in Windows 10, version 1703 this policy is not supported in Windows 10 Mobile Enterprise and IoT Mobile. Allows the device to check for updates from a WSUS server instead of Microsoft Update. This is useful for on-premises MDMs that need to update devices that cannot connect to the Internet. Supported operations are Get and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#updateserviceurl"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"0005fe387917425e":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge Beta will only be deployed machine-wide.\r\n\r\nIf you set this policy to Force Installs (Machine-Wide), Microsoft Edge Beta may only be deployed machine-wide if Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge Beta may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"009be60650a290d7":{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43fc9dcc-1e66-4108-bded-2d005eeb7ccb","categoryName":"Microsoft Edge WebView","options":[{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null}]},"0045047782987a24":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_keepdownloadedpayloads","displayName":"Keep package payloads after installation","description":"Keep package payloads even after they are installed. You can change the value anytime. Disabling the policy removes any cached package payloads for the instance you repair or modify.\r\n\r\nEnabled by default.\r\n\r\nFor more information, see: http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_keepdownloadedpayloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_keepdownloadedpayloads_1","displayName":"Enabled","description":null,"helpText":null}]},"009b4356fc8d542d":{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~livesharesettings_disablechat","displayName":"Disable Chat","description":"Prevent the host and guest from using chat within the session.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~livesharesettings_disablechat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~livesharesettings_disablechat_1","displayName":"Enabled","description":null,"helpText":null}]},"00d5cb60fb228f39":{"id":"keyboardsettings_allowdictation","displayName":"Allow Dictation","description":"If `false`, disables dictation.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowdictation_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowdictation_true","displayName":"True","description":null,"helpText":null}]},"00df9ce68e0eec56":{"id":"linux_mdatp_managed_antivirusengine_disallowedthreatactions","displayName":"Disallowed threat actions","description":"Restricts the actions that the local user of a device can take when threats are detected. The actions included in this list are not displayed in the user interface.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#disallowed-threat-actions"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"00eba1daf3ffe3e4":{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1","displayName":"Restrict user locales (User)","description":"This policy setting restricts users on a computer to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy setting does not change existing user locale settings; however, the next time a user attempts to change their user locale, their choices will be restricted to locales in this list.\r\n\r\nTo set this policy setting on a per-user basis, make sure that you do not configure the per-computer policy setting.\r\n\r\nThe locale list is specified using language tags, separated by a semicolon (;). For example, en-US is English (United States). Specifying \"en-CA;fr-CA\" would restrict the user locale to English (Canada) and French (Canada).\r\n\r\nIf you enable this policy setting, only locales in the specified locale list can be selected by users.\r\n\r\nIf you disable or do not configure this policy setting, users can select any locale installed on the computer, unless restricted by the \"Disallow selection of Custom Locales\" policy setting.\r\n\r\nIf this policy setting is enabled at the computer level, it cannot be disabled by a per-user policy. If this policy setting is disabled at the computer level, the per-user policy is ignored. If this policy setting is not configured at the computer level, restrictions are based on per-user policies.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-localeuserrestrict-1"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1_1","displayName":"Enabled","description":null,"helpText":null}]},"004b7cd31a989a14":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_componentservices","displayName":"Component Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-componentservices"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_componentservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_componentservices_1","displayName":"Enabled","description":null,"helpText":null}]},"002021718bc1bb3f":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_2","displayName":"Security Settings (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-securitysettings-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_2_1","displayName":"Enabled","description":null,"helpText":null}]},"00fd7cf5198344ab":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced","displayName":"Enforce browser guest mode (User)","description":"Setting the policy to Enabled means Google Chrome enforces guest sessions and prevents profile sign-ins. Guest sign-ins are Google Chrome profiles where windows are in Incognito mode.\r\n\r\nSetting the policy to Disabled, leaving it unset, or disabling browser Guest mode (through BrowserGuestModeEnabled) allows the use of new and existing profiles.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced_1","displayName":"Enabled","description":null,"helpText":null}]},"00e765a974a66048":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_browserthemecolor","displayName":"Configure the color of the browser's theme (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"00b171b15be6fa9f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended","displayName":"Default search provider suggest URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURL specifies the URL of the search engine to provide search suggestions. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nExample value: https://search.my.company/suggest?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0018d8771129fc9e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax","displayName":"Maximum SSL version enabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax_tls1.3","displayName":"TLS 1.3","description":null,"helpText":null}]},"00209e7c268eb855":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of capture.\r\n\r\nNote that windowed Chrome Apps will still be allowed to be captured.\r\n\r\nThis policy is not considered if a site matches a URL pattern in the SameOriginTabCaptureAllowedByOrigins policy.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: WindowCaptureAllowedByOrigins, ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"007f809f85b8ba69":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_newtabpagelocation","displayName":"New Tab page URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":null},"00c307fd92b32c94":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_idletimeout","displayName":"Delay before running idle actions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8c35f124-e249-43e3-9044-ecc0b0a5855a","categoryName":"Idle Browser Actions","options":null},"00dfb2ec56f0447f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage","displayName":"Choose whether Blob URLs are partitioned during fetching and navigations (User)","description":"This policy controls whether Blob URLs are partitioned during fetching and navigation.\r\nIf this policy is set to Enabled or not set, Blob URLs will be partitioned.\r\nIf this policy is set to Disabled, Blob URLs won't be partitioned.\r\n\r\nIf storage partitioning is disabled for a given top-level origin by either\r\nThirdPartyStoragePartitioningBlockedForOrigins\r\nor DefaultThirdPartyStoragePartitioningSetting,\r\nthen Blob URLs will also not be partitioned.\r\n\r\nIf you must use the policy, please file a bug at\r\nGoogle Chrome\r\nexplaining your use case. The policy is scheduled to be offered through\r\nGoogle Chrome version 143, after which\r\nthe old implementation will be removed.\r\n\r\nNOTE: Only newly-started renderer processes will reflect changes to this\r\npolicy while the browser is running.\r\n\r\nFor detailed information on third-party storage partitioning, please see\r\nhttps://developers.google.com/privacy-sandbox/cookies/storage-partitioning.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage_1","displayName":"Enabled","description":null,"helpText":null}]},"007c5a6495cc5b5e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyinsertadecimalpoint","displayName":"Automatically insert a decimal point (User)","description":"This policy setting allows you to configure the \"Automatically insert a decimal point\" option.\r\n\r\nIf you enable this policy setting, the \"Automatically insert a decimal point\" option will be checked and the Places option is set to 2.\r\n\r\nIf you disable or do not configure this policy setting, the \"Automatically insert a decimal point\" option will not be checked.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyinsertadecimalpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyinsertadecimalpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"00cfb36f69d99944":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext","displayName":"Set parameters for CNG context (User)","description":"This policy setting allows you to specify the encryption parameters that should be used for the CNG context. \r\n\r\nIf you enable this policy setting, the parameters specified will be passed to the CNG context.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG values will be used.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext_1","displayName":"Enabled","description":null,"helpText":null}]},"0018f2bb0eb05568":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_intelligentservices_l_insights","displayName":"Remove Ideas button from the Ribbon (User)","description":"\r\nThis policy setting allows you to prevent users from accessing Ideas in Excel, an intelligent service providing suggestions and analyses based on your data. By default, a button for Ideas appears in the “Ideas” group on the “Home” tab on the ribbon.\r\n\r\nIf you enable this policy setting, the button for Ideas is removed from the ribbon and users can’t add the button to the ribbon manually. Users won’t be able to access Ideas.\r\n\r\nIf you disable or don’t configure this policy setting, the button for Ideas appears on the ribbon and users can access Ideas.\r\n\t\t","helpText":"","infoUrls":[],"categoryId":"9a2bfe77-7e03-4a24-a9fa-c42a225a28b8","categoryName":"Intelligent Services","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_intelligentservices_l_insights_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_intelligentservices_l_insights_1","displayName":"Enabled","description":null,"helpText":null}]},"0018317efccd6e0a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath","displayName":"Personal templates path for Excel (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"0005db2dca15a26a":{"id":"user_vendor_msft_policy_config_excel16v5~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation","displayName":"Stop checking for table alt text accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables contain alternative text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables contain alternative text.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for alternative text and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v5~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v5~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"0053816b5812f630":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate","displayName":"Locked-Down Restricted Sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"004909bac318d955":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"00501987bfbaeb5f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures","displayName":"Re-enable deprecated web platform features for a limited time (User)","description":"Specify a list of deprecated web platform features to temporarily re-enable.\r\n\r\nThis policy lets you re-enable deprecated web platform features for a limited time. Features are identified by a string tag.\r\n\r\nIf you don't configure this policy, if the list is empty, or if a feature doesn't match one of the supported string tags, all deprecated web platform features remain disabled.\r\n\r\nWhile the policy itself is supported on the above platforms, the feature it's enabling might not be available on all of those platforms. Not all deprecated Web Platform features can be re-enabled. Only those explicitly listed below can be re-enabled, and only for a limited period of time, which differs per feature. You can review the intent behind the Web Platform feature changes at https://bit.ly/blinkintents.\r\n\r\nThe general format of the string tag is [DeprecatedFeatureName]_EffectiveUntil[yyyymmdd].\r\n\r\n* \"ExampleDeprecatedFeature_EffectiveUntil20080902\" = Enable ExampleDeprecatedFeature API through 2008/09/02\r\n\r\nExample value:\r\n\r\nExampleDeprecatedFeature_EffectiveUntil20080902","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"005bb2af5c3df05c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist","displayName":"Control which native messaging hosts users can use (User)","description":"List specific native messaging hosts that users can use in Microsoft Edge.\r\n\r\nBy default, all native messaging hosts are allowed. If you set the 'NativeMessagingBlocklist' (Configure native messaging block list) policy to *, all native messaging hosts are blocked, and only native messaging hosts listed in here are loaded.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"006c0f46b4a464e9":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_workspacesnavigationsettings","displayName":"Configure navigation settings per groups of URLs in Microsoft Edge Workspaces (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","categoryName":"Edge Workspaces settings","options":null},"00f43234f4543971":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket_maxconnectionsperproxyforwebsocket","displayName":"Maximum number of concurrent connections to the proxy server for WebSocket requests: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"003fe4057e15763c":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist","displayName":"Specify the TLS cipher suites to disable (User)","description":"Configure the list of cipher suites that are disabled for TLS connections.\r\n\r\nIf you configure this policy, the list of configured cipher suites will not be used when establishing TLS connections.\r\n\r\nIf you don't configure this policy, the browser will choose which TLS cipher suites to use.\r\n\r\nCipher suite values to be disabled are specified as 16-bit hexadecimal values. The values are assigned by the Internet Assigned Numbers Authority (IANA) registry.\r\n\r\nThe TLS 1.3 cipher suite TLS_AES_128_GCM_SHA256 (0x1301) is required for TLS 1.3 and can't be disabled by this policy.\r\n\r\nThis policy does not affect QUIC-based connections. QUIC can be turned off via the 'QuicAllowed' (Allow QUIC protocol) policy.\r\n\r\nExample value:\r\n\r\n0x1303\r\n0xcca8\r\n0xcca9","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},"00e4d8007d887ed5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastserviceserverterms0","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"00fca7c3894cd079":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceoffice","displayName":"Replace AD - Office (User)","description":"This policy setting allows you to customize the 11th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"office location\" of line 11.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 11 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceoffice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceoffice_1","displayName":"Enabled","description":null,"helpText":null}]},"00f60b3de8d19339":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome_l_homelabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"0076c39075c701a9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_hidemissingcomponentdownloadhyperlinks","displayName":"Hide missing component download hyperlinks (User)","description":"Don't allow the download of missing components but not showing the download hyperlinks for the missing components. Possible missing components are the Microsoft .NET 2.0 framework and Workflow component.","helpText":"","infoUrls":[],"categoryId":"bc633a5a-c712-49a6-9f56-775ca9321df4","categoryName":"Downloading Framework Components","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_hidemissingcomponentdownloadhyperlinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_hidemissingcomponentdownloadhyperlinks_1","displayName":"Enabled","description":null,"helpText":null}]},"00413d1a4472be29":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malayalam","displayName":"Malayalam (User)","description":"Enables the editing language Malayalam","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malayalam_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malayalam_1","displayName":"Enabled","description":null,"helpText":null}]},"0076bd97cbbdf8c3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_pstnullfreeondelete","displayName":"PST Null Data on Delete (User)","description":"This policy setting allows you to force Outlook to fully nullify deleted data in users’ Personal Folder files (.pst) at the time that the data is deleted. \r\n \r\nIf you enable this policy setting, data is immediately nullified in PST files when deleted. \r\n \r\nIf you disable or do not configure this policy setting, data remains in PST files until it is purged or overwritten by the user.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_pstnullfreeondelete_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_pstnullfreeondelete_1","displayName":"Enabled","description":null,"helpText":null}]},"00ca9a079c7c75f7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disableweather","displayName":"Disable Weather Bar (User)","description":"This policy setting allows you to turn on or turn off the Weather Bar.\r\n\r\nIf you enable this policy setting, the Weather Bar is turned off.\r\n\r\nIf you disable or do not configure this setting, the Weather Bar is turned on.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disableweather_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disableweather_1","displayName":"Enabled","description":null,"helpText":null}]},"004de91223352189":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek","displayName":"First day of the week (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_1","displayName":"Enabled","description":null,"helpText":null}]},"008bfcb8c4001c90":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_disableoffice365simplifiedaccountcreation","displayName":"Prevent Office 365 E-mail accounts from being configured within a simplified Interface (User)","description":"This policy setting determines whether an Office 365 E-mail account when being configured in Outlook, can use a simplified dialog that can greatly accelerate the initial account creation.\r\n\r\nIf you enable this policy setting, users will configure their Office 365 accounts using the Account Wizard, as they do, for all other account types.","helpText":"","infoUrls":[],"categoryId":"ff87ffcb-a827-4d2b-90fc-e5789ef6d3e0","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_disableoffice365simplifiedaccountcreation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_disableoffice365simplifiedaccountcreation_1","displayName":"Enabled","description":null,"helpText":null}]},"0015fb85c2bfb032":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2_l_selecttheauthenticationwithexchangeserver","displayName":"Select the authentication with Exchange server. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2_l_selecttheauthenticationwithexchangeserver_9","displayName":"Kerberos/NTLM Password Authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2_l_selecttheauthenticationwithexchangeserver_16","displayName":"Kerberos Password Authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2_l_selecttheauthenticationwithexchangeserver_10","displayName":"NTLM Password Authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2_l_selecttheauthenticationwithexchangeserver_2147545088","displayName":"Insert a smart card","description":null,"helpText":null}]},"003c0ab4ce94d9ee":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo","displayName":"Save AutoRecover info (User)","description":"Checked: Checks the option ''Save AutoRecover info''. | Unchecked: Unchecks the option ''Save AutoRecover info''.","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"00d012b13e016354":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour","displayName":"Followed hyperlink color (User)","description":"Specifies the color of hyperlinks that have already been followed.\r\n\r\nIf you enable this setting, hyperlinks that have been followed are displayed in the color you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3db7e884-6077-4b96-ace3-005a6b49ecc0","categoryName":"Hyperlink appearance in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_1","displayName":"Enabled","description":null,"helpText":null}]},"00ccf7bea9be71f5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"007c2c0f97d6607e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_pathcolon24","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"00829bc932351d83":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"00d846ade9bb5092":{"id":"vendor_msft_sharedpc_setedupolicies","displayName":"Set Edu Policies","description":"Set a list of EDU policies.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_setedupolicies_false","displayName":"false","description":"Not configured","helpText":null},{"id":"vendor_msft_sharedpc_setedupolicies_true","displayName":"true","description":"Enabled","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/01.json b/public/intune-definitions/01.json new file mode 100644 index 000000000000..71fc8b186c6a --- /dev/null +++ b/public/intune-definitions/01.json @@ -0,0 +1 @@ +{"0125e54a9fb39b7f":{"id":"com.apple.applicationaccess_ratingmoviesgb","displayName":"Rating Movies - Great Britain","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesgb_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_1","displayName":"U","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_2","displayName":"UC","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_3","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_4","displayName":"12","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_5","displayName":"12A","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_6","displayName":"15","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_7","displayName":"18","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesgb_8","displayName":"All","description":null,"helpText":null}]},"015b0bebeaa89154":{"id":"com.apple.applicationaccess_safariallowpopups","displayName":"Safari Allow Popups","description":"If false, Safari doesn’t allow pop-up windows. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_safariallowpopups_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_safariallowpopups_true","displayName":"True","description":null,"helpText":null}]},"019ed35d1fcb9ea0":{"id":"com.apple.managedclient.preferences_adhoccodesigningforpwasenabled","displayName":"Native application signing during Progressive Web Application installation","description":"Enabling this policy or leaving it unset enables the use of ad-hoc signatures for the native application that's created when installing a Progressive Web Application (PWA). This ensures that each installed application has a unique identity to macOS system components.\n\nDisabling this policy will result in every native application created when installing Progressive Web Applications having the same identity. This can interfere with macOS functionality.\n\nOnly turn off the policy if you are using an endpoint security solution that blocks applications with an ad-hoc signature.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#adhoccodesigningforpwasenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_adhoccodesigningforpwasenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_adhoccodesigningforpwasenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0162e8e5840523af":{"id":"com.apple.managedclient.preferences_allowsurfgame","displayName":"Allow surf game","description":"If you disable this policy, users won't be able to play the surf game when the device is offline or if the user navigates to edge://surf.\n\nIf you enable or don't configure this policy, users can play the surf game.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowsurfgame"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_allowsurfgame_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowsurfgame_true","displayName":"Allowed","description":null,"helpText":null}]},"01ef94e18ae1f906":{"id":"com.apple.managedclient.preferences_automaticdefinitionupdateenabled","displayName":"Automatic security intelligence updates","description":"Determines whether security intelligence updates are installed automatically:","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#enable--disable-automatic-security-intelligence-updates"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"com.apple.managedclient.preferences_automaticdefinitionupdateenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automaticdefinitionupdateenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"01f55f5d6eae3aea":{"id":"com.apple.managedclient.preferences_relaunchnotification","displayName":"Notify a user that a browser restart is recommended or required for pending updates","description":"Notify users that they need to restart Microsoft Edge to apply a pending update.\n\nIf you don't configure this policy, Microsoft Edge adds a recycle icon at the far right of the top menu bar to prompt users to restart the browser to apply the update.\n\nIf you enable this policy and set it to 'Recommended' (1), a recurring warning prompts users that a restart is recommended. Users can dismiss this warning and defer the restart.\n\nIf you set the policy to 'Required' (2), a recurring warning prompts users that the browser will be restarted automatically as soon as a notification period passes. The default period is seven days. You can configure this period with the \"RelaunchNotificationPeriod\" policy.\n\nThe user's session is restored when the browser restarts.\n\n* Recommended (1) = Show a recurring prompt to the user indicating that a restart is recommended\n\n* Required (2) = Show a recurring prompt to the user indicating that a restart is required","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#relaunchnotification"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_relaunchnotification_0","displayName":"Recommended - Show a recurring prompt to the user indicating that a restart is recommended","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_relaunchnotification_1","displayName":"Required - Show a recurring prompt to the user indicating that a restart is required","description":null,"helpText":null}]},"0143ee03e54d9b5f":{"id":"com.apple.managedclient.preferences_sslversionmin","displayName":"Minimum TLS version enabled","description":"Sets the minimum supported version of SSL. If you don't configure this policy, Microsoft Edge uses a default minimum version, TLS 1.0.\n\nIf you enable this policy, you can set the minimum version to one of the following values: \"tls1\", \"tls1.1\" or \"tls1.2\". When set, Microsoft Edge won't use any version of SSL/TLS lower than the specified version. Any unrecognized value is ignored.\n\n* \"tls1\" = TLS 1.0\n\n* \"tls1.1\" = TLS 1.1\n\n* \"tls1.2\" = TLS 1.2","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sslversionmin"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sslversionmin_0","displayName":"TLS 1.0","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sslversionmin_1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sslversionmin_2","displayName":"TLS 1.2","description":null,"helpText":null}]},"017cec149a9296d0":{"id":"com.apple.mcx_com.apple.cachedaccounts.warnoncreate","displayName":"Warn On Create","description":"If true, asks the user if the mobile account should be created and allow the user to not create it.","helpText":null,"infoUrls":[],"categoryId":"ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","categoryName":"Mobile Accounts","options":[{"id":"com.apple.mcx_com.apple.cachedaccounts.warnoncreate_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.cachedaccounts.warnoncreate_true","displayName":"True","description":null,"helpText":null}]},"01b6a40456c9b599":{"id":"com.apple.mcx.filevault2_password","displayName":"Password","description":"The password of the Open Directory user to be added to FileVault. Use the 'UserEntersMissingInfo' key if you want to prompt for this information.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":null},"018475ce3160951b":{"id":"com.apple.webcontent-filter_allowlistbookmarks","displayName":"Allow List Bookmarks","description":"An array of dictionaries defining the pages that the user can visit.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"01dd8994bed8a235":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_recommended","displayName":"Extensions Performance Detector enabled (users can override)","description":"This policy controls if users can access the Extensions Performance Detector Recommended Action feature in Browser Essentials. This feature alerts extension users if their extensions are causing performance regressions in the browser and allows them to take action to resolve the issue.\n\nIf you enable or don't configure this policy, users receive Extensions Performance Detector notifications from Browser Essentials. When there's an active alert, users are able to view the impact of extensions on their browser's performance and make an informed decision to disable impacting extensions. The detector will exclude browser-managed extensions, such as Google Docs offline, component extensions, and organization-managed extensions (that is, extensions that can't be disabled).\n\nIf you disable this policy, users won't receive notifications or be able to view the Extensions Performance Detector Recommended Action.","helpText":null,"infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"018d21a47202ac20":{"id":"com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled","displayName":"Show Hubs Sidebar","description":"The Sidebar is a launcher bar located on the right side of Microsoft Edge.\n\nIf you enable this policy, the Sidebar is always visible.\n\nIf you disable this policy, the Sidebar is never shown.\n\nIf you don't configure this policy, the Sidebar's visibility follows the user's Microsoft Edge settings.\n\nAs of Microsoft Edge version 141, the \"Microsoft365CopilotChatIconEnabled\" policy is the only means of controlling the display of Copilot in the toolbar.\n\nNote: The recommended version of this policy-also known as the \"Default Settings (users can override)\" policy-is obsolete. This policy has never supported the recommended capability.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"013c62b4250551b1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended","displayName":"Set the background tab inactivity timeout for sleeping tabs (users can override)","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs are automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\n\nTabs are only put to sleep automatically when the policy \"SleepingTabsEnabled\" is enabled or isn't configured, and the user has enabled the sleeping tabs setting.\n\nIf you don't configure this policy, users can choose the timeout value.\n\nPolicy options mapping:\n\n* 30Seconds (30) = 30 seconds of inactivity\n\n* 5Minutes (300) = 5 minutes of inactivity\n\n* 15Minutes (900) = 15 minutes of inactivity\n\n* 30Minutes (1800) = 30 minutes of inactivity\n\n* 1Hour (3600) = 1 hour of inactivity\n\n* 2Hours (7200) = 2 hours of inactivity\n\n* 3Hours (10800) = 3 hours of inactivity\n\n* 6Hours (21600) = 6 hours of inactivity\n\n* 12Hours (43200) = 12 hours of inactivity\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_30seconds","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_5minutes","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_15minutes","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_30minutes","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_1hour","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_2hours","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_3hours","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_6hours","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_recommended_12hours","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"01b1585d0bc0b35a":{"id":"device_vendor_msft_bitlocker_systemdrivesminimumpinlength_minpinlength","displayName":"Minimum characters:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":null},"01221cd107f2b8c9":{"id":"device_vendor_msft_defender_configuration_enablednssinkhole","displayName":"[Deprecated] Enable Dns Sinkhole","description":"This setting is deprecated and no longer has impact on devices. This setting enables the DNS Sinkhole feature for Network Protection, respecting the value of EnableNetworkProtection for block vs audit, does nothing in inspect mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_enablednssinkhole_0","displayName":"DNS Sinkhole is disabled","description":"DNS Sinkhole is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_enablednssinkhole_1","displayName":"DNS Sinkhole is enabled","description":"DNS Sinkhole is enabled","helpText":null}]},"015bc9c7870e79f2":{"id":"device_vendor_msft_policy_config_admx_filerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"736134cb-4d82-427a-97b7-d219ac6a22f0","categoryName":"Corrupted File Recovery","options":[{"id":"device_vendor_msft_policy_config_admx_filerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_1","displayName":"Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_2","displayName":"Regular","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_3","displayName":"Silent","description":null,"helpText":null}]},"016edabd46753098":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_configuretargetportals","displayName":"Do not allow manual configuration of target portals","description":"If enabled then new target portals may not be added and thus new targets discovered on those portals; existing target portals may not be removed. If disabled then new target portals may be added and thus new targets discovered on those portals; existing target portals may be removed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsidiscovery-configuretargetportals"],"categoryId":"60ea8de3-bc6d-4b01-974a-a53860fe4ef6","categoryName":"i SCSI Target Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_configuretargetportals_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_configuretargetportals_1","displayName":"Enabled","description":null,"helpText":null}]},"015b586c92b1e394":{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_honorciphersuiteorder","displayName":"Honor cipher suite order","description":"This policy setting determines how the SMB server selects a cipher suite when negotiating a new connection with an SMB client.\r\n\r\nIf you enable this policy setting, the SMB server will select the cipher suite it most prefers from the list of client-supported cipher suites, ignoring the client's preferences.\r\n\r\nIf you disable or do not configure this policy setting, the SMB server will select the cipher suite the client most prefers from the list of server-supported cipher suites.\r\n\r\nNote: When configuring this security setting, changes will not take effect until you restart Windows.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-lanmanserver#admx-lanmanserver-pol-honorciphersuiteorder"],"categoryId":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_honorciphersuiteorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_honorciphersuiteorder_1","displayName":"Enabled","description":null,"helpText":null}]},"01962c2c630b5557":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundsuccessfulrefreshperiod","displayName":"Use positive periodic DC cache refresh for background callers","description":"This policy setting determines when a successful DC cache entry is refreshed. This policy setting is applied to caller programs that periodically attempt to locate DCs, and it is applied before returning the DC information to the caller program. The default value for this setting is infinite (4294967200). The maximum value for this setting is (4294967200), while the maximum that is not treated as infinity is 49 days (49*24*60*60=4233600). Any larger value is treated as infinity. The minimum value for this setting is to always refresh (0).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-backgroundsuccessfulrefreshperiod"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundsuccessfulrefreshperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundsuccessfulrefreshperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"01ce9e455c40e22f":{"id":"device_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_2","displayName":"CD and DVD: Deny write access","description":"This policy setting denies write access to the CD and DVD removable storage class.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-cdanddvd-denywrite-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"01f9acbe7eedcaba":{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_communities","displayName":"Specify communities","description":"This policy setting configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service.\r\n\r\nSNMP is a protocol designed to give a user the capability to remotely manage a computer network, by polling and setting terminal values and monitoring network events.\r\n\r\nA valid community is a community recognized by the SNMP service, while a community is a group of hosts (servers, workstations, hubs, and routers) that are administered together by SNMP. The SNMP service is a managed network node that receives SNMP packets from the network.\r\n\r\nIf you enable this policy setting, the SNMP agent only accepts requests from management systems within the communities it recognizes, and only SNMP Read operation is allowed for the community.\r\n\r\nIf you disable or do not configure this policy setting, the SNMP service takes the Valid Communities configured on the local computer instead.\r\n\r\nBest practice: For security purposes, it is recommended to restrict the HKLM\\SOFTWARE\\Policies\\SNMP\\Parameters\\ValidCommunities key to allow only the local admin group full control.\r\n\r\nNote: It is good practice to use a cryptic community name.\r\n\r\nNote: This policy setting has no effect if the SNMP agent is not installed on the client computer.\r\n\r\nAlso, see the other two SNMP settings: \"Specify permitted managers\" and \"Specify trap configuration\".\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-snmp#admx-snmp-snmp-communities"],"categoryId":"930d2960-3f70-48ca-9ead-b65a5a037c07","categoryName":"SNMP","options":[{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_communities_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_communities_1","displayName":"Enabled","description":null,"helpText":null}]},"0161890fd792fb74":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_additonalemailtotext","displayName":"Additional recipients:","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":null},"01195cf0feca0c19":{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name_routernamebox","displayName":"Enter a router or relay name:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":null},"01e0eb8068a1de4a":{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_state_stateselect","displayName":"Select from the following states:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_state_stateselect_default","displayName":"Default State","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_state_stateselect_enabled","displayName":"Enabled State","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_state_stateselect_disabled","displayName":"Disabled State","description":null,"helpText":null}]},"012db2eb843f1dff":{"id":"device_vendor_msft_policy_config_bits_bandwidththrottlingtransferrate","displayName":"Bandwidth Throttling Transfer Rate","description":"This policy specifies the bandwidth throttling transfer rate in kilobits per second (Kbps) that Background Intelligent Transfer Service (BITS) uses for background transfers. This policy setting does not affect foreground transfers. Value type is integer. Default value is 1000. Supported value range: 0 - 4294967200. You can specify a limit to use during a specific time interval and at all other times. For example, limit the use of network bandwidth to 10 Kbps from 8:00 A. M. to 5:00 P. M. , and use all available unused bandwidth the rest of the day's hours. Using the three policies together (BandwidthThrottlingStartTime, BandwidthThrottlingEndTime, BandwidthThrottlingTransferRate), BITS will limit its bandwidth usage to the specified values. You can specify the limit in kilobits per second (Kbps). If you specify a value less than 2 kilobits, BITS will continue to use approximately 2 kilobits. To prevent BITS transfers from occurring, specify a limit of 0. If you disable or do not configure this policy setting, BITS uses all available unused bandwidth. Note: You should base the limit on the speed of the network link, not the computer's network interface card (NIC). This policy setting does not affect peer caching transfers between peer computers (it does affect transfers from the origin server); the Limit the maximum network bandwidth used for Peercaching policy setting should be used for that purpose. Consider using this setting to prevent BITS transfers from competing for network bandwidth when the client computer has a fast network card (10Mbs), but is connected to the network via a slow link (56Kbs).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-BITS#bandwidththrottlingtransferrate"],"categoryId":"7443c1d4-1087-486c-9a0a-f9da9074e4e1","categoryName":"BITS","options":null},"0174f0e73c6dd4ae":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_policydictionarymultiplesourcemergelistdesc","displayName":"Allow merging dictionary policies from different sources (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"01bbac007b34aa8e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist","displayName":"Authentication server allowlist","description":"Setting the policy specifies which servers should be allowed for integrated authentication. Integrated authentication is only on when Google Chrome gets an authentication challenge from a proxy or from a server in this permitted list.\r\n\r\nLeaving the policy unset means Google Chrome tries to detect if a server is on the intranet. Only then will it respond to IWA requests. If a server is detected as internet, then Google Chrome ignores IWA requests from it.\r\n\r\nNote: Separate multiple server names with commas. Wildcards, *, are allowed.\r\n\r\nExample value: *.example.com,example.com","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"01de8599d1ead01d":{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope_v2_epm","displayName":"Config Device Health Monitoring Scope","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which types of events are monitored.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringscope"],"categoryId":"55c888df-44ff-49d1-808e-ad9cb8429aff","categoryName":"Device Health Monitoring","options":{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope_v2_epm_privilegemanagement","displayName":"Privilege Management","description":null,"helpText":null}},"013514b15d66dd41":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_profileshealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":null},"0169a6a36577fb0c":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate","displayName":"Locked-Down Intranet","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"014722f7bd7beede":{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles","displayName":"Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet","description":"This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter warns the user about executable files that Internet Explorer users do not commonly download from the Internet.\n\nIf you enable this policy setting, SmartScreen Filter warnings block the user.\n\nIf you disable or do not configure this policy setting, the user can bypass SmartScreen Filter warnings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"0155b06f1410b4bb":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride","displayName":"Override for the CPU performance tier","description":"This policy allows you to override the value returned by the CPU Performance API (that is, navigator.cpuPerformance).\n\nIf you enable this policy, the value of navigator.cpuPerformance is overridden with the specified value.\n\nIf you don’t configure this policy, the default performance tier calculation is used.\n\nYou can specify a value from 0 through 4.\n\nFor more information, see https://github.com/WICG/cpu-performance.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride_1","displayName":"Enabled","description":null,"helpText":null}]},"0114a483a418182c":{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled","displayName":"Allow DNS queries for more DNS record types","description":"This policy controls whether Microsoft Edge can query more DNS record types when making insecure (non-Secure DNS) requests.\r\n\r\nIf this policy is unset or set to Enabled, more record types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).\r\n\r\nIf this policy is set to Disabled, Microsoft Edge will only query A and AAAA record types for insecure DNS requests.\r\n\r\nThis setting doesn't affect DNS queries made via Secure DNS, which may always use more record types.\r\n\r\nNote: This is a temporary policy and is planned for removal in a future version of Microsoft Edge. After removal, Microsoft Edge will always be able to query more DNS types during insecure requests.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"01db051b92a21cea":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended","displayName":"Default search provider search URL","description":"Specifies the URL of the search engine used for a default search. The URL contains the string '{searchTerms}', which is replaced at query time by the terms the user is searching for.\r\n\r\nSpecify Bing's search URL as:\r\n\r\n'{bing:baseURL}search?q={searchTerms}'.\r\n\r\nSpecify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nThis policy is required when you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy; if you don't enable the latter policy, this policy is ignored.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: https://search.contoso.com/search?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"01e3e71c7799d071":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist","displayName":"Open local files in Internet Explorer mode file extension allow list","description":"This policy limits which file:// URLs are allowed to be launched into Internet Explorer mode based on file extension.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nWhen a file:// URL is requested to launch in Internet Explorer mode, the file extension of the URL must be present in this list in order for the URL to be allowed to launch in Internet Explorer mode. A URL which is blocked from opening in Internet Explorer mode will instead open in Edge mode.\r\n\r\nIf you set this policy to the special value \"*\" or don't configure it, all file extensions are allowed.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\nExample value:\r\n\r\n.mht\r\n.pdf\r\n.vsdx","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"01660a75bba61a0e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mspubexe184","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mspubexe184_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mspubexe184_1","displayName":"True","description":null,"helpText":null}]},"01dc91c1d5c52965":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_msaccessexe123","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_msaccessexe123_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_msaccessexe123_1","displayName":"True","description":null,"helpText":null}]},"018c6537a94090e4":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard","displayName":"Silently move Windows known folders to OneDrive","description":"This setting lets you redirect known folders to OneDrive without any user interaction. In sync client builds below 18.171.0823.0001, this setting only redirects empty known folders to OneDrive (or known folders already redirected to a different OneDrive account). In later builds, it redirects known folders that contain content and moves the content to OneDrive. We recommend using this setting together with \"Prompt users to move Windows known folders to OneDrive.\" If moving the known folders silently does not succeed, users will be prompted to correct the error and continue.\r\n\r\nIf you enable this setting and provide your tenant ID, you can choose whether to display a notification to users after their folders have been redirected.\r\n\r\nIf you disable or do not configure this setting, your users' known folders will not be silently redirected and/or moved to OneDrive.\r\n\r\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_1","displayName":"Enabled","description":null,"helpText":null}]},"01749f10fa99a762":{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_userincontroloftheseapps","displayName":"Let Apps Get Diagnostic Info User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the app diagnostics privacy setting for the listed Windows apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"01db7bb983e6f9f9":{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel","displayName":"Set client connection encryption level","description":"Specifies whether to require the use of a specific encryption level to secure communications between client computers and RD Session Host servers during Remote Desktop Protocol (RDP) connections. This policy only applies when you are using native RDP encryption. However, native RDP encryption (as opposed to SSL encryption) is not recommended. This policy does not apply to SSL encryption.\n\nIf you enable this policy setting, all communications between clients and RD Session Host servers during remote connections must use the encryption method specified in this setting. By default, the encryption level is set to High. The following encryption methods are available:\n\n* High: The High setting encrypts data sent from the client to the server and from the server to the client by using strong 128-bit encryption. Use this encryption level in environments that contain only 128-bit clients (for example, clients that run Remote Desktop Connection). Clients that do not support this encryption level cannot connect to RD Session Host servers.\n\n* Client Compatible: The Client Compatible setting encrypts data sent between the client and the server at the maximum key strength supported by the client. Use this encryption level in environments that include clients that do not support 128-bit encryption.\n\n* Low: The Low setting encrypts only data sent from the client to the server by using 56-bit encryption.\n\nIf you disable or do not configure this setting, the encryption level to be used for remote connections to RD Session Host servers is not enforced through Group Policy.\n\nImportant\n\nFIPS compliance can be configured through the System cryptography. Use FIPS compliant algorithms for encryption, hashing, and signing settings in Group Policy (under Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options.) The FIPS compliant setting encrypts and decrypts data sent from the client to the server and from the server to the client, with the Federal Information Processing Standard (FIPS) 140 encryption algorithms, by using Microsoft cryptographic modules. Use this encryption level when communications between clients and RD Session Host servers requires the highest level of encryption.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-clientconnectionencryptionlevel"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"015f4b5179c1f8b5":{"id":"device_vendor_msft_policy_config_search_allowcortanainaad","displayName":"Allow Cortana In AAD","description":"This features allows you to show the cortana opt-in page during Windows Setup","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowcortanainaad"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_allowcortanainaad_0","displayName":"Block","description":"Not allowed. The Cortana consent page will not appear in AAD OOBE during setup.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowcortanainaad_1","displayName":"Allow","description":"Allowed. The Cortana consent page will appear in Azure AAD OOBE during setup.","helpText":null}]},"019d65868afec56b":{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseimesurrogatepaircharacters","displayName":"Allow Japanese IME Surrogate Pair Characters","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the Japanese IME surrogate pair characters. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapaneseimesurrogatepaircharacters"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseimesurrogatepaircharacters_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseimesurrogatepaircharacters_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"01b4f902a95f3411":{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds","displayName":"Manage Preview Builds","description":"Used to manage Windows 10 Insider Preview builds. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#managepreviewbuilds"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_0","displayName":"Disable Preview builds","description":"Disable Preview builds","helpText":null},{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_1","displayName":"Disable Preview builds once the next release is public","description":"Disable Preview builds once the next release is public","helpText":null},{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_2","displayName":"Enable Preview builds","description":"Enable Preview builds","helpText":null},{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_3","displayName":"Preview builds is left to user selection","description":"Preview builds is left to user selection","helpText":null}]},"015e70336f693b52":{"id":"device_vendor_msft_policy_config_userrights_logonasbatchjob","displayName":"Log On As Batch Job","description":"This security setting allows a user to be logged on by means of a batch-queue facility and is provided only for compatibility with older versions of Windows. For example, when a user submits a job by means of the task scheduler, the task scheduler logs that user on as a batch user rather than as an interactive user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#logonasbatchjob"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"01905944f2f2c937":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile","displayName":"Custom path to the update configuration file","description":"The custom file path to the update configuration file used for configuring administrator updates. For more information, see https://aka.ms/vs/admin/updates/configurationfile.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile_1","displayName":"Enabled","description":null,"helpText":null}]},"01deb7dfa56b43ef":{"id":"device_vendor_msft_policy_config_windowssandbox_allowprinterredirection","displayName":"Allow Printer Redirection","description":"Allow printer sharing with Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowprinterredirection"],"categoryId":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","categoryName":"Windows Sandbox","options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowprinterredirection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowprinterredirection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"01d65d91f3b131b6":{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompc","displayName":"Allow Projection From PC","description":"This policy allows you to turn off projection from a PC. If you set it to 0, your PC cannot discover or project to other devices. If you set it to 1, your PC can discover and project to other devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowprojectionfrompc"],"categoryId":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompc_0","displayName":"Your PC cannot discover or project to other devices.","description":"Your PC cannot discover or project to other devices.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompc_1","displayName":"Your PC can discover and project to other devices.","description":"Your PC can discover and project to other devices.","helpText":null}]},"0124e0d53b70ab38":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_enableautoremediation","displayName":"Enable Auto Remediation (Windows Insiders only)","description":"Enable to automatically check for remediation solutions. Disable to check manually.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":[{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_enableautoremediation_true","displayName":"Auto remediation enabled","description":"Auto remediation enabled","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_enableautoremediation_false","displayName":"Auto remediation disabled","description":"Auto remediation disabled","helpText":null}]},"0107e9d1c20515fa":{"id":"enforcement_targetbuildversion","displayName":"Target Build Version","description":"The target build version to update the device to by the appropriate time, for example, `20A242`. Use the build version for testing during seeding periods. The build version can include a supplemental version identifier, for example, `20A242a`.","helpText":null,"infoUrls":[],"categoryId":"42a6198f-bdec-402e-b619-315400b65488","categoryName":"Software Update","options":null},"016a009057d0e565":{"id":"externalintelligencesettings_allowsignin","displayName":"Allow Sign In","description":"If `false`, disables sign-in for external intelligence integrations.","helpText":null,"infoUrls":[],"categoryId":"d9654cb3-57c8-487c-90a5-454e15336731","categoryName":"External Intelligence Settings","options":[{"id":"externalintelligencesettings_allowsignin_false","displayName":"False","description":null,"helpText":null},{"id":"externalintelligencesettings_allowsignin_true","displayName":"True","description":null,"helpText":null}]},"0174388bf526ae61":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders82","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders82_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders82_1","displayName":"True","description":null,"helpText":null}]},"01fbe1dab59aaa0b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity_l_modaltrustdecisiononly","displayName":"Modal Trust Decision Only (User)","description":"This policy setting controls how Access notifies users about untrusted components. \r\n \r\nIf you enable this policy setting, when users attempt to open an untrusted Access database that contains user-programmed executable components, users see a dialog box where they then must choose whether to enable or disable the components before they can work with the database. \r\n \r\nIf you disable or do not configure this policy setting, when users open an untrusted Access database that contains user-programmed executable components, Access opens the database with the components disabled and displays the Message Bar with a warning that database content has been disabled. Users can inspect the contents of the database, but cannot use any disabled functionality until they enable it by clicking Options on the Message Bar and selecting the appropriate action.","helpText":"","infoUrls":[],"categoryId":"607a1c39-a3db-496f-8db6-c99d67f5f76c","categoryName":"Tools | Security","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity_l_modaltrustdecisiononly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity_l_modaltrustdecisiononly_1","displayName":"Enabled","description":null,"helpText":null}]},"0186a5e8380b65d0":{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffinsertspace","displayName":"Turn off insert a space after selecting a text prediction (User)","description":"\r\n This policy turns off the insert a space after selecting a text prediction option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The insert a space after selecting a text prediction option controls whether or not a space will be inserted after the user selects a text prediction candidate when using the on-screen keyboard.\r\n\r\n If the policy is Enabled, then the option will be locked to not insert a space after selecting a text prediction.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffinsertspace"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffinsertspace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffinsertspace_1","displayName":"Enabled","description":null,"helpText":null}]},"0177070ef5546249":{"id":"user_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer","displayName":"Send Intranet Trafficto Internet Explorer (User)","description":"Sends all intranet traffic over to Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#sendintranettraffictointernetexplorer"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer_0","displayName":"Disabled","description":"All sites, including intranet sites, open in Microsoft Edge automatically.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer_1","displayName":"Enabled","description":"Only intranet sites open in Internet Explorer 11 automatically.","helpText":null}]},"01f9a3b1eb8d75e8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply (User)","description":"List of URLs specifying which urls AutoOpenFileTypes will apply to. This policy has no impact on automatically open values set by users.\r\n\r\nIf this policy is set, files will only automatically open by policy if the url is part of this set and the file type is listed in AutoOpenFileTypes. If either condition is false the download won't automatically open by policy.\r\n\r\nIf this policy isn't set, all downloads where the file type is in AutoOpenFileTypes will automatically open.\r\n\r\nA URL pattern has to be formatted according to https://www.chromium.org/administrators/url-blocklist-filter-format.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"016b67d3fe781b19":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promptfordownloadlocation","displayName":"Ask where to save each file before downloading (User)","description":"Setting the policy to Enabled means users are asked where to save each file before downloading. Setting the policy to Disabled has downloads start immediately, and users aren't asked where to save the file.\r\n\r\nLeaving the policy unset lets users change this setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promptfordownloadlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promptfordownloadlocation_1","displayName":"Enabled","description":null,"helpText":null}]},"0141aeee0ef6c713":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_relaunchnotificationperiod","displayName":"Time period (milliseconds): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"0140ed6f12079cc0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled","displayName":"Enable 3DES cipher suites in TLS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"01c1fa10066b1914":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled","displayName":"Force WebSQL in non-secure contexts to be enabled. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"01423a940663a319":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercoderecordmacro","displayName":"Developer tab | Code | Record Macro (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercoderecordmacro_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercoderecordmacro_1","displayName":"True","description":null,"helpText":null}]},"0119bd092563615b":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"01a4ee4f08447481":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"0146d6a5a22dd2f7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt","displayName":"Allow cross-origin HTTP Basic Auth prompts (User)","description":"Controls whether third-party sub-content on a page can open an HTTP Basic Auth dialog box.\r\n\r\nTypically, this is disabled as a phishing defense. If you don't configure this policy, it's disabled and third-party sub-content can't open a HTTP Basic Auth dialog box.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"01e7573e984644b9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontainingalink","displayName":"Only containing a link (User)","description":"Defines the default message body text used in an email request for review when the review document is included only as an attachment.","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontainingalink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontainingalink_1","displayName":"Enabled","description":null,"helpText":null}]},"01f595fa7049bf2d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_l_datecolon279","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"0170690358a589e7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc14_l_pathcolon14","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"01d2cf0a938384c1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions_l_disableofficetemplates","displayName":"Hide all Office-provided templates on the Office Start screen and in File | New (User)","description":"This policy setting controls whether Office-provided templates (from Office.com and shipped with the Office clients) are hidden on the Office Start screen and in File | New.\r\n\r\nIf you enable this policy setting, users will not see any Office provided templates on the Office Start screen nor in File | New.\r\n\r\nIf you disable or do not configure this policy setting, users will see Office provided templates on the Office Start screen nor in File | New.\r\n\r\nNote - enabling this policy setting does not prevent users from downloading templates from Office.com using their Web browsers and does not prevent users from using Office-provided templates installed on their hard drive using Windows Explorer to launch those templates.","helpText":"","infoUrls":[],"categoryId":"2d5a483f-b408-426d-9234-2883eae20afb","categoryName":"Tools | Options | General | Web Options...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions_l_disableofficetemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions_l_disableofficetemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"018bea59287a0058":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites","displayName":"Configure team site libraries to sync automatically (User)","description":"This setting lets you specify SharePoint team site libraries to sync automatically the next time users sign in to the OneDrive sync app (OneDrive.exe). It may take up to 8 hours after a users signs in before the library begins to sync. To use the setting, you must enable OneDrive Files On-Demand, and the setting applies only for users on computers running Windows 10 (1709) Fall Creators Update or later. Do not enable this setting for the same library to more than 1,000 devices. To ensure a good sync experience, avoid enabling this feature on large libraries sets (For the most up to date guidance see https://docs.microsoft.com/en-us/onedrive/use-group-policy#AutoMountTeamSites). This feature is not enabled for on-premises SharePoint sites.\r\n \r\nIf you enable this setting, the OneDrive sync app will automatically download the contents of the libraries you specified as online-only files the next time the user signs in. The user won't be able to stop syncing the libraries.\r\n \r\nIf you disable this setting, team site libraries that you've specified won't be automatically synced for new users. Existing users can choose to stop syncing the libraries, but the libraries won't stop syncing automatically.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_1","displayName":"Enabled","description":null,"helpText":null}]},"0157cdb2335c638b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_largepstabsolutemaximumsize_l_enterabsolutemaximumsizeforpstinmegabytes2","displayName":"(0 - 4,294,967,295 MB) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":null},"01ba396c42887df7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehavior","displayName":"Configure fast shutdown behavior (User)","description":"This policy setting controls Outlook's \"fast shutdown\" behavior. \r\n\r\nIf you enable this policy setting, you may select one of these options:\r\n\r\n- MAPI provider does not support: Outlook should always use Fast Shutdown unless a MAPI provider explicitly does not support it.\r\n- All MAPI providers support: Outlook only uses Fast Shutdown if all MAPI providers do support it.\r\n- Never: Outlook never uses Fast Shutdown\r\n\r\nIf you disable or do not configure this policy setting, the behavior will be the same as the \"MAPI provider does not support\" option.","helpText":"","infoUrls":[],"categoryId":"ffb0a109-2507-42b3-b26f-9f667f2d5029","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"01927461ba80da53":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_enablecryptographyicons","displayName":"Enable Cryptography Icons (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_enablecryptographyicons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_enablecryptographyicons_1","displayName":"Enabled","description":null,"helpText":null}]},"01599dcf24869012":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb","displayName":"Cipher Feedback (CFB)","description":null,"helpText":null}]},"01518b4ecb3a920c":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperweek_l_pjhoursperweek19","displayName":"Hours per week (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":null},"0180359a1d2ee7ae":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_setnumberofplacesintherecentplaceslist","displayName":"Number of folders in the Recent Folders list (User)","description":"This policy setting specifies the number of unpinned entries displayed in the Recent Folders list that appears when users click Open or Save As on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of unpinned entries to be between 0 and 20. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 5 unpinned items are displayed in the Recent Folders list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Folders list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_setnumberofplacesintherecentplaceslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_setnumberofplacesintherecentplaceslist_1","displayName":"Enabled","description":null,"helpText":null}]},"01e5878de06be4d2":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid2","displayName":"Dialogs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid2_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid2_1","displayName":"True","description":null,"helpText":null}]},"01e21be2b5d0c75b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4_l_languageforfileconversion5","displayName":"Language for file conversion (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6ae0d607-832c-403b-b3bc-c563e390ebad","categoryName":"Save/Open","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4_l_languageforfileconversion5_0","displayName":"Let Visio decide language","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4_l_languageforfileconversion5_1","displayName":"Prompt for language","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4_l_languageforfileconversion5_2","displayName":"Use the following language","description":null,"helpText":null}]},"01e4c21422b32d02":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_startup_l_startup15","displayName":"Startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/02.json b/public/intune-definitions/02.json new file mode 100644 index 000000000000..521869661d6e --- /dev/null +++ b/public/intune-definitions/02.json @@ -0,0 +1 @@ +{"022d305ee5c20414":{"id":"ade_setupassistant_termsandconditions","displayName":"Terms and conditions","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_termsandconditions_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_termsandconditions_1","displayName":"Show","description":null,"helpText":null}]},"023bc0e2fecea81f":{"id":"com.apple.managedclient.preferences_edgeedropenabled","displayName":"Enable Drop feature in Microsoft Edge","description":"This policy lets you configure the Drop feature in Microsoft Edge.\n\nDrop lets users send messages or files to themselves.\n\nIf you enable or don't configure this policy, you can use the Drop feature in Microsoft Edge.\n\nIf you disable this policy, you can't use the Drop feature in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeedropenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeedropenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeedropenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0254fdaae0bdce30":{"id":"com.apple.managedclient.preferences_newtabpagemanagedquicklinks","displayName":"New Tab Page Managed Quick Links","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\n\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\n\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' is not provided, the URL is used as the default title. If 'pinned' is not provided, the default value is false.\n\nMicrosoft Edge presents these in the order listed, from left to right, with all pinned tiles displayed ahead of non-pinned tiles.\n\nIf the policy is set as mandatory, the 'pinned' field will be ignored and all tiles will be pinned. The tiles can't be deleted by the user and will always appear at the front of the quick links list.\n\nIf the policy is set as recommended, pinned tiles will remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying non-pinned links via this policy to an existing browser profile, the links may not appear at all, depending on how they rank compared to the user's browsing history.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagemanagedquicklinks"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"02599b605059faf3":{"id":"com.apple.system-extension-policy_removablesystemextensions_generickey_keytobereplaced","displayName":"Team Identifier","description":"Add a Team Identifier of valid and signed system extensions to load. The team identifier must be alphanumeric (letters and numbers) and have 10 characters. For example, enter ABCDE12345.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"02c400c7c52f0c59":{"id":"com.apple.systemconfiguration_proxies_rtspenable","displayName":"RTSP Enable","description":"If true, enable streaming proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_rtspenable_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_rtspenable_1","displayName":"True","description":null,"helpText":null}]},"02ef0c691c541f12":{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"0299973e222dd65b":{"id":"device_vendor_msft_bitlocker_removabledrivesexcludedfromencryption","displayName":"Removable Drives Excluded From Encryption","description":"When enabled, allows you to exclude removable drives and devices connected over USB interface from BitLocker Device Encryption. Excluded devices cannot be encrypted, even manually. Additionally, if \"Deny write access to removable drives not protected by BitLocker\" is configured, user will not be prompted for encryption and drive will be mounted in read/write mode. Provide a comma separated list of excluded removable drives\\devices, using the Hardware ID of the disk device. Example USBSTOR\\SEAGATE_ST39102LW_______0004.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"0a1347d2-90c0-407a-baa0-e4859260532a","categoryName":"BitLocker","options":null},"02098fa7d97dd549":{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementtarget","displayName":"Automatic Account Management Target","description":"Use this setting to configure which account is automatically managed.\n\nThe allowable settings are:\n\n0=The builtin administrator account will be managed.\n1=A new account created by Windows LAPS will be managed.\n\nIf not specified, this setting will default to 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementtarget_0","displayName":"Manage the built-in administrator account","description":"Manage the built-in administrator account","helpText":null},{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementtarget_1","displayName":"Manage a new custom administrator account","description":"Manage a new custom administrator account","helpText":null}]},"02f7b849a9464cbd":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornoneex_pch_allornoneex_list","displayName":"Exclude errors for applications on this list:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"0258ea3f24fa287a":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_2_channel_log_filelogaccess","displayName":"Log Access","description":null,"helpText":"","infoUrls":[],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":null},"02ad18b79ffcfe18":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_5","displayName":"Configure log access (legacy)","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You must set both \"configure log access\" policy settings for this log in order to affect the both modern and legacy tools.\r\n\r\nIf you enable this policy setting, only those users matching the security descriptor can access the log.\r\n\r\nIf you disable this policy setting, all authenticated users and system services can write, read, or clear this log.\r\n\r\nIf you do not configure this policy setting, the previous policy setting configuration remains in effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-5"],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_5_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_5_1","displayName":"Enabled","description":null,"helpText":null}]},"028c8f0c9fea283b":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsigeneral_restrictadditionallogins","displayName":"Do not allow additional session logins","description":"If enabled then only those sessions that are established via a persistent login will be established and no new persistent logins may be created. If disabled then additional persistent and non persistent logins may be established.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsigeneral-restrictadditionallogins"],"categoryId":"ca1aedf4-b951-45f5-a77c-dec776a82e21","categoryName":"General i SCSI","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsigeneral_restrictadditionallogins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsigeneral_restrictadditionallogins_1","displayName":"Enabled","description":null,"helpText":null}]},"0200b928a8e74af7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduletime","displayName":"Specify the time to check for security intelligence updates","description":"This policy setting allows you to specify the time of day at which to check for security intelligence updates. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default this setting is configured to check for security intelligence updates 15 minutes before the scheduled scan time. The schedule is based on local time on the computer where the check is occurring.\r\n\r\n If you enable this setting, the check for security intelligence updates will occur at the time of day specified.\r\n\r\n If you disable or do not configure this setting, the check for security intelligence updates will occur at the default time.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-scheduletime"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduletime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduletime_1","displayName":"Enabled","description":null,"helpText":null}]},"02b0c1f69e8bc1f9":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel","displayName":"MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning","description":"MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-warninglevel"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_1","displayName":"Enabled","description":null,"helpText":null}]},"025625984028cec3":{"id":"device_vendor_msft_policy_config_admx_sharing_disablehomegroup","displayName":"Prevent the computer from joining a homegroup","description":"This policy setting specifies whether users can add computers to a homegroup. By default, users can add their computer to a homegroup on a private network.\r\n\r\nIf you enable this policy setting, users cannot add computers to a homegroup. This policy setting does not affect other network sharing features.\r\n\r\nIf you disable or do not configure this policy setting, users can add computers to a homegroup. However, data on a domain-joined computer is not shared with the homegroup.\r\n\r\nThis policy setting is not configured by default.\r\n\r\nYou must restart the computer for this policy setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sharing#admx-sharing-disablehomegroup"],"categoryId":"d0e46713-238c-42b7-a996-653cf952c367","categoryName":"Home Group","options":[{"id":"device_vendor_msft_policy_config_admx_sharing_disablehomegroup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sharing_disablehomegroup_1","displayName":"Enabled","description":null,"helpText":null}]},"02c2ea5abb2f0a16":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_visexp_ts_visexp_settings","displayName":"Visual experience:","description":null,"helpText":"","infoUrls":[],"categoryId":"b7bde490-eac6-4f57-8808-e0786b8191a1","categoryName":"Remote FX for Windows Server 2008 R2","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_visexp_ts_visexp_settings_1","displayName":"Rich multimedia","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_visexp_ts_visexp_settings_2","displayName":"Text","description":null,"helpText":null}]},"023882eeecb12ef0":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_refresh_unit_options","displayName":"User Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"0223b5160bb02ff0":{"id":"device_vendor_msft_policy_config_browser_lockdownfavorites","displayName":"Lockdown Favorites","description":"This policy setting lets you decide whether employees can add, import, sort, or edit the Favorites list on Microsoft Edge. If you enable this setting, employees won't be able to add, import, or change anything in the Favorites list. Also as part of this, Save a Favorite, Import settings, and the context menu items (such as, Create a new folder) are all turned off. Important Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. If you disable or don't configure this setting (default), employees can add, import and make changes to the Favorites list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#lockdownfavorites"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_lockdownfavorites_0","displayName":"Disabled","description":"Allowed/not locked down. Users can add, import, and make changes to the favorites.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_lockdownfavorites_1","displayName":"Enabled","description":"Prevented/locked down.","helpText":null}]},"028dc94626117bc9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support","description":"Setting the policy to True or leaving it unset means Google Chrome will accept web contents served as Signed HTTP Exchanges.\r\n\r\nSetting the policy to False prevents Signed HTTP Exchanges from loading.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"02ce15724f0e5ce2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled","displayName":"Use out-of-process iframe PDF Viewer","description":"Controls whether the PDF viewer in Google Chrome uses an out-of-process iframe (OOPIF). This will be the new PDF viewer architecture in the future, as it is simpler and makes adding new features easier. The existing GuestView PDF viewer is an outdated, complex architecture that is being deprecated.\r\n\r\nWhen this policy is set to Enabled or not set, Google Chrome will be able to use the OOPIF PDF viewer architecture. Once Enabled or not set, the default behavior will be decided by Google Chrome.\r\n\r\nWhen this policy is set to Disabled, Google Chrome will strictly use the existing GuestView PDF viewer. It embeds a web page with a separate frame tree into another web page.\r\n\r\nThis policy will be removed in the future, after the OOPIF PDF viewer feature has fully rolled out.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"029c81800daab844":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_sitesearchsettings","displayName":"Site search settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"025e731449aed76b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings","displayName":"Web App management settings","description":"This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.\r\n\r\nThe manifest_id field is the Manifest ID for the Web App. See https://developer.chrome.com/blog/pwa-manifest-id/ for instructions on how to determine the Manifest ID for an installed web app.\r\nThe run_on_os_login field specifies if a web app can be run during OS login. If this field is set to blocked, the web app will not run during OS login and the user will not be able to enable this later. If this field is set to run_windowed, the web app will run during OS login and the user will not be able to disable this later. If this field is set to allowed, the user will be able to configure the web app to run at OS login. The default configuration only allows the allowed and blocked values.\r\n(Since version 117) The prevent_close_after_run_on_os_login field specifies if a web app shall be prevented from closing in any way (e.g. by the user, task manager, web APIs). This behavior can only be enabled if run_on_os_login is set to run_windowed. If the app were already running, this property will only come into effect after the app is restarted. If this field is not defined, apps will be closable by users.\r\n(Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, i.e. shortcuts, file handlers, protocol handlers etc will be removed or not. If an app is already running, this property will come into effect after the app has restarted. This should be used with caution, since this can override any OS integration that is set automatically during the startup of the web applications system. Currently only works on Windows, Mac and Linux platforms.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebAppSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://bar.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foobar.example/index.html\",\r\n \"run_on_os_login\": \"run_windowed\",\r\n \"prevent_close_after_run_on_os_login\": true\r\n },\r\n {\r\n \"manifest_id\": \"*\",\r\n \"run_on_os_login\": \"blocked\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"force_unregister_os_integration\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"02ed567e186af3cd":{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags","displayName":"Credential Guard","description":"Credential Guard Configuration: 0 - Turns off CredentialGuard remotely if configured previously without UEFI Lock, 1 - Turns on CredentialGuard with UEFI lock. 2 - Turns on CredentialGuard without UEFI lock.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#lsacfgflags"],"categoryId":"992a8a1e-428e-41cb-948e-4e5da86105fa","categoryName":"Device Guard","options":[{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags_0","displayName":"(Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock.","description":"(Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags_1","displayName":"(Enabled with UEFI lock) Turns on Credential Guard with UEFI lock.","description":"(Enabled with UEFI lock) Turns on Credential Guard with UEFI lock.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags_2","displayName":"(Enabled without lock) Turns on Credential Guard without UEFI lock.","description":"(Enabled without lock) Turns on Credential Guard without UEFI lock.","helpText":null}]},"029251722ffca737":{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_entersitelistprompt","displayName":"Type the location (URL) of your Enterprise Mode IE website list","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":null},"0285758770f5ef59":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowsmartscreenie"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"02addf39819332fa":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonejavapermissions"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"029456c3ffa5778e":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation","displayName":"User Account Control Allow UI Access Applications To Prompt For Elevation","description":"User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop. This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user. • Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts. If you do not disable the \"User Account Control: Switch to the secure desktop when prompting for elevation\" policy setting, the prompts appear on the interactive user's desktop instead of the secure desktop. • Disabled: (Default) The secure desktop can be disabled only by the user of the interactive desktop or by disabling the \"User Account Control: Switch to the secure desktop when prompting for elevation\" policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_allowuiaccessapplicationstopromptforelevation"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation_0","displayName":"disabled","description":"disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation_1","displayName":"enabled (allow UIAccess applications to prompt for elevation without using the secure desktop)","description":"enabled (allow UIAccess applications to prompt for elevation without using the secure desktop)","helpText":null}]},"02b81eaf83d8ccbc":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended","displayName":"Block third party cookies","description":"Block web page elements that aren't from the domain that's in the address bar from setting cookies.\r\n\r\nIf you enable this policy, web page elements that are not from the domain that is in the address bar can't set cookies\r\n\r\nIf you disable this policy, web page elements from domains other than in the address bar can set cookies.\r\n\r\nIf you don't configure this policy, third-party cookies are enabled but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"025e4de5b1d262fa":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist","displayName":"Configure the list of names that will bypass the HSTS policy check","description":"Hostnames specified in this list will be exempt from the HSTS policy check that could potentially upgrade requests from \"http://\" to \"https://\". Only single-label hostnames are allowed in this policy. Hostnames must be canonicalized. Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific hostnames specified; it doesn't apply to subdomains of the names in the list.\r\n\r\nExample value:\r\n\r\nmeet","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},"02d7deeade668971":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist","displayName":"Specify the TLS cipher suites to disable","description":"Configure the list of cipher suites that are disabled for TLS connections.\r\n\r\nIf you configure this policy, the list of configured cipher suites will not be used when establishing TLS connections.\r\n\r\nIf you don't configure this policy, the browser will choose which TLS cipher suites to use.\r\n\r\nCipher suite values to be disabled are specified as 16-bit hexadecimal values. The values are assigned by the Internet Assigned Numbers Authority (IANA) registry.\r\n\r\nThe TLS 1.3 cipher suite TLS_AES_128_GCM_SHA256 (0x1301) is required for TLS 1.3 and can't be disabled by this policy.\r\n\r\nThis policy does not affect QUIC-based connections. QUIC can be turned off via the 'QuicAllowed' (Allow QUIC protocol) policy.\r\n\r\nExample value:\r\n\r\n0x1303\r\n0xcca8\r\n0xcca9","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},"020a19b4d6507ad2":{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_0","displayName":"Off (Not recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_1","displayName":"Required data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_2","displayName":"Optional data","description":null,"helpText":null}]},"0294a775d5de1d4b":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_0","displayName":"Use default browser behavior.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_1","displayName":"Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_2","displayName":"Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_3","displayName":"Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null}]},"02fc7f569f50c646":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction","displayName":"Enable or disable the User-Agent Reduction (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_0","displayName":"User-Agent reduction will be controllable via Experimentation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_1","displayName":"User-Agent reduction diabled, and not enabled by Experimentation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_2","displayName":"User-Agent reduction will be enabled for all origins","description":null,"helpText":null}]},"0287f83b335ebd7e":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_sharepointonpremfrontdoorurlbox","displayName":"SharePoint Server 2019 URL: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"02d753322b57533a":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_firewallusersettingconfigurable","displayName":"Allow user setting firewall configuration","description":"When set to disabled, this policy disables firewall configuration via .wslconfig (wsl2.firewall). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_firewallusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_firewallusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},"0211580664e44c4b":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iprouting","displayName":"IP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iprouting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iprouting_1","displayName":"Enabled","description":null,"helpText":null}]},"02ae3394ac0345e7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended","displayName":"Enable Safe Browsing (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"de643352-007f-4a47-8c83-d75a79516b39","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"02f4de2613124684":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls_webusbaskforurlsdesc","displayName":"Allow WebUSB on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"02ebc8876bbeee00":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":null},"02cafdc6211518ca":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled","displayName":"Enable strict MIME type checking for worker scripts (User)","description":"This policy enables strict MIME type checking for worker scripts.\r\n\r\nWhen enabled or unset, then worker scripts will use strict MIME type checking for JavaScript, which is the new default behaviour. Worker scripts with legacy MIME types will be rejected.\r\n\r\nWhen disabled, then worker scripts will use lax MIME type checking, so that worker scripts with legacy MIME types, e.g. text/ascii, will continue to be loaded and executed.\r\n\r\nBrowsers traditionally used lax MIME type checking, so that resources with a number of legacy MIME types were supported. E.g. for JavaScript resources, text/ascii is a legacy supported MIME type. This may cause security issues, by allowing to load resources as scripts that were never intended to be used as such. Chrome will transition to use strict MIME type checking in the near future. The enabled policy will track the default behaviour. Disabling this policy allows administrators to retain the legacy behaviour, if desired.\r\n\r\nSee https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguage for details about JavaScript / ECMAScript media types.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"02a2e4dd4b160465":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_storemacroinpersonalmacroworkbookbydefault","displayName":"Store macro in Personal Macro Workbook by default (User)","description":"This policy setting controls the default location for storing macros in Excel.\r\n \r\n If this policy setting is enabled, Excel stores macros in users' personal macro workbook.\r\n \r\n If you disable or do not configure this policy setting, Excel stores macros in the active workbook from which they are created.\r\n \r\n Note: In the user interface (UI), the \"Store macro in\" drop down list box in the Record Macro dialog box (Macros | Record Macro) allows users to choose whether to store the new macro in the current workbook, a new workbook, or their personal macro workbook (Personal.xlsb), a hidden workbook that opens every time Excel starts.\r\n \r\n By default, Excel displays the \"Store macro in\" box with \"This Workbook\" already selected in the drop-down list. If a user saves a macro in the active workbook and then distributes the workbook to others, the macro is distributed along with the workbook. If you enable this policy setting, Excel displays the \"Store macro in\" box with \"Personal Macro Workbook\" already selected. Users can still select one of the other two options in the drop-down menu.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_storemacroinpersonalmacroworkbookbydefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_storemacroinpersonalmacroworkbookbydefault_1","displayName":"Enabled","description":null,"helpText":null}]},"0265b1a8285576a9":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"02b4cc4a7095db57":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc","displayName":"Sites to open when the browser starts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":null},"023a1821b62fd05e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode","displayName":"Configure proxy server settings (User)","description":"Specify the proxy server settings used by Microsoft Edge. If you enable this policy, users can't change the proxy settings.\r\n\r\nIf you choose to never use a proxy server and to always connect directly, all other options are ignored.\r\n\r\nIf you choose to use system proxy settings, all other options are ignored.\r\n\r\nIf you choose to auto detect the proxy server, all other options are ignored.\r\n\r\nIf you choose fixed server proxy mode, you can specify further options in 'ProxyServer' (Configure address or URL of proxy server) and 'Comma-separated list of proxy bypass rules'.\r\n\r\nIf you choose to use a .pac proxy script, you must specify the URL to the script in 'URL to a proxy .pac file'.\r\n\r\nFor detailed examples, go to https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nIf you enable this policy, Microsoft Edge will ignore all proxy-related options specified from the command line.\r\n\r\nIf you don't configure this policy users can choose their own proxy settings.\r\n\r\n* \"direct\" = Never use a proxy\r\n\r\n* \"auto_detect\" = Auto detect proxy settings\r\n\r\n* \"pac_script\" = Use a .pac proxy script\r\n\r\n* \"fixed_servers\" = Use fixed proxy servers\r\n\r\n* \"system\" = Use system proxy settings\r\n\r\nExample value: direct","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_1","displayName":"Enabled","description":null,"helpText":null}]},"02a0ca4ff163a4ae":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled","displayName":"Control the new behavior for event dispatching on disabled form controls (User)","description":"Event dispatching on disabled form controls is being changed in Edge to improve compatibility with other browsers and to improve the developer experience.\r\n\r\nWith this change, MouseEvents get dispatched on disabled form control elements. Exceptions for this behavior are click, mouseup, and mousedown. Some examples of the new events are mousemove, mouseenter, and mouseleave.\r\n\r\nThis change also truncates the event path of click, mouseup, and mousedown when they’re dispatched on children of disabled form controls. These events aren’t dispatched on the disabled form control or any of its ancestors.\r\n\r\nNote: This new behavior might break some websites.\r\n\r\nIf this policy is enabled or left not set, the new behavior will be used.\r\n\r\nIf this policy is disabled, the old behavior will be used.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"020ad83b9e0005b9":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride","displayName":"Prevent bypassing Edge Website Typo Protection prompts for sites (User)","description":"This policy setting lets you decide whether users can override the Edge Website Typo Protection warnings about potential typosquatting websites.\r\n\r\nIf you enable this setting, users can't ignore Edge Website Typo Protection warnings and they are blocked from continuing to the site.\r\n\r\nIf you disable or don't configure this setting, users can ignore Edge Website Typo Protection warnings and continue to the site.\r\n\r\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_1","displayName":"Enabled","description":null,"helpText":null}]},"0298af92ab2f10d1":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_sleepingtabsblockedforurlsdesc","displayName":"Block Sleeping Tabs on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":null},"02fe10d30f43ef0b":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow insecure websites to make requests to more-private network endpoints (User)","description":"Controls whether insecure websites are allowed to make requests to more-private network endpoints.\r\n\r\nThis policy relates to the CORS-RFC1918 specification. See https://wicg.github.io/cors-rfc1918 for more details.\r\n\r\nA network endpoint is more private than another if:\r\n1) Its IP address is localhost and the other is not.\r\n2) Its IP address is private and the other is public.\r\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\r\n\r\nA website is deemed secure if it meets the definition of a secure context in https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts. Otherwise, it will be treated as an insecure context.\r\n\r\nWhen this policy is either not set or set to false, the default behavior for requests from insecure contexts to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests feature, which may be set by a field trial or on the command line.\r\n\r\nWhen this policy is set to true, insecure websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.","helpText":"","infoUrls":[],"categoryId":"43057320-7058-46d5-86f9-a56c80bbf8b9","categoryName":"Private Network Request Settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"02a251786f256123":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled","displayName":"In-app support Enabled (User)","description":"Microsoft Edge uses the in-app support feature (enabled by default) to allow users to contact our support agents directly from the browser. Also, by default, users can't disable (turn off) the in-app support feature.\r\n\r\nIf you enable this policy or don't configure it, users can invoke in-app support.\r\n\r\nIf you disable this policy, users can't invoke in-app support.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"028181c20c2ac8d2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_checkouttolocaldisk","displayName":"Check-out to local disk (User)","description":"This policy turns on the check-out to local disk feature.\r\n\r\nIf you enable this policy setting, documents that are checked-out will be stored in the Local Drafts folder on the local disk.\r\n\r\nIf you disable or do not configure this policy setting, documents that are checked out will be checked-out on SharePoint and no local copy will be created.","helpText":"","infoUrls":[],"categoryId":"2d6891a4-ee83-4e55-8e23-09513e1306e4","categoryName":"Microsoft Office Document Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_checkouttolocaldisk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_checkouttolocaldisk_1","displayName":"Enabled","description":null,"helpText":null}]},"02d02fdc54e84ebd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_defaultformatforpublish","displayName":"Default format for 'Publish' (User)","description":"\"Web Archive (*.mht)\": The Publish command creates a Web Archive file. | \"Web Page (*.htm)\": The Publish command creates an HTML file. | \"Default\": The Publish command uses the default Web page format for publishing.","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_defaultformatforpublish_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_defaultformatforpublish_1","displayName":"Enabled","description":null,"helpText":null}]},"020a49c325228370":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_numberofdaysbeforewarningthatserveris","displayName":"Number of days before warning that server is inaccessible (User)","description":"Set the number of days until OneNote warns that the server is inaccessible and prompts for a new location for the affected files.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_numberofdaysbeforewarningthatserveris_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_numberofdaysbeforewarningthatserveris_1","displayName":"Enabled","description":null,"helpText":null}]},"02dfefe8a1280aa9":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm","displayName":"Specify CNG random number generator algorithm (User)","description":"This policy setting allows you to configure the CNG random number generator to use.\r\n\r\nIf you enable this policy setting, the random number generator specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default random number generator will be used.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"020327a71bf68647":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_l_urladdressofassociatedwebpage46","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"0260840ab30347fa":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"023164b2a6abbdae":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setsensitivity","displayName":"Set sensitivity: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setsensitivity_0","displayName":"Normal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setsensitivity_1","displayName":"Personal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setsensitivity_2","displayName":"Private","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setsensitivity_3","displayName":"Confidential","description":null,"helpText":null}]},"02e6adde16a1e7ec":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_l_empty29","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_l_empty29_0","displayName":"Load only Outlook Controls","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_l_empty29_1","displayName":"Allows only Safe Controls","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_l_empty29_2","displayName":"Allows all ActiveX Controls","description":null,"helpText":null}]},"02e9d409fa807c04":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_runinfipscompliantmode","displayName":"Run in FIPS compliant mode (User)","description":"This policy setting controls whether Outlook is required to use FIPS-compliant algorithms when signing and encrypting messages. Outlook can run in a mode that complies with Federal Information Processing Standards (FIPS), a set of standards published by the National Institute of Standards and Technology (NIST) for use by non-military United States government agencies and by government contractors.\r\n\r\nIf you enable this policy setting, Outlook runs in a mode that complies with the FIPS 140-1 standard for cryptographic modules. This mode requires the use of the SHA-1 algorithm for signing and 3DES for encryption.\r\n\r\nIf you disable or do not configure this policy setting, Outlook does not run in FIPS-compliant mode. Organizations that do business with the United States government but do not run Outlook in FIPS-compliant mode risk violating the U.S. government's rules regarding the handling of sensitive information.\r\n\r\nFor more information about FIPS, see FIPS - General Information at http://www.itl.nist.gov/fipspubs/geninfo.htm","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_runinfipscompliantmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_runinfipscompliantmode_1","displayName":"Enabled","description":null,"helpText":null}]},"02e0534c1f06da10":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula_v2_l_oomformula_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula_v2_l_oomformula_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula_v2_l_oomformula_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula_v2_l_oomformula_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula_v2_l_oomformula_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"021290eb4e1c3fef":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosmacros","displayName":"Developer tab | Macros (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosmacros_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosmacros_1","displayName":"True","description":null,"helpText":null}]},"029e9af3271cd6ee":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacroswd","displayName":"Developer tab | Code | Macros (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacroswd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacroswd_1","displayName":"True","description":null,"helpText":null}]},"027eae9b0b5fd72c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable specific shortcut key combinations in the specified applications. \r\n\r\nIf you enable this policy setting you can disable specific shortcut keys for the selected application. The predefined list of shortcut keys you can disable becomes available to you when you enable this policy setting. \r\n\r\nIf you disable or do not configure this policy setting, the predefined list of shortcut keys are enabled for the application.","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_1","displayName":"Enabled","description":null,"helpText":null}]},"020d02680ebe5d03":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_spaces","displayName":"Spaces (User)","description":"Determines whether the symbol used to represent spaces is shown on the screen.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_spaces_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_spaces_1","displayName":"Enabled","description":null,"helpText":null}]},"026f36a97914f706":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_capitalizenamesofdays","displayName":"Capitalize names of days (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e95db55a-8337-416d-a61f-e60f55cc0d13","categoryName":"AutoCorrect","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_capitalizenamesofdays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_capitalizenamesofdays_1","displayName":"Enabled","description":null,"helpText":null}]},"02e8bd394ce6c06d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06","displayName":"Trusted Location #6 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_1","displayName":"Enabled","description":null,"helpText":null}]},"0217fa6cad12044a":{"id":"vendor_msft_firewall_mdmstore_publicprofile_disableunicastresponsestomulticastbroadcast","displayName":"Disable Unicast Responses To Multicast Broadcast","description":"This value is used as an on/off switch. If it is true, unicast responses to multicast broadcast traffic is blocked. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_disableunicastresponsestomulticastbroadcast_false","displayName":"False","description":"Unicast Responses Not Blocked","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_disableunicastresponsestomulticastbroadcast_true","displayName":"True","description":"Unicast Responses Blocked","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/03.json b/public/intune-definitions/03.json new file mode 100644 index 000000000000..7d8ce2aef931 --- /dev/null +++ b/public/intune-definitions/03.json @@ -0,0 +1 @@ +{"03aa7ce3ca5a117b":{"id":"com.android.devicerestrictionpolicy.networkescapehatchallowed","displayName":"Allow network escape hatch","description":"If 'True', allows users to turn on the network escape hatch feature. If a network connection can't be made at boot time, the escape hatch prompts the user to temporarily connect to a network in order to refresh the device policy. After applying policy, the temporary network will be forgotten and the device will continue booting. This prevents being unable to connect to a network if there is no suitable network in the last policy and the device boots into an app in lock task mode, or the user is otherwise unable to reach device settings. If 'False', Intune doesn't change or update this setting. By default, the OS might prevent users from turning on the network escape hatch feature on the device. Available for fully managed and dedicated devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.networkescapehatchallowed_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.networkescapehatchallowed_false","displayName":"False","description":"false","helpText":null}]},"03f4054d5eea3004":{"id":"com.android.devicerestrictionpolicy.statusbarblocked","displayName":"Block access to status bar","description":"If 'True', prevents access to the status bar, including notifications and quick settings. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users access to the status bar. Available for fully managed and dedicated devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.statusbarblocked_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.statusbarblocked_false","displayName":"False","description":"false","helpText":null}]},"03697d0f972ded40":{"id":"com.apple.applicationaccess_allowaddinggamecenterfriends","displayName":"Allow Adding Game Center Friends","description":"If false, prohibits adding friends to Game Center. As of iOS 13, requires a supervised device. Available in iOS 4.2.1 and later, and macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowaddinggamecenterfriends_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowaddinggamecenterfriends_true","displayName":"True","description":null,"helpText":null}]},"03ef3468a357e888":{"id":"com.apple.applicationaccess_allowcloudkeychainsync","displayName":"Allow Cloud Keychain Sync","description":"If false, disables iCloud keychain synchronization. Requires a supervised device. Available in iOS 7 and later and macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudkeychainsync_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudkeychainsync_true","displayName":"True","description":null,"helpText":null}]},"03b26e1a4a285b27":{"id":"com.apple.directoryservice.managed_addomainadmingrouplistflag","displayName":"AD Domain Admin Group List Flag","description":"If true, enables the AD Domain Admin Group List key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_addomainadmingrouplistflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_addomainadmingrouplistflag_true","displayName":"True","description":null,"helpText":null}]},"03cb88cfcd060962":{"id":"com.apple.extensiblesso_urls","displayName":"URLs","description":"An array of URL prefixes of identity providers where the app extension performs SSO. Required for Redirect payloads. Ignored for Credential payloads. The URLs must begin with http:// or https://, the scheme and host name are matched case-insensitively, query parameters and URL fragments are not allowed, and the URLs of all installed Extensible SSO payloads must be unique.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"03bf66e455c8ac0b":{"id":"com.apple.managedclient.preferences_acknowledgeddatacollectionpolicy","displayName":"Automatically acknowledge data collection policy","description":"Suppress the Required Data Collection policy dialog from being shown to users.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-the-required-data-notice-dialog-for-microsoft-autoupdate"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_acknowledgeddatacollectionpolicy_0","displayName":"Acknowledge - send required data","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_acknowledgeddatacollectionpolicy_1","displayName":"Acknowledge - send required and optional data (Deprecated)","description":null,"helpText":null}]},"03b95255e2ffd860":{"id":"com.apple.managedclient.preferences_efficiencymode","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode becomes active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, efficiency mode is disabled by default and does not become active. Please note that Windows Energy Saver settings can influence when efficiency mode becomes active on all devices.\n\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy \"SleepingTabsBlockedForUrls\".\n\nSet this policy to 'AlwaysActive' and efficiency mode is always active.\n\nSet this policy to 'NeverActive' and efficiency mode never becomes active.\n\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode becomes active when the device is unplugged.\n\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode becomes active when the device is unplugged and the battery is low.\n\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes extra steps to save battery.\n\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes extra steps to save battery.\n\nIf the device does not have a battery, efficiency mode never becomes active in any mode other than 'AlwaysActive' unless the setting or \"EfficiencyModeEnabled\" policy is enabled.\n\nThis policy has no effect if the \"EfficiencyModeEnabled\" policy is disabled.\n\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\n\nLearn more about energy saver: https://learn.microsoft.com/en-us/windows-hardware/design/component-guidelines/energy-saver\n\nPolicy options mapping:\n\n* AlwaysActive (0) = Efficiency mode is always active\n\n* NeverActive (1) = Efficiency mode is never active\n\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\n\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\n\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes extra steps to save battery.\n\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes extra steps to save battery.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#efficiencymode"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_efficiencymode_4","displayName":"When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes extra steps to save battery.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_efficiencymode_5","displayName":"When the device is unplugged or unplugged and the battery is low, efficiency mode takes extra steps to save battery.","description":null,"helpText":null}]},"0377f6b4bd7286b6":{"id":"com.apple.managedclient.preferences_fileordirectorypickerwithoutgestureallowedfororigins","displayName":"Allow file or directory picker APIs to be called without prior user gesture","description":"For security reasons, the showOpenFilePicker(), showSaveFilePicker() and showDirectoryPicker() web APIs require a prior user gesture (\"transient activation\") to be called or will otherwise fail.\n\nIf you enable this policy, admins can specify origins on which these APIs can be called without prior user gesture.\n\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\n\nIf you disable or don't configure this policy, all origins will require a prior user gesture to call these APIs.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#fileordirectorypickerwithoutgestureallowedfororigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"036742162d019a51":{"id":"com.apple.managedclient.preferences_pictureinpictureoverlayenabled","displayName":"Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge","description":"This policy lets you configure the Picture in Picture floating overlay button in Microsoft Edge.\n\nThe Picture in Picture floating overlay button lets user to watch videos in a floating window on top of other windows.\n\nIf you enable or don't configure this policy, you can use the Picture in Picture floating overlay button in Microsoft Edge.\n\nIf you disable this policy, you can't use the Picture in Picture floating overlay button in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#pictureinpictureoverlayenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_pictureinpictureoverlayenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_pictureinpictureoverlayenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"03fe191cf3919934":{"id":"com.apple.servicemanagement_rules_item_comment","displayName":"Comment","description":"An optional description of the rule.","helpText":null,"infoUrls":[],"categoryId":"9859957e-34f1-4669-9f95-2b7c79fff052","categoryName":"Service Management - Managed Login Items","options":null},"03131f22573558ad":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled","displayName":"Save and fill memberships","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\n\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\n\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\n\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"03a033d8278e23e0":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_ignorelimitsonlan","displayName":"Ignore bandwidth limits if the source and the destination are on the same subnet.","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_ignorelimitsonlan_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_ignorelimitsonlan_1","displayName":"True","description":null,"helpText":null}]},"03820318661ec88d":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_nobackground3","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_nobackground3_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_nobackground3_1","displayName":"True","description":null,"helpText":null}]},"03cc6e3d6fa6fed2":{"id":"device_vendor_msft_policy_config_admx_logon_useoembackground","displayName":"Always use custom logon background","description":"This policy setting ignores Windows Logon Background.\r\n\r\nThis policy setting may be used to make Windows give preference to a custom logon background. \r\n\r\nIf you enable this policy setting, the logon screen always attempts to load a custom background instead of the Windows-branded logon background. \r\n\r\nIf you disable or do not configure this policy setting, Windows uses the default Windows logon background or custom background.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-useoembackground"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_useoembackground_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_useoembackground_1","displayName":"Enabled","description":null,"helpText":null}]},"03bc67db9b606a58":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allowdnssuffixsearch","displayName":"Use DNS name resolution when a single-label domain name is used, by appending different registered DNS suffixes, if the AllowSingleLabelDnsDomain setting is not enabled.","description":"This policy setting specifies whether the computers to which this setting is applied attemps DNS name resolution of single-lablel domain names, by appending different registered DNS suffixes, and uses NetBIOS name resolution only if DNS name resolution fails. This policy, including the specified default behavior, is not used if the AllowSingleLabelDnsDomain policy setting is enabled.\r\n\r\nBy default, when no setting is specified for this policy, the behavior is the same as explicitly enabling this policy, unless the AllowSingleLabelDnsDomain policy setting is enabled.\r\n\r\nIf you enable this policy setting, when the AllowSingleLabelDnsDomain policy is not enabled, computers to which this policy is applied, will locate a domain controller hosting an Active Directory domain specified with a single-label name, by appending different registered DNS suffixes to perform DNS name resolution. The single-label name is not used without appending DNS suffixes unless the computer is joined to a domain that has a single-label DNS name in the Active Directory forest. NetBIOS name resolution is performed on the single-label name only, in the event that DNS resolution fails.\r\n\r\nIf you disable this policy setting, when the AllowSingleLabelDnsDomain policy is not enabled, computers to which this policy is applied, will only use NetBIOS name resolution to attempt to locate a domain controller hosting an Active Directory domain specified with a single-label name. The computers will not attempt DNS name resolution in this case, unless the computer is searching for a domain with a single label DNS name to which this computer is joined, in the Active Directory forest.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-allowdnssuffixsearch"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allowdnssuffixsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allowdnssuffixsearch_1","displayName":"Enabled","description":null,"helpText":null}]},"03f52a8571c150e8":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_outputdirectory","displayName":"Transcript output directory","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":null},"03e30a8b67159a37":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablepersonalizationsettingsync_checkbox_useroverride","displayName":"Allow users to turn \"personalize\" syncing on.","description":null,"helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablepersonalizationsettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablepersonalizationsettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"03cb8093e08bc819":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_2","displayName":"Allow .rdp files from unknown publishers","description":"This policy setting allows you to specify whether users can run unsigned Remote Desktop Protocol (.rdp) files and .rdp files from unknown publishers on the client computer.\r\n\r\nIf you enable or do not configure this policy setting, users can run unsigned .rdp files and .rdp files from unknown publishers on the client computer. Before a user starts an RDP session, the user receives a warning message and is asked to confirm whether they want to connect.\r\n\r\nIf you disable this policy setting, users cannot run unsigned .rdp files and .rdp files from unknown publishers on the client computer. If the user tries to start an RDP session, the user receives a message that the publisher has been blocked.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-allow-unsigned-files-2"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_2_1","displayName":"Enabled","description":null,"helpText":null}]},"03efbdc2ce564ff9":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_disable_remote_desktop_wallpaper","displayName":"Enforce Removal of Remote Desktop Wallpaper","description":"Specifies whether desktop wallpaper is displayed to remote clients connecting via Remote Desktop Services.\r\n\r\nYou can use this setting to enforce the removal of wallpaper during a Remote Desktop Services session. By default, Windows XP Professional displays wallpaper to remote clients connecting through Remote Desktop, depending on the client configuration (see the Experience tab in the Remote Desktop Connection options for more information). Servers running Windows Server 2003 do not display wallpaper by default to Remote Desktop Services sessions.\r\n\r\nIf the status is set to Enabled, wallpaper never appears in a Remote Desktop Services session.\r\n\r\nIf the status is set to Disabled, wallpaper might appear in a Remote Desktop Services session, depending on the client configuration.\r\n\r\nIf the status is set to Not Configured, the default behavior applies.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-disable-remote-desktop-wallpaper"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_disable_remote_desktop_wallpaper_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_disable_remote_desktop_wallpaper_1","displayName":"Enabled","description":null,"helpText":null}]},"03d90f966f2b7492":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowscalculator","displayName":"Windows Calculator (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowscalculator_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowscalculator_1","displayName":"True","description":null,"helpText":null}]},"03c79b9401651576":{"id":"device_vendor_msft_policy_config_appvirtualization_allowpackagecleanup","displayName":"Enable automatic cleanup of unused appv packages","description":"Enables automatic cleanup of appv packages that were added after Windows10 anniversary release.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowpackagecleanup"],"categoryId":"f125d7cd-a333-4f24-a5f4-99fc289c6d22","categoryName":"Package Management","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowpackagecleanup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowpackagecleanup_1","displayName":"Enabled","description":null,"helpText":null}]},"030c69c203341d90":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting","description":"Setting the policy to BlockLocalFonts (value 2) automatically denies the local fonts permission to sites by default. This will limit the ability of sites to see information about local fonts.\r\n\r\nSetting the policy to AskLocalFonts (value 3) will prompt the user when the local fonts permission is requested by default. If users allow the permission, it will extend the ability of sites to see information about local fonts.\r\n\r\nLeaving the policy unset means the default behavior applies which is to prompt the user, but users can change this setting","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"03540d4153c9c7f5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices with the given vendor and product IDs.","description":"Setting the policy lets you list the URLs that specify which sites are automatically granted permission to access a HID device with the given vendor and product IDs. Each item in the list requires both devices and urls fields for the item to be valid, otherwise the item is ignored. Each item in the devices field must have a vendor_id and may have a product_id field. Omitting the product_id field will create a policy matching any device with the specified vendor ID. An item which has a product_id field without a vendor_id field is invalid and is ignored.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies, if it's set. If not, the user's personal setting applies.\r\n\r\nURLs in this policy shouldn't conflict with those configured through WebHidBlockedForUrls. If they do, this policy takes precedence over WebHidBlockedForUrls.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebHidAllowDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://google.com\",\r\n \"https://chromium.org\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"03cc2bbe9b3da370":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00","displayName":"Logon options","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"0349876e01d37fc2":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_exemptsmartscreendownloadwarnings","displayName":"Disable SmartScreen AppRep based warnings for specified file types on specified domains (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":null},"03d63caea93e8e2e":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin","displayName":"Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin_1","displayName":"Sign in and make domain account non-removable","description":null,"helpText":null}]},"039776c282c8b648":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload","displayName":"Require that the Enterprise Mode Site List is available before tab navigation (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload_1","displayName":"All eligible navigations","description":null,"helpText":null}]},"03fba4e49924231f":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport","displayName":"CORS non-wildcard request header support enabled","description":"This policy lets you configure support of CORS non-wildcard request headers.\r\n\r\nMicrosoft Edge version 97 introduces support for CORS non-wildcard request headers. When a script makes a cross-origin network request via fetch() and XMLHttpRequest with a script-added Authorization header, the header must be explicitly allowed by the Access-Control-Allow-Headers header in the CORS preflight response. \"Explicitly\" here means that the wild card symbol \"*\" doesn't cover the Authorization header. See https://go.microsoft.com/fwlink/?linkid=2180022 for more detail.\r\n\r\nIf you enable or don't configure the policy, Microsoft Edge will support the CORS non-wildcard request headers and behave as previously described.\r\n\r\nIf you disable this policy, Microsoft Edge will allow the wildcard symbol (\"*\") in the Access-Control-Allow-Headers header in the CORS preflight response to cover the Authorization header.\r\n\r\nThis policy is a temporary workaround for the new CORS non-wildcard request header feature. It's intended to be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport_1","displayName":"Enabled","description":null,"helpText":null}]},"031f802d4c2d3dec":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_forceallowtheseapps","displayName":"Let Apps Access Trusted Devices Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"0391a9a042a020b5":{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots","displayName":"Set Maximum Storage Duration For Recall Snapshots","description":"This policy setting allows you to control the maximum amount of time (in days) that Windows saves snapshots for Recall. The default value for this setting is '0' which doesn't set a time frame to delete snapshots. When the default is used, snapshots aren't deleted until the maximum storage allocation for Recall is reached and the oldest snapshots are deleted first. You can configure the maximum storage duration to be 30, 60, 90, or 180 days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragedurationforrecallsnapshots"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_0","displayName":"Let the OS define the maximum amount of time the snapshots will be saved","description":"Let the OS define the maximum amount of time the snapshots will be saved","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_30","displayName":"30 days","description":"30 days","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_60","displayName":"60 days","description":"60 days","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_90","displayName":"90 days","description":"90 days","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_180","displayName":"180 days","description":"180 days","helpText":null}]},"038f2983dc0d271b":{"id":"linux_mdatp_managed_antivirusengine_exclusions","displayName":"Scan exclusions","description":"Entities that have been excluded from the scan. Exclusions can be specified by full paths, extensions, or file names.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scan-exclusions"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"03c8ce9ceb4a006c":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngsaltlength","displayName":"Specify CNG salt length (User)","description":"This policy setting allows you to specific the number of bytes of salt that should be used.\r\n\r\nIf you enable this policy setting, the bytes specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default length or 16 will be used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngsaltlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngsaltlength_1","displayName":"Enabled","description":null,"helpText":null}]},"039a5aa7abcffb16":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders66","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders66_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders66_1","displayName":"True","description":null,"helpText":null}]},"034cc1a4b6ed7bae":{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentprogfornewuserinstartmenu","displayName":"Clear the recent programs list for new users (User)","description":"If you enable this policy setting, the recent programs list in the start menu will be blank for each new user.\r\n\r\nIf you disable or do not configure this policy, the start menu recent programs list will be pre-populated with programs for each new user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-clearrecentprogfornewuserinstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentprogfornewuserinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentprogfornewuserinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"03b44a69b4ddeeef":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow insecure websites to make requests to more-private network endpoints (User)","description":"Controls whether insecure websites are allowed to make requests to more-private network endpoints.\r\n\r\nThis policy relates to the Private Network Access specification. See https://wicg.github.io/private-network-access/ for more details.\r\n\r\nA network endpoint is more private than another if:\r\n1) Its IP address is localhost and the other is not.\r\n2) Its IP address is private and the other is public.\r\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\r\n\r\nA website is deemed secure if it meets the definition of a secure context in https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts. Otherwise, it will be treated as an insecure context.\r\n\r\nWhen this policy is either not set or set to false, the default behavior for requests from insecure contexts to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests feature, which may be set by a field trial or on the command line.\r\n\r\nWhen this policy is set to true, insecure websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"034cb615c41487c6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments (User)","description":"This feature allows for hyperlinks and address bar URL navigations to target specific text within a web page, which will be scrolled to once the loading of the web page is complete.\r\n\r\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via URL will be enabled.\r\n\r\nIf you disable this policy, web page scrolling to specific text fragments via URL will be disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"039f8198884d11bc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_2","displayName":"Do not allow any site to request access to USB devices via the WebUSB API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_3","displayName":"Allow sites to ask the user to grant access to a connected USB device","description":null,"helpText":null}]},"0315837b7ee7db56":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended","displayName":"Keep browsing data when creating enterprise profile by default (User)","description":"If this policy is Enabled, the option to keep any existing browsing data when creating an enterprise profile will be checked by default.\r\n\r\nIf this policy is unset or Disabled, the option to keep any existing browsing data when creating an enterprise profile will not be checked by default.\r\n\r\nRegardless of the value, the user will be able to decide whether or not to keep any existing browsing data when creating an enterprise profile.\r\n\r\nThis policy has no effect if the option to keep existing browsing data is not available; this happens if enterprise profile separation is strictly enforced, or if the data would be from an already managed profile.\r\n","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"030af71b86f2992a":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls","displayName":"Allow Window Management permission on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which will automatically grant the window management permission. This will extend the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultWindowManagementSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nThis replaces the deprecated WindowPlacementAllowedForUrls policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0354b3af20829b5d":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonxceloptionscustomizationcombinedpreviewwebpagepreview","displayName":"File tab | Options | Customize Ribbon | All Commands | Web Page Preview (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonxceloptionscustomizationcombinedpreviewwebpagepreview_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonxceloptionscustomizationcombinedpreviewwebpagepreview_1","displayName":"True","description":null,"helpText":null}]},"03d92b7390ba057c":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402","displayName":"XAML Files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_1","displayName":"Prompt","description":null,"helpText":null}]},"03d993cc5f68f26c":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles","displayName":"Show security warning for potentially unsafe files (User)","description":"This policy setting controls whether or not the \"Open File - Security Warning\" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example).\n\nIf you enable this policy setting and set the drop-down box to Enable, these files open without a security warning. If you set the drop-down box to Prompt, a security warning appears before the files open.\n\nIf you disable this policy setting, these files do not open.\n\nIf you do not configure this policy setting, the user can configure how the computer handles these files. By default, these files are blocked in the Restricted zone, enabled in the Intranet and Local Computer zones, and set to prompt in the Internet and Trusted zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneshowsecuritywarningforpotentiallyunsafefiles"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"031875c9ba239e62":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"030315c173ec1e69":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowscriptlets"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"03c139d713cd5d92":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled","displayName":"Enable search suggestions (User)","description":"Enables web search suggestions in Microsoft Edge's Address Bar and Auto-Suggest List and prevents users from changing this policy.\r\n\r\nIf you enable this policy, web search suggestions are used.\r\n\r\nIf you disable this policy, web search suggestions are never used, however local history and local favorites suggestions still appear. If you disable this policy, neither the typed characters, nor the URLs visited will be included in telemetry to Microsoft.\r\n\r\nIf this policy is left not set, search suggestions are enabled but the user can change that.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"03fa5d8d163fe07f":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed","displayName":"Allow single sign-on for Microsoft personal sites using this profile (User)","description":"'Allow single sign-on for Microsoft personal sites using this profile' option allows non-MSA profiles to be able to use single sign-on for Microsoft sites using MSA credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-MSA profiles only.\r\n\r\nIf you disable this policy, non-MSA profiles will not be able to use single sign-on for Microsoft sites using MSA credentials present on the machine.\r\n\r\nIf you enable this policy or don't configure it, users will be able to use the Settings option to ensure non-MSA profiles are able to use single sign-on for Microsoft sites using MSA credentials present on the machine provided only a single MSA account exists on the machine.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"03d9be71513a48be":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},"038e8893f1677655":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_webquerydialoghomepage","displayName":"Web Query dialog box home page (User)","description":"Specifies the default location of the home page for Web queries.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_webquerydialoghomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_webquerydialoghomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"03f42ad20894b1fc":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofbitstosamplewhenrecording_l_bits","displayName":"Bits: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":null},"03e08372b7836280":{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointbackgroundsyncintervalmultiplier_l_empty16","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":null},"039b56f65a35cf8b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend","displayName":"Configure Outlook object model prompt when sending mail (User) (Deprecated)","description":"This policy setting controls what happens when an untrusted program attempts to send e-mail programmatically using the Outlook object model. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to send e-mail programmatically using the Outlook object model: \r\n\r\n- Prompt user - The user will be prompted to approve every access attempt.\r\n- Automatically approve - Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended. \r\n- Automatically deny - Outlook will automatically deny programmatic access requests from any program. \r\n- Prompt user based on computer security. Outlook will only prompt users when antivirus software is out of date or not running. \r\n\r\nImportant: This policy setting only applies if the ''Outlook Security Mode'' policy setting under ''Microsoft Outlook 2016\\Security\\Security Form Settings'' is configured to ''Use Outlook Security Group Policy.''\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to send mail programmatically, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center. ","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_1","displayName":"Enabled","description":null,"helpText":null}]},"03d755b57b723276":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_l_datecolon17","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"03b1f0d437468d6f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},"03a07f31a8fbbaf5":{"id":"user_vendor_msft_policy_config_start_turnoffabbreviateddatetimeformat","displayName":"Turn Off Abbreviated Date Time Format (User)","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#turnoffabbreviateddatetimeformat"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_turnoffabbreviateddatetimeformat_0","displayName":"Show abbreviated time and date format","description":"Show abbreviated time and date format","helpText":null},{"id":"user_vendor_msft_policy_config_start_turnoffabbreviateddatetimeformat_1","displayName":"Show classic time and date format","description":"Show classic time and date format","helpText":null}]},"03e697e27461d0eb":{"id":"user_vendor_msft_policy_config_word16~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_skipopenduetolonglocalpath","displayName":"Skip Opening Local Files with Long Paths (User)","description":"This policy controls whether Word should skip opening local files with very long paths.\n\nIf you enable this policy, Word will not open local files that have very long paths. Only enable if local files with long paths are causing issues in your environment.\n\nIf you disable or do not configure this policy, Word will open local files with long paths.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_skipopenduetolonglocalpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_skipopenduetolonglocalpath_1","displayName":"Enabled","description":null,"helpText":null}]},"038e1e06527d1da5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_weboptions~l_browser_l_disablefeaturesnotsupportedbyspecifiedbrowsers","displayName":"Disable features not supported by specified browsers (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"56e510be-ca39-46a2-9eb2-6f1af6d4b16a","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_weboptions~l_browser_l_disablefeaturesnotsupportedbyspecifiedbrowsers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_weboptions~l_browser_l_disablefeaturesnotsupportedbyspecifiedbrowsers_1","displayName":"Enabled","description":null,"helpText":null}]},"03b1fa3638101ee5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_datecolon73","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"03568c638195f45f":{"id":"vendor_msft_personalization_companyname","displayName":"Company Name","description":"The name of the company to be displayed on the sign-in screen. This setting is currently available for boot to cloud shared pc mode only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Personalization-csp/"],"categoryId":"1dd655c9-a1f3-4780-befb-cab19922277d","categoryName":"Personalization","options":null},"03694d88f6044316":{"id":"vendor_msft_tenantlockdown_requirenetworkinoobe","displayName":"Require Network In OOBE (Device)","description":"true - Require network in OOBE, false - no network connection requirement in OOBE","helpText":null,"infoUrls":[],"categoryId":"c4ce54b8-e555-4447-9791-dd8e9dbb86b0","categoryName":"Tenant Lockdown","options":[{"id":"vendor_msft_tenantlockdown_requirenetworkinoobe_true","displayName":"true","description":null,"helpText":null},{"id":"vendor_msft_tenantlockdown_requirenetworkinoobe_false","displayName":"false","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/04.json b/public/intune-definitions/04.json new file mode 100644 index 000000000000..47cceb21949c --- /dev/null +++ b/public/intune-definitions/04.json @@ -0,0 +1 @@ +{"04c3455fb8c29ccf":{"id":"com.apple.assetcache.managed_parents","displayName":"Parents","description":"An array of the local IP addresses of other content caches that this cache should download from or upload to, instead of downloading from or uploading to Apple directly. Invalid addresses and addresses of computers that aren't content caches are ignored. Parent caches that become unavailable are skipped. If all parent content caches become unavailable, the content cache downloads from or uploads to Apple directly, until a parent content cache becomes available again.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"04b50a0b9e718a5e":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_allowed","displayName":"Allowed","description":"If `true`, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.\n\n> Note:\n> Every payload needs to include either `Authorization` or `Allowed`, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_allowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_allowed_true","displayName":"Allowed","description":null,"helpText":null}]},"047d37bc5fbd0582":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata","displayName":"System Policy App Data","description":"Specifies the policies for the app to access the data of other apps.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"042cd94606af15e5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled","description":"This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigation to HTTPS.\n\nIf this setting isn't set or is set to Allowed, users are able to enable HTTPS-Only Mode.\nIf this setting is set to Disallowed, HTTPS-Only Mode will be disabled.\nIf this setting is set to Force Enabled, HTTPS-Only Mode is enabled in Strict mode.\nIf this setting is set to Force Balance Enabled, HTTPS-Only Mode is enabled in Balanced mode.\n\nThe settings Force Enabled and Force Enabled can be recommended to users. HTTPS-Only Mode will be set to Strict or Balanced initially, but users are allowed to change it.\n\nIf you set this policy to a value that isn't supported by the version of Microsoft Edge that receives the policy, Microsoft Edge defaults to the Allowed setting.\n\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\n\nPolicy options mapping:\n\n* allowed (allowed) = Don't restrict users' HTTPS-Only Mode setting\n\n* disallowed (disallowed) = Disable HTTPS-Only Mode\n\n* force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode\n\n* force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_allowed","displayName":"Don't restrict users' HTTPS-Only Mode setting","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_disallowed","displayName":"Disable HTTPS-Only Mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode in Strict mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_force_balanced_enabled","displayName":"Force enable HTTPS-Only Mode in Balanced Mode","description":null,"helpText":null}]},"04be44735dc30ba3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwaysuseoscapture","displayName":"Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs","description":"Configure this policy to control whether Microsoft Edge will use the \"OS capture engine\" or the \"Browser capture engine\" when capturing browser windows in the same process using the screen-share APIs.\n\nYou should configure this policy if you want to capture the contents of Internet Explorer mode tabs. However, enabling this policy may negatively impact performance when capturing browser windows in the same process.\n\nThis policy only affects window capture, not tab capture. The contents of Internet Explorer mode tabs won't be captured when you choose to capture only a single tab, even if you configure this policy.\n\nIf you enable this policy, Microsoft Edge always uses the OS capture engine for window capture. Internet Explorer mode tabs will have their contents captured.\n\nIf you disable or don't configure this policy, Microsoft Edge uses the Browser capture engine for browser windows in the same process. Internet Explorer mode tabs in these windows won't have their contents captured.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2174004","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwaysuseoscapture_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwaysuseoscapture_true","displayName":"Enabled","description":null,"helpText":null}]},"04d3d1737df92d3f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\n\nLeaving the policy unset means that sites won't be considered for an override at this scope of capture.\n\nIf a site matches a URL pattern in this policy, the following policies won't be considered: \"TabCaptureAllowedByOrigins\", \"WindowCaptureAllowedByOrigins\", \"ScreenCaptureAllowedByOrigins\", \"ScreenCaptureAllowed\".\n\nFor detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.","helpText":null,"infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"04c291b93073ad79":{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_enableprofilemanager","displayName":"Enable Profile Manager","description":"Enable profile lifetime mangement for shared or communal device scenarios.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/AccountManagement-csp/"],"categoryId":"3b384fc5-5906-4dc4-bc48-a52b52fb054b","categoryName":"Account Management","options":[{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_enableprofilemanager_false","displayName":"False","description":"False","helpText":null},{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_enableprofilemanager_true","displayName":"True","description":"True","helpText":null}]},"04e08de5a112eb41":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osallowdra_name","displayName":"Allow data recovery agent","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osallowdra_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osallowdra_name_1","displayName":"True","description":null,"helpText":null}]},"04fe9993d2fcc98e":{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday","displayName":"Schedule Security Intelligence Update Day","description":"This setting allows you to specify the day of the week on which to check for security intelligence updates. By default, this setting is configured to never check for security intelligence updates.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_0","displayName":"Daily","description":"Daily","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_1","displayName":"Sunday","description":"Sunday","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_2","displayName":"Monday","description":"Monday","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_3","displayName":"Tuesday","description":"Tuesday","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_4","displayName":"Wednesday","description":"Wednesday","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_5","displayName":"Thursday","description":"Thursday","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_6","displayName":"Friday","description":"Friday","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_7","displayName":"Saturday","description":"Saturday","helpText":null},{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdateday_8","displayName":"Never","description":"Never","helpText":null}]},"0431589c50de086e":{"id":"device_vendor_msft_policy_config_activexcontrols_approvedinstallationsites","displayName":"Approved Installation Sites for ActiveX Controls","description":"This policy setting determines which ActiveX installation sites standard users in your organization can use to install ActiveX controls on their computers. When this setting is enabled, the administrator can create a list of approved Activex Install sites specified by host URL. \n\nIf you enable this setting, the administrator can create a list of approved ActiveX Install sites specified by host URL. \n \nIf you disable or do not configure this policy setting, ActiveX controls prompt the user for administrative credentials before installation. \n\nNote: Wild card characters cannot be used when specifying the host URLs.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-activexcontrols#activexcontrols-approvedinstallationsites"],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_activexcontrols_approvedinstallationsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_activexcontrols_approvedinstallationsites_1","displayName":"Enabled","description":null,"helpText":null}]},"048e713a90e8d60c":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_enable","displayName":"Enable disk quotas","description":"This policy setting turns on and turns off disk quota management on all NTFS volumes of the computer, and prevents users from changing the setting.\r\n\r\nIf you enable this policy setting, disk quota management is turned on, and users cannot turn it off.\r\n\r\nIf you disable the policy setting, disk quota management is turned off, and users cannot turn it on.\r\n\r\nIf this policy setting is not configured, disk quota management is turned off by default, but administrators can turn it on.\r\n\r\nTo prevent users from changing the setting while a setting is in effect, the system disables the \"Enable quota management\" option on the Quota tab of NTFS volumes.\r\n\r\nNote: This policy setting turns on disk quota management but does not establish or enforce a particular disk quota limit. To specify a disk quota limit, use the \"Default quota limit and warning level\" policy setting. Otherwise, the system uses the physical space on the volume as the quota limit.\r\n\r\nNote: To turn on or turn off disk quota management without specifying a setting, in My Computer, right-click the name of an NTFS volume, click Properties, click the Quota tab, and then click \"Enable quota management.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-diskquota#admx-diskquota-dq-enable"],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":[{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_enable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_enable_1","displayName":"Enabled","description":null,"helpText":null}]},"0406147e3932cbcb":{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation","displayName":"Selectively allow the evaluation of a symbolic link","description":"Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links:\r\n\r\nLocal Link to a Local Target\r\nLocal Link to a Remote Target\r\nRemote Link to Remote Target\r\nRemote Link to Local Target\r\n\r\nFor further information please refer to the Windows Help section\r\n\r\nNOTE: If this policy is Disabled or Not Configured, local administrators may select the types of symbolic links to be evaluated.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filesys#admx-filesys-symlinkevaluation"],"categoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","categoryName":"Filesystem","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_1","displayName":"Enabled","description":null,"helpText":null}]},"0436243b58674b69":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_quarantine_purgeitemsafterdelay","displayName":"Configure removal of items from Quarantine folder","description":"This policy setting defines the number of days items should be kept in the Quarantine folder before being removed.\r\n\r\n If you enable this setting, items will be removed from the Quarantine folder after the number of days specified.\r\n\r\n If you disable or do not configure this setting, items will be kept in the quarantine folder indefinitely and will not be automatically removed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-quarantine-purgeitemsafterdelay"],"categoryId":"a004deb8-6f52-4411-8d94-41563a8203fc","categoryName":"Quarantine","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_quarantine_purgeitemsafterdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_quarantine_purgeitemsafterdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"04533b5e077e90c6":{"id":"device_vendor_msft_policy_config_admx_power_diskdcpowerdowntimeout_2_enterdiskdcpowerdowntimeout","displayName":"Turn Off the Hard Disk (seconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"91c02e14-8848-485d-8844-b9933fa888ec","categoryName":"Hard Disk Settings","options":null},"049e39bfcc6b1ea2":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowsterminal","displayName":"Windows Terminal (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowsterminal_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowsterminal_1","displayName":"True","description":null,"helpText":null}]},"04b16928fd693bd0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting","displayName":"Default sensors setting","description":"Setting the policy to 1 lets websites access and use sensors such as motion and light. Setting the policy to 2 denies acess to sensors.\r\n\r\nLeaving it unset means AllowSensors applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"044d27b93c1a83b4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_extensioninstallforcelistdesc","displayName":"Extension/App IDs and update URLs to be silently installed (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"044aa4362d01605a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings.","description":"Setting the policy to Enabled means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Safe Browsing's download protection service won't check downloads hosted on these domains. Its password protection service won't check for password reuse.\r\n\r\nLeaving the policy unset means default Safe Browsing protection applies to all resources.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"04b3dfa4462ea9a6":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby","displayName":"DO Restrict Peer Selection By","description":"Specifies to restrict peer selection using the selected method, in addition to the DownloadMode policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dorestrictpeerselectionby"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_0","displayName":"None","description":"None","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_1","displayName":"Subnet mask","description":"Subnet mask","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_2","displayName":"Local discovery (DNS-SD)","description":"Local discovery (DNS-SD)","helpText":null}]},"0475d2116ab80d28":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl","displayName":"Attached VHD SDDL","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSDDL string representing the ACLs to use when attaching the VHD.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\AttachVHDSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_1","displayName":"Enabled","description":null,"helpText":null}]},"047c43a800cadee2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype","displayName":"Profile Type","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nControls whether the VHD(x) file should be accessed directly, if a difference disk should be used, and if Read/Write or Read Only access should be used. The default value is Normal Profile.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ProfileType\r\nType: DWORD\r\nValues: 0 = Normal direct-access profile, 1= Read-write profile, 2 = Read-only profile, 3 = Try for read-write profile and fallback to read-only","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_1","displayName":"Enabled","description":null,"helpText":null}]},"0479d66b71714a58":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"0465534ff4aa4f83":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally","displayName":"Always open PDF files externally","description":"Disables the internal PDF viewer in Microsoft Edge.\r\n\r\nIf you enable this policy Microsoft Edge treats PDF files as downloads and lets users open them with the default application.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will open PDF files (unless the user disables it).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_1","displayName":"Enabled","description":null,"helpText":null}]},"04b5a47c613a4a73":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled","displayName":"Configure Edge Scareware Blocker Protection","description":"This policy setting allows administrators to control whether Microsoft Edge enables the Scareware Blocker, an AI-powered feature that provides warning messages to help protect users from potential tech scams.\r\n\r\nIf this policy is enabled, Edge Scareware Blocker will warn users of potential tech scams.\r\n\r\nIf this policy is disabled, Edge Scareware Blocker will not warn users of potential tech scams.\r\n\r\nIf this policy is not configured, Edge Scareware Blocker will not warn users of potential tech scams, but users can choose warnings in settings.\r\n\r\nBy configuring this policy, administrators determine whether users receive proactive scam warnings or must manually enable them.","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"04cc77dacd096a48":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions","description":"Allows you to set whether users can add exceptions to allow mixed content for specific sites.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'InsecureContentAllowedForUrls' (Allow insecure content on specified sites) and 'InsecureContentBlockedForUrls' (Block insecure content on specified sites) policies.\r\n\r\nIf this policy isn't set, users will be allowed to add exceptions to allow blockable mixed content and disable autoupgrades for optionally blockable mixed content.\r\n\r\n* 2 = Do not allow any site to load blockable mixed content\r\n\r\n* 3 = Allow users to add exceptions to allow blockable mixed content","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"04d807229d45761a":{"id":"device_vendor_msft_policy_config_remoteprocedurecall_rpcendpointmapperclientauthentication","displayName":"Enable RPC Endpoint Mapper Client Authentication","description":"This policy setting controls whether RPC clients authenticate with the Endpoint Mapper Service when the call they are making contains authentication information. The Endpoint Mapper Service on computers running Windows NT4 (all service packs) cannot process authentication information supplied in this manner. \n\nIf you disable this policy setting, RPC clients will not authenticate to the Endpoint Mapper Service, but they will be able to communicate with the Endpoint Mapper Service on Windows NT4 Server.\n\nIf you enable this policy setting, RPC clients will authenticate to the Endpoint Mapper Service for calls that contain authentication information. Clients making such calls will not be able to communicate with the Windows NT4 Server Endpoint Mapper Service.\n\nIf you do not configure this policy setting, it remains disabled. RPC clients will not authenticate to the Endpoint Mapper Service, but they will be able to communicate with the Windows NT4 Server Endpoint Mapper Service.\n\nNote: This policy will not be applied until the system is rebooted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteprocedurecall#remoteprocedurecall-rpcendpointmapperclientauthentication"],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":[{"id":"device_vendor_msft_policy_config_remoteprocedurecall_rpcendpointmapperclientauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_rpcendpointmapperclientauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},"04fa38e81664061c":{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy","displayName":"Choose the boot-start drivers that can be initialized:","description":"","helpText":"","infoUrls":[],"categoryId":"f3027ba5-9a2f-42c6-9872-ec21f726929c","categoryName":"Early Launch Antimalware","options":[{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_8","displayName":"Good only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_1","displayName":"Good and unknown","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_3","displayName":"Good, unknown and bad but critical","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_7","displayName":"All","description":null,"helpText":null}]},"0436d94831c3f0c7":{"id":"device_vendor_msft_policy_config_userrights_replaceprocessleveltoken","displayName":"Replace Process Level Token","description":"This security setting determines which user accounts can call the CreateProcessAsUser() application programming interface (API) so that one service can start another. An example of a process that uses this user right is Task Scheduler. For information about Task Scheduler, see Task Scheduler overview.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#replaceprocessleveltoken"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"0428107576c4f18e":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_arguments_restrictargumentlist","displayName":"Argument List","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"042c5687e897c0ef":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_certificatepayloadwithreusablesetting","displayName":"Certificate","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"04bb9c927b06d836":{"id":"enrollment_autopilot_dpp_allowdiagnostics","displayName":"Show link to diagnostics","description":"","helpText":"A link will be displayed for users to collect diagnostic logs if deployment fails.","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_allowdiagnostics_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_allowdiagnostics_1","displayName":"Yes","description":null,"helpText":null}]},"040a2b60e88ddfbb":{"id":"settings_item_accessibilitysettings_increasecontrastenabled","displayName":"Increase Contrast Enabled","description":"If 'true', enables increase contrast.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_increasecontrastenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_increasecontrastenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0448532e7cf29a6c":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_1","displayName":"Remove \"Work offline\" command (User)","description":"This policy setting removes the \"Work offline\" command from Explorer, preventing users from manually changing whether Offline Files is in online mode or offline mode.\r\n\r\nIf you enable this policy setting, the \"Work offline\" command is not displayed in File Explorer.\r\n\r\nIf you disable or do not configure this policy setting, the \"Work offline\" command is displayed in File Explorer.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-workofflinedisabled-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_1_1","displayName":"Enabled","description":null,"helpText":null}]},"042ba8ae04c5c871":{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1_accessrights_reboottime_seconds","displayName":"Time (in seconds): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":null},"04c0df58ea1868bf":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2013","displayName":"Microsoft Office 365 Project 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Project 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Project 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365project2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2013_1","displayName":"Enabled","description":null,"helpText":null}]},"04a66663424aacc6":{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders","displayName":"Specify Work Folders settings (User)","description":"This policy setting specifies the Work Folders server for affected users, as well as whether or not users are allowed to change settings when setting up Work Folders on a domain-joined computer.\r\n\r\nIf you enable this policy setting, affected users receive Work Folders settings when they sign in to a domain-joined PC. If this policy setting is disabled or not configured, no Work Folders settings are specified for the affected users, though users can manually set up Work Folders by using the Work Folders Control Panel item.\r\n\r\nThe \"Work Folders URL\" can specify either the URL used by the organization for Work Folders discovery, or the specific URL of the file server that stores the affected users' data.\r\n\r\nThe \"Work Folders Local Path\" specifies the local folder used on the client machine to sync files. This path may contain environment variables. Note: In order for this configuration to take effect, a valid 'Work Folders URL' must also be specified.\r\n \r\nThe “On-demand file access preference” option controls whether to enable on-demand file access. When enabled, the user controls which files in Work Folders are available offline on a given PC. The rest of the files in Work Folders are always visible and don’t take up any space on the PC, but the user must be connected to the Internet to access them.\r\n\r\nIf you enable this policy setting, on-demand file access is enabled.\r\nIf you disable this policy setting, on-demand file access is disabled, and enough storage space to store all the user’s files is required on each of their PCs.\r\nIf you specify User choice or do not configure this policy setting, the user decides whether to enable on-demand file access. However, if the Force automatic setup policy setting is enabled, Work Folders is set up automatically with on-demand file access enabled.\r\n\r\nThe \"Force automatic setup\" option specifies that Work Folders should be set up automatically without prompting users. This prevents users from choosing not to use Work Folders on the computer; it also prevents them from manually specifying the local folder in which Work Folders stores files. By default, Work Folders is stored in the \"%USERPROFILE%\\Work Folders\" folder. If this option is not specified, users must use the Work Folders Control Panel item on their computers to set up Work Folders.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-workfoldersclient#admx-workfoldersclient-pol-userenableworkfolders"],"categoryId":"87667b72-85ce-48c2-8023-e6db7f5fe739","categoryName":"Work Folders","options":[{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"04a67ce248f6e8de":{"id":"user_vendor_msft_policy_config_browser_configurefavoritesbar","displayName":"Configure Favorites Bar (User)","description":"The favorites bar shows your user's links to sites they have added to it. With this policy, you can specify whether to set the favorites bar to always be visible or hidden on any page. If enabled, favorites bar is always visible on any page, and the favorites bar toggle in Settings sets to On, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings. The show bar/hide bar option is hidden from the context menu. If disabled, the favorites bar is hidden, and the favorites bar toggle resets to Off, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings. If not configured, the favorites bar is hidden but is visible on the Start and New Tab pages, and the favorites bar toggle in Settings sets to Off but is enabled allowing the user to make changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurefavoritesbar"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_configurefavoritesbar_0","displayName":"Disabled","description":"Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurefavoritesbar_1","displayName":"Enabled","description":"Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.","helpText":null}]},"046ded33c3014eb2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended","displayName":"Default search provider icon (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderIconURL specifies the default search provider's favorite icon URL.\r\n\r\nLeaving DefaultSearchProviderIconURL unset means there's no icon for the search provider.\r\n\r\nExample value: https://search.my.company/favicon.ico","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"04334513faa7862a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked","displayName":"Allow Chrome to block navigations toward external protocols in sandboxed iframes (User)","description":"Chrome will block navigations toward external protocols inside\r\nsandboxed iframe. See https://chromestatus.com/features/5680742077038592.\r\n\r\nWhen True, this lets Chrome blocks those navigations.\r\n\r\nWhen False, this prevents Chrome from blocking those navigations.\r\n\r\nThis defaults to True: security feature enabled.\r\n\r\nThis can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Google Chrome version 104.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked_1","displayName":"Enabled","description":null,"helpText":null}]},"042cc1ec141224d6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_userdatadir","displayName":"Set user data directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"04e1d4d320e0481f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode","displayName":"Choose how to specify proxy server settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_0","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_1","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_2","displayName":"Manually specify proxy settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_3","displayName":"Use system proxy settings","description":null,"helpText":null}]},"044e67c4f82ebced":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins","displayName":"Allow Desktop, Window, and Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can use Desktop, Window, and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: WindowCaptureAllowedByOrigins, TabCaptureAllowedByOrigins, SameOriginTabCaptureAllowedByOrigins.\r\n\r\nIf a site matches a URL pattern in this policy, the ScreenCaptureAllowed will not be considered.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"04bb194dcfc4b525":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting","displayName":"Default Window Placement permission setting (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"041d9652dbe0223c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacros","displayName":"Developer tab | Code | Macros (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacros_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacros_1","displayName":"True","description":null,"helpText":null}]},"047e1cdf0a4d8ea3":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation","displayName":"Stop checking for table header accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables have a header row specified.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables have a header row specified.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for header rows and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"0418f3cf3d23db2e":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate","displayName":"Locked-Down Internet (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"0484d990956175e3":{"id":"user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard","displayName":"Prevent running First Run wizard (User)","description":"This policy setting prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows.\n\nIf you enable this policy setting, you must make one of the following choices:\n • Skip the First Run wizard, and go directly to the user's home page.\n • Skip the First Run wizard, and go directly to the \"Welcome to Internet Explorer\" webpage.\n\nStarting with Windows 8, the \"Welcome to Internet Explorer\" webpage is not available. The user's home page will display regardless of which option is chosen.\n\nIf you disable or do not configure this policy setting, Internet Explorer may run the First Run wizard the first time the browser is started after installation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablefirstrunwizard"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_1","displayName":"Enabled","description":null,"helpText":null}]},"04cb4a890714b7d0":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended","displayName":"Sites to open when the browser starts (User)","description":"Specify a list of websites to open automatically when the browser starts. If you don't configure this policy, no site is opened on startup.\r\n\r\nThis policy only works if you also set the 'RestoreOnStartup' (Action to take on startup) policy to 'Open a list of URLs' (4).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\nhttps://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"04699a6af684cc79":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_configurekeyboardshortcuts","displayName":"Configure the list of commands for which to disable keyboard shortcuts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"04f0941e150135ee":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed","displayName":"Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode (User)","description":"This policy controls whether MHT or MHTML files that are downloaded from the web are automatically opened in Internet Explorer mode.\r\n\r\nIf you enable this policy, the MHT or MHTML files that are downloaded from the web can be opened in both Microsoft Edge and Internet Explorer mode to provide the best user experience.\r\n\r\nIf you disable or don't configure this policy, MHT or MHTML files that are downloaded from the web won't automatically open in Internet Explorer mode.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"04f8f6b71128eacb":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc","displayName":"Block Window Management permission on specified sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"04d079347b909fd6":{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge_sharebrowsinghistorywithcopilotsearchallowed","displayName":"Allow sharing tenant-approved browsing history with Microsoft 365 Copilot Search (User)","description":"This policy controls whether browsing history in Microsoft Edge is shared with Microsoft 365 Copilot Search to provide more relevant search results. Only tenant-approved, work-related sites are shared.\r\n\r\nThis feature is available only to users who are signed in to Microsoft Edge with an Entra ID account and have an eligible Microsoft 365 Copilot license.\r\n\r\nIf you enable or don't configure this policy, browsing history will be shared with Microsoft 365 Copilot Search by default, and users can turn off sharing using the toggle in Microsoft Edge settings.\r\n\r\nIf you disable this policy, browsing history won't be shared with Microsoft 365 Copilot Search.\r\n\r\nLearn more about how Copilot uses data and consent at https://go.microsoft.com/fwlink/?linkid=2333202","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge_sharebrowsinghistorywithcopilotsearchallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge_sharebrowsinghistorywithcopilotsearchallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"045e42eb1df5a724":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_savecookiesonexitdesc","displayName":"Save cookies when Microsoft Edge closes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"04dfd25e793e176e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_permanentlydeleteolditems","displayName":"Permanently delete old items (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_permanentlydeleteolditems_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_permanentlydeleteolditems_1","displayName":"True","description":null,"helpText":null}]},"04647d5526dfbaea":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_turnoffwordwheel","displayName":"Do not display search results as the user types (User)","description":"By default, search results are displayed as the user types a search query. This functionality (known as WordWheeling) can be turned off by enabling this setting.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_turnoffwordwheel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_turnoffwordwheel_1","displayName":"Enabled","description":null,"helpText":null}]},"04b570108db70053":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjmoveafterenter","displayName":"Move selection after enter (User)","description":"Automatically selects the field below the current field after the user presses the ENTER key.\r\n \r\nIf you enable this setting, the field below the current field is selected after the user presses the ENTER key.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"d33133b4-77df-429a-9580-ed70f7da676d","categoryName":"Edit options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjmoveafterenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjmoveafterenter_1","displayName":"Enabled","description":null,"helpText":null}]},"0454bc04f3d99fa8":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_l_datecolon37","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"04c0c2bcb363272f":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity","displayName":"Developer tab | Code | Macro Security (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity_1","displayName":"True","description":null,"helpText":null}]},"0444c4602ac85fed":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"04090f8f394071b7":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":null},"0455ef439adb9b70":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},"04f12563625248af":{"id":"vendor_msft_sharedpc_setpowerpolicies","displayName":"Set Power Policies","description":"Set a list of power policies. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_setpowerpolicies_false","displayName":"false","description":"Not configured","helpText":null},{"id":"vendor_msft_sharedpc_setpowerpolicies_true","displayName":"true","description":"Enabled","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/05.json b/public/intune-definitions/05.json new file mode 100644 index 000000000000..b97a9f7c587a --- /dev/null +++ b/public/intune-definitions/05.json @@ -0,0 +1 @@ +{"052962d1dc569b88":{"id":"com.android.devicerestrictionpolicy.cellularblockwifitethering","displayName":"Block tethering and access to hotspots","description":"If 'True', prevents tethering and access to portable hotspots. If 'False', Intune doesn't change or update this setting. By default, the OS might allow tethering and access to portable hotspots. Available for fully managed, dedicated and corporate-owned work profile devices. ","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.cellularblockwifitethering_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.cellularblockwifitethering_false","displayName":"False","description":"false","helpText":null}]},"05839256f6081425":{"id":"com.android.devicerestrictionpolicy.mobilenetworksconfigblocked","displayName":"Block configuring mobile networks","description":"If 'True', the device is prevented from configuring mobile network settings. If 'False', Intune doesn't change or update this setting. By default, the OS might allow mobile network configuration. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.mobilenetworksconfigblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.mobilenetworksconfigblocked_true","displayName":"True","description":"True","helpText":null}]},"051cc026063eda9d":{"id":"com.apple.airplay_passwords_item_devicename","displayName":"Device Name","description":"The name of the AirPlay destination; used in iOS.","helpText":null,"infoUrls":[],"categoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","categoryName":"AirPlay","options":null},"05d3359f28bd197d":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_end","displayName":"End","description":"The curfew end time, in the format %d:%d:%d.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"0513b509f09a099b":{"id":"com.apple.finder_showremovablemediaondesktop","displayName":"Show Removable Media On Desktop","description":"If false, removable media can not appear on the desktop.","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":[{"id":"com.apple.finder_showremovablemediaondesktop_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.finder_showremovablemediaondesktop_true","displayName":"True","description":null,"helpText":null}]},"0518dac68955816d":{"id":"com.apple.loginwindow_showotherusers_managed","displayName":"Show Other Users Managed","description":"If true, displays Other... when showing a list of users.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_showotherusers_managed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_showotherusers_managed_true","displayName":"True","description":null,"helpText":null}]},"05a74a325df5a8cc":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"05fa9ebe8ba61d09":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_lcid","displayName":"Microsoft Remote Desktop LCID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"051dfd7175dd7035":{"id":"com.apple.mcx.filevault2_showrecoverykey","displayName":"Show Recovery Key","description":"If false, prevents display of the personal recovery key to the user after FileVault is enabled.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":[{"id":"com.apple.mcx.filevault2_showrecoverykey_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_showrecoverykey_true","displayName":"Enabled","description":null,"helpText":null}]},"05b8cad1facc0032":{"id":"com.apple.servicemanagement_rules_item_teamidentifier","displayName":"Team Identifier","description":"An additional constraint to limit the scope of the rule that is tested after matching the Rule Type and Rule Value.","helpText":null,"infoUrls":[],"categoryId":"9859957e-34f1-4669-9f95-2b7c79fff052","categoryName":"Service Management - Managed Login Items","options":null},"057d5c61c8a805ef":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"0507c8001eafb8e9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page","description":"Control if users can turn on Developer Mode on edge://extensions.\n\nIf the policy isn't set, users can turn on developer mode on the extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\nIf the policy is set to Allow (0), users can turn on developer mode on the extensions page.\nIf the policy is set to Disallow (1), users can't turn on developer mode on the extensions page.\n\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.\n\nPolicy options mapping:\n\n* Allow (0) = Allow the usage of developer mode on extensions page\n\n* Disallow (1) = Do not allow the usage of developer mode on extensions page\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensiondevelopermodesettings_allow","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensiondevelopermodesettings_disallow","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},"0534be7d122e712a":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_2","displayName":"Do not throttle additional data","description":"This policy setting determines whether Windows Error Reporting (WER) sends additional, second-level report data even if a CAB file containing data about the same event types has already been uploaded to the server.\r\n\r\nIf you enable this policy setting, WER does not throttle data; that is, WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report.\r\n\r\nIf you disable or do not configure this policy setting, WER throttles data by default; that is, WER does not upload more than one CAB file for a report that contains data about the same event types.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypassdatathrottling-2"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_2_1","displayName":"Enabled","description":null,"helpText":null}]},"05194f4c4192db0e":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_5_channel_log_filelogaccess","displayName":"Log Access","description":null,"helpText":"","infoUrls":[],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":null},"057581087fd71d90":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disableioavprotection","displayName":"Scan all downloaded files and attachments","description":"This policy setting allows you to configure scanning for all downloaded files and attachments.\r\n\r\n If you enable or do not configure this setting, scanning for all downloaded files and attachments will be enabled.\r\n\r\n If you disable this setting, scanning for all downloaded files and attachments will be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-disableioavprotection"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disableioavprotection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disableioavprotection_1","displayName":"Enabled","description":null,"helpText":null}]},"05ec422f125eedc7":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftsolitairecollection","displayName":"Microsoft Solitaire Collection","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftsolitairecollection_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftsolitairecollection_1","displayName":"True","description":null,"helpText":null}]},"05ca241188f049d9":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts","displayName":"Allow Web Authentication requests on sites with broken TLS certificates.","description":"If set to Enabled, Google Chrome will\r\nallow Web Authentication requests on websites that have TLS certificates with\r\nerrors (i.e. websites considered not secure).\r\n\r\nIf the policy is set to Disabled or left unset, the default behavior of\r\nblocking such requests will apply.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts_1","displayName":"Enabled","description":null,"helpText":null}]},"056a9a37d31a38e9":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domindisksizeallowedtopeer","displayName":"DO Min Disk Size Allowed To Peer","description":"Specifies the required minimum total disk size in GB for the device to use P2P.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domindisksizeallowedtopeer"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"056e1dba713fe9d1":{"id":"device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity","displayName":"Enable Virtualization Based Security","description":"Turns On Virtualization Based Security(VBS)","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#enablevirtualizationbasedsecurity"],"categoryId":"992a8a1e-428e-41cb-948e-4e5da86105fa","categoryName":"Device Guard","options":[{"id":"device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity_0","displayName":"disable virtualization based security.","description":"disable virtualization based security.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity_1","displayName":"enable virtualization based security.","description":"enable virtualization based security.","helpText":null}]},"054d2d1d1b910433":{"id":"device_vendor_msft_policy_config_devicelock_passwordcomplexity","displayName":"Password Complexity","description":"Password must meet complexity requirements This security setting determines whether passwords must meet complexity requirements. If this policy is enabled, passwords must meet the following minimum requirements: Not contain the user's account name or parts of the user's full name that exceed two consecutive characters Be at least six characters in length Contain characters from three of the following four categories: English uppercase characters (A through Z) English lowercase characters (a through z) Base 10 digits (0 through 9) Non-alphabetic characters (for example, !, $, #, %) Complexity requirements are enforced when passwords are changed or created.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#passwordcomplexity"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"058e87bda382e071":{"id":"device_vendor_msft_policy_config_experience_allowdevicediscovery","displayName":"Allow Device Discovery","description":"Allows users to turn on/off device discovery UX. When set to 0 , the projection pane is disabled. The Win+P and Win+K shortcut keys will not work on. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowdevicediscovery"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowdevicediscovery_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowdevicediscovery_1","displayName":"Allow","description":"Enabled.","helpText":null}]},"05e334d835870c54":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register","description":"This setting specifies the number of healthy CCD Locations required to allow a sign in. If using the default setting, users will always be allowed to sign in, even if no CCD Locations are available.\r\n\r\nIf a user signs in with no available CCD Locations, FSLogix assumes that one or more CCD Locations will become available prior to the user signing out. If a CCD Locations does not become available during the time of the user session, then the user is prevented from signing out (discussed in Healthy Provider Required For Unregister).\r\n\r\nIf it is desired to block a user from signing in and a minimum number of CCD Locations are not available, the Healthy Providers Required For Register may be set to the number of CCD Locations required for a sign in.\r\n\r\nIf the minimum number of CCD Locations required for registration aren't available, then the sign in will fail. When setting Healthy Providers Required For Register to anything other than 0, then Prevent Login With Failure and/or Preven tLogin With Temp Profile should be used in order to create the desired user experience.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\HealthyProvidersRequiredForRegister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_1","displayName":"Enabled","description":null,"helpText":null}]},"05103f72f327070a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs","displayName":"Size In MBs","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecify the size for auto-created VHD(x) files.\r\n\r\nNOTE: Default is 30,000 (30GB) which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SizeInMBs\r\nType: DWORD\r\nValues: Min = 500, Max = 1000000","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},"057d63ac04c0653d":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid","displayName":"Allow software to run or install even if the signature is invalid","description":"This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file.\n\nIf you enable this policy setting, users will be prompted to install or run files with an invalid signature.\n\nIf you disable this policy setting, users cannot run or install files with an invalid signature.\n\nIf you do not configure this policy, users can choose to run or install files with an invalid signature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsoftwarewhensignatureisinvalid"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_1","displayName":"Enabled","description":null,"helpText":null}]},"05ae980bb100879d":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowlessprivilegedsites"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"05e4c522f5b37aaa":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression","displayName":"Configure SIP compression mode","description":"\r\nDefines when to turn on SIP compression. Default: Based on adaptor speed.\r\n\r\nSetting this policy may cause an increase in sign-in time.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1","displayName":"Enabled","description":null,"helpText":null}]},"05b4d7a09424de0d":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar","displayName":"Show Microsoft Office shortcut in favorites bar","description":"Specifies whether to include a shortcut to Office.com in the favorites bar. For users signed into Microsoft Edge the shortcut takes users to their Microsoft Office apps and docs.\r\n\r\nIf this policy is enabled or not configure, users can choose whether to see the shortcut by changing the toggle in the favorites bar context menu.\r\n\r\nIf the policy is disabled, the shortcut won't be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_1","displayName":"Enabled","description":null,"helpText":null}]},"055a275e58e0df4c":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken","displayName":"Microsoft Edge management enrollment token","description":"Microsoft Edge management service in Microsoft 365 Admin Center lets you set policy and manage users through a Microsoft Edge focused cloud-based management experience. This policy lets you specify an enrollment token that's used to register with Microsoft Edge management service and deploy the associated policies. The user must be signed into Microsoft Edge with a valid work or school account otherwise Microsoft Edge will not download the policy.\r\n\r\nIf you enable this policy, Microsoft Edge will attempt to use the specified enrollment token to register with the Microsoft Edge management service and download the published policy.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not attempt to connect to the Microsoft Edge management service.\r\n\r\nExample value: RgAAAACBbzoQDmUrRfq3WeKUoFeEBwBOqK2QPYsBT5V3lQFoKND-AAAAAAEVAAAOqK2QPYvBT5V4lQFoKMD-AAADTXvzAAAA0","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},"054c09fb579cb0bd":{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist","displayName":"Control which apps cannot be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that cannot be opened in sidebar.\r\n\r\nIf you don't configure this policy, a user can open any app in sidebar.\r\n\r\nIf the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy is disabled, this list isn't used and no sidebar can be opened.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nNote: A blocklist value of '*' means all apps are blocked unless they are explicitly listed in the 'EdgeSidebarAppUrlHostAllowList' (Allow specific apps to be opened in Microsoft Edge sidebar) policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"0572327d5786a1ba":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls","displayName":"Configure tracking prevention exceptions for specific sites","description":"Configure the list of URL patterns that are excluded from tracking prevention.\r\n\r\nIf you configure this policy, the list of configured URL patterns is excluded from tracking prevention.\r\n\r\nIf you don't configure this policy, the global default value from the \"Block tracking of users' web-browsing activity\" policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"05acf139f27556af":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_defaultsearchproviderkeyword","displayName":"Default search provider keyword (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"058f1894fad20d59":{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseiprange","displayName":"Enterprise IP Range","description":"Sets the enterprise IP ranges that define the computers in the enterprise network. Data that comes from those computers will be considered part of the enterprise and protected. These locations will be considered a safe destination for enterprise data to be shared to. This is a comma-separated list of IPv4 and IPv6 ranges.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseiprange"],"categoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","categoryName":"Network Isolation","options":null},"05fbd8c1a3a0ecc4":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_grooveexe42","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_grooveexe42_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_grooveexe42_1","displayName":"True","description":null,"helpText":null}]},"05e6857efe4cb3f9":{"id":"device_vendor_msft_policy_config_printers_publishprinters","displayName":"Allow printers to be published","description":"Determines whether the computer's shared printers can be published in Active Directory.\n\n If you enable this setting or do not configure it, users can use the \"List in directory\" option in the Printer's Properties' Sharing tab to publish shared printers in Active Directory.\n\n If you disable this setting, this computer's shared printers cannot be published in Active Directory, and the \"List in directory\" option is not available.\n\n Note: This settings takes priority over the setting \"Automatically publish new printers in the Active Directory\".","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-publishprinters"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_publishprinters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_publishprinters_1","displayName":"Enabled","description":null,"helpText":null}]},"05686d85b9dbe7d5":{"id":"device_vendor_msft_policy_config_privacy_disableprivacyexperience","displayName":"Disable Privacy Experience","description":"Enabling this policy prevents the privacy experience from launching during user logon for new and upgraded users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#disableprivacyexperience"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_disableprivacyexperience_0","displayName":"Disabled","description":"Allow the 'choose privacy settings for your device' screen for a new user during their first logon or when an existing user logs in for the first time after an upgrade.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_disableprivacyexperience_1","displayName":"Enabled","description":"Do not allow the 'choose privacy settings for your device' screen when a new user logs in or an existing user logs in for the first time after an upgrade.","helpText":null}]},"057a844f7b10af78":{"id":"linux_platformupdatecontrols_schedule_endtime","displayName":"Platform Update Window End Time","description":"Specifies the end of the allowed time window for platform updates (24-hour clock). Select 'All Day' for no restriction. Use together with start time to define an update window.","helpText":null,"infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":[{"id":"linux_platformupdatecontrols_schedule_endtime_every","displayName":"All Day","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_0","displayName":"00:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_1","displayName":"01:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_2","displayName":"02:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_3","displayName":"03:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_4","displayName":"04:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_5","displayName":"05:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_6","displayName":"06:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_7","displayName":"07:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_8","displayName":"08:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_9","displayName":"09:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_10","displayName":"10:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_11","displayName":"11:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_12","displayName":"12:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_13","displayName":"13:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_14","displayName":"14:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_15","displayName":"15:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_16","displayName":"16:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_17","displayName":"17:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_18","displayName":"18:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_19","displayName":"19:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_20","displayName":"20:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_21","displayName":"21:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_22","displayName":"22:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_endtime_23","displayName":"23:00","description":null,"helpText":null}]},"0517c089cf2a38b3":{"id":"settings_item_appanalytics","displayName":"App Analytics","description":"A dictionary that contains settings for sharing app analytics. This setting is available only for Shared iPad in iOS 9.3.2 and later.","helpText":null,"infoUrls":[],"categoryId":"5f71c40e-01aa-42d2-9c8c-7d560126cd4b","categoryName":"App Analytics","options":null},"052a4ff64581b6d2":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_1","displayName":"Turn off AutoComplete integration with Input Panel (User)","description":"Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is available.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, application auto complete lists will never appear next to Input Panel. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, application auto complete lists will appear next to Input Panel in applications where the functionality is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, application auto complete lists will appear next to Input Panel in applications where the functionality is available. Users will be able to configure this setting on the Text completion tab in Input Panel Options.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-autocomplete-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_1_1","displayName":"Enabled","description":null,"helpText":null}]},"055fcb4fb87fa576":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_1","displayName":"Prevent Input Panel tab from appearing (User)","description":"Prevents Input Panel tab from appearing on the edge of the Tablet PC screen.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel tab will not appear on the edge of the Tablet PC screen. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel tab will appear on the edge of the Tablet PC screen. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel tab will appear on the edge of the Tablet PC screen. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n\r\nCaution: If you enable both the “Prevent Input Panel from appearing next to text entry areas” policy and the “Prevent Input Panel tab from appearing” policy, and disable the “Show Input Panel taskbar icon” policy, the user will then have no way to access Input Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-edgetarget-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_1_1","displayName":"Enabled","description":null,"helpText":null}]},"0532e455201ab8cc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename","displayName":"Enterprise web store name (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_1","displayName":"Enabled","description":null,"helpText":null}]},"0518e32bba6a44a7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of capture.\r\n\r\nNote that windowed Chrome Apps with the same origin as this site will still be allowed to be captured.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: TabCaptureAllowedByOrigins, WindowCaptureAllowedByOrigins, ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"05864ea420a74189":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions","displayName":"Actions to run when the computer is idle (User)","description":"List of actions to run when the timeout from the IdleTimeout policy is reached.\r\n\r\nWarning: Setting this policy can impact and permanently remove local personal data. It is recommended to test your settings before deploying to prevent accidental deletion of personal data.\r\n\r\nIf the IdleTimeout policy is unset, this policy has no effect.\r\n\r\nWhen the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\r\n\r\nIf this policy is empty or left unset, the IdleTimeout policy has no effect.\r\n\r\nSupported actions are:\r\n\r\n'close_browsers': close all browser windows and PWAs for this profile. Not supported on Android and iOS.\r\n\r\n'close_tabs': close all open tabs in open windows. Only supported on iOS.\r\n\r\n'show_profile_picker': show the Profile Picker window. Not supported on Android and iOS.\r\n\r\n'sign_out': Signs out the current signed in user. Only supported on iOS.\r\n\r\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings', 'clear_hosted_app_data': clear the corresponding browsing data. See the ClearBrowsingDataOnExitList policy for more details. The types supported on iOS are 'clear_browsing_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', and 'clear_autofill'\r\n\r\n'reload_pages': reload all webpages. For some pages, the user may be prompted for confirmation first. Not supported on iOS.\r\n\r\nThe user will stay signed into their Google account when deleting cookies using 'clear_cookies_and_other_site_data'.\r\n\r\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' will disable sync for the respective data types if neither `Chrome Sync` is disabled by setting the SyncDisabled policy nor BrowserSignin is disabled.\r\n\r\nExample value:\r\n\r\nclose_browsers\r\nshow_profile_picker","helpText":"","infoUrls":[],"categoryId":"8c35f124-e249-43e3-9044-ecc0b0a5855a","categoryName":"Idle Browser Actions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_1","displayName":"Enabled","description":null,"helpText":null}]},"058df7e9213ab7c9":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"0597be9beb73bb16":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls","displayName":"Allow pop-up windows on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can open pop-up windows.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPopupsSetting' (Default pop-up window setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"050cca3e71092a4b":{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled (User)","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\r\n\r\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"05f469d98fc17e31":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_relaunchwindow","displayName":"Relaunch time window (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"051bad967b503baf":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice","displayName":"Configure Writing Assistance installation and startup (User)","description":"This policy setting controls whether Writing Assistance is not installed, installed without launching automatically at startup and locked off, installed without launching automatically at startup but still user-controllable, installed and allowed to launch automatically at startup and locked on, or installed with startup on by default but still user-controllable.\n\nIf you enable this policy setting, choose one of the following options:\n- Not installed: Writing Assistance is removed and should not appear in Start.\n- Installed, don't launch at startup: Writing Assistance remains installed, but automatic startup launches are blocked and users cannot turn startup back on.\n- Installed, don't launch at startup by default (users can enable): Writing Assistance remains installed, automatic startup launches are off by default, and users can turn startup on later.\n- Installed, launch at startup: Writing Assistance remains installed, automatic startup launches are allowed, and users cannot turn startup off.\n- Installed, launch at startup by default (users can disable): Writing Assistance remains installed, automatic startup launches are on by default, and users can turn startup off later.\n\nIf you disable or don't configure this policy setting, Writing Assistance follows its default install and startup behavior, and users can control startup themselves.\n\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for Enterprise.\n ","helpText":"","infoUrls":[],"categoryId":"05a6f86f-dab7-4888-97a1-db3457f00974","categoryName":"Writing Assistance","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_1","displayName":"Enabled","description":null,"helpText":null}]},"05f58f545b92eb9b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontainingalink_l_onlycontainingalink357","displayName":"Only containing a link (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":null},"051eb875808a6574":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_l_workflowfriendly486","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"05c4e9d3218714f0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendfeedback","displayName":"Send Office Feedback (User)","description":"This policy setting manages the Office Feedback Tool (a.k.a. Send a Smile). The Office Feedback Tool allows users to provide Microsoft feedback regarding their positive and negative experiences when using Office.\r\n\r\nIf you enable this policy setting, the Office Feedback Tool will be turned on in all Office applications in which the tool is available. They can access the tool through the Smile button located in the top right corner of the Office application.\r\n\r\nIf you disable this policy setting, the Office Feedback Tool will be turned off. Users will not see the Smile button in any of the Office applications in which the tool is available.\r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to \"Enabled\".","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendfeedback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendfeedback_1","displayName":"Enabled","description":null,"helpText":null}]},"05c4df4964a46bed":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_md5","displayName":"MD5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null}]},"05e5cdaae69f5c5e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc01_l_pathcolon01","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"058f3bdcefc788d4":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_defaultrootdir","displayName":"Set the default location for the OneDrive folder (User)","description":"This setting lets you set a specific path as the default location of the OneDrive folder on users' computers. By default, the path is under %userprofile%.\r\n\r\nIf you enable this setting, the default location of the OneDrive - {organization name} folder will be the path that you specify in the OneDrive.admx file. To prevent users from changing the location you specify, enable the \"Prevent users from changing the location of their OneDrive folder\" setting.\r\n\r\nIf you disable or do not configure this setting, the default location of the OneDrive - {organization name} folder will be in %userprofile%.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_defaultrootdir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_defaultrootdir_1","displayName":"Enabled","description":null,"helpText":null}]},"05b7b99a3c6ce23f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_savecalendarconflicts","displayName":"Save calendar sync conflicts (User)","description":"This policy setting allows you to save calendar sync conflicts.\r\n\r\nIf you enable this policy setting, Outlook will save calendar sync conflicts.\r\n\r\nIf you disable or do not configure this policy setting, calendar sync conflicts are not saved by default.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_savecalendarconflicts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_savecalendarconflicts_1","displayName":"Enabled","description":null,"helpText":null}]},"051696b7c0d5fade":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy_v2_l_removedextensions25","displayName":"Removed Extensions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":null},"056ebc607a1e98ca":{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_outlookoptions_l_specifymaxgroupssupported","displayName":"Maximum Groups Supported (User)","description":"This policy setting controls the maximum number of groups that are accessible through the Navigation Pane in Outlook for Windows.\r\n\r\nIf you enable this policy setting, only the number of groups set in the Groups Count will be shown in the Navigation Pane. \r\n\r\nIf you don’t enable this policy setting, the maximum number of groups displayed defaults to 1000.\r\n ","helpText":"","infoUrls":[],"categoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","categoryName":"Outlook Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_outlookoptions_l_specifymaxgroupssupported_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_outlookoptions_l_specifymaxgroupssupported_1","displayName":"Enabled","description":null,"helpText":null}]},"0521e0090e6e9222":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_datecolon21","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"050fc3344182677f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_mrutemplatelistlength_l_mrutemplatelistlength39","displayName":"Most Recently Used Template List Length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":null},"0545f5ef18bc23b9":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjcache_l_cachelocation_l_cachelocation37","displayName":"Local Project Cache Location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e13ec567-e29c-4ca0-b599-e8c43587f10a","categoryName":"Tools | Local Project Cache","options":null},"05bf728a57595eca":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm","displayName":"Specify CNG hash algorithm (User)","description":"This policy setting allows you to specify the hash algorithm used.\r\n\r\nIf you enable this policy setting, the hashing algorithm selected will be used by CNG.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG hash algorithm will be used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"05982befbc4e9615":{"id":"vendor_msft_firewall_mdmstore_privateprofile_logmaxfilesize","displayName":"Log Max File Size","description":"This value specifies the size, in kilobytes, of the log file where dropped packets and successful connections are logged. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured, otherwise the MdmStore value wins if it is configured, otherwise the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/06.json b/public/intune-definitions/06.json new file mode 100644 index 000000000000..b37108545d96 --- /dev/null +++ b/public/intune-definitions/06.json @@ -0,0 +1 @@ +{"06193898ef133d22":{"id":"com.android.devicerestrictionpolicy.securityallowdebuggingfeaturesaosp","displayName":"Allow users to turn on debugging features","description":"If 'True', permits users to access the debugging features on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might prevent users from using the debugging features on the device.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.securityallowdebuggingfeaturesaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.securityallowdebuggingfeaturesaosp_true","displayName":"True","description":"True","helpText":null}]},"0669dbd91d14fe3c":{"id":"com.apple.applicationaccess_allowdefinitionlookup","displayName":"Allow Definition Lookup (Deprecated)","description":"If false, disables definition lookup. Requires a supervised device on iOS. Available in iOS 8.1.3 and later and macOS 10.11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowdefinitionlookup_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowdefinitionlookup_true","displayName":"True","description":null,"helpText":null}]},"064914be49feff99":{"id":"com.apple.applicationaccess_allowstartupdiskmodification","displayName":"Allow Startup Disk Modification","description":"If 'false', prevents modification of Startup Disk setting in System Settings.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowstartupdiskmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowstartupdiskmodification_true","displayName":"True","description":null,"helpText":null}]},"0682c059c015ce37":{"id":"com.apple.assetcache.managed_peerfilterranges_item_last","displayName":"Last","description":"The last IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"067ce837124a1a53":{"id":"com.apple.managedclient.preferences_kfmsilentoptinwithnotification","displayName":"Display a notification to users once their folders have been redirected","description":"Display a notification to users once their folders have been redirected","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#kfmsilentoptin"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_kfmsilentoptinwithnotification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_kfmsilentoptinwithnotification_true","displayName":"True","description":null,"helpText":null}]},"065fcb8687163ef3":{"id":"com.apple.managedclient.preferences_smartscreendnsrequestsenabled","displayName":"Enable Microsoft Defender SmartScreen DNS requests","description":"This policy lets you configure whether to enable DNS requests made by Microsoft Defender SmartScreen. Note: Disabling DNS requests will prevent Microsoft Defender SmartScreen from getting IP addresses, and potentially impact the IP-based protections provided.\n\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen will make DNS requests.\n\nIf you disable this setting, Microsoft Defender SmartScreen will not make any DNS requests.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#smartscreendnsrequestsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_smartscreendnsrequestsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_smartscreendnsrequestsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0687891c4c152c8f":{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents","displayName":"Apple Events","description":"Specifies the policies for the app sending restricted AppleEvents to another process.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"0648f56d2ef3793a":{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"06e714c9e2f45d44":{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"066fcca4a693057b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault","displayName":"Configure Automatic HTTPS (Obsolete)","description":"This policy lets you manage settings for \"AutomaticHttpsDefault\", which switches connections from HTTP to HTTPS.\n\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\n\nMicrosoft Edge attempts to upgrade some navigations from HTTP to HTTPS, when possible. This policy can be used to disable this behavior. If set to \"AlwaysUpgrade\" or left unset, this feature is enabled by default.\n\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\n\nThis policy is obsolete, and is replaced with the policy \"HttpsUpgradesEnabled\".\n\nPolicy options mapping:\n\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\n\n* UpgradeCapableDomains (1) = (Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\n\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_disableautomatichttps","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_upgradecapabledomains","displayName":"(Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_alwaysupgrade","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},"06afe9908cdaacd6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it's replaced with real image thumbnail data. This policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nSpecify Bing's Image Search URL Post Params as:\n'imageBin={google:imageThumbnailBase64}'.\n\nSpecify Google's Image Search URL Post Params as:\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\n\nIf you don't set this policy, image search requests are sent using the GET method.\n\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy can't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"069224842dcbde2c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_recommended","displayName":"Show Hubs Sidebar (users can override)","description":"The Sidebar is a launcher bar located on the right side of Microsoft Edge.\n\nIf you enable this policy, the Sidebar is always visible.\n\nIf you disable this policy, the Sidebar is never shown.\n\nIf you don't configure this policy, the Sidebar's visibility follows the user's Microsoft Edge settings.\n\nAs of Microsoft Edge version 141, the \"Microsoft365CopilotChatIconEnabled\" policy is the only means of controlling the display of Copilot in the toolbar.\n\nNote: The recommended version of this policy-also known as the \"Default Settings (users can override)\" policy-is obsolete. This policy has never supported the recommended capability.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"06e7addec45687f4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu","displayName":"Enables Microsoft Edge mini menu","description":"Enables the Microsoft Edge mini menu on websites and PDFs. The mini menu appears when users select text and provides basic actions like Copy and smart actions such as Definitions.\n\nIf you enable or don't configure this policy, selecting text on websites or PDFs shows the mini menu.\n\nIf you disable this policy, the mini menu doesn't appear when users select text on websites or PDFs.\n\nNote: Starting in Microsoft Edge for Mac version 143, this policy is obsolete because the mini menu feature is removed on Mac.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu_true","displayName":"Enabled","description":null,"helpText":null}]},"06321afa33eb28d2":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrequireactivedirectorybackup_name","displayName":"Do not enable BitLocker until recovery information is stored to AD DS for operating system drives","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrequireactivedirectorybackup_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrequireactivedirectorybackup_name_1","displayName":"True","description":null,"helpText":null}]},"061f31aead62e84b":{"id":"device_vendor_msft_defender_configuration_dataduplicationdirectory","displayName":"Data Duplication Directory","description":"Define data duplication directory for device control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"06225911b6c8e0b9":{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckexemptionlist","displayName":"Define Activation Security Check exemptions","description":"Allows you to view and change a list of DCOM server application ids (appids) which are exempted from the DCOM Activation security check. DCOM uses two such lists, one configured via Group Policy through this policy setting, and the other via the actions of local computer administrators. DCOM ignores the second list when this policy setting is configured, unless the \"Allow local activation security check exemptions\" policy is enabled.\r\n\r\nDCOM server appids added to this policy must be listed in curly-brace format. For example: {b5dcb061-cefb-42e0-a1be-e6a6438133fe}. If you enter a non-existent or improperly formatted appid DCOM will add it to the list without checking for errors.\r\n\r\nIf you enable this policy setting, you can view and change the list of DCOM activation security check exemptions defined by Group Policy settings. If you add an appid to this list and set its value to 1, DCOM will not enforce the Activation security check for that DCOM server. If you add an appid to this list and set its value to 0 DCOM will always enforce the Activation security check for that DCOM server regardless of local settings.\r\n\r\nIf you disable this policy setting, the appid exemption list defined by Group Policy is deleted, and the one defined by local computer administrators is used.\r\n\r\nIf you do not configure this policy setting, the appid exemption list defined by local computer administrators is used.\r\n\r\nNotes:\r\n\r\nThe DCOM Activation security check is done after a DCOM server process is started, but before an object activation request is dispatched to the server process. This access check is done against the DCOM server's custom launch permission security descriptor if it exists, or otherwise against the configured defaults.\r\n\r\nIf the DCOM server's custom launch permission contains explicit DENY entries this may mean that object activations that would have previously succeeded for such specified users, once the DCOM server process was up and running, might now fail instead. The proper action in this situation is to re-configure the DCOM server's custom launch permission settings for correct security settings, but this policy setting may be used in the short-term as an application compatibility deployment aid.\r\n\r\nDCOM servers added to this exemption list are only exempted if their custom launch permissions do not contain specific LocalLaunch, RemoteLaunch, LocalActivate, or RemoteActivate grant or deny entries for any users or groups. Also note, exemptions for DCOM Server Appids added to this list will apply to both 32-bit and 64-bit versions of the server if present.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dcom#admx-dcom-dcomactivationsecuritycheckexemptionlist"],"categoryId":"a57b27b6-48e0-42b2-812a-2be86c113a0c","categoryName":"Application Compatibility Settings","options":[{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckexemptionlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckexemptionlist_1","displayName":"Enabled","description":null,"helpText":null}]},"065a9727ac511a32":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_4","displayName":"Configure log access","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You must set both \"configure log access\" policy settings for this log in order to affect the both modern and legacy tools.\r\n\r\nIf you enable this policy setting, only users whose security descriptor matches the configured value can access the log.\r\n\r\nIf you disable or do not configure this policy setting, only system software and administrators can write or clear this log, and any authenticated user can read events from it.\r\n\r\nNote: If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the \"Configure log access (legacy)\" policy setting to enforce this change across all tools and APIs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-4"],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_4_1","displayName":"Enabled","description":null,"helpText":null}]},"069123f255cd9731":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_nobackground8","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_nobackground8_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_nobackground8_1","displayName":"True","description":null,"helpText":null}]},"06f812a3659b3708":{"id":"device_vendor_msft_policy_config_admx_leakdiagnostic_wdiscenarioexecutionpolicy","displayName":"Configure Scenario Execution Level","description":"This policy setting determines whether Diagnostic Policy Service (DPS) diagnoses memory leak problems.\r\n\r\nIf you enable or do not configure this policy setting, the DPS enables Windows Memory Leak Diagnosis by default.\r\n\r\nIf you disable this policy setting, the DPS is not able to diagnose memory leak problems.\r\n\r\nThis policy setting takes effect only under the following conditions: \r\n-- If the diagnostics-wide scenario execution policy is not configured. \r\n-- When the Diagnostic Policy Service is in the running state. When the service is stopped or disabled, diagnostic scenarios are not executed.\r\n\r\nNote: The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n\r\nNo operating system restart or service restart is required for this policy to take effect. Changes take effect immediately.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-leakdiagnostic#admx-leakdiagnostic-wdiscenarioexecutionpolicy"],"categoryId":"2b54b208-5459-4e40-8db1-002cb90495bc","categoryName":"Windows Memory Leak Diagnosis","options":[{"id":"device_vendor_msft_policy_config_admx_leakdiagnostic_wdiscenarioexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_leakdiagnostic_wdiscenarioexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"0659bb3ed2dabe2c":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpwebprobeurl_ncsi_corpwebprobeurlbox","displayName":"Corporate Website Probe URL:","description":null,"helpText":"","infoUrls":[],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":null},"061240c0bee6bece":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_debugflag","displayName":"Specify log file debug output level","description":"This policy setting specifies the level of debug output for the Net Logon service.\r\n\r\nThe Net Logon service outputs debug information to the log file netlogon.log in the directory %windir%\\debug. By default, no debug information is logged.\r\n\r\nIf you enable this policy setting and specify a non-zero value, debug information will be logged to the file. Higher values result in more verbose logging; the value of 536936447 is commonly used as an optimal setting.\r\n\r\nIf you specify zero for this policy setting, the default behavior occurs as described above.\r\n\r\nIf you disable this policy setting or do not configure it, the default behavior occurs as described above.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-debugflag"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_debugflag_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_debugflag_1","displayName":"Enabled","description":null,"helpText":null}]},"0615a21fdd7f9197":{"id":"device_vendor_msft_policy_config_admx_previousversions_disableremoterestore_2","displayName":"Prevent restoring remote previous versions","description":"This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a file on a file share.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a file on a file share.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a file on a file share. If the user clicks the Restore button, Windows attempts to restore the file from the file share.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a file on a file share.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disableremoterestore-2"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"device_vendor_msft_policy_config_admx_previousversions_disableremoterestore_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_previousversions_disableremoterestore_2_1","displayName":"Enabled","description":null,"helpText":null}]},"068f78125c491e33":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_license_tooltip","displayName":"Hide notifications about RD Licensing problems that affect the RD Session Host server","description":"This policy setting determines whether notifications are displayed on an RD Session Host server when there are problems with RD Licensing that affect the RD Session Host server.\r\n\r\nBy default, notifications are displayed on an RD Session Host server after you log on as a local administrator, if there are problems with RD Licensing that affect the RD Session Host server. If applicable, a notification will also be displayed that notes the number of days until the licensing grace period for the RD Session Host server will expire.\r\n\r\nIf you enable this policy setting, these notifications will not be displayed on the RD Session Host server.\r\n\r\nIf you disable or do not configure this policy setting, these notifications will be displayed on the RD Session Host server after you log on as a local administrator.\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-license-tooltip"],"categoryId":"4b540860-0858-48f4-8830-18383bb1766f","categoryName":"Licensing","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_license_tooltip_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_license_tooltip_1","displayName":"Enabled","description":null,"helpText":null}]},"066c0da59d7b72d3":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactiturl","displayName":"Contact IT URL","description":"This policy setting specifies the URL for the Contact IT link in the Company Settings Center.\r\nIf you enable this policy setting, the Company Settings Center Contact IT text links to the specified URL. The link can be of any standard protocol such as http or mailto. \r\nIf you disable this policy setting, the Company Settings Center does not display an IT Contact link.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-contactiturl"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactiturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactiturl_1","displayName":"Enabled","description":null,"helpText":null}]},"066ff2a9f054e7f7":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_travel","displayName":"Travel","description":"This policy setting configures the synchronization of user settings for the Travel app.\r\nBy default, the user settings of Travel sync between computers. Use the policy setting to prevent the user settings of Travel from synchronizing between computers.\r\nIf you enable this policy setting, Travel user settings continue to sync.\r\nIf you disable this policy setting, Travel user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-travel"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_travel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_travel_1","displayName":"Enabled","description":null,"helpText":null}]},"06a70bf1e3ba3629":{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditnonsensitiveprivilegeuse","displayName":"Privilege Use Audit Non Sensitive Privilege Use","description":"This policy setting allows you to audit events generated by the use of non-sensitive privileges (user rights). The following privileges are non-sensitive: Access Credential Manager as a trusted caller. Access this computer from the network. Add workstations to domain. Adjust memory quotas for a process. Allow log on locally. Allow log on through Terminal Services. Bypass traverse checking. Change the system time. Create a pagefile. Create global objects. Create permanent shared objects. Create symbolic links. Deny access this computer from the network. Deny log on as a batch job. Deny log on as a service. Deny log on locally. Deny log on through Terminal Services. Force shutdown from a remote system. Increase a process working set. Increase scheduling priority. Lock pages in memory. Log on as a batch job. Log on as a service. Modify an object label. Perform volume maintenance tasks. Profile single process. Profile system performance. Remove computer from docking station. Shut down the system. Synchronize directory service data. If you configure this policy setting, an audit event is generated when a non-sensitive privilege is called. Success audits record successful calls and Failure audits record unsuccessful calls. If you do not configure this policy setting, no audit event is generated when a non-sensitive privilege is called.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#privilegeuse_auditnonsensitiveprivilegeuse"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditnonsensitiveprivilegeuse_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditnonsensitiveprivilegeuse_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditnonsensitiveprivilegeuse_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditnonsensitiveprivilegeuse_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"06ff999bd8e99edf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs","displayName":"Allow invocation of file selection dialogs","description":"Setting the policy to Enabled or leaving it unset means Chrome can display, and users can open, file selection dialogs.\r\n\r\nSetting the policy to Disabled means that whenever users perform actions provoking a file selection dialog, such as importing bookmarks, uploading files, and saving links, a message appears instead. The user is assumed to have clicked Cancel on the file selection dialog.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"06234e82198b5d91":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods.","description":"Allows you to set whether websites are allowed to check if the user has payment methods saved.\r\n\r\nIf this policy is set to disabled, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\r\n\r\nIf the setting is enabled or not set then websites are allowed to check if the user has payment methods saved.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"066504225587a034":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar","displayName":"Show Full URLs","description":"This feature enables display of the full URL in the address bar.\r\nIf this policy is set to True, then the full URL will be shown in the address bar, including schemes and subdomains.\r\nIf this policy is set to False, then the default URL display will apply.\r\nIf this policy is left unset, then the default URL display will apply and the user will be able to toggle between default and full URL display with a context menu option.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},"060a1df78cf8eea6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions","displayName":"Blocks external extensions from being installed","description":"Controls external extensions installation.\r\n\r\nEnabling this setting blocks external extensions from being installed.\r\n\r\nDisabling this setting or leaving it unset allows external extensions to be installed.\r\n\r\nExternal extensions and their installation are documented at https://developer.chrome.com/apps/external_extensions.\r\n","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"068f22d83f2179ca":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level","description":"Allows you to control whether Google Chrome's Safe Browsing feature is enabled and the mode it operates in.\r\n\r\nIf this policy is set to 'NoProtection' (value 0), Safe Browsing is never active.\r\n\r\nIf this policy is set to 'StandardProtection' (value 1, which is the default), Safe Browsing is always active in the standard mode.\r\n\r\nIf this policy is set to 'EnhancedProtection' (value 2), Safe Browsing is always active in the enhanced mode, which provides better security, but requires sharing more browsing information with Google.\r\n\r\nIf you set this policy as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome.\r\n\r\nIf this policy is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting.\r\n\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"068549dd582ee9aa":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled","displayName":"Choose whether the Privacy Sandbox IP Protection feature should be enabled.","description":"A policy to control whether the Privacy Sandbox IP Protection feature should be enabled.\r\n\r\nIP Protection is a feature that limits availability of a user's original IP address for certain third-party network requests made while browsing in Incognito mode, enhancing protections against cross-site tracking during Incognito browsing sessions.\r\n\r\nIf the policy is set to Disabled, then IP Protection will be disabled and users won't be able to enable the feature via UI settings.\r\nIf the policy is set to Enabled, then IP Protection will be enabled and users won't be able to disable the feature via UI settings.\r\nIf the policy is not set, IP Protection will be enabled by default and users will be able to control the feature on their device via UI settings.\r\n\r\nSome considerations regarding whether enterprises should disable IP Protection include:\r\n\r\n- DNS lookups won't be performed for requests that are proxied, which may impact DNS-based monitoring or filtering.\r\n\r\n- Enterprise applications may experience breakage when used in Incognito mode if they rely on requests to domains (or subdomains of those domains) on the Masked Domain List (Google Chrome) and require those requests to come from specific IP address ranges.\r\n\r\n- Traffic might not be proxied in Incognito mode under certain conditions, for example when users launch Incognito mode from a Chrome profile they aren't signed in to. In general the feature requires the user to have been signed in to Chrome with a personal Google account when launching Incognito mode.\r\n\r\n- The list of domains on the Masked Domain List may change over time, with new versions being pushed to users automatically. For more information on the Masked Domain List, see: Google Chrome.\r\n\r\nFor more information on IP Protection, see: Google Chrome.\r\n\r\nIP Protection will be launched no sooner than M139.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"06fd7b16c57ae54b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_nativeclientforceallowed","displayName":"Forces Native Client (NaCl) to be allowed to run.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_nativeclientforceallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_nativeclientforceallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"065a839b6f0ad8d5":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"0648f2c4dced83e4":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing","displayName":"Enable MIME Sniffing","description":"This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.\n\nIf you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.\n\nIf you do not configure this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenablemimesniffing"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_1","displayName":"Enabled","description":null,"helpText":null}]},"067dfe8becef5343":{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled","displayName":"Efficiency mode enabled","description":"Enables efficiency mode which helps extend battery life by saving computer resources. By default, efficiency mode is enabled for devices with a battery and disabled otherwise.\r\n\r\nIf you enable this policy, efficiency mode will become active according to the setting chosen by the user. You can configure the efficiency mode setting using the 'EfficiencyMode' (Configure when efficiency mode should become active) policy. If the device does not have a battery, efficiency mode will always be active.\r\n\r\nIf you disable this policy, efficiency mode will never become active. The 'EfficiencyMode' and 'EfficiencyModeOnPowerEnabled' (Enable efficiency mode when the device is connected to a power source) policies will have no effect.\r\n\r\nIf you don't configure this policy, efficiency mode will be enabled for devices with a battery and disabled otherwise. Users can choose the efficiency mode option they want in edge://settings/system.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"063fd64857a8a002":{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled","displayName":"Allow SpeculationRules prefetch for ServiceWorker-controlled URLs","description":"Controls whether SpeculationRules prefetch requests are allowed for\r\nServiceWorker-controlled URLs.\r\n\r\nStarting with Microsoft Edge version 138,\r\nprefetch requests to ServiceWorker-controlled URLs are allowed by default when\r\nthe PrefetchServiceWorker feature is enabled.\r\n\r\nIf this policy is enabled or not configured, that default behavior is used.\r\n\r\nTo restore the legacy behavior from versions prior to 138, where prefetch requests\r\nto ServiceWorker-controlled URLs were blocked, set this policy to disabled.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"065210e6085be52a":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist","displayName":"Allow access to a list of URLs in InPrivate mode.","description":"This policy allows administrators to specify a list of URL patterns that are permitted to open in InPrivate mode. It can be used to create exceptions for URL patterns defined in 'InPrivateModeUrlBlocklist' (Block access to a list of URLs in InPrivate mode.). See how to format a URL pattern (https://go.microsoft.com/fwlink/?linkid=2095322).\r\n\r\nIf both this policy and 'InPrivateModeUrlBlocklist' are configured, the allowlist takes precedence. URLs that match a pattern on this allowlist are allowed. URLs that match the blocklist but not this allowlist are blocked. URLs that match neither list fall back to 'URLBlocklist' (Block access to a list of URLs) and 'URLAllowlist' (Define a list of allowed URLs).\r\n\r\nIf this policy is configured and 'InPrivateModeUrlBlocklist' is not configured, only the URLs specified in this allowlist can be opened in InPrivate mode. All other URLs are blocked.\r\n\r\nIf 'InPrivateModeAvailability' (Configure InPrivate mode availability) is set to disallow (value 1) but this policy is configured, InPrivate mode is available only for URLs that match the allowlist.\r\n\r\nIf this policy is not configured, no exceptions are applied to 'InPrivateModeUrlBlocklist' or 'InPrivateModeAvailability'.\r\n\r\nThis policy applies only to InPrivate mode. To allow URLs across all browsing modes and profiles, use the 'URLAllowlist' policy.\r\n\r\nThis policy supports up to 1000 entries.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"06f8151d58d7f58e":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled","displayName":"Allow users to configure Family safety","description":"This policy disables and completely hides the Family safety page in Settings. Navigation to edge://settings/familysafety will also be blocked. The Family safety page describes what features are available for family groups and how to join a family group. Learn more about family safety here: (https://go.microsoft.com/fwlink/?linkid=2098432).\r\n\r\nIf you enable this policy or don't configure it, the Family safety page will be shown.\r\n\r\nIf you disable this policy, the Family safety page will not be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"067f8a20568c955a":{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt","displayName":"Turn on an external converter as the default for a file extension","description":"This policy setting allows you to enable an external file format converter as the default for a particular file extension on a computer. To set this policy you need to specify the file extension (e.g. \"odp\") for Value Name and the external file format converter via the converter's classname (e.g. \"TestConverter\") for Value.\r\n\r\nIf you enable this policy setting for a particular file extension, the file format converter specified for that extension is used as the default converter for loading the files.\r\n\r\nIf you do not configure this policy setting for a particular file extension, Microsoft PowerPoint processes files with that extension in an application defined manner.\r\n\r\nNote: This policy can only be specified once per file extension.","helpText":"","infoUrls":[],"categoryId":"686ae3dd-a663-4484-854e-8f8d578fe3b8","categoryName":"Converters","options":[{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_1","displayName":"Enabled","description":null,"helpText":null}]},"067fd9b57d5b6997":{"id":"device_vendor_msft_policy_config_update_setdisableuxwuaccess","displayName":"Set Disable UXWU Access","description":"This policy allows the IT admin to remove access to scan Windows Update. When this policy is enabled, the user cannot access the Windows Update scan, download, and install features. Value type is integer. Default is 0. Supported values 0, 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setdisableuxwuaccess"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setdisableuxwuaccess_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_update_setdisableuxwuaccess_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"069d376c253830c6":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod","displayName":"Time period in each day to suppress auto-update check","description":"If you enable this policy, update checks are suppressed each day starting at Hour:Minute for a period of Duration (in minutes). Duration isn't affected by daylight saving time. For example, if the start time is 22:00 and the duration is 480 minutes, updates will be suppressed for exactly 8 hours, regardless of whether daylight saving time starts or ends during this period.\r\n\r\n If you disable or don't configure this policy, update checks aren't suppressed during any specific period.","helpText":"","infoUrls":[],"categoryId":"78497707-c3e4-400b-a6bc-1813c3689fdc","categoryName":"Preferences","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"0687e72a1272459e":{"id":"device_vendor_msft_policy_config_userrights_increaseprocessworkingset","displayName":"Increase Process Working Set","description":"Increase a process working set. This privilege determines which user accounts can increase or decrease the size of a process’s working set. The working set of a process is the set of memory pages currently visible to the process in physical RAM memory. These pages are resident and available for an application to use without triggering a page fault. The minimum and maximum working set sizes affect the virtual memory paging behavior of a process. Warning: Increasing the working set size for a process decreases the amount of physical memory available to the rest of the system.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#increaseprocessworkingset"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"0696b9cb83fb1bcf":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkssid","displayName":"Network SSID (Windows Insiders only)","description":"Refers to the wifi network SSID that the device will attempt to automatically connect to during remediation.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":null},"06ec7896ef480d26":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]},"0662dbb2cc6e02d4":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting","displayName":"Determine risk by (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting_2","displayName":"Preferring the file handler","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting_3","displayName":"Looking at the file handler and type","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting_1","displayName":"Preferring the file type","description":null,"helpText":null}]},"0656ffd8b118a6bd":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableadd","displayName":"Prohibit adding items (User)","description":"Prevents users from adding Web content to their Active Desktop.\r\n\r\nThis setting removes the \"New\" button from Web tab in Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. This setting does not remove existing Web content from their Active Desktop, or prevent users from removing existing Web content.\r\n\r\nAlso, see the \"Disable all items\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-disableadd"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableadd_1","displayName":"Enabled","description":null,"helpText":null}]},"0655d34ebd1dc5c2":{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffautocorrectmisspelledwords","displayName":"Turn off autocorrect misspelled words (User)","description":"\r\n This policy turns off the autocorrect misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The autocorrect misspelled words option controls whether or not errors in typed text will be automatically corrected.\r\n\r\n If the policy is Enabled, then the option will be locked to not autocorrect misspelled words.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffautocorrectmisspelledwords"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffautocorrectmisspelledwords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffautocorrectmisspelledwords_1","displayName":"Enabled","description":null,"helpText":null}]},"06926cb464a410f5":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1","displayName":"Configure Group Policy slow link detection (User)","description":"This policy setting defines a slow connection for purposes of applying and updating Group Policy.\r\n\r\nIf the rate at which data is transferred from the domain controller providing a policy update to the computers in this group is slower than the rate specified by this setting, the system considers the connection to be slow.\r\n\r\nThe system's response to a slow policy connection varies among policies. The program implementing the policy can specify the response to a slow link. Also, the policy processing settings in this folder lets you override the programs' specified responses to slow links.\r\n\r\nIf you enable this setting, you can, in the \"Connection speed\" box, type a decimal number between 0 and 4,294,967,200, indicating a transfer rate in kilobits per second. Any connection slower than this rate is considered to be slow. If you type 0, all connections are considered to be fast.\r\n\r\nIf you disable this setting or do not configure it, the system uses the default value of 500 kilobits per second.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. The setting in Computer Configuration defines a slow link for policies in the Computer Configuration folder. The setting in User Configuration defines a slow link for settings in the User Configuration folder.\r\n\r\nAlso, see the \"Do not detect slow network connections\" and related policies in Computer Configuration\\Administrative Templates\\System\\User Profile. Note: If the profile server has IP connectivity, the connection speed setting is used. If the profile server does not have IP connectivity, the SMB timing is used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-gptransferrate-1"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1_1","displayName":"Enabled","description":null,"helpText":null}]},"06e5cdaa63412aae":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_faxservice","displayName":"FAX Service (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-faxservice"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_faxservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_faxservice_1","displayName":"Enabled","description":null,"helpText":null}]},"0631853afa4adb33":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ras_dialinuser","displayName":"RAS Dialin - User Node (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ras-dialinuser"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ras_dialinuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ras_dialinuser_1","displayName":"Enabled","description":null,"helpText":null}]},"06cbb44e16e20885":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_gcfuserdatadir","displayName":"Set user data directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"067edc5bf7c7aec1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_machinelevelusercloudpolicyenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"067e4b57af743e7c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font","displayName":"Font (User)","description":"Specifies the \"Standard font\" font name and size.","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font_1","displayName":"Enabled","description":null,"helpText":null}]},"06ee5cad5a139479":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"0625fdb593c7e50d":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"06f86291a0c7c1d1":{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades (User)","description":"As of Microsoft Edge version 120, Microsoft Edge tries to upgrade HTTP navigations to HTTPS whenever possible to improve security. Navigations to captive portals, IP addresses, and non-unique hostnames are excluded from automatic upgrades.\r\n\r\nIf this policy is enabled or not configured, automatic HTTPS upgrades are turned on by default.\r\n\r\nIf this policy is disabled, Microsoft Edge won't attempt to upgrade HTTP connections to HTTPS.\r\n\r\nTo exempt specific hostnames or hostname patterns from being upgraded, use the HttpAllowlist policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0657225a29c942b7":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityblocklist_developertoolsavailabilityblocklistdesc","displayName":"List of URL patterns for which developer tools are blocked (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"065abf27c9aa4175":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_m365linksautoopencopilotenabled","displayName":"Automatically open Copilot side pane with contextual insights for links opened from Outlook (User)","description":"This policy controls whether Microsoft Edge automatically opens the Microsoft Copilot side pane when users open web links from Outlook emails sent from the same tenant.\r\n\r\nStarting in Microsoft Edge version 148, when users open eligible links from Outlook emails sent from the same tenant, Microsoft Edge automatically opens the Copilot side pane with contextual insights. Copilot can use the originating Outlook email as context to surface relevant insights and suggested next steps alongside the web content.\r\n\r\nIf you enable this policy or don't configure it, the Copilot side pane opens automatically when users open links from Outlook emails sent from the same tenant.\r\n\r\nIf you disable this policy, the Copilot side pane doesn't open automatically when users open links from Outlook emails sent from the same tenant.\r\n\r\nThis feature applies only to links opened from Outlook emails sent from the same tenant and requires Microsoft Copilot to be available for the user in Microsoft Edge.\r\n\r\nThis feature is disabled if the 'CopilotPageContext' (Control Copilot access to page context for Microsoft Entra ID profiles) policy or the 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane) policy is disabled, regardless of this policy's configuration. Copilot requires access to page content to provide contextual insights.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_m365linksautoopencopilotenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_m365linksautoopencopilotenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"06d6b7ebd7c9d77d":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended","displayName":"Allow suggestions from local providers (User)","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\r\n\r\nIf you enable this policy, suggestions from local providers are used.\r\n\r\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions will not appear.\r\n\r\nIf you do not configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\r\n\r\nNote that some features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy.\r\n\r\nThis policy requires a browser restart to finish applying.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"06ebef5bb98501a5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_queryinstanceslimit","displayName":"Set query items limit (User)","description":"This policy setting allows you to specify the maximum number of items that will be added to the client’s cache as the result of executing a query. Several bulk operations (especially queries) can return a large number of items to be added to the cache. This increases the size of the cache, potentially exceeding the 4GB limit imposed by Microsoft SQL Server CE. It also increases the amount of work required to keep the cache synchronized and increases the load on the LOB server. In order to protect the system, a limit is used – any results processed before reaching the limit are still committed, but the operation is marked as failed and will be retried later.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of items that will be added to the client’s cache as the result of executing a query.\r\n\r\nIf you disable or do not configure this policy setting, a default value of 2000 items will be used.","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_queryinstanceslimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_queryinstanceslimit_1","displayName":"Enabled","description":null,"helpText":null}]},"06388ca32f187609":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace~l_definesharedworkspaceurls_l_site1","displayName":"Site 1: (User)","description":"Specifies the name and URL of a shared workspace. The name and URL appear in the Document Management pane.","helpText":"","infoUrls":[],"categoryId":"725adbdf-1eb8-45c4-8eb1-44747bd1615d","categoryName":"Define Shared Workspace URL's","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace~l_definesharedworkspaceurls_l_site1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace~l_definesharedworkspaceurls_l_site1_1","displayName":"Enabled","description":null,"helpText":null}]},"0616ce630ff9844b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishjamaica","displayName":"English (Jamaica) (User)","description":"Enables the editing language English (Jamaica)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishjamaica_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishjamaica_1","displayName":"Enabled","description":null,"helpText":null}]},"06bf7cefc8ecf454":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishtrinidadandtobago","displayName":"English (Trinidad and Tobago) (User)","description":"Enables the editing language English (Trinidad and Tobago)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishtrinidadandtobago_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishtrinidadandtobago_1","displayName":"Enabled","description":null,"helpText":null}]},"068859b264e37891":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_maltese","displayName":"Maltese (User)","description":"Enables the editing language Maltese","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_maltese_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_maltese_1","displayName":"Enabled","description":null,"helpText":null}]},"06d710bb2c7e6cba":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc16_l_allowsubfolders16","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc16_l_allowsubfolders16_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc16_l_allowsubfolders16_1","displayName":"True","description":null,"helpText":null}]},"06a90b878c2e2624":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_miscellaneous437_l_personalizationhomeuseprogram","displayName":"Show in-product notifications for the Microsoft Home Use Program (User)","description":"This policy setting controls whether notifications about the Microsoft Home Use Program (HUP) are displayed to end-users in Office applications.\r\n\r\nIf you enable this policy setting, Office will occasionally notify end-users if they are eligible to purchase an Office subscription for their personal use at a discount via the Microsoft Home Use Program. End-users can permanently opt-out of these notifications at any time using a button within the notification.\r\n\r\nIf you disable this policy setting, Office will not display any notifications related to the Microsoft Home Use Program.\r\n\r\nIf you don't configure this policy setting, Microsoft will control whether or not these notifications appear. Please check the Message Center in the Microsoft 365 admin center for updates on whether this feature has been enabled by Microsoft yet and the default setting for the notifications.\r\n\r\nFor more information, see https://aka.ms/huplearnmore.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_miscellaneous437_l_personalizationhomeuseprogram_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_miscellaneous437_l_personalizationhomeuseprogram_1","displayName":"Enabled","description":null,"helpText":null}]},"0666c050a672bbee":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_disablepublishtogalbutton","displayName":"Do not display 'Publish to GAL' button (User)","description":"This policy setting controls whether Outlook users can publish e-mail certificates to the Global Address List (GAL). \r\n\r\nIf you enable this policy setting, the \"Publish to GAL\" button does not display in the \"E-mail Security\" section of the Trust Center. \r\n\r\nIf you disable or do not configure this policy setting, Outlook users can publish their e-mail certificates to the GAL through the \"E-mail Security\" section of the Trust Center.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_disablepublishtogalbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_disablepublishtogalbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"069af698d603b1d7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_overridepublishedsyncinterval","displayName":"Override published sync interval (User)","description":"This policy setting allows you to ignore the synchronization interval specified by the RSS publisher. By default, Outlook follows the synchronization interval specified by the RSS publisher and RSS Feeds will not be synchronized more often than allowed by the RSS publisher. If Outlook does not follow the RSS publisher's synchronization interval, the RSS publisher may suspend Outlook from synchronizing the RSS Feed.\r\n\r\nIf you enable this policy setting, Outlook will always ignore the synchronization interval specified by the RSS publisher.\r\n\r\nIf you disable or do not configure this policy setting, Outlook will always follow the synchronization interval specified by the RSS publisher.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_overridepublishedsyncinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_overridepublishedsyncinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"0630dfc76550be21":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]},"064302e088213d6a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_offlineediting_l_savecheckedoutfilesto_l_savecheckedoutfilestodropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2eed22da-106f-4c93-9a45-5ce803b50233","categoryName":"Offline Editing","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_offlineediting_l_savecheckedoutfilesto_l_savecheckedoutfilestodropid_1","displayName":"Server drafts location","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_offlineediting_l_savecheckedoutfilesto_l_savecheckedoutfilestodropid_0","displayName":"Web server","description":null,"helpText":null}]},"06dec9c25e88b77f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Disable all application add-ins (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n \r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users, except if application add-ins are required to be signed by Trusted Publishers.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"062a7024f11466e0":{"id":"vendor_msft_firewall_mdmstore_privateprofile_globalportsallowuserprefmerge","displayName":"Global Ports Allow User Pref Merge","description":"This value is used as an on/off switch. If this value is false, global port firewall rules in the local store are ignored and not enforced. The setting only has meaning if it is set or enumerated in the Group Policy store or if it is enumerated from the GroupPolicyRSoPStore. The merge law for this option is to let the value GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_globalportsallowuserprefmerge_false","displayName":"False","description":"GlobalPortsAllowUserPrefMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_globalportsallowuserprefmerge_true","displayName":"True","description":"GlobalPortsAllowUserPrefMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/07.json b/public/intune-definitions/07.json new file mode 100644 index 000000000000..0a21ff78c2ed --- /dev/null +++ b/public/intune-definitions/07.json @@ -0,0 +1 @@ +{"072ff49a140aad82":{"id":"ade_setupassistant_multitasking","displayName":"Multitasking","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_multitasking_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_multitasking_1","displayName":"Show","description":null,"helpText":null}]},"07e89ad49db2b4c7":{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype","displayName":"Required password type","description":"Set the password’s complexity requirements. Additional password requirements will become available based on your selection. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level). For more details, see the information provided in the ‘Learn More’ section below.","helpText":"","infoUrls":["https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-for-work?WT.mc_id=Portal-fx#device-password"],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":[{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_devicedefault","displayName":"Device default","description":"Device default value, no intent.","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_required","displayName":"Password required, no restrictions","description":"There must be a password set, but there are no restrictions on type.","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_lowsecuritybiometric","displayName":"Weak Biometric","description":"Low security biometrics based password required.","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_numeric","displayName":"Numeric","description":"At least numeric.","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_numericcomplex","displayName":"Numeric Complex","description":"At least numeric with no repeating or ordered sequences.","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_alphabetic","displayName":"Alphabetic","description":"At least alphabetic password.","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_alphanumeric","displayName":"Alphanumeric","description":"At least alphanumeric password","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequiredtype_alphanumericwithsymbols","displayName":"Alphanumeric with symbols","description":"At least alphanumeric with symbols.","helpText":null}]},"07ace6de15d77e50":{"id":"com.apple.applicationaccess_allowcloudaddressbook","displayName":"Allow Cloud Address Book","description":"If false, disables iCloud Address Book services. Available in macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudaddressbook_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudaddressbook_true","displayName":"True","description":null,"helpText":null}]},"07c44d7883fbc7e0":{"id":"com.apple.caldav.account_caldavusername","displayName":"Cal DAV Username","description":"The user name for logins.","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":null},"0700fd37c3e8a9e6":{"id":"com.apple.managedclient.preferences_disabledonotforward","displayName":"Disable 'Do Not Forward' options","description":"Prevent users from applying the Do Not Forward option to emails when using Microsoft 365 Message Encryption.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-do-not-forward"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_disabledonotforward_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disabledonotforward_true","displayName":"True","description":null,"helpText":null}]},"07e87ee50e1b1445":{"id":"com.apple.managedclient.preferences_personalizationreportingenabled","displayName":"Allow personalization of ads, search and news by sending browsing history to Microsoft","description":"This policy prevents Microsoft from collecting a user's Microsoft Edge browsing history to be used for personalizing advertising, search, news and other Microsoft services.\n\nThis setting is only available for users with a Microsoft account. This setting is not available for child accounts or enterprise accounts.\n\nIf you disable this policy, users can't change or override the setting. If this policy is enabled or not configured, Microsoft Edge will default to the user’s preference.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#personalizationreportingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_personalizationreportingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_personalizationreportingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"07e47e03eac1ca2e":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_wake on modem ring","displayName":"Wake On Modem Ring","description":"If true, enables \"Wake for modem ring.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_wake on modem ring_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_wake on modem ring_1","displayName":"True","description":null,"helpText":null}]},"077311fcd2f31fd1":{"id":"com.apple.mcx.timemachine_backupsizemb","displayName":"Backup Size MB","description":"The backup size limit, in megabytes. Set to 0 for unlimited.","helpText":null,"infoUrls":[],"categoryId":"361859d9-1382-47c3-b9ec-9251a62fbb25","categoryName":"Time Machine","options":null},"0733b07ab71007fe":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_comment","displayName":"Comment","description":"Not used.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"0775a10e037209bd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.urlallowlist","displayName":"Define a list of allowed URLs","description":"Setting the policy provides access to the listed URLs as exceptions to \"URLBlocklist\".\n\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\n\nYou can use this policy to open exceptions to restrictive blocklists. For example, you can include '*' in the blocklist to block all requests, and then use this policy to allow access to a limited list of URLs. You can use this policy to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths.\n\nThe most specific filter determines if a URL is blocked or allowed. The allowed list takes precedence over the blocked list.\n\nThis policy is limited to 1000 entries; subsequent entries are ignored.\n\nThis policy also allows the browser to automatically invoke external applications registered as protocol handlers for protocols like \"tel:\" or \"ssh:\".\n\nIf you don't configure this policy, there are no exceptions to the blocklist in the \"URLBlocklist\" policy.\n\nThis policy doesn't work as expected with file://* wildcards.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"072183d8715d5fb9":{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslciphersuiteorder_pol_sslciphersuiteorder","displayName":"SSL Cipher Suites","description":null,"helpText":"","infoUrls":[],"categoryId":"86f46ebc-a93f-4a2b-b6e7-bab2ac95a3ae","categoryName":"SSL Configuration Settings","options":null},"07fb836feab20136":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_cse_slowlink4","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_cse_slowlink4_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_cse_slowlink4_1","displayName":"True","description":null,"helpText":null}]},"07723ec2c8501094":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity","displayName":"Configure IP security policy processing","description":"This policy setting determines when IP security policies are updated.\r\n\r\nThis policy setting affects all policies that use the IP security component of Group Policy, such as policies in Computer Configuration\\Windows Settings\\Security Settings\\IP Security Policies on Local Machine.\r\n\r\nThis policy setting overrides customized settings that the program implementing the IP security policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-ipsecurity"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_1","displayName":"Enabled","description":null,"helpText":null}]},"07369fdfd716346e":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_allowonpublicnet","displayName":"Allow operation while in public network","description":null,"helpText":"","infoUrls":[],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_allowonpublicnet_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_allowonpublicnet_1","displayName":"True","description":null,"helpText":null}]},"0734d14df1fb30aa":{"id":"device_vendor_msft_policy_config_admx_msched_activationboundarypolicy","displayName":"Automatic Maintenance Activation Boundary","description":"\r\n This policy setting allows you to configure Automatic Maintenance activation boundary.\r\n\r\n The maintenance activation boundary is the daily schduled time at which Automatic Maintenance starts\r\n\r\n If you enable this policy setting, this will override the default daily scheduled time as specified in Security and Maintenance/Automatic Maintenance Control Panel.\r\n\r\n If you disable or do not configure this policy setting, the daily scheduled time as specified in Security and Maintenance/Automatic Maintenance Control Panel will apply.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msched#admx-msched-activationboundarypolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_msched_activationboundarypolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msched_activationboundarypolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"070012fbf87da21f":{"id":"device_vendor_msft_policy_config_admx_msi_msilogging_msilogging","displayName":"Logging","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":null},"07bdcb24c24caed1":{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth","displayName":"Turn on bandwidth optimization","description":"This policy setting allows you to improve performance in low bandwidth scenarios.\r\n\r\nThis setting is incrementally scaled from \"No optimization\" to \"Full optimization\". Each incremental setting includes the previous optimization setting.\r\n\r\nFor example:\r\n\r\n\"Turn off background\" will include the following optimizations:\r\n-No full window drag\r\n-Turn off background\r\n\r\n\"Full optimization\" will include the following optimizations:\r\n-Use 16-bit color (8-bit color in Windows Vista)\r\n-Turn off font smoothing (not supported in Windows Vista)\r\n-No full window drag\r\n-Turn off background\r\n\r\nIf you enable this policy setting, bandwidth optimization occurs at the level specified.\r\n\r\nIf you disable this policy setting, application-based settings are used.\r\n\r\nIf you do not configure this policy setting, application-based settings are used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-remoteassistance#admx-remoteassistance-ra-optimize-bandwidth"],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth_1","displayName":"Enabled","description":null,"helpText":null}]},"07ad19570f307597":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext","displayName":"Idle session limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_0","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_ts_sessions_idlelimittext_432000000","displayName":"5 days","description":null,"helpText":null}]},"073d81c8e1200424":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup","displayName":"Publisher 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Publisher 2013.\r\nMicrosoft Publisher 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Publisher 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Publisher 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013publisherbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"07d13c696bbca14a":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_refresh_interval_prompt","displayName":"Global Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"07dee3f1b23c6221":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended","displayName":"Parameters for image URL which uses POST","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURLPostParams specifies the parameters during image search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as {imageThumbnail}, real image thumbnail data replaces it.\r\n\r\nLeaving DefaultSearchProviderImageURLPostParams unset means image search request is sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"07a703072f57238b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl_browserswitcherexternalgreylisturl","displayName":"URL of an XML file that contains URLs that should never trigger a browser switch. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"07a2d6fa343c4226":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls_webusbaskforurlsdesc","displayName":"Allow WebUSB on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"077d6fb4f199f35b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"0726e7bb82198fa8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_cacertificatesdesc","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"071e6356615c837f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls","displayName":"Block sites from making requests to local network endpoints.","description":"List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.\r\n\r\nIf an origin is covered by both this policy and by LocalNetworkAccessAllowedForUrls, this policy takes precedence.\r\n\r\nDepending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.\r\n\r\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\r\n\r\nFor detailed information on valid URL patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nSee https://wicg.github.io/local-network-access/ for Local Network Access restrictions.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0706a7c195807b65":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled","displayName":"Control Javascript setTimeout() function minimum timeout.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"07997e3914dbf7d9":{"id":"device_vendor_msft_policy_config_connectivity_allowphonepclinking","displayName":"Allow Phone PC Linking","description":"This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue tasks, such as reading, email, and other tasks that require linking between Phone and PC. If you enable this policy setting, the Windows device will be able to enroll in Phone-PC linking functionality and participate in 'Continue on PC experiences'. If you disable this policy setting, the Windows device is not allowed to be linked to phones, will remove itself from the device list of any linked Phones, and cannot participate in 'Continue on PC experiences'. If you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowphonepclinking"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowphonepclinking_0","displayName":"Block","description":"Do not link.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowphonepclinking_1","displayName":"Allow","description":"Allow phone-PC linking.","helpText":null}]},"0747321cd94e3e8b":{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"643081a4-132d-463e-9d86-c8650cb2a011","categoryName":"Network Provider","options":null},"071550208a8f36da":{"id":"device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication","displayName":"Disable HTML Application","description":"This policy setting specifies if running the HTML Application (HTA file) is blocked or allowed.\n\nIf you enable this policy setting, running the HTML Application (HTA file) will be blocked.\n\nIf you disable or do not configure this policy setting, running the HTML Application (HTA file) is allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablehtmlapplication"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_1","displayName":"Enabled","description":null,"helpText":null}]},"07f5014d1acede75":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneinitializeandscriptactivexcontrols"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"0704063b9663245b":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"077438add807ded3":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_clipboardblockedforurlsdesc","displayName":"Block clipboard use on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"07e58c0fa6d08078":{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled","displayName":"Enable Discover access to page contents for AAD profiles (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy has been obsoleted as of Edge 127. Two new Edge Policies have taken its place. Those policies are CopilotPageContext (Control Copilot access to page contents for AAD profiles), and CopilotCDPPageContext (Control Copilot with Commercial Data Protection access to page contents for AAD profiles).\r\n\r\nThis policy did not allow for separate control of Copilot and Copilot with Commercial Data Protection. The new policies allow separate control of these versions of Copilot. The new policies also allow admins to force-enable Copilot access to Edge page contents by enabling the policy, whereas DiscoverPageContextEnabled only allowed force-disabling of Copilot page access.\r\n\r\nThis policy controls Discover access to page contents for AAD profiles. Discover is an extension that hosts Bing Chat. In order to summarize pages and interact with text selections, it needs to be able to access the page contents. When enabled, page contents will be sent to Bing. This policy does not affect MSA profiles.\r\n\r\nIf you enable or don't configure this policy, Discover will have access to page contents.\r\n\r\nIf you disable this policy, Discover will not be able to access page contents.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"078f45c903fd6438":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_0","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_1","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_2","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_3","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},"07eb04f051dee482":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors.","description":"This policy controls a security feature in TLS 1.3 that protects connections against downgrade attacks. It is backwards-compatible and will not affect connections to compliant TLS 1.2 servers or proxies. However, older versions of some TLS-intercepting proxies have an implementation flaw which causes them to be incompatible.\r\n\r\nIf you enable this policy or don't set it, Microsoft Edge will enable these security protections for all connections.\r\n\r\nIf you disable this policy, Microsoft Edge will disable these security protections for connections authenticated with locally-installed CA certificates. These protections are always enabled for connections authenticated with publicly-trusted CA certificates.\r\n\r\nThis policy may be used to test for any affected proxies and upgrade them. Affected proxies are expected to fail connections with an error code of ERR_TLS13_DOWNGRADE_DETECTED. A later version of Microsoft Edge will enable this option by default.\r\n\r\nAfter it is enabled by default, administrators who need more time to upgrade affected proxies may use this policy to temporarily disable this security feature. This policy will be removed after version 85.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"071162136a8ff561":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault","displayName":"Configure Automatic HTTPS","description":"This policy lets you manage settings for 'AutomaticHttpsDefault' (Configure Automatic HTTPS), which switches connections from HTTP to HTTPS.\r\n\r\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\r\n\r\nNote: The 'UpgradeCapableDomains' configuration requires a component list, and will not upgrade these connections if 'ComponentUpdatesEnabled' (Enable component updates in Microsoft Edge) is set to 'Disabled'.\r\n\r\nIf you don't configure this policy, 'AutomaticHttpsDefault' will be enabled, and will only upgrade connections on domains likely to support HTTPS.\r\n\r\nPolicy options mapping:\r\n\r\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\r\n\r\n* UpgradeCapableDomains (1) = Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\r\n\r\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"073fd4386c28d112":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls","displayName":"Automatically grant sites permission to connect to USB serial devices","description":"Setting the policy lets you list sites that are automatically granted permission to access USB serial devices with vendor and product IDs that match the vendor_id and product_id fields.\r\n\r\nOptionally you can omit the product_id field. This enables site access to all the vendor's devices. When you provide a product ID, then you give the site access to a specific device from the vendor but not all devices.\r\n\r\nThe URLs must be valid, or the policy is ignored. Only the origin (scheme, host, and port) of the URL is considered.\r\n\r\nThis policy overrides 'DefaultSerialGuardSetting' (Control use of the Serial API), 'SerialAskForUrls' (Allow the Serial API on specific sites), 'SerialBlockedForUrls' (Block the Serial API on specific sites) and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the Web Serial API. To grant access to USB devices through the WebUSB API see the 'WebUsbAllowDevicesForUrls' (Grant access to specific sites to connect to specific USB devices) policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://specific-device.example.com\"\r\n ]\r\n },\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://all-vendor-devices.example.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"07004461a108e58f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_outlookexe50","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_outlookexe50_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_outlookexe50_1","displayName":"True","description":null,"helpText":null}]},"07fcfb5e4c350558":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"0762baec7f50bb28":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_dehydratesyncedteamsites","displayName":"Convert synced team site files to online-only files","description":"This setting is used in conjunction with OneDrive Files On-Demand. When many users sync the same team sites, this setting lets you conserve bandwidth and free up space across devices by making synced team site files online-only files.\r\n\r\nIf you enable this setting, team site files that were syncing before OneDrive Files On-Demand was enabled, will be converted (as a one-time action) to online-only files.\r\n\r\nIf you disable or do not configure this setting, team site files will remain locally available unless users choose to make them online only.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_dehydratesyncedteamsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_dehydratesyncedteamsites_1","displayName":"Enabled","description":null,"helpText":null}]},"07893243e419821e":{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum","displayName":"When updating drivers for an existing connection:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum_0","displayName":"Show warning and elevation prompt","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum_1","displayName":"Show warning only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum_2","displayName":"Do not show warning or elevation prompt","description":null,"helpText":null}]},"07fbdf4ef2735a8f":{"id":"device_vendor_msft_policy_config_userrights_loadunloaddevicedrivers","displayName":"Load Unload Device Drivers","description":"This user right determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. It is recommended that you do not assign this privilege to other users. Caution: Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process that you do not want to take over the system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#loadunloaddevicedrivers"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"0749b2aec11ce1f8":{"id":"device_vendor_msft_scepcertificate_rootcertificate","displayName":"Root Certificate","description":"Choose a previously configured and assigned root CA certificate profile. The CA certificate must match the root certificate of the CA that is issuing the certificate for this profile (the one you are currently configuring).","helpText":"","infoUrls":[],"categoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","categoryName":"SCEP certificate","options":null},"07b5f03fd6f53b0b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_datecolon24","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"079251f1f09d81bf":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]},"079b4731ed6dd334":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1_lbl_reminderinittimeoutspin","displayName":"Seconds: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"07bac3e405406234":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmynetworkplaces","displayName":"Remove Network icon from Start Menu (User)","description":"This policy setting allows you to remove the Network icon from Start Menu.\r\n\r\nIf you enable this policy setting, the Network icon is no longer available from Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the Network icon is available from Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmmynetworkplaces"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmynetworkplaces_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmynetworkplaces_1","displayName":"Enabled","description":null,"helpText":null}]},"07d8616ba03d973a":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010onenote","displayName":"Microsoft OneNote 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft OneNote 2010.\r\nBy default, the user settings of Microsoft OneNote 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft OneNote 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft OneNote 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010onenote"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010onenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010onenote_1","displayName":"Enabled","description":null,"helpText":null}]},"07ebf38e7ccff8d5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings","displayName":"Proxy settings (User)","description":"Setting the policy configures the proxy settings for Chrome and ARC-apps, which ignore all proxy-related options specified from the command line.\r\n\r\n Leaving the policy unset lets users choose their proxy settings.\r\n\r\n Setting the ProxySettings policy accepts the following fields:\r\n * ProxyMode, which lets you specify the proxy server Chrome uses and prevents users from changing proxy settings\r\n * ProxyPacUrl, a URL to a proxy .pac file\r\n * ProxyPacMandatory, which prevents the network stack from falling back to direct connections with invalid or unavailable PAC script\r\n * ProxyServer, a URL of the proxy server\r\n * ProxyBypassList, a list of hosts for which the proxy will be bypassed\r\n\r\n The ProxyServerMode field is deprecated in favor of the ProxyMode field.\r\n\r\n For ProxyMode, if you choose the value:\r\n * direct, a proxy is never used and all other fields are ignored.\r\n * system, the systems's proxy is used and all other fields are ignored.\r\n * auto_detect, all other fields are ignored.\r\n * fixed_servers, the ProxyServer and ProxyBypassList fields are used.\r\n * pac_script, the ProxyPacUrl, ProxyPacMandatory and ProxyBypassList fields are used.\r\n\r\nNote: For more detailed examples, visit The Chromium Projects ( https://www.chromium.org/developers/design-documents/network-settings#TOC-Command-line-options-for-proxy-sett ).\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ProxySettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"fixed_servers\",\r\n \"ProxyServer\": \"123.123.123.123:8080\",\r\n \"ProxyBypassList\": \"https://www.example1.com,https://www.example2.com,https://internalsite/\"\r\n}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"075b73615dd28bd9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_downloaddirectory","displayName":"Set download directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":null},"0765ce7a53705f6e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled","displayName":"Enable spellcheck (User)","description":"Setting the policy to Enabled turns spellcheck on, and users can't turn it off. On Microsoft® Windows®, Google Chrome OS and Linux®, spellcheck languages can be switched on or off individually, so users can still turn spellcheck off by switching off every spellcheck language. To avoid that, use the SpellcheckLanguage to force-enable specific spellcheck languages.\r\n\r\nSetting the policy to Disabled turns off spellcheck from all sources, and users can't turn it on. The SpellCheckServiceEnabled, SpellcheckLanguage and SpellcheckLanguageBlocklist policies have no effect when this policy is set to False.\r\n\r\nLeaving the policy unset lets users turn spellcheck on or off in the language settings.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0798d6a19237735f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (User)","description":"Setting the policy to 3 lets websites ask for access to connected USB devices. Setting the policy to 2 denies access to connected USB devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"07d9d43f43a30d6c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls","displayName":"Allow popups on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can open pop-ups.\r\n\r\nLeaving the policy unset means DefaultPopupsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"070fee19f3bcbf8e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation_l_defaultfilelocation0","displayName":"Default file location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":null},"077d58c176159c8e":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1","displayName":"Enable using BITS to download Address Book Service files (User)","description":"This policy allows Microsoft Lync to use BITS (Background Intelligent Transfer Service) to download the Address Book Services files.","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1_1","displayName":"Enabled","description":null,"helpText":null}]},"07fc50673f11abca":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled","displayName":"Default Profile Setting Enabled (User)","description":"Configuring this policy will let you set a default profile in Microsoft Edge to be used when opening the browser rather than the last profile used. This policy won't affect when \"--profile-directory\" parameter has been specified. Set the value to \"Default\" to refer to the default profile. The value is case sensitive.\r\nThe value of the policy is the name of the profile (case sensitive) and can be configured with string that is the name of a specific profile.\r\nThe value \"Edge Kids Mode\" and \"Guest Profile\" are considered not useful values because they not supposed to be a default profile.\r\nThis policy won't impact the following scenarios:\r\n 1) Settings specified in \"Profile preferences for sites\" in \"Profile preferences\"\r\n 2) Links opening from Outlook and Teams.\r\n\r\nThe following statements are under the condition of not specify the \"--profile-directory\" and configured value is not \"Edge Kids Mode\" or \"Guest Profile\":\r\nIf you enable this policy and configure it with a specific profile name and the specified profile can be found, Microsoft Edge will use the specified profile when launching and the setting of \"Default profile for external link\" is changed to the specified profile name and greyed out.\r\nIf you enable this policy and configure it with a specific profile name but it can't be found, the policy will behave like it's never been set before.\r\nIf you enable this policy, but don't configure or disable it, the policy will behave like it's never been set before.\r\n\r\nExample value: Default","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0796bb3f93fb829c":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled","displayName":"Enable Gamer Mode (User)","description":"Microsoft Edge Gamer Mode allows gamers to personalize their browser with gaming themes and gives them the option of enabling Efficiency Mode for PC gaming, the Gaming feed on new tabs, sidebar apps for gamers, and more.\r\n\r\nIf you enable or don't configure this policy, users can opt into Gamer Mode.\r\nIf you disable this policy, Gamer Mode will be disabled.","helpText":"","infoUrls":[],"categoryId":"81c518f1-522e-4957-b850-e8a66d2ab215","categoryName":"Games settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"07dc147f5a11d295":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended","displayName":"Show Hubs Sidebar (User)","description":"Shows a launcher bar on the right side of Microsoft Edge's screen.\r\n\r\nEnable this policy to always show the Sidebar.\r\nDisable this policy to never show the Sidebar.\r\n\r\nIf you don't configure the policy, users can choose whether to show the Sidebar.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"07b1b2ce0bd74b9f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyinfopath","displayName":"Disallow in InfoPath (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyinfopath_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyinfopath_1","displayName":"True","description":null,"helpText":null}]},"07b8fdce3a914f65":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_pashto","displayName":"Pashto (User)","description":"Enables the editing language Pashto","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_pashto_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_pashto_1","displayName":"Enabled","description":null,"helpText":null}]},"07d3e845667d5a8f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_allowedextensions","displayName":"Allow file extensions for OLE embedding (User)","description":"This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus or Visio Pro for Office 365.\r\n\r\nThis policy setting allows you to specify which file extensions Office won’t block when they are embedded as an OLE package in an Office file by using the Object Packager control.\r\n\r\nBy default, Office blocks certain file extensions. For a list of those file extensions, go to https://go.microsoft.com/fwlink/?linkid=847759.\r\n\r\nImportant: Malicious scripts and executables can be embedded as an OLE package and can cause harm if clicked by the user.\r\n\r\nIf you enable this policy setting, enter the file extensions to allow, separated by semicolons. For example, exe;vbs;js.\r\n\r\nIf you disable or don’t configure this policy setting, the default set of file extensions will be blocked.\r\n\r\nIf you want to block additional file extensions, enable the \"Block additional file extensions for OLE embedding\" policy setting.\r\n ","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_allowedextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_allowedextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"07737555cf9dd336":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_l_allowsubfolders265","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_l_allowsubfolders265_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_l_allowsubfolders265_1","displayName":"True","description":null,"helpText":null}]},"0780eb3ec85ccc4a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverhttpredirect","displayName":"Exclude the HTTP redirect method (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverhttpredirect_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverhttpredirect_1","displayName":"True","description":null,"helpText":null}]},"0732b844c7dd2eb2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_hybridmode","displayName":"Disable Exchange Fast Access (User)","description":"This policy setting allows you to disable Exchange Fast Access, which forces user accounts to access data from a local cache.\r\n\r\nIf you enable this policy setting, Exchange Fast Access is not available to any Exchange Accounts on a computer.\r\n\r\nIf you disable or do not configure this policy setting, Exchange Fast Access is turned on by default for Exchange Accounts in Cached Exchange Mode.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_hybridmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_hybridmode_1","displayName":"Enabled","description":null,"helpText":null}]},"07f02fbc5ebd9c3f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc04","displayName":"Trusted Location #4 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc04_1","displayName":"Enabled","description":null,"helpText":null}]},"072f5d577a4ef60a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10","displayName":"Trusted Location #10 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_1","displayName":"Enabled","description":null,"helpText":null}]},"071fce7557c865ad":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_l_allowsubfolders47","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_l_allowsubfolders47_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_l_allowsubfolders47_1","displayName":"True","description":null,"helpText":null}]},"0732ea1a41177c86":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems","displayName":"Disable commands (User)","description":"This policy setting allows you to disable specific command bar buttons and menu items for Publisher.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, the predefined list of command bar buttons and menu items are enabled for Publisher.","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},"07ce00000905de2c":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_optionscustomizeribbon_l_displaydevelopertab","displayName":"Display Developer tab in the Ribbon (User)","description":"This policy setting controls whether the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you enable this policy setting, the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you disable this policy setting, the Developer tab will not be displayed in the Ribbon.\r\n\r\nIf you do not configure this policy setting, the Developer tab will not be displayed in the Ribbon, but its visibility can be changed via a setting in the application Options dialog box.","helpText":"","infoUrls":[],"categoryId":"6d1e32eb-61f7-4907-b9fe-b83fda8ad67d","categoryName":"Customize Ribbon","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_optionscustomizeribbon_l_displaydevelopertab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_optionscustomizeribbon_l_displaydevelopertab_1","displayName":"Enabled","description":null,"helpText":null}]},"075faab2dd934669":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsprotectdocument","displayName":"File tab | Info | Protect Document (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsprotectdocument_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsprotectdocument_1","displayName":"True","description":null,"helpText":null}]},"079409c4f7bf8946":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders27","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders27_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders27_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/08.json b/public/intune-definitions/08.json new file mode 100644 index 000000000000..b01fa35aeeba --- /dev/null +++ b/public/intune-definitions/08.json @@ -0,0 +1 @@ +{"08c98b03c6c54e2f":{"id":"com.apple.airplay_passwords_item_deviceid","displayName":"Device ID","description":"The device ID of the AirPlay destination; used in macOS.","helpText":null,"infoUrls":[],"categoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","categoryName":"AirPlay","options":null},"087c503869dac3e1":{"id":"com.apple.ldap.account_ldapaccounthostname","displayName":"LDAP Account Host Name","description":"The server’s address.","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":null},"082f3d79e4eeda3c":{"id":"com.apple.loginwindow_shutdowndisabled","displayName":"Shut Down Disabled","description":"If true, disables the Shut Down button.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_shutdowndisabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_shutdowndisabled_true","displayName":"True","description":null,"helpText":null}]},"088f6d301d9a3d22":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"08089dbe8e99b469":{"id":"com.apple.managedclient.preferences_defaultclipboardsetting","displayName":"Default clipboard site permission","description":"This policy controls the default value for the clipboard site permission.\n\nSetting the policy to 2 blocks sites from using the clipboard site permission.\n\nSetting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use an API.\n\nThis policy can be overridden for specific URL patterns using the \"ClipboardAllowedForUrls\" and \"ClipboardBlockedForUrls\" policies.\n\nThis policy only affects clipboard operations controlled by the clipboard site permission and doesn't affect sanitized clipboard writes or trusted copy and paste operations.\n\nPolicy options mapping:\n\n* BlockClipboard (2) = Do not allow any site to use the clipboard site permission\n\n* AskClipboard (3) = Allow sites to ask the user to grant the clipboard site permission\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultclipboardsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultclipboardsetting_0","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultclipboardsetting_1","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},"08c35d1b352fde88":{"id":"com.apple.managedclient.preferences_enforcementlevel_tamperprotection","displayName":"Enforcement level","description":"Specifies if tamper protection is disabled, in audit mode, or enforced","helpText":null,"infoUrls":[],"categoryId":"5c4df3be-80b0-40cc-a8c8-0258120b0de5","categoryName":"Tamper protection","options":[{"id":"com.apple.managedclient.preferences_enforcementlevel_tamperprotection_0","displayName":"disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enforcementlevel_tamperprotection_1","displayName":"audit","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enforcementlevel_tamperprotection_2","displayName":"block","description":null,"helpText":null}]},"082fa2b27782e1d5":{"id":"com.apple.managedclient.preferences_updatecache","displayName":"Update cache server","description":"Specify the HTTP(S) URL of the server that you use for cached package updates (PKG files). You must include a trailing forward slash.","helpText":null,"infoUrls":["https://macadmins.software/docs/MAU_CachingServer.pdf"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"082fc533adba33e1":{"id":"com.apple.mcx_dontallowfdedisable","displayName":"Prevent FileVault From Being Disabled","description":"Set to true to prevent FileVault from being disabled.","helpText":null,"infoUrls":[],"categoryId":"5b327ef8-f9fb-4e10-ba9e-8a8ca9bf4ed9","categoryName":"FileVault Options","options":[{"id":"com.apple.mcx_dontallowfdedisable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_dontallowfdedisable_true","displayName":"True","description":null,"helpText":null}]},"08b0d67e5be86afb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.globallyscopehttpauthcacheenabled","displayName":"Enable globally scoped HTTP auth cache","description":"This policy configures a single global per profile cache with HTTP server authentication credentials.\n\nIf you disable or don't set this policy, the browser uses the default behavior of cross-site auth. This behavior is to scope HTTP server authentication credentials by top-level site. So, if two sites use resources from the same authenticating domain, credentials need to be provided independently in the context of both sites. Cached proxy credentials are reused across sites.\n\nIf you enable this policy, HTTP auth credentials entered in the context of one site is automatically used in the context of another site.\n\nEnabling this policy leaves sites open to some types of cross-site attacks, and allows users to be tracked across sites even without cookies by adding entries to the HTTP auth cache using credentials embedded in URLs.\n\nThis policy is intended to give enterprises depending on the legacy behavior a chance to update their login procedures and will be removed in the future.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.globallyscopehttpauthcacheenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.globallyscopehttpauthcacheenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"08d12dbefd6ab9c2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepagelocation","displayName":"Configure the home page URL","description":"Configures the default home page URL in Microsoft Edge.\n\nThe home page is the page opened by the Home button. \"RestoreOnStartup\" policies control the pages that open on startup.\n\nYou can either set a URL here or set the home page to open the new tab page 'edge://newtab'. By default, the Home button opens the new tab page (as configured by the user or with the policy \"NewTabPageLocation\"), and the user is able to choose between the URL configured by this policy and the new tab page.\n\nIf you enable this policy, users can't change their home page URL, but they can choose the behavior for the Home button to open either the set URL or the new tab page. If you wish to enforce the usage of the set URL, you must also configure \"HomepageIsNewTabPage\"=Disabled.\n\nIf you disable or don't configure this policy, users can choose their own home page, as long as the \"HomepageIsNewTabPage\" policy isn't enabled.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"08ec64333d2833cd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localfontsblockedforurls","displayName":"Block Local Fonts permission on these sites","description":"Specifies a list of site URL patterns for which the local fonts permission is automatically denied. Sites in this list are prevented from accessing information about local fonts.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are supported. This policy matches based on origin only; any path in the URL pattern is ignored.\n\nIf a site isn't included in this policy, the \"DefaultLocalFontsSetting\" policy applies if configured. Otherwise, the browser default behavior applies, and users can choose the permission on a per-site basis.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"08cc2c119dcc3c94":{"id":"com.microsoft.edge.mamedgeappconfigsettings.walletdonationenabled","displayName":"Wallet Donation Enabled (Deprecated)","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\n\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\n\nIf you disable this policy, users can't use the Wallet Donation feature.\n\nThis policy is deprecated because the Wallet Donation feature has been removed from Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.walletdonationenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.walletdonationenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"088f790c26e6ff19":{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype","displayName":"Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)","description":"This policy setting allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. Changing the encryption method has no effect if the drive is already encrypted, or if encryption is in progress.\n\nIf you enable this policy setting you will be able to configure an encryption algorithm and key cipher strength for fixed data drives, operating system drives, and removable data drives individually. For fixed and operating system drives, we recommend that you use the XTS-AES algorithm. For removable drives, you should use AES-CBC 128-bit or AES-CBC 256-bit if the drive will be used in other devices that are not running Windows 10 (Version 1511).\n\nIf you disable or do not configure this policy setting, BitLocker will use AES with the same bit strength (128-bit or 256-bit) as the \"Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7)\" and \"Choose drive encryption method and cipher strength\" policy settings (in that order), if they are set. If none of the policies are set, BitLocker will use the default encryption method of XTS-AES 128-bit or the encryption method specified by the setup script.”\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp#encryptionmethodbydrivetype"],"categoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","categoryName":"BitLocker Drive Encryption","options":[{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_1","displayName":"Enabled","description":null,"helpText":null}]},"086401ae018ef535":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxdownloadtime_bits_maxdownloadseconds","displayName":"Active Job Timeout in seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"087acde96e993941":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_searchlist_dns_searchlistlabel","displayName":"DNS Suffixes:","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":null},"080ceec9a18dda89":{"id":"device_vendor_msft_policy_config_admx_help_helpqualifiedrootdir_comp","displayName":"Restrict potentially unsafe HTML Help functions to specified folders","description":"This policy setting allows you to restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders and their subfolders. Alternatively, you can disable these commands on the entire system. It is strongly recommended that only folders requiring administrative privileges be added to this policy setting.\r\n\r\n If you enable this policy setting, the commands function only for .chm files in the specified folders and their subfolders.\r\n\r\n To restrict the commands to one or more folders, enable the policy setting and enter the desired folders in the text box on the Settings tab of the Policy Properties dialog box. Use a semicolon to separate folders. For example, to restrict the commands to only .chm files in the %windir%\\help folder and D:\\somefolder, add the following string to the edit box: \"%windir%\\help;D:\\somefolder\".\r\n\r\n Note: An environment variable may be used, (for example, %windir%), as long as it is defined on the system. For example, %programfiles% is not defined on some early versions of Windows.\r\n\r\n The \"Shortcut\" command is used to add a link to a Help topic, and runs executables that are external to the Help file. The \"WinHelp\" command is used to add a link to a Help topic, and runs a WinHLP32.exe Help (.hlp) file.\r\n\r\n To disallow the \"Shortcut\" and \"WinHelp\" commands on the entire local system, enable the policy setting and leave the text box on the Settings tab of the Policy Properties dialog box blank.\r\n\r\n If you disable or do not configure this policy setting, these commands are fully functional for all Help files.\r\n\r\n Note: Only folders on the local computer can be specified in this policy setting. You cannot use this policy setting to enable the \"Shortcut\" and \"WinHelp\" commands for .chm files that are stored on mapped drives or accessed using UNC paths.\r\n\r\n For additional options, see the \"Restrict these programs from being launched from Help\" policy.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-help#admx-help-helpqualifiedrootdir-comp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_help_helpqualifiedrootdir_comp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_help_helpqualifiedrootdir_comp_1","displayName":"Enabled","description":null,"helpText":null}]},"086e51fac026a8a9":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_weather","displayName":"Weather","description":"This policy setting configures the synchronization of user settings for the Weather app.\r\nBy default, the user settings of Weather sync between computers. Use the policy setting to prevent the user settings of Weather from synchronizing between computers.\r\nIf you enable this policy setting, Weather user settings continue to sync.\r\nIf you disable this policy setting, Weather user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-weather"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_weather_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_weather_1","displayName":"Enabled","description":null,"helpText":null}]},"08278a0a4882ba6d":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enablesmartscreen","displayName":"Configure Windows Defender SmartScreen","description":"This policy allows you to turn Windows Defender SmartScreen on or off. SmartScreen helps protect PCs by warning users before running potentially malicious programs downloaded from the Internet. This warning is presented as an interstitial dialog shown before running an app that has been downloaded from the Internet and is unrecognized or known to be malicious. No dialog is shown for apps that do not appear to be suspicious.\r\n\r\nSome information is sent to Microsoft about files and programs run on PCs with this feature enabled.\r\n\r\nIf you enable this policy, SmartScreen will be turned on for all users. Its behavior can be controlled by the following options:\r\n\r\n• Warn and prevent bypass\r\n• Warn\r\n\r\nIf you enable this policy with the \"Warn and prevent bypass\" option, SmartScreen's dialogs will not present the user with the option to disregard the warning and run the app. SmartScreen will continue to show the warning on subsequent attempts to run the app.\r\n\r\nIf you enable this policy with the \"Warn\" option, SmartScreen's dialogs will warn the user that the app appears suspicious, but will permit the user to disregard the warning and run the app anyway. SmartScreen will not warn the user again for that app if the user tells SmartScreen to run the app.\r\n\r\nIf you disable this policy, SmartScreen will be turned off for all users. Users will not be warned if they try to run suspicious apps from the Internet.\r\n\r\nIf you do not configure this policy, SmartScreen will be enabled by default, but users may change their settings.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-enablesmartscreen"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enablesmartscreen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enablesmartscreen_1","displayName":"Enabled","description":null,"helpText":null}]},"081fbc77726e4b46":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_photos","displayName":"Microsoft Photos ** (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_photos_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_photos_1","displayName":"True","description":null,"helpText":null}]},"0807080aed309add":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply","description":"Setting the policy specifies a list of origins (URLs) or hostname patterns (such as *.example.com) for which security restrictions on insecure origins won't apply. Organizations can specify origins for legacy applications that can't deploy TLS or set up a staging server for internal web development, so developers can test out features requiring secure contexts without having to deploy TLS on the staging server. This policy also prevents the origin from being labeled \"Not Secure\" in the address bar.\r\n\r\nSetting a list of URLs in this policy amounts to setting the command-line flag --unsafely-treat-insecure-origin-as-secure to a comma-separated list of the same URLs. The policy overrides the command-line flag and UnsafelyTreatInsecureOriginAsSecure, if present.\r\n\r\nFor more information on secure contexts, see Secure Contexts ( https://www.w3.org/TR/secure-contexts ).\r\n\r\nExample value:\r\n\r\nhttp://testserver.example.com/\r\n*.example.org","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"0816430102a019b3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc","displayName":"Automatically select client certificates for these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"089ffd7f874a6716":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_enterprisecustomlabelforbrowser","displayName":"Set a custom enterprise label for a managed browser (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"085e4c2e32125450":{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites","displayName":"Security Zones: Do not allow users to add/delete sites","description":"Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level.\n\nIf you enable this policy, the site management settings for security zones are disabled. (To see the site management settings for security zones, in the Internet Options dialog box, click the Security tab, and then click the Sites button.)\n\nIf you disable this policy or do not configure it, users can add Web sites to or remove sites from the Trusted Sites and Restricted Sites zones, and alter settings for the Local Intranet zone.\n\nThis policy prevents users from changing site management settings for security zones established by the administrator.\n\nNote: The \"Disable the Security page\" policy (located in \\User Configuration\\Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel), which removes the Security tab from the interface, takes precedence over this policy. If it is enabled, this policy is ignored.\n\nAlso, see the \"Security zones: Use only machine settings\" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotallowuserstoaddsites"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites_1","displayName":"Enabled","description":null,"helpText":null}]},"083c160fb7505eac":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, the permission is set to Medium Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonejavapermissions"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"088afe96b20cf281":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowscriptlets"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"084cf3f4187337e6":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript","displayName":"Allow updates to status bar via script","description":"This policy setting allows you to manage whether script is allowed to update the status bar within the zone.\n\nIf you enable this policy setting, script is allowed to update the status bar.\n\nIf you disable or do not configure this policy setting, script is not allowed to update the status bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowupdatestostatusbarviascript"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_1","displayName":"Enabled","description":null,"helpText":null}]},"0866d8aab4509699":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_recoveryconsole_allowfloppycopyandaccesstoalldrivesandallfolders","displayName":"Recovery Console Allow Floppy Copy And Access To All Drives And All Folders","description":"Recovery console: Allow floppy copy and access to all drives and all folders Enabling this security option makes the Recovery Console SET command available, which allows you to set the following Recovery Console environment variables: AllowWildCards: Enable wildcard support for some commands (such as the DEL command). AllowAllPaths: Allow access to all files and folders on the computer. AllowRemovableMedia: Allow files to be copied to removable media, such as a floppy disk. NoCopyPrompt: Do not prompt when overwriting an existing file. Default: This policy is not defined and the recover console SET command is not available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#recoveryconsole_allowfloppycopyandaccesstoalldrivesandallfolders"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"0809361075111405":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_applicationlocalevalue","displayName":"Application locale (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":null},"08a16ea53da5215a":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls","displayName":"Allow the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\r\n\r\n * 'WebHidBlockedForUrls' (Block the WebHID API on these sites) (if there is a match),\r\n\r\n * 'DefaultWebHidGuardSetting' (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns must not conflict with 'WebHidBlockedForUrls'. Neither policy takes precedence if a URL matches both patterns.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"087bef07e4adc75a":{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning","description":"This policy controls whether third-party storage partitioning is allowed by default.\r\n\r\nIf this policy is set to 1 - AllowPartitioning, or unset, third-party storage partitioning will be allowed by default. This default may be overridden for specific top-level origins by other means.\r\n\r\nIf this policy is set to 2 - BlockPartitioning, third-party storage partitioning will be disabled for all contexts.\r\n\r\nUse ThirdPartyStoragePartitioningBlockedForOrigins to disable third-party storage partitioning for specific top-level origins.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowPartitioning (1) = Allow third-party storage partitioning by default.\r\n\r\n* BlockPartitioning (2) = Disable third-party storage partitioning.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"08a1d52972883274":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket","displayName":"Maximum number of concurrent connections to the proxy server for WebSocket requests","description":"Specifies the maximum number of simultaneous connections to a proxy server for WebSocket requests.\r\n\r\nTo configure limits for non-WebSocket requests, see the 'MaxConnectionsPerProxy' (Maximum number of concurrent connections to the proxy server) policy.\r\n\r\nIf you don't configure this policy, the default value of 32 is used.\r\n\r\nSome web applications maintain multiple concurrent connections (for example, long-lived or hanging requests). Setting a value lower than the default may cause networking delays when many such applications are open.\r\n\r\nSome proxy servers cannot handle a high number of concurrent connections per client. In these cases, reducing the value of this policy may improve reliability.\r\n\r\nThe supported range is 6 to 256:\r\n- Values less than 6 are treated as 6.\r\n- Values greater than 256 are treated as 256.\r\n\r\nWe recommend modifying this value only if required by your proxy server configuration or network environment.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket_1","displayName":"Enabled","description":null,"helpText":null}]},"083312513e86b8e8":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84. (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThe Web Components v0 APIs (Shadow DOM v0, Custom Elements v0, and HTML Imports) were deprecated in 2018, and have been disabled by default starting in M80. This policy allows these features to be selectively re-enabled until M84.\r\n\r\n If you set this policy is set to True, the Web Components v0 features will be enabled for all sites.\r\n\r\n If you set this policy to False or don't set this policy, the Web Components v0 features will be disabled by default, starting in M80.\r\n\r\n This policy will be removed after Microsoft Edge 84.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"08151b5e121f7e32":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_visioexe117","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_visioexe117_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_visioexe117_1","displayName":"True","description":null,"helpText":null}]},"0865a9a3667ea8e7":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature","displayName":"Mime Sniffing Safety Feature","description":"Mime Sniffing","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_1","displayName":"Enabled","description":null,"helpText":null}]},"08e865a554a7dee3":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_excelexe1","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_excelexe1_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_excelexe1_1","displayName":"True","description":null,"helpText":null}]},"08bc8c8516040176":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_userincontroloftheseapps","displayName":"Let Apps Access Background Spatial Perception User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the user movements privacy setting for the listed apps. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessbackgroundspatialperception_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"08748f37a6cdd704":{"id":"device_vendor_msft_policy_config_remotedesktopservices_ts_server_remoteapp_use_shellappruntime","displayName":"Enable enhanced shell experience for RemoteApp","description":"This policy setting enables an enhanced shell experience for RemoteApp sessions, offering support for default file associations, Run/RunOnce registry keys, and more. This policy setting applies only to RemoteApp sessions and does not apply to Remote Desktop sessions.\n\nIf you enable or do not configure this policy setting, RemoteApp sessions on RD Session Host servers will have the enhanced shell experience.\n\nIf you disable this policy setting, RemoteApp sessions will not have the enhanced shell experience and will use the legacy shell behavior. This may be needed if compatibility issues arise in published RemoteApp programs.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-ts-server-remoteapp-use-shellappruntime"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_ts_server_remoteapp_use_shellappruntime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_ts_server_remoteapp_use_shellappruntime_1","displayName":"Enabled","description":null,"helpText":null}]},"08bd4d26dfe6ad11":{"id":"device_vendor_msft_policy_config_userrights_adjustmemoryquotasforprocess","displayName":"Adjust Memory Quotas For Process","description":"Adjust memory quotas for a process - This privilege determines who can change the maximum memory that can be consumed by a process. This privilege is useful for system tuning on a group or user basis.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#adjustmemoryquotasforprocess"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"0819760aac099db1":{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent","displayName":"Enable automatic sample submissions","description":"Sends sample files to Microsoft to help protect device users and your organization from potential threats","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-automatic-sample-submissions"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent_none","displayName":"None","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent_safe","displayName":"Safe","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent_all","displayName":"All","description":null,"helpText":null}]},"08e9aeab78edf4f6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_pathcolon47","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"08b0aa144580ebb1":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromnetwork","displayName":"Hide the \"Add programs from your network\" option (User)","description":"Prevents users from viewing or installing published programs.\r\n\r\nThis setting removes the \"Add programs from your network\" section from the Add New Programs page. The \"Add programs from your network\" section lists published programs and provides an easy way to install them.\r\n\r\nPublished programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users that the programs are available, to recommend their use, or to enable users to install them without having to search for installation files.\r\n\r\nIf you enable this setting, users cannot tell which programs have been published by the system administrator, and they cannot use Add or Remove Programs to install published programs. However, they can still install programs by using other methods, and they can view and install assigned (partially installed) programs that are offered on the desktop or on the Start menu.\r\n\r\nIf you disable this setting or do not configure it, \"Add programs from your network\" is available to all users.\r\n\r\nNote: If the \"Hide Add New Programs page\" setting is enabled, this setting is ignored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddfromnetwork"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromnetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromnetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"08039a8cafefbfec":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoaddremovetoolbar","displayName":"Prevent users from adding or removing toolbars (User)","description":"This policy setting allows you to prevent users from adding or removing toolbars.\r\n\r\nIf you enable this policy setting, the user is not allowed to add or remove any toolbars to the taskbar. Applications are not able to add toolbars either.\r\n\r\nIf you disable or do not configure this policy setting, the users and applications are able to add toolbars to the taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnoaddremovetoolbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoaddremovetoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoaddremovetoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},"0869f2d16dcb83ef":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended","displayName":"Use System Default Printer as Default (User)","description":"Setting the policy to Enabled means Google Chrome uses the OS default printer as the default destination for print preview.\r\n\r\nSetting the policy to Disabled or leaving it unset means Google Chrome uses the most recently used printer as the default destination for print preview.","helpText":"","infoUrls":[],"categoryId":"20ceae56-e189-46ec-a440-791ce7454017","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"085e840c326aac4e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation","displayName":"Set the roaming profile directory (User)","description":"Configures the directory that Google Chrome will use for storing the roaming copy of the profiles.\r\n\r\nIf you set this policy, Google Chrome will use the provided directory to store the roaming copy of the profiles if the RoamingProfileSupportEnabled policy has been enabled. If the RoamingProfileSupportEnabled policy is disabled or left unset the value stored in this policy is not used.\r\n\r\nSee https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables for a list of variables that can be used.\r\n\r\nOn non-Windows platforms, this policy must be set for roaming profiles to work.\r\n\r\nOn Windows, if this policy is left unset, the default roaming profile path will be used.\r\n\r\nExample value: ${roaming_app_data}\\chrome-profile","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"0801810d6f714544":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_firstpartysetsoverrides","displayName":"Override First-Party Sets. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"da78ddbc-fc94-48f9-8808-4b160d6f1d50","categoryName":"First- Party Sets Settings","options":null},"088d0394f7e566ef":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation","displayName":"Check for accessibility issues while editing (User)","description":"This policy setting controls whether accessibility issues are checked for automatically while the user is editing a workbook. By default, accessibility issues aren’t checked for automatically.\r\n\r\nIf you enable this policy setting, accessibility issues are checked for automatically and users won’t be able to turn it off. The status bar will indicate if accessibility recommendations are available to make the workbook more usable by people with disabilities.\r\n\r\nIf you disable or don’t configure this policy setting, accessibility issues won’t be checked for automatically while editing a workbook. Users can turn on automatic checking by going to File > Options > Ease of Access.\r\n","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"0829e289ca308afc":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid","displayName":"Allow software to run or install even if the signature is invalid (User)","description":"This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file.\n\nIf you enable this policy setting, users will be prompted to install or run files with an invalid signature.\n\nIf you disable this policy setting, users cannot run or install files with an invalid signature.\n\nIf you do not configure this policy, users can choose to run or install files with an invalid signature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsoftwarewhensignatureisinvalid"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_1","displayName":"Enabled","description":null,"helpText":null}]},"08ad367393f3574b":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowaccesstodatasources"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"083a3dedacd70e84":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowuserdatapersistence"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"085a0f13b0f4f4db":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled","displayName":"Allow features to download assets from the Asset Delivery Service (User)","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\r\nThese assets can be config files or Machine Learning models that power the features that use this service.\r\n\r\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\r\n\r\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0844391b5c70f725":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls_loopbacknetworkallowedforurlsdesc","displayName":"Allow sites to make network requests to the local device. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"0836cdc1d49178b2":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_insecurecontentblockedforurlsdesc","displayName":"Block insecure content on specified sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"08f446364e7b7fce":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_managedconfigurationperorigin","displayName":"Sets managed configuration values for websites to specific origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0857cbdca1927c86":{"id":"user_vendor_msft_policy_config_office16v13~policy~l_microsoftofficesystem~l_pdfandxps_l_pdfprotectionfromoffice","displayName":"Use the Sensitivity feature in Office to apply sensitivity labels to PDFs (User)","description":"This policy setting controls whether sensitivity labels powered by Microsoft Purview Information Protection are applied to PDFs created in Word, Excel, and PowerPoint.​\r\n\r\nIf you enable this policy setting or don’t configure it, PDFs will inherit the sensitivity label and encryption from the source Word, Excel, and PowerPoint document.\r\n\r\nIf you disable this policy setting, PDFs created in Word, Excel, and PowerPoint do not inherit their source file’s sensitivity labels and encryption. When the source file is encrypted, users who do not have the rights to remove protection cannot export to PDF.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. For more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2220953.","helpText":"","infoUrls":[],"categoryId":"5b1be2c5-9939-4b2e-b29b-b22069455c90","categoryName":"Microsoft Save As PDF and XPS add-ins","options":[{"id":"user_vendor_msft_policy_config_office16v13~policy~l_microsoftofficesystem~l_pdfandxps_l_pdfprotectionfromoffice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v13~policy~l_microsoftofficesystem~l_pdfandxps_l_pdfprotectionfromoffice_1","displayName":"Enabled","description":null,"helpText":null}]},"088f4451409ed23f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlooksendforreview","displayName":"Outlook: 'send for review' (User)","description":"\"Enable 'send for review\"': Enables the Send For Review feature. | \"Exclude author's e-mail in documents\": Enables the Send For Review feature, but the authors e-mail is not recorded on the sent document. | \"Disable 'send for review\"': Disables the Send For Review feature.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlooksendforreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlooksendforreview_1","displayName":"Enabled","description":null,"helpText":null}]},"081399b5f73074ce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_icelandic","displayName":"Icelandic (User)","description":"Enables the editing language Icelandic","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_icelandic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_icelandic_1","displayName":"Enabled","description":null,"helpText":null}]},"0873c96714c210ae":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions_l_signinoptions5","displayName":"Block signing into Office (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions_l_signinoptions5_0","displayName":"Both IDs allowed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions_l_signinoptions5_1","displayName":"Microsoft Account only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions_l_signinoptions5_2","displayName":"Org ID only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions_l_signinoptions5_3","displayName":"None allowed","description":null,"helpText":null}]},"0837573e143ab890":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"08c1d514faf85572":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc09_l_pathcolon09","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"0822b2cc11f663c6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog05","displayName":"Trusted Catalog Location #5 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog05_1","displayName":"Enabled","description":null,"helpText":null}]},"08e5f045c8c8f58a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofitemstoscanfromtoday_l_empty428","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":null},"08cb9b804eea7607":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage68","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage68_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage68_1","displayName":"True","description":null,"helpText":null}]},"08e944b0740b30b5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_deleteexpireditemsemailfoldersonly","displayName":"Delete expired items (e-mail folders only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_deleteexpireditemsemailfoldersonly_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_deleteexpireditemsemailfoldersonly_1","displayName":"True","description":null,"helpText":null}]},"08546659c786cfa6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbooksearch","displayName":"Turn off Hierarchical Address Book search (User)","description":"This policy setting controls entry points to search in the Hierarchical Address Book (HAB).\r\n\r\nIf you enable this policy setting, all entry points to search features in the HAB will be turned off. \r\n\r\nIf you disable or do not configure this policy setting, all entry points to search features in the HAB will be enabled.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbooksearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbooksearch_1","displayName":"Enabled","description":null,"helpText":null}]},"0809c0cdbe567db5":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages","displayName":"Web Pages (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_1","displayName":"Enabled","description":null,"helpText":null}]},"08baf0903d474c43":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjeditdirectlycell","displayName":"Edit directly in cell (User)","description":"Allows editing directly in the selected cell.\r\n \r\nIf you enable this setting, users can directly edit a cell's value.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"d33133b4-77df-429a-9580-ed70f7da676d","categoryName":"Edit options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjeditdirectlycell_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjeditdirectlycell_1","displayName":"Enabled","description":null,"helpText":null}]},"085a06e1f43daf73":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_l_pjweeks11","displayName":"Weeks (User)","description":"","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_l_pjweeks11_0","displayName":"w","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_l_pjweeks11_1","displayName":"wk","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_l_pjweeks11_2","displayName":"week","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_l_pjweeks11_3","displayName":"\r\n ","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_l_pjweeks11_4","displayName":"\r\n ","description":null,"helpText":null}]},"08c06b744c09184d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultstartpage_l_pjusedefaultstartpage34","displayName":"Project Guide Functionality and Layout page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"81bc8383-43a5-4c6a-9d51-951e86028934","categoryName":"Project Guide settings for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultstartpage_l_pjusedefaultstartpage34_1","displayName":"Use Microsoft Project's Default page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultstartpage_l_pjusedefaultstartpage34_0","displayName":"Use a custom page","description":null,"helpText":null}]},"08b4b26dcbb49b9c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems1","displayName":"Disable commands (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"categoryId":"4e4deef0-4528-47d5-8869-4143c506f18b","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems1_1","displayName":"Enabled","description":null,"helpText":null}]},"08cb34573e734d0e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_pathcolon76","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/09.json b/public/intune-definitions/09.json new file mode 100644 index 000000000000..b476cfb4b018 --- /dev/null +++ b/public/intune-definitions/09.json @@ -0,0 +1 @@ +{"099813ed1be6ad89":{"id":"ade_setupassistant_safety","displayName":"Emergency SOS","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_safety_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_safety_1","displayName":"Show","description":null,"helpText":null}]},"093cd89264d6f449":{"id":"com.apple.airprint_airprint_item_ipaddress","displayName":"IP Address","description":"The IP address or hostname of the AirPrint destination.","helpText":null,"infoUrls":[],"categoryId":"429c4b85-a2b4-46ed-afa0-6c89c08a5544","categoryName":"AirPrint","options":null},"09ad17c34902d91d":{"id":"com.apple.app.lock_app_options_enablevoiceover","displayName":"Enable Voice Over","description":"If true, enables Voice Over.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_enablevoiceover_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_enablevoiceover_true","displayName":"True","description":null,"helpText":null}]},"09bbbd472ce1a2aa":{"id":"com.apple.managedclient.preferences_allowvisualbasictobindtosystem","displayName":"Allow Visual Basic macros to use system APIs","description":"Allow Visual Basic macros to use DECLARE to bind to the system() OS API. Recommended: false.","helpText":null,"infoUrls":["https://aka.ms/macvbpref"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_allowvisualbasictobindtosystem_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowvisualbasictobindtosystem_true","displayName":"True","description":null,"helpText":null}]},"09607361b65daa9b":{"id":"com.apple.managedclient.preferences_newtabpagesetfeedtype","displayName":"Configure the Microsoft Edge new tab page experience","description":"Lets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\n\nWhen you set this policy to Microsoft News feed experience (0), users will see the Microsoft News feed experience on the new tab page.\n\nWhen you set this policy to Office 365 feed experience (1), users with an Azure Active Directory browser sign-in will see the Office 365 feed experience on the new tab page.\n\nIf you disable or don't configure this policy:\n\n- Users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, as well as the standard new tab page feed experience.\n\n- Users without an Azure Active Directory browser sign-in will see the standard new tab page experience.\n\nIf you configure this policy *and* the \"NewTabPageLocation\" policy, \"NewTabPageLocation\" has precedence.\n\nDefault setting: Disabled or not configured.\n\n* 0 = Microsoft News feed experience\n\n* 1 = Office 365 feed experience","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagesetfeedtype"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpagesetfeedtype_0","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpagesetfeedtype_1","displayName":"Office 365 feed experience","description":null,"helpText":null}]},"0928ba680d4dcc41":{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"0967f791ae9cfc0b":{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture","displayName":"Screen Capture","description":"Allows the application to capture (read) the contents of the system display. A profile can't grant access to the contents; it can only deny it.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"09d440ee12ed2b45":{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"09cedcc6054262be":{"id":"com.apple.universalaccess_slowkey","displayName":"Slow Key","description":"If true, enables \"Slow Keys\" in the Keyboard options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_slowkey_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_slowkey_true","displayName":"True","description":null,"helpText":null}]},"0905238510d9dbdc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled","displayName":"Shopping in Microsoft Edge Enabled","description":"This policy lets users compare the prices of a product they're looking at, get coupons or rebates from the website they're on, autoapply coupons, and help checkout faster using autofill data.\n\nIf you enable or don't configure this policy, shopping features such as price comparison, coupons, rebates, and express checkout are automatically applied for retail domains. Coupons for the current retailer and prices from other retailers are fetched from a server.\n\nIf you disable this policy, shopping features such as price comparison, coupons, rebates, and express checkout aren't automatically found for retail domains.\n\nStarting from version 90.0.818.56, the behavior of the messaging letting users know that there's a coupon, rebate, price comparison, or price history available on shopping domains is also done through a horizontal banner below the address bar. Previously, this messaging was done on the address bar.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"09852d2de184bbc7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled","displayName":"Extensions Performance Detector enabled","description":"This policy controls if users can access the Extensions Performance Detector Recommended Action feature in Browser Essentials. This feature alerts extension users if their extensions are causing performance regressions in the browser and allows them to take action to resolve the issue.\n\nIf you enable or don't configure this policy, users receive Extensions Performance Detector notifications from Browser Essentials. When there's an active alert, users are able to view the impact of extensions on their browser's performance and make an informed decision to disable impacting extensions. The detector will exclude browser-managed extensions, such as Google Docs offline, component extensions, and organization-managed extensions (that is, extensions that can't be disabled).\n\nIf you disable this policy, users won't receive notifications or be able to view the Extensions Performance Detector Recommended Action.","helpText":null,"infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"09de6cd390e815a5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagehidedefaulttopsites","displayName":"Hide the default top sites from the new tab page","description":"Hides the default top sites from the new tab page in Microsoft Edge.\n\nIf you set this policy to true, the default top site tiles are hidden.\n\nIf you set this policy to false or don't configure it, the default top site tiles remain visible.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagehidedefaulttopsites_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagehidedefaulttopsites_true","displayName":"Enabled","description":null,"helpText":null}]},"09d02feb15cd6894":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nolockscreen","displayName":"Do not display the lock screen","description":"This policy setting controls whether the lock screen appears for users.\r\n\r\nIf you enable this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see their selected tile after locking their PC.\r\n\r\nIf you disable or do not configure this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see a lock screen after locking their PC. They must dismiss the lock screen using touch, the keyboard, or by dragging it with the mouse.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nolockscreen"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nolockscreen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nolockscreen_1","displayName":"Enabled","description":null,"helpText":null}]},"092e4a1220d61586":{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogramcommandlineparameters_eventviewer_redirectionprogramcommandlineparameters","displayName":"Events.asp program command line parameters","description":null,"helpText":"","infoUrls":[],"categoryId":"3453c694-bc38-4082-9d3d-886e385df927","categoryName":"Event Viewer","options":null},"09b25e57f91c2c13":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_rules_exploitguard_asr_rules_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","categoryName":"Attack Surface Reduction","options":null},"0961c2456ef53282":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_wpptracinglevel","displayName":"Configure WPP tracing level","description":"This policy allows you to configure tracing levels for Windows software trace preprocessor (WPP Software Tracing). \r\n Tracing levels are defined as:\r\n 1 - Error\r\n 2 - Warning\r\n 3 - Info\r\n 4 - Debug\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-wpptracinglevel"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_wpptracinglevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_wpptracinglevel_1","displayName":"Enabled","description":null,"helpText":null}]},"090bacbcc0d834e0":{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_2","displayName":"Prevent press and hold","description":"Prevents press and hold actions on hardware buttons, so that only one action is available per button.\r\n\r\nIf you enable this policy, press and hold actions are unavailable, and the button configuration dialog will display the following text: \"Some settings are controlled by Group Policy. If a setting is unavailable, contact your system administrator.\"\r\n\r\nIf you disable this policy, press and hold actions for buttons will be available.\r\n\r\nIf you do not configure this policy, press and hold actions will be available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventpressandhold-2"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_2_1","displayName":"Enabled","description":null,"helpText":null}]},"09c233fdba559532":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_internalnamedetails","displayName":"Internal name","description":"The Internal name of the selected file as stated in the file attributes.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"09bf735388598907":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_alternativebrowserpath","displayName":"Alternative browser to launch for configured websites. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"09e64ac111fe98f0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting","displayName":"Default geolocation setting","description":"Setting the policy to 1 lets sites track the users' physical location as the default state. Setting the policy to 2 denies this tracking by default. You can set the policy to ask whenever a site wants to track the users' physical location.\r\n\r\nLeaving the policy unset means the AskGeolocation policy applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"0952a2e2f165837a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl","displayName":"Default search provider suggest URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"092080552e2edaaa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport","displayName":"Include non-standard port in Kerberos SPN","description":"Setting the policy to Enabled and entering a nonstandard port (in other words, a port other than 80 or 443) includes it in the generated Kerberos SPN.\r\n\r\nSetting the policy to Disabled or leaving it unset means the generated Kerberos SPN won't include a port.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport_1","displayName":"Enabled","description":null,"helpText":null}]},"09b623a8b9723e11":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors","displayName":"Allow certificates issued by local trust anchors without subjectAlternativeName extension","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"09b79f83aea1d031":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated","displayName":"Relaunch fast if outdated","description":"Specifies the minimum release age beyond which relaunch notifications are more aggressive. The age is calculated from the time the currently-running version was last served to clients.\r\n\r\nIf a browser relaunch or device restart is needed to finalize a pending update and the current version has been outdated for more than the number of days specified by this setting, the RelaunchNotificationPeriod policy is overridden to 2 hours. If the RelaunchNotification policy is set to 1 ('Required'), users will be forced to relaunch or restart at the end of the period.\r\n\r\nIf not set, or if the release age cannot be determined, the RelaunchNotificationPeriod policy will be used for all updates.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_1","displayName":"Enabled","description":null,"helpText":null}]},"09dfe55ae132d7f9":{"id":"device_vendor_msft_policy_config_defender_disablecatchupquickscan","displayName":"Disable Catchup Quick Scan","description":"This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. If you enable this setting, catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. If you disable or do not configure this setting, catch-up scans for scheduled quick scans will be turned off. Supported values:0 - Disabled1 - Enabled (default)OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/DisableCatchupQuickScan","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#disablecatchupquickscan"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_disablecatchupquickscan_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_disablecatchupquickscan_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"090ed2805bcc8f3e":{"id":"device_vendor_msft_policy_config_experience_allowsyncmysettings","displayName":"Allow Sync My Settings","description":"Allows or disallows all Windows sync settings on the device. For information about what settings are sync'ed, see About sync setting on Windows 10 devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowsyncmysettings"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowsyncmysettings_0","displayName":"Block","description":"Sync settings are not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowsyncmysettings_1","displayName":"Allow","description":"Sync settings allowed.","helpText":null}]},"09f6ab5c05f0b9b7":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"094127a4fa8a9cc0":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"094584cd89163ee6":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"096b4204eb6c1822":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowuserdatapersistence"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"09cb7a1d2e08a1d4":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist","displayName":"Control which extensions are installed silently","description":"Specifies extensions that are installed silently, without user interaction, and that the users can't uninstall or disable (\"force-installed\"). All permissions requested by the extensions are granted implicitly, without user interaction, including any additional permissions requested by future versions of the extension. Furthermore, permissions are granted for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These two APIs are only available to extensions that are force-installed.)\r\n\r\nThis policy takes precedence over a potentially conflicting 'ExtensionInstallBlocklist' (Control which extensions cannot be installed) policy. When you take an extension off of the force-installed list it's automatically uninstalled by Microsoft Edge.\r\n\r\nFor Windows devices that aren't joined to a Microsoft Active Directory domain, forced installation is limited to extensions available in the Microsoft Store.\r\n\r\nNote that users can modify the source code of any extension by using Developer Tools, potentially rendering the extension dysfunctional. If this is a concern, set the 'DeveloperToolsAvailability' (Control where developer tools can be used) policy.\r\n\r\nUse the following format to add an extension to the list:\r\n\r\n[extensionID];[updateURL]\r\n\r\n- extensionID - the 32-letter string found on edge://extensions when in developer mode.\r\n\r\n- updateURL (optional) is the address of the Update Manifest XML document for the app or extension, as described at https://go.microsoft.com/fwlink/?linkid=2095043. If you don't set the updateURL, the Microsoft Store update URL is used (currently https://edge.microsoft.com/extensionwebstorebase/v1/crx). Note that the update URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL indicated in the extension's manifest.\r\n\r\nFor example, gggmmkjegpiggikcnhidnjjhmicpibll;https://edge.microsoft.com/extensionwebstorebase/v1/crx installs the Microsoft Online app from the Microsoft Store \"update\" URL. For more information about hosting extensions, see: https://go.microsoft.com/fwlink/?linkid=2095044.\r\n\r\nIf you don't configure this policy, no extensions are installed automatically, and users can uninstall any extension in Microsoft Edge.\r\n\r\nNote that this policy doesn't apply to InPrivate mode.\r\n\r\nExample value:\r\n\r\ngbchcmhmhahfdphkhkmpfmihenigjmpp;https://edge.microsoft.com/extensionwebstorebase/v1/crx\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"0996be1530cb4786":{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled","displayName":"Mouse Gesture Enabled","description":"This policy lets you configure the Mouse Gesture feature in Microsoft Edge.\r\n\r\nThis feature provides an easy way for users to complete tasks like scroll forward or backward, open new tab, refresh page, etc. They can finish a task by pressing and holding the mouse right button to draw certain patterns on a webpage, instead of clicking the buttons or using keyboard shortcuts.\r\n\r\nIf you enable or don't configure this policy, you can use the Mouse Gesture feature on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Mouse Gesture feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"099ee89f8d2c7bcd":{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled","displayName":"Enables default browser settings campaigns","description":"This policy enables the default browser settings campaign. If a user clicks to accept the campaign, their default browser and/or default search engine will be changed to Microsoft Edge and Microsoft Bing, respectively. If the user dismisses the campaign, the user's browser settings will remain unchanged.\r\n\r\nIf you enable or don't configure this policy, users will be prompted to set Microsoft Edge as the default browser and Microsoft Bing as the default search engine, if they do not have those browser settings.\r\n\r\nIf you disable this policy, users will not be prompted to set Microsoft Edge as the default browser, or to set Microsoft Bing as the default search engine.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"09bcf577eaa7bcf0":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled","displayName":"Enable Hiding of Native Windows","description":"Enables hiding of native windows in Microsoft Edge.\r\n\r\nIf you enable this setting, to reduce CPU and power consumption Microsoft Edge will detect when a window is covered by other windows, and will suspend work painting pixels.\r\n\r\nIf you disable this setting Microsoft Edge will not detect when a window is covered by other windows.\r\n\r\nIf this policy is left not set, window hiding detection will be enabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"09288e0f9f620d7c":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended","displayName":"Enable Password reveal button","description":"Lets you configure the default display of the browser password reveal button for password input fields on websites.\r\n\r\nIf you enable or don't configure this policy, the browser user setting defaults to displaying the password reveal button.\r\n\r\nIf you disable this policy, the browser user setting won't display the password reveal button.\r\n\r\nFor accessibility, users can change the browser setting from the default policy.\r\n\r\nThis policy only affects the browser password reveal button, it doesn't affect websites' custom reveal buttons.","helpText":"","infoUrls":[],"categoryId":"a877a2ff-f144-421f-814c-593e972a8a20","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"094f0f91ff6a6c6c":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled","displayName":"Enable implicit sign-in","description":"Configure this policy to allow/disallow implicit sign-in.\r\n\r\nIf you have configured the 'BrowserSignin' (Browser sign-in settings) policy to 'Disable browser sign-in', this policy will not take any effect.\r\n\r\nIf you enable or don't configure this setting, implicit sign-in will be enabled, Edge will attempt to sign the user into their profile based on what and how they sign in to their OS.\r\n\r\nIf you disable this setting, implicit sign-in will be disabled.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"098a200bdc705c1a":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior","displayName":"Configure ShadowStack crash rollback behavior (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 109.\r\n\r\nThis policy is deprecated because it's intended to serve only as a short-term mechanism to give enterprises more time to update their environments and report issues if they are found to be incompatible with Hardware-enforced Stack Protection. It won't work in Microsoft Edge as soon as version 109.\r\n\r\nMicrosoft Edge includes a Hardware-enforced Stack Protection security feature. This feature may result in the browser crashing unexpectedly in cases that do not represent an attempt to compromise the browser's security.\r\n\r\nUsing this policy, you may control the behavior of the Hardware-enforced Stack Protection feature after a crash triggered by this feature is encountered.\r\n\r\nSet this policy to 'Disable' to disable the feature.\r\n\r\nSet this policy to 'DisableUntilUpdate' to disable the feature until Microsoft Edge updates next time.\r\n\r\nSet this policy to 'Enable' to keep the feature enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable Hardware-enforced Stack Protection\r\n\r\n* DisableUntilUpdate (1) = Disable Hardware-enforced Stack Protection until the next Microsoft Edge update\r\n\r\n* Enable (2) = Enable Hardware-enforced Stack Protection\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"0932a8bf79e7a940":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload","displayName":"Restrict File Download","description":"Restrict File Download","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_1","displayName":"Enabled","description":null,"helpText":null}]},"09cfbda77d88d396":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgazeinput","displayName":"Let Apps Access Gaze Input","description":"This policy setting specifies whether Windows apps can access the eye tracker.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgazeinput"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"0917a325050e80b5":{"id":"device_vendor_msft_policy_config_userrights_profilesystemperformance","displayName":"Profile System Performance","description":"This security setting determines which users can use performance monitoring tools to monitor the performance of system processes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#profilesystemperformance"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"090e8a6bdd43121d":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile_updateconfigurationfile_textbox","displayName":"Custom Path to the Update Config (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":null},"09f0dbe2dd1b0e26":{"id":"device_vendor_msft_policy_config_windowslogon_dontdisplaynetworkselectionui","displayName":"Do not display network selection UI","description":"This policy setting allows you to control whether anyone can interact with available networks UI on the logon screen.\n\nIf you enable this policy setting, the PC's network connectivity state cannot be changed without signing into Windows.\n\nIf you disable or don't configure this policy setting, any user can disconnect the PC from the network or can connect the PC to other available networks without signing into Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-dontdisplaynetworkselectionui"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_windowslogon_dontdisplaynetworkselectionui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_dontdisplaynetworkselectionui_1","displayName":"Enabled","description":null,"helpText":null}]},"092d2f547b26d72a":{"id":"enrollment_autopilot_dpp_applydevicerenametemplate","displayName":"Apply device name template","description":"Create a naming template to add names to your devices during enrollment.","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_applydevicerenametemplate_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_applydevicerenametemplate_1","displayName":"Yes","description":null,"helpText":null}]},"094eb48664d0a463":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser","displayName":"Set Group Policy refresh interval for users (User)","description":"This policy setting specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a background update rate only for the Group Policies in the User Configuration folder.\r\n\r\nIn addition to background updates, Group Policy for users is always updated when users log on.\r\n\r\nBy default, user Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes.\r\n\r\nIf you enable this setting, you can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the computer tries to update user Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.\r\n\r\nIf you disable this setting, user Group Policy is updated every 90 minutes (the default). To specify that Group Policy for users should never be updated while the computer is in use, select the \"Turn off background refresh of Group Policy\" setting.\r\n\r\nThis setting also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously, the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However, updates might be delayed significantly.\r\n\r\nImportant: If the \"Turn off background refresh of Group Policy\" setting is enabled, this setting is ignored.\r\n\r\nNote: This setting establishes the update rate for user Group Policies. To set an update rate for computer Group Policies, use the \"Group Policy refresh interval for computers\" setting (located in Computer Configuration\\Administrative Templates\\System\\Group Policy).\r\n\r\nTip: Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated, the Windows desktop is refreshed; it flickers briefly and closes open menus. Also, restrictions imposed by Group Policies, such as those that limit the programs a user can run, might interfere with tasks in progress.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-grouppolicyrefreshrateuser"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_1","displayName":"Enabled","description":null,"helpText":null}]},"09842a8cd1d87c94":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders_disableknownfolders_prompt","displayName":"Disable these Known Folders. (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"09d97fdce9e75800":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventmusicfilemetadataretrieval","displayName":"Prevent Music File Media Information Retrieval (User)","description":"This policy setting allows you to prevent media information for music files from being retrieved from the Internet.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically obtaining media information for music files such as Windows Media Audio (WMA) and MP3 files from the Internet. In addition, the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box in the first use dialog box and on the Privacy and Media Library tabs in the Player are not selected and are not available.\r\n\r\nIf you disable or do not configure this policy setting, users can change the setting of the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventmusicfilemetadataretrieval"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventmusicfilemetadataretrieval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventmusicfilemetadataretrieval_1","displayName":"Enabled","description":null,"helpText":null}]},"09e994f9ae659d3d":{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_noautorun_dropdown","displayName":"Default AutoRun Behavior (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_noautorun_dropdown_1","displayName":"Do not execute any autorun commands","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_noautorun_dropdown_2","displayName":"Automatically execute autorun commands","description":null,"helpText":null}]},"092d069df9d9d045":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist","displayName":"Force disable spellcheck languages (User)","description":"Force-disables spellcheck languages. Unrecognized languages in that list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be disabled for the languages specified. The user can still enable or disable spellcheck for languages not in the list.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the SpellcheckEnabled policy is set to false, this policy will have no effect.\r\n\r\nIf a language is included in both this policy and the SpellcheckLanguage policy, the latter is prioritized and the spellcheck language will be enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"09d11000990f7411":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback.: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"0917d6487a934ed3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters_alternativebrowserparametersdesc","displayName":"Command-line parameters for the alternative browser. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"0984e92da829faae":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_filesystemreadaskforurlsdesc","displayName":"Allow read access via the File System API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"09ec2569c0559d8a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nLeaving the policy unset means DefaultFileSystemWriteGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with FileSystemWriteAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"092cefb53f75a573":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_extensioninstallsourcesdesc","displayName":"URL patterns to allow extension, app, and user script installs from (User)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"098720f33fee1bc1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2","displayName":"Retrieve configurations and experiments","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1","displayName":"Retrieve configurations only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null}]},"09629d17254e887e":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls","displayName":"Block multiple automatic downloads in quick succession on specific sites (User)","description":"Define a list of sites, based on URL patterns, where multiple successive automatic downloads aren't allowed.\r\nIf you don't configure this policy, 'DefaultAutomaticDownloadsSetting' (Default automatic downloads setting) applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\r\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\n[*.]contoso.com","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"09ee76d003abb67d":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_allowed","displayName":"Don't restrict users' HTTPS-Only Mode setting","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_disallowed","displayName":"Disable HTTPS-Only Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode in Strict mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_force_balanced_enabled","displayName":"Force enable HTTPS-Only Mode in Balanced Mode","description":null,"helpText":null}]},"09f0667dcbc0c42e":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox","displayName":"New tab page search box experience (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox_redirect","displayName":"Address bar","description":null,"helpText":null}]},"09db34a15804ebfd":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow","displayName":"Set the time interval for relaunch (User)","description":"Specifies a target time window for the end of the relaunch notification period.\r\n\r\nUsers are notified of the need for a browser relaunch or device restart based on the 'RelaunchNotification' (Notify a user that a browser restart is recommended or required for pending updates) and 'RelaunchNotificationPeriod' (Set the time period for update notifications) policy settings. Browsers and devices are forcibly restarted at the end of the notification period when the 'RelaunchNotification' policy is set to 'Required'. This RelaunchWindow policy can be used to defer the end of the notification period so that it falls within a specific time window.\r\n\r\nIf you don't configure this policy, the default target time window is the whole day (i.e., the end of the notification period is never deferred).\r\n\r\nNote: Though the policy can accept multiple items in entries, all but the first item are ignored.\r\nWarning: Setting this policy may delay application of software updates.\r\n\r\nExample value:\r\n\r\n{\r\n \"entries\": [\r\n {\r\n \"duration_mins\": 240,\r\n \"start\": {\r\n \"hour\": 2,\r\n \"minute\": 15\r\n }\r\n }\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"entries\": [{\"duration_mins\": 240, \"start\": {\"hour\": 2, \"minute\": 15}}]}","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_1","displayName":"Enabled","description":null,"helpText":null}]},"09a22d936d5bfdd9":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"09b8503b53e54c2d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontaininganattachment","displayName":"Only containing an attachment (User)","description":"Defines the default message body text used in an email request for review when the review document is included only as an attachment.","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontaininganattachment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontaininganattachment_1","displayName":"Enabled","description":null,"helpText":null}]},"096ae902c1b082a2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize351_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":null},"0904d40a93a05095":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypestemplatefiles","displayName":"Office template files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypestemplatefiles_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypestemplatefiles_1","displayName":"True","description":null,"helpText":null}]},"09895a82b3294d86":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings_l_model3dblockedextensions_l_model3dblocklist","displayName":"List of file extensions to block: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"095f9fa0725204f2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_l_urladdressofassociatedwebpage58","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"099830e0e125e61f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehaviorforaddins","displayName":"Configure fast shutdown behavior for add-ins (User)","description":"This policy setting controls Outlook's \"fast shutdown\" behavior for add-ins.\r\n\r\nIf you enable this policy setting, the BeginShutdown and OnDisconnection events should always be called for all add-ins. \r\n\r\nIf you disable or do not configure this policy setting, all Outlook addins should always use the Addin Fast Shutdown behavior and not have the BeginShutdown and OnDisconnection events called.","helpText":"","infoUrls":[],"categoryId":"ffb0a109-2507-42b3-b26f-9f667f2d5029","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehaviorforaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehaviorforaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"09411db5aeaa4c74":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting~l_messageformat_l_messageformateditor","displayName":"Set message format (User)","description":"This policy setting controls the default message format in Outlook. \r\n\r\nIf you do not configure this policy setting, new e-mail messages in Outlook are formatted as HTML. \r\n\r\nIf you enable this policy setting, you can set the default e-mail format in Outlook to HTML, Rich Text, or plain text. Users can choose a format other than the default when composing messages. \r\n\r\nIf you disable this policy setting, Outlook uses HTML as the default e-mail format and users will not be able to change it. \r\n\r\nIf you do not configure this policy setting, Outlook uses HTML as the default e-mail format, but users can choose a format other than the default when composing messages.","helpText":"","infoUrls":[],"categoryId":"25df12bc-5ebd-4db2-8930-5d27690f3e60","categoryName":"Message Format","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting~l_messageformat_l_messageformateditor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting~l_messageformat_l_messageformateditor_1","displayName":"Enabled","description":null,"helpText":null}]},"0939cd0494e0f398":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_defaultrssfeeds_l_defaultrsssubscriptionspart_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":null},"094bc3d6ce9e3780":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_setnumberofplacesintherecentplaceslist","displayName":"Number of folders in the Recent Folders list (User)","description":"This policy setting specifies the number of unpinned entries displayed in the Recent Folders list that appears when users click Open or Save As on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of unpinned entries to be between 0 and 20. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 5 unpinned items are displayed in the Recent Folders list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Folders list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_setnumberofplacesintherecentplaceslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_setnumberofplacesintherecentplaceslist_1","displayName":"Enabled","description":null,"helpText":null}]},"091e666bdd4e415b":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_descriptioncolon22","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"09f3e00b47118cd0":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_stencils","displayName":"Stencils (User)","description":"Displays the additional location of stencils. When a location is added here, stencils in this location are listed on the Shapes submenu from the file menu.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_stencils_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_stencils_1","displayName":"Enabled","description":null,"helpText":null}]},"097e8e17c72ff3d3":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_l_datecolon33","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"09b4e7630b8082f2":{"id":"vendor_msft_firewall_mdmstore_global_enableauditmode","displayName":"Enable Audit Mode","description":"This value specifies if the target machine is in Firewall Audit Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_global_enableauditmode_false","displayName":"Indicates that Audit mode is disabled","description":"Indicates that Audit mode is disabled","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_enableauditmode_true","displayName":"Indicates that Audit mode is enabled","description":"Indicates that Audit mode is enabled","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/0a.json b/public/intune-definitions/0a.json new file mode 100644 index 000000000000..af8dedce3730 --- /dev/null +++ b/public/intune-definitions/0a.json @@ -0,0 +1 @@ +{"0accfc887f438c70":{"id":"app_privacy_permissiondefaults_generickey","displayName":"ANY","description":"The dictionary that defines the app privacy permission defaults. Each key is an app identifier.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"0ae04299e909ee1a":{"id":"com.apple.applicationaccess_allowfingerprintforunlock","displayName":"Allow Fingerprint For Unlock","description":"If false, prevents Touch ID or Face ID from unlocking a device. Available in iOS 7 and later, and macOS 10.12.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfingerprintforunlock_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfingerprintforunlock_true","displayName":"True","description":null,"helpText":null}]},"0a1102051fc8804f":{"id":"com.apple.applicationaccess_allowotapkiupdates","displayName":"Allow OTAPKI Updates","description":"If false, disables over-the-air PKI updates. Setting this restriction to false doesn’t disable CRL and OCSP checks. Available in iOS 7 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowotapkiupdates_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowotapkiupdates_true","displayName":"True","description":null,"helpText":null}]},"0ac97ce3ac05dc7b":{"id":"com.apple.applicationaccess_com.apple.applicationaccess","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"0ad77ebc89b33e8c":{"id":"com.apple.assetcache.managed_cachelimit","displayName":"Cache Limit","description":"The maximum number of bytes of disk space that will be used for the content cache. A value of 0 means unlimited disk space.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"0a2805a1908c19b9":{"id":"com.apple.assetcache.managed_localsubnetsonly","displayName":"Local Subnets Only","description":"If true, the content cache offers content to clients only on the same immediate local network only. No content is offered to clients on other networks reachable by the content cache. If LocalSubnetsOnly is set to true, ListenRanges will be ignored.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_localsubnetsonly_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_localsubnetsonly_true","displayName":"True","description":null,"helpText":null}]},"0abfbfa1e5ed48bc":{"id":"com.apple.dnssettings.managed_ondemandrules_item_urlstringprobe","displayName":"URL String Probe","description":"A URL to probe. If this URL is successfully fetched (returning a 200 HTTP status code) without redirection, this rule matches.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"0aaf8ac14608c115":{"id":"com.apple.managedclient.preferences_restrictsignintopattern","displayName":"Restrict which accounts can be used as Microsoft Edge primary accounts","description":"Determines which accounts can be set as browser primary accounts in Microsoft Edge (the account that is chosen during the Sync opt-in flow).\n\nIf a user tries to set a browser primary account with a username that doesn't match this pattern, they are blocked and see an appropriate error message.\n\nIf you don't configure this policy or leave it blank, users can set any account as a browser primary account in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#restrictsignintopattern"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"0a39adad371b485f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading","description":"If you set this policy to 3, websites can ask for read access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\n\nIf you don't set this policy, websites can ask for access. Users can change this setting.\n\nPolicy options mapping:\n\n* BlockFileSystemRead (2) = Don't allow any site to request read access to files and directories via the File System API\n\n* AskFileSystemRead (3) = Allow sites to ask the user to grant read access to files and directories via the File System API\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemreadguardsetting_blockfilesystemread","displayName":"Don't allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemreadguardsetting_askfilesystemread","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},"0a3d363f69ff679a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcesync","displayName":"Force synchronization of browser data and do not show the sync consent prompt","description":"Forces data synchronization in Microsoft Edge. This policy also prevents the user from turning off sync.\n\nIf you don't configure this policy, users can turn on or turn off sync. If you enable this policy, users can't turn off sync.\n\nFor this policy to work as intended,\n\"BrowserSignin\" policy must not be configured, or must be set to enabled. If \"BrowserSignin\" is set to disabled, then \"ForceSync\" doesn't take affect.\n\n\"SyncDisabled\" must not be configured or must be set to False. If this policy is set to True, \"ForceSync\" doesn't take affect. If you wish to ensure specific datatypes sync or don't sync, use the \"ForceSyncTypes\" policy and \"SyncTypesListDisabled\" policy, respectively.\n\n0 = Do not automatically start sync and show the sync consent (default)\n1 = Force sync to turn on for Azure AD/Azure AD-Degraded user profile and do not show the sync consent prompt","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcesync_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcesync_true","displayName":"Enabled","description":null,"helpText":null}]},"0a8ed8a726bd6ca3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.loopbacknetworkblockedforurls","displayName":"Block sites from making network requests to the local device.","description":"Specifies a list of URL patterns for which requests initiated from matching origins to loopback addresses (127.0.0.1, ::1, localhost) are blocked from issuing Local Network Access requests.\n\nIf a requesting origin matches a URL pattern specified in this policy, requests to loopback addresses are blocked.\n\nFor origins not covered by this policy, the user's personal settings and local network access restrictions apply.\n\nMultiple policies can specify origins that affect requests to the local device. If an origin matches more than one of the following policies, they are applied in the following order of precedence:\n- LoopbackNetworkBlockedForUrls\n- LoopbackNetworkAllowedForUrls\n- LocalNetworkAccessBlockedForUrls\n- LocalNetworkAccessAllowedForUrls\n\nNote: This policy improves local network security by blocking specified public websites from accessing loopback addresses. It helps prevent unauthorized external sites from reaching local services running on the device unless explicitly permitted.\n\nFor more information about Local Network Access, see https://wicg.github.io/local-network-access/","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"0ac3b747b1a61094":{"id":"device_vendor_msft_policy_config_admx_bits_bits_enablepeercaching","displayName":"Allow BITS Peercaching","description":"This policy setting determines if the Background Intelligent Transfer Service (BITS) peer caching feature is enabled on a specific computer. By default, the files in a BITS job are downloaded only from the origin server specified by the job's owner.\r\n\r\n If BITS peer caching is enabled, BITS caches downloaded files and makes them available to other BITS peers. When transferring a download job, BITS first requests the files for the job from its peers in the same IP subnet. If none of the peers in the subnet have the requested files, BITS downloads them from the origin server.\r\n\r\n If you enable this policy setting, BITS downloads files from peers, caches the files, and responds to content requests from peers. Using the \"Do not allow the computer to act as a BITS peer caching server\" and \"Do not allow the computer to act as a BITS peer caching client\" policy settings, it is possible to control BITS peer caching functionality at a more detailed level. However, it should be noted that the \"Allow BITS peer caching\" policy setting must be enabled for the other two policy settings to have any effect.\r\n\r\n If you disable or do not configure this policy setting, the BITS peer caching feature will be disabled, and BITS will download files directly from the origin server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-enablepeercaching"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_enablepeercaching_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_enablepeercaching_1","displayName":"Enabled","description":null,"helpText":null}]},"0ae30de80e7b7a0a":{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefaultcredentials_allowdefaultcredentials_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"0a899d929a81c02e":{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_2","displayName":"Do not allow window animations","description":"This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. \r\n\r\nIf you enable this policy setting, window animations are turned off. \r\n\r\nIf you disable or do not configure this policy setting, window animations are turned on. \r\n\r\nChanging this policy setting requires a logoff for it to be applied.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdisallowanimations-2"],"categoryId":"d52dd970-febb-4891-8eb7-1c8616cfb6cb","categoryName":"Desktop Window Manager","options":[{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_2_1","displayName":"Enabled","description":null,"helpText":null}]},"0a0759645b3b72d7":{"id":"device_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_2","displayName":"Do not process the legacy run list","description":"This policy setting ignores the customized run list.\r\n\r\nYou can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts.\r\n\r\nIf you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional.\r\n\r\nIf you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.\r\n\r\nNote: To create a customized run list by using a policy setting, use the \"Run these applications at startup\" policy setting.\r\n\r\nAlso, see the \"Do not process the run once list\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disableexplorerrunlegacy-2"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_2_1","displayName":"Enabled","description":null,"helpText":null}]},"0ab0a4eff1f3a22b":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_proxyserver","displayName":"Define proxy server for connecting to the network","description":"This policy setting allows you to configure the named proxy that should be used when the client attempts to connect to the network for security intelligence updates and MAPS reporting. If the named proxy fails or if there is no proxy specified, the client will fall back to the alternative options (in order):\r\n 1. Proxy server (if specified)\r\n 2. Proxy .pac URL (if specified)\r\n 3. None\r\n 4. Internet Explorer proxy settings\r\n 5. Autodetect\r\n\r\n If you enable this setting, the proxy will be set to the specified URL according to the order specified above. The URL should be proceeded with either http:// or https://.\r\n\r\n If you disable or do not configure this setting, the proxy will skip over this fallback step according to the order specified above.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-proxyserver"],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},"0ab752db8f5f7c8b":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_screensavergraceperiod","displayName":"MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)","description":"MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-screensavergraceperiod"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_screensavergraceperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_screensavergraceperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"0acb68257817b6ec":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_loc","displayName":"Configure RD Connection Broker server name","description":"This policy setting allows you to specify the RD Connection Broker server that the RD Session Host server uses to track and redirect user sessions for a load-balanced RD Session Host server farm. The specified server must be running the Remote Desktop Connection Broker service. All RD Session Host servers in a load-balanced farm should use the same RD Connection Broker server.\r\n\r\nIf you enable this policy setting, you must specify the RD Connection Broker server by using its fully qualified domain name (FQDN). In Windows Server 2012, for a high availability setup with multiple RD Connection Broker servers, you must provide a semi-colon separated list of the FQDNs of all the RD Connection Broker servers.\r\n\r\nIf you disable or do not configure this policy setting, the policy setting is not specified at the Group Policy level.\r\n\r\nNotes:\r\n\r\n 1. For Windows Server 2008, this policy setting is supported on at least Windows Server 2008 Standard.\r\n\r\n 2. This policy setting is not effective unless the Join RD Connection Broker policy setting is enabled.\r\n\r\n 3. To be an active member of an RD Session Host server farm, the computer account for each RD Session Host server in the farm must be a member of one of the following local groups on the RD Connection Broker server: Session Directory Computers, Session Broker Computers, or RDS Endpoint Servers.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sd-loc"],"categoryId":"0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","categoryName":"RD Connection Broker","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_loc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_loc_1","displayName":"Enabled","description":null,"helpText":null}]},"0a01f2a07a6f4c68":{"id":"device_vendor_msft_policy_config_authentication_allowfastreconnect","displayName":"Allow Fast Reconnect","description":"Allows EAP Fast Reconnect from being attempted for EAP Method TLS. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#allowfastreconnect"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":[{"id":"device_vendor_msft_policy_config_authentication_allowfastreconnect_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_allowfastreconnect_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"0aaede04c034b691":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl_proxypacurl","displayName":"URL to a proxy .pac file (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"0a5132c17b97b6f8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"0a9b0f1088d90211":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_enterprisewebstorename","displayName":"Enterprise web store name (deprecated) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"0aa23202c4f6bd2e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_ntpshortcuts","displayName":"Setting shortcuts on the New Tab Page (Beta) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"0a9c6902517adfbc":{"id":"device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular","displayName":"Allow VPN Roaming Over Cellular","description":"Prevents the device from connecting to VPN when the device roams over cellular networks. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowvpnroamingovercellular"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"0ae97f8d369115ed":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"0a4375f410734171":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_additionalsources","displayName":"Additional Sources:","description":"","helpText":"","infoUrls":[],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":null},"0adc2a0d77a1c11a":{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_secondaryhomepageslist","displayName":"Secondary home pages","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":null},"0a83e8eaf4ae2fc7":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"0abc4da9c31a0e94":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist","displayName":"Configure list of allowed authentication servers","description":"Specifies which servers to enable for integrated authentication. Integrated authentication is only enabled when Microsoft Edge receives an authentication challenge from a proxy or from a server in this list.\r\n\r\nSeparate multiple server names with commas. Wildcards (*) are allowed.\r\n\r\nIf you don't configure this policy, Microsoft Edge tries to detect if a server is on the intranet - only then will it respond to IWA requests. If the server is on the internet, IWA requests from it are ignored by Microsoft Edge.\r\n\r\nExample value: *contoso.com,contoso.com","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"0a8348aa30d30f57":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended","displayName":"Enable the default search provider","description":"Enables the ability to use a default search provider.\r\n\r\nIf you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn't a URL).\r\n\r\nYou can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured) or configured incorrectly, the user can choose the default provider.\r\n\r\nIf you disable this policy, the user can't search from the address bar.\r\n\r\nIf you enable or disable this policy, users can't change or override it.\r\n\r\nIf you don't configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0aef137ed2c4d12c":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemWriteGuardSetting' (Control use of the File System API for writing) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemWriteBlockedForUrls' (Block write access to files and directories on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0a45b4da91c15a58":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_smartactionsblocklistdesc","displayName":"Block smart actions for a list of services (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0a0726aee9310581":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_visioexe89","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_visioexe89_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_visioexe89_1","displayName":"True","description":null,"helpText":null}]},"0a5966f8c216705c":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_forcedenytheseapps","displayName":"Let Apps Access Messaging Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"0a139a9817040917":{"id":"device_vendor_msft_policy_config_remotedesktopservices_enablemicrosoftentraidauthenticationenforcement","displayName":"Enable Microsoft Entra ID Authentication Enforcement","description":"This policy setting allows you to specify whether to require server-side enforcement of Microsoft Entra ID authentication.\n\nIf you enable this policy setting, all Remote Desktop Services clients must use RDS AAD Auth in order to authenticate to RD Session Host servers. \n\nThis policy does not allow fallback to other authentication methods. \n\nNetwork Level Authentication (NLA) is required to be enabled in order for this policy to be effective. Refer to the \"Require user authentication for remote connections by using Network Level Authentication\" policy.\n\nIf you disable or do not configure this policy setting, then Microsoft Entra ID Authentication Enforcement is not enforced.\n","helpText":"","infoUrls":["https://learn.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-enablemicrosoftentraidauthenticationenforcement"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_enablemicrosoftentraidauthenticationenforcement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_enablemicrosoftentraidauthenticationenforcement_1","displayName":"Enabled","description":null,"helpText":null}]},"0a46939ea2427037":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewmicrosoftedge","displayName":"Allow users in the Windows Insider Program to be enrolled in Edge Preview","description":"Lets you specify whether users in the Windows Insider Program are enrolled in Edge Preview via Microsoft Edge Update.\r\n\r\n - If you enable (1) this policy, users in the Windows Insider Program are enrolled in Edge Preview via Microsoft Edge Update.\r\n\r\n - If you disable (0) this policy, users in the Windows Insider Program cannot be enrolled in Edge Preview via Microsoft Edge Update.\r\n\r\n - If you don't configure this policy, users in the Windows Insider Program are enrolled in Edge Preview via Microsoft Edge Update by default.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"0a21f610f56fac60":{"id":"device_vendor_msft_policy_config_userrights_accesscredentialmanagerastrustedcaller","displayName":"Access Credential Manager As Trusted Caller","description":"This user right is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users' saved credentials might be compromised if this privilege is given to other entities.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#accesscredentialmanagerastrustedcaller"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"0a8687fdb6a93e46":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork","displayName":"Use Windows Hello For Business (User)","description":"Windows Hello for Business is an alternative method for signing into Windows using your Active Directory or Azure Active Directory account that can replace passwords, Smart Cards, and Virtual Smart Cards.\n\nIf you enable or do not configure this policy setting, the device provisions Windows Hello for Business for all users.\n\nIf you disable this policy setting, the device does not provision Windows Hello for Business for any user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork_false","displayName":"false","description":"Disabled","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork_true","displayName":"true","description":"Enabled","helpText":null}]},"0a939a37be9a49fc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkacc","displayName":"Ctrl+K (File tab | Options | Customize | All Commands | Insert Hyperlinks) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkacc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkacc_1","displayName":"True","description":null,"helpText":null}]},"0a4cb60802ed4345":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dfs","displayName":"Distributed File System (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-dfs"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dfs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dfs_1","displayName":"Enabled","description":null,"helpText":null}]},"0a319c405312fee4":{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist","displayName":"Package Point and print - Approved servers (User)","description":"Restricts package point and print to approved servers.\r\n\r\nThis policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the \"Point and Print Restrictions\" policy that governs the behavior of non-package point and print connections.\r\n\r\nWindows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server.\r\n\r\nIf this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers.\r\n\r\nIf this setting is disabled, or not configured, package point and print will not be restricted to specific print servers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-packagepointandprintserverlist"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_1","displayName":"Enabled","description":null,"helpText":null}]},"0aa5515c10e62b39":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy","displayName":"Google Chrome cloud policy overrides Platform policy. (User)","description":"Setting the policy to Enabled means cloud policy takes precedence if it conflicts with platform policy.\r\n\r\nSetting the policy to Disabled or leaving it unset means platform policy takes precedence if it conflicts with cloud policy.\r\n\r\nThis mandatory policy affects machine scope cloud policies.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"0afc2cecf7ca058c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended","displayName":"Configure the home page URL (User)","description":"Setting the policy sets the default homepage URL in Google Chrome. You open the homepage using the Home button. On desktop, the RestoreOnStartup policies control the pages that open on startup.\r\n\r\nIf the homepage is set to the New Tab Page, by the user or HomepageIsNewTabPage, this policy has no effect.\r\n\r\n The URL needs a standard scheme, such as http://example.com or https://example.com. When this policy is set, users can't change their homepage URL in Google Chrome.\r\n\r\nLeaving both HomepageLocation and HomepageIsNewTabPage unset lets users choose their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0a30a0526fec6223":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls_javascriptblockedforurlsdesc","displayName":"Block JavaScript on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"0ae1c12cb7747794":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_javascriptjitallowedforsitesdesc","displayName":"Allow JavaScript to use JIT on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"0a49671d5388d49b":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"0a751c78be6a8bf6":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"0af3cdc82063904c":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405","displayName":"Script ActiveX controls marked safe for scripting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_1","displayName":"Prompt","description":null,"helpText":null}]},"0a0492736c92699d":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc","displayName":"Allow Window Management permission on specified sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"0a1990ad06a6ef33":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled","displayName":"Enable Work Search suggestions in the address bar (User)","description":"Enables the display of relevant workplace suggestions in the address bar’s suggestion dropdown when users type a query in the address bar.\r\n\r\nIf this policy is enabled or not configured, users can view internal work-related suggestions, such as bookmarks, files, and people results powered by Microsoft 365, in the Microsoft Edge address bar suggestion dropdown. To access these results, users must be signed into Microsoft Edge with their Entra ID account associated with that organization.\r\n\r\nIf this policy is disabled, users will not see internal workplace results in the Microsoft Edge address bar suggestion dropdown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0a515be2290f8f53":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms","displayName":"Prefer specific key exchange algorithms for TLS (User)","description":"This policy configures Microsoft Edge to prioritize certain key agreement algorithms (supported groups) in TLS 1.3 based on compliance requirements.\r\n\r\nIf you set this policy to 'cnsa2', Microsoft Edge prefers the algorithms required for the Commercial National Security Algorithm Suite 2.0 (CNSA 2.0). If you leave this policy unset or set it to 'default', the browser uses its standard key exchange order.\r\n\r\nThis policy does not guarantee negotiation of a specific algorithm. It is designed to help server operators distinguish clients with compliance requirements and apply higher-strength, non-default algorithms only when appropriate.\r\n\r\nIf this policy would prefer a post-quantum key agreement algorithm but PostQuantumKeyAgreementEnabled is Disabled, the post-quantum setting takes precedence.\r\n\r\nThis policy applies only to TLS 1.3 and QUIC. The default cryptography used by Microsoft Edge already provides strong security, but enabling this policy may reduce performance when accessing websites.\r\n\r\nPolicy options mapping:\r\n\r\n* CNSA2.0 (cnsa2) = Prefer key exchange methods satisfying the requirements of CNSA 2.0\r\n\r\n* Default (default) = Use Microsoft Edge's default supported groups\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: cnsa2","helpText":"","infoUrls":[],"categoryId":"120b24dd-c04a-4291-8f24-9c48fcdc1434","categoryName":"Cryptography compliance policies","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_1","displayName":"Enabled","description":null,"helpText":null}]},"0a0979a07a6e0e85":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0af773c5d921eeff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bashkir","displayName":"Bashkir (User)","description":"Enables the editing language Bashkir","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bashkir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bashkir_1","displayName":"Enabled","description":null,"helpText":null}]},"0a59942510e61e89":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanianmoldova","displayName":"Romanian (Moldova) (User)","description":"Enables the editing language Romanian (Moldova)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanianmoldova_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanianmoldova_1","displayName":"Enabled","description":null,"helpText":null}]},"0a13884e1a3f5dde":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_ukrainian","displayName":"Ukrainian (User)","description":"Enables the editing language Ukrainian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_ukrainian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_ukrainian_1","displayName":"Enabled","description":null,"helpText":null}]},"0a625e789868ecb4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog10","displayName":"Trusted Catalog Location #10 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog10_1","displayName":"Enabled","description":null,"helpText":null}]},"0a680a4d1bdde28c":{"id":"user_vendor_msft_policy_config_office16v20~policy~l_microsoftofficesystem~l_miscellaneous437_l_cloudonlysaving","displayName":"Restrict saving on non-Cloud locations (User)","description":"This policy setting controls whether Word, Excel, and PowerPoint users can use non-cloud locations (local and network) to create new files.\r\n\r\nIf you enable this policy setting, users will only have Cloud Locations available to perform SaveAs and Save new files.\r\n\r\nIf you disable or don’t configure this policy setting, users can use any location (Cloud, Local, and Network) to perform SaveAs and Save new files.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for Enterprise.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v20~policy~l_microsoftofficesystem~l_miscellaneous437_l_cloudonlysaving_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v20~policy~l_microsoftofficesystem~l_miscellaneous437_l_cloudonlysaving_1","displayName":"Enabled","description":null,"helpText":null}]},"0a93415ad71c2ce9":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnoffpdfprintinginapplicationguard","displayName":"Disable PDF printing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnoffpdfprintinginapplicationguard_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnoffpdfprintinginapplicationguard_1","displayName":"True","description":null,"helpText":null}]},"0a5cec8a70bcd307":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_disableaudosearch","displayName":"Disable audio search (User)","description":"Disables OneNote audio search feature.","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_disableaudosearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_disableaudosearch_1","displayName":"Enabled","description":null,"helpText":null}]},"0a10780255dfde27":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_usepenpressuresensitivity","displayName":"Use pen pressure sensitivity (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"84de2eed-843c-401b-a3fd-e21be88f2365","categoryName":"Pen","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_usepenpressuresensitivity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_usepenpressuresensitivity_1","displayName":"Enabled","description":null,"helpText":null}]},"0af66f19ddc785df":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook","displayName":"Configure Outlook object model prompt when accessing an address book (User) (Deprecated)","description":"This policy setting controls what happens when an untrusted program attempts to gain access to an Address Book using the Outlook object model. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to programmatically access an Address Book using the Outlook object model:\r\n\r\n- Prompt user - Users are prompted to approve every access attempt. \r\n- Automatically approve - Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended. \r\n- Automatically deny - Outlook will automatically deny programmatic access requests from any program.\r\n- Prompt user based on computer security - Outlook will rely on the setting in the ''Programmatic Access'' section of the Trust Center. This is the default behavior.\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to access the address book programmatically, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center. ","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_1","displayName":"Enabled","description":null,"helpText":null}]},"0a451d128b49f9de":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity","displayName":"Developer tab | Code | Macro Security (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity_1","displayName":"True","description":null,"helpText":null}]},"0a48c301d56057bd":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablequickstarter","displayName":"Turn off QuickStarter (User)","description":"This policy setting controls whether QuickStarter is available to users. By default, QuickStarter is available to users if they meet the language and region requirements for the feature.\r\n\r\nIf you enable this policy setting, QuickStarter won’t be available to users.\r\n\r\nIf you disable or don’t configure this policy setting, QuickStarter will be available to users if they meet the language and region requirements for the feature.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablequickstarter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablequickstarter_1","displayName":"Enabled","description":null,"helpText":null}]},"0ae99c9e052f67b6":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"0ad908a688f36ec8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]},"0a35395ac44605b2":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_enableuntrustedintranetzoneaccesstoprojectserver","displayName":"Enable untrusted intranet zone access to Project server (User)","description":"Allows users to access Project Server Web sites and Workspaces that have not been added to their trusted internet zones. If you enable this setting, users can access Project Server and Microsoft SharePoint Foundation sites that are not in their trusted internet zones. If this setting is disabled or not configured, users are required to add the Project Server and Microsoft SharePoint Foundation sites to their trusted internet site zones.","helpText":"","infoUrls":[],"categoryId":"623d41fb-000e-41d8-b955-373f8c700def","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_enableuntrustedintranetzoneaccesstoprojectserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_enableuntrustedintranetzoneaccesstoprojectserver_1","displayName":"Enabled","description":null,"helpText":null}]},"0a8951d11166255c":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacros","displayName":"Developer tab | Code | Macros (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacros_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacros_1","displayName":"True","description":null,"helpText":null}]},"0a269eec3a5d0e28":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_l_allowsubfolders39","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_l_allowsubfolders39_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_l_allowsubfolders39_1","displayName":"True","description":null,"helpText":null}]},"0a85268c88ce837a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchcontractionsyoonsokuon","displayName":"Match contractions (yo-on, sokuon) (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchcontractionsyoonsokuon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchcontractionsyoonsokuon_1","displayName":"Enabled","description":null,"helpText":null}]},"0a32cbc86d42fcb3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_l_word97binarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_l_word97binarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_l_word97binarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_l_word97binarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_l_word97binarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_l_word97binarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"0a64c7bfa346fb64":{"id":"vendor_msft_firewall_mdmstore_domainprofile_logmaxfilesize","displayName":"Log Max File Size","description":"This value specifies the size, in kilobytes, of the log file where dropped packets and successful connections are logged. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured, otherwise the MdmStore value wins if it is configured, otherwise the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"0a8690967b566030":{"id":"vendor_msft_sharedpc_signinonresume","displayName":"Sign In On Resume","description":"Require signing in on waking up from sleep. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_signinonresume_false","displayName":"false","description":"False","helpText":null},{"id":"vendor_msft_sharedpc_signinonresume_true","displayName":"true","description":"True","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/0b.json b/public/intune-definitions/0b.json new file mode 100644 index 000000000000..c75fbc6f6329 --- /dev/null +++ b/public/intune-definitions/0b.json @@ -0,0 +1 @@ +{"0bac8a0cef114e71":{"id":"app_privacy_permissiondefaults_generickey_localnetwork","displayName":"Local Network","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for use of the local network.\n* `Allow`: The app privacy permission default is set to allow use of the local network.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_localnetwork_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_localnetwork_1","displayName":"Allow","description":null,"helpText":null}]},"0b8b389cbde821a2":{"id":"com.apple.app.lock_app_identifier","displayName":"App Identifier","description":"The bundle identifier of the app.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":null},"0b4943a5fda5a3db":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance","displayName":"Weekend Allowance","description":"The weekend allowance settings.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"0b0ddea7f811d3e1":{"id":"com.apple.managedclient.preferences_originkeyedprocessesenabled","displayName":"Enable origin-keyed process isolation for improved security","description":"This policy enables origin-keyed process isolation for most pages, which improves security by separating content from different origins into distinct processes. This may increase the number of processes created. Users can override this setting by using command-line flags or edge://flags to turn the feature on or off.\n\nIf you enable this policy, most origins will be isolated, even from other origins within the same site. For related configuration, see the IsolateOrigins and SitePerProcess policies.\n\nIf you disable this policy, origins will not be isolated from the rest of their site unless the origin explicitly requests isolation.\n\nIf you don’t configure this policy, the browser will decide which origins to isolate and when. By default, this feature is disabled. The default state may change in the future.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#originkeyedprocessesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_originkeyedprocessesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_originkeyedprocessesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0bb86211cc75dec5":{"id":"com.apple.notificationsettings_com.apple.notificationsettings","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":null},"0baccc59b11493c5":{"id":"com.apple.proxy.http.global_proxyserver","displayName":"Proxy Server","description":"The proxy server's network address.","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":null},"0b87e4c098aaa88e":{"id":"com.apple.security.smartcard_com.apple.security.smartcard","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"f4a8384f-9e4e-4fc6-9ee2-28fa5260347a","categoryName":"Smart Card","options":null},"0b779321ee4c16ca":{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"0bf7284afb585eeb":{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"0b9e5d8054dd4983":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled","displayName":"Edge Wallet E-Tree Enabled (Deprecated)","description":"This policy is deprecated because the E-Tree feature has been removed from Microsoft Edge.\n\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\n\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0b73bb910cf74362":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability","description":"Control if Manifest v2 extensions can be used by browser.\n\nManifest v2 extensions support will be deprecated and all extensions need to be migrated to v3 in the future. More information about and the timeline of the migration hasn't been established.\n\nIf the policy is set to Default or not set, v2 extension loading is decided by browser. This follows the preceding timeline when it's established.\n\nIf the policy is set to Disable, v2 extensions installation are blocked, and existing ones are disabled. This option is going to be treated the same as if the policy is unset after v2 support is turned off by default.\n\nIf the policy is set to Enable, v2 extensions are allowed. The option is going to be treated the same as if the policy isn't set before v2 support is turned off by default.\n\nIf the policy is set to EnableForForcedExtensions, force installed v2 extensions are allowed. This includes extensions that are listed by \"ExtensionInstallForcelist\" or \"ExtensionSettings\" with installation_mode \"force_installed\" or \"normal_installed\". All other v2 extensions are disabled. The option is always available regardless of the manifest migration state.\n\nExtensions availabilities are still controlled by other policies.\n\nPolicy options mapping:\n\n* Default (0) = Default browser behavior\n\n* Disable (1) = Manifest v2 is disabled\n\n* Enable (2) = Manifest v2 is enabled\n\n* EnableForForcedExtensions (3) = Manifest v2 is enabled for forced extensions only\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_default","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_disable","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_enable","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_enableforforcedextensions","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},"0bc68d8a2821dd4f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorersetforegroundwhenactive","displayName":"Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground.","description":"This policy controls whether to always keep the active Microsoft Edge window with an Internet Explorer mode tab in the foreground.\n\nIf you enable this policy, the active Microsoft Edge window with an Internet Explorer mode tab remains in the foreground.\n\nIf you disable or don't configure this policy, the active Microsoft Edge window with an Internet Explorer mode tab isn't kept in the foreground.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorersetforegroundwhenactive_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorersetforegroundwhenactive_true","displayName":"Enabled","description":null,"helpText":null}]},"0b90668debf5bf09":{"id":"com.microsoft.edge.mamedgeappconfigsettings.screencaptureallowed","displayName":"Allow or deny screen capture","description":"If you enable this policy, or don't configure this policy, a webpage uses screen-share APIs (for example, getDisplayMedia() or the Desktop Capture extension API) for a screen capture.\nIf you disable this policy, calls to screen-share APIs fail. For example, if you're using a web-based online meeting, video or screen sharing won't work. However, this policy isn't considered.\n(and a site will be allowed to use screen-share APIs) if the site matches an origin pattern in any of the following policies:\n\"ScreenCaptureAllowedByOrigins\",\n\"WindowCaptureAllowedByOrigins\",\n\"TabCaptureAllowedByOrigins\",\n\"SameOriginTabCaptureAllowedByOrigins\".","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.screencaptureallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.screencaptureallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"0b0b2a3d6087bcf5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.windowmanagementblockedforurls","displayName":"Block Window Management permission on specified sites","description":"Lets you configure a list of site URL patterns that specify sites which can automatically deny the window management permission. This limits the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\n\nFor detailed information on valid site URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\n\nIf this policy isn't configured for a site, then the policy from \"DefaultWindowManagementSetting\" applies to the site, if configured. Otherwise the permission follows the browser's defaults and lets users choose this permission per site.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"0ba21904577962f5":{"id":"device_vendor_msft_policy_config_admx_credentialproviders_allowdomaindelaylock","displayName":"Allow users to select when a password is required when resuming from connected standby","description":"This policy setting allows you to control whether a user can change the time before a password is required when a Connected Standby device screen turns off.\r\n\r\nIf you enable this policy setting, a user on a Connected Standby device can change the amount of time after the device's screen turns off before a password is required when waking the device. The time is limited by any EAS settings or Group Policies that affect the maximum idle time before a device locks. Additionally, if a password is required when a screensaver turns on, the screensaver timeout will limit the options the user may choose.\r\n\r\nIf you disable this policy setting, a user cannot change the amount of time after the device's screen turns off before a password is required when waking the device. Instead, a password is required immediately after the screen turns off.\r\n\r\nIf you don't configure this policy setting on a domain-joined device, a user cannot change the amount of time after the device's screen turns off before a password is required when waking the device. Instead, a password is required immediately after the screen turns off.\r\n\r\nIf you don't configure this policy setting on a workgroup device, a user on a Connected Standby device can change the amount of time after the device's screen turns off before a password is required when waking the device. The time is limited by any EAS settings or Group Policies that affect the maximum idle time before a device locks. Additionally, if a password is required when a screensaver turns on, the screensaver timeout will limit the options the user may choose.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credentialproviders#admx-credentialproviders-allowdomaindelaylock"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_credentialproviders_allowdomaindelaylock_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credentialproviders_allowdomaindelaylock_1","displayName":"Enabled","description":null,"helpText":null}]},"0b945b841774da63":{"id":"device_vendor_msft_policy_config_admx_distributedlinktracking_dlt_allowdomainmode","displayName":"Allow Distributed Link Tracking clients to use domain resources","description":"Specifies that Distributed Link Tracking clients in this domain may use the Distributed Link Tracking (DLT) server, which runs on domain controllers. The DLT client enables programs to track linked files that are moved within an NTFS volume, to another NTFS volume on the same computer, or to an NTFS volume on another computer. The DLT client can more reliably track links when allowed to use the DLT server. This policy should not be set unless the DLT server is running on all domain controllers in the domain.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-distributedlinktracking#admx-distributedlinktracking-dlt-allowdomainmode"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_distributedlinktracking_dlt_allowdomainmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_distributedlinktracking_dlt_allowdomainmode_1","displayName":"Enabled","description":null,"helpText":null}]},"0b55dab3d1ff8bfb":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_enabled","displayName":"Allow or Disallow use of the Offline Files feature","description":"This policy setting determines whether the Offline Files feature is enabled. Offline Files saves a copy of network files on the user's computer for use when the computer is not connected to the network.\r\n\r\nIf you enable this policy setting, Offline Files is enabled and users cannot disable it.\r\n\r\nIf you disable this policy setting, Offline Files is disabled and users cannot enable it.\r\n\r\nIf you do not configure this policy setting, Offline Files is enabled on Windows client computers, and disabled on computers running Windows Server, unless changed by the user.\r\n\r\nNote: Changes to this policy setting do not take effect until the affected computer is restarted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-enabled"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0b128b99830eb4fe":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended","displayName":"Always Open PDF files externally","description":"Setting the policy to Enabled turns the internal PDF viewer off in Google Chrome, treats PDF files as a download, and lets users open PDFs with the default application.\r\n\r\nSetting the policy to Disabled means that unless users turns off the PDF plugin, it will open PDF files.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can choose whether to open PDF externally or not.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0ba2f208038ddd6f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended","displayName":"Show Full URLs","description":"This feature enables display of the full URL in the address bar.\r\nIf this policy is set to True, then the full URL will be shown in the address bar, including schemes and subdomains.\r\nIf this policy is set to False, then the default URL display will apply.\r\nIf this policy is left unset, then the default URL display will apply and the user will be able to toggle between default and full URL display with a context menu option.\r\n","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0b52a249b76bfd88":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":null},"0bbe704ef2c8447f":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff","displayName":"Remove Orphaned OST Files On Logoff","description":"Removes duplicate OST files.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RemoveOrphanedOSTFilesOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"0b8b241450227efe":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification","displayName":"Notify a user that a browser restart is recommended or required for pending updates","description":"Notify users that they need to restart Microsoft Edge to apply a pending update.\r\n\r\nIf you don't configure this policy, Microsoft Edge adds a recycle icon at the far right of the top menu bar to prompt users to restart the browser to apply the update.\r\n\r\nIf you enable this policy and set it to 'Recommended' (1), a recurring warning prompts users that a restart is recommended. Users can dismiss this warning and defer the restart.\r\n\r\nIf you set the policy to 'Required' (2), a recurring warning prompts users that the browser will be restarted automatically as soon as a notification period passes. The default period is seven days. You can configure this period with the 'RelaunchNotificationPeriod' (Set the time period for update notifications) policy.\r\n\r\nThe user's session is restored when the browser restarts.\r\n\r\n* 1 = Recommended - Show a recurring prompt to the user indicating that a restart is recommended\r\n\r\n* 2 = Required - Show a recurring prompt to the user indicating that a restart is required","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_1","displayName":"Enabled","description":null,"helpText":null}]},"0b78686b72a41eac":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled","displayName":"Enable the default search provider","description":"Enables the ability to use a default search provider.\r\n\r\nIf you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn't a URL).\r\n\r\nYou can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured) or configured incorrectly, the user can choose the default provider.\r\n\r\nIf you disable this policy, the user can't search from the address bar.\r\n\r\nIf you enable or disable this policy, users can't change or override it.\r\n\r\nIf you don't configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0b022a774b1c0d7a":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_1","displayName":"Allow all websites to perform automatic downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_2","displayName":"Don't allow any website to perform automatic downloads","description":null,"helpText":null}]},"0bc59e29e20e6052":{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled","displayName":"Enables DALL-E themes generation","description":"This policy lets you generate browser themes using DALL-E and apply them to Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, the AI generated themes will be enabled.\r\n\r\nIf you disable this policy, the AI generated themes will be disabled for your organization.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0b39bd455de22a9a":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides_localnetworkaccessipaddressspaceoverridesdesc","displayName":"Override IP address space mappings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"0bb3f2fdf3f97fda":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins_screencaptureallowedbyoriginsdesc","displayName":"Allow Desktop, Window, and Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"0bf1ea5a842df063":{"id":"device_vendor_msft_policy_config_mixedreality_skipcalibrationduringsetup","displayName":"Skip Calibration During Setup","description":"This policy configures whether the device will take the user through the eye tracking calibration process during device setup and first time user setup. If this policy is enabled, the device will not show the eye tracking calibration process during device setup and first time user setup. Note that until the user goes through the calibration process, eye tracking will not work on the device. If an app requires eye tracking and the user has not gone through the calibration process, the user will be prompted to do so.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#skipcalibrationduringsetup"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_skipcalibrationduringsetup_0","displayName":"Eye tracking calibration process will be shown during device setup and first time user setup.","description":"Eye tracking calibration process will be shown during device setup and first time user setup.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_skipcalibrationduringsetup_1","displayName":"Eye tracking calibration process will not be shown during device setup and first time user setup.","description":"Eye tracking calibration process will not be shown during device setup and first time user setup.","helpText":null}]},"0b4aca8163ca105e":{"id":"device_vendor_msft_policy_config_mssecurityguide_wdigestauthentication","displayName":"WDigest Authentication (disabling may require KB2871997)","description":"When WDigest authentication is enabled, Lsass.exe retains a copy of the user's plaintext password in memory, where it can be at risk of theft. Microsoft recommends disabling WDigest authentication unless it is needed.\n\nIf this setting is not configured, WDigest authentication is disabled in Windows 8.1 and in Windows Server 2012 R2; it is enabled by default in earlier versions of Windows and Windows Server.\n\nUpdate KB2871997 must first be installed to disable WDigest authentication using this setting in Windows 7, Windows 8, Windows Server 2008 R2 and Windows Server 2012.\n\nEnabled: Enables WDigest authentication.\n\nDisabled (recommended): Disables WDigest authentication. For this setting to work on Windows 7, Windows 8, Windows Server 2008 R2 or Windows Server 2012, KB2871997 must first be installed.\n\nFor more information, see http://support.microsoft.com/kb/2871997 and http://blogs.technet.com/b/srd/archive/2014/06/05/an-overview-of-kb2871997.aspx .\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-wdigestauthentication"],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_wdigestauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_wdigestauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},"0b5a09671610de4f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector_l_empty197","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":null},"0b88504be3946e63":{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_documents_checkbox","displayName":"Documents (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_documents_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_documents_checkbox_1","displayName":"True","description":null,"helpText":null}]},"0b98e0b8cc8c1f8f":{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery","displayName":"Specify the system hibernate timeout (on battery)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate.\n\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate.\n\nIf you disable or do not configure this policy setting, users control this setting.\n\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-hibernatetimeoutonbattery"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},"0bf18e3a4cdf29a8":{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum","displayName":"Use authentication for outgoing RPC connections:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum_1","displayName":"Authentication enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum_2","displayName":"Authentication disabled","description":null,"helpText":null}]},"0be42c8a24b1eb03":{"id":"device_vendor_msft_policy_config_security_requireprovisioningpackagesignature","displayName":"Require Provisioning Package Signature","description":"Specifies whether provisioning packages must have a certificate signed by a device trusted authority.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#requireprovisioningpackagesignature"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_requireprovisioningpackagesignature_0","displayName":"Not required.","description":"Not required.","helpText":null},{"id":"device_vendor_msft_policy_config_security_requireprovisioningpackagesignature_1","displayName":"Required.","description":"Required.","helpText":null}]},"0bdd76376e126538":{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments","displayName":"Allow Pinned Folder Documents","description":"This policy controls the visibility of the Documents shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderdocuments"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"0b7e8183e50a434a":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filedescription","displayName":"File description","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"0b5a3fcfd640e787":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek","displayName":"Weekly Schedule scan day","description":"Specify the day of the week when the scheduled scan should run. Select Daily to run the scan every day, or choose a specific weekday. Sunday is represented by 1, Monday by 2, and so on.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":[{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_0","displayName":"Never","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_1","displayName":"Sunday","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_2","displayName":"Monday","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_3","displayName":"Tuesday","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_4","displayName":"Wednesday","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_5","displayName":"Thursday","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_6","displayName":"Friday","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_7","displayName":"Saturday","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_dayofweek_8","displayName":"Daily","description":null,"helpText":null}]},"0b23c7dc990f0ab4":{"id":"mathsettings_systembehavior_mathnotes","displayName":"Math Notes","description":"Controls whether Math Notes is allowed in other apps such as Notes.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":[{"id":"mathsettings_systembehavior_mathnotes_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_systembehavior_mathnotes_true","displayName":"True","description":null,"helpText":null}]},"0b60fe588b460deb":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm_l_setcngcipheralgorithmid","displayName":"CNG cipher algorithm: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":null},"0b8e9a7e4cc8d58c":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders74","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders74_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders74_1","displayName":"True","description":null,"helpText":null}]},"0b17c7488ccedce9":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_1","displayName":"Send additional data when on battery power (User)","description":"This policy setting determines whether Windows Error Reporting (WER) checks if the computer is running on battery power. By default, when a computer is running on battery power, WER only checks for solutions, but does not upload additional report data until the computer is connected to a more permanent power source.\r\n\r\nIf you enable this policy setting, WER does not determine whether the computer is running on battery power, but checks for solutions and uploads report data normally.\r\n\r\nIf you disable or do not configure this policy setting, WER checks for solutions while a computer is running on battery power, but does not upload report data until the computer is connected to a more permanent power source.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypasspowerthrottling-1"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_1_1","displayName":"Enabled","description":null,"helpText":null}]},"0b7f3d618808cdf5":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_werconsentcustomize","displayName":"Customize consent settings (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":null},"0b8ff670a30d24df":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsearches","displayName":"Searches (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsearches_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsearches_1","displayName":"True","description":null,"helpText":null}]},"0b72485511bb84ed":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_linkresolveignorelinkinfo","displayName":"Do not track Shell shortcuts during roaming (User)","description":"This policy setting determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system.\r\n\r\nShortcut files typically include an absolute path to the original target file as well as the relative path to the current target file. When the system cannot find the file in the current target path, then, by default, it searches for the target in the original path. If the shortcut has been copied to a different computer, the original path might lead to a network computer, including external resources, such as an Internet server.\r\n\r\nIf you enable this policy setting, Windows only searches the current target path. It does not search for the original path even when it cannot find the target file in the current target path.\r\n\r\nIf you disable or do not configure this policy setting, Windows searches for the original path when it cannot find the target file in the current target path.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-linkresolveignorelinkinfo"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_linkresolveignorelinkinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_linkresolveignorelinkinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"0b4dbc4c1d93e5ef":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"0bc1cbd7d039b9e0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection","displayName":"Move selection after Enter direction (User)","description":"Specifies the direction that the selection is moved after the Enter key is pressed.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_1","displayName":"Enabled","description":null,"helpText":null}]},"0b4fd8b5acb3be8b":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls","displayName":"Allow the WebHID API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\r\n\r\n * 'WebHidBlockedForUrls' (Block the WebHID API on these sites) (if there is a match),\r\n\r\n * 'DefaultWebHidGuardSetting' (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns must not conflict with 'WebHidBlockedForUrls'. Neither policy takes precedence if a URL matches both patterns.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0b0af3ec3bb8be57":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (User)","description":"Control if Manifest v2 extensions can be used by browser.\r\n\r\nManifest v2 extensions support will be deprecated and all extensions need to be migrated to v3 in the future. More information about, and the timeline of the migration has not been established.\r\n\r\nIf the policy is set to Default or not set, v2 extension loading is decided by browser. This will follow the preceding timeline when it's established.\r\n\r\nIf the policy is set to Disable, v2 extensions installation are blocked, and existing ones are disabled. This option is going to be treated the same as if the policy is unset after v2 support is turned off by default.\r\n\r\nIf the policy is set to Enable, v2 extensions are allowed. The option is going to be treated the same as if the policy isn't set before v2 support is turned off by default.\r\n\r\nIf the policy is set to EnableForForcedExtensions, force installed v2 extensions are allowed. This includes extensions that are listed by 'ExtensionInstallForcelist' (Control which extensions are installed silently) or 'ExtensionSettings' (Configure extension management settings) with installation_mode \"force_installed\" or \"normal_installed\". All other v2 extensions are disabled. The option is always available regardless of the manifest migration state.\r\n\r\nExtensions availabilities are still controlled by other policies.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default browser behavior\r\n\r\n* Disable (1) = Manifest v2 is disabled\r\n\r\n* Enable (2) = Manifest v2 is enabled\r\n\r\n* EnableForForcedExtensions (3) = Manifest v2 is enabled for forced extensions only\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_1","displayName":"Enabled","description":null,"helpText":null}]},"0b9234e820acfe9c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoffcontacttabcalendar","displayName":"Remove Calendar Line (User)","description":"\r\nThis policy setting enables you to remove the Calendar line on the Contact Tab, which is on the Contact Card.\r\n\r\nIf you enable this policy setting, you can remove the Calendar line.\r\n\r\nIf you disable or do not configure this policy setting, the Calendar line appears on the Contact Tab.\r\n","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoffcontacttabcalendar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoffcontacttabcalendar_1","displayName":"Enabled","description":null,"helpText":null}]},"0b79c356236dea68":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy7_l_placesbarname221","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"0b4d0503b4b3c2bc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_onlinestoragefilter","displayName":"Hide file locations when opening or saving files (User)","description":"\r\nThis policy setting allows you to hide specific file locations when the user opens or saves a file. This helps prevent users from using either the local PC, SharePointServer, or Microsoft Office 365 cloud-based file locations such as OneDrive or SharePoint Online, to open, save, or share files.\r\n\r\nNote: This policy setting only applies to Word, PowerPoint, and Excel.\r\n\r\nIf you enable this policy setting, you can specify which file locations are hidden when the user opens or saves a file.\r\n\r\nIf you disable or don’t configure this policy setting, users can use the local PC, SharePoint Server or any configured Microsoft cloud-based file location to open, save, and share files.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_onlinestoragefilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_onlinestoragefilter_1","displayName":"Enabled","description":null,"helpText":null}]},"0bc682cc1c0c4eeb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey10_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"0bf3afbff6e3b490":{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser_l_defaultuithemeenum","displayName":"Theme: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser_l_defaultuithemeenum_0","displayName":"Colorful","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser_l_defaultuithemeenum_3","displayName":"Dark Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser_l_defaultuithemeenum_4","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser_l_defaultuithemeenum_5","displayName":"White","description":null,"helpText":null}]},"0b101fc3cba59564":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_synchronizingdatainsharedfolders","displayName":"Synchronizing data in shared folders (User)","description":"This setting controls the number of days that elapses without a user accessing an Outlook folder before Outlook stops synchronizing the folder with Exchange. For example, say this option is set to 45. User A opens User B's calendar in Outlook, and then does not click on it again for 45 days. Outlook stops synchronizing the data with Exchange and the calendar is no longer up-to-date. The local copy of the data is removed from the OST file. If User A then clicks on the User B calendar 90 days later, Outlook synchronizes the calendar data and starts the clock again for 45 days.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_synchronizingdatainsharedfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_synchronizingdatainsharedfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"0b8214edd64f4131":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_colors","displayName":"Colors (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6fd44fd0-80d1-47a0-acad-c115e5b807b6","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_colors_browsercolors","displayName":"Browser colors","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_colors_presentationschemetextcolor","displayName":"Presentation colors (text color)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_colors_presentationschemeaccentcolor","displayName":"Presentation colors (accent color)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_colors_whitetextonblack","displayName":"White text on black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_colors_blacktextonwhite","displayName":"Black text on white","description":null,"helpText":null}]},"0b2b46aac90e56f8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"0b21929681d4f4a1":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_0","displayName":"Use legacy format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_1","displayName":"Use next generation format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_2","displayName":"All files save with next generation","description":null,"helpText":null}]},"0b4bc609ef94154a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview","displayName":"Open files on local Intranet UNC in Protected View (User)","description":"This policy setting lets you determine if files on local Intranet UNC file shares open in Protected View.\r\n\r\nIf you enable this policy setting, files on local Intranet UNC file shares open in Protected View if their UNC paths appear to be within the Internet zone.\r\n\r\nIf you disable or do not configure this policy setting, files on Intranet UNC file shares do not open in Protected View if their UNC paths appear to be within the Internet zone.","helpText":"","infoUrls":[],"categoryId":"42ce9a9b-0574-4b5c-993b-7679de80be47","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"0bec7cb93ace998b":{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_trustedservers_edit","displayName":"Enter fully qualified server names separated by semicolons (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":null},"0b2d3adbbdc12e03":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjtaskshonorconstraints","displayName":"Tasks will always honor their constraint dates (User)","description":"Specifies that Project schedules tasks according to their constraint dates.\r\n\r\nIf you enable this setting, task constraints will always be honored when tasks are scheduled.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjtaskshonorconstraints_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjtaskshonorconstraints_1","displayName":"Enabled","description":null,"helpText":null}]},"0bc5b3fe4b6a7f2f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc03_l_datecolon17","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"0b08d55be935701f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2003files_l_visio2003filesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"75f9bfd8-8ee2-47b0-b080-a4d179724ca8","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2003files_l_visio2003filesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2003files_l_visio2003filesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2003files_l_visio2003filesdropid_2","displayName":"Open/Save blocked","description":null,"helpText":null}]},"0b7ef93c5740c123":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_differentcolorfordiacritics","displayName":"Use this color for diacritics (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_differentcolorfordiacritics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_differentcolorfordiacritics_1","displayName":"Enabled","description":null,"helpText":null}]},"0ba2be7ba56590e2":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_documentproperties","displayName":"Print document properties (User)","description":"This policy setting allows you to control the \"Print document properties\" setting found under File tab | Options | Display | Printing options.\r\n\r\nIf you enable this policy setting, Word will print an additional page with the printed document's properties, including the document's author, filename, creation date, etc., for every document that is printed.\r\n\r\nIf you disable or do not configure this policy setting, no additional page will be printed.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_documentproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_documentproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"0b770a8cd06d9f8d":{"id":"vendor_msft_defender_configuration_tamperprotection_options","displayName":"Controlled Configuration (Device)","description":"This setting can be used to turn on controlled configuration or tamper protection to help protect important security features from unwanted changes and interference.\r\n\r\nIf the setting is configured to Tamper Protection (On), this turns on tamper protection to enforce tamper protected settings to their secure defaults. This includes real-time protection, behavior monitoring, and more. Settings are configured with an MDM solution, such as Intune and is available in Windows 10 Enterprise E5 or equivalent subscriptions.\r\n\r\nIf the setting is configured to Controlled Configuration (On), this turns on controlled configuration, which enforces the configuration coming from Intune exclusively and any non-configured settings to their secure defaults. Controlled configuration is applicable to Antivirus and Endpoint detection and response settings.\r\n\r\nIf the setting is configured to OFF, this turns off Controlled Configuration and Tamper Protection.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/defender-csp#:~:text=Configuration/TamperProtection"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"vendor_msft_defender_configuration_tamperprotection_options_1","displayName":"Off","description":null,"helpText":null},{"id":"vendor_msft_defender_configuration_tamperprotection_options_0","displayName":"Tamper Protection (On)","description":null,"helpText":null},{"id":"vendor_msft_defender_configuration_tamperprotection_options_2","displayName":"Controlled Configuration (On)","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/0c.json b/public/intune-definitions/0c.json new file mode 100644 index 000000000000..864ac62c6b96 --- /dev/null +++ b/public/intune-definitions/0c.json @@ -0,0 +1 @@ +{"0c1a34f8e88d28a3":{"id":"ade_useraffinity","displayName":"User affinity","description":"User affinity associates devices with users. Users must authenticate to enroll with user affinity.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_useraffinity_1","displayName":"Enroll with user affinity","description":null,"helpText":null},{"id":"ade_useraffinity_0","displayName":"Enroll without user affinity","description":null,"helpText":null},{"id":"ade_useraffinity_2","displayName":"Enroll with Microsoft Entra ID shared mode","description":null,"helpText":null},{"id":"ade_useraffinity_3","displayName":"Enroll with Shared iPad","description":null,"helpText":null}]},"0c40907e10c8d67e":{"id":"com.android.devicerestrictionpolicy.printingpolicy","displayName":"Block printing","description":"If 'True', the device is prevented from printing documents. If 'False', Intune doesn't change or update this setting. By default, the OS follows the default printing behavior. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.printingpolicy_false","displayName":"False","description":"The user is allowed to print.","helpText":null},{"id":"com.android.devicerestrictionpolicy.printingpolicy_true","displayName":"True","description":"The user is not allowed to print.","helpText":null}]},"0c4f4417e0226ddd":{"id":"com.android.devicerestrictionpolicy.securitycommoncriteriamodeenabled","displayName":"Require Common Criteria mode​","description":"If 'True', enables an elevated set of security standards on the device most often used in highly sensitive organizations, such as government establishments. If 'False', Intune doesn't change or update this setting. Available for fully managed, dedicated and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"bf8e3e9c-f7e7-4a43-8898-2caf7b01d987","categoryName":"System Security","options":[{"id":"com.android.devicerestrictionpolicy.securitycommoncriteriamodeenabled_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.securitycommoncriteriamodeenabled_false","displayName":"False","description":"false","helpText":null}]},"0c0429c62a1e2414":{"id":"com.apple.applicationaccess_allowpasswordsharing","displayName":"Allow Password Sharing","description":"If false, disables sharing passwords with the Airdrop Passwords feature. Requires a supervised device. Available in iOS 12 and later, and macOS 10.14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpasswordsharing_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpasswordsharing_true","displayName":"True","description":null,"helpText":null}]},"0c9b2d2d63d0e782":{"id":"com.apple.directoryservice.managed_addomainadmingrouplist","displayName":"AD Domain Admin Group List","description":"The list of Active Directory groups that are granted admin access.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"0c785ef20b189611":{"id":"com.apple.dnssettings.managed_dnssettings_supplementalmatchdomains","displayName":"Supplemental Match Domains","description":"A list of domain strings used to determine which DNS queries will use the DNS server. If this array is not provided, all domains will use the DNS server.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"0ca82f2400c2281a":{"id":"com.apple.domains_emaildomains","displayName":"Email Domains","description":"An array of domains. Email addresses that lack a suffix matching any of these strings are considered out of domain and marked in Mail.","helpText":null,"infoUrls":[],"categoryId":"224dc683-c0e0-4783-8ba8-8f02c76d161d","categoryName":"Domains","options":null},"0cfc94cb594c7573":{"id":"com.apple.managedclient.preferences_aigenthemesenabled","displayName":"Enables DALL-E themes generation","description":"This policy lets you generate browser themes using DALL-E and apply them to Microsoft Edge.\n\nIf you enable or don't configure this policy, the AI generated themes will be enabled.\n\nIf you disable this policy, the AI generated themes will be disabled for your organization.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#aigenthemesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_aigenthemesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_aigenthemesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0c69bdd5f1a79e80":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver","displayName":"Update channel override (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"0cad5639dbc5a575":{"id":"com.apple.managedclient.preferences_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions","description":"Allows you to set whether users can add exceptions to allow mixed content for specific sites.\n\nThis policy can be overridden for specific URL patterns using the \"InsecureContentAllowedForUrls\" and \"InsecureContentBlockedForUrls\" policies.\n\nIf this policy isn't set, users will be allowed to add exceptions to allow blockable mixed content and disable autoupgrades for optionally blockable mixed content.\n\n* 2 = Do not allow any site to load blockable mixed content\n\n* 3 = Allow users to add exceptions to allow blockable mixed content","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultinsecurecontentsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultinsecurecontentsetting_0","displayName":"Do not allow any site to load mixed content","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultinsecurecontentsetting_1","displayName":"Allow users to add exceptions to allow mixed content","description":null,"helpText":null}]},"0cc47e85312fb414":{"id":"com.apple.managedclient.preferences_sandboxexternalprotocolblocked","displayName":"Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe","description":"Microsoft Edge will block navigations to external protocols inside a\nsandboxed iframe.\n\nIf you enable or don't configure this policy, Microsoft Edge will block those navigations.\n\nIf you disable this policy, Microsoft Edge will not block those navigations.\n\nThis can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Microsoft Edge version 117.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sandboxexternalprotocolblocked"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sandboxexternalprotocolblocked_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sandboxexternalprotocolblocked_true","displayName":"Enabled","description":null,"helpText":null}]},"0c86aa8d739ad85b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\n\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\n\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0c2f36e51257eb11":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordexportenabled","displayName":"Enable exporting saved passwords from Password Manager","description":"This policy controls whether the Export Password button in edge://wallet/passwords is enabled.\n\nIf enabled or not configured, users can export saved passwords.\nIf disabled, the Export Password button is unavailable, preventing password exports.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordexportenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordexportenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0cab4598c516df5c":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_worklowprioritylimit","displayName":"Low Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"0caa556f5b438371":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_nochanges8","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_nochanges8_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_nochanges8_1","displayName":"True","description":null,"helpText":null}]},"0c55878bf64cbf87":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_cachesize_lbl_totalcachesizespin","displayName":"Total size of offline files:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"0ccc07eb88bd364b":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_2","displayName":"Prevent use of Offline Files folder","description":"Disables the Offline Files folder.\r\n\r\nThis setting disables the \"View Files\" button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view or open copies of network files stored on their computer. Also, they cannot use the folder to view characteristics of offline files, such as their server status, type, or location.\r\n\r\nThis setting does not prevent users from working offline or from saving local copies of files available offline. Also, it does not prevent them from using other programs, such as Windows Explorer, to view their offline files.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To view the Offline Files Folder, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click \"View Files.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nocacheviewer-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_2_1","displayName":"Enabled","description":null,"helpText":null}]},"0c0004ce5e93dd2a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup","displayName":"OneNote 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft OneNote 2013.\r\nMicrosoft OneNote 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft OneNote 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft OneNote 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onenotebackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup_1","displayName":"Enabled","description":null,"helpText":null}]},"0c8f86f9feb5d688":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown","displayName":"Pick one of the following settings","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_1","displayName":"Always open new File Explorer windows with the ribbon minimized.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_2","displayName":"Never open new File Explorer windows with the ribbon minimized.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_3","displayName":"Minimize the ribbon when File Explorer is opened the first time.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_4","displayName":"Display the full ribbon when File Explorer is opened the first time.","description":null,"helpText":null}]},"0cdc98d74371464c":{"id":"device_vendor_msft_policy_config_appvirtualization_allowreportingserver_reporting_server_url_prompt","displayName":"Reporting Server URL","description":"","helpText":"","infoUrls":[],"categoryId":"e7cc16d8-f74f-4cd7-890d-9b4082a19c39","categoryName":"Reporting","options":null},"0cf47dbe05ef088c":{"id":"device_vendor_msft_policy_config_appvirtualization_allowstreamingautoload","displayName":"Specify what to load in background (aka AutoLoad)","description":"Specifies how new packages should be loaded automatically by App-V on a specific computer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowstreamingautoload"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowstreamingautoload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowstreamingautoload_1","displayName":"Enabled","description":null,"helpText":null}]},"0cf118d7a32df248":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audioprocesshighpriorityenabled","displayName":"Allow the audio process to run with priority above normal on Windows","description":"This policy controls the priority of the audio process on Windows.\r\nIf this policy is enabled, the audio process will run with above normal priority.\r\nIf this policy is disabled, the audio process will run with normal priority.\r\nIf this policy is not set, the default configuration for the audio process will be used.\r\nThis policy is intended as a temporary measure to give enterprises the ability to\r\nrun audio with higher priority to address certain performance issues with audio capture.\r\nThis policy will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audioprocesshighpriorityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audioprocesshighpriorityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0c8cccddc72219f2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_defaultsearchprovidericonurl","displayName":"Default search provider icon (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"0c1ccc6c52167582":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls","displayName":"Block popups on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't open pop-ups.\r\n\r\nLeaving the policy unset means DefaultPopupsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0c9e73f518f650b9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_chromeframerenderersettings","displayName":"Default HTML renderer for Google Chrome Frame (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_chromeframerenderersettings_0","displayName":"Use the host browser by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_chromeframerenderersettings_1","displayName":"Use Google Chrome Frame by default","description":null,"helpText":null}]},"0cf74a5f3cb5f065":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_0","displayName":"Allow users to manage all certificates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_1","displayName":"Allow users to manage user certificates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_2","displayName":"Disallow users from managing certificates","description":null,"helpText":null}]},"0cf911871eb9c0bf":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces","displayName":"Enable Windows Package Manager command line interfaces","description":"This policy determines if a user can perform an action using the Windows Package Manager through a command line interface (WinGet CLI, or WinGet PowerShell).\n\nIf you disable this policy, users will not be able execute the Windows Package Manager CLI, and PowerShell cmdlets.\n\nIf you enable, or do not configuring this policy, users will be able to execute the Windows Package Manager CLI commands, and PowerShell cmdlets. (Provided “Enable App Installer” policy is not disabled).\n\nThis policy does not override the “Enable App Installer” policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablewindowspackagemanagercommandlineinterfaces"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces_1","displayName":"Enabled","description":null,"helpText":null}]},"0c7db532a2b14274":{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy","displayName":"Device Enumeration Policy","description":"This policy is intended to provide additional security against external DMA capable devices. It allows for more control over the enumeration of external DMA capable devices incompatible with DMA Remapping/device memory isolation and sandboxing. Device memory sandboxing allows the OS to leverage the I/O Memory Management Unit (IOMMU) of a device to block unallowed I/O, or memory access, by the peripheral. In other words, the OS assigns a certain memory range to the peripheral. If the peripheral attempts to read/write to memory outside of the assigned range, the OS blocks it. This policy only takes effect when Kernel DMA Protection is supported and enabled by the system firmware. Kernel DMA Protection is a platform feature that cannot be controlled via policy or by end user. It has to be supported by the system at the time of manufacturing. To check if the system supports Kernel DMA Protection, please check the Kernel DMA Protection field in the Summary page of MSINFO32. exe. NoteThis policy does not apply to 1394/Firewire, PCMCIA, CardBus, or ExpressCard devices. Supported values:0 - Block all (Most restrictive): Devices with DMA remapping compatible drivers will be allowed to enumerate at any time. Devices with DMA remapping incompatible drivers will never be allowed to start and perform DMA at any time. 1 - Only after log in/screen unlock (Default): Devices with DMA remapping compatible drivers will be allowed to enumerate at any time. Devices with DMA remapping incompatible drivers will only be enumerated after the user unlocks the screen2 - Allow all (Least restrictive): All external DMA capable PCIe devices will be enumerated at any time","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-dmaguard#deviceenumerationpolicy"],"categoryId":"f59f7502-cd01-4ea7-9925-2231f88596f0","categoryName":"Dma Guard","options":[{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_0","displayName":"Block all (Most restrictive)","description":"Block all (Most restrictive)","helpText":null},{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_1","displayName":"Only after log in/screen unlock","description":"Only after log in/screen unlock","helpText":null},{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_2","displayName":"Allow all (Least restrictive)","description":"Allow all (Least restrictive)","helpText":null}]},"0cad56ea47f81015":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate","displayName":"Locked-Down Internet","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"0cc245a20d54c9d4":{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning","displayName":"Audit Server Does Not Support Signing","description":"This policy controls whether the SMB client will enable the audit event when the SMB server doesn't support signing. If you enable this policy setting, the SMB client will log the event when the SMB server doesn't support signing. If you disable or do not configure this policy setting, the SMB client will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#auditserverdoesnotsupportsigning"],"categoryId":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"0c6257d7402a52ef":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin","displayName":"Control where security restrictions on insecure origins apply","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*.contoso.com\") for which security restrictions on insecure origins don't apply.\r\n\r\nThis policy lets you specify allowed origins for legacy applications that can't deploy TLS or set up a staging server for internal web development so that developers can test out features requiring secure contexts without having to deploy TLS on the staging server. This policy also prevents the origin from being labeled \"Not Secure\" in the omnibox.\r\n\r\nSetting a list of URLs in this policy has the same effect as setting the command-line flag '--unsafely-treat-insecure-origin-as-secure' to a comma-separated list of the same URLs. If you enable this policy, it overrides the command-line flag.\r\n\r\nFor more information on secure contexts, see https://www.w3.org/TR/secure-contexts/.\r\n\r\nExample value:\r\n\r\nhttp://testserver.contoso.com/\r\n*.contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"0cc161d6e4b8dfde":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl","displayName":"WebRTC IP Handling Policy for URL Patterns","description":"Controls which IP addresses and network interfaces WebRTC can use\r\nwhen establishing connections for specific URL patterns.\r\n\r\nHow It Works:\r\nAccepts a list of URL patterns, each paired with a handling type.\r\nWebRTC evaluates patterns sequentially; the first match determines the handling type.\r\nIf no match is found, WebRTC defaults to the WebRtcLocalhostIpHandling WebRtcLocalhostIpHandling. policy.\r\nThis policy applies only to origins—URL path components are ignored.\r\nWildcards (*) are supported in URL patterns.\r\n\r\nSupported Handling Values:\r\ndefault – Uses all available network interfaces.\r\ndefault_public_and_private_interfaces – WebRTC uses all public and private interfaces.\r\ndefault_public_interface_only – WebRTC uses only public interfaces.\r\ndisable_non_proxied_udp – WebRTC uses UDP SOCKS proxying or falls back to TCP proxying.\r\n\r\nMore Information:\r\nValid input patterns: https://go.microsoft.com/fwlink/?linkid=2095322\r\nHandling types: https://tools.ietf.org/html/rfc8828.html#section-5.2\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.example.com\",\r\n \"handling\": \"default_public_and_private_interfaces\"\r\n },\r\n {\r\n \"url\": \"https://[*.]example.edu\",\r\n \"handling\": \"default_public_interface_only\"\r\n },\r\n {\r\n \"url\": \"*\",\r\n \"handling\": \"disable_non_proxied_udp\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl_1","displayName":"Enabled","description":null,"helpText":null}]},"0cc2eeaf3f326607":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winwordexe91","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winwordexe91_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winwordexe91_1","displayName":"True","description":null,"helpText":null}]},"0ce36faa3ac776a9":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptionstore","displayName":"Network Password Encryption Store (Windows Insiders only)","description":"The encryption store that is specified if we are using a custom certificate for password encryption.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":null},"0cee444dd6f518a4":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_enablescreensaver","displayName":"Enable screen saver (User)","description":"Enables desktop screen savers.\r\n\r\nIf you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver dialog in the Personalization or Display Control Panel. As a result, users cannot change the screen saver options.\r\n\r\nIf you do not configure it, this setting has no effect on the system.\r\n\r\nIf you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screen saver on the client is specified through the \"Screen Saver executable name\" setting or through Control Panel on the client computer. Second, the screen saver timeout is set to a nonzero value through the setting or Control Panel.\r\n\r\nAlso, see the \"Prevent changing Screen Saver\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-enablescreensaver"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_enablescreensaver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_enablescreensaver_1","displayName":"Enabled","description":null,"helpText":null}]},"0c14df9bb895f5a3":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_werconsentcustomize_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":null},"0cc98586580798df":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_1","displayName":"Folder Redirection (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-folderredirection-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_1_1","displayName":"Enabled","description":null,"helpText":null}]},"0c3aa64dd6824f2d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)","description":"Setting the policy turns off enforcement of Certificate Transparency disclosure requirements for a list of subjectPublicKeyInfo hashes. Enterprise hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed). To turn off enforcement, the hash must meet one of these conditions:\r\n\r\n* It's of the server certificate's subjectPublicKeyInfo.\r\n\r\n* It's of a subjectPublicKeyInfo that appears in a Certificate Authority (CA) certificate in the certificate chain. That CA certificate is constrained through the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName has an organizationName attribute.\r\n\r\n* It's of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate has the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\r\n\r\nSpecify a subjectPublicKeyInfo hash by linking the hash algorithm name, a slash, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. Base64 encoding format matches that of an SPKI Fingerprint. The only recognized hash algorithm is sha256; others are ignored.\r\n\r\nLeaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_1","displayName":"Enabled","description":null,"helpText":null}]},"0c7532455c728d3c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended","displayName":"Enable reporting of usage and crash-related data (User)","description":"When this policy is enabled, anonymous reporting of usage and crash-related data about Chrome to Google is enabled by default. Users will still be able to change this setting in the Chrome settings.\r\n\r\nWhen this policy is disabled, anonymous reporting is disabled and no usage or crash data is sent to Google. Users won't be able to change this setting.\r\n\r\nWhen this policy isn't set, users can choose the anonymous reporting behavior at installation or first run, and can later change the setting in the Chrome settings.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain or Windows 10 Pro or Enterprise instances that are enrolled for device management, and macOS instances that are managed via MDM or joined to a domain via MCX.\r\n\r\n(For Chrome OS, see DeviceMetricsReportingEnabled.)","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0c4ece07d78f1cb4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (User)","description":"","helpText":"","infoUrls":[],"categoryId":"af351b0c-3d9e-4b18-957b-8179e4eaba15","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_0","displayName":"Safe Browsing is never active.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_1","displayName":"Safe Browsing is active in the standard mode.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_2","displayName":"Safe Browsing is active in the enhanced mode. This mode provides better security, but requires sharing more browsing information with Google.","description":null,"helpText":null}]},"0c29c29f811c8b41":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls_imagesallowedforurlsdesc","displayName":"Allow images on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"0cfd7c5aef97dd92":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist","displayName":"Configure native messaging blocklist (User)","description":"Setting the policy specifies which native messaging hosts shouldn't be loaded. A deny list value of * means all native messaging hosts are denied, unless they're explicitly allowed.\r\n\r\nLeaving the policy unset means Google Chrome loads all installed native messaging hosts.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"0c87f85f88034f50":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]},"0cb07bdd1e5d056f":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains (User)","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonenavigatewindowsandframes"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"0cbe00705a14b424":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings","displayName":"Default search provider encodings (User)","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.\r\n\r\nThis policy is optional. If not configured, the default, UTF-8, is used.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_1","displayName":"Enabled","description":null,"helpText":null}]},"0ceb542aa0548b2f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuispd","displayName":"Disallow in SharePoint Designer (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuispd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuispd_1","displayName":"True","description":null,"helpText":null}]},"0c34a5a103a87056":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_basque","displayName":"Basque (User)","description":"Enables the editing language Basque","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_basque_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_basque_1","displayName":"Enabled","description":null,"helpText":null}]},"0c6bb0259129347b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishspain","displayName":"Spanish (Spain) (User)","description":"Enables the editing language Spanish (Spain)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishspain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishspain_1","displayName":"Enabled","description":null,"helpText":null}]},"0c19c3784affb493":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_enablecheckouttodrafts","displayName":"Save checked-out files to a local folder (User)","description":"This policy setting allows users to save files checked out from SharePoint, or other document management server products, to a local folder when editing the files. \r\n\r\nBy default, checked-out files are stored in the Office Document Cache. The Office Document Cache allows the same offline editing capabilities as a local folder, but automatically syncs the files when there is Internet connectivity.\r\n\r\nNote: It’s not recommended to enable this policy setting unless needed to support existing document management processes.\r\n\r\nIf you enable this policy setting, users can specify a local folder to save checked-out files to by going to File > Options > Save > Offline editing options.\r\n\r\nIf you disable or don’t configure this policy setting, checked-out files are stored in the Office Document Cache.\r\n ","helpText":"","infoUrls":[],"categoryId":"2d6891a4-ee83-4e55-8e23-09513e1306e4","categoryName":"Microsoft Office Document Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_enablecheckouttodrafts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_enablecheckouttodrafts_1","displayName":"Enabled","description":null,"helpText":null}]},"0c3f5cb383b1a696":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_l_workflowfriendly481","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"0c6f1734c3ed247b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_l_workflowsig487","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_l_workflowsig487_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_l_workflowsig487_1","displayName":"True","description":null,"helpText":null}]},"0c4d0c9bd22748e8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5","displayName":"Workflow Cache 5 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_1","displayName":"Enabled","description":null,"helpText":null}]},"0cb1b63fe7b5712b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_l_workflowdescrip455","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"0c34b4975bdca86c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog05_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"0c809d718681e4ab":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"1ae8c95a-5748-4647-80f8-b447e60601a2","categoryName":"Add-ins","options":null},"0c560150a847d174":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_downloadpublicfolderfavorites","displayName":"Download Public Folder Favorites (User)","description":"Checked: Checks the \"Download Public Folder Favorites\" option in the Advanced tab of the Microsoft Exchange Server dialog box (More Settings button in the E-mail Accounts dialog box) and enables the option. This enables Public Folder Favorites synchronization in Cached Exchange mode. | Unchecked: Unchecks the \"Download Public Folder Favorites\" option in the Advanced tab of the Microsoft Exchange Server dialog box (More Settings button in the E-mail Accounts dialog box) and disables the option. This disables Public Folder Favorites synchronization in Cached Exchange mode.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_downloadpublicfolderfavorites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_downloadpublicfolderfavorites_1","displayName":"Enabled","description":null,"helpText":null}]},"0cea7660e480eb2a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation","displayName":"Stop checking for table header accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables have a header row specified.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables have a header row specified.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for header rows and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"0cad9d33b850920a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjasktoupdate","displayName":"Ask to update automatic links (User)","description":"Prompts the user to update linked objects whenever they open a file containing OLE links, if the source has changed.\r\n \r\nIf you enable this setting, users are prompted to update linked objects whose source has changed whenever they open a file containing OLE links.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"d33133b4-77df-429a-9580-ed70f7da676d","categoryName":"Edit options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjasktoupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjasktoupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"0ce32dee54512265":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_l_descriptioncolon18","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"0c5479e6c57f8780":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_save_l_allowbackgroundsaves","displayName":"Allow background saves (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"038b49c9-4f13-4ace-be8d-bd076bffa23e","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_save_l_allowbackgroundsaves_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_save_l_allowbackgroundsaves_1","displayName":"Enabled","description":null,"helpText":null}]},"0c27ce819c81a7d1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_descriptioncolon30","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"0cd51f7ff2d86b4d":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}","displayName":" Firewall Rule Name","description":"Unique alpha numeric identifier for the rule. The rule name must not include a forward slash (/).","helpText":"","infoUrls":[],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/0d.json b/public/intune-definitions/0d.json new file mode 100644 index 000000000000..92bef42208ae --- /dev/null +++ b/public/intune-definitions/0d.json @@ -0,0 +1 @@ +{"0d7dc2b3b99c0dc5":{"id":"com.apple.airplay_passwords","displayName":"Password","description":"The password for the AirPlay destination.","helpText":null,"infoUrls":[],"categoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","categoryName":"AirPlay","options":null},"0d003809502b9664":{"id":"com.apple.applicationaccess_allowgenmoji","displayName":"Allow Genmoji (Deprecated)","description":"When false, prohibits creating new Genmoji.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowgenmoji_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowgenmoji_true","displayName":"True","description":null,"helpText":null}]},"0da9cc125774a2c1":{"id":"com.apple.dock_tilesize","displayName":"Tile Size","description":"The tile size. Values must be in the range of 16 to 128.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"0dc7df9fe0fffdda":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_application id","displayName":"Microsoft Remote Desktop Application ID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"0d245abf2f6c6fde":{"id":"com.apple.managedclient.preferences_officeexperiencesanalyzingcontentpreference","displayName":"Allow experiences and functionality that analyzes user content","description":"Examples: PowerPoint Designer, editing suggestions, Excel data insights.","helpText":null,"infoUrls":["https://aka.ms/macoce"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_officeexperiencesanalyzingcontentpreference_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_officeexperiencesanalyzingcontentpreference_true","displayName":"True","description":null,"helpText":null}]},"0d89d22b3c28a62b":{"id":"com.apple.managedclient.preferences_randomizescanstarttime","displayName":"Randomize scheduled scan start time","description":"Randomize the start time of a daily and weekly scheduled scan to any interval from 0 to 23 hours.","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":null},"0dfce53c32afc9e4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.idledetectionallowedforurls","displayName":"Allow idle detection on these sites","description":"Allows you to specify a list of URL patterns for sites that are allowed to use the Idle Detection API.\n\nIf you don't configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.\n\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported. For detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=209532.\n\nURL patterns specified in the blocklist take precedence over this allowlist. This allowlist takes precedence over the DefaultIdleDetectionSetting policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"0d7cca2277c75bdf":{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionurl_eventviewer_redirectionurl","displayName":"Events.asp URL","description":null,"helpText":"","infoUrls":[],"categoryId":"3453c694-bc38-4082-9d3d-886e385df927","categoryName":"Event Viewer","options":null},"0dbad94277afa701":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_listbox_modulenames","displayName":"Module Names","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":null},"0d17cb59dd79ffee":{"id":"device_vendor_msft_policy_config_admx_printing_kmprintersareblocked","displayName":"Disallow installation of printers using kernel-mode drivers","description":"Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory, and therefore poorly-written kernel-mode drivers can cause stop errors.\r\n\r\nIf you disable this setting, or do not configure it, then printers using a kernel-mode drivers may be installed on the local computer running Windows XP Home Edition and Windows XP Professional.\r\n\r\nIf you do not configure this setting on Windows Server 2003 family products, the installation of kernel-mode printer drivers will be blocked.\r\n\r\nIf you enable this setting, installation of a printer using a kernel-mode driver will not be allowed.\r\n\r\nNote: By applying this policy, existing kernel-mode drivers will be disabled upon installation of service packs or reinstallation of the Windows XP operating system. This policy does not apply to 64-bit kernel-mode printer drivers as they cannot be installed and associated with a print queue.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-kmprintersareblocked"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_kmprintersareblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_kmprintersareblocked_1","displayName":"Enabled","description":null,"helpText":null}]},"0d38aa96d7e4dbf5":{"id":"device_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_2","displayName":"WPD Devices: Deny write access","description":"This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-wpddevices-denywrite-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"0df2f9f87389d32c":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_preventlicenseupgrade","displayName":"Prevent license upgrade","description":"This policy setting allows you to specify which version of Remote Desktop Services client access license (RDS CAL) a Remote Desktop Services license server will issue to clients connecting to RD Session Host servers running other Windows-based operating systems.\r\n\r\nA license server attempts to provide the most appropriate RDS or TS CAL for a connection. For example, a Windows Server 2008 license server will try to issue a Windows Server 2008 TS CAL for clients connecting to a terminal server running Windows Server 2008, and will try to issue a Windows Server 2003 TS CAL for clients connecting to a terminal server running Windows Server 2003.\r\n\r\nBy default, if the most appropriate RDS CAL is not available for a connection, a Windows Server 2008 license server will issue a Windows Server 2008 TS CAL, if available, to the following:\r\n\r\n* A client connecting to a Windows Server 2003 terminal server\r\n* A client connecting to a Windows 2000 terminal server\r\n\r\nIf you enable this policy setting, the license server will only issue a temporary RDS CAL to the client if an appropriate RDS CAL for the RD Session Host server is not available. If the client has already been issued a temporary RDS CAL and the temporary RDS CAL has expired, the client will not be able to connect to the RD Session Host server unless the RD Licensing grace period for the RD Session Host server has not expired.\r\n\r\nIf you disable or do not configure this policy setting, the license server will exhibit the default behavior noted earlier.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-preventlicenseupgrade"],"categoryId":"0456dcd5-c003-4a8b-80e6-61bacf854330","categoryName":"RD Licensing","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_preventlicenseupgrade_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_preventlicenseupgrade_1","displayName":"Enabled","description":null,"helpText":null}]},"0da79a63538a0ff1":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users cannot preview items or get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-restrictedlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"0d26b7d822523b73":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditremovablestorage","displayName":"Object Access Audit Removable Storage","description":"This policy setting allows you to audit user attempts to access file system objects on a removable storage device. A security audit event is generated only for all objects for all types of access requested. If you configure this policy setting, an audit event is generated each time an account accesses a file system object on a removable storage. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when an account accesses a file system object on a removable storage.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditremovablestorage"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditremovablestorage_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditremovablestorage_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditremovablestorage_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditremovablestorage_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"0deb704954009ec4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_diskcachedir","displayName":"Set disk cache directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"0df77989190ad809":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate","displayName":"Refresh rate for user policy","description":"Setting the policy specifies the period in milliseconds at which the device management service is queried for user policy information. Valid values range from 1,800,000 (30 minutes) to 86,400,000 (1 day). Values outside this range will be clamped to the respective boundary.\r\n\r\nLeaving the policy unset uses the default value of 3 hours.\r\n\r\nNote: Policy notifications force a refresh when the policy changes, making frequent refreshes unnecessary. So, if the platform supports these notifications, the refresh delay is 24 hours (ignoring defaults and the value of this policy).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_1","displayName":"Enabled","description":null,"helpText":null}]},"0d8fe2b52441a062":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup","displayName":"Disable CNAME lookup when negotiating Kerberos authentication","description":"Setting the policy to Enabled skips CNAME lookup. The server name is used as entered when generating the Kerberos SPN.\r\n\r\nSetting the policy to Disabled or leaving it unset means CNAME lookup determines the canonical name of the server when generating the Kerberos SPN.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup_1","displayName":"Enabled","description":null,"helpText":null}]},"0dc96cc429c02068":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls","displayName":"Sites that can access audio capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use audio capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to audio capture devices. Note, however, that the pattern \"*\", which matches any URL, is not supported by this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com/\r\nhttps://[*.]contoso.edu/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0d316c114bed461a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride_cpuperformancetieroverride","displayName":"Override for the CPU performance tier:","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0d3fb18b295948a8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern","displayName":"Restrict which accounts can be used to sign in to Microsoft Edge","description":"Determines which accounts can be used to sign in to the Microsoft Edge account that's chosen during the Sync opt-in flow.\r\n\r\nYou can configure this policy to match multiple accounts using a Perl style regular expression for the pattern. If a user tries to sign in to the browser with an account whose username doesn't match this pattern, they are blocked and will get the appropriate error message. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.\r\n\r\nIf you don't configure this policy or leave it blank, users can use any account to sign in to Microsoft Edge.\r\n\r\nNote that signed-in profiles with a username that doesn't match this pattern will be signed out after this policy is enabled.\r\n\r\nExample value: .*@contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_1","displayName":"Enabled","description":null,"helpText":null}]},"0d2b63cb68c6b277":{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_30","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"0df1a2b139553be8":{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyservers","displayName":"Enterprise Proxy Servers","description":"This is a comma-separated list of proxy servers. Any server on this list is considered non-enterprise. For example 157.54.14.28, 157.54.11.118, 10.202.14.167, 157.53.14.163, 157.69.210.59.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseproxyservers"],"categoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","categoryName":"Network Isolation","options":null},"0d2e6685d663ac48":{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingmachine","displayName":"Disable local training of all features for the computer.","description":"\r\nThis policy setting disables local training of all features for the computer.\r\n\r\nFor local training policy, feature-specific settings are prioritized over general settings and computer settings are prioritized over user settings.\r\n\r\nIf a higher priority policy setting is not configured, then:\r\n- If this policy setting is enabled, local training of all features is disabled for the computer.\r\n- If this policy setting is disabled, local training of all features is enabled for the computer.\r\n- If this policy setting is not configured, local training of all features is determined by lower priority policy settings.\r\n- If this policy setting is not configured and lower priority policy settings are also not configured, local training of all features is enabled for the computer.\r\n\r\nFor this policy setting, the order of priority is:\r\n1. Disable local training of [a specific feature] for the computer.\r\n2. Disable local training of all features for the computer.\r\n3. Disable local training of [a specific feature] for the user.\r\n4. Disable local training of all features for the user.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingmachine_1","displayName":"Enabled","description":null,"helpText":null}]},"0d5d1d9171a6cc5d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_onenoteexe82","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_onenoteexe82_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_onenoteexe82_1","displayName":"True","description":null,"helpText":null}]},"0da421183b224141":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsyncsilentconfig","displayName":"Disables silent configuration of Lists sync on this device.","description":"\r\n If you enable this setting, users at your organization will not be opted into Lists sync automatically. They will be required to install the Office web extension to use Nucleus.\r\n\r\n ","helpText":"","infoUrls":[],"categoryId":"7fc23813-7a7c-412a-b9bd-eda07e6b1f5d","categoryName":"List Sync","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsyncsilentconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsyncsilentconfig_1","displayName":"Enabled","description":null,"helpText":null}]},"0d107476cd28ec05":{"id":"device_vendor_msft_policy_config_printers_configurewindowsprotectedprint","displayName":"Configure Windows protected print","description":"\nDetermines whether Windows protected print is enabled on this computer.\n\nBy default, Windows protected print is not enabled and there are not any restrictions on the print drivers that can be installed or print functionality.\n\nIf you enable this setting, the computer will operate in Windows protected print mode which only allows printing to printers that support a subset of inbox Windows print drivers.\n\nIf you disable this setting or do not configure it, there are not any restrictions on the print drivers that can be installed or print functionality.\n\nFor more information, please see https://learn.microsoft.com/en-us/windows-hardware/drivers/print/windows-protected-print-mode\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurewindowsprotectedprint"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurewindowsprotectedprint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurewindowsprotectedprint_1","displayName":"Enabled","description":null,"helpText":null}]},"0d110f04268ab0f2":{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo","displayName":"Hardening Level:","description":"","helpText":"","infoUrls":[],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo_none","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo_relaxed","displayName":"Relaxed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo_strict","displayName":"Strict","description":null,"helpText":null}]},"0dd350aba0e01e51":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_mspub","displayName":"Publisher: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"0d397982eb15e516":{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork","displayName":"Allow Pinned Folder Network","description":"This policy controls the visibility of the Network shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfoldernetwork"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"0d9b449dba2c1204":{"id":"device_vendor_msft_policy_config_system_allowbuildpreview","displayName":"Allow Build Preview","description":"Note This policy setting applies only to devices running Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, Windows 10 Mobile, and Windows 10 Mobile Enterprise. This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update. These controls are located under Get Insider builds, and enable users to make their devices available for downloading and installing Windows preview software. If you enable or do not configure this policy setting, users can download and install Windows preview software on their devices. If you disable this policy setting, the item Get Insider builds will be unavailable.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowbuildpreview"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowbuildpreview_0","displayName":"Not allowed. The item \"Get Insider builds\" is unavailable, users are unable to make their devices available for preview software.","description":"Not allowed. The item \"Get Insider builds\" is unavailable, users are unable to make their devices available for preview software.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowbuildpreview_1","displayName":"Allowed. Users can make their devices available for downloading and installing preview software.","description":"Allowed. Users can make their devices available for downloading and installing preview software.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowbuildpreview_2","displayName":"Not configured. Users can make their devices available for downloading and installing preview software.","description":"Not configured. Users can make their devices available for downloading and installing preview software.","helpText":null}]},"0d71402298ca5cf1":{"id":"enrollment_autopilot_dpp_allowskip","displayName":"Allow users to skip setup after multiple attempts","description":"Allow users to continue to desktop if deployment fails.","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_allowskip_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_allowskip_1","displayName":"Yes","description":null,"helpText":null}]},"0d1bb958d99e473c":{"id":"extensionsettings_managedextensions_generickey_denieddomains","displayName":"Denied Domains","description":"Controls the domains and sub-domains the extension is not allowed to access. Any non-prefixed domains take precedence over prefixed domains, and DeniedDomains takes precedence over AllowedDomains. Any domains not specified in AllowedDomains or DeniedDomains are configurable by the user.","helpText":null,"infoUrls":[],"categoryId":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","categoryName":"Safari Extension Settings","options":null},"0d9dee719004d0d6":{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_key","displayName":"Threat type","description":"Type of the threat for which the behavior is configured.","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_key_0","displayName":"potentially_unwanted_application","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_key_1","displayName":"archive_bomb","description":null,"helpText":null}]},"0d7c87f84b74b190":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits","displayName":"Digits (User)","description":"Use this policy setting to configure the use of digits in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one digit in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using digits in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business requires users to use digits in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_0","displayName":"Allows the use of digits in PIN.","description":"Allows the use of digits in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_1","displayName":"Requires the use of at least one digits in PIN.","description":"Requires the use of at least one digits in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_2","displayName":"Does not allow the use of digits in PIN.","description":"Does not allow the use of digits in PIN.","helpText":null}]},"0dbbf9db40472159":{"id":"user_vendor_msft_policy_config_browser_setnewtabpageurl","displayName":"Set New Tab Page URL (User)","description":"You can set the default New Tab page URL in Microsoft Edge. Enabling this policy prevents your users from changing the New tab page setting. When enabled and the Allow web content on New Tab page policy is disabled, Microsoft Edge ignores the URL specified in this policy and opens about:blank. If enabled, you can set the default New Tab page URL. If disabled or not configured, the default Microsoft Edge new tab page is used. Default setting: Disabled or not configured Related policy: Allow web content on New Tab page","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#setnewtabpageurl"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"0d2100515a4eb163":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_restrictsignintopattern","displayName":"Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"0df7aa47cff529ec":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_syncdisabled","displayName":"Disable synchronization of data with Google (User)","description":"Setting the policy to Enabled turns off data synchronization in Google Chrome using Google-hosted synchronization services.\r\nTo fully turn off Chrome Sync services, we recommend that you turn off the service in the Google Admin console.\r\n\r\nIf the policy is set to Disabled or not set, users are allowed to choose whether to use Chrome Sync.\r\n\r\nNote: Do not turn on this policy when RoamingProfileSupportEnabled is Enabled, because that feature shares the same client-side functionality. The Google-hosted synchronization is off completely in this case.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_syncdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_syncdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0df5d84a0ff80306":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir","displayName":"Set user data directory (User)","description":"Configures the directory that Google Chrome will use for storing user data.\r\n\r\nIf you set this policy, Google Chrome will use the provided directory regardless whether the user has specified the '--user-data-dir' flag or not. To avoid data loss or other unexpected errors this policy should not be set to a directory used for other purposes, because Google Chrome manages its contents.\r\n\r\nSee https://support.google.com/chrome/a?p=Supported_directory_variables for a list of variables that can be used.\r\n\r\nIf this policy is left not set the default profile path will be used and the user will be able to override it with the '--user-data-dir' command line flag.\r\n\r\nExample value: ${users}/${user_name}/Chrome","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},"0dc33454362c418c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensdesktopntpsearchenabled","displayName":"Allow Google Lens button to be shown in the search box on the New Tab page if supported. (User)","description":"Leaving the policy unset or setting it to Enabled allows users to view and use the Google Lens button in the search box on the New Tab page. Setting the policy to Disabled means users will not see the Google Lens button in the search box on the New Tab page.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensdesktopntpsearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensdesktopntpsearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0defaa00e3fa75d8":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting","displayName":"Default third-party storage partitioning setting (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"0ddd15117dd232ab":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]},"0d06c7aff0eecb45":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_spellchecklanguagedesc","displayName":"Enable specific spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0d4eff035ce98552":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled","displayName":"Save and fill memberships (User)","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\r\n\r\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0d3b99d3f90ff5a8":{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton","displayName":"Show Downloads button on the toolbar (User)","description":"Set this policy to always show the Downloads button on the toolbar.\r\n\r\nIf you enable this policy, the Downloads button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure the policy, the Downloads button isn't shown on the toolbar by default. Users can toggle the Downloads button in edge://settings/appearance.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"0db48877fd87d1bb":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket","displayName":"Maximum number of concurrent connections to the proxy server for WebSocket requests (User)","description":"Specifies the maximum number of simultaneous connections to a proxy server for WebSocket requests.\r\n\r\nTo configure limits for non-WebSocket requests, see the 'MaxConnectionsPerProxy' (Maximum number of concurrent connections to the proxy server) policy.\r\n\r\nIf you don't configure this policy, the default value of 32 is used.\r\n\r\nSome web applications maintain multiple concurrent connections (for example, long-lived or hanging requests). Setting a value lower than the default may cause networking delays when many such applications are open.\r\n\r\nSome proxy servers cannot handle a high number of concurrent connections per client. In these cases, reducing the value of this policy may improve reliability.\r\n\r\nThe supported range is 6 to 256:\r\n- Values less than 6 are treated as 6.\r\n- Values greater than 256 are treated as 256.\r\n\r\nWe recommend modifying this value only if required by your proxy server configuration or network environment.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket_1","displayName":"Enabled","description":null,"helpText":null}]},"0d4574dd1afd48cf":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback (User)","description":"Following each major version update, Microsoft Edge will create a snapshot of parts of the user's browsing data to use in case of a later emergency that requires a temporary version rollback. If a temporary rollback is performed to a version for which a user has a corresponding snapshot, the data in the snapshot is restored. This lets users keep settings such as bookmarks and autofill data.\r\n\r\nIf you don't set this policy, the default value of 3 snapshots is used.\r\n\r\nIf you set this policy, old snapshots are deleted as needed to respect the limit you set. If you set this policy to 0, no snapshots are taken.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"0dbadfaecaa4fab8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withalinkandanattachment","displayName":"With a link and an attachment (User)","description":"Defines the default message body text used in an email request for review when the review document is included only as an attachment.","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withalinkandanattachment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withalinkandanattachment_1","displayName":"Enabled","description":null,"helpText":null}]},"0d0b1c72dde7859e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_specifydefaultpermissionserver","displayName":"Specify Permission Policy Default Server for Quick Access Toolbar (User)","description":"This policy setting specifies the RMS server Office uses by default.\r\n\r\nIf you enable this policy setting, Office uses the server you specify as the default RMS server.\r\n\r\nIf you disable or do not configure this policy setting, Office chooses the default RMS server.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_specifydefaultpermissionserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_specifydefaultpermissionserver_1","displayName":"Enabled","description":null,"helpText":null}]},"0d3862fb66baf44d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_l_workflowdescrip475","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"0dab0c54f46b7972":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_usertemplatespath_l_usertemplatespath328","displayName":"User templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":null},"0d071308bdb5fd90":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgrouptemplatespath","displayName":"Workgroup templates path (User)","description":"Specifies the location of workgroup templates.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgrouptemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgrouptemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"0d2f42f02c94fbb8":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_enablemacrotrustlevel","displayName":"Enable macro trust levels (User)","description":"This policy setting controls whether macro trust levels are enabled, which classifies VBA macros into four security levels based on file location and digital signature status.\r\n\r\nIf you enable this policy setting, VBA macros will be classified into the following trust levels with corresponding user experiences:\r\n\r\n- Lowest (Most Trusted): Files signed by a trusted publisher, saved to a trusted location, or unsaved files.\r\n - User Experience: No Message Bar displayed, macros load normally.\r\n\r\n- Lower: Files opened from a connected personal or business OneDrive account, connected SharePoint location, or local OneDrive folders.\r\n - User Experience: Yellow Message Bar with Enable Content option.\r\n\r\n- Moderate: Files opened from intranet locations, or signed with an extended validation (EV) certificate but not by a trusted publisher.\r\n - User Experience: Yellow Message Bar with a Learn More option. This encourages security awareness by requiring additional steps before enabling macros.\r\n\r\n- Highest (Least Trusted): All other files.\r\n - User Experience: Red Message Bar with macros blocked.\r\n\r\nWhen enabled, unsaved files containing macros will display a warning dialog when users attempt to save the file to local disk, informing them that saving locally may block macro execution when the file is reopened.\r\n\r\nIf you disable or don't configure this policy setting, macro trust levels are not enabled and the standard macro security behavior applies.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_enablemacrotrustlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_enablemacrotrustlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"0de393275000731d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_aftermovingordeletinganopenitem0","displayName":"After moving or deleting an open item: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_aftermovingordeletinganopenitem0_0","displayName":"Open the next item","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_aftermovingordeletinganopenitem0_1","displayName":"Return to the current folder","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_aftermovingordeletinganopenitem0_2","displayName":"Open the previous item","description":null,"helpText":null}]},"0dd59e45181ef829":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifyopacityofdesktopalert","displayName":"Specify opacity of Desktop Alert (User)","description":"Specify opacity of Desktop Alert","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifyopacityofdesktopalert_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifyopacityofdesktopalert_1","displayName":"Enabled","description":null,"helpText":null}]},"0dcf6adb2e2357f2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooktodaysettings_l_urlforcustomoutlooktoday","displayName":"URL for custom Outlook Today (User)","description":"Specifies the URL of a custom web page to be displayed in place of Outlook Today.","helpText":"","infoUrls":[],"categoryId":"75ad885f-6118-4508-a2fd-bb26be931c3f","categoryName":"Outlook Today Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooktodaysettings_l_urlforcustomoutlooktoday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooktodaysettings_l_urlforcustomoutlooktoday_1","displayName":"Enabled","description":null,"helpText":null}]},"0dd696c431dd8adf":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_datecolon13","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"0df7578ad3ac901f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_descriptioncolon30","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"0d1af8a6378473cb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_pathcolon60","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"0d6e7b2a879ffae0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevmethod_l_pjevmethod26","displayName":"Default task Earned Value method (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acbc106b-796a-4ba3-ab5f-c130530ad455","categoryName":"Earned Value options for Project1","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevmethod_l_pjevmethod26_0","displayName":"% Complete","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevmethod_l_pjevmethod26_1","displayName":"Physical % Complete","description":null,"helpText":null}]},"0d98425d040dc146":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"0d5bfe0b337b0340":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc17_l_pathcolon72","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"0d6eeef8ef14b92a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_pathcolon20","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"0df37f4537fa7749":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_remoteaddressranges","displayName":"Remote Address Ranges","description":"Consists of one or more comma-delimited tokens specifying the remote addresses covered by the rule. The default value is \"*\". Valid tokens include:\n\"*\" indicates any remote address. If present, this must be the only token included.\nA subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.\nA valid IPv6 address.\nAn IPv4 address range in the format of \"start address - end address\" with no spaces included.\nAn IPv6 address range in the format of \"start address - end address\" with no spaces included. If not specified the default is All.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/0e.json b/public/intune-definitions/0e.json new file mode 100644 index 000000000000..c0bd52baf599 --- /dev/null +++ b/public/intune-definitions/0e.json @@ -0,0 +1 @@ +{"0e663db42981e020":{"id":"com.apple.app.lock_app_options_enableinvertcolors","displayName":"Enable Invert Colors","description":"If true, enables Invert Colors. ","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_enableinvertcolors_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_enableinvertcolors_true","displayName":"True","description":null,"helpText":null}]},"0e913b9167cda3ba":{"id":"com.apple.applicationaccess_allowuiconfigurationprofileinstallation","displayName":"Allow UI Configuration Profile Installation","description":"If false, prohibits the user from installing configuration profiles and certificates interactively. Requires a supervised device. Available in iOS 6 and later and macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowuiconfigurationprofileinstallation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowuiconfigurationprofileinstallation_true","displayName":"True","description":null,"helpText":null}]},"0e69de1de252f62e":{"id":"com.apple.applicationaccess_forceitunesstorepasswordentry","displayName":"Force iTunes Store Password Entry (Deprecated)","description":"If true, forces the user to enter their iTunes password for each transaction. Available in iOS 6 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceitunesstorepasswordentry_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceitunesstorepasswordentry_true","displayName":"True","description":null,"helpText":null}]},"0e728b32c49d6aba":{"id":"com.apple.extensiblesso_realm","displayName":"Realm","description":"The realm name for Credential payloads. Use proper capitalization for this value. This key is ignored for Redirect payloads.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"0eca94af95168042":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_secondsperday","displayName":"Seconds Per Day","description":"The allowance for that day, in seconds. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"0e9861f526452e8e":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app","displayName":"Microsoft Edge Beta (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"0e4fe26282a62b97":{"id":"com.apple.managedclient.preferences_autoplayallowlist","displayName":"Allow media autoplay on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to autoplay media.\n\nIf you don't configure this policy, the global default value from the \"AutoplayAllowed\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nNote: * is not an accepted value for this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autoplayallowlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"0ecaa67be3a724ad":{"id":"com.apple.managedclient.preferences_importextensions","displayName":"Allow importing of extensions","description":"Allows users to import extensions from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **favorites** option during manual import.\n\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importextensions"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importextensions_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importextensions_true","displayName":"Enabled","description":null,"helpText":null}]},"0e56f3030d3cde5e":{"id":"com.apple.managedclient.preferences_startdaemononapplaunch","displayName":"Register app on launch","description":"Force Office apps to register with AutoUpdate on each launch.","helpText":null,"infoUrls":["https://macadmins.software/docs/MAU_38.pdf"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_startdaemononapplaunch_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_startdaemononapplaunch_true","displayName":"True","description":null,"helpText":null}]},"0e4fb557e5e38f3f":{"id":"com.apple.universalaccess_mousedriverinitialdelay","displayName":"Mouse Driver Initial Delay","description":"The initial delay before moving the mouse with Mouse Keys.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":null},"0ed756bf664a1501":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled","displayName":"Allow features to download assets from the Asset Delivery Service","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\nThese assets can be config files or Machine Learning models that power the features that use this service.\n\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\n\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0e7cebf1b3afe3de":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensioninstallallowlist","displayName":"Allow specific extensions to be installed","description":"Setting this policy specifies which extensions aren't subject to the blocklist.\n\nA blocklist value of * means all extensions are blocked and users can only install extensions listed in the allow list.\n\nBy default, all extensions are allowed. However, if you prohibited extensions by policy, you can use the list of allowed extensions to change that policy.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"0ee9f928c1a0886e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpreviewstickysettings_recommended","displayName":"Configure the sticky print preview settings (users can override)","description":"Configuring this policy sets the print preview settings as the most recent choice in Print Preview instead of the default print preview settings.\n\nEach item of this policy expects a boolean:\n\nLayout specifies if the webpage layout should be kept sticky or not in print preview settings. If you set this to True, the webpage layout uses the recent choice; otherwise, it sets to default value.\n\nSize specifies if the page size should be kept sticky or not in print preview settings. If you set this to True, the page size uses the recent choice; otherwise, it sets to default value.\n\nScale Type specifies if the scaling percentage and scale type should be kept sticky or not in print preview settings. If you set this to True, the scale percentage and scale type both use the recent choice; otherwise, it will set to default value.\n\nMargins specifies if the page margin should be kept sticky or not in print preview settings. If you set this to True, the page margins use the recent choice; otherwise, it sets to default value.\n\nIf you enable this policy, the selected values use the most recent choice in Print Preview.\n\nIf you disable or don't configure this policy, print preview settings aren't impacted.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"0e920e97737af246":{"id":"device_vendor_msft_bitlocker_removabledrivesconfigurebde_rdvallowbde_name","displayName":"Allow users to apply BitLocker protection on removable data drives","description":"","helpText":"","infoUrls":[],"categoryId":"8e6b8d0c-faf6-41e6-8e31-4389a5470caf","categoryName":"Removable Data Drives","options":[{"id":"device_vendor_msft_bitlocker_removabledrivesconfigurebde_rdvallowbde_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_removabledrivesconfigurebde_rdvallowbde_name_1","displayName":"True","description":null,"helpText":null}]},"0e17bc42fd63197f":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_reportoperatingsystemfaults","displayName":"Report operating system errors","description":"This policy setting controls whether errors in the operating system are included Windows Error Reporting is enabled.\r\n\r\nIf you enable this policy setting, Windows Error Reporting includes operating system errors.\r\n\r\nIf you disable this policy setting, operating system errors are not included in error reports.\r\n\r\nIf you do not configure this policy setting, users can change this setting in Control Panel. By default, Windows Error Reporting settings in Control Panel are set to upload operating system errors.\r\n\r\nSee also the Configure Error Reporting policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-pch-reportoperatingsystemfaults"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_reportoperatingsystemfaults_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_reportoperatingsystemfaults_1","displayName":"Enabled","description":null,"helpText":null}]},"0e03f2003ecfc964":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_lowcpupriority","displayName":"Configure low CPU priority for scheduled scans","description":"\r\n This policy setting allows you to enable or disable low CPU priority for scheduled scans.\r\n\r\n If you enable this setting, low CPU priority will be used during scheduled scans.\r\n\r\n If you disable or do not configure this setting, not changes will be made to CPU priority for scheduled scans.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-lowcpupriority"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_lowcpupriority_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_lowcpupriority_1","displayName":"Enabled","description":null,"helpText":null}]},"0e56466013a9f051":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsavoidregisterrecords_netlogon_dnsavoidregisterrecordslabel","displayName":"Mnemonics:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"0e1139bdf315d474":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11","displayName":"Internet Explorer 11","description":"This policy setting configures the synchronization of user settings of Internet Explorer 11.\r\nBy default, the user settings of Internet Explorer 11 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 11 from synchronization between computers.\r\nIf you enable this policy setting, the Internet Explorer 11 user settings continue to synchronize.\r\nIf you disable this policy setting, Internet Explorer 11 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer11"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11_1","displayName":"Enabled","description":null,"helpText":null}]},"0e8830317ddf8bc5":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016","displayName":"Microsoft Office 365 PowerPoint 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 PowerPoint 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 PowerPoint 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365powerpoint2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016_1","displayName":"Enabled","description":null,"helpText":null}]},"0e2de9beeceb1f19":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditsam","displayName":"Object Access Audit SAM","description":"This policy setting allows you to audit events generated by attempts to access to Security Accounts Manager (SAM) objects. SAM objects include the following: SAM_ALIAS -- A local group. SAM_GROUP -- A group that is not a local group. SAM_USER – A user account. SAM_DOMAIN – A domain. SAM_SERVER – A computer account. If you configure this policy setting, an audit event is generated when an attempt to access a kernel object is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when an attempt to access a kernel object is made. Note: Only the System Access Control List (SACL) for SAM_SERVER can be modified. Volume: High on domain controllers. For information about reducing the amount of events generated in this subcategory, see article 841001 in the Microsoft Knowledge Base (https://go.microsoft.com/fwlink/?LinkId=121698).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditsam"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditsam_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditsam_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditsam_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditsam_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"0efcb7b93e147134":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history","description":"Setting the policy to Enabled or leaving it unset means browser history and download history can be deleted in Chrome, and users can't change this setting.\r\n\r\nSetting the policy to Disabled means browser history and download history can't be deleted. Even with this policy off, the browsing and download history are not guaranteed to be retained. Users may be able to edit or delete the history database files directly, and the browser itself may expire or archive any or all history items at any time.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"0e59d6601a04e556":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_legacysamesitecookiebehaviorenabledfordomainlistdesc","displayName":"Revert to legacy SameSite behavior for cookies on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"0e59c69d5aca8558":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions","displayName":"URL pattern Exceptions to tab discarding","description":"This policy makes it so that any URL matching one or more of the patterns it specifies (using the URLBlocklist filter format) will never be discarded by the browser.\r\nThis applies to memory pressure and high efficiency mode discarding.\r\nA discarded page is unloaded and its resources fully reclaimed. The tab its associated with remains in the tabstrip, but making it visible will trigger a full reload.\r\n\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://*\r\n*","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_1","displayName":"Enabled","description":null,"helpText":null}]},"0e5b45cbbc840b0f":{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringuploaddestination_v2","displayName":"Config Device Health Monitoring Upload Destination","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which destinations are in-scope for monitored events to be uploaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringuploaddestination"],"categoryId":"55c888df-44ff-49d1-808e-ad9cb8429aff","categoryName":"Device Health Monitoring","options":null},"0e67ae70d5dd7297":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply","displayName":"Delete Local Profile When VHD Should Apply","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nWhen the FSLogix Profiles system determines that a user should have a FSLogix profile but a local profile exists, the local profile WILL BE REMOVED and the user logged on with the FSLogix profile\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\DeleteLocalProfileWhenVHDShouldApply\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply_1","displayName":"Enabled","description":null,"helpText":null}]},"0e1bfa172889926e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval","displayName":"Reattach Interval","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nWhen a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to reattach the volume. This value specifies the number of seconds to wait between retries. The default value is 10 seconds which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ReAttachIntervalSeconds\r\nType: DWORD\r\nValues: Min = 1, Max = 60","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"0e95e9e305fb7834":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff","displayName":"Remove Orphaned OST Files On Logoff","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nRemoves duplicate OST files\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RemoveOrphanedOSTFilesOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"0e3c97421f3c34e8":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowfontdownloads"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"0e6322dc9ea45752":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"0e97e25cd72c6a61":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowlessprivilegedsites"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"0e28fbc6f566d376":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809","displayName":"Use Pop-up Blocker","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_3","displayName":"Disable","description":null,"helpText":null}]},"0e69732bc9320141":{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC","description":"This policy controls the use of post-quantum key agreement for WebRTC in Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge will offer post-quantum key agreement for WebRTC.\r\n\r\nIf you disable this policy, post-quantum key agreement will not be offered for WebRTC.\r\n\r\nIf you don't configure this policy, post-quantum key agreement will not be offered for WebRTC. A future version of Microsoft Edge may enable this feature by default.\r\n\r\nOffering a post-quantum key agreement is backwards compatible. Existing datagram transport layer security (DTLS) peers and networking middleware are expected to ignore the new option and continue using previous options.\r\n\r\nHowever, devices that don't correctly implement DTLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or larger message sizes. Such devices aren’t post-quantum-ready and may interfere with an organization's post-quantum transition. If this issue occurs, administrators should contact the device vendor for a fix.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement_1","displayName":"Enabled","description":null,"helpText":null}]},"0e4b0b86d312d1d6":{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_scarewareblockerallowlistdomainsdesc","displayName":"Configure the list of domains where Microsoft Edge scareware blocker won't run (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":null},"0ed0b173648309df":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_idledetectionblockedforurlsdesc","displayName":"Blocked sites for idle detection (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"0edd2733ac2f902e":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~performance_recommended_startupboostenabled_recommended","displayName":"Enable startup boost","description":"Allows Microsoft Edge processes to start at OS sign-in and restart in background after the last browser window is closed.\r\n\r\nIf Microsoft Edge is running in background mode, the browser might not close when the last window is closed and the browser won't be restarted in background when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about what happens after configuring Microsoft Edge background mode behavior.\r\n\r\nIf you enable this policy, startup boost is turned on.\r\n\r\nIf you disable this policy, startup boost is turned off.\r\n\r\nIf you don't configure this policy, startup boost may initially be off or on. The user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about startup boost: https://go.microsoft.com/fwlink/?linkid=2147018","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~performance_recommended_startupboostenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~performance_recommended_startupboostenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0e64530291649984":{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatiemachine","displayName":"Disable local training of the Adaptive Floatie feature for the computer.","description":"\r\nThis policy setting disables local training of the Adaptive Floatie feature for the computer.\r\n\r\nFor local training policy, feature-specific settings are prioritized over general settings and computer settings are prioritized over user settings.\r\n\r\n- If this policy setting is enabled, local training of the Adaptive Floatie feature is disabled for the computer.\r\n- If this policy setting is disabled, local training of the Adaptive Floatie feature is enabled for the computer.\r\n- If this policy setting is not configured, local training of the Adaptive Floatie feature is determined by lower priority policy settings.\r\n- If this policy setting is not configured and lower priority policy settings are also not configured, local training of the Adaptive Floatie feature is enabled for the computer.\r\n\r\nFor this policy setting, the order of priority is:\r\n1. Disable local training of the Adaptive Floatie feature for the computer.\r\n2. Disable local training of all features for the computer.\r\n3. Disable local training of the Adaptive Floatie feature for the user.\r\n4. Disable local training of all features for the user.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatiemachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatiemachine_1","displayName":"Enabled","description":null,"helpText":null}]},"0edb597fd5417405":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline_l_updatedeadlineid","displayName":"Deadline: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":null},"0ea2d6d8941388db":{"id":"device_vendor_msft_policy_config_power_allowstandbystateswhensleepingonbattery","displayName":"Allow standby states (S1-S3) when sleeping (on battery)","description":"This policy setting manages whether or not Windows is allowed to use standby states when putting the computer in a sleep state.\n\nIf you enable or do not configure this policy setting, Windows uses standby states to put the computer in a sleep state.\n\nIf you disable this policy setting, standby states (S1-S3) are not allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-allowstandbystateswhensleepingonbattery"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_allowstandbystateswhensleepingonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_allowstandbystateswhensleepingonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},"0eb10a47887aa3f1":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily","displayName":"Mute notifications daily","description":null,"helpText":null,"infoUrls":[],"categoryId":"3ccd987e-bfca-4838-98ea-576de34b3ebe","categoryName":"Certain Hours","options":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_1","displayName":"Require","description":null,"helpText":null}},"0e23efb12ee69f77":{"id":"device_vendor_msft_policy_config_update_allowautoupdate","displayName":"Allow Auto Update","description":"Enables the IT admin to manage automatic update behavior to scan, download, and install updates. Supported operations are Get and Replace. Important. This option should be used only for systems under regulatory compliance, as you will not get security updates as well. If the policy is not configured, end-users get the default behavior (Auto install and restart).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowautoupdate"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_allowautoupdate_0","displayName":"Notify the user before downloading the update. This policy is used by the enterprise who wants to enable the end-users to manage data usage. With this option users are notified when there are updates that apply to the device and are ready for download. Users can download and install the updates from the Windows Update control panel.","description":"Notify the user before downloading the update. This policy is used by the enterprise who wants to enable the end-users to manage data usage. With this option users are notified when there are updates that apply to the device and are ready for download. Users can download and install the updates from the Windows Update control panel.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_1","displayName":"Auto install the update and then notify the user to schedule a device restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates immediately. If the installation requires a restart, the end-user is prompted to schedule the restart time. The end-user has up to seven days to schedule the restart and after that, a restart of the device is forced. Enabling the end-user to control the start time reduces the risk of accidental data loss caused by applications that do not shutdown properly on restart.","description":"Auto install the update and then notify the user to schedule a device restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates immediately. If the installation requires a restart, the end-user is prompted to schedule the restart time. The end-user has up to seven days to schedule the restart and after that, a restart of the device is forced. Enabling the end-user to control the start time reduces the risk of accidental data loss caused by applications that do not shutdown properly on restart.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_2","displayName":"Auto install and restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This is the default behavior for unmanaged devices. Devices are updated quickly, but it increases the risk of accidental data loss caused by an application that does not shutdown properly on restart.","description":"Auto install and restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This is the default behavior for unmanaged devices. Devices are updated quickly, but it increases the risk of accidental data loss caused by an application that does not shutdown properly on restart.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_3","displayName":"Auto install and restart at a specified time. The IT specifies the installation day and time. If no day and time are specified, the default is 3 AM daily. Automatic installation happens at this time and device restart happens after a 15-minute countdown. If the user is logged in when Windows is ready to restart, the user can interrupt the 15-minute countdown to delay the restart.","description":"Auto install and restart at a specified time. The IT specifies the installation day and time. If no day and time are specified, the default is 3 AM daily. Automatic installation happens at this time and device restart happens after a 15-minute countdown. If the user is logged in when Windows is ready to restart, the user can interrupt the 15-minute countdown to delay the restart.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_4","displayName":"Auto install and restart without end-user control. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This setting option also sets the end-user control panel to read-only.","description":"Auto install and restart without end-user control. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This setting option also sets the end-user control panel to read-only.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_5","displayName":"Turn off automatic updates.","description":"Turn off automatic updates.","helpText":null}]},"0e0cdbd24292fbe2":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_part_updatechecksuppressedstartmin","displayName":"Minute (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"78497707-c3e4-400b-a6bc-1813c3689fdc","categoryName":"Preferences","options":null},"0e370d76f903ced6":{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_rollbacktotargetversionmicrosoftedgecanary","displayName":"Rollback to Target version","description":"Specifies that Microsoft Edge Update should rollback installations of Microsoft Edge to the version indicated in 'Target version override'.\r\n\r\nThis policy has no effect unless 'Target version override' is set and 'Update policy override' is set to one of the ON states (Always allow updates, Automatic silent updates only, Manual updates only).\r\n\r\nIf you disable this policy or don't configure it, installs that have a version higher than that specified by 'Target version override' will be left as-is.\r\n\r\nIf you enable this policy, installs that have a current version higher than specified by the 'Target version override' will be downgraded to the target version.\r\n\r\nWe recommend that users install the latest version of the Microsoft Edge browser to ensure protection by the latest security updates. Rollback to an earlier version risks exposure to known security issues. This policy is meant to be used as a temporary fix to address issues in a Microsoft Edge browser update.\r\n\r\nBefore temporarily rolling back your browser version, we recommend that you turn on Sync (https://go.microsoft.com/fwlink/?linkid=2133032) for all users in your organization. If you don't turn on Sync, there is a risk of permanent browsing data loss. Use this policy at your own risk.\r\n\r\nNote: All versions available for rollback can be viewed here https://aka.ms/EdgeEnterprise.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nThis policy applies to Microsoft Edge version 86 or later.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2133918 for more information. This policy is meant to serve as temporary measure when Enterprise Administrators need to downgrade for business reasons. To ensure users are protected by the latest security updates, the most recent version should be used. When versions are downgraded to older versions, there could be incompatibilities.","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_rollbacktotargetversionmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_rollbacktotargetversionmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"0e3c37601dcfb702":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdiskmount","displayName":"Allow passthrough disk mount","description":"When set to disabled, this policy disables passthrough disk mounting in WSL2 (wsl.exe --mount). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdiskmount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdiskmount_1","displayName":"Enabled","description":null,"helpText":null}]},"0e1a27f28ab0ae17":{"id":"enrollment_autopilot_dpp_allowedappids","displayName":"Allowed applications","description":"Select up to 25 managed apps you want to apply with this deployment. These apps should be assigned to the device security group you selected earlier. You can check the installation status for these apps in the Autopilot device preparation deployment report.","helpText":"","infoUrls":[],"categoryId":"9d952d62-89a8-46cd-8d2b-bb86ad1fac5e","categoryName":null,"options":null},"0efffe706d94dbfd":{"id":"linux_mdatp_managed_antivirusengine_threattypesettingsmergepolicy","displayName":"Threat type settings merge","description":"Specify the merge policy for threat type settings. This can be a combination of administrator-defined and user-defined settings (merge) or only administrator-defined settings (admin_only). This setting can be used to restrict local users from defining their own settings for different threat types.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#threat-type-settings-merge-policy"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_threattypesettingsmergepolicy_0","displayName":"merge","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettingsmergepolicy_1","displayName":"admin_only","description":null,"helpText":null}]},"0e219f6769ec6bdc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityencryptdecryptdatabase","displayName":"File tab | Access Options | Customize | All Commands | Encode/Decode Database (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityencryptdecryptdatabase_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityencryptdecryptdatabase_1","displayName":"True","description":null,"helpText":null}]},"0e50c0ef308fa183":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecuritysetdatabasepassword","displayName":"Database tools | Database tools | Encrypt with Password (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecuritysetdatabasepassword_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecuritysetdatabasepassword_1","displayName":"True","description":null,"helpText":null}]},"0ed4e4dc549d249f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_sameorigintabcaptureallowedbyoriginsdesc","displayName":"Allow Same Origin Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"0e681a5dc9945961":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls","displayName":"Block Window Management permission on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which will automatically deny the window management permission. This will limit the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultWindowManagementSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nThis replaces the deprecated WindowPlacementBlockedForUrls policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0e3b93b0a1d86072":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc","displayName":"Disable all trusted locations (User)","description":"This policy setting allows administrators to disable all trusted locations in the specified applications. Trusted locations specified in the Trust Center are used to define file locations that are assumed to be safe. Content, code, and add-ins are allowed to load from trusted locations with a minimal amount of security, without prompting the users for permission. If a dangerous file is opened from a trusted location, it will not be subject to standard security measures and could harm users' computers or data.\r\n \r\nIf you enable this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are ignored, including any trusted locations established by Office 2016 during setup, deployed to users using Group Policy, or added by users themselves. Users will be prompted again when opening files from trusted locations.\r\n\r\nIf you disable or do not configure this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are assumed to be safe.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1","displayName":"Enabled","description":null,"helpText":null}]},"0e9628776d17901f":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneinitializeandscriptactivexcontrols"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"0ef3f3e418c2f2ab":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"0ec682ff4f1842cb":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":null},"0e8e1efa3dea24b6":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (User)","description":"Setting the policy to All (0) or leaving it unset lets users edit trust settings for all CA certificates, remove user-imported certificates, and import certificates using Certificate Manager. Setting the policy to UserOnly (1) lets users manage only user-imported certificates, but not change trust settings of built-in certificates. Setting it to None (2) lets users view (not manage) CA certificates.\r\n\r\nPolicy options mapping:\r\n\r\n* All (0) = Allow users to manage all certificates\r\n\r\n* UserOnly (1) = Allow users to manage user certificates\r\n\r\n* None (2) = Disallow users from managing certificates\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"0e8850bb0c471d44":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall","displayName":"Prevent install of the BHO to redirect incompatible sites from Internet Explorer to Microsoft Edge (User)","description":"This setting lets you specify whether to block the install of the Browser Helper Object (BHO) that enables redirecting incompatible sites from Internet Explorer to Microsoft Edge for sites that require a modern browser.\r\n\r\nIf you enable this policy, the BHO will not be installed. If it is already installed it will be uninstalled on the next Microsoft Edge update.\r\n\r\nIf this policy is not configured or is disabled, the BHO will be installed.\r\n\r\nThe BHO is required for incompatible site redirection to occur, however whether redirection occurs or not is also controlled by 'RedirectSitesFromInternetExplorerRedirectMode' (Redirect incompatible sites from Internet Explorer to Microsoft Edge).\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall_1","displayName":"Enabled","description":null,"helpText":null}]},"0e3118308a3e3c44":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_internetexplorerintegrationcloudsitelist","displayName":"Configure the Enterprise Mode Cloud Site List (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0e129f63628a0b0b":{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_m365linkshandling_l_m365linksbrowserchoice","displayName":"Choose which browser opens web links (User)","description":"This policy controls which browser will open web links from within supported Microsoft 365 apps. By default, web links will open in Microsoft Edge.\r\n\r\nNote: This policy doesn’t override any user settings or policies that specify that document links should open in the desktop apps instead of their web app counterparts.\r\n\r\nIf you enable this policy, you can choose either “System default browser” or a specific browser, such as “Microsoft Edge.” “System default browser” refers to the browser setting specified on the user’s Windows device.\r\n\r\nIf you disable or don’t configure this policy, web links will open in Microsoft Edge. The user can set their preferred browser from the settings for the specific Microsoft 365 app.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2224834.","helpText":"","infoUrls":[],"categoryId":"94ce8206-be22-496c-aa72-f3560e2a5c8d","categoryName":"Links","options":[{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_m365linkshandling_l_m365linksbrowserchoice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_m365linkshandling_l_m365linksbrowserchoice_1","displayName":"Enabled","description":null,"helpText":null}]},"0eaec469ab8345b8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_errorscleanupinterval","displayName":"Set errors cleanup interval (User)","description":"This policy setting allows you to specify the interval for how long failed operations and other error data will remain in the cache before they can be deleted. Synchronization can fail for any reason. The failed operations and related instances are marked as \"in error,\" and this data will eventually need to be removed from the cache. It is recommended that this interval be larger than the regular cleanup interval to give the user opportunities to troubleshoot errors.\r\n\r\nIf you enable this policy setting, you may specify the interval (in minutes) for the times the failed operations and error data in the cache are deleted. \r\n\r\nIf you disable or do not configure this policy setting, a default value of 10080 minutes (1 week) will be used.","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_errorscleanupinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_errorscleanupinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"0e15eb3300c79439":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultbuttontext","displayName":"Default button text (User)","description":"Sets the custom button text that appears on the error dialog box.","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultbuttontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultbuttontext_1","displayName":"Enabled","description":null,"helpText":null}]},"0e84ce575b7860ea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_trustcentersolution","displayName":"Trust Local Solution (User)","description":"Suppresses prompt that asks to load a locally installed full-trust solution of a Document Information Panel in the background. This is normally shown if a full-trust solution is deployed and there are bound properties in the document (e.g. lookups) that must load the Document Information Panel in the background to retrieve the contents of the property. \r\n\r\nEnter pairs corresponding to the Document Information Panel solution path and a value of 1 to disable. If the value is set, the user will not be prompted when loading the full-trust solution in the background. The solution will load normally (and any non-related warnings that exist).","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_trustcentersolution_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_trustcentersolution_1","displayName":"Enabled","description":null,"helpText":null}]},"0ecabbf300a8fe9f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyspw","displayName":"Disallow in SharePoint Workspace (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyspw_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyspw_1","displayName":"True","description":null,"helpText":null}]},"0e42820b05ba9b39":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_cherokee","displayName":"Cherokee (User)","description":"Enables the editing language Cherokee","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_cherokee_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_cherokee_1","displayName":"Enabled","description":null,"helpText":null}]},"0ecdc3d7c7a8e506":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypescomaddins","displayName":"COM add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypescomaddins_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypescomaddins_1","displayName":"True","description":null,"helpText":null}]},"0e9c677c41888e9e":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb","displayName":"Cipher Feedback (CFB)","description":null,"helpText":null}]},"0e26146544d421f1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage65","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage65_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage65_1","displayName":"True","description":null,"helpText":null}]},"0ec439f59f849a36":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing~l_autoformatasyoutype_l_replacestraightquoteswithsmartquotes","displayName":"Replace straight quotes with smart quotes (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"b792508d-da03-4174-bcf1-666d128ee8ad","categoryName":"AutoFormat as you type","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing~l_autoformatasyoutype_l_replacestraightquoteswithsmartquotes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing~l_autoformatasyoutype_l_replacestraightquoteswithsmartquotes_1","displayName":"Enabled","description":null,"helpText":null}]},"0e273bf9fa02aa20":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]},"0ee82bdee966a609":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_descriptioncolon74","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"0e5c5e0314bce89e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc18_l_allowsubfolders79","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc18_l_allowsubfolders79_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc18_l_allowsubfolders79_1","displayName":"True","description":null,"helpText":null}]},"0ebabd962e06babd":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingbackgroundspellingchecker_l_delaybeforestartingbackgroundspellingchecker3","displayName":"Milliseconds (e.g. 5000 milliseconds = 5 seconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/0f.json b/public/intune-definitions/0f.json new file mode 100644 index 000000000000..c7e8a7ff02d2 --- /dev/null +++ b/public/intune-definitions/0f.json @@ -0,0 +1 @@ +{"0f7b78b3fd8f1eef":{"id":"ade_setupassistant_department","displayName":"Department","description":null,"helpText":"Appears to users on About Configuration screen","infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":null},"0f6d1177538b2d41":{"id":"com.apple.airplay_allowlist_item_deviceid","displayName":"Device ID (Deprecated)","description":"The device ID of the AirPlay destination in the format xx:xx:xx:xx:xx:xx. This field isn’t case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","categoryName":"AirPlay","options":null},"0ff8d5d0b700d3fb":{"id":"com.apple.applicationaccess_allowardremotemanagementmodification","displayName":"Allow ARD Remote Management Modification","description":"If 'false', prevents modifying the Remote Management Sharing setting in System Settings.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowardremotemanagementmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowardremotemanagementmodification_true","displayName":"True","description":null,"helpText":null}]},"0faa38373a8946fc":{"id":"com.apple.managedclient.preferences_clipboardallowedforurls","displayName":"Allow clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\n\nSetting the policy lets you create a list of URL patterns that specify which sites can use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\n\nLeaving the policy unset means \"DefaultClipboardSetting\" applies for all sites if it's set. If it isn't set, the user's personal setting applies.\n\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#clipboardallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"0fdad7cb98427c62":{"id":"com.apple.managedclient.preferences_extensioninstallforcelist","displayName":"Control which extensions are installed silently","description":"Specifies extensions that are installed silently, without user interaction, and that the users can't uninstall or disable (\"force-installed\"). All permissions requested by the extensions are granted implicitly, without user interaction, including any additional permissions requested by future versions of the extension. Furthermore, permissions are granted for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These two APIs are only available to extensions that are force-installed.)\n\nThis policy takes precedence over a potentially conflicting \"ExtensionInstallBlocklist\" policy. When you take an extension off of the force-installed list it's automatically uninstalled by Microsoft Edge.\n\nFor Windows devices that aren't joined to a Microsoft Active Directory domain, forced installation is limited to extensions available in the Microsoft Store.\n\nNote that users can modify the source code of any extension by using Developer Tools, potentially rendering the extension dysfunctional. If this is a concern, set the \"DeveloperToolsAvailability\" policy.\n\nUse the following format to add an extension to the list:\n\n[extensionID];[updateURL]\n\n- extensionID - the 32-letter string found on edge://extensions when in developer mode.\n\n- updateURL (optional) is the address of the Update Manifest XML document for the app or extension, as described at https://go.microsoft.com/fwlink/?linkid=2095043. If you don't set the updateURL, the Microsoft Store update URL is used (currently https://edge.microsoft.com/extensionwebstorebase/v1/crx). Note that the update URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL indicated in the extension's manifest.\n\nFor example, gggmmkjegpiggikcnhidnjjhmicpibll;https://edge.microsoft.com/extensionwebstorebase/v1/crx installs the Microsoft Online app from the Microsoft Store \"update\" URL. For more information about hosting extensions, see: https://go.microsoft.com/fwlink/?linkid=2095044.\n\nIf you don't configure this policy, no extensions are installed automatically, and users can uninstall any extension in Microsoft Edge.\n\nNote that this policy doesn't apply to InPrivate mode.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensioninstallforcelist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"0f2496048632e6b6":{"id":"com.apple.mcx_com.apple.mcx-accounts","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"5214f1e7-a5a9-4de5-80b4-2f7084a8d068","categoryName":"Accounts","options":null},"0f47ea385ba730c8":{"id":"com.apple.system-extension-policy_removablesystemextensions","displayName":"Removable System Extensions","description":"A dictionary of system extensions that are allowed to remove themselves from the machine. The dictionary maps team identifiers (keys) to arrays of bundle identifiers, where the bundle identifier defines the system extension. An application using the OSSystemExtensionDeactivationRequest API can deactivate the specified system extensions without requiring an administrator to authorize the operation. Available in macOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"0f8fdd0215e661df":{"id":"com.microsoft.edge.mamedgeappconfigsettings.aigenthemesenabled","displayName":"Enables DALL-E themes generation","description":"This policy lets you generate browser themes using DALL-E and apply them to Microsoft Edge.\n\nIf you enable or don't configure this policy, the AI generated themes are enabled.\n\nIf you disable this policy, the AI generated themes are disabled for your organization.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.aigenthemesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.aigenthemesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"0fd1e5692ab90025":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhistory_recommended","displayName":"Allow importing of browsing history (users can override)","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\n\nIf you enable this policy, the Browsing history check box is automatically selected in the Import browser data dialog box.\n\nIf you disable this policy, browsing history data isn't imported at first run, and users can't import this data manually.\n\nIf you don't configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\n\nNote: This policy currently manages import from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhistory_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhistory_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"0f574f75906ee78a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showmicrosoftrewards","displayName":"Show Microsoft Rewards experiences","description":"Show Microsoft Rewards experience and notifications.\nIf you enable this policy:\n - Microsoft account users (excludes Azure AD accounts) in search, new tab page, and earn markets see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings is enabled and toggled on.\n\nIf you disable this policy:\n - Microsoft account users (excludes Azure AD accounts) in search, new tab page, and earn markets won't see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings is disabled and toggled off.\n\nIf you don't configure this policy:\n - Microsoft account users (excludes Azure AD accounts) in search, new tab page, and earn markets see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings is enabled and toggled on.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showmicrosoftrewards_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showmicrosoftrewards_true","displayName":"Enabled","description":null,"helpText":null}]},"0fe321996de847ed":{"id":"ddm-latestsoftwareupdate_installtime","displayName":"Install Time","description":"Specify the local device time for when updates are enforced. This setting uses the 24-hour clock format where midnight is 00:00 and 11:59pm is 23:59. Ensure that you include the leading 0 on single digit hours. For example, 01:00, 02:00, 03:00.","helpText":null,"infoUrls":[],"categoryId":"15be55d8-7477-4274-9b09-b775bce68416","categoryName":"Software Update Enforce Latest","options":null},"0f0ee6021d51a74a":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_smartmultihomednameresolution","displayName":"Turn off smart multi-homed name resolution","description":"Specifies that a multi-homed DNS client should optimize name resolution across networks. The setting improves performance by issuing parallel DNS, link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT) queries across all networks. In the event that multiple positive responses are received, the network binding order is used to determine which response to accept.\r\n\r\nIf you enable this policy setting, the DNS client will not perform any optimizations. DNS queries will be issued across all networks first. LLMNR queries will be issued if the DNS queries fail, followed by NetBT queries if LLMNR queries fail.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, name resolution will be optimized when issuing DNS, LLMNR and NetBT queries.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-smartmultihomednameresolution"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_smartmultihomednameresolution_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_smartmultihomednameresolution_1","displayName":"Enabled","description":null,"helpText":null}]},"0f697eb1d5a13c5f":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_extexclusionlist_lbl_extexclusionlistedit","displayName":"Extensions: ","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"0ff4f17581c46caf":{"id":"device_vendor_msft_policy_config_admx_power_customactiveschemeoverride_2_customactiveschemeoverrideenter","displayName":"Custom Active Power Plan (GUID):","description":null,"helpText":"","infoUrls":[],"categoryId":"290ec637-e780-4e95-9834-6368ac0437d1","categoryName":"Power Management","options":null},"0f99eb5e07cf3bc8":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_c_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":null},"0fa72827698e66bb":{"id":"device_vendor_msft_policy_config_admx_smartcard_allowintegratedunblock","displayName":"Allow Integrated Unblock screen to be displayed at the time of logon","description":"This policy setting lets you determine whether the integrated unblock feature will be available in the logon User Interface (UI).\r\n\r\nIn order to use the integrated unblock feature your smart card must support this feature. Please check with your hardware manufacturer to see if your smart card supports this feature.\r\n\r\nIf you enable this policy setting, the integrated unblock feature will be available.\r\n\r\nIf you disable or do not configure this policy setting then the integrated unblock feature will not be available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-allowintegratedunblock"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_allowintegratedunblock_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_allowintegratedunblock_1","displayName":"Enabled","description":null,"helpText":null}]},"0fb12ccc0dd6cc9c":{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name_resolution_interval_routernameresolutionintervalbox","displayName":"Minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":null},"0f64bd2b6eea671f":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_delay","displayName":"Notification delay (in seconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"0f24497d38eb513e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments","description":"This feature allows for hyperlinks and address bar URL navigations to target specific text within a web page, which will be scrolled to once the loading of the web page is complete.\r\n\r\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via URL will be enabled.\r\n\r\nIf you disable this policy, web page scrolling to specific text fragments via URL will be disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0fc7a9453e1beb1b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled","displayName":"Enable WPAD optimization","description":"Setting the policy to Enabled or leaving it unset turns on WPAD (Web Proxy Auto-Discovery) optimization in Google Chrome.\r\n\r\nSetting the policy to Disabled turns off WPAD optimization, causing Google Chrome to wait longer for DNS-based WPAD servers.\r\n\r\nWhether or not this policy is set, users can't change the WPAD optimization setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0f3e8e6923800766":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff","displayName":"Keep Local Directory (after logoff)","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nThe 'local_%username%' folder will be left on the system after logoff and will also be used again if the same user logs on again\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\KeepLocalDir\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"0f939b0a5a7cd154":{"id":"device_vendor_msft_policy_config_internetexplorer_disableadobeflash","displayName":"Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects","description":"This policy setting turns off Adobe Flash in Internet Explorer and prevents applications from using Internet Explorer technology to instantiate Flash objects.\r\n\r\nIf you enable this policy setting, Flash is turned off for Internet Explorer, and applications cannot use Internet Explorer technology to instantiate Flash objects. In the Manage Add-ons dialog box, the Flash status will be 'Disabled', and users cannot enable Flash. If you enable this policy setting, Internet Explorer will ignore settings made for Adobe Flash through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings.\r\n\r\nIf you disable, or do not configure this policy setting, Flash is turned on for Internet Explorer, and applications can use Internet Explorer technology to instantiate Flash objects. Users can enable or disable Flash in the Manage Add-ons dialog box.\r\n\r\nNote that Adobe Flash can still be disabled through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings, even if this policy setting is disabled, or not configured. However, if Adobe Flash is disabled through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings and not through this policy setting, all applications that use Internet Explorer technology to instantiate Flash object can still do so. For more information, see \"Group Policy Settings in Internet Explorer 10\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-InternetExplorer#internetexplorer-disableadobeflash"],"categoryId":"89c0381d-3b9b-4be5-8077-ffb18d47e910","categoryName":"Add-on Management","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableadobeflash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableadobeflash_1","displayName":"Enabled","description":null,"helpText":null}]},"0f2f0649f4516b2e":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"0f3f28adf8b1e58e":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles","displayName":"Show security warning for potentially unsafe files","description":"This policy setting controls whether or not the \"Open File - Security Warning\" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example).\n\nIf you enable this policy setting and set the drop-down box to Enable, these files open without a security warning. If you set the drop-down box to Prompt, a security warning appears before the files open.\n\nIf you disable this policy setting, these files do not open.\n\nIf you do not configure this policy setting, the user can configure how the computer handles these files. By default, these files are blocked in the Restricted zone, enabled in the Intranet and Local Computer zones, and set to prompt in the Internet and Trusted zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneshowsecuritywarningforpotentiallyunsafefiles"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"0f4f0e6975280ab3":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"0feb0a7b1e3f964a":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallyencryptorsignsecurechanneldataalways","displayName":"Domain Member Digitally Encrypt Or Sign Secure Channel Data Always","description":"Domain member: Digitally encrypt or sign secure channel data (always) This security setting determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. This setting determines whether or not all secure channel traffic initiated by the domain member meets minimum security requirements. Specifically it determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. If this policy is enabled, then the secure channel will not be established unless either signing or encryption of all secure channel traffic is negotiated. If this policy is disabled, then encryption and signing of all secure channel traffic is negotiated with the Domain Controller in which case the level of signing and encryption depends on the version of the Domain Controller and the settings of the following two policies: Domain member: Digitally encrypt secure channel data (when possible) Domain member: Digitally sign secure channel data (when possible) Default: Enabled. Notes: If this policy is enabled, the policy Domain member: Digitally sign secure channel data (when possible) is assumed to be enabled regardless of its current setting. This ensures that the domain member attempts to negotiate at least signing of the secure channel traffic. Logon information transmitted over the secure channel is always encrypted regardless of whether encryption of ALL other secure channel traffic is negotiated or not.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_digitallyencryptorsignsecurechanneldataalways"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"0fb09b2d2fbb5f58":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling","displayName":"Restrict exposure of local IP address by WebRTC","description":"Allows you to set whether or not WebRTC exposes the user's local IP address.\r\n\r\nIf you set this policy to \"AllowAllInterfaces\" ('default') or \"AllowPublicAndPrivateInterfaces\" ('default_public_and_private_interfaces'), WebRTC exposes the local IP address.\r\n\r\nIf you set this policy to \"AllowPublicInterfaceOnly\" ('default_public_interface_only') or \"DisableNonProxiedUdp\" ('disable_non_proxied_udp'), WebRTC doesn't expose the local IP address.\r\n\r\nIf you don't set this policy, or if you disable it, WebRTC exposes the local IP address.\r\n\r\n * 'default' = Allow all interfaces. This exposes the local IP address.\r\n * 'default_public_and_private_interfaces' = Allow public and private interfaces over http default route. This exposes the local IP address.\r\n * 'default_public_interface_only' = Allow public interface over http default route. This doesn't expose the local IP address.\r\n * 'disable_non_proxied_udp' = Use TCP unless proxy server supports UDP. This doesn't expose the local IP address.\r\n\r\nExample value: default","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_1","displayName":"Enabled","description":null,"helpText":null}]},"0f76d7cd11190c78":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled","displayName":"Enable open in sidebar","description":"Allow/Disallow user open a website or an app to the sidebar.\r\n\r\nIf you enable or don't configure this policy, users will be able to access the feature.\r\nIf you disable this policy, users will not be able to access the feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"0f48679c38a7e017":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites_javascriptoptimizerblockedforsitesdesc","displayName":"Block JavaScript optimizations on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"0f64dac05b502e2d":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_spellchecklanguageblocklistdesc","displayName":"Force disable spellcheck languages (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0f082a8db1644ff1":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection","displayName":"Configure enhanced hang detection for Internet Explorer mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection_0","displayName":"Enhanced hang detection disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection_1","displayName":"Enhanced hang detection enabled","description":null,"helpText":null}]},"0fb3902e58aaa95f":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~typosquattingchecker_recommended_typosquattingcheckerenabled_recommended","displayName":"Configure Edge Website Typo Protection","description":"This policy setting lets you configure whether to turn on Edge Website Typo Protection. Edge Website Typo Protection provides warning messages to help protect your users from potential typosquatting sites. By default, Edge Website Typo Protection is turned on.\r\n\r\nIf you enable this policy, Edge Website Typo Protection is turned on.\r\n\r\nIf you disable this policy, Edge Website Typo Protection is turned off.\r\n\r\nIf you don't configure this policy, Edge Website Typo Protection is turned on but users can choose whether to use Edge Website Typo Protection.","helpText":"","infoUrls":[],"categoryId":"1ccd3115-55e7-464f-9bb9-d38a92191306","categoryName":"Edge Website Typo Protection settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~typosquattingchecker_recommended_typosquattingcheckerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~typosquattingchecker_recommended_typosquattingcheckerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"0f559e92456ec0b4":{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseinternalproxyservers","displayName":"Enterprise Internal Proxy Servers","description":"This is the comma-separated list of internal proxy servers. For example 157.54.14.28, 157.54.11.118, 10.202.14.167, 157.53.14.163, 157.69.210.59. These proxies have been configured by the admin to connect to specific resources on the Internet. They are considered to be enterprise network locations. The proxies are only leveraged in configuring the EnterpriseCloudResources policy to force traffic to the matched cloud resources through these proxies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseinternalproxyservers"],"categoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","categoryName":"Network Isolation","options":null},"0fc73070b13d5823":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablevbaforofficeapplications","displayName":"Disable VBA for Office applications","description":"This setting will prevent Excel, SharePoint Designer, Outlook, PowerPoint, Publisher and Word from using Visual Basic for Applications (VBA), despite whether or not the VBA feature is installed. Changing this setting will not install or remove the VBA files from the omputer. See the Office Resource Kit for more important information about configuring security settings.","helpText":"","infoUrls":[],"categoryId":"f0190b73-0d5c-410e-bce1-e03aa1f62ed4","categoryName":"Security Settings","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablevbaforofficeapplications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablevbaforofficeapplications_1","displayName":"Enabled","description":null,"helpText":null}]},"0fabde7adcc8f379":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_spdesignexe191","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_spdesignexe191_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_spdesignexe191_1","displayName":"True","description":null,"helpText":null}]},"0f080b9b5188c28b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_visioexe131","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_visioexe131_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_visioexe131_1","displayName":"True","description":null,"helpText":null}]},"0f15036f85111690":{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_desktop_checkbox","displayName":"Desktop (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_desktop_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_desktop_checkbox_1","displayName":"True","description":null,"helpText":null}]},"0fd5e558ff70f501":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_diskspacecheckthresholdmblist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"0f87381faba12202":{"id":"device_vendor_msft_policy_config_userrights_restorefilesanddirectories","displayName":"Restore Files And Directories","description":"This user right determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object. Specifically, this user right is similar to granting the following permissions to the user or group in question on all files and folders on the system:Traverse Folder/Execute File, Write. Caution: Assigning this user right can be a security risk. Since users with this user right can overwrite registry settings, hide data, and gain ownership of system objects, only assign this user right to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#restorefilesanddirectories"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"0f2413c3952b47d2":{"id":"intelligencesettings_allowimageplayground","displayName":"Allow Image Playground","description":"If `false`, disables Image Playground.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_allowimageplayground_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_allowimageplayground_true","displayName":"True","description":null,"helpText":null}]},"0f9dde54883e44f8":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment","displayName":"General Alignment (User)","description":"Specifies the default text alignment.","helpText":"","infoUrls":[],"categoryId":"33b9194b-4027-4c23-b662-52f25db7f839","categoryName":"International","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_1","displayName":"Enabled","description":null,"helpText":null}]},"0f2adc6b33a42fde":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_descriptioncolon53","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"0f82001a71c678f1":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory","displayName":"Specify default category for Add New Programs (User)","description":"Specifies the category of programs that appears when users open the \"Add New Programs\" page.\r\n\r\nIf you enable this setting, only the programs in the category you specify are displayed when the \"Add New Programs\" page opens. Users can use the Category box on the \"Add New Programs\" page to display programs in other categories.\r\n\r\nTo use this setting, type the name of a category in the Category box for this setting. You must enter a category that is already defined in Add or Remove Programs. To define a category, use Software Installation.\r\n\r\nIf you disable this setting or do not configure it, all programs (Category: All) are displayed when the \"Add New Programs\" page opens.\r\n\r\nYou can use this setting to direct users to the programs they are most likely to need.\r\n\r\nNote: This setting is ignored if either the \"Remove Add or Remove Programs\" setting or the \"Hide Add New Programs page\" setting is enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-defaultcategory"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory_1","displayName":"Enabled","description":null,"helpText":null}]},"0fec8f6451a81c99":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver","displayName":"Force specific screen saver (User)","description":"Specifies the screen saver for the user's desktop.\r\n\r\nIf you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this setting disables the drop-down list of screen savers in the Screen Saver dialog in the Personalization or Display Control Panel, which prevents users from changing the screen saver.\r\n\r\nIf you disable this setting or do not configure it, users can select any screen saver.\r\n\r\nIf you enable this setting, type the name of the file that contains the screen saver, including the .scr file name extension. If the screen saver file is not in the %Systemroot%\\System32 directory, type the fully qualified path to the file.\r\n\r\nIf the specified screen saver is not installed on a computer to which this setting applies, the setting is ignored.\r\n\r\nNote: This setting can be superseded by the \"Enable Screen Saver\" setting. If the \"Enable Screen Saver\" setting is disabled, this setting is ignored, and screen savers do not run.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-setscreensaver"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver_1","displayName":"Enabled","description":null,"helpText":null}]},"0fb54ee8e25f80d5":{"id":"user_vendor_msft_policy_config_admx_desktop_ad_hidedirectoryfolder","displayName":"Hide Active Directory folder (User)","description":"Hides the Active Directory folder in Network Locations.\r\n\r\nThe Active Directory folder displays Active Directory objects in a browse window.\r\n\r\nIf you enable this setting, the Active Directory folder does not appear in the Network Locations folder.\r\n\r\nIf you disable this setting or do not configure it, the Active Directory folder appears in the Network Locations folder.\r\n\r\nThis setting is designed to let users search Active Directory but not tempt them to casually browse Active Directory.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-ad-hidedirectoryfolder"],"categoryId":"99ba9e42-9872-4a03-a615-fc4a4cebc067","categoryName":"Active Directory","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_ad_hidedirectoryfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_hidedirectoryfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"0f130d112386ae7c":{"id":"user_vendor_msft_policy_config_admx_msi_disablerollback_1","displayName":"Prohibit rollback (User)","description":"This policy setting prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.\r\n\r\nIf you enable this policy setting, Windows Installer is prevented from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete.\r\n\r\nThis policy setting is designed to reduce the amount of temporary disk space required to install programs. Also, it prevents malicious users from interrupting an installation to gather data about the internal state of the computer or to search secure system files. However, because an incomplete installation can render the system or a program inoperable, do not use this policy setting unless it is essential.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If the policy setting is enabled in either folder, it is considered be enabled, even if it is explicitly disabled in the other folder.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disablerollback-1"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"user_vendor_msft_policy_config_admx_msi_disablerollback_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_msi_disablerollback_1_1","displayName":"Enabled","description":null,"helpText":null}]},"0f2ff9cc27e04c7b":{"id":"user_vendor_msft_policy_config_admx_startmenu_locktaskbar","displayName":"Lock the Taskbar (User)","description":"This setting affects the taskbar, which is used to switch between running applications.\r\n\r\nThe taskbar includes the Start button, list of currently running tasks, and the notification area. By default, the taskbar is located at the bottom of the screen, but it can be dragged to any side of the screen. When it is locked, it cannot be moved or resized.\r\n\r\nIf you enable this setting, it prevents the user from moving or resizing the taskbar. While the taskbar is locked, auto-hide and other taskbar options are still available in Taskbar properties.\r\n\r\nIf you disable this setting or do not configure it, the user can configure the taskbar position.\r\n\r\nNote: Enabling this setting also locks the QuickLaunch bar and any other toolbars that the user has on their taskbar. The toolbar's position is locked, and the user cannot show and hide various toolbars using the taskbar context menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-locktaskbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_locktaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_locktaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"0f27d17cba4e5ec5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs","displayName":"Allow invocation of file selection dialogs (User)","description":"Setting the policy to Enabled or leaving it unset means Chrome can display, and users can open, file selection dialogs.\r\n\r\nSetting the policy to Disabled means that whenever users perform actions provoking a file selection dialog, such as importing bookmarks, uploading files, and saving links, a message appears instead. The user is assumed to have clicked Cancel on the file selection dialog.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"0f31de27db954e4c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener","displayName":"Do not set window.opener for links targeting _blank (User)","description":"Setting the policy to Disabled allows popups targeting _blank to access (via JavaScript) the page that requested to open the popup.\r\n\r\nSetting the policy to Enabled or leaving it unset causes the window.opener property to be set to null unless the anchor specifies rel=\"opener\".\r\n\r\nThis policy will be removed in Google Chrome version 95.\r\n\r\nSee https://chromestatus.com/feature/6140064063029248.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener_1","displayName":"Enabled","description":null,"helpText":null}]},"0fa919b3a44824cb":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_2","displayName":"Denies the Local Fonts permission on all sites by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_3","displayName":"Ask every time a site wants obtain the Local Fonts permission","description":null,"helpText":null}]},"0fad15db9d9a47af":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls","displayName":"Allow the WebHID API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy, the following take precedence, in this order:\r\n\r\n * WebHidBlockedForUrls (if there is a match),\r\n\r\n * DefaultWebHidGuardSetting (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns must not conflict with WebHidBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0f6852d06911a58d":{"id":"user_vendor_msft_policy_config_internetexplorer_allowactivexfiltering","displayName":"Turn on ActiveX Filtering (User)","description":"This policy setting controls the ActiveX Filtering feature for websites that are running ActiveX controls. The user can choose to turn off ActiveX Filtering for specific websites so that ActiveX controls can run properly.\n\nIf you enable this policy setting, ActiveX Filtering is enabled by default for the user. The user cannot turn off ActiveX Filtering, although they may add per-site exceptions.\n\nIf you disable or do not configure this policy setting, ActiveX Filtering is not enabled by default for the user. The user can turn ActiveX Filtering on or off.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowactivexfiltering"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_1","displayName":"Enabled","description":null,"helpText":null}]},"0fc309933979cbd7":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer","displayName":"Allow VBScript to run in Internet Explorer (User)","description":"This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer.\n\nIf you selected Enable in the drop-down box, VBScript can run without user intervention.\n\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run.\n\nIf you selected Disable in the drop-down box, VBScript is prevented from running.\n\nIf you do not configure or disable this policy setting, VBScript is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowvbscripttorunininternetexplorer"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"0f1784696ff0c2eb":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows","displayName":"Enable dragging of content from different domains across windows (User)","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when both the source and destination are in different windows. Users cannot change this setting.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in different windows. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy or do not configure it, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1","displayName":"Enabled","description":null,"helpText":null}]},"0f919e5d5570ac45":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites (User)","description":"Specify a list of sites, based on URL patterns, for which Microsoft Edge should automatically select a client certificate, if the site requests one.\r\n\r\nThe value must be an array of stringified JSON dictionaries. Each dictionary must have the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts from which client certificates the browser will automatically select. Independent of the filter, only certificates will be selected that match the server's certificate request. For example, if $FILTER has the form { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, additionally only client certificates are selected that are issued by a certificate with the CommonName $ISSUER_CN. If $FILTER contains an \"ISSUER\" and a \"SUBJECT\" section, a client certificate must satisfy both conditions to be selected. If $FILTER specifies an organization (\"O\"), a certificate must have at least one organization which matches the specified value to be selected. If $FILTER specifies an organization unit (\"OU\"), a certificate must have at least one organization unit which matches the specified value to be selected. If $FILTER is the empty dictionary {}, the selection of client certificates is not additionally restricted.\r\n\r\nIf you don't configure this policy, auto-selection isn't done for any site.\r\n\r\nExample value:\r\n\r\n{\"pattern\":\"https://www.contoso.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\", \"L\": \"certificate issuer location\", \"O\": \"certificate issuer org\", \"OU\": \"certificate issuer org unit\"}, \"SUBJECT\":{\"CN\":\"certificate subject name\", \"L\": \"certificate subject location\", \"O\": \"certificate subject org\", \"OU\": \"certificate subject org unit\"}}}","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"0f29d5125ec8db87":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_exemptfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"0f1dd66dcc3f78cf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingsendforreview","displayName":"Max number of documents being reviewed using 'send for review' (User)","description":"Sets the total number of documents that can be sent for review by a user before reusing registry entries from previous review cycles.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingsendforreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingsendforreview_1","displayName":"Enabled","description":null,"helpText":null}]},"0fa7dc8282875620":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcaribbean","displayName":"French (Caribbean) (User)","description":"Enables the editing language French (Caribbean)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcaribbean_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcaribbean_1","displayName":"Enabled","description":null,"helpText":null}]},"0ff7df2e0fe0c63e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_isixhosa","displayName":"isiXhosa (User)","description":"Enables the editing language isiXhosa","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_isixhosa_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_isixhosa_1","displayName":"Enabled","description":null,"helpText":null}]},"0f0b099be80c56b7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog02_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"0f553bec16e9aef6":{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockwecfallback","displayName":"Restrict Apps from FPRPC Fallback (User)","description":"\r\n\t\t\tThis policy setting allows you to control the fallback behavior of Microsoft 365 apps when using FrontPage Server Extensions Remote Procedure Call Protocol (FPRPC).\r\n\r\n\t\t\tIf you enable this policy setting, Microsoft 365 apps will not use FPRPC.\r\n\r\n\t\t\tIf you disable this policy setting, Microsoft 365 apps will continue to use FPRPC.\r\n\r\n\t\t\tIf you don't configure this policy setting, Microsoft 365 apps will continue to use FPRPC.\r\n\t\t","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockwecfallback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockwecfallback_1","displayName":"Enabled","description":null,"helpText":null}]},"0fe6aee7dd894cf7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_overridepublishedsyncinteral36","displayName":"Override published sync interval (User)","description":"This policy setting allows you to prevent users from overriding the sync interval published by managed SharePoint lists.\r\n\r\nIf you enable this policy setting, the \"Update Limit\" checkbox found under File tab | Info | Account Settings | SharePoint List | Change… is disabled, and the user's connected SharePoint lists will only sync as defined by the list's administrator.\r\n\r\nIf you disable this policy setting, then individual users will be able to override the sync interval by unchecking the \"Update Limit\" checkbox in the SharePoint List's Options dialog. Defined sync intervals can range from 1 minute to 1440 minutes (a full day).\r\n\r\nIf you do not configure this policy setting, the user's profile will sync the SharePoint list at a default of 20 minutes or as specified by the administrator of the SharePoint list.","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_overridepublishedsyncinteral36_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_overridepublishedsyncinteral36_1","displayName":"Enabled","description":null,"helpText":null}]},"0fa7e3fabe15d9d7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_defaultwebcalsubscriptions_l_empty32_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"060e7533-6c2f-4ed1-9173-f3de58de4bed","categoryName":"Internet Calendars","options":null},"0fef77f45ed5cdb6":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_displayenterprisethemes_l_displayenterprisethemesdontshowothers","displayName":"Only show enterprise themes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_displayenterprisethemes_l_displayenterprisethemesdontshowothers_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_displayenterprisethemes_l_displayenterprisethemesdontshowothers_1","displayName":"True","description":null,"helpText":null}]},"0fc7bcae91efac07":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddins","displayName":"Developer tab | Add-Ins | COM Add-Ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddins_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddins_1","displayName":"True","description":null,"helpText":null}]},"0ffa8156a4c86c37":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve","displayName":"Set maximum number of trust records to preserve (User)","description":"This policy setting allows you to specify the maximum number of trust records to preserve when the purge task detects that this application has trusted more than the number of trusted documents set by the \"Set maximum number of trusted documents\" policy setting.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of trust records to preserve, with an upper limit of 20000. Due to performance reasons, it is not recommended to set it to the upper limit.\r\n\r\nIf you disable or you do not configure this policy setting, the default value for of 400 is used.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_1","displayName":"Enabled","description":null,"helpText":null}]},"0f63dd5da8a37357":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchminusdashchoon","displayName":"Match minus/dash/cho-on (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchminusdashchoon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchminusdashchoon_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/10.json b/public/intune-definitions/10.json new file mode 100644 index 000000000000..11563ee2a772 --- /dev/null +++ b/public/intune-definitions/10.json @@ -0,0 +1 @@ +{"1063b38140b37d86":{"id":"com.android.devicerestrictionpolicy.assistcontentpolicy","displayName":"Block assist content sharing with privileged apps","description":"If 'True', blocks assist content (such as screenshots and app details) to be sent to a privileged app, like an assistant app. The setting can be used to block Circle to Search (AI feature). If set to 'False', Intune doesn't change or update this setting. By default, the OS might allow sharing assist content with privileged apps. Available for fully managed, dedicated, and corporate-owned work profile devices (at work profile level).","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.assistcontentpolicy_false","displayName":"False","description":"Assist content is allowed to be sent to a privileged app.","helpText":null},{"id":"com.android.devicerestrictionpolicy.assistcontentpolicy_true","displayName":"True","description":"Assist content is blocked from being sent to a privileged app.","helpText":null}]},"1064a7e9a2765df7":{"id":"com.apple.app.lock_app_options_disableautolock","displayName":"Disable Auto Lock","description":"If true, the device doesn't automatically go to sleep after an idle period.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_disableautolock_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_disableautolock_true","displayName":"True","description":null,"helpText":null}]},"100dccc84199dd89":{"id":"com.apple.appstore_restrict-store-softwareupdate-only","displayName":"Restrict Store Software Update Only","description":"If true, prevents App Store from launching. Available in macOS 10.14 and later. Restricts installations to software updates only in macOS 10.10 - 10.13.","helpText":null,"infoUrls":[],"categoryId":"f14014f5-a401-41e3-8a97-1a9e3c5e3614","categoryName":"App Store","options":[{"id":"com.apple.appstore_restrict-store-softwareupdate-only_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.appstore_restrict-store-softwareupdate-only_true","displayName":"True","description":null,"helpText":null}]},"10d500a576a0a0f2":{"id":"com.apple.cellular_apns_item_allowedprotocolmask","displayName":"Allowed Protocol Mask","description":"The supported Internet Protocol versions. Available in iOS 10.3 and later.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":[{"id":"com.apple.cellular_apns_item_allowedprotocolmask_0","displayName":"IPv4","description":null,"helpText":null},{"id":"com.apple.cellular_apns_item_allowedprotocolmask_1","displayName":"IPv6","description":null,"helpText":null},{"id":"com.apple.cellular_apns_item_allowedprotocolmask_2","displayName":"Both","description":null,"helpText":null}]},"10956745a6a0a69b":{"id":"com.apple.extensiblesso_platformsso_userauthorizationmode","displayName":"User Authorization Mode","description":"This setting affects the permissions after authentication by Platform SSO. It is applied each time user authenticates. Use of the following:\n* Standard\n The account will be a standard user. It will be removed from the 'admin' group.\n* Admin\n The account will be added to the local administrators group.\n* Groups\n The account will be assigned groups using the 'AdministratorGroups', 'AdditionalGroups', or 'AuthorizationGroups'.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_userauthorizationmode_0","displayName":"Standard","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_userauthorizationmode_1","displayName":"Admin","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_userauthorizationmode_2","displayName":"Groups","description":null,"helpText":null}]},"10851107fd32e728":{"id":"com.apple.familycontrols.contentfilter_restrictweb","displayName":"Restrict Web","description":"If true, enables web content filters.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":[{"id":"com.apple.familycontrols.contentfilter_restrictweb_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.contentfilter_restrictweb_true","displayName":"True","description":null,"helpText":null}]},"101afd4c272d4f88":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver","displayName":"Update channel override (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"1075f8c69b44f054":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_application id","displayName":"Microsoft Edge Application ID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"10484a722ea8422b":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"1005f5109134eafd":{"id":"com.apple.managedclient.preferences_exclusions_tamperprotection","displayName":"Process exclusions","description":"Defines process that can interfere with Defender without considering it tampering","helpText":null,"infoUrls":[],"categoryId":"5c4df3be-80b0-40cc-a8c8-0258120b0de5","categoryName":"Tamper protection","options":null},"10ddb005c008bbde":{"id":"com.apple.managedclient.preferences_filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\n\nIf you don't set this policy, \"DefaultFileSystemWriteGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemWriteAskForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#filesystemwriteblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"101da4c8bd71f3e6":{"id":"com.apple.managedclient.preferences_maxconnectionsperproxy","displayName":"Maximum number of concurrent connections to the proxy server","description":"Specifies the maximum number of simultaneous connections to the proxy server.\n\nSome proxy servers can't handle a high number of concurrent connections per client - you can solve this by setting this policy to a lower value.\n\nThe value of this policy should be lower than 100 and higher than 6. The default value is 32.\n\nSome web apps are known to consume many connections with hanging GETs - lowering the maximum connections below 32 may lead to browser networking hangs if too many of these kind of web apps are open.\n\nIf you don't configure this policy, the default value (32) is used.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#maxconnectionsperproxy"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"10be59fd53cf63ea":{"id":"com.apple.managedclient.preferences_trusto365autodiscoverredirect","displayName":"Trust Office 365 autodiscover redirects","description":"When true, users will not see a dialog if autodiscover redirects the client to a different server. Recommended: true.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_trusto365autodiscoverredirect_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_trusto365autodiscoverredirect_true","displayName":"True","description":null,"helpText":null}]},"10ac32b426ba3f46":{"id":"com.apple.managedclient.preferences_webhidallowalldevicesforurls","displayName":"Allow listed sites to connect to any HID device","description":"This setting allows you to list sites which are automatically granted permission to access all available devices.\n\nThe URLs must be valid or the policy is ignored. Only the origin (scheme, host and port) of the URL is evaluated.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\n\nThis policy overrides \"DefaultWebHidGuardSetting\", \"WebHidAskForUrls\", \"WebHidBlockedForUrls\" and the user's preferences.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webhidallowalldevicesforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"10f8ffe3e9b3c8a4":{"id":"com.apple.screensaver_loginwindowmodulepath","displayName":"Login Window Module Path","description":"The full path to the screen-saver module to use. ","helpText":null,"infoUrls":[],"categoryId":"8cefd936-362e-4a24-bc76-e078b6fd13fa","categoryName":"Screensaver","options":null},"10523fe00160ca1a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users","description":"If FriendlyURLs are enabled, Microsoft Edge computes more representations of the URL and places them on the clipboard.\n\nThis policy configures what format is pasted when the user pastes in external applications or inside Microsoft Edge without the 'Paste as' context menu item.\n\nIf you configure this policy, it makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu won't be available.\n\n* Not configured = The users are able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\n\n* 1 = No additional formats are stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge, and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature is disabled.\n\n* 3 = The user gets a friendly URL whenever they paste into surfaces that accept rich text. The plain URL is still available for nonrich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\n\n* 4 = (Not currently used)\n\nThe richer formats may not be supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\n\nThe recommended policy is available in Microsoft Edge 105 or later.\n\nPolicy options mapping:\n\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\n\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL but whose visible text is the title of the destination page. This is the Friendly URL format.\n\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_plaintext","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_titledhyperlink","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_webpreview","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},"1032ab560711e77f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.createpasskeysinicloudkeychain","displayName":"Control whether passkey creation will default to iCloud Keychain.","description":"Microsoft Edge may direct\npasskey/WebAuthn creation requests directly to iCloud Keychain on macOS version 13.5\nor later. If iCloud Keychain syncing isn't enabled yet, this will\nprompt the user to sign in with iCloud, or might prompt them to enable iCloud\nKeychain syncing.\n\nIf you have enabled this policy, then iCloud Keychain is the default\nwhenever the WebAuthn request is compatible with that choice.\n\nIf you haven't configured this policy, then the default behavior depends on factors such as\nwhether iCloud Drive is enabled, or whether the user has recently used or\ncreated a credential in their\nMicrosoft Edge profile.\n\nIf you have disabled this policy, iCloud Keychain isn't used by default\nand the previous behavior (of creating the credential in the Microsoft Edge profile) is used\ninstead. Users can still select iCloud Keychain as an option, and\ncan still see iCloud Keychain credentials when signing in.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.createpasskeysinicloudkeychain_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.createpasskeysinicloudkeychain_true","displayName":"Enabled","description":null,"helpText":null}]},"10a919bcc3ffb7af":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordgeneratorenabled","displayName":"Allow users to get a strong password suggestion whenever they are creating an account online","description":"Configures the Password Generator Settings toggle that enables/disables the feature for users.\n\nIf you enable or don't configure this policy, then Password Generator offers users a strong and unique password suggestion (via a dropdown) on Signup and Change Password pages.\n\nIf you disable this policy, users no longer see strong password suggestions on Signup or Change Password pages.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordgeneratorenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordgeneratorenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"105fdc3789317f03":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification","description":"According to Service Worker specification\nhttps://w3c.github.io/ServiceWorker/#control-and-use-worker-client, workers\nshould inherit controllers for blob URLs. Currently, only DedicatedWorkers\ninherit the controller, while SharedWorkers do not.\n\nEnabled/Unset: Microsoft Edge inherits\nthe controller for SharedWorker blob URLs, aligning with the specification.\n\nDisabled: Behavior remains unchanged, not aligning with the specification.\n\nThis policy is temporary and will be removed in a future update.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedworkerbloburlfixenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedworkerbloburlfixenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"1042251ede8e3a47":{"id":"device_vendor_msft_bitlocker_removabledrivesrequireencryption_rdvcrossorg","displayName":"Do not allow write access to devices configured in another organization","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"8e6b8d0c-faf6-41e6-8e31-4389a5470caf","categoryName":"Removable Data Drives","options":[{"id":"device_vendor_msft_bitlocker_removabledrivesrequireencryption_rdvcrossorg_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_removabledrivesrequireencryption_rdvcrossorg_1","displayName":"True","description":null,"helpText":null}]},"10247b064d30a774":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvpriority_netlogon_ldapsrvprioritylabel","displayName":"Priority:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"1008cef4d9956fc4":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_negativecacheperiod_netlogon_negativecacheperiodlabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"10def2de63982bd6":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_2_lbl_remindertimeoutspin","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"10b408f2f6478770":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_slowlinksettings_lbl_slowlinksettingslist","displayName":"UNC Paths:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"1085475640811ad5":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screencapturerate","displayName":"Screen capture rate (frames per second):","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screencapturerate_1","displayName":"Highest (best quality)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screencapturerate_2","displayName":"Medium (default)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screencapturerate_3","displayName":"Lowest","description":null,"helpText":null}]},"10a7f38c769c8a7b":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath","displayName":"Microsoft InfoPath 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft InfoPath 2013.\r\nBy default, the user settings of Microsoft InfoPath 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft InfoPath 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft InfoPath 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013infopath"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath_1","displayName":"Enabled","description":null,"helpText":null}]},"10d672b1336885d3":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_trustappswithgoodreputation","displayName":"Trust apps with good reputation","description":"When enabled, applications with known good reputation as defined by the Microsoft's Intelligent Security Graph (ISG) are white listed.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_trustappswithgoodreputation_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_trustappswithgoodreputation_enabled","displayName":"Enabled","description":null,"helpText":null}]},"105b8a26e40caee8":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_xmlupload","displayName":"XML upload","description":"The format of the XML property list varies depending on the settings you are configuring for the ApplicationControl CSP. Microsoft Endpoint Manager will validate the XML format; but not validate the settings behaviour, the settings applicability nor sign the policy binary. ApplicationControl CSP supports base and supplemental policies for devices running the Windows 1903 build and later. Supplemental policies are required to loosen a base policy; and are always less restrictive. A supplemental policy needs to support a specific base policy that has been deployed to the same client. If not, there is no effect on assigned Windows devices.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"108818406657fba9":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_todo","displayName":"Microsoft To Do","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_todo_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_todo_1","displayName":"True","description":null,"helpText":null}]},"107331bac619d0d7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction","displayName":"Add restrictions on managed accounts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_primary_account","displayName":"A Managed account must be a primary account","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_primary_account_strict","displayName":"A Managed account must be a primary account and have no secondary accounts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_none","displayName":"No restrictions on managed accounts","description":null,"helpText":null}]},"108d89218fd336f3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended","displayName":"Enable search suggestions","description":"Setting the policy to True turns on search suggestions in Google Chrome's address bar. Setting the policy to False turns off these search suggestions.\r\n\r\nIf you set the policy, users can't change it. If not set, search suggestions are on at first, but users can turn them off any time.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"1045a680c6c47b2d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":null},"10916edfd84ca2a4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_securitykeypermitattestationdesc","displayName":"URLs/domains automatically permitted direct Security Key attestation (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"107c48f8e2a4bb98":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl","displayName":"URL to a proxy .pac file","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: https://internal.site/example.pac","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl_1","displayName":"Enabled","description":null,"helpText":null}]},"10fd7cfc1f694f9b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize","displayName":"Set media disk cache size in bytes","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"10e0cce73a866077":{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringuploaddestination","displayName":"[Deprecated] Config Device Health Monitoring Upload Destination","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which destinations are in-scope for monitored events to be uploaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringuploaddestination"],"categoryId":"55c888df-44ff-49d1-808e-ad9cb8429aff","categoryName":"Device Health Monitoring","options":null},"10a493120befa392":{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate","displayName":"Intranet","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_4","displayName":"High","description":null,"helpText":null}]},"10c0581b5649eb11":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"1095f8574f483831":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols","displayName":"Allow only approved domains to use ActiveX controls without prompt","description":"This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.\n\nIf you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.\n\nIf you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"105f8b8c5723e666":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended","displayName":"Configure the home page URL","description":"Configures the default home page URL in Microsoft Edge.\r\n\r\nThe home page is the page opened by the Home button. The pages that open on startup are controlled by the 'RestoreOnStartup' (Action to take on startup) policies.\r\n\r\nYou can either set a URL here or set the home page to open the new tab page. If you select to open the new tab page, then this policy doesn't take effect.\r\n\r\nIf you enable this policy, users can't change their home page URL, but they can choose to use the new tab page as their home page.\r\n\r\nIf you disable or don't configure this policy, users can choose their own home page, as long as the 'HomepageIsNewTabPage' (Set the new tab page as the home page) policy isn't enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value: https://www.contoso.com","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"102e88c37a8f3caa":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended","displayName":"Allow HTTPS-Only Mode to be enabled","description":"This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigations to HTTPS.\r\n\r\nIf this setting isn't set or is set to `allowed`, users are able to enable HTTPS-Only Mode.\r\nIf this setting is set to `disallowed`, HTTPS-Only Mode will be disabled.\r\nIf this setting is set to `force_enabled`, HTTPS-Only Mode is enabled in Strict mode.\r\nIf this setting is set to `force_balanced_enabled`, HTTPS-Only Mode is enabled in Balanced mode.\r\n\r\nThe settings `force_enabled` and `force_balanced_enabled` can be recommended to users. HTTPS-Only Mode will be set to Strict or Balanced initially, but users are allowed to change it.\r\n\r\nIf you set this policy to a value that isn't supported by the version of Microsoft Edge that receives the policy, Microsoft Edge defaults to the `allowed` setting.\r\n\r\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\r\n\r\nPolicy options mapping:\r\n\r\n* allowed (allowed) = Don't restrict users' HTTPS-Only Mode setting\r\n\r\n* disallowed (disallowed) = Disable HTTPS-Only Mode\r\n\r\n* force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode\r\n\r\n* force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: disallowed","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"10f4b1a44577db3c":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode","description":"Overrides the last used setting for printing background graphics.\r\nIf you enable this setting, background graphics printing is enabled.\r\nIf you disable this setting, background graphics printing is disabled.\r\n\r\nPolicy options mapping:\r\n\r\n* enabled (enabled) = Enable background graphics printing mode by default\r\n\r\n* disabled (disabled) = Disable background graphics printing mode by default\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"108a096657fe394e":{"id":"device_vendor_msft_policy_config_mixedreality_visitorautologon","displayName":"Visitor Auto Logon","description":"This policy controls whether a visitor user will be automatically logged in. Visitor users can only be created and logged in, if an Assigned Access profile has been created targeting visitor users. A visitor user will only be automatically logged in, if no other user has logged in on the device before.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#visitorautologon"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_visitorautologon_0","displayName":"Visitor user will not be signed in automatically.","description":"Visitor user will not be signed in automatically.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_visitorautologon_1","displayName":"Visitor user will be signed in automatically.","description":"Visitor user will be signed in automatically.","helpText":null}]},"108636746e3646e0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_grooveexe182","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_grooveexe182_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_grooveexe182_1","displayName":"True","description":null,"helpText":null}]},"108aa376ec0d4969":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winwordexe189","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winwordexe189_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winwordexe189_1","displayName":"True","description":null,"helpText":null}]},"103e0e06dbeb79d7":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mse7exe41","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mse7exe41_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mse7exe41_1","displayName":"True","description":null,"helpText":null}]},"10de79505616c724":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_spdesignexe9","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_spdesignexe9_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_spdesignexe9_1","displayName":"True","description":null,"helpText":null}]},"10a809c9066abdc8":{"id":"device_vendor_msft_policy_config_system_allowdesktopanalyticsprocessing","displayName":"Allow Desktop Analytics Processing","description":"Allows IT admins to enable diagnostic data from this device to be processed by Desktop Analytics. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Desktop Analytics. 2 – Diagnostic data is allowed to be processed by Desktop Analytics. If you disable or do not configure this policy setting, diagnostic data from this device will not be processed by Desktop Analytics.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowdesktopanalyticsprocessing"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowdesktopanalyticsprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowdesktopanalyticsprocessing_2","displayName":"Allowed","description":"Allowed","helpText":null}]},"1063a2bc28be232b":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},"102518fb75789e31":{"id":"device_vendor_msft_policy_config_webthreatdefense_notifymalicious","displayName":"Notify Malicious","description":"Configures Enhanced Phishing Protection notifications for malicious content.","helpText":"","infoUrls":[],"categoryId":"20b71dc7-cf08-4534-9e52-d297dd071ca5","categoryName":"Enhanced Phishing Protection","options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_notifymalicious_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifymalicious_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"1089ad57468dba95":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_productname","displayName":"Product name","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"10649a16af707868":{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_samplesharing","displayName":"Sample Sharing","description":"Return or set Windows Defender Advanced Threat Protection Sample Sharing configuration parameter: 0 - none, 1 - All","helpText":null,"infoUrls":[],"categoryId":"577d5951-fc56-4906-90bc-2c508c6611ad","categoryName":"Microsoft Defender for Endpoint","options":[{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_samplesharing_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_samplesharing_1","displayName":"All","description":null,"helpText":null}]},"1065c1d82f467124":{"id":"linux_mdatp_managed_cloudservice_enabled","displayName":"Enable cloud delivered protection","description":"Provides increased, faster protection with access to the latest protection data in the cloud. Works best with automatic sample submission turned on","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-cloud-delivered-protection"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"linux_mdatp_managed_cloudservice_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"1077746563683063":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopbackgroundui","displayName":"Prevent changing desktop background (User)","description":"Prevents users from adding or changing the background design of the desktop.\r\n\r\nBy default, users can use the Desktop Background page in the Personalization or Display Control Panel to add a background design (wallpaper) to their desktop.\r\n\r\nIf you enable this setting, none of the Desktop Background settings can be changed by the user.\r\n\r\nTo specify wallpaper for a group, use the \"Desktop Wallpaper\" setting.\r\n\r\nNote: You must also enable the \"Desktop Wallpaper\" setting to prevent users from changing the desktop wallpaper. Refer to KB article: Q327998 for more information.\r\n\r\nAlso, see the \"Allow only bitmapped wallpaper\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nodesktopbackgroundui"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopbackgroundui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopbackgroundui_1","displayName":"Enabled","description":null,"helpText":null}]},"10245384bdec1f90":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1","displayName":"Turn off tolerant and Z-shaped scratch-out gestures (User)","description":"\r\n Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture that was available in Microsoft Windows XP Tablet PC Edition.\r\n\r\n The tolerant gestures let users scratch out ink in Input Panel by using strikethrough and other scratch-out gesture shapes.\r\n\r\n Tablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\n If you enable this policy and choose “All” from the drop-down menu, no scratch-out gestures will be available in Input Panel. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you enable this policy and choose “Tolerant,\" users will be able to use the Z-shaped scratch-out gesture that was available in Microsoft Windows XP Tablet PC Edition. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you enable this policy and choose “None,” users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you disable this policy, users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you do not configure this policy, users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will be able to configure this setting on the Gestures tab in Input Panel Options.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-scratchout-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_1","displayName":"Enabled","description":null,"helpText":null}]},"1053f0c28981fb63":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel","displayName":"Microsoft Excel 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Excel 2013.\r\nBy default, the user settings of Microsoft Excel 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Excel 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013excel"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel_1","displayName":"Enabled","description":null,"helpText":null}]},"1034fa3cc03a258b":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook","displayName":"Microsoft Outlook 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Outlook 2013.\r\nBy default, the user settings of Microsoft Outlook 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013outlook"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook_1","displayName":"Enabled","description":null,"helpText":null}]},"109d4ef91f70ad50":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noplacesbar","displayName":"Hide the common dialog places bar (User)","description":"Removes the shortcut bar from the Open dialog box.\r\n\r\nThis setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.\r\n\r\nTo see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noplacesbar"],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noplacesbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noplacesbar_1","displayName":"Enabled","description":null,"helpText":null}]},"10c56220665bd157":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch0","displayName":"Site URL 1 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"10cc24cb342ec5f9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled","displayName":"Enable the Click to Call Feature (User)","description":"Enable the Click to Call feature which allows users to send phone numbers from Chrome Desktops to an Android device when the user is Signed-in. For more information, see help center article: https://support.google.com/chrome/answer/9430554?hl=en.\r\n\r\nIf this policy is set to enabled, the capability of sending phone numbers to Android devices will be enabled for the Chrome user.\r\n\r\nIf this policy is set to disabled, the capability of sending phone numbers to Android devices will be disabled for the Chrome user.\r\n\r\nIf you set this policy, users cannot change or override it.\r\n\r\nIf this policy is left unset, the Click to Call feature is enabled by default.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"10e5735398ee1ea8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_sslerroroverrideallowedfororiginsdesc","displayName":"Allow proceeding from the SSL warning page on specific origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"10f14db48fdd02bf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling","displayName":"The IP handling policy of WebRTC (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default","displayName":"WebRTC will use all available interfaces when searching for the best path.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default_public_and_private_interfaces","displayName":"WebRTC will only use the interface connecting to the public Internet, but may connect using private IP addresses.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default_public_interface_only","displayName":"WebRTC will only use the interface connecting to the public Internet, and will not connect using private IP addresses.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_disable_non_proxied_udp","displayName":"WebRTC will use TCP on the public-facing interface, and will only use UDP if supported by a configured proxy.","description":null,"helpText":null}]},"10020fc142cb2cda":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist","displayName":"Configure extension installation blacklist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},"10c5c1c4e2def456":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist","displayName":"Configure native messaging allowlist (User)","description":"Setting the policy specifies which native messaging hosts aren't subject to the deny list. A deny list value of * means all native messaging hosts are denied, unless they're explicitly allowed.\r\n\r\nAll native messaging hosts are allowed by default. But, if all native messaging hosts are denied by policy, the admin can use the allow list to change that policy.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"10306f5ce295b850":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins_windowcaptureallowedbyoriginsdesc","displayName":"Allow Window and Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"10bd1bc72453224c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled","displayName":"Enable TLS 1.3 Early Data (User)","description":"TLS 1.3 Early Data is an extension to TLS 1.3 to send an HTTP request simultaneously with the TLS handshake.\r\n\r\nIf this policy is not configured, Google Chrome will follow the default rollout process for TLS 1.3 Early Data.\r\n\r\nIf it is enabled, Google Chrome will enable TLS 1.3 Early Data.\r\n\r\nIf it is disabled, Google Chrome will not enable TLS 1.3 Early Data.\r\n\r\nWhen the feature is enabled, Google Chrome may or may not use TLS 1.3 Early Data depending on server support.\r\n\r\nTLS 1.3 Early Data is an established protocol. Existing TLS servers, middleboxes, and security software are expected to either handle or reject TLS 1.3 Early Data without dropping the connection.\r\n\r\nHowever, devices that do not correctly implement TLS may malfunction and disconnect when TLS 1.3 Early Data is in use. If this occurs, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure to control the feature and will be removed afterwards. The policy may be enabled to allow you to test for issues and disabled while issues are being resolved.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"10abb1a6126a536f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled","displayName":"Control the nesting threshold before which Javascript setTimeout() function start being clamped (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"100bce384f42825a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodevisualbasic","displayName":"Developer tab | Code | Visual Basic (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodevisualbasic_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodevisualbasic_1","displayName":"True","description":null,"helpText":null}]},"103c26a97d46a955":{"id":"user_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols","displayName":"Prevent per-user installation of ActiveX controls (User)","description":"This policy setting allows you to prevent the installation of ActiveX controls on a per-user basis.\n\nIf you enable this policy setting, ActiveX controls cannot be installed on a per-user basis.\n\nIf you disable or do not configure this policy setting, ActiveX controls can be installed on a per-user basis.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-preventperuserinstallationofactivexcontrols"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"10111d79e2387f79":{"id":"user_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows' title and status bars.\n\nIf you enable this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes.\n\nIf you disable this policy setting, scripts can continue to create popup windows and windows that obfuscate other windows.\n\nIf you do not configure this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-scriptedwindowsecurityrestrictionsinternetexplorerprocesses"],"categoryId":"622c83ff-f780-47e6-8b9c-bf82552e3f04","categoryName":"Scripted Window Security Restrictions","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"109e6494d86cafc2":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls","displayName":"Block pop-up windows on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are blocked from opening pop-up windows.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPopupsSetting' (Default pop-up window setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"1076e735c7e5d52a":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled","displayName":"Force Microsoft Defender SmartScreen checks on downloads from trusted sources (User)","description":"This policy setting lets you configure whether Microsoft Defender SmartScreen checks download reputation from a trusted source.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen checks the download’s reputation regardless of source.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen doesn’t check the download’s reputation when downloading from a trusted source.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"1065a4eb0b1ad21d":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites (User)","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemWriteGuardSetting' (Control use of the File System API for writing) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemWriteAskForUrls' (Allow write access to files and directories on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"100ed1c3c707a29f":{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_explicitlyallowednetworkportsdesc","displayName":"Explicitly allowed network ports (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"10338d6c8fc2b7f8":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled","displayName":"Always open links from certain Microsoft apps in Microsoft Edge (User)","description":"Make Microsoft Edge open links from other supported Microsoft Apps, such as Microsoft Outlook and Microsoft Teams on Windows 10 and above, so that web links can be opened using the correct profile in Microsoft Edge. This does not change the browser set as the default in Windows settings.\r\n\r\nIf you do not configure this policy, the end user will see a prompt to manage this policy the first time Microsoft Edge opens a link from supported Microsoft apps. Users can manage this policy in Microsoft Edge settings at any time. The default browser setting in Windows will not be changed based on the Microsoft Edge setting.\r\n\r\nIf this policy is Enabled, Microsoft Edge will open web links from these apps, and will use the correct profile where possible, even when Microsoft Edge is not set as the default in Windows settings. This policy does not change the browser set as the default in Windows settings.\r\n\r\nIf this policy is disabled, the browser set as the default in Windows settings will be used to open web links from these apps.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"10b58f0ef8bb9369":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting","displayName":"Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app (User)","description":"This setting lets you enable reporting of sites that Microsoft Edge users add to their local IE Mode site list. The user must be signed into Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant specified by the policy.\r\n\r\nIf you configure this policy, Microsoft Edge will send a report to the M365 Admin Center Site Lists app when a user adds a site to their local IE mode site list. The report will show the URL of the site the user added, minus any query string or fragment. The user's identity isn't reported.\r\n\r\nFor this reporting to work correctly, you must have successfully visited the Microsoft Edge Site Lists app in the M365 Admin Center at least once. This activates a per-tenant storage account used to store these reports. Microsoft Edge will still attempt to send reports if this step hasn't been completed. However, the reports will not be stored in the Site Lists app.\r\n\r\nWhen enabling this policy, you must specify your O365 tenant ID. To learn more about finding your O365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will never send reports about URLs added to a user's local site list to the Site Lists app.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_1","displayName":"Enabled","description":null,"helpText":null}]},"107039f0f580fd63":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_disableprogrammaticaccess","displayName":"Restrict programmatic access for creating online presentations in PowerPoint and Word (User)","description":"This policy setting allows you to restrict the ability to create an online presentation programmatically in PowerPoint and Word.\r\n\r\nIf you enable this policy setting, an online presentation cannot be created programmatically.\r\n\r\nIf you disable or do not configure this policy setting, an online presentation can be created programmatically.","helpText":"","infoUrls":[],"categoryId":"5bf4c2ba-be08-4cda-bf33-d10707580d78","categoryName":"Present Online","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_disableprogrammaticaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_disableprogrammaticaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"10012261a6085448":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withawebdiscussionslink380_l_withawebdiscussionslink381","displayName":"With a Web discussions link (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":null},"10fe8e82db2467e8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceother_l_otheradreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"10e9fd4d8cbbd0e9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_armenianarmenia","displayName":"Armenian (Armenia) (User)","description":"Enables the editing language Armenian (Armenia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_armenianarmenia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_armenianarmenia_1","displayName":"Enabled","description":null,"helpText":null}]},"109ea29d483fc87e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishperu","displayName":"Spanish (Peru) (User)","description":"Enables the editing language Spanish (Peru)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishperu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishperu_1","displayName":"Enabled","description":null,"helpText":null}]},"1035925c8d43e35e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_l_workflowcachename473","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"1083c813ae17a355":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"101e72596a98b4b8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc04_l_allowsubfolders04","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc04_l_allowsubfolders04_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc04_l_allowsubfolders04_1","displayName":"True","description":null,"helpText":null}]},"10b5d41115e8ca35":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_vbadigsigchaintrustedpublishers","displayName":"Allow root or intermediate certificates as VBA trusted publishers (User)","description":"This policy setting controls whether root and intermediate certificates can be added as trusted publishers for VBA macro validation when the VBA Macro Notification Settings policy is set to \"Disable all except digitally signed macros\".\r\n\r\nIf you enable this policy setting, administrators can add root or intermediate certificates to the trusted publishers store. VBA macros signed by any certificate that chains to these trusted root or intermediate certificates will be considered as signed by a trusted publisher and allowed to run.\r\n\r\nIf you disable or don't configure this policy setting, only end (leaf) certificates can be added as trusted publishers.\r\n\r\nNote: This policy setting only takes effect when the VBA Macro Notification Settings policy is set to \"Disable all except digitally signed macros\".","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_vbadigsigchaintrustedpublishers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_vbadigsigchaintrustedpublishers_1","displayName":"Enabled","description":null,"helpText":null}]},"10b89938faec329f":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofallversions","displayName":"Days all Version History items are \"safe\" from pruning (User)","description":"This policy setting allows you to specify a period of time during which OneNote maintains comprehensive version history pages. After the time specified, OneNote maintains more basic version history pages, which uses less storage space.\r\n\r\nIf you enable this policy setting, OneNote maintains comprehensive version history pages for the length of time you specify, and then maintains basic version history pages once the time period expires.\r\n\r\nIf you disable or do not configure this policy setting, OneNote maintains comprehensive version history pages for 2 days, and then maintains basic version history pages once the time period expires.\r\n ","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofallversions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofallversions_1","displayName":"Enabled","description":null,"helpText":null}]},"10bd6f03dee14218":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_hideappsstorebuttoninhometabribbon","displayName":"Hide the Office Store button (User)","description":"The Office Store button allows users to get apps for Outlook from the Home tab in the ribbon.\r\n\r\nIf you enable this policy setting, the Office Store button doesn’t appear on the Home tab in the ribbon.\r\n\r\nIf you disable or don’t configure this policy setting, the Office Store button appears on the Home tab in the ribbon.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_hideappsstorebuttoninhometabribbon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_hideappsstorebuttoninhometabribbon_1","displayName":"Enabled","description":null,"helpText":null}]},"1003ec3e9c1c7e53":{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_miscellaneous_l_equivalentcomaddin_l_equivalentcomaddin2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"10aeb358832d33bc":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_l_allowsubfolders63","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_l_allowsubfolders63_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_l_allowsubfolders63_1","displayName":"True","description":null,"helpText":null}]},"101ff1f0dd13aa04":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc17_l_datecolon73","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"1022a800566c93df":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_l_datecolon81","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"106ae1a07d6ea808":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_disableirmonxpsexport","displayName":"Turn off IRM protection on XPS Export for Word (User)","description":"This policy controls the default IRM protection setting when exporting Word documents to XPS files.\r\n\r\nEnabling this policy setting will turn off IRM protection when exporting to XPS, if not explicitly set by users through the Export Options dialog.\r\n\r\nIf you disable or don't configure this policy setting, the default IRM protection setting for XPS export is based on previous IRM export selection. \r\n ","helpText":"","infoUrls":[],"categoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_disableirmonxpsexport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_disableirmonxpsexport_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/11.json b/public/intune-definitions/11.json new file mode 100644 index 000000000000..d4316282023f --- /dev/null +++ b/public/intune-definitions/11.json @@ -0,0 +1 @@ +{"117f6fab7dd3087a":{"id":"com.apple.applicationaccess_allowmanagedappscloudsync","displayName":"Allow Managed Apps Cloud Sync","description":"If false, prevents managed apps from using iCloud sync. Available in iOS 8 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmanagedappscloudsync_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmanagedappscloudsync_true","displayName":"True","description":null,"helpText":null}]},"110b9f11d46fffb5":{"id":"com.apple.assetcache.managed_listenranges_item_type","displayName":"IP Address Type","description":"The IP address type.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_listenranges_item_type_0","displayName":"IPv4","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_listenranges_item_type_1","displayName":"IPv6","description":null,"helpText":null}]},"11213d5f2eeeb0d6":{"id":"com.apple.dnssettings.managed_ondemandrules_item_dnsdomainmatch","displayName":"DNS Domain Match","description":"An array of domain names. This rule matches if any of the domain names in the specified list matches any domain in the device’s search domains list.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"1106b650edb0028d":{"id":"com.apple.loginwindow_showfullname","displayName":"Show Full Name","description":"If true, shows the name and password dialog; if false, displays a list of users. Enabling this setting overrides the behavior of \"Show other users managed\". It's recommended to only use either \"Show full name\" or \"Show other users managed\", but not both.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_showfullname_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_showfullname_true","displayName":"True","description":null,"helpText":null}]},"11067dc5a4581fa3":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_lcid","displayName":"Microsoft Edge LCID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"11767e61b4f0c342":{"id":"com.apple.managedclient.preferences_bingadssuppression","displayName":"Block all ads on Bing search results","description":"Enables an ad-free search experience on Bing.com\n\nIf you enable this policy, then a user can search on bing.com and have an ad-free search experience. At the same time, the SafeSearch setting will be set to 'Strict' and can't be changed by the user.\n\nIf you don't configure this policy, then the default experience will have ads in the search results on bing.com. SafeSearch will be set to 'Moderate' by default and can be changed by the user.\n\nThis policy is only available for K-12 SKUs that are identified as EDU tenants by Microsoft.\n\nPlease refer to https://go.microsoft.com/fwlink/?linkid=2119711 to learn more about this policy or if the following scenarios apply to you:\n\n* You have an EDU tenant, but the policy doesn't work.\n\n* You had your IP whitelisted for having an ad free search experience.\n\n* You were experiencing an ad-free search experience on Microsoft Edge Legacy and want to upgrade to the new version of Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#bingadssuppression"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_bingadssuppression_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_bingadssuppression_true","displayName":"Enabled","description":null,"helpText":null}]},"11755188eb227ab4":{"id":"com.apple.managedclient.preferences_exclusions_item_extension","displayName":"File extension","description":null,"helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"111e1395fd8080af":{"id":"com.apple.managedclient.preferences_sensorsblockedforurls","displayName":"Block access to sensors on specific sites","description":"Define a list of sites, based on URL patterns, that can't access sensors such as motion and light sensors.\n\nIf you don't configure this policy, the global default value from the \"DefaultSensorsSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor URL patterns that don't match this policy, the following order of precedence is used: The \"SensorsAllowedForUrls\" policy (if there is a match), the \"DefaultSensorsSetting\" policy (if set), or the user's personal settings.\n\nThe URL patterns defined in this policy can't conflict with those configured in the \"SensorsAllowedForUrls\" policy. You can't allow and block a URL.\n\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sensorsblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"11952a93160cc4fb":{"id":"com.apple.managedclient.preferences_speechrecognitionenabled","displayName":"Configure Speech Recognition","description":"Set whether websites can use the W3C Web Speech API to recognize speech from the user. The Microsoft Edge implementation of the Web Speech API uses Azure Cognitive Services, so voice data will leave the machine.\n\nIf you enable or don't configure this policy, web-based applications that use the Web Speech API can use Speech Recognition.\n\nIf you disable this policy, Speech Recognition is not available through the Web Speech API.\n\nRead more about this feature here:\nSpeechRecognition API: https://go.microsoft.com/fwlink/?linkid=2143388\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2143680","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#speechrecognitionenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_speechrecognitionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_speechrecognitionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"1113fb3e417b4df7":{"id":"com.apple.mcxprinting_footerfontsize","displayName":"Footer Font Size","description":"The footer font size.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"11461b21acbab910":{"id":"com.apple.systemconfiguration_proxies_httpproxy","displayName":"HTTP Proxy","description":"The host name or IP address for the web proxy. ","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"11dba0fce273b5d1":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"11e103ef94d0d812":{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverrideforfiles","displayName":"Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads","description":"This policy lets you determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads.\n\nIf you enable this policy, users in your organization can't ignore Microsoft Defender SmartScreen warnings, and they're prevented from completing the unverified downloads.\n\nIf you disable or don't configure this policy, users can ignore Microsoft Defender SmartScreen warnings and complete unverified downloads.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverrideforfiles_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverrideforfiles_true","displayName":"Enabled","description":null,"helpText":null}]},"11d08cc6c3229311":{"id":"device_vendor_msft_defender_configuration_dataduplicationremotelocation","displayName":"Data Duplication Remote Location","description":"Define data duplication remote location for Device Control. When configuring this setting, ensure that Device Control is Enabled and that the provided path is a remote path the user can access.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"11823e326dc08a58":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_wpptracingcomponents_reporting_wpptracingcomponents","displayName":"Configure Windows software trace preprocessor components","description":null,"helpText":"","infoUrls":[],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":null},"11ac0ee0c0b4a2e0":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_profiles_ts_profile_path","displayName":"Profile path","description":null,"helpText":"","infoUrls":[],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":null},"11967c8e720d4f64":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013","displayName":"Microsoft Office 365 InfoPath 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 InfoPath 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 InfoPath 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 InfoPath 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 InfoPath 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 InfoPath 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365infopath2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013_1","displayName":"Enabled","description":null,"helpText":null}]},"11d0da71e2bc6552":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-localmachine"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine_1","displayName":"Enabled","description":null,"helpText":null}]},"110da23f41a51c20":{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_dontuseframeinterpolation","displayName":"Prevent Video Smoothing","description":"This policy setting allows you to prevent video smoothing from occurring.\r\n\r\nIf you enable this policy setting, video smoothing is prevented, which can improve video playback on computers with limited resources. In addition, the Use Video Smoothing check box in the Video Acceleration Settings dialog box in the Player is cleared and is not available.\r\n\r\nIf you disable this policy setting, video smoothing occurs if necessary, and the Use Video Smoothing check box is selected and is not available.\r\n\r\nIf you do not configure this policy setting, video smoothing occurs if necessary. Users can change the setting for the Use Video Smoothing check box.\r\n\r\nVideo smoothing is available only on the Windows XP Home Edition and Windows XP Professional operating systems.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-dontuseframeinterpolation"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_dontuseframeinterpolation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_dontuseframeinterpolation_1","displayName":"Enabled","description":null,"helpText":null}]},"11b84bbd0cadc0b7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath","displayName":"Path to Chrome for switching from the alternative browser.","description":"This policy controls the command to use to open URLs in Google Chrome when switching from Internet Explorer®. This policy can be set to an executable file path or ${chrome} to autodetect the location of Google Chrome.\r\n\r\nLeaving the policy unset means Internet Explorer® autodetects Google Chrome's own executable path when launching Google Chrome from Internet Explorer.\r\n\r\nNote: If the Legacy Browser Support add-in for Internet Explorer® isn't installed, this policy has no effect.\r\n\r\nExample value: ${chrome}","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_1","displayName":"Enabled","description":null,"helpText":null}]},"11b65a06e7b505ab":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_serialblockedforurlsdesc","displayName":"Block the Serial API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"1140d89c18f7e579":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist","displayName":"Authentication server whitelist","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: *.example.com,example.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"11f3958f6a36f05c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_nativemessagingwhitelistdesc","displayName":"Names of the native messaging hosts to exempt from the blocklist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"11101261b05c52e6":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_screencapturewithoutgestureallowedfororiginsdesc","displayName":"Allow screen capture without prior user gesture (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"111fd011e7b40c06":{"id":"device_vendor_msft_policy_config_devicelock_minimumpasswordlength","displayName":"Minimum Password Length","description":"This security setting determines the least number of characters that a password for a user account may contain. The maximum value for this setting depends on the value of the Relax minimum password length limits setting. If the Relax minimum password length limits setting is not defined, this setting may be configured from 0 to 14. If the Relax minimum password length limits setting is defined and disabled, this setting may be configured from 0 to 14. If the Relax minimum password length limits setting is defined and enabled, this setting may be configured from 0 to 128. Setting the required number of characters to 0 means that no password is required. Note By default, member computers follow the configuration of their domain controllers. Default values: 7 on domain controllers 0 on stand-alone servers Configuring this setting larger than 14 may affect compatibility with clients, services, and applications. We recommend that you only configure this setting larger than 14 after you use the Minimum password length audit setting to test for potential incompatibilities at the new setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#minimumpasswordlength"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"1134ba6a680b7fad":{"id":"device_vendor_msft_policy_config_experience_configurechaticon","displayName":"Configure Chat Icon","description":"Configures the Chat icon on the taskbar\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Experience#configurechaticonvisibilityonthetaskbar"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_configurechaticon_0","displayName":"Windows default","description":"Not configured","helpText":null},{"id":"device_vendor_msft_policy_config_experience_configurechaticon_1","displayName":"Show","description":"Show","helpText":null},{"id":"device_vendor_msft_policy_config_experience_configurechaticon_2","displayName":"Hide","description":"Hide","helpText":null},{"id":"device_vendor_msft_policy_config_experience_configurechaticon_3","displayName":"Disabled","description":"Disabled","helpText":null}]},"11673378095b8fe2":{"id":"device_vendor_msft_policy_config_experience_disablegetstarted","displayName":"Disable Get Started","description":"Specifies whether Get Started is disabled for the current user. If you enable this setting, Get Started is disabled. If you disable or don't configure this setting, Get Started is enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#disablegetstarted"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_disablegetstarted_0","displayName":"Get Started is enabled.","description":"Get Started is enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_disablegetstarted_1","displayName":"Get Started is disabled.","description":"Get Started is disabled.","helpText":null}]},"11ad59e553c60804":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled","displayName":"Enabled","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSelect how FSLogix should enable logging. All logs is the default setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\LoggingEnabled\r\nValues: 0 = No Logs, 1 = Specific Logs, 2 = All Logs","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"113af1d2df6c094f":{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory","displayName":"Disable \"Configuring History\"","description":"This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary Internet Files and History Settings dialog box, from the Menu bar, on the Tools menu, click Internet Options, click the General tab, and then click Settings under Browsing history.\n\nIf you enable this policy setting, a user cannot set the number of days that Internet Explorer tracks views of the pages in the History List. You must specify the number of days that Internet Explorer tracks views of pages in the History List. Users can not delete browsing history.\n\nIf you disable or do not configure this policy setting, a user can set the number of days that Internet Explorer tracks views of pages in the History list. Users can delete browsing history.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableconfiguringhistory"],"categoryId":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","categoryName":"Delete Browsing History","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"1172078ff8ba93cc":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots","displayName":"Disable taking screenshots","description":"Controls if users can take screenshots of the browser page.\r\n\r\nIf enabled, user can't take screenshots by using keyboard shortcuts or extension APIs.\r\n\r\nIf disabled or don't configure this policy, users can take screenshots.\r\n\r\nPlease note this policy controls screenshots taken from within the browser itself. Even if you enable this policy, users might still be able to take screenshots using some method outside of the browser (like using an operating system feature or another application).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_1","displayName":"Enabled","description":null,"helpText":null}]},"110644804dc6d4f1":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled","displayName":"Allow features to download assets from the Asset Delivery Service","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\r\nThese assets can be config files or Machine Learning models that power the features that use this service.\r\n\r\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\r\n\r\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"1198e6284eeb329a":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled","displayName":"Visual search enabled","description":"Visual search lets you quickly explore more related content about entities in an image.\r\n\r\nIf you enable or don't configure this policy, visual search will be enabled via image hover, context menu, and search in sidebar.\r\n\r\nIf you disable this policy, visual search will be disabled and you won't be able to get more info about images via hover, context menu, and search in sidebar.\r\n\r\nNote: Visual Search in Web Capture is still managed by 'WebCaptureEnabled' (Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge) policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"112f2385c0d006b1":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_disableofflinemodeforexternallibraries","displayName":"Prevent users at your organization from enabling offline mode in OneDrive on the web for libraries and folders that are shared from other organizations","description":"Enabling this setting prevents users at your organization from enabling offline mode for libraries and folders that are shared from other organizations. After the setting is enabled (value 1) on a computer, libraries and folders shared by other organizations won’t have the option of enabling offline mode when working with them in OneDrive on the web. Disable the setting (value 0) to allow your users to enable or disable offline mode in OneDrive on the web when working with libraries and folders that are shared from other organizations.\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_disableofflinemodeforexternallibraries_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_disableofflinemodeforexternallibraries_1","displayName":"Enabled","description":null,"helpText":null}]},"111e93b348a7fd36":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_userincontroloftheseapps","displayName":"Let Apps Access Messaging User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"111beecddb5afa4a":{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel","displayName":"Specify channel binding token hardening level","description":"This policy setting allows you to set the hardening level of the Windows Remote Management (WinRM) service with regard to channel binding tokens.\n\n If you enable this policy setting, the WinRM service uses the level specified in HardeningLevel to determine whether or not to accept a received request, based on a supplied channel binding token.\n\n If you disable or do not configure this policy setting, you can configure the hardening level locally on each computer.\n\n If HardeningLevel is set to Strict, any request not containing a valid channel binding token is rejected.\n\n If HardeningLevel is set to Relaxed (default value), any request containing an invalid channel binding token is rejected. However, a request that does not contain a channel binding token is accepted (though it is not protected from credential-forwarding attacks).\n\n If HardeningLevel is set to None, all requests are accepted (though they are not protected from credential-forwarding attacks).\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-specifychannelbindingtokenhardeninglevel"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_1","displayName":"Enabled","description":null,"helpText":null}]},"113e6c79c1df0e9e":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},"11e71a44ff55b463":{"id":"device_vendor_msft_policy_config_windowsai_setdenyapplistforrecall","displayName":"Set Deny App List For Recall","description":"This policy allows you to set a semicolon-separated list of app names which should not be collected in Recall Snapshots\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdenyapplistforrecall"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":null},"11601ab6d5036d8f":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_pathcolon63","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"11447ee025ea3bcc":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle","displayName":"Force a specific visual style file or force Windows Classic (User)","description":"This setting allows you to force a specific visual style file by entering the path (location) of the visual style file.\r\n\r\nThis can be a local computer visual style (aero.msstyles), or a file located on a remote server using a UNC path (\\\\Server\\Share\\aero.msstyles).\r\n\r\nIf you enable this setting, the visual style file that you specify will be used. Also, a user may not apply a different visual style when changing themes.\r\n\r\nIf you disable or do not configure this setting, the users can select the visual style that they want to use by changing themes (if the Personalization Control Panel is available).\r\n\r\nNote: If this setting is enabled and the file is not available at user logon, the default visual style is loaded.\r\n\r\nNote: When running Windows XP, you can select the Luna visual style by typing %windir%\\resources\\Themes\\Luna\\Luna.msstyles\r\n\r\nNote: To select the Windows Classic visual style, leave the box blank beside \"Path to Visual Style:\" and enable this setting. When running Windows 8 or Windows RT, you cannot apply the Windows Classic visual style.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-setvisualstyle"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle_1","displayName":"Enabled","description":null,"helpText":null}]},"11c2ca88532e90f4":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected","displayName":"End a disconnected session (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_432000000","displayName":"5 days","description":null,"helpText":null}]},"110389940ae4f1f9":{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnailsonnetworkfolders","displayName":"Turn off the display of thumbnails and only display icons on network folders (User)","description":"This policy setting allows you to configure how File Explorer displays thumbnail images or icons on network folders.\r\n\r\nFile Explorer displays thumbnail images on network folders by default.\r\n\r\nIf you enable this policy setting, File Explorer displays only icons and never displays thumbnail images on network folders.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer displays only thumbnail images on network folders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-thumbnails#admx-thumbnails-disablethumbnailsonnetworkfolders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnailsonnetworkfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnailsonnetworkfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"11fcb11175a5c950":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended","displayName":"Safe Browsing Protection Level (User)","description":"Allows you to control whether Google Chrome's Safe Browsing feature is enabled and the mode it operates in.\r\n\r\nIf this policy is set to 'NoProtection' (value 0), Safe Browsing is never active.\r\n\r\nIf this policy is set to 'StandardProtection' (value 1, which is the default), Safe Browsing is always active in the standard mode.\r\n\r\nIf this policy is set to 'EnhancedProtection' (value 2), Safe Browsing is always active in the enhanced mode, which provides better security, but requires sharing more browsing information with Google.\r\n\r\nIf you set this policy as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome.\r\n\r\nIf this policy is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting.\r\n\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.","helpText":"","infoUrls":[],"categoryId":"af351b0c-3d9e-4b18-957b-8179e4eaba15","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"11c294a9fbd892a5":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled","displayName":"Enable Application Bound Encryption (User)","description":"Setting the policy to Enabled or leaving it unset binds encryption keys used for local data storage to Google Chrome whenever that is possible.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security as unknown and potentially hostile apps can retrieve encryption keys used to secure data.\r\n\r\nOnly turn off the policy if there are compatibility issues, such as other applications that need legitimate access to Google Chrome's data, encrypted user data is expected to be fully portable between different computers or the integrity and location of Google Chrome's executable files is not consistent.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"116b95072ae36e77":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_cadistrustedcertificatesdesc","displayName":"TLS certificates that should be distrusted by Google Chrome for server authentication (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"11c8fd7fe6636782":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"117e228c37d17bf5":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowfontdownloads"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"117389d8c6ff6630":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowaccesstodatasources"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"114d30636eaf8b09":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended","displayName":"Set application locale (User)","description":"Configures the application locale in Microsoft Edge and prevents users from changing the locale.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified locale. If the configured locale isn't supported, 'en-US' is used instead.\r\n\r\nIf you disable or don't configure this setting, Microsoft Edge uses either the user-specified preferred locale (if configured) or the fallback locale 'en-US'.\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"111284c56ca30e07":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog","displayName":"Print using system print dialog (User)","description":"Shows the system print dialog instead of print preview.\r\n\r\nIf you enable this policy, Microsoft Edge opens the system print dialog instead of the built-in print preview when a user prints a page.\r\n\r\nIf you don't configure or disable this policy, print commands trigger the Microsoft Edge print preview screen.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_1","displayName":"Enabled","description":null,"helpText":null}]},"11d854ce5c287b4b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_newtabpagelocation","displayName":"New tab page URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"11d66b93b4a39826":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended","displayName":"Save and fill memberships (User)","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\r\n\r\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"1143d50fe80440c4":{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled","displayName":"Enable exporting saved passwords from Password Manager (User)","description":"This policy controls whether the Export Password button in edge://wallet/passwords is enabled.\r\n\r\nIf enabled or not configured, users can export saved passwords.\r\nIf disabled, the Export Password button is unavailable, preventing password exports.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"11e58565b77a7175":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (User)","description":"This policy defines a list of allowed HTTPS origins for remote desktop client applications that initiate WebAuthn API requests from a browsing session on a remote host.\r\n\r\nOrigins specified in this policy can request WebAuthn authentication for Relying Party IDs (RP IDs) they would not typically be authorized to claim.\r\n\r\nOnly HTTPS origins are supported. Wildcards are not permitted. Entries that do not\r\nmeet these requirements will be ignored.\r\n\r\nFor more information about the WebAuthn Remote Desktop Support feature, please see https://github.com/w3c/webauthn/wiki/Explainer:-Remote-Desktop-Support/a4e158c569f456c759d0ddd294a9015bd4d4eb9a.\r\n\r\nExample value:\r\n\r\nhttps://server:8080/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"118acc7a794e34af":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09","displayName":"Configure presentation service in PowerPoint and Word 10 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_1","displayName":"Enabled","description":null,"helpText":null}]},"112596addcaec4b4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_baseurl","displayName":"Base URL (User)","description":"Sets the URL for the location of customized error messages.","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_baseurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_baseurl_1","displayName":"Enabled","description":null,"helpText":null}]},"113065a6c5dbaaf1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicuae","displayName":"Arabic (U.A.E.) (User)","description":"Enables the editing language Arabic (U.A.E.)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicuae_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicuae_1","displayName":"Enabled","description":null,"helpText":null}]},"11cbe21b969b2166":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforpstfiles_l_defaultlocationforpstfiles79","displayName":"Default location for PST files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":null},"111c0f17908b4423":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_turnoffoutlooksocialconnector","displayName":"Turn off Outlook Social Connector (User)","description":"This policy setting allows you to turn off the Outlook Social Connector.\r\n\r\nIf you enable this policy setting, the Outlook Social Connector is turned off.\r\n\r\nIf you disable or you do not configure this policy setting, the Outlook Social Connector is turned on.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_turnoffoutlooksocialconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_turnoffoutlooksocialconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"1146abff1740d375":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_preventusersfromcustomizingattachmentsecuritysettings_v2","displayName":"Prevent users from customizing attachment security settings (User)","description":"This policy setting prevents users from overriding the set of attachments blocked by Outlook.\r\n\r\nIf you enable this policy setting users will be prevented from overriding the set of attachments blocked by Outlook. Outlook also checks the \"Level1Remove\" registry key when this setting is specified. \r\n\r\nIf you disable or do not configure this policy setting, users will be allowed to override the set of attachments blocked by Outlook.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_preventusersfromcustomizingattachmentsecuritysettings_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_preventusersfromcustomizingattachmentsecuritysettings_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"119e7748b9aa5db8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimereceiptrequests_l_handlemessageswithsmimereceiptrequestsinthefollowingmanner","displayName":"Handle messages with S/MIME receipt requests in the following manner: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimereceiptrequests_l_handlemessageswithsmimereceiptrequestsinthefollowingmanner_0","displayName":"Open message if receipt can't be sent","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimereceiptrequests_l_handlemessageswithsmimereceiptrequestsinthefollowingmanner_3","displayName":"Don't open message if receipt can't be sent","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimereceiptrequests_l_handlemessageswithsmimereceiptrequestsinthefollowingmanner_1","displayName":"Always prompt before sending receipt","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimereceiptrequests_l_handlemessageswithsmimereceiptrequestsinthefollowingmanner_2","displayName":"Never send S/MIME receipts","description":null,"helpText":null}]},"11e648d112085211":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy_l_removedextensions25","displayName":"Removed Extensions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":null},"11584ed7421e00ae":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_donotdisturb","displayName":"Set user availablity to Do not Disturb during Slide Show (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_donotdisturb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_donotdisturb_1","displayName":"Enabled","description":null,"helpText":null}]},"111fdde199d42981":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_pathcolon16","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"11d0eb6733ef8ca0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_usetaiwanhongkongsarandmacaosarcharactervariants","displayName":"Use Taiwan, Hong Kong SAR and Macao SAR character variants (User)","description":"This policy setting allows you to configure the \"Chinese Conversion\" dialog, which is accessed by the \"Convert with Options\" button in the Review tab. This may only be visible when Chinese is enabled as an editing language.\r\n\r\nIf you enable this policy setting, the option is selected.\r\n\r\nIf you disable or do not configure this policy setting, the option is not selected.","helpText":"","infoUrls":[],"categoryId":"7bee4dea-82a4-4a03-b903-654b374819b1","categoryName":"Chinese Conversion | Convert with Options","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_usetaiwanhongkongsarandmacaosarcharactervariants_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_usetaiwanhongkongsarandmacaosarcharactervariants_1","displayName":"Enabled","description":null,"helpText":null}]},"11c7a96ee6a0331c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_compatmodeonsaveas","displayName":"Save As Open XML in Compatibility Mode (User)","description":"This policy setting allows you to hide the \"Maintain compatibility with previous versions of Word\" checkbox. For any file format that is in Compatibility Mode, there will be a \"Maintain compatibility with previous versions of Word\" checkbox in the Save As dialog when saving to any of the Open XML file formats. This checkbox allows users to preserve the fidelity of documents that open in compatibility mode when saving those documents to any of the Open XML file formats. Checking this box will prevent conversion to the version of Word that is saving the file.\r\n\r\nConversion maximizes fidelity with the version of Word that is saving the file, and it is recommended for users who want their Word documents to be compatible with this version of Word. However, conversion may impact the fidelity and compatibility of some features when the file is opened by a previous version of Word.\r\n\r\nIf you enable this policy setting, the \"Maintain compatibility with previous versions of Word\" checkbox will be hidden. The Save As behavior for any of the Open XML file formats will always maintain compatibility with previous versions of Word. The file that is in compatibility mode will be prevented from being converted to the version of Word saving this file. \r\n\r\nIf you disable or do not configure this policy setting, the \"Maintain compatibility with previous versions of Word\" checkbox in the Save As dialog will be shown. Unless checked by the user, an Open XML file will be converted when the document is saved. Users will still, by default, be shown a final dialog when saving to confirm that the user wants to save the file without \"Maintain compatibility with previous versions of Word\" checked.","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_compatmodeonsaveas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_compatmodeonsaveas_1","displayName":"Enabled","description":null,"helpText":null}]},"1120b41ae0405706":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_datecolon41","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/12.json b/public/intune-definitions/12.json new file mode 100644 index 000000000000..96d77b667022 --- /dev/null +++ b/public/intune-definitions/12.json @@ -0,0 +1 @@ +{"12c4dda332a9887c":{"id":"com.apple.applicationaccess_ratingappsde","displayName":"Rating Apps - Germany","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsde_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_1","displayName":"1+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_2","displayName":"2+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_3","displayName":"3+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_4","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_5","displayName":"5+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_6","displayName":"6+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_7","displayName":"7+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_8","displayName":"8+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_9","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_10","displayName":"10+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_11","displayName":"11+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_12","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_13","displayName":"13+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_14","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_15","displayName":"15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_16","displayName":"16+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_17","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_18","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_19","displayName":"19+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_20","displayName":"20+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_21","displayName":"21+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsde_22","displayName":"All","description":null,"helpText":null}]},"12ea49c4a4a3eee6":{"id":"com.apple.managedclient.preferences_enablesha1forlocalanchors","displayName":"Allow certificates signed using SHA-1 when issued by local trust anchors","description":"When this setting is enabled, Microsoft Edge allows connections secured by SHA-1 signed certificates so long as the the certificate chains to a locally-installed root certificate and is otherwise valid.\n\nNote that this policy depends on the operating system (OS) certificate verification stack allowing SHA-1 signatures. If an OS update changes the OS handling of SHA-1 certificates, this policy might no longer have effect. Further, this policy is intended as a temporary workaround to give enterprises more time to move away from SHA-1. This policy will be removed in Microsoft Edge 92 releasing in mid 2021.\n\nIf you don't set this policy or set it to false, or the SHA-1 certificate chains to a publicly trusted certificate root, then Microsoft Edge won't allow certificates signed by SHA-1.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enablesha1forlocalanchors"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enablesha1forlocalanchors_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablesha1forlocalanchors_true","displayName":"Enabled","description":null,"helpText":null}]},"12a4d6b7bf1c596c":{"id":"com.apple.managedclient.preferences_quicallowed","displayName":"Allow QUIC protocol","description":"Allows use of the QUIC protocol in Microsoft Edge.\n\nIf you enable this policy or don't configure it, the QUIC protocol is allowed.\n\nIf you disable this policy, the QUIC protocol is blocked.\n\nQUIC is a transport layer network protocol that can improve performance of web applications that currently use TCP.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#quicallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_quicallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_quicallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"1272f693c5a3c4bd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_recommended","displayName":"Enable preload of the new tab page for faster rendering (users can override)","description":"If you configure this policy, preloading the New tab page is enabled, and users can't change this setting. If you don't configure this policy, preloading is enabled and a user can change this setting.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"124d8ac1847fd674":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxdownloadtime","displayName":"Limit the maximum BITS job download time","description":"This policy setting limits the amount of time that Background Intelligent Transfer Service (BITS) will take to download the files in a BITS job.\r\n\r\n The time limit applies only to the time that BITS is actively downloading files. When the cumulative download time exceeds this limit, the job is placed in the error state.\r\n\r\n By default BITS uses a maximum download time of 90 days (7,776,000 seconds).\r\n\r\n If you enable this policy setting, you can set the maximum job download time to a specified number of seconds.\r\n\r\n If you disable or do not configure this policy setting, the default value of 90 days (7,776,000 seconds) will be used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxdownloadtime"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxdownloadtime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxdownloadtime_1","displayName":"Enabled","description":null,"helpText":null}]},"128d84da697f779a":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_forcedefaultlockscreen_lockscreenimage","displayName":"Path to lock screen image:","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"1271c0beb28b2029":{"id":"device_vendor_msft_policy_config_admx_eventforwarding_forwarderresourceusage","displayName":"Configure forwarder resource usage","description":"This policy setting controls resource usage for the forwarder (source computer) by controlling the events/per second sent to the Event Collector.\r\n\r\nIf you enable this policy setting, you can control the volume of events sent to the Event Collector by the source computer. This may be required in high volume environments.\r\n\r\nIf you disable or do not configure this policy setting, forwarder resource usage is not specified.\r\n\r\nThis setting applies across all subscriptions for the forwarder (source computer).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventforwarding#admx-eventforwarding-forwarderresourceusage"],"categoryId":"c859dc1a-fdeb-4591-af97-79d078ee715b","categoryName":"Event Forwarding","options":[{"id":"device_vendor_msft_policy_config_admx_eventforwarding_forwarderresourceusage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventforwarding_forwarderresourceusage_1","displayName":"Enabled","description":null,"helpText":null}]},"12f2813d8f827691":{"id":"device_vendor_msft_policy_config_admx_icm_nc_exitonisp","displayName":"Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com","description":"This policy setting specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).\r\n\r\nIf you enable this policy setting, the \"Choose a list of Internet Service Providers\" path in the Internet Connection Wizard causes the wizard to exit. This prevents users from retrieving the list of ISPs, which resides on Microsoft servers.\r\n\r\nIf you disable or do not configure this policy setting, users can connect to Microsoft to download a list of ISPs for their area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-nc-exitonisp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_nc_exitonisp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_nc_exitonisp_1","displayName":"Enabled","description":null,"helpText":null}]},"12f16616a6249ca0":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requireipsec","displayName":"Do not allow connections without IPSec","description":"If enabled then only those connections that are configured for IPSec may be established. If disabled then connections that are configured for IPSec or connections not configured for IPSec may be established.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsisecurity-requireipsec"],"categoryId":"6c1d9109-e4d1-4718-a537-dd685464fdbe","categoryName":"i SCSI Security","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requireipsec_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requireipsec_1","displayName":"Enabled","description":null,"helpText":null}]},"122914449465c3d7":{"id":"device_vendor_msft_policy_config_admx_logon_disableacrylicbackgroundonlogon","displayName":"Show clear logon background","description":"This policy setting disables the acrylic blur effect on logon background image.\r\n\r\n If you enable this policy, the logon background image shows without blur.\r\n If you disable or do not configure this policy, the logon background image adopts the acrylic blur effect.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disableacrylicbackgroundonlogon"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_disableacrylicbackgroundonlogon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_disableacrylicbackgroundonlogon_1","displayName":"Enabled","description":null,"helpText":null}]},"129e8075d7e906c3":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_notification_suppress","displayName":"Suppress all notifications","description":"Use this policy setting to specify if you want Microsoft Defender Antivirus notifications to display on clients.\r\n If you disable or do not configure this setting, Microsoft Defender Antivirus notifications will display on clients.\r\n\r\n If you enable this setting, Microsoft Defender Antivirus notifications will not display on clients.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-ux-configuration-notification-suppress"],"categoryId":"a5060182-4d22-412b-bd0e-3a1e009b36c6","categoryName":"Client Interface","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_notification_suppress_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_notification_suppress_1","displayName":"Enabled","description":null,"helpText":null}]},"125ea0cc3eee9797":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_nc_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":null},"12b4ce1ca8210a64":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_default_qualified_stateselect","displayName":"Select from the following states:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_default_qualified_stateselect_enabled","displayName":"Enabled State","description":null,"helpText":null}},"129c6caeac311a1f":{"id":"device_vendor_msft_policy_config_admx_windowsremotemanagement_disallowkerberos_2","displayName":"Disallow Kerberos authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Kerberos authentication directly.\r\n\r\nIf you enable this policy setting, the Windows Remote Management (WinRM) client does not use Kerberos authentication directly. Kerberos can still be used if the WinRM client is using the Negotiate authentication and Kerberos is selected.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM client uses the Kerberos authentication directly.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement#admx-windowsremotemanagement-disallowkerberos-2"],"categoryId":"0f6d725e-2c2d-4926-8e78-3d2d5867eef5","categoryName":"Win RM Client","options":[{"id":"device_vendor_msft_policy_config_admx_windowsremotemanagement_disallowkerberos_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsremotemanagement_disallowkerberos_2_1","displayName":"Enabled","description":null,"helpText":null}]},"1252b13aa49ac357":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_trustappsfrommanagedinstaller","displayName":"Trust apps from managed installer","description":"Turning Trust apps from managed installer on will not enforce the policy. We recommend first running the poliy with Trust apps from managed installer turned on prior to enforcement to determine the impacts of the policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_trustappsfrommanagedinstaller_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_trustappsfrommanagedinstaller_enabled","displayName":"Enabled","description":null,"helpText":null}]},"12a8852d9c505214":{"id":"device_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge","displayName":"Prevent Access To About Flags In Microsoft Edge","description":"Prevent access to the about:flags page in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventaccesstoaboutflagsinmicrosoftedge"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge_0","displayName":"Disabled","description":"Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge_1","displayName":"Enabled","description":"Prevents users from accessing the about:flags page.","helpText":null}]},"120f6e33b9cadd63":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc","displayName":"URLs to open on startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":null},"1265731c6284d099":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters_alternativebrowserparametersdesc","displayName":"Command-line parameters for the alternative browser. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"1269d4e4c36c48ee":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"12e69a31d5749427":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent","displayName":"Freeze User-Agent string major version at 99 (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_0","displayName":"Default to browser settings for User-Agent string version.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_1","displayName":"The User-Agent string will not freeze the major version.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_2","displayName":"The User-Agent string will freeze the major version as 99 and include the browser's major version in the minor position.","description":null,"helpText":null}]},"12d1c2cdda7ae0fc":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_webrtciphandlingurl","displayName":"WebRTC per URL IP Handling (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"b811c4fe-7ff0-4bd1-a454-0918d4e2f896","categoryName":"Web Rtc settings","options":null},"12587546e7126d95":{"id":"device_vendor_msft_policy_config_defender_daystoretaincleanedmalware","displayName":"Days To Retain Cleaned Malware","description":"Time period (in days) that quarantine items will be stored on the system. The default value is 0, which keeps items in quarantine, and does not automatically remove them.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"126950bc000df836":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto","displayName":"To:","description":"","helpText":"","infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_23","displayName":"11 PM","description":null,"helpText":null}]},"1294710fced903b3":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote","displayName":"Include OneNote","description":"OneNote local notebook cache will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOneNote\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote_1","displayName":"Enabled","description":null,"helpText":null}]},"12a1dacbb6050b36":{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_enterreportbackprompt","displayName":"Type the location (URL) of where to receive reports about the websites for which users turn on and use Enterprise Mode","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":null},"12d19048dd327e2b":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin","displayName":"Interactive Logon Do Not Display Username At Sign In","description":"Interactive logon: Don't display username at sign-in This security setting determines whether the username of the person signing in to this PC appears at Windows sign-in, after credentials are entered, and before the PC desktop is shown. If this policy is enabled, the username will not be shown. If this policy is disabled, the username will be shown. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_donotdisplayusernameatsignin"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin_0","displayName":"Disabled (username will be shown)","description":"Disabled (username will be shown)","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin_1","displayName":"Enabled (username will not be shown)","description":"Enabled (username will not be shown)","helpText":null}]},"12d2310e01c98451":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_diskcachedir","displayName":"Set disk cache directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"1233f3b23836afba":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended","displayName":"Enable network prediction","description":"Enables network prediction and prevents users from changing this setting.\r\n\r\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\r\n\r\nIf you don't configure this policy, network prediction is enabled but the user can change it.\r\n\r\n* 0 = Predict network actions on any network connection\r\n\r\n* 2 = Don't predict network actions on any network connection","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"128f2bc719b4f407":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername","displayName":"Default search provider name","description":"Specifies the name of the default search provider.\r\n\r\nIf you enable this policy, you set the name of the default search provider.\r\n\r\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\r\n\r\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_1","displayName":"Enabled","description":null,"helpText":null}]},"1296f3dd149e86f0":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains","displayName":"Configure the list of domains for which Edge Website Typo Protection won't trigger warnings","description":"Configure the list of Edge Website Typo Protection trusted domains. This means:\r\nEdge Website Typo Protection won't check for potentially malicious typosquatting websites.\r\n\r\nIf you enable this policy, Edge Website Typo Protection trusts these domains.\r\nIf you disable or don't set this policy, default Edge Website Typo Protection protection is applied to all resources.\r\n\r\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10/11 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.\r\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender for Endpoint. You must configure your allow and block lists in Microsoft 365 Defender portal using Indicators (Settings > Endpoints > Indicators).\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"12c6108324e2e98a":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector","displayName":"Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a page or file is printed from Microsoft Edge.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"12c9bbfce52cbad0":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled","displayName":"Enable startup boost","description":"Allows Microsoft Edge processes to start at OS sign-in and restart in background after the last browser window is closed.\r\n\r\nIf Microsoft Edge is running in background mode, the browser might not close when the last window is closed and the browser won't be restarted in background when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about what happens after configuring Microsoft Edge background mode behavior.\r\n\r\nIf you enable this policy, startup boost is turned on.\r\n\r\nIf you disable this policy, startup boost is turned off.\r\n\r\nIf you don't configure this policy, startup boost may initially be off or on. The user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about startup boost: https://go.microsoft.com/fwlink/?linkid=2147018","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"12d1200ec1270a1a":{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting","displayName":"DisableIPSourceRouting","description":"","helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting_0","displayName":"No additional protection, source routed packets are allowed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting_1","displayName":"Medium, source routed packets ignored when IP forwarding is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting_2","displayName":"Highest protection, source routing is completely disabled","description":null,"helpText":null}]},"12ecb7c023037459":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mspubexe30","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mspubexe30_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mspubexe30_1","displayName":"True","description":null,"helpText":null}]},"128b24c5fb984b9b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mse7exe181","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mse7exe181_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mse7exe181_1","displayName":"True","description":null,"helpText":null}]},"128c5f8d19b8107d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mspubexe","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mspubexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mspubexe_1","displayName":"True","description":null,"helpText":null}]},"1291e850a68262c0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_msaccessexe95","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_msaccessexe95_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_msaccessexe95_1","displayName":"True","description":null,"helpText":null}]},"125ab8ca7d3ef521":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid","displayName":"Channel Name: (Device) (Deprecated)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_current","displayName":"Monthly Channel","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasecurrent","displayName":"Monthly Channel (Targeted)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_deferred","displayName":"Semi-Annual Channel","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasedeferred","displayName":"Semi-Annual Channel (Targeted)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_insiderfast","displayName":"Insider Fast","description":null,"helpText":null}]},"12b5dfa18d09b8d0":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist","displayName":"Block syncing OneDrive accounts for specific organizations","description":"This setting lets you prevent users from easily uploading files to another organization by specifying a list of blocked tenant IDs.\r\n\r\nIf you enable this setting, users will get an error if they attempt to add an account from an organization that is blocked. If a user has already added the account, the files will stop syncing.\r\n\r\nIf you disable or do not configure this setting, users can add accounts from any organization.\r\n\r\nTo specify a list of allowed organizations instead, use \"Allow syncing OneDrive accounts for only specific organizations.\"\r\n\r\nThis setting will NOT work if you have the \"Allow syncing OneDrive accounts for only specific organizations.\" enabled. Do not enable both policies at the same time.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist_1","displayName":"Enabled","description":null,"helpText":null}]},"123737b5511923ff":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb","displayName":"Block file downloads when users are low on disk space","description":"This setting lets you specify a minimum amount of available disk space and block the OneDrive sync app (OneDrive.exe) from downloading files when users have less than this amount.\r\n\r\nUsers will be prompted with options to help free up space.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb_1","displayName":"Enabled","description":null,"helpText":null}]},"12318d145dfe511b":{"id":"device_vendor_msft_policy_config_settings_allowonlinetips","displayName":"Allow Online Tips","description":"Enables or disables the retrieval of online tips and help for the Settings app. If disabled, Settings will not contact Microsoft content services to retrieve tips and help content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowonlinetips"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowonlinetips_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowonlinetips_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"124ca0bbd9622dbc":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut","displayName":"Remove Desktop Shortcuts upon update default","description":"Lets you specify the default behavior for all channels for creating a desktop shortcut when Microsoft Edge is installed.\r\n\r\n If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_1","displayName":"Enabled","description":null,"helpText":null}]},"12ce65ca8c9acab9":{"id":"linux_customconfig_executionfrequency","displayName":"Execution frequency","description":"Specifies how frequently to execute the script.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"categoryId":"36716a4c-cedb-47bb-8f4b-5783fedc7c47","categoryName":null,"options":[{"id":"linux_customconfig_executionfrequency_15minutes","displayName":"Every 15 minutes","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_30minutes","displayName":"Every 30 minutes","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_1hour","displayName":"Every 1 hour","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_2hours","displayName":"Every 2 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_3hours","displayName":"Every 3 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_6hours","displayName":"Every 6 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_12hours","displayName":"Every 12 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_1day","displayName":"Every 1 day","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_1week","displayName":"Every 1 week","description":null,"helpText":null}]},"12d7d2462ec9c8d3":{"id":"user_vendor_msft_policy_config_admx_icm_shellpreventwpwdownload_1","displayName":"Turn off Internet download for Web publishing and online ordering wizards (User)","description":"This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards.\r\n\r\nThese wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry.\r\n\r\nIf you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed.\r\n\r\nIf you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards.\r\n\r\nSee the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellpreventwpwdownload-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellpreventwpwdownload_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellpreventwpwdownload_1_1","displayName":"Enabled","description":null,"helpText":null}]},"1203d0f458829c87":{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartpage","displayName":"Force classic Start Menu (User)","description":"This setting affects the presentation of the Start menu.\r\n\r\nThe classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the new Start menu consolidates common items onto one menu. When the classic Start menu is used, the following icons are placed on the desktop: Documents, Pictures, Music, Computer, and Network. The new Start menu starts them directly.\r\n\r\nIf you enable this setting, the Start menu displays the classic Start menu in the Windows 2000 style and displays the standard desktop icons.\r\n\r\nIf you disable this setting, the Start menu only displays in the new style, meaning the desktop icons are now on the Start page.\r\n\r\nIf you do not configure this setting, the default is the new style, and the user can change the view.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartpage"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartpage_1","displayName":"Enabled","description":null,"helpText":null}]},"12ab47ae0d36f070":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventradiopresetsretrieval","displayName":"Prevent Radio Station Preset Retrieval (User)","description":"This policy setting allows you to prevent radio station presets from being retrieved from the Internet.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically retrieving radio station presets from the Internet and displaying them in Media Library. In addition, presets that exist before the policy is configured are not be updated, and presets a user adds are not be displayed.\r\n\r\nIf you disable or do not configure this policy setting, the Player automatically retrieves radio station presets from the Internet.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventradiopresetsretrieval"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventradiopresetsretrieval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventradiopresetsretrieval_1","displayName":"Enabled","description":null,"helpText":null}]},"122746072cfa4a6f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled","displayName":"DNS interception checks enabled (User)","description":"This policy configures a local switch that can be used to disable DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nThis detection may not be necessary in an enterprise environment where the network configuration is known, since it causes some amount of DNS and HTTP traffic on start-up and each DNS configuration change.\r\n\r\nWhen this policy is not set, or is enabled, the DNS interception checks are performed. When explicitly disabled, they're not.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"129c3ba44743a191":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist","displayName":"Allow merging dictionary policies from different sources (User)","description":"Setting the policy allows merging of selected policies when they come from different sources, with the same scopes and level. This merging is in the first level keys of the dictionary from each source. The key coming from the highest priority source takes precedence.\r\n\r\nIf a policy is in the list and there's conflict between sources with:\r\n\r\n* The same scopes and level: The values merge into a new policy dictionary.\r\n\r\n* Different scopes or level: The policy with the highest priority applies.\r\n\r\nIf a policy isn't in the list and there's conflict between sources, scopes, or level, the policy with the highest priority applies.\r\n\r\nExample value:\r\n\r\nExtensionSettings","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_1","displayName":"Enabled","description":null,"helpText":null}]},"128c5872ff9100a4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting","displayName":"Default Flash setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_1","displayName":"Allow all sites to automatically run the Flash plugin","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_2","displayName":"Block the Flash plugin","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_3","displayName":"Click to play","description":null,"helpText":null}]},"124d774baa2c2c6a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (User)","description":"Allows you to control whether Google Chrome's Safe Browsing feature is enabled and the mode it operates in.\r\n\r\nIf this policy is set to 'NoProtection' (value 0), Safe Browsing is never active.\r\n\r\nIf this policy is set to 'StandardProtection' (value 1, which is the default), Safe Browsing is always active in the standard mode.\r\n\r\nIf this policy is set to 'EnhancedProtection' (value 2), Safe Browsing is always active in the enhanced mode, which provides better security, but requires sharing more browsing information with Google.\r\n\r\nIf you set this policy as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome.\r\n\r\nIf this policy is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting.\r\n\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"125053df65512234":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings","displayName":"Dynamic Code Settings (User)","description":"This policy controls the dynamic code settings for Google Chrome.\r\n\r\nDisabling dynamic code improves the security of Google Chrome by preventing potentially hostile dynamic code and third-party code from making changes to Google Chrome's behavior, but might cause compatibility issues with third-party software (e.g. certain printer drivers) that must run inside the browser process.\r\n\r\nIf the policy is set to 0 - Default or left unset then Google Chrome will use the default settings.\r\n\r\nIf the policy is set to 1 - DisabledForBrowser then the Google Chrome browser process will be prevented from creating dynamic code.\r\n\r\nNote: Read more about process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"120df8deed35ec13":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed","displayName":"Allows web pages to use identifiers for the purpose of protected content playback (User)","description":"If the policy is set to true or unset, the use of protected content identifiers is allowed, which can help enable higher quality of protected content playback.\r\n\r\nIf the policy is set to false, protected content identifiers are not allowed to be used.","helpText":"","infoUrls":[],"categoryId":"4cd10f38-02cf-40f2-aa87-ad70a2190a1a","categoryName":"Protected Content","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"1244c533c41739ea":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist_l_entriesonrecentlyusedfilelist","displayName":"Entries on recently used file list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":null},"12a719973dd6426b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"1297963b75aa7d44":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneinitializeandscriptactivexcontrols"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"1223ede5843f2a00":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonejavapermissions"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"12009dbc9230646b":{"id":"user_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge","displayName":"Send all sites not included in the Enterprise Mode Site List to Microsoft Edge. (User)","description":"This setting lets you decide whether to open all sites not included in the Enterprise Mode Site List in Microsoft Edge. If you use this setting, you must also turn on the Administrative Templates\\Windows Components\\Internet Explorer\\Use the Enterprise Mode IE website list policy setting and you must include at least one site in the Enterprise Mode Site List.\n\nEnabling this setting automatically opens all sites not included in the Enterprise Mode Site List in Microsoft Edge.\n\nDisabling, or not configuring this setting, opens all sites based on the currently active browser.\n\nNote: If you've also enabled the Administrative Templates\\Windows Components\\Microsoft Edge\\Send all intranet sites to Internet Explorer 11 policy setting, then all intranet sites will continue to open in Internet Explorer 11.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-sendsitesnotinenterprisesitelisttoedge"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_1","displayName":"Enabled","description":null,"helpText":null}]},"12f21af5df8b6853":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls","displayName":"Block sites from making network requests to the local device. (User)","description":"Specifies a list of URL patterns for which requests initiated from matching origins to loopback addresses (127.0.0.1, ::1, localhost) are blocked from issuing Local Network Access requests.\r\n\r\nIf a requesting origin matches a URL pattern specified in this policy, requests to loopback addresses are blocked.\r\n\r\nFor origins not covered by this policy, the user's personal settings and local network access restrictions apply.\r\n\r\nMultiple policies can specify origins that affect requests to the local device. If an origin matches more than one of the following policies, they are applied in the following order of precedence:\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nNote: This policy improves local network security by blocking specified public websites from accessing loopback addresses. It helps prevent unauthorized external sites from reaching local services running on the device unless explicitly permitted.\r\n\r\nFor more information about Local Network Access, see https://wicg.github.io/local-network-access/\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"12356c8039e57967":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlblocklist_inprivatemodeurlblocklistdesc","displayName":"Block access to a list of URLs in InPrivate mode. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"12a5ed3837bb118c":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotblocklist_browsingwithcopilotblocklistdesc","displayName":"Browsing with Copilot Blocked URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"122ddb0d2827e911":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uyghurprc","displayName":"Uyghur (PRC) (User)","description":"Enables the editing language Uyghur (PRC)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uyghurprc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uyghurprc_1","displayName":"Enabled","description":null,"helpText":null}]},"121e9e5599a7620d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitcustomtags","displayName":"Specify custom labels to use with the Readiness Toolkit (User)","description":"This policy setting allows you to specify up to four custom labels to categorize and filter data in reports created by the Readiness Toolkit for Office. Labels are available in reports that are based on scans of the most recently used Office documents and installed add-ins on the user’s computer.\r\n\r\nYou can specify any string for the custom labels. For example, you can use a label to indicate the user’s department, title, or geographic location. When the Readiness Toolkit runs on the user’s computer, the custom labels are collected and are made available in the reports that are created. For example, you can filter the report to show only data from the Finance Department. Assign labels in a consistent manner, such as always using Label 1 for department.\r\n\r\nIf you enable this policy setting, the custom labels that you specify will be available in reports created by the Readiness Toolkit.\r\n\r\nIf you disable or don’t configure this policy setting, custom labels won’t be available in reports created by the Readiness Toolkit.\r\n\r\nNote: If you're using the Office Telemetry Dashboard and have already configured tags (labels), the Readiness Toolkit automatically collects those labels during its scan of the user's computer and will make them available in its reports. You don't need to enable this policy setting unless you want to specify different labels. Labels you specify for the Readiness Toolkit won't appear in the Office Telemetry Dashboard.","helpText":"","infoUrls":[],"categoryId":"da04d4b8-bd11-439e-9663-5fd2399d9cc1","categoryName":"Readiness Toolkit","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitcustomtags_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitcustomtags_1","displayName":"Enabled","description":null,"helpText":null}]},"120be04e636b9f4f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_prefixeachlinewith","displayName":"Prefix each line with: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":null},"12daa2b63b16b94b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1attachments","displayName":"Display Level 1 attachments (User) (Deprecated)","description":"This policy setting controls whether Outlook blocks potentially dangerous attachments designated Level 1. \r\nOutlook uses two levels of security to restrict users' access to files attached to e-mail messages or other items. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n \r\nIf you enable this policy setting, Outlook users can gain access to Level 1 file type attachments by first saving the attachments to disk and then opening them, as with Level 2 attachments. \r\n\r\nIf you disable this policy setting, Level 1 attachments do not display under any circumstances. \r\n\r\nIf you do not configure this policy setting, Outlook completely blocks access to Level 1 files, and requires users to save Level 2 files to disk before opening them.","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1attachments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1attachments_1","displayName":"Enabled","description":null,"helpText":null}]},"1297a4a3224f8a66":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolslanguage","displayName":"Review tab | Language | Language (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolslanguage_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolslanguage_1","displayName":"True","description":null,"helpText":null}]},"12b653d000bf7d63":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultxmlschema","displayName":"Project Guide Content (User)","description":"Specifies whether the side pane displays the Project Guide content that comes with Project or custom content that your organization has developed.\r\n\r\nIf you enable this setting, content for the Project Guide is loaded from the specified location.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"81bc8383-43a5-4c6a-9d51-951e86028934","categoryName":"Project Guide settings for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultxmlschema_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultxmlschema_1","displayName":"Enabled","description":null,"helpText":null}]},"12781c3f12fe7089":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustparagraphspacingonpaste","displayName":"Adjust paragraph spacing on paste (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e63361ad-a54b-4557-acc7-02c272a3e58d","categoryName":"Smart cut and paste","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustparagraphspacingonpaste_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustparagraphspacingonpaste_1","displayName":"Enabled","description":null,"helpText":null}]},"129618c6a7266ded":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_onlinevideos","displayName":"Allow Online Videos to play within Word (User)","description":"This policy setting controls whether online videos can be played within Word.\r\n\r\nIf you enable or do not configure this policy, users will be able to play online videos within Word.\r\n\r\nIf you disable this policy setting, you will not be able to play online videos within Word.\r\n ","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_onlinevideos_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_onlinevideos_1","displayName":"Enabled","description":null,"helpText":null}]},"12e8286c8f0ea486":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_fractions12withfractioncharacter","displayName":"Fractions (1/2) with fraction character (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"b6cafb2c-81be-40cf-90d8-788f713f7099","categoryName":"Replace as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_fractions12withfractioncharacter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_fractions12withfractioncharacter_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/13.json b/public/intune-definitions/13.json new file mode 100644 index 000000000000..7f5971463237 --- /dev/null +++ b/public/intune-definitions/13.json @@ -0,0 +1 @@ +{"13bb1818afcf4664":{"id":"com.apple.managedclient.preferences_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge","description":"This policy lets you enhance the security state in Microsoft Edge.\n\nIf you set this policy to 'StandardMode', the enhanced mode will be turned off and Microsoft Edge will fallback to its standard security mode.\n\nIf you set this policy to 'BalancedMode', the security state will be in balanced mode.\n\nIf you set this policy to 'StrictMode', the security state will be in strict mode.\n\nIf you set this policy to 'BasicMode', the security state will be in basic mode.\n\nNote: Sites that use WebAssembly (WASM) are not supported on 32-bit systems when \"EnhanceSecurityMode\" is enabled. If you require access to a site that uses WASM, consider adding it to your exception list as described in https://go.microsoft.com/fwlink/?linkid=2183321.\n\nStarting in Microsoft Edge 113, 'BasicMode' is deprecated and is treated the same as 'BalancedMode'. It won't work in Microsoft Edge version 116.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895\n\nPolicy options mapping:\n\n* StandardMode (0) = Standard mode\n\n* BalancedMode (1) = Balanced mode\n\n* StrictMode (2) = Strict mode\n\n* BasicMode (3) = (Deprecated) Basic mode\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enhancesecuritymode"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enhancesecuritymode_0","displayName":"Standard mode","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enhancesecuritymode_1","displayName":"Balanced mode","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enhancesecuritymode_2","displayName":"Strict mode","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enhancesecuritymode_3","displayName":"(Deprecated) Basic mode","description":null,"helpText":null}]},"13737ba2a60b051c":{"id":"com.apple.managedclient.preferences_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown","description":"Controls the duration (in seconds) that keepalive requests are allowed to prevent the browser from completing its shutdown.\n\nIf you configure this policy, the browser will block completing shutdown while it processes any outstanding keepalive requests (see https://fetch.spec.whatwg.org/#request-keepalive-flag) up to the maximum period of time specified by this policy.\n\nIf you disable or don't configure this policy, the default value of 0 seconds is used and outstanding keepalive requests will be immediately cancelled during browser shutdown.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#fetchkeepalivedurationsecondsonshutdown"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"13d04f5a7abf3a9b":{"id":"com.apple.mcx.filevault2_deferforceatuserloginmaxbypassattempts","displayName":"Defer Force At User Login Max Bypass Attempts","description":"The maximum number of times users can bypass enabling FileVault before being required to enable it to log in. If the value is 0, the user will be required to enabled FileVault the next time they attempt to log in. Setting this key to –1 disables the feature.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":null},"13c7f2dd60363715":{"id":"com.apple.mobiledevice.passwordpolicy_maxgraceperiod","displayName":"Max Grace Period","description":"The maximum grace period, in minutes, to unlock the phone without entering a passcode. The default is 0, which is no grace period and requires a passcode immediately. In macOS, this grace period value is translated to screen-saver settings.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"13937552cf6a9e13":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder","displayName":"System Policy Downloads Folder","description":"Allows the application to access files in the user's Downloads folder.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"13d57fe52078dbfa":{"id":"com.microsoft.edge.mamedgeappconfigsettings.configureonlinetexttospeech","displayName":"Configure Online Text To Speech","description":"Set whether the browser can apply Online Text to Speech voice fonts, part of Azure Cognitive Services. These voice fonts are higher quality than the pre-installed system voice fonts.\n\nIf you enable or don't configure this policy, web-based applications that use the SpeechSynthesis API can use Online Text to Speech voice fonts.\n\nIf you disable this policy, the voice fonts aren't available.\n\nRead more about this feature here:\nSpeechSynthesis API: https://go.microsoft.com/fwlink/?linkid=2110038\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2110141","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.configureonlinetexttospeech_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configureonlinetexttospeech_true","displayName":"Enabled","description":null,"helpText":null}]},"13281f5200916995":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensioninstallblocklist","displayName":"Control which extensions cannot be installed","description":"Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled.\n\nA blocklist value of '*' means all extensions are blocked unless they are explicitly listed in the allowlist.\n\nIf this policy isn't set, the user can install any extension in Microsoft Edge.\n\nStarting in Microsoft Edge version 149, the \"Microsoft365CopilotChatIconEnabled\" policy controls the display of Copilot in the toolbar.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"13c4d2954bd6e1fe":{"id":"device_vendor_msft_defender_configuration_disablednsovertcpparsing","displayName":"Disable Dns Over Tcp Parsing","description":"This setting disables DNS over TCP Parsing for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablednsovertcpparsing_1","displayName":"DNS over TCP parsing is disabled","description":"DNS over TCP parsing is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablednsovertcpparsing_0","displayName":"DNS over TCP parsing is enabled","description":"DNS over TCP parsing is enabled","helpText":null}]},"132588287ab71df7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_threats_threatiddefaultaction_threats_threatiddefaultactionlist","displayName":"Specify threats upon which default action should not be taken when detected","description":null,"helpText":"","infoUrls":[],"categoryId":"2c43699e-90b5-4da6-9689-fe5ad3b25ac9","categoryName":"Threats","options":null},"13980096ac376f91":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_cachesize","displayName":"Limit disk space used by Offline Files","description":"This policy setting limits the amount of disk space that can be used to store offline files. This includes the space used by automatically cached files and files that are specifically made available offline. Files can be automatically cached if the user accesses a file on an automatic caching network share.\r\n\r\nThis setting also disables the ability to adjust, through the Offline Files control panel applet, the disk space limits on the Offline Files cache. This prevents users from trying to change the option while a policy setting controls it.\r\n\r\nIf you enable this policy setting, you can specify the disk space limit (in megabytes) for offline files and also specify how much of that disk space can be used by automatically cached files.\r\n\r\nIf you disable this policy setting, the system limits the space that offline files occupy to 25 percent of the total space on the drive where the Offline Files cache is located. The limit for automatically cached files is 100 percent of the total disk space limit.\r\n\r\nIf you do not configure this policy setting, the system limits the space that offline files occupy to 25 percent of the total space on the drive where the Offline Files cache is located. The limit for automatically cached files is 100 percent of the total disk space limit. However, the users can change these values using the Offline Files control applet.\r\n\r\nIf you enable this setting and specify a total size limit greater than the size of the drive hosting the Offline Files cache, and that drive is the system drive, the total size limit is automatically adjusted downward to 75 percent of the size of the drive. If the cache is located on a drive other than the system drive, the limit is automatically adjusted downward to 100 percent of the size of the drive.\r\n\r\nIf you enable this setting and specify a total size limit less than the amount of space currently used by the Offline Files cache, the total size limit is automatically adjusted upward to the amount of space currently used by offline files. The cache is then considered full.\r\n\r\nIf you enable this setting and specify an auto-cached space limit greater than the total size limit, the auto-cached limit is automatically adjusted downward to equal the total size limit.\r\n\r\nThis setting replaces the Default Cache Size setting used by pre-Windows Vista systems.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-cachesize"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_cachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_cachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"1331b8a353e137ca":{"id":"device_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_2_accessrights_reboottime_seconds","displayName":"Time (in seconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":null},"13a8e1228a5629c4":{"id":"device_vendor_msft_policy_config_admx_tpm_uselegacydap_name","displayName":"Configure the system to use legacy Dictionary Attack Prevention Parameters setting for TPM 2.0.","description":"This policy setting configures the TPM to use the Dictionary Attack Prevention Parameters (lockout threshold and recovery time) to the values that were used for Windows 10 Version 1607 and below. Setting this policy will take effect only if a) the TPM was originally prepared using a version of Windows after Windows 10 Version 1607 and b) the System has a TPM 2.0. Note that enabling this policy will only take effect after the TPM maintenance task runs (which typically happens after a system restart). Once this policy has been enabled on a system and has taken effect (after a system restart), disabling it will have no impact and the system's TPM will remain configured using the legacy Dictionary Attack Prevention parameters, regardless of the value of this group policy. The only way for the disabled setting of this policy to take effect on a system where it was once enabled is to a) disable it from group policy and b)clear the TPM on the system.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-uselegacydap-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_uselegacydap_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_uselegacydap_name_1","displayName":"Enabled","description":null,"helpText":null}]},"132ee12a87b775ad":{"id":"device_vendor_msft_policy_config_admx_wininit_shutdowntimeouthungsessionsdescription","displayName":"Timeout for hung logon sessions during shutdown","description":"This policy setting configures the number of minutes the system waits for the hung logon sessions before proceeding with the system shutdown.\r\n\r\nIf you enable this policy setting, the system waits for the hung logon sessions for the number of minutes specified.\r\n\r\nIf you disable or do not configure this policy setting, the default timeout value is 3 minutes for workstations and 15 minutes for servers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wininit#admx-wininit-shutdowntimeouthungsessionsdescription"],"categoryId":"daf3f2c8-f6a5-40bd-96b3-2c6a28931614","categoryName":"Shutdown Options","options":[{"id":"device_vendor_msft_policy_config_admx_wininit_shutdowntimeouthungsessionsdescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wininit_shutdowntimeouthungsessionsdescription_1","displayName":"Enabled","description":null,"helpText":null}]},"13dfd0a2f92687ac":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_trustappsfrommanagedinstaller","displayName":"Trust apps from managed installer","description":"Turning Trust apps from managed installer on will not enforce the policy. We recommend first running the poliy with Trust apps from managed installer turned on prior to enforcement to determine the impacts of the policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_trustappsfrommanagedinstaller_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_trustappsfrommanagedinstaller_enabled","displayName":"Enabled","description":null,"helpText":null}]},"130600e20d4ea8d7":{"id":"device_vendor_msft_policy_config_cellular_letappsaccesscellulardata_forceallowtheseapps","displayName":"Let Apps Access Cellular Data Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cellular#letappsaccesscellulardata_forceallowtheseapps"],"categoryId":"d5d99ca9-9995-4724-bc46-fd07f362898c","categoryName":"Cellular","options":null},"137cfc689341a952":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_remoteaccesshostdomain","displayName":"Configure the required domain name for remote access hosts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"1369884368e0bb12":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist","displayName":"Configure extension installation allow list","description":"Setting the policy specifies which extensions are not subject to the blocklist.\r\n\r\nA blocklist value of * means all extensions are blocked and users can only install extensions listed in the allow list.\r\n\r\nBy default, all extensions are allowed. But, if you prohibited extensions by policy, use the list of allowed extensions to change that policy.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"130e1636fae0a4ca":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_additionallaunchparameters","displayName":"Additional command line parameters for Google Chrome (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"1342f7313804327c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting","displayName":"Default Flash setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_1","displayName":"Allow all sites to automatically run the Flash plugin","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_2","displayName":"Block the Flash plugin","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_3","displayName":"Click to play","description":null,"helpText":null}]},"139d31494ebbce54":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled","displayName":"Allow ServiceWorker to control srcdoc iframes","description":"https://github.com/w3c/ServiceWorker/issues/765 asks srcdoc iframe with\r\nthe \"allow-same-origin\" sandbox attribute to be under ServiceWorker control.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome makes srcdoc iframes\r\nwith \"allow-same-origin\" sandbox attributes to be under ServiceWorker control.\r\n\r\nSetting the policy to Disabled leaves the srcdoc iframe not controlled by\r\nServiceWorker.\r\n\r\nThis policy is intended to be temporary and will be removed in 2026.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"13f181f631170399":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls","displayName":"Allow Local Fonts permission on these sites","description":"Sets a list of site url patterns that specify sites which will automatically grant the local fonts permission. This will extend the ability of sites to see information about local fonts.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultLocalFontsSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"13bd8d05de5998af":{"id":"device_vendor_msft_policy_config_defender_disablecatchupfullscan","displayName":"Disable Catchup Full Scan","description":"This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. If you disable or do not configure this setting, catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. If you enable this setting, catch-up scans for scheduled full scans will be disabled. Supported values:0 - Disabled1 - Enabled (default)OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/DisableCatchupFullScan","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_disablecatchupfullscan_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_disablecatchupfullscan_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"1393c5cf42d47692":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist","displayName":"Site to Zone Assignment List","description":"This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security settings that apply to all of the sites in the zone.\n\nInternet Explorer has 4 security zones, numbered 1-4, and these are used by this policy setting to associate sites to zones. They are: (1) Intranet zone, (2) Trusted Sites zone, (3) Internet zone, and (4) Restricted Sites zone. Security settings can be set for each of these zones through other policy settings, and their default settings are: Trusted Sites zone (Low template), Intranet zone (Medium-Low template), Internet zone (Medium template), and Restricted Sites zone (High template). (The Local Machine zone and its locked down equivalent have special security settings that protect your local computer.)\n\nIf you enable this policy setting, you can enter a list of sites and their related zone numbers. The association of a site with a zone will ensure that the security settings for the specified zone are applied to the site.  For each entry that you add to the list, enter the following information:\n\nValuename – A host for an intranet site, or a fully qualified domain name for other sites. The valuename may also include a specific protocol. For example, if you enter http://www.contoso.com as the valuename, other protocols are not affected. If you enter just www.contoso.com, then all protocols are affected for that site, including http, https, ftp, and so on. The site may also be expressed as an IP address (e.g., 127.0.0.1) or range (e.g., 127.0.0.1-10). To avoid creating conflicting policies, do not include additional characters after the domain such as trailing slashes or URL path. For example, policy settings for www.contoso.com and www.contoso.com/mail would be treated as the same policy setting by Internet Explorer, and would therefore be in conflict.\n\nValue - A number indicating the zone with which this site should be associated for security settings. The Internet Explorer zones described above are 1-4.\n\nIf you disable or do not configure this policy, users may choose their own site-to-zone assignments.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsitetozoneassignmentlist"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_1","displayName":"Enabled","description":null,"helpText":null}]},"13a0c603f9b9363b":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, users are queried whether to allow HTML fonts to download.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowfontdownloads"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"134925405cbc57b1":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus","displayName":"Accounts Enable Guest Account Status","description":"This security setting determines if the Guest account is enabled or disabled. Default: Disabled. Note: If the Guest account is disabled and the security option Network Access: Sharing and Security Model for local accounts is set to Guest Only, network logons, such as those performed by the Microsoft Network Server (SMB Service), will fail.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_enableguestaccountstatus"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus_0","displayName":"Disable","description":"Disable","helpText":null}]},"1323c7fb48650cd7":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_messagetitleforusersattemptingtologon","displayName":"Interactive Logon Message Title For Users Attempting To Log On","description":"Interactive logon: Message title for users attempting to log on This security setting allows the specification of a title to appear in the title bar of the window that contains the Interactive logon: Message text for users attempting to log on. Default: No message.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_messagetitleforusersattemptingtologon"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"1306b6ae68d45569":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled","displayName":"Enable component updates in Microsoft Edge","description":"If you enable or don't configure this policy, component updates are enabled in Microsoft Edge.\r\n\r\nIf you disable this policy or set it to false, component updates are disabled for all components in Microsoft Edge.\r\n\r\nHowever, some components are exempt from this policy. This includes any component that doesn't contain executable code, that doesn't significantly alter the behavior of the browser, or that's critical for security. That is, updates that are deemed \"critical for security\" are still applied even if you disable this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"13c6881e5686928f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled","displayName":"Disable synchronization of data using Microsoft sync services","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\r\n\r\nIf you don't set this policy or apply it as recommended, users will be able to turn sync on or off. If you apply this policy as mandatory, users will not be able to turn sync on.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"1337e1577904991a":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess","displayName":"Force WebSQL to be enabled","description":"WebSQL is on by default as of Microsoft Edge version 101, but can be disabled via a Microsoft Edge flag.\r\nIf you enable this policy, WebSQL cannot be disabled.\r\nIf you disable or don't configure this policy, WebSQL can be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"13119f2d040c1275":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting","displayName":"Default clipboard site permission","description":"This policy controls the default value for the clipboard site permission.\r\n\r\nSetting the policy to 2 blocks sites from using the clipboard site permission.\r\n\r\nSetting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use an API.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'ClipboardAllowedForUrls' (Allow clipboard use on specific sites) and 'ClipboardBlockedForUrls' (Block clipboard use on specific sites) policies.\r\n\r\nThis policy only affects clipboard operations controlled by the clipboard site permission and doesn't affect sanitized clipboard writes or trusted copy and paste operations.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockClipboard (2) = Do not allow any site to use the clipboard site permission\r\n\r\n* AskClipboard (3) = Allow sites to ask the user to grant the clipboard site permission\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"1379c20474bb6639":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list","description":"Set this policy to control which profiles Microsoft Edge will use to open sites in. Switching configurations for sites listed in this policy take precedence over other heuristics Microsoft Edge uses for switching sites but note that sites not listed on this policy are still subject to switching by those heuristics. If this policy is not configured, Microsoft Edge will continue using its heuristics to automatically switch sites.\r\n\r\nThis policy maps a URL hostname to a profile that it should be opened in.\r\n\r\nThe 'site' field should take the form of a URL hostname.\r\n\r\nThe 'profile' field can take one of the following values:\r\n- 'Work': The most recently used Microsoft Entra signed-in profile will be used to open 'site'.\r\n- 'Personal': The most recently used MSA signed-in profile will be used to open 'site'.\r\n- 'No preference': The currently used profile will be used to open 'site'.\r\n- Wildcard email address: This takes the form of '*@contoso.com'. A profile whose username ends with the contents following the '*' will be used to open 'site'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"site\": \"work.com\",\r\n \"profile\": \"Work\"\r\n },\r\n {\r\n \"site\": \"personal.com\",\r\n \"profile\": \"Personal\"\r\n },\r\n {\r\n \"site\": \"nopreference.com\",\r\n \"profile\": \"No preference\"\r\n },\r\n {\r\n \"site\": \"contoso.com\",\r\n \"profile\": \"*@contoso.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"13a192b9b82c5e58":{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader","displayName":"Allow software WebGL fallback using SwiftShader","description":"Controls whether SwiftShader is used as a fallback for WebGL when hardware GPU acceleration is not available.\r\n\r\nWhen enabled, Microsoft Edge will use SwiftShader to support WebGL on systems without GPU acceleration, such as headless environments or virtual machines.\r\n\r\nStarting in Microsoft Edge version 139, SwiftShader has been deprecated due to security concerns. As a result, WebGL context creation will fail in scenarios where SwiftShader would have been used. Enabling this policy allows organizations to temporarily defer the deprecation and continue using SwiftShader.\r\n\r\nIf you disable or do not configure this policy, WebGL context creation may fail on systems without hardware acceleration. This could cause web content relying on WebGL to function incorrectly if it does not handle context creation failures.\r\n\r\nNote: This is a temporary policy and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader_1","displayName":"Enabled","description":null,"helpText":null}]},"131d54f8cd3318b6":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_serialaskforurlsdesc","displayName":"Allow the Serial API on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"139a8245097722c2":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes","displayName":"New tab page experience (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_1","displayName":"Disable daily background image type","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_2","displayName":"Disable custom background image type","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_3","displayName":"Disable all background image types","description":null,"helpText":null}]},"1341f972ca8dbf27":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts","description":"List of URL patterns. Private network requests initiated from insecure websites served by matching origins are allowed.\r\n\r\nIf this policy is not set, this policy behaves as if set to the empty list.\r\n\r\nFor origins not covered by the patterns specified here, the global default value will be used either from the 'InsecurePrivateNetworkRequestsAllowed' (Specifies whether to allow insecure websites to make requests to more-private network endpoints) policy, if it is set, or the user's personal configuration otherwise.\r\n\r\nNote that this policy only affects insecure origins, so secure origins (e.g. https://example.com) included in this list will be ignored.\r\n\r\nFor detailed information on valid URL patterns, please see https://docs.microsoft.com/en-us/DeployEdge/edge-learnmmore-url-list-filter%20format.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"43057320-7058-46d5-86f9-a56c80bbf8b9","categoryName":"Private Network Request Settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"13658fef37c26092":{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin","displayName":"Specify the system hibernate timeout (plugged in)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate.\n\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate.\n\nIf you disable or do not configure this policy setting, users control this setting.\n\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-hibernatetimeoutpluggedin"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},"13fb32a9cd54cb39":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_forcedenytheseapps","displayName":"Let Apps Access Trusted Devices Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"13ed7b1473f93d66":{"id":"device_vendor_msft_policy_config_security_preventautomaticdeviceencryptionforazureadjoineddevices","displayName":"Prevent Automatic Device Encryption For Azure AD Joined Devices","description":"Specifies whether to allow automatic device encryption during OOBE when the device is Azure AD joined.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#preventautomaticdeviceencryptionforazureadjoineddevices"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_preventautomaticdeviceencryptionforazureadjoineddevices_0","displayName":"Encryption enabled.","description":"Encryption enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_security_preventautomaticdeviceencryptionforazureadjoineddevices_1","displayName":"Encryption disabled.","description":"Encryption disabled.","helpText":null}]},"13846d24a9fd50e3":{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication","displayName":"Recovery Environment Authentication","description":"This policy controls the requirement of Admin Authentication in RecoveryEnvironment.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#recoveryenvironmentauthentication"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication_0","displayName":"current) behavior","description":"current) behavior","helpText":null},{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication_1","displayName":"RequireAuthentication: Admin Authentication is always required for components in RecoveryEnvironment","description":"RequireAuthentication: Admin Authentication is always required for components in RecoveryEnvironment","helpText":null},{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication_2","displayName":"NoRequireAuthentication: Admin Authentication is not required for components in RecoveryEnvironment","description":"NoRequireAuthentication: Admin Authentication is not required for components in RecoveryEnvironment","helpText":null}]},"13280c74b0962fff":{"id":"device_vendor_msft_policy_config_start_hidecategoryview","displayName":"Hide Category View","description":"This policy setting allows you to hide the category view in the Start Menu. If you enable this policy setting, the Start Menu will no longer show the category view as an option and will default to grid view.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidecategoryview"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidecategoryview_0","displayName":"Category view shown.","description":"Category view shown.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidecategoryview_1","displayName":"Category view hidden.","description":"Category view hidden.","helpText":null}]},"134bec3c24bb790b":{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_v2","displayName":"Schedule Imminent Restart Warning","description":"Allows the IT Admin to specify the period for auto-restart imminent warning notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduleimminentrestartwarning"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_15","displayName":"15 Minutes","description":"15 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_30","displayName":"30 Minutes","description":"30 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_60","displayName":"60 Minutes","description":"60 Minutes","helpText":null}]},"138da0555507aa3b":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_signaturesource","displayName":"Signature source","description":"","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_signaturesource_0","displayName":"Use a certificate file in reusable settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_signaturesource_1","displayName":"Upload a certificate file","description":null,"helpText":null}]},"13611de0fd65aa2a":{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_1","displayName":"Do not allow color changes (User)","description":"This policy setting controls the ability to change the color of window frames. \r\n\r\nIf you enable this policy setting, you prevent users from changing the default window frame color. \r\n\r\nIf you disable or do not configure this policy setting, you allow users to change the default window frame color. \r\n\r\nNote: This policy setting can be used in conjunction with the \"Specify a default color for window frames\" policy setting, to enforce a specific color for window frames that cannot be changed by users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdisallowcolorizationcolorchanges-1"],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":[{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_1_1","displayName":"Enabled","description":null,"helpText":null}]},"13b9fb1fb6cbb332":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_lbl_customgoofflineactionslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"13039909b0d4cb5b":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_confirmfiledelete","displayName":"Display confirmation dialog when deleting files (User)","description":"Allows you to have File Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin.\r\n\r\nIf you enable this setting, a confirmation dialog is displayed when a file is deleted or moved to the Recycle Bin by the user.\r\n\r\nIf you disable or do not configure this setting, the default behavior of not displaying a confirmation dialog occurs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-confirmfiledelete"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_confirmfiledelete_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_confirmfiledelete_1","displayName":"Enabled","description":null,"helpText":null}]},"13a1c5ab64049392":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxyaddress","displayName":"Proxy address (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"13654fa61ce50113":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"13c8df1c2fcfeeeb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode","displayName":"Print PostScript Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode_1","displayName":"Type42","description":null,"helpText":null}]},"13d0f1771ac80878":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled","displayName":"Default legacy SameSite cookie behavior setting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"13249d27d42c35e1":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":null},"13d52d483c9d1289":{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightonsettings","displayName":"Allow Windows Spotlight On Settings (User)","description":"This policy allows IT admins to turn off Suggestions in Settings app. These suggestions from Microsoft may show after each OS clean install, upgrade or an on-going basis to help users discover apps/features on Windows or across devices, to make their experience productive. User setting is under Settings -> Privacy -> General -> Show me suggested content in Settings app. User Setting is changeable on a per user basis. If the Group policy is set to off, no suggestions will be shown to the user in Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowwindowsspotlightonsettings"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightonsettings_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightonsettings_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"13dd5695facf238b":{"id":"user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange","displayName":"Disable changing secondary home page settings (User)","description":"Secondary home pages are the default Web pages that Internet Explorer loads in separate tabs from the home page whenever the browser is run. This policy setting allows you to set default secondary home pages.\n\nIf you enable this policy setting, you can specify which default home pages should load as secondary home pages. The user cannot set custom default secondary home pages.\n\nIf you disable or do not configure this policy setting, the user can add secondary home pages.\n\nNote: If the “Disable Changing Home Page Settings” policy is enabled, the user cannot add secondary home pages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesecondaryhomepagechange"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_1","displayName":"Enabled","description":null,"helpText":null}]},"13b8b887ea89a42b":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100","displayName":"Enable MIME Sniffing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_3","displayName":"Disable","description":null,"helpText":null}]},"1391f698dc8edd16":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"13323259b5b9620b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting","displayName":"Configure cookies (User)","description":"Control whether websites can create cookies on the user's device. This policy is all or nothing - you can let all websites create cookies, or no websites create cookies. You can't use this policy to enable cookies from specific websites.\r\n\r\nSet the policy to 'SessionOnly' (4) to clear cookies when the session closes. If Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about configuring what happens when Microsoft Edge runs in background mode.\r\n\r\nIf you don't configure this policy, the default 'AllowCookies' (1) is used, and users can change this setting in Microsoft Edge Settings. (If you don't want users to be able to change this setting, set the policy.)\r\n\r\n* 1 = Let all sites create cookies\r\n\r\n* 2 = Don't let any site create cookies\r\n\r\n* 4 = Keep cookies for the duration of the session","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"137381b59c3fdc5d":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled","displayName":"Allow the audio sandbox to run (User)","description":"This policy controls the audio process sandbox.\r\n\r\nIf you enable this policy, the audio process will run sandboxed.\r\n\r\nIf you disable this policy, the audio process will run unsandboxed and the WebRTC audio-processing module will run in the renderer process.\r\nThis leaves users open to security risks related to running the audio subsystem unsandboxed.\r\n\r\nIf you don't configure this policy, the default configuration for the audio sandbox will be used, which might differ based on the platform.\r\n\r\nThis policy is intended to give enterprises flexibility to disable the audio sandbox if they use security software setups that interfere with the sandbox.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"135bc089bb542d05":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled","displayName":"Enable using roaming copies for Microsoft Edge profile data (User)","description":"Enable this policy to use roaming profiles on Windows. The settings stored in Microsoft Edge profiles (favorites and preferences) are also saved to a file stored in the Roaming user profile folder (or the location specified by the administrator through the 'RoamingProfileLocation' (Set the roaming profile directory) policy).\r\n\r\nIf you disable this policy or don't configure it, only the regular local profiles are used.\r\n\r\nThe 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) policy disables all data synchronization, overriding policy.\r\n\r\nSee https://docs.microsoft.com/windows-server/storage/folder-redirection/deploy-roaming-user-profiles for more information on using roaming user profiles.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"13c6dedb8ee19522":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_autoplayallowlistdesc","displayName":"Allow media autoplay on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"13fd73e258755586":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaultsizelimit_l_webservicedefaultsizelimitdecimal","displayName":"Web service default size limit (KB) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":null},"136151604d6ede2b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacework2","displayName":"Replace AD - Work2 (User)","description":"This policy setting allows you to customize the 3rd value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"work phone 2\" of line 3.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 3 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacework2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacework2_1","displayName":"Enabled","description":null,"helpText":null}]},"138be2b89a9d52c8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_changeordeletelinktoproofingtoolsdownloadsite","displayName":"Change or delete link to the proofing tools download site (User)","description":"This policy setting affects the proofing tools link under the Editing language section.\r\n\r\nIf you enable this policy setting you, you may enter the URL to another location where proofing tools may be downloaded.\r\n\r\nIf you disable this policy setting the URL will be removed.\r\n\r\nIf you do not configure this policy setting, the URL will remain available and point to the proofing tools site on Office.com.","helpText":"","infoUrls":[],"categoryId":"0f6020d9-278b-4284-894a-bc4a70c8cf32","categoryName":"Display Language","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_changeordeletelinktoproofingtoolsdownloadsite_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_changeordeletelinktoproofingtoolsdownloadsite_1","displayName":"Enabled","description":null,"helpText":null}]},"136275190698d6f5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicalgeria","displayName":"Arabic (Algeria) (User)","description":"Enables the editing language Arabic (Algeria)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicalgeria_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicalgeria_1","displayName":"Enabled","description":null,"helpText":null}]},"1349c743ae3d2bf3":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_configurecngcipherchainingmode","displayName":"Configure CNG cipher chaining mode (User)","description":"This policy setting allows you to configure the cipher chaining mode used.\r\n\r\nIf you enable this policy setting, the cipher chaining mode specified will be applied.\r\n\r\nIf you disable or do not configure this policy setting, Cipher Block Chaining (CBC) will be the default CNG cipher chaining mode used.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"135c9e9ac28b8a44":{"id":"user_vendor_msft_policy_config_outlk16v16~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationusersettingpolicy","displayName":"Manage user setting for new Outlook automatic migration (User)","description":"\r\nThis policy allows you to manage the user setting for enabling or disabling automatic migration to the new Outlook app. Automatic migration could be admin-driven (enabled through 'Admin-Controlled migration to New Outlook' policy), or Microsoft-driven.\r\n\r\nWhen applied, this policy controls whether the user can be switched to the new Outlook app automatically or retains control over the setting.\r\n\r\nIf you set this policy to 1 (Set to 1), the user setting controlling automatic migration is enabled. Automatic migration to the new Outlook app is allowed, and the user cannot change this setting.\r\n\r\nIf you set this policy to 2 (Set to 2), the user setting controlling automatic migration is disabled. Automatic migration to the new Outlook app is not allowed, and the user cannot change this setting.\r\n\r\nIf you set this policy to 0 (Set to 0) or don't configure this policy (default), the user setting for automatic migration is not controlled by the policy, allowing the user to manage it themselves. This user setting for automatic migration is enabled by default.\r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v16~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationusersettingpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v16~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationusersettingpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"137edb0d915bf18b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions_l_publishatthisurl","displayName":"Publish at this URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":null},"135b25e28d50cc2a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_additionalcontactsindex","displayName":"Additional Contacts Index: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_additionalcontactsindex_2","displayName":"Arabic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_additionalcontactsindex_7","displayName":"Cyrillic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_additionalcontactsindex_15","displayName":"Greek","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_additionalcontactsindex_16","displayName":"Hebrew","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_additionalcontactsindex_28","displayName":"Thai","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_additionalcontactsindex_30","displayName":"Vietnamese","description":null,"helpText":null}]},"1396efe0c959fd12":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooktodaysettings_l_outlooktodayavailability","displayName":"Outlook Today availability (User)","description":"Checked: Displays the customizable Outlook Today page. | Unchecked: Displays a standard folder view in place of Outlook Today.","helpText":"","infoUrls":[],"categoryId":"75ad885f-6118-4508-a2fd-bb26be931c3f","categoryName":"Outlook Today Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooktodaysettings_l_outlooktodayavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooktodaysettings_l_outlooktodayavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"13453fe262d73337":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2_l_oomaddressbook_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2_l_oomaddressbook_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2_l_oomaddressbook_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2_l_oomaddressbook_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2_l_oomaddressbook_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"13aa0eed01bc34d5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookalertinterval","displayName":"Specify alert interval for web extensions (User)","description":"This policy setting allows you to specify the alert interval Outlook uses before disabling a web extension during initialization. The alert interval controls how often Office checks on memory and CPU usage for a running web extension. \r\n\r\nIf you enable this policy setting, you can specify the alert interval for web extensions. If the web extension requires more than the specified memory alert threshold when the memory or CPU check occurs, Outlook disables the web extension. \r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the default alert interval of 5 seconds. This alert interval overrides the WEF alert interval. The maximum alert interval is 600 seconds, and the minimum alert interval is 5 seconds.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookalertinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookalertinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"13652df4eff9246a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_personaltemplatespath","displayName":"Personal templates path for Project (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"130ad76113c3f096":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15_l_pathcolon64","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"135053741e819997":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_ignorewhitespacecharacters","displayName":"Ignore whitespace characters (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_ignorewhitespacecharacters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_ignorewhitespacecharacters_1","displayName":"Enabled","description":null,"helpText":null}]},"134270cca73ebe91":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments","displayName":"Word 2003 and plain XML documents (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"13ff3ab555f1b150":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_pathcolon72","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/14.json b/public/intune-definitions/14.json new file mode 100644 index 000000000000..9dc146032765 --- /dev/null +++ b/public/intune-definitions/14.json @@ -0,0 +1 @@ +{"14a98e641dbda213":{"id":"com.apple.applicationaccess_allowcontentcaching","displayName":"Allow Content Caching","description":"If false, disables content caching. As of 10.13.4 this is included in the content caching payload. Available in macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcontentcaching_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcontentcaching_true","displayName":"True","description":null,"helpText":null}]},"140f76d5544b14b5":{"id":"com.apple.applicationaccess_blockedappbundleids","displayName":"Blocked App Bundle IDs","description":"If present, prevents bundle IDs listed in the array from being shown or launchable. Include the value com.apple.webapp to restrict all webclips. Requires a supervised device. Available in iOS 9.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"14e266cf14df72ae":{"id":"com.apple.extensiblesso_type","displayName":"Type","description":"The type of SSO.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_type_0","displayName":"Credential","description":null,"helpText":null},{"id":"com.apple.extensiblesso_type_1","displayName":"Redirect","description":null,"helpText":null}]},"14cab62c7f1d4c6f":{"id":"com.apple.finder_showexternalharddrivesondesktop","displayName":"Show External Hard Drives On Desktop","description":"If false, mounted servers can not appear on the desktop.","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":[{"id":"com.apple.finder_showexternalharddrivesondesktop_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.finder_showexternalharddrivesondesktop_true","displayName":"True","description":null,"helpText":null}]},"141c1e3cf9c9ae62":{"id":"com.apple.managedclient.preferences_enablemediarouter","displayName":"Enable Google Cast","description":"Enable this policy to enable Google Cast. Users will be able to launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\n\nDisable this policy to disable Google Cast.\n\nBy default, Google Cast is enabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enablemediarouter"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enablemediarouter_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablemediarouter_true","displayName":"Enabled","description":null,"helpText":null}]},"148d7464e4cdc2af":{"id":"com.apple.managedclient.preferences_groupids","displayName":"Group identifier","description":"","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#group-identifiers"],"categoryId":"b77a3a7b-6fab-4240-b5c3-852aa78781d5","categoryName":"Endpoint Detection and Response (EDR) preferences","options":null},"149eb92ed002ec66":{"id":"com.apple.managedclient.preferences_proxybypasslist","displayName":"Configure proxy bypass rules","description":"Defines a list of hosts for which Microsoft Edge bypasses any proxy.\n\nThis policy is applied only if you have selected 'Use fixed proxy servers' in the \"ProxyMode\" policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\n\nIf you enable this policy, you can create a list of hosts for which Microsoft Edge doesn't use a proxy.\n\nIf you don't configure this policy, no list of hosts is created for which Microsoft Edge bypasses a proxy. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\n\nFor more detailed examples go to https://go.microsoft.com/fwlink/?linkid=2094936.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#proxybypasslist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"14487c1e82e1aa3d":{"id":"com.apple.softwareupdate_criticalupdateinstall","displayName":"Critical Update Install (Deprecated)","description":"If false, disables the automatic installation of critical updates and prevents the user from changing the \"Install system data files and security updates\" option.","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_criticalupdateinstall_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_criticalupdateinstall_true","displayName":"True","description":null,"helpText":null}]},"14d7f7a291c4be00":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"143ce4c85dac6c9f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user","description":"Allows you to set a list of protocols, and for each protocol an associated list of allowed origin patterns, that can launch an external application without prompting the user. The trailing separator shouldn't be included when listing the protocol and the protocol should be all lower case. For example, list \"skype\" instead of \"skype:\", \"skype://\" or \"Skype\".\n\nIf you configure this policy, a protocol is only permitted to launch an external application without prompting by policy if:\n\n- the protocol is listed\n\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\n\nIf either condition is false, the external protocol launch prompt isn't omitted, by policy.\n\nIf you don't configure this policy, no protocols can launch without a prompt. Users can opt out of prompts on a per-protocol/per-site basis unless the \"ExternalProtocolDialogShowAlwaysOpenCheckbox\" policy is set to Disabled. This policy has no impact on per-protocol/per-site prompt exemptions set by users.\n\nThe origin-matching patterns use a similar format to those for the \"URLBlocklist\" policy, which are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\n\nHowever, origin-matching patterns for this policy can't contain \"/path\" or \"@query\" elements. Any pattern that contains a \"/path\" or \"@query\" element is ignored.\n\nThis policy doesn't work as expected with file://* wildcards.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"14a44233459f4ad2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.onprintenterpriseconnector","displayName":"Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a page or file is printed from Microsoft Edge.\n\nConnector Fields\n\n1. url_list,\ntags,\nenable,\ndisable\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\nAnalysis is triggered if at least one tag is included in the request.\n\n2. service_provider\nIdentifies the analysis service provider the configuration applies to.\n\n3. block_until_verdict\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\nAny other integer value allows the page to access the data immediately.\n\n4. default_action\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\nAny other value permits the page to access the data.\n\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"1493c2a74d64adc2":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_3","displayName":"Control Event Log behavior when the log file reaches its maximum size","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size.\r\n\r\nIf you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost.\r\n\r\nIf you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events.\r\n\r\nNote: Old events may or may not be retained according to the \"Backup log automatically when full\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-retention-3"],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_3_1","displayName":"Enabled","description":null,"helpText":null}]},"14a340442511ac69":{"id":"device_vendor_msft_policy_config_admx_kerberos_hosttorealm_hosttorealm_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"1407e887ad110ecf":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_criticalfailuretimeout_reporting_criticalfailuretimeout","displayName":"Configure time out for detections in critically failed state","description":null,"helpText":"","infoUrls":[],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":null},"14cb80825f4d34e3":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday","displayName":"Specify the day of the week to check for security intelligence updates","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_8","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_0","displayName":"Every Day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_1","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_2","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_3","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_4","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_5","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_6","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_signatureupdate_scheduleday_7","displayName":"Saturday","description":null,"helpText":null}]},"14bfffa6d53313ed":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_synconcostednetwork","displayName":"Enable file synchronization on costed networks","description":"This policy setting determines whether offline files are synchronized in the background when it could result in extra charges on cell phone or broadband plans.\r\n\r\nIf you enable this setting, synchronization can occur in the background when the user's network is roaming, near, or over the plan's data limit. This may result in extra charges on cell phone or broadband plans.\r\n\r\nIf this setting is disabled or not configured, synchronization will not run in the background on network folders when the user's network is roaming, near, or over the plan's data limit. The network folder must also be in \"slow-link\" mode, as specified by the \"Configure slow-link mode\" policy to avoid network usage.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-synconcostednetwork"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_synconcostednetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_synconcostednetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"14303627b64a022a":{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_2","displayName":"Configure Scenario Execution Level","description":"Determines the execution level for Windows System Responsiveness Diagnostics.\r\n\r\nIf you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows System Responsiveness problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows System Responsiveness problems and indicate to the user that assisted resolution is available.\r\n\r\nIf you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve any Windows System Responsiveness problems that are handled by the DPS.\r\n\r\nIf you do not configure this policy setting, the DPS will enable Windows System Responsiveness for resolution by default.\r\n\r\nThis policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured.\r\n\r\nNo system restart or service restart is required for this policy to take effect: changes take effect immediately.\r\n\r\nThis policy setting will only take effect when the Diagnostic Policy Service is in the running state. When the service is stopped or disabled, diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-performancediagnostics#admx-performancediagnostics-wdiscenarioexecutionpolicy-2"],"categoryId":"32b20540-8fe9-4730-a4b0-ff41f6b13a97","categoryName":"Windows System Responsiveness Performance Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_2_1","displayName":"Enabled","description":null,"helpText":null}]},"14f4e6fb308a3d7c":{"id":"device_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_2","displayName":"Prevent restoring previous versions from backups","description":"This policy setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file, in which the previous version is stored on a backup.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a backup.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a backup. If the Restore button is clicked, Windows attempts to restore the file from the backup media.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a local file and stored on the backup.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablebackuprestore-2"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"device_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_2_1","displayName":"Enabled","description":null,"helpText":null}]},"149d2ee830bc31c4":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftofficehub","displayName":"Microsoft 365 Copilot","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftofficehub_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftofficehub_1","displayName":"True","description":null,"helpText":null}]},"141392e2424f64b4":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_refresh_interval_prompt","displayName":"Global Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"144f910683a7727a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced","displayName":"Enforce browser guest mode","description":"Setting the policy to Enabled means Google Chrome enforces guest sessions and prevents profile sign-ins. Guest sign-ins are Google Chrome profiles where windows are in Incognito mode.\r\n\r\nSetting the policy to Disabled, leaving it unset, or disabling browser Guest mode (through BrowserGuestModeEnabled) allows the use of new and existing profiles.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced_1","displayName":"Enabled","description":null,"helpText":null}]},"14e45de86d8d9e4a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations","displayName":"Determine the availability of variations","description":"Configuring this policy allows to specify which variations are allowed to be applied in Google Chrome.\r\n\r\nVariations provide a means for offering modifications to Google Chrome without shipping a new version of the browser by selectively enabling or disabling already existing features. See https://support.google.com/chrome/a?p=Manage_the_Chrome_variations_framework for more information.\r\n\r\nSetting the VariationsEnabled (value 0), or leaving the policy not set allows all variations to be applied to the browser.\r\n\r\nSetting the CriticalFixesOnly (value 1), allows only variations considered critical security or stability fixes to be applied to Google Chrome.\r\n\r\nSetting the VariationsDisabled (value 2), prevent all variations from being applied to the browser. Please note that this mode can potentially prevent the Google Chrome developers from providing critical security fixes in a timely manner and is thus not recommended.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_1","displayName":"Enabled","description":null,"helpText":null}]},"145a26306d0c1180":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes","displayName":"Maximum session duration allowed for remote access connections","description":"If this policy is set, remote access connections will automatically disconnect after the number of minutes defined in the policy have elapsed. This does not prevent the client from reconnecting after the maximum session duration has been reached. Setting the policy to a value that is not within the min/max range may prevent the host from starting. This policy does not affect remote support scenarios.\r\n\r\nThis policy has no effect if it is not set. In this case, remote access connections will have no maximum duration on this machine.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_1","displayName":"Enabled","description":null,"helpText":null}]},"14ff4fdc9be7e40c":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"14793e25240bc97c":{"id":"device_vendor_msft_policy_config_defender_signatureupdateinterval","displayName":"Signature Update Interval","description":"Specifies the interval (in hours) that will be used to check for signatures, so instead of using the ScheduleDay and ScheduleTime the check for new signatures will be set according to the interval. A value of 0 means no check for new signatures, a value of 1 means to check every hour, a value of 2 means to check every two hours, and so on, up to a value of 24, which means to check every day. The default value is 8. OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/SignatureUpdateInterval","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#signatureupdateinterval"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"146d59172c38b7b1":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dopercentagemaxforegroundbandwidth","displayName":"DO Percentage Max Foreground Bandwidth","description":"Specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dopercentagemaxforegroundbandwidth"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"140425fa820302f2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_odfcvhdnamematch","displayName":"VHD Name Match (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":null},"1459e28bee1f5e7e":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon","displayName":"Shutdown Allow System To Be Shut Down Without Having To Log On","description":"Shutdown: Allow system to be shut down without having to log on This security setting determines whether a computer can be shut down without having to log on to Windows. When this policy is enabled, the Shut Down command is available on the Windows logon screen. When this policy is disabled, the option to shut down the computer does not appear on the Windows logon screen. In this case, users must be able to log on to the computer successfully and have the Shut down the system user right before they can perform a system shutdown. Default on workstations: Enabled. Default on servers: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#shutdown_allowsystemtobeshutdownwithouthavingtologon"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon_1","displayName":"Enabled (Allow system to be shut down without having to log on)","description":"Enabled (Allow system to be shut down without having to log on)","helpText":null}]},"14f0172757ec29f0":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings","displayName":"Configure the sticky print preview settings","description":"Configuring this policy sets the print preview settings as the most recent choice in Print Preview instead of the default print preview settings.\r\n\r\nEach item of this policy expects a boolean:\r\n\r\nLayout specifies if the webpage layout should be kept sticky or not in print preview settings. If we set this to True the webpage layout uses the recent choice otherwise it will set to default value.\r\n\r\nSize specifies if the page size should be kept sticky or not in print preview settings. If we set this to True the page size uses the recent choice otherwise it will set to default value.\r\n\r\nScale Type specifies if the scaling percentage and scale type should be kept sticky or not in print preview settings. If we set this to True the scale percentage and scale type both uses the recent choice oherwise it will set to default value.\r\n\r\nMargins specifies if the page margin should be kept sticky or not in print preview settings. If we set this to True the page margins uses the recent choice otherwise it will set to default value.\r\n\r\nIf you enable this policy, the selected values will use the most recent choice in Print Preview.\r\n\r\nIf you disable or don't configure this policy, print preview settings will not be impacted.\r\n\r\nExample value:\r\n\r\n{\r\n \"layout\": false,\r\n \"margins\": true,\r\n \"scaleType\": false,\r\n \"size\": true\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"layout\": false, \"margins\": true, \"scaleType\": false, \"size\": true}","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"141e8f1a0526bbf6":{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled","displayName":"Configure Edge scareware blocker to block sites detected as potential tech scams","description":"This policy controls whether Microsoft Edge blocks sites that are detected as potential tech scams.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block sites detected as potential tech scams.\r\n\r\nIf you disable this policy, Microsoft Edge will not block sites detected as potential tech scams.","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"14bab3a6ca0ac986":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_insecurecontentblockedforurlsdesc","displayName":"Block insecure content on specified sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"14cbbfe780376159":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled","displayName":"Enable stricter treatment for mixed content","description":"This policy controls the treatment for mixed content (HTTP content in HTTPS sites) in the browser.\r\n\r\nIf you set this policy to true or not set, audio and video mixed content will be automatically upgraded to HTTPS (that is, the URL will be rewritten as HTTPS, without a fallback if the resource isn’t available over HTTPS) and a 'Not Secure' warning will be shown in the URL bar for image mixed content.\r\n\r\nIf you set the policy to false, auto upgrades will be disabled for audio and video, and no warning will be shown for images.\r\n\r\nThis policy does not affect other types of mixed content other than audio, video, and images.\r\n\r\nThis policy will no longer take effect starting in Microsoft Edge 84.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"14ae59acc1cf0a2d":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"142cd30a476681d4":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting","displayName":"Control use of the Serial API (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting_2","displayName":"Do not allow any site to request access to serial ports via the Serial API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting_3","displayName":"Allow sites to ask for user permission to access a serial port","description":null,"helpText":null}]},"14e027c3a954bfd2":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold_lmdfiledeletethresholdbox","displayName":"Number of files: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"14058528020b7eed":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_userincontroloftheseapps","displayName":"Let Apps Access Microphone User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"1444520df4b87ee2":{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxremoteshells","displayName":"Specify maximum number of remote shells per user","description":"This policy setting configures the maximum number of concurrent shells any user can remotely open on the same system.\n\nAny number from 0 to 0x7FFFFFFF cand be set, where 0 means unlimited number of shells.\n\nIf you enable this policy setting, the user cannot open new remote shells if the count exceeds the specified limit.\n\nIf you disable or do not configure this policy setting, by default the limit is set to two remote shells per user.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifymaxremoteshells"],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxremoteshells_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxremoteshells_1","displayName":"Enabled","description":null,"helpText":null}]},"14de9ca625700e8a":{"id":"device_vendor_msft_policy_config_secureboot_enablesecurebootcertificateupdates","displayName":"Enable Secureboot Certificate Updates","description":"This policy enables the Secure Boot certificate update process. Setting this to Enabled causes the new Secure Boot certificates to be installed and installs the 2023 signed boot manager for all devices where the policy is applied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SecureBoot#enablesecurebootcertificateupdates"],"categoryId":"a3e48951-624d-4fee-b470-d17ce16e6b0c","categoryName":"Secure Boot","options":[{"id":"device_vendor_msft_policy_config_secureboot_enablesecurebootcertificateupdates_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_secureboot_enablesecurebootcertificateupdates_22852","displayName":"(Enabled) Initiates the deployment of new Secure Boot certificates and related updates","description":"(Enabled) Initiates the deployment of new Secure Boot certificates and related updates","helpText":null}]},"14a47a1b4bb9760b":{"id":"device_vendor_msft_policy_config_system_turnofffilehistory","displayName":"Turn Off File History","description":"This policy setting allows you to turn off File History. If you enable this policy setting, File History cannot be activated to create regular, automatic backups. If you disable or do not configure this policy setting, File History can be activated to create regular, automatic backups.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#turnofffilehistory"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_turnofffilehistory_0","displayName":"Allow file history.","description":"Allow file history.","helpText":null},{"id":"device_vendor_msft_policy_config_system_turnofffilehistory_1","displayName":"Turn off file history.","description":"Turn off file history.","helpText":null}]},"1432ae92e7ebfe60":{"id":"mathsettings_calculator_inputmodes_rpn","displayName":"RPN","description":"Configures whether RPN input is enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":[{"id":"mathsettings_calculator_inputmodes_rpn_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_inputmodes_rpn_true","displayName":"True","description":null,"helpText":null}]},"1411a97ebf00ba91":{"id":"softwareupdate_beta_programenrollment","displayName":"Program Enrollment (Unsupported)","description":"Specifies whether beta program enrollment can be controlled by the user in software update settings UI:\n* \"Allowed\" - the user can enroll in any applicable beta programs associated with their\n logged in Apple ID. If the `OfferPrograms` key is present, then the programs listed in\n that key are also presented to the user.\n* \"AlwaysOn\" - the beta programs specified by the organization are used, and the user\n is not be able to enroll in a beta program using their logged in Apple ID. The device\n is automatically enrolled into the beta program specified by the `RequireProgram` key if\n it is present. Otherwise, the programs listed in the `OfferPrograms` key are\n presented to the user to choose which to enroll with.\n* \"AlwaysOff\" - The device is not allowed to enroll in any beta programs. The device is\n removed from any beta programs, if already enrolled.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_beta_programenrollment_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_beta_programenrollment_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"softwareupdate_beta_programenrollment_2","displayName":"AlwaysOff","description":null,"helpText":null}]},"140c5f2bf5693e90":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_targetedagentid","displayName":"Targeted agent","description":"The MSIX package family name of the targeted agent.","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":null},"1494e09ebae28143":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":null},"1411c8f04c491259":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1","displayName":"Set rules for remote control of Remote Desktop Services user sessions (User)","description":"If you enable this policy setting, administrators can interact with a user's Remote Desktop Services session based on the option selected. Select the desired level of control and permission from the options list:\r\n\r\n1. No remote control allowed: Disallows an administrator to use remote control or view a remote user session.\r\n2. Full Control with user's permission: Allows the administrator to interact with the session, with the user's consent.\r\n3. Full Control without user's permission: Allows the administrator to interact with the session, without the user's consent.\r\n4. View Session with user's permission: Allows the administrator to watch the session of a remote user with the user's consent. \r\n5. View Session without user's permission: Allows the administrator to watch the session of a remote user without the user's consent.\r\n\r\nIf you disable this policy setting, administrators can interact with a user's Remote Desktop Services session, with the user's consent.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-remotecontrol-1"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_1","displayName":"Enabled","description":null,"helpText":null}]},"14ad2adeadd395de":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork","displayName":"Sync settings over metered connections (User)","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections.\r\nBy default, the UE-V Agent does not synchronize settings over a metered connection.\r\nWith this setting enabled, the UE-V Agent synchronizes settings over a metered connection.\r\nWith this setting disabled, the UE-V Agent does not synchronize settings over a metered connection.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncovermeterednetwork"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"141dc98a6af0f502":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical","displayName":"Turn off numerical sorting in File Explorer (User)","description":"\r\nThis policy setting allows you to have file names sorted literally (as in Windows 2000 and earlier) rather than in numerical order.\r\nIf you enable this policy setting, File Explorer will sort file names by each digit in a file name (for example, 111 < 22 < 3).\r\nIf you disable or do not configure this policy setting, File Explorer will sort file names by increasing number value (for example, 3 < 22 < 111).\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nostrcmplogical"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical_1","displayName":"Enabled","description":null,"helpText":null}]},"140c7d95ed839d78":{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell_customshellinst","displayName":"Interface file name (for example, Explorer.exe) (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"143899bced40f159":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir","displayName":"Set disk cache directory (User)","description":"Setting the policy has Google Chrome use the directory you provide for storing cached files on the disk—whether or not users specify the --disk-cache-dir flag.\r\n\r\nIf not set, Google Chrome uses the default cache directory, but users can change that setting with the --disk-cache-dir command line flag.\r\n\r\nGoogle Chrome manages the contents of a volume's root directory. So to avoid data loss or other errors, do not set this policy to the root directory or any directory used for other purposes. See the variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: ${user_home}/Chrome_cache","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_1","displayName":"Enabled","description":null,"helpText":null}]},"1493749673e1f0c5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled","displayName":"Disable saving browser history (User)","description":"Setting the policy to Enabled means browsing history is not saved, tab syncing is off and users can't change this setting.\r\n\r\nSetting the policy to Disabled or leaving it unset saves browsing history.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"141724c77d745bad":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist","displayName":"Allow access to a list of URLs (User)","description":"Setting the policy provides access to the listed URLs, as exceptions to URLBlocklist. See that policy's description for the format of entries of this list. For example, setting URLBlocklist to * will block all requests, and you can use this policy to allow access to a limited list of URLs. Use it to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths, using the format specified at ( https://www.chromium.org/administrators/url-blocklist-filter-format ). The most specific filter determines if a URL is blocked or allowed. The URLAllowlist policy takes precedence over URLBlocklist. This policy is limited to 1,000 entries.\r\n\r\nThis policy also allows enabling the automatic invocation by the browser of external application registered as protocol handlers for the listed protocols like \"tel:\" or \"ssh:\".\r\n\r\nLeaving the policy unset allows no exceptions to URLBlocklist.\r\n\r\nFrom Google Chrome version 92, this policy is also supported in the headless mode.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"142ddd6297f616e4":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension","displayName":"Load the CryptoToken component extension at startup (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension_1","displayName":"Enabled","description":null,"helpText":null}]},"147e46988e113b29":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay_l_secondsofidletimebeforeautorecoverstarts","displayName":"Seconds of idle time before AutoRecover starts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":null},"149a0fc82f923660":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm_l_setcngcipheralgorithmid","displayName":"CNG cipher algorithm: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":null},"1445560bf58b786f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_descriptioncolon27","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"1450db32347489d3":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_restoreonstartupurlsdesc","displayName":"Sites to open when the browser starts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"14d134dc89fce48a":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled","displayName":"Get user confirmation before closing a browser window with multiple tabs (User)","description":"This policy lets you configure whether users see a confirmation dialog before closing a browser window with multiple tabs. This dialog asks users to confirm that the browser window can be closed.\r\n\r\nIf you enable this policy, users will be presented with a confirmation dialog when closing a browser window with multiple tabs.\r\n\r\nIf you disable or don't configure this policy, a browser window with multiple tabs will close immediately without user confirmation.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"143d5bf52ac6bd86":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings","displayName":"Configure the sticky print preview settings (User)","description":"Configuring this policy sets the print preview settings as the most recent choice in Print Preview instead of the default print preview settings.\r\n\r\nEach item of this policy expects a boolean:\r\n\r\nLayout specifies if the webpage layout should be kept sticky or not in print preview settings. If we set this to True the webpage layout uses the recent choice otherwise it will set to default value.\r\n\r\nSize specifies if the page size should be kept sticky or not in print preview settings. If we set this to True the page size uses the recent choice otherwise it will set to default value.\r\n\r\nScale Type specifies if the scaling percentage and scale type should be kept sticky or not in print preview settings. If we set this to True the scale percentage and scale type both uses the recent choice oherwise it will set to default value.\r\n\r\nMargins specifies if the page margin should be kept sticky or not in print preview settings. If we set this to True the page margins uses the recent choice otherwise it will set to default value.\r\n\r\nIf you enable this policy, the selected values will use the most recent choice in Print Preview.\r\n\r\nIf you disable or don't configure this policy, print preview settings will not be impacted.\r\n\r\nExample value:\r\n\r\n{\r\n \"layout\": false,\r\n \"margins\": true,\r\n \"scaleType\": false,\r\n \"size\": true\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"layout\": false, \"margins\": true, \"scaleType\": false, \"size\": true}","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"14e78dc55fe2741d":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled","displayName":"Allow ServiceWorker to control srcdoc iframes (User)","description":"https://github.com/w3c/ServiceWorker/issues/765 asks srcdoc iframe with the \"allow-same-origin\" sandbox attribute to be under ServiceWorker control.\r\n\r\nBy default (if left unset) or when set to Enabled, Microsoft Edge makes srcdoc iframes with \"allow-same-origin\" sandbox attributes to be under ServiceWorker control.\r\n\r\nSetting the policy to Disabled prevents ServiceWorker control over srcdoc iframes.\r\n\r\nThis policy is temporary and planned for deprecation in 2026.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"14a1f75639dbd8e2":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended","displayName":"Force Microsoft Defender SmartScreen checks on downloads from trusted sources (User)","description":"This policy setting lets you configure whether Microsoft Defender SmartScreen checks download reputation from a trusted source.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen checks the download’s reputation regardless of source.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen doesn’t check the download’s reputation when downloading from a trusted source.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"14e4b5d50cc9d93a":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin","displayName":"Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin_1","displayName":"Sign in and make domain account non-removable","description":null,"helpText":null}]},"149f46127ff6b468":{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs (User)","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure sleeping tabs) is enabled or is not configured and the user has enabled the sleeping tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 30Seconds (30) = 30 seconds of inactivity\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"1463e5672f9fc667":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins","displayName":"Allow Window and Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can use Window and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"14028637197a35d9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastserviceserverurl8","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"14b0e16fd5f21ab1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome2","displayName":"Replace Label - Home2 (User)","description":"This policy setting allows you to change or remove the 7th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome2_1","displayName":"Enabled","description":null,"helpText":null}]},"14e9c84498c51aa9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework2","displayName":"Replace MAPI - Work2 (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"work phone 2\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"work phone 2\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework2_1","displayName":"Enabled","description":null,"helpText":null}]},"1478ce7cf4dafe1c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishparaguay","displayName":"Spanish (Paraguay) (User)","description":"Enables the editing language Spanish (Paraguay)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishparaguay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishparaguay_1","displayName":"Enabled","description":null,"helpText":null}]},"1447d2f20a05ef41":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser_l_empty418","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5b1be2c5-9939-4b2e-b29b-b22069455c90","categoryName":"Microsoft Save As PDF and XPS add-ins","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser_l_empty418_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser_l_empty418_1","displayName":"Disable XPS","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser_l_empty418_2","displayName":"Disable PDF","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser_l_empty418_3","displayName":"Disable XPS and PDF","description":null,"helpText":null}]},"14318207070ebbee":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences_l_connectedofficeexperiencesdropid","displayName":"[Deprecated] Connected experiences in Office (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences_l_connectedofficeexperiencesdropid_1","displayName":"Connected","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences_l_connectedofficeexperiencesdropid_2","displayName":"Disconnected","description":null,"helpText":null}]},"1442f83c0da94f51":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_usegermanpostreformruleswhenrunningspellcheck","displayName":"German: Use post-reform rules (User)","description":"Allows users to choose a particular spellchecking style; Pre-reform or post reform.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_usegermanpostreformruleswhenrunningspellcheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_usegermanpostreformruleswhenrunningspellcheck_1","displayName":"Enabled","description":null,"helpText":null}]},"1480b7ce6d26b3a0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_disablerememberpasswordcheckboxforinternetemailsettingsdialo","displayName":"Disable 'Remember password' for Internet e-mail accounts (User)","description":"Use this option to hide your user's ability to cache passwords locally in the computer's registry. When configured, this policy will hide the 'Remember Password' checkbox and not allow users to have Outlook remember their password. \r\n\r\nNote that POP3, IMAP, and HTTP e-mail accounts are all considered Internet e-mail accounts in Outlook. E-mail account options are listed on the Server Type dialog box when users choose 'New' under Tools | Account Settings.","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_disablerememberpasswordcheckboxforinternetemailsettingsdialo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_disablerememberpasswordcheckboxforinternetemailsettingsdialo_1","displayName":"Enabled","description":null,"helpText":null}]},"149b7ce2b58e5958":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_promotingerrorsaswarnings","displayName":"Promote Level 2 errors as errors, not warnings (User)","description":"This policy setting allows you to treat Level 2 errors as warnings instead of errors. Level 2 errors occur when the message signature appears to be valid, but there are other issues with the signature. \r\n\r\nIf you enable this policy setting, Level 2 errors will be treated as warnings.\r\n\r\nIf you disable or do not configure this policy setting, Level 2 errors will be treated as errors\r\n\r\nWhen you specify a value for PromoteErrorsAsWarnings, note that potential Level 2 error conditions include the following:\r\n\r\n- Unknown Signature Algorithm\r\n- No Signing Certification Found\r\n- Bad Attribute Sets\r\n- No Issuer Certificate found\r\n- No CRL Found\r\n- Out-of-date CRL\r\n- Root Trust Problem\r\n- Out-of-date CTL","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_promotingerrorsaswarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_promotingerrorsaswarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"140e353f6ae35468":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_l_legacyconvertersforpowerpointdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_l_legacyconvertersforpowerpointdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_l_legacyconvertersforpowerpointdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_l_legacyconvertersforpowerpointdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_l_legacyconvertersforpowerpointdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_l_legacyconvertersforpowerpointdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_l_legacyconvertersforpowerpointdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"14fbbfc158c4c870":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdayspermonth","displayName":"Days per month (User)","description":"Defines the number of days that you want Project to assign to a task when you enter a duration of a month.\r\n\r\nIf you enable this setting, month-long tasks will be assigned the number of days that you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdayspermonth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdayspermonth_1","displayName":"Enabled","description":null,"helpText":null}]},"140578679dc23e80":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjautomaticsaveprompt","displayName":"Prompt before saving (User)","description":"Specifies whether Project should prompt the user before saving their project as a result of the Auto Save function.\r\n\r\nIf you enable this setting, users will be prompted before their project is automatically saved.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dfd5d749-c68c-448f-ab3f-851c09f09df4","categoryName":"Auto Save Options","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjautomaticsaveprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjautomaticsaveprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"146ca38f99af38dc":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_setdefaulttextflowdirection_l_setdefaulttextflowdirectiondropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"77b0357b-412e-4a81-9469-e20a5f1345fd","categoryName":"Complex scripts","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_setdefaulttextflowdirection_l_setdefaulttextflowdirectiondropid_1","displayName":"Left-to-Right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_setdefaulttextflowdirection_l_setdefaulttextflowdirectiondropid_256","displayName":"Right-to-Left","description":null,"helpText":null}]},"14805e732c74e7ac":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_favoritesstencilname","displayName":"Favorites Stencil Name (User)","description":"Displays the name of the stencil created in the My Shapes folder that contains a user's favorite shapes.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_favoritesstencilname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_favoritesstencilname_1","displayName":"Enabled","description":null,"helpText":null}]},"148c81728e4db533":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_myshapes_l_myshapescolon","displayName":"My Shapes: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":null},"14f4416b7bf13f53":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_l_selectunits","displayName":"Select units: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_l_selectunits_0","displayName":"Inches","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_l_selectunits_2","displayName":"Centimeters","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_l_selectunits_4","displayName":"Millimeters","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_l_selectunits_1","displayName":"Points","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_l_selectunits_3","displayName":"Picas","description":null,"helpText":null}]},"141b0e76db699076":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_donotdisplayfileformatcompatiblitydialogforodt","displayName":"Do not display file format compatibility dialog box for OpenDocument text format (User)","description":"This policy setting allows you to configure the file format compatibility dialog box when saving a file as an OpenDocument text file in Word.\r\n \r\nIf you enable this policy setting, the file format compatibility dialog is not displayed whenever you save as an OpenDocument text file in Word.\r\n \r\nIf you disable or do not configure this policy setting, the file format compatibility dialog is displayed when you save as an OpenDocument text file in Word.","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_donotdisplayfileformatcompatiblitydialogforodt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_donotdisplayfileformatcompatiblitydialogforodt_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/15.json b/public/intune-definitions/15.json new file mode 100644 index 000000000000..cedf4b612bc5 --- /dev/null +++ b/public/intune-definitions/15.json @@ -0,0 +1 @@ +{"15932bd229919a97":{"id":"com.apple.managedclient.preferences_blocktruncatedcookies","displayName":"Block truncated cookies (Deprecated)","description":"This policy provides a temporary opt-out for changes to how Microsoft Edge handles cookies set via JavaScript that contain certain control characters (NULL, carriage return, and line feed).\nPreviously, the presence of any of these characters in a cookie string would cause it to be truncated but still set.\nNow, the presence of these characters will cause the whole cookie string to be ignored.\n\nIf you enable or don't configure this policy, the new behavior is enabled.\n\nIf you disable this policy, the old behavior is enabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#blocktruncatedcookies"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_blocktruncatedcookies_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_blocktruncatedcookies_true","displayName":"Enabled","description":null,"helpText":null}]},"150213d6604622d1":{"id":"com.apple.managedclient.preferences_extensioninstallsources","displayName":"Configure extension and user script install sources","description":"Define URLs that can install extensions and themes.\n\nBy default, users have to download a *.crx file for each extension or script they want to install, and then drag it onto the Microsoft Edge settings page. This policy lets specific URLs use install the extension or script for the user.\n\nEach item in this list is an extension-style match pattern (see https://go.microsoft.com/fwlink/?linkid=2095039). Users can easily install items from any URL that matches an item in this list. Both the location of the *.crx file and the page where the download is started from (in other words, the referrer) must be allowed by these patterns.\n\nThe \"ExtensionInstallBlocklist\" policy takes precedence over this policy. Any extensions that's on the block list won't be installed, even if it comes from a site on this list.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensioninstallsources"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"158708f209e91dc0":{"id":"com.apple.managedclient.preferences_showhistorythumbnails","displayName":"Show thumbnail images for browsing history","description":"This policy lets you configure whether the history thumbnail feature collects and saves images for the sites you visit. When enabled, this feature makes it easier to identify sites when you hover over your history results.\nIf you don't configure this policy, the thumbnail feature is turned on after a user visits the history hub twice in the past 7 days.\nIf you enable this policy, the history thumbnail collects and saves images for visited sites.\nIf you disable this policy, the history thumbnail doesn't collect and save images for visited sites.\nWhen the feature is disabled, existing images are deleted on a per user basis, and the feature no longer collects or saves images when a site is visited.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showhistorythumbnails"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showhistorythumbnails_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showhistorythumbnails_true","displayName":"Enabled","description":null,"helpText":null}]},"153129147d1fd002":{"id":"com.apple.managedclient.preferences_sslerroroverrideallowed","displayName":"Allow users to proceed from the HTTPS warning page","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\n\nIf you enable or don't configure (default) this policy, users can click through these warning pages.\n\nIf you disable this policy, users are blocked from clicking through any warning page.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sslerroroverrideallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sslerroroverrideallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sslerroroverrideallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"15700837fac03525":{"id":"com.apple.managedclient.preferences_userpreference_maxchecklistdisplaydurationmet","displayName":"Hide the 'Get started with Outlook' control in the task pane","description":"Suppress the task pane control that advertises access to toolbar customization, notification preferences, theme, and adding secondary accounts.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_userpreference_maxchecklistdisplaydurationmet_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userpreference_maxchecklistdisplaydurationmet_true","displayName":"True","description":null,"helpText":null}]},"15a43e42057a74c2":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_system sleep timer","displayName":"System Sleep Timer","description":"System sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"15666dd1c08f639c":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on lan","displayName":"Wake on LAN","description":"If true, enables \"Wake for network access.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on lan_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on lan_1","displayName":"True","description":null,"helpText":null}]},"15b25d5b3be791bd":{"id":"com.apple.mcx.filevault2_com.apple.mcx.filevault2","displayName":"Top Level Setting Group Collection","description":"com.apple.MCX.FileVault2","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":null},"15ac19afaf78276b":{"id":"com.apple.softwareupdate_configdatainstall","displayName":"Config Data Install (Deprecated)","description":"If false, restricts the automatic installation of configuration data.","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_configdatainstall_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_configdatainstall_true","displayName":"True","description":null,"helpText":null}]},"155d00f703c36a14":{"id":"com.apple.system.logging_system_enable-private-data","displayName":"Enable Private Data","description":"Setting this value to true enables private data logging for the entire system.","helpText":null,"infoUrls":[],"categoryId":"0d4d90ab-7ad8-4524-ade0-bc01aa7b71a3","categoryName":"System Logging","options":[{"id":"com.apple.system.logging_system_enable-private-data_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.system.logging_system_enable-private-data_true","displayName":"True","description":null,"helpText":null}]},"15009641f182613d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetabinedgemodeallowed","displayName":"Allow sites configured for Internet Explorer mode to open in Microsoft Edge","description":"This policy lets sites configured to open in Internet Explorer mode to be opened by Microsoft Edge for testing on a modern browser without removing them from the site list.\n\nUsers can configure this setting in the \"More tools\" menu by selecting 'Open sites in Microsoft Edge'.\n\nIf you enable this policy, the option to 'Open sites in Microsoft Edge' is visible under \"More tools\". Users use this option to test IE mode sites on a modern browser.\n\nIf you disable or don't configure this policy, users can't see the option 'Open in Microsoft Edge' under the \"More tools\" menu. However, users can access this menu option with the --ie-mode-test flag.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetabinedgemodeallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetabinedgemodeallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"15eac552e359d2c0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites","description":"Allows you to set a list of site URL patterns that specify sites that are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\n\nFor detailed information on valid site URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\n\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com won't correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there's no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\n\nThis policy applies on a frame-by-frame basis and not based on top-level origin URL alone; so, for example, if contoso.com is listed in the JavaScriptJitAllowedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT enabled, but fabrikam.com will use the policy from \"DefaultJavaScriptJitSetting\", if set, or default to JavaScript JIT enabled.\n\nIf you don't configure this policy for a site then the policy from \"DefaultJavaScriptJitSetting\" applies to the site, if set, otherwise Javascript JIT is enabled for the site.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"15f97a2abb64910d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.proactiveauthworkflowenabled","displayName":"Enable proactive authentication","description":"This policy controls the proactive authentication in Microsoft Edge, that connects the signed-in user identity with Microsoft Bing, MSN and Copilot services for a smooth and consistent sign-in experience.\n\nIf you enable or don't configure this policy, Microsoft Edge authentication requests are automatically sent to the services using the account that is signed-in to the browser.\n\nIf you disable this policy, Microsoft Edge doesn't send authentications requests to these services, and users need to manually sign-in.","helpText":null,"infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.proactiveauthworkflowenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.proactiveauthworkflowenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"1595616d21e6ae5c":{"id":"device_vendor_msft_policy_config_admx_credssp_restrictedremoteadministration_restrictedremoteadministrationdrop","displayName":"Use the following restricted mode:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_restrictedremoteadministration_restrictedremoteadministrationdrop_3","displayName":"Restrict Credential Delegation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_restrictedremoteadministration_restrictedremoteadministrationdrop_2","displayName":"Require Remote Credential Guard","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_restrictedremoteadministration_restrictedremoteadministrationdrop_1","displayName":"Require Restricted Admin","description":null,"helpText":null}]},"15dfbf320d3bd095":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornoneex","displayName":"List of applications to never report errors for","description":"This policy setting controls Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on.\r\n\r\nIf you enable this policy setting, you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors, click Show under the Exclude errors for applications on this list setting, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). File names must always include the .exe file name extension. Errors that are generated by applications in this list are not reported, even if the Default Application Reporting Settings policy setting is configured to report all application errors.\r\n\r\nIf this policy setting is enabled, the Exclude errors for applications on this list setting takes precedence. If an application is listed both in the List of applications to always report errors for policy setting, and in the exclusion list in this policy setting, the application is excluded from error reporting. You can also use the exclusion list in this policy setting to exclude specific Microsoft applications or parts of Windows if the check boxes for these categories are filled in the Default application reporting settings policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the Default application reporting settings policy setting takes precedence.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-pch-allornoneex"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornoneex_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornoneex_1","displayName":"Enabled","description":null,"helpText":null}]},"1518c761f1ec16ac":{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_wercerusessl","displayName":"Connect using SSL","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_wercerusessl_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_wercerusessl_1","displayName":"True","description":null,"helpText":null}]},"15cda127e1c1ef06":{"id":"device_vendor_msft_policy_config_admx_printing_nondomainprinters_bluetoothprinters","displayName":"Number of Bluetooth printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"157c87f3aa198b41":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_pv","displayName":"Best effort service type","description":"Specifies an alternate link layer (Layer-2) priority value for packets with the Best Effort service type (ServiceTypeBestEffort). The Packet Scheduler inserts the corresponding priority value in the Layer-2 header of the packets.\r\n\r\nIf you enable this setting, you can change the default priority value associated with the Best Effort service type.\r\n\r\nIf you disable this setting, the system uses the default priority value of 0.\r\n\r\nImportant: If the Layer-2 priority value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypebesteffort-pv"],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_pv_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_pv_1","displayName":"Enabled","description":null,"helpText":null}]},"15ed4a6a9bd13e89":{"id":"device_vendor_msft_policy_config_admx_userprofiles_slowlinktimeout_transferrateop","displayName":"Connection speed (Kbps):","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":null},"1550558ad48b73d7":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherdetails_publishernamedetails","displayName":"Publisher","description":"The name of the application publisher","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"15920ec84ad9e789":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies","displayName":"Enables experimental policies","description":"Allows Google Chrome to load experimental policies.\r\n\r\nWARNING: Experimental policies are unsupported and subject to change or be removed without notice in future version of the browser!\r\n\r\nAn experimental policy may not be finished or still have known or unknown defects. It may be changed or even removed without any notification. By enabling experimental policies, you could lose browser data or compromise your security or privacy.\r\n\r\nIf a policy is not in the list and it's not officially released, its value will be ignored on Beta and Stable channel.\r\n\r\nIf a policy is in the list and it's not officially released, its value will be applied.\r\n\r\nThis policy has no effect on already released policies.\r\n\r\nExample value:\r\n\r\nExtensionInstallAllowlist\r\nExtensionInstallBlocklist","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"1514d421a764d8a8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions","displayName":"Enable network prediction (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2","displayName":"Do not predict network actions on any network connection","description":null,"helpText":null}]},"1588508a2e6b8eee":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_1","displayName":"Enabled","description":null,"helpText":null}]},"154024ed50ab53ad":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_restoreonstartupurlsdesc","displayName":"URLs to open on startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":null},"15d216fe4311a307":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites_javascriptoptimizerblockedforsitesdesc","displayName":"Block JavaScript optimizations on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"1508e11ebcfd5ca4":{"id":"device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor","displayName":"Use Cellular When Wi Fi Poor (Windows Insiders only)","description":"This policy allows the use of a cellular connection when Wi-Fi connectivity is limited.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#usecellularwhenwifipoor"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"156805513886c6ea":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy","displayName":"Refresh User Policy","description":"If a GPO is configured for an Office product that is included in the ODFC container, there may be a conflict with a previous user setting. Standard behavior is for the GPO to be applied, but when the ODFC container is read, the GPO will be over-written by the setting in the ODFC container. If the desire is for the GPO change to be universally applied, then enabling this setting should be done prior to the GPO update being applied. When this setting is enabled, the ODFC container will overwrite the previous user setting with the GPO setting.\r\n\r\nNOTE: There is a performance implication to enabling the RefreshUserPolicy. RefreshUserPolicy should only be enabled during a specific GPO and then should be set back to disabled.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RefreshUserPolicy\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"15422f666f33193c":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"157f1bf9329febe0":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallownetframeworkreliantcomponents"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"15094c50190334f2":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled","displayName":"Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge","description":"This policy lets you configure the Picture in Picture floating overlay button in Microsoft Edge.\r\n\r\nThe Picture in Picture floating overlay button lets user to watch videos in a floating window on top of other windows.\r\n\r\nIf you enable or don't configure this policy, you can use the Picture in Picture floating overlay button in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Picture in Picture floating overlay button in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"15399b49d31d2944":{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector_onsecurityevententerpriseconnector","displayName":"Configuration policy for Microsoft Edge for Business Reporting Connectors (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"15ae868bc4b13397":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting","displayName":"Idle detection (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_1","displayName":"Allow sites to detect idle state without asking the user","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_2","displayName":"Do not allow any site to detect the user's idle state","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_3","displayName":"Ask every time a site wants to detect the user's idle state","description":null,"helpText":null}]},"151e8667170efe91":{"id":"device_vendor_msft_policy_config_mixedreality_microphonedisabled","displayName":"Microphone Disabled","description":"This policy setting controls whether microphone on HoloLens 2 is disabled or not.","helpText":"","infoUrls":[],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_microphonedisabled_0","displayName":"Disabled","description":"Microphone can be used for voice.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_microphonedisabled_1","displayName":"Enabled","description":"Microphone cannot be used for voice.","helpText":null}]},"152b4304a2469461":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_spdesignexe149","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_spdesignexe149_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_spdesignexe149_1","displayName":"True","description":null,"helpText":null}]},"1526bbc56df8c76b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_powerpntexe73","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_powerpntexe73_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_powerpntexe73_1","displayName":"True","description":null,"helpText":null}]},"159b98e191f21b35":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_customsyncrootfoldername","displayName":"Set a custom name for the OneDrive folder","description":"This setting lets you customize the local OneDrive sync root folder name on users' computers. By default, the folder name is \"OneDrive - {organization name}.\" Shortening this name increases the available path length for nested folders and files. \nIf you enable this setting and provide a custom folder name, OneDrive will use that name when creating the sync root folder for new users. Users who are already syncing will need to unlink and relink their account for the change to take effect. To learn more, see https://learn.microsoft.com/en-us/sharepoint/use-group-policy. \n\nIf you disable this setting, the folder name will revert to \"OneDrive - {organization name}\". Users who were using a custom folder name will need to unlink and relink their account for the change to take effect. \n\nIf you do not configure this setting, the default folder name will be used. \n\nImportant:\n\nYou must provide at least one character for the custom folder name. \n\nThe custom folder name cannot be \"OneDrive\". \n\nThe full OneDrive sync root folder path (for example, C:\\Users\\{alias}\\OneDrive - {organization name}) cannot exceed 120 characters. \n\nCustom folder names cannot contain characters that are invalid for Windows folders. For a list of unsupported characters, see https://support.microsoft.com/office/restrictions-and-limitations-in-onedrive-and-sharepoint-64883a5d-228e-48f5-b3d2-eb39e07630fa#invalidcharacters. \n","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_customsyncrootfoldername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_customsyncrootfoldername_1","displayName":"Enabled","description":null,"helpText":null}]},"15daf7fe5f9f6b5e":{"id":"device_vendor_msft_policy_config_start_hidehibernate","displayName":"Hide Hibernate","description":"Enabling this policy hides \"Hibernate\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidehibernate"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidehibernate_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidehibernate_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"15759596afea8563":{"id":"device_vendor_msft_policy_config_userrights_increaseschedulingpriority","displayName":"Increase Scheduling Priority","description":"This user right determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process. A user with this privilege can change the scheduling priority of a process through the Task Manager user interface.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#increaseschedulingpriority"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"15f2f6771538faf4":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_email","displayName":"Email","description":"The email address that is displayed to users.  The default mail application is used to initiate email actions. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#email"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":null},"15d67572df10f2f3":{"id":"mathsettings_calculator_scientificmode","displayName":"Scientific Mode","description":"If present, configures the scientific mode of the calculator. If not present, scientific mode is enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"150a30465f2194c5":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_agentuser_userprofile","displayName":"Identity profile","description":"The Entra user profile (UPN or SID) to run the agent as.","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":null},"15aebaac194a7031":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_underlinehyperlinks","displayName":"Underline hyperlinks (User)","description":"This policy setting controls whether hyperlinks in Access tables, queries, forms, and reports are underlined. \r\n \r\nIf you enable this policy setting, Access underlines all hyperlinks in tables, queries, forms, and reports when they are created, overriding any configuration changes on the users' computers. \r\n \r\nIf you disable this policy setting, Access does not underline hyperlinks in tables, queries, forms and reports. \r\n \r\nIf you do not configure this policy setting, Access underlines hyperlinks that appear in tables, queries, forms, and reports. \r\n \r\nEnabling this policy setting enforces the default configuration in Access, and is therefore unlikely to cause a significant usability issue for most users. If this configuration is changed, users might click on dangerous hyperlinks without realizing it, which could pose a security risk.","helpText":"","infoUrls":[],"categoryId":"cbb98485-6a36-47b8-b450-7821e08507ac","categoryName":"Web Options - General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_underlinehyperlinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_underlinehyperlinks_1","displayName":"Enabled","description":null,"helpText":null}]},"159d96582f2b6232":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maps","displayName":"Maps (User)","description":"This policy setting configures the synchronization of user settings for the Maps app.\r\nBy default, the user settings of Maps sync between computers. Use the policy setting to prevent the user settings of Maps from synchronizing between computers.\r\nIf you enable this policy setting, Maps user settings continue to sync.\r\nIf you disable this policy setting, Maps user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-maps"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maps_1","displayName":"Enabled","description":null,"helpText":null}]},"1587f5fc0b66ff29":{"id":"user_vendor_msft_policy_config_attachmentmanager_notifyantivirusprograms","displayName":"Notify antivirus programs when opening attachments (User)","description":"This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are registered, they will all be notified. If the registered antivirus program already performs on-access checks or scans files as they arrive on the computer's email server, additional calls would be redundant. \n\nIf you enable this policy setting, Windows tells the registered antivirus program to scan the file when a user opens a file attachment. If the antivirus program fails, the attachment is blocked from being opened.\n\nIf you disable this policy setting, Windows does not call the registered antivirus programs when file attachments are opened.\n\nIf you do not configure this policy setting, Windows does not call the registered antivirus programs when file attachments are opened.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-attachmentmanager#attachmentmanager-notifyantivirusprograms"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_attachmentmanager_notifyantivirusprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_attachmentmanager_notifyantivirusprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"156eaa818ba3a457":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_diskcachedir","displayName":"Set disk cache directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"15dcd1e414ce3312":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode","displayName":"Controls the mode of DNS-over-HTTPS (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_off","displayName":"Disable DNS-over-HTTPS","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_automatic","displayName":"Enable DNS-over-HTTPS with insecure fallback","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_secure","displayName":"Enable DNS-over-HTTPS without insecure fallback","description":null,"helpText":null}]},"15d09f6da37509e6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled","displayName":"Allow users to customize the background on the New Tab page (User)","description":"If the policy is set to false, the New Tab page won't allow users to customize the background. Any existing custom background will be permanently removed even if the policy is set to true later.\r\n\r\nIf the policy is set to true or unset, users can customize the background on the New Tab page.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"1504b5e363e96917":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"15250f7c6859dc86":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_popupsblockedforurlsdesc","displayName":"Block popups on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"15c8c4aa2f782b2f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (User)","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Safe Browsing warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on \"exe\" and \"jnlp\" extensions for *.example.com domains, and on \"swf\" extensions for all domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n{ \"file_extension\": \"jnlp\", \"domains\": [\"example.com\"] },\r\n{ \"file_extension\": \"exe\", \"domains\": [\"example.com\"] },\r\n{ \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nIf this policy is enabled alongside DownloadRestrictions, then the exemptions to file type extension-based warnings specified by this policy take precedence over a DownloadRestrictions setting that would block dangerous file types. The exemptions specified by this policy only apply to the \"block dangerous file types\" behavior specified by values 1 and 2 of DownloadRestrictions.\r\n\r\nFor example, if this policy specifies an exemption for \"exe\" downloads from \"website1.com\", and DownloadRestrictions is set to block malicious downloads and dangerous file types (value 1), then \"exe\" downloads from \"website1.com\" will be exempt from file type extension-based blocking but will still be blocked if they are malicious.\r\n\r\nMore information about DownloadRestrictions can be found at https://chromeenterprise.google/policies/?policy=DownloadRestrictions.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExemptDomainFileTypePairsFromFileTypeDownloadWarnings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://example.com\",\r\n \"example2.com\"\r\n ],\r\n \"file_extension\": \"jnlp\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"swf\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"15173b11f52f48b5":{"id":"user_vendor_msft_policy_config_internetexplorer_allowautocomplete","displayName":"Turn on the auto-complete feature for user names and passwords on forms (User)","description":"This AutoComplete feature can remember and suggest User names and passwords on Forms.\n\nIf you enable this setting, the user cannot change \"User name and passwords on forms\" or \"prompt me to save passwords\". The Auto Complete feature for User names and passwords on Forms will be turned on. You have to decide whether to select \"prompt me to save passwords\".\n\nIf you disable this setting the user cannot change \"User name and passwords on forms\" or \"prompt me to save passwords\". The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords.\n\nIf you do not configure this setting, the user has the freedom of turning on Auto complete for User name and passwords on forms and the option of prompting to save passwords. To display this option, the users open the Internet Options dialog box, click the Contents Tab and click the Settings button.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowautocomplete"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowautocomplete_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowautocomplete_1","displayName":"Enabled","description":null,"helpText":null}]},"1555f270e31ac1a9":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"1580967d5360ab2e":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1","displayName":"Additional server versions supported (User)","description":"\r\nSpecify a semicolon separated list of server version names, e.g. RTC/2.9;RTC/3.0;RTC/4.0, to which Microsoft Lync allows logon in addition to the server versions that are supported by default. Space character is treated as part of the version string.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1_1","displayName":"Enabled","description":null,"helpText":null}]},"15a108bc68cdd60d":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload","displayName":"Wait for Internet Explorer mode tabs to completely unload before ending the browser session (User)","description":"This policy causes Microsoft Edge to continue running until all Internet Explorer tabs have completely finished unloading. This allows Internet Explorer plugins like ActiveX controls to perform additional critical work even after the browser has been closed. However, this can cause stability and performance issues, and Microsoft Edge processes may remain active in the background with no visible windows if the webpage or plugin prevents Internet Explorer from unloading. This policy should only be used if your organization depends on a plugin that requires this behavior.\r\n\r\nIf you enable this policy, Microsoft Edge will always wait for Internet Explorer mode tabs to fully unload before ending the browser session.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not always wait for Internet Explorer mode tabs to fully unload before ending the browser session.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2174004","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_1","displayName":"Enabled","description":null,"helpText":null}]},"15c4862aad28c475":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls","displayName":"Allow sites to make network requests to the local device. (User)","description":"Specifies a list of URL patterns for which requests initiated from matching origins are exempt from Local Network Access restrictions when accessing loopback addresses (127.0.0.1, ::1, localhost).\r\n\r\nIf a requesting origin matches a URL pattern specified in this policy, requests to loopback addresses are allowed and are not subject to Local Network Access restrictions.\r\n\r\nFor origins not covered by this policy, the user's personal settings and local network access restrictions apply.\r\n\r\nIf this policy is disabled or not configured, no additional exemptions are granted beyond the user's existing configuration.\r\n\r\nMultiple policies can specify origins that affect requests to the local device. If an origin matches more than one of the following policies, they are applied in the following order of precedence:\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nFor guidance on valid URL pattern syntax, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns .\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"158a77cd38e6b21a":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_smartactionsblocklistdesc","displayName":"Block smart actions for a list of services (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"154bc4042607c90f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastserviceservercapabilities3","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"15529980ddbd7a23":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withawebdiscussionslink_l_withawebdiscussionslink367","displayName":"With a Web discussions link (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":null},"15f19c2d6cc9e7ea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyproject","displayName":"Disallow in Project (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyproject_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyproject_1","displayName":"True","description":null,"helpText":null}]},"15949a4a5575d180":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuaecuador","displayName":"Quechua (Ecuador) (User)","description":"Enables the editing language Quechua (Ecuador)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuaecuador_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuaecuador_1","displayName":"Enabled","description":null,"helpText":null}]},"15346e489639dbb3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_l_workflowcachename478","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"154b94f99651f8e3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc05_l_allowsubfolders257","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc05_l_allowsubfolders257_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc05_l_allowsubfolders257_1","displayName":"True","description":null,"helpText":null}]},"15f92464671415ac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc05_l_descriptioncolon256","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"157ce3a7c57fcdb2":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicyincludingfilespendingupload_l_ageoutpolicyincludingfilespendinguploaddecimal","displayName":"Number of days (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"1526990ca234a9aa":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"154c094e85d73e47":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders7","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders7_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders7_1","displayName":"True","description":null,"helpText":null}]},"15ee4cc0b8ff9d50":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0cea32b4-28be-4164-ae2a-6db33b9dadb7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_l_empty_1","displayName":"Low (enabled)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_l_empty_2","displayName":"By UI (prompted)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_l_empty_3","displayName":"High (disabled)","description":null,"helpText":null}]},"15554bea866f64f7":{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection","displayName":"Restrict clipboard transfer from client to server (User)","description":"This policy setting allows you to restrict clipboard data transfers from client to server.\r\n\r\nIf you enable this policy setting, you must choose from the following behaviors:\r\n\r\n- Disable clipboard transfers from client to server.\r\n\r\n- Allow plain text copying from client to server.\r\n\r\n- Allow plain text and images copying from client to server.\r\n\r\n- Allow plain text, images and Rich Text Format copying from client to server.\r\n\r\n- Allow plain text, images, Rich Text Format and HTML copying from client to server.\r\n\r\nIf you disable or do not configure this policy setting, users can copy arbitrary contents from client to server if clipboard redirection is enabled.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-limitclienttoserverclipboardredirection"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_1","displayName":"Enabled","description":null,"helpText":null}]},"1571052c772923ac":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingdocumentsallowprogrammaticaccess","displayName":"Stop checking to ensure documents allow programmatic access (User)","description":"This policy setting prevents the Accessibility Checker from checking to ensure that documents have not blocked programmatic access through DRM.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking to ensure that documents have not blocked programmatic access through DRM.\r\n\r\nIf you disable or do not configure this policy setting, documents will be checked for programmatic access and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingdocumentsallowprogrammaticaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingdocumentsallowprogrammaticaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"15a6acd697989dfc":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngpasswordspincount","displayName":"Set CNG password spin count (User)","description":"This policy setting allows you to specify the number of times to spin (rehash) the password verifier.\r\n\r\nIf you enable this policy setting, the number specified will be the number of times the password will be rehashed.\r\n\r\nIf you disable or do not configure this policy setting, the default (100000) will be used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngpasswordspincount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngpasswordspincount_1","displayName":"Enabled","description":null,"helpText":null}]},"151decc104a13efc":{"id":"vendor_msft_controlledconfiguration_blob","displayName":"Controlled Configuration Blob","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/defender-csp#:~:text=Configuration/TamperProtection"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/16.json b/public/intune-definitions/16.json new file mode 100644 index 000000000000..e2f9549a6028 --- /dev/null +++ b/public/intune-definitions/16.json @@ -0,0 +1 @@ +{"169a6bc2337a9ecf":{"id":"com.apple.applicationaccess_allowdefaultcallingappmodification","displayName":"Allow Default Calling App Modification","description":"If false, disables default calling app preference modification. The MDM Settings command to set the default calling app preference will still work when this is applied.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowdefaultcallingappmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowdefaultcallingappmodification_true","displayName":"True","description":null,"helpText":null}]},"1618332da0ed2628":{"id":"com.apple.applicationaccess_ratingmoviesfr","displayName":"Rating Movies - France","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesfr_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesfr_2","displayName":"10","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesfr_3","displayName":"12","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesfr_4","displayName":"16","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesfr_5","displayName":"18","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesfr_6","displayName":"All","description":null,"helpText":null}]},"16240d419e2fd639":{"id":"com.apple.domains_safaripasswordautofilldomains","displayName":"Safari Password Auto Fill Domains","description":"An array of domains. Users can only save passwords in Safari from URLs matching the patterns listed here. This property doesn’t disable the autofill feature itself. Supervised devices or Shared iPads need this property to enable saving passwords in Safari. Available in iOS 9.3 and later.","helpText":null,"infoUrls":[],"categoryId":"224dc683-c0e0-4783-8ba8-8f02c76d161d","categoryName":"Domains","options":null},"16be7d9baf95d997":{"id":"com.apple.managedclient.preferences_defaultimagessetting","displayName":"Default images setting","description":"Set whether websites can display images. You can allow images on all sites (1) or block them on all sites (2).\n\nIf you don't configure this policy, images are allowed by default, and the user can change this setting.\n\n* 1 = Allow all sites to show all images\n\n* 2 = Don't allow any site to show images","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultimagessetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultimagessetting_0","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultimagessetting_1","displayName":"Don't allow any site to show images","description":null,"helpText":null}]},"1685a44afbc6ac6d":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogoenabled","displayName":"Hide the company logo on the Microsoft Edge new tab page","description":"By default, the company logo is shown on the new tab page if the company logo is configured in Admin Portal.\n\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and the company logo is there for users.\n\nIf you disable this policy, the company logo doesn't appear on Microsoft Edge new tab page.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagecompanylogoenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpagecompanylogoenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpagecompanylogoenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"16c46b14f83a6ed2":{"id":"com.apple.managedclient.preferences_resolvenavigationerrorsusewebservice","displayName":"Enable resolution of navigation errors using a web service","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\n\nIf you enable this policy, a web service is used for network connectivity tests.\n\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\n\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\n\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#resolvenavigationerrorsusewebservice"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_resolvenavigationerrorsusewebservice_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_resolvenavigationerrorsusewebservice_true","displayName":"Enabled","description":null,"helpText":null}]},"16cbd121173cb355":{"id":"com.apple.managedclient.preferences_sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification","description":"According to Service Worker specification\nhttps://w3c.github.io/ServiceWorker/#control-and-use-worker-client, workers\nshould inherit controllers for blob URLs. Currently, only DedicatedWorkers\ninherit the controller, while SharedWorkers do not.\n\nEnabled/Unset: Microsoft Edge inherits\nthe controller for SharedWorker blob URLs, aligning with the specification.\n\nDisabled: Behavior remains unchanged, not aligning with the specification.\n\nThis policy is temporary and will be removed in a future update.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sharedworkerbloburlfixenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sharedworkerbloburlfixenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sharedworkerbloburlfixenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"1699cacb2cdf9e56":{"id":"com.apple.webcontent-filter_filtertype","displayName":"Filter Type","description":"The type of filter, built-in or plug-in. In macOS, the system supports only the plug-in value.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_filtertype_0","displayName":"Built-in","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_filtertype_1","displayName":"Plug-in","description":null,"helpText":null}]},"1636b41943fd1db7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply","description":"A list of URLs to which \"AutoOpenFileTypes\" applies to. This policy has no impact on automatically open values set by users via the download shelf ... > \"Always open files of this type\" menu entry.\n\nIf you set URLs in this policy, files will only automatically open by policy if the URL is part of this set and the file type is listed in \"AutoOpenFileTypes\". If either condition is false, the download won't automatically open by policy.\n\nIf you don't set this policy, all downloads where the file type is in \"AutoOpenFileTypes\" automatically opens.\n\nA URL pattern has to be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\n\nThis policy doesn't work as expected with file://* wildcards.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"16f84a3986fe10d5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_recommended","displayName":"Configure default state of Allow extensions from other stores setting (users can override)","description":"This policy allows you to control the default state of the Allow extensions from other stores setting.\nThis policy can't be used to stop installation of extensions from other stores such as Chrome Web Store.\nTo stop installation of extensions from other stores, use the Extension Settings policy: https://go.microsoft.com/fwlink/?linkid=2187098.\n\nWhen enabled, Allow extensions from other stores are turned on. So, users don't have to turn on the flag manually\nwhile installing extensions from other supported stores such as Chrome Web Store. However a user can override this setting.\nIf the user turned on the setting and then turned it off, this setting may not work.\nIf the Admin first sets the policy as Enabled, but then changes it to not configured or disabled, it has no impact on\nuser settings and the setting remains as it is.\n\nWhen disabled or not configured, the user can manage the Allow extensions from other store setting.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"168e7b9858e24f63":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhistory","displayName":"Allow importing of browsing history","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\n\nIf you enable this policy, the Browsing history check box is automatically selected in the Import browser data dialog box.\n\nIf you disable this policy, browsing history data isn't imported at first run, and users can't import this data manually.\n\nIf you don't configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\n\nNote: This policy currently manages import from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhistory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhistory_true","displayName":"Enabled","description":null,"helpText":null}]},"1606f8cc9e206270":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionloginurls","displayName":"Configure the list of enterprise login URLs where the password protection service should capture salted hashes of a password","description":"Configure the list of enterprise login URLs (HTTP and HTTPS schemes only) where Microsoft Edge should capture the salted hashes of passwords and use it for password reuse detection.\n\nIf you enable this policy, the password protection service captures fingerprints of passwords on the defined URLs.\n\nIf you disable this policy or don't configure it, no password fingerprints are captured.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"169bea8c1b4c8ddb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.syncdisabled","displayName":"Disable synchronization of data using Microsoft sync services","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\n\nThis policy disables cloud synchronization only and has no impact on the \"RoamingProfileSupportEnabled\" policy.\n\nIf you don't set this policy or apply it as recommended, users can turn on or turn off sync. If you apply this policy as mandatory, users won't be able to turn on sync.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.syncdisabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.syncdisabled_true","displayName":"Enabled","description":null,"helpText":null}]},"167488010075efe7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.whatsnewpageforentraprofilesenabled","displayName":"Control whether an informational webpage for Edge for Business is shown in the new tab after major browser updates","description":"Starting in Microsoft Edge version 145, users with Microsoft Entra ID profiles will see an informational page about new Edge for Business features after major browser updates. This page highlights recent enhancements designed to promote secure and productive browsing.\n\nThis policy controls whether users with Microsoft Entra ID profiles see this informational page. This policy applies only to Microsoft Entra ID profiles and does not apply to Microsoft account (MSA) profiles.\n\nThis policy is available starting in Microsoft Edge version 144 to allow configuration ahead of the changes introduced in version 145.\n\nIf you enable this policy or do not configure it, Microsoft Edge shows the informational page by default.\nIf you disable this policy, Microsoft Edge does not show the informational page to users.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.whatsnewpageforentraprofilesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.whatsnewpageforentraprofilesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"16d08a387082755e":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrequireactivedirectorybackup_name","displayName":"Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrequireactivedirectorybackup_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrequireactivedirectorybackup_name_1","displayName":"True","description":null,"helpText":null}]},"16bca67d62440fc2":{"id":"device_vendor_msft_policy_config_admx_credssp_denydefaultcredentials_denydefaultcredentials_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"16eafcfd8ee6d72f":{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashsupportversion","displayName":"Hash Version support for BranchCache","description":"This policy setting specifies whether the BranchCache hash generation service supports version 1 (V1) hashes, version 2 (V2) hashes, or both V1 and V2 hashes. Hashes, also called content information, are created based on the data in shared folders where BranchCache is enabled. \r\n\r\nIf you specify only one version that is supported, content information for that version is the only type that is generated by BranchCache, and it is the only type of content information that can be retrieved by client computers. For example, if you enable support for V1 hashes, BranchCache generates only V1 hashes and client computers can retrieve only V1 hashes.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache settings are not applied to client computers by this policy setting. In this circumstance, which is the default, both V1 and V2 hash generation and retrieval are supported.\r\n\r\n- Enabled. With this selection, the policy setting is applied and the hash version(s) that are specified in \"Hash version supported\" are generated and retrieved.\r\n\r\n- Disabled. With this selection, both V1 and V2 hash generation and retrieval are supported.\r\n\r\nIn circumstances where this setting is enabled, you can also select and configure the following option:\r\n\r\nHash version supported:\r\n\r\n- To support V1 content information only, configure \"Hash version supported\" with the value of 1.\r\n\r\n- To support V2 content information only, configure \"Hash version supported\" with the value of 2.\r\n\r\n- To support both V1 and V2 content information, configure \"Hash version supported\" with the value of 3.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-lanmanserver#admx-lanmanserver-pol-hashsupportversion"],"categoryId":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashsupportversion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashsupportversion_1","displayName":"Enabled","description":null,"helpText":null}]},"16329cd6853bbcfe":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_forceupdatefrommu","displayName":"Allow security intelligence updates from Microsoft Update","description":"This policy setting allows you to enable download of security intelligence updates from Microsoft Update even if the Automatic Updates default server is configured to another download source such as Windows Update.\r\n\r\n If you enable this setting, security intelligence updates will be downloaded from Microsoft Update.\r\n\r\n If you disable or do not configure this setting, security intelligence updates will be downloaded from the configured download source.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-forceupdatefrommu"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_forceupdatefrommu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_forceupdatefrommu_1","displayName":"Enabled","description":null,"helpText":null}]},"16fbeede09338c85":{"id":"device_vendor_msft_policy_config_admx_pca_detectinstallfailurespolicy","displayName":"Detect application install failures","description":"This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\\Administrative Templates\\Windows Components\\Application Compatibility.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pca#admx-pca-detectinstallfailurespolicy"],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectinstallfailurespolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectinstallfailurespolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"16d0b2897a4b7a29":{"id":"device_vendor_msft_policy_config_admx_qos_qostimerresolution_qostimerresolution_box","displayName":"Timer units (in microseconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","categoryName":"Qo S Packet Scheduler","options":null},"163fd4d4c563613e":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_avc444_mode_preferred","displayName":"Prioritize H.264/AVC 444 graphics mode for Remote Desktop Connections","description":"This policy setting prioritizes the H.264/AVC 444 graphics mode for non-RemoteFX vGPU scenarios. When you use this setting on the RDP server, the server will use H.264/AVC 444 as the codec in an RDP 10 connection where both the client and server can use H.264/AVC 444.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-server-avc444-mode-preferred"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_avc444_mode_preferred_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_avc444_mode_preferred_1","displayName":"Enabled","description":null,"helpText":null}]},"16c999d1a095a3dd":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project","displayName":"Microsoft Project 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Project 2010.\r\nBy default, the user settings of Microsoft Project 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010project"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project_1","displayName":"Enabled","description":null,"helpText":null}]},"165540f61f9c830b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory","displayName":"Import browsing history from default browser on first run","description":"Setting the policy to Enabled imports browsing history from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no browsing history is imported on first run.\r\n\r\nUsers can trigger an import dialog and the browsing history checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"1622a1ce8bdfb3a1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins","displayName":"Enable Site Isolation for specified origins","description":"Setting the policy means each of the named origins in a comma-separated list runs in a dedicated process. Each named origin's process will only be allowed to contain documents from that origin and its subdomains. For example, specifying https://a1.example.com/ allows https://a2.a1.example.com/ in the same process, but not https://example.com or https://b.example.com.\r\n\r\nSince Google Chrome 77, you can also specify a range of origins to isolate using a wildcard. For example, specifying https://[*.]corp.example.com will give every origin underneath https://corp.example.com its own dedicated process, including https://corp.example.com itself, https://a1.corp.example.com, and https://a2.a1.corp.example.com.\r\n\r\nNote that all sites (i.e., scheme plus eTLD+1, such as https://example.com) are already isolated by default on Desktop platforms, as noted in the SitePerProcess policy. This IsolateOrigins policy is useful to isolate specific origins at a finer granularity (e.g., https://a.example.com).\r\n\r\nAlso note that origins isolated by this policy will be unable to script other origins in the same site, which is otherwise possible if two same-site documents modify their document.domain values to match. Administrators should confirm this uncommon behavior is not used on an origin before isolating it.\r\n\r\nSetting the policy to off or leaving it unset lets users change this setting.\r\n\r\nNote: For Android, use the IsolateOriginsAndroid policy instead.\r\n\r\nExample value: https://a.example.com/,https://othersite.org/,https://[*.]corp.example.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"16bd99b4355c8208":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled","displayName":"Enable AutoFill","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"16d5ffef865c94a6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_enterprisewebstoreurl","displayName":"Enterprise web store URL (deprecated) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"16591956b0fe45e9":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings","displayName":"Settings for Create Themes with AI (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_0","displayName":"Allow Create Themes and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_1","displayName":"Allow Create Themes without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_2","displayName":"Do not allow Create Themes.","description":null,"helpText":null}]},"163acab7ed60e5b7":{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_channel_logmaxsize","displayName":"Maximum Log Size (KB)","description":"","helpText":"","infoUrls":[],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":null},"167893152c919f91":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages","displayName":"Install Appx Packages","description":"[ENABLED BY DEFAULT]\r\n\r\nNOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nWhen enabled, this setting will read the AppxPackages.xml manifest file from the user's profile and install / re-register the list of applications.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\InstallAppxPackages\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages_1","displayName":"Enabled","description":null,"helpText":null}]},"16116e388a69fd03":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_profilesredirectionxmlsourcefolder","displayName":"Redirection XML Source Folder (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"16503867cfea5268":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowuserdatapersistence"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"160d47eeb33b6265":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowuserdatapersistence"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"16894bade7f63cc0":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled","displayName":"Hide the company logo on the Microsoft Edge new tab page","description":"By default, the company logo is shown on the new tab page if the company logo is configured in Admin Portal.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and the company logo is there for users.\r\n\r\nIf you disable this policy, the company logo doesn't appear on Microsoft Edge new tab page.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"16f3b9c46c5a5147":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~manageability_mamwithdevicedlpenabled","displayName":"Allow MAM enrollment when managed device has Purview DLP policy configured","description":"Controls whether Microsoft Edge allows Mobile Application Management (MAM) enrollment on managed devices when Microsoft Purview Data Loss Prevention (DLP) is configured.\r\n\r\nIf you enable this policy, MAM enrollment is allowed even when Purview DLP is detected on the device.\r\n\r\nIf you disable or don't configure this policy, MAM enrollment is blocked when Purview DLP is detected on the device.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~manageability_mamwithdevicedlpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~manageability_mamwithdevicedlpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"1696e3a656301a8e":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for InPrivate and Guest profiles","description":"Configure this policy to allow/disallow ambient authentication for InPrivate and Guest profiles in Microsoft Edge.\r\n\r\nAmbient Authentication is http authentication with default credentials when explicit credentials aren't provided via NTLM/Kerberos/Negotiate challenge/response schemes.\r\n\r\nIf you set the policy to RegularOnly (value 0), it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions won't be allowed to ambiently authenticate.\r\n\r\nIf you set the policy to InPrivateAndRegular (value 1), it allows ambient authentication for InPrivate and Regular sessions. Guest sessions won't be allowed to ambiently authenticate.\r\n\r\nIf you set the policy to GuestAndRegular (value 2), it allows ambient authentication for Guest and Regular sessions. InPrivate sessions won't be allowed to ambiently authenticate\r\n\r\nIf you set the policy to All (value 3), it allows ambient authentication for all sessions.\r\n\r\nNote that ambient authentication is always allowed on regular profiles.\r\n\r\nIn Microsoft Edge version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.\r\n\r\n* 0 = Enable ambient authentication in regular sessions only\r\n\r\n* 1 = Enable ambient authentication in InPrivate and regular sessions\r\n\r\n* 2 = Enable ambient authentication in guest and regular sessions\r\n\r\n* 3 = Enable ambient authentication in regular, InPrivate and guest sessions","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"16f64e95e5ec5440":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_fallbacktocdn","displayName":"Use Office CDN (if needed) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_fallbacktocdn_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_fallbacktocdn_1","displayName":"True","description":null,"helpText":null}]},"16c0e83feb5741a7":{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance","displayName":"Configure Offer Remote Assistance","description":"This policy setting allows you to turn on or turn off Offer (Unsolicited) Remote Assistance on this computer.\n\nIf you enable this policy setting, users on this computer can get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance.\n\nIf you disable this policy setting, users on this computer cannot get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance.\n\nIf you do not configure this policy setting, users on this computer cannot get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance.\n\nIf you enable this policy setting, you have two ways to allow helpers to provide Remote Assistance: \"Allow helpers to only view the computer\" or \"Allow helpers to remotely control the computer.\" When you configure this policy setting, you also specify the list of users or user groups that are allowed to offer remote assistance.\n\nTo configure the list of helpers, click \"Show.\" In the window that opens, you can enter the names of the helpers. Add each user or group one by one. When you enter the name of the helper user or user groups, use the following format:\n\n\\ or\n\n\\\n\nIf you enable this policy setting, you should also enable firewall exceptions to allow Remote Assistance communications. The firewall exceptions required for Offer (Unsolicited) Remote Assistance depend on the version of Windows you are running.\n\nWindows Vista and later\n\nEnable the Remote Assistance exception for the domain profile. The exception must contain:\nPort 135:TCP\n%WINDIR%\\System32\\msra.exe\n%WINDIR%\\System32\\raserver.exe\n\nWindows XP with Service Pack 2 (SP2) and Windows XP Professional x64 Edition with Service Pack 1 (SP1)\n\nPort 135:TCP\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpsvc.exe\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpctr.exe\n%WINDIR%\\System32\\Sessmgr.exe\n\nFor computers running Windows Server 2003 with Service Pack 1 (SP1)\n\nPort 135:TCP\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpsvc.exe\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpctr.exe\nAllow Remote Desktop Exception","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-unsolicitedremoteassistance"],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_1","displayName":"Enabled","description":null,"helpText":null}]},"166bd755dd7559b7":{"id":"device_vendor_msft_policy_config_windowssandbox_allownetworking","displayName":"Allow Networking","description":"Allow networking in Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allownetworking"],"categoryId":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","categoryName":"Windows Sandbox","options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allownetworking_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allownetworking_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"161cb2ad9664a95c":{"id":"safari_allowpopups","displayName":"Allow Popups","description":"If `false`, the system disables popups in Safari.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_allowpopups_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowpopups_true","displayName":"Allowed","description":null,"helpText":null}]},"163fbea1734bf63b":{"id":"sirisettings_enabled","displayName":"Enabled","description":"If `false`, disables Siri.","helpText":null,"infoUrls":[],"categoryId":"b85d9c04-4923-4fdf-a425-424686d47859","categoryName":"Siri Settings","options":[{"id":"sirisettings_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"sirisettings_enabled_true","displayName":"True","description":null,"helpText":null}]},"16b11dda85c8ebab":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nowindowssetuppage","displayName":"Hide Add/Remove Windows Components page (User)","description":"Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.\r\n\r\nThe Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files.\r\n\r\nIf you disable this setting or do not configure it, the Add/Remove Windows Components button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to configure services or add or remove program components. However, this setting blocks user access to the Windows Component Wizard.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-nowindowssetuppage"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nowindowssetuppage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nowindowssetuppage_1","displayName":"Enabled","description":null,"helpText":null}]},"168f4bee13488a49":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":null},"16e8c913fdcaa027":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls","displayName":"Block access to sensors on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't access sensors like motion and light sensors.\r\n\r\nLeaving the policy unset means DefaultSensorsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nIf the same URL pattern exists in both this policy and the SensorsAllowedForUrls policy, this policy is prioritized and access to motion or light sensors will be blocked.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"16e0cec42f326f58":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent","displayName":"Freeze User-Agent string major version at 99 (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_0","displayName":"Default to browser settings for User-Agent string version.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_1","displayName":"The User-Agent string will not freeze the major version.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_2","displayName":"The User-Agent string will freeze the major version as 99 and include the browser's major version in the minor position.","description":null,"helpText":null}]},"169abf163578dcf3":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability","displayName":"Manage the deprecated prefixed video fullscreen API's availability (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"165e73b2d28776f6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled","displayName":"Controls whether the new HTML parser behavior for the element is enabled","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2dd6a1b243825b7e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed","displayName":"Allows enabling throttling of non-visible, cross-origin iframes","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"2da19f163db1e737":{"id":"device_vendor_msft_policy_config_clouddesktop_boottocloudmode","displayName":"Boot To Cloud Mode","description":"This policy is used by IT admin to set the configuration mode of cloud PC.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-CloudDesktop#boottocloudmode"],"categoryId":"39e4c352-be9c-4e75-8111-8236279c7f1e","categoryName":"Cloud Desktop","options":[{"id":"device_vendor_msft_policy_config_clouddesktop_boottocloudmode_0","displayName":"Not Configured","description":"Not Configured","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_boottocloudmode_1","displayName":"Enable Boot to Cloud Desktop","description":"Enable Boot to Cloud Desktop","helpText":null}]},"2d6df75644bced01":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxdownloadbandwidth","displayName":"DO Max Download Bandwidth","description":"This policy specifies the maximum foreground download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.\\r\\nThe default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads.","helpText":null,"infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"2d27247a7c45bd11":{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption","displayName":"Audit Client Does Not Support Encryption","description":"This policy controls whether the SMB server will log the event when the SMB client doesn't support encryption. If you enable this policy setting, the SMB server will log the event when the SMB client doesn't support encryption. If you disable or do not configure this policy setting, the SMB server will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#auditclientdoesnotsupportencryption"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"2d6ed41dba810e88":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_cookiessessiononlyforurlsdesc","displayName":"Limit cookies from specific websites to the current session (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"2da754d0a4407a8a":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication","description":"This policy enables defining a list of certificate public keys that should be distrusted by Microsoft Edge for TLS server\r\nauthentication.\r\n\r\nThe policy value is a list of base64-encoded X.509 certificates. Any\r\ncertificate with a matching SPKI (SubjectPublicKeyInfo) will be distrusted.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"2d587172d06386bd":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience","displayName":"Hide the First-run experience and splash screen","description":"If you enable this policy, the First-run experience and the splash screen will not be shown to users when they run Microsoft Edge for the first time.\r\n\r\nFor the configuration options shown in the First Run Experience, the browser will default to the following:\r\n\r\n-On the New Tab Page, the feed type will be set to MSN News and the layout to Inspirational.\r\n\r\n-The user will still be automatically signed into Microsoft Edge if the Windows account is of Azure AD or MSA type.\r\n\r\n-Sync will not be enabled by default and users will be able to turn on sync from the sync settings.\r\n\r\nIf you disable or don't configure this policy, the First-run experience and the Splash screen will be shown.\r\n\r\nNote: The specific configuration options shown to the user in the First Run Experience, can also be managed by using other specific policies. You can use the HideFirstRunExperience policy in combination with these policies to configure a specific browser experience on your managed devices. Some of these other policies are:\r\n\r\n-'AutoImportAtFirstRun' (Automatically import another browser's data and settings at first run)\r\n\r\n-'NewTabPageLocation' (Configure the new tab page URL)\r\n\r\n-'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience)\r\n\r\n-'SyncDisabled' (Disable synchronization of data using Microsoft sync services)\r\n\r\n-'BrowserSignin' (Browser sign-in settings)\r\n\r\n-'NonRemovableProfileEnabled' (Configure whether a user always has a default profile automatically signed in with their work or school account)","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience_1","displayName":"Enabled","description":null,"helpText":null}]},"2d52b49410db6258":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_forcedenytheseapps","displayName":"Let Apps Access Phone Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"2d9edfa6746566a8":{"id":"device_vendor_msft_policy_config_update_requireupdateapproval","displayName":"Require Update Approval","description":"Note If you previously used the Update/PhoneUpdateRestrictions policy in previous versions of Windows, it has been deprecated. Please use this policy instead. Allows the IT admin to restrict the updates that are installed on a device to only those on an update approval list. It enables IT to accept the End User License Agreement (EULA) associated with the approved update on behalf of the end-user. EULAs are approved once an update is approved. Supported operations are Get and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#requireupdateapproval"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_requireupdateapproval_0","displayName":"Not configured. The device installs all applicable updates.","description":"Not configured. The device installs all applicable updates.","helpText":null},{"id":"device_vendor_msft_policy_config_update_requireupdateapproval_1","displayName":"The device only installs updates that are both applicable and on the Approved Updates list. Set this policy to 1 if IT wants to control the deployment of updates on devices, such as when testing is required prior to deployment.","description":"The device only installs updates that are both applicable and on the Approved Updates list. Set this policy to 1 if IT wants to control the deployment of updates on devices, such as when testing is required prior to deployment.","helpText":null}]},"2d28f0022f53663e":{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview","displayName":"Allow installation","description":"Lets you specify whether Microsoft Edge WebView can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy, users can install Microsoft Edge WebView through Microsoft Edge Update.\r\n\r\n If you disable this policy (or set it to 'Installs disabled'), users cannot install Microsoft Edge WebView through Microsoft Edge Update.\r\n\r\n If you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge WebView will only be deployed machine-wide.\r\n\r\n If you set the policy to Force Installs (Machine-Wide), users can install Microsoft Edge WebView to all machines where Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\n If you don't configure this policy, the 'Allow installation default' policy configuration determines whether users can install Microsoft Edge WebView through Microsoft Edge Update.","helpText":"","infoUrls":[],"categoryId":"43fc9dcc-1e66-4108-bded-2d005eeb7ccb","categoryName":"Microsoft Edge WebView","options":[{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_1","displayName":"Enabled","description":null,"helpText":null}]},"2d08db833d5a9b66":{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_1","displayName":"CD and DVD: Deny write access (User)","description":"This policy setting denies write access to the CD and DVD removable storage class.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-cdanddvd-denywrite-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"2d2fe2853dc8ae02":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project","displayName":"Microsoft Project 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Project 2010.\r\nBy default, the user settings of Microsoft Project 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010project"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project_1","displayName":"Enabled","description":null,"helpText":null}]},"2d6ecf7f0aceefdf":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2016","displayName":"Microsoft Office 365 OneNote 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 OneNote 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 OneNote 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365onenote2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2016_1","displayName":"Enabled","description":null,"helpText":null}]},"2d58cb00f8077214":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist","displayName":"Configure extension installation blocklist (User)","description":"Allows you to specify which extensions the users can NOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. Once an extension disabled due to the blocklist is removed from it, it will automatically get re-enabled.\r\n\r\nA blocklist value of '*' means all extensions are blocked unless they are explicitly listed in the allowlist.\r\n\r\nIf this policy is left not set the user can install any extension in Google Chrome.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"2ded65ac0a1c6343":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_tabcaptureallowedbyoriginsdesc","displayName":"Allow Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"2d86a11951d8bad6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings","displayName":"Change Memory Saver Mode Savings (User)","description":"This policy changes the savings level of Memory Saver.\r\n\r\nThis only takes effect when Memory Saver is enabled through settings or through the HighEfficiencyModeEnabled policy, and will affect how heuristics are used to determine when to discard tabs. For example, reducing the lifetime of an inactive tab before discarding it can save memory, but it also means that tabs will be reloaded more frequently which can lead to bad user experience and cost more network traffic.\r\n\r\nSetting the policy to 0 - Memory Saver will get moderate memory savings. Tabs become inactive after a longer period of time\r\n\r\nSetting the policy to 1 - Memory Saver will get balanced memory savings. Tabs become inactive after an optimal period of time.\r\n\r\nSetting the policy to 2 - Memory Saver will get maximum memory savings. Tabs become inactive after a shorter period of time.\r\n\r\nIf this policy is unset, the end user can control this setting in chrome://settings/performance.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_1","displayName":"Enabled","description":null,"helpText":null}]},"2d4ce67fbd57f033":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_tabdiscardingexceptionsdesc","displayName":"URL pattern Exceptions to tab discarding (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"2d6c1b0f9e943d93":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding","displayName":"Allow remote access users to open host-side URLs in their local client browser (User)","description":"Setting the policy to Enabled or leaving it unset may allow users connected to a remote access host to open host-side URLs in their local client browser.\r\n\r\nSetting the policy to Disabled will prevent the remote access host from sending URLs to the client.\r\n\r\nThis setting doesn't apply to remote assistance connections as the feature is not supported for that connection mode.\r\n\r\nNote: This feature is not yet generally available so enabling it does not mean that the feature will be visible in the client UI.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding_1","displayName":"Enabled","description":null,"helpText":null}]},"2d77482ad890e3d6":{"id":"user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains","displayName":"Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains (User)","description":"This policy setting allows you to manage a list of domains on which Internet Explorer will stop blocking outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.\n\nIf you enable this policy setting, you can enter a custom list of domains for which outdated ActiveX controls won't be blocked in Internet Explorer. Each domain entry must be formatted like one of the following:\n\n1. \"domain.name.TLD\". For example, if you want to include *.contoso.com/*, use \"contoso.com\"\n2. \"hostname\". For example, if you want to include http://example, use \"example\"\n3. \"file:///path/filename.htm\". For example, use \"file:///C:/Users/contoso/Desktop/index.htm\"\n\nIf you disable or don't configure this policy setting, the list is deleted and Internet Explorer continues to block specific outdated ActiveX controls on all domains in the Internet Zone.\n\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotblockoutdatedactivexcontrolsonspecificdomains"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"2db8a2bb082ecd0a":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowfontdownloads"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"2da7e4a3920a6de8":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions","displayName":"Logon options (User)","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon only in Intranet zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonelogonoptions"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"2d222ed7a9ef5a24":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowaccesstodatasources"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"2d8cbb3cad19ef20":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains (User)","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonenavigatewindowsandframes"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"2da5ac48f253401f":{"id":"user_vendor_msft_policy_config_kioskbrowser_blockedurlexceptions","displayName":"Blocked Url Exceptions (User)","description":"List of exceptions to the blocked website URLs (with wildcard support). This is used to configure URLs kiosk browsers are allowed to navigate to, which are a subset of the blocked URLs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#blockedurlexceptions"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"2d8745090650452e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"2d2034479a7af164":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode","displayName":"Secure mode and Certificate-based Digital Signature validation in native PDF reader (User)","description":"The policy enables Digital Signature validation for PDF files in a secure environment, which shows the correct validation status of the signatures.\r\n\r\nIf you enable this policy, PDF files with Certificate-based digital signatures are opened with an option to view and verify the validity of the signatures with high security.\r\n\r\nIf you disable or don't configure this policy, the capability to view and verify the signature will not be available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_1","displayName":"Enabled","description":null,"helpText":null}]},"2df23f70fe7c04ed":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions","displayName":"Actions to run when the computer is idle (User)","description":"List of actions to run when the timeout from the IdleTimeout policy is reached.\r\n\r\nIf the IdleTimeout policy is unset, this policy has no effect.\r\n\r\nWhen the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\r\n\r\nIf you do not set this policy or no actions are selected, the IdleTimeout policy has no effect.\r\n\r\nSupported actions are:\r\n\r\n'close_browsers': close all browser windows and PWAs for this profile.\r\n\r\n'reload_pages': reload all webpages. For some pages, the user may be prompted for confirmation first.\r\n\r\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings': clear the corresponding browsing data.\r\n\r\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' will disable sync for the respective data types if neither `Chrome Sync` is disabled by setting the SyncDisabled policy nor BrowserSignin is disabled.\r\n\r\nPolicy options mapping:\r\n\r\n* close_browsers (close_browsers) = Close Browsers\r\n\r\n* clear_browsing_history (clear_browsing_history) = Clear Browsing History\r\n\r\n* clear_download_history (clear_download_history) = Clear Download History\r\n\r\n* clear_cookies_and_other_site_data (clear_cookies_and_other_site_data) = Clear Cookies and Other Site Data\r\n\r\n* clear_cached_images_and_files (clear_cached_images_and_files) = Clear Cached Images and Files\r\n\r\n* clear_password_signin (clear_password_signin) = Clear Password Signin\r\n\r\n* clear_autofill (clear_autofill) = Clear Autofill\r\n\r\n* clear_site_settings (clear_site_settings) = Clear Site Settings\r\n\r\n* reload_pages (reload_pages) = Reload Pages\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nclose_browsers","helpText":"","infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_1","displayName":"Enabled","description":null,"helpText":null}]},"2d906830792da421":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls","displayName":"Allow sites to make network requests to local network endpoints. (User)","description":"Controls which website origins are exempt from Local Network Access checks when accessing local network endpoints.\r\n\r\nNetwork requests initiated from websites that match the specified URL patterns are not subject to Local Network Access checks.\r\n\r\nFor origins not covered by the patterns specified in this policy, the user's personal configuration applies.\r\n\r\nFor detailed information about valid URL patterns, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\r\n\r\nFor more information about Local Network Access restrictions, see https://wicg.github.io/local-network-access/.\r\n\r\nMultiple policies can list origins that affect requests to local network endpoints. If an origin matches more than one of the following policies, they take precedence in the following order:\r\n- LocalNetworkBlockedForUrls\r\n- LocalNetworkAllowedForUrls\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nThis policy controls access to local network endpoints (private IP addresses) and can be used to allow specific websites to access local network resources.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"2df38bc0bfc88f41":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (User)","description":"This setting lets you specify whether Internet Explorer will redirect navigations to sites that require a modern browser to Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Sitelist', beginning in M87, Internet Explorer will redirect sites that require a modern browser to Microsoft Edge.\r\n\r\nMicrosoft provides a list of public sites that require such redirection, such as https://mail.yahoo.com.\r\n\r\nWhen a site is redirected from Internet Explorer to Microsoft Edge, the Internet Explorer tab that began loading that site is closed if it had no prior content. Otherwise, it is navigated to a Microsoft help page explaining why the site was redirected to Microsoft Edge.\r\n\r\nWhen Microsoft Edge is launched to load a site from IE, an information bar is shown to the user explaining that the site works best in a modern browser.\r\n\r\nIf you set this policy to 'Disable', Internet Explorer will not redirect any traffic to Microsoft Edge.\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable\r\n\r\n* Sitelist (1) = Redirect sites based on the incompatible sites sitelist\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Enabled","description":null,"helpText":null}]},"2d63db851215834a":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout","displayName":"Sets layout for printing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout_0","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout_1","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},"2d0fc1bd19edc286":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastserviceservername0","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"2d2b69f0b21e1490":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingsendforreview_l_empty385","displayName":"\r\nMax number of documents being reviewed using 'send for review'\r\n","description":"","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":null},"2d4fc6aeec8d9280":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_urlforlocationofdocumenttemplatespolicy","displayName":"URL for location of document templates displayed when applications do not recognize rights-managed documents (User)","description":"Provide the path to a folder with document, spreadsheet, and presentation files to be used as templates for a unencrypted wrapper for files with rights-managed content received by users with older versions of Office. Office includes plain-text wrapper documents that notify users about a rights-managed document in certain circumstances. If the user's application cannot recognize a document that includes rights-management, the user receives the wrapper document with information such as instructions for downloading a Rights Management Add-on for Windows Internet Explorer. You can provide a folder with customized templates for Office to use for these plain-text wrappers by using this setting to specify a URL to a folder.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_urlforlocationofdocumenttemplatespolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_urlforlocationofdocumenttemplatespolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"2da895bd08ee9323":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydefaultlocationofdesktopalert_l_corner03","displayName":"Corner (0-3) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"2dc2f6ff2e7a6878":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general","displayName":"General (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"d6bd7b5c-b0ba-4cc1-bcaa-48b0f48e416b","categoryName":"Spelling","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_1","displayName":"Enabled","description":null,"helpText":null}]},"2dd9b405c4592040":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_enablelinksinemailmessages_v2","displayName":"Allow hyperlinks in suspected phishing e-mail messages (User)","description":"This policy setting controls whether hyperlinks in suspected phishing e-mail messages in Outlook are allowed. \r\n\r\nIf you enable this policy setting, Outlook will allow hyperlinks in suspected phishing messages that are not also classified as junk e-mail. \r\n\r\nIf you disable or do not configure this policy setting, Outlook will not allow hyperlinks in suspected phishing messages, even if they are not classified as junk e-mail.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_enablelinksinemailmessages_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_enablelinksinemailmessages_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"2de67995a1f8c84e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":null},"2d3d3bf9688d4c86":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifyencryptioncompatibility","displayName":"Specify encryption compatibility (User)","description":"This policy setting allows you to specify the encrypted database compatibility.\r\n\r\nIf you enable this policy setting, the compatibility format specified will be applied during encryption for new files\r\n- Use legacy format\r\n- Use next generation format\r\n- All files save with next generation: All files save with the next generation format\r\n\r\nIf you disable or do not configure this policy setting, the default setting, \"Use next generation format,\" will be applied.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_1","displayName":"Enabled","description":null,"helpText":null}]},"2d5456475fd36fdd":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_proofing_l_checkspellingasyoutype","displayName":"Check spelling as you type (User)","description":"This policy setting allows you to configure options for spelling errors.\r\n\r\nIf you enable this policy setting, you may choose one of these options:\r\n- Check spelling as you type: This option is checked.\r\n- Hide spelling errors: This option is checked, but \"Check spelling as you type\" is unchecked.\r\n- Both: \"Check spelling as you type\" and \"Hide spelling errors\" are both checked.\r\n\r\nIf you disable or do not configure this policy setting, the \"Check spelling as you type\" option is checked.","helpText":"","infoUrls":[],"categoryId":"51e0cebb-cac4-4905-9b31-539295e4b85b","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_proofing_l_checkspellingasyoutype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_proofing_l_checkspellingasyoutype_1","displayName":"Enabled","description":null,"helpText":null}]},"2d4cb663e6079055":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchchoonusedforvowels","displayName":"Match cho-on used for vowels (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchchoonusedforvowels_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchchoonusedforvowels_1","displayName":"Enabled","description":null,"helpText":null}]},"2d10a3727a66b0de":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_highlight","displayName":"Show highlighter marks (User)","description":"This policy setting controls highlighter marks.\r\n\r\nIf you enable this policy setting, highlighter marks, both on screen and when printing, will be shown.\r\n\r\nIf you disable or do not configure this policy setting, highlighter marks, both on screen and when printing, will be hidden.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_highlight_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_highlight_1","displayName":"Enabled","description":null,"helpText":null}]},"2d9353a655e2a78f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm","displayName":"Specify CNG random number generator algorithm (User)","description":"This policy setting allows you to configure the CNG random number generator to use.\r\n\r\nIf you enable this policy setting, the random number generator specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default random number generator will be used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"2d400ec0caca40ff":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_firewallrulename","displayName":null,"description":null,"helpText":null,"infoUrls":[],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/2e.json b/public/intune-definitions/2e.json new file mode 100644 index 000000000000..d177cc213c19 --- /dev/null +++ b/public/intune-definitions/2e.json @@ -0,0 +1 @@ +{"2e26f745be35e9ed":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordminimumuppercasecharacters","displayName":"Number of uppercase characters required","description":"Enter the number of uppercase characters the work profile password must have, between 1 and 16 characters. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"2ebaafaa7b3ef782":{"id":"com.apple.applicationaccess_allowiphonewidgetsonmac","displayName":"Allow iPhone Widgets On Mac","description":"If 'false', disallows iPhone widgets on a Mac that has signed in the same AppleID for iCloud. Supervised only.\nAvailable on iOS 17 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowiphonewidgetsonmac_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowiphonewidgetsonmac_true","displayName":"Enabled","description":null,"helpText":null}]},"2ecb66dd09a741b5":{"id":"com.apple.applicationaccess_allowuniversalcontrol","displayName":"Allow Universal Control","description":"If false, disables Universal Control. Available in macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowuniversalcontrol_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowuniversalcontrol_true","displayName":"True","description":null,"helpText":null}]},"2efa7ec1ac913e84":{"id":"com.apple.extensiblesso_platformsso_administratorgroups","displayName":"Administrator Groups","description":"The list of groups that are used for administrator access. Membership will be requested during authentication.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"2e2fdc9507af0b2e":{"id":"com.apple.managedclient.preferences_filesondemandenabled","displayName":"Enable Files On-Demand","description":"Specifies whether Files On-Demand is enabled. When set to true, new users who set up the sync app will download online-only files by default. When set to false, Files On-Demand will be disabled and users won't be able to turn it on. NOTE: This setting only applies to macOS Monterey 12.1 and earlier.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#filesondemandenabled"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_filesondemandenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_filesondemandenabled_true","displayName":"True","description":null,"helpText":null}]},"2efa27b41ff85c36":{"id":"com.apple.managedclient.preferences_restorepdfview","displayName":"Restore PDF view","description":"Enables PDF View Recovery in Microsoft Edge.\n\nIf you enable or don't configure this policy Microsoft Edge will recover the last state of PDF view and land users to the section where they ended reading in the last session.\n\nIf you disable this policy Microsoft Edge will recover the last state of PDF view and land users at the start of the PDF file.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#restorepdfview"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_restorepdfview_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_restorepdfview_true","displayName":"Enabled","description":null,"helpText":null}]},"2ead4f77bdb79bdf":{"id":"com.apple.managedclient.preferences_serviceworkertocontrolsrcdociframeenabled","displayName":"Allow ServiceWorker to control srcdoc iframes","description":"https://github.com/w3c/ServiceWorker/issues/765 asks srcdoc iframe with the \"allow-same-origin\" sandbox attribute to be under ServiceWorker control.\n\nBy default (if left unset) or when set to Enabled, Microsoft Edge makes srcdoc iframes with \"allow-same-origin\" sandbox attributes to be under ServiceWorker control.\n\nSetting the policy to Disabled prevents ServiceWorker control over srcdoc iframes.\n\nThis policy is temporary and planned for deprecation in 2026.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#serviceworkertocontrolsrcdociframeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_serviceworkertocontrolsrcdociframeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_serviceworkertocontrolsrcdociframeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"2ea36f9c2fd717bd":{"id":"com.apple.mcxprinting_defaultprinter_displayname","displayName":"Display Name","description":"The display name.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"2e4aa05f119ccd98":{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"2eff915b42618bbd":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder","displayName":"System Policy Desktop Folder","description":"Allows the application to access files in the user's Desktop folder.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"2e0419a68b1ce267":{"id":"ddm-latestsoftwareupdate_enforcelatestsoftwareupdateversion","displayName":"Enforce Latest Software Update Version","description":"If true, devices will upgrade to the latest OS version that is available for that device model. This uses the Software Update Enforcement configuration and will force devices to restart and install the update after the deadline passes.","helpText":null,"infoUrls":[],"categoryId":"15be55d8-7477-4274-9b09-b775bce68416","categoryName":"Software Update Enforce Latest","options":{"id":"ddm-latestsoftwareupdate_enforcelatestsoftwareupdateversion_0","displayName":"True","description":null,"helpText":null}},"2ecbd999ec3769eb":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2","displayName":"Configure Default consent","description":"This policy setting determines the default consent behavior of Windows Error Reporting.\r\n\r\nIf you enable this policy setting, you can set the default consent handling for error reports. The following list describes the Consent level settings that are available in the pull-down menu in this policy setting:\r\n\r\n- Always ask before sending data: Windows prompts users for consent to send reports.\r\n\r\n- Send parameters: Only the minimum data that is required to check for an existing solution is sent automatically, and Windows prompts users for consent to send any additional data that is requested by Microsoft.\r\n\r\n- Send parameters and safe additional data: the minimum data that is required to check for an existing solution, along with data which Windows has determined (within a high probability) does not contain personally-identifiable information is sent automatically, and Windows prompts the user for consent to send any additional data that is requested by Microsoft.\r\n\r\n- Send all data: any error reporting data requested by Microsoft is sent automatically.\r\n\r\nIf this policy setting is disabled or not configured, then the consent level defaults to the highest-privacy setting: Always ask before sending data.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werdefaultconsent-2"],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2_1","displayName":"Enabled","description":null,"helpText":null}]},"2edc2ae82146c9d2":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_purgeatlogoff","displayName":"At logoff, delete local copy of user’s offline files","description":"Deletes local copies of the user's offline files when the user logs off.\r\n\r\nThis setting specifies that automatically and manually cached offline files are retained only while the user is logged on to the computer. When the user logs off, the system deletes all local copies of offline files.\r\n\r\nIf you disable this setting or do not configure it, automatically and manually cached copies are retained on the user's computer for later offline use.\r\n\r\nCaution: Files are not synchronized before they are deleted. Any changes to local files since the last synchronization are lost.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-purgeatlogoff"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_purgeatlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_purgeatlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"2eab5fdca779b2c7":{"id":"device_vendor_msft_policy_config_admx_securitycenter_securitycenter_securitycenterindomain","displayName":"Turn on Security Center (Domain PCs only)","description":"This policy setting specifies whether Security Center is turned on or off for computers that are joined to an Active Directory domain. When Security Center is turned on, it monitors essential security settings and notifies the user when the computer might be at risk. The Security Center Control Panel category view also contains a status section, where the user can get recommendations to help increase the computer's security. When Security Center is not enabled on the domain, neither the notifications nor the Security Center status section are displayed. \r\n\r\nNote that Security Center can only be turned off for computers that are joined to a Windows domain. When a computer is not joined to a Windows domain, the policy setting will have no effect.\r\n\r\nIf you do not congifure this policy setting, the Security Center is turned off for domain members. \r\n\r\nIf you enable this policy setting, Security Center is turned on for all users. \r\n\r\nIf you disable this policy setting, Security Center is turned off for domain members.\r\n\r\nWindows XP SP2\r\n----------------------\r\nIn Windows XP SP2, the essential security settings that are monitored by Security Center include firewall, antivirus, and Automatic Updates. Note that Security Center might not be available following a change to this policy setting until after the computer is restarted for Windows XP SP2 computers. \r\n\r\nWindows Vista\r\n---------------------\r\nIn Windows Vista, this policy setting monitors essential security settings to include firewall, antivirus, antispyware, Internet security settings, User Account Control, and Automatic Updates. Windows Vista computers do not require a reboot for this policy setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-securitycenter#admx-securitycenter-securitycenter-securitycenterindomain"],"categoryId":"31d3b4c4-767e-403a-834c-51f3691bbf2b","categoryName":"Security Center","options":[{"id":"device_vendor_msft_policy_config_admx_securitycenter_securitycenter_securitycenterindomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_securitycenter_securitycenter_securitycenterindomain_1","displayName":"Enabled","description":null,"helpText":null}]},"2ee7fad01b4e1654":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_ts_color_depth","displayName":"Color Depth","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_ts_color_depth_999","displayName":"Client Compatible","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_ts_color_depth_2","displayName":"15 bit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_ts_color_depth_3","displayName":"16 bit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_ts_color_depth_4","displayName":"24 bit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_ts_color_depth_5","displayName":"32 bit","description":null,"helpText":null}]},"2e64f53b3a3641aa":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_user_refresh_unit_options","displayName":"User Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_user_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_user_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"2ef27e3c7bef13dc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled","displayName":"Set Google Chrome as Default Browser","description":"Setting the policy to True has Google Chrome always check whether it's the default browser on startup and, if possible, automatically register itself. Setting the policy to False stops Google Chrome from ever checking if it's the default and turns user controls off for this option.\r\n\r\nLeaving the policy unset means Google Chrome lets users control whether it's the default and, if not, whether user notifications should appear.\r\n\r\nNote: For Microsoft®Windows® administrators, turning this setting on only works for machines running Windows 7. For later versions, you must deploy a \"default application associations\" file that makes Google Chrome the handler for the https and http protocols (and, optionally, the ftp protocol and other file formats). See Chrome Help ( https://support.google.com/chrome?p=make_chrome_default_win ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2eaa05d524e06b21":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible","displayName":"Show cards on the New Tab Page","description":"This policy controls the visibility of cards on the New Tab Page. Cards surface entry points to launch common user journeys based on the user's browsing behavior.\r\n\r\nIf the policy is set to Enabled, the New Tab Page will show cards if content is available.\r\n\r\nIf the policy is set to Disabled, the New Tab Page won't show cards.\r\n\r\nIf the policy is not set, the user can control the card visibility. The default is visible.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"2eaad738aa947b36":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended","displayName":"Enable network prediction","description":"This policy controls network prediction in Google Chrome. It controls DNS prefetching, TCP, and SSL preconnection and prerendering of webpages.\r\n\r\nIf you set the policy, users can't change it. Leaving it unset turns on network prediction, but the user can change it.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"2e107821f140e789":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_relaunchnotificationperiod","displayName":"Time period (milliseconds): (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"2e3631f87fa97e5f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled","displayName":"Enable ending processes in Task Manager","description":"Setting the policy to Disabled prevents users from ending processes in the Task Manager.\r\n\r\nSetting the policy to Enabled or leaving it unset lets users end processes in the Task Manager.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2e1c1640ee746772":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls","displayName":"Block the Serial API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a serial port.\r\n\r\nLeaving the policy unset means DefaultSerialGuardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor URL patterns which do not match the policy SerialAskForUrls (if there is a match), DefaultSerialGuardSetting (if set), or the users' personal settings take precedence, in that order.\r\n\r\nURL patterns can't conflict with SerialAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"2e182930ecce73a2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled","displayName":"Control the User-Agent Client Hints feature.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2e2e9da325e8ae0b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended","displayName":"Keep browsing data when creating enterprise profile by default","description":"If this policy is Enabled, the option to keep any existing browsing data when creating an enterprise profile will be checked by default.\r\n\r\nIf this policy is unset or Disabled, the option to keep any existing browsing data when creating an enterprise profile will not be checked by default.\r\n\r\nRegardless of the value, the user will be able to decide whether or not to keep any existing browsing data when creating an enterprise profile.\r\n\r\nThis policy has no effect if the option to keep existing browsing data is not available; this happens if enterprise profile separation is strictly enforced, or if the data would be from an already managed profile.\r\n","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"2e75a7958c1a6664":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled","displayName":"Enable sharing user credentials with other users","description":"Setting the policy to Enabled lets users send to and receive from family members (according to Family Service) their passwords.\r\nWhen the policy is Enabled or not set, there is a button in the Password Manager allowing to send a password.\r\nThe received passwords are stored into user's account and are available in the Password Manager.\r\n\r\nSetting the policy to Disabled means users can't send passwords from Password Manager to other users, and can't receive passwords from other users.\r\n\r\nThe feature is not available if synchronization of Passwords is turned off (either via user settings or SyncDisabled policy is Enabled).\r\n\r\nManaged accounts aren't eligible to join or create a family group and therefore cannot share passwords.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2eb9a07eb8f5f135":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallyencryptsecurechanneldatawhenpossible","displayName":"Domain Member Digitally Encrypt Secure Channel Data When Possible","description":"Domain member: Digitally encrypt secure channel data (when possible) This security setting determines whether a domain member attempts to negotiate encryption for all secure channel traffic that it initiates. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup etc. This setting determines whether or not the domain member attempts to negotiate encryption for all secure channel traffic that it initiates. If enabled, the domain member will request encryption of all secure channel traffic. If the domain controller supports encryption of all secure channel traffic, then all secure channel traffic will be encrypted. Otherwise only logon information transmitted over the secure channel will be encrypted. If this setting is disabled, then the domain member will not attempt to negotiate secure channel encryption. Default: Enabled. Important There is no known reason for disabling this setting. Besides unnecessarily reducing the potential confidentiality level of the secure channel, disabling this setting may unnecessarily reduce secure channel throughput, because concurrent API calls that use the secure channel are only possible when the secure channel is signed or encrypted. Note: Domain controllers are also domain members and establish secure channels with other domain controllers in the same domain as well as domain controllers in trusted domains.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_digitallyencryptsecurechanneldatawhenpossible"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"2e65c98283c50874":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled","displayName":"Enable User Web App Install From Browser","description":"This policy controls whether users can install web apps through Microsoft Edge.\r\nIf you enable or don’t configure this policy, users can install web apps through the browser.\r\nIf you disable this policy, users can’t install web apps through the browser, and the \"apps\" data type is excluded from synchronization.\r\nThis policy doesn't support dynamic refresh. Changes to this policy, whether enabled, disabled, or not configured, take effect only after the browser is restarted.\r\nThis policy doesn't affect the 'WebAppInstallForceList' policy. Web apps specified by that policy are installed regardless of this policy setting.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2e79023a1c833ba8":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers","displayName":"Prefer specific encryption cipher algorithms for TLS","description":"This policy configures Microsoft Edge to order its preferred encryption ciphers in TLS 1.3 based on algorithms approved by a specific compliance regime.\r\n\r\nSetting this policy does not guarantee that any specific algorithms will be negotiated.\r\n\r\nThis policy allows server operators who support both compliant and non-compliant clients to differentiate between them, and use certain non-default algorithms with increased cryptographic strength only for clients explicitly configured to prefer them.\r\n\r\nSetting the policy to 'cnsa' configures Microsoft Edge to prefer ciphers required for compliance with the Commercial National Security Algorithm Suite versions 1.0 and 2.0 (CNSA 1.0 and 2.0).\r\n\r\nNot setting the policy, or setting it to 'default', configures Microsoft Edge to use its default ciphers.\r\n\r\nSetting this policy isn't required for security. The default cryptography used by Microsoft Edge is strong enough to withstand a brute-force attack using the entire power of the Sun.\r\n\r\nSetting this policy will cause Microsoft Edge to be slower when accessing websites.\r\n\r\nThis policy only affects TLS 1.3 and QUIC. It doesn't affect earlier versions of TLS.\r\n\r\nPolicy options mapping:\r\n\r\n* CNSA (cnsa) = Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0\r\n\r\n* Default (default) = Use Microsoft Edge's default cipher order\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: cnsa","helpText":"","infoUrls":[],"categoryId":"120b24dd-c04a-4291-8f24-9c48fcdc1434","categoryName":"Cryptography compliance policies","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_1","displayName":"Enabled","description":null,"helpText":null}]},"2e3e6cd0a761a886":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms","displayName":"Prefer specific key exchange algorithms for TLS (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"120b24dd-c04a-4291-8f24-9c48fcdc1434","categoryName":"Cryptography compliance policies","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms_cnsa2","displayName":"Prefer key exchange methods satisfying the requirements of CNSA 2.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms_default","displayName":"Use Microsoft Edge's default supported groups","description":null,"helpText":null}]},"2ebf1e03e8ec9d41":{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action to take on Microsoft Edge startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_6","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},"2e54f48d3e185b78":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_addressbarmicrosoftsearchinbingproviderenabled","displayName":"Enable Microsoft Search in Bing suggestions in the address bar","description":"Enables the display of relevant Microsoft Search in Bing suggestions in the address bar's suggestion list when the user types a search string in the address bar. If you enable or don't configure this policy, users can see internal results powered by Microsoft Search in Bing in the Microsoft Edge address bar suggestion list. To see the Microsoft Search in Bing results, the user must be signed into Microsoft Edge with their Azure AD account for that organization.\r\nIf you disable this policy, users can't see internal results in the Microsoft Edge address bar suggestion list.\r\nIf you have enabled the set of policies which forces a default search provider ('DefaultSearchProviderEnabled' (Enable the default search provider), 'DefaultSearchProviderName' (Default search provider name) and 'DefaultSearchProviderSearchURL' (Default search provider search URL)), and the search provider specified is not Bing, then this policy is not applicable and there will be no Microsoft Search in Bing suggestions in the address bar's suggestion list.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_addressbarmicrosoftsearchinbingproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_addressbarmicrosoftsearchinbingproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2ef81a59a366235f":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior","displayName":"Intranet Redirection Behavior","description":"This policy configures behavior for intranet redirection via DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nIf this policy isn't configured, the browser will use the default behavior of DNS interception checks and intranet redirect suggestions. In M88, they are enabled by default but will be disabled by default in the future release.\r\n\r\n'DNSInterceptionChecksEnabled' (DNS interception checks enabled) is a related policy that might also disable DNS interception checks. However, this policy is a more flexible version which might separately control intranet redirection infobars and might be expanded in the future.\r\nIf either 'DNSInterceptionChecksEnabled' or this policy make a request to disable interception checks, the checks will be disabled.\r\nIf DNS interception checks are disabled by this policy but 'GoToIntranetSiteForSingleWordEntryInAddressBar' (Force direct intranet site navigation instead of searching on single word entries in the Address Bar) is enabled, single word queries will still result in intranet navigations.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Use default browser behavior.\r\n\r\n* DisableInterceptionChecksDisableInfobar (1) = Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\r\n\r\n* DisableInterceptionChecksEnableInfobar (2) = Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.\r\n\r\n* EnableInterceptionChecksEnableInfobar (3) = Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"2e97dcc2c4dcde5a":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow","displayName":"Set the time interval for relaunch","description":"Specifies a target time window for the end of the relaunch notification period.\r\n\r\nUsers are notified of the need for a browser relaunch or device restart based on the 'RelaunchNotification' (Notify a user that a browser restart is recommended or required for pending updates) and 'RelaunchNotificationPeriod' (Set the time period for update notifications) policy settings. Browsers and devices are forcibly restarted at the end of the notification period when the 'RelaunchNotification' policy is set to 'Required'. This RelaunchWindow policy can be used to defer the end of the notification period so that it falls within a specific time window.\r\n\r\nIf you don't configure this policy, the default target time window is the whole day (i.e., the end of the notification period is never deferred).\r\n\r\nNote: Though the policy can accept multiple items in entries, all but the first item are ignored.\r\nWarning: Setting this policy may delay application of software updates.\r\n\r\nExample value:\r\n\r\n{\r\n \"entries\": [\r\n {\r\n \"duration_mins\": 240,\r\n \"start\": {\r\n \"hour\": 2,\r\n \"minute\": 15\r\n }\r\n }\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"entries\": [{\"duration_mins\": 240, \"start\": {\"hour\": 2, \"minute\": 15}}]}","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_1","displayName":"Enabled","description":null,"helpText":null}]},"2ef96f7998f9a7a8":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mspubexe170","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mspubexe170_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mspubexe170_1","displayName":"True","description":null,"helpText":null}]},"2e80cfbf11e3aedc":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_contactsupport_checkbox","displayName":"Contact OneDrive Support​ (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_contactsupport_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_contactsupport_checkbox_1","displayName":"True","description":null,"helpText":null}]},"2e0648ec6329f4ae":{"id":"device_vendor_msft_policy_config_search_allowindexingencryptedstoresoritems","displayName":"Allow Indexing Encrypted Stores Or Items","description":"Allows or disallows the indexing of items. This switch is for the Windows Search Indexer, which controls whether it will index items that are encrypted, such as the Windows Information Protection (WIP) protected files. When the policy is enabled, WIP protected items are indexed and the metadata about them are stored in an unencrypted location. The metadata includes things like file path and date modified. When the policy is disabled, the WIP protected items are not indexed and do not show up in the results in Cortana or file explorer. There may also be a performance impact on photos and Groove apps if there are a lot of WIP protected media files on the device. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowindexingencryptedstoresoritems"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_allowindexingencryptedstoresoritems_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowindexingencryptedstoresoritems_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"2eac911a41d9bd7d":{"id":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage","displayName":"Allow Remove Provisioning Package","description":"Specifies whether to allow the runtime configuration agent to remove provisioning packages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#allowremoveprovisioningpackage"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"2e69f49199e07f3b":{"id":"safari_privacy_permissiondefaults_generickey_organizationjustification","displayName":"Organization Justification","description":"Text that clearly explains to the Safari user the reason why the organization requires these website privacy permission defaults. Safari includes this text in the permission consent prompt it displays when it first displays the website.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"2e86e9c4da86c65b":{"id":"settings_item_diagnosticsubmission","displayName":"Diagnostic Submission","description":"A dictionary that contains diagnostic submission settings. This setting is available only for Shared iPad in iOS 9.3 and later.","helpText":null,"infoUrls":[],"categoryId":"99d68d97-63b7-4f49-83dd-1ad3b3281d0d","categoryName":"Diagnostic Submission","options":null},"2eaf15d8ea266aa6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_datecolon16","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"2e8c18e32b1ae754":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_pathcolon39","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"2ecb2368b95d5c58":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidatechs","displayName":"Turn on cloud candidate for CHS (User)","description":"This policy setting controls the cloud candidates feature, which uses an online service to provide input suggestions that don't exist in a PC's local dictionary.\r\n\r\nIf you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the suggestions, and the user won't be able to turn it off.\r\n\r\nIf you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on.\r\n\r\nIf you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the cloud candidates feature.\r\n\r\nThis Policy setting applies only to Microsoft CHS Pinyin IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoncloudcandidatechs"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidatechs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidatechs_1","displayName":"Enabled","description":null,"helpText":null}]},"2e4f250b22b15420":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_snmp","displayName":"SNMP (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-snmp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_snmp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_snmp_1","displayName":"Enabled","description":null,"helpText":null}]},"2eab8f358d8bdbbd":{"id":"user_vendor_msft_policy_config_admx_startmenu_nousernameonstartmenu","displayName":"Remove user name from Start Menu (User)","description":"This policy setting allows you to remove the user name label from the Start Menu in Windows XP and Windows Server 2003.\r\n\r\nIf you enable this policy setting, the user name label is removed from the Start Menu in Windows XP and Windows Server 2003.\r\n\r\nTo remove the user name folder on Windows Vista, set the \"Remove user folder link from Start Menu\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the user name label appears on the Start Menu in Windows XP and Windows Server 2003.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nousernameonstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nousernameonstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nousernameonstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"2e6afeaf4ffe5681":{"id":"user_vendor_msft_policy_config_admx_startmenu_nowindowsupdate","displayName":"Remove links and access to Windows Update (User)","description":"This policy setting allows you to remove links and access to Windows Update.\r\n\r\nIf you enable this policy setting, users are prevented from connecting to the Windows Update Web site.\r\n\r\nEnabling this policy setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the policy setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.\r\n\r\nWindows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.\r\n\r\nIf you disable or do not configure this policy setting, the Windows Update hyperlink is available from the Start menu and from the Tools menu in Internet Explorer.\r\n\r\nAlso, see the \"Hide the \"Add programs from Microsoft\" option\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nowindowsupdate"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nowindowsupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nowindowsupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"2e0d8d71fe666b99":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup","displayName":"Publisher 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Publisher 2016.\r\nMicrosoft Publisher 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Publisher 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Publisher 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016publisherbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"2ef78f11c36f494c":{"id":"user_vendor_msft_policy_config_browser_configurekioskresetafteridletimeout","displayName":"Configure Kiosk Reset After Idle Timeout (User)","description":"You can configure Microsoft Edge to reset to the configured start experience after a specified amount of idle time. The reset timer begins after the last user interaction. Resetting to the configured start experience deletes the current user’s browsing data. If enabled, you can set the idle time in minutes (0-1440). You must set the Configure kiosk mode policy to 1 and configure Microsoft Edge in assigned access as a single app for this policy to work. Once the idle time meets the time specified, a confirmation message prompts the user to continue, and if no user action, Microsoft Edge resets after 30 seconds. If you set this policy to 0, Microsoft Edge does not use an idle timer. If disabled or not configured, the default value is 5 minutes. If you do not configure Microsoft Edge in assigned access, then this policy does not take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurekioskresetafteridletimeout"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"2ea6e9579676308b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks","displayName":"Enable online OCSP/CRL checks (User)","description":"Setting the policy to True means online OCSP/CRL checks are performed.\r\n\r\nSetting the policy to False or leaving it unset means Google Chrome won't perform online revocation checks in Google Chrome 19 and later.\r\n\r\nNote: OCSP/CRL checks provide no effective security benefit.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks_1","displayName":"Enabled","description":null,"helpText":null}]},"2ea3d7f61c5e9b5b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls","displayName":"URLs for which local IPs are exposed in WebRTC ICE candidates (User)","description":"Patterns in this list will be matched against the security origin of the requesting URL.\r\nIf a match is found or chrome://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, the local IP addresses are shown in WebRTC ICE candidates.\r\nOtherwise, local IP addresses are concealed with mDNS hostnames.\r\nPlease note that this policy weakens the protection of local IPs if needed by administrators.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n*example.com*","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"2e46cb58e048cd14":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_authschemes","displayName":"Supported authentication schemes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":null},"2ee9d8e3092c06c8":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled","displayName":"Data URL support for SVGUseElement. (User)","description":"This policy enables Data URL support for SVGUseElement, which will be disabled\r\nby default starting in M119.\r\nIf this policy is set to Enabled, Data URLs will continue to work in SVGUseElement.\r\nIf this policy is set to Disabled or not set, Data URLs won't work in SVGUseElement.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2e579783fd24b30b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction","displayName":"Enable or disable the User-Agent Reduction. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction_0","displayName":"Reduced User Agent.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction_1","displayName":"Full (legacy) User Agent.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction_2","displayName":"Reduced User Agent.","description":null,"helpText":null}]},"2e8e3b22cbbbd7c8":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation_l_alternatestartupfilelocation86","displayName":"Alternate startup file location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":null},"2e5aa86ace342785":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"2e8b585fa2046229":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook","displayName":"Turn off Protected View for attachments opened from Outlook (User)","description":"This policy setting allows you to determine if Excel files in Outlook attachments open in Protected View.\r\n\r\nIf you enable this policy setting, Outlook attachments do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, Outlook attachments open in Protected View.","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"2e2e1fdce1e5b012":{"id":"user_vendor_msft_policy_config_internetexplorer_allowautocomplete_chkbox_passwordask","displayName":"Prompt me to save passwords (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowautocomplete_chkbox_passwordask_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowautocomplete_chkbox_passwordask_1","displayName":"True","description":null,"helpText":null}]},"2ef9749867092f20":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist","displayName":"Site to Zone Assignment List (User)","description":"This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security settings that apply to all of the sites in the zone.\n\nInternet Explorer has 4 security zones, numbered 1-4, and these are used by this policy setting to associate sites to zones. They are: (1) Intranet zone, (2) Trusted Sites zone, (3) Internet zone, and (4) Restricted Sites zone. Security settings can be set for each of these zones through other policy settings, and their default settings are: Trusted Sites zone (Low template), Intranet zone (Medium-Low template), Internet zone (Medium template), and Restricted Sites zone (High template). (The Local Machine zone and its locked down equivalent have special security settings that protect your local computer.)\n\nIf you enable this policy setting, you can enter a list of sites and their related zone numbers. The association of a site with a zone will ensure that the security settings for the specified zone are applied to the site.  For each entry that you add to the list, enter the following information:\n\nValuename – A host for an intranet site, or a fully qualified domain name for other sites. The valuename may also include a specific protocol. For example, if you enter http://www.contoso.com as the valuename, other protocols are not affected. If you enter just www.contoso.com, then all protocols are affected for that site, including http, https, ftp, and so on. The site may also be expressed as an IP address (e.g., 127.0.0.1) or range (e.g., 127.0.0.1-10). To avoid creating conflicting policies, do not include additional characters after the domain such as trailing slashes or URL path. For example, policy settings for www.contoso.com and www.contoso.com/mail would be treated as the same policy setting by Internet Explorer, and would therefore be in conflict.\n\nValue - A number indicating the zone with which this site should be associated for security settings. The Internet Explorer zones described above are 1-4.\n\nIf you disable or do not configure this policy, users may choose their own site-to-zone assignments.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsitetozoneassignmentlist"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_1","displayName":"Enabled","description":null,"helpText":null}]},"2e3860c7b315165a":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe","displayName":"Launching applications and files in an IFRAME (User)","description":"This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.\n\nIf you enable this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.\n\nIf you disable this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.\n\nIf you do not configure this policy setting, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonelaunchingapplicationsandfilesiniframe"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_1","displayName":"Enabled","description":null,"helpText":null}]},"2e064ee32535e62a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block dangerous downloads","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block potentially dangerous downloads","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null}]},"2eee853a8c15c11b":{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions","displayName":"Allow download restrictions (User)","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known or potentially dangerous downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockAllDownloads' to block all downloads.\r\n\r\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\r\n\r\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\nPolicy options mapping:\r\n\r\n* DefaultDownloadSecurity (0) = No special restrictions\r\n\r\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\r\n\r\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\r\n\r\n* BlockAllDownloads (3) = Block all downloads\r\n\r\n* BlockMaliciousDownloads (4) = Block malicious downloads\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"2eb0c3a134534efa":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_edgesidebarappurlhostforcelistdesc","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"2e9abcf162edd87d":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal","displayName":"Allow pages to send synchronous XHR requests during page dismissal (User)","description":"This policy lets you specify that a page can send synchronous XHR requests during page dismissal.\r\n\r\nIf you enable this policy, pages can send synchronous XHR requests during page dismissal.\r\n\r\nIf you disable this policy or don't configure this policy, pages aren't allowed to send synchronous XHR requests during page dismissal.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal_1","displayName":"Enabled","description":null,"helpText":null}]},"2e034c61c4be8b44":{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled","displayName":"Application Guard Traffic Identification (User)","description":"If you enable or don't configure this policy, Application Guard will add an extra HTTP header (X-MS-ApplicationGuard-Initiated) to all outbound HTTP requests made from the Application Guard container.\r\n\r\nIf you disable this policy, the extra header is not added to the traffic.","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2e20d9af6820f9da":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled","displayName":"Specifies whether WebAssembly modules can be sent cross-origin (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 98.\r\n\r\nSpecifies whether WebAssembly modules can be sent to another window or worker cross-origin. Cross-origin WebAssembly module sharing was deprecated as part of the efforts to deprecate document.domain, see https://github.com/mikewest/deprecating-document-domain. This policy allowed re-enabling of cross-origin WebAssembly module sharing. This policy is obsolete because it was intended to offer a longer transition period in the deprecation process.\r\n\r\nIf you enable this policy, sites can send WebAssembly modules cross-origin\r\nwithout restrictions.\r\n\r\nIf you disable or don't configure this policy, sites can only send\r\nWebAssembly modules to windows and workers in the same origin.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2e1ce242e7dc54cc":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode","displayName":"Print PostScript Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode_1","displayName":"Type42","description":null,"helpText":null}]},"2ed733f83de374cd":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled","displayName":"Force WebSQL in third-party contexts to be re-enabled (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 100.\r\n\r\nThis policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content when it's found to be incompatible with the change to disable WebSQL in third-party contexts. It doesn't work in Microsoft Edge after version 100.\r\n\r\nWebSQL in third-party contexts (for example, cross-site iframes) is off by default as of Microsoft Edge version 97 and was fully removed in version 101.\r\n\r\nIf you enable this policy, WebSQL in third-party contexts will be re-enabled.\r\n\r\nIf you disable this policy or don't configure it, WebSQL in third-party contexts will stay off.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2e34e553096628cf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_disabledefaultservice","displayName":"Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word (User)","description":"This policy setting allows you to remove Office Presentation Service from the list of online presentation services in PowerPoint and Word. This list appears when a user selects Present Online from the Share tab in Backstage view and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, Office Presentation Service is not shown as an option for presenting online. \r\n\r\nIf you disable or do not configure this policy setting, users can select Office Presentation Service to present their PowerPoint or Word file to other users online.","helpText":"","infoUrls":[],"categoryId":"5bf4c2ba-be08-4cda-bf33-d10707580d78","categoryName":"Present Online","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_disabledefaultservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_disabledefaultservice_1","displayName":"Enabled","description":null,"helpText":null}]},"2ef82b2577a3399b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastservicesharednotescustomurl5","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"2e197b600667afdc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceprofile","displayName":"Replace MAPI - Profile (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"profile\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"profile\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"2e726f7b7f41009c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuionenote","displayName":"Disallow in OneNote (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuionenote_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuionenote_1","displayName":"True","description":null,"helpText":null}]},"2e36c98a4d5a21da":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicoman","displayName":"Arabic (Oman) (User)","description":"Enables the editing language Arabic (Oman)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicoman_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicoman_1","displayName":"Enabled","description":null,"helpText":null}]},"2e5715d84667b2f5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishcostarica","displayName":"Spanish (Costa Rica) (User)","description":"Enables the editing language Spanish (Costa Rica)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishcostarica_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishcostarica_1","displayName":"Enabled","description":null,"helpText":null}]},"2eee9a89711cd644":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog08","displayName":"Trusted Catalog Location #8 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog08_1","displayName":"Enabled","description":null,"helpText":null}]},"2ee912d270ecfa38":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofdaystoscanfromtodaytodetermine","displayName":"Maximum number of days to scan from today to determine the user's colleagues for recommendation (User)","description":"The maximum number of days to scan the Outlook mailbox to determine the colleagues the user has. The larger the number, the more accurate the recommendation. The smaller the number, the faster the recommendations are generated.","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofdaystoscanfromtodaytodetermine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofdaystoscanfromtodaytodetermine_1","displayName":"Enabled","description":null,"helpText":null}]},"2e55b5c068e5d5ba":{"id":"user_vendor_msft_policy_config_office16v22~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablelastmileinappmessaging","displayName":"Disable Last-Mile In-App Messages (User)","description":"This policy setting prevents Office from displaying bizbar messages to the user about last-mile (environmental) issues affecting their experience.\r\n\r\nIf you disable or don’t configure this policy setting, Office will display last-mile messages by default as they are encountered.\r\n\r\nIf you enable this policy setting, Office will not display the configured last-mile in-app messages when they are encountered.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v22~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablelastmileinappmessaging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v22~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablelastmileinappmessaging_1","displayName":"Enabled","description":null,"helpText":null}]},"2ead5713cfd0e676":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting~l_messageformat_l_messageformateditor_l_usethefollowingformateditorforemailmessages","displayName":"Use the following format for e-mail messages: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"25df12bc-5ebd-4db2-8930-5d27690f3e60","categoryName":"Message Format","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting~l_messageformat_l_messageformateditor_l_usethefollowingformateditorforemailmessages_131072","displayName":"HTML","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting~l_messageformat_l_messageformateditor_l_usethefollowingformateditorforemailmessages_196608","displayName":"Rich Text","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting~l_messageformat_l_messageformateditor_l_usethefollowingformateditorforemailmessages_65536","displayName":"Plain Text","description":null,"helpText":null}]},"2e6603b2c6850a56":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingpresentationsallowprogrammaticaccess","displayName":"Stop checking to ensure presentations allow programmatic access (User)","description":"This policy setting prevents the Accessibility Checker from checking to ensure that presentations have not blocked programmatic access through DRM.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking to ensure that presentations have not blocked programmatic access through DRM.\r\n\r\nIf you disable or do not configure this policy setting, presentations will be checked for programmatic access and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingpresentationsallowprogrammaticaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingpresentationsallowprogrammaticaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"2e1ecfae7c07ee08":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid","displayName":"Cipher key length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":null},"2e12708f9a46f171":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27","displayName":"Baseline for Earned Value calculations (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acbc106b-796a-4ba3-ab5f-c130530ad455","categoryName":"Earned Value options for Project1","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_1","displayName":"Baseline","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_12","displayName":"Baseline 1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_13","displayName":"Baseline 2","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_14","displayName":"Baseline 3","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_15","displayName":"Baseline 4","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_16","displayName":"Baseline 5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_17","displayName":"Baseline 6","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_18","displayName":"Baseline 7","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_19","displayName":"Baseline 8","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_20","displayName":"Baseline 9","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_l_pjevbaseline27_21","displayName":"Baseline 10","description":null,"helpText":null}]},"2e915455ac5dba2c":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperweek","displayName":"Hours per week (User)","description":"Specifies the number of hours that you want Project to assign to a task when the user enters a duration of one week.\r\n\r\nIf you enable this setting, week-long tasks will be assigned the number of hours that you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperweek_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperweek_1","displayName":"Enabled","description":null,"helpText":null}]},"2e2a95177bfda1d7":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09_l_descriptioncolon42","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"2e6058240008774b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_stencilwindowscreentips","displayName":"Stencil window ScreenTips (User)","description":"Specifies whether ScreenTips (ScreenTips: Tips that appear when you pause the pointer over certain elements in the Visio program, including: masters on stencils, toolbar buttons, and the ruler) appear in Visio to help you identify shapes in the stencil window.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_stencilwindowscreentips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_stencilwindowscreentips_1","displayName":"Enabled","description":null,"helpText":null}]},"2e7e64211086efbc":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_datecolon77","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/2f.json b/public/intune-definitions/2f.json new file mode 100644 index 000000000000..bc58bbbfdc8d --- /dev/null +++ b/public/intune-definitions/2f.json @@ -0,0 +1 @@ +{"2f22168bea839d13":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev_part_targetversionprefix","displayName":"Target version (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":null},"2f9434021ffb0a03":{"id":"ade_setupassistant_appstore","displayName":"App Store","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_appstore_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_appstore_1","displayName":"Show","description":null,"helpText":null}]},"2f7df40be61a0f7f":{"id":"ade_setupassistant_watchmigration","displayName":"Watch migration","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_watchmigration_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_watchmigration_1","displayName":"Show","description":null,"helpText":null}]},"2fb10aae7c741b42":{"id":"com.apple.applicationaccess_allowpersonalhotspotmodification","displayName":"Allow Personal Hotspot Modification","description":"If false, disables modifications of the personal hotspot setting. Requires a supervised device. Available in iOS 12.2 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpersonalhotspotmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpersonalhotspotmodification_true","displayName":"True","description":null,"helpText":null}]},"2fda7e1f186c8e1a":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_secondsperday","displayName":"Seconds Per Day","description":"The allowance for that day, in seconds. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"2f8365e946b6653c":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_lcid","displayName":"Microsoft OneNote LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"2fd6db57d92496fa":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app","displayName":"Microsoft Outlook","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"2fa5752e483d0384":{"id":"com.apple.managedclient.preferences_disallowedthreatactions","displayName":"Disallowed threat actions","description":"Restricts the actions that the local user of a device can take when threats are detected. The actions included in this list are not displayed in the user interface.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#disallowed-threat-actions"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"2fb39fd9f846a876":{"id":"com.apple.managedclient.preferences_downloadrestrictions","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\n\nSet 'Block dangerous downloads' (1) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings.\n\nSet 'Block potentially dangerous downloads' (2) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous downloads.\n\nSet 'Block all downloads' (3) to block all downloads.\n\nIf you don't configure this policy or set the 'No special restrictions' (0) option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\n\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\n\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\n\n* 0 = No special restrictions\n\n* 1 = Block dangerous downloads\n\n* 2 = Block potentially dangerous downloads\n\n* 3 = Block all downloads","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#downloadrestrictions"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_downloadrestrictions_1","displayName":"Block dangerous downloads","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_downloadrestrictions_2","displayName":"Block potentially dangerous downloads","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_downloadrestrictions_4","displayName":"Block malicious downloads","description":null,"helpText":null}]},"2f1bd92178d42462":{"id":"com.apple.managedclient.preferences_edgesidebarappurlhostallowlist","displayName":"Allow specific apps to be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that are not subject to the \"EdgeSidebarAppUrlHostBlockList\".\n\nIf you don't configure this policy, a user can open any app in sidebar except the urls listed in \"EdgeSidebarAppUrlHostBlockList\".\n\nIf you configure this policy, the apps listed in the allow list could be opened in sidebar even if they are listed in the block list.\n\nBy default, all apps are allowed. However, if you prohibited apps by policy, you can use the list of allowed apps to change that policy.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgesidebarappurlhostallowlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"2f3de2fce758f2e9":{"id":"com.apple.managedclient.preferences_importhomepage","displayName":"Allow importing of home page settings","description":"Allows users to import their home page setting from another browser into Microsoft Edge.\n\nIf you enable this policy, the option to manually import the home page setting is automatically selected.\n\nIf you disable this policy, the home page setting isn’t imported at first run, and users can’t import it manually.\n\nIf you don’t configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importhomepage"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importhomepage_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importhomepage_true","displayName":"Enabled","description":null,"helpText":null}]},"2fa1e6f09d1396fb":{"id":"com.apple.managedclient.preferences_ntlmv2enabled","displayName":"Control whether NTLMv2 authentication is enabled","description":"Controls whether NTLMv2 is enabled.\n\nAll recent versions of Samba and Windows servers support NTLMv2. You should only disable NTLMv2 to address issues with backwards compatibility as it reduces the security of authentication.\n\nIf you don't configure this policy, NTLMv2 is enabled by default.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#ntlmv2enabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_ntlmv2enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_ntlmv2enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"2fe00083d8a1e975":{"id":"com.apple.managedclient.preferences_searchinsidebarenabled","displayName":"Search in Sidebar enabled","description":"Search in Sidebar allows users to open search result in sidebar (including sidebar search for Progressive Web Apps).\n\nIf you configure this policy to 'EnableSearchInSidebar' or don't configure it, Search in sidebar will be enabled.\n\nIf you configure this policy to 'DisableSearchInSidebarForKidsMode', Search in sidebar will be disabled when in Kids mode. Some methods that would normally invoke sidebar search will invoke a traditional search instead.\n\nIf you configure this policy to 'DisableSearchInSidebar', Search in sidebar will be disabled. Some methods that would normally invoke sidebar search will invoke a traditional search instead.\n\nPolicy options mapping:\n\n* EnableSearchInSidebar (0) = Enable search in sidebar\n\n* DisableSearchInSidebarForKidsMode (1) = Disable search in sidebar for Kids Mode\n\n* DisableSearchInSidebar (2) = Disable search in sidebar\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#searchinsidebarenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_searchinsidebarenabled_0","displayName":"Enable search in sidebar","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_searchinsidebarenabled_1","displayName":"Disable search in sidebar for Kids Mode","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_searchinsidebarenabled_2","displayName":"Disable search in sidebar","description":null,"helpText":null}]},"2fee5946b9d6877c":{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"2fbdba0908daa6b5":{"id":"com.apple.xsan.preferences_com.apple.xsan.preferences","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"fd3717c1-dcf8-4038-b7f7-4ad3359a9d32","categoryName":"Xsan Preferences","options":null},"2f370785c7d0a761":{"id":"com.microsoft.edge.mamedgeappconfigsettings.fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown","description":"Controls the duration (in seconds) that keepalive requests are allowed to prevent the browser from completing its shutdown.\n\nIf you configure this policy, the browser blocks completing shutdown while it processes any outstanding keepalive requests (see https://fetch.spec.whatwg.org/#request-keepalive-flag) up to the maximum period of time specified by this policy.\n\nIf you disable or don't configure this policy, the default value of 0 seconds is used, and the outstanding keepalive requests are immediately cancelled during browser shutdown.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"2f367bc2f8a4a381":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger","description":"Allows you to control when to trigger password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\n\nYou can use the \"PasswordProtectionLoginURLs\" and \"PasswordProtectionChangePasswordURL\" policies to configure which passwords to protect.\n\nExemptions: Passwords for the sites listed in \"PasswordProtectionLoginURLs\" and \"PasswordProtectionChangePasswordURL\", and for the sites listed in \"SmartScreenAllowListDomains\", don't trigger a password-protection warning.\n\nSet to PasswordProtectionWarningOff to not show password protection warnings.\n\nSet to PasswordProtectionWarningOnPasswordReuse to show password protection warnings when the users reuse their protected password on a non-allowlisted site.\n\nIf you disable or don't configure this policy, then the warning trigger isn't shown.\n\nPolicy options mapping:\n\n* PasswordProtectionWarningOff (0) = Password protection warning is off\n\n* PasswordProtectionWarningOnPasswordReuse (1) = Password protection warning is triggered by password reuse\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionwarningtrigger_passwordprotectionwarningoff","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionwarningtrigger_passwordprotectionwarningonpasswordreuse","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null}]},"2f4bd8f63fe3cad6":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworkhighpriorityunit","displayName":"High Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworkhighpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworkhighpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworkhighpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"2fb1f4c78460210d":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto","displayName":"To","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursto_23","displayName":"11 PM","description":null,"helpText":null}]},"2f7c5c5d3264d752":{"id":"device_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_2","displayName":"Turn off access to the Store","description":"This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association.\r\n\r\nWhen a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Store service to find an application.\r\n\r\nIf you enable this policy setting, the \"Look for an app in the Store\" item in the Open With dialog is removed.\r\n\r\nIf you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellnousestoreopenwith-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_2_1","displayName":"Enabled","description":null,"helpText":null}]},"2ff50eedb7102d13":{"id":"device_vendor_msft_policy_config_admx_logon_dontenumerateconnectedusers","displayName":"Do not enumerate connected users on domain-joined computers","description":"This policy setting prevents connected users from being enumerated on domain-joined computers. \r\n\r\nIf you enable this policy setting, the Logon UI will not enumerate any connected users on domain-joined computers.\r\n\r\nIf you disable or do not configure this policy setting, connected users will be enumerated on domain-joined computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-dontenumerateconnectedusers"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_dontenumerateconnectedusers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_dontenumerateconnectedusers_1","displayName":"Enabled","description":null,"helpText":null}]},"2f4c06168fb5ec2d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_asronlyexclusions_exploitguard_asr_asronlyexclusions_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","categoryName":"Attack Surface Reduction","options":null},"2fdb52d4e816a719":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_noncriticaltimeout","displayName":"Configure time out for detections in non-critical failed state","description":"This policy setting configures the time in minutes before a detection in the \"non-critically failed\" state moves to the \"cleared\" state.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-noncriticaltimeout"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_noncriticaltimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_noncriticaltimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"2f1b7f3478fa5e0a":{"id":"device_vendor_msft_policy_config_admx_smartcard_integratedunblockpromptstring_integratedunblockpromptstring","displayName":"Display string when smart card is blocked","description":null,"helpText":"","infoUrls":[],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":null},"2fbfe90d9461893f":{"id":"device_vendor_msft_policy_config_admx_winsrv_allowblockingappsatshutdown","displayName":"Turn off automatic termination of applications that block or cancel shutdown","description":"This policy setting specifies whether Windows will allow console applications and GUI applications without visible top-level windows to block or cancel shutdown. By default, such applications are automatically terminated if they attempt to cancel shutdown or block it indefinitely.\r\n\r\nIf you enable this setting, console applications or GUI applications without visible top-level windows that block or cancel shutdown will not be automatically terminated during shutdown.\r\n\r\nIf you disable or do not configure this setting, these applications will be automatically terminated during shutdown, helping to ensure that Windows can shut down faster and more smoothly.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winsrv#admx-winsrv-allowblockingappsatshutdown"],"categoryId":"daf3f2c8-f6a5-40bd-96b3-2c6a28931614","categoryName":"Shutdown Options","options":[{"id":"device_vendor_msft_policy_config_admx_winsrv_allowblockingappsatshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_winsrv_allowblockingappsatshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},"2f0108efc82d6af0":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_photos","displayName":"Microsoft Photos **","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_photos_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_photos_1","displayName":"True","description":null,"helpText":null}]},"2f45bccc503b2318":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowreestablishmentinterval_streaming_reestablishment_interval_prompt","displayName":"Reestablishment Interval:","description":"","helpText":"","infoUrls":[],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":null},"2f12eff3369680f4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled","displayName":"Continue running background apps when Google Chrome is closed","description":"Setting the policy to Enabled turns background mode on. In background mode, a Google Chrome process is started on OS sign-in and keeps running when the last browser window is closed, allowing background apps and the browsing session to remain active. The background process displays an icon in the system tray and can always be closed from there.\r\n\r\nSetting the policy to Disabled turns background mode off.\r\n\r\nIf you set the policy, users can't change it in the browser settings. If unset, background mode is off at first, but users can change it.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2fc6676ee20bca41":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhomepage","displayName":"Import of homepage from default browser on first run","description":"Setting the policy to Enabled imports the homepage from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means the homepage isn't imported on first run.\r\n\r\nUsers can trigger an import dialog and the homepage checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"2f39346dcf7a43f3":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessallowedforurls_localnetworkaccessallowedforurlsdesc","displayName":"Allow sites to make requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":null},"2f4b211e352a9372":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_profileseparationdomainexceptionlistdesc","displayName":"Enterprise profile separation secondary domain allowlist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"f00e9baf-9bbf-48e4-aaac-57410730f016","categoryName":"Sign-in settings","options":null},"2fcbbbd7ddb23cbc":{"id":"device_vendor_msft_policy_config_devicelock_maxdevicepasswordfailedattempts","displayName":"Max Device Password Failed Attempts","description":"On a desktop, when the user reaches the value set by this policy, it is not wiped. Instead, the desktop is put on BitLocker recovery mode, which makes the data inaccessible but recoverable. If BitLocker is not enabled, then the policy cannot be enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#maxdevicepasswordfailedattempts"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"2fdeb31f04214554":{"id":"device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata","displayName":"Do not send additional data","description":"This policy setting controls whether additional data in support of error reports can be sent to Microsoft automatically.\n\nIf you enable this policy setting, any additional data requests from Microsoft in response to a Windows Error Reporting report are automatically declined, without notification to the user.\n\nIf you disable or do not configure this policy setting, then consent policy settings in Computer Configuration/Administrative Templates/Windows Components/Windows Error Reporting/Consent take precedence.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-donotsendadditionaldata"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata_1","displayName":"Enabled","description":null,"helpText":null}]},"2f2a5b3df8e3a1fd":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows","displayName":"Enable dragging of content from different domains across windows","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when both the source and destination are in different windows. Users cannot change this setting.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in different windows. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy or do not configure it, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1","displayName":"Enabled","description":null,"helpText":null}]},"2f216b0655542187":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneinitializeandscriptactivexcontrols"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"2fbdbf886192ff4c":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"2fa5b5e1606e4f3e":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszonejavapermissions"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"2f31ee4308182e21":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols","displayName":"Allow scripting of Internet Explorer WebBrowser controls","description":"This policy setting determines whether a page can control embedded WebBrowser controls via script.\n\nIf you enable this policy setting, script access to the WebBrowser control is allowed.\n\nIf you disable this policy setting, script access to the WebBrowser control is not allowed.\n\nIf you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"2f15e04a195ec417":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00","displayName":"Logon options","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"2fd245d35d82c602":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_restrictcdromaccesstolocallyloggedonuseronly","displayName":"Devices Restrict CDROM Access To Locally Logged On User Only","description":"Devices: Restrict CD-ROM access to locally logged-on user only This security setting determines whether a CD-ROM is accessible to both local and remote users simultaneously. If this policy is enabled, it allows only the interactively logged-on user to access removable CD-ROM media. If this policy is enabled and no one is logged on interactively, the CD-ROM can be accessed over the network. Default: This policy is not defined and CD-ROM access is not restricted to the locally logged-on user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_restrictcdromaccesstolocallyloggedonuseronly"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"2f1dcaa7df901413":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior","displayName":"Interactive Logon Smart Card Removal Behavior","description":"Interactive logon: Smart card removal behavior This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader. The options are: No Action Lock Workstation Force Logoff Disconnect if a Remote Desktop Services session Disconnect if a Remote Desktop Services session when no smart card is present, regardless of logon method If you click Lock Workstation in the Properties dialog box for this policy, the workstation is locked when the smart card is removed, allowing users to leave the area, take their smart card with them, and still maintain a protected session. If you click Force Logoff in the Properties dialog box for this policy, the user is automatically logged off when the smart card is removed. If you click Disconnect if a Remote Desktop Services session, removal of the smart card disconnects the session without logging the user off. This allows the user to insert the smart card and resume the session later, or at another smart card reader-equipped computer, without having to log on again. If the session is local, this policy functions identically to Lock Workstation. If you click Disconnect if a Remote Desktop Services session when no smart card is present, regardless of logon method, the Remote Desktop session is disconnected when no smart card is present in any smart card reader, regardless of how the user authenticated. This option monitors all smart card readers on the system, not only the reader used for logon. If the session is local, this policy functions identically to Lock Workstation. The local session will lock when the smart card is removed only if the user authenticated using a smart card. Note: Remote Desktop Services was called Terminal Services in previous versions of Windows Server. Default: This policy is not defined, which means that the system treats it as No action. On Windows Vista and above: For this setting to work, the Smart Card Removal Policy service must be started.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_smartcardremovalbehavior"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_0","displayName":"No Action","description":"No Action","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_1","displayName":"Lock Workstation","description":"Lock Workstation","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_2","displayName":"Force Logoff","description":"Force Logoff","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_3","displayName":"Disconnect Remote Desktop Session","description":"Disconnect Remote Desktop Session","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_4","displayName":"Disconnect if a Remote Desktop Services session when no smart card is present, regardless of logon method","description":"Disconnect if a Remote Desktop Services session when no smart card is present, regardless of logon method","helpText":null}]},"2faddc0a507ae66e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess","displayName":"Enable site isolation for every site","description":"\r\nThe 'SitePerProcess' policy can be used to prevent users from opting out of the default behavior of isolating all sites. Note that you can also use the 'IsolateOrigins' (Enable site isolation for specific origins) policy to isolate additional, finer-grained origins.\r\nIf you enable this policy, users can't opt out of the default behavior where each site runs in its own process.\r\nIf you disable or don’t configure this policy, a user can opt out of site isolation. (For example, by using \"Disable site isolation\" entry in edge://flags.) Disabling the policy or not configuring the policy doesn't turn off Site Isolation.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"2f28d93955e635ea":{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile","displayName":"Switch sites on the IE mode site list to a work profile","description":"Allows Microsoft Edge to switch to the appropriate profile when navigating to a site that matches an entry on the IE mode site list. Only sites that specify IE mode or Edge mode will be switched to the work profile.\r\n\r\nIf you enable or don't configure this policy, navigations to URLs matching a site on the IE mode site list will switch to the most recently used work profile if one exists.\r\n\r\nIf you disable this policy, navigations to URLs matching a site on the IE mode site list will remain in the current browser profile.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"2f664fe31be7f156":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended","displayName":"Specifies the search-by-image feature for the default search provider","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\r\n\r\nThis policy is optional. If you don't configure it, image search isn't available.\r\n\r\nSpecify Bing's Image Search URL as:\r\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\r\n\r\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\r\n\r\nSee 'DefaultSearchProviderImageURLPostParams' (Parameters for an image URL that uses POST) policy to finish configuring image search.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.\r\n\r\nExample value: https://search.contoso.com/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"2f4fbe7bacac2cf9":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_preventnetworktrafficpreusersignin","displayName":"Prevent the sync app from generating network traffic until users sign in","description":"This setting lets you block the OneDrive sync app (OneDrive.exe) from generating network traffic (checking for updates, etc.) until users sign in to the sync app or start syncing files to the computer.\r\n\r\nIf you enable this setting, users must sign in to the OneDrive sync app on the computer, or select to sync OneDrive or SharePoint files on the computer, for the sync app to start automatically.\r\n\r\nIf you disable or do not configure this setting, the OneDrive sync app will start automatically when users sign in to Windows.\r\n\r\nImportant: If you enable or disable this setting, and then change it back to Not Configured, the last configuration will remain in effect. ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_preventnetworktrafficpreusersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_preventnetworktrafficpreusersignin_1","displayName":"Enabled","description":null,"helpText":null}]},"2fbc2445da3f4923":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_sendfeedback_checkbox","displayName":"Send Feedback (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_sendfeedback_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_sendfeedback_checkbox_1","displayName":"True","description":null,"helpText":null}]},"2f2dace6c23ffd1a":{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_l_listofexternalconvertersppt","displayName":"List of external file format converters to customize (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"686ae3dd-a663-4484-854e-8f8d578fe3b8","categoryName":"Converters","options":null},"2f0d11d9dabc8fe2":{"id":"device_vendor_msft_policy_config_system_disablediagnosticdataviewer","displayName":"Disable Diagnostic Data Viewer","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disablediagnosticdataviewer"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_disablediagnosticdataviewer_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disablediagnosticdataviewer_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},"2f949b6785d4fdb7":{"id":"device_vendor_msft_policy_config_userrights_lockmemory","displayName":"Lock Memory","description":"This user right determines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk. Exercising this privilege could significantly affect system performance by decreasing the amount of available random access memory (RAM).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#lockmemory"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"2fdc2e517ffd8d41":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_pathcolon79","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"2ffc04ddb9f853e4":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project","displayName":"Microsoft Project 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Project 2013.\r\nBy default, the user settings of Microsoft Project 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013project"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project_1","displayName":"Enabled","description":null,"helpText":null}]},"2f8319845621256a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled","displayName":"Enable showing the welcome page on the first browser launch following OS upgrade (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2f4e3b6523cd4ae5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL. (User)","description":"Setting the policy sets the URL for users to change their password after seeing a warning in the browser. The password protection service sends users to the URL (HTTP and HTTPS protocols only) you designate through this policy. For Google Chrome to correctly capture the salted hash of the new password on this change password page, make sure your change password page follows these guidelines ( https://www.chromium.org/developers/design-documents/create-amazing-password-forms ).\r\n\r\nTurning the policy off or leaving it unset means the service sends users to https://myaccount.google.com to change their password.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://mydomain.com/change_password.html","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_1","displayName":"Enabled","description":null,"helpText":null}]},"2f6ffd941f8a43ad":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_screencaptureallowedbyoriginsdesc","displayName":"Allow Desktop, Window, and Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"2f81ecd7afcd8d11":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"2faf66b9fed4e31f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled","displayName":"Control Javascript setTimeout() function minimum timeout. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"2f8b5d120ba2f510":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"2fd1d3cd125135fc":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport","displayName":"Include non-standard port in Kerberos SPN (User)","description":"Specifies whether the generated Kerberos SPN should include a non-standard port.\r\n\r\nIf you enable this policy, and a user includes a non-standard port (a port other than 80 or 443) in a URL, that port is included in the generated Kerberos SPN.\r\n\r\nIf you don't configure or disable this policy, the generated Kerberos SPN won't include a port in any case.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_1","displayName":"Enabled","description":null,"helpText":null}]},"2f4aff3fa3af8239":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_importbrowsersettings","displayName":"Allow importing of browser settings (User)","description":"Allows users to import browser settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browser settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_importbrowsersettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_importbrowsersettings_1","displayName":"Enabled","description":null,"helpText":null}]},"2f7ab703c788c766":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationword","displayName":"[Deprecated] Don’t AutoSave files in Word (User)","description":"Important: This policy setting will be removed in a future release and will no longer be supported. Please use the \"Turn off AutoSave by default in Word\" policy setting instead.\r\n \r\nThis policy setting controls whether files can be AutoSaved in the desktop version of Word after Word has been updated with new features. By default, Auto Saving files is Enabled.\r\n\r\nIf you enable this policy setting files will not be able to be AutoSaved.\r\n\r\nIf you disable or don’t configure this policy setting files will be able to be AutoSaved.\r\n\r\nNote: There are separate policy settings for Word, Excel, and PowerPoint.\r\n ","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationword_1","displayName":"Enabled","description":null,"helpText":null}]},"2f6902853c5f1633":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastservicesharednotescustomurl3","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"2fb3eb1d25de3529":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_catalan","displayName":"Catalan (User)","description":"Enables the editing language Catalan","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_catalan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_catalan_1","displayName":"Enabled","description":null,"helpText":null}]},"2f3bce685798394f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization","displayName":"ActiveX Control Initialization (User)","description":"This policy setting specifies the Microsoft ActiveX® initialization security level for all Microsoft Office applications. ActiveX controls can adversely affect a computer directly. In addition, malicious code can be used to compromise an ActiveX control and attack a computer. To indicate the safety of an ActiveX control, developers can denote them as Safe For Initialization (SFI). SFI indicates that a control is safe to open and run, and that it is not capable of causing a problem for any computer, regardless of whether it has persisted data values or not. If a control is not marked SFI, it is possible that the control could adversely affect a computer--or it could mean that the developers did not test the control in all situations and are not sure whether it might be compromised in the future. \r\n \r\n If you enable this policy setting, you can set the ActiveX security level to a number between 1 and 6. These security levels are as follows: \r\n \r\n 1 - Regardless of how the control is marked, load it and use the persisted values (if any). This setting does not prompt the user. \r\n \r\n 2 - If SFI, load the control in safe mode and use persisted values (if any). If not SFI, load in unsafe mode with persisted values (if any), or use the default (first-time initialization) settings. This level is similar to the default configuration, but does not prompt the user. \r\n \r\n 3 - If SFI, load the control in unsafe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with default (first-time initialization) settings. \r\n \r\n 4 - If SFI, load the control in safe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with default (first-time initialization) settings. \r\n \r\n 5 - If SFI, load the control in unsafe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with persisted values. \r\n \r\n 6 - If SFI, load the control in safe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with persisted values. \r\n \r\n If you disable or do not configure this policy setting, if a control is marked SFI, the application loads the control in safe mode and uses persisted values (if any). If the control is not marked SFI, the application loads the control in unsafe mode with persisted values (if any), or uses the default (first-time initialization) settings. In both situations, the Message Bar informs users that the controls have been disabled and prompts them to respond. \r\n \r\n Important - Some ActiveX controls do not respect the safe mode registry setting, and therefore might load persisted data even though you configure this setting to instruct the control to use safe mode. This setting only increases security for ActiveX controls that are accurately marked as SFI. In situations that involve malicious or poorly designed code, an ActiveX control might be inaccurately marked as SFI.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_1","displayName":"Enabled","description":null,"helpText":null}]},"2f4c3c1b7d834862":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_l_allowsubfolders289","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_l_allowsubfolders289_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_l_allowsubfolders289_1","displayName":"True","description":null,"helpText":null}]},"2f6d623302956c25":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_adattributecontaingpersonalsiteurl_l_empty424","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":null},"2f8ce371df023401":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationvisio","displayName":"Don’t show the What’s New information for Visio (User)","description":"This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Visio for the first time after Visio has been updated with new features. By default, the What’s New information is shown.\r\n\r\nIf you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled.\r\n\r\nIf you disable or don’t configure this policy setting, the What’s New information is shown.\r\n\r\nNote: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio.\r\n ","helpText":"","infoUrls":[],"categoryId":"adf11731-7089-4e2e-8dde-4bd9ef86b067","categoryName":"What's New","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationvisio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationvisio_1","displayName":"Enabled","description":null,"helpText":null}]},"2f6fc2c7282d96cc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadheadersfilecachedexchangemode","displayName":"Disallow Download Headers (User)","description":"Disables/Enables the option \"Download Headers\" in the Server group of the Send/Receive tab.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadheadersfilecachedexchangemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadheadersfilecachedexchangemode_1","displayName":"Enabled","description":null,"helpText":null}]},"2fdd6fb4b6bf7e3c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindwd","displayName":"Ctrl+F (Home | Editing | Find) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindwd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindwd_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/30.json b/public/intune-definitions/30.json new file mode 100644 index 000000000000..48afe5d82df0 --- /dev/null +++ b/public/intune-definitions/30.json @@ -0,0 +1 @@ +{"3013b903a710e845":{"id":"com.apple.extensiblesso_com.apple.extensiblesso","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"306a27fbeeb9f018":{"id":"com.apple.managedclient.preferences_metricsreportingenabled","displayName":"Enable usage and crash-related data reporting","description":"This policy enables reporting of usage and crash-related data about Microsoft Edge to Microsoft.\n\nEnable this policy to send reporting of usage and crash-related data to Microsoft. Disable this policy to not send the data to Microsoft. In both cases, users can't change or override the setting.\n\nOn Windows 10, Beta and Stable channels, if you don’t configure this policy, Microsoft Edge will default to the Windows diagnostic data setting. If you enable this policy, Microsoft Edge will only send usage data if the Windows Diagnostic data setting is set to Enhanced or Full. If you disable this policy, Microsoft Edge will not send usage data. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings at https://go.microsoft.com/fwlink/?linkid=2099569\n\nOn Windows 10, Canary and Dev channels, this policy controls sending usage data. If this policy is not configured, Microsoft Edge will default to the user's preference. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\n\nOn Windows 7, 8, and macOS, this policy controls sending usage and crash-related data. If you don’t configure this policy, Microsoft Edge will default to the user's preference.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#metricsreportingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_metricsreportingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_metricsreportingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"30586df5b81a5695":{"id":"com.apple.managedclient.preferences_synctypeslistdisabled","displayName":"Configure the list of types that are excluded from synchronization","description":"If you enable this policy all the specified data types will be excluded from synchronization. This policy can be used to limit the type of data uploaded to the Microsoft Edge synchronization service.\n\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", and “collections”. Note that these data type names are case sensitive.\n\nUsers will not be able to override the disabled data types.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#synctypeslistdisabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"30ff41a28a555b36":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_disk sleep timer","displayName":"Disk Sleep Timer","description":"The disk sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"30a8782c73e4fd08":{"id":"com.apple.networkusagerules_applicationrules_item_allowcellulardata","displayName":"Allow Cellular Data","description":"If false, disables cellular data for all matching managed apps.","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":[{"id":"com.apple.networkusagerules_applicationrules_item_allowcellulardata_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.networkusagerules_applicationrules_item_allowcellulardata_true","displayName":"True","description":null,"helpText":null}]},"300612f42ab349de":{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"30daea5c7f8b84c4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogo","displayName":"Set new tab page company logo (Obsolete)","description":"This policy didn't work as expected due to changes in operational requirements. Therefore, it's obsolete and shouldn't be used.\n\nSpecifies the company logo that's to be used on the new tab page in Microsoft Edge.\n\nThe policy should be configured as a string that expresses the logo(s) in JSON format. For example: { \"default_logo\": { \"url\": \"https://www.contoso.com/logo.png\", \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\" }, \"light_logo\": { \"url\": \"https://www.contoso.com/light_logo.png\", \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\" } }\n\nYou configure this policy by specifying the URL from which Microsoft Edge can download the logo and its cryptographic hash (SHA-256), which is used to verify the integrity of the download. The logo must be in PNG or SVG format, and its file size must not exceed 16 MB. The logo is downloaded and cached, and it will be redownloaded whenever the URL or the hash changes. The URL must be accessible without any authentication.\n\nThe 'default_logo' is required and used when there's no background image. If 'light_logo' is provided, it's used when the user's new tab page has a background image. We recommend a horizontal logo with a transparent background that's left-aligned and vertically centered. The logo should have a minimum height of 32 pixels and an aspect ratio from 1:1 to 4:1. The 'default_logo' should have proper contrast against a white/black background, while the 'light_logo' should have proper contrast against a background image.\n\nIf you enable this policy, Microsoft Edge downloads and shows the specified logo(s) on the new tab page. Users can't override or hide the logo(s).\n\nIf you disable or don't configure this policy, Microsoft Edge shows no company logo or a Microsoft logo on the new tab page.\n\nFor help with determining the SHA-256 hash, see [Get-FileHash](/powershell/module/microsoft.powershell.utility/get-filehash).","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"30c7ef1afe720203":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_2","displayName":"Prohibit user configuration of Offline Files","description":"Prevents users from enabling, disabling, or changing the configuration of Offline Files.\r\n\r\nThis setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box.\r\n\r\nThis is a comprehensive setting that locks down the configuration you establish by using other settings in this folder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: This setting provides a quick method for locking down the default settings for Offline Files. To accept the defaults, just enable this setting. You do not have to disable any other settings in this folder.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-noconfigcache-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_2_1","displayName":"Enabled","description":null,"helpText":null}]},"309067ec57105469":{"id":"device_vendor_msft_policy_config_appvirtualization_allowpackagescripts","displayName":"Enable Package Scripts","description":"Enables scripts defined in the package manifest of configuration files that should run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowpackagescripts"],"categoryId":"efabaf11-42e4-48ab-81ca-4514199d239b","categoryName":"Scripting","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowpackagescripts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowpackagescripts_1","displayName":"Enabled","description":null,"helpText":null}]},"30117a02a9347c34":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for profile types.","description":"Configuring this policy will allow/disallow ambient authentication for Incognito and Guest profiles in Google Chrome.\r\n\r\nAmbient Authentication is http authentication with default credentials if explicit credentials are not provided via NTLM/Kerberos/Negotiate challenge/response schemes.\r\n\r\nSetting the RegularOnly (value 0), allows ambient authentication for Regular sessions only. Incognito and Guest sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the IncognitoAndRegular (value 1), allows ambient authentication for Incognito and Regular sessions. Guest sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the GuestAndRegular (value 2), allows ambient authentication for Guest and Regular sessions. Incognito sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the All (value 3), allows ambient authentication for all sessions.\r\n\r\nNote that, ambient authentication is always allowed on regular profiles.\r\n\r\nIn Google Chrome version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"300bf984647e33a0":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource","displayName":"Enable App Installer Microsoft Store Source","description":"This policy controls the Microsoft Store source included with the Windows Package Manager.\n\nIf you do not configure this setting, the Microsoft Store source for the Windows Package manager will be available and can be removed.\n\nIf you enable this setting, the Microsoft Store source for the Windows Package Manager will be available and cannot be removed.\n\nIf you disable this setting the Microsoft Store source for the Windows Package Manager will not be available.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablemicrosoftstoresource"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource_1","displayName":"Enabled","description":null,"helpText":null}]},"30803f6ba49df3ad":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk","displayName":"VHD Compact Disk","description":"[ENABLED BY DEFAULT]\r\n\r\nNOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nCompacts the VHD disk during the sign-out operation and is designed to automatically decrease the Size On Disk of the user's container(s) depending on a pre-defined threshold.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Apps\\VHDCompactDisk\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","categoryName":"FSLogix","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk_1","displayName":"Enabled","description":null,"helpText":null}]},"308ae2e2a54a2e29":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype","displayName":"Redirect Type","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nConfigures legacy or FSLogix advanced redirection. The default is '2' which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RedirectType\r\nType: DWORD\r\nValues: Legacy = 1, FSLogix Redirection = 2","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_1","displayName":"Enabled","description":null,"helpText":null}]},"3010bacb128bd365":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate","displayName":"Locked-Down Restricted Sites","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"3067932b2c806952":{"id":"device_vendor_msft_policy_config_internetexplorer_allowonewordentry","displayName":"Go to an intranet site for a one-word entry in the Address bar","description":"This policy allows the user to go directly to an intranet site for a one-word entry in the Address bar.\n\nIf you enable this policy setting, Internet Explorer goes directly to an intranet site for a one-word entry in the Address bar, if it is available.\n\nIf you disable or do not configure this policy setting, Internet Explorer does not go directly to an intranet site for a one-word entry in the Address bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowonewordentry"],"categoryId":"a1fbe395-3b60-475f-8a34-3710d6b2e09f","categoryName":"Browsing","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowonewordentry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowonewordentry_1","displayName":"Enabled","description":null,"helpText":null}]},"30f8b83bd2362c5c":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_l_configuredservercheckvalues_value","displayName":"Server version names (semicolon separated list): (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"3047aad28a80010b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting","displayName":"Default JavaScript setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2","displayName":"Don't allow any site to run JavaScript","description":null,"helpText":null}]},"304ed59f6810227e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_newtabpagelocation","displayName":"New tab page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"301674ac18fe39ad":{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled","displayName":"Enable Silent Printing","description":"This policy controls whether Microsoft Edge uses silent printing.\r\n\r\nIf you enable this policy, Edge automatically closes the print preview window and prints to the default printer using its default settings. If the default printer is Save as PDF, the file is saved to the user's Downloads folder.\r\n\r\nIf you disable or don't configure this policy, silent printing is disabled. The print preview window stays open and the user must choose print settings as usual.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3016f774127ee44e":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled","displayName":"Enable default legacy SameSite cookie behavior setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_1","displayName":"Revert to legacy SameSite behavior for cookies on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_2","displayName":"Use SameSite-by-default behavior for cookies on all sites","description":null,"helpText":null}]},"30df65ad219b86a1":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed","displayName":"Allow Internet Explorer mode testing","description":"This policy is a replacement for the ie-mode-test flag policy. It lets users open an IE mode tab from the UI menu option.\r\n\r\n This setting works in conjunction with:\r\n 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'\r\n and\r\n 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\n If you enable this policy, users can open IE mode tab from the UI option and navigate current site to an IE mode site.\r\n\r\n If you disable this policy, users can't see the UI option in the menu directly.\r\n\r\n If you don't configure this policy, you can set up the ie-mode-test flag manually.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"30d7e5eaee20b044":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if Sleeping Tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is enabled or is not configured and the user has enabled the Sleeping Tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"304571afec1a6495":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"308bb9ec22bcadd0":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins","displayName":"Define a list of protocols that can not be silently blocked by anti-flood protection","description":"Allows you to create a list of protocols, and for each protocol an associated list of allowed origin patterns. These origins won't be silently blocked from launching an external application by anti-flood protection. The trailing separator shouldn't be included when listing the protocol. For example, list \"skype\" instead of \"skype:\" or \"skype://\".\r\n\r\nIf you configure this policy, a protocol will only be permitted to bypass being silently blocked by anti-flood protection if:\r\n\r\n- the protocol is listed\r\n\r\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\r\n\r\nIf either condition is false, the external protocol launch may be blocked by anti-flood protection.\r\n\r\nIf you don't configure this policy, no protocols can bypass being silently blocked.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' (Block access to a list of URLs) policy, that are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\n\r\nThis policy doesn't work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"spotify\",\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"msteams\",\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"msoutlook\",\r\n \"allowed_origins\": [\r\n \"*\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"309a275f2defc401":{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208","displayName":"Exclude Japanese IME Except JIS0208","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the users to restrict character code range of conversion by setting the character filter.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#excludejapaneseimeexceptjis0208"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208_0","displayName":"No characters are filtered.","description":"No characters are filtered.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208_1","displayName":"All characters except JIS0208 are filtered.","description":"All characters except JIS0208 are filtered.","helpText":null}]},"305b8dd5b026ee69":{"id":"settings_item_mdmoptions_mdmoptions_idlerebootallowed","displayName":"Idle Reboot Allowed","description":"If `true`, the device automatically reboots while locked after several days of inactivity. The device sets this to `false` by default for a supervised enrollment. Starting in iOS 26.6 and iPadOS 26.6, changing the effective value from reboot allowed to reboot disallowed requires a reboot or a device unlock before the change takes effect.","helpText":null,"infoUrls":[],"categoryId":"dd68a290-1ba7-470f-afca-339f443a767c","categoryName":"MDM Options","options":[{"id":"settings_item_mdmoptions_mdmoptions_idlerebootallowed_false","displayName":"False","description":null,"helpText":null},{"id":"settings_item_mdmoptions_mdmoptions_idlerebootallowed_true","displayName":"True","description":null,"helpText":null}]},"305216ee018fa234":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel","displayName":"Default risk level for file attachments (User)","description":"This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configure the trust logic for file attachments.\r\n\r\nHigh Risk: If the attachment is in the list of high-risk file types and is from the restricted zone, Windows blocks the user from accessing the file. If the file is from the Internet zone, Windows prompts the user before accessing the file.\r\n\r\nModerate Risk: If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file.\r\n\r\nLow Risk: If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file's zone information.\r\n\r\nIf you enable this policy setting, you can specify the default risk level for file types.\r\n\r\nIf you disable this policy setting, Windows sets the default risk level to moderate.\r\n\r\nIf you do not configure this policy setting, Windows sets the default risk level to moderate.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-setfilerisklevel"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_1","displayName":"Enabled","description":null,"helpText":null}]},"30250688b40c9ee8":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirsitesservices","displayName":"Active Directory Sites and Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-activedirsitesservices"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirsitesservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirsitesservices_1","displayName":"Enabled","description":null,"helpText":null}]},"3074d0ea7349685d":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxyaddress","displayName":"Proxy address (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"30402d6b29af9f49":{"id":"user_vendor_msft_policy_config_browser_preventusinglocalhostipaddressforwebrtc","displayName":"Prevent Using Local Host IP Address For Web RTC (User)","description":"Prevent using localhost IP address for WebRTC","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventusinglocalhostipaddressforwebrtc"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_preventusinglocalhostipaddressforwebrtc_0","displayName":"Disabled","description":"Allowed. Show localhost IP addresses.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventusinglocalhostipaddressforwebrtc_1","displayName":"Enabled","description":"Prevented/Not allowed.","helpText":null}]},"30fdfba9b0becca4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling","displayName":"The IP handling policy of WebRTC (User)","description":"This policy allows restricting which IP addresses and interfaces WebRTC uses when attempting to find the best available connection. See RFC 8828 section 5.2 (https://tools.ietf.org/html/rfc8828.html#section-5.2). When unset, defaults to using all available interfaces.\r\n\r\nExample value: default","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_1","displayName":"Enabled","description":null,"helpText":null}]},"303eb81f3498968d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup","displayName":"Disable CNAME lookup when negotiating Kerberos authentication (User)","description":"Setting the policy to Enabled skips CNAME lookup. The server name is used as entered when generating the Kerberos SPN.\r\n\r\nSetting the policy to Disabled or leaving it unset means CNAME lookup determines the canonical name of the server when generating the Kerberos SPN.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup_1","displayName":"Enabled","description":null,"helpText":null}]},"30db8a510a261e8b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist","displayName":"Enable CORS check mitigations in the new CORS implementation (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_1","displayName":"Enabled","description":null,"helpText":null}]},"3032f86fbdb3b581":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls","displayName":"Allow the File Handling API on these web apps (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"308d94f703daa1dc":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_clipboardblockedforurlsdesc","displayName":"Block clipboard on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"30d5e947c830e090":{"id":"user_vendor_msft_policy_config_excel16~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_blockinsecureprotocolsinexcelworksheetfunctions","displayName":"Block Insecure Protocols in Excel Worksheet Functions (User)","description":"\n\t\t This policy controls whether the following Excel functions can access the web via insecure protocols: WEBSERVICE, IMPORTCSV, IMPORTTEXT\n\n\t\t If you enable this policy setting, WEBSERVICE, IMPORTCSV, and IMPORTTEXT functions will be blocked from accessing the web via insecure protocols.\n\n\t\t If you disable or don't configure this policy setting, WEBSERVICE, IMPORTCSV, and IMPORTTEXT functions will be allowed to access the web via insecure protocols.","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_blockinsecureprotocolsinexcelworksheetfunctions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_blockinsecureprotocolsinexcelworksheetfunctions_1","displayName":"Enabled","description":null,"helpText":null}]},"30a9c051ad62b215":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles","displayName":"dBase III / IV files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"30a6a3e1c6326de3":{"id":"user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings","displayName":"Prevent bypassing SmartScreen Filter warnings (User)","description":"This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter prevents the user from browsing to or downloading from sites that are known to host malicious content. SmartScreen Filter also prevents the execution of files that are known to be malicious.\n\nIf you enable this policy setting, SmartScreen Filter warnings block the user.\n\nIf you disable or do not configure this policy setting, the user can bypass SmartScreen Filter warnings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablebypassofsmartscreenwarnings"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"304cd6497d28f335":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"30d99ba737533e0f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_managedsearchengines","displayName":"Manage Search Engines (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"302ab8011fb4b5da":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed","displayName":"Allow user feedback (User)","description":"Microsoft Edge uses the Edge Feedback feature (enabled by default) to allow users to send feedback, suggestions or customer surveys and to report any issues with the browser. Also, by default, users can't disable (turn off) the Edge Feedback feature.\r\n\r\nIf you enable this policy or don't configure it, users can invoke Edge Feedback.\r\n\r\nIf you disable this policy, users can't invoke Edge Feedback.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3038ac0517ebcf67":{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext","displayName":"Control Copilot access to page context for Microsoft Entra ID profiles (User)","description":"This policy controls access to page contents for Copilot in the Microsoft Edge sidebar when users are logged into their MSA Copilot account. This policy applies only to Microsoft Entra ID Microsoft Edge profiles. To summarize pages and interact with text selections, it needs to be able to access the page contents. This policy does not apply to MSA Microsoft Edge profiles. This policy doesn't control access for Copilot with enterprise data protection (EDP). Access for Copilot with enterprise data protection (EDP) is controlled by the 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane) policy.\r\n\r\nIf you enable this policy, Copilot will have access to page content when logged in with Entra ID.\r\n\r\nIf this policy is not configured, the default behavior for non-EU countries is that access is initially enabled. For EU countries, the default behavior is that access is initially disabled. In both cases, if the policy is not configured, users can enable or disable Copilot's access to page content using the setting toggle in Microsoft Edge.\r\n\r\nIf you disable this policy, Copilot will not be able to access page context.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},"3032bacc23e48e08":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_idletimeoutactionsdesc","displayName":"Actions to run when the computer is idle (User)","description":"","helpText":"","infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":null},"3064d8dfcfd2baf6":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended","displayName":"Block smart actions for a list of services (User)","description":"List specific services, such as PDFs, that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\r\n\r\nIf you enable the policy: :\r\n - The smart action in the mini and full context menu will be disabled for all profiles for services that match the given list.\r\n - Users will not see the smart action in the mini and full context menu on text selection for services that match the given list.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be disabled for services that match the given list.\r\n\r\nIf you disable or don't configure this policy:\r\n - The smart action in the mini and full context menu will be enabled for all profiles.\r\n - Users will see the smart action in the mini and full context menu on text selection.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nsmart_actions_pdf","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"30ca56906667a289":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastserviceserverterms3","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"30347b0920e53cd9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastservicemajorversion9","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"302e99e424ced30f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishphilippines","displayName":"English (Philippines) (User)","description":"Enables the editing language English (Philippines)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishphilippines_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishphilippines_1","displayName":"Enabled","description":null,"helpText":null}]},"307dcf9fa1afbb71":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid","displayName":"Parameters (User)","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":null},"30a3185b90dd68f9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess","displayName":"Configure Outlook object model prompt when reading address information (User) (Deprecated)","description":"This policy setting controls what happens when an untrusted program attempts to gain access to a recipient field, such as the ''To:'' field, using the Outlook object model.\r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to access a recipient field using the Outlook object model:\r\n\r\n- Prompt user. The user will be prompted to approve every access attempt.\r\n- Automatically approve. Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended.\r\n- Automatically deny. Outlook will automatically deny programmatic access requests from any program.\r\n- Prompt user based on computer security. Outlook will only prompt users when antivirus software is out of date or not running. This is the default configuration.\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to access recipient fields, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center.","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"305a75b584cecf14":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_datecolon5","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"30a7bf60e5523107":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency","displayName":"Default Project Currency (User)","description":"Allows you to manage whether users can set the default currency type for their new project plans. If you enable this setting, the default currency type is enforced for all new project plans. If this setting is disabled or not configured, users can set the default currency type for new project plans.","helpText":"","infoUrls":[],"categoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","categoryName":"View","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_1","displayName":"Enabled","description":null,"helpText":null}]},"30f628c5200abb44":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration","displayName":"Duration (User)","description":"Specifies the unit of measure for duration, which is elapsed time as compared to a specific date or a given hour.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_1","displayName":"Enabled","description":null,"helpText":null}]},"301e05d83b8574cb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_checktoenforcesettingonunchecktoenforcesettingoff0","displayName":"Check to enforce setting on; uncheck to enforce setting off (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_checktoenforcesettingonunchecktoenforcesettingoff0_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_checktoenforcesettingonunchecktoenforcesettingoff0_1","displayName":"True","description":null,"helpText":null}]},"304f3b012941344c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_straightquoteswithsmartquotes","displayName":"Straight quotes with smart quotes (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"b6cafb2c-81be-40cf-90d8-788f713f7099","categoryName":"Replace as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_straightquoteswithsmartquotes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_straightquoteswithsmartquotes_1","displayName":"Enabled","description":null,"helpText":null}]},"30b23b4fa844efc8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_pathcolon56","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/31.json b/public/intune-definitions/31.json new file mode 100644 index 000000000000..3d0e310bcc45 --- /dev/null +++ b/public/intune-definitions/31.json @@ -0,0 +1 @@ +{"31b581a1d5323819":{"id":"com.android.devicerestrictionpolicy.passwordminimumnumericcharacters","displayName":"Number of numeric characters required","description":"Enter the number of numeric characters (1, 2, 3, and so on) the password must have, between 1 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"3195d15a91aa9a65":{"id":"com.apple.applicationaccess_ratingtvshowsgb","displayName":"Rating TV Shows - Great Britain","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsgb_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsgb_1","displayName":"Caution","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsgb_2","displayName":"All","description":null,"helpText":null}]},"3134a25813310af5":{"id":"com.apple.carddav.account_com.apple.carddav.account","displayName":"Top Level Setting Group Collection","description":"com.apple.carddav.account","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":null},"312b9ec3ac3de423":{"id":"com.apple.finder_prohibitconnectto","displayName":"Prohibit Connect To","description":"If true, prohibits users from using a dialog that lets them view, select, or manually connect to servers on the local network or on the internet.","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":[{"id":"com.apple.finder_prohibitconnectto_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.finder_prohibitconnectto_true","displayName":"True","description":null,"helpText":null}]},"31a069d29522ad78":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"310616b585e4ef12":{"id":"com.apple.managedclient.preferences_configureshare","displayName":"Configure the Share experience","description":"If you set this policy to 'ShareAllowed' (the default), users will be able to access the Share experience from the Settings and More Menu in Microsoft Edge to share with other apps on the system.\n\nIf you set this policy to 'ShareDisallowed', users won't be able to access the Share experience. If the Share button is on the toolbar, it will also be hidden.\n\nPolicy options mapping:\n\n* ShareAllowed (0) = Allow using the Share experience\n\n* ShareDisallowed (1) = Don't allow using the Share experience\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#configureshare"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_configureshare_0","displayName":"Allow using the Share experience","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_configureshare_1","displayName":"Don't allow using the Share experience","description":null,"helpText":null}]},"311277c1cd0454c9":{"id":"com.apple.managedclient.preferences_showdocstageonlaunch","displayName":"Show Template Gallery on app launch","description":"Show the template picker when launching Word, Excel, and PowerPoint.","helpText":null,"infoUrls":["https://learn.microsoft.com/deployoffice/mac/preferences-office"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_showdocstageonlaunch_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showdocstageonlaunch_true","displayName":"True","description":null,"helpText":null}]},"3117a62ae573c56a":{"id":"com.apple.mcxmenuextras_spaces.menu","displayName":"Spaces","description":"If true, enables the Spaces menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_spaces.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_spaces.menu_true","displayName":"True","description":null,"helpText":null}]},"31ff531d5cf1cf66":{"id":"com.apple.preference.security_com.apple.preference.security","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"8abddb23-7036-4ba8-8912-529279a849ea","categoryName":"Security Preferences","options":null},"311f6f7fee17242f":{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"31fda51db74dcfa8":{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition","displayName":"Speech Recognition (deprecated)","description":"Allows the application to use the system Speech Recognition facility and to send speech data to Apple.\n\nDeprecated: use the `Privacy` key in the declarative management `com.apple.configuration.app-settings` configuration.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"31ba56878c93e9b9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.browsingwithcopilotblocklist","displayName":"Browsing with Copilot Blocked URLs","description":"Controls the list of URLs where browsing with Copilot is blocked. Users can't modify this list.\n\nUse this policy to define exceptions to broader allowlists. For example, you can set \"BrowsingWithCopilotAllowList\" to '*' to allow all sites, and then use this policy to block access to specific URLs.\n\nThis policy supports blocking by scheme, subdomain, or port. When multiple URL patterns apply, the most specific match determines whether access is allowed or blocked. Blocklist entries take precedence over allowlist entries.\n\nIf you don't configure this policy, no exceptions are applied to \"BrowsingWithCopilotAllowList\".\n\nBrowsing with Copilot supports only HTTP and HTTPS protocols. Wildcards (*) are supported, and subdomains are matched even without wildcards. URL matching is based on the site origin only; any path specified in the pattern is ignored.\n\nFor information about URL pattern format, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"31643c5f042b3056":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderkeyword_recommended","displayName":"Default search provider keyword (users can override)","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\n\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy can't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"31e4b6c54ae224af":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodecleardataonexitenabled","displayName":"Clear history for IE and IE mode every time you exit","description":"This policy controls whether browsing history is deleted from Internet Explorer and Internet Explorer mode every time Microsoft Edge is closed.\n\nUsers can configure this setting in the 'Clear browsing data for Internet Explorer' option in the Privacy, search, and services menu of Settings.\n\nIf you enable this policy, Internet Explorer browsing history will be cleared on browser exit.\n\nIf you disable or don't configure this policy, Internet Explorer browsing history won't be cleared on browser exit.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodecleardataonexitenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodecleardataonexitenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"31fd1d1ecf2fe4b8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagemanagedquicklinks_recommended","displayName":"Set new tab page quick links (users can override)","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\n\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\n\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' isn't provided, the URL is used as the default title. If 'pinned' isn't provided, the default value is false.\n\nMicrosoft Edge presents these tiles in the order listed, from left to right, with all pinned tiles displayed ahead of nonpinned tiles.\n\nIf you set this policy as mandatory, the 'pinned' field is ignored and all tiles are pinned. The tiles can't be deleted by the user and always appear at the front of the quick links list.\n\nIf you set this policy as recommended, pinned tiles remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying nonpinned links via this policy to an existing browser profile, the links don't appear at all, depending on how they rank compared to the user's browsing history.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"31812aba00625ab6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout","displayName":"Sets layout for printing","description":"Configuring this policy sets the layout for printing webpages.\n\nIf you disable or don't configure this policy, users can decide whether to print webpages in Portrait or Landscape layout.\n\nIf you enable this policy, the selected option is set as the layout option.\n\nPolicy options mapping:\n\n* portrait (0) = Sets layout option as portrait\n\n* landscape (1) = Sets layout option as landscape\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_portrait","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_landscape","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},"316483eb22e09734":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_2","displayName":"Control Event Log behavior when the log file reaches its maximum size","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size.\r\n\r\nIf you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost.\r\n\r\nIf you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events.\r\n\r\nNote: Old events may or may not be retained according to the \"Backup log automatically when full\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-retention-2"],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_2_1","displayName":"Enabled","description":null,"helpText":null}]},"3138261aa2e16dd3":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_synattackprotect_synattackprotect","displayName":"SynAttackProtect","description":null,"helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_synattackprotect_synattackprotect_0","displayName":"No additional protection, use default settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_synattackprotect_synattackprotect_1","displayName":"Connections time out sooner if a SYN attack is detected","description":null,"helpText":null}]},"312093c5406ff8ad":{"id":"device_vendor_msft_policy_config_admx_printing2_prunedownlevel_prunedownleveltitle","displayName":"Prune non-republishing printers:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_prunedownlevel_prunedownleveltitle_0","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_prunedownlevel_prunedownleveltitle_1","displayName":"Only if Print Server is found","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_prunedownlevel_prunedownleveltitle_2","displayName":"Whenever printer is not found","description":null,"helpText":null}]},"31aa7adfef0bce73":{"id":"device_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyexecute_access_2","displayName":"CD and DVD: Deny execute access","description":"This policy setting denies execute access to the CD and DVD removable storage class.\r\n\r\nIf you enable this policy setting, execute access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, execute access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-cdanddvd-denyexecute-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyexecute_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyexecute_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"31affa59d88cb97f":{"id":"device_vendor_msft_policy_config_admx_tabletshell_disableinkball_2","displayName":"Do not allow Inkball to run","description":"Prevents start of InkBall game.\r\n\r\nIf you enable this policy, the InkBall game will not run.\r\n\r\nIf you disable this policy, the InkBall game will run.\r\n\r\nIf you do not configure this policy, the InkBall game will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disableinkball-2"],"categoryId":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","categoryName":"Accessories","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_disableinkball_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_disableinkball_2_1","displayName":"Enabled","description":null,"helpText":null}]},"31970b8ecb9149ef":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_copilot","displayName":"Microsoft Copilot (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_copilot_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_copilot_1","displayName":"True","description":null,"helpText":null}]},"31c9bd7d56372454":{"id":"device_vendor_msft_policy_config_appvirtualization_allowreportingserver_interval","displayName":"Repeat reporting for every (days)","description":"","helpText":"","infoUrls":[],"categoryId":"e7cc16d8-f74f-4cd7-890d-9b4082a19c39","categoryName":"Reporting","options":null},"31971574a93bf415":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_refresh_onlogon_options","displayName":"Global Publishing Refresh On Logon","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_refresh_onlogon_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_refresh_onlogon_options_1","displayName":"True","description":null,"helpText":null}]},"31c8e30098e7bf59":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled","displayName":"Enable lock icon in the omnibox for secure connections","description":"This policy controls the treatment for lock icon in the omnibox.\r\nFrom Chrome M93, there is a new omnibox icon for secure connections.\r\nIf the policy is Enabled, Chrome will use the existing lock icon for secure connections.\r\nIf the policy is Disabled or not set, Chrome will use the default icon for secure connections.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3178978f88826f9d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions. Default.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block malicious downloads, uncommon or unwanted downloads and dangerous file types.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_4","displayName":"Block malicious downloads. Recommended.","description":null,"helpText":null}]},"3113ca9d74f08e4b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_spellchecklanguageblacklistdesc","displayName":"Force disable spellcheck languages (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"311c2bd53e96bd0e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},"31c5d5513b769fce":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount","displayName":"Reattach Count","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nWhen a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to re-attach the volume. This value specifies how many times to retry. The default value is 60 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ReAttachRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_1","displayName":"Enabled","description":null,"helpText":null}]},"3149c98387ce8878":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"31afc41beebb1ab6":{"id":"device_vendor_msft_policy_config_kioskbrowser_defaulturl","displayName":"Default URL","description":"Configures the default URL kiosk browsers to navigate on launch and restart.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#defaulturl"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"3101fba55b569b87":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting","displayName":"Default pop-up window setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_1","displayName":"Allow all sites to show pop-ups","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_2","displayName":"Do not allow any site to show popups","description":null,"helpText":null}]},"3111b727284fc3ae":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_edgesidebarappurlhostforcelistdesc","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"311dfe505289e85e":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_printingpapersizedefault","displayName":"Default printing page size (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"31e22e2185be197b":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled","displayName":"Always open links from certain Microsoft apps in Microsoft Edge","description":"Make Microsoft Edge open links from other supported Microsoft Apps, such as Microsoft Outlook and Microsoft Teams on Windows 10 and above, so that web links can be opened using the correct profile in Microsoft Edge. This does not change the browser set as the default in Windows settings.\r\n\r\nIf you do not configure this policy, the end user will see a prompt to manage this policy the first time Microsoft Edge opens a link from supported Microsoft apps. Users can manage this policy in Microsoft Edge settings at any time. The default browser setting in Windows will not be changed based on the Microsoft Edge setting.\r\n\r\nIf this policy is Enabled, Microsoft Edge will open web links from these apps, and will use the correct profile where possible, even when Microsoft Edge is not set as the default in Windows settings. This policy does not change the browser set as the default in Windows settings.\r\n\r\nIf this policy is disabled, the browser set as the default in Windows settings will be used to open web links from these apps.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"31b77784be430412":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mse7exe125","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mse7exe125_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mse7exe125_1","displayName":"True","description":null,"helpText":null}]},"3100606ed0c0442a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_pptviewexe74","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_pptviewexe74_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_pptviewexe74_1","displayName":"True","description":null,"helpText":null}]},"31c887570a8e817f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updateblockversion_l_updateblockversionid","displayName":"Block version: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":null},"31a9520d33eec7ed":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_sharepointonpremapplicationiduri_sharepointonpremapplicationiduribox","displayName":"Entra Application ID URI:","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"313f07822f8e69d1":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablefamilyui","displayName":"Disable Family UI","description":"Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablefamilyui"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablefamilyui_0","displayName":"(Disable) The users can see the display of the family options area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the family options area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablefamilyui_1","displayName":"(Enable) The users cannot see the display of the family options area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the family options area in Windows Defender Security Center.","helpText":null}]},"3149846b54ff7be2":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_settimetoreboot","displayName":"Set Time To Reboot (Windows Insiders only)","description":"Refers to the time in minutes that a device will spend in the recovery environment before attempting to reboot. The maximum time to reboot possible is 72 hours, should be greater than or equal to the retry interval, and only takes effect if auto remediation is on. Otherwise an invalid argument error will be returned and no changes will be made.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":null},"31de01e842b29b79":{"id":"settings_item_accessibilitysettings_voiceoverenabled","displayName":"Voice Over Enabled","description":"If true, enables voiceover.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_voiceoverenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_voiceoverenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"31d499caafef7455":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled","displayName":"CECPQ2 post-quantum key-agreement enabled for TLS (User)","description":"If this policy is not configured, or is set to enabled, then Google Chrome will follow the default rollout process for CECPQ2, a post-quantum key-agreement algorithm in TLS.\r\n\r\nCECPQ2 results in larger TLS messages which, in very rare cases, can trigger bugs in some networking hardware. This policy can be set to False to disable CECPQ2 while networking issues are resolved.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"31a16e58ec73327a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on Shutdown: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"31c0c6f7fb8fc399":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting","displayName":"Default notification setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1","displayName":"Allow sites to show desktop notifications","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2","displayName":"Do not allow any site to show desktop notifications","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3","displayName":"Ask every time a site wants to show desktop notifications","description":null,"helpText":null}]},"3191084bffa54428":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled","displayName":"Enable sending downloads to Google for deep scanning for users enrolled in the Advanced Protection program (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"31330bc741b2962b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showvalues","displayName":"Show values (User)","description":"Enabling this setting selects the Advanced (Display) user option to \"Show data point values on hover\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showvalues_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showvalues_1","displayName":"Enabled","description":null,"helpText":null}]},"317cd01e7e1bfc24":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"31a8c557e316f6a2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04","displayName":"Trusted Location #4 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_1","displayName":"Enabled","description":null,"helpText":null}]},"31d81f238b68df16":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders28","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders28_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders28_1","displayName":"True","description":null,"helpText":null}]},"31bd0ba2acbed1c4":{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightonactioncenter","displayName":"Allow Windows Spotlight On Action Center (User)","description":"This policy allows administrators to prevent Windows spotlight notifications from being displayed in the Action Center. If you enable this policy, Windows spotlight notifications will no longer be displayed in the Action Center. If you disable or do not configure this policy, Microsoft may display notifications in the Action Center that will suggest apps or features to help users be more productive on Windows. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowwindowsspotlightonactioncenter"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightonactioncenter_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightonactioncenter_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"31f1cdb4e6172b0b":{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate","displayName":"Locked-Down Trusted Sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"31c8703efe1f1636":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictbackgroundfetchfromserviceworkerenabled","displayName":"Restrict Background Fetch API when called from a Service Worker (User)","description":"This policy controls whether background fetch requests from Service Workers are restricted. If a feature that downloads files in the background is affected, this policy may be relevant.\n\nIf you enable this policy or don't configure it, the restriction is active, and background fetch requests from Service Worker contexts may be blocked.\n\nIf you disable this policy, the restriction is bypassed, allowing Service Workers to make background fetch requests.\n\nThis policy is temporary and will be removed after Microsoft Edge version 152.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictbackgroundfetchfromserviceworkerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictbackgroundfetchfromserviceworkerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3189a57971acc021":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_userdatadir","displayName":"Set the user data directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"31719f835d0f789b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings","displayName":"Configure extension management settings (User)","description":"Configures extension management settings for Microsoft Edge.\r\n\r\nThis policy controls multiple settings, including settings controlled by any existing extension-related policies. This policy overrides any legacy policies if both are set.\r\n\r\nThis policy maps an extension ID or an update URL to its configuration. With an extension ID, the configuration is applied only to the specified extension. Set a default configuration for the special ID \"*\", to apply to all extensions that aren't specifically listed in this policy. With an update URL, the configuration is applied to all extensions with the exact update URL stated in manifest of this extension, as described at https://go.microsoft.com/fwlink/?linkid=2095043.\r\n\r\nExample value:\r\n\r\n{\r\n \"abcdefghijklmnopabcdefghijklmnop\": {\r\n \"blocked_permissions\": [\r\n \"history\"\r\n ], \r\n \"installation_mode\": \"allowed\", \r\n \"minimum_version_required\": \"1.0.1\"\r\n }, \r\n \"bcdefghijklmnopabcdefghijklmnopa\": {\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.contoso.com\"\r\n ], \r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ], \r\n \"update_url\": \"https://contoso.com/update_url\", \r\n \"runtime_allowed_hosts\": [\r\n \"*://good.contoso.com\"\r\n ], \r\n \"installation_mode\": \"force_installed\"\r\n }, \r\n \"cdefghijklmnopabcdefghijklmnopab\": {\r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"installation_mode\": \"blocked\"\r\n }, \r\n \"*\": {\r\n \"blocked_permissions\": [\r\n \"downloads\", \r\n \"bookmarks\"\r\n ], \r\n \"installation_mode\": \"blocked\", \r\n \"runtime_blocked_hosts\": [\r\n \"*://*.contoso.com\"\r\n ], \r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"allowed_types\": [\r\n \"hosted_app\"\r\n ], \r\n \"runtime_allowed_hosts\": [\r\n \"*://good.contoso.com\"\r\n ], \r\n \"install_sources\": [\r\n \"https://company-intranet/apps\"\r\n ]\r\n }, \r\n \"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd\": {\r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"installation_mode\": \"blocked\"\r\n }, \r\n \"fghijklmnopabcdefghijklmnopabcde\": {\r\n \"blocked_install_message\": \"Custom removal message.\", \r\n \"installation_mode\": \"removed\"\r\n }, \r\n \"update_url:https://www.contoso.com/update.xml\": {\r\n \"blocked_permissions\": [\r\n \"wallpaper\"\r\n ], \r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ], \r\n \"installation_mode\": \"allowed\"\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"31ba1dd15e5b88fd":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled","displayName":"Wallet Donation Enabled (User)","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\r\n\r\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\r\n\r\nIf you disable this policy, users can't use the Wallet Donation feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"31019e7fb3c3d76f":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist","displayName":"Browsing with Copilot Allowed URLs (User)","description":"Allows you to define a list of URLs where browsing with Copilot is available. Users cannot modify this list.\r\n\r\nIf you enable this policy, browsing with Copilot is available only on the sites specified in the list. To allow a broader set of sites while blocking specific exceptions, configure this policy together with the 'BrowsingWithCopilotBlockList' (Browsing with Copilot Blocked URLs) policy. For example, you can include '*' to allow all sites, and then use the block list to restrict access to specific URLs.\r\n\r\nYou can define exceptions based on schemes, subdomains, ports, or origins. When multiple filters apply, the most specific match determines whether a URL is allowed or blocked. The block list takes precedence over the allow list.\r\n\r\nIf you disable or do not configure this policy, browsing with Copilot is unavailable on all sites, even if the 'AllowBrowsingWithCopilot' (Controls the availability of browsing with Copilot in Microsoft Edge.) policy is enabled.\r\n\r\nBrowsing with Copilot supports only HTTP and HTTPS protocols. Wildcards (*) are supported, and subdomains are matched even without wildcards. This policy applies only to the site origin; any path specified in the URL pattern is ignored. For guidance on formatting URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu\r\ncontoso.net\r\nlogin.contoso.us","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"31f2d4de7d5ff614":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishaustralia","displayName":"English (Australia) (User)","description":"Enables the editing language English (Australia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishaustralia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishaustralia_1","displayName":"Enabled","description":null,"helpText":null}]},"31cf52d755d97726":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits","displayName":"Configure invalid RSA public key size (User)","description":"This policy setting allows you to configure whether Office displays a digital signature as invalid because of the number of RSA public key bits used in the digital signature.\r\n\r\nIf you enable this policy setting, you can specify the number of bits that Office treats as invalid in a digital signature. For example: 512, 768, etc.\r\n\r\nIf you don’t configure this policy setting, Office won’t treat any digital signatures as invalid because of the number of bits in the public key.\r\n\r\nEnabling this policy causes the minimum RSA public key size to be the next largest option.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_1","displayName":"Enabled","description":null,"helpText":null}]},"31f77081d7d81e0c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc06_l_pathcolon258","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"31bfcd44047ecee9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_l_allowsubfolders309","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_l_allowsubfolders309_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_l_allowsubfolders309_1","displayName":"True","description":null,"helpText":null}]},"31982ce549aee9b0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode","displayName":"Hebrew mode (User)","description":"Specifies the script to use for checking spelling of Hebrew text. This option is available only if you are using a right-to-left language version of Microsoft Office or have installed Microsoft Office 2016 proofing tools or the Microsoft Office Single Language Pack 2016 for that language, and have enabled support for the language through Microsoft Office 2016 Language Preferences.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode_1","displayName":"Enabled","description":null,"helpText":null}]},"31a00bae258b7c26":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_disablefolderhomepages","displayName":"Do not allow Home Page URL to be set in folder Properties (User)","description":"By default, users can set a URL to be used as the Home Page for a folder by entering the URL on the Home Page tab on the folder's Properties dialog box. By enabling this setting, you can disallow setting Folder Home Pages for all folders.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_disablefolderhomepages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_disablefolderhomepages_1","displayName":"Enabled","description":null,"helpText":null}]},"3122a44d455ec016":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_lockedformregions_l_empty76","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"e0e10e94-325c-49e6-ab48-4f146254395f","categoryName":"Form Region Settings","options":null},"31bf25084b3e8db2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_outlookprotectionrules","displayName":"Outlook Protection Rules (User)","description":"This policy setting controls whether the Outlook Protection Rules add-in is enabled.\r\n\r\nIf you enable or do not configure this policy setting the add-in automatically downloads Outlook Protection Rules from Exchange and processes them when each Exchange mailbox user composes a new e-mail. \r\n\r\nIf you disable this policy setting the add-in does not download or process Outlook Protection Rules.","helpText":"","infoUrls":[],"categoryId":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","categoryName":"Compose Messages","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_outlookprotectionrules_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_outlookprotectionrules_1","displayName":"Enabled","description":null,"helpText":null}]},"31bf2f259ee8cb77":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_runprograms","displayName":"Run Programs (User)","description":"This policy setting controls the prompting and activation behavior for the \"Run Programs\" option for action buttons in PowerPoint.\r\n\r\nIf you enable this policy setting, you can choose from three options to control how the \"Run Programs\" option functions:\r\n\r\n- Disable (don't run any programs). If users click an action button with the \"Run Programs\" action assigned to it, nothing will happen. This option enforces the default configuration in PowerPoint.\r\n\r\n- Enable (prompt user before running). If users click an action button with the \"Run Programs\" action assigned to it, PowerPoint will prompt them to continue before running the program.\r\n\r\n- Enable all (run without prompting). If users click an action button with the \"Run Programs\" action assigned to it. PowerPoint will run the program automatically, without prompting.\r\n\r\nIf you disable or do not configure this policy setting, if users click an action with the \"Run Programs\" action assigned to it, nothing will happen. This behavior is the same as Enabled -- Disable (don't run any programs).","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_runprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_runprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"3118dcbce1b0b918":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjautoaddnew","displayName":"Automatically add new resources and tasks (User)","description":"Automatically adds new resources to the resource pool and assigns them default values whenever a new resource name or new resource's initials are added.\r\n \r\nIf you enable this setting, new resources and tasks are automatically inserted into the project.\r\n\r\nIf you disable this setting, users are alerted whenever a new resource or task is created when making a new assignment.\r\n\r\nIf you do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"0a6bc3ed-c4cd-4928-bcbf-247369a51515","categoryName":"General options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjautoaddnew_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjautoaddnew_1","displayName":"Enabled","description":null,"helpText":null}]},"31cac6c5dfd3b622":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09_l_datecolon41","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"319ec6ea54fb9189":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_name","displayName":"Name","description":"Specifies the friendly name of the Hyper-V Firewall rule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/32.json b/public/intune-definitions/32.json new file mode 100644 index 000000000000..2c7f0a5688db --- /dev/null +++ b/public/intune-definitions/32.json @@ -0,0 +1 @@ +{"32a1c7c038033444":{"id":"com.apple.familycontrols.contentfilter_usecontentfilter","displayName":"Use Content Filter","description":"If true, filters content automatically. ","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":[{"id":"com.apple.familycontrols.contentfilter_usecontentfilter_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.contentfilter_usecontentfilter_true","displayName":"True","description":null,"helpText":null}]},"321b9866fe967b98":{"id":"com.apple.managedclient.preferences_printpdfasimagedefault","displayName":"Print PDF as Image Default","description":"Controls if Microsoft Edge makes the Print as image option the default when printing PDFs.\n\nIf you enable this policy, Microsoft Edge will default to setting the Print as image option in the Print Preview when printing a PDF.\n\nIf you disable or don't configure this policy, Microsoft Edge will not default to setting the Print as image option in the Print Preview when printing a PDF.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#printpdfasimagedefault"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_printpdfasimagedefault_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printpdfasimagedefault_true","displayName":"Enabled","description":null,"helpText":null}]},"32794c6139b60379":{"id":"com.apple.mcxmenuextras_clock.menu","displayName":"Clock","description":"If true, enables the Clock menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_clock.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_clock.menu_true","displayName":"True","description":null,"helpText":null}]},"3235078bd5c94025":{"id":"com.apple.subscribedcalendar.account_subcalaccountusername","displayName":"Account Username","description":"The user's username.","helpText":null,"infoUrls":[],"categoryId":"fa20bbc3-d25d-4a7f-a349-9b211d186e21","categoryName":"Subscribed Calendars","options":null},"321830c1ad214161":{"id":"com.microsoft.edge.mamedgeappconfigsettings.visualsearchenabled","displayName":"Visual search enabled","description":"Visual search lets you quickly explore more related content about entities in an image.\n\nIf you enable or don't configure this policy, visual search is enabled via image hover, context menu, and search in sidebar.\n\nIf you disable this policy, visual search is disabled and you can't get more info about images via hover, context menu, and search in sidebar.\n\nNote: Visual Search in Web Capture is still managed by \"WebCaptureEnabled\" policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.visualsearchenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.visualsearchenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"32a6274d8a53ed44":{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsfdvdropdown_name","displayName":"Select the encryption method for fixed data drives:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp#encryptionmethodbydrivetype"],"categoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","categoryName":"BitLocker Drive Encryption","options":[{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsfdvdropdown_name_3","displayName":"AES-CBC 128-bit","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsfdvdropdown_name_4","displayName":"AES-CBC 256-bit","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsfdvdropdown_name_6","displayName":"XTS-AES 128-bit (default)","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsfdvdropdown_name_7","displayName":"XTS-AES 256-bit","description":null,"helpText":null}]},"325c0e083fffc293":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverypasswordusagedropdown_name","displayName":"Configure user storage of BitLocker recovery information:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverypasswordusagedropdown_name_2","displayName":"Allow 48-digit recovery password","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverypasswordusagedropdown_name_1","displayName":"Require 48-digit recovery password","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverypasswordusagedropdown_name_0","displayName":"Do not allow 48-digit recovery password","description":null,"helpText":null}]},"32caac256eb50545":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_id","displayName":"ID","description":"One PolicyRule can have multiple entries; each entry with a unique GUID tells Device Control one restriction.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"325c26d7e0c38ac3":{"id":"device_vendor_msft_policy_config_admx_eventlogging_enableprotectedeventlogging","displayName":"Enable Protected Event Logging","description":"\r\nThis policy setting lets you configure Protected Event Logging.\r\n\r\nIf you enable this policy setting, components that support it will use the certificate you supply to encrypt potentially sensitive event log data before writing it to the event log. Data will be encrypted using the Cryptographic Message Syntax (CMS) standard and the public key you provide. You can use the Unprotect-CmsMessage PowerShell cmdlet to decrypt these encrypted messages, provided that you have access to the private key corresponding to the public key that they were encrypted with.\r\n\r\nIf you disable or do not configure this policy setting, components will not encrypt event log messages before writing them to the event log.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlogging#admx-eventlogging-enableprotectedeventlogging"],"categoryId":"75e080fb-3ed7-4a73-a6e0-eb93f0119d68","categoryName":"Event Logging","options":[{"id":"device_vendor_msft_policy_config_admx_eventlogging_enableprotectedeventlogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlogging_enableprotectedeventlogging_1","displayName":"Enabled","description":null,"helpText":null}]},"328fa49c3c0d108b":{"id":"device_vendor_msft_policy_config_admx_globalization_localesystemrestrict_allowablesystemlocaletaglist","displayName":"System Locales","description":null,"helpText":"","infoUrls":[],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":null},"32adbd27bf4d3a16":{"id":"device_vendor_msft_policy_config_admx_kerberos_hosttorealm","displayName":"Define host name-to-Kerberos realm mappings","description":"This policy setting allows you to specify which DNS host names and which DNS suffixes are mapped to a Kerberos realm.\r\n\r\nIf you enable this policy setting, you can view and change the list of DNS host names and DNS suffixes mapped to a Kerberos realm as defined by Group Policy. To view the list of mappings, enable the policy setting and then click the Show button. To add a mapping, enable the policy setting, note the syntax, and then click Show. In the Show Contents dialog box in the Value Name column, type a realm name. In the Value column, type the list of DNS host names and DNS suffixes using the appropriate syntax format. To remove a mapping from the list, click the mapping entry to be removed, and then press the DELETE key. To edit a mapping, remove the current entry from the list and add a new one with different parameters.\r\n\r\nIf you disable this policy setting, the host name-to-Kerberos realm mappings list defined by Group Policy is deleted.\r\n\r\nIf you do not configure this policy setting, the system uses the host name-to-Kerberos realm mappings that are defined in the local registry, if they exist.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-hosttorealm"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_hosttorealm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_hosttorealm_1","displayName":"Enabled","description":null,"helpText":null}]},"328952dd6b62f124":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableroutinelytakingaction","displayName":"Turn off routine remediation","description":"\r\n This policy setting allows you to configure whether Microsoft Defender Antivirus automatically takes action on all detected threats. The action to be taken on a particular threat is determined by the combination of the policy-defined action, user-defined action, and the signature-defined action.\r\n\r\n If you enable this policy setting, Microsoft Defender Antivirus does not automatically take action on the detected threats, but prompts users to choose from the actions available for each threat.\r\n\r\n If you disable or do not configure this policy setting, Microsoft Defender Antivirus automatically takes action on all detected threats after a nonconfigurable delay of approximately five seconds.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-disableroutinelytakingaction"],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableroutinelytakingaction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableroutinelytakingaction_1","displayName":"Enabled","description":null,"helpText":null}]},"32e9794eabd77c50":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_addresslookuponpingbehavior_netlogon_addresslookuponpingbehaviorlabel","displayName":"Address lookup behavior:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"32d97afeba32c185":{"id":"device_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_2","displayName":"Do not allow Sound Recorder to run","description":"Specifies whether Sound Recorder can run.\r\n\r\nSound Recorder is a feature of Microsoft Windows Vista that can be used to record sound from an audio input device where the recorded sound is encoded and saved as an audio file.\r\n\r\nIf you enable this policy setting, Sound Recorder will not run.\r\n\r\nIf you disable or do not configure this policy setting, Sound Recorder can be run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-soundrec#admx-soundrec-soundrec-diableapplication-titletext-2"],"categoryId":"088b8d8d-5f3f-4979-aa18-b3c4b2616a24","categoryName":"Sound Recorder","options":[{"id":"device_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_2_1","displayName":"Enabled","description":null,"helpText":null}]},"326ea0352306a7b7":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_single_session","displayName":"Restrict Remote Desktop Services users to a single Remote Desktop Services session","description":"This policy setting allows you to restrict users to a single Remote Desktop Services session.\r\n\r\nIf you enable this policy setting, users who log on remotely by using Remote Desktop Services will be restricted to a single session (either active or disconnected) on that server. If the user leaves the session in a disconnected state, the user automatically reconnects to that session at the next logon.\r\n\r\nIf you disable this policy setting, users are allowed to make unlimited simultaneous remote connections by using Remote Desktop Services.\r\n\r\nIf you do not configure this policy setting, this policy setting is not specified at the Group Policy level.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-single-session"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_single_session_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_single_session_1","displayName":"Enabled","description":null,"helpText":null}]},"32ae63375fe60bc7":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup","displayName":"Project 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Project 2016.\r\nMicrosoft Project 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Project 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Project 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016projectbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"32ae1f6ba848dd0d":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation","displayName":"Location where all default Library definition files for users/machines reside.","description":"\r\nThis policy setting allows you to specify a location where all default Library definition files for users/machines reside.\r\n\r\nIf you enable this policy setting, administrators can specify a path where all default Library definition files for users reside. The user will not be allowed to make changes to these Libraries from the UI. On every logon, the policy settings are verified and Libraries for the user are updated or changed according to the path defined.\r\n\r\nIf you disable or do not configure this policy setting, no changes are made to the location of the default Library definition files.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-defaultlibrarieslocation"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_1","displayName":"Enabled","description":null,"helpText":null}]},"328176bf39ebf3af":{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_disablesetupfirstuseconfiguration","displayName":"Do Not Show First Use Dialog Boxes","description":"This policy setting allows you to prevent the anchor window from being displayed when Windows Media Player is in skin mode.\r\n\r\nIf you enable this policy setting, the anchor window is hidden when the Player is in skin mode. In addition, the option on the Player tab in the Player that enables users to choose whether the anchor window displays is not available.\r\n\r\nIf you disable or do not configure this policy setting, users can show or hide the anchor window when the Player is in skin mode by using the Player tab in the Player.\r\n\r\nIf you do not configure this policy setting, and the \"Set and lock skin\" policy setting is enabled, some options in the anchor window are not available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-disablesetupfirstuseconfiguration"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_disablesetupfirstuseconfiguration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_disablesetupfirstuseconfiguration_1","displayName":"Enabled","description":null,"helpText":null}]},"321c2b41b276e737":{"id":"device_vendor_msft_policy_config_appvirtualization_clientcoexistenceallowmigrationmode","displayName":"Enable Migration Mode","description":"Migration mode allows the App-V client to modify shortcuts and FTA's for packages created using a previous version of App-V.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-clientcoexistenceallowmigrationmode"],"categoryId":"b9201072-3681-4e95-ad90-869e6166b129","categoryName":"Client Coexistence","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_clientcoexistenceallowmigrationmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_clientcoexistenceallowmigrationmode_1","displayName":"Enabled","description":null,"helpText":null}]},"322f01731f5229cc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy","displayName":"Maximal number of concurrent connections to the proxy server","description":"Setting the policy specifies the maximal number of simultaneous connections to the proxy server. Some proxy servers can't handle a high number of concurrent connections per client, which is solved by setting this policy to a lower value. The value should be lower than 100 and higher than 6. Some web apps are known to consume many connections with hanging GETs, so setting a value below 32 may lead to browser networking hangs if there are too many web apps with hanging connections open. Lower below the default at your own risk.\r\n\r\nLeaving the policy unset means a default of 32 is used.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_1","displayName":"Enabled","description":null,"helpText":null}]},"32f25ef0e82c0551":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_defaultsearchprovideralternateurlsdesc","displayName":"List of alternate URLs for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"32c8afe2b40771ad":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended","displayName":"Parameter controlling search term placement for the default search provider","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3207c2207c6b25d0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_extensioninstallallowlistdesc","displayName":"Extension IDs to exempt from the blocklist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"32385185af0fb4eb":{"id":"device_vendor_msft_policy_config_experience_disableshareapppromotions","displayName":"Disable Share App Promotions","description":"This policy setting allow IT admins to control whether promotional apps are displayed in the Share sheet. If you enable this policy, Windows will not show promotional apps in the Share sheet. If you disable or do not configure this policy, Share sheet may show app suggestions and promotions when the Share sheet is opened.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#disableshareapppromotions"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_disableshareapppromotions_0","displayName":"Promotional Apps on ShareSheet are Enabled.","description":"Promotional Apps on ShareSheet are Enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_disableshareapppromotions_1","displayName":"Promotional Apps on ShareSheet are Disabled.","description":"Promotional Apps on ShareSheet are Disabled.","helpText":null}]},"328e34969df73eb6":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch","displayName":"SID Directory Name Match","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies a string pattern used when matching a Profile or ODFC container folder. Use this setting to define how FSLogix will attempt to locate a users Profile or ODFC container. FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the SIDDIRNamePattern value matches this setting.\r\n\r\n- This setting has NO EFFECT when FlipFlopProfileDirectoryName is enabled.\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled.\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > SIDDirNameMatch (this setting)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SIDDirNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_1","displayName":"Enabled","description":null,"helpText":null}]},"32fd85706a573aa4":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"3249fa686fa640a7":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"32cfc9cbcf894a44":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_l_serveraddressexternal_value","displayName":"DNS name of the external server (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"3256a3db6f655f98":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword","displayName":"Allow storage of user passwords","description":"\r\nAllows Microsoft Lync to store user passwords.\r\n\r\nIf you enable this policy setting, Microsoft Lync can store a password on request from the user.\r\n\r\nIf you disable this policy setting, Microsoft Lync cannot store a password.\r\n\r\nIf you do not configure this policy setting and the user logs on to a domain, Microsoft Lync does not store the password. If you do not configure this policy setting and the user does not log on to a domain (for example, if the user logs on to a workgroup), Microsoft Lync can store the password.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1","displayName":"Enabled","description":null,"helpText":null}]},"329a7b670a9807a6":{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled","displayName":"Enable tab organization suggestions","description":"This policy controls whether Microsoft Edge can use its tab organization service to help name or suggest tab groups to increase productivity.\r\n\r\nIf you enable or don't configure this policy, when a user creates a tab group or activates certain \"Group Similar Tabs\" features Microsoft Edge sends tab data to its tab organization service. This data includes URLs, page titles, and existing group information. The service uses this data to return suggestions for better groupings and group names.\r\n\r\nIf you disable this policy, no data will be sent to the tab organization service. Microsoft Edge won't suggest group names when a group is created and certain \"Group Similar Tabs\" features that rely on the service won't be available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3241ff6a04e9b070":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge~network_happyeyeballsv3enabled","displayName":"Use the Happy Eyeballs V3 algorithm for connection attempts","description":"Controls whether Microsoft Edge uses the Happy Eyeballs V3 algorithm to optimize connection attempts. This algorithm improves reliability and performance in dual-stack (IPv4/IPv6) networks by racing connection attempts across IP versions and HTTP protocols (e.g., HTTP/3 vs. others). For more details, see https://datatracker.ietf.org/doc/draft-pauly-happy-happyeyeballs-v3.\r\n\r\nEnabled or not configured: Uses the algorithm for connection attempts.\r\n\r\nDisabled: Disables the algorithm.\r\n\r\nNote: This policy supports dynamic refresh.\r\n\r\nImportant: This policy is temporary and will be removed in a future version.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge~network_happyeyeballsv3enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge~network_happyeyeballsv3enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"32fbd790039f7023":{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_recommended~identity_recommended_edgeopenexternallinkswithprimaryworkprofileenabled_recommended","displayName":"Use Primary Work Profile as default to open external links","description":"This policy controls whether Microsoft Edge uses the Primary Work Profile as the default profile when opening external links.\r\n1. On Windows, the Primary Work Profile refers to the profile signed in with the Entra ID account used to enroll the device.\r\n2. On macOS and Linux, the Primary Work Profile is the only profile signed in with an Entra ID account. If multiple profiles are signed in with Entra ID accounts, the Primary Work Profile setting does not apply.\r\n\r\nPolicy behavior:\r\n1. If enabled or not configured, Microsoft Edge will use the Primary Work Profile as the default for opening external links.\r\n2. If disabled, the last used profile becomes the default for opening external links.\r\n\r\nNote: This policy does not override the following scenarios:\r\n1. If the EdgeDefaultProfileEnabled policy is set, it takes precedence over this policy.\r\n2. External links opened from Outlook or Microsoft Teams may be configured to launch in a specific profile, which can override the Primary Work Profile setting.\r\n3. If the user sets a preference for \"Default profile for external links\" in Profile preferences, that setting will take effect.","helpText":"","infoUrls":[],"categoryId":"04b46099-4ee5-4def-8e04-569c988057a9","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_recommended~identity_recommended_edgeopenexternallinkswithprimaryworkprofileenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_recommended~identity_recommended_edgeopenexternallinkswithprimaryworkprofileenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"32aae17a6ebf1a0a":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown","description":"Controls the duration (in seconds) that keepalive requests are allowed to prevent the browser from completing its shutdown.\r\n\r\nIf you configure this policy, the browser will block completing shutdown while it processes any outstanding keepalive requests (see https://fetch.spec.whatwg.org/#request-keepalive-flag) up to the maximum period of time specified by this policy.\r\n\r\nIf you disable or don't configure this policy, the default value of 0 seconds is used and outstanding keepalive requests will be immediately cancelled during browser shutdown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},"3220337954646447":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled","displayName":"Configure Related Matches in Find on Page","description":"Specifies how the user receives related matches in Find on Page, which provides spellcheck, synonyms, and Q&A results in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can receive related matches in Find on Page on all sites. The results are processed in a cloud service.\r\n\r\nIf you disable this policy, users can receive related matches in Find on Page on limited sites. The results are processed on the user's device.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3294f45e6bf27a3f":{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_mailto_list","displayName":"Method for sending email invitations:","description":"","helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_mailto_list_0","displayName":"Simple MAPI","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_mailto_list_1","displayName":"Mailto","description":null,"helpText":null}]},"327e3fb74ec13bc6":{"id":"enrollment_autopilot_dpp_accountype","displayName":"User account type","description":"Specify whether users are administrators or standard users on the device. Note that this setting does not apply to Global Administrator or Company Administrator accounts. These accounts cannot be standard users because they have access to all administrative features in Microsoft Entra ID.","helpText":"","infoUrls":[],"categoryId":"47b863f6-8116-432b-9fc1-9e487fdaa203","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_accountype_0","displayName":"Administrator","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_accountype_1","displayName":"Standard User","description":null,"helpText":null}]},"32ddeba12b603d15":{"id":"settings_item_wallpaper_where","displayName":"Where","description":"A number that indicates where to use the wallpaper, which is one of the following values:\n\n- `1`: Lock Screen\n- `2`: Home Screen\n- `3`: Both Lock and Home Screens.\n\n In iOS 16 and later, and iPadOS 17 and later, when you set the wallpaper for the first time, the system sets both the Lock Screen and Home Screen. After that, you can separately set each location.","helpText":null,"infoUrls":[],"categoryId":"ef7328b1-c666-40fe-a933-57b14bc77dd3","categoryName":"Wallpaper","options":[{"id":"settings_item_wallpaper_where_0","displayName":"Lock screen","description":null,"helpText":null},{"id":"settings_item_wallpaper_where_1","displayName":"Home screen","description":null,"helpText":null},{"id":"settings_item_wallpaper_where_2","displayName":"Both","description":null,"helpText":null}]},"32da216f38bedd81":{"id":"softwareupdate_automaticactions_download","displayName":"Download","description":"Specifies whether automatic downloads of available updates can be controlled by the user:\n* \"Allowed\" - the user can enable or disable automatic downloads.\n* \"AlwaysOn\" - automatic downloads are always enabled.\n* \"AlwaysOff\" - automatic downloads are always disabled.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_automaticactions_download_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_download_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_download_2","displayName":"AlwaysOff","description":null,"helpText":null}]},"32303bc01a2a1cd2":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist","displayName":"Number of folders in the Recent Folders list (User)","description":"This policy setting specifies the number of unpinned entries displayed in the Recent Folders list that appears when users click Open or Save As on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of unpinned entries to be between 0 and 20. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 5 unpinned items are displayed in the Recent Folders list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Folders list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"bd1dad69-5cbe-415e-8565-e87b15cd4431","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist_1","displayName":"Enabled","description":null,"helpText":null}]},"324696dc8228e32c":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders34","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders34_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders34_1","displayName":"True","description":null,"helpText":null}]},"32b0ad3ea7c3b694":{"id":"user_vendor_msft_policy_config_admx_printing_downlevelbrowse","displayName":"Browse the network to find printers (User)","description":"Allows users to use the Add Printer Wizard to search the network for shared printers.\r\n\r\nIf you enable this setting or do not configure it, when users choose to add a network printer by selecting the \"A network printer, or a printer attached to another computer\" radio button on Add Printer Wizard's page 2, and also check the \"Connect to this printer (or to browse for a printer, select this option and click Next)\" radio button on Add Printer Wizard's page 3, and do not specify a printer name in the adjacent \"Name\" edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list.\r\n\r\nIf you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name.\r\n\r\nNote: This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-downlevelbrowse"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_admx_printing_downlevelbrowse_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_downlevelbrowse_1","displayName":"Enabled","description":null,"helpText":null}]},"32f026122f83efd4":{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1","displayName":"Set time (in seconds) to force reboot (User)","description":"This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices.\r\n\r\nIf you enable this policy setting, you can set the number of seconds you want the system to wait until a reboot.\r\n\r\nIf you disable or do not configure this setting, the operating system does not force a reboot.\r\n\r\nNote: If no reboot is forced, the access right does not take effect until the operating system is restarted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-accessrights-reboottime-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1_1","displayName":"Enabled","description":null,"helpText":null}]},"32f192c38a460b07":{"id":"user_vendor_msft_policy_config_admx_taskbar_noremotedestinations","displayName":"Do not display or track items in Jump Lists from remote locations (User)","description":"This policy setting allows you to control displaying or tracking items in Jump Lists from remote locations.\r\n\r\nThe Start Menu and Taskbar display Jump Lists off of programs. These menus include files, folders, websites and other relevant items for that program. This helps users more easily reopen their most important documents and other tasks.\r\n\r\nIf you enable this policy setting, the Start Menu and Taskbar only track the files that the user opens locally on this computer. Files that the user opens over the network from remote computers are not tracked or shown in the Jump Lists. Use this setting to reduce network traffic, particularly over slow network connections.\r\n\r\nIf you disable or do not configure this policy setting, all files that the user opens appear in the menus, including files located remotely on another computer.\r\n\r\nNote: This setting does not prevent Windows from displaying remote files that the user has explicitly pinned to the Jump Lists. See the \"Do not allow pinning items in Jump Lists\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-noremotedestinations"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_noremotedestinations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_noremotedestinations_1","displayName":"Enabled","description":null,"helpText":null}]},"328b0c17758010a4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins","displayName":"Enable Site Isolation for specified origins (User)","description":"Setting the policy means each of the named origins in a comma-separated list runs in a dedicated process. Each named origin's process will only be allowed to contain documents from that origin and its subdomains. For example, specifying https://a1.example.com/ allows https://a2.a1.example.com/ in the same process, but not https://example.com or https://b.example.com.\r\n\r\nSince Google Chrome 77, you can also specify a range of origins to isolate using a wildcard. For example, specifying https://[*.]corp.example.com will give every origin underneath https://corp.example.com its own dedicated process, including https://corp.example.com itself, https://a1.corp.example.com, and https://a2.a1.corp.example.com.\r\n\r\nNote that all sites (i.e., scheme plus eTLD+1, such as https://example.com) are already isolated by default on Desktop platforms, as noted in the SitePerProcess policy. This IsolateOrigins policy is useful to isolate specific origins at a finer granularity (e.g., https://a.example.com).\r\n\r\nAlso note that origins isolated by this policy will be unable to script other origins in the same site, which is otherwise possible if two same-site documents modify their document.domain values to match. Administrators should confirm this uncommon behavior is not used on an origin before isolating it.\r\n\r\nSetting the policy to off or leaving it unset lets users change this setting.\r\n\r\nNote: For Android, use the IsolateOriginsAndroid policy instead.\r\n\r\nExample value: https://a.example.com/,https://othersite.org/,https://[*.]corp.example.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"32fb1daa6d1099cb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended","displayName":"Enable Bookmark Bar (User)","description":"Setting the policy to True displays a bookmark bar in Google Chrome. Setting the policy to False means users never see the bookmark bar.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide whether to use this function.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"327f9a4a8e0c4459":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls","displayName":"Allow the Serial API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a serial port.\r\n\r\nLeaving the policy unset means DefaultSerialGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy SerialBlockedForUrls (if there is a match), DefaultSerialGuardSetting (if set), or the users' personal settings take precedence, in that order.\r\n\r\nURL patterns must not conflict with SerialBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"32369a14992ba419":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols","displayName":"Use Legacy Form Controls until M84. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"3210c0dcab4ee8c4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize","displayName":"List of error messages to customize (User)","description":"Enter error ID for Value Name and custom button text for Value","helpText":"","infoUrls":[],"categoryId":"5b832259-c30b-43bb-b249-9d3ea4d5b028","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_1","displayName":"Enabled","description":null,"helpText":null}]},"327ff412e446a924":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation","displayName":"AutoRecover save location (User)","description":"This policy setting allows you to specify the location where AutoRecover information is to be saved. Directing the location to a network drive may allow you to back up these files along with other network files.\r\n\r\nIf you enable this policy setting, you may specify the location where AutoRecover information is to be saved.\r\n\r\nIf you disable or you do not configure this policy setting, the default location is %userprofile%\\Application Data\\Microsoft\\Excel.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"32428bd0b9aca1b2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_pathcolon17","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"3292b5af76eca547":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"32a511e72e29861f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled","displayName":"Enable saving passwords to the password manager (User)","description":"Enable Microsoft Edge to save user passwords.\r\n\r\nIf you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically.\r\n\r\nIf you disable this policy, users can't save new passwords, but they can still use previously saved passwords.\r\n\r\nIf you enable or disable this policy, users can't change or override it in Microsoft Edge. If you don't configure it, users can save passwords, as well as turn this feature off.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3265c489999b0ac1":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_automaticfullscreenallowedforurlsdesc","displayName":"Allow automatic full screen on specified sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"32a40a9c25772e19":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"3235b77e4c33cd76":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled","displayName":"Use Windows proxy resolver (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nUse Windows to resolve proxies for all browser networking instead of the proxy resolver built into Microsoft Edge. The Windows proxy resolver enables Windows proxy features such as DirectAccess/NRPT.\r\n\r\nThis policy comes with the problems described by https://crbug.com/644030. It causes PAC files to be fetched and executed by Windows code, including PAC files set via the 'ProxyPacUrl' (Set the proxy .pac file URL) policy. Since Network Fetches for the PAC file happen via Windows instead of Microsoft Edge code, network policies such as 'DnsOverHttpsMode' (Control the mode of DNS-over-HTTPS) will not apply to network fetches for a PAC file.\r\n\r\nThis policy is deprecated. It will be superseded by a similar feature in a future release, see https://crbug.com/1032820.\r\n\r\nIf you enable this policy, the Windows proxy resolver will be used.\r\n\r\nIf you disable or don't configure this policy, the Microsoft Edge proxy resolver will be used.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"323014e25368def4":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled","displayName":"Configure address bar editing for kiosk mode public browsing experience (User)","description":"This policy only applies to Microsoft Edge kiosk mode while using the public browsing experience.\r\n\r\nIf you enable or don't configure this policy, users can change the URL in the address bar.\r\n\r\nIf you disable this policy, it prevents users from changing the URL in the address bar.\r\n\r\nFor detailed information on configuring kiosk Mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"categoryId":"d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","categoryName":"Kiosk Mode settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"32987eb6f84482f1":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins_screencaptureallowedbyoriginsdesc","displayName":"Allow Desktop, Window, and Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"327b6cf1e85065b6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceemail_l_emailmapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"32a7ad03b7d231ef":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicbahrain","displayName":"Arabic (Bahrain) (User)","description":"Enables the editing language Arabic (Bahrain)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicbahrain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicbahrain_1","displayName":"Enabled","description":null,"helpText":null}]},"329d656b9fa0aa61":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disalowconvertdocumentpolicy","displayName":"Disallow Convert Document (Excel, PowerPoint, Word) (User)","description":"Disallow users to convert files that are in compatibility mode via the \"Convert\" command for Excel, PowerPoint, and Word.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disalowconvertdocumentpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disalowconvertdocumentpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"32a44afea57f40ed":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_providefeedbackwithsound","displayName":"Provide feedback with sound (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_providefeedbackwithsound_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_providefeedbackwithsound_1","displayName":"Enabled","description":null,"helpText":null}]},"325a30193f191fd2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10","displayName":"Trusted Location #10 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10_1","displayName":"Enabled","description":null,"helpText":null}]},"32761408682ab338":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc01","displayName":"Unsafe Location #1 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc01_1","displayName":"Enabled","description":null,"helpText":null}]},"328135ceb60db491":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofallversions_l_daysofallversionsspinid","displayName":"Days back (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":null},"32040abb15e26050":{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_miscellaneous_l_equivalentcomaddin_l_equivalentcomaddin2","displayName":"Outlook web add-ins to deactivate (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"32aca05b71e4f1e3":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_popupmenuonrightmouseclick","displayName":"Show menu on right mouse click (User)","description":"Checked: Checks the option ''Show menu on right mouse click''. | Unchecked: Unchecks the option ''Show menu on right mouse click''.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_popupmenuonrightmouseclick_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_popupmenuonrightmouseclick_1","displayName":"Enabled","description":null,"helpText":null}]},"3252eea9a5a35fb2":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]},"32937b1ccc4c05b5":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filepublishtoweb","displayName":"File tab | Export | Publish HTML (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filepublishtoweb_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filepublishtoweb_1","displayName":"True","description":null,"helpText":null}]},"320a77e8fc982b19":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_turnoffshapesheetformulaautocomplete","displayName":"Turn off ShapeSheet Formula AutoComplete (User)","description":"This policy setting allows you to configure ShapeSheet Formula AutoComplete.\r\n\r\nIf you enable this policy setting, ShapeSheet Formula AutoComplete is turned off.\r\n\r\nIf you disable or do not configure this policy setting, ShapeSheet Formula AutoComplete is turned on.","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_turnoffshapesheetformulaautocomplete_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_turnoffshapesheetformulaautocomplete_1","displayName":"Enabled","description":null,"helpText":null}]},"3287cb677221aa6d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_recentlyusedfilelist_l_numberofentries","displayName":"Number of entries: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":null},"3281635571582f8a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8","displayName":"Style area pane width in Draft and Outline views (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_0","displayName":"0''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_24","displayName":"0.25''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_48","displayName":"0.5''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_72","displayName":"0.75''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_96","displayName":"1''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_120","displayName":"1.25''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_144","displayName":"1.5''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_168","displayName":"1.75''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_192","displayName":"2''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_216","displayName":"2.25''","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_l_styleareawidth8_240","displayName":"2.5''","description":null,"helpText":null}]},"32d1391b322c660f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders23","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders23_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders23_1","displayName":"True","description":null,"helpText":null}]},"326f159b473719a0":{"id":"vendor_msft_firewall_mdmstore_domainprofile_shielded","displayName":"Shielded","description":"This value is used as an on/off switch. If this value is on and EnableFirewall is on, the server MUST block all incoming traffic regardless of other policy settings. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_shielded_false","displayName":"False","description":"Shielding Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_shielded_true","displayName":"True","description":"Shielding On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/33.json b/public/intune-definitions/33.json new file mode 100644 index 000000000000..6b31d9025235 --- /dev/null +++ b/public/intune-definitions/33.json @@ -0,0 +1 @@ +{"3382ef6813fc3421":{"id":"app_allowed_deniedbinaries_item_signingstate","displayName":"Signing State","description":"The code signing state to match binaries.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_allowed_deniedbinaries_item_signingstate_0","displayName":"All","description":null,"helpText":null},{"id":"app_allowed_deniedbinaries_item_signingstate_1","displayName":"TestFlight","description":null,"helpText":null},{"id":"app_allowed_deniedbinaries_item_signingstate_2","displayName":"DeveloperID","description":null,"helpText":null},{"id":"app_allowed_deniedbinaries_item_signingstate_3","displayName":"Enterprise","description":null,"helpText":null},{"id":"app_allowed_deniedbinaries_item_signingstate_4","displayName":"AppStore","description":null,"helpText":null},{"id":"app_allowed_deniedbinaries_item_signingstate_5","displayName":"Apple","description":null,"helpText":null}]},"335efc04d75bb613":{"id":"com.android.devicerestrictionpolicy.dataroamingblocked","displayName":"Block roaming data services","description":"If 'True', prevents data roaming over the cellular network. If 'False', Intune doesn't change or update this setting. By default, the OS might allow data roaming when the device is on a cellular network. Available for fully managed, dedicated and corporate-owned work profile devices. ","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.dataroamingblocked_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.dataroamingblocked_false","displayName":"False","description":"false","helpText":null}]},"33d355b4064e2cf4":{"id":"com.apple.applicationaccess_allowitunesfilesharing","displayName":"Allow iTunes File Sharing","description":"If false, disables iTunes file sharing services. Available in macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowitunesfilesharing_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowitunesfilesharing_true","displayName":"True","description":null,"helpText":null}]},"33dc81f4d70c61b0":{"id":"com.apple.applicationaccess_safariallowjavascript","displayName":"Safari Allow Java Script","description":"If false, Safari doesn’t execute JavaScript. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_safariallowjavascript_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_safariallowjavascript_true","displayName":"True","description":null,"helpText":null}]},"33ed7f5344280623":{"id":"com.apple.caldav.account_caldavprincipalurl","displayName":"Cal DAV Principal URL","description":"The base URL to the user’s calendar.","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":null},"332c67f6562f8746":{"id":"com.apple.extensiblesso_extensiondata_requiretlsforldap_kerberos","displayName":"Require TLS For LDAP","description":"Require that LDAP connections use TLS. Available in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_requiretlsforldap_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_requiretlsforldap_kerberos_true","displayName":"True","description":null,"helpText":null}]},"33641c8d647442f6":{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_lcid","displayName":"Microsoft AutoUpdate LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"331b82a66457fcff":{"id":"com.apple.managedclient.preferences_edgewalletetreeenabled","displayName":"Edge Wallet E-Tree Enabled","description":"The Edge Wallet E-Tree feature in Microsoft Edge allows users to plant a E-Tree for their own.\n\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\n\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgewalletetreeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgewalletetreeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgewalletetreeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"33aaf3e02a99b8dd":{"id":"com.apple.managedclient.preferences_scarewareblockerblocksdetectedsitesenabled","displayName":"Configure Microsoft Edge scareware blocker to block sites detected as potential tech scams","description":"This policy controls whether Microsoft Edge blocks sites that are detected as potential tech scams.\n\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\n\nIf you enable or don't configure this policy, Microsoft Edge blocks sites detected as potential tech scams.\n\nIf you disable this policy, Microsoft Edge doesn't block sites detected as potential tech scams.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#scarewareblockerblocksdetectedsitesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_scarewareblockerblocksdetectedsitesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_scarewareblockerblocksdetectedsitesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"33ebc75213360699":{"id":"com.apple.softwareupdate_automaticallyinstallmacosupdates","displayName":"Automatically Install Mac OS Updates (Deprecated)","description":"If false, restricts the \"Install macOS Updates\" option and prevents the user from changing the option.","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_automaticallyinstallmacosupdates_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_automaticallyinstallmacosupdates_true","displayName":"True","description":null,"helpText":null}]},"3335f28d23c31bcc":{"id":"com.apple.systempolicy.managed_disableoverride","displayName":"Disable Override","description":"If true, disables the Finder's contextual menu item.","helpText":null,"infoUrls":[],"categoryId":"64538726-8745-4e7a-b370-332f725b58bf","categoryName":"System Policy Managed","options":[{"id":"com.apple.systempolicy.managed_disableoverride_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systempolicy.managed_disableoverride_true","displayName":"True","description":null,"helpText":null}]},"3307743cdfe1324b":{"id":"com.apple.webcontent-filter_filterbrowsers","displayName":"Filter Browsers","description":"If true, enables the filtering of WebKit traffic.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_filterbrowsers_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_filterbrowsers_true","displayName":"True","description":null,"helpText":null}]},"336854e0d708020e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_recommended","displayName":"Allow features to download assets from the Asset Delivery Service (users can override)","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\nThese assets can be config files or Machine Learning models that power the features that use this service.\n\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\n\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"334b61259066d15c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeallowuserbypass","displayName":"Allow users to bypass Enhanced Security Mode","description":"Microsoft Edge lets users bypass Enhanced Security Mode on a site via Settings page or PageInfo flyout. This policy lets you configure whether users can bypass Enhanced Security Mode.\n\nIf you disable this policy, Microsoft Edge can't allow users to bypass Enhanced Security Mode.\n\nIf you enable or don't configure this policy, Microsoft Edge allows users to bypass Enhanced Security Mode.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeallowuserbypass_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeallowuserbypass_true","displayName":"Enabled","description":null,"helpText":null}]},"33448f1b0808023f":{"id":"device_vendor_msft_laps_policies_passphraselength","displayName":"Passphrase Length","description":"Use this setting to configure the number of passphrase words.\n\nIf not specified, this setting will default to 6 words\n\nThis setting has a minimum allowed value of 3 words.\n\nThis setting has a maximum allowed value of 10 words.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":null},"33c17f08a36b3e3a":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_detailtext","displayName":"Display a custom message when installation is prevented by a policy setting","description":"This policy setting allows you to display a custom message to users in a notification when a device installation is attempted and a policy setting prevents the installation.\r\n\r\nIf you enable this policy setting, Windows displays the text you type in the Detail Text box when a policy setting prevents device installation.\r\n\r\nIf you disable or do not configure this policy setting, Windows displays a default message when a policy setting prevents device installation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-deviceinstallation#admx-deviceinstallation-deviceinstall-deniedpolicy-detailtext"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_detailtext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_detailtext_1","displayName":"Enabled","description":null,"helpText":null}]},"333ea12d9e94690a":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_limitvalue","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":null},"3375dfd5e429f19f":{"id":"device_vendor_msft_policy_config_admx_printing_showjobtitleineventlogs","displayName":"Allow job name in event logs","description":"\r\n This policy controls whether the print job name will be included in print event logs.\r\n\r\n If you disable or do not configure this policy setting, the print job name will not be included.\r\n\r\n If you enable this policy setting, the print job name will be included in new log entries.\r\n\r\n Note: This setting does not apply to Branch Office Direct Printing jobs.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-showjobtitleineventlogs"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_showjobtitleineventlogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_showjobtitleineventlogs_1","displayName":"Enabled","description":null,"helpText":null}]},"33bbabc4d9c3fb3c":{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_2_customclasses_list","displayName":"GUID for custom removable storage class:","description":null,"helpText":"","infoUrls":[],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":null},"33abded35a15f459":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_temp_delete","displayName":"Do not delete temp folders upon exit","description":"This policy setting specifies whether Remote Desktop Services retains a user's per-session temporary folders at logoff.\r\n\r\nYou can use this setting to maintain a user's session-specific temporary folders on a remote computer, even if the user logs off from a session. By default, Remote Desktop Services deletes a user's temporary folders when the user logs off.\r\n\r\nIf you enable this policy setting, a user's per-session temporary folders are retained when the user logs off from a session.\r\n\r\nIf you disable this policy setting, temporary folders are deleted when a user logs off, even if the server administrator specifies otherwise.\r\n\r\nIf you do not configure this policy setting, Remote Desktop Services deletes the temporary folders from the remote computer at logoff, unless specified otherwise by the server administrator.\r\n\r\nNote: This setting only takes effect if per-session temporary folders are in use on the server. If you enable the Do not use temporary folders per session policy setting, this policy setting has no effect.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-temp-delete"],"categoryId":"b40b8f80-c0e6-4494-8085-f90cadc167a9","categoryName":"Temporary folders","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_temp_delete_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_temp_delete_1","displayName":"Enabled","description":null,"helpText":null}]},"33ceb505b9a44e0b":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_checksamesourceandtargetforfranddfs","displayName":"Verify old and new Folder Redirection targets point to the same share before redirecting","description":"This policy setting allows you to prevent data loss when you change the target location for Folder Redirection, and the new and old targets point to the same network share, but have different network paths.\r\n\r\nIf you enable this policy setting, Folder Redirection creates a temporary file in the old location in order to verify that new and old locations point to the same network share. If both new and old locations point to the same share, the target path is updated and files are not copied or deleted. The temporary file is deleted.\r\n\r\nIf you disable or do not configure this policy setting, Folder Redirection does not create a temporary file and functions as if both new and old locations point to different shares when their network paths are different.\r\n\r\nNote: If the paths point to different network shares, this policy setting is not required. If the paths point to the same network share, any data contained in the redirected folders is deleted if this policy setting is not enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-checksamesourceandtargetforfranddfs"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_checksamesourceandtargetforfranddfs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_checksamesourceandtargetforfranddfs_1","displayName":"Enabled","description":null,"helpText":null}]},"33561f777e2416e3":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_refresh_unit_options","displayName":"User Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"33132d429b976253":{"id":"device_vendor_msft_policy_config_browser_allowautofill","displayName":"Allow Autofill","description":"This setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowautofill"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowautofill_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowautofill_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"3390a204ccf22107":{"id":"device_vendor_msft_policy_config_browser_setnewtabpageurl","displayName":"Set New Tab Page URL","description":"You can set the default New Tab page URL in Microsoft Edge. Enabling this policy prevents your users from changing the New tab page setting. When enabled and the Allow web content on New Tab page policy is disabled, Microsoft Edge ignores the URL specified in this policy and opens about:blank. If enabled, you can set the default New Tab page URL. If disabled or not configured, the default Microsoft Edge new tab page is used. Default setting: Disabled or not configured Related policy: Allow web content on New Tab page","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#setnewtabpageurl"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"333a78c980e20a06":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed","displayName":"Allow users to opt in to Safe Browsing extended reporting","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"33b329dbc632fb39":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_odfclockedretrycount","displayName":"Locked Retry Count (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"33111a08af830fe1":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations","displayName":"VHD Locations","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the network location where the VHD(X) files are stored.\r\n\r\nExamples:\r\n- Sinlge location: \\\\\\\r\n- Multiple locations: \\\\\\;\\\\\\\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDLocations\r\nREG_SZ","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},"3395958be7370f1d":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowuserdatapersistence"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"33542efce22aba5c":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended","displayName":"Configure the new tab page URL","description":"Configures the default URL for the new tab page.\r\n\r\nThis policy determines the page that's opened when new tabs are created (including when new windows are opened). It also affects the startup page if that's set to open to the new tab page.\r\n\r\nThis policy doesn't determine which page opens on startup; that's controlled by the 'RestoreOnStartup' (Action to take on startup) policy. It also doesn’t affect the home page if that’s set to open to the new tab page.\r\n\r\nIf you don't configure this policy, the default new tab page is used.\r\n\r\nIf you configure this policy *and* the 'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience) policy, this policy has precedence.\r\n\r\nIf an invalid URL is provided, new tabs will open about://blank.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"333545ff354d1a4d":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling","displayName":"Restrict exposure of localhost IP address by WebRTC (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default","displayName":"Allow all interfaces. This exposes the local IP address","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_and_private_interfaces","displayName":"Allow public and private interfaces over http default route. This exposes the local IP address","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_interface_only","displayName":"Allow public interface over http default route. This doesn't expose the local IP address","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_disable_non_proxied_udp","displayName":"Use TCP unless proxy server supports UDP. This doesn't expose the local IP address","description":null,"helpText":null}]},"33ee2fe19140610f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls","displayName":"Block notifications on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from displaying notifications.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultNotificationsSetting' (Default notification setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"3394eafddcc6a375":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation","displayName":"Configure the new tab page URL","description":"Configures the default URL for the new tab page.\r\n\r\nThis policy determines the page that's opened when new tabs are created (including when new windows are opened). It also affects the startup page if that's set to open to the new tab page.\r\n\r\nThis policy doesn't determine which page opens on startup; that's controlled by the 'RestoreOnStartup' (Action to take on startup) policy. It also doesn’t affect the home page if that’s set to open to the new tab page.\r\n\r\nIf you don't configure this policy, the default new tab page is used.\r\n\r\nIf you configure this policy *and* the 'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience) policy, this policy has precedence.\r\n\r\nIf an invalid URL is provided, new tabs will open about://blank.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"332e9a49be6c090a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winprojexe20","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winprojexe20_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winprojexe20_1","displayName":"True","description":null,"helpText":null}]},"330d65a746792314":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_exprwdexe192","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_exprwdexe192_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_exprwdexe192_1","displayName":"True","description":null,"helpText":null}]},"33a61fdc496be9ff":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling","displayName":"Consistent Mime Handling","description":"Mime Handling","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_1","displayName":"Enabled","description":null,"helpText":null}]},"3395ba10bea1fe79":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_powerpntexe","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_powerpntexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_powerpntexe_1","displayName":"True","description":null,"helpText":null}]},"3315ac0d09d3086e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_officemgmtcom","displayName":"Office 365 Client Management","description":"This policy setting enables programmatic control of Office 365 clients.\r\n\r\nIf you enable this policy, System Center Configuration Manager or other application management solutions can manage the Office 365 client. After applying the policy, you will be required to restart the Office Click-to-run service. \r\n\r\nIf you disable or do not configure this policy setting, System Center Configuration Manager update workflow will not be able to manage Office 365 clients. You will, however, be able to continue to use the Office Deployment Tool and System Center Configuration Manager’s program and packages or applications deployment methods. \r\n\r\nImportant: This policy setting only applies to Office 365 clients that are installed by using Click-to-Run, including Office 365 ProPlus, Office 365 Business, Visio Pro for Office 365 and Project Pro for Office 365. It doesn't apply to Office products that use Windows Installer (MSI)","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_officemgmtcom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_officemgmtcom_1","displayName":"Enabled","description":null,"helpText":null}]},"33f6e84964d50de1":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath_l_updatepathid","displayName":"Location for updates: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":null},"3345b6c5e903ccfd":{"id":"device_vendor_msft_policy_config_smartscreen_enablesmartscreeninshell","displayName":"Enable Smart Screen In Shell","description":" Allows IT Admins to configure SmartScreen for Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-smartscreen#enablesmartscreeninshell"],"categoryId":"3f61a5fe-8508-44dd-bcf0-83273643026a","categoryName":"Smart Screen","options":[{"id":"device_vendor_msft_policy_config_smartscreen_enablesmartscreeninshell_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enablesmartscreeninshell_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"33b506e4ee333512":{"id":"device_vendor_msft_policy_config_update_engagedrestartsnoozeschedule","displayName":"Engaged Restart Snooze Schedule","description":"For Quality Updates, this policy specifies the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. Value type is integer. Default is 3 days. Supported value range: 1 - 3. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestartsnoozeschedule"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"33bb597b93eb0cd7":{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowuserinputfromwirelessdisplayreceiver","displayName":"Allow User Input From Wireless Display Receiver","description":"Setting this policy controls whether or not the wireless display can send input—keyboard, mouse, pen, and touch input if the display supports it—back to the source device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowuserinputfromwirelessdisplayreceiver"],"categoryId":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowuserinputfromwirelessdisplayreceiver_0","displayName":"Wireless display input disabled.","description":"Wireless display input disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowuserinputfromwirelessdisplayreceiver_1","displayName":"Wireless display input enabled.","description":"Wireless display input enabled.","helpText":null}]},"3376ad96546eb141":{"id":"safari_newtabstartpage","displayName":"New Tab Start Page","description":"Sets the start page for new tabs in Safari.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"3356f15863d7e032":{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpexplicitfeedback","displayName":"Turn off Help Ratings (User)","description":"This policy setting specifies whether users can provide ratings for Help content.\r\n\r\nIf you enable this policy setting, ratings controls are not added to Help content.\r\n\r\nIf you disable or do not configure this policy setting, ratings controls are added to Help topics.\r\n\r\nUsers can use the control to provide feedback on the quality and usefulness of the Help and Support content.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-helpandsupport#admx-helpandsupport-hpexplicitfeedback"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpexplicitfeedback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpexplicitfeedback_1","displayName":"Enabled","description":null,"helpText":null}]},"3366580eb09a4603":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosettaskbar","displayName":"Prevent changes to Taskbar and Start Menu Settings (User)","description":"This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.\r\n\r\nIf you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.\r\n\r\nIf the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.\r\n\r\nIf you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosettaskbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosettaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosettaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"33d7eae18f44f5da":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_ts_gateway_override","displayName":"Allow users to change this setting (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_ts_gateway_override_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_ts_gateway_override_1","displayName":"True","description":null,"helpText":null}]},"333b8491f30df9b3":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word","displayName":"Microsoft Word 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Word 2010.\r\nBy default, the user settings of Microsoft Word 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010word"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word_1","displayName":"Enabled","description":null,"helpText":null}]},"33616a3b5919a322":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled","displayName":"Enable component updates in Google Chrome (User)","description":"Enables component updates for all components in Google Chrome when not set or set to enabled.\r\n\r\nIf set to disabled, updates to components are disabled. However, some components are exempt from this policy: updates to any component that does not contain executable code, or does not significantly alter the behavior of the browser, or is critical for its security will not be disabled.\r\nExamples of such components include the certificate revocation lists and Safe Browsing data.\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.\r\nPlease note that setting this policy to disabled can potentially prevent the Google Chrome developers from providing critical security fixes in a timely manner and is thus not recommended.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"33d35ccdf7035f22":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended","displayName":"Enable Safe Browsing for trusted sources (User)","description":"Setting the policy to Enabled or leaving it unset means downloaded files are sent to be analyzed by Safe Browsing, even when it's from a trusted source.\r\n\r\nSetting the policy to Disabled means downloaded files won't be sent to be analyzed by Safe Browsing when it's from a trusted source.\r\n\r\nThese restrictions apply to downloads triggered from webpage content, as well as the Download link menu option. These restrictions don't apply to the save or download of the currently displayed page or to saving as PDF from the printing options.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"33dc605a82700412":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter","displayName":"Enable Google Cast (User)","description":"Setting the policy to Enabled or leaving it unset turns on Google Cast, which users can launch from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\r\n\r\nSetting the policy to Disabled turns off Google Cast.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter_1","displayName":"Enabled","description":null,"helpText":null}]},"33be1033589fcd38":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_remoteaccesshostdebugoverridepolicies","displayName":"Policy overrides for Debug builds of the remote access host (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"3343801c0c8ff2ed":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_renderinchromeframelistdesc","displayName":"Always render the following URL patterns in Google Chrome Frame (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"33a093336780a6d1":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt","displayName":"Prompt users to re-authenticate to the profile (User)","description":"When set to DoNotPrompt or left unset, Google Chrome does not automatically prompt the user to re-authenticate to the browser.\r\n\r\nWhen set to PromptInTab, when the user's authentication expires, immediately open a new tab with the Google login page. This only happens if using Chrome Sync.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"33049e4e27e41897":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed","displayName":"Out-of-process print drivers allowed (User)","description":"Controls if Google Chrome interacts with printer drivers from a separate service process. Platform printing calls to query available printers, get print driver settings, and submit documents for printing to local printers are made from a service process. Moving such calls out of the browser process helps improve stability and reduce frozen UI behavior in Print Preview.\r\n\r\nWhen this policy is set to Enabled or not set, Google Chrome will use a separate service process for platform printing tasks.\r\n\r\nWhen this policy is set to Disabled, Google Chrome will use the browser process for platform printing tasks.\r\n\r\nThis policy will be removed in the future, after the out-of-process print drivers feature has fully rolled out.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"33bf3b8bcff10a0f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_l_officedataconnectionfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_l_officedataconnectionfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_l_officedataconnectionfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"33fecac801854b08":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407","displayName":"Allow paste operations via script (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_1","displayName":"Prompt","description":null,"helpText":null}]},"3302affd6923d21d":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"3351742043003ac2":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004","displayName":"Download unsigned ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_1","displayName":"Prompt","description":null,"helpText":null}]},"3390175462b103cb":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_totalmemorylimitmb","displayName":"Set memory limit for Microsoft Edge instances: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"33c366f147f45243":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled","displayName":"Specifies whether the display-capture permissions-policy is checked or skipped (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 109.\r\n\r\nThis policy is obsolete. The policy was a temporary workaround for non-spec-compliant enterprise applications.\r\n\r\nThis policy stopped working in Microsoft Edge 107 and was obsoleted in Microsoft Edge 110.\r\n\r\nThe display-capture permissions-policy gates access to getDisplayMedia(),\r\nas per this spec:\r\nhttps://www.w3.org/TR/screen-capture/#feature-policy-integration\r\nHowever, if this policy is Disabled, this requirement is not enforced,\r\nand getDisplayMedia() is allowed from contexts that would otherwise be\r\nforbidden.\r\n\r\nIf you enable or don't configure this policy, sites can only call getDisplayMedia() from\r\ncontexts which are allowlisted by the display-capture permissions-policy.\r\n\r\nIf you disable this policy, sites can call getDisplayMedia() even from contexts\r\nwhich are not allowlisted by the display-capture permissions policy.\r\nNote that other restrictions may still apply.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"33b22b22642c9ca0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastservicecreatesharednotes8","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastservicecreatesharednotes8_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastservicecreatesharednotes8_1","displayName":"True","description":null,"helpText":null}]},"33b0b1b1784bbf41":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome","displayName":"Replace Label - Home (User)","description":"This policy setting allows you to change or remove the 6th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome_1","displayName":"Enabled","description":null,"helpText":null}]},"33164e7c70a8f46c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy6_l_placesbarname219","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"333688aa93dd56f2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displaymenusanddialogboxesin","displayName":"Display menus and dialog boxes in (User)","description":"Sets the display language of the user interface for all Office 2016 programs. In addition to configuring this setting, consider enabling the same language in the 'Enabled Editing Languages' policy node.","helpText":"","infoUrls":[],"categoryId":"0f6020d9-278b-4284-894a-bc4a70c8cf32","categoryName":"Display Language","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displaymenusanddialogboxesin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displaymenusanddialogboxesin_1","displayName":"Enabled","description":null,"helpText":null}]},"33eac2f6a35f47fd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_protectdocumentmetadataforpasswordprotected","displayName":"Protect document metadata for password protected files (User)","description":"This policy setting determines whether metadata is encrypted when an Office Open XML file is password protected.\r\n \r\n If you enable this policy setting, Excel 2016, PowerPoint 2016, and Word 2016 encrypt metadata stored in password-protected Office Open XML files and override any configuration changes on users' computers.\r\n \r\n If you disable this policy setting, Office 2016 applications cannot encrypt metadata in password-protected Office Open XML files, which can reduce security.\r\n \r\n If you do not configure this policy setting, when an Office Open XML document is protected with a password and saved, any metadata associated with the document is encrypted along with the rest of the document's contents. If this configuration is changed, potentially sensitive information such as the document author and hyperlink references could be exposed to unauthorized people.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_protectdocumentmetadataforpasswordprotected_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_protectdocumentmetadataforpasswordprotected_1","displayName":"Enabled","description":null,"helpText":null}]},"3326c5f873ef72f6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc13_l_pathcolon13","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"331f3499982b7b4f":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsassoonasinavigateawayfromthem","displayName":"Lock password protected sections as soon as I navigate away from them (User)","description":"OneNote supports password protecting sections and they are unlocked once a user types the password and can be locked again by either a timeout period or when you navigate away from the section. This option will lock the section once you navigate away from the password protected section.","helpText":"","infoUrls":[],"categoryId":"1979a12b-2a72-438d-9de7-320d1b38e777","categoryName":"Password","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsassoonasinavigateawayfromthem_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsassoonasinavigateawayfromthem_1","displayName":"Enabled","description":null,"helpText":null}]},"33e76b999b79c8cb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingrootcertificates_l_indicateamissingrootcertificateasan","displayName":"Indicate a missing root certificate as a(n): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingrootcertificates_l_indicateamissingrootcertificateasan_0","displayName":"Neither error nor warning","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingrootcertificates_l_indicateamissingrootcertificateasan_1","displayName":"Warning","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingrootcertificates_l_indicateamissingrootcertificateasan_2","displayName":"Error","description":null,"helpText":null}]},"3318021cf41d5db1":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders51","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders51_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders51_1","displayName":"True","description":null,"helpText":null}]},"33ea884b3e6f2bfa":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_datecolon49","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"3304180ebf2100ea":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2","displayName":"Default View (User)","description":"","helpText":"","infoUrls":[],"categoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","categoryName":"View","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_bar rollup","displayName":"Bar Rollup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_calendar","displayName":"Calendar","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_descriptive network diagram","displayName":"Descriptive Network Diagram","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_detail gantt","displayName":"Detail Gantt","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_gantt chart","displayName":"Gantt Chart","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_leveling gantt","displayName":"Leveling Gantt","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_milestone date rollup","displayName":"Milestone Date Rollup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_milestone rollup","displayName":"Milestone Rollup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_network diagram","displayName":"Network Diagram","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_relationship diagram","displayName":"Relationship Diagram","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_resource allocation","displayName":"Resource Allocation","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_resource form","displayName":"Resource Form","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_resource graph","displayName":"Resource Graph","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_resource name form","displayName":"Resource Names Form","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_resource sheet","displayName":"Resource Sheet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_resource usage","displayName":"Resource Usage","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_task details form","displayName":"Task Details Form","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_task entry","displayName":"Task Entry","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_task form","displayName":"Task Form","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_task name form","displayName":"Task Name Form","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_task sheet","displayName":"Task Sheet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_task usage","displayName":"Task Usage","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_l_pjdefaultview2_tracking gantt","displayName":"Tracking Gantt","description":null,"helpText":null}]},"3399a3566efa0799":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_l_descriptioncolon82","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"331223a12fcc7865":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_diacritics","displayName":"Diacritics (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_diacritics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_diacritics_1","displayName":"Enabled","description":null,"helpText":null}]},"33eab334ba1957de":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview","displayName":"Do not open files from the Internet zone in Protected View (User)","description":"This policy setting allows you to determine if files downloaded from the Internet zone open in Protected View.\r\n\r\nIf you enable this policy setting, files downloaded from the Internet zone do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, files downloaded from the Internet zone open in Protected View.","helpText":"","infoUrls":[],"categoryId":"8391e79d-d618-47c3-979c-83544da43739","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/34.json b/public/intune-definitions/34.json new file mode 100644 index 000000000000..6cb71f15c631 --- /dev/null +++ b/public/intune-definitions/34.json @@ -0,0 +1 @@ +{"34aa2f31fc6e4b8b":{"id":"ade_accountsettings_createlocalprimary","displayName":"Create a local primary account","description":null,"helpText":"","infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":[{"id":"ade_accountsettings_createlocalprimary_0","displayName":"No","description":null,"helpText":null},{"id":"ade_accountsettings_createlocalprimary_1","displayName":"Yes - Standard Account Type","description":null,"helpText":null},{"id":"ade_accountsettings_createlocalprimary_2","displayName":"Yes - Administrator Account Type","description":null,"helpText":null}]},"34d3453851210912":{"id":"com.apple.airprint_com.apple.airprint","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"429c4b85-a2b4-46ed-afa0-6c89c08a5544","categoryName":"AirPrint","options":null},"348d258aa2076e1d":{"id":"com.apple.applicationaccess_ratingmoviesau","displayName":"Rating Movies - Australia","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesau_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesau_1","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesau_2","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesau_3","displayName":"M","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesau_4","displayName":"MA15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesau_5","displayName":"R18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesau_6","displayName":"All","description":null,"helpText":null}]},"34fcc26053a2b49d":{"id":"com.apple.dnssettings.managed_dnssettings_dnsprotocol","displayName":"DNS Protocol","description":"The encrypted transport protocol used to communicate with the DNS server.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":[{"id":"com.apple.dnssettings.managed_dnssettings_dnsprotocol_0","displayName":"HTTPS","description":null,"helpText":null},{"id":"com.apple.dnssettings.managed_dnssettings_dnsprotocol_1","displayName":"TLS","description":null,"helpText":null}]},"341198b142b4e2b2":{"id":"com.apple.loginwindow_denylist","displayName":"Deny List","description":"The list of user GUIDs or group GUIDs of users that cannot log in. This list takes priority over the list in the Allow List key.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":null},"343bb1aa940244f3":{"id":"com.apple.loginwindow_includenetworkuser","displayName":"Include Network User","description":"If true, shows network users when showing a user list.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_includenetworkuser_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_includenetworkuser_true","displayName":"True","description":null,"helpText":null}]},"341fb8bf4629f628":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname","displayName":"Channel Name","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"340211663077748d":{"id":"com.apple.managedclient.preferences_defaultsearchprovidername","displayName":"Default search provider name","description":"Specifies the name of the default search provider.\n\nIf you enable this policy, you set the name of the default search provider.\n\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\n\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchprovidername"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"349ffe193b747d92":{"id":"com.apple.managedclient.preferences_disablehydrationtoast","displayName":"Disable download toasts","description":"Prevents toasts from appearing when applications cause file contents to be downloaded.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#disablehydrationtoast"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_disablehydrationtoast_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablehydrationtoast_true","displayName":"True","description":null,"helpText":null}]},"3426560192e961c1":{"id":"com.apple.managedclient.preferences_disablesmtpparsing","displayName":"Disable SMTP parsing","description":"Disables parsing of SMTP traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disablesmtpparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablesmtpparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"34be12ccc9ab90bd":{"id":"com.apple.managedclient.preferences_howtocheck","displayName":"Enable AutoUpdate","description":"Specifies whether AutoUpdate should download and install updates. This value should be true unless you need to temporarily halt all updates.","helpText":null,"infoUrls":["https://support.microsoft.com/office/update-office-for-mac-automatically-bfd1e497-c24d-4754-92ab-910a4074d7c1"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_howtocheck_0","displayName":"True","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_howtocheck_1","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_howtocheck_2","displayName":"Manual Check","description":null,"helpText":null}]},"3466091e3299ea4a":{"id":"com.apple.managedclient.preferences_kfmblockoptout","displayName":"Force users to use the Folder Backup feature (Known Folder Move)","description":"This setting forces users to keep their Documents and Desktop folders directed to OneDrive.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#kfmblockoptout"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_kfmblockoptout_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_kfmblockoptout_true","displayName":"True","description":null,"helpText":null}]},"3496a972943b4e59":{"id":"com.apple.managedclient.preferences_windowmanagementallowedforurls","displayName":"Allow Window Management permission on specified sites","description":"Lets you configure a list of site url patterns that specify sites which will automatically grant the window management permission. This extends the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\n\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\n\nIf this policy isn't configured for a site, then the policy from \"DefaultWindowManagementSetting\" applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#windowmanagementallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"34d21a61ded283af":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule","displayName":"Desktop Schedule","description":"The schedule for turning a computer on and off.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"344fa278523c4862":{"id":"com.apple.system-extension-policy_allowedsystemextensions_generickey_keytobereplaced","displayName":"Team Identifier","description":"Add a Team Identifier of valid and signed system extensions to load. The team identifier must be alphanumeric (letters and numbers) and have 10 characters. For example, enter ABCDE12345.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"3408b68d24e08e76":{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbarmicrosoftsearchinbingproviderenabled","displayName":"Enable Microsoft Search in Bing suggestions in the address bar (Obsolete)","description":"Enables the display of relevant Microsoft Search in Bing suggestions in the address bar's suggestion list when the user enters a search query in the address bar. If you enable or don't configure this policy, users can see internal results powered by Microsoft Search in Bing in the Microsoft Edge address bar suggestion list. To access Microsoft Search in Bing results, the user must be signed in to Microsoft Edge with their organization's Azure AD account.\n\nIf you disable this policy, users won't see internal results in the Microsoft Edge address bar suggestion list.\n\nStarting with Microsoft Edge version 89, Microsoft Search in Bing suggestions will be available even if Bing isn't the user's default search provider.\n\nThis policy is no longer applicable due to changes in access to work search through Bing-related endpoints.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbarmicrosoftsearchinbingproviderenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbarmicrosoftsearchinbingproviderenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"34484b946d4f5c39":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions.","description":"Extensions that connect to one of these origins keep running as long as the port is connected.\nIf unset, the policy's default values are used. These are the app origins that offer software development kits (SDKs) that are known to not offer the possibility of restarting a closed connection to a previous state:\n- Smart Card Connector\n- Citrix Receiver (stable, beta, back-up)\n- VMware Horizon (stable, beta)\n\nIf set, the default value list is extended with the newly configured values. The defaults and policy-provided entries grant the exception to the connecting extensions as long as the port is connected.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"34fc3f570339854e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_recommended","displayName":"Allow importing of payment info (users can override)","description":"Allows users to import payment info from another browser into Microsoft Edge.\n\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, payment info isn't imported at first run, and users can't import it manually.\n\nIf you don't configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This option means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\n\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"343b72e67796e477":{"id":"com.microsoft.edge.mamedgeappconfigsettings.runallflashinallowmode","displayName":"Extend Adobe Flash content setting to all content (Obsolete)","description":"This policy doesn't work because Flash is no longer supported by Microsoft Edge.\n\nIf you enable this policy, all Adobe Flash content embedded in websites that are set to allow Adobe Flash in the content settings, either by the user or by enterprise policy, run. This includes content from other origins and/or small content.\n\nTo control which websites are allowed to run Adobe Flash, see the specifications in the \"DefaultPluginsSetting\", \"PluginsAllowedForUrls\", and \"PluginsBlockedForUrls\" policies.\n\nIf you disable this policy or don't configure it, Adobe Flash content from other origins (sites that aren't specified in the preceding three policies) or small content might be blocked.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.runallflashinallowmode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.runallflashinallowmode_true","displayName":"Enabled","description":null,"helpText":null}]},"34d2fa470cada735":{"id":"com.microsoft.edge.mamedgeappconfigsettings.spellcheckenabled","displayName":"Enable spellcheck","description":"If you enable or don't configure this policy, the user can use spellcheck.\n\nIf you disable this policy, the user can't use spellcheck and the \"SpellcheckLanguage\" and \"SpellcheckLanguageBlocklist\" policies are also disabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.spellcheckenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.spellcheckenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"34eb75c404754e9c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.websqlaccess","displayName":"Force WebSQL to be enabled (Obsolete)","description":"This policy was removed in Microsoft Edge 124 and is ignored if set.\n\nWebSQL is on by default as of Microsoft Edge version 101, but can be disabled via a Microsoft Edge flag.\nIf you enable this policy, WebSQL cannot be disabled.\nIf you disable or don't configure this policy, WebSQL can be disabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.websqlaccess_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.websqlaccess_true","displayName":"Enabled","description":null,"helpText":null}]},"346a85b330947337":{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsrdvdropdown_name","displayName":"Select the encryption method for removable data drives:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp#encryptionmethodbydrivetype"],"categoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","categoryName":"BitLocker Drive Encryption","options":[{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsrdvdropdown_name_3","displayName":"AES-CBC 128-bit (default)","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsrdvdropdown_name_4","displayName":"AES-CBC 256-bit","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsrdvdropdown_name_6","displayName":"XTS-AES 128-bit","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsrdvdropdown_name_7","displayName":"XTS-AES 256-bit","description":null,"helpText":null}]},"346c959a3c62b036":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_oshiderecoverypage_name","displayName":"Omit recovery options from the BitLocker setup wizard","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_oshiderecoverypage_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_oshiderecoverypage_name_1","displayName":"True","description":null,"helpText":null}]},"345af43330013bb2":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworknormalpriorityunit","displayName":"Normal Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworknormalpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworknormalpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworknormalpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"349104e704a089f7":{"id":"device_vendor_msft_policy_config_admx_credui_nolocalpasswordresetquestions","displayName":"Prevent the use of security questions for local accounts","description":"If you turn this policy setting on, local users won’t be able to set up and use security questions to reset their passwords.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credui#admx-credui-nolocalpasswordresetquestions"],"categoryId":"58111f34-e9ac-47e2-b8ae-8d55c6a9ed6c","categoryName":"Credential User Interface","options":[{"id":"device_vendor_msft_policy_config_admx_credui_nolocalpasswordresetquestions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credui_nolocalpasswordresetquestions_1","displayName":"Enabled","description":null,"helpText":null}]},"3412437afe00db58":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_missedscheduledscancountbeforecatchup_scan_missedscheduledscancountbeforecatchup","displayName":"Define the number of scheduled scans that can be missed after which a catch-up scan is forced","description":null,"helpText":"","infoUrls":[],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":null},"34c8bfab22801ec8":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryinitialperiod_netlogon_backgroundretryinitialperiodlabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"3453f3fbcd7bfc29":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_2","displayName":"Specify administratively assigned Offline Files","description":"This policy setting lists network files and folders that are always available for offline use. This ensures that the specified files and folders are available offline to users of the computer.\r\n\r\nIf you enable this policy setting, the files you enter are always available offline to users of the computer. To specify a file or folder, click Show. In the Show Contents dialog box in the Value Name column, type the fully qualified UNC path to the file or folder. Leave the Value column field blank.\r\n\r\nIf you disable this policy setting, the list of files or folders made always available offline (including those inherited from lower precedence GPOs) is deleted and no files or folders are made available for offline use by Group Policy (though users can still specify their own files and folders for offline use).\r\n\r\nIf you do not configure this policy setting, no files or folders are made available for offline use by Group Policy.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy settings will be combined and all specified files will be available for offline use.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-assignedofflinefiles-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_2_1","displayName":"Enabled","description":null,"helpText":null}]},"34ae875e807ea2d2":{"id":"device_vendor_msft_policy_config_admx_previousversions_hidebackupentries_2","displayName":"Hide previous versions of files on backup location","description":"This policy setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup media. Previous versions can come from the on-disk restore points or the backup media.\r\n\r\nIf you enable this policy setting, users cannot see any previous versions corresponding to backup copies, and can see only previous versions corresponding to on-disk restore points.\r\n\r\nIf you disable this policy setting, users can see previous versions corresponding to backup copies as well as previous versions corresponding to on-disk restore points.\r\n\r\nIf you do not configure this policy setting, it is disabled by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-hidebackupentries-2"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"device_vendor_msft_policy_config_admx_previousversions_hidebackupentries_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_previousversions_hidebackupentries_2_1","displayName":"Enabled","description":null,"helpText":null}]},"34a3ffc3849e9e0a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013","displayName":"Microsoft Office 365 SharePoint Designer 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 SharePoint Designer 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 SharePoint Designer 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 SharePoint Designer 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 SharePoint Designer 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 SharePoint Designer 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365sharepointdesigner2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013_1","displayName":"Enabled","description":null,"helpText":null}]},"34a7fa8b19e2300f":{"id":"device_vendor_msft_policy_config_admx_userprofiles_slowlinktimeout_slowlinkwaitinterval","displayName":"Time (milliseconds)","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":null},"3429eef73a8c57ef":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledpluginsexceptions_disabledpluginsexceptionsdesc","displayName":"List of exceptions to the list of disabled plugins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"34141212de7252ee":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls_pluginsallowedforurlsdesc","displayName":"Allow the Flash plugin on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"34b95143b48eb886":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_webhidaskforurlsdesc","displayName":"Allow the WebHID API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"348df69ac2a78ede":{"id":"device_vendor_msft_policy_config_datausage_setcost4g","displayName":"Set 4G Cost","description":"This policy setting configures the cost of 4G connections on the local machine. \n\nIf this policy setting is enabled, a drop-down list box presenting possible cost values will be active. Selecting one of the following values from the list will set the cost of all 4G connections on the local machine:\n\n- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity constraints. \n\n- Fixed: Use of this connection is not restricted by usage charges and capacity constraints up to a certain data limit. \n\n- Variable: This connection is costed on a per byte basis.\n\nIf this policy setting is disabled or is not configured, the cost of 4G connections is Fixed by default.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-datausage#datausage-setcost4g"],"categoryId":"edf3754c-b22d-4946-a744-4773240a5883","categoryName":"WWAN Media Cost","options":[{"id":"device_vendor_msft_policy_config_datausage_setcost4g_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost4g_1","displayName":"Enabled","description":null,"helpText":null}]},"34d631386377fa34":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelaycacheserverfallbackbackground","displayName":"DO Delay Cache Server Fallback Background","description":"For background downloads that use a cache server, specifies the time to wait before falling back to download from the original HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelaycacheserverfallbackbackground"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"34584d7162957d9b":{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_domainlist","displayName":"Domain allow list","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"34a1de961a96339d":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206","displayName":"Internet Explorer web browser control","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3","displayName":"Disable","description":null,"helpText":null}]},"34424bd6f5aff916":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"3426160a55ea4154":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"3459bcdd2ed102ef":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine","displayName":"Allow importing of search engine settings","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\r\n\r\nIf you enable, this policy, the option to import search engine settings is automatically selected.\r\n\r\nIf you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_1","displayName":"Enabled","description":null,"helpText":null}]},"3427a1366a28a9f9":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_extensioninstallforcelistdesc","displayName":"Extension/App IDs and update URLs to be silently installed (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"34b31422ddb913d5":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled","displayName":"Force WebSQL in non-secure contexts to be enabled (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it is a temporary policy to support WebSQL in non-secure contexts. It won't work in Microsoft Edge as soon as version 110.\r\nIf you enable this policy, WebSQL in non-secure contexts will be enabled.\r\nIf you disable or don't configure this policy, WebSQL in non-secure contexts will follow the default settings of the broser.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"34776ed615711f3d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride_l_sclcacheoverride","displayName":"Folder location: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"2e3f0407-6387-41b4-b6c2-ada4354be759","categoryName":"Licensing Settings","options":null},"34c462040b2c72ef":{"id":"device_vendor_msft_policy_config_search_preventremotequeries","displayName":"Prevent Remote Queries","description":"If enabled, clients will be unable to query this computer's index remotely. Thus, when they are browsing network shares that are stored on this computer, they will not search them using the index. If disabled, client search requests will use this computer's index. .","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#preventremotequeries"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_preventremotequeries_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_preventremotequeries_1","displayName":"Enable.","description":"Enable.","helpText":null}]},"342881841ecb1d63":{"id":"device_vendor_msft_policy_config_userrights_denylocallogon","displayName":"Deny Local Log On","description":"This security setting determines which service accounts are prevented from registering a process as a service. Note: This security setting does not apply to the System, Local Service, or Network Service accounts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denylocallogon"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"34bfaa103417d6bc":{"id":"settings_item_accessibilitysettings_boldtextenabled","displayName":"Bold Text Enabled","description":"If 'true', enables bold text.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_boldtextenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_boldtextenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"345b1c8e2d2efb2d":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders18","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders18_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders18_1","displayName":"True","description":null,"helpText":null}]},"34512feeadf42fa3":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":null},"34b6eeba9bb1b03f":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel0","displayName":"Site Name 1 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"34df299a387cb699":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled","displayName":"Allow queries to a Google time service (User)","description":"Setting the policy to Enabled or leaving it unset means Google Chrome send occasional queries to a Google server to retrieve an accurate timestamp.\r\n\r\nSetting the policy to Disabled stops Google Chrome from sending these queries.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"34a333942cb43ff1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc","displayName":"Automatically select client certificates for these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"34def4de98905450":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting","displayName":"Default key generation setting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_1","displayName":"Enabled","description":null,"helpText":null}]},"3494fe9455c7c1dc":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"3447a8dd1e010835":{"id":"user_vendor_msft_policy_config_experience_allowspotlightcollection","displayName":"Allow Spotlight Collection (User)","description":"Specifies whether Spotlight collection is allowed as a Personalization->Background Setting. If you enable this policy setting, Spotlight collection will show as an option in the user's Personalization Settings, and the user will be able to get daily images from Microsoft displayed on their desktop. If you disable this policy setting, Spotlight collection will not show as an option in Personliazation Settings, and the user will not have the choice of getting Microsoft daily images shown on their desktop.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowspotlightcollection"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":null},"34a53dc2c8a6a7ec":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806","displayName":"Launching programs and unsafe files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1","displayName":"Prompt","description":null,"helpText":null}]},"34124216e2292fae":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200","displayName":"Run ActiveX controls and plugins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_65536","displayName":"Administrator approved","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_1","displayName":"Prompt","description":null,"helpText":null}]},"346e668ec849cc61":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting","displayName":"Default pop-up window setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_1","displayName":"Allow all sites to show pop-ups","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_2","displayName":"Do not allow any site to show popups","description":null,"helpText":null}]},"3493b1bfa900fb7f":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_setntpdefaultfeedtab","displayName":"Set the default New Tab Page feed tab to Work or Discover (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_setntpdefaultfeedtab_0","displayName":"Work","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_setntpdefaultfeedtab_1","displayName":"Discover","description":null,"helpText":null}]},"34f3f8bceac3af8b":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_enablesha1forlocalanchors","displayName":"Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWhen this setting is enabled, Microsoft Edge allows connections secured by SHA-1 signed certificates so long as the the certificate chains to a locally-installed root certificate and is otherwise valid.\r\n\r\nNote that this policy depends on the operating system (OS) certificate verification stack allowing SHA-1 signatures. If an OS update changes the OS handling of SHA-1 certificates, this policy might no longer have effect. Further, this policy is intended as a temporary workaround to give enterprises more time to move away from SHA-1. This policy will be removed in Microsoft Edge 92 releasing in mid 2021.\r\n\r\nIf you don't set this policy or set it to false, or the SHA-1 certificate chains to a publicly trusted certificate root, then Microsoft Edge won't allow certificates signed by SHA-1.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_enablesha1forlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_enablesha1forlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"347e55651656d5ec":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols","displayName":"Allow legacy TLS/DTLS downgrade in WebRTC (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 120.\r\n\r\nIf you enable this policy, WebRTC peer connections can downgrade to obsolete\r\nversions of the TLS/DTLS (DTLS 1.0, TLS 1.0 and TLS 1.1) protocols.\r\nIf you disable or don't set this policy, these TLS/DTLS versions are\r\ndisabled.\r\n\r\nThis policy was removed in Microsoft Edge 121 and is ignored if set.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},"349de932abbc85f0":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled","displayName":"Let screen reader users get image descriptions from Microsoft (User)","description":"Lets screen reader users get descriptions of unlabeled images on the web.\r\n\r\nIf you enable or don't configure this policy, users have the option of using an anonymous Microsoft service. This service provides automatic descriptions for unlabeled images users encounter on the web when they're using a screen reader.\r\n\r\nIf you disable this policy, users can't enable the Get Image Descriptions from Microsoft feature.\r\n\r\nWhen this feature is enabled, the content of images that need a generated description is sent to Microsoft servers to generate a description.\r\n\r\nNo cookies or other user data is sent to Microsoft, and Microsoft doesn't save or log any image content.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"34f571ef08b40023":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastserviceminorversion5","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"347071d67069b642":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastserviceservercapabilities9","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"345e0e365633d009":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceemail","displayName":"Replace Label - E-mail (User)","description":"This policy setting allows you to change or remove the 1st label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceemail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceemail_1","displayName":"Enabled","description":null,"helpText":null}]},"34dc84649d52a8dc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_centralkurdishiraq","displayName":"Central Kurdish (Iraq) (User)","description":"Enables the editing language Central Kurdish (Iraq)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_centralkurdishiraq_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_centralkurdishiraq_1","displayName":"Enabled","description":null,"helpText":null}]},"34dce2c5950655a7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_filipino","displayName":"Filipino (User)","description":"Enables the editing language Filipino","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_filipino_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_filipino_1","displayName":"Enabled","description":null,"helpText":null}]},"346032e24f4ce0f9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_increasevisibilityofaccessibilitycheckerviolations","displayName":"Increase the visibility of Accessibility Checker violations (User)","description":"This policy setting controls whether a document, workbook, or spreadsheet with accessibility errors will cause a loud warning or error slab in the user interface.\r\n\r\nIf you enable this policy setting, you may specify what happens when a document, workbook, or spreadsheet has accessibility errors:\r\n\r\n- Accessibility violations do not change Prepare for Distribution loudness (default)\r\n- Accessibility errors cause the Prepare for Distribution slab to be loud\r\n- Accessibility errors or warnings cause the Prepare for Distribution slab to be loud\r\n\r\nIf you disable or do not configure this policy setting, the Accessibility Checker UI will be presented in its normal state.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_increasevisibilityofaccessibilitycheckerviolations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_increasevisibilityofaccessibilitycheckerviolations_1","displayName":"Enabled","description":null,"helpText":null}]},"347be0bc1347fa00":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disableallactivex","displayName":"Disable All ActiveX (User)","description":"This policy setting controls whether ActiveX controls are disabled. \r\n\r\nIf you enable this policy setting, Office 2016 applications do not initialize ActiveX controls from non-trusted locations, and do not notify the user that the ActiveX controls are disabled. \r\n\r\nIf you disable or do not configure this policy setting, users can set the trust level for ActiveX controls in the Trust Center in the 2016 versions of Microsoft Access, PowerPoint, Word, and Excel. The default configuration does not load untrusted ActiveX controls, but uses the Message Bar to prompt users about the control, and they can then choose whether to run the control.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disableallactivex_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disableallactivex_1","displayName":"Enabled","description":null,"helpText":null}]},"3460f04d1b705fdb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_enableminimizevbaresigning","displayName":"Enable Minimizing VBA Project Digital Signature Invalidation (User)","description":"\r\nThis policy setting allows you to reduce the number of actions in Office that will result in a document's VBA digital signature becoming invalidated.\r\n\r\nThe VBA project may be modified in certain ways that change the project storage but that do not invalidate the source code digital signature. With this setting turned off, these actions will lead to the VBA digital signature being invalidated, and the signature dropped on save if the user does not have the private key available to resign.\r\n\r\nWith this setting on, we will only perform a resign of the project if the source code signature has changed, and will keep the existing signature in other cases. If the VBA project storage is changed and saved, but the old signature retained under this feature, this can lead to an invalidation of the saved compiled VBA project state. If this happens, the VBA project will be forced to recompile each time the document is loaded. This may have negative performance impacts for larger VBA projects. Once a document is in this state, the state will persist until the VBA project is resigned.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_enableminimizevbaresigning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_enableminimizevbaresigning_1","displayName":"Enabled","description":null,"helpText":null}]},"347e865fd428d655":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_l_datecolon263","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"341d1a10b363ba83":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc04_l_pathcolon04","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"34ca816305910334":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_percentageofunuseddiskspacetoallowinsections","displayName":"Percentage of unused disk space to allow in sections (User)","description":"Sets the value in the option ''Percentage of unused space to allow in sections without optimizing''.","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_percentageofunuseddiskspacetoallowinsections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_percentageofunuseddiskspacetoallowinsections_1","displayName":"Enabled","description":null,"helpText":null}]},"34ff724fe89fce01":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_readsignedemailasplaintext","displayName":"Read signed e-mail as plain text (User)","description":"This policy setting determines whether Outlook renders all digitally signed e-mail in plain text format for reading. Outlook can display e-mail messages and other items in three formats: plain text, Rich Text Format (RTF), and HTML. \r\n\r\nIf you enable this policy setting, the \"Read all standard mail in plain text\" check box option is selected in the \"E-mail Security\" section of the Trust Center and users cannot change it. This option only changes the way e-mail messages are displayed; the original message is not converted to plain text format. \r\n\r\nIf you disable or do not configure this policy setting, Outlook displays digitally signed e-mail messages in the format they were received in.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_readsignedemailasplaintext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_readsignedemailasplaintext_1","displayName":"Enabled","description":null,"helpText":null}]},"345894b23a815c94":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon","displayName":"Background Color: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_000000","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_12632256","displayName":"Silver","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_8421504","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_16777215","displayName":"White","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_65535","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_16711808","displayName":"Fuchsia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_8453888","displayName":"Lime","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_16776960","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_8421376","displayName":"Olive","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_8388736","displayName":"Purple","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_32768","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_16711680","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_8388608","displayName":"Maroon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_128","displayName":"Navy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_32896","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_l_backgroundcolorcolon_255","displayName":"Blue","description":null,"helpText":null}]},"349f8a1b26549258":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdayspermonth_l_pjdayspermonth20","displayName":"Days per month (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":null},"3438819d1ef62791":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_l_descriptioncolon54","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"3444ba1a502815dd":{"id":"user_vendor_msft_policy_config_settings_pagevisibilitylist","displayName":"Page Visibility List (User)","description":"Allows IT Admins to either prevent specific pages in the System Settings app from being visible or accessible, or to do so for all pages except those specified. The mode will be specified by the policy string beginning with either the string showonly: or hide:.  Pages are identified by a shortened version of their already published URIs, which is the URI minus the ms-settings: prefix. For example, if the URI for a settings page is ms-settings:bluetooth, the page identifier used in the policy will be just bluetooth. Multiple page identifiers are separated by semicolons. The following example illustrates a policy that would allow access only to the about and bluetooth pages, which have URI ms-settings:about and ms-settings:bluetooth respectively:showonly:about;bluetooth. If the policy is not specified, the behavior will be that no pages are affected. If the policy string is formatted incorrectly, it will be ignored entirely (i. e. treated as not set) to prevent the machine from becoming unserviceable if data corruption occurs. Note that if a page is already hidden for another reason, then it will remain hidden even if it is in a showonly: list. The format of the PageVisibilityList value is as follows: The value is a unicode string up to 10,000 characters long, which will be used without case sensitivity. There are two variants: one that shows only the given pages and one which hides the given pages. The first variant starts with the string showonly: and the second with the string hide:. Following the variant identifier is a semicolon-delimited list of page identifiers, which must not have any extra whitespace. Each page identifier is the ms-settings:xyz URI for the page, minus the ms-settings: prefix, so the identifier for the page with URI ms-settings:network-wifi would be just network-wifi. The default value for this setting is an empty string, which is interpreted as show everything. Example 1, specifies that only the wifi and bluetooth pages should be shown (they have URIs ms-settings:network-wifi and ms-settings:bluetooth). All other pages (and the categories they're in) will be hidden:showonly:network-wifi;bluetooth. Example 2, specifies that the wifi page should not be shown:hide:network-wifi","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#pagevisibilitylist"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":null},"34a33147aac32b44":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_zoomonrollwithintellimouse","displayName":"Zoom on roll with IntelliMouse (User)","description":"If selected, lets you zoom in or out from a drawing by rolling the wheel of the Microsoft Intellimouse","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_zoomonrollwithintellimouse_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_zoomonrollwithintellimouse_1","displayName":"Enabled","description":null,"helpText":null}]},"34752ba962cf78b4":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_templates","displayName":"Templates (User)","description":"This policy setting allows you to specify the additional location of templates.\r\n\r\nIf you enable this policy setting, you may specify the additional location of templates. These locations are listed on the New screen of the File tab.\r\n\r\nIf you disable or do not configure this policy setting, no additional location of templates is shown.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_templates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_templates_1","displayName":"Enabled","description":null,"helpText":null}]},"34cd429187bfb8fd":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_l_setmaximumnumberoftrusteddocumentsspinid","displayName":"Maximum number: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"34273b372213575d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_l_allowsubfolders87","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_l_allowsubfolders87_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_l_allowsubfolders87_1","displayName":"True","description":null,"helpText":null}]},"34745be7d096ca35":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_asianfontsalsoapplytolatintext","displayName":"Asian fonts also apply to Latin text (User)","description":"Checks/unchecks the corresponding UI option. This option may be hidden in Word until certain editing languages are enabled.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_asianfontsalsoapplytolatintext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_asianfontsalsoapplytolatintext_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/35.json b/public/intune-definitions/35.json new file mode 100644 index 000000000000..d15078b7a5d5 --- /dev/null +++ b/public/intune-definitions/35.json @@ -0,0 +1 @@ +{"3583a6ee40de437b":{"id":"ade_setupassistant_enablelockdownmode","displayName":"Enable Lock down Mode","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_enablelockdownmode_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_enablelockdownmode_1","displayName":"Show","description":null,"helpText":null}]},"355c34bdc002e2e7":{"id":"app_allowed_allowedbinaries_item_signingid","displayName":"Signing ID","description":"The code signature signing identifier of the binary.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"35618331a4247299":{"id":"com.apple.extensiblesso_extensiondata_identityissuerautoselectfilter_kerberos","displayName":"Identity Issuer Auto Select Filter","description":"A string with wildcards that can use used to filter the list of available SmartCards by issuer. e.g \"*My CA2*\". If there is one remaining, it will be auto-selected. If there more than one remaining, then the list is shorter. (macOS only)","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"35112e00c5cfd4d6":{"id":"com.apple.extensiblesso_platformsso_tokentousermapping_accountname","displayName":"Account Name","description":"The claim name to use for the user's account name.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"35f33084d0fc39da":{"id":"com.apple.managedclient.preferences_enforcementlevel_antivirusengine","displayName":"Enforcement level","description":"Antivirus engine enforcement mode","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-preferences#enforcement-level-for-antivirus-engine"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_enforcementlevel_antivirusengine_0","displayName":"passive","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enforcementlevel_antivirusengine_1","displayName":"on_demand","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enforcementlevel_antivirusengine_2","displayName":"real_time","description":null,"helpText":null}]},"3527d3de43595598":{"id":"com.apple.managedclient.preferences_notificationsblockedforurls","displayName":"Block notifications on specific sites","description":"Allows you to create a list of url patterns to specify sites that are not allowed to display notifications.\n\nIf you don’t set this policy, the global default value will be used for all sites. This default value will be from the \"DefaultNotificationsSetting\" policy if it’s set, or from the user's personal configuration. For detailed information on valid url patterns, see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#notificationsblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"359803cc05a474f6":{"id":"com.apple.managedclient.preferences_serialblockedforurls","displayName":"Block the Serial API on specific sites","description":"Specifies URL patterns for sites that aren't allowed to request access to a serial port.\n\nIf not configured, Microsoft Edge uses the value from the DefaultSerialGuardSetting policy (if set), or the user's settings.\n\nFor unmatched sites, the following order applies:\n\n1. SerialAskForUrls (if matched).\n\n2. DefaultSerialGuardSetting (if set).\n\n3. User's settings.\n\nURL patterns in this policy must not conflict with those in SerialAskForUrls. This policy takes precedence.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#serialblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"35aa9f8877e53945":{"id":"com.apple.managedclient.preferences_thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins (deprecated)","description":"This policy lets you set a list of URL patterns that specify top-level origins for which third-party storage partitioning (partitioning of cross-origin iframe storage) should be disabled.\n\nIf this policy isn't set or a top-level origin doesn't match one of the URL patterns, then the value from \"DefaultThirdPartyStoragePartitioningSetting\" will be used.\n\nNote that the patterns you list are treated as origins, not URLs, so you shouldn't specify a path. For detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nThis feature will be removed starting in Microsoft Edge version 145. To ensure compatibility, use the requestStorageAccess method instead. For more information, see https://developer.mozilla.org/en-US/docs/Web/API/Document/requestStorageAccess.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#thirdpartystoragepartitioningblockedfororigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"3527f762c66ba6c5":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"3553ebaf4a80ff2d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderencodings","displayName":"Default search provider encodings","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\n\nThis policy is optional. If not configured, the default, UTF-8, is used.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy won't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"35208795a594df2e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.delaynavigationsforinitialsitelistdownload","displayName":"Require that the Enterprise Mode Site List is available before tab navigation","description":"Lets you specify whether Microsoft Edge tabs wait to navigate until the browser downloaded the initial Enterprise Mode Site List. This setting is intended for the scenario where the browser home page should load in Internet Explorer (IE) mode, and it's important that it does so on browser first run after IE mode is enabled. If this scenario doesn't exist, we recommend not enabling this setting because it negatively impacts the performance of loading the home page. The setting only applies when Microsoft Edge doesn't have a cached Enterprise Mode Site List, such as on browser first run after IE mode is enabled.\n\nThis setting works if \"InternetExplorerIntegrationLevel\" is set to 'IEMode' and if either the \"InternetExplorerIntegrationSiteList\" or the \"InternetExplorerIntegrationCloudSiteList\" policies be enabled, where the list has at least one entry.\n\nThe timeout behavior of this policy is configured with the \"NavigationDelayForInitialSiteListDownloadTimeout\" policy.\n\nIf you set this policy to 'All' and when Microsoft Edge doesn't have a cached version of the Enterprise Mode Site List, tabs delay navigating until the browser downloaded the site list. Sites configured to open in Internet Explorer mode by the site list load in Internet Explorer mode, even during the initial navigation of the browser. Sites that can't be configured to open in Internet Explorer, such as any site with a scheme other than http:, https:, file:, or ftp: don't delay navigating and load immediately in Microsoft Edge mode.\n\nWhen used with the \"InternetExplorerIntegrationCloudSiteList\" policy, during first launch of Microsoft Edge, there is a delay because implicit sign in needs to finish before Microsoft Edge attempts to download the site list from the Microsoft cloud since this requires authentication to the cloud service.\n\nIf you set this policy to 'None' or don't configure it and when Microsoft Edge doesn't have a cached version of the Enterprise Mode Site List, tabs navigate immediately and don't wait for the browser to download the Enterprise Mode Site List. Sites configured to open in Internet Explorer mode by the site list open in Microsoft Edge mode until the browser finished downloading the Enterprise Mode Site List.\n\nPolicy options mapping:\n\n* None (0) = None\n\n* All (1) = All eligible navigations\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.delaynavigationsforinitialsitelistdownload_none","displayName":"None","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.delaynavigationsforinitialsitelistdownload_all","displayName":"All eligible navigations","description":null,"helpText":null}]},"3561df4b0fd800b4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_recommended","displayName":"Allow users to access the Outlook menu (Obsolete) (users can override)","description":"This policy doesn't work because the Outlook menu is now contained within the Edge Sidebar and can be managed using the \"HubsSidebarEnabled\" policy.\n\nThis policy is used to manage access to the Outlook menu from Microsoft Edge.\n\nIf you enable or don't configure this policy, users can access the Outlook menu.\nIf you disable this policy, users can't access the Outlook menu.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"350a6bb9c0a307bd":{"id":"device_vendor_msft_defender_configuration_enableudpsegmentationoffload","displayName":"Enable Udp Segmentation Offload","description":"This setting enables Udp Segmentation Offload Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_enableudpsegmentationoffload_0","displayName":"Udp Segmentation Offload is disabled","description":"Udp Segmentation Offload is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_enableudpsegmentationoffload_1","displayName":"Udp Segmentation Offload is enabled","description":"Udp Segmentation Offload is enabled","helpText":null}]},"35ef345e83a00cfb":{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefaultcredentials_concatenatedefaults_adc","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefaultcredentials_concatenatedefaults_adc_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefaultcredentials_concatenatedefaults_adc_1","displayName":"True","description":null,"helpText":null}]},"353e39f4498b920d":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_newstatictargets","displayName":"Do not allow adding new targets via manual configuration","description":"If enabled then new targets may not be manually configured by entering the target name and target portal; already discovered targets may be manually configured. If disabled then new and already discovered targets may be manually configured. Note: if enabled there may be cases where this will break VDS.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsidiscovery-newstatictargets"],"categoryId":"60ea8de3-bc6d-4b01-974a-a53860fe4ef6","categoryName":"i SCSI Target Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_newstatictargets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_newstatictargets_1","displayName":"Enabled","description":null,"helpText":null}]},"35cc9e5e4535ea2e":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_safedllsearchmode","displayName":"MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)","description":"MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-safedllsearchmode"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_safedllsearchmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_safedllsearchmode_1","displayName":"Enabled","description":null,"helpText":null}]},"3549a895bf87dc0b":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxdataretransmissionsipv6_tcpmaxdataretransmissions","displayName":"TcpMaxDataRetransmissions","description":null,"helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":null},"358c6ceee434eb9b":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_2_lbl_nopinfileslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"3587812abdbeebb6":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_distributed","displayName":"Set BranchCache Distributed Cache mode","description":"This policy setting specifies whether BranchCache distributed cache mode is enabled on client computers to which this policy is applied. In addition to this policy, you must use the policy \"Turn on BranchCache\" to enable BranchCache on client computers.\r\n\r\nIn distributed cache mode, client computers download content from BranchCache-enabled main office content servers, cache the content locally, and serve the content to other BranchCache distributed cache mode clients in the branch office.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache settings are not applied to client computers by this policy. In the circumstance where client computers are domain members but you do not want to enable BranchCache on all client computers, you can specify Not Configured for this domain Group Policy setting, and then configure local computer policy to enable BranchCache on individual client computers. Because the domain Group Policy setting is not configured, it will not over-write the enabled setting that you use on individual client computers where you want to enable BranchCache.\r\n\r\n- Enabled. With this selection, BranchCache distributed cache mode is enabled for all client computers where the policy is applied. For example, if this policy is enabled in domain Group Policy, BranchCache distributed cache mode is turned on for all domain member client computers to which the policy is applied.\r\n\r\n- Disabled. With this selection, BranchCache distributed cache mode is turned off for all client computers where the policy is applied.\r\n\r\n* This policy setting is supported on computers that are running Windows Vista Business, Enterprise, and Ultimate editions with Background Intelligent Transfer Service (BITS) 4.0 installed.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-enablewindowsbranchcache-distributed"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_distributed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_distributed_1","displayName":"Enabled","description":null,"helpText":null}]},"35619e78ac63d373":{"id":"device_vendor_msft_policy_config_admx_printing_printdriverisolationexecutionpolicy","displayName":"Execute print drivers in isolated processes","description":"This policy setting determines whether the print spooler will execute print drivers in an isolated or separate process. When print drivers are loaded in an isolated process (or isolated processes), a print driver failure will not cause the print spooler service to fail.\r\n\r\nIf you enable or do not configure this policy setting, the print spooler will execute print drivers in an isolated process by default.\r\n\r\nIf you disable this policy setting, the print spooler will execute print drivers in the print spooler process.\r\n\r\n\r\nNotes:\r\n-Other system or driver policy settings may alter the process in which a print driver is executed.\r\n-This policy setting applies only to print drivers loaded by the print spooler. Print drivers loaded by applications are not affected.\r\n-This policy setting takes effect without restarting the print spooler service.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-printdriverisolationexecutionpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_printdriverisolationexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_printdriverisolationexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"35fa442b4006d987":{"id":"device_vendor_msft_policy_config_admx_rpc_rpcminimumhttpconnectiontimeout_rpcminimumhttpconnectiontimeoutvalue","displayName":"Minimum Idle Connection Timeout (in seconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":null},"3577e80683786277":{"id":"device_vendor_msft_policy_config_admx_scripts_run_computer_ps_scripts_first","displayName":"Run Windows PowerShell scripts first at computer startup, shutdown","description":"This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during computer startup and shutdown. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. \r\n \r\nIf you enable this policy setting, within each applicable Group Policy Object (GPO), Windows PowerShell scripts are run before non-Windows PowerShell scripts during computer startup and shutdown. \r\n\r\nFor example, assume the following scenario: \r\n\r\nThere are three GPOs (GPO A, GPO B, and GPO C). This policy setting is enabled in GPO A. \r\n\r\nGPO B and GPO C include the following computer startup scripts:\r\n\r\nGPO B: B.cmd, B.ps1\r\nGPO C: C.cmd, C.ps1\r\n\r\nAssume also that there are two computers, DesktopIT and DesktopSales. \r\nFor DesktopIT, GPOs A, B, and C are applied. Therefore, the scripts for GPOs B and C run in the following order for DesktopIT:\r\n\r\nWithin GPO B: B.ps1, B.cmd\r\nWithin GPO C: C.ps1, C.cmd\r\n \r\nFor DesktopSales, GPOs B and C are applied, but not GPO A. Therefore, the scripts for GPOs B and C run in the following order for DesktopSales:\r\n\r\nWithin GPO B: B.cmd, B.ps1\r\nWithin GPO C: C.cmd, C.ps1\r\n\r\nNote: This policy setting determines the order in which computer startup and shutdown scripts are run within all applicable GPOs. You can override this policy setting for specific script types within a specific GPO by configuring the following policy settings for the GPO:\r\n \r\nComputer Configuration\\Policies\\Windows Settings\\Scripts (Startup/Shutdown)\\Startup\r\nComputer Configuration\\Policies\\Windows Settings\\Scripts (Startup/Shutdown)\\Shutdown\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-computer-ps-scripts-first"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_run_computer_ps_scripts_first_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_run_computer_ps_scripts_first_1","displayName":"Enabled","description":null,"helpText":null}]},"35be6c1e647efbc4":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxdisplayres","displayName":"Limit maximum display resolution","description":"This policy setting allows you to specify the maximum display resolution that can be used by each monitor used to display a Remote Desktop Services session. Limiting the resolution used to display a remote session can improve connection performance, particularly over slow links, and reduce server load.\r\n\r\nIf you enable this policy setting, you must specify a resolution width and height. The resolution specified will be the maximum resolution that can be used by each monitor used to display a Remote Desktop Services session.\r\n\r\nIf you disable or do not configure this policy setting, the maximum resolution that can be used by each monitor to display a Remote Desktop Services session will be determined by the values specified on the Display Settings tab in the Remote Desktop Session Host Configuration tool.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-maxdisplayres"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxdisplayres_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxdisplayres_1","displayName":"Enabled","description":null,"helpText":null}]},"35242bfff7923cfe":{"id":"device_vendor_msft_policy_config_browser_usesharedfolderforbooks","displayName":"Use Shared Folder For Books","description":"This setting specifies whether organizations should use a folder shared across users to store books from the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#usesharedfolderforbooks"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_usesharedfolderforbooks_0","displayName":"Disabled","description":"Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_usesharedfolderforbooks_1","displayName":"Enabled","description":"Allowed. Microsoft Edge downloads book files to a shared folder. For this policy to work correctly, you must also enable the Allow a Windows app to share application data between users group policy. Also, the users must be signed in with a school or work account.","helpText":null}]},"35c88eb4d6f8c487":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for profile types. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_0","displayName":"Enable ambient authentication in regular sessions only.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_1","displayName":"Enable ambient authentication in incognito and regular sessions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_2","displayName":"Enable ambient authentication in guest and regular sessions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_3","displayName":"Enable ambient authentication in regular, incognito and guest sessions.","description":null,"helpText":null}]},"35259a0c56930f89":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT","description":"Allows you to set whether Google Chrome will run the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\r\n\r\nDisabling the JavaScript JIT will mean that Google Chrome may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Google Chrome to render web content in a more secure configuration.\r\n\r\nThis policy can be overridden for specific URL patterns using the JavaScriptJitAllowedForSites and JavaScriptJitBlockedForSites policies.\r\n\r\nIf this policy is left not set, JavaScript JIT is enabled.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"35d606cce0ebd0b1":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enableunsafeswiftshader","displayName":"Allow software WebGL fallback using SwiftShader","description":"A policy that controls if SwiftShader will be used as a WebGL fallback when hardware GPU acceleration is not available.\r\n\r\nSwiftShader has been used to support WebGL on systems without GPU acceleration such as headless systems or virtual machines but has been deprecated due to security issues. Starting in M139, WebGL context creation will fail when it would have otherwise used SwiftShader. This policy allows the browser or administrator to temporarily defer the deprecation.\r\n\r\nSetting the policy to Enabled, SwiftShader will be used as a software WebGL fallback.\r\n\r\nSetting the policy to Disabled or not set, WebGL context creation may fail if hardware GPU acceleration is not available. Web pages may misbehave if they do not gracefully handle WebGL context creation failure.\r\n\r\nThis is a temporary policy which will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enableunsafeswiftshader_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enableunsafeswiftshader_1","displayName":"Enabled","description":null,"helpText":null}]},"35e6eb25d4be6275":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_localnetworkaccessblockedforurlsdesc","displayName":"Block sites from making requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":null},"35ed17e9ec7b450d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies","displayName":"Block truncated cookies","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies_1","displayName":"Enabled","description":null,"helpText":null}]},"3585c448d2325736":{"id":"device_vendor_msft_policy_config_credentialsui_disablepasswordreveal","displayName":"Do not display the password reveal button","description":"This policy setting allows you to configure the display of the password reveal button in password entry user experiences.\n\nIf you enable this policy setting, the password reveal button will not be displayed after a user types a password in the password entry text box.\n\nIf you disable or do not configure this policy setting, the password reveal button will be displayed after a user types a password in the password entry text box.\n\nBy default, the password reveal button is displayed after a user types a password in the password entry text box. To display the password, click the password reveal button.\n\nThe policy applies to all Windows components and applications that use the Windows system controls, including Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialsui#credentialsui-disablepasswordreveal"],"categoryId":"58111f34-e9ac-47e2-b8ae-8d55c6a9ed6c","categoryName":"Credential User Interface","options":[{"id":"device_vendor_msft_policy_config_credentialsui_disablepasswordreveal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialsui_disablepasswordreveal_1","displayName":"Enabled","description":null,"helpText":null}]},"35ee51777c14f97f":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":null},"3582d7392e424976":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts","displayName":"Accounts Block Microsoft Accounts","description":"This policy setting prevents users from adding new Microsoft accounts on this computer. If you select the \"Users can’t add Microsoft accounts\" option, users will not be able to create new Microsoft accounts on this computer, switch a local account to a Microsoft account, or connect a domain account to a Microsoft account. This is the preferred option if you need to limit the use of Microsoft accounts in your enterprise. If you select the \"Users can’t add or log on with Microsoft accounts\" option, existing Microsoft account users will not be able to log on to Windows. Selecting this option might make it impossible for an existing administrator on this computer to log on and manage the system. If you disable or do not configure this policy (recommended), users will be able to use Microsoft accounts with Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_blockmicrosoftaccounts"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_0","displayName":"Disabled (users will be able to use Microsoft accounts with Windows).","description":"Disabled (users will be able to use Microsoft accounts with Windows).","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_1","displayName":"Enabled (users can't add Microsoft accounts).","description":"Enabled (users can't add Microsoft accounts).","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_3","displayName":"Users can't add or log on with Microsoft accounts","description":"Users can't add or log on with Microsoft accounts","helpText":null}]},"357c6b074b8bcdb0":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun","displayName":"Automatically import another browser's data and settings at first run (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_0","displayName":"Automatically imports all supported datatypes and settings from the default browser","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_1","displayName":"Automatically imports all supported datatypes and settings from Internet Explorer","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_2","displayName":"Automatically imports all supported datatypes and settings from Google Chrome","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_3","displayName":"Automatically imports all supported datatypes and settings from Safari","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_4","displayName":"Disables automatic import, and the import section of the first-run experience is skipped","description":null,"helpText":null}]},"35134460e3da8d1b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc","displayName":"Automatically select client certificates for these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3526f090590c151b":{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting","displayName":"'Set the default \"share additional operating system region\" setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_0","displayName":"Limited","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_1","displayName":"Always share the OS Regional format","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_2","displayName":"Never share the OS Regional format","description":null,"helpText":null}]},"357ddf5fd06659ed":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins","displayName":"Allow screen capture without prior user gesture","description":"For security reasons, the\r\ngetDisplayMedia() web API requires\r\na prior user gesture (\"transient activation\") to be called or the API will\r\nfail.\r\n\r\nWhen this policy is configured, admins can specify origins on which this API\r\ncan be called without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, see\r\nhttps://go.microsoft.com/fwlink/?linkid=2095322. Note: * is not an accepted\r\nvalue for this policy.\r\n\r\nIf this policy is not configured, all origins require a prior user gesture to\r\ncall this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"35760dca592594b5":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage","displayName":"Manage Blob URL Partitioning During Fetching and Navigation","description":"This policy controls whether Blob URLs are partitioned during fetching and navigation.\r\nIf this policy is set to Enabled or not set, Blob URLs will be partitioned.\r\nIf this policy is set to Disabled, Blob URLs won't be partitioned. This is the Blob URL behavior prior to\r\nMicrosoft Edge version 135.\r\n\r\nIf storage partitioning is disabled for a given top-level origin by either\r\nThirdPartyStoragePartitioningBlockedForOrigins\r\nor DefaultThirdPartyStoragePartitioningSetting,\r\nthen Blob URLs will also not be partitioned.\r\n\r\nThe policy is scheduled to be available through Microsoft Edge version 140. After this\r\nversion, the policy will be removed, and Microsoft Edge will no longer support unpartitioned\r\nblob storage.\r\n\r\nFor detailed information on third-party storage partitioning, please see https://github.com/privacycg/storage-partitioning.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage_1","displayName":"Enabled","description":null,"helpText":null}]},"356d2ab0b36a81b7":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled","displayName":"Force Microsoft Defender SmartScreen checks on downloads from trusted sources","description":"This policy setting lets you configure whether Microsoft Defender SmartScreen checks download reputation from a trusted source.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen checks the download’s reputation regardless of source.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen doesn’t check the download’s reputation when downloading from a trusted source.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"357ea5d2961b778b":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup","displayName":"Allow the Search bar at Windows startup (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 119.\r\n\r\nThis policy is obsolete due to the deprecation of the Web widget, which is now known as Edge search bar. Admins should use SearchbarIsEnabledOnStartup for Edge search bar instead. Allows the Search bar to start running at Windows startup.\r\n\r\nIf you enable this policy the Search bar will start running at Windows startup by default. If the Search bar is disabled via 'WebWidgetAllowed' (Enable the Search bar) policy, this policy will not start the Search bar on Windows startup.\r\n\r\nIf you disable this policy, the Search bar will not start at Windows startup for all profiles. The option to start the Edge search bar at Windows startup will be disabled and toggled off in Microsoft Edge settings.\r\n\r\nIf you don't configure this policy, the Search bar will not start at Windows startup for all profiles. The option to start the Edge search bar at Windows startup will be toggled off in Microsoft Edge settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"352cfee4577e00b8":{"id":"device_vendor_msft_policy_config_mixedreality_volumebuttondisabled","displayName":"Volume Button Disabled","description":"This policy setting controls if pressing the volume button changes the volume or not. It only impacts volume on HoloLens and not the functionality of the button when it's used with other buttons as combination for other purposes.","helpText":"","infoUrls":[],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_volumebuttondisabled_0","displayName":"Disabled","description":"Volume can be changed with press of the volume button.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_volumebuttondisabled_1","displayName":"Enabled","description":"Volume cannot be changed with press of the volume button.","helpText":null}]},"35f0b7712b25158c":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall","displayName":"Restrict ActiveX Install","description":"Restrict ActiveX Install","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_1","displayName":"Enabled","description":null,"helpText":null}]},"35bef851f1c120cb":{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionprotocol_enum","displayName":"Protocol to use for outgoing RPC connections:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionprotocol_enum_0","displayName":"RPC over TCP","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionprotocol_enum_1","displayName":"RPC over named pipes","description":null,"helpText":null}]},"352f3b6e49b8b559":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_userincontroloftheseapps","displayName":"Let Apps Access Camera User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"35d7db00154e62f0":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic_forceallowtheseapps","displayName":"Let Apps Access Graphics Capture Programmatic Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to use screen capture on arbitrary windows or displays. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"35317271e8a96b75":{"id":"device_vendor_msft_policy_config_update_productversion","displayName":"Product Version","description":"Enables IT administrators to specify the product version associated with the target feature update they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see Windows release information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#productversion"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"35109a03c252893a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"35021eeb3175e2b7":{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocation_1","displayName":"Turn off location (User)","description":"\r\n This policy setting turns off the location feature for this computer.\r\n\r\n If you enable this policy setting, the location feature is turned off, and all programs on this computer are prevented from using location information from the location feature.\r\n\r\n If you disable or do not configure this policy setting, all programs on this computer will not be prevented from using location information from the location feature.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablelocation-1"],"categoryId":"b40cfb22-8f17-4317-bcbb-c1c871497446","categoryName":"Location and Sensors","options":[{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocation_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocation_1_1","displayName":"Enabled","description":null,"helpText":null}]},"351fe46483f448d6":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearcheverywherelinkinstartmenu","displayName":"Remove See More Results / Search Everywhere link (User)","description":"\r\n If you enable this policy, a \"See more results\" / \"Search Everywhere\" link will not be shown when the user performs a search in the start menu search box.\r\n\r\nIf you disable or do not configure this policy, a \"See more results\" link will be shown when the user performs a search in the start menu search box. If a 3rd party protocol handler is installed, a \"Search Everywhere\" link will be shown instead of the \"See more results\" link.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearcheverywherelinkinstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearcheverywherelinkinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearcheverywherelinkinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"35bc9d996a26b0c3":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016","displayName":"Microsoft Office 365 Common 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2016 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers with UE-V.\r\nIf you enable this policy setting, user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize with UE-V.\r\nIf you disable this policy setting, user settings which are common between the Microsoft Office Suite 2016 applications are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365common2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016_1","displayName":"Enabled","description":null,"helpText":null}]},"353ee7d2c688126e":{"id":"user_vendor_msft_policy_config_browser_configurekioskmode","displayName":"Configure Kiosk Mode (User)","description":"Configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access, either as a single app or as one of multiple apps running on the kiosk device. You can control whether Microsoft Edge runs InPrivate full screen, InPrivate multi-tab with limited functionality, or normal Microsoft Edge. You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, these settings are ignored. To learn more about assigned access and kiosk configuration, see “Configure kiosk and shared devices running Windows desktop editions” (https://aka.ms/E489vw). If enabled and set to 0 (Default or not configured): - If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays. - If it’s one of many apps, Microsoft Edge runs as normal. If enabled and set to 1: - If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. - If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurekioskmode"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_configurekioskmode_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurekioskmode_0","displayName":"Disable","description":"Disable","helpText":null}]},"35a2140bca5f64b9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue","displayName":"Application locale (User)","description":"Setting the policy specifies the locale Google Chrome uses.\r\n\r\nTurning it off or leaving it unset means the locale will be the first valid locale from:\r\n1) The user specified locale (if configured).\r\n2) The system locale.\r\n3) The fallback locale (en-US).\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_1","displayName":"Enabled","description":null,"helpText":null}]},"359e095bf8c043f1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports","displayName":"Explicitly allowed network ports (User)","description":"There is a list of restricted ports built into Google Chrome. Connections to these ports will fail. This setting permits bypassing that list. The value is a comma-separated list of zero or more ports that outgoing connections will be permitted on.\r\n\r\nPorts are restricted to prevent Google Chrome being used as a vector to exploit various network vulnerabilities. Setting this policy may expose your network to attacks. This policy is intended as a temporary workaround for errors with code \"ERR_UNSAFE_PORT\" while migrating a service running on a blocked port to a standard port (ie. port 80 or 443).\r\n\r\nMalicious websites can easily detect that this policy is set, and for what ports, and use that information to target attacks.\r\n\r\nEach port here is labelled with a date that it can be unblocked until. After that date the port will be restricted regardless of this setting.\r\n\r\nLeaving the value empty or unset means that all restricted ports will be blocked. If there is a mixture of valid and invalid values, the valid ones will be applied.\r\n\r\nThis policy overrides the \"--explicitly-allowed-ports\" command-line option.\r\n\r\nExample value:\r\n\r\n10080","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_1","displayName":"Enabled","description":null,"helpText":null}]},"3526c2df2a07b61e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_maxconnectionsperproxy","displayName":"Maximal number of concurrent connections to the proxy server: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"35c6ed0a5c173619":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar","displayName":"Show Full URLs (User)","description":"This feature enables display of the full URL in the address bar.\r\nIf this policy is set to True, then the full URL will be shown in the address bar, including schemes and subdomains.\r\nIf this policy is set to False, then the default URL display will apply.\r\nIf this policy is left unset, then the default URL display will apply and the user will be able to toggle between default and full URL display with a context menu option.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},"35710c741d4f966f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_remoteaccesshosttalkgadgetprefix","displayName":"Configure the TalkGadget prefix for remote access hosts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"35bfa308b73912ca":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible","displayName":"Show Outlook Calendar card on the New Tab Page (User)","description":"This policy controls the visibility of the Outlook Card on the New Tab Page. The card will only be displayed on the New Tab Page if the policy is enabled and your organization authorized the usage of the Outlook Calendar data in the browser.\r\n\r\nOutlook data will not be stored by the browser.\r\n\r\nThe Outlook card shows the next calendar event, along with a glanceable look at the rest of the day's meetings. It aims to address the issue of context switching and enhance productivity by giving users a shortcut to their next meeting.\r\n\r\nThe Microsoft Outlook card will require additional admin configuration. For detailed information on connecting the Chrome New Tab Page Card to Outlook, please see https://support.google.com/chrome/a?p=chrome_ntp_microsoft_cards.\r\n\r\nIf the NTPCardsVisible is disabled, the Outlook Card will not be shown. If NTPCardsVisible is enabled, the Outlook card will be shown if this policy is also enabled and there is data to be shown. If NTPCardsVisible is unset, the Outlook card will be shown if this policy is also enabled, the user has the card enabled in Customize Chrome, and there is data to be shown.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"35a8f4615023ae9d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (User)","description":"A list of origins of remote desktop client apps that may execute WebAuthn API\r\nrequests that originate from a browsing session on a remote host.\r\n\r\nAny origin configured in this policy can make WebAuthn requests for Relying\r\nParty IDs (RP IDs) that it would normally not allowed to be able to claim.\r\n\r\nOnly valid HTTPS origins are allowed. Wildcards are not supported.\r\nAny invalid entries are ignored.\r\n\r\nExample value:\r\n\r\nhttps://remotedesktop.google.com\r\nhttps://vdi.corp.example\r\nhttps://server:8080/","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"354fbfdd0a4a9749":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},"35bf78a53e2f9bb4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath","displayName":"Graph gallery path (User)","description":"Sets the path where user defined graph templates are stored.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath_1","displayName":"Enabled","description":null,"helpText":null}]},"35afe986a411ad1c":{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2","displayName":"Second choice (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_","displayName":"","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},"351f92ce9157b94c":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezonejavapermissions"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"35036344f8ec8679":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_diskcachesize","displayName":"Set disk cache size: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"35d0b67a3c1bc724":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\r\n\r\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_1","displayName":"Enabled","description":null,"helpText":null}]},"352182ba991ed2f7":{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins (User)","description":"This policy lets you set a list of URL patterns that specify top-level origins for which third-party storage partitioning (partitioning of cross-origin iframe storage) should be disabled.\r\n\r\nIf this policy isn't set or a top-level origin doesn't match one of the URL patterns, then the value from 'DefaultThirdPartyStoragePartitioningSetting' (Default setting for third-party storage partitioning) will be used.\r\n\r\nNote that the patterns you list are treated as origins, not URLs, so you shouldn't specify a path. For detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"35f218bc6427aea5":{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_localnetworkaccessblockedforurlsdesc","displayName":"Block sites from making requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"351bfb40b7a3fa71":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed","displayName":"Allow or deny screen capture (User)","description":"If you enable this policy, or don't configure this policy, a web page can use screen-share APIs (for example, getDisplayMedia() or the Desktop Capture extension API) for a screen capture.\r\nIf you disable this policy, calls to screen-share APIs will fail. For example, if you're using a web-based online meeting, video or screen sharing will not work. However, this policy is not considered\r\n(and a site will be allowed to use screen-share APIs) if the site matches an origin pattern in any of the following policies:\r\n'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins),\r\n'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins),\r\n'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins),\r\n'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"35609e985e4f9856":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled","displayName":"Prevents files from being uploaded while in Application Guard (User)","description":"Sets whether files can be uploaded while in Application Guard.\r\n\r\nIf you enable this policy, users will not be able to upload files in Application Guard.\r\n\r\nIf you disable or don't configure this policy, users will be able to upload files while in Application Guard.","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"35855a96d5fb6f06":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_cleanupinterval_l_cleanupintervaldecimal","displayName":"Cleanup interval (minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":null},"35a9efbc89c2fe77":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceworkfax_l_workfaxlabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"35d283fb9eb4ead5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace~l_definesharedworkspaceurls_l_site1_l_name","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"725adbdf-1eb8-45c4-8eb1-44747bd1615d","categoryName":"Define Shared Workspace URL's","options":null},"3595c3b5dabd3914":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanianromania","displayName":"Romanian (Romania) (User)","description":"Enables the editing language Romanian (Romania)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanianromania_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanianromania_1","displayName":"Enabled","description":null,"helpText":null}]},"35b99f42fd93bccd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_l_workflowsig452","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_l_workflowsig452_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_l_workflowsig452_1","displayName":"True","description":null,"helpText":null}]},"35959d9147b06c91":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog08_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"35e958ce59719ba0":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_deletemeetingrequestfrominboxwhenresponding_l_deletemeetingrequestfrominboxwhenresponding","displayName":"Delete meeting request from Inbox when responding (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_deletemeetingrequestfrominboxwhenresponding_l_deletemeetingrequestfrominboxwhenresponding_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_deletemeetingrequestfrominboxwhenresponding_l_deletemeetingrequestfrominboxwhenresponding_1","displayName":"True","description":null,"helpText":null}]},"3500723997959ec0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize37_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"ee62e9fc-14c8-4f24-aa7e-89524087a802","categoryName":"Customizable Error Messages","options":null},"358b93092bea8bbd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage","displayName":"Deleted Items Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Deleted Items Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"35eda526c6da36d6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage59","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage59_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage59_1","displayName":"True","description":null,"helpText":null}]},"3504069594a39a79":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehavior_l_configurefastshutdownbehaviordropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"ffb0a109-2507-42b3-b26f-9f667f2d5029","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehavior_l_configurefastshutdownbehaviordropid_0","displayName":"MAPI provider does not support","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehavior_l_configurefastshutdownbehaviordropid_1","displayName":"All MAPI providers support","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_configurefastshutdownbehavior_l_configurefastshutdownbehaviordropid_2","displayName":"Never","description":null,"helpText":null}]},"3587ec7579a0d2a6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_euroencodingforoutgoingmessages","displayName":"Euro encoding for outgoing messages (User)","description":"This policy setting allows you to choose whether to ignore the euro character when auto-detecting the encoding of an outgoing message and the preferred encoding does not support euro.","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_euroencodingforoutgoingmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_euroencodingforoutgoingmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"354fb20e502c8781":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydefaultlocationofdesktopalert_l_yoffsetdefault42","displayName":"YOffset (default 42): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"35e4b4213c44949d":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_endwithblackslide","displayName":"End with black slide (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_endwithblackslide_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_endwithblackslide_1","displayName":"Enabled","description":null,"helpText":null}]},"35469e0bf7ee0a12":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders31","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders31_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders31_1","displayName":"True","description":null,"helpText":null}]},"35179a3cf8c22f63":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13","displayName":"Trusted Location #13 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13_1","displayName":"Enabled","description":null,"helpText":null}]},"350c353bfad607a8":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_help","displayName":"Help (User)","description":"Displays the additional location of Help files.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_help_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_help_1","displayName":"Enabled","description":null,"helpText":null}]},"350aacc3f12b4848":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc06_l_pathcolon28","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/36.json b/public/intune-definitions/36.json new file mode 100644 index 000000000000..08eab529d60d --- /dev/null +++ b/public/intune-definitions/36.json @@ -0,0 +1 @@ +{"360be5300ed7cffb":{"id":"audioaccessory_temporarypairing","displayName":"Temporary Pairing","description":"A dictionary that describes audio accessory temporary pairing behavior. The device enables temporary pairing when this key is present and the `Disabled` key isn't `false`. The device doesn't synchronize pairing information with iCloud when temporary pairing is active.","helpText":null,"infoUrls":[],"categoryId":"a42e2248-d2dc-4476-a92d-d152fd67e04b","categoryName":"Audio Accessory","options":null},"36d4bbd8a392689e":{"id":"com.android.devicerestrictionpolicy.airplanemodeblocked","displayName":"Block airplane mode","description":"If 'True', the device is prevented from enabling airplane mode. If 'False', Intune doesn't change or update this setting. By default, the OS follows the default airplane mode behavior. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.airplanemodeblocked_false","displayName":"False","description":"The user is allowed to toggle airplane mode on or off.","helpText":null},{"id":"com.android.devicerestrictionpolicy.airplanemodeblocked_true","displayName":"True","description":"Airplane mode is disabled. The user is not allowed to toggle airplane mode on or off.","helpText":null}]},"3693c1c26ddb798c":{"id":"com.apple.applicationaccess_allowsafarisummary","displayName":"Allow Safari Summary (Deprecated)","description":"If false, disables the ability to summarize content in Safari.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowsafarisummary_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowsafarisummary_true","displayName":"True","description":null,"helpText":null}]},"36c83ee3488f95b6":{"id":"com.apple.cellular_apns_item_name","displayName":"Name","description":"The name for this configuration.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"364412f60dd90c6b":{"id":"com.apple.dock_allowdockfixupoverride","displayName":"Allow Dock Fixup Override","description":"If true, use the file in /Library/Preferences/com.apple.dockfixup.plist when a new user or migrated user logs in. This option has no effect for existing users. Available in macOS 10.12 and later. Only available on the device channel.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_allowdockfixupoverride_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_allowdockfixupoverride_true","displayName":"True","description":null,"helpText":null}]},"36a3c9556ff3e571":{"id":"com.apple.extensiblesso_platformsso_accountdisplayname","displayName":"Account Display Name","description":"The display name for the account in notifications and authentication requests.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"36f58c7e793b7c23":{"id":"com.apple.familycontrols.timelimits.v2_time-limits","displayName":"Time Limits","description":"The time limits to enforce if Family Controls Enabled is enabled. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"3605b26a4125c390":{"id":"com.apple.fileproviderd_allowmanagedfileproviderstorequestattribution","displayName":"Allow Managed File Providers To Request Attribution","description":"If true, enables file providers access to the path of the requesting process.","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":[{"id":"com.apple.fileproviderd_allowmanagedfileproviderstorequestattribution_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.fileproviderd_allowmanagedfileproviderstorequestattribution_true","displayName":"True","description":null,"helpText":null}]},"36ebab1507b794ec":{"id":"com.apple.loginwindow_logoutdisabledwhileloggedin","displayName":"Log Out Disabled While Logged In","description":"If true, disables the Log Out menu item when the user is logged in. Available in macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_logoutdisabledwhileloggedin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_logoutdisabledwhileloggedin_true","displayName":"True","description":null,"helpText":null}]},"36070c4fa172b6b5":{"id":"com.apple.managedclient.preferences_extensionsperformancedetectorenabled","displayName":"Extensions Performance Detector enabled","description":"This policy controls if users can access the Extensions Performance Detector Recommended Action feature in Browser Essentials. This feature alerts extension users if their extensions are causing performance regressions in the browser and allows them to take action to resolve the issue.\n\nIf you enable or don't configure this policy, users will receive Extensions Performance Detector notifications from Browser Essentials. When there is an active alert, users will be able to view the impact of extensions on their browser's performance and make an informed decision to disable impacting extensions. The detector will exclude browser-managed extensions, such as Google Docs offline, component extensions, and organization-managed extensions (ie. extensions that cannot be disabled).\n\nIf you disable this policy, users will not receive notifications or be able to view the Extensions Performance Detector Recommended Action.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensionsperformancedetectorenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_extensionsperformancedetectorenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_extensionsperformancedetectorenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"36664b762fc150c0":{"id":"com.apple.managedclient.preferences_imagesblockedforurls","displayName":"Block images on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to display images.\n\nIf you don't configure this policy, the global default value from the \"DefaultImagesSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#imagesblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"3661332f66014960":{"id":"com.apple.managedclient.preferences_importpaymentinfo","displayName":"Allow importing of payment info","description":"Allows users to import payment info from another browser into Microsoft Edge.\n\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.\n\nIf you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\n\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importpaymentinfo"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importpaymentinfo_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importpaymentinfo_true","displayName":"Enabled","description":null,"helpText":null}]},"3638e1b3d70b267f":{"id":"com.apple.managedclient.preferences_paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods","description":"Allows you to set whether websites can check if the user has payment methods saved.\n\nIf you disable this policy, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\n\nIf you enable this policy or don't set this policy, websites can check if the user has payment methods saved.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#paymentmethodqueryenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_paymentmethodqueryenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_paymentmethodqueryenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"36747d1d4cccf21f":{"id":"com.apple.proxy.http.global_proxypassword","displayName":"Proxy Password","description":"The password used to authenticate to the proxy server.","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":null},"36e4ebd116e5a736":{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"364f366a5b75b199":{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"3699e4a4428c0c07":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"367f1f5d40cb35a9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cacertificates","displayName":"TLS server certificates that should be trusted by Microsoft Edge","description":"This policy enables a list of Transport Layer Security (TLS) certificates that Microsoft Edge trusts for server authentication.\nCertificates should be base64 encoded.","helpText":null,"infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"368442a7bbe88ac8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.clipboardblockedforurls","displayName":"Block clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\n\nSetting the policy lets you create a list of URL patterns that specify sites that can't use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users can still paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\n\nLeaving the policy unset means \"DefaultClipboardSetting\" applies for all sites if it's set. If it isn't set, the user's personal setting applies.\n\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"365f6c74ec4e3da9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.editprofileenabled","displayName":"Enable editing profile in settings","description":"This policy controls whether users can modify profile properties (such as profile avatar) from the profile settings page.\n\nIf you enable or don't configure this policy, users can edit profile properties. The edit button is available on the profile settings page.\n\nIf you disable this policy, users can't edit profile properties. The edit button is disabled on the profile settings page.","helpText":null,"infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.editprofileenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.editprofileenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"368fe8798645a764":{"id":"com.microsoft.edge.mamedgeappconfigsettings.precisegeolocationallowedforurls","displayName":"Allow precise geolocation on these sites","description":"This policy lets you specify a list of URL patterns for sites that are allowed to access the user's high-accuracy geolocation without prompting for permission.\n\nIf you leave this policy unset, DefaultGeolocationSetting applies to all sites (if configured). Otherwise, the user's personal setting is used.\n\nFor information about valid url patterns, see https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format. Wildcards (*) are supported.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3605319fdaff4585":{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_recommended","displayName":"Search Filters Enabled (users can override)","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions are shown.\n\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\n\nIf you disable this policy, the autosuggestion dropdown can't display the ribbon of available filters.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"36b76cd4fb04c3c0":{"id":"device_vendor_msft_defender_configuration_networkprotectionreputationmode","displayName":"Network Protection Reputation Mode","description":"This sets the reputation mode engine for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_networkprotectionreputationmode_0","displayName":"Use standard reputation engine","description":"Use standard reputation engine","helpText":null},{"id":"device_vendor_msft_defender_configuration_networkprotectionreputationmode_1","displayName":"Use ESP reputation engine","description":"Use ESP reputation engine","helpText":null}]},"3682a821dc25810d":{"id":"device_vendor_msft_laps_policies_administratoraccountname","displayName":"Administrator Account Name ","description":"Use this setting to configure the name of the managed local administrator account.\n\nIf not specified, the default built-in local administrator account will be located by well-known SID (even if renamed).\n\nIf specified, the specified account's password will be managed.\n\nNote: if a custom managed local administrator account name is specified in this setting, that account must be created via other means. Specifying a name in this setting will not cause the account to be created.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":null},"3691ac2335b4f1f4":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_4_channel_logfilepath","displayName":"Log File Path","description":null,"helpText":"","infoUrls":[],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":null},"36e4f88705f9835b":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday","displayName":"Specify the day of the week to run a scheduled full scan to complete remediation","description":null,"helpText":"","infoUrls":[],"categoryId":"8212ba6e-101d-4ee8-8ca2-c4cd2cddba96","categoryName":"Remediation","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_8","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_0","displayName":"Every Day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_1","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_2","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_3","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_4","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_5","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_6","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_remediation_scan_scheduleday_7","displayName":"Saturday","description":null,"helpText":null}]},"363486f24c6b0726":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsrefreshinterval","displayName":"Specify Refresh Interval of the DC Locator DNS records","description":"This policy setting specifies the Refresh Interval of the DC Locator DNS resource records for DCs to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used by the DC Locator algorithm to locate the DC. This setting may be applied only to DCs using dynamic update.\r\n\r\nDCs configured to perform dynamic registration of the DC Locator DNS resource records periodically reregister their records with DNS servers, even if their records’ data has not changed. If authoritative DNS servers are configured to perform scavenging of the stale records, this reregistration is required to instruct the DNS servers configured to automatically remove (scavenge) stale records that these records are current and should be preserved in the database.\r\n\r\nWarning: If the DNS resource records are registered in zones with scavenging enabled, the value of this setting should never be longer than the Refresh Interval configured for these zones. Setting the Refresh Interval of the DC Locator DNS records to longer than the Refresh Interval of the DNS zones may result in the undesired deletion of DNS resource records.\r\n\r\nTo specify the Refresh Interval of the DC records, click Enabled, and then enter a value larger than 1800. This value specifies the Refresh Interval of the DC records in seconds (for example, the value 3600 is 60 minutes).\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-dnsrefreshinterval"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsrefreshinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsrefreshinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"3691c1c83084f9a3":{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_stddomainusersetlocation","displayName":"Require domain users to elevate when setting a network's location","description":"This policy setting determines whether to require domain users to elevate when setting a network's location.\r\n\r\nIf you enable this policy setting, domain users must elevate when setting a network's location.\r\n\r\nIf you disable or do not configure this policy setting, domain users can set a network's location without elevating.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-stddomainusersetlocation"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_stddomainusersetlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_stddomainusersetlocation_1","displayName":"Enabled","description":null,"helpText":null}]},"36e5fc7db8573d75":{"id":"device_vendor_msft_policy_config_admx_printing_v4driverdisallowprinterextension","displayName":"Do not allow v4 printer drivers to show printer extensions","description":"This policy determines if v4 printer drivers are allowed to run printer extensions.\r\n\r\n V4 printer drivers may include an optional, customized user interface known as a printer extension. These extensions may provide access to more device features, but this may not be appropriate for all enterprises.\r\n\r\n If you enable this policy setting, then all printer extensions will not be allowed to run.\r\n\r\n If you disable this policy setting or do not configure it, then all printer extensions that have been installed will be allowed to run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-v4driverdisallowprinterextension"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_v4driverdisallowprinterextension_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_v4driverdisallowprinterextension_1","displayName":"Enabled","description":null,"helpText":null}]},"36458bf547a43af5":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_delete_roaming_user_profiles","displayName":"Limit the size of the entire roaming user profile cache","description":"This policy setting allows you to limit the size of the entire roaming user profile cache on the local drive. This policy setting only applies to a computer on which the Remote Desktop Session Host role service is installed.\r\n\r\nNote: If you want to limit the size of an individual user profile, use the \"Limit profile size\" policy setting located in User Configuration\\Policies\\Administrative Templates\\System\\User Profiles.\r\n\r\nIf you enable this policy setting, you must specify a monitoring interval (in minutes) and a maximum size (in gigabytes) for the entire roaming user profile cache. The monitoring interval determines how often the size of the entire roaming user profile cache is checked. When the size of the entire roaming user profile cache exceeds the maximum size that you have specified, the oldest (least recently used) roaming user profiles will be deleted until the size of the entire roaming user profile cache is less than the maximum size specified.\r\n\r\nIf you disable or do not configure this policy setting, no restriction is placed on the size of the entire roaming user profile cache on the local drive.\r\n\r\nNote: This policy setting is ignored if the \"Prevent Roaming Profile changes from propagating to the server\" policy setting located in Computer Configuration\\Policies\\Administrative Templates\\System\\User Profiles is enabled.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-delete-roaming-user-profiles"],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_delete_roaming_user_profiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_delete_roaming_user_profiles_1","displayName":"Enabled","description":null,"helpText":null}]},"365b53cf7778d2d0":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_eventlogflags","displayName":"EventLogFlags","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"36533317986b8ea1":{"id":"device_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary","displayName":"Allow Configuration Update For Books Library","description":"This policy setting lets you decide whether Microsoft Edge can automatically update the configuration data for the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowconfigurationupdateforbookslibrary"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary_1","displayName":"Allow","description":"Allowed. Microsoft Edge updates the configuration data for the Books Library automatically.","helpText":null}]},"362dc149d57337d2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled","description":"This policy controls whether users can enable HTTPS-Only Mode in Settings. HTTPS-Only Mode upgrades all navigations to HTTPS.\r\nIf this setting is not set or set to allowed, users will be allowed to enable HTTPS-Only Mode.\r\nIf this setting is set to disallowed, users will not be allowed to enable HTTPS-Only Mode.\r\nForce enabling HTTPS-Only Mode is not currently supported.\r\n\r\nExample value: disallowed","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_1","displayName":"Enabled","description":null,"helpText":null}]},"367d44ec34f440e6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_managedconfigurationperorigin","displayName":"Sets managed configuration values to websites to specific origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"36437ec63e680baf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended","displayName":"Application locale","description":"Setting the policy specifies the locale Google Chrome uses.\r\n\r\nTurning it off or leaving it unset means the locale will be the first valid locale from:\r\n1) The user specified locale (if configured).\r\n2) The system locale.\r\n3) The fallback locale (en-US).\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"36acf9a6b439e6a6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"36eb899299e288d5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_spellchecklanguagedesc","displayName":"Force enable spellcheck languages (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"36a19dcffa02fcdf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes","displayName":"Disable URL protocol schemes","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nfile\r\nhttps","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_1","displayName":"Enabled","description":null,"helpText":null}]},"364dbca3da0e9384":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem","displayName":"Block credential stealing from the Windows local security authority subsystem","description":"This rule helps prevent credential stealing, by locking down Local Security Authority Subsystem Service (LSASS).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_warn","displayName":"Warn","description":null,"helpText":null}]},"365def3e7ef901f9":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount","displayName":"Locked Retry Count","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the number of retries to perform when a VHD(x) file is locked (open by another process or computer). The default value is 12 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\LockedRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_1","displayName":"Enabled","description":null,"helpText":null}]},"369155fcf522d15f":{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3","displayName":"Third choice","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_","displayName":"","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},"365145be6949304c":{"id":"device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode","displayName":"Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows","description":"This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows.\n\nImportant: Some ActiveX controls and toolbars may not be available when 64-bit processes are used.\n\nIf you enable this policy setting, Internet Explorer 11 will use 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.\n\nIf you disable this policy setting, Internet Explorer 11 will use 32-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.\n\nIf you don't configure this policy setting, users can turn this feature on or off using Internet Explorer settings. This feature is turned off by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableprocessesinenhancedprotectedmode"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"3659d7a0f998644d":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh","displayName":"Allow META REFRESH","description":"This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page.\n\nIf you enable this policy setting, a user's browser that loads a page containing an active Meta Refresh setting can be redirected to another Web page.\n\nIf you disable this policy setting, a user's browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.\n\nIf you do not configure this policy setting, a user's browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowmetarefresh"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_1","displayName":"Enabled","description":null,"helpText":null}]},"36a4f5dc88b79d80":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409","displayName":"Turn on Cross-Site Scripting (XSS) Filter","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_3","displayName":"Disable","description":null,"helpText":null}]},"36370c7f579fd20d":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog","description":"This policy controls whether the \"Always allow this site to open links of this type\" checkbox is shown on external protocol launch confirmation prompts.\r\n\r\nIf you set this policy to True, when an external protocol confirmation prompt is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.\r\n\r\nIf you set this policy to False, the \"Always allow\" checkbox isn't displayed. The user will be prompted for confirmation every time an external protocol is invoked.\r\n\r\nIf this policy is unset, the checkbox visibility is controlled by the \"Enable remembering protocol launch prompting preferences\" flag in edge://flags","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox_1","displayName":"Enabled","description":null,"helpText":null}]},"3679ab1c12da8dd6":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_excelexe","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_excelexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_excelexe_1","displayName":"True","description":null,"helpText":null}]},"367ffcc3f0b1f25d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions","displayName":"Scripted Window Security Restrictions","description":"Window Restrictions","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"3676b7437826daa6":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mse7exe97","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mse7exe97_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mse7exe97_1","displayName":"True","description":null,"helpText":null}]},"36330fe2ad70c63e":{"id":"device_vendor_msft_policy_config_settings_allowsigninoptions","displayName":"Allow Sign In Options","description":"Allows the user to change sign-in options.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowsigninoptions"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowsigninoptions_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowsigninoptions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"36b12cd64b43fe2f":{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization","displayName":"Boot-Start Driver Initialization Policy","description":"This policy setting allows you to specify which boot-start drivers are initialized based on a classification determined by an Early Launch Antimalware boot-start driver. The Early Launch Antimalware boot-start driver can return the following classifications for each boot-start driver:\n- Good: The driver has been signed and has not been tampered with.\n- Bad: The driver has been identified as malware. It is recommended that you do not allow known bad drivers to be initialized.\n- Bad, but required for boot: The driver has been identified as malware, but the computer cannot successfully boot without loading this driver.\n- Unknown: This driver has not been attested to by your malware detection application and has not been classified by the Early Launch Antimalware boot-start driver.\n\nIf you enable this policy setting you will be able to choose which boot-start drivers to initialize the next time the computer is started.\n\nIf you disable or do not configure this policy setting, the boot start drivers determined to be Good, Unknown or Bad but Boot Critical are initialized and the initialization of drivers determined to be Bad is skipped.\n\nIf your malware detection application does not include an Early Launch Antimalware boot-start driver or if your Early Launch Antimalware boot-start driver has been disabled, this setting has no effect and all boot-start drivers are initialized.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-bootstartdriverinitialization"],"categoryId":"f3027ba5-9a2f-42c6-9872-ec21f726929c","categoryName":"Early Launch Antimalware","options":[{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_1","displayName":"Enabled","description":null,"helpText":null}]},"360b57c0c9d51552":{"id":"device_vendor_msft_policy_config_userrights_createpagefile","displayName":"Create Page File","description":"This user right determines which users and groups can call an internal application programming interface (API) to create and change the size of a page file. This user right is used internally by the operating system and usually does not need to be assigned to any users","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createpagefile"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"36c7ad97401ba604":{"id":"device_vendor_msft_policy_config_userrights_denylogonasbatchjob","displayName":"Deny Log On As Batch Job","description":"This security setting determines which accounts are prevented from being able to log on as a batch job. This policy setting supersedes the Log on as a batch job policy setting if a user account is subject to both policies.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denylogonasbatchjob"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"36947ec4736348bd":{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompcoverinfrastructure","displayName":"Allow Projection From PC Over Infrastructure","description":"This policy allows you to turn off projection from a PC over infrastructure. If you set it to 0, your PC cannot discover or project to other infrastructure devices, though it may still be possible to discover and project over WiFi Direct. If you set it to 1, your PC can discover and project to other devices over infrastructure.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowprojectionfrompcoverinfrastructure"],"categoryId":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompcoverinfrastructure_0","displayName":"Your PC cannot discover or project to other infrastructure devices, although it is possible to discover and project over WiFi Direct.","description":"Your PC cannot discover or project to other infrastructure devices, although it is possible to discover and project over WiFi Direct.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompcoverinfrastructure_1","displayName":"Your PC can discover and project to other devices over infrastructure.","description":"Your PC can discover and project to other devices over infrastructure.","helpText":null}]},"368aec10158f8153":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_childprocessbehavior","displayName":"Child process behavior","description":"","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_allowrunelevated","displayName":"Allow all child processes to run elevated","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_allowrunelevatedrulerequired","displayName":"Require rule to elevate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_deny","displayName":"Deny all","description":null,"helpText":null}]},"36186782922c12bb":{"id":"device_vendor_msft_vpnconnection_profilewithuserordevicescope","displayName":"Use this VPN profile with a user/device scope","description":"This is the scope for whether the VPN Profile will be per user, or per device","helpText":"","infoUrls":[],"categoryId":"7f5517b0-3ff7-4f7e-aa4c-3d2ccbf37bdc","categoryName":"VPN Connection","options":null},"36fe823671f7754e":{"id":"device_vendor_msft_windowsdefenderapplicationguard_installwindowsdefenderapplicationguard","displayName":"Install Windows defender application guard","description":"Initiates remote installation of Application Guard feature.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/windowsdefenderapplicationguard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":{"id":"device_vendor_msft_windowsdefenderapplicationguard_installwindowsdefenderapplicationguard_install","displayName":"Install - Will initiate feature install","description":"Will initiate feature install.","helpText":null}},"36a059da4fd2e931":{"id":"linux_mdatp_managed_edr_tags_item_key","displayName":"Type of tag","description":"Specify a tag name and its value. The GROUP tag, tags the device with the specified value. The tag is reflected in the portal under the device page and can be used for filtering and grouping devices.","helpText":null,"infoUrls":[],"categoryId":"22a2a407-0f28-481d-bdbe-1f9cb6d589c3","categoryName":" EDR preferences","options":{"id":"linux_mdatp_managed_edr_tags_item_key_0","displayName":"GROUP","description":null,"helpText":null}},"36b2e8621d0045d3":{"id":"user_vendor_msft_policy_config_admx_globalization_hidecurrentlocation","displayName":"Hide the geographic location option (User)","description":"This policy setting removes the option to change the user's geographical location (GeoID) from the Region settings control panel.\r\n\r\nThis policy setting is used only to simplify the Regional Options control panel.\r\n\r\nIf you enable this policy setting, the user does not see the option to change the GeoID. This does not prevent the user or an application from changing the GeoID programmatically.\r\n\r\nIf you disable or do not configure this policy setting, the user sees the option for changing the user location (GeoID).\r\n\r\nNote: Even if a user can see the GeoID option, the \"Disallow changing of geographical location\" option can prevent them from actually changing their current geographical location.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hidecurrentlocation"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hidecurrentlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hidecurrentlocation_1","displayName":"Enabled","description":null,"helpText":null}]},"36dbf58056004803":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_1","displayName":"Software Installation (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstallationusers-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_1_1","displayName":"Enabled","description":null,"helpText":null}]},"364ba4ea34c979a3":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-trusted"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted_1","displayName":"Enabled","description":null,"helpText":null}]},"36a5a17d5021a383":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled","displayName":"Use hardware acceleration when available (User)","description":"Setting the policy to Enabled or leaving it unset turns on hardware acceleration, if available.\r\n\r\nSetting the policy to Disabled turns off hardware acceleration.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"364b34685aae3707":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_spellchecklanguageblocklistdesc","displayName":"Force disable spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"36b5370baab47a71":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURLPostParams specifies the parameters during suggestion search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSuggestURLPostParams unset unset means suggest search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"3696612c1f9cd9a2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist","displayName":"Kerberos delegation server allowlist (User)","description":"Setting the policy assigns servers that Google Chrome may delegate to. Separate multiple server names with commas. Wildcards, *, are allowed.\r\n\r\nLeaving the policy unset means Google Chrome won't delegate user credentials, even if a server is detected as intranet.\r\n\r\nExample value: foobar.example.com","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"365d7080e6b054b4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections","displayName":"Allow remote support connections to this machine (User)","description":"If this policy is disabled, the remote support host cannot be started or configured to accept incoming connections.\r\n\r\nThis policy does not affect remote access scenarios.\r\n\r\nThis policy does not prevent enterprise admins from connecting to managed Chrome OS devices.\r\n\r\nThis policy has no effect if enabled, left empty, or is not set.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections_1","displayName":"Enabled","description":null,"helpText":null}]},"3653e397f55f0771":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_chromeframecontenttypesdesc","displayName":"Allow Google Chrome Frame to handle the listed content types (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"36447f184a7ea369":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure","displayName":"Enable trust in Symantec Corporation's Legacy PKI Infrastructure (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure_1","displayName":"Enabled","description":null,"helpText":null}]},"361b685afbfd9f4d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (User)","description":"This policy provides a way to override the list of sets the browser uses for Related Website Sets features.\r\n\r\nThis policy overrides the FirstPartySetsOverrides policy.\r\n\r\nEach set in the browser's list of Related Website Sets must meet the requirements of a Related Website Set.\r\nA Related Website Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all of its ccTLD variants.\r\nSee https://github.com/WICG/first-party-sets for more information on how Google Chrome uses Related Website Sets.\r\n\r\n\r\nAll sites in a Related Website Set must be a registrable domain served over HTTPS. Each site in a Related Website Set must also be unique,\r\nmeaning a site cannot be listed more than once in a Related Website Set.\r\n\r\nWhen this policy is given an empty dictionary, the browser uses the public list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the replacements list, if a site is also present\r\non a Related Website Set in the browser's list, then that site will be removed from the browser's Related Website Set.\r\nAfter this, the policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the additions list, if a site is also present\r\non a Related Website Set in the browser's list, then the browser's Related Website Set will be updated so that the\r\nnew Related Website Set can be added to the browser's list. After the browser's list has been updated,\r\nthe policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nThe browser's list of Related Website Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site cannot be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) are not supported as a policy value, nor within any Related Website Set in these lists.\r\n\r\nAll sets provided by the policy must be valid Related Website Sets, if they aren't then an\r\nappropriate error will be outputted.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RelatedWebsiteSetsOverrides for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"categoryId":"ac821e49-1996-4d6c-99d4-9c3c3e4737b6","categoryName":"Related Website Sets Settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},"36b7fbafa1e63669":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi","displayName":"Enable support for the PPB_VideoDecoder(Dev) API. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi_1","displayName":"Enabled","description":null,"helpText":null}]},"36b19e9e715b3342":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsheet","displayName":"Review tab | Changes | Protect Sheet (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsheet_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsheet_1","displayName":"True","description":null,"helpText":null}]},"36c74fbf1de47176":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey_l_helpkey","displayName":"Enter ASCII value (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":null},"362581c95bc91376":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_zoomonrollwithintellimouse","displayName":"Zoom on roll with IntelliMouse (User)","description":"This policy setting sets the \"Zoom on roll with IntelliMouse'\" option found under File tab | Options | Advanced | Editing options\r\n\r\nIf you enable this policy setting, rolling the mouse wheel will change the zoom level of the worksheet.\r\n\r\nIf you disable or do not configure this policy setting, rolling the mouse wheel will scroll the worksheet. This is the default behavior.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_zoomonrollwithintellimouse_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_zoomonrollwithintellimouse_1","displayName":"Enabled","description":null,"helpText":null}]},"36cfbf563911ee6e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_descriptioncolon63","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"36994a989ecab917":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneinitializeandscriptactivexcontrols"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"36733428a9480a32":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001","displayName":"Run .NET Framework-reliant components signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1","displayName":"Prompt","description":null,"helpText":null}]},"3601263d6a4a959a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel","displayName":"Configure Internet Explorer integration (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_1","displayName":"Internet Explorer mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_2","displayName":"Internet Explorer 11","description":null,"helpText":null}]},"36572ac0e5adf84f":{"id":"user_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_edgesidebarappurlhostallowlistdesc","displayName":"Allow specific apps to be opened in Microsoft Edge sidebar (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"368d86d0766063ce":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_0","displayName":"Automatically","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_1","displayName":"With device password","description":null,"helpText":null}]},"3692477f7caef548":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastserviceserverdescription9","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"365dc95f417f39a1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_defaultsubjectforareviewrequest_l_defaultsubjectforareviewrequest393","displayName":"Default subject for a review request (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":null},"360d450f84d7074a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehomeadd","displayName":"Replace Label - Home Address (User)","description":"This policy setting allows you to change or remove the 14th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehomeadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehomeadd_1","displayName":"Enabled","description":null,"helpText":null}]},"368de616321dac17":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyexcel","displayName":"Disallow in Excel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyexcel_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyexcel_1","displayName":"True","description":null,"helpText":null}]},"36d4c0671e90372c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc15_l_allowsubfolders15","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc15_l_allowsubfolders15_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc15_l_allowsubfolders15_1","displayName":"True","description":null,"helpText":null}]},"367ce9f173961b3f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimetowaitbeforerescanning","displayName":"Minimum time to wait before rescanning the Outlook mailbox for new colleague recommendations (User)","description":"The minimum time (in hours) to wait before rescanning the Outlook mailbox for new colleague recommendations.","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimetowaitbeforerescanning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimetowaitbeforerescanning_1","displayName":"Enabled","description":null,"helpText":null}]},"36a1ddd240a693d0":{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_production","displayName":"Current Channel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_production_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_production_1","displayName":"True","description":null,"helpText":null}]},"3651f6b244e58327":{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifywaitonsendtimeoutfordlpevaluation_l_specifywaitonsendtimeoutfordlpevaluationspinid","displayName":"In seconds: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","categoryName":"Compose Messages","options":null},"36df5c7c8ee17b7b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blockspecificsocialnetworkproviders","displayName":"Block specific social network providers (User)","description":"This policy setting allows you to specify the list of social network providers that will never be loaded by the Outlook Social Connector. \r\n\r\nIf you enable this policy setting, social network providers added to the list will never be loaded by the Outlook Social Connector. This list needs to be semi-colon delimited. \r\n\r\nIf you disable or you do not configure this policy setting, the Outlook Social Connector can load any provider specified by the user.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blockspecificsocialnetworkproviders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blockspecificsocialnetworkproviders_1","displayName":"Enabled","description":null,"helpText":null}]},"3610f40ce9f96c60":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_displayenterprisethemes","displayName":"Display enterprise themes (User)","description":"This policy allows you to display enterprise themes in the ribbon galleries. You can also name the category for the themes, and you can hide all the Office in-box and connected gallery themes.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_displayenterprisethemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_displayenterprisethemes_1","displayName":"Enabled","description":null,"helpText":null}]},"3630058007a32fc1":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablesummaryslidesectionzoom","displayName":"Don’t allow Summary Zoom, Slide Zoom, and Section Zoom in a PowerPoint presentation (User)","description":"This policy setting controls whether users can insert and playback a Summary Zoom, a Slide Zoom, or a Section Zoom in a PowerPoint presentation. By default, users can use these types of Zoom in a presentation.\r\n\r\nIf you enable this policy setting, users can’t use these types of Zoom in a presentation.\r\n\r\nIf you disable or don’t configure this policy setting, users can use these types of Zoom in a presentation.\r\n ","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablesummaryslidesectionzoom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablesummaryslidesectionzoom_1","displayName":"Enabled","description":null,"helpText":null}]},"36585b283534a956":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_l_allowsubfolders51","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_l_allowsubfolders51_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_l_allowsubfolders51_1","displayName":"True","description":null,"helpText":null}]},"360f5e8ad1c7bab1":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_save_l_saveautorecoverinfoevery_l_saveautorecoverinfoeveryid","displayName":"Minutes (range 1-120): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"038b49c9-4f13-4ace-be8d-bd076bffa23e","categoryName":"Save","options":null},"3645ef1999c92538":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_frontofsheet","displayName":"Print on front of the sheet for duplex printing (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_frontofsheet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_frontofsheet_1","displayName":"Enabled","description":null,"helpText":null}]},"36cd836e56fae9e0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates","displayName":"Word 2007 and later documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"361a92dec13e239e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_balloons","displayName":"Balloons (User)","description":"Turning balloons off will show revisions inline. This corresponds to the choices in the Review ribbon.","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_balloons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_balloons_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/37.json b/public/intune-definitions/37.json new file mode 100644 index 000000000000..c94cd18ffbb7 --- /dev/null +++ b/public/intune-definitions/37.json @@ -0,0 +1 @@ +{"37984e7e8647e68e":{"id":"app_allowed_allowedbinaries_item_signingstate","displayName":"Signing State","description":"The code signing state to match binaries.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_allowed_allowedbinaries_item_signingstate_0","displayName":"All","description":null,"helpText":null},{"id":"app_allowed_allowedbinaries_item_signingstate_1","displayName":"TestFlight","description":null,"helpText":null},{"id":"app_allowed_allowedbinaries_item_signingstate_2","displayName":"DeveloperID","description":null,"helpText":null},{"id":"app_allowed_allowedbinaries_item_signingstate_3","displayName":"Enterprise","description":null,"helpText":null},{"id":"app_allowed_allowedbinaries_item_signingstate_4","displayName":"AppStore","description":null,"helpText":null},{"id":"app_allowed_allowedbinaries_item_signingstate_5","displayName":"Apple","description":null,"helpText":null}]},"37038d0240b273f4":{"id":"com.apple.applicationaccess_allowbookstore","displayName":"Allow Bookstore","description":"If false, removes the Book Store tab from the Books app. Requires a supervised device. Available in iOS 6 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowbookstore_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowbookstore_true","displayName":"True","description":null,"helpText":null}]},"3769ba42dd0a871e":{"id":"com.apple.applicationaccess_allowenterprisebookbackup","displayName":"Allow Enterprise Book Backup","description":"If false, disables backup of Enterprise books. Available in iOS 8 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowenterprisebookbackup_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowenterprisebookbackup_true","displayName":"True","description":null,"helpText":null}]},"3773223bb5364f6d":{"id":"com.apple.applicationaccess_forcewificonfigurationonlockscreen","displayName":"Force Wifi Configuration On Lock Screen","description":"If `true`, the system allows the user to select WiFi networks at login or unlock.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcewificonfigurationonlockscreen_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcewificonfigurationonlockscreen_true","displayName":"Enabled","description":null,"helpText":null}]},"373d6e1adeca5717":{"id":"com.apple.carddav.account_carddavusername","displayName":"Card DAV Username","description":"The user name for logins.","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":null},"37306d62d6a95d02":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_application id","displayName":"Microsoft Outlook Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"3778bdcecf11ce5b":{"id":"com.apple.managedclient.preferences_behaviormonitoring","displayName":"Behavior Monitoring","description":"Behavior Monitoring detections with Microsoft Defender for Endpoint.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/behavior-monitor-macos"],"categoryId":"a3ea4da3-445e-41c0-ac4d-c9ad2467ec26","categoryName":"Features","options":[{"id":"com.apple.managedclient.preferences_behaviormonitoring_0","displayName":"enabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_behaviormonitoring_1","displayName":"disabled","description":null,"helpText":null}]},"379399ee6190ac37":{"id":"com.apple.managedclient.preferences_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver","description":"The URI template of the desired DNS-over-HTTPS resolver. To specify multiple DNS-over-HTTPS resolvers, separate the corresponding URI templates with spaces.\n\nIf you set \"DnsOverHttpsMode\" to \"secure\" then this policy must be set and cannot be empty.\n\nIf you set \"DnsOverHttpsMode\" to \"automatic\" and this policy is set then the URI templates specified will be used. If you don't set this policy, then hardcoded mappings will be used to attempt to upgrade the user's current DNS resolver to a DoH resolver operated by the same provider.\n\nIf the URI template contains a dns variable, requests to the resolver will use GET; otherwise requests will use POST.\n\nIncorrectly formatted templates will be ignored.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#dnsoverhttpstemplates"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"37bde14d06e2486a":{"id":"com.apple.managedclient.preferences_privatenetworkaccessrestrictionsenabled","displayName":"Specifies whether to apply restrictions to requests to more private network endpoints (Deprecated)","description":"Specifies whether to apply restrictions to requests to more private\nnetwork endpoints\n\nWhen this policy is Enabled, any time when a warning is supposed to be displayed in the DevTools due to Private Network Access checks failing, the request is blocked.\n\nWhen this policy is Disabled or unset, all Private Network Access warnings are not enforced and the requests are not blocked.\n\nSee https://wicg.github.io/private-network-access/ for Private Network Access restrictions.\n\nNote: A network endpoint is more private than another if:\n1) Its IP address is localhost and the other is not.\n2) Its IP address is private and the other is public.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#privatenetworkaccessrestrictionsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_privatenetworkaccessrestrictionsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_privatenetworkaccessrestrictionsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"37e8ed0b6dc4039e":{"id":"com.apple.managedclient.preferences_userinitiatedfeedback","displayName":"User initiated feedback","description":"Specify whether users can submit feedback to Microsoft by going to Help > Send Feedback.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#diagnostic-collection-level"],"categoryId":"67cd904c-78e0-4e77-9dd4-c713b21763f3","categoryName":"User interface preferences","options":[{"id":"com.apple.managedclient.preferences_userinitiatedfeedback_0","displayName":"enabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userinitiatedfeedback_1","displayName":"disabled","description":null,"helpText":null}]},"37a9ce6f51ec212a":{"id":"com.apple.security.fderecoverykeyescrow_devicekey","displayName":"Device Key","description":"The string that's included in help text if the user appears to have forgotten the password. Site admins can use this key to look up the escrowed key for the particular computer. This key replaces the Record Number key used in the previous escrow mechanism. If the key is missing, the device serial number is used instead.","helpText":null,"infoUrls":[],"categoryId":"bd5533e1-f1ee-4994-8a79-cffe02b12d5c","categoryName":"FileVault Recovery Key Escrow","options":null},"37314fd8b7d5a4e6":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways","displayName":"Bluetooth Always (deprecated)","description":"Specifies the policies for the app to access Bluetooth devices.\n\nDeprecated: use the `Privacy` key in the declarative management `com.apple.configuration.app-settings` configuration.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"374a9c5e66929688":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_recommended","displayName":"Discover feature In Microsoft Edge (Obsolete) (users can override)","description":"This policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the \"HubsSidebarEnabled\" policy.\n\nThis policy lets you configure the Discover feature in Microsoft Edge.\n\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\n\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\n\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"37ee85e21010a903":{"id":"com.microsoft.edge.mamedgeappconfigsettings.urlblocklist","displayName":"Block access to a list of URLs","description":"Defines a list of sites, based on URL patterns, that are blocked (your users can't load them).\n\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\n\nYou can define exceptions in the \"URLAllowlist\" policy. These policies are limited to 1000 entries; subsequent entries are ignored.\n\nBlocking internal 'edge://*' URLs isn't recommended - this may lead to unexpected errors.\n\nThis policy doesn't prevent the page from updating dynamically through JavaScript. For example, if you block 'contoso.com/abc', users can visit 'contoso.com' and select on a link to visit 'contoso.com/abc', as long as the page doesn't refresh.\n\nIf you don't configure this policy, no URLs are blocked.\n\nThis policy doesn't work as expected with file://* wildcards.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"373c97b9b2d83c22":{"id":"device_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_2","displayName":"Turn off Internet File Association service","description":"This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.\r\n\r\nWhen a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application.\r\n\r\nIf you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed.\r\n\r\nIf you disable or do not configure this policy setting, the user is allowed to use the Web service.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellnouseinternetopenwith-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_2_1","displayName":"Enabled","description":null,"helpText":null}]},"37bca45d0c4467b4":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt","displayName":"MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic. ","description":"MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic. \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-nodefaultexempt"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt_1","displayName":"Enabled","description":null,"helpText":null}]},"37fce66a79cbd1dc":{"id":"device_vendor_msft_policy_config_admx_qos_qostimerresolution","displayName":"Set timer resolution","description":"Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Scheduler cannot schedule packets for transmission more frequently than permitted by the value of this entry.\r\n\r\nIf you enable this setting, you can override the default timer resolution established for the system, usually units of 10 microseconds.\r\n\r\nIf you disable this setting or do not configure it, the setting has no effect on the system.\r\n\r\nImportant: If a timer resolution is specified in the registry for a particular network adapter, then this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qostimerresolution"],"categoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","categoryName":"Qo S Packet Scheduler","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qostimerresolution_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qostimerresolution_1","displayName":"Enabled","description":null,"helpText":null}]},"379f5b5811bba09e":{"id":"device_vendor_msft_policy_config_admx_smartcard_scpnpnotification","displayName":"Notify user of successful smart card driver installation","description":"This policy setting allows you to control whether a confirmation message is displayed when a smart card device driver is installed.\r\n\r\nIf you enable or do not configure this policy setting, a confirmation message will be displayed when a smart card device driver is installed.\r\n\r\nIf you disable this policy setting, a confirmation message will not be displayed when a smart card device driver is installed.\r\n\r\nNote: This policy setting is applied only for smart cards that have passed the Windows Hardware Quality Labs (WHQL) testing process.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-scpnpnotification"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_scpnpnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_scpnpnotification_1","displayName":"Enabled","description":null,"helpText":null}]},"37ec0dfe849585db":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_lpt","displayName":"Do not allow LPT port redirection","description":"This policy setting specifies whether to prevent the redirection of data to client LPT ports during a Remote Desktop Services session.\r\n\r\nYou can use this setting to prevent users from mapping local LPT ports and redirecting data from the remote computer to local LPT port peripherals. By default, Remote Desktop Services allows LPT port redirection.\r\n\r\nIf you enable this policy setting, users in a Remote Desktop Services session cannot redirect server data to the local LPT port.\r\n\r\nIf you disable this policy setting, LPT port redirection is always allowed.\r\n\r\nIf you do not configure this policy setting, LPT port redirection is not specified at the Group Policy level. \r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-lpt"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_lpt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_lpt_1","displayName":"Enabled","description":null,"helpText":null}]},"3766537d6ff4622f":{"id":"device_vendor_msft_policy_config_admx_wlansvc_setpinpreferred","displayName":"Prefer PIN pairing","description":"This policy applies to Wireless Display connections. This policy changes the preference order of the pairing methods.\r\n\r\nWhen enabled, it makes the connections to prefer a PIN for pairing to Wireless Display devices over the Push Button pairing method.\r\n\r\nIf this policy setting is disabled or is not configured, by default Push Button pairing is preferred (if allowed by other policies).\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wlansvc#admx-wlansvc-setpinpreferred"],"categoryId":"4dd8280d-6c01-4a06-bfd1-e1cb4c529494","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_admx_wlansvc_setpinpreferred_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wlansvc_setpinpreferred_1","displayName":"Enabled","description":null,"helpText":null}]},"372209348a215e2c":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftofficehub","displayName":"Microsoft 365 Copilot (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftofficehub_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftofficehub_1","displayName":"True","description":null,"helpText":null}]},"37585a465c0fb21f":{"id":"device_vendor_msft_policy_config_browser_configurekioskresetafteridletimeout","displayName":"Configure Kiosk Reset After Idle Timeout","description":"You can configure Microsoft Edge to reset to the configured start experience after a specified amount of idle time. The reset timer begins after the last user interaction. Resetting to the configured start experience deletes the current user’s browsing data. If enabled, you can set the idle time in minutes (0-1440). You must set the Configure kiosk mode policy to 1 and configure Microsoft Edge in assigned access as a single app for this policy to work. Once the idle time meets the time specified, a confirmation message prompts the user to continue, and if no user action, Microsoft Edge resets after 30 seconds. If you set this policy to 0, Microsoft Edge does not use an idle timer. If disabled or not configured, the default value is 5 minutes. If you do not configure Microsoft Edge in assigned access, then this policy does not take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurekioskresetafteridletimeout"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"3718b10c3090424b":{"id":"device_vendor_msft_policy_config_camera_allowcamera","displayName":"Allow Camera","description":"Disables or enables the camera. Most restrictive value is Block","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-camera#allowcamera"],"categoryId":"18893f00-c309-4695-bcaf-b66286ad99c1","categoryName":"Camera","options":[{"id":"device_vendor_msft_policy_config_camera_allowcamera_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_camera_allowcamera_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"3726aa6a84004f81":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended","displayName":"Default search provider instant URL","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"370fe975a494ccd2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters","displayName":"Command-line parameters for the alternative browser.","description":"Setting the policy to a list of strings means each string is passed to the alternative browser as separate command-line parameters. On Microsoft® Windows®, the parameters are joined with spaces. On macOS and Linux®, a parameter can have spaces and still be treated as a single parameter.\r\n\r\nIf an parameter contains ${url}, ${url} is replaced with the URL of the page to open. If no parameter contains ${url}, the URL is appended at the end of the command line.\r\n\r\nEnvironment variables are expanded. On Microsoft® Windows®, %ABC% is replaced with the value of the ABC environment variable. On macOS and Linux®, ${ABC} is replaced with the value of the ABC environment variable.\r\n\r\nLeaving the policy unset means only the URL is passed as a command-line parameter.\r\n\r\nExample value:\r\n\r\n-foreground\r\n-new-window\r\n${url}\r\n-profile\r\n%HOME%\\browser_profile","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters_1","displayName":"Enabled","description":null,"helpText":null}]},"37fbeb8dce6bfdff":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled","displayName":"Enable Application Bound Encryption","description":"Setting the policy to Enabled or leaving it unset binds encryption keys used for local data storage to Google Chrome whenever that is possible.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security as unknown and potentially hostile apps can retrieve encryption keys used to secure data.\r\n\r\nOnly turn off the policy if there are compatibility issues, such as other applications that need legitimate access to Google Chrome's data, encrypted user data is expected to be fully portable between different computers or the integrity and location of Google Chrome's executable files is not consistent.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3743abe0e74c16f5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled","displayName":"Allows origin-keyed agent clustering by default.","description":"This policy allows origin-keyed agent clustering by default.\r\n\r\nThe Origin-Agent-Cluster HTTP header controls whether a document is\r\nisolated in an origin-keyed agent cluster, or in a site-keyed agent\r\ncluster. This has security implications since an origin-keyed agent\r\ncluster allows isolating documents by origin. The developer-visible\r\nconsequence of this is that the document.domain accessor can no longer\r\nbe set.\r\n\r\nThe default behaviour - when no Origin-Agent-Cluster header has been set -\r\nchanges in M111 from site-keyed to origin-keyed.\r\n\r\nIf this policy is enabled or not set, the browser will follow this\r\nnew default from that version on.\r\n\r\nIf this policy is disabled this change is reversed and\r\ndocuments without Origin-Agent-Cluster headers will be assigned to\r\nsite-keyed agent clusters. As a consequence, the document.domain accessor\r\nremains settable by default. This matches the legacy behaviour.\r\n\r\nSee https://developer.chrome.com/blog/immutable-document-domain/ for\r\nadditional details.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3708c4c6c71509e9":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxbackgrounddownloadbandwidth","displayName":"DO Max Background Download Bandwidth","description":"Specifies the maximum background download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxbackgrounddownloadbandwidth"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"37a14aec8b49c7cf":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_logginglogdirectory","displayName":"Log Directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":null},"370cd01604f547a8":{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions","displayName":"Allow insecure fallback for:","description":"","helpText":"","infoUrls":[],"categoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","categoryName":"Security Features","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_0","displayName":"No Sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_1","displayName":"Non-Protected Mode Sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_3","displayName":"All Sites","description":null,"helpText":null}]},"3766822bfd658cf7":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate","displayName":"Locked-Down Internet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddowninternetzonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"37ac779dd504aeaa":{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate","displayName":"Locked-Down Trusted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowslockeddowntrustedsiteszonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"37140d7736c3ffb2":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402","displayName":"XAML Files","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_1","displayName":"Prompt","description":null,"helpText":null}]},"3791290550d6da5e":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"37411f821a7a0fc3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername","displayName":"Default search provider name (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"3732917d28ead48f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mspubexe142","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mspubexe142_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mspubexe142_1","displayName":"True","description":null,"helpText":null}]},"377a5ee61b22716e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mspubexe114","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mspubexe114_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mspubexe114_1","displayName":"True","description":null,"helpText":null}]},"37b833851953f876":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_userincontroloftheseapps","displayName":"Let Apps Access Trusted Devices User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"3782d9c8eecaf05a":{"id":"device_vendor_msft_policy_config_update_activehoursmaxrange","displayName":"Active Hours Max Range","description":"Allows the IT admin to specify the max active hours range. This value sets max number of active hours from start time. Supported values are 8-18. The default value is 18 (hours).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#activehoursmaxrange"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"37371de6effef321":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edgebeta","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"37bc4d119e850a9a":{"id":"user_vendor_msft_passportforwork_{tenantid}","displayName":"User-scoped settings","description":"This policy specifies the Tenant ID in the format of a Globally Unique Identifier (GUID) without curly braces ( { , } ), which will be used as part of Windows Hello for Business provisioning and management.","helpText":"","infoUrls":[],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"377acd7a141e6b1e":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_descriptioncolon73","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"37cd5906c744ff46":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauth","displayName":"Certification Authority (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certauth"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauth_1","displayName":"Enabled","description":null,"helpText":null}]},"37791d57f072ffd5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_managedbookmarks","displayName":"Managed Bookmarks (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"3742a39e440d5cb2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist","displayName":"Allow merging list policies from different sources (User)","description":"Setting the policy allows merging of selected policies when they come from different sources, with the same scopes and level.\r\n\r\nIf a policy is in the list and there's conflict between sources with:\r\n\r\n* The same scopes and level: The values merge into a new policy list.\r\n\r\n* Different scopes or level: The policy with the highest priority applies.\r\n\r\nIf a policy isn't in the list and there's conflict between sources, scopes, or level, the policy with the highest priority applies.\r\n\r\nExample value:\r\n\r\nExtensionInstallAllowlist\r\nExtensionInstallBlocklist","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_1","displayName":"Enabled","description":null,"helpText":null}]},"3745a0ab5d172dd7":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_enterprisecustomlabel","displayName":"Set a custom enterprise label for a managed profile (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"3744d4e57a128d4a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets_l_sheetsinnewworkbook","displayName":"Sheets in new workbook (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":null},"376d14eb896a96c3":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned","displayName":"Require that application add-ins are signed by Trusted Publisher (User)","description":"This policy setting controls whether add-ins for the specified Office 2016 applications must be digitally signed by a trusted publisher.\r\n \r\nIf you enable this policy setting, this application checks the digital signature for each add-in before loading it. If an add-in does not have a digital signature, or if the signature did not come from a trusted publisher, this application disables the add-in and notifies the user. Certificates must be added to the Trusted Publishers list if you require that all add-ins be signed by a trusted publisher. For detail on about obtaining and distributing certificates, see http://go.microsoft.com/fwlink/?LinkId=294922. Office 2016 stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Office 2016 still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store. Therefore, if you created a list of trusted publishers in a previous version of Office and you upgrade to Office 2016, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store. For more information about trusted publishers, see the Office Resource Kit.\r\n\r\nIf you disable or do not configure this policy setting, Office 2016 applications do not check the digital signature on application add-ins before opening them. If a dangerous add-in is loaded, it could harm users' computers or compromise data security.\r\n","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_1","displayName":"Enabled","description":null,"helpText":null}]},"37cd9c9f07a4a627":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_pathcolon29","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"3740268d888b3714":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist","displayName":"HTTP Allowlist (User)","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as '[*.]example.com') that will not be upgraded to HTTPS and will not show an error interstitial if HTTPS-First Mode is enabled. Organizations can use this policy to maintain access to servers that do not support HTTPS, without needing to disable \"AutomaticHttpsDefault\".\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead, HTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their specific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"37f633e195e57edd":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended","displayName":"Enable resolution of navigation errors using a web service (User)","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\r\n\r\nIf you enable this policy, a web service is used for network connectivity tests.\r\n\r\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\r\n\r\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3702154e1056b6e6":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar (User)","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon will be shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\r\n\r\nThis policy only applies when users are accessing Copilot in the sidepane.\r\n\r\nIf the policy is enabled: Copilot will appear in the toolbar.\r\n\r\nIf the policy is disabled: Copilot will not appear in the toolbar.\r\n\r\nIf the policy is not configured: Otherwise, Copilot will show in the toolbar and users may enable or disable Copilot from showing by using the Show Copilot toggle in settings.\r\n\r\nWhen both this policy and 'HubsSidebarEnabled' (Show Hubs Sidebar) are configured, this policy takes precedence in determining whether Copilot appears in the toolbar. If this policy is not configured and 'HubsSidebarEnabled' is disabled, Copilot will remain hidden. In a future release, this policy will be the sole control for managing Copilot's visibility in the toolbar.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"374b72cb151abd17":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastserviceservername2","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"376d9be6c9228f35":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_cleanupinterval","displayName":"Set the cleanup interval (User)","description":"This policy setting allows you to specify the interval (in minutes) for how long successfully completed operations and other data that is no longer needed will remain in the cache before they can be deleted. The synchronization process leads to data in the cache that will no longer be needed. However, the data may be useful for troubleshooting purposes. To prevent the cache from growing too large, the cache contents should periodically be deleted.\r\n\r\nIf you enable this policy setting, you may specify the interval (in minutes) for the times the contents in the cache are deleted.\r\n\r\nIf you disable or do not configure this policy setting, a default value of 1440 minutes (1 day) will be used.","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_cleanupinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_cleanupinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"371a8e7055041653":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework","displayName":"Replace MAPI - Work (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"work phone\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"work phone\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework_1","displayName":"Enabled","description":null,"helpText":null}]},"37a24a6c743e3dfc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kinyarwanda","displayName":"Kinyarwanda (User)","description":"Enables the editing language Kinyarwanda","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kinyarwanda_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kinyarwanda_1","displayName":"Enabled","description":null,"helpText":null}]},"37df7df6914ec8e3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_l_descriptioncolon304","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"37ef705499e5de51":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"37bc4416ed7e09fb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_displaysenderpicture","displayName":"Display Sender Picture (User)","description":"This policy setting controls whether Outlook displays pictures in email headers for senders of email messages and meeting requests. \r\n\t \r\nIf you enable or do not configure this policy setting Outlook displays pictures for senders if they are available. \r\n\r\nIf you disable this policy setting, pictures of senders will not be displayed.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_displaysenderpicture_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_displaysenderpicture_1","displayName":"Enabled","description":null,"helpText":null}]},"37f9cf46f2354960":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_donotincludetheonlinearchiveinallmailitemsearch","displayName":"Do not include the Online Archive in All Mail Item search (User)","description":"This policy sets the default action in All Mail Item search to not include search results from the Online Archive.\r\n\r\nIf you enable this policy setting, search results from the Online Archive will not be included in an All Mail Item search in Outlook.\r\n\r\nIf you disable or do not configure this policy setting, search results from the Online Archive will be included in an All Mail Item search in Outlook.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_donotincludetheonlinearchiveinallmailitemsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_donotincludetheonlinearchiveinallmailitemsearch_1","displayName":"Enabled","description":null,"helpText":null}]},"37ff78d82c7349b7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingthatslidetitlesexist","displayName":"Stop checking that slide titles exist (User)","description":"This policy setting prevents the Accessibility Checker from verifying that every slide has a title placeholder.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that every slide has a title placeholder.\r\n\r\nIf you disable or do not configure this policy setting, slides will be checked for titles and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingthatslidetitlesexist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingthatslidetitlesexist_1","displayName":"Enabled","description":null,"helpText":null}]},"37edc478b01c69b2":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjrecentlyused","displayName":"Number of projects in the Recent Projects list (User)","description":"This policy setting specifies the number of entries displayed in the Recent Projects list that appears when users click Open on the File tab in Backstage view. \r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent Projects list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Projects list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","categoryName":"General options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjrecentlyused_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjrecentlyused_1","displayName":"Enabled","description":null,"helpText":null}]},"378d33b4c0738a79":{"id":"user_vendor_msft_policy_config_visio16v3~policy~l_microsoftvisio~l_visiooptions~l_proofing_l_disablevisiornrpane","displayName":"Turn off Research and Translation features in Visio (User)","description":"\r\n This policy setting controls whether the Research and Translation features appear in Visio.\r\n\r\n If you enable this policy setting, users won’t see the Research and Translation features in Visio.\r\n\r\n If you disable or don't configure this policy setting, users will see the Research and Translation features in Visio.\r\n\r\n Note: This policy setting only applies to subscription versions of Visio and Visio LTSC 2021.\r\n ","helpText":"","infoUrls":[],"categoryId":"8495c82c-f273-4bcc-8886-6751103a9c7b","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_visio16v3~policy~l_microsoftvisio~l_visiooptions~l_proofing_l_disablevisiornrpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v3~policy~l_microsoftvisio~l_visiooptions~l_proofing_l_disablevisiornrpane_1","displayName":"Enabled","description":null,"helpText":null}]},"37822e372ad35d13":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usecharacterunits","displayName":"Show measurements in width of characters (User)","description":"Checks/unchecks the corresponding UI option. This option may be hidden in Word until certain editing languages are enabled.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usecharacterunits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usecharacterunits_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/38.json b/public/intune-definitions/38.json new file mode 100644 index 000000000000..e05652f5ef64 --- /dev/null +++ b/public/intune-definitions/38.json @@ -0,0 +1 @@ +{"388147e148666a5c":{"id":"ade_accountsettings_adminaccountpasswordrotation","displayName":"Admin account password rotation period (days)","description":null,"helpText":null,"infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":null},"381fb92ef4d2b7b8":{"id":"com.apple.applicationaccess_allowenablingrestrictions","displayName":"Allow Enabling Restrictions","description":"If false, disables the “Enable Restrictions” option in the Restrictions UI in Settings. In iOS 12 or later, if false, disables the “Enable ScreenTime” option in the ScreenTime UI in Settings and disables ScreenTime if already enabled. Requires a supervised device. Available in iOS 8 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowenablingrestrictions_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowenablingrestrictions_true","displayName":"True","description":null,"helpText":null}]},"38fcc2adea5191ed":{"id":"com.apple.applicationaccess_ratingtvshowsus","displayName":"Rating TV Shows - United States","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsus_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsus_1","displayName":"TV-Y","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsus_2","displayName":"TV-Y7","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsus_3","displayName":"TV-G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsus_4","displayName":"TV-PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsus_5","displayName":"TV-14","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsus_6","displayName":"TB-MA","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsus_7","displayName":"All","description":null,"helpText":null}]},"38b736e9f9c65378":{"id":"com.apple.directoryservice.managed_adrestrictddns","displayName":"AD Restrict DDNS","description":"If true, allows authentication from any domain in the namespace. ","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"38761ac4bfafd0c4":{"id":"com.apple.managedclient.preferences_allowtrackingforurls","displayName":"Configure tracking prevention exceptions for specific sites","description":"Configure the list of URL patterns that are excluded from tracking prevention.\n\nIf you configure this policy, the list of configured URL patterns is excluded from tracking prevention.\n\nIf you don't configure this policy, the global default value from the \"Block tracking of users' web-browsing activity\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowtrackingforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"38a79d33629c9ea7":{"id":"com.apple.managedclient.preferences_favoritesbarenabled","displayName":"Enable favorites bar","description":"Enables or disables the favorites bar.\n\nIf you enable this policy, users will see the favorites bar.\n\nIf you disable this policy, users won't see the favorites bar.\n\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#favoritesbarenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_favoritesbarenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_favoritesbarenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"38e4e77473f70f8b":{"id":"com.apple.managedclient.preferences_promptonmultiplematchingcertificates","displayName":"Prompt the user to select a certificate when multiple certificates match","description":"This policy controls whether the user is prompted to select a client certificate when more than one certificate matches \"AutoSelectCertificateForUrls\".\nIf this policy is set to True, the user is prompted to select a client certificate whenever the auto-selection policy matches multiple certificates.\nIf this policy is set to False or not set, the user may only be prompted when no certificate matches the auto-selection.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#promptonmultiplematchingcertificates"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_promptonmultiplematchingcertificates_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_promptonmultiplematchingcertificates_true","displayName":"Enabled","description":null,"helpText":null}]},"381871002390f7f5":{"id":"com.apple.notificationsettings_notificationsettings_item_previewtype","displayName":"Preview Type","description":"The type previews for notifications. This key overrides the value at Settings>Notifications>Show Previews. Available in iOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":[{"id":"com.apple.notificationsettings_notificationsettings_item_previewtype_0","displayName":"Always: Previews will be shown when the device is locked and unlocked","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_previewtype_1","displayName":"When Unlocked: Previews will only be shown when the device is unlocked","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_previewtype_2","displayName":"Never: Previews will never be shown","description":null,"helpText":null}]},"386c41faee2f6178":{"id":"com.microsoft.edge.mamedgeappconfigsettings.additionalsearchboxenabled","displayName":"Enable additional search box in browser","description":"A search box is another text input field located next to the address bar in a web browser. It allows users to perform web searches directly from the browser interface.\n\nIf you enable or don't configure this policy, the search box is visible and available for use.\nUsers can toggle the search box in Microsoft Edge Settings page edge://settings/appearance#SearchBoxInToolbar.\n\nIf you disable this policy, search box won't be visible, and users have to use the address bar or navigate to a search engine to perform web searches.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.additionalsearchboxenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.additionalsearchboxenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"38648526a05be54e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.livecaptionsallowed","displayName":"Live captions allowed","description":"Allow users to turn the Live captions feature on or off.\n\nLive captions is an accessibility feature that converts speech from the audio that plays in Microsoft Edge into text and shows this text in a separate window. The entire process happens on the device and no audio or caption text ever leaves the device.\n\nNote: This feature isn't generally available. Clients that have the \"ExperimentationAndConfigurationServiceControl\" policy set to 'FullMode' receive the feature before broad availability. Broad availability is announced via Microsoft Edge release notes.\n\nIf you enable or don't configure this policy, users can turn on this feature or turn it off at edge://settings/accessibility.\n\nIf you disable this policy, users can't turn on this accessibility feature. If speech recognition files were downloaded previously, they will be deleted from the device in 30 days. We recommend avoiding this option unless it's needed in your environment.\n\nIf users choose to turn on Live captions, speech recognition files (approximately 100 megabytes) are downloaded to the device on first run and then periodically to improve performance and accuracy. These files will be deleted after 30 days.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.livecaptionsallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.livecaptionsallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"3839930e1eb6133d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments","description":"This feature lets hyperlink and address bar URL navigations target specific text on a web page, which will be scrolled to after the web page finishes loading.\n\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via a URL is enabled.\n\nIf you disable this policy, web page scrolling to specific text fragments via a URL is disabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.scrolltotextfragmentenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.scrolltotextfragmentenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"380c66ac41579e1d":{"id":"device_vendor_msft_defender_configuration_archivemaxdepth","displayName":"Archive Max Depth","description":"Specify the maximum folder depth to extract from archive files for scanning. If this configuration is off or not set, the default value (0) is applied, and all archives are extracted up to the deepest folder for scanning.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"388b13ab5b9c9524":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme","displayName":"Load a specific theme","description":"Specifies which theme file is applied to the computer the first time a user logs on.\n\nIf you enable this setting, the theme that you specify will be applied when a new user logs on for the first time. This policy does not prevent the user from changing the theme or any of the theme elements such as the desktop background, color, sounds, or screen saver after the first logon.\n\nIf you disable or do not configure this setting, the default theme will be applied at the first logon.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-settheme"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_1","displayName":"Enabled","description":null,"helpText":null}]},"389def23cb51afba":{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxyserver_kdcproxyserver_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"38692432d12b0cff":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_pv_qospriorityvalue","displayName":"Priority value","description":null,"helpText":"","infoUrls":[],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":null},"381394b61713819f":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowssoundrecorder","displayName":"Windows Sound Recorder","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowssoundrecorder_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowssoundrecorder_1","displayName":"True","description":null,"helpText":null}]},"38fcddfbb9f9c9ab":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling","displayName":"The IP handling policy of WebRTC (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default","displayName":"WebRTC will use all available interfaces when searching for the best path.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default_public_and_private_interfaces","displayName":"WebRTC will only use the interface connecting to the public Internet, but may connect using private IP addresses.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default_public_interface_only","displayName":"WebRTC will only use the interface connecting to the public Internet, and will not connect using private IP addresses.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_disable_non_proxied_udp","displayName":"WebRTC will use TCP on the public-facing interface, and will only use UDP if supported by a configured proxy.","description":null,"helpText":null}]},"3819ab6a8d97ccb5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode","displayName":"Sitelist parsing mode","description":"This policy controls how Google Chrome interprets sitelist/greylist policies for the Legacy Browser Support feature. It affects the following policies: BrowserSwitcherUrlList, BrowserSwitcherUrlGreylist, BrowserSwitcherUseIeSitelist, BrowserSwitcherExternalSitelistUrl, and BrowserSwitcherExternalGreylistUrl.\r\n\r\nIf 'Default' (0) or unset, URL matching is less strict. Rules that do not contain \"/\" look for a substring anywhere in the URL's hostname. Matching the path component of a URL is case-sensitive.\r\n\r\nIf 'IESiteListMode' (1), URL matching is more strict. Rules that do not contain \"/\" only match at the end of the hostname. They must also be at a domain name boundary. Matching the path component of a URL is case-insensitive. This is more compatible with Microsoft® Internet Explorer® and Microsoft® Edge®.\r\n\r\nFor example, with the rules \"example.com\" and \"acme.com/abc\":\r\n\r\n\"http://example.com/\", \"http://subdomain.example.com/\" and \"http://acme.com/abc\" match regardless of parsing mode.\r\n\r\n\"http://notexample.com/\", \"http://example.com.invalid.com/\", \"http://example.comabc/\" only match in 'Default' mode.\r\n\r\n\"http://acme.com/ABC\" only matches in 'IESiteListMode'.","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"3893a66b49627680":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist_extensioninstallblocklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"3896b76171ebfbb4":{"id":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment","displayName":"Allow Manual MDM Unenrollment","description":"Specifies whether to allow the user to delete the workplace account using the workplace control panel. If the device is Azure Active Directory joined and MDM enrolled (e. g. auto-enrolled), then disabling the MDM unenrollment has no effect. Note The MDM server can always remotely delete the account. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowmanualmdmunenrollment"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"38e52a1472591a0d":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds_profilesvolumewaittimemilliseconds","displayName":"Volume Wait Time (milliseconds) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"382df75d3c164ed3":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols","displayName":"Allow scripting of Internet Explorer WebBrowser controls","description":"This policy setting determines whether a page can control embedded WebBrowser controls via script.\n\nIf you enable this policy setting, script access to the WebBrowser control is allowed.\n\nIf you disable this policy setting, script access to the WebBrowser control is not allowed.\n\nIf you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptingofinternetexplorerwebbrowsercontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"380ee02d2985d8d5":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon only in Intranet zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonelogonoptions"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"38c8416894fdafc0":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled","displayName":"Use built-in DNS client","description":"Controls whether to use the built-in DNS client.\r\n\r\nThis does not affect which DNS servers are used; just the software stack which is used to communicate with them. For example if the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It is however possible that the built-in DNS client will address servers in different ways by using more modern DNS-related protocols such as DNS-over-TLS.\r\n\r\nIf you enable this policy, the built-in DNS client is used, if it's available.\r\n\r\nIf you disable this policy, the client is never used.\r\n\r\nIf you don't configure this policy, the built-in DNS client is enabled by default on MacOS, and users can change whether to use the built-in DNS client by editing edge://flags or by specifying a command-line flag.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"385c8ae13aa7e0a0":{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled","displayName":"Enable Read Aloud feature in Microsoft Edge","description":"Enables the Read Aloud feature within Microsoft Edge.\r\nUsing this feature, users can listen to the content on the web page. This enables users to multi-task or improve their reading comprehension by hearing content at their own pace.\r\n\r\nIf you enable this policy or don't configure it, the Read Aloud option shows up in the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.\r\nIf you disable this policy, users can't access the Read Aloud feature from the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"384e5252fd582f2c":{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile","displayName":"Switch intranet sites to a work profile","description":"Allows Microsoft Edge to switch to the appropriate profile when Microsoft Edge detects that a URL is the intranet.\r\n\r\nIf you enable or don't configure this policy, navigations to intranet URLs will switch to the most recently used work profile if one exists.\r\n\r\nIf you disable this policy, navigations to intranet URLs will remain in the current browser profile.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"3847b657ee2bc011":{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades","description":"As of Microsoft Edge version 120, Microsoft Edge tries to upgrade HTTP navigations to HTTPS whenever possible to improve security. Navigations to captive portals, IP addresses, and non-unique hostnames are excluded from automatic upgrades.\r\n\r\nIf this policy is enabled or not configured, automatic HTTPS upgrades are turned on by default.\r\n\r\nIf this policy is disabled, Microsoft Edge won't attempt to upgrade HTTP connections to HTTPS.\r\n\r\nTo exempt specific hostnames or hostname patterns from being upgraded, use the HttpAllowlist policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"382ed86e2d82f217":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended","displayName":"Set the background tab inactivity timeout for Sleeping Tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if Sleeping Tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is enabled or is not configured and the user has enabled the Sleeping Tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"38cbc9814f6b12c8":{"id":"device_vendor_msft_policy_config_mixedreality_headtrackingmode","displayName":"Head Tracking Mode","description":"This policy configures behavior of HUP to determine, which algorithm to use for head tracking. It requires a reboot for the policy to take effect.","helpText":"","infoUrls":[],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":null},"38403a28ae7a4b99":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_spdesignexe163","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_spdesignexe163_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_spdesignexe163_1","displayName":"True","description":null,"helpText":null}]},"381f7d0333d0cfed":{"id":"device_vendor_msft_policy_config_power_unattendedsleeptimeoutpluggedin","displayName":"Unattended Sleep Timeout Plugged In","description":"This policy setting allows you to specify the period of inactivity before Windows transitions to sleep automatically when a user is not present at the computer. If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows automatically transitions to sleep when left unattended. If you specify 0 seconds, Windows does not automatically transition to sleep. If you disable or do not configure this policy setting, users control this setting. If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#unattendedsleeptimeoutpluggedin"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":null},"38d8644fa10e12e4":{"id":"device_vendor_msft_policy_config_start_hidefrequentlyusedapps","displayName":"Hide Frequently Used Apps","description":"Enabling this policy hides the most used apps from appearing on the start menu and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidefrequentlyusedapps"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidefrequentlyusedapps_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidefrequentlyusedapps_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"3856625070b444a0":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions","displayName":"Cloud Policy Details","description":"\n This setting enables and configures the device-based tenant restrictions feature for Azure Active Directory.\n\n When you enable this setting, compliant applications will be prevented from accessing disallowed tenants, according to a policy set in your Azure AD tenant.\n\n Note: Creation of a policy in your home tenant is required, and additional security measures for managed devices are recommended for best protection. Refer to Azure AD Tenant Restrictions for more details.\n\n https://go.microsoft.com/fwlink/?linkid=2148762\n\n Before enabling firewall protection, ensure that an App Control for Business policy that correctly tags applications has been applied to the target devices. Enabling firewall protection without a corresponding App Control for Business policy will prevent all applications from reaching Microsoft endpoints. This firewall setting is not supported on all versions of Windows - see the following link for more information.\n For details about setting up WDAC with tenant restrictions, see https://go.microsoft.com/fwlink/?linkid=2155230","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-tenantrestrictions#tenantrestrictions-configuretenantrestrictions"],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":[{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"38bad99420c79d97":{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon","displayName":"Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot","description":"This policy setting controls the configuration under which an automatic restart and sign on and lock occurs after a restart or cold boot. If you chose “Disabled” in the “Sign-in and lock last interactive user automatically after a restart” policy, then automatic sign on will not occur and this policy does not need to be configured.\n\nIf you enable this policy setting, you can choose one of the following two options:\n\n1. “Enabled if BitLocker is on and not suspended” specifies that automatic sign on and lock will only occur if BitLocker is active and not suspended during the reboot or shutdown. Personal data can be accessed on the device’s hard drive at this time if BitLocker is not on or suspended during an update. BitLocker suspension temporarily removes protection for system components and data but may be needed in certain circumstances to successfully update boot-critical components.\n BitLocker is suspended during updates if:\n - The device doesn’t have TPM 2.0 and PCR7, or\n - The device doesn’t use a TPM-only protector\n2. “Always Enabled” specifies that automatic sign on will happen even if BitLocker is off or suspended during reboot or shutdown. When BitLocker is not enabled, personal data is accessible on the hard drive. Automatic restart and sign on should only be run under this condition if you are confident that the configured device is in a secure physical location.\n\nIf you disable or don’t configure this setting, automatic sign on will default to the “Enabled if BitLocker is on and not suspended” behavior.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-configautomaticrestartsignon"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_1","displayName":"Enabled","description":null,"helpText":null}]},"3859c176279f49be":{"id":"settings_item_wallpaper","displayName":"Wallpaper","description":"A dictionary that contains wallpaper settings. This setting doesn't support user enrollment. Available in iOS 8 and later. Starting in iOS 16 and iPadOS 17, when setting the wallpaper for the first time, both locations update. After that, you can set either location separately.","helpText":null,"infoUrls":[],"categoryId":"ef7328b1-c666-40fe-a933-57b14bc77dd3","categoryName":"Wallpaper","options":null},"389af8052a8be1b5":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems","displayName":"Disable commands (User)","description":"This policy setting allows you to disable specific command bar buttons and menu items in the specified applications. \r\n \r\nIf you enable this policy setting you can disable specific command bar buttons and menu items in the user interface for the selected application. The predefined list of command bar buttons and menu items you can disable becomes available to you when you enable this policy setting. \r\n \r\nIf you disable or do not configure this policy setting, the predefined list of command bar buttons and menu items are enabled for the application.","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},"3819bd5422f5a896":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized","displayName":"Start File Explorer with ribbon minimized (User)","description":"This policy setting allows you to specify whether the ribbon appears minimized or in full when new File Explorer windows are opened. If you enable this policy setting, you can set how the ribbon appears the first time users open File Explorer and whenever they open new windows. If you disable or do not configure this policy setting, users can choose how the ribbon appears when they open new windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-explorerribbonstartsminimized"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_1","displayName":"Enabled","description":null,"helpText":null}]},"3845ee004448ac55":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_donotuseproxylocal","displayName":"Do not use proxy server for addresses beginning with (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"387eb96b1e202bae":{"id":"user_vendor_msft_policy_config_browser_lockdownfavorites","displayName":"Lockdown Favorites (User)","description":"This policy setting lets you decide whether employees can add, import, sort, or edit the Favorites list on Microsoft Edge. If you enable this setting, employees won't be able to add, import, or change anything in the Favorites list. Also as part of this, Save a Favorite, Import settings, and the context menu items (such as, Create a new folder) are all turned off. Important Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. If you disable or don't configure this setting (default), employees can add, import and make changes to the Favorites list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#lockdownfavorites"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_lockdownfavorites_0","displayName":"Disabled","description":"Allowed/not locked down. Users can add, import, and make changes to the favorites.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_lockdownfavorites_1","displayName":"Enabled","description":"Prevented/locked down.","helpText":null}]},"38a20f0e8ca45cb3":{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride","displayName":"Prevent Smart Screen Prompt Override (User)","description":"Don't allow Windows Defender SmartScreen warning overrides","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventsmartscreenpromptoverride"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride_0","displayName":"Disabled","description":"Allowed/turned off. Users can ignore the warning and continue to the site.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},"381a511be736aed6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_allowed","displayName":"Allow users to enable HTTPS-Only Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_disallowed","displayName":"Do not allow users to enable HTTPS-Only Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode (not supported yet)","description":null,"helpText":null}]},"38815e63e278faab":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode","displayName":"Print PostScript Mode (User)","description":"Controls how Google Chrome prints on Microsoft® Windows®.\r\n\r\nWhen printing to a PostScript printer on Microsoft® Windows® different PostScript generation methods can affect printing performance.\r\n\r\nWhen this policy is set to Default, Google Chrome will use a set of default options when generating PostScript. For text in particular, text will always be rendered using Type 3 fonts.\r\n\r\nWhen this policy is set to Type42, Google Chrome will render text using Type 42 fonts if possible. This should increase printing speed for some PostScript printers.\r\n\r\nWhen this policy is not set, Google Chrome will be in Default mode.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_1","displayName":"Enabled","description":null,"helpText":null}]},"387d7498df0a7f9f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates","displayName":"Allow insecure algorithms in integrity checks on extension updates and installs (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"38a94d2f2ebe0d34":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_mediacachesize","displayName":"Set media disk cache size: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"38117baa5781d1bd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings","displayName":"Managed toolbar avatar label setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_0","displayName":"Always display management label","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_1","displayName":"Display management labels for 30s","description":null,"helpText":null}]},"384eb6acee8d46e5":{"id":"user_vendor_msft_policy_config_education_defaultprintername","displayName":"Default Printer Name (User)","description":"This policy sets user's default printer","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Education#defaultprintername"],"categoryId":"5e692f3e-1911-43b0-9192-64c2e65b7c10","categoryName":"Education","options":null},"385c13d231c3b5e5":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation","displayName":"Alternate startup file location (User)","description":"This policy setting allows you to specify the folder where files will be opened by Excel at startup.\r\n\r\nIf you enable this policy setting, you may specify the folder where files will be opened by Excel at startup. Files will be opened from this folder in addition to the XLSTART folder in the Microsoft Office installation directory (default C:\\Program Files\\Microsoft Office\\Office14\\XLSTART).\r\n\r\nIf you disable or do not configure this policy setting, files will only be opened from the XLSTART folder.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"386180a24c8892f4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_descriptioncolon43","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"38cd97bd898d201d":{"id":"user_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar","displayName":"Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar (User)","description":"This policy setting allows Internet Explorer to provide enhanced suggestions as the user types in the Address bar. To provide enhanced suggestions, the user's keystrokes are sent to Microsoft through Microsoft services.\n\nIf you enable this policy setting, users receive enhanced suggestions while typing in the Address bar. In addition, users won't be able to change the Suggestions setting on the Settings charm.\n\nIf you disable this policy setting, users won't receive enhanced suggestions while typing in the Address bar. In addition, users won't be able to change the Suggestions setting on the Settings charm.\n\nIf you don't configure this policy setting, users can change the Suggestions setting on the Settings charm.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenhancedsuggestionsinaddressbar"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},"38857f04e26619a6":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads","displayName":"Allow file downloads (User)","description":"This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.\n\nIf you enable this policy setting, files can be downloaded from the zone.\n\nIf you disable this policy setting, files are prevented from being downloaded from the zone.\n\n If you do not configure this policy setting, files are prevented from being downloaded from the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowfiledownloads"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"3813b71e4e07fc42":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":null},"383aec71d2cb2bf6":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls","displayName":"Sites that can access video capture devices without requesting permission (User)","description":"Specify websites, based on URL patterns, that can use video capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to video capture devices. Note, however, that the pattern \"*\", which matches any URL, is not supported by this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com/\r\nhttps://[*.]contoso.edu/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"38acfdc4ec4a7b19":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled","displayName":"Web Select Enabled (User)","description":"Web select lets users select and copy web content while preserving its formatting when pasted in most cases. It also allows more targeted selection on some web elements, such as copying a single column in a table.\r\n\r\nIf you enable or don't configure this policy, Web select is available through the right click context menu and the CTRL+SHIFT+X keyboard shortcut.\r\n\r\nIf you disable this policy, Web select won't be available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"383976cdcc5c7e5a":{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton","displayName":"Pin browser essentials toolbar button (User)","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\r\n\r\nWhen the button is pinned, it will always appear on the toolbar.\r\n\r\nWhen the button isn't pinned, it will only appear when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\r\n\r\nIf you enable or don't configure this policy, the Browser essentials button will be pinned on the toolbar.\r\n\r\nIf you disable this policy, the Browser essentials button won't be pinned on the toolbar.\r\n\r\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"38f63382821ca83f":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls_automaticfullscreenblockedforurlsdesc","displayName":"Block automatic full screen on specified sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"38faf986fe515bae":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode","displayName":"Control the mode of DNS-over-HTTPS (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_off","displayName":"Disable DNS-over-HTTPS","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_automatic","displayName":"Enable DNS-over-HTTPS with insecure fallback","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_secure","displayName":"Enable DNS-over-HTTPS without insecure fallback","description":null,"helpText":null}]},"389bda5452bfabb2":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed","displayName":"Allow launching of local files in Internet Explorer mode (User)","description":"This policy controls the availability of the --ie-mode-file-url command line argument which is used to launch Microsoft Edge with a local file specified on the command line into Internet Explorer mode.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nIf you set this policy to true, or don't configure it, the user is allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\r\n\r\nIf you set this policy to false, the user isn't allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"387a9474655c6b28":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled","displayName":"Allow intranet zone file URL links from Microsoft Edge to open in Windows File Explorer (User)","description":"This setting allows file URL links to intranet zone files from intranet zone HTTPS websites to open Windows File Explorer for that file or directory.\r\n\r\nIf you enable this policy, intranet zone file URL links originating from intranet zone HTTPS pages will open Windows File Explorer to the parent directory of the file and select the file. Intranet zone directory URL links originating from intranet zone HTTPS pages will open Windows File Explorer to the directory with no items in the directory selected.\r\n\r\nIf you disable or don't configure this policy, file URL links will not open.\r\n\r\nMicrosoft Edge uses the definition of intranet zone as configured for Internet Explorer. Note that https://localhost/ is specifically blocked as an exception of allowed intranet zone host, while loopback addresses (127.0.0.*, [::1]) are considered internet zone by default.\r\n\r\nUsers may opt out of prompts on a per-protocol/per-site basis unless the 'ExternalProtocolDialogShowAlwaysOpenCheckbox' (Show an \"Always open\" checkbox in external protocol dialog) policy is disabled.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"381471a2fb06d7ea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffexcel_l_autosavedefaultsettingenum","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffexcel_l_autosavedefaultsettingenum_0","displayName":"Use AutoSave Default Setting","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffexcel_l_autosavedefaultsettingenum_1","displayName":"AutoSave Is On By Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffexcel_l_autosavedefaultsettingenum_2","displayName":"AutoSave Is Off By Default","description":null,"helpText":null}]},"386407584706863a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastserviceserverinfo3","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"380268c294d3ad69":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfileentriesnumber","displayName":"Log File Entries Number (User)","description":"Specify the number of log entries to be removed from the log file when the maximum size limit is exceeded. (1-1000)","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfileentriesnumber_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfileentriesnumber_1","displayName":"Enabled","description":null,"helpText":null}]},"3817d8aa82cf18cd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishpanama","displayName":"Spanish (Panama) (User)","description":"Enables the editing language Spanish (Panama)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishpanama_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishpanama_1","displayName":"Enabled","description":null,"helpText":null}]},"38cb501c345f2ed5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tamazightarabicmorocco","displayName":"Tamazight (Arabic, Morocco) (User)","description":"Enables the editing language \"Tamazight (Arabic, Morocco)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tamazightarabicmorocco_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tamazightarabicmorocco_1","displayName":"Enabled","description":null,"helpText":null}]},"38f2ae829a9b9880":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_increasevisibilityofaccessibilitycheckerviolations_l_increasevisibilityofaccessibilitycheckerviolationsdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_increasevisibilityofaccessibilitycheckerviolations_l_increasevisibilityofaccessibilitycheckerviolationsdropid_0","displayName":"Accessibility violations do not change loudness (default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_increasevisibilityofaccessibilitycheckerviolations_l_increasevisibilityofaccessibilitycheckerviolationsdropid_1","displayName":"Accessibility errors cause slab to be loud","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_increasevisibilityofaccessibilitycheckerviolations_l_increasevisibilityofaccessibilitycheckerviolationsdropid_2","displayName":"Accessibility errors or warnings cause slab to be loud","description":null,"helpText":null}]},"38b77e6c424ac3c0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey08_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"3837e8fae0584893":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_l_descriptioncolon248","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"38f8813d027a0181":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlyshort","displayName":"Reduce the end time of short appointments and meetings by a specified number of minutes (User)","description":"\r\n This policy setting allows you to specify how many minutes to reduce the end time of a short appointment or meeting by when a user creates an appointment or meeting. A short appointment or meeting is one that lasts for less than one hour.\r\n\r\n If you enable this policy setting, you specify the number of minutes to reduce the end time of a short appointment or meeting by when a user creates an appointment or meeting. The user can’t change this value by going to File > Options > Calendar.\r\n\r\n Note: You should also enable the “End appointments and meetings early” policy setting.\r\n\r\n If you disable or don’t configure this policy setting, the default value of 5 minutes is used or whatever the user specifies by going to File > Options > Calendar.\r\n\r\n Note: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlyshort_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlyshort_1","displayName":"Enabled","description":null,"helpText":null}]},"38413f933af1179f":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver","displayName":"Authentication with Exchange Server (User) (Deprecated)","description":"This policy setting controls which authentication method Outlook uses to authenticate with Microsoft Exchange Server. Note - Exchange Server supports the Kerberos authentication protocol and NTLM for authentication. The Kerberos protocol is the more secure authentication method and is supported on Windows 2000 Server and later versions. NTLM authentication is supported in pre-Windows 2000 environments.\r\n \r\nIf you enable this policy setting, you can choose from three different options for controlling how Outlook authenticates with Microsoft Exchange Server:\r\n\r\n- Kerberos/NTLM password authentication. Outlook attempts to authenticate using the Kerberos authentication protocol. If this attempt fails, Outlook attempts to authenticate using NTLM. This option is the default configuration.\r\n\r\n- Kerberos password authentication. Outlook attempts to authenticate using the Kerberos protocol only.\r\n\r\n- NTLM password authentication. Outlook attempts to authenticate using NTLM only.\r\n\r\nIf you disable or do not configure this policy setting, Outlook will attempt to authenticate using the Kerberos authentication protocol. If it cannot (because no Windows 2000 or later domain controllers are available), it will authenticate using NTLM.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_1","displayName":"Enabled","description":null,"helpText":null}]},"388d5bc394141b78":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disableincrementaldownload","displayName":"Wait to show users a cloud-based presentation until all content is downloaded (User)","description":"\r\nThis policy setting allows you to control whether PowerPoint waits until all content is downloaded before showing a presentation to the user. This policy setting applies to presentations that are opened from a cloud-based location, such as OneDrive Personal, OneDrive for Business, or SharePoint Online.\r\n\r\nBy default, when the user opens a cloud-based presentation in PowerPoint, the user can view the presentation while other content, such as images or video, continues to download. But, some functionality, such as editing and presenting, is limited or not available until the entire contents of the presentation are downloaded.\r\n\r\nIf you enable this policy setting, PowerPoint will wait, when opening a cloud-based presentation, until the entire contents of the presentation are downloaded before showing the presentation to the user.\r\n\r\nYou may want to enable this policy setting if you have add-ins or automated processes that rely on the entire contents of the presentation being available and fully editable as soon as the presentation is shown.\r\n\r\nIf you disable or don't configure this setting, PowerPoint opens cloud-based files more quickly, so the user can start viewing the presentation while the other content downloads.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disableincrementaldownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disableincrementaldownload_1","displayName":"Enabled","description":null,"helpText":null}]},"3848607a7ed225a7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocuments","displayName":"Turn off trusted documents (User)","description":"This policy setting allows you to turn off the trusted documents feature. The trusted documents feature allows users to always enable active content in documents such as macros, ActiveX controls, data connections, etc. so that they are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.\r\n\r\nIf you enable this policy setting, you will turn off the trusted documents feature. Users will receive a security prompt every time a document containing active content is opened.\r\n\r\nIf you disable or do not configure this policy setting, documents will be trusted when users enable content for a document, and users will not receive a security prompt.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"382ff7618a8623a8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_datecolon77","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"38ba7209ea8ad106":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperday","displayName":"Hours per day (User)","description":"Defines the number of hours that you want Project to assign to a task when the user enters a duration of one day.\r\n\r\nIf you enable this setting, day-long tasks will be assigned the number of hours that you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperday_1","displayName":"Enabled","description":null,"helpText":null}]},"388322be4bce7c68":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15_l_datecolon65","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"3863fb6105d35dcd":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc12_l_datecolon53","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"3826d0e11b5be1fd":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipheralgorithm","displayName":"Set CNG cipher algorithm (User)","description":"This policy setting allows you to configure the CNG cipher algorithm that is used.\r\n\r\nIf you enable this policy setting, then the cipher provided will be used if it is a supported algorithm.\r\n\r\nIf you disable or do not configure this policy setting, AES will be used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipheralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipheralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/39.json b/public/intune-definitions/39.json new file mode 100644 index 000000000000..99cec51b123c --- /dev/null +++ b/public/intune-definitions/39.json @@ -0,0 +1 @@ +{"39c2477eca5bca24":{"id":"com.apple.managedclient.preferences_disablesignatures","displayName":"Disable email signatures","description":"Prevent users from adding, removing, and editing signatures","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-signatures"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_disablesignatures_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablesignatures_true","displayName":"True","description":null,"helpText":null}]},"397de352fd743a26":{"id":"com.apple.managedclient.preferences_intensivewakeupthrottlingenabled","displayName":"Control the IntensiveWakeUpThrottling feature","description":"When enabled the IntensiveWakeUpThrottling feature causes Javascript timers in background tabs to be aggressively throttled and coalesced, running no more than once per minute after a page has been backgrounded for 5 minutes or more.\n\nThis is a web standards compliant feature, but it may break functionality on some websites by causing certain actions to be delayed by up to a minute. However, it results in significant CPU and battery savings when enabled. See https://bit.ly/30b1XR4 for more details.\n\nIf you enable this policy, the feature will be force enabled, and users will not be able to override this setting.\nIf you disable this policy, the feature will be force disabled, and users will not be able to override this setting.\nIf you don't configure this policy, the feature will be controlled by its own internal logic. Users can manually configure this setting.\n\nNote that the policy is applied per renderer process, with the most recent value of the policy setting in force when a renderer process starts. A full restart is required to ensure that all the loaded tabs receive a consistent policy setting. It is harmless for processes to be running with different values of this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#intensivewakeupthrottlingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_intensivewakeupthrottlingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_intensivewakeupthrottlingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"39bc0ba5cb264479":{"id":"com.apple.mobiledevice.passwordpolicy_allowsimple","displayName":"Allow Simple Passcode","description":"If true, allows a simple passcode. A simple passcode contains repeated characters, or increasing or decreasing characters (such as 123 or CBA). Setting this value to false has the same result as setting Min Complex Characters to 1.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":[{"id":"com.apple.mobiledevice.passwordpolicy_allowsimple_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mobiledevice.passwordpolicy_allowsimple_true","displayName":"True","description":null,"helpText":null}]},"392f54ee419b00a6":{"id":"com.apple.security.fderecoverykeyescrow_com.apple.security.fderecoverykeyescrow","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"bd5533e1-f1ee-4994-8a79-cffe02b12d5c","categoryName":"FileVault Recovery Key Escrow","options":null},"391370377c7699d4":{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"39bbd81250751394":{"id":"com.apple.webcontent-filter_filtergrade","displayName":"Filter Grade","description":"This value is for deriving the relative order of content filters. Filters with a grade of firewall see network traffic before filters with a grade of inspector. The system doesn’t define the order of filters within a grade.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_filtergrade_0","displayName":"firewall","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_filtergrade_1","displayName":"inspector","description":null,"helpText":null}]},"3970d8bc822bb88f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsofteditorproofingenabled","displayName":"Spell checking provided by Microsoft Editor","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages.\n\nIf you enable or don't configure this policy, Microsoft Editor spell check can be used for eligible text fields.\n\nIf you disable this policy, spell check can only be provided by local engines that use platform or Hunspell services. The results from these engines might be less informative than the results Microsoft Editor can provide.\n\nIf the \"SpellcheckEnabled\" policy is set to disabled, or the user disables spell checking in the settings page, this policy will have no effect.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsofteditorproofingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsofteditorproofingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"397ec02d7bcbf727":{"id":"com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled","displayName":"Allow users to access the Outlook menu (Obsolete)","description":"This policy doesn't work because the Outlook menu is now contained within the Edge Sidebar and can be managed using the \"HubsSidebarEnabled\" policy.\n\nThis policy is used to manage access to the Outlook menu from Microsoft Edge.\n\nIf you enable or don't configure this policy, users can access the Outlook menu.\nIf you disable this policy, users can't access the Outlook menu.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"39c369da0ae775ff":{"id":"com.microsoft.edge.mamedgeappconfigsettings.personalizationreportingenabled","displayName":"Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft","description":"This policy prevents Microsoft from collecting a user's Microsoft Edge browsing history, favorites and collections, usage, and other browsing data to be used for personalizing advertising, search, news, Microsoft Edge, and other Microsoft services.\n\nThis setting isn't available for child accounts or enterprise accounts.\n\nIf you disable this policy, users can't change or override the setting. If this policy is enabled or not configured, Microsoft Edge defaults to the user's preference.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.personalizationreportingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.personalizationreportingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3962cbcd53c8e3be":{"id":"device_vendor_msft_defender_configuration_enablefilehashcomputation","displayName":"Enable File Hash Computation","description":"Enables or disables file hash computation feature. When this feature is enabled Windows defender will compute hashes for files it scans.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_enablefilehashcomputation_0","displayName":"Disable","description":"Disable","helpText":null},{"id":"device_vendor_msft_defender_configuration_enablefilehashcomputation_1","displayName":"Enable","description":"Enable","helpText":null}]},"39a72cccea5799bc":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_personalcolors_personalcolors_background","displayName":"Start background color:","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"391dbe3d88779908":{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_launcher","displayName":"Windows To Go Default Startup Options","description":"\r\n\r\nThis policy setting controls whether the PC will boot to Windows To Go if a USB device containing a Windows To Go workspace is connected, and controls whether users can make changes using the Windows To Go Startup Options Control Panel item.\r\n\r\nIf you enable this setting, booting to Windows To Go when a USB device is connected will be enabled, and users will not be able to make changes using the Windows To Go Startup Options Control Panel item.\r\n\r\nIf you disable this setting, booting to Windows To Go when a USB device is connected will not be enabled unless a user configures the option manually in the BIOS or other boot order configuration.\r\n\r\nIf you do not configure this setting, users who are members of the Administrators group can make changes using the Windows To Go Startup Options Control Panel item.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-externalboot#admx-externalboot-portableoperatingsystem-launcher"],"categoryId":"68a3b82d-d1f4-422d-bfee-2168ec260ad7","categoryName":"Portable Operating System","options":[{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_launcher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_launcher_1","displayName":"Enabled","description":null,"helpText":null}]},"3912de37378e28f8":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disablebackgroundpolicy","displayName":"Turn off background refresh of Group Policy","description":"This policy setting prevents Group Policy from being updated while the computer is in use. This policy setting applies to Group Policy for computers, users, and domain controllers.\r\n\r\nIf you enable this policy setting, the system waits until the current user logs off the system before updating the computer and user settings.\r\n\r\nIf you disable or do not configure this policy setting, updates can be applied while users are working. The frequency of updates is determined by the \"Set Group Policy refresh interval for computers\" and \"Set Group Policy refresh interval for users\" policy settings.\r\n\r\nNote: If you make changes to this policy setting, you must restart your computer for it to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-disablebackgroundpolicy"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disablebackgroundpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disablebackgroundpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"396b90bf664948a3":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxsize_scan_archivemaxsize","displayName":"Specify the maximum size of archive files to be scanned","description":null,"helpText":"","infoUrls":[],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":null},"3916df127fa620e5":{"id":"device_vendor_msft_policy_config_admx_sam_samngckeyrocavalidation","displayName":"Configure validation of ROCA-vulnerable WHfB keys during authentication","description":"This policy setting allows you to configure how domain controllers handle Windows Hello for Business (WHfB) keys that are vulnerable to the \"Return of Coppersmith's attack\" (ROCA) vulnerability.\n\nFor more information on the ROCA vulnerability, please see:\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15361\n\nhttps://en.wikipedia.org/wiki/ROCA_vulnerability\n\nIf you enable this policy setting the following options are supported:\n\nIgnore: during authentication the domain controller will not probe any WHfB keys for the ROCA vulnerability.\n\nAudit: during authentication the domain controller will emit audit events for WHfB keys that are subject to the ROCA vulnerability (authentications will still succeed).\n\nBlock: during authentication the domain controller will block the use of WHfB keys that are subject to the ROCA vulnerability (authentications will fail).\n\nThis setting only takes effect on domain controllers.\n\nIf not configured, domain controllers will default to using their local configuration. The default local configuration is Audit.\n\nA reboot is not required for changes to this setting to take effect.\n\nNote: to avoid unexpected disruptions this setting should not be set to Block until appropriate mitigations have been performed, for example patching of vulnerable TPMs.\n\nMore information is available at https://go.microsoft.com/fwlink/?linkid=2116430.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sam#admx-sam-samngckeyrocavalidation"],"categoryId":"03a966f7-8f8e-4ecb-aab3-055fe907f5ab","categoryName":"Security Account Manager","options":[{"id":"device_vendor_msft_policy_config_admx_sam_samngckeyrocavalidation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sam_samngckeyrocavalidation_1","displayName":"Enabled","description":null,"helpText":null}]},"393a502167d329a8":{"id":"device_vendor_msft_policy_config_admx_sdiagschd_scheduleddiagnosticsexecutionpolicy","displayName":"Configure Scheduled Maintenance Behavior","description":"Determines whether scheduled diagnostics will run to proactively detect and resolve system problems.\r\n\r\nIf you enable this policy setting, you must choose an execution level. If you choose detection and troubleshooting only, Windows will periodically detect and troubleshoot problems. The user will be notified of the problem for interactive resolution. \r\n\r\nIf you choose detection, troubleshooting and resolution, Windows will resolve some of these problems silently without requiring user input.\r\n\r\nIf you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve problems on a scheduled basis.\r\n\r\nIf you do not configure this policy setting, local troubleshooting preferences will take precedence, as configured in the control panel. If no local troubleshooting preference is configured, scheduled diagnostics are enabled for detection, troubleshooting and resolution by default.\r\n\r\nNo reboots or service restarts are required for this policy to take effect: changes take effect immediately.\r\n\r\nThis policy setting will only take effect when the Task Scheduler service is in the running state. When the service is stopped or disabled, scheduled diagnostics will not be executed. The Task Scheduler service can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sdiagschd#admx-sdiagschd-scheduleddiagnosticsexecutionpolicy"],"categoryId":"fe3cb879-8869-4163-91d7-e432abd75da8","categoryName":"Scheduled Maintenance","options":[{"id":"device_vendor_msft_policy_config_admx_sdiagschd_scheduleddiagnosticsexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sdiagschd_scheduleddiagnosticsexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"3959b4ed43274cff":{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name","displayName":"Set 6to4 Relay Name","description":"This policy setting allows you to specify a 6to4 relay name for a 6to4 host. A 6to4 relay is used as a default gateway for IPv6 network traffic sent by the 6to4 host. The 6to4 relay name setting has no effect if 6to4 connectivity is not available on the host.\r\n\r\nIf you enable this policy setting, you can specify a relay name for a 6to4 host.\r\n\r\nIf you disable or do not configure this policy setting, the local host setting is used, and you cannot specify a relay name for a 6to4 host.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-6to4-router-name"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name_1","displayName":"Enabled","description":null,"helpText":null}]},"39f758b819283cde":{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpdllcachedir","displayName":"Specify Windows File Protection cache location (Windows Insiders only)","description":"This policy setting specifies an alternate location for the Windows File Protection cache.\r\n\r\nIf you enable this policy setting, enter the fully qualified local path to the new location in the \"Cache file path\" box.\r\n\r\nIf you disable this setting or do not configure it, the Windows File Protection cache is located in the %Systemroot%\\System32\\Dllcache directory.\r\n\r\nNote: Do not put the cache on a network shared directory.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsfileprotection#admx-windowsfileprotection-wfpdllcachedir"],"categoryId":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","categoryName":"Windows File Protection","options":[{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpdllcachedir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpdllcachedir_1","displayName":"Enabled","description":null,"helpText":null}]},"39a465e5bb8716c6":{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_preventwmpdesktopshortcut","displayName":"Prevent Desktop Shortcut Creation","description":"This policy setting allows you to prevent a shortcut icon for the Player from being added to the user's desktop.\r\n\r\nIf you enable this policy setting, users cannot add the Player shortcut icon to their desktops.\r\n\r\nIf you disable or do not configure this policy setting, users can choose whether to add the Player shortcut icon to their desktops.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventwmpdesktopshortcut"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_preventwmpdesktopshortcut_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_preventwmpdesktopshortcut_1","displayName":"Enabled","description":null,"helpText":null}]},"3991cc2998e1ad2c":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_screensketch","displayName":"Snipping Tool","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_screensketch_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_screensketch_1","displayName":"True","description":null,"helpText":null}]},"39829ec6fa4500d8":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingsharedcontentstoremode","displayName":"Shared Content Store (SCS) mode","description":"Specifies that streamed package contents will be not be saved to the local hard disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingsharedcontentstoremode"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingsharedcontentstoremode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingsharedcontentstoremode_1","displayName":"Enabled","description":null,"helpText":null}]},"3970805669974059":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions","displayName":"Enable network prediction","description":"This policy controls network prediction in Google Chrome. It controls DNS prefetching, TCP, and SSL preconnection and prerendering of webpages.\r\n\r\nIf you set the policy, users can't change it. Leaving it unset turns on network prediction, but the user can change it.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"39772c13f46054fa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_defaultsearchprovideralternateurlsdesc","displayName":"List of alternate URLs for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"39bf6e1856fa25dd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled","displayName":"Enable printing","description":"Setting the policy to Enabled or leaving it unset lets users print in Google Chrome, and users can't change this setting.\r\n\r\nSetting the policy to Disabled means users can't print from Google Chrome. Printing is off in the three dots menu, extensions, and JavaScript applications.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"39588f4ee3cdff0f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_1","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_2","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},"39e2a0c7da2caee9":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess","displayName":"AD Computer Group Process","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the AD Computer Group Processing.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\AdsComputerGroup\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"391ea5f92769ccad":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowscriptlets"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"399375c0461a9592":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode","displayName":"Secure mode and Certificate-based Digital Signature validation in native PDF reader","description":"The policy enables Digital Signature validation for PDF files in a secure environment, which shows the correct validation status of the signatures.\r\n\r\nIf you enable this policy, PDF files with Certificate-based digital signatures are opened with an option to view and verify the validity of the signatures with high security.\r\n\r\nIf you disable or don't configure this policy, the capability to view and verify the signature will not be available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_1","displayName":"Enabled","description":null,"helpText":null}]},"39bfa4364fa1ac93":{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled","displayName":"Control the User-Agent Client Hints GREASE Update feature","description":"The User-Agent GREASE specification recommends the inclusion of additional GREASE characters beyond the current semicolon and space, and recommends that the arbitrary version number be varied over time.\r\n\r\nWhen enabled, the User-Agent Client Hints GREASE Update feature aligns the User-Agent GREASE algorithm with the latest version from the specification. The updated specification may break some websites that restrict the characters that requests may contain. For more information, see the following specification: https://wicg.github.io/ua-client-hints/#grease\r\n\r\nIf this policy is enabled or not configured, the User-Agent GREASE algorithm from the specification will be used. If the policy is disabled, the prior User-Agent GREASE algorithm will be used.\r\n\r\nThis policy is a temporary measure and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"39e9a5bfeaa3221b":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled","displayName":"Search in Sidebar enabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_0","displayName":"Enable search in sidebar","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_1","displayName":"Disable search in sidebar for Kids Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_2","displayName":"Disable search in sidebar","description":null,"helpText":null}]},"39c281e530ce83f9":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings","displayName":"Web App management settings","description":"This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.\r\n\r\n- The manifest_id field is the Manifest ID for the Web App.\r\nSee https://developer.chrome.com/blog/pwa-manifest-id/\r\nfor instructions on how to determine the Manifest ID for an installed web app.\r\n- The run_on_os_login field specifies if a web app can be run during OS login.\r\nIf this field is set to blocked, the web app will not run during OS login and the user will not be able to enable this later.\r\nIf this field is set to run_windowed, the web app will run during OS login and the user won't be able to disable this later.\r\nIf this field is set to allowed, the user will be able to configure the web app to run at OS login.\r\nThe default policy configuration only allows the allowed and blocked values.\r\n- (Starting with Microsoft Edge version 120) The prevent_close_after_run_on_os_login field specifies if a web app can be prevented from closing in any way.\r\nFor example, by the user, by task manager, or by web APIs. This behavior can only be enabled if run_on_os_login is set to run_windowed.\r\nIf the app is already running, this setting will only take effect after the app is restarted.\r\nIf this field isn't defined, users can close the app.\r\n(This is currently not supported in Microsoft Edge.)\r\n- (Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, that is, shortcuts, file handlers, protocol handlers and so on will be removed or not.\r\nIf an app is already running, this property will come into effect after the app restarts.\r\nThis should be used with caution, since it can override any OS integration that is set automatically during the startup of the web applications system. This currently only works on Windows, Mac and Linux platforms.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://bar.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foobar.example/index.html\",\r\n \"run_on_os_login\": \"run_windowed\",\r\n \"prevent_close_after_run_on_os_login\": true\r\n },\r\n {\r\n \"manifest_id\": \"*\",\r\n \"run_on_os_login\": \"blocked\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"force_unregister_os_integration\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"3905656041b0c80d":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_2","displayName":"Denies the Window Management permission on all sites by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_3","displayName":"Ask every time a site wants obtain the Window Management permission","description":null,"helpText":null}]},"39e414d9a943371f":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls_automaticfullscreenblockedforurlsdesc","displayName":"Block automatic full screen on specified sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3972d8b78c4c1bc7":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_cacertificatesdesc","displayName":"TLS server certificates that should be trusted by Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"394f5a74fa09a289":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"39a8fb6402ca721c":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced","displayName":"OneAuth Authentication Flow Enforced for signin","description":"This policy allows users to decide whether to use the OneAuth library for sign-in and token fetch in Microsoft Edge on Windows 10 RS3 and above.\r\n\r\nIf you disable or don't configure this policy, signin process will use Windows Account Manager. Microsoft Edge would be able to use accounts you logged in to Windows, Microsoft Office, or other Microsoft applications for login, without the needing of password. Or you can provide valid account and password to sign in, which will be stored in Windows Account Manager for future usage. You will be able to investigate all accounts stored in Windows Account Manager through Windows Settings -> Accounts -> Email and accounts page.\r\n\r\nIf you enable this policy, OneAuth authentication flow will be used for account signin. The OneAuth authentication flow has fewer dependencies and can work without Windows shell. The account you use would not be stored in the Email and accounts page.\r\n\r\nThis policy will only take effect on Windows 10 RS3 and above. On Windows 10 below RS3, OneAuth is used for authentication in Microsoft Edge by default.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced_1","displayName":"Enabled","description":null,"helpText":null}]},"39feebf6b3f54abe":{"id":"device_vendor_msft_policy_config_notifications_disallowcloudnotification","displayName":"Disallow Cloud Notification","description":"This policy setting blocks applications from using the network to send tile, badge, toast, and raw notifications. Specifically, this policy setting turns off the connection between Windows and the Windows Push Notification Service (WNS). This policy setting also stops applications from being able to use periodic (polling) notifications. If you enable this policy setting, applications and system features will not be able receive notifications from the network from WNS or via notification polling APIs. If you enable this policy setting, notifications can still be raised by applications running on the machine via local API calls from within the application. If you disable or do not configure this policy setting, the client computer will connect to WNS at user login and applications will be allowed to use periodic (polling) notifications. No reboots or service restarts are required for this policy setting to take effect. WarningThis policy is designed for zero exhaust. This policy may cause some MDM processes to break because WNS notification is used by the MDM server to send real time tasks to the device, such as remote wipe, unenroll, remote find, and mandatory app installation. When this policy is set to disallow WNS, those real time processes will no longer work and some time-sensitive actions such as remote wipe when the device is stolen or unenrollment when the device is compromised will not work.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Notifications#disallowcloudnotification"],"categoryId":"cb1e177e-8f06-4a69-8215-ec1e91c19e30","categoryName":"Notifications","options":[{"id":"device_vendor_msft_policy_config_notifications_disallowcloudnotification_0","displayName":"Block","description":"Enable cloud notification.","helpText":null},{"id":"device_vendor_msft_policy_config_notifications_disallowcloudnotification_1","displayName":"Allow","description":"Disable cloud notification.","helpText":null}]},"39c7624048dde2da":{"id":"device_vendor_msft_policy_config_security_requireretrievehealthcertificateonboot","displayName":"Require Retrieve Health Certificate On Boot","description":"Specifies whether to retrieve and post TCG Boot logs, and get or cache an encrypted or signed Health Attestation Report from the Microsoft Health Attestation Service (HAS) when a device boots or reboots. Setting this policy to 1 (Required):Determines whether a device is capable of Remote Device Health Attestation, by verifying if the device has TPM 2. 0. Improves the performance of the device by enabling the device to fetch and cache data to reduce the latency during Device Health Verification. Note We recommend that this policy is set to Required after MDM enrollment.  Most restricted value is 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#requireretrievehealthcertificateonboot"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_requireretrievehealthcertificateonboot_0","displayName":"Not required.","description":"Not required.","helpText":null},{"id":"device_vendor_msft_policy_config_security_requireretrievehealthcertificateonboot_1","displayName":"Required.","description":"Required.","helpText":null}]},"399f3f4c39bee52a":{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode","displayName":"Configure Xbox Live Game Save Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxlivegamesaveservicestartupmode"],"categoryId":"4f29ef5c-6ca0-4b09-893f-01755a670877","categoryName":"System Services","options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},"399f81bd1b812a91":{"id":"device_vendor_msft_windowsadvancedthreatprotection_offboarding","displayName":"Offboarding (Device)","description":"Set Windows Defender Advanced Threat Protection Offboarding blob and initiate offboarding","helpText":null,"infoUrls":[],"categoryId":"577d5951-fc56-4906-90bc-2c508c6611ad","categoryName":"Microsoft Defender for Endpoint","options":null},"39ffc7419d691a1f":{"id":"safari_privacy","displayName":"Privacy","description":"The dictionary of website privacy settings.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"396e047e7268a211":{"id":"settings_item_appanalytics_enabled","displayName":"Enabled","description":"If `true`, enable sharing app analytics with app developers. If `false`, disable sharing app analytics.","helpText":null,"infoUrls":[],"categoryId":"5f71c40e-01aa-42d2-9c8c-7d560126cd4b","categoryName":"App Analytics","options":[{"id":"settings_item_appanalytics_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_appanalytics_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"393a0a59851db877":{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinproperties","displayName":"Remove Properties from the Recycle Bin context menu (User)","description":"Removes the Properties option from the Recycle Bin context menu.\r\n\r\nIf you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.\r\n\r\nIf you disable or do not configure this setting, the Properties option is displayed as usual.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-norecyclebinproperties"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"39550787229fd43c":{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablenotewriterprinting_1","displayName":"Do not allow printing to Journal Note Writer (User)","description":"Prevents printing to Journal Note Writer.\r\n\r\nIf you enable this policy, the Journal Note Writer printer driver will not allow printing to it. It will remain displayed in the list of available printers, but attempts to print to it will fail.\r\n\r\nIf you disable this policy, you will be able to use this feature to print to a Journal Note.\r\n\r\nIf you do not configure this policy, users will be able to use this feature to print to a Journal Note.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablenotewriterprinting-1"],"categoryId":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","categoryName":"Accessories","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablenotewriterprinting_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablenotewriterprinting_1_1","displayName":"Enabled","description":null,"helpText":null}]},"395b4e32fcec5fae":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_extensioninstalltypeblocklistdesc","displayName":"Blocklist for install types of extensions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"39a6103b27a4a607":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_pathcolon37","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"3935996e5f5369db":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt","displayName":"Enter the zone assignments here. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":null},"391685ac03846acd":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowuserdatapersistence"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"39b153f5286d1acf":{"id":"user_vendor_msft_policy_config_kioskbrowser_blockedurls","displayName":"Blocked Urls (User)","description":"List of blocked website URLs (with wildcard support). This is used to configure blocked URLs kiosk browsers can not navigate to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#blockedurls"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"39454695e6334ce2":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":null},"39336990c3c5c1e5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_newtabpagelocation","displayName":"New tab page URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":null},"393c82d867e57ee4":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting","displayName":"Default notification setting (User)","description":"Set whether websites can display desktop notifications. You can allow them by default (1), deny them by default (2), or have the user be asked each time a website wants to show a notification (3).\r\n\r\nIf you don't configure this policy, notifications are allowed by default, and the user can change this setting.\r\n\r\n* 1 = Allow sites to show desktop notifications\r\n\r\n* 2 = Don't allow any site to show desktop notifications\r\n\r\n* 3 = Ask every time a site wants to show desktop notifications","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"3969b29c4ebf6d09":{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_relaunchfastifoutdated","displayName":"Time period (days): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"39e21a35158af99a":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_xsltenabled","displayName":"Control the availability of the XSLT feature (User)","description":"Controls whether the XSLT feature (the XSLTProcessor JavaScript API and the XSL processing instruction) is available in Microsoft Edge.\r\n\r\nIf you enable this policy, XSLT is available regardless of the browser's default configuration.\r\n\r\nIf you disable this policy, XSLT is unavailable regardless of the browser's default configuration.\r\n\r\nIf you don't configure this policy, XSLT availability is determined by the browser's default configuration and any applicable field trials.\r\n\r\nThis policy is temporary and will be removed in a future version of Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_xsltenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_xsltenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"39cb6837856dcfca":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastservicenotesdefaulturl2","displayName":"Shared Notes Default Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"39134ef3d3354de8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceother","displayName":"Replace MAPI - Other (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"other phone\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"other phone\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceother_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceother_1","displayName":"Enabled","description":null,"helpText":null}]},"39ee081319cd7a1c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_telugu","displayName":"Telugu (User)","description":"Enables the editing language Telugu","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_telugu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_telugu_1","displayName":"Enabled","description":null,"helpText":null}]},"39db2945e10b2395":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_activedirectorytimeoutforqueryingoneentryforgroupexpansion_l_entertimeoutinseconds","displayName":"Enter timeout in seconds: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":null},"39ca4372d5eea481":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits_l_selectdigitalsignaturehashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits_l_selectdigitalsignaturehashingalgorithmdropid_0","displayName":"0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits_l_selectdigitalsignaturehashingalgorithmdropid_512","displayName":"512","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits_l_selectdigitalsignaturehashingalgorithmdropid_768","displayName":"768","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits_l_selectdigitalsignaturehashingalgorithmdropid_1024","displayName":"1024","description":null,"helpText":null}]},"39e7f738a1eab0b1":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_downloadbandwidthlimit","displayName":"Limit the sync app download speed to a fixed rate (User)","description":"This setting lets you configure the maximum speed at which the OneDrive sync app (OneDrive.exe) can download files. This rate is a fixed value in kilobytes per second, and applies only to syncing, not to downloading updates. The lower the rate, the slower files will download. The minimum rate that can be set is 1 KB/s and the maximum rate is 100000 KB/s. Any input lower than 50 KB/s will set the limit to 50 KB/s, even if the UI shows the inputted rate.\r\nIf you enable this setting, computers will use the maximum download rate that you specify, and users will not be able to change it.\r\n\r\nIf you disable or do not configure this setting, users can choose to limit the download rate in OneDrive sync app settings.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_downloadbandwidthlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_downloadbandwidthlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"391718d93d16596e":{"id":"user_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disablefreanimation","displayName":"Disable animation that appears during OneDrive Setup (User)","description":"This setting lets you prevent the animation from showing during OneDrive Setup.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disablefreanimation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disablefreanimation_1","displayName":"Enabled","description":null,"helpText":null}]},"397b18df0afcc4f2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_controlcalendarsharing_l_controlcalendarsharing5","displayName":"Control Calendar Sharing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_controlcalendarsharing_l_controlcalendarsharing5_32768","displayName":"Prevent Calendar Sharing","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_controlcalendarsharing_l_controlcalendarsharing5_16384","displayName":"Allow calendar sharing with 'Availability Only' detail level","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_controlcalendarsharing_l_controlcalendarsharing5_8192","displayName":"Allow calendar sharing with 'Availability Only' and 'Limited Details' detail level","description":null,"helpText":null}]},"39b3657a70b3058c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverscplookup","displayName":"Exclude the SCP object lookup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverscplookup_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverscplookup_1","displayName":"True","description":null,"helpText":null}]},"393c67c8196a933d":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingformergedandsplitcells","displayName":"Stop checking for merged and split cells (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables do not have merged or split cells.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables do not have merged or split cells.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for merged and split cells and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingformergedandsplitcells_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingformergedandsplitcells_1","displayName":"Enabled","description":null,"helpText":null}]},"3913b0b7c1061a95":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_allowautoextendfordesktop","displayName":"Allow PowerPoint to also automatically extend the display when presenting on a desktop (User)","description":"This policy setting specifies whether PowerPoint can also automatically extend the display when users present on a desktop computer.\r\n\r\nIf you enable this policy setting, PowerPoint will automatically extend the display when users present on a desktop computer, if the \"Automatically extend display when presenting on a laptop or tablet\" checkbox on the UI under File | Options | Advanced | Display is checked.\r\n\r\nIf you disable or do not configure this policy setting, PowerPoint does not automatically extend the display when users present on a desktop computer, even if the \"Automatically extend display when presenting on a laptop or tablet\" checkbox on the UI under File | Options | Advanced | Display is checked.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_allowautoextendfordesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_allowautoextendfordesktop_1","displayName":"Enabled","description":null,"helpText":null}]},"39a8bf3123cb053a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setparametersforcngcontext","displayName":"Set parameters for CNG context (User)","description":"This policy setting allows you to specify the encryption parameters that should be used for the CNG context. \r\n\r\nIf you enable this policy setting, the parameters specified will be passed to the CNG context.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG values will be used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setparametersforcngcontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setparametersforcngcontext_1","displayName":"Enabled","description":null,"helpText":null}]},"39d4711cfb7a705e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_outlinefiles","displayName":"Outline files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_outlinefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_outlinefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"3943d7cce4e42547":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork","displayName":"Allow Trusted Locations on the network (User)","description":"This policy setting controls whether trusted locations on the network can be used.\r\n\r\nIf you enable this policy setting, users can specify trusted locations on network shares or in other remote locations that are not under their direct control by clicking the \"Add new location\" button in the Trusted Locations section of the Trust Center. Content, code, and add-ins are allowed to load from trusted locations with minimal security and without prompting the user for permission.\r\n\r\nIf you disable this policy setting, the selected application ignores any network locations listed in the Trusted Locations section of the Trust Center. \r\n\r\nIf you also deploy Trusted Locations via Group Policy, you should verify whether any of them are remote locations. If any of them are remote locations and you do not allow remote locations via this policy setting, those policy keys that point to remote locations will be ignored on client computers.\r\n\r\nDisabling this policy setting does not delete any network locations from the Trusted Locations list, but causes disruption for users who add network locations to the Trusted Locations list. Users are also prevented from adding new network locations to the Trusted Locations list in the Trust Center. We recommended that you do not enable this policy setting (as the \"Allow Trusted Locations on my network (not recommended)\" check box also states). Therefore, in practice, it should be possible to disable this policy setting in most situations without causing significant usability issues for most users.\r\n\r\nIf you do not enable this policy setting, users can select the \"Allow Trusted Locations on my network (not recommended)\" check box if desired and then specify trusted locations by clicking the \"Add new location\" button.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"39be749f9d567a2e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_englishword6095documents","displayName":"English Word 6.0/95 documents (User)","description":"Sets the option to convert the file correctly.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_englishword6095documents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_englishword6095documents_1","displayName":"Enabled","description":null,"helpText":null}]},"39f7042aa1201f2a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_updateautomaticlinksatopen","displayName":"Update automatic links at Open (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_updateautomaticlinksatopen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_updateautomaticlinksatopen_1","displayName":"Enabled","description":null,"helpText":null}]},"3913a90e0cc4878b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_ignorewhitespace","displayName":"Ignore White Space (User)","description":"This option determines if white space is compared in document compare. This corresponds to the option in the Compare dialog box ( Review ribbon | Compare | more options).","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_ignorewhitespace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_ignorewhitespace_1","displayName":"Enabled","description":null,"helpText":null}]},"39f254062e4fad5b":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_profiles","displayName":"Network Types","description":"Specifies the profiles to which the rule belongs: Domain, Private, Public. See FW_PROFILE_TYPE for the bitmasks that are used to identify profile types. If not specified, the default is All.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_profiles_1","displayName":"FW_PROFILE_TYPE_DOMAIN: This value represents the profile for networks that are connected to domains.","description":"FW_PROFILE_TYPE_DOMAIN: This value represents the profile for networks that are connected to domains.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_profiles_2","displayName":"FW_PROFILE_TYPE_PRIVATE: This value represents the standard profile for networks. These networks are classified as private by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are behind Network Address Translation (NAT) devices, routers, and other edge devices, and they are in a private location, such as a home or an office. AND FW_PROFILE_TYPE_PRIVATE: This value represents the profile for private networks, which is represented by the same value as that used for FW_PROFILE_TYPE_STANDARD.","description":"FW_PROFILE_TYPE_STANDARD: This value represents the standard profile for networks. These networks are classified as private by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are behind Network Address Translation (NAT) devices, routers, and other edge devices, and they are in a private location, such as a home or an office. AND FW_PROFILE_TYPE_PRIVATE: This value represents the profile for private networks, which is represented by the same value as that used for FW_PROFILE_TYPE_STANDARD.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_profiles_4","displayName":"FWPROFILETYPEPUBLIC: This value represents the profile for public networks. These networks are classified as public by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are those at airports, coffee shops, and other public places where the peers in the network or the network administrator are not trusted.","description":"FW_PROFILE_TYPE_PUBLIC: This value represents the profile for public networks. These networks are classified as public by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are those at airports, coffee shops, and other public places where the peers in the network or the network administrator are not trusted.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_profiles_2147483647","displayName":"FW_PROFILE_TYPE_ALL: This value represents all these network sets and any future network sets.","description":"FW_PROFILE_TYPE_ALL: This value represents all these network sets and any future network sets.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_profiles_-2147483648","displayName":"FW_PROFILE_TYPE_CURRENT: This value represents the current profiles to which the firewall and advanced security components determine the host is connected at the moment of the call. This value can be specified only in method calls, and it cannot be combined with other flags.","description":"FW_PROFILE_TYPE_CURRENT: This value represents the current profiles to which the firewall and advanced security components determine the host is connected at the moment of the call. This value can be specified only in method calls, and it cannot be combined with other flags.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/3a.json b/public/intune-definitions/3a.json new file mode 100644 index 000000000000..f178e7f7d51a --- /dev/null +++ b/public/intune-definitions/3a.json @@ -0,0 +1 @@ +{"3a7409246587ffb2":{"id":"com.apple.applicationaccess_allownotestranscriptionsummary","displayName":"Allow Notes Transcription Summary (Deprecated)","description":"If `false`, disables transcription summarization in Notes.\n\nDeprecated: use the declarative management `com.apple.configuration.intelligence.settings` configuration.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allownotestranscriptionsummary_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allownotestranscriptionsummary_true","displayName":"Enabled","description":null,"helpText":null}]},"3a1354d862d7ce3d":{"id":"com.apple.assetcache.managed_peerlistenranges","displayName":"Peer Listen Ranges","description":"The ranges of peer IP addresses the content cache responds to. When Peer Listen Ranges is an empty array, the content cache responds with an error to all cache queries.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"3ac34cf62d849c14":{"id":"com.apple.assetcache.managed_peerlistenranges_item_last","displayName":"Last","description":"The last IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"3a165c55e7b20dd5":{"id":"com.apple.managedclient.preferences_accesscontrolallowmethodsincorspreflightspecconformant","displayName":"Make Access-Control-Allow-Methods matching in CORS preflight spec conformant","description":"This policy controls whether request methods are uppercased when matching with Access-Control-Allow-Methods response headers in CORS preflight.\n\nIf you disable this policy, request methods are uppercased. This is the behavior on or before Microsoft Edge 108.\n\nIf you enable or don't configure this policy, request methods are not uppercased, unless matching case-insensitively with DELETE, GET, HEAD, OPTIONS, POST, or PUT.\n\nThis would reject fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: FOO\" response header,\nand would accept fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: Foo\" response header.\n\nNote: request methods \"post\" and \"put\" are not affected, while \"patch\" is affected.\n\nThis policy is intended to be temporary and will be removed in the future.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#accesscontrolallowmethodsincorspreflightspecconformant"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_accesscontrolallowmethodsincorspreflightspecconformant_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_accesscontrolallowmethodsincorspreflightspecconformant_true","displayName":"Allowed","description":null,"helpText":null}]},"3ac072b17ef9e256":{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"3a51ea47bc8bc589":{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_servername","displayName":"Server Name","description":null,"helpText":null,"infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":null},"3a368b699f7b9316":{"id":"device_vendor_msft_euiccs_{euicc}_profiles_{iccid}_isenabled","displayName":"Is Enabled","description":"Indicates whether this eSIM profile is enabled. Can be set by both the MDM and the CSP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":[{"id":"device_vendor_msft_euiccs_{euicc}_profiles_{iccid}_isenabled_false","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_euiccs_{euicc}_profiles_{iccid}_isenabled_true","displayName":"Enabled","description":"Enabled","helpText":null}]},"3a81886a44ac7418":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_3","displayName":"Back up log automatically when full","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the \"Retain old events\" policy setting is enabled.\r\n\r\nIf you enable this policy setting and the \"Retain old events\" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started.\r\n\r\nIf you disable this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and old events are retained.\r\n\r\nIf you do not configure this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and the old events are retained.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-autobackup-3"],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_3_1","displayName":"Enabled","description":null,"helpText":null}]},"3a32fff9cd95c9dc":{"id":"device_vendor_msft_policy_config_admx_printing_mxdwuselegacyoutputformatmsxps","displayName":"Change Microsoft XPS Document Writer (MXDW) default output format to the legacy Microsoft XPS format (*.xps)","description":"Microsoft XPS Document Writer (MXDW) generates OpenXPS (*.oxps) files by default in %WINDOWS_CLIENT_CURRENT_VERSION%, %WINDOWS_ARM_CURRENT_VERSION% and %WINDOWS_SERVER_CURRENT_VERSION%.\r\n\r\n If you enable this group policy setting, the default MXDW output format is the legacy Microsoft XPS (*.xps).\r\n\r\n If you disable or do not configure this policy setting, the default MXDW output format is OpenXPS (*.oxps).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-mxdwuselegacyoutputformatmsxps"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_mxdwuselegacyoutputformatmsxps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_mxdwuselegacyoutputformatmsxps_1","displayName":"Enabled","description":null,"helpText":null}]},"3ae404c59957ca70":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_quality","displayName":"Limit audio playback quality","description":"This policy setting allows you to limit the audio playback quality for a Remote Desktop Services session. Limiting the quality of audio playback can improve connection performance, particularly over slow links.\r\n\r\nIf you enable this policy setting, you must select one of the following: High, Medium, or Dynamic. If you select High, the audio will be sent without any compression and with minimum latency. This requires a large amount of bandwidth. If you select Medium, the audio will be sent with some compression and with minimum latency as determined by the codec that is being used. If you select Dynamic, the audio will be sent with a level of compression that is determined by the bandwidth of the remote connection.\r\n\r\nThe audio playback quality that you specify on the remote computer by using this policy setting is the maximum quality that can be used for a Remote Desktop Services session, regardless of the audio playback quality configured on the client computer. For example, if the audio playback quality configured on the client computer is higher than the audio playback quality configured on the remote computer, the lower level of audio playback quality will be used.\r\n\r\nAudio playback quality can be configured on the client computer by using the audioqualitymode setting in a Remote Desktop Protocol (.rdp) file. By default, audio playback quality is set to Dynamic.\r\n\r\nIf you disable or do not configure this policy setting, audio playback quality will be set to Dynamic.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-audio-quality"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_quality_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_quality_1","displayName":"Enabled","description":null,"helpText":null}]},"3ad5a855cf9b07ca":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactitdescription_contactitdescription","displayName":"Contact IT Link Text","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"3ab542cfd79f1abe":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync","displayName":"Microsoft Lync 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Lync 2013.\r\nBy default, the user settings of Microsoft Lync 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Lync 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013lync"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync_1","displayName":"Enabled","description":null,"helpText":null}]},"3a6fc6aa7b3046c8":{"id":"device_vendor_msft_policy_config_admx_wincal_turnoffwincal_2","displayName":"Turn off Windows Calendar","description":"Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other users calendars.\r\n\r\nIf you enable this setting, Windows Calendar will be turned off.\r\n\r\nIf you disable or do not configure this setting, Windows Calendar will be turned on.\r\n\r\nThe default is for Windows Calendar to be turned on.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wincal#admx-wincal-turnoffwincal-2"],"categoryId":"fff51673-04b8-4277-98ef-4baffbd8d192","categoryName":"Windows Calendar","options":[{"id":"device_vendor_msft_policy_config_admx_wincal_turnoffwincal_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wincal_turnoffwincal_2_1","displayName":"Enabled","description":null,"helpText":null}]},"3a4f2a48dc350199":{"id":"device_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer","displayName":"Show Message When Opening Sites In Internet Explorer","description":"You can configure Microsoft Edge to open a site automatically in Internet Explorer 11 and choose to display a notification before the site opens. If you want to display a notification, you must enable Configure the Enterprise Mode Site List or Send all intranets sites to Internet Explorer 11 or both. If enabled, the notification appears on a new page. If you want users to continue in Microsoft Edge, select the Show Keep going in Microsoft Edge option from the drop-down list under Options. If disabled or not configured, the default app behavior occurs and no additional page displays. Default setting: Disabled or not configured Related policies: -Configure the Enterprise Mode Site List -Send all intranet sites to Internet Explorer 11","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#showmessagewhenopeningsitesininternetexplorer"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_0","displayName":"No additional message displays.","description":"No additional message displays.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_1","displayName":"Show an additional message stating that a site has opened in IE11.","description":"Show an additional message stating that a site has opened in IE11.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_2","displayName":"Show an additional message with a \"Keep going in Microsoft Edge\" link.","description":"Show an additional message with a \"Keep going in Microsoft Edge\" link.","helpText":null}]},"3a64f9a531187a12":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended","displayName":"Default search provider encodings","description":"If DefaultSearchProviderEnabled is on, setting DefaultSearchProviderEncodings specifies the character encodings supported by the search provider. Encodings are code page names such as UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\r\n\r\nLeaving DefaultSearchProviderEncodings unset puts UTF-8 in use.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3a6a39040aba0309":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_enterprisesearchaggregatorsettings","displayName":"Enterprise search aggregator settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"3ab6d2bd02f6e14e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype","displayName":"Redirect Type","description":"Configures legacy or FSLogix advanced redirection. The default is '2' which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RedirectType\r\nType: DWORD\r\nValues: Legacy = 1, FSLogix Redirection = 2","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_1","displayName":"Enabled","description":null,"helpText":null}]},"3a1fe76d08685ff0":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch","displayName":"Roam Search","description":"NOTE:\r\n- Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n- Do not use this setting with Windows Server 2019 (or later) or Windows 10 (or later). Newer operating systems support per-user search.\r\n\r\nEnable search roaming in legacy Windows Operating Systems\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RoamSearch\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Single User Search, 2 = Multi-user Search","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_1","displayName":"Enabled","description":null,"helpText":null}]},"3af00a3d9bf6d4b5":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_profilesccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":null},"3adc521632166f7a":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list","displayName":"Enable built-in PDF reader powered by Adobe Acrobat for WebView2","description":"This policy configures WebView2 applications to launch the new version of the PDF reader that's powered by Adobe Acrobat's PDF reader. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF file handling, and greater accessibility.\r\n\r\nIf this policy is specified for an application, it is possible that it may impact other related applications as well. The policy is applied to all WebView2s sharing the same WebView2 user data folder. These WebView2s could potentially belong to multiple applications if those applications, which are likely from the same product family, are designed to share the same user data folder.\r\n\r\nUse a name-value pair to enable the new PDF reader for the application. Set the name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. Set the Value to true to enable the new reader or set it to false to use the existing one.\r\n\r\nIf you enable this policy for the specified WebView2 applications, they will use the new Adobe Acrobat powered PDF reader to open all PDF files.\r\n\r\nIf you disable the policy for the specified WebView2 applications or don't configure it, they will use the existing PDF reader to open all PDF files.\r\n\r\nExample value:\r\n\r\n{\"name\": \"app1.exe\", \"value\": true}\r\n{\"name\": \"app_id_for_app2\", \"value\": true}\r\n{\"name\": \"*\", \"value\": false}","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_1","displayName":"Enabled","description":null,"helpText":null}]},"3a3e1f6cd27fa75e":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting","description":"Administrators can use this policy to control whether websites can perform multiple downloads successively. Individual site behavior can be managed using the AutomaticDownloadsAllowedForUrls and AutomaticDownloadsBlockedForUrls policies.\r\n\r\nDefault behavior:\r\n\r\n- A user gesture is required for each additional download.\r\n\r\n- Users can modify their browser settings to disable successive downloads.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowAutomaticDownloads (1) = Allow all websites to perform multiple downloads without requiring a user gesture between each download.\r\n\r\n* BlockAutomaticDownloads (2) = Prevent all websites from performing multiple downloads, even after a user gesture.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"3ae0cbe489d8eac4":{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled","displayName":"URL reporting in Edge diagnostic data enabled","description":"Controls sending URLs of pages visited and per-page usage in the Microsoft Edge optional diagnostics data to Microsoft to help make browsing and search better. This also includes identifiers and usage diagnostics of other browser components that can modify or provide content, such as extensions.\r\n\r\nThis policy is applicable only if the 'DiagnosticData' (Send required and optional diagnostic data about browser usage) setting is set to 'OptionalData'. See the description of 'DiagnosticData' for more information on how Microsoft Edge diagnostic data levels are set.\r\n\r\nIf you enable or don't configure this setting, URLs are provided in optional diagnostic data.\r\n\r\nIf you disable this setting, URLs are not reported in optional diagnostic data.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3a3d75bee3bd4608":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled","displayName":"Hide the one-time redirection dialog and the banner on Microsoft Edge","description":"This policy gives an option to disable one-time redirection dialog and the banner. When this policy is enabled, users will not see both the one-time dialog and the banner.\r\nUsers will continue to be redirected to Microsoft Edge when they encounter an incompatible website on Internet Explorer, but their browsing data will not be imported.\r\n\r\n- If you enable this policy the one-time redirection dialog and banner will never be shown to users. Users' browsing data will not be imported when a redirection happens.\r\n\r\n- If you disable or don't set this policy, the redirection dialog will be shown on the first redirection and the persistent redirection banner will be shown to users on sessions that begin with a redirection. Users' browsing data will be imported every time user encounters such redirection (ONLY IF user consents to it on the one-time dialog).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3a80775c009f7e3a":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled","displayName":"Discover feature In Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.\r\n\r\nThis policy lets you configure the Discover feature in Microsoft Edge.\r\n\r\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\r\n\r\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3a83d70917f2268f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_pptviewexe60","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_pptviewexe60_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_pptviewexe60_1","displayName":"True","description":null,"helpText":null}]},"3a3bee592c8c22cf":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar","displayName":"Let Apps Access Calendar","description":"This policy setting specifies whether Windows apps can access the calendar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"3a6d0424d80db4ca":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging","displayName":"Let Apps Access Messaging","description":"This policy setting specifies whether Windows apps can read or send messages (text or MMS).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"3aae7c9736be0bf3":{"id":"device_vendor_msft_policy_config_update_setedurestart","displayName":"Set EDU Restart","description":"For devices in a cart, this policy skips all restart checks to ensure that the reboot will happen at ScheduledInstallTime. When you set this policy along with Update/ActiveHoursStart, Update/ActiveHoursEnd, and ShareCartPC, it will defer all the update processes (scan, download, install, and reboot) to a time after Active Hours. After a buffer period after ActiveHoursEnd, the device will wake up several times to complete the processes. All processes are blocked before ActiveHoursStart.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setedurestart"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setedurestart_0","displayName":"not configured","description":"not configured","helpText":null},{"id":"device_vendor_msft_policy_config_update_setedurestart_1","displayName":"configured","description":"configured","helpText":null}]},"3a51f6da21c4c4f8":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_guestapprovalrequired","displayName":"Require guest approval","description":"Guest can join the session only after host approves. Live Share already has the “Live Share: Guest Approval required” setting, and so this policy is effectively just enforcing that to “true”.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_guestapprovalrequired_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_guestapprovalrequired_1","displayName":"Enabled","description":null,"helpText":null}]},"3a110876b823de51":{"id":"keyboardsettings_allowslidetotype","displayName":"Allow Slide To Type","description":"If `false`, disables slide to type.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowslidetotype_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowslidetotype_true","displayName":"True","description":null,"helpText":null}]},"3a344e126ffd496b":{"id":"linux_mdatp_managed_antivirusengine_offlinedefinitionupdateurl","displayName":"Offline security intelligence update URL or directory","description":"The URL or directory path where offline security intelligence updates are served.","helpText":"Specify the location where security intelligence updates are served. This can either be a local server URL (e.g., http://172.22.199.67:8000/linux/production/) or an absolute directory path (e.g., /tmp/wdav-update/linux/production).","infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/offline-definition-update-Url"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"3a9810872a186f5e":{"id":"linux_mdatp_managed_antivirusengine_scanafterdefinitionupdate","displayName":"Enable scanning after definition update","description":"Specifies whether to start a process scan after new security intelligence updates are downloaded on the device.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#run-a-scan-after-definitions-are-updated"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_scanafterdefinitionupdate_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scanafterdefinitionupdate_true","displayName":"Enabled","description":null,"helpText":null}]},"3a69e591cb24b1b0":{"id":"user_vendor_msft_pde_protectfolders_protectdocuments","displayName":"Protect Documents (User)","description":"Allows the Admin to enable Personal Data Encryption on Documents folder. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"categoryId":"1d5e7986-870c-444b-bf09-78bbf82a53fa","categoryName":"Personal Data Encryption","options":[{"id":"user_vendor_msft_pde_protectfolders_protectdocuments_0","displayName":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","description":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","helpText":null},{"id":"user_vendor_msft_pde_protectfolders_protectdocuments_1","displayName":"Enable Personal Data Encryption on the folder.","description":"Enable Personal Data Encryption on the folder.","helpText":null}]},"3ad6b19e036a92ad":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath","displayName":"Alternative browser to launch for configured websites. (User)","description":"Setting the policy controls which command to use to open URLs in an alternative browser. The policy can be set to one of ${ie}, ${firefox}, ${safari}, ${opera}, ${edge} or a file path. When this policy is set to a file path, that file is used as an executable file. ${ie} is only available on Microsoft® Windows®. ${safari} and ${edge} are only available on Microsoft® Windows® and macOS.\r\n\r\nLeaving the policy unset puts a platform-specific default in use: Internet Explorer® for Microsoft® Windows®, or Safari® for macOS. On Linux®, launching an alternative browser will fail.\r\n\r\nExample value: ${ie}","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_1","displayName":"Enabled","description":null,"helpText":null}]},"3ae4ec6abee43ad1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting","displayName":"Default cookies setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_1","displayName":"Allow all sites to set local data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_2","displayName":"Do not allow any site to set local data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_4","displayName":"Keep cookies for the duration of the session","description":null,"helpText":null}]},"3a6258ed01f07cbf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls","displayName":"Block the Serial API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a serial port.\r\n\r\nLeaving the policy unset means DefaultSerialGuardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor URL patterns which do not match the policy SerialAskForUrls (if there is a match), DefaultSerialGuardSetting (if set), or the users' personal settings take precedence, in that order.\r\n\r\nURL patterns can't conflict with SerialAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"3a0b241ef35ad2ba":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_l_cursormovement82","displayName":"Cursor movement (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_l_cursormovement82_0","displayName":"Logical","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_l_cursormovement82_1","displayName":"Visual","description":null,"helpText":null}]},"3aabb79d55aeecd8":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowselectionfloaties","displayName":"Show Mini Toolbar on selection (User)","description":"Disabling this policy setting will result in Mini Toolbar not being displayed on text selection. By default, Mini Toolbar on selection is enabled and its visibility can be changed via a setting in the Excel Options dialog box.","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowselectionfloaties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowselectionfloaties_1","displayName":"Enabled","description":null,"helpText":null}]},"3afeb9d8062097d6":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_turnofffileformatcompatiblitydialogforods","displayName":"Suppress file format compatibility dialog box for OpenDocument Spreadsheet format (User)","description":"This policy setting allows you to configure the file format compatibility dialog box when saving a file as an OpenDocument Spreadsheet file in Microsoft Excel.\r\n\r\nIf you enable this policy setting, the file format compatibility dialog is not displayed whenever you save as an OpenDocument Spreadsheet file in Excel.\r\n\r\nIf you disable or do not configure this policy setting, the file format compatibility dialog is displayed when you save as an OpenDocument Spreadsheet file in Excel.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_turnofffileformatcompatiblitydialogforods_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_turnofffileformatcompatiblitydialogforods_1","displayName":"Enabled","description":null,"helpText":null}]},"3a7de478b7b7f8ad":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"3a76a0bdcbaf1110":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended","displayName":"Register protocol handlers (User)","description":"Register a list of protocol handlers. Set the protocol property to the scheme (like 'mailto') and the url property to the URL pattern of the application that handles the scheme. The pattern can include a '%s', which will be replaced by the handled URL.\r\n\r\nYou can recommend a specific value for this policy, but you can't require that your users use it.\r\n\r\nThe protocol handlers registered by policy are merged with any handlers registered by the user, and both are available for use. The user can override the protocol handlers installed by policy by installing a new default handler, but they can't remove a protocol handler registered by policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://mail.contoso.com/mail/?extsrc=mailto&url=%s\", \r\n \"default\": true, \r\n \"protocol\": \"mailto\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"0d4cf1d9-d8ad-4628-bd71-fa0de6598f28","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3a8771c0c082b014":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended","displayName":"Configure the home page URL (User)","description":"Configures the default home page URL in Microsoft Edge.\r\n\r\nThe home page is the page opened by the Home button. The pages that open on startup are controlled by the 'RestoreOnStartup' (Action to take on startup) policies.\r\n\r\nYou can either set a URL here or set the home page to open the new tab page. If you select to open the new tab page, then this policy doesn't take effect.\r\n\r\nIf you enable this policy, users can't change their home page URL, but they can choose to use the new tab page as their home page.\r\n\r\nIf you disable or don't configure this policy, users can choose their own home page, as long as the 'HomepageIsNewTabPage' (Set the new tab page as the home page) policy isn't enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value: https://www.contoso.com","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3a68b641b7c36984":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_relaunchnotificationperiod","displayName":"Set the time period for update notifications: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3a4b4b3499116bec":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_2","displayName":"Do not allow any site to request access to USB devices via the WebUSB API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_3","displayName":"Allow sites to ask the user to grant access to a connected USB device","description":null,"helpText":null}]},"3a6556decee8f796":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"Specifies the name of the default search provider.\r\n\r\nIf you enable this policy, you set the name of the default search provider.\r\n\r\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\r\n\r\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_1","displayName":"Enabled","description":null,"helpText":null}]},"3a5afb68ec8a2378":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist","displayName":"Control which extensions are installed silently (User)","description":"Specifies extensions that are installed silently, without user interaction, and that the users can't uninstall or disable (\"force-installed\"). All permissions requested by the extensions are granted implicitly, without user interaction, including any additional permissions requested by future versions of the extension. Furthermore, permissions are granted for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These two APIs are only available to extensions that are force-installed.)\r\n\r\nThis policy takes precedence over a potentially conflicting 'ExtensionInstallBlocklist' (Control which extensions cannot be installed) policy. When you take an extension off of the force-installed list it's automatically uninstalled by Microsoft Edge.\r\n\r\nFor Windows devices that aren't joined to a Microsoft Active Directory domain, forced installation is limited to extensions available in the Microsoft Store.\r\n\r\nNote that users can modify the source code of any extension by using Developer Tools, potentially rendering the extension dysfunctional. If this is a concern, set the 'DeveloperToolsAvailability' (Control where developer tools can be used) policy.\r\n\r\nUse the following format to add an extension to the list:\r\n\r\n[extensionID];[updateURL]\r\n\r\n- extensionID - the 32-letter string found on edge://extensions when in developer mode.\r\n\r\n- updateURL (optional) is the address of the Update Manifest XML document for the app or extension, as described at https://go.microsoft.com/fwlink/?linkid=2095043. If you don't set the updateURL, the Microsoft Store update URL is used (currently https://edge.microsoft.com/extensionwebstorebase/v1/crx). Note that the update URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL indicated in the extension's manifest.\r\n\r\nFor example, gggmmkjegpiggikcnhidnjjhmicpibll;https://edge.microsoft.com/extensionwebstorebase/v1/crx installs the Microsoft Online app from the Microsoft Store \"update\" URL. For more information about hosting extensions, see: https://go.microsoft.com/fwlink/?linkid=2095044.\r\n\r\nIf you don't configure this policy, no extensions are installed automatically, and users can uninstall any extension in Microsoft Edge.\r\n\r\nNote that this policy doesn't apply to InPrivate mode.\r\n\r\nExample value:\r\n\r\ngbchcmhmhahfdphkhkmpfmihenigjmpp;https://edge.microsoft.com/extensionwebstorebase/v1/crx\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"3ae62b31a3db5022":{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins","displayName":"List of origins that allow all HTTP authentication (User)","description":"Set this policy to specify which origins allow all the HTTP authentication schemes Microsoft Edge supports regardless of the 'AuthSchemes' (Supported authentication schemes) policy.\r\n\r\nFormat the origin pattern according to this format (https://support.google.com/chrome/a?p=url_blocklist_filter_format). Up to 1,000 exceptions can be defined in 'AllHttpAuthSchemesAllowedForOrigins' (List of origins that allow all HTTP authentication).\r\nWildcards are allowed for the whole origin or parts of the origin. Parts include the scheme, host, or port.\r\n\r\nExample value:\r\n\r\n*.example.com","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"3aad89546f6b029b":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting (User)","description":"Administrators can use this policy to control whether websites can perform multiple downloads successively. Individual site behavior can be managed using the AutomaticDownloadsAllowedForUrls and AutomaticDownloadsBlockedForUrls policies.\r\n\r\nDefault behavior:\r\n\r\n- A user gesture is required for each additional download.\r\n\r\n- Users can modify their browser settings to disable successive downloads.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowAutomaticDownloads (1) = Allow all websites to perform multiple downloads without requiring a user gesture between each download.\r\n\r\n* BlockAutomaticDownloads (2) = Prevent all websites from performing multiple downloads, even after a user gesture.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"3ae0b896db5c6db8":{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed","displayName":"Allows enabling throttling of non-visible, cross-origin iframes (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 123.\r\n\r\nThrottling of cross-origin frames that are display:none and non-visible is a feature designed to make cross-process and same-process cross-origin iframes consistent in their rendering behavior. For more details on cross-process vs. same-process throttling, refer to https://go.microsoft.com/fwlink/?linkid=2239564.\r\n\r\nThis enterprise policy exists to allow administrators to control whether their users are able to turn the additional throttling on or not.\r\n\r\nIf you enable or don't configure this policy, users can opt-in to throttling.\r\n\r\nIf you disable this policy, users can't enable throttling.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3a2567334634940c":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash_viewxfapdfiniemodeallowedfilehashdesc","displayName":"View XFA-based PDF files using IE Mode for allowed file hash. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":null},"3acbc00480693702":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_mandatoryextensionsforinprivatenavigationdesc","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"3a0dd7b9a812d298":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastserviceserverinfo1","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"3a164b311984075a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_access","displayName":"Microsoft Access (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_access_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_access_1","displayName":"True","description":null,"helpText":null}]},"3af4a5224431351f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishcaribbean","displayName":"English (Caribbean) (User)","description":"Enables the editing language English (Caribbean)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishcaribbean_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishcaribbean_1","displayName":"Enabled","description":null,"helpText":null}]},"3a0b727a2b852375":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kashmiridevanagari","displayName":"Kashmiri (Devanagari) (User)","description":"Enables the editing language Kashmiri (Devanagari)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kashmiridevanagari_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kashmiridevanagari_1","displayName":"Enabled","description":null,"helpText":null}]},"3a6869bb83249ceb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventmapiservicesfrombeingadded","displayName":"Prevent MAPI services from being added (User)","description":"By default, any MAPI service can be added to a user profile as an Outlook account. This setting allows you to prevent users from adding a specific MAPI services on the list of services. To prevent adding a MAPI service, append the name of the service to the list of services stored in this setting, separated by from a previous name by a semi-colon (;). For example, if you wanted to prevent adding the Outlook Mobile Service and Live Meeting Transport, you would configure this setting \"MSOMS;LiveMeeting\".","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventmapiservicesfrombeingadded_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventmapiservicesfrombeingadded_1","displayName":"Enabled","description":null,"helpText":null}]},"3a54bf83d3ab1a90":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc04_l_datecolon21","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"3acbb5ce879259eb":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07_l_datecolon33","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"3ae0e0ce76731fd7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders79","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders79_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders79_1","displayName":"True","description":null,"helpText":null}]},"3a77d26d3db8bd2c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3","displayName":"Color for merged cells: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_1","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_0","displayName":"By Author","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_2","displayName":"Pink","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_3","displayName":"Light blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_4","displayName":"Light yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_5","displayName":"Light purple","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_6","displayName":"Light Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_7","displayName":"Light green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart3_8","displayName":"Gray","description":null,"helpText":null}]},"3ab355f235c8bfc9":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}","displayName":"Printer Shared ID (User)","description":"Identifies the Universal Print printer, by its Share ID, you wish to install on the targeted user account. The printer's Share ID can be found in the printer's properties via the Universal Print portal. Note: the targeted user account must have access rights to both the printer and to the Universal Print service.","helpText":"","infoUrls":[],"categoryId":"56c54112-2991-4bda-9e01-e6868bd07726","categoryName":"Printer Provisioning","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/3b.json b/public/intune-definitions/3b.json new file mode 100644 index 000000000000..7df67d1d800a --- /dev/null +++ b/public/intune-definitions/3b.json @@ -0,0 +1 @@ +{"3be292a788793373":{"id":"ade_setupassistant_restorecompleted","displayName":"Restore completed","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_restorecompleted_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_restorecompleted_1","displayName":"Show","description":null,"helpText":null}]},"3bb19d76afb05b87":{"id":"com.apple.applicationaccess_allowclouddocumentsync","displayName":"Allow Cloud Document Sync","description":"If false, disables document and key-value syncing to iCloud. As of iOS 13, this restriction requires a supervised device. Available in iOS 5 and later, and macOS 10.11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowclouddocumentsync_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowclouddocumentsync_true","displayName":"True","description":null,"helpText":null}]},"3b52214a5ed13c69":{"id":"com.apple.applicationaccess_allowmediasharingmodification","displayName":"Allow Media Sharing Modification","description":"If false, prevents modification of Media Sharing settings.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmediasharingmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmediasharingmodification_true","displayName":"True","description":null,"helpText":null}]},"3bebef104908843c":{"id":"com.apple.applicationaccess_allowmultiplayergaming","displayName":"Allow Multiplayer Gaming","description":"If false, prohibits multiplayer gaming. Requires a supervised device. Available in iOS 4.1 and later, and macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmultiplayergaming_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmultiplayergaming_true","displayName":"True","description":null,"helpText":null}]},"3b57381aa2b14e70":{"id":"com.apple.appstore_com.apple.appstore","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"f14014f5-a401-41e3-8a97-1a9e3c5e3614","categoryName":"App Store","options":null},"3bf6cb2c0bae0847":{"id":"com.apple.extensiblesso_extensiondata_preferredkdcs_kerberos","displayName":"Preferred KDCs","description":"The ordered list of perferred Key Distribution Centers (KDCs) to use for Kerberos traffic. Use this if the servers are not discoverable via DNS. If the servers are specified, then they are used for both connectivity checks and attempted first for Kerberos traffic. If the servers do not respond, then the device falls back to DNS discovery. Each entry is formatted the same as it would be in a krb5.conf file.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"3b9868cad2f81caf":{"id":"com.apple.managedclient.preferences_edgeautofillmlenabled","displayName":"Machine learning powered autofill suggestions","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and will not be used elsewhere.\n\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\n\nIf you disable this policy, machine learning powered autofill suggestions will not be shown, and autofill will no longer use cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.\n\nThis policy will be disabled if you disable \"AutofillAddressEnabled\"..","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeautofillmlenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeautofillmlenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeautofillmlenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3b6559b9a62fb90c":{"id":"com.apple.managedclient.preferences_ignoreexclusions","displayName":"Ignore exclusions","description":"Should exclusions be ignored during a scheduled scan","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":[{"id":"com.apple.managedclient.preferences_ignoreexclusions_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_ignoreexclusions_true","displayName":"Enabled","description":null,"helpText":null}]},"3b01c95592039429":{"id":"com.apple.managedclient.preferences_imagesallowedforurls","displayName":"Allow images on these sites","description":"Define a list of sites, based on URL patterns, that can display images.\n\nIf you don't configure this policy, the global default value is used for all sites either from the \"DefaultImagesSetting\" policy (if set) or the user's personal configuration.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#imagesallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"3bf444b9b07d0c69":{"id":"com.apple.managedclient.preferences_proactiveauthenabled","displayName":"Enable Proactive Authentication","description":"Lets you configure whether to turn on Proactive Authentication.\n\nIf you enable this policy, Microsoft Edge tries to proactively authenticate the signed-in user with Microsoft services. At regular intervals, Microsoft Edge checks with an online service for an updated manifest that contains the configuration that governs how to do this.\n\nIf you disable this policy, Microsoft Edge doesn't try to proactively authenticate the signed-in user with Microsoft services. Microsoft Edge no longer checks with an online service for an updated manifest that contains the configuration for doing this.\n\nIf you don't configure this policy, Proactive Authentication is turned on.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#proactiveauthenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_proactiveauthenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proactiveauthenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3b12c9a26d06c795":{"id":"com.apple.mcxmenuextras_textinput.menu","displayName":"Text Input","description":"If true, enables the Text Input menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_textinput.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_textinput.menu_true","displayName":"True","description":null,"helpText":null}]},"3bbca145a54dd23f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgecollectionsenabled","displayName":"Enable the Collections feature","description":"Lets you allow users to access the Collections feature, where they can collect, organize, share, and export content more efficiently and with Office integration.\n\nIf you enable or don't configure this policy, users can access and use the Collections feature in Microsoft Edge.\n\nIf you disable this policy, users can't access and use Collections in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgecollectionsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgecollectionsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3b35c37186bff549":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_recommended","displayName":"Show the Reload in Internet Explorer mode button in the toolbar (users can override)","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button is only shown on the toolbar when the \"InternetExplorerIntegrationReloadInIEModeAllowed\" policy is enabled or if the user chose to enable \"Allow sites to be reloaded in Internet Explorer mode\".\n\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\n\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"3b8f1845ab2c3fd4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.windowmanagementallowedforurls","displayName":"Allow Window Management permission on specified sites","description":"Lets you configure a list of site URL patterns that specify sites, which automatically grant the window management permission. This extends the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\n\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\n\nIf this policy isn't configured for a site, then the policy from \"DefaultWindowManagementSetting\" applies to the site, if configured. Otherwise the permission follows the browser's defaults and lets users choose this permission per site.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3b3466f7e835f40e":{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprogramcompatibilityassistant_2","displayName":"Turn off Program Compatibility Assistant","description":"This policy setting controls the state of the Program Compatibility Assistant (PCA).\r\n \r\nThe PCA monitors applications run by the user. When a potential compatibility issue with an application is detected, the PCA will prompt the user with recommended solutions. To configure the diagnostic settings for the PCA, go to System->Troubleshooting and Diagnostics->Application Compatibility Diagnostics. \r\n\r\nIf you enable this policy setting, the PCA will be turned off. The user will not be presented with solutions to known compatibility issues when running applications. Turning off the PCA can be useful for system administrators who require better performance and are already aware of application compatibility issues. \r\n\r\nIf you disable or do not configure this policy setting, the PCA will be turned on. To configure the diagnostic settings for the PCA, go to System->Troubleshooting and Diagnostics->Application Compatibility Diagnostics.\r\n\r\nNote: The Diagnostic Policy Service (DPS) and Program Compatibility Assistant Service must be running for the PCA to run. These services can be configured by using the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatturnoffprogramcompatibilityassistant-2"],"categoryId":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","categoryName":"Application Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprogramcompatibilityassistant_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprogramcompatibilityassistant_2_1","displayName":"Enabled","description":null,"helpText":null}]},"3be69f06de4482f6":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancelowpriorityunit","displayName":"Low Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancelowpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancelowpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancelowpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"3bdaadbda87d2c0d":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvweight_netlogon_ldapsrvweightlabel","displayName":"Weight:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"3b2b714f907ccd7c":{"id":"device_vendor_msft_policy_config_admx_smartcard_scpnpenabled","displayName":"Turn on Smart Card Plug and Play service","description":"This policy setting allows you to control whether Smart Card Plug and Play is enabled.\r\n\r\nIf you enable or do not configure this policy setting, Smart Card Plug and Play will be enabled and the system will attempt to install a Smart Card device driver when a card is inserted in a Smart Card Reader for the first time.\r\n\r\nIf you disable this policy setting, Smart Card Plug and Play will be disabled and a device driver will not be installed when a card is inserted in a Smart Card Reader.\r\n\r\nNote: This policy setting is applied only for smart cards that have passed the Windows Hardware Quality Labs (WHQL) testing process.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-scpnpenabled"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_scpnpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_scpnpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3bb9dd304ed59b0f":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_user_home_location","displayName":"Location:","description":null,"helpText":"","infoUrls":[],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_user_home_location_1","displayName":"On the Network","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_user_home_location_0","displayName":"On the Local machine","description":null,"helpText":null}]},"3ba058e0734dc1be":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog.","description":"This policy controls whether or not the \"Always open\" checkbox is shown on external protocol launch confirmation prompts.\r\n\r\n If this policy is set to True or not set, when an external protocol confirmation is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.\r\n\r\n If this policy is set to False, the \"Always allow\" checkbox is not displayed and the user will be prompted each time an external protocol is invoked.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox_1","displayName":"Enabled","description":null,"helpText":null}]},"3ba5002352048a1c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_0","displayName":"Use default browser behavior.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_1","displayName":"Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_2","displayName":"Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_3","displayName":"Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null}]},"3b41019999c4aea0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_filesystemwriteblockedforurlsdesc","displayName":"Block write access to files and directories on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"3ba8295889649cda":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes_extensionallowedtypesdesc","displayName":"Types of extensions/apps that are allowed to be installed (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"3b7308ba5c1666e7":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom","displayName":"From:","description":"","helpText":"","infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_23","displayName":"11 PM","description":null,"helpText":null}]},"3b5d41c23d9687e5":{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"3b8b8a837e296533":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"3bf8bc1360d0bd94":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowaccesstodatasources"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"3bfd291dc13793bb":{"id":"device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation","displayName":"Allow Windows Entitlement Reactivation","description":"Enables or Disable Windows license reactivation on managed devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Licensing#allowwindowsentitlementreactivation"],"categoryId":"c0204a51-a73c-46a6-8626-deeadcabe6ac","categoryName":"Licensing","options":[{"id":"device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation_0","displayName":"Block","description":"Disable Windows license reactivation on managed devices.","helpText":null},{"id":"device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation_1","displayName":"Allow","description":"Enable Windows license reactivation on managed devices.","helpText":null}]},"3b40d8546062bf74":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_maxconnectionsperproxy","displayName":"Maximum number of concurrent connections to the proxy server: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3bdde8092b354a47":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_1","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_3","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_4","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},"3bb7d6a7b061d298":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed","displayName":"Allow local MHTML files to open automatically in Internet Explorer mode","description":"This policy controls whether local mht or mhtml files launched from the command line can open automatically in Internet Explorer mode based on the file content without specifying the --ie-mode-file-url command line.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'\r\nand\r\n'InternetExplorerIntegrationLocalFileAllowed' (Allow launching of local files in Internet Explorer mode) is enabled or not configured.\r\n\r\nIf you enable or don't configure this policy, local mht or mhtml files can launch in Microsoft Edge or Internet Explorer mode to best view the file.\r\n\r\nIf you disable this policy, local mht or mhtml files will launch in Microsoft Edge.\r\n\r\nNote that if you use the --ie-mode-file-url command line argument for launching local mht or mhtml files, it takes precedence over how you configured this policy.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3b07a9345ce2bdd1":{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled","displayName":"Enable the Designer for Image Editor feature","description":"Lets users access and use the Designer for Image Editor feature to edit an image they select.\r\n\r\nIf you enable or don't configure this policy, users can access and use the Designer for Image Editor feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't access and use the Designer for Image Editor feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3b577603c6a04eb6":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3b26ff8d959701a2":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_browserguestmodeenforced","displayName":"Enforce Edge guest mode","description":"Controls whether Microsoft Edge enforces Guest-only browsing.\r\n\r\nIf you enable this policy, Microsoft Edge enforces Guest sessions and prevents profile sign-in. Guest sessions run in InPrivate mode.\r\n\r\nIf you disable or don't configure this policy, users can create and use profiles. Guest mode can also be controlled separately using the BrowserGuestModeEnabled policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_browserguestmodeenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_browserguestmodeenforced_1","displayName":"Enabled","description":null,"helpText":null}]},"3b4a3f45a983a892":{"id":"device_vendor_msft_policy_config_mixedreality_allowcaptiveportalbeforelogon","displayName":"Allow Captive Portal Before Logon","description":"This policy controls whether the device will display the captive portal flow on the HoloLens sign in screen's network selection page when a captive portal network is detected. Displaying the captive portal flow is disabled by default to reduce the potential of gaining unauthorized access to the device through the browser.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#allowcaptiveportalbeforelogon"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_allowcaptiveportalbeforelogon_0","displayName":"Displaying captive portal is not allowed.","description":"Displaying captive portal is not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_allowcaptiveportalbeforelogon_1","displayName":"Displaying captive portal is allowed.","description":"Displaying captive portal is allowed.","helpText":null}]},"3b984ac56b73f4aa":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_graphicsfilterimport","displayName":"Graphics filter import","description":"This policy setting allows you to specify a list of graphic filters that 2016 Office applications load. \r\n\r\nIf you enable this policy setting, you can specify a list of graphic filters that 2016 Office applications load. The graphic filters you specify must be assigned a string value FILTER.FLT (where FILTER.FLT is replaced with the name of a real filter), the value of which is XX.YY.ZZ.WW, where XX, YY, ZZ, and WW are each positive numbers less than 2^16, where the version in the registry is less than or equal to the version of the filter. For example: ''myfilter.flt''=''2006.1200.1000.1000''\r\n\r\nIf you disable or do not configure this policy setting, 2016 Office applications does not restrict any graphics filters from loading.\r\n","helpText":"","infoUrls":[],"categoryId":"f0190b73-0d5c-410e-bce1-e03aa1f62ed4","categoryName":"Security Settings","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_graphicsfilterimport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_graphicsfilterimport_1","displayName":"Enabled","description":null,"helpText":null}]},"3b425b662e2c0331":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_msaccessexe25","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_msaccessexe25_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_msaccessexe25_1","displayName":"True","description":null,"helpText":null}]},"3b983dd78d13e2ce":{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforqualityupdates","displayName":"Set Policy Driven Update Source For Quality Updates","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setpolicydrivenupdatesourceforqualityupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforqualityupdates_0","displayName":"Detect, download and deploy Quality Updates from Windows Update","description":"Detect, download and deploy Quality Updates from Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforqualityupdates_1","displayName":"Detect, download and deploy Quality Updates from Windows Server Update Services (WSUS)","description":"Detect, download and deploy Quality Updates from Windows Server Update Services (WSUS)","helpText":null}]},"3b810727fffb67e3":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_part_updatechecksuppresseddurationmin","displayName":"Duration (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"78497707-c3e4-400b-a6bc-1813c3689fdc","categoryName":"Preferences","options":null},"3b00e8e1a2d89e6a":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableappbrowserui","displayName":"Disable App Browser UI","description":"Use this policy setting if you want to disable the display of the app and browser protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disableappbrowserui"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableappbrowserui_0","displayName":"(Disable) The users can see the display of the app and browser protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the app and browser protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableappbrowserui_1","displayName":"(Enable) The users cannot see the display of the app and browser protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the app and browser protection area in Windows Defender Security Center.","helpText":null}]},"3b56293dae8db481":{"id":"enforcement_enforcement","displayName":"com.apple.configuration.softwareupdate.enforcement.specific","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"42a6198f-bdec-402e-b619-315400b65488","categoryName":"Software Update","options":null},"3b404b2e53e2933e":{"id":"intelligencesettings_allowappleintelligencereport","displayName":"Allow Apple Intelligence Report","description":"If `false`, disables Apple Intelligence Report.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_allowappleintelligencereport_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_allowappleintelligencereport_true","displayName":"True","description":null,"helpText":null}]},"3bce00a444f38a50":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters","displayName":"Lowercase Letters (User)","description":"Use this policy setting to configure the use of lowercase letters in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one lowercase letter in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using lowercase letters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use lowercase letters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_0","displayName":"Allowed","description":"Allows the use of lowercase letters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_1","displayName":"Required","description":"Requires the use of at least one lowercase letters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_2","displayName":"Blocked","description":"Does not allow the use of lowercase letters in PIN.","helpText":null}]},"3bebebbee60abd87":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat","displayName":"Default file format (User)","description":"This policy setting controls whether new database files are created in the new Access format or in a format used by earlier versions of Access.\r\n \r\nIf you enable this policy setting, you can specify whether new database files are created in Access 2016 format by default or in Access 2002--2003 format. Users can still override the default and select a specific format when they save the files, but cannot set the default by themselves from the Access Options dialog. \r\n \r\nIf you disable or do not configure this policy setting, when users create new database files, Access saves them in the new Access 2016 format; however, users can change this functionality by selecting a file format from the Default file format drop down list under Access Options | Popular | Creating databases. Note: If you disable this policy setting, users can choose from three default file formats: Access 2000, Access 2002--2003, and Access 2016. You can use this policy setting to specify either the Access 2002--2003 or Access 2016 format as the default, but not the Access 2000 format.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_1","displayName":"Enabled","description":null,"helpText":null}]},"3bc23dcb1861307f":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffsavingautotuningdatatofile","displayName":"Turn off saving auto-tuning data to file (User)","description":"This policy setting allows you to turn off saving the auto-tuning result to file.\r\n\r\nIf you enable this policy setting, the auto-tuning data is not saved to file.\r\n\r\nIf you disable or do not configure this policy setting, auto-tuning data is saved to file by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffsavingautotuningdatatofile"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffsavingautotuningdatatofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffsavingautotuningdatatofile_1","displayName":"Enabled","description":null,"helpText":null}]},"3b7d3fbb69b3997b":{"id":"user_vendor_msft_policy_config_admx_globalization_hidelocaleselectandcustomize","displayName":"Hide user locale selection and customization options (User)","description":"This policy setting removes the regional formats interface from the Region settings control panel.\r\n\r\nThis policy setting is used only to simplify the Regional and Language Options control panel.\r\n\r\nIf you enable this policy setting, the user does not see the regional formats options. This does not prevent the user or an application from changing their user locale or user overrides programmatically.\r\n\r\nIf you disable or do not configure this policy setting, the user sees the regional formats options for changing and customizing the user locale.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hidelocaleselectandcustomize"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hidelocaleselectandcustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hidelocaleselectandcustomize_1","displayName":"Enabled","description":null,"helpText":null}]},"3bad877adbb98129":{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_to_permitted_snapins","displayName":"Restrict users to the explicitly permitted list of snap-ins (User)","description":"Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins.\r\n\r\n-- If you enable this setting, all snap-ins are prohibited, except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins.\r\n\r\n To explicitly permit a snap-in, open the Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If a snap-in setting in the folder is disabled or not configured, the snap-in is prohibited.\r\n\r\n-- If you disable this setting or do not configure it, all snap-ins are permitted, except those that you explicitly prohibit. Use this setting if you plan to permit use of most snap-ins.\r\n\r\n To explicitly prohibit a snap-in, open the Restricted/Permitted snap-ins setting folder and then disable the settings representing the snap-ins you want to prohibit. If a snap-in setting in the folder is enabled or not configured, the snap-in is permitted.\r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.\r\n\r\nNote: If you enable this setting, and you do not enable any settings in the Restricted/Permitted snap-ins folder, users cannot use any MMC snap-ins.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-restrict-to-permitted-snapins"],"categoryId":"07c023d3-0899-40af-a04f-805876d99a9b","categoryName":"Microsoft Management Console","options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_to_permitted_snapins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_to_permitted_snapins_1","displayName":"Enabled","description":null,"helpText":null}]},"3b3f30db40548841":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rsm","displayName":"Removable Storage Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-rsm"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rsm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rsm_1","displayName":"Enabled","description":null,"helpText":null}]},"3b96b931016bde89":{"id":"user_vendor_msft_policy_config_admx_startmenu_showrunasdifferentuserinstart","displayName":"Show \"Run as different user\" command on Start (User)","description":"This policy setting shows or hides the \"Run as different user\" command on the Start application bar.\r\n\r\nIf you enable this setting, users can access the \"Run as different user\" command from Start for applications which support this functionality.\r\n\r\nIf you disable this setting or do not configure it, users cannot access the \"Run as different user\" command from Start for any applications.\r\n\r\nNote: This setting does not prevent users from using other methods, such as the shift right-click menu on application's jumplists in the taskbar to issue the \"Run as different user\" command.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showrunasdifferentuserinstart"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showrunasdifferentuserinstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showrunasdifferentuserinstart_1","displayName":"Enabled","description":null,"helpText":null}]},"3bec46d7d7d91323":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings","displayName":"Themes (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings_1","displayName":"True","description":null,"helpText":null}]},"3b06b138c58cb372":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_browserswitcherchromepath","displayName":"Path to Chrome for switching from the alternative browser. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"3bddce1f0a75e69c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled","displayName":"Enable IPv6 reachability check override (User)","description":"Setting the policy to true overrides the IPv6 reachability check. This means that the\r\nsystem will always query AAAA records when resolving host names. It applies to\r\nall users and interfaces on the device.\r\n\r\nSetting the policy to false or leaving it unset does not overrides the IPv6 reachability check.\r\nThe system only queries AAAA records when it is reachable to a global IPv6 host.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3ba70ec8b596af2f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"3bd97fd41e4bf2b2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_pathcolon33","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"3b2d825d56269fdc":{"id":"user_vendor_msft_policy_config_internetexplorer_disablecrashdetection","displayName":"Turn off Crash Detection (User)","description":"This policy setting allows you to manage the crash detection feature of add-on Management.\n\nIf you enable this policy setting, a crash in Internet Explorer will exhibit behavior found in Windows XP Professional Service Pack 1 and earlier, namely to invoke Windows Error Reporting. All policy settings for Windows Error Reporting continue to apply.\n\nIf you disable or do not configure this policy setting, the crash detection feature for add-on management will be functional.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecrashdetection"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablecrashdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablecrashdetection_1","displayName":"Enabled","description":null,"helpText":null}]},"3bc5397e56ffaf60":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch","displayName":"Allow import of data from other browsers on each Microsoft Edge launch (User)","description":"If you enable this policy, users will see a prompt to import their browsing data from other browsers on each Microsoft Edge launch.\r\n\r\nIf you disable this policy, users will never see a prompt to import their browsing data from other browsers on each Microsoft Edge launch.\r\n\r\nIf the policy is left unconfigured, users can activate this feature from a Microsoft Edge prompt or from the Settings page.\r\n\r\nNote: A similar policy named 'AutoImportAtFirstRun' (Automatically import another browser's data and settings at first run) exists. This policy should be used if you want to import supported data from other browsers only once while setting up your device.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_1","displayName":"Enabled","description":null,"helpText":null}]},"3bc68d87a4d14062":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},"3bf3854bc689ba8f":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply (User)","description":"A list of URLs to which 'AutoOpenFileTypes' (List of file types that should be automatically opened on download) will apply to. This policy has no impact on automatically open values set by users via the download shelf ... > \"Always open files of this type\" menu entry.\r\n\r\nIf you set URLs in this policy, files will only automatically open by policy if the URL is part of this set and the file type is listed in 'AutoOpenFileTypes'. If either condition is false, the download won't automatically open by policy.\r\n\r\nIf you don't set this policy, all downloads where the file type is in 'AutoOpenFileTypes' will automatically open.\r\n\r\nA URL pattern has to be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nThis policy does not work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"3b174856bce95056":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist","displayName":"Configure the Enterprise Mode Cloud Site List (User)","description":"The Microsoft Edge Site Lists setting in the M365 Admin Center allows you to host your site list(s) in a compliant cloud location and manage the contents of your site list(s) through the built-in experience. This setting allows you to specify which site list within the M365 Admin Center to deploy to your users. The user must be signed into Microsoft Edge with a valid work or school account. Otherwise, Microsoft Edge will not download the site list from the cloud location.\r\n\r\nThis setting is applicable only when the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) setting is configured.\r\n\r\nIf you configure this policy, Microsoft Edge will use the specified site list. When enabled, you can enter the identifier of the site list that you created and published to the cloud in M365 Admin Center.\r\n\r\nThis setting takes precedence over Microsoft Edge's 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy as well as Internet Explorer's site list setting (Use the Enterprise mode IE website list). If you disable or don't configure this policy, Microsoft Edge will use the 'InternetExplorerIntegrationSiteList' policy instead.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"3b1981845c5bdaa8":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_sameorigintabcaptureallowedbyoriginsdesc","displayName":"Allow Same Origin Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"3bdc6873439b2e48":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_listofapprovedlocationspolicy","displayName":"Approve Locations (User)","description":"Adds locations, such as c:\\Windows or \\\\server\\share, to the list of approved locations for use with Restricted Browsing. When Restricted Browsing is active, the Save As dialog box is restricted such that the user can navigate only to the locations and the children of the locations specified in this list. \r\n\r\nTo allow easier access to these approved locations, consider adding them to the Places bar by using the Places Bar Locations setting for the File Open/Save dialog box. If there are no approved locations in the Places bar, the dialog box may not be able to open.\r\n\r\nTo activate Restricted Browsing, use the Restricted Browsing/Activate Restricted Browsing setting. Note: You must set this policy setting first before the \"Activate Restricted Browsing.\"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_listofapprovedlocationspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_listofapprovedlocationspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"3bdeb202974fc000":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanluxembourg","displayName":"German (Luxembourg) (User)","description":"Enables the editing language German (Luxembourg)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanluxembourg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanluxembourg_1","displayName":"Enabled","description":null,"helpText":null}]},"3b9c4784814d7532":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinmontenegro","displayName":"Serbian (Latin, Montenegro) (User)","description":"Enables the editing language \"Serbian (Latin, Montenegro)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinmontenegro_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinmontenegro_1","displayName":"Enabled","description":null,"helpText":null}]},"3b36d1b467beffa3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkactivexobjects","displayName":"Check ActiveX objects (User)","description":"This policy setting determines whether Office checks that an ActiveX object is properly categorized before loading it. \r\n\r\nIf you enable this policy setting, you can select one of the following options:\r\n- Do not check: Office loads ActiveX objects without checking if they are properly categorized.\r\n- Override IE kill bit list: Office uses the category list to override IE kill bit checks. (This is also the default behavior for this policy setting). \r\n- Strict allow list: Office only loads properly categorized ActiveX objects.\r\n\r\nIf you disable or do not configure this policy setting, Office uses the category list to override IE kill bit checks.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkactivexobjects_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkactivexobjects_1","displayName":"Enabled","description":null,"helpText":null}]},"3b4b20b9ac94b97f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10_l_pathcolon274","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"3b34a9afe0f235ab":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions","displayName":"OneNote Spelling Options (User)","description":"These options change the \"When correcting spelling in OneNote\" options that appear in the File tab | Option | Proofing dialog box.","helpText":"","infoUrls":[],"categoryId":"1bfef2c3-a561-4e7a-8f0f-0944bc79c20f","categoryName":"Spelling","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"3be9430ec4a82d7b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_draftsfolderhomepage_l_showassociatedwebpage51","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_draftsfolderhomepage_l_showassociatedwebpage51_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_draftsfolderhomepage_l_showassociatedwebpage51_1","displayName":"True","description":null,"helpText":null}]},"3b14ba32d6e42779":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitrecipients","displayName":"Change the limit for the number of recipients (User)","description":"By default, the limit is 12288 recipients included for an e-mail message when the message is converted from MIME to MAPI. The number can be set to any positive integer. This helps prevent scenarios in which Outlook hangs while attempting conversion.","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitrecipients_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitrecipients_1","displayName":"Enabled","description":null,"helpText":null}]},"3b06cd7ca09ed500":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_restrictlevelofcalendardetails","displayName":"Restrict level of calendar details users can publish (User)","description":"This policy setting controls the level of calendar details that Outlook users can publish to the Microsoft Outlook Calendar Sharing Service. \r\n\r\nIf you enable this policy setting, you can choose from three levels of detail: \r\n\r\n* All options are available - This level of detail is the default configuration. \r\n* Disables 'Full details' \r\n* Disables 'Full details' and 'Limited details' \r\n\r\nIf you disable or do not configure this policy setting, Outlook users can share their calendars with selected others by publishing them to the Microsoft Outlook Calendar Sharing Service. Users can choose from three levels of detail: \r\n\r\n* Availability only - Authorized visitors will see the user's time marked as Free, Busy, Tentative, or Out of Office, but will not be able to see the subjects or details of calendar items. \r\n* Limited details - Authorized visitors can see the user's availability and the subjects of calendar items only. They will not be able to view the details of calendar items. Optionally, users can allow visitors to see the existence of private items. \r\n* Full details - Authorized visitors can see the full details of calendar items. Optionally, users can allow visitors to see the existence of private items.","helpText":"","infoUrls":[],"categoryId":"34c07941-8f52-43ad-b0ca-a7284655afb4","categoryName":"Office.com Sharing Service","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_restrictlevelofcalendardetails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_restrictlevelofcalendardetails_1","displayName":"Enabled","description":null,"helpText":null}]},"3b2d5701d3017a12":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_l_datecolon49","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"3b33ca2bb8df843d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuimaximumzoomlevel","displayName":"Set the maximum zoom level for expand / collapse on-object UI (User)","description":"This policy setting allows you to specify the maximum zoom level percentage at which point the expand/collapse on-object UI stops rendering. Regardless of the value specified for this policy setting, the expand / collapse feature is still available from the context menu for headings.\r\n\r\nIf you enable this policy setting, you can specify a maximum zoom level percentage from 0-500. If you specify a value of 0, the on-object UI never renders.\r\n\r\nIf you disable or do not configure this policy setting, there will be no maximum.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuimaximumzoomlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuimaximumzoomlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"3b0ba95f50421555":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18","displayName":"Trusted Location #18 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/3c.json b/public/intune-definitions/3c.json new file mode 100644 index 000000000000..61c8ecb51d57 --- /dev/null +++ b/public/intune-definitions/3c.json @@ -0,0 +1 @@ +{"3c34767a78ceef0f":{"id":"com.android.devicerestrictionpolicy.personalprofilescreencaptureblocked","displayName":"Block screen capture","description":"If 'True', prevents screen captures during personal and work use. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to get screen captures or screenshots in the personal and work profile. Available for corporate-owned work profile devices (applies at both work and personal profile level).","helpText":null,"infoUrls":[],"categoryId":"990880db-3f64-4436-ab4a-d7d5181dfa5d","categoryName":"Personal Profile","options":[{"id":"com.android.devicerestrictionpolicy.personalprofilescreencaptureblocked_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.personalprofilescreencaptureblocked_false","displayName":"False","description":"false","helpText":null}]},"3c4b8c803f876e1e":{"id":"com.apple.applicationaccess_allowairprintcredentialsstorage","displayName":"Allow AirPrint Credentials Storage","description":"If false, disables keychain storage of user name and password for AirPrint. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowairprintcredentialsstorage_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowairprintcredentialsstorage_true","displayName":"True","description":null,"helpText":null}]},"3c47c16f8d3698a0":{"id":"com.apple.applicationaccess_allowcloudmail","displayName":"Allow Cloud Mail","description":"If false, disables iCloud Mail services. Available in macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudmail_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudmail_true","displayName":"True","description":null,"helpText":null}]},"3c6afa71f530a4db":{"id":"com.apple.applicationaccess_allownews","displayName":"Allow News","description":"If false, disables News. Requires a supervised device. Available in iOS 9 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allownews_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allownews_true","displayName":"True","description":null,"helpText":null}]},"3ca21b9fa03743f5":{"id":"com.apple.managedclient.preferences_adstransparencyenabled","displayName":"Configure if the ads transparency feature is enabled","description":"Lets you decide whether the ads transparency feature is enabled. This behavior only applies to the \"balanced\" mode of tracking prevention, and does not impact \"basic\" or \"strict\" modes. Your users' tracking prevention level can be configured using the \"TrackingPrevention\" policy. AdsTransparencyEnabled will only have an effect if \"TrackingPrevention\" is set to TrackingPreventionBalanced or is not configured.\n\nIf you enable or don't configure this policy, transparency metadata provided by ads will be available to the user when the feature is active.\n\nWhen the feature is enabled, Tracking Prevention will enable exceptions for the associated ad providers that have met Microsoft's privacy standards.\n\nIf you disable this policy, Tracking Prevention will not adjust its behavior even when transparency metadata is provided by ads.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#adstransparencyenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_adstransparencyenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_adstransparencyenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3ccf220721f539eb":{"id":"com.apple.managedclient.preferences_alwaysopenpdfexternally","displayName":"Always open PDF files externally","description":"Disables the internal PDF viewer in Microsoft Edge.\n\nIf you enable this policy Microsoft Edge treats PDF files as downloads and lets users open them with the default application.\n\nIf you don't configure this policy or disable it, Microsoft Edge will open PDF files (unless the user disables it).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#alwaysopenpdfexternally"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_alwaysopenpdfexternally_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_alwaysopenpdfexternally_true","displayName":"Enabled","description":null,"helpText":null}]},"3c336fb3e724f463":{"id":"com.apple.managedclient.preferences_certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes","description":"Disables enforcement of Certificate Transparency requirements for a list of subjectPublicKeyInfo hashes.\n\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed to still be used for Enterprise hosts.\n\nTo disable Certificate Transparency enforcement when this policy is set, one of the following sets of conditions must be met:\n1. The hash is of the server certificate's subjectPublicKeyInfo.\n2. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, that CA certificate is constrained via the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName contains an organizationName attribute.\n3. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate contains the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\n\nA subjectPublicKeyInfo hash is specified by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\n\nIf you disable this policy or don't configure it, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it's not disclosed according to the Certificate Transparency policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#certificatetransparencyenforcementdisabledforcas"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"3cc51cb0e45eb109":{"id":"com.apple.managedclient.preferences_javascriptjitblockedforsites","displayName":"Block JavaScript from using JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are not allowed to run JavaScript JIT (Just In Time) compiler enabled.\n\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\n\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\n\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\n\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitBlockedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT disabled, but fabrikam.com will use the policy from \"DefaultJavaScriptJitSetting\", if set, or default to JavaScript JIT enabled.\n\nIf you don't configure this policy for a site then the policy from \"DefaultJavaScriptJitSetting\" applies to the site, if set, otherwise JavaScript JIT is enabled for the site.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#javascriptjitblockedforsites"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"3c14e3ee2acc2465":{"id":"com.apple.managedclient.preferences_javascriptoptimizerblockedforsites","displayName":"Block JavaScript optimizations on these sites","description":"Allows you to set a list of site url patterns that specify sites for which advanced JavaScript optimizations are disabled.\n\nDisabling JavaScript optimizations will mean that Microsoft Edge may render web content more slowly.\n\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\n\nJavaScript optimization policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\n\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the \"JavaScriptOptimizerBlockedForSites\" policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript optimizations disabled, but fabrikam.com will use the policy from \"DefaultJavaScriptOptimizerSetting\", if set, or default to JavaScript optimizations enabled. Blocklist entries have higher priority than allowlist entries, which in turn have higher priority than the configured default value.\n\nIf you don't configure this policy for a site then the policy from \"DefaultJavaScriptOptimizerSetting\" applies to the site, if set, otherwise JavaScript optimization is enabled for the site.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#javascriptoptimizerblockedforsites"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"3ceb5d6de48511a7":{"id":"com.apple.managedclient.preferences_newtabpagequicklinksenabled","displayName":"Allow quick links on the new tab page","description":"If you enable or don't configure this policy, Microsoft Edge displays quick links on the new tab page, and the user can interact with the control, turning quick links on and off. Enabling this policy does not force quick links to be visible - the user can continue to turn quick links on and off.\n\nIf you disable this policy, Microsoft Edge hides quick links on the new tab page and disables the quick links control in the NTP settings flyout.\n\nThis policy only applies for Microsoft Edge local user profiles, profiles signed in using a Microsoft Account, and profiles signed in using Active Directory. To configure the Enterprise new tab page for profiles signed in using Azure Active Directory, use the M365 admin portal.\n\nRelated policies: \"NewTabPageAllowedBackgroundTypes\", \"NewTabPageContentEnabled\"","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagequicklinksenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpagequicklinksenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpagequicklinksenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3c38a7655b02d878":{"id":"com.apple.managedclient.preferences_syncdisabled","displayName":"Disable synchronization of data using Microsoft sync services","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\n\nIf you don't set this policy or apply it as recommended, users will be able to turn sync on or off. If you apply this policy as mandatory, users will not be able to turn sync on.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#syncdisabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_syncdisabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_syncdisabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3c437422d22faac0":{"id":"com.apple.preference.users_com.apple.preference.users","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"0a9f982a-3515-4728-a231-fa000eb9e550","categoryName":"User Preferences","options":null},"3cfcaf28fbc96a6f":{"id":"com.apple.systempreferences_enabledpreferencepanes","displayName":"Enabled Preference Panes","description":"The list of enabled System Preferences panes.","helpText":null,"infoUrls":[],"categoryId":"c7c1ed5a-a2ec-4237-bbf1-d5723f94d033","categoryName":"System Preferences","options":null},"3c0468130513e073":{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"3c1466be96f03140":{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"3c7ea8f08a985b68":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API","description":"Control whether websites can access nearby Bluetooth devices. You can completely block access or require the site to ask the user each time it wants to access a Bluetooth device.\n\nIf you don't configure this policy, the default value ('AskWebBluetooth', meaning users are asked each time) is used and users can change it.\n\nPolicy options mapping:\n\n* BlockWebBluetooth (2) = Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API\n\n* AskWebBluetooth (3) = Allow sites to ask the user to grant access to a nearby Bluetooth device\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebbluetoothguardsetting_blockwebbluetooth","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebbluetoothguardsetting_askwebbluetooth","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},"3c8f93b7ffed7a76":{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsofteditorsynonymsenabled","displayName":"Synonyms are provided when using Microsoft Editor spell checker","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages, and synonyms can be suggested as an integrated feature.\n\nIf you enable this policy, Microsoft Editor spell checker provides synonyms for suggestions for misspelled words.\n\nIf you disable or don't configure this policy, Microsoft Editor spell checker won't provide synonyms for suggestions for misspelled words.\n\nIf the \"SpellcheckEnabled\" policy or the \"MicrosoftEditorProofingEnabled\" policy are set to disabled, or the user disables spell checking or chooses not to use Microsoft Editor spell checker in the settings page, this policy will have no effect.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsofteditorsynonymsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsofteditorsynonymsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3c6dcf175c9e30ea":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogobackplatecolor","displayName":"Set the company logo backplate color on the new tab page.","description":"By default, the new tab page sets the company logo backplate color to the neutralStrokeActive (#cecece) constant.\n\nYou can configure this policy with a color hex code to change the company logo backplate color on the new tab page.\n\nIf this policy isn't configured, the default neutralStrokeActive (#cecece) color is used as the backplate color.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"3ccf3ea10b0ad3f1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill","description":"This feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is autofilled into a web form. This layer ensures that non-authorized persons can't use saved passwords for autofill. This feature doesn't protect against locally running malware.\n\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\n\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill won't have any authentication flow.\n\nIf you set this policy to 'WithDevicePassword', users have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is autofilled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt is set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\n\nIf you set this policy to 'WithCustomPrimaryPassword', users are asked to create their custom password and to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords get autofilled after successful authentication. The frequency for authentication prompt is set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\n\nIf you set this policy to 'AutofillOff', saved passwords are no longer suggested for autofill.\n\nThe Custom Primary Password feature will be removed with Edge 149. From this version onward, the Custom Primary Password option will no longer be available. Users who currently have this setting enabled will be automatically migrated to the \"Prompt for the device sign-in options\" authentication method. Any associated group policies for Custom Primary Password will also be marked as obsolete.\n\nPolicy options mapping:\n\n* Automatically (0) = Automatically\n\n* WithDevicePassword (1) = With device password\n\n* WithCustomPrimaryPassword (2) = With custom primary password\n\n* AutofillOff (3) = Autofill off\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_automatically","displayName":"Automatically","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_withdevicepassword","displayName":"With device password","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_withcustomprimarypassword","displayName":"With custom primary password","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_autofilloff","displayName":"Autofill off","description":null,"helpText":null}]},"3c588cc1888d3ba8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sensorsallowedforurls","displayName":"Allow access to sensors on specific sites","description":"Define a list of sites, based on URL patterns, that can access and use sensors such as motion and light sensors.\n\nIf you don't configure this policy, the global default value from the \"DefaultSensorsSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor URL patterns that don't match this policy, the following order of precedence is used: The \"SensorsBlockedForUrls\" policy (if there's a match), the \"DefaultSensorsSetting\" policy (if set), or the user's personal settings.\n\nThe URL patterns defined in this policy can't conflict with those configured in the \"SensorsBlockedForUrls\" policy. You can't allow and block a URL.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"3c0d015cbf65c249":{"id":"device_vendor_msft_clouddesktop_enableboottocloudsharedpcmode","displayName":"[Deprecated] Enable Boot To Cloud Shared PC Mode","description":"Setting this node to \"true\" configures boot to cloud for Shared PC mode. Boot to cloud mode enables users to seamlessly sign-in to a Cloud PC. Shared PC mode allows multiple users to sign-in on the device and use for shared purpose. For enabling boot to cloud shared pc feature, Cloud Provider application must be installed on the PC and the user must have a Cloud PC provisioned.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/CloudDesktop-csp/"],"categoryId":"39e4c352-be9c-4e75-8111-8236279c7f1e","categoryName":"Cloud Desktop","options":[{"id":"device_vendor_msft_clouddesktop_enableboottocloudsharedpcmode_false","displayName":"Not configured","description":"Not configured","helpText":null},{"id":"device_vendor_msft_clouddesktop_enableboottocloudsharedpcmode_true","displayName":"Boot to cloud shared pc mode enabled","description":"Boot to cloud shared pc mode enabled","helpText":null}]},"3c928d2a8bd51d33":{"id":"device_vendor_msft_policy_config_admx_credssp_denyfreshcredentials_denyfreshcredentials_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"3cd0d86fd0cc19bd":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werarchive_2","displayName":"Configure Report Archive","description":"This policy setting controls the behavior of the Windows Error Reporting archive.\r\n\r\nIf you enable this policy setting, you can configure Windows Error Reporting archiving behavior. If Archive behavior is set to Store all, all data collected for each error report is stored in the appropriate location. If Archive behavior is set to Store parameters only, only the minimum information required to check for an existing solution is stored. The Maximum number of reports to store setting determines how many reports are stored before older reports are automatically deleted.\r\n\r\nIf you disable or do not configure this policy setting, no Windows Error Reporting information is stored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werarchive-2"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werarchive_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werarchive_2_1","displayName":"Enabled","description":null,"helpText":null}]},"3c22f86f8e5acac2":{"id":"device_vendor_msft_policy_config_admx_icm_searchcompanion_disablefileupdates","displayName":"Turn off Search Companion content file updates","description":"This policy setting specifies whether Search Companion should automatically download content updates during local and Internet searches.\r\n\r\nWhen users search the local computer or the Internet, Search Companion occasionally connects to Microsoft to download an updated privacy policy and additional content files used to format and display results.\r\n\r\nIf you enable this policy setting, Search Companion does not download content updates during searches.\r\n\r\nIf you disable or do not configure this policy setting, Search Companion downloads content updates unless the user is using Classic Search.\r\n\r\nNote: Internet searches still send the search text and information about the search to Microsoft and the chosen search provider. Choosing Classic Search turns off the Search Companion feature completely.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-searchcompanion-disablefileupdates"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_searchcompanion_disablefileupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_searchcompanion_disablefileupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"3cb333b25a03fa73":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpwebprobeurl","displayName":"Specify corporate Website probe URL","description":"This policy setting enables you to specify the URL of the corporate website, against which an active probe is performed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ncsi#admx-ncsi-ncsi-corpwebprobeurl"],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpwebprobeurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpwebprobeurl_1","displayName":"Enabled","description":null,"helpText":null}]},"3c365a89378d7ab0":{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_2","displayName":"Tape Drives: Deny read access","description":"This policy setting denies read access to the Tape Drive removable storage class.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-tapedrives-denyread-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"3ce6749ba82446eb":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_capture","displayName":"Allow audio recording redirection","description":"This policy setting allows you to specify whether users can record audio to the remote computer in a Remote Desktop Services session.\r\nUsers can specify whether to record audio to the remote computer by configuring the remote audio settings on the Local Resources tab in Remote Desktop Connection (RDC). Users can record audio by using an audio input device on the local computer, such as a built-in microphone.\r\n\r\nBy default, audio recording redirection is not allowed when connecting to a computer running Windows Server 2008 R2. Audio recording redirection is allowed by default when connecting to a computer running at least Windows 7, or Windows Server 2008 R2. \r\n\r\nIf you enable this policy setting, audio recording redirection is allowed.\r\n\r\nIf you disable this policy setting, audio recording redirection is not allowed, even if audio recording redirection is specified in RDC.\r\n\r\nIf you do not configure this policy setting, Audio recording redirection is not specified at the Group Policy level.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-audio-capture"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_capture_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_capture_1","displayName":"Enabled","description":null,"helpText":null}]},"3c0c4603c5df42d6":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowscalculator","displayName":"Windows Calculator","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowscalculator_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowscalculator_1","displayName":"True","description":null,"helpText":null}]},"3c5d8a7052f917ef":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally","displayName":"Always Open PDF files externally","description":"Setting the policy to Enabled turns the internal PDF viewer off in Google Chrome, treats PDF files as a download, and lets users open PDFs with the default application.\r\n\r\nSetting the policy to Disabled means that unless users turns off the PDF plugin, it will open PDF files.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can choose whether to open PDF externally or not.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally_1","displayName":"Enabled","description":null,"helpText":null}]},"3cfe73dcbe034a22":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_javascriptjitallowedforsitesdesc","displayName":"Allow JavaScript to use JIT on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"3ce7fd7da7e986c7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant","displayName":"Make Access-Control-Allow-Methods matching in CORS preflight spec conformant","description":"This policy controls whether request methods are uppercased when matching with Access-Control-Allow-Methods response headers in CORS preflight.\r\n\r\nIf the policy is Disabled, request methods are uppercased.\r\nThis is the behavior on or before Google Chrome 108.\r\n\r\nIf the policy is Enabled or not set, request methods are not uppercased, unless matching case-insensitively with DELETE, GET, HEAD, OPTIONS, POST, or PUT.\r\nThis would reject fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: FOO\" response header,\r\nand would accept fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: Foo\" response header.\r\n\r\nNote: request methods \"post\" and \"put\" are not affected, while \"patch\" is affected.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant_1","displayName":"Enabled","description":null,"helpText":null}]},"3c9e66613e2dd7d6":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled","displayName":"Bind Google credentials to a device","description":"Controls the state of the Device Bound Session Credentials feature.\r\n\r\nDevice Bound Session Credentials protects Google authentication cookies against cookie theft by regularly providing a cryptographic proof of device possession to Google servers.\r\n\r\nIf this policy is set to false, Device Bound Session Credentials feature will be disabled.\r\n\r\nIf this policy is set to true, Device Bound Session Credentials feature will be enabled.\r\n\r\nIf this policy is unset, Google Chrome will follow the default rollout process for the Device Bound Session Credentials feature, which means that the feature will be gradually rolled out to an increasing number of users.","helpText":"","infoUrls":[],"categoryId":"f00e9baf-9bbf-48e4-aaac-57410730f016","categoryName":"Sign-in settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3c0b5de2fd2fd716":{"id":"device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp","displayName":"MDM Wins Over GP","description":"If set to 1 then any MDM policy that is set that has an equivalent GP policy will result in GP service blocking the setting of the policy by GP MMC. Setting the value to 0 (zero) or deleting the policy will remove the GP policy blocks restore the saved GP policies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ControlPolicyConflict#mdmwinsovergp"],"categoryId":"4f081af6-7b21-44fc-8dd9-d4e0a61a474d","categoryName":"Control Policy Conflict","options":[{"id":"device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp_0","displayName":"","description":"","helpText":null},{"id":"device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp_1","displayName":"The MDM policy is used and the GP policy is blocked.","description":"The MDM policy is used and the GP policy is blocked.","helpText":null}]},"3cd18345a352d7cb":{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations","displayName":"Set Allowed Storage Locations","description":"A value that can represent one or more storage locations in File Explorer. If not specified, the default is access to all storage locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#setallowedstoragelocations"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_0","displayName":"Access to all storage locations.","description":"Access to all storage locations.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_1","displayName":"Removable Drives","description":"Removable Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_2","displayName":"Sync roots","description":"Sync roots","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_3","displayName":"Removable Drives, Sync roots","description":"Removable Drives, Sync roots","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_4","displayName":"Local Drives","description":"Local Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_5","displayName":"Removable Drives, Local Drives","description":"Removable Drives, Local Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_6","displayName":"Sync Roots, Local Drives","description":"Sync Roots, Local Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_7","displayName":"Removable Drives, Sync Roots, Local Drives","description":"Removable Drives, Sync Roots, Local Drives","helpText":null}]},"3cd89a24c0abff8c":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"3cc557e4dc0b2997":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode","displayName":"User Account Control Type Of Admin Approval Mode","description":"User Account Control: Configure type of Admin Approval Mode. This policy setting controls whether Administrator protection is applied to admin approval mode elevations. If you change this policy setting, you must restart your computer. This policy is only supported on Windows Desktop, not Server. The options are: • Admin Approval Mode is running in legacy mode (default). • Admin Approval Mode is running with Administrator protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_typeofadminapprovalmode"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode_1","displayName":"Legacy Admin Approval Mode","description":"Legacy Admin Approval Mode","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode_2","displayName":"Admin Approval Mode with Administrator protection","description":"Admin Approval Mode with Administrator protection","helpText":null}]},"3cd72aced5ac85b6":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability","displayName":"Configure InPrivate mode availability (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_0","displayName":"InPrivate mode available","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_1","displayName":"InPrivate mode disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_2","displayName":"InPrivate mode forced","description":null,"helpText":null}]},"3c5a08b13d15f7c3":{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext","displayName":"Control Copilot access to page context for Microsoft Entra ID profiles","description":"This policy controls access to page contents for Copilot in the Microsoft Edge sidebar when users are logged into their MSA Copilot account. This policy applies only to Microsoft Entra ID Microsoft Edge profiles. To summarize pages and interact with text selections, it needs to be able to access the page contents. This policy does not apply to MSA Microsoft Edge profiles. This policy doesn't control access for Copilot with enterprise data protection (EDP). Access for Copilot with enterprise data protection (EDP) is controlled by the 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane) policy.\r\n\r\nIf you enable this policy, Copilot will have access to page content when logged in with Entra ID.\r\n\r\nIf this policy is not configured, the default behavior for non-EU countries is that access is initially enabled. For EU countries, the default behavior is that access is initially disabled. In both cases, if the policy is not configured, users can enable or disable Copilot's access to page content using the setting toggle in Microsoft Edge.\r\n\r\nIf you disable this policy, Copilot will not be able to access page context.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},"3c2822a72fdc1002":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype","displayName":"New tab page experience (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype_0","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype_1","displayName":"Office 365 feed experience","description":null,"helpText":null}]},"3cb032b0cceb5d70":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_internetexplorerintegrationwindowopenheightadjustment","displayName":"Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3cea8767b4c12be1":{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients","displayName":"Restrict Unauthenticated RPC clients","description":"This policy setting controls how the RPC server runtime handles unauthenticated RPC clients connecting to RPC servers.\n\nThis policy setting impacts all RPC applications. In a domain environment this policy setting should be used with caution as it can impact a wide range of functionality including group policy processing itself. Reverting a change to this policy setting can require manual intervention on each affected machine. This policy setting should never be applied to a domain controller.\n\nIf you disable this policy setting, the RPC server runtime uses the value of \"Authenticated\" on Windows Client, and the value of \"None\" on Windows Server versions that support this policy setting. \n\nIf you do not configure this policy setting, it remains disabled. The RPC server runtime will behave as though it was enabled with the value of \"Authenticated\" used for Windows Client and the value of \"None\" used for Server SKUs that support this policy setting. \n\nIf you enable this policy setting, it directs the RPC server runtime to restrict unauthenticated RPC clients connecting to RPC servers running on a machine. A client will be considered an authenticated client if it uses a named pipe to communicate with the server or if it uses RPC Security. RPC Interfaces that have specifically requested to be accessible by unauthenticated clients may be exempt from this restriction, depending on the selected value for this policy setting.\n\n-- \"None\" allows all RPC clients to connect to RPC Servers running on the machine on which the policy setting is applied.\n\n-- \"Authenticated\" allows only authenticated RPC Clients (per the definition above) to connect to RPC Servers running on the machine on which the policy setting is applied. Exemptions are granted to interfaces that have requested them.\n\n-- \"Authenticated without exceptions\" allows only authenticated RPC Clients (per the definition above) to connect to RPC Servers running on the machine on which the policy setting is applied. No exceptions are allowed.\n\nNote: This policy setting will not be applied until the system is rebooted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteprocedurecall#remoteprocedurecall-restrictunauthenticatedrpcclients"],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":[{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_1","displayName":"Enabled","description":null,"helpText":null}]},"3c86439e46b4798c":{"id":"device_vendor_msft_policy_config_update_donotenforceenterprisetlscertpinningforupdatedetection","displayName":"Do Not Enforce Enterprise TLS Cert Pinning For Update Detection","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#donotenforceenterprisetlscertpinningforupdatedetection"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_donotenforceenterprisetlscertpinningforupdatedetection_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_donotenforceenterprisetlscertpinningforupdatedetection_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"3c34ae1a7d385132":{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourcefordriverupdates","displayName":"Set Policy Driven Update Source For Driver Updates","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setpolicydrivenupdatesourcefordriverupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourcefordriverupdates_0","displayName":"Detect, download and deploy Driver Updates from Windows Update","description":"Detect, download and deploy Driver Updates from Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourcefordriverupdates_1","displayName":"Detect, download and deploy Driver Updates from Windows Server Update Services (WSUS)","description":"Detect, download and deploy Driver Updates from Windows Server Update Services (WSUS)","helpText":null}]},"3c5e2aa3927a5cec":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_companyname","displayName":"Company Name","description":"The company name that is displayed to the users. CompanyName is required for both EnableCustomizedToasts and EnableInAppCustomization. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display the contact options. Value type is string. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#companyname"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":null},"3cc7fa409e042aba":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation","displayName":"Validation","description":"","helpText":"","infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation_0","displayName":"Windows authentication","description":"Windows Authentication","helpText":null}},"3cdf9bb1c7f343cc":{"id":"externalintelligencesettings_enabled","displayName":"Enabled","description":"If `false`, disables external intelligence integrations.","helpText":null,"infoUrls":[],"categoryId":"d9654cb3-57c8-487c-90a5-454e15336731","categoryName":"External Intelligence Settings","options":[{"id":"externalintelligencesettings_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"externalintelligencesettings_enabled_true","displayName":"True","description":null,"helpText":null}]},"3cec7118ed3fb6c5":{"id":"linux_platformupdatecontrols_schedule_daysofweek","displayName":"Platform Update Schedule Day of Week","description":"Specifies on which day of the week platform updates are allowed. Select 'Every Day' for no restriction, or choose a specific weekday.","helpText":null,"infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":[{"id":"linux_platformupdatecontrols_schedule_daysofweek_0","displayName":"Sunday","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofweek_1","displayName":"Monday","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofweek_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofweek_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofweek_4","displayName":"Thursday","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofweek_5","displayName":"Friday","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofweek_6","displayName":"Saturday","description":null,"helpText":null}]},"3c6faedb545e82c7":{"id":"softwareupdate_beta_requireprogram_description","displayName":"Description","description":"A human readable description of the beta program.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"3ca4c2c993da486c":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_l_generalalignment1","displayName":"General Alignment (User)","description":"","helpText":"","infoUrls":[],"categoryId":"33b9194b-4027-4c23-b662-52f25db7f839","categoryName":"International","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_l_generalalignment1_0","displayName":"Interface mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_l_generalalignment1_1","displayName":"Text mode","description":null,"helpText":null}]},"3cfb71ba5624f7ec":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dba1a547-e288-45ac-8553-27a3b564699e","categoryName":"Custom","options":null},"3c1c88ac78cf0a9a":{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hponlineassistance","displayName":"Turn off Windows Online (User)","description":"This policy setting specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most up-to-date Help content for Windows.\r\n\r\nIf you enable this policy setting, users are prevented from accessing online assistance content from Windows Online.\r\n\r\nIf you disable or do not configure this policy setting, users can access online assistance if they have a connection to the Internet and have not disabled Windows Online from the Help and Support Options page.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-helpandsupport#admx-helpandsupport-hponlineassistance"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hponlineassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hponlineassistance_1","displayName":"Enabled","description":null,"helpText":null}]},"3ceb11d076a3ded5":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-trustedlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"3ccf7adc8d742a7c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability","displayName":"Control where Developer Tools can be used (User)","description":"Setting the policy to 0 (the default) means you can access the developer tools and the JavaScript console, but not in the context of extensions installed by enterprise policy. Setting the policy to 1 means you can access the developer tools and the JavaScript console in all contexts, including that of extensions installed by enterprise policy. Setting the policy to 2 means you can't acess developer tools, and you can't inspect website elements.\r\n\r\nThis setting also turns off keyboard shortcuts and menu or context menu entries to open developer tools or the JavaScript console.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"3cf03375f28054d1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled","displayName":"Enable globally scoped HTTP auth cache (User)","description":"This policy configures a single global per profile cache with HTTP server authentication credentials.\r\n\r\nIf this policy is unset or disabled, the browser will use the default behavior of cross-site auth, which as of version 80, will be to scope HTTP server authentication credentials by top-level site, so if two sites use resources from the same authenticating domain, credentials will need to be provided independently in the context of both sites. Cached proxy credentials will be reused across sites.\r\n\r\nIf the policy is enabled, HTTP auth credentials entered in the context of one site will automatically be used in the context of another.\r\n\r\nEnabling this policy leaves sites open to some types of cross-site attacks, and allows users to be tracked across sites even without cookies by adding entries to the HTTP auth cache using credentials embedded in URLs.\r\n\r\nThis policy is intended to give enterprises depending on the legacy behavior a chance to update their login procedures, and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3c2a4ef37177dbfb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting","displayName":"Disable TLS False Start (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting_1","displayName":"Enabled","description":null,"helpText":null}]},"3c4576e92c0e5a05":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed","displayName":"Allow users to opt in to Safe Browsing extended reporting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3cffbba880dfab78":{"id":"user_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit","displayName":"Allow deleting browsing history on exit (User)","description":"This policy setting allows the automatic deletion of specified items when the last browser window closes. The preferences selected in the Delete Browsing History dialog box (such as deleting temporary Internet files, cookies, history, form data, and passwords) are applied, and those items are deleted.\n\nIf you enable this policy setting, deleting browsing history on exit is turned on.\n\nIf you disable this policy setting, deleting browsing history on exit is turned off.\n\nIf you do not configure this policy setting, it can be configured on the General tab in Internet Options.\n\nIf the \"Prevent access to Delete Browsing History\" policy setting is enabled, this policy setting has no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowdeletingbrowsinghistoryonexit"],"categoryId":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","categoryName":"Delete Browsing History","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"3cfa18e638fa1285":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning","displayName":"Suppress the unsupported OS warning (User)","description":"Suppresses the warning that appears when Microsoft Edge is running on a computer or operating system that is no longer supported.\r\n\r\nIf this policy is false or unset, the warnings will appear on such unsupported computers or operating systems.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_1","displayName":"Enabled","description":null,"helpText":null}]},"3cdf8b9f85b25bc3":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled","displayName":"Microsoft Edge management enabled (User)","description":"Microsoft Edge management service in Microsoft 365 Admin Center lets you set policy and manage users through a Microsoft Edge focused cloud-based management experience. This policy lets you control whether Microsoft Edge management is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will attempt to connect to the Microsoft Edge management service to download and apply policy assigned to the Azure AD account of the user.\r\n\r\nIf you disable this policy, Microsoft Edge will not attempt to connect to the Microsoft Edge management service.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3c114a07e3f12e47":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist","displayName":"HTTP Allowlist (User)","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as '[*.]example.com') that will not be upgraded to HTTPS and will not show an error interstitial if HTTPS-First Mode is enabled. Organizations can use this policy to maintain access to servers that do not support HTTPS, without needing to disable 'AutomaticHttpsDefault' (Configure Automatic HTTPS).\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead, HTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their specific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"3c98209a26daccc9":{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled","displayName":"Enable RAM (memory) resource controls (User)","description":"This policy controls whether users can access the RAM (memory) resource control feature. This feature lets users set an individual limit on how much RAM (memory) the browser can use.\r\n\r\nTo set a specific memory limit, use the 'TotalMemoryLimitMb' (Set limit on megabytes of memory a single Microsoft Edge instance can use) policy.\r\n\r\nIf you enable or don't configure this policy, users can enable resource control and set the amount of RAM that Microsoft Edge can use. Browser performance may be affected by low limits.\r\n\r\nIf you disable this policy, users can't use resource control.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3cda19639d6f8da5":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_forceforegroundpriorityforalltabs","displayName":"Force foreground priority for all tabs (User)","description":"This policy controls whether background web content runs at foreground priority.\r\n\r\nBy default, the browser optimizes resource usage by lowering the scheduling\r\npriority of content in background tabs. This helps improve overall system\r\nresponsiveness and performance for the active tab.\r\n\r\nIf you enable this policy, background web content runs at the same foreground\r\npriority as the active tab, regardless of visibility state.\r\n\r\nIf you disable or don't configure this policy, the browser determines the\r\npriority of web content based on standard heuristics. For example, content\r\nthat is not visible, not playing audio, and not participating in video calls\r\nmay be deprioritized.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_forceforegroundpriorityforalltabs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_forceforegroundpriorityforalltabs_1","displayName":"Enabled","description":null,"helpText":null}]},"3c839f310b23af23":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed","displayName":"Allow users to be alerted if their passwords are found to be unsafe (User)","description":"Allow Microsoft Edge to monitor user passwords.\r\n\r\nIf you enable this policy, the user will get alerted if any of their passwords stored in Microsoft Edge are found to be unsafe. Microsoft Edge will show an alert and this information will also be available in Settings > Passwords > Password Monitor.\r\n\r\nIf you disable this policy, users will not be asked for permission to enable this feature. Their passwords will not be scanned and they will not be alerted either.\r\n\r\nIf you don't configure the policy, users can turn this feature on or off.\r\n\r\nTo learn more about how Microsoft Edge finds unsafe passwords see https://go.microsoft.com/fwlink/?linkid=2133833\r\n\r\nAdditional guidance:\r\n\r\nThis policy can be set as both Recommended as well as Mandatory, however with an important callout.\r\n\r\nMandatory enabled: If the policy is set to Mandatory enabled, the UI in Settings will be disabled but remain in 'On' state, and a briefcase icon will be made visible next to it with this description displayed on hover - \"This setting is managed by your organization.\"\r\n\r\nRecommended enabled: If the policy is set to Recommended enabled, the UI in Settings will remain in 'Off' state, but a briefcase icon will be made visible next to it with this description displayed on hover - \"Your organization recommends a specific value for this setting and you have chosen a different value\"\r\n\r\nMandatory and Recommended disabled: Both these states will work the normal way, with the usual captions being shown to users.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3c321141ec58dd6b":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended","displayName":"Enable sign in click to action dialog (User)","description":"Configure this policy to show sign in click to action dialog on New tab page.\r\n\r\nIf you enable or don't configure this policy, sign in click to action dialog is shown on New tab page.\r\n\r\nIf you disable this policy, sign in click to action dialog isn't shown on the New tab page.","helpText":"","infoUrls":[],"categoryId":"04b46099-4ee5-4def-8e04-569c988057a9","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3c808a607003b8fc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlookadhocreviewing_l_empty400","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlookadhocreviewing_l_empty400_0","displayName":"Enable ad hoc reviewing","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlookadhocreviewing_l_empty400_2","displayName":"Exclude author's e-mail in documents","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlookadhocreviewing_l_empty400_1","displayName":"Disable ad hoc reviewing","description":null,"helpText":null}]},"3c6b036265114576":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltinquickstyles","displayName":"Disable Built-in Quick Styles (User)","description":"Specify whether or not to show the built-in Quick Styles.","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltinquickstyles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltinquickstyles_1","displayName":"Enabled","description":null,"helpText":null}]},"3c843bdf1e9e3a15":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesappaddins","displayName":"Application-specific add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesappaddins_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesappaddins_1","displayName":"True","description":null,"helpText":null}]},"3c7d9e1518b568e1":{"id":"user_vendor_msft_policy_config_onent16v8~policy~l_microsoftofficeonenote~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems290_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b135b86c-b0f4-4cb5-94f4-a6c7ae2013d9","categoryName":"Custom","options":null},"3cad44e9116e1bf6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittouploadchangestoserver","displayName":"Enter seconds to wait to upload changes to server (User)","description":"Specifies number of seconds to wait before uploading changes to the Exchange server.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittouploadchangestoserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittouploadchangestoserver_1","displayName":"Enabled","description":null,"helpText":null}]},"3c6d0901fc74c65e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11","displayName":"Trusted Location #11 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_1","displayName":"Enabled","description":null,"helpText":null}]},"3cd9b6b8b16622fe":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_donotuseonlinemachinetranslation","displayName":"Do not use online machine translation (User)","description":"This policy setting allows you to prevent online machine translation services from being used for the translation of documents and text through the Research pane.\r\n\r\nIf you enable this policy setting, online machine translation services cannot be used to translate documents and text through the Research pane.\r\n\r\nIf you disable or do not configure this policy setting, online machine translation services can be used to translate text through the Research pane.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_donotuseonlinemachinetranslation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_donotuseonlinemachinetranslation_1","displayName":"Enabled","description":null,"helpText":null}]},"3cf8f112da3a3778":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_drawings","displayName":"Show drawings and text boxes on screen (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_drawings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_drawings_1","displayName":"Enabled","description":null,"helpText":null}]},"3cd5ccf650126623":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation","displayName":"Set default compatibility mode on file creation (User)","description":"This policy setting allows you to specify the default compatibility mode when creating new files in Word. There are four modes:\r\n\r\n1. Word 2003: This mode disables features in Word that are not compatible with Word 2003.\r\n2. Word 2007: This mode disables features in Word that are not compatible with Word 2007.\r\n3. Word 2010: This mode disables features in Word that are not compatible with Word 2010.\r\n4. Full functionality mode: This mode ensures that all new features remain enabled. This is the default setting for Word. \r\n\r\nNote: Not all file formats support all four Compatibility Modes. Open XML file formats such as .docx and .dotx, support all four modes.","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation_1","displayName":"Enabled","description":null,"helpText":null}]},"3ce11e3b0a1d9935":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_l_legacyconvertersforworddropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_l_legacyconvertersforworddropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_l_legacyconvertersforworddropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_l_legacyconvertersforworddropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_l_legacyconvertersforworddropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_l_legacyconvertersforworddropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_l_legacyconvertersforworddropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/3d.json b/public/intune-definitions/3d.json new file mode 100644 index 000000000000..25e1ada02e23 --- /dev/null +++ b/public/intune-definitions/3d.json @@ -0,0 +1 @@ +{"3ddedd53546ec980":{"id":"app_privacy_permissiondefaults_generickey_bluetooth","displayName":"Bluetooth","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for use of Bluetooth.\n* `Allow`: The app privacy permission default is set to allow use of Bluetooth.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_bluetooth_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_bluetooth_1","displayName":"Allow","description":null,"helpText":null}]},"3d4e3ea9c358a7e6":{"id":"com.apple.applicationaccess_allowerasecontentandsettings","displayName":"Allow Erase Content And Settings","description":"If false, disables the Erase All Content And Settings option in the Reset UI. Requires a supervised device. Available in iOS 8 and later, and macOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowerasecontentandsettings_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowerasecontentandsettings_true","displayName":"True","description":null,"helpText":null}]},"3d18e6570a0febf6":{"id":"com.apple.applicationaccess_allowlistedappbundleids","displayName":"Allow Listed App Bundle IDs","description":"If present, this property allows only bundle IDs listed in the array to be shown or launchable. Include the value com.apple.webapp to allow all webclips. Requires a supervised device. Available in iOS 9.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"3da4813022f61a9c":{"id":"com.apple.dock_minintoapp-immutable","displayName":"Minimize Into Application Immutable","description":"If true, disables the \"Minimize windows into application icon\" checkbox.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_minintoapp-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_minintoapp-immutable_true","displayName":"True","description":null,"helpText":null}]},"3d1352d6ae8fc927":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_lcid","displayName":"Microsoft Teams LCID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"3db81f609994d7e7":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app","displayName":"Skype for Business","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"3d8f333d94a1512d":{"id":"com.apple.managedclient.preferences_remotedebuggingallowed","displayName":"Allow remote debugging","description":"Controls whether users may use remote debugging.\n\nIf you enable or don't configure this policy, users may use remote debugging by specifying --remote-debug-port and --remote-debugging-pipe command line switches.\n\nIf you disable this policy, users are not allowed to use remote debugging.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#remotedebuggingallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_remotedebuggingallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_remotedebuggingallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"3d6d7e14efa75156":{"id":"com.apple.proxy.http.global_proxypacurl","displayName":"Proxy PAC URL","description":"The URL of the PAC file that defines the proxy configuration. Starting in iOS 13 and macOS 10.15, only URLs that begin with http:// or https:// are allowed.","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":null},"3d46625a198207a8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.backgroundtemplatelistupdatesenabled","displayName":"Enables background updates to the list of available templates for Collections and other features that use templates (Deprecated)","description":"This policy is deprecated because we are moving to a new policy. It won't work in Microsoft Edge as soon as version 104. The new policy to use is \"EdgeAssetDeliveryServiceEnabled\".\n\nLets you enable or disable background updates to the list of available templates for Collections and other features that use templates. Templates are used to extract rich metadata from a webpage when the page is saved to a collection.\n\nIf you enable this setting or the setting is unconfigured, the list of available templates are downloaded in the background from a Microsoft service every 24 hours.\n\nIf you disable this setting the list of available templates are downloaded on demand. This type of download might result in small performance penalties for Collections and other features.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.backgroundtemplatelistupdatesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.backgroundtemplatelistupdatesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3dcb14c4e08c2cf9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxybypasslist","displayName":"Configure proxy bypass rules (Deprecated)","description":"This policy is deprecated, use \"ProxySettings\" instead. It doesn't work in Microsoft Edge version 91.\n\nDefines a list of hosts for which Microsoft Edge bypasses any proxy.\n\nThis policy is applied only if the \"ProxySettings\" policy isn't specified and you selected either fixed_servers or pac_script in the \"ProxyMode\" policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\n\nIf you enable this policy, you can create a list of hosts for which Microsoft Edge doesn't use a proxy.\n\nIf you don't configure this policy, no list of hosts is created for which Microsoft Edge bypasses a proxy. Leave this policy unconfigured if you specified any other method for setting proxy policies.\n\nFor more detailed examples, go to https://go.microsoft.com/fwlink/?linkid=2094936.","helpText":null,"infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"3dd7e775374929ad":{"id":"device_vendor_msft_policy_config_activexcontrols_approvedinstallationsites_approvedactivexinstallsiteslist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":null},"3daaafd2182799ae":{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashpublication","displayName":"Hash Publication for BranchCache","description":"This policy setting specifies whether a hash generation service generates hashes, also called content information, for data that is stored in shared folders. This policy setting must be applied to server computers that have the File Services role and both the File Server and the BranchCache for Network Files role services installed.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, hash publication settings are not applied to file servers. In the circumstance where file servers are domain members but you do not want to enable BranchCache on all file servers, you can specify Not Configured for this domain Group Policy setting, and then configure local machine policy to enable BranchCache on individual file servers. Because the domain Group Policy setting is not configured, it will not over-write the enabled setting that you use on individual servers where you want to enable BranchCache.\r\n\r\n- Enabled. With this selection, hash publication is turned on for all file servers where Group Policy is applied. For example, if Hash Publication for BranchCache is enabled in domain Group Policy, hash publication is turned on for all domain member file servers to which the policy is applied. The file servers are then able to create content information for all content that is stored in BranchCache-enabled file shares.\r\n\r\n- Disabled. With this selection, hash publication is turned off for all file servers where Group Policy is applied.\r\n\r\nIn circumstances where this policy setting is enabled, you can also select the following configuration options:\r\n\r\n- Allow hash publication for all shared folders. With this option, BranchCache generates content information for all content in all shares on the file server. \r\n\r\n- Allow hash publication only for shared folders on which BranchCache is enabled. With this option, content information is generated only for shared folders on which BranchCache is enabled. If you use this setting, you must enable BranchCache for individual shares in Share and Storage Management on the file server.\r\n\r\n- Disallow hash publication on all shared folders. With this option, BranchCache does not generate content information for any shares on the computer and does not send content information to client computers that request content.\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-lanmanserver#admx-lanmanserver-pol-hashpublication"],"categoryId":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashpublication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashpublication_1","displayName":"Enabled","description":null,"helpText":null}]},"3d279e844330011b":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_allowonpublicnet","displayName":"Allow operation while in public network","description":null,"helpText":"","infoUrls":[],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_allowonpublicnet_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_allowonpublicnet_1","displayName":"True","description":null,"helpText":null}]},"3d8356d6c5229f2e":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisablerealtimemonitoring","displayName":"Configure local setting override to turn on real-time protection","description":"This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisablerealtimemonitoring"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisablerealtimemonitoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisablerealtimemonitoring_1","displayName":"Enabled","description":null,"helpText":null}]},"3d9150236b78d8f7":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_enabledeadgwdetect","displayName":"MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)","description":"MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-enabledeadgwdetect"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_enabledeadgwdetect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_enabledeadgwdetect_1","displayName":"Enabled","description":null,"helpText":null}]},"3db9f3cc1e69bf7d":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_buildoptions","displayName":"Policy creation type","description":"Select Enter XML data to type or paste an XML property list that contains your Application Control policy. Select Use built-in controls to choose from toggles exposed in this Application Control policy. Setting this to Not Configured will result in default behaviour on the device with no added options from the ApplicationControl CSP on the device.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_buildoptions_upload_xml_selected","displayName":"XML upload","description":"XML upload","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_buildoptions_built_in_controls_selected","displayName":"Built-in controls","description":"Built-in controls","helpText":null}]},"3d17f9f63f3f8eb9":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1","displayName":"Publishing Server 1 Settings","description":" Publishing Server Display Name: Displays the name of publishing server.\n \n Publishing Server URL: Displays the URL of publishing server.\n \n Global Publishing Refresh: Enables global publishing refresh (Boolean).\n \n Global Publishing Refresh On Logon: Triggers a global publishing refresh on logon (Boolean).\n \n Global Publishing Refresh Interval: Specifies the publishing refresh interval using the GlobalRefreshIntervalUnit. To disable package refresh, select 0.\n \n Global Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n \n User Publishing Refresh: Enables user publishing refresh (Boolean).\n \n User Publishing Refresh On Logon: Triggers a user publishing refresh on logon (Boolean).\n \n User Publishing Refresh Interval: Specifies the publishing refresh interval using the UserRefreshIntervalUnit. To disable package refresh, select 0.\n \n User Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-publishingallowserver1"],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_1","displayName":"Enabled","description":null,"helpText":null}]},"3d0f80d2d76f47f1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls","displayName":"Block access to sensors on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't access sensors like motion and light sensors.\r\n\r\nLeaving the policy unset means DefaultSensorsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nIf the same URL pattern exists in both this policy and the SensorsAllowedForUrls policy, this policy is prioritized and access to motion or light sensors will be blocked.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"3d393b268718cbfa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode","displayName":"Print PostScript Mode","description":"Controls how Google Chrome prints on Microsoft® Windows®.\r\n\r\nWhen printing to a PostScript printer on Microsoft® Windows® different PostScript generation methods can affect printing performance.\r\n\r\nWhen this policy is set to Default, Google Chrome will use a set of default options when generating PostScript. For text in particular, text will always be rendered using Type 3 fonts.\r\n\r\nWhen this policy is set to Type42, Google Chrome will render text using Type 42 fonts if possible. This should increase printing speed for some PostScript printers.\r\n\r\nWhen this policy is not set, Google Chrome will be in Default mode.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_1","displayName":"Enabled","description":null,"helpText":null}]},"3df199e10bb8aac0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl","displayName":"Enterprise web store URL (deprecated)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_1","displayName":"Enabled","description":null,"helpText":null}]},"3dae503540726fba":{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_sourceautoupdateinterval","displayName":"Source Auto Update Interval In Minutes","description":"","helpText":"","infoUrls":[],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":null},"3d02f6b70293060e":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate","displayName":"Locked-Down Local Machine Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownlocalmachinezonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"3d7ff327973e3b7e":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowaccesstodatasources"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"3d78092d023bbad5":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowuserdatapersistence"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"3db2a92c0714d439":{"id":"device_vendor_msft_policy_config_kioskbrowser_enablehomebutton","displayName":"Enable Home Button","description":"Enable/disable kiosk browser's home button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enablehomebutton"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":[{"id":"device_vendor_msft_policy_config_kioskbrowser_enablehomebutton_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_enablehomebutton_0","displayName":"Disable","description":"Disable","helpText":null}]},"3df194e57c550775":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin","displayName":"Interactive Logon Do Not Display Last Signed In","description":"Interactive logon: Don't display last signed-in This security setting determines whether the Windows sign-in screen will show the username of the last person who signed in on this PC. If this policy is enabled, the username will not be shown. If this policy is disabled, the username will be shown. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_donotdisplaylastsignedin"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin_0","displayName":"Disabled (username will be shown)","description":"Disabled (username will be shown)","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin_1","displayName":"Enabled (username will not be shown)","description":"Enabled (username will not be shown)","helpText":null}]},"3df3f4eed18e84d7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun","displayName":"Automatically import another browser's data and settings at first run","description":"If you enable this policy, all supported datatypes and settings from the specified browser will be silently and automatically imported at first run. During the First Run Experience, the import section will also be skipped.\r\n\r\nThe browser data from Microsoft Edge Legacy will always be silently migrated at the first run, irrespective of the value of this policy. You can use the following values for this policy:\r\n\r\n* 0 = Automatically imports all supported datatypes and settings from the default browser\r\n\r\n* 1 = Automatically imports all supported datatypes and settings from Internet Explorer\r\n\r\n* 2 = Automatically imports all supported datatypes and settings from Google Chrome\r\n\r\n* 3 = Automatically imports all supported datatypes and settings from Safari\r\n\r\n* 4 = Disables automatic import, and the import section of the first-run experience is skipped\r\n\r\n* 5 = Automatically imports all supported datatypes and settings from Mozilla Firefox\r\n\r\nIf this policy is set to the default value (0), then the datatypes corresponding to the default browser on the managed device will be imported.\r\n\r\nIf the browser specified as the value of this policy is not present in the managed device, Microsoft Edge will simply skip the import without any notification to the user.\r\n\r\nIf you set this policy to 'DisabledAutoImport' (4), the import section of the first-run experience is skipped entirely and Microsoft Edge doesn't import browser data and settings automatically.\r\n\r\nIf this policy is set to the value of Internet Explorer (1), the following datatypes will be imported from Internet Explorer:\r\n1. Favorites or bookmarks\r\n2. Saved passwords\r\n3. Search engines\r\n4. Browsing history\r\n5. Home page\r\n\r\nIf this policy is set to the value of Google Chrome (2), the following datatypes will be imported from Google Chrome:\r\n1. Favorites\r\n2. Saved passwords\r\n3. Addresses and more\r\n4. Payment info\r\n5. Browsing history\r\n6. Settings\r\n7. Pinned and Open tabs\r\n8. Extensions\r\n9. Cookies\r\n\r\nNote: For more details on what is imported from Google Chrome, please see https://go.microsoft.com/fwlink/?linkid=2120835\r\n\r\nIf this policy is set to the value of Safari (3), the following datatypes will be imported from Safari:\r\n1. Favorites or bookmarks\r\n2. Browsing history\r\n\r\nStarting with Microsoft Edge version 83, if this policy is set to the value of Mozilla Firefox (5), the following datatypes will be imported from Mozilla Firefox:\r\n1. Favorites or bookmarks\r\n2. Saved passwords\r\n3. Addresses and more\r\n4. Browsing History\r\n\r\nIf you want to restrict specific datatypes from getting imported on the managed devices, you can use this policy with other policies such as 'ImportAutofillFormData' (Allow importing of autofill form data), 'ImportBrowserSettings' (Allow importing of browser settings), 'ImportFavorites' (Allow importing of favorites), and etc.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_1","displayName":"Enabled","description":null,"helpText":null}]},"3da75a626839d477":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled","displayName":"Text prediction enabled by default","description":"The Microsoft Turing service uses natural language processing to generate predictions for long-form editable text fields on web pages.\r\n\r\nIf you enable or don't configure this policy, text predictions will be provided for eligible text fields.\r\n\r\nIf you disable this policy, text predictions will not be provided in eligible text fields. Sites may still provide their own text predictions.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3d084bd044519ee8":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_2","displayName":"Do not allow any site to load blockable mixed content","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_3","displayName":"Allow users to add exceptions to allow blockable mixed content","description":null,"helpText":null}]},"3ddf6d6c0487c67e":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_autoopenallowedforurlsdesc","displayName":"URLs where AutoOpenFileTypes can apply (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3df7376fb8903a65":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_allowgamesmenu","displayName":"Allow users to access the games menu","description":"If you enable or don't configure this policy, users can access the games menu.\r\n\r\nIf you disable this policy, users won't be able to access the games menu.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_allowgamesmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_allowgamesmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"3d8e8d289bfb2f94":{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors","displayName":"Disable Agent Connectors (Windows Insiders only)","description":"Enable or Disable Agent Connectors.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableagentconnectors"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors_1","displayName":"Force Enable.","description":"Force Enable.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors_2","displayName":"Force Disable.","description":"Force Disable.","helpText":null}]},"3dbcb5a9159347cb":{"id":"enrollment_autopilot_dpp_timeout","displayName":"Minutes allowed before showing installation error","description":"","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":null},"3dbcdca25919a8e0":{"id":"settings_item_softwareupdatesettings","displayName":"Software Update Settings (Deprecated)","description":"A dictionary that contains software update settings. This setting doesn't support user enrollment. Available in iOS 14.5 and later.","helpText":null,"infoUrls":[],"categoryId":"724d930a-7a3c-4171-a17c-431cee336518","categoryName":"Software Update Settings","options":null},"3d6d6225000f35db":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1","displayName":"Remove \"Make Available Offline\" for these files and folders (User)","description":"This policy setting allows you to manage a list of files and folders for which you want to block the \"Make Available Offline\" command.\r\n\r\nIf you enable this policy setting, the \"Make Available Offline\" command is not available for the files and folders that you list. To specify these files and folders, click Show. In the Show Contents dialog box, in the Value Name column box, type the fully qualified UNC path to the file or folder. Leave the Value column field blank.\r\n\r\nIf you disable this policy setting, the list of files and folders is deleted, including any lists inherited from lower precedence GPOs, and the \"Make Available Offline\" command is displayed for all files and folders.\r\n\r\nIf you do not configure this policy setting, the \"Make Available Offline\" command is available for all files and folders.\r\n\r\nNotes:\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy settings are combined, and the \"Make Available Offline\" command is unavailable for all specified files and folders.\r\n\r\nThe \"Make Available Offline\" command is called \"Always available offline\" on computers running Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 7, or Windows Vista.\r\n\r\nThis policy setting does not prevent files from being automatically cached if the network share is configured for \"Automatic Caching.\" It only affects the display of the \"Make Available Offline\" command in File Explorer.\r\n\r\nIf the \"Remove 'Make Available Offline' command\" policy setting is enabled, this setting has no effect.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nopinfiles-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_1","displayName":"Enabled","description":null,"helpText":null}]},"3dc52704ba2677fa":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_applicationlocalevalue","displayName":"Application locale (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"3d9ccdef99d3abb7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled","displayName":"Allow the audio sandbox to run (User)","description":"This policy controls the audio process sandbox.\r\nIf this policy is enabled, the audio process will run sandboxed.\r\nIf this policy is disabled, the audio process will run unsandboxed and the WebRTC audio-processing module will run in the renderer process.\r\nThis leaves users open to security risks related to running the audio subsystem unsandboxed.\r\nIf this policy is not set, the default configuration for the audio sandbox will be used, which may differ per platform.\r\nThis policy is intended to give enterprises flexibility to disable the audio sandbox if they use security software setups that interfere with the sandbox.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3dbeb3c72a78e3a0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled","displayName":"Enable guest mode in browser (User)","description":"If this policy is set to true or not configured, Google Chrome will enable guest logins. Guest logins are Google Chrome profiles where all windows are in incognito mode.\r\n\r\nIf this policy is set to false, Google Chrome will not allow guest profiles to be started.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3d486714fbe808e7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"3dff66cf69affaa8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed","displayName":"Allow collection of WebRTC event logs from Google services (User)","description":"Setting the policy to Enabled means Google Chrome can collect WebRTC event logs from Google services such as Hangouts Meet and upload them to Google. These logs have diagnostic information for debugging issues with audio or video meetings in Google Chrome, such as the time and size of RTP packets, feedback about congestion on the network, and metadata about time and quality of audio and video frames. These logs have no audio or video content from the meeting. To make debugging easier, Google might associate these logs, by means of a session ID, with other logs collected by the Google service itself.\r\n\r\nSetting the policy to Disabled results in no collection or uploading of such logs.\r\n\r\nLeaving the policy unset on versions up to and including M76 means Google Chrome defaults to not being able to collect and upload these logs. Starting at M77, Google Chrome defaults to being able to collect and upload these logs from most profiles affected by cloud-based, user-level enterprise policies. From M77 up to and including M80, Google Chrome can also collect and upload these logs by default from profiles affected by Google Chrome on-premise management.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3ddb2618c208fddc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist_proxybypasslist","displayName":"Comma-separated list of proxy bypass rules (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"3d90933617b0ef93":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced~l_weboptions~l_general_l_loadpicturesfromwebpagesnotcreatedinexcel","displayName":"Load pictures from Web pages not created in Excel (User)","description":"This policy setting controls whether Excel loads graphics when opening Web pages that were not created in Excel. It configures the \"Load pictures from Web pages not created in Excel\" option under the File tab | Options | Advanced | General | Web Options... | General tab.\r\n \r\nIf you enable or do not configure this policy setting, Excel loads any graphics that are included in the pages, regardless of whether they were originally created in Excel.\r\n \r\nIf you disable this policy setting, Excel will not load any pictures from Web pages that were not created in Excel.","helpText":"","infoUrls":[],"categoryId":"b90fb0dc-b8c1-4fc3-b9f9-dfbda4b3f03d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced~l_weboptions~l_general_l_loadpicturesfromwebpagesnotcreatedinexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced~l_weboptions~l_general_l_loadpicturesfromwebpagesnotcreatedinexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"3dd0fdf0c5c2d4ed":{"id":"user_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode","displayName":"Enable global window list in Internet Explorer mode (User)","description":"This setting allows Internet Explorer mode to use the global window list that enables sharing state with other applications.\nThe setting will take effect only when Internet Explorer 11 is disabled as a standalone browser.\n\nIf you enable this policy, Internet Explorer mode will use the global window list.\n\nIf you disable or don’t configure this policy, Internet Explorer mode will continue to maintain a separate window list.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2102921\nTo learn more about disabling Internet Explorer 11 as a standalone browser, see https://go.microsoft.com/fwlink/?linkid=2168340","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-enableglobalwindowlistiniemode"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_1","displayName":"Enabled","description":null,"helpText":null}]},"3d22c76cbbb3009b":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols","displayName":"Download signed ActiveX controls (User)","description":"This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\n\nIf you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.\n\nIf you disable the policy setting, signed controls cannot be downloaded.\n\nIf you do not configure this policy setting, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedownloadsignedactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"3da09864631a21eb":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowscriptlets"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"3dffc3932818fcba":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowsmartscreenie"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"3d911589a90015a5":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows","displayName":"Allow script-initiated windows without size or position constraints (User)","description":"This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.\n\nIf you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.\n\nIf you do not configure this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptinitiatedwindows"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"3d110716bf1221cc":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed","displayName":"Allow users to proceed from the HTTPS warning page (User)","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\r\n\r\nIf you enable or don't configure (default) this policy, users can click through these warning pages.\r\n\r\nIf you disable this policy, users are blocked from clicking through any warning page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3dec46ad772d452d":{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton","displayName":"Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription (User)","description":"This policy lets the native PDF viewer in Microsoft Edge show a button that lets a user looking for advanced digital document features to discover and subscribe to premium offerings. This is done via the Acrobat extension.\r\n\r\nIf you enable or don't configure this policy, the button will show up on the native PDF viewer in Microsoft Edge. A user will be able to buy Adobe subscription to access their premium offerings.\r\n\r\nIf you disable this policy, the button won't be visible on the native PDF viewer in Microsoft Edge. A user won't be able to discover Adobe's advanced PDF tools or buy their subscriptions.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"3de6083e6bdda9dd":{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled","displayName":"Enables default browser settings campaigns (User)","description":"This policy enables the default browser settings campaign. If a user clicks to accept the campaign, their default browser and/or default search engine will be changed to Microsoft Edge and Microsoft Bing, respectively. If the user dismisses the campaign, the user's browser settings will remain unchanged.\r\n\r\nIf you enable or don't configure this policy, users will be prompted to set Microsoft Edge as the default browser and Microsoft Bing as the default search engine, if they do not have those browser settings.\r\n\r\nIf you disable this policy, users will not be prompted to set Microsoft Edge as the default browser, or to set Microsoft Bing as the default search engine.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3d80624d3852fa29":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_webappsettings","displayName":"Web App management settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3d8d6b30d083823b":{"id":"user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist","displayName":"Control which apps cannot be opened in Microsoft Edge sidebar (User)","description":"Define a list of sites, based on URL patterns, that cannot be opened in sidebar.\r\n\r\nIf you don't configure this policy, a user can open any app in sidebar.\r\n\r\nIf the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy is disabled, this list isn't used and no sidebar can be opened.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nNote: A blocklist value of '*' means all apps are blocked unless they are explicitly listed in the 'EdgeSidebarAppUrlHostAllowList' (Allow specific apps to be opened in Microsoft Edge sidebar) policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"3d222e69b663786e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_blockedextensions","displayName":"Block additional file extensions for OLE embedding (User)","description":"This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus or Visio Pro for Office 365.\r\n\r\nThis policy setting allows you to specify additional file extensions that Office will block when they are embedded as an OLE package in an Office file by using the Object Packager control.\r\n\r\nBy default, Office blocks certain file extensions. For a list of those file extensions, go to https://go.microsoft.com/fwlink/?linkid=847759.\r\n\r\nImportant: Malicious scripts and executables can be embedded as an OLE package and can cause harm if clicked by the user.\r\n\r\nIf you enable this policy setting, enter the additional file extensions to block, separated by semicolons. For example, py;rb.\r\n\r\nIf you disable or don’t configure this policy setting, the default set of file extensions will be blocked.\r\n\r\nIf you want to allow certain file extensions, enable the \"Allow file extensions for OLE embedding\" policy setting. Extensions added to this policy setting will take precedence over extensions in \"Allow file extensions for OLE embedding\"\r\n ","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_blockedextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_blockedextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"3d45974309fe2a8f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_setdefaultimagedirctory_l_setdefaultimagedirctorypart","displayName":"Last-used signature image directory: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"23c09e06-5bee-4b20-a391-36549bf0f620","categoryName":"Signing","options":null},"3de5b0b8bdfd3648":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifyratetosampleaudiobitssecond_l_bitssecond","displayName":"Bits/Second: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":null},"3da3479ad0b5b9cd":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_donotpruneversionsovertime","displayName":"Do not prune versions over time (User)","description":"This policy setting allows you to turn off OneNote's automatic pruning. With a 2016 format notebook, OneNote will automatically store previous versions of the pages in the notebook, and it will also store a recycle bin for all of the deleted pages and sections.\r\n\r\nIf you enable this policy setting, OneNote will not prune previous versions.\r\n\r\nIf you disable or do not configure this policy setting, OneNote will prune previous versions. The default value is to prune versions over time. You should only enable this policy setting if OneNote should not prune previous versions.","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_donotpruneversionsovertime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_donotpruneversionsovertime_1","displayName":"Enabled","description":null,"helpText":null}]},"3dd34cb7b7716fda":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_cacheothersmail","displayName":"Disable shared mail folder caching (User)","description":"This policy setting allows you to control the caching of shared mail folders.\r\n\r\nIf you enable this policy setting, Outlook will only cache shared non-mail folders.\r\n\r\nIf you disable or do not configure this policy setting, shared mail and non-mail folders you have access to are cached in your .ost file when you add another mailbox to your profile.","helpText":"","infoUrls":[],"categoryId":"fcc8ad48-a1e7-4cba-adae-7c916cbbc897","categoryName":"Delegates","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_cacheothersmail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_cacheothersmail_1","displayName":"Enabled","description":null,"helpText":null}]},"3da87f5d1f9a01b5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_emptydeleteditemsfolder","displayName":"Empty the Deleted Items folder when Outlook closes (User)","description":"By default, the Deleted Items folder is not emptied when users exit Outlook. By enabling this setting, you can change this behavior so that the Deleted Items folder is emptied when Outlook closes.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_emptydeleteditemsfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_emptydeleteditemsfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"3de34f0cca493051":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_waitxxxsecondsbeforemarkingitemsasread","displayName":"Wait xxx seconds before marking items as read: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":null},"3d5e08ce9c3644c6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_archiveordeleteolditems","displayName":"Archive or delete old items (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_archiveordeleteolditems_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_archiveordeleteolditems_1","displayName":"True","description":null,"helpText":null}]},"3d3d9538fd9bfae6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_checkforduplicatecontacts","displayName":"Check for duplicate contacts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_checkforduplicatecontacts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_checkforduplicatecontacts_1","displayName":"True","description":null,"helpText":null}]},"3df775e93f4bb747":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disablerpctransportfallback","displayName":"Disable connection fallback between protocols (User)","description":"This policy setting allows you to control the connection transport fallback behavior in Outlook when it attempts to connect to a Microsoft Exchange Server.\r\n \r\nThis policy setting applies if you are using Outlook Anywhere (RPC over HTTP) to connect to a Microsoft Exchange Server. There are two Outlook profile settings on the Microsoft Exchange Proxy Settings dialog box (accessed through the Control Panel or Account Settings), that configure the default connection transport fallback behavior.\r\n \r\n- On fast networks, connect using HTTP first, then connect using TCP/IP\r\n- On slow networks, connect using HTTP first, then connect using TCP/IP\r\n \r\nFor example, if you are on a fast network and you enable the “On fast networks, connect using HTTP first, then connect using TCP/IP” setting in the Microsoft Exchange Proxy Settings dialog box, Outlook first attempts to connect to the Exchange Server using HTTP. If Outlook is unable to connect using HTTP, then it attempts to connect using TCP/IP.\r\n \r\nIf you enable this policy setting, if Outlook connection attempts with Microsoft Exchange Server fail, Outlook does not fallback to the TCP/IP protocol, regardless of what is specified in the Microsoft Exchange Proxy Settings dialog box. \r\n\r\nIf you disable or do not configure this policy setting, Outlook connection attempts with Microsoft Exchange Server can fallback from either TCP/IP to HTTP, or HTTP to TCP/IP, depending on the settings specified in the Microsoft Exchange Proxy Settings dialog box.\r\n","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disablerpctransportfallback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disablerpctransportfallback_1","displayName":"Enabled","description":null,"helpText":null}]},"3de8278a65106f67":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_defaultwebcalsubscriptions","displayName":"Default Internet Calendar subscriptions (User)","description":"This policy setting allows you to deploy Internet Calendar subscriptions.\r\n\r\nIf you enable this policy setting, the URLs listed here will be read and the corresponding Internet Calendar subscriptions will be added to each of the user's profiles. The name you specify here will not be used as the name of the Internet Calendar subscription.\r\n\r\nIf you disable or do not configure this policy setting users will not have any default Internet Calendar subscriptions.","helpText":"","infoUrls":[],"categoryId":"060e7533-6c2f-4ed1-9173-f3de58de4bed","categoryName":"Internet Calendars","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_defaultwebcalsubscriptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_defaultwebcalsubscriptions_1","displayName":"Enabled","description":null,"helpText":null}]},"3df69c5a6c50fccd":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_l_powerpoint2007andlaterpresentationsshowstemplatesthemesandaddinfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_l_powerpoint2007andlaterpresentationsshowstemplatesthemesandaddinfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_l_powerpoint2007andlaterpresentationsshowstemplatesthemesandaddinfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_l_powerpoint2007andlaterpresentationsshowstemplatesthemesandaddinfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_l_powerpoint2007andlaterpresentationsshowstemplatesthemesandaddinfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_l_powerpoint2007andlaterpresentationsshowstemplatesthemesandaddinfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_l_powerpoint2007andlaterpresentationsshowstemplatesthemesandaddinfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"3d2083054c54a9da":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjandmoveremaining","displayName":"And move start of remaining parts back to status date (User)","description":"Moves the remaining portion of a task back to start at the status date.\r\n\r\nIf you enable this setting, the remaining portion of the task moves back to start at the status date.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjandmoveremaining_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjandmoveremaining_1","displayName":"Enabled","description":null,"helpText":null}]},"3d28333999cb3b46":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview","displayName":"Default View (User)","description":"Specifies the view that Project displays at startup.\r\n \r\nIf you enable this setting, you can set the default view that is displayed at startup.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","categoryName":"View","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdefaultview_1","displayName":"Enabled","description":null,"helpText":null}]},"3d1e1bc9f0425ffd":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_general_l_showthenewtemplategallerywhenstartingpublisher","displayName":"Show the New template gallery when starting Publisher (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"1a0386fd-354b-441e-a0d6-1523c209dae7","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_general_l_showthenewtemplategallerywhenstartingpublisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_general_l_showthenewtemplategallerywhenstartingpublisher_1","displayName":"Enabled","description":null,"helpText":null}]},"3ddd97c4a7cda9b9":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_save_l_saveautorecoverinfoevery","displayName":"Save AutoRecover info every (minutes) (User)","description":"This policy setting allows you to specify the Save Autorecover interval in minutes.\r\n\r\nIf you enable this policy setting, you may specify the Save Autorecover interval in minutes (valid range: 1-120).\r\n\r\nIf you disable or do not configure this policy setting, the interval specified in the UI will be used.\r\n","helpText":"","infoUrls":[],"categoryId":"038b49c9-4f13-4ace-be8d-bd076bffa23e","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_save_l_saveautorecoverinfoevery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_save_l_saveautorecoverinfoevery_1","displayName":"Enabled","description":null,"helpText":null}]},"3d18cabf8b2f4900":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_customizableerrormessages_l_listoferrormessagestocustomize","displayName":"List of error messages to customize (User)","description":"Defines a list of custom error messages to activate.","helpText":"","infoUrls":[],"categoryId":"12f9c95a-3ff1-49ef-bc8e-8d2b5ef4b06e","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_customizableerrormessages_l_listoferrormessagestocustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_customizableerrormessages_l_listoferrormessagestocustomize_1","displayName":"Enabled","description":null,"helpText":null}]},"3df3ec4dcc917b1e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems174","displayName":"Disable commands (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"categoryId":"0f42fc50-66c8-4b70-9904-64f8d662c930","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems174_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems174_1","displayName":"Enabled","description":null,"helpText":null}]},"3da4bf09ffb5c1ce":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_donotuseonlinetranslationdictionaries","displayName":"Use online translation dictionaries (User)","description":"This policy setting allows you to prevent online dictionaries from being used for the translation of text through the Research pane.\r\n\r\nIf you enable or do not configure this policy setting, the online dictionaries can be used to translate text through the Research pane.\r\n\r\nIf you disable this policy setting, the online dictionaries cannot be used to translate text through the Research pane.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_donotuseonlinetranslationdictionaries_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_donotuseonlinetranslationdictionaries_1","displayName":"Enabled","description":null,"helpText":null}]},"3dbc2246469f642f":{"id":"vendor_msft_firewall_mdmstore_privateprofile_disableunicastresponsestomulticastbroadcast","displayName":"Disable Unicast Responses To Multicast Broadcast","description":"This value is used as an on/off switch. If it is true, unicast responses to multicast broadcast traffic is blocked. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_disableunicastresponsestomulticastbroadcast_false","displayName":"False","description":"Unicast Responses Not Blocked","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_disableunicastresponsestomulticastbroadcast_true","displayName":"True","description":"Unicast Responses Blocked","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/3e.json b/public/intune-definitions/3e.json new file mode 100644 index 000000000000..bcae228bae8d --- /dev/null +++ b/public/intune-definitions/3e.json @@ -0,0 +1 @@ +{"3e593fa4acc33ad2":{"id":"audioaccessory_temporarypairing_configuration_unpairingtime_policy","displayName":"Policy","description":"A string that specifies the device's unpairing policy.\n- `None`: The device doesn't automatically unpair. Use this only with a return to service device that you erase and reenroll when assigning it from one user to another.\n- `Hour`: The device automatically unpairs temporarily paired audio accessories at the local time that the `Hour` key specifies.","helpText":null,"infoUrls":[],"categoryId":"a42e2248-d2dc-4476-a92d-d152fd67e04b","categoryName":"Audio Accessory","options":[{"id":"audioaccessory_temporarypairing_configuration_unpairingtime_policy_0","displayName":"None","description":null,"helpText":null},{"id":"audioaccessory_temporarypairing_configuration_unpairingtime_policy_1","displayName":"Hour","description":null,"helpText":null}]},"3e75fa57f7e52b00":{"id":"com.apple.applicationaccess_forceauthenticationbeforeautofill","displayName":"Force Authentication Before Auto Fill","description":"If true, the user must authenticate before passwords or credit card information can be autofilled in Safari and Apps. If this restriction isn’t enforced, the user can toggle this feature in Settings. Only supported on devices with Face ID or Touch ID. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceauthenticationbeforeautofill_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceauthenticationbeforeautofill_true","displayName":"True","description":null,"helpText":null}]},"3e18f6be07044661":{"id":"com.apple.managedclient.preferences_allowedthreats","displayName":"Allowed threats","description":"List of threats (identified by their name) that are not blocked by the product and are instead allowed to run.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#allowed-threats"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"3e91ef692ae5361e":{"id":"com.apple.managedclient.preferences_encryptedclienthelloenabled","displayName":"TLS Encrypted ClientHello Enabled","description":"Encrypted ClientHello (ECH) is an extension to TLS that encrypts the sensitive fields of ClientHello to improve privacy.\n\nIf ECH is enabled, Microsoft Edge might or might not use ECH depending on server support, the availability of the HTTPS DNS record, or the rollout status.\n\nIf you enable or do not configure this policy, Microsoft Edge will follow the default rollout process for ECH.\n\nIf this policy is disabled, Microsoft Edge will not enable ECH.\n\nBecause ECH is an evolving protocol, Microsoft Edge's implementation is subject to change.\n\nAs such, this policy is a temporary measure to control the initial experimental implementation. It will be replaced with final controls as the protocol finalizes.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#encryptedclienthelloenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_encryptedclienthelloenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_encryptedclienthelloenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3e9a37564f9557e4":{"id":"com.apple.managedclient.preferences_familysafetysettingsenabled","displayName":"Allow users to configure Family safety","description":"This policy disables and completely hides the Family safety page in Settings. Navigation to edge://settings/familysafety will also be blocked. The Family safety page describes what features are available for family groups and how to join a family group. Learn more about family safety here: (https://go.microsoft.com/fwlink/?linkid=2098432).\n\nIf you enable this policy or don't configure it, the Family safety page will be shown.\n\nIf you disable this policy, the Family safety page will not be shown.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#familysafetysettingsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_familysafetysettingsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_familysafetysettingsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3eacdf23f7444f2c":{"id":"com.apple.managedclient.preferences_importcookies","displayName":"Allow importing of Cookies","description":"Allows users to import Cookies from another browser into Microsoft Edge.\n\nIf you disable this policy, Cookies aren't imported on first run.\n\nIf you don’t configure this policy, Cookies are imported on first run.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\n\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importcookies"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importcookies_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importcookies_true","displayName":"Enabled","description":null,"helpText":null}]},"3e2d47e969b3bcea":{"id":"com.apple.managedclient.preferences_serviceworkerautopreloadenabled","displayName":"Allow ServiceWorker to dispatch navigation requests without waiting for its startup","description":"This policy controls whether Microsoft Edge enables the ServiceWorkerAutoPreload feature.\n\nWhen enabled or not configured, Microsoft Edge may initiate the main resource network request concurrently with the Service Worker bootstrap process. This can improve performance in scenarios where the Service Worker isn't already running.\n\nIf you disable this policy, Microsoft Edge will wait to dispatch the navigation request until after the Service Worker has started.\n\nThis is a temporary policy and will be removed in version 144 of Microsoft Edge.\n\nFor more information on the feature, see https://github.com/WICG/service-worker-auto-preload.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#serviceworkerautopreloadenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_serviceworkerautopreloadenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_serviceworkerautopreloadenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"3efea5459b7c1ca7":{"id":"com.apple.mcxmenuextras_timemachine.menu","displayName":"TimeMachine","description":"If true, enables the TimeMachine menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_timemachine.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_timemachine.menu_true","displayName":"True","description":null,"helpText":null}]},"3e8440d81b06fe30":{"id":"com.apple.mobiledevice.passwordpolicy_minlength","displayName":"Min Length","description":"The minimum overall length of the passcode. This parameter is independent of the also optional Min Complex Characters argument.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"3ec643427f165a2c":{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"3e7550063ad27b9b":{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"3ee677e42221abf0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotnewtabpageenabled_recommended","displayName":"Enable the Copilot new tab page (users can override)","description":"This policy configures the availability of the Copilot new tab page in Microsoft Edge for Business.\n\nThe Copilot new tab page combines search and chat into a single input box and includes personalized cards that provide quick access to relevant files, calendar events, and suggested Copilot prompts. Users who do not have a Microsoft 365 Copilot license might experience limited relevance in Copilot prompt card content.\n\nMost policies that customize the New Tab Page are supported on the Copilot new tab page. For a complete list of supported and unsupported policies, see https://go.microsoft.com/fwlink/?linkid=2330462.\n\nThis policy applies only to Microsoft Entra ID profiles and controls the Copilot new tab page experience in Microsoft Edge for Business. This policy does not apply to the Copilot new tab page on MSA profiles.\n\nIf you enable this policy, the Copilot new tab page is turned on.\n\nIf you disable or don't configure this policy, the Copilot new tab page is turned off. When the policy is not configured, users can turn it on via user settings.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotnewtabpageenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotnewtabpageenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"3e83be6184cd7a52":{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotpagecontext","displayName":"Control Copilot access to page context for Microsoft Entra ID profiles","description":"This policy controls whether Copilot in the Microsoft Edge side pane can access page content.\n\nThis policy applies only to Microsoft Entra ID profiles in Microsoft Edge. It doesn't apply to Microsoft account (MSA) profiles.\n\nCopilot requires access to page content to summarize pages and interact with text selections.\n\nThis policy doesn't control access for Copilot with enterprise data protection (EDP). Access for Copilot with EDP is controlled by the \"EdgeEntraCopilotPageContext\" policy.\n\nIf you enable this policy, Copilot can access page content.\n\nIf you disable this policy, Copilot can't access page content. This also disables the \"M365LinksAutoOpenCopilotEnabled\" feature, because Copilot requires page content access to provide contextual insights for Microsoft 365 links.\n\nIf you don't configure this policy:\n- Access is enabled by default in non-EU regions.\n- Access is disabled by default in EU regions.\n- Users can turn this setting on or off in Microsoft Edge settings.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotpagecontext_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotpagecontext_true","displayName":"Enabled","description":null,"helpText":null}]},"3ee800e01e1e75d9":{"id":"device_vendor_msft_defender_configuration_dataduplicationlocalretentionperiod","displayName":"Data Duplication Local Retention Period","description":"Define the retention period in days of how much time the evidence data will be kept on the client machine should any transfer to the remote locations would occur.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"3e5e6f5418ba131d":{"id":"device_vendor_msft_defender_configuration_disablecachemaintenance","displayName":"Disable Cache Maintenance","description":"Defines whether the cache maintenance idle task will perform the cache maintenance or not.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablecachemaintenance_1","displayName":"Cache maintenance is disabled","description":"Cache maintenance is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablecachemaintenance_0","displayName":"Cache maintenance is enabled (default)","description":"Cache maintenance is enabled (default)","helpText":null}]},"3e1598fdd214d0a5":{"id":"device_vendor_msft_policy_config_admx_kerberos_mitrealms_mitrealms_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"3e88e5b641130857":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autoadminlogon","displayName":"MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)","description":"MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-autoadminlogon"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autoadminlogon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autoadminlogon_1","displayName":"Enabled","description":null,"helpText":null}]},"3ea05afd673253dd":{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_2","displayName":"Floppy Drives: Deny read access","description":"This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-floppydrives-denyread-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"3eb64c78fcff853b":{"id":"device_vendor_msft_policy_config_admx_sdiageng_scripteddiagnosticssecuritypolicy","displayName":"Configure Security Policy for Scripted Diagnostics","description":"This policy setting determines whether scripted diagnostics will execute diagnostic packages that are signed by untrusted publishers.\r\n\r\nIf you enable this policy setting, the scripted diagnostics execution engine validates the signer of any diagnostic package and runs only those signed by trusted publishers.\r\n\r\nIf you disable or do not configure this policy setting, the scripted diagnostics execution engine runs all digitally signed packages.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sdiageng#admx-sdiageng-scripteddiagnosticssecuritypolicy"],"categoryId":"b6bb653a-73f0-42f4-b097-1ce556310904","categoryName":"Scripted Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_sdiageng_scripteddiagnosticssecuritypolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sdiageng_scripteddiagnosticssecuritypolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"3e09f5f66c857e95":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesettingsync","displayName":"Do not sync","description":"Prevent syncing to and from this PC. This turns off and disables the \"sync your settings\" switch on the \"sync your settings\" page in PC Settings.\r\n\r\nIf you enable this policy setting, \"sync your settings\" will be turned off, and none of the \"sync your setting\" groups will be synced on this PC.\r\n\r\nUse the option \"Allow users to turn syncing on\" so that syncing it turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, \"sync your settings\" is on by default and configurable by the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disablesettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"3ea8314ec25ede5d":{"id":"device_vendor_msft_policy_config_admx_srmfci_centralclassificationlist","displayName":"File Classification Infrastructure: Specify classification properties list","description":"This policy setting controls which set of properties is available for classifying files on affected computers.\r\n\r\nAdministrators can define the properties for the organization by using Active Directory Domain Services (AD DS), and then group these properties into lists. Administrators can supplement these properties on individual file servers by using File Classification Infrastructure, which is part of the File Server Resource Manager role service.\r\n\r\nIf you enable this policy setting, you can select which list of properties is available for classification on the affected computers. \r\n\r\nIf you disable or do not configure this policy setting, the Global Resource Property List in AD DS provides the default set of properties.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-srmfci#admx-srmfci-centralclassificationlist"],"categoryId":"dd9a3dad-5851-4899-a5c1-c23318986846","categoryName":"File Classification Infrastructure","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_centralclassificationlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_centralclassificationlist_1","displayName":"Enabled","description":null,"helpText":null}]},"3e0a3ba5d4531ed1":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_keep_alive","displayName":"Configure keep-alive connection interval","description":"This policy setting allows you to enter a keep-alive interval to ensure that the session state on the RD Session Host server is consistent with the client state.\r\n\r\nAfter an RD Session Host server client loses the connection to an RD Session Host server, the session on the RD Session Host server might remain active instead of changing to a disconnected state, even if the client is physically disconnected from the RD Session Host server. If the client logs on to the same RD Session Host server again, a new session might be established (if the RD Session Host server is configured to allow multiple sessions), and the original session might still be active.\r\n\r\nIf you enable this policy setting, you must enter a keep-alive interval. The keep-alive interval determines how often, in minutes, the server checks the session state. The range of values you can enter is 1 to 999,999.\r\n\r\nIf you disable or do not configure this policy setting, a keep-alive interval is not set and the server will not check the session state.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-keep-alive"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_keep_alive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_keep_alive_1","displayName":"Enabled","description":null,"helpText":null}]},"3e56b081da6b1dfa":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_dynamicremovallist","displayName":"Specify additional package family names to remove (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":null},"3e6993fad39d520f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended","displayName":"List of alternate URLs for the default search provider","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderAlternateURLs specifies a list of alternate URLs for extracting search terms from the search engine. The URLs should include the string '{searchTerms}'.\r\n\r\nLeaving DefaultSearchProviderAlternateURLs unset means no alternate URLs are used to extract search terms.\r\n\r\nExample value:\r\n\r\nhttps://search.my.company/suggest#q={searchTerms}\r\nhttps://search.my.company/suggest/search#q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3e058984d1bcf70c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_tabcaptureallowedbyoriginsdesc","displayName":"Allow Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"3ef4984e00b47d7a":{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths","displayName":"Hardened UNC Paths:","description":"","helpText":"","infoUrls":[],"categoryId":"643081a4-132d-463e-9d86-c8650cb2a011","categoryName":"Network Provider","options":null},"3e96c582b6b61ad4":{"id":"device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan","displayName":"Check For Signatures Before Running Scan","description":"This policy setting allows you to manage whether a check for new virus and spyware definitions will occur before running a scan. This setting applies to scheduled scans as well as the command line mpcmdrun -SigUpdate, but it has no effect on scans initiated manually from the user interface. If you enable this setting, a check for new definitions will occur before running a scan. If you disable this setting or do not configure this setting, the scan will start using the existing definitions. Supported values:0 (default) - Disabled1 - EnabledOMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/CheckForSignaturesBeforeRunningScan","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"3e375b3ebfdee7f0":{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats","displayName":"Remediation action for Low severity threats","description":"","helpText":"","infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},"3e68923c0b3bbbca":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dovpnkeywords","displayName":"DO Vpn Keywords","description":"Specifies one or more keywords used to recognize VPN connections. To add multiple keywords, separate each by a comma.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dovpnkeywords"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"3e1c4aad46df6a91":{"id":"device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation","displayName":"Prevent participation in the Customer Experience Improvement Program","description":"This policy setting prevents the user from participating in the Customer Experience Improvement Program (CEIP).\n\nIf you enable this policy setting, the user cannot participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.\n\nIf you disable this policy setting, the user must participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.\n\nIf you do not configure this policy setting, the user can choose to participate in the CEIP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecustomerexperienceimprovementprogramparticipation"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_1","displayName":"Enabled","description":null,"helpText":null}]},"3e63c1ce4cb63164":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"3e7300476f0e0088":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_promptusertochangepasswordbeforeexpiration","displayName":"Interactive Logon Prompt User To Change Password Before Expiration","description":"Interactive logon: Prompt user to change password before expiration Determines how far in advance (in days) users are warned that their password is about to expire. With this advance warning, the user has time to construct a password that is sufficiently strong. Default: 5 days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_promptusertochangepasswordbeforeexpiration"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"3ed1e35d09c60936":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_l_galdownloadinitialdelay_value","displayName":"Maximum possible number of minutes to delay download: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"3ed326c4f40c2070":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_l_trustmodeldata_value","displayName":"Trusted Domains (comma separated list): (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"3e5a64c8544e27ea":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize","displayName":"Set disk cache size, in bytes","description":"Configures the size of the cache, in bytes, used to store files on the disk.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided cache size regardless of whether the user has specified the '--disk-cache-size' flag. The value specified in this policy isn't a hard boundary but rather a suggestion to the caching system; any value below a few megabytes is too small and will be rounded up to a reasonable minimum.\r\n\r\nIf you set the value of this policy to 0, the default cache size is used, and users can't change it.\r\n\r\nIf you don't configure this policy, the default size is used, but users can override it with the '--disk-cache-size' flag.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"3e532de507bdfa5b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability","displayName":"Configure InPrivate mode availability","description":"Specifies whether the user can open pages in InPrivate mode in Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Enabled' (0), users can open pages in InPrivate mode.\r\n\r\nSet this policy to 'Disable' (1) to stop users from using InPrivate mode.\r\n\r\nSet this policy to 'Forced' (2) to always use InPrivate mode.\r\n\r\n* 0 = InPrivate mode available\r\n\r\n* 1 = InPrivate mode disabled\r\n\r\n* 2 = InPrivate mode forced","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"3ebe1f33fc99b640":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls","displayName":"Block multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, where multiple successive automatic downloads aren't allowed.\r\nIf you don't configure this policy, 'DefaultAutomaticDownloadsSetting' (Default automatic downloads setting) applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\r\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\n[*.]contoso.com","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"3e5784980d780d9c":{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled","displayName":"Enable deprecated/removed Mutation Events (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy provides a temporary opt-in back to a deprecated and removed set of platform events named Mutation Events.\r\n\r\nIf you enable this policy, mutation events will continue to be fired, even if they've been disabled by default for normal web users.\r\n\r\nIf you disable or don't configure this policy, these events will not be fired.\r\n\r\nThis policy is a temporary workaround, and enterprises should still work to remove their dependencies on these mutation events.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3e3bb0452b038aec":{"id":"device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled","displayName":"Enable Printing LPAC Sandbox","description":"Setting this policy to Enabled or leaving it unset enables the LPAC Sandbox for printing services when the system configuration supports it.\r\n\r\nSetting this policy to Disabled has a detrimental effect on Microsoft Edge's security because services used for printing might run in a weaker sandbox configuration.\r\n\r\nOnly turn this policy off if there are compatibility issues with third party software that prevent printing services from operating correctly inside the LPAC Sandbox.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3e28d0f58b69e8bd":{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext","displayName":"Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane","description":"This policy controls whether Copilot in the Microsoft Edge sidepane can access Microsoft Edge page content. This includes page summarization and similar contextual queries sent to Copilot.\r\n\r\nThis policy only applies to users who are signed in to Microsoft Edge with their Entra account and are using Copilot in the sidepane. This policy applies to all Copilot products in the Microsoft Edge sidepane - namely, Microsoft 365 Copilot Business Chat and Microsoft Copilot with enterprise data protection (EDP).\r\n\r\nIf you enable this policy, Copilot will be able to access Microsoft Edge page content when users ask a contextual query to Copilot in the Microsoft Edge sidepane.\r\n\r\nIf you disable this policy, Copilot will not be able to access Microsoft Edge page content.\r\n\r\nIf you don't configure this policy, the default behavior is as follows:\r\n\r\n- For non-EU countries, access is enabled by default.\r\n\r\n- For EU countries, access is disabled by default.\r\n\r\n- In both cases, if the policy is not configured, users can enable or disable Copilot access to Microsoft Edge page content using the toggle in Microsoft Edge settings.\r\n\r\nExceptions to the preceding behavior include when a page is protected using data loss prevention (DLP) measures. In that case, Copilot will not be able to access Microsoft Edge page content even when this policy is enabled. This behavior is to ensure the integrity of DLP.\r\n\r\nLearn more about Copilot's data usage and consent at https://go.microsoft.com/fwlink/?linkid=2288056","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},"3ed814651bd1a49f":{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist","displayName":"Allow specific apps to be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that are not subject to the 'EdgeSidebarAppUrlHostBlockList' (Control which apps cannot be opened in Microsoft Edge sidebar).\r\n\r\nIf you don't configure this policy, a user can open any app in sidebar except the urls listed in 'EdgeSidebarAppUrlHostBlockList'.\r\n\r\nIf you configure this policy, the apps listed in the allow list could be opened in sidebar even if they are listed in the block list.\r\n\r\nBy default, all apps are allowed. However, if you prohibited apps by policy, you can use the list of allowed apps to change that policy.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"3e138f2bdcd8fd65":{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsboard","displayName":"Disable Widgets Board","description":"Disable widgets board","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NewsAndInterests#disablewidgetsboard"],"categoryId":"70d374bf-6444-4b74-a879-a29e4d44c566","categoryName":"News And Interests","options":[{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsboard_0","displayName":"Enabled.","description":"Enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsboard_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},"3e5db000f25c4d4b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch","displayName":"Update Channel (Deprecated)","description":"This policy setting controls which update channel Office gets updates from when Office is configured to get updates directly from the Office Content Delivery Network (CDN).\r\n\r\nIf you enable this policy setting, Office gets updates from the update channel that you select.\r\n\r\nIf you disable or don't configure this policy setting, Office gets updates from its default channel, or by the update channel specified by the Office Deployment Tool. The default channel is determined by which Office product that is installed.\r\n\r\nImportant: This policy setting only applies to Office clients, such as Office 365 ProPlus, that come with an Office 365 plan. This policy setting also applies to Visio and Project products that come with an Office 365 plan. This policy has no effect on Office products that are installed by using Windows Installer (MSI).","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_1","displayName":"Enabled","description":null,"helpText":null}]},"3e7871219ea4383a":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_diskspacecheckthresholdmblist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"3e3e3de185e07c95":{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum","displayName":"Manage processing of Queue-Specific files:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum_0","displayName":"Do not allow Queue-specific files","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum_1","displayName":"Limit Queue-specific files to Color profiles","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum_2","displayName":"Allow all Queue-specfic files","description":null,"helpText":null}]},"3e54f2c8d8d7c2bf":{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_control_list","displayName":"Permit remote control of this computer:","description":"","helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_control_list_1","displayName":"Allow helpers to remotely control the computer","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_control_list_0","displayName":"Allow helpers to only view the computer","description":null,"helpText":null}]},"3e51cee4a85700d3":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_msaccess","displayName":"Access: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"3e9c26d3fcef2587":{"id":"device_vendor_msft_policy_config_userrights_modifyobjectlabel","displayName":"Modify Object Label","description":"This user right determines which user accounts can modify the integrity label of objects, such as files, registry keys, or processes owned by other users. Processes running under a user account can modify the label of an object owned by that user to a lower level without this privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#modifyobjectlabel"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"3e79d5d8683e08d2":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}","displayName":"System Setting Rule Name","description":"Unique alpha numeric identifier for the system setting rule. The rule name must not include a forward slash (/).","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"3e9fc6102b5b76c4":{"id":"device_vendor_msft_reboot_schedule_single","displayName":"Single","description":"Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. Both the date and time are required. A reboot will be scheduled to occur at the specified date and time. Setting a null (empty) date will delete the existing schedule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Reboot-csp/"],"categoryId":"effee722-f6ec-440e-a892-bf645bc341ff","categoryName":"Reboot","options":null},"3e1d960848847160":{"id":"device_vendor_msft_windowsdefenderapplicationguard_status","displayName":"Status","description":"Returns bitmask that indicates status of Application Guard installation for Microsoft Edge and prerequisites on the device.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/windowsdefenderapplicationguard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":null},"3eb016099f12c2c3":{"id":"mathsettings_calculator_basicmode_addsquareroot","displayName":"Add Square Root","description":"Add the square root button to the basic calculator by replacing the +/- button. Normally, the square root button is available in scientific mode, so this key can be used to make it available when the scientific mode is restricted.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":[{"id":"mathsettings_calculator_basicmode_addsquareroot_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_basicmode_addsquareroot_true","displayName":"True","description":null,"helpText":null}]},"3ec58a7c72b8f167":{"id":"passcode_failedattemptsresetinminutes","displayName":"Failed Attempts Reset In Minutes","description":"The number of minutes before the login is reset after the maximum number of failed attempts. Also set the `MaximumFailedAttempts` key for this to take effect.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"3eb378a3703983bb":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount","displayName":"Set CNG password spin count (User)","description":"This policy setting allows you to specify the number of times to spin (rehash) the password verifier.\r\n\r\nIf you enable this policy setting, the number specified will be the number of times the password will be rehashed.\r\n\r\nIf you disable or do not configure this policy setting, the default (100000) will be used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount_1","displayName":"Enabled","description":null,"helpText":null}]},"3edbea81cf63bdc9":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinfavorites","displayName":"Favorites (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinfavorites_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinfavorites_1","displayName":"True","description":null,"helpText":null}]},"3e3b162794504817":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal","displayName":"Allows a page to perform synchronous XHR requests during page dismissal. (User)","description":"This policy allows an admin to specify that a page may send synchronous XHR requests during page dismissal.\r\n\r\nWhen the policy is set to enabled, pages are allowed to send synchronous XHR requests during page dismissal.\r\n\r\nWhen the policy is set to disabled or not set, pages are not allowed to send synchronous XHR requests during page dismissal.\r\n\r\nThis policy will be removed in Chrome 93.\r\n\r\nSee https://www.chromestatus.com/feature/4664843055398912 .","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal_1","displayName":"Enabled","description":null,"helpText":null}]},"3e72264984403bdd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication (User)","description":"If enabled(or not set), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\r\n\r\nIf disabled, user-added TLS certificates from platform trust stores will not be used in path-building for TLS server authentication.","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3ea2e8440efcdd87":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_disablelivepreview","displayName":"Enable Live Preview (User)","description":"Shows or hides the Live Previews that appear when using Galleries that support previews. Live Preview shows how a command would be applied without actually applying it to the document.","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_disablelivepreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_disablelivepreview_1","displayName":"Enabled","description":null,"helpText":null}]},"3ec63c81697de6fd":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_includenewrowsandcolumnsinlist","displayName":"Include new rows and columns in table (User)","description":"When working in cells adjacent to a table (known as a \"list\" in previous versions of Excel), enabling this setting causes the adjacent row or column to become part of the table.","helpText":"","infoUrls":[],"categoryId":"67eb1dab-7805-41bb-af5a-798dc7e29f23","categoryName":"Autocorrect Options","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_includenewrowsandcolumnsinlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_includenewrowsandcolumnsinlist_1","displayName":"Enabled","description":null,"helpText":null}]},"3e70bc52912a3496":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_donotshowautorepublishwarningalert","displayName":"Do not show AutoRepublish warning alert (User)","description":"This policy setting controls whether Excel displays an alert before republishing a workbook to the World Wide Web.\r\n\r\nIf you enable this policy setting, no warning appears when the user saves a published workbook when AutoRepublish is enabled.\r\n \r\nIf you disable or do not configure this policy setting, a message dialog appears every time the user saves a published workbook when AutoRepublish is enabled. From this dialog, the user can disable AutoRepublish temporarily or permanently, or select \"Do not show this message again\" to prevent the dialog from appearing after every save. If the user selects \"Do not show this message again\", Excel will continue to automatically republish the data after every save without informing the user.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_donotshowautorepublishwarningalert_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_donotshowautorepublishwarningalert_1","displayName":"Enabled","description":null,"helpText":null}]},"3ec1c8670cf7da73":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles","displayName":"Excel 3 macrosheets and add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"3eaaba4b94625392":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_diskcachedir","displayName":"Set disk cache directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3e1959b1010f86ae":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_javascriptblockedforurlsdesc","displayName":"Block JavaScript on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3e107f41131cfc69":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly","displayName":"Force Windows executable Native Messaging hosts to launch directly (User)","description":"This policy controls whether native host executables launch directly on Windows.\r\n\r\nIf you enable this policy, Microsoft Edge is forced to launch native messaging hosts implemented as executables directly.\r\n\r\nIf you disable this policy, Microsoft Edge will launch hosts using cmd.exe as an intermediary process.\r\n\r\nIf you don't configure this policy, Microsoft Edge will decide which approach to use based on a progressive rollout from the legacy behavior to the Launch Directly behavior, guided by ecosystem compatibility.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_1","displayName":"Enabled","description":null,"helpText":null}]},"3eae8c6329130cb3":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites_javascriptoptimizerblockedforsitesdesc","displayName":"Block JavaScript optimizations on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3e6defca008b070a":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector","displayName":"Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors (User)","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a page or file is printed from Microsoft Edge.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"3eb32cd3b168b70b":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importshortcuts_recommended","displayName":"Allow importing of shortcuts (User)","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Shortcuts aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Shortcuts are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importshortcuts_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importshortcuts_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3ef9ea431873f468":{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_30","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"3e2ab4095ec5ab48":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended","displayName":"Sets layout for printing (User)","description":"Configuring this policy sets the layout for printing webpages.\r\n\r\nIf you disable or don't configure this policy, users can decide whether to print webpages in Portrait or Landscape layout.\r\n\r\nIf you enable this policy, the selected option is set as the layout option.\r\n\r\nPolicy options mapping:\r\n\r\n* portrait (0) = Sets layout option as portrait\r\n\r\n* landscape (1) = Sets layout option as landscape\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3ece8e4c7436f522":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastservicesharednotescustomurl1","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"3e615ae5d378cb76":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withasimplewebdiscussionslink373_l_withasimplewebdiscussionslink374","displayName":"With a simple Web discussions link (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":null},"3e8c4cbde33e376b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishireland","displayName":"English (Ireland) (User)","description":"Enables the editing language English (Ireland)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishireland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishireland_1","displayName":"Enabled","description":null,"helpText":null}]},"3e1864edea9f5d7a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2","displayName":"Workflow Cache 2 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_1","displayName":"Enabled","description":null,"helpText":null}]},"3eb38401397fc1fa":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache4_l_workflowpath444","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"3e058682fe69c662":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkoleobjects","displayName":"Check OLE objects (User)","description":"This policy setting determines whether Office checks that an OLE object is properly categorized before loading it. \r\n\r\nIf you enable this policy setting, you can select one of the following options:\r\n- Do not check: Office loads OLE objects without checking if they are properly categorized.\r\n- Override IE kill bit list: Office uses the category list to override IE kill bit checks. (This is also the default behavior for this policy setting). \r\n- Strict allow list: Office only loads properly categorized OLE objects.\r\n\r\nIf you disable or do not configure this policy setting, Office uses the category list to override IE kill bit checks.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkoleobjects_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkoleobjects_1","displayName":"Enabled","description":null,"helpText":null}]},"3e7ece698b74dd07":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_addsignaturetoonenoteemailmessages","displayName":"Add signature to OneNote email messages (User)","description":"Checks/Unchecks the option ''Add the following signature to e-mail messages and Web pages created in OneNote''.","helpText":"","infoUrls":[],"categoryId":"e4e72b9b-db0e-4a97-9d90-a21d87a4d9bf","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_addsignaturetoonenoteemailmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_addsignaturetoonenoteemailmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"3e9076d3907fb605":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_suggestnameswhilecompletingtoccandbccfields","displayName":"Suggest names while completing To, Cc, and Bcc fields (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_suggestnameswhilecompletingtoccandbccfields_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_suggestnameswhilecompletingtoccandbccfields_1","displayName":"True","description":null,"helpText":null}]},"3e4bfaec6de14738":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_l_selecttheauthenticationwithexchangeserver","displayName":"Select the authentication with Exchange server. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_l_selecttheauthenticationwithexchangeserver_9","displayName":"Kerberos/NTLM Password Authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_l_selecttheauthenticationwithexchangeserver_16","displayName":"Kerberos Password Authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_l_selecttheauthenticationwithexchangeserver_10","displayName":"NTLM Password Authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_l_selecttheauthenticationwithexchangeserver_2147545088","displayName":"Insert a smart card","description":null,"helpText":null}]},"3e075a6b9ac05ba4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid","displayName":"Parameters (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":null},"3eef260ec1ba16a4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforpowerpoint_l_microsoftofficeopenxmlconvertersforpowerpointdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforpowerpoint_l_microsoftofficeopenxmlconvertersforpowerpointdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforpowerpoint_l_microsoftofficeopenxmlconvertersforpowerpointdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforpowerpoint_l_microsoftofficeopenxmlconvertersforpowerpointdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforpowerpoint_l_microsoftofficeopenxmlconvertersforpowerpointdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforpowerpoint_l_microsoftofficeopenxmlconvertersforpowerpointdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforpowerpoint_l_microsoftofficeopenxmlconvertersforpowerpointdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"3e522583501545b4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_datecolon29","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"3e72cc467d1b7600":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_l_pathcolon36","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"3e9b212a5511a53e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15_l_pathcolon64","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"3e32f051709c5f3c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"3e47e0549d4f2a40":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_l_pathcolon68","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/3f.json b/public/intune-definitions/3f.json new file mode 100644 index 000000000000..eb61c6829529 --- /dev/null +++ b/public/intune-definitions/3f.json @@ -0,0 +1 @@ +{"3f4b1af45eeba506":{"id":"ade_setupassistant_diagnosticsdata","displayName":"Diagnostics Data","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_diagnosticsdata_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_diagnosticsdata_1","displayName":"Show","description":null,"helpText":null}]},"3f254de954d76a33":{"id":"com.android.devicerestrictionpolicy.minimumwifisecuritylevel","displayName":"Select minimum Wi-Fi security level","description":"Select what Wi-Fi security levels are required to connect to Wi-Fi networks. 'Open network security' allows the device to connect to all types of Wi-Fi networks. 'Personal network security' requires personal networks such as WEP, WPA2-PSK. 'Enterprise network security' requires enterprise EAP networks. 'Enterprise 192-bit network security' requires 192-bit networks. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.minimumwifisecuritylevel_opennetworksecurity","displayName":"Open network security","description":"The device is able to connect to all types of Wi-Fi networks.","helpText":null},{"id":"com.android.devicerestrictionpolicy.minimumwifisecuritylevel_personalnetworksecurity","displayName":"Personal network security","description":"A personal network such as WEP, WPA2-PSK is the minimum required security.","helpText":null},{"id":"com.android.devicerestrictionpolicy.minimumwifisecuritylevel_enterprisenetworksecurity","displayName":"Enterprise network security","description":"An enterprise EAP network is the minimum required security level.","helpText":null},{"id":"com.android.devicerestrictionpolicy.minimumwifisecuritylevel_enterprisebit192networksecurity","displayName":"Enterprise 192-bit network security","description":"A 192-bit enterprise network is the minimum required security level.","helpText":null}]},"3fbfb512d7631380":{"id":"com.apple.applicationaccess_allowautocorrection","displayName":"Allow Auto Correction (Deprecated)","description":"If false, disables keyboard autocorrection. Requires a supervised device. Available in iOS 8.1.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowautocorrection_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowautocorrection_true","displayName":"True","description":null,"helpText":null}]},"3f27f55b09d0e0d1":{"id":"com.apple.applicationaccess_ratingappsau","displayName":"Rating Apps - Australia","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsau_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_1","displayName":"1+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_2","displayName":"2+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_3","displayName":"3+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_4","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_5","displayName":"5+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_6","displayName":"6+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_7","displayName":"7+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_8","displayName":"8+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_9","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_10","displayName":"10+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_11","displayName":"11+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_12","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_13","displayName":"13+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_14","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_15","displayName":"15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_16","displayName":"16+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_17","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_18","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_19","displayName":"19+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_20","displayName":"20+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_21","displayName":"21+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsau_22","displayName":"All","description":null,"helpText":null}]},"3fe9515e864afc0e":{"id":"com.apple.associated-domains_com.apple.associated-domains","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"8efd284f-5a56-4da8-8821-f51984ff954d","categoryName":"Associated Domains","options":null},"3fc992cd385037df":{"id":"com.apple.configurationprofile.identification_payloadidentification_prompt","displayName":"Prompt","description":"The custom instructions for the user, if needed.","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":null},"3ff12eb35a5459e2":{"id":"com.apple.managedclient.preferences_tags","displayName":"Device tags","description":null,"helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#device-tags"],"categoryId":"b77a3a7b-6fab-4240-b5c3-852aa78781d5","categoryName":"Endpoint Detection and Response (EDR) preferences","options":null},"3fecbbdf9471bb56":{"id":"com.apple.managedclient.preferences_webusbaskforurls","displayName":"Allow WebUSB on specific sites","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a USB device.\n\nIf you don't configure this policy, the global default value from the \"DefaultWebUsbGuardSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nThe URL patterns defined in this policy can't conflict with those configured in the \"WebUsbBlockedForUrls\" policy - you can't both allow and block a URL.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webusbaskforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"3f2a482375a2368b":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_automatic restart on power loss","displayName":"Automatic Restart On Power Loss","description":"If true, enables \"Start up automatically after a power failure.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_automatic restart on power loss_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_automatic restart on power loss_1","displayName":"True","description":null,"helpText":null}]},"3f0d975b5c47b184":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_dynamic power step","displayName":"Dynamic Power Step","description":"May not be available on all systems.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_dynamic power step_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_dynamic power step_1","displayName":"True","description":null,"helpText":null}]},"3f3bcb813acb1d4e":{"id":"com.apple.system-extension-policy_nonremovablefromuisystemextensions_generickey","displayName":"ANY","description":"System extension bundle identifiers","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"3fa9b2716b4a1332":{"id":"com.apple.universalaccess_closeviewhotkeysenabled","displayName":"Close View Hotkeys Enabled","description":"If true, enables \"Use keyboard shortcuts\" in the Zoom options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_closeviewhotkeysenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_closeviewhotkeysenabled_true","displayName":"True","description":null,"helpText":null}]},"3f4696f3d51c4102":{"id":"com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailabilityallowlist","displayName":"List of URL patterns for which developer tools are allowed to be opened","description":"This policy controls where developer tools can be used in Microsoft Edge by specifying an allowlist of URL patterns.\n\nURL patterns are matched against the URL of every frame on the page being inspected.\n\nIf you configure this policy and do not configure the \"DeveloperToolsAvailabilityBlocklist\" policy, developer tools are available only when every frame on the page matches a pattern in this allowlist. If any frame does not match, developer tools are blocked for the entire page. For information on the URL format, see https://go.microsoft.com/fwlink/?linkid=2095322 .\n\nIf you configure both this policy and the \"DeveloperToolsAvailabilityBlocklist\" policy, this allowlist takes precedence. URLs that match this allowlist are allowed even if they also match the blocklist. URLs that match the blocklist but not this allowlist are blocked. URLs that match neither are governed by the \"DeveloperToolsAvailability\" policy.\n\nIf you disable or do not configure this policy, developer tools availability is determined by the \"DeveloperToolsAvailabilityBlocklist\" and \"DeveloperToolsAvailability\" policies.\n\nThis policy applies to developer tools opened for websites, extensions, and web applications.\n\nThis policy supports up to 1,000 entries.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"3f39ebff965c01b0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.loopbacknetworkallowedforurls","displayName":"Allow sites to make network requests to the local device.","description":"Specifies a list of URL patterns for which requests initiated from matching origins are exempt from Local Network Access restrictions when accessing loopback addresses (127.0.0.1, ::1, localhost).\n\nIf a requesting origin matches a URL pattern specified in this policy, requests to loopback addresses are allowed and are not subject to Local Network Access restrictions.\n\nFor origins not covered by this policy, the user's personal settings and local network access restrictions apply.\n\nIf this policy is disabled or not configured, no additional exemptions are granted beyond the user's existing configuration.\n\nMultiple policies can specify origins that affect requests to the local device. If an origin matches more than one of the following policies, they are applied in the following order of precedence:\n- LoopbackNetworkBlockedForUrls\n- LoopbackNetworkAllowedForUrls\n- LocalNetworkAccessBlockedForUrls\n- LocalNetworkAccessAllowedForUrls\n\nFor guidance on valid URL pattern syntax, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns .","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"3fec5ea9a52783b8":{"id":"device_vendor_msft_bitlocker_systemdrivesdisallowstandarduserscanchangepin","displayName":"Disallow standard users from changing the PIN or password","description":"This policy setting allows you to configure whether or not standard users are allowed to change BitLocker volume PINs, provided they are able to provide the existing PIN first.\r\n\r\nThis policy setting is applied when you turn on BitLocker.\r\n\r\nIf you enable this policy setting, standard users will not be allowed to change BitLocker PINs or passwords.\r\n\r\nIf you disable or do not configure this policy setting, standard users will be permitted to change BitLocker PINs and passwords.\r\n\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesdisallowstandarduserscanchangepin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesdisallowstandarduserscanchangepin_1","displayName":"Enabled","description":null,"helpText":null}]},"3f0ae1cacc619f55":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_startbackground","displayName":"Force a specific Start background","description":"Forces the Start screen to use one of the available backgrounds, 1 through 20, and prevents the user from changing it.\r\n\r\nIf this setting is set to zero or not configured, then Start uses the default background, and users can change it.\r\n\r\nIf this setting is set to a nonzero value, then Start uses the specified background, and users cannot change it. If the specified background is not supported, the default background is used.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-startbackground"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_startbackground_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_startbackground_1","displayName":"Enabled","description":null,"helpText":null}]},"3fe5dbfd702228fd":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_addresstypereturned","displayName":"Return domain controller address type","description":"This policy setting detremines the type of IP address that is returned for a domain controller. The DC Locator APIs return the IP address of the DC with the other parts of information. Before the support of IPv6, the returned DC IP address was IPv4. But with the support of IPv6, the DC Locator APIs can return IPv6 DC address. The returned IPv6 DC address may not be correctly handled by some of the existing applications. So this policy is provided to support such scenarios.\r\n\r\nBy default, DC Locator APIs can return IPv4/IPv6 DC address. But if some applications are broken due to the returned IPv6 DC address, this policy can be used to disable the default behavior and enforce to return only IPv4 DC address. Once applications are fixed, this policy can be used to enable the default behavior.\r\n\r\nIf you enable this policy setting, DC Locator APIs can return IPv4/IPv6 DC address. This is the default behavior of the DC Locator.\r\n\r\nIf you disable this policy setting, DC Locator APIs will ONLY return IPv4 DC address if any. So if the domain controller supports both IPv4 and IPv6 addresses, DC Locator APIs will return IPv4 address. But if the domain controller supports only IPv6 address, then DC Locator APIs will fail.\r\n\r\nIf you do not configure this policy setting, DC Locator APIs can return IPv4/IPv6 DC address. This is the default behavior of the DC Locator.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-addresstypereturned"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_addresstypereturned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_addresstypereturned_1","displayName":"Enabled","description":null,"helpText":null}]},"3f3dfb53da9f8c5c":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_putadminontocheck","displayName":"File server administrator","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_putadminontocheck_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_putadminontocheck_1","displayName":"True","description":null,"helpText":null}]},"3f50531e2647ab89":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_transport","displayName":"Select RDP transport protocols","description":"This policy setting allows you to specify which protocols can be used for Remote Desktop Protocol (RDP) access to this server.\r\n\r\nIf you enable this policy setting, you must specify if you would like RDP to use UDP.\r\n\r\nYou can select one of the following options: \"Use both UDP and TCP\", \"Use only TCP\" or \"Use either UDP or TCP (default)\" \r\n\r\nIf you select \"Use either UDP or TCP\" and the UDP connection is successful, most of the RDP traffic will use UDP.\r\n\r\nIf the UDP connection is not successful or if you select \"Use only TCP,\" all of the RDP traffic will use TCP.\r\n\r\nIf you disable or do not configure this policy setting, RDP will choose the optimal protocols for delivering the best user experience.\r\n\t \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-select-transport"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_transport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_transport_1","displayName":"Enabled","description":null,"helpText":null}]},"3f86df63210e137e":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013","displayName":"Microsoft Office 365 Publisher 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Publisher 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Publisher 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365publisher2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013_1","displayName":"Enabled","description":null,"helpText":null}]},"3f7d15ef7f8bbcde":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_polladjustfactor","displayName":"PollAdjustFactor","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"3fc8b4d69d191c2e":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-internetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"3fc8614fb7a6fad4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"3feb6157d1d85031":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist","displayName":"Configure extension installation whitelist","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"3f3fc1cd96d48c19":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled","displayName":"Enable submission of documents to Google Cloud Print","description":"Setting the policy to Enabled or leaving it unset lets users print to Google Cloud Print from the Google Chrome print dialog. Google Chrome can submit documents to Google Cloud Print for printing. This doesn't prevent users from submitting print jobs on websites.\r\n\r\nSetting the policy to Disabled means users can't print to Google Cloud Print from the Google Chrome print dialog.\r\n\r\nIn order to keep Google Cloud Print destinations discoverable, this policy must be set to Enabled and cloud must not be included in the PrinterTypeDenyList policy.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3f4cece380bdc86c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_remoteaccesshostmaximumsessiondurationminutes","displayName":"Maximum session duration allowed for remote access connections: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"3f9f220667ad877d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_webauthenticationremotedesktopallowedoriginsdesc","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"3f5f7ba8c397c039":{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist","displayName":"Please select a 3G connection cost value to set:","description":"","helpText":"","infoUrls":[],"categoryId":"edf3754c-b22d-4946-a744-4773240a5883","categoryName":"WWAN Media Cost","options":[{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_1","displayName":"Unrestricted","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_2","displayName":"Fixed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_3","displayName":"Variable","description":null,"helpText":null}]},"3f8e84db0df5b33f":{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses","displayName":"Allow installation of devices using drivers that match these device setup classes","description":"This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is allowed to install. Use this policy setting only when the \"Prevent installation of devices not described by other policy settings\" policy setting is enabled. Other policy settings that prevent device installation take precedence over this one.\r\n\r\nIf you enable this policy setting, Windows is allowed to install or update device drivers whose device setup class GUIDs appear in the list you create, unless another policy setting specifically prevents installation (for example, the \"Prevent installation of devices that match these device IDs\" policy setting, the \"Prevent installation of devices for these device classes\" policy setting, or the \"Prevent installation of removable devices\" policy setting). If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, and no other policy setting describes the device, the \"Prevent installation of devices not described by other policy settings\" policy setting determines whether the device can be installed.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_1","displayName":"Enabled","description":null,"helpText":null}]},"3fbdd153ba7fad20":{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist","displayName":"Add-on List","description":"This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. Add-ons in this case are controls like ActiveX Controls, Toolbars, and Browser Helper Objects (BHOs) which are specifically written to extend or enhance the functionality of the browser or web pages.\n\nThis list can be used with the 'Deny all add-ons unless specifically allowed in the Add-on List' policy setting, which defines whether add-ons not listed here are assumed to be denied.\n\nIf you enable this policy setting, you can enter a list of add-ons to be allowed or denied by Internet Explorer. For each entry that you add to the list, enter the following information:\n\nName of the Value - the CLSID (class identifier) for the add-on you wish to add to the list. The CLSID should be in brackets for example, ‘{000000000-0000-0000-0000-0000000000000}'. The CLSID for an add-on can be obtained by reading the OBJECT tag from a Web page on which the add-on is referenced.\n\nValue - A number indicating whether Internet Explorer should deny or allow the add-on to be loaded. To specify that an add-on should be denied enter a 0 (zero) into this field. To specify that an add-on should be allowed, enter a 1 (one) into this field. To specify that an add-on should be allowed and also permit the user to manage the add-on through Add-on Manager, enter a 2 (two) into this field.\n\nIf you disable this policy setting, the list is deleted. The 'Deny all add-ons unless specifically allowed in the Add-on List' policy setting will still determine whether add-ons not in this list are assumed to be denied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowaddonlist"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_1","displayName":"Enabled","description":null,"helpText":null}]},"3f5bebb32f3b8f45":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles","displayName":"Allow drag and drop or copy and paste files","description":"This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\n\nIf you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.\n\nIf you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.\n\nIf you do not configure this policy setting, users can drag files or copy and paste files from this zone automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowdraganddropcopyandpastefiles"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"3fab628e3d184f76":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing","displayName":"Enable MIME Sniffing","description":"This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.\n\nIf you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.\n\nIf you do not configure this policy setting, the MIME Sniffing Safety Feature will not apply in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenablemimesniffing"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_1","displayName":"Enabled","description":null,"helpText":null}]},"3f0443cb6af9c181":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"3f9f6eb42a95a5da":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"3fd8db61023c9240":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallownetframeworkreliantcomponents"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"3feee9fafa3023b1":{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed","displayName":"Allows enabling throttling of non-visible, cross-origin iframes (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 123.\r\n\r\nThrottling of cross-origin frames that are display:none and non-visible is a feature designed to make cross-process and same-process cross-origin iframes consistent in their rendering behavior. For more details on cross-process vs. same-process throttling, refer to https://go.microsoft.com/fwlink/?linkid=2239564.\r\n\r\nThis enterprise policy exists to allow administrators to control whether their users are able to turn the additional throttling on or not.\r\n\r\nIf you enable or don't configure this policy, users can opt-in to throttling.\r\n\r\nIf you disable this policy, users can't enable throttling.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3f1c8c61eec878b5":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_insecurecontentallowedforurlsdesc","displayName":"Allow insecure content on specified sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3fe8e1f67e24b4cc":{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_4","displayName":"When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_5","displayName":"When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null}]},"3fb25b8b190dc41a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_excelexe15","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_excelexe15_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_excelexe15_1","displayName":"True","description":null,"helpText":null}]},"3fada68007e40a2b":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge will only be deployed machine-wide.\r\n\r\nIf you set this policy to Force Installs (Machine-Wide), Microsoft Edge may only be deployed machine-wide if Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"3f972725fe1c0ee0":{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_productfeedbackdisabled","displayName":"Disables feedback mechanisms in the IDE and installer","description":"This policy disables feedback mechanisms throughout the IDE and installer, i.e. thumbs up or down, the feedback window pop-up, send-a-smile feature, info bars without survey links.","helpText":"","infoUrls":[],"categoryId":"802f3065-0bf1-4578-9d6d-ab1ef02db3ec","categoryName":"Feedback Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_productfeedbackdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_productfeedbackdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3f94ffdc3facf291":{"id":"intelligencesettings_apps_notes","displayName":"Notes","description":"If present, configures Notes Intelligence features.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":null},"3f7bf7ee3f42feaa":{"id":"linux_customconfig_executionretries","displayName":"Execution retries","description":"Specifies how many times to retry script execution on failure.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"categoryId":"36716a4c-cedb-47bb-8f4b-5783fedc7c47","categoryName":null,"options":[{"id":"linux_customconfig_executionretries_0","displayName":"No retries","description":null,"helpText":null},{"id":"linux_customconfig_executionretries_1","displayName":"1 time","description":null,"helpText":null},{"id":"linux_customconfig_executionretries_2","displayName":"2 times","description":null,"helpText":null},{"id":"linux_customconfig_executionretries_3","displayName":"3 times","description":null,"helpText":null}]},"3fbf4a91b737d622":{"id":"osrecoverysettings_qualityupdate","displayName":"Quality update only","description":"By default, the qualaity update will be included","helpText":"","infoUrls":[],"categoryId":"b92241c7-e419-4dc7-b373-08e595c1db1d","categoryName":"Operating system","options":[{"id":"osrecoverysettings_qualityupdate_current","displayName":"Current","description":null,"helpText":null},{"id":"osrecoverysettings_qualityupdate_lastmonth","displayName":"Last month","description":null,"helpText":null},{"id":"osrecoverysettings_qualityupdate_monthbeforelast","displayName":"Month before last","description":null,"helpText":null}]},"3f7b41bd5a0edeb0":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist","displayName":"Number of files in the Recent list (User)","description":"This policy setting specifies the number of entries displayed in the Recent list that appears when users click Open on the File tab in Backstage view. \r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent list.\r\n\r\nNote: If you want to prevent items from being added to the Recent list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"bd1dad69-5cbe-415e-8565-e87b15cd4431","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist_1","displayName":"Enabled","description":null,"helpText":null}]},"3f2d9eb5809c3f97":{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp","displayName":"Restrict these programs from being launched from Help (User)","description":"\r\n This policy setting allows you to restrict programs from being run from online Help.\r\n \r\n If you enable this policy setting, you can prevent specified programs from being run from Help. When you enable this policy setting, enter the file names names of the programs you want to restrict, separated by commas.\r\n \r\n If you disable or do not configure this policy setting, users can run all applications from online Help.\r\n \r\n Note: You can also restrict users from running applications by using the Software Restriction Policy settings available in Computer Configuration\\Security Settings.\r\n \r\n Note: This policy setting is available under Computer Configuration and User Configuration. If both are settings are used, any programs listed in either of these locations cannot launched from Help\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-help#admx-help-restrictrunfromhelp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp_1","displayName":"Enabled","description":null,"helpText":null}]},"3f73ff113de48164":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rra","displayName":"Routing and Remote Access (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-rra"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rra_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rra_1","displayName":"Enabled","description":null,"helpText":null}]},"3f234428b61fb46d":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servicedependencies","displayName":"Service Dependencies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-servicedependencies"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servicedependencies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servicedependencies_1","displayName":"Enabled","description":null,"helpText":null}]},"3fcbf4b71f1f3bba":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_homepagelocation","displayName":"Home page URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":null},"3f49e622fc89e1c3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing","displayName":"Enable or disable PIN-less authentication for remote access hosts (User)","description":"Setting the policy to Enabled or leaving it unset lets users pair clients and hosts at connection time, eliminating the need to enter a PIN every time.\r\n\r\nSetting the policy to Disabled makes this feature unavailable.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing_1","displayName":"Enabled","description":null,"helpText":null}]},"3f23819c6f74466e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcelegacydefaultreferrerpolicy","displayName":"Use a default referrer policy of no-referrer-when-downgrade. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcelegacydefaultreferrerpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcelegacydefaultreferrerpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"3fb86e013a4eb58b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_keygenallowedforurlsdesc","displayName":"Allow key generation on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"3ff89647617b0a00":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpmiddleslotannouncementvisible","displayName":"Show the middle slot announcement on the New Tab Page (User)","description":"This policy controls the visibility of the middle slot announcement on the New Tab Page.\r\n\r\nIf the policy is set to Enabled, the New Tab Page will show the middle slot announcement if it is available.\r\n\r\nIf the policy is set to Disabled, the New Tab Page will not show the middle slot announcement even if it is available.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpmiddleslotannouncementvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpmiddleslotannouncementvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"3f2c96caedd81c3b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed","displayName":"Allows enabling the feature NewBaseUrlInheritanceBehavior (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"3f68f8fad910690e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_insertlinkshyperlink","displayName":"Insert tab | Links | Hyperlink (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_insertlinkshyperlink_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_insertlinkshyperlink_1","displayName":"True","description":null,"helpText":null}]},"3f463165e8f48e73":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid","displayName":"Random number generator: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":null},"3f8f9e306f3f137b":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsuggestedsites","displayName":"Turn on Suggested Sites (User)","description":"This policy setting controls the Suggested Sites feature, which recommends websites based on the user’s browsing activity. Suggested Sites reports a user’s browsing history to Microsoft to suggest sites that the user might want to visit.\n\nIf you enable this policy setting, the user is not prompted to enable Suggested Sites. The user’s browsing history is sent to Microsoft to produce suggestions.\n\nIf you disable this policy setting, the entry points and functionality associated with this feature are turned off.\n\nIf you do not configure this policy setting, the user can turn on and turn off the Suggested Sites feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsuggestedsites"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"3f833b36405fe116":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a","displayName":"Include local directory path when uploading files to a server (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3","displayName":"Disable","description":null,"helpText":null}]},"3fe106fa37926312":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended","displayName":"Set the new tab page as the home page (User)","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\r\n\r\nIf you enable this policy, the new tab page is always used for the home page, and the home page URL location is ignored.\r\n\r\nIf you disable this policy, the user's home page can't be the new tab page, unless the URL is set to 'edge://newtab'.\r\n\r\nIf not configured users can choose whether the new tab page is their home page.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3f1bec76b424641e":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls","displayName":"Block the WebHID API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\r\n\r\n * 'WebHidAskForUrls' (Allow the WebHID API on these sites) (if there is a match),\r\n\r\n * 'DefaultWebHidGuardSetting' (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns can't conflict with 'WebHidAskForUrls'. Neither policy takes precedence if a URL matches both patterns.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"3fe7e33b912816c1":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes (User)","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when:\r\n- The 'Passwords' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy ClearBrowsingDataOnExit is enabled\r\n\r\nIf you enable this policy, passwords won't be cleared when the browser closes.\r\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":"","infoUrls":[],"categoryId":"a877a2ff-f144-421f-814c-593e972a8a20","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"3f981af9727240b6":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled","displayName":"Allow users to open files using the DirectInvoke protocol (User)","description":"Allow users to open files using the DirectInvoke protocol. The DirectInvoke protocol allows websites to request that the browser open files from a specific URL using a specific file handler on the user's computer or device.\r\n\r\nIf you enable or don't configure this policy, users can open files using the DirectInvoke protocol.\r\n\r\nIf you disable this policy, users can't open files using the DirectInvoke protocol. Instead, the file will be saved to the file system.\r\n\r\nNote: Disabling DirectInvoke may prevent certain Microsoft SharePoint Online features from working as expected.\r\n\r\nFor more information about DirectInvoke, see https://go.microsoft.com/fwlink/?linkid=2103872 and https://go.microsoft.com/fwlink/?linkid=2099871.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"3f39b4283c0684df":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_legacysamesitecookiebehaviorenabledfordomainlistdesc","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"3ff427b15fcc0a1f":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_internetexplorerintegrationlocalsitelistexpirationdays","displayName":"Specify the number of days that a site remains on the local IE mode site list: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"3fbeca960861e475":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout","displayName":"Sets layout for printing (User)","description":"Configuring this policy sets the layout for printing webpages.\r\n\r\nIf you disable or don't configure this policy, users can decide whether to print webpages in Portrait or Landscape layout.\r\n\r\nIf you enable this policy, the selected option is set as the layout option.\r\n\r\nPolicy options mapping:\r\n\r\n* portrait (0) = Sets layout option as portrait\r\n\r\n* landscape (1) = Sets layout option as landscape\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_1","displayName":"Enabled","description":null,"helpText":null}]},"3feb6cd0f7558c71":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_konkani","displayName":"Konkani (User)","description":"Enables the editing language Konkani","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_konkani_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_konkani_1","displayName":"Enabled","description":null,"helpText":null}]},"3ff080ce5afbb392":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_additionalpermissionsrequesturl_l_checktospecifyacustomurloremailaddress","displayName":"Check to specify a custom URL or e-mail address (User)","description":"","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_additionalpermissionsrequesturl_l_checktospecifyacustomurloremailaddress_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_additionalpermissionsrequesturl_l_checktospecifyacustomurloremailaddress_1","displayName":"True","description":null,"helpText":null}]},"3fc245d006589fde":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog09","displayName":"Trusted Catalog Location #9 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog09_1","displayName":"Enabled","description":null,"helpText":null}]},"3fb84011835cfc05":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofbitstosamplewhenrecording","displayName":"Specify number of bits to sample when recording (User)","description":"Specifies the default number of bits per sample (value is in kbps) used when recording audio. If the appropriate codec is found, then this is the default bit depth used in the Format setting for Linked Audio, found under File tab | Options | Audio & Video.","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofbitstosamplewhenrecording_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofbitstosamplewhenrecording_1","displayName":"Enabled","description":null,"helpText":null}]},"3f5cad40feda163e":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofbackupfolder_l_backupfolder","displayName":"Backup Folder: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":null},"3f1c0ef40efc7df2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_plaintextoptions","displayName":"Plain text options (User)","description":"This policy setting allows you to control how plain text messages are formatted when they are sent from Outlook. \r\n\r\nIf you enable this policy setting, text is automatically wrapped in Internet e-mail messages and attachments are encoded in UUENCODE format. \r\n\r\nIf you disable this policy setting, Outlook uses the standard MIME format to encode attachments in plain text Outlook messages. Users will not be able to change this configuration. \r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to Disabled, but users can modify plain text options in Outlook when required by clicking Tools, clicking Options, clicking the Mail Format tab, clicking Internet Format, and changing the values under \"Plain text options\".","helpText":"","infoUrls":[],"categoryId":"db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","categoryName":"Internet Formatting","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_plaintextoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_plaintextoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"3f506fad54645f3b":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_pathcolon76","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"3f7b0a463a0cc73b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjwindowsinstatusbar","displayName":"Windows in Taskbar (User)","description":"Specifies whether separate windows are opened and displayed as separate buttons on the Windows taskbar for every open project.\r\n \r\nIf you enable this setting, a new window is displayed in the taskbar for each open project.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"251c6873-bf5b-4d85-8185-3c4973b6f33c","categoryName":"Show","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjwindowsinstatusbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjwindowsinstatusbar_1","displayName":"Enabled","description":null,"helpText":null}]},"3fd94fb969325e88":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/40.json b/public/intune-definitions/40.json new file mode 100644 index 000000000000..8245e27fd936 --- /dev/null +++ b/public/intune-definitions/40.json @@ -0,0 +1 @@ +{"40455efc12502e27":{"id":"app_allowed_allowedbinaries_item_cdhash","displayName":"CD Hash","description":"The code signature code directory hash of the binary.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"400714617cb93aaa":{"id":"com.apple.applicationaccess_allowdevicenamemodification","displayName":"Allow Device Name Modification","description":"If false, prevents the user from changing the device name. Requires a supervised device. Available in iOS 9 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowdevicenamemodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowdevicenamemodification_true","displayName":"True","description":null,"helpText":null}]},"40b006fe39cbb9b6":{"id":"com.apple.directoryservice.managed_adpreferreddcserverflag","displayName":"AD Preferred DC Server Flag","description":"If true, enables the AD Preferred DC Server key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adpreferreddcserverflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adpreferreddcserverflag_true","displayName":"True","description":null,"helpText":null}]},"40b0fb9df07972b5":{"id":"com.apple.directoryservice.managed_hostname","displayName":"Host Name","description":"The Active Directory domain to join.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"4038201632e11f29":{"id":"com.apple.loginwindow_poweroffdisabledwhileloggedin","displayName":"Power Off Disabled While Logged In","description":"If true, disables the Power Off menu item when the user is logged in.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_poweroffdisabledwhileloggedin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_poweroffdisabledwhileloggedin_true","displayName":"True","description":null,"helpText":null}]},"40c47487f5667d32":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"40decc6d79b3fe79":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"40bebfca50bda787":{"id":"com.apple.managedclient.preferences_csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled (Deprecated)","description":"The :--foo syntax for the CSS custom state feature is being changed to :state(foo) in Microsoft Edge in order to comply with changes that have been made in Firefox and Safari. This policy lets the deprecated syntax to be used until Stable 133.\n\nThis deprecation might break some Microsoft Edge-only websites that use the deprecated :--foo syntax.\n\nIf you enable this policy, the deprecated syntax will be enabled.\n\nIf you disable this policy or don't set it, the deprecated syntax will be disabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#csscustomstatedeprecatedsyntaxenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_csscustomstatedeprecatedsyntaxenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_csscustomstatedeprecatedsyntaxenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4084d2f11748a071":{"id":"com.apple.managedclient.preferences_silentprintingenabled","displayName":"Enable Silent Printing","description":"This policy controls whether Microsoft Edge uses silent printing.\n\nIf you enable this policy, Edge automatically closes the print preview window and prints to the default printer using its default settings. If the default printer is Save as PDF, the file is saved to the user's Downloads folder.\n\nIf you disable or don't configure this policy, silent printing is disabled. The print preview window stays open and the user must choose print settings as usual.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#silentprintingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_silentprintingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_silentprintingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"409278c1342ab59e":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_display sleep timer","displayName":"Display Sleep Timer","description":"The display sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"407223bf9a62064f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\n\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known dangerous downloads or that have dangerous file type extensions.\n\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\n\nSet 'BlockAllDownloads' to block all downloads.\n\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\n\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\n\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\n\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\n\nPolicy options mapping:\n\n* DefaultDownloadSecurity (0) = No special restrictions\n\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\n\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\n\n* BlockAllDownloads (3) = Block all downloads\n\n* BlockMaliciousDownloads (4) = Block malicious downloads\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_defaultdownloadsecurity","displayName":"No special restrictions","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockdangerousdownloads","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockpotentiallydangerousdownloads","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockalldownloads","displayName":"Block all downloads","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockmaliciousdownloads","displayName":"Block malicious downloads","description":null,"helpText":null}]},"40c7f05822414c4f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.filesystemreadblockedforurls","displayName":"Block read access via the File System API on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\n\nIf you don't set this policy, \"DefaultFileSystemReadGuardSetting\" applies for all sites, if set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemReadAskForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"403d710be6637068":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationtestingallowed","displayName":"Allow Internet Explorer mode testing (Obsolete)","description":"This policy is obsolete because it has been superseded by an improved feature. It doesn't work in Microsoft Edge after version 94. To allow users to open applications in Internet Explorer mode, use the \"InternetExplorerIntegrationReloadInIEModeAllowed\" policy instead. Alternatively, users can still use the --ie-mode-test flag.\n\nThis policy allows users to test applications in Internet Explorer mode by opening an Internet Explorer mode tab in Microsoft Edge.\n\nUsers can do so from within the \"More tools\" menu by selecting 'Open sites in Internet Explorer mode'.\n\nAdditionally, users can test their applications in a modern browser without removing applications from the site list using the option 'Open sites in Edge mode'.\n\nThis setting works in conjunction with \"InternetExplorerIntegrationLevel\" which is set to 'IEMode'.\n\nIf you enable this policy, the option 'Open sites in Internet Explorer mode' is visible under \"More tools\". Users can view their sites in Internet Explorer mode on this tab. Another option 'Open sites in Edge mode' is also visible under \"More tools\" to help testing sites in a modern browser without removing them from the site list. If the \"InternetExplorerIntegrationReloadInIEModeAllowed\" policy is enabled, it takes precedence and these options will not be visible under \"More tools\".\n\nIf you disable or don't configure this policy, users can't see the options 'Open in Internet Explorer mode' and 'Open in Edge mode' under \"More tools\" menu. However, users can configure these options with the --ie-mode-test flag.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationtestingallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationtestingallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"4064b2b0f77f4a38":{"id":"com.microsoft.edge.mamedgeappconfigsettings.onsecurityevententerpriseconnector","displayName":"Configuration policy for Microsoft Edge for Business Reporting Connectors","description":"Defines the Microsoft Edge for Business Reporting Connectors service settings that apply when a security event occurs in Microsoft Edge. These events include negative verdicts from Data Loss Prevention Connectors, password reuse, navigation to unsafe pages, and other security-sensitive actions.\n\nThe service_provider field specifies the reporting service provider. The enabled_event_names field lists the security events enabled for that provider.\n\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2325446.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"401c6f87c2e2031b":{"id":"device_vendor_msft_defender_configuration_aiagentnetworkinspection","displayName":"Ai Agent Network Inspection","description":"This setting controls Defender's runtime AI Agent network protection that scans network traffic originated from AI Agents. When enabled, Defender inspects the network traffic of agent processes and blocks any traffic that matches a detection for malware/abuse signals before the agent executes it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_aiagentnetworkinspection_0","displayName":"AI Agent protection is disabled (default).","description":"AI Agent protection is disabled (default).","helpText":null},{"id":"device_vendor_msft_defender_configuration_aiagentnetworkinspection_1","displayName":"AI Agent protection is enabled in block mode - prompts that match a detection are blocked.","description":"AI Agent protection is enabled in block mode - prompts that match a detection are blocked.","helpText":null},{"id":"device_vendor_msft_defender_configuration_aiagentnetworkinspection_2","displayName":"AI Agent protection is enabled in audit mode - prompts that match a detection are logged but not blocked.","description":"AI Agent protection is enabled in audit mode - prompts that match a detection are logged but not blocked.","helpText":null}]},"409b80a9bbdaa412":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_prohibitonprivatenet","displayName":"Prohibit operation while in private network","description":null,"helpText":"","infoUrls":[],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_prohibitonprivatenet_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_prohibitonprivatenet_1","displayName":"True","description":null,"helpText":null}]},"407e6fdcc553f3da":{"id":"device_vendor_msft_policy_config_admx_logon_disablestatusmessages","displayName":"Remove Boot / Shutdown / Logon / Logoff status messages","description":"This policy setting suppresses system status messages.\r\n\r\nIf you enable this setting, the system does not display a message reminding users to wait while their system starts or shuts down, or while users log on or off.\r\n\r\nIf you disable or do not configure this policy setting, the system displays the message reminding users to wait while their system starts or shuts down, or while users log on or off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disablestatusmessages"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_logon_disablestatusmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_disablestatusmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"4051ab1c720b0192":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_quarantine_purgeitemsafterdelay_quarantine_purgeitemsafterdelay","displayName":"Configure removal of items from Quarantine folder","description":null,"helpText":"","infoUrls":[],"categoryId":"a004deb8-6f52-4411-8d94-41563a8203fc","categoryName":"Quarantine","options":null},"40dbc78ad0285d11":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_smb","displayName":"Configure BranchCache for network files","description":"This policy setting is used only when you have deployed one or more BranchCache-enabled file servers at your main office. This policy setting specifies when client computers in branch offices start caching content from file servers based on the network latency - or delay - that occurs when the clients download content from the main office over a Wide Area Network (WAN) link. When you configure a value for this setting, which is the maximum round trip network latency allowed before caching begins, clients do not cache content until the network latency reaches the specified value; when network latency is greater than the value, clients begin caching content after they receive it from the file servers.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache latency settings are not applied to client computers by this policy. In the circumstance where client computers are domain members but you do not want to configure a BranchCache latency setting on all client computers, you can specify Not Configured for this domain Group Policy setting, and then configure local computer policy to enable BranchCache latency settings on individual client computers. Because the domain Group Policy setting is not configured, it will not over-write the latency setting that you use on individual client computers.\r\n\r\n- Enabled. With this selection, the BranchCache maximum round trip latency setting is enabled for all client computers where the policy is applied. For example, if Configure BranchCache for network files is enabled in domain Group Policy, the BranchCache latency setting that you specify in the policy is turned on for all domain member client computers to which the policy is applied.\r\n\r\n- Disabled. With this selection, BranchCache client computers use the default latency setting of 80 milliseconds.\r\n\r\nIn circumstances where this policy setting is enabled, you can also select and configure the following option:\r\n\r\n- Type the maximum round trip network latency (milliseconds) after which caching begins. Specifies the amount of time, in milliseconds, after which BranchCache client computers begin to cache content locally.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-enablewindowsbranchcache-smb"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_smb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_smb_1","displayName":"Enabled","description":null,"helpText":null}]},"4036d879f62b4f59":{"id":"device_vendor_msft_policy_config_admx_previousversions_disablelocalpage_2","displayName":"Hide previous versions list for local files","description":"This policy setting lets you hide the list of previous versions of files that are on local disks. The previous versions could come from the on-disk restore points or from backup media.\r\n\r\nIf you enable this policy setting, users cannot list or restore previous versions of files on local disks.\r\n\r\nIf you disable this policy setting, users cannot list and restore previous versions of files on local disks.\r\n\r\nIf you do not configure this policy setting, it defaults to disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablelocalpage-2"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"device_vendor_msft_policy_config_admx_previousversions_disablelocalpage_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_previousversions_disablelocalpage_2_1","displayName":"Enabled","description":null,"helpText":null}]},"401a52c7e3b2cc99":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_refresh_unit_options","displayName":"Global Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"4004719902de11ed":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"af351b0c-3d9e-4b18-957b-8179e4eaba15","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_0","displayName":"Safe Browsing is never active.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_1","displayName":"Safe Browsing is active in the standard mode.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_2","displayName":"Safe Browsing is active in the enhanced mode. This mode provides better security, but requires sharing more browsing information with Google.","description":null,"helpText":null}]},"40ee33dbb8381462":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed","displayName":"Allow or deny video capture","description":"Setting the policy to Enabled or leaving it unset means that, with the exception of URLs set in the VideoCaptureAllowedUrls list, users get prompted for video capture access.\r\n\r\nSetting the policy to Disabled turns off prompts, and video capture is only available to URLs set in the VideoCaptureAllowedUrls list.\r\n\r\nNote: The policy affects all video input (not just the built-in camera).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"4012cc0d1c881834":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls","displayName":"Allow notifications on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can display notifications.\r\n\r\nLeaving the policy unset means DefaultNotificationsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"404ceb0ec51b5119":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore","displayName":"Enable App Installer Microsoft Store Source Certificate Validation Bypass","description":"This policy controls whether the Windows Package Manager will validate the Microsoft Store certificate hash matches to a known Microsoft Store certificate when initiating a connection to the Microsoft Store Source. \n\nIf you enable this policy, the Windows Package Manager will bypass the Microsoft Store certificate validation. \n\nIf you disable this policy, the Windows Package Manager will validate the Microsoft Store certificate used is valid and belongs to the Microsoft Store before communicating with the Microsoft Store source. \n\nIf you do not configure this policy, the Windows Package Manager administrator settings will be adhered to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablebypasscertificatepinningformicrosoftstore"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore_1","displayName":"Enabled","description":null,"helpText":null}]},"408ad53bf4738424":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory","displayName":"Log Directory","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the location where log files should be stored. Local and UNC paths are accepted. Default is %ProgramData%\\FSLogix\\Logs\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\LogDir\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"40c6905b5c80dc0f":{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate","displayName":"Trusted Sites","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_4","displayName":"High","description":null,"helpText":null}]},"40027f1f15efde9e":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803","displayName":"Allow file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_3","displayName":"Disable","description":null,"helpText":null}]},"40fd3f795879fc57":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc","displayName":"Control where security restrictions on insecure origins apply (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"40edefc99fa139dc":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_defaultprinterselection","displayName":"Default printer selection rules (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"404068cc5d3d56b2":{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext","displayName":"Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 132.\r\n\r\nThis policy has been obsoleted as of Edge 133. Instead of this obsolete policy, we recommend using 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane).\r\n\r\nThis policy controls access to page contents for Copilot with Commercial Data Protection in the Edge sidebar. This policy applies only to Microsoft Entra ID profiles. To summarize pages and interact with text selections, it needs to be able to access the page contents. This policy does not apply to MSA profiles. This policy doesn't control access for Copilot without Commercial Data Protection. Access for Copilot without Commercial Data Protection is controlled by the policy CopilotPageContext.\r\n\r\nIf you enable this policy, Copilot with Commercial Data Protection will have access to page context.\r\n\r\nIf you don't configure this policy, a user can enable access to page context for Copilot with Commercial Data Protection using the setting toggle in Edge.\r\n\r\nIf you disable this policy, Copilot with Commercial Data Protection will not be able to access page context.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},"40b50ff7d8c7901d":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed","displayName":"Allow remote debugging","description":"Controls whether users may use remote debugging.\r\n\r\nIf you enable or don't configure this policy, users may use remote debugging by specifying --remote-debug-port and --remote-debugging-pipe command line switches.\r\n\r\nIf you disable this policy, users are not allowed to use remote debugging.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"40f9fc8ffe856b2f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_grooveexe140","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_grooveexe140_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_grooveexe140_1","displayName":"True","description":null,"helpText":null}]},"4075cfb3e976f9fa":{"id":"device_vendor_msft_policy_config_search_allowsearchtouselocation","displayName":"Allow Search To Use Location","description":"Specifies whether search can leverage location information. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowsearchtouselocation"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_allowsearchtouselocation_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowsearchtouselocation_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"40c71a9bc754fe88":{"id":"device_vendor_msft_policy_config_userrights_profilesingleprocess","displayName":"Profile Single Process","description":"This user right determines which users can use performance monitoring tools to monitor the performance of system processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#profilesingleprocess"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"403dcae45010403b":{"id":"softwareupdate_deferrals_minorperiodindays","displayName":"Minor Period In Days","description":"Specifies the number of days to defer a minor OS software update on the device. It also defers major updates for iOS. When set, software updates only appear after the specified delay, following the release of the software update.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"40b92e191d94f11a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles83","displayName":"Path to shared Workgroup information file for secured MDB files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a788a6e5-ab3f-41e5-96c8-ee59627dcb4d","categoryName":"Workgroup Administrator...","options":null},"40550745d9497ba1":{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion_l_restrictcharactercoderangeofconversionid","displayName":"Character code range: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":null},"40315ee863e11c26":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_1","displayName":"Ignore custom consent settings (User)","description":"This policy setting determines the behavior of the Configure Default Consent setting in relation to custom consent settings.\r\n\r\nIf you enable this policy setting, the default consent levels of Windows Error Reporting always override any other consent policy setting.\r\n\r\nIf you disable or do not configure this policy setting, custom consent policy settings for error reporting determine the consent level for specified event types, and the default consent setting determines only the consent level of any other error reports.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werconsentoverride-1"],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_1_1","displayName":"Enabled","description":null,"helpText":null}]},"407db20eb53b09ea":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg","displayName":"Allow Dinosaur Easter Egg Game (User)","description":"Setting the policy to True allows users to play the dinosaur game. Setting the policy to False means users can't play the dinosaur easter egg game when device is offline.\r\n\r\nLeaving the policy unset means users can't play the game on enrolled Google Chrome OS, but can under other circumstances.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg_1","displayName":"Enabled","description":null,"helpText":null}]},"40c3686ac4b7da2b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended","displayName":"Show Full URLs (User)","description":"This feature enables display of the full URL in the address bar.\r\nIf this policy is set to True, then the full URL will be shown in the address bar, including schemes and subdomains.\r\nIf this policy is set to False, then the default URL display will apply.\r\nIf this policy is left unset, then the default URL display will apply and the user will be able to toggle between default and full URL display with a context menu option.\r\n","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"403332350d42dd2b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb","displayName":"Set limit on megabytes of memory a single Chrome instance can use. (User)","description":"Configures the amount of memory that a single Google Chrome instance can use before tabs start being discarded (I.E. the memory used by the tab will be freed and the tab will have to be reloaded when switched to) to save memory.\r\n\r\nIf the policy is set, browser will begin to discard tabs to save memory once the limitation is exceeded. However, there is no guarantee that the browser is always running under the limit. Any value under 1024 will be rounded up to 1024.\r\n\r\nIf this policy is not set, the browser will only begin attempts to save memory once it has detected that the amount of physical memory on its machine is low.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_1","displayName":"Enabled","description":null,"helpText":null}]},"407030feda4cf6bf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting","displayName":"Default mediastream setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting_2","displayName":"Do not allow any site to access the camera and microphone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting_3","displayName":"Ask every time a site wants to access the camera and/or microphone","description":null,"helpText":null}]},"4085bcbeb859b67a":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings","displayName":"Dynamic Code Settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings_0","displayName":"Default dynamic code settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings_1","displayName":"Prevent the browser process from creating dynamic code","description":null,"helpText":null}]},"400c04868c772937":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautocompleteforcellvalues","displayName":"Enable AutoComplete for cell values (User)","description":"This policy setting sets the \"Enable AutoComplete for cell values\" option found under File tab | Options | Advanced | Editing Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will allow AutoComplete for cell values. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will turn off the AutoComplete feature.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautocompleteforcellvalues_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautocompleteforcellvalues_1","displayName":"Enabled","description":null,"helpText":null}]},"40b7584992e1e179":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay","displayName":"AutoRecover delay (User)","description":"This policy specifies how long (in seconds) the user must be idle before AutoRecover information will be saved.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"406acff94692844a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended","displayName":"Allow importing of payment info (User)","description":"Allows users to import payment info from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\r\n\r\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"40e9e722ea64dec9":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled","displayName":"DataURL Whitespace Preservation for all media types (User)","description":"This policy provides a temporary opt-out for changes to how Edge handles whitepsace in data URLS.\r\nPreviously, whitespace would be kept only if the top level media type was text or contained the media type string xml.\r\nNow, whitespace will be preserved in all data URLs, regardless of media type.\r\n\r\nIf this policy is left unset or is set to True, the new behavior is enabled.\r\n\r\nWhen this policy is set to False, the old behavior is enabled.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"40d543e905a89e29":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended","displayName":"Manage Search Engines (User)","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine.\r\nYou do not need to specify the encoding. Starting in Microsoft Edge 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge 80.\r\n\r\nStarting in Microsoft Edge 83, you can enable search engine discovery with the allow_search_engine_discovery optional parameter. This parameter must be the first item in the list. If allow_search_engine_discovery is not specified, search engine discovery will be disabled by default. Starting in Microsoft Edge 84, you can set this policy as a recommended policy to allow search provider discovery. You do not need to add the allow_search_engine_discovery optional parameter.\r\n\r\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\r\n\r\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\r\n\r\nIf the 'DefaultSearchProviderSearchURL' (Default search provider search URL) policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allow_search_engine_discovery\": true\r\n }, \r\n {\r\n \"is_default\": true, \r\n \"suggest_url\": \"https://www.example1.com/qbox?query={searchTerms}\", \r\n \"search_url\": \"https://www.example1.com/search?q={searchTerms}\", \r\n \"name\": \"Example1\", \r\n \"keyword\": \"example1.com\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example2.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example2.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example2\", \r\n \"keyword\": \"example2.com\", \r\n \"image_search_post_params\": \"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}\", \r\n \"search_url\": \"https://www.example2.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example3.com/qbox?query={searchTerms}\", \r\n \"search_url\": \"https://www.example3.com/search?q={searchTerms}\", \r\n \"name\": \"Example3\", \r\n \"keyword\": \"example3.com\", \r\n \"encoding\": \"UTF-8\", \r\n \"image_search_url\": \"https://www.example3.com/images/detail/search?iss=sbiupload\"\r\n }, \r\n {\r\n \"search_url\": \"https://www.example4.com/search?q={searchTerms}\", \r\n \"name\": \"Example4\", \r\n \"keyword\": \"example4.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"404d89a4e33aaef8":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"402cbf7ee909d367":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended","displayName":"Configure Sleeping Tabs (User)","description":"This policy setting lets you configure whether to turn on Sleeping Tabs. Sleeping Tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, Sleeping Tabs is turned on.\r\n\r\nIndividual sites may be blocked from being put to sleep by configuring the policy 'SleepingTabsBlockedForUrls' (Block Sleeping Tabs on specific sites).\r\n\r\nIf you enable this setting, Sleeping Tabs is turned on.\r\n\r\nIf you disable this setting, Sleeping Tabs is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Sleeping Tabs.","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"40b5bf9d44227668":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome2","displayName":"Replace MAPI - Home2 (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"home phone 2\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"home phone 2\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome2_1","displayName":"Enabled","description":null,"helpText":null}]},"401255ca50554e13":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tajik","displayName":"Tajik (User)","description":"Enables the editing language Tajik","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tajik_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tajik_1","displayName":"Enabled","description":null,"helpText":null}]},"40661b0d0bc18e45":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setuserpathforthelabelpagesizeupdatefiles_l_setuserpathforthelabelpagesizeupdatefilesid","displayName":"User path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":null},"404b2e607c6fcc01":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_userqueriespath","displayName":"User queries path (User)","description":"Specifies the location of data sources for database queries.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_userqueriespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_userqueriespath_1","displayName":"Enabled","description":null,"helpText":null}]},"400149cf48c5ce48":{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockolegraph","displayName":"Block OLE Graph (User)","description":"This policy setting allows you to control whether Object Linking and Embedding (OLE) Graph functionality runs in Microsoft 365 apps.\r\n\r\nIf you enable this policy setting, OLE Graph, including MSGraph.Application and MSGraph.Chart, will not run in any Microsoft 365 app. Instead, a static image will render in its place.\r\n\r\nIf you disable this policy setting, OLE Graph will run in Microsoft 365 apps.\r\n\r\nIf you don't configure this policy setting, OLE Graph will run in Microsoft 365 apps.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockolegraph_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockolegraph_1","displayName":"Enabled","description":null,"helpText":null}]},"404a190ac12bc8dd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_uselegacyoutlookauthenticationdialogs","displayName":"Use legacy Change Password authentication dialog boxes (User)","description":"By default, Outlook displays the Windows authentication dialog box when users are prompted to change their passwords. By enabling this setting, you can change this behavior so that older-style Outlook dialog boxes that include the Change Password button are displayed.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_uselegacyoutlookauthenticationdialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_uselegacyoutlookauthenticationdialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"4045f9b681b308b1":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_l_descriptioncolon62","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"40f0f408b3f5753c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09_l_pathcolon40","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"407a1f51a4bac437":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draftfont","displayName":"Use draft font in Draft and Outline views (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draftfont_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draftfont_1","displayName":"Enabled","description":null,"helpText":null}]},"409aa410696853ee":{"id":"vendor_msft_firewall_mdmstore_privateprofile_shielded","displayName":"Shielded","description":"This value is used as an on/off switch. If this value is on and EnableFirewall is on, the server MUST block all incoming traffic regardless of other policy settings. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_shielded_false","displayName":"False","description":"Shielding Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_shielded_true","displayName":"True","description":"Shielding On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/41.json b/public/intune-definitions/41.json new file mode 100644 index 000000000000..28264811980b --- /dev/null +++ b/public/intune-definitions/41.json @@ -0,0 +1 @@ +{"4109bee226dd1c9d":{"id":"com.apple.cellularprivatenetwork.managed_versionnumber","displayName":"Version Number","description":"The version number of this dataset that the system uses to track updates.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"4159c5cb4b6372bd":{"id":"com.apple.extensiblesso_platformsso_enableregistrationduringsetup","displayName":"Enable Registration During Setup","description":"If `true`, the system enables the PlatformSSO registration process during Setup Assistant on devices running macOS 26 and later. Set this key to `true` when configuring PlatformSSO before enrollment using the `com.apple.psso.required` error response.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_enableregistrationduringsetup_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_enableregistrationduringsetup_true","displayName":"Enabled","description":null,"helpText":null}]},"410eed4e015e7e8c":{"id":"com.apple.managedclient.preferences_tags_item_value","displayName":"Value of tag","description":"Only one value per tag type can be set. Type of tags are unique, and should not be repeated in the same configuration profile.","helpText":null,"infoUrls":[],"categoryId":"b77a3a7b-6fab-4240-b5c3-852aa78781d5","categoryName":"Endpoint Detection and Response (EDR) preferences","options":null},"411f2bad1d791a71":{"id":"com.apple.managedclient.preferences_tls13earlydataenabled","displayName":"Control whether TLS 1.3 Early Data is enabled in Microsoft Edge","description":"This policy controls whether TLS 1.3 Early Data is enabled in Microsoft Edge.\n\nTLS 1.3 Early Data is an extension that allows an HTTP request to be sent in parallel with the TLS handshake. When enabled and supported by the server, this can improve page load performance.\n\nEnabled – Microsoft Edge enables TLS 1.3 Early Data.\n\nDisabled – Microsoft Edge disables TLS 1.3 Early Data.\n\nNot configured – Microsoft Edge follows the default rollout process for TLS 1.3 Early Data.\n\nNOTE: When this feature is enabled, whether TLS 1.3 Early Data is used depends on server support. Most modern TLS servers and middleware can handle or reject Early Data without interrupting the connection. However, improperly implemented TLS stacks may cause connection failures. If such issues occur, contact the device or software vendor for a resolution.\n\nThis policy is temporary and intended to help test for compatibility issues. It may be removed in a future release once the feature is fully rolled out.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#tls13earlydataenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_tls13earlydataenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_tls13earlydataenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"41d52a38fae27c9c":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"415f486b577b213e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.browsernetworktimequeriesenabled","displayName":"Allow queries to a Browser Network Time service","description":"Prevents Microsoft Edge from occasionally sending queries to a browser network time service to retrieve an accurate timestamp.\n\nIf you disable this policy, Microsoft Edge stops sending queries to a browser network time service.\n\nIf you enable this policy or don't configure it, Microsoft Edge occasionally sends queries to a browser network time service.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.browsernetworktimequeriesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.browsernetworktimequeriesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"41308eafb348d376":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect","displayName":"Specify how \"in-page\" navigations to unconfigured sites behave when started from Internet Explorer mode pages","description":"An \"in-page\" navigation is started from a link, a script, or a form on the current page. It can also be a server-side redirect of a previous \"in-page\" navigation attempt. Conversely, a user can start a navigation that isn't \"in-page\" and that's independent of the current page in several ways by using the browser controls, for example, using the address bar, the back button, or a favorite link.\n\nThis setting lets you specify whether navigations from pages loaded in Internet Explorer mode to unconfigured sites (that aren't configured in the Enterprise Mode Site List) switch back to Microsoft Edge or remain in Internet Explorer mode.\n\nThis setting works in conjunction with \"InternetExplorerIntegrationLevel\" policy that's set to 'IEMode', and with \"InternetExplorerIntegrationSiteList\" policy where the list has at least one entry.\n\nIf you disable or don't configure this policy, only sites configured to open in Internet Explorer mode open in that mode. Any site not configured to open in Internet Explorer mode is redirected back to Microsoft Edge.\n\nIf you set this policy to 'Default', only sites configured to open in Internet Explorer mode open in that mode. Any site not configured to open in Internet Explorer mode is redirected back to Microsoft Edge.\n\nIf you set this policy to 'AutomaticNavigationsOnly', you get the default experience except that all automatic navigations (such as 302 redirects) to unconfigured sites are kept in Internet Explorer mode.\n\nIf you set this policy to 'AllInPageNavigations', all navigations from pages loaded in IE mode to unconfigured sites are kept in Internet Explorer mode (Least Recommended).\n\nIf the \"InternetExplorerIntegrationReloadInIEModeAllowed\" policy allows users to reload sites in Internet Explorer mode, then all in-page navigations from unconfigured sites that users have chosen to reload in Internet Explorer mode are kept in Internet Explorer mode, regardless of how this policy is configured.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2105106.\n\nPolicy options mapping:\n\n* Default (0) = Default\n\n* AutomaticNavigationsOnly (1) = Keep only automatic navigations in Internet Explorer mode\n\n* AllInPageNavigations (2) = Keep all in-page navigations in Internet Explorer mode\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect_default","displayName":"Default","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect_automaticnavigationsonly","displayName":"Keep only automatic navigations in Internet Explorer mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect_allinpagenavigations","displayName":"Keep all in-page navigations in Internet Explorer mode","description":null,"helpText":null}]},"41082ef0df8fafcb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxymode","displayName":"Configure proxy server settings (Deprecated)","description":"This policy is deprecated and doesn't work in Microsoft Edge version 91. Use \"ProxySettings\" instead.\n\nIf you set this policy to Enabled, you can specify the proxy server Microsoft Edge uses and prevents users from changing proxy settings. Microsoft Edge ignores all proxy-related options specified from the command line. The policy is only applied if the \"ProxySettings\" policy isn't specified.\n\nOther options are ignored if you choose one of the following options:\n * direct = Never use a proxy server and always connect directly\n * system = Use system proxy settings\n * auto_detect = Auto detect the proxy server\n\nIf you choose to use:\n * fixed_servers = Fixed proxy servers. You can specify further options with \"ProxyServer\" and \"ProxyBypassList\".\n * pac_script = A .pac proxy script. Use \"ProxyPacUrl\" to set the URL to a proxy .pac file.\n\nFor detailed examples, go to https://go.microsoft.com/fwlink/?linkid=2094936.\n\nIf you don't configure this policy, users can choose their own proxy settings.\n\nPolicy options mapping:\n\n* ProxyDisabled (direct) = Never use a proxy\n\n* ProxyAutoDetect (auto_detect) = Auto detect proxy settings\n\n* ProxyPacScript (pac_script) = Use a .pac proxy script\n\n* ProxyFixedServers (fixed_servers) = Use fixed proxy servers\n\n* ProxyUseSystem (system) = Use system proxy settings\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxydisabled","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxyautodetect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxypacscript","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxyfixedservers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxyusesystem","displayName":"Use system proxy settings","description":null,"helpText":null}]},"41dd2952f305b503":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvactivedirectorybackup_name","displayName":"Save BitLocker recovery information to AD DS for fixed data drives","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvactivedirectorybackup_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvactivedirectorybackup_name_1","displayName":"True","description":null,"helpText":null}]},"4183538c9c8ce7c9":{"id":"device_vendor_msft_defender_configuration_randomizescheduletasktimes","displayName":"Randomize Schedule Task Times","description":"In Microsoft Defender Antivirus, randomize the start time of the scan to any interval from 0 to 23 hours. This can be useful in virtual machines or VDI deployments.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_randomizescheduletasktimes_1","displayName":"Widen or narrow the randomization period for scheduled scans. Specify a randomization window of between 1 and 23 hours by using the setting SchedulerRandomizationTime.","description":"Widen or narrow the randomization period for scheduled scans. Specify a randomization window of between 1 and 23 hours by using the setting SchedulerRandomizationTime.","helpText":null},{"id":"device_vendor_msft_defender_configuration_randomizescheduletasktimes_0","displayName":"Scheduled tasks will not be randomized.","description":"Scheduled tasks will not be randomized.","helpText":null}]},"41de8980a0af70fc":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto","displayName":"To","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto_0","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto_1","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto_4","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto_5","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysto_6","displayName":"Saturday","description":null,"helpText":null}]},"4161f9f6cab4a794":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_allowondomain","displayName":"Allow operation while in domain","description":null,"helpText":"","infoUrls":[],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_allowondomain_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_lltd_enablelltdio_allowondomain_1","displayName":"True","description":null,"helpText":null}]},"41bf9175d76b71e6":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_processes","displayName":"Process Exclusions","description":"This policy setting allows you to disable real-time scanning for any file opened by any of the specified processes. This policy does not apply to scheduled scans. The process itself will not be excluded. To exclude the process, use the Path exclusion. Processes should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of the path to the process image. Note that only executables can be excluded. For example, a process might be defined as: \"c:\\windows\\app.exe\". The value is not used and it is recommended that this be set to 0.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-exclusions-processes"],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_processes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_processes_1","displayName":"Enabled","description":null,"helpText":null}]},"4116f86e44f98a15":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxsize","displayName":"Specify the maximum size of archive files to be scanned","description":"This policy setting allows you to configure the maximum size of archive files such as .ZIP or .CAB that will be scanned. The value represents file size in kilobytes (KB). The default value is 0 and represents no limit to archive size for scanning.\r\n\r\n If you enable this setting, archive files less than or equal to the size specified will be scanned.\r\n\r\n If you disable or do not configure this setting, archive files will be scanned according to the default value.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-archivemaxsize"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxsize_1","displayName":"Enabled","description":null,"helpText":null}]},"41e935b9b81b0f5e":{"id":"device_vendor_msft_policy_config_admx_msi_msi_disableuserinstalls","displayName":"Prohibit User Installs","description":"This policy setting allows you to configure user installs. To configure this policy setting, set it to enabled and use the drop-down list to select the behavior you want.\r\n\r\nIf you do not configure this policy setting, or if the policy setting is enabled and \"Allow User Installs\" is selected, the installer allows and makes use of products that are installed per user, and products that are installed per computer. If the installer finds a per-user install of an application, this hides a per-computer installation of that same product.\r\n\r\nIf you enable this policy setting and \"Hide User Installs\" is selected, the installer ignores per-user applications. This causes a per-computer installed application to be visible to users, even if those users have a per-user install of the product registered in their user profile.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-msi-disableuserinstalls"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_msi_disableuserinstalls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_msi_disableuserinstalls_1","displayName":"Enabled","description":null,"helpText":null}]},"41b2f46799b89e2c":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2016","displayName":"Microsoft Office 365 Outlook 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Outlook 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Outlook 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365outlook2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2016_1","displayName":"Enabled","description":null,"helpText":null}]},"41ad5a95c507f4c0":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_enable_ntpclient","displayName":"Enable Windows NTP Client","description":"This policy setting specifies whether the Windows NTP Client is enabled.\r\n\r\nEnabling the Windows NTP Client allows your computer to synchronize its computer clock with other NTP servers. You might want to disable this service if you decide to use a third-party time provider.\r\n\r\nIf you enable this policy setting, you can set the local computer clock to synchronize time with NTP servers.\r\n\r\nIf you disable or do not configure this policy setting, the local computer clock does not synchronize time with NTP servers.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-w32time#admx-w32time-w32time-policy-enable-ntpclient"],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":[{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_enable_ntpclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_enable_ntpclient_1","displayName":"Enabled","description":null,"helpText":null}]},"410dbe3b0dba164c":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditaccountlockout","displayName":"Account Logon Logoff Audit Account Lockout","description":"This policy setting allows you to audit events generated by a failed attempt to log on to an account that is locked out. If you configure this policy setting, an audit event is generated when an account cannot log on to a computer because the account is locked out. Success audits record successful attempts and Failure audits record unsuccessful attempts. Logon events are essential for understanding user activity and to detect potential attacks.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditaccountlockout"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditaccountlockout_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditaccountlockout_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditaccountlockout_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditaccountlockout_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"412e1c4846e29af6":{"id":"device_vendor_msft_policy_config_browser_allowsmartscreen","displayName":"Allow Smart Screen","description":"This setting lets you decide whether to turn on Windows Defender SmartScreen.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsmartscreen"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowsmartscreen_0","displayName":"Block","description":"Turned off. Do not protect users from potential threats and prevent users from turning it on.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowsmartscreen_1","displayName":"Allow","description":"Turned on. Protect users from potential threats and prevent users from turning it off.","helpText":null}]},"41f6258e7b947065":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks","displayName":"Import bookmarks from default browser on first run","description":"Setting the policy to Enabled imports bookmarks from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no bookmarks are imported on first run.\r\n\r\nUsers can trigger an import dialog and the bookmarks checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks_1","displayName":"Enabled","description":null,"helpText":null}]},"41006760dc66a77f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode","displayName":"Print Rasterization Mode","description":"Controls how Google Chrome prints on Microsoft® Windows®.\r\n\r\nWhen printing to a non-PostScript printer on Microsoft® Windows®, sometimes print jobs need to be rasterized to print correctly.\r\n\r\nWhen this policy is set to Full, Google Chrome will do full page rasterization if necessary.\r\n\r\nWhen this policy is set to Fast, Google Chrome will avoid rasterization if possible, reducing the amount of rasterization can help reduce print job sizes and increase printing speed.\r\n\r\nWhen this policy is not set, Google Chrome will be in Full mode.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_1","displayName":"Enabled","description":null,"helpText":null}]},"41f4ecbe2197029f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger","displayName":"Password protection warning trigger","description":"Setting the policy lets you control the triggering of password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\r\n\r\nUse PasswordProtectionLoginURLs and PasswordProtectionChangePasswordURL to set which password to protect.\r\n\r\nIf this policy is set to:\r\n\r\n* PasswordProtectionWarningOff, no password protection warning will be shown.\r\n\r\n* PasswordProtectionWarningOnPasswordReuse, password protection warning will be shown when the user reuses their protected password on a non-allowed site.\r\n\r\n* PasswordProtectionWarningOnPhishingReuse, password protection warning will be shown when the user reuses their protected password on a phishing site.\r\n\r\nLeaving the policy unset has the password protection service only protect Google passwords, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_1","displayName":"Enabled","description":null,"helpText":null}]},"41d72f3d0dfabad4":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"411a258b39927a4c":{"id":"device_vendor_msft_policy_config_defender_realtimescandirection","displayName":"Real Time Scan Direction","description":"Controls which sets of files should be monitored. Note If AllowOnAccessProtection is not allowed, then this configuration can be used to monitor specific files.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#realtimescandirection"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_realtimescandirection_0","displayName":"Monitor all files (bi-directional).","description":"Monitor all files (bi-directional).","helpText":null},{"id":"device_vendor_msft_policy_config_defender_realtimescandirection_1","displayName":"Monitor incoming files.","description":"Monitor incoming files.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_realtimescandirection_2","displayName":"Monitor outgoing files.","description":"Monitor outgoing files.","helpText":null}]},"4198caf44c1abca2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize_512","displayName":"512 bytes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize_4096","displayName":"4 KB","description":null,"helpText":null}]},"41a9903fd0f65c9e":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"41ce4f43ec6c9dce":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls","displayName":"Block JavaScript on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to run JavaScript.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultJavaScriptSetting' (Default JavaScript setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4187c2e9bcba3380":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled","displayName":"Web Select Enabled","description":"Web select lets users select and copy web content while preserving its formatting when pasted in most cases. It also allows more targeted selection on some web elements, such as copying a single column in a table.\r\n\r\nIf you enable or don't configure this policy, Web select is available through the right click context menu and the CTRL+SHIFT+X keyboard shortcut.\r\n\r\nIf you disable this policy, Web select won't be available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"410fb815c7c4bff6":{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled","displayName":"Enable proactive authentication","description":"This policy controls the proactive authentication in Microsoft Edge, that connects the signed-in user identity with Microsoft Bing, MSN and Copilot services for a smooth and consistent sign-in experience.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge authentication requests are automatically sent to the services using the account that is signed-in to the browser.\r\n\r\nIf you disable this policy, Microsoft Edge does not send authentications requests to these services and users will need to manually sign-in.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"41c0d4bc25d270c3":{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled","displayName":"Extensions Performance Detector enabled","description":"This policy controls if users can access the Extensions Performance Detector Recommended Action feature in Browser Essentials. This feature alerts extension users if their extensions are causing performance regressions in the browser and allows them to take action to resolve the issue.\r\n\r\nIf you enable or don't configure this policy, users will receive Extensions Performance Detector notifications from Browser Essentials. When there is an active alert, users will be able to view the impact of extensions on their browser's performance and make an informed decision to disable impacting extensions. The detector will exclude browser-managed extensions, such as Google Docs offline, component extensions, and organization-managed extensions (ie. extensions that cannot be disabled).\r\n\r\nIf you disable this policy, users will not receive notifications or be able to view the Extensions Performance Detector Recommended Action.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"41e0009cf503f0d2":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates","displayName":"TLS server certificates that should be trusted by Microsoft Edge","description":"This policy enables a list of TLS certificates that should be trusted by Microsoft Edge for server authentication.\r\nCertificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"41235695d273ed88":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout_idletimeout","displayName":"Delay before running idle actions: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":null},"41427e3bef71432b":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_insecureformswarningsenabled","displayName":"Enable warnings for insecure forms (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy controls the handling of insecure forms (forms submitted over HTTP) embedded in secure (HTTPS) sites in the browser.\r\nIf you enable this policy or don't set it, a full page warning will be shown when an insecure form is submitted. Additionally, a warning bubble will be shown next to the form fields when they are focused, and autofill will be disabled for those forms.\r\nIf you disable this policy, warnings will not be shown for insecure forms, and autofill will work normally.\r\n\r\nThis policy may be removed as soon as Edge 132. The feature is enabled by default since Edge 131.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_insecureformswarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_insecureformswarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"417602be0791c29a":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed","displayName":"Allow launching of local files in Internet Explorer mode","description":"This policy controls the availability of the --ie-mode-file-url command line argument which is used to launch Microsoft Edge with a local file specified on the command line into Internet Explorer mode.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nIf you set this policy to true, or don't configure it, the user is allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\r\n\r\nIf you set this policy to false, the user isn't allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"4175e23c0b212583":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_windowcaptureallowedbyoriginsdesc","displayName":"Allow Window and Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"41859d78e05023f7":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb","displayName":"Set the maximum size of a user's OneDrive that can download automatically","description":"This setting is used in conjunction with \"Silently sign in users to the OneDrive sync app with their Windows credentials.\" This setting lets you prompt users who have more than a specified amount of content in OneDrive to choose folders to sync during setup of the OneDrive sync app (OneDrive.exe).\r\n\r\nIf you enable this setting, users who have more content than the value you specify will be shown the Choose Folders dialog box by default during OneDrive Setup.\r\n\r\nIf you disable or do not configure this setting, when users set up the sync app, all files will be selected to sync.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_1","displayName":"Enabled","description":null,"helpText":null}]},"41223788f2122831":{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlocklegacyauthn","displayName":" Disconnect remote session on lock for legacy authentication","description":"This policy setting allows you to configure the user experience when the Remote Desktop session is locked by the user or by a policy. You can specify whether the remote session will show the remote lock screen or disconnect when the remote session is locked. Disconnecting the remote session ensures that a remote session cannot be left on the lock screen and cannot reconnect automatically due to loss of network connectivity.\n\nThis policy applies only when using legacy authentication to authenticate to the remote PC. Legacy authentication is limited to username and password, or certificates like smartcards. Legacy authentication doesn't leverage the Microsoft identity platform, such as Microsoft Entra ID. Legacy authentication includes the NTLM, CredSSP, RDSTLS, TLS, and RDP basic authentication protocols.\n\nIf you enable this policy setting, Remote Desktop connections using legacy authentication will disconnect the remote session when the remote session is locked. Users can reconnect when they're ready and re-enter their credentials when prompted.\n\nIf you disable or do not configure this policy setting, Remote Desktop connections using legacy authentication will show the remote lock screen when the remote session is locked. Users can unlock the remote session using their username and password, or certificates.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-disconnectonlocklegacyauthn"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlocklegacyauthn_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlocklegacyauthn_1","displayName":"Enabled","description":null,"helpText":null}]},"41b93afb87204cf4":{"id":"device_vendor_msft_policy_config_update_updateserviceurlalternate","displayName":"Update Service Url Alternate","description":"Specifies an alternate intranet server to host updates from Microsoft Update. You can then use this update service to automatically update computers on your network. This setting lets you specify a server on your network to function as an internal update service. The Automatic Updates client will search this service for updates that apply to the computers on your network. To use this setting, you must set two server name values: the server from which the Automatic Updates client detects and downloads updates, and the server to which updated workstations upload statistics. You can set both values to be the same server. An optional server name value can be specified to configure Windows Update agent, and download updates from an alternate download server instead of WSUS Server. Value type is string and the default value is an empty string, . If the setting is not configured, and if Automatic Updates is not disabled by policy or user preference, the Automatic Updates client connects directly to the Windows Update site on the Internet. NoteIf the Configure Automatic Updates Group Policy is disabled, then this policy has no effect. If the Alternate Download Server Group Policy is not set, it will use the WSUS server by default to download updates. This policy is not supported on Windows RT. Setting this policy will not have any effect on Windows RT PCs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#updateserviceurlalternate"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"4161a88c65cdcd44":{"id":"device_vendor_msft_policy_config_userrights_accessfromnetwork","displayName":"Access From Network","description":"This user right determines which users and groups are allowed to connect to the computer over the network. Remote Desktop Services are not affected by this user right.Note: Remote Desktop Services was called Terminal Services in previous versions of Windows Server.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#accessfromnetwork"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"41ad1c2803146036":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1_werexlusionlist","displayName":"List of applications to be excluded (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"41f59b7e3cde5b99":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werqueuebehavior","displayName":"Queuing behavior: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werqueuebehavior_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werqueuebehavior_1","displayName":"Always queue","description":null,"helpText":null}]},"417bd0c35f1b7802":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_appletalkrouting","displayName":"AppleTalk Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-appletalkrouting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_appletalkrouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_appletalkrouting_1","displayName":"Enabled","description":null,"helpText":null}]},"41c5dc1e4c693d07":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_1","displayName":"For tablet pen input, don’t show the Input Panel icon (User)","description":"Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available. This policy applies only when using a tablet pen as an input device.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will never appear next to text entry areas when using a tablet pen as an input device. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will appear next to any text entry area in applications where this behavior is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n\r\nCaution: If you enable both the “Prevent Input Panel from appearing next to text entry areas” policy and the “Prevent Input Panel tab from appearing” policy, and disable the “Show Input Panel taskbar icon” policy, the user will then have no way to access Input Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-iptiptarget-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4126f40f95b7baf1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintproxyenabled","displayName":"Enable Google Cloud Print proxy (User)","description":"Setting the policy to Enabled or leaving it unset lets Google Chrome act as a proxy between Google Cloud Print and legacy printers connected to the machine. Using their Google Account, users may turn on the cloud print proxy by authentication.\r\n\r\nSetting the policy to Disabled means users can't turn on the proxy, and the machine can't share its printers with Google Cloud Print.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintproxyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintproxyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"412541163443807d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel","displayName":"Set a custom enterprise label for a managed profile (User)","description":"This policy controls a custom label used to identify managed profiles. For managed profiles, this label will be shown next to the avatar in the toolbar. The custom label will not be translated.\r\n\r\nWhen this policy is applied, any strings that surpass 16 characters will be truncated with a “...” Please refrain from using extended names.\r\n\r\nThis policy can only be set as a user policy.\r\n\r\nNote that this policy has no effect if the EnterpriseProfileBadgeToolbarSettings policy is set to hide_expanded_enterprise_toolbar_badge (value 1).\r\n\r\nExample value: Chromium","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_1","displayName":"Enabled","description":null,"helpText":null}]},"4172657f53d2d8ea":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (User)","description":"A list of certificates that are not trusted or distrusted in Google Chrome\r\nbut can be used as hints for path-building. Certificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"41706af341209d75":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowsmartscreenie"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"414067ab75adfa5f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_extensioninstallforcelistdesc","displayName":"Extension/App IDs and update URLs to be silently installed (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"41b4afa20b4a2d62":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_newtabpagesetfeedtype","displayName":"New tab page experience (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_newtabpagesetfeedtype_0","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_newtabpagesetfeedtype_1","displayName":"Office 365 feed experience","description":null,"helpText":null}]},"410d6e5863aba34d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_defaultsubjectforareviewrequest","displayName":"Default subject for a review request (User)","description":"Defines the default subject text for a review request.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_defaultsubjectforareviewrequest_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_defaultsubjectforareviewrequest_1","displayName":"Enabled","description":null,"helpText":null}]},"4116196340c5d2e9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslink_l_withasimplewebdiscussionslink362","displayName":"With a simple Web discussions link (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":null},"41ff8dc6e2983634":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedoffice972003","displayName":"Encryption type for password protected Office 97-2003 files (User)","description":"This policy setting enables you to specify an encryption type for password-protected Office 97-2003 files.\r\n \r\nIf you enable this policy setting, you can specify the type of encryption that Office applications will use to encrypt password-protected files in the older Office 97-2003 file formats. The chosen encryption type must have a corresponding cryptographic service provider (CSP) installed on the computer that encrypts the file. See the HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider\\ registry key for a list of CSPs installed on the local computer. Specify the encryption type to use by entering it in the provided text box in the following form:\r\n\r\n,,.\r\nFor example, Microsoft Enhanced Cryptographic Provider v1.0,RC4,128\r\n\r\nIf you do not configure this policy setting, Excel, PowerPoint, and Word use Office 97/2000 Compatible encryption, a proprietary encryption method, to encrypt password-protected Office 97-2003 files.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedoffice972003_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedoffice972003_1","displayName":"Enabled","description":null,"helpText":null}]},"4131d2b07d2d59ab":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_l_pathcolon298","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"4139205d0758a0e4":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_requirealwaysonmacrosig","displayName":"Require trusted publisher signatures for macros that are always loaded (User)","description":"This policy setting controls signature requirements for macros that are automatically loaded when Office applications start.\r\n\r\nMacros that are always loaded include VBA add-ins and templates that load automatically: Excel add-ins (xla/xlam), PowerPoint add-ins (ppa/ppam), Access add-ins (accda/mda), and Word templates (dot/dotm).\r\n\r\nIf you enable this policy setting:\r\n- Unsigned macros that are always loaded are silently disabled and don't load.\r\n- Signed but untrusted macros that are always loaded display a red Message Bar with no option for users to enable them for the current session.\r\n- Macros signed by a trusted publisher are allowed to always load.\r\n\r\nIf you disable or don't configure this policy setting, macros that are always on can load without requiring trusted publisher signatures.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_requirealwaysonmacrosig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_requirealwaysonmacrosig_1","displayName":"Enabled","description":null,"helpText":null}]},"4168c62c791c85e4":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngpasswordspincount","displayName":"Set CNG password spin count (User)","description":"This policy setting allows you to specify the number of times to spin (rehash) the password verifier.\r\n\r\nIf you enable this policy setting, the number specified will be the number of times the password will be rehashed.\r\n\r\nIf you disable or do not configure this policy setting, the default (100000) will be used.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngpasswordspincount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngpasswordspincount_1","displayName":"Enabled","description":null,"helpText":null}]},"41ba9ba85a3f5783":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_locationofitemsdeletedbydelegates","displayName":"Store deleted items in owner's mailbox instead of delegate's mailbox (User)","description":"This policy setting allows you to store deleted items in the owner's mailbox instead of the delegate's mailbox.\r\n\r\nIf you enable this policy setting, deleted items are stored in the owner's Deleted Items folder. For this setting to work correctly, the owner must also give the delegate permission to write to the owner's Deleted Items folder.\r\n\r\nIf you disable or do not configure this policy setting, items deleted by a delegate are stored in the delegate's Deleted Items Folder instead of the owner's Deleted Items folder.","helpText":"","infoUrls":[],"categoryId":"fcc8ad48-a1e7-4cba-adae-7c916cbbc897","categoryName":"Delegates","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_locationofitemsdeletedbydelegates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_locationofitemsdeletedbydelegates_1","displayName":"Enabled","description":null,"helpText":null}]},"4158a14a44fc69e5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_automaticnamechecking","displayName":"Automatic name checking (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_automaticnamechecking_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_automaticnamechecking_1","displayName":"True","description":null,"helpText":null}]},"4172b65eb6f8fe83":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom","displayName":"Set Outlook object model custom actions execution prompt (User) (Deprecated)","description":"This policy setting controls whether Outlook prompts users before executing a custom action. Custom actions add functionality to Outlook that can be triggered as part of a rule. Among other possible features, custom actions can be created that reply to messages in ways that circumvent the Outlook model's programmatic send protections. \r\n\r\nIf you enable this policy setting, you can choose from four options to control how Outlook functions when a custom action is executed that uses the Outlook object model: \r\n\r\n* Prompt User \r\n* Automatically Approve \r\n* Automatically Deny \r\n* Prompt user based on computer security. This option enforces the default configuration in Outlook. \r\n\r\nIf you disable or do not configure this policy setting, when Outlook or another program initiates a custom action using the Outlook object model, users are prompted to allow or reject the action. If this configuration is changed, malicious code can use the Outlook object model to compromise sensitive information or otherwise cause data and computing resources to be at risk. This is the equivalent of choosing Enabled -- Prompt user based on computer security.","helpText":"","infoUrls":[],"categoryId":"e11f4bd4-9041-49c9-9b8c-163827d606ce","categoryName":"Custom Form Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_1","displayName":"Enabled","description":null,"helpText":null}]},"417408db48e961ce":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_pathcolon32","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"41b701d02c8475d2":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_descriptioncolon62","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"41494bce454a918c":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultstartpage","displayName":"Project Guide Functionality and Layout page (User)","description":"Choose whether the side pane displays the default Project Guide or a custom Project Guide your organization has developed.\r\n\r\nIf you enable this setting, the Project Guide you specified will be displayed when the Project Guide is opened.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"81bc8383-43a5-4c6a-9d51-951e86028934","categoryName":"Project Guide settings for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultstartpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultstartpage_1","displayName":"Enabled","description":null,"helpText":null}]},"4151df1a2d74ec20":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_l_pjdurationunits23","displayName":"Duration is entered in (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_l_pjdurationunits23_3","displayName":"Minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_l_pjdurationunits23_5","displayName":"Hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_l_pjdurationunits23_7","displayName":"Days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_l_pjdurationunits23_9","displayName":"Weeks","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_l_pjdurationunits23_11","displayName":"Months","description":null,"helpText":null}]},"41fb2bcb837140a2":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Publisher\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\Publisher\\Addins.\r\n\r\nYou can also obtain the ProgID of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"41e4613ff5bcaae2":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_startup","displayName":"Start-up (User)","description":"Displays the additional location for macros and add-ons opened when you start Visio.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_startup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_startup_1","displayName":"Enabled","description":null,"helpText":null}]},"4184855c78ca5335":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_smartstylebehavior","displayName":"Smart style behavior (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e63361ad-a54b-4557-acc7-02c272a3e58d","categoryName":"Smart cut and paste","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_smartstylebehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_smartstylebehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"412c2567027ab447":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_interfacetypes","displayName":"Interface Types","description":"String value. Multiple interface types can be included in the string by separating each value with a \",\". Acceptable values are \"RemoteAccess\", \"Wireless\", \"Lan\", and \"All\".\n If more than one interface type is specified, the strings must be separated by a comma.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_interfacetypes_remoteaccess","displayName":"Remote Access","description":"RemoteAccess","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_interfacetypes_wireless","displayName":"Wireless","description":"Wireless","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_interfacetypes_lan","displayName":"Lan","description":"Lan","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_interfacetypes_mobilebroadband","displayName":"[Not Supported] Mobile Broadband","description":"MobileBroadband","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_interfacetypes_mbb","displayName":"Mobile Broadband","description":"MobileBroadband","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_interfacetypes_all","displayName":"All","description":"All","helpText":null}]},"413c0ab1f72c8c3f":{"id":"vendor_msft_firewall_mdmstore_publicprofile_logfilepath","displayName":"Log File Path","description":"This value is a string that represents a file path to the log where the firewall logs dropped packets and successful connections. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured, otherwise the MdmStore value wins if it is configured, otherwise the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"41f750704ff3ca00":{"id":"vendor_msft_wirelessnetworkpreference_parameters_cellularparameters_screenoffdurationtotriggernetworkdiscoveryinminutes","displayName":"Screen Off Duration To Trigger Network Discovery In Minutes (Windows Insiders only)","description":"When the device experiences screen off and back on, this value configures the minimum duration (in minutes) of the screen off period that will trigger network discovery.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/42.json b/public/intune-definitions/42.json new file mode 100644 index 000000000000..508a6e7457b4 --- /dev/null +++ b/public/intune-definitions/42.json @@ -0,0 +1 @@ +{"4205fcace5f50e48":{"id":"com.apple.applicationaccess_allowsharedstream","displayName":"Allow Shared Stream","description":"If false, disables Shared Photo Stream. Available in iOS 6 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowsharedstream_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowsharedstream_true","displayName":"True","description":null,"helpText":null}]},"42e2a1f819e2200c":{"id":"com.apple.asam_allowedapplications_item_bundleidentifier","displayName":"Bundle Identifier","description":"The unique bundle identifier. If two dictionaries contain the same Bundle Identifier value but a different Team Identifier value, this will be considered an error and the profile won't be installed.","helpText":null,"infoUrls":[],"categoryId":"daa2ea69-8026-465a-942c-75eb0396d5b9","categoryName":"Autonomous Single App Mode","options":null},"42c534340d9e497c":{"id":"com.apple.extensiblesso_extensiondata_pwnotificationdays_kerberos","displayName":"Password Notification Days","description":"The number of days prior to password expiration when a notification of password expiration will be sent to the user. Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"42b04235c5d62ef0":{"id":"com.apple.managedclient.preferences_enablefilehashcomputation","displayName":"Enable file hash computation","description":"Enables or disables file hash computation feature. When this feature is enabled Windows defender will compute hashes for files it scans. This will help in improving the accuracy of Custom Indicator matches. However, enabling Enable file hash computation may impact device performance.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-preferences?view=o365-worldwide#configure-file-hash-computation-feature"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_enablefilehashcomputation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablefilehashcomputation_true","displayName":"True","description":null,"helpText":null}]},"427fa79effdbb0ca":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogo_light_logo_url","displayName":"URL","description":"The URL from which the image can be downloaded.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"42eef4795f96f8b6":{"id":"com.apple.mcxmenuextras_cpu.menu","displayName":"CPU","description":"If true, enables the CPU menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_cpu.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_cpu.menu_true","displayName":"True","description":null,"helpText":null}]},"427146eedb46fed7":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"42fc11e583c43b05":{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_recommended","displayName":"Clear cached images and files when Microsoft Edge closes (users can override)","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\n\nIf you enable this policy, cached images and files are deleted each time Microsoft Edge closes.\n\nIf you disable this policy, users can't configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\n\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\n\nIf you disable this policy, don't enable the \"ClearBrowsingDataOnExit\" policy, because they both deal with deleting data. If you configure both, the \"ClearBrowsingDataOnExit\" policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured \"ClearCachedImagesAndFilesOnExit\".","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"42e93593592dec05":{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotnewtabpageenabled","displayName":"Enable the Copilot new tab page","description":"This policy configures the availability of the Copilot new tab page in Microsoft Edge for Business.\n\nThe Copilot new tab page combines search and chat into a single input box and includes personalized cards that provide quick access to relevant files, calendar events, and suggested Copilot prompts. Users who do not have a Microsoft 365 Copilot license might experience limited relevance in Copilot prompt card content.\n\nMost policies that customize the New Tab Page are supported on the Copilot new tab page. For a complete list of supported and unsupported policies, see https://go.microsoft.com/fwlink/?linkid=2330462.\n\nThis policy applies only to Microsoft Entra ID profiles and controls the Copilot new tab page experience in Microsoft Edge for Business. This policy does not apply to the Copilot new tab page on MSA profiles.\n\nIf you enable this policy, the Copilot new tab page is turned on.\n\nIf you disable or don't configure this policy, the Copilot new tab page is turned off. When the policy is not configured, users can turn it on via user settings.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotnewtabpageenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotnewtabpageenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"420879d4407a2ba4":{"id":"device_vendor_msft_pkcscertificate_renewalthreshold","displayName":"Renewal threshold (%)","description":"Enter the percentage (between 1 and 99 percent) of remaining certificate lifetime that is allowed before a device can request renewal of the certificate. The recommended amount in Intune is 20%. (1-99)","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure"],"categoryId":"dbbe5cb3-fe2e-4d28-8918-24d075a91676","categoryName":"PKCS certificate","options":null},"42bd52bbc9a83f92":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom","displayName":"From","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom_0","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom_1","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom_4","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom_5","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workdaysfrom_6","displayName":"Saturday","description":null,"helpText":null}]},"4215dd54814fec33":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_1_channel_log_filelogaccess","displayName":"Log Access","description":null,"helpText":"","infoUrls":[],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":null},"42a1921c4d96fdfe":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablecdp","displayName":"Continue experiences on this device","description":"\r\nThis policy setting determines whether the Windows device is allowed to participate in cross-device experiences (continue experiences).\r\n\r\nIf you enable this policy setting, the Windows device is discoverable by other Windows devices that belong to the same user, and can participate in cross-device experiences.\r\n\r\nIf you disable this policy setting, the Windows device is not discoverable by other devices, and cannot participate in cross-device experiences.\r\n\r\nIf you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-enablecdp"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablecdp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablecdp_1","displayName":"Enabled","description":null,"helpText":null}]},"4268e34a170c9949":{"id":"device_vendor_msft_policy_config_admx_help_disablehhdep","displayName":"Turn off Data Execution Prevention for HTML Help Executible","description":"This policy setting allows you to exclude HTML Help Executable from being monitored by software-enforced Data Execution Prevention.\r\n\r\n Data Execution Prevention (DEP) is designed to block malicious code that takes advantage of exception-handling mechanisms in Windows by monitoring your programs to make sure that they use system memory safely.\r\n\r\n If you enable this policy setting, DEP for HTML Help Executable is turned off. This will allow certain legacy ActiveX controls to function without DEP shutting down HTML Help Executable.\r\n\r\n If you disable or do not configure this policy setting, DEP is turned on for HTML Help Executable. This provides an additional security benefit, but HTLM Help stops if DEP detects system memory abnormalities.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-help#admx-help-disablehhdep"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_help_disablehhdep_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_help_disablehhdep_1","displayName":"Enabled","description":null,"helpText":null}]},"42ea3da3001c314a":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_quickscaninterval_scan_quickscaninterval","displayName":"Specify the interval to run quick scans per day","description":null,"helpText":"","infoUrls":[],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":null},"428031fe667225fc":{"id":"device_vendor_msft_policy_config_admx_power_allowsystemsleepwithremotefilesopendc","displayName":"Allow automatic sleep with Open Network Files (on battery)","description":"This policy setting allows you to manage automatic sleep with open network files.\r\n\r\nIf you enable this policy setting, the computer automatically sleeps when network files are open.\r\n\r\nIf you disable or do not configure this policy setting, the computer does not automatically sleep when network files are open.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-allowsystemsleepwithremotefilesopendc"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_allowsystemsleepwithremotefilesopendc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_allowsystemsleepwithremotefilesopendc_1","displayName":"Enabled","description":null,"helpText":null}]},"425aba2179c2a7bd":{"id":"device_vendor_msft_policy_config_admx_power_reservebatterynotificationlevel_enterreservebatterynotificationlevel","displayName":"Reserve Battery Notification Level (percent):","description":null,"helpText":"","infoUrls":[],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":null},"42782b2abb65ea4b":{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate","displayName":"Set IP-HTTPS State","description":"This policy setting allows you to configure IP-HTTPS, a tunneling technology that uses the HTTPS protocol to provide IP connectivity to a remote network.\r\n\r\nIf you disable or do not configure this policy setting, the local host settings are used.\r\n\r\nIf you enable this policy setting, you can specify an IP-HTTPS server URL. You will be able to configure IP-HTTPS with one of the following settings:\r\n\r\nPolicy Default State: The IP-HTTPS interface is used when there are no other connectivity options.\r\n\r\nPolicy Enabled State: The IP-HTTPS interface is always present, even if the host has other connectivity options.\r\n\r\nPolicy Disabled State: No IP-HTTPS interfaces are present on the host.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-iphttps-clientstate"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate_1","displayName":"Enabled","description":null,"helpText":null}]},"42a2f4ac6ae70368":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_enablevirtualgraphics","displayName":"Configure RemoteFX","description":"This policy setting allows you to control the availability of RemoteFX on both a Remote Desktop Virtualization Host (RD Virtualization Host) server and a Remote Desktop Session Host (RD Session Host) server.\r\n\r\nWhen deployed on an RD Virtualization Host server, RemoteFX delivers a rich user experience by rendering content on the server by using graphics processing units (GPUs). By default, RemoteFX for RD Virtualization Host uses server-side GPUs to deliver a rich user experience over LAN connections and RDP 7.1.\r\n\r\nWhen deployed on an RD Session Host server, RemoteFX delivers a rich user experience by using a hardware-accelerated compression scheme.\r\n\r\nIf you enable this policy setting, RemoteFX will be used to deliver a rich user experience over LAN connections and RDP 7.1.\r\n\r\nIf you disable this policy setting, RemoteFX will be disabled.\r\n\r\nIf you do not configure this policy setting, the default behavior will be used. By default, RemoteFX for RD Virtualization Host is enabled and RemoteFX for RD Session Host is disabled.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-enablevirtualgraphics"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_enablevirtualgraphics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_enablevirtualgraphics_1","displayName":"Enabled","description":null,"helpText":null}]},"427919135b0a0263":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_loc_ts_sd_loc","displayName":"Configure RD Connection Broker server name:","description":null,"helpText":"","infoUrls":[],"categoryId":"0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","categoryName":"RD Connection Broker","options":null},"425882a3fdbf05fe":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness","displayName":"Microsoft OneDrive for Business 2016","description":"\r\nThis policy setting configures the synchronization of user settings for OneDrive for Business 2016.\r\nBy default, the user settings of OneDrive for Business 2016 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2016 from synchronization between computers.\r\nIf you enable this policy setting, OneDrive for Business 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, OneDrive for Business 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onedriveforbusiness"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness_1","displayName":"Enabled","description":null,"helpText":null}]},"429ea199685a6826":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project","displayName":"Microsoft Project 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Project 2016.\r\nBy default, the user settings of Microsoft Project 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016project"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project_1","displayName":"Enabled","description":null,"helpText":null}]},"427f8bc9ba6741a5":{"id":"device_vendor_msft_policy_config_admx_windowsstore_disableautodownloadwin8","displayName":"Turn off Automatic Download of updates on Win8 machines","description":"Enables or disables the automatic download of app updates on PCs running Windows 8.\r\n\r\nIf you enable this setting, the automatic download of app updates is turned off.\r\n\r\nIf you disable this setting, the automatic download of app updates is turned on.\r\n\r\nIf you don't configure this setting, the automatic download of app updates is determined by a registry setting that the user can change using Settings in the Microsoft Store.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsstore#admx-windowsstore-disableautodownloadwin8"],"categoryId":"be9bdbec-b52e-4174-9c5b-cf765dee855b","categoryName":"Store","options":[{"id":"device_vendor_msft_policy_config_admx_windowsstore_disableautodownloadwin8_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsstore_disableautodownloadwin8_1","displayName":"Enabled","description":null,"helpText":null}]},"423540868c7256e1":{"id":"device_vendor_msft_policy_config_admx_wlansvc_setpinenforced","displayName":"Require PIN pairing","description":"This policy applies to Wireless Display connections. This policy means that the use of a PIN for pairing to Wireless Display devices is required rather than optional.\r\n\r\nConversely it means that Push Button is NOT allowed.\r\n\r\nIf this policy setting is disabled or is not configured, by default Push Button pairing is allowed (but not necessarily preferred).\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wlansvc#admx-wlansvc-setpinenforced"],"categoryId":"4dd8280d-6c01-4a06-bfd1-e1cb4c529494","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_admx_wlansvc_setpinenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wlansvc_setpinenforced_1","displayName":"Enabled","description":null,"helpText":null}]},"42584e014f7dcce1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended","displayName":"Parameters for instant URL which uses POST","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"42f12814a3300545":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_profileslockedretrycount","displayName":"Locked Retry Count (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"4210f651c8ab399f":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowlessprivilegedsites"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"428cc81652da564c":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"4218650c77aa0197":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled.","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy.\r\nCurrently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers.\r\nThis enterprise policy can be used to opt out of this gradual deprecation by forcing the default to stay enabled.\r\n\r\nPages might depend on unload event handlers to save data or signal the end of a user session to the server.\r\nThis is not recommended because it's unreliable and impacts performance by blocking use of BackForwardCache.\r\nRecommended alternatives exist, but the unload event has been used for a long time. Some applications might still rely on them.\r\n\r\nIf you disable this policy or don't configure it, unload event handlers will gradually be deprecated in-line with the deprecation rollout and sites which don't set Permissions-Policy header will stop firing `unload` events.\r\n\r\nIf you enable this policy then unload event handlers will continue to work by default.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"42a1df4f3b11aa15":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"42258b2c69efa1de":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes","displayName":"Configure allowed extension types","description":"Controls which extension types can be installed and limits runtime access.\r\n\r\nThis setting defines the allowed types of extensions and which hosts they can interact with. The value is a list of strings, each of which should be one of the following: \"extension\", \"theme\", \"user_script\", and \"hosted_app\". See the Microsoft Edge extensions documentation for more information on these types.\r\n\r\nNote that this policy also affects extensions to be force-installed by using 'ExtensionInstallForcelist' (Control which extensions are installed silently) policy.\r\n\r\nIf you enable this policy, only extensions that match a type in the list are installed.\r\n\r\nIf you don't configure this policy, no restrictions on the acceptable extension types are enforced.\r\n\r\nExample value:\r\n\r\nhosted_app","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_1","displayName":"Enabled","description":null,"helpText":null}]},"4232d1106fd58d65":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended_defaultdownloaddirectory","displayName":"Set default download directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","categoryName":"Downloads","options":null},"4262ed8c35597976":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled","displayName":"Enable the Collections feature","description":"Lets you allow users to access the Collections feature, where they can collect, organize, share, and export content more efficiently and with Office integration.\r\n\r\nIf you enable or don't configure this policy, users can access and use the Collections feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't access and use Collections in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"42041352295af940":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply","description":"A list of URLs to which 'AutoOpenFileTypes' (List of file types that should be automatically opened on download) will apply to. This policy has no impact on automatically open values set by users via the download shelf ... > \"Always open files of this type\" menu entry.\r\n\r\nIf you set URLs in this policy, files will only automatically open by policy if the URL is part of this set and the file type is listed in 'AutoOpenFileTypes'. If either condition is false, the download won't automatically open by policy.\r\n\r\nIf you don't set this policy, all downloads where the file type is in 'AutoOpenFileTypes' will automatically open.\r\n\r\nA URL pattern has to be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nThis policy does not work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"420ba864335431f0":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_sensorsallowedforurlsdesc","displayName":"Allow access to sensors on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"426a195af6190cff":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemWriteGuardSetting' (Control use of the File System API for writing) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemWriteAskForUrls' (Allow write access to files and directories on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"426315ffd1ae5a81":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Prevent redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Redirect sites based on the incompatible sites sitelist","description":null,"helpText":null}]},"42c83414bce9308d":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting","displayName":"Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app","description":"This setting lets you enable reporting of sites that Microsoft Edge users add to their local IE Mode site list. The user must be signed into Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant specified by the policy.\r\n\r\nIf you configure this policy, Microsoft Edge will send a report to the M365 Admin Center Site Lists app when a user adds a site to their local IE mode site list. The report will show the URL of the site the user added, minus any query string or fragment. The user's identity isn't reported.\r\n\r\nFor this reporting to work correctly, you must have successfully visited the Microsoft Edge Site Lists app in the M365 Admin Center at least once. This activates a per-tenant storage account used to store these reports. Microsoft Edge will still attempt to send reports if this step hasn't been completed. However, the reports will not be stored in the Site Lists app.\r\n\r\nWhen enabling this policy, you must specify your O365 tenant ID. To learn more about finding your O365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will never send reports about URLs added to a user's local site list to the Site Lists app.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_1","displayName":"Enabled","description":null,"helpText":null}]},"4278be076588f05b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_powerpntexe59","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_powerpntexe59_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_powerpntexe59_1","displayName":"True","description":null,"helpText":null}]},"42c1415799d81654":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mspubexe100","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mspubexe100_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mspubexe100_1","displayName":"True","description":null,"helpText":null}]},"42446a63c2dbd9d6":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_setbitsasprimary","displayName":"Prioritize BITS","description":"This policy setting prioritizes the use of Windows Background Interface Transfer Service (BITS) by the Office client when downloading Office updates from the Office Content Delivery Network (CDN).\r\n\r\nIf enabled, BITS will be used on devices that are downloading Office updates directly from the Office CDN and throttle values used by BITS will be honored. The device will not leverage BITS if updates are obtained from a local UNC share.\r\n\r\nIf disable or not configured, BITS will not be prioritized and http will be the primary transport for downloading updates.\r\n\r\nImportant: This policy setting only applies to Office 365 clients that are installed by using Click-to-Run, including Office 365 ProPlus, Office 365 Business, Visio Pro for Office 365 and Project Pro for Office 365. It doesn't apply to Office products that use Windows Installer (MSI)","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_setbitsasprimary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_setbitsasprimary_1","displayName":"Enabled","description":null,"helpText":null}]},"42d53fafcee7c0d5":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockexternalsync","displayName":"Prevent users from syncing libraries and folders shared from other organizations","description":"This setting controls whether users in your organization are allowed to sync OneDrive for Business or SharePoint content that has been shared by users in a different organization. This is a collaboration feature called B2B Sync.\r\n\r\nIf you enable this setting, users will not be able to start syncing a OneDrive for Business or SharePoint library or folder that was shared from an external organization. Any shared libraries or folders already being synced will stop syncing.\r\n\r\nIf you disable or do not configure this setting, users will be able to sync OneDrive for Business and SharePoint libraries and folders that have been shared from external organizations.\r\n\r\nFor more info about B2B Sync, see: https://docs.microsoft.com/en-us/onedrive/b2b-sync","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockexternalsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockexternalsync_1","displayName":"Enabled","description":null,"helpText":null}]},"42ab88745eda9d98":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization","displayName":"Specify the OneDrive location in a hybrid environment","description":"This setting defines whether the OneDrive sync app (OneDrive.exe) should authenticate against SharePoint Online or SharePoint Server 2019 if the identity exists in both identity providers. To use this setting, you must also enable \"Specify SharePoint Server URL and organization name\". This setting affects only OneDrive for Business sync functionality. It does not impact syncing team sites in SharePoint Online or SharePoint Server 2019.\r\n\r\nIf you enable this setting, you can select one of two options:\r\n\r\nSharePoint Online: The sync app will look first in SharePoint Online for a user's OneDrive. If the sync app is already configured with SharePoint Online for the user, it will attempt to configure a OneDrive for Business instance in SharePoint Server 2019 for that user.\r\n\r\nSharePoint Server 2019: The sync app will look first in SharePoint Server 2019 for a user's OneDrive for Business. If the sync app is already configured with SharePoint Server 2019 for the user, it will attempt to configure a OneDrive instance in SharePoint Online for that user.\r\n\r\nIf you disable or do not configure this setting, the sync app will look first in SharePoint Online for the user's OneDrive.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_1","displayName":"Enabled","description":null,"helpText":null}]},"4292546e3646296b":{"id":"device_vendor_msft_policy_config_system_allowfontproviders","displayName":"Allow Font Providers","description":"Boolean policy setting that determines whether Windows is allowed to download fonts and font catalog data from an online font provider. If you enable this setting, Windows periodically queries an online font provider to determine whether a new font catalog is available. Windows may also download font data if needed to format or render text. If you disable this policy setting, Windows does not connect to an online font provider and only enumerates locally-installed fonts. This MDM setting corresponds to the EnableFontProviders Group Policy setting. If both the Group Policy and the MDM settings are configured, the group policy setting takes precedence. If neither is configured, the behavior depends on a DisableFontProviders registry value. In server editions, this registry value is set to 1 by default, so the default behavior is false (disabled). In all other editions, the registry value is not set by default, so the default behavior is true (enabled). This setting is used by lower-level components for text display and fond handling and has not direct effect on web browsers, which may download web fonts used in web content. NoteReboot is required after setting the policy; alternatively you can stop and restart the FontCache service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowfontproviders"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowfontproviders_0","displayName":"Not allowed. No traffic to fs.microsoft.com and only locally installed fonts are available.","description":"Not allowed. No traffic to fs.microsoft.com and only locally installed fonts are available.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowfontproviders_1","displayName":"Allowed. There may be network traffic to fs.microsoft.com and downloadable fonts are available to apps that support them.","description":"Allowed. There may be network traffic to fs.microsoft.com and downloadable fonts are available to apps that support them.","helpText":null}]},"424967f5e3d7b767":{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforqualityupdates","displayName":"Configure Deadline No Auto Reboot For Quality Updates","description":"When enabled, devices will not automatically restart outside of active hours until the deadline and grace period have expired for quality updates, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForQualityUpdates is configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinenoautorebootforqualityupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforqualityupdates_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforqualityupdates_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"4278f9b7080ae529":{"id":"device_vendor_msft_policy_config_update_scheduledinstallthirdweek","displayName":"Scheduled Install Third Week","description":"Enables the IT admin to schedule the update installation on the third week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every third week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallthirdweek"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallthirdweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallthirdweek_1","displayName":"update is scheduled every third week of the month","description":"update is scheduled every third week of the month","helpText":null}]},"42693436fe751721":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings","displayName":"Print Settings","description":"This policy setting allows you to decide how the print functionality behaves while in Microsoft Defender Application Guard.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_0","displayName":"Disable all print functionality","description":"Disables all print functionality.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_1","displayName":"Enable XPS printing","description":"Enables only XPS printing.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_2","displayName":"Enable PDF printing","description":"Enables only PDF printing.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_4","displayName":"Enable local printing","description":"Enables only local printing.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_8","displayName":"Enable network printing","description":"Enables only network printing.","helpText":null}]},"429757cff02ebb2e":{"id":"mathsettings_calculator_mathnotesmode","displayName":"Math Notes Mode","description":"If present, configures the Math Notes mode of the calculator. If not present, math notes mode is enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"428249cfe4bceb71":{"id":"user_vendor_msft_policy_config_admx_explorer_turnoffspianimations","displayName":"Turn off common control and window animations (User)","description":"This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users with some visual disabilities as well as improving performance and battery life in some scenarios.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-turnoffspianimations"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_explorer_turnoffspianimations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_explorer_turnoffspianimations_1","displayName":"Enabled","description":null,"helpText":null}]},"4204d5382618d3a6":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_publickey","displayName":"Public Key Policies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-publickey"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_publickey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_publickey_1","displayName":"Enabled","description":null,"helpText":null}]},"4272c91dd3be7718":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_lbl_customgoofflineactionslist","displayName":"Customize actions: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"42f5020b1ca739b5":{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1","displayName":"Custom Classes: Deny read access (User)","description":"This policy setting denies read access to custom removable storage classes.\r\n\r\nIf you enable this policy setting, read access is denied to these removable storage classes.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to these removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-customclasses-denyread-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4247a46cf7819795":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1","displayName":"Set time limit for active Remote Desktop Services sessions (User)","description":"This policy setting allows you to specify the maximum amount of time that a Remote Desktop Services session can be active before it is automatically disconnected.\r\n\r\nIf you enable this policy setting, you must select the desired time limit in the Active session limit list. Remote Desktop Services will automatically disconnect active sessions after the specified amount of time. The user receives a warning two minutes before the Remote Desktop Services session disconnects, which allows the user to save open files and close programs. If you have a console session, active session time limits do not apply.\r\n\r\nIf you disable or do not configure this policy setting, this policy setting is not specified at the Group Policy level. By default, Remote Desktop Services allows sessions to remain active for an unlimited amount of time. \r\n\r\nIf you want Remote Desktop Services to end instead of disconnect a session when the time limit is reached, you can configure the policy setting Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Session Time Limits\\End session when time limits are reached.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sessions-limits-1"],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_1","displayName":"Enabled","description":null,"helpText":null}]},"424be66e5e450626":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpcheckbox","displayName":"UDP (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpcheckbox_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpcheckbox_1","displayName":"True","description":null,"helpText":null}]},"423729967ffd6852":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally","displayName":"Always Open PDF files externally (User)","description":"Setting the policy to Enabled turns the internal PDF viewer off in Google Chrome, treats PDF files as a download, and lets users open PDFs with the default application.\r\n\r\nSetting the policy to Disabled means that unless users turns off the PDF plugin, it will open PDF files.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can choose whether to open PDF externally or not.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally_1","displayName":"Enabled","description":null,"helpText":null}]},"4292f9eb35c74642":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault","displayName":"Print PDF as Image Default (User)","description":"Controls if Google Chrome makes the Print as image option default to set when printing PDFs.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome then the user selection for Print as image option will be initially unset. The user will be allowed to select it for each individual PDFs print job, if the option is available.\r\n\r\nFor Microsoft® Windows® or macOS this policy only has an effect if PrintPdfAsImageAvailability is also enabled.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"42d6585a6aef14a8":{"id":"user_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode","displayName":"Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows (User)","description":"This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows.\n\nImportant: Some ActiveX controls and toolbars may not be available when 64-bit processes are used.\n\nIf you enable this policy setting, Internet Explorer 11 will use 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.\n\nIf you disable this policy setting, Internet Explorer 11 will use 32-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.\n\nIf you don't configure this policy setting, users can turn this feature on or off using Internet Explorer settings. This feature is turned off by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableprocessesinenhancedprotectedmode"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"420e918428810749":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts","displayName":"Allow user-level native messaging hosts (installed without admin permissions) (User)","description":"Enables user-level installation of native messaging hosts.\r\n\r\nIf you disable this policy, Microsoft Edge will only use native messaging hosts installed on the system level.\r\n\r\nBy default, if you don't configure this policy, Microsoft Edge will allow usage of user-level native messaging hosts.","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_1","displayName":"Enabled","description":null,"helpText":null}]},"42aa7743e18864e8":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls","displayName":"Block automatic full screen on specified sites (User)","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or it will\r\nfail. Users' personal settings may allow certain origins to call this API\r\nwithout a prior user gesture.\r\n\r\nThis policy supersedes users' personal settings and blocks matching origins\r\nfrom calling the API without a prior user gesture.\r\n\r\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\nWildcards (*) are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy or user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"427897a05a0a6acd":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_additionalsearchboxenabled","displayName":"Enable additional search box in browser (User)","description":"A search box is an additional text input field located next to the address bar in a web browser. It allows users to perform web searches directly from the browser interface.\r\n\r\nIf you enable or don't configure this policy, the search box will be visible and available for use.\r\nUsers can toggle the search box in Edge Settings page edge://settings/appearance#SearchBoxInToolbar.\r\n\r\nIf you disable this policy, search box will not be visible, and users will have to use the address bar or navigate to a search engine to perform web searches.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_additionalsearchboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_additionalsearchboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"424626133705b417":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlblocklist","displayName":"Block access to a list of URLs in InPrivate mode. (User)","description":"This policy controls which URLs are blocked from loading in InPrivate mode in Microsoft Edge.\r\n\r\nAdministrators can specify a list of URL patterns that are blocked when users browse in InPrivate mode. For information about the supported URL pattern format, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nIf both 'InPrivateModeUrlBlocklist' (Block access to a list of URLs in InPrivate mode.) and 'InPrivateModeUrlAllowlist' (Allow access to a list of URLs in InPrivate mode.) are configured, the allowlist takes precedence.\r\n- URLs that match the allowlist are allowed.\r\n- URLs that match the blocklist but not the allowlist are blocked.\r\n- URLs that match neither list follow the behavior defined by the general 'URLBlocklist' (Block access to a list of URLs) and 'URLAllowlist' (Define a list of allowed URLs) policies.\r\n\r\nIf 'InPrivateModeUrlAllowlist' is configured and this policy is not configured, only URLs on the allowlist can be opened in InPrivate mode.\r\n\r\nIf 'InPrivateModeAvailability' (Configure InPrivate mode availability) is set to disallow (value 1) and 'InPrivateModeUrlAllowlist' is configured, InPrivate mode is available only for URLs that match the allowlist.\r\n\r\nThis policy applies only to InPrivate mode. To block URLs across all browsing modes, use 'URLBlocklist'.\r\n\r\nThis policy supports up to 1000 entries.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"4259c8ba2367d457":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importcookies","displayName":"Allow importing of Cookies (User)","description":"Allows users to import Cookies from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Cookies aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Cookies are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importcookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importcookies_1","displayName":"Enabled","description":null,"helpText":null}]},"42520fc891fc9982":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode","displayName":"Configure when efficiency mode should become active (User)","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_1","displayName":"Enabled","description":null,"helpText":null}]},"4234dc94170fe9b0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastservicemajorversion0","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"42ca7e879fc9c218":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceworkadd","displayName":"Replace Label - Work Address (User)","description":"This policy setting allows you to change or remove the 13th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceworkadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceworkadd_1","displayName":"Enabled","description":null,"helpText":null}]},"425b04e308b456da":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_l_workflowpath434","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"429e16639013a85e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptdocumentproperties","displayName":"Encrypt document properties (User)","description":"This policy setting allows you configure if the document properties are encrypted. This applies to OLE documents (Office 97-2003 compatible) if the application is configured for CAPI RC4.\r\n\r\nIf you enable this policy setting, the document properties will be encrypted.\r\n\r\nIf you disable or do not configure this policy setting, the document properties will not be encrypted.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptdocumentproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptdocumentproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"429aa3f6dea16447":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc02_l_pathcolon02","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"42135a3f2d2e9d7f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc05_l_pathcolon05","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"4270ae09071d2417":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc11","displayName":"Unsafe Location #11 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc11_1","displayName":"Enabled","description":null,"helpText":null}]},"429d17208dcb6682":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setworkgrouppathforlabelpagesizeupdatefiles","displayName":"Set Workgroup path for label page size update files (User)","description":"This policy setting allows you to specify the Workgroup path for the label page size update files. This is useful if the organization has a centralized template depot. \r\n\r\nIf you enable this policy setting, you may enter the path to the PSX update files.\r\n\r\nIf you disable or do not configure this policy setting, there is no Workgroup path for the shared label templates.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setworkgrouppathforlabelpagesizeupdatefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setworkgrouppathforlabelpagesizeupdatefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"421d0708cb03c389":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointwebpageformatcompatibility_l_powerpointwebpageformatcompatibility406","displayName":"PowerPoint: web page format compatibility (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointwebpageformatcompatibility_l_powerpointwebpageformatcompatibility406_2","displayName":"All browsers","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointwebpageformatcompatibility_l_powerpointwebpageformatcompatibility406_1","displayName":"Windows Internet Explorer 4.0 or later","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointwebpageformatcompatibility_l_powerpointwebpageformatcompatibility406_0","displayName":"Based on installed browsers","description":null,"helpText":null}]},"42bb5e9f1aae0284":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipherkeylength","displayName":"Set CNG cipher key length (User)","description":"This policy setting allows you to configure the number of bits to use when creating the cipher key. This number will be rounded down to a multiple of 8.\r\n\r\nIf you enable this policy setting, the key bits specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default value will be used.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipherkeylength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipherkeylength_1","displayName":"Enabled","description":null,"helpText":null}]},"42fcecb52c4da978":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setimportance","displayName":"Set importance (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setimportance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setimportance_1","displayName":"Enabled","description":null,"helpText":null}]},"42b8d77e10b9d271":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_configurecrossfoldercontentinconversationview","displayName":"Configure Cross Folder Content in conversation view (User)","description":"This policy setting controls how conversation view in Outlook is loaded and whether Cross Folder Content is turned on or off.\r\n\r\nIf you enable this policy setting, you may choose one of these options:\r\n\r\n- On and cross-store (default): Cross Folder Content is on and cross-store. Data will be pulled from all connected data files whether they are cached or online. \r\n- Off: Cross Folder Content is turned off.\r\n- On and current: Cross Folder Content is on, but data is only pulled from the current data file. \r\n- On and local: Cross Folder Content is on, but data is only pulled from the current data file and any other local data files.\r\n\r\nIf you disable or do not configure this policy setting, Cross Folder Content will be turned on and pulled from all connected data files.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_configurecrossfoldercontentinconversationview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_configurecrossfoldercontentinconversationview_1","displayName":"Enabled","description":null,"helpText":null}]},"420e7ce8098b8fff":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_v2","displayName":"Allow Active X One Off Forms (User)","description":"By default, third-party ActiveX controls are not allowed to run in one-off forms in Outlook. You can change this behavior so that Safe Controls (Microsoft Forms 2.0 controls and the Outlook Recipient and Body controls) are allowed in one-off forms, or so that all ActiveX controls are allowed to run.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"42790accd3da55c7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittodownloadchangesfromserver","displayName":"Enter seconds to wait to download changes from server (User)","description":"Specifies number of seconds to wait before downloading changes from the Exchange server.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittodownloadchangesfromserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittodownloadchangesfromserver_1","displayName":"Enabled","description":null,"helpText":null}]},"426373cafdfbd463":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingheadingstylesdonotskipstylelevel","displayName":"Stop checking to ensure heading styles do not skip style level (User)","description":"This policy setting prevents the Accessibility Checker from checking to ensure that headings in a document are used in order.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking to ensure that headings in a document are used in order.\r\n\r\nIf you disable or do not configure this policy setting, the ordering of headings in a document will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingheadingstylesdonotskipstylelevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingheadingstylesdonotskipstylelevel_1","displayName":"Enabled","description":null,"helpText":null}]},"422f05e21ff4896d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngsaltlength_l_specifycngsaltlengthspinid","displayName":"Number of bytes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":null},"42533ba1c56a255e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifyencryptioncompatibility","displayName":"Specify encryption compatibility (User)","description":"This policy setting allows you to specify the encrypted database compatibility.\r\n\r\nIf you enable this policy setting, the compatibility format specified will be applied during encryption for new files\r\n- Use legacy format\r\n- Use next generation format\r\n- All files save with next generation format\r\n\r\nIf you disable or do not configure this policy setting, the default setting, \"Use next generation format,\" will be applied.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/43.json b/public/intune-definitions/43.json new file mode 100644 index 000000000000..07c091358ad9 --- /dev/null +++ b/public/intune-definitions/43.json @@ -0,0 +1 @@ +{"43f4781600f5e1aa":{"id":"audioaccessory_temporarypairing_disabled","displayName":"Disabled","description":"If `true`, temporary pairing of audio accessories is disabled.","helpText":null,"infoUrls":[],"categoryId":"a42e2248-d2dc-4476-a92d-d152fd67e04b","categoryName":"Audio Accessory","options":[{"id":"audioaccessory_temporarypairing_disabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"audioaccessory_temporarypairing_disabled_true","displayName":"Enabled","description":null,"helpText":null}]},"43f068d3d24a9d70":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordminimumlowercasecharacters","displayName":"Number of lowercase characters required","description":"Enter the number of lowercase characters the work profile password must have, between 1 and 16 characters. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"43beeb214dde67db":{"id":"com.apple.applicationaccess_allowshareddevicetemporarysession","displayName":"Allow Shared Device Temporary Session","description":"If false, temporary sessions aren’t available on Shared iPad. Available in iOS 13.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowshareddevicetemporarysession_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowshareddevicetemporarysession_true","displayName":"True","description":null,"helpText":null}]},"4304a71325acde57":{"id":"com.apple.applicationaccess_allowvpncreation","displayName":"Allow VPN Creation","description":"If false, disables the creation of VPN configurations. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowvpncreation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowvpncreation_true","displayName":"True","description":null,"helpText":null}]},"43000f30e3274b8d":{"id":"com.apple.extensiblesso_platformsso_authorizationgroups_authorization right","displayName":"Authorization Right (Deprecated)","description":"The Authorization Right to update.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"43c00431dba16a1a":{"id":"com.apple.ldap.account_ldapsearchsettings","displayName":"LDAP Search Settings","description":"An array of search settings dictionaries.","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":null},"43fc1d06b29570ef":{"id":"com.apple.managedclient.preferences_importsavedpasswords","displayName":"Allow importing of saved passwords","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\n\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\n\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\n\nIf you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10) and Google Chrome (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importsavedpasswords"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importsavedpasswords_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importsavedpasswords_true","displayName":"Enabled","description":null,"helpText":null}]},"43b05b1d67ff1e43":{"id":"com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow websites to make requests to any network endpoint in an insecure manner. (Deprecated)","description":"Controls whether websites are allowed to make requests to more-private network endpoints.\n\nWhen this policy is enabled, all Private Network Access checks are disabled for all origins. This may allow attackers to perform cross-site request forgery (CSRF) attacks on private network servers.\n\nWhen this policy is disabled or not configured, the default behavior for requests to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests, PrivateNetworkAccessSendPreflights, and PrivateNetworkAccessRespectPreflightResults feature flags. These flags may be controlled by experimentation or set via the command line.\n\nThis policy relates to the Private Network Access specification. See https://wicg.github.io/private-network-access/ for more details.\n\nA network endpoint is more private than another if:\n1) Its IP address is localhost and the other is not.\n2) Its IP address is private and the other is public.\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\n\nWhen this policy enabled, websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#insecureprivatenetworkrequestsallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"43fd1488241f611d":{"id":"com.apple.managedclient.preferences_userpreference_apptheming","displayName":"Set theme","description":"Set the theme color.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_userpreference_apptheming_0","displayName":"Blue","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userpreference_apptheming_1","displayName":"Purple","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userpreference_apptheming_2","displayName":"Pink","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userpreference_apptheming_3","displayName":"Orange","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userpreference_apptheming_4","displayName":"Red","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userpreference_apptheming_5","displayName":"Green","description":null,"helpText":null}]},"435929a94ffaebdb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.alwaysopenpdfexternally","displayName":"Always open PDF files externally","description":"Disables the internal PDF viewer in Microsoft Edge.\n\nIf you enable this policy Microsoft Edge treats PDF files as downloads and lets users open them with the default application.\n\nIf Microsoft Edge is the default PDF reader, PDF files aren't downloaded and continue to open in Microsoft Edge.\n\nIf you don't configure this policy or disable it, Microsoft Edge opens PDF files (unless the user disables it).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.alwaysopenpdfexternally_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.alwaysopenpdfexternally_true","displayName":"Enabled","description":null,"helpText":null}]},"4353bff4daa2e6f5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.builtinaiapisenabled","displayName":"Allow pages to use the built-in AI APIs.","description":"Use this policy to control whether websites can access the built-in AI APIs, including the LanguageModel API, Summarization API, Writer API, and Rewriter API.\n\nEnable this policy to allow pages to use the APIs. If you don’t configure this policy, the APIs are still allowed.\n\nDisable this policy to block access to the APIs. The APIs will return an error when used.\n\nFor more information, see https://github.com/webmachinelearning/writing-assistance-apis/blob/main/README.md.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.builtinaiapisenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.builtinaiapisenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"436569a424624b0c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeoptoutuxenabled","displayName":"Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (Obsolete)","description":"This policy is obsolete because we determined that this experimental opt-out UX isn't required.\n\nThis policy lets you manage whether the opt-out user experience for enhanced security mode is presented when ESM is turned on for Microsoft Edge.\n\nIf you enable or don't configure this policy, the UI for the opt-out user experience is on.\n\nIf you disable this policy, the UI for the opt-out user experience is off.\n\nNote: If this policy is used, only the User Interface for the opt-out experience is supressed - ESM is still turned on. For more information, see the \"EnhanceSecurityMode\" policy.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeoptoutuxenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeoptoutuxenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"43a2f13dde046490":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagelocation_recommended","displayName":"Configure the new tab page URL (users can override)","description":"Configures the default URL for the new tab page.\n\nThe recommended version of this policy doesn't currently work and functions exactly like the mandatory version.\n\nThis policy determines the page that opens when new tabs are created (including when new windows are opened). It also affects the startup page if this page opens to the new tab page.\n\nThis policy doesn't determine which page opens on startup; that factor is controlled by the \"RestoreOnStartup\" policy. It also doesn't affect the home page if this home page opens to the new tab page.\n\nIf you don't configure this policy, the default new tab page is used.\n\nIf you configure this policy *and* the \"NewTabPageSetFeedType\" policy, this policy takes precedence.\n\nIf a blank tab is preferred, \"about:blank\" is the correct URL to use, not \"about://blank\".\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or joined to instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"430dba8dd3e3b527":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist","displayName":"Disable printer types on the deny list","description":"The printer types on the deny list aren't discovered or have their capabilities fetched.\n\nPlacing all printer types on the deny list effectively disables printing because there's no print destination for documents.\n\nIf you don't configure this policy, or the printer list is empty, all printer types are discoverable.\n\nPrinter destinations include extension printers and local printers. Extension printers are also known as print provider destinations, and include any destination that belongs to a Microsoft Edge extension.\nLocal printers are also known as native printing destinations, and include destinations available to the local machine and shared network printers.\n\nIn Microsoft version 93 or later, if you set this policy to 'pdf' it also disables the 'save as Pdf' option from the right click context menu.\n\nIn Microsoft version 103 or later, if you set this policy to 'onedrive' it also disables the 'save as Pdf (OneDrive)' option from print preview.\n\nPolicy options mapping:\n\n* privet (privet) = Zeroconf-based (mDNS + DNS-SD) protocol destinations\n\n* extension (extension) = Extension-based destinations\n\n* pdf (pdf) = The 'Save as PDF' destination. (93 or later, also disables from context menu)\n\n* local (local) = Local printer destinations\n\n* onedrive (onedrive) = Save as PDF (OneDrive) printer destinations. (103 or later)\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_privet","displayName":"Zeroconf-based (mDNS + DNS-SD) protocol destinations","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_extension","displayName":"Extension-based destinations","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_pdf","displayName":"The 'Save as PDF' destination. (93 or later, also disables from context menu)","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_local","displayName":"Local printer destinations","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_onedrive","displayName":"Save as PDF (OneDrive) printer destinations. (103 or later)","description":null,"helpText":null}]},"43ebc2e6c24de9df":{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_isdiscoveryserver","displayName":"Is Discovery Server","description":"Indicates whether the server is a discovery server or if it is used for bulk download. A discovery server is used every time a user requests a profile discovery operation. Optional, default value is false.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":[{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_isdiscoveryserver_false","displayName":"Is Not Discovery Server","description":"Is Not Discovery Server","helpText":null},{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_isdiscoveryserver_true","displayName":"Is Discovery Server","description":"Is Discovery Server","helpText":null}]},"4344f69baf0dcab8":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobsperuser_bits_maxjobsperuserlist","displayName":"Maximum number of BITS jobs for each user:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"43d03a9598f0a14a":{"id":"device_vendor_msft_policy_config_admx_credssp_denysavedcredentials_concatenatedefaults_dsc","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_denysavedcredentials_concatenatedefaults_dsc_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_denysavedcredentials_concatenatedefaults_dsc_1","displayName":"True","description":null,"helpText":null}]},"43c0ea7ab7ea6494":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_extensions_exclusions_extensionslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"43cb884a6d09a865":{"id":"device_vendor_msft_policy_config_admx_msi_msi_disablesrcheckpoints","displayName":"Turn off creation of System Restore checkpoints","description":"This policy setting prevents Windows Installer from creating a System Restore checkpoint each time an application is installed. System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files.\r\n\r\nIf you enable this policy setting, the Windows Installer does not generate System Restore checkpoints when installing applications.\r\n\r\nIf you disable or do not configure this policy setting, by default, the Windows Installer automatically creates a System Restore checkpoint each time an application is installed, so that users can restore their computer to the state it was in before installing the application.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-msi-disablesrcheckpoints"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_msi_disablesrcheckpoints_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_msi_disablesrcheckpoints_1","displayName":"Enabled","description":null,"helpText":null}]},"4334bddc07a769b0":{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_forcetunneling_stateselect","displayName":"Select from the following states:","description":null,"helpText":"","infoUrls":[],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_forcetunneling_stateselect_enabled","displayName":"Enabled State","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_forcetunneling_stateselect_disabled","displayName":"Disabled State","description":null,"helpText":null}]},"43fed317cc7dcf4d":{"id":"device_vendor_msft_policy_config_admx_power_acstartmenubuttonaction_2_selectacstartmenubuttonaction","displayName":"User Interface Sleep Button Action","description":null,"helpText":"","infoUrls":[],"categoryId":"5d03766c-9480-43f2-9e85-461a44c821d4","categoryName":"Button Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_acstartmenubuttonaction_2_selectacstartmenubuttonaction_0","displayName":"Sleep","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_acstartmenubuttonaction_2_selectacstartmenubuttonaction_1","displayName":"Hibernate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_acstartmenubuttonaction_2_selectacstartmenubuttonaction_2","displayName":"Shut down","description":null,"helpText":null}]},"4372fb676994f08b":{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargelevel1_2_enterdcbatterydischargelevel1","displayName":"Low Battery Notification Level","description":null,"helpText":"","infoUrls":[],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":null},"43724a96d8780106":{"id":"device_vendor_msft_policy_config_admx_startmenu_nochangestartmenu","displayName":"Prevent users from customizing their Start Screen","description":"This policy setting allows you to prevent users from changing their Start screen layout.\n\nIf you enable this setting, you will prevent a user from selecting an app, resizing a tile, pinning/unpinning a tile or a secondary tile, entering the customize mode and rearranging tiles within Start and Apps.\n\nIf you disable or do not configure this setting, you will allow a user to select an app, resize a tile, pin/unpin a tile or a secondary tile, enter the customize mode and rearrange tiles within Start and Apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nochangestartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_nochangestartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_nochangestartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"438d676dd2cc75bc":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_usb_redirection_disable_usbaccessright","displayName":"RemoteFX USB Redirection Access Rights","description":null,"helpText":"","infoUrls":[],"categoryId":"e6b767af-2ce1-4c91-9360-15abbb0bf3bc","categoryName":"Remote FX USB Device Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_usb_redirection_disable_usbaccessright_1","displayName":"Adminstrators Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_usb_redirection_disable_usbaccessright_2","displayName":"Adminstrators and Users","description":null,"helpText":null}]},"434859db95382572":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_requiresecuretimesyncrequests","displayName":"RequireSecureTimeSyncRequests","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"43592786b7517f8a":{"id":"device_vendor_msft_policy_config_audit_policychange_auditotherpolicychangeevents","displayName":"Policy Change Audit Other Policy Change Events","description":"This policy setting allows you to audit events generated by other security policy changes that are not audited in the policy change category, such as the following: Trusted Platform Module (TPM) configuration changes. Kernel-mode cryptographic self tests. Cryptographic provider operations. Cryptographic context operations or modifications. Applied Central Access Policies (CAPs) changes. Boot Configuration Data (BCD) modifications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#policychange_auditotherpolicychangeevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_policychange_auditotherpolicychangeevents_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditotherpolicychangeevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditotherpolicychangeevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditotherpolicychangeevents_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"43bb18ed6c631ae9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_cloudmanagementenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"432cb4c523863f1b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended","displayName":"Default search provider suggest URL","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURL specifies the URL of the search engine to provide search suggestions. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nExample value: https://search.my.company/suggest?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"43aafed30278149d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode","displayName":"Sitelist parsing mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode_0","displayName":"Default behavior for LBS.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode_1","displayName":"More compatible with Microsoft IE/Edge enterprise mode sitelists.","description":null,"helpText":null}]},"439b89c1597c8f0c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings","displayName":"Settings for enhanced autofill","description":"Specifies whether users can let Google Chrome use Generative AI to better understand forms and help them fill more fields.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"43de7c6ac7a687c2":{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode","displayName":"Turn on Enhanced Protected Mode","description":"Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system.\n\nIf you enable this policy setting, Enhanced Protected Mode will be turned on. Any zone that has Protected Mode enabled will use Enhanced Protected Mode. Users will not be able to disable Enhanced Protected Mode.\n\nIf you disable this policy setting, Enhanced Protected Mode will be turned off. Any zone that has Protected Mode enabled will use the version of Protected Mode introduced in Internet Explorer 7 for Windows Vista.\n\nIf you do not configure this policy, users will be able to turn on or turn off Enhanced Protected Mode on the Advanced tab of the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenhancedprotectedmode"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"43f4df4c85ad1472":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"434c21c068394f1a":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowaccesstodatasources"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"435c72ddfe7fe9a8":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"4396af38065b2eb1":{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known or potentially dangerous downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockAllDownloads' to block all downloads.\r\n\r\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\r\n\r\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\nPolicy options mapping:\r\n\r\n* DefaultDownloadSecurity (0) = No special restrictions\r\n\r\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\r\n\r\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\r\n\r\n* BlockAllDownloads (3) = Block all downloads\r\n\r\n* BlockMaliciousDownloads (4) = Block malicious downloads\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"432167c4f3eb4a5d":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc","displayName":"Block Window Management permission on specified sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"43cf5f2b9d71bd52":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_webauthenticationremotedesktopallowedoriginsdesc","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"43ec3431cf2758cc":{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout","displayName":"Specifies whether to opt out of Local Network Access restrictions","description":"This policy allows for opting out of restrictions on requests to local network endpoints.\r\n\r\nIf you enable this policy, Local Network Access requests will only display warnings in Edge DevTools when Local Network Access checks fail.\r\n\r\nIf you disable or don't configure this policy, Local Network Access requests will follow the default handling behavior.\r\n\r\nFor more information about Local Network Access restrictions, see Local Network Access .\r\n\r\nThis enterprise policy is temporary and will be removed after Microsoft Edge version 146.\r\n\r\nTo allow specific URL patterns that should automatically be granted Local Network Access permission, use the LocalNetworkAccessAllowedForUrls policy.\r\n\r\nNote: If the LocalNetworkAccessRestrictionsEnabled policy is enabled, it takes precedence over this policy.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout_1","displayName":"Enabled","description":null,"helpText":null}]},"434189fc5a2e70d6":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode","displayName":"Print Rasterization Mode","description":"Controls how Microsoft Edge prints on Windows.\r\n\r\nWhen printing to a non-PostScript printer on Windows, sometimes print jobs need to be rasterized to print correctly.\r\n\r\nIf you set this policy to 'Full' or don't configure it, Microsoft Edge will do full page rasterization if necessary.\r\n\r\nIf you set this policy to 'Fast', Microsoft Edge will reduce the amount of rasterization which can help reduce print job sizes and increase printing speed.\r\n\r\nPolicy options mapping:\r\n\r\n* Full (0) = Full page rasterization\r\n\r\n* Fast (1) = Avoid rasterization if possible\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_1","displayName":"Enabled","description":null,"helpText":null}]},"43784a8ceebcd131":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_serialallowallportsforurlsdesc","displayName":"Automatically grant sites permission to connect all serial ports (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"43ee01c0725dbcee":{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expirevalue_edt","displayName":"Maximum ticket time (value):","description":"","helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":null},"43c42e5372f4f17f":{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text","displayName":"Restrict clipboard transfer from client to server:","description":"","helpText":"","infoUrls":[],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_0","displayName":"Disable clipboard transfers from client to server","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_1","displayName":"Allow plain text","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_2","displayName":"Allow plain text and images","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_3","displayName":"Allow plain text, images and Rich Text Format","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_4","displayName":"Allow plain text, images, Rich Text Format and HTML","description":null,"helpText":null}]},"43a18c0465770169":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_computermanagement","displayName":"Computer Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-computermanagement"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_computermanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_computermanagement_1","displayName":"Enabled","description":null,"helpText":null}]},"43c243cc5f43be04":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled","displayName":"Enable AutoFill (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"438fa5ea9866fef4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid","displayName":"Parameters (User)","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":null},"4318c1d147672927":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate","displayName":"Restricted Sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_4","displayName":"High","description":null,"helpText":null}]},"43a0be953ea347c5":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer","displayName":"Allow VBScript to run in Internet Explorer (User)","description":"This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer.\n\nIf you selected Enable in the drop-down box, VBScript can run without user intervention.\n\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run.\n\nIf you selected Disable in the drop-down box, VBScript is prevented from running.\n\nIf you do not configure or disable this policy setting, VBScript is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowvbscripttorunininternetexplorer"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"430ebe5b53bd9ec9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification","displayName":"Notify a user that a browser restart is recommended or required for pending updates (User)","description":"Notify users that they need to restart Microsoft Edge to apply a pending update.\r\n\r\nIf you don't configure this policy, Microsoft Edge adds a recycle icon at the far right of the top menu bar to prompt users to restart the browser to apply the update.\r\n\r\nIf you enable this policy and set it to 'Recommended' (1), a recurring warning prompts users that a restart is recommended. Users can dismiss this warning and defer the restart.\r\n\r\nIf you set the policy to 'Required' (2), a recurring warning prompts users that the browser will be restarted automatically as soon as a notification period passes. The default period is seven days. You can configure this period with the 'RelaunchNotificationPeriod' (Set the time period for update notifications) policy.\r\n\r\nThe user's session is restored when the browser restarts.\r\n\r\n* 1 = Recommended - Show a recurring prompt to the user indicating that a restart is recommended\r\n\r\n* 2 = Required - Show a recurring prompt to the user indicating that a restart is required","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_1","displayName":"Enabled","description":null,"helpText":null}]},"43d4da967f55ede7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting (User)","description":"Setting this policy controls the default behavior for the local fonts permission.\n\nIf you set the policy to BlockLocalFonts (value 2), access to local fonts is denied by default. Sites are prevented from accessing information about local fonts.\n\nIf you set the policy to AskLocalFonts (value 3), users are prompted when a site requests access to local fonts. If permission is granted, the site can access information about local fonts.\n\nIf a site is included in 'LocalFontsAllowedForUrls' (Allow Local Fonts permission on these sites) or 'LocalFontsBlockedForUrls' (Block Local Fonts permission on these sites), then that setting overrides the value set for this policy.\n\nIf you don't configure this policy, users are prompted by default and can change this setting.\n\nPolicy options mapping:\n\n* BlockLocalFonts (2) = Denies the Local Fonts permission on all sites by default\n\n* AskLocalFonts (3) = Ask every time a site wants to obtain the Local Fonts permission\n\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4317313d13bac719":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_proxysettings","displayName":"Proxy settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"43da6b205f9315fd":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled","displayName":"Synonyms are provided when using Microsoft Editor spell checker (User)","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages, and synonyms can be suggested as an integrated feature.\r\n\r\nIf you enable this policy, Microsoft Editor spell checker will provide synonyms for suggestions for misspelled words.\r\n\r\nIf you disable or don't configure this policy, Microsoft Editor spell checker will not provide synonyms for suggestions for misspelled words.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy or the 'MicrosoftEditorProofingEnabled' (Spell checking provided by Microsoft Editor) policy are set to disabled, or the user disables spell checking or chooses not to use Microsoft Editor spell checker in the settings page, this policy will have no effect.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4309b353fa58f8fa":{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile","displayName":"Switch sites on the IE mode site list to a work profile (User)","description":"Allows Microsoft Edge to switch to the appropriate profile when navigating to a site that matches an entry on the IE mode site list. Only sites that specify IE mode or Edge mode will be switched to the work profile.\r\n\r\nIf you enable or don't configure this policy, navigations to URLs matching a site on the IE mode site list will switch to the most recently used work profile if one exists.\r\n\r\nIf you disable this policy, navigations to URLs matching a site on the IE mode site list will remain in the current browser profile.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"43c978b84782ecb9":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo","displayName":"Set new tab page company logo (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWe are deprecating this policy because it doesn't work as expected and recommend that it not be used.\r\n\r\nSpecifies the company logo to use on the new tab page in Microsoft Edge.\r\n\r\nThe policy should be configured as a string that expresses the logo(s) in JSON format. For example: { \"default_logo\": { \"url\": \"https://www.contoso.com/logo.png\", \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\" }, \"light_logo\": { \"url\": \"https://www.contoso.com/light_logo.png\", \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\" } }\r\n\r\nYou configure this policy by specifying the URL from which Microsoft Edge can download the logo and its cryptographic hash (SHA-256), which is used to verify the integrity of the download. The logo must be in PNG or SVG format, and its file size must not exceed 16 MB. The logo is downloaded and cached, and it will be redownloaded whenever the URL or the hash changes. The URL must be accessible without any authentication.\r\n\r\nThe 'default_logo' is required and will be used when there's no background image. If 'light_logo' is provided, it will be used when the user's new tab page has a background image. We recommend a horizontal logo with a transparent background that is left-aligned and vertically centered. The logo should have a minimum height of 32 pixels and an aspect ratio from 1:1 to 4:1. The 'default_logo' should have proper contrast against a white/black background while the 'light_logo' should have proper contrast against a background image.\r\n\r\nIf you enable this policy, Microsoft Edge downloads and shows the specified logo(s) on the new tab page. Users can't override or hide the logo(s).\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will show no company logo or a Microsoft logo on the new tab page.\r\n\r\nFor help with determining the SHA-256 hash, see https://docs.microsoft.com/powershell/module/microsoft.powershell.utility/get-filehash.\r\n\r\nExample value:\r\n\r\n{\r\n \"light_logo\": {\r\n \"url\": \"https://www.contoso.com/light_logo.png\", \r\n \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\"\r\n }, \r\n \"default_logo\": {\r\n \"url\": \"https://www.contoso.com/logo.png\", \r\n \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\"\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_1","displayName":"Enabled","description":null,"helpText":null}]},"43925b43853e06ba":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (User)","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\r\n\r\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'JavaScriptJitAllowedForSites' (Allow JavaScript to use JIT on these sites) and 'JavaScriptJitBlockedForSites' (Block JavaScript from using JIT on these sites) policies.\r\n\r\nIf you don't configure this policy, JavaScript JIT is enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowJavaScriptJit (1) = Allow any site to run JavaScript JIT\r\n\r\n* BlockJavaScriptJit (2) = Do not allow any site to run JavaScript JIT\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"43013e91f3daed8d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_l_workflowsig472","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_l_workflowsig472_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_l_workflowsig472_1","displayName":"True","description":null,"helpText":null}]},"43b2a99407912086":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc06_l_allowsubfolders261","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc06_l_allowsubfolders261_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc06_l_allowsubfolders261_1","displayName":"True","description":null,"helpText":null}]},"433c9e82f5aa454c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_l_descriptioncolon292","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"43fea89cc4bb5b4f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_l_descriptioncolon296","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"43f859f802c6d6df":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_serviceleveloptions_l_serviceleveloptionsdropid","displayName":"Service Level Options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"91041ad3-e0a6-43fd-bc7b-ad4c7dda5765","categoryName":"Online Content","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_serviceleveloptions_l_serviceleveloptionsdropid_0","displayName":"Office services only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_serviceleveloptions_l_serviceleveloptionsdropid_1","displayName":"Microsoft services only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_serviceleveloptions_l_serviceleveloptionsdropid_2","displayName":"All services","description":null,"helpText":null}]},"431f5c2400959d03":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage","displayName":"Notes Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Notes Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"436f617465795263":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapiopenmessage","displayName":"Configure Simple MAPI message opening prompt (User)","description":"This policy setting allows you to specify what occurs when a program attempts to gain access to a recipient field, such as the “To” field, using Simple MAPI.\r\n\r\nIf you enable this policy setting, you can choose whether Outlook always allows access to the recipient field, always disallows access to the recipient field, or prompt users to specify whether to allow or disallow access to the recipient field.\r\n\r\nIf you disable or do not configure this policy setting, Outlook prompts users to specify whether to allow or disallow access to the Address Book.","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapiopenmessage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapiopenmessage_1","displayName":"Enabled","description":null,"helpText":null}]},"43d4b2e3117038ae":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting_l_selectrpcproxyauthentication","displayName":"Authentication used to connect with the proxy server: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting_l_selectrpcproxyauthentication_1","displayName":"Basic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting_l_selectrpcproxyauthentication_2","displayName":"NTLM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting_l_selectrpcproxyauthentication_16","displayName":"Negotiate","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting_l_selectrpcproxyauthentication_65536","displayName":"Certificate","description":null,"helpText":null}]},"4303c50e792401f8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_borderlines","displayName":"Border lines (User)","description":"Checks/unchecks the option \"Border Lines.\"","helpText":"","infoUrls":[],"categoryId":"62492a4c-fd70-4275-ae5e-d60e200e3553","categoryName":"Apply as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_borderlines_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_borderlines_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/44.json b/public/intune-definitions/44.json new file mode 100644 index 000000000000..5955c8f05e9c --- /dev/null +++ b/public/intune-definitions/44.json @@ -0,0 +1 @@ +{"444620454a089b0e":{"id":"ade_setupassistant_icloudstorage","displayName":"iCloud Storage","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_icloudstorage_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_icloudstorage_1","displayName":"Show","description":null,"helpText":null}]},"448800587a779d36":{"id":"com.android.devicerestrictionpolicy.usbdataaccess","displayName":"USB access","description":"Select what files and/or data can be transferred via USB. If you block file transfer, only files will be blocked from being transferred and other connection (such as mouse) will still be allowed. If you block USB data transfer, all data will be blocked. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.usbdataaccess_allowusbdatatransfer","displayName":"Allow USB data transfer","description":"All types of USB data transfers are allowed. usbFileTransferDisabled is ignored.","helpText":null},{"id":"com.android.devicerestrictionpolicy.usbdataaccess_disallowusbfiletransfer","displayName":"Disallow USB file transfer","description":"Transferring files over USB is disallowed. Other types of USB data connections, such as mouse and keyboard connection, are allowed. usbFileTransferDisabled is ignored.","helpText":null},{"id":"com.android.devicerestrictionpolicy.usbdataaccess_disallowusbdatatransfer","displayName":"Disallow USB data transfer","description":"When set, all types of USB data transfers are prohibited. Supported for devices running Android 12 or above with USB HAL 1.3 or above. If the setting is not supported, DISALLOW_USB_FILE_TRANSFER will be set. A NonComplianceDetail with API_LEVEL is reported if the Android version is less than 12. A NonComplianceDetail with DEVICE_INCOMPATIBLE is reported if the device does not have USB HAL 1.3 or above. usbFileTransferDisabled is ignored.","helpText":null}]},"442cd5f60db784f3":{"id":"com.apple.caldav.account_com.apple.caldav.account","displayName":"Top Level Setting Group Collection","description":"com.apple.caldav.account","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":null},"441c18f189d6cb8d":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_application id","displayName":"Microsoft OneNote Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"446f8942549cc5ea":{"id":"com.apple.managedclient.preferences_defaultnotificationssetting","displayName":"Default notification setting","description":"Set whether websites can display desktop notifications. You can allow them by default (1), deny them by default (2), or have the user be asked each time a website wants to show a notification (3).\n\nIf you don't configure this policy, notifications are allowed by default, and the user can change this setting.\n\n* 1 = Allow sites to show desktop notifications\n\n* 2 = Don't allow any site to show desktop notifications\n\n* 3 = Ask every time a site wants to show desktop notifications","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultnotificationssetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultnotificationssetting_0","displayName":"Allow sites to show desktop notifications","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultnotificationssetting_1","displayName":"Don't allow any site to show desktop notifications","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultnotificationssetting_2","displayName":"Ask every time a site wants to show desktop notifications","description":null,"helpText":null}]},"441f58ca1a377542":{"id":"com.apple.managedclient.preferences_passwordexportenabled","displayName":"Enable exporting saved passwords from Password Manager","description":"This policy controls whether the Export Password button in edge://wallet/passwords is enabled.\n\nIf enabled or not configured, users can export saved passwords.\nIf disabled, the Export Password button is unavailable, preventing password exports.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordexportenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_passwordexportenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_passwordexportenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4419730857886f06":{"id":"com.apple.managedclient.preferences_sharebrowsinghistorywithcopilotsearchallowed","displayName":"Allow sharing tenant-approved browsing history with Microsoft 365 Copilot Search","description":"This policy controls whether browsing history in Microsoft Edge is shared with Microsoft 365 Copilot Search to provide more relevant search results. Only tenant-approved, work-related sites are shared.\n\nThis feature is available only to users who are signed in to Microsoft Edge with an Entra ID account and have an eligible Microsoft 365 Copilot license.\n\nIf you enable or don't configure this policy, browsing history will be shared with Microsoft 365 Copilot Search by default, and users can turn off sharing using the toggle in Microsoft Edge settings.\n\nIf you disable this policy, browsing history won't be shared with Microsoft 365 Copilot Search.\n\nLearn more about how Copilot uses data and consent at https://go.microsoft.com/fwlink/?linkid=2333202","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sharebrowsinghistorywithcopilotsearchallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sharebrowsinghistorywithcopilotsearchallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sharebrowsinghistorywithcopilotsearchallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"44a150eb87c8b52a":{"id":"com.apple.managedclient.preferences_tabfreezingenabled","displayName":"Allow freezing of background tabs","description":"Controls whether Microsoft Edge can freeze tabs that are in the background for at least 5 minutes.\n\nTab freezing reduces CPU, battery, and memory usage. Microsoft Edge uses heuristics to avoid freezing tabs that do useful work in the background, such as display notifications, play sound, and stream video.\n\nIf you enable or don't configure this policy, tabs that have been in the background for at least 5 minutes might be frozen.\n\nIf you disable this policy, no tabs will be frozen.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#tabfreezingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_tabfreezingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_tabfreezingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"449a8cdb81adb630":{"id":"com.microsoft.edge.mamedgeappconfigsettings.translateenabled_recommended","displayName":"Enable Translate (users can override)","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge offers to translate a webpage by showing an integrated translate flyout when the language detected on a webpage isn't listed under preferred languages. A translate option is available on the right-click context menu.\n\nUsers can also translate selected text on a webpage via the right-click context menu, or on a PDF via the PDF toolbar and the right-click context menu.\n\nIf you don't configure this policy, the policy is enabled by default. Users can choose whether to use the translation functionality or not.\n\nYou can disable this policy to disable all built-in translate features.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.translateenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.translateenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"448b029a3b50be1f":{"id":"device_vendor_msft_email_emailaddressattributeaad","displayName":"Email address attribute from AAD","description":"The attribute Intune gets from Azure AD to dynamically generate the email address that will be used by this profile e.g. MyName@contoso.com (UPN).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/email2-csp"],"categoryId":"48cb2bee-74be-4165-bc19-89c5b1c50c00","categoryName":"Email","options":null},"446902ff6f2edf24":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nochangingstartmenubackground","displayName":"Prevent changing start menu background","description":"Prevents users from changing the look of their start menu background, such as its color or accent.\r\n\r\nBy default, users can change the look of their start menu background, such as its color or accent.\r\n\r\nIf you enable this setting, the user will be assigned the default start menu background and colors and will not be allowed to change them.\r\n\r\nIf the \"Force a specific background and accent color\" policy is also set on a supported version of Windows, then those colors take precedence over this policy.\r\n\r\nIf the \"Force a specific Start background\" policy is also set on a supported version of Windows, then that background takes precedence over this policy.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nochangingstartmenubackground"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nochangingstartmenubackground_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nochangingstartmenubackground_1","displayName":"Enabled","description":null,"helpText":null}]},"44348615373ba2eb":{"id":"device_vendor_msft_policy_config_admx_printing2_immortalprintqueue","displayName":"Allow pruning of published printers","description":"Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer.\r\n\r\n By default, the pruning service on the domain controller prunes printer objects from Active Directory if the computer that published them does not respond to contact requests. When the computer that published the printers restarts, it republishes any deleted printer objects.\r\n\r\n If you enable this setting or do not configure it, the domain controller prunes this computer's printers when the computer does not respond.\r\n\r\n If you disable this setting, the domain controller does not prune this computer's printers. This setting is designed to prevent printers from being pruned when the computer is temporarily disconnected from the network.\r\n\r\n Note: You can use the \"Directory Pruning Interval\" and \"Directory Pruning Retry\" settings to adjust the contact interval and number of contact attempts.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-immortalprintqueue"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_immortalprintqueue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_immortalprintqueue_1","displayName":"Enabled","description":null,"helpText":null}]},"442a09c80802981b":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_c_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":null},"442e81496ac8655d":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablewindowssettingsync_checkbox_useroverride","displayName":"Allow users to turn \"other Windows settings\" syncing on.","description":null,"helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablewindowssettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablewindowssettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"441272a230dad663":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_user_refresh_interval_prompt","displayName":"User Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"4456de8924e9f824":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist","displayName":"Use Internet Explorer's SiteList policy for Legacy Browser Support.","description":"This policy controls whether to load rules from Internet Explorer®'s SiteList policy.\r\n\r\nWhen this policy is set to true, Google Chrome reads Internet Explorer®'s SiteList to obtain the site list's URL. Google Chrome then downloads the site list from that URL, and applies the rules as if they had been configured with the BrowserSwitcherUrlList policy.\r\n\r\nWhen this policy is false or unset, Google Chrome does not use Internet Explorer®'s SiteList policy as a source of rules for switching browsers.\r\n\r\nFor more information on Internet Explorer's SiteList policy: https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"44de64259bcefa4b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls","displayName":"Block notifications on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't display notifications.\r\n\r\nLeaving the policy unset means DefaultNotificationsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"441a7ddc320d8011":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls","displayName":"List of alternate URLs for the default search provider","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderAlternateURLs specifies a list of alternate URLs for extracting search terms from the search engine. The URLs should include the string '{searchTerms}'.\r\n\r\nLeaving DefaultSearchProviderAlternateURLs unset means no alternate URLs are used to extract search terms.\r\n\r\nExample value:\r\n\r\nhttps://search.my.company/suggest#q={searchTerms}\r\nhttps://search.my.company/suggest/search#q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_1","displayName":"Enabled","description":null,"helpText":null}]},"442b8281bc699e39":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains","displayName":"Allow local file access to file:// URLs on these sites in the PDF Viewer","description":"Setting this policy allows the domains listed to access file:// URLs in the PDF Viewer.\r\nAdding to the policy allows the domain to access file:// URLs in the PDF Viewer.\r\nRemoving from the policy disallows the domain from accessing file:// URLs in the PDF Viewer.\r\nLeaving the policy unset disallows all domains from accessing file:// URLs in the PDF Viewer.\r\n\r\nExample value:\r\n\r\nexample.com\r\ngoogle.com","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_1","displayName":"Enabled","description":null,"helpText":null}]},"44358b38650cee49":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls","displayName":"Block Window Management permission on these sites","description":"Allows you to set a list of site url patterns that specify sites which will automatically deny the window management permission. This will limit the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultWindowManagementSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nThis replaces the deprecated WindowPlacementBlockedForUrls policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4480d779d8b271d8":{"id":"device_vendor_msft_policy_config_defender_allowscriptscanning","displayName":"Allow Script Scanning","description":"Allows or disallows Windows Defender Script Scanning functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowscriptscanning_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowscriptscanning_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"44baadcf1e583a64":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount","displayName":"Reattach Count","description":"When a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to re-attach the volume. This value specifies how many times to retry. The default value is 60 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ReAttachRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_1","displayName":"Enabled","description":null,"helpText":null}]},"444e763076d6fd40":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern","displayName":"VHD Name Pattern","description":"Specifies a string pattern used when creating a users ODFC container. Use this setting to define how FSLogix will attempt to create a users ODFC container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to create.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNameMatch value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDNamePattern\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_1","displayName":"Enabled","description":null,"helpText":null}]},"44850346184849c6":{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3","displayName":"Allow fallback to SSL 3.0 (Internet Explorer)","description":"This policy setting allows you to block an insecure fallback to SSL 3.0. When this policy is enabled, Internet Explorer will attempt to connect to sites using SSL 3.0 or below when TLS 1.0 or greater fails.\n\nWe recommend that you do not allow insecure fallback in order to prevent a man-in-the-middle attack.\n\nThis policy does not affect which security protocols are enabled.\n\nIf you disable this policy, system defaults will be used.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowfallbacktossl3"],"categoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","categoryName":"Security Features","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_1","displayName":"Enabled","description":null,"helpText":null}]},"4485e23f744f4826":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt","displayName":"Enter the zone assignments here.","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":null},"44efa69f09dceec1":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting","displayName":"Allow active scripting","description":"This policy setting allows you to manage whether script code on pages in the zone is run.\n\nIf you enable this policy setting, script code on pages in the zone can run automatically. If you select Prompt in the drop-down box, users are queried to choose whether to allow script code on pages in the zone to run.\n\nIf you disable this policy setting, script code on pages in the zone is prevented from running.\n\nIf you do not configure this policy setting, script code on pages in the zone is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowactivescripting"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_1","displayName":"Enabled","description":null,"helpText":null}]},"44d8e4a816291bc5":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000","displayName":"Allow Binary and Script Behaviors","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_65536","displayName":"Administrator approved","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_3","displayName":"Disable","description":null,"helpText":null}]},"44e7096b006f5639":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_serverspntargetnamevalidationlevel","displayName":"Microsoft Network Server Server SPN Target Name Validation Level","description":"Microsoft network server: Server SPN target name validation level This policy setting controls the level of validation a computer with shared folders or printers (the server) performs on the service principal name (SPN) that is provided by the client computer when it establishes a session using the server message block (SMB) protocol. The server message block (SMB) protocol provides the basis for file and print sharing and other networking operations, such as remote Windows administration. The SMB protocol supports validating the SMB server service principal name (SPN) within the authentication blob provided by a SMB client to prevent a class of attacks against SMB servers referred to as SMB relay attacks. This setting will affect both SMB1 and SMB2. This security setting determines the level of validation a SMB server performs on the service principal name (SPN) provided by the SMB client when trying to establish a session to an SMB server. The options are: Off – the SPN is not required or validated by the SMB server from a SMB client. Accept if provided by client – the SMB server will accept and validate the SPN provided by the SMB client and allow a session to be established if it matches the SMB server’s list of SPN’s for itself. If the SPN does NOT match, the session request for that SMB client will be denied. Required from client - the SMB client MUST send a SPN name in session setup, and the SPN name provided MUST match the SMB server that is being requested to establish a connection. If no SPN is provided by client, or the SPN provided does not match, the session is denied. Default: Off All Windows operating systems support both a client-side SMB component and a server-side SMB component. This setting affects the server SMB behavior, and its implementation should be carefully evaluated and tested to prevent disruptions to file and print serving capabilities. Additional information on implementing and using this to secure your SMB servers can be found at the Microsoft website (https://go.microsoft.com/fwlink/?LinkId=144505).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_serverspntargetnamevalidationlevel"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"44676bd8bfa8e48a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting","displayName":"Default images setting","description":"Set whether websites can display images. You can allow images on all sites (1) or block them on all sites (2).\r\n\r\nIf you don't configure this policy, images are allowed by default, and the user can change this setting.\r\n\r\n* 1 = Allow all sites to show all images\r\n\r\n* 2 = Don't allow any site to show images","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"44832a972eec6ffb":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting","displayName":"Default clipboard site permission (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_2","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_3","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},"443545292cee398c":{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls","displayName":"Allow precise geolocation on these sites","description":"This policy lets you specify a list of URL patterns for sites that are allowed to access the user's high-accuracy geolocation without prompting for permission.\r\n\r\nIf you leave this policy unset, DefaultGeolocationSetting applies to all sites (if configured). Otherwise, the user's personal setting is used.\r\n\r\nFor information about valid url patterns, see https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format. Wildcards (*) are supported.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"44a1f879bd725e40":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed","displayName":"Allow media autoplay for websites","description":"This policy sets the media autoplay policy for websites.\r\n\r\nThe default setting, \"Not configured\" respects the current media autoplay settings and lets users configure their autoplay settings.\r\n\r\nSetting to \"Enabled\" sets media autoplay to \"Allow\". All websites are allowed to autoplay media. Users can’t override this policy.\r\n\r\nSetting to \"Disabled\" sets media autoplay to \"Block\". No websites are allowed to autoplay media. Users can’t override this policy.\r\n\r\nA tab will need to be closed and re-opened for this policy to take effect.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"44f23a1fac54ab95":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended","displayName":"Allow unconfigured sites to be reloaded in Internet Explorer mode","description":"This policy allows users to reload unconfigured sites (that are not configured in the Enterprise Mode Site List) in Internet Explorer mode when browsing in Microsoft Edge and a site requires Internet Explorer for compatibility.\r\n\r\nAfter a site has been reloaded in Internet Explorer mode, \"in-page\" navigations will stay in Internet Explorer mode (for example, a link, script, or form on the page, or a server-side redirect from another \"in-page\" navigation). Users can choose to exit from Internet Explorer mode, or Microsoft Edge will automatically exit from Internet Explorer mode when a navigation that isn't \"in-page\" occurs (for example, using the address bar, the back button, or a favorite link).\r\n\r\nUsers can also optionally tell Microsoft Edge to use Internet Explorer mode for the site in the future. This choice will be remembered for a length of time managed by the 'InternetExplorerIntegrationLocalSiteListExpirationDays' (Specify the number of days that a site remains on the local IE mode site list) policy.\r\n\r\nIf the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) policy is set to 'IEMode', then sites explicitly configured by the 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy's site list to use Microsoft Edge can't be reloaded in Internet Explorer mode, and sites configured by the site list or by the 'SendIntranetToInternetExplorer' (Send all intranet sites to Internet Explorer) policy to use Internet Explorer mode can't exit from Internet Explorer mode.\r\n\r\nIf you enable this policy, users are allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nIf you disable this policy, users aren't allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nNote that if you enable this policy, it takes precedence over how you configured the 'InternetExplorerIntegrationTestingAllowed' (Allow Internet Explorer mode testing) policy, and that policy will be disabled.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"445f8dea72e1331c":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winwordexe7","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winwordexe7_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winwordexe7_1","displayName":"True","description":null,"helpText":null}]},"44ff98c7de7ff149":{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory_maxmemorypershellmb","displayName":"MaxMemoryPerShellMB","description":"","helpText":"","infoUrls":[],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":null},"44489ac99a44a49d":{"id":"device_vendor_msft_policy_config_system_enablehotpatchautoremediation","displayName":"Enable Hotpatch Auto Remediation","description":"This policy setting controls whether Automatic Remediation is enabled on the hotpatch enrolled device. This policy has no effect on devices that does not have hotpatch updates installed. If you enable this policy setting, Automatic Remediation is enabled on the hotpatch enrolled device. If you disable or do not configure this policy setting, Automatic Remediation is disabled on the hotpatch enrolled device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#enablehotpatchautoremediation"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_enablehotpatchautoremediation_0","displayName":"Automatic Remediation is not enabled (Default)","description":"Automatic Remediation is not enabled (Default)","helpText":null},{"id":"device_vendor_msft_policy_config_system_enablehotpatchautoremediation_1","displayName":"Automatic Remediation is enabled","description":"Automatic Remediation is enabled","helpText":null}]},"44d3aab39cbf3c66":{"id":"intelligencesettings_apps_calendar_allownaturallanguageediting","displayName":"Allow Natural Language Editing","description":"If `false`, disables Natural Language Editing in Calendar and Reminders.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_apps_calendar_allownaturallanguageediting_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_apps_calendar_allownaturallanguageediting_true","displayName":"True","description":null,"helpText":null}]},"4493ce35c462d1c0":{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect","displayName":"Restrict users to the following language: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_en-us","displayName":"English","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ja-jp","displayName":"Japanese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ko-kr","displayName":"Korean","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_de-de","displayName":"German","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_zh-cn","displayName":"Simplified Chinese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_zh-tw","displayName":"Traditional Chinese (Taiwan)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_fr-fr","displayName":"French","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_es-es","displayName":"Spanish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_it-it","displayName":"Italian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sv-se","displayName":"Swedish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_nl-nl","displayName":"Dutch","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_pt-br","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_fi-fi","displayName":"Finnish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_nb-no","displayName":"Norwegian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_da-dk","displayName":"Danish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_hu-hu","displayName":"Hungarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_pl-pl","displayName":"Polish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ru-ru","displayName":"Russian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_cs-cz","displayName":"Czech","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_el-gr","displayName":"Greek","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_pt-pt","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_tr-tr","displayName":"Turkish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ar-sa","displayName":"Arabic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_he-il","displayName":"Hebrew","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sk-sk","displayName":"Slovak","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sl-si","displayName":"Slovenian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ro-ro","displayName":"Romanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_hr-hr","displayName":"Croatian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_bg-bg","displayName":"Bulgarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_et-ee","displayName":"Estonian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_lt-lt","displayName":"Lithuanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_lv-lv","displayName":"Latvian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_th-th","displayName":"Thai","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_zh-hk","displayName":"Traditional Chinese (Hong Kong)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sr-latn-cs","displayName":"Serbian (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_uk-ua","displayName":"Ukrainian","description":null,"helpText":null}]},"442fa2d79540388a":{"id":"user_vendor_msft_policy_config_admx_startmenu_nonetanddialupconnect","displayName":"Remove Network Connections from Start Menu (User)","description":"This policy setting allows you to remove Network Connections from the Start Menu.\r\n\r\nIf you enable this policy setting, users are prevented from running Network Connections.\r\n\r\nEnabling this policy setting prevents the Network Connections folder from opening. This policy setting also removes Network Connections from Settings on the Start menu.\r\n\r\nNetwork Connections still appears in Control Panel and in File Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.\r\n\r\nIf you disable or do not configure this policy setting, Network Connections is available from the Start Menu.\r\n\r\nAlso, see the \"Disable programs on Settings menu\" and \"Disable Control Panel\" policy settings and the policy settings in the Network Connections folder (Computer Configuration and User Configuration\\Administrative Templates\\Network\\Network Connections).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nonetanddialupconnect"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nonetanddialupconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nonetanddialupconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"4451f064fac49c61":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls","displayName":"Allow clipboard on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify sites that can use the clipboard site permission. This does not include all clipboard operations on origins matching the patterns. For instance, users will still be able to paste using keyboard shortcuts as this isn't gated by the clipboard site permission.\r\n\r\n\r\nLeaving the policy unset means DefaultClipboardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"442f4a779e2ca0b9":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting","displayName":"Default third-party storage partitioning setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_1","displayName":"Allow third-party storage partitioning by default.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_2","displayName":"Disable third-party storage partitioning.","description":null,"helpText":null}]},"445f2c1fe789c7c5":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"44f0b7329f4983fd":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"44d41e05edb4b9f4":{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault","displayName":"Print PDF as Image Default (User)","description":"Controls if Microsoft Edge makes the Print as image option the default when printing PDFs.\r\n\r\nIf you enable this policy, Microsoft Edge will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not default to setting the Print as image option in the Print Preview when printing a PDF.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"44b99bcd19da08a4":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled","displayName":"Data URL support for SVGUseElement (User)","description":"This policy enables Data URL support for SVGUseElement, which will be disabled\r\nby default starting in Edge stable version 119.\r\nIf this policy is Enabled, Data URLs will keep working in SVGUseElement.\r\nIf this policy is Disabled or left not set, Data URLs won't work in SVGUseElement.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"445098d6a3eaa4db":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Prevent redirection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Redirect sites based on the incompatible sites sitelist","description":null,"helpText":null}]},"44c6488938ed7543":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes","displayName":"Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode (User)","description":"Starting with Microsoft Edge version 96, navigations that switch between Internet Explorer mode and Microsoft Edge will include form data.\r\n\r\nIf you enable this policy, you can specify which data types should be included in navigations between Microsoft Edge and Internet Explorer mode.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the new behavior of including form data in navigations that change modes.\r\n\r\nTo learn more, see https://go.microsoft.com/fwlink/?linkid=2174004\r\n\r\nPolicy options mapping:\r\n\r\n* IncludeNone (0) = Do not send form data or headers\r\n\r\n* IncludeFormDataOnly (1) = Send form data only\r\n\r\n* IncludeHeadersOnly (2) = Send additional headers only\r\n\r\n* IncludeFormDataAndHeaders (3) = Send form data and additional headers\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_1","displayName":"Enabled","description":null,"helpText":null}]},"4423eac7fb34f756":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffclicktotelephone","displayName":"Turn off click to telephone (User)","description":"This policy setting allows you to remove the telephone option from the Contact Card and Outlook Ribbon.\r\n\r\nIf you enable this policy setting, the telephone option does not appear in the Contact Card. Telephone links do not appear in the Contact Card. Telephone options do not appear in the Outlook Ribbon.\r\n\r\nIf you disable or do not configure this policy setting telephone options appear in the Contact Card and Outlook Ribbon.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffclicktotelephone_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffclicktotelephone_1","displayName":"Enabled","description":null,"helpText":null}]},"44d71679a2ed6d46":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_l_workflowdescrip500","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"44bbd2f96b5c55d8":{"id":"user_vendor_msft_policy_config_outlk16v14~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_donewoutlookautomigration","displayName":"Admin-Controlled Migration to New Outlook (User)","description":"\r\nThis policy controls the ability of IT admins to initiate the migration of users from classic Outlook to new Outlook.\r\n\r\nIf you enable this policy setting, IT admins will start the process to switch users from classic Outlook to new Outlook.\r\n\r\nIf you disable this policy setting, the migration process to new Outlook will be stopped, keeping users on their current version of Outlook without transitioning to new Outlook.\r\n\r\nIf you do not set this policy setting, the migration process to new Outlook will not start, and users that have not migrated will remain on classic Outlook.\r\n\r\nNote: IT admins can also define intervals for re-initiating the migration process for users who revert to classic Outlook from new Outlook. This is managed through the NewOutlookAutoMigrationRetryIntervals policy, offering a tailored strategy for transitioning users based on organizational requirements and user feedback.\r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v14~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_donewoutlookautomigration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v14~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_donewoutlookautomigration_1","displayName":"Enabled","description":null,"helpText":null}]},"44afee2498fc8211":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes","displayName":"Prevent users from adding e-mail account types (User)","description":"Disables/Enables the option for adding e-mail account of the associated type in the Server Types page of the E-mail Accounts dialog box.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_1","displayName":"Enabled","description":null,"helpText":null}]},"44c2f26c5500a65e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_specifydelaybeforesendingpeoplesearchrequest_l_specifydelaybeforesendingpeoplesearchrequestspinid","displayName":"in milliseconds (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"44f722f3d92a224b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages","displayName":"Encoding for outgoing messages (User)","description":"Sets the value in the option \"Preferred encoding for outgoing messages\".","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"442c676f9e37a987":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifyopacityofdesktopalert_l_opacityalphalevel","displayName":"Opacity (Alpha Level): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"44a69e5966aa0d75":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2_l_oomsend_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2_l_oomsend_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2_l_oomsend_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2_l_oomsend_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2_l_oomsend_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"449b10bab5fb2679":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2","displayName":"Authentication with Exchange Server (User)","description":"This policy setting controls which authentication method Outlook uses to authenticate with Microsoft Exchange Server. Note - Exchange Server supports the Kerberos authentication protocol and NTLM for authentication. The Kerberos protocol is the more secure authentication method and is supported on Windows 2000 Server and later versions. NTLM authentication is supported in pre-Windows 2000 environments.\r\n \r\nIf you enable this policy setting, you can choose from three different options for controlling how Outlook authenticates with Microsoft Exchange Server:\r\n\r\n- Kerberos/NTLM password authentication. Outlook attempts to authenticate using the Kerberos authentication protocol. If this attempt fails, Outlook attempts to authenticate using NTLM. This option is the default configuration.\r\n\r\n- Kerberos password authentication. Outlook attempts to authenticate using the Kerberos protocol only.\r\n\r\n- NTLM password authentication. Outlook attempts to authenticate using NTLM only.\r\n\r\nIf you disable or do not configure this policy setting, Outlook will attempt to authenticate using the Kerberos authentication protocol. If it cannot (because no Windows 2000 or later domain controllers are available), it will authenticate using NTLM.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_authenticationwithexchangeserver_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"447252452929fbff":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_alwaysoffermetricandusunitsfornewblankdrawings","displayName":"Always offer 'Metric' and 'US units' for new blank drawings and stencils (User)","description":"This policy setting will allow the showing of both US Units and Metric Units when you create a new blank drawing or stencil.\r\n\r\nIf you enable this policy setting, both US Units and Metric Units are shown as a choice before you create a new blank drawing or stencil. These drawings open with the appropriate rulers and page setup and use the appropriate units for the drawing tools. This does not install the templates and stencils in both unit types. This policy setting is always enabled whenever the Developer Tab is turned on.\r\n\r\nIf you disable or do not configure this policy setting, you are not shown a choice between units when creating a blank drawing or stencil if templates and stencils of only one type of unit are installed.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_alwaysoffermetricandusunitsfornewblankdrawings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_alwaysoffermetricandusunitsfornewblankdrawings_1","displayName":"Enabled","description":null,"helpText":null}]},"44967c0b9bcd85f7":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_favoritesstencilname_l_favoritesstencilnamecolon","displayName":"Favorites Stencil Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":null},"44350d105d70f9f5":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"44d8c89675e7de13":{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_v2","displayName":"Set Maximum Storage Space For Recall Snapshots (User)","description":"This policy setting allows you to control the maximum amount of disk space that can be used by Windows to save snapshots for Recall. The default value of '0' will let the OS configure the amount of storage allocated to snapshots. When the default value of '0' is used, the OS configures the storage allocation for snapshots based on the device storage capacity. 25 GB is allocated when the device storage capacity is 256 GB. 75 GB is allocated when the device storage capacity is 512 GB. 150 GB is allocated when the device storage capacity is 1 TB or higher.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragespaceforrecallsnapshots"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_0","displayName":"Let the OS define the maximum storage amount based on hard drive storage size","description":"Let the OS define the maximum storage amount based on hard drive storage size","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_10240","displayName":"10GB","description":"10GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_25600","displayName":"25GB","description":"25GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_51200","displayName":"50GB","description":"50GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_76800","displayName":"75GB","description":"75GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_102400","displayName":"100GB","description":"100GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_153600","displayName":"150GB","description":"150GB","helpText":null}]},"4411cdf2b1f9cb1b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_preventcoauthoring","displayName":"Prevent co-authoring (User)","description":"This policy setting controls how Word opens a file for editing on document management servers that support co-authoring.\r\n\r\nIf you enable this policy setting, Word will prevent co-authoring by taking an exclusive file lock. \r\n\r\nIf you disable or do not configure this policy setting, Word will allow co-authoring by taking short-term shared locks. \r\n\r\nNote: When file synchronization via SOAP over HTTP is turned off it will prevent co-authoring.","helpText":"","infoUrls":[],"categoryId":"e522c142-5666-4090-a7f4-1da1487f5384","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_preventcoauthoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_preventcoauthoring_1","displayName":"Enabled","description":null,"helpText":null}]},"442a8b77cec18b78":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_webaddresswd","displayName":"File tab | Options | (\"Customize Ribbon\" or \"Quick Access Toolbar\") | All Commands | Document Location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_webaddresswd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_webaddresswd_1","displayName":"True","description":null,"helpText":null}]},"4416abaf13fa1338":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"44e024672d5a5691":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/45.json b/public/intune-definitions/45.json new file mode 100644 index 000000000000..6c801ff20f30 --- /dev/null +++ b/public/intune-definitions/45.json @@ -0,0 +1 @@ +{"45b83e25050ae414":{"id":"ade_accountsettings_prefillaccountinfo","displayName":"Prefill account info","description":"If you select 'Yes', the account name and full name must be configured. Not configured allows the end user to configure these fields.","helpText":null,"infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":[{"id":"ade_accountsettings_prefillaccountinfo_0","displayName":"Not Configured","description":null,"helpText":null},{"id":"ade_accountsettings_prefillaccountinfo_1","displayName":"Yes","description":null,"helpText":null}]},"452c13f7cb33eac5":{"id":"ade_setupassistant_applepay","displayName":"Apple Pay","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_applepay_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_applepay_1","displayName":"Show","description":null,"helpText":null}]},"459d38576e0ddf01":{"id":"com.apple.applicationaccess_allowpasswordautofill","displayName":"Allow Password Auto Fill","description":"If false, disables the AutoFill Passwords feature in iOS (with Keychain and third-party password managers) and the user isn’t prompted to use a saved password in Safari or in apps. This restriction also disables Automatic Strong Passwords, and strong passwords are no longer suggested to users. It doesn’t prevent AutoFill for contact info and credit cards in Safari. Requires a supervised device. Available in iOS 12 and later, and macOS 10.14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpasswordautofill_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpasswordautofill_true","displayName":"True","description":null,"helpText":null}]},"45ca3740c8c69000":{"id":"com.apple.applicationaccess_allowrapidsecurityresponseremoval","displayName":"Allow Background Security Improvement Removal (Deprecated)","description":"If false, users are unable to remove the Rapid Security Response option.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowrapidsecurityresponseremoval_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowrapidsecurityresponseremoval_true","displayName":"True","description":null,"helpText":null}]},"45692195e27bd327":{"id":"com.apple.cellular_attachapn_name","displayName":"Name","description":"The name for this configuration.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"45664508efa34688":{"id":"com.apple.configurationprofile.identification_com.apple.configurationprofile.identification","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":null},"4562e5faf8c9d428":{"id":"com.apple.extensiblesso_platformsso_authenticationgraceperiod","displayName":"Authentication Grace Period","description":"The amount of time after a 'FileVaultPolicy', 'LoginPolicy', or 'UnlockPolicy' is received or updated that unregistered local accounts can be used. Required when 'AllowAuthenticationGracePeriod' is set.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"459b498862b8496d":{"id":"com.apple.managedclient.preferences_audiocaptureallowed","displayName":"Allow or block audio capture","description":"Allows you to set whether a user is prompted to grant a website access to their audio capture device. This policy applies to all URLs except for those configured in the \"AudioCaptureAllowedUrls\" list.\n\nIf you enable this policy or don't configure it (the default setting), the user is prompted for audio capture access except from the URLs in the \"AudioCaptureAllowedUrls\" list. These listed URLs are granted access without prompting.\n\nIf you disable this policy, the user is not prompted, and audio capture is accessible only to the URLs configured in \"AudioCaptureAllowedUrls\".\n\nThis policy affects all types of audio inputs, not only the built-in microphone.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#audiocaptureallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_audiocaptureallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_audiocaptureallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"4585898e18656b2b":{"id":"com.apple.managedclient.preferences_enablerealtimeprotection","displayName":"Enable real-time protection (deprecated)","description":"Whether real-time protection (scan files as they are accessed) is enabled or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#enable--disable-real-time-protection"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_enablerealtimeprotection_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablerealtimeprotection_true","displayName":"Enabled","description":null,"helpText":null}]},"459356f23b426036":{"id":"com.apple.managedclient.preferences_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL","description":"Configures the change password URL (HTTP and HTTPS schemes only).\n\nPassword protection service will send users to this URL to change their password after seeing a warning in the browser.\n\nIf you enable this policy, then password protection service sends users to this URL to change their password.\n\nIf you disable this policy or don't configure it, then password protection service will not redirect users to a change password URL.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordprotectionchangepasswordurl"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"4507a8bd17383d15":{"id":"com.apple.managedclient.preferences_pdfxfaenabled","displayName":"XFA support in native PDF reader enabled","description":"Lets the Microsoft Edge browser enable XFA (XML Forms Architecture) support in the native PDF reader and allows users to open XFA PDF files in the browser.\n\nIf you enable this policy, XFA support in the native PDF reader will be enabled.\n\nIf you disable or don't configure this policy, Microsoft Edge will not enable XFA support in the native PDF reader.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#pdfxfaenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_pdfxfaenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_pdfxfaenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"457d76680c6f6cfb":{"id":"com.apple.mcx_timezone","displayName":"Time Zone","description":"The time zone path location string in /usr/share/zoneinfo/; for example, America/Denver or Zulu. ","helpText":null,"infoUrls":[],"categoryId":"853f4181-42e8-411c-91cf-c06968c0a543","categoryName":"Time Server","options":null},"4510325777cf8c9e":{"id":"com.apple.mcx.timemachine_mobilebackups","displayName":"Mobile Backups","description":"If true, create local backup snapshots when not connected to the network.","helpText":null,"infoUrls":[],"categoryId":"361859d9-1382-47c3-b9ec-9251a62fbb25","categoryName":"Time Machine","options":[{"id":"com.apple.mcx.timemachine_mobilebackups_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx.timemachine_mobilebackups_true","displayName":"True","description":null,"helpText":null}]},"4529397e75f8376a":{"id":"com.apple.preference.users_disableusingicloudpassword","displayName":"Disable Using iCloud Password","description":"If true, disables the iCloud password for local accounts.","helpText":null,"infoUrls":[],"categoryId":"0a9f982a-3515-4728-a231-fa000eb9e550","categoryName":"User Preferences","options":[{"id":"com.apple.preference.users_disableusingicloudpassword_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.preference.users_disableusingicloudpassword_true","displayName":"True","description":null,"helpText":null}]},"4524e2bb747e6a0e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled","displayName":"Enable AutoFill for payment instruments","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. Includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.\n\nIf you enable this policy or don't configure it, users can control AutoFill for payment instruments.\n\nIf you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won't save any payment instrument information that users submit while browsing the web.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"45d77ddd230bbc51":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning (Obsolete)","description":"This policy controls whether third-party storage partitioning is allowed by default.\n\nIf this policy is set to 1 - AllowPartitioning, or unset, third-party storage partitioning will be allowed by default. This default may be overridden for specific top-level origins by other means.\n\nIf this policy is set to 2 - BlockPartitioning, third-party storage partitioning will be disabled for all contexts.\n\nUse ThirdPartyStoragePartitioningBlockedForOrigins to disable third-party storage partitioning for specific top-level origins.\n\nThis feature has been removed starting in Microsoft Edge version 146. To ensure compatibility, use the requestStorageAccess method instead. For more information, see https://developer.mozilla.org/en-US/docs/Web/API/Document/requestStorageAccess.\n\nPolicy options mapping:\n\n* AllowPartitioning (1) = Allow third-party storage partitioning by default.\n\n* BlockPartitioning (2) = Disable third-party storage partitioning.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultthirdpartystoragepartitioningsetting_allowpartitioning","displayName":"Allow third-party storage partitioning by default.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultthirdpartystoragepartitioningsetting_blockpartitioning","displayName":"Disable third-party storage partitioning.","description":null,"helpText":null}]},"454d693267f8d6a2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades","description":"As of Microsoft Edge version 120, Microsoft Edge tries to upgrade HTTP navigations to HTTPS, whenever possible, to improve security. Navigations to captive portals, IP addresses, and nonunique hostnames are excluded from automatic upgrades.\n\nIf this policy is enabled or not configured, automatic HTTPS upgrades are turned on by default.\n\nIf this policy is disabled, Microsoft Edge doesn't attempt to upgrade HTTP connections to HTTPS.\n\nTo exempt specific hostnames or hostname patterns from being upgraded, use the HttpAllowlist policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsupgradesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsupgradesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"45f706bc439bb327":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileshowcontextmenu","displayName":"Show context menu to open a file:// link in Internet Explorer mode","description":"This policy controls the visibility of the 'Open link in new Internet Explorer mode tab' option on the context menu for file:// links.\n\nThis setting works in conjunction with:\n\"InternetExplorerIntegrationLevel\", which is set to 'IEMode'.\n\nIf you enable this policy, the 'Open link in new Internet Explorer mode tab' context menu item is available for file:// links.\n\nIf you disable or don't configure this policy, the context menu item won't be added.\n\nIf the \"InternetExplorerIntegrationReloadInIEModeAllowed\" policy allows users to reload sites in Internet Explorer mode, then the 'Open link in new Internet Explorer mode tab' context menu item is available for all links, except links to sites explicitly configured by the site list to use Microsoft Edge mode. In this case, if you enable this policy, the context menu item is available for file:// links even for sites configured to use Microsoft Edge mode. If you disable or don't configure this policy, the policy has no effect.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileshowcontextmenu_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileshowcontextmenu_true","displayName":"Enabled","description":null,"helpText":null}]},"45052e93ecf5ea90":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerzoomdisplay","displayName":"Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer","description":"Lets you display zoom in IE Mode tabs similar to how it was displayed in Internet Explorer, where the DPI scale of the display is factored in.\n\nFor example, if you have a page zoomed to 200% on a 100 DPI scale display and you change the display to 150 DPI, Microsoft Edge would still display the zoom as 200%. However, Internet Explorer factors in the DPI scale and displays 300%.\n\nIf you enable this policy, zoom values will be displayed with the DPI scale included for IE Mode tabs.\n\nIf you disable or don't configure this policy, zoom values will be displayed without DPI scale included for IE Mode tabs","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerzoomdisplay_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerzoomdisplay_true","displayName":"Enabled","description":null,"helpText":null}]},"4591ac73653f6d5c":{"id":"device_vendor_msft_policy_config_abovelock_allowtoasts","displayName":"Allow Toasts","description":"Specifies whether to allow toast notifications above the device lock screen. Most restrictive value is \"Block\".","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-abovelock#allowtoasts"],"categoryId":"ef8b8f2d-7791-4c44-a4f2-e39051f2e715","categoryName":"Above Lock","options":[{"id":"device_vendor_msft_policy_config_abovelock_allowtoasts_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_abovelock_allowtoasts_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"450f402cc5c4a684":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domain","displayName":"Connection-specific DNS suffix","description":"Specifies a connection-specific DNS suffix. This policy setting supersedes local connection-specific DNS suffixes, and those configured using DHCP.\r\n\r\nTo use this policy setting, click Enabled, and then enter a string value representing the DNS suffix.\r\n\r\nIf you enable this policy setting, the DNS suffix that you enter will be applied to all network connections used by computers that receive this policy setting.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, computers will use the local or DHCP supplied connection specific DNS suffix, if configured.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-domain"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domain_1","displayName":"Enabled","description":null,"helpText":null}]},"45fc0169a512ee18":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablearchivescanning","displayName":"Scan archive files","description":"This policy setting allows you to configure scans for malicious software and unwanted software in archive files such as .ZIP or .CAB files.\r\n\r\n If you enable or do not configure this setting, archive files will be scanned.\r\n\r\n If you disable this setting, archive files will not be scanned.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disablearchivescanning"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablearchivescanning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablearchivescanning_1","displayName":"Enabled","description":null,"helpText":null}]},"456b016528699376":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_signatureupdatecatchupinterval","displayName":"Define the number of days after which a catch-up security intelligence update is required","description":"This policy setting allows you to define the number of days after which a catch-up security intelligence update will be required. By default, the value of this setting is 1 day.\r\n\r\n If you enable this setting, a catch-up security intelligence update will occur after the specified number of days.\r\n\r\n If you disable or do not configure this setting, a catch-up security intelligence update will be required after the default number of days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-signatureupdatecatchupinterval"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_signatureupdatecatchupinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_signatureupdatecatchupinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"45a67d79bf8b7020":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts","displayName":"Turn on Script Execution","description":"This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run.\r\n\r\nIf you enable this policy setting, the scripts selected in the drop-down list are allowed to run.\r\n\r\nThe \"Allow only signed scripts\" policy setting allows scripts to execute only if they are signed by a trusted publisher.\r\n\r\nThe \"Allow local scripts and remote signed scripts\" policy setting allows any local scrips to run; scripts that originate from the Internet must be signed by a trusted publisher.\r\n\r\nThe \"Allow all scripts\" policy setting allows all scripts to run.\r\n\r\nIf you disable this policy setting, no scripts are allowed to run.\r\n\r\nNote: This policy setting exists under both \"Computer Configuration\" and \"User Configuration\" in the Local Group Policy Editor. The \"Computer Configuration\" has precedence over \"User Configuration.\"\r\n\r\nIf you disable or do not configure this policy setting, it reverts to a per-machine preference setting; the default if that is not configured is \"No scripts allowed.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enablescripts"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_1","displayName":"Enabled","description":null,"helpText":null}]},"4570d270392c5669":{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_encryptedticketonly","displayName":"Allow only Windows Vista or later connections","description":"This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running this version (or later versions) of the operating system can connect. This policy setting does not affect Remote Assistance connections that are initiated by instant messaging contacts or the unsolicited Offer Remote Assistance.\r\n\r\nIf you enable this policy setting, only computers running this version (or later versions) of the operating system can connect to this computer.\r\n\r\nIf you disable this policy setting, computers running this version and a previous version of the operating system can connect to this computer.\r\n\r\nIf you do not configure this policy setting, users can configure the setting in System Properties in the Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-remoteassistance#admx-remoteassistance-ra-encryptedticketonly"],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_encryptedticketonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_encryptedticketonly_1","displayName":"Enabled","description":null,"helpText":null}]},"45557f2eb111f833":{"id":"device_vendor_msft_policy_config_admx_sensors_disablesensors_2","displayName":"Turn off sensors","description":"\r\n This policy setting turns off the sensor feature for this computer.\r\n\r\n If you enable this policy setting, the sensor feature is turned off, and all programs on this computer cannot use the sensor feature.\r\n\r\n If you disable or do not configure this policy setting, all programs on this computer can use the sensor feature.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablesensors-2"],"categoryId":"b40cfb22-8f17-4317-bcbb-c1c871497446","categoryName":"Location and Sensors","options":[{"id":"device_vendor_msft_policy_config_admx_sensors_disablesensors_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sensors_disablesensors_2_1","displayName":"Enabled","description":null,"helpText":null}]},"45219d1337cc0af0":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_camera_redirection","displayName":"Do not allow video capture redirection","description":"This policy setting lets you control the redirection of video capture devices to the remote computer in a Remote Desktop Services session. \r\n\r\nBy default, Remote Desktop Services allows redirection of video capture devices.\r\n\r\nIf you enable this policy setting, users cannot redirect their video capture devices to the remote computer. \r\n\r\nIf you disable or do not configure this policy setting, users can redirect their video capture devices to the remote computer. Users can use the More option on the Local Resources tab of Remote Desktop Connection to choose the video capture devices to redirect to the remote computer.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-camera-redirection"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_camera_redirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_camera_redirection_1","displayName":"Enabled","description":null,"helpText":null}]},"45950dc42d573f51":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_easeofaccesssettings","displayName":"Ease of access","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_easeofaccesssettings_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_easeofaccesssettings_1","displayName":"True","description":null,"helpText":null}]},"45a933bf9ab924f1":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5","displayName":"Publishing Server 5 Settings","description":" Publishing Server Display Name: Displays the name of publishing server.\n \n Publishing Server URL: Displays the URL of publishing server.\n \n Global Publishing Refresh: Enables global publishing refresh (Boolean).\n \n Global Publishing Refresh On Logon: Triggers a global publishing refresh on logon (Boolean).\n \n Global Publishing Refresh Interval: Specifies the publishing refresh interval using the GlobalRefreshIntervalUnit. To disable package refresh, select 0.\n \n Global Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n \n User Publishing Refresh: Enables user publishing refresh (Boolean).\n \n User Publishing Refresh On Logon: Triggers a user publishing refresh on logon (Boolean).\n \n User Publishing Refresh Interval: Specifies the publishing refresh interval using the UserRefreshIntervalUnit. To disable package refresh, select 0.\n \n User Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-publishingallowserver5"],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_1","displayName":"Enabled","description":null,"helpText":null}]},"4568c20c1faa121f":{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicereplication","displayName":"DS Access Audit Directory Service Replication","description":"This policy setting allows you to audit replication between two Active Directory Domain Services (AD DS) domain controllers. If you configure this policy setting, an audit event is generated during AD DS replication. Success audits record successful replication and Failure audits record unsuccessful replication. If you do not configure this policy setting, no audit event is generated during AD DS replication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#dsaccess_auditdirectoryservicereplication"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicereplication_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicereplication_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicereplication_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicereplication_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"45c444003f4f6015":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled","displayName":"Allow DNS queries for additional DNS record types","description":"This policy controls whether Google Chrome may query additional DNS record types when making insecure DNS requests. This policy has no effect on DNS queries made via Secure DNS, which may always query additional DNS types.\r\n\r\nIf this policy is unset or set to Enabled, additional types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).\r\n\r\nIf this policy is set to Disabled, DNS will only be queried for A (DNS type 1) and/or AAAA (DNS type 28).\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome. After removal of the policy, Google Chrome will always be able to query additional DNS types.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4564f617226c8f31":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist","displayName":"Allow media autoplay on a whitelist of URL patterns","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"4576941c768cfb00":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts","displayName":"Allow user-level Native Messaging hosts (installed without admin permissions)","description":"Setting the policy to Enabled or leaving it unset means Google Chrome can use native messaging hosts installed at the user level.\r\n\r\nSetting the policy to Disabled means Google Chrome can only use these hosts if installed at the system level.","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts_1","displayName":"Enabled","description":null,"helpText":null}]},"45e02f6b263fa847":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings","displayName":"Settings for Create Themes with AI","description":"Create Themes with AI lets users create custom themes/wallpapers by preselecting from a list of options.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_1","displayName":"Enabled","description":null,"helpText":null}]},"45957b4407bb1993":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration","displayName":"Specifies how long (in seconds) a cast device selected with an access code or QR code stays in the Google Cast menu's list of cast devices.","description":"This policy specifies how long (in seconds) a cast device that was previously selected via an access code or QR code can be seen within the Google Cast menu of cast devices.\r\nThe lifetime of an entry starts at the time the access code was first entered or the QR code was first scanned.\r\nDuring this period the cast device will appear in the Google Cast menu's list of cast devices.\r\nAfter this period, in order to use the cast device again the access code must be reentered or the QR code must be rescanned.\r\nBy default, the period is zero seconds, so cast devices will not stay in the Google Cast menu, and so the access code must be reentered, or the QR code rescanned, in order to initiate a new casting session.\r\nNote that this policy only affects how long a cast devices appears in the Google Cast menu, and has no effect on any ongoing cast session which will continue even if the period expires.\r\nThis policy has no effect unless the AccessCodeCastEnabled policy is Enabled.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_1","displayName":"Enabled","description":null,"helpText":null}]},"45726bf5103a44af":{"id":"device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering","displayName":"Turn on ActiveX Filtering","description":"This policy setting controls the ActiveX Filtering feature for websites that are running ActiveX controls. The user can choose to turn off ActiveX Filtering for specific websites so that ActiveX controls can run properly.\n\nIf you enable this policy setting, ActiveX Filtering is enabled by default for the user. The user cannot turn off ActiveX Filtering, although they may add per-site exceptions.\n\nIf you disable or do not configure this policy setting, ActiveX Filtering is not enabled by default for the user. The user can turn ActiveX Filtering on or off.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowactivexfiltering"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_1","displayName":"Enabled","description":null,"helpText":null}]},"45449fda0dd49267":{"id":"device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer","displayName":"Keep all intranet sites in Internet Explorer","description":"Prevents intranet sites from being opened in any browser except Internet Explorer. But note that If the ‘Send all sites not included in the Enterprise Mode Site List to Microsoft Edge’ (‘RestrictIE’) policy isn’t enabled, this policy has no effect.\n\nIf you enable this policy, all intranet sites are opened in Internet Explorer 11. The only exceptions are sites listed in your Enterprise Mode Site List.\n\nIf you disable or don’t configure this policy, all intranet sites are automatically opened in Microsoft Edge.\n\nWe strongly recommend keeping this policy in sync with the ‘Send all intranet sites to Internet Explorer’ (‘SendIntranetToInternetExplorer’) policy. Additionally, it’s best to enable this policy only if your intranet sites have known compatibility problems with Microsoft Edge.\n\nRelated policies:\n- Send all intranet sites to Internet Explorer (‘SendIntranetToInternetExplorer’)\n- Send all sites not included in the Enterprise Mode Site List to Microsoft Edge (‘RestrictIE’)\n\nFor more info about how to use this policy together with other related policies to create the optimal configuration for your organization, see https://go.microsoft.com/fwlink/?linkid=2094210.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-keepintranetsitesininternetexplorer"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"45955daf3f0fc6fb":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"45372b4e5c4158ea":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker","displayName":"Use Pop-up Blocker","description":"This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.\n\nIf you enable this policy setting, most unwanted pop-up windows are prevented from appearing.\n\nIf you disable this policy setting, pop-up windows are not prevented from appearing.\n\nIf you do not configure this policy setting, most unwanted pop-up windows are prevented from appearing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneusepopupblocker"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_1","displayName":"Enabled","description":null,"helpText":null}]},"452dd860c738c681":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck","displayName":"Disable server version check","description":"Prevents Microsoft Lync from checking the server version before signing in.","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1","displayName":"Enabled","description":null,"helpText":null}]},"45235e571a219bed":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls","displayName":"Allow Local Fonts permission on these sites","description":"Specifies a list of site URL patterns for which the local fonts permission is automatically granted. Sites in this list can access information about local fonts.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are supported. This policy matches based on origin only; any path in the URL pattern is ignored.\n\nIf a site isn't included in this policy, the 'DefaultLocalFontsSetting' (Default Local Fonts permission setting) policy applies if configured. Otherwise, the browser default behavior applies, and users can choose the permission on a per-site basis.\n\nExample value:\n\nhttps://www.example.com\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4551baf340f34be8":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls","displayName":"Allow listed sites to connect to any HID device","description":"This setting allows you to list sites which are automatically granted permission to access all available devices.\r\n\r\nThe URLs must be valid or the policy is ignored. Only the origin (scheme, host and port) of the URL is evaluated.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nThis policy overrides 'DefaultWebHidGuardSetting' (Control use of the WebHID API), 'WebHidAskForUrls' (Allow the WebHID API on these sites), 'WebHidBlockedForUrls' (Block the WebHID API on these sites) and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"459e510bec3a326a":{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill","description":"The feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is auto-filled into a web form. This ensures that non-authorized persons can't use saved passwords for autofill.\r\n\r\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\r\n\r\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill will not have any authentication flow.\r\n\r\nIf you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt will be set to 'Always' by default. However, users can change it to the other option, which is 'Once every browsing session'.\r\n\r\nIf you set this policy to 'WithCustomPrimaryPassword', users will be asked to create their custom password and then to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords will get auto-filled after successful authentication. The frequency for authentication prompt will be set to 'Always' by default. However, users can change it to the other option, which is 'Once every browsing session'.\r\n\r\nIf you set this policy to 'AutofillOff', saved passwords will no longer be suggested for autofill.\r\n\r\nPolicy options mapping:\r\n\r\n* Automatically (0) = Automatically\r\n\r\n* WithDevicePassword (1) = With device password\r\n\r\n* WithCustomPrimaryPassword (2) = With custom primary password\r\n\r\n* AutofillOff (3) = Autofill off\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4512d923a1fa9a4a":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI","description":"Controls print image resolution when Microsoft Edge prints PDFs with rasterization.\r\n\r\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution will significantly increase the processing and printing time while a low resolution can lead to poor imaging quality.\r\n\r\nIf you set this policy, it allows a particular resolution to be specified for use when rasterizing PDFs for printing.\r\n\r\nIf you set this policy to zero or don't configure it, the system default resolution will be used during rasterization of page images.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_1","displayName":"Enabled","description":null,"helpText":null}]},"451e9a2487ce4fe7":{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist","displayName":"Manage Print Driver exclusion list","description":"\nThis policy setting controls the print driver exclusion list. The exclusion list allows an administrator to curate a list of printer drivers that are not allowed to be installed on the system.\n\nThis checks outranks the signature check and allows drivers that have a valid signature level for the Print Driver signature validation policy to be excluded.\n\nEntries in the exclusion list consist of a SHA256 hash (or SHA1 hash for Win7) of the INF file and/or main driver DLL file of the driver and the name of the file.\n\nIf you disable or do not configure this policy setting, the registry key and values associated with this policy setting will be deleted, if currently set to a value.\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-managedriverexclusionlist"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_1","displayName":"Enabled","description":null,"helpText":null}]},"45ece59b8bed62c6":{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid","displayName":"Disable Advertising ID","description":"Enables or disables the Advertising ID. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#disableadvertisingid"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid_65535","displayName":"Not Configured","description":"Not Configured","helpText":null}]},"454a19b8119a40a9":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_userincontroloftheseapps","displayName":"Let Apps Access Motion User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"458961561282049c":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablereadwriteterminal","displayName":"Disable shared read write terminal","description":"Prevent the host from being able to explicitly share a new writeable terminal.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablereadwriteterminal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablereadwriteterminal_1","displayName":"Enabled","description":null,"helpText":null}]},"4515f21f6e24a312":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_setretryinterval","displayName":"Set Retry Interval (Windows Insiders only)","description":"Refers to the time in minutes that a device will wait before trying to look for solutions again. The retry interval should not be higher than the time to reboot, and will only take effect if auto remediation is on. Otherwise an invalid argument error will be returned and no changes will be made. A retry interval of 0 means that the device will look for solutions once without any retries.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":null},"45b6988e1e08470e":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauthpolset","displayName":"Certification Authority Policy Settings (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certauthpolset"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauthpolset_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauthpolset_1","displayName":"Enabled","description":null,"helpText":null}]},"45ceac486daf6e73":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_dialupprefs","displayName":"Prohibit access to the Remote Access Preferences item on the Advanced menu (User)","description":"Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled.\r\n\r\nThe Remote Access Preferences item lets users create and change connections before logon and configure automatic dialing and callback features.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Remote Access Preferences item is disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Remote Access Preferences item is enabled for all users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-dialupprefs"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_dialupprefs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_dialupprefs_1","displayName":"Enabled","description":null,"helpText":null}]},"45730159a8e5e8c2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls","displayName":"Automatically grant permission to sites to connect all serial ports. (User)","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available serial ports.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn Chrome OS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultSerialGuardSetting, SerialAskForUrls, SerialBlockedForUrls and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"45955667825efe35":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc","displayName":"Block WebUSB on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"4550a350aa6eca8f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings","displayName":"Site search settings (User)","description":"This policy provides a list of sites that users can quickly search using shortcuts in the address bar. Users can initiate a search by typing the shortcut or @shortcut (e.g. @work), followed by Space or Tab, in the address bar.\r\n\r\nThe following fields are required for each site: name, shortcut, url.\r\n\r\nThe name field corresponds to the site or search engine name to be shown to the user in the address bar.\r\n\r\nThe shortcut can include plain words and characters, but cannot include spaces or start with the @ symbol. Shortcuts must also be unique.\r\n\r\nFor each entry, the url field specifies the URL of the search engine used during a search with the corresponding keyword. The URL must include the string '{searchTerms}', replaced in the query by the user's search terms. Invalid entries and entries with duplicate shortcuts are ignored.\r\n\r\nSite search entries configured as featured are displayed in the address bar when the user types \"@\". Up to three entries can be selected as featured.\r\n\r\nFor a site search entry where allow_user_override is true, users have the ability to edit or disable that entry. However, featured engines (beginning with \"@\") can only be disabled. If a user modifies an entry that was initially created by this policy, it will no longer be managed by policy and will be treated like a user-created shortcut. When allow_user_override is false or unspecified for a site search entry, users cannot edit or disable that entry. The setting to allow user override is only supported on M139 and later; earlier versions will default to disabling user override.\r\n\r\nUsers cannot create new site search entries with a shortcut previously created via this policy unless allow_user_override is set to true for the site search entry.\r\n\r\nIn case of a conflict with a shortcut previously created by the user, the user setting takes precedence. However, users can still trigger the option created by the policy by typing \"@\" in the search bar. For example, if the user already defined \"work\" as a shortcut to URL1 and the policy defines \"work\" as a shortcut to URL2, then typing \"work\" in the search bar will trigger a search to URL1, but typing \"@work\" in the search bar will trigger a search to URL2.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=SiteSearchSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"featured\": true,\r\n \"name\": \"Google Wikipedia\",\r\n \"shortcut\": \"wikipedia\",\r\n \"url\": \"https://www.google.com/search?q=site%3Awikipedia.com+%s\"\r\n },\r\n {\r\n \"name\": \"YouTube\",\r\n \"shortcut\": \"youtube\",\r\n \"url\": \"https://www.youtube.com/results?search_query=%s\"\r\n },\r\n {\r\n \"name\": \"Google Drive\",\r\n \"shortcut\": \"drive\",\r\n \"url\": \"https://drive.google.com/?q=%s\",\r\n \"allow_user_override\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"4549151c829b6bc1":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls","displayName":"Allow Window Placement permission on these sites (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4550e081edeb09b3":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings","displayName":"Settings for Google's AI Mode integrations in the address bar and New Tab page search box. (User)","description":"This policy controls Google's AI Mode integrations in the address bar and the New Tab page search box.\r\n\r\nTo access this feature, Google must be set as the user's default search engine.\r\n\r\n0/unset = The feature will be available to users.\r\n\r\n1 = The feature will not be available to users.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"45a5ed3a81c835d7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable any shortcut key by using its virtual key code ID, including shortcut keys that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter a virtual key code ID number to disable a specific shortcut key.\r\n\r\nIf you disable or do not configure this policy setting, all default shortcut keys are enabled for users.","helpText":"","infoUrls":[],"categoryId":"3b7e16e7-171f-4169-8904-c8483b06700d","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166_1","displayName":"Enabled","description":null,"helpText":null}]},"45bd4fdf09822d55":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks","displayName":"Excel 2007 and later binary workbooks (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_1","displayName":"Enabled","description":null,"helpText":null}]},"45f34820fb1b12c5":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles","displayName":"Microsoft Office query files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"459b7d96b172b932":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"451a02af74553e3f":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled","displayName":"Enable the linked account feature (User)","description":"Microsoft Edge guides a user to the account management page where they can link a Microsoft Account (MSA) to an Azure Active Directory (Azure AD) account.\r\n\r\nIf you enable or don't configure this policy, linked account information will be shown on a flyout. When the Azure AD profile doesn't have a linked account it will show \"Add account\".\r\n\r\nIf you disable this policy, linked accounts will be turned off and no extra information will be shown.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"45cc69ae3aecd2a2":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts","displayName":"Allow Web Authentication requests on sites with broken TLS certificates. (User)","description":"If you enable this policy, Microsoft Edge will allow Web Authentication requests on websites that have TLS certificates with errors (i.e. websites considered not secure).\r\n\r\nIf you disable or don't configure this policy, the default behavior of blocking such requests will apply.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts_1","displayName":"Enabled","description":null,"helpText":null}]},"4517fd8a26b1ef88":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended","displayName":"Default search provider name (User)","description":"Specifies the name of the default search provider.\r\n\r\nIf you enable this policy, you set the name of the default search provider.\r\n\r\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\r\n\r\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"454d0592b1edb413":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_uselegacytranslationfeatures","displayName":"Use legacy translation features (User)","description":"\r\nThis policy setting allows you to use legacy translation features in Office apps, such as Word, instead of the Translator feature, which uses the cloud-based Microsoft Translator service.\r\n\r\nLegacy translation features include the following:\r\n- Translation of the entire document, by using the browser-based Bilingual Viewer.\r\n- Translation of selected text, by using the Research pane.\r\n- Translation of an individual word when hovering over the word, by using the Mini Translator.\r\n\r\nYou may need to use legacy translation features in special cases that require extra configurability, such as when using customer translation providers.\r\n\r\nIf you enable this policy setting, translation commands, such as those on the ribbon or in shortcut menus, will use the legacy translation features instead of the Translator feature.\r\n\r\nIf you disable or don’t configure this policy setting, translation commands, such as those on the ribbon or in shortcut menus, will use the Translator feature instead of the legacy translation features.\r\n\r\nNote: This policy setting only applies to apps and subscription versions of Office, such as Office 365 ProPlus, that support the Translator feature.\r\n ","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_uselegacytranslationfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_uselegacytranslationfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"45e304cb78de4bb8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablevbaforofficeapplications319","displayName":"Disable VBA for Office applications (User)","description":"This policy setting allows you to prevent Excel 2016, SharePoint Designer 2016, Outlook 2016, PowerPoint 2016, Publisher 2016, and Word 2016 from using Visual Basic for Applications (VBA), whether or not the VBA feature is installed on user computers. Changing this policy setting will not install or remove the VBA files from the user computers. For more information about configuring security settings, see the 2016 Office Resource Kit.\r\n\r\nIf you enable this policy setting, VBA is disabled on 2016 Office applications on user computers.\r\n\r\nIf you disable or do not configure this policy setting, VBA is enabled for 2016 Office applications on user computers.\r\n","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablevbaforofficeapplications319_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablevbaforofficeapplications319_1","displayName":"Enabled","description":null,"helpText":null}]},"45c7351ae7a248e8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_l_useenglishformessageflags","displayName":"Use English for message flags (User)","description":"","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_l_useenglishformessageflags_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_l_useenglishformessageflags_1","displayName":"True","description":null,"helpText":null}]},"454481c66787fc8b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings~l_trustedaddins_l_settrustedaddins_l_listoftrustedaddins_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"e94d8ce3-d08e-4ee6-83e9-5f89aa37a6bf","categoryName":"Trusted Add-ins","options":null},"453b06494564252c":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportdiagnostics","displayName":"Disable support diagnostics in Outlook (User)","description":"This policy setting determines if Outlook can communicate client information on failure to support services with the intent of diagnosing the issue or making the information available to support to help with the diagnosis/resolution of the issue and/or provide contextual error messaging to the user.\r\n\r\nIf you enable this policy setting, then Outlook will not communicate client information on failure to support services.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportdiagnostics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportdiagnostics_1","displayName":"Enabled","description":null,"helpText":null}]},"451ed510ff0e35a4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngpasswordspincount","displayName":"Set CNG password spin count (User)","description":"This policy setting allows you to specify the number of times to spin (rehash) the password verifier.\r\n\r\nIf you enable this policy setting, the number specified will be the number of times the password will be rehashed.\r\n\r\nIf you disable or do not configure this policy setting, the default (100000) will be used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngpasswordspincount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngpasswordspincount_1","displayName":"Enabled","description":null,"helpText":null}]},"45fdbb8651333c73":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngsaltlength_l_specifycngsaltlengthspinid","displayName":"Number of bytes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":null},"45fb823dd889bb84":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_disableofficestartproject","displayName":"Disable the Office Start screen for Project (User)","description":"This policy setting controls whether the Office Start screen appears on boot for Project.\r\n\r\nIf you enable this policy setting, users will not see the Office Start screen when they boot Project.\r\n\r\nIf you disable or do not configure this policy setting, users will see the Office Start screen when they boot Project.\r\n\r\nNote: This policy setting is overridden by the policy setting \"Microsoft Office 2016 > Miscellaneous > Disable the Office Start screen for all Office applications\" if that policy setting is set.","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_disableofficestartproject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_disableofficestartproject_1","displayName":"Enabled","description":null,"helpText":null}]},"45e25365b741c9d4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_legacyfileformats_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"623d41fb-000e-41d8-b955-373f8c700def","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_legacyfileformats_l_empty_0","displayName":"Do not open or save","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_legacyfileformats_l_empty_1","displayName":"Prompt when opening and saving","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_legacyfileformats_l_empty_2","displayName":"Allow opening and saving","description":null,"helpText":null}]},"459fe904ef22763b":{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text","displayName":"Restrict clipboard transfer from client to server: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_0","displayName":"Disable clipboard transfers from client to server","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_1","displayName":"Allow plain text","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_2","displayName":"Allow plain text and images","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_3","displayName":"Allow plain text, images and Rich Text Format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_4","displayName":"Allow plain text, images, Rich Text Format and HTML","description":null,"helpText":null}]},"45ab0e2d13ee2cfb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_tables","displayName":"Tables (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"62492a4c-fd70-4275-ae5e-d60e200e3553","categoryName":"Apply as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_tables_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_tables_1","displayName":"Enabled","description":null,"helpText":null}]},"454978cffe3a6bed":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_enabled","displayName":"Enabled","description":"Indicates whether the rule is enabled or disabled. If not specified - a new rule is enabled by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_enabled_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_enabled_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"45f8ca84bf04d518":{"id":"vendor_msft_personalization_desktopimageurl","displayName":"Desktop Image Url","description":"A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Desktop Image or a file Url to a local image on the file system that needs to be used as the Desktop Image.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Personalization-csp/"],"categoryId":"1dd655c9-a1f3-4780-befb-cab19922277d","categoryName":"Personalization","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/46.json b/public/intune-definitions/46.json new file mode 100644 index 000000000000..d6e73a2f1084 --- /dev/null +++ b/public/intune-definitions/46.json @@ -0,0 +1 @@ +{"46071188eea24b2e":{"id":"com.apple.assetcache.managed_autoactivation","displayName":"Auto Activation","description":"If true, automatically activates the content cache when possible and prevents it from being disabled. If the Allow Content Caching restriction is set to false, Auto Activation is also false.\r\nRemoving a profile that set Auto Activation to true does not deactivate the Content Cache.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_autoactivation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_autoactivation_true","displayName":"True","description":null,"helpText":null}]},"46258851b31a1cdb":{"id":"com.apple.discrecording_com.apple.discrecording","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"87f460f4-8403-419c-bfb4-44dec5edcccb","categoryName":"Media Management Disc Burning","options":null},"468d312b7799ea04":{"id":"com.apple.font_com.apple.font","displayName":"com.apple.font","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"5401711f-292a-487a-be18-f99593a0477c","categoryName":"Font","options":null},"463fe611a35e1e25":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_lcid","displayName":"Microsoft Defender LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"46158a3831e1fecb":{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app","displayName":"Microsoft Auto Update","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"460b4b8c00119ca1":{"id":"com.apple.mcx_enableguestaccount","displayName":"Enable Guest Account","description":"If true, enables the guest account.","helpText":null,"infoUrls":[],"categoryId":"5214f1e7-a5a9-4de5-80b4-2f7084a8d068","categoryName":"Accounts","options":[{"id":"com.apple.mcx_enableguestaccount_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_enableguestaccount_true","displayName":"True","description":null,"helpText":null}]},"4632a7ec10200389":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"4619ac725ed108b5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.eventpathenabled","displayName":"Re-enable the Event.path API until Microsoft Edge version 115 (Obsolete)","description":"Starting in Microsoft Edge version 109, the nonstandard API Event.path is removed to improve web compatibility. This policy re-enables the API until version 115.\n\nIf you enable this policy, the Event.path API is available.\n\nIf you disable this policy, the Event.path API is unavailable.\n\nIf you don't configure this policy, the Event.path API is in the following default states: available before version 109, and unavailable in version 109 to version 114.\n\nThis policy is made obsolete after Microsoft Edge version 115.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.eventpathenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.eventpathenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"467344a6f6aa6ddc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.geolocationblockedforurls","displayName":"Block geolocation on these sites","description":"Use this policy to define a list of URL patterns for sites that are blocked from accessing the user's geolocation. These sites also can't prompt the user for location permissions.\n\nIf you enable this policy, the list you provide determines which sites are blocked from requesting or accessing geolocation.\n\nIf you disable or don't configure this policy, DefaultGeolocationSetting applies to all sites, if configured. If it's not configured, the user’s personal browser setting is used.\n\nFor detailed information on valid url patterns, see the documentation on pattern formats: https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"46237acc98a830d9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingpapersizedefault","displayName":"Default printing page size","description":"Overrides default printing page size.\n\nName should contain one of the listed formats or 'custom' if required paper size isn't in the list. If 'custom' value is provided custom_size property should be specified. It describes the desired height and width in micrometers. Otherwise custom_size property shouldn't be specified. Policy that violates these rules is ignored.\n\nIf the page size is unavailable on the printer chosen by the user, this policy is ignored.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"46db2af163a1fbfb":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreinvalidcn","displayName":"Invalid certificate name (CN)","description":null,"helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreinvalidcn_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreinvalidcn_1","displayName":"True","description":null,"helpText":null}]},"46c3e64a73369b86":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installunsignedocx","displayName":"Installation Policy for unsigned ActiveX control","description":null,"helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installunsignedocx_0","displayName":"Don't install","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installunsignedocx_1","displayName":"Prompt the user","description":null,"helpText":null}]},"466fc46a7028d768":{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablebranchcache","displayName":"Do not allow the BITS client to use Windows Branch Cache","description":"This setting affects whether the BITS client is allowed to use Windows Branch Cache. If the Windows Branch Cache component is installed and enabled on a computer, BITS jobs on that computer can use Windows Branch Cache by default.\r\n\r\n If you enable this policy setting, the BITS client does not use Windows Branch Cache.\r\n\r\n If you disable or do not configure this policy setting, the BITS client uses Windows Branch Cache.\r\n\r\n Note: This policy setting does not affect the use of Windows Branch Cache by applications other than BITS. This policy setting does not apply to BITS transfers over SMB. This setting has no effect if the computer's administrative settings for Windows Branch Cache disable its use entirely.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-disablebranchcache"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablebranchcache_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablebranchcache_1","displayName":"Enabled","description":null,"helpText":null}]},"468b7df648681675":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allownt4crypto","displayName":"Allow cryptography algorithms compatible with Windows NT 4.0","description":"This policy setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Windows NT 4.0. The cryptography algorithms used in Windows NT 4.0 and earlier are not as secure as newer algorithms used in Windows 2000 or later, including this version of Windows.\r\n\r\nBy default, Net Logon will not allow the older cryptography algorithms to be used and will not include them in the negotiation of cryptography algorithms. Therefore, computers running Windows NT 4.0 will not be able to establish a connection to this domain controller.\r\n \r\nIf you enable this policy setting, Net Logon will allow the negotiation and use of older cryptography algorithms compatible with Windows NT 4.0. However, using the older algorithms represents a potential security risk.\r\n\r\nIf you disable this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms. \r\n\r\nIf you do not configure this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-allownt4crypto"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allownt4crypto_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allownt4crypto_1","displayName":"Enabled","description":null,"helpText":null}]},"462ca0161e852bb0":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_usedynamicdns","displayName":"Specify dynamic registration of the DC Locator DNS Records","description":"This policy setting determines if dynamic registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are dynamically registered by the Net Logon service and are used by the Locator algorithm to locate the DC.\r\n\r\nIf you enable this policy setting, DCs to which this setting is applied dynamically register DC Locator DNS resource records through dynamic DNS update-enabled network connections.\r\n\r\nIf you disable this policy setting, DCs will not register DC Locator DNS resource records.\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-usedynamicdns"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_usedynamicdns_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_usedynamicdns_1","displayName":"Enabled","description":null,"helpText":null}]},"462dae51a5c00996":{"id":"device_vendor_msft_policy_config_admx_servermanager_servermanagerautorefreshrate_refreshrate","displayName":"Minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"e042b102-b12c-48d1-86ef-f6d296da5b95","categoryName":"Server Manager","options":null},"46450fb0ab3b182b":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_turnoff_singleapp","displayName":"Always show desktop on connection","description":"This policy setting determines whether the desktop is always displayed after a client connects to a remote computer or an initial program can run. It can be used to require that the desktop be displayed after a client connects to a remote computer, even if an initial program is already specified in the default user profile, Remote Desktop Connection, Remote Desktop Services client, or through Group Policy.\r\n\r\nIf you enable this policy setting, the desktop is always displayed when a client connects to a remote computer. This policy setting overrides any initial program policy settings.\r\n\r\nIf you disable or do not configure this policy setting, an initial program can be specified that runs on the remote computer after the client connects to the remote computer. If an initial program is not specified, the desktop is always displayed on the remote computer after the client connects to the remote computer.\r\n\r\nNote: If this policy setting is enabled, then the \"Start a program on connection\" policy setting is ignored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-turnoff-singleapp"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_turnoff_singleapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_turnoff_singleapp_1","displayName":"Enabled","description":null,"helpText":null}]},"46f6baa5e7f540f7":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4","displayName":"Publishing Server 4 Settings","description":" Publishing Server Display Name: Displays the name of publishing server.\n \n Publishing Server URL: Displays the URL of publishing server.\n \n Global Publishing Refresh: Enables global publishing refresh (Boolean).\n \n Global Publishing Refresh On Logon: Triggers a global publishing refresh on logon (Boolean).\n \n Global Publishing Refresh Interval: Specifies the publishing refresh interval using the GlobalRefreshIntervalUnit. To disable package refresh, select 0.\n \n Global Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n \n User Publishing Refresh: Enables user publishing refresh (Boolean).\n \n User Publishing Refresh On Logon: Triggers a user publishing refresh on logon (Boolean).\n \n User Publishing Refresh Interval: Specifies the publishing refresh interval using the UserRefreshIntervalUnit. To disable package refresh, select 0.\n \n User Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-publishingallowserver4"],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_1","displayName":"Enabled","description":null,"helpText":null}]},"46213c014a5a6d22":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecquickmode","displayName":"Account Logon Logoff Audit I Psec Quick Mode","description":"This policy setting allows you to audit events generated by Internet Key Exchange protocol (IKE) and Authenticated Internet Protocol (AuthIP) during Quick Mode negotiations. If you configure this policy setting, an audit event is generated during an IPsec Quick Mode negotiation. Success audits record successful attempts and Failure audits record unsuccessful attempts.If you do not configure this policy setting, no audit event is generated during an IPsec Quick Mode negotiation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditipsecquickmode"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecquickmode_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecquickmode_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecquickmode_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecquickmode_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"465511aab20489c4":{"id":"device_vendor_msft_policy_config_browser_allowsearchenginecustomization","displayName":"Allow Search Engine Customization","description":"Allow search engine customization for MDM enrolled devices. Users can change their default search engine. If this setting is turned on or not configured, users can add new search engines and change the default used in the address bar from within Microsoft Edge Settings. If this setting is disabled, users will be unable to add search engines or change the default used in the address bar. This policy will only apply on domain joined machines or when the device is MDM enrolled. For more information, see Microsoft browser extension policy (aka.ms/browserpolicy).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsearchenginecustomization"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowsearchenginecustomization_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowsearchenginecustomization_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"46cda2521c3073a8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode","displayName":"Controls the mode of DNS-over-HTTPS (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_off","displayName":"Disable DNS-over-HTTPS","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_automatic","displayName":"Enable DNS-over-HTTPS with insecure fallback","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_secure","displayName":"Enable DNS-over-HTTPS without insecure fallback","description":null,"helpText":null}]},"46fcf62c3c7456a0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enterprisehardwareplatformapienabled","displayName":"Enables managed extensions to use the Enterprise Hardware Platform API","description":"Setting the policy to True lets extensions installed by enterprise policy use the Enterprise Hardware Platform API.\r\n\r\nSetting the policy to False or leaving it unset prevents extensions from using this API.\r\n\r\nNote: This policy also applies to component extensions, such as the Hangout Services extension.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enterprisehardwareplatformapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enterprisehardwareplatformapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"465523ecf4d27873":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled","displayName":"Enable Media Recommendations","description":"By default the browser will show media recommendations that are personalized to the user. Setting this policy to Disabled will result in these recommendations being hidden from the user. Setting this policy to Enabled or leaving it unset will result in the media recommendations being shown to the user.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"469334794ae2c3cf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended","displayName":"Enable AutoFill","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"de643352-007f-4a47-8c83-d75a79516b39","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"464eeca9691d26df":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled","displayName":"Force WebSQL in third-party contexts to be re-enabled.","description":"WebSQL in third-party contexts (e.g., cross-site iframes) is off by default as of M97 and will be fully removed in M101.\r\nIf this policy is set to false or unset, WebSQL in third party contexts will remain off.\r\nIf this policy is set to true, WebSQL in third-party contexts will be re-enabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"46fe6ed4aa7956a3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls","displayName":"Allow insecure content on these sites","description":"Allows you to set a list of url patterns that specify sites which are allowed to display blockable (i.e. active) mixed content (i.e. HTTP content on HTTPS sites) and for which optionally blockable mixed content upgrades will be disabled.\r\n\r\nIf this policy is left not set blockable mixed content will be blocked and optionally blockable mixed content will be upgraded, and users will be allowed to set exceptions to allow it for specific sites.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4615af69b3fb74f5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername","displayName":"Default search provider name","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderName specifies the default search provider's name.\r\n\r\nLeaving DefaultSearchProviderName unset means the hostname specified by the search URL is used.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_1","displayName":"Enabled","description":null,"helpText":null}]},"46ccbd00b8f10b88":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"463ca614cd47fc0f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended","displayName":"Enable origin-keyed process isolation by default.","description":"Enables origin-keyed process isolation for most pages (i.e., those assigned to an origin-keyed agent cluster by default). This improves security but also increases the number of processes created. Users are allowed to override the set policy value via the command-line flags or chrome://flags (both to turn this feature on or off).\r\n\r\nSetting the policy to Enabled results in most origins being isolated, even from other origins in the same site. See also the IsolateOrigins and SitePerProcess policies.\r\n\r\nSetting the policy to Disabled results in no origins being isolated from the rest of their site unless an origin explicitly asks to.\r\n\r\nNot setting the policy results in the browser determining which origins to isolate and when to isolate them.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"46d6ae8c50289af8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled","displayName":"Enable strict MIME type checking for worker scripts","description":"This policy enables strict MIME type checking for worker scripts.\r\n\r\nWhen enabled or unset, then worker scripts will use strict MIME type checking for JavaScript, which is the new default behaviour. Worker scripts with legacy MIME types will be rejected.\r\n\r\nWhen disabled, then worker scripts will use lax MIME type checking, so that worker scripts with legacy MIME types, e.g. text/ascii, will continue to be loaded and executed.\r\n\r\nBrowsers traditionally used lax MIME type checking, so that resources with a number of legacy MIME types were supported. E.g. for JavaScript resources, text/ascii is a legacy supported MIME type. This may cause security issues, by allowing to load resources as scripts that were never intended to be used as such. Chrome will transition to use strict MIME type checking in the near future. The enabled policy will track the default behaviour. Disabling this policy allows administrators to retain the legacy behaviour, if desired.\r\n\r\nSee https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguage for details about JavaScript / ECMAScript media types.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"460f775e952b336b":{"id":"device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures","displayName":"Require Platform Security Features","description":"Select Platform Security Level: 1 - Turns on VBS with Secure Boot, 3 - Turns on VBS with Secure Boot and DMA. DMA requires hardware support.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#requireplatformsecurityfeatures"],"categoryId":"992a8a1e-428e-41cb-948e-4e5da86105fa","categoryName":"Device Guard","options":[{"id":"device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures_1","displayName":"Turns on VBS with Secure Boot.","description":"Turns on VBS with Secure Boot.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures_3","displayName":"Turns on VBS with Secure Boot and direct memory access (DMA). DMA requires hardware support.","description":"Turns on VBS with Secure Boot and direct memory access (DMA). DMA requires hardware support.","helpText":null}]},"461edc316726a6ec":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_profilesreattachcount","displayName":"Reattach Count (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"46a14458a4114975":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled","displayName":"Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page","description":"By default, there are two Bing chat entry-points on new tab page. One is inside the new tab page search box, and one is in the Bing Autosuggest drawer on-click.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge Enterprise new tab page and the Bing chat entry-points are there for users.\r\n\r\nIf you disable this policy, Bing chat entry-points don't appear on the new tab page.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"461b49ad7c5836ef":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled","displayName":"Control whether storage quota APIs will return static values","description":"Controls how the Storage Quota APIs report the available quota to websites.\r\n\r\nWhen enabled, the Storage Quota APIs return a static quota value equal to the current usage plus the smaller of 10 GiB or the device's total storage rounded up to the nearest 1 GiB.\r\n\r\nWhen disabled, the Storage Quota APIs return a dynamic quota value that reflects the actual available device storage.\r\n\r\nWhen unset, the browser uses the default platform behavior.\r\n\r\nThis policy does not affect sites with unlimited storage permissions or enforced quota settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"467c843e2186f823":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols","displayName":"Allow legacy TLS/DTLS downgrade in WebRTC (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 120.\r\n\r\nIf you enable this policy, WebRTC peer connections can downgrade to obsolete\r\nversions of the TLS/DTLS (DTLS 1.0, TLS 1.0 and TLS 1.1) protocols.\r\nIf you disable or don't set this policy, these TLS/DTLS versions are\r\ndisabled.\r\n\r\nThis policy was removed in Microsoft Edge 121 and is ignored if set.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},"469c30ae0a399d0e":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended","displayName":"Enable Microsoft Defender SmartScreen DNS requests","description":"This policy lets you configure whether to enable DNS requests made by Microsoft Defender SmartScreen. Note: Disabling DNS requests will prevent Microsoft Defender SmartScreen from getting IP addresses, and potentially impact the IP-based protections provided.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen will make DNS requests.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen will not make any DNS requests.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"46c38c0b8ea71956":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_werarchivebehavior","displayName":"Archive behavior: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_werarchivebehavior_2","displayName":"Store all","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_werarchivebehavior_1","displayName":"Store parameters only","description":null,"helpText":null}]},"46c64ec7bfe00d3b":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventcddvdmetadataretrieval","displayName":"Prevent CD and DVD Media Information Retrieval (User)","description":"This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically obtaining media information from the Internet for CDs and DVDs played by users. In addition, the Retrieve media information for CDs and DVDs from the Internet check box on the Privacy Options tab in the first use dialog box and on the Privacy tab in the Player are not selected and are not available.\r\n\r\nIf you disable or do not configure this policy setting, users can change the setting of the Retrieve media information for CDs and DVDs from the Internet check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventcddvdmetadataretrieval"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventcddvdmetadataretrieval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventcddvdmetadataretrieval_1","displayName":"Enabled","description":null,"helpText":null}]},"4669079a0c787d22":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability","displayName":"Control where Developer Tools can be used (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability_0","displayName":"Disallow usage of the Developer Tools on extensions installed by enterprise policy, allow usage of the Developer Tools in other contexts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability_1","displayName":"Allow usage of the Developer Tools","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability_2","displayName":"Disallow usage of the Developer Tools","description":null,"helpText":null}]},"4675789a2396e16f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenter","displayName":"Move selection after Enter (User)","description":"Enabling this policy selects the Advanced (Editing Options) user option to \"After pressing Enter, move selection\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenter_1","displayName":"Enabled","description":null,"helpText":null}]},"4667e731482292f4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles","displayName":"Excel add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"463ffb41f9d4426b":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowautomaticpromptingforactivexcontrols"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"466f6b816f76b13b":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400","displayName":"Allow active scripting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_1","displayName":"Prompt","description":null,"helpText":null}]},"463a9eb4b29a97c7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_maxconnectionsperproxy","displayName":"Maximum number of concurrent connections to the proxy server: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"465d27531bba77c5":{"id":"user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 132.\r\n\r\nThe :--foo syntax for the CSS custom state feature is being changed to :state(foo) in Microsoft Edge in order to comply with changes that have been made in Firefox and Safari. This policy lets the deprecated syntax to be used until Stable 132.\r\n\r\nThis deprecation might break some Microsoft Edge-only websites that use the deprecated :--foo syntax.\r\n\r\nIf you enable this policy, the deprecated syntax will be enabled.\r\n\r\nIf you disable this policy or don't set it, the deprecated syntax will be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"466af048983ad54d":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerprotectionenabled_recommended","displayName":"Configure Edge Scareware Blocker Protection (User)","description":"This policy setting allows administrators to control whether Microsoft Edge enables the Scareware Blocker, an AI-powered feature that provides warning messages to help protect users from potential tech scams.\r\n\r\nIf this policy is enabled, Edge Scareware Blocker will warn users of potential tech scams.\r\n\r\nIf this policy is disabled, Edge Scareware Blocker will not warn users of potential tech scams.\r\n\r\nIf this policy is not configured, Edge Scareware Blocker will not warn users of potential tech scams, but users can choose warnings in settings.\r\n\r\nBy configuring this policy, administrators determine whether users receive proactive scam warnings or must manually enable them.","helpText":"","infoUrls":[],"categoryId":"fea97af7-df89-4fde-8e2b-f8e7f7b6b741","categoryName":"Scareware Blocker settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerprotectionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerprotectionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"463e3233f1c58b8e":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_loopbacknetworkblockedforurlsdesc","displayName":"Block sites from making network requests to the local device. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"46709da38ff6371a":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls","displayName":"Allow access to sensors on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can access and use sensors such as motion and light sensors.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSensorsSetting' (Default sensors setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SensorsBlockedForUrls' (Block access to sensors on specific sites) policy (if there is a match), the 'DefaultSensorsSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SensorsBlockedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"46a7702502dd453d":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended","displayName":"Enable Password reveal button (User)","description":"Lets you configure the default display of the browser password reveal button for password input fields on websites.\r\n\r\nIf you enable or don't configure this policy, the browser user setting defaults to displaying the password reveal button.\r\n\r\nIf you disable this policy, the browser user setting won't display the password reveal button.\r\n\r\nFor accessibility, users can change the browser setting from the default policy.\r\n\r\nThis policy only affects the browser password reveal button, it doesn't affect websites' custom reveal buttons.","helpText":"","infoUrls":[],"categoryId":"a877a2ff-f144-421f-814c-593e972a8a20","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"46c7d23ea2f79804":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_onlycontaininganattachment_l_onlycontaininganattachment356","displayName":"Only containing an attachment (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":null},"46fbab7bd4d7be46":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome_l_homemapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"461f556c8eef1d34":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_urlforlocationofdocumenttemplatespolicy_l_enteraurl","displayName":"Enter a URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":null},"46da940d79ae8738":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey20_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"46b882ceaa0e910b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc20_l_datecolon315","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"460234b9a24eae39":{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointpresenceintervalmultiplier","displayName":"Multiplier for Presence sync interval for notebooks stored on SharePoint (User)","description":"This policy setting allows you to increase the interval between polls to SharePoint to determine active users of notebooks. OneNote will sync notebooks at a faster rate when other users are interacting with a notebook.\r\n\r\nIf you enable this policy setting, OneNote will poll SharePoint less frequently to determine if there are other users currently interacting with notebooks. Intervals are multiplied by the entered value, a positive integer value from 1 to 10. Larger intervals will slow detection of concurrent users in notebooks but reduce server load.\r\n\r\nIf you disable or do not configure this policy setting, OneNote will poll for active users of notebooks at the default rate (multiplier value of 1).\r\n\r\nNote: This policy setting only applies to volume licensed versions of Office 2016 that use Windows Installer (MSI), such as Office Professional Plus 2016 and Office Standard 2016.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointpresenceintervalmultiplier_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointpresenceintervalmultiplier_1","displayName":"Enabled","description":null,"helpText":null}]},"4696c7e4ef558eba":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstabsolutemaximumsize","displayName":"Legacy PST: Absolute maximum size (User)","description":"Specifies the maximum allowable size (in bytes) for an Outlook 97-2002 Data File.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstabsolutemaximumsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstabsolutemaximumsize_1","displayName":"Enabled","description":null,"helpText":null}]},"46a026faae795239":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_enablemeetingdownleveltext","displayName":"Enable down-level meeting text (User)","description":"This policy setting controls whether Outlook automatically displays the meeting time and location in the meeting request body.\r\n\r\nIf you enable this policy setting, Outlook automatically displays the meeting time and location in the meeting request body.\r\n\r\nIf you disable or do not configure this policy setting, Outlook does not automatically display the meeting time and location in the meeting request body.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_enablemeetingdownleveltext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_enablemeetingdownleveltext_1","displayName":"Enabled","description":null,"helpText":null}]},"461cf25a307c769c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor","displayName":"Change color used to highlight search matches (User)","description":"By default, search matches are highlighted in yellow. This setting allows you to change the color used for highlighting matches in search results.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_hithighlightingcolor_1","displayName":"Enabled","description":null,"helpText":null}]},"4612ffd539f51931":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requiredcertificateauthority","displayName":"Required Certificate Authority (User)","description":"This policy setting enables you to designate a required certificate authority for Outlook to use for encryption and digital signatures.\r\n\r\nIf you enable this policy setting, you can specify a required certificate authority by entering an X.509 distinguished name in the text field that is provided. The name must conform to the X.509 certificate format exactly. For example:\r\n\r\nCN=WoodgroveBankCA, DC=WoodgroveBank, DC=com\r\n\r\nIf you disable or do not configure this policy setting, Outlook trusts any certificate authorities that are represented by certificates in the Trusted Root Certification Authorities store on users' computers.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requiredcertificateauthority_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requiredcertificateauthority_1","displayName":"Enabled","description":null,"helpText":null}]},"46ababde4872c5b4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtextcontrast","displayName":"Stop checking for text color contrast (User)","description":"This policy setting prevents the Accessibility Checker from flagging text with low contrast and readability.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from flagging text with low contrast and readability.\r\n\r\nIf you disable or do not configure this policy setting, text will be scanned for color contrast and the results will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtextcontrast_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtextcontrast_1","displayName":"Enabled","description":null,"helpText":null}]},"46e3dd54c3182581":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_descriptioncolon18","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"4677268328878ab4":{"id":"user_vendor_msft_policy_config_privacy_disableprivacyexperience","displayName":"Disable Privacy Experience (User)","description":"Enabling this policy prevents the privacy experience from launching during user logon for new and upgraded users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#disableprivacyexperience"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"user_vendor_msft_policy_config_privacy_disableprivacyexperience_0","displayName":"Disabled","description":"Allow the 'choose privacy settings for your device' screen for a new user during their first logon or when an existing user logs in for the first time after an upgrade.","helpText":null},{"id":"user_vendor_msft_policy_config_privacy_disableprivacyexperience_1","displayName":"Enabled","description":"Do not allow the 'choose privacy settings for your device' screen when a new user logs in or an existing user logs in for the first time after an upgrade.","helpText":null}]},"46459ba0ea65813a":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_l_empty0","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"30da5d88-cf03-41f4-ab55-51ead91b3844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_l_empty0_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_l_empty0_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_l_empty0_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_l_empty0_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]},"46b2903819c9ef13":{"id":"user_vendor_msft_policy_config_start_hidefrequentlyusedapps","displayName":"Hide Frequently Used Apps (User)","description":"Enabling this policy hides the most used apps from appearing on the start menu and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidefrequentlyusedapps"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_hidefrequentlyusedapps_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hidefrequentlyusedapps_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"4657bf0652024cf6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_definestylesbasedonyourformatting","displayName":"Define styles based on your formatting (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e8ce968b-91cb-4301-ba98-b37d42bc5213","categoryName":"Automatically as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_definestylesbasedonyourformatting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_definestylesbasedonyourformatting_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/47.json b/public/intune-definitions/47.json new file mode 100644 index 000000000000..354b5a42a496 --- /dev/null +++ b/public/intune-definitions/47.json @@ -0,0 +1 @@ +{"47068cf160460780":{"id":"com.android.devicerestrictionpolicy.passwordminimumlengthaosp","displayName":"Minimum password length","description":"Enter the minimum number of digits or characters the password must have, from 4 to 16.","helpText":"Enter a number (4-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"479867a2f07bee38":{"id":"com.android.devicerestrictionpolicy.storageblockexternalmedia","displayName":"Block mounting of external media","description":"If 'True', prevents using or connecting any external media on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might allow external media on the device. Available for fully managed, dedicated and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.storageblockexternalmedia_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.storageblockexternalmedia_true","displayName":"True","description":"True","helpText":null}]},"474a7ee798adf574":{"id":"com.apple.applicationaccess_safariforcefraudwarning","displayName":"Safari Force Fraud Warning","description":"If true, enables Safari fraud warning. Available in iOS 4 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_safariforcefraudwarning_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_safariforcefraudwarning_true","displayName":"True","description":null,"helpText":null}]},"476b44b5706957ba":{"id":"com.apple.fileproviderd_managementexternalvolumesyncingallowlist","displayName":"Management External Volume Syncing Allow List","description":"An array of strings representing the composed identifiers of apps. The device allows the corresponding apps to use File Provider extension volume synchronization. If present, and `ManagementAllowsExternalVolumeSyncing` is set to `true`, the device allows only the apps in this list to use volume synchronization. This key is ignored if `ManagementAllowsExternalVolumeSyncing` is set to `false`. The format of the app identifiers is \"Bundle-ID (Team-ID)\", for example `com.example.app (ABCD1234)`.","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":null},"478fe54e3e7e3fb2":{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifiertype","displayName":"AE Receiver Identifier Type","description":"The type of AE Receiver Identifier value, either bundle ID or path.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifiertype_1","displayName":"path","description":null,"helpText":null}]},"47d169601d1ab440":{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"472afa738ba66780":{"id":"com.apple.webcontent-filter_allowlistbookmarks_item_title","displayName":"Title","description":"The title of the bookmark.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"47ed60d673587e58":{"id":"com.apple.xsan_sanname","displayName":"San Name","description":"The name of the SAN. This key is required for all Xsan SANs. The name must exactly match the name of the SAN defined in the metadata server.","helpText":null,"infoUrls":[],"categoryId":"46af3391-ed6d-4ada-aef7-02dac2a1b136","categoryName":"Xsan","options":null},"4711669bb5a9c212":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autoplayallowed","displayName":"Allow media autoplay for websites","description":"This policy controls media autoplay behavior for websites.\n\nIf you don't configure this policy, Microsoft Edge uses the current media autoplay setting, and users can change their autoplay settings.\n\nIf you enable this policy, media autoplay is set to \"Allow\". All websites can autoplay media, and users can't override this setting.\n\nIf you disable this policy, media autoplay is set to \"Limit\" in Microsoft Edge version 148 and later. Autoplay is limited to webpages with high media engagement or active WebRTC streams, and users can't override this setting.\n\nIn versions 92 through 145, disabling this policy also set autoplay to \"Limit\". In versions 146 and 147, disabling this policy set autoplay to \"Block\".\n\nTabs must be closed and reopened for this policy to take effect.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autoplayallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autoplayallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"476b7702165bc43e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showcasticonintoolbar","displayName":"Show the cast icon in the toolbar","description":"Set this policy to true to show the Cast toolbar icon on the toolbar or the overflow menu. Users won't be able to remove it.\n\nIf you don't configure this policy or if you disable it, users can pin or remove the icon by using its contextual menu.\n\nIf you've also set the \"EnableMediaRouter\" policy to false, then this policy is ignored, and the toolbar icon isn't shown.","helpText":null,"infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showcasticonintoolbar_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showcasticonintoolbar_true","displayName":"Enabled","description":null,"helpText":null}]},"477d2fa2068f838b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webappsettings","displayName":"Web App management settings","description":"This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.\n\n- The manifest_id field is the Manifest ID for the Web App.\nSee https://developer.chrome.com/blog/pwa-manifest-id/\nfor instructions on how to determine the Manifest ID for an installed web app.\n- The run_on_os_login field specifies if a web app can be run during OS sign in.\nIf you set this field to blocked, the web app doesn't run during OS sign in, and the user can't enable this later.\nIf you set this field to run_windowed, the web app runs during OS sign in, and the user can't disable this later.\nIf you set this field to allowed, the user configures the web app to run at OS sign in.\nThe default policy configuration only allows the allowed and blocked values.\n- (Starting with Microsoft Edge version 120) The prevent_close_after_run_on_os_login field specifies if a web app can be prevented from closing in any way.\nFor example, by the user, by task manager, or by web APIs. This behavior can only be enabled if run_on_os_login is set to run_windowed.\nIf the app is already running, this setting will only take effect after the app is restarted.\nIf this field isn't defined, users can close the app.\n(This is currently not supported in Microsoft Edge.)\n- (Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, that is, shortcuts, file handlers, protocol handlers and so on, will be removed or not.\nIf an app is already running, this property comes into effect after the app restarts.\nThis should be used with caution, since it can override any OS integration that is set automatically during the startup of the web applications system. This currently only works on Windows, Mac and Linux platforms.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"47093fc9006827bc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webusbblockedforurls","displayName":"Block WebUSB on specific sites","description":"Define a list of sites, based on URL patterns, that can't ask the user to grant them access to a USB device.\n\nIf you don't configure this policy, the global default value from the \"DefaultWebUsbGuardSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nURL patterns in this policy can't conflict with those configured in the \"WebUsbAskForUrls\" policy. You can't both allow and block a URL. For detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"4753c5cb288898d5":{"id":"device_vendor_msft_email_accountname","displayName":"Account Name","description":"Exchange ActiveSync account name, displayed to user as name of EAS profile.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/email2-csp"],"categoryId":"48cb2bee-74be-4165-bc19-89c5b1c50c00","categoryName":"Email","options":null},"47cc40a22a35b0b3":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters","displayName":"Special Characters","description":"Use this policy setting to configure the use of special characters in the Windows Hello for Business PIN gesture. Valid special characters for Windows Hello for Business PIN gestures include: ! \" # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \\ ] ^ _ ` { | } ~ .\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one special character in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using special characters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use special characters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_0","displayName":"Allows the use of special characters in PIN.","description":"Allows the use of special characters in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_1","displayName":"Requires the use of at least one special characters in PIN.","description":"Requires the use of at least one special characters in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_2","displayName":"Does not allow the use of special characters in PIN.","description":"Does not allow the use of special characters in PIN.","helpText":null}]},"476741e39a3c1ee3":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_worknormalpriorityunit","displayName":"Normal Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_worknormalpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_worknormalpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_worknormalpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"47c557f8d1093e64":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werarchive_2_wermaxarchivecount","displayName":"Maximum number of reports to store:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"47f4dc175513126b":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduletime_remediation_scan_scheduletime","displayName":"Specify the time of day to run a scheduled full scan to complete remediation","description":null,"helpText":"","infoUrls":[],"categoryId":"8212ba6e-101d-4ee8-8ca2-c4cd2cddba96","categoryName":"Remediation","options":null},"47923c693a0ba546":{"id":"device_vendor_msft_policy_config_admx_msi_disableflyweightpatching","displayName":"Prohibit flyweight patching","description":"This policy setting controls the ability to turn off all patch optimizations.\r\n\r\nIf you enable this policy setting, all Patch Optimization options are turned off during the installation.\r\n\r\nIf you disable or do not configure this policy setting, it enables faster application of patches by removing execution of unnecessary actions. The flyweight patching mode is primarily designed for patches that just update a few files or registry values. The Installer will analyze the patch for specific changes to determine if optimization is possible. If so, the patch will be applied using a minimal set of processing.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disableflyweightpatching"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disableflyweightpatching_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disableflyweightpatching_1","displayName":"Enabled","description":null,"helpText":null}]},"472fa530a2edcf30":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath","displayName":"Set the default source path for Update-Help","description":"This policy setting allows you to set the default value of the SourcePath parameter on the Update-Help cmdlet.\r\n\r\nIf you enable this policy setting, the Update-Help cmdlet will use the specified value as the default value for the SourcePath parameter. This default value can be overridden by specifying a different value with the SourcePath parameter on the Update-Help cmdlet.\r\n\r\nIf this policy setting is disabled or not configured, this policy setting does not set a default value for the SourcePath parameter of the Update-Help cmdlet.\r\n\r\nNote: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enableupdatehelpdefaultsourcepath"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_1","displayName":"Enabled","description":null,"helpText":null}]},"47e810a41999a1b0":{"id":"device_vendor_msft_policy_config_admx_printing_nondomainprinters_shareprinters","displayName":"Number of shared printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"47db0fc0242eddbe":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_security_layer_policy_ts_security_layer","displayName":"Security Layer","description":null,"helpText":"","infoUrls":[],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_security_layer_policy_ts_security_layer_0","displayName":"RDP","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_security_layer_policy_ts_security_layer_1","displayName":"Negotiate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_security_layer_policy_ts_security_layer_2","displayName":"SSL","description":null,"helpText":null}]},"47790f98dd086fa9":{"id":"device_vendor_msft_policy_config_admx_tpm_blockedcommandslist_name_blockedcommandslist_ordinals2","displayName":"The list of blocked TPM commands:","description":null,"helpText":"","infoUrls":[],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":null},"4706b3c72754b9b6":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup","displayName":"Lync 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Lync 2016.\r\nMicrosoft Lync 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Lync 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Lync 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016lyncbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"473943f28f2fb179":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_filehashdetails","displayName":"File hash","description":"A set of coma separated hashes for use of the application of this rule.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"473eadd8a6749bca":{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorforegroundpriority","displayName":"Costed Network Behavior Foreground Priority","description":"This policy setting defines the default behavior that the foreground Intelligent Transfer Service (BITS) uses for foreground transfers when the system is connected to a costed network (3G, etc. ). Download behavior policies further limit the network usage of foreground transfers. If you enable this policy setting, you can define a default download policy for each BITS job priority. This setting does not override a download policy explicitly configured by the application that created the BITS job, but does apply to jobs that are created by specifying only a priority. For example, you can specify that foreground jobs are by default to transfer only when on uncosted network connections, but foreground jobs should proceed only when not roaming. The values that can be assigned are:1 - Always transfer2 - Transfer unless roaming3 - Transfer unless surcharge applies (when not roaming or overcap)4 - Transfer unless nearing limit (when not roaming or nearing cap)5 - Transfer only if unconstrained","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-BITS#costednetworkbehaviorforegroundpriority"],"categoryId":"7443c1d4-1087-486c-9a0a-f9da9074e4e1","categoryName":"BITS","options":[{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorforegroundpriority_1","displayName":"Always transfer","description":"Always transfer","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorforegroundpriority_2","displayName":"Transfer unless roaming","description":"Transfer unless roaming","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorforegroundpriority_3","displayName":"Transfer unless surcharge applies (when not roaming or over cap)","description":"Transfer unless surcharge applies (when not roaming or over cap)","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorforegroundpriority_4","displayName":"Transfer unless nearing limit (when not roaming or nearing cap)","description":"Transfer unless nearing limit (when not roaming or nearing cap)","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorforegroundpriority_5","displayName":"Transfer only if unconstrained","description":"Transfer only if unconstrained","helpText":null}]},"47b0e601da7f2a6f":{"id":"device_vendor_msft_policy_config_browser_allowwebcontentonnewtabpage","displayName":"Allow Web Content On New Tab Page","description":"This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you enable this setting, Microsoft Edge opens a new tab with the New Tab page. If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can't change it. If you don't configure this setting, employees can choose how new tabs appears.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowwebcontentonnewtabpage"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowwebcontentonnewtabpage_0","displayName":"Block","description":"Load a blank page instead of the default New tab page and prevent users from changing it.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowwebcontentonnewtabpage_1","displayName":"Allow","description":"Load the default New tab page.","helpText":null}]},"4795aba35f9946bc":{"id":"device_vendor_msft_policy_config_browser_preventlivetiledatacollection","displayName":"Prevent Live Tile Data Collection","description":"This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventlivetiledatacollection"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_preventlivetiledatacollection_0","displayName":"Disabled","description":"Collect and send Live Tile metadata.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_preventlivetiledatacollection_1","displayName":"Enabled","description":"No data collected.","helpText":null}]},"479d0c6f4feb06a9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls","displayName":"Block the Flash plugin on these sites","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4741acdd2773c9cd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins","displayName":"Allow Desktop, Window, and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Desktop, Window, and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: WindowCaptureAllowedByOrigins, TabCaptureAllowedByOrigins, SameOriginTabCaptureAllowedByOrigins.\r\n\r\nIf a site matches a URL pattern in this policy, the ScreenCaptureAllowed will not be considered.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"479f2c5a583a19c0":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"47c7fceef41e6a66":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneinitializeandscriptactivexcontrols"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"47a45efdc9e779f1":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowscriptlets"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"47f3e03a9b690f5d":{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended","displayName":"Enable efficiency mode when the device is connected to a power source","description":"Allows efficiency mode to become active when the device is connected to a power source. On devices with no battery, this policy has no effect.\r\n\r\nIf you enable this policy, efficiency mode will become active when the device is connected to a power source.\r\n\r\nIf you disable or don't configure this policy, efficiency mode will never become active when the device is connected to a power source.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"47d7438fc94001ac":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox","displayName":"Configure the new tab page search box experience","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL).\r\n\r\n If you disable or don't configure this policy and:\r\n\r\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\r\n- If the address bar default search engine is not Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\r\n\r\n\r\nIf you enable this policy and set it to:\r\n\r\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\r\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\r\n\r\nPolicy options mapping:\r\n\r\n* bing (bing) = Search box (Recommended)\r\n\r\n* redirect (redirect) = Address bar\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: bing","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_1","displayName":"Enabled","description":null,"helpText":null}]},"470702edc666f4a5":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled","displayName":"Allow using the deprecated U2F Security Key API (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 103.\r\n\r\nThis policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content when it's found to be incompatible with the change to remove the U2F Security Key API. It doesn't work in Microsoft Edge after version 103.\r\n\r\nIf you enable this policy, the deprecated U2F Security Key API can be used and the deprecation reminder prompt shown for U2F API requests is suppressed.\r\n\r\nIf you disable this policy or don't configure it, the U2F Security Key API is disabled by default and can only be used by sites that register for and use the U2FSecurityKeyAPI origin trial which ended after Microsoft Edge version 103.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"470bfc633e82c4b0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_exprwdexe150","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_exprwdexe150_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_exprwdexe150_1","displayName":"True","description":null,"helpText":null}]},"47bc0c3f6cafb40b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_msaccessexe165","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_msaccessexe165_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_msaccessexe165_1","displayName":"True","description":null,"helpText":null}]},"4742f46bd88bf4ec":{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_driver_exclusionlistentry_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"47d75209f1630a0f":{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_forcedenytheseapps","displayName":"Let Apps Get Diagnostic Info Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are not allowed to get diagnostic information about other apps, including user names. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"47c0d3009888a8cd":{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_forcedenytheseapps","displayName":"Let Apps Sync With Devices Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"4775c18259c85b46":{"id":"device_vendor_msft_policy_config_remotedesktopservices_requiresecurerpccommunication","displayName":"Require secure RPC communication","description":"Specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured communication.\n\nYou can use this setting to strengthen the security of RPC communication with clients by allowing only authenticated and encrypted requests.\n\nIf the status is set to Enabled, Remote Desktop Services accepts requests from RPC clients that support secure requests, and does not allow unsecured communication with untrusted clients.\n\nIf the status is set to Disabled, Remote Desktop Services always requests security for all RPC traffic. However, unsecured communication is allowed for RPC clients that do not respond to the request.\n\nIf the status is set to Not Configured, unsecured communication is allowed.\n\nNote: The RPC interface is used for administering and configuring Remote Desktop Services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-requiresecurerpccommunication"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_requiresecurerpccommunication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_requiresecurerpccommunication_1","displayName":"Enabled","description":null,"helpText":null}]},"47840abdb8c252ea":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadsubdomainsupportedhostnamesid","displayName":"Subdomain Supported Hostnames (optional):","description":"","helpText":"","infoUrls":[],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":null},"47bd78b677071582":{"id":"safari_allowprivatebrowsing","displayName":"Allow Private Browsing","description":"If `false`, the system disables private browsing in Safari.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_allowprivatebrowsing_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowprivatebrowsing_true","displayName":"Allowed","description":null,"helpText":null}]},"478fe65222528289":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize","displayName":"Maximum allowed Recycle Bin size (User)","description":"Limits the percentage of a volume's disk space that can be used to store deleted files.\r\n\r\nIf you enable this setting, the user has a maximum amount of disk space that may be used for the Recycle Bin on their workstation.\r\n\r\nIf you disable or do not configure this setting, users can change the total amount of disk space used by the Recycle Bin.\r\n\r\nNote: This setting is applied to all volumes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-recyclebinsize"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize_1","displayName":"Enabled","description":null,"helpText":null}]},"4781e270cf86b018":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch1","displayName":"Site URL 2 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"478c75619b03966f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible","displayName":"Show cards on the New Tab Page (User)","description":"This policy controls the visibility of cards on the New Tab Page. Cards surface entry points to launch common user journeys based on the user's browsing behavior.\r\n\r\nIf the policy is set to Enabled, the New Tab Page will show cards if content is available.\r\n\r\nIf the policy is set to Disabled, the New Tab Page won't show cards.\r\n\r\nIf the policy is not set, the user can control the card visibility. The default is visible.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"47fcb65f65947fb3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":null},"478a4eed05243d6c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled","displayName":"Enable showing promotional content (User)","description":"Setting the policy to True or leaving it unset lets Google Chrome show users product promotional content.\r\n\r\nSetting the policy to False prevents Google Chrome from showing product promotional content.\r\n\r\nSetting the policy controls the presentation of promotional content, including the welcome pages that help users sign in to Google Chrome, set Google Chrome as users' default browser, or otherwise inform them of product features.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"476882df88e5f1b1":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_1","displayName":"Enabled","description":null,"helpText":null}]},"47a13cfd70560280":{"id":"user_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck","displayName":"Turn off the Security Settings Check feature (User)","description":"This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Explorer at risk.\n\nIf you enable this policy setting, the feature is turned off.\n\nIf you disable or do not configure this policy setting, the feature is turned on.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesecuritysettingscheck"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_1","displayName":"Enabled","description":null,"helpText":null}]},"47817df6f73dca5d":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled","displayName":"JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it is a temporary policy for web standards compliance. It won't work in Microsoft Edge as soon as version 107.\r\nIf you enable this policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will not be clamped. This improves short horizon performance, but websites abusing the API will still eventually have their setTimeout usages clamped.\r\nIf you disable or don't configure policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will be clamped.\r\n\r\nThis is a web standards compliancy feature that may change task ordering on a web page, leading to unexpected behavior on sites that are dependent on a certain ordering.\r\nIt also may affect sites with a lot of usage of a timeout of 0ms for setTimeout. For example, increasing CPU load.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"47cb9e73f876ef86":{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled","displayName":"URL reporting in Edge diagnostic data enabled (User)","description":"Controls sending URLs of pages visited and per-page usage in the Microsoft Edge optional diagnostics data to Microsoft to help make browsing and search better. This also includes identifiers and usage diagnostics of other browser components that can modify or provide content, such as extensions.\r\n\r\nThis policy is applicable only if the 'DiagnosticData' (Send required and optional diagnostic data about browser usage) setting is set to 'OptionalData'. See the description of 'DiagnosticData' for more information on how Microsoft Edge diagnostic data levels are set.\r\n\r\nIf you enable or don't configure this setting, URLs are provided in optional diagnostic data.\r\n\r\nIf you disable this setting, URLs are not reported in optional diagnostic data.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4778a55de8c13f33":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended","displayName":"Machine learning powered autofill suggestions (User)","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and will not be used elsewhere.\r\n\r\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\r\n\r\nIf you disable this policy, machine learning powered autofill suggestions will not be shown, and autofill will no longer use cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"47c762635e591e09":{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_geolocationblockedforurlsdesc","displayName":"Block geolocation on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"47f69a1a7d6e888a":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls","displayName":"Block access to sensors on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can't access sensors such as motion and light sensors.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSensorsSetting' (Default sensors setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SensorsAllowedForUrls' (Allow access to sensors on specific sites) policy (if there is a match), the 'DefaultSensorsSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SensorsAllowedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"473a10844e8afd4f":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment_internetexplorerintegrationwindowopenwidthadjustment","displayName":"Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4767b1d3f769eb37":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins","displayName":"Define a list of protocols that can not be silently blocked by anti-flood protection (User)","description":"Allows you to create a list of protocols, and for each protocol an associated list of allowed origin patterns. These origins won't be silently blocked from launching an external application by anti-flood protection. The trailing separator shouldn't be included when listing the protocol. For example, list \"skype\" instead of \"skype:\" or \"skype://\".\r\n\r\nIf you configure this policy, a protocol will only be permitted to bypass being silently blocked by anti-flood protection if:\r\n\r\n- the protocol is listed\r\n\r\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\r\n\r\nIf either condition is false, the external protocol launch may be blocked by anti-flood protection.\r\n\r\nIf you don't configure this policy, no protocols can bypass being silently blocked.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' (Block access to a list of URLs) policy, that are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\n\r\nThis policy doesn't work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"spotify\",\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"msteams\",\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"msoutlook\",\r\n \"allowed_origins\": [\r\n \"*\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"474d680d62ed2379":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastserviceserverdescription2","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"47f97566e369d789":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishchile","displayName":"Spanish (Chile) (User)","description":"Enables the editing language Spanish (Chile)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishchile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishchile_1","displayName":"Enabled","description":null,"helpText":null}]},"473362e0f2340b98":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]},"47f5ca24ddef7536":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_l_datecolon291","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"476cfa6031223920":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc07","displayName":"Unsafe Location #7 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc07_1","displayName":"Enabled","description":null,"helpText":null}]},"472366275c7ba125":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_enterprisetemplatespath","displayName":"Enterprise templates path (User)","description":"Specifies the location of enterprise templates.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_enterprisetemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_enterprisetemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"47e079eb1a5d1300":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnofflocalprintinginapplicationguard","displayName":"Disable Local printing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnofflocalprintinginapplicationguard_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnofflocalprintinginapplicationguard_1","displayName":"True","description":null,"helpText":null}]},"478accfeb0b24c65":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1ae8c95a-5748-4647-80f8-b447e60601a2","categoryName":"Add-ins","options":null},"4742c295f9a8add0":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontname","displayName":"Default Font Name (User)","description":"Specifies the value in the option ''Font''.","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontname_1","displayName":"Enabled","description":null,"helpText":null}]},"47040eaaad1459b8":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_showtabletpcinputpanelononenotepages","displayName":"Show Tablet PC Input Panel on OneNote pages (User)","description":"Enable this policy to display the Tablet PC Input Panel on OneNote pages.","helpText":"","infoUrls":[],"categoryId":"84de2eed-843c-401b-a3fd-e21be88f2365","categoryName":"Pen","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_showtabletpcinputpanelononenotepages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_showtabletpcinputpanelononenotepages_1","displayName":"Enabled","description":null,"helpText":null}]},"474e478278209e2a":{"id":"user_vendor_msft_policy_config_outlk16v14~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationretryintervals","displayName":"Interval between new Outlook migration attempts (User)","description":"This policy setting controls the interval between new Outlook migration attempts.\r\n\r\nIf you don't set this or set this to 0 (default value), classic Outlook will stop executing \"New Outlook auto migration\" after the user toggles back to classic Outlook for Windows.\r\n\r\nIf you set this to 1, classic Outlook will show a blocking prompt on each app launch, which will attempt to switch the user to the new Outlook app.\r\n\r\nIf you set this to N (2 - 9900) value, \"New Outlook auto migration\" will be re-initiated N days after the user toggles back to classic Outlook.\r\n\r\nNote: This policy only applies to subscription-based Microsoft 365 Apps.\r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v14~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationretryintervals_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v14~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationretryintervals_1","displayName":"Enabled","description":null,"helpText":null}]},"47f4be41865e85bd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_makeoutlookthedefaultprogramforemailcontactsandcalendar","displayName":"Make Outlook the default program for E-mail, Contacts, and Calendar (User)","description":"This policy setting controls whether Outlook is the default program for e-mail, contacts, and calendar services.\r\n\r\nIf you enable this policy setting, the \"Make Outlook the default program for E-mail, Contacts, and Calendar\" check box on the General tab of the Office Center is selected and users cannot change it.\r\n\r\nIf you disable this policy setting, users cannot make Outlook the default program for these services.\r\n\r\nIf you do not configure this policy setting, Outlook is made the default program for e-mail, contacts, and calendar services when it is installed, although users can designate other programs as the default programs for these services.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_makeoutlookthedefaultprogramforemailcontactsandcalendar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_makeoutlookthedefaultprogramforemailcontactsandcalendar_1","displayName":"Enabled","description":null,"helpText":null}]},"475c7b124394e8f6":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders67","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders67_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders67_1","displayName":"True","description":null,"helpText":null}]},"47ffc6599e340427":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"Number of folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","categoryName":"General options for Microsoft Project","options":null},"4727cb152bbf87ff":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_l_datecolon49","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"4708cbf05a019bbd":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_l_datecolon61","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"477600c3cf79b1b1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates","displayName":"Word 2007 and later binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/48.json b/public/intune-definitions/48.json new file mode 100644 index 000000000000..82d5de223881 --- /dev/null +++ b/public/intune-definitions/48.json @@ -0,0 +1 @@ +{"48804355144434a8":{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowcopypaste","displayName":"Allow copy and paste between work and personal profiles ","description":"If 'True', allows users copy and paste data between the work and personal profiles. If 'False', Intune doesn't change or update this setting. By default, the OS might prevent users from pasting text into the personal profile that's copied from the work profile, allow users to copy text from the personal profile, and paste into the work profile or allow users to copy text from the work profile, and paste into the work profile. Available for corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowcopypaste_false","displayName":"False","description":"false","helpText":null},{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowcopypaste_true","displayName":"True","description":"true","helpText":null}]},"48bea4619aa6f953":{"id":"com.apple.applicationaccess_allowuiappinstallation","displayName":"Allow UI App Installation","description":"If false, disables the App Store, and its icon is removed from the Home screen. However, users may continue to use host apps (iTunes, Configurator) to install or update their apps. In iOS 10 and later, MDM commands can override this restriction. Requires a supervised device. Available in iOS 9 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowuiappinstallation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowuiappinstallation_true","displayName":"True","description":null,"helpText":null}]},"4837279227cdec90":{"id":"com.apple.applicationaccess_allowwallpapermodification","displayName":"Allow Wallpaper Modification","description":"If false, prevents wallpaper from being changed. Requires a supervised device. Available in iOS 9 and later, and macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowwallpapermodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowwallpapermodification_true","displayName":"True","description":null,"helpText":null}]},"481eb32212c69e1f":{"id":"com.apple.loginitems.managed_autolaunchedapplicationdictionary-managed","displayName":"Auto Launch Items","description":"Auto Launch Login Items","helpText":null,"infoUrls":[],"categoryId":"6efb8802-223a-46a7-b13f-a68f28f8b2c2","categoryName":"Login Items","options":null},"489239fff5582382":{"id":"com.apple.managedclient.preferences_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace","description":"Setting the policy on Microsoft Edge turns on the restricted sign-in feature in Google Workspace and prevents users from changing this setting. Users can only access Google tools using accounts from the specified domains. To allow gmail or googlemail accounts, add consumer_accounts to the list of domains. This policy is based on the Chrome policy of the same name.\n\nIf you don't provide a domain name or leave this policy unset, users can access Google Workspace with any account.\n\nUsers cannot change or override this setting.\n\nNote: This policy causes the X-GoogApps-Allowed-Domains header to be appended to all HTTP and HTTPS requests to all google.com domains, as described in https://go.microsoft.com/fwlink/?linkid=2197973.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#alloweddomainsforapps"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"484c8400a6727b3c":{"id":"com.apple.managedclient.preferences_allowedemaildomains","displayName":"Allowed Email Domains","description":"Specify a list of email domains that are allowed to be added to the Outlook profile (e.g. contoso.com). Subdomains will be automatically included (e.g. specifying contoso.com will also allow foo.contoso.com).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#allow-only-corporate-mailboxes-to-be-added"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":null},"48e9a955c0587605":{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_application id","displayName":"Microsoft AutoUpdate Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"481bacc419593106":{"id":"com.apple.managedclient.preferences_automatichttpsdefault","displayName":"Configure Automatic HTTPS (Deprecated)","description":"This policy lets you manage settings for \"AutomaticHttpsDefault\", which switches connections from HTTP to HTTPS.\n\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\n\nMicrosoft Edge attempts to upgrade some navigations from HTTP to HTTPS, when possible. This policy can be used to disable this behavior. If set to \"AlwaysUpgrade\" or left unset, this feature will be enabled by default.\n\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\n\nStarting in Microsoft Edge 111, \"UpgradePossibleDomains\" is deprecated and is treated the same as \"DisableAutomaticHttps\". It won't work in Microsoft Edge version 114.\n\nPolicy options mapping:\n\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\n\n* UpgradeCapableDomains (1) = (Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\n\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#automatichttpsdefault"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_automatichttpsdefault_0","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automatichttpsdefault_1","displayName":"(Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automatichttpsdefault_2","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},"4841e187f4f11154":{"id":"com.apple.managedclient.preferences_enableallocsiclients","displayName":"Enable simultaneous edits for Office apps","description":"This setting lets multiple users use the Microsoft 365 Apps for enterprise, Office 2019, or Office 2016 desktop apps to simultaneously edit an Office file stored in OneDrive. It also lets users share files from the Office desktop apps.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#enableallocsiclients"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_enableallocsiclients_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enableallocsiclients_true","displayName":"True","description":null,"helpText":null}]},"48f92c2d0ae90792":{"id":"com.apple.managedclient.preferences_msawebsitessousingthisprofileallowed","displayName":"Allow single sign-on for Microsoft personal sites using this profile","description":"'Allow single sign-on for Microsoft personal sites using this profile' option allows non-MSA profiles to be able to use single sign-on for Microsoft sites using MSA credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-MSA profiles only.\n\nIf you disable this policy, non-MSA profiles will not be able to use single sign-on for Microsoft sites using MSA credentials present on the machine.\n\nIf you enable this policy or don't configure it, users will be able to use the Settings option to ensure non-MSA profiles are able to use single sign-on for Microsoft sites using MSA credentials present on the machine provided only a single MSA account exists on the machine.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#msawebsitessousingthisprofileallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_msawebsitessousingthisprofileallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_msawebsitessousingthisprofileallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"4801e7ad7bbb9140":{"id":"com.apple.managedclient.preferences_webusbblockedforurls","displayName":"Block WebUSB on specific sites","description":"Define a list of sites, based on URL patterns, that can't ask the user to grant them access to a USB device.\n\nIf you don't configure this policy, the global default value from the \"DefaultWebUsbGuardSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nURL patterns in this policy can't conflict with those configured in the \"WebUsbAskForUrls\" policy. You can't both allow and block a URL.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webusbblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"480b6053b7c5445b":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_wake on lan","displayName":"Wake on LAN","description":"If true, enables \"Wake for network access.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_wake on lan_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_wake on lan_1","displayName":"True","description":null,"helpText":null}]},"48b13dc531cbe204":{"id":"com.apple.mcxmenuextras_fax.menu","displayName":"Fax","description":"If true, enables the Fax menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_fax.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_fax.menu_true","displayName":"True","description":null,"helpText":null}]},"48118000dd04546b":{"id":"com.apple.security.smartcard_onecardperuser","displayName":"One Card Per User","description":"If true, a user can pair with only one SmartCard, although existing pairings are allowed if already set up. ","helpText":null,"infoUrls":[],"categoryId":"f4a8384f-9e4e-4fc6-9ee2-28fa5260347a","categoryName":"Smart Card","options":[{"id":"com.apple.security.smartcard_onecardperuser_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.security.smartcard_onecardperuser_true","displayName":"True","description":null,"helpText":null}]},"4887012487bd9f31":{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"4853249158c30db4":{"id":"com.apple.webcontent-filter_denylisturls","displayName":"Deny List URLs","description":"An array of URLs that are inaccessible. Limit the number of these URLs to about 500.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"48257577557b0699":{"id":"com.apple.webcontent-filter_filterpackets","displayName":"Filter Packets","description":"If this value is true, the property enables the filtering of network packets. Either Filter Packets or Filter Sockets must be true for the filter to have an effect.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_filterpackets_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_filterpackets_true","displayName":"True","description":null,"helpText":null}]},"48b1ceed8ff90e6d":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverypasswordusagedropdown_name","displayName":"Configure user storage of BitLocker recovery information:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverypasswordusagedropdown_name_2","displayName":"Allow 48-digit recovery password","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverypasswordusagedropdown_name_1","displayName":"Require 48-digit recovery password","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverypasswordusagedropdown_name_0","displayName":"Do not allow 48-digit recovery password","description":null,"helpText":null}]},"48a7784e8794e44b":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_werupdatecheck","displayName":"Number of days between solution check reminders:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"4894aed9b2689451":{"id":"device_vendor_msft_policy_config_admx_kerberos_mitrealms_mitrealms_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"48be83ac16afa97b":{"id":"device_vendor_msft_policy_config_admx_nca_corporateresources_corporateresources_control","displayName":"Corporate Resources","description":null,"helpText":"","infoUrls":[],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":null},"48c10f4499a11fdd":{"id":"device_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_2","displayName":"WPD Devices: Deny read access","description":"This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-wpddevices-denyread-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"48c6a9a63a1586a4":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint","displayName":"Microsoft PowerPoint 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft PowerPoint 2016.\r\nBy default, the user settings of Microsoft PowerPoint 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016powerpoint"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"4872baadcea883d5":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_hypervisorprotectedcodeintegrity","displayName":"Hypervisor protected Code Integrity","description":"When enabled, code integrity runs in a hypervisor-protected container.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_hypervisorprotectedcodeintegrity_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_hypervisorprotectedcodeintegrity_enabled","displayName":"Enabled","description":null,"helpText":null}]},"48fec0f15793ba18":{"id":"device_vendor_msft_policy_config_applicationmanagement_restrictappdatatosystemvolume","displayName":"Restrict App Data To System Volume","description":"Specifies whether application data is restricted to the system drive. Most restricted value is 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#restrictappdatatosystemvolume"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_restrictappdatatosystemvolume_0","displayName":"Disabled","description":"Not restricted.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_restrictappdatatosystemvolume_1","displayName":"Enabled","description":"Restricted.","helpText":null}]},"48d12b8ddd5f8520":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowlocationprovider_streaming_location_provider_prompt","displayName":"Location Provider","description":"","helpText":"","infoUrls":[],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":null},"48b403167a8a0c34":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist","displayName":"Block access to a list of URLs","description":"Setting the policy prevents webpages with prohibited URLs from loading. It provides a list of URL patterns that specify forbidden URLs. Leaving the policy unset means no URLs are prohibited in the browser. Format the URL pattern according to this format ( https://www.chromium.org/administrators/url-blocklist-filter-format ). Up to 1,000 exceptions can be defined in URLAllowlist.\r\n\r\nFrom Google Chrome version 73, you can block javascript://* URLs. However, it affects only JavaScript entered in the address bar (or, for example, bookmarklets). In-page JavaScript URLs with dynamically loaded data aren't subject to this policy. For example, if you block example.com/abc, then example.com can still load example.com/abc using XMLHTTPRequest.\r\n\r\nFrom Google Chrome version 92, this policy is also supported in the headless mode.\r\n\r\nNote: Blocking internal chrome://* URLs can lead to unexpected errors.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"482f83c5c98c5ed7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled","displayName":"Allow pages to use the built-in AI APIs.","description":"This policy controls if a page can use the built-in AI APIs (such as LanguageModel API, Summarization API, Writer API, and Rewriter API).\r\n\r\nIf the policy is enabled or unset, the APIs are enabled to be used.\r\n\r\nIf the policy is disabled, attempting using the APIs will result in an error.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"484d51685d9bf6f0":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the path where difference disks will be created (when ProfileType or VHDAccessMode is configured to use them).\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\DiffDiskParentFolderPath\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_1","displayName":"Enabled","description":null,"helpText":null}]},"4851a97bdacadcbc":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowaccesstodatasources"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"4847a65537610b49":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowscriptlets"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"4870ac958cc2ada1":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads","displayName":"Allow file downloads","description":"This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.\n\nIf you enable this policy setting, files can be downloaded from the zone.\n\nIf you disable this policy setting, files are prevented from being downloaded from the zone.\n\n If you do not configure this policy setting, files are prevented from being downloaded from the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowfiledownloads"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"48f0e7904a6a999a":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection","displayName":"User Account Control Behavior Of The Elevation Prompt For Administrator Protection","description":"User Account Control: Behavior of the elevation prompt for administrators running with Administrator protection. This policy setting controls the behavior of the elevation prompt for administrators. The options are: • Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged credentials. If the user enters valid credentials, the operation continues with the user's highest available privilege. • Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Allow changes or Don't allow. If the user selects Allow changes, the operation continues with the user's highest available privilege.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_behavioroftheelevationpromptforadministratorprotection"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection_1","displayName":"Prompt for credentials on the secure desktop","description":"Prompt for credentials on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection_2","displayName":"Prompt for consent on the secure desktop","description":"Prompt for consent on the secure desktop","helpText":null}]},"48111586d3c964eb":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc","displayName":"Allow cookies on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"489723331d1bc6d5":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_0","displayName":"Off (Not recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_1","displayName":"Required data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_2","displayName":"Optional data","description":null,"helpText":null}]},"48cfc585708b100d":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"488fd465d2cb84f5":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled","displayName":"Manage QuickView Office files capability in Microsoft Edge","description":"Allows you to set whether users can view publicly accessible Office files on the web that aren't on OneDrive or SharePoint. (For example: Word documents, PowerPoint presentations, and Excel spreadsheets)\r\n\r\nIf you enable or don't configure this policy, these files can be viewed in Microsoft Edge using Office Viewer instead of downloading the files.\r\n\r\nIf you disable this policy, these files will be downloaded to be viewed.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"48601295227bbfd3":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins","displayName":"Allow Window and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Window and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"488a81e24ba8b995":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_exprwdexe178","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_exprwdexe178_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_exprwdexe178_1","displayName":"True","description":null,"helpText":null}]},"4826778cd8a03d03":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_certificatefileupload","displayName":"File upload","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"482613a31925b769":{"id":"device_vendor_msft_scepcertificate_certificatevalidityperiod","displayName":"Certificate validity period","description":"The amount of time remaining before the certificate expires. Enter a value that is equal to or lower than the validity period shown in the certificate template. Default is set at one year.","helpText":"","infoUrls":[],"categoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","categoryName":"SCEP certificate","options":null},"483b9bff1946f6b7":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":null},"4883de9dc7b88c2f":{"id":"user_vendor_msft_policy_config_admx_icm_disablewebpnpdownload_1","displayName":"Turn off downloading of print drivers over HTTP (User)","description":"This policy setting specifies whether to allow this client to download print driver packages over HTTP.\r\n\r\nTo set up HTTP printing, non-inbox drivers need to be downloaded over HTTP.\r\n\r\nNote: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. It only prohibits downloading drivers that are not already installed locally.\r\n\r\nIf you enable this policy setting, print drivers cannot be downloaded over HTTP.\r\n\r\nIf you disable or do not configure this policy setting, users can download print drivers over HTTP.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-disablewebpnpdownload-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_disablewebpnpdownload_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_disablewebpnpdownload_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4890bd7c70238cfd":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps","displayName":"Don't run specified Windows applications (User)","description":"Prevents Windows from running the programs you specify in this policy setting.\r\n\r\nIf you enable this policy setting, users cannot run programs that you add to the list of disallowed applications.\r\n\r\nIf you disable this policy setting or do not configure it, users can run any programs.\r\n\r\nThis policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.\r\n\r\nNote: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.\r\nNote: To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-disallowapps"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps_1","displayName":"Enabled","description":null,"helpText":null}]},"48e20b5e5ab8c54a":{"id":"user_vendor_msft_policy_config_admx_startmenu_desktopappsfirstinappsview","displayName":"List desktop apps first in the Apps view (User)","description":"This policy setting allows desktop apps to be listed first in the Apps view in Start.\r\n\r\nIf you enable this policy setting, desktop apps would be listed first when the apps are sorted by category in the Apps view. The other sorting options would continue to be available and the user could choose to change their default sorting options.\r\n\r\nIf you disable or don't configure this policy setting, the desktop apps won't be listed first when the apps are sorted by category, and the user can configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-desktopappsfirstinappsview"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_desktopappsfirstinappsview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_desktopappsfirstinappsview_1","displayName":"Enabled","description":null,"helpText":null}]},"482cd86f7c47c36c":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook","displayName":"Microsoft Outlook 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Outlook 2010.\r\nBy default, the user settings of Microsoft Outlook 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010outlook"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook_1","displayName":"Enabled","description":null,"helpText":null}]},"4829c46b07a0e051":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled","displayName":"Use User Experience Virtualization (UE-V) (User)","description":"This policy setting allows you to enable or disable User Experience Virtualization (UE-V). Only applies to Windows 10 or earlier.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncenabled"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"487fb7c5ffc85c75":{"id":"user_vendor_msft_policy_config_admx_wordwheel_customsearch_customsearch_urlprompt","displayName":"The URL to use when invoking the custom Internet search, with the search term indicated by \"%w\". (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"72972c43-36a3-4034-8cc8-334c99087798","categoryName":"Instant Search","options":null},"4802d0668851888a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_urlwhitelistdesc","displayName":"Allow access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"48f0074c77a1b63f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_relaunchfastifoutdated","displayName":"Time period (days): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"48a98069e0390a71":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders76","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders76_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders76_1","displayName":"True","description":null,"helpText":null}]},"4888dbb521ccc426":{"id":"user_vendor_msft_policy_config_internetexplorer_autodetectintranet","displayName":"Turn on automatic detection of intranet (User)","description":"This policy setting enables intranet mapping rules to be applied automatically if the computer belongs to a domain.\n\nIf you enable this policy setting, automatic detection of the intranet is turned on, and intranet mapping rules are applied automatically if the computer belongs to a domain.\n\nIf you disable this policy setting, automatic detection of the intranet is turned off, and intranet mapping rules are applied however they are configured.\n\nIf this policy setting is not configured, the user can choose whether or not to automatically detect the intranet through the intranet settings dialog in Control Panel.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-autodetectintranet"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_autodetectintranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_autodetectintranet_1","displayName":"Enabled","description":null,"helpText":null}]},"488488855ea0460e":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"48478350e42a8c42":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1","displayName":"Prevent users from running Microsoft Lync (User)","description":"\r\nPrevents users from running Microsoft Lync.\r\n\r\nIf you enable this policy setting, users cannot run Microsoft Lync.\r\n\r\nIf you disable or do not configure this policy setting, users can run Microsoft Lync.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1_1","displayName":"Enabled","description":null,"helpText":null}]},"48c3346e2b6f653a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch","displayName":"Enforce Bing SafeSearch (User)","description":"Ensure that queries in Bing web search are done with SafeSearch set to the value specified. Users can't change this setting.\r\n\r\nIf you configure this policy to \"Off\", SafeSearch in Bing search falls back to the bing.com value.\r\n\r\nIf you configure this policy to \"Moderate\", the moderate setting is used in SafeSearch. The moderate setting filters adult videos and images but not text from search results.\r\n\r\nIf you configure this policy to \"Strict\", the strict setting in SafeSearch is used. The strict setting filters adult text, images, and videos.\r\n\r\nIf you disable this policy or don't configure it, SafeSearch in Bing search isn't enforced, and users can set the value they want on bing.com.\r\n\r\n* 0 = Don't configure search restrictions in Bing\r\n\r\n* 1 = Configure moderate search restrictions in Bing\r\n\r\n* 2 = Configure strict search restrictions in Bing","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"488dcf4f5bdec400":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist","displayName":"Specifies a list of servers that Microsoft Edge can delegate user credentials to (User)","description":"Configure the list of servers that Microsoft Edge can delegate to.\r\n\r\nSeparate multiple server names with commas. Wildcards (*) are allowed.\r\n\r\nIf you don't configure this policy Microsoft Edge won't delegate user credentials even if a server is detected as Intranet.\r\n\r\nExample value: contoso.com","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"488787cb2a9dbf2b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings","displayName":"Proxy settings (User)","description":"Configures the proxy settings for Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge ignores all proxy-related options specified from the command line.\r\n\r\nIf you don't configure this policy, users can choose their own proxy settings.\r\n\r\nThis policy overrides the following individual policies:\r\n\r\n'ProxyMode' (Configure proxy server settings)\r\n'ProxyPacUrl' (Set the proxy .pac file URL)\r\n'ProxyServer' (Configure address or URL of proxy server)\r\n'ProxyBypassList' (Configure proxy bypass rules)\r\n\r\nThe ProxyMode field lets you specify the proxy server used by Microsoft Edge and prevents users from changing proxy settings.\r\n\r\nThe ProxyPacUrl field is a URL to a proxy .pac file.\r\n\r\nThe ProxyServer field is a URL for the proxy server.\r\n\r\nThe ProxyBypassList field is a list of proxy hosts that Microsoft Edge bypasses.\r\n\r\nIf you choose the 'direct' value as 'ProxyMode', a proxy is never used and all other fields are ignored.\r\n\r\nIf you choose the 'system' value as 'ProxyMode', the systems's proxy is used and all other fields are ignored.\r\n\r\nIf you choose the 'auto_detect' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'fixed_server' value as 'ProxyMode', the 'ProxyServer' and 'ProxyBypassList' fields are used.\r\n\r\nIf you choose the 'pac_script' value as 'ProxyMode', the 'ProxyPacUrl' and 'ProxyBypassList' fields are used.\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"direct\", \r\n \"ProxyPacUrl\": \"https://internal.site/example.pac\", \r\n \"ProxyServer\": \"123.123.123.123:8080\", \r\n \"ProxyBypassList\": \"https://www.example1.com,https://www.example2.com,https://internalsite/\"\r\n}","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"480ed0544298cc6e":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_cadistrustedcertificatesdesc","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"4824304284f91067":{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC (User)","description":"This policy controls the use of post-quantum key agreement for WebRTC in Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge will offer post-quantum key agreement for WebRTC.\r\n\r\nIf you disable this policy, post-quantum key agreement will not be offered for WebRTC.\r\n\r\nIf you don't configure this policy, post-quantum key agreement will not be offered for WebRTC. A future version of Microsoft Edge may enable this feature by default.\r\n\r\nOffering a post-quantum key agreement is backwards compatible. Existing datagram transport layer security (DTLS) peers and networking middleware are expected to ignore the new option and continue using previous options.\r\n\r\nHowever, devices that don't correctly implement DTLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or larger message sizes. Such devices aren’t post-quantum-ready and may interfere with an organization's post-quantum transition. If this issue occurs, administrators should contact the device vendor for a fix.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement_1","displayName":"Enabled","description":null,"helpText":null}]},"4837ea496fa4f056":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting","displayName":"Default sensors setting (User)","description":"Set whether websites can access and use sensors such as motion and light sensors. You can completely block or allow websites to get access to sensors.\r\n\r\nSetting the policy to 1 lets websites access and use sensors. Setting the policy to 2 denies access to sensors.\r\n\r\nYou can override this policy for specific URL patterns by using the 'SensorsAllowedForUrls' (Allow access to sensors on specific sites) and 'SensorsBlockedForUrls' (Block access to sensors on specific sites) policies.\r\n\r\nIf you don't configure this policy, websites can access and use sensors, and users can change this setting. This is the global default for 'SensorsAllowedForUrls' and 'SensorsBlockedForUrls'.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowSensors (1) = Allow sites to access sensors\r\n\r\n* BlockSensors (2) = Do not allow any site to access sensors\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"48fb3311d432c3e3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultbuttontext_l_defaultbuttontext350","displayName":"Default button text (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":null},"48ccb8b27593bb61":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_assameseindia","displayName":"Assamese (India) (User)","description":"Enables the editing language Assamese (India)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_assameseindia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_assameseindia_1","displayName":"Enabled","description":null,"helpText":null}]},"48d1b9740a57485b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_finnish","displayName":"Finnish (User)","description":"Enables the editing language Finnish","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_finnish_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_finnish_1","displayName":"Enabled","description":null,"helpText":null}]},"4885566f113db4e4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishnicaragua","displayName":"Spanish (Nicaragua) (User)","description":"Enables the editing language Spanish (Nicaragua)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishnicaragua_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishnicaragua_1","displayName":"Enabled","description":null,"helpText":null}]},"48f1526ff181d010":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_l_workflowdescrip495","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"48961af978f6536d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_enablecustomerexperienceimprovementprogram","displayName":"Enable Customer Experience Improvement Program (User)","description":"This policy setting controls whether users can participate in the Microsoft Office Customer Experience Improvement Program to help improve Microsoft Office. When users choose to participate in the Customer Experience Improvement Program (CEIP), Office 2016 applications automatically send information to Microsoft about how the applications are used. This information is combined with other CEIP data to help Microsoft solve problems and to improve the products and features customers use most often. This feature does not collect users' names, addresses, or any other identifying information except the IP address that is used to send the data. \r\n\r\nIf you enable this policy setting, users have the opportunity to opt into participation in the CEIP the first time they run an Office application. If your organization has policies that govern the use of external resources such as the CEIP, allowing users to opt in to the program might cause them to violate these policies. \r\n\r\nIf you disable this policy setting, Office 2016 users cannot participate in the Customer Experience Improvement Program. \r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to \"Enabled\".","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_enablecustomerexperienceimprovementprogram_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_enablecustomerexperienceimprovementprogram_1","displayName":"Enabled","description":null,"helpText":null}]},"4849eac1cc0ba8ac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsexcel","displayName":"Excel-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsexcel_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsexcel_1","displayName":"True","description":null,"helpText":null}]},"48e4b52654231720":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepersonalsync","displayName":"Prevent users from syncing personal OneDrive accounts (User)","description":"This setting lets you block users from signing in with a Microsoft account to sync their personal OneDrive files.\r\n\r\nIf you enable this setting, users will be prevented from setting up a sync relationship for their personal OneDrive account. Users who are already syncing their personal OneDrive when you enable this setting won't be able to continue syncing (and will be shown a message that syncing has stopped), but any files synced to the computer will remain on the computer.\r\n\r\nIf you disable or do not configure this setting, users can sync their personal OneDrive accounts.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepersonalsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepersonalsync_1","displayName":"Enabled","description":null,"helpText":null}]},"48188355a5c4e619":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofunfilednotessection","displayName":"Location of unfiled notes section (User)","description":"Location where OneNote stores the unfiled notes section.","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofunfilednotessection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofunfilednotessection_1","displayName":"Enabled","description":null,"helpText":null}]},"48194edf82ffe4e9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_lockedformregions","displayName":"Locked form regions (User)","description":"This policy setting allows you to configure adjoining form regions to be always expanded.\r\n\r\nIf you enable this policy setting, you may enter the adjoining form region name as the Value name and the Value data as \"1\" (without quotes). This ensures that users see the whole adjoining form region and cannot collapse it. This works for both Explorer and Inspector.\r\n\r\nIf you disable or do not configure this policy setting, adjoining form regions are not expanded.","helpText":"","infoUrls":[],"categoryId":"e0e10e94-325c-49e6-ab48-4f146254395f","categoryName":"Form Region Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_lockedformregions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_lockedformregions_1","displayName":"Enabled","description":null,"helpText":null}]},"483eefb59537c3f2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_msgunicodeformatwhendraggingtofilesystem_v2","displayName":"Use Unicode format when dragging e-mail message to file system (User)","description":"This policy setting controls whether e-mail messages dragged from Outlook to the file system are saved in Unicode or ANSI format. \r\n\r\nIf you enable or do not configure this policy setting, when users drag an e-mail message from Outlook to the file system, Outlook uses the Unicode character encoding standard to create the message file, which preserves special characters in the message. \r\n\r\nIf you disable this policy setting, when users drag an e-mail message from Outlook to the file system, the message file created is in ANSI format.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_msgunicodeformatwhendraggingtofilesystem_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_msgunicodeformatwhendraggingtofilesystem_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"488f9505fd2021d1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_deleteblankvotingandmeetingresponsesafterprocessing","displayName":"Delete blank voting and meeting responses after processing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","categoryName":"Tracking Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_deleteblankvotingandmeetingresponsesafterprocessing_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_deleteblankvotingandmeetingresponsesafterprocessing_1","displayName":"True","description":null,"helpText":null}]},"48943a67e20cb206":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_l_oomsend_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_l_oomsend_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_l_oomsend_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_l_oomsend_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_l_oomsend_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"4853afae1e6765b3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_defaultsharepointlists_l_empty35_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":null},"48e3cd3c382fb8b0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultstdrate","displayName":"Default standard rate (User)","description":"Specifies the standard pay rate for new resources.\r\n \r\nIf you enable this setting, all new resources will use the specified standard pay rate.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"0a6bc3ed-c4cd-4928-bcbf-247369a51515","categoryName":"General options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultstdrate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultstdrate_1","displayName":"Enabled","description":null,"helpText":null}]},"48ad14e731fe23dd":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_showtasksschedulesuggestions","displayName":"Show tasks schedule suggestions (User)","description":"This policy setting will allow the display of green task suggestions to indicate potential optimization.\r\n\r\nIf you enable this policy setting, a green task suggestion will be displayed to indicate potential problems.\r\n\r\nIf you disable or do not configure this policy setting, a green task suggestion will not be displayed to indicate potential problems.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_showtasksschedulesuggestions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_showtasksschedulesuggestions_1","displayName":"Enabled","description":null,"helpText":null}]},"48be19215787fffa":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngpasswordspincount","displayName":"Set CNG password spin count (User)","description":"This policy setting allows you to specify the number of times to spin (rehash) the password verifier.\r\n\r\nIf you enable this policy setting, the number specified will be the number of times the password will be rehashed.\r\n\r\nIf you disable or do not configure this policy setting, the default (100000) will be used.","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngpasswordspincount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngpasswordspincount_1","displayName":"Enabled","description":null,"helpText":null}]},"48fef1d0867e489c":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel","displayName":"Security Level (User)","description":"Specifies the level of security used when opening documents.\r\n\r\nIf you enable this policy setting, the security level you specified will be used when user open documents.\r\n\r\nIf you disable or do not configure this policy setting, the users default for this setting is followed.","helpText":"","infoUrls":[],"categoryId":"26dfd0a7-546b-4583-b0c7-85b98ac5a40c","categoryName":"Tools | Macro","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel_1","displayName":"Enabled","description":null,"helpText":null}]},"48daef3fa86da135":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_l_datecolon69","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"48d7ddf5efa42cf5":{"id":"user_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging","displayName":"Log script block invocation start / stop events: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging_1","displayName":"True","description":null,"helpText":null}]},"48b2123bd94ecb71":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingformergedandsplitcells","displayName":"Stop checking for merged and split cells (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables do not have merged or split cells.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables do not have merged or split cells.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for merged and split cells and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingformergedandsplitcells_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingformergedandsplitcells_1","displayName":"Enabled","description":null,"helpText":null}]},"48e275c3223b4e29":{"id":"vendor_msft_wirelessnetworkpreference_isenabled","displayName":"Is Enabled (Windows Insiders only)","description":"It determines whether the wireless connectivity management policy is enabled or not.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":[{"id":"vendor_msft_wirelessnetworkpreference_isenabled_false","displayName":"Disable the wireless management policy.","description":"Disable the wireless management policy.","helpText":null},{"id":"vendor_msft_wirelessnetworkpreference_isenabled_true","displayName":"Enable the wireless management policy.","description":"Enable the wireless management policy.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/49.json b/public/intune-definitions/49.json new file mode 100644 index 000000000000..0d0c551e5161 --- /dev/null +++ b/public/intune-definitions/49.json @@ -0,0 +1 @@ +{"49c0706662ca5ba8":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta","displayName":"Target version override","description":"When this policy is enabled, and auto-update is enabled, Microsoft Edge will be updated to the version specified by this policy value.\r\n\r\nThe policy value must be a specific Microsoft Edge version, e.g. 83.0.499.12.\r\n\r\nIf a device has newer version of Microsoft Edge than the value specified, Microsoft Edge will remain on the newer version and not downgrade to the specified version.\r\n\r\nIf the specified version does not exist, or is improperly formatted, then Microsoft Edge will remain on its current version and not update to future versions automatically.","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"49527647d335c01f":{"id":"com.apple.applicationaccess_forcewifitoallowednetworksonly","displayName":"Force WiFi To Allowed Networks Only","description":"If true, limits device to only join Wi-Fi networks set-up via configuration profile. Requires a supervised device. Available in iOS 14.5 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcewifitoallowednetworksonly_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcewifitoallowednetworksonly_true","displayName":"True","description":null,"helpText":null}]},"49fa1dc1d2733630":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_application id","displayName":"Microsoft PowerPoint Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"492ef7ce51a84378":{"id":"com.apple.systemconfiguration_proxies_httpsenable","displayName":"HTTPS Enable","description":"If true, enables secure web proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_httpsenable_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_httpsenable_1","displayName":"True","description":null,"helpText":null}]},"49e318cf1403919d":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"493c8d927b046987":{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit","displayName":"Clear cached images and files when Microsoft Edge closes","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\n\nIf you enable this policy, cached images and files are deleted each time Microsoft Edge closes.\n\nIf you disable this policy, users can't configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\n\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\n\nIf you disable this policy, don't enable the \"ClearBrowsingDataOnExit\" policy, because they both deal with deleting data. If you configure both, the \"ClearBrowsingDataOnExit\" policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured \"ClearCachedImagesAndFilesOnExit\".","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_true","displayName":"Enabled","description":null,"helpText":null}]},"49ad39c2902984ca":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurlpostparams_recommended","displayName":"Parameters for an image URL that uses POST (users can override)","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it's replaced with real image thumbnail data. This policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nSpecify Bing's Image Search URL Post Params as:\n'imageBin={google:imageThumbnailBase64}'.\n\nSpecify Google's Image Search URL Post Params as:\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\n\nIf you don't set this policy, image search requests are sent using the GET method.\n\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy can't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"49d976846eda6a7f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.discoverpagecontextenabled","displayName":"Enable Discover access to page contents for AAD profiles (Obsolete)","description":"This policy is obsolete as of Microsoft Edge version 127. Two new Microsoft Edge Policies took its place. Those policies are CopilotPageContext (Control Copilot access to page contents for AAD profiles) and CopilotCDPPageContext (Control Copilot with Commercial Data Protection access to page contents for AAD profiles).\n\nThis policy didn't allow for separate control of Copilot and Copilot with Commercial Data Protection. The new policies allow separate control of these versions of Copilot. The new policies also allow admins to force-enable Copilot access to Microsoft Edge page contents by enabling the policy, whereas DiscoverPageContextEnabled only allows force-disabling of Copilot page access.\n\nThis policy controls Discover access to page contents for AAD profiles. Discover is an extension that hosts Bing Chat. To summarize pages and interact with text selections, it must access the page contents. When enabled, page contents are sent to Bing. This policy doesn't affect MSA profiles.\n\nIf you enable or don't configure this policy, Discover has access to page contents.\n\nIf you disable this policy, Discover can't access page contents.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.discoverpagecontextenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.discoverpagecontextenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"495dcf846ed1863e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords","displayName":"Allow importing of saved passwords","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\n\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\n\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\n\nIf you don't configure this policy, no passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\n\nNote: This policy currently manages import from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_true","displayName":"Enabled","description":null,"helpText":null}]},"49cd22e741b34f97":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_recommended","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes (users can override)","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when the \"ClearBrowsingDataOnExit\" policy is enabled.\n\nIf you enable this policy, passwords aren't cleared when the browser closes.\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"492ec8cda7d02aa5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.trackingprevention","displayName":"Block tracking of users' web-browsing activity","description":"Lets you decide whether to block websites from tracking users' web-browsing activity.\n\nIf you disable this policy or don't configure it, users set their own level of tracking prevention.\n\nPolicy options mapping:\n\n* TrackingPreventionOff (0) = Off (no tracking prevention)\n\n* TrackingPreventionBasic (1) = Basic (blocks harmful trackers, content and ads will be personalized)\n\n* TrackingPreventionBalanced (2) = Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)\n\n* TrackingPreventionStrict (3) = Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.trackingprevention_trackingpreventionoff","displayName":"Off (no tracking prevention)","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.trackingprevention_trackingpreventionbasic","displayName":"Basic (blocks harmful trackers, content and ads will be personalized)","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.trackingprevention_trackingpreventionbalanced","displayName":"Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.trackingprevention_trackingpreventionstrict","displayName":"Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)","description":null,"helpText":null}]},"491675504f96eb11":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions","displayName":"Choose how BitLocker-protected operating system drives can be recovered","description":"This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the required startup key information. This policy setting is applied when you turn on BitLocker.\n\nThe \"Allow certificate-based data recovery agent\" check box is used to specify whether a data recovery agent can be used with BitLocker-protected operating system drives. Before a data recovery agent can be used it must be added from the Public Key Policies item in either the Group Policy Management Console or the Local Group Policy Editor. Consult the BitLocker Drive Encryption Deployment Guide on Microsoft TechNet for more information about adding data recovery agents.\n\nIn \"Configure user storage of BitLocker recovery information\" select whether users are allowed, required, or not allowed to generate a 48-digit recovery password or a 256-bit recovery key.\n\nSelect \"Omit recovery options from the BitLocker setup wizard\" to prevent users from specifying recovery options when they turn on BitLocker on a drive. This means that you will not be able to specify which recovery option to use when you turn on BitLocker, instead BitLocker recovery options for the drive are determined by the policy setting.\n\nIn \"Save BitLocker recovery information to Active Directory Domain Services\", choose which BitLocker recovery information to store in AD DS for operating system drives. If you select \"Backup recovery password and key package\", both the BitLocker recovery password and key package are stored in AD DS. Storing the key package supports recovering data from a drive that has been physically corrupted. If you select \"Backup recovery password only,\" only the recovery password is stored in AD DS.\n\nSelect the \"Do not enable BitLocker until recovery information is stored in AD DS for operating system drives\" check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds.\n\nNote: If the \"Do not enable BitLocker until recovery information is stored in AD DS for operating system drives\" check box is selected, a recovery password is automatically generated.\n\nIf you enable this policy setting, you can control the methods available to users to recover data from BitLocker-protected operating system drives.\n\nIf this policy setting is disabled or not configured, the default recovery options are supported for BitLocker recovery. By default a DRA is allowed, the recovery options can be specified by the user including the recovery password and recovery key, and recovery information is not backed up to AD DS.\n\n","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"49835ec03aa37d59":{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeapplicationcontenturirules_listbox_contenturirules","displayName":"Content URI Rules:","description":null,"helpText":"","infoUrls":[],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":null},"49c6e234123c7f3f":{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassl2r","displayName":"Local Link to a Remote Target","description":null,"helpText":"","infoUrls":[],"categoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","categoryName":"Filesystem","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassl2r_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassl2r_1","displayName":"True","description":null,"helpText":null}]},"49e80a53280a81f7":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_userpolicymode","displayName":"Configure user Group Policy loopback processing mode","description":"This policy setting directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this setting. It is intended for special-use computers, such as those in public places, laboratories, and classrooms, where you must modify the user setting based on the computer that is being used.\r\n\r\nBy default, the user's Group Policy Objects determine which user settings apply. If this setting is enabled, then, when a user logs on to this computer, the computer's Group Policy Objects determine which set of Group Policy Objects applies.\r\n\r\nIf you enable this setting, you can select one of the following modes from the Mode box:\r\n\r\n\"Replace\" indicates that the user settings defined in the computer's Group Policy Objects replace the user settings normally applied to the user.\r\n\r\n\"Merge\" indicates that the user settings defined in the computer's Group Policy Objects and the user settings normally applied to the user are combined. If the settings conflict, the user settings in the computer's Group Policy Objects take precedence over the user's normal settings.\r\n\r\nIf you disable this setting or do not configure it, the user's Group Policy Objects determines which user settings apply.\r\n\r\nNote: This setting is effective only when both the computer account and the user account are in at least Windows 2000 domains.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-userpolicymode"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_userpolicymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_userpolicymode_1","displayName":"Enabled","description":null,"helpText":null}]},"497b5552ca38bf97":{"id":"device_vendor_msft_policy_config_admx_printing_donotinstallcompatibledriverfromwindowsupdate","displayName":"Extend Point and Print connection to search Windows Update","description":"This policy setting allows you to manage where client computers search for Point and Printer drivers.\r\n\r\nIf you enable this policy setting, the client computer will continue to search for compatible Point and Print drivers from Windows Update after it fails to find the compatible driver from the local driver store and the server driver cache.\r\n\r\nIf you disable this policy setting, the client computer will only search the local driver store and server driver cache for compatible Point and Print drivers. If it is unable to find a compatible driver, then the Point and Print connection will fail.\r\n\r\nThis policy setting is not configured by default, and the behavior depends on the version of Windows that you are using.\r\nBy default, Windows Ultimate, Professional and Home SKUs will continue to search for compatible Point and Print drivers from Windows Update, if needed. However, you must explicitly enable this policy setting for other versions of Windows (for example Windows Enterprise, and all versions of Windows Server 2008 R2 and later) to have the same behavior.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-donotinstallcompatibledriverfromwindowsupdate"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_donotinstallcompatibledriverfromwindowsupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_donotinstallcompatibledriverfromwindowsupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"49c3f9be48c8e2f3":{"id":"device_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_2","displayName":"Turn off the Store application","description":"Denies or allows access to the Store application.\r\n\r\nIf you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.\r\n\r\nIf you disable or don't configure this setting, access to the Store application is allowed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsstore#admx-windowsstore-removewindowsstore-2"],"categoryId":"be9bdbec-b52e-4174-9c5b-cf765dee855b","categoryName":"Store","options":[{"id":"device_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_2_1","displayName":"Enabled","description":null,"helpText":null}]},"49327ee80b5fa556":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_autoopenfiletypesdesc","displayName":"List of file types that should be automatically opened on download (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"49ddbefd92d53a8d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_explicitlyallowednetworkportsdesc","displayName":"Explicitly allowed network ports (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"49aab8d7a5987075":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability","displayName":"Profile picker availability on startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_0","displayName":"Profile picker available at startup","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_1","displayName":"Profile picker disabled at startup","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_2","displayName":"Profile picker forced at startup","description":null,"helpText":null}]},"4915ae5e70c84c33":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_defaultsearchprovidericonurl","displayName":"Default search provider icon (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"490209ddd78385f1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings","displayName":"Extension management settings","description":"Setting the policy controls extension management settings for Google Chrome, including any controlled by existing extension-related policies. The policy supersedes any legacy policies that might be set.\r\n\r\nThis policy maps an extension ID or an update URL to its specific setting only. A default configuration can be set for the special ID \"*\", which applies to all extensions without a custom configuration in this policy. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest ( http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy ). If the 'override_update_url' flag is set to true, the extension is installed and updated using the \"update\" URL specified in the ExtensionInstallForcelist policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is a Chrome Web Store url.\r\n\r\nNote: For Windows® instances not joined to a Microsoft® Active Directory® domain, forced installation is limited to apps and extensions listed in the Chrome Web Store.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"abcdefghijklmnopabcdefghijklmnop\": {\r\n \"installation_mode\": \"allowed\",\r\n \"blocked_permissions\": [\r\n \"history\"\r\n ],\r\n \"minimum_version_required\": \"1.0.1\",\r\n \"toolbar_pin\": \"force_pinned\"\r\n },\r\n \"bcdefghijklmnopabcdefghijklmnopa\": {\r\n \"installation_mode\": \"force_installed\",\r\n \"update_url\": \"https://example.com/update_url\",\r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ],\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.example.com\"\r\n ],\r\n \"runtime_allowed_hosts\": [\r\n \"*://good.example.com\"\r\n ]\r\n },\r\n \"cdefghijklmnopabcdefghijklmnopab\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_install_message\": \"Custom error message.\"\r\n },\r\n \"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_install_message\": \"Custom error message.\"\r\n },\r\n \"update_url:https://www.example.com/update.xml\": {\r\n \"blocked_permissions\": [\r\n \"wallpaper\"\r\n ],\r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ],\r\n \"installation_mode\": \"allowed\"\r\n },\r\n \"fghijklmnopabcdefghijklmnopabcde\": {\r\n \"installation_mode\": \"removed\",\r\n \"blocked_install_message\": \"Custom removal message.\"\r\n },\r\n \"ghijklmnopabcdefghijklmnopabcdef\": {\r\n \"installation_mode\": \"force_installed\",\r\n \"update_url\": \"https://example.com/update_url\",\r\n \"override_update_url\": true\r\n },\r\n \"*\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_permissions\": [\r\n \"downloads\",\r\n \"bookmarks\"\r\n ],\r\n \"install_sources\": [\r\n \"https://company-intranet/chromeapps\"\r\n ],\r\n \"allowed_types\": [\r\n \"hosted_app\"\r\n ],\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.example.com\"\r\n ],\r\n \"runtime_allowed_hosts\": [\r\n \"*://good.example.com\"\r\n ],\r\n \"blocked_install_message\": \"Custom error message.\"\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"491c3e1beaad9fa6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls_filehandlingblockedforurlsdesc","displayName":"Block the File Handling API on these web apps (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"499ddb3fe9c7cf5f":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization","displayName":"Include Outlook Personalization","description":"[ENABLED BY DEFAULT]\r\n\r\nOutlook personalization data will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOutlookPersonalization\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization_1","displayName":"Enabled","description":null,"helpText":null}]},"4928a837121f0728":{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist","displayName":"Add-on List","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"492db2ce0b51ec98":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials","displayName":"Require logon credentials","description":"\r\nRequires the user to provide logon credentials for Microsoft Lync rather than automatically using the Windows credentials when Microsoft Lync authenticates the user using NTLM or Kerberos.\r\n\r\nIf you enable this policy setting, Microsoft Lync requires the user to provide logon credentials.\r\n\r\nIf you disable or do not configure this policy setting, Microsoft Lync authenticates the user based on the logon credentials for Windows.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1","displayName":"Enabled","description":null,"helpText":null}]},"497705a2ed952037":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks","displayName":"Enable online OCSP/CRL checks","description":"Online revocation checks don't provide a significant security benefit and are disabled by default.\r\n\r\nIf you enable this policy, Microsoft Edge will perform soft-fail, online OCSP/CRL checks. \"Soft fail\" means that if the revocation server can't be reached, the certificate will be considered valid.\r\n\r\nIf you disable the policy or don't configure it, Microsoft Edge won't perform online revocation checks.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_1","displayName":"Enabled","description":null,"helpText":null}]},"492b266927fb4178":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch","displayName":"Enforce Bing SafeSearch (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_0","displayName":"Don't configure search restrictions in Bing","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_1","displayName":"Configure moderate search restrictions in Bing","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_2","displayName":"Configure strict search restrictions in Bing","description":null,"helpText":null}]},"49243d6ef11de6f3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user has entered so far.\r\n\r\nThis policy is optional. If you don't configure it, users won't see search suggestions; they will see suggestions from their browsing history and favorites.\r\n\r\nBing's suggest URL can be specified as:\r\n\r\n'{bing:baseURL}qbox?query={searchTerms}'.\r\n\r\nGoogle's suggest URL can be specified as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: https://search.contoso.com/suggest?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_1","displayName":"Enabled","description":null,"helpText":null}]},"491f607d46c56e35":{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc","displayName":"List of origins that allow all HTTP authentication (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"4978dc958a5de515":{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls","displayName":"Block sites from making requests to local network endpoints.","description":"List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.\r\n\r\nIf an origin is covered by both this policy and by 'LocalNetworkAccessAllowedForUrls' (Allow sites to make requests to local network endpoints.), this policy takes precedence.\r\n\r\nDepending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.\r\n\r\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\r\n\r\nFor detailed information on valid URL patterns, please see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\r\n\r\nNote: This policy improves local network security by blocking specified public websites from accessing private IP addresses. It helps prevent unauthorized external sites from reaching internal resources unless explicitly permitted. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"492fd606333b4c74":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports","displayName":"Explicitly allowed network ports","description":"There is a list of restricted ports built into Microsoft Edge. Connections to these ports will fail. This policy allows bypassing that list. The set of ports is defined as a comma-separated list that outgoing connections should be permitted on.\r\n\r\nPorts are restricted to prevent Microsoft Edge from being used as a vector to exploit various network vulnerabilities. Setting this policy may expose your network to attacks. This policy is intended as a temporary workaround for error code \"ERR_UNSAFE_PORT\" while migrating a service running on a blocked port to a standard port (for example port 80 or 443).\r\n\r\nMalicious websites can easily detect that this policy is set, and for which ports, then use that information to target attacks.\r\n\r\nEach port listed in this policy is labeled with a date that it can be unblocked until. After that date the port will be restricted regardless of if it's specified by the value of this policy.\r\n\r\nLeaving the value empty or unset means that all restricted ports will be blocked. Invalid port values set through this policy will be ignored while valid ones will still be applied.\r\n\r\nThis policy overrides the \"--explicitly-allowed-ports\" command-line option.\r\n\r\nPolicy options mapping:\r\n\r\n* 554 (554) = port 554 (can be unblocked until 2021/10/15)\r\n\r\n* 10080 (10080) = port 10080 (can be unblocked until 2022/04/01)\r\n\r\n* 6566 (6566) = port 6566 (can be unblocked until 2021/10/15)\r\n\r\n* 989 (989) = port 989 (can be unblocked until 2022/02/01)\r\n\r\n* 990 (990) = port 990 (can be unblocked until 2022/02/01)\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\n10080","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_1","displayName":"Enabled","description":null,"helpText":null}]},"4925205a5eba28ec":{"id":"device_vendor_msft_policy_config_mssecurityguide_enablestructuredexceptionhandlingoverwriteprotection","displayName":"Enable Structured Exception Handling Overwrite Protection (SEHOP)","description":"If this setting is enabled, SEHOP is enforced. For more information, see https://support.microsoft.com/en-us/help/956607/how-to-enable-structured-exception-handling-overwrite-protection-sehop-in-windows-operating-systems.\n\nIf this setting is disabled or not configured, SEHOP is not enforced for 32-bit processes.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-enablestructuredexceptionhandlingoverwriteprotection"],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_enablestructuredexceptionhandlingoverwriteprotection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_enablestructuredexceptionhandlingoverwriteprotection_1","displayName":"Enabled","description":null,"helpText":null}]},"49517dc7fc6b6f7a":{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_pictures_checkbox","displayName":"Pictures (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_pictures_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_pictures_checkbox_1","displayName":"True","description":null,"helpText":null}]},"49f164b894406ce6":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_sharepointonpremprioritization_dropdown","displayName":"Authenticate first against: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_sharepointonpremprioritization_dropdown_0","displayName":"SharePoint Online","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_sharepointonpremprioritization_dropdown_1","displayName":"SharePoint Server 2019","description":null,"helpText":null}]},"49a8bb1b03904c4c":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig_disableautoconfigtypes","displayName":"Disabled Account Types: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"49e682c1ebb64fdc":{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery","displayName":"Select Power Button Action On Battery","description":"This policy setting specifies the action that Windows takes when a user presses the power button. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectpowerbuttonactiononbattery"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},"49c50140298175aa":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_forcedenytheseapps","displayName":"Let Apps Access Calendar Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"499f6f013d85f1a0":{"id":"device_vendor_msft_policy_config_start_hidelock","displayName":"Hide Lock","description":"Enabling this policy hides \"Lock\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidelock"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidelock_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidelock_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"49b9d9936aa9b426":{"id":"device_vendor_msft_policy_config_start_hiderestart","displayName":"Hide Restart","description":"Enabling this policy hides \"Restart/Update and restart\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderestart"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hiderestart_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hiderestart_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"49f325080f5ffdc9":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadtenantid","displayName":"Azure AD Directory ID:","description":"","helpText":"","infoUrls":[],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":null},"49a4a81390a13ef5":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},"49ca135cbd54f81f":{"id":"enrollment_autopilot_dpp_language","displayName":"Language (Region)","description":"Specify the language and region that will be used.","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_language_0","displayName":"Operating system default","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_1","displayName":"User select","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_2","displayName":"Arabic (U.A.E.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_3","displayName":"Arabic (Bahrain)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_4","displayName":"Arabic (Algeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_5","displayName":"Arabic (Egypt)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_6","displayName":"Arabic (Iraq)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_7","displayName":"Arabic (Jordan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_8","displayName":"Arabic (Kuwait)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_9","displayName":"Arabic (Lebanon)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_10","displayName":"Arabic (Libya)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_11","displayName":"Arabic (Morocco)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_12","displayName":"Arabic (Oman)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_13","displayName":"Arabic (Qatar)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_14","displayName":"Arabic (Saudi Arabia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_15","displayName":"Arabic (Syria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_16","displayName":"Arabic (Tunisia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_17","displayName":"Arabic (Yemen)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_18","displayName":"Azerbaijani (Cyrillic, Azerbaijan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_19","displayName":"Azerbaijani (Latin, Azerbaijan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_20","displayName":"Bangla (Bangladesh)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_21","displayName":"Bangla (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_22","displayName":"Bosnian (Cyrillic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_23","displayName":"Bosnian (Latin)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_24","displayName":"Chinese (PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_25","displayName":"Chinese (Hong Kong S.A.R.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_26","displayName":"Chinese (Macao S.A.R.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_27","displayName":"Chinese (Singapore)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_28","displayName":"Chinese (Taiwan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_29","displayName":"Croatian (Latin)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_30","displayName":"Croatian (Croatia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_31","displayName":"Dutch (Belgium)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_32","displayName":"Dutch (Netherlands)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_33","displayName":"English (Australia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_34","displayName":"English (Belize)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_35","displayName":"English (Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_36","displayName":"English (Caribbean)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_37","displayName":"English (Ireland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_38","displayName":"English (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_39","displayName":"English (Jamaica)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_40","displayName":"English (Malaysia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_41","displayName":"English (New Zealand)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_42","displayName":"English (Republic of the Philippines)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_43","displayName":"English (Singapore)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_44","displayName":"English (Trinidad and Tobago)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_45","displayName":"English (United Kingdom)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_46","displayName":"English (United States)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_47","displayName":"English (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_48","displayName":"English (Zimbabwe)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_49","displayName":"French (Belgium)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_50","displayName":"French (Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_51","displayName":"French (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_52","displayName":"French (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_53","displayName":"French (Luxembourg)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_54","displayName":"French (Monaco)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_55","displayName":"German (Austria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_56","displayName":"German (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_57","displayName":"German (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_58","displayName":"German (Liechtenstein)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_59","displayName":"German (Luxembourg)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_60","displayName":"Inuktitut (Syllabics, Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_61","displayName":"Inuktitut (Latin, Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_62","displayName":"Italian (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_63","displayName":"Italian (Italy)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_64","displayName":"Malay (Brunei Darussalam)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_65","displayName":"Malay (Malaysia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_66","displayName":"Mongolian (Traditional Mongolian, PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_67","displayName":"Mongolian (Cyrillic, Mongolia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_68","displayName":"Norwegian (Bokmål)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_69","displayName":"Norwegian (Nynorsk)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_70","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_71","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_72","displayName":"Quechua (Bolivia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_73","displayName":"Quechua (Ecuador)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_74","displayName":"Quechua (Peru)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_75","displayName":"Sami, Lule (Norway)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_76","displayName":"Sami, Lule (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_77","displayName":"Sami, Northern (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_78","displayName":"Sami, Northern (Norway)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_79","displayName":"Sami, Northern (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_80","displayName":"Sami, Southern (Norway)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_81","displayName":"Sami, Southern (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_82","displayName":"Sami, Inari (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_83","displayName":"Sami, Skolt (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_84","displayName":"Afrikaans (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_85","displayName":"Albanian (Albania)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_86","displayName":"Alsatian (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_87","displayName":"Amharic (Ethiopia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_88","displayName":"Armenian (Armenia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_89","displayName":"Assamese (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_90","displayName":"Bashkir (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_91","displayName":"Basque (Basque)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_92","displayName":"Belarusian (Belarus)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_93","displayName":"Breton (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_94","displayName":"Bulgarian (Bulgaria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_95","displayName":"Catalan (Catalan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_96","displayName":"Corsican (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_97","displayName":"Czech (Czech Republic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_98","displayName":"Danish (Denmark)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_99","displayName":"Dari (Afghanistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_100","displayName":"Divehi (Maldives)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_101","displayName":"Estonian (Estonia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_102","displayName":"Faroese (Faroe Islands)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_103","displayName":"Filipino (Philippines)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_104","displayName":"Finnish (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_105","displayName":"Frisian (Netherlands)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_106","displayName":"Galician (Galician)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_107","displayName":"Georgian (Georgia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_108","displayName":"Greek (Greece)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_109","displayName":"Greenlandic (Greenland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_110","displayName":"Gujarati (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_111","displayName":"Hausa (Latin, Nigeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_112","displayName":"Hebrew (Israel)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_113","displayName":"Hindi (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_114","displayName":"Hungarian (Hungary)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_115","displayName":"Icelandic (Iceland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_116","displayName":"Igbo (Nigeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_117","displayName":"Indonesian (Indonesia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_118","displayName":"Irish (Ireland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_119","displayName":"isiXhosa (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_120","displayName":"isiZulu (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_121","displayName":"Japanese (Japan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_122","displayName":"Kannada (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_123","displayName":"Kazakh (Kazakhstan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_124","displayName":"Khmer (Cambodia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_125","displayName":"K'iche (Guatemala)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_126","displayName":"Kinyarwanda (Rwanda)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_127","displayName":"Kiswahili (Kenya)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_128","displayName":"Konkani (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_129","displayName":"Korean (Korea)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_130","displayName":"Kyrgyz (Kyrgyzstan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_131","displayName":"Lao (Lao P.D.R.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_132","displayName":"Latvian (Latvia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_133","displayName":"Lithuanian (Lithuania)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_134","displayName":"Lower Sorbian (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_135","displayName":"Luxembourgish (Luxembourg)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_136","displayName":"Macedonian (Macedonia, FYRO)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_137","displayName":"Malayalam (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_138","displayName":"Maltese (Malta)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_139","displayName":"Maori (New Zealand)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_140","displayName":"Mapudungun (Chile)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_141","displayName":"Marathi (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_142","displayName":"Mohawk (Mohawk)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_143","displayName":"Nepali (Nepal)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_144","displayName":"Occitan (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_145","displayName":"Odia (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_146","displayName":"Pashto (Afghanistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_147","displayName":"Persian","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_148","displayName":"Polish (Poland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_149","displayName":"Punjabi (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_150","displayName":"Romanian (Romania)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_151","displayName":"Romansh (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_152","displayName":"Russian (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_153","displayName":"Sanskrit (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_154","displayName":"Sesotho sa Leboa (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_156","displayName":"Setswana (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_157","displayName":"Sinhala (Sri Lanka)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_158","displayName":"Slovak (Slovakia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_159","displayName":"Slovenian (Slovenia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_160","displayName":"Swedish (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_161","displayName":"Syriac (Syria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_162","displayName":"Tajik (Cyrillic, Tajikistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_163","displayName":"Tamazight (Latin, Algeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_164","displayName":"Tamil (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_165","displayName":"Tatar (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_166","displayName":"Telugu (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_167","displayName":"Thai (Thailand)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_168","displayName":"Tibetan","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_169","displayName":"Turkish (Turkey)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_170","displayName":"Turkmen (Turkmenistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_171","displayName":"Uighur (PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_172","displayName":"Ukrainian (Ukraine)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_173","displayName":"Urdu (Islamic Republic of Pakistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_174","displayName":"Vietnamese (Vietnam)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_175","displayName":"Welsh (United Kingdom)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_176","displayName":"Wolof (Senegal)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_177","displayName":"Yakut (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_178","displayName":"Yi (PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_179","displayName":"Yoruba (Nigeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_180","displayName":"Serbian (Cyrillic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_181","displayName":"Serbian (Cyrillic, Serbia and Montenegro)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_182","displayName":"Serbian (Latin)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_183","displayName":"Serbian (Latin, Serbia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_184","displayName":"Lower Sorbian (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_185","displayName":"Upper Sorbian (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_186","displayName":"Spanish (Spain, Traditional Sort)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_187","displayName":"Spanish (Argentina)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_188","displayName":"Spanish (Bolivia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_189","displayName":"Spanish (Chile)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_190","displayName":"Spanish (Colombia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_191","displayName":"Spanish (Costa Rica)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_192","displayName":"Spanish (Dominican Republic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_193","displayName":"Spanish (Ecuador)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_194","displayName":"Spanish (Guatemala)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_195","displayName":"Spanish (Honduras)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_196","displayName":"Spanish (Mexico)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_197","displayName":"Spanish (Nicaragua)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_198","displayName":"Spanish (Panama)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_199","displayName":"Spanish (Peru)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_200","displayName":"Spanish (Puerto Rico)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_201","displayName":"Spanish (Paraguay)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_202","displayName":"Spanish (El Salvador)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_203","displayName":"Spanish (United States)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_204","displayName":"Spanish (Uruguay)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_205","displayName":"Spanish (Venezuela)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_206","displayName":"Swedish (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_207","displayName":"Uzbek (Cyrillic, Uzbekistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_208","displayName":"Uzbek (Latin, Uzbekistan)","description":null,"helpText":null}]},"4905455d2c13d7cb":{"id":"mathsettings_calculator_programmermode_enabled","displayName":"Enabled","description":"Controls whether the mode is enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":[{"id":"mathsettings_calculator_programmermode_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_programmermode_enabled_true","displayName":"True","description":null,"helpText":null}]},"493e4cd6c180589d":{"id":"settings_item_mdmoptions_mdmoptions_promptusertoallowbootstraptokenforauthentication","displayName":"Prompt User To Allow Bootstrap Token For Authentication","description":"If `true`, warn the user that they need to reboot into RecoveryOS and allow the MDM server to use the Bootstrap Token for authentication for certain sensitive operations; for example, enabling kernel extensions or installing certain types of software updates. Set this value to `false` if your MDM server doesn't need to perform these operations. The value provided here overrides the value specified in MDM, and only applies when `BootstrapTokenAllowedForAuthentication` is `true` in the `SecurityInfo` response. This value is available for a Mac with Apple silicon in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"dd68a290-1ba7-470f-afca-339f443a767c","categoryName":"MDM Options","options":[{"id":"settings_item_mdmoptions_mdmoptions_promptusertoallowbootstraptokenforauthentication_false","displayName":"Blocked","description":null,"helpText":null},{"id":"settings_item_mdmoptions_mdmoptions_promptusertoallowbootstraptokenforauthentication_true","displayName":"Allowed","description":null,"helpText":null}]},"494eabf785d1c280":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_dragdropclose","displayName":"Prevent adding, dragging, dropping and closing the Taskbar's toolbars (User)","description":"Prevents users from manipulating desktop toolbars.\r\n\r\nIf you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.\r\n\r\nNote: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.\r\n\r\nTip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to \"Toolbars.\"\r\n\r\nAlso, see the \"Prohibit adjusting desktop toolbars\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-db-dragdropclose"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_dragdropclose_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_dragdropclose_1","displayName":"Enabled","description":null,"helpText":null}]},"49a99805b3f8bfce":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_1","displayName":"Prevent use of Offline Files folder (User)","description":"Disables the Offline Files folder.\r\n\r\nThis setting disables the \"View Files\" button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view or open copies of network files stored on their computer. Also, they cannot use the folder to view characteristics of offline files, such as their server status, type, or location.\r\n\r\nThis setting does not prevent users from working offline or from saving local copies of files available offline. Also, it does not prevent them from using other programs, such as Windows Explorer, to view their offline files.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To view the Offline Files Folder, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click \"View Files.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nocacheviewer-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_1_1","displayName":"Enabled","description":null,"helpText":null}]},"499a1338200b6c7e":{"id":"user_vendor_msft_policy_config_admx_startmenu_noclose","displayName":"Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands (User)","description":"This policy setting prevents users from performing the following commands from the Start menu or Windows Security screen: Shut Down, Restart, Sleep, and Hibernate. This policy setting does not prevent users from running Windows-based programs that perform these functions.\r\n\r\nIf you enable this policy setting, the Power button and the Shut Down, Restart, Sleep, and Hibernate commands are removed from the Start menu. The Power button is also removed from the Windows Security screen, which appears when you press CTRL+ALT+DELETE.\r\n\r\nIf you disable or do not configure this policy setting, the Power button and the Shut Down, Restart, Sleep, and Hibernate commands are available on the Start menu. The Power button on the Windows Security screen is also available.\r\n\r\nNote: Third-party programs certified as compatible with Microsoft Windows Vista, Windows XP SP2, Windows XP SP1, Windows XP, or Windows 2000 Professional are required to support this policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noclose"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noclose_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noclose_1","displayName":"Enabled","description":null,"helpText":null}]},"49adf89ffedacd43":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2_trusted_certificate_thumbprints","displayName":"Comma-separated list of SHA1 trusted certificate thumbprints: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":null},"491fc5ac7ea82dce":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-intranetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"49b83d32b8bcbc9a":{"id":"user_vendor_msft_policy_config_browser_disablelockdownofstartpages","displayName":"Disable Lockdown Of Start Pages (User)","description":"You can configure Microsoft Edge to disable the lockdown of Start pages allowing users to change or customize their start pages. To do this, you must also enable the Configure Start Pages or Configure Open Microsoft With policy. When enabled, all configured start pages are editable. Any Start page configured using the Configure Start pages policy is not locked down allowing users to edit their Start pages. If disabled or not configured, the Start pages configured in the Configure Start Pages policy cannot be changed and remain locked down. Supported devices: Domain-joined or MDM-enrolled Related policy: - Configure Start Pages - Configure Open Microsoft Edge With","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#disablelockdownofstartpages"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_disablelockdownofstartpages_0","displayName":"Disabled","description":"Lock down Start pages configured in either the ConfigureOpenEdgeWith policy and HomePages policy.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_disablelockdownofstartpages_1","displayName":"Enabled","description":"Unlocked. Users can make changes to all configured start pages.","helpText":null}]},"4976ead7c011ffdb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled","displayName":"Enable Get Image Descriptions from Google. (User)","description":"The Get Image Descriptions from Google\r\naccessibility feature enables visually-impaired screen reader users to\r\nget descriptions of unlabeled images on the web. Users who choose to enable it\r\nwill have the option of using an anonymous Google service to provide\r\nautomatic descriptions for unlabeled images they encounter on the web.\r\n\r\nIf this feature is enabled, the content of images will be sent to Google\r\nservers in order to generate a description. No cookies or other user\r\ndata is sent, and Google does not save or log any image content.\r\n\r\nIf this policy is set to Enabled, the\r\nGet Image Descriptions from Google\r\nfeature will be enabled, though it will only affect users who are using a\r\nscreen reader or other similar assistive technology.\r\n\r\nIf this policy is set to Disabled, users will not have the option of enabling\r\nthe feature.\r\n\r\nIf this policy is not set, user can choose to use this feature or not.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"49b74d3d77fd941d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts. (User)","description":"List of URL patterns. Private network requests initiated from insecure websites served by matching origins are allowed.\r\n\r\nIf unset, this policy behaves as if set to the empty list.\r\n\r\nFor origins not covered by the patterns specified here, the global default value will be used either from the InsecurePrivateNetworkRequestsAllowed policy, if it is set, or the user's personal configuration otherwise.\r\n\r\nNote that this policy only affects insecure origins, so secure origins (e.g. https://example.com) included in this list will be ignored.\r\n\r\nFor detailed information on valid URL patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4989a12d25ad7690":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors","displayName":"Require online OCSP/CRL checks for local trust anchors (User)","description":"Setting the policy to True means Google Chrome always performs revocation checking for successfully validated server certificates signed by locally installed CA certificates. If Google Chrome can't get revocation status information, Google Chrome treats these certificates as revoked (hard-fail).\r\n\r\nSetting the policy to False or leaving it unset means Google Chrome uses existing online revocation-checking settings.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"49ead5276610c27c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls","displayName":"Block insecure content on these sites (User)","description":"Allows you to set a list of url patterns that specify sites which are not allowed to display blockable (i.e. active) mixed content (i.e. HTTP content on HTTPS sites), and for which optionally blockable (i.e. passive) mixed content will be upgraded.\r\n\r\nIf this policy is left not set blockable mixed content will be blocked and optionally blockable mixed content will be upgraded, but users will be allowed to set exceptions to allow it for specific sites.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4992d102fcc29af0":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls","displayName":"Allow automatic fullscreen on these sites (User)","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail. Users' personal settings may allow certain origins to call\r\nthis API without a prior user gesture, as described in\r\nhttps://chromestatus.com/feature/6218822004768768.\r\n\r\nThis policy supersedes users' personal settings and allows matching origins to\r\ncall the API without a prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy nor user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"49aef6bd88cbf88c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates","displayName":"Excel 95-97 workbooks and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"49fbdb2a38800b98":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders8","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders8_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders8_1","displayName":"True","description":null,"helpText":null}]},"49c5db9aa2e6d43a":{"id":"user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_daystokeep_prompt","displayName":"Days to keep pages in History (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","categoryName":"Delete Browsing History","options":null},"493c14afed95f612":{"id":"user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_secondaryhomepageslist","displayName":"Secondary home pages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":null},"49daf3f9ab3291ac":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"49a9e8a466c1ce0c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled","displayName":"Use built-in DNS client (User)","description":"Controls whether to use the built-in DNS client.\r\n\r\nThis does not affect which DNS servers are used; just the software stack which is used to communicate with them. For example if the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It is however possible that the built-in DNS client will address servers in different ways by using more modern DNS-related protocols such as DNS-over-TLS.\r\n\r\nIf you enable this policy, the built-in DNS client is used, if it's available.\r\n\r\nIf you disable this policy, the client is never used.\r\n\r\nIf you don't configure this policy, the built-in DNS client is enabled by default on MacOS, and users can change whether to use the built-in DNS client by editing edge://flags or by specifying a command-line flag.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4921d84a09269f8b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls","displayName":"Block images on specific sites (User)","description":"Define a list of sites, based on URL patterns, that aren't allowed to display images.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultImagesSetting' (Default images setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4964fc9727217810":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~identity_editprofileenabled","displayName":"Enable editing profile in settings (User)","description":"This policy controls whether users can modify profile properties (such as profile avatar) from the profile settings page.\r\n\r\nIf you enable or don't configure this policy, users can edit profile properties. The edit button is available on the profile settings page.\r\n\r\nIf you disable this policy, users can't edit profile properties. The edit button is disabled on the profile settings page.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~identity_editprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~identity_editprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"49a56f4c01493cb8":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains","displayName":"Allow specified sites to access file:// URLs in the PDF Viewer (User)","description":"Controls which sites can access file:// URLs in the PDF Viewer.\r\n\r\nIf you enable this policy, sites in the list can access file:// URLs in the PDF Viewer.\r\n\r\nIf you disable or don't configure this policy, sites cannot access file:// URLs in the PDF Viewer.\r\n\r\nExample value:\r\n\r\nexample.com\r\ncontoso.com","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains_1","displayName":"Enabled","description":null,"helpText":null}]},"49da01a60b888f13":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload","displayName":"Require that the Enterprise Mode Site List is available before tab navigation (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload_0","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload_1","displayName":"All eligible navigations","description":null,"helpText":null}]},"49c39d4e495ed0f2":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"49aaa31a9c3dc464":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceoffice_l_officelabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"491d7424ee4f1834":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablelinksopenright","displayName":"Open Office file links in Office Online (User)","description":"\r\n This policy setting controls which version of Office opens when a hyperlink to an Office file stored on OneDrive, OneDrive for Business, or a SharePoint Online team site is selected.\r\n\r\n By default, a hyperlink to a file stored in one of these locations opens the file in the Office client version of Word, Excel, or PowerPoint. This is the version of Office that is installed on the user’s computer. If Office isn’t installed on the user’s computer, the file is opened in the Office Online version of the program in the user’s web browser.\r\n\r\n If you enable this policy setting, a hyperlink to an Office file stored in one of these locations opens the file in the Office Online version of Word, Excel, or PowerPoint. This opens the file in the user’s web browser.\r\n\r\n If you disable or don’t configure this policy setting, a hyperlink to an Office file stored in one of these locations opens the file in the Office client version of Word, Excel, or PowerPoint, if Office is installed on the user’s computer.\r\n\r\n Note: This policy setting only applies to subscription versions of the Office client, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablelinksopenright_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablelinksopenright_1","displayName":"Enabled","description":null,"helpText":null}]},"49e6a1fa1a3e056c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_l_workflowpath499","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"49d898ef6923982d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_l_workflowfriendly461","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"49f9843b11a76871":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitcustomtags_l_officereadinesstoolkitcustomtagstag2","displayName":"Label 2: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"da04d4b8-bd11-439e-9663-5fd2399d9cc1","categoryName":"Readiness Toolkit","options":null},"49daded2bc65228f":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnofftrustpromotionfordocumentsinapplicationguard","displayName":"Prevent users from removing Application Guard protection on files. (User)","description":"This policy setting allows you to control whether users can remove Application Guard protection and open a document with full trust in Office.\r\n\r\nIf you enable this policy setting, users can continue to work with Office documents in Application Guard, however, they cannot remove protection and open a document outside Application Guard.\r\n\r\nIf you disable or do not configure this policy settings, Office will by default allow users to remove protection and open a document with full trust.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnofftrustpromotionfordocumentsinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnofftrustpromotionfordocumentsinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"49d30f15d0f03d50":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_allowselectionfloaties","displayName":"Show Mini Toolbar on selection (User)","description":"Disabling this policy setting will result in Mini Toolbar not being displayed on text selection. By default, Mini Toolbar on selection is enabled and its visibility can be changed via a setting in the Editor Options dialog box.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_allowselectionfloaties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_allowselectionfloaties_1","displayName":"Enabled","description":null,"helpText":null}]},"495e5b533c6ae660":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventmydepartmentcalendarfromappearing","displayName":"Prevent My Department Calendar from appearing (User)","description":"This policy setting prevents My Department Calendar from appearing in the navigation pane.\r\n\r\nIf you enable this policy setting, My Department Calendar will not appear in the navigation pane.\r\n\r\nIf you disable or do not configure this policy setting, My Department Calendar will appear in the navigation pane.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventmydepartmentcalendarfromappearing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventmydepartmentcalendarfromappearing_1","displayName":"Enabled","description":null,"helpText":null}]},"4975a730aaaf5fc9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_permanentlydeletejunkemail","displayName":"Permanently delete Junk E-mail (User)","description":"This policy setting determines whether suspected junk e-mail is permanently deleted instead of moved to the Junk E-mail folder.\r\n\r\nIf you enable this policy setting, suspected junk e-mail is immediately deleted and not moved into the Deleted Items folder.\r\n\r\nIf you disable or do not configure this policy setting, suspected junk e-mail is moved into the Junk E-mail folder.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_permanentlydeletejunkemail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_permanentlydeletejunkemail_1","displayName":"Enabled","description":null,"helpText":null}]},"49f22de19cf44169":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosaferecipientslist","displayName":"Specify path to Safe Recipients list (User)","description":"Specify a text file containing a list of e-mail addresses to append to or overwrite the Safe Recipients list (depending on the policy \"Overwrite or Append Junk Mail Import List\").","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosaferecipientslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosaferecipientslist_1","displayName":"Enabled","description":null,"helpText":null}]},"498d864d762b2940":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2","displayName":"Set Outlook object model custom actions execution prompt (User)","description":"This policy setting controls whether Outlook prompts users before executing a custom action. Custom actions add functionality to Outlook that can be triggered as part of a rule. Among other possible features, custom actions can be created that reply to messages in ways that circumvent the Outlook model's programmatic send protections. \r\n\r\nIf you enable this policy setting, you can choose from four options to control how Outlook functions when a custom action is executed that uses the Outlook object model: \r\n\r\n* Prompt User \r\n* Automatically Approve \r\n* Automatically Deny \r\n* Prompt user based on computer security. This option enforces the default configuration in Outlook. \r\n\r\nIf you disable or do not configure this policy setting, when Outlook or another program initiates a custom action using the Outlook object model, users are prompted to allow or reject the action. If this configuration is changed, malicious code can use the Outlook object model to compromise sensitive information or otherwise cause data and computing resources to be at risk. This is the equivalent of choosing Enabled -- Prompt user based on computer security.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"49a066546d66b7b8":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcproject_l_pjcalcall","displayName":"Calculate all open projects (User)","description":"Specifies that Project should recalculate all open projects.\r\n\r\nIf you enable this setting, all open projects will be recalculated anytime Project does a calculation.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"ed137c3d-d7bc-48f3-ad86-ff194fc6820d","categoryName":"Calculation options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcproject_l_pjcalcall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcproject_l_pjcalcall_1","displayName":"Enabled","description":null,"helpText":null}]},"49e3a66586e3a094":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocprojects_l_pjfilelocprojects31","displayName":"Projects (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d679b407-a753-40aa-bc9f-175f363b0eff","categoryName":"File locations","options":null},"4966ccf56aa54361":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_l_pathcolon52","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"49262764de14a0c6":{"id":"user_vendor_msft_policy_config_windowsai_allowrecallexport","displayName":"Allow Recall Export (User) (Windows Insiders only)","description":"This policy allows you to determine whether Recall and snapshot information can be exported. Recall and snapshot information may be sensitive, and the files that are exported are unencrypted. Users can export from Settings > Privacy & Security > Recall & Snapshots > Advanced Settings > Export your Recall and snapshot info. Users are warned that the files are unencrypted before exporting. When you set this policy to enabled, users will be able to export Recall and snapshot information. If the policy is set to disabled or not configured, users will not be able to export their Recall and snapshot information.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#allowrecallexport"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_allowrecallexport_0","displayName":"Deny export of Recall and snapshots information","description":"Deny export of Recall and snapshots information","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_allowrecallexport_1","displayName":"Allow export of Recall and snapshot information","description":"Allow export of Recall and snapshot information","helpText":null}]},"49edeac2cae14b31":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid","displayName":"Parameters (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":null},"49249f488d029ca5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]},"495c1d4d047b220c":{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation","displayName":"Stop checking for table alt text accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables contain alt text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables contain alt text.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for alternative text and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/4a.json b/public/intune-definitions/4a.json new file mode 100644 index 000000000000..c2dd64372f48 --- /dev/null +++ b/public/intune-definitions/4a.json @@ -0,0 +1 @@ +{"4a3ad5630bbd2b18":{"id":"com.apple.applicationaccess_allowopenfrommanagedtounmanaged","displayName":"Allow Open From Managed To Unmanaged","description":"If false, documents in managed apps and accounts only open in other managed apps and accounts. Available in iOS 7 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowopenfrommanagedtounmanaged_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowopenfrommanagedtounmanaged_true","displayName":"True","description":null,"helpText":null}]},"4af45b3c67c6e260":{"id":"com.apple.assetcache.managed_listenranges_item_first","displayName":"First","description":"The first IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"4aa742a418868ea6":{"id":"com.apple.extensiblesso_extensiondata_principalname_kerberos","displayName":"Principal Name","description":"The principal (aka username) to use. You do not need to include the realm.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"4ae94412ebac8c4f":{"id":"com.apple.familycontrols.timelimits.v2_com.apple.familycontrols.timelimits.v2","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"4a834082dd1c7121":{"id":"com.apple.managedclient.preferences_alternateerrorpagesenabled","displayName":"Suggest similar pages when a webpage can’t be found","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\n\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\n\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\n\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\nSpecifically, there's a **Suggest similar pages when a webpage can’t be found** toggle, which the user can switch on or off. Note that if you have enable this policy (AlternateErrorPagesEnabled), the Suggest similar pages when a webpage can’t be found setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the Suggest similar pages when a webpage can’t be found setting is turned off, and the user can't change the setting by using the toggle.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#alternateerrorpagesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_alternateerrorpagesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_alternateerrorpagesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4aee580d98024e07":{"id":"com.apple.managedclient.preferences_mediaroutercastallowallips","displayName":"Allow Google Cast to connect to Cast devices on all IP addresses","description":"Enable this policy to let Google Cast connect to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.\n\nDisable this policy to restrict Google Cast to Cast devices on RFC1918/RFC4193 private addresses.\n\nIf you don't configure this policy, Google Cast connects to Cast devices on RFC1918/RFC4193 private addresses only, unless you enable the CastAllowAllIPs feature.\n\nIf the \"EnableMediaRouter\" policy is disabled, then this policy has no effect.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#mediaroutercastallowallips"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_mediaroutercastallowallips_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_mediaroutercastallowallips_true","displayName":"Allowed","description":null,"helpText":null}]},"4aa6674aca1ebe65":{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"4a2a49edd619c117":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"4a9d8631d35c9e56":{"id":"com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability","displayName":"Configure InPrivate mode availability","description":"Specifies whether the user can open pages in InPrivate mode in Microsoft Edge.\n\nIf you don't configure this policy or set it to 'Enabled', users can open pages in InPrivate mode.\n\nSet this policy to 'Disabled' to stop users from using InPrivate mode.\n\nSet this policy to 'Forced' to always use InPrivate mode.\n\nThe \"InPrivateModeUrlAllowlist\" policy takes precedence over this policy and can allow specific URLs to open in InPrivate mode.\n\nIf this policy disables InPrivate mode and an allowlist is configured, InPrivate mode is permitted only for URLs that match entries in the allowlist. All other URLs are blocked from opening in InPrivate mode.\n\nPolicy options mapping:\n\n* Enabled (0) = InPrivate mode available\n\n* Disabled (1) = InPrivate mode disabled\n\n* Forced (2) = InPrivate mode forced\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability_enabled","displayName":"InPrivate mode available","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability_disabled","displayName":"InPrivate mode disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability_forced","displayName":"InPrivate mode forced","description":null,"helpText":null}]},"4a251ee9277d9cd6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.prefetchwithserviceworkerenabled","displayName":"Allow SpeculationRules prefetch for ServiceWorker-controlled URLs","description":"Controls whether SpeculationRules prefetch requests are allowed for\nServiceWorker-controlled URLs.\n\nWith Microsoft Edge version 138,\nprefetch requests to ServiceWorker-controlled URLs are allowed by default when\nthe PrefetchServiceWorker feature is enabled.\n\nIf this policy is enabled or not configured, that default behavior is used.\n\nTo restore the legacy behavior from versions before 138, where prefetch requests\nto ServiceWorker-controlled URLs were blocked, set this policy to disabled.\n\nThis policy is intended to be temporary and will be removed in the future.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.prefetchwithserviceworkerenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.prefetchwithserviceworkerenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4a6956282012802c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.serialaskforurls","displayName":"Allow the Serial API on specific sites","description":"Specifies URL patterns for sites that are allowed to request access to a serial port.\n\nIf not configured, Microsoft Edge uses the value from the DefaultSerialGuardSetting policy (if set), or the user's settings.\n\nFor unmatched sites, the following order applies:\n\n1. \"SerialBlockedForUrls\" (if matched).\n\n2. DefaultSerialGuardSetting (if set).\n\n3. User's settings.\n\nIf URL patterns in this policy conflict with those in \"SerialBlockedForUrls\", they're ignored.\n\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"4aa1f503a4c1c2f8":{"id":"defender_randomizescheduletasktimes","displayName":"Randomize scheduled scan and security intelligence update start times","description":"This setting allows you to enable or disable randomization of the scheduled scan start time and the scheduled definition update start time. This setting is used to distribute the resource impact of scanning. For example, it could be used in guest virtual machines sharing a host, to prevent multiple guest virtual machines from undertaking a disk-intensive operation at the same time.","helpText":null,"infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"defender_randomizescheduletasktimes_0","displayName":"No","description":null,"helpText":null},{"id":"defender_randomizescheduletasktimes_1","displayName":"Yes","description":null,"helpText":null}]},"4a7db5bf5261ef6e":{"id":"device_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_2","displayName":"Disallow selection of Custom Locales","description":"This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system.\r\n\r\nThis does not affect the selection of replacement locales. To prevent the selection of replacement locales, adjust the permissions of the %windir%\\Globalization directory to prevent the installation of locales by unauthorized users.\r\n\r\nThe policy setting \"Restrict user locales\" can also be enabled to disallow selection of a custom locale, even if this policy setting is not configured.\r\n\r\nIf you enable this policy setting, the user cannot select a custom locale as their user locale, but they can still select a replacement locale if one is installed.\r\n\r\nIf you disable or do not configure this policy setting, the user can select a custom locale as their user locale.\r\n\r\nIf this policy setting is enabled at the machine level, it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level, the per-user policy setting will be ignored. If this policy setting is not configured at the machine level, restrictions will be based on per-user policy settings.\r\n\r\nTo set this policy setting on a per-user basis, make sure that you do not configure the per-machine policy setting.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-customlocalesnoselect-2"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_2_1","displayName":"Enabled","description":null,"helpText":null}]},"4ae13a232a93040f":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_cse_nochanges1","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_cse_nochanges1_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_cse_nochanges1_1","displayName":"True","description":null,"helpText":null}]},"4a232ad6673fdc34":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_2","displayName":"Determine if interactive users can generate Resultant Set of Policy data","description":"This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.\r\n\r\nBy default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data.\r\n\r\nIf you enable this policy setting, interactive users cannot generate RSoP data.\r\n\r\nIf you disable or do not configure this policy setting, interactive users can generate RSoP.\r\n\r\nNote: This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data.\r\n\r\nNote: To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc\r\n\r\nNote: This policy setting exists as both a User Configuration and Computer Configuration setting.\r\n\r\nAlso, see the \"Turn off Resultant set of Policy logging\" policy setting in Computer Configuration\\Administrative Templates\\System\\GroupPolicy.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-denyrsoptointeractiveuser-2"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_2_1","displayName":"Enabled","description":null,"helpText":null}]},"4a1bbe20c389e2c1":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disableaoacprocessing","displayName":"Turn off Group Policy Client Service AOAC optimization","description":"This policy setting prevents the Group Policy Client Service from stopping when idle.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-disableaoacprocessing"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disableaoacprocessing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disableaoacprocessing_1","displayName":"Enabled","description":null,"helpText":null}]},"4a0e04d55edf1bfc":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_pv_qospriorityvalue","displayName":"Priority value","description":null,"helpText":"","infoUrls":[],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":null},"4a4cc8260072361b":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_2","displayName":"Turn off tolerant and Z-shaped scratch-out gestures","description":"\r\n Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture that was available in Microsoft Windows XP Tablet PC Edition.\r\n\r\n The tolerant gestures let users scratch out ink in Input Panel by using strikethrough and other scratch-out gesture shapes.\r\n\r\n Tablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\n If you enable this policy and choose “All” from the drop-down menu, no scratch-out gestures will be available in Input Panel. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you enable this policy and choose “Tolerant,\" users will be able to use the Z-shaped scratch-out gesture that was available in Microsoft Windows XP Tablet PC Edition. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you enable this policy and choose “None,” users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you disable this policy, users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you do not configure this policy, users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will be able to configure this setting on the Gestures tab in Input Panel Options.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-scratchout-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_2_1","displayName":"Enabled","description":null,"helpText":null}]},"4a9b8fea613d3592":{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_router_name","displayName":"Set ISATAP Router Name","description":"This policy setting allows you to specify a router name or Internet Protocol version 4 (IPv4) address for an ISATAP router.\r\n\r\nIf you enable this policy setting, you can specify a router name or IPv4 address for an ISATAP router. If you enter an IPv4 address of the ISATAP router in the text box, DNS services are not required.\r\n\r\nIf you disable or do not configure this policy setting, the local host setting is used.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-isatap-router-name"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_router_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_router_name_1","displayName":"Enabled","description":null,"helpText":null}]},"4a72a9ebdf80a524":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_keep_alive_ts_keep_alive_interval","displayName":"Keep-Alive interval:","description":null,"helpText":"","infoUrls":[],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":null},"4a4a13be07659ee0":{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections","displayName":"Minimize the number of simultaneous connections to the Internet or a Windows Domain","description":"\r\n This policy setting determines if a computer can have multiple connections to the internet or to a Windows domain. If multiple connections are allowed, it then determines how network traffic will be routed.\r\n\r\n If this policy setting is set to 0, a computer can have simultaneous connections to the internet, to a Windows domain, or to both. Internet traffic can be routed over any connection - including a cellular connection and any metered network. This was previously the Disabled state for this policy setting. This option was first available in Windows 8.\r\n\r\n If this policy setting is set to 1, any new automatic internet connection is blocked when the computer has at least one active internet connection to a preferred type of network. Here's the order of preference (from most preferred to least preferred): Ethernet, WLAN, then cellular. Ethernet is always preferred when connected. Users can still manually connect to any network. This was previously the Enabled state for this policy setting. This option was first available in Windows 8.\r\n\r\n If this policy setting is set to 2, the behavior is similar to 1. However, if a cellular data connection is available, it will always stay connected for services that require a cellular connection. When the user is connected to a WLAN or Ethernet connection, no internet traffic will be routed over the cellular connection. This option was first available in Windows 10 (Version 1703).\r\n\r\n If this policy setting is set to 3, the behavior is similar to 2. However, if there's an Ethernet connection, Windows won't allow users to connect to a WLAN manually. A WLAN can only be connected (automatically or manually) when there's no Ethernet connection.\r\n\r\n This policy setting is related to the \"Enable Windows to soft-disconnect a computer from a network\" policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wcm#admx-wcm-wcm-minimizeconnections"],"categoryId":"d4c9d046-a8c0-46f0-bd62-bc4d1614e891","categoryName":"Windows Connection Manager","options":[{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections_1","displayName":"Enabled","description":null,"helpText":null}]},"4ade2ef9ef0ff6b9":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftsolitairecollection","displayName":"Microsoft Solitaire Collection (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftsolitairecollection_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftsolitairecollection_1","displayName":"True","description":null,"helpText":null}]},"4ad0a5e88e7eb17b":{"id":"device_vendor_msft_policy_config_browser_homepages","displayName":"Home Pages","description":"When you enable the Configure Open Microsoft Edge With policy, you can configure one or more Start pages. When you enable this policy, users are not allowed to make changes to their Start pages. If enabled, you must include URLs to the pages, separating multiple pages using angle brackets in the following format: If disabled or not configured, the webpages specified in App settings loads as the default Start pages. Version 1703 or later: If you do not want to send traffic to Microsoft, enable this policy and use the value, which honors domain- and non-domain-joined devices, when it is the only configured URL. Version 1809: If enabled, and you select either Start page, New Tab page, or previous page in the Configure Open Microsoft Edge With policy, Microsoft Edge ignores the Configure Start Pages policy. If not configured or you set the Configure Open Microsoft Edge With policy to a specific page or pages, Microsoft Edge uses the Configure Start Pages policy. Supported devices: Domain-joined or MDM-enrolled Related policy: - Configure Open Microsoft Edge With - Disable Lockdown of Start Pages","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#homepages"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"4a4ae9a122195717":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action on startup","description":"Setting the policy lets you specify system behavior on startup. Turning this setting off amounts to leaving it unset as Google Chrome must have specified start up behavior.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can change it.\r\n\r\nSetting this policy to RestoreOnStartupIsLastSession turns off some settings that rely on sessions or that perform actions on exit, such as clearing browsing data on exit or session-only cookies.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4accc0184153a8ea":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},"4ad0f0809d7056a1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_0","displayName":"Safe Browsing is never active.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_1","displayName":"Safe Browsing is active in the standard mode.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_2","displayName":"Safe Browsing is active in the enhanced mode. This mode provides better security, but requires sharing more browsing information with Google.","description":null,"helpText":null}]},"4a432836bcbe426c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled","displayName":"Extend support for Chrome Apps on Microsoft® Windows®, macOS, and Linux.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4af745d34a936cd2":{"id":"device_vendor_msft_policy_config_devicelock_maximumpasswordage","displayName":"Maximum Password Age","description":"This security setting determines the period of time (in days) that a password can be used before the system requires the user to change it. You can set passwords to expire after a number of days between 1 and 999, or you can specify that passwords never expire by setting the number of days to 0. If the maximum password age is between 1 and 999 days, the Minimum password age must be less than the maximum password age. If the maximum password age is set to 0, the minimum password age can be any value between 0 and 998 days. Note: It is a security best practice to have passwords expire every 30 to 90 days, depending on your environment. This way, an attacker has a limited amount of time in which to crack a user's password and have access to your network resources. Default: 42.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#maximumpasswordage"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"4a040266db8559dc":{"id":"device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent","displayName":"Disable Consumer Account State Content","description":"This policy controls Windows experiences that use the cloud consumer account state content client component. If you enable this policy, they will present only default content. If you disable or do not configure this policy, they will be able to use cloud provided content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#disableconsumeraccountstatecontent"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"4a9014202065ec88":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate","displayName":"Local Machine Zone","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_4","displayName":"High","description":null,"helpText":null}]},"4a2552cf5bbf0822":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe","displayName":"Launching applications and files in an IFRAME","description":"This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.\n\nIf you enable this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.\n\nIf you disable this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.\n\nIf you do not configure this policy setting, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonelaunchingapplicationsandfilesiniframe"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_1","displayName":"Enabled","description":null,"helpText":null}]},"4aef17dcb5fa575b":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_l_serveraddressinternal_value","displayName":"DNS name of the internal server (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"4ad76987927e8342":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"4ac90920dc24f41a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc","displayName":"Allow JavaScript on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"4acf35f37f1cbe9c":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_allowed","displayName":"Don't restrict users' HTTPS-Only Mode setting","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_disallowed","displayName":"Disable HTTPS-Only Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode in Strict mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_force_balanced_enabled","displayName":"Force enable HTTPS-Only Mode in Balanced Mode","description":null,"helpText":null}]},"4a30760738a1fc83":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo","displayName":"Set new tab page company logo (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWe are deprecating this policy because it doesn't work as expected and recommend that it not be used.\r\n\r\nSpecifies the company logo to use on the new tab page in Microsoft Edge.\r\n\r\nThe policy should be configured as a string that expresses the logo(s) in JSON format. For example: { \"default_logo\": { \"url\": \"https://www.contoso.com/logo.png\", \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\" }, \"light_logo\": { \"url\": \"https://www.contoso.com/light_logo.png\", \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\" } }\r\n\r\nYou configure this policy by specifying the URL from which Microsoft Edge can download the logo and its cryptographic hash (SHA-256), which is used to verify the integrity of the download. The logo must be in PNG or SVG format, and its file size must not exceed 16 MB. The logo is downloaded and cached, and it will be redownloaded whenever the URL or the hash changes. The URL must be accessible without any authentication.\r\n\r\nThe 'default_logo' is required and will be used when there's no background image. If 'light_logo' is provided, it will be used when the user's new tab page has a background image. We recommend a horizontal logo with a transparent background that is left-aligned and vertically centered. The logo should have a minimum height of 32 pixels and an aspect ratio from 1:1 to 4:1. The 'default_logo' should have proper contrast against a white/black background while the 'light_logo' should have proper contrast against a background image.\r\n\r\nIf you enable this policy, Microsoft Edge downloads and shows the specified logo(s) on the new tab page. Users can't override or hide the logo(s).\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will show no company logo or a Microsoft logo on the new tab page.\r\n\r\nFor help with determining the SHA-256 hash, see https://docs.microsoft.com/powershell/module/microsoft.powershell.utility/get-filehash.\r\n\r\nExample value:\r\n\r\n{\r\n \"light_logo\": {\r\n \"url\": \"https://www.contoso.com/light_logo.png\", \r\n \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\"\r\n }, \r\n \"default_logo\": {\r\n \"url\": \"https://www.contoso.com/logo.png\", \r\n \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\"\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_1","displayName":"Enabled","description":null,"helpText":null}]},"4a1840277b4fa36c":{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_30","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"4a0248da69b0fd53":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist","displayName":"Block smart actions for a list of services","description":"List specific services, such as PDFs, that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\r\n\r\nIf you enable the policy: :\r\n - The smart action in the mini and full context menu will be disabled for all profiles for services that match the given list.\r\n - Users will not see the smart action in the mini and full context menu on text selection for services that match the given list.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be disabled for services that match the given list.\r\n\r\nIf you disable or don't configure this policy:\r\n - The smart action in the mini and full context menu will be enabled for all profiles.\r\n - Users will see the smart action in the mini and full context menu on text selection.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nsmart_actions_pdf","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"4aa120d2dbd4e56c":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4ab74ed80c8458ed":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mse7exe","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mse7exe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mse7exe_1","displayName":"True","description":null,"helpText":null}]},"4a4d626cdc7fccb2":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl","displayName":"Saved from URL","description":"Saved from URL","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_1","displayName":"Enabled","description":null,"helpText":null}]},"4a9aedb76e262b7a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_powerpntexe87","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_powerpntexe87_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_powerpntexe87_1","displayName":"True","description":null,"helpText":null}]},"4ad7fb9a1244ae01":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera","displayName":"Let Apps Access Camera","description":"This policy setting specifies whether Windows apps can access the camera.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"4a0e3749881f8d5c":{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy","displayName":"Agent Connector Minimum Policy (Windows Insiders only)","description":"Configure the minimum policy value which controls how agent connectors run on the machine.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#agentconnectorminimumpolicy"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy_1","displayName":"Restricted.","description":"Restricted.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy_2","displayName":"Bypass.","description":"Bypass.","helpText":null}]},"4a59a0f565b08d13":{"id":"device_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp","displayName":"Remove Microsoft Copilot App","description":"This policy setting allows you to uninstall Microsoft Copilot from devices in a targeted way. It will apply to devices/users that meet the below conditions: Microsoft 365 Copilot and Microsoft Copilot are both installed; the Microsoft Copilot app was not installed by the user; the Microsoft Copilot app was not launched in the last 14 days. If this policy is enabled, the Microsoft Copilot app will be uninstalled. Users can still re-install if they choose to. This setting applies to Enterprise, Professional and Education client SKUs only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#removemicrosoftcopilotapp"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp_0","displayName":"Removal Disabled.","description":"Removal Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp_1","displayName":"Removal Enabled.","description":"Removal Enabled.","helpText":null}]},"4acaa901c18d8f37":{"id":"settings_item_defaultapplications_webbrowser","displayName":"Web Browser","description":"The bundle identifier of the app the system sets as the default web browser. This app must be an eligible web browser for the region of the device.","helpText":null,"infoUrls":[],"categoryId":"b32726b3-b0e9-465b-86f8-b61ad8af52f0","categoryName":"Default Applications","options":null},"4ac818c4f08ec465":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_l_cursormovement2","displayName":"Cursor movement (User)","description":"","helpText":"","infoUrls":[],"categoryId":"33b9194b-4027-4c23-b662-52f25db7f839","categoryName":"International","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_l_cursormovement2_0","displayName":"Logical","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_l_cursormovement2_1","displayName":"Visual","description":null,"helpText":null}]},"4adcc9bef36455f0":{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmycomputer","displayName":"Remove Properties from the Computer icon context menu (User)","description":"This setting hides Properties on the context menu for Computer.\r\n\r\nIf you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu. Likewise, Alt-Enter does nothing when Computer is selected.\r\n\r\nIf you disable or do not configure this setting, the Properties option is displayed as usual.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nopropertiesmycomputer"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmycomputer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmycomputer_1","displayName":"Enabled","description":null,"helpText":null}]},"4af37159347e0722":{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuvideos","displayName":"Remove Videos link from Start Menu (User)","description":"This policy setting allows you to remove the Videos link from the Start Menu.\r\n\r\nIf you enable this policy setting, the Start Menu does not show a link to the Videos library.\r\n\r\nIf you disable or do not configure this policy setting, the Videos link is available from the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenuvideos"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuvideos_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuvideos_1","displayName":"Enabled","description":null,"helpText":null}]},"4a5ccfa534092a92":{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_1","displayName":"Prevent Back-ESC mapping (User)","description":"Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavior.\r\n\r\nIf you enable this policy, a button assigned to Back will not map to ESC.\r\n\r\nIf you disable this policy, Back->ESC mapping will occur.\r\n\r\nIf you do not configure this policy, Back->ESC mapping will occur.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventbackescmapping-1"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4ae97b27eff6c526":{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningstoretotaskbar","displayName":"Do not allow pinning Store app to the Taskbar (User)","description":"\r\nThis policy setting allows you to control pinning the Store app to the Taskbar.\r\n\r\nIf you enable this policy setting, users cannot pin the Store app to the Taskbar. If the Store app is already pinned to the Taskbar, it will be removed from the Taskbar on next login.\r\n\r\nIf you disable or do not configure this policy setting, users can pin the Store app to the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nopinningstoretotaskbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningstoretotaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningstoretotaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"4ad09cde04057a7e":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server","displayName":"Set RD Gateway server address (User)","description":"Specifies the address of the RD Gateway server that clients must use when attempting to connect to an RD Session Host server. You can enforce this policy setting or you can allow users to overwrite this policy setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the \"Use these RD Gateway server settings\" option on the client.\r\n\r\nNote: It is highly recommended that you also specify the authentication method by using the \"Set RD Gateway authentication method\" policy setting. If you do not specify an authentication method by using this setting, either the NTLM protocol that is enabled on the client or a smart card can be used.\r\n\r\nTo allow users to overwrite the \"Set RD Gateway server address\" policy setting and connect to another RD Gateway server, you must select the \"Allow users to change this setting\" check box and users will be allowed to specify an alternate RD Gateway server. Users can specify an alternative RD Gateway server by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify an alternate RD Gateway server, the server that you specify in this policy setting is used by default.\r\n\r\nNote: If you disable or do not configure this policy setting, but enable the \"Enable connections through RD Gateway\" policy setting, client connection attempts to any remote computer will fail, if the client cannot connect directly to the remote computer. If an RD Gateway server is specified by the user, a client connection attempt will be made through that RD Gateway server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-gateway-policy-server"],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_1","displayName":"Enabled","description":null,"helpText":null}]},"4a726b3ee76c7d30":{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay","displayName":"Turn off Autoplay (User)","description":"This policy setting allows you to turn off the Autoplay feature.\n\n Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.\n\n Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.\n\n Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.\n\n If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.\n\n This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.\n\n If you disable or do not configure this policy setting, AutoPlay is enabled.\n\n Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-turnoffautoplay"],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay_1","displayName":"Enabled","description":null,"helpText":null}]},"4aeca8eee9ecb082":{"id":"user_vendor_msft_policy_config_browser_allowflash","displayName":"Allow Flash (User)","description":"This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowflash"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowflash_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowflash_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"4af6a9e274f089f6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_insecurecontentallowedforurlsdesc","displayName":"Allow insecure content on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"4a8174f7b0c7a11b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites","displayName":"Block JavaScript from using JIT on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which are not allowed to run JavaScript JIT (Just In Time) compiler enabled.\r\n\r\nDisabling the JavaScript JIT will mean that Google Chrome may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Google Chrome to render web content in a more secure configuration.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.site.com will not correctly apply to site.com or subdomain.site.com since they both resolve to the same eTLD+1 (site.com) for which there is no policy. In this case, policy must be set on site.com to apply correctly for both site.com and subdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if site-one.com is listed in the JavaScriptJitBlockedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript JIT disabled, but site-two.com will use the policy from DefaultJavaScriptJitSetting, if set, or default to JavaScript JIT enabled.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptJitSetting applies to the site, if set, otherwise JavaScript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"4ae5b4b0a606e7b1":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings","displayName":"Enable automated password change (User)","description":"This policy controls the availability of Google Chrome's automated password change feature.\r\n\r\nIf enabled, a user can trigger a process where the browser attempts to change their password on a website automatically. This process is managed by Generative AI. The new password is saved in the browser's password manager.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"4a2ee5dd12d078f6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled","displayName":"Re-enable the Event.path API until M115. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4ac6d5dca3ec0c1e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates","displayName":"Excel 2007 and later macro-enabled workbooks and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"4a0208b558972817":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"4a3020d88cc8a747":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate","displayName":"Locked-Down Local Machine Zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"4a5d8de646f5b05a":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"4af8ceea8b424366":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled","displayName":"Enable profile creation from the Identity flyout menu or the Settings page (User)","description":"Allows users to create new profiles, using the **Add profile** option.\r\nIf you enable this policy or don't configure it, Microsoft Edge allows users to use **Add profile** on the Identity flyout menu or the Settings page to create new profiles.\r\n\r\nIf you disable this policy, users cannot add new profiles from the Identity flyout menu or the Settings page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4abf0d701fb11a93":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc","displayName":"Re-enable deprecated web platform features for a limited time (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4adceed68d22b3f6":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled","displayName":"Enable Translate (User)","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge offers translation functionality to the user by showing an integrated translate flyout when appropriate, and a translate option on the right-click context menu.\r\n\r\nDisable this policy to disable all built-in translate features.\r\n\r\nIf you don't configure the policy, users can choose whether to use the translation functionality or not.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4a3bfcaeefaa271e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls","displayName":"Grant access to specific sites to connect to specific USB devices (User)","description":"Allows you to set a list of urls that specify which sites will automatically be granted permission to access a USB device with the given vendor and product IDs. Each item in the list must contain both devices and urls in order for the policy to be valid. Each item in devices can contain a vendor ID and product ID field. Any ID that is omitted is treated as a wildcard with one exception, and that exception is that a product ID cannot be specified without a vendor ID also being specified. Otherwise, the policy will not be valid and will be ignored.\r\n\r\nThe USB permission model uses the URL of the requesting site (\"requesting URL\") and the URL of the top-level frame site (\"embedding URL\") to grant permission to the requesting URL to access the USB device. The requesting URL may be different than the embedding URL when the requesting site is loaded in an iframe. Therefore, the \"urls\" field can contain up to two URL strings delimited by a comma to specify the requesting and embedding URL respectively. If only one URL is specified, then access to the corresponding USB devices will be granted when the requesting site's URL matches this URL regardless of embedding status. The URLs in \"urls\" must be valid URLs, otherwise the policy will be ignored.\r\n\r\nIf this policy is left not set, the global default value will be used for all sites either from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy if it is set, or the user's personal configuration otherwise.\r\n\r\nURL patterns in this policy should not clash with the ones configured via 'WebUsbBlockedForUrls' (Block WebUSB on specific sites). If there is a clash, this policy will take precedence over 'WebUsbBlockedForUrls' and 'WebUsbAskForUrls' (Allow WebUSB on specific sites).\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://contoso.com\", \r\n \"https://fabrikam.com\"\r\n ], \r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234, \r\n \"product_id\": 5678\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4aa34f2d1c5e75f2":{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled","displayName":"Enable the network service sandbox (User)","description":"This policy controls whether or not the network service process runs sandboxed.\r\nIf this policy is enabled, the network service process will run sandboxed.\r\nIf this policy is disabled, the network service process will run unsandboxed. This leaves users open to additional security risks related to running the network service unsandboxed.\r\nIf this policy is not set, the default configuration for the network sandbox will be used. This may vary depending on Microsoft Edge release, currently running field trials, and platform.\r\nThis policy is intended to give enterprises flexibility to disable the network sandbox if they use third party software that interferes with the network service sandbox.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4ae806338cbac5c5":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage (User)","description":"This setting allows you to list the URLs that specify which sites are automatically granted permission to access a HID device containing a top-level collection with the given HID usage.\r\n\r\nEach item in the list requires both usages and urls fields for the policy to be valid.\r\n\r\n * Each item in the usages field must have a usage_page and may have a usage field.\r\n\r\n * Omitting the usage field will create a policy matching any device containing a top-level collection with a usage from the specified usage page.\r\n\r\n * An item which has a usage field without a usage_page field is invalid and is ignored.\r\n\r\nIf you don't set this policy, that means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nURLs in this policy shouldn't conflict with those configured through 'WebHidBlockedForUrls' (Block the WebHID API on these sites). If they do, this policy takes precedence over 'WebHidBlockedForUrls'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://microsoft.com\",\r\n \"https://chromium.org\"\r\n ],\r\n \"usages\": [\r\n {\r\n \"usage\": 5678,\r\n \"usage_page\": 1234\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4a0c1cd22bd97ad6":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended","displayName":"Clear cached images and files when Microsoft Edge closes (User)","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\r\n\r\nIf you enable this policy, cached images and files will be deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy, users cannot configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\r\n\r\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\r\n\r\nIf you disable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you configure both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4aa3844986dde6a7":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"4a1af26d87f9599e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome","displayName":"Replace AD - Home (User)","description":"This policy setting allows you to customize the 6th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"home phone\" of line 6.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 6 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome_1","displayName":"Enabled","description":null,"helpText":null}]},"4aa1d352c005fd98":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy4_l_placesbarpath216","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"4a9b887da4f2ff50":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15","displayName":"Workflow Cache 15 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_1","displayName":"Enabled","description":null,"helpText":null}]},"4a6aa3e5d924aa2c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid_0","displayName":"0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid_512","displayName":"512","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid_768","displayName":"768","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid_1024","displayName":"1024","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid_1536","displayName":"1536","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid_2048","displayName":"2048","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_l_selectdigitalsignaturehashingalgorithmdropid_4096","displayName":"4096","description":null,"helpText":null}]},"4a135d331410362b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey19","displayName":"Escrow Key #19 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey19_1","displayName":"Enabled","description":null,"helpText":null}]},"4a66986e17f12694":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_navigationbarappearsontheright","displayName":"Navigation bar appears on the right (User)","description":"This option is to specify where the navigation bar appears.","helpText":"","infoUrls":[],"categoryId":"44774d3d-387b-4fa7-8de4-d82b039c06d1","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_navigationbarappearsontheright_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_navigationbarappearsontheright_1","displayName":"Enabled","description":null,"helpText":null}]},"4adf0f01d8c19f87":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_promptbeforeautoarchiveruns","displayName":"Prompt before AutoArchive runs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_promptbeforeautoarchiveruns_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_promptbeforeautoarchiveruns_1","displayName":"True","description":null,"helpText":null}]},"4a6679a55458c3b7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookrestartmanagerretrylimit","displayName":"Specify the number of restarts attempted for a running web extension (User)","description":"This policy setting allows you to specify the number of restarts Outlook attempts for a running web extension.\r\n\r\nIf you enable this policy setting, you can specify the number of restarts Outlook attempts for a running web extension. If the web extension requires more than the specified number of restarts during an Outlook session, Outlook disables the web extension.\r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the default restart limit of 3 occurrences. The maximum restart limit is 10 occurrences, and the minimum restart limit is 1 occurrence.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookrestartmanagerretrylimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookrestartmanagerretrylimit_1","displayName":"Enabled","description":null,"helpText":null}]},"4a35f03b6d491ecf":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtoensureeachslidehasauniquetitle","displayName":"Stop checking to ensure each slide has a unique title (User)","description":"This policy setting prevents the Accessibility Checker from verifying that every slide has a unique title.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that every slide has a unique title.\r\n\r\nIf you disable or do not configure this policy setting, slide titles will be checked for uniqueness and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtoensureeachslidehasauniquetitle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtoensureeachslidehasauniquetitle_1","displayName":"Enabled","description":null,"helpText":null}]},"4a5e0660346bad1c":{"id":"user_vendor_msft_policy_config_system_allowtelemetry","displayName":"Allow Telemetry (User)","description":"Allow the device to send diagnostic and usage telemetry data, such as Watson. For more information about diagnostic data for Windows, including what is and what is not collected by Windows, see Configure Windows diagnostic data in your organization. Note: This value is only applicable to Windows Enterprise, Windows Education, Windows Mobile Enterprise, Windows IoT Core (IoT Core), Windows Server 2016, and Windows CPC OS. The following tables describe the supported values:Windows 8. 1 Values:0 - Not allowed. 1 - Allowed, except for Secondary Data Requests. 2 (default) - Allowed. Windows 10 Values:0 - Security. Information that is required to help keep Windows or Windows CPC OS more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. Note: This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows IoT Core (IoT Core), Windows Server 2016, and Windows CPC OS. Using this setting on other devices is equivalent to setting the value of 1. 1 - Basic. Basic device info, including: quality-related data, app compatibility, app usage data, and data from the Security level. 2 - Enhanced. Additional insights, including: how Windows, Windows Server, System Center, Windows CPC OS, and apps are used, how they perform, advanced reliability data, and data from both the Basic and the Security levels. 3 - Full. All data necessary to identify and help to fix problems, plus data from the Security, Basic, and Enhanced levels. Important lf you are using Windows 8. 1 MDM server and set a value of 0 using the legacy AllowTelemetry policy on a Windows 10 Mobile device, then the value is not respected and the telemetry level is silently set to level 1. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowtelemetry"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"user_vendor_msft_policy_config_system_allowtelemetry_0","displayName":"Security","description":"Security. Information that is required to help keep Windows more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.\nNote: This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), and Windows Server 2016. Using this setting on other devices is equivalent to setting the value of 1.","helpText":null},{"id":"user_vendor_msft_policy_config_system_allowtelemetry_1","displayName":"Basic","description":"Basic. Basic device info, including: quality-related data, app compatibility, app usage data, and data from the Security level.","helpText":null},{"id":"user_vendor_msft_policy_config_system_allowtelemetry_3","displayName":"Full","description":"Full. All data necessary to identify and help to fix problems, plus data from the Security, Basic, and Enhanced levels.","helpText":null}]},"4aa147f2552ced70":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlink","displayName":"Insert tab | Hyperlink (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlink_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlink_1","displayName":"True","description":null,"helpText":null}]},"4a71883bfbe79079":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_bookmarks","displayName":"Show bookmarks (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_bookmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_bookmarks_1","displayName":"Enabled","description":null,"helpText":null}]},"4abe6ef00f7ca73a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocuments","displayName":"Turn off trusted documents (User)","description":"This policy setting allows you to turn off the trusted documents feature. The trusted documents feature allows users to always enable active content in documents such as macros, ActiveX controls, data connections, etc. so that they are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.\r\n\r\nIf you enable this policy setting, you will turn off the trusted documents feature. Users will receive a security prompt every time a document containing active content is opened.\r\n\r\nIf you disable or do not configure this policy setting, documents will be trusted when users enable content for a document, and users will not receive a security prompt.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"4ac37e161947b9bc":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_profiles","displayName":"Profiles","description":"Specifies the profiles to which the rule belongs: Domain, Private, Public. See FW_PROFILE_TYPE for the bitmasks that are used to identify profile types. If not specified, the default is All.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_profiles_1","displayName":"FWPROFILETYPEDOMAIN: This value represents the profile for networks that are connected to domains.","description":"FW_PROFILE_TYPE_DOMAIN: This value represents the profile for networks that are connected to domains.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_profiles_2","displayName":"FWPROFILETYPESTANDARD: This value represents the standard profile for networks. These networks are classified as private by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are behind Network Address Translation (NAT) devices, routers, and other edge devices, and they are in a private location, such as a home or an office. AND FWPROFILETYPEPRIVATE: This value represents the profile for private networks, which is represented by the same value as that used for FWPROFILETYPESTANDARD.","description":"FW_PROFILE_TYPE_STANDARD: This value represents the standard profile for networks. These networks are classified as private by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are behind Network Address Translation (NAT) devices, routers, and other edge devices, and they are in a private location, such as a home or an office. AND FW_PROFILE_TYPE_PRIVATE: This value represents the profile for private networks, which is represented by the same value as that used for FW_PROFILE_TYPE_STANDARD.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_profiles_4","displayName":"FWPROFILETYPEPUBLIC: This value represents the profile for public networks. These networks are classified as public by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are those at airports, coffee shops, and other public places where the peers in the network or the network administrator are not trusted.","description":"FW_PROFILE_TYPE_PUBLIC: This value represents the profile for public networks. These networks are classified as public by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are those at airports, coffee shops, and other public places where the peers in the network or the network administrator are not trusted.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_profiles_2147483647","displayName":"FWPROFILETYPEALL: This value represents all these network sets and any future network sets.","description":"FW_PROFILE_TYPE_ALL: This value represents all these network sets and any future network sets.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/4b.json b/public/intune-definitions/4b.json new file mode 100644 index 000000000000..847c2aabeca0 --- /dev/null +++ b/public/intune-definitions/4b.json @@ -0,0 +1 @@ +{"4bcdcbc6fea1b0e2":{"id":"ade_setupassistant_safetyandhandling","displayName":"Safety and handling","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_safetyandhandling_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_safetyandhandling_1","displayName":"Show","description":null,"helpText":null}]},"4b54d55ff36000d9":{"id":"com.apple.directoryservice.managed_adnamespaceflag","displayName":"AD Namespace Flag","description":"If true, enables the AD Namespace key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adnamespaceflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adnamespaceflag_true","displayName":"True","description":null,"helpText":null}]},"4bcdcf3f47c3b83a":{"id":"com.apple.managedclient.preferences_autoplayallowed","displayName":"Allow media autoplay for websites","description":"This policy sets the media autoplay policy for websites.\n\nThe default setting, \"Not configured\" respects the current media autoplay settings and lets users configure their autoplay settings.\n\nSetting to \"Enabled\" sets media autoplay to \"Allow\". All websites are allowed to autoplay media. Users can’t override this policy.\n\nSetting to \"Disabled\" sets media autoplay to \"Block\". No websites are allowed to autoplay media. Users can’t override this policy.\n\nA tab will need to be closed and re-opened for this policy to take effect.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autoplayallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_autoplayallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autoplayallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"4be419b952a96fba":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_allow_search_engine_discovery","displayName":"Allow search engine discovery","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_managedsearchengines_item_allow_search_engine_discovery_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_managedsearchengines_item_allow_search_engine_discovery_true","displayName":"Enabled","description":null,"helpText":null}]},"4bd126a35365f972":{"id":"com.apple.managedclient.preferences_suppresso365autodiscoveroverride","displayName":"Use domain-based autodiscover instead of Office 365","description":"When true, autodiscover will contact the endpoint for the mailbox domain instead of the Office 365 service. This is recommended for on-premises Exchange mailboxes.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_suppresso365autodiscoveroverride_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_suppresso365autodiscoveroverride_true","displayName":"True","description":null,"helpText":null}]},"4b826915b0a20259":{"id":"com.apple.system-extension-policy_allowedsystemextensiontypes_generickey_keytobereplaced","displayName":"Team Identifier","description":"Add a Team Identifier of valid and signed system extensions to load. The team identifier must be alphanumeric (letters and numbers) and have 10 characters. For example, enter ABCDE12345.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"4bf5f8cba28ee152":{"id":"com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled","displayName":"Suggest similar pages when a webpage can't be found","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\n\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\n\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\n\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\nSpecifically, there's a **Suggest similar pages when a webpage can't be found** toggle, which the user can switch on or off. If you enable this policy (AlternateErrorPagesEnabled), the **Suggest similar pages when a webpage can't be found** setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the **Suggest similar pages when a webpage can't be found** setting is turned off, and the user can't change the setting by using the toggle.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4bdfb8edfea6f794":{"id":"com.microsoft.edge.mamedgeappconfigsettings.quickviewofficefilesenabled","displayName":"Manage QuickView Office files capability in Microsoft Edge","description":"Allows you to set whether users can view publicly accessible Office files on the web that aren't on OneDrive or SharePoint. (For example: Word documents, PowerPoint presentations, and Excel spreadsheets)\n\nIf you enable or don't configure this policy, these files can be viewed in Microsoft Edge using Office Viewer instead of downloading the files.\n\nIf you disable this policy, these files are downloaded to be viewed.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.quickviewofficefilesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.quickviewofficefilesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4b66cc21e026dade":{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchforimageenabled","displayName":"Search for image enabled","description":"This policy lets you configure the Image Search feature in the right-click context menu.\n\nIf you enable or don't configure this policy, then the \"Search the web for image\" option is visible in the context menu.\n\nIf you disable this policy, then the \"Search the web for image\" won't be visible in the context menu.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchforimageenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchforimageenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4b28f8f4e5cc2037":{"id":"com.microsoft.edge.mamedgeappconfigsettings.synctypeslistdisabled","displayName":"Configure the list of types that are excluded from synchronization","description":"If you enable this policy, all the specified data types are excluded from synchronization. This policy can be used to limit the type of data uploaded to the Microsoft Edge synchronization service.\n\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", \"history\", \"openTabs\", \"edgeWallet\", \"collections\", \"apps\", and \"edgeFeatureUsage\". The \"edgeFeatureUsage\" data type are supported starting in Microsoft Edge version 134. These data type names are case sensitive.\n\nUsers can't override the disabled data types.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"4bfd223d2829be89":{"id":"device_vendor_msft_defender_configuration_allownetworkprotectiondownlevel","displayName":"Allow Network Protection Down Level","description":"This settings controls whether Network Protection is allowed to be configured into block or audit mode on windows downlevel of RS3. If false, the value of EnableNetworkProtection will be ignored.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_allownetworkprotectiondownlevel_1","displayName":"Network protection will be enabled downlevel.","description":"Network protection will be enabled downlevel.","helpText":null},{"id":"device_vendor_msft_defender_configuration_allownetworkprotectiondownlevel_0","displayName":"Network protection will be disabled downlevel.","description":"Network protection will be disabled downlevel.","helpText":null}]},"4b232b2f3b0d4f48":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_logeventoverthreshold","displayName":"Log event when quota warning level is exceeded","description":"This policy setting determines whether the system records an event in the Application log when users reach their disk quota warning level on a volume.\r\n\r\nIf you enable this policy setting, the system records an event. If you disable this policy setting, no event is recorded. When you enable or disable this policy setting, the system disables the corresponding \"Log event when a user exceeds their warning level\" option on the Quota tab so that administrators cannot change logging while a policy setting is in effect.\r\n\r\nIf you do not configure this policy setting, no event is recorded, but administrators can use the Quota tab option to change the logging setting.\r\n\r\nThis policy setting does not affect the Quota Entries window on the Quota tab. Even without the logged event, users can detect that they have reached their warning level because their status in the Quota Entries window changes.\r\n\r\nNote: To find the logging option, in My Computer, right-click the name of an NTFS file system volume, click Properties, and then click the Quota tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-diskquota#admx-diskquota-dq-logeventoverthreshold"],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":[{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_logeventoverthreshold_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_logeventoverthreshold_1","displayName":"Enabled","description":null,"helpText":null}]},"4b744cf010a1c391":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_3","displayName":"Configure log access","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string.\r\n\r\nIf you enable this policy setting, only those users matching the security descriptor can access the log.\r\n\r\nIf you disable or do not configure this policy setting, all authenticated users and system services can write, read, or clear this log.\r\n\r\nNote: If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the \"Configure log access (legacy)\" policy setting to enforce this change across all tools and APIs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-3"],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_3_1","displayName":"Enabled","description":null,"helpText":null}]},"4bb1732956bce962":{"id":"device_vendor_msft_policy_config_admx_icm_ceipenable","displayName":"Turn off Windows Customer Experience Improvement Program","description":"This policy setting turns off the Windows Customer Experience Improvement Program. The Windows Customer Experience Improvement Program collects information about your hardware configuration and how you use our software and services to identify trends and usage patterns. Microsoft will not collect your name, address, or any other personally identifiable information. There are no surveys to complete, no salesperson will call, and you can continue working without interruption. It is simple and user-friendly.\r\n\r\nIf you enable this policy setting, all users are opted out of the Windows Customer Experience Improvement Program.\r\n\r\nIf you disable this policy setting, all users are opted into the Windows Customer Experience Improvement Program.\r\n\r\nIf you do not configure this policy setting, the administrator can use the Problem Reports and Solutions component in Control Panel to enable Windows Customer Experience Improvement Program for all users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-ceipenable"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_ceipenable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_ceipenable_1","displayName":"Enabled","description":null,"helpText":null}]},"4bbed083b03d36a1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_recentlycleanedtimeout","displayName":"Configure time out for detections in recently remediated state","description":"This policy setting configures the time in minutes before a detection in the \"completed\" state moves to the \"cleared\" state.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-recentlycleanedtimeout"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_recentlycleanedtimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_recentlycleanedtimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"4be964c99e8b7d4d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_customdefaultactiontoaststring","displayName":"Display additional text to clients when they need to perform an action","description":"This policy setting allows you to configure whether or not to display additional text to clients when they need to perform an action. The text displayed is a custom administrator-defined string. For example, the phone number to call the company help desk. The client interface will only display a maximum of 1024 characters. Longer strings will be truncated before display.\r\n\r\n If you enable this setting, the additional text specified will be displayed.\r\n\r\n If you disable or do not configure this setting, there will be no additional text displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-ux-configuration-customdefaultactiontoaststring"],"categoryId":"a5060182-4d22-412b-bd0e-3a1e009b36c6","categoryName":"Client Interface","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_customdefaultactiontoaststring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_customdefaultactiontoaststring_1","displayName":"Enabled","description":null,"helpText":null}]},"4b6741427bc0ea8c":{"id":"device_vendor_msft_policy_config_admx_nca_showui","displayName":"User Interface","description":"Specifies whether an entry for DirectAccess connectivity appears when the user clicks the Networking notification area icon.\r\n\r\nSet this to Disabled to prevent user confusion when you are just using DirectAccess to remotely manage DirectAccess client computers from your intranet and not providing seamless intranet access. \r\n\r\nIf this setting is not configured, the entry for DirectAccess connectivity appears.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-showui"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_showui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_showui_1","displayName":"Enabled","description":null,"helpText":null}]},"4b03650817a3206a":{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargelevel1uinotification_2","displayName":"Turn off low battery user notification","description":"This policy setting turns off the user notification when the battery capacity remaining equals the low battery notification level.\r\n\r\nIf you enable this policy setting, Windows shows a notification when the battery capacity remaining equals the low battery notification level. To configure the low battery notification level, see the \"Low Battery Notification Level\" policy setting.\r\n\r\nThe notification will only be shown if the \"Low Battery Notification Action\" policy setting is configured to \"No Action\".\r\n\r\nIf you disable or do not configure this policy setting, users can control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dcbatterydischargelevel1uinotification-2"],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargelevel1uinotification_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargelevel1uinotification_2_1","displayName":"Enabled","description":null,"helpText":null}]},"4bfb83887a458179":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls","displayName":"Disable Certificate Transparency enforcement for a list of URLs","description":"Setting the policy turns off Certificate Transparency disclosure requirements for the hostnames in the specified URLs. While making it harder to detect misissued certificates, hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed).\r\n\r\nLeaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.\r\n\r\nA URL pattern follows this format ( https://www.chromium.org/administrators/url-blocklist-filter-format ). However, because the validity of certificates for a given hostname is independent of the scheme, port, or path, Google Chrome only considers the hostname portion of the URL. Wildcard hosts aren't supported.\r\n\r\nExample value:\r\n\r\nexample.com\r\n.example.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4b29cbc1e68c9be7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsearchengine","displayName":"Import search engines from default browser on first run","description":"Setting the policy to Enabled imports the default search engine from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means the default search engine isn't imported on first run.\r\n\r\nUsers can trigger an import dialog and the default search engine checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsearchengine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsearchengine_1","displayName":"Enabled","description":null,"helpText":null}]},"4bc2de692c9fda40":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword","displayName":"Default search provider keyword (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"4b5dcb967244b0c7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURLPostParams specifies the parameters during suggestion search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSuggestURLPostParams unset unset means suggest search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"4b2f43aa1509e47d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls","displayName":"Allow clipboard on these sites","description":"Setting the policy lets you set a list of URL patterns that specify sites that can use the clipboard site permission. This does not include all clipboard operations on origins matching the patterns. For instance, users will still be able to paste using keyboard shortcuts as this isn't gated by the clipboard site permission.\r\n\r\n\r\nLeaving the policy unset means DefaultClipboardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4b03ec38c2671ff8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding","displayName":"Allow remote access users to open host-side URLs in their local client browser","description":"Setting the policy to Enabled or leaving it unset may allow users connected to a remote access host to open host-side URLs in their local client browser.\r\n\r\nSetting the policy to Disabled will prevent the remote access host from sending URLs to the client.\r\n\r\nThis setting doesn't apply to remote assistance connections as the feature is not supported for that connection mode.\r\n\r\nNote: This feature is not yet generally available so enabling it does not mean that the feature will be visible in the client UI.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding_1","displayName":"Enabled","description":null,"helpText":null}]},"4b80829dd084c9bb":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"4b166b9df72c72f2":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"4bed433ba039325f":{"id":"device_vendor_msft_policy_config_defender_enablelowcpupriority","displayName":"Enable Low CPU Priority","description":"This policy setting allows you to enable or disable low CPU priority for scheduled scans. If you enable this setting, low CPU priority will be used during scheduled scans. If you disable or do not configure this setting, not changes will be made to CPU priority for scheduled scans. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_enablelowcpupriority_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablelowcpupriority_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"4b094b7aa3254c8c":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"4b72bffe8a729b41":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"4b75b83b58a8d9cf":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowfontdownloads"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"4bf391cda5447b0d":{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls_localnetworkaccessallowedforurlsdesc","displayName":"Allow sites to make requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"4bd3488a845075c6":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_localnetworkallowedforurlsdesc","displayName":"Allow sites to make network requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"4b8170798e251e2b":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended","displayName":"Single sign-on for work or school sites using this profile enabled","description":"'Allow single sign-on for work or school sites using this profile' option allows non-AAD profiles to be able to use single sign-on for work or school sites using work or school credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-AAD profiles only.\r\n\r\nIf you disable this policy, non-AAD profiles will not be able to use SSO using other credentials present on the machine. This will also ensure that 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' is turned off.\r\n\r\nIf you enable this policy or don't configure it, non-AAD profiles will be able to use SSO using other credentials present on the machine and 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' will continue working.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4b4b8468b4f42702":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment_internetexplorerintegrationwindowopenwidthadjustment","displayName":"Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4bd88db350a9605d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_exprwdexe24","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_exprwdexe24_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_exprwdexe24_1","displayName":"True","description":null,"helpText":null}]},"4b14b4bf83689843":{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices","displayName":"List of Approved USB-connected print devices","description":"\r\n\r\n This setting is a component of the Device Control Printing Restrictions. To use this setting, enable Device Control Printing by enabling the \"Enable Device Control Printing Restrictions\" setting.\r\n\r\n When Device Control Printing is enabled, the system uses the specified list of vid/pid values to determine if the current USB connected printer is approved for local printing.\r\n\r\n Type all the approved vid/pid combinations (separated by commas) that correspond to approved USB printer models. When a user tries to print to a USB printer queue the device vid/pid will be compared to the approved list.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-approvedusbprintdevices"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices_1","displayName":"Enabled","description":null,"helpText":null}]},"4b79f8e756399f4d":{"id":"device_vendor_msft_policy_config_start_configurestartpins","displayName":"Configure Start Pins","description":"Allows admin to override the default items pinned to Start.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#configurestartpins"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":null},"4b585fb9ab3a38fa":{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_allowstandardusercontroldropid","displayName":"Define which installer commands Standard Users can execute","description":"","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_allowstandardusercontroldropid_1","displayName":"Enabled for Update and Rollback","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_allowstandardusercontroldropid_2","displayName":"Enabled for all installer operations","description":null,"helpText":null}]},"4b6c0d47681ffcc1":{"id":"enforcement_targetlocaldatetime","displayName":"Target Date Time","description":"The local date time value that specifies when to force install the software update. If the user doesn’t trigger the software update before this time, the device force installs it","helpText":null,"infoUrls":[],"categoryId":"42a6198f-bdec-402e-b619-315400b65488","categoryName":"Software Update","options":null},"4bcc37a91d3e9717":{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_$type","displayName":"Type","description":null,"helpText":null,"infoUrls":[],"categoryId":"d2191717-e304-46f7-bcc0-55e6477026c9","categoryName":"Exclusion Settings","options":[{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_$type_0","displayName":"Path","description":null,"helpText":null},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_$type_1","displayName":"Process name","description":null,"helpText":null}]},"4b92fb1ed0640b2a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor","displayName":"Followed hyperlink color (User)","description":"Specifies the default text color of followed hyperlinks.","helpText":"","infoUrls":[],"categoryId":"cbb98485-6a36-47b8-b450-7821e08507ac","categoryName":"Web Options - General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_1","displayName":"Enabled","description":null,"helpText":null}]},"4b7f7e8c82bc780a":{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls","displayName":"Hide specified Control Panel items (User)","description":"This setting allows you to display or hide specified Control Panel items, such as Mouse, System, or Personalization, from the Control Panel window and the Start screen. The setting affects the Start screen and Control Panel window, as well as other ways to access Control Panel items, such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings.\r\n\r\nIf you enable this setting, you can select specific items not to display on the Control Panel window and the Start screen.\r\n\r\nTo hide a Control Panel item, enable this policy setting and click Show to access the list of disallowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization.\r\n\r\nNote: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name should be entered, for example timedate.cpl or inetcpl.cpl. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered, for example @systemcpl.dll,-1 for System, or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names can be found in MSDN by searching \"Control Panel items\". \r\n\r\nIf both the \"Hide specified Control Panel items\" setting and the \"Show only specified Control Panel items\" setting are enabled, the \"Show only specified Control Panel items\" setting is ignored.\r\n\r\nNote: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the \"Disable Display Control Panel\" setting instead.\r\n\r\nNote: To hide pages in the System Settings app, use the \"Settings Page Visibility\" setting under Computer Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-disallowcpls"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls_1","displayName":"Enabled","description":null,"helpText":null}]},"4bec3ca741eabde4":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablethemechange","displayName":"Prevent changing theme (User)","description":"This setting disables the theme gallery in the Personalization Control Panel.\r\n\r\nIf you enable this setting, users cannot change or save a theme. Elements of a theme such as the desktop background, color, sounds, and screen saver can still be changed (unless policies are set to turn them off).\r\n\r\nIf you disable or do not configure this setting, there is no effect.\r\n\r\nNote: If you enable this setting but do not specify a theme using the \"load a specific theme\" setting, the theme defaults to whatever the user previously set or the system default.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-disablethemechange"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablethemechange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablethemechange_1","displayName":"Enabled","description":null,"helpText":null}]},"4b582f44ba51ff05":{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect","displayName":"Restrict selection of Windows menus and dialogs language (User)","description":"This policy setting restricts users to the specified language by disabling the menus and dialog box controls in the Region settings control panel. If the specified language is not installed on the target computer, the language selection defaults to English.\r\n\r\nIf you enable this policy setting, the dialog box controls in the Regional and Language Options control panel are not accessible to the logged on user. This prevents users from specifying a language different than the one used.\r\n\r\nTo enable this policy setting in Windows Vista, use the \"Restricts the UI languages Windows should use for the selected user\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the logged-on user can access the dialog box controls in the Regional and Language Options control panel to select any available UI language.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-restrictuilangselect"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_1","displayName":"Enabled","description":null,"helpText":null}]},"4b2ea6237d18a718":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_lbl_goofflineactioncombo","displayName":"Action: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_lbl_goofflineactioncombo_0","displayName":"Work offline","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_lbl_goofflineactioncombo_1","displayName":"Never go offline","description":null,"helpText":null}]},"4baa83ca77637982":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_1","displayName":"Prohibit user configuration of Offline Files (User)","description":"Prevents users from enabling, disabling, or changing the configuration of Offline Files.\r\n\r\nThis setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box.\r\n\r\nThis is a comprehensive setting that locks down the configuration you establish by using other settings in this folder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: This setting provides a quick method for locking down the default settings for Offline Files. To accept the defaults, just enable this setting. You do not have to disable any other settings in this folder.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-noconfigcache-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4bcd204c276a3242":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1","displayName":"Turn off password security in Input Panel (User)","description":"Adjusts password security settings in Touch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista). These settings include using the on-screen keyboard by default, preventing users from switching to another Input Panel skin (the writing pad or character pad), and not showing what keys are tapped when entering a password.\r\n\r\nTouch Keyboard and Handwriting panel enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy and choose “Low” from the drop-down box, password security is set to “Low.” At this setting, all password security settings are turned off. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose “Medium-Low” from the drop-down box, password security is set to “Medium-Low.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel displays the cursor and which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose “Medium” from the drop-down box, password security is set to “Medium.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is not allowed, and Input Panel displays the cursor and which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose to “Medium-High” from the drop-down box, password security is set to “Medium-High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you enable this policy and choose “High” from the drop-down box, password security is set to “High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is not allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you disable this policy, password security is set to “Medium-High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n \r\nIf you do not configure this policy, password security is set to “Medium-High” by default. At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will be able to configure this setting on the Advanced tab in Input Panel Options in Windows 7 and Windows Vista.\r\n\r\nCaution: If you lower password security settings, people who can see the user’s screen might be able to see their passwords.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-passwordsecurity-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4bd69a60e5de927b":{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnofffeedback_1","displayName":"Turn off pen feedback (User)","description":"Disables visual pen action feedback, except for press and hold feedback.\r\n\r\nIf you enable this policy, all visual pen action feedback is disabled except for press and hold feedback. Additionally, the mouse cursors are shown instead of the pen cursors.\r\n\r\nIf you disable or do not configure this policy, visual feedback and pen cursors will be shown unless the user disables them in Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-turnofffeedback-1"],"categoryId":"9b894b32-3697-4a83-9731-3db2a35455ad","categoryName":"Cursors","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnofffeedback_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnofffeedback_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4b76dcdba0f3db8b":{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_includereginproquota","displayName":"Show registry files in the file list (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_includereginproquota_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_includereginproquota_1","displayName":"True","description":null,"helpText":null}]},"4bb4f303aa241f63":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_audiocaptureallowedurlsdesc","displayName":"URLs that will be granted access to audio capture devices without prompt (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"4b946211f7ad2a6a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies","displayName":"Enables experimental policies (User)","description":"Allows Google Chrome to load experimental policies.\r\n\r\nWARNING: Experimental policies are unsupported and subject to change or be removed without notice in future version of the browser!\r\n\r\nAn experimental policy may not be finished or still have known or unknown defects. It may be changed or even removed without any notification. By enabling experimental policies, you could lose browser data or compromise your security or privacy.\r\n\r\nIf a policy is not in the list and it's not officially released, its value will be ignored on Beta and Stable channel.\r\n\r\nIf a policy is in the list and it's not officially released, its value will be applied.\r\n\r\nThis policy has no effect on already released policies.\r\n\r\nExample value:\r\n\r\nExtensionInstallAllowlist\r\nExtensionInstallBlocklist","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"4b69319144e20823":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting","displayName":"Default geolocation setting (User)","description":"Setting the policy to 1 lets sites track the users' physical location as the default state. Setting the policy to 2 denies this tracking by default. You can set the policy to ask whenever a site wants to track the users' physical location.\r\n\r\nLeaving the policy unset means the AskGeolocation policy applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4b1397a1cf7e4fbc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_javascriptjitblockedforsitesdesc","displayName":"Block JavaScript from using JIT on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"4be9f616d5db244d":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize87_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"5b832259-c30b-43bb-b249-9d3ea4d5b028","categoryName":"Customizable Error Messages","options":null},"4b551c7c7b2117c0":{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlookup","displayName":"Don’t allow Dynamic Data Exchange (DDE) server lookup in Excel (User)","description":"This policy setting allows you to control whether Dynamic Data Exchange (DDE) server lookup is allowed.\r\n\r\nBy default, DDE server lookup is turned on, but users can turn off DDE server lookup by going to File > Options > Trust Center > Trust Center Settings > External Content.\r\n\r\nIf you enable this policy setting, DDE server lookup isn’t allowed, and users can’t turn on DDE server lookup in the Trust Center.\r\n\r\nNote: If you’re using Dynamic Data Exchange (DDE) server launch, which isn’t recommended, don’t enable this policy setting, because DDE server launch requires DDE server lookup to be on.\r\n\r\nIf you disable or don’t configure this policy setting, DDE server lookup is turned on, but users can turn off DDE server lookup in the Trust Center.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.","helpText":"","infoUrls":[],"categoryId":"e36863b6-3232-4a29-be02-32ee67cc48b9","categoryName":"External Content","options":[{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlookup_1","displayName":"Enabled","description":null,"helpText":null}]},"4bcb8597ec6903d4":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallownetframeworkreliantcomponents"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"4b39777a2923ba33":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1_l_galdownloadinitialdelay_value","displayName":"Maximum possible number of minutes to delay download: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"4bf881cb8a8927ad":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed","displayName":"Allow or block audio capture (User)","description":"Allows you to set whether a user is prompted to grant a website access to their audio capture device. This policy applies to all URLs except for those configured in the 'AudioCaptureAllowedUrls' (Sites that can access audio capture devices without requesting permission) list.\r\n\r\nIf you enable this policy or don't configure it (the default setting), the user is prompted for audio capture access except from the URLs in the 'AudioCaptureAllowedUrls' list. These listed URLs are granted access without prompting.\r\n\r\nIf you disable this policy, the user is not prompted, and audio capture is accessible only to the URLs configured in 'AudioCaptureAllowedUrls'.\r\n\r\nThis policy affects all types of audio inputs, not only the built-in microphone.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"4b33d330f4804c87":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"Specifies the URL of the search engine used for a default search. The URL contains the string '{searchTerms}', which is replaced at query time by the terms the user is searching for.\r\n\r\nSpecify Bing's search URL as:\r\n\r\n'{bing:baseURL}search?q={searchTerms}'.\r\n\r\nSpecify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nThis policy is required when you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy; if you don't enable the latter policy, this policy is ignored.\r\n\r\nExample value: https://search.contoso.com/search?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_1","displayName":"Enabled","description":null,"helpText":null}]},"4b50bcde69bca0be":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_0","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_1","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_2","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_3","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},"4b7bd85ce7650651":{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended","displayName":"Enable tab preview on hover (User)","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\r\n\r\nIf you disable this policy, tab previews will not be shown on hover.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4b415c6664bd6017":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_idledetectionblockedforurlsdesc","displayName":"Blocked sites for idle detection (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"4b0e3d2ef06ea360":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_enabled","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_disabled","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null}]},"4b1cfb0d893d3e2c":{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended","displayName":"Configure when efficiency mode should become active (User)","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4b90a550c555641e":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended","displayName":"Enable Microsoft Defender SmartScreen DNS requests (User)","description":"This policy lets you configure whether to enable DNS requests made by Microsoft Defender SmartScreen. Note: Disabling DNS requests will prevent Microsoft Defender SmartScreen from getting IP addresses, and potentially impact the IP-based protections provided.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen will make DNS requests.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen will not make any DNS requests.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4b387dde7ad8dcac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacebirthday_l_birthdayadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"4bbb1bd4ba2f55ba":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336","displayName":"Display help in (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0f6020d9-278b-4284-894a-bc4a70c8cf32","categoryName":"Display Language","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_0","displayName":"(same as menus and dialog boxes)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1078","displayName":"Afrikaans","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1052","displayName":"Albanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1118","displayName":"Amharic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1025","displayName":"Arabic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1067","displayName":"Armenian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1101","displayName":"Assamese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1068","displayName":"Azerbaijani (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2117","displayName":"Bangla (Bangladesh)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1093","displayName":"Bangla (India)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1069","displayName":"Basque","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1059","displayName":"Belarusian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_5146","displayName":"Bosnian (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1026","displayName":"Bulgarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1027","displayName":"Catalan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1170","displayName":"Central Kurdish (Iraq)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1116","displayName":"Cherokee","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2052","displayName":"Chinese (Simplified)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1028","displayName":"Chinese (Traditional)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1050","displayName":"Croatian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1029","displayName":"Czech","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1030","displayName":"Danish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1164","displayName":"Dari","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1043","displayName":"Dutch","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1033","displayName":"English","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1061","displayName":"Estonian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1124","displayName":"Filipino","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1035","displayName":"Finnish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1036","displayName":"French","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1110","displayName":"Galician","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1079","displayName":"Georgian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1031","displayName":"German","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1032","displayName":"Greek","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1095","displayName":"Gujarati","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1128","displayName":"Hausa (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1037","displayName":"Hebrew","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1081","displayName":"Hindi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1038","displayName":"Hungarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1039","displayName":"Icelandic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1136","displayName":"Igbo","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1057","displayName":"Indonesian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2141","displayName":"Inuktitut (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2108","displayName":"Irish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1076","displayName":"isiXhosa","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1077","displayName":"isiZulu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1040","displayName":"Italian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1041","displayName":"Japanese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1099","displayName":"Kannada","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1087","displayName":"Kazakh","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1107","displayName":"Khmer","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1158","displayName":"K'iche","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1159","displayName":"Kinyarwanda","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1089","displayName":"Swahili","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1111","displayName":"Konkani","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1042","displayName":"Korean","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1088","displayName":"Kyrgyz","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1062","displayName":"Latvian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1063","displayName":"Lithuanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1134","displayName":"Luxembourgish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1086","displayName":"Malay (Malaysia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1100","displayName":"Malayalam","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1082","displayName":"Maltese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1153","displayName":"Maori","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1102","displayName":"Marathi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1104","displayName":"Mongolian (Cyrillic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1071","displayName":"Macedonian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1121","displayName":"Nepali","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1044","displayName":"Norwegian (Bokmal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2068","displayName":"Norwegian (Nynorsk)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1096","displayName":"Odia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1065","displayName":"Persian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1045","displayName":"Polish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1046","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2070","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1094","displayName":"Punjabi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2118","displayName":"Punjabi (Pakistan)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_3179","displayName":"Quechua (Peru)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1048","displayName":"Romanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1049","displayName":"Russian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1169","displayName":"Scottish Gaelic (United Kingdom)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_3098","displayName":"Serbian (Cyrillic, Serbia and Montenegro (Former))","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_7194","displayName":"Serbian (Cyrillic, Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2074","displayName":"Serbian (Latin, Serbia and Montenegro (Former))","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1132","displayName":"Sesotho sa Leboa","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1074","displayName":"Setswana","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2137","displayName":"Sindhi (Arabic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1115","displayName":"Sinhala","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1051","displayName":"Slovak","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1060","displayName":"Slovenian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_3082","displayName":"Spanish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1053","displayName":"Swedish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1064","displayName":"Tajik","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1097","displayName":"Tamil","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1092","displayName":"Tatar","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1098","displayName":"Telugu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1054","displayName":"Thai","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1139","displayName":"Tigrinya (Ethiopia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1055","displayName":"Turkish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1090","displayName":"Turkmen","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1058","displayName":"Ukrainian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1056","displayName":"Urdu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1152","displayName":"Uyghur (PRC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1091","displayName":"Uzbek (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_2051","displayName":"Valencian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1066","displayName":"Vietnamese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1106","displayName":"Welsh","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1160","displayName":"Wolof","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_l_displayhelpin336_1130","displayName":"Yoruba","description":null,"helpText":null}]},"4b94f7f1743d0691":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc07_l_allowsubfolders07","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc07_l_allowsubfolders07_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc07_l_allowsubfolders07_1","displayName":"True","description":null,"helpText":null}]},"4b4e4348b2cbca79":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherserviceurl","displayName":"Weather Service URL (User)","description":"This policy setting allows you to configure the weather service URL for Outlook.\r\n\r\nIf you enable this policy setting, you must enter your desired weather service URL.\r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the default weather service URL.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherserviceurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherserviceurl_1","displayName":"Enabled","description":null,"helpText":null}]},"4bf972ed6aab22d4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockintranet","displayName":"Include Intranet in Safe Zones for Automatic Picture Download (User)","description":"This policy setting controls whether pictures and external content in HTML e-mail messages from untrusted senders on the local intranet are downloaded without Outlook users explictly choosing to do so. \r\n\r\nIf you enable this policy setting, Outlook will automatically download external content in all e-mail messages sent over the local intranet and users will not be able to change the setting. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not consider the local intranet a safe zone, which means that Outlook will not automatically download content from other servers in the Local Intranet zone unless the sender is included in the Safe Senders list. Recipients can choose to download external content from untrusted senders on a message-by-message basis.","helpText":"","infoUrls":[],"categoryId":"a321fc04-d0cb-45ec-a6bf-51d60249922d","categoryName":"Automatic Picture Download Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockintranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockintranet_1","displayName":"Enabled","description":null,"helpText":null}]},"4b11c01c5e2f2154":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_incachedexchangemakesendreceivef9nulloperation","displayName":"Do not sync in Cached Exchange mode when users click Send/Receive or F9 (User)","description":"By default, when users click Send/Receive or press F9 for Cached Exchange Mode accounts, Outlook synchronizes with the Exchange server. When this setting is enabled, clicking Send/Receive and pressing F9 do not synchronize with Exchange unless only one folder is being synchronized. Users can continue to use shift-F9 to synchronize the current folder.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_incachedexchangemakesendreceivef9nulloperation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_incachedexchangemakesendreceivef9nulloperation_1","displayName":"Enabled","description":null,"helpText":null}]},"4bfe53ad177d0e8e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits","displayName":"Duration is entered in (User)","description":"Specifies the unit of time (minutes, hours, days, weeks, or months) used by default in the Duration field.\r\n\r\nIf you enable this setting, the unit you specify will be used if the user does not specify a unit of time when entering a duration.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdurationunits_1","displayName":"Enabled","description":null,"helpText":null}]},"4b0a3057f9193382":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustsentenceandwordspacingautomatically","displayName":"Adjust sentence and word spacing automatically (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e63361ad-a54b-4557-acc7-02c272a3e58d","categoryName":"Smart cut and paste","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustsentenceandwordspacingautomatically_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustsentenceandwordspacingautomatically_1","displayName":"Enabled","description":null,"helpText":null}]},"4bfc8646ebabfc8f":{"id":"vendor_msft_firewall_mdmstore_domainprofile_allowlocalpolicymerge","displayName":"Allow Local Policy Merge","description":"This value is used as an on/off switch. If this value is false, firewall rules from the local store are ignored and not enforced. The merge law for this option is to always use the value of the GroupPolicyRSoPStore. This value is valid for all schema versions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_allowlocalpolicymerge_false","displayName":"False","description":"AllowLocalPolicyMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_allowlocalpolicymerge_true","displayName":"True","description":"AllowLocalPolicyMerge On","helpText":null}]},"4b87d4c12e24f562":{"id":"vendor_msft_firewall_mdmstore_domainprofile_disableunicastresponsestomulticastbroadcast","displayName":"Disable Unicast Responses To Multicast Broadcast","description":"This value is used as an on/off switch. If it is true, unicast responses to multicast broadcast traffic is blocked. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_disableunicastresponsestomulticastbroadcast_false","displayName":"False","description":"Unicast Responses Not Blocked","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_disableunicastresponsestomulticastbroadcast_true","displayName":"True","description":"Unicast Responses Blocked","helpText":null}]},"4b194984eb731e0c":{"id":"vendor_msft_firewall_mdmstore_domainprofile_logfilepath","displayName":"Log File Path","description":"This value is a string that represents a file path to the log where the firewall logs dropped packets and successful connections. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured, otherwise the MdmStore value wins if it is configured, otherwise the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/4c.json b/public/intune-definitions/4c.json new file mode 100644 index 000000000000..fc68403d4829 --- /dev/null +++ b/public/intune-definitions/4c.json @@ -0,0 +1 @@ +{"4c1ea7e81f721bd7":{"id":"com.apple.applicationaccess_allowglobalbackgroundfetchwhenroaming","displayName":"Allow Global Background Fetch When Roaming","description":"If false, disables global background fetch activity when an iOS phone is roaming. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowglobalbackgroundfetchwhenroaming_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowglobalbackgroundfetchwhenroaming_true","displayName":"True","description":null,"helpText":null}]},"4c87bb53cce4a40d":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app","displayName":"Microsoft OneNote","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"4ce0b9bec17eb3c2":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app","displayName":"Microsoft Remote Desktop (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"4ceda1cb1aa05905":{"id":"com.apple.managedclient.preferences_controldefaultstateofallowextensionfromotherstoressettingenabled","displayName":"Configure default state of Allow extensions from other stores setting","description":"This policy allows you to control the default state of the Allow extensions from other stores setting.\nThis policy can't be used to stop installation of extensions from other stores such as Chrome Web Store.\nTo stop installation of extensions from other stores, use the Extension Settings policy: https://go.microsoft.com/fwlink/?linkid=2187098.\n\nWhen enabled, Allow extensions from other stores will be turned on. So, users won't have to turn on the flag manually\nwhile installing extensions from other supported stores such as Chrome Web Store. However a user can override this setting.\nIf the user has already turned on the setting and then turned it off, this setting may not work.\nIf the Admin first sets the policy as Enabled, but then changes it to not configured or disabled, it will have no impact on\nuser settings and the setting will remain as it is.\n\nWhen disabled or not configured, the user can manage the Allow extensions from other store setting.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#controldefaultstateofallowextensionfromotherstoressettingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_controldefaultstateofallowextensionfromotherstoressettingenabled_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_controldefaultstateofallowextensionfromotherstoressettingenabled_true","displayName":"Allowed","description":null,"helpText":null}]},"4cf763d7aed6677a":{"id":"com.apple.managedclient.preferences_scarewareblockersenddetectedsitestosmartscreenenabled","displayName":"Configure Microsoft Edge Scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen","description":"This policy controls whether Microsoft Edge shares URLs of sites that are detected as potential tech scams with Microsoft Defender SmartScreen.\n\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\n\nIf you enable this policy, Microsoft Edge shares URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.\n\nIf you disable or don't configure this policy, Microsoft Edge doesn't share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#scarewareblockersenddetectedsitestosmartscreenenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_scarewareblockersenddetectedsitestosmartscreenenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_scarewareblockersenddetectedsitestosmartscreenenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4cd820735c392ecc":{"id":"com.apple.notificationsettings_notificationsettings_item_alerttype","displayName":"Alert Type","description":"The type of alert for notifications for this app. Available in iOS 9.3 and later and macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":[{"id":"com.apple.notificationsettings_notificationsettings_item_alerttype_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_alerttype_1","displayName":"Temporary Banner","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_alerttype_2","displayName":"Persistent Banner","description":null,"helpText":null}]},"4c4ede02a5d3512d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showofficeshortcutinfavoritesbar","displayName":"Show Microsoft Office shortcut in favorites bar (Deprecated)","description":"This policy didn't work as expected due to changes in operational requirements. Therefore, the policy is deprecated and shouldn't be used.\n\nSpecifies whether to include a shortcut to Office.com in the favorites bar. For users signed into Microsoft Edge, the shortcut takes users to their Microsoft Office apps and docs.\n If you enable or don't configure this policy, users can choose whether to see the shortcut by changing the toggle in the favorites bar context menu.\n If you disable this policy, the shortcut isn't shown.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showofficeshortcutinfavoritesbar_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showofficeshortcutinfavoritesbar_true","displayName":"Enabled","description":null,"helpText":null}]},"4cdf51f076fcef47":{"id":"com.microsoft.edge.mamedgeappconfigsettings.speechrecognitionenabled","displayName":"Configure Speech Recognition","description":"Set whether websites can use the W3C Web Speech API to recognize speech from the user. The Microsoft Edge implementation of the Web Speech API uses Azure Cognitive Services, so voice data leaves the machine.\n\nIf you enable or don't configure this policy, web-based applications that use the Web Speech API can use Speech Recognition.\n\nIf you disable this policy, Speech Recognition isn't available through the Web Speech API.\n\nRead more about this feature here:\nSpeechRecognition API: https://go.microsoft.com/fwlink/?linkid=2143388\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2143680","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.speechrecognitionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.speechrecognitionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4ce983183e8610ea":{"id":"device_vendor_msft_defender_configuration_disablenetworkprotectionperftelemetry","displayName":"Disable Network Protection Perf Telemetry","description":"This setting disables the gathering and send of performance telemetry from Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablenetworkprotectionperftelemetry_1","displayName":"Network protection telemetry is disabled","description":"Network protection telemetry is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablenetworkprotectionperftelemetry_0","displayName":"Network protection telemetry is enabled","description":"Network protection telemetry is enabled","helpText":null}]},"4cc45b3ae6ee0cdf":{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_2_dwmdefaultcolorizationcoloralpha","displayName":"Alpha","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"4c28742a37c9ac2e":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_4","displayName":"Control Event Log behavior when the log file reaches its maximum size","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size.\r\n\r\nIf you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost.\r\n\r\nIf you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events.\r\n\r\nNote: Old events may or may not be retained according to the \"Backup log automatically when full\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-retention-4"],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_retention_4_1","displayName":"Enabled","description":null,"helpText":null}]},"4c186ee0eb4c296f":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_exclusionlistsettings","displayName":"Enable file screens","description":"This policy setting enables administrators to block certain file types from being created in the folders that have been made available offline.\r\n\r\nIf you enable this policy setting, a user will be unable to create files with the specified file extensions in any of the folders that have been made available offline.\r\n\r\nIf you disable or do not configure this policy setting, a user can create a file of any type in the folders that have been made available offline.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-exclusionlistsettings"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_exclusionlistsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_exclusionlistsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"4c9b502cef569721":{"id":"device_vendor_msft_policy_config_admx_smartcard_allowtimeinvalidcertificates","displayName":"Allow time invalid certificates","description":"This policy setting permits those certificates to be displayed for logon that are either expired or not yet valid.\r\n\r\nUnder previous versions of Microsoft Windows, certificates were required to contain a valid time and not be expired. The certificate must still be accepted by the domain controller in order to be used. This setting only controls the displaying of the certificate on the client machine. \r\n\r\nIf you enable this policy setting certificates will be listed on the logon screen regardless of whether they have an invalid time or their time validity has expired.\r\n\r\nIf you disable or do not configure this policy setting, certificates which are expired or not yet valid will not be listed on the logon screen.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-allowtimeinvalidcertificates"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_allowtimeinvalidcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_allowtimeinvalidcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"4c0bd3f8246887cf":{"id":"device_vendor_msft_policy_config_admx_smartcard_certpropenabledstring","displayName":"Turn on certificate propagation from smart card","description":"This policy setting allows you to manage the certificate propagation that occurs when a smart card is inserted.\r\n\r\nIf you enable or do not configure this policy setting then certificate propagation will occur when you insert your smart card.\r\n\r\nIf you disable this policy setting, certificate propagation will not occur and the certificates will not be made available to applications such as Outlook.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-certpropenabledstring"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_certpropenabledstring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_certpropenabledstring_1","displayName":"Enabled","description":null,"helpText":null}]},"4c155b3b66ce6d52":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_emailmessagetext","displayName":"Add the following text to the end of the email:","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":null},"4c6c79ab615fe72b":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfileshare","displayName":"Audit File Share Access","description":"This policy setting allows you to audit attempts to access a shared folder. If you configure this policy setting, an audit event is generated when an attempt is made to access a shared folder. If this policy setting is defined, the administrator can specify whether to audit only successes, only failures, or both successes and failures. Note: There are no system access control lists (SACLs) for shared folders. If this policy setting is enabled, access to all shared folders on the system is audited.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditfileshare"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfileshare_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfileshare_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfileshare_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfileshare_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"4c67d0b4e3156958":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_extensioninstallblacklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"4c4ef4536804ea17":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault","displayName":"Default printing page size","description":"Overrides default printing page size.\r\n\r\nname should contain one of the listed formats or 'custom' if required paper size is not in the list. If 'custom' value is provided custom_size property should be specified. It describes the desired height and width in micrometers. Otherwise custom_size property shouldn't be specified. Policy that violates these rules is ignored.\r\n\r\nIf the page size is unavailable on the printer chosen by the user this policy is ignored.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=PrintingPaperSizeDefault for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"name\": \"custom\",\r\n \"custom_size\": {\r\n \"width\": 210000,\r\n \"height\": 297000\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"4c0c88b6c57d8135":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder","displayName":"Specify whether the plugin finder should be disabled (deprecated)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder_1","displayName":"Enabled","description":null,"helpText":null}]},"4c9d25ecd58442fc":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting","description":"Setting the policy to BlockWindowManagement (value 2) automatically denies the window management permission to sites by default. This will limit the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nSetting the policy to AskWindowManagement (value 3) will prompt the user when the window management permission is requested by default. If users allow the permission, it will extend the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nLeaving the policy unset means the AskWindowManagement policy applies, but users can change this setting.\r\n\r\nThis replaces the deprecated DefaultWindowPlacementSetting policy.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4c1b86cba7103560":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled","displayName":"Enable Related Website Sets","description":"This policy allows to control the Related Website Sets feature enablement.\r\n\r\nThis policy overrides the FirstPartySetsEnabled policy.\r\n\r\nWhen this policy is unset or set to True, the Related Website Sets feature is enabled.\r\n\r\nWhen this policy is set to False, the Related Website Sets feature is disabled.","helpText":"","infoUrls":[],"categoryId":"ac821e49-1996-4d6c-99d4-9c3c3e4737b6","categoryName":"Related Website Sets Settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4c1c41d9bbb0ede9":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands","displayName":"Block process creations originating from PSExec and WMI commands","description":"This rule blocks processes created through PsExec and WMI from running. Both PsExec and WMI can remotely execute code, so there is a risk of malware abusing this functionality for command and control purposes, or to spread an infection throughout an organization's network.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_warn","displayName":"Warn","description":null,"helpText":null}]},"4c6fd5ad1701844a":{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent","displayName":"Submit Samples Consent","description":"Checks for the user consent level in Windows Defender to send data. If the required consent has already been granted, Windows Defender submits them. If not, (and if the user has specified never to ask), the UI is launched to ask for user consent (when Defender/AllowCloudProtection is allowed) before sending data.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_0","displayName":"Always prompt.","description":"Always prompt.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_1","displayName":"Send safe samples automatically.","description":"Send safe samples automatically.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_2","displayName":"Never send.","description":"Never send.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_3","displayName":"Send all samples automatically.","description":"Send all samples automatically.","helpText":null}]},"4c98bd723fbf60e2":{"id":"device_vendor_msft_policy_config_devicelock_enforcelockscreenandlogonimage","displayName":"Enforce Lock Screen And Logon Image","description":"Value type is a string, which is the full image filepath and filename.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#enforcelockscreenandlogonimage"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"4c371ded612b45ee":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_1","displayName":"Shutdown on any logoff","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_2","displayName":"Shutdown on any FSLogix Profile logoff","description":null,"helpText":null}]},"4ca5483724ae327e":{"id":"device_vendor_msft_policy_config_internetexplorer_addsearchprovider","displayName":"Add a specific list of search providers to the user's list of search providers","description":"This policy setting allows you to add a specific list of search providers to the user's default list of search providers. Normally, search providers can be added from third-party toolbars or in Setup. The user can also add a search provider from the provider's website.\n\nIf you enable this policy setting, the user can add and remove search providers, but only from the set of search providers specified in the list of policy keys for search providers (found under [HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\SearchScopes]). Note: This list can be created from a custom administrative template file. For information about creating this custom administrative template file, see the Internet Explorer documentation on search providers.\n\nIf you disable or do not configure this policy setting, the user can configure their list of search providers unless another policy setting restricts such configuration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-addsearchprovider"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_addsearchprovider_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_addsearchprovider_1","displayName":"Enabled","description":null,"helpText":null}]},"4c2de28cc9a23e71":{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp","displayName":"[Deprecated] Disable Internet Explorer 11 as a standalone browser","description":"This policy lets you restrict launching of Internet Explorer as a standalone browser.\r\n\r\nIf you enable this policy, it:\r\n- Prevents Internet Explorer 11 from launching as a standalone browser.\r\n- Restricts Internet Explorer's usage to Microsoft Edge's native 'Internet Explorer mode'.\r\n- Redirects all attempts at launching Internet Explorer 11 to Microsoft Edge Stable Channel browser.\r\n- Overrides any other policies that redirect to Internet Explorer 11.\r\n\r\nIf you disable, or don’t configure this policy, all sites are opened using the current active browser settings. Note: Microsoft Edge Stable Channel must be installed for this policy to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerapp"],"categoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_1","displayName":"Enabled","description":null,"helpText":null}]},"4ce481ea27af31b9":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowautomaticpromptingforactivexcontrols"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"4c6e0303efec178a":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"4ce153d41a918211":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004","displayName":"Download unsigned ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_1","displayName":"Prompt","description":null,"helpText":null}]},"4cd595778d35553a":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804","displayName":"Launching applications and files in an IFRAME","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_1","displayName":"Prompt","description":null,"helpText":null}]},"4cdf8c859344dd6e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled","displayName":"Continue running background apps after Microsoft Edge closes","description":"Allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window is closed. In this scenario, background apps and the current browsing session remain active, including any session cookies. An open background process displays an icon in the system tray and can always be closed from there.\r\n\r\nIf you enable this policy, background mode is turned on.\r\n\r\nIf you disable this policy, background mode is turned off.\r\n\r\nIf you don't configure this policy, background mode is initially turned off, and the user can configure its behavior in edge://settings/system.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4c094c9d435be456":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended","displayName":"Set the new tab page as the home page","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\r\n\r\nIf you enable this policy, the new tab page is always used for the home page, and the home page URL location is ignored.\r\n\r\nIf you disable this policy, the user's home page can't be the new tab page, unless the URL is set to 'edge://newtab'.\r\n\r\nIf not configured users can choose whether the new tab page is their home page.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4c2d4045e44efc16":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist_developertoolsavailabilityallowlistdesc","displayName":"List of URL patterns for which developer tools are allowed to be opened (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4cbc9b72ca8caaa4":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility","displayName":"Configure whether the Discover or Work feed tabs are shown on the New Tab Page.","description":"This policy configures whether the Discover or Work feed tabs are shown on the New Tab Page. By default, both Work and Discover tabs are enabled.\r\n\r\nIf you set this policy to 'EnableBothWorkDiscover' (0) or do not configure this policy, Microsoft Edge shows both the Work and Discover feed tabs on the new tab page.\r\n\r\nIf you set this policy to 'EnableOnlyWork' (1), Microsoft Edge shows only the Work feed tab on the new tab page.\r\n\r\nIf you set this policy to 'EnableOnlyDiscover' (2), Microsoft Edge shows only the Discover feed tab on the new tab page.\r\n\r\nThis policy works with the SetNTPDefaultFeedTab policy, which controls which feed tab is selected by default when both tabs are available.\r\n\r\nPolicy options mapping:\r\n\r\n* EnableBothWorkDiscover (0) = Enable both Work and Discover tabs\r\n\r\n* EnableOnlyWork (1) = Enable only Work tab\r\n\r\n* EnableOnlyDiscover (2) = Enable only Discover tab\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_1","displayName":"Enabled","description":null,"helpText":null}]},"4c7b5d43a847befc":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites_1","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites_2","displayName":"Block ads on sites with intrusive ads. (Default value)","description":null,"helpText":null}]},"4c48eea4531a2a5b":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_importbrowsersettings_recommended","displayName":"Allow importing of browser settings","description":"Allows users to import browser settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browser settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_importbrowsersettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_importbrowsersettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4c932e62af3884e5":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_webappinstallforcelist","displayName":"URLs for Web Apps to be silently installed. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4cd54569c71da0a2":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_powerpntexe129","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_powerpntexe129_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_powerpntexe129_1","displayName":"True","description":null,"helpText":null}]},"4c4a0b168d30c03c":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadpolicyid","displayName":"Policy GUID:","description":"","helpText":"","infoUrls":[],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":null},"4cf68c2d82e63c64":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath_sharedinstallationpath_textbox","displayName":"Shared Installation Path (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":null},"4caad5c1e98fa06a":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanchangeproperties","displayName":"Prohibit access to properties of components of a LAN connection (User)","description":"Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection.\r\n\r\nThis setting determines whether the Properties button for components of a LAN connection is enabled.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties button is disabled for Administrators. Network Configuration Operators are prohibited from accessing connection components, regardless of the \"Enable Network Connections settings for Administrators\" setting.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Properties button is enabled for administrators and Network Configuration Operators.\r\n\r\nThe Local Area Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.\r\n\r\nNote: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.\r\n\r\nNote: When the \"Prohibit access to properties of a LAN connection\" setting is enabled, users are blocked from accessing the Properties button for LAN connection components.\r\n\r\nNote: Network Configuration Operators only have permission to change TCP/IP properties. Properties for all other components are unavailable to these users.\r\n\r\nNote: Nonadministrators are already prohibited from accessing properties of components for a LAN connection, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-lanchangeproperties"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanchangeproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanchangeproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"4c7c5cc8f6936774":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common","displayName":"Microsoft Office 2016 Common Settings (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2016 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers.\r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2016 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2016 applications are enabled, this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016common"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common_1","displayName":"Enabled","description":null,"helpText":null}]},"4ccbcca3dec677d5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked","displayName":"Block Browser Legacy Extension Points (User)","description":"Setting the policy to Enabled or leaving it unset will enable ProcessExtensionPointDisablePolicy to block legacy extension points in the Browser process.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security and stability as unknown and potentially hostile code can load inside Google Chrome's browser process. Only turn off the policy if there are compatibility issues with third-party software that must run inside Google Chrome's browser process.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked_1","displayName":"Enabled","description":null,"helpText":null}]},"4c376418bbfe5612":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting","displayName":"Default cookies setting (User)","description":"Unless the RestoreOnStartup policy is set to permanently restore URLs from previous sessions, then setting CookiesSessionOnlyForUrls lets you make a list of URL patterns that specify sites that can and can't set cookies for one session.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies. URLs not covered by the patterns specified also result in the use of defaults.\r\n\r\nWhile no specific policy takes precedence, see CookiesBlockedForUrls and CookiesAllowedForUrls. URL patterns among these 3 policies must not conflict.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4c5c3f99fd80bee3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderNewTabURL specifies the URL of the search engine used to provide a New Tab page.\r\n\r\nLeaving DefaultSearchProviderNewTabURL unset means no new tab page is provided.\r\n\r\nExample value: https://search.my.company/newtab","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_1","displayName":"Enabled","description":null,"helpText":null}]},"4c5f5a41d58e3546":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled","displayName":"Enable leak detection for entered credentials (User)","description":"Setting the policy to Enabled lets users have Google Chrome check whether usernames and passwords entered were part of a leak.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, credential leak checking is allowed, but the user can turn it off.\r\n\r\nThis behavior will not trigger if Safe Browsing is disabled (either by policy or by the user). In order to force Safe Browsing on, use the SafeBrowsingEnabled policy or the SafeBrowsingProtectionLevel policy.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4c9cdd9795ca3e4d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled","displayName":"Choose whether the Privacy Sandbox Fingerprinting Protection feature is to be enabled in Incognito mode. (User)","description":"A policy to control whether the Privacy Sandbox Fingerprinting Protection setting is to be enabled in Incognito mode or disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Fingerprinting Protection feature setting will be turned off for your users.\r\nIf you set this policy to Enabled, your users will have the Fingerprinting Protection feature setting turned on in Incognito mode.\r\nIf the policy is not set, users will be able to turn on or off the Fingerprinting Protection feature for Incognito mode in their UI settings. The default state will be false or disabled, meaning the Fingerprinting Protection feature will be turned off.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4c96968f6daf8218":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_downloadbubbleenabled","displayName":"Enable download bubble UI (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_downloadbubbleenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_downloadbubbleenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4cdc716899061412":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3","displayName":"Checked: Allow edit. Unchecked: Do not allow edit. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_1","displayName":"True","description":null,"helpText":null}]},"4ccf853b6d5560e1":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_pathcolon53","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"4c7247903e8728d7":{"id":"user_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites","displayName":"Prevent deleting websites that the user has visited (User)","description":"This policy setting prevents the user from deleting the history of websites that he or she has visited. This feature is available in the Delete Browsing History dialog box.\n\nIf you enable this policy setting, websites that the user has visited are preserved when he or she clicks Delete.\n\nIf you disable this policy setting, websites that the user has visited are deleted when he or she clicks Delete.\n\nIf you do not configure this policy setting, the user can choose whether to delete or preserve visited websites when he or she clicks Delete.\n\nIf the \"Prevent access to Delete Browsing History\" policy setting is enabled, this policy setting is enabled by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disabledeletinguservisitedwebsites"],"categoryId":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","categoryName":"Delete Browsing History","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_1","displayName":"Enabled","description":null,"helpText":null}]},"4c2e6513c7f4b8ab":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"4cb88bca6fdfcaa6":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended","displayName":"Continue running background apps after Microsoft Edge closes (User)","description":"Allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window is closed. In this scenario, background apps and the current browsing session remain active, including any session cookies. An open background process displays an icon in the system tray and can always be closed from there.\r\n\r\nIf you enable this policy, background mode is turned on.\r\n\r\nIf you disable this policy, background mode is turned off.\r\n\r\nIf you don't configure this policy, background mode is initially turned off, and the user can configure its behavior in edge://settings/system.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4cba73d0eec85c63":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended","displayName":"Edge 3P SERP Telemetry Enabled (User)","description":"Edge3P Telemetry in Microsoft Edge captures the searches user does on third party search providers without identifying the person or the device and captures only if the user has consented to this collection of data. User can turn off the collection at any time in the browser settings.\r\n\r\nIf you enable or don't configure this policy, Edge 3P SERP Telemetry feature will be enabled.\r\n\r\nIf you disable this policy, Edge 3P SERP Telemetry feature will be disabled.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4c0b774337f4b17f":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_webauthenticationremotedesktopallowedoriginsdesc","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4ca622710239ec5a":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled","displayName":"Manage QuickView Office files capability in Microsoft Edge (User)","description":"Allows you to set whether users can view publicly accessible Office files on the web that aren't on OneDrive or SharePoint. (For example: Word documents, PowerPoint presentations, and Excel spreadsheets)\r\n\r\nIf you enable or don't configure this policy, these files can be viewed in Microsoft Edge using Office Viewer instead of downloading the files.\r\n\r\nIf you disable this policy, these files will be downloaded to be viewed.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4c636e828b8f693a":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol","displayName":"Configure users ability to override feature flags (User)","description":"","helpText":"","infoUrls":[],"categoryId":"eb6409fc-fb52-413d-ae4b-eff017b52b30","categoryName":"Experimentation","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_2","displayName":"Allow users to override feature flags using command line arguments only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_1","displayName":"Allow users to override feature flags","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_0","displayName":"Prevent users from overriding feature flags","description":null,"helpText":null}]},"4c911a21a8770710":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffword_l_autosavedefaultsettingenum","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffword_l_autosavedefaultsettingenum_0","displayName":"Use AutoSave Default Setting","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffword_l_autosavedefaultsettingenum_1","displayName":"AutoSave Is On By Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffword_l_autosavedefaultsettingenum_2","displayName":"AutoSave Is Off By Default","description":null,"helpText":null}]},"4cb153bc8258a7e7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_whenchoosingsendforreview","displayName":"When choosing 'Send for Review...' (User)","description":"\"Send link and attachment\": When choosing Send for Review for a document on a server, send both a link and an attachment. | \"Only send link\": When choosing Send for Review for a document on a server, send only a link. | \"Prompt user\": When choosing Send for Review for a document on a server, prompt the user for what to send.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_whenchoosingsendforreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_whenchoosingsendforreview_1","displayName":"Enabled","description":null,"helpText":null}]},"4c8b3f36796b16d0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_other_l_disablecomingsoon","displayName":"Turn off Coming Soon (User)","description":"\r\n This policy setting controls whether Coming Soon is available to users. Coming Soon provides information in an Office app, such as Word or Excel, about upcoming feature changes to that app and lets users try out those changes ahead of time. By default, Coming Soon is available to users.\r\n\r\n If you enable this policy setting, Coming Soon is turned off and isn't available to users.\r\n\r\n If you disable or don't configure this policy setting, Coming Soon is available to users.\r\n ","helpText":"","infoUrls":[],"categoryId":"e0dfe97e-348d-4d30-a6a1-e0de1989236e","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_other_l_disablecomingsoon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_other_l_disablecomingsoon_1","displayName":"Enabled","description":null,"helpText":null}]},"4c169e3af3dd74ce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_alwaysshowfilesharemoreoptions","displayName":"Show additional sharing choices under the File tab (User)","description":"This policy settings controls what is displayed when the user goes to File > Share in Word, Excel, or PowerPoint.\r\n\r\nBy default, choosing File > Share takes the user to the Share dialog, which provides various choices for sharing. These choices used to appear under File > Share, but no longer appear there by default. There are some additional choices that used to appear under File > Share, but don’t appear in the Share dialog.\r\n\r\nIf you enable this policy setting, the user isn’t taken to the Share dialog and the user sees all the sharing choices under File > Share. For example, several options to share by email or an option to share by instant message.\r\n\r\nIf you disable or don’t configure this policy setting, choosing File > Share takes the user to the Share dialog, which doesn’t have all the sharing choices.\r\n\r\nNote: The user can also add buttons for these additional sharing choices to the ribbon or to the quick access toolbar, regardless of how this policy setting is configured.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_alwaysshowfilesharemoreoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_alwaysshowfilesharemoreoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"4c81e6ccc2495a00":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotdisplaypathsinalerts","displayName":"Do not display paths in alerts (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotdisplaypathsinalerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotdisplaypathsinalerts_1","displayName":"Enabled","description":null,"helpText":null}]},"4c75708850d6101d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_homeworkflowlibrary_l_path2504","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"4c6958e862298d0e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"4c50b8796eb14b1e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]},"4c8dbf6b7cc5288c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_frequencyforpollingtheservertodownload","displayName":"Frequency for polling the server to download published links (User)","description":"Minimum time to wait (in seconds) before polling SharePoint Server to download published links.","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_frequencyforpollingtheservertodownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_frequencyforpollingtheservertodownload_1","displayName":"Enabled","description":null,"helpText":null}]},"4c8755ef59604833":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_automaticbulletedlists","displayName":"Automatic bulleted lists (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"62492a4c-fd70-4275-ae5e-d60e200e3553","categoryName":"Apply as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_automaticbulletedlists_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_automaticbulletedlists_1","displayName":"Enabled","description":null,"helpText":null}]},"4c78860663790bc3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"4c46840a20fd1d71":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}","displayName":" Firewall Rule Name","description":"Unique alpha numeric identifier for the rule. The rule name must not include a forward slash (/).","helpText":"","infoUrls":[],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"4c9b79b633a9853f":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_enablefirewall","displayName":"Enable Private Network Firewall","description":"This value is an on/off switch for the Hyper-V Firewall enforcement.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_enablefirewall_false","displayName":"False","description":"Disable Firewall","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_enablefirewall_true","displayName":"True","description":"Enable Firewall","helpText":null}]},"4c9f758691ebda7f":{"id":"vendor_msft_firewall_mdmstore_publicprofile_defaultoutboundaction","displayName":"Default Outbound Action","description":"This value is the action that the firewall does by default (and evaluates at the very end) on outbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 0 [Allow]. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_defaultoutboundaction_0","displayName":"Allow","description":"Allow Outbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_defaultoutboundaction_1","displayName":"Block","description":"Block Outbound By Default","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/4d.json b/public/intune-definitions/4d.json new file mode 100644 index 000000000000..786e869ec6b3 --- /dev/null +++ b/public/intune-definitions/4d.json @@ -0,0 +1 @@ +{"4d60378409872839":{"id":"com.apple.directoryservice.managed_adpacketencryptflag","displayName":"AD Packet Encrypt Flag","description":"If true, enables the AD Packet Encrypt key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adpacketencryptflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adpacketencryptflag_true","displayName":"True","description":null,"helpText":null}]},"4db95bda5b242caf":{"id":"com.apple.managedclient.preferences_checkfordefinitionsupdate","displayName":"Check for definitions update","description":"Check for definitions update before initiating a scheduled scan","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":[{"id":"com.apple.managedclient.preferences_checkfordefinitionsupdate_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_checkfordefinitionsupdate_true","displayName":"Enabled","description":null,"helpText":null}]},"4d57701ebfbb587a":{"id":"com.apple.managedclient.preferences_geolocationblockedforurls","displayName":"Block geolocation on these sites","description":"Use this policy to define a list of URL patterns for sites that are blocked from accessing the user's geolocation. These sites also can't prompt the user for location permissions.\n\nIf you enable this policy, the list you provide determines which sites are blocked from requesting or accessing geolocation.\n\nIf you disable or don't configure this policy, DefaultGeolocationSetting applies to all sites, if configured. If it's not configured, the user’s personal browser setting is used.\n\nFor detailed information on valid url patterns, see the documentation on pattern formats: https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#geolocationblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"4de5eb5dfa18cd5c":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_image_search_url","displayName":"Image search URL","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"4d839726a83ab9f9":{"id":"com.apple.managedclient.preferences_popupsblockedforurls","displayName":"Block pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from opening pop-up windows.\n\nIf you don't configure this policy, the global default value from the \"DefaultPopupsSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#popupsblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"4d1ab496d8605e4a":{"id":"com.apple.managedclient.preferences_serialaskforurls","displayName":"Allow the Serial API on specific sites","description":"Specifies URL patterns for sites that are allowed to request access to a serial port.\n\nIf not configured, Microsoft Edge uses the value from the DefaultSerialGuardSetting policy (if set), or the user's settings.\n\nFor unmatched sites, the following order applies:\n\n1. \"SerialBlockedForUrls\" (if matched).\n\n2. DefaultSerialGuardSetting (if set).\n\n3. User's settings.\n\nIf URL patterns in this policy conflict with those in \"SerialBlockedForUrls\", they will be ignored.\n\nFor detailed information about valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#serialaskforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"4daa1b69a35d2e99":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enabledeprecatedwebplatformfeatures","displayName":"Re-enable deprecated web platform features for a limited time (Obsolete)","description":"This policy is obsolete because dedicated web platform policies are now used to manage individual web platform feature deprecations.\n\nSpecify a list of deprecated web platform features to temporarily re-enable.\n\nThis policy lets you re-enable deprecated web platform features for a limited time. Features are identified by a string tag.\n\nIf you don't configure this policy, if the list is empty, or if a feature doesn't match one of the supported string tags, all deprecated web platform features remain disabled.\n\nWhile the policy itself is supported on the above platforms, the feature it's enabling might not be available on all of those platforms. Not all deprecated Web Platform features can be re-enabled. Only the following explicitly listed features can be re-enabled, and only for a limited period of time, which differs per feature. You can review the intent behind the Web Platform feature changes at https://bit.ly/blinkintents.\n\nThe general format of the string tag is [DeprecatedFeatureName]_EffectiveUntil[yyyymmdd].\n\nPolicy options mapping:\n\n* ExampleDeprecatedFeature (ExampleDeprecatedFeature_EffectiveUntil20080902) = Enable ExampleDeprecatedFeature API through 2008/09/02\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enabledeprecatedwebplatformfeatures_exampledeprecatedfeature","displayName":"Enable ExampleDeprecatedFeature API through 2008/09/02","description":null,"helpText":null}},"4dd3ff0e2b6bf9f6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodeenablesavepageas","displayName":"Allow Save page as in Internet Explorer mode","description":"This policy enables 'Save page as' functionality in Internet Explorer mode.\nUsers can use this option to save the current page in the browser. When a user reopens a saved page, it's loaded in the default browser.\n\nIf you enable this policy, the \"Save page as\" option is clickable in \"More tools\".\n\nIf you disable or don't configure this policy, users can't select the \"Save page as\" option in \"More tools\".\n\nNote: To make the \"Ctrl+S\" shortcut work, users must enable the Internet Explorer policy, namely 'Enable extended hot key in Internet Explorer mode'.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodeenablesavepageas_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodeenablesavepageas_true","displayName":"Enabled","description":null,"helpText":null}]},"4d71c140203a2425":{"id":"com.microsoft.edge.mamedgeappconfigsettings.popupsblockedforurls","displayName":"Block pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from opening pop-up windows. Wildcards (*) are allowed.\n\nIf you don't configure this policy, the global default value from the \"DefaultPopupsSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"4d320e41b08be391":{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionaggressiveness","displayName":"Remote Encryption Protection Aggressiveness","description":"Set the criteria for when Remote Encryption Protection blocks IP addresses.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionaggressiveness_0","displayName":"Low: Block only when confidence level is 100% (Default)","description":"Low: Block only when confidence level is 100% (Default)","helpText":null},{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionaggressiveness_1","displayName":"Medium: Use cloud aggregation and block when confidence level is above 99%","description":"Medium: Use cloud aggregation and block when confidence level is above 99%","helpText":null},{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionaggressiveness_2","displayName":"High: Use cloud intel and context, and block when confidence level is above 90%","description":"High: Use cloud intel and context, and block when confidence level is above 90%","helpText":null}]},"4d4b0949a9173518":{"id":"device_vendor_msft_defender_configuration_disabletlsparsing","displayName":"Disable Tls Parsing","description":"This setting disables TLS Parsing for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disabletlsparsing_1","displayName":"TLS parsing is disabled","description":"TLS parsing is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disabletlsparsing_0","displayName":"TLS parsing is enabled","description":"TLS parsing is enabled","helpText":null}]},"4d42a183bd578b8a":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_rsoplogging","displayName":"Turn off Resultant Set of Policy logging","description":"This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer.\r\n\r\nRSoP logs information on Group Policy settings that have been applied to the client. This information includes details such as which Group Policy Objects (GPO) were applied, where they came from, and the client-side extension settings that were included.\r\n\r\nIf you enable this setting, RSoP logging is turned off.\r\n\r\nIf you disable or do not configure this setting, RSoP logging is turned on. By default, RSoP logging is always on.\r\n\r\nNote: To view the RSoP information logged on a client computer, you can use the RSoP snap-in in the Microsoft Management Console (MMC).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-rsoplogging"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_rsoplogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_rsoplogging_1","displayName":"Enabled","description":null,"helpText":null}]},"4dfed9e028b399c6":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday","displayName":"Specify the day of the week to run a scheduled full scan to complete remediation","description":"This policy setting allows you to specify the day of the week on which to perform a scheduled full scan in order to complete remediation. The scan can also be configured to run every day or to never run at all.\r\n\r\n This setting can be configured with the following ordinal number values:\r\n (0x0) Every Day\r\n (0x1) Sunday \r\n (0x2) Monday\r\n (0x3) Tuesday\r\n (0x4) Wednesday\r\n (0x5) Thursday\r\n (0x6) Friday\r\n (0x7) Saturday\r\n (0x8) Never (default)\r\n\r\n If you enable this setting, a scheduled full scan to complete remediation will run at the frequency specified.\r\n\r\n If you disable or do not configure this setting, a scheduled full scan to complete remediation will run at a default frequency.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-remediation-scan-scheduleday"],"categoryId":"8212ba6e-101d-4ee8-8ca2-c4cd2cddba96","categoryName":"Remediation","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduleday_1","displayName":"Enabled","description":null,"helpText":null}]},"4dbe0fe43b394617":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxmonitor_ts_max_monitor","displayName":"Maximum Monitors","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":null},"4d75fed715c13d10":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled","displayName":"Browser experiments icon in toolbar","description":"Setting the policy to Enabled or leaving the policy unset means that users can access browser experimental features through an icon in the toolbar\r\n\r\nSetting the policy to Disabled removes the browser experimental features icon from the toolbar.\r\n\r\nchrome://flags and any other means of turning off and on browser features will still behave as expected regardless of whether this policy is Enabled or Disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4dec711dde01e859":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading","description":"Setting the policy to 3 lets websites ask for read access to files and directories in the host operating system's file system via the File System API. Setting the policy to 2 denies access.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4d485f57b4575835":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"4d258cfeab23ce7d":{"id":"device_vendor_msft_policy_config_defender_allowrealtimemonitoring","displayName":"Allow Realtime Monitoring","description":"Allows or disallows Windows Defender Realtime Monitoring functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowrealtimemonitoring_0","displayName":"Not allowed. Turns off the real-time monitoring service.","description":"Not allowed. Turns off the real-time monitoring service.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowrealtimemonitoring_1","displayName":"Allowed. Turns on and runs the real-time monitoring service.","description":"Allowed. Turns on and runs the real-time monitoring service.","helpText":null}]},"4d54b8557e004aa1":{"id":"device_vendor_msft_policy_config_experience_allowfindmydevice","displayName":"Allow Find My Device","description":"This policy turns on Find My Device. When Find My Device is on, the device and its location are registered in the cloud so that the device can be located when the user initiates a Find command from account. microsoft. com. In Windows 10, version 1709 devices that are compatible with active digitizers, enabling Find My Device will also allow the user to view the last location of use of their active digitizer on their device; this location is stored locally on the user's device after each use of their active digitizer. When Find My Device is off, the device and its location are not registered and the Find My Device feature will not work. In Windows 10, version 1709 the user will not be able to view the location of the last use of their active digitizer on their device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowfindmydevice"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowfindmydevice_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowfindmydevice_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"4dda9ffb0157c3e0":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites","displayName":"Turn on Suggested Sites","description":"This policy setting controls the Suggested Sites feature, which recommends websites based on the user’s browsing activity. Suggested Sites reports a user’s browsing history to Microsoft to suggest sites that the user might want to visit.\n\nIf you enable this policy setting, the user is not prompted to enable Suggested Sites. The user’s browsing history is sent to Microsoft to produce suggestions.\n\nIf you disable this policy setting, the entry points and functionality associated with this feature are turned off.\n\nIf you do not configure this policy setting, the user can turn on and turn off the Suggested Sites feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsuggestedsites"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"4daa98d1e3c2059f":{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled","displayName":"Clear history for IE and IE mode every time you exit","description":"This policy controls whether browsing history is deleted from Internet Explorer and Internet Explorer mode every time Microsoft Edge is closed.\r\n\r\nUsers can configure this setting in the 'Clear browsing data for Internet Explorer' option in the Privacy, search, and services menu of Settings.\r\n\r\nIf you enable this policy, on browser exit Internet Explorer browsing history will be cleared.\r\n\r\nIf you disable or do not configure this policy, Internet Explorer browsing history will not be cleared on browser exit.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4d8342dfffdf3032":{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled","displayName":"Enable zstd content encoding support","description":"This feature enables advertising \"zstd\" support in the Accept-Encoding request header and support for decompressing zstd web content.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will accept server responses compressed with zstd.\r\n\r\nIf you disable this policy, the zstd content encoding feature will not be advertised or supported when processing server responses.\r\n\r\nThis policy is temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4d1f547f5e1b5b9e":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled","displayName":"Machine learning powered autofill suggestions","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and will not be used elsewhere.\r\n\r\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\r\n\r\nIf you disable this policy, machine learning powered autofill suggestions will not be shown, and autofill will no longer use cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4d8296300c73a662":{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon will be shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\r\n\r\nThis policy only applies when users are accessing Copilot in the sidepane.\r\n\r\nIf the policy is enabled: Copilot will appear in the toolbar.\r\n\r\nIf the policy is disabled: Copilot will not appear in the toolbar.\r\n\r\nIf the policy is not configured: Otherwise, Copilot will show in the toolbar and users may enable or disable Copilot from showing by using the Show Copilot toggle in settings.\r\n\r\nWhen both this policy and 'HubsSidebarEnabled' (Show Hubs Sidebar) are configured, this policy takes precedence in determining whether Copilot appears in the toolbar. If this policy is not configured and 'HubsSidebarEnabled' is disabled, Copilot will remain hidden. In a future release, this policy will be the sole control for managing Copilot's visibility in the toolbar.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4db768f8daca17bf":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink","displayName":"Specify custom help link","description":"Specify a link for the Help menu or the F1 key.\r\n\r\nIf you enable this policy, an admin can specify a link for the Help menu or the F1 key.\r\n\r\nIf you disable or don't configure this policy, the default link for the Help menu or the F1 key is used.\r\n\r\nExample value: https://go.microsoft.com/fwlink/?linkid=2080734","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_1","displayName":"Enabled","description":null,"helpText":null}]},"4df8dc20c0f63bfb":{"id":"device_vendor_msft_policy_config_power_allowhibernate","displayName":"Allow Hibernate","description":"This policy setting decides if hibernate on the machine is allowed or not. Supported values: 0 – Disable hibernate. 1 (default) - Allow hibernate.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#allowhibernate"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_allowhibernate_0","displayName":"Block","description":"Disable hibernate.","helpText":null},{"id":"device_vendor_msft_policy_config_power_allowhibernate_1","displayName":"Allow","description":"Allow hibernate.","helpText":null}]},"4db3b173cdc1708d":{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode","displayName":"Configure Search On Taskbar Mode","description":"Configures search on the taskbar. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#configuresearchontaskbarmode"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_0","displayName":"Hide","description":"Hide","helpText":null},{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_1","displayName":"Search icon only","description":"Search icon only","helpText":null},{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_2","displayName":"Search icon and label","description":"Search icon and label","helpText":null},{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_3","displayName":"Search box","description":"Search box","helpText":null}]},"4d6d9bab4118a9d5":{"id":"device_vendor_msft_policy_config_start_hidesignout","displayName":"Hide Sign Out","description":"Enabling this policy hides \"Sign out\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidesignout"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidesignout_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidesignout_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"4d58378433b0b59f":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},"4dcd002cc4e631b8":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowinboxwsl","displayName":"Allow the Inbox version of the Windows Subsystem for Linux","description":"When set to disabled, this policy disables the inbox version (optional component) of the Windows Subsystem for Linux. If this policy is disabled, only the store version of WSL can be used.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowinboxwsl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowinboxwsl_1","displayName":"Enabled","description":null,"helpText":null}]},"4d71ed61ddd79fbd":{"id":"linux_platformupdatecontrols_schedule_months","displayName":"Platform Update Schedule Month","description":"Specifies in which months platform updates are allowed. Select 'Every Month' for no restriction, or choose a specific month.","helpText":null,"infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":[{"id":"linux_platformupdatecontrols_schedule_months_0","displayName":"January","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_1","displayName":"February","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_2","displayName":"March","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_3","displayName":"April","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_4","displayName":"May","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_5","displayName":"June","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_6","displayName":"July","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_7","displayName":"August","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_8","displayName":"September","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_9","displayName":"October","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_10","displayName":"November","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_months_11","displayName":"December","description":null,"helpText":null}]},"4d459a708470a3b3":{"id":"passcode_minimumlength","displayName":"Minimum Passcode Length","description":"Specifies the minimum number of characters a passcode can contain.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"4dfb6cbd9a4bc211":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1","displayName":"List of applications to be excluded (User)","description":"This policy setting limits Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on.\r\n\r\nIf you enable this policy setting, you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors, click Show, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). File names must always include the .exe file name extension. To remove an application from the list, click the name, and then press DELETE. If this policy setting is enabled, the Exclude errors for applications on this list setting takes precedence.\r\n\r\nIf you disable or do not configure this policy setting, errors are reported on all Microsoft and Windows applications by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werexlusion-1"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4dc80e3750fb6b9e":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxriprouting","displayName":"IPX RIP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipxriprouting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxriprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxriprouting_1","displayName":"Enabled","description":null,"helpText":null}]},"4dc6597d92e15bf8":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_smtpprotocol","displayName":"SMTP Protocol (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-smtpprotocol"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_smtpprotocol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_smtpprotocol_1","displayName":"Enabled","description":null,"helpText":null}]},"4d6c363dc13e4094":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_1","displayName":"Software Installation (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstalationcomputers-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4d198ec6183cd20f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton","displayName":"Show Home button on toolbar (User)","description":"Setting the policy to Enabled shows the Home button on Google Chrome's toolbar. Setting the policy to Disabled keeps the Home button from appearing.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users chooses whether to show the Home button.","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton_1","displayName":"Enabled","description":null,"helpText":null}]},"4dde95526b2d1da1":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings","displayName":"Enterprise search aggregator settings (User)","description":"This policy allows administrators to set a designated enterprise search aggregator that will provide search recommendations and results within the omnibox (address bar) and the search box on the New Tab page.\r\n\r\nBy default, enterprise search suggestions will be blended and shown alongside regular Google Chrome recommendations. Users can explicitly scope their search to just the enterprise search aggregator by typing the keyword specified in the shortcut field with or without the @ prefix (e.g. @work) followed by Space or Tab in the omnibox. Scoped enterprise searches (triggered by a keyword) are currently only supported in the omnibox and not in the search box on the New Tab page.\r\n\r\nThe following fields are required: name, shortcut, search_url, suggest_url.\r\n\r\nThe name field corresponds to the search engine name shown to the user in the address bar.\r\n\r\nThe shortcut field corresponds to the keyword that the user enters to trigger the search. The shortcut can include plain words and characters, but cannot include spaces or start with the @ symbol. Shortcuts must be unique.\r\n\r\nThe search_url field specifies the URL on which to search. Enter the web address for the search engine's results page, and use '{searchTerms}' in place of the query.\r\n\r\nThe suggest_url field specifies the URL that provides search suggestions. A POST request will be made and the user's query will be passed in the POST params under key 'query'.\r\n\r\nThe icon_url field specifies the URL to an image that will be used on the search suggestions. A default icon will be used when this field is not set. It's recommended to use a favicon (example https://www.google.com/favicon.ico). Supported image file formats: JPEG, PNG, and ICO.\r\n\r\nThe require_shortcut field specifies whether the address bar shortcut is required to see search recommendations. If required, suggestions will not be shown in the search box on the New Tab page, but will continue to be shown in the omnibox (address bar) in scoped search mode. If this field is not set, the address bar shortcut is not required.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=EnterpriseSearchAggregatorSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"name\": \"My Search Aggregator\",\r\n \"shortcut\": \"work\",\r\n \"search_url\": \"https://www.aggregator.com/search?q={searchTerms}\",\r\n \"suggest_url\": \"https://www.aggregator.com/suggest\",\r\n \"icon_url\": \"https://www.google.com/favicon.ico\",\r\n \"require_shortcut\": true\r\n}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"4df3ce0352dd2e8b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled","displayName":"Control the new behavior for event dispatching on disabled form controls (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4d7d407a7310491e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84","displayName":"Move selection after Enter direction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_0","displayName":"Down","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_1","displayName":"Right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_2","displayName":"Up","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_3","displayName":"Left","description":null,"helpText":null}]},"4defbab95411f0c1":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles","displayName":"Microsoft Office data connection files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"4dda71527a8638ed":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_pathcolon25","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"4d291a1eb0b8818d":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"4da53d143e2e6680":{"id":"user_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons","displayName":"Enable Navigation Buttons (User)","description":"Enable/disable kiosk browser's navigation buttons (forward/back).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enablenavigationbuttons"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":[{"id":"user_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"user_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_0","displayName":"Disable","description":"Disable","helpText":null}]},"4d573db1c373f20d":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended","displayName":"Enable Gamer Mode (User)","description":"Microsoft Edge Gamer Mode allows gamers to personalize their browser with gaming themes and gives them the option of enabling Efficiency Mode for PC gaming, the Gaming feed on new tabs, sidebar apps for gamers, and more.\r\n\r\nIf you enable or don't configure this policy, users can opt into Gamer Mode.\r\nIf you disable this policy, Gamer Mode will be disabled.","helpText":"","infoUrls":[],"categoryId":"48965ad9-3011-4722-855b-7179fef89954","categoryName":"Games settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4d072bafb3a7c94e":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes","displayName":"New tab page experience (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_1","displayName":"Disable daily background image type","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_2","displayName":"Disable custom background image type","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_3","displayName":"Disable all background image types","description":null,"helpText":null}]},"4d0f3f9dc4d32d62":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (User)","description":"This policy configures behavior for intranet redirection via DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nIf this policy isn't configured, the browser will use the default behavior of DNS interception checks and intranet redirect suggestions. In M88, they are enabled by default but will be disabled by default in the future release.\r\n\r\n'DNSInterceptionChecksEnabled' (DNS interception checks enabled) is a related policy that might also disable DNS interception checks. However, this policy is a more flexible version which might separately control intranet redirection infobars and might be expanded in the future.\r\nIf either 'DNSInterceptionChecksEnabled' or this policy make a request to disable interception checks, the checks will be disabled.\r\nIf DNS interception checks are disabled by this policy but 'GoToIntranetSiteForSingleWordEntryInAddressBar' (Force direct intranet site navigation instead of searching on single word entries in the Address Bar) is enabled, single word queries will still result in intranet navigations.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Use default browser behavior.\r\n\r\n* DisableInterceptionChecksDisableInfobar (1) = Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\r\n\r\n* DisableInterceptionChecksEnableInfobar (2) = Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.\r\n\r\n* EnableInterceptionChecksEnableInfobar (3) = Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"4d2b49ff12b0ed44":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains","displayName":"Configure the list of domains for which enhance security mode will always be enforced (User)","description":"Configure the list of enhance security untrusted domains. This means that\r\nenhance security mode will always be enforced when loading the sites in untrusted domains.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"4db3cabaa61c19be":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework2","displayName":"Replace Label - Work2 (User)","description":"This policy setting allows you to change or remove the 3rd label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework2_1","displayName":"Enabled","description":null,"helpText":null}]},"4dd7b5474cb3b755":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy1_l_placesbarname","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"4db9c8b7d387cf42":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bosnianlatinbosniaandherzegovina","displayName":"Bosnian (Latin, Bosnia and Herzegovina) (User)","description":"Enables the editing language \"Bosnian (Latin, Bosnia and Herzegovina)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bosnianlatinbosniaandherzegovina_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bosnianlatinbosniaandherzegovina_1","displayName":"Enabled","description":null,"helpText":null}]},"4d3cd3178331be71":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitcustomtags_l_officereadinesstoolkitcustomtagstag4","displayName":"Label 4: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"da04d4b8-bd11-439e-9663-5fd2399d9cc1","categoryName":"Readiness Toolkit","options":null},"4d90c226b104412e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel","displayName":"Set password rules level (User)","description":"This policy setting allows you to set the password rules level.\r\n\r\nIf you enable this policy setting, you may specify a password rules level:\r\n\r\n- No password checks: There are no complexity checks\r\n- Local length check: Minimum length checks\r\n- Local length and complexity checks: Minimum length checks plus 3 of 4 character groups checks.\r\n- Local length, local complexity, and domain policy checks: All the previous checks plus Windows domain password rules enforced.\r\n\r\nIf you select \"Local length and complexity checks\" or \"Local length, local complexity, and domain policy checks,\" then the password must contain characters from at least three of four character sets: lowercase a-z, uppercase A-Z, digits 0-9, or non-alphabetic characters. When this complexity is enforced, the minimum password length needs to be at least 6, but can be more depending on the value set in the \"Set minimum password length\" policy setting.\r\n\r\nIf you select \"Local length, local complexity, and domain policy checks,\" then Microsoft Office will use the Windows domain policy as well as all the settings \"Local length and complexity checks.\" This allows a custom password filter that is installed for Windows passwords to be used. If you are offline or a domain controller cannot be contacted, then the Windows password settings are not used, and only the \"Local length and complexity checks\" settings are used. If you don’t have a custom password filter, then \"Local length and complexity checks\" saves a trip across the network and would be the best choice.\r\n\r\nIf you disable or do not configure this policy setting, the behavior is the same as if this policy setting were enabled and \"No password checks\" selected.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel_1","displayName":"Enabled","description":null,"helpText":null}]},"4d26bc31e62550b6":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_disablepasswordprotectedsections","displayName":"Disable password protected sections (User)","description":"Disables the ability to create new password protected sections. You can however still unlock and edit existing sections which had a password set.","helpText":"","infoUrls":[],"categoryId":"1979a12b-2a72-438d-9de7-320d1b38e777","categoryName":"Password","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_disablepasswordprotectedsections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_disablepasswordprotectedsections_1","displayName":"Enabled","description":null,"helpText":null}]},"4d876e66deabf7f6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_whenoutlookisaskedtorespondtoareadreceiptrequest","displayName":"When Outlook is asked to respond to a read receipt request: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","categoryName":"Tracking Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_whenoutlookisaskedtorespondtoareadreceiptrequest_0","displayName":"Always send a response","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_whenoutlookisaskedtorespondtoareadreceiptrequest_1","displayName":"Never send a response","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_whenoutlookisaskedtorespondtoareadreceiptrequest_2","displayName":"Ask before sending a response","description":null,"helpText":null}]},"4deef4f5ef54923a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting","displayName":"RPC Proxy Authentication Setting (User)","description":"This policy setting determines the RPC proxy authentication setting for Outlook Anywhere.\r\n \r\nIf you enable this policy setting, you can specify the proxy authentication setting that Outlook uses, and this overrides any proxy authentication setting specified in Autodiscover.\r\n\r\nIf you do not configure this policy setting Outlook uses the proxy server authentication specified in Autodiscover.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyauthenticationsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4d27e69167c908df":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles","displayName":"PowerPoint beta files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_1","displayName":"Enabled","description":null,"helpText":null}]},"4d1d7151996cc281":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_clipartpictures","displayName":"Clipart pictures (User)","description":"This policy setting allows you to define the default path to Clipart pictures that is set in Word Options | Advanced | General | \"File Locations...\"\r\n\r\nIf you enable this policy setting, you may specify the default path to Clipart pictures.\r\n\r\nIf you disable or do not configure this policy setting, no path is specified.","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_clipartpictures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_clipartpictures_1","displayName":"Enabled","description":null,"helpText":null}]},"4dac22c79d0041aa":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders63","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders63_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders63_1","displayName":"True","description":null,"helpText":null}]},"4dfd4dfa7cd3ebb9":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_pathcolon80","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"4d669d95270421ce":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders91","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders91_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders91_1","displayName":"True","description":null,"helpText":null}]},"4dccc62698ace95f":{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogignoredrules","displayName":"Enable Log Ignored Rules","description":"This value is used as an on/off switch. The server MAY use this value in an implementation-specific way to control logging of events if a rule is not enforced for any reason. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogignoredrules_false","displayName":"Disable Logging Of Ignored Rules","description":"Disable Logging Of Ignored Rules","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogignoredrules_true","displayName":"Enable Logging Of Ignored Rules","description":"Enable Logging Of Ignored Rules","helpText":null}]},"4d2111b43c7b6a0b":{"id":"vendor_msft_firewall_mdmstore_privateprofile_allowlocalpolicymerge","displayName":"Allow Local Policy Merge","description":"This value is used as an on/off switch. If this value is false, firewall rules from the local store are ignored and not enforced. The merge law for this option is to always use the value of the GroupPolicyRSoPStore. This value is valid for all schema versions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_allowlocalpolicymerge_false","displayName":"False","description":"AllowLocalPolicyMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_allowlocalpolicymerge_true","displayName":"True","description":"AllowLocalPolicyMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/4e.json b/public/intune-definitions/4e.json new file mode 100644 index 000000000000..94b30760d5fb --- /dev/null +++ b/public/intune-definitions/4e.json @@ -0,0 +1 @@ +{"4e1481ed42942324":{"id":"ade_accountsettings_primaryaccountfullname","displayName":"Primary account full name","description":"The full name for the account. Setup Assistant will user this value to prefill the Full Name field if 'Prefill account info' is set to 'Not configured'. This field is to be defaulted to the variable, {{username}}, for example, 'John Doe'.","helpText":null,"infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":null},"4ee791c88e1f1b3e":{"id":"ade_appledevicenametemplate","displayName":"Device name template","description":"Create a unique name for your devices. Names must be 63 characters or less, and can contain letters (a-z, A-Z), numbers (0-9), and hyphens.Variables supported: {{SERIAL}}, {{DEVICETYPE}}","helpText":"{{DEVICETYPE}}-{{SERIAL}}","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":null},"4e20e58e64c3100a":{"id":"app_allowed_alwaysallowmanagedapps","displayName":"Always Allow Managed Apps","description":"If `true`, the device implicitly includes managed apps in the effective allow list when `AllowedApps` or `AllowedBinaries` is present.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_allowed_alwaysallowmanagedapps_false","displayName":"Blocked","description":null,"helpText":null},{"id":"app_allowed_alwaysallowmanagedapps_true","displayName":"Allowed","description":null,"helpText":null}]},"4e36227575ac2b58":{"id":"com.apple.dock_persistent-apps_item_tile-data_url","displayName":"URL","description":"The URL string.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"4efa6841ee8b2219":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver","displayName":"Update channel override (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"4ebad3f74c71f4d9":{"id":"com.apple.managedclient.preferences_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting","description":"Setting the policy to \"BlockWindowManagement\" (value 2) automatically denies the window management permission to sites by default. This limits the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\n\nSetting the policy to \"AskWindowManagement\" (value 3) by default prompts the user when the window management permission is requested. If users allow the permission, it extends the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\n\nNot configuring the policy means the \"AskWindowManagement\" policy applies, but users can change this setting.\n\nPolicy options mapping:\n\n* BlockWindowManagement (2) = Denies the Window Management permission on all sites by default\n\n* AskWindowManagement (3) = Ask every time a site wants obtain the Window Management permission\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultwindowmanagementsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultwindowmanagementsetting_0","displayName":"Denies the Window Management permission on all sites by default","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultwindowmanagementsetting_1","displayName":"Ask every time a site wants obtain the Window Management permission","description":null,"helpText":null}]},"4ee8a1deef5b8527":{"id":"com.apple.managedclient.preferences_javascriptallowedforurls","displayName":"Allow JavaScript on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to run JavaScript.\n\nIf you don't configure this policy, the global default value from the \"DefaultJavaScriptSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#javascriptallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"4ef87b83516e4265":{"id":"com.apple.networkusagerules_simrules_item_iccids","displayName":"ICCI Ds","description":"One or more ICCIDs of SIM cards for which the `WiFiAssistPolicy` applies. All ICCIDs in all installed Network Usage Rules payloads must be unique. An example ICCID is `89310410106543789301`.","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":null},"4e6f631df588283f":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"4e1bcaf8f602f823":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgesidebarappurlhostallowlist","displayName":"Allow specific apps to be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that aren't subject to the \"EdgeSidebarAppUrlHostBlockList\".\n\nIf you don't configure this policy, a user can open any app in sidebar except the urls listed in \"EdgeSidebarAppUrlHostBlockList\".\n\nIf you configure this policy, the apps listed in the allow list could be opened in sidebar even if they are listed in the block list.\n\nBy default, all apps are allowed. However, if you prohibited apps by policy, you can use the list of allowed apps to change that policy.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"4e88374f1b1edfdc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.familysafetysettingsenabled","displayName":"Allow users to configure Family safety and Kids Mode","description":"This policy disables two family safety-related features in the browser. This hides the Family page inside Settings, and navigation to edge://settings/family is blocked. The family settings page describes what features are available with family groups with Microsoft Family Safety. Learn more about Family Safety here: (https://go.microsoft.com/fwlink/?linkid=2098432). Starting in Microsoft Edge version 90, this policy also disables Kids Mode, a kid-friendly browsing mode with custom themes and allow list browsing that requires the device password to exit. Learn more about Kids Mode here: (https://go.microsoft.com/fwlink/?linkid=2146910)\n\nIf you enable this policy or don't configure it, the family page in Settings is shown and Kids Mode is available.\n\nIf you disable this policy, the family page isn't shown, and Kids Mode is hidden.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.familysafetysettingsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.familysafetysettingsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4e794c4998979bea":{"id":"defender_disablerestorepoint","displayName":"Create a system restore point before computers are cleaned","description":"Disables restore point","helpText":null,"infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"defender_disablerestorepoint_0","displayName":"No","description":null,"helpText":null},{"id":"defender_disablerestorepoint_1","displayName":"Yes","description":null,"helpText":null}]},"4eb04db958388fd2":{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentialswhenntlmonly_concatenatedefaults_ascn","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentialswhenntlmonly_concatenatedefaults_ascn_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentialswhenntlmonly_concatenatedefaults_ascn_1","displayName":"True","description":null,"helpText":null}]},"4e3a9f14ae18b75a":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio","displayName":"Turn on Mapper I/O (LLTDIO) driver","description":"This policy setting changes the operational behavior of the Mapper I/O network protocol driver.\r\n\r\nLLTDIO allows a computer to discover the topology of a network it's connected to. It also allows a computer to initiate Quality-of-Service requests such as bandwidth estimation and network health analysis.\r\n\r\nIf you enable this policy setting, additional options are available to fine-tune your selection. You may choose the \"Allow operation while in domain\" option to allow LLTDIO to operate on a network interface that's connected to a managed network. On the other hand, if a network interface is connected to an unmanaged network, you may choose the \"Allow operation while in public network\" and \"Prohibit operation while in private network\" options instead.\r\n\r\nIf you disable or do not configure this policy setting, the default behavior of LLTDIO will apply.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery#admx-linklayertopologydiscovery-lltd-enablelltdio"],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablelltdio_1","displayName":"Enabled","description":null,"helpText":null}]},"4e044afe22c056f0":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disablelocaladminmerge","displayName":"Configure local administrator merge behavior for lists","description":"This policy setting controls whether or not complex list settings configured by a local administrator are merged with Group Policy settings. This setting applies to lists such as threats and Exclusions.\r\n\r\n If you disable or do not configure this setting, unique items defined in Group Policy and in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, Group policy Settings will override preference settings.\r\n\r\n If you enable this setting, only items defined by Group Policy will be used in the resulting effective policy. Group Policy settings will override preference settings configured by the local administrator.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-disablelocaladminmerge"],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disablelocaladminmerge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disablelocaladminmerge_1","displayName":"Enabled","description":null,"helpText":null}]},"4e5f745536c4b7c1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_asronlyexclusions","displayName":"Exclude files and paths from Attack Surface Reduction Rules","description":"\r\n Exclude files and paths from Attack Surface Reduction (ASR) rules.\r\n\r\n Enabled:\r\n Specify the folders or files and resources that should be excluded from ASR rules in the Options section.\r\n Enter each rule on a new line as a name-value pair:\r\n - Name column: Enter a folder path or a fully qualified resource name. For example, \"C:\\Windows\" will exclude all files in that directory. \"C:\\Windows\\App.exe\" will exclude only that specific file in that specific folder\r\n - Value column: Enter \"0\" for each item\r\n\r\n Disabled:\r\n No exclusions will be applied to the ASR rules.\r\n\r\n Not configured:\r\n Same as Disabled.\r\n\r\n You can configure ASR rules in the Configure Attack Surface Reduction rules GP setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-exploitguard-asr-asronlyexclusions"],"categoryId":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","categoryName":"Attack Surface Reduction","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_asronlyexclusions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_asronlyexclusions_1","displayName":"Enabled","description":null,"helpText":null}]},"4ea8acfd2aa9d57b":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_allowpause","displayName":"Allow users to pause scan","description":"This policy setting allows you to manage whether or not end users can pause a scan in progress.\r\n\r\n If you enable or do not configure this setting, a new context menu will be added to the task tray icon to allow the user to pause a scan.\r\n\r\n If you disable this setting, users will not be able to pause scans.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-allowpause"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_allowpause_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_allowpause_1","displayName":"Enabled","description":null,"helpText":null}]},"4ebaee1ffcc35cff":{"id":"device_vendor_msft_policy_config_admx_msifilerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"e50acc0f-d177-4803-aa31-fc97eeb60ff2","categoryName":"MSI Corrupted File Recovery","options":[{"id":"device_vendor_msft_policy_config_admx_msifilerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_1","displayName":"Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msifilerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_2","displayName":"Prompt for Resolution","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msifilerecovery_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_3","displayName":"Silent","description":null,"helpText":null}]},"4e0a412a98d1ccd9":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup","displayName":"Word 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Word 2013.\r\nMicrosoft Word 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Word 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Word 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013wordbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"4e0dfabaad4e3e46":{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpquota","displayName":"Limit Windows File Protection cache size (Windows Insiders only)","description":"This policy setting specifies the maximum amount of disk space that can be used for the Windows File Protection file cache.\r\n\r\nWindows File Protection adds protected files to the cache until the cache content reaches the quota. If the quota is greater than 50 MB, Windows File Protection adds other important Windows XP files to the cache until the cache size reaches the quota.\r\n\r\nIf you enable this policy setting, enter the maximum amount of disk space to be used (in MB). To indicate that the cache size is unlimited, select \"4294967295\" as the maximum amount of disk space.\r\n\r\nIf you disable this policy setting or do not configure it, the default value is set to 50 MB on Windows XP Professional and is unlimited (4294967295 MB) on Windows Server 2003.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsfileprotection#admx-windowsfileprotection-wfpquota"],"categoryId":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","categoryName":"Windows File Protection","options":[{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpquota_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpquota_1","displayName":"Enabled","description":null,"helpText":null}]},"4e46934e4b3ae658":{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration_softwaresasgenerationdescription","displayName":"Set which software is allowed to generate the Secure Attention Sequence","description":null,"helpText":"","infoUrls":[],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration_softwaresasgenerationdescription_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration_softwaresasgenerationdescription_1","displayName":"Services","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration_softwaresasgenerationdescription_2","displayName":"Ease of Access applications","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration_softwaresasgenerationdescription_3","displayName":"Services and Ease of Access applications","description":null,"helpText":null}]},"4e3dedb97653060d":{"id":"device_vendor_msft_policy_config_cellular_showappcellularaccessui","displayName":"Set Per-App Cellular Access UI Visibility","description":"This policy setting configures the visibility of the link to the per-application cellular access control page in the cellular setting UX.\n\nIf this policy setting is enabled, a drop-down list box presenting possible values will be active. Select \"Hide\" or \"Show\" to hide or show the link to the per-application cellular access control page.\nIf this policy setting is disabled or is not configured, the link to the per-application cellular access control page is showed by default.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-cellular#cellular-showappcellularaccessui"],"categoryId":"eefc9ae4-b9ae-4d77-8b68-359b9e5ec6f7","categoryName":"WWAN UI Settings","options":[{"id":"device_vendor_msft_policy_config_cellular_showappcellularaccessui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_cellular_showappcellularaccessui_1","displayName":"Enabled","description":null,"helpText":null}]},"4e49cfa5061cf167":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed","displayName":"Enable additional protections for users enrolled in the Advanced Protection program","description":"This policy controls whether users enrolled in the Advanced Protection program receive extra protections. Some of these features may involve the sharing of data with Google (for example, Advanced Protection users will be able to send their downloads to Google for malware scanning). If set to True or not set, enrolled users will receive extra protections. If set to False, Advanced Protection users will receive only the standard consumer features.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"4e00efcada374804":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_remotedebuggingallowed","displayName":"Allow remote debugging","description":"Controls whether users may use remote debugging.\r\n\r\nIf this policy is set to Enabled or not set, users may use remote debugging by specifying --remote-debugging-port and --remote-debugging-pipe command line switches.\r\n\r\nIf this policy is set to Disabled, users are not allowed to use remote debugging.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_remotedebuggingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_remotedebuggingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"4ee6c6739c8bb5aa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_spellchecklanguageblocklistdesc","displayName":"Force disable spellcheck languages (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"4e4c98ec81f3eae0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_userdatadir","displayName":"Set user data directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"4eeea8f123d74fd1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_urlblacklistdesc","displayName":"Block access to a list of URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"4e43b424cb2ce99d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"4e1d20c43ae843b5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls","displayName":"Block clipboard on these sites","description":"Setting the policy lets you set a list of URL patterns that specify sites that can't use the clipboard site permission. This does not include all clipboard operations on origins matching the patterns. For instance, users will still be able to paste using keyboard shortcuts as this isn't gated by the clipboard site permission.\r\n\r\nLeaving the policy unset means DefaultClipboardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4ed4e7dfaa4a1b48":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize_512","displayName":"512 bytes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize_4096","displayName":"4 KB","description":null,"helpText":null}]},"4e66e5fdb8deaf81":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowfontdownloads"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"4e4bedd51c25d9f1":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowautomaticpromptingforactivexcontrols"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"4e20cbb41d1dd2d3":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace","description":"Setting the policy on Microsoft Edge turns on the restricted sign-in feature in Google Workspace and prevents users from changing this setting. Users can only access Google tools using accounts from the specified domains. To allow gmail or googlemail accounts, add consumer_accounts to the list of domains. This policy is based on the Chrome policy of the same name.\r\n\r\nIf you don't provide a domain name or leave this policy unset, users can access Google Workspace with any account.\r\n\r\nUsers cannot change or override this setting.\r\n\r\nNote: This policy causes the X-GoogApps-Allowed-Domains header to be appended to all HTTP and HTTPS requests to all google.com domains, as described in https://go.microsoft.com/fwlink/?linkid=2197973.\r\n\r\nExample value: example.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_1","displayName":"Enabled","description":null,"helpText":null}]},"4e013ea99dc8499b":{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled","displayName":"Enable QR Code Generator","description":"This policy enables the QR Code generator feature in Microsoft Edge.\r\n\r\nIf you enable this policy or don't configure it, the QR Code Generator feature is enabled.\r\n\r\nIf you disable this policy, the QR Code Generator feature is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4ec8ff5f154e2c2f":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed","displayName":"Live translation allowed","description":"Allow users to turn the Realtime Video Translation feature on or off.\r\n\r\nThis feature allows videos being watched to be translated to the selected language in real time or live. Users need to click the translate icon that appears when they hover over a video to get started.\r\n\r\nThis is the on-device feature and none of the audio, data or even translated audio leave the device.\r\n\r\nIf you enable or don't configure this policy, users can turn this feature on or off in edge://settings/languages.\r\nIf you disable this policy, users will not be able to turn this feature on. If user has been using the feature already and policy gets disabled, the feature related files downloaded previously, will be deleted from the device after 30 days. We recommend not to disable the policy, unless it is needed in your environment.\r\n\r\nIf users enable this feature, the feature related files (approximately 200 megabytes) will be downloaded to the device on the first run and periodically thereafter to enhance performance and accuracy. These files will be deleted 30 days after their last use.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"4e19cd100b86cff3":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_internetexplorerintegrationlocalfileextensionallowlistdesc","displayName":"Open local files in Internet Explorer mode file extension allow list (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4ee2c7d7342e31f7":{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~identity_onlyonpremisesimplicitsigninenabled","displayName":"Only on-premises account enabled for implicit sign-in","description":"Configure this policy to decide whether only on-premises accounts are enabled for implicit sign-in.\r\n\r\nIf you enable this policy, only on-premises accounts will be enabled for implicit sign-in. Microsoft Edge won't attempt to implicitly sign in to MSA or AAD accounts. Upgrade from on-premises accounts to AAD accounts will be stopped as well.\r\n\r\nIf you disable or don't configure this policy, all accounts will be enabled for implicit sign-in.\r\n\r\nThis policy will only take effect when policy 'ConfigureOnPremisesAccountAutoSignIn' (Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account) is enabled and set to 'SignInAndMakeDomainAccountNonRemovable'.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~identity_onlyonpremisesimplicitsigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~identity_onlyonpremisesimplicitsigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4e714d1b60fcb92f":{"id":"device_vendor_msft_policy_config_update_scheduledinstallfourthweek","displayName":"Scheduled Install Fourth Week","description":"Enables the IT admin to schedule the update installation on the fourth week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every fourth week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallfourthweek"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallfourthweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallfourthweek_1","displayName":"update is scheduled every fourth week of the month","description":"update is scheduled every fourth week of the month","helpText":null}]},"4e6afc0da05332ea":{"id":"osrecoverysettings_createrecoverypartition","displayName":"Create recovery partition","description":"Recovery partition created by default 500MB","helpText":"","infoUrls":[],"categoryId":"71f79fa3-14c0-4df8-bf9c-8476e36ea755","categoryName":"Operating system settings","options":[{"id":"osrecoverysettings_createrecoverypartition_0","displayName":"No","description":null,"helpText":null},{"id":"osrecoverysettings_createrecoverypartition_1","displayName":"Yes","description":null,"helpText":null}]},"4e664ef9f1b0ce80":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_datecolon8","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"4e18da71c652cb5c":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_descriptioncolon41","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"4ec1cf6c9821b595":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient","displayName":"File tab | Access Options | Customize | All Commands | Email (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_1","displayName":"True","description":null,"helpText":null}]},"4e4c23476c6b9247":{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disabletaskmgr","displayName":"Remove Task Manager (User)","description":"This policy setting prevents users from starting Task Manager.\r\n\r\nTask Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run.\r\n\r\nIf you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action.\r\n\r\nIf you disable or do not configure this policy setting, users can access Task Manager to start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ctrlaltdel#admx-ctrlaltdel-disabletaskmgr"],"categoryId":"5536b5f4-3d31-4290-acea-9bef323bb83d","categoryName":"Ctrl Alt Del Options","options":[{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disabletaskmgr_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disabletaskmgr_1","displayName":"Enabled","description":null,"helpText":null}]},"4e0d44484805a8da":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_ext","displayName":"Shared Folders Ext (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sharedfolders-ext"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_ext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_ext_1","displayName":"Enabled","description":null,"helpText":null}]},"4ebd16bc60ff9ae2":{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocationscripting_1","displayName":"Turn off location scripting (User)","description":"\r\n This policy setting turns off scripting for the location feature.\r\n\r\n If you enable this policy setting, scripts for the location feature will not run.\r\n\r\n If you disable or do not configure this policy setting, all location scripts will run.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablelocationscripting-1"],"categoryId":"b40cfb22-8f17-4317-bcbb-c1c871497446","categoryName":"Location and Sensors","options":[{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocationscripting_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocationscripting_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4e141cf7fd1c527f":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_override","displayName":"Allow users to change this setting (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_override_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_override_1","displayName":"True","description":null,"helpText":null}]},"4e3c32709d8430e8":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_promptrunasinstallnetpath","displayName":"Request credentials for network installations (User)","description":"Prompts users for alternate logon credentials during network-based installations.\r\n\r\nThis setting displays the \"Install Program As Other User\" dialog box even when a program is being installed from files on a network computer across a local area network connection.\r\n\r\nIf you disable this setting or do not configure it, this dialog box appears only when users are installing programs from local media.\r\n\r\nThe \"Install Program as Other User\" dialog box prompts the current user for the user name and password of an administrator. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials.\r\n\r\nIf the dialog box does not appear, the installation proceeds with the current user's permissions. If these permissions are not sufficient, the installation might fail, or it might complete but not include all features. Or, it might appear to complete successfully, but the installed program might not operate correctly.\r\n\r\nNote: If it is enabled, the \"Do not request alternate credentials\" setting takes precedence over this setting. When that setting is enabled, users are not prompted for alternate logon credentials on any installation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-promptrunasinstallnetpath"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_promptrunasinstallnetpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_promptrunasinstallnetpath_1","displayName":"Enabled","description":null,"helpText":null}]},"4e62007ac51babd4":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_1","displayName":"Turn off shell protocol protected mode (User)","description":"This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applications can open folders and launch files. The protected mode reduces the functionality of this protocol allowing applications to only open a limited set of folders. Applications are not able to open files with this protocol when it is in the protected mode. It is recommended to leave this protocol in the protected mode to increase the security of Windows.\r\n\r\nIf you enable this policy setting the protocol is fully enabled, allowing the opening of folders and files.\r\n\r\nIf you disable this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.\r\n\r\nIf you do not configure this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-shellprotocolprotectedmodetitle-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_1_1","displayName":"Enabled","description":null,"helpText":null}]},"4e24a07dd8608f93":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode","displayName":"Control use of the Headless Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode_1","displayName":"Allow use of the Headless Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode_2","displayName":"Do not allow use of the Headless Mode","description":null,"helpText":null}]},"4e5c958636943c76":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction","displayName":"Add restrictions on managed accounts (User)","description":"\r\n This policy requires SigninInterceptionEnabled to be set to True to take effect.\r\n\r\n If this policy is set to 'primary_account' at the machine level, all managed accounts will be forced to be primary.\r\n If this policy is set to 'primary_account' on an account, that account will always be a primary account, but may have secondary accounts in its profile.\r\n\r\n If this policy is set to 'primary_account_strict' at the machine level, all managed accounts will be forced to be primary.\r\n If this policy is set to 'primary_account_strict' on an account, that account will always be a primary account and will not have any secondary accounts in its profile.\r\n\r\n If this policy is set to 'none' or not set, managed accounts have no restrictions. This may result in a managed account being a secondary account, which disables its ability to receive policies set on the account by the admin.\r\n\r\n\r\nExample value: primary_account","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_1","displayName":"Enabled","description":null,"helpText":null}]},"4eea6ebf1f4ecef4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended","displayName":"Use New Tab Page as homepage (User)","description":"Setting the policy to Enabled makes the New Tab page the user's homepage, ignoring any homepage URL location. Setting the policy to Disabled means that their homepage is never the New Tab page, unless the user's homepage URL is set to chrome://newtab.\r\n\r\nIf you set the policy, users can't change their homepage type in Google Chrome. If not set, the user decides whether or not the New Tab page is their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4e66aa089053813a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode","displayName":"Sitelist parsing mode (User)","description":"This policy controls how Google Chrome interprets sitelist/greylist policies for the Legacy Browser Support feature. It affects the following policies: BrowserSwitcherUrlList, BrowserSwitcherUrlGreylist, BrowserSwitcherUseIeSitelist, BrowserSwitcherExternalSitelistUrl, and BrowserSwitcherExternalGreylistUrl.\r\n\r\nIf 'Default' (0) or unset, URL matching is less strict. Rules that do not contain \"/\" look for a substring anywhere in the URL's hostname. Matching the path component of a URL is case-sensitive.\r\n\r\nIf 'IESiteListMode' (1), URL matching is more strict. Rules that do not contain \"/\" only match at the end of the hostname. They must also be at a domain name boundary. Matching the path component of a URL is case-insensitive. This is more compatible with Microsoft® Internet Explorer® and Microsoft® Edge®.\r\n\r\nFor example, with the rules \"example.com\" and \"acme.com/abc\":\r\n\r\n\"http://example.com/\", \"http://subdomain.example.com/\" and \"http://acme.com/abc\" match regardless of parsing mode.\r\n\r\n\"http://notexample.com/\", \"http://example.com.invalid.com/\", \"http://example.comabc/\" only match in 'Default' mode.\r\n\r\n\"http://acme.com/ABC\" only matches in 'IESiteListMode'.","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"4ef82f2d110cc5f0":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies","displayName":"Block truncated cookies (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies_1","displayName":"Enabled","description":null,"helpText":null}]},"4e9a3d5a9c389353":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_functiontooltips","displayName":"Function tooltips (User)","description":"Enabling this setting selects the Advanced (Display) user option to \"Show function ScreenTips\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_functiontooltips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_functiontooltips_1","displayName":"Enabled","description":null,"helpText":null}]},"4e124dccadfb02a5":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"4e6d1d87c9c8b3b4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork","displayName":"Allow Trusted Locations on the network (User)","description":"This policy setting controls whether trusted locations on the network can be used.\r\n\r\nIf you enable this policy setting, users can specify trusted locations on network shares or in other remote locations that are not under their direct control by clicking the \"Add new location\" button in the Trusted Locations section of the Trust Center. Content, code, and add-ins are allowed to load from trusted locations with minimal security and without prompting the user for permission.\r\n\r\nIf you disable this policy setting, the selected application ignores any network locations listed in the Trusted Locations section of the Trust Center. \r\n\r\nIf you also deploy Trusted Locations via Group Policy, you should verify whether any of them are remote locations. If any of them are remote locations and you do not allow remote locations via this policy setting, those policy keys that point to remote locations will be ignored on client computers.\r\n\r\nDisabling this policy setting does not delete any network locations from the Trusted Locations list, but causes disruption for users who add network locations to the Trusted Locations list. Users are also prevented from adding new network locations to the Trusted Locations list in the Trust Center. We recommended that you do not enable this policy setting (as the \"Allow Trusted Locations on my network (not recommended)\" check box also states). Therefore, in practice, it should be possible to disable this policy setting in most situations without causing significant usability issues for most users.\r\n\r\nIf you do not enable this policy setting, users can select the \"Allow Trusted Locations on my network (not recommended)\" check box if desired and then specify trusted locations by clicking the \"Add new location\" button.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"4e8f686119f3bae8":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate","displayName":"Local Machine Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlocalmachinezonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"4e20c8b0b00d5961":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001","displayName":"Download signed ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_1","displayName":"Prompt","description":null,"helpText":null}]},"4e3eefca3bd50b5f":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetjavapermissions"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"4ed5494558183955":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting","displayName":"Default geolocation setting (User)","description":"Set whether websites can track users' physical locations. You can allow tracking by default (1), deny it by default (2), or ask the user each time a website requests their location (3).\r\n\r\nIf you don't configure this policy, 'AskGeolocation' policy is used and the user can change it.\r\n\r\n* 1 = Allow sites to track users' physical location\r\n\r\n* 2 = Don't allow any site to track users' physical location\r\n\r\n* 3 = Ask whenever a site wants to track users' physical location","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"4eb0e32895c96d23":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_pluginsallowedforurlsdesc","displayName":"Allow the Adobe Flash plug-in on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"4ee29c4722daeda4":{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_4","displayName":"Block malicious downloads","description":null,"helpText":null}]},"4e4f60f369ea4483":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_webhidaskforurlsdesc","displayName":"Allow the WebHID API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"4e111ba731a23cf8":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled","displayName":"Enable open in sidebar (User)","description":"Allow/Disallow user open a website or an app to the sidebar.\r\n\r\nIf you enable or don't configure this policy, users will be able to access the feature.\r\nIf you disable this policy, users will not be able to access the feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4e44cda59d7a5926":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~identity_m365authpopupsinworkenabled","displayName":"Allow M365 authentication popups in work profiles (User)","description":"This policy controls whether Microsoft Edge allows Microsoft 365 authentication pop-ups to bypass the pop-up blocker in work profiles.\r\n\r\nWhen users are signed in with a work account, some Microsoft 365 sites (for example, microsoft.com, cloud.microsoft, and visualstudio.com) may open authentication pop-ups to login.microsoftonline.com, login.live.com, or login.microsoft.com. These pop-ups are required to complete sign-in.\r\n\r\nIf you enable this policy or don't configure it, Microsoft 365 authentication pop-ups are allowed in work profiles.\r\n\r\nIf you disable this policy, Microsoft 365 authentication pop-ups follow the default settings like other pop-ups.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~identity_m365authpopupsinworkenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~identity_m365authpopupsinworkenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4e728035e6843aab":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience","displayName":"Hide the First-run experience and splash screen (User)","description":"If you enable this policy, the First-run experience and the splash screen will not be shown to users when they run Microsoft Edge for the first time.\r\n\r\nFor the configuration options shown in the First Run Experience, the browser will default to the following:\r\n\r\n-On the New Tab Page, the feed type will be set to MSN News and the layout to Inspirational.\r\n\r\n-The user will still be automatically signed into Microsoft Edge if the Windows account is of Azure AD or MSA type.\r\n\r\n-Sync will not be enabled by default and users will be able to turn on sync from the sync settings.\r\n\r\nIf you disable or don't configure this policy, the First-run experience and the Splash screen will be shown.\r\n\r\nNote: The specific configuration options shown to the user in the First Run Experience, can also be managed by using other specific policies. You can use the HideFirstRunExperience policy in combination with these policies to configure a specific browser experience on your managed devices. Some of these other policies are:\r\n\r\n-'AutoImportAtFirstRun' (Automatically import another browser's data and settings at first run)\r\n\r\n-'NewTabPageLocation' (Configure the new tab page URL)\r\n\r\n-'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience)\r\n\r\n-'SyncDisabled' (Disable synchronization of data using Microsoft sync services)\r\n\r\n-'BrowserSignin' (Browser sign-in settings)\r\n\r\n-'NonRemovableProfileEnabled' (Configure whether a user always has a default profile automatically signed in with their work or school account)","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience_1","displayName":"Enabled","description":null,"helpText":null}]},"4e873d79ff8d8a6d":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault","displayName":"Default printing page size (User)","description":"Overrides default printing page size.\r\n\r\nname should contain one of the listed formats or 'custom' if required paper size is not in the list. If 'custom' value is provided custom_size property should be specified. It describes the desired height and width in micrometers. Otherwise custom_size property shouldn't be specified. Policy that violates these rules is ignored.\r\n\r\nIf the page size is unavailable on the printer chosen by the user this policy is ignored.\r\n\r\nExample value:\r\n\r\n{\r\n \"custom_size\": {\r\n \"height\": 297000,\r\n \"width\": 210000\r\n },\r\n \"name\": \"custom\"\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"custom_size\": {\"height\": 297000, \"width\": 210000}, \"name\": \"custom\"}","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"4e91835159241f75":{"id":"user_vendor_msft_policy_config_office16v2.updates.2~policy~l_microsoftofficesystem~l_miscellaneous437_l_onlinestoragefilter","displayName":"Hide Microsoft cloud-based file locations in the Backstage view (User)","description":"This policy setting allows you to hide Microsoft cloud-based file locations in the Backstage view in Office. This helps prevent users from opening, saving, or sharing cloud-based files to locations such as: OneDrive, SharePoint, or Third Party Services.\r\n\r\nThis policy setting only applies to Word, PowerPoint, and Excel.\r\n\r\nTo filter specific services, add the values for all services to be disabled:\r\n 1 - OneDrive Personal\r\n 4 - ThisPC\r\n 8 - SharePoint OnPrem\r\n 16 - Recent Places\r\n 32 - SharePoint\r\n 64 - OneDrive for Business\r\n 128 - Third Party Services\r\n\r\nSpecial Values:\r\n 0 - (Default) All services enabled.\r\n 2 - (Legacy Value) Disable SharePoint and OneDrive for Business.\r\n\t4294967295 - All optional services disabled.\r\n\r\nFor example, OneDrive Personal (1), This PC (4) and Third Party Services (128) can all be disabled with a value of 133.\r\n\r\nThis value is calculated as follows: 1 + 4 + 128 = 133\r\n\r\nCommon Setting Values:\r\n 1 - Disable OneDrive Personal\r\n 2 - Disable SharePoint Online and OneDrive for Business\r\n 3 - Disable SharePoint Online, OneDrive for Business, and OneDrive Personal\r\n\r\nIf you disable or don’t configure this policy setting, users can use any configured Microsoft cloud-based file location to open, save, and share files.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2.updates.2~policy~l_microsoftofficesystem~l_miscellaneous437_l_onlinestoragefilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2.updates.2~policy~l_microsoftofficesystem~l_miscellaneous437_l_onlinestoragefilter_1","displayName":"Enabled","description":null,"helpText":null}]},"4e3688c519332b2f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustanattachment_l_withjustanattachment379","displayName":"With just an attachment (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":null},"4e66e5694e8a5cbd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcotedivoire","displayName":"French (Côte d'Ivoire) (User)","description":"Enables the editing language French (Côte d'Ivoire)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcotedivoire_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcotedivoire_1","displayName":"Enabled","description":null,"helpText":null}]},"4ead9d30a966a095":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_l_workflowsig497","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_l_workflowsig497_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_l_workflowsig497_1","displayName":"True","description":null,"helpText":null}]},"4e82269abf8fdcfc":{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_configureprecreateinapplicationguard","displayName":"Configure Application Guard container precreation. (User)","description":"This policy setting determines if the Application Guard container, for isolating untrusted files, is pre-created for improved run time performance.\r\n\r\nIf you enable this policy setting, you can specify the number of days to continue pre-creating an Application Guard container if the user has not opened a file with Application Guard. Pre-creating a container when the user logs in will decrease the wait time when opening an untrusted file.\r\n\r\n“65535” will configure Office to always create an Application Guard container when a user logs into Windows.\r\n\"20\" will configure Office to pre-create the container each time a user logs into Windows for up to 20 days after the last time the user opened an untrusted file using Application Guard.\r\n“0” will configure Office to never pre-create the container. Instead the container will only be created when a user opens their first untrusted file after logging into Windows.\r\n\r\nNote: if you configure Office to never pre-create a container then users will experience a longer wait when opening an untrusted file after logging into Windows.\r\n\r\nIf you disable or don’t configure this setting, Office will use a built-in heuristic to pre-create the container.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_configureprecreateinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_configureprecreateinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"4e01502d4d1643a7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":null},"4ea8ce8335a5b786":{"id":"user_vendor_msft_policy_config_printers_approvedusbprintdevicesuser_approvedusbprintdevices_list","displayName":"vid/pid (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":null},"4e4ab42a5f4c6735":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc06_l_datecolon29","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"4e3e8983e2d9edd5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_setleftindentontabsandbackspace","displayName":"Set left indent on tabs and backspace (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e8ce968b-91cb-4301-ba98-b37d42bc5213","categoryName":"Automatically as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_setleftindentontabsandbackspace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_setleftindentontabsandbackspace_1","displayName":"Enabled","description":null,"helpText":null}]},"4e1b8f9b97091f50":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned","displayName":"Require that application add-ins are signed by Trusted Publisher (User)","description":"This policy setting controls whether add-ins for this applications must be digitally signed by a trusted publisher.\r\n \r\nIf you enable this policy setting, this application checks the digital signature for each add-in before loading it. If an add-in does not have a digital signature, or if the signature did not come from a trusted publisher, this application disables the add-in and notifies the user. Certificates must be added to the Trusted Publishers list if you require that all add-ins be signed by a trusted publisher. For detail on about obtaining and distributing certificates, see http://go.microsoft.com/fwlink/?LinkId=294922. Office 2016 stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Office 2016 still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store. Therefore, if you created a list of trusted publishers in a previous version of Office and you upgrade to Office 2016, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store. For more information about trusted publishers, see the Office Resource Kit.\r\n\r\nIf you disable or do not configure this policy setting, this application does not check the digital signature on application add-ins before opening them. If a dangerous add-in is loaded, it could harm users' computers or compromise data security.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/4f.json b/public/intune-definitions/4f.json new file mode 100644 index 000000000000..897d106b9360 --- /dev/null +++ b/public/intune-definitions/4f.json @@ -0,0 +1 @@ +{"4f3acf43c221813c":{"id":"ade_setupassistant_termsofaddress","displayName":"Terms of Address","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_termsofaddress_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_termsofaddress_1","displayName":"Show","description":null,"helpText":null}]},"4f55d02b85664b4e":{"id":"com.apple.extensiblesso_extensiondata_allowpasswordchange_kerberos","displayName":"Allow Password Change","description":"If false, disables password changes. Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_allowpasswordchange_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_allowpasswordchange_kerberos_true","displayName":"True","description":null,"helpText":null}]},"4feef2b0163fc7e0":{"id":"com.apple.managedclient.preferences_cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication","description":"This policy enables defining a list of certificate public keys that should be distrusted by Microsoft Edge for TLS server\nauthentication.\n\nThe policy value is a list of base64-encoded X.509 certificates. Any\ncertificate with a matching SPKI (SubjectPublicKeyInfo) will be distrusted.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#cadistrustedcertificates"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"4fe7192fffe6b1aa":{"id":"com.apple.managedclient.preferences_disablerdpparsing","displayName":"Disable RDP parsing","description":"Disables parsing of RDP traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disablerdpparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablerdpparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"4fa5e42a74f90271":{"id":"com.apple.managedclient.preferences_enterprisehardwareplatformapienabled","displayName":"Allow managed extensions to use the Enterprise Hardware Platform API","description":"When this policy is set to enabled, extensions installed by enterprise policy are allowed to use the Enterprise Hardware Platform API.\nWhen this policy is set to disabled or isn't set, no extensions are allowed to use the Enterprise Hardware Platform API.\nThis policy also applies to component extensions.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enterprisehardwareplatformapienabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enterprisehardwareplatformapienabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enterprisehardwareplatformapienabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4fea85244c03ca8f":{"id":"com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode","description":"Restricts background graphics printing mode. If this policy isn't set there's no restriction on printing background graphics.\n\nPolicy options mapping:\n\n* any (any) = Allow printing with and without background graphics\n\n* enabled (enabled) = Allow printing only with background graphics\n\n* disabled (disabled) = Allow printing only without background graphics\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#printingallowedbackgroundgraphicsmodes"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes_0","displayName":"Allow printing with and without background graphics","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes_1","displayName":"Allow printing only without background graphics","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes_2","displayName":"Allow printing only with background graphics","description":null,"helpText":null}]},"4f093ea3983139c3":{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"4f7ded39159daf59":{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"4f4018cc5d5eb2f0":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command ''codesign -display -r -''.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"4f787092fd03ffc7":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"4f9021cc052272be":{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch","displayName":"Enforce Bing SafeSearch","description":"Ensure that queries in Bing web search are done with SafeSearch set to the value specified. Users can't change this setting.\n\nIf you configure this policy to 'BingSafeSearchNoRestrictionsMode', SafeSearch in Bing search falls back to the bing.com value.\n\nIf you configure this policy to 'BingSafeSearchModerateMode', the moderate setting is used in SafeSearch. The moderate setting filters adult videos and images but not text from search results.\n\nIf you configure this policy to 'BingSafeSearchStrictMode', the strict setting in SafeSearch is used. The strict setting filters adult text, images, and videos.\n\nIf you disable this policy or don't configure it, SafeSearch in Bing search isn't enforced, and users can set the value they want on bing.com.\n\nPolicy options mapping:\n\n* BingSafeSearchNoRestrictionsMode (0) = Don't configure search restrictions in Bing\n\n* BingSafeSearchModerateMode (1) = Configure moderate search restrictions in Bing\n\n* BingSafeSearchStrictMode (2) = Configure strict search restrictions in Bing\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch_bingsafesearchnorestrictionsmode","displayName":"Don't configure search restrictions in Bing","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch_bingsafesearchmoderatemode","displayName":"Configure moderate search restrictions in Bing","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch_bingsafesearchstrictmode","displayName":"Configure strict search restrictions in Bing","description":null,"helpText":null}]},"4f0ae10d9bcdb805":{"id":"com.microsoft.edge.mamedgeappconfigsettings.signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support","description":"Enable support for Signed HTTP Exchange (SXG).\n\nIf this policy isn't set or enabled, Microsoft Edge accepts web contents served as Signed HTTP Exchanges.\n\nIf this policy is set to disabled, Signed HTTP Exchanges can't be loaded.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.signedhttpexchangeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.signedhttpexchangeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"4f8dd21a1d0b6bf7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.videocaptureallowedurls","displayName":"Sites that can access video capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use video capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to video capture devices. However, the pattern \"*\", which matches any URL, isn't supported by this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"4ffe33594eb07a11":{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementenabled","displayName":"Automatic Account Management Enabled","description":"Use this setting to specify whether automatic account management is enabled.\n\nIf this setting is enabled, the target account will be automatically managed.\n\nIf this setting is disabled, the target account will not be automatically managed.\n\nIf not specified, this setting defaults to False.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementenabled_false","displayName":"The target account will not be automatically managed","description":"The target account will not be automatically managed","helpText":null},{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementenabled_true","displayName":"The target account will be automatically managed","description":"The target account will be automatically managed","helpText":null}]},"4f4a97c39caa0de3":{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefcredentialswhenntlmonly","displayName":"Allow delegating default credentials with NTLM-only server authentication","description":"This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection).\r\n\r\nThis policy setting applies when server authentication was achieved via NTLM.\r\n\r\nIf you enable this policy setting, you can specify the servers to which the user's default credentials can be delegated (default credentials are those that you use when first logging on to Windows).\r\n\r\nIf you disable or do not configure (by default) this policy setting, delegation of default credentials is not permitted to any machine.\r\n\r\nNote: The \"Allow delegating default credentials with NTLM-only server authentication\" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN.\r\n\r\nFor Example:\r\nTERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine\r\nTERMSRV/* Remote Desktop Session Host running on all machines.\r\nTERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-allowdefcredentialswhenntlmonly"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefcredentialswhenntlmonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefcredentialswhenntlmonly_1","displayName":"Enabled","description":null,"helpText":null}]},"4f3f2d90aafb3bff":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatesecuritylevel","displayName":"Update security level","description":"Specifies the security level for dynamic DNS updates.\r\n\r\nTo use this policy setting, click Enabled and then select one of the following values:\r\n\r\nUnsecure followed by secure - computers send secure dynamic updates only when nonsecure dynamic updates are refused.\r\n\r\nOnly unsecure - computers send only nonsecure dynamic updates.\r\n\r\nOnly secure - computers send only secure dynamic updates.\r\n\r\nIf you enable this policy setting, computers that attempt to send dynamic DNS updates will use the security level that you specify in this policy setting.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, computers will use local settings. By default, DNS clients attempt to use unsecured dynamic update first. If an unsecured update is refused, clients try to use secure update.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-updatesecuritylevel"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatesecuritylevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatesecuritylevel_1","displayName":"Enabled","description":null,"helpText":null}]},"4fb6dd73eecbeba3":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_2_channel_logfilepath","displayName":"Log File Path","description":null,"helpText":"","infoUrls":[],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":null},"4f1b74731ee8922a":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_smb_wbc_smblatency_decimaltextbox","displayName":"Type the maximum round trip network latency (milliseconds) after which caching begins","description":null,"helpText":"","infoUrls":[],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":null},"4f9036e9aa138201":{"id":"device_vendor_msft_policy_config_admx_reliability_ee_enablepersistenttimestamp","displayName":"Enable Persistent Time Stamp","description":"This policy setting allows the system to detect the time of unexpected shutdowns by writing the current time to disk on a schedule controlled by the Timestamp Interval.\r\n\r\nIf you enable this policy setting, you are able to specify how often the Persistent System Timestamp is refreshed and subsequently written to the disk. You can specify the Timestamp Interval in seconds.\r\n\r\nIf you disable this policy setting, the Persistent System Timestamp is turned off and the timing of unexpected shutdowns is not recorded.\r\n\r\nIf you do not configure this policy setting, the Persistent System Timestamp is refreshed according the default, which is every 60 seconds beginning with Windows Server 2003.\r\n\r\nNote: This feature might interfere with power configuration settings that turn off hard disks after a period of inactivity. These power settings may be accessed in the Power Options Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-reliability#admx-reliability-ee-enablepersistenttimestamp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_reliability_ee_enablepersistenttimestamp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_reliability_ee_enablepersistenttimestamp_1","displayName":"Enabled","description":null,"helpText":null}]},"4f86d2d746e4bebe":{"id":"device_vendor_msft_policy_config_admx_smartcard_certproprootenabledstring","displayName":"Turn on root certificate propagation from smart card","description":"This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted.\r\n\r\nIf you enable or do not configure this policy setting then root certificate propagation will occur when you insert your smart card. Note: For this policy setting to work the following policy setting must also be enabled: Turn on certificate propagation from smart card.\r\n\r\nIf you disable this policy setting then root certificates will not be propagated from the smart card.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-certproprootenabledstring"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_certproprootenabledstring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_certproprootenabledstring_1","displayName":"Enabled","description":null,"helpText":null}]},"4f4fd841eef62930":{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_traps_public_snmp_traps_publiclistbox","displayName":"Trap configuration","description":null,"helpText":"","infoUrls":[],"categoryId":"930d2960-3f70-48ca-9ead-b65a5a037c07","categoryName":"SNMP","options":null},"4f54c200146cee53":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_dx_use_full_hwgpu","displayName":"Use hardware graphics adapters for all Remote Desktop Services sessions","description":"This policy setting enables system administrators to change the graphics rendering for all Remote Desktop Services sessions.\r\n\r\nIf you enable this policy setting, all Remote Desktop Services sessions use the hardware graphics renderer instead of the Microsoft Basic Render Driver as the default adapter.\r\n\r\nIf you disable this policy setting, all Remote Desktop Services sessions use the Microsoft Basic Render Driver as the default adapter.\r\n\r\nIf you do not configure this policy setting, Remote Desktop Services sessions on the RD Session Host server use the Microsoft Basic Render Driver as the default adapter. In all other cases, Remote Desktop Services sessions use the hardware graphics renderer by default.\r\n\r\nNOTE: The policy setting enables load-balancing of graphics processing units (GPU) on a computer with more than one GPU installed. The GPU configuration of the local session is not affected by this policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-dx-use-full-hwgpu"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_dx_use_full_hwgpu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_dx_use_full_hwgpu_1","displayName":"Enabled","description":null,"helpText":null}]},"4f1f10b689e07d48":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016","displayName":"Microsoft Office 365 Access 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Access 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Access 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365access2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016_1","displayName":"Enabled","description":null,"helpText":null}]},"4f33028a6c54d8ad":{"id":"device_vendor_msft_policy_config_browser_sethomebuttonurl","displayName":"Set Home Button URL","description":"The home button can be configured to load a custom URL when your user clicks the home button. If enabled, or configured, and the Configure Home Button policy is enabled, and the Show home button & set a specific page is selected, a custom URL loads when your user clicks the home button. Default setting: Blank or not configured Related policy: Configure Home Button","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#sethomebuttonurl"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"4fa6d78d0634c627":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled","displayName":"Enable component updates in Google Chrome","description":"Enables component updates for all components in Google Chrome when not set or set to enabled.\r\n\r\nIf set to disabled, updates to components are disabled. However, some components are exempt from this policy: updates to any component that does not contain executable code, or does not significantly alter the behavior of the browser, or is critical for its security will not be disabled.\r\nExamples of such components include the certificate revocation lists and Safe Browsing data.\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.\r\nPlease note that setting this policy to disabled can potentially prevent the Google Chrome developers from providing critical security fixes in a timely manner and is thus not recommended.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4f571445ee18f04d":{"id":"device_vendor_msft_policy_config_defender_allowioavprotection","displayName":"Allow scanning of all downloaded files and attachments","description":"Allows or disallows Windows Defender IOAVP Protection functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowioavprotection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowioavprotection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"4f2d422ab32b7674":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools","displayName":"Block use of copied or impersonated system tools","description":"This rule blocks executables that impersonate or are copies of system tools & binaries found on the machine.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_warn","displayName":"Warn","description":null,"helpText":null}]},"4f2fe7617b2183ea":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff","displayName":"Clear Cache On Logoff","description":"By default, the Local Cache file won't be removed when the user sign out. If a user accesses a system where it's desirable to have the Local Cache file deleted when they sign out, set Clear Cache On Logoff to Enabled.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ClearCacheOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"4fb5f9bbe1f35156":{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess","displayName":"Configure Lsa Protected Process","description":"If you do not configure this policy and there is no current setting in the registry, LSA will run as protected process for all clean installed, HVCI capable, client SKUs. This configuration is not UEFI locked. This can be overridden if the policy is configured. If you configure and set this policy setting to 'Disabled', LSA will not run as a protected process. If you configure and set this policy setting to 'EnabledWithUEFILock', LSA will run as a protected process and this configuration is UEFI locked. If you configure and set this policy setting to 'EnabledWithoutUEFILock', LSA will run as a protected process and this configuration is not UEFI locked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalSecurityAuthority#configurelsaprotectedprocess"],"categoryId":"a279f35f-cd71-4489-b0c3-545ea1aa229d","categoryName":"Local Security Authority","options":[{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_0","displayName":"Disabled. Default value. LSA will not run as protected process.","description":"Disabled. Default value. LSA will not run as protected process.","helpText":null},{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_1","displayName":"Enabled with UEFI lock. LSA will run as protected process and this configuration is UEFI locked.","description":"Enabled with UEFI lock. LSA will run as protected process and this configuration is UEFI locked.","helpText":null},{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_2","displayName":"Enabled without UEFI lock. LSA will run as protected process and this configuration is not UEFI locked.","description":"Enabled without UEFI lock. LSA will run as protected process and this configuration is not UEFI locked.","helpText":null}]},"4fb51567a0c65f12":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"4fea4c28cd908137":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_authschemes","displayName":"Supported authentication schemes (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"4fcc952c89bca8eb":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled","displayName":"Wallet Donation Enabled","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\r\n\r\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\r\n\r\nIf you disable this policy, users can't use the Wallet Donation feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"4fa555fb7a83570b":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended","displayName":"Configure the Microsoft Edge new tab page experience","description":"Lets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\r\n\r\nWhen you set this policy to Microsoft News feed experience (0), users will see the Microsoft News feed experience on the new tab page.\r\n\r\nWhen you set this policy to Office 365 feed experience (1), users with an Azure Active Directory browser sign-in will see the Office 365 feed experience on the new tab page.\r\n\r\nIf you disable or don't configure this policy:\r\n\r\n- Users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, as well as the standard new tab page feed experience.\r\n\r\n- Users without an Azure Active Directory browser sign-in will see the standard new tab page experience.\r\n\r\nIf you configure this policy *and* the 'NewTabPageLocation' (Configure the new tab page URL) policy, 'NewTabPageLocation' has precedence.\r\n\r\nDefault setting: Disabled or not configured.\r\n\r\n* 0 = Microsoft News feed experience\r\n\r\n* 1 = Office 365 feed experience","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"4f46f1bb28141b5c":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_internetexplorerintegrationcloudsitelist","displayName":"Configure the Enterprise Mode Cloud Site List (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"4f25ad547bcdcdd3":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_spdesignexe37","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_spdesignexe37_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_spdesignexe37_1","displayName":"True","description":null,"helpText":null}]},"4fa5273acb2dbce2":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_outlookexe8","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_outlookexe8_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_outlookexe8_1","displayName":"True","description":null,"helpText":null}]},"4f9eff0254626747":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_userincontroloftheseapps","displayName":"Let Apps Access Calendar User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the calendar privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"4f03ecab80f67aa2":{"id":"device_vendor_msft_policy_config_remotemanagement_disallowstoringofrunascredentials","displayName":"Disallow WinRM from storing RunAs credentials","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not allow RunAs credentials to be stored for any plug-ins.\n\nIf you enable this policy setting, the WinRM service will not allow the RunAsUser or RunAsPassword configuration values to be set for any plug-ins. If a plug-in has already set the RunAsUser and RunAsPassword configuration values, the RunAsPassword configuration value will be erased from the credential store on this computer.\n\nIf you disable or do not configure this policy setting, the WinRM service will allow the RunAsUser and RunAsPassword configuration values to be set for plug-ins and the RunAsPassword value will be stored securely.\n\nIf you enable and then disable this policy setting,any values that were previously configured for RunAsPassword will need to be reset.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-disallowstoringofrunascredentials"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_disallowstoringofrunascredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_disallowstoringofrunascredentials_1","displayName":"Enabled","description":null,"helpText":null}]},"4f17b354a65a7fc1":{"id":"device_vendor_msft_policy_config_update_pausequalityupdatesstarttime","displayName":"Pause Quality Updates Start Time","description":"Specifies the date and time when the IT admin wants to start pausing the Quality Updates. Value type is string (yyyy-mm-dd, ex. 2018-10-28). Clearing the value of this setting to unpause updates manually. Paused updates resume automatically 35 days after the specified start date.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausequalityupdatesstarttime"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"4f41911738fcc5ce":{"id":"device_vendor_msft_policy_config_userrights_modifyfirmwareenvironment","displayName":"Modify Firmware Environment","description":"This user right determines who can modify firmware environment values. Firmware environment variables are settings stored in the nonvolatile RAM of non-x86-based computers. The effect of the setting depends on the processor.On x86-based computers, the only firmware environment value that can be modified by assigning this user right is the Last Known Good Configuration setting, which should only be modified by the system. On Itanium-based computers, boot information is stored in nonvolatile RAM. Users must be assigned this user right to run bootcfg.exe and to change the Default Operating System setting on Startup and Recovery in System Properties. On all computers, this user right is required to install or upgrade Windows.Note: This security setting does not affect who can modify the system environment variables and user environment variables that are displayed on the Advanced tab of System Properties.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#modifyfirmwareenvironment"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"4fa2e59d03e1c747":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablevirusui","displayName":"Disable Virus UI","description":"Use this policy setting if you want to disable the display of the virus and threat protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablevirusui"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablevirusui_0","displayName":"(Disable) The users can see the display of the virus and threat protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the virus and threat protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablevirusui_1","displayName":"(Enable) The users cannot see the display of the virus and threat protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the virus and threat protection area in Windows Defender Security Center.","helpText":null}]},"4f5b11c92f5dbfa4":{"id":"safari_allowhistoryclearing","displayName":"Allow History Clearing","description":"If `false`, the system disables clearing history in Safari.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_allowhistoryclearing_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowhistoryclearing_true","displayName":"Allowed","description":null,"helpText":null}]},"4fabb2390922dee0":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2","displayName":"Specify SHA1 thumbprints of certificates representing trusted .rdp publishers (User)","description":"This policy setting allows you to specify a list of Secure Hash Algorithm 1 (SHA1) certificate thumbprints that represent trusted Remote Desktop Protocol (.rdp) file publishers.\r\n\r\nIf you enable this policy setting, any certificate with an SHA1 thumbprint that matches a thumbprint on the list is trusted. If a user tries to start an .rdp file that is signed by a trusted certificate, the user does not receive any warning messages when they start the file. To obtain the thumbprint, view the certificate details, and then click the Thumbprint field.\r\n\r\nIf you disable or do not configure this policy setting, no publisher is treated as a trusted .rdp publisher.\r\n\r\nNote:\r\n\r\nYou can define this policy setting in the Computer Configuration node or in the User Configuration node. If you configure this policy setting for the computer, the list of certificate thumbprints trusted for a user is a combination of the list defined for the computer and the list defined for the user.\r\n\r\nThis policy setting overrides the behavior of the \"Allow .rdp files from valid publishers and user's default .rdp settings\" policy setting.\r\n\r\nIf the list contains a string that is not a certificate thumbprint, it is ignored.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-trusted-certificate-thumbprints-2"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2_1","displayName":"Enabled","description":null,"helpText":null}]},"4f4a3e3b406eb374":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"Setting the policy means Google Chrome tries to register itself with Chrome Browser Cloud Management. The value of this policy is an enrollment token you can retrieve from the Google Admin console.\r\n\r\nSee https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.\r\n\r\nExample value: 37185d02-e055-11e7-80c1-9a214cf093ae","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},"4f6adb070be6563e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed","displayName":"Suppress Google Cloud Print deprecation messages (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed_1","displayName":"Enabled","description":null,"helpText":null}]},"4f530c9b3d81c663":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls","displayName":"Allow the Flash plugin on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"4f7bcb3bdeb6dd0e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinsertlinkshyperlinks","displayName":"Ctrl+K (Insert | Links | Hyperlink) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinsertlinkshyperlinks_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinsertlinkshyperlinks_1","displayName":"True","description":null,"helpText":null}]},"4f692ebc3c6a3aa3":{"id":"user_vendor_msft_policy_config_experience_allowtailoredexperienceswithdiagnosticdata","displayName":"Allow Tailored Experiences With Diagnostic Data (User)","description":"This policy allows you to prevent Windows from using diagnostic data to provide customized experiences to the user. If you enable this policy setting, Windows will not use diagnostic data from this device to customize content shown on the lock screen, Windows tips, Microsoft consumer features, or other related features. If these features are enabled, users will still see recommendations, tips and offers, but they may be less relevant. If you disable or do not configure this policy setting, Microsoft will use diagnostic data to provide personalized recommendations, tips, and offers to tailor Windows for the user's needs and make it work better for them. Diagnostic data can include browser, app and feature usage, depending on the Diagnostic and usage data setting value. Note This setting does not control Cortana cutomized experiences because there are separate policies to configure it. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowtailoredexperienceswithdiagnosticdata"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_allowtailoredexperienceswithdiagnosticdata_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_allowtailoredexperienceswithdiagnosticdata_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"4f3fe8604e1c47f0":{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate","displayName":"Internet (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_4","displayName":"High","description":null,"helpText":null}]},"4f167b03753eb6ff":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions","displayName":"Logon options (User)","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon with current username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonelogonoptions"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"4fc67f0ba1bcce78":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting","displayName":"Default images setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_1","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_2","displayName":"Don't allow any site to show images","description":null,"helpText":null}]},"4fc11759bf95972b":{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_miscellaneous437_l_disallowedroamingmrudomains_l_disalloweddomainlist","displayName":"Disallowed Domains: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"4ffd558ae65f2755":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc01_l_allowsubfolders01","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc01_l_allowsubfolders01_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc01_l_allowsubfolders01_1","displayName":"True","description":null,"helpText":null}]},"4fd1c8c4eb5b268c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize","displayName":"Screen size (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8ee1d8d2-582f-401b-927a-993016f4290d","categoryName":"Browsers","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_544x376","displayName":"544 x 376","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_640x480","displayName":"640 x 480","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_720x512","displayName":"720 x 512","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_800x600","displayName":"800 x 600","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_1024x768","displayName":"1024 x 768","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_1152x882","displayName":"1152 x 882","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_1152x900","displayName":"1152 x 900","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_1280x1024","displayName":"1280 x 1024","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_1600x1200","displayName":"1600 x 1200","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_1800x1440","displayName":"1800 x 1440","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_screensize_1920x1200","displayName":"1920 x 1200","description":null,"helpText":null}]},"4f99de20f46156ff":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_enableabilitytooptimizeonenotefiles_l_optimizeonenotefilesatthisintervalmin","displayName":"Optimize OneNote files at this interval (min): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":null},"4fe2b5a9218f0e6e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingnewcontentto","displayName":"Prevent users from adding new content to existing PST files (User)","description":"This setting prevents users from adding any new content to PST files linked to their profiles.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingnewcontentto_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingnewcontentto_1","displayName":"Enabled","description":null,"helpText":null}]},"4fcff4ab81ce7356":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_disablefilearchive","displayName":"Disable File|Archive (User)","description":"This setting allows you to disable File|Archive and prevent users from manually archiving items in their mailbox. You might want to set this if you have deployed other messaging records management policies in order to avoid conflicts. You should also consider disabling AutoArchive in the setting named AutoArchive Settings.","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_disablefilearchive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_disablefilearchive_1","displayName":"Enabled","description":null,"helpText":null}]},"4ff1b3fef9b69a56":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_deletemeetingrequestfrominboxwhenresponding","displayName":"Delete meeting request from Inbox when responding (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_deletemeetingrequestfrominboxwhenresponding_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_deletemeetingrequestfrominboxwhenresponding_1","displayName":"True","description":null,"helpText":null}]},"4f77d5d7058bfe18":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_descriptioncolon78","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"4f9e4ca3e6244853":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"4fb05d328f315378":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_controlcharacters","displayName":"Show control characters (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_controlcharacters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_controlcharacters_1","displayName":"Enabled","description":null,"helpText":null}]},"4f73e1b9a1365a32":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_name","displayName":"Name","description":"Specifies the friendly name of the firewall rule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/50.json b/public/intune-definitions/50.json new file mode 100644 index 000000000000..adf25779e27e --- /dev/null +++ b/public/intune-definitions/50.json @@ -0,0 +1 @@ +{"5038952785cf1cbf":{"id":"ade_accountsettings_createlocaladmin","displayName":"Create a local admin account","description":null,"helpText":"","infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":[{"id":"ade_accountsettings_createlocaladmin_0","displayName":"No","description":null,"helpText":null},{"id":"ade_accountsettings_createlocaladmin_1","displayName":"Yes","description":null,"helpText":null}]},"50de61a1064d8c05":{"id":"com.apple.dnssettings.managed_prohibitdisablement","displayName":"Prohibit Disablement","description":"If true, prohibits users from disabling DNS settings. This key is only available on supervised devices.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":[{"id":"com.apple.dnssettings.managed_prohibitdisablement_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.dnssettings.managed_prohibitdisablement_true","displayName":"Enabled","description":null,"helpText":null}]},"50a8f33e8b1c357d":{"id":"com.apple.managedclient.preferences_forceephemeralprofiles","displayName":"Enable use of ephemeral profiles","description":"Controls whether user profiles are switched to ephemeral mode. An ephemeral profile is created when a session begins, is deleted when the session ends, and is associated with the user's original profile.\n\nIf you enable this policy, profiles run in ephemeral mode. This lets users work from their own devices without saving browsing data to those devices. If you enable this policy as an OS policy (by using GPO on Windows, for example), it applies to every profile on the system.\n\nIf you disable this policy or don't configure it, users get their regular profiles when they sign in to the browser.\n\nIn ephemeral mode, profile data is saved on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies, and web databases aren't saved after the browser is closed. This doesn't prevent a user from manually downloading any data to disk, or from saving pages or printing them. If the user has enabled sync, all data is preserved in their sync accounts just like with regular profiles. Users can also use InPrivate browsing in ephemeral mode unless you explicitly disable this.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forceephemeralprofiles"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forceephemeralprofiles_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forceephemeralprofiles_true","displayName":"Enabled","description":null,"helpText":null}]},"50a0769ae49df32a":{"id":"com.apple.managedclient.preferences_importhistory","displayName":"Allow importing of browsing history","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.\n\nIf you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (macOS) browsers.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importhistory"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importhistory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importhistory_true","displayName":"Enabled","description":null,"helpText":null}]},"50d60fc73d44d1f1":{"id":"com.apple.managedclient.preferences_webappinstallforcelist_item_default_launch_container","displayName":"Default launch container","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webappinstallforcelist_item_default_launch_container_0","displayName":"tab","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webappinstallforcelist_item_default_launch_container_1","displayName":"window","description":null,"helpText":null}]},"50d2949c22e519b5":{"id":"com.apple.mobiledevice.passwordpolicy_com.apple.mobiledevice.passwordpolicy","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"5085f39ba4f0fbfb":{"id":"com.apple.notificationsettings_notificationsettings_item_showinlockscreen","displayName":"Show In Lock Screen","description":"If true, enables notifications on the lock screen for this app. Available in iOS 9.3 and later and macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":[{"id":"com.apple.notificationsettings_notificationsettings_item_showinlockscreen_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_showinlockscreen_true","displayName":"True","description":null,"helpText":null}]},"50fe702ef8091db9":{"id":"com.apple.systempolicy.control_enablexprotectmalwareupload","displayName":"Enable XProtect Malware Upload","description":"If false, will prevent Gatekeeper from prompting the user to upload blocked malware to Apple for purposes of improving malware detection.","helpText":null,"infoUrls":[],"categoryId":"763525a0-8456-4336-a8d1-392253e8fdd8","categoryName":"System Policy Control","options":[{"id":"com.apple.systempolicy.control_enablexprotectmalwareupload_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.systempolicy.control_enablexprotectmalwareupload_true","displayName":"Enabled","description":null,"helpText":null}]},"5003cfa26047898d":{"id":"com.apple.universalaccess_mousedrivermaxspeed","displayName":"Mouse Driver Max Speed","description":"The maximum speed for the cursor when using Mouse Keys.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":null},"500febc680700d8f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enterprisehardwareplatformapienabled","displayName":"Allow managed extensions to use the Enterprise Hardware Platform API","description":"When this policy is set to enabled, extensions installed by enterprise policy are allowed to use the Enterprise Hardware Platform API.\nWhen this policy is set to disabled or isn't set, no extensions are allowed to use the Enterprise Hardware Platform API.\nThis policy also applies to component extensions.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enterprisehardwareplatformapienabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enterprisehardwareplatformapienabled_true","displayName":"Enabled","description":null,"helpText":null}]},"50e56084313cf5af":{"id":"com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeurlblocklist","displayName":"Block access to a list of URLs in InPrivate mode.","description":"This policy controls which URLs are blocked from loading in InPrivate mode in Microsoft Edge.\n\nAdministrators can specify a list of URL patterns that are blocked when users browse in InPrivate mode. For information about the supported URL pattern format, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nIf both \"InPrivateModeUrlBlocklist\" and \"InPrivateModeUrlAllowlist\" are configured, the allowlist takes precedence.\n- URLs that match the allowlist are allowed.\n- URLs that match the blocklist but not the allowlist are blocked.\n- URLs that match neither list follow the behavior defined by the general \"URLBlocklist\" and \"URLAllowlist\" policies.\n\nIf \"InPrivateModeUrlAllowlist\" is configured and this policy is not configured, only URLs on the allowlist can be opened in InPrivate mode.\n\nIf \"InPrivateModeAvailability\" is set to disallow (value 1) and \"InPrivateModeUrlAllowlist\" is configured, InPrivate mode is available only for URLs that match the allowlist.\n\nThis policy applies only to InPrivate mode. To block URLs across all browsing modes, use \"URLBlocklist\".\n\nThis policy supports up to 1000 entries.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"5045bdf73a9ee016":{"id":"com.microsoft.edge.mamedgeappconfigsettings.visualsearchenabled_recommended","displayName":"Visual search enabled (users can override)","description":"Visual search lets you quickly explore more related content about entities in an image.\n\nIf you enable or don't configure this policy, visual search is enabled via image hover, context menu, and search in sidebar.\n\nIf you disable this policy, visual search is disabled and you can't get more info about images via hover, context menu, and search in sidebar.\n\nNote: Visual Search in Web Capture is still managed by \"WebCaptureEnabled\" policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.visualsearchenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.visualsearchenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"50c35acd49ef8084":{"id":"device_vendor_msft_bitlocker_configurerecoverypasswordrotation","displayName":"Configure Recovery Password Rotation","description":" Allows Admin to configure Numeric Recovery Password Rotation upon use for OS and fixed drives on Entra ID and Hybrid domain joined devices.\n When not configured, Rotation is turned on by default for Entra ID only and off on Hybrid. The Policy will be effective only when \n Active Directory back up for recovery password is configured to required.\n For OS drive: Turn on \"Do not enable Bitlocker until recovery information is stored to AD DS for operating system drives\"\n For Fixed drives: Turn on \"Do not enable Bitlocker until recovery information is stored to AD DS for fixed data drives\"\n \n Supported Values: 0 - Numeric Recovery Passwords rotation OFF.\n 1 - Numeric Recovery Passwords Rotation upon use ON for Entra ID joined devices. Default value\n 2 - Numeric Recovery Passwords Rotation upon use ON for both Entra ID and Hybrid devices\n \n If you want to disable this policy use the following SyncML:\n \n 112./Device/Vendor/MSFT/BitLocker/ConfigureRecoveryPasswordRotationint0","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"0a1347d2-90c0-407a-baa0-e4859260532a","categoryName":"BitLocker","options":[{"id":"device_vendor_msft_bitlocker_configurerecoverypasswordrotation_0","displayName":"Refresh off (default)","description":"Refresh off (default)","helpText":null},{"id":"device_vendor_msft_bitlocker_configurerecoverypasswordrotation_1","displayName":"Refresh on for Entra ID-joined devices","description":"Refresh on for Entra ID-joined devices","helpText":null},{"id":"device_vendor_msft_bitlocker_configurerecoverypasswordrotation_2","displayName":"Refresh on for both Entra ID-joined and hybrid-joined devices","description":"Refresh on for both Entra ID-joined and hybrid-joined devices","helpText":null}]},"50a65f9ed33f5e58":{"id":"device_vendor_msft_defender_configuration_supportloglocation","displayName":"Support Log Location","description":"The support log location setting allows the administrator to specify where the Microsoft Defender Antivirus diagnostic data collection tool (MpCmdRun.exe) will save the resulting log files. This setting is configured with an MDM solution, such as Intune, and is available for Windows 10 Enterprise.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"50b2950684f543ba":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcachesize_bits_maxsize","displayName":"Percentage of disk space to be used for the BITS peercache:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"503036fa4da32e00":{"id":"device_vendor_msft_policy_config_admx_scripts_allow_logon_script_netbiosdisabled","displayName":"Allow logon scripts when NetBIOS or WINS is disabled","description":"This policy setting allows user logon scripts to run when the logon cross-forest, DNS suffixes are not configured, and NetBIOS or WINS is disabled. This policy setting affects all user accounts interactively logging on to the computer.\r\n\r\nIf you enable this policy setting, user logon scripts run if NetBIOS or WINS is disabled during cross-forest logons without the DNS suffixes being configured.\r\n\r\nIf you disable or do not configure this policy setting, user account cross-forest, interactive logging cannot run logon scripts if NetBIOS or WINS is disabled, and the DNS suffixes are not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-allow-logon-script-netbiosdisabled"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_allow_logon_script_netbiosdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_allow_logon_script_netbiosdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5015b82167046f77":{"id":"device_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges","displayName":"MSI Always Install With Elevated Privileges","description":"This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system. If you enable this policy setting, privileges are extended to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add or Remove Programs in Control Panel. This profile setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers. If you disable or do not configure this policy setting, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer. Note: This policy setting appears both in the Computer Configuration and User Configuration folders. To make this policy setting effective, you must enable it in both folders. Caution: Skilled users can take advantage of the permissions this policy setting grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy setting is not guaranteed to be secure.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#msialwaysinstallwithelevatedprivileges"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"500ec663937f6ecd":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_user_refresh_interval_prompt","displayName":"User Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"5031cd86e7ea2deb":{"id":"device_vendor_msft_policy_config_authentication_configurewebsigninallowedurls","displayName":"Configure Web Sign In Allowed Urls","description":"Specifies a list of URLs that are navigable in Web Sign-in based authentication scenarios.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#configurewebsigninallowedurls"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":null},"50b22d36a38d3325":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer","displayName":"Allow remote access users to transfer files to/from the host","description":"Setting the policy to Enabled or leaving it unset allows users connected to a remote access host to transfer files between the client and the host. This doesn't apply to remote assistance connections, which don't support file transfer.\r\n\r\nSetting the policy to Disabled disallows file transfer.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer_1","displayName":"Enabled","description":null,"helpText":null}]},"50782e609218fb2f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure","displayName":"Enable trust in Symantec Corporation's Legacy PKI Infrastructure","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure_1","displayName":"Enabled","description":null,"helpText":null}]},"503f500e84d5b6f7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename","displayName":"Enterprise web store name (deprecated)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_1","displayName":"Enabled","description":null,"helpText":null}]},"500a82d15f0cbba8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls","displayName":"Allow the File Handling API on these web apps","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"5086614d61c3069a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser","displayName":"Enterprise Logo URL for a managed browser","description":"A URL to an image that will be used as an enterprise badge for a managed browser. The URL must point to an image.\r\n\r\nIt is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 48 x 48 px.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nExample value: https://example.com/image.png","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_1","displayName":"Enabled","description":null,"helpText":null}]},"506681b9687d7a17":{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc","displayName":"Allow Option To Show This PC","description":"When This PC location is restricted, give the user the option to enumerate and navigate into it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#allowoptiontoshowthispc"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_0","displayName":"Not Allowed.","description":"Not Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"50760113c85c348b":{"id":"device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature","displayName":"Turn off the flip ahead with page prediction feature","description":"This policy setting determines whether a user can swipe across a screen or click Forward to go to the next pre-loaded page of a website.\n\nMicrosoft collects your browsing history to improve how flip ahead with page prediction works. This feature isn't available for Internet Explorer for the desktop.\n\nIf you enable this policy setting, flip ahead with page prediction is turned off and the next webpage isn't loaded into the background.\n\nIf you disable this policy setting, flip ahead with page prediction is turned on and the next webpage is loaded into the background.\n\nIf you don't configure this setting, users can turn this behavior on or off, using the Settings charm.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableflipaheadfeature"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_1","displayName":"Enabled","description":null,"helpText":null}]},"501c9a293675128d":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues","displayName":"Additional server versions supported","description":"\r\nSpecify a semicolon separated list of server version names, e.g. RTC/2.9;RTC/3.0;RTC/4.0, to which Microsoft Lync allows logon in addition to the server versions that are supported by default. Space character is treated as part of the version string.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1","displayName":"Enabled","description":null,"helpText":null}]},"50b44f98d3b86fd8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled","displayName":"Enable ending processes in the Browser task manager","description":"If you enable or don't configure this policy, users can end processes in the Browser task manager. If you disable it, users can't end processes, and the End process button is disabled in the Browser task manager.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5021fbf412024b3c":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly","displayName":"Force Windows executable Native Messaging hosts to launch directly","description":"This policy controls whether native host executables launch directly on Windows.\r\n\r\nIf you enable this policy, Microsoft Edge is forced to launch native messaging hosts implemented as executables directly.\r\n\r\nIf you disable this policy, Microsoft Edge will launch hosts using cmd.exe as an intermediary process.\r\n\r\nIf you don't configure this policy, Microsoft Edge will decide which approach to use based on a progressive rollout from the legacy behavior to the Launch Directly behavior, guided by ecosystem compatibility.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_1","displayName":"Enabled","description":null,"helpText":null}]},"50bf5174e2eac242":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_mathsolverenabled","displayName":"Let users snip a Math problem and get the solution with a step-by-step explanation in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 125.\r\n\r\nThis policy is obsoleted because Math Solver is deprecated from Edge. This policy won't work in Microsoft Edge version 126. This policy lets you manage whether users can use the Math Solver tool in Microsoft Edge or not.\r\n\r\nIf you enable or don't configure the policy, then a user can take a snip of the Math problem and get the solution including a step-by-step explanation of the solution in a Microsoft Edge side pane.\r\n\r\nIf you disable the policy, then the Math Solver tool will be disabled and users will not be able to use it.\r\n\r\nNote: Setting the 'ComponentUpdatesEnabled' (Enable component updates in Microsoft Edge) policy to disabled will also disable the Math Solver component.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_mathsolverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_mathsolverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"50675f160cf49e9c":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill","description":"The feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is auto-filled into a web form. This ensures that non-authorized persons can't use saved passwords for autofill. Note that this feature does not protect against locally-running malware.\r\n\r\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\r\n\r\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill will not have any authentication flow.\r\n\r\nIf you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\r\n\r\nIf you set this policy to 'WithCustomPrimaryPassword', users will be asked to create their custom password and then to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords will get auto-filled after successful authentication. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\r\n\r\nIf you set this policy to 'AutofillOff', saved passwords will no longer be suggested for autofill.\r\n\r\nPolicy options mapping:\r\n\r\n* Automatically (0) = Automatically\r\n\r\n* WithDevicePassword (1) = With device password\r\n\r\n* WithCustomPrimaryPassword (2) = With custom primary password\r\n\r\n* AutofillOff (3) = Autofill off\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"50fdcc8b4bca3699":{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_4","displayName":"When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_5","displayName":"When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null}]},"507a844ca520e031":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (Device) (obsolete)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_0","displayName":"Standard mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_1","displayName":"Balanced mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_2","displayName":"Strict mode","description":null,"helpText":null}]},"5020713cee5a7ac6":{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6","displayName":"DisableIPSourceRoutingIPv6","description":"","helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6_0","displayName":"No additional protection, source routed packets are allowed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6_1","displayName":"Medium, source routed packets ignored when IP forwarding is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6_2","displayName":"Highest protection, source routing is completely disabled","description":null,"helpText":null}]},"50a9ea2aa637d89d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winwordexe49","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winwordexe49_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winwordexe49_1","displayName":"True","description":null,"helpText":null}]},"50289e334a263b64":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsclockedout","displayName":"Mute notifications","description":"This will automatically mute Microsoft Teams notifications when managed account is in non-working time. Note: Configuring this setting will prevent end users from editing their global quiet time settings.","helpText":null,"infoUrls":[],"categoryId":"fde9be9c-e0ab-4dd8-9df3-0794e608d15a","categoryName":null,"options":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsclockedout_1","displayName":"Require","description":null,"helpText":null}},"502fbbd606131fb1":{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level","displayName":"Encryption Level","description":"","helpText":"","infoUrls":[],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level_1","displayName":"Low Level","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level_2","displayName":"Client Compatible","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level_3","displayName":"High Level","description":null,"helpText":null}]},"5090642c4dbc89c7":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingwidthfactor","displayName":"Width of grid box in percent relative to QR code bitmap width (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"50e67d2965a35f1e":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_part_defaultmeteredupdatespolicy","displayName":"Default Metered Updates policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_part_defaultmeteredupdatespolicy_1","displayName":"Default Metered Updates Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_part_defaultmeteredupdatespolicy_2","displayName":"Default Metered Updates Allowed","description":null,"helpText":null}]},"50052838d59460a3":{"id":"settings_item_timezone","displayName":"Time Zone","description":"A dictionary that contains time zone settings. This setting is available only on supervised devices and doesn't support user enrollment. Available in iOS 14 and later, tvOS 14 and later, and visionOS 2 and later.","helpText":null,"infoUrls":[],"categoryId":"2c156b7e-99c8-4a21-a828-4f9b94479b0d","categoryName":"Time Zone","options":null},"507cfa9342f194ac":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_descriptioncolon69","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"50342b8417aab6b4":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1","displayName":"Configure Default consent (User)","description":"This policy setting determines the default consent behavior of Windows Error Reporting.\r\n\r\nIf you enable this policy setting, you can set the default consent handling for error reports. The following list describes the Consent level settings that are available in the pull-down menu in this policy setting:\r\n\r\n- Always ask before sending data: Windows prompts users for consent to send reports.\r\n\r\n- Send parameters: Only the minimum data that is required to check for an existing solution is sent automatically, and Windows prompts users for consent to send any additional data that is requested by Microsoft.\r\n\r\n- Send parameters and safe additional data: the minimum data that is required to check for an existing solution, along with data which Windows has determined (within a high probability) does not contain personally-identifiable information is sent automatically, and Windows prompts the user for consent to send any additional data that is requested by Microsoft.\r\n\r\n- Send all data: any error reporting data requested by Microsoft is sent automatically.\r\n\r\nIf this policy setting is disabled or not configured, then the consent level defaults to the highest-privacy setting: Always ask before sending data.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werdefaultconsent-1"],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_1","displayName":"Enabled","description":null,"helpText":null}]},"50b34856887b5083":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_services","displayName":"Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-services"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_services_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_services_1","displayName":"Enabled","description":null,"helpText":null}]},"502cefbceb367c15":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled","displayName":"Enable AutoFill for credit cards (User)","description":"Setting the policy to True or leaving it unset means users can control autofill suggestions for credit cards in the UI.\r\n\r\nSetting the policy to False means autofill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"503cd7ebc7046ce1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls","displayName":"Block cookies on these sites (User)","description":"Setting the policy lets you make a list of URL patterns that specify sites that can't set cookies.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nWhile no specific policy takes precedence, see CookiesAllowedForUrls and CookiesSessionOnlyForUrls. URL patterns among these 3 policies must not conflict.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"50da40cf6467f9fd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings","displayName":"Controls visibility of enterprise profile badge in the toolbar (User)","description":"For work and school profiles, the toolbar will show a \"Work\" or \"School\" label by default next to the toolbar avatar. The label will only be shown if the signed in account is managed.\r\n\r\nSetting this policy to hide_expanded_enterprise_toolbar_badge (value 1) will hide the enterprise badge for a managed profile in the toolbar.\r\n\r\nLeaving this policy unset or setting it to show_expanded_enterprise_toolbar_badge (value 0) will show the enterprise badge.\r\n\r\nThe label is customizable via the EnterpriseCustomLabel policy.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"5032f9ac0a78041b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_keeplastautosavedversions","displayName":"Keep the last AutoSaved versions of files for the next session (User)","description":"This policy setting determines whether Excel keeps the last AutoSaved version of a file if a user closes a file without saving it. (Note: AutoSave applies only when AutoRecover is enabled.)\r\n\r\nIf you enable or do not configure this policy setting, Excel keeps the last AutoSaved version of the file and makes it available to the user the next time the file is opened if the user closes a file without saving it.\r\n\r\nIf you disable this policy setting, Excel does not keep the last AutoSaved version of the file if the user closes a file without saving it.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_keeplastautosavedversions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_keeplastautosavedversions_1","displayName":"Enabled","description":null,"helpText":null}]},"50a12c2b56ed0cb3":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_l_exceladdinfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_l_exceladdinfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_l_exceladdinfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"505958d943276cdd":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"5004eabb1fb5e6bc":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting","displayName":"Default JavaScript setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2","displayName":"Don't allow any site to run JavaScript","description":null,"helpText":null}]},"5043018278025e9a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_proxybypasslist","displayName":"Comma-separated list of proxy bypass rules (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"508204de8b73b1f5":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings","displayName":"Dynamic Code Settings (User)","description":"This policy controls the dynamic code settings for Microsoft Edge.\r\n\r\nDisabling dynamic code improves the security of Microsoft Edge by preventing potentially hostile dynamic code and third-party code from making changes to Microsoft Edge's behavior. However this might cause compatibility issues with third-party software that must run in the browser process.\r\n\r\nIf you set this policy to 0 (the default) or leave unset, then Microsoft Edge will use the default settings.\r\n\r\nIf you set this policy to 1 – (EnabledForBrowser) then the Microsoft Edge browser process is prevented from creating dynamic code.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default dynamic code settings\r\n\r\n* EnabledForBrowser (1) = Prevent the browser process from creating dynamic code\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"50c49caa9fc8b19f":{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor","displayName":"Set the company logo backplate color on the new tab page. (User)","description":"By default, the new tab page sets the company logo backplate color to the neutralStrokeActive (#cecece) constant.\r\n\r\nYou can configure this policy with a color hex code to change the company logo backplate color on the new tab page.\r\n\r\nIf this policy is not configured, the default neutralStrokeActive (#cecece) color will be used as the backplate color.\r\n\r\nExample value: #cecece","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_1","displayName":"Enabled","description":null,"helpText":null}]},"500cd374fc9ceef3":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Prevent redirection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Redirect sites based on the incompatible sites sitelist","description":null,"helpText":null}]},"500c055963215f7f":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled","displayName":"Windows Hello For HTTP Auth Enabled (User)","description":"Indicates if Windows Credential UI should be used to respond to NTLM and Negotiate authentication challenges.\r\n\r\nIf you disable this policy, a basic username and password prompt will be used to respond to NTLM and Negotiate challenges. If you enable or don't configure this policy, Windows Credential UI will be used.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5017725cbc53b308":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"50da54dbb0fcb894":{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_shorteneventstype_l_selecttheshorteneventstype","displayName":"Select the Shorten Events Type (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_shorteneventstype_l_selecttheshorteneventstype_none","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_shorteneventstype_l_selecttheshorteneventstype_end_early","displayName":"End Early","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_shorteneventstype_l_selecttheshorteneventstype_start_late","displayName":"Start Late","description":null,"helpText":null}]},"508a30723495b60e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_descriptioncolon10","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"5019b20bac189bc7":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjresourceassignooui","displayName":"Resource Assigments (User)","description":"Specifies that the feedback triangle should appear in a corner of a field if the user assigns additional resources to a task that already has resources assigned.\r\n\r\nIf you enable this setting, a feedback triangle is displayed in the corner of a field if users assign additional resources to a task that already has resources assigned.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"fe7c8652-17d4-40a7-869c-f7cfc3454402","categoryName":"Show indicators and Option butons for","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjresourceassignooui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjresourceassignooui_1","displayName":"Enabled","description":null,"helpText":null}]},"5059a1262616cffe":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjautolinktasks","displayName":"Autolink inserted or moved tasks (User)","description":"This policy setting automatically links tasks when you cut, move, or insert them.\r\n\r\nIf you enable this policy setting, tasks will automatically be linked when you cut, move, or insert them.\r\n\r\nIf you disable or do not configure this policy setting, tasks will not automatically be linked when you cut, move, or insert them.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjautolinktasks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjautolinktasks_1","displayName":"Enabled","description":null,"helpText":null}]},"505163bed94405f8":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_whenformattingautomaticallyformatentireword","displayName":"When formatting, automatically format entire word (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_whenformattingautomaticallyformatentireword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_whenformattingautomaticallyformatentireword_1","displayName":"Enabled","description":null,"helpText":null}]},"50887bcacc1d49c4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draganddroptextediting","displayName":"Allow text to be dragged and dropped (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draganddroptextediting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draganddroptextediting_1","displayName":"Enabled","description":null,"helpText":null}]},"50d74b668263a4e7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correctkeyboardsetting","displayName":"Correct keyboard setting (User)","description":"This policy setting allows you to set the \"Correct keyboard setting\" option in Word Options | Proofing | \"AutoCorrect Options...\" | AutoCorrect.\r\n\r\nIf you enable this policy setting, \"Correct keyboard setting\" will be set.\r\n\r\nIf you disable or do not configure this policy setting, \"Correct keyboard setting\" will not be set.","helpText":"","infoUrls":[],"categoryId":"e95db55a-8337-416d-a61f-e60f55cc0d13","categoryName":"AutoCorrect","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correctkeyboardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correctkeyboardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"50cf035eeb1e95c2":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword","displayName":"Legacy converters for Word (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforword_1","displayName":"Enabled","description":null,"helpText":null}]},"5058eb5e1a42755b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"50f7cbe2c6029369":{"id":"vendor_msft_firewall_mdmstore_domainprofile_globalportsallowuserprefmerge","displayName":"Global Ports Allow User Pref Merge","description":"This value is used as an on/off switch. If this value is false, global port firewall rules in the local store are ignored and not enforced. The setting only has meaning if it is set or enumerated in the Group Policy store or if it is enumerated from the GroupPolicyRSoPStore. The merge law for this option is to let the value GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_globalportsallowuserprefmerge_false","displayName":"False","description":"GlobalPortsAllowUserPrefMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_globalportsallowuserprefmerge_true","displayName":"True","description":"GlobalPortsAllowUserPrefMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/51.json b/public/intune-definitions/51.json new file mode 100644 index 000000000000..da2c79e236b0 --- /dev/null +++ b/public/intune-definitions/51.json @@ -0,0 +1 @@ +{"5130c63db1c633e6":{"id":"com.android.devicerestrictionpolicy.passwordminimumlettercharacters","displayName":"Number of characters required","description":"Enter the number of characters the password must have, between 1 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"518ce53980dc1ae8":{"id":"com.apple.airprint_airprint_item_port","displayName":"Port","description":"The listening port of the AirPrint destination. Available only in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"429c4b85-a2b4-46ed-afa0-6c89c08a5544","categoryName":"AirPrint","options":null},"513952e6d11afa42":{"id":"com.apple.applicationaccess_allowlivevoicemail","displayName":"Allow Live Voicemail","description":"If set to false, disables live voicemail on the device.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowlivevoicemail_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowlivevoicemail_true","displayName":"Enabled","description":null,"helpText":null}]},"5103a1486e5b8a87":{"id":"com.apple.assetcache.managed_peerlistenranges_item_first","displayName":"First","description":"The first IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"518c1fd6951cf9b2":{"id":"com.apple.managedclient.preferences_blockexternalextensions","displayName":"Blocks external extensions from being installed","description":"Control the installation of external extensions.\n\nIf you enable this setting, external extensions are blocked from being installed.\n\nIf you disable this setting or leave it unset, external extensions are allowed to be installed.\n\nExternal extensions and their installation are documented at https://docs.microsoft.com/microsoft-edge/extensions-chromium/developer-guide/alternate-distribution-options.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#blockexternalextensions"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_blockexternalextensions_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_blockexternalextensions_true","displayName":"Enabled","description":null,"helpText":null}]},"51b007296344a7ca":{"id":"com.apple.managedclient.preferences_disablednsovertcpparsing","displayName":"Disable DNS over TCP parsing","description":"Disables parsing of DNS over TCP","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disablednsovertcpparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablednsovertcpparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"51ee1266a7e536b7":{"id":"com.apple.managedclient.preferences_efficiencymodeenabled","displayName":"Efficiency mode enabled","description":"Enables efficiency mode which helps extend battery life by saving computer resources. By default, efficiency mode is enabled for devices with a battery and disabled otherwise.\n\nIf you enable this policy, efficiency mode will become active according to the setting chosen by the user. You can configure the efficiency mode setting using the \"EfficiencyMode\" policy. If the device does not have a battery, efficiency mode will always be active.\n\nIf you disable this policy, efficiency mode will never become active. The \"EfficiencyMode\" and \"EfficiencyModeOnPowerEnabled\" policies will have no effect.\n\nIf you don't configure this policy, efficiency mode will be enabled for devices with a battery and disabled otherwise. Users can choose the efficiency mode option they want in edge://settings/system.\n\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#efficiencymodeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_efficiencymodeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_efficiencymodeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"51a4b9d1f2eef0b9":{"id":"com.apple.managedclient.preferences_localprovidersenabled","displayName":"Allow suggestions from local providers","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\n\nIf you enable this policy, suggestions from local providers are used.\n\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions will not appear.\n\nIf you do not configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\n\nNote that some features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the \"SavingBrowserHistoryDisabled\" policy.\n\nThis policy requires a browser restart to finish applying.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#localprovidersenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_localprovidersenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_localprovidersenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"511fa92924b9e7cc":{"id":"com.apple.managedclient.preferences_registeredprotocolhandlers_item_protocol","displayName":"Protocol","description":"The protocol for the protocol handler.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"519996673020f4bf":{"id":"com.apple.managedclient.preferences_webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC","description":"This policy controls the use of post-quantum key agreement for WebRTC in Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge will offer post-quantum key agreement for WebRTC.\n\nIf you disable this policy, post-quantum key agreement will not be offered for WebRTC.\n\nIf you don't configure this policy, post-quantum key agreement will not be offered for WebRTC. A future version of Microsoft Edge may enable this feature by default.\n\nOffering a post-quantum key agreement is backwards compatible. Existing datagram transport layer security (DTLS) peers and networking middleware are expected to ignore the new option and continue using previous options.\n\nHowever, devices that don't correctly implement DTLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or larger message sizes. Such devices aren’t post-quantum-ready and may interfere with an organization's post-quantum transition. If this issue occurs, administrators should contact the device vendor for a fix.\n\nThis policy is temporary and will be removed in a future release.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webrtcpostquantumkeyagreement"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webrtcpostquantumkeyagreement_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webrtcpostquantumkeyagreement_true","displayName":"Enabled","description":null,"helpText":null}]},"51e51337e7b54c33":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_recommended","displayName":"Configure the new tab page search box experience (users can override)","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\".\n\n If you disable or don't configure this policy and:\n\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\n- If the address bar default search engine isn't Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\n\n\nIf you enable this policy and set it to:\n\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\n\nPolicy options mapping:\n\n* bing (bing) = Search box (Recommended)\n\n* redirect (redirect) = Address bar\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_recommended_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_recommended_redirect","displayName":"Address bar","description":null,"helpText":null}]},"517e6e3c7eb02acb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.registeredprotocolhandlers","displayName":"Register protocol handlers","description":"Set this policy (recommended only) to register a list of protocol handlers. This list is merged with ones registered by the user and both are available to use.\n\nTo register a protocol handler:\n\n- Set the protocol property to the scheme (for example, \"mailto\")\n- Set the URL property to the URL property of the application that handlers the scheme specified in the \"protocol\" field. The pattern can include a \"%s\" placeholder, which the handled URL replaces.\n\nUsers can't remove a protocol handler registered by this policy. However, they can install a new default protocol handler to override the existing protocol handlers.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"51f6df9932f8480f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.registeredprotocolhandlers_recommended","displayName":"Register protocol handlers (users can override)","description":"Set this policy (recommended only) to register a list of protocol handlers. This list is merged with ones registered by the user and both are available to use.\n\nTo register a protocol handler:\n\n- Set the protocol property to the scheme (for example, \"mailto\")\n- Set the URL property to the URL property of the application that handlers the scheme specified in the \"protocol\" field. The pattern can include a \"%s\" placeholder, which the handled URL replaces.\n\nUsers can't remove a protocol handler registered by this policy. However, they can install a new default protocol handler to override the existing protocol handlers.\n\nIn the examples in this section, the URL points to the Outlook on the Web (OWA) endpoint used in Exchange Online. If you're targeting Exchange Server (on-premises), use the following URL and replace mail.contoso.com with your organization's OWA endpoint:\n\nhttps://mail.contoso.com/?path=/mail/action/compose&mailtouri=%s","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"5148b4742fef03db":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice","displayName":"Require Security Device","description":"A Trusted Platform Module (TPM) provides additional security benefits over software because data stored within it cannot be used on other devices.\n\nIf you enable this policy setting, only devices with a usable TPM provision Windows Hello for Business.\n\nIf you disable or do not configure this policy setting, the TPM is still preferred, but all devices provision Windows Hello for Business using software if the TPM is non-functional or unavailable.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice_false","displayName":"false","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice_true","displayName":"true","description":"Enabled","helpText":null}]},"51d5e5ae98646e89":{"id":"device_vendor_msft_pkcscertificate_keystorageprovider","displayName":"Key storage provider (KSP)","description":"Select where you want to store the certificate’s key.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure"],"categoryId":"dbbe5cb3-fe2e-4d28-8918-24d075a91676","categoryName":"PKCS certificate","options":null},"516b3c3a6effa3bb":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto","displayName":"To","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehoursto_23","displayName":"11 PM","description":null,"helpText":null}]},"51994a4f6c6448f2":{"id":"device_vendor_msft_policy_config_admx_deviceguard_configcipolicy_configcipolicyfilepathtext","displayName":"Code Integrity Policy file path:","description":null,"helpText":"","infoUrls":[],"categoryId":"909339a5-8f04-4fa2-8807-5d38c83ef547","categoryName":"Device Guard","options":null},"5173f324dbfd0f04":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_includedeviceclaimscheck","displayName":"Include device claims","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_includedeviceclaimscheck_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_includedeviceclaimscheck_1","displayName":"True","description":null,"helpText":null}]},"5180542819ac5934":{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_state","displayName":"Set ISATAP State","description":"This policy setting allows you to configure Intra-Site Automatic Tunnel Addressing Protocol (ISATAP), an address-to-router and host-to-host, host-to-router and router-to-host automatic tunneling technology that is used to provide unicast IPv6 connectivity between IPv6 hosts across an IPv4 intranet.\r\n\r\nIf you disable or do not configure this policy setting, the local host setting is used.\r\n\r\nIf you enable this policy setting, you can configure ISATAP with one of the following settings:\r\n\r\nPolicy Default State: If the ISATAP router name is resolved successfully, the host will have ISATAP configured with a link-local address and an address for each prefix received from the ISATAP router through stateless address auto-configuration. If the ISATAP router name is not resolved successfully, ISATAP connectivity is not available on the host using the corresponding IPv4 address.\r\n\r\nPolicy Enabled State: If the ISATAP name is resolved successfully, the host will have ISATAP configured with a link-local address and an address for each prefix received from the ISATAP router through stateless address auto-configuration. If the ISATAP name is not resolved successfully, the host will have an ISATAP interface configured with a link-local address.\r\n\r\nPolicy Disabled State: No ISATAP interfaces are present on the host.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-isatap-state"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_state_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_state_1","displayName":"Enabled","description":null,"helpText":null}]},"510d528b9d2db7ba":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook","displayName":"Microsoft Outlook 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Outlook 2013.\r\nBy default, the user settings of Microsoft Outlook 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013outlook"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook_1","displayName":"Enabled","description":null,"helpText":null}]},"51fda9714afd98b8":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016","displayName":"Microsoft Office 365 Visio 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Visio 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Visio 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365visio2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016_1","displayName":"Enabled","description":null,"helpText":null}]},"51afd5ba49f6cf22":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-trusted"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted_1","displayName":"Enabled","description":null,"helpText":null}]},"51870a396e6a0fa9":{"id":"device_vendor_msft_policy_config_applicationmanagement_msiallowusercontroloverinstall","displayName":"MSI Allow User Control Over Install","description":"This policy setting permits users to change installation options that typically are available only to system administrators. If you enable this policy setting, some of the security features of Windows Installer are bypassed. It permits installations to complete that otherwise would be halted due to a security violation. If you disable or do not configure this policy setting, the security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user. This policy setting is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevents software from being installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#msiallowusercontroloverinstall"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_msiallowusercontroloverinstall_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_msiallowusercontroloverinstall_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"51298b23a0c08eb5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpreviewusesystemdefaultprinter","displayName":"Use System Default Printer as Default","description":"Setting the policy to Enabled means Google Chrome uses the OS default printer as the default destination for print preview.\r\n\r\nSetting the policy to Disabled or leaving it unset means Google Chrome uses the most recently used printer as the default destination for print preview.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpreviewusesystemdefaultprinter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpreviewusesystemdefaultprinter_1","displayName":"Enabled","description":null,"helpText":null}]},"51cbc57038fd77e3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting","displayName":"Default key generation setting","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_1","displayName":"Enabled","description":null,"helpText":null}]},"5130d28d4174b79f":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_odfcccdunregistertimeout","displayName":"CCD Unregister Timeout (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":null},"51318ab1b2a2512b":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407","displayName":"Allow paste operations via script","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_1","displayName":"Prompt","description":null,"helpText":null}]},"519e64417fe5a668":{"id":"device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon","displayName":"Audit Insecure Guest Logon","description":"This policy controls whether the SMB server will enable the audit event when the client is logged on as guest account. If you enable this policy setting, the SMB server will log the event when the client is logged on as guest account. If you disable or do not configure this policy setting, the SMB server will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#auditinsecureguestlogon"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"51ea34c786138af3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled","displayName":"Enable favorites bar","description":"Enables or disables the favorites bar.\r\n\r\nIf you enable this policy, users will see the favorites bar.\r\n\r\nIf you disable this policy, users won't see the favorites bar.\r\n\r\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"51174ad5711f092a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\r\n\r\nThis policy is optional. If you don't configure it, image search isn't available.\r\n\r\nSpecify Bing's Image Search URL as:\r\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\r\n\r\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\r\n\r\nSee 'DefaultSearchProviderImageURLPostParams' (Parameters for an image URL that uses POST) policy to finish configuring image search.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: https://search.contoso.com/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_1","displayName":"Enabled","description":null,"helpText":null}]},"51d702872ec2ebe9":{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_precisegeolocationallowedforurlsdesc","displayName":"Allow precise geolocation on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"51442002740f035b":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"51c5927d42963694":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"513dcb7554b0f0ca":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winprojexe132","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winprojexe132_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winprojexe132_1","displayName":"True","description":null,"helpText":null}]},"51c01ede9b548663":{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection","displayName":"Restrict clipboard transfer from client to server","description":"This policy setting allows you to restrict clipboard data transfers from client to server.\r\n\r\nIf you enable this policy setting, you must choose from the following behaviors:\r\n\r\n- Disable clipboard transfers from client to server.\r\n\r\n- Allow plain text copying from client to server.\r\n\r\n- Allow plain text and images copying from client to server.\r\n\r\n- Allow plain text, images and Rich Text Format copying from client to server.\r\n\r\n- Allow plain text, images, Rich Text Format and HTML copying from client to server.\r\n\r\nIf you disable or do not configure this policy setting, users can copy arbitrary contents from client to server if clipboard redirection is enabled.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-limitclienttoserverclipboardredirection"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_1","displayName":"Enabled","description":null,"helpText":null}]},"51604a871f4c7a3b":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingqrscale","displayName":"QR code bitmap scale factor (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"51b4e114ba3921d7":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector_part_udpredirectorport","displayName":"UDP port (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"518c2eb90325fb0b":{"id":"device_vendor_msft_policy_config_textinput_allowlinguisticdatacollection","displayName":"Allow Linguistic Data Collection","description":"This policy setting controls the ability to send inking and typing data to Microsoft to improve the language recognition and suggestion capabilities of apps and services running on Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowlinguisticdatacollection"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowlinguisticdatacollection_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowlinguisticdatacollection_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"51cf5f8f3fc3211b":{"id":"device_vendor_msft_policy_config_update_allowmuupdateservice","displayName":"Allow MU Update Service","description":"Allows the IT admin to manage whether to scan for app updates from Microsoft Update.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowmuupdateservice"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_allowmuupdateservice_0","displayName":"Not allowed or not configured.","description":"Not allowed or not configured.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowmuupdateservice_1","displayName":"Allowed. Accepts updates received through Microsoft Update.","description":"Allowed. Accepts updates received through Microsoft Update.","helpText":null}]},"511f5ff377913f29":{"id":"device_vendor_msft_policy_config_update_configuredeadlinegraceperiodforfeatureupdates","displayName":"Configure Deadline Grace Period For Feature Updates","description":"Minimum number of days from update installation until restarts occur automatically for feature updates. This policy only takes effect when Update/ConfigureDeadlineForFeatureUpdates is configured. If Update/ConfigureDeadlineForFeatureUpdates is configured but this policy is not, then the value configured by Update/ConfigureDeadlineGracePeriod will be used. If Update/ConfigureDeadlineGracePeriod is also not configured, then the default value of 2 days will take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinegraceperiodforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"51c4505815be779f":{"id":"safari_safari","displayName":"com.apple.configuration.safari.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"51450f9cdbe73102":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_history","displayName":"PIN History (User)","description":"This policy specifies the number of past PINs that can be stored in the history that can’t be used. Valid values are 0 to 50 inclusive. If this policy is set to 0, then storage of previous PINs is not required. PIN history is not preserved through PIN reset.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"51e8967f7f9b5148":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions","displayName":"Process Mitigation Options (User)","description":"\r\n This security feature provides a means to override individual process MitigationOptions settings. This can be used to enforce a number of security policies specific to applications. The application name is specified as the Value name, including extension. The Value is specified as a bit field with a series of flags in particular positions. Bits can be set to either 0 (setting is forced off), 1 (setting is forced on), or ? (setting retains its existing value prior to GPO evaluation). The recognized bit locations are:\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE (0x00000001)\r\n Enables data execution prevention (DEP) for the child process\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_DEP_ATL_THUNK_ENABLE (0x00000002)\r\n Enables DEP-ATL thunk emulation for the child process. DEP-ATL thunk emulation causes the system to intercept NX faults that originate from the Active Template Library (ATL) thunk layer.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_SEHOP_ENABLE (0x00000004)\r\n Enables structured exception handler overwrite protection (SEHOP) for the child process. SEHOP blocks exploits that use the structured exception handler (SEH) overwrite technique.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON (0x00000100)\r\n The force Address Space Layout Randomization (ASLR) policy forcibly rebases images that are not dynamic base compatible by acting as though an image base collision happened at load time. If relocations are required, images that do not have a base relocation section will not be loaded.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_ON (0x00010000)\r\n PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF (0x00020000)\r\n The bottom-up randomization policy, which includes stack randomization options, causes a random location to be used as the lowest user address.\r\n\r\n For instance, to enable PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE and PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON, disable PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF, and to leave all other options at their default values, specify a value of:\r\n ???????????????0???????1???????1\r\n\r\n Setting flags not specified here to any value other than ? results in undefined behavior.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-processmitigationoptions"],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"51af72ae7a85d867":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicytab","displayName":"Group Policy tab for Active Directory Tools (User)","description":"Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-ins.\n\nIf you enable this setting, the Group Policy tab is displayed in the property sheet for a site, domain, or organizational unit displayed by the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you disable the setting, the Group Policy tab is not displayed in those snap-ins.\n\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this tab is displayed.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users will not have access to the Group Policy tab.\n\n To explicitly permit use of the Group Policy tab, enable this setting. If this setting is not configured (or disabled), the Group Policy tab is inaccessible.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users will have access to the Group Policy tab.\n\n To explicitly prohibit use of the Group Policy tab, disable this setting. If this setting is not configured (or enabled), the Group Policy tab is accessible.\n\nWhen the Group Policy tab is inaccessible, it does not appear in the site, domain, or organizational unit property sheets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-grouppolicytab"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicytab_1","displayName":"Enabled","description":null,"helpText":null}]},"5106f9c560c25cec":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deletealluserconnection","displayName":"Ability to delete all user remote access connections (User)","description":"Determines whether users can delete all user remote access connections.\r\n\r\nTo create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the \"For all users\" option.\r\n\r\nIf you enable this setting, all users can delete shared remote access connections. In addition, if your file system is NTFS, users need to have Write access to Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Connections\\Pbk to delete a shared remote access connection.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), users (including administrators) cannot delete all-user remote access connections. (By default, users can still delete their private connections, but you can change the default by using the \"Prohibit deletion of remote access connections\" setting.)\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can delete all user remote access connections.\r\n\r\nImportant: When enabled, the \"Prohibit deletion of remote access connections\" setting takes precedence over this setting. Users (including administrators) cannot delete any remote access connections, and this setting is ignored.\r\n\r\nNote: LAN connections are created and deleted automatically by the system when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-deletealluserconnection"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deletealluserconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deletealluserconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"51980ad39887362b":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync","displayName":"Microsoft Lync 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Lync 2013.\r\nBy default, the user settings of Microsoft Lync 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Lync 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013lync"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync_1","displayName":"Enabled","description":null,"helpText":null}]},"517445a44eeb2c57":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_tcpcheckbox","displayName":"TCP (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_tcpcheckbox_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_tcpcheckbox_1","displayName":"True","description":null,"helpText":null}]},"5186b1af25137cd2":{"id":"user_vendor_msft_policy_config_browser_allowtabpreloading","displayName":"Allow Tab Preloading (User)","description":"Prevent Microsoft Edge from starting and loading the Start and New Tab page at Windows startup and each time Microsoft Edge is closed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowtabpreloading"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowtabpreloading_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowtabpreloading_1","displayName":"Allow","description":"Allowed. Preload Start and New tab pages.","helpText":null}]},"511922bb8d827257":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls_videocaptureallowedurlsdesc","displayName":"URLs that will be granted access to video capture devices without prompt (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"51362bff9feb236b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist","displayName":"Authentication server allowlist (User)","description":"Setting the policy specifies which servers should be allowed for integrated authentication. Integrated authentication is only on when Google Chrome gets an authentication challenge from a proxy or from a server in this permitted list.\r\n\r\nLeaving the policy unset means Google Chrome tries to detect if a server is on the intranet. Only then will it respond to IWA requests. If a server is detected as internet, then Google Chrome ignores IWA requests from it.\r\n\r\nNote: Separate multiple server names with commas. Wildcards, *, are allowed.\r\n\r\nExample value: *.example.com,example.com","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"51b11ca5c3e9e4ce":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"51b28c4185cbed85":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_profileseparationdomainexceptionlistdesc","displayName":"Enterprise profile separation secondary domain allowlist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f00e9baf-9bbf-48e4-aaac-57410730f016","categoryName":"Sign-in settings","options":null},"51ed90df2dda6fe6":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"51a43d03d280067c":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"511d894d0b5523fc":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"511fa97352444127":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced","displayName":"OneAuth Authentication Flow Enforced for signin (User)","description":"This policy allows users to decide whether to use the OneAuth library for sign-in and token fetch in Microsoft Edge on Windows 10 RS3 and above.\r\n\r\nIf you disable or don't configure this policy, signin process will use Windows Account Manager. Microsoft Edge would be able to use accounts you logged in to Windows, Microsoft Office, or other Microsoft applications for login, without the needing of password. Or you can provide valid account and password to sign in, which will be stored in Windows Account Manager for future usage. You will be able to investigate all accounts stored in Windows Account Manager through Windows Settings -> Accounts -> Email and accounts page.\r\n\r\nIf you enable this policy, OneAuth authentication flow will be used for account signin. The OneAuth authentication flow has fewer dependencies and can work without Windows shell. The account you use would not be stored in the Email and accounts page.\r\n\r\nThis policy will only take effect on Windows 10 RS3 and above. On Windows 10 below RS3, OneAuth is used for authentication in Microsoft Edge by default.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced_1","displayName":"Enabled","description":null,"helpText":null}]},"51de751ab12f33ae":{"id":"user_vendor_msft_policy_config_office16v11~policy~l_microsoftofficesystem~l_miscellaneous437_l_officerecommendeddocuments","displayName":"Show recommended files on the File tab or start page (User)","description":"This policy setting allows you to control whether users see a list of recommended files on the File tab or start page in Word, Excel, and PowerPoint, on devices running Windows.\r\n\r\nIf you enable this policy setting, users will see a list of recommended files on the File tab or start page.\r\n\r\nIf you disable this policy setting, users won't see a list of recommended files on the File tab or start page.\r\n\r\nIf you don't configure this policy setting, users will see a list of recommended files on the File tab or start page.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2146780.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v11~policy~l_microsoftofficesystem~l_miscellaneous437_l_officerecommendeddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v11~policy~l_microsoftofficesystem~l_miscellaneous437_l_officerecommendeddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"51364e5e535f7fe9":{"id":"user_vendor_msft_policy_config_office16v19~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_acceptalleulas","displayName":"Accept all EULAs (User)","description":"By default, users are required to accept a EULA upon activating an Office license. By setting this policy, all EULAs will be automatically accepted machine-wide and no prompts will be shown.","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v19~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_acceptalleulas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v19~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_acceptalleulas_1","displayName":"Enabled","description":null,"helpText":null}]},"51fce38fce464d88":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslinkandanattachment","displayName":"With a simple Web discussions link and an attachment (User)","description":"Defines the default message body text used in an email request for review when the review document is included only as an attachment.","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslinkandanattachment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslinkandanattachment_1","displayName":"Enabled","description":null,"helpText":null}]},"5111a833c4215c4b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyoutlook","displayName":"Disallow in Outlook (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyoutlook_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyoutlook_1","displayName":"True","description":null,"helpText":null}]},"51861ddcefc6ab32":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_galician","displayName":"Galician (User)","description":"Enables the editing language Galician","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_galician_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_galician_1","displayName":"Enabled","description":null,"helpText":null}]},"517a89b882e56e9e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hindi","displayName":"Hindi (User)","description":"Enables the editing language Hindi","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hindi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hindi_1","displayName":"Enabled","description":null,"helpText":null}]},"51a6714181d87902":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showpasteoptionsbuttons","displayName":"Show Paste Options button when content is pasted (User)","description":"This policy setting configures the Paste Options button.\r\n\r\nIf you enable this policy setting, the Paste Options button is displayed after content is pasted.\r\n\r\nIf you disable or do not configure this policy setting, the Paste Options button is not displayed.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showpasteoptionsbuttons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showpasteoptionsbuttons_1","displayName":"Enabled","description":null,"helpText":null}]},"517922ffce9d84b2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_l_workflowpath474","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"5122a6ae6dcc87d6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey03_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"51a24110efbabf88":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc06_l_descriptioncolon260","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"51f66020d26e1ef9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding","displayName":"Default or specific encoding (User)","description":"When enabled, either default encoding or a specified encoding will be used.","helpText":"","infoUrls":[],"categoryId":"025c640e-51e2-4f04-85e3-a13f30b5e08c","categoryName":"Encoding","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_1","displayName":"Enabled","description":null,"helpText":null}]},"5197d3c6f350cd89":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_plaintextoptions_l_encodeattachmentsinuuencodeformatwhensending1","displayName":"Encode attachments in UUENCODE format (User)","description":"","helpText":"","infoUrls":[],"categoryId":"db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","categoryName":"Internet Formatting","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_plaintextoptions_l_encodeattachmentsinuuencodeformatwhensending1_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_plaintextoptions_l_encodeattachmentsinuuencodeformatwhensending1_1","displayName":"True","description":null,"helpText":null}]},"51674a67d205c835":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime","displayName":"Start time: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_480","displayName":"8:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_0","displayName":"12:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_30","displayName":"12:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_60","displayName":"1:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_90","displayName":"1:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_120","displayName":"2:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_150","displayName":"2:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_180","displayName":"3:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_210","displayName":"3:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_240","displayName":"4:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_270","displayName":"4:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_300","displayName":"5:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_330","displayName":"5:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_360","displayName":"6:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_390","displayName":"6:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_420","displayName":"7:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_450","displayName":"7:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_510","displayName":"8:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_540","displayName":"9:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_570","displayName":"9:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_600","displayName":"10:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_630","displayName":"10:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_660","displayName":"11:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_690","displayName":"11:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_720","displayName":"12:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_750","displayName":"12:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_780","displayName":"1:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_810","displayName":"1:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_840","displayName":"2:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_870","displayName":"2:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_900","displayName":"3:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_930","displayName":"3:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_960","displayName":"4:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_990","displayName":"4:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1020","displayName":"5:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1050","displayName":"5:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1080","displayName":"6:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1110","displayName":"6:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1140","displayName":"7:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1170","displayName":"7:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1200","displayName":"8:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1230","displayName":"8:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1260","displayName":"9:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1290","displayName":"9:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1320","displayName":"10:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1350","displayName":"10:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1380","displayName":"11:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_starttime_1410","displayName":"11:30 PM","description":null,"helpText":null}]},"51d08b39f3a60d5d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodesilentostformatchange","displayName":"Exchange Unicode Mode - Silent OST format change (User)","description":"This policy setting allows .OST files to silently update to Unicode format from ANSI.\r\n\r\nIf you enable this policy setting, it will only have meaning if the related policy setting \"Exchange Unicode Mode - Ignore OST format\" is enabled and set to the options listed below.\r\n\r\nThe behavior is as follows -\r\n\r\n\"Ignore OST Format\" policy setting is enabled and set to \"Create new OST if format doesn't match mode\"; \"Silent OST Format Change\" policy setting is enabled:\r\nIf Outlook detects a mode that is different than the current .OST mode, then a new .OST is created without prompting the user.\r\n\r\n\"Ignore OST Format\" policy setting is enabled and set to \"Prompt to create new OST if format doesn't match mode\"; \"Silent OST Format Change\" policy setting is enabled:\r\nIf Outlook detects a mode that is different than the current .OST mode, the user is prompted to allow a delay in the conversion to the mode set by policy. By clicking Ok, a new OST is created without a prompt for a new .OST name.\r\n\r\nIf you disable or do not configure this policy setting, users will be prompted to enter a new name for the updated .OST file.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodesilentostformatchange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodesilentostformatchange_1","displayName":"Enabled","description":null,"helpText":null}]},"5119d55b517df199":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_runprograms_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_runprograms_l_empty_0","displayName":"disable (don't run any programs)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_runprograms_l_empty_1","displayName":"enable (prompt user before running)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_runprograms_l_empty_2","displayName":"enable all (run without prompting)","description":null,"helpText":null}]},"518edb420a28b4be":{"id":"user_vendor_msft_policy_config_printers_approvedusbprintdevicesuser","displayName":"List of Approved USB-connected print devices (User)","description":"\r\n\r\n This setting is a component of the Device Control Printing Restrictions. To use this setting, enable Device Control Printing by enabling the \"Enable Device Control Printing Restrictions\" setting.\r\n\r\n When Device Control Printing is enabled, the system uses the specified list of vid/pid values to determine if the current USB connected printer is approved for local printing.\r\n\r\n Type all the approved vid/pid combinations (separated by commas) that correspond to approved USB printer models. When a user tries to print to a USB printer queue the device vid/pid will be compared to the approved list.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-approvedusbprintdevicesuser"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_printers_approvedusbprintdevicesuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_printers_approvedusbprintdevicesuser_1","displayName":"Enabled","description":null,"helpText":null}]},"51c67109a327fcf3":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid4","displayName":"Shapesheet (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid4_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid4_1","displayName":"True","description":null,"helpText":null}]},"51a8c8c7e82c2510":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_l_allowsubfolders83","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_l_allowsubfolders83_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_l_allowsubfolders83_1","displayName":"True","description":null,"helpText":null}]},"5149703d59e7e9a6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_l_opendocumenttextfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_l_opendocumenttextfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_l_opendocumenttextfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_l_opendocumenttextfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_l_opendocumenttextfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_l_opendocumenttextfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_l_opendocumenttextfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"51e0f0a31225eda8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_plaintextfiles_l_plaintextfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_plaintextfiles_l_plaintextfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_plaintextfiles_l_plaintextfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_plaintextfiles_l_plaintextfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/52.json b/public/intune-definitions/52.json new file mode 100644 index 000000000000..45f584538a7c --- /dev/null +++ b/public/intune-definitions/52.json @@ -0,0 +1 @@ +{"52dcd941c21ace71":{"id":"com.apple.app.lock_app_userenabledoptions_zoom","displayName":"Zoom","description":"If true, allows the user to toggle Zoom. ","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_userenabledoptions_zoom_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_userenabledoptions_zoom_true","displayName":"True","description":null,"helpText":null}]},"5269557c71ef5f30":{"id":"com.apple.applicationaccess_allowappclips","displayName":"Allow App Clips","description":"If false, prevents a user from adding any App Clips, and removes any existing App Clips on the device. Requires a supervised device. Available in iOS 14.0 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowappclips_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowappclips_true","displayName":"True","description":null,"helpText":null}]},"5212761b65a69f9c":{"id":"com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses","displayName":"Force Classroom Automatically Join Classes","description":"If true, automatically gives permission to the teacher’s requests without prompting the student. Requires a supervised device. Available in iOS 11 and later, and macOS 10.14.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses_true","displayName":"True","description":null,"helpText":null}]},"523de6e2e15f56ef":{"id":"com.apple.dnssettings.managed_ondemandrules_item_dnsserveraddressmatch","displayName":"DNS Server Address Match","description":"An array of IP addresses. This rule matches if any of the network’s specified DNS servers match any entry in the array.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"52a0affd479bd303":{"id":"com.apple.loginwindow_restartdisabled","displayName":"Restart Disabled","description":"If true, disables the Restart item.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_restartdisabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_restartdisabled_true","displayName":"True","description":null,"helpText":null}]},"52b1fedeba5338d1":{"id":"com.apple.managedclient.preferences_edgesidebarcustomizeenabled","displayName":"Enable sidebar customize","description":"Allow/Disallow to use sidebar customize.\n\nIf you enable or don't configure this policy, users will be able to access sidebar customize.\nIf you disable this policy, users will not be able to access the sidebar customize.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgesidebarcustomizeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgesidebarcustomizeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgesidebarcustomizeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"52a6c66eddd5ff37":{"id":"com.apple.mcxprinting_userprinterlist_printer_deviceuri","displayName":"Device URI","description":"The device URI.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"52cde5c71b2ccc57":{"id":"com.apple.security.smartcard_userpairing","displayName":"User Pairing","description":"If false, users don't get the pairing dialog, although existing pairings still work. ","helpText":null,"infoUrls":[],"categoryId":"f4a8384f-9e4e-4fc6-9ee2-28fa5260347a","categoryName":"Smart Card","options":[{"id":"com.apple.security.smartcard_userpairing_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.security.smartcard_userpairing_true","displayName":"True","description":null,"helpText":null}]},"5267a6896ab8d1a9":{"id":"com.apple.tcc.configuration-profile-policy_services_postevent","displayName":"Post Event","description":"Specifies the policies for the application to use CoreGraphics APIs to send CGEvents to the system event stream.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"529040f01e1adc52":{"id":"com.microsoft.edge.mamedgeappconfigsettings.automaticfullscreenallowedforurls","displayName":"Allow automatic full screen on specified sites","description":"For security reasons, the\nrequestFullscreen() web API\nrequires a prior user gesture (\"transient activation\") to be called or it\nfails. Users' personal settings can allow certain origins to call this API\nwithout a prior user gesture.\n\nThis policy supersedes users' personal settings and allows matching origins to\ncall the API without a prior user gesture.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\nWildcards (*) are allowed.\n\nOrigins matching both blocked and allowed policy patterns are blocked.\nOrigins not specified by policy or user settings require a prior user\ngesture to call this API.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"520582163b4d1fc7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecurecontentallowedforurls","displayName":"Allow insecure content on specified sites","description":"Create a list of URL patterns to specify sites that can display or, as of version 94, download insecure mixed content (that is, HTTP content on HTTPS sites).\n\nIf you don't configure this policy, blockable mixed content is blocked and optionally blockable mixed content is upgraded. However, users are allowed to set exceptions to allow insecure mixed content for specific sites.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards (*) are allowed.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"527bb052214b6266":{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecurecontentblockedforurls","displayName":"Block insecure content on specified sites","description":"Creates a list of URL patterns to specify sites that aren't allowed to display blockable (that is, active) mixed content (that is, HTTP content on HTTPS sites) and for which optionally blockable mixed content upgrades are disabled.\n\nIf you don't configure this policy, blockable mixed content is blocked, and optionally blockable mixed content is upgraded. However, users are allowed to set exceptions to allow insecure mixed content for specific sites.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards (*) are allowed.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"52202e55d85a7201":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_recommended","displayName":"Enable Password reveal button (users can override)","description":"Lets you configure the default display of the browser password reveal button for password input fields on websites.\n\nIf you enable or don't configure this policy, the browser user setting defaults to displaying the password reveal button.\n\nIf you disable this policy, the browser user setting can't display the password reveal button.\n\nFor accessibility, users can change the browser setting from the default policy.\n\nThis policy only affects the browser password reveal button but doesn't affect websites' custom reveal buttons.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"527033e047985634":{"id":"device_vendor_msft_policy_config_admx_devicecompat_deviceflags","displayName":"Device compatibility settings","description":"Changes behavior of Microsoft bus drivers to work with specific devices.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-devicecompat#admx-devicecompat-deviceflags"],"categoryId":"27087ae6-d02f-4b54-a143-6cde89c04989","categoryName":"Device and Driver Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_devicecompat_deviceflags_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_devicecompat_deviceflags_1","displayName":"Enabled","description":null,"helpText":null}]},"52a36d15f7a631af":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_nobackground7","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_nobackground7_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_nobackground7_1","displayName":"True","description":null,"helpText":null}]},"52daead3a5ecd596":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_noncriticaltimeout_reporting_noncriticaltimeout","displayName":"Configure time out for detections in non-critical failed state","description":null,"helpText":"","infoUrls":[],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":null},"525093d661c8c63c":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_signaturedisablenotification","displayName":"Allow notifications to disable security intelligence based reports to Microsoft MAPS","description":"This policy setting allows you to configure the antimalware service to receive notifications to disable individual security intelligence in response to reports it sends to Microsoft MAPS. Microsoft MAPS uses these notifications to disable security intelligence that are causing false positive reports. You must have configured your computer to join Microsoft MAPS for this functionality to work.\r\n\r\n If you enable this setting or do not configure, the antimalware service will receive notifications to disable security intelligence.\r\n\r\n If you disable this setting, the antimalware service will not receive notifications to disable security intelligence.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-signaturedisablenotification"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_signaturedisablenotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_signaturedisablenotification_1","displayName":"Enabled","description":null,"helpText":null}]},"5219e6d9c3d54c11":{"id":"device_vendor_msft_policy_config_admx_msi_disablemsi_disablemsi","displayName":"Disable Windows Installer","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disablemsi_disablemsi_2","displayName":"Always","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disablemsi_disablemsi_1","displayName":"For non-managed applications only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disablemsi_disablemsi_0","displayName":"Never","description":null,"helpText":null}]},"520cacd7598074d1":{"id":"device_vendor_msft_policy_config_admx_nca_corporateresources","displayName":"Corporate Resources","description":"Specifies resources on your intranet that are normally accessible to DirectAccess clients. Each entry is a string that identifies the type of resource and the location of the resource. \r\n\r\nEach string can be one of the following types:\r\n\t \r\n- A DNS name or IPv6 address that NCA pings. The syntax is “PING:” followed by a fully qualified domain name (FQDN) that resolves to an IPv6 address, or an IPv6 address. Examples: PING:myserver.corp.contoso.com or PING:2002:836b:1::1. \r\n \r\nNote \r\n\r\nWe recommend that you use FQDNs instead of IPv6 addresses wherever possible.\r\n\r\nImportant \r\n\r\nAt least one of the entries must be a PING: resource.\r\n\r\n-\tA Uniform Resource Locator (URL) that NCA queries with a Hypertext Transfer Protocol (HTTP) request. The contents of the web page do not matter. The syntax is “HTTP:” followed by a URL. The host portion of the URL must resolve to an IPv6 address of a Web server or contain an IPv6 address. Examples: HTTP:http://myserver.corp.contoso.com/ or HTTP:http://2002:836b:1::1/.\r\n\r\n-\tA Universal Naming Convention (UNC) path to a file that NCA checks for existence. The contents of the file do not matter. The syntax is “FILE:” followed by a UNC path. The ComputerName portion of the UNC path must resolve to an IPv6 address or contain an IPv6 address. Examples: FILE:\\\\myserver\\myshare\\test.txt or FILE:\\\\2002:836b:1::1\\myshare\\test.txt.\r\n\r\nYou must configure this setting to have complete NCA functionality.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-corporateresources"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_corporateresources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_corporateresources_1","displayName":"Enabled","description":null,"helpText":null}]},"528218406e62582e":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_2_lbl_customgoofflineactionslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"520ed9c35abbc5b8":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hostedmultipleservers_wbc_multipleservers_listbox","displayName":"Hosted cache servers","description":null,"helpText":"","infoUrls":[],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":null},"52d4645d95d5cbb4":{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_2","displayName":"Prevent Flicks Learning Mode","description":"Makes pen flicks learning mode unavailable.\r\n\r\nIf you enable this policy, pen flicks are still available but learning mode is not. Pen flicks are off by default and can be turned on system-wide, but cannot be restricted to learning mode applications. This means that the pen flicks training triggers in Internet Explorer are disabled and that the pen flicks notification will never be displayed. However, pen flicks, the pen flicks tray icon and pen flicks training (that can be accessed through CPL) are still available. Conceptually this policy is a subset of the Disable pen flicks policy.\r\n\r\nIf you disable or do not configure this policy, all the features described above will be available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventflickslearningmode-2"],"categoryId":"6f0e6df6-8654-4b57-b1d5-2160c5a0a54e","categoryName":"Pen Flicks Learning","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_2_1","displayName":"Enabled","description":null,"helpText":null}]},"528aecf33d0d5a45":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-internet"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet_1","displayName":"Enabled","description":null,"helpText":null}]},"52872a9d883d5999":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxspeechtotextoverlay","displayName":"Xbox Speech To Text Overlay * (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxspeechtotextoverlay_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxspeechtotextoverlay_1","displayName":"True","description":null,"helpText":null}]},"52921ea9b26cff3a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls","displayName":"URLs that will be granted access to audio capture devices without prompt","description":"Setting the policy means you specify the URL list whose patterns get matched to the security origin of the requesting URL. A match grants access to audio capture devices without prompt\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com/\r\nhttps://[*.]example.edu/","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"52e21fd3da5b2ce6":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c","displayName":"Only allow approved domains to use the TDC ActiveX control","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0","displayName":"Disable","description":null,"helpText":null}]},"52d4399b3663db18":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows","displayName":"Allow script-initiated windows without size or position constraints","description":"This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.\n\nIf you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.\n\nIf you do not configure this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptinitiatedwindows"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"52c7b888ce613234":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols","displayName":"Download signed ActiveX controls","description":"This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\n\nIf you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.\n\nIf you disable the policy setting, signed controls cannot be downloaded.\n\nIf you do not configure this policy setting, signed controls cannot be downloaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedownloadsignedactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"529fd2a30a561231":{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect","displayName":"Min Smb2 Dialect","description":"This policy controls the minimum version of SMB protocol. Note: This group policy does not prevent use of SMB 1 if that component is still installed and enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#minsmb2dialect"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_514","displayName":"SMB 2.0.2","description":"SMB 2.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_528","displayName":"SMB 2.1.0","description":"SMB 2.1.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_768","displayName":"SMB 3.0.0","description":"SMB 3.0.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_770","displayName":"SMB 3.0.2","description":"SMB 3.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_785","displayName":"SMB 3.1.1","description":"SMB 3.1.1","helpText":null}]},"52fc070271692b0f":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints","description":"This policy enables a list of TLS certificates that should be trusted by Microsoft Edge for server authentication, with constraints added outside the certificate. If no constraint of a certain type is present, then any name of that type is allowed.\r\nCertificates should be base64-encoded. At least one constraint must be specified for each certificate.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"certificate\": \"MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736GjOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL24CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/JdmZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X\",\r\n \"constraints\": {\r\n \"permitted_dns_names\": [\r\n \"example.org\"\r\n ],\r\n \"permitted_cidrs\": [\r\n \"10.1.1.0/24\"\r\n ]\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_1","displayName":"Enabled","description":null,"helpText":null}]},"52ca06af7513458c":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended","displayName":"Parameters for an image URL that uses POST","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it's replaced with real image thumbnail data. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nSpecify Bing's Image Search URL Post Params as:\r\n'imageBin={google:imageThumbnailBase64}'.\r\n\r\nSpecify Google's Image Search URL Post Params as:\r\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\r\n\r\nIf you don't set this policy, image search requests are sent using the GET method.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"5241ddb67f32657f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing","displayName":"File Previewing","description":"Disables file previewers in Microsoft Office programs. This policy will not disable file previewers for Microsoft Windows.\r\n \r\nTo disable a file previewer, type the CLSID for the previewer you want to disable (the previewer CLSID can be found at HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\PreviewHandlers).","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing_1","displayName":"Enabled","description":null,"helpText":null}]},"52291513464b4358":{"id":"device_vendor_msft_policy_config_system_allowoobeupdates","displayName":"Allow OOBE Updates","description":"Allows or disallows updating device during OOBE via NDUP. By default devices are allowed to update during OOBE.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowoobeupdates"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowoobeupdates_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowoobeupdates_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"52c0409b558f15cd":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"52b8b61f0495ce38":{"id":"enrollment_autopilot_dpp_customerrormessage","displayName":"Custom error message","description":"This message will be displayed if an error occurs during deployment.","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":null},"52b2adc0a2a1c48c":{"id":"linux_mdatp_managed_antivirusengine_unmonitoredfilesystems","displayName":"Unmonitored Filesystems","description":"List of filesystems (identified by their name) to be unmonitored/excluded from Real Time Protection(RTP).","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#unmonitor-filesystems"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"529067ef97b7eee4":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve","displayName":"Set maximum number of trust records to preserve (User)","description":"This policy setting allows you to specify the maximum number of trust records to preserve when the purge task detects that this application has trusted more than the number of trusted documents set by the \"Set maximum number of trusted documents\" policy setting.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of trust records to preserve, with an upper limit of 20000. Due to performance reasons, it is not recommended to set it to the upper limit.\r\n\r\nIf you disable or you do not configure this policy setting, the default value for of 400 is used.","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_1","displayName":"Enabled","description":null,"helpText":null}]},"525651efd4e7f707":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders10","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders10_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders10_1","displayName":"True","description":null,"helpText":null}]},"52763b75feba4c38":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion_am_instructmodriskinclusionlist","displayName":"Specify moderate risk extensions (include a leading period, e.g. .doc;.pdf;). (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":null},"52beb8af2f94c638":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1","displayName":"Configure Report Queue (User)","description":"This policy setting determines the behavior of the Windows Error Reporting report queue.\r\n\r\nIf you enable this policy setting, you can configure report queue behavior by using the controls in the policy setting. When the Queuing behavior pull-down list is set to Default, Windows determines, when a problem occurs, whether the report should be placed in the reporting queue, or the user should be prompted to send it immediately. When Queuing behavior is set to Always queue, all reports are added to the queue until the user is prompted to send the reports, or until the user sends problem reports by using the Solutions to Problems page in Control Panel.\r\n\r\nThe Maximum number of reports to queue setting determines how many reports can be queued before older reports are automatically deleted. The setting for Number of days between solution check reminders determines the interval time between the display of system notifications that remind the user to check for solutions to problems. A value of 0 disables the reminder.\r\n\r\nIf you disable or do not configure this policy setting, Windows Error Reporting reports are not queued, and users can only send reports at the time that a problem occurs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werqueue-1"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_1","displayName":"Enabled","description":null,"helpText":null}]},"52ff1c6570d2af44":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1","displayName":"Event logging level (User)","description":"Determines which events the Offline Files feature records in the event log.\r\n\r\nOffline Files records events in the Application log in Event Viewer when it detects errors. By default, Offline Files records an event only when the offline files storage cache is corrupted. However, you can use this setting to specify additional events you want Offline Files to record.\r\n\r\nTo use this setting, in the \"Enter\" box, select the number corresponding to the events you want the system to log. The levels are cumulative; that is, each level includes the events in all preceding levels.\r\n\r\n\"0\" records an error when the offline storage cache is corrupted.\r\n\r\n\"1\" also records an event when the server hosting the offline file is disconnected from the network.\r\n\r\n\"2\" also records events when the local computer is connected and disconnected from the network.\r\n\r\n\"3\" also records an event when the server hosting the offline file is reconnected to the network.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-eventlogginglevel-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1_1","displayName":"Enabled","description":null,"helpText":null}]},"52e086883350dae6":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_1","displayName":"Remove \"Make Available Offline\" command (User)","description":"This policy setting prevents users from making network files and folders available offline.\r\n\r\nIf you enable this policy setting, users cannot designate files to be saved on their computer for offline use. However, Windows will still cache local copies of files that reside on network shares designated for automatic caching.\r\n\r\nIf you disable or do not configure this policy setting, users can manually specify files and folders that they want to make available offline.\r\n\r\nNotes:\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence.\r\n\r\nThe \"Make Available Offline\" command is called \"Always available offline\" on computers running Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 7, or Windows Vista.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nomakeavailableoffline-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_1_1","displayName":"Enabled","description":null,"helpText":null}]},"5283cb005ab79c25":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"52a726c05a92090f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_enforcelocalanchorconstraintsenabled","displayName":"Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_enforcelocalanchorconstraintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_enforcelocalanchorconstraintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"52c9ae79d3bc3fc0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_l_setmaximumnumberoftrustrecordstopreservespinid","displayName":"Maximum to preserve: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":null},"52e721db713d85a2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"5286db653b83862f":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407","displayName":"Allow paste operations via script (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_1","displayName":"Prompt","description":null,"helpText":null}]},"52c6356644d54be4":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles","displayName":"Show security warning for potentially unsafe files (User)","description":"This policy setting controls whether or not the \"Open File - Security Warning\" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example).\n\nIf you enable this policy setting and set the drop-down box to Enable, these files open without a security warning. If you set the drop-down box to Prompt, a security warning appears before the files open.\n\nIf you disable this policy setting, these files do not open.\n\nIf you do not configure this policy setting, the user can configure how the computer handles these files. By default, these files are blocked in the Restricted zone, enabled in the Intranet and Local Computer zones, and set to prompt in the Internet and Trusted zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"52527378fc05cd06":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors (User)","description":"The X.509 key usage extension declares how the key in a certificate can be\r\nused. These instructions ensure certificates aren't used in an unintended\r\ncontext, which protects against a class of cross-protocol attacks on HTTPS and\r\nother protocols. HTTPS clients must verify that server certificates match the\r\nconnection's TLS parameters.\r\n\r\nIf this policy is enabled,\r\nMicrosoft Edge will perform this key\r\ncheck. This helps prevent attacks where an attacker manipulates the browser into\r\ninterpreting a key in ways that the certificate owner did not intend.\r\n\r\nIf this policy is set to disabled or not configured,\r\nMicrosoft Edge will skip this key check in\r\nHTTPS connections that negotiate TLS 1.2 and use an RSA certificate that\r\nchains to a local trust anchor. Examples of local trust anchors include\r\npolicy-provided or user-installed root certificates. In all other cases, the\r\ncheck is performed independent of this policy's setting.\r\n\r\nThis policy is available for administrators to preview the behavior of a\r\nfuture release, which will enable this check by default. At that point, this\r\npolicy will remain temporarily available for administrators that need more\r\ntime to update their certificates to meet the new RSA key usage requirements.\r\n\r\nConnections that fail this check will fail with the error\r\nERR_SSL_KEY_USAGE_INCOMPATIBLE. Sites that fail with this error likely have a\r\nmisconfigured certificate. Modern ECDHE_RSA cipher suites use the\r\n\"digitalSignature\" key usage option, while legacy RSA decryption cipher suites\r\nuse the \"keyEncipherment\" key usage option. If uncertain, administrators should\r\ninclude both in RSA certificates meant for HTTPS.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"52a4403e94775a67":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)","description":"Disables enforcement of Certificate Transparency requirements for a list of subjectPublicKeyInfo hashes.\r\n\r\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed to still be used for Enterprise hosts.\r\n\r\nTo disable Certificate Transparency enforcement when this policy is set, one of the following sets of conditions must be met:\r\n1. The hash is of the server certificate's subjectPublicKeyInfo.\r\n2. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, that CA certificate is constrained via the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName contains an organizationName attribute.\r\n3. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate contains the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\r\n\r\nA subjectPublicKeyInfo hash is specified by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\r\n\r\nIf you disable this policy or don't configure it, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it's not disclosed according to the Certificate Transparency policy.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_1","displayName":"Enabled","description":null,"helpText":null}]},"5294defafc4f9b29":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed","displayName":"Allow full screen mode (User)","description":"Set the availability of full screen mode - all Microsoft Edge UI is hidden and only web content is visible.\r\n\r\nIf you enable this policy or don't configure it, the user, apps, and extensions with appropriate permissions can enter full screen mode.\r\n\r\nIf you disable this policy, users, apps, and extensions can't enter full screen mode.\r\n\r\nOpening Microsoft Edge in kiosk mode using the command line is unavailable when full screen mode is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"525d253d8796badf":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting","displayName":"Default notification setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1","displayName":"Allow sites to show desktop notifications","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2","displayName":"Don't allow any site to show desktop notifications","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3","displayName":"Ask every time a site wants to show desktop notifications","description":null,"helpText":null}]},"52a4d25dfa6016cd":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_screencapturewithoutgestureallowedfororiginsdesc","displayName":"Allow screen capture without prior user gesture (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"526727936a0481aa":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled","displayName":"Enable Windows to search local Microsoft Edge browsing data (User)","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will publish local browsing data to the Windows Indexer.\r\n\r\nIf you disable this policy, Microsoft Edge will not share data to the Windows Indexer.\r\n\r\nNote that if you disable this policy, Microsoft Edge will remove the data shared with Windows on the device and stop sharing any new browsing data.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5208078c71ad7965":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework","displayName":"Replace Label - Work (User)","description":"This policy setting allows you to change or remove the 2nd label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework_1","displayName":"Enabled","description":null,"helpText":null}]},"52a7da4c461e3e69":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofitemstoscanfromtoday","displayName":"Maximum number of items to scan from today to determine the user's colleagues for recommendation (User)","description":"The maximum number of items to scan in the Outlook mailbox to determine the colleagues the user has. The larger the number, the more accurate the recommendation. The smaller the number, the faster the recommendations are generated.","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofitemstoscanfromtoday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofitemstoscanfromtoday_1","displayName":"Enabled","description":null,"helpText":null}]},"520e0dc6ed8bcbe8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage47","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage47_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage47_1","displayName":"True","description":null,"helpText":null}]},"52d5c37dc70fea5c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_ensureallsmimesignedmessageshavealabel","displayName":"Ensure all S/MIME signed messages have a label (User)","description":"This policy setting controls whether Outlook requires labels on S/MIME signed messages.\r\n\r\nIf you enable this policy setting, labels must be attached to all Outlook S/MIME messages before they are sent. Users can attach labels to messages in the \"Message Options\" dialog box by clicking \"Security Settings,\" ensuring that the \"Add digital signature to this message\" check box is selected, and selecting a label under \"Security Label.\"\r\n\r\nIf you disable all S/MIME signed messages are not required to have a label, and users cannot change this functionality.\r\n\r\nIf you do not configure this policy setting, all S/MIME signed messages are not required to have a label, but users can change this functionality through the \"Message Options\" dialog box.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_ensureallsmimesignedmessageshavealabel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_ensureallsmimesignedmessageshavealabel_1","displayName":"Enabled","description":null,"helpText":null}]},"5298fe04c9ed1a9d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocusertemplates","displayName":"User Templates (User)","description":"Specifies the default location in the computer system for saving and opening workgroup templates.\r\n\r\nIf you enable this policy setting, the location first appears in the Open and Save As dialog box.\r\n\r\nIf you disable or do not configure this policy setting, the users default for this setting is followed.","helpText":"","infoUrls":[],"categoryId":"d679b407-a753-40aa-bc9f-175f363b0eff","categoryName":"File locations","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocusertemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocusertemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"52d142a2f2118388":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"52c0118ce1a14fa8":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc10_l_pathcolon44","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"52dbc9200357ae6a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsandcolumns","displayName":"Stop checking for blank table rows and columns (User)","description":"This policy setting prevents the Accessibility Checker from verifying that blank rows and columns have not been inserted into tables.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that blank rows and columns have not been inserted into tables.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for blank rows and columns and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsandcolumns_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsandcolumns_1","displayName":"Enabled","description":null,"helpText":null}]},"523f7a6c8ae9d8a8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_pathcolon68","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"526ba7fd1699350d":{"id":"vendor_msft_firewall_mdmstore_privateprofile_disablestealthmodeipsecsecuredpacketexemption","displayName":"Disable Stealth Mode Ipsec Secured Packet Exemption","description":"This value is an on/off switch. This option is ignored if DisableStealthMode is on. Otherwise, when this option is true, the firewall's stealth mode rules MUST NOT prevent the host computer from responding to unsolicited network traffic if that traffic is secured by IPsec. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used. For schema versions 0x0200, 0x0201, and 0x020A, this value is invalid and MUST NOT be used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_disablestealthmodeipsecsecuredpacketexemption_false","displayName":"False","description":"FALSE","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_disablestealthmodeipsecsecuredpacketexemption_true","displayName":"True","description":"TRUE","helpText":null}]},"52f799d20cc7fa8f":{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablelogdroppedpackets","displayName":"Enable Log Dropped Packets","description":"This value is used as an on/off switch. If this value is on, the firewall logs all the dropped packets. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablelogdroppedpackets_false","displayName":"Disable Logging Of Dropped Packets","description":"Disable Logging Of Dropped Packets","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablelogdroppedpackets_true","displayName":"Enable Logging Of Dropped Packets","description":"Enable Logging Of Dropped Packets","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/53.json b/public/intune-definitions/53.json new file mode 100644 index 000000000000..e27b3bf39601 --- /dev/null +++ b/public/intune-definitions/53.json @@ -0,0 +1 @@ +{"53e8c37aa87a7eb4":{"id":"com.apple.applicationaccess_allowairprint","displayName":"Allow AirPrint","description":"If false, disables AirPrint. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowairprint_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowairprint_true","displayName":"True","description":null,"helpText":null}]},"53d29003cc66c6e4":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_keyword","displayName":"Keyword","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"53ea78f87270508c":{"id":"com.apple.managedclient.preferences_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode","description":"Overrides the last used setting for printing background graphics.\nIf you enable this setting, background graphics printing is enabled.\nIf you disable this setting, background graphics printing is disabled.\n\nPolicy options mapping:\n\n* enabled (enabled) = Enable background graphics printing mode by default\n\n* disabled (disabled) = Disable background graphics printing mode by default\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#printingbackgroundgraphicsdefault"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_printingbackgroundgraphicsdefault_0","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printingbackgroundgraphicsdefault_1","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null}]},"535161f71449e7c2":{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"53593e505ccc459e":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"533cbe90122fcfa4":{"id":"device_vendor_msft_keyboardfilter_disableaccessibilitysettings","displayName":"Disable Accessibility Settings (Windows Insiders only)","description":"Determines if Accessibility settings (e.g. Ease of Access) are disabled. Defaults to false.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/KeyboardFilter-csp/"],"categoryId":"717b634f-72a6-44f6-92c5-e1397bb10f40","categoryName":"Keyboard Filter","options":[{"id":"device_vendor_msft_keyboardfilter_disableaccessibilitysettings_false","displayName":"Accessibility settings are honored","description":"Accessibility settings are honored","helpText":null},{"id":"device_vendor_msft_keyboardfilter_disableaccessibilitysettings_true","displayName":"Accessibility settings are disabled","description":"Accessibility settings are disabled","helpText":null}]},"538e219d4dfb5227":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logmaxsize_3_channel_logmaxsize","displayName":"Maximum Log Size (KB)","description":null,"helpText":"","infoUrls":[],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":null},"53b7e331072784ed":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_nobackground6","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_nobackground6_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_nobackground6_1","displayName":"True","description":null,"helpText":null}]},"53cfc2545607cecd":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_2_lbl_assignedofflinefileslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"53fdf060e1c41c46":{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomcomponentfailurespolicy_detectdeprecatedcomcomponentfailureslevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomcomponentfailurespolicy_detectdeprecatedcomcomponentfailureslevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomcomponentfailurespolicy_detectdeprecatedcomcomponentfailureslevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"53ab06ecf1714896":{"id":"device_vendor_msft_policy_config_admx_srmfci_enableshellaccesscheck","displayName":"Enable access-denied assistance on client for all file types","description":"This Group Policy Setting should be set on Windows clients to enable access-denied assistance for all file types\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-srmfci#admx-srmfci-enableshellaccesscheck"],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_enableshellaccesscheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_enableshellaccesscheck_1","displayName":"Enabled","description":null,"helpText":null}]},"53ee3b7781a0e0c1":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_client_port_teredoclientportbox","displayName":"The range is 0 to 65535. Default (recommended) is 0 which is to let the local system pick the port.","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":null},"53bab3489646260f":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_tscc_permissions_policy","displayName":"Do not allow local administrators to customize permissions","description":"This policy setting specifies whether to disable the administrator rights to customize security permissions for the Remote Desktop Session Host server. \r\n\r\nYou can use this setting to prevent administrators from making changes to the user groups allowed to connect remotely to the RD Session Host server. By default, administrators are able to make such changes.\r\n\r\nIf you enable this policy setting the default security descriptors for existing groups on the RD Session Host server cannot be changed. All the security descriptors are read-only.\r\n\r\nIf you disable or do not configure this policy setting, server administrators have full read/write permissions to the user security descriptors by using the Remote Desktop Session WMI Provider.\r\n\r\nNote: The preferred method of managing user access is by adding a user to the Remote Desktop Users group.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-tscc-permissions-policy"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_tscc_permissions_policy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_tscc_permissions_policy_1","displayName":"Enabled","description":null,"helpText":null}]},"53792c061983e60d":{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureindividualthreshold_name","displayName":"Standard User Individual Lockout Threshold","description":"This policy setting allows you to manage the maximum number of authorization failures for each standard user for the Trusted Platform Module (TPM). If the number of authorization failures for the user within the duration for Standard User Lockout Duration equals this value, the standard user is prevented from sending commands to the Trusted Platform Module (TPM) that require authorization.\r\n\r\nThis setting helps administrators prevent the TPM hardware from entering a lockout mode because it slows the speed standard users can send commands requiring authorization to the TPM.\r\n\r\nAn authorization failure occurs each time a standard user sends a command to the TPM and receives an error response indicating an authorization failure occurred. Authorization failures older than the duration are ignored.\r\n\r\nFor each standard user two thresholds apply. Exceeding either threshold will prevent the standard user from sending a command to the TPM that requires authorization.\r\n\r\nThis value is the maximum number of authorization failures each standard user may have before the user is not allowed to send commands requiring authorization to the TPM.\r\n\r\nThe Standard User Lockout Total Threshold value is the maximum total number of authorization failures all standard users may have before all standard users are not allowed to send commands requiring authorization to the TPM.\r\n\r\nThe TPM is designed to protect itself against password guessing attacks by entering a hardware lockout mode when it receives too many commands with an incorrect authorization value. When the TPM enters a lockout mode it is global for all users including administrators and Windows features like BitLocker Drive Encryption. The number of authorization failures a TPM allows and how long it stays locked out vary by TPM manufacturer. Some TPMs may enter lockout mode for successively longer periods of time with fewer authorization failures depending on past failures. Some TPMs may require a system restart to exit the lockout mode. Other TPMs may require the system to be on so enough clock cycles elapse before the TPM exits the lockout mode.\r\n\r\nAn administrator with the TPM owner password may fully reset the TPM's hardware lockout logic using the TPM Management Console (tpm.msc). Each time an administrator resets the TPM's hardware lockout logic all prior standard user TPM authorization failures are ignored; allowing standard users to use the TPM normally again immediately.\r\n\r\nIf this value is not configured, a default value of 4 is used.\r\n\r\nA value of zero means the OS will not allow standard users to send commands to the TPM which may cause an authorization failure.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-standarduserauthorizationfailureindividualthreshold-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureindividualthreshold_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureindividualthreshold_name_1","displayName":"Enabled","description":null,"helpText":null}]},"53c0743a120511fc":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherdetails_minimumversiondetails","displayName":"Minimum Version","description":"The application's minimum version","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"536f5df631631eca":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogoff","displayName":"Account Logon Logoff Audit Logoff","description":"This policy setting allows you to audit events generated by the closing of a logon session. These events occur on the computer that was accessed. For an interactive logoff the security audit event is generated on the computer that the user account logged on to. If you configure this policy setting, an audit event is generated when a logon session is closed. Success audits record successful attempts to close sessions and Failure audits record unsuccessful attempts to close sessions. If you do not configure this policy setting, no audit event is generated when a logon session is closed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditlogoff"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogoff_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogoff_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogoff_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogoff_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"532f5b021c552a51":{"id":"device_vendor_msft_policy_config_browser_alwaysenablebookslibrary","displayName":"Always Enable Books Library","description":"Specifies whether the Books Library in Microsoft Edge will always be visible regardless of the country or region setting for the device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#alwaysenablebookslibrary"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_alwaysenablebookslibrary_0","displayName":"Disabled","description":"Show the Books Library only in countries or regions where supported.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_alwaysenablebookslibrary_1","displayName":"Enabled","description":"Show the Books Library, regardless of the device's country or region.","helpText":null}]},"538f8bca5b12fa62":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"53d7ec82145d8357":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch","displayName":"Force Google SafeSearch","description":"Setting the policy to Enabled means SafeSearch in Google Search is always active, and users can't change this setting.\r\n\r\nSetting the policy to Disabled or leaving it unset means SafeSearch in Google Search is not enforced.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"5353fe33c7ed172c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled","displayName":"Enable Safe Browsing for trusted sources","description":"Setting the policy to Enabled or leaving it unset means downloaded files are sent to be analyzed by Safe Browsing, even when it's from a trusted source.\r\n\r\nSetting the policy to Disabled means downloaded files won't be sent to be analyzed by Safe Browsing when it's from a trusted source.\r\n\r\nThese restrictions apply to downloads triggered from webpage content, as well as the Download link menu option. These restrictions don't apply to the save or download of the currently displayed page or to saving as PDF from the printing options.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5346d038c6dd142b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords","displayName":"Allow users to show passwords in Password Manager (deprecated)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},"532106b3c076b2f9":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model","description":"Configure how Google Chrome downloads the foundational GenAI model and uses for inference locally.\r\n\r\nWhen the policy is set to Allowed (0) or not set, the model is downloaded automatically, and used for inference.\r\n\r\nWhen the policy is set to Disabled (1), the model will not be downloaded.\r\n\r\nModel downloading can also be disabled by ComponentUpdatesEnabled.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"530b58a0691f37c1":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability","displayName":"Manage the deprecated prefixed video fullscreen API's availability (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_runtime-enabled","displayName":"Follows regular deprecation timelines for the PrefixedVideoFullscreen API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_disabled","displayName":"Disables prefixed video fullscreen APIs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_enabled","displayName":"Enables prefixed video fullscreen APIs","description":null,"helpText":null}]},"5399705ce08cf09d":{"id":"device_vendor_msft_policy_config_connectivity_allowvpnovercellular","displayName":"Allow VPN Over Cellular","description":"Specifies what type of underlying connections VPN is allowed to use. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowvpnovercellular"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowvpnovercellular_0","displayName":"Block","description":"VPN is not allowed over cellular.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowvpnovercellular_1","displayName":"Allow","description":"VPN can use any connection, including cellular.","helpText":null}]},"53f79069c8331e18":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"53023f3a2d99212a":{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings","displayName":"Customize consent settings","description":"This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\n\nIf you enable this policy setting, you can add specific event types to a list by clicking Show, and typing event types in the Value Name column of the Show Contents dialog box. Event types are those for generic, non-fatal errors: crash, no response, and kernel fault errors. For each specified event type, you can set a consent level of 0, 1, 2, 3, or 4.\n\n- 0 (Disable): Windows Error Reporting sends no data to Microsoft for this event type.\n\n- 1 (Always ask before sending data): Windows prompts the user for consent to send reports.\n\n- 2 (Send parameters): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, and Windows prompts the user for consent to send any additional data requested by Microsoft.\n\n- 3 (Send parameters and safe additional data): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, as well as data which Windows has determined (within a high probability) does not contain personally identifiable data, and prompts the user for consent to send any additional data requested by Microsoft.\n\n- 4 (Send all data): Any data requested by Microsoft is sent automatically.\n\nIf you disable or do not configure this policy setting, then the default consent settings that are applied are those specified by the user in Control Panel, or in the Configure Default Consent policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-customizeconsentsettings"],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"530bc094af1a490a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds","displayName":"Volume Wait Time (milliseconds)","description":"Specifies the number of milliseconds to wait for the volume to be attached by the system. The default is 20000 (20 sec) which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VolumeWaitTimeMS\r\nType: DWORD\r\nValues: Min = 1000, Max = 1000000","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_1","displayName":"Enabled","description":null,"helpText":null}]},"539cf99b76d821ce":{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake","displayName":"Force Instant Wake","description":"Determines whether Wake on Arrival is forced on/off by the MDM policy. The user will not be able to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceinstantwake"],"categoryId":"a77e6e83-a02e-4a51-a27e-6437ea42aeb5","categoryName":"Human Presence","options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake_2","displayName":"Forced Off.","description":"ForcedOff.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake_1","displayName":"Forced On.","description":"ForcedOn.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},"532254c95a71d1c9":{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode","displayName":"Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled","description":"This policy setting prevents ActiveX controls from running in Protected Mode when Enhanced Protected Mode is enabled. When a user has an ActiveX control installed that is not compatible with Enhanced Protected Mode and a website attempts to load the control, Internet Explorer notifies the user and gives the option to run the website in regular Protected Mode. This policy setting disables this notification and forces all websites to run in Enhanced Protected Mode.\n\nEnhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system.\n\nWhen Enhanced Protected Mode is enabled, and a user encounters a website that attempts to load an ActiveX control that is not compatible with Enhanced Protected Mode, Internet Explorer notifies the user and gives the option to disable Enhanced Protected Mode for that particular website.\n\nIf you enable this policy setting, Internet Explorer will not give the user the option to disable Enhanced Protected Mode. All Protected Mode websites will run in Enhanced Protected Mode.\n\nIf you disable or do not configure this policy setting, Internet Explorer notifies users and provides an option to run websites with incompatible ActiveX controls in regular Protected Mode. This is the default behavior.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotallowactivexcontrolsinprotectedmode"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"539b9b2954e2ef13":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"5384c6a9e3ef57a8":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowaccesstodatasources"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"530c4698a4ddde2a":{"id":"device_vendor_msft_policy_config_memorydump_allowcrashdump","displayName":"Allow Crash Dump","description":"This policy setting decides if crash dump collection on the machine is allowed or not.\n\nSupported values:\n0 - Disable crash dump collection.\n1 (default) - Allow crash dump collection.","helpText":"","infoUrls":[],"categoryId":"de9a9583-d660-4bdc-83bc-404c8c488267","categoryName":"Memory Dump","options":[{"id":"device_vendor_msft_policy_config_memorydump_allowcrashdump_0","displayName":"Block","description":"Disable crash dump collection.","helpText":null},{"id":"device_vendor_msft_policy_config_memorydump_allowcrashdump_1","displayName":"Allow","description":"Allow crash dump collection.","helpText":null}]},"53d0bb0c65465a65":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory","displayName":"Set download directory","description":"Configures the directory to use when downloading files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified one or chosen to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\r\n\r\nIf you set an invalid path, Microsoft Edge will default to the user's default download directory.\r\n\r\nIf the folder specified by the path doesn't exist, the download will trigger a prompt that asks the user where they want to save their download.\r\n\r\nExample value: \r\n Linux-based OSes (including Mac): /home/${user_name}/Downloads\r\n Windows: C:\\Users\\${user_name}\\Downloads","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"5330e9c4a0d58346":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport","displayName":"Include non-standard port in Kerberos SPN","description":"Specifies whether the generated Kerberos SPN should include a non-standard port.\r\n\r\nIf you enable this policy, and a user includes a non-standard port (a port other than 80 or 443) in a URL, that port is included in the generated Kerberos SPN.\r\n\r\nIf you don't configure or disable this policy, the generated Kerberos SPN won't include a port in any case.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_1","displayName":"Enabled","description":null,"helpText":null}]},"537df75826178a5a":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled","displayName":"Configure address bar editing","description":"If you enable or don't configure this policy, users can change the URL in the address bar.\r\n\r\nIf you disable this policy, it prevents users from changing the URL in the address bar.\r\n\r\nNote: This policy doesn't prevent the browser from navigating to any URL. Users can still navigate to any URL by using the search option in the default New Tab Page, or using any link that leads to a web search engine. To ensure that users can only go to sites you expect, consider configuring the following policies in addition to this policy:\r\n\r\n- 'NewTabPageLocation' (Configure the new tab page URL)\r\n\r\n- 'HomepageLocation' (Configure the home page URL)\r\n\r\n- 'HomepageIsNewTabPage' (Set the new tab page as the home page)\r\n\r\n- 'URLBlocklist' (Block access to a list of URLs) and 'URLAllowlist' (Define a list of allowed URLs) to scope the pages that browser can navigate to.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"53a42dff2052162b":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard_kfmoptinwithwizard_textbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"53e7faa952b3cbc0":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_stun_client_port_range_part_iceclientportbase","displayName":"UDP port base (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"53932af3995e644f":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_interval","displayName":"Daily Schedule quick scan interval (hours)","description":"This setting is only applicable if you have selcted scan type as quick scan. Select the interval at which you want to run quick scans. Quick scans can be run multiple times a day. 0 (never), every 1 (hour) to every 24 (hours, one scan per day).","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":null},"533df68ca5b97b8d":{"id":"softwareupdate_allowstandarduserosupdates","displayName":"Allow Standard User OS Updates","description":"If 'true', a standard user can perform Major and Minor Software Updates. If 'false', only administrators can perform Major and Minor Software Updates. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_allowstandarduserosupdates_false","displayName":"Blocked","description":null,"helpText":null},{"id":"softwareupdate_allowstandarduserosupdates_true","displayName":"Allowed","description":null,"helpText":null}]},"5381f79f109a054a":{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_1","displayName":"Do not process the run once list (User)","description":"This policy setting ignores customized run-once lists.\r\n\r\nYou can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts.\r\n\r\nIf you enable this policy setting, the system ignores the run-once list.\r\n\r\nIf you disable or do not configure this policy setting, the system runs the programs in the run-once list.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.\r\n\r\nNote: Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce.\r\n\r\nAlso, see the \"Do not process the legacy run list\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disableexplorerrunoncelegacy-1"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_1_1","displayName":"Enabled","description":null,"helpText":null}]},"5369d06c7370520a":{"id":"user_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_1","displayName":"Turn off Touch Panning (User)","description":"Turn off Panning \r\nTurns off touch panning, which allows users pan inside windows by touch. On a compatible PC with a touch digitizer, by default users are able to scroll or pan inside a scrolling area by dragging up or down directly on the scrolling content.\r\n\r\nIf you enable this setting, the user will not be able to pan windows by touch. \r\n\r\nIf you disable this setting, the user can pan windows by touch.\r\n\r\nIf you do not configure this setting, Touch Panning is on by default.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-touchinput#admx-touchinput-panningeverywhereoff-1"],"categoryId":"abf781d7-1179-4f24-8d01-5611db14eddc","categoryName":"Touch Input","options":[{"id":"user_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},"530eb6296a99b2fb":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi_vdicollectionname","displayName":"VDI Collection Name: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"5395d75e8312aa31":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled","displayName":"Enable Bookmark Bar (User)","description":"Setting the policy to True displays a bookmark bar in Google Chrome. Setting the policy to False means users never see the bookmark bar.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide whether to use this function.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"53594d0537ffa6f6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended","displayName":"Import bookmarks from default browser on first run (User)","description":"Setting the policy to Enabled imports bookmarks from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no bookmarks are imported on first run.\r\n\r\nUsers can trigger an import dialog and the bookmarks checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"530fc7dd03428563":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"5313b6da2184a976":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting","displayName":"Default images setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting_1","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting_2","displayName":"Do not allow any site to show images","description":null,"helpText":null}]},"533606c5b1a11a24":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (User)","description":"Configure how Google Chrome downloads the foundational GenAI model and uses for inference locally.\r\n\r\nWhen the policy is set to Allowed (0) or not set, the model is downloaded automatically, and used for inference.\r\n\r\nWhen the policy is set to Disabled (1), the model will not be downloaded.\r\n\r\nModel downloading can also be disabled by ComponentUpdatesEnabled.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"536924955a6d9489":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm","displayName":"Set CNG cipher algorithm (User)","description":"This policy setting allows you to configure the CNG cipher algorithm that is used.\r\n\r\nIf you enable this policy setting, then the cipher provided will be used if it is a supported algorithm.\r\n\r\nIf you disable or do not configure this policy setting, AES will be used.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"53f86287ef12449c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel","displayName":"Microsoft Office Open XML converters for Excel (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"53a854b68af65e54":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode","displayName":"Allow \"Save Target As\" in Internet Explorer mode (User)","description":"This policy setting allows admins to enable \"Save Target As\" context menu in Internet Explorer mode.\n\nIf you enable this policy, \"Save Target As\" will show up in the Internet Explorer mode context menu and work the same as Internet Explorer.\n\nIf you disable or do not configure this policy setting, \"Save Target As\" will not show up in the Internet Explorer mode context menu.\n\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2102115","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsavetargetasiniemode"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_1","displayName":"Enabled","description":null,"helpText":null}]},"53551fe0fe49fde9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting","displayName":"Default geolocation setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1","displayName":"Allow sites to track users' physical location","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2","displayName":"Don't allow any site to track users' physical location","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3","displayName":"Ask whenever a site wants to track users' physical location","description":null,"helpText":null}]},"53feb1611a69e064":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_extensionallowedtypesdesc","displayName":"Types of extensions/apps that are allowed to be installed (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"53dd91ea5ddcaf31":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites_1","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites_2","displayName":"Block ads on sites with intrusive ads. (Default value)","description":null,"helpText":null}]},"5357aa4077a1472a":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_serialaskforurlsdesc","displayName":"Allow the Serial API on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"538c2601bc744603":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastserviceserverdescription1","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"53597286ed279cc4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastservicenotesdefaulturl6","displayName":"Shared Notes Default Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"53e461cb2b989f6a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastserviceminorversion8","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"53a39aaa0edfa9c0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_largeicons","displayName":"Large icons (User)","description":"Checks/Unchecks the corresponding UI option. This option only applies to CommandBars UI.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_largeicons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_largeicons_1","displayName":"Enabled","description":null,"helpText":null}]},"538667227051650c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_venda","displayName":"Venda (User)","description":"Enables the editing language Venda","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_venda_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_venda_1","displayName":"Enabled","description":null,"helpText":null}]},"53502473d9a10944":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_neverallowuserstospecifygroupswhenrestrictingpermissionfordo","displayName":"Never allow users to specify groups when restricting permission for documents (User)","description":"This policy setting controls whether Office 2016 users can assign permissions to distribution lists when using Information Rights Management. \r\n\r\nIf you enable this policy setting, Office 2016 users cannot specify a distribution list as an authorized party in the Permission dialog box. \r\n\r\nIf you disable or do not configure this policy setting, Office 2016 users can specify distribution lists when using Information Rights Management (IRM) to restrict access to Excel workbooks, InfoPath templates, Outlook e-mail messages, PowerPoint presentations, or Word documents.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_neverallowuserstospecifygroupswhenrestrictingpermissionfordo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_neverallowuserstospecifygroupswhenrestrictingpermissionfordo_1","displayName":"Enabled","description":null,"helpText":null}]},"5387fdcd0d281796":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendsurvey","displayName":"[Deprecated] Allow users to receive and respond to in-product surveys from Microsoft (User)","description":"This policy setting allows you to control whether your users can receive and respond to in-product surveys in Microsoft 365 products. Microsoft will use this feedback to improve the product experience for users. The ability to receive and respond to in-product surveys is enabled by default.\r\n\r\nIf you enable this policy setting, your users will be able to receive and respond to in-product surveys about their experience using Microsoft 365 products.\r\n\r\nIf you disable this policy setting, Microsoft will not survey your users while they are using Microsoft 365 products.\r\n\r\nIf you don't configure this policy setting, your users will be able to receive and respond to in-product surveys about their experience using Microsoft 365 products.\r\n\r\nComing soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center.\r\n\r\nNote: This data will be considered \"Feedback\" under your Microsoft 365 agreement, including information that would otherwise be considered \"Customer Data\" or \"Personal Data\".\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2142253","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendsurvey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendsurvey_1","displayName":"Enabled","description":null,"helpText":null}]},"535798d18656244b":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_usethissignatureforonenoteemail","displayName":"Use this signature for OneNote email (User)","description":"Sets the value in the option ''Add the following signature to e-mail messages and Web pages created in OneNote''.","helpText":"","infoUrls":[],"categoryId":"e4e72b9b-db0e-4a97-9d90-a21d87a4d9bf","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_usethissignatureforonenoteemail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_usethissignatureforonenoteemail_1","displayName":"Enabled","description":null,"helpText":null}]},"53b3a570b2236520":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfrommakingchangestooutlookprofiles","displayName":"Prevent users from making changes to Outlook profiles (User)","description":"This policy setting allows you to prevent users from accessing profile or account configuration tools through either Account Settings or through the Mail Control Panel Applet.\r\n\r\nIf you enable this policy setting, users will see the error, \"This feature has been disabled by your system administrator\" if they select the Account Settings button under Account Information found by clicking on the File tab. Users will also be unable to access profile configuration the Mail Control Panel Applet.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to access Account Settings and the Mail Control Panel Applet normally.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfrommakingchangestooutlookprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfrommakingchangestooutlookprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},"537c9abb27ba6174":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_meetingrequestsusingicalendar","displayName":"Send Internet meeting requests using iCalendar format (User)","description":"This policy setting determines whether users' meeting requests sent outside of your organization use the iCalendar format.\r\n\r\nIf you enable or do not configure this policy setting, meeting requests sent outside of your organization use the ICAL format.\r\n\r\nIf you disable this policy setting, meeting requests sent outside your organization use the TNEF format.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_meetingrequestsusingicalendar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_meetingrequestsusingicalendar_1","displayName":"Enabled","description":null,"helpText":null}]},"53679ad0520024c0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverautodiscoversubdomain","displayName":"Exclude the query for the AutoDiscover domain (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverautodiscoversubdomain_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverautodiscoversubdomain_1","displayName":"True","description":null,"helpText":null}]},"53027f7921555e83":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_calendartype_l_calendartype0","displayName":"Calendar Type (User)","description":"Allows you to set the default calendar type. You need to have the Complex Script and East Asian language packs installed on the operating system in order for this setting to be available. If you enable this setting, you can set the default calendar type. If you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"70b0e7ef-ceac-4c25-8f9f-5a6bf07163b6","categoryName":"Calendar Type","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_calendartype_l_calendartype0_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_calendartype_l_calendartype0_1","displayName":"Enabled","description":null,"helpText":null}]},"5364af1c5c0d5654":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_puboptions1","displayName":"File tab | Options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_puboptions1_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_puboptions1_1","displayName":"True","description":null,"helpText":null}]},"5310b209527b62c1":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_defaultbuiltintab_l_defaultbuiltintab","displayName":"Default tab (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_defaultbuiltintab_l_defaultbuiltintab_0","displayName":"Featured","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_defaultbuiltintab_l_defaultbuiltintab_2","displayName":"Built-in","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_defaultbuiltintab_l_defaultbuiltintab_1","displayName":"Custom","description":null,"helpText":null}]},"53c2c525c591eb85":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchcase","displayName":"Match case (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchcase_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchcase_1","displayName":"Enabled","description":null,"helpText":null}]},"5386107f94a443b2":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_disablemrulistinfontdropdown","displayName":"Disable MRU list in font dropdown (User)","description":"This policy allows you to hide the list of recently used fonts found under Home tab | Font.\r\n\r\nIf you enable this policy setting, the list of recently used fonts will not be shown.\r\n\r\nIf you disable or do not configure this policy setting, the list of recently used fonts will be shown.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_disablemrulistinfontdropdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_disablemrulistinfontdropdown_1","displayName":"Enabled","description":null,"helpText":null}]},"5381aced37e66243":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldshading_l_fieldshading6","displayName":"Field shading (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldshading_l_fieldshading6_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldshading_l_fieldshading6_1","displayName":"Always","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldshading_l_fieldshading6_2","displayName":"When selected","description":null,"helpText":null}]},"53dd2234b5439b36":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_descriptioncolon86","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"53a257bbf5cb7821":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_enabled","displayName":"Enabled","description":"Indicates whether the rule is enabled or disabled. If not specified - a new rule is enabled by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_enabled_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_enabled_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"53c708cfa787705f":{"id":"vendor_msft_sharedpc_disklevelcaching","displayName":"Disk Level Caching","description":"Stop deleting accounts when available disk space reaches this threshold, given as percent of total disk capacity. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/54.json b/public/intune-definitions/54.json new file mode 100644 index 000000000000..8fa959f04422 --- /dev/null +++ b/public/intune-definitions/54.json @@ -0,0 +1 @@ +{"543fb6cb3554686f":{"id":"app_privacy_permissiondefaults_generickey_camera","displayName":"Camera","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for use of the camera.\n* `Allow`: The app privacy permission default is set to allow use of the camera.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_camera_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_camera_1","displayName":"Allow","description":null,"helpText":null}]},"541181db27ad93a7":{"id":"com.apple.dock_mineffect","displayName":"Minimize Effect","description":"The minimize effect.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_mineffect_0","displayName":"Genie","description":null,"helpText":null},{"id":"com.apple.dock_mineffect_1","displayName":"Scale","description":null,"helpText":null}]},"5420ee1e6f7ffbfc":{"id":"com.apple.extensiblesso_extensiondata_sitecode_kerberos","displayName":"Site Code","description":"The name of the Active Directory site the Kerberos extension should use. Most administrators will never need to modify this value, as the Kerberos extension can normally find the site automatically.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"54354b5e439ce6af":{"id":"com.apple.managedclient.preferences_newtabpagelocation","displayName":"Configure the new tab page URL","description":"Configures the default URL for the new tab page.\n\nThis policy determines the page that's opened when new tabs are created (including when new windows are opened). It also affects the startup page if that's set to open to the new tab page.\n\nThis policy doesn't determine which page opens on startup; that's controlled by the \"RestoreOnStartup\" policy. It also doesn’t affect the home page if that’s set to open to the new tab page.\n\nIf you don't configure this policy, the default new tab page is used.\n\nIf you configure this policy *and* the \"NewTabPageSetFeedType\" policy, this policy has precedence.\n\nIf an invalid URL is provided, new tabs will open about://blank.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagelocation"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"54db32c4537d7e47":{"id":"com.apple.managedclient.preferences_useragentreduction","displayName":"Enable or disable the User-Agent Reduction (deprecated)","description":"The User-Agent HTTP request header has been reduced by default since Microsoft Edge version 119. To continue receiving detailed platform information, migrate to User-Agent Client Hints, which replace the deprecated detailed User-Agent header. For more information, visit: https://web.dev/articles/migrate-to-ua-ch\n\nIf you don't configure this policy or set it to Default, the User-Agent header will be reduced and controlled by experimentation.\n\nSet this policy to 'ForceEnabled' to force the reduced version of the User-Agent request header for all origins.\n\nSet this policy to 'ForceDisabled' to always use the full (legacy) User-Agent header.\n\nTo learn more about the User-Agent string, read here:\n\nhttps://go.microsoft.com/fwlink/?linkid=2186267\n\nPolicy options mapping:\n\n* Default (0) = Reduced User Agent, or controlled by experimentation.\n\n* ForceDisabled (1) = Full (legacy) User Agent.\n\n* ForceEnabled (2) = Reduced User Agent.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#useragentreduction"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_useragentreduction_0","displayName":"Reduced User Agent, or controlled by experimentation.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_useragentreduction_1","displayName":"Full (legacy) User Agent.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_useragentreduction_2","displayName":"Reduced User Agent.","description":null,"helpText":null}]},"543ee7cae274761a":{"id":"com.apple.mcx_cachedaccounts.askforsecuretokenauthbypass","displayName":"Ask For Secure Token Auth Bypass","description":"If true, bypasses the secure token authorization dialog. This dialog only appears on APFS volumes.","helpText":null,"infoUrls":[],"categoryId":"ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","categoryName":"Mobile Accounts","options":[{"id":"com.apple.mcx_cachedaccounts.askforsecuretokenauthbypass_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_cachedaccounts.askforsecuretokenauthbypass_true","displayName":"True","description":null,"helpText":null}]},"5478427bec1304c1":{"id":"com.apple.universalaccess_voiceoveronoffkey","displayName":"Voice Over On Off Key","description":"If true, enables Voice Over.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_voiceoveronoffkey_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_voiceoveronoffkey_true","displayName":"True","description":null,"helpText":null}]},"5434a674f643191e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_recommended","displayName":"Configure auto discard sleeping tabs (users can override)","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab needs to be reloaded.\n\nIf the \"SleepingTabsEnabled\" policy is enabled, then this feature is enabled by default.\n\nIf the \"SleepingTabsEnabled\" is disabled, then this feature is disabled by default and can't be enabled.\n\nIf enabled, idle background tabs will be discarded after 1.5 days.\n\nIf disabled, idle background tab won't be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"540f8b83884572c5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes","displayName":"Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode","description":"From Microsoft Edge version 96, navigations that switch between Internet Explorer mode and Microsoft Edge include form data.\n\nIf you enable this policy, you specify which data types are included in navigations between Microsoft Edge and Internet Explorer mode.\n\nIf you disable or don't configure this policy, Microsoft Edge uses the new behavior of including form data in navigations that change modes.\n\nTo learn more, see https://go.microsoft.com/fwlink/?linkid=2174004.\n\nPolicy options mapping:\n\n* IncludeNone (0) = Do not send form data or headers\n\n* IncludeFormDataOnly (1) = Send form data only\n\n* IncludeHeadersOnly (2) = Send additional headers only\n\n* IncludeFormDataAndHeaders (3) = Send form data and additional headers\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includenone","displayName":"Do not send form data or headers","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includeformdataonly","displayName":"Send form data only","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includeheadersonly","displayName":"Send additional headers only","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includeformdataandheaders","displayName":"Send form data and additional headers","description":null,"helpText":null}]},"54895542d7479dbd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogoenabled","displayName":"Hide the company logo on the Microsoft Edge new tab page","description":"By default, the company logo is shown on the new tab page if the company logo is configured in Admin Portal.\n\nIf you enable or don't configure this policy, there's no change on the Microsoft Edge new tab page and the company logo is there for users.\n\nIf you disable this policy, the company logo doesn't appear on Microsoft Edge new tab page.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogoenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogoenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"54318a5cba2e7174":{"id":"device_vendor_msft_email_usernameattributeaad","displayName":"Username attribute from AAD","description":"The attribute Intune gets from Azure AD to dynamically generate the username that will be used by this profile e.g. MyName@contoso.com (UPN) or MyName (username).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/email2-csp"],"categoryId":"48cb2bee-74be-4165-bc19-89c5b1c50c00","categoryName":"Email","options":null},"542ef948a60bf6bd":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobsperuser","displayName":"Limit the maximum number of BITS jobs for each user","description":"This policy setting limits the number of BITS jobs that can be created by a user. By default, BITS limits the total number of jobs that can be created by a user to 60 jobs. You can use this setting to raise or lower the maximum number of BITS jobs a user can create.\r\n\r\n If you enable this policy setting, BITS will limit the maximum number of BITS jobs a user can create to the specified number.\r\n\r\n If you disable or do not configure this policy setting, BITS will use the default user BITS job limit of 300 jobs.\r\n\r\n Note: This limit must be lower than the setting specified in the \"Maximum number of BITS jobs for this computer\" policy setting, or 300 if the \"Maximum number of BITS jobs for this computer\" policy setting is not configured. BITS jobs created by services and the local administrator account do not count toward this limit.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxjobsperuser"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobsperuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobsperuser_1","displayName":"Enabled","description":null,"helpText":null}]},"54fb175cf8450f53":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_registry","displayName":"Configure registry policy processing","description":"This policy setting determines when registry policies are updated.\r\n\r\nThis policy setting affects all policies in the Administrative Templates folder and any other policies that store values in the registry. It overrides customized settings that the program implementing a registry policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-registry"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_registry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_registry_1","displayName":"Enabled","description":null,"helpText":null}]},"541df009443e0957":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_cse_nobackground11","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_cse_nobackground11_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_cse_nobackground11_1","displayName":"True","description":null,"helpText":null}]},"549fd431554627df":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disablescheduledsignatureupdateonbattery","displayName":"Allow security intelligence updates when running on battery power","description":"This policy setting allows you to configure security intelligence updates when the computer is running on battery power.\r\n\r\n If you enable or do not configure this setting, security intelligence updates will occur as usual regardless of power state.\r\n\r\n If you disable this setting, security intelligence updates will be turned off while the computer is running on battery power.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-disablescheduledsignatureupdateonbattery"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disablescheduledsignatureupdateonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disablescheduledsignatureupdateonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},"549aaf68a8c67640":{"id":"device_vendor_msft_policy_config_admx_pushtoinstall_disablepushtoinstall","displayName":"Turn off Push To Install service","description":"If you enable this setting, users will not be able to push Apps to this device from the Microsoft Store running on other devices or the web.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pushtoinstall#admx-pushtoinstall-disablepushtoinstall"],"categoryId":"05305a87-0b19-41bb-bf1e-0bd92bfcdc16","categoryName":"Push To Install","options":[{"id":"device_vendor_msft_policy_config_admx_pushtoinstall_disablepushtoinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pushtoinstall_disablepushtoinstall_1","displayName":"Enabled","description":null,"helpText":null}]},"5425e08f5368140a":{"id":"device_vendor_msft_policy_config_admx_rpc_rpcstateinformation","displayName":"Maintain RPC Troubleshooting State Information","description":"This policy setting determines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintains. Basic state information, which consists only of the most commonly needed state data, is required for troubleshooting RPC problems.\r\n\r\nIf you disable this policy setting, the RPC runtime defaults to \"Auto2\" level.\r\n\r\nIf you do not configure this policy setting, the RPC defaults to \"Auto2\" level. \r\n\r\nIf you enable this policy setting, you can use the drop-down box to determine which systems maintain RPC state information.\r\n\r\n-- \"None\" indicates that the system does not maintain any RPC state information. Note: Because the basic state information required for troubleshooting has a negligible effect on performance and uses only about 4K of memory, this setting is not recommended for most installations.\r\n\r\n-- \"Auto1\" directs RPC to maintain basic state information only if the computer has at least 64 MB of memory.\r\n\r\n-- \"Auto2\" directs RPC to maintain basic state information only if the computer has at least 128 MB of memory and is running Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 Datacenter Server. \r\n\r\n-- \"Server\" directs RPC to maintain basic state information on the computer, regardless of its capacity.\r\n\r\n-- \"Full\" directs RPC to maintain complete RPC state information on the system, regardless of its capacity. Because this level can degrade performance, it is recommended for use only while you are investigating an RPC problem.\r\n\r\nNote: To retrieve the RPC state information from a system that maintains it, you must use a debugging tool.\r\n\r\nNote: This policy setting will not be applied until the system is rebooted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-rpc#admx-rpc-rpcstateinformation"],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":[{"id":"device_vendor_msft_policy_config_admx_rpc_rpcstateinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_rpc_rpcstateinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"5445bae20c38487a":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_printer","displayName":"Do not allow client printer redirection","description":"This policy setting allows you to specify whether to prevent the mapping of client printers in Remote Desktop Services sessions.\r\n\r\nYou can use this policy setting to prevent users from redirecting print jobs from the remote computer to a printer attached to their local (client) computer. By default, Remote Desktop Services allows this client printer mapping.\r\n\r\nIf you enable this policy setting, users cannot redirect print jobs from the remote computer to a local client printer in Remote Desktop Services sessions.\r\n\r\nIf you disable this policy setting, users can redirect print jobs with client printer mapping.\r\n\r\nIf you do not configure this policy setting, client printer mapping is not specified at the Group Policy level.\r\n\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-printer"],"categoryId":"f1455024-7de9-448f-8d8f-a42db2af0a35","categoryName":"Printer Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_printer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_printer_1","displayName":"Enabled","description":null,"helpText":null}]},"54254e2c11dbbe3a":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_ts_remotecontrol_levels","displayName":"Options:","description":null,"helpText":"","infoUrls":[],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_ts_remotecontrol_levels_0","displayName":"No remote control allowed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_ts_remotecontrol_levels_1","displayName":"Full Control with user's permission","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_ts_remotecontrol_levels_2","displayName":"Full Control without user's permission","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_ts_remotecontrol_levels_3","displayName":"View Session with user's permission","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_ts_remotecontrol_levels_4","displayName":"View Session without user's permission","description":null,"helpText":null}]},"548789691f9e8d17":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_usb_redirection_disable","displayName":"Allow RDP redirection of other supported RemoteFX USB devices from this computer","description":"This policy setting allows you to permit RDP redirection of other supported RemoteFX USB devices from this computer. Redirected RemoteFX USB devices will not be available for local usage on this computer.\r\n\r\nIf you enable this policy setting, you can choose to give the ability to redirect other supported RemoteFX USB devices over RDP to all users or only to users who are in the Administrators group on the computer.\r\n\r\nIf you disable or do not configure this policy setting, other supported RemoteFX USB devices are not available for RDP redirection by using any user account.\r\n\r\nFor this change to take effect, you must restart Windows.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-usb-redirection-disable"],"categoryId":"e6b767af-2ce1-4c91-9360-15abbb0bf3bc","categoryName":"Remote FX USB Device Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_usb_redirection_disable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_usb_redirection_disable_1","displayName":"Enabled","description":null,"helpText":null}]},"543a9779d74a8755":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-localmachinelockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"5458589d130a4520":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditkernelobject","displayName":"Object Access Audit Kernel Object","description":"This policy setting allows you to audit attempts to access the kernel, which include mutexes and semaphores. Only kernel objects with a matching system access control list (SACL) generate security audit events. Note: The Audit: Audit the access of global system objects policy setting controls the default SACL of kernel objects.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditkernelobject"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditkernelobject_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditkernelobject_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditkernelobject_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditkernelobject_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"544827aa6f645875":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode","displayName":"Print PostScript Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode_1","displayName":"Type42","description":null,"helpText":null}]},"548d36cb6fe21bc9":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled","displayName":"Enable TLS 1.3 Early Data","description":"TLS 1.3 Early Data is an extension to TLS 1.3 to send an HTTP request simultaneously with the TLS handshake.\r\n\r\nIf this policy is not configured, Google Chrome will follow the default rollout process for TLS 1.3 Early Data.\r\n\r\nIf it is enabled, Google Chrome will enable TLS 1.3 Early Data.\r\n\r\nIf it is disabled, Google Chrome will not enable TLS 1.3 Early Data.\r\n\r\nWhen the feature is enabled, Google Chrome may or may not use TLS 1.3 Early Data depending on server support.\r\n\r\nTLS 1.3 Early Data is an established protocol. Existing TLS servers, middleboxes, and security software are expected to either handle or reject TLS 1.3 Early Data without dropping the connection.\r\n\r\nHowever, devices that do not correctly implement TLS may malfunction and disconnect when TLS 1.3 Early Data is in use. If this occurs, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure to control the feature and will be removed afterwards. The policy may be enabled to allow you to test for issues and disabled while issues are being resolved.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"548c0b8acd65eb1e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication","description":"A list of certificates that are not trusted or distrusted in Google Chrome\r\nbut can be used as hints for path-building. Certificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"54d999cd1e68bf92":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings","displayName":"Settings for Tab Organizer","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_1","displayName":"Enabled","description":null,"helpText":null}]},"54780b81c911123d":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708","displayName":"Enable dragging of content from different domains within a window","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3","displayName":"Disable","description":null,"helpText":null}]},"5468081ff091dc9e":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"5459b1362a5baac1":{"id":"device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter","displayName":"Enable Auth Rate Limiter","description":"This policy controls whether the SMB server will enable or disable the authentication rate limiter. If you disable this policy setting, the authentication rate limiter will not be enabled. If you do not configure this policy setting, the authentication rate limiter may still be working depending on the delay settings (the recommended delay value is 2000ms).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#enableauthratelimiter"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"5406769cb6a49c57":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_webusballowdevicesforurls","displayName":"Grant access to specific sites to connect to specific USB devices (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"54e62237a568d924":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_webhidaskforurlsdesc","displayName":"Allow the WebHID API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"54f3cf8b4e89fdb1":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled","displayName":"Allow intranet zone file URL links from Microsoft Edge to open in Windows File Explorer","description":"This setting allows file URL links to intranet zone files from intranet zone HTTPS websites to open Windows File Explorer for that file or directory.\r\n\r\nIf you enable this policy, intranet zone file URL links originating from intranet zone HTTPS pages will open Windows File Explorer to the parent directory of the file and select the file. Intranet zone directory URL links originating from intranet zone HTTPS pages will open Windows File Explorer to the directory with no items in the directory selected.\r\n\r\nIf you disable or don't configure this policy, file URL links will not open.\r\n\r\nMicrosoft Edge uses the definition of intranet zone as configured for Internet Explorer. Note that https://localhost/ is specifically blocked as an exception of allowed intranet zone host, while loopback addresses (127.0.0.*, [::1]) are considered internet zone by default.\r\n\r\nUsers may opt out of prompts on a per-protocol/per-site basis unless the 'ExternalProtocolDialogShowAlwaysOpenCheckbox' (Show an \"Always open\" checkbox in external protocol dialog) policy is disabled.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"54f8eedca0e46166":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled","displayName":"Enable Follow service in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 126.\r\n\r\nLets Microsoft Edge browser enable Follow service and apply it to users.\r\n\r\nUsers can use the Follow feature for an influencer, site, or topic in Microsoft Edge..\r\n\r\nIf you enable or don't configure this policy, Follow in Microsoft Edge can be applied.\r\n\r\nIf you disable this policy, Microsoft Edge will not communicate with Follow service to provide the follow feature.\r\n\r\nThis policy is obsolete after version 126.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"540f1404e2674f59":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates","displayName":"Enable Automatic Updates","description":"This policy setting controls whether the Office automatic updates are enabled or disabled for all Office products installed via Click-to-Run. This policy has no effect on Office products installed via Windows Installer. \r\n\r\nIf you enable or do not configure this policy setting, Office periodically checks for updates. When updates are detected, Office downloads and applies them in the background. \r\n\r\nIf you disable this policy setting, Office won't check for updates.","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"54b1b11bd4bb301c":{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum","displayName":"Protocols to allow for incoming RPC connections:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum_3","displayName":"RPC over named pipes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum_5","displayName":"RPC over TCP","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum_7","displayName":"RPC over named pipes and TCP","description":null,"helpText":null}]},"541f56b712ed7e71":{"id":"device_vendor_msft_policy_config_remoteshell_allowremoteshellaccess","displayName":"Allow Remote Shell Access","description":"This policy setting configures access to remote shells.\n\nIf you enable or do not configure this policy setting, new remote shell connections are accepted by the server.\n\nIf you set this policy to ‘disabled’, new remote shell connections are rejected by the server.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-allowremoteshellaccess"],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":[{"id":"device_vendor_msft_policy_config_remoteshell_allowremoteshellaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_allowremoteshellaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"546e14914fbf3579":{"id":"device_vendor_msft_policy_config_userrights_createpermanentsharedobjects","displayName":"Create Permanent Shared Objects","description":"This user right determines which accounts can be used by processes to create a directory object using the object manager. This user right is used internally by the operating system and is useful to kernel-mode components that extend the object namespace. Because components that are running in kernel mode already have this user right assigned to them, it is not necessary to specifically assign it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createpermanentsharedobjects"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"5465f7336e13f652":{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_telemetryreportingfrequency","displayName":"[Deprecated] Telemetry Reporting Frequency","description":"Return or set Windows Defender Advanced Threat Protection telemetry reporting frequency. Allowed values are: 1 - Normal, 2 - Expedite. This setting is deprecated and no longer has impact on devices.","helpText":null,"infoUrls":[],"categoryId":"577d5951-fc56-4906-90bc-2c508c6611ad","categoryName":"Microsoft Defender for Endpoint","options":[{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_telemetryreportingfrequency_1","displayName":"Normal","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_telemetryreportingfrequency_2","displayName":"Expedite","description":null,"helpText":null}]},"548f3f07c5288311":{"id":"enrollment_autopilot_dpp_enablecue","displayName":"Automatically launch the Company Portal app and display status for remaining configuration","description":"If the Company Portal app is not configured to install in system context, assigned to the Device group, and selected in the list of Apps, it will not launch automatically and display onboarding status.","helpText":"","infoUrls":[],"categoryId":"cb87b1bb-252b-4515-bb27-f8d0e5ff57b6","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_enablecue_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_enablecue_1","displayName":"Yes","description":null,"helpText":null}]},"54d9b0a35d518a51":{"id":"linux_mdatp_managed_antivirusengine_scanhistorymaximumitems","displayName":"Scan history size","description":"Specify the maximum number of entries to keep in the scan history. Entries include all on-demand scans performed in the past and all antivirus detections.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#maximum-number-of-items-in-the-antivirus-scan-history"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"541a7ea25636bdab":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_datecolon32","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"54fd6696e6d7c21c":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_descriptioncolon77","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"540258ee79be98ee":{"id":"user_vendor_msft_policy_config_admx_explorer_preventitemcreationinusersfilesfolder","displayName":"Prevent users from adding files to the root of their Users Files folder. (User)","description":"This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer.\r\n\r\nIf you enable this policy setting, users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.\r\n\r\n\r\nNote: Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-preventitemcreationinusersfilesfolder"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_explorer_preventitemcreationinusersfilesfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_explorer_preventitemcreationinusersfilesfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"54039fbf4e7d9fff":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_hidecontentviewmodesnippets","displayName":"Turn off the display of snippets in Content view mode (User)","description":"This policy setting allows you to turn off the display of snippets in Content view mode.\r\n\r\nIf you enable this policy setting, File Explorer will not display snippets in Content view mode.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer shows snippets in Content view mode by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-hidecontentviewmodesnippets"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_hidecontentviewmodesnippets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_hidecontentviewmodesnippets_1","displayName":"Enabled","description":null,"helpText":null}]},"549c7327b5693cc2":{"id":"user_vendor_msft_policy_config_browser_enterprisemodesitelist","displayName":"Enterprise Mode Site List (User)","description":"This setting lets you configure whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy websites.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enterprisemodesitelist"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"54515f27cc38502a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlfhomeeditingfind","displayName":"Ctrl+F (Home | Editing | Find & Select | Find) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlfhomeeditingfind_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlfhomeeditingfind_1","displayName":"True","description":null,"helpText":null}]},"54b643b7156162a7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"54e3f97df1dead33":{"id":"user_vendor_msft_policy_config_internetexplorer_addsearchprovider","displayName":"Add a specific list of search providers to the user's list of search providers (User)","description":"This policy setting allows you to add a specific list of search providers to the user's default list of search providers. Normally, search providers can be added from third-party toolbars or in Setup. The user can also add a search provider from the provider's website.\n\nIf you enable this policy setting, the user can add and remove search providers, but only from the set of search providers specified in the list of policy keys for search providers (found under [HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\SearchScopes]). Note: This list can be created from a custom administrative template file. For information about creating this custom administrative template file, see the Internet Explorer documentation on search providers.\n\nIf you disable or do not configure this policy setting, the user can configure their list of search providers unless another policy setting restricts such configuration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-addsearchprovider"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_addsearchprovider_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_addsearchprovider_1","displayName":"Enabled","description":null,"helpText":null}]},"54dd9b5c4f9272d8":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"5442bce990e6b7f0":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride","displayName":"Override for the CPU performance tier (User)","description":"This policy allows you to override the value returned by the CPU Performance API (that is, navigator.cpuPerformance).\n\nIf you enable this policy, the value of navigator.cpuPerformance is overridden with the specified value.\n\nIf you don’t configure this policy, the default performance tier calculation is used.\n\nYou can specify a value from 0 through 4.\n\nFor more information, see https://github.com/WICG/cpu-performance.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride_1","displayName":"Enabled","description":null,"helpText":null}]},"545b93c2de987181":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended","displayName":"Print headers and footers (User)","description":"Force 'headers and footers' to be on or off in the printing dialog.\r\n\r\nIf you don't configure this policy, users can decide whether to print headers and footers.\r\n\r\nIf you disable this policy, users can't print headers and footers.\r\n\r\nIf you enable this policy, users always print headers and footers.","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"541b2ca3a336e14b":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes (User)","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when:\r\n- The 'Passwords' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy ClearBrowsingDataOnExit is enabled\r\n\r\nIf you enable this policy, passwords won't be cleared when the browser closes.\r\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"54bbcde361e377bc":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled","displayName":"Enable post-quantum key agreement for TLS (User)","description":"This policy configures whether Microsoft Edge will offer a post-quantum key agreement algorithm in TLS. This lets supporting servers protect user traffic from being decrypted by quantum computers.\r\n\r\nIf you enable this policy, Microsoft Edge will offer a post-quantum key agreement in TLS connections. TLS connections will be protected from quantum computers when communicating with compatible servers.\r\n\r\nIf you disable this policy, Microsoft Edge will not offer a post-quantum key agreement in TLS connections. User traffic will be unprotected from decryption by quantum computers.\r\n\r\nIf you don't configure this policy, Microsoft Edge will follow the default rollout process for offering a post-quantum key agreement.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing TLS servers and networking middleware are expected to ignore the new option and continue selecting previous options.\r\n\r\nHowever, devices that don't implement TLS correctly may malfunction when offered the new option. For example, they might disconnect in response to unrecognized options or the resulting larger messages. These devices are not post-quantum-ready and will interfere with an enterprise's post-quantum transition. If this issue is encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Microsoft Edge. You can enable it to test for issues and you can disable it while you resolve issues.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"54d2ea577162eedb":{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls","displayName":"Allow sites to make requests to local network endpoints. (User)","description":"Specifies a list of URL patterns for which requests initiated from matching origins are exempt from Local Network Access restrictions.\r\n\r\nIf an origin is specified by both this policy and the 'LocalNetworkAccessBlockedForUrls' (Block sites from making requests to local network endpoints.) policy, the blocked list takes precedence.\r\n\r\nFor origins not covered by this policy, the user's personal settings and local network access restrictions will apply.\r\n\r\nFor guidance on valid URL pattern syntax, see:\r\nhttps://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns\r\n\r\nNote: This policy enables controlled exceptions to local network access restrictions. It allows specific public websites to access private IP addresses when necessary for trusted local communication scenarios. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"54f4adccefeb5e95":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled","displayName":"Enable default legacy SameSite cookie behavior setting (obsolete) (User)","description":"Lets you revert all cookies to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\r\n\r\nYou can set the following values for this policy:\r\n\r\n* 1 = Revert to legacy SameSite behavior for cookies on all sites\r\n\r\n* 2 = Use SameSite-by-default behavior for cookies on all sites\r\n\r\nIf you don't set this policy, the default behavior for cookies that don't specify a SameSite attribute will depend on other configuration sources for the SameSite-by-default feature. This feature might be set by a field trial or by enabling the same-site-by-default-cookies flag in edge://flags.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"54c59699eaf15482":{"id":"user_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled","displayName":"Enable support for Windows OS routing table rules when making peer to peer connections via WebRTC (User)","description":"Controls whether WebRTC will respect the Windows OS routing table rules when making peer to peer connections, thus enabling split tunnel VPNs.\r\n\r\nIf you disable this policy or don't configure it, WebRTC will not consider the routing table and may make peer to peer connections over any available network.\r\n\r\nIf you enable this policy, WebRTC will prefer to make peer to peer connections using the indicated network interface for the remote address as indicated in the routing table.\r\n\r\nThis policy is only available on Windows.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"549e62484c5ce4c2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes","displayName":"Office solutions to exclude from Office Telemetry Agent reporting (User)","description":"This policy setting allows you to prevent telemetry data for Office solutions from being reported to Office Telemetry Dashboard.\r\n\r\nIf you enable this policy setting, Office Telemetry Agent does not upload telemetry data for the specified Office solutions to Office Telemetry Dashboard.\r\n\r\nIf you disable or do not configure this policy setting, Office Telemetry Agent uploads telemetry data for all available solution types.","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_1","displayName":"Enabled","description":null,"helpText":null}]},"541ce34dc7ccc4ec":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_markmessagesasreadinreadingwindow","displayName":"Mark messages as read in reading window (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_markmessagesasreadinreadingwindow_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_markmessagesasreadinreadingwindow_1","displayName":"True","description":null,"helpText":null}]},"547c433e76031a57":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscriptsforpublicfolders_v2","displayName":"Do not allow Outlook object model scripts to run for public folders (User)","description":"This policy setting controls whether Outlook executes scripts that are associated with custom forms or folder home pages for public folders.\r\n\r\nIf you enable this policy setting, Outlook cannot execute any scripts associated with public folders, overriding any configuration changes on users' computers. \r\n\r\nIf you disable this policy setting, Outlook will automatically run any scripts associated with custom forms or folder home pages for public folders, overriding any configuration changes on users' computers. \r\n\r\nIf you do not configure this policy setting, Outlook will not run any scripts associated with public folders by default. Users can configure the setting in the Trust Center by selecting the “Allow script in public folders” check box.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscriptsforpublicfolders_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscriptsforpublicfolders_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"5429229a07b510fb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments","displayName":"Set maximum number of trusted documents (User)","description":"This policy setting allows you to specify the maximum number of trust records for trusted documents that can be stored in the registry before the purge task runs. The purge task reduces the number of trusted documents stored in the registry to the value set by the \"Set maximum number of trust records to preserve\" policy setting.\r\n\r\nIf you enable this policy setting, you can specify the maximum number of trusted documents to be stored in the registry before the purge task runs, with an upper limit of 20,000 documents. For performance reasons, we do not recommend setting this policy setting to the upper limit.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 500 is used for the maximum number of trusted documents that can be stored in the registry before the purge task runs.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"54d87ac2e12de761":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork","displayName":"Turn off Trusted Documents on the network (User)","description":"This policy setting allows you to turn off the trusted documents feature for documents opened from the network.\r\n\r\nIf you enable this policy setting, users will always see security notifications for active content such as macros, ActiveX controls, data connections, etc. for documents opened from the network.\r\n\r\nIf you disable or do not configure this policy setting, the trusted documents feature allows users to always allow active content in documents such as macros, ActiveX controls, data connections, etc. so that users are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"54c6c581e28819d8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"5472758a2dba2ead":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm","displayName":"Specify CNG hash algorithm (User)","description":"This policy setting allows you to specify the hash algorithm used.\r\n\r\nIf you enable this policy setting, the hashing algorithm selected will be used by CNG.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG hash algorithm will be used.","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycnghashalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"54c9f7674188b54f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_l_descriptioncolon26","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"542feef3aee17768":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09_l_allowsubfolders43","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09_l_allowsubfolders43_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09_l_allowsubfolders43_1","displayName":"True","description":null,"helpText":null}]},"5449ab0e20c4c879":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_visualselection_l_visualselection5","displayName":"Cursor visual selection (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_visualselection_l_visualselection5_0","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_visualselection_l_visualselection5_1","displayName":"Continuous","description":null,"helpText":null}]},"54fcb14726078f6c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas","displayName":"Default file format (User)","description":"This policy setting determines the default file format for saving files in Word.\r\n\r\nIf you enable this policy setting, you can set the default file format from among the following options: \r\n\r\n- Word Document (*.docx): This option is the default configuration in Word.\r\n- Single Files Web Page (*.mht)\r\n- Web Page (*.htm; *.html)\r\n- Web Page, Filtered (*.htm, *.html)\r\n- Rich Text Format (*.rtf)\r\n- Plain Text (*.txt)\r\n- Word 6.0/95 (*.doc)\r\n- Word 6.0/95 - Chinese (Simplified) (*.doc)\r\n- Word 6.0/95 - Chinese (Traditional) (*.doc)\r\n- Word 6.0/95 - Japanese (*.doc)\r\n- Word 6.0/95 - Korean (*.doc)\r\n- Word 97-2002 and 6.0/95 - RTF\r\n- Word 5.1 for Macintosh (*.mcw)\r\n- Word 5.0 for Macintosh (*.mcw)\r\n- Word 2.x for Windows (*.doc)\r\n- Works 4.0 for Windows (*.wps)\r\n- WordPerfect 5.x for Windows (*.doc)\r\n- WordPerfect 5.1 for DOS (*.doc)\r\n- Word Macro-Enabled Document (*.docm)\r\n- Word Template (*.dotx)\r\n- Word Macro-Enabled Template (*.dotm)\r\n- Word 97 - 2003 Document (*.doc)\r\n- Word 97 - 2003 Template (*.dot)\r\n- Word XML Document (*.xml)\r\n- Strict Open XML Document (*.docx)\r\n- OpenDocument Text (*.odt)\r\n\r\nUsers can choose to save presentations or documents in a different file format than the default.\r\n\r\nIf you disable or do not configure this policy setting, Word saves new files in the Office Open XML format: Word files have a .docx extension. For users who run recent versions of Word, Microsoft offers the Microsoft Office Compatibility Pack, which enables them to open and save Office Open XML files. If some users in your organization cannot install the Compatibility Pack, or are running versions of Word older than Microsoft Office 2000 with Service Pack 3, they might not be able to access Office Open XML files.\r\n\r\nThis policy setting is often set in combination with the \"Save As Open XML in Compatibility Mode\" policy setting.","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_1","displayName":"Enabled","description":null,"helpText":null}]},"5433dd496f30bd20":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_warnbeforeprintingsavingorsendingafilethatcontainstrackedcha","displayName":"Warn before printing, saving or sending a file that contains tracked changes or comments (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_warnbeforeprintingsavingorsendingafilethatcontainstrackedcha_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_warnbeforeprintingsavingorsendingafilethatcontainstrackedcha_1","displayName":"Enabled","description":null,"helpText":null}]},"54626781f901b336":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_pathcolon32","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/55.json b/public/intune-definitions/55.json new file mode 100644 index 000000000000..3d2e752ed043 --- /dev/null +++ b/public/intune-definitions/55.json @@ -0,0 +1 @@ +{"555e4204a38115b9":{"id":"app_privacy_permissiondefaults_generickey_keytobereplaced","displayName":"Permission Defaults","description":"The dictionary of app privacy permission defaults. Each key in the dictionary is an app identifier. The dictionary values represent the permission defaults that the device applies for each matching app.\n\nIn iOS, the app identifier is a bundle ID, for example, \"com.example.app\".\n\nIn macOS, the app identifier is a composed identifier. The format of the composed identifier is either \"Bundle-ID\", \"Bundle-ID (Team-ID)\", or \"Bundle-ID {Designated-Requirement}\". \"Bundle-ID\" is the bundle identifier string of the app. \"Team-ID\" is the team identifier from the app's code signature. \"Designated-Requirement\" is the designated requirement string from the code signature of the app. For example, \"com.example.app\" for the bundle ID format, \"com.example.app (ABCD1234)\" for the team ID format, or \"com.example.app {anchor apple generic}\" for the designated requirement format. The device only applies defaults for an app if its code signature matches the composed identifier.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"55a0be763fd03178":{"id":"com.apple.dock_static-others_item_tile-type","displayName":"Tile Type","description":"The type of tile.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_static-others_item_tile-type_0","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_static-others_item_tile-type_1","displayName":"Directory","description":null,"helpText":null},{"id":"com.apple.dock_static-others_item_tile-type_2","displayName":"URL","description":null,"helpText":null}]},"55676a3484aa7889":{"id":"com.apple.managedclient.preferences_edgemanagementextensionsfeedbackenabled","displayName":"Microsoft Edge management extensions feedback enabled","description":"This setting controls whether Microsoft Edge sends data about blocked extensions to the Microsoft Edge management service.\n\nThe 'EdgeManagementEnabled' policy must also be enabled for this setting to take effect.\n\nIf you enable this policy, Microsoft Edge will send data to the Microsoft Edge service when a user tries to install a blocked extension.\n\nIf you disable or don't configure this policy, Microsoft Edge won't send any data to the Microsoft Edge service about blocked extensions.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgemanagementextensionsfeedbackenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgemanagementextensionsfeedbackenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgemanagementextensionsfeedbackenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"551240fa69f51467":{"id":"com.apple.managedclient.preferences_relatedmatchescloudserviceenabled","displayName":"Configure Related Matches in Find on Page (Deprecated)","description":"Specifies how the user receives related matches in Find on Page, which provides spellcheck, synonyms, and Q&A results in Microsoft Edge.\n\nIf you enable or don't configure this policy, users can receive related matches in Find on Page on all sites. The results are processed in a cloud service.\n\nIf you disable this policy, users can receive related matches in Find on Page on limited sites. The results are processed on the user's device.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#relatedmatchescloudserviceenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_relatedmatchescloudserviceenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_relatedmatchescloudserviceenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"558af17e33efbee3":{"id":"com.apple.managedclient.preferences_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC","description":"Restricts the UDP port range used by WebRTC to a specified port interval (endpoints included).\n\nBy configuring this policy, you specify the range of local UDP ports that WebRTC can use.\n\nIf you don't configure this policy, or if you set it to an empty string or invalid port range, WebRTC can use any available local UDP port.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webrtcudpportrange"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"55fb29654154d678":{"id":"com.apple.mcx_sleepdisabled","displayName":"Sleep Disabled","description":"If true, disables sleep.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_sleepdisabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_sleepdisabled_true","displayName":"True","description":null,"helpText":null}]},"55e274477aa648ff":{"id":"com.apple.mcxmenuextras_user.menu","displayName":"User","description":"If true, enables the User menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_user.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_user.menu_true","displayName":"True","description":null,"helpText":null}]},"55cf7465e72bddec":{"id":"com.apple.notificationsettings_notificationsettings_item_notificationsenabled","displayName":"Notifications Enabled","description":"If true, enables notifications for this app. Available in iOS 9.3 and later and macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":[{"id":"com.apple.notificationsettings_notificationsettings_item_notificationsenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_notificationsenabled_true","displayName":"True","description":null,"helpText":null}]},"55a0e16dcf0963bd":{"id":"com.apple.proxy.http.global_proxycaptiveloginallowed","displayName":"Proxy Captive Login Allowed","description":"If true, allows the device to bypass the proxy server to display the login page for captive networks.","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":[{"id":"com.apple.proxy.http.global_proxycaptiveloginallowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.proxy.http.global_proxycaptiveloginallowed_true","displayName":"True","description":null,"helpText":null}]},"55e3afe63d257015":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifiertype_0","displayName":"bundleID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"55118a33943fd2e2":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"551400f65588dec4":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescanparameters","displayName":"Configure local setting override for the scan type to use for a scheduled scan","description":"This policy setting configures a local override for the configuration of the scan type to use during a scheduled scan. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-localsettingoverridescanparameters"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescanparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescanparameters_1","displayName":"Enabled","description":null,"helpText":null}]},"5596570b7a88ac21":{"id":"device_vendor_msft_policy_config_admx_printing2_registerspoolerremoterpcendpoint","displayName":"Allow Print Spooler to accept client connections","description":"This policy controls whether the print spooler will accept client connections.\r\n\r\nWhen the policy is unconfigured or enabled, the spooler will always accept client connections.\r\n\r\nWhen the policy is disabled, the spooler will not accept client connections nor allow users to share printers. All printers currently shared will continue to be shared.\r\n\r\nThe spooler must be restarted for changes to this policy to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-registerspoolerremoterpcendpoint"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_registerspoolerremoterpcendpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_registerspoolerremoterpcendpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"558d74efc77e4994":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_join_session_directory","displayName":"Join RD Connection Broker","description":"This policy setting allows you to specify whether the RD Session Host server should join a farm in RD Connection Broker. RD Connection Broker tracks user sessions and allows a user to reconnect to their existing session in a load-balanced RD Session Host server farm. To participate in RD Connection Broker, the Remote Desktop Session Host role service must be installed on the server.\r\n\r\nIf the policy setting is enabled, the RD Session Host server joins the farm that is specified in the RD Connection Broker farm name policy setting. The farm exists on the RD Connection Broker server that is specified in the Configure RD Connection Broker server name policy setting.\r\n\r\nIf you disable this policy setting, the server does not join a farm in RD Connection Broker, and user session tracking is not performed. If the policy setting is disabled, you cannot use either the Remote Desktop Session Host Configuration tool or the Remote Desktop Services WMI Provider to join the server to RD Connection Broker.\r\n\r\nIf the policy setting is not configured, the policy setting is not specified at the Group Policy level. \r\n\r\nNotes:\r\n\r\n 1. If you enable this policy setting, you must also enable the Configure RD Connection Broker farm name and Configure RD Connection Broker server name policy settings.\r\n\r\n 2. For Windows Server 2008, this policy setting is supported on at least Windows Server 2008 Standard.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-join-session-directory"],"categoryId":"0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","categoryName":"RD Connection Broker","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_join_session_directory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_join_session_directory_1","displayName":"Enabled","description":null,"helpText":null}]},"55c49c4eb0c71be6":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_updateinterval","displayName":"UpdateInterval","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"5595709c7867257e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor","displayName":"Configure the color of the browser's theme","description":"This policy allows admins to configure the color of Google Chrome's theme. The input string should be a valid hex color string matching the format \"#RRGGBB\".\r\n\r\nSetting the policy to a valid hex color causes a theme based on that color to be automatically generated and applied to the browser. Users won't be able to change the theme set by the policy.\r\n\r\nLeaving the policy unset lets users change their browser's theme as preferred.\r\n\r\nExample value: #FFFFFF","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_1","displayName":"Enabled","description":null,"helpText":null}]},"55a1c9d1d3b0f47a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings","displayName":"Dynamic Code Settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings_0","displayName":"Default dynamic code settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings_1","displayName":"Prevent the browser process from creating dynamic code","description":null,"helpText":null}]},"55bb632d7b2a8b60":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist","displayName":"Blocklist for install types of extensions","description":"The blocklist controls which extensions install types are disallowed.\r\n\r\nSetting \"command_line\" will block extension from being loaded from\r\ncommand line.\r\n\r\nExample value:\r\n\r\ncommand_line","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"556acec19d935f43":{"id":"device_vendor_msft_policy_config_defender_scanparameter","displayName":"Scan Parameter","description":"Selects whether to perform a quick scan or full scan.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_scanparameter_1","displayName":"Quick scan","description":"Quick scan","helpText":null},{"id":"device_vendor_msft_policy_config_defender_scanparameter_2","displayName":"Full scan","description":"Full scan","helpText":null}]},"55f4f12d5a4fc1b1":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications","displayName":"Clean Out Notifications","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nThis setting cleans out stale entries created by the Windows Push Notification Platform (WPN) and Windows Notification Facility (WFN) which under some conditions leads to slow sign-ins. Only enable this setting if directed by a Microsoft Support Engineer.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CleanOutNotifications\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"55ca0e9f24dd8649":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter","displayName":"Turn on Cross-Site Scripting Filter","description":"This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.\n\nIf you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.\n\nIf you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenablecrosssitescriptingfilter"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_1","displayName":"Enabled","description":null,"helpText":null}]},"55695e06f9f76fd3":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated","displayName":"User Account Control Only Elevate Executable Files That Are Signed And Validated","description":"User Account Control: Only elevate executable files that are signed and validated This policy setting enforces public key infrastructure (PKI) signature checks for any interactive applications that request elevation of privilege. Enterprise administrators can control which applications are allowed to run by adding certificates to the Trusted Publishers certificate store on local computers. The options are: • Enabled: Enforces the PKI certification path validation for a given executable file before it is permitted to run. • Disabled: (Default) Does not enforce PKI certification path validation before a given executable file is permitted to run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated_0","displayName":"Disabled: Does not enforce validation.","description":"Disabled: Does not enforce validation.","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated_1","displayName":"Enabled: Enforces validation.","description":"Enabled: Enforces validation.","helpText":null}]},"55943fe875baae1d":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls","displayName":"Allow WebUSB on specific sites","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a USB device.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policy - you can't both allow and block a URL.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"558fc53a2550a175":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist_browsingwithcopilotallowlistdesc","displayName":"Browsing with Copilot Allowed URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"550ca2ddb4f0010c":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin","displayName":"Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account","description":"Enable the use of Active Directory accounts for automatic sign in if your users' machines are Domain Joined and your environment is not hybrid joined. If you want users automatically signed in with their Azure Active Directory accounts instead, please Azure AD join (See https://go.microsoft.com/fwlink/?linkid=2118197 for more information) or hybrid join (See https://go.microsoft.com/fwlink/?linkid=2118365 for more information) your environment.\r\n\r\nIf you have configured the 'BrowserSignin' (Browser sign-in settings) policy to disabled, this policy will not take any effect.\r\n\r\nIf you enable this policy and set it to \"Sign in and make domain account non-removable\", Microsoft Edge will automatically sign in users that are on domain joined machines using their Active Directory accounts.\r\n\r\nIf you set this policy to \"Disabled\" or don't set it, Microsoft Edge will not automatically sign in users that are on domain joined machines with Active Directory accounts.\r\n\r\n* 0 = Disabled\r\n\r\n* 1 = Sign in and make domain account non-removable","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_1","displayName":"Enabled","description":null,"helpText":null}]},"55841c1d830bd363":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment","displayName":"Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages","description":"This setting lets you specify a custom adjustment to the width of popup windows generated via window.open from the Internet Explorer mode site.\r\n\r\nIf you configure this policy, Microsoft Edge will add the adjustment value to the width, in pixels. The exact difference depends on the UI configuration of both IE and Edge, but a typical difference is 4.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will treat IE mode window.open the same as Edge mode window.open in window width calculations.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment_1","displayName":"Enabled","description":null,"helpText":null}]},"555a8d76e6757788":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winprojexe34","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winprojexe34_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winprojexe34_1","displayName":"True","description":null,"helpText":null}]},"55d5b8894bbdda74":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_visioexe5","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_visioexe5_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_visioexe5_1","displayName":"True","description":null,"helpText":null}]},"5584109daa097b96":{"id":"device_vendor_msft_policy_config_update_scheduledinstallfirstweek","displayName":"Scheduled Install First Week","description":"Enables the IT admin to schedule the update installation on the first week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every first week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallfirstweek"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallfirstweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallfirstweek_1","displayName":"update is scheduled every first week of the month","description":"update is scheduled every first week of the month","helpText":null}]},"55e1c1a1d6448f83":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_nestedvirtualizationusersettingconfigurable","displayName":"Allow nested virtualization","description":"When set to disabled, this policy disables nested virtualization configuration via .wslconfig (wsl2.nestedVirtualization). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_nestedvirtualizationusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_nestedvirtualizationusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},"55f34dd6faa169dc":{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_path","displayName":"Path","description":"Path to exclude, wildcards are supported","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"558bb5770b1aa2eb":{"id":"passcode_customregex_regex","displayName":"Regex","description":"A regular expression string to match against the password to determine whether it complies with a policy. The regular expression uses the ICU syntax. The string can't exceed 2048 characters in length.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"55642b137ad87473":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_resultantsetofpolicysnapin","displayName":"Resultant Set of Policy snap-in (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-resultantsetofpolicysnapin"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_resultantsetofpolicysnapin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_resultantsetofpolicysnapin_1","displayName":"Enabled","description":null,"helpText":null}]},"55ada6e8ba08ccfa":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_defaultlibrarieslocation","displayName":"Default Libraries definition location (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"55bb1083f6144a86":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_donotuseproxylocal","displayName":"Do not use proxy server for addresses beginning with (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"5567479c34e10af4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled","displayName":"Allow using the deprecated U2F Security Key API (User)","description":"If set to Enabled, the deprecated U2F Security Key API can be used and the deprecation reminder prompt shown for U2F API requests is suppressed.\r\n\r\nIf the policy is set to Disabled or left unset, the default behavior will apply.\r\n\r\nThe U2F Security Key API is deprecated and it will be disabled by default in Chrome 98.\r\n\r\nThis is a temporary opt-out mechanism. The U2F API will be removed from Chrome in Chrome 104, at which point this policy will cease to be supported.\r\n\r\nFor more information about the deprecation of the U2F Security Key API, please refer to https://groups.google.com/a/chromium.org/g/blink-dev/c/xHC3AtU_65A.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"552b4ce2cc713728":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_datecolon78","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"5572af6a4b3ccbf9":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"5533030f78c26c49":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"552bbfd65d31da22":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls_localfontsallowedforurlsdesc","displayName":"Allow Local Fonts permission on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"55ee7ab578e3e9a1":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet","displayName":"Enhanced Security Mode configuration for Intranet zone sites (User)","description":"Microsoft Edge will apply Enhanced Security Mode on Intranet zone sites by default. This may lead to Intranet zone sites acting in an unexpected manner.\r\n\r\nIf you enable this policy, Microsoft Edge won't apply Enhanced Security Mode on Intranet zone sites.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will apply Enhanced Security Mode on Intranet zone sites.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_1","displayName":"Enabled","description":null,"helpText":null}]},"55aa44ecdca5be0e":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_edgemanagementenrollmenttoken","displayName":"Microsoft Edge management enrollment token (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":null},"55bce9d267208a02":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (User)","description":"This policy provides a way to override the list of sets Microsoft Edge uses for Related Website Sets\r\n\r\nEach set in the browser's list of Related Website Sets must meet the requirements of a Related Website Set. A Related Website Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all its ccTLD variants. See https://github.com/WICG/first-party-sets for more information on how Microsoft Edge uses Related Website Sets.\r\n\r\n\r\nAll sites in a Related Website Set must be a registrable domain served over HTTPS. Each site in a Related Website Set must also be unique, which means a site can't be listed more than once in a Related Website Set.\r\n\r\nWhen this policy is given an empty dictionary, Microsoft Edge uses the public list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the replacements list, if a site is also present on a Related Website Set in the browser's list, then that site will be removed from the browser's Related Website Set. After this, the policy's Related Website Set will be added to the Microsoft Edge's list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the additions list, if a site is also present on a Related Website Set in Microsoft Edge's list, then the browser's Related Website Set will be updated so that the new Related Website Set can be added to the browser's list. After the browser's list has been updated, the policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nThe browser's list of Related Website Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site can't be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) aren't supported as a policy value, or as a value within any Related Website Set in these lists.\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"additions\": [{\"associatedSites\": [\"https://associate2.test\"], \"ccTLDs\": {\"https://associate2.test\": [\"https://associate2.com\"]}, \"primary\": \"https://primary2.test\", \"serviceSites\": [\"https://associate2-content.test\"]}], \"replacements\": [{\"associatedSites\": [\"https://associate1.test\"], \"ccTLDs\": {\"https://associate1.test\": [\"https://associate1.co.uk\"]}, \"primary\": \"https://primary1.test\", \"serviceSites\": [\"https://associate1-content.test\"]}]}","helpText":"","infoUrls":[],"categoryId":"6d529e48-5477-4ceb-8ff7-c6e959a0e24f","categoryName":"Related Website Sets Settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},"554c779367d509f0":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_spellchecklanguageblocklistdesc","displayName":"Force disable spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"552662b7e7b10176":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors. (User)","description":"This policy controls a security feature in TLS 1.3 that protects connections against downgrade attacks. It is backwards-compatible and will not affect connections to compliant TLS 1.2 servers or proxies. However, older versions of some TLS-intercepting proxies have an implementation flaw which causes them to be incompatible.\r\n\r\nIf you enable this policy or don't set it, Microsoft Edge will enable these security protections for all connections.\r\n\r\nIf you disable this policy, Microsoft Edge will disable these security protections for connections authenticated with locally-installed CA certificates. These protections are always enabled for connections authenticated with publicly-trusted CA certificates.\r\n\r\nThis policy may be used to test for any affected proxies and upgrade them. Affected proxies are expected to fail connections with an error code of ERR_TLS13_DOWNGRADE_DETECTED. A later version of Microsoft Edge will enable this option by default.\r\n\r\nAfter it is enabled by default, administrators who need more time to upgrade affected proxies may use this policy to temporarily disable this security feature. This policy will be removed after version 85.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"55f213b0664d0378":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended","displayName":"Block Sleeping Tabs on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are not allowed to be put to sleep by Sleeping Tabs.\r\n\r\nIf the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is disabled, this list is not used and no sites will be put to sleep automatically.\r\n\r\nIf you don't configure this policy, all sites will be eligible to be put to sleep unless the user's personal configuration blocks them.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"55f0ac970100ea96":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastserviceserverurl1","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"5512b8b9772ad17f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernnorway","displayName":"Sami, Northern (Norway) (User)","description":"Enables the editing language \"Sami, Northern (Norway)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernnorway_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernnorway_1","displayName":"Enabled","description":null,"helpText":null}]},"553a744760fb5aed":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishunitedstates","displayName":"Spanish (United States) (User)","description":"Enables the editing language Spanish (United States)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishunitedstates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishunitedstates_1","displayName":"Enabled","description":null,"helpText":null}]},"550ffcb1bbb6a613":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc14","displayName":"Unsafe Location #14 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"552b07a2c52d8b80":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontname_l_font","displayName":"Font: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":null},"55c9535849af6026":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherupdatefrequency_l_weatherupdatefrequencyintervalspinid","displayName":"Update frequency (in minutes): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":null},"55f7cbda409ca8ac":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings_v2_l_minimumkeysizeinbits","displayName":"Minimum key size (in bits): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":null},"55a6f0375b8cc220":{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableadminnotifications","displayName":"Disable Outlook tenant admin notifications (User)","description":"This policy setting determines if tenant admins can receive support notifications in Outlook.\r\n\r\nDefault (0): Tenant admins who are signed in will receive status updates about potential issues and fixes that are impacting their tenant.\r\n\r\nIf you enable this setting, tenant admins who are signed in won't receive status updates about potential issues and fixes that are impacting their tenant.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableadminnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableadminnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"552f5dfcd629427f":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2_l_selectlevel","displayName":"Select level: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2_l_selectlevel_4294967295","displayName":"No Protection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2_l_selectlevel_6","displayName":"Low (Default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2_l_selectlevel_3","displayName":"High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2_l_selectlevel_2147483648","displayName":"Trusted Lists Only","description":null,"helpText":null}]},"5592c5ae2bf5e1fb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"55c1d118a220fa0d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear","displayName":"Fiscal year starts in (User)","description":"Specifies the month that begins the fiscal year.\r\n\r\nIf you enable this setting, the fiscal year will start on the month you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_1","displayName":"Enabled","description":null,"helpText":null}]},"55221f0ea5b8010a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19_l_pathcolon80","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"55767598c95b714e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchresults","displayName":"Search results (User)","description":"Specifies whether results are returned in alphabetical order by shape name or by stencil name (group). Click By Group to help distinguish between shapes that have the same name but appear on different stencils. Selecting this option is also useful if you want to locate the stencil containing the shape.","helpText":"","infoUrls":[],"categoryId":"98cefd27-a980-4070-ba45-3696b623810d","categoryName":"Shape Search","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchresults_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchresults_1","displayName":"Enabled","description":null,"helpText":null}]},"55c2ba8f5ba0f625":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usetheinskeyforpaste","displayName":"Use the Insert key for paste (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usetheinskeyforpaste_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usetheinskeyforpaste_1","displayName":"Enabled","description":null,"helpText":null}]},"55691a1b1b289bf8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_verticalrulerprintviewonly","displayName":"Show vertical ruler in Print Layout view (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_verticalrulerprintviewonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_verticalrulerprintviewonly_1","displayName":"Enabled","description":null,"helpText":null}]},"554f480a797b0f5a":{"id":"vendor_msft_firewall_mdmstore_global_disablestatefulftp","displayName":"Disable Stateful Ftp","description":"This value is an on/off switch. If off, the firewall performs stateful File Transfer Protocol (FTP) filtering to allow secondary connections. FALSE means off; TRUE means on, so the stateful FTP is disabled. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_global_disablestatefulftp_false","displayName":"False","description":"Stateful FTP enabled","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_disablestatefulftp_true","displayName":"True","description":"Stateful FTP disabled","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/56.json b/public/intune-definitions/56.json new file mode 100644 index 000000000000..3a2dbc23929b --- /dev/null +++ b/public/intune-definitions/56.json @@ -0,0 +1 @@ +{"568b4573e1bf2a13":{"id":"ade_setupassistant_iclouddiagnostics","displayName":"iCloud Diagnostics","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_iclouddiagnostics_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_iclouddiagnostics_1","displayName":"Show","description":null,"helpText":null}]},"561f46656e5b5b1d":{"id":"ade_setupassistant_screentime","displayName":"Screen Time","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_screentime_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_screentime_1","displayName":"Show","description":null,"helpText":null}]},"569472161f4b3368":{"id":"com.apple.cellular_apns_item_password","displayName":"Password","description":"The user's password for the APN.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"569c05e2bcb9df21":{"id":"com.apple.managedclient.preferences_componentupdatesenabled","displayName":"Enable component updates in Microsoft Edge","description":"If you enable or don't configure this policy, component updates are enabled in Microsoft Edge.\n\nIf you disable this policy or set it to false, component updates are disabled for all components in Microsoft Edge.\n\nHowever, some components are exempt from this policy. This includes any component that doesn't contain executable code, that doesn't significantly alter the behavior of the browser, or that's critical for security. That is, updates that are deemed \"critical for security\" are still applied even if you disable this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#componentupdatesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_componentupdatesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_componentupdatesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"561b363c5b5c676f":{"id":"com.apple.managedclient.preferences_enablebackgroundaccessibilitychecker","displayName":"Background accessibility checking","description":"The background accessibility checker automatically helps find and fix content in documents that may make it harder for people with disabilities to consume.","helpText":null,"infoUrls":[],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_enablebackgroundaccessibilitychecker_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablebackgroundaccessibilitychecker_true","displayName":"True","description":null,"helpText":null}]},"5602ff0fc86a82e8":{"id":"com.apple.managedclient.preferences_guidedswitchenabled","displayName":"Guided Switch Enabled","description":"Allows Microsoft Edge to prompt the user to switch to the appropriate profile when Microsoft Edge detects that a link is a personal or work link.\n\nIf you enable this policy, you'll be prompted to switch to another account if the current profile doesn't work for the requesting link.\n\nIf you disable this policy, you won't be prompted to switch to another account when there's a profile and link mismatch.\n\nIf this policy isn't configured, guided switch is turned on by default. A user can override this value in the browser settings.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#guidedswitchenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_guidedswitchenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_guidedswitchenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"565d963d41867e0a":{"id":"com.apple.managedclient.preferences_idletimeout","displayName":"Delay before running idle actions","description":"Triggers an action when the computer is idle.\n\nIf you set this policy, it specifies the length of time without user input (in minutes) before the browser runs actions configured via the IdleTimeoutActions policy.\n\nIf you do not set this policy, no action will run.\n\nThe minimum threshold is 1 minute.\n\n\"User input\" is defined by Operating System APIs, and includes things like moving the mouse or typing on the keyboard.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#idletimeout"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"56d4f0c989e056b8":{"id":"com.apple.managedclient.preferences_organizationlogooverlayonappiconenabled","displayName":"Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work or school profile","description":"Allow your organization's logo from Entra, if any, to be overlaid on the Microsoft Edge app icon of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\n\nIf you enable this policy, your organization's logo from Entra will be used.\n\nIf you disable or don't configure this policy, your organization's logo from Entra won't be used.\n\nFor more information about configuring your organization's logo on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#organizationlogooverlayonappiconenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_organizationlogooverlayonappiconenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_organizationlogooverlayonappiconenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"56cf4cb0aacdcabb":{"id":"com.apple.managedclient.preferences_preventsmartscreenpromptoverride","displayName":"Prevent bypassing Microsoft Defender SmartScreen prompts for sites","description":"This policy setting lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.\n\nIf you enable this setting, users can't ignore Microsoft Defender SmartScreen warnings and they are blocked from continuing to the site.\n\nIf you disable or don't configure this setting, users can ignore Microsoft Defender SmartScreen warnings and continue to the site.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#preventsmartscreenpromptoverride"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_preventsmartscreenpromptoverride_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_preventsmartscreenpromptoverride_true","displayName":"Enabled","description":null,"helpText":null}]},"567f44401d498c98":{"id":"com.apple.systempolicy.control_allowidentifieddevelopers","displayName":"Allow Identified Developers","description":"If true, enables Gatekeeper's \"Mac App Store and identified developers\" option.\r\nIf false, enables Gatekeeper's \"Mac App Store\" option.\r\n\r\nIf the value of Enable Assessment isn't set to true, this key has no effect.","helpText":null,"infoUrls":[],"categoryId":"763525a0-8456-4336-a8d1-392253e8fdd8","categoryName":"System Policy Control","options":[{"id":"com.apple.systempolicy.control_allowidentifieddevelopers_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systempolicy.control_allowidentifieddevelopers_true","displayName":"True","description":null,"helpText":null}]},"56631562381c0f91":{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"562c90e7ecd2db1d":{"id":"device_vendor_msft_laps_policies_passwordlength","displayName":"Password Length ","description":"Use this setting to configure the length of the password of the managed local administrator account.\n\nIf not specified, this setting will default to 14 characters.\n\nThis setting has a minimum allowed value of 8 characters.\n\nThis setting has a maximum allowed value of 64 characters.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":null},"566e908d50077b17":{"id":"device_vendor_msft_policy_config_admx_auditsettings_includecmdline","displayName":"Include command line in process creation events","description":"This policy setting determines what information is logged in security audit events when a new process has been created.\r\n\r\nThis setting only applies when the Audit Process Creation policy is enabled. If you enable this policy setting the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, \"a new process has been created,\" on the workstations and servers on which this policy setting is applied.\r\n\r\nIf you disable or do not configure this policy setting, the process's command line information will not be included in Audit Process Creation events.\r\n\r\nDefault: Not configured\r\n\r\nNote: When this policy setting is enabled, any user with access to read the security events will be able to read the command line arguments for any successfully created process. Command line arguments can contain sensitive or private information such as passwords or user data.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-auditsettings#admx-auditsettings-includecmdline"],"categoryId":"76bbc368-9d0b-4aa7-b8e2-2dcfd864b9ee","categoryName":"Audit Process Creation","options":[{"id":"device_vendor_msft_policy_config_admx_auditsettings_includecmdline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_auditsettings_includecmdline_1","displayName":"Enabled","description":null,"helpText":null}]},"562e45386a93ea9d":{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentialswhenntlmonly","displayName":"Allow delegating saved credentials with NTLM-only server authentication","description":"This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection).\r\n\r\nThis policy setting applies when server authentication was achieved via NTLM.\r\n\r\nIf you enable this policy setting, you can specify the servers to which the user's saved credentials can be delegated (saved credentials are those that you elect to save/remember using the Windows credential manager).\r\n\r\nIf you do not configure (by default) this policy setting, after proper mutual authentication, delegation of saved credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*) if the client machine is not a member of any domain. If the client is domain-joined, by default the delegation of saved credentials is not permitted to any machine.\r\n\r\nIf you disable this policy setting, delegation of saved credentials is not permitted to any machine.\r\n\r\nNote: The \"Allow delegating saved credentials with NTLM-only server authentication\" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN.\r\n\r\nFor Example:\r\nTERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine\r\nTERMSRV/* Remote Desktop Session Host running on all machines.\r\nTERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-allowsavedcredentialswhenntlmonly"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentialswhenntlmonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentialswhenntlmonly_1","displayName":"Enabled","description":null,"helpText":null}]},"56a5c45d623cd1a6":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_detailtext_deviceinstall_deniedpolicy_detailtext_text","displayName":"Detail Text","description":null,"helpText":"","infoUrls":[],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"569899bbd27e99b5":{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect","displayName":"Restrict users to the following language:","description":null,"helpText":"","infoUrls":[],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_en-us","displayName":"English","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_ja-jp","displayName":"Japanese","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_ko-kr","displayName":"Korean","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_de-de","displayName":"German","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_zh-cn","displayName":"Simplified Chinese","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_zh-tw","displayName":"Traditional Chinese (Taiwan)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_fr-fr","displayName":"French","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_es-es","displayName":"Spanish","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_it-it","displayName":"Italian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_sv-se","displayName":"Swedish","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_nl-nl","displayName":"Dutch","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_pt-br","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_fi-fi","displayName":"Finnish","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_nb-no","displayName":"Norwegian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_da-dk","displayName":"Danish","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_hu-hu","displayName":"Hungarian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_pl-pl","displayName":"Polish","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_ru-ru","displayName":"Russian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_cs-cz","displayName":"Czech","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_el-gr","displayName":"Greek","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_pt-pt","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_tr-tr","displayName":"Turkish","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_ar-sa","displayName":"Arabic","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_he-il","displayName":"Hebrew","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_sk-sk","displayName":"Slovak","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_sl-si","displayName":"Slovenian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_ro-ro","displayName":"Romanian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_hr-hr","displayName":"Croatian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_bg-bg","displayName":"Bulgarian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_et-ee","displayName":"Estonian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_lt-lt","displayName":"Lithuanian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_lv-lv","displayName":"Latvian","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_th-th","displayName":"Thai","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_zh-hk","displayName":"Traditional Chinese (Hong Kong)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_sr-latn-cs","displayName":"Serbian (Latin)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_uilangselect_uk-ua","displayName":"Ukrainian","description":null,"helpText":null}]},"56e44121c14e043a":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_syncwaittime","displayName":"Specify startup policy processing wait time","description":"This policy setting specifies how long Group Policy should wait for network availability notifications during startup policy processing. If the startup policy processing is synchronous, the computer is blocked until the network is available or the default wait time is reached. If the startup policy processing is asynchronous, the computer is not blocked and policy processing will occur in the background. In either case, configuring this policy setting overrides any system-computed wait times.\r\n\r\nIf you enable this policy setting, Group Policy will use this administratively configured maximum wait time and override any default or system-computed wait time.\r\n\r\nIf you disable or do not configure this policy setting, Group Policy will use the default wait time of 30 seconds on computers running Windows Vista operating system.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-syncwaittime"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_syncwaittime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_syncwaittime_1","displayName":"Enabled","description":null,"helpText":null}]},"564d3284365342db":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsigeneral_changeiqnname","displayName":"Do not allow changes to initiator iqn name","description":" If enabled then do not allow the initiator iqn name to be changed. If disabled then the initiator iqn name may be changed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsigeneral-changeiqnname"],"categoryId":"ca1aedf4-b951-45f5-a77c-dec776a82e21","categoryName":"General i SCSI","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsigeneral_changeiqnname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsigeneral_changeiqnname_1","displayName":"Enabled","description":null,"helpText":null}]},"56e6624863d77720":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduletime","displayName":"Specify the time of day to run a scheduled scan","description":"This policy setting allows you to specify the time of day at which to perform a scheduled scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to a time value of 2:00 AM. The schedule is based on local time on the computer where the scan is executing.\r\n\r\n If you enable this setting, a scheduled scan will run at the time of day specified.\r\n\r\n If you disable or do not configure this setting, a scheduled scan will run at a default time.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-scheduletime"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduletime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduletime_1","displayName":"Enabled","description":null,"helpText":null}]},"565f44085d1fabe6":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_avsignaturedue","displayName":"Define the number of days before virus security intelligence is considered out of date","description":"This policy setting allows you to define the number of days that must pass before virus security intelligence is considered out of date. If security intelligence is determined to be out of date, this state may trigger several additional actions, including falling back to an alternative update source or displaying a warning icon in the user interface. By default, this value is set to 7 days.\r\n\r\n If you enable this setting, virus security intelligence will be considered out of date after the number of days specified have passed without an update.\r\n\r\n If you disable or do not configure this setting, virus security intelligence will be considered out of date after the default number of days have passed without an update.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-avsignaturedue"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_avsignaturedue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_avsignaturedue_1","displayName":"Enabled","description":null,"helpText":null}]},"56d8e1abe1762895":{"id":"device_vendor_msft_policy_config_admx_msi_msi_disableuserinstalls_msi_disableuserinstallsbox","displayName":"User Install Behavior:","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_msi_disableuserinstalls_msi_disableuserinstallsbox_0","displayName":"Allow User Installs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_msi_disableuserinstalls_msi_disableuserinstallsbox_1","displayName":"Hide User Installs","description":null,"helpText":null}]},"5697d3fff88754fe":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobecontent_ncsi_corpdnsprobecontentbox","displayName":"Corporate DNS Probe Address:","description":null,"helpText":"","infoUrls":[],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":null},"56a8e04839d101b7":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_2","displayName":"Event logging level","description":"Determines which events the Offline Files feature records in the event log.\r\n\r\nOffline Files records events in the Application log in Event Viewer when it detects errors. By default, Offline Files records an event only when the offline files storage cache is corrupted. However, you can use this setting to specify additional events you want Offline Files to record.\r\n\r\nTo use this setting, in the \"Enter\" box, select the number corresponding to the events you want the system to log. The levels are cumulative; that is, each level includes the events in all preceding levels.\r\n\r\n\"0\" records an error when the offline storage cache is corrupted.\r\n\r\n\"1\" also records an event when the server hosting the offline file is disconnected from the network.\r\n\r\n\"2\" also records events when the local computer is connected and disconnected from the network.\r\n\r\n\"3\" also records an event when the server hosting the offline file is reconnected to the network.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-eventlogginglevel-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_2_1","displayName":"Enabled","description":null,"helpText":null}]},"56c14eb24e5273af":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod","displayName":"Configure Sync Method","description":"This policy setting configures the sync provider used by User Experience Virtualization (UE-V) to sync settings between users’ computers. With Sync Method set to ”SyncProvider,” the UE-V Agent uses a built-in sync provider to keep user settings synchronized between the computer and the settings storage location. This is the default value. You can disable the sync provider on computers that never go offline and are always connected to the settings storage location.\r\nWhen SyncMethod is set to “None,” the UE-V Agent uses no sync provider. Settings are written directly to the settings storage location rather than being cached to sync later. \r\nSet SyncMethod to “External” when an external synchronization engine is being deployed for settings sync. This could use OneDrive, Work Folders, SharePoint or any other engine that uses a local folder to synchronize data between users’ computers. In this mode, UE-V writes settings data to the local folder specified in the settings storage path. These settings are then synchronized to other computers by an external synchronization engine. UE-V has no control over this synchronization. It only reads and writes the settings data when the normal UE-V triggers take place.\r\nWith notifications enabled, UE-V users receive a message when the settings sync is delayed. The notification delay policy setting defines the delay before a notification appears.\r\nIf you disable this policy setting, the sync provider is used to synchronize settings between computers and the settings storage location.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-configuresyncmethod"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_1","displayName":"Enabled","description":null,"helpText":null}]},"566c979055dc4c96":{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_higher_precedence_registrar","displayName":"Higher precedence medium for devices discovered by multiple media:","description":null,"helpText":"","infoUrls":[],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":[{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_higher_precedence_registrar_1","displayName":"WCN over Ethernet (UPnP)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_higher_precedence_registrar_2","displayName":"WCN over In-band 802.11 WLAN","description":null,"helpText":null}]},"560c977756640d38":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_global_refresh_interval_prompt","displayName":"Global Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"561fa91cef538474":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_publishing_server5_name_prompt","displayName":"Publishing Server Display Name","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"56cee1791c83445d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb","displayName":"Set limit on megabytes of memory a single Chrome instance can use.","description":"Configures the amount of memory that a single Google Chrome instance can use before tabs start being discarded (I.E. the memory used by the tab will be freed and the tab will have to be reloaded when switched to) to save memory.\r\n\r\nIf the policy is set, browser will begin to discard tabs to save memory once the limitation is exceeded. However, there is no guarantee that the browser is always running under the limit. Any value under 1024 will be rounded up to 1024.\r\n\r\nIf this policy is not set, the browser will only begin attempts to save memory once it has detected that the amount of physical memory on its machine is low.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_1","displayName":"Enabled","description":null,"helpText":null}]},"563154c07727a2fd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting","displayName":"Default cookies setting","description":"Unless the RestoreOnStartup policy is set to permanently restore URLs from previous sessions, then setting CookiesSessionOnlyForUrls lets you make a list of URL patterns that specify sites that can and can't set cookies for one session.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies. URLs not covered by the patterns specified also result in the use of defaults.\r\n\r\nWhile no specific policy takes precedence, see CookiesBlockedForUrls and CookiesAllowedForUrls. URL patterns among these 3 policies must not conflict.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"56531b7ec775503d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls","displayName":"Allow JavaScript on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can run JavaScript.\r\n\r\nLeaving the policy unset means DefaultJavaScriptSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"569bf98380cd7be1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc","displayName":"Allow popups on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"566df7ad2c893c2d":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_profilesprofiledirectorysddl","displayName":"Profile Directory SDDL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"56a42d4e11eb5274":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"56c9c9ed89a0310d":{"id":"device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons","displayName":"Enable Insecure Guest Logons","description":"This policy setting determines if the SMB client will allow insecure guest logons to an SMB server. If you enable this policy setting or if you do not configure this policy setting, the SMB client will allow insecure guest logons. If you disable this policy setting, the SMB client will reject insecure guest logons. Insecure guest logons are used by file servers to allow unauthenticated access to shared folders. While uncommon in an enterprise environment, insecure guest logons are frequently used by consumer Network Attached Storage (NAS) appliances acting as file servers. Windows file servers require authentication and do not use insecure guest logons by default. Since insecure guest logons are unauthenticated, important security features such as SMB Signing and SMB Encryption are disabled. As a result, clients that allow insecure guest logons are vulnerable to a variety of man-in-the-middle attacks that can result in data loss, data corruption, and exposure to malware. Additionally, any data written to a file server using an insecure guest logon is potentially accessible to anyone on the network. Microsoft recommends disabling insecure guest logons and configuring file servers to require authenticated access.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#enableinsecureguestlogons"],"categoryId":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"562f6520ffb1a58f":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode","displayName":"Configure SIP security mode","description":"\r\nWhen Lync connects to the server, it supports various authentication mechanisms. This policy allows the user to specify whether Digest and Basic authentication are supported.\r\n\r\nDisabled (default): NTLM/Kerberos/TLS-DSK/Digest/Basic\r\nEnabled:\r\n Authentication mechanisms: NTLM/Kerberos/TLS-DSK\r\n Gal Download: Requires HTTPS if user is not logged in as an internal user.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},"56f3b4b5f231d006":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech","displayName":"Configure Online Text To Speech","description":"Set whether the browser can leverage Online Text to Speech voice fonts, part of Azure Cognitive Services. These voice fonts are higher quality than the pre-installed system voice fonts.\r\n\r\nIf you enable or don't configure this policy, web-based applications that use the SpeechSynthesis API can use Online Text to Speech voice fonts.\r\n\r\nIf you disable this policy, the voice fonts aren't available.\r\n\r\nRead more about this feature here:\r\nSpeechSynthesis API: https://go.microsoft.com/fwlink/?linkid=2110038\r\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2110141","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_1","displayName":"Enabled","description":null,"helpText":null}]},"56c5d5d533583b31":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload","displayName":"Wait for Internet Explorer mode tabs to completely unload before ending the browser session","description":"This policy causes Microsoft Edge to continue running until all Internet Explorer tabs have completely finished unloading. This allows Internet Explorer plugins like ActiveX controls to perform additional critical work even after the browser has been closed. However, this can cause stability and performance issues, and Microsoft Edge processes may remain active in the background with no visible windows if the webpage or plugin prevents Internet Explorer from unloading. This policy should only be used if your organization depends on a plugin that requires this behavior.\r\n\r\nIf you enable this policy, Microsoft Edge will always wait for Internet Explorer mode tabs to fully unload before ending the browser session.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not always wait for Internet Explorer mode tabs to fully unload before ending the browser session.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2174004","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_1","displayName":"Enabled","description":null,"helpText":null}]},"56b4f0d315ce173a":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls","displayName":"Allow listed sites connect to specific HID devices","description":"This setting lets you list the URLs that specify which sites are automatically granted permission to access a HID device with the given vendor and product IDs.\r\n\r\nSetting the policy Each item in the list requires both devices and urls fields for the item to be valid, otherwise the item is ignored.\r\n\r\n * Each item in the devices field must have a vendor_id and may have a product_id field.\r\n\r\n * Omitting the product_id field will create a policy matching any device with the specified vendor ID.\r\n\r\n * An item which has a product_id field without a vendor_id field is invalid and is ignored.\r\n\r\nIf you don't set this policy, that means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nURLs in this policy shouldn't conflict with those configured through 'WebHidBlockedForUrls' (Block the WebHID API on these sites). If they do, this policy takes precedence over 'WebHidBlockedForUrls'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://microsoft.com\",\r\n \"https://chromium.org\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"56a52ff1a522b64d":{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_edgesidebarappurlhostblocklistdesc","displayName":"Control which apps cannot be opened in Microsoft Edge sidebar (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"56f6508bff40868c":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\r\n\r\nDisabling JavaScript optimizations (by setting this policy's value to 2) will mean that Microsoft Edge may render web content more slowly.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'JavaScriptOptimizerAllowedForSites' (Allow JavaScript optimization on these sites) and 'JavaScriptOptimizerBlockedForSites' (Block JavaScript optimizations on these sites) policies.\r\n\r\nIf you don't configure this policy, JavaScript optimizations are enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowJavaScriptOptimizer (1) = Enable advanced JavaScript optimizations on all sites\r\n\r\n* BlockJavaScriptOptimizer (2) = Disable advanced JavaScript optimizations on all sites\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_1","displayName":"Enabled","description":null,"helpText":null}]},"56082a665f160a51":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlblocklist","displayName":"Block access to a list of URLs in InPrivate mode.","description":"This policy controls which URLs are blocked from loading in InPrivate mode in Microsoft Edge.\r\n\r\nAdministrators can specify a list of URL patterns that are blocked when users browse in InPrivate mode. For information about the supported URL pattern format, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nIf both 'InPrivateModeUrlBlocklist' (Block access to a list of URLs in InPrivate mode.) and 'InPrivateModeUrlAllowlist' (Allow access to a list of URLs in InPrivate mode.) are configured, the allowlist takes precedence.\r\n- URLs that match the allowlist are allowed.\r\n- URLs that match the blocklist but not the allowlist are blocked.\r\n- URLs that match neither list follow the behavior defined by the general 'URLBlocklist' (Block access to a list of URLs) and 'URLAllowlist' (Define a list of allowed URLs) policies.\r\n\r\nIf 'InPrivateModeUrlAllowlist' is configured and this policy is not configured, only URLs on the allowlist can be opened in InPrivate mode.\r\n\r\nIf 'InPrivateModeAvailability' (Configure InPrivate mode availability) is set to disallow (value 1) and 'InPrivateModeUrlAllowlist' is configured, InPrivate mode is available only for URLs that match the allowlist.\r\n\r\nThis policy applies only to InPrivate mode. To block URLs across all browsing modes, use 'URLBlocklist'.\r\n\r\nThis policy supports up to 1000 entries.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"56d8aa21ba2fa660":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityblocklist_developertoolsavailabilityblocklistdesc","displayName":"List of URL patterns for which developer tools are blocked (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"56b3612a29c6d21c":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled","displayName":"Allow users to open files using the ClickOnce protocol","description":"Allow users to open files using the ClickOnce protocol. The ClickOnce protocol allows websites to request that the browser open files from a specific URL using the ClickOnce file handler on the user's computer or device.\r\n\r\nIf you enable this policy, users can open files using the ClickOnce protocol. This policy overrides the user's ClickOnce setting in the edge://flags/ page.\r\n\r\nIf you disable this policy, users can't open files using the ClickOnce protocol. Instead, the file will be saved to the file system using the browser. This policy overrides the user's ClickOnce setting in the edge://flags/ page.\r\n\r\nIf you don't configure this policy, users can't open files using the ClickOnce protocol. Users have the option to enable the use of the ClickOnce protocol with the edge://flags/ page.\r\n\r\nDisabling ClickOnce may prevent ClickOnce applications (.application files) from launching properly.\r\n\r\nFor more information about ClickOnce, see https://go.microsoft.com/fwlink/?linkid=2103872 and https://go.microsoft.com/fwlink/?linkid=2099880.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"56c9761b7ee7f3eb":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_forcedenytheseapps","displayName":"Let Apps Access Email Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"5618288eb1ff3df9":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingheightfactor","displayName":"[Deprecated] Height of grid box in percent relative to QR code bitmap height (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"56198c7bc104ee74":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultallowinstallation","displayName":"Allow installation default","description":"You can specify the default behavior of all channels to allow or block Microsoft Edge updates when Microsoft Edge Update is used.\r\n\r\nYou can override this policy for individual channels by enabling the 'Allow installation' policy for specific channels.\r\n\r\nIf you disable this policy, the installation of Microsoft Edge through Microsoft Edge Update is blocked. This only affects the installation of Microsoft Edge software only when users are running Microsoft Edge Update and when they haven't configured the 'Allow installation' policy.\r\n\r\nThis policy doesn't prevent Microsoft Edge Update from running or prevent users from installing Microsoft Edge software using other methods.","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultallowinstallation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultallowinstallation_1","displayName":"Enabled","description":null,"helpText":null}]},"56e76b4e9c37bb1a":{"id":"device_vendor_msft_policy_config_wifi_allowmanualwificonfiguration","displayName":"Allow Manual Wi Fi Configuration","description":"Allow or block connections to Wi-Fi outside of MDM server-installed networks. If you change this setting to Block, you must deploy enterprise Wi-Fi profiles to the device using the Wi-Fi CSP before you apply this setting. Otherwise, the device will go offline since it won't be able to connect to Wi-Fi. Note that choosing to block Wi-Fi connections will delete any previously installed user-configured Wi-Fi profiles from the device, though not all non-MDM profiles will be deleted.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowmanualwificonfiguration"],"categoryId":"0a803a48-789a-48b0-b928-e52d56ab17f1","categoryName":"Wi-Fi Settings","options":[{"id":"device_vendor_msft_policy_config_wifi_allowmanualwificonfiguration_0","displayName":"Block","description":"No Wi-Fi connection outside of MDM provisioned network is allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowmanualwificonfiguration_1","displayName":"Allow","description":"Adding new network SSIDs beyond the already MDM provisioned ones is allowed.","helpText":null}]},"56aa33a3afbfdb73":{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse","displayName":"Default elevation response","description":"","helpText":null,"infoUrls":[],"categoryId":"b750fe41-33c4-4293-8dfc-42285be35752","categoryName":null,"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse_0","displayName":"Deny all requests","description":"Deny all requests","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse_1","displayName":"Require user confirmation","description":"Require user confirmation","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse_2","displayName":"Require support approval","description":"Require support approval","helpText":null}]},"56372eee8ddebc65":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_expiration","displayName":"Expiration (User)","description":"This policy specifies when the PIN expires (in days). Valid values are 0 to 730 inclusive. If this policy is set to 0, then PINs do not expire.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"562a108e9c444d1d":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_datecolon40","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"5663e73a1deedcd1":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_authman","displayName":"Authorization Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-authman"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_authman_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_authman_1","displayName":"Enabled","description":null,"helpText":null}]},"568f22d0a8e312e9":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certstemplate","displayName":"Certificate Templates (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certstemplate"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certstemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certstemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"56c7eb42994c8d1f":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessmon","displayName":"Wireless Monitor (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wirelessmon"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessmon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessmon_1","displayName":"Enabled","description":null,"helpText":null}]},"56ce2f4e790d6946":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013","displayName":"Microsoft Office 365 SharePoint Designer 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 SharePoint Designer 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 SharePoint Designer 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 SharePoint Designer 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 SharePoint Designer 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 SharePoint Designer 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365sharepointdesigner2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013_1","displayName":"Enabled","description":null,"helpText":null}]},"5637d7d2bd38e7c7":{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhoursnotificationpolicydescription","displayName":"Remove logon hours expiration warnings (User)","description":"This policy controls whether the logged on user should be notified when his logon hours are about to expire. By default, a user is notified before logon hours expire, if actions have been set to occur when the logon hours expire.\r\n\r\nIf you enable this setting, warnings are not displayed to the user before the logon hours expire.\r\n\r\nIf you disable or do not configure this setting, users receive warnings before the logon hours expire, if actions have been set to occur when the logon hours expire.\r\n\r\nNote: If you configure this setting, you might want to examine and appropriately configure the “Set action to take when logon hours expire” setting. If “Set action to take when logon hours expire” is disabled or not configured, the “Remove logon hours expiration warnings” setting will have no effect, and users receive no warnings about logon hour expiration\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-logonhoursnotificationpolicydescription"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhoursnotificationpolicydescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhoursnotificationpolicydescription_1","displayName":"Enabled","description":null,"helpText":null}]},"56192a2a063d4a81":{"id":"user_vendor_msft_policy_config_browser_allowaddressbardropdown","displayName":"Allow Address Bar Dropdown (User)","description":"This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowaddressbardropdown"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowaddressbardropdown_0","displayName":"Block","description":"Prevented/not allowed. Hide the Address bar drop-down functionality and disable the Show search and site suggestions as I type toggle in Settings.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowaddressbardropdown_1","displayName":"Allow","description":"Allowed. Show the Address bar drop-down list and make it available.","helpText":null}]},"5645c13eee1505c0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips","displayName":"Allow Google Cast to connect to Cast devices on all IP addresses. (User)","description":"Unless EnableMediaRouter is set to Disabled, setting MediaRouterCastAllowAllIPs to Enabled connects Google Cast to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.\r\n\r\nSetting the policy to Disabled connects Google Cast to Cast devices only on RFC1918/RFC4193.\r\n\r\nLeaving the policy unset connects Google Cast to Cast devices only on RFC1918/RFC4193, unless the CastAllowAllIPs feature is turned on.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips_1","displayName":"Enabled","description":null,"helpText":null}]},"5619141da62a2c33":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended","displayName":"Enable search suggestions (User)","description":"Setting the policy to True turns on search suggestions in Google Chrome's address bar. Setting the policy to False turns off these search suggestions.\r\n\r\nIf you set the policy, users can't change it. If not set, search suggestions are on at first, but users can turn them off any time.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"566a295569cce2e4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist","displayName":"Allow access to a list of URLs (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"566291f87938cb6c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation_l_autorecoversavelocation2","displayName":"AutoRecover save location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":null},"568d14b936d019d0":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"563303ff28e2011f":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708","displayName":"Enable dragging of content from different domains within a window (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3","displayName":"Disable","description":null,"helpText":null}]},"56c9b97f9119eefe":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowlessprivilegedsites"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"565d4dc91aa4716b":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows","displayName":"Enable dragging of content from different domains within a window (User)","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy setting or do not configure it, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"56450f8048cbc16b":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed","displayName":"Allows enabling the feature NewBaseUrlInheritanceBehavior (User)","description":"NewBaseUrlInheritanceBehavior is a Microsoft Edge feature that causes about:blank and about:srcdoc frames to consistently inherit their base url values via snapshots of their initiator's base url.\r\n\r\nIf you disable this policy, it prevents users or Microsoft Edge variations from enabling NewBaseUrlInheritanceBehavior, in case compatibility issues are discovered.\r\n\r\nIf you enable or don't configure this policy, it allows enabling NewBaseUrlInheritanceBehavior.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"565166953b3ec8a4":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_edgedefaultprofileenabled","displayName":"Default Profile Setting Enabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":null},"56b422dd42cb5c65":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_querytimeout_l_querytimeoutdecimal","displayName":"Time before query timeout (minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":null},"563eea0c6a4fc877":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome","displayName":"Replace MAPI - Home (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"home phone\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"home phone\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome_1","displayName":"Enabled","description":null,"helpText":null}]},"569302d12bb74685":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_l_descriptioncolon308","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"56f84692d8cf0556":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_conversionservices_l_conversionservicesoptions_l_conversionservicesoptions236","displayName":"Conversion service options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6c142a01-47fa-422d-8135-29e81bc970cc","categoryName":"Conversion Service","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_conversionservices_l_conversionservicesoptions_l_conversionservicesoptions236_0","displayName":"Do not allow to use Microsoft Conversion Service","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_conversionservices_l_conversionservicesoptions_l_conversionservicesoptions236_2","displayName":"Allow to use Microsoft Conversion Service","description":null,"helpText":null}]},"56622be6a134f478":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_updatelinksonsave","displayName":"Update links on save (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"0775f21c-9ca1-446d-b1dc-3cea45f15605","categoryName":"Files","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_updatelinksonsave_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_updatelinksonsave_1","displayName":"Enabled","description":null,"helpText":null}]},"561b411178c0bce7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitmimeheaders_l_empty74","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":null},"56bac513771c7414":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages","displayName":"More save messages (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_1","displayName":"Enabled","description":null,"helpText":null}]},"5687e9411106c846":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive","displayName":"When new items arrive (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_1","displayName":"Enabled","description":null,"helpText":null}]},"5636db9590bf5688":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_l_oomsaveas_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_l_oomsaveas_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_l_oomsaveas_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_l_oomsaveas_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_l_oomsaveas_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"56d2b84ad379530f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_savevisiofilesas_l_savevisiofilesas6","displayName":"Save Visio files as (User)","description":"","helpText":"","infoUrls":[],"categoryId":"73415dea-0103-4427-83c5-6c97bf81af1d","categoryName":"Save Documents","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_savevisiofilesas_l_savevisiofilesas6_0","displayName":"Visio Document","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_savevisiofilesas_l_savevisiofilesas6_3","displayName":"Visio Macro-Enabled Document","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_savevisiofilesas_l_savevisiofilesas6_1","displayName":"Visio 2003-2016 Document","description":null,"helpText":null}]},"560c89639893c39b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty19","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty19_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty19_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty19_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty19_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/57.json b/public/intune-definitions/57.json new file mode 100644 index 000000000000..8bbdfbc0ff70 --- /dev/null +++ b/public/intune-definitions/57.json @@ -0,0 +1 @@ +{"5734ce35e0a355ad":{"id":"com.apple.applicationaccess_allowactivitycontinuation","displayName":"Allow Activity Continuation","description":"If false, disables activity continuation. Available in iOS 8 and later, and macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowactivitycontinuation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowactivitycontinuation_true","displayName":"True","description":null,"helpText":null}]},"57cc59c13b8b6b1f":{"id":"com.apple.associated-domains_configuration_item_enabledirectdownloads","displayName":"Enable Direct Downloads","description":"If true, data for this domain should be downloaded directly instead of through a CDN. The entitlement value for this domain must be set to service:domain?mode=managed or this value will be ignored. Available in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"8efd284f-5a56-4da8-8821-f51984ff954d","categoryName":"Associated Domains","options":[{"id":"com.apple.associated-domains_configuration_item_enabledirectdownloads_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.associated-domains_configuration_item_enabledirectdownloads_true","displayName":"True","description":null,"helpText":null}]},"57a856d24209b36f":{"id":"com.apple.finder_showharddrivesondesktop","displayName":"Show Hard Drives On Desktop","description":"If true, hard drives can appear on the desktop.","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":[{"id":"com.apple.finder_showharddrivesondesktop_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.finder_showharddrivesondesktop_true","displayName":"True","description":null,"helpText":null}]},"5759ab6018450b97":{"id":"com.apple.managedclient.preferences_automaticallydownloadexternalcontent","displayName":"Download embedded images","description":"Automatically downloading images will provide users with a better messaging experience. However, be aware of the privacy considerations if you are enabling this setting.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#specify-when-pictures-are-downloaded-for-email"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_automaticallydownloadexternalcontent_0","displayName":"Never download images","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automaticallydownloadexternalcontent_1","displayName":"Automatically download images from users in the address book","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automaticallydownloadexternalcontent_2","displayName":"Always download images regardless of sender","description":null,"helpText":null}]},"571973d7bd871a1e":{"id":"com.apple.managedclient.preferences_forcegooglesafesearch","displayName":"Enforce Google SafeSearch","description":"Forces queries in Google Web Search to be performed with SafeSearch set to active, and prevents users from changing this setting.\n\nIf you enable this policy, SafeSearch in Google Search is always active.\n\nIf you disable this policy or don't configure it, SafeSearch in Google Search isn't enforced.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forcegooglesafesearch"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forcegooglesafesearch_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forcegooglesafesearch_true","displayName":"Enabled","description":null,"helpText":null}]},"574a876e266a596d":{"id":"com.apple.managedclient.preferences_scheduledscan","displayName":"Scheduled Scan","description":"Schedule scans with Microsoft Defender for Endpoint.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/mac-schedule-scan"],"categoryId":"a3ea4da3-445e-41c0-ac4d-c9ad2467ec26","categoryName":"Features","options":[{"id":"com.apple.managedclient.preferences_scheduledscan_0","displayName":"enabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_scheduledscan_1","displayName":"disabled","description":null,"helpText":null}]},"573b135b2c4701a5":{"id":"com.apple.managedclient.preferences_serialallowallportsforurls","displayName":"Automatically grant sites permission to connect all serial ports","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available serial ports.\n\nThe URLs must be valid, or the policy is ignored. Only the origin (scheme, host, and port) of the URL is considered.\n\nThis policy overrides \"DefaultSerialGuardSetting\", \"SerialAskForUrls\", \"SerialBlockedForUrls\" and the user's preferences.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#serialallowallportsforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"5793ce768d5f939f":{"id":"com.apple.universalaccess_mousedriverignoretrackpad","displayName":"Mouse Driver Ignore Trackpad","description":"If true, ignores the built-in trackpad.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_mousedriverignoretrackpad_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_mousedriverignoretrackpad_true","displayName":"True","description":null,"helpText":null}]},"575105616628b8ba":{"id":"com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled","displayName":"Configure default state of Allow extensions from other stores setting","description":"This policy allows you to control the default state of the Allow extensions from other stores setting.\nThis policy can't be used to stop installation of extensions from other stores such as Chrome Web Store.\nTo stop installation of extensions from other stores, use the Extension Settings policy: https://go.microsoft.com/fwlink/?linkid=2187098.\n\nWhen enabled, Allow extensions from other stores will be turned on. So, users won't have to turn on the flag manually\nwhile installing extensions from other supported stores such as Chrome Web Store. However a user can override this setting.\nIf the user has already turned on the setting and then turned it off, this setting may not work.\nIf the Admin first sets the policy as Enabled, but then changes it to not configured or disabled, it will have no impact on\nuser settings and the setting will remain as it is.\n\nWhen disabled or not configured, the user can manage the Allow extensions from other store setting.\n","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"578cf799b8a873f8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsitelistrefreshinterval","displayName":"Configure how frequently the Enterprise Mode Site List is refreshed","description":"This setting lets you specify a custom refresh interval for the Enterprise Mode Site List. The refresh interval is specified in minutes. The minimum refresh interval is 30 minutes.\n\nThis setting is applicable only when the \"InternetExplorerIntegrationSiteList\" or \"InternetExplorerIntegrationCloudSiteList\" setting is configured.\n\nIf you configure this policy, Microsoft Edge attempts to retrieve an updated version of the configured Enterprise Mode Site List using the specified refresh interval.\n\nIf you disable or don't configure this policy, Microsoft Edge uses a default refresh interval, it's 10080 minutes (7 days) starting from version 110 or later, 120 minutes from version 93 to 110, and 30 minutes before version 93.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"576110a2b5640eff":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationwindowopenwidthadjustment","displayName":"Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages","description":"This setting lets you specify a custom adjustment to the width of popup windows generated via window.open from the Internet Explorer mode site.\n\nIf you configure this policy, Microsoft Edge will add the adjustment value to the width, in pixels. The exact difference depends on the UI configuration of both IE and Edge, but a typical difference is 4.\n\nIf you disable or don't configure this policy, Microsoft Edge will treat IE mode window.open the same as Edge mode window.open in window width calculations.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"57a523e11e948ad0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.xsltenabled","displayName":"Control the availability of the XSLT feature","description":"Controls whether the XSLT feature (the XSLTProcessor JavaScript API and the XSL processing instruction) is available in Microsoft Edge.\n\nIf you enable this policy, XSLT is available regardless of the browser's default configuration.\n\nIf you disable this policy, XSLT is unavailable regardless of the browser's default configuration.\n\nIf you don't configure this policy, XSLT availability is determined by the browser's default configuration and any applicable field trials.\n\nThis policy is temporary and will be removed in a future version of Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.xsltenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.xsltenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"57d5d2e91128920c":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask","displayName":"Access mask","description":"Defines the access.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":[{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask_1","displayName":"Read","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask_2","displayName":"Write","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask_4","displayName":"Execute","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask_8","displayName":"File read","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask_16","displayName":"File write","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask_32","displayName":"File execute","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_accesmask_64","displayName":"Print","description":"","helpText":null}]},"57654eaaf475260c":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance","displayName":"Set up a maintenance schedule to limit the maximum network bandwidth used for BITS background transfers","description":"This policy setting limits the network bandwidth that Background Intelligent Transfer Service (BITS) uses for background transfers during the maintenance days and hours. Maintenance schedules further limit the network bandwidth that is used for background transfers.\r\n\r\n If you enable this policy setting, you can define a separate set of network bandwidth limits and set up a schedule for the maintenance period.\r\n\r\n You can specify a limit to use for background jobs during a maintenance schedule. For example, if normal priority jobs are currently limited to 256 Kbps on a work schedule, you can further limit the network bandwidth of normal priority jobs to 0 Kbps from 8:00 A.M. to 10:00 A.M. on a maintenance schedule.\r\n\r\n If you disable or do not configure this policy setting, the limits defined for work or nonwork schedules will be used.\r\n\r\n Note: The bandwidth limits that are set for the maintenance period supersede any limits defined for work and other schedules.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxbandwidthv2-maintenance"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_1","displayName":"Enabled","description":null,"helpText":null}]},"57cde82df94ef791":{"id":"device_vendor_msft_policy_config_admx_cpls_usedefaulttile","displayName":"Apply the default account picture to all users","description":"This policy setting allows an administrator to standardize the account pictures for all users on a system to the default account picture. One application for this policy setting is to standardize the account pictures to a company logo.\r\n\r\nNote: The default account picture is stored at %PROGRAMDATA%\\Microsoft\\User Account Pictures\\user.jpg. The default guest picture is stored at %PROGRAMDATA%\\Microsoft\\User Account Pictures\\guest.jpg. If the default pictures do not exist, an empty frame is displayed.\r\n\r\nIf you enable this policy setting, the default user account picture will display for all users on the system with no customization allowed.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to customize their account pictures.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-cpls#admx-cpls-usedefaulttile"],"categoryId":"6b87c5da-cfd9-44bc-be05-ed08eb2144c7","categoryName":"User Accounts","options":[{"id":"device_vendor_msft_policy_config_admx_cpls_usedefaulttile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_cpls_usedefaulttile_1","displayName":"Enabled","description":null,"helpText":null}]},"5703dc483b578525":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynetreporting","displayName":"Join Microsoft MAPS","description":"This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections.\r\n\r\n You can choose to send basic or additional information about detected software. Additional information helps Microsoft create new security intelligence and help it to protect your computer. This information can include things like location of detected items on your computer if harmful software was removed. The information will be automatically collected and sent. In some instances, personal information might unintentionally be sent to Microsoft. However, Microsoft will not use this information to identify you or contact you.\r\n\r\n Possible options are:\r\n (0x0) Disabled (default)\r\n (0x1) Basic membership\r\n (0x2) Advanced membership\r\n\r\n Basic membership will send basic information to Microsoft about software that has been detected, including where the software came from, the actions that you apply or that are applied automatically, and whether the actions were successful.\r\n\r\n Advanced membership, in addition to basic information, will send more information to Microsoft about malicious software, spyware, and potentially unwanted software, including the location of the software, file names, how the software operates, and how it has impacted your computer.\r\n\r\n If you enable this setting, you will join Microsoft MAPS with the membership specified.\r\n\r\n If you disable or do not configure this setting, you will not join Microsoft MAPS.\r\n \r\n In Windows 10, Basic membership is no longer available, so setting the value to 1 or 2 enrolls the device into Advanced membership.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-spynetreporting"],"categoryId":"09c02465-dc11-457e-9eac-19fc542e4cda","categoryName":"MAPS","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynetreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynetreporting_1","displayName":"Enabled","description":null,"helpText":null}]},"570da79059af8152":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions_tcpmaxconnectresponseretransmissions","displayName":"TcpMaxConnectResponseRetransmissions","description":null,"helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions_tcpmaxconnectresponseretransmissions_0","displayName":"No retransmission, half-open connections dropped after 3 seconds","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions_tcpmaxconnectresponseretransmissions_1","displayName":"3 seconds, half-open connections dropped after 9 seconds","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions_tcpmaxconnectresponseretransmissions_2","displayName":"3 & 6 seconds, half-open connections dropped after 21 seconds","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions_tcpmaxconnectresponseretransmissions_3","displayName":"3, 6, & 9 seconds, half-open connections dropped after 45 seconds","description":null,"helpText":null}]},"57400a800041da27":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ndncsitecoverage","displayName":"Specify sites covered by the application directory partition DC Locator DNS SRV records","description":"This policy setting specifies the sites for which the domain controllers (DC) that host the application directory partition should register the site-specific, application directory partition-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it. \r\n\r\nThe application directory partition DC Locator DNS records and the site-specific SRV records are dynamically registered by the Net Logon service, and they are used to locate the application directory partition-specific DC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication.\r\n\r\nTo specify the sites covered by the DC Locator application directory partition-specific DNS SRV records, click Enabled, and then enter the site names in a space-delimited format.\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-ndncsitecoverage"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ndncsitecoverage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ndncsitecoverage_1","displayName":"Enabled","description":null,"helpText":null}]},"57665293096cf359":{"id":"device_vendor_msft_policy_config_admx_radar_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"ffd1a98f-0fac-47fe-813f-7510d0dacbc3","categoryName":"Windows Resource Exhaustion Detection and Resolution","options":[{"id":"device_vendor_msft_policy_config_admx_radar_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_radar_wdiscenarioexecutionpolicy_wdiscenarioexecutionpolicylevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"577226181f358502":{"id":"device_vendor_msft_policy_config_admx_settingsync_disableapplicationsettingsync","displayName":"Do not sync app settings","description":"Prevent the \"app settings\" group from syncing to and from this PC. This turns off and disables the \"app settings\" group on the \"sync your settings\" page in PC settings.\r\n\r\nIf you enable this policy setting, the \"app settings\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn app settings syncing on\" so that syncing it turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"app settings\" group is on by default and configurable by the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disableapplicationsettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disableapplicationsettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disableapplicationsettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"574cf930bff04c63":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_spikewatchperiod","displayName":"SpikeWatchPeriod","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"573dec733f9e1dd5":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_nonewappalert","displayName":"Do not show the 'new application installed' notification","description":"This policy removes the end-user notification for new application associations. These associations are based on file types (e.g. *.txt) or protocols (e.g. http:)\r\n\r\nIf this group policy is enabled, no notifications will be shown. If the group policy is not configured or disabled, notifications will be shown to the end user if a new application has been installed that can handle the file type or protocol association that was invoked.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nonewappalert"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_nonewappalert_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_nonewappalert_1","displayName":"Enabled","description":null,"helpText":null}]},"57bd04aed203a70f":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical","displayName":"Turn off numerical sorting in File Explorer","description":"\r\nThis policy setting allows you to have file names sorted literally (as in Windows 2000 and earlier) rather than in numerical order.\r\nIf you enable this policy setting, File Explorer will sort file names by each digit in a file name (for example, 111 < 22 < 3).\r\nIf you disable or do not configure this policy setting, File Explorer will sort file names by increasing number value (for example, 3 < 22 < 111).\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nostrcmplogical"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical_1","displayName":"Enabled","description":null,"helpText":null}]},"57f5caf67c534806":{"id":"device_vendor_msft_policy_config_bluetooth_servicesallowedlist","displayName":"Services Allowed List","description":"Set a list of allowable services and profiles. String hex formatted array of Bluetooth service UUIDs in canonical format, delimited by semicolons. For example, {782AFCFC-7CAA-436C-8BF0-78CD0FFBD4AF}. The default value is an empty string. For more information, see ServicesAllowedList usage guide","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Bluetooth#servicesallowedlist"],"categoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","categoryName":"Bluetooth","options":null},"576c6e70c0581e6f":{"id":"device_vendor_msft_policy_config_browser_allowpopups","displayName":"Allow Popups","description":"This setting lets you decide whether to turn on Pop-up Blocker and whether to allow pop-ups to appear in secondary windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowpopups"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowpopups_0","displayName":"Block","description":"Turn off Pop-up Blocker letting pop-up windows open.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowpopups_1","displayName":"Allow","description":"Turn on Pop-up Blocker stopping pop-up windows from opening.","helpText":null}]},"57eb08aacaf6755f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"5706336cf40d93fb":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupenabled","displayName":"Enable Chrome Cleanup on Windows","description":"Setting the policy to Enabled or leaving it unset means Chrome Cleanup periodically scans the system for unwanted software and should any be found, will ask the user if they wish to remove it. Manually triggering Chrome Cleanup from chrome://settings is allowed.\r\n\r\nSetting the policy to Disabled means Chrome Cleanup won't periodically scan and manual triggering is disabled.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5768eb88b47a4266":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions","description":"Allows you to set whether users can add exceptions to allow mixed content for specific sites.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'InsecureContentAllowedForUrls' and 'InsecureContentBlockedForUrls' policies.\r\n\r\nIf this policy is left not set, users will be allowed to add exceptions to allow blockable mixed content and disable autoupgrades for optionally blockable mixed content.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"57f9cb8958697293":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix","displayName":"Configure the TalkGadget prefix for remote access hosts","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_1","displayName":"Enabled","description":null,"helpText":null}]},"579395f27222343d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_enterprisecustomlabel","displayName":"Set a custom enterprise label for a managed profile (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"57a16c1de373c924":{"id":"device_vendor_msft_policy_config_defender_controlledfolderaccessprotectedfolders","displayName":"Controlled Folder Access Protected Folders","description":"The previous name was GuardedFoldersList and changed to ControlledFolderAccessProtectedFolders. This policy settings allows adding user-specified folder locations to the controlled folder access feature.  These folders will complement the system defined folders such as My Documents and My Pictures. The list of system folders will be displayed in the user interface and can not be changed. Value type is string. Use the | as the substring separator.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#controlledfolderaccessprotectedfolders"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"5757e225e223e583":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer","displayName":"ODFC Container","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\ODFC\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer_1","displayName":"Enabled","description":null,"helpText":null}]},"57762099946d5b57":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001","displayName":"Download signed ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_1","displayName":"Prompt","description":null,"helpText":null}]},"578f7f2f382600bb":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"57137f0954824996":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"This policy setting enables blocking of file download prompts that are not user initiated.\n\nIf you enable this policy setting, file download prompts that are not user initiated will be blocked for Internet Explorer processes.\n\nIf you disable this policy setting, prompting will occur for file downloads that are not user initiated for Internet Explorer processes.\n\nIf you do not configure this policy setting, the user's preference determines whether to prompt for file downloads that are not user initiated for Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictfiledownloadinternetexplorerprocesses"],"categoryId":"17bc9899-d157-4eac-a949-810b4a841e28","categoryName":"Restrict File Download","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"57cca94d23eb9b02":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~protectedcontent_protectedcontentidentifiersallowed","displayName":"Allows web pages to use identifiers for the purpose of protected content playback","description":"This policy controls whether sites can use hardware-specific device identifiers to enable hardware-secure DRM (for example, Widevine L1 or PlayReady SL3000), which may be required for high-resolution protected content playback.\r\n\r\nIf you enable this policy or do not configure it, sites are allowed to use protected content identifiers.\r\n\r\nIf you disable this policy, sites are not allowed to use protected content identifiers.","helpText":"","infoUrls":[],"categoryId":"2af24920-f611-4f03-99a6-205773869ae6","categoryName":"Protected Content","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~protectedcontent_protectedcontentidentifiersallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~protectedcontent_protectedcontentidentifiersallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"5708ea356a684d66":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winprojexe160","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winprojexe160_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winprojexe160_1","displayName":"True","description":null,"helpText":null}]},"577c37d62958af0d":{"id":"device_vendor_msft_policy_config_quiettime_rangesettings_starttime","displayName":"Start","description":null,"helpText":null,"infoUrls":[],"categoryId":"39d1a447-308a-4a49-9716-3097b321da31","categoryName":null,"options":null},"5796c2718b0edfe6":{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforfeatureupdates","displayName":"Configure Deadline No Auto Reboot For Feature Updates","description":"When enabled, devices will not automatically restart outside of active hours until the deadline and grace period have expired for feature updates, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForFeatureUpdates is configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinenoautorebootforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforfeatureupdates_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforfeatureupdates_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"57d7486a6006613c":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edgedev","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},"57497c78b75df05b":{"id":"passcode_maximuminactivityinminutes","displayName":"Automatic Device Lock","description":"Specifies the maximum period that a user can select, during which the device can be idle before it is automatically locked by the system. Once this limit is reached, the device is locked and the passcode must be entered. In the absence of this key, the user can select any period.\nIn macOS, this will be translated to screensaver settings.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"57e2960c9be09525":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]},"57c4114836f115df":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion_am_instructlowriskinclusionlist","displayName":"Specify low risk extensions (include a leading period, e.g. .bmp;.gif;). (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":null},"574c5ea4ef65440d":{"id":"user_vendor_msft_policy_config_admx_globalization_preventuseroverrides_1","displayName":"Disallow user override of locale settings (User)","description":"This policy setting prevents the user from customizing their locale by changing their user overrides.\r\n\r\nAny existing overrides in place when this policy is enabled will be frozen. To remove existing user overrides, first reset the user(s) values to the defaults and then apply this policy.\r\n\r\nWhen this policy setting is enabled, users can still choose alternate locales installed on the system unless prevented by other policies, however, they will be unable to customize those choices. The user cannot customize their user locale with user overrides.\r\n\r\nIf this policy setting is disabled or not configured, then the user can customize their user locale overrides.\r\n\r\nIf this policy is set to Enabled at the computer level, then it cannot be disabled by a per-User policy. If this policy is set to Disabled at the computer level, then the per-User policy will be ignored. If this policy is set to Not Configured at the computer level, then restrictions will be based on per-User policies.\r\n\r\nTo set this policy on a per-user basis, make sure that the per-computer policy is set to Not Configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-preventuseroverrides-1"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_preventuseroverrides_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_preventuseroverrides_1_1","displayName":"Enabled","description":null,"helpText":null}]},"57cb5ddcb035d470":{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsmarketplace","displayName":"Hide \"Windows Marketplace\" (User)","description":"This setting prevents users from access the \"Get new programs from Windows Marketplace\" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs.\r\n\r\nWindows Marketplace allows users to purchase and/or download various programs to their computer for installation.\r\n\r\nEnabling this feature does not prevent users from navigating to Windows Marketplace using other methods. \r\n\r\nIf this feature is disabled or is not configured, the \"Get new programs from Windows Marketplace\" task link will be available to all users.\r\n\r\nNote: If the \"Hide Programs control Panel\" setting is enabled, this setting is ignored.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-nowindowsmarketplace"],"categoryId":"dc16dbf0-aac8-4ff3-a546-1ddb55650f47","categoryName":"Programs","options":[{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsmarketplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsmarketplace_1","displayName":"Enabled","description":null,"helpText":null}]},"57635c40f7bca5f1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback. (User)","description":"Following each major version update, Chrome will create a snapshot of certain portions of the user's browsing data for use in case of a later emergency version rollback. If an emergency rollback is performed to a version for which a user has a corresponding snapshot, the data in the snapshot is restored. This allows users to retain such settings as bookmarks and autofill data.\r\n\r\nIf this policy is not set, the default value of 3 is used\r\n\r\nIf the policy is set, old snapshots are deleted as needed to respect the limit. If the policy is set to 0, no snapshots will be taken","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"57cbd8e808502228":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_browserswitcherurllistdesc","displayName":"Websites to open in alternative browser (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"5758041fcdd8c8ad":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault","displayName":"Default printing page size (User)","description":"Overrides default printing page size.\r\n\r\nname should contain one of the listed formats or 'custom' if required paper size is not in the list. If 'custom' value is provided custom_size property should be specified. It describes the desired height and width in micrometers. Otherwise custom_size property shouldn't be specified. Policy that violates these rules is ignored.\r\n\r\nIf the page size is unavailable on the printer chosen by the user this policy is ignored.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=PrintingPaperSizeDefault for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"name\": \"custom\",\r\n \"custom_size\": {\r\n \"width\": 210000,\r\n \"height\": 297000\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"578dc7803b53f1ff":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections","displayName":"Allow remote access connections to this machine (User)","description":"If this policy is Disabled, the remote access host service cannot be started or configured to accept incoming connections. This policy does not affect remote support scenarios.\r\n\r\nThis policy has no effect if it is set to Enabled, left empty, or is not set.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections_1","displayName":"Enabled","description":null,"helpText":null}]},"577bcd004d576f26":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters","displayName":"Additional command line parameters for Google Chrome (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_1","displayName":"Enabled","description":null,"helpText":null}]},"57dc2fde22ef3760":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_persistentquotaenabled","displayName":"Force persistent quota to be enabled (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_persistentquotaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_persistentquotaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"57929b99f6430caf":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowscriptlets"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"57d97be3d1a65944":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin","displayName":"Browser sign-in settings (User)","description":"Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign on. To control the availability of sync, use the 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) policy instead.\r\n\r\nIf you set this policy to 'Disable browser sign-in', make sure that you also set the 'NonRemovableProfileEnabled' (Configure whether a user always has a default profile automatically signed in with their work or school account) policy to disabled because 'NonRemovableProfileEnabled' disables the creation of an automatically signed in browser profile. If both policies are set, Microsoft Edge will use the 'Disable browser sign-in' policy and behave as if 'NonRemovableProfileEnabled' is set to disabled.\r\n\r\nIf you set this policy to 'Enable browser sign-in' (1), users can sign into the browser. Signing into the browser doesn't mean that sync is turned on by default; the user must separately opt-in to use this feature.\r\n\r\nIf you set this policy to 'Force browser sign-in' (2) users must sign into a profile to use the browser. By default, this will allow the user to choose whether they want to sync to their account, unless sync is disabled by the domain admin or with the 'SyncDisabled' policy. The default value of 'BrowserGuestModeEnabled' (Enable guest mode) policy is set to false.\r\n\r\nIf you don't configure this policy users can decide if they want to enable the browser sign-in option and use it as they see fit.\r\n\r\n* 0 = Disable browser sign-in\r\n\r\n* 1 = Enable browser sign-in\r\n\r\n* 2 = Force users to sign-in to use the browser","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},"579b8fddccb4056c":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended","displayName":"Windows Hello For HTTP Auth Enabled (User)","description":"Indicates if Windows Credential UI should be used to respond to NTLM and Negotiate authentication challenges.\r\n\r\nIf you disable this policy, a basic username and password prompt will be used to respond to NTLM and Negotiate challenges. If you enable or don't configure this policy, Windows Credential UI will be used.","helpText":"","infoUrls":[],"categoryId":"6fafeb5c-65ce-4993-b421-46e60da69131","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"573f891de7d9634a":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (User)","description":"The feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is auto-filled into a web form. This ensures that non-authorized persons can't use saved passwords for autofill. Note that this feature does not protect against locally-running malware.\r\n\r\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\r\n\r\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill will not have any authentication flow.\r\n\r\nIf you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\r\n\r\nIf you set this policy to 'WithCustomPrimaryPassword', users will be asked to create their custom password and then to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords will get auto-filled after successful authentication. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\r\n\r\nIf you set this policy to 'AutofillOff', saved passwords will no longer be suggested for autofill.\r\n\r\nPolicy options mapping:\r\n\r\n* Automatically (0) = Automatically\r\n\r\n* WithDevicePassword (1) = With device password\r\n\r\n* WithCustomPrimaryPassword (2) = With custom primary password\r\n\r\n* AutofillOff (3) = Autofill off\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"5733302e2bf2db72":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastservicecreatesharednotes5","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastservicecreatesharednotes5_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastservicecreatesharednotes5_1","displayName":"True","description":null,"helpText":null}]},"57ea660acd0a9e21":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceemail_l_emaillabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"57fb899c29acc3ae":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yiddish","displayName":"Yiddish (User)","description":"Enables the editing language Yiddish","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yiddish_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yiddish_1","displayName":"Enabled","description":null,"helpText":null}]},"574281a11d697cbe":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_moreactionsurl_l_moreactionsurleditid","displayName":"More Actions URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"69931627-230d-4df9-bbef-e3eac64ea8ef","categoryName":"Additional Actions","options":null},"573fc05a6aff9948":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_setuncintervaltopollforchangesonfileservers","displayName":"Set UNC interval to poll for changes on file servers (User)","description":"This policy setting allows you to change the synchronization interval at which OneNote will poll for changes on the server. When OneNote synchronizes a notebook on UNC, also known as SMB or Windows File shares, OneNote will receive notifications from the file server as well as poll the server looking for new updates on the server.\r\n\r\nBy making the interval faster it will make OneNote synchronize faster, but it also might cause performance issues on the server.\r\n\r\nIf you enable this policy setting, you may specify the number of seconds OneNote will poll.\r\n\r\nIf you disable or do not configure this policy setting, OneNote will automatically poll every 30 seconds.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_setuncintervaltopollforchangesonfileservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_setuncintervaltopollforchangesonfileservers_1","displayName":"Enabled","description":null,"helpText":null}]},"570839d3290c7ea3":{"id":"user_vendor_msft_policy_config_outlk16v13~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_showoutlookloopcomponentsforsupportedapps","displayName":"Show Outlook Loop components for supported apps. (User)","description":"This policy controls whether Outlook displays Loop components that are supported by installed apps without requiring users to explicitly choose to load them.\r\n\r\nIf you enable this policy setting by selecting \"Always show automatically\" or \"Only show automatically within tenant,\" Outlook will automatically display Loop components in emails. This applies to all messages or specifically to messages that originate within the recipient's local tenant or organization. This might involve contacting servers used by the installed apps to retrieve Loop components.\r\n\r\nIf you do not set this policy setting, Outlook will default to the \"Only show automatically within tenant\" setting. This ensures Loop components are automatically displayed in emails originating from the recipient's local tenant or organization.\r\n\r\nNote: Loop components included in messages located in the Junk Mail folder will not load automatically, regardless of the policy setting specified. Loop components will only be shown for apps that are installed, ensuring security and a tailored experience in Outlook.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v13~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_showoutlookloopcomponentsforsupportedapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v13~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_showoutlookloopcomponentsforsupportedapps_1","displayName":"Enabled","description":null,"helpText":null}]},"5776feeace0e5110":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_showanadditionalcontactsindex","displayName":"Show an additional Contacts Index (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_showanadditionalcontactsindex_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_showanadditionalcontactsindex_1","displayName":"True","description":null,"helpText":null}]},"57c18874031b29f9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_nopromptlevel1send","displayName":"Do not prompt about Level 1 attachments when sending an item (User)","description":"This policy setting controls whether Outlook displays a warning before sending an item that contains an unsafe attachment that will be blocked when the item is opened by a recipient. To protect users from viruses and other harmful files, Outlook uses two levels of security, designated Level 1 and Level 2, to restrict access to files attached to e-mail messages or other items. Outlook completely blocks access to Level 1 files by default, and requires users to save Level 2 files to disk before opening them. Potentially harmful files can be classified into these two levels by file type extension, with all other file types considered safe. \r\n\r\nIf you enable this policy setting, Outlook will not display a warning when a user sends an item with a Level 1 attachment, which can cause users' data to be at risk.\r\n\r\nIf you disable or do not configure this policy setting, when users attempt to send an item to which a level 1 file has been attached, Outlook warns them that the message contains a potentially unsafe attachment and that the recipient might not be able to access it. \r\n\r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_nopromptlevel1send_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_nopromptlevel1send_1","displayName":"Enabled","description":null,"helpText":null}]},"575fc4474c6be4c4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo_l_enablesaveautorecoverinfo","displayName":"Enable save AutoRecover info (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo_l_enablesaveautorecoverinfo_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo_l_enablesaveautorecoverinfo_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/58.json b/public/intune-definitions/58.json new file mode 100644 index 000000000000..cf8925892203 --- /dev/null +++ b/public/intune-definitions/58.json @@ -0,0 +1 @@ +{"581407e8e88db8e3":{"id":"com.apple.managedclient.preferences_clearbrowsingdataonexit","displayName":"Clear browsing data when Microsoft Edge closes","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\n\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured \"DefaultCookiesSetting\"\n\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\n\nIf you enable this policy, don't enable the \"AllowDeletingBrowserHistory\" policy, because they both deal with deleting data. If you enable both, this policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured \"AllowDeletingBrowserHistory\".","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#clearbrowsingdataonexit"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_clearbrowsingdataonexit_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_clearbrowsingdataonexit_true","displayName":"Enabled","description":null,"helpText":null}]},"5869bbdc83a66b9d":{"id":"com.apple.managedclient.preferences_importautofillformdata","displayName":"Allow importing of autofill form data","description":"Allows users to import autofill form data from another browser into Microsoft Edge.\n\nIf you enable this policy, the option to manually import autofill data is automatically selected.\n\nIf you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.\n\nIf you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.\n\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importautofillformdata"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importautofillformdata_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importautofillformdata_true","displayName":"Enabled","description":null,"helpText":null}]},"58deb8303bd3075d":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on lan","displayName":"Wake on LAN","description":"If true, enables \"Wake for network access.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on lan_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on lan_1","displayName":"True","description":null,"helpText":null}]},"58ec1a2b8c390dc7":{"id":"com.apple.mcxprinting_defaultprinter_deviceuri","displayName":"Device URI","description":"The device URI.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"58830130419e66de":{"id":"com.apple.proxy.http.global_com.apple.proxy.http.global","displayName":"Top Level Setting Group Collection","description":"com.apple.proxy.http.global","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":null},"583afe396de975c8":{"id":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountsigninassistant","displayName":"Allow Microsoft Account Sign In Assistant","description":"Allows IT Admins the ability to disable the Microsoft Account Sign-In Assistant (wlidsvc) NT service. Note If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See Feature updates are not being offered while other updates are. Note: If the MSA service is disabled, the Subscription Activation feature will not work properly and your users will not be able to “step-up” from Windows 10 Pro to Windows 10 Enterprise, because the MSA ticket for license authentication cannot be generated. The machine will remain on Windows 10 Pro and no error will be displayed in the Activation Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Accounts#AllowMicrosoftAccountSignInAssistant"],"categoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","categoryName":"Accounts","options":[{"id":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountsigninassistant_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountsigninassistant_1","displayName":"Manual start","description":"Manual start","helpText":null}]},"58d7da81216ebcd8":{"id":"device_vendor_msft_policy_config_admx_kerberos_stricttarget","displayName":"Require strict target SPN match on remote procedure calls","description":" This policy setting allows you to configure this server so that Kerberos can decrypt a ticket that contains this system-generated SPN. When an application attempts to make a remote procedure call (RPC) to this server with a NULL value for the service principal name (SPN), computers running Windows 7 or later attempt to use Kerberos by generating an SPN.\r\n \r\nIf you enable this policy setting, only services running as LocalSystem or NetworkService are allowed to accept these connections. Services running as identities different from LocalSystem or NetworkService might fail to authenticate.\r\n\r\nIf you disable or do not configure this policy setting, any service is allowed to accept incoming connections by using this system-generated SPN.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-stricttarget"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_stricttarget_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_stricttarget_1","displayName":"Enabled","description":null,"helpText":null}]},"58b68aee897d6f3d":{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_enablehandlecachingforcafiles","displayName":"Handle Caching on Continuous Availability Shares","description":"\r\n This policy setting determines the behavior of SMB handle caching for clients connecting to an SMB share where the Continuous Availability (CA) flag is enabled.\r\n\r\n If you enable this policy setting, the SMB client will allow cached handles to files on CA shares. This may lead to better performance when repeatedly accessing a large number of unstructured data files on CA shares running in Microsoft Azure Files.\r\n\r\n If you disable or do not configure this policy setting, Windows will prevent use of cached handles to files opened through CA shares.\r\n\r\n Note: This policy has no effect when connecting Scale-out File Server shares provided by a Windows Server. Microsoft does not recommend enabling this policy for clients that routinely connect to files hosted on a Windows Failover Cluster with the File Server for General Use role, as it can lead to adverse failover times and increased memory and CPU usage.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-lanmanworkstation#admx-lanmanworkstation-pol-enablehandlecachingforcafiles"],"categoryId":"88a2c40a-7b95-4fd8-8ad8-81dc61d4adf5","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_enablehandlecachingforcafiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_enablehandlecachingforcafiles_1","displayName":"Enabled","description":null,"helpText":null}]},"5829337017dc1b49":{"id":"device_vendor_msft_policy_config_admx_printing_domainprinters_adprinters","displayName":"Number of directory printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"581c3b3a2e6ca0f0":{"id":"device_vendor_msft_policy_config_admx_startmenu_notraycontextmenu","displayName":"Remove access to the context menus for the taskbar","description":"This policy setting allows you to remove access to the context menus for the taskbar.\n\nIf you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.\n\nIf you disable or do not configure this policy setting, the context menus for the taskbar are available.\n\nThis policy setting does not prevent users from using other methods to issue the commands that appear on these menus.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notraycontextmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_notraycontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_notraycontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"581cc90f584ef978":{"id":"device_vendor_msft_policy_config_browser_allowdevelopertools","displayName":"Allow Developer Tools","description":"This setting lets you decide whether employees can use F12 Developer Tools on Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowdevelopertools"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowdevelopertools_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowdevelopertools_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"583c0cb7d5dd9a26":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting","displayName":"Default popups setting","description":"Setting the policy to 1 lets websites display pop-ups. Setting the policy to 2 denies pop-ups.\r\n\r\nLeaving it unset means BlockPopups applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"58c32928ced02e47":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls","displayName":"Block the File Handling API on these web apps","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"58119bf758930666":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled","displayName":"Enable 3DES cipher suites in TLS","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"58880c79831a7f3c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent","displayName":"Freeze User-Agent string major version at 99","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_1","displayName":"Enabled","description":null,"helpText":null}]},"58f68e060ca21386":{"id":"device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests","displayName":"Disallow Network Connectivity Active Tests","description":"Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to http://www.msftconnecttest.com/connecttest.txt to determine if the device can communicate with the Internet. This policy disables the NCSI active probe, preventing network connectivity to www. msftconnecttest. com. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#disallownetworkconnectivityactivetests"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests_0","displayName":"Block","description":"Block","helpText":null}]},"58306ffb9c899e37":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_logginglogkeepingperiod","displayName":"Log Keeping Period (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":null},"58d9afb30b28c074":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"58ee343943c9b431":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonenavigatewindowsandframes"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"584033aa3c19401b":{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder_forestsearchlist","displayName":"Forests to Search","description":"","helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"582c13e7a38209fa":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history","description":"Enables deleting browser history and download history and prevents users from changing this setting.\r\n\r\nNote that even with this policy is disabled, the browsing and download history aren't guaranteed to be retained: users can edit or delete the history database files directly, and the browser itself may remove (based on expiration period) or archive any or all history items at any time.\r\n\r\nIf you enable this policy or don't configure it, users can delete the browsing and download history.\r\n\r\nIf you disable this policy, users can't delete browsing and download history.\r\n\r\nIf you enable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you enable both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how this policy is configured.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"587e5b56a9612115":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_restoreonstartupurlsdesc","displayName":"Sites to open when the browser starts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"5828fb84503eda6b":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup","displayName":"Allow the Search bar at Windows startup","description":"Allows the Search bar to start running at Windows startup.\r\n\r\nIf you enable:\r\n The Search bar will start running at Windows startup by default.\r\n If the Search bar is disabled via 'SearchbarAllowed' (Enable the Search bar) policy, this policy will not start the Search bar on Windows startup.\r\n\r\nIf you disable this policy:\r\n The Search bar will not start at Windows startup for all profiles.\r\n The option to start the search bar at Windows startup will be disabled and toggled off in search bar settings.\r\n\r\nIf you don't configure the policy:\r\n The Search bar will not start at Windows startup for all profiles.\r\n The option to start the search bar at Windows startup will be toggled off in search bar settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"58156be2d69db28a":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled","displayName":"Configure the list of types that are excluded from synchronization","description":"If you enable this policy all the specified data types will be excluded from synchronization. This policy can be used to limit the type of data uploaded to the Microsoft Edge synchronization service.\r\n\r\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", and “collections”. Note that these data type names are case sensitive.\r\n\r\nUsers will not be able to override the disabled data types.\r\n\r\nExample value:\r\n\r\nfavorites","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"58ef80a33d817c53":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload","displayName":"Require that the Enterprise Mode Site List is available before tab navigation","description":"Lets you specify whether Microsoft Edge tabs wait to navigate until the browser has downloaded the initial Enterprise Mode Site List. This setting is intended for the scenario where the browser home page should load in Internet Explorer mode, and it is important that is does so on browser first run after IE mode is enabled. If this scenario does not exist, we recommend not enabling this setting because it can negatively impact the performance of loading the home page. The setting only applies when Microsoft Edge does not have a cached Enterprise Mode Site List, such as on browser first run after IE mode is enabled.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nThe timeout behavior of this policy can be configured with the 'NavigationDelayForInitialSiteListDownloadTimeout' (Set a timeout for delay of tab navigation for the Enterprise Mode Site List) policy.\r\n\r\nIf you set this policy to 1, when Microsoft Edge does not have a cached version of the Enterprise Mode Site List, tabs delay navigating until the browser has downloaded the site list. Sites configured to open in Internet Explorer mode by the site list will load in Internet Explorer mode, even during the initial navigation of the browser. Sites that cannot possibly be configured to open in Internet Explorer, such as any site with a scheme other than http:, https:, file:, or ftp: do not delay navigating and load immediately in Edge mode.\r\n\r\nIf you set this policy to 0 or don't configure it, when Microsoft Edge does not have a cached version of the Enterprise Mode Site List, tabs will navigate immediately, and not wait for the browser to download the Enterprise Mode Site List. Sites configured to open in Internet Explorer mode by the site list will open in Microsoft Edge mode until the browser has finished downloading the Enterprise Mode Site List.\r\n\r\n* 0 = None\r\n\r\n* 1 = All eligible navigations","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_1","displayName":"Enabled","description":null,"helpText":null}]},"58fe7033dfa22500":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled","displayName":"Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge","description":"Note: The web capture feature is rebranded to \"Screenshot\".\r\n\r\nEnables the Screenshot feature in Microsoft Edge. This feature lets users capture web and PDF content, and annotate captures using inking tools. Users can also do a visual image search based on the captured content.\r\n\r\nIf you enable or don't configure this policy, the Screenshot option appears in the context menu, the Settings and more menu, and by using the keyboard shortcut, CTRL+SHIFT+S.\r\n\r\nIf you disable this policy, users can't access this feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"584683b73aa6fd65":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_smartactionsblocklistdesc","displayName":"Block smart actions for a list of services (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":null},"5807be5e12900f3b":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled","displayName":"Allow quick links on the new tab page","description":"If you enable or don't configure this policy, Microsoft Edge displays quick links on the new tab page, and the user can interact with the control, turning quick links on and off. Enabling this policy does not force quick links to be visible - the user can continue to turn quick links on and off.\r\n\r\nIf you disable this policy, Microsoft Edge hides quick links on the new tab page and disables the quick links control in the NTP settings flyout.\r\n\r\nThis policy only applies for Microsoft Edge local user profiles, profiles signed in using a Microsoft Account, and profiles signed in using Active Directory. To configure the Enterprise new tab page for profiles signed in using Azure Active Directory, use the M365 admin portal.\r\n\r\nRelated policies: 'NewTabPageAllowedBackgroundTypes' (Configure the background types allowed for the new tab page layout), 'NewTabPageContentEnabled' (Allow Microsoft content on the new tab page)","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"58c2ac772f5b73a0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_onenoteexe194","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_onenoteexe194_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_onenoteexe194_1","displayName":"True","description":null,"helpText":null}]},"58251d19fb3290f5":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_grooveexe84","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_grooveexe84_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_grooveexe84_1","displayName":"True","description":null,"helpText":null}]},"58281e6681c81dae":{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_l_listofexternalconvertersppt_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"686ae3dd-a663-4484-854e-8f8d578fe3b8","categoryName":"Converters","options":null},"58648fc498428905":{"id":"device_vendor_msft_policy_config_start_hiderecentlyaddedapps","displayName":"Hide Recently Added Apps","description":"Enabling this policy hides recently added apps from appearing on the start menu and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderecentlyaddedapps"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hiderecentlyaddedapps_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hiderecentlyaddedapps_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"589427677ffc646c":{"id":"device_vendor_msft_policy_config_userrights_denyremotedesktopserviceslogon","displayName":"Deny Remote Desktop Services Log On","description":"This user right determines which users and groups are prohibited from logging on as a Remote Desktop Services client.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denyremotedesktopserviceslogon"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"5841a52cc65438da":{"id":"device_vendor_msft_policy_config_visualstudiov7~policy~visualstudio~copilotsettings_disableagentmode","displayName":"Disable Agent Mode","description":"If this setting is enabled, it will prevent your users from using GitHub Copilot's Agent mode. For more information, see: https://aka.ms/CopilotGroupPolicy","helpText":"","infoUrls":[],"categoryId":"652a676c-9d60-4c9a-88b6-823a24961a9b","categoryName":"Copilot Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov7~policy~visualstudio~copilotsettings_disableagentmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov7~policy~visualstudio~copilotsettings_disableagentmode_1","displayName":"Enabled","description":null,"helpText":null}]},"588cab9e9ec8fa45":{"id":"safari_privacy_permissiondefaults_generickey_microphone","displayName":"Microphone","description":"Controls whether a website privacy permission default is set.\n* `None`: Safari sets no website privacy permission default for use of the microphone.\n* `Allow`: Safari sets the website privacy permission default to allow use of the microphone.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_privacy_permissiondefaults_generickey_microphone_0","displayName":"None","description":null,"helpText":null},{"id":"safari_privacy_permissiondefaults_generickey_microphone_1","displayName":"Allow","description":null,"helpText":null}]},"58b55ac4d5cff69c":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_failoverclusters","displayName":"Failover Clusters Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-failoverclusters"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_failoverclusters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_failoverclusters_1","displayName":"Enabled","description":null,"helpText":null}]},"589d613064b59e99":{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyread_access_1","displayName":"CD and DVD: Deny read access (User)","description":"This policy setting denies read access to the CD and DVD removable storage class.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-cdanddvd-denyread-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"58d329358854d366":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010infopath","displayName":"Microsoft InfoPath 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft InfoPath 2010.\r\nBy default, the user settings of Microsoft InfoPath 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft InfoPath 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft InfoPath 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010infopath"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010infopath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010infopath_1","displayName":"Enabled","description":null,"helpText":null}]},"581a9e0d72b3769b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled","displayName":"Use built-in DNS client (User)","description":"This policy controls which software stack is used to communicate with the DNS server: the Operating System DNS client, or Google Chrome's built-in DNS client. This policy does not affect which DNS servers are used: if, for example, the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It also does not control if DNS-over-HTTPS is used; Google Chrome will always use the built-in resolver for DNS-over-HTTPS requests. Please see the DnsOverHttpsMode policy for information on controlling DNS-over-HTTPS.\r\n\r\nIf this policy is set to Enabled, the built-in DNS client will be used, if available.\r\n\r\nIf this policy is set to Disabled, the built-in DNS client will only be used when DNS-over-HTTPS is in use.\r\n\r\nIf this policy is left unset, the built-in DNS client will be enabled by default on macOS, Android (when neither Private DNS nor VPN are enabled) and Google Chrome OS.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"589e42eea3ffde31":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting","displayName":"Default clipboard setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting_2","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting_3","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},"58a805e9724be1f1":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showinsertoptionsbuttons","displayName":"Show Insert Options buttons (User)","description":"This policy setting sets the \"Show Insert Options buttons\" option found under File tab | Options | Advanced | Cut, copy, and paste options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will show the Insert Options button after inserting cells, rows, or columns that contain formatting. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will not display the Insert Options buttons on insert.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showinsertoptionsbuttons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showinsertoptionsbuttons_1","displayName":"Enabled","description":null,"helpText":null}]},"58dcb017458f96ed":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_descriptioncolon31","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"58d915116258d75f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_pathcolon57","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"580c40aa9c1f43ea":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_authschemes","displayName":"Supported authentication schemes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"584078b90b665df9":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (User)","description":"Control if users can turn on Developer Mode on edge://extensions.\r\n\r\nIf the policy isn't set, users can turn on developer mode on the extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\r\nIf the policy is set to Allow (0), users can turn on developer mode on the extensions page.\r\nIf the policy is set to Disallow (1), users cannot turn on developer mode on the extensions page.\r\n\r\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.\r\n\r\nPolicy options mapping:\r\n\r\n* Allow (0) = Allow the usage of developer mode on extensions page\r\n\r\n* Disallow (1) = Do not allow the usage of developer mode on extensions page\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"58ece771779f6347":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sesothosaleboa","displayName":"Sesotho sa Leboa (User)","description":"Enables the editing language Sesotho sa Leboa","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sesothosaleboa_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sesothosaleboa_1","displayName":"Enabled","description":null,"helpText":null}]},"585449a3663d7237":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_allowuserswithearlierversionsofofficetoreadwithbrowsers","displayName":"Allow users with earlier versions of Office to read with browsers... (User)","description":"This policy setting will allow users with earlier versions of Office to read documents with browsers supporting Information Rights Management.\r\n\r\nIf you enable this policy setting, users with earlier versions of Office can read documents with browsers supporting Information Rights Management. Note that this will make all documents with restricted permissions larger.\r\n\r\nIf you disable or do not configure this policy setting, users with earlier versions of Office cannot read documents with browsers supporting Information Rights Management.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_allowuserswithearlierversionsofofficetoreadwithbrowsers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_allowuserswithearlierversionsofofficetoreadwithbrowsers_1","displayName":"Enabled","description":null,"helpText":null}]},"58180712b64bcab0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifytimestampservername","displayName":"Specify timestamp server name (User)","description":"This policy setting allows you to set the HTTP URL for the timestamp server used by Office 2016 applications in the process of validating messages or documents.\r\n\r\nIf you enable this policy setting, you must provide a valid HTTP URL address for the timestamp server. \r\n\r\nIf you do disable or not configure this policy setting, a timestamp server will not be used.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifytimestampservername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifytimestampservername_1","displayName":"Enabled","description":null,"helpText":null}]},"58f327c09b31452f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc03_l_pathcolon03","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"58aae251867e456d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultspcatalog_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"58b1f7932c402fae":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffcameraandmicrophoneinapplicationguard","displayName":"Turn off camera and microphone access for Office apps using Application Guard. (User)","description":"The policy allows you to control whether Office apps using Application Guard can access the user's camera and microphone if they're enabled on the user's device.\r\n\r\nImportant: A compromised Application Guard container could bypass camera and microphone permissions and access the camera and microphone without the user’s knowledge. To prevent unauthorized access, we recommend that the camera and microphone be turned off on the user’s device when they aren’t needed.\r\n\r\nIf you enable this policy setting, Office apps using Application Guard won't be able to access the camera and microphone on the user’s device. \r\n\r\nIf you disable or don't configure this policy setting, Office apps using Application Guard will be able to access the camera and microphone on the user’s device.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffcameraandmicrophoneinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffcameraandmicrophoneinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"589da595db43eb18":{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffblockingofunsupportedfiletypesinapplicationguard","displayName":"Turn off protection of unsupported file types in Application Guard for Office. (User)","description":"This policy setting controls whether Application Guard for Office will block unsupported file types from being opened in Office apps or if it will enable the redirection to Protected View.\r\n\r\nIf you enable this setting, Application Guard for Office will redirect unsupported file types to Protected View in Office apps.\r\n\r\nImportant: Be aware that enabling this policy setting might pose a risk to the user's device.\r\n\r\nIf you disable or don't configure this setting, Application Guard for Office will block unsupported file types in Office apps.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffblockingofunsupportedfiletypesinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffblockingofunsupportedfiletypesinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"586d794cd1a48540":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_turnoffonenoteautolinkednotetaking","displayName":"Turn off OneNote auto-linked note taking (User)","description":"This policy setting turns off the OneNote auto note taking feature which allows you to take notes on items such as webpages, Word documents, etc. OneNote will automatically record what pages or document you were viewing when you took this note.\r\n\r\nIf you enable this policy setting, OneNote will not automatically link notes when the user tries to turn on this feature.\r\n\r\nIf you disable or do not enable this policy, OneNote will automatically link notes when the user tries to turn on this feature.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_turnoffonenoteautolinkednotetaking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_turnoffonenoteautolinkednotetaking_1","displayName":"Enabled","description":null,"helpText":null}]},"5856e7c2830787f0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_restrictuploadmethod","displayName":"Restrict upload method (User)","description":"This policy setting controls whether Outlook can automatically upload calendar updates to Office.com. \r\n\r\nIf you enable this policy setting, Outlook enforces the \"Single Upload: Updates will not be uploaded from the Published Calendar Settings dialog\" option, and calendar updates are not uploaded. Users will not be able to change this setting.\r\n\r\nIf you disable this policy setting Outlook automatically publishes calendar updates to Office.com at regular intervals and users will not be able to change this. \r\n\r\nIf you do not configure this policy setting, when users publish their calendar to Office.com using the Microsoft Outlook Calendar Sharing Service, Outlook updates the calendars online at regular intervals unless they click \"Advanced\" and select \"Single Upload: Updates will not be uploaded from the Published Calendar Settings dialog\".","helpText":"","infoUrls":[],"categoryId":"34c07941-8f52-43ad-b0ca-a7284655afb4","categoryName":"Office.com Sharing Service","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_restrictuploadmethod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_restrictuploadmethod_1","displayName":"Enabled","description":null,"helpText":null}]},"581e63773b5bfb6a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeininmillisec_l_millisec","displayName":"Millisec: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"581c3a079bf63490":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_openresultsnewwindow","displayName":"Open results new window (User)","description":"Indicates whether a new search results stencil is created for every search. If cleared, the results of a search replace the results of any previous search.","helpText":"","infoUrls":[],"categoryId":"98cefd27-a980-4070-ba45-3696b623810d","categoryName":"Shape Search","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_openresultsnewwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_openresultsnewwindow_1","displayName":"Enabled","description":null,"helpText":null}]},"5859ece7970c1031":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchvariantformkanjiitaiji","displayName":"Match variant-form kanji (itaiji) (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchvariantformkanjiitaiji_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchvariantformkanjiitaiji_1","displayName":"Enabled","description":null,"helpText":null}]},"587871bc97c4b2ec":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_compareresultingdocument","displayName":"Compare resulting document (User)","description":"This option determines whether the results of a document compare or combine will appear in a new document or one of the source documents. This corresponds to the option in the Compare dialog box ( Review ribbon | Compare | more options).","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_compareresultingdocument_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_compareresultingdocument_1","displayName":"Enabled","description":null,"helpText":null}]},"5895aec561bd8558":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_enablefirewall","displayName":"Enable Domain Network Firewall","description":"This value is an on/off switch for the Hyper-V Firewall enforcement.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_enablefirewall_false","displayName":"False","description":"Disable Firewall","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_enablefirewall_true","displayName":"True","description":"Enable Firewall","helpText":null}]},"5856f8b79f2b4ec6":{"id":"vendor_msft_firewall_mdmstore_publicprofile_logmaxfilesize","displayName":"Log Max File Size","description":"This value specifies the size, in kilobytes, of the log file where dropped packets and successful connections are logged. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured, otherwise the MdmStore value wins if it is configured, otherwise the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"58a2921b189e25ec":{"id":"vendor_msft_sharedpc_enablesharedpcmodewithonedrivesync","displayName":"Enable Shared PC Mode With One Drive Sync","description":"Setting this node to “1” triggers the action to configure a device to Shared PC mode with OneDrive sync turned on","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/SharedPC-csp/"],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_enablesharedpcmodewithonedrivesync_false","displayName":"Not configured","description":"Not configured","helpText":null},{"id":"vendor_msft_sharedpc_enablesharedpcmodewithonedrivesync_true","displayName":"Enabled","description":"Enabled","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/59.json b/public/intune-definitions/59.json new file mode 100644 index 000000000000..ffcf97dd407e --- /dev/null +++ b/public/intune-definitions/59.json @@ -0,0 +1 @@ +{"59a65b60b1d63f40":{"id":".globalpreferences_.globalpreferences","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"1829cdc1-1bed-4058-9aba-9b778cd3d955","categoryName":"Global Preferences","options":null},"59647e905ad71747":{"id":"com.apple.applicationaccess_safariacceptcookies","displayName":"Safari Accept Cookies","description":"This value defines the conditions under which the device accepts cookies. The user-facing settings changed in iOS 11, although the possible values remain the same. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_safariacceptcookies_0","displayName":"Prevent Cross-Site Tracking and Block All Cookies are enabled and the user canʼt disable either setting.","description":null,"helpText":null},{"id":"com.apple.applicationaccess_safariacceptcookies_1","displayName":"Prevent Cross-Site Tracking is enabled and the user canʼt disable it. Block All Cookies is not enabled, although the user can enable it.","description":null,"helpText":null},{"id":"com.apple.applicationaccess_safariacceptcookies_2","displayName":"Prevent Cross-Site Tracking is enabled and Block All Cookies is not enabled. The user can toggle either setting.","description":null,"helpText":null}]},"59bca7058192f801":{"id":"com.apple.cellular_attachapn_password","displayName":"Password","description":"The password for the APN.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"5970974bbe55bc2b":{"id":"com.apple.dnssettings.managed_ondemandrules_item_ssidmatch","displayName":"SSID Match","description":"An array of SSIDs to match against the current network. If the network is not a Wi-Fi network or if the SSID does not appear in this array, the match fails. Omit this key and the corresponding array to match against any SSID.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"59251eb09e97aac9":{"id":"com.apple.managedclient.preferences_urlblocklist","displayName":"Block access to a list of URLs","description":"Define a list of sites, based on URL patterns, that are blocked (your users can't load them).\n\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\n\nYou can define exceptions in the \"URLAllowlist\" policy. These policies are limited to 1000 entries; subsequent entries are ignored.\n\nNote that blocking internal 'edge://*' URLs isn't recommended - this may lead to unexpected errors.\n\nThis policy doesn't prevent the page from updating dynamically through JavaScript. For example, if you block 'contoso.com/abc', users might still be able to visit 'contoso.com' and click on a link to visit 'contoso.com/abc', as long as the page doesn't refresh.\n\nIf you don't configure this policy, no URLs are blocked.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#urlblocklist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"598d800d600f97df":{"id":"com.apple.mcxmenuextras_pppoe.menu","displayName":"PPPoE","description":"If true, enables the PPPoE menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_pppoe.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_pppoe.menu_true","displayName":"True","description":null,"helpText":null}]},"590f42edd02dc4a4":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"5922720306d4e177":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osactivedirectorybackupdropdown_name","displayName":"Configure storage of BitLocker recovery information to AD DS:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osactivedirectorybackupdropdown_name_1","displayName":"Store recovery passwords and key packages","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osactivedirectorybackupdropdown_name_2","displayName":"Store recovery passwords only","description":null,"helpText":null}]},"59828e7aa6f30be7":{"id":"device_vendor_msft_defender_configuration_allowdatagramprocessingonwinserver","displayName":"Allow Datagram Processing On Win Server","description":"This settings controls whether Network Protection is allowed to enable datagram processing on Windows Server. If false, the value of DisableDatagramProcessing will be ignored and default to disabling Datagram inspection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_allowdatagramprocessingonwinserver_1","displayName":"Datagram processing on Windows Server is enabled.","description":"Datagram processing on Windows Server is enabled.","helpText":null},{"id":"device_vendor_msft_defender_configuration_allowdatagramprocessingonwinserver_0","displayName":"Datagram processing on Windows Server is disabled.","description":"Datagram processing on Windows Server is disabled.","helpText":null}]},"59094eae172dd0e7":{"id":"device_vendor_msft_defender_configuration_disablehttpparsing","displayName":"Disable Http Parsing","description":"This setting disables HTTP Parsing for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablehttpparsing_1","displayName":"HTTP parsing is disabled","description":"HTTP parsing is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablehttpparsing_0","displayName":"HTTP parsing is enabled","description":"HTTP parsing is enabled","helpText":null}]},"5930e13b75b94c4b":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_2_transferrateop2","displayName":"Connection speed (Kbps):","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"59280d629b838816":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_prohibitonprivatenet","displayName":"Prohibit operation while in private network","description":null,"helpText":"","infoUrls":[],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_prohibitonprivatenet_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_prohibitonprivatenet_1","displayName":"True","description":null,"helpText":null}]},"59af6476acf22501":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_slowlinksettings_lbl_slowlinksettingslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"5973f1f22c0dcac4":{"id":"device_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer","displayName":"Send Intranet Trafficto Internet Explorer","description":"Sends all intranet traffic over to Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#sendintranettraffictointernetexplorer"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer_0","displayName":"Disabled","description":"All sites, including intranet sites, open in Microsoft Edge automatically.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer_1","displayName":"Enabled","description":"Only intranet sites open in Internet Explorer 11 automatically.","helpText":null}]},"5927d97a5eb87737":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled","displayName":"Enable alternate error pages","description":"Setting the policy to True means Google Chrome uses alternate error pages built into (such as \"page not found\"). Setting the policy to False means Google Chrome never uses alternate error pages.\r\n\r\nIf you set the policy, users can't change it. If not set, the policy is on, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"59c967c1e0226277":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled","displayName":"Specifies whether WebAssembly modules can be sent cross-origin","description":"\r\nSpecifies whether WebAssembly modules can be sent to another window or worker cross-origin. Cross-origin WebAssembly module sharing will be deprecated as part of the efforts to deprecate document.domain, see https://github.com/mikewest/deprecating-document-domain. This policy allows to re-enable cross-origin WebAssembly module sharing to offer a longer transition period in the deprecation process.\r\n\r\nWhen set to True, sites can send WebAssembly modules also cross-origin without restrictions.\r\n\r\nWhen set to False or not set, sites can only send WebAssembly modules to windows and workers in the same origin.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"59dd57beca3635d8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant extended background lifetime to the connecting extensions.","description":"Extensions that connect to one of these origins will be be kept running as long as the port is connected.\r\n\r\nIf unset, the policy's default values will be used. These are app origins that offer SDKs that are known to not offer the possibility to restart a closed connection to a previous state:\r\n- Smart Card Connector\r\n- Citrix Receiver (stable, beta, back-up)\r\n- VMware Horizon (stable, beta)\r\n\r\nIf set, the default value list is extended with the newly configured values. Both defaults and the policy-provided entries will grant the exception to the connecting extensions, as long as the port is connected.\r\n\r\nExample value:\r\n\r\nchrome-extension://abcdefghijklmnopabcdefghijklmnop/\r\nchrome-extension://bcdefghijklmnopabcdefghijklmnopa/","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1","displayName":"Enabled","description":null,"helpText":null}]},"593597ed9cf1f83d":{"id":"device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures","displayName":"Allow Windows Consumer Features","description":"This policy allows IT admins to turn on experiences that are typically for consumers only, such as Start suggestions, Membership notifications, Post-OOBE app install and redirect tiles.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#allowwindowsconsumerfeatures"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"59a6662f28c2a5a6":{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard","displayName":"Prevent running First Run wizard","description":"This policy setting prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows.\n\nIf you enable this policy setting, you must make one of the following choices:\n • Skip the First Run wizard, and go directly to the user's home page.\n • Skip the First Run wizard, and go directly to the \"Welcome to Internet Explorer\" webpage.\n\nStarting with Windows 8, the \"Welcome to Internet Explorer\" webpage is not available. The user's home page will display regardless of which option is chosen.\n\nIf you disable or do not configure this policy setting, Internet Explorer may run the First Run wizard the first time the browser is started after installation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablefirstrunwizard"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_1","displayName":"Enabled","description":null,"helpText":null}]},"59ba779eb3a18c93":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102","displayName":"Allow script-initiated windows without size or position constraints","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_3","displayName":"Disable","description":null,"helpText":null}]},"593135ecbf649077":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients","displayName":"Network Security Minimum Session Security For NTLMSSP Based Clients","description":"Network security: Minimum session security for NTLM SSP based (including secure RPC) clients This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated. Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. Default: Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. Windows 7 and Windows Server 2008 R2: Require 128-bit encryption","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_minimumsessionsecurityforntlmsspbasedclients"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_0","displayName":"None","description":"None","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_524288","displayName":"Require NTLMv2 session security","description":"Require NTLMv2 session security","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_536870912","displayName":"Require 128-bit encryption","description":"Require 128-bit encryption","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_537395200","displayName":"Require NTLM and 128-bit encryption","description":"Require NTLM and 128-bit encryption","helpText":null}]},"59279a2c540447c3":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_webcontentfilteringblockedcategoriesdesc","displayName":"List of blocked categories (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"59338561f8873b0f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword","displayName":"Disable user name and password","description":"Disable user name and password","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_1","displayName":"Enabled","description":null,"helpText":null}]},"59a9d236b2ab9378":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_pptviewexe130","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_pptviewexe130_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_pptviewexe130_1","displayName":"True","description":null,"helpText":null}]},"598c40ae922e7bf9":{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakespluggedin","displayName":"Require a password when a computer wakes (plugged in)","description":"This policy setting specifies whether or not the user is prompted for a password when the system resumes from sleep.\n\nIf you enable or do not configure this policy setting, the user is prompted for a password when the system resumes from sleep.\n\nIf you disable this policy setting, the user is not prompted for a password when the system resumes from sleep.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-requirepasswordwhencomputerwakespluggedin"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakespluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakespluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},"593a014373fa609f":{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts_trustedhosts_list","displayName":"TrustedHostsList:","description":"","helpText":"","infoUrls":[],"categoryId":"0f6d725e-2c2d-4926-8e78-3d2d5867eef5","categoryName":"Win RM Client","options":null},"590572b7a5da101d":{"id":"device_vendor_msft_policy_config_textinput_allowkeyboardtextsuggestions","displayName":"Allow Keyboard Text Suggestions","description":"Note The policy is only enforced in Windows 10 for desktop. Specifies whether text prediction is enabled or disabled for the on-screen keyboard, touch keyboard, and handwriting recognition tool. When this policy is set to disabled, text prediction is disabled. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowkeyboardtextsuggestions"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowkeyboardtextsuggestions_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowkeyboardtextsuggestions_1","displayName":"Allow","description":"Enabled.","helpText":null}]},"598ac053d42e807f":{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy","displayName":"Turn off automatic updates for Windows App","description":"Controls how the Windows App checks for and installs updates.\n\nIf you enable this policy, choose one of the following options:\n \n Enable updates: Windows App will automatically check for and install updates from all sources.\n Disable updates from all locations: Windows App will not check for or install updates from any source.\n Disable updates from the Microsoft Store: Windows App will not download updates from the Microsoft Store but may still update from other sources.\n Disable updates from non-store CDN location: Windows App will not download updates from non-store CDN sources but may still update from the Microsoft Store.\n\nIf you disable or do not configure this policy, automatic updates are enabled for Windows App.\n ","helpText":"","infoUrls":[],"categoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","categoryName":"Windows App","options":[{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"59b90277088e95ae":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the Internet (User)","description":"\r\n This policy setting allows you to block macros from running in Office files that come from the Internet.\r\n\r\n If you enable this policy setting, macros are blocked from running, even if “Enable all macros” is selected in the Macro Settings section of the Trust Center. Also, instead of having the choice to “Enable Content,” users will receive a notification that macros are blocked from running. If the Office file is saved to a trusted location or was previously trusted by the user, macros will be allowed to run.\r\n\r\n If you disable or don’t configure this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the Internet.\r\n ","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"598adfaea103589f":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy","displayName":"VBA Macro Notification Settings (User)","description":"This policy setting controls how the specified applications warn users when Visual Basic for Applications (VBA) macros are present.\r\n\r\nIf you enable this policy setting, you can choose from four options for determining how the specified applications will warn the user about macros:\r\n \r\n- Disable all with notification: The application displays the Trust Bar for all macros, whether signed or unsigned. This option enforces the default configuration in Office.\r\n \r\n- Disable all except digitally signed macros: The application displays the Trust Bar for digitally signed macros, allowing users to enable them or leave them disabled. Any unsigned macros are disabled, and users are not notified.\r\n \r\n- Disable all without notification: The application disables all macros, whether signed or unsigned, and does not notify users.\r\n \r\n- Enable all macros (not recommended): All macros are enabled, whether signed or unsigned. This option can significantly reduce security by allowing dangerous code to run undetected.\r\n \r\nIf you disable this policy setting, \"Disable all with notification\" will be the default setting.\r\n \r\nIf you do not configure this policy setting, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking \"Enable Content\" on the Trust Bar. If the user clicks \"Enable Content\", then the document is added as a trusted document.\r\n \r\nImportant: If \"Disable all except digitally signed macros\" is selected, users will not be able to open unsigned Access databases.\r\n \r\nAlso, note that Microsoft Office stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Microsoft Office still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store.\r\n \r\nTherefore, if you created a list of trusted publishers in a previous version of Microsoft Office and you upgrade to Office, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store.","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"593c8d6aa5724d22":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"59b926d37051232d":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05","displayName":"Trusted Location #5 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_1","displayName":"Enabled","description":null,"helpText":null}]},"59432db0c816ff16":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_pathcolon55","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"594f63ed99ebd94b":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iaslogging","displayName":"IAS Logging (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iaslogging"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iaslogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iaslogging_1","displayName":"Enabled","description":null,"helpText":null}]},"595a5679985ab1cf":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirednetworkpolicy","displayName":"Wired Network (IEEE 802.3) Policies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wirednetworkpolicy"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirednetworkpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirednetworkpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"594b46686bdc25b2":{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_1","displayName":"Tape Drives: Deny write access (User)","description":"This policy setting denies write access to the Tape Drive removable storage class.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-tapedrives-denywrite-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"59beb453368d10db":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings","displayName":"Roaming Credentials (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings_1","displayName":"True","description":null,"helpText":null}]},"592ad8a70aa0138e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended","displayName":"Print Headers and Footers (User)","description":"Setting the policy to Enabled turns headers and footers on in print preview. Setting the policy to Disabled turns them off in print preview.\r\n\r\nIf you set the policy, users can't change it. If unset, users decides whether headers and footers appear.","helpText":"","infoUrls":[],"categoryId":"20ceae56-e189-46ec-a440-791ce7454017","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"599d4aac281e4c58":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions","displayName":"URL pattern Exceptions to tab discarding (User)","description":"This policy makes it so that any URL matching one or more of the patterns it specifies (using the URLBlocklist filter format) will never be discarded by the browser.\r\nThis applies to memory pressure and high efficiency mode discarding.\r\nA discarded page is unloaded and its resources fully reclaimed. The tab its associated with remains in the tabstrip, but making it visible will trigger a full reload.\r\n\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://*\r\n*","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_1","displayName":"Enabled","description":null,"helpText":null}]},"59148408fe45e9db":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability","displayName":"Manage the deprecated prefixed video fullscreen API's availability (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_runtime-enabled","displayName":"Follows regular deprecation timelines for the PrefixedVideoFullscreen API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_disabled","displayName":"Disables prefixed video fullscreen APIs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_enabled","displayName":"Enables prefixed video fullscreen APIs","description":null,"helpText":null}]},"595dda2387304591":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_l_defaultdirection81","displayName":"Default sheet direction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_l_defaultdirection81_1","displayName":"Right-to-Left","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_l_defaultdirection81_0","displayName":"Left-to-Right","description":null,"helpText":null}]},"596df0fdea845b75":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_defaultcustomtab","displayName":"Show custom templates tab by default in Excel on the Office Start screen and in File | New (User)","description":"This policy setting controls whether custom templates (when they exist) show as the default tab in Excel on the Office Start screen and in File | New. \r\n\r\nIf you enable this policy setting, users will the see custom templates tab as the default tab in Excel on the Office Start screen and in File | New when templates exist (this can include Custom XML programmed templates, templates in the Workgroup templates path, templates in the Personal templates path, or SharePoint templates).\r\n\r\nIf you disable or do not configure this policy setting, users will see the Featured templates tab as the default tab in Excel on the Office Start screen and in File | New, unless all Office-provided templates have been disabled.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_defaultcustomtab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_defaultcustomtab_1","displayName":"Enabled","description":null,"helpText":null}]},"590b73c9383e4dc8":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled","displayName":"Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge (User)","description":"This policy lets you configure the Picture in Picture floating overlay button in Microsoft Edge.\r\n\r\nThe Picture in Picture floating overlay button lets user to watch videos in a floating window on top of other windows.\r\n\r\nIf you enable or don't configure this policy, you can use the Picture in Picture floating overlay button in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Picture in Picture floating overlay button in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5970fd4009394089":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins","displayName":"View XFA-based PDF files using IE Mode for allowed file origin. (User)","description":"Internet Explorer (IE) mode uses the Adobe Acrobat Active-X PDF Plugin to open XFA-based PDF files. This policy will only work if the Active-X plugin is already on the user's device, it's not installed as part of this policy.\r\n\r\nIt's important to note that XFA is a legacy technology that is deprecated by its original creators. It is not an ISO standard and as such, doesn't align with the modern web architecture. Continued use poses potential risks and vulnerabilities.\r\n\r\nGiven the deprecated status of XFA technology and the lack of any investment by its creators, we strongly recommend that you start planning your transition to a more advanced HTML\\PDF form-based solutions.\r\n\r\nIn the interim, this policy provides a workaround for users to view XFA PDF in Microsoft Edge.\r\n\r\nIf you enable this policy, you can configure the list of origins from which XFA PDF files will be automatically opened in Microsoft Edge using IE Mode.\r\n\r\nIf you disable or don't configure the policy, XFA PDFs won't be considered for opening via Internet Explorer mode.\r\n\r\nFor detailed information on valid URL patterns, see - https://go.microsoft.com/fwlink/?linkid=2095322\r\n\r\nAlternatively, 'ViewXFAPDFInIEModeAllowedFileHash' (View XFA-based PDF files using IE Mode for allowed file hash.) can also be used to configure list of file hashes instead of URL origins, which will enable those files to be automatically opened in Microsoft Edge using IE Mode.\r\n\r\nExample value:\r\n\r\nhttps://contesso.sharepoint.com/accounts/\r\nhttps://contesso.sharepoint.com/transport/\r\nfile://account_forms/","helpText":"","infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"59261371908359af":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls","displayName":"Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with. (User)","description":"Configure the list of URL patterns for sites that the browser will attempt to perform the Token Binding protocol with.\r\nFor the domains on this list, the browser will send the Token Binding ClientHello in the TLS handshake (See https://tools.ietf.org/html/rfc8472).\r\nIf the server responds with a valid ServerHello response, the browser will create and send Token Binding messages on subsequent https requests. See https://tools.ietf.org/html/rfc8471 for more info.\r\n\r\nIf this list is empty, Token Binding will be disabled.\r\n\r\nThis policy is only available on Windows 10 devices with Virtual Secure Mode capability.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\n[*.]mydomain2.com\r\n[*.].mydomain2.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"59c83ce403ba3cd9":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting","displayName":"Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app (User)","description":"This setting lets you enable reporting of sites that might need to be configured as a neutral site on the Enterprise Mode Site List. The user must be signed into Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant specified by the policy.\r\n\r\nIf you configure this policy, Microsoft Edge will send a report to the M365 Admin Center Site Lists app when a navigation appears stuck redirecting back and forth between the Microsoft Edge and Internet Explorer engines several times. This usually indicates that redirection to an authentication server is switching engines, which repeatedly fails in a loop. The report will show the URL of the site that is the redirect target, minus any query string or fragment. The user's identity isn't reported.\r\n\r\nFor this reporting to work correctly, you must have successfully visited the Microsoft Edge Site Lists app in the M365 Admin Center at least once. This activates a per-tenant storage account used to store these reports. Microsoft Edge will still attempt to send reports if this step hasn't been completed. However, the reports will not be stored in the Site Lists app.\r\n\r\nWhen enabling this policy, you must specify your O365 tenant ID. To learn more about finding your O365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will never send reports about potentially misconfigured neutral sites to the Site Lists app.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_1","displayName":"Enabled","description":null,"helpText":null}]},"5996ef16fa673c65":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastservicenotesdefaulturl7","displayName":"Shared Notes Default Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"59ee89204abb886a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicyemen","displayName":"Arabic (Yemen) (User)","description":"Enables the editing language Arabic (Yemen)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicyemen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicyemen_1","displayName":"Enabled","description":null,"helpText":null}]},"59729c69225c5b08":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicbosniaandherzegovina","displayName":"Serbian (Cyrillic, Bosnia and Herzegovina) (User)","description":"Enables the editing language \"Serbian (Cyrillic, Bosnia and Herzegovina)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicbosniaandherzegovina_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicbosniaandherzegovina_1","displayName":"Enabled","description":null,"helpText":null}]},"598a07e9aacef3e2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tigrinyaeritrea","displayName":"Tigrinya (Eritrea) (User)","description":"Enables the editing language Tigrinya (Eritrea)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tigrinyaeritrea_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tigrinyaeritrea_1","displayName":"Enabled","description":null,"helpText":null}]},"595c7621625ab3ec":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_usesystemfontinsteadoftahoma","displayName":"Use system font instead of the Office default UI font (User)","description":"Use the system font instead of the Office default UI font. | Unchecked: Use the Office default UI font.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_usesystemfontinsteadoftahoma_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_usesystemfontinsteadoftahoma_1","displayName":"Enabled","description":null,"helpText":null}]},"59ddb7386c957e22":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent_l_officeexperiencesdownloadingcontentdropid","displayName":"[Deprecated] Connected experiences in Office that download online content (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent_l_officeexperiencesdownloadingcontentdropid_1","displayName":"Enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent_l_officeexperiencesdownloadingcontentdropid_2","displayName":"Disabled","description":null,"helpText":null}]},"5952392716f6e5fc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvaliddsabits","displayName":"Configure invalid DSA public key size (User)","description":"This policy setting allows you to configure whether Office displays a digital signature as invalid because of the number of DSA public key bits used in the digital signature.\r\n\r\nIf you enable this policy setting, you can specify the number of bits that Office treats as invalid in a digital signature. For example: 512, 768, etc.\r\n\r\nIf you don’t configure this policy setting, Office won’t treat any digital signatures as invalid because of the number of bits in the public key.\r\n\r\nEnabling this policy causes the minimum DSA public key size to be the next largest option.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvaliddsabits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvaliddsabits_1","displayName":"Enabled","description":null,"helpText":null}]},"59777fa612605fcb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_allowpngasanoutputformat","displayName":"Allow PNG as an output format (User)","description":"This policy setting determines whether Office 2016 applications can output graphics in Portable Network Graphics (PNG) format when documents are saved as Web pages.\r\n\r\nIf you enable this policy setting, Office 2016 applications can save graphics in PNG format and users cannot change this configuration.\r\n\r\nIf you disable this policy setting, Office 2016 applications cannot save graphics in PNG format and users cannot change this configuration.\r\n\r\nIf you do not configure this policy setting, Office 2016 applications do not save graphics in the PNG format. Users can change this functionality by opening the application's Options dialog box, clicking Advanced, clicking Web Options, and selecting the Allow PNG as a graphics format check box.","helpText":"","infoUrls":[],"categoryId":"8ee1d8d2-582f-401b-927a-993016f4290d","categoryName":"Browsers","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_allowpngasanoutputformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_allowpngasanoutputformat_1","displayName":"Enabled","description":null,"helpText":null}]},"5997509c7ddaa81e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_checkifofficeisthedefaulteditorforwebpagescreatedinoffice","displayName":"Check if Office is the default editor for Web pages created in Office (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"0775f21c-9ca1-446d-b1dc-3cea45f15605","categoryName":"Files","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_checkifofficeisthedefaulteditorforwebpagescreatedinoffice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_checkifofficeisthedefaulteditorforwebpagescreatedinoffice_1","displayName":"Enabled","description":null,"helpText":null}]},"597878012aa28c1b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage62","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage62_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage62_1","displayName":"True","description":null,"helpText":null}]},"59754055cbaaaac5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_remindersoncalendaritems","displayName":"Do not display reminders on Calendar items by default (User)","description":"By default, when users create Calendar items, the Reminder: check box in the item is set. By disabling this setting, you can change the default behavior so that the Reminder: check box is cleared by default .","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_remindersoncalendaritems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_remindersoncalendaritems_1","displayName":"Enabled","description":null,"helpText":null}]},"5958cf697d6ed274":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_eas_l_eassyncfrequency","displayName":"EAS Sync Frequency (User)","description":"This policy setting allows you to specify the number of minutes that Outlook automatically syncs the users' Exchange ActiveSync (EAS) accounts.\r\n\r\nIf you enable this policy setting, you can specify the number of minutes.\r\n\r\nIf you disable or do not configure this policy setting, Outlook automatically syncs the users’ EAS accounts every 59 minutes.","helpText":"","infoUrls":[],"categoryId":"b161cf66-abfa-4a36-a9ac-c20ca60594e0","categoryName":"Exchange ActiveSync","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_eas_l_eassyncfrequency_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_eas_l_eassyncfrequency_1","displayName":"Enabled","description":null,"helpText":null}]},"59255cb2c0b9dfa1":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel","displayName":"Junk E-mail protection level (User) (Deprecated)","description":"This policy setting controls your Junk E-mail protection level. The Junk E-mail Filter in Outlook helps to prevent junk e-mail messages, also known as spam, from cluttering user's Inbox. The filter evaluates each incoming message based on several factors, including the time when the message was sent and the content of the message. The filter does not single out any particular sender or message type, but instead analyzes each message based on its content and structure to discover whether or not it is probably spam.\r\n\r\nIf you enable this policy setting, you can select one of the four listed options available. After you select an option, users will not be able to change it.\r\n\r\nIf you disable this policy setting, Outlook reverts to the user-defined protection level.\r\n\r\nIf you do not configure this policy setting, users can change their junk e-mail filtering options.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"59dc735210509d36":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_configurecngcipherchainingmode","displayName":"Configure CNG cipher chaining mode (User)","description":"This policy setting allows you to configure the cipher chaining mode used.\r\n\r\nIf you enable this policy setting, the cipher chaining mode specified will be applied.\r\n\r\nIf you disable or do not configure this policy setting, Cipher Block Chaining (CBC) will be the default CNG cipher chaining mode used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"5977120fa021d0fc":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_l_descriptioncolon14","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"5970466632e911a2":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendemailsendthispage","displayName":"File tab | Share | Email (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendemailsendthispage_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendemailsendthispage_1","displayName":"True","description":null,"helpText":null}]},"595a6fff50632e2f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_descriptioncolon46","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"596bc9f169336711":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart","displayName":"Color for tracking insertions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_0","displayName":"By Author","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_1","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_2","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_3","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_4","displayName":"Turquoise","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_5","displayName":"Bright Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_6","displayName":"Pink","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_7","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_8","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_9","displayName":"White","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_10","displayName":"Dark Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_11","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_12","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_13","displayName":"Violet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_14","displayName":"Dark Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_15","displayName":"Dark Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_16","displayName":"Gray 50%","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_l_insertionscolorpart_17","displayName":"Gray 25%","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/5a.json b/public/intune-definitions/5a.json new file mode 100644 index 000000000000..995fc4a5c01a --- /dev/null +++ b/public/intune-definitions/5a.json @@ -0,0 +1 @@ +{"5a3c209aa40ff313":{"id":"com.android.devicerestrictionpolicy.datetimeconfigurationblocked","displayName":"Block date and time changes","description":"If 'True', prevents users from manually setting the date and time. If False, Intune doesn't change or update this setting. By default, the OS might allow users to the set date and time on the device. Available for fully managed, dedicated and corporate-owned work profile (at work profile level) devices.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.datetimeconfigurationblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.datetimeconfigurationblocked_true","displayName":"True","description":"True","helpText":null}]},"5a2c83bc48f090bc":{"id":"com.apple.applicationaccess_allowdiagnosticsubmissionmodification","displayName":"Allow Diagnostic Submission Modification","description":"If false, disables changing the diagnostic submission and app analytics settings in the Diagnostics & Usage UI in Settings. Requires a supervised device. Available in iOS 9.3.2 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowdiagnosticsubmissionmodification_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowdiagnosticsubmissionmodification_true","displayName":"Enabled","description":null,"helpText":null}]},"5a0216197c17c80e":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_start","displayName":"Start","description":"The curfew start time, in the format %d:%d:%d.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"5a3a8129fdbafdb6":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_end","displayName":"End","description":"The curfew end time, in the format %d:%d:%d.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"5a183467934e1da0":{"id":"com.apple.loginwindow_restartdisabledwhileloggedin","displayName":"Restart Disabled While Logged In","description":"If true, disables the Restart menu item when the user is logged in.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_restartdisabledwhileloggedin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_restartdisabledwhileloggedin_true","displayName":"True","description":null,"helpText":null}]},"5aee2e3fcb24ed40":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_lcid","displayName":"Microsoft Teams classic LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"5ab870b18272b5ba":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_lcid","displayName":"OneDrive LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"5afb32088ecc18b5":{"id":"com.apple.managedclient.preferences_earlypreview","displayName":"Enable / disable early preview","description":"Whether EDR early preview features are enabled or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#enable--disable-early-preview"],"categoryId":"b77a3a7b-6fab-4240-b5c3-852aa78781d5","categoryName":"Endpoint Detection and Response (EDR) preferences","options":[{"id":"com.apple.managedclient.preferences_earlypreview_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_earlypreview_true","displayName":"Enabled","description":null,"helpText":null}]},"5a95e70c60a0d5fc":{"id":"com.apple.managedclient.preferences_extensionallowedtypes","displayName":"Configure allowed extension types","description":"Controls which extension types can be installed and limits runtime access.\n\nThis setting defines the allowed types of extensions and which hosts they can interact with. The value is a list of strings, each of which should be one of the following: \"extension\", \"theme\", \"user_script\", and \"hosted_app\". See the Microsoft Edge extensions documentation for more information on these types.\n\nNote that this policy also affects extensions to be force-installed by using \"ExtensionInstallForcelist\" policy.\n\nIf you enable this policy, only extensions that match a type in the list are installed.\n\nIf you don't configure this policy, no restrictions on the acceptable extension types are enforced.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensionallowedtypes"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"5ae64603a6e24c7c":{"id":"com.apple.managedclient.preferences_pluginsallowedforurls","displayName":"Allow the Adobe Flash plug-in on specific sites","description":"Define a list of sites, based on URL patterns, that can run the Adobe Flash plug-in.\n\nIf you don't configure this policy, the global default value from the \"DefaultPluginsSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#pluginsallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"5accd04c60230b51":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_automatic restart on power loss","displayName":"Automatic Restart On Power Loss","description":"If true, enables \"Start up automatically after a power failure.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_automatic restart on power loss_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_automatic restart on power loss_1","displayName":"True","description":null,"helpText":null}]},"5a9022ff7c55c77a":{"id":"com.apple.mcxmenuextras_ink.menu","displayName":"Ink","description":"If true, enables the Ink menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_ink.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_ink.menu_true","displayName":"True","description":null,"helpText":null}]},"5ab242ccf8b34499":{"id":"com.apple.mcxprinting_defaultprinter","displayName":"Default Printer","description":"The default printer for the user.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"5ae497eb9a4240ae":{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"5a1aab903b270477":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"5a598b712fb41eb7":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"5af21f237453f536":{"id":"com.microsoft.edge.mamedgeappconfigsettings.serviceworkerautopreloadenabled","displayName":"Allow ServiceWorker to dispatch navigation requests without waiting for its startup","description":"This policy controls whether Microsoft Edge enables the ServiceWorkerAutoPreload feature.\n\nIf you enable or don't configure this policy, Microsoft Edge can initiate the main resource network request concurrently with the Service Worker bootstrap process. This can improve performance in scenarios where the Service Worker isn't already running.\n\nIf you disable this policy, Microsoft Edge will wait to dispatch the navigation request until after the Service Worker starts.\n\nThis is a temporary policy and is removed in version 144 of Microsoft Edge.\n\nFor more information on the feature, see https://github.com/WICG/service-worker-auto-preload.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.serviceworkerautopreloadenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.serviceworkerautopreloadenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"5a6c71c5ac094ee2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhomebutton_recommended","displayName":"Show Home button on toolbar (users can override)","description":"Shows the Home button on Microsoft Edge's toolbar.\n\nEnable this policy to always show the Home button. Disable it to never show the button.\n\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhomebutton_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhomebutton_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"5a266f81700a54c0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.walletdonationenabled_recommended","displayName":"Wallet Donation Enabled (Deprecated) (users can override)","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\n\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\n\nIf you disable this policy, users can't use the Wallet Donation feature.\n\nThis policy is deprecated because the Wallet Donation feature has been removed from Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.walletdonationenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.walletdonationenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"5a881a91a77ff156":{"id":"device_vendor_msft_laps_policies_passwordexpirationprotectionenabled","displayName":"Password Expiration Protection Enabled ","description":"Use this setting to configure additional enforcement of maximum password age for the managed local administrator account.\n\nWhen this setting is enabled, planned password expiration that would result in a password age greater than that dictated by \"PasswordAgeDays\" policy is NOT allowed. When such expiration is detected, the password is changed immediately and the new password expiration date is set according to policy.\n\nIf not specified, this setting defaults to True.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_passwordexpirationprotectionenabled_false","displayName":"Allow configured password expiriration timestamp to exceed maximum password age","description":"Allow configured password expiriration timestamp to exceed maximum password age","helpText":null},{"id":"device_vendor_msft_laps_policies_passwordexpirationprotectionenabled_true","displayName":"Do not allow configured password expiriration timestamp to exceed maximum password age","description":"Do not allow configured password expiriration timestamp to exceed maximum password age","helpText":null}]},"5aa44a980d5d11b6":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_slowlinkdefaultfordirectaccess","displayName":"Configure Direct Access connections as a fast network connection","description":"This policy setting allows an administrator to define the Direct Access connection to be considered a fast network connection for the purposes of applying and updating Group Policy.\r\n\r\nWhen Group Policy detects the bandwidth speed of a Direct Access connection, the detection can sometimes fail to provide any bandwidth speed information. If Group Policy detects a bandwidth speed, Group Policy will follow the normal rules for evaluating if the Direct Access connection is a fast or slow network connection. If no bandwidth speed is detected, Group Policy will default to a slow network connection. This policy setting allows the administrator the option to override the default to slow network connection and instead default to using a fast network connection in the case that no network bandwidth speed is determined.\r\n\r\nNote: When Group Policy detects a slow network connection, Group Policy will only process those client side extensions configured for processing across a slow link (slow network connection).\r\n\r\nIf you enable this policy, when Group Policy cannot determine the bandwidth speed across Direct Access, Group Policy will evaluate the network connection as a fast link and process all client side extensions.\r\n\r\nIf you disable this setting or do not configure it, Group Policy will evaluate the network connection as a slow link and process only those client side extensions configured to process over a slow link.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-slowlinkdefaultfordirectaccess"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_slowlinkdefaultfordirectaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_slowlinkdefaultfordirectaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"5ae60be6abfcc204":{"id":"device_vendor_msft_policy_config_admx_pca_detectupdatefailurespolicy_detectupdatefailureslevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectupdatefailurespolicy_detectupdatefailureslevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectupdatefailurespolicy_detectupdatefailureslevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"5a03d99d1da3c87e":{"id":"device_vendor_msft_policy_config_admx_power_customactiveschemeoverride_2","displayName":"Specify a custom active power plan","description":"This policy setting specifies the active power plan from a specified power plan’s GUID. The GUID for a custom power plan GUID can be retrieved by using powercfg, the power configuration command line tool. \r\n\r\nIf you enable this policy setting, you must specify a power plan, specified as a GUID using the following format: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX (For example, 103eea6e-9fcd-4544-a713-c282d8e50083), indicating the power plan to be active.\r\n\r\nIf you disable or do not configure this policy setting, users can see and change this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-customactiveschemeoverride-2"],"categoryId":"290ec637-e780-4e95-9834-6368ac0437d1","categoryName":"Power Management","options":[{"id":"device_vendor_msft_policy_config_admx_power_customactiveschemeoverride_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_customactiveschemeoverride_2_1","displayName":"Enabled","description":null,"helpText":null}]},"5a4cde6cf99f5a9a":{"id":"device_vendor_msft_policy_config_admx_power_inboxactiveschemeoverride_2_inboxactiveschemeoverrideenter","displayName":"Active Power Plan:","description":null,"helpText":"","infoUrls":[],"categoryId":"290ec637-e780-4e95-9834-6368ac0437d1","categoryName":"Power Management","options":[{"id":"device_vendor_msft_policy_config_admx_power_inboxactiveschemeoverride_2_inboxactiveschemeoverrideenter_381b4222-f694-41f0-9685-ff5bb260df2e","displayName":"Automatic (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_inboxactiveschemeoverride_2_inboxactiveschemeoverrideenter_a1841308-3541-4fab-bc81-f71556f20b4a","displayName":"Power Saver","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_inboxactiveschemeoverride_2_inboxactiveschemeoverrideenter_8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c","displayName":"High Performance","description":null,"helpText":null}]},"5a7c333f0a3b6e89":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlookbackup","displayName":"Outlook 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Outlook 2016.\r\nMicrosoft Outlook 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Outlook 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Outlook 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016outlookbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlookbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlookbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"5a043840cda35ea5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting","displayName":"Default key generation setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting_1","displayName":"Allow all sites to use key generation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting_2","displayName":"Do not allow any site to use key generation","description":null,"helpText":null}]},"5a409a1ca00d4134":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings","displayName":"Dynamic Code Settings","description":"This policy controls the dynamic code settings for Google Chrome.\r\n\r\nDisabling dynamic code improves the security of Google Chrome by preventing potentially hostile dynamic code and third-party code from making changes to Google Chrome's behavior, but might cause compatibility issues with third-party software (e.g. certain printer drivers) that must run inside the browser process.\r\n\r\nIf the policy is set to 0 - Default or left unset then Google Chrome will use the default settings.\r\n\r\nIf the policy is set to 1 - DisabledForBrowser then the Google Chrome browser process will be prevented from creating dynamic code.\r\n\r\nNote: Read more about process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"5acd4c760975c67e":{"id":"device_vendor_msft_policy_config_defender_excludedprocesses","displayName":"Excluded Processes","description":"Allows an administrator to specify a list of files opened by processes to ignore during a scan. ImportantThe process itself is not excluded from the scan, but can be by using the Defender/ExcludedPaths policy to exclude its path. Each file type must be separated by a |. For example, C:\\Example. exe|C:\\Example1. exe.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#excludedprocesses"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"5a32bab74ea1142c":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_odfcsizeinmbs","displayName":"Size In MBs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"5a767e0a45c2f377":{"id":"device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server.\n\nThis policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME sniff indicates that the file is really an executable file, Internet Explorer renames the file by saving it in the Internet Explorer cache and changing its extension.\n\nIf you enable this policy setting, Internet Explorer requires consistent MIME data for all received files.\n\nIf you disable this policy setting, Internet Explorer will not require consistent MIME data for all received files.\n\nIf you do not configure this policy setting, Internet Explorer requires consistent MIME data for all received files.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-consistentmimehandlinginternetexplorerprocesses"],"categoryId":"ab33bc0d-aea2-440a-a3c3-bf0fb84b98ce","categoryName":"Consistent Mime Handling","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"5ae5f19b88a820b8":{"id":"device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys","displayName":"Enable extended hot keys in Internet Explorer mode","description":"This policy setting lets admins enable extended Microsoft Edge Internet Explorer mode hotkeys, such as \"Ctrl+S\" to have \"Save as\" functionality.\n\nIf you enable this policy, extended hotkey functionality is enabled in Internet Explorer mode and work the same as Internet Explorer.\n\nIf you disable, or don't configure this policy, extended hotkeys will not work in Internet Explorer mode.\n\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2102115","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-enableextendediemodehotkeys"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_1","displayName":"Enabled","description":null,"helpText":null}]},"5ac4fae5b320b32b":{"id":"device_vendor_msft_policy_config_internetexplorer_jscriptreplacement","displayName":"Replace JScript by loading JScript9Legacy in place of JScript.","description":"This policy setting specifies whether JScript or JScript9Legacy is loaded.\n \nIf you enable this policy setting or not configured, JScript9Legacy will be loaded in situations where JScript is instantiated.\n\nIf you disable this policy, then JScript will be utilized.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-jscriptreplacement"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_jscriptreplacement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_jscriptreplacement_1","displayName":"Enabled","description":null,"helpText":null}]},"5ad1094ad8b32875":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"5a6f5a78c744a035":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_recoveryconsole_allowautomaticadministrativelogon","displayName":"Recovery Console Allow Automatic Administrative Logon","description":"Recovery console: Allow automatic administrative logon This security setting determines if the password for the Administrator account must be given before access to the system is granted. If this option is enabled, the Recovery Console does not require you to provide a password, and it automatically logs on to the system. Default: This policy is not defined and automatic administrative logon is not allowed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#recoveryconsole_allowautomaticadministrativelogon"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"5aed7ae1dd535207":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls","displayName":"Block images on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to display images.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultImagesSetting' (Default images setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"5a8fd1a3a9028339":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed","displayName":"Enable the Search bar (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nEnables the search bar. When enabled, users can use the search bar to search the web from their desktop or from an application. The search bar provides a search box that shows web suggestions and opens all web searches in Microsoft Edge. The search box provides search (powered by Bing) and URL suggestions. The search bar can be launched from the \"More tools\" menu or jump list in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy:\r\nThe search bar will be automatically enabled for all profiles.\r\nThe option to enable the search bar at startup will be toggled on if the 'WebWidgetIsEnabledOnStartup' (Allow the Search bar at Windows startup) policy is enabled.\r\nIf the 'WebWidgetIsEnabledOnStartup' is disabled or not configured, the option to enable the search bar at startup will be toggled off.\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge \"More tools\" menu. Users can launch the search bar from \"More tools\".\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge jump list menu. Users can launch the search bar from the Microsoft Edge jump list menu.\r\nThe search bar can be turned off by the \"Quit\" option in the System tray or by closing the search bar from the 3 dot menu. The search bar will be restarted on system reboot if auto-start is enabled.\r\n\r\n\r\nIf you disable this policy:\r\nThe search bar will be disabled for all profiles.\r\nThe option to launch the search bar from Microsoft Edge \"More tools\" menu will be disabled.\r\nThe option to launch the search bar from Microsoft Edge jump list menu will be disabled.\r\n\r\nThis policy is deprecated due to the deprecation of the Web widget's vertical layout. This policy will be made obsolete in 119 release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"5a7bd0b49be637ba":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings","description":"Configures browsing data lifetime settings for Microsoft Edge.\r\nThis policy controls the lifetime of selected browsing data. This policy has no effect if Sync is enabled.\r\nThe available data types are the 'browsing_history', 'download_history', 'cookies_and_other_site_data', 'cached_images_and_files', 'password_signin', 'autofill', 'site_settings' and 'hosted_app_data'.\r\nMicrosoft Edge will regularly remove data of selected types that is older than 'time_to_live_in_hours'. Because data deletion only happens at certain intervals, some data might be kept slightly longer but never more than twice its expected 'time_to_live_in_hours'.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"data_types\": [\r\n \"browsing_history\"\r\n ], \r\n \"time_to_live_in_hours\": 24\r\n }, \r\n {\r\n \"data_types\": [\r\n \"password_signin\", \r\n \"autofill\"\r\n ], \r\n \"time_to_live_in_hours\": 12\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_1","displayName":"Enabled","description":null,"helpText":null}]},"5a2e1a088b457dd5":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode","displayName":"Print PostScript Mode","description":"Controls how Microsoft Edge prints on Microsoft Windows.\r\n\r\nPrinting to a PostScript printer on Microsoft Windows different PostScript generation methods can affect printing performance.\r\n\r\nIf you set this policy to Default, Microsoft Edge will use a set of default options when generating PostScript. For text in particular, text will always be rendered using Type 3 fonts.\r\n\r\nIf you set this policy to Type42, Microsoft Edge will render text using Type 42 fonts if possible. This should increase printing speed for some PostScript printers.\r\n\r\nIf you don't configure this policy, Microsoft Edge will be in Default mode.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default\r\n\r\n* Type42 (1) = Type42\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_1","displayName":"Enabled","description":null,"helpText":null}]},"5a8f361553269237":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity","displayName":"Local Machine Zone Lockdown Security","description":"Local Machine Zone Lockdown","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_1","displayName":"Enabled","description":null,"helpText":null}]},"5a229b068d5dd121":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_powerpntexe157","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_powerpntexe157_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_powerpntexe157_1","displayName":"True","description":null,"helpText":null}]},"5a44701db75e58d0":{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_autologoff","displayName":"Automatically log off users after inactive interval","description":"Automatically signs out of the Windows App after a period of inactivity. This does not sign the user out of any remote session.\n\nIf you enable this policy, specify the inactivity timeout in minutes. After the specified time of inactivity, the Windows App will automatically sign out.\n\nIf you disable or do not configure this policy, the Windows App will remain signed in regardless of inactivity.\n ","helpText":"","infoUrls":[],"categoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","categoryName":"Windows App","options":[{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_autologoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_autologoff_1","displayName":"Enabled","description":null,"helpText":null}]},"5aa29220901c0682":{"id":"device_vendor_msft_policy_config_windowslogon_disablelockscreenappnotifications","displayName":"Turn off app notifications on the lock screen","description":"This policy setting allows you to prevent app notifications from appearing on the lock screen.\n\nIf you enable this policy setting, no app notifications are displayed on the lock screen.\n\nIf you disable or do not configure this policy setting, users can choose which apps display notifications on the lock screen.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-disablelockscreenappnotifications"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_windowslogon_disablelockscreenappnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_disablelockscreenappnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"5ac688c56f838d27":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders22","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders22_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders22_1","displayName":"True","description":null,"helpText":null}]},"5a697b0d55d66f0f":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize84_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"6730f0be-a129-4b48-942f-e4ddf69fee66","categoryName":"Customizable Error Messages","options":null},"5a9348391f6cc457":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorunmacro","displayName":"Database Tools | Macro | Run Macro (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorunmacro_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorunmacro_1","displayName":"True","description":null,"helpText":null}]},"5a2becc61ac6ee09":{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_1","displayName":"Prevent restoring local previous versions (User)","description":"This policy setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a local file.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a local file. If the user clicks the Restore button, Windows attempts to restore the file from the local disk.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a local file.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablelocalrestore-1"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_1_1","displayName":"Enabled","description":null,"helpText":null}]},"5a3b3483869ab7f4":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives","displayName":"Hide these specified drives in My Computer (User)","description":"This policy setting allows you to hide these specified drives in My Computer.\r\n\r\nThis policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.\r\n\r\nIf you enable this policy setting, select a drive or combination of drives in the drop-down list.\r\n\r\nNote: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.\r\n\r\nAlso, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.\r\n\r\nIf you disable or do not configure this policy setting, all drives are displayed, or select the \"Do not restrict drives\" option in the drop-down list.\r\n\r\nAlso, see the \"Prevent access to drives from My Computer\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nodrives"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_1","displayName":"Enabled","description":null,"helpText":null}]},"5a831745fe932ff6":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive","displayName":"Prevent access to drives from My Computer (User)","description":"Prevents users from using My Computer to gain access to the content of selected drives.\r\n\r\nIf you enable this setting, users can browse the directory structure of the selected drives in My Computer or File Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.\r\n\r\nTo use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the \"Do not restrict drives\" option from the drop-down list.\r\n\r\nNote: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.\r\n\r\n Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.\r\n\r\nAlso, see the \"Hide these specified drives in My Computer\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noviewondrive"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_1","displayName":"Enabled","description":null,"helpText":null}]},"5a045df1cfea5310":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled","displayName":"Specifies whether the display-capture permissions-policy is checked or skipped. (User)","description":"\r\nThe display-capture permissions-policy gates access to getDisplayMedia(), as per this spec: https://www.w3.org/TR/screen-capture/#feature-policy-integration. However, if this policy is Disabled, this requirement is not enforced, and getDisplayMedia() is allowed from contexts that would otherwise be forbidden. This Enterprise policy is temporary; it's intended to be removed after Google Chrome version 100. It is intended to unblock Enterprise users whose application is non-spec compliant, but needs time to be fixed.\r\n\r\nWhen enabled or not set, sites can only call getDisplayMedia() from contexts which are allowlisted by the display-capture permissions-policy.\r\n\r\nWhen disabled, sites can call getDisplayMedia() even from contexts which are not allowlisted by the display-capture permissions policy. Note that other restrictions may still apply.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5a8692d590c40443":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_securitykeypermitattestationdesc","displayName":"URLs/domains automatically permitted direct Security Key attestation (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"5a7c9909d44e7e95":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled","displayName":"Enable Native Window Occlusion (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5ae82b8ec9388e9c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices with the given vendor and product IDs. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"5ad5345ffded38e2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings","displayName":"Settings for AI-powered History Search (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_0","displayName":"Allow AI History Search and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_1","displayName":"Allow AI History Search without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_2","displayName":"Do not allow AI History Search.","description":null,"helpText":null}]},"5a3a9ce95ca2d49a":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac821e49-1996-4d6c-99d4-9c3c3e4737b6","categoryName":"Related Website Sets Settings","options":null},"5ad72e853c057209":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed","displayName":"Allow Safe Browsing Proxied Real Time Checks (User)","description":"This controls whether Safe Browsing's standard protection mode is allowed to\r\nsend partial hashes of URLs to Google through a proxy via Oblivious HTTP\r\nin order to determine whether they are safe to visit.\r\n\r\nThe proxy allows browsers to upload partial hashes of URLs to Google\r\nwithout them being linked to the user's IP address. The policy also allows\r\nbrowsers to upload the partial hashes of URLs with higher frequency for\r\nbetter Safe Browsing protection quality.\r\n\r\nThis policy will be ignored if Safe Browsing is disabled or set to enhanced\r\nprotection mode.\r\n\r\nSetting the policy to Enabled or leaving it unset allows the\r\nhigher-protection proxied lookups.\r\n\r\nSetting the policy to Disabled disallows the higher-protection proxied\r\nlookups. Partial hashes of URLs will be uploaded to Google directly with much\r\nlower frequency, which will degrade protection.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"5acec4f88db93d5a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount","displayName":"Set CNG password spin count (User)","description":"This policy setting allows you to specify the number of times to spin (rehash) the password verifier.\r\n\r\nIf you enable this policy setting, the number specified will be the number of times the password will be rehashed.\r\n\r\nIf you disable or do not configure this policy setting, the default (100000) will be used.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount_1","displayName":"Enabled","description":null,"helpText":null}]},"5a7379295a85ead5":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"5a2d400f3d5202d6":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~identity_nonmicrosoftaccountsigninenabled","displayName":"Enable sign-in to Microsoft Edge using non-Microsoft accounts (User)","description":"This policy controls whether users can sign in to Microsoft Edge using non-Microsoft accounts, such as Google or Apple accounts.\n\nIf you enable this policy or don't configure it, users can sign in to Microsoft Edge with non-Microsoft accounts when the feature is available. Related sign-in entry points, such as Google or Apple sign-in buttons in the profile flyout and unified sign-in experience, are shown when available.\n\nIf you disable this policy, users can't sign in to Microsoft Edge with non-Microsoft accounts. Related sign-in entry points and code paths are hidden and disabled, regardless of related feature flag settings.\n\nUsers can still sign in with Microsoft accounts.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~identity_nonmicrosoftaccountsigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~identity_nonmicrosoftaccountsigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5a62e8128a1d27d8":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates","displayName":"TLS server certificates that should be trusted by Microsoft Edge (User)","description":"This policy enables a list of TLS certificates that should be trusted by Microsoft Edge for server authentication.\r\nCertificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"5a38f933757b2a6e":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin","displayName":"Sets managed configuration values for websites to specific origins (User)","description":"Setting this policy defines the return value of Managed Configuration API for given origin.\r\n\r\nManaged Configuration API is a key-value configuration that can be accessed via navigator.device.getManagedConfiguration() javascript call. This API is only available to origins which correspond to force-installed web applications via 'WebAppInstallForceList' (Configure list of force-installed Web Apps).\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"managed_configuration_hash\": \"asd891jedasd12ue9h\",\r\n \"managed_configuration_url\": \"https://static.contoso.com/configuration.json\",\r\n \"origin\": \"https://www.contoso.com\"\r\n },\r\n {\r\n \"managed_configuration_hash\": \"djio12easd89u12aws\",\r\n \"managed_configuration_url\": \"https://static.contoso.com/configuration2.json\",\r\n \"origin\": \"https://www.example.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"5a072d276de01611":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled","displayName":"Enable new SmartScreen library (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 107.\r\n\r\nThis policy doesn't work because it was only intended to be a short-term mechanism to support the update to a new SmartScreen client.\r\n\r\nAllows the Microsoft Edge browser to load the new SmartScreen library (libSmartScreenN) for any SmartScreen checks on site URLs or application downloads.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will use the new SmartScreen library (libSmartScreenN).\r\n\r\nIf you disable this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nBefore Microsoft Edge version 103, if you don't configure this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management.\r\nThis also includes macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5ad6e3fdff9cb1c1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffpowerpoint","displayName":"Turn off AutoSave by default in PowerPoint (User)","description":"This policy setting allows you to turn off AutoSave by default in PowerPoint. AutoSave automatically saves all changes a user makes to files that are stored in OneDrive, OneDrive for Business, or SharePoint Online.\r\n\r\nIf you enable this policy setting, AutoSave is off by default in PowerPoint. But, the user can enable AutoSave for PowerPoint by going to File > Options > Save. Or, the user can enable AutoSave for a specific PowerPoint file by using the AutoSave toggle in the title bar.\r\n \r\nIf you disable or don’t configure this policy setting, AutoSave is on by default, but the user can disable AutoSave by going to File > Options > Save or by using the AutoSave toggle.\r\n \r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffpowerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffpowerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"5afd081aabf07493":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastserviceserverinfo2","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"5a20d94c3b964ed2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_project","displayName":"Microsoft Project (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_project_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_project_1","displayName":"True","description":null,"helpText":null}]},"5aa09ae8bebd1555":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_disableuserfromsettingpersonalsiteasdefaultlocation","displayName":"Disable user from setting personal site as default location (User)","description":"Checked: User is not able to define the default location to the personal site. | Unchecked: Default location is not restricted.","helpText":"","infoUrls":[],"categoryId":"13123148-c522-437f-b316-d78f5cc0d28d","categoryName":"Shared Workspace","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_disableuserfromsettingpersonalsiteasdefaultlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_disableuserfromsettingpersonalsiteasdefaultlocation_1","displayName":"Enabled","description":null,"helpText":null}]},"5a7cfd2e13509fce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_uselocaluserinfo","displayName":"Use local user name and initials values regardless of signed-in user (User)","description":"This policy setting controls whether Office uses the user name and initials of the user currently signed-in, or the user name and initials that are specified in the Options dialog box.\r\n\r\nIf you enable this policy setting, regardless of any user currently signed-in, Office uses the user name and initials specified in the Options dialog box.\r\n\r\nIf you disable or do not configure this policy setting, Office uses the user name and initials from the information provided by the user that is currently signed-in.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_uselocaluserinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_uselocaluserinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"5a3b00cbfa8ebf66":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7","displayName":"Workflow Cache 7 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_1","displayName":"Enabled","description":null,"helpText":null}]},"5ab5ee6edd8645bb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_defaultserversanddataformeetingworkspaces","displayName":"Default servers and data for Meeting Workspaces (User)","description":"Using this policy, you can define default servers and server data for Meeting Workspaces. It is recommended that you draft this policy in a text editor and paste it into the text box in the setting. You can add up to five servers by listing them in the \"Default server:\" text box. Each server is defined by a pipe-delimited list, with a total of six pipes per server record. The OrganizerName field is left blank. For example: http://server1 | Friendly name for server1 | templateLCID | templateID | TemplateName | OrganizerName | http://server2 | ... and so on. For more information, see the Office 2016 Resource Kit on TechNet.","helpText":"","infoUrls":[],"categoryId":"f77040df-7dd2-4916-b6a0-5ef962686d4e","categoryName":"Meeting Workspace","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_defaultserversanddataformeetingworkspaces_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_defaultserversanddataformeetingworkspaces_1","displayName":"Enabled","description":null,"helpText":null}]},"5add5ec057c89bf9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_donotallowhorizontalcalendarview","displayName":"Do not allow horizontal calendar view (User)","description":"This policy setting allows you to prevent horizontal calendar view.\r\n\r\nIf you enable this policy setting, horizontal calendar view is not allowed.\r\n\r\nIf you disable or do not configure this policy setting, horizontal calendar view is allowed.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_donotallowhorizontalcalendarview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_donotallowhorizontalcalendarview_1","displayName":"Enabled","description":null,"helpText":null}]},"5a0abb07b8653d9d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disableexchangeconsumeraccounts","displayName":"Prevent personal Microsoft accounts from using MAPI (User)","description":"This policy setting governs whether personal Microsoft accounts can be configured to use MAPI in Outlook.\r\n\r\nA personal Microsoft account is an account hosted on Outlook.com, Hotmail.com, Live.com, Msn.com or any variation on those domains.\r\n\r\nIf you enable this policy, users won’t be able to configure a personal Microsoft account to use MAPI in Outlook.\r\n\r\nThis means that in the Add Account dialog box in Outlook, users must choose “Manual setup or additional server types,” then choose Next, and then choose “POP or IMAP.”\r\n\r\nIf you disable or don’t configure this policy setting, users can configure a personal Microsoft account to use MAPI in Outlook. They can do this by choosing “E-mail” account in the Add Account dialog box.\r\n\r\nNote that personal Microsoft accounts that are configured to use MAPI will be automatically configured to use Cached Exchange Mode, and this can’t be changed.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disableexchangeconsumeraccounts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disableexchangeconsumeraccounts_1","displayName":"Enabled","description":null,"helpText":null}]},"5a8880fd936aa860":{"id":"user_vendor_msft_policy_config_outlk16v8~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_recommendoutlookextension","displayName":"Recommend the Microsoft Outlook Extension (User)","description":"This policy setting controls whether Windows 10 users of the Outlook app and the Outlook web app will see a recommendation to install the new Microsoft Outlook extension for Microsoft Edge. If a user chooses to click the recommendation, they will be taken to the Microsoft Outlook extension page where they can choose to install this web-based, productivity add on. Your users can dismiss the recommendation and will only see the recommendation twice. If your users choose to install the extension, they will be able to access their mail, calendar, contacts, and tasks from an icon in Microsoft Edge without requiring that they open another browser tab. The extension is a “mini” version of Outlook on the web which operates as a one-click flyout from the browser header.\r\n\r\nIn the future, Microsoft may release a version of this extension for the Chrome browser. Microsoft will respect this policy for future promotions of a Chrome extension, as well.\r\n\r\nIf you enable or do not configure this policy setting, the recommendation will be presented to the user.\r\n\r\nIf you disable this policy setting, the recommendation will not be presented to the user.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise and Outlook web app.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2165458","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v8~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_recommendoutlookextension_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v8~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_recommendoutlookextension_1","displayName":"Enabled","description":null,"helpText":null}]},"5a5793858368dc46":{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_miscellaneous_l_equivalentcomaddin","displayName":"Deactivate Outlook web add-ins whose equivalent COM or VSTO add-in is installed (User)","description":"This policy setting allows you to deactivate Outlook web add-ins if the associated COM or VSTO add-in is installed.\r\n\r\nIf you enable this policy setting, users will not be able to use Outlook web add-ins where the corresponding COM or VSTO add-in is installed and you have provided the following information for each add-in.\r\n \"Value name\": Specify the Id of the Outlook web add-in, as noted in its manifest. Note: Do not add {} around the Id.\r\n \"Value\": Specify the programmatic ID (ProgID) for the Outlook COM or VSTO add-in.\r\n\r\nIf you disable or don't configure this policy setting, users will continue to be able to use any versions of the add-in that are installed.\r\n\r\nFor more information about when to use this setting, see https://go.microsoft.com/fwlink/p/?linkid=2156690","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_miscellaneous_l_equivalentcomaddin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_miscellaneous_l_equivalentcomaddin_1","displayName":"Enabled","description":null,"helpText":null}]},"5a88ee782d37c6bb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingformediafilescaptions","displayName":"Stop checking for media files which might need captions (User)","description":"This policy setting prevents the Accessibility Checker from flagging media files that might need caption information.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from flagging media files that might need caption information.\r\n\r\nIf you disable or do not configure this policy setting, presentations will be scanned for media files and the results will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingformediafilescaptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingformediafilescaptions_1","displayName":"Enabled","description":null,"helpText":null}]},"5adb7a99d916ef09":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16","displayName":"Week starts on (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16_6","displayName":"Saturday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16_0","displayName":"Sunday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16_1","displayName":"Monday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16_4","displayName":"Thursday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_l_pjweekstarts16_5","displayName":"Friday","description":null,"helpText":null}]},"5a3fd6f6f3237eac":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngcipheralgorithm","displayName":"Set CNG cipher algorithm (User)","description":"This policy setting allows you to configure the CNG cipher algorithm that is used.\r\n\r\nIf you enable this policy setting, then the cipher provided will be used if it is a supported algorithm.\r\n\r\nIf you disable or do not configure this policy setting, AES will be used.","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngcipheralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngcipheralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"5a7561c8ad115315":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_promptusertosetupprinter","displayName":"Prompt user to setup printer (User)","description":"When set, Publisher will show a prompt to the user to start the Printer Setup Wizard when a new printer is found.","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_promptusertosetupprinter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_promptusertosetupprinter_1","displayName":"Enabled","description":null,"helpText":null}]},"5aabd30ade1f7ada":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setmaximumnumberofmruitemstodisplay_l_setmaximumnumberofmruitemstodisplayspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":null},"5afee95a1b29cc29":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems","displayName":"Disable commands (User)","description":"Specify command bar buttons and menu items to disable.","helpText":"","infoUrls":[],"categoryId":"fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},"5a2af52f9f05336e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc10_l_descriptioncolon46","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"5a62d8ceccf60a34":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_digitalprint","displayName":"Don't show the option to transform a document to a Sway web page (User)","description":"This policy setting controls whether the File menu option to transform a Word document to a Sway web page is shown to the user. By default, this option is shown to the user.\r\n\r\nIf you enable this policy setting, the File menu option to transform a Word document to a Sway web page is hidden from the user. \r\n\r\nIf you disable or don't configure this policy setting, the File menu option to transform a Word document to a Sway web page is shown to the user.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_digitalprint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_digitalprint_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/5b.json b/public/intune-definitions/5b.json new file mode 100644 index 000000000000..57fd22c3d8e4 --- /dev/null +++ b/public/intune-definitions/5b.json @@ -0,0 +1 @@ +{"5b6617f085870b50":{"id":"ade_setupassistant_intelligence","displayName":"Intelligence","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_intelligence_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_intelligence_1","displayName":"Show","description":null,"helpText":null}]},"5b0c7ec16f23efde":{"id":"com.apple.cellularprivatenetwork.managed_networkidentifier","displayName":"Network Identifier","description":"A string using the 3GPP \"Coordinated NID\" (option 1 or option 2) format (defined in 3GPP 31.102, Section 12.7.1). The device uses this value to match a SIM present on the device.\n\nAll combinations of `NetworkIdentifier` and `CsgNetworkIdentifier` must be unique across all profiles installed on the device.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"5b171ed595863657":{"id":"com.apple.dictionary_parentalcontrol","displayName":"Parental Control","description":"If true, enables parental controls dictionary restrictions.","helpText":null,"infoUrls":[],"categoryId":"65087b94-7e45-4d74-a50d-df4377b67499","categoryName":"Parental Controls Dictionary","options":[{"id":"com.apple.dictionary_parentalcontrol_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dictionary_parentalcontrol_true","displayName":"True","description":null,"helpText":null}]},"5bb15c85d6c8a78b":{"id":"com.apple.dock_size-immutable","displayName":"Size Immutable","description":"If true, locks the size slider.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_size-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_size-immutable_true","displayName":"True","description":null,"helpText":null}]},"5ba52e99ea4dcec4":{"id":"com.apple.managedclient.preferences_linkedaccountenabled","displayName":"Enable the linked account feature (Deprecated)","description":"Microsoft Edge guides a user to the account management page where they can link a Microsoft Account (MSA) to an Azure Active Directory (Azure AD) account.\n\nIf you enable or don't configure this policy, linked account information will be shown on a flyout. When the Azure AD profile doesn't have a linked account it will show \"Add account\".\n\nIf you disable this policy, linked accounts will be turned off and no extra information will be shown.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#linkedaccountenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_linkedaccountenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_linkedaccountenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"5baed40f555d2c30":{"id":"com.apple.managedclient.preferences_mandatoryextensionsforinprivatenavigation","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode","description":"This policy lets you specify a list of extension IDs that must be explicitly allowed by the user to run in InPrivate mode in order to enable InPrivate browsing.\n\nIf users don't allow all listed extensions to run in InPrivate mode, they'll be unable to navigate using InPrivate.\n\nIf any extension in the list isn't installed, InPrivate navigation is blocked.\n\nThis policy only applies when InPrivate mode is enabled. If InPrivate mode is disabled using the InPrivateModeAvailability policy, this policy has no effect.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#mandatoryextensionsforinprivatenavigation"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"5b1dbd769483a0d1":{"id":"com.apple.managedclient.preferences_microsoft365copilotchaticonenabled","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon will be shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\n\nThis policy only applies when users are accessing Copilot in the sidepane.\n\nIf the policy is enabled: Copilot will appear in the toolbar.\n\nIf the policy is disabled: Copilot won't appear in the toolbar.\n\nIf the policy isn't configured: Otherwise, Copilot shows in the toolbar and users may enable or disable Copilot from showing by using the Show Copilot toggle in settings.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#microsoft365copilotchaticonenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_microsoft365copilotchaticonenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_microsoft365copilotchaticonenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"5b50761a5abb8ef4":{"id":"com.apple.mcx.filevault2_userecoverykey","displayName":"Use Recovery Key","description":"If true, creates a personal recovery key and displays it to the user.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":{"id":"com.apple.mcx.filevault2_userecoverykey_true","displayName":"Enabled","description":null,"helpText":null}},"5b766469e8a422fa":{"id":"com.apple.system-extension-policy_allowedsystemextensions","displayName":"Allowed System Extensions","description":"A dictionary of approved system extensions on the computer. The dictionary maps the team identifiers (keys) to arrays of bundle identifiers, where the bundle identifier defines the system extension to install. It’s an error for the same team identifier to appear in both the AllowedTeamIdentifiers array and as a key in this dictionary.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"5b39d13a87f45913":{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence","displayName":"File Provider Presence","description":"Allows a File Provider application to know when the user is using files managed by the File Provider.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"5b34058cbb9cac2a":{"id":"com.apple.xsan.preferences_usedlc","displayName":"Use DLC","description":"If true, use the DLC for all volumes.","helpText":null,"infoUrls":[],"categoryId":"fd3717c1-dcf8-4038-b7f7-4ad3359a9d32","categoryName":"Xsan Preferences","options":[{"id":"com.apple.xsan.preferences_usedlc_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.xsan.preferences_usedlc_true","displayName":"True","description":null,"helpText":null}]},"5b85c4bd0d233508":{"id":"com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeurlallowlist","displayName":"Allow access to a list of URLs in InPrivate mode.","description":"This policy allows administrators to specify a list of URL patterns that are permitted to open in InPrivate mode. It can be used to create exceptions for URL patterns defined in \"InPrivateModeUrlBlocklist\". See how to format a URL pattern (https://go.microsoft.com/fwlink/?linkid=2095322).\n\nIf both this policy and \"InPrivateModeUrlBlocklist\" are configured, the allowlist takes precedence. URLs that match a pattern on this allowlist are allowed. URLs that match the blocklist but not this allowlist are blocked. URLs that match neither list fall back to \"URLBlocklist\" and \"URLAllowlist\".\n\nIf this policy is configured and \"InPrivateModeUrlBlocklist\" is not configured, only the URLs specified in this allowlist can be opened in InPrivate mode. All other URLs are blocked.\n\nIf \"InPrivateModeAvailability\" is set to disallow (value 1) but this policy is configured, InPrivate mode is available only for URLs that match the allowlist.\n\nIf this policy is not configured, no exceptions are applied to \"InPrivateModeUrlBlocklist\" or \"InPrivateModeAvailability\".\n\nThis policy applies only to InPrivate mode. To allow URLs across all browsing modes and profiles, use the \"URLAllowlist\" policy.\n\nThis policy supports up to 1000 entries.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"5b3090f0739947b1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled","displayName":"Allow suggestions from local providers","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\n\nIf you enable this policy, suggestions from local providers are used.\n\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions won't appear.\n\nIf you don't configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\n\nSome features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the \"SavingBrowserHistoryDisabled\" policy.\n\nThis policy requires a browser restart to finish applying.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"5bc995bbc6e166e0":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_registry_cse_nochanges10","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_registry_cse_nochanges10_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_registry_cse_nochanges10_1","displayName":"True","description":null,"helpText":null}]},"5b694e2d67f94bf0":{"id":"device_vendor_msft_policy_config_admx_icm_shellremoveorderprints_2","displayName":"Turn off the \"Order Prints\" picture task","description":"This policy setting specifies whether the \"Order Prints Online\" task is available from Picture Tasks in Windows folders.\r\n\r\nThe Order Prints Online Wizard is used to download a list of providers and allow users to order prints online.\r\n\r\nIf you enable this policy setting, the task \"Order Prints Online\" is removed from Picture Tasks in File Explorer folders.\r\n\r\nIf you disable or do not configure this policy setting, the task is displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellremoveorderprints-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_shellremoveorderprints_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_shellremoveorderprints_2_1","displayName":"Enabled","description":null,"helpText":null}]},"5b8296098c67b0fc":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requiremutualchap","displayName":"Do not allow sessions without mutual CHAP","description":"If enabled then only those sessions that are configured for mutual CHAP may be established. If disabled then sessions that are configured for mutual CHAP or sessions not configured for mutual CHAP may be established.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsisecurity-requiremutualchap"],"categoryId":"6c1d9109-e4d1-4718-a537-dd685464fdbe","categoryName":"i SCSI Security","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requiremutualchap_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requiremutualchap_1","displayName":"Enabled","description":null,"helpText":null}]},"5bbf1b24d5947b34":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel","displayName":"Microsoft Excel 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Excel 2013.\r\nBy default, the user settings of Microsoft Excel 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Excel 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013excel"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel_1","displayName":"Enabled","description":null,"helpText":null}]},"5bb34481bad21740":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013","displayName":"Microsoft Office 365 PowerPoint 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 PowerPoint 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 PowerPoint 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365powerpoint2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013_1","displayName":"Enabled","description":null,"helpText":null}]},"5bdf537513e7a193":{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_disableautoupdate","displayName":"Prevent Automatic Updates","description":"This policy setting allows you to turn off do not show first use dialog boxes.\r\n\r\nIf you enable this policy setting, the Privacy Options and Installation Options dialog boxes are prevented from being displayed the first time a user starts Windows Media Player.\r\n\r\nThis policy setting prevents the dialog boxes which allow users to select privacy, file types, and other desktop options from being displayed when the Player is first started. Some of the options can be configured by using other Windows Media Player group policies.\r\n\r\nIf you disable or do not configure this policy setting, the dialog boxes are displayed when the user starts the Player for the first time.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-disableautoupdate"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_disableautoupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_disableautoupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"5be746d34f8c14da":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsfeedbackhub","displayName":"Feedback Hub","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsfeedbackhub_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsfeedbackhub_1","displayName":"True","description":null,"helpText":null}]},"5b1fc344fa7f1969":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_1","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_2","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},"5b27e1bebefe5a6a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls","displayName":"Allow images on these sites","description":"Setting the policy lets you set a list of URL patterns that specify sites that may display images.\r\n\r\nLeaving the policy unset means DefaultImagesSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nNote that previously this policy was erroneously enabled on Android, but this functionality has never been fully supported on Android.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"5b089b401a03b37c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_prefetchwithserviceworkerenabled","displayName":"Allow SpeculationRules prefetch to ServiceWorker-controlled URLs","description":"SpeculationRules prefetch can be issued to URLs that are controlled by\r\nServiceWorker. However, legacy code did not allow it and canceled the prefetch\r\nrequests. This policy enables to control the behavior.\r\n\r\nSetting this policy to Enabled or not set allows SpeculationRules prefetch to\r\nServiceWorker-controlled URLs (if the PrefetchServiceWorker feature flag is\r\nenabled). This is the current default behavior and is aligned with the\r\nspecifications.\r\n\r\nSetting this policy to Disabled disallows SpeculationRules prefetch to\r\nServiceWorker-controlled URLs. This is the legacy behavior.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_prefetchwithserviceworkerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_prefetchwithserviceworkerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5ba86cd1fc53bf0c":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation","displayName":"Rule Compilation","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging Rule Compilation component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\RuleCompilation\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation_1","displayName":"Enabled","description":null,"helpText":null}]},"5b6d0525c1190dfa":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern","displayName":"SID Directory Name Pattern","description":"Specifies a string pattern used when creating a Profile or ODFC container folder. Use this setting to define how FSLogix will attempt to create a users Profile or ODFC container folder. FSLogix will use the VHDLocations or CCDLocations as the location where to create and this setting defines what to create.\r\n\r\nNOTE: When using this configuration setting, be sure the SIDDIRNameMatch value matches this setting.\r\n\r\n- This setting has NO EFFECT when FlipFlopProfileDirectoryName is enabled.\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled.\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > SIDDirNamePattern (this setting)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\SIDDirNamePattern\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_1","displayName":"Enabled","description":null,"helpText":null}]},"5b3435da518b13b6":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"5b95fc0d92fd3509":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowlessprivilegedsites"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"5b303d6eb8fced48":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit","displayName":"[Deprecated] Interactive Logon Machine Inactivity Limit (Deprecated)","description":"Interactive logon: Machine inactivity limit. Windows notices inactivity of a logon session, and if the amount of inactive time exceeds the inactivity limit, then the screen saver will run, locking the session. Default: not enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#localpoliciessecurityoptions-interactivelogon-machineinactivitylimit"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_1","displayName":"Enabled (session will lock after amount of inactive time exceeds the inactivity limit)","description":"Enabled (session will lock after amount of inactive time exceeds the inactivity limit)","helpText":null}]},"5bf569c42ba7653d":{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action","displayName":"Group and user action","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"categoryId":"b86100f0-e4ae-4f93-9dae-dd253a96726f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_add_update","displayName":"Add (Update)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_remove_update","displayName":"Remove (Update)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_add_restrict","displayName":"Add (Replace)","description":null,"helpText":null}]},"5b7d7fba6ca45c39":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices","displayName":"Send site information to improve Microsoft services","description":"This policy enables sending info about websites visited in Microsoft Edge to Microsoft to improve services like search.\r\n\r\nEnable this policy to send info about websites visited in Microsoft Edge to Microsoft. Disable this policy to not send info about websites visited in Microsoft Edge to Microsoft. In both cases, users can't change or override the setting.\r\n\r\nOn Windows 10, Beta and Stable if this policy is not configured, Microsoft Edge will default to the Windows diagnostic data setting. If this policy is enabled Microsoft Edge will only send info about websites visited in Microsoft Edge if the Windows Diagnostic data setting is set to Full. If this policy is disabled Microsoft Edge will not send info about websites visited. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 10, Canary and Dev channels, this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.\r\n\r\nOn Windows 7, 8, and Mac this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_1","displayName":"Enabled","description":null,"helpText":null}]},"5bd25df4c04456fe":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_nativemessagingallowlistdesc","displayName":"Names of the native messaging hosts to exempt from the block list (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":null},"5b212df3c19df39e":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~identity_m365authpopupsinworkenabled","displayName":"Allow M365 authentication popups in work profiles","description":"This policy controls whether Microsoft Edge allows Microsoft 365 authentication pop-ups to bypass the pop-up blocker in work profiles.\r\n\r\nWhen users are signed in with a work account, some Microsoft 365 sites (for example, microsoft.com, cloud.microsoft, and visualstudio.com) may open authentication pop-ups to login.microsoftonline.com, login.live.com, or login.microsoft.com. These pop-ups are required to complete sign-in.\r\n\r\nIf you enable this policy or don't configure it, Microsoft 365 authentication pop-ups are allowed in work profiles.\r\n\r\nIf you disable this policy, Microsoft 365 authentication pop-ups follow the default settings like other pop-ups.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~identity_m365authpopupsinworkenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~identity_m365authpopupsinworkenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5b47bfe0fe5b78e8":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_visioexe187","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_visioexe187_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_visioexe187_1","displayName":"True","description":null,"helpText":null}]},"5bdab7f9086a3ee6":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_outlookexe162","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_outlookexe162_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_outlookexe162_1","displayName":"True","description":null,"helpText":null}]},"5b79c508107ea86d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_vltosubscription","displayName":"Upgrade Office 2019 to Office 365 ProPlus","description":"This policy setting allows you to upgrade volume licensed versions of Office Professional Plus 2019 to Office 365 ProPlus.\r\n\r\nNote: For the user to be able to use Office 365 ProPlus, you must have purchased an Office 365 plan that includes Office 365 ProPlus, and you must have assigned the user a license to use Office 365 ProPlus.\r\n\r\nIf you enable this policy setting, the installed volume licensed version of Office 2019 on the user's computer will be upgraded to Office 365 ProPlus. We also recommend that you use Group Policy to specify an update path and an update channel for Office 365 ProPlus.\r\n\r\nNote: If there are volume licensed versions of Visio and Project on the user's computer, those won't be upgraded to Office 365 subscription versions.\r\n\r\nIf you disable or don't configure this policy setting, Office 2019 isn't automatically upgraded to Office 365 ProPlus. But, you can initiate the upgrade by using some other method, such as by using the Office Deployment Tool.","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_vltosubscription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_vltosubscription_1","displayName":"Enabled","description":null,"helpText":null}]},"5bfc570b9f1b51bb":{"id":"device_vendor_msft_policy_config_update_autorestartdeadlineperiodindays","displayName":"Auto Restart Deadline Period In Days","description":"For Quality Updates, this policy specifies the deadline in days before automatically executing a scheduled restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart is scheduled. The system will reboot on or after the specified deadline. The reboot is prioritized over any configured Active Hours and any existing system and user busy checks. Value type is integer. Default is 7 days. Supported values range: 2-30. Note that the PC must restart for certain updates to take effect. If you enable this policy, a restart will automatically occur the specified number of days after the restart was scheduled. If you disable or do not configure this policy, the PC will restart according to the default schedule. If any of the following two policies are enabled, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installations. Always automatically restart at scheduled time.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartdeadlineperiodindays"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"5bd0e35edab3d208":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_elevationaction","displayName":"Elevation action","description":"Specifies the elevation action for this system setting rule.","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_self","displayName":"User confirmed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_automatic","displayName":"Automatic","description":null,"helpText":null}]},"5b3d86aedcdba858":{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type","displayName":"Type","description":null,"helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type_0","displayName":"Path","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type_1","displayName":"File extension","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type_2","displayName":"Process name","description":null,"helpText":null}]},"5bf2af543e851992":{"id":"softwareupdate_rapidsecurityresponse_enable","displayName":"Enable","description":"If set to 'false', Background Security Improvements aren't offered for user installation. The system can still install Background Security Improvements with Software Update and Enforce Latest configurations. If set to 'true', the system offers Background Security Improvements to the user.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_rapidsecurityresponse_enable_false","displayName":"False","description":null,"helpText":null},{"id":"softwareupdate_rapidsecurityresponse_enable_true","displayName":"True","description":null,"helpText":null}]},"5b3dbe4305bae49e":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_l_setmaximumnumberoftrusteddocumentsspinid","displayName":"Maximum number: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":null},"5b06cb48784ca5a1":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize84_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"6730f0be-a129-4b48-942f-e4ddf69fee66","categoryName":"Customizable Error Messages","options":null},"5b4b34e8b51f2a20":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent","displayName":"Consent level (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_1","displayName":"Always ask before sending data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_2","displayName":"Send parameters","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_3","displayName":"Send parameters and safe additional data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_4","displayName":"Send all data","description":null,"helpText":null}]},"5b25a0707f91235e":{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_activexcontrol","displayName":"ActiveX Control (User)","description":"Permits or prohibits use of this snap-in.\n\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.\n\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted.\n\n To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited.\n\n To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.\n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-activexcontrol"],"categoryId":"acb49e73-5a6a-479b-9d58-c3cd7f632e9b","categoryName":"Restricted Permitted snap-ins","options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_activexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_activexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"5b0529afbb6a7f07":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage","displayName":"IP Security Policy Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipsecmanage"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_1","displayName":"Enabled","description":null,"helpText":null}]},"5be1aadd4c15c842":{"id":"user_vendor_msft_policy_config_admx_pentraining_pentrainingoff_1","displayName":"Turn off Tablet PC Pen Training (User)","description":"Turns off Tablet PC Pen Training.\r\n\r\nIf you enable this policy setting, users cannot open Tablet PC Pen Training.\r\n\r\nIf you disable or do not configure this policy setting, users can open Tablet PC Pen Training.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pentraining#admx-pentraining-pentrainingoff-1"],"categoryId":"fe65603b-1980-446b-ae17-516eb885c6be","categoryName":"Tablet PC Pen Training","options":[{"id":"user_vendor_msft_policy_config_admx_pentraining_pentrainingoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_pentraining_pentrainingoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},"5bb8e07c072eae73":{"id":"user_vendor_msft_policy_config_admx_sensors_disablesensors_1","displayName":"Turn off sensors (User)","description":"\r\n This policy setting turns off the sensor feature for this computer.\r\n\r\n If you enable this policy setting, the sensor feature is turned off, and all programs on this computer cannot use the sensor feature.\r\n\r\n If you disable or do not configure this policy setting, all programs on this computer can use the sensor feature.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablesensors-1"],"categoryId":"b40cfb22-8f17-4317-bcbb-c1c871497446","categoryName":"Location and Sensors","options":[{"id":"user_vendor_msft_policy_config_admx_sensors_disablesensors_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sensors_disablesensors_1_1","displayName":"Enabled","description":null,"helpText":null}]},"5ba652029a52e5b2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for profile types. (User)","description":"Configuring this policy will allow/disallow ambient authentication for Incognito and Guest profiles in Google Chrome.\r\n\r\nAmbient Authentication is http authentication with default credentials if explicit credentials are not provided via NTLM/Kerberos/Negotiate challenge/response schemes.\r\n\r\nSetting the RegularOnly (value 0), allows ambient authentication for Regular sessions only. Incognito and Guest sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the IncognitoAndRegular (value 1), allows ambient authentication for Incognito and Regular sessions. Guest sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the GuestAndRegular (value 2), allows ambient authentication for Guest and Regular sessions. Incognito sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the All (value 3), allows ambient authentication for all sessions.\r\n\r\nNote that, ambient authentication is always allowed on regular profiles.\r\n\r\nIn Google Chrome version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5ba329704b483a44":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled","displayName":"Browser experiments icon in toolbar (User)","description":"Setting the policy to Enabled or leaving the policy unset means that users can access browser experimental features through an icon in the toolbar\r\n\r\nSetting the policy to Disabled removes the browser experimental features icon from the toolbar.\r\n\r\nchrome://flags and any other means of turning off and on browser features will still behave as expected regardless of whether this policy is Enabled or Disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5b252404f57d88af":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata","displayName":"Import autofill form data from default browser on first run (User)","description":"Setting the policy to Enabled imports autofill form data from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no autofill form data is imported on first run.\r\n\r\nUsers can trigger an import dialog and the autofill form data checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata_1","displayName":"Enabled","description":null,"helpText":null}]},"5b505fb81e74e4c8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (User)","description":"Setting the policy to 3 lets websites ask for access to nearby Bluetooth devices. Setting the policy to 2 denies access to nearby Bluetooth devices.\r\n\r\nLeaving the policy unset lets sites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"5be2abd3cad829bf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts","displayName":"Allow user-level Native Messaging hosts (installed without admin permissions) (User)","description":"Setting the policy to Enabled or leaving it unset means Google Chrome can use native messaging hosts installed at the user level.\r\n\r\nSetting the policy to Disabled means Google Chrome can only use these hosts if installed at the system level.","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts_1","displayName":"Enabled","description":null,"helpText":null}]},"5b436792b18bda67":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls","displayName":"Block key generation on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"5b0261599ee71c96":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_ntpshortcuts","displayName":"Setting shortcuts on the New Tab Page (Beta) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"5b7e513c16885049":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":null},"5bc5537b18f1f36b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc","displayName":"Allow pop-up windows on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"5b005928fdb5ef0a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc","displayName":"Block WebUSB on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"5b18e14f3361f6f3":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled","displayName":"Allow suggestions from local providers (User)","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\r\n\r\nIf you enable this policy, suggestions from local providers are used.\r\n\r\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions will not appear.\r\n\r\nIf you do not configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\r\n\r\nNote that some features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy.\r\n\r\nThis policy requires a browser restart to finish applying.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5bfb772adde5e1ce":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup","displayName":"Allow the Search bar at Windows startup (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 119.\r\n\r\nThis policy is obsolete due to the deprecation of the Web widget, which is now known as Edge search bar. Admins should use SearchbarIsEnabledOnStartup for Edge search bar instead. Allows the Search bar to start running at Windows startup.\r\n\r\nIf you enable this policy the Search bar will start running at Windows startup by default. If the Search bar is disabled via 'WebWidgetAllowed' (Enable the Search bar) policy, this policy will not start the Search bar on Windows startup.\r\n\r\nIf you disable this policy, the Search bar will not start at Windows startup for all profiles. The option to start the Edge search bar at Windows startup will be disabled and toggled off in Microsoft Edge settings.\r\n\r\nIf you don't configure this policy, the Search bar will not start at Windows startup for all profiles. The option to start the Edge search bar at Windows startup will be toggled off in Microsoft Edge settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"5b02c91410904ede":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended~smartscreen_recommended_newsmartscreenlibraryenabled_recommended","displayName":"Enable new SmartScreen library (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 107.\r\n\r\nThis policy doesn't work because it was only intended to be a short-term mechanism to support the update to a new SmartScreen client.\r\n\r\nAllows the Microsoft Edge browser to load the new SmartScreen library (libSmartScreenN) for any SmartScreen checks on site URLs or application downloads.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will use the new SmartScreen library (libSmartScreenN).\r\n\r\nIf you disable this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nBefore Microsoft Edge version 103, if you don't configure this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management.\r\nThis also includes macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended~smartscreen_recommended_newsmartscreenlibraryenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended~smartscreen_recommended_newsmartscreenlibraryenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"5b0cdb0aa702db2f":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode","displayName":"Print PostScript Mode (User)","description":"Controls how Microsoft Edge prints on Microsoft Windows.\r\n\r\nPrinting to a PostScript printer on Microsoft Windows different PostScript generation methods can affect printing performance.\r\n\r\nIf you set this policy to Default, Microsoft Edge will use a set of default options when generating PostScript. For text in particular, text will always be rendered using Type 3 fonts.\r\n\r\nIf you set this policy to Type42, Microsoft Edge will render text using Type 42 fonts if possible. This should increase printing speed for some PostScript printers.\r\n\r\nIf you don't configure this policy, Microsoft Edge will be in Default mode.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default\r\n\r\n* Type42 (1) = Type42\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_1","displayName":"Enabled","description":null,"helpText":null}]},"5bc643d204e0e547":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationexcel","displayName":"[Deprecated] Don’t AutoSave files in Excel (User)","description":"Important: This policy setting will be removed in a future release and will no longer be supported. Please use the \"Turn off AutoSave by default in Excel\" policy setting instead.\r\n \r\nThis policy setting controls whether files can be AutoSaved in the desktop version of Excel after Excel has been updated with new features. By default, Auto Saving files is Enabled.\r\n\r\nIf you enable this policy setting files will not be able to be AutoSaved.\r\n\r\nIf you disable or don’t configure this policy setting files will be able to be AutoSaved.\r\n\r\nNote: There are separate policy settings for Word, Excel, and PowerPoint.\r\n ","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"5bf7195553de479c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastservicenotesdefaulturl1","displayName":"Shared Notes Default Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"5be4d353a12adee8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_infopath","displayName":"Microsoft InfoPath (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_infopath_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_infopath_1","displayName":"True","description":null,"helpText":null}]},"5b981d516ecbdbfb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_l_workflowcachename488","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"5bd719349fde4c44":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_l_workflowcachename458","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"5b0d526b326dc4e2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_l_requestedxadeslevelforsignaturegenerationdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_l_requestedxadeslevelforsignaturegenerationdropid_0","displayName":"No XAdES","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_l_requestedxadeslevelforsignaturegenerationdropid_1","displayName":"XAdES-BES","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_l_requestedxadeslevelforsignaturegenerationdropid_2","displayName":"XAdES-T","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_l_requestedxadeslevelforsignaturegenerationdropid_3","displayName":"XAdES-C","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_l_requestedxadeslevelforsignaturegenerationdropid_4","displayName":"XAdES-X","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_l_requestedxadeslevelforsignaturegenerationdropid_5","displayName":"XAdES-X-L","description":null,"helpText":null}]},"5bfee8bcf4981286":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autobulletrecognition","displayName":"Auto Bullet Recognition (User)","description":"Checks/Unchecks the option ''Apply bullets to lists automatically''.","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autobulletrecognition_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autobulletrecognition_1","displayName":"Enabled","description":null,"helpText":null}]},"5bfafc56487710a7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9_l_preventusersfromchangingmonthsoffreebusyinformation1","displayName":"Prevent users from changing Months of Free/Busy information being published (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9_l_preventusersfromchangingmonthsoffreebusyinformation1_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9_l_preventusersfromchangingmonthsoffreebusyinformation1_1","displayName":"True","description":null,"helpText":null}]},"5bfe697f93720772":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable specific shortcut key combinations in the specified applications. \r\n\r\nIf you enable this policy setting you can disable specific shortcut keys for the selected application. The predefined list of shortcut keys you can disable becomes available to you when you enable this policy setting. \r\n\r\nIf you disable or do not configure this policy setting, the predefined list of shortcut keys are enabled for the application.","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_1","displayName":"Enabled","description":null,"helpText":null}]},"5b51d33059495fa3":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc17_l_descriptioncolon74","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"5b4acd0c629664c7":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05","displayName":"Trusted Location #5 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_1","displayName":"Enabled","description":null,"helpText":null}]},"5ba6a9bacda3da0c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_l_datecolon37","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"5bb7211f9d789d58":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc10_l_allowsubfolders47","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc10_l_allowsubfolders47_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc10_l_allowsubfolders47_1","displayName":"True","description":null,"helpText":null}]},"5b586a0701121648":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensureheadingsaresuccinct","displayName":"Stop checking to ensure headings are succinct (User)","description":"This policy setting prevents the Accessibility Checker from checking to ensure that headings in a document are succinct.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking to ensure that headings in a document are succinct.\r\n\r\nIf you disable or do not configure this policy setting, document headings will be checked for length and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensureheadingsaresuccinct_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensureheadingsaresuccinct_1","displayName":"Enabled","description":null,"helpText":null}]},"5b1ce37952888fe7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_replacetextasyoutype","displayName":"Replace text as you type (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e95db55a-8337-416d-a61f-e60f55cc0d13","categoryName":"AutoCorrect","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_replacetextasyoutype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_replacetextasyoutype_1","displayName":"Enabled","description":null,"helpText":null}]},"5be2cc93d3cb258d":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_edgetraversal","displayName":"Edge Traversal","description":"Indicates whether edge traversal is enabled or disabled for this rule.\n\nThe EdgeTraversal property indicates that specific inbound traffic is allowed to tunnel through NATs and other edge devices using the Teredo tunneling technology. In order for this setting to work correctly, the application or service with the inbound firewall rule needs to support IPv6. The primary application of this setting allows listeners on the host to be globally addressable through a Teredo IPv6 address.\n\nNew rules have the EdgeTraversal property disabled by default.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_edgetraversal_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_edgetraversal_1","displayName":"Enabled","description":"Enabled","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/5c.json b/public/intune-definitions/5c.json new file mode 100644 index 000000000000..772456843158 --- /dev/null +++ b/public/intune-definitions/5c.json @@ -0,0 +1 @@ +{"5c649e3bb732a0e8":{"id":"com.apple.airprint_airprint_item_forcetls","displayName":"Force TLS","description":"If true, AirPrint connections are secured by Transport Layer Security (TLS). Available only in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"429c4b85-a2b4-46ed-afa0-6c89c08a5544","categoryName":"AirPrint","options":[{"id":"com.apple.airprint_airprint_item_forcetls_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.airprint_airprint_item_forcetls_true","displayName":"True","description":null,"helpText":null}]},"5c064314e052e79f":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver","displayName":"Update channel override (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"5c7bef48f55a1056":{"id":"com.apple.softwareupdate_automaticdownload","displayName":"Automatic Download (Deprecated)","description":"If false, deselects the \"Download new updates when available from the App Store\" option and prevents the user from changing the option.","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_automaticdownload_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_automaticdownload_true","displayName":"True","description":null,"helpText":null}]},"5c74148f8b05b98f":{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"5c621c3c025c8c20":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cookiessessiononlyforurls","displayName":"Limit cookies from specific websites to the current session","description":"Cookies created by websites that match a URL pattern you define are deleted when the session ends (when the window closes).\n\nCookies created by websites that don't match the pattern are controlled by the \"DefaultCookiesSetting\" policy (if set) or by the user's personal configuration. This is also the default behavior if you don't configure this policy.\n\nYou can also use the \"CookiesAllowedForUrls\" and \"CookiesBlockedForUrls\" policies to control which websites can create cookies.\n\nNote there can't be conflicting URL patterns set between these three policies:\n\n- \"CookiesBlockedForUrls\"\n\n- \"CookiesAllowedForUrls\"\n\n- CookiesSessionOnlyForUrls\n\nFor detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.\n\nIf you set the \"RestoreOnStartup\" policy to restore URLs from previous sessions, this policy is ignored, and cookies are stored permanently for those sites.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"5cb8c120a46df05e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI","description":"Controls print image resolution when Microsoft Edge prints PDFs with rasterization.\n\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution significantly increases the processing and printing time while a low resolution can lead to poor imaging quality.\n\nIf you set this policy, it allows a particular resolution to be specified for use when rasterizing PDFs for printing.\n\nIf you set this policy to zero or don't configure it, the system default resolution is used during rasterization of page images.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"5c304d3cf7189c57":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadsinsecurewarningsenabled","displayName":"Enable insecure download warnings","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\n\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user receives a UI warning, such as \"Insecure download blocked\". The user can still download the item.\n\nIf you disable this policy, the warnings for insecure downloads are suppressed.","helpText":null,"infoUrls":[],"categoryId":"5e8e9c7f-1988-45cd-b5ca-78d939e3d49e","categoryName":"Downloads","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadsinsecurewarningsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadsinsecurewarningsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"5ca57cfea86ab7c4":{"id":"device_vendor_msft_multisim_{modemid}_policies_slotselectionenabled","displayName":"Slot Selection Enabled","description":"Determines whether the user is allowed to change slots in the Cellular settings UI. Default is true.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/MultiSIM-csp/"],"categoryId":"83fb8ae9-dfc0-4ff8-8a98-3a04f0edd919","categoryName":"Multi SIM","options":[{"id":"device_vendor_msft_multisim_{modemid}_policies_slotselectionenabled_false","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_multisim_{modemid}_policies_slotselectionenabled_true","displayName":"Enabled","description":"Enabled","helpText":null}]},"5c14e0fa69a7fedb":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usecloudtrustforonpremauth","displayName":"Use Cloud Trust For On Prem Auth","description":"Windows Hello for Business to use Azure AD Kerberos to authenticate to on-premises resources. \n\nIf you enable this policy setting, Windows Hello for Business will use an Azure AD Kerberos ticket to authenticate to on-premises resources.\n\nIf you disable or do not configure this policy setting, Windows Hello for Business will use a key or certificate to authenticate to on-premises resources.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usecloudtrustforonpremauth_false","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usecloudtrustforonpremauth_true","displayName":"Enabled","description":"Enabled","helpText":null}]},"5ca358946011b686":{"id":"device_vendor_msft_passportforwork_dynamiclock_plugins","displayName":"Dynamic Lock Plugins","description":"List of plugins that the passive provider monitors to detect user absence","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"5cad9ae9552df37e":{"id":"device_vendor_msft_policy_config_abovelock_allowcortanaabovelock","displayName":"Allow Cortana Above Lock","description":"Added in Windows 10, version 1607. Specifies whether or not the user can interact with Cortana using speech while the system is locked. If you allow or don’t configure this setting, the user can interact with Cortana using speech while the system is locked. If you block this setting, the system will need to be unlocked for the user to interact with Cortana using speech.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-abovelock#allowcortanaabovelock"],"categoryId":"ef8b8f2d-7791-4c44-a4f2-e39051f2e715","categoryName":"Above Lock","options":[{"id":"device_vendor_msft_policy_config_abovelock_allowcortanaabovelock_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_abovelock_allowcortanaabovelock_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"5cf2c060e6daff5a":{"id":"device_vendor_msft_policy_config_admx_msi_disablesharedcomponent","displayName":"Turn off shared components","description":"This policy setting controls the ability to turn off shared components.\r\n\r\nIf you enable this policy setting, no packages on the system get the shared component functionality enabled by the msidbComponentAttributesShared attribute in the Component Table.\r\n\r\nIf you disable or do not configure this policy setting, by default, the shared component functionality is allowed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disablesharedcomponent"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disablesharedcomponent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disablesharedcomponent_1","displayName":"Enabled","description":null,"helpText":null}]},"5cd4f29bd7435dc4":{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_4_wdiscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":"","helpText":"","infoUrls":[],"categoryId":"a7e7529f-1030-41da-8b4d-024e1c08bbac","categoryName":"Windows Standby Resume Performance Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_4_wdiscenarioexecutionpolicylevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_4_wdiscenarioexecutionpolicylevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"5cc7c5c85255e7eb":{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_prioritylevel","displayName":"Priority level:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_prioritylevel_4294967294","displayName":"Lowest","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_prioritylevel_4294967295","displayName":"Below Normal","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_prioritylevel_0","displayName":"Normal","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_prioritylevel_1","displayName":"Above Normal","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_prioritylevel_2","displayName":"Highest","description":null,"helpText":null}]},"5c5b295d57ff94c8":{"id":"device_vendor_msft_policy_config_admx_tpm_osmanagedauth_name_selectosmanagedauthlevel","displayName":"Operating system managed TPM authentication level:","description":null,"helpText":"","infoUrls":[],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_osmanagedauth_name_selectosmanagedauthlevel_4","displayName":"Full","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_osmanagedauth_name_selectosmanagedauthlevel_2","displayName":"Delegated","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_osmanagedauth_name_selectosmanagedauthlevel_0","displayName":"None","description":null,"helpText":null}]},"5cc80781b3216245":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner","displayName":"Microsoft SharePoint Designer 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2013.\r\nBy default, the user settings of Microsoft SharePoint Designer 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Designer 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Designer 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013sharepointdesigner"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner_1","displayName":"Enabled","description":null,"helpText":null}]},"5c7d227ecab7bd38":{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_disablepowermanagement","displayName":"Disable power management in connected standby mode","description":"This policy setting specifies that power management is disabled when the machine enters connected standby mode. \r\n\r\nIf this policy setting is enabled, Windows Connection Manager does not manage adapter radios to reduce power consumption when the machine enters connected standby mode.\r\n\r\nIf this policy setting is not configured or is disabled, power management is enabled when the machine enters connected standby mode.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wcm#admx-wcm-wcm-disablepowermanagement"],"categoryId":"d4c9d046-a8c0-46f0-bd62-bc4d1614e891","categoryName":"Windows Connection Manager","options":[{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_disablepowermanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_disablepowermanagement_1","displayName":"Enabled","description":null,"helpText":null}]},"5c6b8b1293a08b84":{"id":"device_vendor_msft_policy_config_appvirtualization_virtualcomponentsallowlist_virtualization_jitvallowlist_prompt","displayName":"Virtual Component Process Allow List","description":"","helpText":"","infoUrls":[],"categoryId":"10835ce3-31c8-4ec6-aa00-c5af48e550a8","categoryName":"Virtualization","options":null},"5c190bb8838f9173":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_autoplayallowlistdesc","displayName":"Allow media autoplay on a allowlist of URL patterns (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"5c0ad92893c37e2f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled","displayName":"Enable URL-keyed anonymized data collection","description":"Setting the policy to Enabled means URL-keyed anonymized data collection, which sends URLs of pages the user visits to Google to make searches and browsing better, is always active.\r\n\r\nSetting the policy to Disabled results in no URL-keyed anonymized data collection.\r\n\r\nIf you set the policy, users can't change. If not set, then URL-keyed anonymized data collection at first, but users can change it.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5ccbc660241d0cd9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled","displayName":"Allow Basic authentication for HTTP","description":"Setting the policy to Enabled or leaving it unset will allow Basic authentication challenges received over non-secure HTTP.\r\n\r\nSetting the policy to Disabled forbids non-secure HTTP requests from using the Basic authentication scheme; only secure HTTPS is allowed.\r\n\r\nThis policy setting is ignored (and Basic is always forbidden) if the AuthSchemes policy is set and does not include Basic.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5c0098563fc4ee67":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride","displayName":"Enable App Installer Hash Override","description":"This policy controls whether or not the Windows Package Manager can be configured to enable the ability override the SHA256 security validation in settings.\n\nIf you enable or do not configure this policy, users will be able to enable the ability override the SHA256 security validation in the Windows Package Manager settings.\n\nIf you disable this policy, users will not be able to enable the ability override the SHA256 security validation in the Windows Package Manager settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablehashoverride"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride_1","displayName":"Enabled","description":null,"helpText":null}]},"5c7c7be95aa6d73b":{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter","displayName":"Let antivirus filter protect dev drives","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter_1","displayName":"True","description":null,"helpText":null}]},"5c17ee43a49e41d0":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl","displayName":"Attached VHD SDDL","description":"SDDL string representing the ACLs to use when attaching the VHD.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\AttachVHDSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_1","displayName":"Enabled","description":null,"helpText":null}]},"5c2f52b4cd60efb6":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetjavapermissions"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"5c25739ccfe4ad9c":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowuserdatapersistence"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"5c4dab3f78454e34":{"id":"device_vendor_msft_policy_config_lockdown_allowedgeswipe","displayName":"Allow Edge Swipe","description":"Allows the user to invoke any system user interface by swiping in from any screen edge using touch. The easiest way to verify the policy is to restart the explorer process or to reboot after the policy is applied. And then try to swipe from the right edge of the screen. The desired result is for Action Center to not be invoked by the swipe. You can also enter tablet mode and attempt to swipe from the top of the screen to rearrange. That will also be disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LockDown#allowedgeswipe"],"categoryId":"119ca05b-5f1f-4714-a942-2a76b05d2a7b","categoryName":"Lock Down","options":[{"id":"device_vendor_msft_policy_config_lockdown_allowedgeswipe_0","displayName":"Block","description":"Disallow edge swipe.","helpText":null},{"id":"device_vendor_msft_policy_config_lockdown_allowedgeswipe_1","displayName":"Allow","description":"Allow edge swipe.","helpText":null}]},"5c4e772b918a252c":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled","displayName":"Enable spellcheck","description":"If you enable or don't configure this policy, the user can use spellcheck.\r\n\r\nIf you disable this policy, the user can't use spellcheck and the 'SpellcheckLanguage' (Enable specific spellcheck languages) and 'SpellcheckLanguageBlocklist' (Force disable spellcheck languages) policies are also disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5c8c8bd51a015afb":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended","displayName":"Block smart actions for a list of services","description":"List specific services, such as PDFs, that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\r\n\r\nIf you enable the policy: :\r\n - The smart action in the mini and full context menu will be disabled for all profiles for services that match the given list.\r\n - Users will not see the smart action in the mini and full context menu on text selection for services that match the given list.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be disabled for services that match the given list.\r\n\r\nIf you disable or don't configure this policy:\r\n - The smart action in the mini and full context menu will be enabled for all profiles.\r\n - Users will see the smart action in the mini and full context menu on text selection.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nsmart_actions_pdf","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"5c8a5b775301f026":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_enabled","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_disabled","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null}]},"5c0ca6535c8ee0b3":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_grooveexe14","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_grooveexe14_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_grooveexe14_1","displayName":"True","description":null,"helpText":null}]},"5caaa3ca0ee1486a":{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions","displayName":"Point and Print Restrictions","description":"This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain.\n\n If you enable this policy setting:\n -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made.\n -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print, or when printer connection drivers need to be updated.\n\n If you do not configure this policy setting:\n -Windows Vista client computers can point and print to any server.\n -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print.\n -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated.\n -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print.\n\n If you disable this policy setting:\n -Windows Vista client computers can create a printer connection to any server using Point and Print.\n -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print.\n -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated.\n -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print.\n -The \"Users can only point and print to computers in their forest\" setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-pointandprintrestrictions"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"5c60066cb0bf0e8c":{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list","displayName":"Maximum ticket time (units):","description":"","helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list_0","displayName":"Minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list_1","displayName":"Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list_2","displayName":"Days","description":null,"helpText":null}]},"5c1bdb0dbc820760":{"id":"device_vendor_msft_policy_config_start_hideapplist","displayName":"Hide App List","description":"Setting the value of this policy to 1 or 2 collapses the app list. Setting the value of this policy to 3 removes the app list entirely. Setting the value of this policy to 2 or 3 disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideapplist"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hideapplist_0","displayName":"None.","description":"None.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideapplist_1","displayName":"Hide all apps list.","description":"Hide all apps list.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideapplist_2","displayName":"Hide all apps list, and Disable \"Show app list in Start menu\" in Settings app.","description":"Hide all apps list, and Disable \"Show app list in Start menu\" in Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideapplist_3","displayName":"Hide all apps list, remove all apps button, and Disable \"Show app list in Start menu\" in Settings app.","description":"Hide all apps list, remove all apps button, and Disable \"Show app list in Start menu\" in Settings app.","helpText":null}]},"5c43e0fc89a21480":{"id":"device_vendor_msft_policy_config_start_hidechangeaccountsettings","displayName":"Hide Change Account Settings","description":"Enabling this policy hides \"Change account settings\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidechangeaccountsettings"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidechangeaccountsettings_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidechangeaccountsettings_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"5c577505a600ff0a":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},"5c1f0d171585d91e":{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid","displayName":"Channel Name: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_current","displayName":"Current Channel","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasecurrent","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_monthlyenterprise","displayName":"Monthly Enterprise Channel","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_deferred","displayName":"Semi-Annual Enterprise Channel","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasedeferred","displayName":"Semi-Annual Enterprise Channel (Preview)","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_insiderfast","displayName":"Beta Channel","description":null,"helpText":null}]},"5c141665fa999271":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nomousepointersui","displayName":"Prevent changing mouse pointers (User)","description":"Prevents users from changing the mouse pointers.\r\n\r\nBy default, users can use the Pointers tab in the Mouse Control Panel to add, remove, or change the mouse pointers.\r\n\r\nIf you enable this setting, none of the mouse pointer scheme settings can be changed by the user.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nomousepointersui"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nomousepointersui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nomousepointersui_1","displayName":"Enabled","description":null,"helpText":null}]},"5c74404da70585a2":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_ipstatechecking","displayName":"Turn off notifications when a connection has only limited or no connectivity (User)","description":"This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable to retrieve an IP address from a DHCP server. This is often signified by the assignment of an automatic private IP address\"(i.e. an IP address in the range 169.254.*.*). This indicates that a DHCP server could not be reached or the DHCP server was reached but unable to respond to the request with a valid IP address. By default, a notification is displayed providing the user with information on how the problem can be resolved.\r\n\r\nIf you enable this policy setting, this condition will not be reported as an error to the user.\r\n\r\nIf you disable or do not configure this policy setting, a DHCP-configured connection that has not been assigned an IP address will be reported via a notification, providing the user with information as to how the problem can be resolved.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-ipstatechecking"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_ipstatechecking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_ipstatechecking_1","displayName":"Enabled","description":null,"helpText":null}]},"5c9dc3bf41eb2213":{"id":"user_vendor_msft_policy_config_admx_scripts_run_legacy_logon_script_hidden","displayName":"Run legacy logon scripts hidden (User)","description":"This policy setting hides the instructions in logon scripts written for Windows NT 4.0 and earlier. \r\n\r\nLogon scripts are batch files of instructions that run when the user logs on. By default, Windows 2000 displays the instructions in logon scripts written for Windows NT 4.0 and earlier in a command window as they run, although it does not display logon scripts written for Windows 2000.\r\n\r\nIf you enable this setting, Windows 2000 does not display logon scripts written for Windows NT 4.0 and earlier.\r\n\r\nIf you disable or do not configure this policy setting, Windows 2000 displays login scripts written for Windows NT 4.0 and earlier.\r\n\r\nAlso, see the \"Run Logon Scripts Visible\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-legacy-logon-script-hidden"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_legacy_logon_script_hidden_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_legacy_logon_script_hidden_1","displayName":"Enabled","description":null,"helpText":null}]},"5c045c6e136b98cb":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator","displayName":"Calculator (User)","description":"This policy setting configures the synchronization of user settings of Calculator.\r\nBy default, the user settings of Calculator synchronize between computers. Use the policy setting to prevent the user settings of Calculator from synchronization between computers. \r\nIf you enable this policy setting, the Calculator user settings continue to synchronize. \r\nIf you disable this policy setting, Calculator user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-calculator"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator_1","displayName":"Enabled","description":null,"helpText":null}]},"5c18b511455ca56b":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype","displayName":"Proxy type (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype_3","displayName":"Autodetect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype_2","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype_1","displayName":"Use browser proxy settings","description":null,"helpText":null}]},"5c8afeaea7df9e7f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin","displayName":"Sets managed configuration values to websites to specific origins (User)","description":"Setting the policy defines the return value of Managed Configuration API for given origin.\r\n\r\n Managed configuration API is a key-value configuration that can be accessed via navigator.managed.getManagedConfiguration() javascript call. This API is only available to origins which correspond to force-installed web applications via WebAppInstallForceList.\r\n\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedConfigurationPerOrigin for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"origin\": \"https://www.google.com\",\r\n \"managed_configuration_url\": \"https://gstatic.google.com/configuration.json\",\r\n \"managed_configuration_hash\": \"asd891jedasd12ue9h\"\r\n },\r\n {\r\n \"origin\": \"https://www.example.com\",\r\n \"managed_configuration_url\": \"https://gstatic.google.com/configuration2.json\",\r\n \"managed_configuration_hash\": \"djio12easd89u12aws\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"5c67596bf7be4142":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_authserverwhitelist","displayName":"Authentication server whitelist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"5c76cef8c1479e5e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode","displayName":"Choose how to specify proxy server settings (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_1","displayName":"Enabled","description":null,"helpText":null}]},"5c04087bd9277a8b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled","displayName":"Allows the AppCache feature to be re-enabled even if it is off by default. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5c38d242013e18a2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_filehandlingallowedforurlsdesc","displayName":"Allow the File Handling API on these web apps (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"5ca6aba73fee10c6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser","displayName":"Enterprise Logo URL for a managed browser (User)","description":"A URL to an image that will be used as an enterprise badge for a managed browser. The URL must point to an image.\r\n\r\nIt is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 48 x 48 px.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nExample value: https://example.com/image.png","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_1","displayName":"Enabled","description":null,"helpText":null}]},"5c94d94aaaa5fd1b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},"5c4ea06e2cdbd51b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_datecolon34","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"5c9ed7d5f135df1d":{"id":"user_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange","displayName":"Prevent changing the default search provider (User)","description":"This policy setting prevents the user from changing the default search provider for the Address bar and the toolbar Search box.\n\nIf you enable this policy setting, the user cannot change the default search provider.\n\nIf you disable or do not configure this policy setting, the user can change the default search provider.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesearchproviderchange"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_1","displayName":"Enabled","description":null,"helpText":null}]},"5c7b573efc007f36":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles","displayName":"Allow drag and drop or copy and paste files (User)","description":"This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\n\nIf you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.\n\nIf you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.\n\nIf you do not configure this policy setting, users can drag files or copy and paste files from this zone automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowdraganddropcopyandpastefiles"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"5c20eeaf6548aaf5":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowaccesstodatasources"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"5cfa40191336c2b6":{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview","displayName":"Restore PDF view (User)","description":"Enables PDF View Recovery in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy Microsoft Edge will recover the last state of PDF view and land users to the section where they ended reading in the last session.\r\n\r\nIf you disable this policy Microsoft Edge will recover the last state of PDF view and land users at the start of the PDF file.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_1","displayName":"Enabled","description":null,"helpText":null}]},"5cbcac5d587b92c3":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_hstspolicybypasslistdesc","displayName":"Configure the list of names that will bypass the HSTS policy check (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"5c5b8606e28aed97":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_internetexplorerintegrationlocalfileextensionallowlistdesc","displayName":"Open local files in Internet Explorer mode file extension allow list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"5ce37f8f129d2481":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastserviceminorversion4","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"5cff58a801b90e27":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mongoliancyrillic","displayName":"Mongolian (Cyrillic) (User)","description":"Enables the editing language Mongolian (Cyrillic)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mongoliancyrillic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mongoliancyrillic_1","displayName":"Enabled","description":null,"helpText":null}]},"5cd9b97a5f55f493":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_turnoffpdfencryptionsettingui","displayName":"Turn off PDF encryption setting UI (User)","description":"This policy setting allows you to turn off the PDF encryption setting UI.\r\n\r\nIf you enable this policy setting, the PDF encryption UI is hidden. If your organization has a higher requirement on encryption than what is supported, the recommendation is to enable this policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the PDF encryption UI is shown, and users may choose to encrypt the PDF file or not.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_turnoffpdfencryptionsettingui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_turnoffpdfencryptionsettingui_1","displayName":"Enabled","description":null,"helpText":null}]},"5c9d70a072684f61":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofreceipientsinanoutlookitem_l_empty430","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":null},"5cecbd9b33e1fbdd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationexcel","displayName":"Don’t show the What’s New information for Excel (User)","description":"This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Excel for the first time after Excel has been updated with new features. By default, the What’s New information is shown.\r\n\r\nIf you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled.\r\n\r\nIf you disable or don’t configure this policy setting, the What’s New information is shown.\r\n\r\nNote: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio.\r\n ","helpText":"","infoUrls":[],"categoryId":"adf11731-7089-4e2e-8dde-4bd9ef86b067","categoryName":"What's New","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"5cef0e98ef227384":{"id":"user_vendor_msft_policy_config_office16v6~policy~l_microsoftofficesystem~l_securitysettings_l_disablestrictvbarefssecuritypolicy","displayName":"Disable additional security checks on VBA library references that may refer to unsafe locations on the local machine (User)","description":"This policy setting restricts VBA to checking project library references only against the registry and trusted zones. By default VBA performs additional checks against library paths to prevent loading references from potentially unsafe locations on the local machine as well. It is recommended that this setting remain 0 or unset to allow for the more secure default behavior. Only enable this setting if the default behavior is causing compatibility issues with critical solutions, and then, only to provide time to migrate the solutions to address the less secure behavior, at which point the setting should be turned off again.\r\n ","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v6~policy~l_microsoftofficesystem~l_securitysettings_l_disablestrictvbarefssecuritypolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v6~policy~l_microsoftofficesystem~l_securitysettings_l_disablestrictvbarefssecuritypolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"5ceed0e1ad019267":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox","displayName":"Libraries: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"5ce787ede310a4f2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_trustemailfromcontacts","displayName":"Trust e-mail from contacts (User)","description":"This policy setting controls whether Outlook analyzes e-mail from users' Contacts when filtering junk e-mail.\r\n\r\nIf you enable this policy setting, the \"Also trust E-mail from my Contacts\" check box is selected in the Safe Senders tab of the Junk E-mail Options dialog and users cannot change it. E-mail addresses in users' Contacts list are treated as safe senders for purposes of filtering junk e-mail.\r\n\r\nIf you disable this policy setting, e-mail addresses in users' Contacts list are not treated as safe senders for purposes of filtering junk email, and users cannot change this configuration.\r\n\r\nIf you do not configure this policy setting, e-mail messages that are received from people who are listed in Contacts are considered safe by the Junk E-mail Filter, but users can change this configuration.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_trustemailfromcontacts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_trustemailfromcontacts_1","displayName":"Enabled","description":null,"helpText":null}]},"5cce401a2a482baf":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope_l_setdefaultsearchscopedropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope_l_setdefaultsearchscopedropid_0","displayName":"Default behavior (see explanation)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope_l_setdefaultsearchscopedropid_1","displayName":"\"All Mailboxes\" on all folders","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope_l_setdefaultsearchscopedropid_2","displayName":"\"Current Folder\" on all folders","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope_l_setdefaultsearchscopedropid_3","displayName":"\"Current Mailbox\" on all folders","description":null,"helpText":null}]},"5cb7891038caf857":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid","displayName":"Parameters (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":null},"5c11ec8cd4140c10":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_prompttoupdatestyle","displayName":"Prompt to update style (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_prompttoupdatestyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_prompttoupdatestyle_1","displayName":"Enabled","description":null,"helpText":null}]},"5cf0c7e786174b35":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_linkedinresumeassistant","displayName":"Allow LinkedIn Resume Assistant feature (User)","description":"This policy setting controls whether the LinkedIn Resume Assistant appears in Word.\r\n\r\nIf you enable or do not configure this policy, users will be able to use the LinkedIn Resume Assistant.\r\n\r\nIf you disable this policy setting, the LinkedIn Resume Assistant will not be available.\r\n\r\nImportant: This policy setting only applies to Office 365 clients that are installed by using Click-to-Run, including Office 365 ProPlus, Office 365 Business, Visio Pro for Office 365 and Project Pro for Office 365. It doesn't apply to Office products that use Windows Installer (MSI).\r\n ","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_linkedinresumeassistant_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_linkedinresumeassistant_1","displayName":"Enabled","description":null,"helpText":null}]},"5c769afb39505195":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_datecolon25","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"5c595362d4c6c427":{"id":"vendor_msft_firewall_mdmstore_domainprofile_authappsallowuserprefmerge","displayName":"Auth Apps Allow User Pref Merge","description":"This value is used as an on/off switch. If this value is false, authorized application firewall rules in the local store are ignored and not enforced. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_authappsallowuserprefmerge_false","displayName":"False","description":"AuthAppsAllowUserPrefMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_authappsallowuserprefmerge_true","displayName":"True","description":"AuthAppsAllowUserPrefMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/5d.json b/public/intune-definitions/5d.json new file mode 100644 index 000000000000..32f4296054dd --- /dev/null +++ b/public/intune-definitions/5d.json @@ -0,0 +1 @@ +{"5d6625f470c6abf0":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_lcid","displayName":"LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"5dc2ebb14cf56360":{"id":"com.apple.managedclient.preferences_browsersignin","displayName":"Browser sign-in settings","description":"Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign on. To control the availability of sync, use the \"SyncDisabled\" policy instead.\n\nIf you set this policy to 'Disable browser sign-in', make sure that you also set the \"NonRemovableProfileEnabled\" policy to disabled because \"NonRemovableProfileEnabled\" disables the creation of an automatically signed in browser profile. If both policies are set, Microsoft Edge will use the 'Disable browser sign-in' policy and behave as if \"NonRemovableProfileEnabled\" is set to disabled.\n\nIf you set this policy to 'Enable browser sign-in' (1), users can sign into the browser. Signing into the browser doesn't mean that sync is turned on by default; the user must separately opt-in to use this feature.\n\nIf you set this policy to 'Force browser sign-in' (2) users must sign into a profile to use the browser. By default, this will allow the user to choose whether they want to sync to their account, unless sync is disabled by the domain admin or with the \"SyncDisabled\" policy. The default value of \"BrowserGuestModeEnabled\" policy is set to false.\n\nIf you don't configure this policy users can decide if they want to enable the browser sign-in option and use it as they see fit.\n\n* 0 = Disable browser sign-in\n\n* 1 = Enable browser sign-in\n\n* 2 = Force users to sign-in to use the browser","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#browsersignin"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_browsersignin_0","displayName":"Disable browser sign-in","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_browsersignin_1","displayName":"Enable browser sign-in","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_browsersignin_2","displayName":"Force users to sign-in to use the browser","description":null,"helpText":null}]},"5dd792de1374afa8":{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"5dce5295214a0397":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"5de69bb60ca11296":{"id":"com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_recommended","displayName":"Suggest similar pages when a webpage can't be found (users can override)","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\n\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\n\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\n\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\nSpecifically, there's a **Suggest similar pages when a webpage can't be found** toggle, which the user can switch on or off. If you enable this policy (AlternateErrorPagesEnabled), the **Suggest similar pages when a webpage can't be found** setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the **Suggest similar pages when a webpage can't be found** setting is turned off, and the user can't change the setting by using the toggle.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"5d30e15cef8c99d1":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom","displayName":"From","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom_0","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom_1","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom_4","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom_5","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysfrom_6","displayName":"Saturday","description":null,"helpText":null}]},"5d56404a62313973":{"id":"device_vendor_msft_policy_config_admx_credssp_allowencryptionoracle_allowencryptionoracledrop","displayName":"Protection Level:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowencryptionoracle_allowencryptionoracledrop_0","displayName":"Force Updated Clients","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowencryptionoracle_allowencryptionoracledrop_1","displayName":"Mitigated","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowencryptionoracle_allowencryptionoracledrop_2","displayName":"Vulnerable","description":null,"helpText":null}]},"5da4a4d932bbb566":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hosted_wbc_cache_textbox","displayName":"Type the name of the hosted cache server","description":null,"helpText":"","infoUrls":[],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":null},"5db24ddbc776b28e":{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_3","displayName":"Configure Scenario Execution Level","description":"Determines the execution level for Windows Shutdown Performance Diagnostics.\r\n\r\nIf you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows Shutdown Performance problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows Shutdown Performance problems and indicate to the user that assisted resolution is available.\r\n\r\nIf you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve any Windows Shutdown Performance problems that are handled by the DPS.\r\n\r\nIf you do not configure this policy setting, the DPS will enable Windows Shutdown Performance for resolution by default.\r\n\r\nThis policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured.\r\n\r\nNo system restart or service restart is required for this policy to take effect: changes take effect immediately.\r\n\r\nThis policy setting will only take effect when the Diagnostic Policy Service is in the running state. When the service is stopped or disabled, diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-performancediagnostics#admx-performancediagnostics-wdiscenarioexecutionpolicy-3"],"categoryId":"cebd5934-9dfe-4278-966d-b9d880cb30e7","categoryName":"Windows Shutdown Performance Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_3_1","displayName":"Enabled","description":null,"helpText":null}]},"5db1d91c4a4a43b8":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablecredentialssettingsync","displayName":"Do not sync passwords","description":"Prevent the \"passwords\" group from syncing to and from this PC. This turns off and disables the \"passwords\" group on the \"sync your settings\" page in PC settings.\r\n\r\nIf you enable this policy setting, the \"passwords\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn passwords syncing on\" so that syncing it turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"passwords\" group is on by default and configurable by the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disablecredentialssettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablecredentialssettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablecredentialssettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"5d97e921bd0dd482":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_nodisconnectmenu","displayName":"Remove \"Disconnect\" option from Shut Down dialog","description":"This policy setting allows you to remove the \"Disconnect\" option from the Shut Down Windows dialog box in Remote Desktop Services sessions.\r\n\r\nYou can use this policy setting to prevent users from using this familiar method to disconnect their client from an RD Session Host server.\r\n\r\nIf you enable this policy setting, \"Disconnect\" does not appear as an option in the drop-down list in the Shut Down Windows dialog box.\r\n\r\nIf you disable or do not configure this policy setting, \"Disconnect\" is not removed from the list in the Shut Down Windows dialog box.\r\n\r\nNote: This policy setting affects only the Shut Down Windows dialog box. It does not prevent users from using other methods to disconnect from a Remote Desktop Services session. This policy setting also does not prevent disconnected sessions at the server. You can control how long a disconnected session remains active on the server by configuring the \"Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\RD Session Host\\Session Time Limits\\Set time limit for disconnected sessions\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-nodisconnectmenu"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_nodisconnectmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_nodisconnectmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"5df3146299de8fb6":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup","displayName":"SharePoint Designer 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft SharePoint Designer 2013.\r\nMicrosoft SharePoint Designer 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft SharePoint Designer 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft SharePoint Designer 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft SharePoint Designer 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013sharepointdesignerbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"5db3440dcbfcd865":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup","displayName":"Visio 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Visio 2016.\r\nMicrosoft Visio 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Visio 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Visio 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016visiobackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup_1","displayName":"Enabled","description":null,"helpText":null}]},"5d20f5a4fda92f1d":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config","displayName":"Global Configuration Settings","description":"This policy setting allows you to specify Clock discipline and General values for the Windows Time service (W32time) for domain controllers including RODCs.\r\n\r\nIf this policy setting is enabled, W32time Service on target machines use the settings provided here. Otherwise, the service on target machines use locally configured settings values.\r\n\r\nFor more details on individual parameters, combinations of parameter values as well as definitions of flags, see https://go.microsoft.com/fwlink/?linkid=847809.\r\n\r\n FrequencyCorrectRate\r\nThis parameter controls the rate at which the W32time corrects the local clock's frequency. Lower values cause slower corrections; larger values cause more frequent corrections. Default: 4 (scalar).\r\n\r\n HoldPeriod\r\nThis parameter indicates how many consistent time samples the client computer must receive in a series before subsequent time samples are evaluated as potential spikes. Default: 5\r\n\r\n LargePhaseOffset\r\nIf a time sample differs from the client computer's local clock by more than LargePhaseOffset, the local clock is deemed to have drifted considerably, or in other words, spiked. Default: 50,000,000 100-nanosecond units (ns) or 5 seconds.\r\n\r\n MaxAllowedPhaseOffset\r\nIf a response is received that has a time variation that is larger than this parameter value, W32time sets the client computer's local clock immediately to the time that is accepted as accurate from the Network Time Protocol (NTP) server. If the time variation is less than this value, the client computer's local clock is corrected gradually. Default: 300 seconds.\r\n\r\n MaxNegPhaseCorrection\r\nIf a time sample is received that indicates a time in the past (as compared to the client computer's local clock) that has a time difference that is greater than the MaxNegPhaseCorrection value, the time sample is discarded. Default: 172,800 seconds.\r\n\r\n MaxPosPhaseCorrection\r\nIf a time sample is received that indicates a time in the future (as compared to the client computer's local clock) that has a time difference greater than the MaxPosPhaseCorrection value, the time sample is discarded. Default: 172,800 seconds.\r\n\r\n PhaseCorrectRate\r\nThis parameter controls how quickly W32time corrects the client computer's local clock difference to match time samples that are accepted as accurate from the NTP server. Lower values cause the clock to correct more slowly; larger values cause the clock to correct more quickly. Default: 7 (scalar).\r\n\r\n PollAdjustFactor\r\nThis parameter controls how quickly W32time changes polling intervals. When responses are considered to be accurate, the polling interval lengthens automatically. When responses are considered to be inaccurate, the polling interval shortens automatically. Default: 5 (scalar).\r\n\r\n SpikeWatchPeriod\r\nThis parameter specifies the amount of time that samples with time offset larger than LargePhaseOffset are received before these samples are accepted as accurate. SpikeWatchPeriod is used in conjunction with HoldPeriod to help eliminate sporadic, inaccurate time samples that are returned from a peer. Default: 900 seconds.\r\n\r\n UpdateInterval\r\nThis parameter specifies the amount of time that W32time waits between corrections when the clock is being corrected gradually. When it makes a gradual correction, the service adjusts the clock slightly, waits this amount of time, and then checks to see if another adjustment is needed, until the correction is finished. Default: 100 1/100th second units, or 1 second.\r\n\r\n General parameters:\r\n\r\n AnnounceFlags\r\nThis parameter is a bitmask value that controls how time service availability is advertised through NetLogon. Default: 0x0a hexadecimal\r\n\r\n EventLogFlags\r\nThis parameter controls special events that may be logged to the Event Viewer System log. Default: 0x02 hexadecimal bitmask.\r\n\r\n LocalClockDispersion\r\nThis parameter indicates the maximum error in seconds that is reported by the NTP server to clients that are requesting a time sample. (Applies only when the NTP server is using the time of the local CMOS clock.) Default: 10 seconds.\r\n\r\n MaxPollInterval\r\nThis parameter controls the maximum polling interval, which defines the maximum amount of time between polls of a peer. Default: 10 in log base-2, or 1024 seconds. (Should not be set higher than 15.)\r\n\r\n MinPollInterval\r\nThis parameter controls the minimum polling interval that defines the minimum amount of time between polls of a peer. Default: 6 in log base-2, or 64 seconds.\r\n\r\n ClockHoldoverPeriod\r\nThis parameter indicates the maximum number of seconds a system clock can nominally hold its accuracy without synchronizing with a time source. If this period of time passes without W32time obtaining new samples from any of its input providers, W32time initiates a rediscovery of time sources. Default: 7800 seconds.\r\n\r\n RequireSecureTimeSyncRequests\r\nThis parameter controls whether or not the DC will respond to time sync requests that use older authentication protocols. If enabled (set to 1), the DC will not respond to requests using such protocols. Default: 0 Boolean.\r\n\r\n UtilizeSslTimeData\r\nThis parameter controls whether W32time will use time data computed from SSL traffic on the machine as an additional input for correcting the local clock. Default: 1 (enabled) Boolean\r\n\r\n ClockAdjustmentAuditLimit\r\nThis parameter specifies the smallest local clock adjustments that may be logged to the W32time service event log on the target machine. Default: 800 Parts per million (PPM).\r\n\r\n RODC parameters:\r\n\r\n ChainEntryTimeout\r\nThis parameter specifies the maximum amount of time that an entry can remain in the chaining table before the entry is considered to be expired. Expired entries may be removed when the next request or response is processed. Default: 16 seconds.\r\n\r\n ChainMaxEntries\r\nThis parameter controls the maximum number of entries that are allowed in the chaining table. If the chaining table is full and no expired entries can be removed, any incoming requests are discarded. Default: 128 entries.\r\n\r\n ChainMaxHostEntries\r\nThis parameter controls the maximum number of entries that are allowed in the chaining table for a particular host. Default: 4 entries.\r\n\r\n ChainDisable\r\nThis parameter controls whether or not the chaining mechanism is disabled. If chaining is disabled (set to 0), the RODC can synchronize with any domain controller, but hosts that do not have their passwords cached on the RODC will not be able to synchronize with the RODC. Default: 0 Boolean.\r\n\r\n ChainLoggingRate\r\nThis parameter controls the frequency at which an event that indicates the number of successful and unsuccessful chaining attempts is logged to the System log in Event Viewer. Default: 30 minutes.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-w32time#admx-w32time-w32time-policy-config"],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":[{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_1","displayName":"Enabled","description":null,"helpText":null}]},"5db08c7b64005546":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_name","displayName":"Rule Name","description":"The name of the rule","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"5d7207150a5934c7":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_filenamedetails","displayName":"Original file name","description":"The original name of the applications executable as stated in the file attributes.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"5d30b99bbbc9ce06":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_mediaplayer","displayName":"Windows Media Player **","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_mediaplayer_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_mediaplayer_1","displayName":"True","description":null,"helpText":null}]},"5dc5f8d1c38b7bb7":{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_channel_logmaxsize","displayName":"Maximum Log Size (KB)","description":"","helpText":"","infoUrls":[],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":null},"5dda9e539d58df9c":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd","displayName":"Is Dynamic (VHD)","description":"[ENABLED BY DEFAULT]\r\n\r\nNOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nVHD(x)s will be dynamically allocated. VHD(x) file size will grow as data is added to the VHD(x). If disabled, VHD(x)s that are auto-created will be fully allocated.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\IsDynamic\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd_1","displayName":"Enabled","description":null,"helpText":null}]},"5d2d46adbc3ee69e":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols","displayName":"Allow only approved domains to use ActiveX controls without prompt","description":"This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.\n\nIf you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.\n\nIf you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowonlyapproveddomainstouseactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"5d9120a2e71037e9":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforactivexcontrols"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"5d172d80d731a60f":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"5df60dd815d70adf":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo","displayName":"Allow importing of payment info","description":"Allows users to import payment info from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\r\n\r\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"5d015531b3644b63":{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton","displayName":"Show Downloads button on the toolbar","description":"Set this policy to always show the Downloads button on the toolbar.\r\n\r\nIf you enable this policy, the Downloads button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure the policy, the Downloads button isn't shown on the toolbar by default. Users can toggle the Downloads button in edge://settings/appearance.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"5d7e815a8fd906b4":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled","displayName":"Allow personalization of ads, search and news by sending browsing history to Microsoft","description":"This policy prevents Microsoft from collecting a user's Microsoft Edge browsing history to be used for personalizing advertising, search, news and other Microsoft services.\r\n\r\nThis setting is only available for users with a Microsoft account. This setting is not available for child accounts or enterprise accounts.\r\n\r\nIf you disable this policy, users can't change or override the setting. If this policy is enabled or not configured, Microsoft Edge will default to the user’s preference.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5da86a41aec97455":{"id":"device_vendor_msft_policy_config_storage_allowstoragesensetemporaryfilescleanup","displayName":"Allow Storage Sense Temporary Files Cleanup","description":"When Storage Sense runs, it can delete the user’s temporary files that are not in use. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, Storage Sense will delete the user’s temporary files that are not in use. Users cannot disable this setting in Storage settings. If you disable this policy setting, Storage Sense will not delete the user’s temporary files. Users cannot enable this setting in Storage settings. If you do not configure this policy setting, Storage Sense will delete the user’s temporary files by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#allowstoragesensetemporaryfilescleanup"],"categoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","categoryName":"Storage","options":[{"id":"device_vendor_msft_policy_config_storage_allowstoragesensetemporaryfilescleanup_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_storage_allowstoragesensetemporaryfilescleanup_0","displayName":"Block","description":"Block","helpText":null}]},"5d7e37f637c07bf0":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadiprangesid","displayName":"IP Ranges (optional):","description":"","helpText":"","infoUrls":[],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":null},"5da5baa21e1151c6":{"id":"device_vendor_msft_policy_config_windowsai_disableclicktodo","displayName":"Disable Click To Do","description":"Click to Do lets people take action on content on their screens. When activated, it takes a screenshot of their screen and analyzes it to present actions. Click to Do ends when they exit it, and it can't take screenshots while closed. Screenshot analysis is always performed locally on their device. By default, Click to Do is enabled for users. This policy setting allows you to determine whether Click to Do is available for users on their device. When the policy is enabled, the Click to Do component and entry points will not be available to users. When the policy is disabled, users will have Click to Do available on their device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableclicktodo"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disableclicktodo_0","displayName":"Click to Do is enabled","description":"Click to Do is enabled","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableclicktodo_1","displayName":"Click to Do is disabled.","description":"Click to Do is disabled.","helpText":null}]},"5d2cdb3791870596":{"id":"intelligencesettings_allowpersonalizedhandwritingresults","displayName":"Allow Personalized Handwriting Results","description":"If `false`, disables Personalized Handwriting Results.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_allowpersonalizedhandwritingresults_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_allowpersonalizedhandwritingresults_true","displayName":"True","description":null,"helpText":null}]},"5d3a6b421f997630":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_pathcolon35","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"5ddbbf686d3fdfbf":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deleteconnection","displayName":"Prohibit deletion of remote access connections (User)","description":"Determines whether users can delete remote access connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), users (including administrators) cannot delete any remote access connections. This setting also disables the Delete option on the context menu for a remote access connection and on the File menu in the Network Connections folder.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, all users can delete their private remote access connections. Private connections are those that are available only to one user. (By default, only Administrators and Network Configuration Operators can delete connections available to all users, but you can change the default by using the \"Ability to delete all user remote access connections\" setting.)\r\n\r\nImportant: When enabled, this setting takes precedence over the \"Ability to delete all user remote access connections\" setting. Users cannot delete any remote access connections, and the \"Ability to delete all user remote access connections\" setting is ignored.\r\n\r\nNote: LAN connections are created and deleted automatically when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-deleteconnection"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deleteconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deleteconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"5d723b50762cee29":{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl","displayName":"Browse a common web site to find printers (User)","description":"Adds a link to an Internet or intranet Web page to the Add Printer Wizard.\r\n\r\n You can use this setting to direct users to a Web page from which they can install printers.\r\n\r\n If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the \"Specify a Printer\" page in the Add Printer Wizard. The Browse button appears beside the \"Connect to a printer on the Internet or on a home or office network\" option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers.\r\n\r\n This setting makes it easy for users to find the printers you want them to add.\r\n\r\n Also, see the \"Custom support URL in the Printers folder's left pane\" and \"Activate Internet printing\" settings in \"Computer Configuration\\Administrative Templates\\Printers.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-intranetprintersurl"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl_1","displayName":"Enabled","description":null,"helpText":null}]},"5db4c4b57b04de24":{"id":"user_vendor_msft_policy_config_admx_tabletshell_disableinkball_1","displayName":"Do not allow Inkball to run (User)","description":"Prevents start of InkBall game.\r\n\r\nIf you enable this policy, the InkBall game will not run.\r\n\r\nIf you disable this policy, the InkBall game will run.\r\n\r\nIf you do not configure this policy, the InkBall game will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disableinkball-1"],"categoryId":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","categoryName":"Accessories","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disableinkball_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disableinkball_1_1","displayName":"Enabled","description":null,"helpText":null}]},"5de9d8810793dba8":{"id":"user_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_1","displayName":"Turn off the Store application (User)","description":"Denies or allows access to the Store application.\r\n\r\nIf you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.\r\n\r\nIf you disable or don't configure this setting, access to the Store application is allowed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsstore#admx-windowsstore-removewindowsstore-1"],"categoryId":"be9bdbec-b52e-4174-9c5b-cf765dee855b","categoryName":"Store","options":[{"id":"user_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_1_1","displayName":"Enabled","description":null,"helpText":null}]},"5dee70e2dffad69d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended","displayName":"Register protocol handlers (User)","description":"Setting the policy (as recommended only) lets you register a list of protocol handlers, which merge with the ones that the user registers, putting both sets in use. Set the property \"protocol\" to the scheme, such as \"mailto\", and set the property \"URL\" to the URL pattern of the application that handles the scheme specified in the \"protocol\" field. The pattern can include a \"%s\" placeholder, which the handled URL replaces.\r\n\r\nUsers can't remove a protocol handler registered by policy. However, by installing a new default handler, they can change the protocol handlers installed by policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RegisteredProtocolHandlers for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"mailto\",\r\n \"url\": \"https://mail.google.com/mail/?extsrc=mailto&url=%s\",\r\n \"default\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"962a2377-ad9a-4654-a526-a77c14152fd7","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"5d8b1f97f513cd8f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode","displayName":"Sitelist parsing mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode_0","displayName":"Default behavior for LBS.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode_1","displayName":"More compatible with Microsoft IE/Edge enterprise mode sitelists.","description":null,"helpText":null}]},"5d4a5942b5cef7af":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_enterprisewebstorename","displayName":"Enterprise web store name (deprecated) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"5d014505e5696576":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger","displayName":"Password protection warning trigger (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_2","displayName":"Password protection warning is triggered by password reuse on phishing page","description":null,"helpText":null}]},"5df37a8df4def1eb":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings","displayName":"Settings for Create Themes with AI (User)","description":"Create Themes with AI lets users create custom themes/wallpapers by preselecting from a list of options.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_1","displayName":"Enabled","description":null,"helpText":null}]},"5dc367c95fb3ad8d":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets","displayName":"Default Sheets (User)","description":"Specifies the initial number of worksheets to create in a new workbook.","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets_1","displayName":"Enabled","description":null,"helpText":null}]},"5dc323c45543b3a0":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_sharedworkerextendedlifetimeenabled","displayName":"Enable the extended lifetime option for SharedWorkers (User)","description":"Controls whether Microsoft Edge allows SharedWorkers to use the extendedLifetime option.\r\n\r\nIf you enable or don't configure this policy, SharedWorkers can use the extended lifetime option in the SharedWorker constructor.\r\n\r\nIf you disable this policy, the extended lifetime option is ignored, even if it is requested by the page.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_sharedworkerextendedlifetimeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_sharedworkerextendedlifetimeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5d8ea87215311373":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess","displayName":"Force networking code to run in the browser process (User)","description":"This policy forces networking code to run in the browser process.\r\n\r\nThis policy is disabled by default. If enabled, users are open to security issues when the networking process is sandboxed.\r\n\r\nThis policy is intended to give enterprises a chance to migrate to 3rd party software that doesn't depend on hooking networking APIs. Proxy servers are recommended over LSPs and Win32 API patching.\r\n\r\nIf this policy isn't set, networking code may run out of the browser process depending on field trials of the NetworkService experiment.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"5d1b81f32601a52c":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended","displayName":"Configure Microsoft Defender SmartScreen to block potentially unwanted apps (User)","description":"This policy setting lets you configure whether to turn on blocking for potentially unwanted apps with Microsoft Defender SmartScreen. Potentially unwanted app blocking with Microsoft Defender SmartScreen provides warning messages to help protect users from adware, coin miners, bundleware, and other low-reputation apps that are hosted by websites. Potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off by default.\r\n\r\nIf you enable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use potentially unwanted app blocking with Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"5d4aa7f031d88f72":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_excel","displayName":"Microsoft Excel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_excel_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_excel_1","displayName":"True","description":null,"helpText":null}]},"5da51d3b1cd55d32":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_macroruntimescanscope_l_macroruntimescanscopeenum","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_macroruntimescanscope_l_macroruntimescanscopeenum_0","displayName":"Disable for all documents","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_macroruntimescanscope_l_macroruntimescanscopeenum_1","displayName":"Enable for low trust documents","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_macroruntimescanscope_l_macroruntimescanscopeenum_2","displayName":"Enable for all documents","description":null,"helpText":null}]},"5d64861a36a54c03":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey08","displayName":"Escrow Key #8 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey08_1","displayName":"Enabled","description":null,"helpText":null}]},"5dc8ac4edcc640c9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2","displayName":"Configure Outlook object model prompt when sending mail (User)","description":"This policy setting controls what happens when an untrusted program attempts to send e-mail programmatically using the Outlook object model. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to send e-mail programmatically using the Outlook object model: \r\n\r\n- Prompt user - The user will be prompted to approve every access attempt.\r\n- Automatically approve - Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended. \r\n- Automatically deny - Outlook will automatically deny programmatic access requests from any program. \r\n- Prompt user based on computer security. Outlook will only prompt users when antivirus software is out of date or not running. \r\n\r\nImportant: This policy setting only applies if the ''Outlook Security Mode'' policy setting under ''Microsoft Outlook 2016\\Security\\Security Form Settings'' is configured to ''Use Outlook Security Group Policy.''\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to send mail programmatically, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center. ","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsend_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"5d03254a682ce007":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":null},"5de191e97e012f12":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjsaveinterval_l_pjsaveinterval33","displayName":"Save Interval (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfd5d749-c68c-448f-ab3f-851c09f09df4","categoryName":"Auto Save Options","options":null},"5db0d232b26e3930":{"id":"user_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging","displayName":"Turn on PowerShell Script Block Logging (User)","description":"\n This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log. If you enable this policy setting,\n Windows PowerShell will log the processing of commands, script blocks, functions, and scripts - whether invoked interactively, or through automation.\n \n If you disable this policy setting, logging of PowerShell script input is disabled.\n \n If you enable the Script Block Invocation Logging, PowerShell additionally logs events when invocation of a command, script block, function, or script\n starts or stops. Enabling Invocation Logging generates a high volume of event logs.\n \n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowspowershell#windowspowershell-turnonpowershellscriptblocklogging"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_1","displayName":"Enabled","description":null,"helpText":null}]},"5df29edec0faa440":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustformattingwhenpastingfrommicrosoftexcel","displayName":"Adjust formatting when pasting from Microsoft Excel (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e63361ad-a54b-4557-acc7-02c272a3e58d","categoryName":"Smart cut and paste","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustformattingwhenpastingfrommicrosoftexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjustformattingwhenpastingfrommicrosoftexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"5d7b7e5ced627b6c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_matchparentheses","displayName":"Match parentheses (User)","description":"This policy setting allows you to set the option \"Match opening and closing parentheses\" in Word Options | Proofing | AutoCorrect Options... | AutoFormat As You Type | Automatically as you type. This option may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, \"Match opening and closing parentheses\" will be set.\r\n\r\nIf you disable or do not configure this policy setting, \"Match opening and closing parentheses\" will not be set.","helpText":"","infoUrls":[],"categoryId":"e8ce968b-91cb-4301-ba98-b37d42bc5213","categoryName":"Automatically as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_matchparentheses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_matchparentheses_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/5e.json b/public/intune-definitions/5e.json new file mode 100644 index 000000000000..fb1e4bcb7c4d --- /dev/null +++ b/public/intune-definitions/5e.json @@ -0,0 +1 @@ +{"5ec1c8820954d583":{"id":"com.android.devicerestrictionpolicy.passwordsigninfailurecountbeforefactoryreset","displayName":"Number of sign-in failures before wiping device","description":"Enter the number of wrong passwords allowed before the device is wiped, from 4-11. If the value is blank, Intune doesn't change or update this setting. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (4-11)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"5e0149a6eeb7e19b":{"id":"com.apple.applicationaccess_allowaccountmodification","displayName":"Allow Account Modification","description":"If false, disables account modification. Requires a supervised device. Available in iOS 7 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowaccountmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowaccountmodification_true","displayName":"True","description":null,"helpText":null}]},"5e4842b735e0d9a6":{"id":"com.apple.managedclient.preferences_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates.","description":"This policy determines the level of access users have when managing CA certificates in Microsoft Edge.\n\nSetting the policy to UserOnly (1) allows users to manage only user-imported certificates. Trust settings for built-in certificates cannot be changed.\n\nSetting the policy to None (2) lets users view certificates but not manage them.\n\nNote: The certificate management experience is available starting in Microsoft Edge version 136.\n\nPolicy options mapping:\n\n* All (0) = Allow users to manage all certificates\n\n* UserOnly (1) = Allow users to manage user certificates\n\n* None (2) = Disallow users from managing certificates\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#cacertificatemanagementallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_cacertificatemanagementallowed_0","displayName":"Allow users to manage all certificates","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_cacertificatemanagementallowed_1","displayName":"Allow users to manage user certificates","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_cacertificatemanagementallowed_2","displayName":"Disallow users from managing certificates","description":null,"helpText":null}]},"5e8af90d8830ada3":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifier","displayName":"AE Receiver Identifier","description":"The identifier of the process receiving an AppleEvent sent by the Identifier process. This identifier is required for AppleEvents service; not valid for other services.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"5ee59f284e8ad858":{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist","displayName":"Block access to a specified list of services and export targets in Collections","description":"List specific services and export targets that users can't access in the Collections feature in Microsoft Edge. This includes displaying additional data from Bing and exporting collections to Microsoft products or external partners.\n\nIf you enable this policy, services and export targets that match the given list are blocked.\n\nIf you don't configure this policy, no restrictions on the acceptable services and export targets are enforced.\n\nPolicy options mapping:\n\n* pinterest_suggestions (pinterest_suggestions) = Pinterest suggestions\n\n* collections_share (collections_share) = Sharing of Collections\n\n* local_pdf (local_pdf) = Save local PDFs in Collections to OneDrive\n\n* send_word (send_word) = Send collection to Microsoft Word\n\n* send_excel (send_excel) = Send collection to Microsoft Excel\n\n* send_onenote (send_onenote) = Send collection to Microsoft OneNote\n\n* send_pinterest (send_pinterest) = Send collection to Pinterest\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_pinterest_suggestions","displayName":"Pinterest suggestions","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_collections_share","displayName":"Sharing of Collections","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_local_pdf","displayName":"Save local PDFs in Collections to OneDrive","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_word","displayName":"Send collection to Microsoft Word","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_excel","displayName":"Send collection to Microsoft Excel","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_onenote","displayName":"Send collection to Microsoft OneNote","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_pinterest","displayName":"Send collection to Pinterest","description":null,"helpText":null}]},"5e3b04f1299b060c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.disable3dapis","displayName":"Disable support for 3D graphics APIs","description":"Prevent web pages from accessing the graphics processing unit (GPU). Specifically, web pages can't access the WebGL API and plug-ins can't use the Pepper 3D API.\n\nIf you don't configure or disable this policy, it potentially allows web pages to use the WebGL API and plug-ins to use the Pepper 3D API. Microsoft Edge might, by default, still require command line arguments to be passed in order to use these APIs.\n\nIf \"HardwareAccelerationModeEnabled\" policy is set to false, the setting for 'Disable3DAPIs' policy is ignored - it's the equivalent of setting 'Disable3DAPIs' policy to true.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.disable3dapis_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.disable3dapis_true","displayName":"Enabled","description":null,"helpText":null}]},"5e847a645bf4b0b8":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_noleveltwo_chk","displayName":"Do not collect additional machine data","description":null,"helpText":"","infoUrls":[],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_noleveltwo_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_noleveltwo_chk_1","displayName":"True","description":null,"helpText":null}]},"5e1ce816b2e3e8f2":{"id":"device_vendor_msft_policy_config_admx_fthsvc_wdiscenarioexecutionpolicy","displayName":"Configure Scenario Execution Level","description":"This policy setting permits or prohibits the Diagnostic Policy Service (DPS) from automatically resolving any heap corruption problems.\r\n\r\nIf you enable this policy setting, the DPS detects, troubleshoots, and attempts to resolve automatically any heap corruption problems.\r\n\r\nIf you disable this policy setting, Windows cannot detect, troubleshoot, and attempt to resolve automatically any heap corruption problems that are handled by the DPS.\r\n\r\nIf you do not configure this policy setting, the DPS enables Fault Tolerant Heap for resolution by default.\r\n\r\nThis policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured.\r\n\r\nThis policy setting takes effect only when the Diagnostic Policy Service is in the running state. When the service is stopped or disabled, diagnostic scenarios are not executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n\r\nNo system restart or service restart is required for this policy setting to take effect: changes take effect immediately.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-fthsvc#admx-fthsvc-wdiscenarioexecutionpolicy"],"categoryId":"476e0bfc-ddb6-4612-8446-bed86e875141","categoryName":"Fault Tolerant Heap","options":[{"id":"device_vendor_msft_policy_config_admx_fthsvc_wdiscenarioexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_fthsvc_wdiscenarioexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"5eb2f26c2f06435e":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts","displayName":"Configure scripts policy processing","description":"This policy setting determines when policies that assign shared scripts are updated.\r\n\r\nThis policy setting affects all policies that use the scripts component of Group Policy, such as those in WindowsSettings\\Scripts. It overrides customized settings that the program implementing the scripts policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this setting, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-scripts"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_1","displayName":"Enabled","description":null,"helpText":null}]},"5ece80aad350a6ea":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime","displayName":"KeepAliveTime","description":null,"helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime_150000","displayName":"150000 or 2.5 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime_300000","displayName":"300000 or 5 minutes (recommended) ","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime_600000","displayName":"600000 or 10 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime_1200000","displayName":"1200000 or 20 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime_2400000","displayName":"2400000 or 40 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime_3600000","displayName":"3600000 or 1 hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_keepalivetime_7200000","displayName":"7200000 or 2 hours (default value)","description":null,"helpText":null}]},"5e21db397d041114":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_synattackprotect","displayName":"MSS: (SynAttackProtect) Syn attack protection level (protects against DoS)","description":"MSS: (SynAttackProtect) Syn attack protection level (protects against DoS)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-synattackprotect"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_synattackprotect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_synattackprotect_1","displayName":"Enabled","description":null,"helpText":null}]},"5ee0771f66ad6e54":{"id":"device_vendor_msft_policy_config_admx_previousversions_disableremotepage_2","displayName":"Hide previous versions list for remote files","description":"This policy setting lets you hide the list of previous versions of files that are on file shares. The previous versions come from the on-disk restore points on the file share.\r\n\r\nIf you enable this policy setting, users cannot list or restore previous versions of files on file shares.\r\n\r\nIf you disable this policy setting, users can list and restore previous versions of files on file shares.\r\n\r\nIf you do not configure this policy setting, it is disabled by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disableremotepage-2"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"device_vendor_msft_policy_config_admx_previousversions_disableremotepage_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_previousversions_disableremotepage_2_1","displayName":"Enabled","description":null,"helpText":null}]},"5e388273b743ea6c":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_max_con_policy","displayName":"Limit number of connections","description":"Specifies whether Remote Desktop Services limits the number of simultaneous connections to the server.\r\n\r\nYou can use this setting to restrict the number of Remote Desktop Services sessions that can be active on a server. If this number is exceeded, addtional users who try to connect receive an error message telling them that the server is busy and to try again later. Restricting the number of sessions improves performance because fewer sessions are demanding system resources. By default, RD Session Host servers allow an unlimited number of Remote Desktop Services sessions, and Remote Desktop for Administration allows two Remote Desktop Services sessions.\r\n\r\nTo use this setting, enter the number of connections you want to specify as the maximum for the server. To specify an unlimited number of connections, type 999999.\r\n\r\nIf the status is set to Enabled, the maximum number of connections is limited to the specified number consistent with the version of Windows and the mode of Remote Desktop Services running on the server.\r\n\r\nIf the status is set to Disabled or Not Configured, limits to the number of connections are not enforced at the Group Policy level.\r\n\r\nNote: This setting is designed to be used on RD Session Host servers (that is, on servers running Windows with Remote Desktop Session Host role service installed).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-max-con-policy"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_max_con_policy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_max_con_policy_1","displayName":"Enabled","description":null,"helpText":null}]},"5e49b911c2452a6d":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home","displayName":"Set Remote Desktop Services User Home Directory","description":"Specifies whether Remote Desktop Services uses the specified network share or local directory path as the root of the user's home directory for a Remote Desktop Services session.\r\n\r\nTo use this setting, select the location for the home directory (network or local) from the Location drop-down list. If you choose to place the directory on a network share, type the Home Dir Root Path in the form \\\\Computername\\Sharename, and then select the drive letter to which you want the network share to be mapped.\r\n\r\nIf you choose to keep the home directory on the local computer, type the Home Dir Root Path in the form \"Drive:\\Path\" (without quotes), without environment variables or ellipses. Do not specify a placeholder for user alias, because Remote Desktop Services automatically appends this at logon.\r\n\r\nNote: The Drive Letter field is ignored if you choose to specify a local path. If you choose to specify a local path but then type the name of a network share in Home Dir Root Path, Remote Desktop Services places user home directories in the network location.\r\n\r\nIf the status is set to Enabled, Remote Desktop Services creates the user's home directory in the specified location on the local computer or the network. The home directory path for each user is the specified Home Dir Root Path and the user's alias.\r\n\r\nIf the status is set to Disabled or Not Configured, the user's home directory is as specified at the server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-user-home"],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_1","displayName":"Enabled","description":null,"helpText":null}]},"5e9489922d07df32":{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls","displayName":"App Control for Business Built In Controls","description":"App Control for Business Built In Controls","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"56b82fc9-c632-4c76-bb4f-dcf8757f003e","categoryName":null,"options":null},"5e18745423f35888":{"id":"device_vendor_msft_policy_config_bluetooth_allowprepairing","displayName":"Allow Prepairing","description":"Specifies whether to allow specific bundled Bluetooth peripherals to automatically pair with the host device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Bluetooth#allowprepairing"],"categoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","categoryName":"Bluetooth","options":[{"id":"device_vendor_msft_policy_config_bluetooth_allowprepairing_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_bluetooth_allowprepairing_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"5e01b088324fd4df":{"id":"device_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride","displayName":"Prevent Smart Screen Prompt Override","description":"Don't allow Windows Defender SmartScreen warning overrides","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventsmartscreenpromptoverride"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride_0","displayName":"Disabled","description":"Allowed/turned off. Users can ignore the warning and continue to the site.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},"5e4bcdda6be9566d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay","displayName":"Delay before launching alternative browser (milliseconds)","description":"Setting the policy to a number has Google Chrome show a message for that number of milliseconds, then it opens an alternative browser.\r\n\r\nLeaving the policy unset or set to 0 means navigating to a designated URL immediately opens it in an alternative browser.","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"5eabb88658a8ca44":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter","displayName":"Enable Google Cast","description":"Setting the policy to Enabled or leaving it unset turns on Google Cast, which users can launch from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\r\n\r\nSetting the policy to Disabled turns off Google Cast.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter_1","displayName":"Enabled","description":null,"helpText":null}]},"5e0cf2e21ad43653":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_remoteaccesshostudpportrange","displayName":"Restrict the UDP port range used by the remote access host (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"5ed9d3e05808db7a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt","displayName":"Prompt users to re-authenticate to the profile (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt_0","displayName":"Do not prompt for reauth","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt_1","displayName":"Prompt for reauth in a tab","description":null,"helpText":null}]},"5e223acff656dac2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_0","displayName":"Downloads model automatically","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_1","displayName":"Do not download model","description":null,"helpText":null}]},"5e778b18f428121e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings","displayName":"Tab Compare settings","description":"Tab Compare is an AI-powered tool for comparing information across a user's tabs. As an example, the feature can be offered to the user when multiple tabs with products in a similar category are open.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"5eadcc34151391e5":{"id":"device_vendor_msft_policy_config_devicelock_minimumpasswordage","displayName":"Minimum Password Age","description":"This security setting determines the period of time (in days) that a password must be used before the user can change it. You can set a value between 1 and 998 days, or you can allow changes immediately by setting the number of days to 0. The minimum password age must be less than the Maximum password age, unless the maximum password age is set to 0, indicating that passwords will never expire. If the maximum password age is set to 0, the minimum password age can be set to any value between 0 and 998. Configure the minimum password age to be more than 0 if you want Enforce password history to be effective. Without a minimum password age, users can cycle through passwords repeatedly until they get to an old favorite. The default setting does not follow this recommendation, so that an administrator can specify a password for a user and then require the user to change the administrator-defined password when the user logs on. If the password history is set to 0, the user does not have to choose a new password. For this reason, Enforce password history is set to 1 by default.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#minimumpasswordage"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"5e2346699aa6f497":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint","displayName":"Include Sharepoint","description":"[ENABLED BY DEFAULT]\r\n\r\nSharepoint data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeSharepoint\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint_1","displayName":"Enabled","description":null,"helpText":null}]},"5e054e6729aa86f4":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"5ee4f1db60f817a5":{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1","displayName":"PK Init Hash Algorithm SHA1","description":"Configure SHA-1 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha1"],"categoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_3","displayName":"Supported","description":"Supported","helpText":null}]},"5eef360900539998":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_audiocaptureallowedurlsdesc","displayName":"Sites that can access audio capture devices without requesting permission (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"5eb44c9eaf8098d2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting","displayName":"Default notification setting","description":"Set whether websites can display desktop notifications. You can allow them by default (1), deny them by default (2), or have the user be asked each time a website wants to show a notification (3).\r\n\r\nIf you don't configure this policy, notifications are allowed by default, and the user can change this setting.\r\n\r\n* 1 = Allow sites to show desktop notifications\r\n\r\n* 2 = Don't allow any site to show desktop notifications\r\n\r\n* 3 = Ask every time a site wants to show desktop notifications","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"5efd3afa6da5a6b7":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs","displayName":"Allow importing of open tabs","description":"Allows users to import open and pinned tabs from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, open tabs aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs_1","displayName":"Enabled","description":null,"helpText":null}]},"5eb7f46339404681":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled","displayName":"Enable Microsoft Defender SmartScreen DNS requests","description":"This policy lets you configure whether to enable DNS requests made by Microsoft Defender SmartScreen. Note: Disabling DNS requests will prevent Microsoft Defender SmartScreen from getting IP addresses, and potentially impact the IP-based protections provided.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen will make DNS requests.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen will not make any DNS requests.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5e7b7dd807356f80":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_visioexe75","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_visioexe75_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_visioexe75_1","displayName":"True","description":null,"helpText":null}]},"5e835fd4e36b6c99":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_excelexe155","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_excelexe155_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_excelexe155_1","displayName":"True","description":null,"helpText":null}]},"5e16f2460040dc70":{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationoninstall_enum","displayName":"When installing drivers for a new connection:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationoninstall_enum_0","displayName":"Show warning and elevation prompt","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationoninstall_enum_1","displayName":"Do not show warning or elevation prompt","description":null,"helpText":null}]},"5ee6caa0675c6de1":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgazeinput_forcedenytheseapps","displayName":"Let Apps Access Gaze Input Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the eye tracker. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgazeinput_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"5e211458623e27fd":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels_forceallowtheseapps","displayName":"Let Apps Access System AI Models Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to use text and image generation features of Windows. This setting overrides the default LetAppsAccessSystemAIModels policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"5e12068daeda44ba":{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview","displayName":"Update policy override","description":"Lets you specify whether or not automatic updates are enabled for the WebView2 Runtime. The WebView2 Runtime is a component used by applications to display web content.\r\n Automatic updates are enabled by default. Disabling automatic updates for the WebView2 Runtime might cause compatibility issues with applications that depend on this component.\r\n\r\n If you enable this policy, Microsoft Edge Update handles the WebView2 Runtime updates according to how you configure the following options:\r\n - Always allow updates (1): Updates are automatically downloaded and applied\r\n - Updates disabled (0): Updates are never downloaded or applied\r\n\r\n If you don't enable this policy, updates are automatically downloaded and applied.","helpText":"","infoUrls":[],"categoryId":"46eaa2b7-341b-4e39-be21-c3ea09dd5778","categoryName":"Microsoft Edge Web View2 Runtime","options":[{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_1","displayName":"Enabled","description":null,"helpText":null}]},"5e95f0b8946b1f7e":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_timeofday","displayName":"Daily Schedule scan time","description":"Selects the time of day that the Defender daily scan should run. For example, a value of 0=12:00AM, a value of 60=1:00AM, a value of 120=2:00, and so on, up to a value of 1380=11:00PM. The default value is 120.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":null},"5e92f1fe92768fbc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},"5e3547f4bac1eca2":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgrouppermissions","displayName":"File tab | Access Options | Customize | All Commands | User and Group Permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgrouppermissions_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgrouppermissions_1","displayName":"True","description":null,"helpText":null}]},"5e71a41666a8478b":{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinicon","displayName":"Remove Recycle Bin icon from desktop (User)","description":"Removes most occurrences of the Recycle Bin icon.\r\n\r\nThis setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.\r\n\r\nThis setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.\r\n\r\nNote: To make changes to this setting effective, you must log off and then log back on.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-norecyclebinicon"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinicon_1","displayName":"Enabled","description":null,"helpText":null}]},"5e883c0631eae717":{"id":"user_vendor_msft_policy_config_admx_taskbar_nosystraysystempromotion","displayName":"Turn off automatic promotion of notification icons to the taskbar (User)","description":"This policy setting allows you to turn off automatic promotion of notification icons to the taskbar.\r\n\r\nIf you enable this policy setting, newly added notification icons are not temporarily promoted to the Taskbar. Users can still configure icons to be shown or hidden in the Notification Control Panel.\r\n\r\nIf you disable or do not configure this policy setting, newly added notification icons are temporarily promoted to the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nosystraysystempromotion"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nosystraysystempromotion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nosystraysystempromotion_1","displayName":"Enabled","description":null,"helpText":null}]},"5e58807a2d9724e2":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable","displayName":"Enable connection through RD Gateway (User)","description":"If you enable this policy setting, when Remote Desktop Connection cannot connect directly to a remote computer (an RD Session Host server or a computer with Remote Desktop enabled), the clients will attempt to connect to the remote computer through an RD Gateway server. In this case, the clients will attempt to connect to the RD Gateway server that is specified in the \"Set RD Gateway server address\" policy setting.\r\n\r\nYou can enforce this policy setting or you can allow users to overwrite this setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the \"Use these RD Gateway server settings\" option on the client.\r\n\r\nNote: To enforce this policy setting, you must also specify the address of the RD Gateway server by using the \"Set RD Gateway server address\" policy setting, or client connection attempts to any remote computer will fail, if the client cannot connect directly to the remote computer. To enhance security, it is also highly recommended that you specify the authentication method by using the \"Set RD Gateway authentication method\" policy setting. If you do not specify an authentication method by using this policy setting, either the NTLM protocol that is enabled on the client or a smart card can be used.\r\n\r\nTo allow users to overwrite this policy setting, select the \"Allow users to change this setting\" check box. When you do this, users on the client can choose not to connect through the RD Gateway server by selecting the \"Do not use an RD Gateway server\" option. Users can specify a connection method by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify a connection method, the connection method that you specify in this policy setting is used by default.\r\n\r\nIf you disable or do not configure this policy setting, clients will not use the RD Gateway server address that is specified in the \"Set RD Gateway server address\" policy setting. If an RD Gateway server is specified by the user, a client connection attempt will be made through that RD Gateway server.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-gateway-policy-enable"],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_1","displayName":"Enabled","description":null,"helpText":null}]},"5e2ba324fe04f074":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016","displayName":"Microsoft Office 365 Publisher 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Publisher 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Publisher 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365publisher2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016_1","displayName":"Enabled","description":null,"helpText":null}]},"5eca61a066d69956":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel3","displayName":"Site Name 4 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"5eaa53b72498217f":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown","displayName":"Set and Lock Skin (User)","description":"This policy setting allows you to set and lock Windows Media Player in skin mode, using a specified skin.\r\n\r\nIf you enable this policy setting, the Player displays only in skin mode using the skin specified in the Skin box on the Setting tab.\r\n\r\nYou must use the complete file name for the skin (for example, skin_name.wmz), and the skin must be installed in the %programfiles%\\Windows Media Player\\Skins Folder on a user's computer. If the skin is not installed on a user's computer, or if the Skin box is blank, the Player opens by using the Corporate skin. The only way to specify the Corporate skin is to leave the Skin box blank.\r\n\r\nA user has access only to the Player features that are available with the specified skin. Users cannot switch the Player to full mode and cannot choose a different skin.\r\n\r\nIf you disable or do not configure this policy setting, users can display the Player in full or skin mode and have access to all available features of the Player.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-skinlockdown"],"categoryId":"7f461268-0fb6-4247-b6db-52515d42a20e","categoryName":"User Interface","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"5e27a4ee7ee36100":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_restoreonstartupurlsdesc","displayName":"URLs to open on startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":null},"5e34c6856415b9a2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_localfontsblockedforurlsdesc","displayName":"Block Local Fonts permission on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"5eeffdfc9c124e08":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches","displayName":"Perform file validation on pivot caches (User)","description":"This policy key configures whether or not pivot caches should go through file validation and get scanned for security problems when documents in Excel 97-2003 format are opened.\r\n\r\nIf you enable this policy setting, you may select one of these options:\r\n\r\n- No file validation: Never perform file validation on pivot caches for all Excel files (not recommended).\r\n- Web and email sources: Perform file validation on pivot caches for documents that come from the web and email, in addition to all documents that trigger pivot caches on load (default).\r\n- Always perform validation: Always perform file validation on pivot caches for all Excel files.\r\n\r\nThis setting can be overridden by the Object Model property Application.FileValidationPivot.\r\n\r\nIf you disable or do not configure this policy setting, the \"Web and email source\" setting will apply.","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_1","displayName":"Enabled","description":null,"helpText":null}]},"5e9c2d42a5cb99e8":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol","displayName":"Allow only approved domains to use the TDC ActiveX control (User)","description":"This policy setting controls whether or not the user is allowed to run the TDC ActiveX control on websites.\n\nIf you enable this policy setting, the TDC ActiveX control will not run from websites in this zone.\n\nIf you disable this policy setting, the TDC Active X control will run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowonlyapproveddomainstousetdcactivexcontrol"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"5e5ced1d807dbeec":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar","displayName":"Show Microsoft Office shortcut in favorites bar (User)","description":"Specifies whether to include a shortcut to Office.com in the favorites bar. For users signed into Microsoft Edge the shortcut takes users to their Microsoft Office apps and docs.\r\n\r\nIf this policy is enabled or not configure, users can choose whether to see the shortcut by changing the toggle in the favorites bar context menu.\r\n\r\nIf the policy is disabled, the shortcut won't be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_1","displayName":"Enabled","description":null,"helpText":null}]},"5e4933b7a5129479":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc","displayName":"Automatically select client certificates for these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"5e0629e9a9ff5987":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_proxypacurl","displayName":"Set the proxy .pac file URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"5ec4a7bdae05389e":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls","displayName":"Allow listed sites connect to specific HID devices (User)","description":"This setting lets you list the URLs that specify which sites are automatically granted permission to access a HID device with the given vendor and product IDs.\r\n\r\nSetting the policy Each item in the list requires both devices and urls fields for the item to be valid, otherwise the item is ignored.\r\n\r\n * Each item in the devices field must have a vendor_id and may have a product_id field.\r\n\r\n * Omitting the product_id field will create a policy matching any device with the specified vendor ID.\r\n\r\n * An item which has a product_id field without a vendor_id field is invalid and is ignored.\r\n\r\nIf you don't set this policy, that means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nURLs in this policy shouldn't conflict with those configured through 'WebHidBlockedForUrls' (Block the WebHID API on these sites). If they do, this policy takes precedence over 'WebHidBlockedForUrls'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://microsoft.com\",\r\n \"https://chromium.org\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"5ef4f21b03abd96c":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled","displayName":"Search for image enabled (User)","description":"This policy lets you configure the Image Search feature in the right-click context menu.\r\n\r\nIf you enable or don't configure this policy, then the \"Search the web for image\" option will be visible in the context menu.\r\n\r\nIf you disable this policy, then the \"Search the web for image\" will not be visible in the context menu.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5e6935e7a1ef8f74":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_inuktitutlatin","displayName":"Inuktitut (Latin) (User)","description":"Enables the editing language Inuktitut (Latin)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_inuktitutlatin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_inuktitutlatin_1","displayName":"Enabled","description":null,"helpText":null}]},"5e13c599801ae47a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11","displayName":"Trusted Location #11 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_1","displayName":"Enabled","description":null,"helpText":null}]},"5ee9aad9c54f4d26":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog04_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"5ee4d7e5cc1ccb1f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog07_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"5e03a926163f3ca7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgrouptemplatespath_l_workgrouptemplatespath329","displayName":"Workgroup templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":null},"5e8754f0bde173cf":{"id":"user_vendor_msft_policy_config_onent16v8~policy~l_microsoftofficeonenote~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys291_l_enterakeyandmodifiertodisable","displayName":"Enter a key and modifier to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b135b86c-b0f4-4cb5-94f4-a6c7ae2013d9","categoryName":"Custom","options":null},"5e3d61a0a489f676":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07","displayName":"Trusted Location #7 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_1","displayName":"Enabled","description":null,"helpText":null}]},"5e5296e1698b5a4b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettings_l_pjgbuidisplaytoggle","displayName":"Display Project Guide (User)","description":"Displays the side pane containing the Project Guide.\r\n\r\nIf you enable this setting, the Project Guide will be displayed.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"343eb575-3ac8-4da9-b66d-ce84b84be7c3","categoryName":"Project Guide settings","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettings_l_pjgbuidisplaytoggle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettings_l_pjgbuidisplaytoggle_1","displayName":"Enabled","description":null,"helpText":null}]},"5ed1d3d54484678f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation","displayName":"Stop checking for table header accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables have a header row specified.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables have a header row specified.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for header rows and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"5e7f52556ae79b14":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid","displayName":"Random number generator: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":null},"5e7bdc258ad30eae":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_l_word95binarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_l_word95binarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_l_word95binarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_l_word95binarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_l_word95binarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_l_word95binarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/5f.json b/public/intune-definitions/5f.json new file mode 100644 index 000000000000..6a80f0c76b2e --- /dev/null +++ b/public/intune-definitions/5f.json @@ -0,0 +1 @@ +{"5f6a078d154bf62e":{"id":"com.apple.extensiblesso_extensiondata_pwreqminage_kerberos","displayName":"Password Req Min Age","description":"The minimum age of passwords before they can be changed on this domain. Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"5fab580e58584584":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_lcid","displayName":"Microsoft PowerPoint LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"5fcb7b40d93f5c91":{"id":"com.apple.managedclient.preferences_disableimport","displayName":"Disable import from OLM and PST files","description":"Prevent users importing data from the local file system.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-import"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_disableimport_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableimport_true","displayName":"True","description":null,"helpText":null}]},"5f00d7b3e20d225f":{"id":"com.apple.managedclient.preferences_downloadbandwidthlimited","displayName":"Set maximum download throughput","description":"Sets the maximum download throughput rate in kilobytes (KB)/sec for computers running the OneDrive sync app. The minimum rate is 50 KB/sec and the maximum rate is 100,000 KB/sec.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#downloadbandwidthlimited"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":null},"5f37aa8797f95502":{"id":"com.apple.mcx.filevault2_enable","displayName":"Enable","description":"If true, enables FileVault.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":[{"id":"com.apple.mcx.filevault2_enable_0","displayName":"On","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_enable_1","displayName":"Off","description":null,"helpText":null}]},"5f09b94db4a8d889":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"5f2ef32b6f607d6e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.crossoriginwebassemblymodulesharingenabled","displayName":"Specifies whether WebAssembly modules can be sent cross-origin (Obsolete)","description":"Specifies whether WebAssembly modules can be sent to another window or worker cross-origin. Cross-origin WebAssembly module sharing was deprecated as part of the efforts to deprecate document.domain, see https://github.com/mikewest/deprecating-document-domain. This policy allowed re-enabling of cross-origin WebAssembly module sharing. This policy is obsolete because it was intended to offer a longer transition period in the deprecation process.\n\nIf you enable this policy, sites can send WebAssembly modules cross-origin\nwithout restrictions.\n\nIf you disable or don't configure this policy, sites can only send\nWebAssembly modules to windows and workers in the same origin.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.crossoriginwebassemblymodulesharingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.crossoriginwebassemblymodulesharingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"5f7a2dae2336d51e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended","displayName":"Allow download restrictions (users can override)","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\n\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known dangerous downloads or that have dangerous file type extensions.\n\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\n\nSet 'BlockAllDownloads' to block all downloads.\n\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\n\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\n\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\n\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\n\nPolicy options mapping:\n\n* DefaultDownloadSecurity (0) = No special restrictions\n\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\n\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\n\n* BlockAllDownloads (3) = Block all downloads\n\n* BlockMaliciousDownloads (4) = Block malicious downloads\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_defaultdownloadsecurity","displayName":"No special restrictions","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockdangerousdownloads","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockpotentiallydangerousdownloads","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockalldownloads","displayName":"Block all downloads","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockmaliciousdownloads","displayName":"Block malicious downloads","description":null,"helpText":null}]},"5fc1446e3a7cc166":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pluginsblockedforurls","displayName":"Block the Adobe Flash plug-in on specific sites (Obsolete)","description":"This policy doesn't work because Flash is no longer supported by Microsoft Edge.\n\nDefine a list of sites, based on URL patterns, that are blocked from running Adobe Flash.\n\nIf you don't configure this policy, the global default value from the \"DefaultPluginsSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. However, starting in M85, patterns with '*' and '[*.]' wildcards in the host are no longer supported for this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"5f10024d60fe828f":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreunknownca","displayName":"Unknown certifcation authority (CA)","description":null,"helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreunknownca_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreunknownca_1","displayName":"True","description":null,"helpText":null}]},"5faa9a6056dd7445":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_extensions_exclusions_extensionslist","displayName":"Extension Exclusions","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"5fda0de42aea862a":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_asronlyexclusions_exploitguard_asr_asronlyexclusions","displayName":"Exclusions from ASR rules:","description":null,"helpText":"","infoUrls":[],"categoryId":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","categoryName":"Attack Surface Reduction","options":null},"5fc8f7369af2e6cd":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_games","displayName":"Games","description":"This policy setting configures the synchronization of user settings for the Games app.\r\nBy default, the user settings of Games sync between computers. Use the policy setting to prevent the user settings of Games from synchronizing between computers.\r\nIf you enable this policy setting, Games user settings continue to sync.\r\nIf you disable this policy setting, Games user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-games"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_games_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_games_1","displayName":"Enabled","description":null,"helpText":null}]},"5fbdd3eafc4c8804":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup","displayName":"PowerPoint 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft PowerPoint 2013.\r\nMicrosoft PowerPoint 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft PowerPoint 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft PowerPoint 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013powerpointbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"5f6ac64325ab32e0":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio","displayName":"Microsoft Visio 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Visio 2016.\r\nBy default, the user settings of Microsoft Visio 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016visio"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio_1","displayName":"Enabled","description":null,"helpText":null}]},"5fad72668e03346f":{"id":"device_vendor_msft_policy_config_admx_userprofiles_userinfoaccessaction_allowuserinfoaccess","displayName":"Action:","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_userinfoaccessaction_allowuserinfoaccess_1","displayName":"Always on","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_userinfoaccessaction_allowuserinfoaccess_2","displayName":"Always off","description":null,"helpText":null}]},"5fb95033fc3ce6cb":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditdetailedfileshare","displayName":"Object Access Audit Detailed File Share","description":"This policy setting allows you to audit attempts to access files and folders on a shared folder. The Detailed File Share setting logs an event every time a file or folder is accessed, whereas the File Share setting only records one event for any connection established between a client and file share. Detailed File Share audit events include detailed information about the permissions or other criteria used to grant or deny access. If you configure this policy setting, an audit event is generated when an attempt is made to access a file or folder on a share. The administrator can specify whether to audit only successes, only failures, or both successes and failures. Note: There are no system access control lists (SACLs) for shared folders. If this policy setting is enabled, access to all shared files and folders on the system is audited.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditdetailedfileshare"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditdetailedfileshare_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditdetailedfileshare_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditdetailedfileshare_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditdetailedfileshare_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"5fcbf4e6f34ec21c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode","description":"Setting the policy enforces a minimum Restricted mode on YouTube and prevents users from picking a less restricted mode. If you set it to:\r\n\r\n* Strict, Strict Restricted mode on YouTube is always active.\r\n\r\n* Moderate, the user may only pick Moderate Restricted mode and Strict Restricted mode on YouTube, but can't turn off Restricted mode.\r\n\r\n* Off or if no value is set, Restricted mode on YouTube isn't enforced by Chrome. External policies such as YouTube policies might still enforce Restricted mode.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_1","displayName":"Enabled","description":null,"helpText":null}]},"5f003709d06fe600":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions","displayName":"Actions to run when the computer is idle","description":"List of actions to run when the timeout from the IdleTimeout policy is reached.\r\n\r\nWarning: Setting this policy can impact and permanently remove local personal data. It is recommended to test your settings before deploying to prevent accidental deletion of personal data.\r\n\r\nIf the IdleTimeout policy is unset, this policy has no effect.\r\n\r\nWhen the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\r\n\r\nIf this policy is empty or left unset, the IdleTimeout policy has no effect.\r\n\r\nSupported actions are:\r\n\r\n'close_browsers': close all browser windows and PWAs for this profile. Not supported on Android and iOS.\r\n\r\n'close_tabs': close all open tabs in open windows. Only supported on iOS.\r\n\r\n'show_profile_picker': show the Profile Picker window. Not supported on Android and iOS.\r\n\r\n'sign_out': Signs out the current signed in user. Only supported on iOS.\r\n\r\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings', 'clear_hosted_app_data': clear the corresponding browsing data. See the ClearBrowsingDataOnExitList policy for more details. The types supported on iOS are 'clear_browsing_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', and 'clear_autofill'\r\n\r\n'reload_pages': reload all webpages. For some pages, the user may be prompted for confirmation first. Not supported on iOS.\r\n\r\nThe user will stay signed into their Google account when deleting cookies using 'clear_cookies_and_other_site_data'.\r\n\r\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' will disable sync for the respective data types if neither `Chrome Sync` is disabled by setting the SyncDisabled policy nor BrowserSignin is disabled.\r\n\r\nExample value:\r\n\r\nclose_browsers\r\nshow_profile_picker","helpText":"","infoUrls":[],"categoryId":"8c35f124-e249-43e3-9044-ecc0b0a5855a","categoryName":"Idle Browser Actions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_1","displayName":"Enabled","description":null,"helpText":null}]},"5f2405b213a9d713":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook","displayName":"Include Outlook","description":"[ENABLED BY DEFAULT]\r\n\r\nOutlook data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOutlook\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"5f39be13f451eef1":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"5fec5f8d2ad1a3ce":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas","displayName":"Disable Certificate Transparency enforcement for a list of legacy certificate authorities (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 131.\r\n\r\nDisables enforcing Certificate Transparency requirements for a list of legacy certificate authorities (Cas).\r\n\r\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed, continue to be used for enterprise hosts.\r\n\r\nIn order for Certificate Transparency enforcement to be disabled, you must set the hash to a subjectPublicKeyInfo appearing in a CA certificate that is recognized as a legacy certificate authority (CA). A legacy CA is a CA that has been publicly trusted by default by one or more operating systems supported by Microsoft Edge.\r\n\r\nYou specify a subjectPublicKeyInfo hash by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\r\n\r\nIf you don't configure this policy, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it isn't disclosed according to the Certificate Transparency policy.\r\n\r\nThis policy is obsolete because the feature to disable Certificate Transparency enforcement for legacy certificates has been removed.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_1","displayName":"Enabled","description":null,"helpText":null}]},"5f4dfdbf989f7dfb":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled","displayName":"Enable usage and crash-related data reporting","description":"This policy enables reporting of usage and crash-related data about Microsoft Edge to Microsoft.\r\n\r\nEnable this policy to send reporting of usage and crash-related data to Microsoft. Disable this policy to not send the data to Microsoft. In both cases, users can't change or override the setting.\r\n\r\nOn Windows 10, Beta and Stable channels, if you don’t configure this policy, Microsoft Edge will default to the Windows diagnostic data setting. If you enable this policy, Microsoft Edge will only send usage data if the Windows Diagnostic data setting is set to Enhanced or Full. If you disable this policy, Microsoft Edge will not send usage data. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings at https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 10, Canary and Dev channels, this policy controls sending usage data. If this policy is not configured, Microsoft Edge will default to the user's preference. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 7, 8, and macOS, this policy controls sending usage and crash-related data. If you don’t configure this policy, Microsoft Edge will default to the user's preference.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5ffeee4a3081727b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled","displayName":"Enable saving passwords to the password manager","description":"Enable Microsoft Edge to save user passwords.\r\n\r\nIf you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically.\r\n\r\nIf you disable this policy, users can't save new passwords, but they can still use previously saved passwords.\r\n\r\nIf you enable or disable this policy, users can't change or override it in Microsoft Edge. If you don't configure it, users can save passwords, as well as turn this feature off.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5f01c252c029f415":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts","displayName":"Configure the list of commands for which to disable keyboard shortcuts","description":"Configure the list of Microsoft Edge commands for which to disable keyboard shortcuts.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2186950 for a list of possible commands to disable.\r\n\r\nIf you enable this policy, commands in the 'disabled' list will no longer be activated by keyboard shortcuts.\r\n\r\nIf you disable this policy, all keyboard shortcuts behave as usual.\r\n\r\nNote: Disabling a command will only remove its shortcut mapping. Commands in the 'disabled' list will still function if accessed via browser UI.\r\n\r\nExample value:\r\n\r\n{\r\n \"disabled\": [\r\n \"new_tab\",\r\n \"fullscreen\"\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"disabled\": [\"new_tab\", \"fullscreen\"]}","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"5f981933bb6d29b9":{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended","displayName":"Allow users to access the Outlook menu","description":"This policy is used to manage access to the Outlook menu from Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can access the Outlook menu.\r\nIf you disable this policy, users can't access the Outlook menu.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"5f371b6707db90e7":{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled","displayName":"Enable CryptoWallet feature (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 128.\r\n\r\nThis policy is obsoleted because this feature will no longer be supported, starting in Microsoft Edge 128. There is no replacement for this policy.\r\n Enables CryptoWallet feature in Microsoft Edge.\r\n\r\n If you enable this policy or don't configure it, users can use CryptoWallet feature which allows users to securely store, manage and transact digital assets such as Bitcoin, Ethereum and other cryptocurrencies. Therefore, Microsoft Edge may access Microsoft servers to communicate with the web3 world during the use of the CryptoWallet feature.\r\n\r\n If you disable this policy, users can't use CryptoWallet feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5f00b7441aa851c4":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled","displayName":"Enable split screen feature in Microsoft Edge","description":"This policy lets you configure the split screen feature in Microsoft Edge. This feature lets a user open two web pages in one tab.\r\n\r\nIf you enable or don't configure this policy, users can use the split screen feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't use the split screen feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5f2f73cfbf97096d":{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled","displayName":"Controls the display of the profile button label for the work or school profile","description":"Controls whether the label for the work or school profile type is shown in the profile button.\r\n\r\nThis policy does not apply when the OrganizationalBrandingOnWorkProfileUIEnabled policy is enabled.\r\n\r\nIf you enable this policy, the label for the work or school profile type appears in the profile button.\r\n\r\nIf you disable this policy or leave it not configured, the label is not shown.","helpText":"","infoUrls":[],"categoryId":"1043e7ed-8651-44b2-b918-7230c0b75a6c","categoryName":"Profile settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5f3d3bd954f43113":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled","displayName":"Configure address bar editing for kiosk mode public browsing experience","description":"This policy only applies to Microsoft Edge kiosk mode while using the public browsing experience.\r\n\r\nIf you enable or don't configure this policy, users can change the URL in the address bar.\r\n\r\nIf you disable this policy, it prevents users from changing the URL in the address bar.\r\n\r\nFor detailed information on configuring kiosk Mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"categoryId":"d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","categoryName":"Kiosk Mode settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5f51d428d9d7dbb7":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions","displayName":"Blocks external extensions from being installed","description":"Control the installation of external extensions.\r\n\r\nIf you enable this setting, external extensions are blocked from being installed.\r\n\r\nIf you disable this setting or leave it unset, external extensions are allowed to be installed.\r\n\r\nExternal extensions and their installation are documented at [Alternate extension distribution methods](/microsoft-edge/extensions-chromium/developer-guide/alternate-distribution-options).","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"5fe556f2c0a0e0e9":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in the 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins) policy.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"5fbee458b6cdae85":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_powerpntexe101","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_powerpntexe101_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_powerpntexe101_1","displayName":"True","description":null,"helpText":null}]},"5fcd5adca35e814a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mse7exe167","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mse7exe167_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mse7exe167_1","displayName":"True","description":null,"helpText":null}]},"5f57b9f3eba63675":{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_licensingsettings_l_dbs","displayName":"Use a device-based license for Office 365 ProPlus","description":"This policy setting controls whether Office 365 ProPlus uses a device-based license instead of a user-based license.\r\n\r\nImportant: For eligibility requirements and configuration steps to use a device-based license with Office 365 ProPlus, see https://go.microsoft.com/fwlink/p/?linkid=2094216.\r\n\r\nIf you enable this policy setting, Office 365 ProPlus will use a device-based license instead of a user-based license.\r\n\r\nIf you disable or don’t configure this policy setting, Office 365 ProPlus will use a user-based license. Therefore, the user who signs in and activates Office must have an Office license.\r\n ","helpText":"","infoUrls":[],"categoryId":"2e3f0407-6387-41b4-b6c2-ada4354be759","categoryName":"Licensing Settings","options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_licensingsettings_l_dbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_licensingsettings_l_dbs_1","displayName":"Enabled","description":null,"helpText":null}]},"5f7c0d40dfa9808c":{"id":"device_vendor_msft_policy_config_secureboot_configurehighconfidenceoptout","displayName":"Configure High Confidence Opt Out","description":"This policy provides permission to opt out of high confidence buckets that will automatically be applied as part of the LCU.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SecureBoot#configurehighconfidenceoptout"],"categoryId":"a3e48951-624d-4fee-b470-d17ce16e6b0c","categoryName":"Secure Boot","options":[{"id":"device_vendor_msft_policy_config_secureboot_configurehighconfidenceoptout_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_secureboot_configurehighconfidenceoptout_1","displayName":"(Enabled) Opt out of high confidence buckets that will automatically be applied as part of the LCU","description":"(Enabled) Opt out of high confidence buckets that will automatically be applied as part of the LCU","helpText":null}]},"5f7a2bf59964ac4e":{"id":"device_vendor_msft_policy_config_system_allowtelemetry","displayName":"Allow Telemetry","description":"Allow the device to send diagnostic and usage telemetry data, such as Watson. For more information about diagnostic data for Windows, including what is and what is not collected by Windows, see Configure Windows diagnostic data in your organization. Note: This value is only applicable to Windows Enterprise, Windows Education, Windows Mobile Enterprise, Windows IoT Core (IoT Core), Windows Server 2016, and Windows CPC OS. The following tables describe the supported values:Windows 8. 1 Values:0 - Not allowed. 1 - Allowed, except for Secondary Data Requests. 2 (default) - Allowed. Windows 10 Values:0 - Security. Information that is required to help keep Windows or Windows CPC OS more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. Note: This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows IoT Core (IoT Core), Windows Server 2016, and Windows CPC OS. Using this setting on other devices is equivalent to setting the value of 1. 1 - Basic. Basic device info, including: quality-related data, app compatibility, app usage data, and data from the Security level. 2 - Enhanced. Additional insights, including: how Windows, Windows Server, System Center, Windows CPC OS, and apps are used, how they perform, advanced reliability data, and data from both the Basic and the Security levels. 3 - Full. All data necessary to identify and help to fix problems, plus data from the Security, Basic, and Enhanced levels. Important lf you are using Windows 8. 1 MDM server and set a value of 0 using the legacy AllowTelemetry policy on a Windows 10 Mobile device, then the value is not respected and the telemetry level is silently set to level 1. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowtelemetry"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowtelemetry_0","displayName":"Security","description":"Security. Information that is required to help keep Windows more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.\nNote: This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), and Windows Server 2016. Using this setting on other devices is equivalent to setting the value of 1.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowtelemetry_1","displayName":"Basic","description":"Basic. Basic device info, including: quality-related data, app compatibility, app usage data, and data from the Security level.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowtelemetry_3","displayName":"Full","description":"Full. All data necessary to identify and help to fix problems, plus data from the Security, Basic, and Enhanced levels.","helpText":null}]},"5fe15ca388e38b82":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},"5fe1622d4236260a":{"id":"device_vendor_msft_policy_config_userrights_denylogonasservice","displayName":"Deny Log On As Service","description":"Deny log on as a service -This security setting determines which service accounts are prevented from registering a process as a service. This policy setting supersedes the Log on as a service policy setting if an account is subject to both policies. Note: This security setting does not apply to the System, Local Service, or Network Service accounts. Default: None.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denylogonasservice"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"5ffc09ce5993aa1c":{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope","displayName":"Reporting scope","description":"","helpText":null,"infoUrls":[],"categoryId":"b750fe41-33c4-4293-8dfc-42285be35752","categoryName":null,"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope_1","displayName":"Diagnostic data and managed elevations only","description":"Diagnostic data and managed elevations only","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope_2","displayName":"Diagnostic data and all endpoint elevations","description":"Diagnostic data and all endpoint elevations","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope_0","displayName":"Diagnostic data only","description":"Diagnostic data only","helpText":null}]},"5f00b9d46dbcffbc":{"id":"device_vendor_msft_scepcertificate_keystorageprovider","displayName":"Key storage provider (KSP)","description":"Select where you want to store the certificate’s key.","helpText":"","infoUrls":[],"categoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","categoryName":"SCEP certificate","options":null},"5f4606823d1e658e":{"id":"safari_allowdisablingfraudwarning","displayName":"Allow Disabling Fraud Warning","description":"If `false`, the system forces fraud warnings on in Safari.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_allowdisablingfraudwarning_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowdisablingfraudwarning_true","displayName":"Allowed","description":null,"helpText":null}]},"5f7dd8bf90a68b6f":{"id":"settings_item_defaultapplications","displayName":"Default Applications","description":"A dictionary that contains default application bundle identifiers. Currently it supports a default web browser app.","helpText":null,"infoUrls":[],"categoryId":"b32726b3-b0e9-465b-86f8-b61ad8af52f0","categoryName":"Default Applications","options":null},"5fe908c685ba4654":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_descriptioncolon49","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"5fd7fec5203c3af8":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_datecolon60","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"5f8c45d6394dfb38":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditoracc","displayName":"Database tools | Macro | Visual Basic (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditoracc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditoracc_1","displayName":"True","description":null,"helpText":null}]},"5f71cbb792dacd27":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_adsi","displayName":"ADSI Edit (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-adsi"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_adsi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_adsi_1","displayName":"Enabled","description":null,"helpText":null}]},"5f4ce94a00e119be":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_lbl_nopinfileslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"5f14644e313f0623":{"id":"user_vendor_msft_policy_config_admx_startmenu_norecentdocsmenu","displayName":"Remove Recent Items menu from Start Menu (User)","description":"Removes the Recent Items menu from the Start menu. Removes the Documents menu from the classic Start menu.\r\n\r\nThe Recent Items menu contains links to the non-program files that users have most recently opened. It appears so that users can easily reopen their documents.\r\n\r\nIf you enable this setting, the system saves document shortcuts but does not display the Recent Items menu in the Start Menu, and users cannot turn the menu on.\r\n\r\nIf you later disable the setting, so that the Recent Items menu appears in the Start Menu, the document shortcuts saved before the setting was enabled and while it was in effect appear in the Recent Items menu.\r\n\r\nWhen the setting is disabled, the Recent Items menu appears in the Start Menu, and users cannot remove it.\r\n\r\nIf the setting is not configured, users can turn the Recent Items menu on and off.\r\n\r\nNote: This setting does not prevent Windows programs from displaying shortcuts to recently opened documents. See the \"Do not keep history of recently opened documents\" setting.\r\n\r\nThis setting also does not hide document shortcuts displayed in the Open dialog box. See the \"Hide the dropdown list of recent files\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-norecentdocsmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_norecentdocsmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_norecentdocsmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"5f51b6f57dff0a7c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls","displayName":"Block clipboard on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify sites that can't use the clipboard site permission. This does not include all clipboard operations on origins matching the patterns. For instance, users will still be able to paste using keyboard shortcuts as this isn't gated by the clipboard site permission.\r\n\r\nLeaving the policy unset means DefaultClipboardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"5fd6a9305d81ae2d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (User)","description":"Setting the policy to 3 lets websites ask for access to HID devices. Setting the policy to 2 denies access to HID devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.\r\n\r\nThis policy can be overridden for specific url patterns using the WebHidAskForUrls and WebHidBlockedForUrls policies.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"5fe45bf0e3088c93":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings","displayName":"Settings for enhanced autofill (User)","description":"Specifies whether users can let Google Chrome use Generative AI to better understand forms and help them fill more fields.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"5f442f39e59880f0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_datecolon58","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"5f25eb9303bcc0ec":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful","displayName":"Stop checking to ensure hyperlink text is meaningful (User)","description":"This policy setting prevents the Accessibility Checker from verifying that hyperlinks have meaningful text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that hyperlinks have meaningful text.\r\n\r\nIf you disable or do not configure this policy setting, hyperlink text will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_1","displayName":"Enabled","description":null,"helpText":null}]},"5f24234e981d455e":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00","displayName":"Logon options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"5fc2eef8ef0f9b53":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains (User)","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszonenavigatewindowsandframes"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"5fde1e4bae15f115":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled","displayName":"Enable Standardized Browser Zoom Behavior (User)","description":"Configures whether the CSS \"zoom\" property follows the current CSS specification or legacy behavior.\r\n\r\nWhen this policy is enabled or not configured, the CSS \"zoom\" property follows the current specification defined by the CSS Working Group:\r\nhttps://drafts.csswg.org/css-viewport/#zoom-property\r\n\r\nWhen this policy is disabled, the CSS \"zoom\" property uses its legacy, pre-standardized behavior.\r\n\r\nThis policy is temporary and is intended to provide time for organizations to migrate web content to the updated behavior. In a future Microsoft Edge release, this policy will be removed and the standardized behavior will be enforced by default.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"5fa0a7e141c19f4a":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb","displayName":"Set limit on megabytes of memory a single Microsoft Edge instance can use. (User)","description":"Configures the amount of memory that a single Microsoft Edge instance can use before tabs start getting discarded to save memory. The memory used by the tab will be freed and the tab will have to be reloaded when switched to.\r\n\r\nIf you enable this policy, the browser will start to discard tabs to save memory once the limitation is exceeded. However, there is no guarantee that the browser is always running under the limit. Any value under 1024 will be rounded up to 1024.\r\n\r\nIf you don't set this policy, the browser will only attempt to save memory when it has detected that the amount of physical memory on its machine is low.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_1","displayName":"Enabled","description":null,"helpText":null}]},"5f5c14df11525eb0":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed","displayName":"Allow sites configured for Internet Explorer mode to open in Microsoft Edge (User)","description":"This policy lets sites configured to open in Internet Explorer mode to be opened by Microsoft Edge for testing on a modern browser without removing them from the site list.\r\n\r\nUsers can configure this setting in the \"More tools\" menu by selecting 'Open sites in Microsoft Edge'.\r\n\r\nIf you enable this policy, the option to 'Open sites in Microsoft Edge' will be visible under \"More tools\". Users use this option to test IE mode sites on a modern browser.\r\n\r\nIf you disable or don't configure this policy, users can't see the option 'Open in Microsoft Edge' under the \"More tools\" menu. However, users can access this menu option with the --ie-mode-test flag.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"5fb27b1f2c211ce9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastserviceservercapabilities7","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"5fe53a0b45f7d2ff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20frameworklp_l_empty435","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"bc633a5a-c712-49a6-9f56-775ca9321df4","categoryName":"Downloading Framework Components","options":null},"5f008e953aa96ce6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishpuertorico","displayName":"Spanish (Puerto Rico) (User)","description":"Enables the editing language Spanish (Puerto Rico)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishpuertorico_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishpuertorico_1","displayName":"Enabled","description":null,"helpText":null}]},"5f12dfdb6aa38580":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_automaticnamechecking","displayName":"Automatic name checking (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_automaticnamechecking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_automaticnamechecking_1","displayName":"Enabled","description":null,"helpText":null}]},"5f0d55cae37214ef":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_moreoptions","displayName":"Warn before permanently deleting items (User)","description":"By default, a warning message is displayed before Outlook items are permanently deleted. By disabling this setting, you can change this behavior to not display the warning message.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_moreoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_moreoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"5fd63f5a9d7363e3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_l_oommeetingtaskrequest_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_l_oommeetingtaskrequest_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_l_oommeetingtaskrequest_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_l_oommeetingtaskrequest_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_l_oommeetingtaskrequest_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"5f7c0ee311eebfeb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablegallerypreviews","displayName":"Enable Live Preview (User)","description":"Shows or hides the Live Preview that appear when using Galleries that support previews. Live Preview shows how a command would be applied without actually applying it to the document.","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablegallerypreviews_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablegallerypreviews_1","displayName":"Enabled","description":null,"helpText":null}]},"5fab25ca23eadde0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjstartingyear","displayName":"Use starting year for FY numbering (User)","description":"Labels the fiscal year using the calendar year in which the fiscal year begins.\r\n\r\nIf you enable this setting, the label for the fiscal year is the calendar year in which the fiscal year begins.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjstartingyear_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjstartingyear_1","displayName":"Enabled","description":null,"helpText":null}]},"5fb894bd83abf31a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_addons_l_addonscolon","displayName":"Add-ons: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":null},"5f9a5c8284fdac48":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_autokeyboardswitching","displayName":"Auto-Keyboard switching (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_autokeyboardswitching_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_autokeyboardswitching_1","displayName":"Enabled","description":null,"helpText":null}]},"5f3aa9cad60b2d89":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_alertifnotdefault","displayName":"Prompt the user if Word is not the default application for its file extensions (User)","description":"\r\n This policy setting specifies whether to prompt users to change their file extensions association if any of the file type extensions that were associated with Word, are no longer associated with Word.\r\n\r\n If you enable this policy setting, users will never be prompted on program start whenever any of these file types are associated with other applications. If the policy is Enabled, the checkbox under “File->Options-> General -> Start up options-> Tell me …” is Disabled and Unchecked.\r\n\r\n If you disable or do not configure this policy setting users will be prompted on program start whenever any of these file types are associated with other applications. Users can change the behavior of the feature either by checking the checkbox presented in the prompt or by checking the checkbox under “File->Options-> General -> Start up options-> Tell me …”\r\n If the policy is Not Configured or disabled the checkbox is Enabled and Checked by default.","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_alertifnotdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_alertifnotdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"5f3d000d1795d4db":{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_wirelesstype","displayName":"Wireless Type (Windows Insiders only)","description":"Type of wireless network (either Cellular or Wi-Fi). 0 represents Cellular, and 1 represents Wi-Fi. Currently only cellular is supported.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":[{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_wirelesstype_0","displayName":"Cellular","description":"Cellular","helpText":null},{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_wirelesstype_1","displayName":"Wi- Fi","description":"Wi-Fi","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/60.json b/public/intune-definitions/60.json new file mode 100644 index 000000000000..ca831ec26548 --- /dev/null +++ b/public/intune-definitions/60.json @@ -0,0 +1 @@ +{"605dd9d5bd2ede2e":{"id":"com.apple.applicationaccess_allowapplepersonalizedadvertising","displayName":"Allow Apple Personalized Advertising","description":"If false, limits Apple personalized advertising. Available in iOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowapplepersonalizedadvertising_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowapplepersonalizedadvertising_true","displayName":"True","description":null,"helpText":null}]},"60eb39aa6e7b911a":{"id":"com.apple.applicationaccess_allowbookstoreerotica","displayName":"Allow Bookstore Erotica","description":"If false, the user can’t download Apple Books media that is tagged as erotica. Available in iOS 6 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowbookstoreerotica_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowbookstoreerotica_true","displayName":"True","description":null,"helpText":null}]},"6055c6b02c3f6e61":{"id":"com.apple.applicationaccess_forcewatchwristdetection","displayName":"Force Watch Wrist Detection","description":"If true, forces a paired Apple Watch to use Wrist Detection. Available in iOS 8.2 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcewatchwristdetection_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcewatchwristdetection_true","displayName":"True","description":null,"helpText":null}]},"6031251f7683b3ef":{"id":"com.apple.managedclient.preferences_caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication","description":"If enabled (or unset), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\n\nIf disabled, user-added TLS certificates from platform trust stores will not be used in path-building for TLS server authentication.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#caplatformintegrationenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_caplatformintegrationenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_caplatformintegrationenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"609e8c5e99392235":{"id":"com.apple.managedclient.preferences_lowpriorityscheduledscan","displayName":"Low priority scheduled scan","description":"Should scheduled scan be run with low priority. (Scan might take longer to complete).","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":[{"id":"com.apple.managedclient.preferences_lowpriorityscheduledscan_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_lowpriorityscheduledscan_true","displayName":"Enabled","description":null,"helpText":null}]},"606769bedcaa0f12":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype","displayName":"Event Type","description":"The type of action defined by this schedule.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_0","displayName":"Wake","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_1","displayName":"Power On","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_2","displayName":"Wake Power On","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_3","displayName":"Sleep","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_4","displayName":"Shutdown","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_5","displayName":"Restart","description":null,"helpText":null}]},"60fe03a850b790ba":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower","displayName":"Laptop Power","description":"The settings for a laptop computer using AC power. ","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"60559d1926e918f8":{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"60268ab06b4db75c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings","displayName":"Allow importing of browser settings","description":"Allows users to import browser settings from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, browser settings aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This option means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.\n\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_true","displayName":"Enabled","description":null,"helpText":null}]},"60e1e9deca596cbc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.nativemessagingblocklist","displayName":"Configure native messaging block list","description":"Setting this policy specifies which native messaging hosts shouldn't be loaded. A deny list value of * means all native messaging hosts are denied unless they're explicitly allowed.\n\nIf you leave this policy unset, Microsoft Edge loads all installed native messaging hosts.","helpText":null,"infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":null},"60a62fbe94c60e55":{"id":"com.microsoft.edge.mamedgeappconfigsettings.protectedcontentidentifiersallowed","displayName":"Allows web pages to use identifiers for the purpose of protected content playback","description":"This policy controls whether sites can use hardware-specific device identifiers to enable hardware-secure DRM (for example, Widevine L1 or PlayReady SL3000), which may be required for high-resolution protected content playback.\n\nIf you enable this policy or do not configure it, sites are allowed to use protected content identifiers.\n\nIf you disable this policy, sites are not allowed to use protected content identifiers.","helpText":null,"infoUrls":[],"categoryId":"2af24920-f611-4f03-99a6-205773869ae6","categoryName":"Protected Content","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.protectedcontentidentifiersallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.protectedcontentidentifiersallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"60c85e5c4c769bff":{"id":"device_vendor_msft_bitlocker_identificationfield","displayName":"Provide the unique identifiers for your organization","description":"This policy setting allows you to associate unique organizational identifiers to a new drive that is enabled with BitLocker. These identifiers are stored as the identification field and allowed identification field. The identification field allows you to associate a unique organizational identifier to BitLocker-protected drives. This identifier is automatically added to new BitLocker-protected drives and can be updated on existing BitLocker-protected drives using the manage-bde command-line tool. An identification field is required for management of certificate-based data recovery agents on BitLocker-protected drives and for potential updates to the BitLocker To Go Reader. BitLocker will only manage and update data recovery agents when the identification field on the drive matches the value configured in the identification field. In a similar manner, BitLocker will only update the BitLocker To Go Reader when the identification field on the drive matches the value configured for the identification field.\r\n\r\nThe allowed identification field is used in combination with the \"Deny write access to removable drives not protected by BitLocker\" policy setting to help control the use of removable drives in your organization. It is a comma separated list of identification fields from your organization or other external organizations.\r\n\r\nYou can configure the identification fields on existing drives by using manage-bde.exe.\r\n\r\nIf you enable this policy setting, you can configure the identification field on the BitLocker-protected drive and any allowed identification field used by your organization.\r\n\r\nWhen a BitLocker-protected drive is mounted on another BitLocker-enabled computer the identification field and allowed identification field will be used to determine whether the drive is from an outside organization.\r\n\r\nIf you disable or do not configure this policy setting, the identification field is not required.\r\n\r\nNote: Identification fields are required for management of certificate-based data recovery agents on BitLocker-protected drives. BitLocker will only manage and update certificate-based data recovery agents when the identification field is present on a drive and is identical to the value configured on the computer. The identification field can be any value of 260 characters or fewer.\r\n\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","categoryName":"BitLocker Drive Encryption","options":[{"id":"device_vendor_msft_bitlocker_identificationfield_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_identificationfield_1","displayName":"Enabled","description":null,"helpText":null}]},"603b042a721d5af6":{"id":"device_vendor_msft_policy_config_admx_datacollection_commercialidpolicy","displayName":"Configure the Commercial ID","description":"This policy setting defines the identifier used to uniquely associate this device’s telemetry data as belonging to a given organization. If your organization is participating in a program that requires this device to be identified as belonging to your organization then use this setting to provide that identification. The value for this setting will be provided by Microsoft as part of the onboarding process for the program. \r\n\r\nIf you disable or do not configure this policy setting, then Microsoft will not be able to use this identifier to associate this machine and its telemetry data with your organization.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-datacollection#admx-datacollection-commercialidpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_datacollection_commercialidpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_datacollection_commercialidpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"60696fdbb360cf40":{"id":"device_vendor_msft_policy_config_admx_disknvcache_featureoffpolicy","displayName":"Turn off non-volatile cache feature","description":"This policy setting turns off all support for the non-volatile (NV) cache on all hybrid hard disks in the system. To check if you have hybrid hard disks in the system, from Device Manager, right-click the disk drive and select Properties. The NV cache can be used to optimize boot and resume by reading data from the cache while the disks are spinning up. The NV cache can also be used to reduce the power consumption of the system by keeping the disks spun down while satisfying reads and writes from the cache.\r\n\r\nIf you enable this policy setting, the system will not manage the NV cache and will not enable NV cache power saving mode.\r\n\r\nIf you disable this policy setting, the system will manage the NV cache on the disks if the other policy settings for the NV cache are appropriately configured.\r\n\r\nNote: This policy setting will take effect on next boot.\r\n\r\nIf you do not configure this policy setting, the default behavior is to turn on support for the NV cache.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-disknvcache#admx-disknvcache-featureoffpolicy"],"categoryId":"40c593b9-63cf-4b10-ad26-1ceb7c9491fe","categoryName":"Disk NV Cache","options":[{"id":"device_vendor_msft_policy_config_admx_disknvcache_featureoffpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_disknvcache_featureoffpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"60628e7a4755d06b":{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_personalfirewallconfig","displayName":"Prohibit use of Internet Connection Firewall on your DNS domain network","description":"Prohibits use of Internet Connection Firewall on your DNS domain network.\r\n\r\nDetermines whether users can enable the Internet Connection Firewall feature on a connection, and if the Internet Connection Firewall service can run on a computer.\r\n\r\nImportant: This setting is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting does not apply.\r\n\r\nThe Internet Connection Firewall is a stateful packet filter for home and small office users to protect them from Internet network security threats.\r\n\r\nIf you enable this setting, Internet Connection Firewall cannot be enabled or configured by users (including administrators), and the Internet Connection Firewall service cannot run on the computer. The option to enable the Internet Connection Firewall through the Advanced tab is removed. In addition, the Internet Connection Firewall is not enabled for remote access connections created through the Make New Connection Wizard. The Network Setup Wizard is disabled.\r\n\r\nNote: If you enable the \"Windows Firewall: Protect all network connections\" policy setting, the \"Prohibit use of Internet Connection Firewall on your DNS domain network\" policy setting has no effect on computers that are running Windows Firewall, which replaces Internet Connection Firewall when you install Windows XP Service Pack 2.\r\n\r\nIf you disable this setting or do not configure it, the Internet Connection Firewall is disabled when a LAN Connection or VPN connection is created, but users can use the Advanced tab in the connection properties to enable it. The Internet Connection Firewall is enabled by default on the connection for which Internet Connection Sharing is enabled. In addition, remote access connections created through the Make New Connection Wizard have the Internet Connection Firewall enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-personalfirewallconfig"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_personalfirewallconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_personalfirewallconfig_1","displayName":"Enabled","description":null,"helpText":null}]},"604346a2110c2d6b":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxdisplayres_ts_displayres_width","displayName":"Width","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":null},"608fcfc6a5c02802":{"id":"device_vendor_msft_policy_config_admx_tpm_ignorelocallist_name","displayName":"Ignore the local list of blocked TPM commands","description":"This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) commands.\r\n\r\nIf you enable this policy setting, Windows will ignore the computer's local list of blocked TPM commands and will only block those TPM commands specified by Group Policy or the default list.\r\n\r\nThe local list of blocked TPM commands is configured outside of Group Policy by running \"tpm.msc\" or through scripting against the Win32_Tpm interface. The default list of blocked TPM commands is pre-configured by Windows. See the related policy setting to configure the Group Policy list of blocked TPM commands.\r\n\r\nIf you disable or do not configure this policy setting, Windows will block the TPM commands found in the local list, in addition to commands in the Group Policy and default lists of blocked TPM commands.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-ignorelocallist-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_ignorelocallist_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_ignorelocallist_name_1","displayName":"Enabled","description":null,"helpText":null}]},"6014e8b0000ef242":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactitdescription","displayName":"Contact IT Link Text","description":"This policy setting specifies the text of the Contact IT URL hyperlink in the Company Settings Center.\r\nIf you enable this policy setting, the Company Settings Center displays the specified text in the link to the Contact IT URL.\r\nIf you disable this policy setting, the Company Settings Center does not display an IT Contact link.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-contactitdescription"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactitdescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactitdescription_1","displayName":"Enabled","description":null,"helpText":null}]},"600447a5651d29c9":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project","displayName":"Microsoft Project 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Project 2013.\r\nBy default, the user settings of Microsoft Project 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013project"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project_1","displayName":"Enabled","description":null,"helpText":null}]},"60ab03b8f74581f5":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_news","displayName":"News","description":"This policy setting configures the synchronization of user settings for the News app.\r\nBy default, the user settings of News sync between computers. Use the policy setting to prevent the user settings of News from synchronizing between computers.\r\nIf you enable this policy setting, News user settings continue to sync.\r\nIf you disable this policy setting, News user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-news"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_news_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_news_1","displayName":"Enabled","description":null,"helpText":null}]},"600fdb8568d25ff4":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_showsleepoption","displayName":"Show sleep in the power options menu","description":"Shows or hides sleep from the power options menu.\r\n\r\nIf you enable this policy setting, the sleep option will be shown in the Power Options menu (as long as it is supported by the machine's hardware).\r\n\r\nIf you disable this policy setting, the sleep option will never be shown in the Power Options menu.\r\n\r\nIf you do not configure this policy setting, users will be able to choose whether they want sleep to show through the Power Options Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-showsleepoption"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_showsleepoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_showsleepoption_1","displayName":"Enabled","description":null,"helpText":null}]},"6080abb023ace52c":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_msteams","displayName":"Microsoft Teams (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_msteams_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_msteams_1","displayName":"True","description":null,"helpText":null}]},"60a3c23a4f9903fc":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_global_publishing_refresh_options","displayName":"Global Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_global_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_global_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"6014b3bd8e1308c5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_audiocaptureallowedurlsdesc","displayName":"URLs that will be granted access to audio capture devices without prompt (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"600e9d936731a705":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess","displayName":"Require Site Isolation for every site","description":"Since Google Chrome 67, site isolation has been enabled by default on all Desktop platforms, causing every site to run in its own process. A site is a scheme plus eTLD+1 (e.g., https://example.com). Setting this policy to Enabled does not change that behavior; it only prevents users from opting out (for example, using Disable site isolation in chrome://flags). Since Google Chrome 76, setting the policy to Disabled or leaving it unset doesn't turn off site isolation, but instead allows users to opt out.\r\n\r\nIsolateOrigins might also be useful for isolating specific origins at a finer granularity than site (e.g., https://a.example.com).\r\n\r\nOn Google Chrome OS version 76 and earlier, set the DeviceLoginScreenSitePerProcess device policy to the same value. (If the values don't match, a delay can occur when entering a user session.)\r\n\r\nNote: For Android, use the SitePerProcessAndroid policy instead.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"600a0441a8a88320":{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_channel_logmaxsize","displayName":"Maximum Log Size (KB)","description":"","helpText":"","infoUrls":[],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":null},"606de5e3914184ba":{"id":"device_vendor_msft_policy_config_experience_allowwindowstips","displayName":"Allow Windows Tips","description":"Enables or disables Windows Tips / soft landing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowwindowstips"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowwindowstips_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowwindowstips_1","displayName":"Allow","description":"Enabled.","helpText":null}]},"60d547a9a461f39e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch","displayName":"VHD Name Match","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies a string pattern used when matching a users Profile container. Use this setting to define how FSLogix will attempt to locate a users Profile container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNamePattern value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_1","displayName":"Enabled","description":null,"helpText":null}]},"60618121463b55bb":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares","displayName":"Network Access Restrict Anonymous Access To Named Pipes And Shares","description":"Network access: Restrict anonymous access to Named Pipes and Shares When enabled, this security setting restricts anonymous access to shares and pipes to the settings for: Network access: Named pipes that can be accessed anonymously Network access: Shares that can be accessed anonymously Default: Enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_restrictanonymousaccesstonamedpipesandshares"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares_0","displayName":"Disable","description":"Disable","helpText":null}]},"6042042019419c2b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended","displayName":"Show Home button on toolbar","description":"Shows the Home button on Microsoft Edge's toolbar.\r\n\r\nEnable this policy to always show the Home button. Disable it to never show the button.\r\n\r\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6097488dd3aff5ff":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_urlblocklistdesc","displayName":"Block access to a list of URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"6019096bd38605b1":{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_restrictcoresharingonrenderer","displayName":"Restrict CPU core sharing for renderer process","description":"This policy helps mitigate side-channel cross-process memory attacks by isolating the renderer process to a dedicated CPU core, preventing other processes from being scheduled on the same core. This mitigation is supported on Microsoft® Windows® 11 24H2 and later. If the operating system does not support the necessary scheduling features, this policy has no effect. Enabling this policy may reduce performance in demanding workloads, similar to the impact of disabling hyperthreading. For more information refer https://learn.microsoft.com/windows/win32/api/winnt/ns-winnt-process_mitigation_side_channel_isolation_policy\r\nIf you enable this policy, other processes can not be scheduled on the same CPU core as a renderer process.\r\nIf you disable this policy, other processes can be scheduled on the same CPU core as a renderer process.\r\nIf you don't configure this policy, other processes may be scheduled on the same core as the renderer process. Behavior may vary depending on Microsoft Edge version and platform.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_restrictcoresharingonrenderer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_restrictcoresharingonrenderer_1","displayName":"Enabled","description":null,"helpText":null}]},"605c0ca0b50c68ee":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls","displayName":"Allow the Serial API on specific sites","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a serial port.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSerialGuardSetting' (Control use of the Serial API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SerialBlockedForUrls' (Block the Serial API on specific sites) policy (if there is a match), the 'DefaultSerialGuardSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SerialBlockedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"600a917770ec02da":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users","description":"If FriendlyURLs are enabled, Microsoft Edge will compute additional representations of the URL and place them on the clipboard.\r\n\r\nThis policy configures what format will be pasted when the user pastes in external applications, or inside Microsoft Edge without the 'Paste as' context menu item.\r\n\r\nIf configured, this policy makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu will not be available.\r\n\r\n* Not configured = The user will be able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\r\n\r\n* 1 = No additional formats will be stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature will be disabled.\r\n\r\n* 3 = The user will get a friendly URL whenever they paste into surfaces that accept rich text. The plain URL will still be available for non-rich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\r\n\r\n* 4 = (Not currently used)\r\n\r\nThe richer formats may not be well-supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\r\n\r\nThe recommended policy is available in Microsoft Edge 105 or later.\r\n\r\nPolicy options mapping:\r\n\r\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\r\n\r\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.\r\n\r\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_1","displayName":"Enabled","description":null,"helpText":null}]},"6082596c05d69aa4":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection","displayName":"Object Caching Protection","description":"Object Caching","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_1","displayName":"Enabled","description":null,"helpText":null}]},"609696732f5f3de3":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingopacity","displayName":"QR code bitmap opacity (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"60b8e9cdcd133181":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hideransomwaredatarecovery","displayName":"Hide Ransomware Data Recovery","description":"Use this policy setting to hide the Ransomware data recovery area in Windows Defender Security Center.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hideransomwaredatarecovery"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hideransomwaredatarecovery_0","displayName":"(Disable or not configured) The Ransomware data recovery area will be visible.","description":"(Disable or not configured) The Ransomware data recovery area will be visible.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hideransomwaredatarecovery_1","displayName":"(Enable) The Ransomware data recovery area is hidden.","description":"(Enable) The Ransomware data recovery area is hidden.","helpText":null}]},"600887f9cab11c23":{"id":"enrollment_autopilot_dpp_devicerenametemplate","displayName":"Enter a name","description":"Create a unique name for your devices. Names must be 63 characters or less once macros are expanded, and can contain letters (a-z, A-Z), numbers (0-9), and hyphens. Names must not contain only numbers. Names cannot include a blank space. Use the %SERIAL% macro to add a hardware-specific serial number. Alternatively, use the %RAND:x% macro to add a random string of numbers, where x equals the number of digits to add.","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":null},"6051f3caef4948ec":{"id":"intelligencesettings_apps_notes_allowtranscription","displayName":"Allow Transcription","description":"If `false`, disables Notes Transcription.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_apps_notes_allowtranscription_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_apps_notes_allowtranscription_true","displayName":"True","description":null,"helpText":null}]},"60ff0613b2fccdc1":{"id":"linux_mdatp_managed_cloudservice_definitionupdatesinterval","displayName":"Security intelligence Update time interval (seconds)","description":"Allows setting the time interval at which offline security intelligence updates are triggered on endpoints.","helpText":"Allows to set the time interval at which the security intelligence updates will be downloaded on the endpoint from the cloud or local server if offline security intelligence is turned ON.","infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#definitionupd…"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":null},"6056a4995df87635":{"id":"mde_managed_antivirusengine_offlinedefinitionupdate","displayName":"Enable offline definition update","description":"Determines whether offline definition updates are enabled for antivirus.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--offlineDefinitionUpdate"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"mde_managed_antivirusengine_offlinedefinitionupdate_false","displayName":"Disabled","description":null,"helpText":null},{"id":"mde_managed_antivirusengine_offlinedefinitionupdate_true","displayName":"Enabled","description":null,"helpText":null}]},"601a3454688ece35":{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denywrite_access_1","displayName":"Removable Disks: Deny write access (User)","description":"This policy setting denies write access to removable disks.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n\r\nNote: To require that users write data to BitLocker-protected storage, enable the policy setting \"Deny write access to drives not protected by BitLocker,\" which is located in \"Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Removable Data Drives.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removabledisks-denywrite-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"6088908c2e0dd9e3":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nobackbutton","displayName":"Hide the common dialog back button (User)","description":"Hide the Back button in the Open dialog box.\r\n\r\nThis policy setting lets you remove new features added in Microsoft Windows 2000 Professional, so the Open dialog box appears as it did in Windows NT 4.0 and earlier. This policy setting affects only programs that use the standard Open dialog box provided to developers of Windows programs.\r\n\r\nIf you enable this policy setting, the Back button is removed from the standard Open dialog box.\r\n\r\nIf you disable or do not configure this policy setting, the Back button is displayed for any standard Open dialog box.\r\n\r\nTo see an example of the standard Open dialog box, start Notepad and, on the File menu, click Open.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. Also, third-party applications with Windows 2000 or later certification to are required to adhere to this policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nobackbutton"],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nobackbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nobackbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"6020418e0913f4ed":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended","displayName":"Enable AutoFill for credit cards (User)","description":"Setting the policy to True or leaving it unset means users can control autofill suggestions for credit cards in the UI.\r\n\r\nSetting the policy to False means autofill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"60f3ed5d13699fe0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc","displayName":"URLs to open on startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":null},"60bffe088d8d7485":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain","displayName":"Enable curtaining of remote access hosts (User)","description":"Setting the policy to Enabled turns off remote access hosts' physical input and output devices during a remote connection.\r\n\r\nSetting the policy to Disabled or leaving it unset lets both local and remote users interact with the host while it's shared.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain_1","displayName":"Enabled","description":null,"helpText":null}]},"60d46e0eaa9b59c7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsharing","displayName":"Review tab | Changes | Protect and Share Workbook (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsharing_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsharing_1","displayName":"True","description":null,"helpText":null}]},"602c5512c1dea27a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showalertifnotdefault","displayName":"Show Alert if Excel is not the default for its associated file types (User)","description":"This policy setting controls the \"Tell me if Microsoft Excel isn't the default progam for viewing and editing spreadsheets\" option found under File tab | Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will show an alert if it isn't the default progam for viewing and editing spreadsheets. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will turn off the alert.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showalertifnotdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showalertifnotdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"601617c694a8ba41":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206","displayName":"Internet Explorer web browser control (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3","displayName":"Disable","description":null,"helpText":null}]},"60a0283f1b812de3":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowsmartscreenie"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"6002602faf83097b":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains (User)","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezonenavigatewindowsandframes"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"60fd3256c6a4db6a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled","displayName":"Enable Proactive Authentication (User)","description":"Lets you configure whether to turn on Proactive Authentication.\r\n\r\nIf you enable this policy, Microsoft Edge tries to proactively authenticate the signed-in user with Microsoft services. At regular intervals, Microsoft Edge checks with an online service for an updated manifest that contains the configuration that governs how to do this.\r\n\r\nIf you disable this policy, Microsoft Edge doesn't try to proactively authenticate the signed-in user with Microsoft services. Microsoft Edge no longer checks with an online service for an updated manifest that contains the configuration for doing this.\r\n\r\nIf you don't configure this policy, Proactive Authentication is turned on.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6048bff6b5099f81":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting","displayName":"Default Adobe Flash setting (User)","description":"Determines whether websites that aren't covered by 'PluginsAllowedForUrls' (Allow the Adobe Flash plug-in on specific sites) or 'PluginsBlockedForUrls' (Block the Adobe Flash plug-in on specific sites) can automatically run the Adobe Flash plug-in. You can select 'BlockPlugins' (2) to block Adobe Flash on all sites, or you can select 'ClickToPlay' (3) to let Adobe Flash run but require the user to click the placeholder to start it. In any case, the 'PluginsAllowedForUrls' and 'PluginsBlockedForUrls' policies take precedence over 'DefaultPluginsSetting'.\r\n\r\nAutomatic playback is only allowed for domains explicitly listed in the 'PluginsAllowedForUrls' policy. If you want to enable automatic playback for all sites, consider adding http://* and https://* to this list.\r\n\r\nIf you don't configure this policy, the user can change this setting manually.\r\n\r\n* 2 = Block the Adobe Flash plug-in\r\n\r\n* 3 = Click to play\r\n\r\nThe former '1' option set allow-all, but this functionality is now only handled by the 'PluginsAllowedForUrls' policy. Existing policies using '1' will operate in Click-to-play mode.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"609e91a0f17be2a9":{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls","displayName":"Allow precise geolocation on these sites (User)","description":"This policy lets you specify a list of URL patterns for sites that are allowed to access the user's high-accuracy geolocation without prompting for permission.\r\n\r\nIf you leave this policy unset, DefaultGeolocationSetting applies to all sites (if configured). Otherwise, the user's personal setting is used.\r\n\r\nFor information about valid url patterns, see https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format. Wildcards (*) are supported.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"60f60927fd5e16fb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceim","displayName":"Replace MAPI - IM (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"IM address\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"IM address\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceim_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceim_1","displayName":"Enabled","description":null,"helpText":null}]},"60270b8e03e4dd70":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20frameworklp","displayName":"Set download location for Microsoft .NET Framework 2.0 Language Pack (User)","description":"Set a custom path to where users can access the missing component.","helpText":"","infoUrls":[],"categoryId":"bc633a5a-c712-49a6-9f56-775ca9321df4","categoryName":"Downloading Framework Components","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20frameworklp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20frameworklp_1","displayName":"Enabled","description":null,"helpText":null}]},"602d73cc1ac7cf6d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mohawk","displayName":"Mohawk (User)","description":"Enables the editing language Mohawk","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mohawk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mohawk_1","displayName":"Enabled","description":null,"helpText":null}]},"60eb7abe046a1f31":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]},"60c840a136dbc00f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_l_allowsubfolders281","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_l_allowsubfolders281_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_l_allowsubfolders281_1","displayName":"True","description":null,"helpText":null}]},"609a09049b51343e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_sharedthemespath_l_sharedthemespath330","displayName":"Shared themes path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":null},"60a3f1942e6cdfca":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforpstfiles","displayName":"Default location for PST files (User)","description":"This policy setting allows you to specify a different folder location for Outlook Data File (PST) files on user computers. \r\n\r\nIf you enable this policy setting, you can specify a location for PST files on user computers.\r\n\r\nIf you disable or do not configure this policy setting, PST files are located in: %USERPROFILE%\\Documents\\Outlook Files\\ on user computers.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforpstfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforpstfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"6087a9cfdb5055f0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats","displayName":"Message Formats (User)","description":"This policy setting controls which message encryption formats Outlook can use. Outlook supports three formats for encrypting and signing messages: S/MIME, Exchange, and Fortezza.\r\n\r\nIf you enable this policy setting, you can specify whether Outlook can use S/MIME (the default), Exchange, or Fortezza encryption, or any combination of any of these options. Users will not be able to change this configuration.\r\n\r\nIf you disable or do not configure this policy setting, Outlook only uses S/MIME to encrypt and sign messages. If you disable this policy setting, users will not be able to change this configuration.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_1","displayName":"Enabled","description":null,"helpText":null}]},"60a9e98eef532a92":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requiresuitebalgorithmsforsmimeoperations","displayName":"Require SuiteB algorithms for S/MIME operations (User)","description":"This policy setting determines whether Outlook is required to use NSA Suite B algorithms for S/MIME operations. Outlook implements Suite B, a set of cryptographic algorithms for symmetric encryption, hashing, digital signatures, and key exchange announced in 2005 by the National Security Agency (NSA), a division of the United States Department of Defense. The Suite B protocols can be used to meet U.S. government standards for handling both classified and unclassified information. \r\n\r\nIf you enable this policy setting, Outlook uses only Suite B algorithms for S/MIME operations. The Suite B algorithms are as follows: \r\n\r\n- Symmetric encryption. Advanced Encryption Standard (AES) with key sizes of 128 and 256 bits. \r\n\r\n- Message digest. Secure Hash Algorithm (SHA-256 and SHA-384). \r\n\r\n- Key agreement. Elliptic-Curve Menezes-Qu-Vanstone (ECMQV); Elliptic Curve Diffie-Hellman (ECDH). \r\n\r\n- Digital Signatures. Elliptic-Curve Digital Signature Algorithm (ECDSA). \r\n\r\nIf you disable or do not configure this policy setting, Outlook can use any available algorithm for S/MIME operations, such as encryption, signing, and so on. \r\n\r\nNote - For more information about Suite B, see \"Fact Sheet NSA Suite B Cryptography\" http://www.nsa.gov/ia/industry/crypto_suite_b.cfm.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requiresuitebalgorithmsforsmimeoperations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requiresuitebalgorithmsforsmimeoperations_1","displayName":"Enabled","description":null,"helpText":null}]},"60e18e2663d843f9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_onsendaddinsenabled","displayName":"Disable send when web extensions can’t load. (User)","description":"If you enable this policy setting, Outlook won’t allow email and meeting requests to be sent until web add-ins are loaded from Exchange.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_onsendaddinsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_onsendaddinsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6022d0be32eb4f79":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookmemoryalertthreshold_l_outlookmemoryalertthresholdspinid","displayName":"(1 - 1500 MB) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":null},"60ff1f9cf8c3ddc3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_preventsavingcredentialsforbasicauthenticationpolicy","displayName":"Prevent saving credentials for Basic Authentication policy (User)","description":"This policy setting allows you to prevent Outlook from saving user credentials using Basic Authentication.\r\n\r\nIf you enable this policy setting, Outlook will not save user credentials using Basic Authentication.\r\n\r\nIf you disable or do not configure this policy setting, Outlook will allow the user to save credentials when using Basic Authentication against a server. These credentials are stored as generic and retrievable by any process running with that user's rights on the machine.","helpText":"","infoUrls":[],"categoryId":"ff87ffcb-a827-4d2b-90fc-e5789ef6d3e0","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_preventsavingcredentialsforbasicauthenticationpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_preventsavingcredentialsforbasicauthenticationpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"6095a9eeae7905d3":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_l_opendocumentpresentationfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_l_opendocumentpresentationfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_l_opendocumentpresentationfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_l_opendocumentpresentationfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_l_opendocumentpresentationfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_l_opendocumentpresentationfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_l_opendocumentpresentationfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"603781c7c6c9257b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocprojects","displayName":"Projects (User)","description":"Specifies the default location in the computer system for saving and opening projects.\r\n\r\nIf you enable this policy setting, the location first appears in the Open and Save As dialog box.\r\n\r\nIf you disable or do not configure this policy setting, the users default for this setting is followed.","helpText":"","infoUrls":[],"categoryId":"d679b407-a753-40aa-bc9f-175f363b0eff","categoryName":"File locations","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocprojects_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocprojects_1","displayName":"Enabled","description":null,"helpText":null}]},"607089c195eee073":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdefaulttasktypes","displayName":"Default task type (User)","description":"Specifies the default task type for new tasks.\r\n\r\nIf you enable this setting, new tasks will be set to the type that you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdefaulttasktypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdefaulttasktypes_1","displayName":"Enabled","description":null,"helpText":null}]},"608d203b1bc1d6ee":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjshowestimateddurations","displayName":"Show that tasks have estimated durations (User)","description":"Displays a question mark (?) after the duration unit of any task with an estimated duration.\r\n\r\nIf you enable this setting, tasks with estimated durations have a question mark after their duration unit.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjshowestimateddurations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjshowestimateddurations_1","displayName":"Enabled","description":null,"helpText":null}]},"60163223b069c880":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_showfileopenwarnings","displayName":"Show file open warnings (User)","description":"Indicates whether a warning message is displayed when you open files that contain errors such as invalid XML code.","helpText":"","infoUrls":[],"categoryId":"6ae0d607-832c-403b-b3bc-c563e390ebad","categoryName":"Save/Open","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_showfileopenwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_showfileopenwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"60a84f10403a1eaa":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2","displayName":"Color for deleted cells: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_1","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_0","displayName":"By Author","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_2","displayName":"Pink","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_3","displayName":"Light blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_4","displayName":"Light yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_5","displayName":"Light purple","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_6","displayName":"Light Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_7","displayName":"Light green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart2_8","displayName":"Gray","description":null,"helpText":null}]},"6019df5e5c0c2a2e":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_policyappid","displayName":"Policy App Id","description":" Specifies one WDAC tag. This is a string that can contain any alphanumeric character and any of the characters \":\", \"/\", \".\", and \"_\". \r\n A PolicyAppId and ServiceName cannot be specified in the same rule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/61.json b/public/intune-definitions/61.json new file mode 100644 index 000000000000..eacbd5f25150 --- /dev/null +++ b/public/intune-definitions/61.json @@ -0,0 +1 @@ +{"6106712303e45a84":{"id":"com.apple.applicationaccess_allownotestranscription","displayName":"Allow Notes Transcription (Deprecated)","description":"If false, disables transcription in Notes.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allownotestranscription_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allownotestranscription_true","displayName":"True","description":null,"helpText":null}]},"614f0d02e49de3fe":{"id":"com.apple.appstore_disablesoftwareupdatenotifications","displayName":"Disable Software Update Notifications","description":"If true, disables software update notifications. Available in macOS 10.10 and later.","helpText":null,"infoUrls":[],"categoryId":"f14014f5-a401-41e3-8a97-1a9e3c5e3614","categoryName":"App Store","options":[{"id":"com.apple.appstore_disablesoftwareupdatenotifications_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.appstore_disablesoftwareupdatenotifications_true","displayName":"True","description":null,"helpText":null}]},"61c7f6f0cdc6d89d":{"id":"com.apple.managedclient.preferences_defaultgeolocationsetting","displayName":"Default geolocation setting","description":"Set whether websites can track users' physical locations. You can allow tracking by default (1), deny it by default (2), or ask the user each time a website requests their location (3).\n\nIf you don't configure this policy, 'AskGeolocation' policy is used and the user can change it.\n\n* 1 = Allow sites to track users' physical location\n\n* 2 = Don't allow any site to track users' physical location\n\n* 3 = Ask whenever a site wants to track users' physical location","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultgeolocationsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultgeolocationsetting_0","displayName":"Allow sites to track users' physical location","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultgeolocationsetting_1","displayName":"Don't allow any site to track users' physical location","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultgeolocationsetting_2","displayName":"Ask whenever a site wants to track users' physical location","description":null,"helpText":null}]},"61137b37d575ecf5":{"id":"com.apple.managedclient.preferences_nativemessaginguserlevelhosts","displayName":"Allow user-level native messaging hosts (installed without admin permissions)","description":"Enables user-level installation of native messaging hosts.\n\nIf you disable this policy, Microsoft Edge will only use native messaging hosts installed on the system level.\n\nBy default, if you don't configure this policy, Microsoft Edge will allow usage of user-level native messaging hosts.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#nativemessaginguserlevelhosts"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_nativemessaginguserlevelhosts_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_nativemessaginguserlevelhosts_true","displayName":"Enabled","description":null,"helpText":null}]},"610ed9aa625e77d0":{"id":"com.apple.managedclient.preferences_sleepingtabsenabled","displayName":"Configure Sleeping Tabs","description":"This policy setting lets you configure whether to turn on Sleeping Tabs. Sleeping Tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, Sleeping Tabs is turned on.\n\nIndividual sites may be blocked from being put to sleep by configuring the policy \"SleepingTabsBlockedForUrls\".\n\nIf you enable this setting, Sleeping Tabs is turned on.\n\nIf you disable this setting, Sleeping Tabs is turned off.\n\nIf you don't configure this setting, users can choose whether to use Sleeping Tabs.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sleepingtabsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sleepingtabsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"61802c674c9fdff8":{"id":"com.apple.mcxmenuextras_irda.menu","displayName":"IrDA","description":"If true, enables the IrDA menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_irda.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_irda.menu_true","displayName":"True","description":null,"helpText":null}]},"61ff6cfc69b0a5ca":{"id":"com.apple.mcxprinting_userprinterlist_printer_location","displayName":"Location","description":"The printer's location.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"61ebbaefb7a14c53":{"id":"com.apple.shareddeviceconfiguration_com.apple.shareddeviceconfiguration","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"dec8381a-0a61-406b-842b-fc6ae9930795","categoryName":"Lock Screen Message","options":null},"6143fcc401ca7e0e":{"id":"com.apple.systemconfiguration_proxies_proxyautoconfigenable","displayName":"Proxy Auto Config Enable","description":"If true, enables automatic proxy configuration.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_proxyautoconfigenable_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_proxyautoconfigenable_1","displayName":"True","description":null,"helpText":null}]},"6101eec45fdcf3d6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkblockedforurls","displayName":"Block sites from making network requests to local network endpoints.","description":"Controls which website origins are blocked from making Local Network Access requests to local network endpoints.\n\nNetwork requests initiated from websites that match the specified URL patterns are blocked from issuing Local Network Access requests.\n\nFor origins not covered by the patterns specified in this policy, the user's personal configuration applies.\n\nFor detailed information about valid URL patterns, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\n\nFor more information about Local Network Access restrictions, see https://wicg.github.io/local-network-access/.\n\nMultiple policies can list origins that affect requests to local network endpoints. If an origin matches more than one of the following policies, they take precedence in the following order:\n- LocalNetworkBlockedForUrls\n- LocalNetworkAllowedForUrls\n- LoopbackNetworkBlockedForUrls\n- LoopbackNetworkAllowedForUrls\n- LocalNetworkAccessBlockedForUrls\n- LocalNetworkAccessAllowedForUrls\n\nThis policy controls access to local network endpoints (private IP addresses) and can be used to block specific websites from accessing local network resources.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"61a1834cd303b88c":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage","displayName":"Configure pre-boot recovery message and URL","description":"This policy setting lets you configure the entire recovery message or replace the existing URL that are displayed on the pre-boot key recovery screen when the OS drive is locked.\n\nIf you select the \"Use default recovery message and URL\" option, the default BitLocker recovery message and URL will be displayed in the pre-boot key recovery screen. If you have previously configured a custom recovery message or URL and want to revert to the default message, you must keep the policy enabled and select the \"Use default recovery message and URL\" option.\n\nIf you select the \"Use custom recovery message\" option, the message you type in the \"Custom recovery message option\" text box will be displayed in the pre-boot key recovery screen. If a recovery URL is available, include it in the message.\n\nIf you select the \"Use custom recovery URL\" option, the URL you type in the \"Custom recovery URL option\" text box will replace the default URL in the default recovery message, which will be displayed in the pre-boot key recovery screen.\n\nNote: Not all characters and languages are supported in pre-boot. It is strongly recommended that you test that the characters you use for the custom message or URL appear correctly on the pre-boot recovery screen.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_1","displayName":"Enabled","description":null,"helpText":null}]},"6168b5ed4f6d3851":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_startbackground_startbackgroundspin","displayName":"Background ID:","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"610ab5ca78fe788f":{"id":"device_vendor_msft_policy_config_admx_fileservervssprovider_pol_encryptprotocol","displayName":"Allow or Disallow use of encryption to protect the RPC protocol messages between File Share Shadow Copy Provider running on application server and File Share Shadow Copy Agent running on the file servers.","description":"Determines whether the RPC protocol messagese used by VSS for SMB2 File Shares feature is enabled.\r\n\r\nVSS for SMB2 File Shares feature enables VSS aware backup applications to perform application consistent backup and restore of VSS aware applications storing data on SMB2 File Shares.\r\n\r\nBy default, the RPC protocol message between File Server VSS provider and File Server VSS Agent is signed but not encrypted. \r\n\r\nNote: To make changes to this setting effective, you must restart Volume Shadow Copy (VSS) Service .\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-fileservervssprovider#admx-fileservervssprovider-pol-encryptprotocol"],"categoryId":"d9f5ccc9-5180-43b7-9c81-89ac3364ce00","categoryName":"File Share Shadow Copy Provider","options":[{"id":"device_vendor_msft_policy_config_admx_fileservervssprovider_pol_encryptprotocol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_fileservervssprovider_pol_encryptprotocol_1","displayName":"Enabled","description":null,"helpText":null}]},"6178d44301628e0d":{"id":"device_vendor_msft_policy_config_admx_icm_nc_noregistration","displayName":"Turn off Registration if URL connection is referring to Microsoft.com","description":"This policy setting specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration.\r\n\r\nIf you enable this policy setting, it blocks users from connecting to Microsoft.com for online registration and users cannot register their copy of Windows online.\r\n\r\nIf you disable or do not configure this policy setting, users can connect to Microsoft.com to complete the online Windows Registration.\r\n\r\nNote that registration is optional and involves submitting some personal information to Microsoft. However, Windows Product Activation is required but does not involve submitting any personal information (except the country/region you live in).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-nc-noregistration"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_nc_noregistration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_nc_noregistration_1","displayName":"Enabled","description":null,"helpText":null}]},"61b0093496532ea4":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_mpengine_enablefilehashcomputation","displayName":"Enable file hash computation feature","description":"\r\n Enable or disable file hash computation feature.\r\n\r\n Enabled:\r\n When this feature is enabled Microsoft Defender will compute hash value for files it scans.\r\n\r\n Disabled:\r\n File hash value is not computed\r\n \r\n Not configured:\r\n Same as Disabled.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-mpengine-enablefilehashcomputation"],"categoryId":"adc4eb7f-0f34-4f43-b361-dc42363eccab","categoryName":"Mp Engine","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_mpengine_enablefilehashcomputation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_mpengine_enablefilehashcomputation_1","displayName":"Enabled","description":null,"helpText":null}]},"6198a8663a749810":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxdepth_scan_archivemaxdepth","displayName":"Specify the maximum depth to scan archive files","description":null,"helpText":"","infoUrls":[],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":null},"61d5ed2ac51e5bdf":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allowsinglelabeldnsdomain","displayName":"Use DNS name resolution with a single-label domain name instead of NetBIOS name resolution to locate the DC","description":"This policy setting specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names.\r\n\r\nBy default, the behavior specified in the AllowDnsSuffixSearch is used. If the AllowDnsSuffixSearch policy is disabled, then NetBIOS name resolution is used exclusively, to locate a domain controller hosting an Active Directory domain specified with a single-label name.\r\n\r\nIf you enable this policy setting, computers to which this policy is applied will attempt to locate a domain controller hosting an Active Directory domain specified with a single-label name using DNS name resolution.\r\n\r\nIf you disable this policy setting, computers to which this setting is applied will use the AllowDnsSuffixSearch policy, if it is not disabled or perform NetBIOS name resolution otherwise, to attempt to locate a domain controller that hosts an Active Directory domain specified with a single-label name. the computers will not the DNS name resolution in this case, unless the computer is searching for a domain with a single label DNS name that exists in the Active Directory forest to which this computer is joined.\r\n\r\nIf you do not configure this policy setting, it is not applied to any computers, and computers use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-allowsinglelabeldnsdomain"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allowsinglelabeldnsdomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_allowsinglelabeldnsdomain_1","displayName":"Enabled","description":null,"helpText":null}]},"61f1da430b549889":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings","displayName":"Configure Background Sync","description":"This policy setting controls when background synchronization occurs while operating in slow-link mode, and applies to any user who logs onto the specified machine while this policy is in effect. To control slow-link mode, use the \"Configure slow-link mode\" policy setting.\r\n\r\nIf you enable this policy setting, you can control when Windows synchronizes in the background while operating in slow-link mode. Use the 'Sync Interval' and 'Sync Variance' values to override the default sync interval and variance settings. Use 'Blockout Start Time' and 'Blockout Duration' to set a period of time where background sync is disabled. Use the 'Maximum Allowed Time Without A Sync' value to ensure that all network folders on the machine are synchronized with the server on a regular basis.\r\n\r\nYou can also configure Background Sync for network shares that are in user selected Work Offline mode. This mode is in effect when a user selects the Work Offline button for a specific share. When selected, all configured settings will apply to shares in user selected Work Offline mode as well.\r\n\r\nIf you disable or do not configure this policy setting, Windows performs a background sync of offline folders in the slow-link mode at a default interval with the start of the sync varying between 0 and 60 additional minutes. In Windows 7 and Windows Server 2008 R2, the default sync interval is 360 minutes. In Windows 8 and Windows Server 2012, the default sync interval is 120 minutes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-backgroundsyncsettings"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"61ffed3292952522":{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries","displayName":"Directory pruning retry","description":"Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the computer's printers.\r\n\r\n The pruning service periodically contacts computers that have published printers to verify that the printers are still available for use. If a computer does not respond to the contact message, the message is repeated for the specified number of times. If the computer still fails to respond, then the pruning service \"prunes\" (deletes from Active Directory) printer objects the computer has published.\r\n\r\n By default, the pruning service contacts computers every eight hours and allows two retries before deleting printers from Active Directory. You can use this setting to change the number of retries.\r\n\r\n If you enable this setting, you can change the interval between attempts.\r\n\r\n If you do not configure or disable this setting, the default values are used.\r\n\r\n Note: This setting is used only on domain controllers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-pruningretries"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_1","displayName":"Enabled","description":null,"helpText":null}]},"61b69d2bd39eaabf":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled","displayName":"Use User Experience Virtualization (UE-V)","description":"This policy setting allows you to enable or disable User Experience Virtualization (UE-V). Only applies to Windows 10 or earlier.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncenabled"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"61aa14106f15bde8":{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableinband802dot11","displayName":"Turn off ability to configure using WCN over In-band 802.11 WLAN","description":null,"helpText":"","infoUrls":[],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":[{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableinband802dot11_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableinband802dot11_1","displayName":"True","description":null,"helpText":null}]},"6125769e92a8ef83":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior","displayName":"Control SafeSites adult content filtering. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior_0","displayName":"Do not filter sites for adult content","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior_1","displayName":"Filter top level sites (but not embedded iframes) for adult content","description":null,"helpText":null}]},"61414321032eb67c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist","displayName":"Force disable spellcheck languages","description":"Force-disables spellcheck languages. Unrecognized languages in that list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be disabled for the languages specified. The user can still enable or disable spellcheck for languages not in the list.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the SpellcheckEnabled policy is set to false, this policy will have no effect.\r\n\r\nIf a language is included in both this policy and the SpellcheckLanguage policy, the latter is prioritized and the spellcheck language will be enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"617bb8388188396f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passworddismisscompromisedalertenabled","displayName":"Enable dismissing compromised password alerts for entered credentials","description":"Setting the policy to Enabled or leaving it unset gives the user the option to dismiss/restore compromised password alerts.\r\n\r\nIf you disable this setting, users will not be able to dismiss alerts about compromised passwords. If enabled, users will be able to dismiss alerts about compromised passwords.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passworddismisscompromisedalertenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passworddismisscompromisedalertenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"61d4e8086dc35a40":{"id":"device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors","displayName":"Prevent ignoring certificate errors","description":"This policy setting prevents the user from ignoring Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt browsing (such as \"expired\", \"revoked\", or \"name mismatch\" errors) in Internet Explorer.\n\nIf you enable this policy setting, the user cannot continue browsing.\n\nIf you disable or do not configure this policy setting, the user can choose to ignore certificate errors and continue browsing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableignoringcertificateerrors"],"categoryId":"3f6bb987-17dc-4442-a946-c1c5b1d089d7","categoryName":"Internet Control Panel","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_1","displayName":"Enabled","description":null,"helpText":null}]},"615fc8797b2a2142":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"61a92bf9191d3497":{"id":"device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps","displayName":"Allow Custom SSPs and APs to be loaded into LSASS","description":"This policy controls the configuration under which LSASS loads custom SSPs and APs.\n\nIf you enable this setting or do not configure it, LSA allows custom SSPs and APs to be loaded.\n\nIf you disable this setting, LSA does not load custom SSPs and APs.","helpText":"","infoUrls":[],"categoryId":"9dbd66e3-4544-4ca8-a118-272c874bc684","categoryName":"Local Security Authority","options":[{"id":"device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps_1","displayName":"Enabled","description":null,"helpText":null}]},"6144f0de1cc93447":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting","displayName":"Default JavaScript setting","description":"Set whether websites can run JavaScript. You can allow it for all sites (1) or block it for all sites (2).\r\n\r\nIf you don't configure this policy, all sites can run JavaScript by default, and the user can change this setting.\r\n\r\n* 1 = Allow all sites to run JavaScript\r\n\r\n* 2 = Don't allow any site to run JavaScript","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"61e3e63a6068f3bd":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc","displayName":"Allow pop-up windows on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"61e71f6246008c82":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_extensioninstallsourcesdesc","displayName":"URL patterns to allow extension, app, and user script installs from (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"61929420ac8c8990":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended","displayName":"Allow features to download assets from the Asset Delivery Service","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\r\nThese assets can be config files or Machine Learning models that power the features that use this service.\r\n\r\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\r\n\r\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6105eb08e9d94a8a":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_printpreviewstickysettings","displayName":"Configure the sticky print preview settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":null},"61a042202cc6ef43":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled","displayName":"Enable default legacy SameSite cookie behavior setting (obsolete)","description":"Lets you revert all cookies to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\r\n\r\nYou can set the following values for this policy:\r\n\r\n* 1 = Revert to legacy SameSite behavior for cookies on all sites\r\n\r\n* 2 = Use SameSite-by-default behavior for cookies on all sites\r\n\r\nIf you don't set this policy, the default behavior for cookies that don't specify a SameSite attribute will depend on other configuration sources for the SameSite-by-default feature. This feature might be set by a field trial or by enabling the same-site-by-default-cookies flag in edge://flags.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"61be0d0a18bdf95e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_outlookexe134","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_outlookexe134_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_outlookexe134_1","displayName":"True","description":null,"helpText":null}]},"611a2bcffa13cadf":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winwordexe133","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winwordexe133_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winwordexe133_1","displayName":"True","description":null,"helpText":null}]},"61136e47cbf7a524":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_pptviewexe32","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_pptviewexe32_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_pptviewexe32_1","displayName":"True","description":null,"helpText":null}]},"6147b20d3d50a4d2":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_grooveexe56","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_grooveexe56_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_grooveexe56_1","displayName":"True","description":null,"helpText":null}]},"61b0cd6dcdcb4429":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard","displayName":"Prompt users to move Windows known folders to OneDrive","description":"This setting displays the \"Your IT department wants you to protect your important folders\" window that prompts users to move their Documents, Pictures, and Desktop folders to OneDrive. This feature is not enabled for on-premises SharePoint.\r\n\r\nIf you enable this setting and provide your tenant ID, users who are syncing their OneDrive will see the \"Your IT department wants you to protect your important folders\" window when they're signed in. If they close the window, a reminder notification will appear in the activity center until they move all three known folders. If a user has already redirected their known folders to a different OneDrive account, they will be prompted to direct the folders to the account for your organization (leaving existing files behind).\r\n\r\nIf you disable or do not configure this setting, the \"Your IT department wants you to protect your important folders\" window won't appear automatically.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard_1","displayName":"Enabled","description":null,"helpText":null}]},"616ea6cfa42080b1":{"id":"device_vendor_msft_policy_config_privacy_enableactivityfeed","displayName":"Enable Activity Feed","description":"Enables ActivityFeed, which is responsible for mirroring different activity types (as applicable) across device graph of the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#enableactivityfeed"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_enableactivityfeed_0","displayName":"Disabled","description":"Disabled. Apps/OS can't publish the activities and roaming is disabled. (not published to the cloud).","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_enableactivityfeed_1","displayName":"Enabled","description":"Enabled. Apps/OS can publish the activities and will be roamed across device graph.","helpText":null}]},"61aaa7747a3d1372":{"id":"device_vendor_msft_policy_config_search_allowstoringimagesfromvisionsearch","displayName":"Allow Storing Images From Vision Search","description":"This policy has been deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowstoringimagesfromvisionsearch"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_allowstoringimagesfromvisionsearch_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowstoringimagesfromvisionsearch_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"61e399473cf4b657":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_excel","displayName":"Excel: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"611961e5daa41677":{"id":"device_vendor_msft_policy_config_update_setproxybehaviorforupdatedetection","displayName":"Set Proxy Behavior For Update Detection","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setproxybehaviorforupdatedetection"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setproxybehaviorforupdatedetection_0","displayName":"Only use system proxy for detecting updates (default)","description":"Only use system proxy for detecting updates (default)","helpText":null},{"id":"device_vendor_msft_policy_config_update_setproxybehaviorforupdatedetection_1","displayName":"Allow user proxy to be used as a fallback if detection using system proxy fails","description":"Allow user proxy to be used as a fallback if detection using system proxy fails","helpText":null}]},"61bc5ed6d93ebb50":{"id":"device_vendor_msft_policy_config_userrights_generatesecurityaudits","displayName":"Generate Security Audits","description":"This user right determines which accounts can be used by a process to add entries to the security log. The security log is used to trace unauthorized system access. Misuse of this user right can result in the generation of many auditing events, potentially hiding evidence of an attack or causing a denial of service. Shut down system immediately if unable to log security audits security policy setting is enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#generatesecurityaudits"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"61a1cd07933a7282":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_directconnectionmode","displayName":"Require direct connection","description":"Prevents hosts from allowing relay-based guests from joining their session. Live Share already supports the “Live Share: Connection Mode” setting, and so this policy is effectively just enforcing it to “direct”. If this policy is disabled, the host can allow relay-based guests to join their session if the host has not configured the “Live Share: Connection Mode” setting.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_directconnectionmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_directconnectionmode_1","displayName":"Enabled","description":null,"helpText":null}]},"61ba8a41ed86c95f":{"id":"device_vendor_msft_vpnconnection_connectionname","displayName":"Connection name","description":"This is a descriptive name for the VPN connection and will be displayed to end-users on their device.","helpText":"","infoUrls":[],"categoryId":"7f5517b0-3ff7-4f7e-aa4c-3d2ccbf37bdc","categoryName":"VPN Connection","options":null},"617aab4406a342df":{"id":"softwareupdate_deferrals_systemperiodindays","displayName":"System Period In Days","description":"Specifies the number of days to defer system or non-OS updates. When set, updates only appear after the specified delay, following the release of the update.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"6162307ce3294d16":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_pathcolon7","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"61da004074d1fa63":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_descriptioncolon81","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"61bf61df9199f87a":{"id":"user_vendor_msft_policy_config_admx_folderredirection_folderredirectionenablecacherename","displayName":"Enable optimized move of contents in Offline Files cache on Folder Redirection server path change (User)","description":"This policy setting controls whether the contents of redirected folders is copied from the old location to the new location or simply renamed in the Offline Files cache when a folder is redirected to a new location.\r\n\r\nIf you enable this policy setting, when the path to a redirected folder is changed from one network location to another and Folder Redirection is configured to move the content to the new location, instead of copying the content to the new location, the cached content is renamed in the local cache and not copied to the new location. To use this policy setting, you must move or restore the server content to the new network location using a method that preserves the state of the files, including their timestamps, before updating the Folder Redirection location.\r\n\r\nIf you disable or do not configure this policy setting, when the path to a redirected folder is changed and Folder Redirection is configured to move the content to the new location, Windows copies the contents of the local cache to the new network location, then deleted the content from the old network location.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-folderredirectionenablecacherename"],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_folderredirectionenablecacherename_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_folderredirectionenablecacherename_1","displayName":"Enabled","description":null,"helpText":null}]},"61c1db519610c1a5":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup","displayName":"OneNote 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft OneNote 2013.\r\nMicrosoft OneNote 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft OneNote 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft OneNote 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onenotebackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup_1","displayName":"Enabled","description":null,"helpText":null}]},"61c7fc0602f8a568":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangekeyboardnavigationindicators","displayName":"Remove UI to change keyboard navigation indicator setting (User)","description":"Disables the \"Hide keyboard navigation indicators until I use the ALT key\" option in Display in Control Panel.\r\n\r\nWhen this Display Properties option is selected, the underlining that indicates a keyboard shortcut character (hot key) does not appear on menus until you press ALT.\r\n\r\nEffects, such as transitory underlines, are designed to enhance the user's experience but might be confusing or distracting to some users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nochangekeyboardnavigationindicators"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangekeyboardnavigationindicators_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangekeyboardnavigationindicators_1","displayName":"Enabled","description":null,"helpText":null}]},"61993f207d7f0d56":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist","displayName":"Allow media autoplay on a allowlist of URL patterns (User)","description":"Setting the policy lets videos play automatically (without user consent) with audio content in Google Chrome. If AutoplayAllowed policy is set to True, then this policy has no effect. If AutoplayAllowed is set to False, then any URL patterns set in this policy can still play. If this policy changes while Google Chrome is running, it only applies to newly opened tabs.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"61a85d7c6df8dbb4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime_l_saveautorecoverinfoevery","displayName":"Save AutoRecover info every (minutes): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":null},"6105b8a215ca14d8":{"id":"user_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"61a20047f6503110":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"61dd52e96b1b4268":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols","displayName":"Download unsigned ActiveX controls (User)","description":"This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.\n\nIf you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.\n\nIf you disable this policy setting, users cannot run unsigned controls.\n\nIf you do not configure this policy setting, users cannot run unsigned controls.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedownloadunsignedactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"6162a39f64035dff":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"617fa2a9f5cc7809":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors","displayName":"Specify if online OCSP/CRL checks are required for local trust anchors (User)","description":"Control whether online revocation checks (OCSP/CRL checks) are required. If Microsoft Edge can't get revocation status information, these certificates are treated as revoked (\"hard-fail\").\r\n\r\nIf you enable this policy, Microsoft Edge always performs revocation checking for server certificates that successfully validate and are signed by locally-installed CA certificates.\r\n\r\nIf you don't configure or disable this policy, then Microsoft Edge uses the existing online revocation checking settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"6181e41544a59e65":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice","displayName":"Enable resolution of navigation errors using a web service (User)","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\r\n\r\nIf you enable this policy, a web service is used for network connectivity tests.\r\n\r\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\r\n\r\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_1","displayName":"Enabled","description":null,"helpText":null}]},"611c7d55ba63188f":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_1","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_3","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_4","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},"61e914e43884d947":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist","displayName":"Blocklist for extension install types (User)","description":"The blocklist controls which extension install types are disallowed.\r\n\r\nSetting the \"command_line\" will block an extension from being loaded from command line.\r\n\r\nPolicy options mapping:\r\n\r\n* command_line (command_line) = Blocks extensions from being loaded from command line\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\ncommand_line","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"61a75da6df79d947":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled","displayName":"Enable sidebar customize (User)","description":"Allow/Disallow to use sidebar customize.\r\n\r\nIf you enable or don't configure this policy, users will be able to access sidebar customize.\r\nIf you disable this policy, users will not be able to access the sidebar customize.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"61ac67dec785514f":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods (User)","description":"Allows you to set whether websites can check if the user has payment methods saved.\r\n\r\nIf you disable this policy, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\r\n\r\nIf you enable this policy or don't set this policy, websites can check if the user has payment methods saved.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"613f8f37b9e4f06d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasemaxtimeout_l_databasemaxtimeoutdecimal","displayName":"Database maximum timeout (milliseconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"952f69c8-2644-48df-976b-01fd624cbb3a","categoryName":"Database","options":null},"612036fefb2aacd6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy3_l_placesbarname213","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"6106d3718ec2b62f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicmorocco","displayName":"Arabic (Morocco) (User)","description":"Enables the editing language Arabic (Morocco)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicmorocco_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicmorocco_1","displayName":"Enabled","description":null,"helpText":null}]},"614813fbae10456d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcongodrc","displayName":"French (Congo (DRC)) (User)","description":"Enables the editing language French (Congo (DRC))","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcongodrc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcongodrc_1","displayName":"Enabled","description":null,"helpText":null}]},"61733ac773588a52":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernsweden","displayName":"Sami, Northern (Sweden) (User)","description":"Enables the editing language \"Sami, Northern (Sweden)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernsweden_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernsweden_1","displayName":"Enabled","description":null,"helpText":null}]},"613e30f511c4ee65":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa_l_empty417","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5b1be2c5-9939-4b2e-b29b-b22069455c90","categoryName":"Microsoft Save As PDF and XPS add-ins","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa_l_empty417_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa_l_empty417_1","displayName":"Encourage","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa_l_empty417_2","displayName":"Prevent","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa_l_empty417_3","displayName":"Enforce","description":null,"helpText":null}]},"61a2824bcab99a43":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_l_pathcolon294","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"61fa621aee9a26b5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc20_l_pathcolon314","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"61a05cec3c897410":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgroupbuildingblockspath_l_path2","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":null},"61dacdd2ddacae6b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_largepstsizetodisableaddingnewcontent","displayName":"Large PST: Size to disable adding new content (User)","description":"Specifies the size at which Outlook will no longer accept new content into an Outlook Data File.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_largepstsizetodisableaddingnewcontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_largepstsizetodisableaddingnewcontent_1","displayName":"Enabled","description":null,"helpText":null}]},"616a9e26f5bcb6a8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings","displayName":"AutoArchive Settings (User)","description":"If you enable this policy setting, the options specified in the AutoArchive dialog box are disabled.","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"610591b8d35f55fb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_savecopiesofmessagesinsentitemsfolder","displayName":"Save copies of messages in Sent Items folder (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_savecopiesofmessagesinsentitemsfolder_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_savecopiesofmessagesinsentitemsfolder_1","displayName":"True","description":null,"helpText":null}]},"612e1b95bfb72b0d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkmailimportlist","displayName":"Trigger to apply junk email list settings (User)","description":"This policy setting allows you to trigger the activation of other junk e-mail policy settings.\r\n\r\nIf you enable this policy setting, you will trigger the activation of other junk e-mail policy settings. For example, if you configure the \"Specify path to Safe Senders list\" policy setting, the specified Safe Senders list is not imported by Outlook unless you also enable the \"Junk Mail Import List\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, you will not trigger the activation of other junk e-mail policies.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkmailimportlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkmailimportlist_1","displayName":"Enabled","description":null,"helpText":null}]},"613dadba87e909f9":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_determinewhethertoforceencryptedppt","displayName":"Scan encrypted macros in PowerPoint Open XML presentations (User)","description":"This policy setting controls whether encrypted macros in Open XML presentations are required to be scanned with anti-virus software before being opened.\r\n\r\nIf you enable this policy setting, you may choose one of these options:\r\n\r\n- Scan encrypted macros: encrypted macros are disabled unless anti-virus software is installed. Encrypted macros are scanned by your anti-virus software when you attempt to open an encrypted presentation that contains macros.\r\n- Scan if anti-virus software available: if anti-virus software is installed, scan the encrypted macros first before allowing them to load. If anti-virus software is not available, allow encrypted macros to load.\r\n- Load macros without scanning: do not check for anti-virus software and allow macros to be loaded in an encrypted file.\r\n\r\nIf you disable or do not configure this policy setting, the behavior will be similar to the \"Scan encrypted macros\" option.","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_determinewhethertoforceencryptedppt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_determinewhethertoforceencryptedppt_1","displayName":"Enabled","description":null,"helpText":null}]},"613ee928f79fe738":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_outlinefiles_l_outlinefilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_outlinefiles_l_outlinefilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_outlinefiles_l_outlinefilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_outlinefiles_l_outlinefilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"61ea01900681d1c2":{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots","displayName":"[Deprecated] Set Maximum Storage Space For Recall Snapshots (User) (Windows Insiders only)","description":"This policy setting allows you to control the maximum amount of disk space that can be used by Windows to save snapshots for Recall. The default value of '0' will let the OS configure the amount of storage allocated to snapshots. When the default value of '0' is used, the OS configures the storage allocation for snapshots based on the device storage capacity. 25 GB is allocated when the device storage capacity is 256 GB. 75 GB is allocated when the device storage capacity is 512 GB. 150 GB is allocated when the device storage capacity is 1 TB or higher.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragespaceforrecallsnapshots"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_0","displayName":"Let the OS define the maximum storage amount based on hard drive storage size","description":"Let the OS define the maximum storage amount based on hard drive storage size","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_10000","displayName":"10GB","description":"10GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_25000","displayName":"25GB","description":"25GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_50000","displayName":"50GB","description":"50GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_75000","displayName":"75GB","description":"75GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_100000","displayName":"100GB","description":"100GB","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_150000","displayName":"150GB","description":"150GB","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/62.json b/public/intune-definitions/62.json new file mode 100644 index 000000000000..72fa73a15e9c --- /dev/null +++ b/public/intune-definitions/62.json @@ -0,0 +1 @@ +{"624ccc45cb81e2d0":{"id":"com.apple.carddav.account_carddavusessl","displayName":"Card DAV Use SSL","description":"If true, enables SSL.","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":[{"id":"com.apple.carddav.account_carddavusessl_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.carddav.account_carddavusessl_true","displayName":"True","description":null,"helpText":null}]},"6250178f074938af":{"id":"com.apple.directoryservice.managed_adpacketencrypt","displayName":"AD Packet Encrypt","description":"The packet encryption policy.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"62f67069d0f3d9f2":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew","displayName":"Weekend Curfew","description":"The weekend curfew settings.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"62980affc11f16cd":{"id":"com.apple.loginitems.managed_autolaunchedapplicationdictionary-managed_item_path","displayName":"Path","description":"The URL or path string to the item's location.","helpText":null,"infoUrls":[],"categoryId":"6efb8802-223a-46a7-b13f-a68f28f8b2c2","categoryName":"Login Items","options":null},"62f4452b0e904468":{"id":"com.apple.managedclient.preferences_applicationssystem","displayName":"Applications","description":null,"helpText":null,"infoUrls":["https://github.com/pbowden-msft/Payloads"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"62c0ef887e12db70":{"id":"com.apple.managedclient.preferences_headlessmodeenabled","displayName":"Control use of the Headless Mode","description":"This policy setting lets you decide whether users can launch Microsoft Edge in headless mode.\n\nIf you enable or don't configure this policy, Microsoft Edge allows use of the headless mode.\n\nIf you disable this policy, Microsoft Edge denies use of the headless mode.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#headlessmodeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_headlessmodeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_headlessmodeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"62ac42e2c27f1a2b":{"id":"com.apple.managedclient.preferences_typosquattingcheckerenabled","displayName":"Configure Edge Website Typo Protection","description":"This policy setting lets you configure whether to turn on Edge Website Typo Protection. Edge Website Typo Protection provides warning messages to help protect your users from potential typosquatting sites. By default, Edge Website Typo Protection is turned on.\n\nIf you enable this policy, Edge Website Typo Protection is turned on.\n\nIf you disable this policy, Edge Website Typo Protection is turned off.\n\nIf you don't configure this policy, Edge Website Typo Protection is turned on but users can choose whether to use Edge Website Typo Protection.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#typosquattingcheckerenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_typosquattingcheckerenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_typosquattingcheckerenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"62bd638065e8661e":{"id":"com.apple.mcxmenuextras_remotedesktop.menu","displayName":"Remote Desktop","description":"If true, enables the Remote Desktop menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_remotedesktop.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_remotedesktop.menu_true","displayName":"True","description":null,"helpText":null}]},"629bec71a57fa6ac":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowbackforwardcacheforcachecontrolnostorepageenabled","displayName":"Allow pages with Cache-Control: no-store header to enter back/forward cache","description":"This policy controls whether a page with Cache-Control: no-store header can be stored in back/forward cache. The website setting in this header may not expect the page to be restored from back/forward cache since some sensitive information could still be displayed after the restoration even if it's no longer accessible.\n\nIf you enable or don't configure this policy, the page with Cache-Control: no-store header is restored from back/forward cache unless the cache eviction is triggered (for example, when there's HTTP-only cookie change to the site).\n\nIf you disable this policy, the page with Cache-Control: no-store header isn't stored in back/forward cache.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowbackforwardcacheforcachecontrolnostorepageenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowbackforwardcacheforcachecontrolnostorepageenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"62f069831532bc37":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtclocalhostiphandling","displayName":"Restrict exposure of local IP address by WebRTC","description":"Allows you to set whether or not WebRTC exposes the user's local IP address.\n\nIf you set this policy to \"AllowAllInterfaces\" or \"AllowPublicAndPrivateInterfaces\", WebRTC exposes the local IP address.\n\nIf you set this policy to \"AllowPublicInterfaceOnly\" or \"DisableNonProxiedUdp\", WebRTC doesn't expose the local IP address.\n\nIf you don't set this policy, or if you disable it, WebRTC exposes the local IP address.\n\nNote that this policy doesn't provide an option to exclude specific domains.\n\nPolicy options mapping:\n\n* AllowAllInterfaces (default) = Allow all interfaces. This exposes the local IP address\n\n* AllowPublicAndPrivateInterfaces (default_public_and_private_interfaces) = Allow public and private interfaces over http default route. This exposes the local IP address\n\n* AllowPublicInterfaceOnly (default_public_interface_only) = Allow public interface over http default route. This doesn't expose the local IP address\n\n* DisableNonProxiedUdp (disable_non_proxied_udp) = Use TCP unless proxy server supports UDP. This doesn't expose the local IP address\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtclocalhostiphandling_allowallinterfaces","displayName":"Allow all interfaces. This exposes the local IP address","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtclocalhostiphandling_allowpublicandprivateinterfaces","displayName":"Allow public and private interfaces over http default route. This exposes the local IP address","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtclocalhostiphandling_allowpublicinterfaceonly","displayName":"Allow public interface over http default route. This doesn't expose the local IP address","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtclocalhostiphandling_disablenonproxiedudp","displayName":"Use TCP unless proxy server supports UDP. This doesn't expose the local IP address","description":null,"helpText":null}]},"6244b7ea89373153":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}","displayName":"ID","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"62af102fa5b77ac7":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport","displayName":"Configure Error Reporting","description":"This policy setting configures how errors are reported to Microsoft, and what information is sent when Windows Error Reporting is enabled.\r\n\r\nThis policy setting does not enable or disable Windows Error Reporting. To turn Windows Error Reporting on or off, see the Turn off Windows Error Reporting policy setting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings.\r\n\r\nImportant: If the Turn off Windows Error Reporting policy setting is not configured, then Control Panel settings for Windows Error Reporting override this policy setting.\r\n\r\nIf you enable this policy setting, the setting overrides any user changes made to Windows Error Reporting settings in Control Panel, and default values are applied for any Windows Error Reporting policy settings that are not configured (even if users have changed settings by using Control Panel). If you enable this policy setting, you can configure the following settings in the policy setting:\r\n\r\n- \"Do not display links to any Microsoft ‘More information’ websites\": Select this option if you do not want error dialog boxes to display links to Microsoft websites.\r\n\r\n- \"Do not collect additional files\": Select this option if you do not want additional files to be collected and included in error reports.\r\n\r\n- \"Do not collect additional computer data\": Select this if you do not want additional information about the computer to be collected and included in error reports.\r\n\r\n- \"Force queue mode for application errors\": Select this option if you do not want users to report errors. When this option is selected, errors are stored in a queue directory, and the next administrator to log on to the computer can send the error reports to Microsoft.\r\n\r\n- \"Corporate file path\": Type a UNC path to enable Corporate Error Reporting. All errors are stored at the specified location instead of being sent directly to Microsoft, and the next administrator to log onto the computer can send the error reports to Microsoft.\r\n\r\n- \"Replace instances of the word ‘Microsoft’ with\": You can specify text with which to customize your error report dialog boxes. The word \"Microsoft\" is replaced with the specified text.\r\n\r\nIf you do not configure this policy setting, users can change Windows Error Reporting settings in Control Panel. By default, these settings are Enable Reporting on computers that are running Windows XP, and Report to Queue on computers that are running Windows Server 2003.\r\n\r\nIf you disable this policy setting, configuration settings in the policy setting are left blank.\r\n\r\nSee related policy settings Display Error Notification (same folder as this policy setting), and Turn off Windows Error Reporting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-pch-configurereport"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_1","displayName":"Enabled","description":null,"helpText":null}]},"62de89b5f57f9471":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_allowedapplications","displayName":"Configure allowed applications","description":"\r\n Add additional applications that should be considered \"trusted\" by controlled folder access.\r\n\r\n These applications are allowed to modify or delete files in controlled folder access folders.\r\n\r\n Microsoft Defender Antivirus automatically determines which applications should be trusted. You can configure this setting to add additional applications.\r\n\r\n Enabled: \r\n Specify additional allowed applications in the Options section..\r\n\r\n Disabled:\r\n No additional applications will be added to the trusted list.\r\n\r\n Not configured:\r\n Same as Disabled.\r\n\r\n You can enable controlled folder access in the Configure controlled folder access GP setting.\r\n\r\n Default system folders are automatically guarded, but you can add folders in the configure protected folders GP setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-exploitguard-controlledfolderaccess-allowedapplications"],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_allowedapplications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_allowedapplications_1","displayName":"Enabled","description":null,"helpText":null}]},"627e97b27efc87ac":{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_1_wdiscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"18b972fd-74f2-4345-9449-087c80dd38a3","categoryName":"Windows Boot Performance Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_1_wdiscenarioexecutionpolicylevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_1_wdiscenarioexecutionpolicylevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"62c85ff46af92f88":{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_state_stateselect","displayName":"Select from the following states:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_state_stateselect_default","displayName":"Default State","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_state_stateselect_enabled","displayName":"Enabled State","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_state_stateselect_disabled","displayName":"Disabled State","description":null,"helpText":null}]},"628c616e1251c0b9":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_clustname_ts_sd_clustname","displayName":"Configure RD Connection Broker farm name:","description":null,"helpText":"","infoUrls":[],"categoryId":"0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","categoryName":"RD Connection Broker","options":null},"6280851668678a34":{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_home_path","displayName":"Path:","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":null},"6236265b0d0be331":{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_preventlibrarysharing","displayName":"Prevent Media Sharing","description":"This policy setting allows you to prevent media sharing from Windows Media Player.\r\n\r\nIf you enable this policy setting, any user on this computer is prevented from sharing digital media content from Windows Media Player with other computers and devices that are on the same network. Media sharing is disabled from Windows Media Player or from programs that depend on the Player's media sharing feature.\r\n\r\nIf you disable or do not configure this policy setting, anyone using Windows Media Player can turn media sharing on or off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventlibrarysharing"],"categoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","categoryName":"Windows Media Player","options":[{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_preventlibrarysharing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsmediaplayer_preventlibrarysharing_1","displayName":"Enabled","description":null,"helpText":null}]},"625ffa5ecacc008b":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_paint","displayName":"Paint","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_paint_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_paint_1","displayName":"True","description":null,"helpText":null}]},"62f9387c4de9ae5f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_proxysettings","displayName":"Proxy settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6252ffdc4183b2c7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended","displayName":"Enable saving passwords to the password manager","description":"Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.\r\n\r\nSetting the policy to Disabled means users can't save new passwords, but previously saved passwords will still work.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, the user can turn off password saving.","helpText":"","infoUrls":[],"categoryId":"6d6b289c-c1e9-4004-b5ab-3123920cf10d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"625971ece3b2b148":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback.: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6267fefec160e8cc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"626d87e162879ce6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver","displayName":"Address or URL of proxy server","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: 123.123.123.123:8080","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},"6277078debdaa767":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings","displayName":"Settings for enhanced autofill (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_0","displayName":"Allow enhanced autofill and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_1","displayName":"Allow enhanced autofill without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_2","displayName":"Do not allow enhanced autofill.","description":null,"helpText":null}]},"62ad21efd43b3138":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings","displayName":"Settings for AI-powered History Search (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_0","displayName":"Allow AI History Search and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_1","displayName":"Allow AI History Search without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_2","displayName":"Do not allow AI History Search.","description":null,"helpText":null}]},"627a7afa3c3ab1b3":{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids","displayName":"Allow installation of devices that match any of these device instance IDs","description":"This policy setting allows you to specify a list of Plug and Play device instance IDs for devices that Windows is allowed to install. This policy setting is intended to be used only when the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting is enabled, however it may also be used with the \"Prevent installation of devices not described by other policy settings\" policy setting for legacy policy definitions.\n\nWhen this policy setting is enabled together with the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting, Windows is allowed to install or update any device whose Plug and Play device instance ID appears in the list you create, unless another policy setting at the same or higher layer in the hierarchy specifically prevents that installation, such as the following policy settings:\n- Prevent installation of devices that match any of these device instance IDs\nIf the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting is not enabled with this policy setting, then any other policy settings specifically preventing installation will take precedence.\n\nNOTE: The \"Prevent installation of devices not described by other policy settings\" policy setting has been replaced by the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting for supported target Windows 10 versions. It is recommended that you use the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting when possible.\n\nAlternatively, if this policy setting is enabled together with the \"Prevent installation of devices not described by other policy settings\" policy setting, Windows is allowed to install or update any device whose Plug and Play device instance ID appears in the list you create, unless another policy setting specifically prevents that installation (for example, the \"Prevent installation of devices that match any of these device IDs\" policy setting, the \"Prevent installation of devices for these device classes\" policy setting, the \"Prevent installation of devices that match any of these device instance IDs\" policy setting, or the \"Prevent installation of removable devices\" policy setting).\n\nIf you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\n\nIf you disable or do not configure this policy setting, and no other policy setting describes the device, the \"Prevent installation of devices not described by other policy settings\" policy setting determines whether the device can be installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-allowinstallationofmatchingdeviceinstanceids"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_1","displayName":"Enabled","description":null,"helpText":null}]},"622163a85e60d3ac":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions","displayName":"Clean-up Invalid Sessions","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nCleans out registry keys in the HKEY_LOCAL_MACHINE hive that refer to a users SID.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Apps\\CleanupInvalidSessions\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","categoryName":"FSLogix","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions_1","displayName":"Enabled","description":null,"helpText":null}]},"6296f11780fb8f68":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer","displayName":"Access Network as Computer Object","description":"Attach as computer - folder must have permissions for computer objects.\r\n\r\nCAUTION: Do not use this configuration setting unless your storage provider or architecture will NOT work with user-level permissions to the VHD(x) container locations. This setting will allow the virtual machine to access all the VHD(x) files on the storage provider creating a potential security risk.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\AccessNetworkAsComputerObject\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer_1","displayName":"Enabled","description":null,"helpText":null}]},"6297bb5018c8a68e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep","displayName":"Number Session VHD(s) To Keep","description":"This setting is used when VHDAccessMode is set to '3'. This controls the number of session VHD(x) containers that are persisted. For example, if this is set to '2' and the user creates a 3rd session, a new session VHD(x) will be created and used and it will be deleted when the 3rd session ends. Th default value is 2 sessions which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\NumSessionVHDsToKeep\r\nType: DWORD\r\nValues: Min = 0, Max = 10","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_1","displayName":"Enabled","description":null,"helpText":null}]},"62cff1c3b35d3775":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804","displayName":"Launching applications and files in an IFRAME","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_1","displayName":"Prompt","description":null,"helpText":null}]},"62280d596b01e621":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"625c2f046f0d064d":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"62881e682b3a3e5a":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled","displayName":"Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 126.\r\n\r\nThis Policy is obsoleted because Picture Dictionary is deprecated from Edge as of Sept, 2023. This policy won't work in Microsoft Edge Version 127. Enables the Picture Dictionary feature within Immersive Reader in Microsoft Edge.\r\nThis feature helps in reading comprehension by letting a user to click on any single word and see an illustration related to the meaning.\r\n\r\nIf you enable this policy or don't configure it, the Picture Dictionary option shows up within Immersive Reader.\r\nIf you disable this policy, users can't access the Picture Dictionary feature within Immersive Reader.","helpText":"","infoUrls":[],"categoryId":"8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","categoryName":"Immersive Reader settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6298b01072130b6c":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled","displayName":"Enable Standardized Browser Zoom Behavior","description":"Configures whether the CSS \"zoom\" property follows the current CSS specification or legacy behavior.\r\n\r\nWhen this policy is enabled or not configured, the CSS \"zoom\" property follows the current specification defined by the CSS Working Group:\r\nhttps://drafts.csswg.org/css-viewport/#zoom-property\r\n\r\nWhen this policy is disabled, the CSS \"zoom\" property uses its legacy, pre-standardized behavior.\r\n\r\nThis policy is temporary and is intended to provide time for organizations to migrate web content to the updated behavior. In a future Microsoft Edge release, this policy will be removed and the standardized behavior will be enforced by default.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6208d422925cbfb0":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended","displayName":"Clear cached images and files when Microsoft Edge closes","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\r\n\r\nIf you enable this policy, cached images and files will be deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy, users cannot configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\r\n\r\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\r\n\r\nIf you disable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you configure both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"622a615ff11cad80":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended","displayName":"Default search provider URL for suggestions","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user has entered so far.\r\n\r\nThis policy is optional. If you don't configure it, users won't see search suggestions; they will see suggestions from their browsing history and favorites.\r\n\r\nBing's suggest URL can be specified as:\r\n\r\n'{bing:baseURL}qbox?query={searchTerms}'.\r\n\r\nGoogle's suggest URL can be specified as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: https://search.contoso.com/suggest?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"62fe07187f3f55cb":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_excelexe43","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_excelexe43_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_excelexe43_1","displayName":"True","description":null,"helpText":null}]},"626f5903ff1149d0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideenabledisableupdates","displayName":"Hide option to enable or disable updates","description":"This policy setting allows you to hide the user interface (UI) options to enable or disable Office automatic updates from users. These options are found in the Product Information area of all Office applications installed via Click-to-Run. This policy setting has no effect on Office applications installed via Windows Installer. \r\n\r\nIf you enable this policy setting, the Enable Update and Disable Updates options in the UI are hidden from users. \r\n\r\nIf you disable or do not configure this policy setting, the Enable Update and Disable Updates options are visible, and users can enable or disable Office automatic updates from the UI.","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideenabledisableupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideenabledisableupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"6227199ececa53c7":{"id":"device_vendor_msft_policy_config_office16v4~policy~l_microsoftofficemachine~l_licensingsettings_l_extendedofflinesubscription","displayName":"Allow extended offline use for Office 365 ProPlus","description":"This policy setting allows Office 365 ProPlus to remain activated for more than 31 days in locations without regular internet connectivity.\r\n\r\nUsually Office 365 ProPlus needs to contact the Office Licensing Service on the internet at least once every 31 days to verify the status of the Office 365 subscription and renew its license to remain activated. Otherwise, Office 365 ProPlus will go into reduced functionality mode.\r\n\r\nIMPORTANT: This policy setting requires special permission from Microsoft and additional configuration by Microsoft before you can start using it.\r\n\r\nIf you enable this policy setting, Office 365 ProPlus will receive a license that’s valid for more than 31 days. Your organization’s agreement with Microsoft to use this policy setting will determine how long the license is valid for.\r\n\r\nIf you disable or don’t configure this policy setting, Office 365 ProPlus will receive a license that’s valid for only 31 days.\r\n\r\nNote: This policy setting also applies to subscription versions of Project and Visio.\r\n ","helpText":"","infoUrls":[],"categoryId":"2e3f0407-6387-41b4-b6c2-ada4354be759","categoryName":"Licensing Settings","options":[{"id":"device_vendor_msft_policy_config_office16v4~policy~l_microsoftofficemachine~l_licensingsettings_l_extendedofflinesubscription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v4~policy~l_microsoftofficemachine~l_licensingsettings_l_extendedofflinesubscription_1","displayName":"Enabled","description":null,"helpText":null}]},"62160834b963c3f7":{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery","displayName":"Specify the system sleep timeout (on battery)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep.\n\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep.\n\nIf you disable or do not configure this policy setting, users control this setting.\n\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-standbytimeoutonbattery"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},"62289fc3ad5c70f9":{"id":"device_vendor_msft_policy_config_start_hidesleep","displayName":"Hide Sleep","description":"Enabling this policy hides \"Sleep\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidesleep"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidesleep_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidesleep_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"622678d2c649b528":{"id":"linux_mdatp_managed_antivirusengine_offlinedefinitionupdate","displayName":"Enable offline security intelligence update","description":"Determines whether offline security intelligence updates are enabled for antivirus.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--offlineDefinitionUpdate"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_offlinedefinitionupdate_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_offlinedefinitionupdate_enabled","displayName":"Enabled","description":null,"helpText":null}]},"62f652eb0399b6df":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_checkfordefinitionsupdate","displayName":"Schedule Signature Updates Before Running Scan","description":"This policy setting allows you to manage whether a check for new security intelligence definitions will occur before running a schedule scan. If you enable this setting, a check for new definitions will occur before running a scan. If you disable this setting or do not configure this setting, the scan will start using the existing definitions.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":[{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_checkfordefinitionsupdate_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_checkfordefinitionsupdate_true","displayName":"Enabled","description":null,"helpText":null}]},"62c4b21261c02ce2":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice","displayName":"Require Security Device (User)","description":"A Trusted Platform Module (TPM) provides additional security benefits over software because data stored within it cannot be used on other devices.\n\nIf you enable this policy setting, only devices with a usable TPM provision Windows Hello for Business.\n\nIf you disable or do not configure this policy setting, the TPM is still preferred, but all devices provision Windows Hello for Business using software if the TPM is non-functional or unavailable.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice_false","displayName":"false","description":"Disabled","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice_true","displayName":"true","description":"Enabled","helpText":null}]},"62a5af1c99ca2fff":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness","displayName":"Microsoft OneDrive for Business 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for OneDrive for Business 2013.\r\nBy default, the user settings of OneDrive for Business 2013 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2013 from synchronization between computers.\r\nIf you enable this policy setting, OneDrive for Business 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, OneDrive for Business 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onedriveforbusiness"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness_1","displayName":"Enabled","description":null,"helpText":null}]},"6203dde4cb6cc4c4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions (User)","description":"Setting the policy means users can't bypass download security decisions.\r\n\r\nThere are many types of download warnings within Chrome, which roughly break down into these categories (learn more about Safe Browsing verdicts https://support.google.com/chrome/?p=ib_download_blocked):\r\n\r\n* Malicious, as flagged by the Safe Browsing server\r\n* Uncommon or unwanted, as flagged by the Safe Browsing server\r\n* A dangerous file type (e.g. all SWF downloads and many EXE downloads)\r\n\r\nSetting the policy blocks different subsets of these, depending on it's value:\r\n\r\n0: No special restrictions. Default.\r\n\r\n1: Blocks malicious files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n2: Blocks malicious files flagged by the Safe Browsing server AND Blocks uncommon or unwanted files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n3: Blocks all downloads. Not recommended, except for special use cases.\r\n\r\n4: Blocks malicious files flagged by the Safe Browsing server, does not block dangerous file types. Recommended.\r\n\r\nNote: These restrictions apply to downloads triggered from webpage content, as well as the Download link... menu option. They don't apply to the download of the currently displayed page or to saving as PDF from the printing options. Read more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6232ee4cc905ce45":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":null},"6212b43f4a0bedb3":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallownetframeworkreliantcomponents"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"62f66871b05de435":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"62c5ec071a721a2a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs","displayName":"Allow file selection dialogs (User)","description":"Allow access to local files by letting Microsoft Edge display file selection dialogs.\r\n\r\nIf you enable or don't configure this policy, users can open file selection dialogs as normal.\r\n\r\nIf you disable this policy, whenever the user performs an action that triggers a file selection dialog (like importing favorites, uploading files, or saving links), a message is displayed instead, and the user is assumed to have clicked Cancel on the file selection dialog.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"62cfeefa00666ef7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action to take on startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"621a7caafd8f58bf":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_automaticdownloadsblockedforurlsdesc","displayName":"Block multiple automatic downloads in quick succession on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"62413f2bf48329a6":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended","displayName":"Configure auto discard sleeping tabs (User)","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab will need to be reloaded.\r\n\r\nIf the 'SleepingTabsEnabled' (Configure sleeping tabs) policy is enabled, then this feature will be enabled by default.\r\n\r\nIf the 'SleepingTabsEnabled' is disabled, then this feature will be disabled by default and cannot be enabled.\r\n\r\nIf enabled, idle background tabs will be discarded after 1.5 days.\r\n\r\nIf disabled, idle background tab will not be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"62f8db9582185639":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_0","displayName":"Allow users to manage all certificates","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_1","displayName":"Allow users to manage user certificates","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_2","displayName":"Disallow users from managing certificates","description":null,"helpText":null}]},"629d2ba327437504":{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled","displayName":"Allow SpeculationRules prefetch for ServiceWorker-controlled URLs (User)","description":"Controls whether SpeculationRules prefetch requests are allowed for\r\nServiceWorker-controlled URLs.\r\n\r\nStarting with Microsoft Edge version 138,\r\nprefetch requests to ServiceWorker-controlled URLs are allowed by default when\r\nthe PrefetchServiceWorker feature is enabled.\r\n\r\nIf this policy is enabled or not configured, that default behavior is used.\r\n\r\nTo restore the legacy behavior from versions prior to 138, where prefetch requests\r\nto ServiceWorker-controlled URLs were blocked, set this policy to disabled.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"62f8c2accac329eb":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_localnetworkallowedforurlsdesc","displayName":"Allow sites to make network requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"62aee9bc1ddeefa6":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled","displayName":"Enables background updates to the list of available templates for Collections and other features that use templates (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because we are moving to a new policy. It won't work in Microsoft Edge as soon as version 104. The new policy to use is 'EdgeAssetDeliveryServiceEnabled' (Allow features to download assets from the Asset Delivery Service).\r\n\r\nLets you enable or disable background updates to the list of available templates for Collections and other features that use templates. Templates are used to extract rich metadata from a webpage when the page is saved to a collection.\r\n\r\nIf you enable this setting or the setting is unconfigured, the list of available templates will be downloaded in the background from a Microsoft service every 24 hours.\r\n\r\nIf you disable this setting the list of available templates will be downloaded on demand. This type of download might result in small performance penalties for Collections and other features.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6292def40dbb70c0":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"62ba870d2bf9a70e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withalinkandanattachment_l_withalinkandanattachment359","displayName":"With a link and an attachment (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":null},"626c83b16bd6dae4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_automaticdiscovery","displayName":"Automatic Discovery (User)","description":"Enables/Disables the Automatic Discovery feature.","helpText":"","infoUrls":[],"categoryId":"13123148-c522-437f-b316-d78f5cc0d28d","categoryName":"Shared Workspace","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_automaticdiscovery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_automaticdiscovery_1","displayName":"Enabled","description":null,"helpText":null}]},"62317d910f06c692":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmonaco","displayName":"French (Monaco) (User)","description":"Enables the editing language French (Monaco)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmonaco_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmonaco_1","displayName":"Enabled","description":null,"helpText":null}]},"6206faa5c73ff974":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanswitzerland","displayName":"German (Switzerland) (User)","description":"Enables the editing language German (Switzerland)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanswitzerland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanswitzerland_1","displayName":"Enabled","description":null,"helpText":null}]},"6212ebe4c62e6bf4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedoffice972003_l_encryptiontypecolon318","displayName":"Encryption type: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"623585e19dafd6a6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey01","displayName":"Escrow Key #1 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey01_1","displayName":"Enabled","description":null,"helpText":null}]},"62bbc47e5384c0fd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey01_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"62cf8c754f4002a6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_journalfolderhomepage","displayName":"Journal Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Journal Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_journalfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_journalfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"62c62bfd80ff0500":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitforthenumberof","displayName":"Change the limit for the number of nested embedded messages (User)","description":"By default, the limit is 50 embedded messages when an e-mail message is converted from MIME to MAPI. The number can be set to any positive integer. This helps prevent scenarios in which Outlook hangs while attempting conversion.","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitforthenumberof_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitforthenumberof_1","displayName":"Enabled","description":null,"helpText":null}]},"621c06aae7ea991f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disablewindowsfriendlylogonmailquery","displayName":"Do not show unread message count on Windows Welcome screen (User)","description":"By default, Windows queries Outlook for the unread message count for users and displays the result on the Windows Welcome screen. By enabling this setting, you can change this behavior so that Windows does not provide this feature on the Welcome screen.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disablewindowsfriendlylogonmailquery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disablewindowsfriendlylogonmailquery_1","displayName":"Enabled","description":null,"helpText":null}]},"62157799d59de714":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_l_oomaddressaccess_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_l_oomaddressaccess_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_l_oomaddressaccess_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_l_oomaddressaccess_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_l_oomaddressaccess_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"62f3bad08f87b3d3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_logsharepointsyncrequestsandresponses","displayName":"Log SharePoint sync requests and responses (User)","description":"This policy setting allows you to control whether sync requests and responses between Outlook and SharePoint are logged. Log files can help diagnose problems with Outlook and SharePoint interactions. Each log file links to one or more XML files (also in the TEMP directory) containing detailed server response and error information. The XML filename is based on the corresponding log file; you can obtain all related diagnostic files by copying all *-wss-*.* files from the TEMP directory.\r\n\r\nIf you enable this policy setting, Outlook logs most sync requests and responses to a log file stored in the user's TEMP directory. One log file is created per session (up to seven total), using the naming convention: 0-wss-sync-log.HTM, 1-wss-sync-log.HTM, etc. \r\n\r\nIf you disable or do not configure this policy setting, sync requests and responses between Outlook and SharePoint are not logged.","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_logsharepointsyncrequestsandresponses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_logsharepointsyncrequestsandresponses_1","displayName":"Enabled","description":null,"helpText":null}]},"6283da2ff2a27aa6":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_allowselectionfloaties","displayName":"Show Mini Toolbar on selection (User)","description":"Disabling this policy setting will result in Mini Toolbar not being displayed on text selection. By default, Mini Toolbar on selection is enabled and its visibility can be changed via a setting in the PowerPoint Options dialog box.","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_allowselectionfloaties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_allowselectionfloaties_1","displayName":"Enabled","description":null,"helpText":null}]},"62e6e126d2c51325":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_smarttags","displayName":"Actions (User)","description":"Shows additional actions if you hover over them in the drawing.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_smarttags_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_smarttags_1","displayName":"Enabled","description":null,"helpText":null}]},"623574321c3d1787":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize97_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"12f9c95a-3ff1-49ef-bc8e-8d2b5ef4b06e","categoryName":"Customizable Error Messages","options":null},"6239be143839b57a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_personaltemplatespath","displayName":"Personal templates path for Word (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"62df8459494a279e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewsetlanguage_l_detectlanguageautomatically","displayName":"Detect language automatically (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"d79c9f9a-f469-4f39-a66a-6f7d5ee77e81","categoryName":"Language | Set Proofing Language...","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewsetlanguage_l_detectlanguageautomatically_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewsetlanguage_l_detectlanguageautomatically_1","displayName":"Enabled","description":null,"helpText":null}]},"62a2f47794f79d50":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_capitalizefirstletterofsentence","displayName":"Capitalize first letter of sentence (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e95db55a-8337-416d-a61f-e60f55cc0d13","categoryName":"AutoCorrect","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_capitalizefirstletterofsentence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_capitalizefirstletterofsentence_1","displayName":"Enabled","description":null,"helpText":null}]},"623a521fecdb7c4f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments","displayName":"Set maximum number of trusted documents (User)","description":"This policy setting allows you to specify the maximum number of trust records for trusted documents that can be stored in the registry before the purge task runs. The purge task reduces the number of trusted documents stored in the registry to the value set by the \"Set maximum number of trust records to preserve\" policy setting.\r\n\r\nIf you enable this policy setting, you can specify the maximum number of trusted documents to be stored in the registry before the purge task runs, with an upper limit of 20,000 documents. For performance reasons, we do not recommend setting this policy setting to the upper limit.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 500 is used for the maximum number of trusted documents that can be stored in the registry before the purge task runs.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"62999651afcfe964":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_defaultoutboundaction","displayName":"Default Outbound Action","description":"This value is the action that the Hyper-V Firewall does by default (and evaluates at the very end) on outbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 0 [Allow].","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_defaultoutboundaction_0","displayName":"Allow Outbound By Default","description":"Allow Outbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_defaultoutboundaction_1","displayName":"Block Outbound By Default","description":"Block Outbound By Default","helpText":null}]},"62666dd2fc7b33f6":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_defaultoutboundaction","displayName":"Default Outbound Action","description":"This value is the action that the Hyper-V Firewall does by default (and evaluates at the very end) on outbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 0 [Allow].","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_defaultoutboundaction_0","displayName":"Allow Outbound By Default","description":"Allow Outbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_defaultoutboundaction_1","displayName":"Block Outbound By Default","description":"Block Outbound By Default","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/63.json b/public/intune-definitions/63.json new file mode 100644 index 000000000000..1c3576807ad2 --- /dev/null +++ b/public/intune-definitions/63.json @@ -0,0 +1 @@ +{"6322f905ba37375b":{"id":"com.apple.dnssettings.managed_ondemandrules_item_action","displayName":"Action","description":"The action to take if this dictionary matches the current network.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":[{"id":"com.apple.dnssettings.managed_ondemandrules_item_action_0","displayName":"Connect","description":null,"helpText":null},{"id":"com.apple.dnssettings.managed_ondemandrules_item_action_1","displayName":"Disconnect","description":null,"helpText":null},{"id":"com.apple.dnssettings.managed_ondemandrules_item_action_2","displayName":"Evaluate Connection","description":null,"helpText":null}]},"63a9554b6fcdb55d":{"id":"com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domains","displayName":"Domains (Deprecated)","description":"The domains for which this evaluation applies.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"6318a4140eeeb956":{"id":"com.apple.extensiblesso_extensiondata_requireuserpresence_kerberos","displayName":"Require User Presence","description":"If true, requires the user to provide Touch ID, Face ID or their passcode to access the keychain entry.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_requireuserpresence_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_requireuserpresence_kerberos_true","displayName":"True","description":null,"helpText":null}]},"6326e80423832023":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"63085f7f124ba144":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_lcid","displayName":"Microsoft Defender ATP LCID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"63873ce889c7f992":{"id":"com.apple.managedclient.preferences_edgeopenexternallinkswithprimaryworkprofileenabled","displayName":"Use Primary Work Profile as default to open external links","description":"This policy controls whether Microsoft Edge uses the Primary Work Profile as the default profile when opening external links.\n1. On Windows, the Primary Work Profile refers to the profile signed in with the Entra ID account used to enroll the device.\n2. On macOS and Linux, the Primary Work Profile is the only profile signed in with an Entra ID account. If multiple profiles are signed in with Entra ID accounts, the Primary Work Profile setting doesn't apply.\n\nPolicy behavior:\n1. If enabled or not configured, Microsoft Edge uses the Primary Work Profile as the default for opening external links.\n2. If disabled, the last used profile becomes the default for opening external links.\n\nNote: This policy doesn't override the following scenarios:\n1. If the EdgeDefaultProfileEnabled policy is set, it takes precedence over this policy.\n2. External links opened from Outlook or Microsoft Teams may be configured to launch in a specific profile, which can override the Primary Work Profile setting.\n3. If the user sets a preference for \"Default profile for external links\" in Profile preferences, that setting takes effect.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeopenexternallinkswithprimaryworkprofileenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeopenexternallinkswithprimaryworkprofileenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeopenexternallinkswithprimaryworkprofileenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6339e8ad6bb3cc82":{"id":"com.apple.managedclient.preferences_enablenewoutlook","displayName":"Enable New Outlook","description":"Specify whether users should be allowed to switch between Classic and New Outlook.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#enable-new-outlook"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_enablenewoutlook_0","displayName":"Classic Outlook only","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablenewoutlook_1","displayName":"Default to Classic Outlook. Users may switch to New Outlook","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablenewoutlook_2","displayName":"Default to New Outlook. Users may revert to Classic Outlook","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablenewoutlook_3","displayName":"New Outlook only","description":null,"helpText":null}]},"63f75bc429e17c8e":{"id":"com.apple.profileremovalpassword_com.apple.profileremovalpassword","displayName":"Top Level Setting Group Collection","description":"com.apple.profileRemovalPassword","helpText":null,"infoUrls":[],"categoryId":"e905d6cf-7820-48d4-86e0-b55fa991a5ad","categoryName":"Profile Removal Password","options":null},"635b0999ce1ddeee":{"id":"com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability","displayName":"Control where developer tools can be used","description":"Controls whether users can access developer tools in Microsoft Edge.\n\nIf you set this policy to 'DeveloperToolsDisallowedForForceInstalledExtensions' (default), users can access developer tools and the JavaScript console, except in the context of extensions installed by enterprise policy.\n\nIf you set this policy to 'DeveloperToolsAllowed', users can access developer tools and the JavaScript console in all contexts, including extensions installed by enterprise policy.\n\nIf you set this policy to 'DeveloperToolsDisallowed', users cannot access developer tools or inspect website elements. Keyboard shortcuts, menu options, and context menu entries that open developer tools or the JavaScript console are disabled.\n\nAs of version 99, this policy also controls access to the 'View page source' feature. If you set this policy to 'DeveloperToolsDisallowed', users cannot view page source through keyboard shortcuts or the context menu. To fully block source viewing, add 'view-source:*' to the \"URLBlocklist\" policy.\n\nAs of version 119, this policy also controls whether developer mode for Isolated Web Apps can be enabled.\n\nAs of version 128, this policy does not control developer mode on the extensions page if the \"ExtensionDeveloperModeSettings\" policy is configured.\n\nDeveloper tools availability is determined in the following order of precedence:\n\n1. If a URL matches a pattern in \"DeveloperToolsAvailabilityAllowlist\", developer tools are allowed.\n2. If the allowlist is configured and the blocklist is not, URLs not on the allowlist are blocked.\n3. If a URL matches a pattern in \"DeveloperToolsAvailabilityBlocklist\", developer tools are blocked.\n4. If a URL is not covered by either list, this policy (\"DeveloperToolsAvailability\") applies.\n\nPolicy options mapping:\n\n* DeveloperToolsDisallowedForForceInstalledExtensions (0) = Block the developer tools on extensions installed by enterprise policy, allow in other contexts\n\n* DeveloperToolsAllowed (1) = Allow using the developer tools\n\n* DeveloperToolsDisallowed (2) = Don't allow using the developer tools\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability_developertoolsdisallowedforforceinstalledextensions","displayName":"Block the developer tools on extensions installed by enterprise policy, allow in other contexts","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability_developertoolsallowed","displayName":"Allow using the developer tools","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability_developertoolsdisallowed","displayName":"Don't allow using the developer tools","description":null,"helpText":null}]},"63d88c91bd965ae9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileallowed","displayName":"Allow launching of local files in Internet Explorer mode","description":"This policy controls the availability of the --ie-mode-file-url command line argument used to launch Microsoft Edge with a local file specified on the command line into Internet Explorer mode.\n\nThis setting works in conjunction with \"InternetExplorerIntegrationLevel\" (which is set to 'IEMode').\n\nIf this policy is set to \"true\", or don't configure it, the user is allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\n\nIf this policy is set to \"false\", the user isn't allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\n\nFor more information about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"63d373e5a3905aa4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (Obsolete)","description":"Cookies set for domains match specified patterns revert to legacy SameSite behavior.\n\nReverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute, and skips the scheme comparison when evaluating if two sites are same-site.\n\nIf you don't set this policy, the global default value is used. The global default is also used for cookies on domains not covered by the patterns you specify.\n\nThe global default value can be configured using the \"LegacySameSiteCookieBehaviorEnabled\" policy. If \"LegacySameSiteCookieBehaviorEnabled\" is unset, the global default value falls back to other configuration sources.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nPatterns you list in this policy are treated as domains, not URLs, so you shouldn't specify a scheme or port.\n\nThe policy is discontinued from Edge 132.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"6343e175a0fe1407":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sendintranettointernetexplorer","displayName":"Send all intranet sites to Internet Explorer","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sendintranettointernetexplorer_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sendintranettointernetexplorer_true","displayName":"Enabled","description":null,"helpText":null}]},"63644d986a7859d6":{"id":"device_vendor_msft_policy_config_admx_logon_run_2","displayName":"Run these programs at user logon","description":"This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system.\r\n\r\nIf you enable this policy setting, you can specify which programs can run at the time the user logs on to this computer that has this policy applied.\r\n\r\nTo specify values for this policy setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file.\r\n\r\nIf you disable or do not configure this policy setting, the user will have to start the appropriate programs after logon.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting.\r\n\r\nAlso, see the \"Do not process the legacy run list\" and the \"Do not process the run once list\" settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-run-2"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_run_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_run_2_1","displayName":"Enabled","description":null,"helpText":null}]},"63cb00624404040d":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_errormessagetext","displayName":"Display the following message to users who are denied access:","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":null},"637b9acdd00b00b4":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsterminal","displayName":"Windows Terminal","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsterminal_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsterminal_1","displayName":"True","description":null,"helpText":null}]},"63a633bce0b40e4d":{"id":"device_vendor_msft_policy_config_appvirtualization_allowstreamingautoload_steaming_autoload_options","displayName":"Autoload Options","description":"","helpText":"","infoUrls":[],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowstreamingautoload_steaming_autoload_options_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowstreamingautoload_steaming_autoload_options_1","displayName":"Previously Used","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowstreamingautoload_steaming_autoload_options_2","displayName":"All","description":null,"helpText":null}]},"63c29a15fe0a9aa5":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_publishing_server4_name_prompt","displayName":"Publishing Server Display Name","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"63be2501c689e8e4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended","displayName":"Enable alternate error pages","description":"Setting the policy to True means Google Chrome uses alternate error pages built into (such as \"page not found\"). Setting the policy to False means Google Chrome never uses alternate error pages.\r\n\r\nIf you set the policy, users can't change it. If not set, the policy is on, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"63a012fbdbe16492":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_defaultprinterselection","displayName":"Default printer selection rules (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"6353bfa04c838ce7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed","displayName":"Allow Chrome for Testing","description":"Controls whether users may use Chrome for Testing.\r\n\r\nIf this policy is set to Enabled or not set, users may install and run Chrome for Testing.\r\n\r\nIf this policy is set to Disabled, users are not allowed to run Chrome for Testing. Users will still be able to install Chrome for Testing, however it will not run with the profiles where this policy is set to Disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"63923def8acfba14":{"id":"device_vendor_msft_policy_config_defender_allowarchivescanning","displayName":"Allow Archive Scanning","description":"Allows or disallows scanning of archives.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowarchivescanning_0","displayName":"Not allowed. Turns off scanning on archived files.","description":"Not allowed. Turns off scanning on archived files.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowarchivescanning_1","displayName":"Allowed. Scans the archive files.","description":"Allowed. Scans the archive files.","helpText":null}]},"63e5917a325c41c3":{"id":"device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem","displayName":"[Deprecated] Allow Intrusion Prevention System","description":"Allows or disallows Windows Defender Intrusion Prevention functionality. This setting is deprecated and no longer has impact on devices.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"632b74a2bd08d614":{"id":"device_vendor_msft_policy_config_display_enableperprocessdpi","displayName":"Enable Per Process Dpi","description":"Enable or disable Per-Process System DPI for all applications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#enableperprocessdpi"],"categoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","categoryName":"Display","options":[{"id":"device_vendor_msft_policy_config_display_enableperprocessdpi_0","displayName":"Disabled","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_display_enableperprocessdpi_1","displayName":"Enabled","description":"Enable.","helpText":null}]},"638fa7c98f9a9216":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezonejavapermissions"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"6316a179ae460b24":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"6331ef45b9cdbaa6":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus","displayName":"Accounts Enable Administrator Account Status","description":"This security setting determines whether the local Administrator account is enabled or disabled. Notes If you try to reenable the Administrator account after it has been disabled, and if the current Administrator password does not meet the password requirements, you cannot reenable the account. In this case, an alternative member of the Administrators group must reset the password on the Administrator account. For information about how to reset a password, see To reset a password. Disabling the Administrator account can become a maintenance issue under certain circumstances. Under Safe Mode boot, the disabled Administrator account will only be enabled if the machine is non-domain joined and there are no other local active administrator accounts. If the computer is domain joined the disabled administrator will not be enabled. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_enableadministratoraccountstatus"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_0","displayName":"Disable","description":"Disable","helpText":null}]},"63facae50ebe1422":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation","displayName":"User Account Control Switch To The Secure Desktop When Prompting For Elevation","description":"User Account Control: Switch to the secure desktop when prompting for elevation This policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop. The options are: • Enabled: (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users. • Disabled: All elevation requests go to the interactive user's desktop. Prompt behavior policy settings for administrators and standard users are used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"63d635eb3c1971ba":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled","displayName":"Enable printing","description":"Enables printing in Microsoft Edge and prevents users from changing this setting.\r\n\r\nIf you enable this policy or don't configure it, users can print.\r\n\r\nIf you disable this policy, users can't print from Microsoft Edge. Printing is disabled in the wrench menu, extensions, JavaScript applications, and so on. Users can still print from plug-ins that bypass Microsoft Edge while printing. For example, certain Adobe Flash applications have the print option in their context menu, which isn't covered by this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"63c82d33cbd77678":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended","displayName":"Configure the automatic profile switching site list","description":"Set this policy to control which profiles Microsoft Edge will use to open sites in. Switching configurations for sites listed in this policy take precedence over other heuristics Microsoft Edge uses for switching sites but note that sites not listed on this policy are still subject to switching by those heuristics. If this policy is not configured, Microsoft Edge will continue using its heuristics to automatically switch sites.\r\n\r\nThis policy maps a URL hostname to a profile that it should be opened in.\r\n\r\nThe 'site' field should take the form of a URL hostname.\r\n\r\nThe 'profile' field can take one of the following values:\r\n- 'Work': The most recently used Microsoft Entra signed-in profile will be used to open 'site'.\r\n- 'Personal': The most recently used MSA signed-in profile will be used to open 'site'.\r\n- 'No preference': The currently used profile will be used to open 'site'.\r\n- Wildcard email address: This takes the form of '*@contoso.com'. A profile whose username ends with the contents following the '*' will be used to open 'site'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"site\": \"work.com\",\r\n \"profile\": \"Work\"\r\n },\r\n {\r\n \"site\": \"personal.com\",\r\n \"profile\": \"Personal\"\r\n },\r\n {\r\n \"site\": \"nopreference.com\",\r\n \"profile\": \"No preference\"\r\n },\r\n {\r\n \"site\": \"contoso.com\",\r\n \"profile\": \"*@contoso.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"04b46099-4ee5-4def-8e04-569c988057a9","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"63343a49596ace11":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability","description":"Control if Manifest v2 extensions can be used by browser.\r\n\r\nManifest v2 extensions support will be deprecated and all extensions need to be migrated to v3 in the future. More information about, and the timeline of the migration has not been established.\r\n\r\nIf the policy is set to Default or not set, v2 extension loading is decided by browser. This will follow the preceding timeline when it's established.\r\n\r\nIf the policy is set to Disable, v2 extensions installation are blocked, and existing ones are disabled. This option is going to be treated the same as if the policy is unset after v2 support is turned off by default.\r\n\r\nIf the policy is set to Enable, v2 extensions are allowed. The option is going to be treated the same as if the policy isn't set before v2 support is turned off by default.\r\n\r\nIf the policy is set to EnableForForcedExtensions, force installed v2 extensions are allowed. This includes extensions that are listed by 'ExtensionInstallForcelist' (Control which extensions are installed silently) or 'ExtensionSettings' (Configure extension management settings) with installation_mode \"force_installed\" or \"normal_installed\". All other v2 extensions are disabled. The option is always available regardless of the manifest migration state.\r\n\r\nExtensions availabilities are still controlled by other policies.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default browser behavior\r\n\r\n* Disable (1) = Manifest v2 is disabled\r\n\r\n* Enable (2) = Manifest v2 is enabled\r\n\r\n* EnableForForcedExtensions (3) = Manifest v2 is enabled for forced extensions only\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_1","displayName":"Enabled","description":null,"helpText":null}]},"63e1e5c14199953a":{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled","displayName":"Allow pages to use the built-in AI APIs.","description":"Use this policy to control whether websites can access the built-in AI APIs, including the LanguageModel API, Summarization API, Writer API, and Rewriter API.\r\n\r\nEnable this policy to allow pages to use the APIs. If you don’t configure this policy, the APIs are still allowed.\r\n\r\nDisable this policy to block access to the APIs. The APIs will return an error when used.\r\n\r\nFor more information, see https://github.com/webmachinelearning/writing-assistance-apis/blob/main/README.md.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6361ab27d17ca9f2":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_applicationguardcontainerproxy","displayName":"Application Guard Container Proxy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":null},"6359fce76c8935cb":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended","displayName":"Enable preload of the new tab page for faster rendering","description":"If you configure this policy, preloading the New tab page is enabled, and users can't change this setting. If you don't configure this policy, preloading is enabled and a user can change this setting.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"63f5b69e9c7b5f57":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls","displayName":"Allow access to sensors on specific sites","description":"Define a list of sites, based on URL patterns, that can access and use sensors such as motion and light sensors.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSensorsSetting' (Default sensors setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SensorsBlockedForUrls' (Block access to sensors on specific sites) policy (if there is a match), the 'DefaultSensorsSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SensorsBlockedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"63b6bd710748d79d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_outlookexe78","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_outlookexe78_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_outlookexe78_1","displayName":"True","description":null,"helpText":null}]},"63c8b152641f4003":{"id":"device_vendor_msft_policy_config_update_engagedrestartdeadlineforfeatureupdates","displayName":"Engaged Restart Deadline For Feature Updates","description":"For Feature Updates, this policy specifies the deadline in days before automatically scheduling and executing a pending restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to automatically executed, within the specified period. Value type is integer. Default is 14. Supported value range: 2 - 30. If no deadline is specified or deadline is set to 0, the restart will not be automatically executed and will remain Engaged restart (e. g. pending user scheduling). If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestartdeadlineforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"63b313c8635d7572":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_telemetryoptin","displayName":"Enable the Visual Studio Customer Experience Improvement Program","description":"This policy enables Visual Studio telemetry to be sent to Microsoft as part of the Visual Studio Customer Experience Improvement Program. For more information, see: aka.ms/vs/admx/telemetry","helpText":"","infoUrls":[],"categoryId":"96277512-3d35-4876-ad74-2d849348799e","categoryName":"Privacy Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_telemetryoptin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_telemetryoptin_1","displayName":"Enabled","description":null,"helpText":null}]},"63c47cc277a57360":{"id":"device_vendor_msft_wifi_profile_{ssid}_wificost","displayName":"Metered connection limit","description":"If the policy is active selecting one of the values from the following list will set the cost of WLAN connection for the Wi-Fi profile. (1:Unrestricted - unlimited connection, 2: Fixed - capacity constraints up to a certain data limit, 3: Variable - costed on per byte basic) Default behaviour: Unrestricted","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"categoryId":"c4e48b1b-6d88-434f-a717-d5bab28eb245","categoryName":"Wi-Fi Connection","options":null},"63a72c526efda297":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_clearcacheonclosepolicy","displayName":"Clear cache on close (User)","description":"This policy setting allows you to force the cache to be cleared for databases that are not compatible with Access 2016 when the database is closed.\r\n\r\nIf you enable this policy setting, then any cached Microsoft SharePoint or Business Data Catalog (BDC) links will be cleared on close for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when enabled.\r\n\r\nIf you disable or do not configure this policy setting, then any cached Microsoft SharePoint or Business Data Catalog (BDC) links will be not cleared on close for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when disabled or not configured.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_clearcacheonclosepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_clearcacheonclosepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"632b61fceea81a63":{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcolorblue","displayName":"Blue (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"632e663751dc78ec":{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcolorgreen","displayName":"Green (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"6349e861bcdbf7db":{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1_allowableuserlocaletaglist","displayName":"User Locales (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":null},"63a4d6f12def6296":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup","displayName":"OneNote 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft OneNote 2016.\r\nMicrosoft OneNote 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft OneNote 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft OneNote 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onenotebackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup_1","displayName":"Enabled","description":null,"helpText":null}]},"6332afffea05585c":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2013","displayName":"Microsoft Office 365 Excel 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Excel 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Excel 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365excel2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2013_1","displayName":"Enabled","description":null,"helpText":null}]},"637005663c00ba39":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_cloudmanagementenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"636f91078dd3d422":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols","displayName":"Allow legacy TLS/DTLS downgrade in WebRTC (User)","description":"If enabled, WebRTC peer connections can downgrade to obsolete\r\nversions of the TLS/DTLS (DTLS 1.0, TLS 1.0 and TLS 1.1) protocols.\r\nWhen this policy is disabled or not set, these TLS/DTLS versions are\r\ndisabled.\r\n\r\nThis policy is temporary and will be removed in a future version\r\nof Google Chrome.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},"63f96e9565bef454":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin","displayName":"Minimum TLS version to fallback to (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_1","displayName":"Enabled","description":null,"helpText":null}]},"63095d88e790299c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains","displayName":"Allow local file access to file:// URLs on these sites in the PDF Viewer (User)","description":"Setting this policy allows the domains listed to access file:// URLs in the PDF Viewer.\r\nAdding to the policy allows the domain to access file:// URLs in the PDF Viewer.\r\nRemoving from the policy disallows the domain from accessing file:// URLs in the PDF Viewer.\r\nLeaving the policy unset disallows all domains from accessing file:// URLs in the PDF Viewer.\r\n\r\nExample value:\r\n\r\nexample.com\r\ngoogle.com","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_1","displayName":"Enabled","description":null,"helpText":null}]},"6367ba0cdccbf559":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_viewmacrosmacros","displayName":"View tab | Macros | Macros (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_viewmacrosmacros_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_viewmacrosmacros_1","displayName":"True","description":null,"helpText":null}]},"63c60d6196cf7a79":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_chartreftrackingenabled","displayName":"Allow formatting and labels to track data points (User)","description":"This policy setting governs how custom formatting and data labels react to data changes in a chart.\r\n\r\nIf you enable or do not configure this policy setting, when the user creates a new workbook, custom formatting and data labels follow data points as they move or change in any chart in the workbook.\r\n\r\nIf you disable this policy setting, custom formatting and data labels do not follow data points, but instead follow data point indices.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_chartreftrackingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_chartreftrackingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"636185d346be9040":{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist","displayName":"Use Policy List of Internet Explorer 7 sites (User)","description":"This policy setting allows you to add specific sites that must be viewed in Internet Explorer 7 Compatibility View.\n\nIf you enable this policy setting, the user can add and remove sites from the list, but the user cannot remove the entries that you specify.\n\nIf you disable or do not configure this policy setting, the user can add and remove sites from the list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetexplorer7policylist"],"categoryId":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","categoryName":"Compatibility View","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_1","displayName":"Enabled","description":null,"helpText":null}]},"634de23244d5bd5a":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter","displayName":"Turn on Cross-Site Scripting Filter (User)","description":"This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.\n\nIf you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.\n\nIf you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenablecrosssitescriptingfilter"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_1","displayName":"Enabled","description":null,"helpText":null}]},"63a0130569129fb3":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"63bac732dad9fe1d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis","displayName":"Disable support for 3D graphics APIs (User)","description":"Prevent web pages from accessing the graphics processing unit (GPU). Specifically, web pages can't access the WebGL API and plug-ins can't use the Pepper 3D API.\r\n\r\nIf you don't configure or disable this policy, it potentially allows web pages to use the WebGL API and plug-ins to use the Pepper 3D API. Microsoft Edge might, by default, still require command line arguments to be passed in order to use these APIs.\r\n\r\nIf 'HardwareAccelerationModeEnabled' (Use hardware acceleration when available) policy is set to false, the setting for 'Disable3DAPIs' policy is ignored - it's the equivalent of setting 'Disable3DAPIs' policy to true.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_1","displayName":"Enabled","description":null,"helpText":null}]},"63d8ee96b4aa2ce1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_extensionsettings","displayName":"Configure extension management settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"637378bcbc39abff":{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled","displayName":"Control Javascript setTimeout() function minimum timeout (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWhen the policy is set to Enabled, the Javascript setTimeout() with a timeout of 0ms will no longer be fixed to 1ms to schedule timer-based callbacks.\r\nWhen the policy is set to Disabled, the Javascript setTimeout() with a timeout of 0ms will be fixed to 1ms to schedule timer-based callbacks.\r\nWhen the policy is unset, use the browser's default behavior for setTimeout() function.\r\n\r\nThis is a web standards compliancy feature, but it may change task ordering on a web page, leading to unexpected behavior on sites that are dependent on a certain ordering.\r\nIt also may affect sites with a lot of setTimeout()s with a timeout of 0ms usage. For example, increasing CPU load.\r\n\r\nFor users where this policy is unset, Microsoft Edge Stable will roll out the change gradually on the stable channel.\r\n\r\nThis is a temporary policy that is planned to be removed in Microsoft Edge Stable 105.\r\nThis deadline may be extended if there is a need for enterprises.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"633982a6da6a1f52":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup","displayName":"Allow the Search bar at Windows startup (User)","description":"Allows the Search bar to start running at Windows startup.\r\n\r\nIf you enable:\r\n The Search bar will start running at Windows startup by default.\r\n If the Search bar is disabled via 'SearchbarAllowed' (Enable the Search bar) policy, this policy will not start the Search bar on Windows startup.\r\n\r\nIf you disable this policy:\r\n The Search bar will not start at Windows startup for all profiles.\r\n The option to start the search bar at Windows startup will be disabled and toggled off in search bar settings.\r\n\r\nIf you don't configure the policy:\r\n The Search bar will not start at Windows startup for all profiles.\r\n The option to start the search bar at Windows startup will be toggled off in search bar settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"63dc8e7816fad355":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration","displayName":"Delete old browser data on migration (User)","description":"This policy determines whether user browsing data from Microsoft Edge Legacy will be deleted after migrating to the Microsoft Edge version 81 or later.\r\n\r\nIf you set this policy to \"Enabled\", all browsing data from Microsoft Edge Legacy after migrating to the Microsoft Edge version 81 or later will be deleted. This policy must be set before migrating to the Microsoft Edge version 81 or later to have any effect on existing browsing data.\r\n\r\nIf you set this policy to \"Disabled\", or the policy is not configured, user browsing data isn't deleted after migrating to the Microsoft Edge version 83 or later.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration_1","displayName":"Enabled","description":null,"helpText":null}]},"638ecc86153fbc71":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_printertypedenylistdesc","displayName":"Disable printer types on the deny list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"63f8da15314ac13c":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings","displayName":"Print preview sticky settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_0","displayName":"Enable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_1","displayName":"Disable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_2","displayName":"Disable sticky settings for PDF","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_3","displayName":"Disable sticky settings for Webpages","description":null,"helpText":null}]},"63c40fcf9dc88ace":{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences","displayName":"Allow the use of additional optional connected experiences in Office (User)","description":"This policy setting allows you to control whether additional optional connected experiences are available to your users when they’re using Office.\r\n\r\nAdditional optional connected experiences are offered by Microsoft directly to your users and are governed by terms other than your organization’s commercial agreement with Microsoft.\r\n\r\nInserting an online video into a PowerPoint presentation or the 3D Maps feature in Excel, which uses Bing, are examples of additional optional connected experiences.\r\n\r\nNote: Even if you choose to make these additional optional connected experiences available to your users, your users will have the option to turn these additional optional connected experiences off as a group by going to File > Account > Account Privacy > Manage Settings.\r\n\r\nIf you enable this policy setting, additional optional connected experiences will be available to your users.\r\n\r\nIf you disable this policy setting, additional optional connected experiences won’t be available to your users.\r\n\r\nNote: Some additional optional connected experiences may be controlled by other policy settings instead of this policy setting. For more information, see the link below.\r\n\r\nIf you don’t configure this policy setting, additional optional connected experiences will be available to your users.\r\n\r\nNote: If you disable the “Allow the use of connected experiences in Office” policy setting, additional optional connected experiences won’t be available to your users.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2085690\r\n\r\nNote: For information about how this policy setting affects Microsoft 365 Copilot, see https://go.microsoft.com/fwlink/p/?linkid=2248196.","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences_1","displayName":"Enabled","description":null,"helpText":null}]},"634bfffa6aa7325c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishhonduras","displayName":"Spanish (Honduras) (User)","description":"Enables the editing language Spanish (Honduras)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishhonduras_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishhonduras_1","displayName":"Enabled","description":null,"helpText":null}]},"633e744b83d37aec":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_disableinformationrightsmanagementuserinterface","displayName":"Turn off Information Rights Management user interface (User)","description":"This policy setting controls Information Rights Management (IRM).\r\n\r\nIf you enable this policy setting, IRM will be turned off for users.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to use IRM.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_disableinformationrightsmanagementuserinterface_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_disableinformationrightsmanagementuserinterface_1","displayName":"Enabled","description":null,"helpText":null}]},"63abf53748e63bda":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_updatereliabilitypolicy","displayName":"Automatically receive small updates to improve reliability (User)","description":"This policy setting controls whether Microsoft Office Diagnostics is enabled. Office Diagnostics enables Microsoft to diagnose system problems by periodically downloading a small file to the computer. \r\n\r\nIf you enable this policy setting, Office Diagnostics collects information about specific errors and the IP address of the computer. Office Diagnostics does not transmit any personally identifiable information to Microsoft other than the IP address of the computer requesting the update. \r\n\r\nIf you disable this policy setting, users will not receive updates from Office Diagnostics. \r\n\r\nIf you do not configure this policy setting, this policy setting is not enabled, but users have the opportunity to opt into receiving updates from Office Diagnostics the first time they run an Office 2016 application.","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_updatereliabilitypolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_updatereliabilitypolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"63724f2edce1e137":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_ignorewordswithnumbers","displayName":"Ignore words with numbers (User)","description":"Allows users to ignore words with numbers.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_ignorewordswithnumbers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_ignorewordswithnumbers_1","displayName":"Enabled","description":null,"helpText":null}]},"6317d3c058b02c45":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_showpasteoptionsbuttons","displayName":"Show Paste Options buttons (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_showpasteoptionsbuttons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_showpasteoptionsbuttons_1","displayName":"Enabled","description":null,"helpText":null}]},"63200d37b3d705ee":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitrecipients_l_empty73","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":null},"6394175617dfa392":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_recurrenceoptions_l_defaultrecurrenceduration_l_defaultrecurrencedurationspinid","displayName":"End recurrence after x days (User)","description":"","helpText":"","infoUrls":[],"categoryId":"826db7fb-889b-4a99-80a6-38347ba37f21","categoryName":"Recurring item configuration","options":null},"63ffdeeb57c3732c":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjedittototalspread","displayName":"Edits to total actual cost will be spread to the status date (User)","description":"Distributes the changes to total actual cost evenly across the schedule to the status date (or to the current date if you have not specified a project status date).\r\n\r\nIf you enable this setting, Project will distribute edits to actual cost evenly across a task up to the status date.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjedittototalspread_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjedittototalspread_1","displayName":"Enabled","description":null,"helpText":null}]},"634781b52f84d904":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchresults_l_searchresults11","displayName":"Search results (User)","description":"","helpText":"","infoUrls":[],"categoryId":"98cefd27-a980-4070-ba45-3696b623810d","categoryName":"Shape Search","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchresults_l_searchresults11_0","displayName":"Alphabetically","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchresults_l_searchresults11_1","displayName":"By Group","description":null,"helpText":null}]},"6305e3bb75b87282":{"id":"vendor_msft_sharedpc_enableaccountmanager","displayName":"Enable Account Manager","description":"Enable the account manager for shared PC mode. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_enableaccountmanager_false","displayName":"false","description":"False","helpText":null},{"id":"vendor_msft_sharedpc_enableaccountmanager_true","displayName":"true","description":"True","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/64.json b/public/intune-definitions/64.json new file mode 100644 index 000000000000..5b82011af4a6 --- /dev/null +++ b/public/intune-definitions/64.json @@ -0,0 +1 @@ +{"6443d9080bd9fe52":{"id":"ade_setupassistant_passcode","displayName":"Passcode","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_passcode_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_passcode_1","displayName":"Show","description":null,"helpText":null}]},"645ab0a1c86bd9ca":{"id":"com.apple.managedclient.preferences_performancedetectorenabled","displayName":"Performance Detector Enabled","description":"The performance detector detects tab performance issues and recommends actions to fix the performance issues.\n\nIf you enable or don't configure this policy, performance detector is turned on.\n\nIf you disable this policy, performance detector is turned off.\n\nThe user can configure its behavior in edge://settings/system.\n\nLearn more about performance detector: https://aka.ms/EdgePerformanceDetector","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#performancedetectorenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_performancedetectorenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_performancedetectorenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6446359bc1084085":{"id":"com.apple.system-extension-policy_nonremovablesystemextensions_generickey_keytobereplaced","displayName":"Non Removable System Extensions","description":"A dictionary of system extensions on the computer. The dictionary maps the team identifiers (keys) to arrays of bundle identifiers, where the bundle identifier defines the system extension which cannot be disabled or uninstalled when SIP is enabled. It's an error for the same mapping to appear in the dictionary values corresponding to 'RemovableSystemExtensions' and 'NonRemovableSystemExtensions' keys.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"64991350c67550c4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_recommended","displayName":"Configure the Microsoft Edge new tab page experience (Obsolete) (users can override)","description":"This policy is obsolete because the new version of the enterprise new tab page no longer requires choosing between different content types. Instead, the content that's presented to the user can be controlled via the Microsoft 365 admin center. To get to the Microsoft 365 admin center, sign in at https://admin.microsoft.com with your admin account.\n\nLets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\n\nIf you set this policy to 'News', users see the Microsoft News feed experience on the new tab page.\n\nIf you set this policy to 'Office', users with an Azure Active Directory browser sign-in see the Office 365 feed experience on the new tab page.\n\nIf you disable or don't configure this policy, users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, and the standard new tab page feed experience. Users without an Azure Active Directory browser sign-in to see the standard new tab page experience.\n\nIf you enable this policy *and* the \"NewTabPageLocation\" policy, \"NewTabPageLocation\" has precedence.\n\nPolicy options mapping:\n\n* News (0) = Microsoft News feed experience\n\n* Office (1) = Office 365 feed experience\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_recommended_news","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_recommended_office","displayName":"Office 365 feed experience","description":null,"helpText":null}]},"640e8dd28b62a7cc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (Deprecated)","description":"This policy provides a way to override the list of sets Microsoft Edge uses for Related Website Sets\n\nEach set in the browser's list of Related Website Sets must meet the requirements of a Related Website Set. A Related Website Set must contain a primary site and one or more member sites.\nA set can also contain a list of service sites that it owns, and a map from a site to all its ccTLD variants. For more information on how Microsoft Edge uses Related Website Sets, see https://github.com/WICG/first-party-sets.\n\n\nAll sites in a Related Website Set must be a registrable domain served over HTTPS. Each site in a Related Website Set must also be unique, which means a site can't be listed more than once in a Related Website Set.\n\nWhen this policy is given an empty dictionary, Microsoft Edge uses the public list of Related Website Sets.\n\nFor all sites in a Related Website Set from the replacements list, if a site is also present on a Related Website Set in the browser's list, then that site will be removed from the browser's Related Website Set. After this step, the policy's Related Website Set is added to the Microsoft Edge's list of Related Website Sets.\n\nFor all sites in a Related Website Set from the additions list, if a site is also present on a Related Website Set in Microsoft Edge's list, then the browser's Related Website Set is updated so that the new Related Website Set can be added to the browser's list. After the browser's list has been updated, the policy's Related Website Set is added to the browser's list of Related Website Sets.\n\nThe browser's list of Related Website Sets requires that for all sites in its list, no site is in\nmore than one set. This requirement is also required for both the replacements list\nand the additions list. Similarly, a site can't be in both the\nreplacements list and the additions list.\n\nWildcards (*) aren't supported as a policy value, or as a value within any Related Website Set in these lists.\n\nThis policy is deprecated as of Microsoft Edge version 144 with the deprecation of Related Website Sets.","helpText":null,"infoUrls":[],"categoryId":"6d529e48-5477-4ceb-8ff7-c6e959a0e24f","categoryName":"Related Website Sets Settings","options":null},"64d9d0736c3a0f5f":{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_storagecapacitystopdeletion","displayName":"Storage Capacity Stop Deletion","description":"Stop deleting profiles when available storage capacity is brought up to this threshold, given as percent of total storage available for profiles.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/AccountManagement-csp/"],"categoryId":"3b384fc5-5906-4dc4-bc48-a52b52fb054b","categoryName":"Account Management","options":null},"64cde00985596c02":{"id":"device_vendor_msft_defender_configuration_disableftpparsing","displayName":"Disable Ftp Parsing","description":"This setting disables FTP Parsing for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disableftpparsing_1","displayName":"FTP parsing is disabled","description":"FTP parsing is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disableftpparsing_0","displayName":"FTP parsing is enabled","description":"FTP parsing is enabled","helpText":null}]},"64cd794bcd6e93ff":{"id":"device_vendor_msft_policy_config_admx_globalization_localesystemrestrict","displayName":"Restrict system locales","description":"This policy setting restricts the permitted system locales to the specified list. If the list is empty, it locks the system locale to its current value. This policy setting does not change the existing system locale; however, the next time that an administrator attempts to change the computer's system locale, they will be restricted to the specified list.\r\n\r\nThe locale list is specified using language names, separated by a semicolon (;). For example, en-US is English (United States). Specifying \"en-US;en-CA\" would restrict the system locale to English (United States) and English (Canada).\r\n\r\nIf you enable this policy setting, administrators can select a system locale only from the specified system locale list.\r\n\r\nIf you disable or do not configure this policy setting, administrators can select any system locale shipped with the operating system.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-localesystemrestrict"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_localesystemrestrict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_localesystemrestrict_1","displayName":"Enabled","description":null,"helpText":null}]},"6451429721c4ce1b":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_2","displayName":"Synchronize all offline files before logging off","description":"Determines whether offline files are fully synchronized when users log off.\r\n\r\nThis setting also disables the \"Synchronize all offline files before logging off\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, offline files are fully synchronized. Full synchronization ensures that offline files are complete and current.\r\n\r\nIf you disable this setting, the system only performs a quick synchronization. Quick synchronization ensures that files are complete, but does not ensure that they are current.\r\n\r\nIf you do not configure this setting, the system performs a quick synchronization by default, but users can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To change the synchronization method without changing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the \"Synchronize all offline files before logging off\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatlogoff-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_2_1","displayName":"Enabled","description":null,"helpText":null}]},"64647e757d06566e":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_pv","displayName":"Qualitative service type","description":"Specifies an alternate link layer (Layer-2) priority value for packets with the Qualitative service type (ServiceTypeQualitative). The Packet Scheduler inserts the corresponding priority value in the Layer-2 header of the packets.\r\n\r\nIf you enable this setting, you can change the default priority value associated with the Qualitative service type.\r\n\r\nIf you disable this setting, the system uses the default priority value of 0.\r\n\r\nImportant: If the Layer-2 priority value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypequalitative-pv"],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_pv_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_pv_1","displayName":"Enabled","description":null,"helpText":null}]},"6428a11ba8eb5114":{"id":"device_vendor_msft_policy_config_admx_startmenu_nosettaskbar","displayName":"Prevent changes to Taskbar and Start Menu Settings","description":"This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.\n\nIf you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.\n\nIf the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.\n\nIf you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosettaskbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_nosettaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_nosettaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"648d841bcc2944c8":{"id":"device_vendor_msft_policy_config_admx_startmenu_nouninstallfromstart","displayName":"Prevent users from uninstalling applications from Start","description":"If you enable this setting, users cannot uninstall apps from Start.\n\nIf you disable this setting or do not configure it, users can access the uninstall command from Start","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nouninstallfromstart"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_nouninstallfromstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_nouninstallfromstart_1","displayName":"Enabled","description":null,"helpText":null}]},"641324e039819430":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled","displayName":"Ping the settings storage location before sync","description":"This policy setting allows you to configure the User Experience Virtualization (UE-V) sync provider to ping the settings storage path before attempting to sync settings. If the ping is successful then the sync provider attempts to synchronize the settings packages. If the ping is unsuccessful then the sync provider doesn’t attempt the synchronization. \r\nIf you enable this policy setting, the sync provider pings the settings storage location before synchronizing settings packages.\r\nIf you disable this policy setting, the sync provider doesn’t ping the settings storage location before synchronizing settings packages. \r\nIf you do not configure this policy, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncproviderpingenabled"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"641aa8a042cfd43b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled","displayName":"Disable saving browser history","description":"Setting the policy to Enabled means browsing history is not saved, tab syncing is off and users can't change this setting.\r\n\r\nSetting the policy to Disabled or leaving it unset saves browsing history.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"648a74e607640a70":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting","displayName":"Enable deprecated privet printing","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting_1","displayName":"Enabled","description":null,"helpText":null}]},"64e9a75f420c59d2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability","displayName":"Control availability of extensions unpublished on the Chrome Web Store. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability_0","displayName":"Allow unpublished extensions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability_1","displayName":"Disable unpublished extensions","description":null,"helpText":null}]},"64329e66f0de40bc":{"id":"device_vendor_msft_policy_config_defender_controlledfolderaccessallowedapplications","displayName":"Controlled Folder Access Allowed Applications","description":"The previous name was GuardedFoldersAllowedApplications and changed to ControlledFolderAccessAllowedApplications. This policy setting allows user-specified applications to the controlled folder access feature. Adding an allowed application means the controlled folder access feature will allow the application to modify or delete content in certain folders such as My Documents. In most cases it will not be necessary to add entries. Windows Defender Antivirus will automatically detect and dynamically add applications that are friendly. Value type is string. Use the | as the substring separator.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#controlledfolderaccessallowedapplications"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"64c327feb703105b":{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork","displayName":"Allow Option To Show Network","description":"When the Network folder is restricted, give the user the option to enumerate and navigate into it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#allowoptiontoshownetwork"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_0","displayName":"Not Allowed.","description":"Not Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"64e539c8629bdbd6":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles","displayName":"Allow loading of XAML files","description":"This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation.\n\nIf you enable this policy setting and set the drop-down box to Enable, XAML files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XAML files.\n\nIf you disable this policy setting, XAML files are not loaded inside Internet Explorer. The user cannot change this behavior.\n\nIf you do not configure this policy setting, the user can decide whether to load XAML files inside Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowloadingofxamlfiles"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"6435c117444711a4":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"64b9d5bd550ee6fe":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled","displayName":"Enable AutoFill for payment instruments","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. This includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for payment instruments.\r\n\r\nIf you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won't save any payment instrument information that users submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"64d41a7cd1733bb2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines","displayName":"Manage Search Engines","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine.\r\nYou do not need to specify the encoding. Starting in Microsoft Edge 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge 80.\r\n\r\nStarting in Microsoft Edge 83, you can enable search engine discovery with the allow_search_engine_discovery optional parameter. This parameter must be the first item in the list. If allow_search_engine_discovery is not specified, search engine discovery will be disabled by default.\r\n\r\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\r\n\r\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\r\n\r\nIf the 'DefaultSearchProviderSearchURL' (Default search provider search URL) policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allow_search_engine_discovery\": true\r\n }, \r\n {\r\n \"is_default\": true, \r\n \"suggest_url\": \"https://www.example1.com/qbox?query={searchTerms}\", \r\n \"search_url\": \"https://www.example1.com/search?q={searchTerms}\", \r\n \"name\": \"Example1\", \r\n \"keyword\": \"example1.com\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example2.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example2.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example2\", \r\n \"keyword\": \"example2.com\", \r\n \"image_search_post_params\": \"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}\", \r\n \"search_url\": \"https://www.example2.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example3.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example3.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example3\", \r\n \"keyword\": \"example3.com\", \r\n \"encoding\": \"UTF-8\", \r\n \"search_url\": \"https://www.example3.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"search_url\": \"https://www.example4.com/search?q={searchTerms}\", \r\n \"name\": \"Example4\", \r\n \"keyword\": \"example4.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_1","displayName":"Enabled","description":null,"helpText":null}]},"6450b4b926b09e42":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"644bb6fb988af96d":{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled","displayName":"Allows users to translate videos to different languages.","description":"This policy configures the on-device real-time video translation feature in Microsoft Edge.\r\nWith this feature, users can watch videos translated into their selected language in real time.\r\n\r\nWhen a user selects the Translate icon and chooses a source (video language) and target language (translated language),\r\ntranslation components are downloaded on first use (approximately 200 MB per language pair).\r\n\r\nThese components may be updated periodically to improve performance and translation quality.\r\nTranslation is performed locally on the user’s device and no data is sent outside of the device.\r\nThe feature is available only for non-DRM videos, on supported high-end devices, with select language pairs, and in select regions.\r\nFor more details, see https://www.microsoft.com/en-us/edge/features/real-time-video-translation.\r\n\r\nIf you enable or don’t configure this policy, the on-device real-time video translation feature is enabled and\r\nusers will see the Translate button when hovering over videos.\r\n\r\nIf you disable this policy, the on-device real-time video translation feature is disabled and the Translate button won’t be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"643cc747d9ef4230":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled","displayName":"Allow notifications to set Microsoft Edge as default PDF reader","description":"This policy setting lets you decide whether employees should receive recommendations to set Microsoft Edge as PDF handler.\r\n\r\nIf you enable or don't configure this setting, employees receive recommendations from Microsoft Edge to set itself as the default PDF handler.\r\n\r\nIf you disable this setting, employees will not receive any notifications from Microsoft Edge to set itself as the default PDF handler.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6438d904d5bcce9c":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed","displayName":"Allow sites configured for Internet Explorer mode to open in Microsoft Edge","description":"This policy lets sites configured to open in Internet Explorer mode to be opened by Microsoft Edge for testing on a modern browser without removing them from the site list.\r\n\r\nUsers can configure this setting in the \"More tools\" menu by selecting 'Open sites in Microsoft Edge'.\r\n\r\nIf you enable this policy, the option to 'Open sites in Microsoft Edge' will be visible under \"More tools\". Users use this option to test IE mode sites on a modern browser.\r\n\r\nIf you disable or don't configure this policy, users can't see the option 'Open in Microsoft Edge' under the \"More tools\" menu. However, users can access this menu option with the --ie-mode-test flag.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"64936fd32d8cbbb5":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_forcedenytheseapps","displayName":"Let Apps Access Background Spatial Perception Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the user's movements while the apps are running in the background. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessbackgroundspatialperception_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"648a91ae9e7e0a53":{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning","displayName":"[Deprecated] Schedule Imminent Restart Warning","description":"Allows the IT Admin to specify the period for auto-restart imminent warning notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#update-scheduleimminentrestartwarning"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"64612de443fb8b61":{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging","displayName":"Turn on PowerShell Script Block Logging","description":"\n This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log. If you enable this policy setting,\n Windows PowerShell will log the processing of commands, script blocks, functions, and scripts - whether invoked interactively, or through automation.\n \n If you disable this policy setting, logging of PowerShell script input is disabled.\n \n If you enable the Script Block Invocation Logging, PowerShell additionally logs events when invocation of a command, script block, function, or script\n starts or stops. Enabling Invocation Logging generates a high volume of event logs.\n \n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowspowershell#windowspowershell-turnonpowershellscriptblocklogging"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_1","displayName":"Enabled","description":null,"helpText":null}]},"64a8ff9fbdcb3e2a":{"id":"diskmanagement_diskmanagement","displayName":"com.apple.configuration.diskmanagement.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"83febe72-a64f-4051-9071-1efae1ea9a15","categoryName":"Disk Management","options":null},"64642347b1169d63":{"id":"intelligencesettings_apps_safari","displayName":"Safari","description":"If present, configures Safari intelligence features.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":null},"6497c4349a36304f":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_lowpriorityscheduledscan","displayName":"Run with low CPU priority","description":"This policy setting allows you to enable or disable low CPU priority for scheduled scans. If you enable this setting, low CPU priority will be used during scheduled scans. If you disable or do not configure this setting, not changes will be made to CPU priority for scheduled scans.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":[{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_lowpriorityscheduledscan_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_lowpriorityscheduledscan_true","displayName":"Enabled","description":null,"helpText":null}]},"64683496b592741c":{"id":"linux_mdatp_managed_networkprotection_enforcementlevel","displayName":"Enforcement Level","description":"Specifies if network protection is disabled, in audit mode, or enforced","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection-linux?view=o365-worldwide"],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"linux_mdatp_managed_networkprotection_enforcementlevel_0","displayName":"disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_networkprotection_enforcementlevel_1","displayName":"audit","description":null,"helpText":null},{"id":"linux_mdatp_managed_networkprotection_enforcementlevel_2","displayName":"block","description":null,"helpText":null}]},"6495ac22cf7cd01d":{"id":"linux_platformupdatecontrols_version","displayName":"Platform Update Version","description":"Specifies the update channel for platform updates. 'N' is the latest version, 'N-1' is the previous version, 'N-2' is two versions back. Select 'Fixed' to pin to a specific version number.","helpText":null,"infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":[{"id":"linux_platformupdatecontrols_version_n","displayName":"N","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_version_n1","displayName":"N-1","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_version_n2","displayName":"N-2","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_version_fixed","displayName":"Fixed","description":null,"helpText":null}]},"6456bb717f356382":{"id":"settings_item_timezone_timezone","displayName":"Time Zone","description":"The Internet Assigned Numbers Authority (IANA) time zone database name.\n\nIf the `forceAutomaticDateAndTime` restriction is set in `Restrictions`, this setting fails with an error. Otherwise, setting this value disables automatic time zone logic. The user is still be able to change the time zone; for example, by turning automatic date and time back on. The intention is to allow setting the time zone when automatic determination isn't be available, such as when Location Services are off.","helpText":null,"infoUrls":[],"categoryId":"2c156b7e-99c8-4a21-a828-4f9b94479b0d","categoryName":"Time Zone","options":null},"649bc151f5496793":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments","displayName":"Set maximum number of trusted documents (User)","description":"This policy setting allows you to specify the maximum number of trust records for trusted documents that can be stored in the registry before the purge task runs. The purge task reduces the number of trusted documents stored in the registry to the value set by the \"Set maximum number of trust records to preserve\" policy setting.\r\n\r\nIf you enable this policy setting, you can specify the maximum number of trusted documents to be stored in the registry before the purge task runs, with an upper limit of 20,000 documents. For performance reasons, we do not recommend setting this policy setting to the upper limit.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 500 is used for the maximum number of trusted documents that can be stored in the registry before the purge task runs.","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"64e7da289bdddedd":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders14","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders14_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders14_1","displayName":"True","description":null,"helpText":null}]},"64997e2ab409d5bc":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_1","displayName":"Send data when on connected to a restricted/costed network (User)","description":"This policy setting determines whether Windows Error Reporting (WER) checks for a network cost policy that restricts the amount of data that is sent over the network.\r\n\r\nIf you enable this policy setting, WER does not check for network cost policy restrictions, and transmits data even if network cost is restricted.\r\n\r\nIf you disable or do not configure this policy setting, WER does not send data, but will check the network cost policy again if the network profile is changed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypassnetworkcostthrottling-1"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_1_1","displayName":"Enabled","description":null,"helpText":null}]},"6432cd0328658742":{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl_intranetprintersurl_link","displayName":"Printers Page URL (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":null},"649327e89067362f":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner","displayName":"Microsoft SharePoint Designer 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2010.\r\nBy default, the user settings of Microsoft SharePoint Designer 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Designer 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Designer 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010sharepointdesigner"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner_1","displayName":"Enabled","description":null,"helpText":null}]},"64dcb7ea6860c71e":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_bypassproxylocal","displayName":"Bypass proxy for local addresses (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_bypassproxylocal_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_bypassproxylocal_1","displayName":"True","description":null,"helpText":null}]},"644e2c9be3bc434b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon","displayName":"Hide the web store from the New Tab Page and app launcher (User)","description":"Hide the Chrome Web Store app and footer link from the New Tab Page and Google Chrome OS app launcher.\r\n\r\nWhen this policy is set to true, the icons are hidden.\r\n\r\nWhen this policy is set to false or is not configured, the icons are visible.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon_1","displayName":"Enabled","description":null,"helpText":null}]},"6463980d38fd1ac0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended","displayName":"Application locale (User)","description":"Setting the policy specifies the locale Google Chrome uses.\r\n\r\nTurning it off or leaving it unset means the locale will be the first valid locale from:\r\n1) The user specified locale (if configured).\r\n2) The system locale.\r\n3) The fallback locale (en-US).\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"646f453bf72bd4b8":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings","displayName":"Controls visibility of enterprise profile badge in the toolbar (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings_0","displayName":"Show expanded enterprise toolbar badge","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings_1","displayName":"Hide expanded enterprise toolbar badge","description":null,"helpText":null}]},"64692a08bb60e4b9":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":null},"64c4b13a2339a2d6":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"647fb1310c58f2a5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions","displayName":"Download restrictions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1","displayName":"Block dangerous downloads","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2","displayName":"Block potentially dangerous downloads","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null}]},"64924f1c6c17db2c":{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled","displayName":"Efficiency mode enabled (User)","description":"Enables efficiency mode which helps extend battery life by saving computer resources. By default, efficiency mode is enabled for devices with a battery and disabled otherwise.\r\n\r\nIf you enable this policy, efficiency mode will become active according to the setting chosen by the user. You can configure the efficiency mode setting using the 'EfficiencyMode' (Configure when efficiency mode should become active) policy. If the device does not have a battery, efficiency mode will always be active.\r\n\r\nIf you disable this policy, efficiency mode will never become active. The 'EfficiencyMode' and 'EfficiencyModeOnPowerEnabled' (Enable efficiency mode when the device is connected to a power source) policies will have no effect.\r\n\r\nIf you don't configure this policy, efficiency mode will be enabled for devices with a battery and disabled otherwise. Users can choose the efficiency mode option they want in edge://settings/system.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"645939f402f5275b":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"64d15046b462b4e5":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled","displayName":"Allow users to open files using the ClickOnce protocol (User)","description":"Allow users to open files using the ClickOnce protocol. The ClickOnce protocol allows websites to request that the browser open files from a specific URL using the ClickOnce file handler on the user's computer or device.\r\n\r\nIf you enable this policy, users can open files using the ClickOnce protocol. This policy overrides the user's ClickOnce setting in the edge://flags/ page.\r\n\r\nIf you disable this policy, users can't open files using the ClickOnce protocol. Instead, the file will be saved to the file system using the browser. This policy overrides the user's ClickOnce setting in the edge://flags/ page.\r\n\r\nIf you don't configure this policy, users can't open files using the ClickOnce protocol. Users have the option to enable the use of the ClickOnce protocol with the edge://flags/ page.\r\n\r\nDisabling ClickOnce may prevent ClickOnce applications (.application files) from launching properly.\r\n\r\nFor more information about ClickOnce, see https://go.microsoft.com/fwlink/?linkid=2103872 and https://go.microsoft.com/fwlink/?linkid=2099880.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"64cb89daac549094":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist","displayName":"Disable printer types on the deny list (User)","description":"The printer types on the deny list won't be discovered or have their capabilities fetched.\r\n\r\nPlacing all printer types on the deny list effectively disables printing, because there's no print destination for documents.\r\n\r\nIf you don't configure this policy, or the printer list is empty, all printer types are discoverable.\r\n\r\nPrinter destinations include extension printers and local printers. Extension printers are also known as print provider destinations, and include any destination that belongs to a Microsoft Edge extension.\r\nLocal printers are also known as native printing destinations, and include destinations available to the local machine and shared network printers.\r\n\r\nIn Microsoft version 93 or later, if you set this policy to 'pdf' it also disables the 'save as Pdf' option from the right click context menu.\r\n\r\nIn Microsoft version 103 or later, if you set this policy to 'onedrive' it also disables the 'save as Pdf (OneDrive)' option from print preview.\r\n\r\nPolicy options mapping:\r\n\r\n* privet (privet) = Zeroconf-based (mDNS + DNS-SD) protocol destinations\r\n\r\n* extension (extension) = Extension-based destinations\r\n\r\n* pdf (pdf) = The 'Save as PDF' destination. (93 or later, also disables from context menu)\r\n\r\n* local (local) = Local printer destinations\r\n\r\n* onedrive (onedrive) = Save as PDF (OneDrive) printer destinations. (103 or later)\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nlocal\r\nprivet","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},"644ba90b113ac99f":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled","displayName":"Discover feature In Microsoft Edge (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.\r\n\r\nThis policy lets you configure the Discover feature in Microsoft Edge.\r\n\r\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\r\n\r\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"64cbd37cf6c48128":{"id":"user_vendor_msft_policy_config_office16v15~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableresourceidnamemapping","displayName":"Disable caching when opening server-only files. (User)","description":"This policy setting controls disabling caching when opening server-only files.\r\n\r\nCaching files helps Office speed up server-only file opens but could cause conflicts for organizations that rename files or change file contents directly on SharePoint.\r\n\r\nThe cache is meant to improve performance so disabling it is expected to hurt performance.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v15~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableresourceidnamemapping_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v15~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableresourceidnamemapping_1","displayName":"Enabled","description":null,"helpText":null}]},"640dd1fca61cbb49":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastservicesharednotescustomurl9","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"64ed10373f998c8f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_coauthoring_l_setdocumentsynchronizationtimeout_l_setdocumentsynchronizationtimeoutspinid","displayName":"in milliseconds: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a5aea816-9c1d-4a85-a2ab-33e3d1c26a8c","categoryName":"Co-authoring","options":null},"64b7582057f47dae":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_listofapprovedlocationspolicy_l_listofapprovedlocations_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":null},"648b68ce805a5c3e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_enablemsgraphasdefaultchart","displayName":"Enable MS Graph as Default Chart Tool in PowerPoint and Word (User)","description":"Enables administrators to set the default chart creation tool to MS Graph instead of the default Excel Chart in PowerPoint and Word. Also blocks conversion of Graph charts to Office charts.","helpText":"","infoUrls":[],"categoryId":"a40e47b0-5b27-4e4d-b2ef-42f20540e812","categoryName":"Graph settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_enablemsgraphasdefaultchart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_enablemsgraphasdefaultchart_1","displayName":"Enabled","description":null,"helpText":null}]},"64d65730cbead800":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_latvian","displayName":"Latvian (User)","description":"Enables the editing language Latvian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_latvian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_latvian_1","displayName":"Enabled","description":null,"helpText":null}]},"6462964703f7b1d2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences","displayName":"[Deprecated] Allow the use of connected experiences in Office (User)","description":"\r\n This policy setting allows you to control whether connected experiences are available to your users when they're using Office.\r\n\r\n Connected experiences include experiences that analyze content, such as Editor in Word, experiences that download online content, such as PowerPoint QuickStarter, and other connected experiences, such as document co-authoring and online file storage. It also includes additional optional connected experiences, such as the LinkedIn features of the Resume Assistant in Word or the 3D Maps feature in Excel, which uses Bing. See the Note at the end for more information about other policy settings that you can use to control these connected experiences.\r\n\r\n If you enable this policy setting, these connected experiences will be available to your users.\r\n\r\n If you disable this policy setting, these connected experiences won't be available to your users.\r\n\r\n Note: If you disable this policy setting, nearly all connected experiences will be turned off. However, limited Office functionality will remain available, such as synching a mailbox in Outlook. Essential services, such as the licensing service that confirms that you’re properly licensed to use Office, will also remain available.\r\n\r\n If you don't configure this policy setting, these connected experiences will be available to your users.\r\n\r\n Note: You can use these other policy settings if you want to disable just a certain group of connected experiences:\"Allow the use of connected experiences in Office that analyze content,\" \"Allow the use of connected experiences in Office that download online content,\" and \"Allow the use of additional optional connected experiences in Office.\"\r\n\r\n For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085689\r\n ","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences_1","displayName":"Enabled","description":null,"helpText":null}]},"64ebe14809d3c95d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10_l_descriptioncolon276","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"64b032b94faaa508":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc02_l_allowsubfolders02","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc02_l_allowsubfolders02_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc02_l_allowsubfolders02_1","displayName":"True","description":null,"helpText":null}]},"640dcb42f30f3a5c":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepauseonbatterysaver","displayName":"Continue syncing when devices have battery saver mode turned on (User)","description":"This setting lets you turn off the auto-pause feature for devices that have battery saver mode turned on.\r\n\r\nIf you enable this setting, syncing will continue when users turn on battery saver mode. OneDrive will not automatically pause syncing.\r\n\r\nIf you disable or do not configure this setting, syncing will pause automatically when battery saver mode is detected and a notification will be displayed. Users can choose not to pause syncing by clicking \"Sync Anyway\" in the notification. When syncing is paused, users can resume syncing by clicking the OneDrive cloud icon in the notification area of the taskbar and then clicking the alert at the top of the activity center.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepauseonbatterysaver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepauseonbatterysaver_1","displayName":"Enabled","description":null,"helpText":null}]},"6458ddf3807e122d":{"id":"user_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_enableautostart","displayName":"Start OneDrive automatically when signing in to Windows (User)","description":"This setting overrides a user's choice, ensuring OneDrive will automatically start every time they sign in to Windows. \r\n \r\nIf you configure this setting, OneDrive will start automatically when a user signs in to Windows. The OneDrive sync app must be restarted after this setting is enabled for the setting to take effect.\r\n\r\nIf you do not configure this setting or set it to any value other than 1, the user can choose to automatically start OneDrive (default choice) or to disable OneDrive from starting in OneDrive sync app settings.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_enableautostart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_enableautostart_1","displayName":"Enabled","description":null,"helpText":null}]},"64d80b5cff5cd3de":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_percentageofunuseddiskspacetoallowinsections_l_enterpercentage","displayName":"Enter Percentage: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":null},"64510f2c91172343":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook","displayName":"Security setting for macros (User) (Deprecated)","description":"This policy setting controls the security level for macros in Outlook. \r\n\r\nIf you enable this policy setting, you can choose from four options for handling macros in Outlook: \r\n\r\n- Always warn. This option corresponds to the \"Warnings for all macros\" option in the \"Macro Security\" section of the Outlook Trust Center. Outlook disables all macros that are not opened from a trusted location, even if the macros are signed by a trusted publisher. For each disabled macro, Outlook displays a security alert dialog box with information about the macro and its digital signature (if present), and allows users to enable the macro or leave it disabled. \r\n\r\n- Never warn, disable all. This option corresponds to the \"No warnings and disable all macros\" option in the Trust Center. Outlook disables all macros that are not opened from trusted locations, and does not notify users. \r\n\r\n- Warning for signed, disable unsigned. This option corresponds to the \"Warnings for signed macros; all unsigned macros are disabled\" option in the Trust Center. Outlook handles macros as follows: \r\n\r\n--If a macro is digitally signed by a trusted publisher, the macro can run if the user has already trusted the publisher. \r\n\r\n--If a macro has a valid signature from a publisher that the user has not trusted, the security alert dialog box for the macro lets the user choose whether to enable the macro for the current session, disable the macro for the current session, or to add the publisher to the Trusted Publishers list so that it will run without prompting the user in the future. \r\n\r\n--If a macro does not have a valid signature, Outlook disables it without prompting the user, unless it is opened from a trusted location. \r\n\r\nThis option is the default configuration in Outlook. \r\n\r\n- No security check. This option corresponds to the \"No security check for macros (Not recommended)\" option in the Trust Center. Outlook runs all macros without prompting users. This configuration makes users' computers vulnerable to potentially malicious code and is not recommended. \r\n\r\nIf you disable or do not configure this policy setting, the behavior is the equivalent of Enabled -- Warning for signed, disable unsigned.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"64ad5b00e9c43aef":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_l_setmaximumnumberoftrustrecordstopreservespinid","displayName":"Maximum to preserve: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":null},"64e35d5b876171c8":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevmethod","displayName":"Default task Earned Value method (User)","description":"Specifies the method used for earned value analysis.\r\n\r\nIf you enable this setting, Project will calculate earned value using the method you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"acbc106b-796a-4ba3-ab5f-c130530ad455","categoryName":"Earned Value options for Project1","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevmethod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevmethod_1","displayName":"Enabled","description":null,"helpText":null}]},"64882ac65c094687":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05_l_allowsubfolders27","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05_l_allowsubfolders27_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05_l_allowsubfolders27_1","displayName":"True","description":null,"helpText":null}]},"64d6c87191b357d3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarwithspelling","displayName":"Check grammar with spelling (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarwithspelling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarwithspelling_1","displayName":"Enabled","description":null,"helpText":null}]},"64eead8e31303859":{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_priority","displayName":"Priority (Windows Insiders only)","description":"Priority of a policy compared to the others where 1 represents the highest priority. Thus, the smaller this value is, the higher preference this specific network will receive in establishing a data connection. \r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":null},"64f2cccc6a87735f":{"id":"vendor_msft_wirelessnetworkpreference_parameters_cellularparameters_preferredprofilewakeconnectiontimerinseconds","displayName":"Preferred Profile Wake Connection Timer In Seconds (Windows Insiders only)","description":"When the device is woken from sleep with the most-preferred profile already enabled, this value configures the amount of time (in seconds) before the agent will give up on waiting for connection re-establishment with the most-preferred profile and start network discovery.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/65.json b/public/intune-definitions/65.json new file mode 100644 index 000000000000..96a654f6bbea --- /dev/null +++ b/public/intune-definitions/65.json @@ -0,0 +1 @@ +{"65bdad07236a090f":{"id":"com.apple.applicationaccess_forceassistantprofanityfilter","displayName":"Force Assistant Profanity Filter (Deprecated)","description":"If true, forces the use of the profanity filter assistant. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceassistantprofanityfilter_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceassistantprofanityfilter_true","displayName":"True","description":null,"helpText":null}]},"658fdcb02492102f":{"id":"com.apple.dock_mcxdockspecialfolders","displayName":"MCX Dock Special Folders","description":"One or more special folders that may be created at user login time and placed in the dock.\n\nThe 'My Applications' item is only used for Simple Finder environments. The 'Original Network Home' item is only used for mobile account users.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"655133706abc7b30":{"id":"com.apple.managedclient.preferences_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing","description":"If you set this policy to 3, websites can ask for write access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\n\nIf you don't set this policy, websites can ask for access. Users can change this setting.\n\nPolicy options mapping:\n\n* BlockFileSystemWrite (2) = Don't allow any site to request write access to files and directories\n\n* AskFileSystemWrite (3) = Allow sites to ask the user to grant write access to files and directories\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultfilesystemwriteguardsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultfilesystemwriteguardsetting_0","displayName":"Don't allow any site to request write access to files and directories","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultfilesystemwriteguardsetting_1","displayName":"Allow sites to ask the user to grant write access to files and directories","description":null,"helpText":null}]},"65316d5acf0df895":{"id":"com.apple.mcx_com.apple.energysaver.portable.acpower_system sleep timer","displayName":"System Sleep Timer","description":"System sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"65c148c7487c83fe":{"id":"com.apple.mcxmenuextras_bluetooth.menu","displayName":"Bluetooth","description":"If true, enables the Bluetooth menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_bluetooth.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_bluetooth.menu_true","displayName":"True","description":null,"helpText":null}]},"65d8dd45d9251bae":{"id":"com.apple.servicemanagement_rules","displayName":"Rules","description":"An array of rule dictionaries.","helpText":null,"infoUrls":[],"categoryId":"9859957e-34f1-4669-9f95-2b7c79fff052","categoryName":"Service Management - Managed Login Items","options":null},"653c68fa4c7ae761":{"id":"com.apple.systemconfiguration_com.apple.systemconfiguration","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"650c556c66f50bb5":{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"65cc042e8cef07ab":{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"65c8bc19a597edce":{"id":"com.apple.universalaccess_stickykey","displayName":"Sticky Key","description":"If true, enables Sticky Keys in the Keyboard options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_stickykey_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_stickykey_true","displayName":"True","description":null,"helpText":null}]},"65fa9afa094ec6b3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_recommended","displayName":"Enable Gamer Mode (Obsolete) (users can override)","description":"Microsoft Edge Gamer Mode allows gamers to personalize their browser with gaming themes and gives them the option of enabling Efficiency Mode for PC gaming, the Gaming feed on new tabs, sidebar apps for gamers, and more.\n\nIf you enable or don't configure this policy, users can opt into Gamer Mode.\nIf you disable this policy, Gamer Mode is disabled.\nNote: With Microsoft Edge version 141, this policy is obsolete because the Gamer Mode feature is removed.","helpText":null,"infoUrls":[],"categoryId":"81c518f1-522e-4957-b850-e8a66d2ab215","categoryName":"Games settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"65846e2dfaf5df90":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerblocklist","displayName":"Configure the list of domains for which the password manager UI (Save and Fill) will be disabled","description":"Configure the list of domains where Microsoft Edge should disable the password manager. This means that Save and Fill workflows are disabled, ensuring that passwords for those websites can't be saved or auto filled into web forms.\n\nIf you enable this policy, the password manager is disabled for the specified set of domains.\n\nIf you disable or don't configure this policy, password manager works as usual for all domains.\n\nIf you configure this policy, that is, add domains for which password manager is blocked, users can't change or override the behavior in Microsoft Edge. In addition, users can't use password manager for those URLs.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"65c2920dfae5d2aa":{"id":"device_vendor_msft_defender_configuration_quickscanincludeexclusions","displayName":"Quick Scan Include Exclusions","description":"This setting allows you to scan excluded files and directories during quick scans.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_quickscanincludeexclusions_0","displayName":"If you set this setting to 0 or do not configure it, exclusions are not scanned during quick scans.","description":"If you set this setting to 0 or do not configure it, exclusions are not scanned during quick scans.","helpText":null},{"id":"device_vendor_msft_defender_configuration_quickscanincludeexclusions_1","displayName":"If you set this setting to 1, all files and directories that are excluded from real-time protection using contextual exclusions are scanned during a quick scan.","description":"If you set this setting to 1, all files and directories that are excluded from real-time protection using contextual exclusions are scanned during a quick scan.","helpText":null}]},"658c3368bc985814":{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle","displayName":"Retries:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle_0","displayName":"No Retry","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle_1","displayName":"1 Retry","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle_2","displayName":"2 Retries","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle_3","displayName":"3 Retries","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle_4","displayName":"4 Retries","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle_5","displayName":"5 Retries","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretries_pruningretriestitle_6","displayName":"6 Retries","description":null,"helpText":null}]},"655dde2ec7c4672e":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_c","displayName":"Controlled load service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoad). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Controlled Load service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 24 (0x18).\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypecontrolledload-c"],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_c_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_c_1","displayName":"Enabled","description":null,"helpText":null}]},"658b554ba323042c":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_1_trusted_certificate_thumbprints","displayName":"Comma-separated list of SHA1 trusted certificate thumbprints:","description":null,"helpText":"","infoUrls":[],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":null},"656a04c32a2145ea":{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureduration_name_dxt_standarduserauthorizationfailureduration_name","displayName":"Duration for counting TPM authorization failures (minutes):","description":null,"helpText":"","infoUrls":[],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":null},"658fd50c510a5479":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_enableuev_registerinboxtemplates","displayName":"Auto-register inbox templates","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_enableuev_registerinboxtemplates_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_enableuev_registerinboxtemplates_1","displayName":"True","description":null,"helpText":null}]},"65c1e4a26a7c727e":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_firstusenotificationenabled","displayName":"First Use Notification","description":"This policy setting enables a notification in the system tray that appears when the User Experience Virtualization (UE-V) Agent runs for the first time.\r\nBy default, a notification informs users that Company Settings Center, the user-facing name for the UE-V Agent, now helps to synchronize settings between their work computers.\r\nWith this setting enabled, the notification appears the first time that the UE-V Agent runs.\r\nWith this setting disabled, no notification appears.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-firstusenotificationenabled"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_firstusenotificationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_firstusenotificationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"65abfba7e4b35a29":{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter","displayName":"Drive letter","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_g:","displayName":"G:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_h:","displayName":"H:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_i:","displayName":"I:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_j:","displayName":"J:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_k:","displayName":"K:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_l:","displayName":"L:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_m:","displayName":"M:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_n:","displayName":"N:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_o:","displayName":"O:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_p:","displayName":"P:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_q:","displayName":"Q:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_r:","displayName":"R:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_s:","displayName":"S:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_t:","displayName":"T:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_u:","displayName":"U:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_v:","displayName":"V:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_w:","displayName":"W:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_x:","displayName":"X:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_y:","displayName":"Y:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_drive_letter_z:","displayName":"Z:","description":null,"helpText":null}]},"65667baefe727a58":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-intranet"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet_1","displayName":"Enabled","description":null,"helpText":null}]},"6571076c5179618b":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherfilenamedetails","displayName":"File name","description":"The name of the applications executable file name.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"65507dda635903b3":{"id":"device_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith","displayName":"Configure Open Microsoft Edge With","description":"You can configure Microsoft Edge to lock down the Start page, preventing users from changing or customizing it. If enabled, you can choose one of the following options: - Start page: the Start page loads ignoring the Configure Start Pages policy. - New tab page: the New tab page loads ignoring the Configure Start Pages policy. - Previous pages: all tabs the user had open when Microsoft Edge last closed loads ignoring the Configure Start Pages policy. - A specific page or pages: the URL(s) specified with Configure Start Pages policy load(s). If selected, you must specify at least one URL in Configure Start Pages; otherwise, this policy is ignored. When enabled, and you want to make changes, you must first set the Disable Lockdown of Start Pages to not configured, make the changes to the Configure Open Edge With policy, and then enable the Disable Lockdown of Start Pages policy. If disabled or not configured, and you enable the Disable Lockdown of Start Pages policy, your users can change or customize the Start page. Default setting: A specific page or pages (default) Related policies: -Disable Lockdown of Start Pages -Configure Start Pages","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configureopenmicrosoftedgewith"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_0","displayName":"Load the Start page","description":"Load the Start page","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_1","displayName":"Load the New tab page","description":"Load the New tab page","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_2","displayName":"Load the previous pages","description":"Load the previous pages","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_3","displayName":"Load a specific page or pages","description":"Load a specific page or pages","helpText":null}]},"65b29e514206f2b9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked","displayName":"Block Browser Legacy Extension Points","description":"Setting the policy to Enabled or leaving it unset will enable ProcessExtensionPointDisablePolicy to block legacy extension points in the Browser process.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security and stability as unknown and potentially hostile code can load inside Google Chrome's browser process. Only turn off the policy if there are compatibility issues with third-party software that must run inside Google Chrome's browser process.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked_1","displayName":"Enabled","description":null,"helpText":null}]},"65173d136aae41c0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showappsshortcutinbookmarkbar","displayName":"Show the apps shortcut in the bookmark bar","description":"Setting the policy to True displays the apps shortcut. Setting the policy to False means this shortcut never appears.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide to show or hide the apps shortcut from the bookmark bar context menu.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showappsshortcutinbookmarkbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showappsshortcutinbookmarkbar_1","displayName":"Enabled","description":null,"helpText":null}]},"65a94c4bee7afd4b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio","description":"This policy controls whether the browser uses adaptive buffering for\r\nWeb Audio, which may decrease audio glitches but may increase\r\nlatency by a variable amount.\r\n\r\nSetting the policy to Enabled will always use adaptive buffering.\r\n\r\nSetting the policy to Disabled or not set will allow the browser\r\nfeature launch process to decide if adaptive buffering is used.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6577fddcb9e8baac":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled","displayName":"Enable Live Translate","description":"Enable translation of live captions. Captions will be sent to Google for translation.\r\n\r\nIf this policy is set to Enabled, Live Translate will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Translate will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Translate is disabled initially but can be enabled by the user anytime.\r\n\r\nIn LiveCaptionEnabled is set to Disabled, Live Translate will be disabled regardless of this policy setting.","helpText":"","infoUrls":[],"categoryId":"d9432f48-3072-4171-9031-4ebead394151","categoryName":"Accessibility settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6591b9b59ece7b45":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls","displayName":"Block Local Fonts permission on these sites","description":"Sets a list of site url patterns that specify sites which will automatically deny the local fonts permission. This will limit the ability of sites to see information about local fonts.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultLocalFontsSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"657c6dd8b7f56676":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled","displayName":"Choose whether the Privacy Sandbox ad measurement setting can be disabled","description":"A policy to control whether the Privacy Sandbox Ad measurement setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Ad measurement setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Ad measurement setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"657dd040d914bd9f":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"65f2c7a452b36c10":{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection","displayName":"Enable Network Protection","description":"This policy allows you to turn network protection on (block/audit) or off. Network protection protects employees using any app from accessing phishing scams, exploit-hosting sites, and malicious content on the Internet. This includes preventing third-party browsers from connecting to dangerous sites. Value type is integer. If you enable this setting, network protection is turned on and employees can't turn it off. Its behavior can be controlled by the following options: Block and Audit. If you enable this policy with the Block option, users/apps will be blocked from connecting to dangerous domains. You will be able to see this activity in Windows Defender Security Center. If you enable this policy with the Audit option, users/apps will not be blocked from connecting to dangerous domains. However, you will still see this activity in Windows Defender Security Center. If you disable this policy, users/apps will not be blocked from connecting to dangerous domains. You will not see any network activity in Windows Defender Security Center. If you do not configure this policy, network blocking will be disabled by default.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection_1","displayName":"Enabled (block mode)","description":"Enabled (block mode)","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection_2","displayName":"Enabled (audit mode)","description":"Enabled (audit mode)","helpText":null}]},"65c1de9390484c90":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory","displayName":"Write Cache Directory","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the location of the write cache file location. This location must not be on a network path.\r\n\r\nRegistry Entry: HKLM\\SYSTEM\\CurrentControlSet\\Services\\frxccds\\Parameters\\WriteCacheDirectory\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"f2d139ed-a314-48b7-b700-4d11adfcc309","categoryName":"Cloud Cache Service","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"65435411f0bbc2e4":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a","displayName":"Include local directory path when uploading files to a server","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3","displayName":"Disable","description":null,"helpText":null}]},"656c7aaca3668efc":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification","displayName":"Notify a user that a browser restart is recommended or required for pending updates (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_1","displayName":"Recommended - Show a recurring prompt to the user indicating that a restart is recommended","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_2","displayName":"Required - Show a recurring prompt to the user indicating that a restart is required","description":null,"helpText":null}]},"65f21146b2247f57":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice","displayName":"Enable resolution of navigation errors using a web service","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\r\n\r\nIf you enable this policy, a web service is used for network connectivity tests.\r\n\r\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\r\n\r\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_1","displayName":"Enabled","description":null,"helpText":null}]},"656fd811181d11e8":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication","description":"This policy enables defining a list of certificates that are not trusted or distrusted in Microsoft Edge\r\nbut can be used as hints for path-building. Certificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"65d8571ecb772621":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_savecookiesonexitdesc","displayName":"Save cookies when Microsoft Edge closes (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"651b8391cdb17bd0":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed","displayName":"Allow single sign-on for Microsoft personal sites using this profile","description":"'Allow single sign-on for Microsoft personal sites using this profile' option allows non-MSA profiles to be able to use single sign-on for Microsoft sites using MSA credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-MSA profiles only.\r\n\r\nIf you disable this policy, non-MSA profiles will not be able to use single sign-on for Microsoft sites using MSA credentials present on the machine.\r\n\r\nIf you enable this policy or don't configure it, users will be able to use the Settings option to ensure non-MSA profiles are able to use single sign-on for Microsoft sites using MSA credentials present on the machine provided only a single MSA account exists on the machine.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"65e3edb0902ea304":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion_l_updatetargetversionid","displayName":"Update version: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":null},"65001eb4aa0fe0d3":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage","displayName":"Limit the sync app upload rate to a percentage of throughput","description":"This setting lets you balance the performance of different upload tasks on a computer by specifying the percentage of the computer's upload throughput that the OneDrive sync app (OneDrive.exe) can use to upload files. Setting this as a percentage lets the sync app respond to both increases and decreases in throughput. The lower the percentage you set, the slower files will upload. We recommend a value of 50% or higher. The sync app will periodically upload without restriction for one minute and then slow down to the upload percentage you set. This lets small files upload quickly while preventing large uploads from dominating the computer's upload throughput.\r\n\r\n If you enable this setting, computers will use the percentage of upload throughput that you specify when uploading files to OneDrive, and users will not be able to change it.\r\n\r\n If you disable or do not configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to \"Adjust automatically\" which will use 70% of upload throughput to respond to increases and decreases in throughput.\r\n\r\n Important: If you enable or disable this setting, and then change it back to Not Configured, the last configuration will remain in effect. We recommend enabling this setting instead of \"Limit the sync app upload speed to a fixed rate\" to limit the upload rate. You should not enable both settings at the same time.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage_1","displayName":"Enabled","description":null,"helpText":null}]},"657b5a05677c087d":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_sharepointonpremtenantnamebox","displayName":"Organization name: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"65877337a1444642":{"id":"device_vendor_msft_policy_config_start_startlayout","displayName":"Start Layout","description":"Important For more information, see Policy scope. Allows you to override the default Start layout and prevents the user from changing it. If both user and device policies are set, the user policy will be used. Apps pinned to the taskbar can also be changed with this policyFor further details on how to customize the Start layout, please see Customize and export Start layout and Configure Windows 10 taskbar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#startlayout"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":null},"658c594417908363":{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode","displayName":"Enable Touch Keyboard Auto Invoke In Desktop Mode","description":"This policy allows the IT admin to enable the touch keyboard to automatically show up when the device is in the desktop mode. The touch keyboard is enabled in both the tablet and desktop mode. In the tablet mode, when you touch a textbox, the touch keyboard automatically shows up. But in the desktop mode, by default, the touch keyboard does not automatically show up when you touch a textbox. The user must click the system tray to enable the touch keyboard. When this policy is enabled, the touch keyboard automatically shows up when the device is in the desktop mode. This policy corresponds to Show the touch keyboard when not in tablet mode and there's no keyboard attached in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#enabletouchkeyboardautoinvokeindesktopmode"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode_1","displayName":"Enabled","description":"Enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode_2","displayName":"Always.","description":"Always.","helpText":null}]},"65abefe1673353e9":{"id":"device_vendor_msft_policy_config_update_configurefeatureupdateuninstallperiod","displayName":"Configure Feature Update Uninstall Period","description":"Enable enterprises/IT admin to configure feature update uninstall period","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configurefeatureupdateuninstallperiod"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"6510777c5ce1d6c3":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation_2","displayName":"Additional Validation Requirements","description":"","helpText":"","infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation_2_0","displayName":"Business justification","description":"Business Justification","helpText":null}},"650d8b46502ba29f":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_validation","displayName":"Validation","description":"","helpText":"","infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_validation_0","displayName":"Business justification","description":"Business Justification","helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_validation_1","displayName":"Windows authentication","description":"Windows Authentication","helpText":null}]},"65782639da625ca5":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_runscanwhenidle","displayName":"Run scan when device is idle","description":"When enabled, the scheduled scan will only start when the device is considered idle- meaning minimal CPU usage and no active user sessions. This helps reduce performance impact during peak usage hours. If the device remains busy, the scan will be deferred until idle conditions are met.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":[{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_runscanwhenidle_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_runscanwhenidle_true","displayName":"Enabled","description":null,"helpText":null}]},"6531f5ba4366710b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13","displayName":"Trusted Location #13 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_1","displayName":"Enabled","description":null,"helpText":null}]},"65e40187e57fe64a":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nochooseprogramspage","displayName":"Hide the Set Program Access and Defaults page (User)","description":"Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.\r\n\r\nThe Set Program Access and Defaults button lets administrators specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.\r\n\r\nIf you disable this setting or do not configure it, the Set Program Access and Defaults button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to change program access or defaults.\r\n\r\nThis setting does not prevent the Set Program Access and Defaults icon from appearing on the Start menu. See the \"Remove Set Program Access and Defaults from Start menu\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-nochooseprogramspage"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nochooseprogramspage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nochooseprogramspage_1","displayName":"Enabled","description":null,"helpText":null}]},"6570d26e53e9269e":{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktopchanges","displayName":"Prohibit changes (User)","description":"Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration.\r\n\r\nThis is a comprehensive setting that locks down the configuration you establish by using other policies in this folder. This setting removes the Web tab from Display in Control Panel. As a result, users cannot enable or disable Active Desktop. If Active Desktop is already enabled, users cannot add, remove, or edit Web content or disable, lock, or synchronize Active Desktop components.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-noactivedesktopchanges"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktopchanges_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktopchanges_1","displayName":"Enabled","description":null,"helpText":null}]},"658f6a6423a8afd9":{"id":"user_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_1","displayName":"Turn off automatic learning (User)","description":"\r\n This policy setting turns off the automatic learning component of handwriting recognition personalization. \r\n\r\n\t\tAutomatic learning enables the collection and storage of text and ink written by the user in order to help adapt handwriting recognition to the vocabulary and handwriting style of the user. \r\n\r\n\t\tText that is collected includes all outgoing messages in Windows Mail, and MAPI enabled email clients, as well as URLs from the Internet Explorer browser history. The information that is stored includes word frequency and new words not already known to the handwriting recognition engines (for example, proper names and acronyms). Deleting email content or the browser history does not delete the stored personalization data. Ink entered through Input Panel is collected and stored. \r\n\r\n\t\tNote: Automatic learning of both text and ink might not be available for all languages, even when handwriting personalization is available. See Tablet PC Help for more information.\r\n\r\n\t\tIf you enable this policy setting, automatic learning stops and any stored data is deleted. Users cannot configure this setting in Control Panel.\r\n\r\n\t\tIf you disable this policy setting, automatic learning is turned on. Users cannot configure this policy setting in Control Panel. Collected data is only used for handwriting recognition, if handwriting personalization is turned on.\r\n\r\n\t\tIf you do not configure this policy, users can choose to enable or disable automatic learning either from the Handwriting tab in the Tablet Settings in Control Panel or from the opt-in dialog.\r\n\r\n\t\tThis policy setting is related to the \"Turn off handwriting personalization\" policy setting.\r\n\r\n\t\tNote: The amount of stored ink is limited to 50 MB and the amount of text information to approximately 5 MB. When these limits are reached and new data is collected, old data is deleted to make room for more recent data.\r\n\r\n\t\tNote: Handwriting personalization works only for Microsoft handwriting recognizers, and not with third-party recognizers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-implicitdatacollectionoff-1"],"categoryId":"9a79d480-8cb4-47b5-95c7-5da56eea5bb8","categoryName":"Handwriting personalization","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},"65ee472314ba825b":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysinfo","displayName":"System Information (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sysinfo"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"65d7cb503a91959b":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_maxpackagesizeinbytes","displayName":"Package size threshold (in bytes): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"650e6f27f4cbc825":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed","displayName":"Allow media autoplay (User)","description":"Setting the policy to True lets Google Chrome autoplay media. Setting the policy to False stops Google Chrome from autoplaying media.\r\n\r\n By default, Google Chrome doesn't autoplay media. But, for certain URL patterns, you can use the AutoplayAllowlist policy to change this setting.\r\n\r\nIf this policy changes while Google Chrome is running, it only applies to newly opened tabs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"65db270d019a7269":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability","displayName":"Profile picker availability on startup (User)","description":"Specifies whether the profile picker is enabled, disabled or forced at the browser startup.\r\n\r\nBy default the profile picker is not shown if the browser starts in guest or incognito mode, a profile directory and/or urls are specified by command line, an app is explicitly requested to open, the browser was launched by a native notification, there is only one profile available or the policy ForceBrowserSignin is set to true.\r\n\r\nIf 'Enabled' (0) is selected or the policy is left unset, the profile picker will be shown at startup by default, but users will be able to enable/disable it.\r\n\r\nIf 'Disabled' (1) is selected, the profile picker will never be shown, and users will not be able to change the setting.\r\n\r\nIf 'Forced' (2) is selected, the profile picker cannot be suppressed by the user. The profile picker will be shown even if there is only one profile available.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"657f9d17f230db1f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_applicationlocalevalue","displayName":"Application locale (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":null},"65daff643ea8d320":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended","displayName":"Default search provider encodings (User)","description":"If DefaultSearchProviderEnabled is on, setting DefaultSearchProviderEncodings specifies the character encodings supported by the search provider. Encodings are code page names such as UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\r\n\r\nLeaving DefaultSearchProviderEncodings unset puts UTF-8 in use.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"65236178641fb51b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"6545d081b4c5c2f9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled","displayName":"Enable Safe Browsing for trusted sources (User)","description":"Setting the policy to Enabled or leaving it unset means downloaded files are sent to be analyzed by Safe Browsing, even when it's from a trusted source.\r\n\r\nSetting the policy to Disabled means downloaded files won't be sent to be analyzed by Safe Browsing when it's from a trusted source.\r\n\r\nThese restrictions apply to downloads triggered from webpage content, as well as the Download link menu option. These restrictions don't apply to the save or download of the currently displayed page or to saving as PDF from the printing options.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"651d6bc4a7bfd4f6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled","displayName":"Enable printing (User)","description":"Setting the policy to Enabled or leaving it unset lets users print in Google Chrome, and users can't change this setting.\r\n\r\nSetting the policy to Disabled means users can't print from Google Chrome. Printing is off in the three dots menu, extensions, and JavaScript applications.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"655598ed420256e3":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled","displayName":"Enable Google Search Side Panel (User)","description":"If set to Enabled or not set, Google Search Side Panel is allowed on all web pages.\r\n\r\nIf set to Disabled, Google Search Side Panel is not available on any webpage.\r\n\r\nGenAI capabilities that are part of this feature are not available for Educational or Enterprise accounts.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"654a3edee483e578":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings","displayName":"Settings for Help Me Write (User)","description":"Help Me Write is an AI-based writing assistant for short-form content on the web. Suggested content is based on prompts entered by the user and the content of the web page.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"65d168adedce502e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altlvdevelopercodevisualbasic","displayName":"Alt+F11 (Developer | Code | Visual Basic) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altlvdevelopercodevisualbasic_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altlvdevelopercodevisualbasic_1","displayName":"True","description":null,"helpText":null}]},"6531a85288e98ef6":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime","displayName":"AutoRecover time (User)","description":"This policy determines the interval (in minutes) at which AutoRecover information will be saved.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime_1","displayName":"Enabled","description":null,"helpText":null}]},"65941c9199dcd634":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue_0","displayName":"Enable all WEBSERVICE functions (not recommended)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue_1","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue_2","displayName":"Disable all without notification","description":null,"helpText":null}]},"6559c382e6f83833":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07","displayName":"Trusted Location #7 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_1","displayName":"Enabled","description":null,"helpText":null}]},"659fffaebf7f286c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_pathcolon45","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"65d5e4f532161619":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_datecolon54","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"652371c6ac0c054f":{"id":"user_vendor_msft_policy_config_excel16v9~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excelfileblockexternallinks","displayName":"File Block includes external link files (User)","description":"This setting determines whether Trust Center settings for blocking load of potentially unsecure workbooks applies to those accessed by external links.\r\n\r\nIf you enable this policy setting, external links to workbooks that are blocked by File Block settings in Trust Center will not refresh. Attempts to create new links or refresh data from blocked workbooks may result in errors.\r\n\r\nIf you disable this policy setting, attempts to access external links data will not be subject to File Block settings in Trust Center.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v9~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excelfileblockexternallinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v9~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excelfileblockexternallinks_1","displayName":"Enabled","description":null,"helpText":null}]},"654893f06d9d6444":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"65d38a7d44b55b0b":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken","displayName":"Microsoft Edge management enrollment token (User)","description":"Microsoft Edge management service in Microsoft 365 Admin Center lets you set policy and manage users through a Microsoft Edge focused cloud-based management experience. This policy lets you specify an enrollment token that's used to register with Microsoft Edge management service and deploy the associated policies. The user must be signed into Microsoft Edge with a valid work or school account otherwise Microsoft Edge will not download the policy.\r\n\r\nIf you enable this policy, Microsoft Edge will attempt to use the specified enrollment token to register with the Microsoft Edge management service and download the published policy.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not attempt to connect to the Microsoft Edge management service.\r\n\r\nExample value: RgAAAACBbzoQDmUrRfq3WeKUoFeEBwBOqK2QPYsBT5V3lQFoKND-AAAAAAEVAAAOqK2QPYvBT5V4lQFoKMD-AAADTXvzAAAA0","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},"65f27045b2a71ddb":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowpopupsduringpageunload","displayName":"Allows a page to show popups during its unloading (User)","description":"This policy allows an admin to specify that a page can show popups during its unloading.\r\n\r\nWhen the policy is set to enabled, pages are allowed to show popups while they're being unloaded.\r\n\r\nWhen the policy is set to disabled or unset, pages aren't allowed to show popups while they're being unloaded. This is as per the spec: (https://html.spec.whatwg.org/#apis-for-creating-and-navigating-browsing-contexts-by-name).\r\n\r\nThis policy will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowpopupsduringpageunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowpopupsduringpageunload_1","displayName":"Enabled","description":null,"helpText":null}]},"6579470817a3c5ca":{"id":"user_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches","displayName":"Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with \"AutoSelectCertificateForUrls\" (User)","description":"Toggles whether users are prompted to select a certificate if there are multiple certificates available and a site is configured with 'AutoSelectCertificateForUrls' (Automatically select client certificates for these sites). If you don't configure 'AutoSelectCertificateForUrls' for a site, the user will always be prompted to select a certificate.\r\n\r\nIf you set this policy to True, Microsoft Edge will prompt a user to select a certificate for sites on the list defined in 'AutoSelectCertificateForUrls' if and only if there is more than one certificate.\r\n\r\nIf you set this policy to False or don't configure it, Microsoft Edge will automatically select a certificate even if there are multiple matches for a certificate. The user will not be prompted to select a certificate for sites on the list defined in 'AutoSelectCertificateForUrls'.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches_1","displayName":"Enabled","description":null,"helpText":null}]},"65504c75d5bc5b51":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffexcel","displayName":"Turn off AutoSave by default in Excel (User)","description":"This policy setting allows you to turn off AutoSave by default in Excel. AutoSave automatically saves all changes a user makes to files that are stored in OneDrive, OneDrive for Business, or SharePoint Online.\r\n\r\nIf you enable this policy setting, AutoSave is off by default in Excel. But, the user can enable AutoSave for Excel by going to File > Options > Save. Or, the user can enable AutoSave for a specific Excel file by using the AutoSave toggle in the title bar.\r\n\r\nIf you disable or don’t configure this policy setting, AutoSave is on by default, but the user can disable AutoSave by going to File > Options > Save or by using the AutoSave toggle.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"65054ada485e5a90":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastserviceminorversion0","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"65960137dc864dbd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_listofapprovedlocationspolicy_l_listofapprovedlocations_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":null},"650832783c77b5cb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_manipuri","displayName":"Manipuri (User)","description":"Enables the editing language Manipuri","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_manipuri_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_manipuri_1","displayName":"Enabled","description":null,"helpText":null}]},"650027778260994c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_l_allowsubfolders253","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_l_allowsubfolders253_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_l_allowsubfolders253_1","displayName":"True","description":null,"helpText":null}]},"65e7e8fd68aedcc1":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_downloadbandwidthlimit_downloadratevalue","displayName":"Bandwidth: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"65f752c097e7e357":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitforthenumberof_l_empty71","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":null},"6517d0b1cce6e67f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlinkppt","displayName":"Insert tab | Links | Hyperlink (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlinkppt_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlinkppt_1","displayName":"True","description":null,"helpText":null}]},"65f0e5cdc4cb7b5a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the Internet (User)","description":"\r\n This policy setting allows you to block macros from running in Office files that come from the Internet.\r\n\r\n If you enable this policy setting, macros are blocked from running, even if “Enable all macros” is selected in the Macro Settings section of the Trust Center. Also, instead of having the choice to “Enable Content,” users will receive a notification that macros are blocked from running. If the Office file is saved to a trusted location or was previously trusted by the user, macros will be allowed to run.\r\n\r\n If you disable or don’t configure this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the Internet.\r\n ","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"65d48765c0456bca":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_pathcolon48","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"65b677048721b9b6":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_pathcolon68","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"65af9d3bdfea0f21":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_taskscanbemadeinactive","displayName":"Tasks can be made inactive (User)","description":"This policy setting will allow tasks to be inactivated.\r\n\r\nIf you enable or do not configure this policy setting, users will be able to use the Inactive tasks feature, and tasks are allowed to be inactivated.\r\n\r\nIf you disable this policy setting, tasks cannot be inactivated.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_taskscanbemadeinactive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_taskscanbemadeinactive_1","displayName":"Enabled","description":null,"helpText":null}]},"65cfbec2aba8d4ca":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_startup_l_startupcolon","displayName":"Start-up: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":null},"65740b983449b251":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"6577e74fd71eca3d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditorwd","displayName":"Developer tab | Code | Visual Basic (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditorwd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditorwd_1","displayName":"True","description":null,"helpText":null}]},"658c434e4eccac67":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_descriptioncolon78","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"65ae7f3251365ac6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_datecolon81","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/66.json b/public/intune-definitions/66.json new file mode 100644 index 000000000000..2c514c9058ba --- /dev/null +++ b/public/intune-definitions/66.json @@ -0,0 +1 @@ +{"66e9ca7c6c864b83":{"id":"com.android.devicerestrictionpolicy.passwordminimumlowercasecharacters","displayName":"Number of lowercase characters required","description":"Enter the number of lowercase characters the password must have, between 1 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"66da69ee5039adb0":{"id":"com.apple.extensiblesso_platformsso_newuserauthorizationmode","displayName":"New User Authorization Mode","description":"This setting affects the permissions for accounts created at login by Platform SSO. It is only used when the account is created. Use of the following:\n* Standard\n The account will be a standard user.\n* Admin\n The account will be added to the local administrators group.\n* Groups\n The account will be assigned groups using the 'AdministratorGroups', 'AdditionalGroups', or 'AuthorizationGroups'.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_newuserauthorizationmode_0","displayName":"Standard","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_newuserauthorizationmode_1","displayName":"Admin","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_newuserauthorizationmode_2","displayName":"Groups","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_newuserauthorizationmode_3","displayName":"Temporary","description":null,"helpText":null}]},"6680836a739c9a46":{"id":"com.apple.managedclient.preferences_autolaunchprotocolscomponentenabled","displayName":"AutoLaunch Protocols Component Enabled","description":"Specifies whether the AutoLaunch Protocols component should be enabled. This component allows Microsoft to provide a list similar to that of the \"AutoLaunchProtocolsFromOrigins\" policy, allowing certain external protocols to launch without prompt or blocking certain protocols (on specified origins). By default, this component is enabled.\n\nIf you enable or don't configure this policy, the AutoLaunch Protocols component is enabled.\n\nIf you disable this policy, the AutoLaunch Protocols component is disabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autolaunchprotocolscomponentenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_autolaunchprotocolscomponentenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autolaunchprotocolscomponentenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"66297c864a78caad":{"id":"com.apple.managedclient.preferences_dnsinterceptionchecksenabled","displayName":"DNS interception checks enabled","description":"This policy configures a local switch that can be used to disable DNS interception checks. These checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\n\nThis detection might not be necessary in an enterprise environment where the network configuration is known. It can be disabled to avoid additional DNS and HTTP traffic on start-up and each DNS configuration change.\n\nIf you enable or don’t set this policy, the DNS interception checks are performed.\n\nIf you disable this policy, DNS interception checks aren’t performed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#dnsinterceptionchecksenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_dnsinterceptionchecksenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_dnsinterceptionchecksenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"660d7cdaa1040660":{"id":"com.apple.managedclient.preferences_newtabpagesearchbox","displayName":"Configure the new tab page search box experience","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\".\n\n If you disable or don't configure this policy and:\n\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\n- If the address bar default search engine is not Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\n\n\nIf you enable this policy and set it to:\n\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\n\nPolicy options mapping:\n\n* bing (bing) = Search box (Recommended)\n\n* redirect (redirect) = Address bar\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagesearchbox"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpagesearchbox_0","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpagesearchbox_1","displayName":"Address bar","description":null,"helpText":null}]},"66e2d86790987068":{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"66b0abf5fda559a6":{"id":"com.apple.universalaccess_mousedrivercursorsize","displayName":"Mouse Driver Cursor Size","description":"The size of the cursor.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":null},"66127d42706dc942":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_2","displayName":"Ignore custom consent settings","description":"This policy setting determines the behavior of the Configure Default Consent setting in relation to custom consent settings.\r\n\r\nIf you enable this policy setting, the default consent levels of Windows Error Reporting always override any other consent policy setting.\r\n\r\nIf you disable or do not configure this policy setting, custom consent policy settings for error reporting determine the consent level for specified event types, and the default consent setting determines only the consent level of any other error reports.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werconsentoverride-2"],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_2_1","displayName":"Enabled","description":null,"helpText":null}]},"66693b2d880cd176":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_slowlink3","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_slowlink3_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_slowlink3_1","displayName":"True","description":null,"helpText":null}]},"6611ce5982409e7e":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimization_syncmodeslowlinkthreshold1","displayName":"Slow link value:[number field] milliseconds","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"668a106f946eaa0b":{"id":"device_vendor_msft_policy_config_admx_kerberos_devicepkinitenabled_devicepkinitbehavior","displayName":"Device authentication behavior using certificate:","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_devicepkinitenabled_devicepkinitbehavior_0","displayName":"Automatic","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_devicepkinitenabled_devicepkinitbehavior_1","displayName":"Force","description":null,"helpText":null}]},"666a735dff4a6072":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disablescanonupdate","displayName":"Turn on scan after security intelligence update","description":"This policy setting allows you to configure the automatic scan which starts after a security intelligence update has occurred.\r\n\r\n If you enable or do not configure this setting, a scan will start following a security intelligence update.\r\n\r\n If you disable this setting, a scan will not start following a security intelligence update.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-disablescanonupdate"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disablescanonupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disablescanonupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"669f55bfb3518c9e":{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomponentfailurespolicy","displayName":"Detect application failures caused by deprecated Windows DLLs","description":"This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\\Administrative Templates\\Windows Components\\Application Compatibility.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pca#admx-pca-detectdeprecatedcomponentfailurespolicy"],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomponentfailurespolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomponentfailurespolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"66158d1b4e18e928":{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargelevel0_2","displayName":"Critical battery notification level","description":"This policy setting specifies the percentage of battery capacity remaining that triggers the critical battery notification action.\r\n\r\nIf you enable this policy setting, you must enter a numeric value (percentage) to set the battery level that triggers the critical notification.\r\n\r\nTo set the action that is triggered, see the \"Critical Battery Notification Action\" policy setting.\r\n\r\nIf you disable this policy setting or do not configure it, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dcbatterydischargelevel0-2"],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargelevel0_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargelevel0_2_1","displayName":"Enabled","description":null,"helpText":null}]},"66d13e0db857df30":{"id":"device_vendor_msft_policy_config_admx_startmenu_norun","displayName":"Remove Run menu from Start Menu","description":"Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.\n\nIf you enable this setting, the following changes occur:\n\n(1) The Run command is removed from the Start menu.\n\n(2) The New Task (Run) command is removed from Task Manager.\n\n(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:\n\n--- A UNC path: \\\\\\\n\n---Accessing local drives: e.g., C:\n\n--- Accessing local folders: e.g., \\temp>\n\nAlso, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.\n\nIf you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.\n\n\n\nNote:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.\n\nNote: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-norun"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_norun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_norun_1","displayName":"Enabled","description":null,"helpText":null}]},"666689192e0651e2":{"id":"device_vendor_msft_policy_config_audit_policychange_auditfilteringplatformpolicychange","displayName":"Policy Change Audit Filtering Platform Policy Change","description":"This policy setting allows you to audit events generated by changes to the Windows Filtering Platform (WFP) such as the following: IPsec services status. Changes to IPsec policy settings. Changes to Windows Firewall policy settings. Changes to WFP providers and engine. If you configure this policy setting, an audit event is generated when a change to the WFP is attempted. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a change occurs to the WFP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#policychange_auditfilteringplatformpolicychange"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_policychange_auditfilteringplatformpolicychange_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditfilteringplatformpolicychange_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditfilteringplatformpolicychange_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditfilteringplatformpolicychange_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"66fd3a3632adfe84":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes","displayName":"List of file types that should be automatically opened on download","description":"List of file types that should be automatically opened on download. The leading separator should not be included when listing the file type, so list \"txt\" instead of \".txt\".\r\n\r\nFiles with types that should be automatically opened will still be subject to the enabled safe browsing checks and won't be opened if they fail those checks.\r\n\r\nIf this policy isn't set, only file types that a user has already specified to automatically be opened will do so when downloaded.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nexe\r\ntxt","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_1","displayName":"Enabled","description":null,"helpText":null}]},"66f8b6b71f1eb149":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled","displayName":"Enable Native Window Occlusion","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"66897ee91df541f8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl","displayName":"Enterprise Logo URL for a managed profile","description":"A URL to an image that will be used as an enterprise badge for a managed profile. The URL must point to an image.\r\n\r\nThis policy can only be set as a user policy.\r\n\r\nIt is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 48 x 48 px.\r\n\r\nExample value: https://example.com/image.png","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_1","displayName":"Enabled","description":null,"helpText":null}]},"663255a74bfc29d0":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications.","description":"A list of origins of remote desktop client apps that may execute WebAuthn API\r\nrequests that originate from a browsing session on a remote host.\r\n\r\nAny origin configured in this policy can make WebAuthn requests for Relying\r\nParty IDs (RP IDs) that it would normally not allowed to be able to claim.\r\n\r\nOnly valid HTTPS origins are allowed. Wildcards are not supported.\r\nAny invalid entries are ignored.\r\n\r\nExample value:\r\n\r\nhttps://remotedesktop.google.com\r\nhttps://vdi.corp.example\r\nhttps://server:8080/","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"662fbaf9aaaa9025":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc","displayName":"Allow Window Management permission on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"661e6a25ecd298b9":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled","displayName":"Enable Optimization Guide Fetching","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"664d4246121322fb":{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordexpiration","displayName":"Device Password Expiration","description":"Specifies when the password expires (in days). 0 - Passwords do not expire.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#devicepasswordexpiration"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"661dba7a3da98060":{"id":"device_vendor_msft_policy_config_devicelock_maxinactivitytimedevicelockwithexternaldisplay","displayName":"[Deprecated] Max Inactivity Time Device Lock With External Display","description":"Sets the maximum timeout value for the external display.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#maxinactivitytimedevicelockwithexternaldisplay"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"66600478d53d0277":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd","displayName":"Mirror Local OST To VHD","description":"Sync existing local OST file (if any) to the VHD(x) when a new VHD(x) is created.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\MirrorLocalOSTToVHD\r\nType: DWORD\r\nValues: 0 = Do not mirror, 1 = Copy to VHD, 2 = Move to VHD","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_1","displayName":"Enabled","description":null,"helpText":null}]},"666a93816492e043":{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate","displayName":"Locked-Down Trusted Sites","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"663dbb7e7c6ecddb":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload","displayName":"Enable using BITS to download Address Book Service files","description":"This policy allows Microsoft Lync to use BITS (Background Intelligent Transfer Service) to download the Address Book Services files.","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1","displayName":"Enabled","description":null,"helpText":null}]},"662f3a81b455f9ee":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_idledetectionallowedforurlsdesc","displayName":"Allowed sites for idle detection (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"6600a6fb4a12bae7":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed","displayName":"Allow users to be alerted if their passwords are found to be unsafe","description":"Allow Microsoft Edge to monitor user passwords.\r\n\r\nIf you enable this policy, the user will get alerted if any of their passwords stored in Microsoft Edge are found to be unsafe. Microsoft Edge will show an alert and this information will also be available in Settings > Passwords > Password Monitor.\r\n\r\nIf you disable this policy, users will not be asked for permission to enable this feature. Their passwords will not be scanned and they will not be alerted either.\r\n\r\nIf you don't configure the policy, users can turn this feature on or off.\r\n\r\nTo learn more about how Microsoft Edge finds unsafe passwords see https://go.microsoft.com/fwlink/?linkid=2133833\r\n\r\nAdditional guidance:\r\n\r\nThis policy can be set as both Recommended as well as Mandatory, however with an important callout.\r\n\r\nMandatory enabled: If the policy is set to Mandatory enabled, the UI in Settings will be disabled but remain in 'On' state, and a briefcase icon will be made visible next to it with this description displayed on hover - \"This setting is managed by your organization.\"\r\n\r\nRecommended enabled: If the policy is set to Recommended enabled, the UI in Settings will remain in 'Off' state, but a briefcase icon will be made visible next to it with this description displayed on hover - \"Your organization recommends a specific value for this setting and you have chosen a different value\"\r\n\r\nMandatory and Recommended disabled: Both these states will work the normal way, with the usual captions being shown to users.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"6608305211579e70":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold","displayName":"Prompt users when they delete multiple OneDrive files on their local computer","description":"This policy sets the threshold for how many files a user can delete from a local OneDrive folder before the user is notified that the files will also be deleted from the cloud.\r\n \r\nIf you enable this policy, users will see a notification if they delete more than the specified number of files from OneDrive on their local computer. The user will be given the option to continue to remove the cloud files, or restore the local files.\r\nNote: Even if you enable this policy, users won't receive notifications if they've selected the \"Always remove files\" check box on a previous notification, or if they've cleared the \"Notify me when many files are deleted in the cloud\" check box in OneDrive sync app settings.\r\n\r\nIf you disable this policy, users will not receive a notification when they delete numerous OneDrive files on their local computer.\r\n\r\nIf you do not configure this policy, users will see a notification when they delete more than 200 files within a short period of time.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold_1","displayName":"Enabled","description":null,"helpText":null}]},"6694207dd8bbf586":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_forceallowtheseapps","displayName":"Let Apps Access Email Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"66d1b851919bfaf6":{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice","displayName":"Let Apps Activate With Voice","description":"This policy setting specifies whether Windows apps can be activated by voice.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsactivatewithvoice"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice_0","displayName":"User in control. Users can decide if Windows apps can be activated by voice using Settings > Privacy options on the device.","description":"User in control. Users can decide if Windows apps can be activated by voice using Settings > Privacy options on the device.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice_1","displayName":"Force allow. Windows apps can be activated by voice and users cannot change it.","description":"Force allow. Windows apps can be activated by voice and users cannot change it.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice_2","displayName":"Force deny. Windows apps cannot be activated by voice and users cannot change it.","description":"Force deny. Windows apps cannot be activated by voice and users cannot change it.","helpText":null}]},"6688d50b2bd8af59":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking","displayName":"[Deprecated] Enable watermarking","description":"This policy setting allows you to specify whether watermarking is enabled for a remote session.\r\nIf you enable this policy setting, then the RD Session Host server will instruct the client to project the watermarking QR code in a remote session. \r\n\r\nIf client is not compatible with watermarking, then connection will be denied.\r\n\r\nIf you disable or do not configure this policy setting, then the watermarking will be disabled.\r\n ","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_1","displayName":"Enabled","description":null,"helpText":null}]},"666ae25b7fadedd7":{"id":"device_vendor_msft_policy_config_timelanguagesettings_configuretimezone","displayName":"Configure Time Zone","description":"Specifies the time zone to be applied to the device. This is the standard Windows name for the target time zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#configuretimezone"],"categoryId":"4a5a066e-27af-46c1-9714-9e4542ffc1f9","categoryName":"Time Language Settings","options":null},"66a412956ab83515":{"id":"device_vendor_msft_policy_config_update_setautorestartnotificationdisable","displayName":"Set Auto Restart Notification Disable","description":"Allows the IT Admin to disable auto-restart notifications for update installations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setautorestartnotificationdisable"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setautorestartnotificationdisable_0","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_update_setautorestartnotificationdisable_1","displayName":"Disabled","description":"Disabled","helpText":null}]},"66c08201ca261007":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_description","displayName":"Description","description":"Specifies the description of the rule.","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"663b6a1fd9dae0f0":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_pathcolon15","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"66f2fb9057873053":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013","displayName":"Microsoft Office 365 OneNote 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 OneNote 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 OneNote 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365onenote2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013_1","displayName":"Enabled","description":null,"helpText":null}]},"6684c5c3f11d4d7e":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_weather","displayName":"Weather (User)","description":"This policy setting configures the synchronization of user settings for the Weather app.\r\nBy default, the user settings of Weather sync between computers. Use the policy setting to prevent the user settings of Weather from synchronizing between computers.\r\nIf you enable this policy setting, Weather user settings continue to sync.\r\nIf you disable this policy setting, Weather user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-weather"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_weather_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_weather_1","displayName":"Enabled","description":null,"helpText":null}]},"6679795f6fc14a6f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes_extensionallowedtypesdesc","displayName":"Types of extensions/apps that are allowed to be installed (User)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"66e89fe73fd04364":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"6644262b62bbd068":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_descriptioncolon23","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"660fb3d8ec20567c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]},"6675464522812add":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"660669dc01e768aa":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"66f880c215e0d588":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_authserverallowlist","displayName":"Configure list of allowed authentication servers (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"662989be57e69cca":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled","displayName":"Use out-of-process iframe PDF Viewer (User)","description":"Determines whether the PDF viewer in Microsoft Edge uses an out-of-process iframe (OOPIF).\r\nThis will be the new PDF viewer architecture going forward, as it is simpler in design and makes adding new features easier. The current GuestView PDF viewer, which relies on an outdated and overly complex architecture, is being deprecated.\r\n\r\nWhen this policy is set to Enabled or not set, Microsoft Edge will use the OOPIF PDF viewer architecture. Once Enabled or not set, the default behavior will be decided by Microsoft Edge.\r\n\r\nWhen this policy is set to Disabled, Microsoft Edge will strictly use the existing GuestView PDF viewer. This approach embeds a web page with its own separate frame tree into another web page.\r\n\r\nThis policy will be removed in the future, after the OOPIF PDF viewer feature has fully rolled out.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"66ca31aaf6f221b1":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication (User)","description":"This policy enables defining a list of certificate public keys that should be distrusted by Microsoft Edge for TLS server\r\nauthentication.\r\n\r\nThe policy value is a list of base64-encoded X.509 certificates. Any\r\ncertificate with a matching SPKI (SubjectPublicKeyInfo) will be distrusted.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"666ca06d5cc6d7a1":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection","displayName":"Configure enhanced hang detection for Internet Explorer mode (User)","description":"Enhanced hang detection is a more granular approach to detecting hung webpages in Internet Explorer mode than what standalone Internet Explorer uses. When a hung webpage is detected, the browser will apply a mitigation to prevent the rest of the browser from hanging.\r\n\r\nThis setting allows you to configure the use of enhanced hang detection in case you run into incompatible issues with any of your websites. We recommend disabling this policy only if you see notifications such as \"(website) is not responding\" in Internet Explorer mode but not in standalone Internet Explorer.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nIf you set this policy to 'Enabled' (1) or don’t configure it, websites running in Internet Explorer mode will use enhanced hang detection.\r\n\r\nIf you set this policy to 'Disabled' (0), enhanced hang detection is disabled, and users will get the basic Internet Explorer hang detection behavior.\r\n\r\n* 0 = Enhanced hang detection disabled\r\n\r\n* 1 = Enhanced hang detection enabled\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_1","displayName":"Enabled","description":null,"helpText":null}]},"660555758fe039d3":{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports","displayName":"Explicitly allowed network ports (User)","description":"There is a list of restricted ports built into Microsoft Edge. Connections to these ports will fail. This policy allows bypassing that list. The set of ports is defined as a comma-separated list that outgoing connections should be permitted on.\r\n\r\nPorts are restricted to prevent Microsoft Edge from being used as a vector to exploit various network vulnerabilities. Setting this policy may expose your network to attacks. This policy is intended as a temporary workaround for error code \"ERR_UNSAFE_PORT\" while migrating a service running on a blocked port to a standard port (for example port 80 or 443).\r\n\r\nMalicious websites can easily detect that this policy is set, and for which ports, then use that information to target attacks.\r\n\r\nEach port listed in this policy is labeled with a date that it can be unblocked until. After that date the port will be restricted regardless of if it's specified by the value of this policy.\r\n\r\nLeaving the value empty or unset means that all restricted ports will be blocked. Invalid port values set through this policy will be ignored while valid ones will still be applied.\r\n\r\nThis policy overrides the \"--explicitly-allowed-ports\" command-line option.\r\n\r\nPolicy options mapping:\r\n\r\n* 554 (554) = port 554 (can be unblocked until 2021/10/15)\r\n\r\n* 10080 (10080) = port 10080 (can be unblocked until 2022/04/01)\r\n\r\n* 6566 (6566) = port 6566 (can be unblocked until 2021/10/15)\r\n\r\n* 989 (989) = port 989 (can be unblocked until 2022/02/01)\r\n\r\n* 990 (990) = port 990 (can be unblocked until 2022/02/01)\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\n10080","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_1","displayName":"Enabled","description":null,"helpText":null}]},"669892711a4a8d89":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_javascriptjitblockedforsitesdesc","displayName":"Block JavaScript from using JIT on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"66c87c7e2e295de3":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction","displayName":"Enable or disable the User-Agent Reduction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_0","displayName":"User-Agent reduction will be controllable via Experimentation","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_1","displayName":"User-Agent reduction diabled, and not enabled by Experimentation","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_2","displayName":"User-Agent reduction will be enabled for all origins","description":null,"helpText":null}]},"669b91587d7d435b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastserviceservercapabilities6","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"66f53a9601730957":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoffcontacttablocation","displayName":"Remove Location Line (User)","description":"\r\nThis policy setting enables you to remove the Location line on the Contact Tab, which is on the Contact Card.\r\n\r\nIf you enable this policy setting, you can remove the Location line.\r\n\r\nIf you disable or do not configure this policy setting, the Location line appears on the Contact Tab.\r\n","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoffcontacttablocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoffcontacttablocation_1","displayName":"Enabled","description":null,"helpText":null}]},"664677333e53aa80":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehomeadd","displayName":"Replace AD - Home Address (User)","description":"This policy setting allows you to customize the 14th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"home address\" of line 14.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 14 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehomeadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehomeadd_1","displayName":"Enabled","description":null,"helpText":null}]},"6640c4b5389a1cc5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_l_workflowdescrip485","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"665a36fb5487ab4f":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\OneNote\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\OneNote\\Addins.\r\n\r\nYou can also obtain the ProgID of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"categoryId":"1ae8c95a-5748-4647-80f8-b447e60601a2","categoryName":"Add-ins","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"665cfff57cad1689":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_enableabilitytooptimizeonenotefiles_l_checktoenableabilitytooptimizeonenotefiles","displayName":"Check to enable ability to optimize OneNote files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_enableabilitytooptimizeonenotefiles_l_checktoenableabilitytooptimizeonenotefiles_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_enableabilitytooptimizeonenotefiles_l_checktoenableabilitytooptimizeonenotefiles_1","displayName":"True","description":null,"helpText":null}]},"66ce51958e54cd5d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailsetup_l_mailaccountoptions","displayName":"Mail account options (User)","description":"Send messages immediately when connected","helpText":"","infoUrls":[],"categoryId":"114356a4-dfc9-44e9-9a62-f1d601d48445","categoryName":"Mail Setup","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailsetup_l_mailaccountoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailsetup_l_mailaccountoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"6690de96d35f219a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_singlekeyreadingusingspacebar","displayName":"Single key reading using spacebar (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_singlekeyreadingusingspacebar_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_singlekeyreadingusingspacebar_1","displayName":"True","description":null,"helpText":null}]},"6680670549b69ec5":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15","displayName":"Trusted Location #15 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_1","displayName":"Enabled","description":null,"helpText":null}]},"66ed4bcabb073afc":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngsaltlength","displayName":"Specify CNG salt length (User)","description":"This policy setting allows you to specific the number of bytes of salt that should be used.\r\n\r\nIf you enable this policy setting, the bytes specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default length or 16 will be used.","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngsaltlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngsaltlength_1","displayName":"Enabled","description":null,"helpText":null}]},"66beba9933b23755":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_l_pathcolon24","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"666d367a594fd965":{"id":"user_vendor_msft_policy_config_windowsai_setdenyurilistforrecall","displayName":"Set Deny Uri List For Recall (User)","description":"This policy allows you to set a semicolon-separated list of uris which should not be collected in Recall Snapshots\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdenyurilistforrecall"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":null},"662adc6470ce0fd2":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuiminimumzoomlevel","displayName":"Set the minimum zoom level for expand / collapse on-object UI (User)","description":"This policy setting allows you to specify the minimum zoom level percentage at which point the expand/collapse on-object UI stops rendering. Regardless of the value specified for this policy setting, the expand / collapse feature is still available from the context menu for headings.\r\n\r\nIf you enable this policy setting, you can specify a minimum zoom level percentage from 0-500.\r\n\r\nIf you disable or do not configure this policy setting, the minimum zoom level is set to 50%.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuiminimumzoomlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuiminimumzoomlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"6681c1bf28640c63":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_l_word2003andplainxmldocumentsdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_l_word2003andplainxmldocumentsdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_l_word2003andplainxmldocumentsdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_l_word2003andplainxmldocumentsdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_l_word2003andplainxmldocumentsdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_l_word2003andplainxmldocumentsdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003andplainxmldocuments_l_word2003andplainxmldocumentsdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/67.json b/public/intune-definitions/67.json new file mode 100644 index 000000000000..b0b2cacba343 --- /dev/null +++ b/public/intune-definitions/67.json @@ -0,0 +1 @@ +{"674b4c870e7669f6":{"id":"com.android.devicerestrictionpolicy.workprofilewidgetsdefault","displayName":"Block widgets from work profile apps","description":"If 'True', prevents users from adding widgets exposed by work profile apps to the home screen. If set to 'False', Intune doesn't change or update this setting. By default, the OS might allow adding work profile widgets to the home screen. Available for corporate-owned work profile devices (at work profile level).","helpText":null,"infoUrls":[],"categoryId":"2257f7e1-3e88-4d4d-a666-437bbe42baca","categoryName":"Applications","options":[{"id":"com.android.devicerestrictionpolicy.workprofilewidgetsdefault_false","displayName":"False","description":"Work profile widgets are allowed. Users can add widgets exposed by work profile apps to the home screen.","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilewidgetsdefault_true","displayName":"True","description":"Work profile widgets are disallowed. Users cannot add widgets from work profile apps to the home screen.","helpText":null}]},"67b9947877f2c15b":{"id":"com.apple.applicationaccess_allowedexternalintelligenceworkspaceids","displayName":"Allowed External Intelligence Workspace IDs (Deprecated)","description":"An array of strings, but currently restricted to a single element. If present, Apple Intelligence allows use of only the given external integration workspace ID, and requires a sign-in to make requests. The user is required to sign in to integrations that support signing in. Multiple payloads combine using an intersect operation. This means the allowed set of workspace IDs can become the empty set if multiple payloads specify conflicting values.\n\nDeprecated: use the declarative management `com.apple.configuration.external-intelligence.settings` configuration.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"679d3ef56436383a":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_rangetype","displayName":"Range Type","description":"The type of day range.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":[{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_rangetype_0","displayName":"Weekday","description":null,"helpText":null},{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_rangetype_1","displayName":"Weekend","description":null,"helpText":null}]},"67bfe1febbe001a6":{"id":"com.apple.managedclient.preferences_edgeentracopilotpagecontext","displayName":"Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane","description":"This policy controls whether Copilot in the Microsoft Edge sidepane can access Microsoft Edge page content. This includes page summarization and similar contextual queries sent to Copilot.\n\nThis policy only applies to users who are signed in to Microsoft Edge with their Entra account and are using Copilot in the sidepane. This policy applies to all Copilot products in the Microsoft Edge sidepane - namely, Microsoft 365 Copilot Business Chat and Microsoft Copilot with enterprise data protection (EDP).\n\nIf you enable this policy, Copilot will be able to access Microsoft Edge page content when users ask a contextual query to Copilot in the Microsoft Edge sidepane.\n\nIf you disable this policy, Copilot will not be able to access Microsoft Edge page content.\n\nIf you don't configure this policy, the default behavior is as follows:\n\n- For non-EU countries, access is enabled by default.\n\n- For EU countries, access is disabled by default.\n\n- In both cases, if the policy is not configured, users can enable or disable Copilot access to Microsoft Edge page content using the toggle in Microsoft Edge settings.\n\nExceptions to the preceding behavior include when a page is protected using data loss prevention (DLP) measures. In that case, Copilot will not be able to access Microsoft Edge page content even when this policy is enabled. This behavior is to ensure the integrity of DLP.\n\nLearn more about Copilot's data usage and consent at https://go.microsoft.com/fwlink/?linkid=2288056","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeentracopilotpagecontext"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeentracopilotpagecontext_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeentracopilotpagecontext_true","displayName":"Enabled","description":null,"helpText":null}]},"67d2dc610615a735":{"id":"com.apple.managedclient.preferences_forcesync","displayName":"Force synchronization of browser data and do not show the sync consent prompt","description":"Forces data synchronization in Microsoft Edge. This policy also prevents the user from turning sync off.\n\nIf you don't configure this policy, users will be able to turn sync on or off. If you enable this policy, users will not be able to turn sync off.\n\nFor this policy to work as intended,\n\"BrowserSignin\" policy must not be configured, or must be set to enabled. If \"BrowserSignin\" is set to disabled, then \"ForceSync\" will not take affect.\n\n\"SyncDisabled\" must not be configured or must be set to False. If this is set to True, \"ForceSync\" will not take affect.\n\n0 = Do not automatically start sync and show the sync consent (default)\n1 = Force sync to be turned on for Azure AD/Azure AD-Degraded user profile and do not show the sync consent prompt","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forcesync"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forcesync_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forcesync_true","displayName":"Enabled","description":null,"helpText":null}]},"6720a3516d5b8786":{"id":"com.apple.managedclient.preferences_importbrowsersettings","displayName":"Allow importing of browser settings","description":"Allows users to import browser settings from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, browser settings aren't imported at first run, and users can’t import them manually.\n\nIf you don’t configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.\n\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importbrowsersettings"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importbrowsersettings_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importbrowsersettings_true","displayName":"Enabled","description":null,"helpText":null}]},"67911a80ecdf9802":{"id":"com.apple.mcxprinting_requireadmintoprintlocally","displayName":"Require Admin To Print Locally","description":"If true, requires an administrator password to print locally.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":[{"id":"com.apple.mcxprinting_requireadmintoprintlocally_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxprinting_requireadmintoprintlocally_true","displayName":"True","description":null,"helpText":null}]},"67605dce22f6c825":{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook","displayName":"Address Book","description":"Specifies the policies for contact information managed by the Contacts.app.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"67834ad26959c222":{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"6721d5dbbb707951":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder","displayName":"System Policy Documents Folder","description":"Allows the application to access files in the user's Documents folder.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"6787959ddfc8042a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.intranetfilelinksenabled","displayName":"Allow intranet zone file URL links from Microsoft Edge to open in Windows File Explorer","description":"This setting allows file URL links to intranet zone files from intranet zone HTTPS websites to open Windows File Explorer for that file or directory.\n\nIf you enable this policy, intranet zone file URL links originating from intranet zone HTTPS pages open Windows File Explorer to the parent directory of the file and select the file. Intranet zone directory URL links originating from intranet zone HTTPS pages open Windows File Explorer to the directory with no items in the directory selected.\n\nIf you disable or don't configure this policy, file URL links don't open.\n\nMicrosoft Edge uses the definition of intranet zone as configured for Internet Explorer. https://localhost/ is blocked as an exception of allowed intranet zone host, while loopback addresses (127.0.0.*, [::1]) are considered internet zone by default.\n\nUsers may opt out of prompts on a per-protocol/per-site basis unless the \"ExternalProtocolDialogShowAlwaysOpenCheckbox\" policy is disabled.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.intranetfilelinksenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.intranetfilelinksenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"676d17a397f7547f":{"id":"device_vendor_msft_defender_configuration_deploymentchannel","displayName":"Deployment Channel","description":"Enable this policy to specify when devices receive Microsoft Defender binary updates based on the chosen deployment channel rollout.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_deploymentchannel_0","displayName":"Not Configured (Default). If you don't configure this policy, devices are added to the release channel. Microsoft determines whether devices receive updates earlier or later within the release channel.","description":"Not Configured (Default). If you don't configure this policy, devices are added to the release channel. Microsoft determines whether devices receive updates earlier or later within the release channel.","helpText":null},{"id":"device_vendor_msft_defender_configuration_deploymentchannel_10","displayName":"Validation Channel: Devices set to this channel are the first to receive new monthly binary (platform and engine) updates. The likelihood of new issues occurring is higher, so add only devices with the highest risk tolerance to this channel (recommended for 1% or less of devices in your environment).","description":"Validation Channel: Devices set to this channel are the first to receive new monthly binary (platform and engine) updates. The likelihood of new issues occurring is higher, so add only devices with the highest risk tolerance to this channel (recommended for 1% or less of devices in your environment).","helpText":null},{"id":"device_vendor_msft_defender_configuration_deploymentchannel_20","displayName":"Release Channel - Early: The release channel is appropriate for most of your production environment. Devices set to this channel are offered updates earliest in the release channel. Distribute devices across early, fast and broad depending on their risk tolerance. Add devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.","description":"Release Channel - Early: The release channel is appropriate for most of your production environment. Devices set to this channel are offered updates earliest in the release channel. Distribute devices across early, fast and broad depending on their risk tolerance. Add devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.","helpText":null},{"id":"device_vendor_msft_defender_configuration_deploymentchannel_30","displayName":"Release Channel - Fast: The release channel is appropriate for most of your production environment. Devices are offered updates later during the gradual release cycle. Distribute devices across early, fast and broad depending on their risk tolerance. Use devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.","description":"Release Channel - Fast: The release channel is appropriate for most of your production environment. Devices are offered updates later during the gradual release cycle. Distribute devices across early, fast and broad depending on their risk tolerance. Use devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.","helpText":null},{"id":"device_vendor_msft_defender_configuration_deploymentchannel_40","displayName":"Release Channel - Broad: The release channel is appropriate for most of your production environment. Devices in this channel receive updates at the end of the gradual release cycle. Distribute devices across early, fast and broad depending on their risk tolerance. Use devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.","description":"Release Channel - Broad: The release channel is appropriate for most of your production environment. Devices in this channel receive updates at the end of the gradual release cycle. Distribute devices across early, fast and broad depending on their risk tolerance. Use devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.","helpText":null},{"id":"device_vendor_msft_defender_configuration_deploymentchannel_50","displayName":"Delayed Channel: Devices in this channel are offered updates approximately 48 hours after the devices in the release channel (broad). Use this channel for critical infrastructure and high value assets (~1% or less of devices).","description":"Delayed Channel: Devices in this channel are offered updates approximately 48 hours after the devices in the release channel (broad). Use this channel for critical infrastructure and high value assets (~1% or less of devices).","helpText":null}]},"6791f29234c3eeab":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_removable_deny","displayName":"Prevent installation of removable devices","description":"This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates that the device is removable. For example, a Universal Serial Bus (USB) device is reported to be removable by the drivers for the USB hub to which the device is connected. This policy setting takes precedence over any other policy setting that allows Windows to install a device.\r\n\r\nIf you enable this policy setting, Windows is prevented from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, Windows can install and update device drivers for removable devices as allowed or prevented by other policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-deviceinstallation#admx-deviceinstallation-deviceinstall-removable-deny"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_removable_deny_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_removable_deny_1","displayName":"Enabled","description":null,"helpText":null}]},"67f673abd05ded53":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverriderealtimescandirection","displayName":"Configure local setting override for monitoring for incoming and outgoing file activity","description":"This policy setting configures a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverriderealtimescandirection"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverriderealtimescandirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverriderealtimescandirection_1","displayName":"Enabled","description":null,"helpText":null}]},"67210bcc0842467b":{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist","displayName":"Remove All Programs list from the Start menu","description":"If you enable this setting, the Start Menu will either collapse or remove the all apps list from the Start menu.\r\n\r\nSelecting \"Collapse\" will not display the app list next to the pinned tiles in Start. An \"All apps\" button will be displayed on Start to open the all apps list. This is equivalent to setting the \"Show app list in Start\" in Settings to Off.\r\n\r\nSelecting \"Collapse and disable setting\" will do the same as the collapse option and disable the \"Show app list in Start menu\" in Settings, so users cannot turn it to On.\r\n\r\nSelecting \"Remove and disable setting\" will remove the all apps list from Start and disable the \"Show app list in Start menu\" in Settings, so users cannot turn it to On. Select this option for compatibility with earlier versions of Windows.\r\n\r\nIf you disable or do not configure this setting, the all apps list will be visible by default, and the user can change \"Show app list in Start\" in Settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nomoreprogramslist"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_1","displayName":"Enabled","description":null,"helpText":null}]},"67994f4881997886":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxmonitor","displayName":"Limit number of monitors","description":"This policy setting allows you to limit the number of monitors that a user can use to display a Remote Desktop Services session. Limiting the number of monitors to display a Remote Desktop Services session can improve connection performance, particularly over slow links, and reduce server load.\r\n\r\nIf you enable this policy setting, you can specify the number of monitors that can be used to display a Remote Desktop Services session. You can specify a number from 1 to 16.\r\n\r\nIf you disable or do not configure this policy setting, the number of monitors that can be used to display a Remote Desktop Services session is not specified at the Group Policy level.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-maxmonitor"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxmonitor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_maxmonitor_1","displayName":"Enabled","description":null,"helpText":null}]},"671d5737a96d0b5b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist","displayName":"Configure native messaging whitelist","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"67060174436b85bc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins","displayName":"Allow Window and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Window and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: TabCaptureAllowedByOrigins, SameOriginTabCaptureAllowedByOrigins.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"67f94e44c8f8a940":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled","displayName":"Control the visibility of the extension attribution on the New Tab page","description":"This policy determines whether an attribution to the extension modifying the New Tab Page (NTP) is displayed in the NTP's footer.\r\n\r\nBy default, if an extension has overridden the standard NTP, a message attributing this change to the specific extension will appear in the footer. This attribution typically includes a link to the relevant extension in the Chrome Web Store.\r\n\r\nIf this policy is left unset or set to true, the extension attribution will be visible on the NTP footer when an extension is controlling the NTP.\r\n\r\nIf this policy is set to false, the attribution to the extension in the NTP footer will be suppressed.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"677d55e484db475f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled","displayName":"Enable Renderer App Container","description":"Setting the policy to Enabled or leaving it unset means Renderer App Container configuration will be enabled on supported platforms.\r\n\r\nSetting the policy to Disabled has a detrimental effect on the security and stability of Google Chrome as it will weaken the sandbox that renderer processes use. Only turn off the policy if there are compatibility issues with third-party software that must run inside renderer processes.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"671b9f31e900be1f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls","displayName":"Block Window Placement permission on these sites","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"675485532188cc47":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication","displayName":"Allow PIN and pairing authentication methods for remote access hosts","description":"Setting the policy to Enabled allows the remote access host to use PIN and pairing authentications when accepting client connections.\r\n\r\nSetting the policy to Disabled disallows PIN or pairing authentications.\r\n\r\nLeaving it unset lets the host decide whether PIN and/or pairing authentications can be used.\r\n\r\nNote: If the setting results in no mutually supported authentication methods by both the host and the client, then the connection will be rejected.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},"673e64e7f77e7375":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"677db49cada800cc":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer","displayName":"Profile Container","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Profile Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Profile\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer_1","displayName":"Enabled","description":null,"helpText":null}]},"676e43eef63e3bd1":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowsmartscreenie"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"679699933e2f9957":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode","displayName":"Turn on Protected Mode","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://learn.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneenableprotectedmode"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"67e6254c4e801c4b":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers","displayName":"Microsoft Network Client Send Unencrypted Password To Third Party SMB Servers","description":"Microsoft network client: Send unencrypted password to connect to third-party SMB servers If this security setting is enabled, the Server Message Block (SMB) redirector is allowed to send plaintext passwords to non-Microsoft SMB servers that do not support password encryption during authentication. Sending unencrypted passwords is a security risk. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers_0","displayName":"Disable","description":"Disable","helpText":null}]},"67c7e13377f15740":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors","description":"The X.509 key usage extension declares how the key in a certificate can be\r\nused. These instructions ensure certificates aren't used in an unintended\r\ncontext, which protects against a class of cross-protocol attacks on HTTPS and\r\nother protocols. HTTPS clients must verify that server certificates match the\r\nconnection's TLS parameters.\r\n\r\nIf this policy is enabled,\r\nMicrosoft Edge will perform this key\r\ncheck. This helps prevent attacks where an attacker manipulates the browser into\r\ninterpreting a key in ways that the certificate owner did not intend.\r\n\r\nIf this policy is set to disabled or not configured,\r\nMicrosoft Edge will skip this key check in\r\nHTTPS connections that negotiate TLS 1.2 and use an RSA certificate that\r\nchains to a local trust anchor. Examples of local trust anchors include\r\npolicy-provided or user-installed root certificates. In all other cases, the\r\ncheck is performed independent of this policy's setting.\r\n\r\nThis policy is available for administrators to preview the behavior of a\r\nfuture release, which will enable this check by default. At that point, this\r\npolicy will remain temporarily available for administrators that need more\r\ntime to update their certificates to meet the new RSA key usage requirements.\r\n\r\nConnections that fail this check will fail with the error\r\nERR_SSL_KEY_USAGE_INCOMPATIBLE. Sites that fail with this error likely have a\r\nmisconfigured certificate. Modern ECDHE_RSA cipher suites use the\r\n\"digitalSignature\" key usage option, while legacy RSA decryption cipher suites\r\nuse the \"keyEncipherment\" key usage option. If uncertain, administrators should\r\ninclude both in RSA certificates meant for HTTPS.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"677243267afe3c43":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled","displayName":"Enable keyboard focusable scrollers","description":"This policy provides a temporary opt-out for the new keyboard focusable scrollers behavior.\r\n\r\nWhen this policy is Enabled or unset, scrollers without focusable children are keyboard focusable by default.\r\n\r\nWhen this policy is Disabled, scrollers are not keyboard focusable by default.\r\n\r\nThis policy is a temporary workaround and will be removed in Edge Stable 135.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"67670f759c0c2b32":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites_javascriptoptimizerallowedforsitesdesc","displayName":"Allow JavaScript optimization on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"675ef408422f4ded":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_onenoteexe110","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_onenoteexe110_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_onenoteexe110_1","displayName":"True","description":null,"helpText":null}]},"676f38a9d9e03c81":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_blockexternallistsync","displayName":"Blocks syncing of external lists via Lists sync","description":"\r\n Enabling this setting prevents users at your organization from syncing lists that are shared from other organizations. After the setting is enabled (value 1) on a computer, lists shared from other organizations won't sync. Disable the setting (value 0) to allow your users to sync external lists.\r\n\r\n ","helpText":"","infoUrls":[],"categoryId":"7fc23813-7a7c-412a-b9bd-eda07e6b1f5d","categoryName":"List Sync","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_blockexternallistsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_blockexternallistsync_1","displayName":"Enabled","description":null,"helpText":null}]},"6722aa36d6b1e787":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy","displayName":"Update policy override default","description":"Lets you specify the default behavior for all channels concerning the way Microsoft Edge Update handles available updates for Microsoft Edge. Can be overridden for individual channels by specifying the 'Update policy override' policy for those specific channels.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check.\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override' policy.","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"67c0fed3fc14333c":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},"67199d3887d1563a":{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol","displayName":"Control updater's communication with the Experimentation and Configuration Service","description":"In Microsoft Edge Update, the Experimentation and Configuration Service is used to deploy experimentation payload.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nIf you enable this policy, experimentation payload is downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you disable this policy, communication with the Experimentation and Configuration Service is stopped completely.\r\n\r\nIf you don't configure this policy, on a managed device the behavior is same as policy 'disabled'.\r\n\r\nIf you don't configure this policy, on an unmanaged device the behavior is same as policy 'enabled'.","helpText":"","infoUrls":[],"categoryId":"d4943981-47b2-4a86-848b-860e8ca47381","categoryName":"Microsoft Edge Update","options":[{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"67aab66fa8bc482a":{"id":"device_vendor_msft_policy_config_windowsai_allowrecallexport","displayName":"Allow Recall Export","description":"This policy allows you to determine whether users can export their own Recall and snapshot information. Exporting allows users to share their Recall and snapshot information with trusted apps or websites. Users can export from Settings > Privacy & security > Recall & snapshots > Advanced settings > Export snapshots > Export past snapshots > Export. Users can also choose to continuously export their snapshots if they turn on the option to Export snapshots from now on from Settings > Privacy & security > Recall & snapshots > Advanced settings > Export snapshots > Export. Before starting an export, the user must authenticate with Windows Hello and they are notified that their exported snapshots are encrypted since they might contain sensitive information. The user is also notified that they'll need to provide their Recall export code if they want to allow trusted apps or websites access to exported snapshots. The Recall export code is displayed to users during Recall setup even if this policy is set to disabled or not configured. For managed devices: When you set this policy to enabled, users will be able to export Recall and snapshot information. If the policy is set to disabled or not configured, users won't be able to export their Recall and snapshot information. Important: This setting applies to devices in the European Economic Area (EEA) only. Export of Recall and snapshot information is a user-initiated process and is per user. IT admins or other users can't initiate an export on behalf of another.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#allowrecallexport"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_allowrecallexport_0","displayName":"Deny export of Recall and snapshots information","description":"Deny export of Recall and snapshots information","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_allowrecallexport_1","displayName":"Allow export of Recall and snapshot information","description":"Allow export of Recall and snapshot information","helpText":null}]},"67d918fcbe51c016":{"id":"intelligencesettings_allowvisualintelligencesummary","displayName":"Allow Visual Intelligence Summary","description":"If `false`, disables Visual Intelligence Summary.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_allowvisualintelligencesummary_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_allowvisualintelligencesummary_true","displayName":"True","description":null,"helpText":null}]},"676704763a8df654":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allownetworkaccess","displayName":"Allow network access","description":"Controls whether the contained agent is allowed to access the network. 0=blocked, 1=allowed.","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":[{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allownetworkaccess_0","displayName":"Disabled","description":"Network access is blocked","helpText":null},{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allownetworkaccess_1","displayName":"Enabled","description":"Network access is allowed","helpText":null}]},"67607f3f68359607":{"id":"user_vendor_msft_policy_config_browser_setdefaultsearchengine","displayName":"Set Default Search Engine (User)","description":"Sets the default search engine for MDM-enrolled devices. Users can still change their default search engine. If this setting is turned on, you are setting the default search engine that you would like your employees to use. Employees can still change the default search engine, unless you apply the AllowSearchEngineCustomization policy which will disable the ability to change it. You must specify a link to the OpenSearch XML file that contains, at minimum, the short name and the URL to the search engine. If you would like for your employees to use the Edge factory settings for the default search engine for their market, set the string EDGEDEFAULT; if you would like for your employees to use Bing as the default search engine, set the string EDGEBING. If this setting is not configured, the default search engine is set to the one specified in App settings and can be changed by your employees. If this setting is disabled, the policy-set search engine will be removed, and, if it is the current default, the default will be set back to the factory Microsoft Edge search engine for the market. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#setdefaultsearchengine"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"67b0a858b990b1bb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (User)","description":"Unless SafeBrowsingEnabled is set to False, then setting AdsSettingForIntrusiveAdsSites to 1 or leaving it unset allows ads on all sites.\r\n\r\nSetting the policy to 2 blocks ads on sites with intrusive ads.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_1","displayName":"Enabled","description":null,"helpText":null}]},"6792da6b241db3d9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_maxinvalidationfetchdelay","displayName":"Maximum fetch delay after a policy invalidation: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"67f38735e1220381":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_runallflashinallowmode","displayName":"Extend Flash content setting to all content (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_runallflashinallowmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_runallflashinallowmode_1","displayName":"Enabled","description":null,"helpText":null}]},"67c7de2ba927fae9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup","displayName":"Action on startup (User)","description":"Setting the policy lets you specify system behavior on startup. Turning this setting off amounts to leaving it unset as Google Chrome must have specified start up behavior.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can change it.\r\n\r\nSetting this policy to RestoreOnStartupIsLastSession turns off some settings that rely on sessions or that perform actions on exit, such as clearing browsing data on exit or session-only cookies.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"676370932ecde5f0":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedstorageinfoenabled","displayName":"Re-enable the deprecated window.webkitStorageInfo API (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedstorageinfoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedstorageinfoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"67450d7da1ac6a19":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles","displayName":"Excel 2007 and later add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"67237e0a1f1af26e":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols","displayName":"Download signed ActiveX controls (User)","description":"This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\n\nIf you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.\n\nIf you disable the policy setting, signed controls cannot be downloaded.\n\nIf you do not configure this policy setting, signed controls cannot be downloaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedownloadsignedactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"677c3bebd9fa052c":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowautomaticpromptingforactivexcontrols"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"6794657f5f611232":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"67cab8ee1e3296ed":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu","displayName":"Show context menu to open a link in Internet Explorer mode (User)","description":"This policy controls the visibility of the 'Open link in new Internet Explorer mode tab' option on the context menu for file:// links.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nIf you set this policy to true, the 'Open link in new Internet Explorer mode tab' context menu item will be available for file:// links.\r\n\r\nIf you set this policy to false or don't configure it, the context menu item will not be added.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"676e7b37db948775":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy7_l_placesbarpath222","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"67d8f1cae13e6ad1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc11_l_pathcolon11","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"67d68486146f62d2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog02","displayName":"Trusted Catalog Location #2 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog02_1","displayName":"Enabled","description":null,"helpText":null}]},"67e2b08d80a457b6":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_loadanotebookonfirstboot_l_empty13","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":null},"67b6fc3d825a00ac":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi_l_chooseadefaultformatfornewpsts","displayName":"Choose a default format for new PSTs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi_l_chooseadefaultformatfornewpsts_0","displayName":"Prefer Unicode PST","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi_l_chooseadefaultformatfornewpsts_1","displayName":"Prefer ANSI PST","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi_l_chooseadefaultformatfornewpsts_2","displayName":"Enforce Unicode PST","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi_l_chooseadefaultformatfornewpsts_3","displayName":"Enforce ANSI PST","description":null,"helpText":null}]},"6759a78472027190":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_l_useenglishformessageheadersonrepliesorforwards","displayName":"Use English for message headers on replies or forwards (User)","description":"","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_l_useenglishformessageheadersonrepliesorforwards_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_l_useenglishformessageheadersonrepliesorforwards_1","displayName":"True","description":null,"helpText":null}]},"6783fac3a253b8d3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_closeoriginalmessagewhenreplyorforward","displayName":"Close original message when reply or forward (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_closeoriginalmessagewhenreplyorforward_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_closeoriginalmessagewhenreplyorforward_1","displayName":"True","description":null,"helpText":null}]},"67a222528f0f66fc":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportticketcreationinoutlook","displayName":"Disable support ticket creation in Outlook (User)","description":"This policy setting determines if an Outlook support ticket can be created in Outlook.\r\n\r\nIf you enable this policy setting, users will be unable to create a support ticket in Outlook.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportticketcreationinoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportticketcreationinoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"6739d3ff2f39dd8a":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_l_selectlevel","displayName":"Select level: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_l_selectlevel_4294967295","displayName":"No Protection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_l_selectlevel_6","displayName":"Low (Default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_l_selectlevel_3","displayName":"High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_l_selectlevel_2147483648","displayName":"Trusted Lists Only","description":null,"helpText":null}]},"6703f55c67f760b2":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_defaultbuiltintab","displayName":"Default tab to show in Visio on the Office Start screen and in File | New (User)","description":"This policy setting controls what displays as the default tab in Visio on the Office Start screen and in File | New. \r\n\r\nIf you enable this policy setting, you can choose one of two options to become the default tab on the Office Start screen and in File | New:\r\n\r\n* Built-in – Users will the see built-in templates tab as the default tab in Visio on the Office Start screen and in File | New.\r\n\r\n* Custom – Users will the see custom templates tab as the default tab in Visio on the Office Start screen and in File | New when templates exist (this can include Custom XML programmed templates, templates in the Workgroup templates path, templates in the Personal templates path, or SharePoint templates).\r\n\r\nIf you disable or do not configure this policy setting, users will see the Featured templates tab as the default tab in Visio on the Office Start screen and in File | New","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_defaultbuiltintab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_defaultbuiltintab_1","displayName":"Enabled","description":null,"helpText":null}]},"673aa4b6e8e88610":{"id":"user_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog","displayName":"Disable the send-a-smile feature (User)","description":"This policy disables the Visual Studio send-a-smile feature.","helpText":"","infoUrls":[],"categoryId":"802f3065-0bf1-4578-9d6d-ab1ef02db3ec","categoryName":"Feedback Settings","options":[{"id":"user_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog_1","displayName":"Enabled","description":null,"helpText":null}]},"672b3b77ebdf63e3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_descriptioncolon38","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/68.json b/public/intune-definitions/68.json new file mode 100644 index 000000000000..941917b78255 --- /dev/null +++ b/public/intune-definitions/68.json @@ -0,0 +1 @@ +{"68305cd01a4a6a24":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_application id","displayName":"Microsoft Edge Beta Application ID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"683377652aab2a19":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_application id","displayName":"Microsoft Excel Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"68f35b1dcd8e45a2":{"id":"com.apple.managedclient.preferences_createpasskeysinicloudkeychain","displayName":"Control whether passkey creation will default to iCloud Keychain.","description":"Microsoft Edge may direct\npasskey/WebAuthn creation requests directly to iCloud Keychain on macOS 13.5\nor later. If iCloud Keychain syncing is not enabled yet, this will\nprompt the user to sign in with iCloud, or might prompt them to enable iCloud\nKeychain syncing.\n\nIf this policy is set to \"true\" then iCloud Keychain will be the default\nwhenever the WebAuthn request is compatible with that choice.\n\nIf this policy isn't set then the default behavior depends on factors such as\nwhether iCloud Drive is enabled, or whether the user has recently used or\ncreated a credential in their\nMicrosoft Edge profile.\n\nIf this policy is set to false, iCloud Keychain will not be used by default\nand the previous behavior (of creating the credential in the Microsoft Edge profile) may be used\ninstead. Users will still be able to select iCloud Keychain as an option, and\nmay still see iCloud Keychain credentials when signing in.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#createpasskeysinicloudkeychain"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_createpasskeysinicloudkeychain_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_createpasskeysinicloudkeychain_true","displayName":"Enabled","description":null,"helpText":null}]},"68817aa995fc593c":{"id":"com.apple.managedclient.preferences_defaultpluginssetting","displayName":"Default Adobe Flash setting","description":"Determines whether websites that aren't covered by \"PluginsAllowedForUrls\" or \"PluginsBlockedForUrls\" can automatically run the Adobe Flash plug-in. You can select 'BlockPlugins' (2) to block Adobe Flash on all sites, or you can select 'ClickToPlay' (3) to let Adobe Flash run but require the user to click the placeholder to start it. In any case, the \"PluginsAllowedForUrls\" and \"PluginsBlockedForUrls\" policies take precedence over 'DefaultPluginsSetting'.\n\nAutomatic playback is only allowed for domains explicitly listed in the \"PluginsAllowedForUrls\" policy. If you want to enable automatic playback for all sites, consider adding http://* and https://* to this list.\n\nIf you don't configure this policy, the user can change this setting manually.\n\n* 2 = Block the Adobe Flash plug-in\n\n* 3 = Click to play\n\nThe former '1' option set allow-all, but this functionality is now only handled by the \"PluginsAllowedForUrls\" policy. Existing policies using '1' will operate in Click-to-play mode.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultpluginssetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultpluginssetting_0","displayName":"Block the Adobe Flash plugin","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultpluginssetting_1","displayName":"Click to play","description":null,"helpText":null}]},"6821521203f0df05":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_automatic restart on power loss","displayName":"Automatic Restart On Power Loss","description":"If true, enables \"Start up automatically after a power failure.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_automatic restart on power loss_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_automatic restart on power loss_1","displayName":"True","description":null,"helpText":null}]},"686dae8404093ddc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpallowlist","displayName":"HTTP Allowlist","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as '[*.]example.com') that won't be upgraded to HTTPS. Organizations can use this policy to maintain access to servers that don't support HTTPS, without needing to disable \"HttpsUpgradesEnabled\".\n\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase.\n\nBlanket host wildcards (that is, \"*\" or \"[*]\") aren't allowed. Instead, HTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their specific policies.\n\nNote: This policy doesn't apply to HSTS upgrades.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"6809b38fe9015b7d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter","displayName":"Set the system default printer as the default printer","description":"Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer.\n\nIf you disable this policy or don't configure it, Print Preview uses the most recently used printer as the default destination choice.\n\nIf you enable this policy, Print Preview uses the OS system default printer as the default destination choice.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_true","displayName":"Enabled","description":null,"helpText":null}]},"68fbce15805ad6bf":{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartscreenfortrusteddownloadsenabled_recommended","displayName":"Force Microsoft Defender SmartScreen checks on downloads from trusted sources (users can override)","description":"This policy setting lets you configure whether Microsoft Defender SmartScreen checks download reputation from a trusted source.\n\nIn Windows, the policy determines a trusted source by checking its Internet zone. If the source comes from the local system, intranet, or trusted sites zone, then the download is considered trusted and safe.\n\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen checks the download's reputation regardless of source.\n\nIf you disable this setting, Microsoft Defender SmartScreen doesn't check the download's reputation when downloading from a trusted source.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management.","helpText":null,"infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartscreenfortrusteddownloadsenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartscreenfortrusteddownloadsenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"6873d4c4ee170b12":{"id":"device_vendor_msft_bitlocker_fixeddrivesrequireencryption","displayName":"Deny write access to fixed drives not protected by BitLocker","description":"This policy setting determines whether BitLocker protection is required for fixed data drives to be writable on a computer.\n\nIf you enable this policy setting, all fixed data drives that are not BitLocker-protected will be mounted as read-only. If the drive is protected by BitLocker, it will be mounted with read and write access.\n\nIf you disable or do not configure this policy setting, all fixed data drives on the computer will be mounted with read and write access.\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrequireencryption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrequireencryption_1","displayName":"Enabled","description":null,"helpText":null}]},"681445b1cb245aae":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehighprioritylimit","displayName":"High Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"6826094b125043f8":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":null},"681f240707110faf":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_userpolicymode_userpolicymodeop","displayName":"Mode:","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_userpolicymode_userpolicymodeop_1","displayName":"Merge","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_userpolicymode_userpolicymodeop_2","displayName":"Replace","description":null,"helpText":null}]},"683413b065e60c13":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_realtimesignaturedelivery","displayName":"Allow real-time security intelligence updates based on reports to Microsoft MAPS","description":"This policy setting allows you to enable real-time security intelligence updates in response to reports sent to Microsoft MAPS. If the service reports a file as an unknown and Microsoft MAPS finds that the latest security intelligence update has security intelligence for a threat involving that file, the service will receive all of the latest security intelligence for that threat immediately. You must have configured your computer to join Microsoft MAPS for this functionality to work.\r\n\r\n If you enable or do not configure this setting, real-time security intelligence updates will be enabled.\r\n\r\n If you disable this setting, real-time security intelligence updates will disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-realtimesignaturedelivery"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_realtimesignaturedelivery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_realtimesignaturedelivery_1","displayName":"Enabled","description":null,"helpText":null}]},"682d98fe856c0079":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_default_qualified","displayName":"Set Teredo Default Qualified","description":"This policy setting allows you to set Teredo to be ready to communicate, a process referred to as qualification. By default, Teredo enters a dormant state when not in use. The qualification process brings it out of a dormant state.\r\n\r\nIf you disable or do not configure this policy setting, the local host setting is used.\r\n\r\nThis policy setting contains only one state:\r\n\r\nPolicy Enabled State: If Default Qualified is enabled, Teredo will attempt qualification immediately and remain qualified if the qualification process succeeds.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-teredo-default-qualified"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_default_qualified_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_default_qualified_1","displayName":"Enabled","description":null,"helpText":null}]},"68d9c75ce1263479":{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections_wcm_minimizeconnections_options","displayName":"Minimize Policy Options","description":null,"helpText":"","infoUrls":[],"categoryId":"d4c9d046-a8c0-46f0-bd62-bc4d1614e891","categoryName":"Windows Connection Manager","options":[{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections_wcm_minimizeconnections_options_0","displayName":"0 = Allow simultaneous connections","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections_wcm_minimizeconnections_options_1","displayName":"1 = Minimize simultaneous connections","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections_wcm_minimizeconnections_options_2","displayName":"2 = Stay connected to cellular","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_minimizeconnections_wcm_minimizeconnections_options_3","displayName":"3 = Prevent Wi-Fi when on Ethernet","description":null,"helpText":null}]},"682ea9c151488644":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributesdetails","displayName":"File Attributes","description":"Creates a rule for attributes of a selected file.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_filename","displayName":"Original file name","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_filedescription","displayName":"File description","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_productname","displayName":"Minimum version","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_internalname","displayName":"Internal name","description":null,"helpText":null}]},"68f010367d987a58":{"id":"device_vendor_msft_policy_config_appvirtualization_allowreportingserver","displayName":"Reporting Server","description":"Reporting Server URL: Displays the URL of reporting server.\n\n Reporting Time: When the client data should be reported to the server. Acceptable range is 0~23, corresponding to the 24 hours in a day. A good practice is, don't set this time to a busy hour, e.g. 9AM.\n \n Delay reporting for the random minutes: The maximum minutes of random delay on top of the reporting time. For a busy system, the random delay will help reduce the server load.\n \n Repeat reporting for every (days): The periodical interval in days for sending the reporting data.\n \n Data Cache Limit: This value specifies the maximum size in megabytes (MB) of the XML cache for storing reporting information. The default value is 20 MB. The size applies to the cache in memory. When the limit is reached, the log file will roll over. When a new record is to be added (bottom of the list), one or more of the oldest records (top of the list) will be deleted to make room. A warning will be logged to the Client log and the event log the first time this occurs, and will not be logged again until after the cache has been successfully cleared on transmission and the log has filled up again.\n\n Data Block Size: This value specifies the maximum size in bytes to transmit to the server at once on a reporting upload, to avoid permanent transmission failures when the log has reached a significant size. The default value is 65536. When transmitting report data to the server, one block at a time of application records that is less than or equal to the block size in bytes of XML data will be removed from the cache and sent to the server. Each block will have the general Client data and global package list data prepended, and these will not factor into the block size calculations; the potential exists for an extremely large package list to result in transmission failures over low bandwidth or unreliable connections.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowreportingserver"],"categoryId":"e7cc16d8-f74f-4cd7-890d-9b4082a19c39","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowreportingserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowreportingserver_1","displayName":"Enabled","description":null,"helpText":null}]},"688b15730904088f":{"id":"device_vendor_msft_policy_config_camera_configurecameraoptions","displayName":"Configure Camera Options","description":"This policy will allow camera mode to be managed by IT admins and enable camera to run in safe or auto share mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Camera#configurecameraoptions"],"categoryId":"18893f00-c309-4695-bcaf-b66286ad99c1","categoryName":"Camera","options":[{"id":"device_vendor_msft_policy_config_camera_configurecameraoptions_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_camera_configurecameraoptions_1","displayName":"AutoShare - Allow camera access by multiple applications simultaneously.","description":"AutoShare - Allow camera access by multiple applications simultaneously.","helpText":null},{"id":"device_vendor_msft_policy_config_camera_configurecameraoptions_2","displayName":"SafeMode - The camera is configured to auto‑share and operate in a non‑accelerated mode, bypassing OEM/IHV‑provided plugins where applicable.","description":"SafeMode - The camera is configured to auto‑share and operate in a non‑accelerated mode, bypassing OEM/IHV‑provided plugins where applicable.","helpText":null}]},"68017dd048d4bbc2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks","displayName":"Managed Bookmarks","description":"Setting the policy sets up a list of bookmarks where each one is a dictionary with the keys \"name\" and \"url\". These keys hold the bookmark's name and target. Admins can set up a subfolder by defining a bookmark without a \"url\" key, but with an additional \"children\" key. This key also has a list of bookmarks, some of which can also be folders. Chrome amends incomplete URLs as if they were submitted through the address bar. For example, \"google.com\" becomes \"https://google.com/\".\r\n\r\nUsers can't change the folders the bookmarks are placed in (though they can hide it from the bookmark bar). The default folder name for managed bookmarks is \"Managed bookmarks\" but it can be changed by adding a new sub-dictionary to the policy with a single key named \"toplevel_name\" with the desired folder name as its value. Managed bookmarks are not synced to the user account and extensions can't modify them.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"toplevel_name\": \"My managed bookmarks folder\"\r\n },\r\n {\r\n \"name\": \"Google\",\r\n \"url\": \"google.com\"\r\n },\r\n {\r\n \"name\": \"Youtube\",\r\n \"url\": \"youtube.com\"\r\n },\r\n {\r\n \"name\": \"Chrome links\",\r\n \"children\": [\r\n {\r\n \"name\": \"Chromium\",\r\n \"url\": \"chromium.org\"\r\n },\r\n {\r\n \"name\": \"Chromium Developers\",\r\n \"url\": \"dev.chromium.org\"\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_1","displayName":"Enabled","description":null,"helpText":null}]},"683f1701c6a8e66d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl","displayName":"Default search provider icon","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderIconURL specifies the default search provider's favorite icon URL.\r\n\r\nLeaving DefaultSearchProviderIconURL unset means there's no icon for the search provider.\r\n\r\nExample value: https://search.my.company/favicon.ico","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_1","displayName":"Enabled","description":null,"helpText":null}]},"68fc5b9da60549b7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled","displayName":"DataURL Whitespace Preservation for all media types","description":"This policy provides a temporary opt-out for changes to how Chrome handles whitepsace in data URLS.\r\nPreviously, whitespace would be kept only if the top level media type was text or contained the media type string xml.\r\nNow, whitespace will be preserved in all data URLs, regardless of media type.\r\n\r\nIf this policy is left unset or is set to True, the new behavior is enabled.\r\n\r\nWhen this policy is set to False, the old behavior is enabled.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6819a0c020f9b6bf":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelayforegrounddownloadfromhttp","displayName":"DO Delay Foreground Download From Http","description":"For foreground downloads that use P2P, specifies the time to wait before starting to download from the HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelayforegrounddownloadfromhttp"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"682672ebc4963a96":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"683ddfe8eba82409":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"68b89d1ea882cc6a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation","displayName":"Configure the home page URL","description":"Configures the default home page URL in Microsoft Edge.\r\n\r\nThe home page is the page opened by the Home button. The pages that open on startup are controlled by the 'RestoreOnStartup' (Action to take on startup) policies.\r\n\r\nYou can either set a URL here or set the home page to open the new tab page. If you select to open the new tab page, then this policy doesn't take effect.\r\n\r\nIf you enable this policy, users can't change their home page URL, but they can choose to use the new tab page as their home page.\r\n\r\nIf you disable or don't configure this policy, users can choose their own home page, as long as the 'HomepageIsNewTabPage' (Set the new tab page as the home page) policy isn't enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value: https://www.contoso.com","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"68f5f355b335c615":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled","displayName":"Microsoft Edge management extensions feedback enabled","description":"This setting controls whether Microsoft Edge sends data about blocked extensions to the Microsoft Edge management service.\r\n\r\nThe 'EdgeManagementEnabled' policy must also be enabled for this setting to take effect.\r\n\r\nIf you enable this policy, Microsoft Edge will send data to the Microsoft Edge service when a user tries to install a blocked extension.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge won't send any data to the Microsoft Edge service about blocked extensions.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"683d6304c8e692a4":{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains","displayName":"Configure the list of domains where Microsoft Edge scareware blocker won't run","description":"This policy configures the list of trusted domains for Microsoft Edge scareware blocker. When a website's source URL matches any domain in this list, Edge scareware blocker won’t analyze that site.\r\n\r\nThis policy takes effect only if the ScarewareBlockerProtectionEnabled policy is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge scareware blocker will trust the specified domains.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge scareware blocker will analyze all sites.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"683618421fcafa55":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_visioexe19","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_visioexe19_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_visioexe19_1","displayName":"True","description":null,"helpText":null}]},"68a12cee11282deb":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_spdesignexe121","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_spdesignexe121_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_spdesignexe121_1","displayName":"True","description":null,"helpText":null}]},"68a5309d3f3f3789":{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown","displayName":"Show notification to users after folders have been redirected: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_0","displayName":"No","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_1","displayName":"Yes","description":null,"helpText":null}]},"6803f8065bbe90b7":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels_userincontroloftheseapps","displayName":"Let Apps Access System AI Models User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the text and image generation setting for the listed apps. This setting overrides the default LetAppsAccessSystemAIModels policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"687ade7ea4e7a942":{"id":"device_vendor_msft_policy_config_search_allowcloudsearch","displayName":"Allow Cloud Search","description":"Allow search and Cortana to search cloud sources like OneDrive and SharePoint. This policy allows corporate administrators to control whether employees can turn off/on the search of these cloud sources. The default policy value is to allow employees access to the setting that controls search of cloud sources.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowcloudsearch"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_allowcloudsearch_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowcloudsearch_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"68fccfb88744224a":{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol","displayName":"Enable App Install Control","description":"This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-smartscreen#enableappinstallcontrol"],"categoryId":"3f61a5fe-8508-44dd-bcf0-83273643026a","categoryName":"Smart Screen","options":[{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_0","displayName":"Disable","description":"Turns off Application Installation Control, allowing users to download and install files from anywhere on the web.","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_1","displayName":"Enable","description":"Turns on Application Installation Control, allowing users to only install apps from the Store.","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_2","displayName":"Turns on Application Installation Control, letting users know that there's a comparable app in the Store","description":"Turns on Application Installation Control, letting users know that there's a comparable app in the Store","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_3","displayName":"Turns on Application Installation Control, warning users before installing apps from outside the Store","description":"Turns on Application Installation Control, warning users before installing apps from outside the Store","helpText":null}]},"68535ec750419c92":{"id":"device_vendor_msft_policy_config_windowsai_disableimagecreator","displayName":"Disable Image Creator","description":"This policy setting allows you to control whether Image Creator functionality is disabled in the Windows Paint app. If this policy is enabled, Image Creator functionality will not be accessible in the Paint app. If this policy is disabled or not configured, users will be able to access Image Creator functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableimagecreator"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disableimagecreator_0","displayName":"Image Creator is enabled.","description":"Image Creator is enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableimagecreator_1","displayName":"Image Creator is disabled.","description":"Image Creator is disabled.","helpText":null}]},"684ca69e1d7c73f0":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enableinappcustomization","displayName":"Enable In App Customization","description":"Enable this policy to have your company name and contact options displayed in a contact card fly out in Windows Defender Security Center. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will not display the contact card fly out notification. Value type is integer. Supported operations are Add, Get, Replace, and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#enableinappcustomization"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enableinappcustomization_0","displayName":"(Disable) Do not display the company name and contact options in the card fly out notification.","description":"(Disable) Do not display the company name and contact options in the card fly out notification.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enableinappcustomization_1","displayName":"(Enable) Display the company name and contact options in the card fly out notification.","description":"(Enable) Display the company name and contact options in the card fly out notification.","helpText":null}]},"68d6bee745a0d5ba":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_datecolon76","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"68f1aba8f4eff970":{"id":"user_vendor_msft_policy_config_admx_desktop_ad_enablefilter","displayName":"Enable filter in Find dialog box (User)","description":"Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results.\r\n\r\nIf you enable this setting, the filter bar appears when the Active Directory Find dialog box opens, but users can hide it.\r\n\r\nIf you disable this setting or do not configure it, the filter bar does not appear, but users can display it by selecting \"Filter\" on the \"View\" menu.\r\n\r\nTo see the filter bar, open Network Locations, click Entire Network, and then click Directory. Right-click the name of a Windows domain, and click Find. Type the name of an object in the directory, such as \"Administrator.\" If the filter bar does not appear above the resulting display, on the View menu, click Filter.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-ad-enablefilter"],"categoryId":"99ba9e42-9872-4a03-a615-fc4a4cebc067","categoryName":"Active Directory","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_ad_enablefilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_enablefilter_1","displayName":"Enabled","description":null,"helpText":null}]},"68da080f3f3c2a8a":{"id":"user_vendor_msft_policy_config_admx_desktop_nosavesettings","displayName":"Don't save settings at exit (User)","description":"Prevents users from saving certain changes to the desktop.\r\n\r\nIf you enable this setting, users can change the desktop, but some changes, such as the position of open windows or the size and position of the taskbar, are not saved when users log off. However, shortcuts placed on the desktop are always saved.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nosavesettings"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nosavesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nosavesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"6854caa0a848168b":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc","displayName":"When Group Policy Object Editor is selecting a domain controller to use, it should: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc_1","displayName":"Use the Primary Domain Controller","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc_2","displayName":"Inherit from Active Directory Snap-ins","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc_3","displayName":"Use any available domain controller","description":null,"helpText":null}]},"68eb3799d59f2a4e":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps_disallowappslist","displayName":"List of disallowed applications (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"68c03da04e72b96e":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown","displayName":"Pick one of the following combinations (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_3","displayName":"Restrict A and B drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_4","displayName":"Restrict C drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_8","displayName":"Restrict D drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_7","displayName":"Restrict A, B and C drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_15","displayName":"Restrict A, B, C and D drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_67108863","displayName":"Restrict all drives","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_0","displayName":"Do not restrict drives","description":null,"helpText":null}]},"688fce36ce25a86a":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize_recyclebinsizespin","displayName":"Maximum Recycle Bin size: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"68114781b31830ba":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowed","displayName":"Allow proceeding from the SSL warning page (User)","description":"Setting the policy to Enabled or leaving it unset lets users click through warning pages Google Chrome shows when users navigate to sites that have SSL errors.\r\n\r\nSetting the policy to Disabled prevent users from clicking through any warning pages.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"68da6cb1edd48c20":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled","displayName":"Enable QR Code Generator (User)","description":"This policy enables the QR Code generator feature in Google Chrome.\r\n\r\nIf you enable this policy or don't configure it, the QR Code Generator feature is enabled.\r\n\r\nIf you disable this policy, the QR Code Generator feature is disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"68d1eb207ab23c39":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"68f940e743a5edd7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_descriptioncolon51","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"68b868a97ff7a796":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"683b6708c8cda248":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"68194d4d5f7a4e46":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402","displayName":"XAML Files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_1","displayName":"Prompt","description":null,"helpText":null}]},"681c4e72809c3c59":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102","displayName":"Allow script-initiated windows without size or position constraints (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_3","displayName":"Disable","description":null,"helpText":null}]},"688e0cb30a05ecce":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_l_serveraddressinternal_value","displayName":"DNS name of the internal server (User)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"687f334f75d64605":{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled","displayName":"Enable Discover access to page contents for AAD profiles (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy has been obsoleted as of Edge 127. Two new Edge Policies have taken its place. Those policies are CopilotPageContext (Control Copilot access to page contents for AAD profiles), and CopilotCDPPageContext (Control Copilot with Commercial Data Protection access to page contents for AAD profiles).\r\n\r\nThis policy did not allow for separate control of Copilot and Copilot with Commercial Data Protection. The new policies allow separate control of these versions of Copilot. The new policies also allow admins to force-enable Copilot access to Edge page contents by enabling the policy, whereas DiscoverPageContextEnabled only allowed force-disabling of Copilot page access.\r\n\r\nThis policy controls Discover access to page contents for AAD profiles. Discover is an extension that hosts Bing Chat. In order to summarize pages and interact with text selections, it needs to be able to access the page contents. When enabled, page contents will be sent to Bing. This policy does not affect MSA profiles.\r\n\r\nIf you enable or don't configure this policy, Discover will have access to page contents.\r\n\r\nIf you disable this policy, Discover will not be able to access page contents.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"68020bbfc7a248a1":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_extensionextendedbackgroundlifetimeforportconnectionstourlsdesc","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"688dec33b7c090b3":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled","displayName":"Control Microsoft Edge Safe Hosting Extension (User)","description":"This policy controls whether the Microsoft Edge Safe Hosting component extension is installed automatically when users visit supported Microsoft services, such as Microsoft 365 Copilot app.\r\n\r\nThe Microsoft Edge Safe Hosting extension provides additional security capabilities for these services. When a user accesses a supported service, the extension installs automatically to enable those protections.\r\n\r\nIf you enable or don't configure this policy, the extension installs automatically and remains installed for 90 days after the user's last visit, then is removed if no further activity occurs.\r\n\r\nIf you disable this policy, the extension won't install automatically. If it’s already installed, it will be removed.\r\n\r\nNote: This policy controls only automatic installation. It doesn’t prevent users from manually installing other extensions from the Microsoft Edge Add-ons website.","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"68c6e8c319456d94":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers","displayName":"Prefer specific encryption cipher algorithms for TLS (User)","description":"This policy configures Microsoft Edge to order its preferred encryption ciphers in TLS 1.3 based on algorithms approved by a specific compliance regime.\r\n\r\nSetting this policy does not guarantee that any specific algorithms will be negotiated.\r\n\r\nThis policy allows server operators who support both compliant and non-compliant clients to differentiate between them, and use certain non-default algorithms with increased cryptographic strength only for clients explicitly configured to prefer them.\r\n\r\nSetting the policy to 'cnsa' configures Microsoft Edge to prefer ciphers required for compliance with the Commercial National Security Algorithm Suite versions 1.0 and 2.0 (CNSA 1.0 and 2.0).\r\n\r\nNot setting the policy, or setting it to 'default', configures Microsoft Edge to use its default ciphers.\r\n\r\nSetting this policy isn't required for security. The default cryptography used by Microsoft Edge is strong enough to withstand a brute-force attack using the entire power of the Sun.\r\n\r\nSetting this policy will cause Microsoft Edge to be slower when accessing websites.\r\n\r\nThis policy only affects TLS 1.3 and QUIC. It doesn't affect earlier versions of TLS.\r\n\r\nPolicy options mapping:\r\n\r\n* CNSA (cnsa) = Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0\r\n\r\n* Default (default) = Use Microsoft Edge's default cipher order\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: cnsa","helpText":"","infoUrls":[],"categoryId":"120b24dd-c04a-4291-8f24-9c48fcdc1434","categoryName":"Cryptography compliance policies","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_1","displayName":"Enabled","description":null,"helpText":null}]},"68adb7173897cb4a":{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_securitysettings_l_basicauthpromptbehavior","displayName":"Allow specified hosts to show Basic Authentication prompts to Office apps (User)","description":"This policy setting allows you to specify which hosts can show Basic Authentication sign-in prompts to Office apps.\r\n\r\nBy default, all Basic Authentication sign-in prompts are blocked, and the user is shown a message that the sign-in method isn’t allowed.\r\n\r\nIf you enable this policy setting, you need to enter the hosts by name, separating the host names with a semi-colon. For example: server1.contoso.com; server2.fabrikam.com.\r\n\r\nWarning: Allowing Basic Authentication sign-in prompts isn’t recommended because it’s a security risk.\r\n\r\nBasic Authentication sign-in prompts from all other hosts will be blocked and the user will be shown a message that the sign-in method isn’t allowed.\r\n\r\nIf you disable or don’t configure this policy setting, all Basic Authentication sign-in prompts will be blocked, and the user will be shown a message that the sign-in method isn’t allowed.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2199001.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_securitysettings_l_basicauthpromptbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_securitysettings_l_basicauthpromptbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"682b9ba0592b0293":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkadd_l_workaddadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"68258a1440c4f17c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkexcelrtdservers","displayName":"Check Excel RTD servers (User)","description":"This policy setting determines whether Office checks that a RealTimeData (RTD) is properly categorized before loading it. \r\n\r\nIf you enable this policy setting Office only loads properly categorized RTD servers.\r\n\r\nIf you disable or do not configure this policy setting, Office does not check that an RTD server is properly categorized before loading it.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkexcelrtdservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkexcelrtdservers_1","displayName":"Enabled","description":null,"helpText":null}]},"680399dfc23467e2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey20","displayName":"Escrow Key #20 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey20_1","displayName":"Enabled","description":null,"helpText":null}]},"686560e4785f9cd2":{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_sae","displayName":"Semi-Annual Enterprise Channel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_sae_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_sae_1","displayName":"True","description":null,"helpText":null}]},"681619252c5dffe0":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipheralgorithm","displayName":"Set CNG cipher algorithm (User)","description":"This policy setting allows you to configure the CNG cipher algorithm that is used.\r\n\r\nIf you enable this policy setting, then the cipher provided will be used if it is a supported algorithm.\r\n\r\nIf you disable or do not configure this policy setting, AES will be used.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipheralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipheralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"6845feb76d5491a9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitmimeheaders","displayName":"Change the limit for the number of MIME headers (User)","description":"By default, the limit is 20000 for the number of MIME headers when an e-mail message is converted from MIME to MAPI. The number can be set to any positive integer. This helps prevent scenarios in which Outlook hangs while attempting conversion.","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitmimeheaders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitmimeheaders_1","displayName":"Enabled","description":null,"helpText":null}]},"684e70ba8a4c516f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling","displayName":"Message handling (User)","description":"You can use this setting to specify various options for how e-mail messages are handled.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_1","displayName":"Enabled","description":null,"helpText":null}]},"6894f8869a7288aa":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingrootcertificates","displayName":"Missing root certificates (User)","description":"This policy setting controls how Outlook functions when a root certificate is missing. \r\n\r\nIf you enable this policy setting, you can choose from three options that determine how Outlook functions when a root certificate is missing. \r\n\r\n- Neither Error nor Warning. This option displays neither an error nor a warning, and enforces the default configuration in Outlook.\r\n- Warning. This option ensures that Outlook displays a warning message when a root certificate is missing. \r\n- Error. This option ensures that Outlook displays an error message when a root certificate is missing. \r\n\r\nIf you don't configure this policy setting, users will see an error when a root certificate is missing.","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingrootcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingrootcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"688b94635758ff3c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_v2_l_empty31","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_v2_l_empty31_0","displayName":"Use system Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_v2_l_empty31_1","displayName":"When online always retreive the CRL","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_v2_l_empty31_2","displayName":"Never retreive the CRL","description":null,"helpText":null}]},"68c390e617d8e73e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjentrybar","displayName":"Entry Bar (User)","description":"Displays the entry bar, in which you can enter or edit field information.\r\nIf you enable this setting, the entry bar is displayed.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"251c6873-bf5b-4d85-8185-3c4973b6f33c","categoryName":"Show","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjentrybar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjentrybar_1","displayName":"Enabled","description":null,"helpText":null}]},"685f5ed2206dbd61":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11","displayName":"Trusted Location #11 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_1","displayName":"Enabled","description":null,"helpText":null}]},"68ac14377576b65c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_l_allowsubfolders51","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_l_allowsubfolders51_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_l_allowsubfolders51_1","displayName":"True","description":null,"helpText":null}]},"68ea18b0331ae7ee":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]},"684981823dfbe489":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates","displayName":"Word 95 binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word95binarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"681bfd128e4b00a7":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_direction","displayName":"Direction","description":"Comma separated list. The rule is enabled based on the traffic direction as following.\n\nIN - the rule applies to inbound traffic.\nOUT - the rule applies to outbound traffic.\n\nIf not specified the detault is OUT.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_direction_in","displayName":"The rule applies to inbound traffic.","description":"The rule applies to inbound traffic.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_direction_out","displayName":"The rule applies to outbound traffic.","description":"The rule applies to outbound traffic.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/69.json b/public/intune-definitions/69.json new file mode 100644 index 000000000000..e9997c7f598f --- /dev/null +++ b/public/intune-definitions/69.json @@ -0,0 +1 @@ +{"692e8daef999e1c9":{"id":"com.android.devicerestrictionpolicy.appsrecommendskippingfirstusehints","displayName":"Skip first use hints","description":"If 'True', hides or skips suggestions from apps that step through tutorials, or hints when the app starts. If 'False', Intune doesn't change or update this setting. By default, the OS might show these suggestions when the app starts. Available for fully managed and dedicated devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.appsrecommendskippingfirstusehints_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsrecommendskippingfirstusehints_false","displayName":"False","description":"false","helpText":null}]},"691a0be5fe58f295":{"id":"com.apple.applicationaccess_allowlockscreentodayview","displayName":"Allow Lock Screen Today View","description":"If false, disables the Today view in Notification Center on the lock screen. Available in iOS 7 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowlockscreentodayview_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowlockscreentodayview_true","displayName":"True","description":null,"helpText":null}]},"69dadbecedc3a086":{"id":"com.apple.managedclient.preferences_collectionsservicesandexportsblocklist","displayName":"Block access to a specified list of services and export targets in Collections","description":"List specific services and export targets that users can't access in the Collections feature in Microsoft Edge. This includes displaying additional data from Bing and exporting collections to Microsoft products or external partners.\n\nIf you enable this policy, services and export targets that match the given list are blocked.\n\nIf you don't configure this policy, no restrictions on the acceptable services and export targets are enforced.\n\nPolicy options mapping:\n\n* pinterest_suggestions (pinterest_suggestions) = Pinterest suggestions\n\n* collections_share (collections_share) = Sharing of Collections\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#collectionsservicesandexportsblocklist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"69d2b29d6c2de415":{"id":"com.apple.mcx.timemachine_com.apple.mcx.timemachine","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"361859d9-1382-47c3-b9ec-9251a62fbb25","categoryName":"Time Machine","options":null},"698c300f2119c8c1":{"id":"com.apple.subscribedcalendar.account_subcalaccountpassword","displayName":"Account Password","description":"The user’s password.","helpText":null,"infoUrls":[],"categoryId":"fa20bbc3-d25d-4a7f-a349-9b211d186e21","categoryName":"Subscribed Calendars","options":null},"6930c51eda50465a":{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"6946d416d2c6f694":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"6913d8b12caeec6e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_recommended","displayName":"Enable Wallet Checkout feature (users can override)","description":"Enables Wallet Checkout feature in Microsoft Edge.\n\nIf you enable or don't configure this policy, users can choose whether to use wallet checkout while shopping on Microsoft Edge.\n\nIf you disable this policy, users can't use wallet checkout while shopping on Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"69250dc929dd5136":{"id":"device_vendor_msft_defender_configuration_disableinboundconnectionfiltering","displayName":"Disable Inbound Connection Filtering","description":"This setting disables Inbound connection filtering for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disableinboundconnectionfiltering_1","displayName":"Inbound connection filtering is disabled","description":"Inbound connection filtering is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disableinboundconnectionfiltering_0","displayName":"Inbound connection filtering is enabled","description":"Inbound connection filtering is enabled","helpText":null}]},"69d61f645b084c4c":{"id":"device_vendor_msft_defender_configuration_securityintelligenceupdateschannel","displayName":"Security Intelligence Updates Channel","description":"Enable this policy to specify when devices receive Microsoft Defender security intelligence updates during the daily gradual rollout.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_securityintelligenceupdateschannel_0","displayName":"Not configured (Default). Microsoft will either assign the device to Current Channel (Broad) or a beta channel early in the gradual release cycle. The channel selected by Microsoft might be one that receives updates early during the gradual release cycle, which may not be suitable for devices in a production or critical environment","description":"Not configured (Default). Microsoft will either assign the device to Current Channel (Broad) or a beta channel early in the gradual release cycle. The channel selected by Microsoft might be one that receives updates early during the gradual release cycle, which may not be suitable for devices in a production or critical environment","helpText":null},{"id":"device_vendor_msft_defender_configuration_securityintelligenceupdateschannel_4","displayName":"Current Channel (Staged): Same as Current Channel (Broad).","description":"Current Channel (Staged): Same as Current Channel (Broad).","helpText":null},{"id":"device_vendor_msft_defender_configuration_securityintelligenceupdateschannel_5","displayName":"Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in all populations, including production.","description":"Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in all populations, including production.","helpText":null}]},"69e3be12d4bde83b":{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_wercerserver","displayName":"Corporate server name:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"69b82bbc633e5a3a":{"id":"device_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_2","displayName":"Turn off the \"Publish to Web\" task for files and folders","description":"This policy setting specifies whether the tasks \"Publish this file to the Web,\" \"Publish this folder to the Web,\" and \"Publish the selected items to the Web\" are available from File and Folder Tasks in Windows folders.\r\n\r\nThe Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web.\r\n\r\nIf you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders.\r\n\r\nIf you disable or do not configure this policy setting, the tasks are shown.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellremovepublishtoweb-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_2_1","displayName":"Enabled","description":null,"helpText":null}]},"694133f708ce4238":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablereparsepointscanning","displayName":"Turn on reparse point scanning","description":"This policy setting allows you to configure reparse point scanning. If you allow reparse points to be scanned, there is a possible risk of recursion. However, the engine supports following reparse points to a maximum depth so at worst scanning could be slowed. Reparse point scanning is disabled by default and this is the recommended state for this functionality. \r\n\r\n If you enable this setting, reparse point scanning will be enabled.\r\n\r\n If you disable or do not configure this setting, reparse point scanning will be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disablereparsepointscanning"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablereparsepointscanning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablereparsepointscanning_1","displayName":"Enabled","description":null,"helpText":null}]},"69fbf050967ab686":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxdataretransmissionsipv6","displayName":"MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)","description":"MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-tcpmaxdataretransmissionsipv6"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxdataretransmissionsipv6_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxdataretransmissionsipv6_1","displayName":"Enabled","description":null,"helpText":null}]},"69decf2e17f96d87":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_javascriptjitblockedforsitesdesc","displayName":"Block JavaScript from using JIT on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"699d020baca5cdd2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc","displayName":"Allow notifications on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"698cf6d9eea84eb6":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled","displayName":"Specifies whether to apply restrictions to requests to local network endpoints","description":"When this policy is set to Enabled, any time when a warning is supposed to be\r\ndisplayed in the DevTools due to Local Network Access checks failing, the\r\nmain request will be blocked instead.\r\n\r\nWhen this policy is set to Disabled or unset, Local Network Access requests will use the\r\ndefault handling of these requests.\r\n\r\nSee https://wicg.github.io/local-network-access/ for Local Network Access restrictions.","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"694306bb24ab2356":{"id":"device_vendor_msft_policy_config_cryptography_tlsciphersuites","displayName":"TLS Cipher Suites","description":"Lists the Cryptographic Cipher Algorithms allowed for SSL connections. Format is a semicolon delimited list. Last write wins.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cryptography#tlsciphersuites"],"categoryId":"bdc32a5e-2bce-46b1-9838-ed557b1e287e","categoryName":"Cryptography","options":null},"69484af823040189":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductiononlyexclusions","displayName":"Attack Surface Reduction Only Exclusions","description":"This policy setting allows you to prevent Attack Surface reduction rules from matching on files under the paths specified or for the fully qualified resources specified. Paths should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a path or a fully qualified resource name. As an example, a path might be defined as: c:\\Windows to exclude all files in this directory. A fully qualified resource name might be defined as: C:\\Windows\\App.exe. Value type is string.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#attacksurfacereductiononlyexclusions"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"698ddac1bfcbce0b":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller","displayName":"Enable App Installer","description":"This policy controls whether the Windows Package Manager can be used by users.\n\nIf you enable or do not configure this setting, users will be able to use the Windows Package Manager.\n\nIf you disable this setting, users will not be able to use the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableappinstaller"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller_1","displayName":"Enabled","description":null,"helpText":null}]},"69ef08d28ab2ed61":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode","displayName":"Outlook Cached Mode","description":"When the ODFC Container is successfully attached, set Outlook to work in cached mode for the user. The setting change will only be effective for the specific user and for the length of the user session.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\OutlookCachedMode\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled (only if container is attached)","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"699d28b4e610a509":{"id":"device_vendor_msft_policy_config_kerberos_upnnamehints","displayName":"UPN Name Hints","description":"Devices joined to Azure Active Directory in a hybrid environment need to interact with Active Directory Domain Controllers, but they lack the built-in ability to find a Domain Controller that a domain-joined device has. This can cause failures when such a device needs to resolve an AAD UPN into an Active Directory Principal. This parameter adds a list of domains that an Azure Active Directory joined device should attempt to contact if it is otherwise unable to resolve a UPN to a principal.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#upnnamehints"],"categoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","categoryName":"Kerberos","options":null},"69c0ede215a2a341":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_pluginsblockedforurlsdesc","displayName":"Block the Adobe Flash plug-in on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"691fcffcf47d04cc":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled","displayName":"Synonyms are provided when using Microsoft Editor spell checker","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages, and synonyms can be suggested as an integrated feature.\r\n\r\nIf you enable this policy, Microsoft Editor spell checker will provide synonyms for suggestions for misspelled words.\r\n\r\nIf you disable or don't configure this policy, Microsoft Editor spell checker will not provide synonyms for suggestions for misspelled words.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy or the 'MicrosoftEditorProofingEnabled' (Spell checking provided by Microsoft Editor) policy are set to disabled, or the user disables spell checking or chooses not to use Microsoft Editor spell checker in the settings page, this policy will have no effect.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"691c58127371f77d":{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed","displayName":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context","description":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context. A SharedArrayBuffer is a binary data buffer that can be used to create views on shared memory. SharedArrayBuffers have a memory access vulnerability in several popular CPUs.\r\n\r\nIf you enable this policy, sites are allowed to use SharedArrayBuffers with no restrictions.\r\n\r\nIf you disable or don't configure this policy, sites are allowed to use SharedArrayBuffers only when cross-origin isolated.\r\n\r\nMicrosoft Edge will require cross-origin isolation when using SharedArrayBuffers from Microsoft Edge 91 onward for Web Compatibility reasons.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"69122b3ec34a32dc":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector","displayName":"Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a file is attached to Microsoft Edge.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"69005f9fdee43759":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled","displayName":"Suggest similar pages when a webpage can’t be found","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\r\n\r\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\r\n\r\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Suggest similar pages when a webpage can’t be found** toggle, which the user can switch on or off. Note that if you have enable this policy (AlternateErrorPagesEnabled), the Suggest similar pages when a webpage can’t be found setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the Suggest similar pages when a webpage can’t be found setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"69db3da8cd042a2f":{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin","displayName":"Turn Off Hybrid Sleep Plugged In","description":"This policy setting allows you to turn off hybrid sleep. If you set this to 0, a hiberfile is not generated when the system transitions to sleep (Stand By). If you do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#turnoffhybridsleeppluggedin"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin_0","displayName":"","description":"","helpText":null},{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin_1","displayName":"hybrid sleep","description":"hybrid sleep","helpText":null}]},"693cd968a8edb564":{"id":"device_vendor_msft_policy_config_update_autorestartdeadlineperiodindaysforfeatureupdates","displayName":"Auto Restart Deadline Period In Days For Feature Updates","description":"For Feature Updates, this policy specifies the deadline in days before automatically executing a scheduled restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart is scheduled. The system will reboot on or after the specified deadline. The reboot is prioritized over any configured Active Hours and any existing system and user busy checks. Value type is integer. Default is 7 days. Supported values range: 2-30. Note that the PC must restart for certain updates to take effect. If you enable this policy, a restart will automatically occur the specified number of days after the restart was scheduled. If you disable or do not configure this policy, the PC will restart according to the default schedule. If any of the following two policies are enabled, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installations. Always automatically restart at scheduled time.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartdeadlineperiodindaysforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"69a98749db6c3163":{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautoreboot","displayName":"Configure Deadline No Auto Reboot","description":"When enabled, devices will not automatically restart outside of active hours until the deadline and grace period have expired, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForQualityUpdates or Update/ConfigureDeadlineForFeatureUpdates is configured.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinenoautoreboot"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautoreboot_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautoreboot_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"6960a75a8fb0cab7":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":null},"699bb50112dc7cab":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method","displayName":"Set RD Gateway authentication method (User)","description":"Specifies the authentication method that clients must use when attempting to connect to an RD Session Host server through an RD Gateway server. You can enforce this policy setting or you can allow users to overwrite this policy setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the \"Use these RD Gateway server settings\" option on the client.\r\n\r\nTo allow users to overwrite this policy setting, select the \"Allow users to change this setting\" check box. When you do this, users can specify an alternate authentication method by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify an alternate authentication method, the authentication method that you specify in this policy setting is used by default.\r\n\r\nIf you disable or do not configure this policy setting, the authentication method that is specified by the user is used, if one is specified. If an authentication method is not specified, the Negotiate protocol that is enabled on the client or a smart card can be used for authentication.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-gateway-policy-auth-method"],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_1","displayName":"Enabled","description":null,"helpText":null}]},"694986ff6b8db300":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection_ts_radc_defaultconnectionurl","displayName":"Default connection URL: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3a901a80-e2b6-470c-9658-d66ba5458370","categoryName":"Remote App and Desktop Connections","options":null},"69ba0c5284ed982e":{"id":"user_vendor_msft_policy_config_admx_wincal_turnoffwincal_1","displayName":"Turn off Windows Calendar (User)","description":"Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other users calendars.\r\n\r\nIf you enable this setting, Windows Calendar will be turned off.\r\n\r\nIf you disable or do not configure this setting, Windows Calendar will be turned on.\r\n\r\nThe default is for Windows Calendar to be turned on.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wincal#admx-wincal-turnoffwincal-1"],"categoryId":"fff51673-04b8-4277-98ef-4baffbd8d192","categoryName":"Windows Calendar","options":[{"id":"user_vendor_msft_policy_config_admx_wincal_turnoffwincal_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wincal_turnoffwincal_1_1","displayName":"Enabled","description":null,"helpText":null}]},"696ad6aa32ccb23f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc","displayName":"Allow notifications on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"690261c4483dadb8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer","displayName":"Allow remote access users to transfer files to/from the host (User)","description":"Setting the policy to Enabled or leaving it unset allows users connected to a remote access host to transfer files between the client and the host. This doesn't apply to remote assistance connections, which don't support file transfer.\r\n\r\nSetting the policy to Disabled disallows file transfer.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer_1","displayName":"Enabled","description":null,"helpText":null}]},"694dccaa8f68bde8":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate","displayName":"Local Machine Zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_4","displayName":"High","description":null,"helpText":null}]},"69e6511c9246c4e6":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode","displayName":"Turn on Protected Mode (User)","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://learn.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneenableprotectedmode"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"69711a007ebadf71":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc","displayName":"Disable Certificate Transparency enforcement for specific URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"69bbc7dc89f487ad":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails","displayName":"Show thumbnail images for browsing history (User)","description":"This policy lets you configure whether the history thumbnail feature collects and saves images for the sites you visit. When enabled, this feature makes it easier to identify sites when you hover over your history results.\r\nIf you don't configure this policy, the thumbnail feature is turned on after a user visits the history hub twice in the past 7 days.\r\nIf you enable this policy, the history thumbnail collects and saves images for visited sites.\r\nIf you disable this policy, the history thumbnail doesn't collect and save images for visited sites.\r\nWhen the feature is disabled, existing images are deleted on a per user basis, and the feature no longer collects or saves images when a site is visited.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_1","displayName":"Enabled","description":null,"helpText":null}]},"69c8b0cbd4af7de2":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_aadwebsitessousingthisprofileenabled","displayName":"Single sign-on for work or school sites using this profile enabled (User)","description":"'Allow single sign-on for work or school sites using this profile' option allows non-AAD profiles to be able to use single sign-on for work or school sites using work or school credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-AAD profiles only.\r\n\r\nIf you disable this policy, non-AAD profiles will not be able to use SSO using other credentials present on the machine. This will also ensure that 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' is turned off.\r\n\r\nIf you enable this policy or don't configure it, non-AAD profiles will be able to use SSO using other credentials present on the machine and 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' will continue working.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_aadwebsitessousingthisprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_aadwebsitessousingthisprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"695ae33ae8436966":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastservicecreatesharednotes1","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastservicecreatesharednotes1_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastservicecreatesharednotes1_1","displayName":"True","description":null,"helpText":null}]},"693569b8170a395f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework2_l_work2mapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"69bcc2f21c8023bc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuipowerpoint","displayName":"Disallow in PowerPoint (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuipowerpoint_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuipowerpoint_1","displayName":"True","description":null,"helpText":null}]},"69126ec338de528a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_enableadditionalactionsinexcel","displayName":"Enable additional actions in Excel (User)","description":"This policy setting controls whether Excel can provide additional actions for certain words and phrases in a workbook through the right-click menu, and whether users can configure this behavior by checking or unchecking the \"Enable additional actions in the right-click menu\" option under the File tab | Options | Proofing | AutoCorrect Options | Actions tab. If additional actions functionality is turned on, Excel can recognize dates and financial symbols and provide additional actions for them.\r\n\r\nIf you enable or do not configure this policy setting, users can configure Excel to provide additional actions. Note: Excel does not provide additional actions until users check the \"Enable additional actions in the right-click menu\" option in the UI.\r\n\r\nIf you disable this policy setting, users cannot configure Excel to provide additional actions.","helpText":"","infoUrls":[],"categoryId":"69931627-230d-4df9-bbef-e3eac64ea8ef","categoryName":"Additional Actions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_enableadditionalactionsinexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_enableadditionalactionsinexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"69076f9cb4a22f4e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_usethisresponsewhenyouproposenewmeetingtimes","displayName":"Use this response when you propose new meeting times (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_usethisresponsewhenyouproposenewmeetingtimes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_usethisresponsewhenyouproposenewmeetingtimes_1","displayName":"Enabled","description":null,"helpText":null}]},"69d541f52725c666":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_brieflychangethemousecursor","displayName":"Briefly change the mouse cursor (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_brieflychangethemousecursor_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_brieflychangethemousecursor_1","displayName":"True","description":null,"helpText":null}]},"690a7f2ff665fc0d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_cachedexchangemodefilecachedexchangemode_l_selectcachedexchangemodefornewprofiles","displayName":"Select Cached Exchange Mode for new profiles (User)","description":"","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_cachedexchangemodefilecachedexchangemode_l_selectcachedexchangemodefornewprofiles_1","displayName":"Download Headers","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_cachedexchangemodefilecachedexchangemode_l_selectcachedexchangemodefornewprofiles_2","displayName":"Download Full Items","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_cachedexchangemodefilecachedexchangemode_l_selectcachedexchangemodefornewprofiles_3","displayName":"Download Headers and then Full Items","description":null,"helpText":null}]},"697d0da0afce68e0":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditorppt","displayName":"Developer tab | Code | Visual Basic (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditorppt_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditorppt_1","displayName":"True","description":null,"helpText":null}]},"693550cf8f6c554f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned","displayName":"Require that application add-ins are signed by Trusted Publisher (User)","description":"This policy setting controls whether add-ins for this applications must be digitally signed by a trusted publisher.\r\n \r\nIf you enable this policy setting, this application checks the digital signature for each add-in before loading it. If an add-in does not have a digital signature, or if the signature did not come from a trusted publisher, this application disables the add-in and notifies the user. Certificates must be added to the Trusted Publishers list if you require that all add-ins be signed by a trusted publisher. For detail on about obtaining and distributing certificates, see http://go.microsoft.com/fwlink/?LinkId=294922. Office 2016 stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Office 2016 still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store. Therefore, if you created a list of trusted publishers in a previous version of Office and you upgrade to Office 2016, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store. For more information about trusted publishers, see the Office Resource Kit.\r\n\r\nIf you disable or do not configure this policy setting, this application does not check the digital signature on application add-ins before opening them. If a dangerous add-in is loaded, it could harm users' computers or compromise data security.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_1","displayName":"Enabled","description":null,"helpText":null}]},"690999bc21a456fd":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"690ec45a268ca2be":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"Number of folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":null},"6943d73a78f74633":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_enableautomationevents","displayName":"Enable Automation events (User)","description":"Enables Visio events to be sent to Visio add-ons and VBA macros. If cleared, disables all Visio events. If you clear this option, some drawing types in Visio that rely on Automation events may not have full functionality.","helpText":"","infoUrls":[],"categoryId":"4e62ada2-f091-49e1-99dd-ffdf5cf558cd","categoryName":"General Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_enableautomationevents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_enableautomationevents_1","displayName":"Enabled","description":null,"helpText":null}]},"6990667637993a10":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15_l_descriptioncolon66","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"695fdbb70b3435c8":{"id":"vendor_msft_firewall_mdmstore_publicprofile_authappsallowuserprefmerge","displayName":"Auth Apps Allow User Pref Merge","description":"This value is used as an on/off switch. If this value is false, authorized application firewall rules in the local store are ignored and not enforced. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_authappsallowuserprefmerge_false","displayName":"False","description":"AuthAppsAllowUserPrefMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_authappsallowuserprefmerge_true","displayName":"True","description":"AuthAppsAllowUserPrefMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/6a.json b/public/intune-definitions/6a.json new file mode 100644 index 000000000000..c7334400a2e6 --- /dev/null +++ b/public/intune-definitions/6a.json @@ -0,0 +1 @@ +{"6ad40bba981dba94":{"id":"ade_activatecellulardatachoices","displayName":"Activate cellular data","description":"Activates cellular data plans for devices enabled for eSIM. The carrier must enable activation for devices before you can use this command. You can also activate any time after device enrollment.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_activatecellulardatachoices_0","displayName":"No","description":null,"helpText":null},{"id":"ade_activatecellulardatachoices_1","displayName":"Yes","description":null,"helpText":null}]},"6a82d0325ab13150":{"id":"ade_setupassistant_departmentphone","displayName":"Department phone","description":null,"helpText":"Appears to users on About Configuration screen","infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":null},"6aa6357a3282e30c":{"id":"ade_setupassistant_getstarted","displayName":"Get Started","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_getstarted_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_getstarted_1","displayName":"Show","description":null,"helpText":null}]},"6aaa2318b1b498a0":{"id":"com.apple.applicationaccess_allowclouddesktopanddocuments","displayName":"Allow Cloud Desktop And Documents","description":"If false, disables cloud desktop and document services. Available in macOS 10.12.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowclouddesktopanddocuments_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowclouddesktopanddocuments_true","displayName":"True","description":null,"helpText":null}]},"6a24e4f934752ce6":{"id":"com.apple.extensiblesso_extensiondata_delayusersetup_kerberos","displayName":"Delay User Setup","description":"If true, doesn’t prompt the user to setup the Kerberos extension until either the administrator enables it with the app-sso tool or a Kerberos challenge is received. Available in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_delayusersetup_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_delayusersetup_kerberos_true","displayName":"True","description":null,"helpText":null}]},"6ad7088b74d695dc":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"6acfff95f0bff2fe":{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"6a3c7dec4cf49565":{"id":"com.apple.managedclient.preferences_definitionupdatedue","displayName":"Security intelligence update due (in days)","description":"Determines the number of days after which the last installed security intelligence updates are considered outdated.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/mac-preferences#duration-for-security-intelligence-updates-due-in-days"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":null},"6ab82d00d4f72b52":{"id":"com.apple.managedclient.preferences_registeredprotocolhandlers_item_default","displayName":"Default","description":"A boolean flag indicating if the protocol handler should be set as the default.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_registeredprotocolhandlers_item_default_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_registeredprotocolhandlers_item_default_true","displayName":"Enabled","description":null,"helpText":null}]},"6ad8fc6d06a892d4":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_disk sleep timer","displayName":"Disk Sleep Timer","description":"The disk sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"6ae539acdc79412e":{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"6ac2f3c1beaed892":{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"6a163e11b24ee40f":{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"6a0b9a8b4fc91116":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"6a36189ffa682959":{"id":"com.apple.universalaccess_flashscreen","displayName":"Flash Screen","description":"If true, enables \"Flash the screen\" in the Audio options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_flashscreen_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_flashscreen_true","displayName":"True","description":null,"helpText":null}]},"6a156d00a41107b2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.savecookiesonexit","displayName":"Save cookies when Microsoft Edge closes","description":"When this policy is enabled, the specified set of cookies is exempt from deletion when the browser closes. This policy is only effective when:\n- The 'Cookies and other site data' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\n- The policy \"ClearBrowsingDataOnExit\" is enabled or\n- The policy \"DefaultCookiesSetting\" is set to 'Keep cookies for the duration of the session'.\n\nYou can define a list of sites, based on URL patterns, that have their cookies preserved across sessions.\n\nNote: Users can still edit the cookie site list to add or remove URLs. However, they can't remove URLs that are added by an Admin.\n\nIf you enable this policy, the list of cookies aren't cleared when the browser closes.\n\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"6a1452fde3dfff96":{"id":"device_vendor_msft_policy_config_admx_explorer_disableroamedprofileinit","displayName":"Do not reinitialize a pre-existing roamed user profile when it is loaded on a machine for the first time","description":"This policy setting allows administrators who have configured roaming profile in conjunction with Delete Cached Roaming Profile Group Policy setting to ensure that Explorer will not reinitialize default program associations and other settings to default values. \r\n\r\nIf you enable this policy setting on a machine that does not contain all programs installed in the same manner as it was on the machine on which the user had last logged on, unexpected behavior could occur. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-disableroamedprofileinit"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_explorer_disableroamedprofileinit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_explorer_disableroamedprofileinit_1","displayName":"Enabled","description":null,"helpText":null}]},"6a4aa6a48a9a9f1c":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_corpconnsyncwaittime","displayName":"Specify workplace connectivity wait time for policy processing","description":"This policy setting specifies how long Group Policy should wait for workplace connectivity notifications during startup policy processing. If the startup policy processing is synchronous, the computer is blocked until workplace connectivity is available or the wait time is reached. If the startup policy processing is asynchronous, the computer is not blocked and policy processing will occur in the background. In either case, configuring this policy setting overrides any system-computed wait times.\r\n\r\nIf you enable this policy setting, Group Policy uses this administratively configured maximum wait time for workplace connectivity, and overrides any default or system-computed wait time.\r\n\r\nIf you disable or do not configure this policy setting, Group Policy will use the default wait time of 60 seconds on computers running Windows operating systems greater than Windows 7 configured for workplace connectivity.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-corpconnsyncwaittime"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_corpconnsyncwaittime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_corpconnsyncwaittime_1","displayName":"Enabled","description":null,"helpText":null}]},"6a59129bc5af6f5b":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized","displayName":"Start File Explorer with ribbon minimized","description":"This policy setting allows you to specify whether the ribbon appears minimized or in full when new File Explorer windows are opened. If you enable this policy setting, you can set how the ribbon appears the first time users open File Explorer and whenever they open new windows. If you disable or do not configure this policy setting, users can choose how the ribbon appears when they open new windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-explorerribbonstartsminimized"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_1","displayName":"Enabled","description":null,"helpText":null}]},"6ad09d42231a3b8f":{"id":"device_vendor_msft_policy_config_bluetooth_allowpromptedproximalconnections","displayName":"Allow Prompted Proximal Connections","description":"This policy allows the IT admin to block users on these managed devices from using Swift Pair and other proximity based scenarios.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Bluetooth#allowpromptedproximalconnections"],"categoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","categoryName":"Bluetooth","options":[{"id":"device_vendor_msft_policy_config_bluetooth_allowpromptedproximalconnections_0","displayName":"Block","description":"Disallow. Block users on these managed devices from using Swift Pair and other proximity based scenarios","helpText":null},{"id":"device_vendor_msft_policy_config_bluetooth_allowpromptedproximalconnections_1","displayName":"Allow","description":"Allow. Allow users on these managed devices to use Swift Pair and other proximity based scenarios","helpText":null}]},"6adc49005510e96e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled","displayName":"Enable warnings for insecure forms","description":"This policy controls the treatment for insecure forms (forms that submit over HTTP) embedded in secure (HTTPS) sites in the browser.\r\nIf the policy is enabled or unset, a full page warning will be shown when an insecure form is submitted. Additionally, a warning bubble will be shown next to the form fields when they are focused, and autofill will be disabled for those forms.\r\nIf the policy is disabled, warnings will not be shown for insecure forms, and autofill will work normally.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6a1c63da0ed7054e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing","description":"Setting the policy to 3 lets websites ask for write access to files and directories in the host operating system's file system. Setting the policy to 2 denies access.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"6ab3c7daf202e47e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"6aeb90979a786142":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser","displayName":"Set a custom enterprise label for a managed browser","description":"This policy controls a custom label used to indicate a managed browser. For managed browsers, this label will be shown in a management disclaimer on a footer on the New Tab page. The custom label will not be translated.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nExample value: Chromium","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_1","displayName":"Enabled","description":null,"helpText":null}]},"6ab44e8116ddc198":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize","displayName":"VHDX Sector Size","description":"This setting is only applicable if the virtual disk type is VHDX. The default is the sytem default which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDXSectorSize\r\nType: DWORD\r\nValues: 0 = System Default, 512, 4096","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_1","displayName":"Enabled","description":null,"helpText":null}]},"6a6b693462a413b5":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nThis setting specifies the number of healthy CCD Locations required to allow a sign in. If using the default setting, users will always be allowed to sign in, even if no CCD Locations are available.\r\n\r\nIf a user signs in with no available CCD Locations, FSLogix assumes that one or more CCD Locations will become available prior to the user signing out. If a CCD Locations does not become available during the time of the user session, then the user is prevented from signing out (discussed in Healthy Provider Required For Unregister).\r\n\r\nIf it is desired to block a user from signing in and a minimum number of CCD Locations are not available, the Healthy Providers Required For Register may be set to the number of CCD Locations required for a sign in.\r\n\r\nIf the minimum number of CCD Locations required for registration aren't available, then the sign in will fail. When setting Healthy Providers Required For Register to anything other than 0, then Prevent Login With Failure and/or Preven tLogin With Temp Profile should be used in order to create the desired user experience.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\HealthyProvidersRequiredForRegister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_1","displayName":"Enabled","description":null,"helpText":null}]},"6a6f484d527606f9":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":null},"6a3e961881bad18a":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"6aecec6b8a778d6b":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":null},"6a66ec7b789d8785":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled","displayName":"Enable full-tab promotional content (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nControl the presentation of full-tab promotional or educational content. This setting controls the presentation of welcome pages that help users sign into Microsoft Edge, choose their default browser, or learn about product features.\r\n\r\nIf you enable this policy (set it true) or don't configure it, Microsoft Edge can show full-tab content to users to provide product information.\r\n\r\nIf you disable (set to false) this policy, Microsoft Edge can't show full-tab content to users.\r\n\r\nThis is deprecated - use ShowRecommendationsEnabled instead.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6aeb5b269fc031f4":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_2","displayName":"Do not allow any site to request access to USB devices via the WebUSB API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_3","displayName":"Allow sites to ask the user to grant access to a connected USB device","description":null,"helpText":null}]},"6a9463934fcf49db":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources","displayName":"Configure extension and user script install sources","description":"Define URLs that can install extensions and themes.\r\n\r\nBy default, users have to download a *.crx file for each extension or script they want to install, and then drag it onto the Microsoft Edge settings page. This policy lets specific URLs use install the extension or script for the user.\r\n\r\nEach item in this list is an extension-style match pattern (see https://go.microsoft.com/fwlink/?linkid=2095039). Users can easily install items from any URL that matches an item in this list. Both the location of the *.crx file and the page where the download is started from (in other words, the referrer) must be allowed by these patterns.\r\n\r\nThe 'ExtensionInstallBlocklist' (Control which extensions cannot be installed) policy takes precedence over this policy. Any extensions that's on the block list won't be installed, even if it comes from a site on this list.\r\n\r\nExample value:\r\n\r\nhttps://corp.contoso.com/*","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_1","displayName":"Enabled","description":null,"helpText":null}]},"6a63c0a5b1eaf0c8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage","displayName":"Set the new tab page as the home page","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\r\n\r\nIf you enable this policy, the new tab page is always used for the home page, and the home page URL location is ignored.\r\n\r\nIf you disable this policy, the user's home page can't be the new tab page, unless the URL is set to 'edge://newtab'.\r\n\r\nIf not configured users can choose whether the new tab page is their home page.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_1","displayName":"Enabled","description":null,"helpText":null}]},"6a9d142e3d38beee":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications.","description":"This policy defines a list of allowed HTTPS origins for remote desktop client applications that initiate WebAuthn API requests from a browsing session on a remote host.\r\n\r\nOrigins specified in this policy can request WebAuthn authentication for Relying Party IDs (RP IDs) they would not typically be authorized to claim.\r\n\r\nOnly HTTPS origins are supported. Wildcards are not permitted. Entries that do not\r\nmeet these requirements will be ignored.\r\n\r\nFor more information about the WebAuthn Remote Desktop Support feature, please see https://github.com/w3c/webauthn/wiki/Explainer:-Remote-Desktop-Support/a4e158c569f456c759d0ddd294a9015bd4d4eb9a.\r\n\r\nExample value:\r\n\r\nhttps://server:8080/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"6aa92c8da5d29313":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for InPrivate and Guest profiles (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_0","displayName":"Enable ambient authentication in regular sessions only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_1","displayName":"Enable ambient authentication in InPrivate and regular sessions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_2","displayName":"Enable ambient authentication in guest and regular sessions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_3","displayName":"Enable ambient authentication in regular, InPrivate and guest sessions","description":null,"helpText":null}]},"6ad6814628f3e447":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration","displayName":"Delete old browser data on migration","description":"This policy determines whether user browsing data from Microsoft Edge Legacy will be deleted after migrating to the Microsoft Edge version 81 or later.\r\n\r\nIf you set this policy to \"Enabled\", all browsing data from Microsoft Edge Legacy after migrating to the Microsoft Edge version 81 or later will be deleted. This policy must be set before migrating to the Microsoft Edge version 81 or later to have any effect on existing browsing data.\r\n\r\nIf you set this policy to \"Disabled\", or the policy is not configured, user browsing data isn't deleted after migrating to the Microsoft Edge version 83 or later.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration_1","displayName":"Enabled","description":null,"helpText":null}]},"6ac33431dab1899e":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled","displayName":"Allow feature recommendations and browser assistance notifications from Microsoft Edge","description":"This setting controls the in-browser assistance notifications which are intended to help users get the most out of Microsoft Edge. This is done by recommending features and by helping them use browser features. These notifications take the form of dialog boxes, flyouts, coach marks and banners in the browser. An example of an assistance notification would be when a user has many tabs opened in the browser. In this instance Microsoft Edge may prompt the user to try out the vertical tabs feature which is designed to give better browser tab management.\r\n\r\nDisabling this policy will stop this message from appearing again even if the user has too many tabs open.\r\n Any features that have been disabled by a management policy are not suggested to users.\r\nIf you enable or don't configure this setting, users will receive recommendations or notifications from Microsoft Edge.\r\n If you disable this setting, users will not receive any recommendations or notifications from Microsoft Edge","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6ad51c4fe7df1319":{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled","displayName":"Enable support for Windows OS routing table rules when making peer to peer connections via WebRTC","description":"Controls whether WebRTC will respect the Windows OS routing table rules when making peer to peer connections, thus enabling split tunnel VPNs.\r\n\r\nIf you disable this policy or don't configure it, WebRTC will not consider the routing table and may make peer to peer connections over any available network.\r\n\r\nIf you enable this policy, WebRTC will prefer to make peer to peer connections using the indicated network interface for the remote address as indicated in the routing table.\r\n\r\nThis policy is only available on Windows.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6aad531b44416bf4":{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy","displayName":"Configure RPC listener settings","description":"\nThis policy setting controls which protocols incoming RPC connections to the print spooler are allowed to use.\n\nBy default, RPC over TCP is enabled and Negotiate is used for the authentication protocol.\n\nProtocols to allow for incoming RPC connections:\n -- \"RPC over named pipes\": Incoming RPC connections are only allowed over named pipes\n -- \"RPC over TCP\": Incoming RPC connections are only allowed over TCP (the default option)\n -- \"RPC over named pipes and TCP\": Incoming RPC connections will be allowed over TCP and named pipes\n\nAuthentication protocol to use for incoming RPC connections:\n -- \"Negotiate\": Use the Negotiate authentication protocol (the default option)\n -- \"Kerberos\": Use the Kerberos authentication protocol\n\nIf you disable or do not configure this policy setting, the above defaults will be used.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpclistenerpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"6a5cfecce8ea1fce":{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout_shelltimeout","displayName":"ShellTimeOut","description":"","helpText":"","infoUrls":[],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":null},"6a565c8345840b9b":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_kerneldebugusersettingconfigurable","displayName":"Allow kernel debugging","description":"When set to disabled, this policy disables kernel debugging configuration via .wslconfig (wsl2.kernelDebugPort). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_kerneldebugusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_kerneldebugusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},"6a30075bbb7bde7f":{"id":"passcode_changeatnextauth","displayName":"Change At Next Auth","description":"If `true`, the system forces a password reset the next time the user tries to authenticate. If you set this key in a configuration in the system scope (device channel), the setting takes effect for all users, and admin authentication may fail until the admin user password is also reset.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":[{"id":"passcode_changeatnextauth_false","displayName":"Disabled","description":null,"helpText":null},{"id":"passcode_changeatnextauth_true","displayName":"Enabled","description":null,"helpText":null}]},"6abba45fffd3a128":{"id":"safari_privacy_permissiondefaults_generickey_camera","displayName":"Camera","description":"Controls whether a website privacy permission default is set.\n* `None`: Safari sets no website privacy permission default for use of the camera.\n* `Allow`: Safari sets the website privacy permission default to allow use of the camera.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_privacy_permissiondefaults_generickey_camera_0","displayName":"None","description":null,"helpText":null},{"id":"safari_privacy_permissiondefaults_generickey_camera_1","displayName":"Allow","description":null,"helpText":null}]},"6a0715979b54073c":{"id":"softwareupdate_automaticactions_installsecurityupdate","displayName":"Install Security Update","description":"Specifies whether automatic install of available security updates can be controlled by the user:\n* \"Allowed\" - the user can enable or disable automatic installs.\n* \"AlwaysOn\" - automatic installs are always enabled.\n* \"AlwaysOff\" - automatic installs are always disabled.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_automaticactions_installsecurityupdate_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installsecurityupdate_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installsecurityupdate_2","displayName":"AlwaysOff","description":null,"helpText":null}]},"6ac18cd34e7e2ada":{"id":"user_vendor_msft_policy_config_admx_desktop_nomydocumentsicon","displayName":"Remove My Documents icon on the desktop (User)","description":"Removes most occurrences of the My Documents icon.\r\n\r\nThis setting removes the My Documents icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.\r\n\r\nThis setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.\r\n\r\nThis setting does not remove the My Documents icon from the Start menu. To do so, use the \"Remove My Documents icon from Start Menu\" setting.\r\n\r\nNote: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nomydocumentsicon"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nomydocumentsicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nomydocumentsicon_1","displayName":"Enabled","description":null,"helpText":null}]},"6a93ab31a3be70a1":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_2","displayName":"Event Viewer (Windows Vista) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_2_1","displayName":"Enabled","description":null,"helpText":null}]},"6a15b12d4372ba70":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_1","displayName":"Turn off reminder balloons (User)","description":"Hides or displays reminder balloons, and prevents users from changing the setting.\r\n\r\nReminder balloons appear above the Offline Files icon in the notification area to notify users when they have lost the connection to a networked file and are working on a local copy of the file. Users can then decide how to proceed.\r\n\r\nIf you enable this setting, the system hides the reminder balloons, and prevents users from displaying them.\r\n\r\nIf you disable the setting, the system displays the reminder balloons and prevents users from hiding them.\r\n\r\nIf this setting is not configured, reminder balloons are displayed by default when you enable offline files, but users can change the setting.\r\n\r\nTo prevent users from changing the setting while a setting is in effect, the system disables the \"Enable reminders\" option on the Offline Files tab\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To display or hide reminder balloons without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the \"Enable reminders\" check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-noreminders-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_1_1","displayName":"Enabled","description":null,"helpText":null}]},"6a1c88b7816a8ee8":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_sourcepathforupdatehelp","displayName":"Default Source Path (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":null},"6a1fad5ca8859c9a":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad","displayName":"WordPad (User)","description":"This policy setting configures the synchronization of user settings of WordPad.\r\nBy default, the user settings of WordPad synchronize between computers. Use the policy setting to prevent the user settings of WordPad from synchronization between computers. \r\nIf you enable this policy setting, the WordPad user settings continue to synchronize. \r\nIf you disable this policy setting, WordPad user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-wordpad"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad_1","displayName":"Enabled","description":null,"helpText":null}]},"6a1a390ec06799ed":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown","displayName":"Pick one of the following settings (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_1","displayName":"Always open new File Explorer windows with the ribbon minimized.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_2","displayName":"Never open new File Explorer windows with the ribbon minimized.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_3","displayName":"Minimize the ribbon when File Explorer is opened the first time.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_4","displayName":"Display the full ribbon when File Explorer is opened the first time.","description":null,"helpText":null}]},"6ac41690499cf804":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-intranetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"6a9429195cf25c2e":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosecuritytab","displayName":"Remove Security tab (User)","description":"Removes the Security tab from File Explorer.\r\n\r\nIf you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.\r\n\r\nIf you disable or do not configure this setting, users will be able to access the security tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nosecuritytab"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosecuritytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosecuritytab_1","displayName":"Enabled","description":null,"helpText":null}]},"6ad54cc2c0c734a6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory","displayName":"Enable mandatory cloud management enrollment (User)","description":"Setting the policy to Enabled mandates Chrome Browser Cloud Management enrollment and blocks Google Chrome launch process if failed.\r\n\r\nSetting the policy to Disabled or leaving it unset renders Chrome Browser Cloud Management optional and doesn't block Google Chrome launch process if failed.\r\n\r\nMachine scope cloud policy enrollment on desktop uses this policy. See https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory_1","displayName":"Enabled","description":null,"helpText":null}]},"6a1f08cacdac8418":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_0","displayName":"Safe Browsing is never active.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_1","displayName":"Safe Browsing is active in the standard mode.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_2","displayName":"Safe Browsing is active in the enhanced mode. This mode provides better security, but requires sharing more browsing information with Google.","description":null,"helpText":null}]},"6a7096e4a7384a7e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders80","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders80_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders80_1","displayName":"True","description":null,"helpText":null}]},"6a9e61b18c3d4d2e":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting","displayName":"Configure browser process code integrity guard setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_0","displayName":"Do not enable code integrity guard in the browser process.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_1","displayName":"Enable code integrity guard audit mode in the browser process.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_2","displayName":"Enable code integrity guard enforcement in the browser process.","description":null,"helpText":null}]},"6aa25ce298f5848b":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled","displayName":"Restrict the length of passwords that can be saved in the Password Manager (User)","description":"Make Microsoft Edge restrict the length of usernames and/or passwords that can be saved in the Password Manager.\r\n\r\nIf you enable this policy, Microsoft Edge will not let the user save credentials with usernames and/or passwords longer than 256 characters.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will let the user save credentials with arbitrarily long usernames and/or passwords.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6a19529be8654f46":{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled","displayName":"Controls the display of the profile button label for the work or school profile (User)","description":"Controls whether the label for the work or school profile type is shown in the profile button.\r\n\r\nThis policy does not apply when the OrganizationalBrandingOnWorkProfileUIEnabled policy is enabled.\r\n\r\nIf you enable this policy, the label for the work or school profile type appears in the profile button.\r\n\r\nIf you disable this policy or leave it not configured, the label is not shown.","helpText":"","infoUrls":[],"categoryId":"1043e7ed-8651-44b2-b918-7230c0b75a6c","categoryName":"Profile settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6af428b73a4e7de6":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector","displayName":"Configuration policy for Microsoft Edge for Business Reporting Connectors (User)","description":"Defines the Microsoft Edge for Business Reporting Connectors service settings that apply when a security event occurs in Microsoft Edge. These events include negative verdicts from Data Loss Prevention Connectors, password reuse, navigation to unsafe pages, and other security-sensitive actions.\r\n\r\nThe service_provider field specifies the reporting service provider. The enabled_event_names field lists the security events enabled for that provider.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2325446.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"enabled_event_names\": [\r\n \"passwordChangedEvent\",\r\n \"sensitiveDataEvent\"\r\n ],\r\n \"enabled_opt_in_events\": [\r\n {\r\n \"name\": \"loginEvent\",\r\n \"url_patterns\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"name\": \"passwordBreachEvent\",\r\n \"url_patterns\": [\r\n \"example.com\",\r\n \"other.example.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"microsoft\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"6a81a57178bc812f":{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended","displayName":"Set the background tab inactivity timeout for sleeping tabs (User)","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure sleeping tabs) is enabled or is not configured and the user has enabled the sleeping tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 30Seconds (30) = 30 seconds of inactivity\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6a030943c1fcac18":{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode","displayName":"Configure when efficiency mode should become active (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_4","displayName":"When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_5","displayName":"When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null}]},"6af93256fe4f8c3e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_retryintervallimit","displayName":"Set subscription refresh retry interval (User)","description":"This policy setting allows you to specify the maximum number of minutes the system must wait before retrying the operation execution of a failed operation.\r\n\r\nIf you enable this policy setting, you may specify the maximum interval in minutes before a retrying the operation execution of a failed operation.\r\n\r\nIf you disable or do not configure this policy setting, then a default value of 360 minutes will be used.\r\n","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_retryintervallimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_retryintervallimit_1","displayName":"Enabled","description":null,"helpText":null}]},"6acdb97df4e4563b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicqatar","displayName":"Arabic (Qatar) (User)","description":"Enables the editing language Arabic (Qatar)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicqatar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicqatar_1","displayName":"Enabled","description":null,"helpText":null}]},"6a170df36fa3e5f3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dutchbelgium","displayName":"Dutch (Belgium) (User)","description":"Enables the editing language Dutch (Belgium)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dutchbelgium_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dutchbelgium_1","displayName":"Enabled","description":null,"helpText":null}]},"6aa27ab4afc12a9f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_guarani","displayName":"Guarani (User)","description":"Enables the editing language Guarani","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_guarani_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_guarani_1","displayName":"Enabled","description":null,"helpText":null}]},"6a46062c093eb603":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_occitan","displayName":"Occitan (User)","description":"Enables the editing language Occitan","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_occitan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_occitan_1","displayName":"Enabled","description":null,"helpText":null}]},"6a72f6f0d2171326":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkowcdatasourceproviders","displayName":"Check OWC data source providers (User)","description":"This policy setting determines whether Office checks that an Office Web Components (OWC) data source provider is properly categorized before loading it.\r\n\r\nIf you enable this policy setting, Office only loads properly categorized data source providers.\r\n\r\nIf you disable or do not configure this policy setting, Office does not check that an OWC data source provider is properly categorized before loading it.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkowcdatasourceproviders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkowcdatasourceproviders_1","displayName":"Enabled","description":null,"helpText":null}]},"6aed3b867df00ffe":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10_l_allowsubfolders277","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10_l_allowsubfolders277_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc10_l_allowsubfolders277_1","displayName":"True","description":null,"helpText":null}]},"6a7abacff7e7f14f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_subscriptionactivation_l_autoorgidgetkey","displayName":"Automatically activate Office with federated organization credentials (User)","description":"This policy setting activates Office on users’ computers without prompting them to sign in to their Office 365 accounts.\r\n\r\nIf you enable or do not configure this policy setting, and a user is already signed in with federated organization credentials, Office automatically activates when the user first starts an Office application. If either multiple or no organization credentials are found, the user is prompted to sign in.\r\n\r\nIf you disable this policy setting, Office might prompt the user to sign in with their organization's credentials if Office is not installed directly by the user from his or her Office 365 account homepage.\r\n","helpText":"","infoUrls":[],"categoryId":"760376f3-6b74-4992-89eb-aa41d6190e94","categoryName":"Subscription Activation","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_subscriptionactivation_l_autoorgidgetkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_subscriptionactivation_l_autoorgidgetkey_1","displayName":"Enabled","description":null,"helpText":null}]},"6a1dd6406a7bac91":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointsaveanadditionalversionofthepresentationforolderbr","displayName":"PowerPoint: Save an additional version of the presentation for older browsers (User)","description":"Checked: PowerPoint publishes Web Archive presentations that contain a version of the presentation that is compatible with older browsers. | Unchecked: PowerPoint publishes Web Archive presentations that contain only the version of the presentation that is compatible with later browsers.","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointsaveanadditionalversionofthepresentationforolderbr_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointsaveanadditionalversionofthepresentationforolderbr_1","displayName":"Enabled","description":null,"helpText":null}]},"6a60a5bbfd2cb9bc":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_l_specifydefaultunitofmeasurement","displayName":"Specify default unit of measurement: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_l_specifydefaultunitofmeasurement_0","displayName":"Inch","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_l_specifydefaultunitofmeasurement_1","displayName":"Centimeter","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_l_specifydefaultunitofmeasurement_2","displayName":"Millimeter","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_l_specifydefaultunitofmeasurement_3","displayName":"Point","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_l_specifydefaultunitofmeasurement_4","displayName":"Pica","description":null,"helpText":null}]},"6a77e89ed8b4a4c3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_downloadshardnonmailfolders","displayName":"Download shared non-mail folders (User)","description":"By default, most shared folders that users access in other mailboxes are automatically downloaded and cached in the users' local OST files when Cached Exchange Mode is enabled. Only shared Mail folders are not cached. You can use this setting to change this behavior so that non-mail folders are not downloaded automatically.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_downloadshardnonmailfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_downloadshardnonmailfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"6a8393a488d2d0fb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing_l_enablecontextualspellingpolicy","displayName":"Check grammar with spelling (User)","description":"Enabling this policy to turn contextual spelling on by default.","helpText":"","infoUrls":[],"categoryId":"e2610f41-9a95-47e5-9fc9-572e26dc6baa","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing_l_enablecontextualspellingpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing_l_enablecontextualspellingpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"6ae264544428e53b":{"id":"user_vendor_msft_policy_config_ppt16v5~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_oleactions_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v5~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_oleactions_l_empty_0","displayName":"disable (don't allow activating OLE Active Content)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v5~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_oleactions_l_empty_1","displayName":"enable (prompt user before activating OLE Active Content)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v5~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_oleactions_l_empty_2","displayName":"enable all (allow activating OLE Active Content without prompting)","description":null,"helpText":null}]},"6a089cbb59bfb6fb":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjrecentlyused_l_pjmrut","displayName":"Number of entries: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","categoryName":"General options for Microsoft Project","options":null},"6acb19fe097f257f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Disable all application add-ins (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n \r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users, except if application add-ins are required to be signed by Trusted Publishers.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"6a55c2af1d16d27c":{"id":"user_vendor_msft_policy_config_windowsai_setdenyapplistforrecall","displayName":"Set Deny App List For Recall (User)","description":"This policy allows you to set a semicolon-separated list of app names which should not be collected in Recall Snapshots\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdenyapplistforrecall"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":null},"6a427244e58f9a3b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_showpixelsforhtmlfeatures","displayName":"Show pixels for HTML features (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_showpixelsforhtmlfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_showpixelsforhtmlfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"6a2c42b1ac141db0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_l_wordxpbinarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_l_wordxpbinarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_l_wordxpbinarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_l_wordxpbinarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_l_wordxpbinarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_l_wordxpbinarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"6af83a4bbf1924ed":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_pathcolon36","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/6b.json b/public/intune-definitions/6b.json new file mode 100644 index 000000000000..9747930328bc --- /dev/null +++ b/public/intune-definitions/6b.json @@ -0,0 +1 @@ +{"6b75ddc7a08b2088":{"id":"com.apple.applicationaccess_allowexternalintelligenceintegrations","displayName":"Allow External Intelligence Integrations (Deprecated)","description":"If false, disables the use of external, cloud-based intelligence services with Siri.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowexternalintelligenceintegrations_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowexternalintelligenceintegrations_true","displayName":"Enabled","description":null,"helpText":null}]},"6b23ba3dcec5a436":{"id":"com.apple.applicationaccess_allowopenfromunmanagedtomanaged","displayName":"Allow Open From Unmanaged To Managed","description":"If false, documents in unmanaged apps and accounts only open in other unmanaged apps and accounts. Available in iOS 7 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowopenfromunmanagedtomanaged_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowopenfromunmanagedtomanaged_true","displayName":"True","description":null,"helpText":null}]},"6b1c7ff034a2091d":{"id":"com.apple.applicationaccess_ratingmoviesjp","displayName":"Rating Movies - Japan","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesjp_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesjp_1","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesjp_2","displayName":"PG-12","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesjp_3","displayName":"R15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesjp_4","displayName":"R18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesjp_5","displayName":"All","description":null,"helpText":null}]},"6b1c2d54b45b55da":{"id":"com.apple.dock_magnify-immutable","displayName":"Magnify Immutable","description":"If true, locks magnification.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_magnify-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_magnify-immutable_true","displayName":"True","description":null,"helpText":null}]},"6bac5984808aa706":{"id":"com.apple.managedclient.preferences_autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites","description":"Setting the policy lets you make a list of URL patterns that specify sites for which Microsoft Edge can automatically select a client certificate. The value is an array of stringified JSON dictionaries, each with the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts the client certificates the browser automatically selects from. Independent of the filter, only certificates that match the server's certificate request are selected.\n\nExamples for the usage of the $FILTER section:\n\n* When $FILTER is set to { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, only client certificates issued by a certificate with the CommonName $ISSUER_CN are selected.\n\n* When $FILTER contains both the \"ISSUER\" and the \"SUBJECT\" sections, only client certificates that satisfy both conditions are selected.\n\n* When $FILTER contains a \"SUBJECT\" section with the \"O\" value, a certificate needs at least one organization matching the specified value to be selected.\n\n* When $FILTER contains a \"SUBJECT\" section with a \"OU\" value, a certificate needs at least one organizational unit matching the specified value to be selected.\n\n* When $FILTER is set to {}, the selection of client certificates is not additionally restricted. Note that filters provided by the web server still apply.\n\nIf you leave the policy unset, there's no autoselection for any site.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autoselectcertificateforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"6b663aadf0edf21d":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_search_url","displayName":"Search URL","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"6b611844b4675085":{"id":"com.apple.managedclient.preferences_webrtcallowlegacytlsprotocols","displayName":"Allow legacy TLS/DTLS downgrade in WebRTC","description":"If you enable this policy, WebRTC peer connections can downgrade to obsolete\nversions of the TLS/DTLS (DTLS 1.0, TLS 1.0 and TLS 1.1) protocols.\nIf you disable or don't set this policy, these TLS/DTLS versions are\ndisabled.\n\nThis policy is temporary and will be removed in a future version\nof Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webrtcallowlegacytlsprotocols"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webrtcallowlegacytlsprotocols_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webrtcallowlegacytlsprotocols_true","displayName":"Allowed","description":null,"helpText":null}]},"6bee730c3f636469":{"id":"com.apple.mcxmenuextras_sync.menu","displayName":"Sync","description":"If true, enables the Sync menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_sync.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_sync.menu_true","displayName":"True","description":null,"helpText":null}]},"6b9c497d09a4c5ad":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerrestrictlengthenabled","displayName":"Restrict the length of passwords that can be saved in the Password Manager","description":"Make Microsoft Edge restrict the length of usernames and/or passwords that can be saved in the Password Manager.\n\nIf you enable this policy, Microsoft Edge doesn't let the user save credentials with usernames and/or passwords longer than 256 characters.\n\nIf you disable or don't configure this policy, Microsoft Edge lets the user save credentials with arbitrarily long usernames and/or passwords.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerrestrictlengthenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerrestrictlengthenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6b9fec5f8808a41d":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_personalcolors","displayName":"Force a specific background and accent color","description":"Forces Windows to use the specified colors for the background and accent. The color values are specified in hex as #RGB.\r\n\r\nBy default, users can change the background and accent colors.\r\n\r\nIf this setting is enabled, the background and accent colors of Windows will be set to the specified colors and users cannot change those colors. This setting will not be applied if the specified colors do not meet a contrast ratio of 2:1 with white text.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-personalcolors"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_personalcolors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_personalcolors_1","displayName":"Enabled","description":null,"helpText":null}]},"6baac5a85e9ec7e0":{"id":"device_vendor_msft_policy_config_admx_globalization_preventgeoidchange_2","displayName":"Disallow changing of geographic location","description":"This policy setting prevents users from changing their user geographical location (GeoID).\r\n\r\nIf you enable this policy setting, users cannot change their GeoID.\r\n\r\nIf you disable or do not configure this policy setting, users may select any GeoID.\r\n\r\nIf you enable this policy setting at the computer level, it cannot be disabled by a per-user policy setting. If you disable this policy setting at the computer level, the per-user policy is ignored. If you do not configure this policy setting at the computer level, restrictions are based on per-user policy settings.\r\n\r\nTo set this policy setting on a per-user basis, make sure that the per-computer policy setting is not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-preventgeoidchange-2"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_preventgeoidchange_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_preventgeoidchange_2_1","displayName":"Enabled","description":null,"helpText":null}]},"6bd02992bb516edd":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_configureisnsservers","displayName":"Do not allow manual configuration of iSNS servers","description":"If enabled then new iSNS servers may not be added and thus new targets discovered via those iSNS servers; existing iSNS servers may not be removed. If disabled then new iSNS servers may be added and thus new targets discovered via those iSNS servers; existing iSNS servers may be removed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsidiscovery-configureisnsservers"],"categoryId":"60ea8de3-bc6d-4b01-974a-a53860fe4ef6","categoryName":"i SCSI Target Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_configureisnsservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsidiscovery_configureisnsservers_1","displayName":"Enabled","description":null,"helpText":null}]},"6bd16d752eb8aba7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday","displayName":"Specify the day of the week to run a scheduled scan","description":null,"helpText":"","infoUrls":[],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_8","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_0","displayName":"Every Day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_1","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_2","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_3","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_4","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_5","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_6","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_scan_scheduleday_7","displayName":"Saturday","description":null,"helpText":null}]},"6b33620e61a35128":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_definitionupdatefilesharessources","displayName":"Define file shares for downloading security intelligence updates","description":"This policy setting allows you to configure UNC file share sources for downloading security intelligence updates. Sources will be contacted in the order specified. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources. For example: \"{\\\\unc1 | \\\\unc2 }\". The list is empty by default.\r\n\r\n If you enable this setting, the specified sources will be contacted for security intelligence updates. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted.\r\n\r\n If you disable or do not configure this setting, the list will remain empty by default and no sources will be contacted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-definitionupdatefilesharessources"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_definitionupdatefilesharessources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_definitionupdatefilesharessources_1","displayName":"Enabled","description":null,"helpText":null}]},"6beb6f63bf971f93":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_2","displayName":"Remove \"Make Available Offline\" command","description":"This policy setting prevents users from making network files and folders available offline.\r\n\r\nIf you enable this policy setting, users cannot designate files to be saved on their computer for offline use. However, Windows will still cache local copies of files that reside on network shares designated for automatic caching.\r\n\r\nIf you disable or do not configure this policy setting, users can manually specify files and folders that they want to make available offline.\r\n\r\nNotes:\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence.\r\n\r\nThe \"Make Available Offline\" command is called \"Always available offline\" on computers running Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 7, or Windows Vista.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nomakeavailableoffline-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_2_1","displayName":"Enabled","description":null,"helpText":null}]},"6b44daec87578866":{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_rpcexterrorexceptions","displayName":"Extended Error Information Exceptions:","description":null,"helpText":"","infoUrls":[],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":null},"6b95a7ad4d57c060":{"id":"device_vendor_msft_policy_config_admx_settingsync_disabledesktopthemesettingsync_checkbox_useroverride","displayName":"Allow users to turn \"desktop personalization\" syncing on.","description":null,"helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disabledesktopthemesettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disabledesktopthemesettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"6b38af7377b2a17a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness","displayName":"Microsoft OneDrive for Business 2013","description":"\r\nThis policy setting configures the synchronization of user settings for OneDrive for Business 2013.\r\nBy default, the user settings of OneDrive for Business 2013 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2013 from synchronization between computers.\r\nIf you enable this policy setting, OneDrive for Business 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, OneDrive for Business 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onedriveforbusiness"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness_1","displayName":"Enabled","description":null,"helpText":null}]},"6b090b96256f5b04":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup","displayName":"Project 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Project 2013.\r\nMicrosoft Project 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Project 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Project 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013projectbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"6ba6ede497bfcb29":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word","displayName":"Microsoft Word 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Word 2016.\r\nBy default, the user settings of Microsoft Word 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016word"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word_1","displayName":"Enabled","description":null,"helpText":null}]},"6ba693343ad2a8aa":{"id":"device_vendor_msft_policy_config_browser_allowextensions","displayName":"Allow Extensions","description":"This setting lets you decide whether employees can load extensions in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowextensions"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowextensions_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowextensions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"6bc74ceae1d5e469":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_forcedlanguagesdesc","displayName":"Configure the content and order of preferred languages (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6bff89fc960c7bcc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode","displayName":"Control use of the Headless Mode","description":"Setting this policy to Enabled or leaving the policy unset allows use of the headless mode. Setting this policy to Disabled denies use of the headless mode.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_1","displayName":"Enabled","description":null,"helpText":null}]},"6b1b38ea9ba28896":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage","displayName":"Force enable spellcheck languages","description":"Force-enables spellcheck languages. Unrecognized languages in the list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be enabled for the languages specified, in addition to the languages for which the user has enabled spellcheck.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the SpellcheckEnabled policy is set to false, this policy will have no effect.\r\n\r\nIf a language is included in both this policy and the SpellcheckLanguageBlocklist policy, this policy is prioritized and the spellcheck language is enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"6b6f378c7acda875":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_synctypeslistdisableddesc","displayName":"List of types that should be excluded from synchronization (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6ba43b162362cc22":{"id":"device_vendor_msft_policy_config_display_disableperprocessdpiforapps","displayName":"Disable Per Process Dpi For Apps","description":"This policy allows you to disable Per-Process System DPI for a semicolon-separated list of applications. Applications can be specified either by using full paths or with filenames and extensions. This policy will override the system-wide default value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#disableperprocessdpiforapps"],"categoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","categoryName":"Display","options":null},"6bae6c794197e5c4":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_odfcvhdlocations","displayName":"VHD Locations (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"6b67f8e18073697d":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles","displayName":"Allow drag and drop or copy and paste files","description":"This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\n\nIf you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.\n\nIf you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.\n\nIf you do not configure this policy setting, users are queried to choose whether to drag or copy files from this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowdraganddropcopyandpastefiles"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"6bd4197223172feb":{"id":"device_vendor_msft_policy_config_lanmanworkstation_enablemailslots","displayName":"Enable Mailslots","description":"This policy controls whether the SMB client will enable or disable remote mailslots over MUP. If you disable this policy setting, remote mailslots will not function over MUP, hence they will not go through the SMB client redirector. If you do not configure this policy setting, remote mailslots may be allowed through MUP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#enablemailslots"],"categoryId":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_enablemailslots_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_enablemailslots_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"6ba55b80127c80c3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed","displayName":"Allow users to proceed from the HTTPS warning page","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\r\n\r\nIf you enable or don't configure (default) this policy, users can click through these warning pages.\r\n\r\nIf you disable this policy, users are blocked from clicking through any warning page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"6b5957a7cf3c5fe9":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_powerpntexe17","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_powerpntexe17_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_powerpntexe17_1","displayName":"True","description":null,"helpText":null}]},"6b17e240ccd83151":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"6bd756c111bbd802":{"id":"device_vendor_msft_windowsdefenderapplicationguard_platformstatus","displayName":"Platform status","description":"Applies to Microsoft Office/Generic platform. Returns bitmask that indicates status of Application Guard platform installation and prerequisites on the device. Bit 0 - Set to 1 when Application Guard is enabled into enterprise manage mode. Bit 1 - Set to 1 when the client machine is Hyper-V capable. Bit 2 - Reserved for Microsoft. Bit 3 - Set to 1 when Application Guard is installed on the client machine. Bit 4 - Reserved for Microsoft. Bit 5 - Set to 1 when the client machine meets minimum hardware requirements.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/windowsdefenderapplicationguard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":null},"6bcfdcebadb6c09d":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultcustomtab","displayName":"Show custom templates tab by default in Access on the Office Start screen and in File | New (User)","description":"This policy setting controls whether custom templates (when they exist) show as the default tab in Access on the Office Start screen and in File | New. \r\n\r\nIf you enable this policy setting, users will the see custom templates tab as the default tab in Access on the Office Start screen and in File | New when templates exist (this can include Custom XML programmed templates, templates in the Workgroup templates path, templates in the Personal templates path, or SharePoint templates).\r\n\r\nIf you disable or do not configure this policy setting, users will see the Featured templates tab as the default tab in Access on the Office Start screen and in File | New, unless all Office-provided templates have been disabled.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultcustomtab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultcustomtab_1","displayName":"Enabled","description":null,"helpText":null}]},"6bec7c2d50629c1a":{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls","displayName":"Show only specified Control Panel items (User)","description":"This policy setting controls which Control Panel items such as Mouse, System, or Personalization, are displayed on the Control Panel window and the Start screen. The only items displayed in Control Panel are those you specify in this setting. This setting affects the Start screen and Control Panel, as well as other ways to access Control Panel items such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings.\r\n\r\nTo display a Control Panel item, enable this policy setting and click Show to access the list of allowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization.\r\n\r\nNote: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name, for example timedate.cpl or inetcpl.cpl, should be entered. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered. For example, enter @systemcpl.dll,-1 for System or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names of Control Panel items can be found in MSDN by searching \"Control Panel items\".\r\n\r\nIf both the \"Hide specified Control Panel items\" setting and the \"Show only specified Control Panel items\" setting are enabled, the \"Show only specified Control Panel items\" setting is ignored.\r\n\r\nNote: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the \"Disable Display Control Panel\" setting instead.\r\n\r\nNote: To hide pages in the System Settings app, use the \"Settings Page Visibility\" setting under Computer Configuration.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-restrictcpls"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls_1","displayName":"Enabled","description":null,"helpText":null}]},"6b12316e8be4df4f":{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcoloralpha","displayName":"Alpha (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"6ba91e841dcf5e5f":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activediruserscomp","displayName":"Active Directory Users and Computers (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-activediruserscomp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activediruserscomp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activediruserscomp_1","displayName":"Enabled","description":null,"helpText":null}]},"6b8b3b57c12c10eb":{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenudownload","displayName":"Remove Downloads link from Start Menu (User)","description":"This policy setting allows you to remove the Downloads link from the Start Menu.\r\n\r\nIf you enable this policy setting, the Start Menu does not show a link to the Downloads folder.\r\n\r\nIf you disable or do not configure this policy setting, the Downloads link is available from the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenudownload"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenudownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenudownload_1","displayName":"Enabled","description":null,"helpText":null}]},"6bbf8204e45b923c":{"id":"user_vendor_msft_policy_config_admx_startmenu_showruninstartmenu","displayName":"Add the Run command to the Start Menu (User)","description":"If you enable this setting, the Run command is added to the Start menu. If you disable or do not configure this setting, the Run command is not visible on the Start menu by default, but it can be added from the Taskbar and Start menu properties. If the Remove Run link from Start Menu policy is set, the Add the Run command to the Start menu policy has no effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showruninstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showruninstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showruninstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"6b540089207f2b82":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher","displayName":"Microsoft Publisher 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Publisher 2013.\r\nBy default, the user settings of Microsoft Publisher 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Publisher 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Publisher 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013publisher"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher_1","displayName":"Enabled","description":null,"helpText":null}]},"6b25864b8c88cccd":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofolderoptions","displayName":"Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon (User)","description":"This policy setting allows you to prevent users from accessing Folder Options through the View tab on the ribbon in File Explorer.\r\n\r\nFolder Options allows users to change the way files and folders open, what appears in the navigation pane, and other advanced view settings.\r\n\r\nIf you enable this policy setting, users will receive an error message if they tap or click the Options button or choose the Change folder and search options command, and they will not be able to open Folder Options.\r\n\r\nIf you disable or do not configure this policy setting, users can open Folder Options from the View tab on the ribbon.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nofolderoptions"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofolderoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofolderoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"6b3c984ef5c62b9d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_insecureprivatenetworkrequestsallowedforurlsdesc","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6bc1d91d510a0c31":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_additionallaunchparameters","displayName":"Additional command line parameters for Google Chrome (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"6b72e63c48feebb0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled","displayName":"Enable HTTP/0.9 support on non-default ports (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6b5f81bdb6f2d80e":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled","displayName":"Enable Renderer App Container (User)","description":"Setting the policy to Enabled or leaving it unset means Renderer App Container configuration will be enabled on supported platforms.\r\n\r\nSetting the policy to Disabled has a detrimental effect on the security and stability of Google Chrome as it will weaken the sandbox that renderer processes use. Only turn off the policy if there are compatibility issues with third-party software that must run inside renderer processes.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6b57f850724ebb7a":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerpasskeysenabled","displayName":"Enable saving passkeys to the password manager (User)","description":"This policy controls the browser's ability to save passkeys in the built-in password manager. It does not limit access to, or change the contents of, passkeys already saved in the password manager. If the PasswordManagerEnabled policy is set to Disabled then saving in the built-in password manager is disabled in general, including passkeys and passwords, and thus this policy is not applicable.\r\n\r\nSetting the policy to Enabled or leaving unset means that users can save passkeys in the built-in password manager if signed into Google Chrome.\r\n\r\nSetting the policy to Disabled means users can't save passkeys to the built-in password manager, but previously saved passkeys will still work.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerpasskeysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerpasskeysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6bb86a23e5e7721b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled","displayName":"Choose whether the Privacy Sandbox IP Protection feature should be enabled. (User)","description":"A policy to control whether the Privacy Sandbox IP Protection feature should be enabled.\r\n\r\nIP Protection is a feature that limits availability of a user's original IP address for certain third-party network requests made while browsing in Incognito mode, enhancing protections against cross-site tracking during Incognito browsing sessions.\r\n\r\nIf the policy is set to Disabled, then IP Protection will be disabled and users won't be able to enable the feature via UI settings.\r\nIf the policy is set to Enabled, then IP Protection will be enabled and users won't be able to disable the feature via UI settings.\r\nIf the policy is not set, IP Protection will be enabled by default and users will be able to control the feature on their device via UI settings.\r\n\r\nSome considerations regarding whether enterprises should disable IP Protection include:\r\n\r\n- DNS lookups won't be performed for requests that are proxied, which may impact DNS-based monitoring or filtering.\r\n\r\n- Enterprise applications may experience breakage when used in Incognito mode if they rely on requests to domains (or subdomains of those domains) on the Masked Domain List (Google Chrome) and require those requests to come from specific IP address ranges.\r\n\r\n- Traffic might not be proxied in Incognito mode under certain conditions, for example when users launch Incognito mode from a Chrome profile they aren't signed in to. In general the feature requires the user to have been signed in to Chrome with a personal Google account when launching Incognito mode.\r\n\r\n- The list of domains on the Masked Domain List may change over time, with new versions being pushed to users automatically. For more information on the Masked Domain List, see: Google Chrome.\r\n\r\nFor more information on IP Protection, see: Google Chrome.\r\n\r\nIP Protection will be launched no sooner than M139.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6badda3d4bb9bea3":{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3","displayName":"Third choice (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_","displayName":"","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},"6b163105a63cad1b":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowuserdatapersistence"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"6b430615b5950501":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallownetframeworkreliantcomponents"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"6bd6df6987fbbf1e":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection","displayName":"Configure enhanced hang detection for Internet Explorer mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection_0","displayName":"Enhanced hang detection disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection_1","displayName":"Enhanced hang detection enabled","description":null,"helpText":null}]},"6b83c327d8e9b7c2":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_l_writingassistantinstallandstartupadminchoiceenum","displayName":"Configure Writing Assistance Install and Startup Behavior (User)","description":"","helpText":"","infoUrls":[],"categoryId":"05a6f86f-dab7-4888-97a1-db3457f00974","categoryName":"Writing Assistance","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_l_writingassistantinstallandstartupadminchoiceenum_0","displayName":"Not installed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_l_writingassistantinstallandstartupadminchoiceenum_1","displayName":"Installed, don't launch at startup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_l_writingassistantinstallandstartupadminchoiceenum_3","displayName":"Installed, don't launch at startup by default (users can enable)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_l_writingassistantinstallandstartupadminchoiceenum_2","displayName":"Installed, launch at startup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantinstallandstartupadminchoice_l_writingassistantinstallandstartupadminchoiceenum_4","displayName":"Installed, launch at startup by default (users can disable)","description":null,"helpText":null}]},"6bd51f83c11f559e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiexcel","displayName":"Disallow in Excel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiexcel_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiexcel_1","displayName":"True","description":null,"helpText":null}]},"6bee82b3b499cd06":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_igbo","displayName":"Igbo (User)","description":"Enables the editing language Igbo","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_igbo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_igbo_1","displayName":"Enabled","description":null,"helpText":null}]},"6ba4b934ac6802fd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_japanese","displayName":"Japanese (User)","description":"Enables the editing language Japanese","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_japanese_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_japanese_1","displayName":"Enabled","description":null,"helpText":null}]},"6b78b88558e381ab":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_l_workflowpath459","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"6ba40144e84ef9ed":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa","displayName":"Enforce PDF compliance with ISO 19005-1 (PDF/A) (User)","description":"Allows enforcement of ISO 19005-1 compliance in PDF output. The values for his setting are as follows:\r\n \r\nDefault: Options UI defaults to not ISO compliant. User may override.\r\n\r\nEncourage: Options UI defaults to ISO compliance. User may override.\r\n\r\nPrevent: Not ISO compliant. No user override.\r\n\r\nEnforce: ISO compliant. No user override.\r\n\r\nSee Office Help for more details on the tradeoffs of choosing ISO 19005 compliance.","helpText":"","infoUrls":[],"categoryId":"5b1be2c5-9939-4b2e-b29b-b22069455c90","categoryName":"Microsoft Save As PDF and XPS add-ins","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_enforcepdfcompliancewithiso190051pdfa_1","displayName":"Enabled","description":null,"helpText":null}]},"6b610829eb7dd659":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifyminimumxadeslevelfordigitalsignaturegeneration","displayName":"Specify minimum XAdES level for digital signature generation (User)","description":"This policy setting lets you specify a minimum XAdES level that Office 2016 applications must reach in order to create an XAdES digital signature. If unable to reach the minimum XAdESLevel, the Office application fails to create the signature. \r\n\r\nIf you enable this policy setting, you can set the following minimum XAdES levels that must be met by the Office application before creating the digital signature.\r\n\r\n- No minimum level\r\n- XAdES-BES: Must create at least XAdES-BES or fail\r\n- XAdES-T: Must create at least XAdES-T (timestamp) or fail. \r\n- XAdES-C: Must create at least XAdES-C (certificate and revocation references) or fail. \r\n- XAdES-X: Must create at least XAdES-X (timestamp -C) or fail. \r\n- XAdES-X-L: Must create at least XAdES-X-L (store certificate and revocation values) or fail.\r\n\r\nIf you disable or do not configure this policy setting, Office 2016 does not require a minimum XAdES level and creates the most advanced XAdES signature possible, up to the level specified in the policy setting","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifyminimumxadeslevelfordigitalsignaturegeneration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifyminimumxadeslevelfordigitalsignaturegeneration_1","displayName":"Enabled","description":null,"helpText":null}]},"6be93f097bcbc742":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_defaultrootdir_defaultrootdirlist","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"6b623d866a9b9b2d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_lockedformregions_l_empty76_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"e0e10e94-325c-49e6-ab48-4f146254395f","categoryName":"Form Region Settings","options":null},"6b497495b3b451bf":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"6bf547d9e43e9411":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_pathcolon40","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"6b7cfc4e3da07d84":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_automaticallyaddnewitemstotheglobalproject","displayName":"Automatically add new items to the global project (User)","description":"This policy setting specifies whether new items (views, tables, filters, and groups) are automatically added to the global project so they are available in all of the projects.\r\n\r\nIf you enable or do not configure this policy setting, new items will be automatically added to the global project.\r\n\r\nIf you disable this policy setting, new items will not be automatically added to the global project.","helpText":"","infoUrls":[],"categoryId":"251c6873-bf5b-4d85-8185-3c4973b6f33c","categoryName":"Show","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_automaticallyaddnewitemstotheglobalproject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_automaticallyaddnewitemstotheglobalproject_1","displayName":"Enabled","description":null,"helpText":null}]},"6bbef7d220193674":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/6c.json b/public/intune-definitions/6c.json new file mode 100644 index 000000000000..06c19d6c0f76 --- /dev/null +++ b/public/intune-definitions/6c.json @@ -0,0 +1 @@ +{"6cf2cdb8852a21f4":{"id":"app_allowed","displayName":"Allowed","description":"The dictionary of allowed app settings.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"6c6f4e7c0127d032":{"id":"com.apple.cellular_apns","displayName":"APNs","description":"An array of access point dictionaries.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"6cc14dd58a1d6bc5":{"id":"com.apple.extensiblesso_extensiondata_generickey_keytobereplaced","displayName":"Key","description":"Additional extension-specific data to pass to the app extension.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"6cd6227a8bc5b421":{"id":"com.apple.managedclient.preferences_downloaddirectory","displayName":"Set download directory","description":"Configures the directory to use when downloading files.\n\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified one or chosen to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\n\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\n\nIf you set an invalid path, Microsoft Edge will default to the user's default download directory.\n\nIf the folder specified by the path doesn't exist, the download will trigger a prompt that asks the user where they want to save their download.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#downloaddirectory"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"6cb8aa0f482c7909":{"id":"com.apple.managedclient.preferences_siteperprocess","displayName":"Enable site isolation for every site","description":"The 'SitePerProcess' policy can be used to prevent users from opting out of the default behavior of isolating all sites. Note that you can also use the \"IsolateOrigins\" policy to isolate additional, finer-grained origins.\nIf you enable this policy, users can't opt out of the default behavior where each site runs in its own process.\nIf you disable or don’t configure this policy, a user can opt out of site isolation. (For example, by using \"Disable site isolation\" entry in edge://flags.) Disabling the policy or not configuring the policy doesn't turn off Site Isolation.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#siteperprocess"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_siteperprocess_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_siteperprocess_true","displayName":"Enabled","description":null,"helpText":null}]},"6c24cea14f326c17":{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode","description":"Enforces a minimum Restricted Mode on YouTube and prevents users from picking a less restricted mode.\n\nSet to 'Strict' to enforce Strict Restricted Mode on YouTube.\n\nSet to 'Moderate' to enforce the user to only use Moderate Restricted Mode and Strict Restricted Mode on YouTube. They can't disable Restricted Mode.\n\nSet to 'Off' or don't configure this policy to not enforce Restricted Mode on YouTube. External policies such as YouTube policies might still enforce Restricted Mode.\n\nPolicy options mapping:\n\n* Off (0) = Do not enforce Restricted Mode on YouTube\n\n* Moderate (1) = Enforce at least Moderate Restricted Mode on YouTube\n\n* Strict (2) = Enforce Strict Restricted Mode for YouTube\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict_off","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict_moderate","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict_strict","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},"6cc92ac5328f94d0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended","displayName":"Action to take on Microsoft Edge startup (users can override)","description":"Specify how Microsoft Edge behaves when it starts.\n\nIf you want a new tab to always open on startup, choose 'RestoreOnStartupIsNewTabPage'.\n\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'RestoreOnStartupIsLastSession'. The browsing session is restored as it was. This option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\n\nIf you want to open a specific set of URLs, choose 'RestoreOnStartupIsURLs'.\n\nStarting in Microsoft Edge version 125, if you want to reopen URLs that were open the last time Microsoft Edge closed and open a specific set of URLs, choose 'RestoreOnStartupIsLastSessionAndURLs'.\n\nDisabling this setting is the same as leaving it not configured. Users can change it in Microsoft Edge.\n\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is only available on instances that are managed via MDM or joined to a domain via MCX.\n\nPolicy options mapping:\n\n* RestoreOnStartupIsNewTabPage (5) = Open a new tab\n\n* RestoreOnStartupIsLastSession (1) = Restore the last session\n\n* RestoreOnStartupIsURLs (4) = Open a list of URLs\n\n* RestoreOnStartupIsLastSessionAndURLs (6) = Open a list of URLs and restore the last session\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupisnewtabpage","displayName":"Open a new tab","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupislastsession","displayName":"Restore the last session","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupisurls","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupislastsessionandurls","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},"6cab1010b3d25f37":{"id":"com.microsoft.edge.mamedgeappconfigsettings.tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors (Obsolete)","description":"This policy doesn't work because it was only intended to be a short-term mechanism to give enterprises more time to upgrade affected proxies.\n\nThis policy controls a security feature in TLS 1.3 that protects connections against downgrade attacks. It's backwards-compatible and doesn't affect connections to compliant TLS 1.2 servers or proxies. However, older versions of some TLS-intercepting proxies have an implementation flaw which causes them to be incompatible.\n\nIf you enable or don't configure this policy, Microsoft Edge enables these security protections for all connections.\n\nIf you disable this policy, Microsoft Edge disables these security protections for connections authenticated with locally-installed CA certificates. These protections are always enabled for connections authenticated with publicly-trusted CA certificates.\n\nThis policy can be used to test for any affected proxies and upgrade them. Affected proxies are expected to fail connections with an error code of ERR_TLS13_DOWNGRADE_DETECTED.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.tls13hardeningforlocalanchorsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.tls13hardeningforlocalanchorsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6cc850c9895055bc":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_includedidlist_groupid","displayName":"Included Devices","description":"The group(s) that the policy will be applied to. If multiple groups are added, the policy will be applied to any media in all those groups.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"6c543c59d6995902":{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}","displayName":" Slot ID","description":"Node representing a SIM Slot. The node name is the Slot ID. SIM Slot ID format is \"0\", \"1\", etc., with exception of \"Embedded\" which represents the embedded Slot.","helpText":"","infoUrls":[],"categoryId":"83fb8ae9-dfc0-4ff8-8a98-3a04f0edd919","categoryName":"Multi SIM","options":null},"6c791bfabbec8628":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday","displayName":"Specify the day of the week to check for security intelligence updates","description":"This policy setting allows you to specify the day of the week on which to check for security intelligence updates. The check can also be configured to run every day or to never run at all.\r\n\r\n This setting can be configured with the following ordinal number values:\r\n (0x0) Every Day (default)\r\n (0x1) Sunday \r\n (0x2) Monday\r\n (0x3) Tuesday\r\n (0x4) Wednesday\r\n (0x5) Thursday\r\n (0x6) Friday\r\n (0x7) Saturday\r\n (0x8) Never\r\n\r\n If you enable this setting, the check for security intelligence updates will occur at the frequency specified.\r\n\r\n If you disable or do not configure this setting, the check for security intelligence updates will occur at a default frequency.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-scheduleday"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduleday_1","displayName":"Enabled","description":null,"helpText":null}]},"6c3e2f027022b06e":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablewindowssettingsync","displayName":"Do not sync other Windows settings","description":"Prevent the \"Other Windows settings\" group from syncing to and from this PC. This turns off and disables the \"Other Windows settings\" group on the \"sync your settings\" page in PC settings.\r\n\r\nIf you enable this policy setting, the \"Other Windows settings\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn other Windows settings syncing on\" so that syncing it turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"Other Windows settings\" group is on by default and configurable by the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disablewindowssettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablewindowssettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablewindowssettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"6c7632f97862ca4c":{"id":"device_vendor_msft_policy_config_admx_srmfci_centralclassificationlist_centralclassificationlisttextelement","displayName":"Classification properties list:","description":null,"helpText":"","infoUrls":[],"categoryId":"dd9a3dad-5851-4899-a5c1-c23318986846","categoryName":"File Classification Infrastructure","options":null},"6caad22113bea27f":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_delete_roaming_user_profiles_ts_profile_directory_monitoring_interval","displayName":"Monitoring interval (minutes):","description":null,"helpText":"","infoUrls":[],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":null},"6c1cf9768bb0008c":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_enableuev","displayName":"Enable UEV","description":"This policy setting allows you to enable or disable User Experience Virtualization (UE-V) feature. Reboot is needed for enable to take effect. With Auto-register inbox templates enabled, the UE-V inbox templates such as Office 2016 will be automatically registered when the UE-V Service is enabled. If this option is changed, it will only take effect when UE-V service is re-enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-enableuev"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_enableuev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_enableuev_1","displayName":"Enabled","description":null,"helpText":null}]},"6ce79bab26e54c93":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_msteams","displayName":"Microsoft Teams","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_msteams_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_msteams_1","displayName":"True","description":null,"helpText":null}]},"6cc8725328dd4ca5":{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootuser","displayName":"Integration Root Global","description":"Specifies the location where symbolic links are created to the current version of a globally published package. Shortcuts, file type associations, etc. are created pointing to this path. If empty, symbolic links are not used during publishing. Example: %allusersprofile%\\Microsoft\\AppV\\Client\\Integration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-integrationallowrootuser"],"categoryId":"ea9a092f-dd93-41d4-9bbb-118de1213578","categoryName":"Integration","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootuser_1","displayName":"Enabled","description":null,"helpText":null}]},"6ce54b6007888fc7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_printertypedenylistdesc","displayName":"Disable printer types on the deny list (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"6c432cbf086efe7c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout","displayName":"Delay before running idle actions","description":"Triggers an action when the computer is idle.\r\n\r\nIf this policy is set, it specifies the length of time without user input (in minutes) before the browser runs actions configured via the IdleTimeoutActions policy.\r\n\r\nIf this policy is not set, no action will be ran.\r\n\r\nThe minimum threshold is 1 minute.\r\n\r\n\"User input\" is defined by Operating System APIs, and includes things like moving the mouse or typing on the keyboard.","helpText":"","infoUrls":[],"categoryId":"8c35f124-e249-43e3-9044-ecc0b0a5855a","categoryName":"Idle Browser Actions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"6cbd00296fba0087":{"id":"device_vendor_msft_policy_config_lanmanserver_enablemailslots","displayName":"Enable Mailslots","description":"This policy controls whether the SMB server will enable or disable remote mailslots over the computer browser service. If you disable this policy setting, the computer browser service will no longer run as expected. If you do not configure this policy setting, the computer browser may still be working with remote mailslots enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#enablemailslots"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_lanmanserver_enablemailslots_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_enablemailslots_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"6c6eef3a0bf3d8d2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_0","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_1","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_2","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},"6cfc47d407adb3cd":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_onbulkdataentryenterpriseconnector","displayName":"Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"6cca6731df298f0c":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled","displayName":"Allow Local Network Access (LNA) requests in subframes without explicit delegation","description":"Controls whether Local Network Access (LNA) permissions are inherited by cross-origin subframes.\r\n\r\nBy default, Local Network Access permissions can be requested in cross-origin subframes only if they are explicitly delegated.\r\n\r\nIf you enable this policy, subframes inherit all LNA Permissions Policy features by default and can make local network requests, which trigger the permission prompt.\r\n\r\nIf you disable or don't configure this policy, subframes must be explicitly delegated the Permissions Policy feature to make local network requests and trigger the permission prompt.\r\n\r\nThis policy applies to the Permissions Policy features \"local-network-access\", \"loopback-network\", and \"local-network\".\r\n\r\nFor more information about Local Network Access, see https://learn.microsoft.com/deployedge/ms-edge-local-network-access.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6c4b22fafe211b8f":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings_exemptdomainfiletypepairsfromfiletypedownloadwarningsdesc","displayName":"Disable download file type extension-based warnings for specified file types on domains (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"6c32e1fd84156b5b":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior","displayName":"Configure ShadowStack crash rollback behavior (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior_0","displayName":"Disable Hardware-enforced Stack Protection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior_1","displayName":"Disable Hardware-enforced Stack Protection until the next Microsoft Edge update","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior_2","displayName":"Enable Hardware-enforced Stack Protection","description":null,"helpText":null}]},"6cd3796e953025b8":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings","displayName":"Print preview sticky settings","description":"Specifies whether print preview should apply last used settings for Microsoft Edge PDF and webpages.\r\n\r\nIf you set this policy to 'EnableAll' or don't configure it, Microsoft Edge applies the last used print preview settings for both PDF and webpages.\r\n\r\nIf you set this policy to 'DisableAll', Microsoft Edge doesn't apply the last used print preview settings for both PDF and webpages.\r\n\r\nIf you set this policy to 'DisablePdf', Microsoft Edge doesn't apply the last used print preview settings for PDF printing and retains it for webpages.\r\n\r\nIf you set this policy to 'DisableWebpage', Microsoft Edge doesn't apply the last used print preview settings for webpage printing and retain it for PDF.\r\n\r\nThis policy is only available if you enable or don't configure the 'PrintingEnabled' (Enable printing) policy.\r\n\r\nPolicy options mapping:\r\n\r\n* EnableAll (0) = Enable sticky settings for PDF and Webpages\r\n\r\n* DisableAll (1) = Disable sticky settings for PDF and Webpages\r\n\r\n* DisablePdf (2) = Disable sticky settings for PDF\r\n\r\n* DisableWebpage (3) = Disable sticky settings for Webpages\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"6cc92fdaa0b2b66b":{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver","displayName":"Configure SMB v1 client driver","description":"Configures the SMB v1 client driver's start type.\n\nTo disable client-side processing of the SMBv1 protocol, select the \"Enabled\" radio button, then select \"Disable driver\" from the dropdown.\nWARNING: DO NOT SELECT THE \"DISABLED\" RADIO BUTTON UNDER ANY CIRCUMSTANCES!\n\nFor Windows 7 and Servers 2008, 2008R2, and 2012, you must also configure the \"Configure SMB v1 client (extra setting needed for pre-Win8.1/2012R2)\" setting.\n\nTo restore default SMBv1 client-side behavior, select \"Enabled\" and choose the correct default from the dropdown:\n* \"Manual start\" for Windows 7 and Windows Servers 2008, 2008R2, and 2012;\n* \"Automatic start\" for Windows 8.1 and Windows Server 2012R2 and newer.\n\nChanges to this setting require a reboot to take effect.\n\nFor more information, see https://support.microsoft.com/kb/2696547 \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-configuresmbv1clientdriver"],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_1","displayName":"Enabled","description":null,"helpText":null}]},"6cf5adb858d599ff":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride","displayName":"Specify the location to save the licensing token used by shared computer activation","description":"\r\nThis policy setting allows you to specify the file folder to save the licensing token used by shared computer activation. \r\n\r\nShared computer activation is used only for situations where multiple users share the same computer. For example, when using Remote Desktop Services (RDS). \r\n\r\nBy default, the licensing token used by shared computer activation is saved in the %localappdata%\\Microsoft\\Office\\16.0\\Licensing folder. But, this location isn’t included in the user’s roaming profile, so the licensing token won’t be available if the user signs in to a different computer.\r\n\r\nIf you enable this policy setting, you need to specify a location to store the licensing token used by shared computer activation. You should specify a folder that is specific to the user and that will be available to the user from whatever computer on the network that the user signs in to. For example, a folder that’s included in the user’s roaming profile, or a shared folder on the network, where there is a folder for each user.\r\n\r\nIf you disable or don’t configure this policy setting, Office uses the default folder to save the licensing token used by shared computer activation.\r\n\r\nNote: Shared computer activation is supported only with Office 365 subscription plans that include Office 365 ProPlus, Visio Pro for Office 365, or Project Online Desktop Client.\r\n ","helpText":"","infoUrls":[],"categoryId":"2e3f0407-6387-41b4-b6c2-ada4354be759","categoryName":"Licensing Settings","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride_1","displayName":"Enabled","description":null,"helpText":null}]},"6cc2e7064a7cc557":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail","displayName":"Let Apps Access Email","description":"This policy setting specifies whether Windows apps can access email.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"6c3c5ac0f2d1066c":{"id":"device_vendor_msft_policy_config_remotedesktopservices_allowuserstoconnectremotely","displayName":"Allow users to connect remotely by using Remote Desktop Services","description":"This policy setting allows you to configure remote access to computers by using Remote Desktop Services.\n\nIf you enable this policy setting, users who are members of the Remote Desktop Users group on the target computer can connect remotely to the target computer by using Remote Desktop Services.\n\nIf you disable this policy setting, users cannot connect remotely to the target computer by using Remote Desktop Services. The target computer will maintain any current connections, but will not accept any new incoming connections.\n\nIf you do not configure this policy setting, Remote Desktop Services uses the Remote Desktop setting on the target computer to determine whether the remote connection is allowed. This setting is found on the Remote tab in the System properties sheet. By default, remote connections are not allowed. \n\nNote: You can limit which clients are able to connect remotely by using Remote Desktop Services by configuring the policy setting at Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Security\\Require user authentication for remote connections by using Network Level Authentication. \n\nYou can limit the number of users who can connect simultaneously by configuring the policy setting at Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Connections\\Limit number of connections, or by configuring the policy setting Maximum Connections by using the Remote Desktop Session Host WMI Provider.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-allowuserstoconnectremotely"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_allowuserstoconnectremotely_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_allowuserstoconnectremotely_1","displayName":"Enabled","description":null,"helpText":null}]},"6c12fadc646eafff":{"id":"device_vendor_msft_policy_config_search_allowusingdiacritics","displayName":"Allow Using Diacritics","description":"Allows the use of diacritics. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowusingdiacritics"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_allowusingdiacritics_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowusingdiacritics_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"6c99c04aee34f230":{"id":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching","displayName":"Hide Fast User Switching","description":"This policy setting allows you to hide the Switch User interface in the Logon UI, the Start menu and the Task Manager. If you enable this policy setting, the Switch User interface is hidden from the user who is attempting to log on or is logged on to the computer that has this policy applied. The locations that Switch User interface appear are in the Logon UI, the Start menu and the Task Manager. If you disable or do not configure this policy setting, the Switch User interface is accessible to the user in the three locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsLogon#hidefastuserswitching"],"categoryId":"500d2bb1-5186-447c-818f-401f2d9065ce","categoryName":"Windows Logon","options":[{"id":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching_0","displayName":"Disabled","description":"Disabled (visible).","helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching_1","displayName":"Enabled","description":"Enabled (hidden).","helpText":null}]},"6c1a804940128cd7":{"id":"settings_item_softwareupdatesettings_recommendationcadence","displayName":"Recommendation Cadence (Deprecated)","description":"This value defines how the system presents software updates to the user. When there's more than one available update for the user, the system behaves as follows:\n\n- `0`: Presents both options to the user.\n- `1`: Presents the lower numbered (oldest) software update version.\n- `2`: Presents only the highest numbered (most recent) release available for the device.\n\nThis value has no effect when there's only one available update; the system shows the single available update to the user regardless of the value of this setting.\n\nAvailable in iOS 14.5 and later.","helpText":null,"infoUrls":[],"categoryId":"724d930a-7a3c-4171-a17c-431cee336518","categoryName":"Software Update Settings","options":[{"id":"settings_item_softwareupdatesettings_recommendationcadence_0","displayName":"Presents both options to the user.","description":null,"helpText":null},{"id":"settings_item_softwareupdatesettings_recommendationcadence_1","displayName":"Presents the lower numbered (oldest) software update version.","description":null,"helpText":null},{"id":"settings_item_softwareupdatesettings_recommendationcadence_2","displayName":"Presents only the highest numbered (most recent) release available for the device.","description":null,"helpText":null}]},"6c5e02222fbc78b9":{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle","displayName":"Wallpaper Style: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_0","displayName":"Center","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_1","displayName":"Tile","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_2","displayName":"Stretch","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_3","displayName":"Fit","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_4","displayName":"Fill","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_5","displayName":"Span","description":null,"helpText":null}]},"6c9c0a62dcec4a5b":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11","displayName":"Internet Explorer 11 (User)","description":"This policy setting configures the synchronization of user settings of Internet Explorer 11.\r\nBy default, the user settings of Internet Explorer 11 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 11 from synchronization between computers.\r\nIf you enable this policy setting, the Internet Explorer 11 user settings continue to synchronize.\r\nIf you disable this policy setting, Internet Explorer 11 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer11"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11_1","displayName":"Enabled","description":null,"helpText":null}]},"6cc5d84420f709ba":{"id":"user_vendor_msft_policy_config_browser_unlockhomebutton","displayName":"Unlock Home Button (User)","description":"By default, when enabling Configure Home Button or Set Home Button URL, the home button is locked down to prevent your users from changing what page loads when clicking the home button. Use this policy to let users change the home button even when Configure Home Button or Set Home Button URL are enabled. If enabled, the UI settings for the home button are enabled allowing your users to make changes, including hiding and showing the home button as well as configuring a custom URL. If disabled or not configured, the UI settings for the home button are disabled preventing your users from making changes. Default setting: Disabled or not configured Related policy: -Configure Home Button -Set Home Button URL","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#unlockhomebutton"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_unlockhomebutton_0","displayName":"Disabled","description":"Lock down and prevent users from making changes to the settings.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_unlockhomebutton_1","displayName":"Enabled","description":"Let users make changes.","helpText":null}]},"6c824aac1b3311a1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for profile types. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_0","displayName":"Enable ambient authentication in regular sessions only.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_1","displayName":"Enable ambient authentication in incognito and regular sessions.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_2","displayName":"Enable ambient authentication in guest and regular sessions.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_3","displayName":"Enable ambient authentication in regular, incognito and guest sessions.","description":null,"helpText":null}]},"6c25dec16c377ae0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate","displayName":"Refresh rate for user policy (User)","description":"Setting the policy specifies the period in milliseconds at which the device management service is queried for user policy information. Valid values range from 1,800,000 (30 minutes) to 86,400,000 (1 day). Values outside this range will be clamped to the respective boundary.\r\n\r\nLeaving the policy unset uses the default value of 3 hours.\r\n\r\nNote: Policy notifications force a refresh when the policy changes, making frequent refreshes unnecessary. So, if the platform supports these notifications, the refresh delay is 24 hours (ignoring defaults and the value of this policy).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_1","displayName":"Enabled","description":null,"helpText":null}]},"6c22c5a69e9fca72":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled","displayName":"Enable Incognito mode (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6c27aace445b0ffb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist","displayName":"Block access to a list of URLs (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},"6c82f0649ec775d2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork","displayName":"Turn off Trusted Documents on the network (User)","description":"This policy setting allows you to turn off the trusted documents feature for documents opened from the network.\r\n\r\nIf you enable this policy setting, users will always see security notifications for active content such as macros, ActiveX controls, data connections, etc. for documents opened from the network.\r\n\r\nIf you disable or do not configure this policy setting, the trusted documents feature allows users to always allow active content in documents such as macros, ActiveX controls, data connections, etc. so that users are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"6c6f622544a53c57":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10","displayName":"Trusted Location #10 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_1","displayName":"Enabled","description":null,"helpText":null}]},"6c9e25786f2ded43":{"id":"user_vendor_msft_policy_config_internetexplorer_disablehomepagechange","displayName":"Disable changing home page settings (User)","description":"The Home page specified on the General tab of the Internet Options dialog box is the default Web page that Internet Explorer loads whenever it is run.\n\nIf you enable this policy setting, a user cannot set a custom default home page. You must specify which default home page should load on the user machine. For machines with at least Internet Explorer 7, the home page can be set within this policy to override other home page policies.\n\nIf you disable or do not configure this policy setting, the Home page box is enabled and users can choose their own home page.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablehomepagechange"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablehomepagechange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablehomepagechange_1","displayName":"Enabled","description":null,"helpText":null}]},"6c66a643a745fbf5":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowlessprivilegedsites"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"6ce5ebeea9fba315":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols","displayName":"Allow scripting of Internet Explorer WebBrowser controls (User)","description":"This policy setting determines whether a page can control embedded WebBrowser controls via script.\n\nIf you enable this policy setting, script access to the WebBrowser control is allowed.\n\nIf you disable this policy setting, script access to the WebBrowser control is not allowed.\n\nIf you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptingofinternetexplorerwebbrowsercontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"6c0af66816107894":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess","displayName":"Enable site isolation for every site (User)","description":"\r\nThe 'SitePerProcess' policy can be used to prevent users from opting out of the default behavior of isolating all sites. Note that you can also use the 'IsolateOrigins' (Enable site isolation for specific origins) policy to isolate additional, finer-grained origins.\r\nIf you enable this policy, users can't opt out of the default behavior where each site runs in its own process.\r\nIf you disable or don’t configure this policy, a user can opt out of site isolation. (For example, by using \"Disable site isolation\" entry in edge://flags.) Disabling the policy or not configuring the policy doesn't turn off Site Isolation.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"6ca942d791390904":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (User)","description":"Control whether websites can access nearby Bluetooth devices. You can completely block access or require the site to ask the user each time it wants to access a Bluetooth device.\r\n\r\nIf you don't configure this policy, the default value (3, meaning users are asked each time) is used and users can change it.\r\n\r\n* 2 = Don't allow any site to request access to Bluetooth devices by using the Web Bluetooth API\r\n\r\n* 3 = Allow sites to ask the user to grant access to a nearby Bluetooth device","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"6cdbd1cfd7453019":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_any","displayName":"Allow printing with and without background graphics","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_enabled","displayName":"Allow printing only with background graphics","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_disabled","displayName":"Allow printing only without background graphics","description":null,"helpText":null}]},"6cc5d6fbf7b6a98f":{"id":"user_vendor_msft_policy_config_office16v11~policy~l_microsoftofficesystem~l_services_l_officeenableautoalttext","displayName":"Automatically generate alternative text (alt text) for pictures (User)","description":"This policy setting controls whether alternative text (alt text) is generated automatically for pictures in Word, PowerPoint, and Outlook.\r\n\r\nThis policy setting is related to the \"Automatically generate alt text for me\" check box under File > Options > Ease of Access > Automatic Alt Text.\r\n\r\nIf you enable this policy setting, alt text will be generated automatically for pictures. The \"Automatically generate alt text for me\" check box will be selected and users won't be able to clear the check box.\r\n\r\nIf you disable this policy setting, alt text won't be generated automatically for pictures. The \"Automatically generate alt text for me\" check box won't be selected and users won't be able to select the check box.\r\n\r\nIf you don't configure this policy setting, alt text will be generated automatically for pictures. But, users will be able to clear the \"Automatically generate alt text for me\" check box.\r\n ","helpText":"","infoUrls":[],"categoryId":"478ed057-8ee7-4dd2-8276-06dad8f85397","categoryName":"Services","options":[{"id":"user_vendor_msft_policy_config_office16v11~policy~l_microsoftofficesystem~l_services_l_officeenableautoalttext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v11~policy~l_microsoftofficesystem~l_services_l_officeenableautoalttext_1","displayName":"Enabled","description":null,"helpText":null}]},"6cd48f39648732d2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookcontactsdictionary","displayName":"Set update interval for Outlook Contacts Dictionary (User)","description":"This policy setting allows you to specify the update interval for the Outlook Contacts Dictionary. This policy setting applies to Japanese Microsoft IME only.\r\n\r\nIf you enable this policy setting, you can specify the update interval. For example, if you specify \"720,\" the Outlook Contacts Dictionary is updated every 720 minutes.\r\n\r\nIf you do not configure this policy setting, the Outlook Contacts Dictionary is updated every 1440 minutes (24 hours).","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookcontactsdictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookcontactsdictionary_1","displayName":"Enabled","description":null,"helpText":null}]},"6c803bc6ab6c1dcc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits","displayName":"Configure legacy DSA public key size (User)","description":"This policy setting allows you to configure whether Office displays a digital signature as legacy because of the number of DSA public key bits used in the digital signature.\r\n\r\nIf you enable this policy setting, you can specify the number of bits that Office treats as legacy in a digital signature. For example: 512, 768, etc.\r\n\r\nIf you don’t configure this policy setting, Office won’t treat any digital signatures as legacy because of the number of bits in the public key.\r\n\r\nEnabling this policy causes the minimum DSA public key size to be the next largest option.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits_1","displayName":"Enabled","description":null,"helpText":null}]},"6cf62c50c2f6912f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi","displayName":"Preferred PST Mode (Unicode/ANSI) (User)","description":"Specifies whether new PST files created by the user are to be in Unicode or ANSI format, and whether the user is allowed to choose that format.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preferredpstmodeunicodeansi_1","displayName":"Enabled","description":null,"helpText":null}]},"6c0acc7c93bd9fae":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_turnoffrevisiontracking","displayName":"Turn off revision tracking (User)","description":"This policy setting allows you to turn off revision tracking in PowerPoint.\r\n\r\nBy default, revision tracking is on in presentations where revision tracking is supported.\r\n\r\nIf you enable this policy setting, revisions made to a presentation aren’t tracked or shown.\r\n\r\nIf you disable or don’t configure this policy setting, revisions made to a presentation are tracked and shown.","helpText":"","infoUrls":[],"categoryId":"ceacf7fa-fa6e-434d-a381-e20e5245d180","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_turnoffrevisiontracking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_turnoffrevisiontracking_1","displayName":"Enabled","description":null,"helpText":null}]},"6c238d7fbf91ef92":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04","displayName":"Trusted Location #4 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_1","displayName":"Enabled","description":null,"helpText":null}]},"6c39b17281977027":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_pathcolon28","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"6c9baf139d6d42b6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc16_l_datecolon69","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"6ced2ff1d40a1310":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_automaticallyhyphenateinnewtextboxes","displayName":"Automatically hyphenate in new text boxes (User)","description":"Checks/Unchecks the option ''Automatically hyphenate in new text boxes''.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_automaticallyhyphenateinnewtextboxes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_automaticallyhyphenateinnewtextboxes_1","displayName":"Enabled","description":null,"helpText":null}]},"6c8f388c2e27fee2":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},"6cb75f99688f1eb1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldcodes","displayName":"Show field codes instead of their values (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldcodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldcodes_1","displayName":"Enabled","description":null,"helpText":null}]},"6c8971a7f689ad8d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_plaintextfiles","displayName":"Plain text files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_plaintextfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_plaintextfiles_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/6d.json b/public/intune-definitions/6d.json new file mode 100644 index 000000000000..e96dfcf18b9a --- /dev/null +++ b/public/intune-definitions/6d.json @@ -0,0 +1 @@ +{"6d44e8308736f5ab":{"id":"ade_setupassistant_tvprovidersignin","displayName":"TV Provider Sign In","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_tvprovidersignin_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_tvprovidersignin_1","displayName":"Show","description":null,"helpText":null}]},"6d510eb050f131c2":{"id":"com.apple.app.lock_app_options_disabledevicerotation","displayName":"Disable Device Rotation","description":"If true, disables device rotation sensing.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_disabledevicerotation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_disabledevicerotation_true","displayName":"True","description":null,"helpText":null}]},"6d602c82934240d6":{"id":"com.apple.dnssettings.managed_dnssettings_serveraddresses","displayName":"Server Addresses","description":"An unordered list of DNS server IP address strings. These IP addresses can be a mixture of IPv4 and IPv6 addresses.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"6d893b6e7bf57d68":{"id":"com.apple.familycontrols.contentfilter_com.apple.familycontrols.contentfilter","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":null},"6d1e37b6fd23b7da":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_end","displayName":"End","description":"The curfew end time, in the format %d:%d:%d.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"6dccc878717aedbe":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app","displayName":"Microsoft Excel","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"6d269f5a4f559ae4":{"id":"com.apple.managedclient.preferences_diagnosticdatatypepreference","displayName":"Diagnostic data level","description":"Controls the amount of telemetry data sent by apps.","helpText":null,"infoUrls":["https://aka.ms/macdiagpref"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_diagnosticdatatypepreference_0","displayName":"Required data only","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_diagnosticdatatypepreference_1","displayName":"Required and Optional data","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_diagnosticdatatypepreference_2","displayName":"Do not send data","description":null,"helpText":null}]},"6d769a4c1e1ed3ca":{"id":"com.apple.networkusagerules_simrules_item_wifiassistpolicy","displayName":"Wi Fi Assist Policy","description":"The Wi-Fi Assist policy to apply to the SIM cards specified in the ICCIDs. See About Wi-Fi Assist to learn more.\n* '2': Use the default system policy for the specified SIM card(s).\n* '3': Make Wi-Fi Assist switch more aggressively from a poor Wi-Fi connection to cellular data for the specified SIM card(s). This setting may increase cellular data use and may impact battery life.","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":[{"id":"com.apple.networkusagerules_simrules_item_wifiassistpolicy_0","displayName":"2","description":null,"helpText":null},{"id":"com.apple.networkusagerules_simrules_item_wifiassistpolicy_1","displayName":"3","description":null,"helpText":null}]},"6d9ff8e59c28f445":{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"6d66cc8d222b3481":{"id":"com.apple.universalaccess_mousedriver","displayName":"Mouse Driver","description":"If true, enables Mouse Keys in the Mouse & Trackpad options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_mousedriver_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_mousedriver_true","displayName":"True","description":null,"helpText":null}]},"6d59433f8f421e6a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionsenabled","displayName":"Specifies whether to block requests from public websites to devices on a user's local network. (Obsolete)","description":"Local Network Access restrictions prevent public websites from making\nrequests to devices on a user's local network without explicit user permission.\n\nIf you enable this policy, Microsoft Edge blocks\nany request that would otherwise trigger a DevTools warning\ndue to Local Network Access checks.\nThese requests are denied without prompting the user.\n\nIf you disable or don't configure this policy, Microsoft Edge handles\nthese requests using the default behavior, which may include showing warnings in DevTools\nand allowing the request to proceed depending on the context.\n\nNote: This feature improves local network security by deprecating direct access to private IP addresses from public websites\nunless explicitly granted by the user. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.\n\nStarting in version 140, Microsoft Edge introduces support for policies that manage Local Network Access behavior on a per-URL basis.\n\nYou can configure exceptions to allow specific URLs to bypass Local Network Access restrictions.\n\nYou can also block specific URLs from making Local Network Access requests.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6d8e584bec0be464":{"id":"device_vendor_msft_defender_configuration_allowswitchtoasyncinspection","displayName":"Allow Switch To Async Inspection","description":"Control whether network protection can improve performance by switching from real-time inspection to asynchronous inspection","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_allowswitchtoasyncinspection_1","displayName":"Allow switching to asynchronous inspection","description":"Allow switching to asynchronous inspection","helpText":null},{"id":"device_vendor_msft_defender_configuration_allowswitchtoasyncinspection_0","displayName":"Don’t allow asynchronous inspection","description":"Don’t allow asynchronous inspection","helpText":null}]},"6db8dfce3e2098dd":{"id":"device_vendor_msft_laps_policies_passwordagedays_aad","displayName":"Password Age Days","description":"Use this policy to configure the maximum password age of the managed local administrator account.\n\nIf not specified, this setting will default to 30 days\n\nThis setting has a minimum allowed value of 1 day when backing the password to onpremises Active Directory, and 7 days when backing the password to Azure AD.\n\nThis setting has a maximum allowed value of 365 days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":null},"6db61ab70817ccbf":{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablepeercachingserver","displayName":"Do not allow the computer to act as a BITS Peercaching server","description":"This policy setting specifies whether the computer will act as a BITS peer caching server. By default, when BITS peer caching is enabled, the computer acts as both a peer caching server (offering files to its peers) and a peer caching client (downloading files from its peers).\r\n\r\n If you enable this policy setting, the computer will no longer cache downloaded files and offer them to its peers. However, the computer will still download files from peers.\r\n\r\n If you disable or do not configure this policy setting, the computer will offer downloaded and cached files to its peers.\r\n\r\n Note: This setting has no effect if the \"Allow BITS peer caching\" setting is disabled or not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-disablepeercachingserver"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablepeercachingserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablepeercachingserver_1","displayName":"Enabled","description":null,"helpText":null}]},"6da2ac72e33a9988":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef","displayName":"Default application reporting settings","description":"This policy setting controls whether errors in general applications are included in reports when Windows Error Reporting is enabled.\r\n\r\nIf you enable this policy setting, you can instruct Windows Error Reporting in the Default pull-down menu to report either all application errors (the default setting), or no application errors.\r\n\r\nIf the Report all errors in Microsoft applications check box is filled, all errors in Microsoft applications are reported, regardless of the setting in the Default pull-down menu. When the Report all errors in Windows check box is filled, all errors in Windows applications are reported, regardless of the setting in the Default dropdown list. The Windows applications category is a subset of Microsoft applications.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable Windows Error Reporting in Control Panel. The default setting in Control Panel is Upload all applications.\r\n\r\nThis policy setting is ignored if the Configure Error Reporting policy setting is disabled or not configured.\r\n\r\nFor related information, see the Configure Error Reporting and Report Operating System Errors policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-pch-allornonedef"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_1","displayName":"Enabled","description":null,"helpText":null}]},"6dbc38e9b810cb70":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_8","displayName":"Configure log access (legacy)","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string.\r\n\r\nIf you enable this policy setting, only users whose security descriptor matches the configured value can access the log.\r\n\r\nIf you disable this policy setting, only system software and administrators can write or clear this log, and any authenticated user can read events from it.\r\n\r\nIf you do not configure this policy setting, the previous policy setting configuration remains in effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-8"],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_8_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_8_1","displayName":"Enabled","description":null,"helpText":null}]},"6d05f80944b1590e":{"id":"device_vendor_msft_policy_config_admx_kdc_pkinitfreshness","displayName":"KDC support for PKInit Freshness Extension","description":"Support for PKInit Freshness Extension requires Windows Server 2016 domain functional level (DFL). If the domain controller’s domain is not at Windows Server 2016 DFL or higher this policy will not be applied.\r\n\r\nThis policy setting allows you to configure a domain controller (DC) to support the PKInit Freshness Extension.\r\n\r\nIf you enable this policy setting, the following options are supported:\r\n\r\nSupported: PKInit Freshness Extension is supported on request. Kerberos clients successfully authenticating with the PKInit Freshness Extension will get the fresh public key identity SID.\r\n\r\nRequired: PKInit Freshness Extension is required for successful authentication. Kerberos clients which do not support the PKInit Freshness Extension will always fail when using public key credentials.\r\n\r\nIf you disable or not configure this policy setting, then the DC will never offer the PKInit Freshness Extension and accept valid authentication requests without checking for freshness. Users will never receive the fresh public key identity SID.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kdc#admx-kdc-pkinitfreshness"],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_pkinitfreshness_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_pkinitfreshness_1","displayName":"Enabled","description":null,"helpText":null}]},"6dcb9cb017fc8fa4":{"id":"device_vendor_msft_policy_config_admx_smartcard_disallowplaintextpin","displayName":"Prevent plaintext PINs from being returned by Credential Manager","description":"This policy setting prevents plaintext PINs from being returned by Credential Manager. \r\n\r\nIf you enable this policy setting, Credential Manager does not return a plaintext PIN. \r\n\r\nIf you disable or do not configure this policy setting, plaintext PINs can be returned by Credential Manager.\r\n\r\nNote: Enabling this policy setting could prevent certain smart cards from working on Windows. Please consult your smart card manufacturer to find out whether you will be affected by this policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-disallowplaintextpin"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_disallowplaintextpin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_disallowplaintextpin_1","displayName":"Enabled","description":null,"helpText":null}]},"6d62960e2bdd054f":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access","displayName":"Microsoft Access 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Access 2010.\r\nBy default, the user settings of Microsoft Access 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Access 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010access"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access_1","displayName":"Enabled","description":null,"helpText":null}]},"6d1903ecec059a6d":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016","displayName":"Microsoft Office 365 Common 2016","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2016 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers with UE-V.\r\nIf you enable this policy setting, user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize with UE-V.\r\nIf you disable this policy setting, user settings which are common between the Microsoft Office Suite 2016 applications are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365common2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016_1","displayName":"Enabled","description":null,"helpText":null}]},"6d2f702bdd6d5d38":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_clockholdoverperiod","displayName":"ClockHoldoverPeriod","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"6d609d7bc6fec6af":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_any","displayName":"Allow printing both with and without background graphics","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_enabled","displayName":"Allow printing only with background graphics","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_disabled","displayName":"Allow printing only without background graphics","description":null,"helpText":null}]},"6d7e9dc8fcc6350d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled","displayName":"Enable Google Search Side Panel","description":"If set to Enabled or not set, Google Search Side Panel is allowed on all web pages.\r\n\r\nIf set to Disabled, Google Search Side Panel is not available on any webpage.\r\n\r\nGenAI capabilities that are part of this feature are not available for Educational or Enterprise accounts.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6dfebc09e67c14e1":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed","displayName":"Allow Pepper to use a new decoder for hardware accelerated video decoding.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"6d57bae5d8c0de56":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallownetframeworkreliantcomponents"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"6d8f7d4cc644fb1d":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_ldapclientsigningrequirements","displayName":"Network Security LDAP Client Signing Requirements","description":"Network security: LDAP client signing requirements This security setting determines the level of data signing that is requested on behalf of clients issuing LDAP BIND requests, as follows: None: The LDAP BIND request is issued with the options that are specified by the caller. Negotiate signing: If Transport Layer Security/Secure Sockets Layer (TLS\\SSL) has not been started, the LDAP BIND request is initiated with the LDAP data signing option set in addition to the options specified by the caller. If TLS\\SSL has been started, the LDAP BIND request is initiated with the options that are specified by the caller. Require signature: This is the same as Negotiate signing. However, if the LDAP server's intermediate saslBindInProgress response does not indicate that LDAP traffic signing is required, the caller is told that the LDAP BIND command request failed. Caution If you set the server to Require signature, you must also set the client. Not setting the client results in a loss of connection with the server. Note: This setting does not have any impact on ldap_simple_bind or ldap_simple_bind_s. No Microsoft LDAP clients that are shipped with Windows XP Professional use ldap_simple_bind or ldap_simple_bind_s to talk to a domain controller. Default: Negotiate signing.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_ldapclientsigningrequirements"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"6d2d9245994acd9e":{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_whatsnewpageforentraprofilesenabled","displayName":"Control whether an informational webpage for Edge for Business is shown in the new tab after major browser updates","description":"Starting in Microsoft Edge version 145, users with Microsoft Entra ID profiles will see an informational page about new Edge for Business features after major browser updates. This page highlights recent enhancements designed to promote secure and productive browsing.\r\n\r\nThis policy controls whether users with Microsoft Entra ID profiles see this informational page. This policy applies only to Microsoft Entra ID profiles and does not apply to Microsoft account (MSA) profiles.\r\n\r\nThis policy is available starting in Microsoft Edge version 144 to allow configuration ahead of the changes introduced in version 145.\r\n\r\nIf you enable this policy or do not configure it, Microsoft Edge shows the informational page by default.\r\nIf you disable this policy, Microsoft Edge does not show the informational page to users.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_whatsnewpageforentraprofilesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_whatsnewpageforentraprofilesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6de1fa8fcd107855":{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview","displayName":"Allow installation","description":"Lets you specify whether the WebView2 Runtime can be installed using Microsoft Edge Update.\r\n\r\n If you enable (1) this policy, users can install the WebView2 Runtime through Microsoft Edge Update.\r\n\r\n If you disable (0) this policy (or set it to 'Installs disabled'), users cannot install the WebView2 Runtime through Microsoft Edge Update.\r\n\r\n If you set this policy to Always allow Machine-Wide Installs but not Per-User Installs (4), the WebView2 Runtime will only be deployed machine-wide.\r\n\r\n If you set the policy to Force Installs (Machine-Wide) (5), users can install the WebView2 Runtime to all machines where Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\n If you don't configure this policy, the WebView2 Runtime will be installed through Microsoft Edge Update.","helpText":"","infoUrls":[],"categoryId":"46eaa2b7-341b-4e39-be21-c3ea09dd5778","categoryName":"Microsoft Edge Web View2 Runtime","options":[{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_1","displayName":"Enabled","description":null,"helpText":null}]},"6d39bd39bad77c99":{"id":"device_vendor_msft_policy_config_windowssandbox_allowclipboardredirection","displayName":"Allow Clipboard Redirection","description":"Allow clipboard sharing with Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowclipboardredirection"],"categoryId":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","categoryName":"Windows Sandbox","options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowclipboardredirection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowclipboardredirection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"6d54abb4bb54be74":{"id":"device_vendor_msft_policy_config_wslv4~policy~wsl~wslcontainer_wslcontainerregistryallowlist_wslcontainerregistryallowlist_input","displayName":"Allowed registries (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a787672d-4a33-455b-a2db-e340eb35a5c8","categoryName":"WSL container","options":null},"6d761a0e97304f68":{"id":"extensionsettings_managedextensions","displayName":"Managed Extensions","description":"Extensions being managed","helpText":null,"infoUrls":[],"categoryId":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","categoryName":"Safari Extension Settings","options":null},"6d561bdb9bd06aa9":{"id":"safari_newtabstartpage_homepageurl","displayName":"Homepage URL","description":"The URL of the homepage which needs to start with `https://` or `http://`. Required when setting `PageType` to `Home`.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"6dc6e8faad16602a":{"id":"settings_item_accessibilitysettings","displayName":"Accessibility Settings","description":"A dictionary that contains accessibility settings. Available in iOS 16 and later.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":null},"6d51efba1bc2f06f":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-internetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"6d1f27e2f81eab40":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended","displayName":"Block third party cookies (User)","description":"Setting the policy to Enabled prevents webpage elements that aren't from the domain that's in the browser's address bar from setting cookies. Setting the policy to Disabled lets those elements set cookies and prevents users from changing this setting.\r\n\r\nLeaving it unset turns third-party cookies on, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6d8473bd38e5b920":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist","displayName":"Proxy bypass rules (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: https://www.example1.com,https://www.example2.com,https://internalsite/","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},"6d816a3f0c681b6e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled","displayName":"Enable DHE cipher suites in TLS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6d3054731d766e25":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed","displayName":"Allow Chrome for Testing (User)","description":"Controls whether users may use Chrome for Testing.\r\n\r\nIf this policy is set to Enabled or not set, users may install and run Chrome for Testing.\r\n\r\nIf this policy is set to Disabled, users are not allowed to run Chrome for Testing. Users will still be able to install Chrome for Testing, however it will not run with the profiles where this policy is set to Disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"6df1c43c6521b2ec":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode","displayName":"Run .NET Framework-reliant components signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute signed managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute signed managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute signed managed components.\n\nIf you do not configure this policy setting, Internet Explorer will execute signed managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonerunnetframeworkreliantcomponentssignedwithauthenticode"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_1","displayName":"Enabled","description":null,"helpText":null}]},"6d0551d27a1d9e8b":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"6d61903ee4b39eb0":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks","displayName":"Enable online OCSP/CRL checks (User)","description":"Online revocation checks don't provide a significant security benefit and are disabled by default.\r\n\r\nIf you enable this policy, Microsoft Edge will perform soft-fail, online OCSP/CRL checks. \"Soft fail\" means that if the revocation server can't be reached, the certificate will be considered valid.\r\n\r\nIf you disable the policy or don't configure it, Microsoft Edge won't perform online revocation checks.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_1","displayName":"Enabled","description":null,"helpText":null}]},"6d89790c51c6b9d4":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit","displayName":"Clear cached images and files when Microsoft Edge closes (User)","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\r\n\r\nIf you enable this policy, cached images and files will be deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy, users cannot configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\r\n\r\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\r\n\r\nIf you disable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you configure both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"6dfd6d457625bd9d":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended","displayName":"Enable Windows to search local Microsoft Edge browsing data (User)","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will publish local browsing data to the Windows Indexer.\r\n\r\nIf you disable this policy, Microsoft Edge will not share data to the Windows Indexer.\r\n\r\nNote that if you disable this policy, Microsoft Edge will remove the data shared with Windows on the device and stop sharing any new browsing data.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6df9030803d54a08":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxsizelimit","displayName":"Set maximum web service return size limit (User)","description":"This policy setting allows you to specify the maximum limit of how much data in kilobytes (KB) the web service shim can return per call. This maximum value is enforced for applications including those that do not respect the default. \r\n\r\nIf you enable this policy setting, you may specify the maximum limit of data in kilobytes the web service shim can return per call.\r\n\r\nIf you disable or do not configure this policy setting, no maximum limit will be enforced.","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxsizelimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxsizelimit_1","displayName":"Enabled","description":null,"helpText":null}]},"6d99045799aaa5ee":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04","displayName":"Trusted Location #4 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_1","displayName":"Enabled","description":null,"helpText":null}]},"6d4e359c964da1b7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc12_l_allowsubfolders12","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc12_l_allowsubfolders12_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc12_l_allowsubfolders12_1","displayName":"True","description":null,"helpText":null}]},"6dad4ba233390bbd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcommonfileshare","displayName":"Specify the UNC path to store Office telemetry data (User)","description":"This policy setting allows you to specify the Uniform Naming Convention (UNC) path of a shared folder to which Office Telemetry Agent sends Office telemetry data.\r\n\r\nIf you enable this policy setting, Office Telemetry Agent uploads Office telemetry data to the UNC path that you specify. Use the format \\\\Server_Name\\Share_Name.\r\n\r\nIf you disable or do not configure this policy setting, Office Telemetry Agent does not send the data, and you cannot see any data in Office Telemetry Dashboard.","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcommonfileshare_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcommonfileshare_1","displayName":"Enabled","description":null,"helpText":null}]},"6d81d7f6148153be":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor","displayName":"Target monitor (User)","description":"Sets the value in the UI.","helpText":"","infoUrls":[],"categoryId":"8ee1d8d2-582f-401b-927a-993016f4290d","categoryName":"Browsers","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_1","displayName":"Enabled","description":null,"helpText":null}]},"6db6dd34b0ee8ce1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingeasemailaccounts","displayName":"Prevent users from adding Exchange ActiveSync e-mail accounts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingeasemailaccounts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingeasemailaccounts_1","displayName":"True","description":null,"helpText":null}]},"6db3b6e40f511585":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_v2","displayName":"Retrieving CRLs (Certificate Revocation Lists) (User)","description":"This policy setting controls how Outlook retrieves Certificate Revocation Lists to verify the validity of certificates.Certificate revocation lists (CRLs) are lists of digital certificates that have been revoked by their controlling certificate authorities (CAs), typically because the certificates were issued improperly or their associated private keys were compromised. \r\n\r\nIf you enable this policy setting, you can choose from three options to govern how Outlook uses CRLs: \r\n\r\n- Use system Default. Outlook relies on the CRL download schedule that is configured for the operating system. \r\n- When online always retrieve the CRL. This option is the default configuration in Outlook. \r\n- Never retrieve the CRL. Outlook will not attempt to download the CRL for a certificate, even if it is online. This option can reduce security. \r\n\r\nIf you disable or do not configure this policy setting, when Outlook handles a certificate that includes a URL from which a CRL can be downloaded, Outlook will retrieve the CRL from the provided URL if Outlook is online.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"6d55db99d603573d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_automaticallydownloadenclosures","displayName":"Automatically download enclosures (User)","description":"This policy setting allows you to control whether Outlook automatically downloads enclosures on RSS items.\r\n\r\nIf you enable this policy setting, Outlook will automatically download enclosures on RSS items.\r\n\r\nIf you disable or do not configure this policy setting, enclosures on RSS items are not downloaded by default.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_automaticallydownloadenclosures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_automaticallydownloadenclosures_1","displayName":"Enabled","description":null,"helpText":null}]},"6df05861a5873d95":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_personaltemplatespath","displayName":"Personal templates path for PowerPoint (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"6da3100c6f75f917":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_pathcolon24","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"6d55e2a113c544b0":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_pathcolon52","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"6d0b3ae5456bc407":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_documentview_l_documentview7","displayName":"Document view (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_documentview_l_documentview7_1","displayName":"Right-to-left","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_documentview_l_documentview7_0","displayName":"Left-to-Right","description":null,"helpText":null}]},"6dbe449f7f10c7c5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draftoutput","displayName":"Use draft quality (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draftoutput_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_draftoutput_1","displayName":"Enabled","description":null,"helpText":null}]},"6d8deafeabe04f22":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_keeptrackofformatting","displayName":"Keep track of formatting (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_keeptrackofformatting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_keeptrackofformatting_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/6e.json b/public/intune-definitions/6e.json new file mode 100644 index 000000000000..a4b11119bcbc --- /dev/null +++ b/public/intune-definitions/6e.json @@ -0,0 +1 @@ +{"6e3bfff8765eca18":{"id":"com.apple.applicationaccess_allowappinstallation","displayName":"Allow App Installation","description":"If false, disables the App Store, and its icon is removed from the Home screen. Users are unable to install or update their apps. In iOS 10 and later, MDM commands can override this restriction. As of iOS 13, this restriction requires a supervised device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowappinstallation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowappinstallation_true","displayName":"True","description":null,"helpText":null}]},"6e47924d12f67705":{"id":"com.apple.applicationaccess_allowexplicitcontent","displayName":"Allow Explicit Content","description":"If false, hides explicit music or video content purchased from the iTunes Store. Explicit content is marked as such by content providers, such as record labels, when sold through the iTunes Store. As of iOS 13, requires a supervised device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowexplicitcontent_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowexplicitcontent_true","displayName":"True","description":null,"helpText":null}]},"6eecfee2d401c8f2":{"id":"com.apple.applicationaccess_allowexternalintelligenceintegrationssignin","displayName":"Allow External Intelligence Integrations Sign In (Deprecated)","description":"If false, forces external intelligence providers into anonymous mode. If a user is already signed in to an external intelligence provider, applying this restriction will cause them to be signed out.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowexternalintelligenceintegrationssignin_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowexternalintelligenceintegrationssignin_true","displayName":"Enabled","description":null,"helpText":null}]},"6e6e7f3c580803fa":{"id":"com.apple.applicationaccess_allowiphonemirroring","displayName":"Allow iPhone Mirroring","description":"If false, prohibits the use of iPhone Mirroring. When used on macOS, this prevents the Mac from mirroring any iPhone. When used on iOS, this prevents the iPhone from mirroring to any Mac.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowiphonemirroring_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowiphonemirroring_true","displayName":"True","description":null,"helpText":null}]},"6ee0d33beeb5aeac":{"id":"com.apple.applicationaccess_autonomoussingleappmodepermittedappids","displayName":"Autonomous Single App Mode Permitted App IDs","description":"If present, allows apps identified by the bundle IDs listed in the array to autonomously enter Single App Mode. Requires a supervised device. Available in iOS 7 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"6ec26fbb4418a360":{"id":"com.apple.dock_windowtabbing","displayName":"Window Tabbing","description":"Set the \"Prefer tabs when opening documents\" to the provided value.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_windowtabbing_0","displayName":"Manual","description":null,"helpText":null},{"id":"com.apple.dock_windowtabbing_1","displayName":"Always","description":null,"helpText":null},{"id":"com.apple.dock_windowtabbing_2","displayName":"Full Screen","description":null,"helpText":null}]},"6ece1811803def85":{"id":"com.apple.managedclient.preferences_corsnonwildcardrequestheaderssupport","displayName":"CORS non-wildcard request header support enabled","description":"This policy lets you configure support of CORS non-wildcard request headers.\n\nMicrosoft Edge version 97 introduces support for CORS non-wildcard request headers. When a script makes a cross-origin network request via fetch() and XMLHttpRequest with a script-added Authorization header, the header must be explicitly allowed by the Access-Control-Allow-Headers header in the CORS preflight response. \"Explicitly\" here means that the wild card symbol \"*\" doesn't cover the Authorization header. See https://go.microsoft.com/fwlink/?linkid=2180022 for more detail.\n\nIf you enable or don't configure the policy, Microsoft Edge will support the CORS non-wildcard request headers and behave as previously described.\n\nIf you disable this policy, Microsoft Edge will allow the wildcard symbol (\"*\") in the Access-Control-Allow-Headers header in the CORS preflight response to cover the Authorization header.\n\nThis policy is a temporary workaround for the new CORS non-wildcard request header feature. It's intended to be removed in the future.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#corsnonwildcardrequestheaderssupport"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_corsnonwildcardrequestheaderssupport_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_corsnonwildcardrequestheaderssupport_true","displayName":"Enabled","description":null,"helpText":null}]},"6e1bed7e1eb7cf30":{"id":"com.apple.managedclient.preferences_hardwareaccelerationmodeenabled","displayName":"Use hardware acceleration when available","description":"Specify to use hardware acceleration, if it's available. If you enable this policy or don't configure it, hardware acceleration is enabled unless a GPU feature is explicitly blocked.\n\nIf you disable this policy, hardware acceleration is disabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#hardwareaccelerationmodeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_hardwareaccelerationmodeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_hardwareaccelerationmodeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6e1ff645243fd9b9":{"id":"com.apple.shareddeviceconfiguration_lockscreenfootnote","displayName":"Lock Screen Footnote","description":"The footnote displayed in the login window and Lock screen. ","helpText":null,"infoUrls":[],"categoryId":"dec8381a-0a61-406b-842b-fc6ae9930795","categoryName":"Lock Screen Message","options":null},"6e70012bf280b9b5":{"id":"com.apple.universalaccess_closeviewscrollwheeltoggle","displayName":"Close View Scroll Wheel Toggle","description":"If true, enables \"Use scroll gesture\" in the Zoom options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_closeviewscrollwheeltoggle_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_closeviewscrollwheeltoggle_true","displayName":"True","description":null,"helpText":null}]},"6ef29797df1e92c1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints","description":"This policy enables a list of TLS certificates that should be trusted by Microsoft Edge for server authentication, with constraints added outside the certificate. If no constraint of a certain type is present, then any name of that type is allowed.\nCertificates should be base64-encoded. At least one constraint must be specified for each certificate.\n\nThe permitted_dns_names field is a list of DNS names that are allowed for the certificate. If the DNS name in the certificate request doesn't match one of the specified DNS names, the certificate isn't trusted.\n\nThe permitted_cidrs field is a list of CIDR (Classless Inter-Domain Routing) ranges that will be allowed for the certificate. If the IP address in the certificate request doesn't fall within one of the permitted CIDR ranges, the certificate isn't trusted.","helpText":null,"infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"6e54a48aa6f889f5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.idledetectionblockedforurls","displayName":"Block idle detection on these sites","description":"Allows you to specify a list of URL patterns for sites that are not allowed to use the Idle Detection API.\n\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported.\n\nFor detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nIf you do not configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"6e07e6eb963a5b05":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled","displayName":"Enable saving passwords to the password manager","description":"Enable Microsoft Edge to save user passwords. The next time a user visits a site with a saved password, Microsoft Edge will enter the password automatically.\n\nIf you enable or don't configure this policy, users can save and add their passwords in Microsoft Edge.\n\nIf you disable this policy, users can't save and add new passwords, but they can still use previously saved passwords.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6e71e218be25d923":{"id":"com.microsoft.edge.mamedgeappconfigsettings.selectparserrelaxationenabled","displayName":"Controls whether the new HTML parser behavior for the element. This policy supports the old HTML parser behavior through Microsoft Edge version 138.\n\nIf this policy is enabled or unset, the HTML parser allows additional tags inside the element.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.selectparserrelaxationenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.selectparserrelaxationenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"6e39b91c42fc4b64":{"id":"device_vendor_msft_defender_configuration_schedulesecurityintelligenceupdatetime","displayName":"Schedule Security Intelligence Update Time","description":"This setting allows you to specify the time of day at which to check for security intelligence updates. The time value is represented as the number of minutes past midnight (00:00). For example, 120 is equivalent to 02:00 AM. By default, this setting is configured to check for security intelligence updates 15 minutes before the scheduled scan time. The schedule is based on local time on the computer where the check is occurring.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"6e9e1c24719addd2":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits","displayName":"Digits","description":"Use this policy setting to configure the use of digits in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one digit in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using digits in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business requires users to use digits in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_0","displayName":"Allows the use of digits in PIN.","description":"Allows the use of digits in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_1","displayName":"Requires the use of at least one digits in PIN.","description":"Requires the use of at least one digits in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_2","displayName":"Does not allow the use of digits in PIN.","description":"Does not allow the use of digits in PIN.","helpText":null}]},"6e8fd89984661841":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimizationonserversku_syncmodenodcthreshold1","displayName":"Timeout value: [number field] milliseconds","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"6e7e79a9642e6b2f":{"id":"device_vendor_msft_policy_config_admx_rpc_rpcignoredelegationfailure","displayName":"Ignore Delegation Failure","description":"This policy setting controls whether the RPC Runtime ignores delegation failures when delegation is requested.\r\n\r\nThe constrained delegation model, introduced in Windows Server 2003, does not report that delegation was enabled on a security context when a client connects to a server. Callers of RPC and COM are encouraged to use the RPC_C_QOS_CAPABILITIES_IGNORE_DELEGATE_FAILURE flag, but some applications written for the traditional delegation model prior to Windows Server 2003 may not use this flag and will encounter RPC_S_SEC_PKG_ERROR when connecting to a server that uses constrained delegation.\r\n\r\nIf you disable this policy setting, the RPC Runtime will generate RPC_S_SEC_PKG_ERROR errors to applications that ask for delegation and connect to servers using constrained delegation. \r\n\r\nIf you do not configure this policy setting, it remains disabled and will generate RPC_S_SEC_PKG_ERROR errors to applications that ask for delegation and connect to servers using constrained delegation. \r\n\r\nIf you enable this policy setting, then:\r\n\r\n-- \"Off\" directs the RPC Runtime to generate RPC_S_SEC_PKG_ERROR if the client asks for delegation, but the created security context does not support delegation.\r\n\r\n-- \"On\" directs the RPC Runtime to accept security contexts that do not support delegation even if delegation was asked for.\r\n\r\nNote: This policy setting will not be applied until the system is rebooted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-rpc#admx-rpc-rpcignoredelegationfailure"],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":[{"id":"device_vendor_msft_policy_config_admx_rpc_rpcignoredelegationfailure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_rpc_rpcignoredelegationfailure_1","displayName":"Enabled","description":null,"helpText":null}]},"6e3ef9af006c6503":{"id":"device_vendor_msft_policy_config_admx_scripts_run_shutdown_script_visible","displayName":"Display instructions in shutdown scripts as they run","description":"This policy setting displays the instructions in shutdown scripts as they run.\r\n\r\nShutdown scripts are batch files of instructions that run when the user restarts the system or shuts it down. By default, the system does not display the instructions in the shutdown script.\r\n\r\nIf you enable this policy setting, the system displays each instruction in the shutdown script as it runs. The instructions appear in a command window.\r\n\r\nIf you disable or do not configure this policy setting, the instructions are suppressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-shutdown-script-visible"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_run_shutdown_script_visible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_run_shutdown_script_visible_1","displayName":"Enabled","description":null,"helpText":null}]},"6e08b5e4d7cd3de0":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_delete_roaming_user_profiles_ts_profile_directory_quota","displayName":"Maximum cache size (GBs):","description":null,"helpText":"","infoUrls":[],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":null},"6ea02877eb7072f8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled","displayName":"Enable Get Image Descriptions from Google.","description":"The Get Image Descriptions from Google\r\naccessibility feature enables visually-impaired screen reader users to\r\nget descriptions of unlabeled images on the web. Users who choose to enable it\r\nwill have the option of using an anonymous Google service to provide\r\nautomatic descriptions for unlabeled images they encounter on the web.\r\n\r\nIf this feature is enabled, the content of images will be sent to Google\r\nservers in order to generate a description. No cookies or other user\r\ndata is sent, and Google does not save or log any image content.\r\n\r\nIf this policy is set to Enabled, the\r\nGet Image Descriptions from Google\r\nfeature will be enabled, though it will only affect users who are using a\r\nscreen reader or other similar assistive technology.\r\n\r\nIf this policy is set to Disabled, users will not have the option of enabling\r\nthe feature.\r\n\r\nIf this policy is not set, user can choose to use this feature or not.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6e2da0d777745d43":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability","displayName":"Profile picker availability on startup","description":"Specifies whether the profile picker is enabled, disabled or forced at the browser startup.\r\n\r\nBy default the profile picker is not shown if the browser starts in guest or incognito mode, a profile directory and/or urls are specified by command line, an app is explicitly requested to open, the browser was launched by a native notification, there is only one profile available or the policy ForceBrowserSignin is set to true.\r\n\r\nIf 'Enabled' (0) is selected or the policy is left unset, the profile picker will be shown at startup by default, but users will be able to enable/disable it.\r\n\r\nIf 'Disabled' (1) is selected, the profile picker will never be shown, and users will not be able to change the setting.\r\n\r\nIf 'Forced' (2) is selected, the profile picker cannot be suppressed by the user. The profile picker will be shown even if there is only one profile available.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"6ea79c3f776f5780":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended","displayName":"Import bookmarks from default browser on first run","description":"Setting the policy to Enabled imports bookmarks from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no bookmarks are imported on first run.\r\n\r\nUsers can trigger an import dialog and the bookmarks checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6e37d61fb8670c06":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols","displayName":"Allow legacy TLS/DTLS downgrade in WebRTC","description":"If enabled, WebRTC peer connections can downgrade to obsolete\r\nversions of the TLS/DTLS (DTLS 1.0, TLS 1.0 and TLS 1.1) protocols.\r\nWhen this policy is disabled or not set, these TLS/DTLS versions are\r\ndisabled.\r\n\r\nThis policy is temporary and will be removed in a future version\r\nof Google Chrome.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},"6e33284bff1ee14a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderNewTabURL specifies the URL of the search engine used to provide a New Tab page.\r\n\r\nLeaving DefaultSearchProviderNewTabURL unset means no new tab page is provided.\r\n\r\nExample value: https://search.my.company/newtab","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_1","displayName":"Enabled","description":null,"helpText":null}]},"6ee1705599afcf5c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes","displayName":"Configure allowed app/extension types","description":"Setting the policy controls which apps and extensions may be installed in Google Chrome, which hosts they can interact with, and limits runtime access.\r\n\r\nLeaving the policy unset results in no restrictions on the acceptable extension and app types.\r\n\r\nExtensions and apps which have a type that's not on the list won't be installed. Each value should be one of these strings:\r\n\r\n* \"extension\"\r\n\r\n* \"theme\"\r\n\r\n* \"user_script\"\r\n\r\n* \"hosted_app\"\r\n\r\n* \"legacy_packaged_app\"\r\n\r\n* \"platform_app\"\r\n\r\nSee the Google Chrome extensions documentation for more information on these types.\r\n\r\nVersions earlier than 75 that use multiple comma separated extension IDs aren't supported and are skipped. The rest of the policy applies.\r\n\r\nNote: This policy also affects extensions and apps to be force-installed using ExtensionInstallForcelist.\r\n\r\nExample value:\r\n\r\nhosted_app","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes_1","displayName":"Enabled","description":null,"helpText":null}]},"6eeeac5d8b1ea27f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI","description":"Controls print image resolution when Google Chrome prints PDFs with rasterization.\r\n\r\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution will significantly increase the processing and printing time while a low resolution can lead to poor imaging quality.\r\n\r\nThis policy allows a particular resolution to be specified for use when rasterizing PDFs for printing.\r\n\r\nIf this policy is set to zero or not set at all then the system default resolution will be used during rasterization of page images.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_1","displayName":"Enabled","description":null,"helpText":null}]},"6e366dc81cb06b33":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage.","description":"Setting the policy lets you list the URLs that specify which sites are automatically granted permission to access a HID device containing a top-level collection with the given HID usage. Each item in the list requires both usages and urls fields for the policy to be valid. Each item in the usages field must have a usage_page and may have a usage field. Omitting the usage field will create a policy matching any device containing a top-level collection with a usage from the specified usage page. An item which has a usage field without a usage_page field is invalid and is ignored.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies, if it's set. If not, the user's personal setting applies.\r\n\r\nURLs in this policy shouldn't conflict with those configured through WebHidBlockedForUrls. If they do, this policy takes precedence over WebHidBlockedForUrls.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebHidAllowDevicesWithHidUsagesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://google.com\",\r\n \"https://chromium.org\"\r\n ],\r\n \"usages\": [\r\n {\r\n \"usage\": 5678,\r\n \"usage_page\": 1234\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"6ea4b368afc85682":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings","displayName":"Settings for Gemini integration (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings_0","displayName":"Allow Gemini integrations.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings_1","displayName":"Do not allow Gemini integrations.","description":null,"helpText":null}]},"6e8d55919cb46468":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault","displayName":"Print PDF as Image Default","description":"Controls if Google Chrome makes the Print as image option default to set when printing PDFs.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome then the user selection for Print as image option will be initially unset. The user will be allowed to select it for each individual PDFs print job, if the option is available.\r\n\r\nFor Microsoft® Windows® or macOS this policy only has an effect if PrintPdfAsImageAvailability is also enabled.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"6e7962224764405a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister","displayName":"Clear Cache On Forced Unregister","description":"If the desired behavior is for the local cache to be deleted, even if the data has not been flushed to a CCD Location, then Clear Cache On Forced Unregister should be set to Enabled. Setting Clear Cache On Forced Unregister to Enabled may result in user data saved in the registry to be lost during the current session. It is important to understand that this data isn't recoverable if the local cache is cleared in this scenario. Verify that you understand the implications of changing the default value of this setting prior to making changes.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ClearCacheOnForcedUnregister\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister_1","displayName":"Enabled","description":null,"helpText":null}]},"6eb4cd55fd90839e":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"6eca17a4614a89e9":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride","displayName":"Prevent bypassing Edge Website Typo Protection prompts for sites","description":"This policy setting lets you decide whether users can override the Edge Website Typo Protection warnings about potential typosquatting websites.\r\n\r\nIf you enable this setting, users can't ignore Edge Website Typo Protection warnings and they are blocked from continuing to the site.\r\n\r\nIf you disable or don't configure this setting, users can ignore Edge Website Typo Protection warnings and continue to the site.\r\n\r\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_1","displayName":"Enabled","description":null,"helpText":null}]},"6edea2f830a9be74":{"id":"device_vendor_msft_policy_config_mixedreality_skiptrainingduringsetup","displayName":"Skip Training During Setup","description":"This policy configures whether the device will take the user through a training process during device setup and first time user setup. If this policy is enabled, the device will not show the training process during device setup and first time user setup. If the user wishes to go through that training process, the user can launch the Tips app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#skiptrainingduringsetup"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_skiptrainingduringsetup_0","displayName":"Training process will be shown during device setup and first time user setup.","description":"Training process will be shown during device setup and first time user setup.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_skiptrainingduringsetup_1","displayName":"Training process will not be shown during device setup and first time user setup.","description":"Training process will not be shown during device setup and first time user setup.","helpText":null}]},"6ebbdacffa7afc34":{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver","displayName":"Configure MrxSmb10 driver","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver_4","displayName":"Disable driver (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver_3","displayName":"Manual start (default for Win7/2008/2008R2/2012)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver_2","displayName":"Automatic start (default for Win8.1/2012R2/newer)","description":null,"helpText":null}]},"6e0601e551895431":{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel","displayName":"MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)","description":"MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-msslegacy#msslegacy-ipv6sourceroutingprotectionlevel"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"6e3309ce3747a627":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_onenoteexe96","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_onenoteexe96_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_onenoteexe96_1","displayName":"True","description":null,"helpText":null}]},"6ed77c21521508e2":{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_disablefirstdeletedialog","displayName":"Hide the \"Deleted files are removed everywhere\" reminder","description":"When a user deletes local files from a synced location, a warning message appears that the files will no longer be available across all the user's devices and on the web. This setting lets you hide the warning message.\r\n\r\nIf you enable this setting, users won't see the \"Deleted files are removed everywhere\" reminder when they delete files locally.\r\n\r\nIf you disable or do not configure this setting, the reminder will appear until users select \"Don't show this reminder again.\"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_disablefirstdeletedialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_disablefirstdeletedialog_1","displayName":"Enabled","description":null,"helpText":null}]},"6efbc172b7d81e8e":{"id":"device_vendor_msft_policy_config_terminalserver-avdv2~policy~avd_gp_node_avd_server_hevc","displayName":"Configure H.265/HEVC hardware encoding for Remote Desktop Connections","description":"This policy setting lets you enable HEVC hardware encoding support for Remote Desktop Connections. \r\n \r\nWhen you enable HEVC, this policy will supersede the Configure H.264/AVC hardware encoding for Remote Desktop Connections GP. \r\n \r\nWhen you enable HEVC, if an error occurs, we will attempt to use AVC software encoding. If you disable or do not configure this policy, HEVC will not be leveraged. \r\n ","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv2~policy~avd_gp_node_avd_server_hevc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv2~policy~avd_gp_node_avd_server_hevc_1","displayName":"Enabled","description":null,"helpText":null}]},"6e4956a940e5b80c":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_phone","displayName":"Phone","description":"The phone number or Skype ID that is displayed to users.  Skype is used to initiate the call. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace, and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#phone"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":null},"6e6bad500ea6e23b":{"id":"settings_item_mdmoptions_mdmoptions","displayName":"MDM Options","description":"A dictionary of MDM options.","helpText":null,"infoUrls":[],"categoryId":"dd68a290-1ba7-470f-afca-339f443a767c","categoryName":"MDM Options","options":null},"6eb6880a82acafdd":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1","displayName":"Configure Report Archive (User)","description":"This policy setting controls the behavior of the Windows Error Reporting archive.\r\n\r\nIf you enable this policy setting, you can configure Windows Error Reporting archiving behavior. If Archive behavior is set to Store all, all data collected for each error report is stored in the appropriate location. If Archive behavior is set to Store parameters only, only the minimum information required to check for an existing solution is stored. The Maximum number of reports to store setting determines how many reports are stored before older reports are automatically deleted.\r\n\r\nIf you disable or do not configure this policy setting, no Windows Error Reporting information is stored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werarchive-1"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_1","displayName":"Enabled","description":null,"helpText":null}]},"6e16642e0a71b2a8":{"id":"user_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_1","displayName":"Use localized subfolder names when redirecting Start Menu and My Documents (User)","description":"This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Pictures, and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively.\r\n\r\nIf you enable this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use localized folder names for these subfolders when redirecting the Start Menu or legacy My Documents folder.\r\n\r\nIf you disable or not configure this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use the standard English names for these subfolders when redirecting the Start Menu or legacy My Documents folder.\r\n\r\nNote: This policy is valid only on Windows Vista, Windows 7, Windows 8, and Windows Server 2012 when it processes a legacy redirection policy already deployed for these folders in your existing localized environment.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-localizexprelativepaths-1"],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_1_1","displayName":"Enabled","description":null,"helpText":null}]},"6e60a27fb3c31548":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_2","displayName":"Scripts (Logon/Logoff) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-scriptsuser-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_2_1","displayName":"Enabled","description":null,"helpText":null}]},"6e47ca45d7ee502c":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection","displayName":"Specify default connection URL (User)","description":"This policy setting specifies the default connection URL for RemoteApp and Desktop Connections. The default connection URL is a specific connection that can only be configured by using Group Policy. In addition to the capabilities that are common to all connections, the default connection URL allows document file types to be associated with RemoteApp programs.\r\n\r\nThe default connection URL must be configured in the form of http://contoso.com/rdweb/Feed/webfeed.aspx.\r\n \r\nIf you enable this policy setting, the specified URL is configured as the default connection URL for the user and replaces any existing connection URL. The user cannot change the default connection URL. The user's default logon credentials are used when setting up the default connection URL.\r\n\r\nIf you disable or do not configure this policy setting, the user has no default connection URL.\r\n\r\nNote: RemoteApp programs that are installed through RemoteApp and Desktop Connections from an untrusted server can compromise the security of a user's account.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-radc-defaultconnection"],"categoryId":"3a901a80-e2b6-470c-9658-d66ba5458370","categoryName":"Remote App and Desktop Connections","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"6e0e3f6c3d28b533":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow","displayName":"Set the time interval for relaunch (User)","description":"Specify a target time window for the end of the relaunch notification period.\r\n\r\nUsers are notified of the need for a browser relaunch or device restart based on the RelaunchNotification and RelaunchNotificationPeriod policy settings. Browsers and devices are forcibly restarted at the end of the notification period when the RelaunchNotification policy is set to 'Required'. This RelaunchWindow policy can be used to defer the end of the notification period so that it falls within a specific time window.\r\n\r\nIf this policy is not set, the default target time window for Google Chrome OS is between 2 AM and 4 AM. The default target time window for Google Chrome is the whole day (i.e., the end of the notification period is never deferred).\r\n\r\nNote: Though the policy can accept multiple items in entries, all but the first item are ignored.\r\nWarning: Setting this policy may delay application of software updates.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RelaunchWindow for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"entries\": [\r\n {\r\n \"start\": {\r\n \"hour\": 2,\r\n \"minute\": 15\r\n },\r\n \"duration_mins\": 240\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_1","displayName":"Enabled","description":null,"helpText":null}]},"6e11f62d79d14a02":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl_proxypacurl","displayName":"URL to a proxy .pac file (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"6ef12d74489a96ab":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_printertypedenylistdesc","displayName":"Disable printer types on the deny list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"6e1cae74333c26d2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated","displayName":"Relaunch fast if outdated (User)","description":"Specifies the minimum release age beyond which relaunch notifications are more aggressive. The age is calculated from the time the currently-running version was last served to clients.\r\n\r\nIf a browser relaunch or device restart is needed to finalize a pending update and the current version has been outdated for more than the number of days specified by this setting, the RelaunchNotificationPeriod policy is overridden to 2 hours. If the RelaunchNotification policy is set to 1 ('Required'), users will be forced to relaunch or restart at the end of the period.\r\n\r\nIf not set, or if the release age cannot be determined, the RelaunchNotificationPeriod policy will be used for all updates.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_1","displayName":"Enabled","description":null,"helpText":null}]},"6e1182c077650e34":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165","displayName":"Disable commands (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"categoryId":"3b7e16e7-171f-4169-8904-c8483b06700d","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165_1","displayName":"Enabled","description":null,"helpText":null}]},"6ee5095573d113cc":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows","displayName":"Allow script-initiated windows without size or position constraints (User)","description":"This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.\n\nIf you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.\n\nIf you do not configure this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptinitiatedwindows"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"6e691dd066c53d6e":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallownetframeworkreliantcomponents"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"6e68ad810ab65980":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"6e909899bae5be50":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"6ee52ac35af3c073":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2","displayName":"Retrieve configurations and experiments","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1","displayName":"Retrieve configurations only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null}]},"6e7a68405033f2de":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist","displayName":"Configure proxy bypass rules (User)","description":"Defines a list of hosts for which Microsoft Edge bypasses any proxy.\r\n\r\nThis policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, you can create a list of hosts for which Microsoft Edge doesn't use a proxy.\r\n\r\nIf you don't configure this policy, no list of hosts is created for which Microsoft Edge bypasses a proxy. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor more detailed examples go to https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: https://www.contoso.com, https://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},"6e95723ece771441":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_onprintenterpriseconnector","displayName":"Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"6ef846445c3238aa":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended","displayName":"Parameters for an image URL that uses POST (User)","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it's replaced with real image thumbnail data. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nSpecify Bing's Image Search URL Post Params as:\r\n'imageBin={google:imageThumbnailBase64}'.\r\n\r\nSpecify Google's Image Search URL Post Params as:\r\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\r\n\r\nIf you don't set this policy, image search requests are sent using the GET method.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6e53179f8ba86c5d":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled","displayName":"Configure Speech Recognition (User)","description":"Set whether websites can use the W3C Web Speech API to recognize speech from the user. The Microsoft Edge implementation of the Web Speech API uses Azure Cognitive Services, so voice data will leave the machine.\r\n\r\nIf you enable or don't configure this policy, web-based applications that use the Web Speech API can use Speech Recognition.\r\n\r\nIf you disable this policy, Speech Recognition is not available through the Web Speech API.\r\n\r\nRead more about this feature here:\r\nSpeechRecognition API: https://go.microsoft.com/fwlink/?linkid=2143388\r\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2143680","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"6efa757943256391":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_removeorganizationtab","displayName":"Remove Organization tab (User)","description":"This policy setting allows you to remove the Organization tab from the Contact Card.\r\n\r\nIf you enable this policy setting, the Organization tab is removed from the Contact Card.\r\n\r\nIf you disable or do not configure this policy setting, the Organization tab appears on the Contact Card.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_removeorganizationtab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_removeorganizationtab_1","displayName":"Enabled","description":null,"helpText":null}]},"6e1dd7c35bde0af8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy9","displayName":"Places Bar Location 9 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy9_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy9_1","displayName":"Enabled","description":null,"helpText":null}]},"6edd28c42d56b307":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfilemaximumsize","displayName":"Log File Maximum Size (User)","description":"Specify the maximum size in bytes for the log file created when loading custom layouts. (Maximum = 100000)","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfilemaximumsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfilemaximumsize_1","displayName":"Enabled","description":null,"helpText":null}]},"6edd9b54e0dd959b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swedishsweden","displayName":"Swedish (Sweden) (User)","description":"Enables the editing language Swedish (Sweden)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swedishsweden_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swedishsweden_1","displayName":"Enabled","description":null,"helpText":null}]},"6e33421cc52b2b96":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_l_workflowsig442","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_l_workflowsig442_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_l_workflowsig442_1","displayName":"True","description":null,"helpText":null}]},"6e905ffe64fc5cd9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc05_l_datecolon255","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"6eb8f0ec7ec62627":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc03_l_allowsubfolders03","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc03_l_allowsubfolders03_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc03_l_allowsubfolders03_1","displayName":"True","description":null,"helpText":null}]},"6e8a811dcef9d9c7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationspowerpoint","displayName":"PowerPoint-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationspowerpoint_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationspowerpoint_1","displayName":"True","description":null,"helpText":null}]},"6e730bfd2395aec5":{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableroamingmruforonpremservers","displayName":"Turn off roaming of on-premises file names and metadata (User)","description":"\r\nThis policy setting controls whether file names and metadata for Office files are roamed and appear in the list of recently opened files in an Office app, such as Word, on different devices.\r\n\r\nRoaming, which relies on a web-based Microsoft service, occurs when a user signs into Office with the same work or school account on different devices.\r\n\r\nNote: This policy setting only applies to Office files that are saved to on-premises instances of SharePoint Server or OneDrive for Business.\r\n\r\nIf you enable this policy setting, file names and metadata won't roam and won’t appear in the list of recently opened files in Office apps on other devices, unless the file has been opened on that device.\r\n\r\nIf you disable or don't configure this policy setting, file names and metadata will roam and will appear in the list of recently opened files in Office apps on other devices, even if the file hasn’t been opened on that device.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableroamingmruforonpremservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableroamingmruforonpremservers_1","displayName":"Enabled","description":null,"helpText":null}]},"6e1c3381a1a42d6c":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"1ae8c95a-5748-4647-80f8-b447e60601a2","categoryName":"Add-ins","options":null},"6e179a82ca87b1ba":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeoutinmillisec_l_millisec2","displayName":"Millisec: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"6e556608a46e4923":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_fortezzacertificatepolicies_l_enterlistofpoliciesthatcanbeinthepoliciesextension2","displayName":"List of policies to indicate that a certificate is a Fortezza certificate (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":null},"6ee593cf551a005f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings_v2","displayName":"Minimum encryption settings (User)","description":"This policy setting allows you to set the minimum key length for an encrypted e-mail message.\r\n\r\nIf you enable this policy setting, you may set the minimum key length for an encrypted e-mail message. Outlook will display a warning dialog if the user tries to send a message using an encryption key that is below the minimum encryption key value set. The user can still choose to ignore the warning and send using the encryption key originally chosen.\r\n\r\nIf you disable or do not configure this policy setting, a dialog warning will be shown to the user if the user attempts to send a message using encryption. The user can still choose to ignore the warning and send using the encryption key originally chosen.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"6ec1defa431d5eb0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationmanagerretrylimit_l_outlookactivationmanagerretrylimitspinid","displayName":"(1 - 5 occurrences) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":null},"6e946b7b73cc1c3a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation","displayName":"Check for accessibility issues while editing (User)","description":"This policy setting controls whether accessibility issues are checked for automatically while the user is editing a presentation. By default, accessibility issues aren’t checked for automatically.\r\n\r\nIf you enable this policy setting, accessibility issues are checked for automatically and users won’t be able to turn it off. The status bar will indicate if accessibility recommendations are available to make the presentation more usable by people with disabilities.\r\n\r\nIf you disable or don’t configure this policy setting, accessibility issues won’t be checked for automatically while editing a presentation. Users can turn on automatic checking by going to File > Options > Ease of Access.\r\n","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"6e7dbf2066e5df5d":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject","displayName":"Trust access to Visual Basic Project (User)","description":"This policy setting controls whether automation clients such as Microsoft Visual Studio 2005 Tools for Microsoft Office (VSTO) can access the Visual Basic for Applications project system in the specified applications. VSTO projects require access to the Visual Basic for Applications project system in Excel, PowerPoint, and Word, even though the projects do not use Visual Basic for Applications. Design-time support of controls in both Visual Basic and C# projects depends on the Visual Basic for Applications project system in Word and Excel.\r\n\r\nIf you enable this policy setting, VSTO and other automation clients can access the Visual Basic for Applications project system in the specified applications. Users will not be able to change this behavior through the \"Trust access to the VBA project object model\" user interface option under the Macro Settings section of the Trust Center.\r\n\r\nIf you disable this policy setting, VSTO does not have programmatic access to VBA projects. In addition, the \"Trust access to the VBA project object model\" check box is cleared and users cannot change it. Note: Disabling this policy setting prevents VSTO projects from interacting properly with the VBA project system in the selected application.\r\n\r\nIf you do not configure this policy setting, automation clients do not have programmatic access to VBA projects. Users can enable this by selecting the \"Trust access to the VBA project object model\" in the \"Macro Settings\" section of the Trust Center. However, doing so allows macros in any documents the user opens to access the core Visual Basic objects, methods, and properties, which represents a potential security hazard.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_1","displayName":"Enabled","description":null,"helpText":null}]},"6ec70cfaf8990478":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_graphicfilters_l_graphicfiltersdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_graphicfilters_l_graphicfiltersdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_graphicfilters_l_graphicfiltersdropid_1","displayName":"Save blocked","description":null,"helpText":null}]},"6e76814d6872739a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05_l_datecolon25","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"6e92a74efbab2994":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_l_pathcolon48","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"6ee47bd002e39f81":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc18_l_pathcolon76","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"6e335d299e7a889a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_l_allowsubfolders15","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_l_allowsubfolders15_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_l_allowsubfolders15_1","displayName":"True","description":null,"helpText":null}]},"6e22a9dc4401760d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_l_allowsubfolders35","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_l_allowsubfolders35_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_l_allowsubfolders35_1","displayName":"True","description":null,"helpText":null}]},"6ec3292d907f7066":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_datecolon69","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/6f.json b/public/intune-definitions/6f.json new file mode 100644 index 000000000000..997de31fbc10 --- /dev/null +++ b/public/intune-definitions/6f.json @@ -0,0 +1 @@ +{"6fadd401538d1408":{"id":"com.apple.applicationaccess_forceautomaticdateandtime","displayName":"Force Automatic Date And Time","description":"If true, enables the Set Automatically feature in Date & Time and can’t be disabled by the user. The device’s time zone is updated only when the device can determine its location using a cellular connection or Wi-Fi with location services enabled. Requires a supervised device. Available in iOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceautomaticdateandtime_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceautomaticdateandtime_true","displayName":"True","description":null,"helpText":null}]},"6f26eb2b7bf423b1":{"id":"com.apple.caldav.account_caldavpassword","displayName":"Cal DAV Password","description":"The user’s password. This is only used with encrypted profiles.","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":null},"6f23fffba53880d8":{"id":"com.apple.caldav.account_caldavusessl","displayName":"Cal DAV Use SSL","description":"If true, enables SSL.","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":[{"id":"com.apple.caldav.account_caldavusessl_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.caldav.account_caldavusessl_true","displayName":"True","description":null,"helpText":null}]},"6fff3f3a08a5e73b":{"id":"com.apple.extensiblesso_extensiondata_allowautomaticlogin_kerberos","displayName":"Allow Automatic Login","description":"If false, passwords are not allowed to be saved to the keychain.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_allowautomaticlogin_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_allowautomaticlogin_kerberos_true","displayName":"True","description":null,"helpText":null}]},"6f53099199f67fec":{"id":"com.apple.managedclient.preferences_blockthirdpartycookies","displayName":"Block third party cookies","description":"This policy controls whether third-party cookies are blocked in regular browsing sessions.\n\nIf you enable this policy, web page elements that are not from the domain shown in the address bar can't set cookies.\n\nIf you disable this policy, third-party cookies are allowed, including from domains other than the one shown in the address bar.\n\nIf you don't configure this policy, third-party cookies are allowed by default, but users can change this setting.\n\nNote: This policy doesn't apply in InPrivate mode. In InPrivate, third-party cookies are blocked by default and can only be allowed at the site level using the CookiesAllowedForUrls policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#blockthirdpartycookies"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_blockthirdpartycookies_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_blockthirdpartycookies_true","displayName":"Enabled","description":null,"helpText":null}]},"6f6df2e924dd4382":{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"6f86e4136f512997":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkallowedforurls","displayName":"Allow sites to make network requests to local network endpoints.","description":"Controls which website origins are exempt from Local Network Access checks when accessing local network endpoints.\n\nNetwork requests initiated from websites that match the specified URL patterns are not subject to Local Network Access checks.\n\nFor origins not covered by the patterns specified in this policy, the user's personal configuration applies.\n\nFor detailed information about valid URL patterns, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\n\nFor more information about Local Network Access restrictions, see https://wicg.github.io/local-network-access/.\n\nMultiple policies can list origins that affect requests to local network endpoints. If an origin matches more than one of the following policies, they take precedence in the following order:\n- LocalNetworkBlockedForUrls\n- LocalNetworkAllowedForUrls\n- LoopbackNetworkBlockedForUrls\n- LoopbackNetworkAllowedForUrls\n- LocalNetworkAccessBlockedForUrls\n- LocalNetworkAccessAllowedForUrls\n\nThis policy controls access to local network endpoints (private IP addresses) and can be used to allow specific websites to access local network resources.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"6f6b52018dce4cd4":{"id":"device_vendor_msft_policy_config_admx_credssp_allowencryptionoracle","displayName":"Encryption Oracle Remediation","description":"Encryption Oracle Remediation\r\n\r\nThis policy setting applies to applications using the CredSSP component (for example: Remote Desktop Connection).\r\n\r\nSome versions of the CredSSP protocol are vulnerable to an encryption oracle attack against the client. This policy controls compatibility with vulnerable clients and servers. This policy allows you to set the level of protection desired for the encryption oracle vulnerability.\r\n\r\nIf you enable this policy setting, CredSSP version support will be selected based on the following options:\r\n\r\nForce Updated Clients: Client applications which use CredSSP will not be able to fall back to the insecure versions and services using CredSSP will not accept unpatched clients. Note: this setting should not be deployed until all remote hosts support the newest version.\r\n\r\nMitigated: Client applications which use CredSSP will not be able to fall back to the insecure version but services using CredSSP will accept unpatched clients. See the link below for important information about the risk posed by remaining unpatched clients.\r\n\r\nVulnerable: Client applications which use CredSSP will expose the remote servers to attacks by supporting fall back to the insecure versions and services using CredSSP will accept unpatched clients.\r\n\r\nFor more information about the vulnerability and servicing requirements for protection, see https://go.microsoft.com/fwlink/?linkid=866660\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-allowencryptionoracle"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowencryptionoracle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowencryptionoracle_1","displayName":"Enabled","description":null,"helpText":null}]},"6fa6b591790b2f25":{"id":"device_vendor_msft_policy_config_admx_errorreporting_wernologging_2","displayName":"Disable logging","description":"This policy setting controls whether Windows Error Reporting saves its own events and error messages to the system event log.\r\n\r\nIf you enable this policy setting, Windows Error Reporting events are not recorded in the system event log.\r\n\r\nIf you disable or do not configure this policy setting, Windows Error Reporting events and errors are logged to the system event log, as with other Windows-based programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-wernologging-2"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_wernologging_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_wernologging_2_1","displayName":"Enabled","description":null,"helpText":null}]},"6f28ee44df29e196":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requireonewaychap","displayName":"Do not allow sessions without one way CHAP","description":"If enabled then only those sessions that are configured for one-way CHAP may be established. If disabled then sessions that are configured for one-way CHAP or sessions not configured for one-way CHAP may be established. Note that if the \"Do not allow sessions without mutual CHAP\" setting is enabled then that setting overrides this one.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsisecurity-requireonewaychap"],"categoryId":"6c1d9109-e4d1-4718-a537-dd685464fdbe","categoryName":"i SCSI Security","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requireonewaychap_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_requireonewaychap_1","displayName":"Enabled","description":null,"helpText":null}]},"6f13198007a9f89a":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_avoidpdconwan","displayName":"Contact PDC on logon failure","description":"This policy setting defines whether a domain controller (DC) should attempt to verify the password provided by a client with the PDC emulator if the DC failed to validate the password.\r\n\r\nContacting the PDC emulator is useful in case the client’s password was recently changed and did not propagate to the DC yet. Users may want to disable this feature if the PDC emulator is located over a slow WAN connection.\r\n\r\nIf you enable this policy setting, the DCs to which this policy setting applies will attempt to verify a password with the PDC emulator if the DC fails to validate the password.\r\n\r\nIf you disable this policy setting, the DCs will not attempt to verify any passwords with the PDC emulator. \r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-avoidpdconwan"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_avoidpdconwan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_avoidpdconwan_1","displayName":"Enabled","description":null,"helpText":null}]},"6f1e82fec2ba99f6":{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_2","displayName":"Custom Classes: Deny write access","description":"This policy setting denies write access to custom removable storage classes.\r\n\r\nIf you enable this policy setting, write access is denied to these removable storage classes.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to these removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-customclasses-denywrite-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"6f677101bbd11f3f":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesettingsync_checkbox_useroverride","displayName":"Allow users to turn syncing on.","description":null,"helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"6faac3fc5ded5a62":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage","displayName":"Disable binding directly to IPropertySetStorage without intermediate layers.","description":"\r\nChanges the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStorage implementation, and to include the intermediate layers provided by the Property System. This behavior is consistent with Windows Vista's behavior in this scenario.\r\n\r\nThis disables access to user-defined properties, and properties stored in NTFS secondary streams.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disablebinddirectlytopropertysetstorage"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage_1","displayName":"Enabled","description":null,"helpText":null}]},"6f50a34243e7cff0":{"id":"device_vendor_msft_policy_config_appvirtualization_virtualcomponentsallowlist","displayName":"Virtual Component Process Allow List","description":"Specifies a list of process paths (may contain wildcards) which are candidates for using virtual components (shell extensions, browser helper objects, etc). Only processes whose full path matches one of these items can use virtual components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-virtualcomponentsallowlist"],"categoryId":"10835ce3-31c8-4ec6-aa00-c5af48e550a8","categoryName":"Virtualization","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_virtualcomponentsallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_virtualcomponentsallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"6f7a3db27f7b8a6e":{"id":"device_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices","displayName":"Disallow Autoplay for non-volume devices","description":"This policy setting disallows AutoPlay for MTP devices like cameras or phones.\n\n If you enable this policy setting, AutoPlay is not allowed for MTP devices like cameras or phones.\n\n If you disable or do not configure this policy setting, AutoPlay is enabled for non-volume devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-disallowautoplayfornonvolumedevices"],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"device_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices_1","displayName":"Enabled","description":null,"helpText":null}]},"6fa6a8fe091cacb4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist","displayName":"List of names that will bypass the HSTS policy check","description":"Setting the policy specifies a list of hostnames that bypass preloaded HSTS upgrades from http to https.\r\n\r\nOnly single-label hostnames are allowed in this policy, and this policy only applies to \"static\" HSTS-preloaded entries (for instance, \"app\", \"new\", \"search\", \"play\"). This policy does not prevent HSTS upgrades for servers that have \"dynamically\" requested HSTS upgrades using a Strict-Transport-Security response header.\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific single-label hostnames specified, not to subdomains of those names.\r\n\r\nExample value:\r\n\r\nmeet","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},"6f30754f79a1a7b6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_isolateorigins","displayName":"Enable Site Isolation for specified origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6fcbd17f1fa280f5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_restrictsignintopattern","displayName":"Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6f340e9fb6f47d1e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_webappinstallforcelist","displayName":"URLs for Web Apps to be silently installed. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"6f7461f256c9f5aa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_authserverallowlist","displayName":"Authentication server allowlist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":null},"6fc56fdc310555d5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors","displayName":"Allow SHA-1 signed certificates issued by local trust anchors","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"6f075b115b75ff10":{"id":"device_vendor_msft_policy_config_defender_allowcloudprotection","displayName":"Allow Cloud Protection","description":"To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowcloudprotection_0","displayName":"Not allowed. Turns off Cloud Protection.","description":"Not allowed. Turns off Cloud Protection.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowcloudprotection_1","displayName":"Allowed. Turns on Cloud Protection.","description":"Allowed. Turns on Cloud Protection.","helpText":null}]},"6f739fff77e6fd81":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs","displayName":"Size In MBs","description":"Specify the size for auto-created VHD(X) files. The default is 30,000 (30GB) which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\SizeInMBs\r\nType: DWORD\r\nValues: Min = 500, Max = 1000000","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},"6fde06277ac4f29c":{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions","displayName":"Select your choice","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_1","displayName":"Go directly to home page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_2","displayName":"Go directly to \"Welcome To IE\" page","description":null,"helpText":null}]},"6f742793fab26b95":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"6f28d91e2dc2b99f":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"6f58aa92e49b1ad9":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"6ffdc72c3574c819":{"id":"device_vendor_msft_policy_config_internetexplorer_searchproviderlist","displayName":"Restrict search providers to a specific list","description":"This policy setting allows you to restrict the search providers that appear in the Search box in Internet Explorer to those defined in the list of policy keys for search providers (found under [HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\SearchScopes]). Normally, search providers can be added from third-party toolbars or in Setup, but the user can also add them from a search provider's website.\n\nIf you enable this policy setting, the user cannot configure the list of search providers on his or her computer, and any default providers installed do not appear (including providers installed from other applications). The only providers that appear are those in the list of policy keys for search providers. Note: This list can be created through a custom administrative template file. For information about creating this custom administrative template file, see the Internet Explorer documentation on search providers.\n\nIf you disable or do not configure this policy setting, the user can configure his or her list of search providers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-searchproviderlist"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_searchproviderlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_searchproviderlist_1","displayName":"Enabled","description":null,"helpText":null}]},"6f618627a6756f9a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_urlallowlistdesc","displayName":"Define a list of allowed URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"6f27ac499a5f3ff7":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_powerpntexe185","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_powerpntexe185_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_powerpntexe185_1","displayName":"True","description":null,"helpText":null}]},"6f51bbbe16cac0b6":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winwordexe119","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winwordexe119_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winwordexe119_1","displayName":"True","description":null,"helpText":null}]},"6fc7ca3832767ecf":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_diskspacecheckthresholdmblist","displayName":"Max size: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"6f77cf20108024b2":{"id":"device_vendor_msft_policy_config_settings_allowdatasense","displayName":"Allow Data Sense","description":"Allows the user to change Data Sense settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowdatasense"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowdatasense_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowdatasense_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"6f4f1a89f3c58d63":{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations","displayName":"Allow Recommendations","description":"This policy setting applies recommended troubleshooting for known problems on the device and lets administrators configure how it's applied to their domains/IT environments. Not configuring this policy setting will allow the user to configure if and how recommended troubleshooting is applied. Enabling this policy allows you to configure how recommended troubleshooting is applied on the user's device. You can select from one of the following values: 0 = Turn this feature off. 1 = Turn this feature off but still apply critical troubleshooting. 2 = Notify users when recommended troubleshooting is available, then allow the user to run or ignore it. 3 = Run recommended troubleshooting automatically and notify the user after it's been successfully run. 4 = Run recommended troubleshooting automatically without notifying the user. 5 = Allow the user to choose their own recommended troubleshooting settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Troubleshooting#allowrecommendations"],"categoryId":"63e167a4-65be-4d34-9e9c-186466f2b064","categoryName":"Troubleshooting","options":[{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_0","displayName":"Turn this feature off.","description":"Turn this feature off.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_1","displayName":"Turn this feature off but still apply critical troubleshooting.","description":"Turn this feature off but still apply critical troubleshooting.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_2","displayName":"Notify users when recommended troubleshooting is available, then allow the user to run or ignore it.","description":"Notify users when recommended troubleshooting is available, then allow the user to run or ignore it.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_3","displayName":"Run recommended troubleshooting automatically and notify the user after it's been successfully run.","description":"Run recommended troubleshooting automatically and notify the user after it's been successfully run.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_4","displayName":"Run recommended troubleshooting automatically without notifying the user.","description":"Run recommended troubleshooting automatically without notifying the user.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_5","displayName":"Allow the user to choose their own recommended troubleshooting settings.","description":"Allow the user to choose their own recommended troubleshooting settings.","helpText":null}]},"6f4cc7d6477cfeec":{"id":"device_vendor_msft_policy_config_userrights_allowlocallogon","displayName":"Allow Local Log On","description":"This user right determines which users can log on to the computer. Note: Modifying this setting may affect compatibility with clients, services, and applications. For compatibility information about this setting, see Allow log on locally (https://go.microsoft.com/fwlink/?LinkId=24268 ) at the Microsoft website. ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#allowlocallogon"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"6fc1735b96fbf75d":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_datecolon64","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"6f976d03311a41b6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath","displayName":"Personal templates path for Access (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"6f9539f2c3c21612":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmonitor","displayName":"IP Security Monitor (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipsecmonitor"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmonitor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmonitor_1","displayName":"Enabled","description":null,"helpText":null}]},"6fa0920054c1d6d4":{"id":"user_vendor_msft_policy_config_browser_allowautofill","displayName":"Allow Autofill (User)","description":"This setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowautofill"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowautofill_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowautofill_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"6f5d87da435f78e6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"Setting the policy specifies a list of origins (URLs) or hostname patterns (such as *.example.com) for which security restrictions on insecure origins won't apply. Organizations can specify origins for legacy applications that can't deploy TLS or set up a staging server for internal web development, so developers can test out features requiring secure contexts without having to deploy TLS on the staging server. This policy also prevents the origin from being labeled \"Not Secure\" in the address bar.\r\n\r\nSetting a list of URLs in this policy amounts to setting the command-line flag --unsafely-treat-insecure-origin-as-secure to a comma-separated list of the same URLs. The policy overrides the command-line flag and UnsafelyTreatInsecureOriginAsSecure, if present.\r\n\r\nFor more information on secure contexts, see Secure Contexts ( https://www.w3.org/TR/secure-contexts ).\r\n\r\nExample value:\r\n\r\nhttp://testserver.example.com/\r\n*.example.org","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"6fa87f0cefd50ef9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage","displayName":"Allow importing of home page settings (User)","description":"Allows users to import their home page setting from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import the home page setting is automatically selected.\r\n\r\nIf you disable this policy, the home page setting isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"6ff53fd35526c6b5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended","displayName":"Enable Translate (User)","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge offers translation functionality to the user by showing an integrated translate flyout when appropriate, and a translate option on the right-click context menu.\r\n\r\nDisable this policy to disable all built-in translate features.\r\n\r\nIf you don't configure the policy, users can choose whether to use the translation functionality or not.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6fb2246f389017d9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger (User)","description":"Allows you to control when to trigger password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\r\n\r\nYou can use the 'PasswordProtectionLoginURLs' (Configure the list of enterprise login URLs where password protection service should capture fingerprint of password) and 'PasswordProtectionChangePasswordURL' (Configure the change password URL) policies to configure which passwords to protect.\r\n\r\nExemptions: Passwords for the sites listed in 'PasswordProtectionLoginURLs' and 'PasswordProtectionChangePasswordURL', as well as for the sites listed in 'SmartScreenAllowListDomains' (Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings), will not trigger a password-protection warning.\r\n\r\nSet to 'PasswordProtectionWarningOff' (0) to not show password protection warningss.\r\n\r\nSet to 'PasswordProtectionWarningOnPasswordReuse' (1) to show password protection warnings when the user reuses their protected password on a non-allowlisted site.\r\n\r\nIf you disable or don't configure this policy, then the warning trigger is not shown.\r\n\r\n* 0 = Password protection warning is off.\r\n\r\n* 1 = Password protection warning is triggered by password reuse.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_1","displayName":"Enabled","description":null,"helpText":null}]},"6f2083fc79f7ca0c":{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended","displayName":"Configure Edge scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen (User)","description":"This policy controls whether Microsoft Edge shares URLs of sites that are detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge will share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.","helpText":"","infoUrls":[],"categoryId":"fea97af7-df89-4fde-8e2b-f8e7f7b6b741","categoryName":"Scareware Blocker settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"6f16e5aca729b588":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended_defaultdownloaddirectory","displayName":"Set default download directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","categoryName":"Downloads","options":null},"6fd5a24adf041d39":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls","displayName":"Block Sleeping Tabs on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are not allowed to be put to sleep by Sleeping Tabs.\r\n\r\nIf the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is disabled, this list is not used and no sites will be put to sleep automatically.\r\n\r\nIf you don't configure this policy, all sites will be eligible to be put to sleep unless the user's personal configuration blocks them.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"6f66f867f4228c88":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_javascriptjitallowedforsitesdesc","displayName":"Allow JavaScript to use JIT on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"6f134420af035792":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_turnoffsharepointdictionary","displayName":"Turn off SharePoint dictionary update (User)","description":"This policy setting allows you to turn off updating for SharePoint dictionary of Microsoft IME (Input Method Editor). This policy setting applies to Japanese Microsoft IME only.\r\n\r\nIf you enable this policy setting, SharePoint dictionary is not updated, and you cannot add a new SharePoint dictionary.\r\nA SharePoint dictionary that was added before enabling this policy setting is used for conversion.\r\n\r\nIf you disable or do not configure this policy setting, SharePoint dictionary can be updated and added.","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_turnoffsharepointdictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_turnoffsharepointdictionary_1","displayName":"Enabled","description":null,"helpText":null}]},"6fe0cc17399bb68e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yiprc","displayName":"Yi (PRC) (User)","description":"Enables the editing language Yi (PRC)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yiprc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yiprc_1","displayName":"Enabled","description":null,"helpText":null}]},"6fa1325d0539541c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_preventusersfromchangingpermissions","displayName":"Prevent users from changing permissions on rights managed content (User)","description":"This policy setting controls whether Office 2016 users can change permissions for content that is protected with Information Rights Management (IRM). \r\n\r\nThe Information Rights Management feature of Office 2016 allows individuals and administrators to specify access permissions to Word documents, Excel workbooks, PowerPoint presentations, InfoPath templates and forms, and Outlook e-mail messages. This functionality helps prevent sensitive information from being printed, forwarded, or copied by unauthorized people. \r\n\r\nIf you enable this policy setting, users can open and edit documents for which they have the appropriate permissions, but they cannot create new rights-managed content, add IRM to existing documents, change existing IRM permissions, or remove IRM from documents. \r\n\r\nIf you disable or do not configure this policy setting, Office 2016 users can add, remove, or change IRM permissions for documents if they are authorized to do so.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_preventusersfromchangingpermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_preventusersfromchangingpermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"6fed9ea0910923ca":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey19_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"6ff66daa3d3c08b7":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard","displayName":"Restrict printing from Office of documents opened in Application Guard. (User)","description":"This policy setting allows you to control how users can print from Office documents opened in Application Guard. \r\nIf you enable this policy setting, you can choose to selectively retrict one or more of the following printing options.\r\n- Don't allow printing to XPS, prevents users from printing as XPS and saving the resulting file on the host. \r\n- Don't allow printing to PDF, prevents users from printing as PDF and saving the resulting file on the host. \r\n- Don't allow printing to local printers, prevents users from printing to locally attached printers. \r\n- Don't allow printing to existing network printers, prevents users from printing to previously connected network printers. Also, users can't search for additional printers.\r\nNote: if you select all the choices or don’t select any of the choices, then printing isn’t allowed in Application Guard.\r\n\r\nIf you disable or don’t configure this policy setting, users can print to all printers configured on their device.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"6fd40bcb1486df95":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeinteroperabilitywithexternalclients_l_behaviorforhandlingsmimemessages","displayName":"Behavior for handling S/MIME messages: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeinteroperabilitywithexternalclients_l_behaviorforhandlingsmimemessages_0","displayName":"Handle internally","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeinteroperabilitywithexternalclients_l_behaviorforhandlingsmimemessages_1","displayName":"Handle externally","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeinteroperabilitywithexternalclients_l_behaviorforhandlingsmimemessages_2","displayName":"Handle if possible","description":null,"helpText":null}]},"6f1d3dda501aebb9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode_l_outlooksecuritypolicy","displayName":"Outlook Security Policy: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode_l_outlooksecuritypolicy_0","displayName":"Outlook Default Security","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode_l_outlooksecuritypolicy_1","displayName":"Use Security Form from 'Outlook Security Settings' Public Folder","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode_l_outlooksecuritypolicy_2","displayName":"Use Security Form from 'Outlook 10 Security Settings' Public Folder","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode_l_outlooksecuritypolicy_3","displayName":"Use Outlook Security Group Policy","description":null,"helpText":null}]},"6fff64174c147c07":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_eas_l_eassyncfrequency_l_eassyncfrequencyintervalspinid","displayName":"Synchronization interval (in minutes): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b161cf66-abfa-4a36-a9ac-c20ca60594e0","categoryName":"Exchange ActiveSync","options":null},"6fc66f7a3116c599":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjcache_l_cachesizeperprofile","displayName":"Local Project Cache Size Limit in MB (User)","description":"Sets the size limit in MB of the local project cache. This is applied per user profile. If this setting is enabled, the size of the cache will be set to the number specified. If this setting is disabled or not configured, users are able to set the cache size limit.","helpText":"","infoUrls":[],"categoryId":"e13ec567-e29c-4ca0-b599-e8c43587f10a","categoryName":"Tools | Local Project Cache","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjcache_l_cachesizeperprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjcache_l_cachesizeperprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"6fbe5f1afe046947":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_l_pjworkunits24","displayName":"Work is entered in (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_l_pjworkunits24_3","displayName":"Minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_l_pjworkunits24_5","displayName":"Hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_l_pjworkunits24_7","displayName":"Days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_l_pjworkunits24_9","displayName":"Weeks","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_l_pjworkunits24_11","displayName":"Months","description":null,"helpText":null}]},"6fa7308124f2ae71":{"id":"user_vendor_msft_policy_config_security_recoveryenvironmentauthentication","displayName":"Recovery Environment Authentication (User)","description":"This policy controls the requirement of Admin Authentication in RecoveryEnvironment.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#recoveryenvironmentauthentication"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_security_recoveryenvironmentauthentication_0","displayName":"current) behavior","description":"current) behavior","helpText":null},{"id":"user_vendor_msft_policy_config_security_recoveryenvironmentauthentication_1","displayName":"RequireAuthentication: Admin Authentication is always required for components in RecoveryEnvironment","description":"RequireAuthentication: Admin Authentication is always required for components in RecoveryEnvironment","helpText":null},{"id":"user_vendor_msft_policy_config_security_recoveryenvironmentauthentication_2","displayName":"NoRequireAuthentication: Admin Authentication is not required for components in RecoveryEnvironment","description":"NoRequireAuthentication: Admin Authentication is not required for components in RecoveryEnvironment","helpText":null}]},"6fa341ef08b030f3":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys100","displayName":"Disable shortcut keys (User)","description":"Specify the virtual key code and modifier for the shortcut key to disable.","helpText":"","infoUrls":[],"categoryId":"4e4deef0-4528-47d5-8869-4143c506f18b","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys100_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys100_1","displayName":"Enabled","description":null,"helpText":null}]},"6f493ab58ba37b41":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1","displayName":"Enabled","description":null,"helpText":null}]},"6f7060206f4c7ed4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders47","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders47_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders47_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/70.json b/public/intune-definitions/70.json new file mode 100644 index 000000000000..19af3445c513 --- /dev/null +++ b/public/intune-definitions/70.json @@ -0,0 +1 @@ +{"7072d337b35b9aa6":{"id":"com.android.devicerestrictionpolicy.appsautoupdatepolicy","displayName":"App auto-updates (work profile-level)","description":"Define the auto update policy for apps. Devices check for app updates daily. If set to 'User choice', the end user can set their preference in managed Google Play. If set to 'Never', apps will never auto-update. If set to 'Wi-Fi only', apps will only auto-update when the device is connected to Wi-Fi. If set to 'Always', apps will always auto-update. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"","infoUrls":[],"categoryId":"2257f7e1-3e88-4d4d-a666-437bbe42baca","categoryName":"Applications","options":[{"id":"com.android.devicerestrictionpolicy.appsautoupdatepolicy_notconfigured","displayName":"Not configured","description":"Not configured; this value is ignored.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsautoupdatepolicy_userchoice","displayName":"User choice","description":"The user can control auto-updates.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsautoupdatepolicy_never","displayName":"Never","description":"Apps are never auto-updated.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsautoupdatepolicy_wifionly","displayName":"Wi-Fi only","description":"Apps are auto-updated over Wi-Fi only.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsautoupdatepolicy_always","displayName":"Always","description":"Apps are auto-updated at any time. Data charges may apply.","helpText":null}]},"70255112d3e8f18d":{"id":"com.apple.managedclient.preferences_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\n\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Microsoft Defender SmartScreen warnings.\n\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\n\nIf you enable this policy:\n\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\n\nExample:\n\nThe following example value would prevent file type extension-based download warnings on swf, exe, and jnlp extensions for *.contoso.com domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\n\n[\n { \"file_extension\": \"jnlp\", \"domains\": [\"contoso.com\"] },\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\n { \"file_extension\": \"swf\", \"domains\": [\"*\"] }\n]\n\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#exemptdomainfiletypepairsfromfiletypedownloadwarnings"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"709fa9d9b3119646":{"id":"com.apple.managedclient.preferences_preventsmartscreenpromptoverrideforfiles","displayName":"Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads","description":"This policy lets you determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads.\n\nIf you enable this policy, users in your organization can't ignore Microsoft Defender SmartScreen warnings, and they're prevented from completing the unverified downloads.\n\nIf you disable or don't configure this policy, users can ignore Microsoft Defender SmartScreen warnings and complete unverified downloads.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#preventsmartscreenpromptoverrideforfiles"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_preventsmartscreenpromptoverrideforfiles_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_preventsmartscreenpromptoverrideforfiles_true","displayName":"Enabled","description":null,"helpText":null}]},"70d62a95af17be8b":{"id":"com.apple.mcx_com.apple.cachedaccounts.createatlogin","displayName":"Create At Login","description":"If true, creates the mobile account at login time.","helpText":null,"infoUrls":[],"categoryId":"ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","categoryName":"Mobile Accounts","options":[{"id":"com.apple.mcx_com.apple.cachedaccounts.createatlogin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.cachedaccounts.createatlogin_true","displayName":"True","description":null,"helpText":null}]},"701e6a59cb80ab70":{"id":"com.apple.mcxprinting_userprinterlist_printer","displayName":"Printer","description":"A dictionary of printer details.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"70c5e29e9ca2de47":{"id":"com.apple.xsan.preferences_preferdlc","displayName":"Prefer DLC","description":"An array of StorNext volume names. If the Xsan client is attempting to mount a volume named in this array, the Xsan client attempts to mount the volume using DLC. If DLC isn't available, the client attempts to mount the volume if its LUNs are available through Fibre Channel. The volume name must not also appear in Deny DLC.","helpText":null,"infoUrls":[],"categoryId":"fd3717c1-dcf8-4038-b7f7-4ad3359a9d32","categoryName":"Xsan Preferences","options":null},"70419e94b0e91c87":{"id":"device_vendor_msft_euiccs_{euicc}_policies_localuienabled","displayName":"Display Local UI","description":"Determines whether the local user interface of the LUI is available (true if available, false otherwise). Initially populated by the LPA when the eUICC tree is created, can be queried and changed by the MDM server.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":[{"id":"device_vendor_msft_euiccs_{euicc}_policies_localuienabled_false","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_euiccs_{euicc}_policies_localuienabled_true","displayName":"Enabled","description":"Enabled","helpText":null}]},"700024ace70797ba":{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatremoveprogramcompatproppage","displayName":"Remove Program Compatibility Property Page","description":"This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on the property context-menu of any program shortcut or executable file.\r\n\r\nThe compatibility property page displays a list of options that can be selected and applied to the application to resolve the most common issues affecting legacy applications. Enabling this policy setting removes the property page from the context-menus, but does not affect previous compatibility settings applied to application using this interface.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatremoveprogramcompatproppage"],"categoryId":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","categoryName":"Application Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatremoveprogramcompatproppage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatremoveprogramcompatproppage_1","displayName":"Enabled","description":null,"helpText":null}]},"706edc9318614b51":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_slowlink5","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_slowlink5_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_slowlink5_1","displayName":"True","description":null,"helpText":null}]},"701e81d5ed8a40e2":{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashpublication_lbl_hashpublicationactioncombo","displayName":"Hash publication actions:","description":null,"helpText":"","infoUrls":[],"categoryId":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashpublication_lbl_hashpublicationactioncombo_0","displayName":"Allow hash publication only for shared folders on which BranchCache is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashpublication_lbl_hashpublicationactioncombo_1","displayName":"Disallow hash publication on all shared folders","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashpublication_lbl_hashpublicationactioncombo_2","displayName":"Allow hash publication for all shared folders","description":null,"helpText":null}]},"701443b9037b5204":{"id":"device_vendor_msft_policy_config_admx_nca_customcommands_customcommands_control","displayName":"CustomCommands","description":null,"helpText":"","infoUrls":[],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":null},"70b863ad8e654b7a":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_passivepolling","displayName":"Specify passive polling","description":"This Policy setting enables you to specify passive polling behavior. NCSI polls various measurements throughout the network stack on a frequent interval to determine if network connectivity has been lost. Use the options to control the passive polling behavior.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ncsi#admx-ncsi-ncsi-passivepolling"],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_passivepolling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_passivepolling_1","displayName":"Enabled","description":null,"helpText":null}]},"70061fadc2344b22":{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_3_wdiscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"cebd5934-9dfe-4278-966d-b9d880cb30e7","categoryName":"Windows Shutdown Performance Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_3_wdiscenarioexecutionpolicylevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_3_wdiscenarioexecutionpolicylevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"704d88691593dc4b":{"id":"device_vendor_msft_policy_config_admx_power_acconnectivityinstandby_2","displayName":"Allow network connectivity during connected-standby (plugged in)","description":"This policy setting allows you to control the network connectivity state in standby on modern standby-capable systems.\r\n\r\nIf you enable this policy setting, network connectivity will be maintained in standby.\r\n\r\nIf you disable this policy setting, network connectivity in standby is not guaranteed. This connectivity restriction currently applies to WLAN networks only, and is subject to change.\r\n\r\nIf you do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-acconnectivityinstandby-2"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_acconnectivityinstandby_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_acconnectivityinstandby_2_1","displayName":"Enabled","description":null,"helpText":null}]},"700fbd63e0de7c54":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_nc_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":null},"70bbd30392fda4b7":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_2","displayName":"Disable text prediction","description":"Prevents the Touch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista) from providing text prediction suggestions. This policy applies for both the on-screen keyboard and the handwriting tab when the feature is available for the current input area and input language.\r\n\r\nTouch Keyboard and Handwriting panel enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will not provide text prediction suggestions. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will provide text prediction suggestions. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will provide text prediction suggestions. Users will be able to configure this setting on the Text Completion tab in Input Panel Options in Windows 7 and Windows Vista.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-prediction-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_2_1","displayName":"Enabled","description":null,"helpText":null}]},"7034d0f6c7e9f4ce":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_advanced_remotefx_remoteapp","displayName":"Use advanced RemoteFX graphics for RemoteApp","description":"This policy setting allows you to enable RemoteApp programs to use advanced graphics, including support for transparency, live thumbnails, and seamless application moves. This policy setting applies only to RemoteApp programs and does not apply to remote desktop sessions.\r\n\r\nIf you enable or do not configure this policy setting, RemoteApp programs published from this RD Session Host server will use these advanced graphics.\r\n\r\nIf you disable this policy setting, RemoteApp programs published from this RD Session Host server will not use these advanced graphics. You may want to choose this option if you discover that applications published as RemoteApp programs do not support these advanced graphics. \r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-server-advanced-remotefx-remoteapp"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_advanced_remotefx_remoteapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_advanced_remotefx_remoteapp_1","displayName":"Enabled","description":null,"helpText":null}]},"70e3ca18459f1af9":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_w32time_crosssitesyncflags","displayName":"CrossSiteSyncFlags","description":null,"helpText":"","infoUrls":[],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":null},"70a285c431c3cbee":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended","displayName":"Set default download directory","description":"Setting the policy changes the default directory that Chrome downloads files to, but users can change the directory.\r\n\r\nLeaving the policy unset means Chrome uses its platform-specific default directory.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"70ab2c10551fe0a8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters","displayName":"Command-line parameters for switching from the alternative browser.","description":"Setting the policy to a list of strings means the strings are joined with spaces and passed from Internet Explorer® to Google Chrome as command-line parameters. If an parameter contains ${url}, ${url} is replaced with the URL of the page to open. If no parameter contains ${url}, the URL is appended at the end of the command line.\r\n\r\nEnvironment variables are expanded. On Microsoft® Windows®, %ABC% is replaced with the value of the ABC environment variable.\r\n\r\nLeaving the policy unset means Internet Explorer® only passes the URL to Google Chrome as a command-line parameter.\r\n\r\nNote: If the Legacy Browser Support add-in for Internet Explorer® isn't installed, this policy has no effect.\r\n\r\nExample value:\r\n\r\n--force-dark-mode","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_1","displayName":"Enabled","description":null,"helpText":null}]},"70008ebe083c1027":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled","displayName":"Enable RC4 cipher suites in TLS","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"707815afab996b27":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled","displayName":"Enable showing promotional content","description":"Setting the policy to True or leaving it unset lets Google Chrome show users product promotional content.\r\n\r\nSetting the policy to False prevents Google Chrome from showing product promotional content.\r\n\r\nSetting the policy controls the presentation of promotional content, including the welcome pages that help users sign in to Google Chrome, set Google Chrome as users' default browser, or otherwise inform them of product features.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7090100e6956ddbf":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource","displayName":"DO Group Id Source","description":"Specifies the source of group ID used for peer selection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dogroupidsource"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_0","displayName":"Not Set","description":"Not Set","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_1","displayName":"AD site","description":"AD site","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_2","displayName":"Authenticated domain SID","description":"Authenticated domain SID","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_3","displayName":"DHCP Option ID","description":"DHCP Option ID","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_4","displayName":"DNS Suffix","description":"DNS Suffix","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_5","displayName":"Entra ID Tenant ID","description":"Entra ID Tenant ID","helpText":null}]},"705bbb37a8d7c5db":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"7082827792fab7b8":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"04b46099-4ee5-4def-8e04-569c988057a9","categoryName":"Identity and sign-in","options":null},"707c32b9ff7c14c7":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support","description":"Enable support for Signed HTTP Exchange (SXG).\r\n\r\nIf this policy isn't set or enabled, Microsoft Edge will accept web contents served as Signed HTTP Exchanges.\r\n\r\nIf this policy is set to disabled, Signed HTTP Exchanges can't be loaded.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"700e92e0cee07ef5":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions","displayName":"Allow importing of extensions","description":"Allows users to import extensions from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"70deba07d14e0dd2":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_any","displayName":"Allow printing with and without background graphics","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_enabled","displayName":"Allow printing only with background graphics","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_disabled","displayName":"Allow printing only without background graphics","description":null,"helpText":null}]},"709a681bf3de70a5":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_javascriptjitallowedforsitesdesc","displayName":"Allow JavaScript to use JIT on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"70405560d9b54319":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mse7exe13","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mse7exe13_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mse7exe13_1","displayName":"True","description":null,"helpText":null}]},"70065c15f1c7547d":{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakesonbattery","displayName":"Require a password when a computer wakes (on battery)","description":"This policy setting specifies whether or not the user is prompted for a password when the system resumes from sleep.\n\nIf you enable or do not configure this policy setting, the user is prompted for a password when the system resumes from sleep.\n\nIf you disable this policy setting, the user is not prompted for a password when the system resumes from sleep.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-requirepasswordwhencomputerwakesonbattery"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakesonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakesonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},"70ec4ced02378b15":{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability","displayName":"Touch Keyboard Dictation Button Availability","description":"Specifies whether the dictation input button is enabled or disabled for the touch keyboard. When this policy is set to disabled, the dictation input button on touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboarddictationbuttonavailability"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability_1","displayName":"Dictation button on the keyboard is always available.","description":"Dictation button on the keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability_2","displayName":"Dictation button on the keyboard is always disabled.","description":"Dictation button on the keyboard is always disabled.","helpText":null}]},"704cc3639f042eac":{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_createdesktopshortcutmicrosoftedgebeta","displayName":"Prevent Desktop Shortcut creation upon install","description":"If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.\r\n\r\n If you don't configure this policy for a channel, the 'CreateDesktopShortcut default' policy configuration determines shortcut creation when Microsoft Edge is installed.","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_createdesktopshortcutmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_createdesktopshortcutmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"70a9f6adfa26c642":{"id":"intelligencesettings_allowimagewand","displayName":"Allow Image Wand","description":"If `false`, disables Image Wand.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_allowimagewand_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_allowimagewand_true","displayName":"True","description":null,"helpText":null}]},"70a32a12659aadd8":{"id":"intelligencesettings_apps_mail","displayName":"Mail","description":"If present, configures Mail Intelligence features.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":null},"7030b34d7ef8d564":{"id":"user_vendor_msft_policy_config_admx_desktop_ad_querylimit_ad_querylimit_box","displayName":"Number of objects returned: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"99ba9e42-9872-4a03-a615-fc4a4cebc067","categoryName":"Active Directory","options":null},"70f730bd0f05a0dd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},"701d58179d441a74":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_enabled","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_disabled","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null}]},"701aeb36f33b6ec9":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled","displayName":"Re-enable deprecated/removed Mutation Events (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"70da847264db3211":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18","displayName":"Trusted Location #18 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_1","displayName":"Enabled","description":null,"helpText":null}]},"7049a093fb752a6a":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"702b847238bc3a70":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod","displayName":"Set the time period for update notifications (User)","description":"Allows you to set the time period, in milliseconds, over which users are notified that Microsoft Edge must be relaunched or that a Microsoft Edge OS device must be restarted to apply a pending update.\r\n\r\nOver this time period, the user will be repeatedly informed of the need for an update. For Microsoft Edge OS devices, a restart notification appears in the system tray according to the RelaunchHeadsUpPeriod policy. For Microsoft Edge browsers, the app menu changes to indicate that a relaunch is needed once one third of the notification period passes. This notification changes color once two thirds of the notification period passes, and again once the full notification period has passed. The additional notifications enabled by the 'RelaunchNotification' (Notify a user that a browser restart is recommended or required for pending updates) policy follow this same schedule.\r\n\r\nIf not set, the default period of 604800000 milliseconds (one week) is used.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"70789c4d8dae5a6b":{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting","displayName":"'Set the default \"share additional operating system region\" setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_0","displayName":"Limited","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_1","displayName":"Always share the OS Regional format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_2","displayName":"Never share the OS Regional format","description":null,"helpText":null}]},"70047f1f4172adf8":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_clipboardallowedforurlsdesc","displayName":"Allow clipboard use on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"705fecdaf212e954":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_allowbrowsingwithcopilot","displayName":"Controls the availability of browsing with Copilot in Microsoft Edge. (User)","description":"When browsing with Copilot is enabled, users can explicitly invoke it for a query. It isn't invoked automatically.\r\n\r\nBrowsing with Copilot is available only on domains specified in the 'BrowsingWithCopilotAllowList' (Browsing with Copilot Allowed URLs) policy and is blocked on domains specified in the 'BrowsingWithCopilotBlockList' (Browsing with Copilot Blocked URLs) policy. If no domains are configured in the allow list, browsing with Copilot is effectively disabled.\r\n\r\nThis feature is available only to users with an active Microsoft 365 Copilot subscription.\r\n\r\nFor more information about configuring browsing with Copilot, see https://go.microsoft.com/fwlink/?linkid=2346300.\r\n\r\nIf you enable this policy, browsing with Copilot is turned on for all users who receive the policy, and users can't turn it off.\r\n\r\nIf you disable this policy, browsing with Copilot is turned off for all users who receive the policy, and users can't turn it on.\r\n\r\nIf you don't configure this policy, browsing with Copilot is off by default, and users can turn it on.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_allowbrowsingwithcopilot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_allowbrowsingwithcopilot_1","displayName":"Enabled","description":null,"helpText":null}]},"70c0663dccd21845":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed","displayName":"Allow media autoplay for websites (User)","description":"This policy sets the media autoplay policy for websites.\r\n\r\nThe default setting, \"Not configured\" respects the current media autoplay settings and lets users configure their autoplay settings.\r\n\r\nSetting to \"Enabled\" sets media autoplay to \"Allow\". All websites are allowed to autoplay media. Users can’t override this policy.\r\n\r\nSetting to \"Disabled\" sets media autoplay to \"Block\". No websites are allowed to autoplay media. Users can’t override this policy.\r\n\r\nA tab will need to be closed and re-opened for this policy to take effect.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"7012fb17ee19b6ea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlookadhocreviewing","displayName":"Outlook: Ad hoc reviewing (User)","description":"\"Enable ad hoc reviewing\": Enables the ad-hoc review feature. | \"Exclude author's e-mail in documents\": Enables the ad-hoc review feature, but the authors e-mail is not recorded on the sent document. | \"Disable ad hoc reviewing\": Disables the ad-hoc review feature.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlookadhocreviewing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlookadhocreviewing_1","displayName":"Enabled","description":null,"helpText":null}]},"70d6a9e341fa9728":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceprofile_l_profilelabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"705a8dfcae81715c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_donotshowscreentipsontoolbars","displayName":"Do not show ScreenTips on toolbars (User)","description":"This policy setting allows you to configure the \"Show ScreenTips on Toolbars\" option.\r\n\r\nIf you enable this policy setting, ScreenTips will not be shown on toolbars.\r\n\r\nIf you disable or do not configure this policy setting, ScreenTips will be shown on toolbars.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_donotshowscreentipsontoolbars_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_donotshowscreentipsontoolbars_1","displayName":"Enabled","description":null,"helpText":null}]},"706d091d2d818abb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyword","displayName":"Disallow in Word (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyword_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyword_1","displayName":"True","description":null,"helpText":null}]},"700daf1ae3fd644f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_croatiancroatia","displayName":"Croatian (Croatia) (User)","description":"Enables the editing language Croatian (Croatia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_croatiancroatia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_croatiancroatia_1","displayName":"Enabled","description":null,"helpText":null}]},"701c3b5d32620bb5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimetowaitbeforerescanning_l_empty432","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":null},"70e51f5da1f98514":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcustomtags","displayName":"Specify custom tags for Office telemetry data (User)","description":"This policy setting allows you to add custom tags to the Office telemetry data that is sent by Office Telemetry Agent.\r\n\r\nIf you enable this policy setting, the specified custom tags are shown in Office Telemetry Dashboard, where you can filter the collected data by the tag name. You can specify any string that you want to categorize and filter the collected data (for example, department name, title of user, and so forth).\r\n\r\nIf you disable or do not configure this policy setting, no custom tags are shown in Office Telemetry Dashboard, and you cannot filter the data that is sent by Office Telemetry Agent.","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcustomtags_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcustomtags_1","displayName":"Enabled","description":null,"helpText":null}]},"70c5a70b22ce9e66":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_blockvbamacrotrusteddocument","displayName":"Turn off Trusted Documents for VBA macros (User)","description":"This policy setting allows you to turn off the Trusted Documents feature for documents containing VBA macros.\r\n\r\nIf you enable this policy setting, users will always see security notifications for VBA macros in documents. When users click \"Enable Content\" for VBA macros, Office will not create a trust record for the document, ensuring that the user is prompted every time they open the document.\r\n\r\nIf you disable or don't configure this policy setting, the Trusted Documents feature allows users to always allow VBA macros in a document so that the user is not prompted the next time they open that document. Trusted documents are exempt from security notifications.\r\n\r\nNote: Enabling this policy setting does not clear existing trusted documents that were previously trusted.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_blockvbamacrotrusteddocument_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_blockvbamacrotrusteddocument_1","displayName":"Enabled","description":null,"helpText":null}]},"70554aa5651deaf5":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_shownotecontainers","displayName":"Show Note Containers (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"44774d3d-387b-4fa7-8de4-d82b039c06d1","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_shownotecontainers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_shownotecontainers_1","displayName":"Enabled","description":null,"helpText":null}]},"701116cac939a601":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"70a23be6e2aabd1a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_pathtodavserver","displayName":"Path to DAV server (User)","description":"This setting allows you to define the path to a DAV server that should be used when users publish their calendars via DAV.","helpText":"","infoUrls":[],"categoryId":"34c07941-8f52-43ad-b0ca-a7284655afb4","categoryName":"Office.com Sharing Service","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_pathtodavserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_pathtodavserver_1","displayName":"Enabled","description":null,"helpText":null}]},"70caf51102524072":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_playasound","displayName":"Play a sound (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_playasound_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_playasound_1","displayName":"True","description":null,"helpText":null}]},"70e140d59d3d15e8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blocknetworkactivitysynchronization","displayName":"Block network activity synchronization (User)","description":"This policy setting allows you to block synchronization of status updates between Outlook and social networks.\r\n\r\nIf you enable this policy setting, social network activity synchronization is blocked.\r\n\r\nIf you disable or you do not configure this policy setting, social network activity synchronization is allowed.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blocknetworkactivitysynchronization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blocknetworkactivitysynchronization_1","displayName":"Enabled","description":null,"helpText":null}]},"7074cde3f1b6cd4a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_defaultsharepointlists_l_empty35","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":null},"70edb3a09c5aebd0":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_keeplastautosavedversions","displayName":"Keep the last AutoSaved versions of files for the next session (User)","description":"This policy setting determines whether PowerPoint keeps the last AutoSaved version of a file if a user closes a file without saving it. (Note: AutoSave applies only when AutoRecover is enabled.)\r\n\r\nIf you enable or do not configure this policy setting, PowerPoint keeps the last AutoSaved version of the file and makes it available to the user the next time the file is opened if the user closes a file without saving it.\r\n\r\nIf you disable this policy setting, PowerPoint does not keep the last AutoSaved version of the file if the user closes a file without saving it.","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_keeplastautosavedversions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_keeplastautosavedversions_1","displayName":"Enabled","description":null,"helpText":null}]},"70e33d4349aeb65f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_datecolon53","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"708853c901e578e4":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendemailemailpreview","displayName":"File tab | Share | E-mail Preview (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendemailemailpreview_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendemailemailpreview_1","displayName":"True","description":null,"helpText":null}]},"7058cb942f7c08ce":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_promptfordocumentpropertiesonfirstsave","displayName":"Prompt for document properties on first save (User)","description":"Indicates whether the properties dialog box opens when a file is saved for the first time. File properties include author name and information such as the status of the file, preview settings and other properties.","helpText":"","infoUrls":[],"categoryId":"73415dea-0103-4427-83c5-6c97bf81af1d","categoryName":"Save Documents","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_promptfordocumentpropertiesonfirstsave_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_promptfordocumentpropertiesonfirstsave_1","displayName":"Enabled","description":null,"helpText":null}]},"70b0bbaf9d7874f1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates","displayName":"Word 6.0 binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"70ecdb79fef72196":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates","displayName":"Word 97 binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word97binarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"70ee4fa09140e484":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"7047e3ee62de5d8f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders39","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders39_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders39_1","displayName":"True","description":null,"helpText":null}]},"70e5c30d8172caa2":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_direction","displayName":"Direction","description":"The rule is enabled based on the traffic direction as following.\n\nIN - the rule applies to inbound traffic.\nOUT - the rule applies to outbound traffic.\n\nIf not specified the detault is OUT.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_direction_in","displayName":"The rule applies to inbound traffic.","description":"The rule applies to inbound traffic.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_direction_out","displayName":"The rule applies to outbound traffic.","description":"The rule applies to outbound traffic.","helpText":null}]},"70edcfb9264cb9ed":{"id":"vendor_msft_windowslicensing_devicelicensingservice_licensetype","displayName":"License Type","description":"Get/Replace License Type: User Based License = 0, Device Based License = 1\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsLicensing-csp/"],"categoryId":"f8a973d8-b5d6-4d3e-9e82-63f61107fd0c","categoryName":"Windows Licensing","options":[{"id":"vendor_msft_windowslicensing_devicelicensingservice_licensetype_0","displayName":"User Based License","description":"User Based License","helpText":null},{"id":"vendor_msft_windowslicensing_devicelicensingservice_licensetype_1","displayName":"Device Based License","description":"Device Based License","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/71.json b/public/intune-definitions/71.json new file mode 100644 index 000000000000..07e9feac91d4 --- /dev/null +++ b/public/intune-definitions/71.json @@ -0,0 +1 @@ +{"715c6ccda38f95b5":{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesshowworkcontactsinpersonalprofile","displayName":"Block searching of work contacts and displaying work contact caller-id in personal profile","description":"In the personal profile, 'True' prevents users from searching work contacts, and showing work caller ID information. If 'False', Intune doesn't change or update this setting. By default, the OS might allow searching work contacts, and show work caller IDs. Available for corporate-owned work profile devices. Available in Android 8.0 and later.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesshowworkcontactsinpersonalprofile_false","displayName":"False","description":"false","helpText":null},{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesshowworkcontactsinpersonalprofile_true","displayName":"True","description":"true","helpText":null}]},"7115ffd25df1f353":{"id":"com.android.devicerestrictionpolicy.securityrequireverifyapps","displayName":"Require threat scan on apps","description":"If 'True', enables Google Play Protect to scan apps before and after they're installed. If it detects a threat, it might warn users to remove the app from the device. If 'False', Intune doesn't change or update this setting. By default, the OS might not enable or run Google Play Protect to scan apps. Available for fully managed, dedicated and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"bf8e3e9c-f7e7-4a43-8898-2caf7b01d987","categoryName":"System Security","options":[{"id":"com.android.devicerestrictionpolicy.securityrequireverifyapps_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.securityrequireverifyapps_false","displayName":"False","description":"false","helpText":null}]},"7175f624706aa2e4":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordminimumnumericcharacters","displayName":"Number of numeric characters required","description":"Enter the number of numeric characters (1, 2, 3, and so on) the work profile password must have, between 1 and 16 characters. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"714566421c4fc6c1":{"id":"com.apple.applicationaccess_ratingmoviesus","displayName":"Rating Movies - United States","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesus_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesus_1","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesus_2","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesus_3","displayName":"PG-13","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesus_4","displayName":"R","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesus_5","displayName":"NC-17","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesus_6","displayName":"All","description":null,"helpText":null}]},"71eac79a4a03214d":{"id":"com.apple.extensiblesso_extensiondata_credentialusemode_kerberos","displayName":"Credential Use Mode","description":"This setting affects how the Kerberos Extension credential is used by other processes.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_credentialusemode_kerberos_0","displayName":"Always","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_credentialusemode_kerberos_1","displayName":"When Not Specified","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_credentialusemode_kerberos_2","displayName":"Kerberos Default ","description":null,"helpText":null}]},"718dfec61c673c5c":{"id":"com.apple.managedclient.preferences_importsearchengine","displayName":"Allow importing of search engine settings","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\n\nIf you enable, this policy, the option to import search engine settings is automatically selected.\n\nIf you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.\n\nIf you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importsearchengine"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importsearchengine_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importsearchengine_true","displayName":"Enabled","description":null,"helpText":null}]},"717b6b664deeea7e":{"id":"com.apple.managedclient.preferences_nativemessagingallowlist","displayName":"Control which native messaging hosts users can use","description":"List specific native messaging hosts that users can use in Microsoft Edge.\n\nBy default, all native messaging hosts are allowed. If you set the \"NativeMessagingBlocklist\" policy to *, all native messaging hosts are blocked, and only native messaging hosts listed in here are loaded.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#nativemessagingallowlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"7197432279058965":{"id":"com.apple.managedclient.preferences_pluginsblockedforurls","displayName":"Block the Adobe Flash plug-in on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from running Adobe Flash.\n\nIf you don't configure this policy, the global default value from the \"DefaultPluginsSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#pluginsblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"71489029430ef0c2":{"id":"com.apple.managedclient.preferences_usesystemprintdialog","displayName":"Print using system print dialog","description":"Shows the system print dialog instead of print preview.\n\nIf you enable this policy, Microsoft Edge opens the system print dialog instead of the built-in print preview when a user prints a page.\n\nIf you don't configure or disable this policy, print commands trigger the Microsoft Edge print preview screen.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#usesystemprintdialog"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_usesystemprintdialog_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_usesystemprintdialog_true","displayName":"Enabled","description":null,"helpText":null}]},"71ad325b343f0e95":{"id":"com.apple.mobiledevice.passwordpolicy_maxpinageindays","displayName":"Max PIN Age In Days","description":"The number of days for which the passcode can remain unchanged. After this number of days, the user is forced to change the passcode before the device is unlocked.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"7170746219171d5e":{"id":"com.apple.webcontent-filter_com.apple.webcontent-filter","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"7178587d531fd127":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsystemnotifications","displayName":"Allows system notifications","description":"Lets you use system notifications instead of Microsoft Edge's embedded Message Center on Windows and Linux.\n\nIf set to True or not set, Microsoft Edge is allowed to use system notifications.\n\nIf set to False, Microsoft Edge won't use system notifications. Microsoft Edge's embedded Message Center is used as a fallback.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsystemnotifications_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsystemnotifications_true","displayName":"Enabled","description":null,"helpText":null}]},"716f8f7a2867b914":{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent","displayName":"Enable or disable freezing the User-Agent string at major version 99 (Obsolete)","description":"This policy was removed in Microsoft Edge 118 and is ignored if configured.\n\nThis policy controls whether the User-Agent string major\nversion should be frozen at 99.\n\nThe User-Agent request header lets websites identify the application,\noperating system, vendor, and/or version of the requesting user agent.\nSome websites make assumptions about how this header is formatted and may\nencounter issues with version strings that include three digits in the\nmajor position (for example, 100.0.0.0).\n\nIf you set this policy to 'Default' or don't configure it, then it defaults to\nbrowser settings for the User-Agent string major version.\nIf you set this policy to 'ForceEnabled', the User-Agent string will always report the\nmajor version as 99 and include the browser's major version in the minor\nposition. For example, browser version 101.0.0.0 would send a User-Agent\nrequest header that reports version 99.101.0.0.\nIf you set this policy to 'ForceDisabled', the User-Agent string won't freeze the\nmajor version.\n\nThis policy is temporary and will be deprecated in the future. If this policy and\nUser-Agent Reduction are\nboth enabled, the User-Agent version string will always be 99.0.0.0.\n\nPolicy options mapping:\n\n* Default (0) = Default to browser settings for User-Agent string version.\n\n* ForceDisabled (1) = The User-Agent string won't freeze the major version.\n\n* ForceEnabled (2) = The User-Agent string will freeze the major version as 99 and include the browser's major version in the minor position.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent_default","displayName":"Default to browser settings for User-Agent string version.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent_forcedisabled","displayName":"The User-Agent string won't freeze the major version.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent_forceenabled","displayName":"The User-Agent string will freeze the major version as 99 and include the browser's major version in the minor position.","description":null,"helpText":null}]},"71dcd0440435587c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importshortcuts","displayName":"Allow importing of shortcuts","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\n\nIf you disable this policy, Shortcuts aren't imported on first run.\n\nIf you don't configure this policy, Shortcuts are imported on first run.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\n\nNote: This policy currently manages import from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_true","displayName":"Enabled","description":null,"helpText":null}]},"71d6054268815e11":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sendmouseeventsdisabledformcontrolsenabled","displayName":"Control the new behavior for event dispatching on disabled form controls (Obsolete)","description":"Event dispatching on disabled form controls is being changed in Microsoft Edge to improve compatibility with other browsers and to improve the developer experience.\n\nWith this change, MouseEvents get dispatched on disabled form control elements. Exceptions for this behavior are click, mouseup, and mousedown. Some examples of the new events are mousemove, mouseenter, and mouseleave.\n\nThis change also truncates the event path of click, mouseup, and mousedown when they’re dispatched on children of disabled form controls. These events aren’t dispatched on the disabled form control or on any of its ancestors.\n\nNote: This new behavior might break some websites.\n\nIf you enable or don't configure this policy, the new behavior is used.\n\nIf you disable this policy, the old behavior is used.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sendmouseeventsdisabledformcontrolsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sendmouseeventsdisabledformcontrolsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"71b351c47f3a5ddc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.settimeoutwithout1msclampenabled","displayName":"Control Javascript setTimeout() function minimum timeout (Obsolete)","description":"This policy is obsolete and doesn't work in Microsoft Edge after version 109.\nThis policy was only provided temporarily to allow Enterprises to adapt to the new clamping behavior.\n\n If you enable this policy, the JavaScript setTimeout() with a timeout of 0 ms is no longer fixed to 1 ms to schedule timer-based callbacks.\n If you disable this policy, the JavaScript setTimeout() with a timeout of 0 ms is fixed to 1 ms to schedule timer-based callbacks.\n If you don't configure this policy, use the browser's default behavior for setTimeout() function.\n\n This is a web standards compliancy feature; however, it may change task ordering on a webpage, leading to unexpected behavior on sites that are dependent on a certain ordering.\n It also affects sites with many setTimeout()s with a timeout of 0-ms usage, for example, increasing CPU load.\n\n For users where this policy is unset, Microsoft Edge Stable rolls out the change gradually on the stable channel.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.settimeoutwithout1msclampenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.settimeoutwithout1msclampenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7126f494ad689656":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_adminname_txt_adminaccountname","displayName":"Administrator account name","description":"","helpText":"","infoUrls":[],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":null},"718e208bd79cc41e":{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings_shortnamecreationsetting_levels","displayName":"Short name creation options","description":null,"helpText":"","infoUrls":[],"categoryId":"bb54b081-5004-4f05-a46c-f5b948f57b82","categoryName":"NTFS","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings_shortnamecreationsetting_levels_0","displayName":"Enable on all volumes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings_shortnamecreationsetting_levels_1","displayName":"Disable on all volumes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings_shortnamecreationsetting_levels_2","displayName":"Enable / disable on a per volume basis","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings_shortnamecreationsetting_levels_3","displayName":"Disable on all data volumes","description":null,"helpText":null}]},"71db0b0d36c9de7d":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection","displayName":"Configure folder redirection policy processing","description":"This policy setting determines when folder redirection policies are updated.\r\n\r\nThis policy setting affects all policies that use the folder redirection component of Group Policy, such as those in WindowsSettings\\Folder Redirection. You can only set folder redirection policy for Group Policy objects, stored in Active Directory, not for Group Policy objects on the local computer.\r\n\r\nThis policy setting overrides customized settings that the program implementing the folder redirection policy setting set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-folderredirection"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_1","displayName":"Enabled","description":null,"helpText":null}]},"71d27fd93853f9f3":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_allowedapplications_exploitguard_controlledfolderaccess_allowedapplications_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":null},"71bf51e0b8b09b32":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisableioavprotection","displayName":"Configure local setting override for scanning all downloaded files and attachments","description":"This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisableioavprotection"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisableioavprotection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisableioavprotection_1","displayName":"Enabled","description":null,"helpText":null}]},"71d738ce53d9abe7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablescanningmappednetworkdrivesforfullscan","displayName":"Run full scan on mapped network drives","description":"This policy setting allows you to configure scanning mapped network drives.\r\n\r\n If you enable this setting, mapped network drives will be scanned.\r\n\r\n If you disable or do not configure this setting, mapped network drives will not be scanned.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disablescanningmappednetworkdrivesforfullscan"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablescanningmappednetworkdrivesforfullscan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablescanningmappednetworkdrivesforfullscan_1","displayName":"Enabled","description":null,"helpText":null}]},"71a6b4b79115de55":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_screensavergraceperiod_screensavergraceperiod","displayName":"ScreenSaverGracePeriod","description":null,"helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":null},"7141703da66d774a":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_2","displayName":"Turn off reminder balloons","description":"Hides or displays reminder balloons, and prevents users from changing the setting.\r\n\r\nReminder balloons appear above the Offline Files icon in the notification area to notify users when they have lost the connection to a networked file and are working on a local copy of the file. Users can then decide how to proceed.\r\n\r\nIf you enable this setting, the system hides the reminder balloons, and prevents users from displaying them.\r\n\r\nIf you disable the setting, the system displays the reminder balloons and prevents users from hiding them.\r\n\r\nIf this setting is not configured, reminder balloons are displayed by default when you enable offline files, but users can change the setting.\r\n\r\nTo prevent users from changing the setting while a setting is in effect, the system disables the \"Enable reminders\" option on the Offline Files tab\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To display or hide reminder balloons without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the \"Enable reminders\" check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-noreminders-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_2_1","displayName":"Enabled","description":null,"helpText":null}]},"718f1a1ded655d82":{"id":"device_vendor_msft_policy_config_admx_settingsync_disableappsyncsettingsync","displayName":"Do not sync Apps","description":"\r\n Prevent the \"AppSync\" group from syncing to and from this PC. This turns off and disables the \"AppSync\" group on the \"sync your settings\" page in PC settings.\r\n\r\nIf you enable this policy setting, the \"AppSync\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn app syncing on\" so that syncing it turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"AppSync\" group is on by default and configurable by the user.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disableappsyncsettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disableappsyncsettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disableappsyncsettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"71111bb477ece5f9":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_generatelogcheck","displayName":"Log emails in Application and Services event log","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_generatelogcheck_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_generatelogcheck_1","displayName":"True","description":null,"helpText":null}]},"719af1c2eb2d49f6":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranet","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-intranet"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranet_1","displayName":"Enabled","description":null,"helpText":null}]},"71e03fc89308ef1e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_pluginsblockedforurlsdesc","displayName":"Block the Flash plugin on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"71158e38c9acb88a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ac821e49-1996-4d6c-99d4-9c3c3e4737b6","categoryName":"Related Website Sets Settings","options":null},"71910d49cdec9d76":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed","displayName":"Allow Safe Browsing Proxied Real Time Checks","description":"This controls whether Safe Browsing's standard protection mode is allowed to\r\nsend partial hashes of URLs to Google through a proxy via Oblivious HTTP\r\nin order to determine whether they are safe to visit.\r\n\r\nThe proxy allows browsers to upload partial hashes of URLs to Google\r\nwithout them being linked to the user's IP address. The policy also allows\r\nbrowsers to upload the partial hashes of URLs with higher frequency for\r\nbetter Safe Browsing protection quality.\r\n\r\nThis policy will be ignored if Safe Browsing is disabled or set to enhanced\r\nprotection mode.\r\n\r\nSetting the policy to Enabled or leaving it unset allows the\r\nhigher-protection proxied lookups.\r\n\r\nSetting the policy to Disabled disallows the higher-protection proxied\r\nlookups. Partial hashes of URLs will be uploaded to Google directly with much\r\nlower frequency, which will degrade protection.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"7101c3966fbe50e2":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive","displayName":"Also apply to matching devices that are already installed.","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive_1","displayName":"True","description":null,"helpText":null}]},"7151b9c2931cd2b3":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl","displayName":"SID Directory SDDL","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSDDL string representing the ACLs to use when creating the SID container folder.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SIDDirSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_1","displayName":"Enabled","description":null,"helpText":null}]},"71e27c48ffa3c226":{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder","displayName":"Use forest search order","description":"This policy setting defines the list of trusting forests that the Kerberos client searches when attempting to resolve two-part service principal names (SPNs).\n\nIf you enable this policy setting, the Kerberos client searches the forests in this list, if it is unable to resolve a two-part SPN. If a match is found, the Kerberos client requests a referral ticket to the appropriate domain.\n\nIf you disable or do not configure this policy setting, the Kerberos client does not search the listed forests to resolve the SPN. If the Kerberos client is unable to resolve the SPN because the name is not found, NTLM authentication might be used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-allowforestsearchorder"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder_1","displayName":"Enabled","description":null,"helpText":null}]},"713905355515d50c":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_requirestrongsessionkey","displayName":"Domain Member Require Strong Session Key","description":"Domain member: Require strong (Windows 2000 or later) session key This security setting determines whether 128-bit key strength is required for encrypted secure channel data. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller within the domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup, and so on. Depending on what version of Windows is running on the domain controller that the domain member is communicating with and the settings of the parameters: Domain member: Digitally encrypt or sign secure channel data (always) Domain member: Digitally encrypt secure channel data (when possible) Some or all of the information that is transmitted over the secure channel will be encrypted. This policy setting determines whether or not 128-bit key strength is required for the secure channel information that is encrypted. If this setting is enabled, then the secure channel will not be established unless 128-bit encryption can be performed. If this setting is disabled, then the key strength is negotiated with the domain controller. Default: Enabled. Important In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member's domain must be running Windows 2000 or later. In order to take advantage of this policy on domain controllers, all domain controllers in the same domain as well as all trusted domains must run Windows 2000 or later.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_requirestrongsessionkey"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"715bfb8c7c0d3a5b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords","displayName":"Allow importing of saved passwords","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\r\n\r\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},"71585df89d4ede4f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended","displayName":"Enable AutoFill for credit cards","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete credit card information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for credit cards.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"71637bf1392ca4bc":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc","displayName":"Block the WebHID API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"71dc65db083f20c4":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification","description":"According to Service Worker specification\r\nhttps://w3c.github.io/ServiceWorker/#control-and-use-worker-client, workers\r\nshould inherit controllers for blob URLs. Currently, only DedicatedWorkers\r\ninherit the controller, while SharedWorkers do not.\r\n\r\nEnabled/Unset: Microsoft Edge inherits\r\nthe controller for SharedWorker blob URLs, aligning with the specification.\r\n\r\nDisabled: Behavior remains unchanged, not aligning with the specification.\r\n\r\nThis policy is temporary and will be removed in a future update.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"71340d06794bc7e6":{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile","displayName":"Prioritize App specified profile to open external links","description":"This policy controls whether the profile specified by an app (such as Microsoft Teams or Outlook) is given priority when opening external links, instead of the profile selected in the Default profile for external links setting.\r\n\r\nPolicy behavior:\r\n1. Enabled or not configured: The app-specified profile is prioritized for opening external links. This behavior overrides the profile selected in settings, and the behavior defined by the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies. If the app doesn't specify a profile, this policy has no effect.\r\n2. Disabled: The profile selected in settings—along with the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies—will be used to determine which profile opens external links.\r\n\r\nNOTE:\r\nThis policy doesn't override user-defined preferences set through Automatic profile switching, including the Custom site switch setting located within it. If a user has configured specific sites to open in designated profiles, those preferences take precedence.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"71a64aacba0599b1":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_onenoteexe12","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_onenoteexe12_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_onenoteexe12_1","displayName":"True","description":null,"helpText":null}]},"718e37149642de52":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_forcedenytheseapps","displayName":"Let Apps Access Location Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"713bb0dbc2a43928":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filename","displayName":"File name","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"711961e9edc98a73":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_name","displayName":"Rule name","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"710290279ab284e5":{"id":"linux_advancedsettings","displayName":"Advanced settings","description":"Advanced antivirus engine settings.","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"71d5a707d5da8f24":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanconnect","displayName":"Ability to Enable/Disable a LAN connection (User)","description":"Determines whether users can enable/disable LAN connections.\r\n\r\nIf you enable this setting, the Enable and Disable options for LAN connections are available to users (including nonadministrators). Users can enable/disable a LAN connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), double-clicking the icon has no effect, and the Enable and Disable menu items are disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can enable/disable LAN connections.\r\n\r\nNote: Administrators can still enable/disable LAN connections from Device Manager when this setting is disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-lanconnect"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"716246fe06778ff6":{"id":"user_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first","displayName":"Run Windows PowerShell scripts first at user logon, logoff (User)","description":"This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during user logon and logoff. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. \r\n \r\nIf you enable this policy setting, within each applicable Group Policy Object (GPO), PowerShell scripts are run before non-PowerShell scripts during user logon and logoff. \r\n\r\nFor example, assume the following scenario: \r\n\r\nThere are three GPOs (GPO A, GPO B, and GPO C). This policy setting is enabled in GPO A. \r\n\r\nGPO B and GPO C include the following user logon scripts:\r\n\r\nGPO B: B.cmd, B.ps1\r\nGPO C: C.cmd, C.ps1\r\n\r\nAssume also that there are two users, Qin Hong and Tamara Johnston. \r\nFor Qin, GPOs A, B, and C are applied. Therefore, the scripts for GPOs B and C run in the following order for Qin:\r\n\r\nWithin GPO B: B.ps1, B.cmd\r\nWithin GPO C: C.ps1, C.cmd\r\n \r\nFor Tamara, GPOs B and C are applied, but not GPO A. Therefore, the scripts for GPOs B and C run in the following order for Tamara:\r\n\r\nWithin GPO B: B.cmd, B.ps1\r\nWithin GPO C: C.cmd, C.ps1\r\n\r\nNote: This policy setting determines the order in which user logon and logoff scripts are run within all applicable GPOs. You can override this policy setting for specific script types within a specific GPO by configuring the following policy settings for the GPO:\r\n \r\nUser Configuration\\Policies\\Windows Settings\\Scripts (Logon/Logoff)\\Logon\r\nUser Configuration\\Policies\\Windows Settings\\Scripts (Logon/Logoff)\\Logoff\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the setting set in User Configuration.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-user-ps-scripts-first"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first_1","displayName":"Enabled","description":null,"helpText":null}]},"71a5212bed00b9cb":{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_startpinappswheninstalled_name","displayName":"Add AppIDs to the list: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"71d8cba58645d5c5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions. Default.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block malicious downloads, uncommon or unwanted downloads and dangerous file types.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_4","displayName":"Block malicious downloads. Recommended.","description":null,"helpText":null}]},"711bca76974985bb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed","displayName":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context (User)","description":"\r\nSpecifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context. Google Chrome will require cross-origin isolation when using SharedArrayBuffers from Google Chrome 91 onward (2021-05-25) for Web Compatibility reasons. Additional details can be found on: https://developer.chrome.com/blog/enabling-shared-array-buffer/.\r\n\r\nWhen set to Enabled, sites can use SharedArrayBuffer with no restrictions.\r\n\r\nWhen set to Disabled or not set, sites can only use SharedArrayBuffers when cross-origin isolated.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"718baa62fd413d6d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_fileordirectorypickerwithoutgestureallowedfororiginsdesc","displayName":"Allow file or directory picker APIs to be called without prior user gesture (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"71c94b62494cd284":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed","displayName":"Allow WebRTC text logs collection from Google Services (User)","description":"Setting the policy to enabled means Google Chrome can collect WebRTC text logs from Google services such as Google Meet and upload them to Google. These logs have diagnostic information for debugging issues with audio or video meetings in Google Chrome, such as textual metadata describing incoming and outgoing WebRTC streams, WebRTC specific log entries and additional system information. These logs have no audio or video content from the meeting.\r\nSetting the policy to disabled results in no uploading of such logs to Google. Logs would still accumulate locally on the user's device.\r\nLeaving the policy unset means Google Chrome defaults to being able to collect and upload these logs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"71cc6d54c5840123":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b","displayName":"Only allow approved domains to use ActiveX controls without prompt (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0","displayName":"Disable","description":null,"helpText":null}]},"71affd79959443c7":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409","displayName":"Turn on Cross-Site Scripting (XSS) Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_3","displayName":"Disable","description":null,"helpText":null}]},"716217c25af09b49":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains (User)","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzonenavigatewindowsandframes"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"7109385d450686a6":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed","displayName":"Allow remote debugging (User)","description":"Controls whether users may use remote debugging.\r\n\r\nIf you enable or don't configure this policy, users may use remote debugging by specifying --remote-debug-port and --remote-debugging-pipe command line switches.\r\n\r\nIf you disable this policy, users are not allowed to use remote debugging.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"7118795cc242e74f":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled","displayName":"Enhance images enabled (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 121.\r\n\r\nThe enhance images feature is deprecated and starting in 122 this policy will be removed. Set whether Microsoft Edge can automatically enhance images to show you sharper images with better color, lighting, and contrast.\r\n\r\nIf you enable this policy or don't configure the policy, Microsoft Edge will automatically enhance images on specific web applications.\r\n\r\nIf you disable this policy, Microsoft Edge will not enhance images.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"71f8f71eaaa47705":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblockedurls","displayName":"Web pages blocked by Writing Assistance admin policy (User)","description":"This policy setting allows administrators to specify a list of web page URL patterns where Writing Assistance will be blocked.\nIf you enable this policy setting, enter one URL pattern per line (e.g., example.com). Writing Assistance will be disabled on pages matching those patterns.\nIf you disable or do not configure this policy setting, Writing Assistance will not be blocked by this policy on any web page.\n ","helpText":"","infoUrls":[],"categoryId":"05a6f86f-dab7-4888-97a1-db3457f00974","categoryName":"Writing Assistance","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblockedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblockedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"713ff9159f089cd6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastserviceserverinfo0","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"71fc0557dec270b5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastserviceservercapabilities2","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"716545b8b58804a0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_dlp_l_policytipsenabled","displayName":"Enable DLP on application boot (User)","description":"This policy setting determines whether DLP executes on application boot.\r\n\r\nIf you enable this policy setting, DLP runs on application boot.\r\n\r\nIf you disable or do not configure this policy setting, DLP does not run on application boot.","helpText":"","infoUrls":[],"categoryId":"b94cbc54-e565-44f2-a27a-a63b2514d8bf","categoryName":"DLP","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_dlp_l_policytipsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_dlp_l_policytipsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"71e2919e7a61533f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuipublisher","displayName":"Disallow in Publisher (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuipublisher_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuipublisher_1","displayName":"True","description":null,"helpText":null}]},"71c646878b5239ad":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samilulesweden","displayName":"Sami, Lule (Sweden) (User)","description":"Enables the editing language \"Sami, Lule (Sweden)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samilulesweden_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samilulesweden_1","displayName":"Enabled","description":null,"helpText":null}]},"71f6e65ae5436ec9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicmontenegro","displayName":"Serbian (Cyrillic, Montenegro) (User)","description":"Enables the editing language \"Serbian (Cyrillic, Montenegro)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicmontenegro_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicmontenegro_1","displayName":"Enabled","description":null,"helpText":null}]},"71ce67ebfe77682a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_slovak","displayName":"Slovak (User)","description":"Enables the editing language Slovak","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_slovak_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_slovak_1","displayName":"Enabled","description":null,"helpText":null}]},"716ca553b9808782":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_thai","displayName":"Thai (User)","description":"Enables the editing language Thai","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_thai_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_thai_1","displayName":"Enabled","description":null,"helpText":null}]},"71a104a61021fd6a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofreceipientsinanoutlookitem","displayName":"Maximum number of recipients in an Outlook item to scan to determine the user's colleagues for recommendation (User)","description":"The maximum number of recipients in an Outlook item to scan to determine the colleagues the user has. The larger the number, the more accurate the recommendation. The smaller the number, the faster the recommendations are generated.","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofreceipientsinanoutlookitem_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofreceipientsinanoutlookitem_1","displayName":"Enabled","description":null,"helpText":null}]},"71412296d9ba1ff4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_correctaccidentaluseofcapslockkey","displayName":"Correct accidental use of cAPS LOCK key (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"8084033c-156a-4d1b-ab0b-159541810459","categoryName":"Tools | AutoCorrect Options... (Excel, PowerPoint and Access)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_correctaccidentaluseofcapslockkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_correctaccidentaluseofcapslockkey_1","displayName":"Enabled","description":null,"helpText":null}]},"71ed720545c91e68":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec","displayName":"Choose the Windows Media Video 8 codec: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for color pocket pcs (150 kbps)","displayName":"Color Pocket PCs (150 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for dial-up modems or single-channel isdn (28.8 to 56 kbps)","displayName":"Dial-up Modems or Single-channel ISDN (28.8 to 56 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for lan, cable modem, or xdsl (100 to 768 kbps)","displayName":"LAN, Cable Modem, or xDSL (100 to 768 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for dial-up modems or lan (28.8 to 100 kbps)","displayName":"Dial-up Modems or LAN (28.8 to 100 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for dial-up modems (28.8 kbps)","displayName":"Dial-up Modems (28.8 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for dial-up modems (56 kbps)","displayName":"Dial-up Modems (56 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for local area network (100 kbps)","displayName":"Local Area Network (100 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for local area network (256 kbps)","displayName":"Local Area Network (256 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for local area network (384 kbps)","displayName":"Local Area Network (384 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for broadband (ntsc, 700 kbps)","displayName":"Broadband (NTSC, 700 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for broadband (ntsc, 1400 kbps)","displayName":"Broadband (NTSC, 1400 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for broadband (pal, 384 kbps)","displayName":"Broadband (PAL, 384 Kbps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_l_choosethewindowsmediavideo8codec_windows media video 8 for broadband (pal, 700 kbps)","displayName":"Broadband (PAL, 700 Kbps)","description":null,"helpText":null}]},"71050771fc14b612":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_specifyembeddedfilesizelimit","displayName":"Embedded File Size Limit (User)","description":"This policy setting enables you to specify the maximum embedded file size that users can insert directly into a OneNote notebook on a SharePoint server.\r\n \r\nIf you enable this policy setting, you can increase or decrease the default maximum file size of 50 MB. \r\n\r\nIf you increase this value, users can insert larger files directly into the notebook, but this may reduce server performance. \r\n\r\nIf you decrease this value, users can only insert smaller files directly into the notebook, which may improve server performance if OneNote sync is generating a lot of traffic.\r\n\r\nIf you disable or do not configure this policy setting, users cannot insert a file larger than 50MB inserted into a OneNote notebook. Instead, the file is uploaded to a SharePoint folder and inserted as a hyperlink into the notebook.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_specifyembeddedfilesizelimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_specifyembeddedfilesizelimit_1","displayName":"Enabled","description":null,"helpText":null}]},"717e152656938eeb":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_createallnewpageswithrulelines","displayName":"Create all new pages with rule lines (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"84de2eed-843c-401b-a3fd-e21be88f2365","categoryName":"Pen","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_createallnewpageswithrulelines_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_createallnewpageswithrulelines_1","displayName":"Enabled","description":null,"helpText":null}]},"71be28759c82bbb4":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepinversionhistory_l_daysbacktokeepinversionhistoryspinid","displayName":"Days back to keep versions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":null},"713563885196327a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_euroencodingforoutgoingmessages_l_whenpreferredencodingdoesnotsupporteuro2","displayName":"Auto-select should: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_euroencodingforoutgoingmessages_l_whenpreferredencodingdoesnotsupporteuro2_0","displayName":"Send messages as UTF 8","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_euroencodingforoutgoingmessages_l_whenpreferredencodingdoesnotsupporteuro2_1","displayName":"ignore euro","description":null,"helpText":null}]},"711e0488183784a9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_disablemailtips","displayName":"Disable Mail Tips (User)","description":"This policy setting determines whether users can view Mail Tips.\r\n\t \r\nIf you enable this policy setting, Mail Tips do not appear in Outlook.\r\n\t\t\t\t\t\r\nIf you disable or do not configure this policy, Mail Tips appear in Outlook.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_disablemailtips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_disablemailtips_1","displayName":"Enabled","description":null,"helpText":null}]},"71eb1ceb4d4cf406":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_automaticallycleanupplaintextmessages","displayName":"Automatically clean up plain text messages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_automaticallycleanupplaintextmessages_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_automaticallycleanupplaintextmessages_1","displayName":"True","description":null,"helpText":null}]},"71b9144f65e697f3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage","displayName":"When sending a message (User)","description":"Sets the values in the corresponding UI options.","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_1","displayName":"Enabled","description":null,"helpText":null}]},"716d9009d4b56472":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messagewhenoutlookcannotfindthedigitalidtodecodeamessage","displayName":"Message when Outlook cannot find the digital ID to decode a message (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messagewhenoutlookcannotfindthedigitalidtodecodeamessage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messagewhenoutlookcannotfindthedigitalidtodecodeamessage_1","displayName":"Enabled","description":null,"helpText":null}]},"717bcbe877a8a0f5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_attachmentsecuretemporaryfolder","displayName":"Attachment Secure Temporary Folder (User)","description":"This policy setting allows you to specify a folder path for the Secure Temporary Files folder rather than using the one that is randomly generated by Outlook. \r\n\r\nIf you enable this policy setting, you can specify a folder path for the Security Temporary Files folder rather than using the one that is randomly generated by Outlook. \r\n\r\nIf you disable or do not configure this policy setting, Outlook will assign the Secure Temporary Files folder a different random name for each user. \r\n\r\nImportant - If you must use a specific folder for Outlook attachments, Microsoft recommends that you use a local directory (for best performance), that you place the folder under the Temporary Internet Files folder (to benefit from the enhanced security on that folder), and that the folder name is unique and difficult to guess.","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_attachmentsecuretemporaryfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_attachmentsecuretemporaryfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"71d745d1f9df2bd6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjunderlinelinks","displayName":"Underline hyperlinks (User)","description":"Shows hyperlinks with underlined text.\r\n\r\nIf you enable this setting, hyperlinks are underlined.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3db7e884-6077-4b96-ace3-005a6b49ecc0","categoryName":"Hyperlink appearance in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjunderlinelinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjunderlinelinks_1","displayName":"Enabled","description":null,"helpText":null}]},"713f0afe13294857":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13_l_allowsubfolders59","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13_l_allowsubfolders59_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13_l_allowsubfolders59_1","displayName":"True","description":null,"helpText":null}]},"716e7158fccfce3f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"71049b015889102b":{"id":"vendor_msft_wirelessnetworkpreference_prefercellularoverwifi","displayName":"Prefer Cellular Over Wi Fi (Windows Insiders only)","description":"It determines the order of preference between Wi-Fi and cellular networks. When the value is set to “False”, Wi-Fi is preferred over cellular. When the value is set to “True”, cellular is preferred over Wi-Fi. \r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":[{"id":"vendor_msft_wirelessnetworkpreference_prefercellularoverwifi_false","displayName":"Prefer Wi-Fi over Cellular.","description":"Prefer Wi-Fi over Cellular.","helpText":null},{"id":"vendor_msft_wirelessnetworkpreference_prefercellularoverwifi_true","displayName":"Prefer Cellular over Wi-Fi.","description":"Prefer Cellular over Wi-Fi.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/72.json b/public/intune-definitions/72.json new file mode 100644 index 000000000000..31d6941a09b0 --- /dev/null +++ b/public/intune-definitions/72.json @@ -0,0 +1 @@ +{"7214ac6a2f4a692d":{"id":"com.apple.app.lock_app_options_disablesleepwakebutton","displayName":"Disable Sleep Wake Button","description":"If true, disables the sleep/wake button.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_disablesleepwakebutton_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_disablesleepwakebutton_true","displayName":"True","description":null,"helpText":null}]},"726764c1123f0795":{"id":"com.apple.assetcache.managed_listenrangesonly","displayName":"Listen Ranges Only","description":"If true, the content cache provides content to the clients in the Listen Ranges.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_listenrangesonly_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_listenrangesonly_true","displayName":"True","description":null,"helpText":null}]},"72c3d6adaa234a6a":{"id":"com.apple.directoryservice.managed_addefaultusershell","displayName":"AD Default User Shell","description":"The default user shell. ","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"7209daab5d015153":{"id":"com.apple.dock_static-apps","displayName":"Static Apps","description":"Dock items located on the Applications side of the Dock and cannot be removed from that location.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"723f58e2d2e049d0":{"id":"com.apple.extensiblesso_extensiondata_performkerberosonly_kerberos","displayName":"Perform Kerberos Only","description":"If true, the Kerberos Extension handles Kerberos requests only. It doesn’t check for password expiration, show the password expiration in the menu, check for external password changes, perform password sync, or retrieve the home directory. Available in macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_performkerberosonly_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_performkerberosonly_kerberos_true","displayName":"True","description":null,"helpText":null}]},"72d2afb895bb9ae1":{"id":"com.apple.extensiblesso_extensiondata_pwreqhistory_kerberos","displayName":"Password Req History","description":"The number of prior passwords that cannot be re-used on this domain. Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"72e60a6f0ff3da88":{"id":"com.apple.familycontrols.contentfilter_filterwhitelist","displayName":"Filter Allowlist","description":"The array of URLs that defines an allow list. When Restrict Web and Use Content Filter are enabled, only URLs in the allow list are available to the user.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":null},"723016a32e5ce51d":{"id":"com.apple.managedclient.preferences_addressbarmicrosoftsearchinbingproviderenabled","displayName":"Enable Microsoft Search in Bing suggestions in the address bar (Deprecated)","description":"Enables the display of relevant Microsoft Search in Bing suggestions in the address bar's suggestion list when the user types a search string in the address bar. If you enable or don't configure this policy, users can see internal results powered by Microsoft Search in Bing in the Microsoft Edge address bar suggestion list. To see the Microsoft Search in Bing results, the user must be signed into Microsoft Edge with their Azure AD account for that organization.\nIf you disable this policy, users can't see internal results in the Microsoft Edge address bar suggestion list.\nIf you have enabled the set of policies which forces a default search provider (\"DefaultSearchProviderEnabled\", \"DefaultSearchProviderName\" and \"DefaultSearchProviderSearchURL\"), and the search provider specified is not Bing, then this policy is not applicable and there will be no Microsoft Search in Bing suggestions in the address bar's suggestion list.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#addressbarmicrosoftsearchinbingproviderenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_addressbarmicrosoftsearchinbingproviderenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_addressbarmicrosoftsearchinbingproviderenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"722b3769a104fb18":{"id":"com.apple.managedclient.preferences_allhttpauthschemesallowedfororigins","displayName":"List of origins that allow all HTTP authentication","description":"Set this policy to specify which origins allow all the HTTP authentication schemes Microsoft Edge supports regardless of the \"AuthSchemes\" policy.\n\nFormat the origin pattern according to this format (https://support.google.com/chrome/a?p=url_blocklist_filter_format). Up to 1,000 exceptions can be defined in \"AllHttpAuthSchemesAllowedForOrigins\".\nWildcards are allowed for the whole origin or parts of the origin. Parts include the scheme, host, or port.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allhttpauthschemesallowedfororigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"7212decb15747b5c":{"id":"com.apple.managedclient.preferences_allowwebauthnwithbrokentlscerts","displayName":"Allow Web Authentication requests on sites with broken TLS certificates.","description":"If you enable this policy, Microsoft Edge will allow Web Authentication requests on websites that have TLS certificates with errors (i.e. websites considered not secure).\n\nIf you disable or don't configure this policy, the default behavior of blocking such requests will apply.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowwebauthnwithbrokentlscerts"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_allowwebauthnwithbrokentlscerts_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowwebauthnwithbrokentlscerts_true","displayName":"Allowed","description":null,"helpText":null}]},"72f6711a5d1d9d10":{"id":"com.apple.managedclient.preferences_disablevisualbasicmacscript","displayName":"Prevent Visual Basic macros from using legacy MacScript","description":"Recommended: true.","helpText":null,"infoUrls":["https://aka.ms/macvbpref"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_disablevisualbasicmacscript_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablevisualbasicmacscript_true","displayName":"True","description":null,"helpText":null}]},"7271f5e027d961cf":{"id":"com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_pinned","displayName":"Pinned","description":"0 - Not Pinned; 1 - Pinned.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_pinned_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_pinned_true","displayName":"Enabled","description":null,"helpText":null}]},"72eae98e9c399d1c":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_recoverymessage_input","displayName":"Custom recovery message option:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":null},"723c8e953ea9816e":{"id":"device_vendor_msft_policy_config_admx_filesys_disableencryption","displayName":"Do not allow encryption on all NTFS volumes","description":"Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filesys#admx-filesys-disableencryption"],"categoryId":"bb54b081-5004-4f05-a46c-f5b948f57b82","categoryName":"NTFS","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_disableencryption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_disableencryption_1","displayName":"Enabled","description":null,"helpText":null}]},"72d163a227f899fa":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpsiteprefixes","displayName":"Specify corporate site prefix list","description":"This policy setting enables you to specify the list of IPv6 corporate site prefixes to monitor for corporate connectivity. Reachability of addresses with any of these prefixes indicates corporate connectivity.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ncsi#admx-ncsi-ncsi-corpsiteprefixes"],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpsiteprefixes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpsiteprefixes_1","displayName":"Enabled","description":null,"helpText":null}]},"723014bf4cdd1d4f":{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_2","displayName":"Custom Classes: Deny read access","description":"This policy setting denies read access to custom removable storage classes.\r\n\r\nIf you enable this policy setting, read access is denied to these removable storage classes.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to these removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-customclasses-denyread-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"728543336ec6d4db":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_turn_off_udp","displayName":"Turn Off UDP On Client","description":"This policy setting specifies whether the UDP protocol will be used to access servers via Remote Desktop Protocol. \r\n\r\nIf you enable this policy setting, Remote Desktop Protocol traffic will only use the TCP protocol.\r\n\r\nIf you disable or do not configure this policy setting, Remote Desktop Protocol traffic will attempt to use both TCP and UDP protocols.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-turn-off-udp"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_turn_off_udp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_turn_off_udp_1","displayName":"Enabled","description":null,"helpText":null}]},"72fbba2af9a80ae1":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_expose_address","displayName":"Use IP Address Redirection","description":"This policy setting allows you to specify the redirection method to use when a client device reconnects to an existing Remote Desktop Services session in a load-balanced RD Session Host server farm. This setting applies to an RD Session Host server that is configured to use RD Connection Broker and not to the RD Connection Broker server.\r\n\r\nIf you enable this policy setting, a Remote Desktop Services client queries the RD Connection Broker server and is redirected to their existing session by using the IP address of the RD Session Host server where their session exists. To use this redirection method, client computers must be able to connect directly by IP address to RD Session Host servers in the farm.\r\n\r\nIf you disable this policy setting, the IP address of the RD Session Host server is not sent to the client. Instead, the IP address is embedded in a token. When a client reconnects to the load balancer, the routing token is used to redirect the client to their existing session on the correct RD Session Host server in the farm. Only disable this setting when your network load-balancing solution supports the use of RD Connection Broker routing tokens and you do not want clients to directly connect by IP address to RD Session Host servers in the load-balanced farm.\r\n\r\nIf you do not configure this policy setting, the Use IP address redirection policy setting is not enforced at the group Group policy Policy level and the default will be used. This setting is enabled by default.\r\n\r\nNotes:\r\n\r\n 1. For Windows Server 2008, this policy setting is supported on at least Windows Server 2008 Standard.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sd-expose-address"],"categoryId":"0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","categoryName":"RD Connection Broker","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_expose_address_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_expose_address_1","displayName":"Enabled","description":null,"helpText":null}]},"723e0e1e36495263":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup","displayName":"Lync 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Lync 2013.\r\nMicrosoft Lync 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Lync 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Lync 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013lyncbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"720051f686c83323":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_outlookforwindows","displayName":"Outlook for Windows (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_outlookforwindows_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_outlookforwindows_1","displayName":"True","description":null,"helpText":null}]},"727707c1b78a9ca1":{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritystatechange","displayName":"System Audit Security State Change","description":"This policy setting allows you to audit events generated by changes in the security state of the computer such as the following events: Startup and shutdown of the computer. Change of system time. Recovering the system from CrashOnAuditFail, which is logged after a system restarts when the security event log is full and the CrashOnAuditFail registry entry is configured.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#system_auditsecuritystatechange"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritystatechange_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritystatechange_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritystatechange_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritystatechange_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"721bca16a1d788d8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC","description":"If the policy is set, the UDP port range used by WebRTC is restricted to the specified port interval (endpoints included).\r\n\r\nIf the policy is not set, or if it is set to the empty string or an invalid port range, WebRTC is allowed to use any available local UDP port.\r\n\r\nExample value: 10000-11999","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},"72520d40df218038":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_filesystemwriteaskforurlsdesc","displayName":"Allow write access to files and directories on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"7203c11d530379ce":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters","displayName":"Additional command line parameters for Google Chrome","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_1","displayName":"Enabled","description":null,"helpText":null}]},"720322f37f3db2f5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit","displayName":"Clear site data on browser shutdown (deprecated)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"72b212b1c9c31827":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled","displayName":"Enable PAC URL stripping (for https://)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"72c172295bbeb1b5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_localfontsallowedforurlsdesc","displayName":"Allow Local Fonts permission on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"7278b5f7953d7ac0":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxcachesize","displayName":"DO Max Cache Size","description":"Specifies the maximum cache size that Delivery Optimization can utilize, as a percentage of the available drive space.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxcachesize"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"7285d9f6e8a890fe":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile","displayName":"Prevent Login With Temp Profile","description":"Prevent user login when a user receives a temporary Windows profile.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\PreventLoginWithTempProfile\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"72e4788d4926c197":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_profilesccdlocations","displayName":"CCD Locations (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":null},"725edc5e6da4db81":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103","displayName":"Status bar updates via script","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_3","displayName":"Disable","description":null,"helpText":null}]},"7263e0a3ed1db0b9":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":null},"72816a771d1bad8f":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"72ef67c4134c5489":{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled","displayName":"Super Drag Drop Enabled","description":"This policy lets you configure the Super Drag Drop feature in Microsoft Edge.\r\n\r\nWith this feature, users can drag a link or text from a webpage and drop it onto the same page. They can then either open the URL in a new tab or search the text using the default search engine.\r\n\r\nIf you enable or don't configure this policy, you can use the Super Drag Drop feature on Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Super Drag Drop feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"728294f869ba8026":{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_6","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},"720834101b7984b5":{"id":"device_vendor_msft_policy_config_office16v6~policy~l_microsoftofficemachine~l_licensingsettings_l_viewermode","displayName":"Use Viewer Mode","description":"This policy setting controls whether Office, Project, and Visio open in Viewer mode, which means the user can only view and print the contents of the file. Viewer mode, which is turned off by default, is intended for users who aren’t licensed for Office, Project, or Visio.\r\n\r\nIf you enable this policy setting, Office, Project, and Visio will open in Viewer mode. Also, the Activate Product button under File > Account will be hidden. Note: If you enable this policy setting, you can’t use shared computer activation.\r\n\r\nIf you disable or don’t configure this policy setting, an unlicensed user will be prompted to activate Office, Project, or Visio each time they open the app. If the user doesn’t activate, the user can only view and print the contents of the file.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.","helpText":"","infoUrls":[],"categoryId":"2e3f0407-6387-41b4-b6c2-ada4354be759","categoryName":"Licensing Settings","options":[{"id":"device_vendor_msft_policy_config_office16v6~policy~l_microsoftofficemachine~l_licensingsettings_l_viewermode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v6~policy~l_microsoftofficemachine~l_licensingsettings_l_viewermode_1","displayName":"Enabled","description":null,"helpText":null}]},"7267b6ea338e6d65":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_filesondemandenabled","displayName":"Use OneDrive Files On-Demand","description":"This setting lets you control whether OneDrive Files On-Demand is enabled for your organization.\r\n\r\nIf you enable this setting, OneDrive Files On-Demand will be turned on by default.\r\n\r\nIf you disable this setting, OneDrive Files On-Demand will be explicitly disabled and users can't turn it on.\r\n\r\nIf you do not configure this setting, users can turn OneDrive Files On-Demand on or off.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_filesondemandenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_filesondemandenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"72889dc519793f3f":{"id":"device_vendor_msft_policy_config_settings_allowworkplace","displayName":"Allow Workplace","description":"Allows user to change workplace settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowworkplace"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowworkplace_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowworkplace_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"72e03d6ff3749888":{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch","displayName":"Update Channel","description":"This policy setting controls which update channel Office gets updates from.\r\n\r\nIf you enable this policy setting, Office gets updates from the update channel that you select.\r\n\r\nIf you disable or don't configure this policy setting, Office gets updates from its default channel, or by the update channel specified by the Office Deployment Tool. The default channel is determined by which Office product that is installed.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_1","displayName":"Enabled","description":null,"helpText":null}]},"728ce04a097cbc85":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_wermaxqueuesize","displayName":"Maximum size of the queue (MB): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"72d4ec5127ba46e5":{"id":"user_vendor_msft_policy_config_admx_startmenu_nofavoritesmenu","displayName":"Remove Favorites menu from Start Menu (User)","description":"Prevents users from adding the Favorites menu to the Start menu or classic Start menu.\r\n\r\nIf you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.\r\n\r\nIf you disable or do not configure this setting, the Display Favorite item is available.\r\n\r\nNote:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize. If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.\r\n\r\nNote:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.\r\n\r\nNote:This setting only affects the Start menu. The Favorites item still appears in File Explorer and in Internet Explorer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nofavoritesmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nofavoritesmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nofavoritesmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"72a9771ab209b9e9":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown_lockskin","displayName":"Skin (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"7f461268-0fb6-4247-b6db-52515d42a20e","categoryName":"User Interface","options":null},"72f2c6e61c801a49":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_serialallowusbdevicesforurls","displayName":"Automatically grant permission to sites to connect to USB serial devices. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"722dcbd792235f8c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURL specifies the URL of the search engine used for image search. (If DefaultSearchProviderImageURLPostParams is set, then image search requests use the POST method instead.)\r\n\r\nLeaving DefaultSearchProviderImageURL unset means no image search is used.\r\n\r\nExample value: https://search.my.company/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_1","displayName":"Enabled","description":null,"helpText":null}]},"729d7f25d9486f0b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport","displayName":"Include non-standard port in Kerberos SPN (User)","description":"Setting the policy to Enabled and entering a nonstandard port (in other words, a port other than 80 or 443) includes it in the generated Kerberos SPN.\r\n\r\nSetting the policy to Disabled or leaving it unset means the generated Kerberos SPN won't include a port.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport_1","displayName":"Enabled","description":null,"helpText":null}]},"721f725dfb5193e0":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled","displayName":"Enable Live Translate (User)","description":"Enable translation of live captions. Captions will be sent to Google for translation.\r\n\r\nIf this policy is set to Enabled, Live Translate will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Translate will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Translate is disabled initially but can be enabled by the user anytime.\r\n\r\nIn LiveCaptionEnabled is set to Disabled, Live Translate will be disabled regardless of this policy setting.","helpText":"","infoUrls":[],"categoryId":"d9432f48-3072-4171-9031-4ebead394151","categoryName":"Accessibility settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7223861f6fee5d21":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled","displayName":"Enable keyboard focusable scrollers (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"729222b46520f09b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems","displayName":"Disable commands (User)","description":"This policy setting allows you to disable specific command bar buttons and menu items in the specified applications.\r\n \r\n If you enable this policy setting you can disable specific command bar buttons and menu items in the user interface for the selected application. The predefined list of command bar buttons and menu items you can disable becomes available to you when you enable this policy setting.\r\n \r\n If you disable or do not configure this policy setting, the predefined list of command bar buttons and menu items are enabled for the application.","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},"72587873a8e1e61b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_extenddatarangeformatsandformulas","displayName":"Extend data range formats and formulas (User)","description":"This policy setting sets the \"Extend data range formats and formulas\" option found under File tab | Options | Advanced | Editing Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will allow the user to automatically format new items added to the end of a list to match the format of the rest of the list. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will not automatically format new items added to the end of a list.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_extenddatarangeformatsandformulas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_extenddatarangeformatsandformulas_1","displayName":"Enabled","description":null,"helpText":null}]},"72f6858ad102f294":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders44","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders44_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders44_1","displayName":"True","description":null,"helpText":null}]},"7232f4d67607430a":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"729fe22dfd654637":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1","displayName":"Trusted Domain List (User)","description":"\r\nWhen Lync connects to an unknown domain, it needs explicit user consent. A dialog is shown asking the user for confirmation on whether it should continue.\r\n\r\nThis policy gives administrators the ability to provide trusted domain names. If a domain name is added to this list, Lync will trust that domain and will not show the dialog requesting permission. Multiple domain addresses as comma separated values can be provided.\r\n\r\nBy setting this policy, Lync will not explicitly trust the default domains specified below. It will exclusively trust the domain specified by the policy.\r\n\r\nSupported values:\r\n Not Configured (Default)/Disabled: By default the following domains will be trusted: \"lync.com, outlook.com, lync.glbdns.microsoft.com, and microsoftonline.com.\"\r\n Enabled: The list of domains to be trusted. For example: \"contoso.com, contoso.co.in\"\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1_1","displayName":"Enabled","description":null,"helpText":null}]},"72073feabca9411b":{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_6","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},"72c1cf32751ef4a4":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled","displayName":"Enable security warnings for command-line flags (User)","description":"If disabled, this policy prevents security warnings from appearing when Microsoft Edge is launched with potentially dangerous command-line flags.\r\n\r\nIf enabled or unset, security warnings are displayed when these command-line flags are used to launch Microsoft Edge.\r\n\r\nFor example, the --disable-gpu-sandbox flag generates this warning: You're using an unsupported command-line flag: --disable-gpu-sandbox. This poses stability and security risks.\r\n\r\nOn Windows, this policy is only available on instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro (or Enterprise) instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7215c293a4f6a02e":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended","displayName":"Specifies the search-by-image feature for the default search provider (User)","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\r\n\r\nThis policy is optional. If you don't configure it, image search isn't available.\r\n\r\nSpecify Bing's Image Search URL as:\r\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\r\n\r\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\r\n\r\nSee 'DefaultSearchProviderImageURLPostParams' (Parameters for an image URL that uses POST) policy to finish configuring image search.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: https://search.contoso.com/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"72bd712e7467a9a4":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled","displayName":"Allow feature recommendations and browser assistance notifications from Microsoft Edge (User)","description":"This setting controls the in-browser assistance notifications which are intended to help users get the most out of Microsoft Edge. This is done by recommending features and by helping them use browser features. These notifications take the form of dialog boxes, flyouts, coach marks and banners in the browser. An example of an assistance notification would be when a user has many tabs opened in the browser. In this instance Microsoft Edge may prompt the user to try out the vertical tabs feature which is designed to give better browser tab management.\r\n\r\nDisabling this policy will stop this message from appearing again even if the user has too many tabs open.\r\n Any features that have been disabled by a management policy are not suggested to users.\r\nIf you enable or don't configure this setting, users will receive recommendations or notifications from Microsoft Edge.\r\n If you disable this setting, users will not receive any recommendations or notifications from Microsoft Edge","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"72857a8020e4b661":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings_l_disableproofingtoolsadvertisement","displayName":"Notify users if they do not have proofing tools for a language they use (User)","description":"This policy setting allows you to turn on or turn off notifications that are displayed to users when they use a language in their document but do not have proofing tools installed for that language.\r\n\r\nIf you enable this policy setting, users see a message bar when they use a language in their document but do not have proofing tools installed for that language. Users cannot disable this notification because the \"Never show again\" button is not shown, and the checkbox to disable proofing notifications is removed from the Options dialog box.\r\n\r\nIf you disable this policy setting, users do not see this message bar.\r\n\r\nIf you do not configure this policy setting, users see this message bar. They can disable the notification by clicking the \"Never show again\" button or by clearing a check box in the Options dialog box.","helpText":"","infoUrls":[],"categoryId":"eb947c30-3c43-4d34-a566-a842a1a142f3","categoryName":"Language Preferences","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings_l_disableproofingtoolsadvertisement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings_l_disableproofingtoolsadvertisement_1","displayName":"Enabled","description":null,"helpText":null}]},"72707f0667550603":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_khmer","displayName":"Khmer (User)","description":"Enables the editing language Khmer","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_khmer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_khmer_1","displayName":"Enabled","description":null,"helpText":null}]},"72bd53ee2db29041":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_printticketsafemode","displayName":"Print ticket safe mode (User)","description":"This policy setting allows you to determine whether Word, PowerPoint, or Excel turns off print ticket features the next time it attempts to use print ticket features after the application fails. Print ticket features include duplexing and stapling.\r\n\r\nIf you enable or do not configure this policy setting, print ticket features are turned off if Word, PowerPoint, and Excel fail while attempting to use a printer's print ticket functionality. When the printer is next used, its print ticket features are turned off until the user requests to use them again.\r\n\r\nIf you disable this policy setting, Word, PowerPoint, or Excel does not turn off print ticket features due to a previous application failure. This might result in repeated instances of the printer not responding.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_printticketsafemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_printticketsafemode_1","displayName":"Enabled","description":null,"helpText":null}]},"72cc903ff67566f3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setminimumpasswordlength_l_setminimumpasswordlengthspinid","displayName":"Minimum password length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"725374289dec7dfe":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifytimestampservername_l_specifytimestampservernameid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":null},"725b9b1fd4a763fd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_l_showassociatedwebpage45","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_l_showassociatedwebpage45_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_l_showassociatedwebpage45_1","displayName":"True","description":null,"helpText":null}]},"72dbfd0f9cdeffe4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requestansmimereceiptforallsmimesignedmessages","displayName":"Request an S/MIME receipt for all S/MIME signed messages (User)","description":"This policy setting controls whether Outlook sends S/MIME receipt requests with S/MIME signed messages.\r\n\r\nIf you enable this policy setting, Outlook requests S/MIME receipts whenever it sends S/MIME signed messages and users cannot change this setting.\r\n\r\nIf you disable or do not configure this policy setting, Outlook does not send S/MIME receipt requests with signed messages, but users can still include receipt requests with individual messages. If you disable this policy setting, users cannot change this functionality, but if you do not configure this policy setting, users can enable the option in the \"E-mail Security\" section of the Trust Center or the \"Security Properties\" dialog for individual messages.\r\n\r\nImportant: When the \"Sign all e-mail messages\" policy setting is enabled, enabling this policy setting can place significant stress on the e-mail infrastructure. Consider your needs and capabilities before enabling both settings.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requestansmimereceiptforallsmimesignedmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requestansmimereceiptforallsmimesignedmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"727fb27ddf064afc":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles","displayName":"OpenDocument Presentation files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentpresentationfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"72757d98f9cdc207":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders23","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders23_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders23_1","displayName":"True","description":null,"helpText":null}]},"72836db5903f22fb":{"id":"user_vendor_msft_policy_config_ppt16v4~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_enablemoderncommentscreatenew","displayName":"Use modern comments in PowerPoint (User)","description":"\r\nThis policy setting controls whether modern comments are used in PowerPoint. For more information about modern comments and when to enable this setting, see https://go.microsoft.com/fwlink/p/?linkid=2116065.\r\n\r\nIf you enable this policy setting, when a user adds comments to a new file or a file without comments, the new comments that are added will be modern comments. If users have a version of PowerPoint that doesn’t support modern comments, a notification appears directing them to use PowerPoint for the web to view modern comments in files that have them.\r\n\r\nIf you disable this policy setting, users will continue to see the previous commenting experience for new files and existing files that do not have any modern comments. Users will still be able to read files that already have modern comments in them if they have a version of PowerPoint that supports modern comments.\r\n\r\nFor information about what happens when you don't configure this policy setting, see https://go.microsoft.com/fwlink/p/?linkid=2116065.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v4~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_enablemoderncommentscreatenew_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v4~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_enablemoderncommentscreatenew_1","displayName":"Enabled","description":null,"helpText":null}]},"7205fafe453ca075":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorecordnewmacro","displayName":"Developer tab | Code | Record Macro (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorecordnewmacro_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorecordnewmacro_1","displayName":"True","description":null,"helpText":null}]},"7212f0893df1a751":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_volumepreference","displayName":"Volume preference (User)","description":"This policy setting allows you to configure Microsoft Word to retain file path information when you work with files on a network server, either as a mapped drive (Z:\\Folder_Name\\File_Name) or as Universal Naming Convention (UNC) (\\\\Share_Name\\File_Name).\r\n\r\nIf you enable this policy setting, you may select one of these options:\r\n- Use Drive letter or UNC as entered\r\n- Convert Drive letter to UNC\r\n- Convert UNC to Drive letter\r\n\r\nIf you disable or do not configure this policy setting, the default option is \"Use Drive letter or UNC as entered.\"","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_volumepreference_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_volumepreference_1","displayName":"Enabled","description":null,"helpText":null}]},"720c7c9d99767e00":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_checktoenforcesettingonunchecktoenforcesettingoff18","displayName":"Check to enforce setting on; uncheck to enforce setting off (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_checktoenforcesettingonunchecktoenforcesettingoff18_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_checktoenforcesettingonunchecktoenforcesettingoff18_1","displayName":"True","description":null,"helpText":null}]},"721c764280de8a51":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth","displayName":"Style area pane width in Draft and Outline views (User)","description":"This policy setting allows you to set the width of the style area that shows the names of applied styles to the side of document text.\r\n\r\nIf you enable this policy setting, you may specify the width of the style area.\r\n\r\nIf you disable or do not configure this policy setting, the default width is used.\r\n","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_styleareawidth_1","displayName":"Enabled","description":null,"helpText":null}]},"722a2bb5d8336338":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles","displayName":"OpenDocument Text files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumenttextfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"724c3d4ea7f4b9de":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_protocol","displayName":"Protocol","description":"Select the protocol for this port rule. Transport layer protocols, TCP(6) and UDP(17), allow you to specify ports or port ranges. For custom protocols, enter a number between 0 and 255 representing the IP protocol. If not specified, the default is \"Any.\"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/73.json b/public/intune-definitions/73.json new file mode 100644 index 000000000000..a2353a333ddf --- /dev/null +++ b/public/intune-definitions/73.json @@ -0,0 +1 @@ +{"736f219a61804f3c":{"id":"ade_devicenametemplatechoices","displayName":"Apple device name template","description":"You can create a standard naming format to make it easier to name devices as they enroll in Intune. By default, Apple uses the device type (such as iPad or iPhone) and serial number to name ADE devices.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_devicenametemplatechoices_0","displayName":"No","description":null,"helpText":null},{"id":"ade_devicenametemplatechoices_1","displayName":"Yes","description":null,"helpText":null}]},"73c45af14fe44955":{"id":"ade_setupassistant_accessibility","displayName":"Accessibility","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_accessibility_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_accessibility_1","displayName":"Show","description":null,"helpText":null}]},"738ddee8675d64a4":{"id":"audioaccessory_temporarypairing_configuration_unpairingtime_hour","displayName":"Hour","description":"The local time hour (24-hour clock) when the device automatically unpairs temporarily paired audio accessories. Required when setting the `Policy` key to `Hour`.","helpText":null,"infoUrls":[],"categoryId":"a42e2248-d2dc-4476-a92d-d152fd67e04b","categoryName":"Audio Accessory","options":null},"73d7a327114bb18a":{"id":"com.android.devicerestrictionpolicy.bluetoothblockcontactsharing","displayName":"Block contact sharing via Bluetooth (work profile-level)","description":"If 'True', prevents sharing work profile contacts with paired Bluetooth devices, such as cars or mobile devices. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to share their contacts via Bluetooth. Available for corporate-owned work profile devices (at work profile level).","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.bluetoothblockcontactsharing_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.bluetoothblockcontactsharing_false","displayName":"False","description":"false","helpText":null}]},"7334df46a1eac1fc":{"id":"com.apple.applicationaccess_allowunpairedexternalboottorecovery","displayName":"Allow Unpaired External Boot To Recovery","description":"If true, allows devices to be booted into recovery by an unpaired device. Requires a supervised device. Available in iOS 14.5 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowunpairedexternalboottorecovery_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowunpairedexternalboottorecovery_true","displayName":"True","description":null,"helpText":null}]},"73ed19045cb4af80":{"id":"com.apple.dock_showindicators-immutable","displayName":"Show Indicators Immutable","description":"If true, locks \"Show indicators.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_showindicators-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_showindicators-immutable_true","displayName":"True","description":null,"helpText":null}]},"73fc0e833af4f9a4":{"id":"com.apple.extensiblesso_extensiondata_allowsmartcard_kerberos","displayName":"Allow Smart Card","description":"If set to true, the user to switch the user interface to SmartCard mode. (macOS only)","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_allowsmartcard_kerberos_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_allowsmartcard_kerberos_true","displayName":"Enabled","description":null,"helpText":null}]},"731aa65e21075584":{"id":"com.apple.managedclient.preferences_showhomebutton","displayName":"Show Home button on toolbar","description":"Shows the Home button on Microsoft Edge's toolbar.\n\nEnable this policy to always show the Home button. Disable it to never show the button.\n\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showhomebutton"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showhomebutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showhomebutton_true","displayName":"Enabled","description":null,"helpText":null}]},"73b8f06e2e703f88":{"id":"com.apple.managedclient.preferences_tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors.","description":"This policy controls a security feature in TLS 1.3 that protects connections against downgrade attacks. It is backwards-compatible and will not affect connections to compliant TLS 1.2 servers or proxies. However, older versions of some TLS-intercepting proxies have an implementation flaw which causes them to be incompatible.\n\nIf you set this policy to True, Microsoft Edge will enable these security protections for all connections.\n\nIf you set this policy to False or don’t set it, Microsoft Edge will disable these security protections for connections authenticated with locally-installed CA certificates. These protections are always enabled for connections authenticated with publicly-trusted CA certificates.\n\nThis policy may be used to test for any affected proxies and upgrade them. Affected proxies are expected to fail connections with an error code of ERR_TLS13_DOWNGRADE_DETECTED. A later version of Microsoft Edge will enable this option by default.\n\nAfter it is enabled by default, administrators who need more time to upgrade affected proxies may use this policy to temporarily disable this security feature. This policy will be removed after version 85.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#tls13hardeningforlocalanchorsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_tls13hardeningforlocalanchorsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_tls13hardeningforlocalanchorsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7331012214123596":{"id":"com.apple.webcontent-filter_filterdataproviderbundleidentifier","displayName":"Filter Data Provider Bundle Identifier","description":"The bundle identifier string of the filter data provider system extension. This string identifies the filter data provider when the filter starts running. This field is a requirement if Filter Sockets is true.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"731c8ea569f630c7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage","displayName":"Set the new tab page as the home page","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\n\nIf you enable this policy, the Home button is set to the new tab page as configured by the user or with the policy \"NewTabPageLocation\" and the URL set with the policy \"HomepageLocation\" is not taken into consideration.\n\nIf you disable this policy, the Home button is the set URL as configured by the user or as configured in the policy \"HomepageLocation\".\n\nIf you don't configure this policy, users can choose whether the set URL or the new tab page is their home page.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_true","displayName":"Enabled","description":null,"helpText":null}]},"73383c1e3dc12e28":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled","displayName":"Enable Windows to search local Microsoft Edge browsing data","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\n\nIf you enable this policy or don't configure it, Microsoft Edge publishes local browsing data to the Windows Indexer.\n\nIf you disable this policy, Microsoft Edge won't share data to the Windows Indexer.\n\nNote that if you disable this policy, Microsoft Edge removes the data shared with Windows on the device and stops sharing any new browsing data.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"730a63b4a7c4e80c":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordagedays","displayName":"Password Age (Days)","description":"","helpText":"","infoUrls":[],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":null},"735490afb0bde4d9":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_nobackground9","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_nobackground9_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_nobackground9_1","displayName":"True","description":null,"helpText":null}]},"7333bb8a5a08e576":{"id":"device_vendor_msft_policy_config_admx_logon_verbosestatus","displayName":"Display highly detailed status messages","description":"This policy setting directs the system to display highly detailed status messages.\r\n\r\nThis policy setting is designed for advanced users who require this information.\r\n\r\nIf you enable this policy setting, the system displays status messages that reflect each step in the process of starting, shutting down, logging on, or logging off the system.\r\n\r\nIf you disable or do not configure this policy setting, only the default status messages are displayed to the user during these processes.\r\n\r\nNote: This policy setting is ignored if the \"Remove Boot/Shutdown/Logon/Logoff status messages\" policy setting is enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-verbosestatus"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_logon_verbosestatus_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_verbosestatus_1","displayName":"Enabled","description":null,"helpText":null}]},"733fc7f6b03d9f06":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretrymaximumperiod","displayName":"Use maximum DC discovery retry interval setting for background callers","description":"This policy setting determines the maximum retry interval allowed when applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC.\r\n\r\nFor example, the retry intervals may be set at 10 minutes, then 20 minutes and then 40 minutes, but when the interval reaches the value set in this setting, that value becomes the retry interval for all subsequent retries until the value set in Final DC Discovery Retry Setting is reached.\r\n\r\nThe default value for this setting is 60 minutes (60*60). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0.\r\n\r\nIf the value for this setting is smaller than the value specified for the Initial DC Discovery Retry Setting, the Initial DC Discovery Retry Setting is used.\r\n\r\nWarning: If the value for this setting is too large, a client may take very long periods to try to find a DC.\r\n\r\nIf the value for this setting is too small and the DC is not available, the frequent retries may produce excessive network traffic.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-backgroundretrymaximumperiod"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretrymaximumperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretrymaximumperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"73a30f1d470cff2f":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_clustname","displayName":"Configure RD Connection Broker farm name","description":"This policy setting allows you to specify the name of a farm to join in RD Connection Broker. RD Connection Broker uses the farm name to determine which RD Session Host servers are in the same RD Session Host server farm. Therefore, you must use the same farm name for all RD Session Host servers in the same load-balanced farm. The farm name does not have to correspond to a name in Active Directory Domain Services.\r\n\r\nIf you specify a new farm name, a new farm is created in RD Connection Broker. If you specify an existing farm name, the server joins that farm in RD Connection Broker.\r\n\r\nIf you enable this policy setting, you must specify the name of a farm in RD Connection Broker.\r\n\r\nIf you disable or do not configure this policy setting, the farm name is not specified at the Group Policy level. \r\n\r\nNotes:\r\n\r\n 1. This policy setting is not effective unless both the Join RD Connection Broker and the Configure RD Connection Broker server name policy settings are enabled and configured by using Group Policy.\r\n\r\n 2. For Windows Server 2008, this policy setting is supported on at least Windows Server 2008 Standard.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sd-clustname"],"categoryId":"0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","categoryName":"RD Connection Broker","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_clustname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sd_clustname_1","displayName":"Enabled","description":null,"helpText":null}]},"730e05f2c61044cb":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook","displayName":"Microsoft Outlook 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Outlook 2010.\r\nBy default, the user settings of Microsoft Outlook 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010outlook"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook_1","displayName":"Enabled","description":null,"helpText":null}]},"7397081554aa1d70":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup","displayName":"Access 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Access 2013.\r\nMicrosoft Access 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Access 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Access 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013accessbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"733badaf5637463e":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}","displayName":"Policy rules","description":"","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/defender-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"73c2d9b6369c0423":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_bingnews","displayName":"Microsoft News","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_bingnews_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_bingnews_1","displayName":"True","description":null,"helpText":null}]},"7385b76b308b9c42":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcertificationservices","displayName":"Object Access Audit Certification Services","description":"This policy setting allows you to audit Active Directory Certificate Services (AD CS) operations. AD CS operations include the following: AD CS startup/shutdown/backup/restore. Changes to the certificate revocation list (CRL). New certificate requests. Issuing of a certificate. Revocation of a certificate. Changes to the Certificate Manager settings for AD CS. Changes in the configuration of AD CS. Changes to a Certificate Services template. Importing of a certificate. Publishing of a certification authority certificate is to Active Directory Domain Services. Changes to the security permissions for AD CS. Archival of a key. Importing of a key. Retrieval of a key. Starting of Online Certificate Status Protocol (OCSP) Responder Service. Stopping of Online Certificate Status Protocol (OCSP) Responder Service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditcertificationservices"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcertificationservices_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcertificationservices_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcertificationservices_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcertificationservices_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"73f55a62a1e515fb":{"id":"device_vendor_msft_policy_config_browser_allowaddressbardropdown","displayName":"Allow Address Bar Dropdown","description":"This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowaddressbardropdown"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowaddressbardropdown_0","displayName":"Block","description":"Prevented/not allowed. Hide the Address bar drop-down functionality and disable the Show search and site suggestions as I type toggle in Settings.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowaddressbardropdown_1","displayName":"Allow","description":"Allowed. Show the Address bar drop-down list and make it available.","helpText":null}]},"73b37aeed08ef298":{"id":"device_vendor_msft_policy_config_browser_allowsideloadingofextensions","displayName":"Allow Sideloading Of Extensions","description":"This setting lets you decide whether employees can sideload extensions in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsideloadingofextensions"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowsideloadingofextensions_0","displayName":"Block","description":"Prevented/Not allowed. Disabling does not prevent sideloading of extensions using Add-AppxPackage via Powershell. To prevent this, set the ApplicationManagement/AllowDeveloperUnlock policy to 1 (enabled).","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowsideloadingofextensions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"7362ec0df64f6cd9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway","displayName":"Disable proceeding from the Safe Browsing warning page","description":"Setting the policy to Enabled prevents users from proceeding past the warning page the Safe Browsing service shows to the malicious site. This policy only prevents users from proceeding on Safe Browsing warnings such as malware and phishing, not for SSL certificate-related issues such as invalid or expired certificates.\r\n\r\nSetting the policy to Disabled or leaving it unset means users can choose to proceed to the flagged site after the warning appears.\r\n\r\nSee more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway_1","displayName":"Enabled","description":null,"helpText":null}]},"7346aec2d156fd02":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled","displayName":"Enable or disable bookmark editing","description":"Setting the policy to True or leaving it unset lets users add, remove, or modify bookmarks.\r\n\r\nSetting the policy to False means users can't add, remove, or modify bookmarks. They can still use existing bookmarks.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"73ce4596a151a427":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword","displayName":"Default search provider keyword","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderKeyword specifies the keyword or shortcut used in the address bar to trigger the search for this provider.\r\n\r\nLeaving DefaultSearchProviderKeyword unset means no keyword activates the search provider.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_1","displayName":"Enabled","description":null,"helpText":null}]},"736b88dc0a700354":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt","displayName":"Cross-origin HTTP Authentication prompts","description":"Setting the policy to Enabled allows third-party images on a page to show an authentication prompt.\r\n\r\n Setting the policy to Disabled or leaving it unset renders third-party images unable to show an authentication prompt.\r\n\r\nTypically, this policy is Disabled as a phishing defense.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"730d60664ff09810":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled","displayName":"Allow the shopping list feature to be enabled","description":"This policy controls the availability of the shopping list feature.\r\nIf enabled, users will be presented with UI to track the price of the product displayed on the current page. The tracked product will be shown in the bookmarks side panel.\r\nIf this policy is set to Enabled or not set, the shopping list feature will be available to users.\r\nIf this policy is set to Disabled, the shopping list feature will be unavailable.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"73f65585d78d6279":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids","displayName":"Prevent installation of devices that match any of these device IDs","description":"This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.\r\n\r\nIf you enable this policy setting, Windows is prevented from installing a device whose hardware ID or compatible ID appears in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_1","displayName":"Enabled","description":null,"helpText":null}]},"7394e444453d038f":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids","displayName":"Prevent installation of devices that match any of these device instance IDs","description":"This policy setting allows you to specify a list of Plug and Play device instance IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.\n\nIf you enable this policy setting, Windows is prevented from installing a device whose device instance ID appears in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\n\nIf you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-preventinstallationofmatchingdeviceinstanceids"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_1","displayName":"Enabled","description":null,"helpText":null}]},"731677f333e7ac3c":{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":null},"73c078fc0496483b":{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption","displayName":"Turn off heap termination on corruption","description":"Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-fileexplorer#fileexplorer-turnoffheapterminationoncorruption"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption_1","displayName":"Enabled","description":null,"helpText":null}]},"731af1f1c3402b1f":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate","displayName":"Locked-Down Intranet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownintranetzonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"73a1e5fa4da5b9a2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue","displayName":"Set application locale","description":"Configures the application locale in Microsoft Edge and prevents users from changing the locale.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified locale. If the configured locale isn't supported, 'en-US' is used instead.\r\n\r\nIf you disable or don't configure this setting, Microsoft Edge uses either the user-specified preferred locale (if configured) or the fallback locale 'en-US'.\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_1","displayName":"Enabled","description":null,"helpText":null}]},"7339ec09d26ceb41":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel","displayName":"Configure Internet Explorer integration (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_1","displayName":"Internet Explorer mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_2","displayName":"Internet Explorer 11","description":null,"helpText":null}]},"73a69274b6aa39a8":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates","displayName":"Prompt the user to select a certificate when multiple certificates match","description":"This policy controls whether the user is prompted to select a client certificate when more than one certificate matches 'AutoSelectCertificateForUrls' (Automatically select client certificates for these sites).\r\nIf this policy is set to True, the user is prompted to select a client certificate whenever the auto-selection policy matches multiple certificates.\r\nIf this policy is set to False or not set, the user may only be prompted when no certificate matches the auto-selection.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"7315852b7c1ed328":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled","displayName":"Enable post-quantum key agreement for TLS","description":"This policy configures whether Microsoft Edge will offer a post-quantum key agreement algorithm in TLS. This lets supporting servers protect user traffic from being decrypted by quantum computers.\r\n\r\nIf you enable this policy, Microsoft Edge will offer a post-quantum key agreement in TLS connections. TLS connections will be protected from quantum computers when communicating with compatible servers.\r\n\r\nIf you disable this policy, Microsoft Edge will not offer a post-quantum key agreement in TLS connections. User traffic will be unprotected from decryption by quantum computers.\r\n\r\nIf you don't configure this policy, Microsoft Edge will follow the default rollout process for offering a post-quantum key agreement.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing TLS servers and networking middleware are expected to ignore the new option and continue selecting previous options.\r\n\r\nHowever, devices that don't implement TLS correctly may malfunction when offered the new option. For example, they might disconnect in response to unrecognized options or the resulting larger messages. These devices are not post-quantum-ready and will interfere with an enterprise's post-quantum transition. If this issue is encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Microsoft Edge. You can enable it to test for issues and you can disable it while you resolve issues.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"73770347f59e24c8":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls","displayName":"Allow automatic full screen on specified sites","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or it will\r\nfail. Users' personal settings may allow certain origins to call this API\r\nwithout a prior user gesture.\r\n\r\nThis policy supersedes users' personal settings and allows matching origins to\r\ncall the API without a prior user gesture.\r\n\r\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\nWildcards (*) are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy or user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"736d5759beb1fd59":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist","displayName":"Force disable spellcheck languages","description":"Force-disables spellcheck languages. Unrecognized languages in that list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be disabled for the languages specified. The user can still enable or disable spellcheck for languages not in the list.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is set to disabled, this policy will have no effect.\r\n\r\nIf a language is included in both the 'SpellcheckLanguage' (Enable specific spellcheck languages) and the 'SpellcheckLanguageBlocklist' policy, the spellcheck language is enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"73f8cf81e438f947":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mspubexe156","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mspubexe156_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mspubexe156_1","displayName":"True","description":null,"helpText":null}]},"7317f64198980cfa":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks_forcedenytheseapps","displayName":"Let Apps Access Tasks Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"7366c3dc32b5e510":{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages","displayName":"Customize warning messages","description":"This policy setting lets you customize warning messages.\n\nThe \"Display warning message before sharing control\" policy setting allows you to specify a custom message to display before a user shares control of his or her computer.\n\nThe \"Display warning message before connecting\" policy setting allows you to specify a custom message to display before a user allows a connection to his or her computer.\n\nIf you enable this policy setting, the warning message you specify overrides the default message that is seen by the novice.\n\nIf you disable this policy setting, the user sees the default warning message.\n\nIf you do not configure this policy setting, the user sees the default warning message.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-customizewarningmessages"],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"733573ec4a08414b":{"id":"settings_item_accessibilitysettings_reducemotionenabled","displayName":"Reduce Motion Enabled","description":"If 'true', enables reduced motion.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_reducemotionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_reducemotionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"73420836539639bd":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxsaprouting","displayName":"IPX SAP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipxsaprouting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxsaprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxsaprouting_1","displayName":"Enabled","description":null,"helpText":null}]},"737a3233f139ca7d":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1_lbl_eventlogginglevelspin","displayName":"Enter [0-3]: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"73682b124a329830":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_commandlineflagsecuritywarningsenabled","displayName":"Enable security warnings for command-line flags (User)","description":"Setting the policy to Enabled or leaving it unset means security warnings appear when potentially dangerous command-line flags are used to launch Chrome.\r\n\r\nSetting the policy to Disabled prevents security warnings from appearing when Chrome is launched with potentially dangerous command-line flags.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_commandlineflagsecuritywarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_commandlineflagsecuritywarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7387c72760f6fc83":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc","displayName":"Block cookies on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"733e85d5da38f618":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes","displayName":"Allow Google Chrome Frame to handle the listed content types (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_1","displayName":"Enabled","description":null,"helpText":null}]},"7399e0cd0d560ef7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls_filehandlingblockedforurlsdesc","displayName":"Block the File Handling API on these web apps (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"73d0ed9e244eb143":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionscustomizeribbon_l_displaydevelopertab","displayName":"Display Developer tab in the Ribbon (User)","description":"This policy setting controls whether the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you enable this policy setting, the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you disable this policy setting, the Developer tab will not be displayed in the Ribbon.\r\n\r\nIf you do not configure this policy setting, the Developer tab will not be displayed in the Ribbon, but its visibility can be changed via a setting in the application Options dialog box.","helpText":"","infoUrls":[],"categoryId":"d1e2bb0d-6c0e-4f40-9f2e-52055edc14b5","categoryName":"Customize Ribbon","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionscustomizeribbon_l_displaydevelopertab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionscustomizeribbon_l_displaydevelopertab_1","displayName":"Enabled","description":null,"helpText":null}]},"73307e745c6f59e2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid_0","displayName":"No file validation","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid_1","displayName":"Web and email sources","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid_2","displayName":"Always perform validation","description":null,"helpText":null}]},"73d3b18e1917cb9a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates","displayName":"Excel 2007 and later workbooks and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"730c0cc26f8e8c19":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_0","displayName":"Blocked files are not opened","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_1","displayName":"Blocked files open in Protected View and can not be edited","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_2","displayName":"Blocked files open in Protected View and can be edited","description":null,"helpText":null}]},"73734028900b81c7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders72","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders72_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders72_1","displayName":"True","description":null,"helpText":null}]},"73231ed24dd880e9":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"73c8d9091d70991e":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowaccesstodatasources"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"732dd10a571a8218":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh","displayName":"Allow META REFRESH (User)","description":"This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page.\n\nIf you enable this policy setting, a user's browser that loads a page containing an active Meta Refresh setting can be redirected to another Web page.\n\nIf you disable this policy setting, a user's browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.\n\nIf you do not configure this policy setting, a user's browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowmetarefresh"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_1","displayName":"Enabled","description":null,"helpText":null}]},"733226401f0360a2":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_applicationlocalevalue","displayName":"Application locale (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"732a3c7737db98b5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo","displayName":"Allow importing of payment info (User)","description":"Allows users to import payment info from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\r\n\r\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"73019867212e08d4":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar","displayName":"Show the cast icon in the toolbar (User)","description":"Set this policy to true to show the Cast toolbar icon on the toolbar or the overflow menu. Users won't be able to remove it.\r\n\r\nIf you don't configure this policy or if you disable it, users can pin or remove the icon by using its contextual menu.\r\n\r\nIf you've also set the 'EnableMediaRouter' (Enable Google Cast) policy to false, then this policy is ignored, and the toolbar icon isn't shown.","helpText":"","infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},"73951306d55b8e45":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification (User)","description":"According to Service Worker specification\r\nhttps://w3c.github.io/ServiceWorker/#control-and-use-worker-client, workers\r\nshould inherit controllers for blob URLs. Currently, only DedicatedWorkers\r\ninherit the controller, while SharedWorkers do not.\r\n\r\nEnabled/Unset: Microsoft Edge inherits\r\nthe controller for SharedWorker blob URLs, aligning with the specification.\r\n\r\nDisabled: Behavior remains unchanged, not aligning with the specification.\r\n\r\nThis policy is temporary and will be removed in a future update.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"73cb6a61433d586b":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_preferslowciphers","displayName":"Prefer specific encryption cipher algorithms for TLS (User)","description":"","helpText":"","infoUrls":[],"categoryId":"120b24dd-c04a-4291-8f24-9c48fcdc1434","categoryName":"Cryptography compliance policies","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_preferslowciphers_cnsa","displayName":"Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_preferslowciphers_default","displayName":"Use Microsoft Edge's default cipher order","description":null,"helpText":null}]},"73959357d7cd3b15":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended","displayName":"Configure the new tab page search box experience (User)","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL).\r\n\r\n If you disable or don't configure this policy and:\r\n\r\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\r\n- If the address bar default search engine is not Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\r\n\r\n\r\nIf you enable this policy and set it to:\r\n\r\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\r\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\r\n\r\nPolicy options mapping:\r\n\r\n* bing (bing) = Search box (Recommended)\r\n\r\n* redirect (redirect) = Address bar\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: bing","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"73952e38ff3d7651":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled","displayName":"Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge (User)","description":"Note: The web capture feature is rebranded to \"Screenshot\".\r\n\r\nEnables the Screenshot feature in Microsoft Edge. This feature lets users capture web and PDF content, and annotate captures using inking tools. Users can also do a visual image search based on the captured content.\r\n\r\nIf you enable or don't configure this policy, the Screenshot option appears in the context menu, the Settings and more menu, and by using the keyboard shortcut, CTRL+SHIFT+S.\r\n\r\nIf you disable this policy, users can't access this feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"73769a0a421ffa94":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy1","displayName":"Places Bar Location 1 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy1_1","displayName":"Enabled","description":null,"helpText":null}]},"73f06f9bd45ad653":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiword","displayName":"Disallow in Word (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiword_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiword_1","displayName":"True","description":null,"helpText":null}]},"735856792396f69c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishsouthafrica","displayName":"English (South Africa) (User)","description":"Enables the editing language English (South Africa)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishsouthafrica_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishsouthafrica_1","displayName":"Enabled","description":null,"helpText":null}]},"73ffe0bb881011ad":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sesotho","displayName":"Sesotho (User)","description":"Enables the editing language Sesotho","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sesotho_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sesotho_1","displayName":"Enabled","description":null,"helpText":null}]},"7325c3cc73b95ba7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_additionalpermissionsrequesturl_l_specifyurlemailaddress","displayName":"Specify URL/Email address: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":null},"73659e17d4f924ce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc02","displayName":"Unsafe Location #2 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"73f52708fe927e63":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_relyonvmlfordisplayinggraphicsinbrowsers","displayName":"Rely on VML for displaying graphics in browsers (User)","description":"This policy setting controls whether Office 2016 applications save standard raster file format (GIF or PNG) copies of Vector Markup Language (VML) graphics when documents are saved as Web pages.\r\n\r\nIf you enable this policy setting, Office 2016 applications will not generate alternate files for VML graphics when documents are saved as Web pages. In addition, the \"Rely on VML for displaying graphics in browsers\" check box is checked in the Web Options dialog in Excel, PowerPoint, and Word, and users cannot change it.\r\n\r\nIf you disable this policy setting, Office 2016 applications also save copies of the graphics in a standard raster file format (GIF or PNG) for use by browsers that cannot display VML. In addition, the \"Rely on VML for displaying graphics in browsers\" check box is cleared in the Web Options dialog in Excel, PowerPoint, and Word, and users cannot change it.\r\n\r\nIf you do not configure this policy setting, when saving VML graphics, Office 2016 applications also save copies of the graphics in a standard raster file format (GIF or PNG) for use by browsers that cannot display VML. If the \"Rely on VML for displaying graphics in browsers\" check box in the Web Options dialog is selected, applications will not save raster copies of VML graphics, which means those graphics will not display in non-Microsoft browsers.","helpText":"","infoUrls":[],"categoryId":"8ee1d8d2-582f-401b-927a-993016f4290d","categoryName":"Browsers","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_relyonvmlfordisplayinggraphicsinbrowsers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_relyonvmlfordisplayinggraphicsinbrowsers_1","displayName":"Enabled","description":null,"helpText":null}]},"73ec7e7173e9c022":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_disableonenotecomapi","displayName":"Disable OneNote COM API (User)","description":"Disable OneNote COM API - this disables add-on applications that may use the COM API. Note that it also breaks other features that use this API such as sending information from Outlook to OneNote.","helpText":"","infoUrls":[],"categoryId":"1ae8c95a-5748-4647-80f8-b447e60601a2","categoryName":"Add-ins","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_disableonenotecomapi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_disableonenotecomapi_1","displayName":"Enabled","description":null,"helpText":null}]},"73b779005d82a757":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepinversionhistory","displayName":"Days back to keep in version history (User)","description":"This policy setting allows you to set the number of days when all version history items created before this value will be deleted. With a 2016 format notebook, OneNote will automatically store previous versions of the pages in the notebook, and it will also store a recycle bin for all of the deleted pages and sections.\r\n\r\nIf you enable this policy setting, you can set the number of days back to delete version history.\r\n\r\nIf you disable or do not configure this policy setting OneNote will default to keeping previous versions for all days in the past. This is the default value of -1.","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepinversionhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepinversionhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"735c7fdf98d163b9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Outlook\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\Outlook\\Addins.\r\n\r\nYou can also obtain the ProgID of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.\r\n\r\nAdd-ins that are disabled by this policy will never be disabled by the Outlook add-in disabling feature, which disables add-ins for performance, resiliency, or reliability reasons.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"73568915a381c89c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffautoswitchingfromverticaltohorizontallayout","displayName":"Turn off auto-switching from vertical to horizontal layout (User)","description":"This policy setting controls auto-switching of calendar layouts from vertical to horizontal.\r\n\r\nIf you enable this policy setting, auto-switching is turned off.\r\n\r\nIf you disable or do not configure this policy setting, auto-switching is turned on.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffautoswitchingfromverticaltohorizontallayout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffautoswitchingfromverticaltohorizontallayout_1","displayName":"Enabled","description":null,"helpText":null}]},"7376ef6d177bb860":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters","displayName":"PowerPoint beta converters (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_1","displayName":"Enabled","description":null,"helpText":null}]},"7387c7b37271c514":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_l_descriptioncolon46","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"73e0506eae76ac27":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_straightquoteswithsmartquotes","displayName":"Straight quotes with smart quotes (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"af9b2941-29f9-4ee5-ae09-215f4e242943","categoryName":"AutoCorrect Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_straightquoteswithsmartquotes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_straightquoteswithsmartquotes_1","displayName":"Enabled","description":null,"helpText":null}]},"73f8963615607a9d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_l_allowsubfolders71","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_l_allowsubfolders71_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_l_allowsubfolders71_1","displayName":"True","description":null,"helpText":null}]},"73bfac5c9ec0d0dd":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates","displayName":"Word XP binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_wordxpbinarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"730f4496aaa1f047":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders31","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders31_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders31_1","displayName":"True","description":null,"helpText":null}]},"736611294ac74191":{"id":"vendor_msft_personalization_lockscreenimageurl","displayName":"Lock Screen Image Url","description":"A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Personalization-csp/"],"categoryId":"1dd655c9-a1f3-4780-befb-cab19922277d","categoryName":"Personalization","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/74.json b/public/intune-definitions/74.json new file mode 100644 index 000000000000..3c4215a344d6 --- /dev/null +++ b/public/intune-definitions/74.json @@ -0,0 +1 @@ +{"74e92e6c1d57eef9":{"id":"com.apple.applicationaccess_allowcellularplanmodification","displayName":"Allow Cellular Plan Modification","description":"If false, users can’t change any settings related to their cellular plan. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcellularplanmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcellularplanmodification_true","displayName":"True","description":null,"helpText":null}]},"7405b171c996a5da":{"id":"com.apple.applicationaccess_allowwritingtools","displayName":"Allow Writing Tools (Deprecated)","description":"If false, disables Apple Intelligence writing tools.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowwritingtools_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowwritingtools_true","displayName":"True","description":null,"helpText":null}]},"74c5882cb282ea52":{"id":"com.apple.assetcache.managed_peerfilterranges_item_first","displayName":"First","description":"The first IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"7428e2dca75b8f68":{"id":"com.apple.assetcache.managed_publicranges_item_first","displayName":"First","description":"The first IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"74c20edb36a94c83":{"id":"com.apple.managedclient.preferences_splitscreenenabled","displayName":"Enable split screen feature in Microsoft Edge","description":"This policy lets you configure the split screen feature in Microsoft Edge. This feature lets a user open two web pages in one tab.\n\nIf you enable or don't configure this policy, users can use the split screen feature in Microsoft Edge.\n\nIf you disable this policy, users can't use the split screen feature in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#splitscreenenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_splitscreenenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_splitscreenenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7450815d2473eb1c":{"id":"com.apple.managedclient.preferences_sslerroroverrideallowedfororigins","displayName":"Allow users to proceed from the HTTPS warning page for specific origins","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\n\nIf you enable or don't configure the \"SSLErrorOverrideAllowed\" policy, this policy does nothing.\n\nIf you disable the \"SSLErrorOverrideAllowed\" policy, configuring this policy lets you configure a list of origin patterns for sites where users can continue to click through SSL error pages. Users can't click through SSL error pages on origins that are not on this list.\n\nIf you don't configure this policy, the \"SSLErrorOverrideAllowed\" policy applies for all sites.\n\nFor detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy. This policy only matches based on origin, so any path or query in the URL pattern is ignored.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sslerroroverrideallowedfororigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"74ba69628b5edfc6":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays","displayName":"Weekdays","description":"One or more days of the week that the device will automatically shutdown. ","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_0","displayName":"Mon","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_1","displayName":"Tue","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_2","displayName":"Wed","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_3","displayName":"Thu","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_4","displayName":"Fri","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_5","displayName":"Sat","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_6","displayName":"Sun","description":null,"helpText":null}]},"74fc95b88a6d703a":{"id":"com.apple.system-extension-policy_allowuseroverrides","displayName":"Allow User Overrides","description":"If false, restricts users from approving additional system extensions that configuration profiles don’t explicitly allow.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":[{"id":"com.apple.system-extension-policy_allowuseroverrides_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.system-extension-policy_allowuseroverrides_true","displayName":"True","description":null,"helpText":null}]},"748b96a9464bb71b":{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"748034e1c03b20c6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsblockedforurls_recommended","displayName":"Block sleeping tabs on specific sites (users can override)","description":"Define a list of sites, based on URL patterns, that aren't allowed to be put to sleep by sleeping tabs. Sites in this list are also excluded from other performance optimizations like efficiency mode and tab discard.\n\nIf the policy \"SleepingTabsEnabled\" is disabled, this list isn't used and no sites are put to sleep automatically.\n\nIf you don't configure this policy, all sites are eligible to be put to sleep unless the user's personal configuration blocks them.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":null},"74b46540a19fe0bf":{"id":"device_vendor_msft_bitlocker_fixeddrivesencryptiontype","displayName":"Enforce drive encryption type on fixed data drives","description":"This policy setting allows you to configure the encryption type used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. Changing the encryption type has no effect if the drive is already encrypted or if encryption is in progress. Choose full encryption to require that the entire drive be encrypted when BitLocker is turned on. Choose used space only encryption to require that only the portion of the drive used to store data is encrypted when BitLocker is turned on.\r\n\r\nIf you enable this policy setting the encryption type that BitLocker will use to encrypt drives is defined by this policy and the encryption type option will not be presented in the BitLocker setup wizard.\r\n\r\nIf you disable or do not configure this policy setting, the BitLocker setup wizard will ask the user to select the encryption type before turning on BitLocker.\r\n\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesencryptiontype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesencryptiontype_1","displayName":"Enabled","description":null,"helpText":null}]},"74c0d51cfe08f1ec":{"id":"device_vendor_msft_passportforwork_{tenantid}","displayName":"Device-scoped settings","description":"This policy specifies the Tenant ID in the format of a Globally Unique Identifier (GUID) without curly braces ( { , } ), which will be used as part of Windows Hello for Business provisioning and management.","helpText":"","infoUrls":[],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"749d39704e18caf6":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_2","displayName":"Control the location of the log file","description":"This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators.\r\n\r\nIf you enable this policy setting, the Event Log uses the path specified in this policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\\System32\\winevt\\Logs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-logfilepath-2"],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_2_1","displayName":"Enabled","description":null,"helpText":null}]},"7408bea5e15a707f":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery","displayName":"Configure EFS recovery policy processing","description":"This policy setting determines when encryption policies are updated.\r\n\r\nThis policy setting affects all policies that use the encryption component of Group Policy, such as policies related to encryption in Windows Settings\\Security Settings.\r\n\r\nIt overrides customized settings that the program implementing the encryption policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-efsrecovery"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_1","displayName":"Enabled","description":null,"helpText":null}]},"7472aac45d2fad24":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_hidefrombrowselist","displayName":"MSS: (Hidden) Hide Computer From the Browse List (not recommended except for highly secure environments)","description":"MSS: (Hidden) Hide Computer From the Browse List (not recommended except for highly secure environments)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-hidefrombrowselist"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_hidefrombrowselist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_hidefrombrowselist_1","displayName":"Enabled","description":null,"helpText":null}]},"7445e83956c059d7":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_2","displayName":"Remove \"Work offline\" command","description":"This policy setting removes the \"Work offline\" command from Explorer, preventing users from manually changing whether Offline Files is in online mode or offline mode.\r\n\r\nIf you enable this policy setting, the \"Work offline\" command is not displayed in File Explorer.\r\n\r\nIf you disable or do not configure this policy setting, the \"Work offline\" command is displayed in File Explorer.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-workofflinedisabled-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_2_1","displayName":"Enabled","description":null,"helpText":null}]},"74e5bce58704c940":{"id":"device_vendor_msft_policy_config_admx_removablestorage_removable_remote_allow_access","displayName":"All Removable Storage: Allow direct access in remote sessions","description":"This policy setting grants normal users direct access to removable storage devices in remote sessions.\r\n\r\nIf you enable this policy setting, remote users can open direct handles to removable storage devices in remote sessions.\r\n\r\nIf you disable or do not configure this policy setting, remote users cannot open direct handles to removable storage devices in remote sessions.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removable-remote-allow-access"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_removable_remote_allow_access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_removable_remote_allow_access_1","displayName":"Enabled","description":null,"helpText":null}]},"74266e7c5c52dc34":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_2","displayName":"For touch input, don’t show the Input Panel icon","description":"Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available. This policy applies only when a user is using touch input.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will never appear next to any text entry area when a user is using touch input. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-iptiptouchtarget-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_2_1","displayName":"Enabled","description":null,"helpText":null}]},"742772b671c93299":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word","displayName":"Microsoft Word 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Word 2010.\r\nBy default, the user settings of Microsoft Word 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010word"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word_1","displayName":"Enabled","description":null,"helpText":null}]},"7472540c0ea804a8":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_trayiconenabled","displayName":"Tray Icon","description":"This policy setting enables the User Experience Virtualization (UE-V) tray icon. By default, an icon appears in the system tray that displays notifications for UE-V. This icon also provides a link to the UE-V Agent application, Company Settings Center. Users can open the Company Settings Center by right-clicking the icon and selecting Open or by double-clicking the icon. When this group policy setting is enabled, the UE-V tray icon is visible, the UE-V notifications display, and the Company Settings Center is accessible from the tray icon.\r\nWith this setting disabled, the tray icon does not appear in the system tray, UE-V never displays notifications, and the user cannot access Company Settings Center from the system tray. The Company Settings Center remains accessible through the Control Panel and the Start menu or Start screen.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-trayiconenabled"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_trayiconenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_trayiconenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7424aa3b016fab46":{"id":"device_vendor_msft_policy_config_bluetooth_allowdiscoverablemode","displayName":"Allow Discoverable Mode","description":"Specifies whether other Bluetooth-enabled devices can discover the device. If this is not set or it is deleted, the default value of 1 (Allow) is used. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Bluetooth#allowdiscoverablemode"],"categoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","categoryName":"Bluetooth","options":[{"id":"device_vendor_msft_policy_config_bluetooth_allowdiscoverablemode_0","displayName":"Block","description":"Not allowed. When set to 0, other devices will not be able to detect the device. To verify, open the Bluetooth control panel on the device. Then, go to another Bluetooth-enabled device, open the Bluetooth control panel, and verify that you cannot see the name of the device.","helpText":null},{"id":"device_vendor_msft_policy_config_bluetooth_allowdiscoverablemode_1","displayName":"Allow","description":"Allowed. When set to 1, other devices will be able to detect the device. To verify, open the Bluetooth control panel on the device. Then, go to another Bluetooth-enabled device, open the Bluetooth control panel and verify that you can discover it.","helpText":null}]},"74ab56614b108bea":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended","displayName":"Print Headers and Footers","description":"Setting the policy to Enabled turns headers and footers on in print preview. Setting the policy to Disabled turns them off in print preview.\r\n\r\nIf you set the policy, users can't change it. If unset, users decides whether headers and footers appear.","helpText":"","infoUrls":[],"categoryId":"20ceae56-e189-46ec-a440-791ce7454017","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"74c211687730621c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting","displayName":"Default sensors setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting_1","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting_2","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},"745ed8a044917141":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist","displayName":"Kerberos delegation server whitelist","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: foobar.example.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"741595e390f24f2e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_automaticfullscreenallowedforurlsdesc","displayName":"Allow automatic fullscreen on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"7457e45f4fd3048d":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols","displayName":"Download unsigned ActiveX controls","description":"This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.\n\nIf you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.\n\nIf you disable this policy setting, users cannot run unsigned controls.\n\nIf you do not configure this policy setting, users cannot run unsigned controls.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedownloadunsignedactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"744d4dc8fc8d5717":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees","displayName":"Microsoft Network Server Digitally Sign Communications If Client Agrees","description":"Microsoft network server: Digitally sign communications (if client agrees) This security setting determines whether the SMB server will negotiate SMB packet signing with clients that request it. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether the SMB server will negotiate SMB packet signing when an SMB client requests it. If this setting is enabled, the Microsoft network server will negotiate SMB packet signing as requested by the client. That is, if packet signing has been enabled on the client, packet signing will be negotiated. If this policy is disabled, the SMB client will never negotiate SMB packet signing. Default: Enabled on domain controllers only. Important For Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value must be set to 1 on the server running Windows 2000: HKLM\\System\\CurrentControlSet\\Services\\lanmanserver\\parameters\\enableW9xsecuritysignature Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. For Windows 2000 and above, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing is enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_digitallysigncommunicationsifclientagrees"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees_0","displayName":"Disable","description":"Disable","helpText":null}]},"745f0358c8cf8869":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_addremoteserverexceptionsforntlmauthentication","displayName":"Network Security Restrict NTLM Add Remote Server Exceptions For NTLM Authentication","description":"Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication This policy setting allows you to create an exception list of remote servers to which clients are allowed to use NTLM authentication if the \"Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers\" policy setting is configured. If you configure this policy setting, you can define a list of remote servers to which clients are allowed to use NTLM authentication. If you do not configure this policy setting, no exceptions will be applied. The naming format for servers on this exception list is the fully qualified domain name (FQDN) or NetBIOS server name used by the application, listed one per line. To ensure exceptions the name used by all applications needs to be in the list, and to ensure an exception is accurate, the server name should be listed in both naming formats . A single asterisk (*) can be used anywhere in the string as a wildcard character.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_addremoteserverexceptionsforntlmauthentication"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"744841ac7adbfc45":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"74eba5923dbfcdd4":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_relaunchnotificationperiod","displayName":"Set the time period for update notifications: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"745939c69782c8be":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist","displayName":"List of URL patterns for which developer tools are allowed to be opened","description":"This policy controls where developer tools can be used in Microsoft Edge by specifying an allowlist of URL patterns.\r\n\r\nURL patterns are matched against the URL of every frame on the page being inspected.\r\n\r\nIf you configure this policy and do not configure the 'DeveloperToolsAvailabilityBlocklist' (List of URL patterns for which developer tools are blocked) policy, developer tools are available only when every frame on the page matches a pattern in this allowlist. If any frame does not match, developer tools are blocked for the entire page. For information on the URL format, see https://go.microsoft.com/fwlink/?linkid=2095322 .\r\n\r\nIf you configure both this policy and the 'DeveloperToolsAvailabilityBlocklist' policy, this allowlist takes precedence. URLs that match this allowlist are allowed even if they also match the blocklist. URLs that match the blocklist but not this allowlist are blocked. URLs that match neither are governed by the 'DeveloperToolsAvailability' (Control where developer tools can be used) policy.\r\n\r\nIf you disable or do not configure this policy, developer tools availability is determined by the 'DeveloperToolsAvailabilityBlocklist' and 'DeveloperToolsAvailability' policies.\r\n\r\nThis policy applies to developer tools opened for websites, extensions, and web applications.\r\n\r\nThis policy supports up to 1,000 entries.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\nhttps://ssl.server.com\r\ncontoso.com/good_path\r\nhttps://server.contoso.com:8080/path\r\n.exact.hostname.com\r\nfile://*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"742255f88d687a3f":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment","displayName":"Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages","description":"This setting lets you specify a custom adjustment to the height of popup windows generated via window.open from the Internet Explorer mode site.\r\n\r\nIf you configure this policy, Microsoft Edge will add the adjustment value to the height, in pixels. The exact difference depends on the UI configuration of both IE and Edge, but a typical difference is 5.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will treat IE mode window.open the same as Edge mode window.open in window height calculations.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_1","displayName":"Enabled","description":null,"helpText":null}]},"74f94d1611b0a6dd":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_msaccessexe193","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_msaccessexe193_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_msaccessexe193_1","displayName":"True","description":null,"helpText":null}]},"748e761b88ac7bcf":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_outlookexe64","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_outlookexe64_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_outlookexe64_1","displayName":"True","description":null,"helpText":null}]},"746ddc9ac2d70604":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winwordexe","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winwordexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winwordexe_1","displayName":"True","description":null,"helpText":null}]},"74353d094fec2012":{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers_maxconcurrentusers","displayName":"MaxConcurrentUsers","description":"","helpText":"","infoUrls":[],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":null},"740536a9f02e1e95":{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion","displayName":"Configure Simplified Chinese IME Version","description":"This policy allows the IT admin to configure the Microsoft Simplified Chinese IME version in the desktop. The following list shows the supported values: 0 (default) – The new Microsoft Simplified Chinese IME is on by default. Allow to control Microsoft Simplified Chinese IME version to use. 1 - The previous version of Microsoft Simplified Chinese IME is always selected. Not allowed to control Microsoft Simplified Chinese IME version to use. 2 - The new Microsoft Simplified Chinese IME is always selected. Not allowed to control Microsoft Simplified Chinese IME version to use.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#configuresimplifiedchineseimeversion"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion_0","displayName":"Allows you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is configured by default.","description":"Allows you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is configured by default.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion_1","displayName":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The previous version of Microsoft Simplified Chinese IME is always selected.","description":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The previous version of Microsoft Simplified Chinese IME is always selected.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion_2","displayName":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is always selected.","description":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is always selected.","helpText":null}]},"74629d358fc05c7a":{"id":"device_vendor_msft_policy_config_update_allownonmicrosoftsignedupdate","displayName":"Allow Non Microsoft Signed Update","description":"Allows the IT admin to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when the update is found at the UpdateServiceUrl location. This policy supports using WSUS for 3rd party software and patch distribution. Supported operations are Get and Replace. This policy is specific to desktop and local publishing via WSUS for 3rd party updates (binaries and updates not hosted on Microsoft Update) and allows IT to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when the update is found on an intranet Microsoft update service location.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allownonmicrosoftsignedupdate"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_allownonmicrosoftsignedupdate_0","displayName":"Block","description":"Not allowed or not configured. Updates from an intranet Microsoft update service location must be signed by Microsoft.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allownonmicrosoftsignedupdate_1","displayName":"Allow","description":"Allowed. Accepts updates received through an intranet Microsoft update service location, if they are signed by a certificate found in the 'Trusted Publishers' certificate store of the local computer.","helpText":null}]},"744a5a51b1314444":{"id":"setrecoverylock_setrecoverylock","displayName":"Set Recovery Lock","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"1fcd72cb-7c09-4e7b-a314-97a88df6e623","categoryName":"Recovery Lock Password","options":null},"748842cb462d50f8":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_pathcolon11","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"7446b52f3b679bf7":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1","displayName":"Non-default server disconnect actions (User)","description":"Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specified response, and the response specified in the \"Action on server disconnect\" setting.\r\n\r\nTo use this setting, click Show. In the Show Contents dialog box in the Value Name column box, type the server's computer name. Then, in the Value column box, type \"0\" if users can work offline when they are disconnected from this server, or type \"1\" if they cannot.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured for a particular server, the setting in Computer Configuration takes precedence over the setting in User Configuration. Both Computer and User configuration take precedence over a user's setting. This setting does not prevent users from setting custom actions through the Offline Files tab. However, users are unable to change any custom actions established via this setting.\r\n\r\nTip: To configure this setting without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click Advanced. This setting corresponds to the settings in the \"Exception list\" section.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-customgoofflineactions-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_1","displayName":"Enabled","description":null,"helpText":null}]},"74a19d8bba8160ee":{"id":"user_vendor_msft_policy_config_admx_startmenu_noautotraynotify","displayName":"Turn off notification area cleanup (User)","description":"This setting affects the notification area, also called the \"system tray.\"\r\n\r\nThe notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup << icon can be referred to as the \"notification chevron.\"\r\n\r\nIf you enable this setting, the system notification area expands to show all of the notifications that use this area.\r\n\r\nIf you disable this setting, the system notification area will always collapse notifications.\r\n\r\nIf you do not configure it, the user can choose if they want notifications collapsed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noautotraynotify"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noautotraynotify_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noautotraynotify_1","displayName":"Enabled","description":null,"helpText":null}]},"74065734988389bd":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_delay","displayName":"Notification delay (in seconds): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"749c1fb50337a2c1":{"id":"user_vendor_msft_policy_config_browser_allowpasswordmanager","displayName":"Allow Password Manager (User)","description":"This setting lets you decide whether employees can save their passwords locally, using Password Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowpasswordmanager"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowpasswordmanager_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowpasswordmanager_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"743a246b99b8a12b":{"id":"user_vendor_msft_policy_config_browser_allowsideloadingofextensions","displayName":"Allow Sideloading Of Extensions (User)","description":"This setting lets you decide whether employees can sideload extensions in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsideloadingofextensions"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowsideloadingofextensions_0","displayName":"Block","description":"Prevented/Not allowed. Disabling does not prevent sideloading of extensions using Add-AppxPackage via Powershell. To prevent this, set the ApplicationManagement/AllowDeveloperUnlock policy to 1 (enabled).","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsideloadingofextensions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"743ef56581c6f9a2":{"id":"user_vendor_msft_policy_config_browser_allowsmartscreen","displayName":"Allow Smart Screen (User)","description":"This setting lets you decide whether to turn on Windows Defender SmartScreen.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsmartscreen"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowsmartscreen_0","displayName":"Block","description":"Turned off. Do not protect users from potential threats and prevent users from turning it on.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsmartscreen_1","displayName":"Allow","description":"Turned on. Protect users from potential threats and prevent users from turning it off.","helpText":null}]},"743078e6251f7954":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_defaultsearchprovideralternateurlsdesc","displayName":"List of alternate URLs for the default search provider (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"740f082cebd841dd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting","displayName":"Enable deprecated privet printing (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting_1","displayName":"Enabled","description":null,"helpText":null}]},"74763607cc860141":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin","displayName":"Enable the old web-based signin flow (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin_1","displayName":"Enabled","description":null,"helpText":null}]},"7410e5264f97b522":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_postquantumkeyagreementenabled","displayName":"Enable post-quantum key agreement for TLS (User)","description":"This policy configures whether Google Chrome will offer a post-quantum key agreement algorithm in TLS, using the ML-KEM NIST standard. Prior to Google Chrome 131, the algorithm was Kyber, an earlier draft iteration of the standard. This allows supporting servers to protect user traffic from being later decrypted by quantum computers.\r\n\r\nIf this policy is Enabled or not set, Google Chrome will offer a post-quantum key agreement in TLS connections. User traffic will then be protected from quantum computers when communicating with compatible servers.\r\n\r\nIf this policy is Disabled, Google Chrome will not offer a post-quantum key agreement in TLS connections. User traffic will then be unprotected from quantum computers.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing TLS servers and networking middleware are expected to ignore the new option and continue selecting previous options.\r\n\r\nHowever, devices that do not correctly implement TLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or the resulting larger messages. Such devices are not post-quantum-ready and will interfere with an enterprise's post-quantum transition. If encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed sometime after Google Chrome version 145. It may be Enabled to allow you to test for issues, and may be Disabled while issues are being resolved.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_postquantumkeyagreementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_postquantumkeyagreementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"74f5f46575bc2347":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_automaticfullscreenallowedforurlsdesc","displayName":"Allow automatic fullscreen on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"743372a50ee16995":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled","displayName":"DataURL Whitespace Preservation for all media types (User)","description":"This policy provides a temporary opt-out for changes to how Chrome handles whitepsace in data URLS.\r\nPreviously, whitespace would be kept only if the top level media type was text or contained the media type string xml.\r\nNow, whitespace will be preserved in all data URLs, regardless of media type.\r\n\r\nIf this policy is left unset or is set to True, the new behavior is enabled.\r\n\r\nWhen this policy is set to False, the old behavior is enabled.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"744aca8d0dbc9a67":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles","displayName":"Excel 97-2003 add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"7465817d7c80d8c7":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"74cba17a46c9da17":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"74f49e57e689948d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended","displayName":"Set the system default printer as the default printer (User)","description":"Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer.\r\n\r\nIf you disable this policy or don't configure it, Print Preview uses the most recently used printer as the default destination choice.\r\n\r\nIf you enable this policy, Print Preview uses the OS system default printer as the default destination choice.","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"74690655b55db199":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls","displayName":"Block cookies on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can't set cookies.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nSee the 'CookiesAllowedForUrls' (Allow cookies on specific sites) and 'CookiesSessionOnlyForUrls' (Limit cookies from specific websites to the current session) policies for more information.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- CookiesBlockedForUrls\r\n\r\n- 'CookiesAllowedForUrls'\r\n\r\n- 'CookiesSessionOnlyForUrls'\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"74631baf59c4e316":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"7406b1d7c85877d0":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed","displayName":"Enable the Search bar (User)","description":"Enables the search bar. When enabled, users can use the search bar to search the web from their desktop or from an application. The search bar provides a search box, powered by Edge default search engine, that shows web suggestions and opens all web searches in Microsoft Edge. The search bar can be launched from the \"More tools\" menu or jump list in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy:\r\nThe search bar will be automatically enabled for all profiles.\r\nThe option to enable the search bar at startup will be toggled on if the 'SearchbarIsEnabledOnStartup' (Allow the Search bar at Windows startup) policy is enabled.\r\nIf the 'SearchbarIsEnabledOnStartup' is disabled or not configured, the option to enable the search bar at startup will be toggled off.\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge \"More tools\" menu. Users can launch the search bar from \"More tools\".\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge jump list menu. Users can launch the search bar from the Microsoft Edge jump list menu.\r\nThe search bar can be turned off by the \"Quit\" option in the System tray or by closing the search bar from the 3 dot menu. The search bar will be restarted on system reboot if auto-start is enabled.\r\n\r\n\r\nIf you disable this policy:\r\nThe search bar will be disabled for all profiles.\r\nThe option to launch the search bar from Microsoft Edge \"More tools\" menu will be disabled.\r\nThe option to launch the search bar from Microsoft Edge jump list menu will be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"74c8b08fdbbefbbb":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (User)","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\r\n\r\nDisabling JavaScript optimizations (by setting this policy's value to 2) will mean that Microsoft Edge may render web content more slowly.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'JavaScriptOptimizerAllowedForSites' (Allow JavaScript optimization on these sites) and 'JavaScriptOptimizerBlockedForSites' (Block JavaScript optimizations on these sites) policies.\r\n\r\nIf you don't configure this policy, JavaScript optimizations are enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowJavaScriptOptimizer (1) = Enable advanced JavaScript optimizations on all sites\r\n\r\n* BlockJavaScriptOptimizer (2) = Disable advanced JavaScript optimizations on all sites\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_1","displayName":"Enabled","description":null,"helpText":null}]},"74f4129bd126505b":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation","displayName":"Set the roaming profile directory (User)","description":"Configures the directory to use to store the roaming copy of profiles.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory to store a roaming copy of the profiles, as long as you've also enabled the 'RoamingProfileSupportEnabled' (Enable using roaming copies for Microsoft Edge profile data) policy. If you disable the 'RoamingProfileSupportEnabled' policy or don't configure it, the value stored in this policy isn't used.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables you can use.\r\n\r\nIf you don't configure this policy, the default roaming profile path is used.\r\n\r\nExample value: ${roaming_app_data}\\edge-profile","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"744e11105f5c4581":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended","displayName":"Show the Reload in Internet Explorer mode button in the toolbar (User)","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button will only be shown on the toolbar when the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or if the user has chosen to enable \"Allow sites to be reloaded in Internet Explorer mode\".\r\n\r\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"74fb111d571858cb":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings","displayName":"Print preview sticky settings (User)","description":"Specifies whether print preview should apply last used settings for Microsoft Edge PDF and webpages.\r\n\r\nIf you set this policy to 'EnableAll' or don't configure it, Microsoft Edge applies the last used print preview settings for both PDF and webpages.\r\n\r\nIf you set this policy to 'DisableAll', Microsoft Edge doesn't apply the last used print preview settings for both PDF and webpages.\r\n\r\nIf you set this policy to 'DisablePdf', Microsoft Edge doesn't apply the last used print preview settings for PDF printing and retains it for webpages.\r\n\r\nIf you set this policy to 'DisableWebpage', Microsoft Edge doesn't apply the last used print preview settings for webpage printing and retain it for PDF.\r\n\r\nThis policy is only available if you enable or don't configure the 'PrintingEnabled' (Enable printing) policy.\r\n\r\nPolicy options mapping:\r\n\r\n* EnableAll (0) = Enable sticky settings for PDF and Webpages\r\n\r\n* DisableAll (1) = Disable sticky settings for PDF and Webpages\r\n\r\n* DisablePdf (2) = Disable sticky settings for PDF\r\n\r\n* DisableWebpage (3) = Disable sticky settings for Webpages\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"745685b2bfd6a472":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinserbia","displayName":"Serbian (Latin, Serbia) (User)","description":"Enables the editing language \"Serbian (Latin, Serbia)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinserbia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinserbia_1","displayName":"Enabled","description":null,"helpText":null}]},"74de8365cb95d6fa":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_l_workflowsig","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_l_workflowsig_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_l_workflowsig_1","displayName":"True","description":null,"helpText":null}]},"749ca78998595e8e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_donotallowexpiredcertificateswhenvalidatingsignatures","displayName":"Do not allow expired certificates when validating signatures (User)","description":"This policy setting allows you to configure Office 2016 applications to accept expired digital certificates during verification of digital signatures.\r\n\r\nIf you enable or do not configure this policy setting, Office 2016 applications display digital signatures created with expired certificates as invalid.\r\n\r\nIf you disable this policy setting, Office 2016 applications treat expired certificates as valid.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_donotallowexpiredcertificateswhenvalidatingsignatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_donotallowexpiredcertificateswhenvalidatingsignatures_1","displayName":"Enabled","description":null,"helpText":null}]},"747000fc265af658":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_allowmixofpolicyanduserlocations","displayName":"Allow mix of policy and user locations (User)","description":"This policy setting controls whether trusted locations can be defined by users, the Office Customization Tool (OCT), and Group Policy, or if they must be defined by Group Policy alone.\r\n \r\nIf you enable this policy setting, users can specify any location as a trusted location, and a computer can have a combination of user-created, OCT-created, and Group Policy-created trusted locations.\r\n \r\nIf you disable this policy setting, all trusted locations that are not created by Group Policy are disabled and users cannot create new trusted locations in the Trust Center.\r\n \r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled.\r\n \r\nNote - InfoPath 2016 and Outlook 2016 do not recognize trusted locations, and therefore are unaffected by this policy setting.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_allowmixofpolicyanduserlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_allowmixofpolicyanduserlocations_1","displayName":"Enabled","description":null,"helpText":null}]},"74cc68ea15056845":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18","displayName":"Trusted Location #18 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_1","displayName":"Enabled","description":null,"helpText":null}]},"7479e087266e6fea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_sharedthemespath","displayName":"Shared themes path (User)","description":"Specifies the location of workgroup themes.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_sharedthemespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_sharedthemespath_1","displayName":"Enabled","description":null,"helpText":null}]},"7418d8733354e5c4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_defaultserversanddataformeetingworkspaces_l_defaultserver","displayName":"Default server: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f77040df-7dd2-4916-b6a0-5ef962686d4e","categoryName":"Meeting Workspace","options":null},"74002feb76632895":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverlkgurl","displayName":"Exclude the last known goode URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverlkgurl_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverlkgurl_1","displayName":"True","description":null,"helpText":null}]},"744afc79ed07c488":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_disablewebcalintegration","displayName":"Do not include Internet Calendar integration in Outlook (User)","description":"This policy setting allows you to determine whether or not you want to include Internet Calendar integration in Outlook. The Internet Calendar feature in Outlook enables users to publish calendars online (using the webcal:// protocol) and subscribe to calendars that others have published. When users subscribe to an Internet calendar, Outlook queries the calendar at regular intervals and downloads any changes as they are posted. \r\n\r\nIf you enable this policy setting, all Internet calendar functionality in Outlook is disabled. \r\n\r\nIf you disable or do not configure this policy setting, Outlook allows users to subscribe to Internet calendars.","helpText":"","infoUrls":[],"categoryId":"060e7533-6c2f-4ed1-9173-f3de58de4bed","categoryName":"Internet Calendars","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_disablewebcalintegration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_disablewebcalintegration_1","displayName":"Enabled","description":null,"helpText":null}]},"74ae66122cca4a84":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_powerpointdesigner_l_powerpointdesigneroptions_l_powerpointdesigneroptions","displayName":"PowerPoint Designer options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"77ca5e78-a1fe-456e-9814-034b1ea2658d","categoryName":"PowerPoint Designer","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_powerpointdesigner_l_powerpointdesigneroptions_l_powerpointdesigneroptions_0","displayName":"Disable PowerPoint Designer","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_powerpointdesigner_l_powerpointdesigneroptions_l_powerpointdesigneroptions_73187","displayName":"Enable PowerPoint Designer","description":null,"helpText":null}]},"74c7e721ba894c6a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders47","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders47_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders47_1","displayName":"True","description":null,"helpText":null}]},"749ebe06d1f21bd4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},"747b89de0d0fc455":{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user","displayName":"Point and Print Restrictions (User)","description":"This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain.\n\n If you enable this policy setting:\n -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made.\n -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print, or when printer connection drivers need to be updated.\n\n If you do not configure this policy setting:\n -Windows Vista client computers can point and print to any server.\n -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print.\n -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated.\n -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print.\n\n If you disable this policy setting:\n -Windows Vista client computers can create a printer connection to any server using Point and Print.\n -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print.\n -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated.\n -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print.\n -The \"Users can only point and print to computers in their forest\" setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-pointandprintrestrictions-user"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_1","displayName":"Enabled","description":null,"helpText":null}]},"740ccef8deab828e":{"id":"user_vendor_msft_policy_config_start_hideapplist","displayName":"Hide App List (User)","description":"Setting the value of this policy to 1 or 2 collapses the app list. Setting the value of this policy to 3 removes the app list entirely. Setting the value of this policy to 2 or 3 disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideapplist"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_hideapplist_0","displayName":"None.","description":"None.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hideapplist_1","displayName":"Hide all apps list.","description":"Hide all apps list.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hideapplist_2","displayName":"Hide all apps list, and Disable \"Show app list in Start menu\" in Settings app.","description":"Hide all apps list, and Disable \"Show app list in Start menu\" in Settings app.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hideapplist_3","displayName":"Hide all apps list, remove all apps button, and Disable \"Show app list in Start menu\" in Settings app.","description":"Hide all apps list, remove all apps button, and Disable \"Show app list in Start menu\" in Settings app.","helpText":null}]},"7402f593f68f7d59":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral","displayName":"Numeral (User)","description":"Used for complex scripts. Specifies if numerals shall be displayed as Arabic, Hindi, Context, or System numerals. ","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral_1","displayName":"Enabled","description":null,"helpText":null}]},"74a766325fa3cc81":{"id":"user_vendor_msft_policy_config_word16v3~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_acronyms","displayName":"Remove the Acronyms command from the ribbon (User)","description":"This policy setting allows you to remove the Acronyms command from the ribbon. The Acronyms command appears on the References tab.\r\n\r\nIf you enable this policy setting, the Acronyms command is removed from the ribbon. Users won't be able to add the Acronyms command to the ribbon manually. Therefore users won't be able to use the Acronyms feature.\r\n\r\nIf you disable or don't configure this policy setting, the Acronyms command appears on the ribbon.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v3~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_acronyms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v3~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_acronyms_1","displayName":"Enabled","description":null,"helpText":null}]},"7458f6a9415bf659":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_action_type","displayName":"Action","description":"Specifies the action the rule enforces to block or allow network traffic.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_action_type_0","displayName":"Block","description":"Block","helpText":null},{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_action_type_1","displayName":"Allow","description":"Allow","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/75.json b/public/intune-definitions/75.json new file mode 100644 index 000000000000..3119971535fb --- /dev/null +++ b/public/intune-definitions/75.json @@ -0,0 +1 @@ +{"75d067216c363f00":{"id":"ade_setupassistant_privacy","displayName":"Privacy","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_privacy_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_privacy_1","displayName":"Show","description":null,"helpText":null}]},"757dfa5b399540d2":{"id":"com.apple.applicationaccess_allowfindmydevice","displayName":"Allow Find My Device","description":"If false, disables Find My Device in the Find My app. Requires a supervised device. Available in iOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfindmydevice_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfindmydevice_true","displayName":"True","description":null,"helpText":null}]},"753d49342eeea5c1":{"id":"com.apple.applicationaccess_ratingtvshowsnz","displayName":"Rating TV Shows - New Zealand","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsnz_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsnz_1","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsnz_2","displayName":"PGR","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsnz_3","displayName":"AO","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsnz_4","displayName":"All","description":null,"helpText":null}]},"752c48d82219ab20":{"id":"com.apple.directoryservice.managed_admapgidattribute","displayName":"AD Map GID Attribute","description":"The map GID to attribute.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"7539ad0eddfeee1a":{"id":"com.apple.ldap.account_ldapsearchsettings_item_ldapsearchsettingdescription","displayName":"LDAP Search Setting Description","description":"The description of this search setting.","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":null},"7589c933633c9f67":{"id":"com.apple.managedclient.preferences_extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions.","description":"Extensions that connect to one of these origins will keep running as long as the port is connected.\nIf unset, the policy's default values are used. These are the app origins that offer SDKs that are known to not offer the possibility to restart a closed connection to a previous state:\n- Smart Card Connector\n- Citrix Receiver (stable, beta, back-up)\n- VMware Horizon (stable, beta)\n\nIf set, the default value list is extended with the newly configured values. The defaults and policy-provided entries will grant the exception to the connecting extensions, as long as the port is connected.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensionextendedbackgroundlifetimeforportconnectionstourls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"757a636aa10ac4ef":{"id":"com.apple.managedclient.preferences_newtabpageapplauncherenabled","displayName":"Hide App Launcher on Microsoft Edge new tab page","description":"By default, the App Launcher is shown every time a user opens a new tab page.\n\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and App Launcher is there for users.\n\nIf you disable this policy, App Launcher doesn't appear and users won't be able to launch M365 apps from Microsoft Edge new tab page via the App Launcher.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpageapplauncherenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpageapplauncherenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpageapplauncherenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"758333ff098edde6":{"id":"com.apple.mcx.timemachine_backupskipsys","displayName":"Backup Skip System","description":"If true, skips system files and folders by default.","helpText":null,"infoUrls":[],"categoryId":"361859d9-1382-47c3-b9ec-9251a62fbb25","categoryName":"Time Machine","options":[{"id":"com.apple.mcx.timemachine_backupskipsys_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx.timemachine_backupskipsys_true","displayName":"True","description":null,"helpText":null}]},"75a187a8f5c24dd7":{"id":"com.apple.mcxprinting_footerfontname","displayName":"Footer Font Name","description":"The footer font name.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"754dc1c5f3075cdd":{"id":"com.apple.systemconfiguration_proxies_gopherproxy","displayName":"Gopher Proxy","description":"The host name or IP address for the gopher proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"754e8f8549d9dd1e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates.","description":"This policy determines the level of access users have when managing CA certificates in Microsoft Edge.\n\nSetting the policy to UserOnly (1) allows users to manage only user-imported certificates. Trust settings for built-in certificates cannot be changed.\n\nSetting the policy to None (2) lets users view certificates but not manage them.\n\nNote: The certificate management experience is available starting in Microsoft Edge version 136.\n\nPolicy options mapping:\n\n* All (0) = Allow users to manage all certificates\n\n* UserOnly (1) = Allow users to manage user certificates\n\n* None (2) = Disallow users from managing certificates\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed_all","displayName":"Allow users to manage all certificates","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed_useronly","displayName":"Allow users to manage user certificates","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed_none","displayName":"Disallow users from managing certificates","description":null,"helpText":null}]},"75b9ae2b433fa4b3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled","displayName":"Machine learning powered autofill suggestions","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and isn't used elsewhere.\n\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\n\nIf you disable this policy, machine learning-powered autofill suggestions aren't shown, and autofill no longer uses cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.\n\nThis policy will be disabled if you disable \"AutofillAddressEnabled\".","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"75bfed621f7f710b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.immersivereadergrammartoolsenabled","displayName":"Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (Obsolete)","description":"This policy is obsoleted because Grammar Tools is deprecated from Microsoft Edge. This policy can't work in Microsoft Edge version 126. Enables the Grammar Tools feature within Immersive Reader in Microsoft Edge.\nThis helps improve reading comprehension by splitting words into syllables and highlighting nouns, verbs, adverbs, and adjectives.\n\nIf you enable this policy or don't configure it, the Grammar Tools option shows up within Immersive Reader.\nIf you disable this policy, users can't access the Grammar Tools feature within Immersive Reader.","helpText":null,"infoUrls":[],"categoryId":"8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","categoryName":"Immersive Reader settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.immersivereadergrammartoolsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.immersivereadergrammartoolsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"75e2d69af2c8b6fd":{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation","displayName":"Block launching desktop apps associated with a URI scheme","description":"This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a URI scheme launched by a Windows Store app might compromise the system by launching a desktop app.\r\n\r\nIf you enable this policy setting, Windows Store apps cannot open URIs in the default desktop app for a URI scheme; they can open URIs only in other Windows Store apps.\r\n\r\nIf you disable or do not configure this policy setting, Windows Store apps can open URIs in the default desktop app for a URI scheme.\r\n\r\nNote: Enabling this policy setting does not block Windows Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeblockprotocolelevation"],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":[{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation_1","displayName":"Enabled","description":null,"helpText":null}]},"75fd34236d359197":{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenariodatasizelimitpolicy_wdidpsscenariodatasizelimitpolicyvalue","displayName":"Scenario data size limit (in MB)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"758fc431dc0dd15f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist","displayName":"Clear Browsing Data on Exit","description":"Configures a list of browsing data types that should be deleted when the user closes all browser windows. The available data types are browsing history (browsing_history), download history (download_history), cookies (cookies_and_other_site_data), cache(cached_images_and_files), autofill (autofill), passwords (password_signin), site settings (site_settings) and hosted apps data (hosted_app_data). This policy does not take precedence over AllowDeletingBrowserHistory.\r\n\r\nThis policy requires the SyncDisabled policy to be set to true, otherwise it will be ignored. If this policy is set at platform level, Sync should be disabled at platform level. If this policy is set at user level, Sync should be disabled for that user in order for this policy to take effect.\r\n\r\nIf Google Chrome does not exit cleanly (for example, if the browser or the OS crashes), the browsing data will be cleared the next time the profile is loaded.\r\n\r\nExample value:\r\n\r\nbrowsing_history\r\ndownload_history\r\ncookies_and_other_site_data\r\ncached_images_and_files\r\npassword_signin\r\nautofill\r\nsite_settings\r\nhosted_app_data","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_1","displayName":"Enabled","description":null,"helpText":null}]},"758077cad0c051ec":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports","displayName":"Explicitly allowed network ports","description":"There is a list of restricted ports built into Google Chrome. Connections to these ports will fail. This setting permits bypassing that list. The value is a comma-separated list of zero or more ports that outgoing connections will be permitted on.\r\n\r\nPorts are restricted to prevent Google Chrome being used as a vector to exploit various network vulnerabilities. Setting this policy may expose your network to attacks. This policy is intended as a temporary workaround for errors with code \"ERR_UNSAFE_PORT\" while migrating a service running on a blocked port to a standard port (ie. port 80 or 443).\r\n\r\nMalicious websites can easily detect that this policy is set, and for what ports, and use that information to target attacks.\r\n\r\nEach port here is labelled with a date that it can be unblocked until. After that date the port will be restricted regardless of this setting.\r\n\r\nLeaving the value empty or unset means that all restricted ports will be blocked. If there is a mixture of valid and invalid values, the valid ones will be applied.\r\n\r\nThis policy overrides the \"--explicitly-allowed-ports\" command-line option.\r\n\r\nExample value:\r\n\r\n10080","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_1","displayName":"Enabled","description":null,"helpText":null}]},"7552d24245dac9b5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior","displayName":"Intranet Redirection Behavior","description":"This policy configures behavior for intranet redirection via DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nIf this policy is not set, the browser will use the default behavior of DNS interception checks and intranet redirect suggestions. In M88, they are enabled by default but will be disabled by default in the future release.\r\n\r\nDNSInterceptionChecksEnabled is a related policy that may also disable DNS interception checks; this policy is a more flexible version which may separately control intranet redirection infobars and may be expanded in the future.\r\nIf either DNSInterceptionChecksEnabled or this policy requests to disable interception checks, the checks will be disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"7510c9f831bd2435":{"id":"device_vendor_msft_policy_config_credentialproviders_allowpinlogon","displayName":"Turn on convenience PIN sign-in","description":"This policy setting allows you to control whether a domain user can sign in using a convenience PIN.\n\nIf you enable this policy setting, a domain user can set up and sign in with a convenience PIN.\n\nIf you disable or don't configure this policy setting, a domain user can't set up and use a convenience PIN.\n\nNote: The user's domain password will be cached in the system vault when using this feature.\n\nTo configure Windows Hello for Business, use the Administrative Template policies under Windows Hello for Business.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialproviders#credentialproviders-allowpinlogon"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_credentialproviders_allowpinlogon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialproviders_allowpinlogon_1","displayName":"Enabled","description":null,"helpText":null}]},"75729148cd115df7":{"id":"device_vendor_msft_policy_config_defender_allowonaccessprotection","displayName":"Allow On Access Protection","description":"Allows or disallows Windows Defender On Access Protection functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowonaccessprotection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowonaccessprotection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"753d9e845106dc0d":{"id":"device_vendor_msft_policy_config_education_iseducationenvironment","displayName":"Is Education Environment","description":"This policy setting allows tenant to control whether to declare this OS as an education environment","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Education#iseducationenvironment"],"categoryId":"5e692f3e-1911-43b0-9192-64c2e65b7c10","categoryName":"Education","options":[{"id":"device_vendor_msft_policy_config_education_iseducationenvironment_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_education_iseducationenvironment_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"75ee8bca030aacbf":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure","displayName":"Prevent Login With Failure","description":"Prevent user login when a failure occurs while attaching an FSLogix container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\PreventLoginWithFailure\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure_1","displayName":"Enabled","description":null,"helpText":null}]},"75f9f914ec351ef9":{"id":"device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode","displayName":"Enable global window list in Internet Explorer mode","description":"This setting allows Internet Explorer mode to use the global window list that enables sharing state with other applications.\nThe setting will take effect only when Internet Explorer 11 is disabled as a standalone browser.\n\nIf you enable this policy, Internet Explorer mode will use the global window list.\n\nIf you disable or don’t configure this policy, Internet Explorer mode will continue to maintain a separate window list.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2102921\nTo learn more about disabling Internet Explorer 11 as a standalone browser, see https://go.microsoft.com/fwlink/?linkid=2168340","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-enableglobalwindowlistiniemode"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_1","displayName":"Enabled","description":null,"helpText":null}]},"7580638385499356":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806","displayName":"Launching programs and unsafe files","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1","displayName":"Prompt","description":null,"helpText":null}]},"75c9cb59304e8151":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowaccesstodatasources"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"75070277acfc3ebc":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"75343d380560035b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword","displayName":"Default search provider keyword (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"750f1f98cd1e0e10":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"75a0b209a7b52e51":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls","displayName":"Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with.","description":"Configure the list of URL patterns for sites that the browser will attempt to perform the Token Binding protocol with.\r\nFor the domains on this list, the browser will send the Token Binding ClientHello in the TLS handshake (See https://tools.ietf.org/html/rfc8472).\r\nIf the server responds with a valid ServerHello response, the browser will create and send Token Binding messages on subsequent https requests. See https://tools.ietf.org/html/rfc8471 for more info.\r\n\r\nIf this list is empty, Token Binding will be disabled.\r\n\r\nThis policy is only available on Windows 10 devices with Virtual Secure Mode capability.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\n[*.]mydomain2.com\r\n[*.].mydomain2.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"755c8122c5f5c811":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_grooveexe70","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_grooveexe70_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_grooveexe70_1","displayName":"True","description":null,"helpText":null}]},"75ff968e85794d82":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideupdatenotifications","displayName":"Hide Update Notifications","description":"This policy setting allows you to hide notifications to users that updates to Office are available.\r\n\r\nWhen automatic updates are enabled for Office, in most cases updates are applied automatically in the background without any user input. However, updates can’t be applied if an Office program is open. If an Office program is open, other attempts are made to apply the updates at a later time. If, after several days, updates haven’t been applied, only then will users see a notification that an update to Office is available.\r\n\r\nIf you enable this policy setting, users won’t see notifications that updates to Office are ready to be applied.\r\n\r\nIf you disable or don’t configure this policy setting, users will see notifications that updates to Office are ready to be applied.\r\n\r\nThis policy setting does not apply to notifications associated with update deadlines.\r\n\r\nImportant: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideupdatenotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideupdatenotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"7502a7601b4979c5":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmblockoptout","displayName":"Prevent users from redirecting their Windows known folders to their PC","description":"This setting forces users to keep their Documents, Pictures, and Desktop folders directed to OneDrive.\r\n\r\nIf you enable this setting, the \"Stop protecting\" button in the \"Your IT department wants you to protect your important folders\" window will be disabled and users will receive an error if they try to stop syncing a known folder.\r\n\r\nIf you disable or do not configure this setting, users can choose to redirect their known folders back to their PC. ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmblockoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmblockoptout_1","displayName":"Enabled","description":null,"helpText":null}]},"75d9a9d1abc942f4":{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin","displayName":"Turn off the display (plugged in)","description":"This policy setting allows you to specify the period of inactivity before Windows turns off the display.\n\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the display.\n\nIf you disable or do not configure this policy setting, users control this setting.\n\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the display from turning off. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-displayofftimeoutpluggedin"],"categoryId":"01da0c26-af30-4eb2-a899-7d5e7ecb9738","categoryName":"Video and Display Settings","options":[{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},"75b095deb45a29b8":{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout","displayName":"Specify idle Timeout","description":"This policy setting configures the maximum time in milliseconds remote shell will stay open without any user activity until it is automatically deleted.\n\nAny value from 0 to 0x7FFFFFFF can be set. A minimum of 60000 milliseconds (1 minute) is used for smaller values.\n\nIf you enable this policy setting, the server will wait for the specified amount of time since the last received message from the client before terminating the open shell.\n\nIf you do not configure or disable this policy setting, the default value of 900000 or 15 min will be used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifyidletimeout"],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"759a269bd8621c09":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_outlook","displayName":"Outlook: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"758d6c0b585cbccc":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled","displayName":"Enable administrator updates","description":"Allows administrator updates to be visible to and applied to the client computer. \r\n \r\nIf set to 1 (enabled for WSUS/SCCM), then administrator updates delivered through WSUS and SCCM will be available to Active Direcotry (AD) joined client machines. \r\n \r\nIf set to 2 (enabled for WSUS/SCCM and Microsoft Updates/Intune), then administrator updates delivered through either WSUS/SCCM or Microsoft Updates/Intune will be available to either Active Directory (AD) or Azure Active Directory (Azure AD) joined machines that are enrolled in Windows Update for Business (WUfB). Note that the WUfB AllowMUUpdateServicePolicy must be turned on too.\r\n\r\nIf set to 0 (disabled) or missing entirely, then administrator updates will not be available to the machine. \r\n \r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7525dd224026f347":{"id":"linux_customconfig_script","displayName":"Execution Script","description":"Select the file containing the script to execute.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"categoryId":"36716a4c-cedb-47bb-8f4b-5783fedc7c47","categoryName":null,"options":null},"752076fcda3258bc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]},"759fa671a29af8d0":{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1","displayName":"Specify a default color (User)","description":"This policy setting controls the default color for window frames when the user does not specify a color. \r\n\r\nIf you enable this policy setting and specify a default color, this color is used in glass window frames, if the user does not specify a color. \r\n\r\nIf you disable or do not configure this policy setting, the default internal color is used, if the user does not specify a color. \r\n\r\nNote: This policy setting can be used in conjunction with the \"Prevent color changes of window frames\" setting, to enforce a specific color for window frames that cannot be changed by users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdefaultcolorizationcolor-1"],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":[{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_1","displayName":"Enabled","description":null,"helpText":null}]},"75c08bbcddeccd38":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_2","displayName":"Software Installation (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstallationusers-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_2_1","displayName":"Enabled","description":null,"helpText":null}]},"7513fbfe61474482":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renameconnection","displayName":"Ability to rename LAN connections or remote access connections available to all users (User)","description":"Determines whether users can rename LAN or all user remote access connections.\r\n\r\nIf you enable this setting, the Rename option is enabled for all users. Users can rename connections by clicking the icon representing a connection or by using the File menu.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Rename option for LAN and all user remote access connections is disabled for all users (including Administrators and Network Configuration Operators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf this setting is not configured, only Administrators and Network Configuration Operators have the right to rename LAN or all user remote access connections.\r\n\r\nNote: When configured, this setting always takes precedence over the \"Ability to rename LAN connections\" and \"Ability to rename all user remote access connections\" settings.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to rename remote access connections.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renameconnection"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renameconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renameconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"75c94877d1ab1723":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_1","displayName":"Disable text prediction (User)","description":"Prevents the Touch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista) from providing text prediction suggestions. This policy applies for both the on-screen keyboard and the handwriting tab when the feature is available for the current input area and input language.\r\n\r\nTouch Keyboard and Handwriting panel enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will not provide text prediction suggestions. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will provide text prediction suggestions. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will provide text prediction suggestions. Users will be able to configure this setting on the Text Completion tab in Input Panel Options in Windows 7 and Windows Vista.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-prediction-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_1_1","displayName":"Enabled","description":null,"helpText":null}]},"7540a29f9fe855ec":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook","displayName":"Microsoft Outlook 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Outlook 2016.\r\nBy default, the user settings of Microsoft Outlook 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016outlook"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook_1","displayName":"Enabled","description":null,"helpText":null}]},"754b957551fd2420":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project","displayName":"Microsoft Project 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Project 2016.\r\nBy default, the user settings of Microsoft Project 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016project"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project_1","displayName":"Enabled","description":null,"helpText":null}]},"7554d8c3199bcb4c":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpports","displayName":"UDP Ports (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"7558f254700805eb":{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_localfolderpath_edit","displayName":"Work Folders Local Path: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"87667b72-85ce-48c2-8023-e6db7f5fe739","categoryName":"Work Folders","options":null},"75fe592ce22892a6":{"id":"user_vendor_msft_policy_config_browser_preventcerterroroverrides","displayName":"Prevent Cert Error Overrides (User)","description":"Web security certificates are used to ensure a site your users go to is legitimate, and in some circumstances encrypts the data. With this policy, you can specify whether to prevent users from bypassing the security warning to sites that have SSL errors. If enabled, overriding certificate errors are not allowed. If disabled or not configured, overriding certificate errors are allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventcerterroroverrides"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_preventcerterroroverrides_0","displayName":"Disabled","description":"Allowed/turned on. Override the security warning to sites that have SSL errors.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventcerterroroverrides_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},"759803c30e872645":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled","displayName":"Allows origin-keyed agent clustering by default. (User)","description":"This policy allows origin-keyed agent clustering by default.\r\n\r\nThe Origin-Agent-Cluster HTTP header controls whether a document is\r\nisolated in an origin-keyed agent cluster, or in a site-keyed agent\r\ncluster. This has security implications since an origin-keyed agent\r\ncluster allows isolating documents by origin. The developer-visible\r\nconsequence of this is that the document.domain accessor can no longer\r\nbe set.\r\n\r\nThe default behaviour - when no Origin-Agent-Cluster header has been set -\r\nchanges in M111 from site-keyed to origin-keyed.\r\n\r\nIf this policy is enabled or not set, the browser will follow this\r\nnew default from that version on.\r\n\r\nIf this policy is disabled this change is reversed and\r\ndocuments without Origin-Agent-Cluster headers will be assigned to\r\nsite-keyed agent clusters. As a consequence, the document.domain accessor\r\nremains settable by default. This matches the legacy behaviour.\r\n\r\nSee https://developer.chrome.com/blog/immutable-document-domain/ for\r\nadditional details.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"75cd6095a282667a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"75edc9a653b35645":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"759c91e86f3777b9":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"758e131f4615691c":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"75561d4c79b05246":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"7529515296975d46":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (User) (obsolete)","description":"This policy lets you enhance the security state in Microsoft Edge.\r\n\r\nIf you set this policy to 'StandardMode', the enhanced mode will be turned off and Microsoft Edge will fallback to its standard security mode.\r\n\r\nIf you set this policy to 'BalancedMode', the security state will be in balanced mode.\r\n\r\nIf you set this policy to 'StrictMode', the security state will be in strict mode.\r\n\r\nIf you set this policy to 'BasicMode', the security state will be in basic mode.\r\n\r\nNote: Sites that use WebAssembly (WASM) are not supported on 32-bit systems when 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) is enabled. If you require access to a site that uses WASM, consider adding it to your exception list as described in https://go.microsoft.com/fwlink/?linkid=2183321.\r\n\r\nStarting in Microsoft Edge 113, 'BasicMode' is deprecated and is treated the same as 'BalancedMode'. It won't work in Microsoft Edge version 116.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895\r\n\r\nPolicy options mapping:\r\n\r\n* StandardMode (0) = Standard mode\r\n\r\n* BalancedMode (1) = Balanced mode\r\n\r\n* StrictMode (2) = Strict mode\r\n\r\n* BasicMode (3) = (Deprecated) Basic mode\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},"75d15753387601b3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_webfoldersmanagingpairsofwebpagesandfolders","displayName":"Web Folders: Managing pairs of Web pages and folders (User)","description":"Specifies how a Web page and folder pair is to be displayed and managed by Windows.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_webfoldersmanagingpairsofwebpagesandfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_webfoldersmanagingpairsofwebpagesandfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"756ae75e9eec4ecd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache8","displayName":"Workflow Cache 8 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache8_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache8_1","displayName":"Enabled","description":null,"helpText":null}]},"755df4c89bf54d8d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey04_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"75d82875f1e3b4d3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_powerpointdesigner_l_powerpointdesigneroptions","displayName":"PowerPoint Designer Options (User)","description":"This policy setting allows an administrator to enable or disable PowerPoint Designer","helpText":"","infoUrls":[],"categoryId":"5838ed03-2902-4931-92cf-e349ab09c9b8","categoryName":"PowerPoint Designer","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_powerpointdesigner_l_powerpointdesigneroptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_powerpointdesigner_l_powerpointdesigneroptions_1","displayName":"Enabled","description":null,"helpText":null}]},"75d4d852a48439d0":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_eas_l_enableeasaccountcreation","displayName":"Enable Exchange ActiveSync account creation in the Outlook account setup UI (User)","description":"This policy setting determines whether the Exchange ActiveSync button will be displayed in the account setup UI.\r\n\r\nIf you enable this policy setting, the Exchange ActiveSync button will be displayed in Outlook account setup UI.","helpText":"","infoUrls":[],"categoryId":"b161cf66-abfa-4a36-a9ac-c20ca60594e0","categoryName":"Exchange ActiveSync","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_eas_l_enableeasaccountcreation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_eas_l_enableeasaccountcreation_1","displayName":"Enabled","description":null,"helpText":null}]},"755931db18c00a6b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtasks_l_pjnewtasks22","displayName":"New tasks (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtasks_l_pjnewtasks22_0","displayName":"Start on Project Start Date","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtasks_l_pjnewtasks22_1","displayName":"Start on Current Date","description":null,"helpText":null}]},"7523f9640b6a5bf7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_defaultfilelocation","displayName":"Default File Location (User)","description":"Defines the default path to documents.","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_defaultfilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_defaultfilelocation_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/76.json b/public/intune-definitions/76.json new file mode 100644 index 000000000000..425f9c58b189 --- /dev/null +++ b/public/intune-definitions/76.json @@ -0,0 +1 @@ +{"76e07cd7f589526c":{"id":"com.android.devicerestrictionpolicy.passwordminimumnonlettercharacters","displayName":"Number of non-letter characters required","description":"Enter the number of non-letters (anything other than letters in the alphabet) the password must have, between 1 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"7633a49d3f398ffe":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_lcid","displayName":"Microsoft Outlook LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"76151c731d29c40e":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app","displayName":"Windows App","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"761b4587555dd427":{"id":"com.apple.managedclient.preferences_nativemessagingblocklist","displayName":"Configure native messaging block list","description":"Specifies which native messaging hosts that shouldn't be used.\n\nUse '*' to block all native messaging hosts unless they are explicitly listed in the allow list.\n\nIf you don't configure this policy, Microsoft Edge will load all installed native messaging hosts.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#nativemessagingblocklist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"76b7924b5a4d34e4":{"id":"com.apple.managedclient.preferences_webappinstallforcelist_item_url","displayName":"URL","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"76e70855b04583b2":{"id":"com.apple.systempreferences_disabledpreferencepanes","displayName":"Disabled Preference Panes","description":"The list of disabled System Preferences panes.","helpText":null,"infoUrls":[],"categoryId":"c7c1ed5a-a2ec-4237-bbf1-d5723f94d033","categoryName":"System Preferences","options":null},"7649926b8952c6b1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled","displayName":"Search Filters Enabled","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions are shown.\n\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\n\nIf you disable this policy, the autosuggestion dropdown can't display the ribbon of available filters.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7680b0193a8a4408":{"id":"device_vendor_msft_policy_config_admx_rpc_rpcignoredelegationfailure_rpcignoredelegationfailurelist","displayName":"Ignoring Delegation Failure:","description":null,"helpText":"","infoUrls":[],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":[{"id":"device_vendor_msft_policy_config_admx_rpc_rpcignoredelegationfailure_rpcignoredelegationfailurelist_0","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_rpc_rpcignoredelegationfailure_rpcignoredelegationfailurelist_1","displayName":"On","description":null,"helpText":null}]},"7631f1553da47ae9":{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenarioexecutionpolicy_wdidpsscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenarioexecutionpolicy_wdidpsscenarioexecutionpolicylevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenarioexecutionpolicy_wdidpsscenarioexecutionpolicylevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"76c80e10e29c6e80":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trusted","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-trusted"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trusted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trusted_1","displayName":"Enabled","description":null,"helpText":null}]},"76e96111900cd2f8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_remoteaccesshostdomainlistdesc","displayName":"Configure the required domain names for remote access hosts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"76e24129f0d21178":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist","displayName":"HTTP Allowlist","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as\r\n'[*.]example.com') that will not be upgraded to HTTPS and will not show an\r\nerror interstitial if HTTPS-First Mode is enabled. Organizations can use this\r\npolicy to maintain access to servers that do not support HTTPS, without\r\nneeding to disable HTTPS Upgrades and/or HTTPS-First Mode.\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their\r\nA-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead,\r\nHTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their\r\nspecific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"769bbfff7e218363":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled","displayName":"Allow using Google Assistant on the web, e.g. to enable changing passwords automatically","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"762507073a90f669":{"id":"device_vendor_msft_policy_config_experience_allowcortana","displayName":"Allow Cortana","description":"Specifies whether Cortana is allowed on the device. If you enable or don’t configure this setting, Cortana is allowed on the device. If you disable this setting, Cortana is turned off. When Cortana is off, users will still be able to use search to find items on the device. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowcortana"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowcortana_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowcortana_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"76f3fbef4fa15647":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_numberofpreviouslogonstocache","displayName":"Interactive Logon Number Of Previous Logons To Cache","description":"Interactive logon: Number of previous logons to cache (in case domain controller is not available) Each unique user's logon information is cached locally so that, in the event that a domain controller is unavailable during subsequent logon attempts, they are able to log on. The cached logon information is stored from the previous logon session. If a domain controller is unavailable and a user's logon information is not cached, the user is prompted with this message: There are currently no logon servers available to service the logon request. In this policy setting, a value of 0 disables logon caching. Any value above 50 only caches 50 logon attempts. Windows supports a maximum of 50 cache entries and the number of entries consumed per user depends on the credential. For example, a maximum of 50 unique password user accounts can be cached on a Windows system, but only 25 smart card user accounts can be cached because both the password information and the smart card information are stored. When a user with cached logon information logs on again, the user’s individual cached information is replaced. Default: Windows Server 2008: 25 All Other Versions: 10\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_numberofpreviouslogonstocache"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"76cd1184dbdf4bc5":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowstorageofpasswordsandcredentialsfornetworkauthentication","displayName":"Network Access Do Not Allow Storage Of Passwords And Credentials For Network Authentication","description":"Network access: Do not allow storage of passwords and credentials for network authentication This security setting determines whether Credential Manager saves passwords and credentials for later use when it gains domain authentication. If you enable this setting, Credential Manager does not store passwords and credentials on the computer. If you disable or do not configure this policy setting, Credential Manager will store passwords and credentials on this computer for later use for domain authentication. Note: When configuring this security setting, changes will not take effect until you restart Windows. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_donotallowstorageofpasswordsandcredentialsfornetworkauthentication"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"76c178d327068ee3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup","displayName":"Action to take on startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"7664ca6e31bd7ead":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting","displayName":"Control use of the WebHID API","description":"Setting the policy to 3 lets websites ask for access to HID devices. Setting the policy to 2 denies access to HID devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.\r\n\r\nThis policy can be overridden for specific url patterns using the 'WebHidAskForUrls' (Allow the WebHID API on these sites) and 'WebHidBlockedForUrls' (Block the WebHID API on these sites) policies.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockWebHid (2) = Do not allow any site to request access to HID devices via the WebHID API\r\n\r\n* AskWebHid (3) = Allow sites to ask the user to grant access to a HID device\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"76222ca4b9abd657":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended","displayName":"Edge Wallet E-Tree Enabled","description":"The Edge Wallet E-Tree feature in Microsoft Edge allows users to plant a E-Tree for their own.\r\n\r\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\r\n\r\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"76c69949654af552":{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass","displayName":"Allow users to bypass Enhanced Security Mode","description":"Microsoft Edge will let users bypass Enhanced Security Mode on a site via Settings page or PageInfo flyout. This policy lets you configure whether users can bypass Enhanced Security Mode.\r\n\r\nIf you disable this policy, Microsoft Edge won't allow users to bypass Enhanced Security Mode.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will allow users to bypass Enhanced Security Mode.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_1","displayName":"Enabled","description":null,"helpText":null}]},"7680f1e862d1fe16":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_webrtclocalipsallowedurlsdesc","displayName":"Manage exposure of local IP addressess by WebRTC (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"76af6917874a9e33":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts","displayName":"Allow importing of shortcuts","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Shortcuts aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Shortcuts are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"769926c3b6c9ccb9":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes","displayName":"Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_0","displayName":"Do not send form data or headers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_1","displayName":"Send form data only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_2","displayName":"Send additional headers only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_3","displayName":"Send form data and additional headers","description":null,"helpText":null}]},"7639063b7f5debe2":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winwordexe161","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winwordexe161_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winwordexe161_1","displayName":"True","description":null,"helpText":null}]},"763020ffe976e7bd":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_forceallowtheseapps","displayName":"Let Apps Access Calendar Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"7680c4d5858fff79":{"id":"device_vendor_msft_policy_config_textinput_allowjapanesenonpublishingstandardglyph","displayName":"Allow Japanese Non Publishing Standard Glyph","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the Japanese non-publishing standard glyph. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapanesenonpublishingstandardglyph"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapanesenonpublishingstandardglyph_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapanesenonpublishingstandardglyph_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"763cb5181c4e6a75":{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype","displayName":"Enrollment type (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_1","displayName":"Allow Opt-out","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_3","displayName":"Required","description":null,"helpText":null}]},"76e0aec8a80908d0":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_administratorupdatesenableddropid","displayName":"Microsoft Update Channel","description":"","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_administratorupdatesenableddropid_1","displayName":"WSUS/SCCM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_administratorupdatesenableddropid_2","displayName":"WSUS/SCCM and Microsoft Updates/Intune","description":null,"helpText":null}]},"76060970ad53736f":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_removeoutofsupport","displayName":"Remove out-of-support components during updates","description":"This setting will cause updates to automatically remove all components from all Visual Studio installations that have transitioned to an out-of-support state.\r\n \r\nIf set to 1 (enabled), then the Visual Studio installer will remove all out-of-support components during all subsequent updates. \r\n \r\nIf set to 0 (disabled) or missing entirely, then the remove out-of-support components behavior will respect other locations where this can be configured, such as commandline parameter or the Update Settings dialog.\r\n \r\nThis functionality requires the Visual Studio 2022 version 17.4 installer to be installed on the client machine. \r\n\r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_removeoutofsupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_removeoutofsupport_1","displayName":"Enabled","description":null,"helpText":null}]},"7625f7765530ea7f":{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopc","displayName":"Allow Projection To PC","description":"This policy setting allows you to turn off projection to a PC If you set it to 0, your PC can't be discoverable or projected to over Wi-Fi Direct. If you set it to 1, your PC can be discoverable and projected to over Wi-Fi Direct. The user has an option to turn it always on or off except for manual launch, too.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowprojectiontopc"],"categoryId":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopc_0","displayName":"Projection to PC is not allowed. Always off and the user cannot enable it.","description":"Projection to PC is not allowed. Always off and the user cannot enable it.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopc_1","displayName":"Projection to PC is allowed. Enabled only above the lock screen.","description":"Projection to PC is allowed. Enabled only above the lock screen.","helpText":null}]},"7601c1309d565f45":{"id":"settings_item_mdmoptions","displayName":"MDM Options","description":"A dictionary that contains settings related to the MDM protocol. This setting doesn't support user enrollment. Available in iOS 7 and later, macOS 10.15 and later, and visionOS 2 and later.","helpText":null,"infoUrls":[],"categoryId":"dd68a290-1ba7-470f-afca-339f443a767c","categoryName":"MDM Options","options":null},"76ff337d5ca7e0db":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrocreateshortcutmenufrommacro","displayName":"Database Tools | Macro | Create Shortcut Menu from Macro (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrocreateshortcutmenufrommacro_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrocreateshortcutmenufrommacro_1","displayName":"True","description":null,"helpText":null}]},"7608cab9a7581473":{"id":"user_vendor_msft_policy_config_admx_msi_searchorder_searchorder","displayName":"Search order (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":null},"7640f54ac6a6029c":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word","displayName":"Microsoft Word 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Word 2013.\r\nBy default, the user settings of Microsoft Word 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013word"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word_1","displayName":"Enabled","description":null,"helpText":null}]},"761dab051d10d9a9":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown","displayName":"Pick one of the following combinations (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_3","displayName":"Restrict A and B drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_4","displayName":"Restrict C drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_8","displayName":"Restrict D drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_7","displayName":"Restrict A, B and C drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_15","displayName":"Restrict A, B, C and D drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_67108863","displayName":"Restrict all drives","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_0","displayName":"Do not restrict drives","description":null,"helpText":null}]},"76b14671c9e4efd9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay","displayName":"Maximum fetch delay after a policy invalidation (User)","description":"Setting the policy specifies the maximum delay in milliseconds between receiving a policy invalidation and fetching the new policy from the device management service. Valid values range from 1,000 (1 second) to 300,000 (5 minutes). Values outside this range will be clamped to the respective boundary.\r\n\r\nLeaving the policy unset means Google Chrome uses the default value of 10 seconds.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"765c73932896555f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers","displayName":"Register protocol handlers (User)","description":"","helpText":"","infoUrls":[],"categoryId":"962a2377-ad9a-4654-a526-a77c14152fd7","categoryName":"Content settings","options":null},"762090c36311b2ed":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid_0","displayName":"Scan encrypted macros (default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid_1","displayName":"Scan if anti-virus software available","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid_2","displayName":"Load macros without scanning","description":null,"helpText":null}]},"765de9b39166244a":{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate","displayName":"Internet Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetzonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"7610149fcc1ffd28":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript","displayName":"Allow cut, copy or paste operations from the clipboard via script (User)","description":"This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region.\n\nIf you enable this policy setting, a script can perform a clipboard operation.\n\nIf you select Prompt in the drop-down box, users are queried as to whether to perform clipboard operations.\n\nIf you disable this policy setting, a script cannot perform a clipboard operation.\n\nIf you do not configure this policy setting, a script can perform a clipboard operation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowcopypasteviascript"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_1","displayName":"Enabled","description":null,"helpText":null}]},"765a0553d5ca6c5c":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowsmartscreenie"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"76495b0fd0467215":{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls","displayName":"Block geolocation on these sites (User)","description":"Use this policy to define a list of URL patterns for sites that are blocked from accessing the user's geolocation. These sites also can't prompt the user for location permissions.\r\n\r\nIf you enable this policy, the list you provide determines which sites are blocked from requesting or accessing geolocation.\r\n\r\nIf you disable or don't configure this policy, DefaultGeolocationSetting applies to all sites, if configured. If it's not configured, the user’s personal browser setting is used.\r\n\r\nFor detailed information on valid url patterns, see the documentation on pattern formats: https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"76d0d51924ffe98d":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments (User)","description":"This feature lets hyperlink and address bar URL navigations target specific text on a web page, which will be scrolled to after the web page finishes loading.\r\n​\r\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via a URL will be enabled.​\r\n\r\nIf you disable this policy, web page scrolling to specific text fragments via a URL will be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"76b081e9cd331e3a":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"767fb78d95d77ffb":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended","displayName":"Show Microsoft Rewards experiences (User)","description":"Show Microsoft Rewards experience and notifications.\r\nIf you enable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.\r\n\r\nIf you disable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will not see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be disabled and toggled off.\r\n\r\nIf you don't configure this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"769bc883402ffe5b":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblockedapps","displayName":"Apps blocked by Writing Assistance admin policy (User)","description":"This policy setting allows administrators to specify a list of applications where Writing Assistance will be blocked.\nIf you enable this policy setting, enter one application executable name per line (e.g., notepad.exe). Writing Assistance will be disabled in those applications.\nIf you disable or do not configure this policy setting, Writing Assistance will not be blocked by this policy in any application.\n ","helpText":"","infoUrls":[],"categoryId":"05a6f86f-dab7-4888-97a1-db3457f00974","categoryName":"Writing Assistance","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblockedapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblockedapps_1","displayName":"Enabled","description":null,"helpText":null}]},"76a4019de5b2e130":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07","displayName":"Configure presentation service in PowerPoint and Word 8 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_1","displayName":"Enabled","description":null,"helpText":null}]},"7621ece5d0de4e31":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_donotdisplayhovermenu","displayName":"Do not display Hover Menu (User)","description":"This policy setting allows you to stop the Hover Menu from displaying when a user hovers over a contact’s presence icon or display name with the mouse cursor.\r\n\r\nIf you enable this policy setting, when a user hovers over a contact’s presence icon or display name with the mouse cursor, the Hover Menu will not be displayed.\r\n\r\nIf you disable or do not configure this policy setting, the Hover Menu appears when a user hovers over a contact’s presence icon or display name with the mouse cursor.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_donotdisplayhovermenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_donotdisplayhovermenu_1","displayName":"Enabled","description":null,"helpText":null}]},"7639dbb58a7354e1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuioutlook","displayName":"Disallow in Outlook (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuioutlook_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuioutlook_1","displayName":"True","description":null,"helpText":null}]},"76e77c6cd10cccca":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage","displayName":"Primary Editing Language (User)","description":"Defines the editing options for Office 2016 programs. In addition to configuring this setting, consider enabling the same language in the 'Enabled Editing Languages' policy node. Please refer to the Office Resource Kit documentation for important information on setting the installed version of Microsoft Office.","helpText":"","infoUrls":[],"categoryId":"3512a9f5-d692-4a1f-aedd-1bd431ae893e","categoryName":"Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"762aef8c81bd5a4b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uzbekcyrillic","displayName":"Uzbek (Cyrillic) (User)","description":"Enables the editing language Uzbek (Cyrillic)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uzbekcyrillic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uzbekcyrillic_1","displayName":"Enabled","description":null,"helpText":null}]},"7688de8323f0b715":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendcustomerdata","displayName":"Send personal information (User)","description":"This policy setting controls whether users can send personal information to Office. When users choose to send information Office 2016 applications automatically send information to Office.\r\n\r\nIf you enable this policy setting, users will opt into sending personal information to Office. If your organization has policies that govern the use of external resources, opting users into the program might cause them to violate these policies.\r\n\r\nIf you disable this policy setting, Office 2016 users cannot send personal information to Office.\r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to \"Enabled\".","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendcustomerdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendcustomerdata_1","displayName":"Enabled","description":null,"helpText":null}]},"761185acb0002c6f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity","displayName":"Automation Security (User)","description":"This policy setting controls whether macros can run in an Office 2016 application that is opened programmatically by another application. \r\n\r\nIf you enable this policy setting, you can choose from three options for controlling macro behavior in Excel, PowerPoint, and Word when the application is opened programmatically: \r\n\r\n- Disable macros by default - All macros are disabled in the programmatically opened application. \r\n\r\n- Macros enabled (default) - Macros can run in the programmatically opened application. This option enforces the default configuration in Excel, PowerPoint, and Word. \r\n\r\n- User application macro security level - Macro functionality is determined by the setting in the \"Macro Settings\" section of the Trust Center. \r\n\r\nIf you disable or do not configure this policy setting, when a separate program is used to launch Microsoft Excel, PowerPoint, or Word programmatically, any macros can run in the programmatically opened application without being blocked.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_1","displayName":"Enabled","description":null,"helpText":null}]},"761c010b97e9a60b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_turnofferrorreportingforfilesthatfailfilevalidation","displayName":"Turn off error reporting for files that fail file validation (User)","description":"This policy determines whether error reports and files that fail file validation should be sent using the Watson dialog.\r\n\r\nIf you enable this policy setting, users will not see the Watson dialog. Files that fail file validation will not be sent by the Watson dialog to Microsoft.\r\n\r\nIf you disable or do not configure this policy setting, the Watson dialog to send files that fail validation will show up once every two weeks.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_turnofferrorreportingforfilesthatfailfilevalidation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_turnofferrorreportingforfilesthatfailfilevalidation_1","displayName":"Enabled","description":null,"helpText":null}]},"76e60f2eafbc531c":{"id":"user_vendor_msft_policy_config_office16v6~policy~l_microsoftofficesystem~l_securitysettings_l_allowvbaintranetrefs","displayName":"Allow VBA to load typelib references by path from untrusted intranet locations (User)","description":"This policy setting permits VBA to load typelib references by explicit path read from the project data if that path points to an intranet location that is not explicitly in the system trusted sites list.\r\n\r\nBy default, VBA will attempt to load typelibs referenced in a project by searching for the library GUID in the registry. If it is not found in the registry, VBA will attempt to load the typelib or project reference using the path stored in the project for the reference as long as the reference does not point to an internet or intranet location that is not in the trusted sites list.\r\n\r\nIf you enable this policy setting, VBA will treat intranet paths like local machine paths, and therefore VBA will attempt to search for unregistered references in intranet locations that are not local machine or in the system's trusted sites list.\r\n\r\nIf you disable or don’t configure this policy setting, VBA maintains its default behavior and will refuse to load typelibs on intranet paths if it does not find the typelib registered in HKEY_CLASSES_ROOT.\r\n ","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v6~policy~l_microsoftofficesystem~l_securitysettings_l_allowvbaintranetrefs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v6~policy~l_microsoftofficesystem~l_securitysettings_l_allowvbaintranetrefs_1","displayName":"Enabled","description":null,"helpText":null}]},"7616cb53d0a81880":{"id":"user_vendor_msft_policy_config_outlk16v13~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_showoutlookloopcomponentsforsupportedapps_l_showoutlookloopcomponentsid","displayName":"Show Outlook Loop components for supported apps (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v13~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_showoutlookloopcomponentsforsupportedapps_l_showoutlookloopcomponentsid_1","displayName":"Always show automatically.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v13~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_showoutlookloopcomponentsforsupportedapps_l_showoutlookloopcomponentsid_2","displayName":"Only show automatically within tenant.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v13~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_showoutlookloopcomponentsforsupportedapps_l_showoutlookloopcomponentsid_3","displayName":"Don’t show automatically.","description":null,"helpText":null}]},"769546c95d4e578d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_disableformregions","displayName":"Configure form regions permissions (User)","description":"By default, all form region customizations are permitted to run in Outlook. By using this setting, you can disable all form region customizations, or specify that form regions must be registered on a per-computer basis, rather than a per-user basis.","helpText":"","infoUrls":[],"categoryId":"e0e10e94-325c-49e6-ab48-4f146254395f","categoryName":"Form Region Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_disableformregions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_disableformregions_1","displayName":"Enabled","description":null,"helpText":null}]},"761099d131882961":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitmimebody","displayName":"Change the limit for the number of MIME body parts (User)","description":"By default, the limit is 250 for the number of MIME body parts when an e-mail message is converted from MIME to MAPI. The number can be set to any positive integer. This helps prevent scenarios in which Outlook hangs while attempting conversion.","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitmimebody_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitmimebody_1","displayName":"Enabled","description":null,"helpText":null}]},"76c8ddb573cf21ba":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapiopenmessage_l_simplemapi_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapiopenmessage_l_simplemapi_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapiopenmessage_l_simplemapi_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapiopenmessage_l_simplemapi_setting_0","displayName":"Automatically Deny","description":null,"helpText":null}]},"76b883f8d4935b7f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface","displayName":"Configure Outlook Anywhere user interface options (User)","description":"This policy setting allows you to determine whether users can view and change user interface (UI) options for Outlook Anywhere.\r\n\r\nIf you enable this policy setting, users can view and change UI options for Outlook Anywhere.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to use the Outlook Anywhere feature, but they will not be able to view or change UI options for it.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_1","displayName":"Enabled","description":null,"helpText":null}]},"765f189c7fc9ab4e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient","displayName":"File tab | Share | Send Using E-mail (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_1","displayName":"True","description":null,"helpText":null}]},"769ea5841846a2fc":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful","displayName":"Stop checking to ensure hyperlink text is meaningful (User)","description":"This policy setting prevents the Accessibility Checker from verifying that hyperlinks have meaningful text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that hyperlinks have meaningful text.\r\n\r\nIf you disable or do not configure this policy setting, hyperlink text will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_1","displayName":"Enabled","description":null,"helpText":null}]},"7693c7b432bf8889":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17","displayName":"Fiscal year starts in (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_1","displayName":"January","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_2","displayName":"February","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_3","displayName":"March","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_4","displayName":"April","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_5","displayName":"May","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_6","displayName":"June","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_7","displayName":"July","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_8","displayName":"August","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_9","displayName":"September","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_10","displayName":"October","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_11","displayName":"November","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjfiscalyear_l_pjfiscalyear17_12","displayName":"December","description":null,"helpText":null}]},"7618dfbfef143232":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview","displayName":"Web tab | View | Web Page Preview (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview_1","displayName":"True","description":null,"helpText":null}]},"767a4e5410800aa8":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_showfilesavewarnings","displayName":"Show file save warnings (User)","description":"Indicates whether a warning message is displayed when you save files that contain errors such as invalid XML code.","helpText":"","infoUrls":[],"categoryId":"6ae0d607-832c-403b-b3bc-c563e390ebad","categoryName":"Save/Open","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_showfilesavewarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_showfilesavewarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"769b5e29dc665f0c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_monthnames","displayName":"Month names (User)","description":"Used for complex scripts. Specifies if month names shall be of calendar type Gregorian Arabic, Gregorian transliterated English, or Gregorian transliterated French.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_monthnames_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_monthnames_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/77.json b/public/intune-definitions/77.json new file mode 100644 index 000000000000..d5e95c556163 --- /dev/null +++ b/public/intune-definitions/77.json @@ -0,0 +1 @@ +{"777fff1268f7a79e":{"id":"com.apple.assetcache.managed_listenranges_item_last","displayName":"Last","description":"The last IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"772c206906f09c3d":{"id":"com.apple.dnssettings.managed_ondemandrules_item_actionparameters_item_domains","displayName":"Domains","description":"The domains for which this evaluation applies.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"775ad76f422818c3":{"id":"com.apple.extensiblesso_platformsso_authorizationgroups_generickey_keytobereplaced","displayName":"Authorization Groups","description":"The pairing of Authorization Rights to group names. When using this, the system updates the Authorization Right to use the group.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"77ba182a0461000e":{"id":"com.apple.managedclient.preferences_exclusions_item_path","displayName":"Path","description":"Path to exclude, wildcards are supported","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"77f8aeb7fd096cf8":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays","displayName":"Weekdays","description":"One or more days of the week that the device will automatically power on.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_0","displayName":"Mon","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_1","displayName":"Tue","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_2","displayName":"Wed","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_3","displayName":"Thu","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_4","displayName":"Fri","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_5","displayName":"Sat","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_6","displayName":"Sun","description":null,"helpText":null}]},"771c987c3f96cbea":{"id":"com.apple.mcxprinting_userprinterlist_printer_ppdurl","displayName":"PPD URL","description":"The printer's PPDURL.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"7764b22394b620ba":{"id":"com.apple.servicemanagement_rules_item_rulevalue","displayName":"Rule Value","description":"The value to compare with each login item's value, to determine a match to this rule.","helpText":null,"infoUrls":[],"categoryId":"9859957e-34f1-4669-9f95-2b7c79fff052","categoryName":"Service Management - Managed Login Items","options":null},"77786a93fe6100e6":{"id":"com.apple.system-extension-policy_allowedsystemextensiontypes","displayName":"Allowed System Extension Types","description":"A dictionary that maps a team identifier to an array of strings, where each string is a type of system extension that you can install for that team identifier. The allowed extension types are DriverExtension, NetworkExtension, and EndpointSecurityExtension. If there’s no entry for a specified team identifier in the dictionary, the system allows all extension types.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"7799071f56291936":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"774a122db6f16854":{"id":"com.microsoft.edge.mamedgeappconfigsettings.javascriptoptimizerblockedforsites","displayName":"Block JavaScript optimizations on these sites","description":"Allows you to set a list of site url patterns that specify sites for which advanced JavaScript optimizations are disabled.\n\nDisabling JavaScript optimizations means that Microsoft Edge may render web content more slowly.\n\nFor detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\n\nJavaScript optimization policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com won't correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there's no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\n\nThis policy applies on a frame-by-frame basis and isn't based on top-level origin url alone; so, for example, if contoso.com is listed in the \"JavaScriptOptimizerBlockedForSites\" policy but contoso.com loads a frame containing fabrikam.com, then contoso.com has JavaScript optimizations disabled, but fabrikam.com will use the policy from \"DefaultJavaScriptOptimizerSetting\", if set, or default to JavaScript optimizations enabled. Blocklist entries have higher priority than allowlist entries, which in turn have higher priority than the configured default value.\n\nIf you don't configure this policy for a site, then the policy from \"DefaultJavaScriptOptimizerSetting\" applies to the site, if set; otherwise, JavaScript optimization is enabled for the site.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"771390363ec4a50f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.translateenabled","displayName":"Enable Translate","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge offers to translate a webpage by showing an integrated translate flyout when the language detected on a webpage isn't listed under preferred languages. A translate option is available on the right-click context menu.\n\nUsers can also translate selected text on a webpage via the right-click context menu, or on a PDF via the PDF toolbar and the right-click context menu.\n\nIf you don't configure this policy, the policy is enabled by default. Users can choose whether to use the translation functionality or not.\n\nYou can disable this policy to disable all built-in translate features.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.translateenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.translateenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7737ed6b4b9ce24c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtciphandlingurl","displayName":"WebRTC IP Handling Policy for URL Patterns","description":"Controls which IP addresses and network interfaces WebRTC can use\nwhen establishing connections for specific URL patterns.\n\nHow It Works:\nAccepts a list of URL patterns, each paired with a handling type.\nWebRTC evaluates patterns sequentially; the first match determines the handling type.\nIf no match is found, WebRTC defaults to the WebRtcLocalhostIpHandling WebRtcLocalhostIpHandling. policy.\nThis policy applies only to origins—URL path components are ignored.\nWildcards (*) are supported in URL patterns.\n\nSupported Handling Values:\ndefault – Uses all available network interfaces.\ndefault_public_and_private_interfaces – WebRTC uses all public and private interfaces.\ndefault_public_interface_only – WebRTC uses only public interfaces.\ndisable_non_proxied_udp – WebRTC uses UDP SOCKS proxying or falls back to TCP proxying.\n\nMore Information:\nValid input patterns: https://go.microsoft.com/fwlink/?linkid=2095322\nHandling types: https://tools.ietf.org/html/rfc8828.html#section-5.2","helpText":null,"infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":null},"7762b84451730508":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvactivedirectorybackupdropdown_name","displayName":"Configure storage of BitLocker recovery information to AD DS:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvactivedirectorybackupdropdown_name_1","displayName":"Backup recovery passwords and key packages","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvactivedirectorybackupdropdown_name_2","displayName":"Backup recovery passwords only","description":null,"helpText":null}]},"7784ee4231a932d4":{"id":"device_vendor_msft_bitlocker_systemdrivesenableprebootpinexceptionondecapabledevice","displayName":"Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.","description":"This policy setting allows users on devices that are compliant with InstantGo or Microsoft Hardware Security Test Interface (HSTI) to not have a PIN for pre-boot authentication. This overrides the \"Require startup PIN with TPM\" and \"Require startup key and PIN with TPM\" options of the \"Require additional authentication at startup\" policy on compliant hardware.\r\n\r\nIf you enable this policy setting, users on InstantGo and HSTI compliant devices will have the choice to turn on BitLocker without pre-boot authentication.\r\n\r\nIf this policy is not enabled, the options of \"Require additional authentication at startup\" policy apply.\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesenableprebootpinexceptionondecapabledevice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesenableprebootpinexceptionondecapabledevice_1","displayName":"Enabled","description":null,"helpText":null}]},"77ed01aba706af6a":{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentials_concatenatedefaults_afc","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentials_concatenatedefaults_afc_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentials_concatenatedefaults_afc_1","displayName":"True","description":null,"helpText":null}]},"7760dfc467ee9905":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_2","displayName":"Send data when on connected to a restricted/costed network","description":"This policy setting determines whether Windows Error Reporting (WER) checks for a network cost policy that restricts the amount of data that is sent over the network.\r\n\r\nIf you enable this policy setting, WER does not check for network cost policy restrictions, and transmits data even if network cost is restricted.\r\n\r\nIf you disable or do not configure this policy setting, WER does not send data, but will check the network cost policy again if the network profile is changed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypassnetworkcostthrottling-2"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_2_1","displayName":"Enabled","description":null,"helpText":null}]},"776f7bbb625b1cd8":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_nochanges2","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_nochanges2_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_nochanges2_1","displayName":"True","description":null,"helpText":null}]},"77b61048d64540e7":{"id":"device_vendor_msft_policy_config_admx_msi_disableloggingfrompackage","displayName":"Turn off logging via package settings","description":"This policy setting controls Windows Installer's processing of the MsiLogging property. The MsiLogging property in an installation package can be used to enable automatic logging of all install operations for the package.\r\n\r\nIf you enable this policy setting, you can use the options in the Disable logging via package settings box to control automatic logging via package settings behavior.\r\n\r\n-- The \"Logging via package settings on\" option instructs Windows Installer to automatically generate log files for packages that include the MsiLogging property.\r\n\r\n-- The \"Logging via package settings off\" option turns off the automatic logging behavior when specified via the MsiLogging policy. Log files can still be generated using the logging command line switch or the Logging policy.\r\n\r\nIf you disable or do not configure this policy setting, Windows Installer will automatically generate log files for those packages that include the MsiLogging property.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disableloggingfrompackage"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disableloggingfrompackage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disableloggingfrompackage_1","displayName":"Enabled","description":null,"helpText":null}]},"7726a7a021d84773":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_2_lbl_eventlogginglevelspin","displayName":"Enter [0-3]:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"7710ba4a0660dde0":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings","displayName":"Desktop settings","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings_1","displayName":"True","description":null,"helpText":null}]},"77a39d90b7abaf00":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_announceflags","displayName":"AnnounceFlags","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"778d6797c9735c4f":{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootuser_integration_root_global_prompt","displayName":"Integration Root Global","description":"","helpText":"","infoUrls":[],"categoryId":"ea9a092f-dd93-41d4-9bbb-118de1213578","categoryName":"Integration","options":null},"77daf3ab4b76edaf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg","displayName":"Allow Dinosaur Easter Egg Game","description":"Setting the policy to True allows users to play the dinosaur game. Setting the policy to False means users can't play the dinosaur easter egg game when device is offline.\r\n\r\nLeaving the policy unset means users can't play the game on enrolled Google Chrome OS, but can under other circumstances.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg_1","displayName":"Enabled","description":null,"helpText":null}]},"778ef947338a6be2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled","displayName":"Use built-in DNS client","description":"This policy controls which software stack is used to communicate with the DNS server: the Operating System DNS client, or Google Chrome's built-in DNS client. This policy does not affect which DNS servers are used: if, for example, the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It also does not control if DNS-over-HTTPS is used; Google Chrome will always use the built-in resolver for DNS-over-HTTPS requests. Please see the DnsOverHttpsMode policy for information on controlling DNS-over-HTTPS.\r\n\r\nIf this policy is set to Enabled, the built-in DNS client will be used, if available.\r\n\r\nIf this policy is set to Disabled, the built-in DNS client will only be used when DNS-over-HTTPS is in use.\r\n\r\nIf this policy is left unset, the built-in DNS client will be enabled by default on macOS, Android (when neither Private DNS nor VPN are enabled) and Google Chrome OS.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"779fef74ab578130":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc","displayName":"Disable Certificate Transparency enforcement for a list of URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"77143f9ccd6ba8f5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"77a3bd2fccf550e4":{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel","displayName":"Cloud Block Level","description":"This policy setting determines how aggressive Windows Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer. If this setting is on, Windows Defender Antivirus will be more aggressive when identifying suspicious files to block and scan; otherwise, it will be less aggressive and therefore block and scan with less frequency. For more information about specific values that are supported, see the Windows Defender Antivirus documentation site. NoteThis feature requires the Join Microsoft MAPS setting enabled in order to function.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_0","displayName":"Default State","description":"Default State","helpText":null},{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_2","displayName":"High","description":"High","helpText":null},{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_4","displayName":"High Plus","description":"HighPlus","helpText":null},{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_6","displayName":"Zero Tolerance","description":"ZeroTolerance","helpText":null}]},"77bea56db2eb9908":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff","displayName":"Clear Cache on Logoff","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nClears the local cache during user sign out.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ClearCacheOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"7759bf2255c90b8a":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowsmartscreenie"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"7765dba7d947dc2d":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_renameadministratoraccount","displayName":"Accounts Rename Administrator Account","description":"Accounts: Rename administrator account This security setting determines whether a different account name is associated with the security identifier (SID) for the account Administrator. Renaming the well-known Administrator account makes it slightly more difficult for unauthorized persons to guess this privileged user name and password combination. Default: Administrator.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_renameadministratoraccount"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"776f47a4a64cf827":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange","displayName":"Network Security Do Not Store LAN Manager Hash Value On Next Password Change","description":"Network security: Do not store LAN Manager hash value on next password change This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the new password is stored. The LM hash is relatively weak and prone to attack, as compared with the cryptographically stronger Windows NT hash. Since the LM hash is stored on the local computer in the security database the passwords can be compromised if the security database is attacked. Default on Windows Vista and above: Enabled Default on Windows XP: Disabled. Important Windows 2000 Service Pack 2 (SP2) and above offer compatibility with authentication to previous versions of Windows, such as Microsoft Windows NT 4.0. This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP, and the Windows Server 2003 family to communicate with computers running Windows 95 and Windows 98.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange_0","displayName":"Disable","description":"Disable","helpText":null}]},"777660c164c23b42":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_newtabpagelocation","displayName":"New tab page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":null},"77243baa15383f31":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled","displayName":"Enable Translate","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge offers translation functionality to the user by showing an integrated translate flyout when appropriate, and a translate option on the right-click context menu.\r\n\r\nDisable this policy to disable all built-in translate features.\r\n\r\nIf you don't configure the policy, users can choose whether to use the translation functionality or not.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"770462b0b34f38cb":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection","displayName":"Default printer selection rules","description":"Overrides Microsoft Edge default printer selection rules. This policy determines the rules for selecting the default printer in Microsoft Edge, which happens the first time a user tries to print a page.\r\n\r\nWhen this policy is set, Microsoft Edge tries to find a printer that matches all of the specified attributes and uses it as default printer. If there are multiple printers that meet the criteria, the first printer that matches is used.\r\n\r\nIf you don't configure this policy or no matching printers are found within the timeout, the printer defaults to the built-in PDF printer or no printer, if the PDF printer isn't available.\r\n\r\nThe value is parsed as a JSON object, conforming to the following schema: { \"type\": \"object\", \"properties\": { \"idPattern\": { \"description\": \"Regular expression to match printer id.\", \"type\": \"string\" }, \"namePattern\": { \"description\": \"Regular expression to match printer display name.\", \"type\": \"string\" } } }\r\n\r\nOmitting a field means all values match; for example, if you don't specify connectivity Print Preview starts discovering all kinds of local printers. Regular expression patterns must follow the JavaScript RegExp syntax and matches are case sensitive.\r\n\r\nExample value: { \"idPattern\": \".*public\", \"namePattern\": \".*Color\" }","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_1","displayName":"Enabled","description":null,"helpText":null}]},"777bdf00c42cb7a3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter","displayName":"Print headers and footers","description":"Force 'headers and footers' to be on or off in the printing dialog.\r\n\r\nIf you don't configure this policy, users can decide whether to print headers and footers.\r\n\r\nIf you disable this policy, users can't print headers and footers.\r\n\r\nIf you enable this policy, users always print headers and footers.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_1","displayName":"Enabled","description":null,"helpText":null}]},"77f2dcef49dc9ec2":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled","displayName":"JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it is a temporary policy for web standards compliance. It won't work in Microsoft Edge as soon as version 107.\r\nIf you enable this policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will not be clamped. This improves short horizon performance, but websites abusing the API will still eventually have their setTimeout usages clamped.\r\nIf you disable or don't configure policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will be clamped.\r\n\r\nThis is a web standards compliancy feature that may change task ordering on a web page, leading to unexpected behavior on sites that are dependent on a certain ordering.\r\nIt also may affect sites with a lot of usage of a timeout of 0ms for setTimeout. For example, increasing CPU load.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"77cb92454912ccb2":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed","displayName":"Enable the Search bar","description":"Enables the search bar. When enabled, users can use the search bar to search the web from their desktop or from an application. The search bar provides a search box, powered by Edge default search engine, that shows web suggestions and opens all web searches in Microsoft Edge. The search bar can be launched from the \"More tools\" menu or jump list in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy:\r\nThe search bar will be automatically enabled for all profiles.\r\nThe option to enable the search bar at startup will be toggled on if the 'SearchbarIsEnabledOnStartup' (Allow the Search bar at Windows startup) policy is enabled.\r\nIf the 'SearchbarIsEnabledOnStartup' is disabled or not configured, the option to enable the search bar at startup will be toggled off.\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge \"More tools\" menu. Users can launch the search bar from \"More tools\".\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge jump list menu. Users can launch the search bar from the Microsoft Edge jump list menu.\r\nThe search bar can be turned off by the \"Quit\" option in the System tray or by closing the search bar from the 3 dot menu. The search bar will be restarted on system reboot if auto-start is enabled.\r\n\r\n\r\nIf you disable this policy:\r\nThe search bar will be disabled for all profiles.\r\nThe option to launch the search bar from Microsoft Edge \"More tools\" menu will be disabled.\r\nThe option to launch the search bar from Microsoft Edge jump list menu will be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"776efab4ccce2cb1":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains_pdflocalfileaccessallowedfordomainsdesc","displayName":"Allow specified sites to access file:// URLs in the PDF Viewer (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"7778f653e8803383":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar","displayName":"Force direct intranet site navigation instead of searching on single word entries in the Address Bar","description":"If you enable this policy, the top auto-suggest result in the address bar suggestion list will navigate to intranet sites if the text entered in the address bar is a single word without punctuation.\r\n\r\nDefault navigation when typing a single word without punctuation will conduct a navigation to an intranet site matching the entered text.\r\n\r\nIf you enable this policy, the second auto-suggest result in the address bar suggestion list will conduct a web search exactly as it was entered, provided that this text is a single word without punctuation. The default search provider will be used unless a policy to prevent web search is also enabled.\r\n\r\nTwo effects of enabling this policy are:\r\n\r\nNavigation to sites in response to single word queries that would typically resolve to a history item will no longer happen. Instead, the browser will attempt navigate to internal sites that may not exist in an organization’s intranet. This will result in a 404 error.\r\n\r\nPopular, single-word search terms will require manual selection of search suggestions to properly conduct a search.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},"772bca3d9fe5ccaa":{"id":"device_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches","displayName":"Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with \"AutoSelectCertificateForUrls\"","description":"Toggles whether users are prompted to select a certificate if there are multiple certificates available and a site is configured with 'AutoSelectCertificateForUrls' (Automatically select client certificates for these sites). If you don't configure 'AutoSelectCertificateForUrls' for a site, the user will always be prompted to select a certificate.\r\n\r\nIf you set this policy to True, Microsoft Edge will prompt a user to select a certificate for sites on the list defined in 'AutoSelectCertificateForUrls' if and only if there is more than one certificate.\r\n\r\nIf you set this policy to False or don't configure it, Microsoft Edge will automatically select a certificate even if there are multiple matches for a certificate. The user will not be prompted to select a certificate for sites on the list defined in 'AutoSelectCertificateForUrls'.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches_1","displayName":"Enabled","description":null,"helpText":null}]},"77fd972ddb5b5724":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended","displayName":"Default search provider encodings","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.\r\n\r\nThis policy is optional. If not configured, the default, UTF-8, is used.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"77d273f408428283":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"77ebff9ae956e170":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector","displayName":"Prevent document inspectors from running","description":"This policy setting allows you to prevent document inspectors from running in Microsoft Office programs.\r\n \r\nIf you enable this policy setting, specific document inspectors can be disabled by entering their Class ID (CLSID). The inspector CLSID can be found at HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Office\\16.0\\Word\\\"Document Inspectors\" and similarly in Excel and PowerPoint.\r\n\r\nIf you disable or do not configure this policy setting, document inspectors may be run in Microsoft Office programs.","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector_1","displayName":"Enabled","description":null,"helpText":null}]},"77d1292fa5fdd155":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek","displayName":"Days of the week","description":null,"helpText":null,"infoUrls":[],"categoryId":"ad1ecbf4-75da-4dc1-9354-7d00c0e2af72","categoryName":"Allday","options":[{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_0","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_1","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_4","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_5","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_6","displayName":"Saturday","description":null,"helpText":null}]},"77a8e96ad47d5d7f":{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync","displayName":"Do not sync language preferences settings","description":"\n Prevent the \"language preferences\" group from syncing to and from this PC. This turns off and disables the \"languages preferences\" group on the \"Windows backup\" settings page in PC settings.\n\nIf you enable this policy setting, the \"language preferences\" group will not be synced.\n\nUse the option \"Allow users to turn language preferences syncing on\" so that syncing is turned off by default but not disabled.\n\nIf you do not set or disable this setting, syncing of the \"language preferences\" group is on by default and configurable by the user.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-settingssync#settingssync-disablelanguagesettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"77f3da0bf7730f15":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders46","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders46_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders46_1","displayName":"True","description":null,"helpText":null}]},"7767c408e883b295":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_donotprompttoconvertolderdatabases","displayName":"Do not prompt to convert older databases (User)","description":"This policy setting controls whether Access prompts users to convert older databases when they are opened. \r\n \r\nIf you enable this policy setting, Access will leave Access 97-format databases unchanged. Access informs the user that the database is in the older format, but does not provide the user with an option to convert the database. Some features introduced in more recent versions of Access will not be available, and the user will not be able to make any design changes to the database. \r\n \r\nIf you disable or do not configure this policy setting, when users open databases that were created in the Access 97 file format, Access prompts them to convert the database to a newer file format. Users can choose to convert the database or leave it in the older format.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_donotprompttoconvertolderdatabases_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_donotprompttoconvertolderdatabases_1","displayName":"Enabled","description":null,"helpText":null}]},"7797d51c126efec8":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffopenextendeddictionary","displayName":"Turn off Open Extended Dictionary (User)","description":"This policy setting allows you to turn off Open Extended Dictionary.\r\n\r\nIf you enable this policy setting, Open Extended Dictionary is turned off. You cannot add a new Open Extended Dictionary.\r\n\r\nFor Japanese Microsoft IME, an Open Extended Dictionary that is added before enabling this policy setting is not used for conversion.\r\n\r\nIf you disable or do not configure this policy setting, Open Extended Dictionary can be added and used by default.\r\n\r\nThis policy setting is applied to Japanese Microsoft IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffopenextendeddictionary"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffopenextendeddictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffopenextendeddictionary_1","displayName":"Enabled","description":null,"helpText":null}]},"770c69ed587d955f":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps_restrictapps_restrictappslist","displayName":"List of allowed applications (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"77baf225dbf3eefe":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenote","displayName":"Microsoft OneNote 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft OneNote 2013.\r\nBy default, the user settings of Microsoft OneNote 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft OneNote 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft OneNote 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onenote"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenote_1","displayName":"Enabled","description":null,"helpText":null}]},"77e496f10ecd4c20":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableindexedlibraryexperience","displayName":"Turn off Windows Libraries features that rely on indexed file data (User)","description":"This policy setting allows you to turn off Windows Libraries features that need indexed file metadata to function properly. If you enable this policy, some Windows Libraries features will be turned off to better handle included folders that have been redirected to non-indexed network locations.\r\nSetting this policy will:\r\n * Disable all Arrangement views except for \"By Folder\"\r\n * Disable all Search filter suggestions other than \"Date Modified\" and \"Size\"\r\n * Disable view of file content snippets in Content mode when search results are returned\r\n * Disable ability to stack in the Context menu and Column headers\r\n * Exclude Libraries from the scope of Start search\r\nThis policy will not enable users to add unsupported locations to Libraries.\r\n\r\nIf you enable this policy, Windows Libraries features that rely on indexed file data will be disabled.\r\nIf you disable or do not configure this policy, all default Windows Libraries features will be enabled. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disableindexedlibraryexperience"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableindexedlibraryexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableindexedlibraryexperience_1","displayName":"Enabled","description":null,"helpText":null}]},"77a627b6f7817fa2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes","displayName":"The maximum size, in bytes, that can be transferred between client and host via clipboard synchronization (User)","description":"If this policy is set, clipboard data sent to and from the host will be truncated to the limit set by this policy.\r\n\r\nIf a value of 0 is set, then clipboard sync is disabled.\r\n\r\nThis policy affects both remote access and remote support scenarios.\r\n\r\nThis policy has no effect if it is not set.\r\n\r\nSetting the policy to a value that is not within the min/max range may prevent the host from starting.\r\n\r\nPlease note that the actual upper bound for the clipboard size is based on the maximum WebRTC data channel message size which this policy does not control.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_1","displayName":"Enabled","description":null,"helpText":null}]},"77894ad48a440ca7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledpluginsexceptions_disabledpluginsexceptionsdesc","displayName":"List of exceptions to the list of disabled plugins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"7768903a63080b6a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled","displayName":"Enable Safe Browsing Extended Reporting (User)","description":"Setting the policy to Enabled turns on Google Chrome's Safe Browsing Extended Reporting, which sends some system information and page content to Google servers to help detect dangerous apps and sites.\r\n\r\nSetting the policy to Disabled means reports are never sent.\r\n\r\nIf you set this policy, users can't change it. If not set, users can decide whether to send reports or not.\r\n\r\nSee more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"77d3dd5c3df5d4d3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepageisnewtabpage","displayName":"Use New Tab Page as homepage (User)","description":"Setting the policy to Enabled makes the New Tab page the user's homepage, ignoring any homepage URL location. Setting the policy to Disabled means that their homepage is never the New Tab page, unless the user's homepage URL is set to chrome://newtab.\r\n\r\nIf you set the policy, users can't change their homepage type in Google Chrome. If not set, the user decides whether or not the New Tab page is their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepageisnewtabpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepageisnewtabpage_1","displayName":"Enabled","description":null,"helpText":null}]},"7785b80fb7c5bd16":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed","displayName":"Allow reporting of domain reliability related data (User)","description":"If this policy is set false, domain reliability diagnostic data reporting is disabled and no data is sent to Google.\r\nIf this policy is set true or not set, domain reliability diagnostic data reporting will follow the behavior of MetricsReportingEnabled for Google Chrome or DeviceMetricsReportingEnabled for Google ChromeOS.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"775e90b10fb3d6ef":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_cloudapauthenabled","displayName":"Allow automatic sign-in to Microsoft® cloud identity providers (User)","description":"","helpText":"","infoUrls":[],"categoryId":"463e6791-7d54-4964-a36b-63bbedb7d0cd","categoryName":"Microsoft Active Directory management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_cloudapauthenabled_0","displayName":"Disable Microsoft® cloud authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_cloudapauthenabled_1","displayName":"Enable Microsoft® cloud authentication","description":null,"helpText":null}]},"77c877fd51061f4f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_usenewkeyonpasswordchange","displayName":"Use new key on password change (User)","description":"This policy setting allows you to specify if a new encryption key is used when the password is changed.\r\n\r\nIf you enable or do not configure this policy setting, a new intermediate key is generated when the password is changed. This causes any extra key encryptors to be removed when the file is saved.\r\n\r\nIf you disable this policy setting, a new intermediate key is not generated when the password is changed.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_1","displayName":"Enabled","description":null,"helpText":null}]},"7711544dda885b3e":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"776cc3e0536e5e9e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas","displayName":"Disable Certificate Transparency enforcement for a list of legacy certificate authorities (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 131.\r\n\r\nDisables enforcing Certificate Transparency requirements for a list of legacy certificate authorities (Cas).\r\n\r\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed, continue to be used for enterprise hosts.\r\n\r\nIn order for Certificate Transparency enforcement to be disabled, you must set the hash to a subjectPublicKeyInfo appearing in a CA certificate that is recognized as a legacy certificate authority (CA). A legacy CA is a CA that has been publicly trusted by default by one or more operating systems supported by Microsoft Edge.\r\n\r\nYou specify a subjectPublicKeyInfo hash by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\r\n\r\nIf you don't configure this policy, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it isn't disclosed according to the Certificate Transparency policy.\r\n\r\nThis policy is obsolete because the feature to disable Certificate Transparency enforcement for legacy certificates has been removed.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_1","displayName":"Enabled","description":null,"helpText":null}]},"77ab8c228f423d02":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled","displayName":"Enable keyboard focusable scrollers (User)","description":"This policy provides a temporary opt-out for the new keyboard focusable scrollers behavior.\r\n\r\nWhen this policy is Enabled or unset, scrollers without focusable children are keyboard focusable by default.\r\n\r\nWhen this policy is Disabled, scrollers are not keyboard focusable by default.\r\n\r\nThis policy is a temporary workaround and will be removed in Edge Stable 135.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"778b59eac33f6ddb":{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled","displayName":"Configure Edge scareware blocker to block sites detected as potential tech scams (User)","description":"This policy controls whether Microsoft Edge blocks sites that are detected as potential tech scams.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block sites detected as potential tech scams.\r\n\r\nIf you disable this policy, Microsoft Edge will not block sites detected as potential tech scams.","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"778755900c788830":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_newtabpagecompanylogo","displayName":"New tab page company logo (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"77851b4ae028888a":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype","displayName":"Configure the Microsoft Edge new tab page experience (User)","description":"Lets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\r\n\r\nWhen you set this policy to Microsoft News feed experience (0), users will see the Microsoft News feed experience on the new tab page.\r\n\r\nWhen you set this policy to Office 365 feed experience (1), users with an Azure Active Directory browser sign-in will see the Office 365 feed experience on the new tab page.\r\n\r\nIf you disable or don't configure this policy:\r\n\r\n- Users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, as well as the standard new tab page feed experience.\r\n\r\n- Users without an Azure Active Directory browser sign-in will see the standard new tab page experience.\r\n\r\nIf you configure this policy *and* the 'NewTabPageLocation' (Configure the new tab page URL) policy, 'NewTabPageLocation' has precedence.\r\n\r\nDefault setting: Disabled or not configured.\r\n\r\n* 0 = Microsoft News feed experience\r\n\r\n* 1 = Office 365 feed experience","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_1","displayName":"Enabled","description":null,"helpText":null}]},"77bfc1b8fb22ba38":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame","displayName":"Allow surf game (User)","description":"If you disable this policy, users won't be able to play the surf game when the device is offline or if the user navigates to edge://surf.\r\n\r\nIf you enable or don't configure this policy, users can play the surf game.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame_1","displayName":"Enabled","description":null,"helpText":null}]},"773a06c01142b5ec":{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended","displayName":"Allow importing of startup page settings (User)","description":"Allows users to import Startup settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the Startup settings are always imported.\r\n\r\nIf you disable this policy, startup settings are not imported at first run or at manual import.\r\n\r\nIf you don't configure this policy, startup settings are imported at first run, and users can choose whether to import this data manually by selecting browser settings option during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import startup settings on first run, but users can select or clear **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Microsoft Edge Legacy and Google Chrome (on Windows 7, 8, and 10) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"777c68e8a04054e8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_sleepinterval","displayName":"Set maximum sleep interval (User)","description":"This policy setting allows you to set an upper limit on the sleep interval used by the cache. The sleep is automatically interrupted when any application made changes in the cache or if there is an action scheduled to be performed.\r\n \r\nIf you enable this policy setting, you may specify how long (in minutes) the synchronization should wait before resuming when there is no pending work to do.\r\n\r\nIf you disable or do not configure this policy setting, then a default value of 20 minutes will be used.","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_sleepinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_sleepinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"77f4985528f7ef4d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_configurepresenceicons","displayName":"Configure presence icons (User)","description":"This policy setting allows you to specify whether Microsoft Office applications display presence icons in the user interface (UI).\r\n\r\nIf you enable this policy setting, you may specify when applications display presence icons:\r\n\r\n- Display all: Presence icons are displayed in the UI.\r\n- Display some: Presence icons are displayed only in the Contact Card, Quick Contacts and SharePoint.\r\n- Display none: Presence icons are not displayed in the UI.\r\n\r\nIf you disable or you do not configure this policy setting, presence icons are displayed in the UI.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_configurepresenceicons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_configurepresenceicons_1","displayName":"Enabled","description":null,"helpText":null}]},"773f957334a25c0e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm","displayName":"Select digital signature hashing algorithm (User)","description":"This policy setting allows you to configure the hashing algorithm Office 2016 applications use to confirm digital signatures.\r\n\r\nIf you enable this policy setting, you can specify any of the following SHA standard functions:\r\n- SHA1\r\n- SHA256\r\n- SHA384\r\n- SHA512\r\n\r\nIf you disable or do not configure this policy setting, the default value of SHA1 is used.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"775f39a7f9408e2d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc09_l_descriptioncolon272","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"77831c5889e0b9b9":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"77c861908d3d9083":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydefaultlocationofdesktopalert_l_xoffsetdefault44","displayName":"XOffset (default 44): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"773535b6cff80dd5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blockspecificsocialnetworkproviders_l_blockspecificsocialnetworkprovidersid","displayName":"Separate ProgIDs with semi-colons (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":null},"77f32fdb440ca069":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messagewhenoutlookcannotfindthedigitalidtodecodeamessage_l_entererrormessagetextmax255characters","displayName":"Enter error message text (max 255 characters): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":null},"7758ce1e85937cb2":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]},"77bd03884354d3d2":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_automaticallycreatedrawingcanvaswheninsertingautoshapes","displayName":"Automatically create drawing canvas when inserting AutoShapes (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_automaticallycreatedrawingcanvaswheninsertingautoshapes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_automaticallycreatedrawingcanvaswheninsertingautoshapes_1","displayName":"Enabled","description":null,"helpText":null}]},"7720e046fb3f5794":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuiminimumzoomlevel_l_setexpandcollapseuiminimumzoomlevelspinid","displayName":"Set the minimum zoom level for expand / collapse on-object UI (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/78.json b/public/intune-definitions/78.json new file mode 100644 index 000000000000..381513200b41 --- /dev/null +++ b/public/intune-definitions/78.json @@ -0,0 +1 @@ +{"78e41534683fb92a":{"id":"com.apple.managedclient.preferences_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it’s replaced with real image thumbnail data. This policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nSpecify Bing's Image Search URL Post Params as:\n'imageBin={google:imageThumbnailBase64}'.\n\nSpecify Google's Image Search URL Post Params as:\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\n\nIf you don’t set this policy, image search requests are sent using the GET method.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchproviderimageurlpostparams"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"787717943f84055c":{"id":"com.apple.managedclient.preferences_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability","description":"Control if Manifest v2 extensions can be used by browser.\n\nManifest v2 extensions support will be deprecated and all extensions need to be migrated to v3 in the future. More information about, and the timeline of the migration has not been established.\n\nIf the policy is set to Default or not set, v2 extension loading is decided by browser. This will follow the preceding timeline when it's established.\n\nIf the policy is set to Disable, v2 extensions installation are blocked, and existing ones are disabled. This option is going to be treated the same as if the policy is unset after v2 support is turned off by default.\n\nIf the policy is set to Enable, v2 extensions are allowed. The option is going to be treated the same as if the policy isn't set before v2 support is turned off by default.\n\nIf the policy is set to EnableForForcedExtensions, force installed v2 extensions are allowed. This includes extensions that are listed by \"ExtensionInstallForcelist\" or \"ExtensionSettings\" with installation_mode \"force_installed\" or \"normal_installed\". All other v2 extensions are disabled. The option is always available regardless of the manifest migration state.\n\nExtensions availabilities are still controlled by other policies.\n\nPolicy options mapping:\n\n* Default (0) = Default browser behavior\n\n* Disable (1) = Manifest v2 is disabled\n\n* Enable (2) = Manifest v2 is enabled\n\n* EnableForForcedExtensions (3) = Manifest v2 is enabled for forced extensions only\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensionmanifestv2availability"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_extensionmanifestv2availability_0","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_extensionmanifestv2availability_1","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_extensionmanifestv2availability_2","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_extensionmanifestv2availability_3","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},"78705b914d9d03c9":{"id":"com.apple.managedclient.preferences_printstickysettings","displayName":"Print preview sticky settings","description":"Specifies whether print preview should apply last used settings for Microsoft Edge PDF and webpages.\n\nIf you set this policy to 'EnableAll' or don't configure it, Microsoft Edge applies the last used print preview settings for both PDF and webpages.\n\nIf you set this policy to 'DisableAll', Microsoft Edge doesn't apply the last used print preview settings for both PDF and webpages.\n\nIf you set this policy to 'DisablePdf', Microsoft Edge doesn't apply the last used print preview settings for PDF printing and retains it for webpages.\n\nIf you set this policy to 'DisableWebpage', Microsoft Edge doesn't apply the last used print preview settings for webpage printing and retain it for PDF.\n\nThis policy is only available if you enable or don't configure the \"PrintingEnabled\" policy.\n\nPolicy options mapping:\n\n* EnableAll (0) = Enable sticky settings for PDF and Webpages\n\n* DisableAll (1) = Disable sticky settings for PDF and Webpages\n\n* DisablePdf (2) = Disable sticky settings for PDF\n\n* DisableWebpage (3) = Disable sticky settings for Webpages\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#printstickysettings"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_printstickysettings_0","displayName":"Enable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printstickysettings_1","displayName":"Disable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printstickysettings_2","displayName":"Disable sticky settings for PDF","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printstickysettings_3","displayName":"Disable sticky settings for Webpages","description":null,"helpText":null}]},"782a05b8d8dc23d4":{"id":"com.apple.managedclient.preferences_webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio","description":"This policy determines whether the browser enables adaptive buffering\nfor Web Audio. Adaptive buffering can reduce audio glitches but may\nincrease latency to varying degrees.\n\nEnabled: The browser will always use adaptive buffering.\nDisabled or Not Set: The browser will automatically decide during the\n feature launch process whether to use adaptive buffering.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webaudiooutputbufferingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webaudiooutputbufferingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webaudiooutputbufferingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"78e6d34d756ca048":{"id":"com.apple.managedclient.preferences_whatsnewpageforentraprofilesenabled","displayName":"Control whether an informational webpage for Edge for Business is shown in the new tab after major browser updates","description":"Starting in Microsoft Edge version 145, users with Microsoft Entra ID profiles will see an informational page about new Edge for Business features after major browser updates. This page highlights recent enhancements designed to promote secure and productive browsing.\n\nThis policy controls whether users with Microsoft Entra ID profiles see this informational page. This policy applies only to Microsoft Entra ID profiles and does not apply to Microsoft account (MSA) profiles.\n\nThis policy is available starting in Microsoft Edge version 144 to allow configuration ahead of the changes introduced in version 145.\n\nIf you enable this policy or do not configure it, Microsoft Edge shows the informational page by default.\nIf you disable this policy, Microsoft Edge does not show the informational page to users.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#whatsnewpageforentraprofilesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_whatsnewpageforentraprofilesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_whatsnewpageforentraprofilesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"787a9baac2bae7aa":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhomepage","displayName":"Allow importing of home page settings","description":"Allows users to import their home page setting from another browser into Microsoft Edge.\n\nIf you enable this policy, the option to manually import the home page setting is automatically selected.\n\nIf you disable this policy, the home page setting isn't imported at first run, and users can't import it manually.\n\nIf you don't configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This option means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhomepage_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importhomepage_true","displayName":"Enabled","description":null,"helpText":null}]},"78b7a3ba9c3f9c27":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhighpriorityunit","displayName":"High Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhighpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhighpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhighpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"789eaa022282105f":{"id":"device_vendor_msft_policy_config_admx_deviceguard_configcipolicy","displayName":"Deploy App Control for Business","description":"Deploy Windows Defender Application Control\r\n\r\nThis policy setting lets you deploy a Code Integrity Policy to a machine to control what is allowed to run on that machine.\r\n\r\nIf you deploy a Code Integrity Policy, Windows will restrict what can run in both kernel mode and on the Windows Desktop based on the policy. To enable this policy the machine must be rebooted. \r\n\r\nThe file path must be either a UNC path (for example, \\\\ServerName\\ShareName\\SIPolicy.p7b), or a locally valid path (for example, C:\\FolderName\\SIPolicy.p7b). The local machine account (LOCAL SYSTEM) must have access permission to the policy file.\r\n \r\nIf using a signed and protected policy then disabling this policy setting doesn't remove the feature from the computer. Instead, you must either:\r\n\r\n 1) first update the policy to a non-protected policy and then disable the setting, or\r\n 2) disable the setting and then remove the policy from each computer, with a physically present user.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-deviceguard#admx-deviceguard-configcipolicy"],"categoryId":"909339a5-8f04-4fa2-8807-5d38c83ef547","categoryName":"Device Guard","options":[{"id":"device_vendor_msft_policy_config_admx_deviceguard_configcipolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_deviceguard_configcipolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"7803efa31e71d5d6":{"id":"device_vendor_msft_policy_config_browser_clearbrowsingdataonexit","displayName":"Clear Browsing Data On Exit","description":"Specifies whether to always clear browsing history on exiting Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#clearbrowsingdataonexit"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_clearbrowsingdataonexit_0","displayName":"Disabled","description":"Prevented/not allowed. Users can configure the 'Clear browsing data' option in Settings.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_clearbrowsingdataonexit_1","displayName":"Enabled","description":"Allowed. Clear the browsing data upon exit automatically.","helpText":null}]},"7856b73f2d2e25af":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended","displayName":"Clear site data on browser shutdown (deprecated)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"785c2521c2093545":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":null},"78b510db66870528":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl","displayName":"Default search provider search URL","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURL specifies the URL of the search engine used during a default search. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nExample value: https://search.my.company/search?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_1","displayName":"Enabled","description":null,"helpText":null}]},"783bd0037154bc98":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_keygenblockedforurlsdesc","displayName":"Block key generation on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"78d54fb62a1f4f24":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled","displayName":"Enable First-Party Sets.","description":"This policy is provided as a way to opt-out of the First-Party Sets feature.\r\n\r\nWhen this policy is unset or set to Enabled, the First-Party Sets feature is enabled.\r\n\r\nWhen this policy is set to Disabled, the First-Party Sets feature is disabled.\r\n\r\nIt controls whether Chrome supports First-Party Sets related integrations.\r\n\r\nThis is the equivalent of the RelatedWebsiteSetsEnabled policy.\r\nEither policy may be used, but this one will be deprecated soon so the RelatedWebsiteSetsEnabled policy is preferred.\r\nThey both have the same effect on the browser's behavior.","helpText":"","infoUrls":[],"categoryId":"da78ddbc-fc94-48f9-8808-4b160d6f1d50","categoryName":"First- Party Sets Settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"78c90c9c45b0dc9e":{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings","displayName":"Prevent bypassing SmartScreen Filter warnings","description":"This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter prevents the user from browsing to or downloading from sites that are known to host malicious content. SmartScreen Filter also prevents the execution of files that are known to be malicious.\n\nIf you enable this policy setting, SmartScreen Filter warnings block the user.\n\nIf you disable or do not configure this policy setting, the user can bypass SmartScreen Filter warnings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablebypassofsmartscreenwarnings"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"78da398f322029e3":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"78d0bc62044bde29":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers","displayName":"User Account Control Behavior Of The Elevation Prompt For Standard Users","description":"User Account Control: Behavior of the elevation prompt for standard users This policy setting controls the behavior of the elevation prompt for standard users. The options are: • Prompt for credentials: (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. • Automatically deny elevation requests: When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls. • Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_behavioroftheelevationpromptforstandardusers"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_0","displayName":"Automatically deny elevation requests","description":"Automatically deny elevation requests","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_1","displayName":"Prompt for credentials on the secure desktop","description":"Prompt for credentials on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_3","displayName":"Prompt for credentials","description":"Prompt for credentials","helpText":null}]},"78add0ea226f8eb3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis","displayName":"Disable support for 3D graphics APIs","description":"Prevent web pages from accessing the graphics processing unit (GPU). Specifically, web pages can't access the WebGL API and plug-ins can't use the Pepper 3D API.\r\n\r\nIf you don't configure or disable this policy, it potentially allows web pages to use the WebGL API and plug-ins to use the Pepper 3D API. Microsoft Edge might, by default, still require command line arguments to be passed in order to use these APIs.\r\n\r\nIf 'HardwareAccelerationModeEnabled' (Use hardware acceleration when available) policy is set to false, the setting for 'Disable3DAPIs' policy is ignored - it's the equivalent of setting 'Disable3DAPIs' policy to true.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_1","displayName":"Enabled","description":null,"helpText":null}]},"78915cdd011205a9":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation","displayName":"Ask where to save downloaded files","description":"Set whether to ask where to save a file before downloading it.\r\n\r\nIf you enable this policy, the user is asked where to save each file before downloading; if you don't configure it, files are saved automatically to the default location, without asking the user.\r\n\r\nIf you don't configure this policy, the user will be able to change this setting.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_1","displayName":"Enabled","description":null,"helpText":null}]},"78489238aa10eb3d":{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture","displayName":"Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs","description":"Configure this policy to control whether Microsoft Edge will use the \"OS capture engine\" or the \"Browser capture engine\" when capturing browser windows in the same process using the screen-share APIs.\r\n\r\nYou should configure this policy if you want to capture the contents of Internet Explorer mode tabs. However, enabling this policy may negatively impact performance when capturing browser windows in the same process.\r\n\r\nThis policy only affects window capture, not tab capture. The contents of Internet Explorer mode tabs will not be captured when you choose to capture only a single tab, even if you configure this policy.\r\n\r\nIf you enable this policy, Microsoft Edge will always use the OS capture engine for window capture. Internet Explorer mode tabs will have their contents captured.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the Browser capture engine for browser windows in the same process. Internet Explorer mode tabs in these windows will not have their contents captured.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2174004","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_1","displayName":"Enabled","description":null,"helpText":null}]},"78e4ce162464f700":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},"78a848e1103bea96":{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended","displayName":"Configure Edge scareware blocker to block sites detected as potential tech scams","description":"This policy controls whether Microsoft Edge blocks sites that are detected as potential tech scams.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block sites detected as potential tech scams.\r\n\r\nIf you disable this policy, Microsoft Edge will not block sites detected as potential tech scams.","helpText":"","infoUrls":[],"categoryId":"fea97af7-df89-4fde-8e2b-f8e7f7b6b741","categoryName":"Scareware Blocker settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7882462bd951951d":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled","displayName":"Enable the User-Agent Client Hints feature (obsolete)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it's only intended to be a short-term mechanism to give enterprises more time to update their web content if and when it's found to be incompatible with the User-Agent Client Hints feature. It won't work in Microsoft Edge version 89.\r\n\r\nWhen enabled the User-Agent Client Hints feature sends granular request headers that provide information about the user browser (for example, the browser version) and environment (for example, the system architecture).\r\n\r\nThis is an additive feature, but the new headers may break some websites that restrict the characters that requests may contain.\r\n\r\nIf you enable or don't configure this policy, the User-Agent Client Hints feature is enabled. If you disable this policy, this feature is unavailable.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"78dc765756e799fb":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_visioexe159","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_visioexe159_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_visioexe159_1","displayName":"True","description":null,"helpText":null}]},"78570850bf3c4802":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowpersistence","displayName":"Allow data persistence","description":"This policy setting allows you to decide whether data should persist across different sessions in Microsoft Defender Application Guard. If you enable this setting, Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowpersistence_0","displayName":"Disabled","description":"Application Guard discards user-downloaded files and other items (such as, cookies, Favorites, and so on) during machine restart or user log-off.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowpersistence_1","displayName":"Enabled","description":"Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions.","helpText":null}]},"78a55bb34eab78c3":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_datecolon68","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"78522d46622835cc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]},"788962ff2b72f9d4":{"id":"user_vendor_msft_policy_config_admx_desktop_nonethood","displayName":"Hide Network Locations icon on desktop (User)","description":"Removes the Network Locations icon from the desktop.\r\n\r\nThis setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.\r\n\r\nNote: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nonethood"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nonethood_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nonethood_1","displayName":"Enabled","description":null,"helpText":null}]},"78bff13088e1d520":{"id":"user_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_1","displayName":"Restrict Internet communication (User)","description":"This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.\r\n\r\nIf you enable this setting, all of the the policy settings listed in the \"Internet Communication settings\" section are set such that their respective features cannot access the Internet.\r\n\r\nIf you disable this policy setting, all of the the policy settings listed in the \"Internet Communication settings\" section are set such that their respective features can access the Internet.\r\n\r\nIf you do not configure this policy setting, all of the the policy settings in the \"Internet Communication settings\" section are set to not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-internetmanagement-restrictcommunication-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_1_1","displayName":"Enabled","description":null,"helpText":null}]},"78d5a7e4d7f9e2b4":{"id":"user_vendor_msft_policy_config_admx_taskbar_showwindowsstoreappsontaskbar","displayName":"Show packaged Microsoft Store apps on the taskbar (User)","description":"\r\nThis policy setting allows users to see Windows Store apps on the taskbar.\r\n \r\nIf you enable this policy setting, users will see Windows Store apps on the taskbar.\r\n \r\nIf you disable this policy setting, users won’t see Windows Store apps on the taskbar.\r\n \r\nIf you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-showwindowsstoreappsontaskbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_showwindowsstoreappsontaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_showwindowsstoreappsontaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"781c2cf25670d384":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarlockall","displayName":"Lock all taskbar settings (User)","description":"This policy setting allows you to lock all taskbar settings.\r\n\r\nIf you enable this policy setting, the user cannot access the taskbar control panel. The user is also unable to resize, move or rearrange toolbars on their taskbar.\r\n\r\nIf you disable or do not configure this policy setting, the user will be able to set any taskbar setting that is not prevented by another policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarlockall"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarlockall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarlockall_1","displayName":"Enabled","description":null,"helpText":null}]},"788193073c6d3792":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users cannot preview items or get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-restrictedlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"785e05886e2a7ff8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended","displayName":"Parameters for suggest URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURLPostParams specifies the parameters during suggestion search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSuggestURLPostParams unset unset means suggest search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"78fda3ccaa5fe713":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (User)","description":"Setting the policy to 3 lets websites ask for write access to files and directories in the host operating system's file system. Setting the policy to 2 denies access.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"785483021f8af5c5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins","displayName":"Always runs plugins that require authorization (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"782621874740b81f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171","displayName":"OLAP PivotTable User Defined Function (UDF) security setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171_1","displayName":"Allow ALL UDFs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171_2","displayName":"Allow safe UDFs only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171_3","displayName":"Allow NO UDFs","description":null,"helpText":null}]},"789468dcb302a451":{"id":"user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen","displayName":"Configure Windows Spotlight On Lock Screen (User)","description":"Allows IT admins to specify whether spotlight should be used on the user's lock screen. If your organization does not have an Enterprise spotlight content service, then this policy will behave the same as a setting of 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#configurewindowsspotlightonlockscreen"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_0","displayName":"Windows spotlight disabled.","description":"Windows spotlight disabled.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_1","displayName":"Windows spotlight enabled.","description":"Windows spotlight enabled.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_2","displayName":"Windows spotlight is always enabled, the user cannot disable it","description":"Windows spotlight is always enabled, the user cannot disable it","helpText":null},{"id":"user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_3","displayName":"Windows spotlight is always enabled, the user cannot disable it. For special configurations only","description":"Windows spotlight is always enabled, the user cannot disable it. For special configurations only","helpText":null}]},"78ff99d1d388ad77":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709","displayName":"Enable dragging of content from different domains across windows (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3","displayName":"Disable","description":null,"helpText":null}]},"781c924903ac8bf8":{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled","displayName":"Control the User-Agent Client Hints GREASE Update feature (User)","description":"The User-Agent GREASE specification recommends the inclusion of additional GREASE characters beyond the current semicolon and space, and recommends that the arbitrary version number be varied over time.\r\n\r\nWhen enabled, the User-Agent Client Hints GREASE Update feature aligns the User-Agent GREASE algorithm with the latest version from the specification. The updated specification may break some websites that restrict the characters that requests may contain. For more information, see the following specification: https://wicg.github.io/ua-client-hints/#grease\r\n\r\nIf this policy is enabled or not configured, the User-Agent GREASE algorithm from the specification will be used. If the policy is disabled, the prior User-Agent GREASE algorithm will be used.\r\n\r\nThis policy is a temporary measure and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"78a28ad6ceb3e243":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkadd","displayName":"Replace MAPI - Work Address (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"work address\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"work address\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkadd_1","displayName":"Enabled","description":null,"helpText":null}]},"786c8779b757c5b3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3","displayName":"Workflow Cache 3 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_1","displayName":"Enabled","description":null,"helpText":null}]},"782345270c94f64d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_configuretimestampinghashingalgorithm_l_configuretimestampinghashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_configuretimestampinghashingalgorithm_l_configuretimestampinghashingalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_configuretimestampinghashingalgorithm_l_configuretimestampinghashingalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_configuretimestampinghashingalgorithm_l_configuretimestampinghashingalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_configuretimestampinghashingalgorithm_l_configuretimestampinghashingalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"781eda28cd4e0921":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_autoselectencodingforoutgoingmessages","displayName":"Auto-select encoding for outgoing messages (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_autoselectencodingforoutgoingmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_autoselectencodingforoutgoingmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"780b6327c768a830":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventcopyingormovingitemsbetweenaccounts_l_preventcopyingormovingitemsbetweenaccountsid","displayName":"SMTP address domain (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":null},"78ec3140b4682d80":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_printinsertedobjectsatprinterresolution","displayName":"Print inserted objects at printer resolution (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_printinsertedobjectsatprinterresolution_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_printinsertedobjectsatprinterresolution_1","displayName":"Enabled","description":null,"helpText":null}]},"78e748936c758fa8":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07_l_allowsubfolders35","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07_l_allowsubfolders35_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07_l_allowsubfolders35_1","displayName":"True","description":null,"helpText":null}]},"78c6e2d3b683ee3d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enablelivedynamics","displayName":"Enable live dynamics (User)","description":"When you resize or rotate a shape, you can see the shape as it is being transformed, instead of just seeing the bounding box until the action is complete","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enablelivedynamics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enablelivedynamics_1","displayName":"Enabled","description":null,"helpText":null}]},"78f94fea2a8821a0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_writingstyle","displayName":"Writing style (User)","description":"Specifies the writing style Word uses when checking the active document.","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_writingstyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_writingstyle_1","displayName":"Enabled","description":null,"helpText":null}]},"7842528247ae30fd":{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_l_defaultcompressionqualityforinlinedimagesinoutlookpart","displayName":"Default inline image compression quality for Outlook: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"61ecc5ec-c494-420b-a27b-a8d2fbdd7df1","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_l_defaultcompressionqualityforinlinedimagesinoutlookpart_0","displayName":"High Fidelity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_l_defaultcompressionqualityforinlinedimagesinoutlookpart_1","displayName":"330 ppi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_l_defaultcompressionqualityforinlinedimagesinoutlookpart_2","displayName":"220 ppi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_l_defaultcompressionqualityforinlinedimagesinoutlookpart_3","displayName":"150 ppi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_l_defaultcompressionqualityforinlinedimagesinoutlookpart_4","displayName":"96 ppi","description":null,"helpText":null}]},"780d579f31223a64":{"id":"vendor_msft_firewall_mdmstore_domainprofile_disablestealthmode","displayName":"Disable Stealth Mode","description":"This value is an on/off switch. When this option is false, the server operates in stealth mode. The firewall rules used to enforce stealth mode are implementation-specific. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_disablestealthmode_false","displayName":"False","description":"Use Stealth Mode","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_disablestealthmode_true","displayName":"True","description":"Disable Stealth Mode","helpText":null}]},"78087611e7eb5102":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_localaddressranges","displayName":"Local Address Ranges","description":"Consists of one or more comma-delimited tokens specifying the local addresses covered by the rule. \"*\" is the default value.\nValid tokens include:\n\"*\" indicates any local address. If present, this must be the only token included.\n\nA subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255.\nA valid IPv6 address.\nAn IPv4 address range in the format of \"start address - end address\" with no spaces included.\nAn IPv6 address range in the format of \"start address - end address\" with no spaces included. If not specified the default is All.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"7854ecd82fcf7354":{"id":"vendor_msft_firewall_mdmstore_publicprofile_allowlocalipsecpolicymerge","displayName":"Allow Local Ipsec Policy Merge","description":"This value is an on/off switch. If this value is false, connection security rules from the local store are ignored and not enforced, regardless of the schema version and connection security rule version. The merge law for this option is to always use the value of the GroupPolicyRSoPStore.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_allowlocalipsecpolicymerge_false","displayName":"False","description":"AllowLocalIpsecPolicyMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_allowlocalipsecpolicymerge_true","displayName":"True","description":"AllowLocalIpsecPolicyMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/79.json b/public/intune-definitions/79.json new file mode 100644 index 000000000000..a1c68f1034f8 --- /dev/null +++ b/public/intune-definitions/79.json @@ -0,0 +1 @@ +{"79dad7937ae3b1ed":{"id":"ade_maximumsecondsinactivityuntiltemporarysessionlogsout","displayName":"Maximum seconds of inactivity until temporary session logs out","description":"Available for devices running iPadOS versions 14.5 and later. Enter a value in seconds (minimum value to add is 30 seconds). If there isn't any activity after the value you enter, then the temporary session automatically signs out. If you set the value to anything between 0-29, then the temporary session stays signed in. ","helpText":"Enter value","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":null},"79478ab0ab4a649f":{"id":"com.apple.app.lock_app_options_disabletouch","displayName":"Disable Touch","description":"If true, disables the touch screen.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_disabletouch_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_disabletouch_true","displayName":"True","description":null,"helpText":null}]},"79519364175dcc26":{"id":"com.apple.directoryservice.managed_username","displayName":"User Name","description":"The user name of the account for the domain.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"7935aa87e3274e52":{"id":"com.apple.dock_persistent-apps_item_tile-data_label","displayName":"Label","description":"The label of the Dock item.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"7911086aec23a6b6":{"id":"com.apple.dock_static-apps_item_tile-data_url","displayName":"URL","description":"The URL string","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"7904a1bb3e579546":{"id":"com.apple.extensiblesso_extensiondata_includekerberosappsinbundleidacl_kerberos","displayName":"Include Kerberos Apps In Bundle ID ACL","description":"If true, the Kerberos extension allows the standard kerberos utilities including TicketViewer and klist to access and use the credential. This is in addition to Include Managed Apps In Bundle ID ACL or the Credential Bundle ID ACL, if it is specified.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_includekerberosappsinbundleidacl_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_includekerberosappsinbundleidacl_kerberos_true","displayName":"True","description":null,"helpText":null}]},"79af3250cfefd6b9":{"id":"com.apple.ldap.account_ldapaccountusername","displayName":"LDAP Account User Name","description":"The user name.","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":null},"7942db1b49b1bb71":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"79a7109ada2175e6":{"id":"com.apple.managedclient.preferences_disableexport","displayName":"Disable export to OLM files","description":"Prevent users exporting data to the local file system.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-export"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_disableexport_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableexport_true","displayName":"True","description":null,"helpText":null}]},"79b5a42ca569ec68":{"id":"com.apple.managedclient.preferences_disabletlsparsing","displayName":"Disable TLS parsing","description":"Disables parsing of TLS traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disabletlsparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disabletlsparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"792beb3fc3e771b0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_recommended","displayName":"Block third party cookies (users can override)","description":"This policy controls whether third-party cookies are blocked in regular browsing sessions.\n\nIf you enable this policy, web page elements that are not from the domain shown in the address bar can't set cookies.\n\nIf you disable this policy, third-party cookies are allowed, including from domains other than the one shown in the address bar.\n\nIf you don't configure this policy, third-party cookies are allowed by default, but users can change this setting.\n\nNote: This policy doesn't apply in InPrivate mode. In InPrivate, third-party cookies are blocked by default and can only be allowed at the site level using the CookiesAllowedForUrls policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"791d4a0aea9194c8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon is shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\n\nThis policy only applies when users are accessing Copilot in the sidepane.\n\nIf the policy is enabled: Copilot appears in the toolbar.\n\nIf the policy is disabled: Copilot doesn't appear in the toolbar.\n\nIf the policy isn't configured: Otherwise, Copilot shows in the toolbar and users can enable or disable Copilot from showing by using the Show Copilot toggle in settings.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7949255d2634a2ee":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype","displayName":"Configure the Microsoft Edge new tab page experience (Obsolete)","description":"This policy is obsolete because the new version of the enterprise new tab page no longer requires choosing between different content types. Instead, the content that's presented to the user can be controlled via the Microsoft 365 admin center. To get to the Microsoft 365 admin center, sign in at https://admin.microsoft.com with your admin account.\n\nLets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\n\nIf you set this policy to 'News', users see the Microsoft News feed experience on the new tab page.\n\nIf you set this policy to 'Office', users with an Azure Active Directory browser sign-in see the Office 365 feed experience on the new tab page.\n\nIf you disable or don't configure this policy, users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, and the standard new tab page feed experience. Users without an Azure Active Directory browser sign-in to see the standard new tab page experience.\n\nIf you enable this policy *and* the \"NewTabPageLocation\" policy, \"NewTabPageLocation\" has precedence.\n\nPolicy options mapping:\n\n* News (0) = Microsoft News feed experience\n\n* Office (1) = Office 365 feed experience\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_news","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_office","displayName":"Office 365 feed experience","description":null,"helpText":null}]},"79f0abdb9341ce4d":{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2_selectdcbatterydischargeaction1","displayName":"Low Battery Notification Action","description":null,"helpText":"","infoUrls":[],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2_selectdcbatterydischargeaction1_0","displayName":"Take no action","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2_selectdcbatterydischargeaction1_1","displayName":"Sleep","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2_selectdcbatterydischargeaction1_2","displayName":"Hibernate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2_selectdcbatterydischargeaction1_3","displayName":"Shut down","description":null,"helpText":null}]},"7914e3f68cbebfa9":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_image_quality_ts_server_image_quality_levels","displayName":"Image quality:","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_image_quality_ts_server_image_quality_levels_1","displayName":"Lossless","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_image_quality_ts_server_image_quality_levels_2","displayName":"High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_image_quality_ts_server_image_quality_levels_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_image_quality_ts_server_image_quality_levels_4","displayName":"Low","description":null,"helpText":null}]},"7958facef7070608":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi_vdicollectionname","displayName":"VDI Collection Name:","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"7946e606c53ea4d5":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync","displayName":"Do not synchronize Windows Apps","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings for Windows apps.\r\nBy default, the UE-V Agent synchronizes settings for Windows apps between the computer and the settings storage location. \r\nIf you enable this policy setting, the UE-V Agent will not synchronize settings for Windows apps.\r\nIf you disable this policy setting, the UE-V Agent will synchronize settings for Windows apps. \r\nIf you do not configure this policy setting, any defined values are deleted.\r\nNote: If the user connects their Microsoft account for their computer then the UE-V Agent will not synchronize Windows apps. The Windows apps will default to whatever settings are configured in the Sync your settings configuration in Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-disablewin8sync"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync_1","displayName":"Enabled","description":null,"helpText":null}]},"79b518b70613f2a7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions","displayName":"Allow download restrictions","description":"Setting the policy means users can't bypass download security decisions.\r\n\r\nThere are many types of download warnings within Chrome, which roughly break down into these categories (learn more about Safe Browsing verdicts https://support.google.com/chrome/?p=ib_download_blocked):\r\n\r\n* Malicious, as flagged by the Safe Browsing server\r\n* Uncommon or unwanted, as flagged by the Safe Browsing server\r\n* A dangerous file type (e.g. all SWF downloads and many EXE downloads)\r\n\r\nSetting the policy blocks different subsets of these, depending on it's value:\r\n\r\n0: No special restrictions. Default.\r\n\r\n1: Blocks malicious files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n2: Blocks malicious files flagged by the Safe Browsing server AND Blocks uncommon or unwanted files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n3: Blocks all downloads. Not recommended, except for special use cases.\r\n\r\n4: Blocks malicious files flagged by the Safe Browsing server, does not block dangerous file types. Recommended.\r\n\r\nNote: These restrictions apply to downloads triggered from webpage content, as well as the Download link... menu option. They don't apply to the download of the currently displayed page or to saving as PDF from the printing options. Read more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"79e6e76ce252d870":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled","displayName":"Use hardware acceleration when available","description":"Setting the policy to Enabled or leaving it unset turns on hardware acceleration, if available.\r\n\r\nSetting the policy to Disabled turns off hardware acceleration.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"79c86d863c1c3358":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"798dec7e91d6813b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_relaunchwindow","displayName":"Relaunch time window (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"7921e92ae35f5ea7":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"7905f36336f7e7f1":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_namedpipesthatcanbeaccessedanonymously","displayName":"Network Access Named Pipes That Can Be Accessed Anonymously","description":"Network access: Named pipes that can be accessed anonymously This security setting determines which communication sessions (pipes) will have attributes and permissions that allow anonymous access. Default: None.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_namedpipesthatcanbeaccessedanonymously"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"79fafb526d6be7e8":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended","displayName":"Machine learning powered autofill suggestions","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and will not be used elsewhere.\r\n\r\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\r\n\r\nIf you disable this policy, machine learning powered autofill suggestions will not be shown, and autofill will no longer use cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"792da279848560b9":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites","displayName":"Allow JavaScript optimization on these sites","description":"Allows you to set a list of site url patterns that specify sites for which advanced JavaScript optimizations are enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the 'JavaScriptOptimizerAllowedForSites' (Allow JavaScript optimization on these sites) policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript optimizations enabled, but fabrikam.com will use the policy from 'DefaultJavaScriptOptimizerSetting' (Control use of JavaScript optimizers), if set, or default to JavaScript optimizations enabled. Blocklist entries have higher priority than allowlist entries, which in turn have higher priority than the configured default value.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptOptimizerSetting' applies to the site, if set, otherwise Javascript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"79fded859f85eaa2":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention","displayName":"Block tracking of users' web-browsing activity (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_0","displayName":"Off (no tracking prevention)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_1","displayName":"Basic (blocks harmful trackers, content and ads will be personalized)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_2","displayName":"Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_3","displayName":"Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)","description":null,"helpText":null}]},"794633291d990dd9":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression","displayName":"Block all ads on Bing search results","description":"Enables an ad-free search experience on Bing.com\r\n\r\nIf you enable this policy, then a user can search on bing.com and have an ad-free search experience. At the same time, the SafeSearch setting will be set to 'Strict' and can't be changed by the user.\r\n\r\nIf you don't configure this policy, then the default experience will have ads in the search results on bing.com. SafeSearch will be set to 'Moderate' by default and can be changed by the user.\r\n\r\nThis policy is only available for K-12 SKUs that are identified as EDU tenants by Microsoft.\r\n\r\nPlease refer to https://go.microsoft.com/fwlink/?linkid=2119711 to learn more about this policy or if the following scenarios apply to you:\r\n\r\n* You have an EDU tenant, but the policy doesn't work.\r\n\r\n* You had your IP whitelisted for having an ad free search experience.\r\n\r\n* You were experiencing an ad-free search experience on Microsoft Edge Legacy and want to upgrade to the new version of Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression_1","displayName":"Enabled","description":null,"helpText":null}]},"793d5da95aff6b9d":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy","displayName":"Application Guard Container Proxy","description":"Configures the proxy settings for Microsoft Edge Application Guard.\r\nIf you enable this policy, Microsoft Edge Application Guard ignores other sources of proxy configurations.\r\n\r\nIf you don't configure this policy, Microsoft Edge Application Guard uses the proxy configuration of the host.\r\n\r\nThis policy does not affect the proxy configuration of Microsoft Edge outside of Application Guard (on the host).\r\n\r\nThe ProxyMode field lets you specify the proxy server used by Microsoft Edge Application Guard.\r\n\r\nThe ProxyPacUrl field is a URL to a proxy .pac file.\r\n\r\nThe ProxyServer field is a URL for the proxy server.\r\n\r\nIf you choose the 'direct' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'auto_detect' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'fixed_servers' value as 'ProxyMode', the 'ProxyServer' field is used.\r\n\r\nIf you choose the 'pac_script' value as 'ProxyMode', the 'ProxyPacUrl' field is used.\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"direct\", \r\n \"ProxyPacUrl\": \"https://internal.site/example.pac\", \r\n \"ProxyServer\": \"123.123.123.123:8080\"\r\n}","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_1","displayName":"Enabled","description":null,"helpText":null}]},"799f5c7bb7a6a57f":{"id":"device_vendor_msft_policy_config_systemservices_configurehomegrouplistenerservicestartupmode","displayName":"Configure Home Group Listener Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurehomegrouplistenerservicestartupmode"],"categoryId":"4f29ef5c-6ca0-4b09-893f-01755a670877","categoryName":"System Services","options":null},"792ed73d773604f4":{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability","displayName":"Touch Keyboard Full Mode Availability","description":"Specifies whether the full keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the full keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardfullmodeavailability"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability_1","displayName":"Full keyboard is always available.","description":"Full keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability_2","displayName":"Full keyboard is always disabled.","description":"Full keyboard is always disabled.","helpText":null}]},"79a665f165739b68":{"id":"device_vendor_msft_scepcertificate_hashalgorithm","displayName":"Hash algorithm","description":"Use a hash algorithm type with the certificate. Make sure to select the strongest level of security that the connecting devices support.","helpText":"","infoUrls":[],"categoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","categoryName":"SCEP certificate","options":null},"795fa3b3f9f8cca1":{"id":"passcode_maximumgraceperiodinminutes","displayName":"Maximum Grace Period","description":"Specifies the maximum period that a user can select, during which a device can be unlocked without entering the passcode. A value of 0 implies no grace period, and requires a passcode be entered immediately. In the absence of this key, the user can select any period.\nIn macOS, this will be translated to screensaver settings.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"79e646f13365dd5e":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},"79399dc846db010c":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinvideos","displayName":"Videos (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinvideos_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinvideos_1","displayName":"True","description":null,"helpText":null}]},"79fb1c3497f34aef":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_outputdirectory","displayName":"Transcript output directory (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":null},"793b2b219f1025f0":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters","displayName":"Network Printers (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters_1","displayName":"True","description":null,"helpText":null}]},"7930b270b1c33f0a":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel","displayName":"Microsoft Excel 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Excel 2010.\r\nBy default, the user settings of Microsoft Excel 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Excel 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010excel"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel_1","displayName":"Enabled","description":null,"helpText":null}]},"792165bdccfc52cc":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness","displayName":"Microsoft OneDrive for Business 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for OneDrive for Business 2016.\r\nBy default, the user settings of OneDrive for Business 2016 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2016 from synchronization between computers.\r\nIf you enable this policy setting, OneDrive for Business 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, OneDrive for Business 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onedriveforbusiness"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness_1","displayName":"Enabled","description":null,"helpText":null}]},"796e46d1be4be0fa":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016","displayName":"Microsoft Office 365 Word 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Word 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Word 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365word2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016_1","displayName":"Enabled","description":null,"helpText":null}]},"797ed6f42d389823":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (User)","description":"If the policy is set, the UDP port range used by WebRTC is restricted to the specified port interval (endpoints included).\r\n\r\nIf the policy is not set, or if it is set to the empty string or an invalid port range, WebRTC is allowed to use any available local UDP port.\r\n\r\nExample value: 10000-11999","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},"79b11e83639b523b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting","displayName":"Default Flash setting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"7986df551f47001d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability","displayName":"Control availability of extensions unpublished on the Chrome Web Store. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability_0","displayName":"Allow unpublished extensions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability_1","displayName":"Disable unpublished extensions","description":null,"helpText":null}]},"791e8b010bc91d48":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel","displayName":"Legacy converters for Excel (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"79ba5383cd7955ce":{"id":"user_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning","displayName":"Turn on certificate address mismatch warning (User)","description":"This policy setting allows you to turn on the certificate address mismatch security warning. When this policy setting is turned on, the user is warned when visiting Secure HTTP (HTTPS) websites that present certificates issued for a different website address. This warning helps prevent spoofing attacks.\n\nIf you enable this policy setting, the certificate address mismatch warning always appears.\n\nIf you disable or do not configure this policy setting, the user can choose whether the certificate address mismatch warning appears (by using the Advanced page in the Internet Control panel).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowcertificateaddressmismatchwarning"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_1","displayName":"Enabled","description":null,"helpText":null}]},"79674387551a025f":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, users are queried whether to allow HTML fonts to download.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowfontdownloads"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"790325792da728e8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"7944e34573c34e04":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended","displayName":"Allow users to configure Site safety services (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy is obselete as the feature is being removed after Microsoft Edge version 127.\r\n\r\nThis policy disables site safety services from showing top site info in the page info dialog.\r\n\r\nIf you enable this policy or don't configure it, the top site info will be shown.\r\n\r\nIf you disable this policy, the top site info will not be shown.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"79307d7b4ef4d13e":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended","displayName":"Set new tab page quick links (User)","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\r\n\r\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\r\n\r\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' is not provided, the URL is used as the default title. If 'pinned' is not provided, the default value is false.\r\n\r\nMicrosoft Edge presents these in the order listed, from left to right, with all pinned tiles displayed ahead of non-pinned tiles.\r\n\r\nIf the policy is set as mandatory, the 'pinned' field will be ignored and all tiles will be pinned. The tiles can't be deleted by the user and will always appear at the front of the quick links list.\r\n\r\nIf the policy is set as recommended, pinned tiles will remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying non-pinned links via this policy to an existing browser profile, the links may not appear at all, depending on how they rank compared to the user's browsing history.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"pinned\": true,\r\n \"title\": \"Contoso Portal\",\r\n \"url\": \"https://contoso.com\"\r\n },\r\n {\r\n \"title\": \"Fabrikam\",\r\n \"url\": \"https://fabrikam.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"796901f6972e6568":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked","displayName":"Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe (User)","description":"Microsoft Edge will block navigations to external protocols inside a\r\nsandboxed iframe.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block those navigations.\r\n\r\nIf you disable this policy, Microsoft Edge will not block those navigations.\r\n\r\nThis can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Microsoft Edge version 104.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked_1","displayName":"Enabled","description":null,"helpText":null}]},"79ad384be714fc20":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastserviceserverurl7","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"7972b64e711fdc58":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicsaudiarabia","displayName":"Arabic (Saudi Arabia) (User)","description":"Enables the editing language Arabic (Saudi Arabia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicsaudiarabia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicsaudiarabia_1","displayName":"Enabled","description":null,"helpText":null}]},"794918849f5980f9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_russianmoldova","displayName":"Russian (Moldova) (User)","description":"Enables the editing language Russian (Moldova)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_russianmoldova_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_russianmoldova_1","displayName":"Enabled","description":null,"helpText":null}]},"7915427a07cd4674":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc20","displayName":"Unsafe Location #20 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"79e236cdbaaa5b4e":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime","displayName":"Lock password protected sections after user hasn't worked on them for a time (User)","description":"OneNote supports password protecting sections and they are unlocked once a user types the password and can be locked again by either a timeout period or when you navigate away from the section. This option will lock the section after the user hasn't used the section for the selected amount of time.","helpText":"","infoUrls":[],"categoryId":"1979a12b-2a72-438d-9de7-320d1b38e777","categoryName":"Password","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_1","displayName":"Enabled","description":null,"helpText":null}]},"79346e3f67a4c020":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize37","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ee62e9fc-14c8-4f24-aa7e-89524087a802","categoryName":"Customizable Error Messages","options":null},"79720d34a9d24d40":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_l_urladdressofassociatedwebpage61","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"79d6d97cc4c1f3ae":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice","displayName":"Polling Out-of-office Web service (User)","description":"By default, the Out Of Office (OOF) Web service is polled every 15 minutes (900000 milliseconds). This setting allows you to set the maximum number of milliseconds that elapse before Outlook polls the OOF Web service for OOF status.","helpText":"","infoUrls":[],"categoryId":"93a20c17-1e34-4778-8c95-91a46980ea75","categoryName":"Out of Office Assistant","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_1","displayName":"Enabled","description":null,"helpText":null}]},"795c413871dc8982":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_automaticallyconfigureprofilebasedonactive","displayName":"Automatically configure profile based on Active Directory Primary SMTP address (User)","description":"Automatically configure only the first profile based on Active Directory primary SMTP address\r\n\r\nThis policy setting controls whether users who are joined to a domain in an Active Directory environment can change the primary SMTP address that is used when they set up an account in Outlook.\r\n\r\nIf this policy setting is enabled, users can enter a profile name to create a new profile without using the new account wizard. A user interface does not appear as the profile is created.\r\n\r\nThis key will be ignored after the first profile has been successfully created.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_automaticallyconfigureprofilebasedonactive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_automaticallyconfigureprofilebasedonactive_1","displayName":"Enabled","description":null,"helpText":null}]},"7913e5eb7b31ff8a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_personaldistributionlistsexchangeonly","displayName":"Do not validate personal Contact Groups when sending e-mail messages (User)","description":"Use only the local cache to obtain current user information when expanding a Personal Contact Group while sending e-mail","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_personaldistributionlistsexchangeonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_personaldistributionlistsexchangeonly_1","displayName":"Enabled","description":null,"helpText":null}]},"796a3804fc01eb5d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_modifynumberofchangeditemsincluded_l_empty34","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":null},"79e0247c6e5726cb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems","displayName":"Disable commands (User)","description":"This policy setting allows you to disable specific command bar buttons and menu items in the specified applications. \r\n\r\nIf you enable this policy setting you can disable specific command bar buttons and menu items in the user interface for the selected application. The predefined list of command bar buttons and menu items you can disable becomes available to you when you enable this policy setting. \r\n\r\nIf you disable or do not configure this policy setting, the predefined list of command bar buttons and menu items are enabled for the application.","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},"79833c08d3f3215a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpoint972003presentationsshowstemplatesandaddinfiles","displayName":"PowerPoint 97-2003 presentations, shows, templates and add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpoint972003presentationsshowstemplatesandaddinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpoint972003presentationsshowstemplatesandaddinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"79b7443e273a9c94":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setnumberofplacesintherecentplaceslist","displayName":"Number of folders in the Recent Folders list (User)","description":"This policy setting specifies the number of unpinned entries displayed in the Recent Folders list that appears when users click Open or Save As on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of unpinned entries to be between 0 and 20. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 5 unpinned items are displayed in the Recent Folders list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Folders list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setnumberofplacesintherecentplaceslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setnumberofplacesintherecentplaceslist_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/7a.json b/public/intune-definitions/7a.json new file mode 100644 index 000000000000..9ab15b0af4d1 --- /dev/null +++ b/public/intune-definitions/7a.json @@ -0,0 +1 @@ +{"7a40bf74c7953315":{"id":"com.apple.assetcache.managed_allowsharedcaching","displayName":"Allow Shared Caching","description":"If true, caches non-iCloud content, such as apps and software updates. Clients may take some time (hours, days) to react to changes to this setting; it does not have an immediate effect.\r\nAt least one of the Allow Personal Caching or Allow Shared Caching settings must be true. ","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_allowsharedcaching_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_allowsharedcaching_true","displayName":"True","description":null,"helpText":null}]},"7ae9c39ddf5f5f7c":{"id":"com.apple.directoryservice.managed_adnamespace","displayName":"AD Namespace","description":"The primary user account naming convention; either forest or domain.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adnamespace_0","displayName":"forest","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adnamespace_1","displayName":"domain","description":null,"helpText":null}]},"7afae65989eac679":{"id":"com.apple.extensiblesso_extensiondata_pwchangeurl_kerberos","displayName":"Password Change URL","description":"This URL will launch in the user’s default web browser when they initiate a password change. Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"7a21f080f2942766":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"7aa507ef67549346":{"id":"com.apple.managedclient.preferences_defaultsearchproviderencodings","displayName":"Default search provider encodings","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.\n\nThis policy is optional. If not configured, the default, UTF-8, is used.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchproviderencodings"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"7a89082912c461f2":{"id":"com.apple.managedclient.preferences_hidedockicon","displayName":"Hide dock icon","description":"Specifies whether the dock icon for OneDrive is hidden.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#hidedockicon"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_hidedockicon_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_hidedockicon_true","displayName":"True","description":null,"helpText":null}]},"7af4759311549b14":{"id":"com.apple.managedclient.preferences_uploadfromphoneenabled","displayName":"Enable upload files from mobile in Microsoft Edge desktop","description":"This policy lets you configure the \"Upload from mobile\" feature in Microsoft Edge.\n\nUpload from mobile lets users select file from mobile devices to desktop when user upload file in a webpage in Microsoft Edge.\n\nIf you enable or don't configure this policy, you can use the Upload from mobile feature in Microsoft Edge.\n\nIf you disable this policy, you can't use the Upload from mobile feature in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#uploadfromphoneenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_uploadfromphoneenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_uploadfromphoneenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7a66fc3b792d0915":{"id":"com.apple.mcxprinting_requireadmintoaddprinters","displayName":"Require Admin To Add Printers","description":"If true, requires an administrator password to add printers.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":[{"id":"com.apple.mcxprinting_requireadmintoaddprinters_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxprinting_requireadmintoaddprinters_true","displayName":"True","description":null,"helpText":null}]},"7abb2409953be753":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidername_recommended","displayName":"Default search provider name (users can override)","description":"Specifies the name of the default search provider.\n\nIf you enable this policy, you set the name of the default search provider.\n\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\n\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy isn't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"7a8b2b8ee5169edc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsenabled","displayName":"Configure sleeping tabs","description":"This policy setting lets you configure whether to turn on sleeping tabs. Sleeping tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, sleeping tabs is turned on.\n\nIndividual sites may be blocked from being put to sleep by configuring the policy \"SleepingTabsBlockedForUrls\".\n\nIf this policy is enabled, sleeping tabs are turned on.\n\nIf this policy is disabled, sleeping tabs are turned off. However, during moderate memory pressure, the system may freeze (sleep) tabs before discarding them.\n\nIf this policy is not configured, users can choose whether to enable sleeping tabs.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7a3ed7b70a4cf55e":{"id":"device_vendor_msft_defender_configuration_daysuntilaggressivecatchupquickscan","displayName":"Days Until Aggressive Catchup Quick Scan","description":"Configure how many days can pass before an aggressive catchup quick scan is triggered. Valid values are 0 and [7-60]. Configuring this setting to 0 will disable aggressive catchup quick scans. By default, these scans will run every 30 days when enabled. These scans are only enabled if catchup scans (quick and full) are disabled, and Microsoft Defender Antivirus is not in Passive mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"7abeada0d826a143":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxfilesperjob","displayName":"Limit the maximum number of files allowed in a BITS job","description":"This policy setting limits the number of files that a BITS job can contain. By default, a BITS job is limited to 200 files. You can use this setting to raise or lower the maximum number of files a BITS jobs can contain.\r\n\r\n If you enable this policy setting, BITS will limit the maximum number of files a job can contain to the specified number.\r\n\r\n If you disable or do not configure this policy setting, BITS will use the default value of 200 for the maximum number of files a job can contain.\r\n\r\n Note: BITS Jobs created by services and the local administrator account do not count toward this limit.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxfilesperjob"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxfilesperjob_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxfilesperjob_1","displayName":"Enabled","description":null,"helpText":null}]},"7a72fdb7cb392c84":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_installtimeout_deviceinstall_installtimeout_time","displayName":"Device Installation Timeout (in seconds)","description":null,"helpText":"","infoUrls":[],"categoryId":"8da2792e-3ad7-4fe4-bb04-b797c3abcbe7","categoryName":"Device Installation","options":null},"7ac15fffa219958b":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_appendtomultilabelname","displayName":"Allow DNS suffix appending to unqualified multi-label name queries","description":"Specifies that computers may attach suffixes to an unqualified multi-label name before sending subsequent DNS queries if the original name query fails.\r\n\r\nA name containing dots, but not dot-terminated, is called an unqualified multi-label name, for example \"server.corp\" is an unqualified multi-label name. The name \"server.corp.contoso.com.\" is an example of a fully qualified name because it contains a terminating dot.\r\n\r\nFor example, if attaching suffixes is allowed, an unqualified multi-label name query for \"server.corp\" will be queried by the DNS client first. If the query succeeds, the response is returned to the client. If the query fails, the unqualified multi-label name is appended with DNS suffixes. These suffixes can be derived from a combination of the local DNS client's primary domain suffix, a connection-specific domain suffix, and a DNS suffix search list.\r\n\r\nIf attaching suffixes is allowed, and a DNS client with a primary domain suffix of \"contoso.com\" performs a query for \"server.corp\" the DNS client will send a query for \"server.corp\" first, and then a query for \"server.corp.contoso.com.\" second if the first query fails.\r\n\r\nIf you enable this policy setting, suffixes are allowed to be appended to an unqualified multi-label name if the original name query fails.\r\n\r\nIf you disable this policy setting, no suffixes are appended to unqualified multi-label name queries if the original name query fails.\r\n\r\nIf you do not configure this policy setting, computers will use their local DNS client settings to determine the query behavior for unqualified multi-label names.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-appendtomultilabelname"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_appendtomultilabelname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_appendtomultilabelname_1","displayName":"Enabled","description":null,"helpText":null}]},"7ac8142dd550c67f":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domainnamedevolutionlevel_dns_domainnamedevolutionlevellabel","displayName":"Set the primary DNS suffix devolution level","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":null},"7aa7ecfd561d748c":{"id":"device_vendor_msft_policy_config_admx_filerecovery_wdiscenarioexecutionpolicy","displayName":"Configure Corrupted File Recovery behavior","description":"This policy setting allows you to configure the recovery behavior for corrupted files to one of three states:\r\n\r\nRegular: Detection, troubleshooting, and recovery of corrupted files will automatically start with a minimal UI display. Windows will attempt to present you with a dialog box when a system restart is required. This is the default recovery behavior for corrupted files.\r\n\r\nSilent: Detection, troubleshooting, and recovery of corrupted files will automatically start with no UI. Windows will log an administrator event when a system restart is required. This behavior is recommended for headless operation.\r\n\r\nTroubleshooting Only: Detection and troubleshooting of corrupted files will automatically start with no UI. Recovery is not attempted automatically. Windows will log an administrator event with instructions if manual recovery is possible.\r\n\r\nIf you enable this setting, the recovery behavior for corrupted files will be set to either the regular (default), silent, or troubleshooting only state.\r\n\r\nIf you disable this setting, the recovery behavior for corrupted files will be disabled. No troubleshooting or resolution will be attempted.\r\n\r\nIf you do not configure this setting, the recovery behavior for corrupted files will be set to the regular recovery behavior.\r\n\r\nNo system or service restarts are required for changes to this policy to take immediate effect after a Group Policy refresh.\r\n\r\nNote: This policy setting will take effect only when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled, system file recovery will not be attempted. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filerecovery#admx-filerecovery-wdiscenarioexecutionpolicy"],"categoryId":"736134cb-4d82-427a-97b7-d219ac6a22f0","categoryName":"Corrupted File Recovery","options":[{"id":"device_vendor_msft_policy_config_admx_filerecovery_wdiscenarioexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filerecovery_wdiscenarioexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"7a31a88d7c432663":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_definitionupdatefilesharessources_signatureupdate_definitionupdatefilesharessources","displayName":"Define file shares for downloading security intelligence updates","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":null},"7af866cd3e72e30e":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_slowlinksettings","displayName":"Configure slow-link mode","description":"This policy setting controls the network latency and throughput thresholds that will cause a client computers to transition files and folders that are already available offline to the slow-link mode so that the user's access to this data is not degraded due to network slowness. When Offline Files is operating in the slow-link mode, all network file requests are satisfied from the Offline Files cache. This is similar to a user working offline.\r\n\r\nIf you enable this policy setting, Offline Files uses the slow-link mode if the network throughput between the client and the server is below (slower than) the Throughput threshold parameter, or if the round-trip network latency is above (slower than) the Latency threshold parameter.\r\n\r\nYou can configure the slow-link mode by specifying threshold values for Throughput (in bits per second) and/or Latency (in milliseconds) for specific UNC paths. We recommend that you always specify a value for Latency, since the round-trip network latency detection is faster. You can use wildcard characters (*) for specifying UNC paths. If you do not specify a Latency or Throughput value, computers running Windows Vista or Windows Server 2008 will not use the slow-link mode.\r\n\r\nIf you do not configure this policy setting, computers running Windows Vista or Windows Server 2008 will not transition a shared folder to the slow-link mode. Computers running Windows 7 or Windows Server 2008 R2 will use the default latency value of 80 milliseconds when transitioning a folder to the slow-link mode. Computers running Windows 8 or Windows Server 2012 will use the default latency value of 35 milliseconds when transitioning a folder to the slow-link mode. To avoid extra charges on cell phone or broadband plans, it may be necessary to configure the latency threshold to be lower than the round-trip network latency.\r\n\r\nIn Windows Vista or Windows Server 2008, once transitioned to slow-link mode, users will continue to operate in slow-link mode until the user clicks the Work Online button on the toolbar in Windows Explorer. Data will only be synchronized to the server if the user manually initiates synchronization by using Sync Center.\r\n\r\nIn Windows 7, Windows Server 2008 R2, Windows 8 or Windows Server 2012, when operating in slow-link mode Offline Files synchronizes the user's files in the background at regular intervals, or as configured by the \"Configure Background Sync\" policy. While in slow-link mode, Windows periodically checks the connection to the folder and brings the folder back online if network speeds improve.\r\n\r\nIn Windows 8 or Windows Server 2012, set the Latency threshold to 1ms to keep users always working offline in slow-link mode.\r\n\r\nIf you disable this policy setting, computers will not use the slow-link mode.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-slowlinksettings"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_slowlinksettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_slowlinksettings_1","displayName":"Enabled","description":null,"helpText":null}]},"7a72b345f1b0cf2b":{"id":"device_vendor_msft_policy_config_admx_printing_packagepointandprintonly_win7","displayName":"Only use Package Point and print","description":"This policy restricts clients computers to use package point and print only.\r\n\r\nIf this setting is enabled, users will only be able to point and print to printers that use package-aware drivers. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers.\r\n\r\nIf this setting is disabled, or not configured, users will not be restricted to package-aware point and print only.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-packagepointandprintonly-win7"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_packagepointandprintonly_win7_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_packagepointandprintonly_win7_1","displayName":"Enabled","description":null,"helpText":null}]},"7a3951bfaf52229e":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner","displayName":"Microsoft SharePoint Designer 2010","description":"This policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2010.\r\nBy default, the user settings of Microsoft SharePoint Designer 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Designer 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Designer 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010sharepointdesigner"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner_1","displayName":"Enabled","description":null,"helpText":null}]},"7a3fffc3fb9e276d":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_productnamedetails","displayName":"Product name","description":"The product name of the selected file as stated in the file attributes.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"7a681c1154c4c53e":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_publishing_refresh_options","displayName":"Global Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"7a8bb59b473d12e5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_serialallowallportsforurlsdesc","displayName":"Automatically grant permission to sites to connect all serial ports. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"7a6bf4fa2a5911c0":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility","displayName":"Printer Visibility","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Printer visibility component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Printer\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility_1","displayName":"Enabled","description":null,"helpText":null}]},"7a6b77f1ca75e4c2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor","displayName":"Rule Editor","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Rule Editor.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\RuleEditor\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor_1","displayName":"Enabled","description":null,"helpText":null}]},"7a652fa18d4be60a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_odfclockedretryinterval","displayName":"Locked Retry Interval (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"7ab0f9912605fbfc":{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate","displayName":"Trusted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowtrustedsiteszonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"7a5d3a1827ca4a62":{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_maxtokensize","displayName":"Maximum size","description":"","helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"7a9930fa410c1fc5":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_sharesthatcanbeaccessedanonymously","displayName":"Network Access Shares That Can Be Accessed Anonymously","description":"Network access: Shares that can be accessed anonymously This security setting determines which network shares can accessed by anonymous users. Default: None specified.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_sharesthatcanbeaccessedanonymously"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"7a9282af4bda80f8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory","displayName":"Allow importing of browsing history","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.\r\n\r\nIf you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"7ab990090bb44c48":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled","displayName":"Application Guard Favorites Sync Enabled","description":"This policy allows Microsoft Edge computers/devices that have application guard enabled to sync favorites from the host to the container so the favorites match.\r\n\r\nIf 'ManagedFavorites' (Configure favorites) are configured, those favorites will also be synced to the container.\r\n\r\nIf you enable this policy, editing favorites in the container is disabled. So, the add favorites and add favorites folder buttons will be blurred out in the UI of the container browser.\r\n\r\nIf you disable or don't configure this policy, favorites on the host will not be shared to the container.","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7ad3b910c69995c8":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_excelexe99","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_excelexe99_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_excelexe99_1","displayName":"True","description":null,"helpText":null}]},"7a6a8aad05177343":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_forceallowtheseapps","displayName":"Let Apps Access Call History Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"7a2645cb6191a89d":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic","displayName":"Let Apps Access Graphics Capture Programmatic","description":"This policy setting specifies whether Windows apps can use screen capture on arbitrary windows or displays.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"7af66b5358de3134":{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement_allowautoconfig_ipv6filter","displayName":"IPv6 filter:","description":"","helpText":"","infoUrls":[],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":null},"7a37bedf21d9c29d":{"id":"device_vendor_msft_policy_config_start_nopinningtotaskbar","displayName":"No Pinning To Taskbar","description":"This policy setting allows you to control pinning programs to the Taskbar. If you enable this policy setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinned to the Taskbar, these programs continue to show in the Taskbar. However, users cannot unpin these programs already pinned to the Taskbar, and they cannot pin new programs to the Taskbar. If you disable or do not configure this policy setting, users can change the programs currently pinned to the Taskbar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#nopinningtotaskbar"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_nopinningtotaskbar_0","displayName":"Disabled","description":"Pinning enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_start_nopinningtotaskbar_1","displayName":"Enabled","description":"Pinning disabled.","helpText":null}]},"7abd8f82f3543fa2":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disableanonymousguests","displayName":"Disable anonymous guests","description":"Disallow anonymous guests from joining a session. Live Share already has the “Live Share: Anonymous Guest Approval” setting, and so this policy is effectively just enforcing that to “reject”.\r\nFor more information, see: https://aka.ms/vsls-policies ","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disableanonymousguests_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disableanonymousguests_1","displayName":"Enabled","description":null,"helpText":null}]},"7a5cadd453b94c73":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap","displayName":"NAP Client Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-napsnap"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_1","displayName":"Enabled","description":null,"helpText":null}]},"7ad92fd4afda0335":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode","displayName":"Controls the mode of DNS-over-HTTPS (User)","description":"Controls the mode of the DNS-over-HTTPS resolver. Please note that this policy will only set the default mode for each query. The mode may be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.\r\n\r\nThe \"off\" mode will disable DNS-over-HTTPS.\r\n\r\nThe \"automatic\" mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error.\r\n\r\nThe \"secure\" mode will only send DNS-over-HTTPS queries and will fail to resolve on error.\r\n\r\nOn Android Pie and above, if DNS-over-TLS is active, Google Chrome will not send insecure DNS requests.\r\n\r\nIf this policy is unset the browser may send DNS-over-HTTPS requests to a resolver associated with the user's configured system resolver.\r\n\r\nExample value: off","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_1","displayName":"Enabled","description":null,"helpText":null}]},"7a3b53ca52ee8c76":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc","displayName":"Allow JavaScript on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"7a636351f383cd76":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06","displayName":"Trusted Location #6 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_1","displayName":"Enabled","description":null,"helpText":null}]},"7a8e3d9157c7f66d":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver","displayName":"Include local path when user is uploading files to a server (User)","description":"This policy setting controls whether or not local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path.\n\nIf you enable this policy setting, path information is sent when the user is uploading a file via an HTML form.\n\nIf you disable this policy setting, path information is removed when the user is uploading a file via an HTML form.\n\nIf you do not configure this policy setting, the user can choose whether path information is sent when he or she is uploading a file via an HTML form. By default, path information is sent.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneincludelocalpathwhenuploadingfilestoserver"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_1","displayName":"Enabled","description":null,"helpText":null}]},"7a3bfbcc16c4344c":{"id":"user_vendor_msft_policy_config_kioskbrowser_restartonidletime","displayName":"Restart On Idle Time (User)","description":"Amount of time in minutes the session is idle until the kiosk browser restarts in a fresh state.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#restartonidletime"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"7ae78cab841a5df1":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (User)","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Microsoft Defender SmartScreen warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on swf, exe, and jnlp extensions for *.contoso.com domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n { \"file_extension\": \"jnlp\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://contoso.com\",\r\n \"contoso2.com\"\r\n ],\r\n \"file_extension\": \"jnlp\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"swf\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"7a879df553270cf9":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed","displayName":"Allow Internet Explorer mode testing (User)","description":"This policy is a replacement for the ie-mode-test flag policy. It lets users open an IE mode tab from the UI menu option.\r\n\r\n This setting works in conjunction with:\r\n 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'\r\n and\r\n 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\n If you enable this policy, users can open IE mode tab from the UI option and navigate current site to an IE mode site.\r\n\r\n If you disable this policy, users can't see the UI option in the menu directly.\r\n\r\n If you don't configure this policy, you can set up the ie-mode-test flag manually.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"7aa428c4506bc846":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchreunion","displayName":"French (Reunion) (User)","description":"Enables the editing language French (Reunion)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchreunion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchreunion_1","displayName":"Enabled","description":null,"helpText":null}]},"7ac29059197bf18f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_l_workflowsig457","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_l_workflowsig457_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_l_workflowsig457_1","displayName":"True","description":null,"helpText":null}]},"7aab6ad784f34f38":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_l_selectdigitalsignaturehashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_l_selectdigitalsignaturehashingalgorithmdropid_0","displayName":"0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_l_selectdigitalsignaturehashingalgorithmdropid_512","displayName":"512","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_l_selectdigitalsignaturehashingalgorithmdropid_768","displayName":"768","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_l_selectdigitalsignaturehashingalgorithmdropid_1024","displayName":"1024","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_l_selectdigitalsignaturehashingalgorithmdropid_1536","displayName":"1536","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_l_selectdigitalsignaturehashingalgorithmdropid_2048","displayName":"2048","description":null,"helpText":null}]},"7aaf08aaf55784b9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_disabletheofficeclientfrompolling","displayName":"Disable the Office client from polling the SharePoint Server for published links (User)","description":"This policy setting controls whether Office 2016 applications can poll Office servers to retrieve lists of published links. \r\n\r\nIf you enable this policy setting, Office 2016 applications cannot poll an Office server for published links. \r\n\r\nIf you disable or do not configure this policy setting, users of Office 2016 applications can see and use links to Microsoft SharePoint Server sites from those applications. You can configure published links to Office applications during initial deployment, and can add or change links as part of regular operations. These links appear on the My SharePoint Sites tab of the Open, Save, and Save As dialog boxes when opening and saving documents from these applications. Links can be targeted so that they only appear to users who are members of particular audiences. \r\n\r\nNote - This policy setting applies to Microsoft SharePoint Server specifically. It does not apply to Microsoft SharePoint Foundation.","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_disabletheofficeclientfrompolling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_disabletheofficeclientfrompolling_1","displayName":"Enabled","description":null,"helpText":null}]},"7a8073187244a264":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_numberofbackupcopiestokeep_l_numberofbackupcopiestokeep2","displayName":"Number of backup copies to keep (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c02141e6-0725-4f6f-9138-83d10c6bc104","categoryName":"Backup","options":null},"7ad57bfea437002c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitfriendlyname","displayName":"Change the limit for the number of characters in Friendly Name (User)","description":"By default, the limit is 1000 characters for Friendly Name when an e-mail message is converted from MIME to MAPI. The number can be set to any positive integer. This helps prevent scenarios in which Outlook hangs while attempting conversion.","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitfriendlyname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitfriendlyname_1","displayName":"Enabled","description":null,"helpText":null}]},"7a07c5d082fae7bb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffautoswitchingfromhorizontaltovertical","displayName":"Turn off auto-switching from horizontal to vertical layout (User)","description":"This policy setting controls auto switching of calendar layouts from horizontal to vertical. \r\n\r\nIf you enable this policy setting, auto-switching is turned off.\r\n\r\nIf you disable or do not configure this policy setting, auto-switching is turned on.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffautoswitchingfromhorizontaltovertical_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffautoswitchingfromhorizontaltovertical_1","displayName":"Enabled","description":null,"helpText":null}]},"7ab67cca1351a3f8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_pathcolon36","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"7a38b6de78ec1bc4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_pathcolon56","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"7adffd1891444644":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_startup","displayName":"Startup (User)","description":"Defines the default path to Word's Startup folder.","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_startup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_startup_1","displayName":"Enabled","description":null,"helpText":null}]},"7adf91d1dcf582e4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails","displayName":"Set document behavior if file validation fails (User)","description":"This policy setting controls how Office handles documents when they fail file validation. \r\n\r\nIf you enable this policy setting, you can configure the following options for files that fail file validation:\r\n\r\n- Block files completely. Users cannot open the files.\r\n- Open files in Protected View and disallow edit. Users cannot edit the files. This is also how Office handles the files if you disable this policy setting.\r\n- Open files in Protected View and allow edit. Users can edit the files. This is also how Office handles the files if you do not configure this policy setting.\r\n\r\nIf you disable this policy setting, Office follows the \"Open files in Protected View and disallow edit\" behavior.\r\n\r\nIf you do not configure this policy setting, Office follows the \"Open files in Protected View and allow edit\" behavior.","helpText":"","infoUrls":[],"categoryId":"8391e79d-d618-47c3-979c-83544da43739","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/7b.json b/public/intune-definitions/7b.json new file mode 100644 index 000000000000..d9e446c3ca65 --- /dev/null +++ b/public/intune-definitions/7b.json @@ -0,0 +1 @@ +{"7bd4ada871794c56":{"id":"com.apple.applicationaccess_forcepreserveesimonerase","displayName":"Force Preserve ESIM On Erase","description":"If set to true, eSIM will be preserved when a device is erased due to too many failed password attempt or the \"Erase All Content and Settings\" option in Settings > General > Reset. eSIM will not be preserved if the device is erased by FindMy.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcepreserveesimonerase_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcepreserveesimonerase_true","displayName":"Enabled","description":null,"helpText":null}]},"7b2793758e1a4696":{"id":"com.apple.applicationaccess_ratingappsus","displayName":"Rating Apps - United States","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsus_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsus_1","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsus_2","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsus_3","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsus_4","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsus_5","displayName":"All","description":null,"helpText":null}]},"7b57dc8648216f93":{"id":"com.apple.applicationaccess_ratingregion","displayName":"Rating Region","description":"The country key that profile tools use to display the proper ratings for the given region. This data isn’t recognized or reported by the client.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingregion_0","displayName":"United States","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_1","displayName":"Australia","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_2","displayName":"Canada","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_3","displayName":"Germany","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_4","displayName":"France","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_5","displayName":"Ireland","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_6","displayName":"Japan","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_7","displayName":"New Zealand","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingregion_8","displayName":"Great Britain","description":null,"helpText":null}]},"7b7943b36b9b201d":{"id":"com.apple.loginwindow_autologinusername","displayName":"Autologin Username","description":"Sets up auto login with the specified short user name.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":null},"7b9f2ea7de5acc04":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app","displayName":"Microsoft Word","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"7b312b06dd6cb577":{"id":"com.apple.managedclient.preferences_kfmblockoptin","displayName":"Prevent users from using the Folder Backup feature (Known Folder Move)","description":"This setting prevents users from moving their Documents and Desktop folders to any OneDrive account.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#kfmblockoptin"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_kfmblockoptin_0","displayName":"No prevention","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_kfmblockoptin_1","displayName":"Prevent Folder Backup","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_kfmblockoptin_2","displayName":"Prevent Folder Backup and Redirect to local device","description":null,"helpText":null}]},"7b8f707c736fc23b":{"id":"com.apple.managedclient.preferences_proxysettings_proxybypasslist","displayName":"Proxy Bypass List","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"7b7b9f22b0dd6472":{"id":"com.apple.managedclient.preferences_weeklyconfiguration_dayofweek","displayName":"Day of week","description":"Specifies the day of the week to perform a weekly scan. 0 indicates never. 1-7 indicates Sunday - Saturday. 8 indicates every day.","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":null},"7b8b363c8d6ba88d":{"id":"com.apple.mcxmenuextras_com.apple.mcxmenuextras","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":null},"7b4767a445d7a2a1":{"id":"com.apple.system-extension-policy_nonremovablefromuisystemextensions_generickey_keytobereplaced","displayName":"Non Removable From UI System Extensions","description":"A dictionary of system extensions on the computer. The dictionary maps the team identifiers (keys) to arrays of bundle identifiers, where the bundle identifier defines the system extension which cannot be disabled or uninstalled from System Settings or Finder. The set of system extensions between 'RemovableSystemExtensions' and 'NonRemovableFromUISystemExtensions' are allowed to overlap.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"7b535117f6deb922":{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"7bd9258c2011b5e9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history","description":"Enables deleting browser history and download history and prevents users from changing this setting.\n\nEven if this policy is disabled, the browsing and download history aren't guaranteed to be retained: users can edit or delete the history database files directly, and the browser itself can remove (based on expiration period) or archive any or all history items at any time.\n\nIf you enable this policy or don't configure it, users can delete the browsing and download history.\n\nIf you disable this policy, users can't delete browsing and download history. Disabling this policy disables history sync and open tab sync.\n\nIf you enable this policy, don't enable the \"ClearBrowsingDataOnExit\" policy, because they both deal with deleting data. If you enable both, the \"ClearBrowsingDataOnExit\" policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how this policy is configured.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowdeletingbrowserhistory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowdeletingbrowserhistory_true","displayName":"Enabled","description":null,"helpText":null}]},"7b74627ce269b24c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.beforeunloadeventcancelbypreventdefaultenabled","displayName":"Control the behavior for the cancel dialog produced by the beforeunload event (Obsolete)","description":"This policy provides a temporary opt-out for two related fixes to the behavior of the confirmation dialog that’s shown by the beforeunload event.\n\nIf you've enabled this policy, the new (correct) behavior is used.\nIf you've disabled this policy, the old (legacy) behavior is used.\nIf you haven't configured this policy, the default behavior is used.\nNote: This policy is a temporary workaround and is going to be removed in a future release.\n\nNew and correct behavior: In `beforeunload`, calling `event.preventDefault()` triggers the confirmation dialog. Setting `event.returnValue` to the empty string doesn’t trigger the confirmation dialog.\n\nOld and legacy behavior: In `beforeunload`, calling `event.preventDefault()` doesn’t trigger the confirmation dialog. Setting `event.returnValue` to the empty string triggers the confirmation dialog.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.beforeunloadeventcancelbypreventdefaultenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.beforeunloadeventcancelbypreventdefaultenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7be4c95f55256ba8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.linkedaccountenabled","displayName":"Enable the linked account feature (Obsolete)","description":"This policy is obsolete because Microsoft Edge no longer supports the linked account feature.\n\nMicrosoft Edge guides a user to the account management page where they can link a Microsoft Account (MSA) to an Azure Active Directory (Azure AD) account.\n\nIf you enable or don't configure this policy, linked account information is shown on a flyout. When the Azure AD profile doesn't have a linked account, it shows \"Add account\".\n\nIf you disable this policy, linked accounts are turned off and no extra information is shown.","helpText":null,"infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.linkedaccountenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.linkedaccountenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7b32d4f5df285994":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_extexclusionlist","displayName":"Files not cached","description":"Lists types of files that cannot be used offline.\r\n\r\nThis setting lets you exclude certain types of files from automatic and manual caching for offline use. The system does not cache files of the type specified in this setting even when they reside on a network share configured for automatic caching. Also, if users try to make a file of this type available offline, the operation will fail and the following message will be displayed in the Synchronization Manager progress dialog box: \"Files of this type cannot be made available offline.\"\r\n\r\nThis setting is designed to protect files that cannot be separated, such as database components.\r\n\r\nTo use this setting, type the file name extension in the \"Extensions\" box. To type more than one extension, separate the extensions with a semicolon (;).\r\n\r\nNote: To make changes to this setting effective, you must log off and log on again.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-extexclusionlist"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_extexclusionlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_extexclusionlist_1","displayName":"Enabled","description":null,"helpText":null}]},"7b003960d9a2c05b":{"id":"device_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_2","displayName":"Do not allow Snipping Tool to run","description":"Prevents the snipping tool from running.\r\n\r\nIf you enable this policy setting, the Snipping Tool will not run.\r\n\r\nIf you disable this policy setting, the Snipping Tool will run.\r\n\r\nIf you do not configure this policy setting, the Snipping Tool will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablesnippingtool-2"],"categoryId":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","categoryName":"Accessories","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_2_1","displayName":"Enabled","description":null,"helpText":null}]},"7b08dc624f47d823":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio","displayName":"Microsoft Visio 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Visio 2010.\r\nBy default, the user settings of Microsoft Visio 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010visio"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio_1","displayName":"Enabled","description":null,"helpText":null}]},"7ba9f04e57285d86":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_gcfuserdatadir","displayName":"Set user data directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"7b5f0af1bdc91383":{"id":"device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites","displayName":"Intranet Sites: Include all sites that bypass the proxy server","description":"This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.\n\nIf you enable this policy setting, sites which bypass the proxy server are mapped into the Intranet Zone.\n\nIf you disable this policy setting, sites which bypass the proxy server aren't necessarily mapped into the Intranet Zone (other rules might map one there).\n\nIf you do not configure this policy setting, users choose whether sites which bypass the proxy server are mapped into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includeallproxybypasssites"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_1","displayName":"Enabled","description":null,"helpText":null}]},"7b0aaa4e7e0afdc1":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonenavigatewindowsandframes"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"7b1ea37fa0cbebe8":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowautomaticpromptingforfiledownloads"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"7b53f472792929d6":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"7bd8caa639244f38":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows","displayName":"Allow script-initiated windows without size or position constraints","description":"This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.\n\nIf you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.\n\nIf you do not configure this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptinitiatedwindows"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"7befc466f11de71c":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode","displayName":"Run .NET Framework-reliant components signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute signed managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute signed managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute signed managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute signed managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_1","displayName":"Enabled","description":null,"helpText":null}]},"7bb48416b82cde8d":{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384","displayName":"PK Init Hash Algorithm SHA384","description":"Configure SHA-384 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha384"],"categoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_3","displayName":"Supported","description":"Supported","helpText":null}]},"7b14739ccf9a9019":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended","displayName":"Continue running background apps after Microsoft Edge closes","description":"Allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window is closed. In this scenario, background apps and the current browsing session remain active, including any session cookies. An open background process displays an icon in the system tray and can always be closed from there.\r\n\r\nIf you enable this policy, background mode is turned on.\r\n\r\nIf you disable this policy, background mode is turned off.\r\n\r\nIf you don't configure this policy, background mode is initially turned off, and the user can configure its behavior in edge://settings/system.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7b0a5814bfb209b4":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended","displayName":"Allow importing of payment info","description":"Allows users to import payment info from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\r\n\r\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7b3cc54dd865e9dc":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended","displayName":"Wallet Donation Enabled","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\r\n\r\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\r\n\r\nIf you disable this policy, users can't use the Wallet Donation feature.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7b557da89f64be64":{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_1","displayName":"Let third-party storage partitioning to be enabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_2","displayName":"Block third-party storage partitioning from being enabled.","description":null,"helpText":null}]},"7b1b3c7db10a5bf0":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled.","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy.\r\nCurrently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers.\r\nThis enterprise policy can be used to opt out of this gradual deprecation by forcing the default to stay enabled.\r\n\r\nPages might depend on unload event handlers to save data or signal the end of a user session to the server.\r\nThis is not recommended because it's unreliable and impacts performance by blocking use of BackForwardCache.\r\nRecommended alternatives exist, but the unload event has been used for a long time. Some applications might still rely on them.\r\n\r\nIf you disable this policy or don't configure it, unload event handlers will gradually be deprecated in-line with the deprecation rollout and sites which don't set Permissions-Policy header will stop firing `unload` events.\r\n\r\nIf you enable this policy then unload event handlers will continue to work by default.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7b2644ee28292303":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo","displayName":"Let Apps Access Account Info","description":"This policy setting specifies whether Windows apps can access account information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessaccountinfo"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"7b2caf3e2fcfe4af":{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_relay","displayName":"Enable RDP Shortpath for public network using Relay (TURN)","description":"This policy lets you control RDP Shortpath for public networks using the Traversal Using Relay NAT (TURN). A relayed UDP is a connection between a client device and session host using a public connection where TURN relays traffic through an intermediate server between a client and session host \r\n \r\nIf you enable or do not configure this policy setting, Remote Desktop Protocol will consider public networks relayed paths to establish connection with the session host. \r\n \r\nIf you disable this policy, Remote Desktop Protocol will NOT consider public networks relayed paths to establish connection with the session host.\r\n ","helpText":"","infoUrls":[],"categoryId":"5d4e843b-2848-4508-9143-cb3217c2fe83","categoryName":"RDP Shortpath","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_relay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_relay_1","displayName":"Enabled","description":null,"helpText":null}]},"7b6173a3ea18c571":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver_part_proxyserver","displayName":"Address or URL of proxy server (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ff543267-540e-4e37-a1e9-daf6a5e16ba7","categoryName":"Proxy Server","options":null},"7b2446181a228000":{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace","displayName":"Allow Windows Ink Workspace","description":"Specifies whether to allow the user to access the ink workspace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsInkWorkspace#allowwindowsinkworkspace"],"categoryId":"01d16911-19a1-4dcb-8089-ffa4781d977c","categoryName":"Windows Ink Workspace","options":[{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace_0","displayName":"access to ink workspace is disabled. The feature is turned off.","description":"access to ink workspace is disabled. The feature is turned off.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace_1","displayName":"ink workspace is enabled (feature is turned on), but the user cannot access it above the lock screen.","description":"ink workspace is enabled (feature is turned on), but the user cannot access it above the lock screen.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace_2","displayName":"ink workspace is enabled (feature is turned on), and the user is allowed to use it above the lock screen.","description":"ink workspace is enabled (feature is turned on), and the user is allowed to use it above the lock screen.","helpText":null}]},"7bfaf9ed75596c62":{"id":"linux_advancedsettings_memoryscan","displayName":"Memory scan (preview)","description":"Provides visibility in Passive/Realtime/OnDemand enforcement and protection requires behaviour monitoring to be enabled","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_advancedsettings_memoryscan_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_advancedsettings_memoryscan_enabled","displayName":"Enabled","description":null,"helpText":null}]},"7bf298cbfd76020a":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_2","displayName":"Software Installation (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstalationcomputers-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_2_1","displayName":"Enabled","description":null,"helpText":null}]},"7ba0597f2054a04e":{"id":"user_vendor_msft_policy_config_admx_startmenu_addsearchinternetlinkinstartmenu","displayName":"Add Search Internet link to Start Menu (User)","description":"\r\nIf you enable this policy, a \"Search the Internet\" link is shown when the user performs a search in the start menu search box. This button launches the default browser with the search terms.\r\n\r\nIf you disable this policy, there will not be a \"Search the Internet\" link when the user performs a search in the start menu search box.\r\n \r\nIf you do not configure this policy (default), there will not be a \"Search the Internet\" link on the start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-addsearchinternetlinkinstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_addsearchinternetlinkinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_addsearchinternetlinkinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"7b7ae2fb7fcf0d99":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places0","displayName":"Item 1 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":null},"7bbb2bb7fd8fa091":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended","displayName":"Always Open PDF files externally (User)","description":"Setting the policy to Enabled turns the internal PDF viewer off in Google Chrome, treats PDF files as a download, and lets users open PDFs with the default application.\r\n\r\nSetting the policy to Disabled means that unless users turns off the PDF plugin, it will open PDF files.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can choose whether to open PDF externally or not.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7be0cea1be3afb38":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended","displayName":"Default search provider new tab page URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderNewTabURL specifies the URL of the search engine used to provide a New Tab page.\r\n\r\nLeaving DefaultSearchProviderNewTabURL unset means no new tab page is provided.\r\n\r\nExample value: https://search.my.company/newtab","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7bc90f68cbd0bf4e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"7bb1ecd1b84f4d05":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver","displayName":"Address or URL of proxy server (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: 123.123.123.123:8080","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},"7b2ffceb440a34d3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc","displayName":"Enable deprecated web platform features for a limited time (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"7bd8c28d9489b0d6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled","displayName":"Specifies whether to apply restrictions to requests to local network endpoints (User)","description":"When this policy is set to Enabled, any time when a warning is supposed to be\r\ndisplayed in the DevTools due to Local Network Access checks failing, the\r\nmain request will be blocked instead.\r\n\r\nWhen this policy is set to Disabled or unset, Local Network Access requests will use the\r\ndefault handling of these requests.\r\n\r\nSee https://wicg.github.io/local-network-access/ for Local Network Access restrictions.","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7ba180317d1adfa1":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c","displayName":"Allow VBScript to run in Internet Explorer (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_1","displayName":"Prompt","description":null,"helpText":null}]},"7b9a89de1fb7a89e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_applicationlocalevalue","displayName":"Application locale (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":null},"7b02a1a2470abcc9":{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc","displayName":"Block third-party storage partitioning for these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"7b505d5f628406fc":{"id":"user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled","displayName":"Extensions Performance Detector enabled (User)","description":"This policy controls if users can access the Extensions Performance Detector Recommended Action feature in Browser Essentials. This feature alerts extension users if their extensions are causing performance regressions in the browser and allows them to take action to resolve the issue.\r\n\r\nIf you enable or don't configure this policy, users will receive Extensions Performance Detector notifications from Browser Essentials. When there is an active alert, users will be able to view the impact of extensions on their browser's performance and make an informed decision to disable impacting extensions. The detector will exclude browser-managed extensions, such as Google Docs offline, component extensions, and organization-managed extensions (ie. extensions that cannot be disabled).\r\n\r\nIf you disable this policy, users will not receive notifications or be able to view the Extensions Performance Detector Recommended Action.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7b99db354d4c3b21":{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled","displayName":"Allow quick links on the new tab page (User)","description":"If you enable or don't configure this policy, Microsoft Edge displays quick links on the new tab page, and the user can interact with the control, turning quick links on and off. Enabling this policy does not force quick links to be visible - the user can continue to turn quick links on and off.\r\n\r\nIf you disable this policy, Microsoft Edge hides quick links on the new tab page and disables the quick links control in the NTP settings flyout.\r\n\r\nThis policy only applies for Microsoft Edge local user profiles, profiles signed in using a Microsoft Account, and profiles signed in using Active Directory. To configure the Enterprise new tab page for profiles signed in using Azure Active Directory, use the M365 admin portal.\r\n\r\nRelated policies: 'NewTabPageAllowedBackgroundTypes' (Configure the background types allowed for the new tab page layout), 'NewTabPageContentEnabled' (Allow Microsoft content on the new tab page)","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7b4b9288d726fd99":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblocklistlocked","displayName":"Lock Writing Assistance admin blocklist (User)","description":"This policy setting controls whether users can modify the admin-managed Writing Assistance blocklist.\nIf you enable this policy setting (or do not configure it), the admin blocklist is locked and users cannot remove entries from it.\nIf you disable this policy setting, users can remove individual entries from the admin-provided blocklist.\n ","helpText":"","infoUrls":[],"categoryId":"05a6f86f-dab7-4888-97a1-db3457f00974","categoryName":"Writing Assistance","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblocklistlocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblocklistlocked_1","displayName":"Enabled","description":null,"helpText":null}]},"7b50f715fa737a5d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04","displayName":"Configure presentation service in PowerPoint and Word 5 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_1","displayName":"Enabled","description":null,"helpText":null}]},"7b19318142b5c525":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_querytimeout","displayName":"Set query processing timeout limit (User)","description":"This policy setting allows you to specify the maximum number of minutes the system will spend processing an individual query. When the interval is exceeded, the processing is aborted and the query is marked as failed. The query will then be retried later. Several bulk operations (especially queries) can take a significant amount of time before all results are retrieved and processed. During this time no other operation can be processed.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of minutes the system will spend processing an individual query.\r\n\r\nIf you disable or do not configure this policy setting, a default value of 20 minutes will be used.","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_querytimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_querytimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"7bfe092fd3a51167":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkfax","displayName":"Replace AD - WorkFax (User)","description":"This policy setting allows you to customize the 4th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"work fax\" of line 4.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 4 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkfax_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkfax_1","displayName":"Enabled","description":null,"helpText":null}]},"7bce61040a0112f1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacecompany_l_companylabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"7be39945d304e081":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_trustcentersolution_l_empty421_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":null},"7b9c96f953738082":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15","displayName":"Trusted Location #15 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_1","displayName":"Enabled","description":null,"helpText":null}]},"7bbb1966ae3ab3b6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_processcompoundnouns","displayName":"Process compound nouns (User)","description":"Checks/Unchecks the corresponding UI option. This option is available only if you are using the Korean language version of Microsoft Office or have installed Microsoft Office 2016 proofing tools or the Microsoft Office Single Language Pack 2016 for Korean, and have enabled support for Korean through Microsoft Office 2016 Language Preferences.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_processcompoundnouns_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_processcompoundnouns_1","displayName":"Enabled","description":null,"helpText":null}]},"7b329e9565079417":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofchannelstorecord_l_channels12","displayName":"Channels (1-2): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":null},"7bb165bef713c033":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_defaultwebcalsubscriptions_l_empty32_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"060e7533-6c2f-4ed1-9173-f3de58de4bed","categoryName":"Internet Calendars","options":null},"7bd163bdbf82f130":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngsaltlength","displayName":"Specify CNG salt length (User)","description":"This policy setting allows you to specific the number of bytes of salt that should be used.\r\n\r\nIf you enable this policy setting, the bytes specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default length or 16 will be used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngsaltlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngsaltlength_1","displayName":"Enabled","description":null,"helpText":null}]},"7b62f65ff7eb1818":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb","displayName":"Cipher Feedback (CFB)","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/7c.json b/public/intune-definitions/7c.json new file mode 100644 index 000000000000..b3ec8fa85a22 --- /dev/null +++ b/public/intune-definitions/7c.json @@ -0,0 +1 @@ +{"7cf7ed88ad02bfa9":{"id":"com.android.devicerestrictionpolicy.camerablocked","displayName":"Block access to camera (work profile-level)","description":"If 'True', prevents access to the camera on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might allow access to the camera. Intune only manages access to the device camera. It doesn't have access to pictures or videos. Available for fully managed, dedicated and corporate-owned work profile (at work profile level) devices. ","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.camerablocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.camerablocked_true","displayName":"True","description":"True","helpText":null}]},"7cd18e808e846371":{"id":"com.android.devicerestrictionpolicy.screencaptureblocked","displayName":"Block screen capture","description":"If 'True', prevents screenshots or screen captures on the device. It also prevents the content from being shown on display devices that don't have a secure video output. If 'False', Intune doesn't change or update this setting. By default, the OS might let users capture the screen contents as an image. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.screencaptureblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.screencaptureblocked_true","displayName":"True","description":"True","helpText":null}]},"7c55b9c5490772ec":{"id":"com.apple.airprint_airprint","displayName":"Printers","description":"A list of AirPrint printers that are presented to the user.","helpText":null,"infoUrls":[],"categoryId":"429c4b85-a2b4-46ed-afa0-6c89c08a5544","categoryName":"AirPrint","options":null},"7c4850493c5ef4b0":{"id":"com.apple.applicationaccess_allowcloudnotes","displayName":"Allow Cloud Notes","description":"If false, disables iCloud Notes services. Available in macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudnotes_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudnotes_true","displayName":"True","description":null,"helpText":null}]},"7c0bdfdf91952bbb":{"id":"com.apple.applicationaccess_allowmailsummary","displayName":"Allow Mail Summary (Deprecated)","description":"If false, disables the ability to create summaries of email messages manually. This does not affect automatic summary generation.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmailsummary_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmailsummary_true","displayName":"True","description":null,"helpText":null}]},"7c943eb695e78511":{"id":"com.apple.dock_persistent-others_item_tile-type","displayName":"Tile Type","description":"The type of tile.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_persistent-others_item_tile-type_0","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_persistent-others_item_tile-type_1","displayName":"Directory","description":null,"helpText":null},{"id":"com.apple.dock_persistent-others_item_tile-type_2","displayName":"URL","description":null,"helpText":null}]},"7c42aa6510e79979":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver","displayName":"Update channel override (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"7cacfe014b94e048":{"id":"com.apple.managedclient.preferences_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill","description":"The feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is auto-filled into a web form. This ensures that non-authorized persons can't use saved passwords for autofill. Note that this feature does not protect against locally-running malware.\n\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\n\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill will not have any authentication flow.\n\nIf you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\n\nIf you set this policy to 'WithCustomPrimaryPassword', users will be asked to create their custom password and then to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords will get auto-filled after successful authentication. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\n\nIf you set this policy to 'AutofillOff', saved passwords will no longer be suggested for autofill.\n\nPolicy options mapping:\n\n* Automatically (0) = Automatically\n\n* WithDevicePassword (1) = With device password\n\n* WithCustomPrimaryPassword (2) = With custom primary password\n\n* AutofillOff (3) = Autofill off\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#primarypasswordsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_primarypasswordsetting_0","displayName":"Automatically","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_primarypasswordsetting_1","displayName":"With device password","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_primarypasswordsetting_2","displayName":"With custom primary password","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_primarypasswordsetting_3","displayName":"Autofill off","description":null,"helpText":null}]},"7c983c5f1a92ff49":{"id":"com.apple.mcx_destroyfvkeyonstandby","displayName":"Destroy FV Key On Standby","description":"If true, prevents the OS from storing a temporary FileVault key in SMC or RAM for standby.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_destroyfvkeyonstandby_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_destroyfvkeyonstandby_true","displayName":"True","description":null,"helpText":null}]},"7ce04ecaf6d8b90d":{"id":"com.apple.mobiledevice.passwordpolicy_maxfailedattempts","displayName":"Max Failed Attempts","description":"The number of allowed failed attempts to enter the passcode at the device's lock screen. After six failed attempts, a time delay is imposed before a passcode can be entered again. The delay increases with each attempt. In macOS, set Minutes Until Failed Login Reset to define a delay before the next passcode can be entered. When this number is exceeded in macOS, the device is locked; in iOS, the device is wiped.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"7cdce7ef24a1147e":{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"7c8f13eb8882de46":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolscomponentenabled","displayName":"AutoLaunch Protocols Component Enabled","description":"Specifies whether the AutoLaunch Protocols component should be enabled. This component allows Microsoft to provide a list similar to that of the \"AutoLaunchProtocolsFromOrigins\" policy, allowing certain external protocols to launch without prompt or blocking certain protocols (on specified origins). By default, this component is enabled.\n\nIf you enable or don't configure this policy, the AutoLaunch Protocols component is enabled.\n\nIf you disable this policy, the AutoLaunch Protocols component is disabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolscomponentenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolscomponentenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7c22a7956536b5ca":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_recommended","displayName":"Machine learning powered autofill suggestions (users can override)","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and isn't used elsewhere.\n\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\n\nIf you disable this policy, machine learning-powered autofill suggestions aren't shown, and autofill no longer uses cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.\n\nThis policy will be disabled if you disable \"AutofillAddressEnabled\".","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"7ca2930f7b0fb861":{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceforegroundpriorityforurls","displayName":"Force foreground priority for specific URLs","description":"This policy allows you to specify a list of URL patterns for which background web content is forced to run at foreground priority.\n\nIf the ForceForegroundPriorityForAllTabs policy is enabled, this policy is ignored because all tabs are already forced to run at foreground priority.\n\nIf the ForceForegroundPriorityForAllTabs policy is disabled or not configured, only background content that matches the URL patterns in this list is forced to run at foreground priority.\n\nFor more information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nIf you don’t configure this policy or the list is empty, no background content is forced to run at foreground priority.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"7c3136750b20195d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepagelocation_recommended","displayName":"Configure the home page URL (users can override)","description":"Configures the default home page URL in Microsoft Edge.\n\nThe home page is the page opened by the Home button. \"RestoreOnStartup\" policies control the pages that open on startup.\n\nYou can either set a URL here or set the home page to open the new tab page 'edge://newtab'. By default, the Home button opens the new tab page (as configured by the user or with the policy \"NewTabPageLocation\"), and the user is able to choose between the URL configured by this policy and the new tab page.\n\nIf you enable this policy, users can't change their home page URL, but they can choose the behavior for the Home button to open either the set URL or the new tab page. If you wish to enforce the usage of the set URL, you must also configure \"HomepageIsNewTabPage\"=Disabled.\n\nIf you disable or don't configure this policy, users can choose their own home page, as long as the \"HomepageIsNewTabPage\" policy isn't enabled.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"7c5f1d152b0ac5c8":{"id":"device_vendor_msft_policy_config_admx_credssp_denyfreshcredentials_concatenatedefaults_dfc","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_denyfreshcredentials_concatenatedefaults_dfc_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_denyfreshcredentials_concatenatedefaults_dfc_1","displayName":"True","description":null,"helpText":null}]},"7c08769063448392":{"id":"device_vendor_msft_policy_config_admx_dfs_dfsdiscoverdc_dfsdiscoverdialog","displayName":"Time in minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"7c8e3722cc6a8b15":{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_werceruploadonfreenetworksonly","displayName":"Only upload on free networks","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_werceruploadonfreenetworksonly_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_werceruploadonfreenetworksonly_1","displayName":"True","description":null,"helpText":null}]},"7c30ca65090eae21":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired","displayName":"Configure wired policy processing","description":"This policy setting determines when policies that assign wired network settings are updated.\r\n\r\nThis policy setting affects all policies that use the wired network component of Group Policy, such as those in Windows Settings\\Wired Network Policies.\r\n\r\nIt overrides customized settings that the program implementing the wired network set when it was installed.\r\n\r\nIf you enable this policy, you can use the check boxes provided to change the options.\r\n\r\nIf you disable this setting or do not configure it, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-wired"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_1","displayName":"Enabled","description":null,"helpText":null}]},"7c8dd63cf0865bb5":{"id":"device_vendor_msft_policy_config_admx_kerberos_hosttorealm_hosttorealm","displayName":"Define host name-to-realm mappings:","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"7c2cad36cc6369e9":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_quickscaninterval","displayName":"Specify the interval to run quick scans per day","description":"This policy setting allows you to specify an interval at which to perform a quick scan. The time value is represented as the number of hours between quick scans. Valid values range from 1 (every hour) to 24 (once per day). If set to zero, interval quick scans will not occur. By default, this setting is set to 0.\r\n\r\n If you enable this setting, a quick scan will run at the interval specified.\r\n\r\n If you disable or do not configure this setting, a quick scan will run at a default time.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-quickscaninterval"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_quickscaninterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_quickscaninterval_1","displayName":"Enabled","description":null,"helpText":null}]},"7c0e94515eec7a86":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hostedmultipleservers","displayName":"Configure Hosted Cache Servers","description":"This policy setting specifies whether client computers are configured to use hosted cache mode and provides the computer name of the hosted cache servers that are available to the client computers. Hosted cache mode enables client computers in branch offices to retrieve content from one or more hosted cache servers that are installed in the same office location. You can use this setting to automatically configure client computers that are configured for hosted cache mode with the computer names of the hosted cache servers in the branch office.\r\n\r\nIf you enable this policy setting and specify valid computer names of hosted cache servers, hosted cache mode is enabled for all client computers to which the policy setting is applied. For this policy setting to take effect, you must also enable the \"Turn on BranchCache\" policy setting.\r\n\r\nThis policy setting can only be applied to client computers that are running at least Windows 8. This policy has no effect on computers that are running Windows 7 or Windows Vista. Client computers to which this policy setting is applied, in addition to the \"Set BranchCache Hosted Cache mode\" policy setting, use the hosted cache servers that are specified in this policy setting and do not use the hosted cache server that is configured in the policy setting \"Set BranchCache Hosted Cache Mode.\"\r\n\r\nIf you do not configure this policy setting, or if you disable this policy setting, client computers that are configured with hosted cache mode still function correctly.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache settings are not applied to client computers by this policy setting.\r\n\r\n- Enabled. With this selection, the policy setting is applied to client computers, which are configured as hosted cache mode clients that use the hosted cache servers that you specify in \"Hosted cache servers.\"\r\n\r\n- Disabled. With this selection, this policy is not applied to client computers.\r\n\r\nIn circumstances where this setting is enabled, you can also select and configure the following option:\r\n\r\n- Hosted cache servers. To add hosted cache server computer names to this policy setting, click Enabled, and then click Show. The Show Contents dialog box opens. Click Value, and then type the computer names of the hosted cache servers.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-enablewindowsbranchcache-hostedmultipleservers"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hostedmultipleservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hostedmultipleservers_1","displayName":"Enabled","description":null,"helpText":null}]},"7cdc2dcdd3ab5b62":{"id":"device_vendor_msft_policy_config_admx_printing_physicallocation_physicallocation_name","displayName":"Location","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"7c3b9a1b391d1582":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_forcible_logoff","displayName":"Deny logoff of an administrator logged in to the console session","description":"This policy setting determines whether an administrator attempting to connect remotely to the console of a server can log off an administrator currently logged on to the console.\r\n\r\nThis policy is useful when the currently connected administrator does not want to be logged off by another administrator. If the connected administrator is logged off, any data not previously saved is lost.\r\n\r\nIf you enable this policy setting, logging off the connected administrator is not allowed.\r\n\r\nIf you disable or do not configure this policy setting, logging off the connected administrator is allowed.\r\n\r\nNote: The console session is also known as Session 0. Console access can be obtained by using the /console switch from Remote Desktop Connection in the computer field name or from the command line.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-forcible-logoff"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_forcible_logoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_forcible_logoff_1","displayName":"Enabled","description":null,"helpText":null}]},"7cd452e0464c0fb0":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowhighcostlaunch","displayName":"Allow First Time Application Launches if on a High Cost Windows 8 Metered Connection","description":"This setting controls whether virtualized applications are launched on Windows 8 machines connected via a metered network connection (e.g. 4G).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingallowhighcostlaunch"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowhighcostlaunch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowhighcostlaunch_1","displayName":"Enabled","description":null,"helpText":null}]},"7c15f94d01277ccc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains_safebrowsingwhitelistdomainsdesc","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"7c87eda84c764a59":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled","displayName":"Enable saving passwords to the password manager","description":"Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.\r\n\r\nSetting the policy to Disabled means users can't save new passwords, but previously saved passwords will still work.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, the user can turn off password saving.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7c303d58c585d8e8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings","displayName":"Settings for DevTools Generative AI Features","description":"These features in Google Chrome's DevTools employ generative AI models to provide additional debugging information. To use these features, Google Chrome has to collect data such as error messages, stack traces, code snippets, and network requests and send them to a server owned by Google, which runs a generative AI model. Response body or authentication and cookie headers in network requests are not included in the data sent to the server.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nDevTools Generative AI features include:\r\n\r\n- Console Insights: explains console messages and offers suggestions on how to fix console errors.\r\n\r\n- AI assistance: get help with understanding CSS styles (since version 131), network requests, performance, and files (all since version 132).\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_1","displayName":"Enabled","description":null,"helpText":null}]},"7c8d9a85f1088204":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval","displayName":"Reattach Interval","description":"When a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to reattach the volume. This value specifies the number of seconds to wait between retries. The default value is 10 seconds which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ReAttachIntervalSeconds\r\nType: DWORD\r\nValues: Min = 1, Max = 60","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"7c2e16d74922a65a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx_vhd","displayName":"VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx_vhdx","displayName":"VHDX","description":null,"helpText":null}]},"7cf02de33aa24055":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"7c5e330f85c99199":{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions","displayName":"New tab behavior","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_3","displayName":"New tab page with my news feed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_0","displayName":"about:blank","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_2","displayName":"New tab page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_1","displayName":"Home page","description":null,"helpText":null}]},"7c24a72292f75e3f":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowaccesstodatasources"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"7c3cc74edca96a39":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_systemcryptography_forcestrongkeyprotection","displayName":"System Cryptography Force Strong Key Protection","description":"System Cryptography: Force strong key protection for user keys stored on the computer This security setting determines if users' private keys require a password to be used. The options are: User input is not required when new keys are stored and used User is prompted when the key is first used User must enter a password each time they use a key For more information, see Public key infrastructure. Default: This policy is not defined.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#systemcryptography_forcestrongkeyprotection"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"7ce4ce7cbc2c3155":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions.","description":"Extensions that connect to one of these origins will keep running as long as the port is connected.\r\nIf unset, the policy's default values are used. These are the app origins that offer SDKs that are known to not offer the possibility to restart a closed connection to a previous state:\r\n- Smart Card Connector\r\n- Citrix Receiver (stable, beta, back-up)\r\n- VMware Horizon (stable, beta)\r\n\r\nIf set, the default value list is extended with the newly configured values. The defaults and policy-provided entries will grant the exception to the connecting extensions, as long as the port is connected.\r\n\r\nExample value:\r\n\r\nchrome-extension://abcdefghijklmnopabcdefghijklmnop/\r\nchrome-extension://bcdefghijklmnopabcdefghijklmnopa/","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1","displayName":"Enabled","description":null,"helpText":null}]},"7c33701a4c3b5719":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_viewxfapdfiniemodeallowedoriginsdesc","displayName":"View XFA-based PDF files using IE Mode for allowed file origin. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":null},"7cd0949ed4e5bf30":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow insecure websites to make requests to more-private network endpoints","description":"Controls whether insecure websites are allowed to make requests to more-private network endpoints.\r\n\r\nThis policy relates to the CORS-RFC1918 specification. See https://wicg.github.io/cors-rfc1918 for more details.\r\n\r\nA network endpoint is more private than another if:\r\n1) Its IP address is localhost and the other is not.\r\n2) Its IP address is private and the other is public.\r\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\r\n\r\nA website is deemed secure if it meets the definition of a secure context in https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts. Otherwise, it will be treated as an insecure context.\r\n\r\nWhen this policy is either not set or set to false, the default behavior for requests from insecure contexts to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests feature, which may be set by a field trial or on the command line.\r\n\r\nWhen this policy is set to true, insecure websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.","helpText":"","infoUrls":[],"categoryId":"43057320-7058-46d5-86f9-a56c80bbf8b9","categoryName":"Private Network Request Settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"7c7b42c0f137dbb0":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended","displayName":"Show the Reload in Internet Explorer mode button in the toolbar","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button will only be shown on the toolbar when the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or if the user has chosen to enable \"Allow sites to be reloaded in Internet Explorer mode\".\r\n\r\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7c5ee48cb715f83e":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended","displayName":"Discover feature In Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.\r\n\r\nThis policy lets you configure the Discover feature in Microsoft Edge.\r\n\r\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\r\n\r\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7cc4f67d46f8290a":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_serialallowusbdevicesforurls","displayName":"Automatically grant sites permission to connect to USB serial devices (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"7c856adfbf2fb255":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_forcedenytheseapps","displayName":"Let Apps Access Notifications Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessnotifications_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"7c645ec6f3abcbb6":{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers","displayName":"MaxConcurrentUsers","description":"This policy setting configures the maximum number of users able to concurrently perform remote shell operations on the system.\n\nThe value can be any number from 1 to 100.\n\nIf you enable this policy setting, the new shell connections are rejected if they exceed the specified limit.\n\nIf you disable or do not configure this policy setting, the default number is five users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-maxconcurrentusers"],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":[{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers_1","displayName":"Enabled","description":null,"helpText":null}]},"7c58de6d2a8008b2":{"id":"device_vendor_msft_policy_config_system_allowusertoresetphone","displayName":"Allow User To Reset Phone","description":"Specifies whether to allow the user to factory reset the device by using control panel and hardware key combination. Most restricted value is 0. Tip, This policy is also applicable to Windows 10 and not exclusive to phone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowusertoresetphone"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowusertoresetphone_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowusertoresetphone_1","displayName":"Allowed to reset to factory default settings.","description":"Allowed to reset to factory default settings.","helpText":null}]},"7cdea487ae9859dd":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},"7c5ab4e020a385ad":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_enablecloudremediation","displayName":"Enable Cloud Remediation (Windows Insiders only)","description":"Enable or disable quick machine recovery, a feature that will search for device recovery solutions if your device fails to start.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":[{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_enablecloudremediation_true","displayName":"Cloud remediation enabled","description":"Cloud remediation enabled","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_enablecloudremediation_false","displayName":"Cloud remediation disabled","description":"Cloud remediation disabled","helpText":null}]},"7cca8fa4185611e2":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings","displayName":"Clipboard behavior settings","description":"This policy setting allows you to decide how the clipboard behaves while in Microsoft Defender Application Guard.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_0","displayName":"Disable clipboard functionality completely","description":"Completely turns Off the clipboard functionality for the Application Guard.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_1","displayName":"Enable clipboard operation from Application Guard to the host","description":"Turns On clipboard operation from an isolated session to the host.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_2","displayName":"Enable clipboard operation from the host to Application Guard","description":"Turns On clipboard operation from the host to an isolated session.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_3","displayName":"Enable clipboard operation in both directions","description":"Turns On clipboard operation in both the directions.","helpText":null}]},"7ceb6445020a1d80":{"id":"extensionsettings_managedextensions_generickey_keytobereplaced","displayName":"Managed Extensions","description":"Extensions being managed","helpText":null,"infoUrls":[],"categoryId":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","categoryName":"Safari Extension Settings","options":null},"7cbf9fa8b3c7af8e":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noremovepage","displayName":"Hide Change or Remove Programs page (User)","description":"Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.\r\n\r\nThe Change or Remove Programs button lets users uninstall, repair, add, or remove features of installed programs.\r\n\r\nIf you disable this setting or do not configure it, the Change or Remove Programs page is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to delete or uninstall programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noremovepage"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noremovepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noremovepage_1","displayName":"Enabled","description":null,"helpText":null}]},"7ce805d916bbb528":{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablejournal_1","displayName":"Do not allow Windows Journal to be run (User)","description":"Prevents start of Windows Journal.\r\n\r\nIf you enable this policy, the Windows Journal accessory will not run.\r\n\r\nIf you disable this policy, the Windows Journal accessory will run.\r\n\r\nIf you do not configure this policy, the Windows Journal accessory will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablejournal-1"],"categoryId":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","categoryName":"Accessories","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablejournal_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablejournal_1_1","displayName":"Enabled","description":null,"helpText":null}]},"7c24ac8f75710803":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013","displayName":"Microsoft Office 365 Visio 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Visio 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Visio 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365visio2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013_1","displayName":"Enabled","description":null,"helpText":null}]},"7c6239705ecd39b6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls","displayName":"URLs that will be granted access to audio capture devices without prompt (User)","description":"Setting the policy means you specify the URL list whose patterns get matched to the security origin of the requesting URL. A match grants access to audio capture devices without prompt\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com/\r\nhttps://[*.]example.edu/","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"7c7258da817a41b2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis","displayName":"Disable support for 3D graphics APIs (User)","description":"Setting the policy to True (or setting HardwareAccelerationModeEnabled to False) prevents webpages from accessing the WebGL API, and plugins can't use the Pepper 3D API.\r\n\r\nSetting the policy to False or leaving it unset lets webpages use the WebGL API and plugins use the Pepper 3D API, but the browser's default settings might still require command line arguments to use these APIs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis_1","displayName":"Enabled","description":null,"helpText":null}]},"7ccc00a0acfb55a8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_urlallowlistdesc","displayName":"Allow access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"7cc826ff50559fe4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_legacysamesitecookiebehaviorenabledfordomainlistdesc","displayName":"Revert to legacy SameSite behavior for cookies on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"7cda92e809b1514b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_any","displayName":"Allow printing both with and without background graphics","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_enabled","displayName":"Allow printing only with background graphics","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_disabled","displayName":"Allow printing only without background graphics","description":null,"helpText":null}]},"7c8b55ba60e58bab":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled","displayName":"Choose whether the Privacy Sandbox Ad topics setting can be disabled (User)","description":"A policy to control whether the Privacy Sandbox Ad topics setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Ad topics setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Ad topics setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7cfcc8283438cd7f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed","displayName":"Allows enabling throttling of non-visible, cross-origin iframes (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"7c5493e4fa42bc29":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains (User)","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open additional windows and frames from other domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow additional windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open other windows and frames from other domains or access applications from different domains.\n\nIf you do not configure this policy setting, users cannot open other windows and frames from different domains or access applications from different domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonenavigatewindowsandframes"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"7cfcd59dcbb0edd9":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"This policy setting enables blocking of file download prompts that are not user initiated.\n\nIf you enable this policy setting, file download prompts that are not user initiated will be blocked for Internet Explorer processes.\n\nIf you disable this policy setting, prompting will occur for file downloads that are not user initiated for Internet Explorer processes.\n\nIf you do not configure this policy setting, the user's preference determines whether to prompt for file downloads that are not user initiated for Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictfiledownloadinternetexplorerprocesses"],"categoryId":"17bc9899-d157-4eac-a949-810b4a841e28","categoryName":"Restrict File Download","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"7c968f68e5a0542f":{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled","displayName":"Clear history for IE and IE mode every time you exit (User)","description":"This policy controls whether browsing history is deleted from Internet Explorer and Internet Explorer mode every time Microsoft Edge is closed.\r\n\r\nUsers can configure this setting in the 'Clear browsing data for Internet Explorer' option in the Privacy, search, and services menu of Settings.\r\n\r\nIf you enable this policy, on browser exit Internet Explorer browsing history will be cleared.\r\n\r\nIf you disable or do not configure this policy, Internet Explorer browsing history will not be cleared on browser exit.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7c0691758adc285e":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76e34834-6d47-4e06-b14c-aa2888cdce27","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_0","displayName":"Downloads model automatically","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_1","displayName":"Do not download model","description":null,"helpText":null}]},"7ca30cfd82468928":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastserviceminorversion7","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"7cafa32643daaff4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy10","displayName":"Places Bar Location 10 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy10_1","displayName":"Enabled","description":null,"helpText":null}]},"7c9a9b7c01ea3adc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uzbeklatin","displayName":"Uzbek (Latin) (User)","description":"Enables the editing language Uzbek (Latin)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uzbeklatin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uzbeklatin_1","displayName":"Enabled","description":null,"helpText":null}]},"7c6044f85b38c818":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_l_workflowpath479","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"7c3d7519379fb364":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3","displayName":"Load Controls in Forms3 (User)","description":"This policy setting allows you to control how ActiveX controls in UserForms should be initialized based upon whether they are Safe For Initialization (SFI) or Unsafefor Initialization (UFI). \r\n \r\n ActiveX controls are Component Object Model (COM) objects and have unrestricted access to users' computers. ActiveX controls can access the local file system and change the registry settings of the operating system. If a malicious user repurposes an ActiveX control to take over a user's computer, the effect could be significant. To help improve security, ActiveX developers can mark controls as Safe For Initialization (SFI), which means that the developer states that the controls are safe to open and run and not capable of causing harm to any computers. If a control is not marked SFI, the control could adversely affect a computer--or it's possible the developers did not test the control in all situations and are not sure whether their control might be compromised at some future date.SFI controls run in safe mode, which limits their access to the computer. For example, a worksheet control can both read and write files when it is in unsafe mode, but perhaps only read from files when it is in safe mode. This functionality allows the control to be used in very powerful ways when safety wasn't important, but the control would still be safe for use in a Web page. If a control is not marked as SFI, it is marked Unsafe For Initialization (UFI), which means that it is capable of affecting a user's computer. If UFI ActiveX controls are loaded, they are always loaded in unsafe mode. \r\n \r\n If you enable this policy setting, you can choose from four options for loading controls in UserForms: \r\n \r\n 1- For a UFI or SFI signed control that supports safe and unsafe mode, load the control in unsafe mode. For an SFI signed control that only supports a safe mode configuration, load the control in safe mode. This option enforces the default configuration. \r\n \r\n 2 - Users are prompted to determine how UserForm forms will load. The prompt only displays once per session within an application. When users respond to the prompt, loading continues based on whether the control is UFI or SFI: \r\n \r\n - For a UFI signed control, if users respond Yes to the prompt, load the control in unsafe mode. If users respond No, load the control using the default properties. \r\n \r\n - For an SFI signed control that supports both safe and unsafe modes, if users respond Yes to the prompt, load the control in unsafe mode. If users respond No, load the control using safe mode. If the SFI control can only support safe mode, load the control in safe mode. This option is the default configuration in the Microsoft Office 2016 release. \r\n \r\n 3 - Users are prompted to determine how UserForm forms will load. The prompt only displays once per session within an application. When users respond to the prompt, loading continues based on whether the control is UFI or SFI: \r\n \r\n - For a UFI signed control, if users respond Yes to the prompt, load the control in unsafe mode. If users respond No, load the control with its default properties. \r\n \r\n - For an SFI signed control, load in safe mode. \r\n \r\n 4 - For a UFI signed control, load with the default properties of the control. For an SFI signed control, load in safe mode (considered to be the safest mode). \r\n \r\n If you disable or do not configure this policy setting, the behavior is as if you enable this policy setting and then select option 1. ","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3_1","displayName":"Enabled","description":null,"helpText":null}]},"7cb375642b0b4d0c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey16_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"7c02d92438ef878c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_capitalizefirstletterofsentence","displayName":"Capitalize first letter of sentence (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"8084033c-156a-4d1b-ab0b-159541810459","categoryName":"Tools | AutoCorrect Options... (Excel, PowerPoint and Access)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_capitalizefirstletterofsentence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_capitalizefirstletterofsentence_1","displayName":"Enabled","description":null,"helpText":null}]},"7c362307e743ca78":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_miscellaneous437_l_writingassistantadminchoiceadminchoice","displayName":"Enable Writing Assistant (User)","description":"This policy setting controls whether users can use the Writing Assistant feature.\r\n \r\nIf you enable or don’t configure this policy setting, users will be allowed to use Writing Assistant and it will be enabled by default (unless the users disabled it).\r\n\r\nIf you disable this policy setting, users won't see Writing Assistant by default.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for Enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_miscellaneous437_l_writingassistantadminchoiceadminchoice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_miscellaneous437_l_writingassistantadminchoiceadminchoice_1","displayName":"Enabled","description":null,"helpText":null}]},"7cbcc50ca5b2fd9b":{"id":"user_vendor_msft_policy_config_office16v3.1~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableroamingmruforonpremservers","displayName":"Turn off roaming of on-premises file names and metadata (User)","description":"\r\nThis policy setting controls whether file names and metadata for Office files are roamed and appear in the list of recently opened files in an Office app, such as Word, on different devices.\r\n\r\nRoaming, which relies on a web-based Microsoft service, occurs when a user signs into Office with the same work or school account on different devices.\r\n\r\nNote: This policy setting only applies to Office files that are saved to on-premises instances of SharePoint Server or OneDrive for Business.\r\n\r\nIf you enable this policy setting, file names and metadata won't roam and won’t appear in the list of recently opened files in Office apps on other devices, unless the file has been opened on that device.\r\n\r\nIf you disable or don't configure this policy setting, file names and metadata will roam and will appear in the list of recently opened files in Office apps on other devices, even if the file hasn’t been opened on that device.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v3.1~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableroamingmruforonpremservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3.1~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableroamingmruforonpremservers_1","displayName":"Enabled","description":null,"helpText":null}]},"7c11fb21ded57ea4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_setgalcontactsynchronizationinterval_l_setgalcontactsynchronizationintervalspinid","displayName":"Synchronization interval (in minutes): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":null},"7c9635d38761f8c6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula","displayName":"Configure Outlook object model prompt When accessing the Formula property of a UserProperty object (User) (Deprecated)","description":"This policy setting controls what happens when a user designs a custom form in Outlook and attempts to bind an Address Information field to a combination or formula custom field.\r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to access address information using the UserProperties. Find method of the Outlook object model: \r\n\r\n- Prompt user. The user will be prompted to approve every access attempt. \r\n- Automatically approve. Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended. \r\n- Automatically deny. Outlook will automatically deny programmatic access requests from any program. \r\n- Prompt user based on computer security. Outlook will only prompt users when antivirus software is out of date or not running. \r\n\r\nIf you disable or do not configure this policy setting, when a user tries to bind an address information field to a combination or formula custom field in a custom form, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center. ","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomformula_1","displayName":"Enabled","description":null,"helpText":null}]},"7c3d1db9fe1c7f74":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbookdepartmentselection","displayName":"Turn off Hierarchical Address Book department selection (User)","description":"This policy setting controls whether departments can be picked as recipients in the Hierarchical Address Book (HAB).\r\n\r\nIf you enable this policy setting, the tree control to pick departments as recipients is turned off in the HAB.\r\n\r\nIf you disable or do not configure this policy setting, the tree control to pick departments as recipients is turned on in the HAB.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbookdepartmentselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbookdepartmentselection_1","displayName":"Enabled","description":null,"helpText":null}]},"7c0eea0fcdbc6d0f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbooklimitmanualoabdownloads_l_allowxxmanualoabdownloadsper13hrperiod","displayName":"Upper limit of number of manual OAB downloads per 13 hour period (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e35a83ff-7c5b-48d4-9ba3-a57849c6b5f5","categoryName":"Offline Address Book","options":null},"7cd260ba1bb9c90d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_defaultrssfeeds_l_defaultrsssubscriptionspart","displayName":"List of default RSS Feeds (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":null},"7cc13e56ed05b743":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty3","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty3_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty3_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty3_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty3_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]},"7c3230050d75da1f":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditor","displayName":"Developer tab | Code | Visual Basic (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditor_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditor_1","displayName":"True","description":null,"helpText":null}]},"7c4b3cc31499bd68":{"id":"user_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture","displayName":"Disables send-a-smile's screenshot capability (User)","description":"This policy disables the screenshot capability in the send-a-smile feature.","helpText":"","infoUrls":[],"categoryId":"802f3065-0bf1-4578-9d6d-ab1ef02db3ec","categoryName":"Feedback Settings","options":[{"id":"user_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture_1","displayName":"Enabled","description":null,"helpText":null}]},"7c82946f71221fe2":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys175_l_enterakeyandmodifiertodisable","displayName":"Enter a key and modifier to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0f42fc50-66c8-4b70-9904-64f8d662c930","categoryName":"Custom","options":null},"7c6bab6e736166e6":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_defaultinboundaction","displayName":"Default Inbound Action","description":"This value is the action that the Hyper-V Firewall does by default (and evaluates at the very end) on inbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 1 [Block].","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_defaultinboundaction_0","displayName":"Allow Inbound By Default","description":"Allow Inbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_defaultinboundaction_1","displayName":"Block Inbound By Default","description":"Block Inbound By Default","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/7d.json b/public/intune-definitions/7d.json new file mode 100644 index 000000000000..18694d56e341 --- /dev/null +++ b/public/intune-definitions/7d.json @@ -0,0 +1 @@ +{"7dbca34c39a28930":{"id":"com.android.devicerestrictionpolicy.systemwindowsblocked","displayName":"Block notification windows","description":"If 'True', window notifications, including toasts, incoming calls, outgoing calls, system alerts, and system errors aren't shown on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might show notifications. Available for fully managed and dedicated devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.systemwindowsblocked_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.systemwindowsblocked_false","displayName":"False","description":"false","helpText":null}]},"7d0c0671d7c5373c":{"id":"com.apple.applicationaccess_allowscreenshot","displayName":"Allow Screen Shot","description":"If false, disables saving a screenshot of the display and capturing a screen recording. It also disables the Classroom app from observing remote screens. Available in iOS 4 and later, and macOS 10.14.4 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowscreenshot_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowscreenshot_true","displayName":"True","description":null,"helpText":null}]},"7d916ef38ece3ca4":{"id":"com.apple.managedclient.preferences_forcelegacydefaultreferrerpolicy","displayName":"Use a default referrer policy of no-referrer-when-downgrade.","description":"This enterprise policy is for short-term adaptation and will be removed in M82.\n\nMicrosoft Edge’s default referrer policy is being strengthened from its current value of no-referrer-when-downgrade to the more secure strict-origin-when-cross-origin through a gradual rollout targeting M80 stable.\n\nBefore the rollout, this enterprise policy will have no effect. After the rollout, when this enterprise policy is enabled, Microsoft Edge’s default referrer policy will be set to its pre-M80 value of no-referrer-when-downgrade.\n\nThis enterprise policy is disabled by default","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forcelegacydefaultreferrerpolicy"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forcelegacydefaultreferrerpolicy_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forcelegacydefaultreferrerpolicy_true","displayName":"Enabled","description":null,"helpText":null}]},"7d447f2392b933b8":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogo","displayName":"New Tab Page Company Logo","description":"We are deprecating this policy because it doesn't work as expected and recommend that it not be used.\n\nSpecifies the company logo to use on the new tab page in Microsoft Edge.\n\nThe policy should be configured as a string that expresses the logo(s) in JSON format. For example: { \"default_logo\": { \"url\": \"https://www.contoso.com/logo.png\", \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\" }, \"light_logo\": { \"url\": \"https://www.contoso.com/light_logo.png\", \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\" } }\n\nYou configure this policy by specifying the URL from which Microsoft Edge can download the logo and its cryptographic hash (SHA-256), which is used to verify the integrity of the download. The logo must be in PNG or SVG format, and its file size must not exceed 16 MB. The logo is downloaded and cached, and it will be redownloaded whenever the URL or the hash changes. The URL must be accessible without any authentication.\n\nThe 'default_logo' is required and will be used when there's no background image. If 'light_logo' is provided, it will be used when the user's new tab page has a background image. We recommend a horizontal logo with a transparent background that is left-aligned and vertically centered. The logo should have a minimum height of 32 pixels and an aspect ratio from 1:1 to 4:1. The 'default_logo' should have proper contrast against a white/black background while the 'light_logo' should have proper contrast against a background image.\n\nIf you enable this policy, Microsoft Edge downloads and shows the specified logo(s) on the new tab page. Users can't override or hide the logo(s).\n\nIf you disable or don't configure this policy, Microsoft Edge will show no company logo or a Microsoft logo on the new tab page.\n\nFor help with determining the SHA-256 hash, see https://docs.microsoft.com/powershell/module/microsoft.powershell.utility/get-filehash.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagecompanylogo"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"7d3d66dc948d4659":{"id":"com.apple.managedclient.preferences_promptfordownloadlocation","displayName":"Ask where to save downloaded files","description":"Set whether to ask where to save a file before downloading it.\n\nIf you enable this policy, the user is asked where to save each file before downloading; if you don't configure it, files are saved automatically to the default location, without asking the user.\n\nIf you don't configure this policy, the user will be able to change this setting.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#promptfordownloadlocation"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_promptfordownloadlocation_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_promptfordownloadlocation_true","displayName":"Enabled","description":null,"helpText":null}]},"7ddfc916c3ea2e42":{"id":"com.apple.mcx_com.apple.mcx-energysaver","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"7dea4ad0613edad9":{"id":"com.apple.xsan.preferences_denymount","displayName":"Deny Mount","description":"An array of Xsan or StorNext volume names. If no Only Mount array is present, the Xsan client automatically attempts to mount all SAN volumes except the volumes in this array. The system administrator can mount those volumes manually by using the xsanctl(8) mount command.","helpText":null,"infoUrls":[],"categoryId":"fd3717c1-dcf8-4038-b7f7-4ad3359a9d32","categoryName":"Xsan Preferences","options":null},"7d8a4f493dc00dbc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.audiocaptureallowedurls","displayName":"Sites that can access audio capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use audio capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to audio capture devices. Note, however, that the pattern \"*\", which matches any URL, isn't supported by this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"7d921328b7f7f7cc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedarraybufferunrestrictedaccessallowed","displayName":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context","description":"Specifies whether SharedArrayBuffers can be used in a non-cross-origin-isolated context. A SharedArrayBuffer is a binary data buffer that's used to create views on shared memory. SharedArrayBuffers have a memory access vulnerability in several popular CPUs.\n\nIf you enable this policy, sites are allowed to use SharedArrayBuffers with no restrictions.\n\nIf you disable or don't configure this policy, sites are allowed to use SharedArrayBuffers only when cross-origin isolated.\n\nMicrosoft Edge requires cross-origin isolation when using SharedArrayBuffers from Microsoft Edge version 91 onward for Web Compatibility reasons.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedarraybufferunrestrictedaccessallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedarraybufferunrestrictedaccessallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"7dd85270c5b7054f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.videocaptureallowed","displayName":"Allow or block video capture","description":"Control whether sites can capture video.\n\nIf enabled or not configured (default), the user is asked about video capture access for all sites except sites with URLs configured in the \"VideoCaptureAllowedUrls\" policy list, which is granted without prompting.\n\nIf you disable this policy, the user isn't prompted, and video capture is only available to URLs configured in \"VideoCaptureAllowedUrls\" policy.\n\nThis policy affects all types of video inputs, not only the built-in camera.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.videocaptureallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.videocaptureallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"7d9cc8153ec48ad8":{"id":"device_vendor_msft_defender_configuration_engineupdateschannel","displayName":"Engine Updates Channel","description":"[to be deprecated] Enable this policy to specify when devices receive Microsoft Defender engine updates during the monthly gradual rollout.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_engineupdateschannel_0","displayName":"Not configured (Default). The device will stay up to date automatically during the gradual release cycle. Suitable for most devices.","description":"Not configured (Default). The device will stay up to date automatically during the gradual release cycle. Suitable for most devices.","helpText":null},{"id":"device_vendor_msft_defender_configuration_engineupdateschannel_2","displayName":"Beta Channel: Devices set to this channel will be the first to receive new updates. Select Beta Channel to participate in identifying and reporting issues to Microsoft. Devices in the Windows Insider Program are subscribed to this channel by default. For use in (manual) test environments only and a limited number of devices.","description":"Beta Channel: Devices set to this channel will be the first to receive new updates. Select Beta Channel to participate in identifying and reporting issues to Microsoft. Devices in the Windows Insider Program are subscribed to this channel by default. For use in (manual) test environments only and a limited number of devices.","helpText":null},{"id":"device_vendor_msft_defender_configuration_engineupdateschannel_3","displayName":"Current Channel (Preview): Devices set to this channel will be offered updates earliest during the monthly gradual release cycle. Suggested for pre-production/validation environments.","description":"Current Channel (Preview): Devices set to this channel will be offered updates earliest during the monthly gradual release cycle. Suggested for pre-production/validation environments.","helpText":null},{"id":"device_vendor_msft_defender_configuration_engineupdateschannel_4","displayName":"Current Channel (Staged): Devices will be offered updates after the monthly gradual release cycle. Suggested to apply to a small, representative part of your production population (~10%).","description":"Current Channel (Staged): Devices will be offered updates after the monthly gradual release cycle. Suggested to apply to a small, representative part of your production population (~10%).","helpText":null},{"id":"device_vendor_msft_defender_configuration_engineupdateschannel_5","displayName":"Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).","description":"Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).","helpText":null},{"id":"device_vendor_msft_defender_configuration_engineupdateschannel_6","displayName":"Critical - Time delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only.","description":"Critical - Time delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only.","helpText":null}]},"7d850ebd8b3f6ebf":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_themefilename","displayName":"Path to theme file:","description":"","helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"7de4f27b6f6a9ee9":{"id":"device_vendor_msft_policy_config_admx_globalization_blockuserinputmethodsforsignin","displayName":"Disallow copying of user input methods to the system account for sign-in","description":"\r\n This policy prevents automatic copying of user input methods to the system account for use on the sign-in screen. The user is restricted to the set of input methods that are enabled in the system account.\r\n\r\n Note this does not affect the availability of user input methods on the lock screen or with the UAC prompt.\r\n\r\n If the policy is Enabled, then the user will get input methods enabled for the system account on the sign-in page.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be able to use input methods enabled for their user account on the sign-in page.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-blockuserinputmethodsforsignin"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_blockuserinputmethodsforsignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_blockuserinputmethodsforsignin_1","displayName":"Enabled","description":null,"helpText":null}]},"7df2dbaac1bf6cd6":{"id":"device_vendor_msft_policy_config_admx_globalization_preventuseroverrides_2","displayName":"Disallow user override of locale settings","description":"This policy setting prevents the user from customizing their locale by changing their user overrides.\r\n\r\nAny existing overrides in place when this policy is enabled will be frozen. To remove existing user overrides, first reset the user(s) values to the defaults and then apply this policy.\r\n\r\nWhen this policy setting is enabled, users can still choose alternate locales installed on the system unless prevented by other policies, however, they will be unable to customize those choices. The user cannot customize their user locale with user overrides.\r\n\r\nIf this policy setting is disabled or not configured, then the user can customize their user locale overrides.\r\n\r\nIf this policy is set to Enabled at the computer level, then it cannot be disabled by a per-User policy. If this policy is set to Disabled at the computer level, then the per-User policy will be ignored. If this policy is set to Not Configured at the computer level, then restrictions will be based on per-User policies.\r\n\r\nTo set this policy on a per-user basis, make sure that the per-computer policy is set to Not Configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-preventuseroverrides-2"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_preventuseroverrides_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_preventuseroverrides_2_1","displayName":"Enabled","description":null,"helpText":null}]},"7df7617621811156":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_nochanges9","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_nochanges9_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_nochanges9_1","displayName":"True","description":null,"helpText":null}]},"7d03a73f31c12b58":{"id":"device_vendor_msft_policy_config_admx_kdc_ticketsizethreshold","displayName":"Warning for large Kerberos tickets","description":"This policy setting allows you to configure at what size Kerberos tickets will trigger the warning event issued during Kerberos authentication. The ticket size warnings are logged in the System log.\r\n\r\nIf you enable this policy setting, you can set the threshold limit for Kerberos ticket which trigger the warning events. If set too high, then authentication failures might be occurring even though warning events are not being logged. If set too low, then there will be too many ticket warnings in the log to be useful for analysis. This value should be set to the same value as the Kerberos policy \"Set maximum Kerberos SSPI context token buffer size\" or the smallest MaxTokenSize used in your environment if you are not configuring using Group Policy.\r\n \r\nIf you disable or do not configure this policy setting, the threshold value defaults to 12,000 bytes, which is the default Kerberos MaxTokenSize for Windows 7, Windows Server 2008 R2 and prior versions.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kdc#admx-kdc-ticketsizethreshold"],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_ticketsizethreshold_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_ticketsizethreshold_1","displayName":"Enabled","description":null,"helpText":null}]},"7d93b5bbae3f8776":{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxyserver","displayName":"Specify KDC proxy servers for Kerberos clients","description":"This policy setting configures the Kerberos client's mapping to KDC proxy servers for domains based on their DNS suffix names.\r\n\r\nIf you enable this policy setting, the Kerberos client will use the KDC proxy server for a domain when a domain controller cannot be located based on the configured mappings. To map a KDC proxy server to a domain, enable the policy setting, click Show, and then map the KDC proxy server name(s) to the DNS name for the domain using the syntax described in the options pane. In the Show Contents dialog box in the Value Name column, type a DNS suffix name. In the Value column, type the list of proxy servers using the appropriate syntax format. To view the list of mappings, enable the policy setting and then click the Show button. To remove a mapping from the list, click the mapping entry to be removed, and then press the DELETE key. To edit a mapping, remove the current entry from the list and add a new one with different parameters.\r\n\r\nIf you disable or do not configure this policy setting, the Kerberos client does not have KDC proxy servers settings defined by Group Policy.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-kdcproxyserver"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},"7de9bbb734a25d99":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_fallbackorder_signatureupdate_fallbackorder","displayName":"Define the order of sources for downloading security intelligence updates","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":null},"7d33fdfaf054b0d6":{"id":"device_vendor_msft_policy_config_admx_msi_disableautomaticapplicationshutdown_disableautomaticapplicationshutdown","displayName":"Prohibit Usage of Restart Manager","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disableautomaticapplicationshutdown_disableautomaticapplicationshutdown_0","displayName":"Restart Manager On","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disableautomaticapplicationshutdown_disableautomaticapplicationshutdown_1","displayName":"Restart Manager Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disableautomaticapplicationshutdown_disableautomaticapplicationshutdown_2","displayName":"Restart Manager Off for Legacy App Setup","description":null,"helpText":null}]},"7d6e39f5402478c5":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_lbl_backgroundsyncdefaultsynctime","displayName":"Sync Interval (minutes)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"7db6e6392692bfda":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowssoundrecorder","displayName":"Windows Sound Recorder (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowssoundrecorder_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowssoundrecorder_1","displayName":"True","description":null,"helpText":null}]},"7d464614df450438":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowpackageinstallationroot","displayName":"Package Installation Root","description":"Specifies directory where all new applications and updates will be installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingallowpackageinstallationroot"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowpackageinstallationroot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowpackageinstallationroot_1","displayName":"Enabled","description":null,"helpText":null}]},"7dfe2a002bb4237c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist","displayName":"Allow merging dictionary policies from different sources","description":"Setting the policy allows merging of selected policies when they come from different sources, with the same scopes and level. This merging is in the first level keys of the dictionary from each source. The key coming from the highest priority source takes precedence.\r\n\r\nIf a policy is in the list and there's conflict between sources with:\r\n\r\n* The same scopes and level: The values merge into a new policy dictionary.\r\n\r\n* Different scopes or level: The policy with the highest priority applies.\r\n\r\nIf a policy isn't in the list and there's conflict between sources, scopes, or level, the policy with the highest priority applies.\r\n\r\nExample value:\r\n\r\nExtensionSettings","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_1","displayName":"Enabled","description":null,"helpText":null}]},"7d6de3cabb00679a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls","displayName":"Block read access via the File System API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nLeaving the policy unset means DefaultFileSystemReadGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with FileSystemReadAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"7d4766aad3f4609e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_serialaskforurlsdesc","displayName":"Allow the Serial API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"7d22dd5785705245":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel","displayName":"Set a custom enterprise label for a managed profile","description":"This policy controls a custom label used to identify managed profiles. For managed profiles, this label will be shown next to the avatar in the toolbar. The custom label will not be translated.\r\n\r\nWhen this policy is applied, any strings that surpass 16 characters will be truncated with a “...” Please refrain from using extended names.\r\n\r\nThis policy can only be set as a user policy.\r\n\r\nNote that this policy has no effect if the EnterpriseProfileBadgeToolbarSettings policy is set to hide_expanded_enterprise_toolbar_badge (value 1).\r\n\r\nExample value: Chromium","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_1","displayName":"Enabled","description":null,"helpText":null}]},"7d0801ba4fa9c033":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch","displayName":"Roam Search","description":"Enable search roaming in legacy Windows Operating Systems.\r\n\r\nNOTE: Do not use this setting with Windows Server 2019 (or later) or Windows 10 (or later). Newer operating systems support per-user search.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RoamSearch\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Single User Search, 2 = Multi-user Search","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_1","displayName":"Enabled","description":null,"helpText":null}]},"7d0d4c04f6ad9771":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonenavigatewindowsandframes"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"7d692fdd1b190cc8":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowscriptlets"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"7d18960a7f1a1dfa":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_strictmimetypecheckforworkerscriptsenabled","displayName":"Enable strict MIME type checking for worker scripts","description":"This policy controls whether strict MIME type checking is used for worker scripts.\n\nIf you enable or don't configure this policy, worker scripts use strict MIME type checking for JavaScript. Worker scripts that use legacy MIME types are rejected.\n\nIf you disable this policy, worker scripts use lax MIME type checking. This allows worker scripts that use legacy MIME types, such as text/ascii, to continue to load and run.\n\nBrowsers traditionally used lax MIME type checking, which allowed JavaScript resources to load with several legacy MIME types. This behavior can create security risks by allowing resources to load as scripts when they weren't intended to be used that way.\n\nMicrosoft Edge uses strict MIME type checking by default. Enabling this policy follows the default behavior. Disabling this policy lets admins temporarily retain the legacy behavior for compatibility.\n\nFor more information about JavaScript and ECMAScript media types, see https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguage.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_strictmimetypecheckforworkerscriptsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_strictmimetypecheckforworkerscriptsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7d9c7348b87c12be":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls_localfontsblockedforurlsdesc","displayName":"Block Local Fonts permission on these sites","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"7de40498f9d6f507":{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault","displayName":"Print PDF as Image Default","description":"Controls if Microsoft Edge makes the Print as image option the default when printing PDFs.\r\n\r\nIf you enable this policy, Microsoft Edge will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not default to setting the Print as image option in the Print Preview when printing a PDF.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"7d38c72b7f9d9999":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls","displayName":"Allow sites to make network requests to local network endpoints.","description":"Controls which website origins are exempt from Local Network Access checks when accessing local network endpoints.\r\n\r\nNetwork requests initiated from websites that match the specified URL patterns are not subject to Local Network Access checks.\r\n\r\nFor origins not covered by the patterns specified in this policy, the user's personal configuration applies.\r\n\r\nFor detailed information about valid URL patterns, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\r\n\r\nFor more information about Local Network Access restrictions, see https://wicg.github.io/local-network-access/.\r\n\r\nMultiple policies can list origins that affect requests to local network endpoints. If an origin matches more than one of the following policies, they take precedence in the following order:\r\n- LocalNetworkBlockedForUrls\r\n- LocalNetworkAllowedForUrls\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nThis policy controls access to local network endpoints (private IP addresses) and can be used to allow specific websites to access local network resources.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"7ddbc12185f8ada2":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed","displayName":"Allow Pin to taskbar wizard","description":"Microsoft Edge uses the Pin to taskbar wizard to help users pin suggested sites to the taskbar. The Pin to taskbar wizard feature is enabled by default and accessible to the user through the Settings and more menu.\r\n\r\nIf you enable this policy or don't configure it, users can call the Pin to taskbar wizard from the Settings and More menu. The wizard can also be called via a protocol launch.\r\n\r\nIf you disable this policy, the Pin to taskbar wizard is disabled in the menu and cannot be called via a protocol launch.\r\n\r\nUser settings to enable or disable the Pin to taskbar wizard aren't available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"7d64fb8e06c82cd2":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes","displayName":"List of file types that should be automatically opened on download","description":"This policy sets a list of file types that should be automatically opened on download. Note: The leading separator should not be included when listing the file type, so list \"txt\" instead of \".txt\".\r\n\r\nBy default, these file types will be automatically opened on all URLs. You can use the 'AutoOpenAllowedForURLs' (URLs where AutoOpenFileTypes can apply) policy to restrict the URLs for which these file types will be automatically opened on.\r\n\r\nFiles with types that should be automatically opened will still be subject to the enabled Microsoft Defender SmartScreen checks and won't be opened if they fail those checks.\r\n\r\nFile types that a user has already specified to automatically be opened will continue to do so when downloaded. The user will continue to be able to specify other file types to be automatically opened.\r\n\r\nIf you don't set this policy, only file types that a user has already specified to automatically be opened will do so when downloaded.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory or instances that enrolled for device management.\r\n\r\nExample value:\r\n\r\nexe\r\ntxt","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_1","displayName":"Enabled","description":null,"helpText":null}]},"7d4a0a45ac3a96b1":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended","displayName":"Allow single sign-on for Microsoft personal sites using this profile","description":"'Allow single sign-on for Microsoft personal sites using this profile' option allows non-MSA profiles to be able to use single sign-on for Microsoft sites using MSA credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-MSA profiles only.\r\n\r\nIf you disable this policy, non-MSA profiles will not be able to use single sign-on for Microsoft sites using MSA credentials present on the machine.\r\n\r\nIf you enable this policy or don't configure it, users will be able to use the Settings option to ensure non-MSA profiles are able to use single sign-on for Microsoft sites using MSA credentials present on the machine provided only a single MSA account exists on the machine.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7d99e18a226ab9e3":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\r\n\r\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'JavaScriptJitAllowedForSites' (Allow JavaScript to use JIT on these sites) and 'JavaScriptJitBlockedForSites' (Block JavaScript from using JIT on these sites) policies.\r\n\r\nIf you don't configure this policy, JavaScript JIT is enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowJavaScriptJit (1) = Allow any site to run JavaScript JIT\r\n\r\n* BlockJavaScriptJit (2) = Do not allow any site to run JavaScript JIT\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"7d056517f3600da3":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null}]},"7da53d4e1e6624fa":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_internetexplorerintegrationcloudusersitesreporting","displayName":"Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"7d839622ce414b6d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_pptviewexe116","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_pptviewexe116_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_pptviewexe116_1","displayName":"True","description":null,"helpText":null}]},"7d371619d727760e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_msaccessexe109","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_msaccessexe109_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_msaccessexe109_1","displayName":"True","description":null,"helpText":null}]},"7d56671974614811":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_useonlytokenactivation","displayName":"Use only Token Activation","description":"This policy setting allows you to specify Token Activation as the only volume activation method for volume editions of Office. This policy setting only applies if a Token Activation Issuance License has been installed on the computer.\r\n\r\nIf you enable this policy setting, Token Activation is the only method that may be used to activate Office.\r\n\r\nIf you disable or do not configure this policy setting, Key Management Service (KMS) or Token Activation may be used as methods to activate Office.","helpText":"","infoUrls":[],"categoryId":"712d184f-d9ac-45fc-9eea-aade3a22b55e","categoryName":"Volume Activation","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_useonlytokenactivation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_useonlytokenactivation_1","displayName":"Enabled","description":null,"helpText":null}]},"7d28e6cacbeae854":{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_rollbacktotargetversionmicrosoftedge","displayName":"Rollback to Target version","description":"Specifies that Microsoft Edge Update should rollback installations of Microsoft Edge to the version indicated in 'Target version override'.\r\n\r\nThis policy has no effect unless 'Target version override' is set and 'Update policy override' is set to one of the ON states (Always allow updates, Automatic silent updates only, Manual updates only).\r\n\r\nIf you disable this policy or don't configure it, installs that have a version higher than that specified by 'Target version override' will be left as-is.\r\n\r\nIf you enable this policy, installs that have a current version higher than specified by the 'Target version override' will be downgraded to the target version.\r\n\r\nWe recommend that users install the latest version of the Microsoft Edge browser to ensure protection by the latest security updates. Rollback to an earlier version risks exposure to known security issues. This policy is meant to be used as a temporary fix to address issues in a Microsoft Edge browser update.\r\n\r\nBefore temporarily rolling back your browser version, we recommend that you turn on Sync (https://go.microsoft.com/fwlink/?linkid=2133032) for all users in your organization. If you don't turn on Sync, there is a risk of permanent browsing data loss. Use this policy at your own risk.\r\n\r\nNote: All versions available for rollback can be viewed here https://aka.ms/EdgeEnterprise.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nThis policy applies to Microsoft Edge version 86 or later.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2133918 for more information. This policy is meant to serve as temporary measure when Enterprise Administrators need to downgrade for business reasons. To ensure users are protected by the latest security updates, the most recent version should be used. When versions are downgraded to older versions, there could be incompatibilities.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_rollbacktotargetversionmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_rollbacktotargetversionmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"7d316e16699b7feb":{"id":"device_vendor_msft_policy_config_windowssandbox_allowaudioinput","displayName":"Allow Audio Input","description":"Allow audio input in Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowaudioinput"],"categoryId":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","categoryName":"Windows Sandbox","options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowaudioinput_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowaudioinput_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"7dcbdd560c4b6011":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm","displayName":"Specify CNG hash algorithm (User)","description":"This policy setting allows you to specify the hash algorithm used.\r\n\r\nIf you enable this policy setting, the hashing algorithm selected will be used by CNG.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG hash algorithm will be used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"7df67be349402ce1":{"id":"user_vendor_msft_policy_config_admx_startmenu_gotodesktoponsignin","displayName":"Go to the desktop instead of Start when signing in (User)","description":"This policy setting allows users to go to the desktop instead of the Start screen when they sign in.\r\n\r\nIf you enable this policy setting, users will always go to the desktop when they sign in.\r\n\r\nIf you disable this policy setting, users will always go to the Start screen when they sign in.\r\n\r\nIf you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-gotodesktoponsignin"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_gotodesktoponsignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_gotodesktoponsignin_1","displayName":"Enabled","description":null,"helpText":null}]},"7d2204e76f6426b6":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup","displayName":"Lync 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Lync 2013.\r\nMicrosoft Lync 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Lync 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Lync 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013lyncbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"7d59556a8146ec9c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection","displayName":"Enable the use of relay servers by the remote access host (User)","description":"If RemoteAccessHostFirewallTraversal is set to Enabled, setting RemoteAccessHostAllowRelayedConnection to Enabled or leaving it unset allows the use of remote clients to use relay servers to connect to this machine when a direct connection is not available, for example, because of firewall restrictions.\r\n\r\nSetting the policy to Disabled doesn't turn remote access off, but only allows connections from the same network (not NAT traversal or relay).","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"7da1d36d42df0a9d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled","displayName":"Allow ServiceWorker to dispatch navigation requests without waiting for its startup (User)","description":"https://github.com/WICG/service-worker-auto-preload\r\nThe ServiceWorkerAutoPreload feature dispatches a network request for a main resource at the same time it begins the ServiceWorker bootstrap process.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome enables ServiceWorkerAutoPreload. The navigation request is automatically dispatched while starting the ServiceWorker in some scenarios, e.g. ServiceWorker is not running,\r\n\r\nIf it is disabled, Google Chrome will not enable ServiceWorkerAutoPreload. The navigation request is dispatched always after starting the ServiceWorker.\r\n\r\nThis policy is a temporary measure to control the feature and will be removed in M144.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7d32727f3ab8b856":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm","displayName":"Specify CNG hash algorithm (User)","description":"This policy setting allows you to specify the hash algorithm used.\r\n\r\nIf you enable this policy setting, the hashing algorithm selected will be used by CNG.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG hash algorithm will be used.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"7d3c932b35034fa7":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"7dd1e60bef0948c0":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowlessprivilegedsites"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"7d84a174394a301d":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowscriptlets"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"7d43e132be1ee7d0":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806","displayName":"Launching programs and unsafe files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1","displayName":"Prompt","description":null,"helpText":null}]},"7da0e9ab0b79bef9":{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_edgehistoryaisearchenabled","displayName":"Control access to AI-enhanced search in History (User)","description":"This policy controls whether users can use AI-enhanced search in their browsing history in Microsoft Edge.\r\n\r\nWhen enabled or not configured, users can search using synonyms, natural language phrases, and minor spelling errors to find previously visited pages.\r\n\r\nWhen disabled, users can only perform exact match (verbatim) searches in their history.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_edgehistoryaisearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_edgehistoryaisearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7d9959c12cde0963":{"id":"user_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_0","displayName":"Off (Not recommended)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_1","displayName":"Required data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_2","displayName":"Optional data","description":null,"helpText":null}]},"7d0180d23c70f9ce":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode","displayName":"Print Rasterization Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode_0","displayName":"Full page rasterization","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode_1","displayName":"Avoid rasterization if possible","description":null,"helpText":null}]},"7dc4eccb41c8eeb4":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled","displayName":"Show the Reload in Internet Explorer mode button in the toolbar (User)","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button will only be shown on the toolbar when the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or if the user has chosen to enable \"Allow sites to be reloaded in Internet Explorer mode\".\r\n\r\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7d2778a655891128":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_irishireland","displayName":"Irish (Ireland) (User)","description":"Enables the editing language Irish (Ireland)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_irishireland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_irishireland_1","displayName":"Enabled","description":null,"helpText":null}]},"7d2c03e8dcf317b7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_l_descriptioncolon264","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"7dfb309323c5f207":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_allowcommasasaddressseparator","displayName":"Allow commas as address separator (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_allowcommasasaddressseparator_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_allowcommasasaddressseparator_1","displayName":"True","description":null,"helpText":null}]},"7dbff71ea5c3b424":{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_alwaysusemsoauthforautodiscover","displayName":"Autodiscover is always capable of using modern authentication (User)","description":"This policy setting controls whether Autodiscover is always capable of using modern authentication, regardless of the authentication methods supported by the primary mailbox connection type.\r\n\r\nBy default, Autodiscover only uses authentication methods that are supported by the primary mailbox connection type. Modern authentication won't always be one of the supported authentication methods for some connection types.\r\n\r\nIf you enable this policy setting, Autodiscover is always capable of using modern authentication, regardless of the authentication methods supported by the primary mailbox connection type. Enabling this policy setting may result in additional prompts for users to provide their password, when modern authentication is used, but not supported for the connection type.\r\n\r\nIf you disable or don’t configure this policy setting, Autodiscover will only use authentication methods supported by the primary mailbox connection type.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_alwaysusemsoauthforautodiscover_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_alwaysusemsoauthforautodiscover_1","displayName":"Enabled","description":null,"helpText":null}]},"7db6c681e75d3b04":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacrosppt","displayName":"Developer tab | Code | Macros (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacrosppt_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacromacrosppt_1","displayName":"True","description":null,"helpText":null}]},"7d59de92a0698d3e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths","displayName":"Months (User)","description":"Sets the label for months.\r\n \r\nIf you enable this setting, months are displayed with the specified label.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_1","displayName":"Enabled","description":null,"helpText":null}]},"7dd3d21ce957aec5":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_configurecngcipherchainingmode","displayName":"Configure CNG cipher chaining mode (User)","description":"This policy setting allows you to configure the cipher chaining mode used.\r\n\r\nIf you enable this policy setting, the cipher chaining mode specified will be applied.\r\n\r\nIf you disable or do not configure this policy setting, Cipher Block Chaining (CBC) will be the default CNG cipher chaining mode used.","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"7d3248fbc3c09be4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustedloc","displayName":"Disable all trusted locations (User)","description":"This policy setting allows administrators to disable all trusted locations in the specified applications. Trusted locations specified in the Trust Center are used to define file locations that are assumed to be safe. Content, code, and add-ins are allowed to load from trusted locations with a minimal amount of security, without prompting the users for permission. If a dangerous file is opened from a trusted location, it will not be subject to standard security measures and could harm users' computers or data.\r\n\r\nIf you enable this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are ignored, including any trusted locations established by Office 2016 during setup, deployed to users using Group Policy, or added by users themselves. Users will be prompted again when opening files from trusted locations.\r\n\r\nIf you disable or do not configure this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are assumed to be safe.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustedloc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustedloc_1","displayName":"Enabled","description":null,"helpText":null}]},"7df07b8753289763":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]},"7db89d95c2158724":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11","displayName":"Trusted Location #11 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_1","displayName":"Enabled","description":null,"helpText":null}]},"7d11580afdadca62":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingwhetherobjectsarefloating","displayName":"Stop checking whether objects are floating (User)","description":"This policy setting prevents the Accessibility Checker from checking if a document has objects that are floating instead of inline.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking if a document has objects that are floating instead of inline.\r\n\r\nIf you disable or do not configure this policy setting, objects will be checked for floating text wrapping properties and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingwhetherobjectsarefloating_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingwhetherobjectsarefloating_1","displayName":"Enabled","description":null,"helpText":null}]},"7d98880799c82083":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_autorecoverfiles","displayName":"AutoRecover files (User)","description":"Defines the default path for storing AutoRecover files.","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_autorecoverfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_autorecoverfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"7d16db4099e5a4ef":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_l_word2007andlaterdocsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_l_word2007andlaterdocsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_l_word2007andlaterdocsandtemplatesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_l_word2007andlaterdocsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_l_word2007andlaterdocsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_l_word2007andlaterdocsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterdocsandtemplates_l_word2007andlaterdocsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/7e.json b/public/intune-definitions/7e.json new file mode 100644 index 000000000000..637dac29b591 --- /dev/null +++ b/public/intune-definitions/7e.json @@ -0,0 +1 @@ +{"7e9ae58013d88670":{"id":"ade_setupassistant_softwareupdate","displayName":"Software Update","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_softwareupdate_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_softwareupdate_1","displayName":"Show","description":null,"helpText":null}]},"7e284c7b05b44020":{"id":"com.apple.applicationaccess_allowesimoutgoingtransfers","displayName":"Allow ESIM Outgoing Transfers","description":"If 'false', prevents the transfer of an eSIM from the device on which the restriction is installed to a different device. Available in iOS 18 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowesimoutgoingtransfers_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowesimoutgoingtransfers_true","displayName":"True","description":null,"helpText":null}]},"7eded643c906b63f":{"id":"com.apple.directoryservice.managed_admountstyle","displayName":"AD Mount Style","description":"The network home protocol to use: afp or smb.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_admountstyle_0","displayName":"afp","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_admountstyle_1","displayName":"smb","description":null,"helpText":null}]},"7e7ef4e18cce9869":{"id":"com.apple.dock_static-apps_item_tile-data_file-type","displayName":"File Type","description":"The type of file","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_static-apps_item_tile-data_file-type_0","displayName":"URL","description":null,"helpText":null},{"id":"com.apple.dock_static-apps_item_tile-data_file-type_1","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_static-apps_item_tile-data_file-type_2","displayName":"Directory","description":null,"helpText":null}]},"7ea79432cf5f0844":{"id":"com.apple.fileproviderd_managementallowsremotesyncing","displayName":"Management Allows Remote Syncing","description":"If `false`, the device prevents the File Provider extension from using synchronization in any app. Also, none of the other options will be evaluated. Synchronization will be totally disabled for any application.","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":[{"id":"com.apple.fileproviderd_managementallowsremotesyncing_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.fileproviderd_managementallowsremotesyncing_true","displayName":"Allowed","description":null,"helpText":null}]},"7e167273f14d39c4":{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"7e89c4f24d5d3369":{"id":"com.apple.managedclient.preferences_defaultbrowsersettingenabled","displayName":"Set Microsoft Edge as default browser","description":"Configures the default browser checks in Microsoft Edge and prevents users from changing them.\n\nIf you enable this policy, Microsoft Edge always checks on startup whether it is the default browser and automatically registers itself, if possible.\n\nIf you disable this policy, Microsoft Edge never checks and disables user controls for setting this option.\n\nIf you don't configure this policy, Microsoft Edge lets the user control whether it's the default browser and whether to show user notifications when it isn't.\n\nNote for Windows administrators: This policy only works for PCs running Windows 7. For later versions of Windows, you have to deploy a \"default application associations\" file that makes Microsoft Edge the handler for the https and http protocols (and, optionally, the ftp protocol and file formats such as .html, .htm, .pdf, .svg, .webp). See https://go.microsoft.com/fwlink/?linkid=2094932 for more information.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultbrowsersettingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultbrowsersettingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultbrowsersettingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"7edce207cfe97719":{"id":"com.apple.managedclient.preferences_disablednsparsing","displayName":"Disable DNS parsing","description":"Disables parsing of DNS traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disablednsparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablednsparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"7ecdff57aa3e52e1":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"7e6f69c374647b2c":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"7e6c69df596ff4c4":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"7e5318a668553101":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work","displayName":"Set up a work schedule to limit the maximum network bandwidth used for BITS background transfers","description":"This policy setting limits the network bandwidth that Background Intelligent Transfer Service (BITS) uses for background transfers during the work and nonwork days and hours. The work schedule is defined using a weekly calendar, which consists of days of the week and hours of the day. All hours and days that are not defined in a work schedule are considered non-work hours.\r\n\r\n If you enable this policy setting, you can set up a schedule for limiting network bandwidth during both work and nonwork hours. After the work schedule is defined, you can set the bandwidth usage limits for each of the three BITS background priority levels: high, normal, and low.\r\n\r\n You can specify a limit to use for background jobs during a work schedule. For example, you can limit the network bandwidth of low priority jobs to 128 Kbps from 8:00 A.M. to 5:00 P.M. on Monday through Friday, and then set the limit to 512 Kbps for nonwork hours.\r\n\r\n If you disable or do not configure this policy setting, BITS uses all available unused bandwidth for background job transfers.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxbandwidthv2-work"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_1","displayName":"Enabled","description":null,"helpText":null}]},"7eb362049b661a9c":{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckexemptionlist_dcom_lbl_actseccheckexemptionlist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"a57b27b6-48e0-42b2-812a-2be86c113a0c","categoryName":"Application Compatibility Settings","options":null},"7ebb517e9db588ff":{"id":"device_vendor_msft_policy_config_admx_disknvcache_bootresumepolicy","displayName":"Turn off boot and resume optimizations","description":"This policy setting turns off the boot and resume optimizations for the hybrid hard disks in the system.\r\n\r\nIf you enable this policy setting, the system does not use the non-volatile (NV) cache to optimize boot and resume.\r\n\r\nIf you disable this policy setting, the system uses the NV cache to achieve faster boot and resume. The system determines the data that will be stored in the NV cache to optimize boot and resume. The required data is stored in the NV cache during shutdown and hibernate, respectively. This might cause a slight increase in the time taken for shutdown and hibernate.\r\n\r\nIf you do not configure this policy setting, the default behavior is observed and the NV cache is used for boot and resume optimizations.\r\n\r\nNote: This policy setting is applicable only if the NV cache feature is on.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-disknvcache#admx-disknvcache-bootresumepolicy"],"categoryId":"40c593b9-63cf-4b10-ad26-1ceb7c9491fe","categoryName":"Disk NV Cache","options":[{"id":"device_vendor_msft_policy_config_admx_disknvcache_bootresumepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_disknvcache_bootresumepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"7e8a8271a7fdb6c2":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_allowfqdnnetbiosqueries","displayName":"Allow NetBT queries for fully qualified domain names","description":"Specifies that NetBIOS over TCP/IP (NetBT) queries are issued for fully qualified domain names. \r\n\r\nIf you enable this policy setting, NetBT queries will be issued for multi-label and fully qualified domain names such as \"www.example.com\" in addition to single-label names. \r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, NetBT queries will only be issued for single-label names such as \"example\" and not for multi-label and fully qualified domain names.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-allowfqdnnetbiosqueries"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_allowfqdnnetbiosqueries_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_allowfqdnnetbiosqueries_1","displayName":"Enabled","description":null,"helpText":null}]},"7e07efd19a9dc5e2":{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_disallowlegacydiskdevices","displayName":"Do not allow non-Enhanced Storage removable devices","description":"This policy setting configures whether or not non-Enhanced Storage removable devices are allowed on your computer.\r\n\r\nIf you enable this policy setting, non-Enhanced Storage removable devices are not allowed on your computer.\r\n\r\nIf you disable or do not configure this policy setting, non-Enhanced Storage removable devices are allowed on your computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-enhancedstorage#admx-enhancedstorage-disallowlegacydiskdevices"],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_disallowlegacydiskdevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_disallowlegacydiskdevices_1","displayName":"Enabled","description":null,"helpText":null}]},"7e865d3ab51041cd":{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureindividualthreshold_name_dxt_standarduserauthorizationfailureindividualthreshold_name","displayName":"Maximum number of authorization failures per duration:","description":null,"helpText":"","infoUrls":[],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":null},"7e393b701769b7a3":{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls_enable_app_control","displayName":"Enable App Control for Business policy to trust Windows components and Store apps","description":"Select Audit only to log all events in local client logs but not block any apps from running or select Enforce to actively block apps from running in a deployed App Control for Business base policy. App Control for Business policies created in either Audit only or Enforce mode will be deployed as rebootless base policies to all devices targeted./nBy default, any devices targeted with this App Control for Business policy will have the setting to Trust Windows components and Store apps enabled, in either audit or enforce mode based on your selection.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"56b82fc9-c632-4c76-bb4f-dcf8757f003e","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls_enable_app_control_0","displayName":"Enforce","description":"Enforce","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls_enable_app_control_1","displayName":"Audit only","description":"Audit only","helpText":null}]},"7e0d9b69043c268d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_defaultdownloaddirectory","displayName":"Set default download directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":null},"7ea5098466b5f47d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_extensioninstallsourcesdesc","displayName":"URL patterns to allow extension, app, and user script installs from (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"7eb236a95d7a9427":{"id":"device_vendor_msft_policy_config_exploitguard_exploitprotectionsettings","displayName":"Exploit Protection Settings","description":"Enables the IT admin to push out a configuration representing the desired system and application mitigation options to all the devices in the organization. The configuration is represented by an XML. For more information Exploit Protection, see Enable Exploit Protection on Devices and Import, export, and deploy Exploit Protection configurations. The system settings require a reboot; the application settings do not require a reboot.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ExploitGuard#exploitprotectionsettings"],"categoryId":"e73ddc98-e465-43b0-bfd8-8a18cd9d4830","categoryName":"Exploit Guard","options":null},"7e835e49980853e2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_profileshealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":null},"7e45d187c8f411a6":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"7ed6270645f566b7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls","displayName":"Block the Adobe Flash plug-in on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from running Adobe Flash.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPluginsSetting' (Default Adobe Flash setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"7e3e0b48fc2b17be":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal","displayName":"Allow pages to send synchronous XHR requests during page dismissal","description":"This policy lets you specify that a page can send synchronous XHR requests during page dismissal.\r\n\r\nIf you enable this policy, pages can send synchronous XHR requests during page dismissal.\r\n\r\nIf you disable this policy or don't configure this policy, pages aren't allowed to send synchronous XHR requests during page dismissal.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal_1","displayName":"Enabled","description":null,"helpText":null}]},"7e8aab72a309df20":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_javascriptjitblockedforsitesdesc","displayName":"Block JavaScript from using JIT on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"7eb58b19a0c3ea95":{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_kfmforcewindowsdisplaylanguage","displayName":"Always use the user's Windows display language when provisioning known folders in OneDrive","description":"When you move Windows known folders to OneDrive, they will be provisioned in the user's Windows display language by default, unless the user sets a different preferred language. This setting lets you override the user's preferred language setting. It works with both Known Folder Move settings (\"Silently move Windows known folders to OneDrive\" and \"Prompt users to move Windows known folders to OneDrive\").\r\n\r\nIf you enable this setting, known folders will be provisioned using the user's Windows display language, even if the user sets a different preferred language.\r\n\r\nIf you disable or do not configure this setting, and the user set a preferred language, their known folders will be provisioned in OneDrive using that language. The known folders on their PC will appear in their preferred language.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_kfmforcewindowsdisplaylanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_kfmforcewindowsdisplaylanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"7e17236dc58c063f":{"id":"intelligencesettings_allowwritingtools","displayName":"Allow Writing Tools","description":"If `false`, disables Writing Tools.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_allowwritingtools_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_allowwritingtools_true","displayName":"True","description":null,"helpText":null}]},"7ed5a2a509d87500":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize84","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6730f0be-a129-4b48-942f-e4ddf69fee66","categoryName":"Customizable Error Messages","options":null},"7e5ecf32cfceb9a6":{"id":"user_vendor_msft_policy_config_admx_startmenu_nofind","displayName":"Remove Search link from Start Menu (User)","description":"This policy setting allows you to remove the Search link from the Start menu, and disables some File Explorer search elements. Note that this does not remove the search box from the new style Start menu.\r\n\r\nIf you enable this policy setting, the Search item is removed from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.\r\n\r\nNote: Enabling this policy setting also prevents the user from using the F3 key.\r\n\r\nIn File Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.\r\n\r\nThis policy setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.\r\n\r\nIf you disable or do not configure this policy setting, the Search link is available from the Start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nofind"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nofind_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nofind_1","displayName":"Enabled","description":null,"helpText":null}]},"7ed3d0c77e84394e":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-localmachine"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine_1","displayName":"Enabled","description":null,"helpText":null}]},"7e3aa969dcc0ef51":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users cannot preview items or get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-restricted"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted_1","displayName":"Enabled","description":null,"helpText":null}]},"7ea7072291a04218":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability","displayName":"Control availability of extensions unpublished on the Chrome Web Store. (User)","description":"If this policy is enabled, extensions that are unpublished on the Chrome Web\r\nStore will be disabled in Google Chrome.\r\nThis policy only applies to extensions that are installed and updated from the\r\nChrome Web Store.\r\n\r\nOff-store extensions such as unpacked extensions installed using developer\r\nmode and extensions installed using the command-line switch are ignored.\r\nForce-installed extensions that are self-hosted are ignored. All\r\nversion-pinned extensions are also ignored.\r\n\r\nIf the policy is set to AllowUnpublished (0) or not set, extensions that are unpublished on the Chrome Web Store are allowed.\r\nIf the policy is set to DisableUnpublished (1), extensions that are unpublished on the Chrome Web Store are disabled.","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"7e4c3a59e0d99b81":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles","displayName":"OpenDocument Spreadsheet files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"7eff5f3e37c8fdfe":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders64","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders64_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders64_1","displayName":"True","description":null,"helpText":null}]},"7ea598bda551aec8":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"7e47554ffdaa33af":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list","displayName":"Enable built-in PDF reader powered by Adobe Acrobat for WebView2 (User)","description":"This policy configures WebView2 applications to launch the new version of the PDF reader that's powered by Adobe Acrobat's PDF reader. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF file handling, and greater accessibility.\r\n\r\nIf this policy is specified for an application, it is possible that it may impact other related applications as well. The policy is applied to all WebView2s sharing the same WebView2 user data folder. These WebView2s could potentially belong to multiple applications if those applications, which are likely from the same product family, are designed to share the same user data folder.\r\n\r\nUse a name-value pair to enable the new PDF reader for the application. Set the name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. Set the Value to true to enable the new reader or set it to false to use the existing one.\r\n\r\nIf you enable this policy for the specified WebView2 applications, they will use the new Adobe Acrobat powered PDF reader to open all PDF files.\r\n\r\nIf you disable the policy for the specified WebView2 applications or don't configure it, they will use the existing PDF reader to open all PDF files.\r\n\r\nExample value:\r\n\r\n{\"name\": \"app1.exe\", \"value\": true}\r\n{\"name\": \"app_id_for_app2\", \"value\": true}\r\n{\"name\": \"*\", \"value\": false}","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_1","displayName":"Enabled","description":null,"helpText":null}]},"7ebc22915fc3cea2":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting","displayName":"Default clipboard site permission (User)","description":"This policy controls the default value for the clipboard site permission.\r\n\r\nSetting the policy to 2 blocks sites from using the clipboard site permission.\r\n\r\nSetting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use an API.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'ClipboardAllowedForUrls' (Allow clipboard use on specific sites) and 'ClipboardBlockedForUrls' (Block clipboard use on specific sites) policies.\r\n\r\nThis policy only affects clipboard operations controlled by the clipboard site permission and doesn't affect sanitized clipboard writes or trusted copy and paste operations.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockClipboard (2) = Do not allow any site to use the clipboard site permission\r\n\r\n* AskClipboard (3) = Allow sites to ask the user to grant the clipboard site permission\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"7e9a7cefb098a6e6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_norwegianbokml","displayName":"Norwegian (Bokmål) (User)","description":"Enables the editing language Norwegian (Bokm†l)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_norwegianbokml_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_norwegianbokml_1","displayName":"Enabled","description":null,"helpText":null}]},"7ed706282a39bb8c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_smartdocumentswordexcel_l_completelydisablethesmartdocumentsfeatureinwordandexcel","displayName":"Completely disable the Smart Documents feature in Word and Excel (User)","description":"This policy setting allows you to configure the ability to run smart documents in Word or Excel. However, since XML expansion packs can include many types of solutions in addition to smart document solutions, this policy setting cannot be used to disable the ability to run XML expansion packs.\r\n\r\nIf you enable this policy setting, smart document solutions will not run. To fully manage the Smart Documents feature, this policy and the \"Disable Smart Document's use of manifests\" policy should both be configured.\r\n\r\nIf you disable or do not configure this policy setting, smart document solutions will run.","helpText":"","infoUrls":[],"categoryId":"449201b6-5002-42d1-85ed-d288fb6552da","categoryName":"Smart Documents (Word, Excel)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_smartdocumentswordexcel_l_completelydisablethesmartdocumentsfeatureinwordandexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_smartdocumentswordexcel_l_completelydisablethesmartdocumentsfeatureinwordandexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"7e5626bed82b4875":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_donotuseconversationalarrangementinviews","displayName":"Do not use Conversation arrangement in Views (User)","description":"This policy setting allows you to prevent the use of Conversation arrangement in Views.\r\n\r\nIf you enable this policy setting, you will prevent Conversational arrangement in Views.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to use Conversation arrangement in Views.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_donotuseconversationalarrangementinviews_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_donotuseconversationalarrangementinviews_1","displayName":"Enabled","description":null,"helpText":null}]},"7e406e2db692755b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope","displayName":"Set default search scope (User)","description":"This policy allows you to specify the default search scope to be used. Users will not be able to change the default once this policy is set, but they can change the scope while running a search.\r\n \r\nIf you enable this policy, you can specify the folders that Outlook searches by default when the user begins a new search.\r\n \r\nIf you disable or do not configure this policy, Outlook searches all folders in the current mailbox when the search is initiated from the Inbox. If the search is initiated from another folder, the search only includes items from that folder. Users can still change the scope when searching.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_setdefaultsearchscope_1","displayName":"Enabled","description":null,"helpText":null}]},"7e879e6b75d0492c":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders63","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders63_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders63_1","displayName":"True","description":null,"helpText":null}]},"7e45e002662a5719":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_l_pathcolon44","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"7e593b089a3df7d2":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_promptuserwhenreapplyingastyle","displayName":"Prompt user when reapplying a style (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_promptuserwhenreapplyingastyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_promptuserwhenreapplyingastyle_1","displayName":"Enabled","description":null,"helpText":null}]},"7e7aa48db5baf18d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_l_datecolon13","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"7ed1d1e806efe7c7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlinkwd","displayName":"Insert tab | Links | Hyperlink (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlinkwd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_inserthyperlinkwd_1","displayName":"True","description":null,"helpText":null}]},"7e0776c6054847cb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_reverseprintorder","displayName":"Print pages in reverse order (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_reverseprintorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_reverseprintorder_1","displayName":"Enabled","description":null,"helpText":null}]},"7e5c7cbd1d53bdd8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_datestyle","displayName":"Date style (User)","description":"Checks/unchecks the option \"Date style.\" This option may be hidden in Word until certain editing languages are enabled.","helpText":"","infoUrls":[],"categoryId":"62492a4c-fd70-4275-ae5e-d60e200e3553","categoryName":"Apply as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_datestyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_datestyle_1","displayName":"Enabled","description":null,"helpText":null}]},"7e15dc8d81b61426":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_vmcreatorid","displayName":"Target","description":"This field specifies the VM Creator ID that this rule is applicable to. Not configuring this setting will result in this rule applying to all VM creators.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_vmcreatorid_wsl","displayName":"Windows Subsystem for Linux","description":"Windows Subsystem for Linux","helpText":null}}} \ No newline at end of file diff --git a/public/intune-definitions/7f.json b/public/intune-definitions/7f.json new file mode 100644 index 000000000000..d695d6b4628d --- /dev/null +++ b/public/intune-definitions/7f.json @@ -0,0 +1 @@ +{"7f0322c5c7792d65":{"id":"com.apple.directoryservice.managed_adforcehomelocal","displayName":"AD Force Home Local","description":"If true, forces a local home directory.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adforcehomelocal_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adforcehomelocal_true","displayName":"True","description":null,"helpText":null}]},"7f71cd1d725bd6e3":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app","displayName":"Company Portal","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"7fcd24849adaeab7":{"id":"com.apple.managedclient.preferences_disableftpparsing","displayName":"Disable FTP parsing","description":"Disables parsing of FTP traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disableftpparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableftpparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"7fa780149dec5a90":{"id":"com.apple.managedclient.preferences_popupsallowedforurls","displayName":"Allow pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that can open pop-up windows.\n\nIf you don't configure this policy, the global default value from the \"DefaultPopupsSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#popupsallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"7f92c7eb2c46476b":{"id":"com.apple.managedclient.preferences_sensorsallowedforurls","displayName":"Allow access to sensors on specific sites","description":"Define a list of sites, based on URL patterns, that can access and use sensors such as motion and light sensors.\n\nIf you don't configure this policy, the global default value from the \"DefaultSensorsSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor URL patterns that don't match this policy, the following order of precedence is used: The \"SensorsBlockedForUrls\" policy (if there is a match), the \"DefaultSensorsSetting\" policy (if set), or the user's personal settings.\n\nThe URL patterns defined in this policy can't conflict with those configured in the \"SensorsBlockedForUrls\" policy. You can't allow and block a URL.\n\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sensorsallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"7f495708c81e102d":{"id":"com.apple.mcx_dontallowfdeenable","displayName":"Prevent FileVault From Being Enabled","description":"Set to true to prevent FileVault from being enabled.","helpText":null,"infoUrls":[],"categoryId":"5b327ef8-f9fb-4e10-ba9e-8a8ca9bf4ed9","categoryName":"FileVault Options","options":[{"id":"com.apple.mcx_dontallowfdeenable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_dontallowfdeenable_true","displayName":"True","description":null,"helpText":null}]},"7f308c6b157d77cd":{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"7fdd58a4038b1cd7":{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"7f34d4bf52dd84fa":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings","displayName":"Allow importing of startup page settings","description":"Allows users to import Startup settings from another browser into Microsoft Edge.\n\nIf you enable this policy, the Startup settings are always imported.\n\nIf you disable this policy, startup settings aren't imported at first run or at manual import.\n\nIf you don't configure this policy, startup settings are imported at first run, and users can choose whether to import this data manually by selecting browser settings option during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge will import startup settings on first run, but users can select or clear **browser settings** option during manual import.\n\n**Note**: This policy currently manages importing from Microsoft Edge Legacy and Google Chrome (on Windows 7, 8, and 10) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings_true","displayName":"Enabled","description":null,"helpText":null}]},"7faa80440c72236d":{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_ciphersuiteorder","displayName":"Cipher suite order","description":"This policy setting determines the cipher suites used by the SMB client.\r\n\r\nIf you enable this policy setting, cipher suites are prioritized in the order specified.\r\n\r\nIf you enable this policy setting and do not specify at least one supported cipher suite, or if you disable or do not configure this policy setting, the default cipher suite order is used.\r\n\r\nSMB 3.11 cipher suites:\r\n\r\nAES_128_GCM\r\nAES_128_CCM\r\n\r\nSMB 3.0 and 3.02 cipher suites:\r\n\r\nAES_128_CCM\r\n\r\nHow to modify this setting:\r\n\r\nArrange the desired cipher suites in the edit box, one cipher suite per line, in order from most to least preferred, with the most preferred cipher suite at the top. Remove any cipher suites you don't want to use.\r\n\r\nNote: When configuring this security setting, changes will not take effect until you restart Windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-lanmanworkstation#admx-lanmanworkstation-pol-ciphersuiteorder"],"categoryId":"88a2c40a-7b95-4fd8-8ad8-81dc61d4adf5","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_ciphersuiteorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_ciphersuiteorder_1","displayName":"Enabled","description":null,"helpText":null}]},"7f04cf8522fe8a21":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_paths_exclusions_pathslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"7f53c239b34cdebd":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduletime","displayName":"Specify the time of day to run a scheduled full scan to complete remediation","description":"This policy setting allows you to specify the time of day at which to perform a scheduled full scan in order to complete remediation. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. The schedule is based on local time on the computer where the scan is executing.\r\n\r\n If you enable this setting, a scheduled full scan to complete remediation will run at the time of day specified.\r\n\r\n If you disable or do not configure this setting, a scheduled full scan to complete remediation will run at a default time.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-remediation-scan-scheduletime"],"categoryId":"8212ba6e-101d-4ee8-8ca2-c4cd2cddba96","categoryName":"Remediation","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduletime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_scan_scheduletime_1","displayName":"Enabled","description":null,"helpText":null}]},"7fa92e0881660c6a":{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate","displayName":"Check published state","description":"Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting also specifies how often the system repeats the verification.\r\n\r\n By default, the system only verifies published printers at startup. This setting allows for periodic verification while the computer is operating.\r\n\r\n To enable this additional verification, enable this setting, and then select a verification interval.\r\n\r\n To disable verification, disable this setting, or enable this setting and select \"Never\" for the verification interval.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-verifypublishedstate"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_1","displayName":"Enabled","description":null,"helpText":null}]},"7f0f4f0e1e70d8c7":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherdetails_issuingcadetails","displayName":"Issuing certificate authority","description":"The name of the issuing certificate authority","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"7f9f8bec7e842752":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites","description":"Setting the policy lets you make a list of URL patterns that specify sites for which Chrome can automatically select a client certificate. The value is an array of stringified JSON dictionaries, each with the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts the client certificates the browser automatically selects from. Independent of the filter, only certificates that match the server's certificate request are selected.\r\n\r\nExamples for the usage of the $FILTER section:\r\n\r\n* When $FILTER is set to { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, only client certificates issued by a certificate with the CommonName $ISSUER_CN are selected.\r\n\r\n* When $FILTER contains both the \"ISSUER\" and the \"SUBJECT\" sections, only client certificates that satisfy both conditions are selected.\r\n\r\n* When $FILTER contains a \"SUBJECT\" section with the \"O\" value, a certificate needs at least one organization matching the specified value to be selected.\r\n\r\n* When $FILTER contains a \"SUBJECT\" section with a \"OU\" value, a certificate needs at least one organizational unit matching the specified value to be selected.\r\n\r\n* When $FILTER is set to {}, the selection of client certificates is not additionally restricted. Note that filters provided by the web server still apply.\r\n\r\nLeaving the policy unset means there's no autoselection for any site.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoSelectCertificateForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\"pattern\":\"https://www.example.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\", \"L\": \"certificate issuer location\", \"O\": \"certificate issuer org\", \"OU\": \"certificate issuer org unit\"}, \"SUBJECT\":{\"CN\":\"certificate subject name\", \"L\": \"certificate subject location\", \"O\": \"certificate subject org\", \"OU\": \"certificate subject org unit\"}}}","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"7fe12451f868b9c7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls","displayName":"Automatically grant permission to sites to connect to USB serial devices.","description":"Setting the policy allows you to list sites which are automatically granted permission to access USB serial devices with vendor and product IDs matching the vendor_id and product_id fields. Omitting the product_id field allows the given sites permission to access devices with a vendor ID matching the vendor_id field and any product ID.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn Chrome OS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultSerialGuardSetting, SerialAskForUrls, SerialBlockedForUrls and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the Web Serial API. To grant access to USB devices through the WebUSB API see the WebUsbAllowDevicesForUrls policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=SerialAllowUsbDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234,\r\n \"product_id\": 5678\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://specific-device.example.com\"\r\n ]\r\n },\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://all-vendor-devices.example.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"7f57dc1849145860":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled","displayName":"Use the legacy CORS implementation rather than new CORS","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7fb442a8da8aa87a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_domainreliabilityallowed_recommended","displayName":"Allow reporting of domain reliability related data","description":"If this policy is set false, domain reliability diagnostic data reporting is disabled and no data is sent to Google.\r\nIf this policy is set true or not set, domain reliability diagnostic data reporting will follow the behavior of MetricsReportingEnabled for Google Chrome or DeviceMetricsReportingEnabled for Google ChromeOS.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_domainreliabilityallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_domainreliabilityallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"7f3aedf4931cd258":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled","displayName":"Allow showing the most recent default search engine results page in a Browser side panel","description":"Setting the policy to Enabled or leaving the policy unset means that users can bring up their most recent default search engine results page in a side panel via toggling an icon in the toolbar.\r\n\r\nSetting the policy to Disabled removes the icon from the toolbar that opens the side panel with the default search engine results page.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7f66619880b1dfaf":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi","displayName":"Enable support for the PPB_VideoDecoder(Dev) API.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi_1","displayName":"Enabled","description":null,"helpText":null}]},"7f06e724c3bf2344":{"id":"device_vendor_msft_policy_config_credentialsui_enumerateadministrators","displayName":"Enumerate administrator accounts on elevation","description":"This policy setting controls whether administrator accounts are displayed when a user attempts to elevate a running application. By default, administrator accounts are not displayed when the user attempts to elevate a running application.\n\nIf you enable this policy setting, all local administrator accounts on the PC will be displayed so the user can choose one and enter the correct password.\n\nIf you disable this policy setting, users will always be required to type a user name and password to elevate.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialsui#credentialsui-enumerateadministrators"],"categoryId":"58111f34-e9ac-47e2-b8ae-8d55c6a9ed6c","categoryName":"Credential User Interface","options":[{"id":"device_vendor_msft_policy_config_credentialsui_enumerateadministrators_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialsui_enumerateadministrators_1","displayName":"Enabled","description":null,"helpText":null}]},"7f1a23bd9de8a79f":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion","displayName":"Block executable files from running unless they meet a prevalence, age, or trusted list criterion","description":"This rule blocks the following file types from launching unless they meet prevalence or age criteria, or they're in a trusted list or an exclusion list: Executable files (such as .exe, .dll, or .scr).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_warn","displayName":"Warn","description":null,"helpText":null}]},"7f36b67a7ff82692":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive","displayName":"Also apply to matching devices that are already installed.","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive_1","displayName":"True","description":null,"helpText":null}]},"7fd827ac0caceccc":{"id":"device_vendor_msft_policy_config_display_turnoffgdidpiscalingforapps","displayName":"Turn Off Gdi DPI Scaling For Apps","description":"This policy allows to force turn off GDI DPI Scaling for a semicolon separated list of applications. Applications can be specified either by using full path or just filename and extension.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#turnoffgdidpiscalingforapps"],"categoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","categoryName":"Display","options":null},"7ffd6523e08fc009":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_profilessiddirectorynamematch","displayName":"SID Directory Name Match (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":null},"7f061d4a400a754d":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowsmartscreenie"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"7f9f833a86a580bf":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806","displayName":"Launching programs and unsafe files","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1","displayName":"Prompt","description":null,"helpText":null}]},"7f4f8a3be6f6bba9":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly","displayName":"Accounts Limit Local Account Use Of Blank Passwords To Console Logon Only","description":"Accounts: Limit local account use of blank passwords to console logon only This security setting determines whether local accounts that are not password protected can be used to log on from locations other than the physical computer console. If enabled, local accounts that are not password protected will only be able to log on at the computer's keyboard. Default: Enabled. Warning: Computers that are not in physically secure locations should always enforce strong password policies for all local user accounts. Otherwise, anyone with physical access to the computer can log on by using a user account that does not have a password. This is especially important for portable computers. If you apply this security policy to the Everyone group, no one will be able to log on through Remote Desktop Services. Notes This setting does not affect logons that use domain accounts. It is possible for applications that use remote interactive logons to bypass this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"7f24c15e31edc13b":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations","displayName":"User Account Control Only Elevate UI Access Applications That Are Installed In Secure Locations","description":"User Account Control: Only elevate UIAccess applications that are installed in secure locations This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - …\\Program Files\\, including subfolders - …\\Windows\\system32\\ - …\\Program Files (x86)\\, including subfolders for 64-bit versions of Windows Note: Windows enforces a public key infrastructure (PKI) signature check on any interactive application that requests to run with a UIAccess integrity level regardless of the state of this security setting. The options are: • Enabled: (Default) If an application resides in a secure location in the file system, it runs only with UIAccess integrity. • Disabled: An application runs with UIAccess integrity even if it does not reside in a secure location in the file system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations_0","displayName":"Disabled: Application runs with UIAccess integrity even if it does not reside in a secure location.","description":"Disabled: Application runs with UIAccess integrity even if it does not reside in a secure location.","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations_1","displayName":"Enabled: Application runs with UIAccess integrity only if it resides in secure location.","description":"Enabled: Application runs with UIAccess integrity only if it resides in secure location.","helpText":null}]},"7f46c5a5c236101d":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc","displayName":"Re-enable deprecated web platform features for a limited time (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"7f494145c3d725a4":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2","displayName":"Retrieve configurations and experiments","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1","displayName":"Retrieve configurations only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null}]},"7f07cfacc7f3c460":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode","description":"Enforces a minimum Restricted Mode on YouTube and prevents users from picking a less restricted mode.\r\n\r\nSet to Strict (2) to enforce Strict Restricted Mode on YouTube.\r\n\r\nSet to Moderate (1) to enforce the user to only use Moderate Restricted Mode and Strict Restricted Mode on YouTube. They can't disable Restricted Mode.\r\n\r\nSet to Off (0) or don't configure this policy to not enforce Restricted Mode on YouTube. External policies such as YouTube policies might still enforce Restricted Mode.\r\n\r\n* 0 = Do not enforce Restricted Mode on YouTube\r\n\r\n* 1 = Enforce at least Moderate Restricted Mode on YouTube\r\n\r\n* 2 = Enforce Strict Restricted Mode for YouTube","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_1","displayName":"Enabled","description":null,"helpText":null}]},"7f6e4b845df52654":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_isolateorigins","displayName":"Enable site isolation for specific origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"7fd0c29496ca4f75":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled","displayName":"Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 125.\r\n\r\nThis policy is obsoleted because Grammar Tools is deprecated from Edge. This policy won't work in Microsoft Edge version 126. Enables the Grammar Tools feature within Immersive Reader in Microsoft Edge.\r\nThis helps improve reading comprehension by splitting words into syllables and highlighting nouns, verbs, adverbs, and adjectives.\r\n\r\nIf you enable this policy or don't configure it, the Grammar Tools option shows up within Immersive Reader.\r\nIf you disable this policy, users can't access the Grammar Tools feature within Immersive Reader.","helpText":"","infoUrls":[],"categoryId":"8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","categoryName":"Immersive Reader settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7fa1a46346896014":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled","displayName":"Control the new behavior for event dispatching on disabled form controls","description":"Event dispatching on disabled form controls is being changed in Edge to improve compatibility with other browsers and to improve the developer experience.\r\n\r\nWith this change, MouseEvents get dispatched on disabled form control elements. Exceptions for this behavior are click, mouseup, and mousedown. Some examples of the new events are mousemove, mouseenter, and mouseleave.\r\n\r\nThis change also truncates the event path of click, mouseup, and mousedown when they’re dispatched on children of disabled form controls. These events aren’t dispatched on the disabled form control or any of its ancestors.\r\n\r\nNote: This new behavior might break some websites.\r\n\r\nIf this policy is enabled or left not set, the new behavior will be used.\r\n\r\nIf this policy is disabled, the old behavior will be used.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7f4acccd6ce7935a":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings","displayName":"Dynamic Code Settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_0","displayName":"Default dynamic code settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_1","displayName":"Prevent the browser process from creating dynamic code","description":null,"helpText":null}]},"7f2097a0a87f91a6":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled","displayName":"Enable insecure download warnings","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\r\n\r\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user will receive a UI warning, such as \"Insecure download blocked.\" The user will still have an option to proceed and download the item.\r\n\r\nIf you disable this policy, the warnings for insecure downloads will be suppressed.","helpText":"","infoUrls":[],"categoryId":"5e8e9c7f-1988-45cd-b5ca-78d939e3d49e","categoryName":"Downloads","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7f4dd07b5888562f":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null}]},"7fb0f4a15a770e61":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled","displayName":"Let screen reader users get image descriptions from Microsoft","description":"Lets screen reader users get descriptions of unlabeled images on the web.\r\n\r\nIf you enable or don't configure this policy, users have the option of using an anonymous Microsoft service. This service provides automatic descriptions for unlabeled images users encounter on the web when they're using a screen reader.\r\n\r\nIf you disable this policy, users can't enable the Get Image Descriptions from Microsoft feature.\r\n\r\nWhen this feature is enabled, the content of images that need a generated description is sent to Microsoft servers to generate a description.\r\n\r\nNo cookies or other user data is sent to Microsoft, and Microsoft doesn't save or log any image content.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7ffafa604442c786":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist","displayName":"Allow syncing OneDrive accounts for only specific organizations","description":"This setting lets you prevent users from easily uploading files to other organizations by specifying a list of allowed tenant IDs.\r\n\r\nIf you enable this setting, users will get an error if they attempt to add an account from an organization that is not allowed. If a user has already added the account, the files will stop syncing.\r\n\r\nIf you disable or do not configure this setting, users can add accounts from any organization.\r\n\r\nTo block specific organizations instead, use \"Block syncing OneDrive accounts for specific organizations.\"\r\n\r\nThis setting will take priority over the \"Block syncing OneDrive accounts for specific organizations.\" Do not enable both policies at the same time.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist_1","displayName":"Enabled","description":null,"helpText":null}]},"7f199e2c72859723":{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground","displayName":"Let Apps Run In Background","description":"This policy setting specifies whether Windows apps can run in the background.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_0","displayName":"User in control (default).","description":"User in control (default).","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"7f1dea0a09b71d36":{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures","displayName":"Allow Pinned Folder Pictures","description":"This policy controls the visibility of the Pictures shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderpictures"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"7fbcebdc06034a28":{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion","displayName":"Configure Traditional Chinese IME Version","description":"This policy allows the IT admin to configure the Microsoft Traditional Chinese IME version in the desktop. The following list shows the supported values: 0 (default) – The new Microsoft Traditional Chinese IME is on by default. Allow to control Microsoft Traditional Chinese IME version to use. 1 - The previous version of Microsoft Traditional Chinese IME is always selected. Not allowed to control Microsoft Traditional Chinese IME version to use. 2 - The new Microsoft Traditional Chinese IME is always selected. Not allowed to control Microsoft Traditional Chinese IME version to use.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#configuretraditionalchineseimeversion"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion_0","displayName":"Allows you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is configured by default.","description":"Allows you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is configured by default.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion_1","displayName":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The previous version of Microsoft Traditional Chinese IME is always selected.","description":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The previous version of Microsoft Traditional Chinese IME is always selected.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion_2","displayName":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is always selected.","description":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is always selected.","helpText":null}]},"7faaaf0ff585d453":{"id":"device_vendor_msft_policy_config_update_detectionfrequency","displayName":"Detection Frequency","description":"Specifies the scan frequency from every 1 - 22 hours. Default is 22 hours.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#detectionfrequency"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"7f8067e35cc95e05":{"id":"linux_features_platformupdatecontrols","displayName":"Platform Update Controls","description":"Enable or disable platform update controls. Must be set to Enabled for platform update settings to take effect.","helpText":null,"infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":[{"id":"linux_features_platformupdatecontrols_enabled","displayName":"Enabled","description":null,"helpText":null},{"id":"linux_features_platformupdatecontrols_disabled","displayName":"Disabled","description":null,"helpText":null}]},"7f94f8cace1ab467":{"id":"safari_newtabstartpage_extensionidentifier","displayName":"Extension Identifier","description":"The composed identifier of the extension that provides the start page. The required format is \"Identifier (TeamIdentifier)\", for example \"com.example.app (ABCD1234)\". Required when setting `PageType` to `Extension`.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"7f927a615d49ad00":{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage","displayName":"Restricts the UI languages Windows should use for the selected user (User)","description":"This policy setting restricts the Windows UI language for specific users.\r\n\r\nThis policy setting applies to computers with more than one UI language installed.\r\n\r\nIf you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language for the selected user. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the user.\r\n\r\nIf you disable or do not configure this policy setting, there is no restriction on which language users should use.\r\n\r\nTo enable this policy setting in Windows Server 2003, Windows XP, or Windows 2000, to use the \"Restrict selection of Windows menus and dialogs language\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-lockuseruilanguage"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"7fad8617e1832987":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access","displayName":"Microsoft Access 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Access 2013.\r\nBy default, the user settings of Microsoft Access 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Access 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013access"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access_1","displayName":"Enabled","description":null,"helpText":null}]},"7f76492f4418c435":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch2","displayName":"Site URL 3 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"7f2860a932249f10":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering","displayName":"Configure Network Buffering (User)","description":"This policy setting allows you to specify whether network buffering uses the default or a specified number of seconds.\r\n\r\nIf you enable this policy setting, select one of the following options to specify the number of seconds streaming media is buffered before it is played.\r\n\r\n- Custom: the number of seconds, up to 60, that streaming media is buffered.\r\n- Default: default network buffering is used and the number of seconds that is specified is ignored.\r\n\r\nThe \"Use default buffering\" and \"Buffer\" options on the Performance tab in the Player are not available.\r\n\r\nIf you disable or do not configure this policy setting, users can change the buffering options on the Performance tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-networkbuffering"],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_1","displayName":"Enabled","description":null,"helpText":null}]},"7f773b67f5dc0a6c":{"id":"user_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges","displayName":"MSI Always Install With Elevated Privileges (User)","description":"This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system. If you enable this policy setting, privileges are extended to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add or Remove Programs in Control Panel. This profile setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers. If you disable or do not configure this policy setting, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer. Note: This policy setting appears both in the Computer Configuration and User Configuration folders. To make this policy setting effective, you must enable it in both folders. Caution: Skilled users can take advantage of the permissions this policy setting grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy setting is not guaranteed to be secure.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#msialwaysinstallwithelevatedprivileges"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"user_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"user_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"7f8560fbcbdca8bb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode","displayName":"Choose how to specify proxy server settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},"7f301c4bd1729198":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain","displayName":"Configure the required domain name for remote access hosts (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: my-awesome-domain.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_1","displayName":"Enabled","description":null,"helpText":null}]},"7fe46ae395e30686":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},"7f2ba93536dcd734":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled","displayName":"Enable TLS Encrypted ClientHello (User)","description":"Encrypted ClientHello (ECH) is an extension to TLS to encrypt sensitive fields of the ClientHello and improve privacy.\r\n\r\nIf this policy is not configured, or is set to enabled, Google Chrome will follow the default rollout process for ECH. If it is disabled, Google Chrome will not enable ECH.\r\n\r\nWhen the feature is enabled, Google Chrome may or may not use ECH depending on server support, availability of the HTTPS DNS record, or rollout status.\r\n\r\nECH is an evolving protocol, so Google Chrome's implementation is subject to change. As such, this policy is a temporary measure to control the initial experimental implementation. It will be replaced with final controls as the protocol finalizes.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7fe0d125b14d4640":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_enterpriselogourlforbrowser","displayName":"Enterprise Logo URL for a managed browser (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"7fdc11e4d536f989":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled","displayName":"Control the visibility of the extension attribution on the New Tab page (User)","description":"This policy determines whether an attribution to the extension modifying the New Tab Page (NTP) is displayed in the NTP's footer.\r\n\r\nBy default, if an extension has overridden the standard NTP, a message attributing this change to the specific extension will appear in the footer. This attribution typically includes a link to the relevant extension in the Chrome Web Store.\r\n\r\nIf this policy is left unset or set to true, the extension attribution will be visible on the NTP footer when an extension is controlling the NTP.\r\n\r\nIf this policy is set to false, the attribution to the extension in the NTP footer will be suppressed.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7fcbb84c21b90344":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview","displayName":"Do not open files in unsafe locations in Protected View (User)","description":"This policy setting lets you determine if files located in unsafe locations will open in Protected View. If you have not specified unsafe locations, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders are considered unsafe locations.\r\n\r\nIf you enable this policy setting, files located in unsafe locations do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, files located in unsafe locations open in Protected View.","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"7f649099371a415b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls","displayName":"Block Local Fonts permission on these sites (User)","description":"Specifies a list of site URL patterns for which the local fonts permission is automatically denied. Sites in this list are prevented from accessing information about local fonts.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are supported. This policy matches based on origin only; any path in the URL pattern is ignored.\n\nIf a site isn't included in this policy, the 'DefaultLocalFontsSetting' (Default Local Fonts permission setting) policy applies if configured. Otherwise, the browser default behavior applies, and users can choose the permission on a per-site basis.\n\nExample value:\n\nhttps://www.example.com\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"7f6756e1807b9bd1":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled","displayName":"Enable upload files from mobile in Microsoft Edge desktop (User)","description":"This policy lets you configure the \"Upload from mobile\" feature in Microsoft Edge.\r\n\r\nUpload from mobile lets users select file from mobile devices to desktop when user upload file in a webpage in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, you can use the Upload from mobile feature in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Upload from mobile feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"7f89ca283dd317ae":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides_localnetworkaccessipaddressspaceoverridesdesc","displayName":"Override IP address space mappings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"7f4cd2b68519efe9":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityblocklist","displayName":"List of URL patterns for which developer tools are blocked (User)","description":"This policy specifies URL patterns where developer tools are blocked. For information on the URL format, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nURL patterns are evaluated against the URL of every frame on the page being inspected. If any frame matches a pattern in this policy, developer tools are blocked for the entire page.\r\n\r\nIf you configure this policy and do not configure the 'DeveloperToolsAvailabilityAllowlist' (List of URL patterns for which developer tools are allowed to be opened) policy, developer tools are blocked when any frame matches a pattern in this policy. If no frames match, availability is determined by the 'DeveloperToolsAvailability' (Control where developer tools can be used) policy.\r\n\r\nIf you configure both this policy and the 'DeveloperToolsAvailabilityAllowlist' policy, the allowlist takes precedence. URLs that match the allowlist are allowed, even if they also match this policy. URLs that match this policy (but not the allowlist) are blocked. If a URL matches neither, the 'DeveloperToolsAvailability' policy determines availability.\r\n\r\nIf you disable or do not configure this policy, developer tools availability is determined by the 'DeveloperToolsAvailabilityAllowlist' and 'DeveloperToolsAvailability' policies.\r\n\r\nThis policy supports up to 1,000 entries.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\ncontoso.com\r\nhttps://ssl.server.com\r\ncontoso.com/bad_path\r\nhttps://server.contoso.com:8080/path\r\n.exact.hostname.com\r\n*\r\nfile://*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"7f96b0a78bb1e54c":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility","displayName":"Configure whether the Discover or Work feed tabs are shown on the New Tab Page. (User)","description":"This policy configures whether the Discover or Work feed tabs are shown on the New Tab Page. By default, both Work and Discover tabs are enabled.\r\n\r\nIf you set this policy to 'EnableBothWorkDiscover' (0) or do not configure this policy, Microsoft Edge shows both the Work and Discover feed tabs on the new tab page.\r\n\r\nIf you set this policy to 'EnableOnlyWork' (1), Microsoft Edge shows only the Work feed tab on the new tab page.\r\n\r\nIf you set this policy to 'EnableOnlyDiscover' (2), Microsoft Edge shows only the Discover feed tab on the new tab page.\r\n\r\nThis policy works with the SetNTPDefaultFeedTab policy, which controls which feed tab is selected by default when both tabs are available.\r\n\r\nPolicy options mapping:\r\n\r\n* EnableBothWorkDiscover (0) = Enable both Work and Discover tabs\r\n\r\n* EnableOnlyWork (1) = Enable only Work tab\r\n\r\n* EnableOnlyDiscover (2) = Enable only Discover tab\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_1","displayName":"Enabled","description":null,"helpText":null}]},"7fb88ee8dec559f8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceotheradd_l_otheraddlabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"7f2fe1ec32a4175e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_afrikaans","displayName":"Afrikaans (User)","description":"Enables the editing language Afrikaans","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_afrikaans_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_afrikaans_1","displayName":"Enabled","description":null,"helpText":null}]},"7fe67c8e5835c30f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hawaiian","displayName":"Hawaiian (User)","description":"Enables the editing language Hawaiian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hawaiian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hawaiian_1","displayName":"Enabled","description":null,"helpText":null}]},"7f220d0a7cd592c6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kiche","displayName":"K'iche (User)","description":"Enables the editing language K'iche","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kiche_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kiche_1","displayName":"Enabled","description":null,"helpText":null}]},"7f4845924d306035":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"7f3a7d639b34804e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjschedproj_l_pjshowschedmessage","displayName":"Show scheduling messages (User)","description":"Displays messages about schedule inconsistencies, such as a successor task starting before the finish of the predecessor task.\r\n\r\nIf you enable this setting, users will be alerted about scheduling inconsistencies.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"304a579b-ff3b-4897-8bb8-5a1dda45356f","categoryName":"Schedule options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjschedproj_l_pjshowschedmessage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjschedproj_l_pjshowschedmessage_1","displayName":"Enabled","description":null,"helpText":null}]},"7f1b62bdeb38e195":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc06_l_descriptioncolon30","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"7fb870e8f960fb5d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosvisualbasiceditor","displayName":"Developer tab | Visual Basic (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosvisualbasiceditor_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosvisualbasiceditor_1","displayName":"True","description":null,"helpText":null}]},"7f59ecf74440b81e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_putallsettingsinwindowsregistry","displayName":"Put all settings in Windows registry (User)","description":"Adds all possible application settings into the Windows registry. By default, only certain settings are added (non-default settings and very few others, such as file paths, import and export filters, and last files) to keep the registry settings simple.","helpText":"","infoUrls":[],"categoryId":"4e62ada2-f091-49e1-99dd-ffdf5cf558cd","categoryName":"General Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_putallsettingsinwindowsregistry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_putallsettingsinwindowsregistry_1","displayName":"Enabled","description":null,"helpText":null}]},"7fa3e7bd40f6aa4a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc03_l_pathcolon16","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/80.json b/public/intune-definitions/80.json new file mode 100644 index 000000000000..18e08ecd3c9e --- /dev/null +++ b/public/intune-definitions/80.json @@ -0,0 +1 @@ +{"806001a91b5c3006":{"id":"app_allowed_allowedapps","displayName":"Allowed Apps","description":"If present, the device only shows or launches apps with bundle IDs in the array. Include the value `com.apple.webapp` to allow all webclips. This applies to App Store apps, marketplace apps, and locally installed apps (using Configurator, Xcode, and so forth).","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"802411ffc6a22c34":{"id":"audioaccessory_audioaccessory","displayName":"com.apple.configuration.audio-accessory.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"a42e2248-d2dc-4476-a92d-d152fd67e04b","categoryName":"Audio Accessory","options":null},"80b763d832548f32":{"id":"com.apple.airplay_allowlist_item_devicename","displayName":"Device Name","description":"The name of the AirPlay device.\n\nThe system limits the list of visible AirPlay destinations to devices that are present in the `AllowList` field of all installed AirPlay payloads.","helpText":null,"infoUrls":[],"categoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","categoryName":"AirPlay","options":null},"8070d3a3cb159203":{"id":"com.apple.applicationaccess_forceondeviceonlytranslation","displayName":"Force On Device Only Translation (Deprecated)","description":"If true, the device won’t connect to Siri servers for the purposes of translation. Available in iOS 15 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceondeviceonlytranslation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceondeviceonlytranslation_true","displayName":"True","description":null,"helpText":null}]},"8051546f59bc0cbe":{"id":"com.apple.directoryservice.managed_adpacketsign","displayName":"AD Packet Sign","description":"The packet signing policy.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"809e2e58c4052d75":{"id":"com.apple.dock_persistent-others_item_tile-data","displayName":"Tile Data","description":"The information about the Dock item.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"8070e74701dd8bf9":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_rangetype","displayName":"Range Type","description":"The type of day range.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":[{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_rangetype_0","displayName":"Weekday","description":null,"helpText":null},{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_rangetype_1","displayName":"Weekend","description":null,"helpText":null}]},"80a83d79bdf80f98":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"80106e5dd274b670":{"id":"com.apple.managedclient.preferences_basicauthoverhttpenabled","displayName":"Allow Basic authentication for HTTP","description":"If you enable this policy or leave it unset, Basic authentication challenges received over non-secure HTTP will be allowed.\n\nIf you disable this policy, non-secure HTTP requests from the Basic authentication scheme are blocked, and only secure HTTPS is allowed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#basicauthoverhttpenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_basicauthoverhttpenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_basicauthoverhttpenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8093c1a12f3de1d0":{"id":"com.apple.managedclient.preferences_extensioninstalltypeblocklist","displayName":"Blocklist for extension install types","description":"The blocklist controls which extension install types are disallowed.\n\nSetting the \"command_line\" will block an extension from being loaded from command line.\n\nPolicy options mapping:\n\n* command_line (command_line) = Blocks extensions from being loaded from command line\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensioninstalltypeblocklist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"80cede302414ca95":{"id":"com.apple.managedclient.preferences_videocaptureallowed","displayName":"Allow or block video capture","description":"Control whether sites can capture video.\n\nIf enabled or not configured (default), the user will be asked about video capture access for all sites except those with URLs configured in the \"VideoCaptureAllowedUrls\" policy list, which will be granted access without prompting.\n\nIf you disable this policy, the user isn't prompted, and video capture is only available to URLs configured in \"VideoCaptureAllowedUrls\" policy.\n\nThis policy affects all types of video inputs, not only the built-in camera.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#videocaptureallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_videocaptureallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_videocaptureallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"8010f5781f93e309":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\n\nThis policy is optional. If you don't configure it, image search isn't available.\n\nSpecify Bing's Image Search URL as:\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\n\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\n\nSee \"DefaultSearchProviderImageURLPostParams\" policy to finish configuring image search.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy can't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"80124a9777e1bd59":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationzoneidentifiermhtfileallowed","displayName":"Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode","description":"This policy controls whether MHT or MHTML files that are downloaded from the web are automatically opened in Internet Explorer mode.\n\nIf you enable this policy, the MHT or MHTML files that are downloaded from the web can be opened in both Microsoft Edge and Internet Explorer mode to provide the best user experience.\n\nIf you disable or don't configure this policy, MHT or MHTML files that are downloaded from the web won't automatically open in Internet Explorer mode.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationzoneidentifiermhtfileallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationzoneidentifiermhtfileallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"80ede74710e1a030":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobspermachine_bits_maxjobspermachinelist","displayName":"Maximum number of BITS jobs for this computer:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"8030fbb0398bc8a4":{"id":"device_vendor_msft_policy_config_admx_dfs_dfsdiscoverdc","displayName":"Configure how often a DFS client discovers domain controllers","description":"This policy setting allows you to configure how often a Distributed File System (DFS) client attempts to discover domain controllers on a network. By default, a DFS client attempts to discover domain controllers every 15 minutes.\r\n\r\nIf you enable this policy setting, you can configure how often a DFS client attempts to discover domain controllers. This value is specified in minutes.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 15 minutes applies.\r\n\r\nNote: The minimum value you can select is 15 minutes. If you try to set this setting to a value less than 15 minutes, the default value of 15 minutes is applied.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dfs#admx-dfs-dfsdiscoverdc"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_dfs_dfsdiscoverdc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dfs_dfsdiscoverdc_1","displayName":"Enabled","description":null,"helpText":null}]},"804050be3d78c1e4":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_nobackground2","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_nobackground2_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_nobackground2_1","displayName":"True","description":null,"helpText":null}]},"80b99511166e39fc":{"id":"device_vendor_msft_policy_config_admx_icm_hss_kbsearchpolicy","displayName":"Turn off Help and Support Center Microsoft Knowledge Base search","description":"This policy setting specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center.\r\n\r\nThe Knowledge Base is an online source of technical support information and self-help tools for Microsoft products, and is searched as part of all Help and Support Center searches with the default search options.\r\n\r\nIf you enable this policy setting, it removes the Knowledge Base section from the Help and Support Center \"Set search options\" page, and only Help content on the local computer is searched. \r\n\r\nIf you disable or do not configure this policy setting, the Knowledge Base is searched if the user has a connection to the Internet and has not disabled the Knowledge Base search from the Search Options page.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-hss-kbsearchpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_hss_kbsearchpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_hss_kbsearchpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"80b21585445d06b7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_processes_exclusions_processeslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"80560081e6b83214":{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate_iphttpsclienturlbox","displayName":"Enter the IPHTTPS Url:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":null},"80e4e1767a41400a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_finance","displayName":"Finance","description":"This policy setting configures the synchronization of user settings for the Finance app.\r\nBy default, the user settings of Finance sync between computers. Use the policy setting to prevent the user settings of Finance from synchronizing between computers.\r\nIf you enable this policy setting, Finance user settings continue to sync.\r\nIf you disable this policy setting, Finance user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-finance"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_finance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_finance_1","displayName":"Enabled","description":null,"helpText":null}]},"80b566b64461042a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013uploadcenter","displayName":"Microsoft Office 2013 Upload Center","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 2013 Upload Center.\r\nBy default, the user settings of Microsoft Office 2013 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2013 Upload Center from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Office 2013 Upload Center user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Office 2013 Upload Center user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013uploadcenter"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013uploadcenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013uploadcenter_1","displayName":"Enabled","description":null,"helpText":null}]},"80a9be15e106fab5":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_utilizessltimedata","displayName":"UtilizeSslTimeData","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"80427c51653d34cd":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_global_refresh_interval_prompt","displayName":"Global Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"803088adaace01e2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed","displayName":"Allow collection of WebRTC event logs from Google services","description":"Setting the policy to Enabled means Google Chrome can collect WebRTC event logs from Google services such as Hangouts Meet and upload them to Google. These logs have diagnostic information for debugging issues with audio or video meetings in Google Chrome, such as the time and size of RTP packets, feedback about congestion on the network, and metadata about time and quality of audio and video frames. These logs have no audio or video content from the meeting. To make debugging easier, Google might associate these logs, by means of a session ID, with other logs collected by the Google service itself.\r\n\r\nSetting the policy to Disabled results in no collection or uploading of such logs.\r\n\r\nLeaving the policy unset on versions up to and including M76 means Google Chrome defaults to not being able to collect and upload these logs. Starting at M77, Google Chrome defaults to being able to collect and upload these logs from most profiles affected by cloud-based, user-level enterprise policies. From M77 up to and including M80, Google Chrome can also collect and upload these logs by default from profiles affected by Google Chrome on-premise management.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"80db9bca797480d6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins","displayName":"Always runs plugins that require authorization (deprecated)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"80fdfd56bcd48677":{"id":"device_vendor_msft_policy_config_internetexplorer_disablegeolocation","displayName":"Turn off browser geolocation","description":"This policy setting allows you to disable browser geolocation support. This will prevent websites from requesting location data about the user.\n\nIf you enable this policy setting, browser geolocation support is turned off.\n\nIf you disable this policy setting, browser geolocation support is turned on.\n\nIf you do not configure this policy setting, browser geolocation support can be turned on or off in Internet Options on the Privacy tab.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablegeolocation"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablegeolocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablegeolocation_1","displayName":"Enabled","description":null,"helpText":null}]},"8071485cc2d7dd85":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b","displayName":"Only allow approved domains to use ActiveX controls without prompt","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0","displayName":"Disable","description":null,"helpText":null}]},"804d5b42f9058a48":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103","displayName":"Status bar updates via script","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_3","displayName":"Disable","description":null,"helpText":null}]},"80a2f507fb9680ec":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation","displayName":"User Account Control Detect Application Installations And Prompt For Elevation","description":"User Account Control: Detect application installations and prompt for elevation This policy setting controls the behavior of application installation detection for the computer. The options are: Enabled: (Default) When an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. Disabled: Application installation packages are not detected and prompted for elevation. Enterprises that are running standard user desktops and use delegated installation technologies such as Group Policy Software Installation or Systems Management Server (SMS) should disable this policy setting. In this case, installer detection is unnecessary.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_detectapplicationinstallationsandpromptforelevation"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation_0","displayName":"Disable","description":"Disable","helpText":null}]},"808257ac43c35e7c":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc","displayName":"Disable Certificate Transparency enforcement for specific URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"80eab5597d992728":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack","displayName":"Configure Do Not Track","description":"Specify whether to send Do Not Track requests to websites that ask for tracking info. Do Not Track requests let the websites you visit know that you don't want your browsing activity to be tracked. By default, Microsoft Edge doesn't send Do Not Track requests, but users can turn on this feature to send them.\r\n\r\nIf you enable this policy, Do Not Track requests are always sent to websites asking for tracking info.\r\n\r\nIf you disable this policy, requests are never sent.\r\n\r\nIf you don't configure this policy, users can choose whether to send these requests.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_1","displayName":"Enabled","description":null,"helpText":null}]},"80aa4687b868d490":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel","displayName":"Configure Internet Explorer integration","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\n* 0 = None\r\n\r\n* 1 = Internet Explorer mode\r\n\r\n* 2 = Internet Explorer 11","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"8096623e7cd6db53":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers","displayName":"Register protocol handlers (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0d4cf1d9-d8ad-4628-bd71-fa0de6598f28","categoryName":"Content settings","options":null},"8042659906135c4c":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc","displayName":"Allow listed sites to connect to any HID device (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"809c4bf5a92c4f32":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended","displayName":"Edge 3P SERP Telemetry Enabled","description":"Edge3P Telemetry in Microsoft Edge captures the searches user does on third party search providers without identifying the person or the device and captures only if the user has consented to this collection of data. User can turn off the collection at any time in the browser settings.\r\n\r\nIf you enable or don't configure this policy, Edge 3P SERP Telemetry feature will be enabled.\r\n\r\nIf you disable this policy, Edge 3P SERP Telemetry feature will be disabled.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"80b81b6e41d0c7da":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_sslerroroverrideallowedfororiginsdesc","displayName":"Allow users to proceed from the HTTPS warning page for specific origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"806b90b15986d3ea":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_0","displayName":"Automatically","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_1","displayName":"With device password","description":null,"helpText":null}]},"800bef921b291a88":{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_1","displayName":"Enabled","description":null,"helpText":null}]},"806b832fe45acc84":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_onenoteexe26","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_onenoteexe26_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_onenoteexe26_1","displayName":"True","description":null,"helpText":null}]},"80b6d238b1e3ea69":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winprojexe","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winprojexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winprojexe_1","displayName":"True","description":null,"helpText":null}]},"803e7d9eba8cc1ec":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_forcedenytheseapps","displayName":"Let Apps Access Motion Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"802a4f3a2050a3c5":{"id":"osrecoverysettings_acceptlicense","displayName":"Automatically accept license terms","description":"","helpText":"","infoUrls":[],"categoryId":"71f79fa3-14c0-4df8-bf9c-8476e36ea755","categoryName":"Operating system settings","options":[{"id":"osrecoverysettings_acceptlicense_0","displayName":"No","description":null,"helpText":null},{"id":"osrecoverysettings_acceptlicense_1","displayName":"Yes","description":null,"helpText":null}]},"808b428a97ae1e89":{"id":"user_vendor_msft_policy_config_admx_desktop_forceactivedesktopon","displayName":"Enable Active Desktop (User)","description":"Enables Active Desktop and prevents users from disabling it.\r\n\r\nThis setting prevents users from trying to enable or disable Active Desktop while a policy controls it.\r\n\r\nIf you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it.\r\n\r\nNote: If both the \"Enable Active Desktop\" setting and the \"Disable Active Desktop\" setting are enabled, the \"Disable Active Desktop\" setting is ignored. If the \"Turn on Classic Shell\" setting ( in User Configuration\\Administrative Templates\\Windows Components\\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-forceactivedesktopon"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_forceactivedesktopon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_forceactivedesktopon_1","displayName":"Enabled","description":null,"helpText":null}]},"80964349ac969d22":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_igmprouting","displayName":"IGMP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-igmprouting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_igmprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_igmprouting_1","displayName":"Enabled","description":null,"helpText":null}]},"805eefd2d536608a":{"id":"user_vendor_msft_policy_config_admx_startmenu_noballoontip","displayName":"Remove Balloon Tips on Start Menu items (User)","description":"Hides pop-up text on the Start menu and in the notification area.\r\n\r\nWhen you hold the cursor over an item on the Start menu or in the notification area, the system displays pop-up text providing additional information about the object.\r\n\r\nIf you enable this setting, some of this pop-up text is not displayed. The pop-up text affected by this setting includes \"Click here to begin\" on the Start button, \"Where have all my programs gone\" on the Start menu, and \"Where have my icons gone\" in the notification area.\r\n\r\nIf you disable this setting or do not configure it, all pop-up text is displayed on the Start menu and in the notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noballoontip"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noballoontip_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noballoontip_1","displayName":"Enabled","description":null,"helpText":null}]},"807c5dc8d301d861":{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_1","displayName":"Turn off hardware buttons (User)","description":"Turns off Tablet PC hardware buttons.\r\n\r\nIf you enable this policy, no actions will occur when the buttons are pressed, and the buttons tab in Tablet PC Control Panel will be removed.\r\n\r\nIf you disable this policy, user and OEM defined button actions will occur when the buttons are pressed.\r\n\r\nIf you do not configure this policy, user and OEM defined button actions will occur when the buttons are pressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-turnoffbuttons-1"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_1_1","displayName":"Enabled","description":null,"helpText":null}]},"807739e3e43bc105":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway","displayName":"Disable proceeding from the Safe Browsing warning page (User)","description":"Setting the policy to Enabled prevents users from proceeding past the warning page the Safe Browsing service shows to the malicious site. This policy only prevents users from proceeding on Safe Browsing warnings such as malware and phishing, not for SSL certificate-related issues such as invalid or expired certificates.\r\n\r\nSetting the policy to Disabled or leaving it unset means users can choose to proceed to the flagged site after the warning appears.\r\n\r\nSee more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway_1","displayName":"Enabled","description":null,"helpText":null}]},"802ee81755ad9a79":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_0","displayName":"Allow users to manage all certificates","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_1","displayName":"Allow users to manage user certificates","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_2","displayName":"Disallow users from managing certificates","description":null,"helpText":null}]},"804e17a059df00a4":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Google Chrome for server authentication (User)","description":"A list of certificate public keys that should be distrusted by Google Chrome for TLS server\r\nauthentication.\r\n\r\nThe policy value is a list of base64-encoded X.509 certificates. Any\r\ncertificate with a matching SPKI (SubjectPublicKeyInfo) will be distrusted.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"80b32539a484afcb":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_0","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_1","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_2","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_3","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},"809c3725687da893":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility","displayName":"Specify encryption compatibility (User)","description":"This policy setting allows you to specify the encrypted database compatibility.\r\n\r\nIf you enable this policy setting, the compatibility format specified will be applied during encryption for new files\r\n- Use legacy format\r\n- Use next generation format\r\n- All files save with next generation format\r\n\r\nIf you disable or do not configure this policy setting, the default setting, \"Use next generation format,\" will be applied.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_1","displayName":"Enabled","description":null,"helpText":null}]},"80a542ebf457b574":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders52","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders52_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders52_1","displayName":"True","description":null,"helpText":null}]},"80c042b39eefbb71":{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations","displayName":"Set Allowed Folder Locations (User)","description":"A value that can represent one or more folder locations in File Explorer. If not specified, the default is access to all folder locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#setallowedfolderlocations"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_0","displayName":"Access to all folder locations.","description":"Access to all folder locations.","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_13","displayName":"Documents, Pictures, Downloads","description":"Documents, Pictures, Downloads","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_15","displayName":"Desktop, Documents, Pictures, Downloads","description":"Desktop, Documents, Pictures, Downloads","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_31","displayName":"Desktop, Documents, Pictures, Downloads, Network","description":"Desktop, Documents, Pictures, Downloads, Network","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_47","displayName":"This PC, Desktop, Documents, Pictures, Downloads","description":"This PC, Desktop, Documents, Pictures, Downloads","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_63","displayName":"This PC, Desktop, Documents, Pictures, Downloads, Network","description":"This PC, Desktop, Documents, Pictures, Downloads, Network","helpText":null}]},"8005f2423685910b":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowsmartscreenie"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"80c03cabe8aa26fd":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"80e8f5ac680811c9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled","displayName":"Enable usage and crash-related data reporting (User)","description":"This policy enables reporting of usage and crash-related data about Microsoft Edge to Microsoft.\r\n\r\nEnable this policy to send reporting of usage and crash-related data to Microsoft. Disable this policy to not send the data to Microsoft. In both cases, users can't change or override the setting.\r\n\r\nOn Windows 10, Beta and Stable channels, if you don’t configure this policy, Microsoft Edge will default to the Windows diagnostic data setting. If you enable this policy, Microsoft Edge will only send usage data if the Windows Diagnostic data setting is set to Enhanced or Full. If you disable this policy, Microsoft Edge will not send usage data. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings at https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 10, Canary and Dev channels, this policy controls sending usage data. If this policy is not configured, Microsoft Edge will default to the user's preference. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 7, 8, and macOS, this policy controls sending usage and crash-related data. If you don’t configure this policy, Microsoft Edge will default to the user's preference.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"80556ec226f98278":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting","displayName":"Default pop-up window setting (User)","description":"Set whether websites can show pop-up windows. You can allow them on all websites (1) or block them on all sites (2).\r\n\r\nIf you don't configure this policy, pop-up windows are blocked by default, and users can change this setting.\r\n\r\n* 1 = Allow all sites to show pop-ups\r\n\r\n* 2 = Don't allow any site to show pop-up windows","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"80eb2940fc03de85":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup","displayName":"Disable CNAME lookup when negotiating Kerberos authentication (User)","description":"Determines whether the generated Kerberos SPN is based on the canonical DNS name (CNAME) or on the original name entered.\r\n\r\nIf you enable this policy, CNAME lookup is skipped and the server name (as entered) is used.\r\n\r\nIf you disable this policy or don't configure it, the canonical name of the server is used. This is determined through CNAME lookup.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_1","displayName":"Enabled","description":null,"helpText":null}]},"803cdab87a454b12":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"806a1a5a3d9906ee":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled","displayName":"Double Click feature in Microsoft Edge enabled (only available in China) (User)","description":"This policy lets you configure the double click feature in Microsoft Edge.\r\n\r\nDouble Click lets users close a tab by double clicking the left mouse button.\r\n\r\nIf you enable or don't configure this policy, you can use the double click feature to close a tab on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the double click feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"80685b0e8c04bf15":{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled","displayName":"Standalone Sidebar Enabled (User)","description":"Standalone Sidebar is an optional mode for the Sidebar in Microsoft Edge. When this mode is activated by a user, the Sidebar appears in a fixed position on the Microsoft Windows desktop, and is hidden from the browser application frame.\r\n\r\nIf you enable or don't configure this policy, users will have the ability to activate the Standalone Sidebar.\r\nIf you disable this policy, options to activate Standalone Sidebar will be hidden or made unavailable. Note that blocking 'HubsSidebarEnabled' (Show Hubs Sidebar) will also prevent users from accessing Standalone Sidebar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8091c14790c8b030":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls","displayName":"Allow automatic full screen on specified sites (User)","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or it will\r\nfail. Users' personal settings may allow certain origins to call this API\r\nwithout a prior user gesture.\r\n\r\nThis policy supersedes users' personal settings and allows matching origins to\r\ncall the API without a prior user gesture.\r\n\r\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\nWildcards (*) are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy or user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"80ab12085be0fadd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesehongkongsar","displayName":"Chinese (Hong Kong S.A.R.) (User)","description":"Enables the editing language Chinese (Hong Kong S.A.R.)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesehongkongsar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesehongkongsar_1","displayName":"Enabled","description":null,"helpText":null}]},"8042fa3ce9c3e20e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showskydrivesignin","displayName":"Show OneDrive Sign In (User)","description":"Prompt user to sign in to OneDrive while performing a file save operation.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showskydrivesignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showskydrivesignin_1","displayName":"Enabled","description":null,"helpText":null}]},"809f7e87c260d0b8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02_l_pathcolon242","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"80a2acedc1812501":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling~l_proofingdatacollection_l_improveproofingtools","displayName":"Improve Proofing Tools (User)","description":"This policy setting controls whether the Help Improve Proofing Tools feature sends usage data to Microsoft. The Help Improve Proofing Tools feature collects data about use of the Proofing Tools, such as additions to the custom dictionary, and sends it to Microsoft. After about six months, the feature stops sending data to Microsoft and deletes the data collection file from the user's computer. \r\n\r\nIf you enable this policy setting, this feature is enabled if users choose to participate in the Customer Experience Improvement Program (CEIP). If your organization has policies that govern the use of external resources such as the CEIP, allowing the use of the Help Improve Proofing Tools feature might cause them to violate these policies. \r\n\r\nIf you disable this policy setting, the Help Improve Proofing Tools feature does not collect proofing tool usage information and transmit it to Microsoft. \r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to \"Enabled\".","helpText":"","infoUrls":[],"categoryId":"df357f0c-78fe-4aee-a465-f3da7499077e","categoryName":"Proofing Data Collection","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling~l_proofingdatacollection_l_improveproofingtools_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling~l_proofingdatacollection_l_improveproofingtools_1","displayName":"Enabled","description":null,"helpText":null}]},"80cdb40938d4cc84":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointwebpageformatcompatibility","displayName":"PowerPoint: web page format compatibility (User)","description":"\"All browsers\": Save new PowerPoint web pages in a format that is compatible with all browsers. | \"Windows Internet Explorer 4.0 or later\": Save new PowerPoint web pages in a format that requires Windows Internet Explorer 4.0 or later. | \"Based on installed browsers\": Examine the browsers installed on the user's computer and save new PowerPoint web pages in the smallest possible format that is compatible with all of the installed browsers.","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointwebpageformatcompatibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_powerpointwebpageformatcompatibility_1","displayName":"Enabled","description":null,"helpText":null}]},"8082a1c4ccc64790":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_urlforsmimecertificates_l_enterurl","displayName":"Enter URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":null},"80423264df35bd1e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings~l_trustedaddins_l_settrustedaddins","displayName":"Configure trusted add-ins (User)","description":"This policy setting can be used to specify a list of trusted add-ins that can be run without being restricted by the security measures in Outlook.\r\n\r\nIf you enable this policy setting, a list of trusted add-ins and hashes is made available that you can modify by adding and removing entries. The list is empty by default. To create a new entry, enter a DLL file name in the ''Value Name'' column and the hash result in the ''Value'' column. \r\n\r\nIf you disable or do not configure this policy setting, the list of trusted add-ins is empty and unused, so the recommended EC and SSLF settings do not create any usability issues. However, users who rely on add-ins that access the Outlook object model might be repeatedly prompted unless administrators enable this setting and add the add-ins to the list.\r\n\r\nNote - You can also configure Exchange Security Form settings by enabling the ''Outlook Security Mode'' setting in User Configuration\\Administrative Templates\\Microsoft Outlook 2016\\Security\\Security Form Settings\\Microsoft Outlook 2016 Security and selecting ''Use Outlook Security Group Policy'' from the drop-down list.","helpText":"","infoUrls":[],"categoryId":"e94d8ce3-d08e-4ee6-83e9-5f89aa37a6bf","categoryName":"Trusted Add-ins","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings~l_trustedaddins_l_settrustedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings~l_trustedaddins_l_settrustedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"80a4f7935e89219d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventcopyingormovingitemsbetweenaccounts","displayName":"Prevent copying or moving items between accounts (User)","description":"This policy setting allows you to prevent items from being copied or moved to other accounts or PSTs.\r\n\r\nIf you enable this policy setting, items will be prevented from being moved or copied to other accounts or PSTs. Enter one of the following details:\r\n\r\n- \"Contoso.com\": prevents copying or moving from the account corresponding to the listed domain\r\n- \"*\": prevents copying from all accounts and PST's\r\n- \"SharePoint\": prevents copies or moves from the SharePoint PST\r\n\r\nIf you disable or do not configure this policy setting, copying or moving items between accounts or PSTs is allowed.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventcopyingormovingitemsbetweenaccounts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventcopyingormovingitemsbetweenaccounts_1","displayName":"Enabled","description":null,"helpText":null}]},"8075baeb2a417610":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbookexactaliasmatching","displayName":"Return e-mail alias if it exactly matches the provided e-mail address when searching OAB (User)","description":"By default, when searching the Offline Address Book, Outlook resolves e-mail addresses using Ambiguous Name Resolution. With Ambiguous Name Resolution, Outlook suggests additional possible matches (if they exist) even if there is a name that matches exactly the e-mail alias entered. By enabling this setting, you can change the behavior so that Outlook returns a single e-mail address if it exactly matches an e-mail alias.","helpText":"","infoUrls":[],"categoryId":"e35a83ff-7c5b-48d4-9ba3-a57849c6b5f5","categoryName":"Offline Address Book","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbookexactaliasmatching_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbookexactaliasmatching_1","displayName":"Enabled","description":null,"helpText":null}]},"80c8e51a0e350ed2":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave_l_pjfiletype","displayName":"Save Microsoft Project files as (User)","description":"Specifies the default file format that should be applied when any Project file is saved.\r\n\r\nIf you enable this setting, project files will be saved with the format you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"6ad0e199-ff50-4e86-b22f-b55ef4ff2329","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave_l_pjfiletype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave_l_pjfiletype_1","displayName":"Enabled","description":null,"helpText":null}]},"80664c80f6f5a31b":{"id":"user_vendor_msft_policy_config_teamsv3~policy~l_teams_string_teams_signinrestriction_policy_restrictteamssignintoaccountsfromtenantlist","displayName":"Tenant IDs: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"501b5a30-253c-48b7-ab40-de1d100e4358","categoryName":"Microsoft Teams","options":null},"803741cd042d5f35":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc16_l_descriptioncolon70","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"80c6ddd7e7e0cfbd":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2003files","displayName":"Visio 2003-2010 Binary Drawings, Templates and Stencils (User)","description":"This policy setting allows you to determine whether users can open or save Visio files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked: Both opening and saving of the file type will be blocked.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"75f9bfd8-8ee2-47b0-b080-a4d179724ca8","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2003files_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2003files_1","displayName":"Enabled","description":null,"helpText":null}]},"8015a021c113da7b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_confirmconversionatopen","displayName":"Confirm file format conversion on open (User)","description":"This policy setting allows you to set the \"Confirm file format conversion on open\" option in Word Options | Advanced | General.\r\n\r\nIf you enable this policy setting, \"Confirm file format conversion on open\" will be set.\r\n\r\nIf you disable or do not configure this policy setting, \"Confirm file format conversion on open\" will not be set.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_confirmconversionatopen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_confirmconversionatopen_1","displayName":"Enabled","description":null,"helpText":null}]},"80039365bc5daac4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_enablelivepreview","displayName":"Enable Live Preview (User)","description":"This policy setting configures the \"Enable Live Preview\" checkbox found under File tab | Options | General. Live Preview shows how a command would be applied without actually applying it to the document.\r\n\r\nIf you enable this policy setting, the option is checked, and Live Preview will be shown when using Galleries that support previews\r\n\r\nIf you disable or do not configure this policy setting, the option is unchecked, and Live Preview will be hidden when using Galleries that support previews.","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_enablelivepreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_enablelivepreview_1","displayName":"Enabled","description":null,"helpText":null}]},"80e13ba851f06348":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_l_word2000binarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_l_word2000binarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_l_word2000binarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_l_word2000binarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_l_word2000binarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_l_word2000binarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/81.json b/public/intune-definitions/81.json new file mode 100644 index 000000000000..d8e49084dade --- /dev/null +++ b/public/intune-definitions/81.json @@ -0,0 +1 @@ +{"8151177c1680275e":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordminimumlength","displayName":"Minimum password length","description":"Enter the minimum number of digits or characters the work profile password must have, between 4 and 16 characters. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (4-16)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"814293db63b48e70":{"id":"com.apple.managedclient.preferences_cookiesallowedforurls","displayName":"Allow cookies on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to set cookies.\n\nIf you don't configure this policy, the global default value from the \"DefaultCookiesSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nSee the \"CookiesBlockedForUrls\" and \"CookiesSessionOnlyForUrls\" policies for more information.\n\nNote there cannot be conflicting URL patterns set between these three policies:\n\n- \"CookiesBlockedForUrls\"\n\n- CookiesAllowedForUrls\n\n- \"CookiesSessionOnlyForUrls\"","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#cookiesallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"81ae39b354be7c08":{"id":"com.apple.managedclient.preferences_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model","description":"This policy controls whether Microsoft Edge downloads the foundational GenAI model and uses it for local inference.\n\nIf you enable this policy and set the value to Allowed (0), the model is downloaded automatically and used for inference.\n\nIf you enable this policy and set the value to Disallowed (1), the model is not downloaded.\n\nIf you disable or don't configure this policy, the default applies, and the model is downloaded automatically and used for inference.\n\nNote: This policy supports dynamic refresh, so changes take effect without requiring a browser restart.\n\nModel downloading can also be disabled by ComponentUpdatesEnabled.\n\nPolicy options mapping:\n\n* Allowed (0) = Downloads model automatically\n\n* Disallowed (1) = Do not download model\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#genailocalfoundationalmodelsettings"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_genailocalfoundationalmodelsettings_0","displayName":"Downloads model automatically","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_genailocalfoundationalmodelsettings_1","displayName":"Do not download model","description":null,"helpText":null}]},"81670b6c5f530972":{"id":"com.apple.managedclient.preferences_javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\n\nFor detailed information on valid site url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\n\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\n\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitAllowedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT enabled, but fabrikam.com will use the policy from \"DefaultJavaScriptJitSetting\", if set, or default to JavaScript JIT enabled.\n\nIf you don't configure this policy for a site then the policy from \"DefaultJavaScriptJitSetting\" applies to the site, if set, otherwise Javascript JIT is enabled for the site.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#javascriptjitallowedforsites"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"816d1b7b2be451a5":{"id":"com.apple.managedclient.preferences_microsofteditorsynonymsenabled","displayName":"Synonyms are provided when using Microsoft Editor spell checker","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages, and synonyms can be suggested as an integrated feature.\n\nIf you enable this policy, Microsoft Editor spell checker will provide synonyms for suggestions for misspelled words.\n\nIf you disable or don't configure this policy, Microsoft Editor spell checker will not provide synonyms for suggestions for misspelled words.\n\nIf the \"SpellcheckEnabled\" policy or the \"MicrosoftEditorProofingEnabled\" policy are set to disabled, or the user disables spell checking or chooses not to use Microsoft Editor spell checker in the settings page, this policy will have no effect.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#microsofteditorsynonymsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_microsofteditorsynonymsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_microsofteditorsynonymsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8128c5d7108fd9ef":{"id":"com.apple.managedclient.preferences_showmicrosoftrewards","displayName":"Show Microsoft Rewards experiences","description":"Show Microsoft Rewards experience and notifications.\nIf you enable this policy:\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\n - The setting to enable Give mode will be enabled and respect the user's setting.\n\nIf you disable this policy:\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will not see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be disabled and toggled off.\n\nIf you don't configure this policy:\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\n - The setting to enable Give mode will be enabled and respect the user's setting.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showmicrosoftrewards"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showmicrosoftrewards_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showmicrosoftrewards_true","displayName":"Enabled","description":null,"helpText":null}]},"81965c629906c941":{"id":"com.apple.systemconfiguration_proxies_httpport","displayName":"HTTP Port","description":"The web proxy port.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"81c052e99696c1cd":{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"810a1818206a1f9f":{"id":"com.apple.tcc.configuration-profile-policy_services_calendar","displayName":"Calendar","description":"Specifies the policies for calendar information managed by the Calendar.app.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"812218809dd00d39":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_recommended","displayName":"Save and fill memberships (users can override)","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\n\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\n\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\n\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"81e9b2cf846b7f9e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwayswaitforunload","displayName":"Wait for Internet Explorer mode tabs to completely unload before ending the browser session","description":"This policy causes Microsoft Edge to continue running until all Internet Explorer tabs have completely finished unloading. This allows Internet Explorer plugins like ActiveX controls to perform other critical work even after the browser has been closed. However, this can cause stability and performance issues, and Microsoft Edge processes may remain active in the background with no visible windows if the webpage or plugin prevents Internet Explorer from unloading. This policy should only be used if your organization depends on a plugin that requires this behavior.\n\nIf you enable this policy, Microsoft Edge always waits for Internet Explorer mode tabs to fully unload before ending the browser session.\n\nIf you disable or don't configure this policy, Microsoft Edge won't always wait for Internet Explorer mode tabs to fully unload before ending the browser session.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2174004","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwayswaitforunload_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwayswaitforunload_true","displayName":"Enabled","description":null,"helpText":null}]},"816acb159c47488f":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies","displayName":"Establish ActiveX installation policy for sites in Trusted zones","description":"This policy setting controls the installation of ActiveX controls for sites in Trusted zone. \r\n\r\nIf you enable this policy setting, ActiveX controls are installed according to the settings defined by this policy setting. \r\n \r\nIf you disable or do not configure this policy setting, ActiveX controls prompt the user before installation. \r\n\r\nIf the trusted site uses the HTTPS protocol, this policy setting can also control how ActiveX Installer Service responds to certificate errors. By default all HTTPS connections must supply a server certificate that passes all validation criteria. If you are aware that a trusted site has a certificate error but you want to trust it anyway you can select the certificate errors that you want to ignore. \r\n \r\nNote: This policy setting applies to all sites in Trusted zones.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-activexinstallservice#admx-activexinstallservice-axisurlzonepolicies"],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"81673b021d6175f7":{"id":"device_vendor_msft_policy_config_admx_appxpackagemanager_allowdeploymentinspecialprofiles","displayName":"Allow deployment operations in special profiles","description":"This policy setting allows you to manage the deployment of Windows Store apps when the user is signed in using a special profile. Special profiles are the following user profiles, where changes are discarded after the user signs off:\r\n\r\nRoaming user profiles to which the \"Delete cached copies of roaming profiles\" Group Policy setting applies\r\n\r\nMandatory user profiles and super-mandatory profiles, which are created by an administrator\r\n\r\nTemporary user profiles, which are created when an error prevents the correct profile from loading\r\n\r\nUser profiles for the Guest account and members of the Guests group\r\n\r\n\r\nIf you enable this policy setting, Group Policy allows deployment operations (adding, registering, staging, updating, or removing an app package) of Windows Store apps when using a special profile.\r\n\r\nIf you disable or do not configure this policy setting, Group Policy blocks deployment operations of Windows Store apps when using a special profile.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxpackagemanager#admx-appxpackagemanager-allowdeploymentinspecialprofiles"],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_admx_appxpackagemanager_allowdeploymentinspecialprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appxpackagemanager_allowdeploymentinspecialprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},"817a55e6ac13f740":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobspermachine","displayName":"Limit the maximum number of BITS jobs for this computer","description":"This policy setting limits the number of BITS jobs that can be created for all users of the computer. By default, BITS limits the total number of jobs that can be created on the computer to 300 jobs. You can use this policy setting to raise or lower the maximum number of user BITS jobs.\r\n\r\n If you enable this policy setting, BITS will limit the maximum number of BITS jobs to the specified number.\r\n\r\n If you disable or do not configure this policy setting, BITS will use the default BITS job limit of 300 jobs.\r\n\r\n Note: BITS jobs created by services and the local administrator account do not count toward this limit.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxjobspermachine"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobspermachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxjobspermachine_1","displayName":"Enabled","description":null,"helpText":null}]},"8162744165265323":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache","displayName":"Turn on BranchCache","description":"This policy setting specifies whether BranchCache is enabled on client computers to which this policy is applied. In addition to this policy setting, you must specify whether the client computers are hosted cache mode or distributed cache mode clients. To do so, configure one of the following the policy settings: \r\n\r\n- Set BranchCache Distributed Cache mode\r\n\r\n- Set BranchCache Hosted Cache mode\r\n\r\n- Configure Hosted Cache Servers\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache settings are not applied to client computers by this policy. In the circumstance where client computers are domain members but you do not want to enable BranchCache on all client computers, you can specify Not Configured for this domain Group Policy setting, and then configure local computer policy to enable BranchCache on individual client computers. Because the domain Group Policy setting is not configured, it will not over-write the enabled setting that you use on individual client computers where you want to enable BranchCache.\r\n\r\n- Enabled. With this selection, BranchCache is turned on for all client computers where the policy is applied. For example, if this policy is enabled in domain Group Policy, BranchCache is turned on for all domain member client computers to which the policy is applied.\r\n\r\n- Disabled. With this selection, BranchCache is turned off for all client computers where the policy is applied.\r\n\r\n* This policy setting is supported on computers that are running Windows Vista Business, Enterprise, and Ultimate editions with Background Intelligent Transfer Service (BITS) 4.0 installed.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-enablewindowsbranchcache"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_1","displayName":"Enabled","description":null,"helpText":null}]},"81530a99a29a44b6":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_time_zone","displayName":"Allow time zone redirection","description":"This policy setting determines whether the client computer redirects its time zone settings to the Remote Desktop Services session.\r\n\r\nIf you enable this policy setting, clients that are capable of time zone redirection send their time zone information to the server. The server base time is then used to calculate the current session time (current session time = server base time + client time zone).\r\n\r\nIf you disable or do not configure this policy setting, the client computer does not redirect its time zone information and the session time zone is the same as the server time zone.\r\n\r\nNote: Time zone redirection is possible only when connecting to at least a Microsoft Windows Server 2003 terminal server with a client using RDP 5.1 and later.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-time-zone"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_time_zone_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_time_zone_1","displayName":"Enabled","description":null,"helpText":null}]},"8199c2fb15016d82":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_holdperiod","displayName":"HoldPeriod","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"81ba6ad42ca20b7d":{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpscan_wfpscanlist","displayName":"Scanning frequency: (Device)","description":"\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":[],"categoryId":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","categoryName":"Windows File Protection","options":[{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpscan_wfpscanlist_0","displayName":"Do not scan during startup","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpscan_wfpscanlist_1","displayName":"Scan during startup","description":null,"helpText":null}]},"81d4556612b77be8":{"id":"device_vendor_msft_policy_config_authentication_allowaadpasswordreset","displayName":"Allow Aad Password Reset","description":"Specifies whether password reset is enabled for AAD accounts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#allowaadpasswordreset"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":[{"id":"device_vendor_msft_policy_config_authentication_allowaadpasswordreset_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_allowaadpasswordreset_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"818331204da12a93":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow insecure websites to make requests to more-private network endpoints","description":"Controls whether insecure websites are allowed to make requests to more-private network endpoints.\r\n\r\nThis policy relates to the Private Network Access specification. See https://wicg.github.io/private-network-access/ for more details.\r\n\r\nA network endpoint is more private than another if:\r\n1) Its IP address is localhost and the other is not.\r\n2) Its IP address is private and the other is public.\r\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\r\n\r\nA website is deemed secure if it meets the definition of a secure context in https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts. Otherwise, it will be treated as an insecure context.\r\n\r\nWhen this policy is either not set or set to false, the default behavior for requests from insecure contexts to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests feature, which may be set by a field trial or on the command line.\r\n\r\nWhen this policy is set to true, insecure websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8106cfb1e6acfe77":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls","displayName":"URLs for which local IPs are exposed in WebRTC ICE candidates","description":"Patterns in this list will be matched against the security origin of the requesting URL.\r\nIf a match is found or chrome://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, the local IP addresses are shown in WebRTC ICE candidates.\r\nOtherwise, local IP addresses are concealed with mDNS hostnames.\r\nPlease note that this policy weakens the protection of local IPs if needed by administrators.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n*example.com*","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"81c5b7dfbaa2a6af":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes","displayName":"Allow Google Chrome Frame to handle the listed content types","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_1","displayName":"Enabled","description":null,"helpText":null}]},"8125c7dbccb81f6a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability","displayName":"Control availability of extensions unpublished on the Chrome Web Store.","description":"If this policy is enabled, extensions that are unpublished on the Chrome Web\r\nStore will be disabled in Google Chrome.\r\nThis policy only applies to extensions that are installed and updated from the\r\nChrome Web Store.\r\n\r\nOff-store extensions such as unpacked extensions installed using developer\r\nmode and extensions installed using the command-line switch are ignored.\r\nForce-installed extensions that are self-hosted are ignored. All\r\nversion-pinned extensions are also ignored.\r\n\r\nIf the policy is set to AllowUnpublished (0) or not set, extensions that are unpublished on the Chrome Web Store are allowed.\r\nIf the policy is set to DisableUnpublished (1), extensions that are unpublished on the Chrome Web Store are disabled.","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"815433f05938cf6f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets.","description":"This policy provides a way to override the list of sets the browser uses for Related Website Sets features.\r\n\r\nThis policy overrides the FirstPartySetsOverrides policy.\r\n\r\nEach set in the browser's list of Related Website Sets must meet the requirements of a Related Website Set.\r\nA Related Website Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all of its ccTLD variants.\r\nSee https://github.com/WICG/first-party-sets for more information on how Google Chrome uses Related Website Sets.\r\n\r\n\r\nAll sites in a Related Website Set must be a registrable domain served over HTTPS. Each site in a Related Website Set must also be unique,\r\nmeaning a site cannot be listed more than once in a Related Website Set.\r\n\r\nWhen this policy is given an empty dictionary, the browser uses the public list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the replacements list, if a site is also present\r\non a Related Website Set in the browser's list, then that site will be removed from the browser's Related Website Set.\r\nAfter this, the policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the additions list, if a site is also present\r\non a Related Website Set in the browser's list, then the browser's Related Website Set will be updated so that the\r\nnew Related Website Set can be added to the browser's list. After the browser's list has been updated,\r\nthe policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nThe browser's list of Related Website Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site cannot be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) are not supported as a policy value, nor within any Related Website Set in these lists.\r\n\r\nAll sets provided by the policy must be valid Related Website Sets, if they aren't then an\r\nappropriate error will be outputted.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RelatedWebsiteSetsOverrides for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"categoryId":"ac821e49-1996-4d6c-99d4-9c3c3e4737b6","categoryName":"Related Website Sets Settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},"81f9848a6c22a911":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool","displayName":"Profile Configuration Tool","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Profile Configuration Tool.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\ConfigTool\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool_1","displayName":"Enabled","description":null,"helpText":null}]},"81819e5e51ab585c":{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter","displayName":"Prevent managing SmartScreen Filter","description":"This policy setting prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through \"phishing,\" or is known to host malware.\n\nIf you enable this policy setting, the user is not prompted to turn on SmartScreen Filter. All website addresses that are not on the filter's allow list are sent automatically to Microsoft without prompting the user.\n\nIf you disable or do not configure this policy setting, the user is prompted to decide whether to turn on SmartScreen Filter during the first-run experience.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-preventmanagingsmartscreenfilter"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_1","displayName":"Enabled","description":null,"helpText":null}]},"812a233f50c2067c":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash_viewxfapdfiniemodeallowedfilehashdesc","displayName":"View XFA-based PDF files using IE Mode for allowed file hash. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":null},"81262fdaf03ef459":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector","displayName":"Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when data is entered in Microsoft Edge from the clipboard or by drag and dropping web content.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\n5. minimum_data_size\r\nSpecifies the minimum size (in bytes) that the entered data must meet or exceed to be scanned.\r\nDefault: 100 bytes if the field is not set.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"minimum_data_size\": 100,\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"81246bc705616cdd":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages","displayName":"Define an ordered list of preferred languages that websites should display in if the site supports the language","description":"Configures the language variants that Microsoft Edge sends to websites as part of the Accept-Language request HTTP header and prevents users from adding, removing, or changing the order of preferred languages in Microsoft Edge settings. Users who want to change the languages Microsoft Edge displays in or offers to translate pages to will be limited to the languages configured in this policy.\r\n\r\nIf you enable this policy, websites will appear in the first language in the list that they support unless other site-specific logic is used to determine the display language. The language variants defined in this policy override the languages configured as part of the 'SpellcheckLanguage' (Enable specific spellcheck languages) policy.\r\n\r\nIf you don't configure or disable this policy, Microsoft Edge sends websites the user-specified preferred languages as part of the Accept-Language request HTTP header.\r\n\r\nFor detailed information on valid language variants, see https://go.microsoft.com/fwlink/?linkid=2148854.\r\n\r\nExample value: en-US,fr,es","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_1","displayName":"Enabled","description":null,"helpText":null}]},"810f7ae2d84d4dba":{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin","displayName":"Select Sleep Button Action Plugged In","description":"This policy setting specifies the action that Windows takes when a user presses the sleep button. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectsleepbuttonactionpluggedin"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},"81a920f8becd05ac":{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_previewpane_dropdownlist_box","displayName":"Configure details pane (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"4124fc05-5c98-4790-a2a9-4ba2dee3d9b3","categoryName":"Explorer Frame Pane","options":[{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_previewpane_dropdownlist_box_1","displayName":"Always hide","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_previewpane_dropdownlist_box_2","displayName":"Always show","description":null,"helpText":null}]},"816332566b5d1bb7":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_1","displayName":"Scripts (Startup/Shutdown) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-scriptsmachine-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_1_1","displayName":"Enabled","description":null,"helpText":null}]},"81d449bb0b66f745":{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsfeatures","displayName":"Hide \"Windows Features\" (User)","description":"This setting prevents users from accessing the \"Turn Windows features on or off\" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs. As a result, users cannot view, enable, or disable various Windows features and services.\r\n\r\nIf this setting is disabled or is not configured, the \"Turn Windows features on or off\" task will be available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to configure services or enable or disable program components.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-nowindowsfeatures"],"categoryId":"dc16dbf0-aac8-4ff3-a546-1ddb55650f47","categoryName":"Programs","options":[{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"810c4cbf16601988":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup","displayName":"Common 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2016 applications.\r\nMicrosoft Office Suite 2016 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2016 applications.\r\nIf you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2016 applications will continue to be backed up.\r\nIf you disable this policy setting, certain user settings which are common between the Microsoft Office Suite 2016 applications will not be backed up. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016commonbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"812f983ca062c445":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norecyclefiles","displayName":"Do not move deleted files to the Recycle Bin (User)","description":"When a file or folder is deleted in File Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.\r\n\r\nIf you enable this setting, files and folders that are deleted using File Explorer will not be placed in the Recycle Bin and will therefore be permanently deleted.\r\n\r\nIf you disable or do not configure this setting, files and folders deleted using File Explorer will be placed in the Recyele Bin.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-norecyclefiles"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norecyclefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norecyclefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"8175bbc7c1d65ddb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy","displayName":"Allow user cloud policies to override Chrome Browser Cloud Management policies. (User)","description":"Setting the policy to Enabled allows policies associated with a Google Workspace account to take precedence if they conflict with Chrome Browser Cloud Management policies.\r\n\r\nOnly policies originating from secure users can be merged. A secure user is affiliated with the organization that manages their browser using Chrome Browser Cloud Management. All other user-level policies will have default precedence.\r\n\r\nThe policy can be combined with CloudPolicyOverridesPlatformPolicy. If both policies are enabled, user cloud policies will also take precedence over conflicting platform policies.\r\n\r\nLeaving the policy unset or setting it to disabled causes user-level cloud policies to have default priority.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"812d6b4d7d7e43b8":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended","displayName":"Enable origin-keyed process isolation by default. (User)","description":"Enables origin-keyed process isolation for most pages (i.e., those assigned to an origin-keyed agent cluster by default). This improves security but also increases the number of processes created. Users are allowed to override the set policy value via the command-line flags or chrome://flags (both to turn this feature on or off).\r\n\r\nSetting the policy to Enabled results in most origins being isolated, even from other origins in the same site. See also the IsolateOrigins and SitePerProcess policies.\r\n\r\nSetting the policy to Disabled results in no origins being isolated from the rest of their site unless an origin explicitly asks to.\r\n\r\nNot setting the policy results in the browser determining which origins to isolate and when to isolate them.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"812ccece0202cc14":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_2","displayName":"Denies the Window Management permission on all sites by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_3","displayName":"Ask every time a site wants obtain the Window Management permission","description":null,"helpText":null}]},"8152845d7e859c34":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_webhidaskforurlsdesc","displayName":"Allow the WebHID API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"81ad67f5b7263b3f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"81ae1b6a179d9ed0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting","displayName":"OLAP PivotTable User Defined Function (UDF) security setting (User)","description":"PivotTable reports can contain OLAP queries with references to User Defined Functions (UDFs). UDFs can be compiled executables, therefore posing a potential security threat. With this setting you can either (1) allow all UDFs in OLAP queries to execute with no IObjectSafety check, (2) allow only UDFs where the developer has used IObjectSafety to mark the UDF as a safe executable, or (3) disable all UDFs from executing in OLAP queries. The effect of setting this key is for Excel to pass the selected value to the OLAP provider.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_1","displayName":"Enabled","description":null,"helpText":null}]},"81e3e7ae484b4e72":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"81b7040da8ac9a30":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowlessprivilegedsites"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"81f1bbc4d776b606":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100","displayName":"Enable MIME Sniffing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_3","displayName":"Disable","description":null,"helpText":null}]},"81f31b3b9f4e8df2":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled","displayName":"Text prediction enabled by default (User)","description":"The Microsoft Turing service uses natural language processing to generate predictions for long-form editable text fields on web pages.\r\n\r\nIf you enable or don't configure this policy, text predictions will be provided for eligible text fields.\r\n\r\nIf you disable this policy, text predictions will not be provided in eligible text fields. Sites may still provide their own text predictions.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8158bec6a7bad7bb":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions","displayName":"Allow importing of extensions (User)","description":"Allows users to import extensions from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"814e4b8d46a80563":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended","displayName":"Default search provider keyword (User)","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\r\n\r\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"8121431ebdf5e91b":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_0","displayName":"Use default browser behavior.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_1","displayName":"Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_2","displayName":"Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_3","displayName":"Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null}]},"81bc21662e20bc7c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastserviceserverterms5","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"81811e7f8b19a33c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaultsizelimit","displayName":"Set web service default return size limit (User)","description":"This policy setting allows you to specify the default limit of how much data in kilobytes (KB) the web service shim can return per call. The application is allowed to specify a larger limit programmatically.\r\n\r\nIf you enable this policy setting, you may specify the default limit of data in kilobytes the web service shim can return per call.\r\n\r\nIf you disable or do not configure this policy setting, a default limit of 3000 KB will be used.","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaultsizelimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaultsizelimit_1","displayName":"Enabled","description":null,"helpText":null}]},"81b662442b9aca73":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabictunisia","displayName":"Arabic (Tunisia) (User)","description":"Enables the editing language Arabic (Tunisia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabictunisia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabictunisia_1","displayName":"Enabled","description":null,"helpText":null}]},"81540e803bdda584":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mapudungun","displayName":"Mapudungun (User)","description":"Enables the editing language Mapudungun","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mapudungun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mapudungun_1","displayName":"Enabled","description":null,"helpText":null}]},"8148baf2bef39211":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changelabelofsavetosharepoint","displayName":"SharePoint Product Name (User)","description":"This policy setting allows you to customize the label that is used for your company's SharePoint deployment. This will update the label that is used in the Open and Save As places in all Office applications.\r\n\r\nYou can use this option to make it more clear to users where they should be saving company documents.\r\n\r\nIf you enable this policy setting, the new string you provide will be used to refer to your company's SharePoint deployment. We recommend setting this to the name of your company.\r\n\r\nIf you disable or do not configure this policy setting then the default string, \"SharePoint,\" will be displayed in the Open and Save As UI in all Office applications.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changelabelofsavetosharepoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changelabelofsavetosharepoint_1","displayName":"Enabled","description":null,"helpText":null}]},"81136e79f4ad4d44":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_l_workflowfriendly451","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"81df792598f2d871":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey05","displayName":"Escrow Key #5 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey05_1","displayName":"Enabled","description":null,"helpText":null}]},"81d44d22a2110cd5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13","displayName":"Trusted Location #13 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_1","displayName":"Enabled","description":null,"helpText":null}]},"8140dfe88db02df4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsvisio","displayName":"Visio-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsvisio_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsvisio_1","displayName":"True","description":null,"helpText":null}]},"815eacdac63a7310":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffhardwareaccelerationinapplicationguard","displayName":"Disable hardware acceleration for Office in Application Guard. (User)","description":"This policy setting controls whether Office in Application Guard uses hardware or software acceleration to render graphics.\r\n\r\nIf you enable this setting, Application Guard uses software-based (CPU) rendering and won’t load any third-party graphics drivers or interact with any connected graphics hardware.\r\n\r\nImportant: Be aware that disabling or not configuring this policy setting with potentially compromised graphics devices or drivers might pose a risk to the user's device.\r\n\r\nIf you disable or don't configure this setting, Application Guard uses Hyper-V to access supported, high-security rendering graphics hardware (GPUs). These GPUs improve rendering performance and battery life while using Application Guard, particularly for video playback and other graphics-intensive operations. If you disable or don't configure this setting without connecting any high-security rendering graphics hardware, Application Guard will automatically revert to software-based (CPU) rendering.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise. ","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffhardwareaccelerationinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffhardwareaccelerationinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"81acfbb6e5d96c33":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablecustomroot_disablecustomrootlist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"81f6c52aaa93a0fc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_empty19","displayName":"\r\nDuring AutoArchive:\r\n","description":"","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_empty19_0","displayName":"Months","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_empty19_1","displayName":"Weeks","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_empty19_2","displayName":"Days","description":null,"helpText":null}]},"811dc52564ae9950":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_l_alwayscheckspellingbeforesending","displayName":"Always check spelling before sending (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d6bd7b5c-b0ba-4cc1-bcaa-48b0f48e416b","categoryName":"Spelling","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_l_alwayscheckspellingbeforesending_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_l_alwayscheckspellingbeforesending_1","displayName":"True","description":null,"helpText":null}]},"8167556905e97fc8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook","displayName":"Turn off Protected View for attachments opened from Outlook (User)","description":"This policy setting allows you to determine if PowerPoint files in Outlook attachments open in Protected View.\r\n\r\nIf you enable this policy setting, Outlook attachments do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, Outlook attachments open in Protected View.","helpText":"","infoUrls":[],"categoryId":"42ce9a9b-0574-4b5c-993b-7679de80be47","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"81ca0772d155fc14":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjcalcmultiplecriticalpaths","displayName":"Calculate multiple critical paths (User)","description":"Specifies that Project should calculate and display a critical path for each independent network of tasks within the project.\r\n\r\nIf you enable this setting, Project will calculate multiple critical paths.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjcalcmultiplecriticalpaths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjcalcmultiplecriticalpaths_1","displayName":"Enabled","description":null,"helpText":null}]},"81783d7eb5dad872":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_l_pjyears13","displayName":"Years (User)","description":"","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_l_pjyears13_0","displayName":"y","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_l_pjyears13_1","displayName":"yr","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_l_pjyears13_2","displayName":"year","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_l_pjyears13_3","displayName":"\r\n ","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_l_pjyears13_4","displayName":"\r\n ","description":null,"helpText":null}]},"815327a1e338ffa0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid","displayName":"Cipher key length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":null},"818e3fda727f9853":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_enableincrementalpublishtoweb","displayName":"Enable incremental publish to Web (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_enableincrementalpublishtoweb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_enableincrementalpublishtoweb_1","displayName":"Enabled","description":null,"helpText":null}]},"8104c276b0e76a31":{"id":"user_vendor_msft_policy_config_word16v12~policy~l_microsoftofficeword_l_stopreadaloudeyesoffexperience","displayName":"Stop Read Aloud when app goes in background (User)","description":"This policy prevents Read Aloud from reading text when app goes in background.\r\n\r\nIf you enable this policy setting, Read Aloud will be disabled and will stop reading the text when app is sent to background.\r\n\r\nIf you disable or do not configure this policy setting, Read Aloud will continue reading the text when app moves to background and user will be able to control Read Aloud via notification.","helpText":"","infoUrls":[],"categoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","categoryName":"Microsoft Word 2016","options":[{"id":"user_vendor_msft_policy_config_word16v12~policy~l_microsoftofficeword_l_stopreadaloudeyesoffexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v12~policy~l_microsoftofficeword_l_stopreadaloudeyesoffexperience_1","displayName":"Enabled","description":null,"helpText":null}]},"81f74320b948e19f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_showpeople","displayName":"Show pictures in comments (User)","description":"This policy setting determines whether or not comments show pictures.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_showpeople_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_showpeople_1","displayName":"Enabled","description":null,"helpText":null}]},"815f981049d02960":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correctaccidentalusageofcapslockkey","displayName":"Correct accidental usage of cAPS LOCK key (User)","description":"This policy setting allows you to set the \"Correct accidental usage of cAPS LOCK key\" option in Word Options | Proofing | \"AutoCorrect Options...\" | AutoCorrect.\r\n\r\nIf you enable this policy setting, \"Correct accidental usage of cAPS LOCK key\" will be set.\r\n\r\nIf you disable or do not configure this policy setting, \"Correct accidental usage of cAPS LOCK key\" will not be set.y","helpText":"","infoUrls":[],"categoryId":"e95db55a-8337-416d-a61f-e60f55cc0d13","categoryName":"AutoCorrect","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correctaccidentalusageofcapslockkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correctaccidentalusageofcapslockkey_1","displayName":"Enabled","description":null,"helpText":null}]},"8194abf76766b1da":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_determinewhethertoforceencryptedword","displayName":"Scan encrypted macros in Word Open XML documents (User)","description":"This policy setting controls whether encrypted macros in Open XML documents be are required to be scanned with anti-virus software before being opened.\r\n\r\nIf you enable this policy setting, you may choose one of these options:\r\n\r\n- Scan encrypted macros: encrypted macros are disabled unless anti-virus software is installed. Encrypted macros are scanned by your anti-virus software when you attempt to open an encrypted workbook that contains macros.\r\n- Scan if anti-virus software available: if anti-virus software is installed, scan the encrypted macros first before allowing them to load. If anti-virus software is not available, allow encrypted macros to load.\r\n- Load macros without scanning: do not check for anti-virus software and allow macros to be loaded in an encrypted file.\r\n\r\nIf you disable or do not configure this policy setting, the behavior will be similar to the \"Scan encrypted macros\" option.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_determinewhethertoforceencryptedword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_determinewhethertoforceencryptedword_1","displayName":"Enabled","description":null,"helpText":null}]},"818df5ad85454efa":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject","displayName":"Trust access to Visual Basic Project (User)","description":"This policy setting controls whether automation clients such as Microsoft Visual Studio 2005 Tools for Microsoft Office (VSTO) can access the Visual Basic for Applications project system in the specified applications. VSTO projects require access to the Visual Basic for Applications project system in Excel, PowerPoint, and Word, even though the projects do not use Visual Basic for Applications. Design-time support of controls in both Visual Basic and C# projects depends on the Visual Basic for Applications project system in Word and Excel.\r\n\r\nIf you enable this policy setting, VSTO and other automation clients can access the Visual Basic for Applications project system in the specified applications. Users will not be able to change this behavior through the \"Trust access to the VBA project object model\" user interface option under the Macro Settings section of the Trust Center.\r\n\r\nIf you disable this policy setting, VSTO does not have programmatic access to VBA projects. In addition, the \"Trust access to the VBA project object model\" check box is cleared and users cannot change it. Note: Disabling this policy setting prevents VSTO projects from interacting properly with the VBA project system in the selected application.\r\n\r\nIf you do not configure this policy setting, automation clients do not have programmatic access to VBA projects. Users can enable this by selecting the \"Trust access to the VBA project object model\" in the \"Macro Settings\" section of the Trust Center. However, doing so allows macros in any documents the user opens to access the core Visual Basic objects, methods, and properties, which represents a potential security hazard.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_1","displayName":"Enabled","description":null,"helpText":null}]},"81df1180994b5503":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_datecolon61","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/82.json b/public/intune-definitions/82.json new file mode 100644 index 000000000000..ebd2de8ab7b0 --- /dev/null +++ b/public/intune-definitions/82.json @@ -0,0 +1 @@ +{"8284b36ada250629":{"id":"com.apple.cellular_apns_item_enablexlat464","displayName":"Enable XLAT464","description":"If true, enables XLAT464. Available in iOS 16 and later.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":[{"id":"com.apple.cellular_apns_item_enablexlat464_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.cellular_apns_item_enablexlat464_true","displayName":"True","description":null,"helpText":null}]},"821ede364d4a51a2":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_lcid","displayName":"Microsoft Teams (work or school) LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"82325e8e84e863e6":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"8288c62482ab833e":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_time","displayName":"Time","description":"The time, in minutes, since midnight.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"827d70eb649e1a40":{"id":"com.microsoft.edge.mamedgeappconfigsettings.automaticdownloadsallowedforurls","displayName":"Allow multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to perform multiple successive automatic downloads.\nIf you don't configure this policy, \"DefaultAutomaticDownloadsSetting\" applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"826fe4a4e4360466":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebhidguardsetting","displayName":"Control use of the WebHID API","description":"Setting the policy to 3 lets websites ask for access to HID devices. Setting the policy to 2 denies access to HID devices.\n\nLeaving it unset lets websites ask for access, but users can change this setting.\n\nThis policy can be overridden for specific url patterns using the \"WebHidAskForUrls\" and \"WebHidBlockedForUrls\" policies.\n\nPolicy options mapping:\n\n* BlockWebHid (2) = Do not allow any site to request access to HID devices via the WebHID API\n\n* AskWebHid (3) = Allow sites to ask the user to grant access to a HID device\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebhidguardsetting_blockwebhid","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebhidguardsetting_askwebhid","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},"828be214b276ed0d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgehistoryaisearchenabled","displayName":"Control access to AI-enhanced search in History","description":"This policy controls whether users can use AI-enhanced search in their browsing history in Microsoft Edge.\n\nWhen enabled or not configured, users can search using synonyms, natural language phrases, and minor spelling errors to find previously visited pages.\n\nWhen disabled, users can only perform exact match (verbatim) searches in their history.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgehistoryaisearchenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgehistoryaisearchenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"82a7dcf6901f91aa":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel","displayName":"Configure Internet Explorer integration","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210\n\nPolicy options mapping:\n\n* None (0) = None\n\n* IEMode (1) = Internet Explorer mode\n\n* NeedIE (2) = Internet Explorer 11\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel_none","displayName":"None","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel_iemode","displayName":"Internet Explorer mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel_needie","displayName":"Internet Explorer 11","description":null,"helpText":null}]},"8263834b871761ed":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionchangepasswordurl","displayName":"Configure the change password URL","description":"Configures the change password URL (HTTP and HTTPS schemes only).\n\nPassword protection service will send users to this URL to change their password after seeing a warning in the browser.\n\nIf you enable this policy, then password protection service sends users to this URL to change their password.\n\nIf you disable this policy or don't configure it, then password protection service can't redirect users to a change password URL.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"82cdae053738b01e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.restorepdfview","displayName":"Restore PDF view","description":"Enables PDF View Recovery in Microsoft Edge.\n\nIf you enable or don't configure this policy, Microsoft Edge recovers the last state of PDF view and lands users to the section where they ended reading in the last session.\n\nIf you disable this policy, Microsoft Edge recovers the last state of PDF view and lands users at the start of the PDF file.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.restorepdfview_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restorepdfview_true","displayName":"Enabled","description":null,"helpText":null}]},"8291bdafbe6fa835":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_processes_exclusions_processeslist","displayName":"Process Exclusions","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"82d19a195a837474":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hostedcachediscovery","displayName":"Enable Automatic Hosted Cache Discovery by Service Connection Point","description":"This policy setting specifies whether client computers should attempt the automatic configuration of hosted cache mode by searching for hosted cache servers publishing service connection points that are associated with the client's current Active Directory site. If you enable this policy setting, client computers to which the policy setting is applied search for hosted cache servers using Active Directory, and will prefer both these servers and hosted cache mode rather than manual BranchCache configuration or BranchCache configuration by other group policies.\r\n\r\nIf you enable this policy setting in addition to the \"Turn on BranchCache\" policy setting, BranchCache clients attempt to discover hosted cache servers in the local branch office. If client computers detect hosted cache servers, hosted cache mode is turned on. If they do not detect hosted cache servers, hosted cache mode is not turned on, and the client uses any other configuration that is specified manually or by Group Policy.\r\n\r\nWhen this policy setting is applied, the client computer performs or does not perform automatic hosted cache server discovery under the following circumstances:\r\n\r\nIf no other BranchCache mode-based policy settings are applied, the client computer performs automatic hosted cache server discovery. If one or more hosted cache servers is found, the client computer self-configures for hosted cache mode.\r\n\r\nIf the policy setting \"Set BranchCache Distributed Cache Mode\" is applied in addition to this policy, the client computer performs automatic hosted cache server discovery. If one or more hosted cache servers are found, the client computer self-configures for hosted cache mode only.\r\n\r\nIf the policy setting \"Set BranchCache Hosted Cache Mode\" is applied, the client computer does not perform automatic hosted cache discovery. This is also true in cases where the policy setting \"Configure Hosted Cache Servers\" is applied.\r\n\r\nThis policy setting can only be applied to client computers that are running at least Windows 8. This policy has no effect on computers that are running Windows 7 or Windows Vista. \r\n\r\nIf you disable, or do not configure this setting, a client will not attempt to discover hosted cache servers by service connection point.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache settings are not applied to client computers by this policy setting, and client computers do not perform hosted cache server discovery.\r\n\r\n- Enabled. With this selection, the policy setting is applied to client computers, which perform automatic hosted cache server discovery and which are configured as hosted cache mode clients.\r\n\r\n- Disabled. With this selection, this policy is not applied to client computers.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-enablewindowsbranchcache-hostedcachediscovery"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hostedcachediscovery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hostedcachediscovery_1","displayName":"Enabled","description":null,"helpText":null}]},"82bc576812d2ad7c":{"id":"device_vendor_msft_policy_config_admx_printing_customizedsupporturl_customizedsupporturl_link","displayName":"URL","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"8231a3d3c6f0eb41":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_pv","displayName":"Network control service type","description":"Specifies an alternate link layer (Layer-2) priority value for packets with the Network Control service type (ServiceTypeNetworkControl). The Packet Scheduler inserts the corresponding priority value in the Layer-2 header of the packets.\r\n\r\nIf you enable this setting, you can change the default priority value associated with the Network Control service type.\r\n\r\nIf you disable this setting, the system uses the default priority value of 0.\r\n\r\nImportant: If the Layer-2 priority value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypenetworkcontrol-pv"],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_pv_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_pv_1","displayName":"Enabled","description":null,"helpText":null}]},"82045bc65dbdfbab":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings","displayName":"Synchronize Windows settings","description":"\r\nThis policy setting configures the synchronization of Windows settings between computers.\r\nCertain Windows settings will synchronize between computers by default. These settings include Windows themes, Windows desktop settings, Ease of Access settings, and network printers. Use this policy setting to specify which Windows settings synchronize between computers. You can also use these settings to enable synchronization of users' sign-in information for certain apps, networks, and certificates.\r\nIf you enable this policy setting, only the selected Windows settings synchronize. Unselected Windows settings are excluded from settings synchronization.\r\nIf you disable this policy setting, all Windows Settings are excluded from the settings synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-disablewindowsossettings"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_1","displayName":"Enabled","description":null,"helpText":null}]},"8220c0b08427a9eb":{"id":"device_vendor_msft_policy_config_applicationdefaults_enableappurihandlers","displayName":"Enable App Uri Handlers","description":"Enables web-to-app linking, which allows apps to be launched with a http(s) URI","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationDefaults#enableappurihandlers"],"categoryId":"ddcc8634-edc3-40ef-a444-45f806439c18","categoryName":"Application Defaults","options":[{"id":"device_vendor_msft_policy_config_applicationdefaults_enableappurihandlers_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationdefaults_enableappurihandlers_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"82ff8eaf09d1a131":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_refresh_unit_options","displayName":"Global Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"820c2d9bd134d82a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace","description":"Setting the policy turns on Chrome's restricted sign-in feature in Google Workspace and prevents users from changing this setting. Users can only access Google tools using accounts from the specified domains (to allow gmail or googlemail accounts, add consumer_accounts to the list of domains). This setting prevents users from signing in and adding a Secondary Account on a managed device that requires Google authentication, if that account doesn't belong to one of the explicitly allowed domains.\r\n\r\nLeaving this setting empty or unset means users can access Google Workspace with any account.\r\n\r\nUsers cannot change or override this setting.\r\n\r\nNote: This policy causes the X-GoogApps-Allowed-Domains header to be appended to all HTTP and HTTPS requests to all google.com domains, as described in https://support.google.com/a/answer/1668854.\r\n\r\nExample value: managedchrome.com,example.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps_1","displayName":"Enabled","description":null,"helpText":null}]},"823825d79e946148":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"82876af074790846":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed","displayName":"Allow WebRTC text logs collection from Google Services","description":"Setting the policy to enabled means Google Chrome can collect WebRTC text logs from Google services such as Google Meet and upload them to Google. These logs have diagnostic information for debugging issues with audio or video meetings in Google Chrome, such as textual metadata describing incoming and outgoing WebRTC streams, WebRTC specific log entries and additional system information. These logs have no audio or video content from the meeting.\r\nSetting the policy to disabled results in no uploading of such logs to Google. Logs would still accumulate locally on the user's device.\r\nLeaving the policy unset means Google Chrome defaults to being able to collect and upload these logs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8268666071fc9b36":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting","displayName":"Default clipboard setting","description":"Setting the policy to 2 blocks sites from using the clipboard site permission. Setting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use one.\r\n\r\nThis policy can be overridden for specific URL patterns using the ClipboardAllowedForUrls and ClipboardBlockedForUrls policies.\r\n\r\nThis policy only affects clipboard operations controlled by the clipboard site permission, and does not affect sanitized clipboard writes or trusted copy and paste operations.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"8220cac150f68096":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting","displayName":"Default Window Placement permission setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting_2","displayName":"Denies the Window Placement permission on all sites by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting_3","displayName":"Ask every time a site wants obtain the Window Placement permission","description":null,"helpText":null}]},"827a2070a6c0bb7d":{"id":"device_vendor_msft_policy_config_defender_excludedextensions","displayName":"Excluded Extensions","description":"Allows an administrator to specify a list of file type extensions to ignore during a scan. Each file type in the list must be separated by a |. For example, lib|obj.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#excludedextensions"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"826f021d2d4c73b8":{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation","displayName":"Machine Identity Isolation","description":"Machine Identity Isolation: 0 - Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key. 1 - Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys. 2 - Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceGuard#machineidentityisolation"],"categoryId":"992a8a1e-428e-41cb-948e-4e5da86105fa","categoryName":"Device Guard","options":[{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation_0","displayName":"(Disabled) Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key.","description":"(Disabled) Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation_1","displayName":"(Enabled in audit mode) Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys.","description":"(Enabled in audit mode) Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation_2","displayName":"(Enabled in enforcement mode) Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.","description":"(Enabled in enforcement mode) Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.","helpText":null}]},"82abef1c58596ff1":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_0","displayName":"Normal Profile","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_1","displayName":"Read / Write Profile","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_2","displayName":"Read Only Profile","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_3","displayName":"Read / Write profile - fallback to Read Only","description":null,"helpText":null}]},"822c3b3f219c8124":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowautomaticpromptingforactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"824a47997176e90c":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"822e2688b774fc84":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles","displayName":"Show security warning for potentially unsafe files","description":"This policy setting controls whether or not the \"Open File - Security Warning\" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example).\n\nIf you enable this policy setting and set the drop-down box to Enable, these files open without a security warning. If you set the drop-down box to Prompt, a security warning appears before the files open.\n\nIf you disable this policy setting, these files do not open.\n\nIf you do not configure this policy setting, the user can configure how the computer handles these files. By default, these files are blocked in the Restricted zone, enabled in the Intranet and Local Computer zones, and set to prompt in the Internet and Trusted zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"82ce133a3dccacb2":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"82286c57ab745acd":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled","displayName":"Allow users to configure Site safety services (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy is obselete as the feature is being removed after Microsoft Edge version 127.\r\n\r\nThis policy disables site safety services from showing top site info in the page info dialog.\r\n\r\nIf you enable this policy or don't configure it, the top site info will be shown.\r\n\r\nIf you disable this policy, the top site info will not be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"82553670d9a1c54b":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled","displayName":"Enable Windows to search local Microsoft Edge browsing data","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will publish local browsing data to the Windows Indexer.\r\n\r\nIf you disable this policy, Microsoft Edge will not share data to the Windows Indexer.\r\n\r\nNote that if you disable this policy, Microsoft Edge will remove the data shared with Windows on the device and stop sharing any new browsing data.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8210eed183d3592d":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion","displayName":"Let Apps Access Motion","description":"This policy setting specifies whether Windows apps can access motion data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"826a08fe3138ac17":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_forceallowtheseapps","displayName":"Let Apps Access Phone Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"824bb6483f412e4e":{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_forceallowtheseapps","displayName":"Force Allow These Apps to Run in Background","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"821621f6028cacf1":{"id":"device_vendor_msft_policy_config_system_disabledirectxdatabaseupdate","displayName":"Disable Direct X Database Update","description":"This group policy allows control over whether the DirectX Database Updater task will be run on the system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disabledirectxdatabaseupdate"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_disabledirectxdatabaseupdate_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disabledirectxdatabaseupdate_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},"82070badae605de9":{"id":"device_vendor_msft_policy_config_userrights_logonasservice","displayName":"Log On As Service","description":"This security setting allows a security principal to log on as a service. Services can be configured to run under the Local System, Local Service, or Network Service accounts, which have a built in right to log on as a service. Any service that runs under a separate user account must be assigned the right.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#logonasservice"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"82f5835df2895a42":{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol","displayName":"Allow standard users to execute installer operations","description":"Allows users without administrator permissions to manage their Visual Studio installations. \r\n \r\nIf set to 0 (disabled) or missing entirely, the installer will prompt for administrator permissions using UAC. \r\n\r\nIf set to 1 (enabled for Update and Rollback), users without administrator permissions can update or rollback without UAC. All other operations will ask for administrator permissions through UAC. \r\n \r\nIf set to 2 (enabled for all installer operations), users without administrator permissions can fully manage Visual Studio through the Visual Studio Installer without UAC.\r\n \r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"82b7df4a9b490ad4":{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~visualstudiodevtunnelssettings_disablevisualstudiodevtunnels","displayName":"Disable dev tunnels in Visual Studio","description":"This policy disables dev tunnels in Visual Studio. For more information, see: https://aka.ms/devtunnels/vs/admx","helpText":"","infoUrls":[],"categoryId":"b3b30966-47ac-4b54-a75a-04418d5c6153","categoryName":"Dev Tunnel Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~visualstudiodevtunnelssettings_disablevisualstudiodevtunnels_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~visualstudiodevtunnelssettings_disablevisualstudiodevtunnels_1","displayName":"Enabled","description":null,"helpText":null}]},"82e0e45de47dfee8":{"id":"device_vendor_msft_vpnconnection_connectiontype","displayName":"Connection type","description":"This is the type of VPN server you use in your company.","helpText":"","infoUrls":[],"categoryId":"7f5517b0-3ff7-4f7e-aa4c-3d2ccbf37bdc","categoryName":"VPN Connection","options":null},"82e81cca83f858c7":{"id":"mathsettings_systembehavior_keyboardsuggestions","displayName":"Keyboard Suggestions","description":"Controls whether keyboard suggestions include math solutions","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":[{"id":"mathsettings_systembehavior_keyboardsuggestions_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_systembehavior_keyboardsuggestions_true","displayName":"True","description":null,"helpText":null}]},"829e443da77853fc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_datecolon52","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"82d145593d9304e1":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserlevelsecuritywizard","displayName":"File tab | Access Options | Customize | All Commands | User-Level Security Wizard... (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserlevelsecuritywizard_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserlevelsecuritywizard_1","displayName":"True","description":null,"helpText":null}]},"829ee7daaa2f81cb":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_enforcepoliciesonly","displayName":"Enforce Show Policies Only (User)","description":"This policy setting prevents administrators from viewing or using Group Policy preferences.\r\n\r\nA Group Policy administration (.adm) file can contain both true settings and preferences. True settings, which are fully supported by Group Policy, must use registry entries in the Software\\Policies or Software\\Microsoft\\Windows\\CurrentVersion\\Policies registry subkeys. Preferences, which are not fully supported, use registry entries in other subkeys.\r\n\r\nIf you enable this policy setting, the \"Show Policies Only\" command is turned on, and administrators cannot turn it off. As a result, Group Policy Object Editor displays only true settings; preferences do not appear.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show Policies Only\" command is turned on by default, but administrators can view preferences by turning off the \"Show Policies Only\" command.\r\n\r\nNote: To find the \"Show Policies Only\" command, in Group Policy Object Editor, click the Administrative Templates folder (either one), right-click the same folder, and then point to \"View.\"\r\n\r\nIn Group Policy Object Editor, preferences have a red icon to distinguish them from true settings, which have a blue icon.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-enforcepoliciesonly"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_enforcepoliciesonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_enforcepoliciesonly_1","displayName":"Enabled","description":null,"helpText":null}]},"8261c59326099e91":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout","displayName":"Turn off tolerant and Z-shaped scratch-out gestures (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout_1","displayName":"All","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout_2","displayName":"Tolerant","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout_3","displayName":"None","description":null,"helpText":null}]},"82a69feac4fa6543":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common","displayName":"Microsoft Office 2013 Common Settings (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2013 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers.\r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2013 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2013 applications are enabled, this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013common"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common_1","displayName":"Enabled","description":null,"helpText":null}]},"82d48db474220171":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_diskcachesize","displayName":"Set disk cache size: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"82b7e26e701f0f86":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled","displayName":"Enable warnings for insecure forms (User)","description":"This policy controls the treatment for insecure forms (forms that submit over HTTP) embedded in secure (HTTPS) sites in the browser.\r\nIf the policy is enabled or unset, a full page warning will be shown when an insecure form is submitted. Additionally, a warning bubble will be shown next to the form fields when they are focused, and autofill will be disabled for those forms.\r\nIf the policy is disabled, warnings will not be shown for insecure forms, and autofill will work normally.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"82acb6f425828ef5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled","displayName":"Enable the network service sandbox (User)","description":"This policy controls whether or not the network service process runs sandboxed.\r\nIf this policy is enabled, the network service process will run sandboxed.\r\nIf this policy is disabled, the network service process will run unsandboxed. This leaves users open to additional security risks related to running the network service unsandboxed.\r\nIf this policy is not set, the default configuration for the network sandbox will be used. This may vary depending on Google Chrome release, currently running field trials, and platform.\r\nThis policy is intended to give enterprises flexibility to disable the network sandbox if they use third party software that interferes with the network service sandbox.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8223671f2e53628b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled","displayName":"Enable signin interception (User)","description":"This settings enables or disables signin interception.\r\n\r\nWhen this policy not set or is set to True, the signin interception dialog triggers when a Google account is added on the web, and the user may benefit from moving this account to another (new or existing) profile.\r\n\r\nWhen this is set to False, the signin interception dialog does not trigger.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"821c518360981334":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin","displayName":"Minimum SSL version enabled (User)","description":"Setting the policy to a valid value means Google Chrome won't use SSL/TLS versions less than the specified version. Unrecognized values are ignored.\r\n\r\nIf this policy is not set, then Google Chrome will show an error for TLS 1.0 and TLS 1.1, but the user will be able to bypass it.\r\n\r\nIf this policy is set to \"tls1.2\", the user will not be able to bypass this error.\r\n\r\nSupport for setting this policy to \"tls1\" or \"tls1.1\" was removed in version 91. Suppressing the TLS 1.0/1.1 warning is no longer supported.\r\n\r\nExample value: tls1.2","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_1","displayName":"Enabled","description":null,"helpText":null}]},"823f23d0c2ee7106":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled","displayName":"Default legacy SameSite cookie behavior setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_1","displayName":"Revert to legacy SameSite behavior for cookies on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_2","displayName":"Use SameSite-by-default behavior for cookies on all sites","description":null,"helpText":null}]},"8237177ccd1ce919":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders12","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders12_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders12_1","displayName":"True","description":null,"helpText":null}]},"82a477e62a5a0a8e":{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate","displayName":"Locked-Down Trusted Sites Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowslockeddowntrustedsiteszonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"8215aead74414603":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, the permission is set to Low Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonejavapermissions"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"82d3fd738b43db8c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack","displayName":"Configure Do Not Track (User)","description":"Specify whether to send Do Not Track requests to websites that ask for tracking info. Do Not Track requests let the websites you visit know that you don't want your browsing activity to be tracked. By default, Microsoft Edge doesn't send Do Not Track requests, but users can turn on this feature to send them.\r\n\r\nIf you enable this policy, Do Not Track requests are always sent to websites asking for tracking info.\r\n\r\nIf you disable this policy, requests are never sent.\r\n\r\nIf you don't configure this policy, users can choose whether to send these requests.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_1","displayName":"Enabled","description":null,"helpText":null}]},"8242cf15a6d86614":{"id":"user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled","displayName":"Mouse Gesture Enabled (User)","description":"This policy lets you configure the Mouse Gesture feature in Microsoft Edge.\r\n\r\nThis feature provides an easy way for users to complete tasks like scroll forward or backward, open new tab, refresh page, etc. They can finish a task by pressing and holding the mouse right button to draw certain patterns on a webpage, instead of clicking the buttons or using keyboard shortcuts.\r\n\r\nIf you enable or don't configure this policy, you can use the Mouse Gesture feature on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Mouse Gesture feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"82ed5ca18ab05302":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list (User)","description":"Set this policy to control which profiles Microsoft Edge will use to open sites in. Switching configurations for sites listed in this policy take precedence over other heuristics Microsoft Edge uses for switching sites but note that sites not listed on this policy are still subject to switching by those heuristics. If this policy is not configured, Microsoft Edge will continue using its heuristics to automatically switch sites.\r\n\r\nThis policy maps a URL hostname to a profile that it should be opened in.\r\n\r\nThe 'site' field should take the form of a URL hostname.\r\n\r\nThe 'profile' field can take one of the following values:\r\n- 'Work': The most recently used Microsoft Entra signed-in profile will be used to open 'site'.\r\n- 'Personal': The most recently used MSA signed-in profile will be used to open 'site'.\r\n- 'No preference': The currently used profile will be used to open 'site'.\r\n- Wildcard email address: This takes the form of '*@contoso.com'. A profile whose username ends with the contents following the '*' will be used to open 'site'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"site\": \"work.com\",\r\n \"profile\": \"Work\"\r\n },\r\n {\r\n \"site\": \"personal.com\",\r\n \"profile\": \"Personal\"\r\n },\r\n {\r\n \"site\": \"nopreference.com\",\r\n \"profile\": \"No preference\"\r\n },\r\n {\r\n \"site\": \"contoso.com\",\r\n \"profile\": \"*@contoso.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"82d3817c01fbd1b0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_offlinemodefordocumentinformationpanel_l_empty422","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_offlinemodefordocumentinformationpanel_l_empty422_0","displayName":"Disable Offline Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_offlinemodefordocumentinformationpanel_l_empty422_1","displayName":"Enable Offline Mode, work offline now","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_offlinemodefordocumentinformationpanel_l_empty422_2","displayName":"Enable Offline Mode","description":null,"helpText":null}]},"829ca010bd2edabf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy5_l_placesbarpath218","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"82b4cf76c54c8de2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishindia","displayName":"English (India) (User)","description":"Enables the editing language English (India)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishindia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishindia_1","displayName":"Enabled","description":null,"helpText":null}]},"82b4a18a2ad5087d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_iscustomtabdefaultinnewplace","displayName":"Show the Custom tab as the default tab when creating a new file (User)","description":"\r\nThis policy settings controls whether the Custom tab shows as the default tab under File > New in Word, Excel, and PowerPoint.\r\n\r\nThe Custom tab shows the custom templates that are available. If there aren’t any custom templates, the Custom tab can’t be shown.\r\n\r\nIf you enable this policy setting, users will see the Custom tab as the default tab when creating a new file by going to File > New.\r\n\r\nIf you disable or don’t configure this policy setting, users will see the Featured tab as the default tab when creating a new file by going to File > New, unless access to Office-provided templates has been disabled.\r\n\r\nNote: This policy setting only applies to Office clients, such as Office 365 ProPlus, that come with an Office 365 plan.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_iscustomtabdefaultinnewplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_iscustomtabdefaultinnewplace_1","displayName":"Enabled","description":null,"helpText":null}]},"82d345022be22899":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_l_workflowdescrip435","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"822e9f21f0ef60b3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent","displayName":"[Deprecated] Allow the use of connected experiences in Office that analyze content (User)","description":"\r\n This policy setting allows you to control whether connected experiences that analyze content are available to your users when they're using Office.\r\n\r\n PowerPoint Designer and Editor in Word are examples of connected experiences that analyze content.\r\n\r\n If you enable this policy setting, connected experiences that analyze content will be available to your users.\r\n\r\n If you disable this policy setting, connected experiences that analyze content won't be available to your users.\r\n\r\n If you don't configure this policy setting, connected experiences that analyze content will be available to your users.\r\n\r\n Note: If you disable the \"Allow the use of connected experiences in Office\" policy setting, conected experiences that analyze content won't be available to your users.\r\n\r\n For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085794\r\n ","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent_1","displayName":"Enabled","description":null,"helpText":null}]},"82c4183fe5543345":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_l_datecolon287","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"826956a53e5cd84c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_l_showassociatedwebpage","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_l_showassociatedwebpage_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_l_showassociatedwebpage_1","displayName":"True","description":null,"helpText":null}]},"8272160d21ff9b00":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_specifyoutlookpeoplesearchtimeout_l_specifyoutlookpeoplesearchtimeoutspinid","displayName":"in milliseconds (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"825f4a8cdb486a02":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_turnonautoarchive","displayName":"Turn on AutoArchive (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_turnonautoarchive_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_turnonautoarchive_1","displayName":"True","description":null,"helpText":null}]},"82c17368b259cb32":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_addpropertiestoattachmentstoenablereplywithchanges","displayName":"Add properties to attachments to enable Reply with Changes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_addpropertiestoattachmentstoenablereplywithchanges_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_addpropertiestoattachmentstoenablereplywithchanges_1","displayName":"True","description":null,"helpText":null}]},"82012968bd695fc3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags","displayName":"RPC/HTTP Connection Flags (User)","description":"This policy setting configures connection options for Outlook Anywhere. \r\n\r\nIf you enable this policy setting, you can configure multiple connection options by selecting the flag in the drop down menu that contains the combination of settings you need. The following flags are available: \r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the settings specified in Autodiscover.\r\n\r\nFlag 1: Enables the 'Connect to Microsoft Exchange using HTTP checkbox' on the Connection tab. \r\n\r\nThe following flags configure options in the Microsoft Exchange Proxy Settings dialog box: \r\n\r\nFlag 2: Enables the 'Connect using SSL only' checkbox \r\nFlag 3: Enables the 'Only connect to proxy servers that have this principal name in their certificate' checkbox \r\nFlag 4: Enables the 'On fast networks, connect using HTTP first, then connect using TCP/IP' checkbox \r\nFlag 5: Enables the 'On slow networks, connect using HTTP first, then connect using TCP/IP' checkbox \r\n","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_1","displayName":"Enabled","description":null,"helpText":null}]},"82f6c489cbafdc5e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_pathcolon64","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"8207449fc94bf48b":{"id":"user_vendor_msft_policy_config_teamsv2~policy~l_teams_teams_preventfirstlaunchafterinstall_policy","displayName":"Prevent Microsoft Teams from starting automatically after installation (User)","description":"This policy setting controls whether Microsoft Teams starts automatically when the user logs into a device after Teams is installed.\r\n\r\nIf you enable this policy setting, Teams does not start automatically when the user logs in to the device and the user has not started Teams previously.\r\n\r\nNote: If you enable this policy setting, you must do so before Teams is installed.\r\n\r\nOnce a user starts Teams for the first time, Teams is configured to start automatically the next time the user logs into the device.\r\n\r\nIf you disable or don’t configure this policy setting, Teams automatically starts when a user logs in to the device after Teams is installed.\r\n\r\nNote: The user can configure Teams not to start automatically by configuring user settings within Teams.","helpText":"","infoUrls":[],"categoryId":"501b5a30-253c-48b7-ab40-de1d100e4358","categoryName":"Microsoft Teams","options":[{"id":"user_vendor_msft_policy_config_teamsv2~policy~l_teams_teams_preventfirstlaunchafterinstall_policy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_teamsv2~policy~l_teams_teams_preventfirstlaunchafterinstall_policy_1","displayName":"Enabled","description":null,"helpText":null}]},"820b7b54725fd458":{"id":"user_vendor_msft_policy_config_word16v10~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_disablemoderncommentsoptoutoption","displayName":"Hide the modern comments opt-out (User)","description":"This policy setting allows you to hide the modern comments opt-out toggle in Word from your users.\r\n\r\nNote: This opt-out toggle is only temporary and will eventually be removed from Word.\r\n\r\nIf you enable this policy setting, the toggle to turn off modern comments will be hidden from your users.\r\n\r\nIf you disable or don't configure this policy setting, your users will be able to temporarily turn off the new modern comments experience from the Options menu in Word. \r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v10~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_disablemoderncommentsoptoutoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v10~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_disablemoderncommentsoptoutoption_1","displayName":"Enabled","description":null,"helpText":null}]},"8262ae9a285b6754":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_pathcolon64","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/83.json b/public/intune-definitions/83.json new file mode 100644 index 000000000000..333f87766ea9 --- /dev/null +++ b/public/intune-definitions/83.json @@ -0,0 +1 @@ +{"830f94b5497abfdc":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary_part_targetversionprefix","displayName":"Target version (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":null},"8399d01cb61c3f14":{"id":"com.apple.app.lock_app_userenabledoptions","displayName":"User Enabled Options","description":"A dictionary of user-editable options.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":null},"836c6d410aa6d2c1":{"id":"com.apple.applicationaccess_forcedelayedsoftwareupdates","displayName":"Force Delayed Software Updates (Deprecated)","description":"If true, delays user visibility of software updates. In macOS, seed build updates are allowed, without delay. The delay is 30 days unless Enforced Software Update Delay is set to another value. Available in iOS 11.3 and later, and macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcedelayedsoftwareupdates_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcedelayedsoftwareupdates_true","displayName":"True","description":null,"helpText":null}]},"83914b351a8de19a":{"id":"com.apple.extensiblesso_extensiondata_allowpassword_kerberos","displayName":"Allow Password","description":"If set to true, the user to switch the user interface to Password mode. (macOS only)","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_allowpassword_kerberos_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_allowpassword_kerberos_true","displayName":"Enabled","description":null,"helpText":null}]},"830fc35a43f504e3":{"id":"com.apple.managedclient.preferences_allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history","description":"Enables deleting browser history and download history and prevents users from changing this setting.\n\nNote that even with this policy is disabled, the browsing and download history aren't guaranteed to be retained: users can edit or delete the history database files directly, and the browser itself may remove (based on expiration period) or archive any or all history items at any time.\n\nIf you enable this policy or don't configure it, users can delete the browsing and download history.\n\nIf you disable this policy, users can't delete browsing and download history.\n\nIf you enable this policy, don't enable the \"ClearBrowsingDataOnExit\" policy, because they both deal with deleting data. If you enable both, the \"ClearBrowsingDataOnExit\" policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how this policy is configured.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowdeletingbrowserhistory"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_allowdeletingbrowserhistory_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowdeletingbrowserhistory_true","displayName":"Allowed","description":null,"helpText":null}]},"833a369381a5cd66":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_image_search_post_params","displayName":"Image search post params","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"830bb9e75eb65632":{"id":"com.apple.managedclient.preferences_securitykeypermitattestation","displayName":"Websites or domains that don't need permission to use direct Security Key attestation","description":"Specifies websites and domains that don't need explicit user permission when attestation certificates from security keys are requested. Additionally, a signal is sent to the security key indicating that it can use individual attestation. Without this, users are prompted each time a site requests attestation of security keys.\n\nSites (like https://contoso.com/some/path) only match as U2F appIDs. Domains (like contoso.com) only match as webauthn RP IDs. To cover both U2F and webauthn APIs for a given site, you need to list both the appID URL and domain.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#securitykeypermitattestation"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"8301b568b2646a01":{"id":"com.apple.mcx.timemachine_backupallvolumes","displayName":"Backup All Volumes","description":"If true, backs up only the startup volume by default.","helpText":null,"infoUrls":[],"categoryId":"361859d9-1382-47c3-b9ec-9251a62fbb25","categoryName":"Time Machine","options":[{"id":"com.apple.mcx.timemachine_backupallvolumes_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx.timemachine_backupallvolumes_true","displayName":"True","description":null,"helpText":null}]},"83001f4c4d2137b5":{"id":"com.apple.mcxmenuextras_battery.menu","displayName":"Battery","description":"If true, enables the Battery menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_battery.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_battery.menu_true","displayName":"True","description":null,"helpText":null}]},"83ea5a3e263930e4":{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"83d7f84e2eea93e1":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usehellocertificatesassmartcardcertificates","displayName":"Use Hello Certificates As Smart Card Certificates","description":"If you enable this policy setting, applications use Windows Hello for Business certificates as smart card certificates. Biometric factors are unavailable when a user is asked to authorize the use of the certificate's private key. This policy setting is designed to allow compatibility with applications that rely exclusively on smart card certificates.\n\nIf you disable or do not configure this policy setting, applications do not use Windows Hello for Business certificates as smart card certificates, and biometric factors are available when a user is asked to authorize the use of the certificate's private key.\n\nWindows requires a user to lock and unlock their session after changing this setting if the user is currently signed in.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usehellocertificatesassmartcardcertificates_false","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usehellocertificatesassmartcardcertificates_true","displayName":"Enabled","description":"Enabled","helpText":null}]},"83afc61b96cefc9f":{"id":"device_vendor_msft_policy_config_activexcontrols_approvedinstallationsites_approvedactivexinstallsiteslist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":null},"8367ca2a3db8666a":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_removablemedia","displayName":"Apply policy to removable media","description":"This policy setting extends the disk quota policies in this folder to NTFS file system volumes on removable media.\r\n\r\nIf you disable or do not configure this policy setting, the disk quota policies established in this folder apply to fixed-media NTFS volumes only. Note: When this policy setting is applied, the computer will apply the disk quota to both fixed and removable media.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-diskquota#admx-diskquota-dq-removablemedia"],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":[{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_removablemedia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_removablemedia_1","displayName":"Enabled","description":null,"helpText":null}]},"83c0ef4bbf37a25f":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrate","displayName":"Set Group Policy refresh interval for computers","description":"This policy setting specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifies a background update rate only for Group Policies in the Computer Configuration folder.\r\n\r\nIn addition to background updates, Group Policy for the computer is always updated when the system starts.\r\n\r\nBy default, computer Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes.\r\n\r\nIf you enable this setting, you can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the computer tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.\r\n\r\nIf you disable this setting, Group Policy is updated every 90 minutes (the default). To specify that Group Policy should never be updated while the computer is in use, select the \"Turn off background refresh of Group Policy\" policy.\r\n\r\nThe Set Group Policy refresh interval for computers policy also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously, the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However, updates might be delayed significantly.\r\n\r\nThis setting establishes the update rate for computer Group Policy. To set an update rate for user policies, use the \"Set Group Policy refresh interval for users\" setting (located in User Configuration\\Administrative Templates\\System\\Group Policy).\r\n\r\nThis setting is only used when the \"Turn off background refresh of Group Policy\" setting is not enabled.\r\n\r\nNote: Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated, the Windows desktop is refreshed; it flickers briefly and closes open menus. Also, restrictions imposed by Group Policies, such as those that limit the programs users can run, might interfere with tasks in progress.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-grouppolicyrefreshrate"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrate_1","displayName":"Enabled","description":null,"helpText":null}]},"83834b5078da03f2":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_autositecoverage","displayName":"Use automated site coverage by the DC Locator DNS SRV Records","description":"This policy setting determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites where no DC for the same domain exists (or no Global Catalog for the same forest exists). These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC.\r\n\r\nIf you enable this policy setting, the DCs to which this setting is applied dynamically register DC Locator site-specific DNS SRV records for the closest sites where no DC for the same domain, or no Global Catalog for the same forest, exists.\r\n\r\nIf you disable this policy setting, the DCs will not register site-specific DC Locator DNS SRV records for any other sites but their own.\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-autositecoverage"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_autositecoverage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_autositecoverage_1","displayName":"Enabled","description":null,"helpText":null}]},"83e83f99e8783c71":{"id":"device_vendor_msft_policy_config_admx_servicing_servicing_checkbox_neverusewu","displayName":"Never attempt to download payload from Windows Update","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_servicing_servicing_checkbox_neverusewu_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_servicing_servicing_checkbox_neverusewu_1","displayName":"True","description":null,"helpText":null}]},"8363534adc0f69e4":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_refresh_onlogon_options","displayName":"Global Publishing Refresh On Logon","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_refresh_onlogon_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_refresh_onlogon_options_1","displayName":"True","description":null,"helpText":null}]},"83c5be7fcad93b8c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply","description":"List of URLs specifying which urls AutoOpenFileTypes will apply to. This policy has no impact on automatically open values set by users.\r\n\r\nIf this policy is set, files will only automatically open by policy if the url is part of this set and the file type is listed in AutoOpenFileTypes. If either condition is false the download won't automatically open by policy.\r\n\r\nIf this policy isn't set, all downloads where the file type is in AutoOpenFileTypes will automatically open.\r\n\r\nA URL pattern has to be formatted according to https://www.chromium.org/administrators/url-blocklist-filter-format.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"834817bb89966953":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked","displayName":"Allow Chrome to block navigations toward external protocols in sandboxed iframes","description":"Chrome will block navigations toward external protocols inside\r\nsandboxed iframe. See https://chromestatus.com/features/5680742077038592.\r\n\r\nWhen True, this lets Chrome blocks those navigations.\r\n\r\nWhen False, this prevents Chrome from blocking those navigations.\r\n\r\nThis defaults to True: security feature enabled.\r\n\r\nThis can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Google Chrome version 104.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked_1","displayName":"Enabled","description":null,"helpText":null}]},"834749b2c358b02b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"8330fbe0e9fd5271":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist","displayName":"Configure extension installation blacklist","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},"836668a4ae840188":{"id":"device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim","displayName":"Allow SIM Error Dialog Prompt When No SIM","description":"Allow SIM error diaglog prompts when no SIM is inserted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowsimerrordialogpromptwhennosim"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"8327e3260c8517f8":{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate","displayName":"Intranet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowintranetzonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"83375f851182ecfb":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"839d909c0fe79dc3":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_forceauditpolicysubcategorysettingstooverrideauditpolicycategorysettings","displayName":"Audit Force Audit Policy Subcategory Settings To Override Audit Policy Category Settings","description":"Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings Windows Vista and later versions of Windows allow audit policy to be managed in a more precise way using audit policy subcategories. Setting audit policy at the category level will override the new subcategory audit policy feature. Group Policy only allows audit policy to be set at the category level, and existing group policy may override the subcategory settings of new machines as they are joined to the domain or upgraded to Windows Vista or later versions. To allow audit policy to be managed using subcategories without requiring a change to Group Policy, there is a new registry value in Windows Vista and later versions, SCENoApplyLegacyAuditPolicy, which prevents the application of category-level audit policy from Group Policy and from the Local Security Policy administrative tool. If the category level audit policy set here is not consistent with the events that are currently being generated, the cause might be that this registry key is set. Default: Enabled\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#audit_forceauditpolicysubcategorysettingstooverrideauditpolicycategorysettings"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"8304dbca699960db":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended","displayName":"Print headers and footers","description":"Force 'headers and footers' to be on or off in the printing dialog.\r\n\r\nIf you don't configure this policy, users can decide whether to print headers and footers.\r\n\r\nIf you disable this policy, users can't print headers and footers.\r\n\r\nIf you enable this policy, users always print headers and footers.","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"834f50e4c385b651":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_videocaptureallowedurlsdesc","displayName":"Sites that can access video capture devices without requesting permission (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"834fb475cfcb4a2b":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled","displayName":"Use out-of-process iframe PDF Viewer","description":"Determines whether the PDF viewer in Microsoft Edge uses an out-of-process iframe (OOPIF).\r\nThis will be the new PDF viewer architecture going forward, as it is simpler in design and makes adding new features easier. The current GuestView PDF viewer, which relies on an outdated and overly complex architecture, is being deprecated.\r\n\r\nWhen this policy is set to Enabled or not set, Microsoft Edge will use the OOPIF PDF viewer architecture. Once Enabled or not set, the default behavior will be decided by Microsoft Edge.\r\n\r\nWhen this policy is set to Disabled, Microsoft Edge will strictly use the existing GuestView PDF viewer. This approach embeds a web page with its own separate frame tree into another web page.\r\n\r\nThis policy will be removed in the future, after the OOPIF PDF viewer feature has fully rolled out.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8362dec79694a553":{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_entervideoacpowerdowntimeout","displayName":"When plugged in, turn display off after (seconds)","description":"","helpText":"","infoUrls":[],"categoryId":"01da0c26-af30-4eb2-a899-7d5e7ecb9738","categoryName":"Video and Display Settings","options":null},"8388d31bf153762d":{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity","displayName":"Hypervisor Enforced Code Integrity","description":"Hypervisor-Protected Code Integrity: 0 - Turns off Hypervisor-Protected Code Integrity remotely if configured previously without UEFI Lock, 1 - Turns on Hypervisor-Protected Code Integrity with UEFI lock, 2 - Turns on Hypervisor-Protected Code Integrity without UEFI lock.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-VirtualizationBasedTechnology#hypervisorenforcedcodeintegrity"],"categoryId":"3588f84a-69de-4900-910c-09a5b69e5d99","categoryName":"Virtualization Based Technology","options":[{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity_0","displayName":"(Disabled) Turns off Hypervisor-Protected Code Integrity remotely if configured previously without UEFI Lock.","description":"(Disabled) Turns off Hypervisor-Protected Code Integrity remotely if configured previously without UEFI Lock.","helpText":null},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity_1","displayName":"(Enabled with UEFI lock) Turns on Hypervisor-Protected Code Integrity with UEFI lock.","description":"(Enabled with UEFI lock) Turns on Hypervisor-Protected Code Integrity with UEFI lock.","helpText":null},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity_2","displayName":"(Enabled without lock) Turns on Hypervisor-Protected Code Integrity without UEFI lock.","description":"(Enabled without lock) Turns on Hypervisor-Protected Code Integrity without UEFI lock.","helpText":null}]},"83fff29fba48ab67":{"id":"device_vendor_msft_policy_config_windowsai_disableaidataanalysis","displayName":"Disable AI Data Analysis","description":"This policy setting allows you to determine whether end users have the option to allow snapshots to be saved on their PCs. If disabled, end users will have a choice to save snapshots of their screen on their PC and then use Recall to find things they've seen. If the policy is enabled, end users will not be able to save snapshots on their PC. If the policy is not configured, end users will not be able to save snapshots on their PC.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableaidataanalysis"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disableaidataanalysis_0","displayName":"Enable Saving Snapshots for Windows.","description":"Enable Saving Snapshots for Windows.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableaidataanalysis_1","displayName":"Disable Saving Snapshots for Windows.","description":"Disable Saving Snapshots for Windows.","helpText":null}]},"83c4c82e3990319f":{"id":"device_vendor_msft_policy_config_windowsai_setdenyurilistforrecall","displayName":"Set Deny Uri List For Recall","description":"This policy allows you to set a semicolon-separated list of uris which should not be collected in Recall Snapshots\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdenyurilistforrecall"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":null},"834a32e573704ec2":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableenhancednotifications","displayName":"Disable Enhanced Notifications","description":"Use this policy if you want Windows Defender Security Center to only display notifications which are considered critical. If you disable or do not configure this setting, Windows Defender Security Center will display critical and non-critical notifications to users. NoteIf Suppress notification is enabled then users will not see critical or non-critical messages. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disableenhancednotifications"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableenhancednotifications_0","displayName":"(Disable) Windows Defender Security Center will display critical and non-critical notifications to users..","description":"(Disable) Windows Defender Security Center will display critical and non-critical notifications to users..","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableenhancednotifications_1","displayName":"(Enable) Windows Defender Security Center only display notifications which are considered critical on clients.","description":"(Enable) Windows Defender Security Center only display notifications which are considered critical on clients.","helpText":null}]},"83c79e4194c19373":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidetpmtroubleshooting","displayName":"Hide TPM Troubleshooting","description":"Use this policy to hide the Security processor (TPM) troubleshooting area in the Windows Defender Security Center.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hidetpmtroubleshooting"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidetpmtroubleshooting_0","displayName":"(Disable or not configured) The Security processor (TPM) troubleshooting area is displayed.","description":"(Disable or not configured) The Security processor (TPM) troubleshooting area is displayed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidetpmtroubleshooting_1","displayName":"(Enable) The Security processor (TPM) troubleshooting area is hidden.","description":"(Enable) The Security processor (TPM) troubleshooting area is hidden.","helpText":null}]},"837f09848edc09e5":{"id":"device_vendor_msft_policy_elevationclientsettings_senddata","displayName":"Send elevation data for reporting","description":"","helpText":null,"infoUrls":[],"categoryId":"b750fe41-33c4-4293-8dfc-42285be35752","categoryName":null,"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_senddata_1","displayName":"Yes","description":"Yes","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_senddata_0","displayName":"No","description":"No","helpText":null}]},"834aa5229ce0f9dc":{"id":"extensionsettings_extensionsettings","displayName":"com.apple.configuration.safari.extensions.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","categoryName":"Safari Extension Settings","options":null},"838fa065b64c1f6d":{"id":"softwareupdate_beta_offerprograms","displayName":"Offer Programs (Unsupported)","description":"Configurations for controlling or specifying the beta programs associated with a device. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"83e17c8483687905":{"id":"softwareupdate_beta_requireprogram","displayName":"Require Program (Unsupported)","description":"The device automatically enrolls in this beta program. This key must only be present if the `ProgramEnrollment` key is set to `AlwaysOn`. The `OfferPrograms` key must not be present if this key is present.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"830eae692d9ba16b":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmconfigureprograms","displayName":"Remove Default Programs link from the Start menu. (User)","description":"This policy setting allows you to remove the Default Programs link from the Start menu.\r\n\r\nIf you enable this policy setting, the Default Programs link is removed from the Start menu.\r\n\r\nClicking the Default Programs link from the Start menu opens the Default Programs control panel and provides administrators the ability to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.\r\n\r\nIf you disable or do not configure this policy setting, the Default Programs link is available from the Start menu.\r\n\r\nNote: This policy setting does not prevent the Set Default Programs for This Computer option from appearing in the Default Programs control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmconfigureprograms"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmconfigureprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmconfigureprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"835f9817aae737d5":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1","displayName":"Set time limit for active but idle Remote Desktop Services sessions (User)","description":"This policy setting allows you to specify the maximum amount of time that an active Remote Desktop Services session can be idle (without user input) before it is automatically disconnected.\r\n\r\nIf you enable this policy setting, you must select the desired time limit in the Idle session limit list. Remote Desktop Services will automatically disconnect active but idle sessions after the specified amount of time. The user receives a warning two minutes before the session disconnects, which allows the user to press a key or move the mouse to keep the session active. If you have a console session, idle session time limits do not apply.\r\n\r\nIf you disable or do not configure this policy setting, the time limit is not specified at the Group Policy level. By default, Remote Desktop Services allows sessions to remain active but idle for an unlimited amount of time. \r\n\r\nIf you want Remote Desktop Services to end instead of disconnect a session when the time limit is reached, you can configure the policy setting Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Session Time Limits\\End session when time limits are reached.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sessions-idle-limit-1"],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_1","displayName":"Enabled","description":null,"helpText":null}]},"83c7a0ea2febb330":{"id":"user_vendor_msft_policy_config_browser_alwaysenablebookslibrary","displayName":"Always Enable Books Library (User)","description":"Specifies whether the Books Library in Microsoft Edge will always be visible regardless of the country or region setting for the device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#alwaysenablebookslibrary"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_alwaysenablebookslibrary_0","displayName":"Disabled","description":"Show the Books Library only in countries or regions where supported.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_alwaysenablebookslibrary_1","displayName":"Enabled","description":"Show the Books Library, regardless of the device's country or region.","helpText":null}]},"839bd200902d8dfc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy","displayName":"Maximal number of concurrent connections to the proxy server (User)","description":"Setting the policy specifies the maximal number of simultaneous connections to the proxy server. Some proxy servers can't handle a high number of concurrent connections per client, which is solved by setting this policy to a lower value. The value should be lower than 100 and higher than 6. Some web apps are known to consume many connections with hanging GETs, so setting a value below 32 may lead to browser networking hangs if there are too many web apps with hanging connections open. Lower below the default at your own risk.\r\n\r\nLeaving the policy unset means a default of 32 is used.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_1","displayName":"Enabled","description":null,"helpText":null}]},"8379dd756ddd782a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls","displayName":"Block WebUSB on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a USB device.\r\n\r\nLeaving the policy unset means DefaultWebUsbGuardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nURL patterns can't conflict with WebUsbAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"833ca88636502a64":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURLPostParams specifies the parameters during image search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as {imageThumbnail}, real image thumbnail data replaces it.\r\n\r\nLeaving DefaultSearchProviderImageURLPostParams unset means image search request is sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"837dd6c2e0a38d47":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_datecolon42","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"83dbc41b3cdeccf0":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate","displayName":"Locked-Down Intranet (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"83ae58a0dc88f252":{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions","displayName":"Notify that Internet Explorer 11 browser is disabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_1","displayName":"Always","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_2","displayName":"Once per user","description":null,"helpText":null}]},"8313a038f6e015e0":{"id":"user_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys","displayName":"Enable extended hot keys in Internet Explorer mode (User)","description":"This policy setting lets admins enable extended Microsoft Edge Internet Explorer mode hotkeys, such as \"Ctrl+S\" to have \"Save as\" functionality.\n\nIf you enable this policy, extended hotkey functionality is enabled in Internet Explorer mode and work the same as Internet Explorer.\n\nIf you disable, or don't configure this policy, extended hotkeys will not work in Internet Explorer mode.\n\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2102115","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-enableextendediemodehotkeys"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_1","displayName":"Enabled","description":null,"helpText":null}]},"8319327ef31f7566":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforactivexcontrols"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"8356782fa59c8731":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled","displayName":"Enable printing (User)","description":"Enables printing in Microsoft Edge and prevents users from changing this setting.\r\n\r\nIf you enable this policy or don't configure it, users can print.\r\n\r\nIf you disable this policy, users can't print from Microsoft Edge. Printing is disabled in the wrench menu, extensions, JavaScript applications, and so on. Users can still print from plug-ins that bypass Microsoft Edge while printing. For example, certain Adobe Flash applications have the print option in their context menu, which isn't covered by this policy.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"83dc3fef6969188e":{"id":"user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled","displayName":"Enable zstd content encoding support (User)","description":"This feature enables advertising \"zstd\" support in the Accept-Encoding request header and support for decompressing zstd web content.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will accept server responses compressed with zstd.\r\n\r\nIf you disable this policy, the zstd content encoding feature will not be advertised or supported when processing server responses.\r\n\r\nThis policy is temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"83eca6f515784a3a":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload","displayName":"Require that the Enterprise Mode Site List is available before tab navigation (User)","description":"Lets you specify whether Microsoft Edge tabs wait to navigate until the browser has downloaded the initial Enterprise Mode Site List. This setting is intended for the scenario where the browser home page should load in Internet Explorer mode, and it is important that is does so on browser first run after IE mode is enabled. If this scenario does not exist, we recommend not enabling this setting because it can negatively impact the performance of loading the home page. The setting only applies when Microsoft Edge does not have a cached Enterprise Mode Site List, such as on browser first run after IE mode is enabled.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nThe timeout behavior of this policy can be configured with the 'NavigationDelayForInitialSiteListDownloadTimeout' (Set a timeout for delay of tab navigation for the Enterprise Mode Site List) policy.\r\n\r\nIf you set this policy to 1, when Microsoft Edge does not have a cached version of the Enterprise Mode Site List, tabs delay navigating until the browser has downloaded the site list. Sites configured to open in Internet Explorer mode by the site list will load in Internet Explorer mode, even during the initial navigation of the browser. Sites that cannot possibly be configured to open in Internet Explorer, such as any site with a scheme other than http:, https:, file:, or ftp: do not delay navigating and load immediately in Edge mode.\r\n\r\nIf you set this policy to 0 or don't configure it, when Microsoft Edge does not have a cached version of the Enterprise Mode Site List, tabs will navigate immediately, and not wait for the browser to download the Enterprise Mode Site List. Sites configured to open in Internet Explorer mode by the site list will open in Microsoft Edge mode until the browser has finished downloading the Enterprise Mode Site List.\r\n\r\n* 0 = None\r\n\r\n* 1 = All eligible navigations","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_1","displayName":"Enabled","description":null,"helpText":null}]},"83dfd509d44a7a9b":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended","displayName":"Enable preload of the new tab page for faster rendering (User)","description":"If you configure this policy, preloading the New tab page is enabled, and users can't change this setting. If you don't configure this policy, preloading is enabled and a user can change this setting.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"831ffe7ce78f5b97":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceoffice","displayName":"Replace Label - Office (User)","description":"This policy setting allows you to change or remove the 11th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceoffice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceoffice_1","displayName":"Enabled","description":null,"helpText":null}]},"8392eda7399b1238":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hausa","displayName":"Hausa (Latin) (User)","description":"Enables the editing language Hausa (Latin)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hausa_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_hausa_1","displayName":"Enabled","description":null,"helpText":null}]},"83a2fc7e1b644694":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinbosniaandherzegovina","displayName":"Serbian (Latin, Bosnia and Herzegovina) (User)","description":"Enables the editing language \"Serbian (Latin, Bosnia and Herzegovina)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinbosniaandherzegovina_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbianlatinbosniaandherzegovina_1","displayName":"Enabled","description":null,"helpText":null}]},"833a0e694dc95484":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc12_l_pathcolon12","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"83d78d7cf7ee9dae":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_checkfornewactionsurl","displayName":"Check for new actions URL (User)","description":"This policy setting allows you to configure the \"Check for New Actions\" menu option.\r\n\r\nIf you enable this policy setting, and when a URL is specified, a new \"Check for New Actions\" menu option will be added to the \"Additional Actions\" context menu.\r\n\r\nIf you disable or do not configure this policy setting, or when it is enabled and a URL is not specified, a \"Check for New Actions\" menu option will not be shown in the \"Additional Actions\" context menu.","helpText":"","infoUrls":[],"categoryId":"69931627-230d-4df9-bbef-e3eac64ea8ef","categoryName":"Additional Actions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_checkfornewactionsurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_checkfornewactionsurl_1","displayName":"Enabled","description":null,"helpText":null}]},"83d10acb6316b800":{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointbackgroundsyncintervalmultiplier","displayName":"Multiplier for background sync interval for notebooks stored on SharePoint (User)","description":"This policy setting allows you to increase the interval between background polls of a SharePoint site for changes to notebooks.\r\n\r\nIf you enable this policy setting, OneNote will poll SharePoint less frequently for changes to whole notebooks. Intervals are multiplied by the entered value, a positive integer value from 1 to 10. Larger intervals will slow notebook sync but reduce server load.\r\n\r\nIf you disable or do not configure this policy setting, OneNote will sync notebooks at the default rate (multiplier value of 1).\r\n\r\nNote: This policy setting only applies to volume licensed versions of Office 2016 that use Windows Installer (MSI), such as Office Professional Plus 2016 and Office Standard 2016.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointbackgroundsyncintervalmultiplier_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointbackgroundsyncintervalmultiplier_1","displayName":"Enabled","description":null,"helpText":null}]},"8313e60f50edb6ed":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffsharingrecommendation","displayName":"Turn off sharing recommendation (User)","description":"This policy setting controls the sharing recommendation feature. \r\n\r\nIf you enable this policy setting, the recommendation will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, the recommendation will be turned on.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffsharingrecommendation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnoffsharingrecommendation_1","displayName":"Enabled","description":null,"helpText":null}]},"83de6c52a22c3937":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_enableaiacertevaluation","displayName":"Enable Retrieval of Remote Certificate Authority Information (User)","description":"This policy setting controls whether Outlook will use remote certificate authority information in a secure email message to validate that its certificate is trusted. \r\n\r\nIf you enable this setting, you’ll allow the operating system to access remote network locations specified in a certificate for validation.\r\n\r\nIf you disable or don’t configure this setting, retrieval of remote Certificate Authority Information won’t be allowed, and only stored certificates will be used for authentication.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_enableaiacertevaluation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_enableaiacertevaluation_1","displayName":"Enabled","description":null,"helpText":null}]},"83bc1b45ea757938":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy","displayName":"Remove file extensions blocked as Level 2 (User) (Deprecated)","description":"This policy setting controls which types of attachments (determined by file extension) must be saved to disk before users can open them. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n\r\nIf you enable this policy setting, you can specify a list of attachment file types to classify as Level 2, which forces users to actively decide to download the attachment to view it. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not classify any file type extensions as Level 2. \r\n\r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"83b2701692143293":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders43","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders43_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders43_1","displayName":"True","description":null,"helpText":null}]},"832db7d4bf91d4e3":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4_l_uselanguage","displayName":"Use language: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6ae0d607-832c-403b-b3bc-c563e390ebad","categoryName":"Save/Open","options":null},"8313122815c5fb86":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio50andearlierfiles","displayName":"Visio 5.0 or earlier Binary Drawings, Templates and Stencils (User)","description":"This policy setting allows you to determine whether users can open or save Visio files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked: Both opening and saving of the file type will be blocked.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"75f9bfd8-8ee2-47b0-b080-a4d179724ca8","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio50andearlierfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio50andearlierfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"8375ad1875ae0681":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview","displayName":"File tab | Options | (\"Customize Ribbon\" or \"Quick Access Toolbar\") | All Commands | Web Page Preview (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview_1","displayName":"True","description":null,"helpText":null}]},"8333be8f58a4c79f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipherkeylength","displayName":"Set CNG cipher key length (User)","description":"This policy setting allows you to configure the number of bits to use when creating the cipher key. This number will be rounded down to a multiple of 8.\r\n\r\nIf you enable this policy setting, the key bits specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default value will be used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipherkeylength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipherkeylength_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/84.json b/public/intune-definitions/84.json new file mode 100644 index 000000000000..0499300f1df2 --- /dev/null +++ b/public/intune-definitions/84.json @@ -0,0 +1 @@ +{"84813adfacbd21f6":{"id":"com.android.devicerestrictionpolicy.appfunctions","displayName":"Block apps from exposing app functions","description":"If 'True', apps on fully managed devices, and apps in the work profile on corporate-owned devices with a work profile, are blocked from exposing app functions. If 'False', apps are allowed to expose app functions, which is the default OS behavior. Available for fully managed, dedicated, and corporate-owned work profile devices (at work profile level).","helpText":null,"infoUrls":[],"categoryId":"2257f7e1-3e88-4d4d-a666-437bbe42baca","categoryName":"Applications","options":[{"id":"com.android.devicerestrictionpolicy.appfunctions_false","displayName":"False","description":"Apps are allowed to expose app functions.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appfunctions_true","displayName":"True","description":"Apps are blocked from exposing app functions.","helpText":null}]},"84c273847ceaa972":{"id":"com.apple.applicationaccess_allowcloudphotolibrary","displayName":"Allow Cloud Photo Library","description":"If false, disables iCloud Photo Library. Any photos not fully downloaded from iCloud Photo Library to the device are removed from local storage. Available in iOS 9 and later, and macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudphotolibrary_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudphotolibrary_true","displayName":"True","description":null,"helpText":null}]},"84d7626429c90d3d":{"id":"com.apple.extensiblesso_platformsso_allowdeviceidentifiersinattestation","displayName":"Allow Device Identifiers In Attestation","description":"If `true`, the system includes the device UDID and serial number in Platform SSO attestations.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_allowdeviceidentifiersinattestation_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_allowdeviceidentifiersinattestation_true","displayName":"Allowed","description":null,"helpText":null}]},"84e6c902ff6c718d":{"id":"com.apple.extensiblesso_platformsso_offlinegraceperiod","displayName":"Offline Grace Period","description":"The amount of time after the last successful Platform SSO login a local account password can be used offline. Required when 'AllowOfflineGracePeriod' is set.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"8405488fd32eac0b":{"id":"com.apple.security.smartcard_checkcertificatetrust","displayName":"Check Certificate Trust","description":"Disable certificate trust check: Turns off certificate trust check.\r\n\r\nEnable certificate trust check and standard validity check: Turns on certificate trust check. A standard validity check is performed but doesn't include additional revocation checks.\r\n\r\nEnable certificate trust check and soft revocation check: Turns on certificate trust check. A soft revocation check is also performed. Until the certificate is explicitly rejected by CRL/OCSP, it's considered valid. This setting means that unavailable or unreachable CRL/OCSP allow this check to succeed.\r\n\r\nEnable certificate trust check and hard revocation check: Turns on certificate trust check. A hard revocation check is also performed. Unless CRL/OCSP explicitly says \"This certificate is OK,\" it's considered invalid. This option is the most secure.","helpText":null,"infoUrls":[],"categoryId":"f4a8384f-9e4e-4fc6-9ee2-28fa5260347a","categoryName":"Smart Card","options":[{"id":"com.apple.security.smartcard_checkcertificatetrust_0","displayName":"Disable certificate trust check","description":null,"helpText":null},{"id":"com.apple.security.smartcard_checkcertificatetrust_1","displayName":"Enable certificate trust check and standard validity check","description":null,"helpText":null},{"id":"com.apple.security.smartcard_checkcertificatetrust_2","displayName":"Enable certificate trust check and soft revocation check","description":null,"helpText":null},{"id":"com.apple.security.smartcard_checkcertificatetrust_3","displayName":"Enable certificate trust check and hard revocation check","description":null,"helpText":null}]},"84549862c308fd44":{"id":"com.apple.system-extension-policy_nonremovablesystemextensions","displayName":"Non Removable System Extensions","description":"A dictionary of system extensions on the computer. The dictionary maps the team identifiers (keys) to arrays of bundle identifiers, where the bundle identifier defines the system extension which cannot be disabled or uninstalled when SIP is enabled. It's an error for the same mapping to appear in the dictionary values corresponding to 'RemovableSystemExtensions' and 'NonRemovableSystemExtensions' keys.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"845919b26feec4e4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_recommended","displayName":"Enable AutoFill for payment instruments (users can override)","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. Includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.\n\nIf you enable this policy or don't configure it, users can control AutoFill for payment instruments.\n\nIf you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won't save any payment instrument information that users submit while browsing the web.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"84061f87b691eb61":{"id":"com.microsoft.edge.mamedgeappconfigsettings.browsingdatalifetime","displayName":"Browsing Data Lifetime Settings","description":"This policy controls how long specific types of browsing data are retained.\nIf Sync is enabled, this policy has no effect.\n\nYou can specify the following data types:\n'browsing_history'\n'download_history'\n'cookies_and_other_site_data'\n'cached_images_and_files'\n'password_signin'\n'autofill'\n'site_settings'\n'hosted_app_data'\n\nMicrosoft Edge periodically deletes data of the selected types that's older than the value set by 'time_to_live_in_hours'.\n\nExpired data is removed 15 seconds after browser startup and every hour while the browser is running.\n\nNote: Deleting cookies using this policy doesn't sign the user out of their profile, the user stays signed in.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"841d9222a7d504b7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importfavorites_recommended","displayName":"Allow importing of favorites (users can override)","description":"Allows users to import favorites from another browser into Microsoft Edge.\n\nIf you enable this policy, the Favorites check box is automatically selected in the Import browser data dialog box.\n\nIf you disable this policy, favorites aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\n\nNote: This policy currently manages import from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importfavorites_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importfavorites_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"84365d60c0265c70":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio","description":"This policy determines whether the browser enables adaptive buffering\nfor Web Audio. Adaptive buffering can reduce audio glitches but can\nincrease latency to varying degrees.\n\nIf this policy is enabled, the browser uses adaptive buffering.\nIf this policy is disabled or not configured, the browser automatically decides during the\n feature launch process whether to use adaptive buffering.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.webaudiooutputbufferingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webaudiooutputbufferingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"84e0e172cdba79cf":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webusballowdevicesforurls","displayName":"Grant access to specific sites to connect to specific USB devices","description":"Allows you to set a list of URLs that specify which sites will automatically be granted permission to access a USB device with the given vendor and product IDs. Each item in the list must contain both devices and URLs for the policy to be valid. Each item in devices can contain a vendor ID and product ID field. Any ID that is omitted is treated as a wildcard with one exception, and that exception is that a product ID can't be specified without a vendor ID also being specified. Otherwise, the policy isn't valid and is ignored.\n\nThe USB permission model uses the URL of the requesting site (\"requesting URL\") and the URL of the top-level frame site (\"embedding URL\") to grant permission to the requesting URL to access the USB device. The requesting URL may be different than the embedding URL when the requesting site is loaded in an iframe. Therefore, the \"urls\" field can contain up to two URL strings delimited by a comma to specify the requesting and embedding URL respectively. If only one URL is specified, then access to the corresponding USB devices is granted when the requesting site's URL matches this URL regardless of embedding status. The URLs in \"urls\" must be valid URLs; otherwise, the policy is ignored.\n\nThis is deprecated and only supported for backwards compatibility in the following manner. If both a requesting and embedding URL are specified, then the embedding URL is granted the permission as top-level origin, and the requesting URL is ignored entirely.\n\nIf you don't configure this policy, the global default value is used for all sites either from the \"DefaultWebUsbGuardSetting\" policy if it is set, or the user's personal configuration otherwise.\n\nURL patterns in this policy shouldn't clash with the ones configured via \"WebUsbBlockedForUrls\". If there's a clash, this policy takes precedence over \"WebUsbBlockedForUrls\" and \"WebUsbAskForUrls\".","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"84023e93f80edf62":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverykeyusagedropdown_name","displayName":"OSRecoveryKeyUsageDropDown_Name","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverykeyusagedropdown_name_2","displayName":"Allow 256-bit recovery key","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverykeyusagedropdown_name_1","displayName":"Require 256-bit recovery key","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osrecoverykeyusagedropdown_name_0","displayName":"Do not allow 256-bit recovery key","description":null,"helpText":null}]},"84023afa7bcd9ba2":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_worknormalprioritylimit","displayName":"Normal Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"84456b6690249c06":{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomcomponentfailurespolicy","displayName":"Detect application failures caused by deprecated COM objects","description":"This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\\Administrative Templates\\Windows Components\\Application Compatibility.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pca#admx-pca-detectdeprecatedcomcomponentfailurespolicy"],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomcomponentfailurespolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomcomponentfailurespolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"84a465581bfaac24":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad","displayName":"Notepad","description":"This policy setting configures the synchronization of user settings of Notepad.\r\nBy default, the user settings of Notepad synchronize between computers. Use the policy setting to prevent the user settings of Notepad from synchronization between computers. \r\nIf you enable this policy setting, the Notepad user settings continue to synchronize. \r\nIf you disable this policy setting, Notepad user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-notepad"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad_1","displayName":"Enabled","description":null,"helpText":null}]},"846b85e3eafa0c55":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_allowed","displayName":"Allow users to enable HTTPS-Only Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_disallowed","displayName":"Do not allow users to enable HTTPS-Only Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode (not supported yet)","description":null,"helpText":null}]},"84178ec59e3dad7a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls","displayName":"Limit cookies from matching URLs to the current session","description":"Unless the RestoreOnStartup policy is set to permanently restore URLs from previous sessions, then setting CookiesSessionOnlyForUrls lets you make a list of URL patterns that specify sites that can and can't set cookies for one session.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies. URLs not covered by the patterns specified also result in the use of defaults.\r\n\r\nWhile no specific policy takes precedence, see CookiesBlockedForUrls and CookiesAllowedForUrls. URL patterns among these 3 policies must not conflict.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8493cbb8a0cbe26e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API","description":"Setting the policy to 3 lets websites ask for access to connected USB devices. Setting the policy to 2 denies access to connected USB devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"84354918f2940566":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls","displayName":"Block JavaScript on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't run JavaScript.\r\n\r\nLeaving the policy unset means DefaultJavaScriptSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8410c94f0951f428":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist","displayName":"Configure the required domain names for remote access clients","description":"Setting the policy specifies the client domain names that are imposed on remote access clients, and users can't change them. Only clients from one of the specified domains can connect to the host.\r\n\r\nSetting the policy to an empty list or leaving it unset applies the default policy for the connection type. For remote assistance, this allows clients from any domain to connect to the host. For anytime remote access, only the host owner can connect.\r\n\r\nSee also RemoteAccessHostDomainList.\r\n\r\nNote: This setting overrides RemoteAccessHostClientDomain, if present.\r\n\r\nExample value:\r\n\r\nmy-awesome-domain.com\r\nmy-auxiliary-domain.com","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"840ff5cd30ff7b8b":{"id":"device_vendor_msft_policy_config_display_turnongdidpiscalingforapps","displayName":"Turn On Gdi DPI Scaling For Apps","description":"This policy allows to turn on GDI DPI Scaling for a semicolon separated list of applications. Applications can be specified either by using full path or just filename and extension.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#turnongdidpiscalingforapps"],"categoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","categoryName":"Display","options":null},"84ee52f6181f927f":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations","displayName":"CCD Locations","description":"CCDLocations are formatted using a type and a connectionString separated using a ; as the delimiter. The type will accept either smb or azure. The connectionString for smb type must include the full UNC path to the file share. The connectionString for azure type should be secured as per the documentation (https://aka.ms/fslogix). The strings are case sensitive.\r\n\r\n- CCDLocations using SMB: type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=smb,name=\"SMB Share 2\"connectionString=\\\\\\\r\n\r\n- CCDLocations using Azure (secure): type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=azure,name=\"Azure Blob 1\",connectionString=\"|fslogix/stgacct1-connectionstring|\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\CCDLocations\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},"84d42eca058274a4":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowlessprivilegedsites"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"841bdf18c85a9f9c":{"id":"device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols","displayName":"Prevent per-user installation of ActiveX controls","description":"This policy setting allows you to prevent the installation of ActiveX controls on a per-user basis.\n\nIf you enable this policy setting, ActiveX controls cannot be installed on a per-user basis.\n\nIf you disable or do not configure this policy setting, ActiveX controls can be installed on a per-user basis.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-preventperuserinstallationofactivexcontrols"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"846f95ae70ddb22b":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways","displayName":"Microsoft Network Server Digitally Sign Communications Always","description":"Microsoft network server: Digitally sign communications (always) This security setting determines whether packet signing is required by the SMB server component. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB client is permitted. If this setting is enabled, the Microsoft network server will not communicate with a Microsoft network client unless that client agrees to perform SMB packet signing. If this setting is disabled, SMB packet signing is negotiated between the client and server. Default: Disabled for member servers. Enabled for domain controllers. Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. Similarly, if client-side SMB signing is required, that client will not be able to establish a session with servers that do not have packet signing enabled. By default, server-side SMB signing is enabled only on domain controllers. If server-side SMB signing is enabled, SMB packet signing will be negotiated with clients that have client-side SMB signing enabled. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. Important For this policy to take effect on computers running Windows 2000, server-side packet signing must also be enabled. To enable server-side SMB packet signing, set the following policy: Microsoft network server: Digitally sign communications (if server agrees) For Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value must be set to 1 on the Windows 2000 server: HKLM\\System\\CurrentControlSet\\Services\\lanmanserver\\parameters\\enableW9xsecuritysignature For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_digitallysigncommunicationsalways"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways_0","displayName":"Disable","description":"Disable","helpText":null}]},"846ed82e4722d3b1":{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype","displayName":"User selection type","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"categoryId":"b86100f0-e4ae-4f93-9dae-dd253a96726f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype_users","displayName":"Users/Groups","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype_manual","displayName":"Manual","description":null,"helpText":null}]},"843100d148400a89":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls","displayName":"Allow JavaScript on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to run JavaScript.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultJavaScriptSetting' (Default JavaScript setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"84857ed0a7ec53d8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_smartscreenallowlistdomainsdesc","displayName":"Configure the list of domains for which SmartScreen won't trigger warnings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":null},"840a21c7faf8ef2a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites","displayName":"Hide the default top sites from the new tab page","description":"Hides the default top sites from the new tab page in Microsoft Edge.\r\n\r\nIf you set this policy to true, the default top site tiles are hidden.\r\n\r\nIf you set this policy to false or don't configure it, the default top site tiles remain visible.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_1","displayName":"Enabled","description":null,"helpText":null}]},"846f6fdee42ebfc6":{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known or potentially dangerous downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockAllDownloads' to block all downloads.\r\n\r\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\r\n\r\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\nPolicy options mapping:\r\n\r\n* DefaultDownloadSecurity (0) = No special restrictions\r\n\r\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\r\n\r\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\r\n\r\n* BlockAllDownloads (3) = Block all downloads\r\n\r\n* BlockMaliciousDownloads (4) = Block malicious downloads\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"8458244ec2aac738":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled","displayName":"DNS interception checks enabled","description":"This policy configures a local switch that can be used to disable DNS interception checks. These checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nThis detection might not be necessary in an enterprise environment where the network configuration is known. It can be disabled to avoid additional DNS and HTTP traffic on start-up and each DNS configuration change.\r\n\r\nIf you enable or don’t set this policy, the DNS interception checks are performed.\r\n\r\nIf you disable this policy, DNS interception checks aren’t performed.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"84140c97ebddde73":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin","displayName":"Sets managed configuration values for websites to specific origins","description":"Setting this policy defines the return value of Managed Configuration API for given origin.\r\n\r\nManaged Configuration API is a key-value configuration that can be accessed via navigator.device.getManagedConfiguration() javascript call. This API is only available to origins which correspond to force-installed web applications via 'WebAppInstallForceList' (Configure list of force-installed Web Apps).\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"managed_configuration_hash\": \"asd891jedasd12ue9h\",\r\n \"managed_configuration_url\": \"https://static.contoso.com/configuration.json\",\r\n \"origin\": \"https://www.contoso.com\"\r\n },\r\n {\r\n \"managed_configuration_hash\": \"djio12easd89u12aws\",\r\n \"managed_configuration_url\": \"https://static.contoso.com/configuration2.json\",\r\n \"origin\": \"https://www.example.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"846eb20e694b23da":{"id":"device_vendor_msft_policy_config_mixedreality_manualdowndirectiondisabled","displayName":"Manual Down Direction Disabled","description":"This policy controls whether the user can change down direction manually or not. If no down direction is set by the user, then an automatically calculated down direction is used by the system. This policy has no dependency on ConfigureMovingPlatform policy and they can be set independently.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#manualdowndirectiondisabled"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_manualdowndirectiondisabled_0","displayName":"User is allowed to manually change down direction.","description":"User is allowed to manually change down direction.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_manualdowndirectiondisabled_1","displayName":"User is not allowed to manually change down direction.","description":"User is not allowed to manually change down direction.","helpText":null}]},"84f198494e441eaa":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_userincontroloftheseapps","displayName":"Let Apps Access Email User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"840feeaa7bd8f5ea":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_forcedenytheseapps","displayName":"Let Apps Access Microphone Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"8439551b1af1a6c0":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications","displayName":"Let Apps Access Notifications","description":"This policy setting specifies whether Windows apps can access notifications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessnotifications"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"84785b4bef832b6d":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup","displayName":"SharePoint Designer 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft SharePoint Designer 2013.\r\nMicrosoft SharePoint Designer 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft SharePoint Designer 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft SharePoint Designer 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft SharePoint Designer 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013sharepointdesignerbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"844659d25adf7bc6":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath","displayName":"Settings storage path (User)","description":"This policy setting configures where the settings package files that contain user settings are stored. \r\nIf you enable this policy setting, the user settings are stored in the specified location. \r\nIf you disable or do not configure this policy setting, the user settings are stored in the user’s home directory if configured for your environment. \r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-settingsstoragepath"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_1","displayName":"Enabled","description":null,"helpText":null}]},"84d20e3ead55c24b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended","displayName":"Enable saving passwords to the password manager (User)","description":"Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.\r\n\r\nSetting the policy to Disabled means users can't save new passwords, but previously saved passwords will still work.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, the user can turn off password saving.","helpText":"","infoUrls":[],"categoryId":"6d6b289c-c1e9-4004-b5ab-3123920cf10d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"84570af72181c286":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites (User)","description":"Setting the policy lets you make a list of URL patterns that specify sites for which Chrome can automatically select a client certificate. The value is an array of stringified JSON dictionaries, each with the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts the client certificates the browser automatically selects from. Independent of the filter, only certificates that match the server's certificate request are selected.\r\n\r\nExamples for the usage of the $FILTER section:\r\n\r\n* When $FILTER is set to { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, only client certificates issued by a certificate with the CommonName $ISSUER_CN are selected.\r\n\r\n* When $FILTER contains both the \"ISSUER\" and the \"SUBJECT\" sections, only client certificates that satisfy both conditions are selected.\r\n\r\n* When $FILTER contains a \"SUBJECT\" section with the \"O\" value, a certificate needs at least one organization matching the specified value to be selected.\r\n\r\n* When $FILTER contains a \"SUBJECT\" section with a \"OU\" value, a certificate needs at least one organizational unit matching the specified value to be selected.\r\n\r\n* When $FILTER is set to {}, the selection of client certificates is not additionally restricted. Note that filters provided by the web server still apply.\r\n\r\nLeaving the policy unset means there's no autoselection for any site.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoSelectCertificateForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\"pattern\":\"https://www.example.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\", \"L\": \"certificate issuer location\", \"O\": \"certificate issuer org\", \"OU\": \"certificate issuer org unit\"}, \"SUBJECT\":{\"CN\":\"certificate subject name\", \"L\": \"certificate subject location\", \"O\": \"certificate subject org\", \"OU\": \"certificate subject org unit\"}}}","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"84e69da5c9595374":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"84d42871caf30f79":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls","displayName":"Block automatic fullscreen on these sites (User)","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail. Users' personal settings may allow certain origins to call\r\nthis API without a prior user gesture, as described in\r\nhttps://chromestatus.com/feature/6218822004768768.\r\n\r\nThis policy supersedes users' personal settings and blocks matching origins\r\nfrom calling the API without a prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy nor user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8493d600cdeef35b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments","displayName":"Set maximum number of trusted documents (User)","description":"This policy setting allows you to specify the maximum number of trust records for trusted documents that can be stored in the registry before the purge task runs. The purge task reduces the number of trusted documents stored in the registry to the value set by the \"Set maximum number of trust records to preserve\" policy setting.\r\n\r\nIf you enable this policy setting, you can specify the maximum number of trusted documents to be stored in the registry before the purge task runs, with an upper limit of 20,000 documents. For performance reasons, we do not recommend setting this policy setting to the upper limit.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 500 is used for the maximum number of trusted documents that can be stored in the registry before the purge task runs.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"84b997e4c23ac0b3":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing","displayName":"Enable MIME Sniffing (User)","description":"This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.\n\nIf you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.\n\nIf you do not configure this policy setting, the MIME Sniffing Safety Feature will not apply in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenablemimesniffing"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_1","displayName":"Enabled","description":null,"helpText":null}]},"84bb4d6fed67afbd":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended","displayName":"Enable saving passwords to the password manager (User)","description":"Enable Microsoft Edge to save user passwords.\r\n\r\nIf you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically.\r\n\r\nIf you disable this policy, users can't save new passwords, but they can still use previously saved passwords.\r\n\r\nIf you enable or disable this policy, users can't change or override it in Microsoft Edge. If you don't configure it, users can save passwords, as well as turn this feature off.","helpText":"","infoUrls":[],"categoryId":"a877a2ff-f144-421f-814c-593e972a8a20","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"84a0960bb1096384":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls","displayName":"Allow notifications on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can display notifications.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultNotificationsSetting' (Default notification setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8458acd27d0eeb48":{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended","displayName":"Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work profile (User)","description":"Allow the use of your organization's branding assets from Entra, if any, on the profile-related UI of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\r\n\r\nIf you enable this policy, your organization's branding assets from Entra will be used.\r\n\r\nIf you disable or don't configure this policy, your organization's branding assets from Entra won't be used.\r\n\r\nFor more information about configuring your organization's branding assets on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"842dd50c5918e6a4":{"id":"user_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled","displayName":"Enable Application Bound Encryption (User)","description":"Enabling this policy or leaving it unset binds the encryption keys used for local data storage to Microsoft Edge whenever possible.\r\n\r\nDisabling this policy has a detrimental effect on Microsoft Edge's security because unknown and potentially hostile apps can retrieve the encryption keys used to secure data.\r\n\r\nOnly turn off this policy if there are compatibility issues, such as scenarios where other applications need legitimate access to Microsoft Edge's data. Encrypted user data is expected to be fully portable between different computers or the integrity and location of Microsoft Edge's executable files isn’t consistent.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"841aea51ae42c461":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_autoopenfiletypesdesc","displayName":"List of file types that should be automatically opened on download (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"84c74aa47db34945":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc09","displayName":"Unsafe Location #9 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc09_1","displayName":"Enabled","description":null,"helpText":null}]},"8427fc67f08495bb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc13","displayName":"Unsafe Location #13 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc13_1","displayName":"Enabled","description":null,"helpText":null}]},"84bbec28a447a95f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimebeforestartingcolleague","displayName":"Minimum time before starting Colleague recommendation scan (User)","description":"The minimum idle time (in milliseconds) to wait before the Colleague Import Outlook add-in begins to scan the mailbox.","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimebeforestartingcolleague_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimebeforestartingcolleague_1","displayName":"Enabled","description":null,"helpText":null}]},"845222231cc8b8c0":{"id":"user_vendor_msft_policy_config_outlk16v17~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomaticsetupusersetting","displayName":"Manage automatic setup of classic Outlook accounts in new Outlook (User)","description":"\r\nThis policy setting allows you to manage whether classic Outlook automatically sets up user accounts and settings in new Outlook.\r\n\r\nIf you enable this policy setting, automatic setup of user accounts and settings in new Outlook is allowed and cannot be changed by the user.\r\n\r\nIf you disable this policy setting, automatic setup of user accounts and settings in new Outlook is not allowed and cannot be changed by the user.\r\n\r\nIf you don't configure this policy setting, users can manage the setting themselves. Automatic setup is enabled by default.\r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v17~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomaticsetupusersetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v17~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomaticsetupusersetting_1","displayName":"Enabled","description":null,"helpText":null}]},"842453332fc67743":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage","displayName":"Contacts Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Contacts Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_contactsfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"8465b643f4083be6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_setmaximumnumberofexchangeaccounts_l_setmaximumnumberofexchangeaccountsspinid","displayName":"Number of Accounts: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":null},"84f596472b556f09":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_defaultwebcalsubscriptions_l_empty32","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"060e7533-6c2f-4ed1-9173-f3de58de4bed","categoryName":"Internet Calendars","options":null},"843eaa041c15c2d7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_datecolon65","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"8419df6bbb178f95":{"id":"user_vendor_msft_policy_config_ppt16v3~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingsectionname","displayName":"Stop checking for Section with valid name (User)","description":"This policy setting prevents the Accessibility Checker from flagging section with default/untitled name.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from flagging section with default/untitled name.\r\n\r\nIf you disable or do not configure this policy setting, section will be scanned for valid name and the results will appear in the Accessibility Checker.\r\n ","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v3~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingsectionname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v3~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingsectionname_1","displayName":"Enabled","description":null,"helpText":null}]},"84af6bb472bf4b26":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjupdatingtask","displayName":"Updating task status updates resource status (User)","description":"Automatically updates resource status, such as actual and remaining work and cost, whenever you update task status, such as percent complete, actual duration, or remaining duration.\r\n\r\nIf you enable this setting, task status updates are automatically applied to resources.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjupdatingtask_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjupdatingtask_1","displayName":"Enabled","description":null,"helpText":null}]},"8433d3ab5c721f51":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjolelinks","displayName":"OLE Link Indicators (User)","description":"Displays the indicator for OLE linked objects in the lower-right corner of the cell that contains the link.\r\nIf you enable this setting, the indicator is displayed for OLE linked objects.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"251c6873-bf5b-4d85-8185-3c4973b6f33c","categoryName":"Show","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjolelinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjolelinks_1","displayName":"Enabled","description":null,"helpText":null}]},"84fe220e36e70906":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},"8476e9ae27c93484":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"84c4abf168cc3355":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_turnofflivepreview","displayName":"Turn off Live Preview (User)","description":"This policy setting allows you to configure Live Preview, which shows a preview of how a feature affects the document as you hover over different choices.\r\n\r\nIf you enable this policy setting, Live Preview is turned off.\r\n\r\nIf you disable or do not configure this policy setting, Live Preview is turned on.","helpText":"","infoUrls":[],"categoryId":"a7d55d90-e1d1-4577-8bfd-fe2641bce461","categoryName":"User Interface Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_turnofflivepreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_turnofflivepreview_1","displayName":"Enabled","description":null,"helpText":null}]},"84635e83ba1c17ab":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc04_l_datecolon21","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"84bf27ba2cfd2b2c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc12_l_descriptioncolon54","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"8441a23e2034562d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc17_l_descriptioncolon74","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"84df22278607080b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowaccenteduppercaseinfrench","displayName":"Allow accented uppercase in French (User)","description":"Checks/unchecks the option ''Enforce accented uppercase in French''.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowaccenteduppercaseinfrench_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowaccenteduppercaseinfrench_1","displayName":"Enabled","description":null,"helpText":null}]},"8423d788ea4d52ac":{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablefirewall","displayName":"Enable Public Network Firewall","description":"This value is an on/off switch for the firewall and advanced security enforcement. If this value is false, the server MUST NOT block any network traffic, regardless of other policy settings. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":" ","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablefirewall_false","displayName":"False","description":"Disable Firewall","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablefirewall_true","displayName":"True","description":"Enable Firewall","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/85.json b/public/intune-definitions/85.json new file mode 100644 index 000000000000..e6cda7c986dc --- /dev/null +++ b/public/intune-definitions/85.json @@ -0,0 +1 @@ +{"85189f38fe8a9788":{"id":"com.apple.loginwindow_shutdowndisabledwhileloggedin","displayName":"Shut Down Disabled While Logged In","description":"If true, disables the Shut Down menu item when the user is logged in.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_shutdowndisabledwhileloggedin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_shutdowndisabledwhileloggedin_true","displayName":"True","description":null,"helpText":null}]},"85efe6beadee57fb":{"id":"com.apple.managedclient.preferences_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user has entered so far.\n\nThis policy is optional. If you don't configure it, users won't see search suggestions; they will see suggestions from their browsing history and favorites.\n\nBing's suggest URL can be specified as:\n\n'{bing:baseURL}qbox?query={searchTerms}'.\n\nGoogle's suggest URL can be specified as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchprovidersuggesturl"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"85b3666830cac93f":{"id":"com.apple.managedclient.preferences_oldisablejunkoptionsprefkey","displayName":"Disable Junk settings","description":"Prevent users from applying Junk options to emails.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-junk-settings"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_oldisablejunkoptionsprefkey_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_oldisablejunkoptionsprefkey_true","displayName":"True","description":null,"helpText":null}]},"8558d1070999d054":{"id":"com.apple.managedclient.preferences_scanresultsretentiondays","displayName":"Scan results retention","description":"Specify the number of days that results are retained in the scan history on the device. Old scan results are removed from the history. Old quarantined files that are also removed from the disk.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#antivirus-scan-history-retention-in-days"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"8578850f85e4aa08":{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"8506b239a5dde1b8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importopentabs","displayName":"Allow importing of open tabs","description":"Allows users to import open and pinned tabs from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, open tabs aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.\n\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importopentabs_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importopentabs_true","displayName":"Enabled","description":null,"helpText":null}]},"858f915b9769c7f4":{"id":"device_vendor_msft_bitlocker_systemdrivesenableprebootinputprotectorsonslates","displayName":"Enable use of BitLocker authentication requiring preboot keyboard input on slates","description":"This policy setting allows users to turn on authentication options that require user input from the pre-boot environment, even if the platform lacks pre-boot input capability.\r\n\r\nThe Windows touch keyboard (such as that used by tablets) isn't available in the pre-boot environment where BitLocker requires additional information such as a PIN or Password.\r\n\r\nIf you enable this policy setting, devices must have an alternative means of pre-boot input (such as an attached USB keyboard).\r\n\r\nIf this policy is not enabled, the Windows Recovery Environment must be enabled on tablets to support the entry of the BitLocker recovery password. When the Windows Recovery Environment is not enabled and this policy is not enabled, you cannot turn on BitLocker on a device that uses the Windows touch keyboard.\r\n\r\nNote that if you do not enable this policy setting, options in the \"Require additional authentication at startup\" policy might not be available on such devices. These options include:\r\n- Configure TPM startup PIN: Required/Allowed\r\n- Configure TPM startup key and PIN: Required/Allowed\r\n- Configure use of passwords for operating system drives.\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesenableprebootinputprotectorsonslates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesenableprebootinputprotectorsonslates_1","displayName":"Enabled","description":null,"helpText":null}]},"85e1213e9b394fe6":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_recoveryurl_input","displayName":"Custom recovery URL option:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":null},"853e082123c69f1c":{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmstartupkeyusagedropdown_name","displayName":"Configure TPM startup key:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmstartupkeyusagedropdown_name_2","displayName":"Allow startup key with TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmstartupkeyusagedropdown_name_1","displayName":"Require startup key with TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmstartupkeyusagedropdown_name_0","displayName":"Do not allow startup key with TPM","description":null,"helpText":null}]},"85bbf345d2e7c845":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationrefreshinterval_dns_registrationrefreshintervallabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":null},"85a244d7cf692172":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablescanningnetworkfiles","displayName":"Configure scanning of network files","description":"This policy setting allows you to configure scanning for network files. It is recommended that you do not enable this setting.\r\n\r\n If you enable this setting, network files will be scanned.\r\n\r\n If you disable or do not configure this setting, network files will not be scanned.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disablescanningnetworkfiles"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablescanningnetworkfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablescanningnetworkfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"85ab4a3b8c37fdd6":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_disablesavepassword","displayName":"MSS: (DisableSavePassword) Prevent the dial-up passsword from being saved (recommended)","description":"MSS: (DisableSavePassword) Prevent the dial-up passsword from being saved (recommended)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-disablesavepassword"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_disablesavepassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_disablesavepassword_1","displayName":"Enabled","description":null,"helpText":null}]},"852c105dfdee757b":{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_4","displayName":"Configure Scenario Execution Level","description":"Determines the execution level for Windows Standby/Resume Performance Diagnostics.\n\nIf you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows Standby/Resume Performance problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows Standby/Resume Performance problems and indicate to the user that assisted resolution is available.\n\nIf you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve any Windows Standby/Resume Performance problems that are handled by the DPS.\n\nIf you do not configure this policy setting, the DPS will enable Windows Standby/Resume Performance for resolution by default.\n\nThis policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured.\n\nNo system restart or service restart is required for this policy to take effect: changes take effect immediately.\n\nThis policy setting will only take effect when the Diagnostic Policy Service is in the running state. When the service is stopped or disabled, diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-performancediagnostics#admx-performancediagnostics-wdiscenarioexecutionpolicy-4"],"categoryId":"a7e7529f-1030-41da-8b4d-024e1c08bbac","categoryName":"Windows Standby Resume Performance Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_4_1","displayName":"Enabled","description":null,"helpText":null}]},"858cf95850709ab1":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_c","displayName":"Network control service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkControl). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Network Control service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 48 (0x30).\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypenetworkcontrol-c"],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_c_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_c_1","displayName":"Enabled","description":null,"helpText":null}]},"85c9851f124950f3":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_clipchamp","displayName":"Microsoft Clipchamp (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_clipchamp_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_clipchamp_1","displayName":"True","description":null,"helpText":null}]},"85c70b45d6d5e2be":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_gamingapp","displayName":"Xbox Gaming App","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_gamingapp_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_gamingapp_1","displayName":"True","description":null,"helpText":null}]},"85282638a762270d":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_refresh_unit_options","displayName":"Global Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"85e49ae0116d452a":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditotherlogonlogoffevents","displayName":"Audit Other Logon Logoff Events","description":"This policy setting allows you to audit other logon/logoff-related events that are not covered in the “Logon/Logoff” policy setting such as the following: Terminal Services session disconnections. New Terminal Services sessions. Locking and unlocking a workstation. Invoking a screen saver. Dismissal of a screen saver. Detection of a Kerberos replay attack, in which a Kerberos request was received twice with identical information. This condition could be caused by network misconfiguration. Access to a wireless network granted to a user or computer account. Access to a wired 802.1x network granted to a user or computer account.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditotherlogonlogoffevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditotherlogonlogoffevents_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditotherlogonlogoffevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditotherlogonlogoffevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditotherlogonlogoffevents_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"8545e0360aad5d45":{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryserviceaccess","displayName":"DS Access Audit Directory Service Access","description":"This policy setting allows you to audit events generated when an Active Directory Domain Services (AD DS) object is accessed. Only AD DS objects with a matching system access control list (SACL) are logged. Events in this subcategory are similar to the Directory Service Access events available in previous versions of Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#dsaccess_auditdirectoryserviceaccess"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryserviceaccess_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryserviceaccess_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryserviceaccess_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryserviceaccess_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"85d3471179ccc399":{"id":"device_vendor_msft_policy_config_browser_setdefaultsearchengine","displayName":"Set Default Search Engine","description":"Sets the default search engine for MDM-enrolled devices. Users can still change their default search engine. If this setting is turned on, you are setting the default search engine that you would like your employees to use. Employees can still change the default search engine, unless you apply the AllowSearchEngineCustomization policy which will disable the ability to change it. You must specify a link to the OpenSearch XML file that contains, at minimum, the short name and the URL to the search engine. If you would like for your employees to use the Edge factory settings for the default search engine for their market, set the string EDGEDEFAULT; if you would like for your employees to use Bing as the default search engine, set the string EDGEBING. If this setting is not configured, the default search engine is set to the one specified in App settings and can be changed by your employees. If this setting is disabled, the policy-set search engine will be removed, and, if it is the current default, the default will be set back to the factory Microsoft Edge search engine for the market. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#setdefaultsearchengine"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"85b4a969e2c91cfd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_applicationlocalevalue","displayName":"Application locale (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"8525cc8a87e32f4a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_0","displayName":"Battery Saver Mode will be disabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_1","displayName":"Battery Saver Mode will be enabled when the device is on battery power and battery level is low.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_2","displayName":"This value is deprecated as of M121. In M121 and after, values will be treated as EnabledBelowThreshold.","description":null,"helpText":null}]},"851663ab5a4c5107":{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringserviceinstance","displayName":"[Deprecated] Config Device Health Monitoring Service Instance","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which service instance to which events are to be uploaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringserviceinstance"],"categoryId":"55c888df-44ff-49d1-808e-ad9cb8429aff","categoryName":"Device Health Monitoring","options":null},"85283f5b794b504d":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter","displayName":"Set the system default printer as the default printer","description":"Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer.\r\n\r\nIf you disable this policy or don't configure it, Print Preview uses the most recently used printer as the default destination choice.\r\n\r\nIf you enable this policy, Print Preview uses the OS system default printer as the default destination choice.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_1","displayName":"Enabled","description":null,"helpText":null}]},"857d046e05fb783e":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled","displayName":"Enable Workspaces","description":"Microsoft Edge Workspaces helps improve productivity for users in your organization.\r\n\r\nIf you enable this policy, users will be able to access the Microsoft Edge Workspaces feature.\r\nIf you disable or don't configure this policy, users will not be able to access the Microsoft Edge Workspaces feature.\r\n\r\nTo learn more about the feature, see https://go.microsoft.com/fwlink/?linkid=2209950","helpText":"","infoUrls":[],"categoryId":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","categoryName":"Edge Workspaces settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"85545a0006cac796":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled","displayName":"Enable globally scoped HTTP auth cache","description":"This policy configures a single global per profile cache with HTTP server authentication credentials.\r\n\r\nIf you disable or don’t set this policy, the browser will use the default behavior of cross-site auth, which as of version 80, will be to scope HTTP server authentication credentials by top-level site. So, if two sites use resources from the same authenticating domain, credentials will need to be provided independently in the context of both sites. Cached proxy credentials will be reused across sites.\r\n\r\nIf you enable this policy HTTP auth credentials entered in the context of one site will automatically be used in the context of another site.\r\n\r\nEnabling this policy leaves sites open to some types of cross-site attacks, and allows users to be tracked across sites even without cookies by adding entries to the HTTP auth cache using credentials embedded in URLs.\r\n\r\nThis policy is intended to give enterprises depending on the legacy behavior a chance to update their login procedures and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"858fcdd76a8be909":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_outlookexe92","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_outlookexe92_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_outlookexe92_1","displayName":"True","description":null,"helpText":null}]},"85425bacad230d6a":{"id":"device_vendor_msft_policy_config_system_limitenhanceddiagnosticdatawindowsanalytics","displayName":"Limit Enhanced Diagnostic Data Windows Analytics","description":"This policy setting, in combination with the Allow Telemetry policy setting, enables organizations to send Microsoft a specific set of diagnostic data for IT insights via Windows Analytics services. By configuring this setting, you're not stopping people from changing their Telemetry Settings; however, you are stopping them from choosing a higher level than you've set for the organization. To enable this behavior, you must complete two steps: 1. Enable this policy setting 2. Set Allow Telemetry to level 2 (Enhanced).If you configure these policy settings together, you'll send the Basic level of diagnostic data plus any additional events that are required for Windows Analytics, to Microsoft. The additional events are documented here: https://go.Microsoft.com/fwlink/?linked=847594. If you enable Enhanced diagnostic data in the Allow Telemetry policy setting, but you don't configure this policy setting, you'll send the required events for Windows Analytics, plus any additional Enhanced level telemetry data to Microsoft. This setting has no effect on computers configured to send Full, Basic, or Security level diagnostic data to Microsoft. If you disable or don't configure this policy setting, then the level of diagnostic data sent to Microsoft is determined by the Allow Telemetry policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#limitenhanceddiagnosticdatawindowsanalytics"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_limitenhanceddiagnosticdatawindowsanalytics_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_limitenhanceddiagnosticdatawindowsanalytics_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"85e4ee3362cee516":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge","displayName":"Specify uninstall behavior for Microsoft Edge","description":"You can specify whether Microsoft Edge (stable channel) is uninstalled, or is blocked from being uninstalled, on domain-joined devices in the European Economic Area (EEA).\r\n\r\nIf this policy is set to 'Enabled', Microsoft Edge will be automatically uninstalled on all devices in the EEA where this policy is deployed. User data will be kept on the device. Microsoft Edge will be uninstalled the next time Microsoft Edge Update automatically checks for updates. If Microsoft Edge is uninstalled from the devices, applications, widgets (for example, News, Search, and Weather) or any other Progressive Web Applications (PWAs) that depend on Microsoft Edge will no longer be available.\r\n\r\nIf this policy is set to 'Enabled and delete user data' (Setting '2'), Microsoft Edge will be automatically uninstalled on all devices in the EEA where this policy is deployed, and user data will be deleted from the device.\r\n\r\nIf this policy is set to 'Disabled' (Setting '3'), all users in the EEA are prevented from uninstalling Microsoft Edge where this policy is deployed.\r\n\r\nIf the policy is 'Not configured' (default setting), a user's Windows region setting determines whether they can uninstall Microsoft Edge on a domain-joined device. Only users in EEA countries will be able to uninstall Microsoft Edge if they choose to do so. Users outside of this area will not be able to uninstall Microsoft Edge. \r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nIf Microsoft Edge needs to be reinstalled:\r\n- You can set the 'Install' Policy to Force Installs (Machine-Wide) to reinstall Microsoft Edge.\r\n- If you set the Install policy to Force Installs (Machine-Wide), and also set the Uninstall policy to Enabled, the Force Installs (Machine-Wide) policy will override the Uninstall policy.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"8547d754bdab2eac":{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_adminreleasering_winapp_adminreleaseringvalueenum","displayName":"Admin Release Ring:","description":"","helpText":"","infoUrls":[],"categoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","categoryName":"Windows App","options":[{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_adminreleasering_winapp_adminreleaseringvalueenum_0","displayName":"Public","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_adminreleasering_winapp_adminreleaseringvalueenum_3","displayName":"Insider","description":null,"helpText":null}]},"8536526a484d3543":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabledevicesecurityui","displayName":"Disable Device Security UI","description":"Use this policy setting if you want to disable the display of the Device security area in the Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disabledevicesecurityui"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabledevicesecurityui_0","displayName":"(Disable) The users can see the display of the Device security area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the Device security area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabledevicesecurityui_1","displayName":"(Enable) The users cannot see the display of the Device security area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the Device security area in Windows Defender Security Center.","helpText":null}]},"85145b7f1d633b15":{"id":"device_vendor_msft_policy_config_winre_enablewinre","displayName":"Enable Windows Recovery Environment","description":"","helpText":null,"infoUrls":[],"categoryId":"cba65aaf-9580-4729-89b3-a814b74d2193","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_winre_enablewinre_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_winre_enablewinre_0","displayName":"Disabled","description":"Disabled","helpText":null}]},"8529a794b66f468b":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_hidesettings","displayName":"Hide Settings tab (User)","description":"Removes the Settings tab from Display in Control Panel.\r\n\r\nThis setting prevents users from using Control Panel to add, configure, or change the display settings on the computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-display-hidesettings"],"categoryId":"ad47f904-ede2-4b12-849e-bf751d88abf5","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_hidesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_hidesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"853200c087738aa3":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicymanagementsnapin","displayName":"Group Policy Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-grouppolicymanagementsnapin"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicymanagementsnapin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicymanagementsnapin_1","displayName":"Enabled","description":null,"helpText":null}]},"853ab6acf1166f43":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasmyproperties","displayName":"Prohibit changing properties of a private remote access connection (User)","description":"Determines whether users can view and change the properties of their private remote access connections.\r\n\r\nPrivate connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the \"Only for myself\" option.\r\n\r\nThis setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box for a private connection is available to users.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties menu items are disabled, and no users (including administrators) can open the Remote Access Connection Properties dialog box for a private connection.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, a Properties menu item appears when any user right-clicks the icon representing a private remote access connection. Also, when any user selects the connection, Properties appears on the File menu.\r\n\r\nNote: This setting takes precedence over settings that manipulate the availability of features in the Remote Access Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a remote access connection will be available to users.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-rasmyproperties"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasmyproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasmyproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"850dc4a27324627f":{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescavolume","displayName":"Remove the volume control icon (User)","description":"This policy setting allows you to remove the volume control icon from the system control area.\r\n\r\nIf you enable this policy setting, the volume control icon is not displayed in the system notification area.\r\n\r\nIf you disable or do not configure this policy setting, the volume control icon is displayed in the system notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-hidescavolume"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescavolume_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescavolume_1","displayName":"Enabled","description":null,"helpText":null}]},"852e4ac9becbf599":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext","displayName":"Idle session limit: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_432000000","displayName":"5 days","description":null,"helpText":null}]},"850d1701e595e7f4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction","displayName":"Add restrictions on managed accounts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_primary_account","displayName":"A Managed account must be a primary account","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_primary_account_strict","displayName":"A Managed account must be a primary account and have no secondary accounts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_none","displayName":"No restrictions on managed accounts","description":null,"helpText":null}]},"85ea885084e74eec":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"851d8652330e60aa":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist","displayName":"Configure native messaging whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"85270c0f677f42cf":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist","displayName":"HTTP Allowlist (User)","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as\r\n'[*.]example.com') that will not be upgraded to HTTPS and will not show an\r\nerror interstitial if HTTPS-First Mode is enabled. Organizations can use this\r\npolicy to maintain access to servers that do not support HTTPS, without\r\nneeding to disable HTTPS Upgrades and/or HTTPS-First Mode.\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their\r\nA-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead,\r\nHTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their\r\nspecific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"8549276bc696525f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings","displayName":"Web App management settings (User)","description":"This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.\r\n\r\nThe manifest_id field is the Manifest ID for the Web App. See https://developer.chrome.com/blog/pwa-manifest-id/ for instructions on how to determine the Manifest ID for an installed web app.\r\nThe run_on_os_login field specifies if a web app can be run during OS login. If this field is set to blocked, the web app will not run during OS login and the user will not be able to enable this later. If this field is set to run_windowed, the web app will run during OS login and the user will not be able to disable this later. If this field is set to allowed, the user will be able to configure the web app to run at OS login. The default configuration only allows the allowed and blocked values.\r\n(Since version 117) The prevent_close_after_run_on_os_login field specifies if a web app shall be prevented from closing in any way (e.g. by the user, task manager, web APIs). This behavior can only be enabled if run_on_os_login is set to run_windowed. If the app were already running, this property will only come into effect after the app is restarted. If this field is not defined, apps will be closable by users.\r\n(Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, i.e. shortcuts, file handlers, protocol handlers etc will be removed or not. If an app is already running, this property will come into effect after the app has restarted. This should be used with caution, since this can override any OS integration that is set automatically during the startup of the web applications system. Currently only works on Windows, Mac and Linux platforms.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebAppSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://bar.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foobar.example/index.html\",\r\n \"run_on_os_login\": \"run_windowed\",\r\n \"prevent_close_after_run_on_os_login\": true\r\n },\r\n {\r\n \"manifest_id\": \"*\",\r\n \"run_on_os_login\": \"blocked\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"force_unregister_os_integration\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"85e0d368badce8b5":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices with the given vendor and product IDs. (User)","description":"Setting the policy lets you list the URLs that specify which sites are automatically granted permission to access a HID device with the given vendor and product IDs. Each item in the list requires both devices and urls fields for the item to be valid, otherwise the item is ignored. Each item in the devices field must have a vendor_id and may have a product_id field. Omitting the product_id field will create a policy matching any device with the specified vendor ID. An item which has a product_id field without a vendor_id field is invalid and is ignored.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies, if it's set. If not, the user's personal setting applies.\r\n\r\nURLs in this policy shouldn't conflict with those configured through WebHidBlockedForUrls. If they do, this policy takes precedence over WebHidBlockedForUrls.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebHidAllowDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://google.com\",\r\n \"https://chromium.org\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"854633dd7f7f7e29":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled","displayName":"Control the User-Agent Client Hints GREASE Update feature. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"85178bff22a199fe":{"id":"user_vendor_msft_policy_config_internetexplorer_allowonewordentry","displayName":"Go to an intranet site for a one-word entry in the Address bar (User)","description":"This policy allows the user to go directly to an intranet site for a one-word entry in the Address bar.\n\nIf you enable this policy setting, Internet Explorer goes directly to an intranet site for a one-word entry in the Address bar, if it is available.\n\nIf you disable or do not configure this policy setting, Internet Explorer does not go directly to an intranet site for a one-word entry in the Address bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowonewordentry"],"categoryId":"a1fbe395-3b60-475f-8a34-3710d6b2e09f","categoryName":"Browsing","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowonewordentry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowonewordentry_1","displayName":"Enabled","description":null,"helpText":null}]},"8570aa2e9ade429d":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallownetframeworkreliantcomponents"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"85851ff51bc19aa1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended","displayName":"Block third party cookies (User)","description":"Block web page elements that aren't from the domain that's in the address bar from setting cookies.\r\n\r\nIf you enable this policy, web page elements that are not from the domain that is in the address bar can't set cookies\r\n\r\nIf you disable this policy, web page elements from domains other than in the address bar can set cookies.\r\n\r\nIf you don't configure this policy, third-party cookies are enabled but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"858813911b2fc5d8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes","displayName":"Supported authentication schemes (User)","description":"Specifies which HTTP authentication schemes are supported.\r\n\r\nYou can configure the policy by using these values: 'basic', 'digest', 'ntlm', and 'negotiate'. Separate multiple values with commas.\r\n\r\nIf you don't configure this policy, all four schemes are used.\r\n\r\nExample value: basic,digest,ntlm,negotiate","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_1","displayName":"Enabled","description":null,"helpText":null}]},"859658e4f2b93968":{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage","displayName":"Manage Blob URL Partitioning During Fetching and Navigation (User)","description":"This policy controls whether Blob URLs are partitioned during fetching and navigation.\r\nIf this policy is set to Enabled or not set, Blob URLs will be partitioned.\r\nIf this policy is set to Disabled, Blob URLs won't be partitioned. This is the Blob URL behavior prior to\r\nMicrosoft Edge version 135.\r\n\r\nIf storage partitioning is disabled for a given top-level origin by either\r\nThirdPartyStoragePartitioningBlockedForOrigins\r\nor DefaultThirdPartyStoragePartitioningSetting,\r\nthen Blob URLs will also not be partitioned.\r\n\r\nThe policy is scheduled to be available through Microsoft Edge version 140. After this\r\nversion, the policy will be removed, and Microsoft Edge will no longer support unpartitioned\r\nblob storage.\r\n\r\nFor detailed information on third-party storage partitioning, please see https://github.com/privacycg/storage-partitioning.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage_1","displayName":"Enabled","description":null,"helpText":null}]},"855cf732ddee1e24":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault","displayName":"Configure Automatic HTTPS (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_0","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_1","displayName":"Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_2","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},"85244724b3ef33c3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastservicenotesdefaulturl0","displayName":"Shared Notes Default Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"85cbd8cf8f569a4d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastserviceservername7","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"85e51785a38732db":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceprofile_l_profileadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"8517f780e1e4100b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_documentinformationpanelbeaconingui_l_empty423","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_documentinformationpanelbeaconingui_l_empty423_0","displayName":"Never show UI","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_documentinformationpanelbeaconingui_l_empty423_1","displayName":"Always show UI","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_documentinformationpanelbeaconingui_l_empty423_2","displayName":"Show UI if XSN is in Internet Zone","description":null,"helpText":null}]},"85a739074d6510f1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy3_l_placesbarpath214","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"85e837866dfd09b4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyvisio","displayName":"Disallow in Visio (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyvisio_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyvisio_1","displayName":"True","description":null,"helpText":null}]},"85857bc81487abd3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_breton","displayName":"Breton (User)","description":"Enables the editing language Breton","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_breton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_breton_1","displayName":"Enabled","description":null,"helpText":null}]},"857a3d31c01e6ce8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent_l_officeexperiencesanlayzingcontentdropid","displayName":"[Deprecated] Connected experiences in Office that analyze content (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent_l_officeexperiencesanlayzingcontentdropid_1","displayName":"Enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent_l_officeexperiencesanlayzingcontentdropid_2","displayName":"Disabled","description":null,"helpText":null}]},"855c06f2ef95b411":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"8553926a828d5182":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc19","displayName":"Unsafe Location #19 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc19_1","displayName":"Enabled","description":null,"helpText":null}]},"85bb2f609ab693bb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_permanentlyremovealldeleteditems","displayName":"Permanently remove all deleted content from PST and OST files (User)","description":"By default, a small percentage of deleted data is not overwritten in Outlook PST and OST files. By enabling this setting, all deleted data in PST and OST files is overwritten when users exit Outlook.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_permanentlyremovealldeleteditems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_permanentlyremovealldeleteditems_1","displayName":"Enabled","description":null,"helpText":null}]},"85850981d9f6c6fa":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_determineorderofsourcesforphotos","displayName":"Determine order of sources for photos (User)","description":"This policy setting controls the order of sources for photos displayed in Outlook. \r\n\r\nIf you enable this policy setting, Outlook will first look at the OAB/AD for the user photo. If this is not available, Outlook will show a Contact photo if the Contact photo is available.\r\n\r\nIf you disable or do not configure this policy setting, Outlook will first look into the Contact Address Books for the user photo. If this is not available, Outlook will look to the OAB/AD if available.","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_determineorderofsourcesforphotos_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_determineorderofsourcesforphotos_1","displayName":"Enabled","description":null,"helpText":null}]},"855818fe3d4afdfc":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_showpopupmenubutton","displayName":"Show popup toolbar (User)","description":"Checked: Checks the option ''Show popup toolbar''. | Unchecked: Unchecks the option ''Show popup toolbar''.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_showpopupmenubutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_showpopupmenubutton_1","displayName":"Enabled","description":null,"helpText":null}]},"8547f4ed20a169c2":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_datecolon33","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"85d0c85be501817e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjpromptforinfo","displayName":"Prompt for project info for new projects (User)","description":"Opens the Project Information dialog box whenever the user creates a new project.\r\n\r\nIf you enable this setting, the Project Information dialog box is displayed whenever you create a new project.\r\n\r\nIf you disable or do not configure this setting, the users default setting is followed.","helpText":"","infoUrls":[],"categoryId":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","categoryName":"General options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjpromptforinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjpromptforinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"85cc39dcebbf5ef9":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchfullhalfwidthform","displayName":"Match full/half width form (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchfullhalfwidthform_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchfullhalfwidthform_1","displayName":"Enabled","description":null,"helpText":null}]},"85831f4c4777bff3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_officeopenxmlconvertersforword_l_officeopenxmlconvertersforworddropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_officeopenxmlconvertersforword_l_officeopenxmlconvertersforworddropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_officeopenxmlconvertersforword_l_officeopenxmlconvertersforworddropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_officeopenxmlconvertersforword_l_officeopenxmlconvertersforworddropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_officeopenxmlconvertersforword_l_officeopenxmlconvertersforworddropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_officeopenxmlconvertersforword_l_officeopenxmlconvertersforworddropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_officeopenxmlconvertersforword_l_officeopenxmlconvertersforworddropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"850ba35db53cceb4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders75","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders75_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders75_1","displayName":"True","description":null,"helpText":null}]},"854ec9c4c4775bc8":{"id":"vendor_msft_sharedpc_sleeptimeout","displayName":"Sleep Timeout","description":"The amount of time before the PC sleeps, giving in seconds. 0 means the PC never sleeps. Default is 5 minutes. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/SharedPC-csp/"],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/86.json b/public/intune-definitions/86.json new file mode 100644 index 000000000000..f767fa368617 --- /dev/null +++ b/public/intune-definitions/86.json @@ -0,0 +1 @@ +{"864ed8f35fa5bb00":{"id":"ade_setupassistant_unlockwithwatch","displayName":"Auto unlock with Apple Watch","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_unlockwithwatch_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_unlockwithwatch_1","displayName":"Show","description":null,"helpText":null}]},"869135b6dae3099d":{"id":"com.apple.dock_orientation","displayName":"Orientation","description":"The orientation of the dock. ","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_orientation_0","displayName":"Bottom","description":null,"helpText":null},{"id":"com.apple.dock_orientation_1","displayName":"Left","description":null,"helpText":null},{"id":"com.apple.dock_orientation_2","displayName":"Right","description":null,"helpText":null}]},"8692c442cb1adedf":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"86403cba8079515d":{"id":"com.apple.managedclient.preferences_defaultserialguardsetting","displayName":"Control use of the Serial API","description":"Set whether websites can access serial ports. You can completely block access or ask the user each time a website wants to get access to a serial port.\n\nSetting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\n\nYou can override this policy for specific URL patterns by using the \"SerialAskForUrls\" and \"SerialBlockedForUrls\" policies.\n\nIf you don't configure this policy, by default, websites can ask users whether they can access a serial port, and users can change this setting.\n\nPolicy options mapping:\n\n* BlockSerial (2) = Do not allow any site to request access to serial ports via the Serial API\n\n* AskSerial (3) = Allow sites to ask for user permission to access a serial port\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultserialguardsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultserialguardsetting_0","displayName":"Do not allow any site to request access to serial ports via the Serial API","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultserialguardsetting_1","displayName":"Allow sites to ask for user permission to access a serial port","description":null,"helpText":null}]},"868dbc912f26d44e":{"id":"com.apple.managedclient.preferences_promotionaltabsenabled","displayName":"Enable full-tab promotional content (deprecated)","description":"Control the presentation of full-tab promotional or educational content. This setting controls the presentation of welcome pages that help users sign into Microsoft Edge, choose their default browser, or learn about product features.\n\nIf you enable this policy (set it true) or don't configure it, Microsoft Edge can show full-tab content to users to provide product information.\n\nIf you disable (set to false) this policy, Microsoft Edge can't show full-tab content to users.\n\nThis is deprecated - use ShowRecommendationsEnabled instead.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#promotionaltabsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_promotionaltabsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_promotionaltabsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8632dcaf267e6499":{"id":"com.apple.managedclient.preferences_qrcodegeneratorenabled","displayName":"Enable QR Code Generator","description":"This policy enables the QR Code generator feature in Microsoft Edge.\n\nIf you enable this policy or don't configure it, the QR Code Generator feature is enabled.\n\nIf you disable this policy, the QR Code Generator feature is disabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#qrcodegeneratorenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_qrcodegeneratorenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_qrcodegeneratorenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"867fc6a57e55fa72":{"id":"com.apple.managedclient.preferences_signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support","description":"Enable support for Signed HTTP Exchange (SXG).\n\nIf this policy isn't set or enabled, Microsoft Edge will accept web contents served as Signed HTTP Exchanges.\n\nIf this policy is set to disabled, Signed HTTP Exchanges can't be loaded.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#signedhttpexchangeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_signedhttpexchangeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_signedhttpexchangeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"862dd45be50ae0b1":{"id":"com.apple.security.firewall_applications","displayName":"Applications","description":"The list of apps with connections controlled by the firewall.","helpText":null,"infoUrls":[],"categoryId":"70b5da13-9c31-4857-890d-b7eb223729c3","categoryName":"Firewall","options":null},"862e921fe320530c":{"id":"device_vendor_msft_defender_configuration_asronlyperruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"867fd056b8d7d8d8":{"id":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountconnection","displayName":"Allow Microsoft Account Connection","description":"Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Accounts#AllowMicrosoftAccountConnection"],"categoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","categoryName":"Accounts","options":[{"id":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountconnection_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountconnection_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"8657647b6aa54776":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_6","displayName":"Configure log access (legacy)","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You cannot configure write permissions for this log.\r\n\r\nIf you enable this policy setting, only those users whose security descriptor matches the configured specified value can access the log.\r\n\r\nIf you disable this policy setting, only system software and administrators can read or clear this log.\r\n\r\nIf you do not configure this policy setting, the previous policy setting configuration remains in effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-6"],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_6_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_6_1","displayName":"Enabled","description":null,"helpText":null}]},"866be4ebce0ad6cb":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_nochanges6","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_nochanges6_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_nochanges6_1","displayName":"True","description":null,"helpText":null}]},"86c893fea6f0d5ef":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_onlyuselocaladminfiles","displayName":"Always use local ADM files for Group Policy Object Editor","description":"This policy setting lets you always use local ADM files for the Group Policy snap-in.\r\n\r\nBy default, when you edit a Group Policy Object (GPO) using the Group Policy Object Editor snap-in, the ADM files are loaded from that GPO into the Group Policy Object Editor snap-in. This allows you to use the same version of the ADM files that were used to create the GPO while editing this GPO.\r\n\r\nThis leads to the following behavior:\r\n\r\n- If you originally created the GPO with, for example, an English system, the GPO contains English ADM files.\r\n\r\n- If you later edit the GPO from a different-language system, you get the English ADM files as they were in the GPO.\r\n\r\nYou can change this behavior by using this setting.\r\n\r\nIf you enable this setting, the Group Policy Object Editor snap-in always uses local ADM files in your %windir%\\inf directory when editing GPOs.\r\n\r\nThis leads to the following behavior:\r\n\r\n- If you had originally created the GPO with an English system, and then you edit the GPO with a Japanese system, the Group Policy Object Editor snap-in uses the local Japanese ADM files, and you see the text in Japanese under Administrative Templates.\r\n\r\nIf you disable or do not configure this setting, the Group Policy Object Editor snap-in always loads all ADM files from the actual GPO.\r\n\r\nNote: If the ADMs that you require are not all available locally in your %windir%\\inf directory, you might not be able to see all the settings that have been configured in the GPO that you are editing.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-onlyuselocaladminfiles"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_onlyuselocaladminfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_onlyuselocaladminfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"863017f0d0eb1abb":{"id":"device_vendor_msft_policy_config_admx_kerberos_hosttorealm_hosttorealm_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"86e1dddb865be85f":{"id":"device_vendor_msft_policy_config_admx_msi_disableloggingfrompackage_disableloggingfrompackage","displayName":"Disable logging via package settings","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disableloggingfrompackage_disableloggingfrompackage_1","displayName":"Disable logging via package settings off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disableloggingfrompackage_disableloggingfrompackage_0","displayName":"Disable logging via package settings on","description":null,"helpText":null}]},"8681dd49e6c41c23":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_slowlinksettings_lbl_slowlinksettingslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"8608412fbefb5cd8":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_w32time_ntpclienteventlogflags","displayName":"EventLogFlags","description":null,"helpText":"","infoUrls":[],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":null},"863116b5a2f1a014":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type","displayName":"Rule Type","description":"Rule Type","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisher","displayName":"Publisher","description":"Creates a rule for a file that is signed by the software publisher. Upload the output generated by the binary file information extractor for your selected reference file.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_filehash","displayName":"File Hash","description":"Creates a rule for a file based on its corresponding hash values. Upload a CSV file containing a list of hash values you want to include in this rule or directly type your hash values in the text area below.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_filepath","displayName":"File Path","description":"Creates a rule for a specific file path or folder. Selecting folder will affect all files in a folder.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes","displayName":"File Attributes","description":"Creates a rule for a file based on one of its attributes. Select a file to use as reference for your rule.","helpText":null}]},"86dc35756f912165":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled","displayName":"Enable globally scoped HTTP auth cache","description":"This policy configures a single global per profile cache with HTTP server authentication credentials.\r\n\r\nIf this policy is unset or disabled, the browser will use the default behavior of cross-site auth, which as of version 80, will be to scope HTTP server authentication credentials by top-level site, so if two sites use resources from the same authenticating domain, credentials will need to be provided independently in the context of both sites. Cached proxy credentials will be reused across sites.\r\n\r\nIf the policy is enabled, HTTP auth credentials entered in the context of one site will automatically be used in the context of another.\r\n\r\nEnabling this policy leaves sites open to some types of cross-site attacks, and allows users to be tracked across sites even without cookies by adding entries to the HTTP auth cache using credentials embedded in URLs.\r\n\r\nThis policy is intended to give enterprises depending on the legacy behavior a chance to update their login procedures, and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"869435cefc56c619":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended","displayName":"Print PDF as Image Default","description":"Controls if Google Chrome makes the Print as image option default to set when printing PDFs.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome then the user selection for Print as image option will be initially unset. The user will be allowed to select it for each individual PDFs print job, if the option is available.\r\n\r\nFor Microsoft® Windows® or macOS this policy only has an effect if PrintPdfAsImageAvailability is also enabled.","helpText":"","infoUrls":[],"categoryId":"20ceae56-e189-46ec-a440-791ce7454017","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"86931c30e74daa25":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling","displayName":"The IP handling policy of WebRTC","description":"This policy allows restricting which IP addresses and interfaces WebRTC uses when attempting to find the best available connection. See RFC 8828 section 5.2 (https://tools.ietf.org/html/rfc8828.html#section-5.2). When unset, defaults to using all available interfaces.\r\n\r\nExample value: default","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_1","displayName":"Enabled","description":null,"helpText":null}]},"862addab74ccf51f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_0","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_1","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_2","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_3","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},"8604267234db704a":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent","displayName":"Block Office applications from creating executable content","description":"This rule prevents Office apps, including Word, Excel, and PowerPoint, from creating potentially malicious executable content, by blocking malicious code from being written to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_warn","displayName":"Warn","description":null,"helpText":null}]},"8654c660c2d8de77":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription","displayName":"Block persistence through WMI event subscription","description":"This rule prevents malware from abusing WMI to attain persistence on a device. Fileless threats employ various tactics to stay hidden, to avoid being seen in the file system, and to gain periodic execution control. Some threats can abuse the WMI repository and event model to stay hidden.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_warn","displayName":"Warn","description":null,"helpText":null}]},"861fdd9e6bdaba31":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_odfchealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":null},"86f8357f1ec59d7d":{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage","displayName":"Specify default behavior for a new tab","description":"This policy setting allows you to specify what is displayed when the user opens a new tab.\n\nIf you enable this policy setting, you can choose which page to display when the user opens a new tab: blank page (about:blank), the first home page, the new tab page or the new tab page with my news feed.\n\nIf you disable or do not configure this policy setting, the user can select his or her preference for this behavior.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-newtabdefaultpage"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_1","displayName":"Enabled","description":null,"helpText":null}]},"86a07d6a7aa56c58":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206","displayName":"Internet Explorer web browser control","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3","displayName":"Disable","description":null,"helpText":null}]},"86b20d198c1b36d2":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder","displayName":"Configure the location of the browser executable folder","description":"This policy configures WebView2 applications to use the WebView2 Runtime in the specified path. The folder should contain the following files: msedgewebview2.exe, msedge.dll, and so on.\r\n\r\nTo set the value for the folder path, provide a Value name and Value pair. Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications.\r\n\r\nExample value:\r\n\r\nName: *, Value: C:\\Program Files\\Microsoft Edge WebView2 Runtime Redistributable 85.0.541.0 x64","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_1","displayName":"Enabled","description":null,"helpText":null}]},"86d33bfa1cc42e45":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed","displayName":"Allow or block audio capture","description":"Allows you to set whether a user is prompted to grant a website access to their audio capture device. This policy applies to all URLs except for those configured in the 'AudioCaptureAllowedUrls' (Sites that can access audio capture devices without requesting permission) list.\r\n\r\nIf you enable this policy or don't configure it (the default setting), the user is prompted for audio capture access except from the URLs in the 'AudioCaptureAllowedUrls' list. These listed URLs are granted access without prompting.\r\n\r\nIf you disable this policy, the user is not prompted, and audio capture is accessible only to the URLs configured in 'AudioCaptureAllowedUrls'.\r\n\r\nThis policy affects all types of audio inputs, not only the built-in microphone.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"869b380897d6b8b6":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls","displayName":"Allow listed sites connect to specific HID devices (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"86dc059e7fd80b08":{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled","displayName":"Enable exporting saved passwords from Password Manager","description":"This policy controls whether the Export Password button in edge://wallet/passwords is enabled.\r\n\r\nIf enabled or not configured, users can export saved passwords.\r\nIf disabled, the Export Password button is unavailable, preventing password exports.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"86c94f361b4bdb1e":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect","displayName":"Specify how \"in-page\" navigations to unconfigured sites behave when started from Internet Explorer mode pages (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_1","displayName":"Keep only automatic navigations in Internet Explorer mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_2","displayName":"Keep all in-page navigations in Internet Explorer mode","description":null,"helpText":null}]},"86f9776de076f1e9":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled","displayName":"Control the IntensiveWakeUpThrottling feature","description":"When enabled the IntensiveWakeUpThrottling feature causes Javascript timers in background tabs to be aggressively throttled and coalesced, running no more than once per minute after a page has been backgrounded for 5 minutes or more.\r\n\r\nThis is a web standards compliant feature, but it may break functionality on some websites by causing certain actions to be delayed by up to a minute. However, it results in significant CPU and battery savings when enabled. See https://bit.ly/30b1XR4 for more details.\r\n\r\nIf you enable this policy, the feature will be force enabled, and users will not be able to override this setting.\r\nIf you disable this policy, the feature will be force disabled, and users will not be able to override this setting.\r\nIf you don't configure this policy, the feature will be controlled by its own internal logic. Users can manually configure this setting.\r\n\r\nNote that the policy is applied per renderer process, with the most recent value of the policy setting in force when a renderer process starts. A full restart is required to ensure that all the loaded tabs receive a consistent policy setting. It is harmless for processes to be running with different values of this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"86cd5d090f9e5525":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage","description":"This policy controls sending required and optional diagnostic data about browser usage to Microsoft.\r\n\r\nRequired diagnostic data is collected to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\nOptional diagnostic data includes data about how you use the browser, websites you visit and crash reports to Microsoft for product and service improvement.\r\n\r\nUp to version 121, this policy is not supported on Windows 10 devices. To control this data collection on Windows 10 for 121 and previous, IT admins must use the Windows diagnostic data group policy. This policy will either be 'Allow Telemetry' or 'Allow Diagnostic Data', depending on the version of Windows. Learn more about Windows 10 diagnostic data collection: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nFor version 122 and later, this policy is supported on Windows 10 devices to allow controlling Microsoft Edge data collection separately from Windows 10 diagnostics data collection.\r\n\r\nUse one of the following settings to configure this policy:\r\n\r\n'Off' turns off required and optional diagnostic data collection. This option is not recommended.\r\n\r\n'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\n'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.\r\n\r\nOn Windows 7/macOS, this policy controls sending required and optional data to Microsoft.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will default to the user's preference.\r\n\r\nPolicy options mapping:\r\n\r\n* Off (0) = Off (Not recommended)\r\n\r\n* RequiredData (1) = Required data\r\n\r\n* OptionalData (2) = Optional data\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_1","displayName":"Enabled","description":null,"helpText":null}]},"865e5e0320981694":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed","displayName":"Configures availability of a vertical layout for tabs on the side of the browser","description":"Configures whether a user can access an alternative layout where tabs are vertically aligned on the side of the browser instead of at the top.\r\nWhen there are several tabs open, this layout provides better tab viewing and management. There's better visibility of the site titles,\r\nit's easier to scan aligned icons, and there's more space to manage and close tabs.\r\n\r\nIf you disable this policy, then the vertical tab layout will not be available as an option for users.\r\n\r\nIf you enable or don't configure this policy, the tab layout will still be at the top, but a user has the option to turn on vertical tabs on the side.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"86e5158280833408":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_spdesignexe23","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_spdesignexe23_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_spdesignexe23_1","displayName":"True","description":null,"helpText":null}]},"86bccf141ed5566b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_onenoteexe138","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_onenoteexe138_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_onenoteexe138_1","displayName":"True","description":null,"helpText":null}]},"865f87389bf0e947":{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_checkbox_useroverride","displayName":"Allow users to turn \"accessibility\" syncing on.","description":"","helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"86da7d8aed44a756":{"id":"device_vendor_msft_policy_config_userrights_createsymboliclinks","displayName":"Create Symbolic Links","description":"This user right determines if the user can create a symbolic link from the computer he is logged on to. Caution: This privilege should only be given to trusted users. Symbolic links can expose security vulnerabilities in applications that aren't designed to handle them. Note: This setting can be used in conjunction a symlink filesystem setting that can be manipulated with the command line utility to control the kinds of symlinks that are allowed on the machine. Type 'fsutil behavior set symlinkevaluation /?' at the command line to get more information about fsutil and symbolic links.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createsymboliclinks"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"865eeecda76ae850":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelusersettingconfigurable","displayName":"Allow custom kernel configuration","description":"When set to disabled, this policy disables custom kernel configuration via .wslconfig (wsl2.kernel). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},"86bb35409772779d":{"id":"device_vendor_msft_wifi_profile_{ssid}_wlanxml","displayName":"Wireless security type","description":"XML describing the network configuration and follows Windows WLAN_profile schema. Link to schema: http://msdn.microsoft.com/en-us/library/windows/desktop/ms707341(v=vs.85).aspx","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"categoryId":"c4e48b1b-6d88-434f-a717-d5bab28eb245","categoryName":"Wi-Fi Connection","options":null},"8638a0d5135a4a72":{"id":"intelligencesettings_apps","displayName":"Apps","description":"If present, configures app-specific Intelligence features.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":null},"865ccbd5ce7c5f2c":{"id":"settings_item_wallpaper_image","displayName":"Image","description":"A Base64-encoded image in either PNG or JPG format to use for wallpaper.","helpText":null,"infoUrls":[],"categoryId":"ef7328b1-c666-40fe-a933-57b14bc77dd3","categoryName":"Wallpaper","options":null},"861946ce0e1e0dfb":{"id":"softwareupdate_notifications","displayName":"Notifications","description":"If 'true', the device shows all software update enforcement notifications. If 'false', the device only shows notifications triggered one hour before the enforcement deadline, and the restart countdown notification. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_notifications_false","displayName":"Disabled","description":null,"helpText":null},{"id":"softwareupdate_notifications_true","displayName":"Enabled","description":null,"helpText":null}]},"86cbf1333ad04da5":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_agentuser","displayName":"Agent user account","description":"","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":[{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_agentuser_","displayName":"None","description":"No agent user identity specified","helpText":null},{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_agentuser_0","displayName":"Entra identity profile","description":"Use Entra identity profile to identify the agent user","helpText":null}]},"869a159b971bee91":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10","displayName":"Trusted Location #10 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_1","displayName":"Enabled","description":null,"helpText":null}]},"86b299c90e1dd9db":{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane","displayName":"Turn on or off details pane (User)","description":"This policy setting shows or hides the Details Pane in File Explorer.\r\n\r\nIf you enable this policy setting and configure it to hide the pane, the Details Pane in File Explorer is hidden and cannot be turned on by the user.\r\n\r\nIf you enable this policy setting and configure it to show the pane, the Details Pane is always visible and cannot be hidden by the user. Note: This has a side effect of not being able to toggle to the Preview Pane since the two cannot be displayed at the same time.\r\n\r\nIf you disable, or do not configure this policy setting, the Details Pane is hidden by default and can be displayed by the user. This is the default policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-framepanes#admx-framepanes-nopreviewpane"],"categoryId":"4124fc05-5c98-4790-a2a9-4ba2dee3d9b3","categoryName":"Explorer Frame Pane","options":[{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_1","displayName":"Enabled","description":null,"helpText":null}]},"865667ade317a7c7":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_1","displayName":"Administrative Templates (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admusers-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_1_1","displayName":"Enabled","description":null,"helpText":null}]},"86d64ce2498cdb5b":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_2","displayName":"Administrative Templates (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admusers-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_2_1","displayName":"Enabled","description":null,"helpText":null}]},"861c6cd8958aa930":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_listbox_modulenames","displayName":"Module Names (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":null},"86c8df53f670c66e":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013","displayName":"Microsoft Office 365 Common 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2013 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers with UE-V.\r\nIf you enable this policy setting, user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize with UE-V.\r\nIf you disable this policy setting, user settings which are common between the Microsoft Office Suite 2013 applications are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365common2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013_1","displayName":"Enabled","description":null,"helpText":null}]},"862d95190abe20ac":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxyport","displayName":"Proxy port (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"86d5fa9b0b2647cf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended","displayName":"Enable network prediction (User)","description":"This policy controls network prediction in Google Chrome. It controls DNS prefetching, TCP, and SSL preconnection and prerendering of webpages.\r\n\r\nIf you set the policy, users can't change it. Leaving it unset turns on network prediction, but the user can change it.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"86c0f19dba42e7d1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl","displayName":"Default search provider icon (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderIconURL specifies the default search provider's favorite icon URL.\r\n\r\nLeaving DefaultSearchProviderIconURL unset means there's no icon for the search provider.\r\n\r\nExample value: https://search.my.company/favicon.ico","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_1","displayName":"Enabled","description":null,"helpText":null}]},"86959a633c4f2962":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_turnofffilevalidation","displayName":"Turn off file validation (User)","description":"This policy setting allows you turn off the file validation feature.\r\n\r\nIf you enable this policy setting, file validation will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, file validation will be turned on. Office Binary Documents (97-2003) are checked to see if they conform against the file format schema before they are opened.","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_turnofffilevalidation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_turnofffilevalidation_1","displayName":"Enabled","description":null,"helpText":null}]},"8667b4380fa0dace":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowuserdatapersistence"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"86b5fffdba9a1731":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (User)","description":"Enforces a minimum Restricted Mode on YouTube and prevents users from picking a less restricted mode.\r\n\r\nSet to Strict (2) to enforce Strict Restricted Mode on YouTube.\r\n\r\nSet to Moderate (1) to enforce the user to only use Moderate Restricted Mode and Strict Restricted Mode on YouTube. They can't disable Restricted Mode.\r\n\r\nSet to Off (0) or don't configure this policy to not enforce Restricted Mode on YouTube. External policies such as YouTube policies might still enforce Restricted Mode.\r\n\r\n* 0 = Do not enforce Restricted Mode on YouTube\r\n\r\n* 1 = Enforce at least Moderate Restricted Mode on YouTube\r\n\r\n* 2 = Enforce Strict Restricted Mode for YouTube","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_1","displayName":"Enabled","description":null,"helpText":null}]},"868d246f9b803456":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist","displayName":"Allow specific extensions to be installed (User)","description":"By default, all extensions are allowed. However, if you block all extensions by setting the 'ExtensionInstallBlockList' policy to \"*,\" users can only install extensions defined in this policy.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"86b4c2152c87d0a6":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled","displayName":"Re-enable the Event.path API until Microsoft Edge version 115 (User)","description":"Starting in Microsoft Edge version 109, the non-standard API Event.path will be removed to improve web compatibility. This policy re-enables the API until version 115.\r\n\r\nIf you enable this policy, the Event.path API will be available.\r\n\r\nIf you disable this policy, the Event.path API will be unavailable.\r\n\r\nIf this policy is not set, the Event.path API will be in the following default states: available before version 109, and unavailable in version 109 to version 114.\r\n\r\nThis policy will be made obsolete after Microsoft Edge version 115.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"86f2d6c21f58eb0d":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled","displayName":"Enable IPv6 reachability check override (User)","description":"This policy enables an override of the IPv6 reachability check. When overridden, the\r\nsystem will always query AAAA records when resolving host names. It applies to\r\nall users and interfaces on the device.\r\n\r\nIf you enable this policy, the IPv6 reachability check will be overridden.\r\n\r\nIf you disable or don't configure this policy, the IPv6 reachability check will not be overridden.\r\nThe system only queries AAAA records when it is reachable to a global IPv6 host.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"86a5d7046da965ee":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_onbulkdataentryenterpriseconnector","displayName":"Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"86c656fa7e742692":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_copilotnewtabpageenabled_recommended","displayName":"Enable the Copilot new tab page (User)","description":"This policy configures the availability of the Copilot new tab page in Microsoft Edge for Business.\r\n\r\nThe Copilot new tab page combines search and chat into a single input box and includes personalized cards that provide quick access to relevant files, calendar events, and suggested Copilot prompts. Users who do not have a Microsoft 365 Copilot license might experience limited relevance in Copilot prompt card content.\r\n\r\nMost policies that customize the New Tab Page are supported on the Copilot new tab page. For a complete list of supported and unsupported policies, see https://go.microsoft.com/fwlink/?linkid=2330462.\r\n\r\nThis policy applies only to Microsoft Entra ID profiles and controls the Copilot new tab page experience in Microsoft Edge for Business. This policy does not apply to the Copilot new tab page on MSA profiles.\r\n\r\nIf you enable this policy, the Copilot new tab page is turned on.\r\n\r\nIf you disable or don't configure this policy, the Copilot new tab page is turned off. When the policy is not configured, users can turn it on via user settings.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_copilotnewtabpageenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_copilotnewtabpageenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"86ed0ecebe21732b":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_1","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_3","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_4","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},"860517a1df867899":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_serialallowusbdevicesforurls","displayName":"Automatically grant sites permission to connect to USB serial devices (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"869f6743e2bff0d6":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_windowcaptureallowedbyoriginsdesc","displayName":"Allow Window and Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"86cd23f946c43440":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastserviceserverurl4","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"866014a7393dbe1c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultsaveprompttext","displayName":"Default save prompt text (User)","description":"Sets the text displayed when the user saves a document in any format other than the default.","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultsaveprompttext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultsaveprompttext_1","displayName":"Enabled","description":null,"helpText":null}]},"86a778b903d4f085":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_word","displayName":"Microsoft Word (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_word_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_word_1","displayName":"True","description":null,"helpText":null}]},"8634167570bd39c0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc06_l_datecolon259","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"86249eadfd9a9151":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressexternalsigningservicesmenuitems","displayName":"Suppress external signature services menu item (User)","description":"This policy setting controls whether Outlook displays the \"Add Signature Services\" menu item. \r\n\r\nIf you enable this policy setting, Outlook does not display the \"Add Signature Services\" menu item on the Signature Line drop-down menu. \r\n\r\nIf you disable or do not configure this policy setting, users can select \"Add Signature Services\" (from the Signature Line drop-down menu on the Insert tab of the Ribbon in Excel, PowerPoint, and Word) to see a list of signature service providers on Office.com.","helpText":"","infoUrls":[],"categoryId":"23c09e06-5bee-4b20-a391-36549bf0f620","categoryName":"Signing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressexternalsigningservicesmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressexternalsigningservicesmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},"86c2757c91de5464":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcustomtags_l_officeosmcustomtagstag3","displayName":"Tag 3: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":null},"86b5905b92399ac7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_l_showassociatedwebpage66","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_l_showassociatedwebpage66_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_l_showassociatedwebpage66_1","displayName":"True","description":null,"helpText":null}]},"86c596758d982a8d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages","displayName":"Use this encoding for outgoing messages: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28596","displayName":"Arabic (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1256","displayName":"Arabic (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28594","displayName":"Baltic (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1257","displayName":"Baltic (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28592","displayName":"Central European (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1250","displayName":"Central European (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_54936","displayName":"Chinese Simplified (GB18030)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_936","displayName":"Chinese Simplified (GB2312)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_52936","displayName":"Chinese Simplified (HZ)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_950","displayName":"Chinese Traditional (Big5)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28595","displayName":"Cyrillic (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_20866","displayName":"Cyrillic (KOI8-R)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_21866","displayName":"Cyrillic (KOI8-U)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1251","displayName":"Cyrillic (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28597","displayName":"Greek (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1253","displayName":"Greek (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_38598","displayName":"Hebrew (ISO-Logical)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1255","displayName":"Hebrew (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_51932","displayName":"Japanese (EUC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_50220","displayName":"Japanese (JIS)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_50221","displayName":"Japanese (JIS-Allow 1 byte Kana)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_932","displayName":"Japanese (Shift-JIS)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_949","displayName":"Korean","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_51949","displayName":"Korean (EUC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28593","displayName":"Latin 3 (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28605","displayName":"Latin 9(ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_874","displayName":"Thai (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28599","displayName":"Turkish (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1254","displayName":"Turkish (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_65000","displayName":"Unicode (UTF-7)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_65001","displayName":"Unicode (UTF-8)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_20127","displayName":"US-ASCII","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_50000","displayName":"User Defined","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1258","displayName":"Vietnamese (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_28591","displayName":"Western European (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_encodingforoutgoingmessages_l_usethisencodingforoutgoingmessages_1252","displayName":"Western European (Windows)","description":null,"helpText":null}]},"86ba9df2d9329d02":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnofflegacygroupcalendarmigration","displayName":"Turn off Legacy Group Calendar migration (User)","description":"This policy setting controls the migration of legacy Group Calendar. \r\n\r\nIf you enable this policy setting, migration will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, migration will be turned on.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnofflegacygroupcalendarmigration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_turnofflegacygroupcalendarmigration_1","displayName":"Enabled","description":null,"helpText":null}]},"86edda1aa1b573e8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy_v2_l_removedextensions","displayName":"Removed Extensions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":null},"868e873c21ca5fb9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_donotcreatenewostonupgrade","displayName":"Do not create new OST file on upgrade (User)","description":"This policy setting controls whether Outlook creates a new OST file when you upgrade to Outlook 2016. The new OST file uses less space on the disk. When a new OST file is created, the contents from the previous version of Outlook are downloaded from the Exchange Server.\r\n\r\nIf you enable this policy setting, Outlook continues to use the existing OST file created by the installed earlier version of Outlook. \r\n\r\nIf you disable or do not configure this policy setting, when you upgrade to Outlook 2016, a new OST file is created, and the contents from the installed earlier version of Outlook are downloaded from the Exchange server.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_donotcreatenewostonupgrade_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_donotcreatenewostonupgrade_1","displayName":"Enabled","description":null,"helpText":null}]},"86ad7337093ccf28":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_showshapesearchpane","displayName":"Show Shape Search pane (User)","description":"Displays the shape search user interface elements of the stencil window.","helpText":"","infoUrls":[],"categoryId":"98cefd27-a980-4070-ba45-3696b623810d","categoryName":"Shape Search","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_showshapesearchpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_showshapesearchpane_1","displayName":"Enabled","description":null,"helpText":null}]},"863fa5891c3237e8":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the Internet (User)","description":"\r\n This policy setting allows you to block macros from running in Office files that come from the Internet.\r\n\r\n If you enable this policy setting, macros are blocked from running, even if “Enable all macros” is selected in the Macro Settings section of the Trust Center. Also, instead of having the choice to “Enable Content,” users will receive a notification that macros are blocked from running. If the Office file is saved to a trusted location or was previously trusted by the user, macros will be allowed to run.\r\n\r\n If you disable or don’t configure this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the Internet.\r\n ","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"864313ec909dc565":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc13","displayName":"Trusted Location #13 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc13_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/87.json b/public/intune-definitions/87.json new file mode 100644 index 000000000000..9c2fc4905156 --- /dev/null +++ b/public/intune-definitions/87.json @@ -0,0 +1 @@ +{"8724bd5572fc529b":{"id":"app_privacy_permissiondefaults_generickey_accessibility","displayName":"Accessibility","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for use of accessibility.\n* `Allow`: The app privacy permission default is set to allow use of accessibility.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_accessibility_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_accessibility_1","displayName":"Allow","description":null,"helpText":null}]},"87512a78a35067aa":{"id":"com.android.devicerestrictionpolicy.passwordexpirationdays","displayName":"Number of days until password expires","description":"Enter the number of days, until the device password must be changed, from 1-365. For example, enter 90 to expire the password after 90 days. When the password expires, users are prompted to create a new password. If the value is blank, Intune doesn't change or update this setting. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-365)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"87d329bb6c75d7da":{"id":"com.android.devicerestrictionpolicy.wifidirectsettings","displayName":"Block Wi-Fi Direct","description":"If 'True', blocks Wi-Fi Direct (a direct, peer-to-peer connection between devices using Wi-Fi frequencies). If set to 'False', Intune doesn't change or update this setting. By default, the OS might allow Wi-Fi Direct. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.wifidirectsettings_allowed","displayName":"False","description":"The user is allowed to use Wi-Fi direct.","helpText":null},{"id":"com.android.devicerestrictionpolicy.wifidirectsettings_disallowed","displayName":"True","description":"The user is not allowed to use Wi-Fi direct. A NonComplianceDetail with API_LEVEL is reported if the Android version is less than 13.","helpText":null}]},"8769502abc0b08ea":{"id":"com.apple.applicationaccess_allowenterpriseapptrust","displayName":"Allow Enterprise App Trust","description":"If false, removes the Trust Enterprise Developer button in Settings > General > Profiles & Device Management, preventing apps from being provisioned by universal provisioning profiles. This restriction applies to free developer accounts. However, it doesn’t apply to enterprise app developers who are trusted because their apps were pushed through MDM. It also doesn’t revoke previously granted trust. Available in iOS 9 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowenterpriseapptrust_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowenterpriseapptrust_true","displayName":"True","description":null,"helpText":null}]},"876deb8e1f6d2221":{"id":"com.apple.applicationaccess_ratingappsie","displayName":"Rating Apps - Ireland","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsie_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_1","displayName":"1+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_2","displayName":"2+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_3","displayName":"3+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_4","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_5","displayName":"5+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_6","displayName":"6+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_7","displayName":"7+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_8","displayName":"8+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_9","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_10","displayName":"10+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_11","displayName":"11+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_12","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_13","displayName":"13+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_14","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_15","displayName":"15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_16","displayName":"16+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_17","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_18","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_19","displayName":"19+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_20","displayName":"20+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_21","displayName":"21+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsie_22","displayName":"All","description":null,"helpText":null}]},"873c14522c15b890":{"id":"com.apple.associated-domains_configuration_item_associateddomains","displayName":"Associated Domains","description":"The domains to be associated with the app. Each string is in the form of \"service:domain\". Domains should be fully qualified hostnames, like www.example.com.","helpText":null,"infoUrls":[],"categoryId":"8efd284f-5a56-4da8-8821-f51984ff954d","categoryName":"Associated Domains","options":null},"87afb04228171c65":{"id":"com.apple.dock_persistent-apps_item_tile-type","displayName":"Tile Type","description":"The type of tile.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_persistent-apps_item_tile-type_0","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_persistent-apps_item_tile-type_1","displayName":"Directory","description":null,"helpText":null},{"id":"com.apple.dock_persistent-apps_item_tile-type_2","displayName":"URL","description":null,"helpText":null}]},"877c3f50cb217502":{"id":"com.apple.dock_static-others","displayName":"Static Others","description":"Dock items located on the Documents side of the Dock and cannot be removed from that location.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"87acb515e5d73c03":{"id":"com.apple.managedclient.preferences_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\n\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\n\nThis policy can be overridden for specific URL patterns using the \"JavaScriptJitAllowedForSites\" and \"JavaScriptJitBlockedForSites\" policies.\n\nIf you don't configure this policy, JavaScript JIT is enabled.\n\nPolicy options mapping:\n\n* AllowJavaScriptJit (1) = Allow any site to run JavaScript JIT\n\n* BlockJavaScriptJit (2) = Do not allow any site to run JavaScript JIT\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultjavascriptjitsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultjavascriptjitsetting_0","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultjavascriptjitsetting_1","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},"877c57ef7e353bd3":{"id":"com.apple.managedclient.preferences_edgeopenexternallinkswithappspecifiedprofile","displayName":"Prioritize App specified profile to open external links","description":"This policy controls whether the profile specified by an app (such as Microsoft Teams or Outlook) is given priority when opening external links, instead of the profile selected in the Default profile for external links setting.\n\nPolicy behavior:\n1. Enabled or not configured: The app-specified profile is prioritized for opening external links. This behavior overrides the profile selected in settings, and the behavior defined by the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies. If the app doesn't specify a profile, this policy has no effect.\n2. Disabled: The profile selected in settings—along with the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies—will be used to determine which profile opens external links.\n\nNOTE:\nThis policy doesn't override user-defined preferences set through Automatic profile switching, including the Custom site switch setting located within it. If a user has configured specific sites to open in designated profiles, those preferences take precedence.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeopenexternallinkswithappspecifiedprofile"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeopenexternallinkswithappspecifiedprofile_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeopenexternallinkswithappspecifiedprofile_true","displayName":"Enabled","description":null,"helpText":null}]},"8718df378e5840e0":{"id":"com.apple.notificationsettings_notificationsettings_item_showincarplay","displayName":"Show In Car Play","description":"If true, enables notifications in CarPlay for this app. Available in iOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":[{"id":"com.apple.notificationsettings_notificationsettings_item_showincarplay_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_showincarplay_true","displayName":"True","description":null,"helpText":null}]},"87912cb88ac07e37":{"id":"com.apple.tcc.configuration-profile-policy_services_addressbook_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"8777a9097231f97f":{"id":"com.apple.universalaccess_stickykeybeeponmodifier","displayName":"Sticky Key Beep On Modifier","description":"If true, enables the beep when a modifier key is set for Sticky Keys.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_stickykeybeeponmodifier_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_stickykeybeeponmodifier_true","displayName":"True","description":null,"helpText":null}]},"870286d207bcf820":{"id":"com.apple.xsan.preferences_onlymount","displayName":"Only Mount","description":"An array of Xsan or StorNext volume names. The Xsan client attempts to automatically mount these volumes at startup. The system administrator can mount additional volumes manually by using the xsanctl(8) mount command.","helpText":null,"infoUrls":[],"categoryId":"fd3717c1-dcf8-4038-b7f7-4ad3359a9d32","categoryName":"Xsan Preferences","options":null},"878f2a74839f864c":{"id":"device_vendor_msft_euiccs_{euicc}_profiles_{iccid}_servername","displayName":"Server Name","description":"Fully qualified domain name of the SM-DP+ that can download this profile. Must be set by the MDM when the ICCID subtree is created.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":null},"8702f19e6567ab96":{"id":"device_vendor_msft_policy_config_admx_dnsclient_turn_off_multicast","displayName":"Turn off multicast name resolution","description":"Specifies that link local multicast name resolution (LLMNR) is disabled on client computers.\r\n\r\nLLMNR is a secondary name resolution protocol. With LLMNR, queries are sent using multicast over a local network link on a single subnet from a client computer to another client computer on the same subnet that also has LLMNR enabled. LLMNR does not require a DNS server or DNS client configuration, and provides name resolution in scenarios in which conventional DNS name resolution is not possible.\r\n\r\nIf you enable this policy setting, LLMNR will be disabled on all available network adapters on the client computer.\r\n\r\nIf you disable this policy setting, or you do not configure this policy setting, LLMNR will be enabled on all available network adapters.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-turn-off-multicast"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_turn_off_multicast_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_turn_off_multicast_1","displayName":"Enabled","description":null,"helpText":null}]},"8748d2b6161cea3d":{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_sleep","displayName":"Disallow standby sleep states (S1-S3) when starting from a Windows to Go workspace","description":"\r\n\r\nSpecifies whether the PC can use standby sleep states (S1-S3) when starting from a Windows To Go workspace.\r\n\r\nIf you enable this setting, Windows, when started from a Windows To Go workspace, can't use standby states to make the PC sleep.\r\n\r\nIf you disable or don't configure this setting, Windows, when started from a Windows To Go workspace, can use standby states to make the PC sleep.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-externalboot#admx-externalboot-portableoperatingsystem-sleep"],"categoryId":"68a3b82d-d1f4-422d-bfee-2168ec260ad7","categoryName":"Portable Operating System","options":[{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_sleep_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_sleep_1","displayName":"Enabled","description":null,"helpText":null}]},"879e511afe281f0d":{"id":"device_vendor_msft_policy_config_admx_radar_wdiscenarioexecutionpolicy","displayName":"Configure Scenario Execution Level","description":"Determines the execution level for Windows Resource Exhaustion Detection and Resolution.\r\n\r\nIf you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows Resource Exhaustion problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows Resource Exhaustion problems and indicate to the user that assisted resolution is available.\r\n\r\nIf you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve any Windows Resource Exhaustion problems that are handled by the DPS.\r\n\r\nIf you do not configure this policy setting, the DPS will enable Windows Resource Exhaustion for resolution by default.\r\n\r\nThis policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured.\r\n\r\nNo system restart or service restart is required for this policy to take effect: changes take effect immediately.\r\n\r\nThis policy setting will only take effect when the Diagnostic Policy Service is in the running state. When the service is stopped or disabled, diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-radar#admx-radar-wdiscenarioexecutionpolicy"],"categoryId":"ffd1a98f-0fac-47fe-813f-7510d0dacbc3","categoryName":"Windows Resource Exhaustion Detection and Resolution","options":[{"id":"device_vendor_msft_policy_config_admx_radar_wdiscenarioexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_radar_wdiscenarioexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"87cdd8801c549870":{"id":"device_vendor_msft_policy_config_admx_scripts_run_startup_script_sync","displayName":"Run startup scripts asynchronously","description":"This policy setting lets the system run startup scripts simultaneously.\r\n\r\nStartup scripts are batch files that run before the user is invited to log on. By default, the system waits for each startup script to complete before it runs the next startup script.\r\n\r\nIf you enable this policy setting, the system does not coordinate the running of startup scripts. As a result, startup scripts can run simultaneously.\r\n\r\nIf you disable or do not configure this policy setting, a startup cannot run until the previous script is complete.\r\n\r\nNote: Starting with Windows Vista operating system, scripts that are configured to run asynchronously are no longer visible on startup, whether the \"Run startup scripts visible\" policy setting is enabled or not.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-startup-script-sync"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_run_startup_script_sync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_run_startup_script_sync_1","displayName":"Enabled","description":null,"helpText":null}]},"87d9dbda5d80bf39":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_profile","displayName":"Configure RemoteFX Adaptive Graphics","description":"This policy setting allows the administrator to configure the RemoteFX experience for Remote Desktop Session Host or Remote Desktop Virtualization Host servers. By default, the system will choose the best experience based on available nework bandwidth.\r\n\r\nIf you enable this policy setting, the RemoteFX experience could be set to one of the following options:\r\n1. Let the system choose the experience for the network condition\r\n2. Optimize for server scalability\r\n3. Optimize for minimum bandwidth usage\r\n\r\nIf you disable or do not configure this policy setting, the RemoteFX experience will change dynamically based on the network condition.\"\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-server-profile"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_profile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_profile_1","displayName":"Enabled","description":null,"helpText":null}]},"87131dcb12d93518":{"id":"device_vendor_msft_policy_config_browser_enableextendedbookstelemetry","displayName":"Enable Extended Books Telemetry","description":"This setting allows organizations to send extended telemetry on book usage from the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enableextendedbookstelemetry"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_enableextendedbookstelemetry_0","displayName":"Disabled","description":"Gather and send only basic diagnostic data, depending on the device configuration.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_enableextendedbookstelemetry_1","displayName":"Enabled","description":"Gather all diagnostic data.","helpText":null}]},"87659382f8bfc491":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nLeaving the policy unset means DefaultFileSystemWriteGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with FileSystemWriteAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8734b828930d73f5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_disabledschemesdesc","displayName":"List of disabled protocol schemes (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"87abe46af0f0bc48":{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode","displayName":"Configure Multiple Display Mode","description":"Set the default display arrangement as clone, extend, internalOnly, externalOnly or default Windows Settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#configuremultipledisplaymode"],"categoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","categoryName":"Display","options":[{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_0","displayName":"Default.","description":"Default.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_1","displayName":"Internal Only.","description":"Internal Only.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_2","displayName":"External Only.","description":"External Only.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_3","displayName":"Clone.","description":"Clone.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_4","displayName":"Extend.","description":"Extend.","helpText":null}]},"87ca9f3d6af338bb":{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies","displayName":"Security Zones: Do not allow users to change policies","description":"Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level.\n\nIf you enable this policy, the Custom Level button and security-level slider on the Security tab in the Internet Options dialog box are disabled.\n\nIf you disable this policy or do not configure it, users can change the settings for security zones.\n\nThis policy prevents users from changing security zone settings established by the administrator.\n\nNote: The \"Disable the Security page\" policy (located in \\User Configuration\\Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel), which removes the Security tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored.\n\nAlso, see the \"Security zones: Use only machine settings\" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotallowuserstochangepolicies"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"87c62e57af925b77":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00","displayName":"Logon options","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"875e5b62320418e2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~identity_nonmicrosoftaccountsigninenabled","displayName":"Enable sign-in to Microsoft Edge using non-Microsoft accounts","description":"This policy controls whether users can sign in to Microsoft Edge using non-Microsoft accounts, such as Google or Apple accounts.\n\nIf you enable this policy or don't configure it, users can sign in to Microsoft Edge with non-Microsoft accounts when the feature is available. Related sign-in entry points, such as Google or Apple sign-in buttons in the profile flyout and unified sign-in experience, are shown when available.\n\nIf you disable this policy, users can't sign in to Microsoft Edge with non-Microsoft accounts. Related sign-in entry points and code paths are hidden and disabled, regardless of related feature flag settings.\n\nUsers can still sign in with Microsoft accounts.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~identity_nonmicrosoftaccountsigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~identity_nonmicrosoftaccountsigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8788aa569cb83689":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled","displayName":"Double Click feature in Microsoft Edge enabled (only available in China)","description":"This policy lets you configure the double click feature in Microsoft Edge.\r\n\r\nDouble Click lets users close a tab by double clicking the left mouse button.\r\n\r\nIf you enable or don't configure this policy, you can use the double click feature to close a tab on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the double click feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"87b5d4f892c7d7e7":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled","displayName":"XFA support in native PDF reader enabled","description":"Lets the Microsoft Edge browser enable XFA (XML Forms Architecture) support in the native PDF reader and allows users to open XFA PDF files in the browser.\r\n\r\nIf you enable this policy, XFA support in the native PDF reader will be enabled.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not enable XFA support in the native PDF reader.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"87893d5b732263f5":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_clipboardallowedforurlsdesc","displayName":"Allow clipboard use on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"87404ee8a8fdd715":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist","displayName":"Browsing with Copilot Allowed URLs","description":"Allows you to define a list of URLs where browsing with Copilot is available. Users cannot modify this list.\r\n\r\nIf you enable this policy, browsing with Copilot is available only on the sites specified in the list. To allow a broader set of sites while blocking specific exceptions, configure this policy together with the 'BrowsingWithCopilotBlockList' (Browsing with Copilot Blocked URLs) policy. For example, you can include '*' to allow all sites, and then use the block list to restrict access to specific URLs.\r\n\r\nYou can define exceptions based on schemes, subdomains, ports, or origins. When multiple filters apply, the most specific match determines whether a URL is allowed or blocked. The block list takes precedence over the allow list.\r\n\r\nIf you disable or do not configure this policy, browsing with Copilot is unavailable on all sites, even if the 'AllowBrowsingWithCopilot' (Controls the availability of browsing with Copilot in Microsoft Edge.) policy is enabled.\r\n\r\nBrowsing with Copilot supports only HTTP and HTTPS protocols. Wildcards (*) are supported, and subdomains are matched even without wildcards. This policy applies only to the site origin; any path specified in the URL pattern is ignored. For guidance on formatting URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu\r\ncontoso.net\r\nlogin.contoso.us","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"87825241f67c2953":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled","displayName":"Allow suggestions from local providers","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\r\n\r\nIf you enable this policy, suggestions from local providers are used.\r\n\r\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions will not appear.\r\n\r\nIf you do not configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\r\n\r\nNote that some features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy.\r\n\r\nThis policy requires a browser restart to finish applying.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"87fd82259b5e223a":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended","displayName":"Configure the new tab page search box experience","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL).\r\n\r\n If you disable or don't configure this policy and:\r\n\r\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\r\n- If the address bar default search engine is not Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\r\n\r\n\r\nIf you enable this policy and set it to:\r\n\r\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\r\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\r\n\r\nPolicy options mapping:\r\n\r\n* bing (bing) = Search box (Recommended)\r\n\r\n* redirect (redirect) = Address bar\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: bing","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"87989b8f1565993e":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_printertypedenylistdesc","displayName":"Disable printer types on the deny list (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"87d7e971944cf790":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist","displayName":"Configure the Enterprise Mode Cloud Site List","description":"The Microsoft Edge Site Lists setting in the M365 Admin Center allows you to host your site list(s) in a compliant cloud location and manage the contents of your site list(s) through the built-in experience. This setting allows you to specify which site list within the M365 Admin Center to deploy to your users. The user must be signed into Microsoft Edge with a valid work or school account. Otherwise, Microsoft Edge will not download the site list from the cloud location.\r\n\r\nThis setting is applicable only when the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) setting is configured.\r\n\r\nIf you configure this policy, Microsoft Edge will use the specified site list. When enabled, you can enter the identifier of the site list that you created and published to the cloud in M365 Admin Center.\r\n\r\nThis setting takes precedence over Microsoft Edge's 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy as well as Internet Explorer's site list setting (Use the Enterprise mode IE website list). If you disable or don't configure this policy, Microsoft Edge will use the 'InternetExplorerIntegrationSiteList' policy instead.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"87e62aadb121453c":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion","displayName":"Target Version","description":"This policy setting allows you to specify a version number that you want to update Office to. For a list of version numbers, see http://go.microsoft.com/fwlink/?LinkId=616875.\r\n\r\nIf you enable this policy setting, you specify the version that you want to update Office to. The next time Office looks for updates, Office will try to update to that version. The version must be available where Office is configured to look for updates (for example, on a network share). \r\n\r\nIf you enable this policy setting, but you leave the version blank, Office is updated to the most current version that’s available at the update location for Office.\r\n\r\nIf you disable or don’t configure this policy setting, Office is updated to the most current version that’s available at the update location for Office, unless you specify a different version by using the Office Deployment Tool.\r\n\r\nImportant: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion_1","displayName":"Enabled","description":null,"helpText":null}]},"87eb4764565cb954":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic_userincontroloftheseapps","displayName":"Let Apps Access Graphics Capture Programmatic User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the programmatic screen capture setting for the listed apps. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"873c71f0d1760f8a":{"id":"device_vendor_msft_policy_config_start_hiderecentjumplists","displayName":"Hide Recent Jumplists","description":"Enabling this policy hides recent jumplists from appearing on the start menu/taskbar and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderecentjumplists"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hiderecentjumplists_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hiderecentjumplists_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"87964b9cf44540ad":{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinchangenotification","displayName":"Configure Telemetry Opt In Change Notification","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#configuretelemetryoptinchangenotification"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinchangenotification_0","displayName":"Enable telemetry change notifications.","description":"Enable telemetry change notifications.","helpText":null},{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinchangenotification_1","displayName":"Disable telemetry change notifications.","description":"Disable telemetry change notifications.","helpText":null}]},"87643a808ff44cfe":{"id":"device_vendor_msft_policy_config_webthreatdefense_notifyunsafeapp","displayName":"Notify Unsafe App","description":"Configures Enhanced Phishing Protection notifications for protecting passwords typed into M365 Office applications, Notepad, and Wordpad.","helpText":"","infoUrls":[],"categoryId":"20b71dc7-cf08-4534-9e52-d297dd071ca5","categoryName":"Enhanced Phishing Protection","options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_notifyunsafeapp_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifyunsafeapp_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"87bdab3deb8877c0":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_weeklytimeofday","displayName":"Weekly Schedule scan time","description":"Selects the time of day that the Defender weekly scan should run. For example, a value of 0=12:00AM, a value of 60=1:00AM, a value of 120=2:00, and so on, up to a value of 1380=11:00PM. The default value is 120.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":null},"87b2a8474f112a6b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_descriptioncolon13","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"87c61890e35f9cbf":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver_screensaverfilename","displayName":"Screen saver executable name (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"873c35ad0452eb56":{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmydocuments","displayName":"Remove Properties from the Documents icon context menu (User)","description":"This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.\r\n\r\nIf you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following:\r\n\r\nRight-clicks the My Documents icon.\r\nClicks the My Documents icon, and then opens the File menu.\r\nClicks the My Documents icon, and then presses ALT+ENTER.\r\n\r\nIf you disable or do not configure this policy setting, the Properties menu command is displayed.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nopropertiesmydocuments"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmydocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmydocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"87c74e45767ad984":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dcomcfg","displayName":"DCOM Configuration Extension (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-dcomcfg"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dcomcfg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dcomcfg_1","displayName":"Enabled","description":null,"helpText":null}]},"8724643af9e50338":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_disableregeditmode","displayName":"Disable regedit from running silently? (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_disableregeditmode_2","displayName":"Yes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_disableregeditmode_1","displayName":"No","description":null,"helpText":null}]},"87c4abdb64d5c088":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomminstartmenu","displayName":"Do not search communications (User)","description":"If you enable this policy the start menu search box will not search for communications.\r\n\r\nIf you disable or do not configure this policy, the start menu will search for communications, unless the user chooses not to in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchcomminstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomminstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomminstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"87cf3a37f4eb513e":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup","displayName":"Common 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2013 applications.\r\nMicrosoft Office Suite 2013 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2013 applications.\r\nIf you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2013 applications will continue to be backed up.\r\nIf you disable this policy setting, certain user settings which are common between the Microsoft Office Suite 2013 applications will not be backed up. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013commonbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"87de282ba8fff0db":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup","displayName":"Lync 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Lync 2016.\r\nMicrosoft Lync 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Lync 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Lync 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016lyncbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"87f98783863ae670":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch3","displayName":"Site URL 4 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"8714f3babef1bd4c":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxytype","displayName":"Proxy type (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxytype_3","displayName":"Autodetect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxytype_2","displayName":"Custom","description":null,"helpText":null}]},"877557a0f555db07":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_disablenetworksettings","displayName":"Hide Network Tab (User)","description":"This policy setting allows you to hide the Network tab.\r\n\r\nIf you enable this policy setting, the Network tab in Windows Media Player is hidden. The default network settings are used unless the user has previously defined network settings for the Player.\r\n\r\nIf you disable or do not configure this policy setting, the Network tab appears and users can use it to configure network settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-disablenetworksettings"],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_disablenetworksettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_disablenetworksettings_1","displayName":"Enabled","description":null,"helpText":null}]},"87f678c83fa210cc":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_httpcheckbox","displayName":"HTTP (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_httpcheckbox_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_httpcheckbox_1","displayName":"True","description":null,"helpText":null}]},"87fa7d725a86e702":{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenabletokenbroker","displayName":"Enables the use of Token Broker for AD FS authentication (User)","description":"This policy specifies whether Work Folders should use Token Broker for interactive AD FS authentication instead of its own OAuth2 token flow used in previous versions.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-workfoldersclient#admx-workfoldersclient-pol-userenabletokenbroker"],"categoryId":"87667b72-85ce-48c2-8023-e6db7f5fe739","categoryName":"Work Folders","options":[{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenabletokenbroker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenabletokenbroker_1","displayName":"Enabled","description":null,"helpText":null}]},"87d632b9756fc94b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_extensioninstallwhitelistdesc","displayName":"Extension IDs to exempt from the blacklist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"87fd407318c9bfeb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist","displayName":"Configure the list of force-installed apps and extensions (User)","description":"Setting the policy specifies a list of apps and extensions that install silently, without user interaction, and which users can't uninstall or turn off. Permissions are granted implicitly, including for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These 2 APIs aren't available to apps and extensions that aren't force-installed.)\r\n\r\nLeaving the policy unset means no apps or extensions are autoinstalled, and users can uninstall any app or extension in Google Chrome.\r\n\r\nThis policy superseeds ExtensionInstallBlocklist policy. If a previously force-installed app or extension is removed from this list, Google Chrome automatically uninstalls it.\r\n\r\nOn Microsoft® Windows® instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.\r\n\r\nOn macOS instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, or joined to a domain via MCX.\r\n\r\nThe source code of any extension may be altered by users through developer tools, potentially rendering the extension dysfunctional. If this is a concern, set the DeveloperToolsDisabled policy.\r\n\r\nEach list item of the policy is a string that contains an extension ID and, optionally, an \"update\" URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on chrome://extensions when in Developer mode. If specified, the \"update\" URL should point to an Update Manifest XML document ( https://developer.chrome.com/extensions/autoupdate ). By default, the Chrome Web Store's update URL is used. The \"update\" URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension's manifest.\r\n\r\n Note: This policy doesn't apply to Incognito mode. Read about hosting extensions ( https://developer.chrome.com/extensions/hosting ).\r\n\r\nExample value:\r\n\r\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"877f38679a9a4eb2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl","displayName":"Enterprise Logo URL for a managed profile (User)","description":"A URL to an image that will be used as an enterprise badge for a managed profile. The URL must point to an image.\r\n\r\nThis policy can only be set as a user policy.\r\n\r\nIt is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 48 x 48 px.\r\n\r\nExample value: https://example.com/image.png","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_1","displayName":"Enabled","description":null,"helpText":null}]},"8738a1324d368a4b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_screencapturewithoutgestureallowedfororiginsdesc","displayName":"Allow screen capture without prior user gesture (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"87dcdb55d2cfa08d":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showpasteoptionsbuttonwhencontentispasted","displayName":"Show Paste Options button when content is pasted (User)","description":"This policy setting sets the \"Show Paste Options button when content is pasted\" option found under File tab | Options | Advanced | Cut, copy, and paste options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will show the Paste Options button after inserting cells, rows, or columns that contain formatting. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will not display the Paste Options buttons on paste.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showpasteoptionsbuttonwhencontentispasted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showpasteoptionsbuttonwhencontentispasted_1","displayName":"Enabled","description":null,"helpText":null}]},"87181cf74a06cd06":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowsmartscreenie"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"8768ed1feda1be46":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500","displayName":"Protected Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"879a8a12b51847a1":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1","displayName":"Specify server (User)","description":"\r\nSpecifies how Microsoft Lync identifies the server.\r\n\r\nIf you enable this policy setting, you must specify the server name that Microsoft Lync uses.\r\n\r\nIf you disable this policy setting, Microsoft Lync uses a DNS lookup to identify the server.\r\n\r\nIf you do not configure this policy setting, the user can choose automatic configuration, or the user can specify the name of the server in Microsoft Lync user preferences. To set the user preferences, from the Microsoft Lync Tools menu, click Options, click the Personal tab, within the SIP Communications My Account area click Advanced, select Configure Settings, type the server name in the Server name field.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_1","displayName":"Enabled","description":null,"helpText":null}]},"87a06fec17342f13":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1","displayName":"Require logon credentials (User)","description":"\r\nRequires the user to provide logon credentials for Microsoft Lync rather than automatically using the Windows credentials when Microsoft Lync authenticates the user using NTLM or Kerberos.\r\n\r\nIf you enable this policy setting, Microsoft Lync requires the user to provide logon credentials.\r\n\r\nIf you disable or do not configure this policy setting, Microsoft Lync authenticates the user based on the logon credentials for Windows.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1_1","displayName":"Enabled","description":null,"helpText":null}]},"87997b49ae56889a":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_sleepingtabsblockedforurlsdesc","displayName":"Block Sleeping Tabs on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":null},"875e010f161c486a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceother","displayName":"Replace AD - Other (User)","description":"This policy setting allows you to customize the 8th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"other phone\" of line 8.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 8 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceother_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceother_1","displayName":"Enabled","description":null,"helpText":null}]},"875996be14fd8e0e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltinigxgraphics","displayName":"Disable built-in graphics (User)","description":"Specify whether or not to show the built-in SmartArt Graphics.","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltinigxgraphics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltinigxgraphics_1","displayName":"Enabled","description":null,"helpText":null}]},"87296c63c56fef4b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_errorseveritylevel","displayName":"Error Severity Level (User)","description":"Specify the severity level of errors included in the log file created when loading layouts for SmartArt graphic layouts. Choosing Errors only will result in the smallest possible log file and choosing All will result in the largest log file.","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_errorseveritylevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_errorseveritylevel_1","displayName":"Enabled","description":null,"helpText":null}]},"8793b44039df12b9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_ibibio","displayName":"Ibibio (User)","description":"Enables the editing language Ibibio","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_ibibio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_ibibio_1","displayName":"Enabled","description":null,"helpText":null}]},"8744f8e6ed994c9f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog03","displayName":"Trusted Catalog Location #3 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog03_1","displayName":"Enabled","description":null,"helpText":null}]},"87f00538ceb0e2f6":{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior_l_authenticationfbabehaviorenum","displayName":"Behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior_l_authenticationfbabehaviorenum_1","displayName":"Block all prompts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior_l_authenticationfbabehaviorenum_2","displayName":"Ask the user what to do for each new host","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior_l_authenticationfbabehaviorenum_3","displayName":"Show prompts only from allowed hosts","description":null,"helpText":null}]},"8750c76fd5c64132":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifyratetosampleaudiobitssecond","displayName":"Specify rate to sample audio (bits/second) (User)","description":"Specifies the default sample rate (value is in kHz) used when recording audio. If the appropriate codec is found, then this is the default sample rate used in the Format setting for Linked Audio found under File tab | Options | Audio & Video.","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifyratetosampleaudiobitssecond_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifyratetosampleaudiobitssecond_1","displayName":"Enabled","description":null,"helpText":null}]},"87bf7afb37ac6c10":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_numberofbackupcopiestokeep","displayName":"Number of backup copies to keep (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"c02141e6-0725-4f6f-9138-83d10c6bc104","categoryName":"Backup","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_numberofbackupcopiestokeep_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_numberofbackupcopiestokeep_1","displayName":"Enabled","description":null,"helpText":null}]},"875dd54c19e0b80f":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autokeyboardswitching","displayName":"Auto Keyboard Switching (User)","description":"Check/Unchecks the option ''Switch keyboards automatically''.","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autokeyboardswitching_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autokeyboardswitching_1","displayName":"Enabled","description":null,"helpText":null}]},"8763668f449f3c80":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections","displayName":"Time interval (minutes) to lock password protected sections: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1979a12b-2a72-438d-9de7-320d1b38e777","categoryName":"Password","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_1","displayName":"1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_5","displayName":"5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_10","displayName":"10","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_15","displayName":"15","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_30","displayName":"30","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_60","displayName":"60","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_120","displayName":"120","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_240","displayName":"240","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_480","displayName":"480","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_720","displayName":"720","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_timeintervalminutestolockpasswordprotectedsections_1440","displayName":"1440","description":null,"helpText":null}]},"8763e7c4c13a5ae7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_optionscustomizeribbon_l_displaydevelopertab","displayName":"Display Developer tab in the Ribbon (User)","description":"This policy setting controls whether the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you enable this policy setting, the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you disable this policy setting, the Developer tab will not be displayed in the Ribbon.\r\n\r\nIf you do not configure this policy setting, the Developer tab will not be displayed in the Ribbon, but its visibility can be changed via a setting in the application Options dialog box.","helpText":"","infoUrls":[],"categoryId":"fa6bfb01-34f6-4c54-89b9-f7e717e6d394","categoryName":"Customize Ribbon","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_optionscustomizeribbon_l_displaydevelopertab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_optionscustomizeribbon_l_displaydevelopertab_1","displayName":"Enabled","description":null,"helpText":null}]},"879f45a83aaf19fe":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_showcontactslinkingcontrolsonallforms","displayName":"Show Contacts linking controls on all Forms (User)","description":"By default, Tasks, Appointments, Journal Entries, and Contacts hide the controls in the Outlook user interface used for linking related contacts. When you enable this setting, the linking controls appear in Outlook. You might choose to enable this setting if your users rely on contact linking - for example, to track partners who attend appointments together or to track ways in which contacts are related to each other.","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_showcontactslinkingcontrolsonallforms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_showcontactslinkingcontrolsonallforms_1","displayName":"Enabled","description":null,"helpText":null}]},"87539dd3db020cd9":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_descriptioncolon70","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"8795709c8d4a952e":{"id":"user_vendor_msft_policy_config_word16v11~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_alternateclplabelcontentmarkanchoringoption","displayName":"Use an alternate method of anchoring content marks from CLP labels (User)","description":"This policy setting switches Word to use a alternate method of anchoring content marks associated with CLP labels, which can improve layout for some content marks.\r\n\r\nIf you enable this policy setting, Word will use the alternate content mark anchoring method.\r\n\r\nIf you disable or don't configure this policy setting, Word will use the original content mark anchoring method.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v11~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_alternateclplabelcontentmarkanchoringoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v11~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_alternateclplabelcontentmarkanchoringoption_1","displayName":"Enabled","description":null,"helpText":null}]},"87940d11233a13a1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_disableofficestartword","displayName":"Disable the Office Start screen for Word (User)","description":"This policy setting controls whether the Office Start screen appears on boot for Word.\r\n\r\nIf you enable this policy setting, users will not see the Office Start screen when they boot Word.\r\n\r\nIf you disable or do not configure this policy setting, users will see the Office Start screen when they boot Word.\r\n\r\nNote: This policy setting is overridden by the policy setting \"Microsoft Office 2016 > Miscellaneous > Disable the Office Start screen for all Office applications\" if that policy setting is set.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_disableofficestartword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_disableofficestartword_1","displayName":"Enabled","description":null,"helpText":null}]},"877fef080b2c37d9":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_descriptioncolon74","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/88.json b/public/intune-definitions/88.json new file mode 100644 index 000000000000..ad1343cb6095 --- /dev/null +++ b/public/intune-definitions/88.json @@ -0,0 +1 @@ +{"88acef79b745d05f":{"id":"ade_accountsettings_adminaccountname","displayName":"Admin account username","description":"The account name for the administrator account. This field is to be defaulted to 'Admin'. For macOS ADE enrollment policies without user device affinity, we recommend configuring {{serialNumber}} as the unique identifier of userless devices.","helpText":"","infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":null},"88528fd5c25c604c":{"id":"com.android.devicerestrictionpolicy.passwordminimumsymbolcharacters","displayName":"Number of symbol characters required","description":"Enter the number of symbol characters (&, #, %, and so on) the password must have, between 1 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"887e8b0824e435a5":{"id":"com.apple.assetcache.managed_peerlocalsubnetsonly","displayName":"Peer Local Subnets Only","description":"If true, the content cache only peers with other content caches on the same immediate local network, rather than with content caches that use the same public IP address as the device. When Peer Local Subnets Only is true, it overrides the configuration of Peer Filter Ranges and Peer Listen Ranges. If the network changes, the local network peering restrictions update appropriately. If false, the content cache defers to Peer Filter Ranges and Peer Listen Ranges for configuring the peering restrictions.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_peerlocalsubnetsonly_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_peerlocalsubnetsonly_true","displayName":"True","description":null,"helpText":null}]},"88b1e48510cc5b93":{"id":"com.apple.cellularprivatenetwork.managed_datasetname","displayName":"Data Set Name","description":"The name of the private network configuration data set.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"88f43b82c36116c3":{"id":"com.apple.managedclient.preferences_proactiveauthworkflowenabled","displayName":"Enable proactive authentication","description":"This policy controls the proactive authentication in Microsoft Edge, that connects the signed-in user identity with Microsoft Bing, MSN and Copilot services for a smooth and consistent sign-in experience.\n\nIf you enable or don't configure this policy, Microsoft Edge authentication requests are automatically sent to the services using the account that is signed-in to the browser.\n\nIf you disable this policy, Microsoft Edge does not send authentications requests to these services and users will need to manually sign-in.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#proactiveauthworkflowenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_proactiveauthworkflowenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proactiveauthworkflowenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"889653a2a1335c75":{"id":"com.apple.managedclient.preferences_urlallowlist","displayName":"Define a list of allowed URLs","description":"Allow access to the listed URLs, as exceptions to the URL block list.\n\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\n\nYou can use this policy to open exceptions to restrictive block lists. For example, you can include '*' in the block list to block all requests, and then use this policy to allow access to a limited list of URLs. You can use this policy to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths.\n\nThe most specific filter determines if a URL is blocked or allowed. The allowed list takes precedence over the block list.\n\nThis policy is limited to 1000 entries; subsequent entries are ignored.\n\nIf you don't configure this policy, there are no exceptions to the block list in the \"URLBlocklist\" policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#urlallowlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"887d9ebee0d7153d":{"id":"com.apple.mcx.filevault2_outputpath","displayName":"Output Path","description":"The path to the location where the recovery key and computer information property list are stored.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":null},"88a7957fc5cc4f7c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.accessibilityimagelabelsenabled","displayName":"Let screen reader users get image descriptions from Microsoft","description":"Lets screen reader users get descriptions of unlabeled images on the web.\n\nIf you enable or don't configure this policy, users have the option of using an anonymous Microsoft service. This service provides automatic descriptions for unlabeled images users encounter on the web when they're using a screen reader.\n\nIf you disable this policy, users can't enable the Get Image Descriptions from Microsoft feature.\n\nWhen this feature is enabled, the content of images that need a generated description is sent to Microsoft servers to generate a description.\n\nNo cookies or other user data is sent to Microsoft, and Microsoft doesn't save or log any image content.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.accessibilityimagelabelsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.accessibilityimagelabelsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"88997f2658c035cf":{"id":"com.microsoft.edge.mamedgeappconfigsettings.imagesallowedforurls","displayName":"Allow images on these sites","description":"Define a list of sites, based on URL patterns, that can display images.\n\nIf you don't configure this policy, the global default value is used for all sites either from the \"DefaultImagesSetting\" policy (if set) or the user's personal configuration.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards (*) are allowed.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"881f49124711326e":{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefcredentialswhenntlmonly_concatenatedefaults_adcn","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefcredentialswhenntlmonly_concatenatedefaults_adcn_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefcredentialswhenntlmonly_concatenatedefaults_adcn_1","displayName":"True","description":null,"helpText":null}]},"88bc068e46fb2255":{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxyserver_kdcproxyserver","displayName":"Define KDC proxy servers settings:","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":null},"8804f6c1a5eea25f":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_allowondomain","displayName":"Allow operation while in domain","description":null,"helpText":"","infoUrls":[],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_allowondomain_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_lltd_enablerspndr_allowondomain_1","displayName":"True","description":null,"helpText":null}]},"88472e6b40f6158e":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_certificate_template_policy","displayName":"Server authentication certificate template","description":"This policy setting allows you to specify the name of the certificate template that determines which certificate is automatically selected to authenticate an RD Session Host server.\r\n\r\nA certificate is needed to authenticate an RD Session Host server when TLS 1.0, 1.1 or 1.2 is used to secure communication between a client and an RD Session Host server during RDP connections.\r\n\r\nIf you enable this policy setting, you need to specify a certificate template name. Only certificates created by using the specified certificate template will be considered when a certificate to authenticate the RD Session Host server is automatically selected. Automatic certificate selection only occurs when a specific certificate has not been selected.\r\n\r\nIf no certificate can be found that was created with the specified certificate template, the RD Session Host server will issue a certificate enrollment request and will use the current certificate until the request is completed. If more than one certificate is found that was created with the specified certificate template, the certificate that will expire latest and that matches the current name of the RD Session Host server will be selected.\r\n\r\nIf you disable or do not configure this policy, the certificate template name is not specified at the Group Policy level. By default, a self-signed certificate is used to authenticate the RD Session Host server. \r\n\r\nNote: If you select a specific certificate to be used to authenticate the RD Session Host server, that certificate will take precedence over this policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-certificate-template-policy"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_certificate_template_policy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_certificate_template_policy_1","displayName":"Enabled","description":null,"helpText":null}]},"880a25f81eba62a1":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_chainloggingrate","displayName":"ChainLoggingRate","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"88b00e48666c2399":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_minpollinterval","displayName":"MinPollInterval","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"88551c0e456ce96f":{"id":"device_vendor_msft_policy_config_applicationcontrol_policies_{policyguid}_xml","displayName":"App Control for Business policy","description":"The format of the XML property list varies depending on the settings you are configuring for the ApplicationControl CSP. Microsoft Endpoint Manager will validate the XML format; but not validate the settings behaviour, the settings applicability nor sign the policy binary. ApplicationControl CSP supports base and supplemental policies for devices running the Windows 1903 build and later. Supplemental policies are required to loosen a base policy; and are always less restrictive. A supplemental policy needs to support a specific base policy that has been deployed to the same client. If not, there is no effect on assigned Windows devices.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide"],"categoryId":"56b82fc9-c632-4c76-bb4f-dcf8757f003e","categoryName":null,"options":null},"88b9dc0dc0d7d1aa":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_screensketch","displayName":"Snipping Tool (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_screensketch_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_screensketch_1","displayName":"True","description":null,"helpText":null}]},"88a286f4a7802943":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites","displayName":"Block JavaScript from using JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are not allowed to run JavaScript JIT (Just In Time) compiler enabled.\r\n\r\nDisabling the JavaScript JIT will mean that Google Chrome may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Google Chrome to render web content in a more secure configuration.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.site.com will not correctly apply to site.com or subdomain.site.com since they both resolve to the same eTLD+1 (site.com) for which there is no policy. In this case, policy must be set on site.com to apply correctly for both site.com and subdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if site-one.com is listed in the JavaScriptJitBlockedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript JIT disabled, but site-two.com will use the policy from DefaultJavaScriptJitSetting, if set, or default to JavaScript JIT enabled.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptJitSetting applies to the site, if set, otherwise JavaScript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"888503d03def2cf5":{"id":"device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning","displayName":"Allow Full Scan Removable Drive Scanning","description":"Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning_0","displayName":"Not allowed. Turns off scanning on removable drives.","description":"Not allowed. Turns off scanning on removable drives.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning_1","displayName":"Allowed. Scans removable drives.","description":"Allowed. Scans removable drives.","helpText":null}]},"88cb5c69f67f9bf8":{"id":"device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow","displayName":"Prevent enabling lock screen slide show","description":"Disables the lock screen slide show settings in PC Settings and prevents a slide show from playing on the lock screen.\n\nBy default, users can enable a slide show that will run after they lock the machine.\n\nIf you enable this setting, users will no longer be able to modify slide show settings in PC Settings, and no slide show will ever start.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-devicelock#devicelock-preventlockscreenslideshow"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow_1","displayName":"Enabled","description":null,"helpText":null}]},"88cee726488ae712":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowsmartscreenie"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"88afc0b9a3553615":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"8863e5ae5e87446d":{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize","displayName":"Set maximum Kerberos SSPI context token buffer size","description":"This policy setting allows you to set the value returned to applications which request the maximum size of the SSPI context token buffer size.\r\n \r\nThe size of the context token buffer determines the maximum size of SSPI context tokens an application expects and allocates. Depending upon authentication request processing and group memberships, the buffer might be smaller than the actual size of the SSPI context token. \r\n\r\nIf you enable this policy setting, the Kerberos client or server uses the configured value, or the locally allowed maximum value, whichever is smaller.\r\n\r\nIf you disable or do not configure this policy setting, the Kerberos client or server uses the locally configured value or the default value. \r\n\r\nNote: This policy setting configures the existing MaxTokenSize registry value in HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters, which was added in Windows XP and Windows Server 2003, with a default value of 12,000 bytes. Beginning with Windows 8 the default is 48,000 bytes. Due to HTTP's base64 encoding of authentication context tokens, it is not advised to set this value more than 48,000 bytes.\r\n\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-setmaximumcontexttokensize"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_1","displayName":"Enabled","description":null,"helpText":null}]},"88b7e9fd2f17b43e":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_messagetextforusersattemptingtologon","displayName":"Interactive Logon Message Text For Users Attempting To Log On","description":"Interactive logon: Message text for users attempting to log on This security setting specifies a text message that is displayed to users when they log on. This text is often used for legal reasons, for example, to warn users about the ramifications of misusing company information or to warn them that their actions may be audited. Default: No message.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_messagetextforusersattemptingtologon"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"88b78436698d35c3":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm","displayName":"Network Security Allow Local System To Use Computer Identity For NTLM","description":"Network security: Allow Local System to use computer identity for NTLM This policy setting allows Local System services that use Negotiate to use the computer identity when reverting to NTLM authentication. If you enable this policy setting, services running as Local System that use Negotiate will use the computer identity. This might cause some authentication requests between Windows operating systems to fail and log an error. If you disable this policy setting, services running as Local System that use Negotiate when reverting to NTLM authentication will authenticate anonymously. By default, this policy is enabled on Windows 7 and above. By default, this policy is disabled on Windows Vista. This policy is supported on at least Windows Vista or Windows Server 2008. Note: Windows Vista or Windows Server 2008 do not expose this setting in Group Policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_allowlocalsystemtousecomputeridentityforntlm"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm_0","displayName":"Block","description":"Block","helpText":null}]},"8851c71fb94a53e8":{"id":"device_vendor_msft_policy_config_mixedreality_automaticdisplayadjustment","displayName":"Automatic Display Adjustment","description":"This policy controls if the HoloLens displays will be automatically adjusted for your eyes to improve hologram visual quality when an user wears the device. When this feature is enabled, a new user upon wearing the device will not be prompted to calibrate and yet the displays will be adjusted to suite them automatically. However if an immersive application is launched that depends on eye tracking interactions, the user will be prompted to perform the calibration.","helpText":"","infoUrls":[],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_automaticdisplayadjustment_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_automaticdisplayadjustment_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"88c4b9e8f155b516":{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo_enableodignorelistfromgpolistbox","displayName":"Keywords: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"8871b0eaaaf72210":{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy","displayName":"Configure Redirection Guard","description":"\nDetermines whether Redirection Guard is enabled for the print spooler.\n\nYou can enable this setting to configure the Redirection Guard policy being applied to spooler.\n\nIf you disable or do not configure this policy setting, Redirection Guard will default to being 'Enabled'.\n\nIf you enable this setting you may select the following options:\n\n-- Enabled : Redirection Guard will prevent any file redirections from being followed\n\n-- Disabed : Redirection Guard will not be enabled and file redirections may be used within the spooler process\n\n-- Audit : Redirection Guard will log events as though it were enabled but will not actually prevent file redirections from being used within the spooler.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configureredirectionguardpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"88f5d9ac0b987108":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices","displayName":"Let Apps Access Trusted Devices","description":"This policy setting specifies whether Windows apps can access trusted devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"888c33382b323012":{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge","displayName":"Target Channel override","description":"Specifies which Channel Microsoft Edge should be updated to.\r\n\r\nIf you enable this poicy, the Microsoft Edge will be updated to the Channel according to how you configure the following options:\r\n\r\n - Stable: Microsoft Edge will be updated to the latest stable version.\r\n - Beta: Microsoft Edge will be updated to the latest beta version.\r\n - Dev: Microsoft Edge will be updated to the latest dev version.\r\n - Extended Stable: Microsoft Edge will be updated to the latest extended stable version, which follows a longer release cadence than stable. For more information, visit https://go.microsoft.com/fwlink/?linkid=2163508.\r\n\r\nIf you do not configure this policy, Microsoft Edge will be updated to the latest version available for the default Channel.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"8899c9e966ef9485":{"id":"user_vendor_msft_pde_protectfolders_protectpictures","displayName":"Protect Pictures (User)","description":"Allows the Admin to enable Personal Data Encryption on Pictures folder. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"categoryId":"1d5e7986-870c-444b-bf09-78bbf82a53fa","categoryName":"Personal Data Encryption","options":[{"id":"user_vendor_msft_pde_protectfolders_protectpictures_0","displayName":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","description":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","helpText":null},{"id":"user_vendor_msft_pde_protectfolders_protectpictures_1","displayName":"Enable Personal Data Encryption on the folder.","description":"Enable Personal Data Encryption on the folder.","helpText":null}]},"8857b68c9e2b1eaa":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffhistorybasedpredictiveinput","displayName":"Turn off history-based predictive input (User)","description":"This policy setting allows you to turn off history-based predictive input.\r\n\r\nIf you enable this policy setting, history-based predictive input is turned off.\r\n\r\nIf you disable or do not configure this policy setting, history-based predictive input is on by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffhistorybasedpredictiveinput"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffhistorybasedpredictiveinput_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffhistorybasedpredictiveinput_1","displayName":"Enabled","description":null,"helpText":null}]},"8880df1bf374145b":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013","displayName":"Microsoft Office 365 Lync 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Lync 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Lync 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365lync2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013_1","displayName":"Enabled","description":null,"helpText":null}]},"8877f82f901833c7":{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute_quiethoursdailyendminutecontrol","displayName":"Minutes after midnight: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","categoryName":"Notifications","options":null},"8868ded198cff442":{"id":"user_vendor_msft_policy_config_browser_preventlivetiledatacollection","displayName":"Prevent Live Tile Data Collection (User)","description":"This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventlivetiledatacollection"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_preventlivetiledatacollection_0","displayName":"Disabled","description":"Collect and send Live Tile metadata.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventlivetiledatacollection_1","displayName":"Enabled","description":"No data collected.","helpText":null}]},"88e56279f215d8d4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_policylistmultiplesourcemergelistdesc","displayName":"Allow merging list policies from different sources (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"88e65713a0eee8bc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist","displayName":"Configure extension installation allow list (User)","description":"Setting the policy specifies which extensions are not subject to the blocklist.\r\n\r\nA blocklist value of * means all extensions are blocked and users can only install extensions listed in the allow list.\r\n\r\nBy default, all extensions are allowed. But, if you prohibited extensions by policy, use the list of allowed extensions to change that policy.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"88c633bdcbfd74a1":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_promptforworkbookproperties","displayName":"Prompt for workbook properties (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_promptforworkbookproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_promptforworkbookproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"88fa1a44650ecf98":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles","displayName":"Excel 2 macrosheets and add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"88547194c9ae5ea5":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":null},"88aafdf50759e2e7":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"8890c64f8ede1570":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709","displayName":"Enable dragging of content from different domains across windows (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3","displayName":"Disable","description":null,"helpText":null}]},"888f464c345793f5":{"id":"user_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled","displayName":"Enable Printing LPAC Sandbox (User)","description":"Setting this policy to Enabled or leaving it unset enables the LPAC Sandbox for printing services when the system configuration supports it.\r\n\r\nSetting this policy to Disabled has a detrimental effect on Microsoft Edge's security because services used for printing might run in a weaker sandbox configuration.\r\n\r\nOnly turn this policy off if there are compatibility issues with third party software that prevent printing services from operating correctly inside the LPAC Sandbox.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"88e4f1a679096573":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended","displayName":"Discover feature In Microsoft Edge (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.\r\n\r\nThis policy lets you configure the Discover feature in Microsoft Edge.\r\n\r\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\r\n\r\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"880ae666ae7eaca6":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains_enhancesecuritymodebypasslistdomainsdesc","displayName":"Configure the list of domains for which enhance security mode will not be enforced (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"883538985a53bbde":{"id":"user_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_diagnostics_l_configuregetdiagnostics_l_configuregetdiagnosticsenum","displayName":"Configure Get Diagnostics: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e86f24d3-8531-4298-b064-692ea795b1d9","categoryName":"Diagnostics","options":[{"id":"user_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_diagnostics_l_configuregetdiagnostics_l_configuregetdiagnosticsenum_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_diagnostics_l_configuregetdiagnostics_l_configuregetdiagnosticsenum_1","displayName":"Upload diagnostic logs to Microsoft","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_diagnostics_l_configuregetdiagnostics_l_configuregetdiagnosticsenum_2","displayName":"Capture diagnostic logs in a local archive, dont upload logs to Microsoft","description":null,"helpText":null}]},"882c28f343865460":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastserviceminorversion2","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"88d09760f8dd59a7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehomeadd_l_homeaddmapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"88a11788e51b8e1c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltincolorvariations","displayName":"Disable built-in color variations (User)","description":"Specify whether or not to show the built-in color variations.","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltincolorvariations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_disablebuiltincolorvariations_1","displayName":"Enabled","description":null,"helpText":null}]},"88d0850637170d14":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_odia","displayName":"Odia (User)","description":"Enables the editing language Odia","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_odia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_odia_1","displayName":"Enabled","description":null,"helpText":null}]},"88568d96cac4d2fc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changedestinationurlforsharepointhyperlink_l_changedestinationurlforsharepointhyperlinkid","displayName":"Destination URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"88291f2b81a82553":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13","displayName":"Workflow Cache 13 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_1","displayName":"Enabled","description":null,"helpText":null}]},"88bd30c1b5b63358":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_emailcollection","displayName":"Allow Microsoft to follow up on feedback submitted by users (User)","description":"This policy setting controls whether Microsoft can follow up on feedback submitted by users to help understand the feedback, troubleshoot an issue submitted through feedback, or share back how Microsoft used the feedback to improve the product.\r\n\r\nMicrosoft may send transactional emails or request follow-up conversations via email, voice, or other means related to the feedback or survey response. In some circumstances, Microsoft may ask for additional information to assist with troubleshooting.\r\n\r\nIf you enable this policy setting, Microsoft may follow up on feedback submitted. \r\n\r\nIf you disable or don’t configure this policy setting, Microsoft will not follow up on feedback submitted by your users.\r\n\r\nComing soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center.\r\n\r\nNote: This policy setting has no effect if the \"Allow users to submit feedback to Microsoft\" policy setting or the “Allow users to receive and respond to in-product surveys from Microsoft” policy setting is set to Disabled.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2142253","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_emailcollection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_emailcollection_1","displayName":"Enabled","description":null,"helpText":null}]},"885406f558fcc15a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage","displayName":"Outbox Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Outbox Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"8819e14d77732f05":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings_l_minimumkeysizeinbits","displayName":"Minimum key size (in bits): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":null},"882eff92f3e571b7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookrestartmanagerretrylimit_l_outlookrestartmanagerretrylimitspinid","displayName":"(1 - 10 occurrences) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":null},"880eb2658243bc74":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_defaultcustomtab","displayName":"Show custom templates tab by default in PowerPoint on the Office Start screen and in File | New (User)","description":"This policy setting controls whether custom templates (when they exist) show as the default tab in PowerPoint on the Office Start screen and in File | New. \r\n\r\nIf you enable this policy setting, users will the see custom templates tab as the default tab in PowerPoint on the Office Start screen and in File | New when templates exist (this can include Custom XML programmed templates, templates in the Workgroup templates path, templates in the Personal templates path, or SharePoint templates).\r\n\r\nIf you disable or do not configure this policy setting, users will see the Featured templates tab as the default tab in PowerPoint on the Office Start screen and in File | New, unless all Office-provided templates have been disabled.","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_defaultcustomtab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_defaultcustomtab_1","displayName":"Enabled","description":null,"helpText":null}]},"884d3ad66c6bf17c":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_powerpointdesigner_l_powerpointdesigneroptions","displayName":"[Deprecated] PowerPoint Designer Options (User)","description":"Important: This policy setting is no longer supported and will be removed in a future release. Please use the \"PowerPoint Designer Options\" policy setting from the PowerPoint policy set instead.\r\n\r\nThis policy setting allows an administrator to enable or disable PowerPoint Designer","helpText":"","infoUrls":[],"categoryId":"77ca5e78-a1fe-456e-9814-034b1ea2658d","categoryName":"PowerPoint Designer","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_powerpointdesigner_l_powerpointdesigneroptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_powerpointdesigner_l_powerpointdesigneroptions_1","displayName":"Enabled","description":null,"helpText":null}]},"88502b1d4aa4a8bb":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm","displayName":"Specify CNG random number generator algorithm (User)","description":"This policy setting allows you to configure the CNG random number generator to use.\r\n\r\nIf you enable this policy setting, the random number generator specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default random number generator will be used.","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"8807e31cad0974c8":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_offlineediting_l_savecheckedoutfilesto","displayName":"Save checked-out files to (User)","description":"This policy setting allows you to choose if checked-out files are saved to the server drafts location or the web server. \r\n\r\nIf you enable this policy setting, you can choose where checked-out files are saved:\r\n- Server drafts location: The server drafts location on this computer\r\n- Web server: The web server\r\n\r\nIf you disable or do not configure this policy setting, checked-out files are stored in the server drafts location.","helpText":"","infoUrls":[],"categoryId":"2eed22da-106f-4c93-9a45-5ce803b50233","categoryName":"Offline Editing","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_offlineediting_l_savecheckedoutfilesto_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_offlineediting_l_savecheckedoutfilesto_1","displayName":"Enabled","description":null,"helpText":null}]},"88a9dedc613efc4a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_l_allowsubfolders27","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_l_allowsubfolders27_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_l_allowsubfolders27_1","displayName":"True","description":null,"helpText":null}]},"884d2df2f622722f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_pathcolon60","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"88bd5f34bd831397":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_descriptioncolon82","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/89.json b/public/intune-definitions/89.json new file mode 100644 index 000000000000..b7eed49b5a20 --- /dev/null +++ b/public/intune-definitions/89.json @@ -0,0 +1 @@ +{"893597a1323412fc":{"id":"com.apple.applicationaccess_allowvideoconferencingremotecontrol","displayName":"Allow Video Conferencing Remote Control (Deprecated)","description":"If `false`, disables the ability for a remote FaceTime session to request control of the device.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowvideoconferencingremotecontrol_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowvideoconferencingremotecontrol_true","displayName":"True","description":null,"helpText":null}]},"89d763b56f932f84":{"id":"com.apple.dock_persistent-apps_item_tile-data_file-type","displayName":"File Type","description":"The type of file","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_persistent-apps_item_tile-data_file-type_0","displayName":"URL","description":null,"helpText":null},{"id":"com.apple.dock_persistent-apps_item_tile-data_file-type_1","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_persistent-apps_item_tile-data_file-type_2","displayName":"Directory","description":null,"helpText":null}]},"89bbe9d57f00c375":{"id":"com.apple.extensiblesso_platformsso_enablecreateuseratlogin","displayName":"Enable Create User At Login","description":"Enables creating new users at the login window with either Passwords or SmartCards. Requires 'UseSharedDeviceKeys' is true.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_enablecreateuseratlogin_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_enablecreateuseratlogin_true","displayName":"Enabled","description":null,"helpText":null}]},"899d15db2ec51481":{"id":"com.apple.managedclient.preferences_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads","description":"Controls whether ads are blocked on sites with intrusive ads. You can set this policy to one of the following options:\n\n* 1 = Allow ads on all sites.\n\n* 2 = Block ads on sites with intrusive ads (Default value).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#adssettingforintrusiveadssites"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_adssettingforintrusiveadssites_0","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_adssettingforintrusiveadssites_1","displayName":"Block ads on sites with intrusive ads. (Default value)","description":null,"helpText":null}]},"89d216f17c33513e":{"id":"com.apple.managedclient.preferences_efficiencymodeonpowerenabled","displayName":"Enable efficiency mode when the device is connected to a power source","description":"Allows efficiency mode to become active when the device is connected to a power source. On devices with no battery, this policy has no effect.\n\nIf you enable this policy, efficiency mode will become active when the device is connected to a power source.\n\nIf you disable or don't configure this policy, efficiency mode will never become active when the device is connected to a power source.\n\nThis policy has no effect if the \"EfficiencyModeEnabled\" policy is disabled.\n\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#efficiencymodeonpowerenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_efficiencymodeonpowerenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_efficiencymodeonpowerenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"891902ba5217baa4":{"id":"com.apple.managedclient.preferences_proxysettings","displayName":"Proxy Settings","description":"Configures the proxy settings for Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge ignores all proxy-related options specified from the command line.\n\nIf you don't configure this policy, users can choose their own proxy settings.\n\nThis policy overrides the following individual policies:\n\n\"ProxyMode\"\n\"ProxyPacUrl\"\n\"ProxyServer\"\n\"ProxyBypassList\"\n\nThe ProxyMode field lets you specify the proxy server used by Microsoft Edge and prevents users from changing proxy settings.\n\nThe ProxyPacUrl field is a URL to a proxy .pac file.\n\nThe ProxyServer field is a URL for the proxy server.\n\nThe ProxyBypassList field is a list of proxy hosts that Microsoft Edge bypasses.\n\nIf you choose the 'direct' value as 'ProxyMode', a proxy is never used and all other fields are ignored.\n\nIf you choose the 'system' value as 'ProxyMode', the systems's proxy is used and all other fields are ignored.\n\nIf you choose the 'auto_detect' value as 'ProxyMode', all other fields are ignored.\n\nIf you choose the 'fixed_server' value as 'ProxyMode', the 'ProxyServer' and 'ProxyBypassList' fields are used.\n\nIf you choose the 'pac_script' value as 'ProxyMode', the 'ProxyPacUrl' and 'ProxyBypassList' fields are used.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#proxysettings"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"89aae537752f7971":{"id":"com.apple.mcx_cachedaccounts.expiry.delete.disusedseconds","displayName":"Expiry Delete Disused Seconds","description":"The minimum number of seconds a mobile account can exist before an automatic attempt is made to remove the mobile account. Set to 0 to try to remove it at next login or logout time. Set to -1 to never try to remove the mobile account.","helpText":null,"infoUrls":[],"categoryId":"ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","categoryName":"Mobile Accounts","options":null},"899c019295c06933":{"id":"com.apple.mcx_com.apple.mcx-mobileaccounts","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","categoryName":"Mobile Accounts","options":null},"8993cfd9865f4156":{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"896a300853a31f96":{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"89d28bbc9cc94d57":{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_recommended","displayName":"Allow HTTPS-Only Mode to be enabled (users can override)","description":"This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigation to HTTPS.\n\nIf this setting isn't set or is set to Allowed, users are able to enable HTTPS-Only Mode.\nIf this setting is set to Disallowed, HTTPS-Only Mode will be disabled.\nIf this setting is set to Force Enabled, HTTPS-Only Mode is enabled in Strict mode.\nIf this setting is set to Force Balance Enabled, HTTPS-Only Mode is enabled in Balanced mode.\n\nThe settings Force Enabled and Force Enabled can be recommended to users. HTTPS-Only Mode will be set to Strict or Balanced initially, but users are allowed to change it.\n\nIf you set this policy to a value that isn't supported by the version of Microsoft Edge that receives the policy, Microsoft Edge defaults to the Allowed setting.\n\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\n\nPolicy options mapping:\n\n* allowed (allowed) = Don't restrict users' HTTPS-Only Mode setting\n\n* disallowed (disallowed) = Disable HTTPS-Only Mode\n\n* force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode\n\n* force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_recommended_allowed","displayName":"Don't restrict users' HTTPS-Only Mode setting","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_recommended_disallowed","displayName":"Disable HTTPS-Only Mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_recommended_force_enabled","displayName":"Force enable HTTPS-Only Mode in Strict mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_recommended_force_balanced_enabled","displayName":"Force enable HTTPS-Only Mode in Balanced Mode","description":null,"helpText":null}]},"891b7e43ecfa4886":{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow websites to make requests to any network endpoint in an insecure manner. (Obsolete)","description":"Controls whether websites are allowed to make requests to more-private network endpoints.\n\nWhen this policy is enabled, all Private Network Access checks are disabled for all origins. This may allow attackers to perform cross-site request forgery (CSRF) attacks on private network servers.\n\nWhen this policy is disabled or not configured, the default behavior for requests to more-private network endpoints depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests, PrivateNetworkAccessSendPreflights, and PrivateNetworkAccessRespectPreflightResults feature flags. These flags may be controlled by experimentation or set via the command line.\n\nThis policy relates to the Private Network Access specification. See https://wicg.github.io/private-network-access/ for more details.\n\nA network endpoint is more private than another if:\n1) Its IP address is localhost and the other isn't.\n2) Its IP address is private and the other is public.\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\n\nWhen this policy enabled, websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.\n\nThis policy is obsolete. The previous blanket override has been replaced by the permission-based Local Network Access model, which blocks cross-space requests until users grant explicit consent.","helpText":null,"infoUrls":[],"categoryId":"43057320-7058-46d5-86f9-a56c80bbf8b9","categoryName":"Private Network Request Settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"89e914032e971317":{"id":"device_vendor_msft_policy_config_admx_devicesetup_driversearchplaces_searchorderconfiguration","displayName":"Specify search order for device driver source locations","description":"This policy setting allows you to specify the order in which Windows searches source locations for device drivers. \r\n\r\nIf you enable this policy setting, you can select whether Windows searches for drivers on Windows Update unconditionally, only if necessary, or not at all.\r\n\r\nNote that searching always implies that Windows will attempt to search Windows Update exactly one time. With this setting, Windows will not continually search for updates. This setting is used to ensure that the best software will be found for the device, even if the network is temporarily available.\r\n\r\nIf the setting for searching only if needed is specified, then Windows will search for a driver only if a driver is not locally available on the system.\r\n\r\nIf you disable or do not configure this policy setting, members of the Administrators group can determine the priority order in which Windows searches source locations for device drivers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-devicesetup#admx-devicesetup-driversearchplaces-searchorderconfiguration"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_devicesetup_driversearchplaces_searchorderconfiguration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_devicesetup_driversearchplaces_searchorderconfiguration_1","displayName":"Enabled","description":null,"helpText":null}]},"89ab8cd47d19e0ec":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornonewincomp_chk","displayName":"Report all errors in Windows components.","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornonewincomp_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornonewincomp_chk_1","displayName":"True","description":null,"helpText":null}]},"895f0f41953366ec":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_2","displayName":"Reminder balloon frequency","description":"Determines how often reminder balloon updates appear.\r\n\r\nIf you enable this setting, you can select how often reminder balloons updates appear and also prevent users from changing this setting.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the update interval.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To set reminder balloon frequency without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the \"Display reminder balloons every ... minutes\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-reminderfreq-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_2_1","displayName":"Enabled","description":null,"helpText":null}]},"89bbe03bad1f31e8":{"id":"device_vendor_msft_policy_config_admx_smartcard_allowcertificateswithnoeku","displayName":"Allow certificates with no extended key usage certificate attribute","description":"This policy setting lets you allow certificates without an Extended Key Usage (EKU) set to be used for logon.\r\n\r\nIn versions of Windows prior to Windows Vista, smart card certificates that are used for logon require an enhanced key usage (EKU) extension with a smart card logon object identifier. This policy setting can be used to modify that restriction.\r\n\r\nIf you enable this policy setting, certificates with the following attributes can also be used to log on with a smart card:\r\n- Certificates with no EKU\r\n- Certificates with an All Purpose EKU\r\n- Certificates with a Client Authentication EKU\r\n\r\nIf you disable or do not configure this policy setting, only certificates that contain the smart card logon object identifier can be used to log on with a smart card.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-allowcertificateswithnoeku"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_allowcertificateswithnoeku_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_allowcertificateswithnoeku_1","displayName":"Enabled","description":null,"helpText":null}]},"890e02503b4fd54a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.site.com will not correctly apply to site.com or subdomain.site.com since they both resolve to the same eTLD+1 (site.com) for which there is no policy. In this case, policy must be set on site.com to apply correctly for both site.com and subdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if site-one.com is listed in the JavaScriptJitAllowedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript JIT enabled, but site-two.com will use the policy from DefaultJavaScriptJitSetting, if set, or default to JavaScript JIT enabled.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptJitSetting applies to the site, if set, otherwise Javascript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"8910ce0607a16c7d":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate","displayName":"Locked-Down Restricted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownrestrictedsiteszonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"893bc0e44a0bfcac":{"id":"device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation","displayName":"Check for server certificate revocation","description":"This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have been compromised or are no longer valid, and this option protects users from submitting confidential data to a site that may be fraudulent or not secure.\n\nIf you enable this policy setting, Internet Explorer will check to see if server certificates have been revoked.\n\nIf you disable this policy setting, Internet Explorer will not check server certificates to see if they have been revoked.\n\nIf you do not configure this policy setting, Internet Explorer will not check server certificates to see if they have been revoked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-checkservercertificaterevocation"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_1","displayName":"Enabled","description":null,"helpText":null}]},"89a100bb3c7ae92b":{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport","displayName":"Turn off encryption support","description":"This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0, or SSL 3.0 in the browser. TLS and SSL are protocols that help protect communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other’s list of supported protocols and versions, and they select the most preferred match.\n\nIf you enable this policy setting, the browser negotiates or does not negotiate an encryption tunnel by using the encryption methods that you select from the drop-down list.\n\nIf you disable or do not configure this policy setting, the user can select which encryption method the browser supports.\n\nNote: SSL 2.0 is off by default and is no longer supported starting with Windows 10 Version 1607. SSL 2.0 is an outdated security protocol, and enabling SSL 2.0 impairs the performance and functionality of TLS 1.0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableencryptionsupport"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_1","displayName":"Enabled","description":null,"helpText":null}]},"89195e00765adc6b":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowsmartscreenie"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"89d0f367c2b99559":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"8963830fc2d1d626":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled","displayName":"Allows users to edit favorites","description":"Enable this policy to let users add, remove, and modify favorites. This is the default behavior if you don't configure the policy.\r\n\r\nDisable this policy to stop users from adding, removing, or modifying favorites. They can still use existing favorites.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"89405c1c02b88cf6":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended","displayName":"Disable synchronization of data using Microsoft sync services","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\r\n\r\nIf you don't set this policy or apply it as recommended, users will be able to turn sync on or off. If you apply this policy as mandatory, users will not be able to turn sync on.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"8954b8cdf2d4ba0a":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_extensionextendedbackgroundlifetimeforportconnectionstourlsdesc","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"8915b941fae5ffb4":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_outlookexe176","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_outlookexe176_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_outlookexe176_1","displayName":"True","description":null,"helpText":null}]},"894f4a1531c20aef":{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays","displayName":"Delay downloading and installing updates for Office","description":"This policy setting allows you to delay downloading and installing updates for Office by a specified number of days.\r\n\r\nNote: This policy setting won’t apply if you are using some other method to manage updates. For example, if you use System Center Configuration Manager to deploy Office updates or if you use Group Policy to specify a target version. Also, updates won’t be delayed if you are switching Office to a different update channel.\r\n\r\nIf you enable this policy setting, Office will delay downloading and applying updates by the number of days specified. The maximum value that you can specify is 14. If you specify 0, Office will download and apply updates as soon as Office detects that updates are available.\r\n\r\nNote: If you have also specified a deadline for updates to be installed, the deadline won't be considered until after the delay that you specify with this policy setting.\r\n\r\nIf you disable or don’t configure this policy setting, Office will download and apply updates as soon as Office detects that updates are available.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus, as well as subscription versions of Visio and Project.","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays_1","displayName":"Enabled","description":null,"helpText":null}]},"896764d559f8dd02":{"id":"device_vendor_msft_policy_config_system_allowexperimentation","displayName":"Allow Experimentation","description":"NoteThis policy is not supported in Windows 10, version 1607. This policy setting determines the level that Microsoft can experiment with the product to study user preferences or device behavior. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowexperimentation"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowexperimentation_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowexperimentation_1","displayName":"Permits Microsoft to configure device settings only.","description":"Permits Microsoft to configure device settings only.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowexperimentation_2","displayName":"Allows Microsoft to conduct full experimentation.","description":"Allows Microsoft to conduct full experimentation.","helpText":null}]},"892ed6fe0b6238fa":{"id":"keyboardsettings_allowpredictivetext","displayName":"Allow Predictive Text","description":"If `false`, disables predictive text.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowpredictivetext_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowpredictivetext_true","displayName":"True","description":null,"helpText":null}]},"89fac1fad5ee1c90":{"id":"linux_mdatp_managed_antivirusengine_exclusionsmergepolicy","displayName":"Exclusions merge","description":"Specify the merge policy for exclusions. This can be a combination of administrator-defined and user-defined exclusions (merge) or only administrator-defined exclusions (admin_only). This setting can be used to restrict local users from defining their own exclusions.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#exclusion-merge-policy"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_exclusionsmergepolicy_0","displayName":"merge","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusionsmergepolicy_1","displayName":"admin_only","description":null,"helpText":null}]},"89d67b09052a655b":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk","displayName":"Trust logic for file attachments (User)","description":"This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments.\r\n\r\nPreferring the file handler instructs Windows to use the file handler data over the file type data. For example, trust notepad.exe, but don't trust .txt files.\r\n\r\nPreferring the file type instructs Windows to use the file type data over the file handler data. For example, trust .txt files, regardless of the file handler.\r\n\r\nUsing both the file handler and type data is the most restrictive option. Windows chooses the more restrictive recommendation which will cause users to see more trust prompts than choosing the other options.\r\n\r\nIf you enable this policy setting, you can choose the order in which Windows processes risk assessment data.\r\n\r\nIf you disable this policy setting, Windows uses its default trust logic, which prefers the file handler over the file type.\r\n\r\nIf you do not configure this policy setting, Windows uses its default trust logic, which prefers the file handler over the file type.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-estimatefilehandlerrisk"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_1","displayName":"Enabled","description":null,"helpText":null}]},"89dcec7f3a418f63":{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_nologoff","displayName":"Remove Logoff (User)","description":"This policy setting disables or removes all menu items and buttons that log the user off the system.\r\n\r\nIf you enable this policy setting, users will not see the Log off menu item when they press Ctrl+Alt+Del. This will prevent them from logging off unless they restart or shutdown the computer, or clicking Log off from the Start menu.\r\n\r\nAlso, see the 'Remove Logoff on the Start Menu' policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can see and select the Log off menu item when they press Ctrl+Alt+Del.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ctrlaltdel#admx-ctrlaltdel-nologoff"],"categoryId":"5536b5f4-3d31-4290-acea-9bef323bb83d","categoryName":"Ctrl Alt Del Options","options":[{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_nologoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_nologoff_1","displayName":"Enabled","description":null,"helpText":null}]},"89cb478d181f2d51":{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktop","displayName":"Disable Active Desktop (User)","description":"Disables Active Desktop and prevents users from enabling it.\r\n\r\nThis setting prevents users from trying to enable or disable Active Desktop while a policy controls it.\r\n\r\nIf you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it.\r\n\r\nNote: If both the \"Enable Active Desktop\" setting and the \"Disable Active Desktop\" setting are enabled, the \"Disable Active Desktop\" setting is ignored. If the \"Turn on Classic Shell\" setting (in User Configuration\\Administrative Templates\\Windows Components\\Windows Explorer) is enabled, Active Desktop is disabled, and both these policies are ignored.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-noactivedesktop"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktop_1","displayName":"Enabled","description":null,"helpText":null}]},"8934b35ce9c09f09":{"id":"user_vendor_msft_policy_config_admx_startmenu_quicklaunchenabled","displayName":"Show QuickLaunch on Taskbar (User)","description":"This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.\r\n\r\nIf you enable this policy setting, the QuickLaunch bar will be visible and cannot be turned off.\r\n\r\nIf you disable this policy setting, the QuickLaunch bar will be hidden and cannot be turned on.\r\n\r\nIf you do not configure this policy setting, then users will be able to turn the QuickLaunch bar on and off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-quicklaunchenabled"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_quicklaunchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_quicklaunchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"891e74359c45803f":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"89485a17b03b7b39":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowfontdownloads"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"890409edb80ccfbb":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"8916e758ee511176":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled","displayName":"Spell checking provided by Microsoft Editor (User)","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages.\r\n\r\nIf you enable or don't configure this policy, Microsoft Editor spell check can be used for eligible text fields.\r\n\r\nIf you disable this policy, spell check can only be provided by local engines that use platform or Hunspell services. The results from these engines might be less informative than the results Microsoft Editor can provide.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is set to disabled, or the user disables spell checking in the settings page, this policy will have no effect.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8953bae0e00bad7a":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled","displayName":"Configure whether a user always has a default profile automatically signed in with their work or school account (User)","description":"This policy determines if a user can remove the Microsoft Edge profile automatically signed in with a user's work or school account.\r\n\r\nIf you enable this policy, a non-removable profile will be created with the user's work or school account on Windows. This profile can't be signed out or removed.\r\n\r\nIf you disable or don't configure this policy, the profile automatically signed in with a user's work or school account on Windows can be signed out or removed by the user.\r\n\r\nIf you want to configure browser sign in, use the 'BrowserSignin' (Browser sign-in settings) policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"897a17f688b70129":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support (User)","description":"Enable support for Signed HTTP Exchange (SXG).\r\n\r\nIf this policy isn't set or enabled, Microsoft Edge will accept web contents served as Signed HTTP Exchanges.\r\n\r\nIf this policy is set to disabled, Signed HTTP Exchanges can't be loaded.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"89d1021df1bb25c1":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_sslerroroverrideallowedfororiginsdesc","displayName":"Allow users to proceed from the HTTPS warning page for specific origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"890be91281d977b7":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls","displayName":"Automatically grant sites permission to connect to USB serial devices (User)","description":"Setting the policy lets you list sites that are automatically granted permission to access USB serial devices with vendor and product IDs that match the vendor_id and product_id fields.\r\n\r\nOptionally you can omit the product_id field. This enables site access to all the vendor's devices. When you provide a product ID, then you give the site access to a specific device from the vendor but not all devices.\r\n\r\nThe URLs must be valid, or the policy is ignored. Only the origin (scheme, host, and port) of the URL is considered.\r\n\r\nThis policy overrides 'DefaultSerialGuardSetting' (Control use of the Serial API), 'SerialAskForUrls' (Allow the Serial API on specific sites), 'SerialBlockedForUrls' (Block the Serial API on specific sites) and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the Web Serial API. To grant access to USB devices through the WebUSB API see the 'WebUsbAllowDevicesForUrls' (Grant access to specific sites to connect to specific USB devices) policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://specific-device.example.com\"\r\n ]\r\n },\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://all-vendor-devices.example.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"89871df4f303c748":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations","displayName":"Menu animations (User)","description":"Checks/Unchecks the corresponding UI option. This option only applies to CommandBars UI.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_1","displayName":"Enabled","description":null,"helpText":null}]},"89ba473596261c12":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicypublisher","displayName":"Disallow in Publisher (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicypublisher_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicypublisher_1","displayName":"True","description":null,"helpText":null}]},"89594abb3b431920":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_additionalpermissionsrequesturl","displayName":"Additional permissions request URL (User)","description":"Specifies a location where a user can obtain more information about getting access to IRM content.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_additionalpermissionsrequesturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_additionalpermissionsrequesturl_1","displayName":"Enabled","description":null,"helpText":null}]},"89de0399566a5f9c":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_turnofflinkcreationwith","displayName":"Turn off link creation with [[ ]] (User)","description":"This policy setting allows you to turn off link creation with [[ ]]. OneNote allows users to automatically create links by putting [[ ]] around a term. OneNote will then automatically create a new page in that section and create a link on that text.\r\n\r\nIf you enable this policy setting, users will not be able to use [[ ]] to create a link and a new page.\r\n\r\nIf you disable or do not configure this policy setting, OneNote will automatically create links when users use [[ ]].","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_turnofflinkcreationwith_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_turnofflinkcreationwith_1","displayName":"Enabled","description":null,"helpText":null}]},"8924f15dfe1b36c8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_descriptioncolon66","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"893639a782edc1af":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_setnumberofplacesintherecentplaceslist","displayName":"Number of folders in the Recent Folders list (User)","description":"This policy setting specifies the number of unpinned entries displayed in the Recent Folders list that appears when users click Open or Save As on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of unpinned entries to be between 0 and 20. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 5 unpinned items are displayed in the Recent Folders list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Folders list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","categoryName":"General options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_setnumberofplacesintherecentplaceslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_setnumberofplacesintherecentplaceslist_1","displayName":"Enabled","description":null,"helpText":null}]},"89ece0c6aea71369":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text","displayName":"Text (User)","description":"Specifies the unit of measure for indents, line spacing and other text measurements. The default unit for type size is points (1 point = 1/72 in.). You can enter type size in another unit of measure (for example, 1ft or 12 in) but you can't change the default.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text_1","displayName":"Enabled","description":null,"helpText":null}]},"890c57237a13360c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc04_l_descriptioncolon22","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"899200203a61a28b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems174_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0f42fc50-66c8-4b70-9904-64f8d662c930","categoryName":"Custom","options":null},"8953618b6c5d8cf4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},"89d02d8a3e5fe0a4":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_app_filepath","displayName":"File Path","description":"The file path of an app is simply its location on the client device. For example, C:\\Windows\\System\\Notepad.exe or %WINDIR%\\Notepad.exe. You can define one application to be used in each Firewall rule. If you specify multiple conditions in a single rule, these will be treated as an AND operation. i.e program=svchost.exe AND service=mpssvc, etc. All of the app related conditions in a single rule work to scope the traffic even further, so they must all correspond to the specific app/service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"899b856911a6e7cb":{"id":"vendor_msft_firewall_mdmstore_privateprofile_defaultoutboundaction","displayName":"Default Outbound Action","description":"This value is the action that the firewall does by default (and evaluates at the very end) on outbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 0 [Allow]. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_defaultoutboundaction_0","displayName":"Allow","description":"Allow Outbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_defaultoutboundaction_1","displayName":"Block","description":"Block Outbound By Default","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/8a.json b/public/intune-definitions/8a.json new file mode 100644 index 000000000000..3eb05d3d2442 --- /dev/null +++ b/public/intune-definitions/8a.json @@ -0,0 +1 @@ +{"8aadbba675ab32d8":{"id":"com.android.devicerestrictionpolicy.bluetoothblockconfigurationaosp","displayName":"Block Bluetooth configuration","description":"If 'True', prevents users from configuring Bluetooth on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to configure Bluetooth.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.bluetoothblockconfigurationaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.bluetoothblockconfigurationaosp_true","displayName":"True","description":"True","helpText":null}]},"8aadb538179f4ac9":{"id":"com.android.devicerestrictionpolicy.microphoneforcemute","displayName":"Block microphone adjustment","description":"If 'True', prevents users from unmuting the microphone and adjusting the microphone volume. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to use and adjust the volume of the microphone on the device. Available for fully managed, dedicated and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.microphoneforcemute_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.microphoneforcemute_false","displayName":"False","description":"false","helpText":null}]},"8a37e3d8a15cb7b6":{"id":"com.apple.applicationaccess_allowcallrecording","displayName":"Allow Call Recording","description":"If false, call recording is disabled.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcallrecording_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcallrecording_true","displayName":"True","description":null,"helpText":null}]},"8affb6eef1d21454":{"id":"com.apple.applicationaccess_ratingmoviesde","displayName":"Rating Movies - Germany","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesde_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesde_1","displayName":"Ab 0 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesde_2","displayName":"Ab 6 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesde_3","displayName":"Ab 12 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesde_4","displayName":"Ab 16 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesde_5","displayName":"Ab 18 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesde_6","displayName":"All","description":null,"helpText":null}]},"8a9e682ba7368906":{"id":"com.apple.caldav.account_caldavport","displayName":"Cal DAV Port","description":"The server’s port.","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":null},"8a6c28f5aeb11c0c":{"id":"com.apple.cellular_attachapn_username","displayName":"Username","description":"The user name for the APN.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"8a841e47313da7a7":{"id":"com.apple.finder_prohibiteject","displayName":"Prohibit Eject","description":"If true, users are prevented from ejecting any mounted volumes or media attached to the Mac.","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":[{"id":"com.apple.finder_prohibiteject_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.finder_prohibiteject_true","displayName":"True","description":null,"helpText":null}]},"8a162ec74496d0a8":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_application id","displayName":"Microsoft Edge Canary Application ID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"8a5ab8734da95309":{"id":"com.apple.notificationsettings_notificationsettings_item_criticalalertenabled","displayName":"Critical Alert Enabled","description":"If true, enables critical alerts that can ignore Do Not Disturb and ringer settings for this app. Available in iOS 12 and later and macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":[{"id":"com.apple.notificationsettings_notificationsettings_item_criticalalertenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.notificationsettings_notificationsettings_item_criticalalertenabled_true","displayName":"True","description":null,"helpText":null}]},"8a01d1f168ff2ece":{"id":"com.apple.systemconfiguration_proxies_fallbackallowed","displayName":"Fall Back Allowed","description":"If true, enables fallback.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_fallbackallowed_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_fallbackallowed_1","displayName":"True","description":null,"helpText":null}]},"8acd673da9ded5b1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgesidebarappurlhostblocklist","displayName":"Control which apps cannot be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that cannot be opened in sidebar.\n\nIf you don't configure this policy, a user can open any app in sidebar.\n\nIf the \"HubsSidebarEnabled\" policy is disabled, this list isn't used and no sidebar can be opened.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.\n\nNote: A blocklist value of '*' means all apps are blocked unless they are explicitly listed in the \"EdgeSidebarAppUrlHostAllowList\" policy.\n\nStarting in Microsoft Edge version 149, the \"Microsoft365CopilotChatIconEnabled\" policy controls the display of Copilot in the sidebar.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"8a24b05fd70c3d48":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_logeventoverlimit","displayName":"Log event when quota limit is exceeded","description":"This policy setting determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume, and prevents users from changing the logging setting.\r\n\r\nIf you enable this policy setting, the system records an event when the user reaches their limit. If you disable this policy setting, no event is recorded. Also, when you enable or disable this policy setting, the system disables the \"Log event when a user exceeds their quota limit\" option on the Quota tab, so administrators cannot change the setting while a setting is in effect.\r\n\r\nIf you do not configure this policy setting, no events are recorded, but administrators can use the Quota tab option to change the setting.\r\n\r\nThis policy setting is independent of the enforcement policy settings for disk quotas. As a result, you can direct the system to log an event, regardless of whether or not you choose to enforce the disk quota limit.\r\n\r\nAlso, this policy setting does not affect the Quota Entries window on the Quota tab. Even without the logged event, users can detect that they have reached their limit, because their status in the Quota Entries window changes.\r\n\r\nNote: To find the logging option, in My Computer, right-click the name of an NTFS file system volume, click Properties, and then click the Quota tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-diskquota#admx-diskquota-dq-logeventoverlimit"],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":[{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_logeventoverlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_logeventoverlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"8a3c7c3295a3170a":{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_roothubconnectedenstordevices","displayName":"Allow only USB root hub connected Enhanced Storage devices","description":"This policy setting configures whether or not only USB root hub connected Enhanced Storage devices are allowed. Allowing only root hub connected Enhanced Storage devices minimizes the risk of an unauthorized USB device reading data on an Enhanced Storage device.\r\n\r\nIf you enable this policy setting, only USB root hub connected Enhanced Storage devices are allowed.\r\n\r\nIf you disable or do not configure this policy setting, USB Enhanced Storage devices connected to both USB root hubs and non-root hubs will be allowed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-enhancedstorage#admx-enhancedstorage-roothubconnectedenstordevices"],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_roothubconnectedenstordevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_roothubconnectedenstordevices_1","displayName":"Enabled","description":null,"helpText":null}]},"8ad1abfaaf4a0674":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_additionalactiontimeout","displayName":"Configure time out for detections requiring additional action","description":"This policy setting configures the time in minutes before a detection in the \"additional action\" state moves to the \"cleared\" state.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-additionalactiontimeout"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_additionalactiontimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_additionalactiontimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"8a6b3d497620c5c4":{"id":"device_vendor_msft_policy_config_admx_msi_disableflyweightpatching_disableflyweightpatching","displayName":"Prohibit Flyweight Patching","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disableflyweightpatching_disableflyweightpatching_1","displayName":"Patch Optimization Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disableflyweightpatching_disableflyweightpatching_0","displayName":"Patch Optimization On","description":null,"helpText":null}]},"8ab68a7ac76b034a":{"id":"device_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_2_customclasses_list","displayName":"GUID for custom removable storage class:","description":null,"helpText":"","infoUrls":[],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":null},"8a9eaf2d9205331f":{"id":"device_vendor_msft_policy_config_admx_settingsync_disableapplicationsettingsync_checkbox_useroverride","displayName":"Allow users to turn \"app settings\" syncing on.","description":null,"helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disableapplicationsettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disableapplicationsettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"8a86316018dded23":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013","displayName":"Microsoft Office 365 Access 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Access 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Access 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365access2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013_1","displayName":"Enabled","description":null,"helpText":null}]},"8ab916a9d33c58c2":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_user_refresh_onlogon_options","displayName":"User Publishing Refresh On Logon","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_user_refresh_onlogon_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_user_refresh_onlogon_options_1","displayName":"True","description":null,"helpText":null}]},"8a96dd9c657b1722":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_user_refresh_unit_options","displayName":"User Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_user_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_user_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"8af048a40fd36cb4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax","displayName":"Maximum SSL version enabled","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_1","displayName":"Enabled","description":null,"helpText":null}]},"8ae48d041bcbac64":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades","description":"Google Chrome attempts to upgrade some\r\nnavigations from HTTP to HTTPS, when possible. This policy can be used to\r\ndisable this behavior. If set to \"true\" or left unset, this feature will be\r\nenabled by default.\r\n\r\nThe separate HttpAllowlist policy\r\ncan be used to exempt specific hostnames or hostname patterns from being\r\nupgraded to HTTPS by this feature.\r\n\r\nSee also the HttpsOnlyMode policy.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8aeadbf223452646":{"id":"device_vendor_msft_policy_config_defender_allowuseruiaccess","displayName":"Allow User UI Access","description":"Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#allowuseruiaccess"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowuseruiaccess_0","displayName":"Not allowed. Prevents users from accessing UI.","description":"Not allowed. Prevents users from accessing UI.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowuseruiaccess_1","displayName":"Allowed. Lets users access UI.","description":"Allowed. Lets users access UI.","helpText":null}]},"8a585671b92cd3b9":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros","displayName":"Block Win32 API calls from Office macros","description":"This rule prevents VBA macros from calling Win32 APIs.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_warn","displayName":"Warn","description":null,"helpText":null}]},"8a694a99f9c9cc0b":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelaycacheserverfallbackforeground","displayName":"DO Delay Cache Server Fallback Foreground","description":"For foreground downloads that use a cache server, specifies the time to wait before falling back to download from the original HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelaycacheserverfallbackforeground"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"8a5e0b1df11e5b2a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_ccdcachedirectory","displayName":"Cache Directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"f2d139ed-a314-48b7-b700-4d11adfcc309","categoryName":"Cloud Cache Service","options":null},"8a4f9571fea7da57":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams","displayName":"Include Teams","description":"Teams data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeTeams\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams_1","displayName":"Enabled","description":null,"helpText":null}]},"8aed160ebb3379cc":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809","displayName":"Use Pop-up Blocker","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_3","displayName":"Disable","description":null,"helpText":null}]},"8a66c90ff46171b3":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowaccesstodatasources"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"8a21bd7ad7c99998":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"8a3d3aa4e57ef040":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows","displayName":"Enable dragging of content from different domains within a window","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy setting or do not configure it, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"8a138c93c6c96f97":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts","displayName":"Network Access Do Not Allow Anonymous Enumeration Of SAM Accounts","description":"Network access: Do not allow anonymous enumeration of SAM accounts This security setting determines what additional permissions will be granted for anonymous connections to the computer. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. This security option allows additional restrictions to be placed on anonymous connections as follows: Enabled: Do not allow enumeration of SAM accounts. This option replaces Everyone with Authenticated Users in the security permissions for resources. Disabled: No additional restrictions. Rely on default permissions. Default on workstations: Enabled. Default on server:Enabled. Important This policy has no impact on domain controllers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_donotallowanonymousenumerationofsamaccounts"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts_0","displayName":"Disabled","description":"Disabled","helpText":null}]},"8a3883833352a540":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_applicationlocalevalue","displayName":"Application locale (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"8a3ea080b4d36f09":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API","description":"Set whether websites can access connected USB devices. You can completely block access or ask the user each time a website wants to get access to connected USB devices.\r\n\r\nYou can override this policy for specific URL patterns by using the 'WebUsbAskForUrls' (Allow WebUSB on specific sites) and 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policies.\r\n\r\nIf you don't configure this policy, sites can ask users whether they can access the connected USB devices (3) by default, and users can change this setting.\r\n\r\n* 2 = Don't allow any site to request access to USB devices via the WebUSB API\r\n\r\n* 3 = Allow sites to ask the user to grant access to a connected USB device","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"8a188b651875ff47":{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled","displayName":"Origin-keyed agent clustering enabled by default","description":"The Origin-Agent-Cluster: HTTP header controls whether a document is isolated in an origin-keyed agent cluster or in a site-keyed agent cluster. This has security implications because an origin-keyed agent cluster allows isolating documents by origin. The consequence of this for developers is that the document.domain accessor can no longer be set when origin-keyed agent clustering is enabled.\r\n\r\nIf you enable or don't configure this policy, documents without the Origin-Agent-Cluster: header will be assigned to origin-keyed agent clustering by default. On these documents, the document.domain accessor will not be settable.\r\n\r\nIf you disable this policy, documents without the Origin-Agent-Cluster: header will be assigned to site-keyed agent clusters by default. On these documents, the document.domain accessor will be settable.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2191896 for additional details.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8af13498ac767883":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled","displayName":"Enable using roaming copies for Microsoft Edge profile data","description":"Enable this policy to use roaming profiles on Windows. The settings stored in Microsoft Edge profiles (favorites and preferences) are also saved to a file stored in the Roaming user profile folder (or the location specified by the administrator through the 'RoamingProfileLocation' (Set the roaming profile directory) policy).\r\n\r\nIf you disable this policy or don't configure it, only the regular local profiles are used.\r\n\r\nThe 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) policy disables all data synchronization, overriding policy.\r\n\r\nSee https://docs.microsoft.com/windows-server/storage/folder-redirection/deploy-roaming-user-profiles for more information on using roaming user profiles.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8a6b368d66c75719":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled","displayName":"Enable 3DES cipher suites in TLS (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 96.\r\n\r\n'This policy was removed in version 97 after 3DES was removed from Microsoft Edge.\r\n\r\nIf the policy is set to true, then 3DES cipher suites in TLS will be enabled. If it is set to false, they will be disabled. If the policy is unset, 3DES cipher suites are disabled by default. This policy may be used to temporarily retain compatibility with an outdated server. This is a stopgap measure and the server should be reconfigured.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8aa227e42e440a70":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol","displayName":"Configure users ability to override feature flags (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"eb6409fc-fb52-413d-ae4b-eff017b52b30","categoryName":"Experimentation","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_2","displayName":"Allow users to override feature flags using command line arguments only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_1","displayName":"Allow users to override feature flags","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_0","displayName":"Prevent users from overriding feature flags","description":null,"helpText":null}]},"8ac114f185d4069e":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist_allowtenantlistbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"8aa121740e75f4a6":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},"8a21249b91411d6a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders42","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders42_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders42_1","displayName":"True","description":null,"helpText":null}]},"8af9f6ae7879ed1a":{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktopcleanupwizard","displayName":"Remove the Desktop Cleanup Wizard (User)","description":"Prevents users from using the Desktop Cleanup Wizard.\r\n\r\nIf you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.\r\n\r\nIf you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.\r\n\r\nNote: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nodesktopcleanupwizard"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktopcleanupwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktopcleanupwizard_1","displayName":"Enabled","description":null,"helpText":null}]},"8aeb0e670c346481":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_1","displayName":"Automatically send memory dumps for OS-generated error reports (User)","description":"This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically. This policy does not apply to error reports generated by 3rd-party products, or additional data other than memory dumps.\r\n\r\nIf you enable or do not configure this policy setting, any memory dumps generated for error reports by Microsoft Windows are automatically uploaded, without notification to the user.\r\n\r\nIf you disable this policy setting, then all memory dumps are uploaded according to the default consent and notification settings.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werautoapproveosdumps-1"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_1_1","displayName":"Enabled","description":null,"helpText":null}]},"8af515f944663a9f":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit","displayName":"Prevent access to registry editing tools (User)","description":"Disables the Windows registry editor Regedit.exe.\r\n\r\nIf you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.\r\n\r\nIf you disable this policy setting or do not configure it, users can run Regedit.exe normally.\r\n\r\nTo prevent users from using other administrative tools, use the \"Run only specified Windows applications\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-disableregedit"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_1","displayName":"Enabled","description":null,"helpText":null}]},"8ae236f7cd174330":{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescapower","displayName":"Remove the battery meter (User)","description":"This policy setting allows you to remove the battery meter from the system control area.\r\n\r\nIf you enable this policy setting, the battery meter is not displayed in the system notification area.\r\n\r\nIf you disable or do not configure this policy setting, the battery meter is displayed in the system notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-hidescapower"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescapower_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescapower_1","displayName":"Enabled","description":null,"helpText":null}]},"8a3287bd4e5ec1b4":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint","displayName":"Microsoft PowerPoint 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2010.\r\nBy default, the user settings of Microsoft PowerPoint 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010powerpoint"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"8a7a5173b06a7458":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages","displayName":"Configure the content and order of preferred languages (User)","description":"This policy allows admins to configure the order of the preferred languages in Google Chrome's settings.\r\n\r\nThe order of the list will appear in the same order under the \"Order languages based on your preference\" section in chrome://settings/languages. Users won't be able to remove or reorder languages set by the policy, but will be able to add languages underneath those set by the policy. Users will also have full control over the browser's UI language and translation/spell check settings, unless enforced by other policies.\r\n\r\nLeaving the policy unset lets users manipulate the entire list of preferred languages.\r\n\r\nExample value:\r\n\r\nen-US","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_1","displayName":"Enabled","description":null,"helpText":null}]},"8acfb4c28f5d20f7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_serialblockedforurlsdesc","displayName":"Block the Serial API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"8a6314c393a70f7c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_1","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_2","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},"8a35614455f42bd1":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled","displayName":"Allow users to select cast devices with an access code or QR code from within the Google Cast menu. (User)","description":"This policy controls whether a user will be presented with an option, within the Google Cast menu which allows them to cast to cast devices that do not appear in the Google Cast menu, using either the access code or QR code displayed on the cast devices's screen.\r\nBy default, a user must reenter the access code or rescan the QR code in order to initiate a subsequent casting session, but if the AccessCodeCastDeviceDuration policy has been set to a non-zero value (the default is zero), then the cast device will remain in the list of available cast devices until the specified period of time has expired.\r\nWhen this policy is set to Enabled, users will be presented with the option to select cast devices by using an access code or by scanning a QR code.\r\nWhen this policy is set to Disabled or not set, users will not be given the option to select cast devices by using an access code or by scanning a QR code.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8ad925534b68fe3a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":null},"8a6a04967ee6f812":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation","displayName":"Stop checking for alt text accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that objects such as images and shapes contain alternative text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that objects such as images and shapes contain alternative text.\r\n\r\nIf you disable or do not configure this policy setting, objects will be checked for alternative text and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"8a226de7e018b532":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurenondefaultsheetnames","displayName":"Stop checking to ensure non-default sheet names (User)","description":"This policy setting prevents the Accessibility Checker from verifying that worksheets with content have non-default names.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that worksheets with content have non-default names.\r\n\r\nIf you disable or do not configure this policy setting, worksheet names will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurenondefaultsheetnames_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurenondefaultsheetnames_1","displayName":"Enabled","description":null,"helpText":null}]},"8a932ffb51383245":{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enableforeigntextfileprotectedview","displayName":"Always open untrusted text-based files in Protected View (User)","description":"This policy setting controls whether text-based files (.csv, .dif, and .sylk) opened from an untrusted location are always opened in Protected View.\r\n\r\nIf you enable this policy setting, text-based files opened from an untrusted location are always opened in Protected View. Users will not be able to change this setting under File > Options > Trust Center > Trust Center Settings > Protected View.\r\n\r\nIf you disable or don’t configure this policy setting, text-based files opened from an untrusted location are not opened in Protected View, unless users have changed this setting in the Trust Center.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enableforeigntextfileprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enableforeigntextfileprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"8a3257c25512c989":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"8a1ba86b62af1738":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowuserdatapersistence"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"8adce13a98e66aeb":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch","displayName":"Enforce Google SafeSearch (User)","description":"Forces queries in Google Web Search to be performed with SafeSearch set to active, and prevents users from changing this setting.\r\n\r\nIf you enable this policy, SafeSearch in Google Search is always active.\r\n\r\nIf you disable this policy or don't configure it, SafeSearch in Google Search isn't enforced.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"8aef30a8c164ce30":{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled","displayName":"Origin-keyed agent clustering enabled by default (User)","description":"The Origin-Agent-Cluster: HTTP header controls whether a document is isolated in an origin-keyed agent cluster or in a site-keyed agent cluster. This has security implications because an origin-keyed agent cluster allows isolating documents by origin. The consequence of this for developers is that the document.domain accessor can no longer be set when origin-keyed agent clustering is enabled.\r\n\r\nIf you enable or don't configure this policy, documents without the Origin-Agent-Cluster: header will be assigned to origin-keyed agent clustering by default. On these documents, the document.domain accessor will not be settable.\r\n\r\nIf you disable this policy, documents without the Origin-Agent-Cluster: header will be assigned to site-keyed agent clusters by default. On these documents, the document.domain accessor will be settable.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2191896 for additional details.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8a54683e127d4439":{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning (User)","description":"This policy controls whether third-party storage partitioning is allowed by default.\r\n\r\nIf this policy is set to 1 - AllowPartitioning, or unset, third-party storage partitioning will be allowed by default. This default may be overridden for specific top-level origins by other means.\r\n\r\nIf this policy is set to 2 - BlockPartitioning, third-party storage partitioning will be disabled for all contexts.\r\n\r\nUse ThirdPartyStoragePartitioningBlockedForOrigins to disable third-party storage partitioning for specific top-level origins.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowPartitioning (1) = Allow third-party storage partitioning by default.\r\n\r\n* BlockPartitioning (2) = Disable third-party storage partitioning.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"8abc06ac7899a835":{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_webcontentfilteringblockedcategoriesdesc","displayName":"List of blocked categories (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"8af3807aa9a5fa2e":{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls","displayName":"Block sites from making requests to local network endpoints. (User)","description":"List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.\r\n\r\nIf an origin is covered by both this policy and by 'LocalNetworkAccessAllowedForUrls' (Allow sites to make requests to local network endpoints.), this policy takes precedence.\r\n\r\nDepending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.\r\n\r\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\r\n\r\nFor detailed information on valid URL patterns, please see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\r\n\r\nNote: This policy improves local network security by blocking specified public websites from accessing private IP addresses. It helps prevent unauthorized external sites from reaching internal resources unless explicitly permitted. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8a2a4f790f6d4068":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled","displayName":"Allows the AppCache feature to be re-enabled, even if it's turned off by default (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 96.\r\n\r\nSupport for AppCache and this policy was removed from Microsoft Edge starting in version 97.\r\n\r\nIf you set this policy to true, the AppCache is enabled, even when AppCache in Microsoft Edge is not available by default.\r\n\r\nIf you set this policy to false, or don't set it, AppCache will follow Microsoft Edge's defaults.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8a9fb6a62a6c2577":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_collectionsservicesandexportsblocklistdesc","displayName":"Block access to a specified list of services and export targets in Collections (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"8a91685a256a918d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_marathi","displayName":"Marathi (User)","description":"Enables the editing language Marathi","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_marathi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_marathi_1","displayName":"Enabled","description":null,"helpText":null}]},"8af45b5fd49cb270":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablescreenshotautohyperlink","displayName":"Do not automatically hyperlink screenshots (User)","description":"This policy setting allows you to specify whether or not Word, PowerPoint, Excel or Outlook automatically binds hyperlink to a screenshot inserted through the Insert Screenshot tool, if the screenshot is of an Internet Explorer browser window.\r\n\r\nIf you enable this policy setting, Word, PowerPoint, Excel and Outlook does not automatically bind hyperlinks to screenshot of Internet Explorer browser windows.\r\n\r\nIf you disable or do not configure this policy setting, Word, PowerPoint, Excel and Outlook automatically binds a hyperlink to screenshots of Internet Explorer browser windows.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablescreenshotautohyperlink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablescreenshotautohyperlink_1","displayName":"Enabled","description":null,"helpText":null}]},"8a9160de86718265":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_adattributecontaingpersonalsiteurl","displayName":"AD attribute containing Personal Site URL (User)","description":"The Office client updates the User object in the Active Directory with the URL of the user's personal site. Please enter the attribute of the user object which Office should update. The default is \"wwwHomePage\".","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_adattributecontaingpersonalsiteurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_adattributecontaingpersonalsiteurl_1","displayName":"Enabled","description":null,"helpText":null}]},"8aa7c1a4fabc1b52":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_ignorewordsinuppercase","displayName":"Ignore words in UPPERCASE (User)","description":"Allow users to ignore words written in UPPERCASE.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_ignorewordsinuppercase_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_ignorewordsinuppercase_1","displayName":"Enabled","description":null,"helpText":null}]},"8a3c125734965aee":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_rewindfromstartofparagraphbythefollowingnumberofseconds","displayName":"Rewind from start of paragraph by the following number of seconds (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_rewindfromstartofparagraphbythefollowingnumberofseconds_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_rewindfromstartofparagraphbythefollowingnumberofseconds_1","displayName":"Enabled","description":null,"helpText":null}]},"8a60c05b21d1f2c0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signallemailmessages","displayName":"Sign all e-mail messages (User)","description":"This policy setting controls whether Outlook requires digital signatures on all outgoing e-mail messages.\r\n\r\nIf you enable this policy setting, Outlook requires all outgoing messages to be digitally signed before being sent.\r\n\r\nIf you disable or do not configure this policy setting, Outlook does not require outgoing messages to have digital signatures.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signallemailmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signallemailmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"8a1a3da963b9e540":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc04_l_pathcolon20","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"8aa6f1cc8a3ed637":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]},"8a441c68f01dc914":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_imecontrolactive","displayName":"IME Control Active (User)","description":"Checks/unchecks the corresponding UI option. This option only appears if you configure Word to use an IME.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_imecontrolactive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_imecontrolactive_1","displayName":"Enabled","description":null,"helpText":null}]},"8a15781acca33d19":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor","displayName":"Insertions color (User)","description":"Selects the default color for tracked insertions. This corresponds to the choices in the Review ribbon | Track changes | Change tracking options dialog box.","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_insertionscolor_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/8b.json b/public/intune-definitions/8b.json new file mode 100644 index 000000000000..3f4a0581adb5 --- /dev/null +++ b/public/intune-definitions/8b.json @@ -0,0 +1 @@ +{"8bb827019fafed41":{"id":"ade_macos_authenticationmethod","displayName":"Intune authentication method","description":"If your organization uses multifactor authentication, select Setup Assistant with modern authentication, which prompts users to authenticate based on settings in Entra.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":{"id":"ade_macos_authenticationmethod_2","displayName":"Setup Assistant with modern authentication","description":null,"helpText":null}},"8bb9f7bec2f5cd3d":{"id":"com.apple.app.lock_app","displayName":"App","description":"A dictionary that contains information about the app.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":null},"8bf02455dc0faedd":{"id":"com.apple.applicationaccess_allowcloudbackup","displayName":"Allow Cloud Backup","description":"If false, disables backing up the device to iCloud. Requires a supervised device. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudbackup_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudbackup_true","displayName":"True","description":null,"helpText":null}]},"8bccbdba18767ec0":{"id":"com.apple.assetcache.managed_peerfilterranges_item_type","displayName":"IP Address Type","description":"The IP address type.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_peerfilterranges_item_type_0","displayName":"IPv4","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_peerfilterranges_item_type_1","displayName":"IPv6","description":null,"helpText":null}]},"8bc536325ef2a8c5":{"id":"com.apple.extensiblesso_extensiondata_pwreqtext_kerberos","displayName":"Password Req Text","description":"The text version of the domain's password requirements. Only for use if Password Req Complexity or Password Req Length aren’t specified. Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"8bb925918736d87e":{"id":"com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for InPrivate and Guest profiles","description":"Configure this policy to allow/disallow ambient authentication for InPrivate and Guest profiles in Microsoft Edge.\n\nAmbient Authentication is http authentication with default credentials when explicit credentials aren't provided via NTLM/Kerberos/Negotiate challenge/response schemes.\n\nIf you set the policy to RegularOnly (value 0), it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions won't be allowed to ambiently authenticate.\n\nIf you set the policy to InPrivateAndRegular (value 1), it allows ambient authentication for InPrivate and Regular sessions. Guest sessions won't be allowed to ambiently authenticate.\n\nIf you set the policy to GuestAndRegular (value 2), it allows ambient authentication for Guest and Regular sessions. InPrivate sessions won't be allowed to ambiently authenticate\n\nIf you set the policy to All (value 3), it allows ambient authentication for all sessions.\n\nNote that ambient authentication is always allowed on regular profiles.\n\nIf you don't configure this policy, InPrivate and Guest sessions will not be able to ambiently authenticate in future releases of Microsoft Edge, because they will be disallowed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#ambientauthenticationinprivatemodesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_0","displayName":"Enable ambient authentication in regular sessions only.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_1","displayName":"Enable ambient authentication in InPrivate and regular sessions","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_2","displayName":"Enable ambient authentication in guest and regular sessions","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_3","displayName":"Enable ambient authentication in regular, InPrivate and guest sessions","description":null,"helpText":null}]},"8b512b045606511f":{"id":"com.apple.managedclient.preferences_passwordmanagerenabled","displayName":"Enable saving passwords to the password manager","description":"Enable Microsoft Edge to save user passwords.\n\nIf you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically.\n\nIf you disable this policy, users can't save new passwords, but they can still use previously saved passwords.\n\nIf you enable or disable this policy, users can't change or override it in Microsoft Edge. If you don't configure it, users can save passwords, as well as turn this feature off.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordmanagerenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_passwordmanagerenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_passwordmanagerenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8b70740a503c7a58":{"id":"com.apple.managedclient.preferences_relatedwebsitesetsenabled","displayName":"Enable Related Website Sets (deprecated)","description":"This policy lets you control the enablement of the Related Website Sets feature. Related Website Sets (RWS) is a way for an organisation to declare relationships among sites, so that Microsoft Edge allows limited third-party cookie access for specific purposes across those sites.\n\nIf this policy set to True or unset, the Related Website Sets feature is enabled.\n\nIf this policy is set to False, the Related Website Sets feature is disabled.\n\nThis policy is deprecated as of Microsoft Edge version 144 with the deprecation of Related Website Sets.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#relatedwebsitesetsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_relatedwebsitesetsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_relatedwebsitesetsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8ba05bc4a0247236":{"id":"com.apple.managedclient.preferences_updatedeadline.daysbeforeforcedquit","displayName":"Days before forced updates","description":"Specify the maximum number of days that an update can be pending before the user is forced to update the app. Set the value to 0 to disable forced updates.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"8b3a401f0e0463f9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultdownloaddirectory_recommended","displayName":"Set default download directory (users can override)","description":"This policy sets the default directory that Microsoft Edge uses to download files. Users can change the directory through browser settings.\n\nIf you don't configure this policy, Microsoft Edge uses the platform-specific default download directory.\n\nThis policy has no effect if the DownloadDirectory policy is set.\n\nFor a list of supported variables, see https://learn.microsoft.com/en-us/deployedge/edge-learnmore-create-user-directory-vars .","helpText":null,"infoUrls":[],"categoryId":"5e8e9c7f-1988-45cd-b5ca-78d939e3d49e","categoryName":"Downloads","options":null},"8b015187f5bf4e3a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions","displayName":"Actions to run when the computer is idle","description":"When the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\n\nIf you don't configure the IdleTimeout policy, this policy has no effect.\n\nIf you don't configure this policy or no actions are selected, the IdleTimeout policy has no effect.\n\nSupported actions are:\n\n'close_browsers': close all browser windows and Progressive Web Apps (PWAs) for this profile.\n\n'reload_pages': reload all webpages. For some pages, the user might be prompted for confirmation first.\n\n'sign_out': sign out of browser. (This action only applies to iOS.)\n\n'close_tabs': close all open tabs and create an NTP (New Tab Page). Supported in Android and iOS.\n\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings': clear the corresponding browsing data. Deleting cookies using this policy doesn't sign the user out of their profile, the user stays signed in.\n\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' disables sync for the respective data types if sync isn't already disabled by setting either the SyncDisabled policy or BrowserSignin to disabled.\n\nPolicy options mapping:\n\n* close_browsers (close_browsers) = Close Browsers\n\n* clear_browsing_history (clear_browsing_history) = Clear Browsing History\n\n* clear_download_history (clear_download_history) = Clear Download History\n\n* clear_cookies_and_other_site_data (clear_cookies_and_other_site_data) = Clear Cookies and Other Site Data\n\n* clear_cached_images_and_files (clear_cached_images_and_files) = Clear Cached Images and Files\n\n* clear_password_signin (clear_password_signin) = Clear Password sign in\n\n* clear_autofill (clear_autofill) = Clear Autofill\n\n* clear_site_settings (clear_site_settings) = Clear Site Settings\n\n* reload_pages (reload_pages) = Reload Pages\n\n* sign_out (sign_out) = Sign Out\n\n* close_tabs (close_tabs) = Close Tabs\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_close_browsers","displayName":"Close Browsers","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_browsing_history","displayName":"Clear Browsing History","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_download_history","displayName":"Clear Download History","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_cookies_and_other_site_data","displayName":"Clear Cookies and Other Site Data","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_cached_images_and_files","displayName":"Clear Cached Images and Files","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_password_signin","displayName":"Clear Password sign in","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_autofill","displayName":"Clear Autofill","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_site_settings","displayName":"Clear Site Settings","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_reload_pages","displayName":"Reload Pages","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_sign_out","displayName":"Sign Out","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_close_tabs","displayName":"Close Tabs","description":null,"helpText":null}]},"8b1861333954e4bc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importopentabs_recommended","displayName":"Allow importing of open tabs (users can override)","description":"Allows users to import open and pinned tabs from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, open tabs aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.\n\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importopentabs_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importopentabs_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"8ba6992c64996f32":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_expiration","displayName":"Expiration","description":"This policy specifies when the PIN expires (in days). Valid values are 0 to 730 inclusive. If this policy is set to 0, then PINs do not expire.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"8b074a9bdc857f06":{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslcurveorder_sslcurveorderlist","displayName":"ECC Curve Order:","description":null,"helpText":"","infoUrls":[],"categoryId":"86f46ebc-a93f-4a2b-b6e7-bab2ac95a3ae","categoryName":"SSL Configuration Settings","options":null},"8bd8763809462f04":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_2","displayName":"Configure log access","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You cannot configure write permissions for this log. You must set both \"configure log access\" policy settings for this log in order to affect the both modern and legacy tools.\r\n\r\nIf you enable this policy setting, only those users whose security descriptor matches the configured specified value can access the log.\r\n\r\nIf you disable or do not configure this policy setting, only system software and administrators can read or clear this log.\r\n\r\nNote: If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the \"Configure log access (legacy)\" policy setting to enforce this change across all tools and APIs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-2"],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_2_1","displayName":"Enabled","description":null,"helpText":null}]},"8b4601f55b71c172":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshratedc_gprefreshrate2","displayName":"Minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"8b348eb4e0b9c9eb":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_criticalfailuretimeout","displayName":"Configure time out for detections in critically failed state","description":"This policy setting configures the time in minutes before a detection in the “critically failed” state to moves to either the “additional action” state or the “cleared” state.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-criticalfailuretimeout"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_criticalfailuretimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_criticalfailuretimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"8b8ac9a1aabaf527":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon","displayName":"Internet Explorer Common Settings","description":"This policy setting configures the synchronization of user settings which are common between the versions of Internet Explorer.\r\nBy default, the user settings which are common between the versions of Internet Explorer synchronize between computers. Use the policy setting to prevent the user settings of Internet Explorer from synchronization between computers. \r\nIf you enable this policy setting, the user settings which are common between the versions of Internet Explorer continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the versions of Internet Explorer are excluded from settings synchronization. If any version of the Internet Explorer settings are enabled this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorercommon"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon_1","displayName":"Enabled","description":null,"helpText":null}]},"8bcdf2724f3c9226":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_maxposphasecorrection","displayName":"MaxPosPhaseCorrection","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"8bbaa4dae25fc237":{"id":"device_vendor_msft_policy_config_appvirtualization_allowpublishingrefreshux","displayName":"Enable Publishing Refresh UX","description":"Enables a UX to display to the user when a publishing refresh is performed on the client.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowpublishingrefreshux"],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowpublishingrefreshux_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowpublishingrefreshux_1","displayName":"Enabled","description":null,"helpText":null}]},"8b8a96c5a5ee820b":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_user_publishing_refresh_options","displayName":"User Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_user_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_user_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"8b7a57234330e807":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowreestablishmentinterval","displayName":"Reestablishment Interval","description":"Specifies the number of seconds between attempts to reestablish a dropped session.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingallowreestablishmentinterval"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowreestablishmentinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowreestablishmentinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"8bcccd0cd4ef0ccc":{"id":"device_vendor_msft_policy_config_authentication_allowsecondaryauthenticationdevice","displayName":"Allow Secondary Authentication Device","description":"Allows secondary authentication devices to work with Windows. The default for this policy must be on for consumer devices (defined as local or Microsoft account connected device) and off for enterprise devices (such as cloud domain-joined, cloud domain-joined in an on-premises only environment, cloud domain-joined in a hybrid environment, and BYOD). In the next major release of Windows 10, the default for this policy for consumer devices will be changed to off. This will only affect users that have not already set up a secondary authentication device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#allowsecondaryauthenticationdevice"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":[{"id":"device_vendor_msft_policy_config_authentication_allowsecondaryauthenticationdevice_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_allowsecondaryauthenticationdevice_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"8b30195d5a40073a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_autoplaywhitelistdesc","displayName":"Allow media autoplay on a whitelist of URL patterns (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"8bd9e1e9a0a13be7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability","displayName":"Print PDF as Image Available","description":"Controls how Google Chrome makes the Print as image option available on Microsoft® Windows® and macOS when printing PDFs.\r\n\r\nWhen printing a PDF on Microsoft® Windows® or macOS, sometimes print jobs need to be rasterized to an image for certain printers to get correct looking output.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will make the Print as image option available in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome the Print as image option will not be available to users in Print Preview and PDFs will be printed as usual without being rasterized to an image before being sent to the destination.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"8b6af77cc44a236a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing","displayName":"Enable or disable PIN-less authentication for remote access hosts","description":"Setting the policy to Enabled or leaving it unset lets users pair clients and hosts at connection time, eliminating the need to enter a PIN every time.\r\n\r\nSetting the policy to Disabled makes this feature unavailable.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing_1","displayName":"Enabled","description":null,"helpText":null}]},"8b49d94aa21d7a4c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed","displayName":"Allows web pages to use identifiers for the purpose of protected content playback","description":"If the policy is set to true or unset, the use of protected content identifiers is allowed, which can help enable higher quality of protected content playback.\r\n\r\nIf the policy is set to false, protected content identifiers are not allowed to be used.","helpText":"","infoUrls":[],"categoryId":"4cd10f38-02cf-40f2-aa87-ad70a2190a1a","categoryName":"Protected Content","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8b413205d5a5fa35":{"id":"device_vendor_msft_policy_config_defender_allowscanningnetworkfiles","displayName":"Allow Scanning Network Files","description":"Allows or disallows a scanning of network files.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowscanningnetworkfiles_0","displayName":"Not allowed. Turns off scanning of network files.","description":"Not allowed. Turns off scanning of network files.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowscanningnetworkfiles_1","displayName":"Allowed. Scans network files.","description":"Allowed. Scans network files.","helpText":null}]},"8baedcf9e17b5fce":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_0","displayName":"Direct Access","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_1","displayName":"DiffDisk On Network","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_2","displayName":"Local DiffDisk","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_3","displayName":"Unique Disk per Session","description":null,"helpText":null}]},"8b613df25fc05793":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"8b88af3a66d3d527":{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions","displayName":"Select SmartScreen Filter mode","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_0","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_1","displayName":"On","description":null,"helpText":null}]},"8b41ad9c86e21145":{"id":"device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled","displayName":"Cloud Kerberos Ticket Retrieval Enabled","description":"Allow retrieving the cloud kerberos ticket during the logon\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#cloudkerberosticketretrievalenabled"],"categoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"8ba59253aa47d9c8":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled","displayName":"Enable new SmartScreen library (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 107.\r\n\r\nThis policy doesn't work because it was only intended to be a short-term mechanism to support the update to a new SmartScreen client.\r\n\r\nAllows the Microsoft Edge browser to load the new SmartScreen library (libSmartScreenN) for any SmartScreen checks on site URLs or application downloads.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will use the new SmartScreen library (libSmartScreenN).\r\n\r\nIf you disable this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nBefore Microsoft Edge version 103, if you don't configure this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management.\r\nThis also includes macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8bb1831ead25261b":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes","displayName":"Configure the list of types that are included for synchronization","description":"If you enable this policy all the specified data types will be included for synchronization for Azure AD/Azure AD-Degraded user profiles. This policy can be used to ensure the type of data uploaded to the Microsoft Edge synchronization service.\r\n\r\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", \"history\", \"openTabs\", \"edgeWallet\", \"collections\", \"apps\", and \"edgeFeatureUsage\". The \"edgeFeatureUsage\" data type will be supported starting in Microsoft Edge version 134. Note that these data type names are case sensitive.\r\n\r\nUsers will not be able to override the enabled data types.\r\n\r\nExample value:\r\n\r\nfavorites","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_1","displayName":"Enabled","description":null,"helpText":null}]},"8bcdd685c1c3cbfa":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mse7exe27","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mse7exe27_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mse7exe27_1","displayName":"True","description":null,"helpText":null}]},"8b033858f9dcb848":{"id":"device_vendor_msft_policy_config_printers_enabledevicecontrol","displayName":"Enable Device Control Printing Restrictions","description":"\r\n Determines whether Device Control Printing Restrictions are enforced for printing on this computer.\r\n\r\n By default, there are no restrictions to printing based on connection type or printer Make/Model.\r\n\r\n If you enable this setting, the computer will restrict printing to printer connections on the corporate network or approved USB-connected printers.\r\n\r\n If you disable this setting or do not configure it, there are no restrictions to printing based on connection type or printer Make/Model.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-enabledevicecontrol"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_enabledevicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_enabledevicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"8ba2a6d6b5bc3f44":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_datecolon28","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"8bdbd1a2cf901cc7":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor","displayName":"Hyperlink color (User)","description":"Specifies the default hyperlink text color.","helpText":"","infoUrls":[],"categoryId":"cbb98485-6a36-47b8-b450-7821e08507ac","categoryName":"Web Options - General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_1","displayName":"Enabled","description":null,"helpText":null}]},"8b253f9de6c11684":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory_defaultcategorybox","displayName":"Category: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":null},"8b0f6e5fbdb66f73":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_addremovecomponents","displayName":"Prohibit adding and removing components for a LAN or remote access connection (User)","description":"Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadministrators.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Install and Uninstall buttons for components of connections are disabled, and administrators are not permitted to access network components in the Windows Components Wizard.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Install and Uninstall buttons for components of connections in the Network Connections folder are enabled. Also, administrators can gain access to network components in the Windows Components Wizard.\r\n\r\nThe Install button opens the dialog boxes used to add network components. Clicking the Uninstall button removes the selected component in the components list (above the button).\r\n\r\nThe Install and Uninstall buttons appear in the properties dialog box for connections. These buttons are on the General tab for LAN connections and on the Networking tab for remote access connections.\r\n\r\nNote: When the \"Prohibit access to properties of a LAN connection\", \"Ability to change properties of an all user remote access connection\", or \"Prohibit changing properties of a private remote access connection\" settings are set to deny access to the connection properties dialog box, the Install and Uninstall buttons for connections are blocked.\r\n\r\nNote: Nonadministrators are already prohibited from adding and removing connection components, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-addremovecomponents"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_addremovecomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_addremovecomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"8b148541f0fc5880":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_lbl_nopinfileslist","displayName":"Files and Folders: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"8bf9e98c69ad6640":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history (User)","description":"Setting the policy to Enabled or leaving it unset means browser history and download history can be deleted in Chrome, and users can't change this setting.\r\n\r\nSetting the policy to Disabled means browser history and download history can't be deleted. Even with this policy off, the browsing and download history are not guaranteed to be retained. Users may be able to edit or delete the history database files directly, and the browser itself may expire or archive any or all history items at any time.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"8b5064c575e378af":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userfeedbackallowed","displayName":"Allow user feedback (User)","description":"Setting the policy to Enabled or leaving it unset lets users send feedback to Google through Menu > Help > Report an Issue or key combination.\r\n\r\nSetting the policy to Disabled means users can't send feedback to Google.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userfeedbackallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userfeedbackallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8be9e0a3e65801eb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal","displayName":"Enable firewall traversal from remote access host (User)","description":"Setting the policy to Enabled or leaving it unset allows the usage of STUN servers, letting remote clients discover and connect to this machine, even if separated by a firewall.\r\n\r\nSetting the policy to Disabled when outgoing UDP connections are filtered by the firewall means the machine only allows connections from client machines within the local network.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal_1","displayName":"Enabled","description":null,"helpText":null}]},"8b4b85000c3eb31e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl","displayName":"Enterprise web store URL (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_1","displayName":"Enabled","description":null,"helpText":null}]},"8b665c57d37c74b5":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty_0","displayName":"Allow different","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty_1","displayName":"Allow different, but warn","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty_2","displayName":"Always match file type","description":null,"helpText":null}]},"8b3153d2f4ac214a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders32","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders32_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders32_1","displayName":"True","description":null,"helpText":null}]},"8b3344576b6c1dfa":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"8b2cb62970473196":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended","displayName":"Enable network prediction (User)","description":"Enables network prediction and prevents users from changing this setting.\r\n\r\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\r\n\r\nIf you don't configure this policy, network prediction is enabled but the user can change it.\r\n\r\n* 0 = Predict network actions on any network connection\r\n\r\n* 2 = Don't predict network actions on any network connection","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"8b902185044d33c9":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},"8b2912fd163c2ab2":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc","displayName":"Block the WebHID API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"8ba8c8b557f520d2":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_printpreviewstickysettings","displayName":"Configure the sticky print preview settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"8b15e9ce036e06eb":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_webrtclocalipsallowedurlsdesc","displayName":"Manage exposure of local IP addressess by WebRTC (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"8b08b4676f6ab386":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (obsolete) (User)","description":"Cookies set for domains match specified patterns will revert to legacy SameSite behavior.\r\n\r\nReverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\r\n\r\nIf you don't set this policy, the global default value will be used. The global default will also be used for cookies on domains not covered by the patterns you specify.\r\n\r\nThe global default value can be configured using the 'LegacySameSiteCookieBehaviorEnabled' (Enable default legacy SameSite cookie behavior setting) policy. If 'LegacySameSiteCookieBehaviorEnabled' is unset, the global default value falls back to other configuration sources.\r\n\r\nNote that patterns you list in this policy are treated as domains, not URLs, so you should not specify a scheme or port.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"8b9113dd3711506a":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended","displayName":"Configure when efficiency mode should become active (User)","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"8b2bbc0483fc0387":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastservicemajorversion7","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"8b10532d801cb4f0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08","displayName":"Configure presentation service in PowerPoint and Word 9 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_1","displayName":"Enabled","description":null,"helpText":null}]},"8babf7459acb8943":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_whenchoosingsendforreview_l_empty392","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_whenchoosingsendforreview_l_empty392_2","displayName":"Send link and attachment","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_whenchoosingsendforreview_l_empty392_1","displayName":"Only send link","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_whenchoosingsendforreview_l_empty392_0","displayName":"Prompt user","description":null,"helpText":null}]},"8b677f4095bdd135":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacemobile_l_mobilemapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"8bad972cfdbc241f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmali","displayName":"French (Mali) (User)","description":"Enables the editing language French (Mali)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmali_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmali_1","displayName":"Enabled","description":null,"helpText":null}]},"8b513c08aec8fa1e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_nepalinepal","displayName":"Nepali (Nepal) (User)","description":"Enables the editing language Nepali (Nepal)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_nepalinepal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_nepalinepal_1","displayName":"Enabled","description":null,"helpText":null}]},"8b20f001dd26aff4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_russianrussia","displayName":"Russian (Russia) (User)","description":"Enables the editing language Russian (Russia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_russianrussia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_russianrussia_1","displayName":"Enabled","description":null,"helpText":null}]},"8bcd8b943b465155":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotemulatetabswithspaceswhenexportinghtml","displayName":"Emulate tabs with spaces when exporting HTML (User)","description":"Enabled: Tabs are emulated by replacing them with spaces when exporting HTML. | Disabled: Tab characters are not replaced with spaces when exporting HTML format.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotemulatetabswithspaceswhenexportinghtml_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotemulatetabswithspaceswhenexportinghtml_1","displayName":"Enabled","description":null,"helpText":null}]},"8b4a13496cdeefc7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showscreentips_l_showscreentipsdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showscreentips_l_showscreentipsdropid_0","displayName":"Show feature descriptions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showscreentips_l_showscreentipsdropid_1","displayName":"Don't show feature descriptions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_showscreentips_l_showscreentipsdropid_2","displayName":"Don't show screentips","description":null,"helpText":null}]},"8bb44a752d6d4f83":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_l_workflowcachename","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"8b4aad172ac1253f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_l_workflowsig437","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_l_workflowsig437_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_l_workflowsig437_1","displayName":"True","description":null,"helpText":null}]},"8ba678fc05f814b8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requireocspatsignaturegenerationtime","displayName":"Require OCSP at signature generation time (User)","description":"This policy setting lets you determine whether Office 2016 requires OCSP (Online Certificate Status Protocol) revocation data for all digital certificates in a chain when digital signatures are generated.\r\n\r\nIf you enable this policy setting, Office 2016 requires OCSP revocation data for all certificates in a chain when digital signatures are generated.\r\n\r\nIf you disable or do not configure this policy setting, Office 2016 does not set any restrictions on what type of revocation data is to be used.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requireocspatsignaturegenerationtime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requireocspatsignaturegenerationtime_1","displayName":"Enabled","description":null,"helpText":null}]},"8b81e6e286fb3e88":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog09_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"8b578f5098a724bf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationword","displayName":"Don’t show the What’s New information for Word (User)","description":"This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Word for the first time after Word has been updated with new features. By default, the What’s New information is shown.\r\n\r\nIf you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled.\r\n\r\nIf you disable or don’t configure this policy setting, the What’s New information is shown.\r\n\r\nNote: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio.\r\n ","helpText":"","infoUrls":[],"categoryId":"adf11731-7089-4e2e-8dde-4bd9ef86b067","categoryName":"What's New","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationword_1","displayName":"Enabled","description":null,"helpText":null}]},"8b8b48953c7283ac":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_l_displaythereminder","displayName":"Display the reminder (User)","description":"","helpText":"","infoUrls":[],"categoryId":"13eb248a-4549-4d23-9ada-23b40edf36bf","categoryName":"Reminder Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_l_displaythereminder_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_l_displaythereminder_1","displayName":"True","description":null,"helpText":null}]},"8b190518c310c484":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_synchronizingdatainsharedfolders_l_numberofdays","displayName":"Number of days (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":null},"8b67faa3ff257679":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros","displayName":"Alt+F8 (Developer | Code | Macros) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_1","displayName":"True","description":null,"helpText":null}]},"8b5c4bfd56ea6336":{"id":"user_vendor_msft_policy_config_settings_configuretaskbarcalendar","displayName":"Configure Taskbar Calendar (User)","description":"Allows IT Admins to configure the default setting for showing additional calendars (besides the default calendar for the locale) in the taskbar clock and calendar flyout. In this version of Windows 10, supported additional calendars are: Simplified or Traditional Chinese lunar calendar. Turning on one of these calendars will display Chinese lunar dates below the default calendar for the locale. Select Don't show additional calendars to prevent showing other calendars besides the default calendar for the locale.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#configuretaskbarcalendar"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"user_vendor_msft_policy_config_settings_configuretaskbarcalendar_0","displayName":"User will be allowed to configure the setting.","description":"User will be allowed to configure the setting.","helpText":null},{"id":"user_vendor_msft_policy_config_settings_configuretaskbarcalendar_1","displayName":"Don't show additional calendars.","description":"Don't show additional calendars.","helpText":null},{"id":"user_vendor_msft_policy_config_settings_configuretaskbarcalendar_2","displayName":"Simplified Chinese (Lunar).","description":"Simplified Chinese (Lunar).","helpText":null},{"id":"user_vendor_msft_policy_config_settings_configuretaskbarcalendar_3","displayName":"Traditional Chinese (Lunar).","description":"Traditional Chinese (Lunar).","helpText":null}]},"8b65fa175eeaffa4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_custommarkupwarning","displayName":"Custom markup warning (User)","description":"This policy setting specifies how Word behaves when opening a document that contains custom XML markup.\r\n\r\nIf you enable this policy setting, you can set the behavior to one of the following: \r\n\r\n- 0: Do not prompt the user and silently remove the custom XML markup. \r\n\r\n- 1: Prompt the user regarding the loss of custom XML markup. This is the default option. \r\n\r\n- 2: Prompt the user regarding the loss of custom XML markup, and do not allow them to suppress this prompt. \r\n\r\n- 3: Prompt the user regarding the loss of custom XML markup, and open the file read-only. \r\n\r\n- 4: Prompt the user regarding the loss of custom XML markup, do not allow them to suppress this prompt, and open the file read-only. \r\n\r\n- 5: Do not prompt the user and silently remove the custom XML markup, but open the file read-only.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_custommarkupwarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_custommarkupwarning_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/8c.json b/public/intune-definitions/8c.json new file mode 100644 index 000000000000..91836958920e --- /dev/null +++ b/public/intune-definitions/8c.json @@ -0,0 +1 @@ +{"8c39b013d4d36b2a":{"id":"com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock","displayName":"Force Classroom Unprompted App And Device Lock","description":"If true, allows the teacher to lock apps or the device without prompting the student. Requires a supervised device. Available in iOS 11 and later, and macOS 10.14.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock_true","displayName":"True","description":null,"helpText":null}]},"8c11f8c5e7bc705e":{"id":"com.apple.cellularprivatenetwork.managed_geofences_item_radius","displayName":"Radius","description":"Specifies the radius of the geofence in meters. Set this value slightly greater than the private cellular network coverage area.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"8c51fc32349e3187":{"id":"com.apple.configurationprofile.identification_payloadidentification_fullname","displayName":"Full Name","description":"The full name of the account.","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":null},"8cf42c2a6861cbc5":{"id":"com.apple.extensiblesso_platformsso_loginfrequency","displayName":"Login Frequency","description":"The frequency where a full login is required instead of a refresh. Default is 18 hours. Must be > 1 hour.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"8caac6b31b49766c":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_start","displayName":"Start","description":"The curfew start time, in the format %d:%d:%d.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"8caf7f122b41d5d1":{"id":"com.apple.ldap.account_com.apple.ldap.account","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":null},"8c26ffa1101430ec":{"id":"com.apple.managedclient.preferences_dataurlwhitespacepreservationenabled","displayName":"DataURL Whitespace Preservation for all media types","description":"This policy provides a temporary opt-out for changes to how Edge handles whitepsace in data URLS.\nPreviously, whitespace would be kept only if the top level media type was text or contained the media type string xml.\nNow, whitespace will be preserved in all data URLs, regardless of media type.\n\nIf this policy is left unset or is set to True, the new behavior is enabled.\n\nWhen this policy is set to False, the old behavior is enabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#dataurlwhitespacepreservationenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_dataurlwhitespacepreservationenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_dataurlwhitespacepreservationenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8c4a56abc701548e":{"id":"com.apple.managedclient.preferences_disabletutorial","displayName":"Disable tutorial","description":"This setting prevents the tutorial from being shown to users after they set up OneDrive.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#disabletutorial"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_disabletutorial_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disabletutorial_true","displayName":"True","description":null,"helpText":null}]},"8c3d1b1bd25e0ead":{"id":"com.apple.managedclient.preferences_hstspolicybypasslist","displayName":"Configure the list of names that will bypass the HSTS policy check","description":"Hostnames specified in this list will be exempt from the HSTS policy check that could potentially upgrade requests from \"http://\" to \"https://\". Only single-label hostnames are allowed in this policy. Hostnames must be canonicalized. Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific hostnames specified; it doesn't apply to subdomains of the names in the list.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#hstspolicybypasslist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"8c259f042639d623":{"id":"com.apple.managedclient.preferences_kioskaddressbareditingenabled","displayName":"Configure address bar editing for kiosk mode public browsing experience","description":"This policy only applies to Microsoft Edge kiosk mode while using the public browsing experience.\r\n\r\nIf you enable or don't configure this policy, users can change the URL in the address bar.\r\n\r\nIf you disable this policy, it prevents users from changing the URL in the address bar.\r\n\r\nFor detailed information on configuring kiosk Mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#kioskaddressbareditingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_kioskaddressbareditingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_kioskaddressbareditingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8cc241544ba470fa":{"id":"com.apple.managedclient.preferences_proxyserver","displayName":"Configure address or URL of proxy server","description":"Specifies the URL of the proxy server.\n\nThis policy is applied only if you have selected 'Use fixed proxy servers' in the \"ProxyMode\" policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\n\nIf you enable this policy, the proxy server configured by this policy will be used for all URLs.\n\nIf you disable or don't configure this policy, users can choose their own proxy settings while in this proxy mode. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\n\nFor more options and detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#proxyserver"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"8cda131b52bac7cd":{"id":"com.apple.managedclient.preferences_runscanwhenidle","displayName":"Run scheduled scan when idle","description":"Run scheduled scan when the device is idle. Only applicable for weekly full scans.","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":[{"id":"com.apple.managedclient.preferences_runscanwhenidle_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_runscanwhenidle_true","displayName":"Enabled","description":null,"helpText":null}]},"8c18da6c6111da1d":{"id":"com.apple.webcontent-filter_pluginbundleid","displayName":"Plugin Bundle ID","description":"The bundle ID of the plug-in that provides filtering service.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"8ce56061f272164e":{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_profileinactivitythreshold","displayName":"Profile Inactivity Threshold","description":"Start deleting profiles when they have not been logged on during the specified period, given as number of days.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/AccountManagement-csp/"],"categoryId":"3b384fc5-5906-4dc4-bc48-a52b52fb054b","categoryName":"Account Management","options":null},"8c1da8e1cf8c4327":{"id":"device_vendor_msft_pkcscertificate_certificationauthority","displayName":"Certification Authority","description":"The fully qualified domain name of the server that hosts the Certification Authority role and issues certificates.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure"],"categoryId":"dbbe5cb3-fe2e-4d28-8918-24d075a91676","categoryName":"PKCS certificate","options":null},"8cd4677cd0cae955":{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_approvedenstordevices","displayName":"Configure list of Enhanced Storage devices usable on your computer","description":"This policy setting allows you to configure a list of Enhanced Storage devices by manufacturer and product ID that are usable on your computer.\r\n\r\nIf you enable this policy setting, only Enhanced Storage devices that contain a manufacturer and product ID specified in this policy are usable on your computer.\r\n\r\nIf you disable or do not configure this policy setting, all Enhanced Storage devices are usable on your computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-enhancedstorage#admx-enhancedstorage-approvedenstordevices"],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_approvedenstordevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_approvedenstordevices_1","displayName":"Enabled","description":null,"helpText":null}]},"8cf4cfee83da6f2f":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_2","displayName":"Back up log automatically when full","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the \"Retain old events\" policy setting is enabled.\r\n\r\nIf you enable this policy setting and the \"Retain old events\" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started.\r\n\r\nIf you disable this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and old events are retained.\r\n\r\nIf you do not configure this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and the old events are retained.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-autobackup-2"],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_2_1","displayName":"Enabled","description":null,"helpText":null}]},"8cd433079e0e5ef0":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_sku_differentiation_signature_set_guid_nis_consumers_ips_sku_differentiation_signature_set_guidlist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","categoryName":"Network Inspection System","options":null},"8ce0b53fe38728e5":{"id":"device_vendor_msft_policy_config_admx_pca_detectundetectedinstallerspolicy_detectundetectedinstallerslevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectundetectedinstallerspolicy_detectundetectedinstallerslevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectundetectedinstallerspolicy_detectundetectedinstallerslevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"8cfc2fb3dc6a0f72":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_nc","displayName":"Qualitative service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that do not conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Qualitative service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 0.\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypequalitative-nc"],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_nc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_nc_1","displayName":"Enabled","description":null,"helpText":null}]},"8cb9a9a4c41097de":{"id":"device_vendor_msft_policy_config_admx_wlansvc_setcost_cost_dropdownlist","displayName":"Please select a wlan connection cost value to set:","description":null,"helpText":"","infoUrls":[],"categoryId":"6cd02266-a42f-4675-b83e-37360dbf3c68","categoryName":"WLAN Media Cost","options":[{"id":"device_vendor_msft_policy_config_admx_wlansvc_setcost_cost_dropdownlist_1","displayName":"Unrestricted","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wlansvc_setcost_cost_dropdownlist_2","displayName":"Fixed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wlansvc_setcost_cost_dropdownlist_3","displayName":"Variable","description":null,"helpText":null}]},"8c7a42b483487987":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_downloaddirectory","displayName":"Set download directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"8c095a9e4921bd68":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode","displayName":"DO Download Mode","description":"Specifies the method that Delivery Optimization can use to download content on behalf of various Microsoft products.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodownloadmode"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_0","displayName":"HTTP only, no peering","description":"HTTP only, no peering","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_1","displayName":"HTTP blended with peering behind the same NAT","description":"HTTP blended with peering behind the same NAT","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_2","displayName":"HTTP blended with peering across a private group","description":"HTTP blended with peering across a private group","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_3","displayName":"HTTP blended with Internet peering","description":"HTTP blended with Internet peering","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_99","displayName":"HTTP only, no peering, no use of DO cloud service","description":"HTTP only, no peering, no use of DO cloud service","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_100","displayName":"Bypass mode, deprecated in Windows 11","description":"Bypass mode, deprecated in Windows 11","helpText":null}]},"8ce8454e1647a3d1":{"id":"device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera","displayName":"Prevent enabling lock screen camera","description":"Disables the lock screen camera toggle switch in PC Settings and prevents a camera from being invoked on the lock screen.\n\nBy default, users can enable invocation of an available camera on the lock screen.\n\nIf you enable this setting, users will no longer be able to enable or disable lock screen camera access in PC Settings, and the camera cannot be invoked on the lock screen.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-devicelock#devicelock-preventenablinglockscreencamera"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera_1","displayName":"Enabled","description":null,"helpText":null}]},"8c0e18b8206206e6":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802","displayName":"Allow drag and drop or copy and paste files","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_1","displayName":"Prompt","description":null,"helpText":null}]},"8c38475b3ef2fc5f":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowlessprivilegedsites"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"8c62fd134fb2978d":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation","displayName":"Websites or domains that don't need permission to use direct Security Key attestation","description":"Specifies websites and domains that don't need explicit user permission when attestation certificates from security keys are requested. Additionally, a signal is sent to the security key indicating that it can use individual attestation. Without this, users are prompted each time a site requests attestation of security keys.\r\n\r\nSites (like https://contoso.com/some/path) only match as U2F appIDs. Domains (like contoso.com) only match as webauthn RP IDs. To cover both U2F and webauthn APIs for a given site, you need to list both the appID URL and domain.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_1","displayName":"Enabled","description":null,"helpText":null}]},"8cbd760984203242":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist","displayName":"Define a list of allowed URLs","description":"Allow access to the listed URLs, as exceptions to the URL block list.\r\n\r\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nYou can use this policy to open exceptions to restrictive block lists. For example, you can include '*' in the block list to block all requests, and then use this policy to allow access to a limited list of URLs. You can use this policy to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths.\r\n\r\nThe most specific filter determines if a URL is blocked or allowed. The allowed list takes precedence over the block list.\r\n\r\nThis policy is limited to 1000 entries; subsequent entries are ignored.\r\n\r\nIf you don't configure this policy, there are no exceptions to the block list in the 'URLBlocklist' (Block access to a list of URLs) policy.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"8cf2d51c113837f6":{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed","displayName":"Live captions allowed","description":"Allow users to turn the Live captions feature on or off.\r\n\r\nLive captions is an accessibility feature that converts speech from the audio that plays in Microsoft Edge in to text and shows this text in a separate window. The entire process happens on the device and no audio or caption text ever leaves the device.\r\n\r\nNote: This feature is not generally available. Clients that have the 'ExperimentationAndConfigurationServiceControl' (Control communication with the Experimentation and Configuration Service) policy set to 'FullMode' may receive the feature before broad availability. Broad availability will be announced via Microsoft Edge release notes.\r\n\r\nIf you enable or don't configure this policy, users can turn this feature on or off at edge://settings/accessibility.\r\n\r\nIf you disable this policy, users will not be able to turn this accessibility feature on. If speech recognition files have been downloaded previously, they will be deleted from the device in 30 days. We recommend avoiding this option unless it's needed in your environment.\r\n\r\nIf users choose to turn on Live captions, speech recognition files (approximately 100 megabytes) will be downloaded to the device on first run and then periodically to improve performance and accuracy. These files will be deleted after 30 days.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8c3773983fa22cde":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled","displayName":"Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge","description":"This policy lets you manage whether the indicator User Interface (UI) for enhanced security mode is shown or not when ESM is turned on.\r\n\r\nIf you enable or don't configure this policy, the indicator UI is on.\r\n\r\nIf you disable this policy, the indicator UI is off.\r\n\r\nNote: If this policy is used, only the indicator User Interface experience is supressed - ESM is still turned on. For more information, see the 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) policy.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8c0c5af4c2a12d91":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled","displayName":"Allow the audio sandbox to run","description":"This policy controls the audio process sandbox.\r\n\r\nIf you enable this policy, the audio process will run sandboxed.\r\n\r\nIf you disable this policy, the audio process will run unsandboxed and the WebRTC audio-processing module will run in the renderer process.\r\nThis leaves users open to security risks related to running the audio subsystem unsandboxed.\r\n\r\nIf you don't configure this policy, the default configuration for the audio sandbox will be used, which might differ based on the platform.\r\n\r\nThis policy is intended to give enterprises flexibility to disable the audio sandbox if they use security software setups that interfere with the sandbox.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8cdf5e95598eb28b":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge","description":"This setting lets you specify whether Internet Explorer will redirect navigations to sites that require a modern browser to Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Sitelist', beginning in M87, Internet Explorer will redirect sites that require a modern browser to Microsoft Edge.\r\n\r\nMicrosoft provides a list of public sites that require such redirection, such as https://mail.yahoo.com.\r\n\r\nWhen a site is redirected from Internet Explorer to Microsoft Edge, the Internet Explorer tab that began loading that site is closed if it had no prior content. Otherwise, it is navigated to a Microsoft help page explaining why the site was redirected to Microsoft Edge.\r\n\r\nWhen Microsoft Edge is launched to load a site from IE, an information bar is shown to the user explaining that the site works best in a modern browser.\r\n\r\nIf you set this policy to 'Disable', Internet Explorer will not redirect any traffic to Microsoft Edge.\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable\r\n\r\n* Sitelist (1) = Redirect sites based on the incompatible sites sitelist\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"8c721fcc062f910f":{"id":"device_vendor_msft_policy_config_mssecurityguide_applyuacrestrictionstolocalaccountsonnetworklogon","displayName":"Apply UAC restrictions to local accounts on network logons","description":"This setting controls whether local accounts can be used for remote administration via network logon (e.g., NET USE, connecting to C$, etc.). Local accounts are at high risk for credential theft when the same account and password is configured on multiple systems. Enabling this policy significantly reduces that risk.\n\nEnabled (recommended): Applies UAC token-filtering to local accounts on network logons. Membership in powerful group such as Administrators is disabled and powerful privileges are removed from the resulting access token. This configures the LocalAccountTokenFilterPolicy registry value to 0. This is the default behavior for Windows.\n\nDisabled: Allows local accounts to have full administrative rights when authenticating via network logon, by configuring the LocalAccountTokenFilterPolicy registry value to 1.\n\nFor more information about local accounts and credential theft, see \"Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques\": http://www.microsoft.com/en-us/download/details.aspx?id=36036.\n\nFor more information about LocalAccountTokenFilterPolicy, see http://support.microsoft.com/kb/951016.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-applyuacrestrictionstolocalaccountsonnetworklogon"],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_applyuacrestrictionstolocalaccountsonnetworklogon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_applyuacrestrictionstolocalaccountsonnetworklogon_1","displayName":"Enabled","description":null,"helpText":null}]},"8c480c8f300148b1":{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowpasswordsaving","displayName":"Do not allow passwords to be saved","description":"Controls whether passwords can be saved on this computer from Remote Desktop Connection.\n\nIf you enable this setting the password saving checkbox in Remote Desktop Connection will be disabled and users will no longer be able to save passwords. When a user opens an RDP file using Remote Desktop Connection and saves his settings, any password that previously existed in the RDP file will be deleted.\n\nIf you disable this setting or leave it not configured, the user will be able to save passwords using Remote Desktop Connection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-donotallowpasswordsaving"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowpasswordsaving_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowpasswordsaving_1","displayName":"Enabled","description":null,"helpText":null}]},"8cd93571f75daec0":{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge","displayName":"Edge preview enrollment type","description":"Specifies how a device is enrolled in Edge Preview.\r\n\r\nThis policy is only effective if the TargetChannel policy is set to Beta or Dev.\r\n\r\nIf you set this policy to Allow Opt-out (1) or don't configure it, the channel in the Edge Stable application will be determined by TargetChannel. End users will be able to exit the Edge Preview experience, to return to the Stable channel, at any time.\r\n\r\nIf you set this policy to Required (3), the channel within the Edge Stable application is determined by TargetChannel. End users won't be able to leave the Edge Preview experience.\r\n\r\nThis policy is available on Microsoft Edge version 143.0.3650.66 or later, and applies only to Windows devices joined to a Microsoft® Active Directory® domain.\r\n\r\nFor more details, see: https://go.microsoft.com/fwlink/?linkid=2348937.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"8c511187819dabda":{"id":"passcode_passcodereuselimit","displayName":"Passcode Reuse Limit","description":"Specifies the number of historical passcode entries checked when determining whether a new passcode can be used. The device refuses a new passcode if it matches a previously used passcode within the specified passcode history range. In the absence of this key, no historical check is performed.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"8c8fd164aecfb1ea":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_l_defaultdirection0","displayName":"Default direction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"33b9194b-4027-4c23-b662-52f25db7f839","categoryName":"International","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_l_defaultdirection0_0","displayName":"Left-to-Right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_l_defaultdirection0_1","displayName":"Right-to-left","description":null,"helpText":null}]},"8c955de3e91fe22f":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_disable","displayName":"Disable the Display Control Panel (User)","description":"Disables the Display Control Panel.\r\n\r\nIf you enable this setting, the Display Control Panel does not run. When users try to start Display, a message appears explaining that a setting prevents the action.\r\n\r\nAlso, see the \"Prohibit access to the Control Panel\" (User Configuration\\Administrative Templates\\Control Panel) and \"Remove programs on Settings menu\" (User Configuration\\Administrative Templates\\Start Menu & Taskbar) settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-display-disable"],"categoryId":"ad47f904-ede2-4b12-849e-bf751d88abf5","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_disable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_disable_1","displayName":"Enabled","description":null,"helpText":null}]},"8ca319994c6d3a1f":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio","displayName":"Microsoft Visio 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Visio 2013.\r\nBy default, the user settings of Microsoft Visio 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013visio"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio_1","displayName":"Enabled","description":null,"helpText":null}]},"8ca512e108a3845f":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage","displayName":"Disable binding directly to IPropertySetStorage without intermediate layers. (User)","description":"\r\nChanges the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStorage implementation, and to include the intermediate layers provided by the Property System. This behavior is consistent with Windows Vista's behavior in this scenario.\r\n\r\nThis disables access to user-defined properties, and properties stored in NTFS secondary streams.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disablebinddirectlytopropertysetstorage"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage_1","displayName":"Enabled","description":null,"helpText":null}]},"8c7290f6eca4f9e6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification","displayName":"Notify a user that a browser relaunch or device restart is recommended or required (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification_1","displayName":"Show a recurring prompt to the user indicating that a relaunch is recommended","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification_2","displayName":"Show a recurring prompt to the user indicating that a relaunch is required","description":null,"helpText":null}]},"8cd17a206b68c338":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_filesystemwriteaskforurlsdesc","displayName":"Allow write access to files and directories on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"8c6b61d34eca1074":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_nativemessagingwhitelistdesc","displayName":"Names of the native messaging hosts to exempt from the blocklist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"8cef589acaa10008":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls","displayName":"Allow key generation on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8c53f79be0835c03":{"id":"user_vendor_msft_policy_config_desktop_preventuserredirectionofprofilefolders","displayName":"Prohibit User from manually redirecting Profile Folders (User)","description":"Prevents users from changing the path to their profile folders.\n\nBy default, a user can change the location of their individual profile folders like Documents, Music etc. by typing a new path in the Locations tab of the folder's Properties dialog box.\n\nIf you enable this setting, users are unable to type a new location in the Target box.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktop#desktop-preventuserredirectionofprofilefolders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_desktop_preventuserredirectionofprofilefolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_desktop_preventuserredirectionofprofilefolders_1","displayName":"Enabled","description":null,"helpText":null}]},"8ce580300a2aef66":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_datecolon50","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"8ce0096d06ad4cb9":{"id":"user_vendor_msft_policy_config_internetexplorer_includealllocalsites","displayName":"Intranet Sites: Include all local (intranet) sites not listed in other zones (User)","description":"This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone.\n\nIf you enable this policy setting, local sites which are not explicitly mapped into a zone are considered to be in the Intranet Zone.\n\nIf you disable this policy setting, local sites which are not explicitly mapped into a zone will not be considered to be in the Intranet Zone (so would typically be in the Internet Zone).\n\nIf you do not configure this policy setting, users choose whether to force local sites into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includealllocalsites"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_includealllocalsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_includealllocalsites_1","displayName":"Enabled","description":null,"helpText":null}]},"8ca87e34d7034460":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowfontdownloads"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"8c7efef7bece5a9f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended","displayName":"Allow importing of saved passwords (User)","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\r\n\r\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"8c62eeb1c573d57a":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed","displayName":"Allow access to the Enterprise Mode Site List Manager tool (User)","description":"Allows you to set whether Enterprise Mode Site List Manager is available to users.\r\n\r\nIf you enable this policy, users can see the Enterprise Mode Site List Manager nav button on edge://compat page, navigate to the tool and use it.\r\n\r\nIf you disable or don't configure this policy, users won't see the Enterprise Mode Site List Manager nav button and won't be able to use it.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8c4a3ddb15291386":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishhongkongsar","displayName":"English (Hong Kong S.A.R.) (User)","description":"Enables the editing language English (Hong Kong S.A.R.)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishhongkongsar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishhongkongsar_1","displayName":"Enabled","description":null,"helpText":null}]},"8cecd1812d9a7a12":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationonenote","displayName":"Don’t show the What’s New information for OneNote (User)","description":"This policy setting controls whether the What’s New information is shown when a user opens the desktop version of OneNote for the first time after OneNote has been updated with new features. By default, the What’s New information is shown.\r\n\r\nIf you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled.\r\n\r\nIf you disable or don’t configure this policy setting, the What’s New information is shown.\r\n\r\nNote: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio.\r\n ","helpText":"","infoUrls":[],"categoryId":"adf11731-7089-4e2e-8dde-4bd9ef86b067","categoryName":"What's New","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationonenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationonenote_1","displayName":"Enabled","description":null,"helpText":null}]},"8c60fa453956d92b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_turnonloggingforallconflicts","displayName":"Turn on logging for all conflicts (User)","description":"This policy setting allows you to create Modification Resolution logs whenever the Outlook conflict resolver runs. \r\n\r\nIf you enable this policy setting, Outlook will create Modification Resolution logs whenever the Outlook conflict resolver runs. By default, Modification Resolution logs are written into the Sync Issues folder whenever Outlook's conflict resolver cannot resolve a conflict.\r\n\r\nYou may select one of these options:\r\n- No conflicts are logged: No Modification Resolution logs are written into the Sync Issues folder whenever Outlook's conflict resolver runs. \r\n- All conflicts logged: Modification Resolution logs are written into the Sync Issues folder whenever Outlook's conflict resolver runs.\r\n- Unresolved conflicts logged only: Modification Resolution logs are written into the Sync Issues folder in Outlook when the Outlook conflict resolver cannot resolve a conflict.\r\n\r\nThis applies to all item types.\r\n\r\nIf you disable or do not configure this policy setting, no Modification Resolution logs are written when the Outlook conflict resolver runs.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_turnonloggingforallconflicts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_turnonloggingforallconflicts_1","displayName":"Enabled","description":null,"helpText":null}]},"8c1762309cdaf8ef":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherserviceurl_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":null},"8c2192e05a22f770":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_recurrenceoptions_l_defaultrecurrenceduration","displayName":"Specify total number of days in a recurring meeting or appointment (User)","description":"This policy setting allows you to specify the default number of days after which a recurring meeting or appointment (but not a task) ends.\r\n\r\nIf you enable this policy setting, the “End by” setting is the default setting for recurring meetings and appointments, and the “End by” value is set to the specified number of days after today’s date. For example, if you specify a value of 180 and today's date is May 5, 2011, the “End by” value is November 1, 2011 (180 days after today’s date).\r\n\r\nIf you disable or do not configure this policy setting, the “No end date” option is the default setting for recurring meetings and appointments.","helpText":"","infoUrls":[],"categoryId":"826db7fb-889b-4a99-80a6-38347ba37f21","categoryName":"Recurring item configuration","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_recurrenceoptions_l_defaultrecurrenceduration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_recurrenceoptions_l_defaultrecurrenceduration_1","displayName":"Enabled","description":null,"helpText":null}]},"8cd3af4fb906a6c0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfullnameorder","displayName":"Default Full Name order: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfullnameorder_e","displayName":"First (Middle) Last","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfullnameorder_h","displayName":"Last First","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfullnameorder_s","displayName":"First Last1 Last2","description":null,"helpText":null}]},"8cd87164f4ac42e6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_messagehandling_l_autosaveunsenteveryxxminutes0noautosave","displayName":"Autosave unsent every xx minutes (0=No AutoSave): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":null},"8cae2c3c8e73c21a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjmoveremaining","displayName":"Move start of remaining parts before status date forward to status date (User)","description":"Moves remaining portions of a task forward to start at the status date.\r\n\r\nIf you enable this setting, the remaining portion of the task moves forward to start at the status date.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjmoveremaining_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjmoveremaining_1","displayName":"Enabled","description":null,"helpText":null}]},"8cd29ea68518f3df":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_legacyfileformats","displayName":"Previous-version file formats (User)","description":"Allows you manage whether users can open or save files in Project with file formats from previous versions or file formats that are not default. By default, users can not open or save files with formats from previous versions.","helpText":"","infoUrls":[],"categoryId":"623d41fb-000e-41d8-b955-373f8c700def","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_legacyfileformats_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security_l_legacyfileformats_1","displayName":"Enabled","description":null,"helpText":null}]},"8c8410922f334895":{"id":"user_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall","displayName":"Restrict Language Packs And Features Install (User)","description":"This policy setting restricts the install of language packs and language features, such as spell checkers, on a device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#restrictlanguagepacksandfeaturesinstall"],"categoryId":"4a5a066e-27af-46c1-9714-9e4542ffc1f9","categoryName":"Time Language Settings","options":[{"id":"user_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall_0","displayName":"Disabled","description":"Not restricted.","helpText":null},{"id":"user_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall_1","displayName":"Enabled","description":"Restricted.","helpText":null}]},"8c6ee18529a5f3ed":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc13_l_descriptioncolon58","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"8c69579b080745f5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc","displayName":"Disable all trusted locations (User)","description":"This policy setting allows administrators to disable all trusted locations in the specified applications. Trusted locations specified in the Trust Center are used to define file locations that are assumed to be safe. Content, code, and add-ins are allowed to load from trusted locations with a minimal amount of security, without prompting the users for permission. If a dangerous file is opened from a trusted location, it will not be subject to standard security measures and could harm users' computers or data.\r\n \r\nIf you enable this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are ignored, including any trusted locations established by Office 2016 during setup, deployed to users using Group Policy, or added by users themselves. Users will be prompted again when opening files from trusted locations.\r\n\r\nIf you disable or do not configure this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are assumed to be safe.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/8d.json b/public/intune-definitions/8d.json new file mode 100644 index 000000000000..e22c8ffb3188 --- /dev/null +++ b/public/intune-definitions/8d.json @@ -0,0 +1 @@ +{"8d9efa7b76379feb":{"id":"ade_setupassistant_imessagefacetime","displayName":"iMessage and FaceTime","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_imessagefacetime_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_imessagefacetime_1","displayName":"Show","description":null,"helpText":null}]},"8dfd2ceb12e5aac8":{"id":"com.android.devicerestrictionpolicy.passwordsigninfailurecountbeforefactoryresetaosp","displayName":"Number of sign-in failures before wiping device","description":"Enter the number of sign-in attempts allowed, from 4 to 11, before the device is wiped. 0 (zero) might disable the device wipe functionality. When the value is blank, Intune doesn't change or update this setting.","helpText":"Enter a number (4-11)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"8dd80a6a5318cf16":{"id":"com.apple.asam_allowedapplications","displayName":"Allowed Applications","description":"An array of dictionaries that specifies the apps that can be granted access to the Accessibility APIs.","helpText":null,"infoUrls":[],"categoryId":"daa2ea69-8026-465a-942c-75eb0396d5b9","categoryName":"Autonomous Single App Mode","options":null},"8d618d0064554a7e":{"id":"com.apple.assetcache.managed_publicranges","displayName":"Public Ranges","description":"The ranges of public IP addresses that the cloud servers should use for matching clients to content caches.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"8db497a2200a9fee":{"id":"com.apple.directoryservice.managed_addefaultusershellflag","displayName":"AD Default User Shell Flag","description":"If true, enables the AD Default User Shell key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_addefaultusershellflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_addefaultusershellflag_true","displayName":"True","description":null,"helpText":null}]},"8d0845afcd6a9abe":{"id":"com.apple.directoryservice.managed_adwarnuserbeforecreatingma","displayName":"AD Warn User Before Creating MA","description":"If true, enables the warning before creating the mobile account.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adwarnuserbeforecreatingma_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adwarnuserbeforecreatingma_true","displayName":"True","description":null,"helpText":null}]},"8d51e28a634ca041":{"id":"com.apple.extensiblesso_type_kerberos","displayName":"Type","description":"This value must be Credential for the Kerberos extension.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":{"id":"com.apple.extensiblesso_type_kerberos_0","displayName":"Credential","description":null,"helpText":null}},"8d27264ec9a9fd38":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_application id","displayName":"Company Portal Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"8de927bf060295d3":{"id":"com.apple.managedclient.preferences_disableinboundconnectionfiltering","displayName":"Disable inbound connection filtering","description":"Disables filtering of inbound connections","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disableinboundconnectionfiltering_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableinboundconnectionfiltering_true","displayName":"Enabled","description":null,"helpText":null}]},"8d6d32ab64980984":{"id":"com.microsoft.edge.mamedgeappconfigsettings.configureshare","displayName":"Configure the Share experience","description":"If you set this policy to 'ShareAllowed' (the default), users can access the Share experience from the Settings and More Menu in Microsoft Edge to share with other apps on the system.\n\nIf you set this policy to 'ShareDisallowed', users can't access the Share experience. If the Share button is on the toolbar, it's hidden as well.\n\nPolicy options mapping:\n\n* ShareAllowed (0) = Allow using the Share experience\n\n* ShareDisallowed (1) = Don't allow using the Share experience\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.configureshare_shareallowed","displayName":"Allow using the Share experience","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configureshare_sharedisallowed","displayName":"Don't allow using the Share experience","description":null,"helpText":null}]},"8d1ce85e53513e10":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidersuggesturl_recommended","displayName":"Default search provider URL for suggestions (users can override)","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user entered so far.\n\nThis policy is optional. If you don't configure it, users can't see search suggestions; they see suggestions from their browsing history and favorites.\n\nBing's suggest URL can be specified as:\n\n'{bing:baseURL}qbox?query={searchTerms}'.\n\nGoogle's suggest URL can be specified as:\n\n'{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy isn't added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"8d17c9386bf60884":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedworkerextendedlifetimeenabled","displayName":"Enable the extended lifetime option for SharedWorkers","description":"Controls whether Microsoft Edge allows SharedWorkers to use the extendedLifetime option.\n\nIf you enable or don't configure this policy, SharedWorkers can use the extended lifetime option in the SharedWorker constructor.\n\nIf you disable this policy, the extended lifetime option is ignored, even if it is requested by the page.\n\nThis policy is temporary and will be removed in a future release.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedworkerextendedlifetimeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sharedworkerextendedlifetimeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8dfbff51efe342f6":{"id":"device_vendor_msft_defender_configuration_passiveremediation","displayName":"Passive Remediation","description":"Setting to control automatic remediation for Sense scans.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_passiveremediation_0","displayName":"Passive Remediation is turned off (default)","description":"Passive Remediation is turned off (default)","helpText":null},{"id":"device_vendor_msft_defender_configuration_passiveremediation_1","displayName":"PASSIVEREMEDIATIONFLAGSENSEAUTOREMEDIATION: Passive Remediation Sense AutoRemediation","description":"PASSIVE_REMEDIATION_FLAG_SENSE_AUTO_REMEDIATION: Passive Remediation Sense AutoRemediation","helpText":null},{"id":"device_vendor_msft_defender_configuration_passiveremediation_2","displayName":"PASSIVEREMEDIATIONFLAGRTPAUDIT: Passive Remediation Realtime Protection Audit","description":"PASSIVE_REMEDIATION_FLAG_RTP_AUDIT: Passive Remediation Realtime Protection Audit","helpText":null},{"id":"device_vendor_msft_defender_configuration_passiveremediation_4","displayName":"PASSIVEREMEDIATIONFLAGRTPREMEDIATION: Passive Remediation Realtime Protection Remediation","description":"PASSIVE_REMEDIATION_FLAG_RTP_REMEDIATION: Passive Remediation Realtime Protection Remediation","helpText":null}]},"8dd432ad0a70cc76":{"id":"device_vendor_msft_defender_configuration_schedulerrandomizationtime","displayName":"Scheduler Randomization Time","description":"This setting allows you to configure the scheduler randomization in hours. The randomization interval is [1 - 23] hours. For more information on the randomization effect please check the RandomizeScheduleTaskTimes setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"8dbfbb83c0c4a56f":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installtrustedocx","displayName":"Installation Policy for ActiveX control signed by trusted publisher","description":null,"helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installtrustedocx_0","displayName":"Don't install","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installtrustedocx_1","displayName":"Prompt the user","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installtrustedocx_2","displayName":"Silently install","description":null,"helpText":null}]},"8d2f2e485d51362c":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxrangesperfile","displayName":"Limit the maximum number of ranges that can be added to the file in a BITS job","description":"This policy setting limits the number of ranges that can be added to a file in a BITS job. By default, files in a BITS job are limited to 500 ranges per file. You can use this setting to raise or lower the maximum number ranges per file.\r\n\r\n If you enable this policy setting, BITS will limit the maximum number of ranges that can be added to a file to the specified number.\r\n\r\n If you disable or do not configure this policy setting, BITS will limit ranges to 500 ranges per file.\r\n\r\n Note: BITS Jobs created by services and the local administrator account do not count toward this limit.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxrangesperfile"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxrangesperfile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxrangesperfile_1","displayName":"Enabled","description":null,"helpText":null}]},"8d8e573146ea0e40":{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_changechapsecret","displayName":"Do not allow changes to initiator CHAP secret","description":" If enabled then do not allow the initiator CHAP secret to be changed. If disabled then the initiator CHAP secret may be changed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iscsi#admx-iscsi-iscsisecurity-changechapsecret"],"categoryId":"6c1d9109-e4d1-4718-a537-dd685464fdbe","categoryName":"i SCSI Security","options":[{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_changechapsecret_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iscsi_iscsisecurity_changechapsecret_1","displayName":"Enabled","description":null,"helpText":null}]},"8da4ac1b85e27ac1":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_c_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":null},"8d07c083a9f100ee":{"id":"device_vendor_msft_policy_config_authentication_enablewebsignin","displayName":"Enable Web Sign In","description":"Specifies whether web-based sign-in is allowed for signing in to Windows","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#enablewebsignin"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":[{"id":"device_vendor_msft_policy_config_authentication_enablewebsignin_0","displayName":"The feature defaults to the existing SKU and device capabilities.","description":"The feature defaults to the existing SKU and device capabilities.","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_enablewebsignin_1","displayName":"Enabled. Web Sign-in will be enabled for signing in to Windows","description":"Enabled. Web Sign-in will be enabled for signing in to Windows","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_enablewebsignin_2","displayName":"Disabled. Web Sign-in will not be enabled for signing in to Windows","description":"Disabled. Web Sign-in will not be enabled for signing in to Windows","helpText":null}]},"8d39beef3fbf2223":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_urlallowlistdesc","displayName":"Allow access to a list of URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"8d26e2ea4e67ab32":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_filehandlingallowedforurlsdesc","displayName":"Allow the File Handling API on these web apps (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"8d57d0be5f58b6f2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Safe Browsing warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on \"exe\" and \"jnlp\" extensions for *.example.com domains, and on \"swf\" extensions for all domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n{ \"file_extension\": \"jnlp\", \"domains\": [\"example.com\"] },\r\n{ \"file_extension\": \"exe\", \"domains\": [\"example.com\"] },\r\n{ \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nIf this policy is enabled alongside DownloadRestrictions, then the exemptions to file type extension-based warnings specified by this policy take precedence over a DownloadRestrictions setting that would block dangerous file types. The exemptions specified by this policy only apply to the \"block dangerous file types\" behavior specified by values 1 and 2 of DownloadRestrictions.\r\n\r\nFor example, if this policy specifies an exemption for \"exe\" downloads from \"website1.com\", and DownloadRestrictions is set to block malicious downloads and dangerous file types (value 1), then \"exe\" downloads from \"website1.com\" will be exempt from file type extension-based blocking but will still be blocked if they are malicious.\r\n\r\nMore information about DownloadRestrictions can be found at https://chromeenterprise.google/policies/?policy=DownloadRestrictions.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExemptDomainFileTypePairsFromFileTypeDownloadWarnings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://example.com\",\r\n \"example2.com\"\r\n ],\r\n \"file_extension\": \"jnlp\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"swf\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"8de1c2525ffd49a8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled","displayName":"Enable the browser's UI Automation accessibility framework provider on Windows","description":"Enables the UI Automation accessibility framework\r\nprovider in Google Chrome for use by\r\naccessibility tools.\r\n\r\nThis policy is supported in\r\nGoogle Chrome for a one-year\r\ntransition period to allow enterprise administrators to control the deployment\r\nof the browser's UI Automation accessibility\r\nframework provider. Accessibility and other tools that use the\r\nUI Automation accessibility framework to interoperate\r\nwith the browser may require updates to function properly with the browser's\r\nUI Automation provider. Administrators can use this\r\npolicy to temporarily disable the browser's\r\nUI Automation provider (thereby reverting to the old\r\nbehavior) while they work with vendors to provide updates to impacted tools.\r\n\r\nWhen set to false, Google Chrome only\r\nenables its Microsoft Active Accessibility\r\nprovider. Accessibility and other tools that use the newer\r\nUI Automation accessibility framework to interoperate\r\nwith the browser will communicate with it by way of a compatibility shim in\r\nMicrosoft® Windows®.\r\n\r\nWhen set to true, Google Chrome\r\nenables its UI Automation provider in addition to its\r\nMicrosoft Active Accessibility provider.\r\nAccessibility and other tools that use the newer\r\nUI Automation accessibility framework to interoperate\r\nwith the browser will communicate directly with it.\r\n\r\nWhen left unset, the variations framework in Google Chrome is used to enable or disable\r\nthe provider.\r\n\r\nSupport for this policy setting will end in Google Chrome 146.","helpText":"","infoUrls":[],"categoryId":"d9432f48-3072-4171-9031-4ebead394151","categoryName":"Accessibility settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8da8f2277f284194":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled","displayName":"Enable Printing LPAC Sandbox","description":"Setting the policy to Enabled or leaving it unset enables the LPAC Sandbox for printing services whenever the system configuration supports it.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security as services used for printing might run in a weaker sandbox configuration.\r\n\r\nOnly turn off the policy if there are compatibility issues with third party software that prevent printing services from operating correctly inside the LPAC Sandbox.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8de429c2776255c0":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_insecurehashesintlshandshakesenabled","displayName":"Insecure Hashes in TLS Handshakes Enabled","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_insecurehashesintlshandshakesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_insecurehashesintlshandshakesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8dcb0d1f7ff965b7":{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess","displayName":"Enable Controlled Folder Access","description":"The previous name was EnableGuardMyFolders and changed to EnableControlledFolderAccess. This policy enables setting the state (On/Off/Audit) for the controlled folder access feature. The controlled folder access feature removes modify and delete permissions from untrusted applications to certain folders such as My Documents.  Value type is integer and the range is 0 - 2.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_2","displayName":"Audit Mode","description":"Audit Mode","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_3","displayName":"Block disk modification only","description":"Block disk modification only","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_4","displayName":"Audit disk modification only","description":"Audit disk modification only","helpText":null}]},"8d4292d21a311672":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nCcdMaxCacheSizeInMBs specifies the maximum local cache size in megabytes, per user, during normal operation. Normal operation assumes that all Cloud Cache providers are available, and that storage performance is adequate to accept I/O at the rate necessary to accommodate profile utilization.\r\n\r\nCAUTION: Do not use this setting unless the performance and technical aspects to this setting are fully understood as this setting is a leading cause to poor performance and has limited use cases.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CcdMaxCacheSizeInMBs\r\nType: DWORD\r\nValues: Min (No Limit) = 0, Max = 1000000","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},"8d36dd0e375d3e25":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"8d39ae860c614767":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_shutdownsystemimmediatelyifunabletologsecurityaudits","displayName":"Audit Shutdown System Immediately If Unable To Log Security Audits","description":"Audit: Shut down system immediately if unable to log security audits This security setting determines whether the system shuts down if it is unable to log security events. If this security setting is enabled, it causes the system to stop if a security audit cannot be logged for any reason. Typically, an event fails to be logged when the security audit log is full and the retention method that is specified for the security log is either Do Not Overwrite Events or Overwrite Events by Days. If the security log is full and an existing entry cannot be overwritten, and this security option is enabled, the following Stop error appears: STOP: C0000244 {Audit Failed} An attempt to generate a security audit failed. To recover, an administrator must log on, archive the log (optional), clear the log, and reset this option as desired. Until this security setting is reset, no users, other than a member of the Administrators group will be able to log on to the system, even if the security log is not full. Note: On Windows versions prior to Windows Vista configuring this security setting, changes will not take effect until you restart Windows. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#audit_shutdownsystemimmediatelyifunabletologsecurityaudits"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"8dd74ded64ee5148":{"id":"device_vendor_msft_policy_config_memorydump_allowlivedump","displayName":"Allow Live Dump","description":"This policy setting decides if live dump collection on the machine is allowed or not.\n\nSupported values:\n0 - Disable live dump collection.\n1 (default) - Allow live dump collection.","helpText":"","infoUrls":[],"categoryId":"de9a9583-d660-4bdc-83bc-404c8c488267","categoryName":"Memory Dump","options":[{"id":"device_vendor_msft_policy_config_memorydump_allowlivedump_0","displayName":"Block","description":"Disable live dump collection.","helpText":null},{"id":"device_vendor_msft_policy_config_memorydump_allowlivedump_1","displayName":"Allow","description":"Allow live dump collection.","helpText":null}]},"8d83b9aef0702eb3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed","displayName":"Allow QUIC protocol","description":"Allows use of the QUIC protocol in Microsoft Edge.\r\n\r\nIf you enable this policy or don't configure it, the QUIC protocol is allowed.\r\n\r\nIf you disable this policy, the QUIC protocol is blocked.\r\n\r\nQUIC is a transport layer network protocol that can improve performance of web applications that currently use TCP.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8d369f3dc2e77e2c":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls","displayName":"Sites that can access video capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use video capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to video capture devices. Note, however, that the pattern \"*\", which matches any URL, is not supported by this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com/\r\nhttps://[*.]contoso.edu/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8d869b3e4ca9cd69":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting","displayName":"Configure cookies (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_1","displayName":"Let all sites create cookies","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_2","displayName":"Don't let any site create cookies","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_4","displayName":"Keep cookies for the duration of the session","description":null,"helpText":null}]},"8df432b97b515516":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_outlookexe36","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_outlookexe36_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_outlookexe36_1","displayName":"True","description":null,"helpText":null}]},"8d6cc578e0aff619":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown","displayName":"Update ring: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown_0","displayName":"Deferred","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown_5","displayName":"Production","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown_4","displayName":"Insiders","description":null,"helpText":null}]},"8d40a77c49a44b8e":{"id":"device_vendor_msft_policy_config_power_allowstandbywhensleepingpluggedin","displayName":"Allow standby states (S1-S3) when sleeping (plugged in)","description":"This policy setting manages whether or not Windows is allowed to use standby states when putting the computer in a sleep state.\n\nIf you enable or do not configure this policy setting, Windows uses standby states to put the computer in a sleep state.\n\nIf you disable this policy setting, standby states (S1-S3) are not allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-allowstandbywhensleepingpluggedin"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_allowstandbywhensleepingpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_allowstandbywhensleepingpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},"8d74a765b2fdb79c":{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxprocesses_maxprocessespershell","displayName":"MaxProcessesPerShell","description":"","helpText":"","infoUrls":[],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":null},"8d989b55e6063135":{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos","displayName":"Allow Pinned Folder Videos","description":"This policy controls the visibility of the Videos shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfoldervideos"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"8ddad5bc94cdd776":{"id":"device_vendor_msft_policy_config_storage_configstoragesensedownloadscleanupthreshold","displayName":"Config Storage Sense Downloads Cleanup Threshold","description":"When Storage Sense runs, it can delete files in the user’s Downloads folder if they haven’t been opened for more than a certain number of days. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the minimum number of days a file can remain unopened before Storage Sense deletes it from the Downloads folder. Supported values are: 0-365. If you set this value to zero, Storage Sense will not delete files in the user’s Downloads folder. The default is 0, or never deleting files in the Downloads folder. If you disable or do not configure this policy setting, then Storage Sense will not delete files in the user’s Downloads folder by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesensedownloadscleanupthreshold"],"categoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","categoryName":"Storage","options":null},"8d47c25c2eb39191":{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilot","displayName":"Disable Copilot","description":"If this setting is enabled, it will prevent your users from using any GitHub Copilot license (GitHub Copilot for Business, GitHub Copilot for Enterprise, and Copilot for Individual). For more information, see: https://aka.ms/CopilotGroupPolicy","helpText":"","infoUrls":[],"categoryId":"652a676c-9d60-4c9a-88b6-823a24961a9b","categoryName":"Copilot Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilot_1","displayName":"Enabled","description":null,"helpText":null}]},"8d8d28fef485ebba":{"id":"mathsettings_calculator","displayName":"Calculator","description":"If present, configures the built-in Calculator app.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"8dbc56c9334472fb":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist_l_numberofentries","displayName":"Number of entries: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bd1dad69-5cbe-415e-8565-e87b15cd4431","categoryName":"General","options":null},"8d50e4cebbfa651b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"Number of folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bd1dad69-5cbe-415e-8565-e87b15cd4431","categoryName":"General","options":null},"8da1a3370b050c21":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_datecolon44","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"8d1ed0ab4846a15e":{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames_delegatedpackagefamilynames_eids","displayName":"Apps permitted to revoke all protected data from the device for the specified enterprise identifier: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"86e78a4b-706a-4ec8-be90-439461abb29d","categoryName":"File Revocation","options":null},"8d289aa786512f9f":{"id":"user_vendor_msft_policy_config_admx_scripts_run_logoff_script_visible","displayName":"Display instructions in logoff scripts as they run (User)","description":"This policy setting displays the instructions in logoff scripts as they run.\r\n\r\nLogoff scripts are batch files of instructions that run when the user logs off. By default, the system does not display the instructions in the logoff script.\r\n\r\nIf you enable this policy setting, the system displays each instruction in the logoff script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.\r\n\r\nIf you disable or do not configure this policy setting, the instructions are suppressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-logoff-script-visible"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_logoff_script_visible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logoff_script_visible_1","displayName":"Enabled","description":null,"helpText":null}]},"8d25a8a4cd350f47":{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction","displayName":"Change Start Menu power button (User)","description":"Set the default action of the power button on the Start menu.\r\n\r\nIf you enable this setting, the Start Menu will set the power button to the chosen action, and not let the user change this action.\r\n\r\nIf you set the button to either Sleep or Hibernate, and that state is not supported on a computer, then the button will fall back to Shut Down.\r\n\r\nIf you disable or do not configure this setting, the Start Menu power button will be set to Shut Down by default, and the user can change this setting to another action.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-powerbuttonaction"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_1","displayName":"Enabled","description":null,"helpText":null}]},"8df17aa045cfe65d":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list","displayName":"Sync Method: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_syncprovider","displayName":"SyncProvider","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_none","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_external","displayName":"External","description":null,"helpText":null}]},"8df09541bbbecfe9":{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_profilesize","displayName":"Max Profile size (KB) (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":null},"8d7c1e32c902d661":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norunasinstallprompt","displayName":"Do not request alternate credentials (User)","description":"Prevents users from submitting alternate logon credentials to install a program.\r\n\r\nThis setting suppresses the \"Install Program As Other User\" dialog box for local and network installations. This dialog box, which prompts the current user for the user name and password of an administrator, appears when users who are not administrators try to install programs locally on their computers. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials.\r\n\r\nMany programs can be installed only by an administrator. If you enable this setting and a user does not have sufficient permissions to install a program, the installation continues with the current user's logon credentials. As a result, the installation might fail, or it might complete but not include all features. Or, it might appear to complete successfully, but the installed program might not operate correctly.\r\n\r\nIf you disable this setting or do not configure it, the \"Install Program As Other User\" dialog box appears whenever users install programs locally on the computer.\r\n\r\nBy default, users are not prompted for alternate logon credentials when installing programs from a network share. If enabled, this setting overrides the \"Request credentials for network installations\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-norunasinstallprompt"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norunasinstallprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norunasinstallprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"8d117e04d218757e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_serialaskforurlsdesc","displayName":"Allow the Serial API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"8d3932c503a94e94":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_webusballowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"8da46c53d25b0e87":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls_automaticfullscreenblockedforurlsdesc","displayName":"Block automatic fullscreen on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"8d982378cbf9ec44":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist","displayName":"Configure the list of domains for which the Password Manager (Save and Fill) will be disabled (User)","description":"Configure the list of domains where Google Chrome should disable the Password Manager. This means that Save and Fill workflows will be disabled, ensuring that passwords for those websites can't be saved or auto filled into web forms.\r\n\r\nIf a domain is present in the list, the Password Manager will be disabled for it.\r\n\r\nIf a domain is not present in the list, the Password Manager will be available for it.\r\n\r\nIf the policy is unset, the Password Manager will be available for all domains.\r\n\r\nExample value:\r\n\r\nexample.com\r\nlogin.example.com","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"8d96c4915e56f195":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"8d36f767a192b260":{"id":"user_vendor_msft_policy_config_kioskbrowser_enablehomebutton","displayName":"Enable Home Button (User)","description":"Enable/disable kiosk browser's home button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enablehomebutton"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":[{"id":"user_vendor_msft_policy_config_kioskbrowser_enablehomebutton_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"user_vendor_msft_policy_config_kioskbrowser_enablehomebutton_0","displayName":"Disable","description":"Disable","helpText":null}]},"8d78e028262eca44":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls","displayName":"Allow images on these sites (User)","description":"Define a list of sites, based on URL patterns, that can display images.\r\n\r\nIf you don't configure this policy, the global default value is used for all sites either from the 'DefaultImagesSetting' (Default images setting) policy (if set) or the user's personal configuration.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8dc677e5ac2a5fa3":{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting","displayName":"Set the default \"share additional operating system region\" setting (User)","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\r\n\r\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting will be shared with the web through the default JavaScript locale. If shared, websites will be able to query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\r\n\r\nIf you set this policy to \"Limited\", the OS Regional format will only be shared if its language part matches the Microsoft Edge display language.\r\n\r\nIf you set this policy to \"Always\", the OS Regional format will always be shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months can be displayed in one language while the surrounding text is displayed in another language.\r\n\r\nIf you set this policy to \"Never\", the OS Regional format will never be shared.\r\n\r\nExample 1: In this example the OS Regional format is set to \"en-GB\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Limited\", or \"Always\".\r\n\r\nExample 2: In this example the OS Regional format is set to \"es-MX\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Always\" but will not if the policy is set to \"Limited\".\r\n\r\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282\r\n\r\nPolicy options mapping:\r\n\r\n* Limited (0) = Limited\r\n\r\n* Always (1) = Always share the OS Regional format\r\n\r\n* Never (2) = Never share the OS Regional format\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"8deec0c2d36e6e95":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins","displayName":"Allow users to proceed from the HTTPS warning page for specific origins (User)","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\r\n\r\nIf you enable or don't configure the 'SSLErrorOverrideAllowed' (Allow users to proceed from the HTTPS warning page) policy, this policy does nothing.\r\n\r\nIf you disable the 'SSLErrorOverrideAllowed' policy, configuring this policy lets you configure a list of origin patterns for sites where users can continue to click through SSL error pages. Users can't click through SSL error pages on origins that are not on this list.\r\n\r\nIf you don't configure this policy, the 'SSLErrorOverrideAllowed' policy applies for all sites.\r\n\r\nFor detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy. This policy only matches based on origin, so any path or query in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"8dd81dd0907b6792":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacecompany_l_companyadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"8ddc99084dbecc44":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_oromo","displayName":"Oromo (User)","description":"Enables the editing language Oromo","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_oromo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_oromo_1","displayName":"Enabled","description":null,"helpText":null}]},"8dd4321385f62ae3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitcustomtags_l_officereadinesstoolkitcustomtagstag1","displayName":"Label 1: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"da04d4b8-bd11-439e-9663-5fd2399d9cc1","categoryName":"Readiness Toolkit","options":null},"8da3205daf187800":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablepasswordtoopenui","displayName":"Disable password to open UI (User)","description":"This policy setting controls whether Office 2016 users can add password encryption to documents. (Users would access this feature in Microsoft Office tab--click Info, click Protect Document, then click Encrypt with Password.)\r\n \r\n If you enable this policy setting, users cannot password protect their 2016 Office documents. \r\n \r\n\r\nIf you disable or do not configure this policy setting, users can encrypt their 2016 Office files with passwords.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablepasswordtoopenui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablepasswordtoopenui_1","displayName":"Enabled","description":null,"helpText":null}]},"8dc09bf6596756d3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey03","displayName":"Escrow Key #3 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey03_1","displayName":"Enabled","description":null,"helpText":null}]},"8dca6a71e5a09faf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02_l_datecolon243","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"8d83faf9ae3d5083":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_managingcategoriesduringe_mailexchanges","displayName":"Managing Categories during e-mail exchanges (User)","description":"By default, categories on incoming e-mail are removed, and categories are removed when replying to or forwarding an e-mail. This setting allows you to control how categories are shared as users exchange e-mail messages. You can specify that categories are not removed for users' incoming e-mail. You can also specify that e-mail messages that users reply to or forward retain the categories on the original message.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_managingcategoriesduringe_mailexchanges_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_managingcategoriesduringe_mailexchanges_1","displayName":"Enabled","description":null,"helpText":null}]},"8de4be1264977c38":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablereadingpane","displayName":"Do not display the reading pane (User)","description":"By default, the Reading Pane is enabled only in the mail module and located on the right hand side of the window. This setting allows you to disable the reading pane.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablereadingpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablereadingpane_1","displayName":"Enabled","description":null,"helpText":null}]},"8d405479e0918cd3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime","displayName":"End Time: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1020","displayName":"5:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_0","displayName":"12:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_30","displayName":"12:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_60","displayName":"1:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_90","displayName":"1:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_120","displayName":"2:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_150","displayName":"2:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_180","displayName":"3:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_210","displayName":"3:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_240","displayName":"4:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_270","displayName":"4:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_300","displayName":"5:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_330","displayName":"5:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_360","displayName":"6:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_390","displayName":"6:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_420","displayName":"7:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_450","displayName":"7:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_480","displayName":"8:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_510","displayName":"8:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_540","displayName":"9:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_570","displayName":"9:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_600","displayName":"10:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_630","displayName":"10:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_660","displayName":"11:00 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_690","displayName":"11:30 AM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_720","displayName":"12:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_750","displayName":"12:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_780","displayName":"1:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_810","displayName":"1:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_840","displayName":"2:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_870","displayName":"2:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_900","displayName":"3:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_930","displayName":"3:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_960","displayName":"4:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_990","displayName":"4:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1050","displayName":"5:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1080","displayName":"6:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1110","displayName":"6:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1140","displayName":"7:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1170","displayName":"7:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1200","displayName":"8:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1230","displayName":"8:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1260","displayName":"9:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1290","displayName":"9:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1320","displayName":"10:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1350","displayName":"10:30 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1380","displayName":"11:00 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workinghours_l_endtime_1410","displayName":"11:30 PM","description":null,"helpText":null}]},"8d7085eeb765b8a3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_l_ignoreoriginalmessagetextinreplyorforward","displayName":"Ignore original message text in reply or forward (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d6bd7b5c-b0ba-4cc1-bcaa-48b0f48e416b","categoryName":"Spelling","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_l_ignoreoriginalmessagetextinreplyorforward_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_spelling_l_general_l_ignoreoriginalmessagetextinreplyorforward_1","displayName":"True","description":null,"helpText":null}]},"8d6b774b3c993184":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings","displayName":"Minimum encryption settings (User) (Deprecated)","description":"This policy setting allows you to set the minimum key length for an encrypted e-mail message.\r\n\r\nIf you enable this policy setting, you may set the minimum key length for an encrypted e-mail message. Outlook will display a warning dialog if the user tries to send a message using an encryption key that is below the minimum encryption key value set. The user can still choose to ignore the warning and send using the encryption key originally chosen.\r\n\r\nIf you disable or do not configure this policy setting, a dialog warning will be shown to the user if the user attempts to send a message using encryption. The user can still choose to ignore the warning and send using the encryption key originally chosen.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_minimumencryptionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"8d11cc82b672bded":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeinteroperabilitywithexternalclients","displayName":"S/MIME interoperability with external clients: (User)","description":"This policy setting controls whether Outlook decodes encrypted messages itself or passes them to an external program for processing.\r\n\r\nIf you enable this policy setting, you can choose from three options for configuring external S/MIME clients:\r\n\r\n- Handle internally. Outlook decrypts all S/MIME messages itself.\r\n- Handle externally. Outlook hands all S/MIME messages off to the configured external program.\r\n- Handle if possible. Outlook attempts to decrypt all S/MIME messages itself. If it cannot decrypt a message, Outlook hands the message off to the configured external program. This option is the default configuration.\r\n\r\nIf you disable or do not configure this policy setting, the behavior is the equivalent of selecting Enabled – Handle if possible.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeinteroperabilitywithexternalclients_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeinteroperabilitywithexternalclients_1","displayName":"Enabled","description":null,"helpText":null}]},"8d202fab81c2e81e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_specifyofflineaddressbookpath_l_specifyofflineaddressbookpathid","displayName":"Offline Address Book path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ff87ffcb-a827-4d2b-90fc-e5789ef6d3e0","categoryName":"E-mail","options":null},"8d3bd27b5e2bc8b7":{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_predefined_l_disableeditdefaultuserpermissions","displayName":"Limit which permissions can be assigned to Default, Anonymous, or My Organization on mail folders and calendars (User)","description":"This policy setting allows you to limit which permissions can be assigned to Default, Anonymous, or My Organization on mail folders and calendars.\r\n\r\nIf you enable this policy setting, users can assign only the following permissions to Default, Anonymous, or My Organization.\r\n\r\n- None on mail folders\r\n- None or basic Free/Busy information on calendars\r\n\r\nUsers won't be able to assign any other permissions to Default, Anonymous, or My Organization. All permissions will still be available to assign to other users on mail folders and calendars.\r\n\r\nIf you disable or don't configure this policy setting, users can assign any permissions to Default, Anonymous, or My Organization on mail folders and calendars.","helpText":"","infoUrls":[],"categoryId":"d59dfcc1-6c35-41de-bfb6-de94b8120ca5","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_predefined_l_disableeditdefaultuserpermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_predefined_l_disableeditdefaultuserpermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"8d56b8f54537902d":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize80_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"28ab8eed-623a-4e9b-813e-13256472dbaf","categoryName":"Customizable Error Messages","options":null},"8da91932586692b7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_hidebuiltintablestyles","displayName":"Hide built in table styles (User)","description":"Hides the built in table styles for PowerPoint. By default, built-in styles are shown.","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_hidebuiltintablestyles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_hidebuiltintablestyles_1","displayName":"Enabled","description":null,"helpText":null}]},"8d7e519e21735198":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing~l_autoformatasyoutype_l_autofitbodytexttoplaceholder","displayName":"AutoFit body text to placeholder (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"b792508d-da03-4174-bcf1-666d128ee8ad","categoryName":"AutoFormat as you type","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing~l_autoformatasyoutype_l_autofitbodytexttoplaceholder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing~l_autoformatasyoutype_l_autofitbodytexttoplaceholder_1","displayName":"Enabled","description":null,"helpText":null}]},"8db7fe0a7589cbd0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjmovecompleted","displayName":"Move end of completed parts after status date back to status date (User)","description":"Moves the completed portion of a task back to finish at the status date.\r\n\r\nIf you enable this setting, the completed portion of the task moves back to finish at the status date.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjmovecompleted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjmovecompleted_1","displayName":"Enabled","description":null,"helpText":null}]},"8de89f4d72934e67":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultotime","displayName":"Default overtime rate (User)","description":"Specifies the overtime pay rate for new resources.\r\n \r\nIf you enable this setting, all new resources will use the specified overtime pay rate\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"0a6bc3ed-c4cd-4928-bcbf-247369a51515","categoryName":"General options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultotime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultotime_1","displayName":"Enabled","description":null,"helpText":null}]},"8d1a1007ed37f6f4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_setdefaultstartdatefornewtasks","displayName":"Set default start date for new tasks (User)","description":"This policy setting specifies the default start date for new tasks as they are entered in the current project. For projects scheduled from the start date, the options are \"Start on Project Start Date\" and \"Start on Current Date.\" For projects scheduled from the finish date, the options are \"Finish on Project Finish Date\" and \"Start on Current Date.\"\r\n\r\nIf you enable or do not configure this policy setting, new tasks will start on the project start date.\r\n\r\nIf you disable this policy setting, new tasks will not start on the project start date.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_setdefaultstartdatefornewtasks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_setdefaultstartdatefornewtasks_1","displayName":"Enabled","description":null,"helpText":null}]},"8d23d4c62aac9fb5":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":null},"8d0475936f966e01":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_l_angle8","displayName":"Angle (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_l_angle8_81","displayName":"Degrees","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_l_angle8_82","displayName":"Deg-Min-Sec","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_l_angle8_84","displayName":"Min-Sec","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_l_angle8_85","displayName":"Seconds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_l_angle8_83","displayName":"Radians","description":null,"helpText":null}]},"8dfaf8af91aaca4d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_addons","displayName":"Add-ons (User)","description":"Displays the additional location of macros and add-ons.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_addons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_addons_1","displayName":"Enabled","description":null,"helpText":null}]},"8d6d259e7648f0f0":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_l_setmaximumnumberoftrustrecordstopreservespinid","displayName":"Maximum to preserve: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"8da103f720c0652d":{"id":"user_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp","displayName":"Remove Microsoft Copilot App (User)","description":"This policy setting allows you to uninstall Microsoft Copilot from devices in a targeted way. It will apply to devices/users that meet the below conditions: Microsoft 365 Copilot and Microsoft Copilot are both installed; the Microsoft Copilot app was not installed by the user; the Microsoft Copilot app was not launched in the last 14 days. If this policy is enabled, the Microsoft Copilot app will be uninstalled. Users can still re-install if they choose to. This setting applies to Enterprise, Professional and Education client SKUs only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#removemicrosoftcopilotapp"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp_0","displayName":"Removal Disabled.","description":"Removal Disabled.","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp_1","displayName":"Removal Enabled.","description":"Removal Enabled.","helpText":null}]},"8de3e5d4b07e630f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchkikutekisutotekusuto","displayName":"Match ki/ku (tekisuto/tekusuto) (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchkikutekisutotekusuto_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchkikutekisutotekusuto_1","displayName":"Enabled","description":null,"helpText":null}]},"8d8d8a4ea46ca3c0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11","displayName":"Trusted Location #11 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_1","displayName":"Enabled","description":null,"helpText":null}]},"8dfc73935a20f33e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_descriptioncolon66","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/8e.json b/public/intune-definitions/8e.json new file mode 100644 index 000000000000..14e96b00429f --- /dev/null +++ b/public/intune-definitions/8e.json @@ -0,0 +1 @@ +{"8e38f1dffe7aac7f":{"id":"com.android.devicerestrictionpolicy.wifiblockeditconfigurations","displayName":"Block Wi-Fi access point configuration","description":"If 'True', prevents users from creating or changing any Wi-Fi configurations. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to change the Wi-Fi settings on the device. Available for fully managed, dedicated and corporate-owned work profile devices. ","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.wifiblockeditconfigurations_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.wifiblockeditconfigurations_true","displayName":"True","description":"True","helpText":null}]},"8ef5acf158636ff2":{"id":"com.apple.applicationaccess_allowenterprisebookmetadatasync","displayName":"Allow Enterprise Book Metadata Sync","description":"If false, disables sync of Enterprise books, notes, and highlights. Available in iOS 8 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowenterprisebookmetadatasync_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowenterprisebookmetadatasync_true","displayName":"True","description":null,"helpText":null}]},"8eba678ad8352f4b":{"id":"com.apple.applicationaccess_allowfilesnetworkdriveaccess","displayName":"Allow Files Network Drive Access","description":"If false, prevents connecting to network drives in the Files app. Requires a supervised device. Available in iOS 13.1 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfilesnetworkdriveaccess_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfilesnetworkdriveaccess_true","displayName":"True","description":null,"helpText":null}]},"8ed047fbe3930872":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_start","displayName":"Start","description":"The curfew start time, in the format %d:%d:%d.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"8eb77f5c7f65fa3b":{"id":"com.apple.managedclient.preferences_forcecertificatepromptsonmultiplematches","displayName":"Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with \"AutoSelectCertificateForUrls\"","description":"Toggles whether users are prompted to select a certificate if there are multiple certificates available and a site is configured with \"AutoSelectCertificateForUrls\". If you don't configure \"AutoSelectCertificateForUrls\" for a site, the user will always be prompted to select a certificate.\n\nIf you set this policy to True, Microsoft Edge will prompt a user to select a certificate for sites on the list defined in \"AutoSelectCertificateForUrls\" if and only if there is more than one certificate.\n\nIf you set this policy to False or don't configure it, Microsoft Edge will automatically select a certificate even if there are multiple matches for a certificate. The user will not be prompted to select a certificate for sites on the list defined in \"AutoSelectCertificateForUrls\".","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forcecertificatepromptsonmultiplematches"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forcecertificatepromptsonmultiplematches_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forcecertificatepromptsonmultiplematches_true","displayName":"Enabled","description":null,"helpText":null}]},"8e01dbc18a96a488":{"id":"com.apple.managedclient.preferences_passwordmonitorallowed","displayName":"Allow Microsoft Edge to monitor user passwords","description":"If you enable this policy and a user consents to enabling the policy, the user will get alerted if any of their passwords stored in Microsoft Edge are found to be unsafe. Microsoft Edge will show an alert and this information will also be available in Settings > Passwords > Password Monitor.\n\nIf you disable this policy, users will not be asked for permission to enable this feature and will not be alerted. Their passwords will not be scanned.\n\nIf you disable this policy, users can't change or override the policy. However, if you enable or don't configure the policy, users can turn this feature on or off.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordmonitorallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_passwordmonitorallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_passwordmonitorallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"8e8f36d1cfa52728":{"id":"com.apple.managedclient.preferences_postquantumkeyagreementenabled","displayName":"Enable post-quantum key agreement for TLS","description":"This policy configures whether Microsoft Edge offers a post-quantum key agreement algorithm in TLS. This lets supporting servers protect user traffic from being decrypted by quantum computers.\n\nIf you enable or don't configure this policy, Microsoft Edge offers a post-quantum key agreement in TLS connections. TLS connections are protected from quantum computers when communicating with compatible servers.\n\nIf you disable this policy, Microsoft Edge will not offer a post-quantum key agreement in TLS connections. User traffic is unprotected from decryption by quantum computers.\n\nOffering a post-quantum key agreement is backwards-compatible. Existing TLS servers and networking middleware are expected to ignore the new option and continue selecting previous options.\n\nHowever, devices that don't implement TLS correctly may malfunction when offered the new option. For example, they might disconnect in response to unrecognized options or the resulting larger messages. These devices aren't post-quantum-ready and will interfere with an enterprise's post-quantum transition. If this issue is encountered, administrators should contact the vendor for a fix.\n\nThis policy is a temporary measure and will be removed in future versions of Microsoft Edge. You can enable it to test for issues and you can disable it while you resolve issues.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#postquantumkeyagreementenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_postquantumkeyagreementenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_postquantumkeyagreementenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8e2dc5bbd17b277a":{"id":"com.apple.managedclient.preferences_scarewareblockerprotectionenabled","displayName":"Configure Microsoft Edge Scareware blocker protection","description":"This policy setting allows administrators to control whether Microsoft Edge enables Scareware blocker, an AI-powered feature for protecting users from potential tech scams. To support this feature, Microsoft Edge downloads a machine learning model file from Microsoft to the device.\n\nIf you enable or don’t configure this policy, Microsoft Edge Scareware blocker uses local AI to detect potential tech scams.\n\nIf you disable this policy, Microsoft Edge Scareware blocker is disabled. The machine learning model file doesn't download to the device, and if downloaded deletion occurs.\n\nWhen this policy is enabled, the policies \"ScarewareBlockerBlocksDetectedSitesEnabled\", \"ScarewareBlockerSendDetectedSitesToSmartScreenEnabled\", and \"ScarewareBlockerAllowListDomains\" can be used to configure the behavior of the Scareware blocker feature. If both of those policies are disabled, enabling this policy has no effect.\n\nWhen this policy is disabled, the policies \"ScarewareBlockerBlocksDetectedSitesEnabled\", \"ScarewareBlockerSendDetectedSitesToSmartScreenEnabled\", and \"ScarewareBlockerAllowListDomains\" have no effect.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#scarewareblockerprotectionenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_scarewareblockerprotectionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_scarewareblockerprotectionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8e8a379df57ae62b":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifiertype_0","displayName":"bundleID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"8eb261975e763a1b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensioninstallforcelist","displayName":"Control which extensions are installed silently","description":"Set this policy to specify a list of apps and extensions that install silently, without user interaction. Users can't uninstall or turn off this setting. Permissions are granted implicitly, including the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. Note: These two APIs aren't available to apps and extensions that aren't force-installed.\n\nIf you don't set this policy, no apps or extensions are autoinstalled and users can uninstall any app in Microsoft Edge.\n\nThis policy supersedes \"ExtensionInstallBlocklist\" policy. If a previously force-installed app or extension is removed from this list, Microsoft Edge automatically uninstalls it.\n\nFor Windows instances not joined to a Microsoft Active Directory domain, forced installation is limited to apps and extensions listed in the Microsoft Edge Add-ons website.\n\nOn macOS instances, apps and extensions from outside the Microsoft Edge Add-ons website can only be force installed if the instance is managed via MDM, or joined to a domain via MCX.\n\nThe source code of any extension can be altered by users with developer tools, potentially rendering the extension unfunctional. If there's a concern, configure the \"DeveloperToolsAvailability\" policy.\n\nEach list item of the policy is a string that contains an extension ID and, optionally, and an optional \"update\" URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on edge://extensions when in Developer mode. If specified, the \"update\" URL should point to an Update Manifest XML document ( https://go.microsoft.com/fwlink/?linkid=2095043 ). The update URL should use one of the following schemes: http, https, or file. By default, the Microsoft Edge Add-ons website's update URL is used. The \"update\" URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension's manifest. The update url for subsequent updates can be overridden using the ExtensionSettings policy. See https://learn.microsoft.com/deployedge/microsoft-edge-manage-extensions-ref-guide.\n\nNote: This policy doesn't apply to InPrivate mode. Read about hosting extensions at [Publish and update extensions in the Microsoft Edge Add-ons website](/microsoft-edge/extensions-chromium/enterprise/hosting-and-updating).\n\nStarting in Microsoft Edge version 149, the \"Microsoft365CopilotChatIconEnabled\" policy controls the display of Copilot in the toolbar.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"8e39cec03778f554":{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventtyposquattingpromptoverride","displayName":"Prevent bypassing Edge Website Typo Protection prompts for sites","description":"This policy setting lets you decide whether users can override the Edge Website Typo Protection warnings about potential typosquatting websites.\n\nIf you enable this setting, users can't ignore Edge Website Typo Protection warnings, and they're blocked from continuing to the site.\n\nIf you disable or don't configure this setting, users can ignore Edge Website Typo Protection warnings and continue to the site.\n\nThis only takes effect when TyposquattingCheckerEnabled policy isn't set or is set to enabled.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventtyposquattingpromptoverride_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventtyposquattingpromptoverride_true","displayName":"Enabled","description":null,"helpText":null}]},"8e1be6aeb12f6a83":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_personalcolors_personalcolors_accent","displayName":"Accent color:","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"8eaa3ec523aafee3":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_wermaxqueuesize","displayName":"Maximum size of the queue (MB):","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"8e78c7ca4b0d50c6":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshratedc_gprefreshrateoffset2","displayName":"Minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"8e92c54c63b7fc52":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_2_lbl_goofflineactioncombo","displayName":"Action:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_2_lbl_goofflineactioncombo_0","displayName":"Work offline","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_2_lbl_goofflineactioncombo_1","displayName":"Never go offline","description":null,"helpText":null}]},"8ef8ca1cad09c257":{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomponentfailurespolicy_detectdeprecatedcomponentfailureslevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomponentfailurespolicy_detectdeprecatedcomponentfailureslevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectdeprecatedcomponentfailurespolicy_detectdeprecatedcomponentfailureslevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"8eaa94e0ef6d2919":{"id":"device_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyexecute_access_2","displayName":"Removable Disks: Deny execute access","description":"This policy setting denies execute access to removable disks.\r\n\r\nIf you enable this policy setting, execute access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, execute access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removabledisks-denyexecute-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyexecute_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyexecute_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"8e9e1388c0a62404":{"id":"device_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior","displayName":"Set the default behavior for AutoRun","description":"This policy setting sets the default behavior for Autorun commands.\n\n Autorun commands are generally stored in autorun.inf files. They often launch the installation program or other routines.\n\n Prior to Windows Vista, when media containing an autorun command is inserted, the system will automatically execute the program without user intervention.\n\n This creates a major security concern as code may be executed without user's knowledge. The default behavior starting with Windows Vista is to prompt the user whether autorun command is to be run. The autorun command is represented as a handler in the Autoplay dialog.\n\n If you enable this policy setting, an Administrator can change the default Windows Vista or later behavior for autorun to:\n\n a) Completely disable autorun commands, or\n b) Revert back to pre-Windows Vista behavior of automatically executing the autorun command.\n\n If you disable or not configure this policy setting, Windows Vista or later will prompt the user whether autorun command is to be run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-setdefaultautorunbehavior"],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"device_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"8e2228f7c4208801":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots","displayName":"Disable taking screenshots","description":"Setting the policy to True disallows screenshots taken with keyboard shortcuts or extension APIs. Setting the policy to False allows screenshots.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots_1","displayName":"Enabled","description":null,"helpText":null}]},"8eecc9711f13afc9":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled","displayName":"Allow automatic sign-in to Microsoft® cloud identity providers","description":"Configures automatic user sign-in for accounts backed by a Microsoft® cloud identity provider.\r\n\r\nBy setting this policy to 1 (Enabled), users who sign into their computer with an account backed by a Microsoft® cloud identity provider (i.e., Microsoft® Azure® Active Directory® or the consumer Microsoft® account identity provider) or who have added a work or school account to Microsoft® Windows® can be signed into web properties using that identity automatically. Information pertaining to the user's device and account is transmitted to the user's cloud identity provider for each authentication event.\r\n\r\nBy setting this policy to 0 (Disabled) or leaving it unset, automatic sign-in as described above is disabled.\r\n\r\nThis feature is available starting in Microsoft® Windows® 10.\r\n\r\nNote: This policy doesn't apply to Incognito or Guest modes.","helpText":"","infoUrls":[],"categoryId":"463e6791-7d54-4964-a36b-63bbedb7d0cd","categoryName":"Microsoft Active Directory management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8e335fe100da47e7":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory_ccdproxydirectory","displayName":"Proxy Directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"f2d139ed-a314-48b7-b700-4d11adfcc309","categoryName":"Cloud Cache Service","options":null},"8e092030673716f1":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations","displayName":"VHD Locations","description":"Specifies the network location where the VHD(X) files are stored.\r\n\r\nExamples:\r\n- Sinlge location: \\\\\\\r\n- Multiple locations: \\\\\\;\\\\\\\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDLocations\r\nREG_SZ","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},"8e700a87bd0e6905":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles","displayName":"Allow loading of XAML files","description":"This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation.\n\nIf you enable this policy setting and set the drop-down box to Enable, XAML files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XAML files.\n\nIf you disable this policy setting, XAML files are not loaded inside Internet Explorer. The user cannot change this behavior.\n\nIf you do not configure this policy setting, the user can decide whether to load XAML files inside Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowloadingofxamlfiles"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"8e52cce460728f9e":{"id":"device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton","displayName":"Enable End Session Button","description":"Enable/disable kiosk browser's end session button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enableendsessionbutton"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":[{"id":"device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_0","displayName":"Disable","description":"Disable","helpText":null}]},"8eb7aa45fd688cbd":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests","displayName":"Network Security Allow PKU2U Authentication Requests","description":"Network security: Allow PKU2U authentication requests to this computer to use online identities. This policy will be turned off by default on domain joined machines. This would prevent online identities from authenticating to the domain joined machine.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_allowpku2uauthenticationrequests"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests_0","displayName":"Block","description":"Block","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests_1","displayName":"Allow","description":"Allow","helpText":null}]},"8e7690da4bebd557":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_imagesallowedforurlsdesc","displayName":"Allow images on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"8ead1f7aeaa5c7c5":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit","displayName":"Clear cached images and files when Microsoft Edge closes","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\r\n\r\nIf you enable this policy, cached images and files will be deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy, users cannot configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\r\n\r\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\r\n\r\nIf you disable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you configure both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"8eb1de9e8e927a16":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_preventtokenactivationdialogfromclosing","displayName":"Prevent Token Activation dialog from closing","description":"This policy setting allows you to prevent the Token Activation prompt for activation dialog from closing.\r\n\r\nIf you enable this policy setting, the \"Close\" button and the \"X\" button at the upper right of the dialog are suppressed. If the user proceeds with activation and fails, the buttons will be enabled the next time the dialog appears.\r\n\r\nIf you disable or do not configure this policy setting, the user may close the dialog when prompted for activation.","helpText":"","infoUrls":[],"categoryId":"712d184f-d9ac-45fc-9eea-aade3a22b55e","categoryName":"Volume Activation","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_preventtokenactivationdialogfromclosing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_preventtokenactivationdialogfromclosing_1","displayName":"Enabled","description":null,"helpText":null}]},"8e42e3f6201e38af":{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_driver_exclusionlistentry_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"8e59ad830e664e75":{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing","displayName":"Require Pin For Pairing","description":"This policy setting allows you to require a pin for pairing. If you set this to 0, a pin isn't required for pairing. If you set this to 1, the pairing ceremony for new devices will always require a PIN. If you set this to 2, all pairings will require PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#requirepinforpairing"],"categoryId":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing_0","displayName":"PIN is not required.","description":"PIN is not required.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing_1","displayName":"Pairing ceremony for new devices will always require a PIN","description":"Pairing ceremony for new devices will always require a PIN","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing_2","displayName":"All pairings will require PIN","description":"All pairings will require PIN","helpText":null}]},"8e2a34e599eea728":{"id":"extensionsettings_managedextensions_generickey_alloweddomains","displayName":"Allowed Domains","description":"Controls the domains and sub-domains the extension is granted access to. Any non-prefixed domains take precedence over prefixed domains, and DeniedDomains takes precedence over AllowedDomains. Any domains not specified in AllowedDomains or DeniedDomains are configurable by the user.","helpText":null,"infoUrls":[],"categoryId":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","categoryName":"Safari Extension Settings","options":null},"8ea59e16d709e9ba":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Disable all application add-ins (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n\r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users.","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"8e4aef9064ca943d":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpolinksdisabled","displayName":"Create new Group Policy Object links disabled by default (User)","description":"This policy setting allows you to create new Group Policy object links in the disabled state.\r\n\r\nIf you enable this setting, you can create all new Group Policy object links in the disabled state by default. After you configure and test the new object links by using a policy compliant Group Policy management tool such as Active Directory Users and Computers or Active Directory Sites and Services, you can enable the object links for use on the system.\r\n\r\nIf you disable this setting or do not configure it, new Group Policy object links are created in the enabled state. If you do not want them to be effective until they are configured and tested, you must disable the object link.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-newgpolinksdisabled"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpolinksdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpolinksdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8ee4d47703f15bba":{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_1","displayName":"Do not allow Snipping Tool to run (User)","description":"Prevents the snipping tool from running.\r\n\r\nIf you enable this policy setting, the Snipping Tool will not run.\r\n\r\nIf you disable this policy setting, the Snipping Tool will run.\r\n\r\nIf you do not configure this policy setting, the Snipping Tool will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablesnippingtool-1"],"categoryId":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","categoryName":"Accessories","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_1_1","displayName":"Enabled","description":null,"helpText":null}]},"8ef3e70480feb31e":{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_1","displayName":"Prevent launch an application (User)","description":"Prevents the user from launching an application from a Tablet PC hardware button.\r\n\r\nIf you enable this policy, applications cannot be launched from a hardware button, and \"Launch an application\" is removed from the drop down menu for configuring button actions (in the Tablet PC Control Panel buttons tab).\r\n\r\nIf you disable this policy, applications can be launched from a hardware button.\r\n\r\nIf you do not configure this policy, applications can be launched from a hardware button.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventlaunchapp-1"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_1_1","displayName":"Enabled","description":null,"helpText":null}]},"8e332dade20a147f":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016","displayName":"Microsoft Office 365 Access 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Access 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Access 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365access2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016_1","displayName":"Enabled","description":null,"helpText":null}]},"8eb9b7373d2257e8":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013","displayName":"Microsoft Office 365 Publisher 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Publisher 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Publisher 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365publisher2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013_1","displayName":"Enabled","description":null,"helpText":null}]},"8ea2ab6f9e4270b4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed","displayName":"Allow default search provider context menu search access (User)","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider will be available.\r\n\r\nThe policy value is only appled when the DefaultSearchProviderEnabled policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"8e55643b5cdbed2a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl","displayName":"Default search provider suggest URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"8ea6c29ac4ab6c10":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_remoteaccesshostmaximumsessiondurationminutes","displayName":"Maximum session duration allowed for remote access connections: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"8e020a00288ed7b1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup","displayName":"Action on startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_5","displayName":"Open New Tab Page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"8e0476b547bce6ca":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_windowplacementblockedforurlsdesc","displayName":"Block Window Placement permission on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"8eac07c2972ea8e6":{"id":"user_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode","displayName":"Turn on Enhanced Protected Mode (User)","description":"Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system.\n\nIf you enable this policy setting, Enhanced Protected Mode will be turned on. Any zone that has Protected Mode enabled will use Enhanced Protected Mode. Users will not be able to disable Enhanced Protected Mode.\n\nIf you disable this policy setting, Enhanced Protected Mode will be turned off. Any zone that has Protected Mode enabled will use the version of Protected Mode introduced in Internet Explorer 7 for Windows Vista.\n\nIf you do not configure this policy, users will be able to turn on or turn off Enhanced Protected Mode on the Advanced tab of the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenhancedprotectedmode"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"8ea1f8591caa3127":{"id":"user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles","displayName":"Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet (User)","description":"This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter warns the user about executable files that Internet Explorer users do not commonly download from the Internet.\n\nIf you enable this policy setting, SmartScreen Filter warnings block the user.\n\nIf you disable or do not configure this policy setting, the user can bypass SmartScreen Filter warnings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"8e47efd21597e027":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker","displayName":"Use Pop-up Blocker (User)","description":"This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.\n\nIf you enable this policy setting, most unwanted pop-up windows are prevented from appearing.\n\nIf you disable this policy setting, pop-up windows are not prevented from appearing.\n\nIf you do not configure this policy setting, most unwanted pop-up windows are prevented from appearing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneusepopupblocker"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_1","displayName":"Enabled","description":null,"helpText":null}]},"8e350c04f1319ff6":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"8e3f65cd328b7fe4":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"8eb1cb59aa26d4eb":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled","displayName":"Enable spellcheck (User)","description":"If you enable or don't configure this policy, the user can use spellcheck.\r\n\r\nIf you disable this policy, the user can't use spellcheck and the 'SpellcheckLanguage' (Enable specific spellcheck languages) and 'SpellcheckLanguageBlocklist' (Force disable spellcheck languages) policies are also disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8e113d914e837044":{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled","displayName":"Allows users to translate videos to different languages. (User)","description":"This policy configures the on-device real-time video translation feature in Microsoft Edge.\r\nWith this feature, users can watch videos translated into their selected language in real time.\r\n\r\nWhen a user selects the Translate icon and chooses a source (video language) and target language (translated language),\r\ntranslation components are downloaded on first use (approximately 200 MB per language pair).\r\n\r\nThese components may be updated periodically to improve performance and translation quality.\r\nTranslation is performed locally on the user’s device and no data is sent outside of the device.\r\nThe feature is available only for non-DRM videos, on supported high-end devices, with select language pairs, and in select regions.\r\nFor more details, see https://www.microsoft.com/en-us/edge/features/real-time-video-translation.\r\n\r\nIf you enable or don’t configure this policy, the on-device real-time video translation feature is enabled and\r\nusers will see the Translate button when hovering over videos.\r\n\r\nIf you disable this policy, the on-device real-time video translation feature is disabled and the Translate button won’t be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8efff8afd34d4697":{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_30","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"8e5ea06b04737726":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist","displayName":"Configure the list of domains for which the password manager UI (Save and Fill) will be disabled (User)","description":"Configure the list of domains where Microsoft Edge should disable the password manager. This means that Save and Fill workflows will be disabled, ensuring that passwords for those websites can't be saved or auto filled into web forms.\r\n\r\nIf you enable this policy, the password manager will be disabled for the specified set of domains.\r\n\r\nIf you disable or don't configure this policy, password manager will work as usual for all domains.\r\n\r\nIf you configure this policy, that is, add domains for which password manager is blocked, users can't change or override the behavior in Microsoft Edge. In addition, users can't use password manager for those URLs.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com/\r\nhttps://login.contoso.com","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"8e3962cde8a23d43":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastserviceserverurl3","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"8ef8e64459d6dcbf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyexcel","displayName":"Disallow in Excel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyexcel_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyexcel_1","displayName":"True","description":null,"helpText":null}]},"8e9ce498947b3f22":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kashmiriarabic","displayName":"Kashmiri (Arabic) (User)","description":"Enables the editing language Kashmiri (Arabic)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kashmiriarabic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kashmiriarabic_1","displayName":"Enabled","description":null,"helpText":null}]},"8e4e7f9282cdc29d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_l_workflowcachename493","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"8ed353202d884352":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey16","displayName":"Escrow Key #16 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey16_1","displayName":"Enabled","description":null,"helpText":null}]},"8e2ff233113aba21":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_rewindfromstartofparagraphbythefollowingnumberofseconds_l_rewindfromstartofparagraphbysec","displayName":"Rewind from start of paragraph by: (sec) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":null},"8e6eaeed84f6ef51":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1attachments_v2","displayName":"Display Level 1 attachments (User)","description":"This policy setting controls whether Outlook blocks potentially dangerous attachments designated Level 1. \r\nOutlook uses two levels of security to restrict users' access to files attached to e-mail messages or other items. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n \r\nIf you enable this policy setting, Outlook users can gain access to Level 1 file type attachments by first saving the attachments to disk and then opening them, as with Level 2 attachments. \r\n\r\nIf you disable this policy setting, Level 1 attachments do not display under any circumstances. \r\n\r\nIf you do not configure this policy setting, Outlook completely blocks access to Level 1 files, and requires users to save Level 2 files to disk before opening them.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1attachments_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1attachments_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"8e1b88bd51bb80cd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapinameresolve","displayName":"Configure Simple MAPI name resolution prompt (User)","description":"This policy setting allows you to specify what occurs when a program attempts to gain access to an Address Book, using Simple MAPI.\r\n\r\nIf you enable this policy setting, you can choose whether Outlook always allows access to the Address Book, always disallows access to the Address Book, or prompts the user to specify whether to allow or disallow access to the Address Book.\r\n\r\nIf you disable or do not configure this policy setting, Outlook prompts the user to specify whether to allow or disallow access to the Address Book.","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapinameresolve_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapinameresolve_1","displayName":"Enabled","description":null,"helpText":null}]},"8e9c8103456ef369":{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_shorteneventstype","displayName":"Shorten appointments and meetings (User)","description":"\r\n This policy setting allows you to shorten the default duration of appointments and meetings by a specified number of minutes. If you enable this policy setting, you can choose between the following options: End Early, Start Late, None.\r\n If you select End Early, meetings and appointments will end early by the specified number of minutes. \r\n If you select Start Late, meetings and appointments will start late by the specified number of minutes. \r\n If you select None, the default meeting duration will not be shortened. \r\n In all cases, the settings for this feature will be disabled in the Outlook Options dialog. \r\n If you don’t configure this policy setting, users can modify these settings by going to File > Options > Calendar.\r\n\r\n Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_shorteneventstype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_shorteneventstype_1","displayName":"Enabled","description":null,"helpText":null}]},"8e9aa78958e12fac":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06","displayName":"Trusted Location #6 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_1","displayName":"Enabled","description":null,"helpText":null}]},"8e8b7fdadfd51b6b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},"8ec8b53cf6890ca4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_relyoncssforfontformatting","displayName":"Rely on CSS for font formatting (User)","description":"This policy setting allows you to configure the \"Use Cascading Style Sheets (CSS) for appearance of messages\" option found under Microsoft Outlook's File tab | Outlook Options | Mail | Message format.\r\n\r\nIf you enable this policy setting, the option is checked.\r\n\r\nIf you disable or do not configure this policy setting, the option is not checked.\r\n","helpText":"","infoUrls":[],"categoryId":"61ecc5ec-c494-420b-a27b-a8d2fbdd7df1","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_relyoncssforfontformatting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_relyoncssforfontformatting_1","displayName":"Enabled","description":null,"helpText":null}]},"8e97c5dbeed12384":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_balloons_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_balloons_l_empty_0","displayName":"Balloons on","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_balloons_l_empty_2","displayName":"Comments and formatting only in balloons","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_balloons_l_empty_1","displayName":"Balloons off (revisions inline)","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/8f.json b/public/intune-definitions/8f.json new file mode 100644 index 000000000000..4f2606ddf8e2 --- /dev/null +++ b/public/intune-definitions/8f.json @@ -0,0 +1 @@ +{"8fe7da57862d7157":{"id":"com.android.devicerestrictionpolicy.setwallpaperblocked","displayName":"Block setting wallpaper","description":"If 'True', the device is prevented from changing the wallpaper. If 'False', Intune doesn't change or update this setting. By default, the OS might allow the user to set a wallpaper. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.setwallpaperblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.setwallpaperblocked_true","displayName":"True","description":"True","helpText":null}]},"8f36ef40ca262d30":{"id":"com.apple.cellular_apns_item_authenticationtype","displayName":"Authentication Type","description":"The authentication type for logging in.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":[{"id":"com.apple.cellular_apns_item_authenticationtype_0","displayName":"CHAP","description":null,"helpText":null},{"id":"com.apple.cellular_apns_item_authenticationtype_1","displayName":"PAP","description":null,"helpText":null}]},"8f81cba897a7103e":{"id":"com.apple.managedclient.preferences_editfavoritesenabled","displayName":"Allows users to edit favorites","description":"Enable this policy to let users add, remove, and modify favorites. This is the default behavior if you don't configure the policy.\n\nDisable this policy to stop users from adding, removing, or modifying favorites. They can still use existing favorites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#editfavoritesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_editfavoritesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_editfavoritesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8f76e20b0f84980e":{"id":"com.apple.mcxprinting_allowlocalprinters","displayName":"Allow Local Printers","description":"If true, allows printers that connect directly to a user's computer.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":[{"id":"com.apple.mcxprinting_allowlocalprinters_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxprinting_allowlocalprinters_true","displayName":"True","description":null,"helpText":null}]},"8f997ecae99794fc":{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"8fc2c4119e33c825":{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"8f7f91021ef0ae7b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.displaycapturepermissionspolicyenabled","displayName":"Specifies whether the display-capture permissions-policy is checked or skipped (Obsolete)","description":"This policy is obsolete. The policy was a temporary workaround for non-spec-compliant enterprise applications.\n\nThis policy stopped working in Microsoft Edge version 107 and was obsoleted in Microsoft Edge 110.\n\nThe display-capture permissions-policy gates access to getDisplayMedia(),\nas per this spec:\nhttps://www.w3.org/TR/screen-capture/#feature-policy-integration\nHowever, if this policy is Disabled, this requirement isn't enforced,\nand getDisplayMedia() is allowed from contexts that would otherwise be\nforbidden.\n\nIf you enable or don't configure this policy, sites can only call getDisplayMedia() from\ncontexts that are allowlisted by the display-capture permissions-policy.\n\nIf you disable this policy, sites can call getDisplayMedia() even from contexts\nwhich are not allowlisted by the display-capture permissions policy.\nOther restrictions may still apply.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.displaycapturepermissionspolicyenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.displaycapturepermissionspolicyenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8f492b084c9f8aef":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pictureinpictureoverlayenabled","displayName":"Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge","description":"This policy lets you configure the Picture in Picture floating overlay button in Microsoft Edge.\n\nThe Picture in Picture floating overlay button lets the user watch videos in a floating window on top of other windows.\n\nIf you enable or don't configure this policy, you can use the Picture in Picture floating overlay button in Microsoft Edge.\n\nIf you disable this policy, you can't use the Picture in Picture floating overlay button in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.pictureinpictureoverlayenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.pictureinpictureoverlayenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8f24378c775659b6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled","displayName":"Enable search suggestions","description":"Enables web search suggestions in Microsoft Edge's Address Bar and Auto-Suggest List and prevents users from changing this policy.\n\nIf you enable this policy, web search suggestions are used.\n\nIf you disable this policy, web search suggestions are never used, however local history and local favorites suggestions still appear. If you disable this policy, neither the typed characters, nor the URLs visited will be included in telemetry to Microsoft.\n\nIf this policy is left not set, search suggestions are enabled but the user can change that.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"8fde5de1ea9dd643":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_excludedidlist_groupid","displayName":"Excluded Devices","description":"The group(s) that the policy will not be applied to.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"8feb3bc96a1fc34c":{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffswitchback","displayName":"Turn off SwitchBack Compatibility Engine","description":"The policy controls the state of the Switchback compatibility engine in the system. \r\n\r\nSwitchback is a mechanism that provides generic compatibility mitigations to older applications by providing older behavior to old applications and new behavior to new applications. \r\n\r\nSwitchback is on by default.\r\n\r\nIf you enable this policy setting, Switchback will be turned off. Turning Switchback off may degrade the compatibility of older applications. This option is useful for server administrators who require performance and are aware of compatibility of the applications they are using. \r\n\r\nIf you disable or do not configure this policy setting, the Switchback will be turned on.\r\n\r\nPlease reboot the system after changing the setting to ensure that your system accurately reflects those changes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatturnoffswitchback"],"categoryId":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","categoryName":"Application Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffswitchback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffswitchback_1","displayName":"Enabled","description":null,"helpText":null}]},"8f6c065757baf83f":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancenormalpriorityunit","displayName":"Normal Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancenormalpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancenormalpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancenormalpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"8feeba6772dfa62c":{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassl2l","displayName":"Local Link to Local Target","description":null,"helpText":"","infoUrls":[],"categoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","categoryName":"Filesystem","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassl2l_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassl2l_1","displayName":"True","description":null,"helpText":null}]},"8fca9a1adc337dd7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_paths","displayName":"Path Exclusions","description":"This policy setting allows you to disable scheduled and real-time scanning for files under the paths specified or for the fully qualified resources specified. Paths should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a path or a fully qualified resource name. As an example, a path might be defined as: \"c:\\Windows\" to exclude all files in this directory. A fully qualified resource name might be defined as: \"C:\\Windows\\App.exe\". The value is not used and it is recommended that this be set to 0.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-exclusions-paths"],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_paths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_paths_1","displayName":"Enabled","description":null,"helpText":null}]},"8f7168522ed5e7c7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_disableenhancednotifications","displayName":"Turn off enhanced notifications","description":"\r\n Use this policy setting to specify if you want Microsoft Defender Antivirus enhanced notifications to display on clients.\r\n \r\n If you disable or do not configure this setting, Microsoft Defender Antivirus enhanced notifications will display on clients.\r\n \r\n If you enable this setting, Microsoft Defender Antivirus enhanced notifications will not display on clients.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-disableenhancednotifications"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_disableenhancednotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_disableenhancednotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"8fd9e87d704fdc60":{"id":"device_vendor_msft_policy_config_admx_msi_disablemsi","displayName":"Turn off Windows Installer","description":"This policy setting restricts the use of Windows Installer.\r\n\r\nIf you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting.\r\n\r\n-- The \"Never\" option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured.\r\n\r\n-- The \"For non-managed applications only\" option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured.\r\n\r\n-- The \"Always\" option indicates that Windows Installer is disabled.\r\n\r\nThis policy setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disablemsi"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disablemsi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disablemsi_1","displayName":"Enabled","description":null,"helpText":null}]},"8f993c70ba623dff":{"id":"device_vendor_msft_policy_config_admx_power_allowsystempowerrequestdc","displayName":"Allow applications to prevent automatic sleep (on battery)","description":"This policy setting allows applications and services to prevent automatic sleep.\r\n\r\nIf you enable this policy setting, any application, service, or device driver prevents Windows from automatically transitioning to sleep after a period of user inactivity.\r\n\r\nIf you disable or do not configure this policy setting, applications, services, or drivers do not prevent Windows from automatically transitioning to sleep. Only user input is used to determine if Windows should automatically sleep.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-allowsystempowerrequestdc"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_allowsystempowerrequestdc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_allowsystempowerrequestdc_1","displayName":"Enabled","description":null,"helpText":null}]},"8f67e3ef5c502e38":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_w32time_resolvepeerbackoffmaxtimes","displayName":"ResolvePeerBackoffMaxTimes","description":null,"helpText":"","infoUrls":[],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":null},"8f0a7df8a919670b":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-internet"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet_1","displayName":"Enabled","description":null,"helpText":null}]},"8fd6a486a309ea1f":{"id":"device_vendor_msft_policy_config_applicationmanagement_allowdeveloperunlock","displayName":"Allow Developer Unlock","description":"Specifies whether developer unlock is allowed. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#allowdeveloperunlock"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_allowdeveloperunlock_0","displayName":"Explicit deny.","description":"Explicit deny.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowdeveloperunlock_1","displayName":"Explicit allow unlock.","description":"Explicit allow unlock.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowdeveloperunlock_65535","displayName":"Not configured.","description":"Not configured.","helpText":null}]},"8fb652fba3a7e9ad":{"id":"device_vendor_msft_policy_config_applicationmanagement_allowshareduserappdata","displayName":"Allow Shared User App Data","description":"With this policy, you can configure Windows 10 to share application data among multiple users on the system and with other instances of that app. Data shared through the SharedLocal folder is available through the Windows. Storage API. If you previously enabled this policy and now want to disable it, any shared app data remains in the SharedLocal folder.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#allowshareduserappdata"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_allowshareduserappdata_0","displayName":"Block","description":"Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowshareduserappdata_1","displayName":"Allow","description":"Allowed. Microsoft Edge downloads book files into a shared folder. For this policy to work correctly, you must also enable the Allow a Windows app to share application data between users group policy. Also, the users must be signed in with a school or work account.","helpText":null}]},"8fbb409c06ec4fba":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled","displayName":"Allow the audio sandbox to run","description":"This policy controls the audio process sandbox.\r\nIf this policy is enabled, the audio process will run sandboxed.\r\nIf this policy is disabled, the audio process will run unsandboxed and the WebRTC audio-processing module will run in the renderer process.\r\nThis leaves users open to security risks related to running the audio subsystem unsandboxed.\r\nIf this policy is not set, the default configuration for the audio sandbox will be used, which may differ per platform.\r\nThis policy is intended to give enterprises flexibility to disable the audio sandbox if they use security software setups that interfere with the sandbox.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8fd813f25f40300d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener","displayName":"Do not set window.opener for links targeting _blank","description":"Setting the policy to Disabled allows popups targeting _blank to access (via JavaScript) the page that requested to open the popup.\r\n\r\nSetting the policy to Enabled or leaving it unset causes the window.opener property to be set to null unless the anchor specifies rel=\"opener\".\r\n\r\nThis policy will be removed in Google Chrome version 95.\r\n\r\nSee https://chromestatus.com/feature/6140064063029248.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener_1","displayName":"Enabled","description":null,"helpText":null}]},"8febc42b53eb345f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_insecurecontentblockedforurlsdesc","displayName":"Block insecure content on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"8f905e27218f234b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode","description":"Restricts background graphics printing mode. Unset policy is treated as no restriction.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_1","displayName":"Enabled","description":null,"helpText":null}]},"8f346a9f97217893":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls_automaticfullscreenblockedforurlsdesc","displayName":"Block automatic fullscreen on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"8f844f2fabffe446":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled","displayName":"Allow users to select cast devices with an access code or QR code from within the Google Cast menu.","description":"This policy controls whether a user will be presented with an option, within the Google Cast menu which allows them to cast to cast devices that do not appear in the Google Cast menu, using either the access code or QR code displayed on the cast devices's screen.\r\nBy default, a user must reenter the access code or rescan the QR code in order to initiate a subsequent casting session, but if the AccessCodeCastDeviceDuration policy has been set to a non-zero value (the default is zero), then the cast device will remain in the list of available cast devices until the specified period of time has expired.\r\nWhen this policy is set to Enabled, users will be presented with the option to select cast devices by using an access code or by scanning a QR code.\r\nWhen this policy is set to Disabled or not set, users will not be given the option to select cast devices by using an access code or by scanning a QR code.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8f4e3c854d997eed":{"id":"device_vendor_msft_policy_config_defender_cloudextendedtimeout","displayName":"Cloud Extended Timeout","description":"This feature allows Windows Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it's safe. Value type is integer, range is 0 - 50. The typical cloud check timeout is 10 seconds. To enable the extended cloud check feature, specify the extended time in seconds, up to an additional 50 seconds. For example, if the desired timeout is 60 seconds, specify 50 seconds in this setting, which will enable the extended cloud check feature, and will raise the total time to 60 seconds. NoteThis feature depends on three other MAPS settings the must all be enabled- Configure the 'Block at First Sight' feature; Join Microsoft MAPS; Send file samples when further analysis is required.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"8fc4f55745a82e70":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxcacheage","displayName":"DO Max Cache Age","description":"Specifies the maximum time in seconds that each file is held in the Delivery Optimization cache after downloading successfully.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxcacheage"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"8f08ae7d4d615c1c":{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy","displayName":"Dev drive filter attach policy","description":"Dev drive is a drive optimized for performance considering developer scenarios and by default no file system filters are attached to it. Filters listed in this setting will be allowed to attach even on a dev drive.\r\n\r\nA reboot is required for this setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-filesystem#filesystem-devdriveattachpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"8f4e04a8f57442c3":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_0","displayName":"Take no action","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_1","displayName":"Redirect TEMP and TMP to local drive","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_2","displayName":"Redirect INetCache to local drive","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_3","displayName":"Redirect TEMP, TMP and INetCache to local drive","description":null,"helpText":null}]},"8f1ff06320cddaff":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"8f3d7fb2f1403a51":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"8fc776be56cfa1b7":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel","displayName":"Network Security LAN Manager Authentication Level","description":"Network security LAN Manager authentication level This security setting determines which challenge/response authentication protocol is used for network logons. This choice affects the level of authentication protocol used by clients, the level of session security negotiated, and the level of authentication accepted by servers as follows: Send LM and NTLM responses: Clients use LM and NTLM authentication and never use NTLMv2 session security; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send LM and NTLM - use NTLMv2 session security if negotiated: Clients use LM and NTLM authentication and use NTLMv2 session security if the server supports it; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send NTLM response only: Clients use NTLM authentication only and use NTLMv2 session security if the server supports it; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send NTLMv2 response only: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send NTLMv2 response only\\refuse LM: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers refuse LM (accept only NTLM and NTLMv2 authentication). Send NTLMv2 response only\\refuse LM and NTLM: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers refuse LM and NTLM (accept only NTLMv2 authentication). Important This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and the Windows Server 2003 family to communicate with computers running Windows NT 4.0 and earlier over the network. For example, at the time of this writing, computers running Windows NT 4.0 SP4 and earlier did not support NTLMv2. Computers running Windows 95 and Windows 98 did not support NTLM. Default: Windows 2000 and windows XP: send LM and NTLM responses Windows Server 2003: Send NTLM response only Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: Send NTLMv2 response only","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_lanmanagerauthenticationlevel"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_0","displayName":"Send LM and NTLM responses","description":"Send LM and NTLM responses","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_1","displayName":"Send LM and NTLM-use NTLMv2 session security if negotiated","description":"Send LM and NTLM-use NTLMv2 session security if negotiated","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_2","displayName":"Send LM and NTLM responses only","description":"Send LM and NTLM responses only","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_3","displayName":"Send LM and NTLMv2 responses only","description":"Send LM and NTLMv2 responses only","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_4","displayName":"Send LM and NTLMv2 responses only. Refuse LM","description":"Send LM and NTLMv2 responses only. Refuse LM","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_5","displayName":"Send LM and NTLMv2 responses only. Refuse LM and NTLM","description":"Send LM and NTLMv2 responses only. Refuse LM and NTLM","helpText":null}]},"8fb38d1b0604e484":{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup","displayName":"access group","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"categoryId":"b86100f0-e4ae-4f93-9dae-dd253a96726f","categoryName":null,"options":null},"8f4041700e5dd7eb":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton","displayName":"Show Home button on toolbar","description":"Shows the Home button on Microsoft Edge's toolbar.\r\n\r\nEnable this policy to always show the Home button. Disable it to never show the button.\r\n\r\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_1","displayName":"Enabled","description":null,"helpText":null}]},"8fa207bcc126526e":{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton","displayName":"Pin browser essentials toolbar button","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\r\n\r\nWhen the button is pinned, it will always appear on the toolbar.\r\n\r\nWhen the button isn't pinned, it will only appear when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\r\n\r\nIf you enable or don't configure this policy, the Browser essentials button will be pinned on the toolbar.\r\n\r\nIf you disable this policy, the Browser essentials button won't be pinned on the toolbar.\r\n\r\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"8f0bb44a94d27307":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls","displayName":"Allow idle detection on these sites","description":"Allows you to specify a list of URL patterns for sites that are allowed to use the Idle Detection API.\r\n\r\nIf you do not configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.\r\n\r\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported. For detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=209532.\r\n\r\nURL patterns specified in the blocklist take precedence over this allowlist. This allowlist takes precedence over the DefaultIdleDetectionSetting policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"8ffcceda08c00d7a":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled","displayName":"Show Hubs Sidebar","description":"Shows a launcher bar on the right side of Microsoft Edge's screen.\r\n\r\nEnable this policy to always show the Sidebar.\r\nDisable this policy to never show the Sidebar.\r\n\r\nIf you don't configure the policy, users can choose whether to show the Sidebar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8f31275b6f9ee359":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_spdesignexe79","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_spdesignexe79_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_spdesignexe79_1","displayName":"True","description":null,"helpText":null}]},"8f0d1e85968bfc3c":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_receivesurveys_checkbox","displayName":"Receive user satisfication surveys (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_receivesurveys_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_receivesurveys_checkbox_1","displayName":"True","description":null,"helpText":null}]},"8f322f96065dde8b":{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_forceallowtheseapps","displayName":"Let Apps Sync With Devices Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"8fa39dff8aafcb71":{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages_ra_options_share_control_message","displayName":"Display warning message before sharing control:","description":"","helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":null},"8f6e8ded51d3ab7d":{"id":"device_vendor_msft_policy_config_start_importedgeassets","displayName":"Import Edge Assets","description":"This policy setting allows you to import Edge assets to be used with StartLayout policy. Start layout can contain secondary tile from Edge app which looks for Edge local asset file. Edge local asset would not exist and cause Edge secondary tile to appear empty in this case. This policy only gets applied when StartLayout policy is modified.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#importedgeassets"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":null},"8fbd08808278bb1c":{"id":"device_vendor_msft_policy_config_update_allowupdateservice","displayName":"Allow Update Service","description":"Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store. Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft Store. Enabling this policy will disable that functionality, and may cause connection to public services such as the Microsoft Store to stop working. Note This policy applies only when the desktop or device is configured to connect to an intranet update service using the Specify intranet Microsoft update service location policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowupdateservice"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_allowupdateservice_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowupdateservice_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"8f7aeaf467728cbf":{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces","displayName":"Disable Agent Workspaces (Windows Insiders only)","description":"Enable or Disable Agent Workspaces.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableagentworkspaces"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces_1","displayName":"Force Enable.","description":"Force Enable.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces_2","displayName":"Force Disable.","description":"Force Disable.","helpText":null}]},"8febf0a1ceccabaa":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"8f722c6a36dfb265":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_descriptioncolon45","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"8f2bb74ae993098c":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_sz_atc_admindeleteitem","displayName":"Enter URL(s) of desktop item(s) to Delete (space separated): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":null},"8ff0cfbe12afe588":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdisable_1","displayName":"Disable Windows Error Reporting (User)","description":"This policy setting turns off Windows Error Reporting, so that reports are not collected or sent to either Microsoft or internal servers within your organization when software unexpectedly stops working or fails.\r\n\r\nIf you enable this policy setting, Windows Error Reporting does not send any problem information to Microsoft. Additionally, solution information is not available in Security and Maintenance in Control Panel.\r\n\r\nIf you disable or do not configure this policy setting, the Turn off Windows Error Reporting policy setting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings takes precedence. If Turn off Windows Error Reporting is also either disabled or not configured, user settings in Control Panel for Windows Error Reporting are applied.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werdisable-1"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdisable_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdisable_1_1","displayName":"Enabled","description":null,"helpText":null}]},"8fd00f537f307bee":{"id":"user_vendor_msft_policy_config_admx_startmenu_nopinnedprograms","displayName":"Remove pinned programs list from the Start Menu (User)","description":"If you enable this setting, the \"Pinned Programs\" list is removed from the Start menu. Users cannot pin programs to the Start menu. \r\n\r\nIn Windows XP and Windows Vista, the Internet and email checkboxes are removed from the 'Customize Start Menu' dialog. \r\n\r\nIf you disable this setting or do not configure it, the \"Pinned Programs\" list remains on the Start menu. Users can pin and unpin programs in the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nopinnedprograms"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nopinnedprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nopinnedprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"8f2597ab66acad40":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup","displayName":"Project 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Project 2013.\r\nMicrosoft Project 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Project 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Project 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013projectbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"8f22f005412c2292":{"id":"user_vendor_msft_policy_config_attachmentmanager_donotpreservezoneinformation","displayName":"Do not preserve zone information in file attachments (User)","description":"This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (such as restricted, Internet, intranet, local). This requires NTFS in order to function correctly, and will fail without notice on FAT32. By not preserving the zone information, Windows cannot make proper risk assessments.\n\nIf you enable this policy setting, Windows does not mark file attachments with their zone information.\n\nIf you disable this policy setting, Windows marks file attachments with their zone information.\n\nIf you do not configure this policy setting, Windows marks file attachments with their zone information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-attachmentmanager#attachmentmanager-donotpreservezoneinformation"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_attachmentmanager_donotpreservezoneinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_attachmentmanager_donotpreservezoneinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"8ff40ac76e7bc86d":{"id":"user_vendor_msft_policy_config_browser_homepages","displayName":"Home Pages (User)","description":"When you enable the Configure Open Microsoft Edge With policy, you can configure one or more Start pages. When you enable this policy, users are not allowed to make changes to their Start pages. If enabled, you must include URLs to the pages, separating multiple pages using angle brackets in the following format: If disabled or not configured, the webpages specified in App settings loads as the default Start pages. Version 1703 or later: If you do not want to send traffic to Microsoft, enable this policy and use the value, which honors domain- and non-domain-joined devices, when it is the only configured URL. Version 1809: If enabled, and you select either Start page, New Tab page, or previous page in the Configure Open Microsoft Edge With policy, Microsoft Edge ignores the Configure Start Pages policy. If not configured or you set the Configure Open Microsoft Edge With policy to a specific page or pages, Microsoft Edge uses the Configure Start Pages policy. Supported devices: Domain-joined or MDM-enrolled Related policy: - Configure Open Microsoft Edge With - Disable Lockdown of Start Pages","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#homepages"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"8f0636068636db9d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability","displayName":"Profile picker availability on startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_0","displayName":"Profile picker available at startup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_1","displayName":"Profile picker disabled at startup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_2","displayName":"Profile picker forced at startup","description":null,"helpText":null}]},"8f295faf7271d5f0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderName specifies the default search provider's name.\r\n\r\nLeaving DefaultSearchProviderName unset means the hostname specified by the search URL is used.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_1","displayName":"Enabled","description":null,"helpText":null}]},"8f05dd3029bef3b6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources","displayName":"Configure extension, app, and user script install sources (User)","description":"Setting the policy specifies which URLs may install extensions, apps, and themes. Before Google Chrome 21, users could click on a link to a *.crx file, and Google Chrome would offer to install the file after a few warnings. Afterwards, such files must be downloaded and dragged to the Google Chrome settings page. This setting allows specific URLs to have the old, easier installation flow.\r\n\r\nEach item in this list is an extension-style match pattern (see https://developer.chrome.com/extensions/match_patterns). Users can easily install items from any URL that matches an item in this list. Both the location of the *.crx file and the page where the download is started from (the referrer) must be allowed by these patterns.\r\n\r\nExtensionInstallBlocklist takes precedence over this policy. That is, an extension on the blocklist won't be installed, even if it happens from a site on this list.\r\n\r\nExample value:\r\n\r\nhttps://corp.mycompany.com/*","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_1","displayName":"Enabled","description":null,"helpText":null}]},"8f9db0c1bbcf8560":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled","displayName":"Specifies whether in-product Google Chrome surveys are shown to users. (User)","description":"Google Chrome in-product surveys collect user feedback for the browser. Survey responses are not associated with user accounts.\r\nWhen this policy is Enabled or not set, in-product surveys may be shown to users.\r\nWhen this policy is Disabled, in-product surveys are not shown to users.\r\n\r\nThis policy has no effect if MetricsReportingEnabled is set to Disabled, which disables in-product surveys as well.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8f4454a443c77d4d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled","displayName":"Enable sharing user credentials with other users (User)","description":"Setting the policy to Enabled lets users send to and receive from family members (according to Family Service) their passwords.\r\nWhen the policy is Enabled or not set, there is a button in the Password Manager allowing to send a password.\r\nThe received passwords are stored into user's account and are available in the Password Manager.\r\n\r\nSetting the policy to Disabled means users can't send passwords from Password Manager to other users, and can't receive passwords from other users.\r\n\r\nThe feature is not available if synchronization of Passwords is turned off (either via user settings or SyncDisabled policy is Enabled).\r\n\r\nManaged accounts aren't eligible to join or create a family group and therefore cannot share passwords.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8f72b72baa0ac2e7":{"id":"user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled","displayName":"Enable CryptoWallet feature (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 128.\r\n\r\nThis policy is obsoleted because this feature will no longer be supported, starting in Microsoft Edge 128. There is no replacement for this policy.\r\n Enables CryptoWallet feature in Microsoft Edge.\r\n\r\n If you enable this policy or don't configure it, users can use CryptoWallet feature which allows users to securely store, manage and transact digital assets such as Bitcoin, Ethereum and other cryptocurrencies. Therefore, Microsoft Edge may access Microsoft servers to communicate with the web3 world during the use of the CryptoWallet feature.\r\n\r\n If you disable this policy, users can't use CryptoWallet feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8f2126048bce2745":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_2","displayName":"Don't allow any site to request write access to files and directories","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_3","displayName":"Allow sites to ask the user to grant write access to files and directories","description":null,"helpText":null}]},"8f81e9b132ecd608":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled","displayName":"Allow the audio process to run with priority above normal on Windows (User)","description":"This policy controls the priority of the audio process on Windows.\r\nIf this policy is enabled, the audio process will run with above normal priority.\r\nIf this policy is disabled, the audio process will run with normal priority.\r\nIf this policy is not configured, the default configuration for the audio process will be used.\r\nThis policy is intended as a temporary measure to give enterprises the ability to\r\nrun audio with higher priority to address certain performance issues with audio capture.\r\nThis policy will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"8f0a8205fe287be8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastserviceserverdescription6","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"8f872f1cf9b5f17e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_allowroamingquickaccesstoolbarribboncustomizations","displayName":"Allow roaming of all user customizations (User)","description":"This policy setting allows roaming of both the Quick Access Toolbar and Ribbon customizations. \r\n\r\nIf you enable this policy setting, users' Quick Access Toolbar and Ribbon customizations will be available to them on any computer on their network when they log on. \r\n\r\nIf you disable or do not configure this policy setting, users' Quick Access Toolbar and Ribbon customizations will only be available to them on the computer on which they made the customizations.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_allowroamingquickaccesstoolbarribboncustomizations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_allowroamingquickaccesstoolbarribboncustomizations_1","displayName":"Enabled","description":null,"helpText":null}]},"8f23053317e3d473":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfileentriesnumber_l_empty420","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":null},"8f18ad227191dc0a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookcontactsdictionary_l_setupdateintervalforoutlookcontactsdictionaryspinid","displayName":"(in minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":null},"8f326e033144c4ed":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disabledistributionlistexpansion","displayName":"Do not expand Contact Groups (User)","description":"This policy setting controls whether Outlook users can expand Contact Groups when addressing e-mail messages. \r\n\r\nIf you enable this policy setting, Outlook users cannot expand Contact Groups. \r\n\r\nIf you disable or do not configure this policy setting, when Outlook users add a Contact Group to the To, CC, or BCC fields of an e-mail message or other item, they can expand the Contact Group to see the e-mail addresses of everyone in the group.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disabledistributionlistexpansion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disabledistributionlistexpansion_1","displayName":"Enabled","description":null,"helpText":null}]},"8f6001df236b5386":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9","displayName":"Options (User)","description":"Sets the value in the option \"Publish [] month(s) of Calendar free/busy information on the server\".","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9_1","displayName":"Enabled","description":null,"helpText":null}]},"8f8e10221c599c13":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_donotautomaticallysignreplies","displayName":"Do not automatically sign replies (User)","description":"This policy setting allows you to specify whether replies will be automatically signed.\r\n\r\nIf you enable this policy setting, the option to respond automatically to a signed message with a signed response will be overridden, and an unsigned response will be the default reply to a signed message.\r\n\r\nIf you disable or do not configure this policy setting, a signed response will be the default reply to a signed message.","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_donotautomaticallysignreplies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_donotautomaticallysignreplies_1","displayName":"Enabled","description":null,"helpText":null}]},"8fa182a15cfdfa8f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of PowerPoint add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\PowerPoint\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\PowerPoint\\Addins.\r\n\r\nTo obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.\r\n\r\nYou can also obtain the ProgID or the file name of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"8fe0c142d1bcec43":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_graphicfilters","displayName":"Graphic Filters (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_graphicfilters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_graphicfilters_1","displayName":"Enabled","description":null,"helpText":null}]},"8fbeb67f84f8055a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy","displayName":"VBA Macro Notification Settings (User)","description":"This policy setting controls how the specified applications warn users when Visual Basic for Applications (VBA) macros are present.\r\n\r\nIf you enable this policy setting, you can choose from four options for determining how the specified applications will warn the user about macros:\r\n \r\n- Disable all with notification: The application displays the Trust Bar for all macros, whether signed or unsigned. This option enforces the default configuration in Office.\r\n \r\n- Disable all except digitally signed macros: The application displays the Trust Bar for digitally signed macros, allowing users to enable them or leave them disabled. Any unsigned macros are disabled, and users are not notified.\r\n \r\n- Disable all without notification: The application disables all macros, whether signed or unsigned, and does not notify users.\r\n \r\n- Enable all macros (not recommended): All macros are enabled, whether signed or unsigned. This option can significantly reduce security by allowing dangerous code to run undetected.\r\n \r\nIf you disable this policy setting, \"Disable all with notification\" will be the default setting.\r\n \r\nIf you do not configure this policy setting, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking \"Enable Content\" on the Trust Bar. If the user clicks \"Enable Content\", then the document is added as a trusted document.\r\n \r\nImportant: If \"Disable all except digitally signed macros\" is selected, users will not be able to open unsigned Access databases.\r\n \r\nAlso, note that Microsoft Office stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Microsoft Office still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store.\r\n \r\nTherefore, if you created a list of trusted publishers in a previous version of Microsoft Office and you upgrade to Office, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"8fef9aa320104a32":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_addcontrolcharactersincutandcopy","displayName":"Add control characters in Cut and Copy (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_addcontrolcharactersincutandcopy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_addcontrolcharactersincutandcopy_1","displayName":"Enabled","description":null,"helpText":null}]},"8f821f8fee1e05da":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_textboundaries","displayName":"Show text boundaries (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_textboundaries_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_textboundaries_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/90.json b/public/intune-definitions/90.json new file mode 100644 index 000000000000..6fff17d81204 --- /dev/null +++ b/public/intune-definitions/90.json @@ -0,0 +1 @@ +{"90f44124f54ab53d":{"id":"ade_setupassistant_filevault","displayName":"FileVault","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_filevault_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_filevault_1","displayName":"Show","description":null,"helpText":null}]},"903cfd2444e801b8":{"id":"com.apple.applicationaccess_allowassistantwhilelocked","displayName":"Allow Assistant While Locked (Deprecated)","description":"If false, disables Siri when the device is locked. This restriction is ignored if the device doesn’t have a passcode set. Available in iOS 5.1 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowassistantwhilelocked_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowassistantwhilelocked_true","displayName":"True","description":null,"helpText":null}]},"90e7ad59778397cc":{"id":"com.apple.applicationaccess_forcedelayedappsoftwareupdates","displayName":"Force Delayed App Software Updates (Deprecated)","description":"If set to true, delays user visibility of major OS Software Updates. Available in macOS 11.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcedelayedappsoftwareupdates_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcedelayedappsoftwareupdates_true","displayName":"True","description":null,"helpText":null}]},"90e0c86bd95b9c37":{"id":"com.apple.cellular_attachapn","displayName":"Attach APN","description":"A configuration dictionary.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"90a8bf7c9a168b6a":{"id":"com.apple.fileproviderd_managementknownfoldersyncingallowlist","displayName":"Management Known Folder Syncing Allow List","description":"An array of strings representing the composed identifiers of apps. The device allows the corresponding apps to use File Provider extension desktop and documents synchronization. If present, and `ManagementAllowsKnownFolderSyncing` is set to `true`, the device allows only the apps in this list to use desktop and documents synchronization. This key is ignored if `ManagementAllowsKnownFolderSyncing` is set to `false`. This setting doesn't impact the ability for apps to use File Provider extension volume access. The format of the app identifiers is \"Bundle-ID (Team-ID)\", for example `com.example.app (ABCD1234)`.","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":null},"90aebdfde0666a71":{"id":"com.apple.managedclient.preferences_disablecloudfonts","displayName":"Disable cloud fonts","description":"Prevent users from selecting and downloading cloud-based fonts.","helpText":null,"infoUrls":["https://learn.microsoft.com/deployoffice/mac/preferences-office"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_disablecloudfonts_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablecloudfonts_true","displayName":"True","description":null,"helpText":null}]},"90eb791e63d28bc7":{"id":"com.apple.systemconfiguration_proxies_httpenable","displayName":"HTTP Enable","description":"If true, enables web proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_httpenable_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_httpenable_1","displayName":"True","description":null,"helpText":null}]},"903ee59efebb8e7b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowbrowsingwithcopilot_recommended","displayName":"Controls the availability of browsing with Copilot in Microsoft Edge. (users can override)","description":"When browsing with Copilot is enabled, users can explicitly invoke it for a query. It isn't invoked automatically.\n\nBrowsing with Copilot is available only on domains specified in the \"BrowsingWithCopilotAllowList\" policy and is blocked on domains specified in the \"BrowsingWithCopilotBlockList\" policy. If no domains are configured in the allow list, browsing with Copilot is effectively disabled.\n\nThis feature is available only to users with an active Microsoft 365 Copilot subscription.\n\nFor more information about configuring browsing with Copilot, see https://go.microsoft.com/fwlink/?linkid=2346300.\n\nIf you enable this policy, browsing with Copilot is turned on for all users who receive the policy, and users can't turn it off.\n\nIf you disable this policy, browsing with Copilot is turned off for all users who receive the policy, and users can't turn it on.\n\nIf you don't configure this policy, browsing with Copilot is off by default, and users can turn it on.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowbrowsingwithcopilot_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowbrowsingwithcopilot_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"90dde32b3f9e22fe":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptsetting","displayName":"Default JavaScript setting","description":"Set whether websites can run JavaScript. You can allow it for all sites ('AllowJavaScript') or block it for all sites ('BlockJavaScript').\n\nIf you don't configure this policy, all sites can run JavaScript by default, and the user can change this setting.\n\nPolicy options mapping:\n\n* AllowJavaScript (1) = Allow all sites to run JavaScript\n\n* BlockJavaScript (2) = Don't allow any site to run JavaScript\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptsetting_allowjavascript","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptsetting_blockjavascript","displayName":"Don't allow any site to run JavaScript","description":null,"helpText":null}]},"9093f2b0584152b3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.personalizetopsitesincustomizesidebarenabled","displayName":"Personalize my top sites in Customize Sidebar enabled by default","description":"This policy controls whether Microsoft Edge browser be allowed to use the browsing history to personalize the top sites in the customize sidebar page.\n\nIf you enable this policy, Microsoft Edge uses the browsing history to personalize the top sites in the customize sidebar page.\n\nIf you disable this policy, Microsoft Edge doesn't use the browsing history to personalize the top sites in the customize sidebar page.\n\nIf you don't configure this policy, the default behavior is to use the browsing history to personalize the top sites in the customize sidebar page.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.personalizetopsitesincustomizesidebarenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.personalizetopsitesincustomizesidebarenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9026d23cbfa2b854":{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxypacurl","displayName":"Set the proxy .pac file URL (Deprecated)","description":"This policy is deprecated; use \"ProxySettings\" instead. It doesn't work in Microsoft Edge version 91.\n\nSpecifies the URL for a proxy auto-config (PAC) file.\n\nThis policy is applied only if the \"ProxySettings\" policy isn't specified, and if you've selected pac_script in the \"ProxyMode\" policy. If you've selected any other mode for configuring proxy policies, don't enable or configure this policy.\n\nIf you enable this policy, specify the URL for a PAC file, which defines how the browser automatically chooses the appropriate proxy server for fetching a particular website.\n\nIf you disable or don't configure this policy, no PAC file is specified. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\n\nFor detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.","helpText":null,"infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"9084deac19336e35":{"id":"com.microsoft.edge.mamedgeappconfigsettings.readaloudenabled","displayName":"Enable Read Aloud feature in Microsoft Edge","description":"Enables the Read Aloud feature within Microsoft Edge.\nWith this feature, users can listen to the content on the web page. This feature enables users to multi-task or improve their reading comprehension by hearing content at their own pace.\n\nIf you enable this policy or don't configure it, the Read Aloud option shows up in the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.\nIf you disable this policy, users can't access the Read Aloud feature from the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.readaloudenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.readaloudenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9053c295772d0613":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showtabpreviewenabled_recommended","displayName":"Enable tab preview on hover (users can override)","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\n\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\n\nIf you disable this policy, tab previews aren't shown on hover.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showtabpreviewenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showtabpreviewenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"90fce330cf0a1998":{"id":"com.microsoft.edge.mamedgeappconfigsettings.u2fsecuritykeyapienabled","displayName":"Allow using the deprecated U2F Security Key API (Obsolete)","description":"This policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content that's incompatible with the change to remove the U2F Security Key API. It doesn't work in Microsoft Edge after version 103.\n\nIf you enable this policy, the deprecated U2F Security Key API can be used and the deprecation reminder prompt shown for U2F API requests is suppressed.\n\nIf you disable this policy or don't configure it, the U2F Security Key API is disabled by default and can only be used by sites that register for and use the U2FSecurityKeyAPI origin trial, which ended after Microsoft Edge version 103.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.u2fsecuritykeyapienabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.u2fsecuritykeyapienabled_true","displayName":"Enabled","description":null,"helpText":null}]},"90b4c580ca4aa3df":{"id":"device_vendor_msft_defender_configuration_disablecoreservicetelemetry","displayName":"Disable Core Service Telemetry","description":"Turn off OneDsCollector telemetry for Defender core service","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablecoreservicetelemetry_0","displayName":"The Defender core service will use the OneDsCollector framework to rapidly collect telemetry.","description":"The Defender core service will use the OneDsCollector framework to rapidly collect telemetry.","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablecoreservicetelemetry_1","displayName":"The Defender core service stops using the OneDsCollector framework to rapidly collect telemetry, impacting Microsoft's ability to quickly recognize and address poor performance, false positives, and other problems.","description":"The Defender core service stops using the OneDsCollector framework to rapidly collect telemetry, impacting Microsoft's ability to quickly recognize and address poor performance, false positives, and other problems.","helpText":null}]},"90fa9a6ada90a758":{"id":"device_vendor_msft_defender_configuration_enableudpreceiveoffload","displayName":"Enable Udp Receive Offload","description":"This setting enables Udp Receive Offload Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_enableudpreceiveoffload_0","displayName":"Udp Receive Offload is disabled","description":"Udp Receive Offload is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_enableudpreceiveoffload_1","displayName":"Udp Receive Offload is enabled","description":"Udp Receive Offload is enabled","helpText":null}]},"903f25048d60fbc8":{"id":"device_vendor_msft_defender_configuration_hideexclusionsfromlocalusers","displayName":"Hide Exclusions From Local Users","description":"This policy setting controls whether or not exclusions are visible to local users. If HideExclusionsFromLocalAdmins is set then this policy will be implicitly set.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_hideexclusionsfromlocalusers_1","displayName":"If you enable this setting, local users will no longer be able to see the exclusion list in Windows Security App or via PowerShell.","description":"If you enable this setting, local users will no longer be able to see the exclusion list in Windows Security App or via PowerShell.","helpText":null},{"id":"device_vendor_msft_defender_configuration_hideexclusionsfromlocalusers_0","displayName":"If you disable or do not configure this setting, local users will be able to see exclusions in the Windows Security App and via PowerShell.","description":"If you disable or do not configure this setting, local users will be able to see exclusions in the Windows Security App and via PowerShell.","helpText":null}]},"90e12b93e5c7cc73":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcachesize","displayName":"Limit the BITS Peercache size","description":"This policy setting limits the maximum amount of disk space that can be used for the BITS peer cache, as a percentage of the total system disk size. BITS will add files to the peer cache and make those files available to peers until the cache content reaches the specified cache size. By default, BITS will use 1 percent of the total system disk for the peercache.\r\n\r\n If you enable this policy setting, you can enter the percentage of disk space to be used for the BITS peer cache. You can enter a value between 1 percent and 80 percent.\r\n\r\n If you disable or do not configure this policy setting, the default size of the BITS peer cache is 1 percent of the total system disk size.\r\n\r\n Note: This policy setting has no effect if the \"Allow BITS peer caching\" setting is disabled or not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxcachesize"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"905709c8ea32663e":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimization_syncmodenodcthreshold1","displayName":"Timeout value: [number field] milliseconds","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"9048fcfb9f9d5d78":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_scavengeinterval","displayName":"Set scavenge interval","description":"This policy setting determines the interval at which Netlogon performs the following scavenging operations:\r\n\r\n- Checks if a password on a secure channel needs to be modified, and modifies it if necessary.\r\n\r\n- On the domain controllers (DC), discovers a DC that has not been discovered.\r\n\r\n- On the PDC, attempts to add the [1B] NetBIOS name if it hasn’t already been successfully added.\r\n\r\nNone of these operations are critical. 15 minutes is optimal in all but extreme cases. For instance, if a DC is separated from a trusted domain by an expensive (e.g., ISDN) line, this parameter might be adjusted upward to avoid frequent automatic discovery of DCs in a trusted domain.\r\n\r\nTo enable the setting, click Enabled, and then specify the interval in seconds.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-scavengeinterval"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_scavengeinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_scavengeinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"90172936c6bd1b1c":{"id":"device_vendor_msft_policy_config_admx_power_diskdcpowerdowntimeout_2","displayName":"Turn Off the hard disk (on battery)","description":"This policy setting specifies the period of inactivity before Windows turns off the hard disk.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the hard disk.\r\n\r\nIf you disable or do not configure this policy setting, users can see and change this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-diskdcpowerdowntimeout-2"],"categoryId":"91c02e14-8848-485d-8844-b9933fa888ec","categoryName":"Hard Disk Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_diskdcpowerdowntimeout_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_diskdcpowerdowntimeout_2_1","displayName":"Enabled","description":null,"helpText":null}]},"90a33e90c9e5290c":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_nc_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":null},"906b39646de7a5f8":{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth_ra_optimize_bandwidth_list","displayName":"Optimize settings for reduced bandwidth:","description":null,"helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth_ra_optimize_bandwidth_list_14","displayName":"No optimization","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth_ra_optimize_bandwidth_list_12","displayName":"No full window drag","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth_ra_optimize_bandwidth_list_8","displayName":"Turn off background","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_remoteassistance_ra_optimize_bandwidth_ra_optimize_bandwidth_list_0","displayName":"Full optimization","description":null,"helpText":null}]},"901698c7eee7e976":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_localclockdispersion","displayName":"LocalClockDispersion","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"906be510614422be":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_refresh_onlogon_options","displayName":"User Publishing Refresh On Logon","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_refresh_onlogon_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_refresh_onlogon_options_1","displayName":"True","description":null,"helpText":null}]},"90683976661bd417":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_lookalikewarningallowlistdomainsdesc","displayName":"Suppress lookalike domain warnings on domains (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"90f73e871aea5391":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist","displayName":"Always render the following URL patterns in the host browser","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_1","displayName":"Enabled","description":null,"helpText":null}]},"90c52d99527c0bc3":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_clipboardblockedforurlsdesc","displayName":"Block clipboard on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"901e5b63a9a402d3":{"id":"device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing","displayName":"Prevent Users From Turning On Browser Syncing","description":"You can configure Microsoft Edge to allow users to turn on the Sync your Settings option to sync information, such as history and favorites, between user's devices. When enabled and you enable the Do not sync browser setting policy, browser settings sync automatically. If disabled, users have the option to sync the browser settings. Related policy: DoNotSyncBrowserSettings 1 (default) = Do not allow users to turn on syncing, 0 = Allows users to turn on syncing","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#preventusersfromturningonbrowsersyncing"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing_0","displayName":"Disabled","description":"Allowed/turned on. Users can sync the browser settings.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing_1","displayName":"Enabled","description":"Prevented/turned off.","helpText":null}]},"904e02ed945e327b":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_odfcsiddirectorynamepattern","displayName":"SID Directory Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":null},"90816b2dabd6722d":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_profilessizeinmbs","displayName":"Size In MBs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"902432b906b215c1":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls","displayName":"Block Local Fonts permission on these sites","description":"Specifies a list of site URL patterns for which the local fonts permission is automatically denied. Sites in this list are prevented from accessing information about local fonts.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are supported. This policy matches based on origin only; any path in the URL pattern is ignored.\n\nIf a site isn't included in this policy, the 'DefaultLocalFontsSetting' (Default Local Fonts permission setting) policy applies if configured. Otherwise, the browser default behavior applies, and users can choose the permission on a per-site basis.\n\nExample value:\n\nhttps://www.example.com\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"909c7d45a8b64012":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled","displayName":"Compose is enabled for writing on the web","description":"This policy lets you configure Compose in Microsoft Edge. Compose provides help for writing with AI-generated text, which lets the user get ideas for writing. This includes elaborating on text, re-writing, changing tone, formatting the text, and more.\r\n\r\nIf you enable or don't configure this policy, Compose can provide text generation for eligible fields, which are text editable and don't have an autocomplete attribute.\r\n\r\nIf you disable this policy, Compose will not be able to provide text generation for eligible fields. Compose will still be available for prompt-based text generation through the sidebar and must be managed with either 'EdgeDiscoverEnabled' (Discover feature In Microsoft Edge) policy or 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"90ade6b46d1d9e17":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Prevent redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Redirect sites based on the incompatible sites sitelist","description":null,"helpText":null}]},"90eb4c7c651ce536":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended","displayName":"Enable Windows to search local Microsoft Edge browsing data","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will publish local browsing data to the Windows Indexer.\r\n\r\nIf you disable this policy, Microsoft Edge will not share data to the Windows Indexer.\r\n\r\nNote that if you disable this policy, Microsoft Edge will remove the data shared with Windows on the device and stop sharing any new browsing data.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9076defb16b98ba9":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled","displayName":"Show the Reload in Internet Explorer mode button in the toolbar","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button will only be shown on the toolbar when the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or if the user has chosen to enable \"Allow sites to be reloaded in Internet Explorer mode\".\r\n\r\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"90e33b4c1421432e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_grooveexe154","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_grooveexe154_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_grooveexe154_1","displayName":"True","description":null,"helpText":null}]},"902aa7d2ed209a3f":{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports_syncadminreports_textbox","displayName":"Tenant Association Key: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"900113dcc05f2319":{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices","displayName":"Let Apps Sync With Devices","description":"This policy setting specifies whether Windows apps can communicate with unpaired wireless devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"90d37582225f2039":{"id":"device_vendor_msft_policy_config_privacy_publishuseractivities","displayName":"Publish User Activities","description":"Allows apps/system to publish 'User Activities' into ActivityFeed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#publishuseractivities"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_publishuseractivities_0","displayName":"Disabled","description":"Disabled. Apps/OS can't publish the user activities.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_publishuseractivities_1","displayName":"Enabled","description":"Enabled. Apps/OS can publish the user activities.","helpText":null}]},"90124bd06c134a0d":{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_checkbox_useroverride","displayName":"Allow users to turn \"language preferences\" syncing on.","description":"","helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"90781621b393d3de":{"id":"device_vendor_msft_reboot_schedule_dailyrecurrent","displayName":"Daily Recurrent","description":"Value in ISO8601, time is required. A reboot will be scheduled each day at the configured time starting at the date and time. Setting a null (empty) date will delete the existing schedule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Reboot-csp/"],"categoryId":"effee722-f6ec-440e-a892-bf645bc341ff","categoryName":"Reboot","options":null},"90c48930cb93eea6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid","displayName":"Parameters (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":null},"908f483350186967":{"id":"user_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_1","displayName":"Turn off access to the Store (User)","description":"This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association.\r\n\r\nWhen a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Store service to find an application.\r\n\r\nIf you enable this policy setting, the \"Look for an app in the Store\" item in the Open With dialog is removed.\r\n\r\nIf you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellnousestoreopenwith-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_1_1","displayName":"Enabled","description":null,"helpText":null}]},"90be5d96dadd62f5":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_ts_program_name","displayName":"Program path and file name (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":null},"9009e77dbb594a30":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noshellsearchbutton","displayName":"Remove Search button from File Explorer (User)","description":"This policy setting allows you to remove the Search button from the File Explorer toolbar.\r\n\r\nIf you enable this policy setting, the Search button is removed from the Standard Buttons toolbar that appears in File Explorer and other programs that use the File Explorer window, such as My Computer and Network Locations.\r\n\r\nEnabling this policy setting does not remove the Search button or affect any search features of Internet browser windows, such as the Internet Explorer window.\r\n\r\nIf you disable or do not configure this policy setting, the Search button is available from the File Explorer toolbar.\r\n\r\nThis policy setting does not affect the Search items on the File Explorer context menu or on the Start menu. To remove Search from the Start menu, use the \"Remove Search menu from Start menu\" policy setting (in User Configuration\\Administrative Templates\\Start Menu and Taskbar). To hide all context menus, use the \"Remove File Explorer's default context menu\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noshellsearchbutton"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noshellsearchbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noshellsearchbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"9075adf34681b0f2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled","displayName":"Enable AutoFill for addresses (User)","description":"Setting the policy to True or leaving it unset gives users control of Autofill for addresses in the UI.\r\n\r\nSetting the policy to False means Autofill never suggests or fills address information, nor does it save additional address information that users submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"903b5226fbee77d4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_pluginsblockedforurlsdesc","displayName":"Block the Flash plugin on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"90be319a965259ad":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowquickanalysis","displayName":"Show Quick Analysis options on selection (User)","description":"This policy setting controls the \"Show Quick Analysis options on selection\" option found under File tab | Options | General | User Interface Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will show Quick Analysis options when data is selected. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will not show these options on selection.","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowquickanalysis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowquickanalysis_1","displayName":"Enabled","description":null,"helpText":null}]},"90fd9cfd6db72447":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve","displayName":"Set maximum number of trust records to preserve (User)","description":"This policy setting allows you to specify the maximum number of trust records to preserve when the purge task detects that this application has trusted more than the number of trusted documents set by the \"Set maximum number of trusted documents\" policy setting.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of trust records to preserve, with an upper limit of 20000. Due to performance reasons, it is not recommended to set it to the upper limit.\r\n\r\nIf you disable or you do not configure this policy setting, the default value for of 400 is used.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_1","displayName":"Enabled","description":null,"helpText":null}]},"90aa3fd872ce5cb3":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"903c8060c872af57":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptlets"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"900de7a63792fa7c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history (User)","description":"Enables deleting browser history and download history and prevents users from changing this setting.\r\n\r\nNote that even with this policy is disabled, the browsing and download history aren't guaranteed to be retained: users can edit or delete the history database files directly, and the browser itself may remove (based on expiration period) or archive any or all history items at any time.\r\n\r\nIf you enable this policy or don't configure it, users can delete the browsing and download history.\r\n\r\nIf you disable this policy, users can't delete browsing and download history.\r\n\r\nIf you enable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you enable both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how this policy is configured.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"9043415478fc21a4":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled","displayName":"Search Filters Enabled (User)","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions will be shown.\r\n\r\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\r\n\r\nIf you disable this policy, the autosuggestion dropdown won't display the ribbon of available filters.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"90e12f7e1ab401fa":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes","displayName":"Configure the background types allowed for the new tab page layout (User)","description":"You can configure which types of background image that are allowed on the new tab page layout in Microsoft Edge.\r\n\r\nIf you don't configure this policy, all background image types on the new tab page are enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* DisableImageOfTheDay (1) = Disable daily background image type\r\n\r\n* DisableCustomImage (2) = Disable custom background image type\r\n\r\n* DisableAll (3) = Disable all background image types\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_1","displayName":"Enabled","description":null,"helpText":null}]},"905136e640c6b604":{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (User)","description":"The feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is auto-filled into a web form. This ensures that non-authorized persons can't use saved passwords for autofill.\r\n\r\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\r\n\r\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill will not have any authentication flow.\r\n\r\nIf you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt will be set to 'Always' by default. However, users can change it to the other option, which is 'Once every browsing session'.\r\n\r\nIf you set this policy to 'WithCustomPrimaryPassword', users will be asked to create their custom password and then to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords will get auto-filled after successful authentication. The frequency for authentication prompt will be set to 'Always' by default. However, users can change it to the other option, which is 'Once every browsing session'.\r\n\r\nIf you set this policy to 'AutofillOff', saved passwords will no longer be suggested for autofill.\r\n\r\nPolicy options mapping:\r\n\r\n* Automatically (0) = Automatically\r\n\r\n* WithDevicePassword (1) = With device password\r\n\r\n* WithCustomPrimaryPassword (2) = With custom primary password\r\n\r\n* AutofillOff (3) = Autofill off\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"901375234cc4c317":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicy_l_ageoutpolicydecimal","displayName":"Number of days (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"9078f8ab405e41a2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kannada","displayName":"Kannada (User)","description":"Enables the editing language Kannada","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kannada_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kannada_1","displayName":"Enabled","description":null,"helpText":null}]},"909efc1115423588":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_microsoftofficeshareddrawingcode","displayName":"Disable Microsoft Office shared drawing code for blip caching (User)","description":"Disables blip (an image representation) caching in the shared drawing code GEL. Caching can speed up certain operations. Disabling blip caching can be used to prevent caching during file open operations.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_microsoftofficeshareddrawingcode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_microsoftofficeshareddrawingcode_1","displayName":"Enabled","description":null,"helpText":null}]},"90500a9887bdd37d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_l_pathcolon262","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"9054373e3f676d08":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultspcatalog","displayName":"Default SharePoint Catalog Location (User)","description":"This policy setting allows you to set the location of the SharePoint Catalog that is designated as Default. The web add-ins contained in the Default Catalog can be inserted into Office documents by users.\r\n\r\nIf you enable this policy setting, you can set the URL for the SharePoint Catalog from which users can insert apps into their Office documents.\r\n\r\nIf you disable this policy setting, users cannot insert web add-ins from a SharePoint catalog.\r\n\r\nIf you do not configure this policy setting or set any other policy settings in the Trusted Catalogs folder, users can set their own Default SharePoint Catalog location.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultspcatalog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultspcatalog_1","displayName":"Enabled","description":null,"helpText":null}]},"90f0e3ab212cabff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_replacetextasyoutype","displayName":"Replace text as you type (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"8084033c-156a-4d1b-ab0b-159541810459","categoryName":"Tools | AutoCorrect Options... (Excel, PowerPoint and Access)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_replacetextasyoutype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_replacetextasyoutype_1","displayName":"Enabled","description":null,"helpText":null}]},"90b9318ae0131f1b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_disableinternationalizeddomainnamesidninoutlook","displayName":"Disable Internationalized Domain Names (IDN) in Outlook (User)","description":"By default, Outlook supports Internationalized Domain Names (IDN) for SMTP addresses in Outlook if Windows provides the appropriate support for this feature. You can disable IDN support so that Punycode rather than native characters are used for rendering SMTP addresses. \r\n\r\nYou might choose to disable IDN support in Outlook if you do not typically expect non-ASCII characters in SMTP addresses. \r\n\r\nThis setting does not affect the support of IDN in URLs.","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_disableinternationalizeddomainnamesidninoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_disableinternationalizeddomainnamesidninoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"907cc2ad03607ced":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventreportinglinegroupcalendarfromappearing","displayName":"Prevent Reporting Line Group Calendar from appearing (User)","description":"This policy setting prevents Reporting Line Group Calendar from appearing in the navigation pane.\r\n\r\nIf you enable this policy setting, Reporting Line Group Calendar will not appear in the navigation pane.\r\n\r\nIf you disable or do not configure this policy setting, My Reporting Line Group Calendar will appear in the navigation pane.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventreportinglinegroupcalendarfromappearing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventreportinglinegroupcalendarfromappearing_1","displayName":"Enabled","description":null,"helpText":null}]},"90eb15fc16ede82d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_changectrlentershortcutbehavior","displayName":"Change CTRL+ENTER shortcut behavior (User)","description":"This policy setting controls whether CTRL+ENTER can be used as a shortcut to send an email message. You can change this behavior so that CTRL+ENTER does not send an email message.\r\n\r\nIf you enable this policy setting, you may select one of these choices:\r\n- CTRL+Enter is not a shortcut for sending a message\r\n- CTRL+Enter is a shortcut for sending a message\r\n- CTRL+Enter displays a prompt\r\n\r\nIf you disable or do not configure this policy setting, users can use CTRL+ENTER to send an e-mail message. By default, users are prompted the first time they use the shortcut to confirm sending the message.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_changectrlentershortcutbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_changectrlentershortcutbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"90a548995cc6ac2d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapinameresolve_l_simplemapi_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapinameresolve_l_simplemapi_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapinameresolve_l_simplemapi_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapinameresolve_l_simplemapi_setting_0","displayName":"Automatically Deny","description":null,"helpText":null}]},"9087a9e8d52b1075":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_usesmartcutandpaste","displayName":"Use smart cut and paste (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_usesmartcutandpaste_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_usesmartcutandpaste_1","displayName":"Enabled","description":null,"helpText":null}]},"903c8f5715bd7e29":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_l_pathcolon60","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"90ccad9fd6d51404":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_turnofflivepreviewintheshapeswindow","displayName":"Turn off Live Preview in the Shapes window (User)","description":"This policy setting turns off the Live Preview in the Shapes window feature, which shows shapes in the Shapes window with the detail and color depth they will have in a drawing, including theme colors and effects.\r\n\r\nIf you enable this policy setting, Live Preview in the Shapes Window is turned off.\r\n\r\nIf you disable or do not configure this policy setting, Live Preview in the Shapes Window is turned on.","helpText":"","infoUrls":[],"categoryId":"a7d55d90-e1d1-4577-8bfd-fe2641bce461","categoryName":"User Interface Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_turnofflivepreviewintheshapeswindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_turnofflivepreviewintheshapeswindow_1","displayName":"Enabled","description":null,"helpText":null}]},"90d228758803b547":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_pictureplaceholders","displayName":"Show picture placeholders (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_pictureplaceholders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_pictureplaceholders_1","displayName":"Enabled","description":null,"helpText":null}]},"902e1166c2a15c82":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_disablewarningonincludefieldsupdate","displayName":"Don’t ask permission before updating IncludePicture and IncludeText fields in Word (User)","description":"This policy setting allows you to control whether Word prompts the user with a security message before updating IncludePicture and IncludeText fields in the document.\r\n\r\nBy default, the user is prompted with a security message before those fields are updated. But, the prompt might effect automated workflows that merge Word documents.\r\n\r\nImportant: Fields that contain IncludePicture and IncludeText references can be used for data exfiltration or phishing exploits. A field containing these references can be modified to point to external websites for content. If credentials are required for accessing the picture or text, the process of updating the field will request a sign-in from the user. While this is a legitimate scenario for trusted sources, it is vulnerable to phishing if the document is not from a trusted source.\r\n\r\nIf you enable this policy setting, the user won’t be prompted with a security message before those fields are updated. Enabling this policy setting is not recommended because of the possible security implications.\r\n\r\nIf you disable or don’t configure this policy setting, the user will be prompted with a security message before those fields are updated.\r\n ","helpText":"","infoUrls":[],"categoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_disablewarningonincludefieldsupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_disablewarningonincludefieldsupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"908b8795e7995f13":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_pathcolon88","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/91.json b/public/intune-definitions/91.json new file mode 100644 index 000000000000..e56ad4fdb9a3 --- /dev/null +++ b/public/intune-definitions/91.json @@ -0,0 +1 @@ +{"9166ee03fc62dcf6":{"id":"ade_setupassistant_touchfaceid","displayName":"Touch ID and Face ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_touchfaceid_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_touchfaceid_1","displayName":"Show","description":null,"helpText":null}]},"91e260a35ee779ad":{"id":"app_privacy_permissiondefaults_generickey_location","displayName":"Location","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for access to location.\n* `WhileUsing`: The app privacy permission default is set to allow access to location only while the user is using the app In macOS, this is equivalent to `Always`.\n* `Always`: The app privacy permission default is set to allow access to location always.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_location_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_location_1","displayName":"WhileUsing","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_location_2","displayName":"Always","description":null,"helpText":null}]},"91b4c2c75f8c911c":{"id":"com.apple.applicationaccess_allowedcamerarestrictionbundleids","displayName":"Allowed Camera Restriction Bundle IDs","description":"If present, the system exempts apps with bundle IDs in the array from the `allowCamera` restriction. The system doesn't grant these apps access to the camera automatically; they're only exempted from the `allowCamera` restriction. This key has no effect when the camera isn't restricted. Multiple payloads combine using an intersect operation. Requires a supervised device.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"9177bf586f84634a":{"id":"com.apple.applicationaccess_allownotificationsmodification","displayName":"Allow Notifications Modification","description":"If false, disables modification of notification settings. Requires a supervised device. Available in iOS 9.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allownotificationsmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allownotificationsmodification_true","displayName":"True","description":null,"helpText":null}]},"91ee25ca21c81bde":{"id":"com.apple.carddav.account_carddavprincipalurl","displayName":"Card DAV Principal URL","description":"The base URL to the user’s address book.","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":null},"918cf07d78ce8b96":{"id":"com.apple.dock_static-apps_item_tile-type","displayName":"Tile Type","description":"The type of tile.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_static-apps_item_tile-type_0","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_static-apps_item_tile-type_1","displayName":"Directory","description":null,"helpText":null},{"id":"com.apple.dock_static-apps_item_tile-type_2","displayName":"URL","description":null,"helpText":null}]},"916b53bd594b3e1d":{"id":"com.apple.dock_static-others_item_tile-data_label","displayName":"Label","description":"The label of the Dock item.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"913e141eac7d20bd":{"id":"com.apple.managedclient.preferences_autofillcreditcardenabled","displayName":"Enable AutoFill for credit cards","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete credit card information in web forms using previously stored information.\n\nIf you disable this policy, AutoFill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.\n\nIf you enable this policy or don't configure it, users can control AutoFill for credit cards.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autofillcreditcardenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_autofillcreditcardenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autofillcreditcardenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"918140cb8c813ed1":{"id":"com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_title","displayName":"Title","description":"The title to display.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"91d44949e1e7b528":{"id":"com.apple.managedclient.preferences_userdatadir","displayName":"Set the user data directory","description":"Set the directory to use for storing user data.\n\nIf you enable this policy, Microsoft Edge uses the specified directory regardless of whether the user has set the '--user-data-dir' command-line flag.\n\nIf you don't enable this policy, the default profile path is used, but the user can override it by using the '--user-data-dir' flag. Users can find the directory for the profile at edge://version/ under profile path.\n\nTo avoid data loss or other errors, don't configure this policy to a volume's root directory or to a directory that's used for other purposes, because Microsoft Edge manages its contents.\n\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#userdatadir"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"919fb94d50615706":{"id":"com.apple.system-extension-policy_allowedsystemextensiontypes_generickey","displayName":"Allowed System Extension Types","description":"The mapping of team identifier to an array of strings, where each string is a type of system extension that you can install for that team identifier.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"915249b2383b2331":{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"91de60bcfbcfe770":{"id":"com.apple.universalaccess_closeviewsmoothimages","displayName":"Close View Smooth Images","description":"If true, enables \"Smooth images\" in the Zoom options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_closeviewsmoothimages_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_closeviewsmoothimages_true","displayName":"True","description":null,"helpText":null}]},"91e0f59833fa98cb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfvieweroutofprocessiframeenabled","displayName":"Use out-of-process iframe PDF Viewer","description":"Determines whether the PDF viewer in Microsoft Edge uses an out-of-process iframe (OOPIF).\nThis is the new PDF viewer architecture going forward, as it's simpler in design and makes adding new features easier. The current GuestView PDF viewer, which relies on an outdated and overly complex architecture, is being deprecated.\n\nIf you enable this policy or don't configure it, Microsoft Edge uses the OOPIF PDF viewer architecture. The default behavior will be decided by Microsoft Edge.\n\nIf you disable this policy, Microsoft Edge strictly uses the existing GuestView PDF viewer. This approach embeds a web page with its own separate frame tree into another web page.\n\nThis policy will be removed in the future, after the OOPIF PDF viewer feature has fully rolled out.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfvieweroutofprocessiframeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfvieweroutofprocessiframeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"91fafd0473b6c9e1":{"id":"device_vendor_msft_bitlocker_allowwarningforotherdiskencryption","displayName":"Allow Warning For Other Disk Encryption","description":"Allows Admin to disable all UI (notification for encryption and warning prompt for other disk encryption)\n and turn on encryption on the user machines silently.\n Warning: When you enable BitLocker on a device with third party encryption, it may render the device unusable and will\n require reinstallation of Windows.\n Note: This policy takes effect only if \"RequireDeviceEncryption\" policy is set to 1.\n The format is integer.\n The expected values for this policy are: \n\n 1 = This is the default, when the policy is not set. Warning prompt and encryption notification is allowed.\n 0 = Disables the warning prompt and encryption notification. Starting in Windows 10, next major update, \n the value 0 only takes affect on Entra ID joined devices. \n Windows will attempt to silently enable BitLocker for value 0.\n\n If you want to disable this policy use the following SyncML:\n 110./Device/Vendor/MSFT/BitLocker/AllowWarningForOtherDiskEncryptionint0","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp#allowwarningforotherdiskencryption"],"categoryId":"0a1347d2-90c0-407a-baa0-e4859260532a","categoryName":"BitLocker","options":[{"id":"device_vendor_msft_bitlocker_allowwarningforotherdiskencryption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_allowwarningforotherdiskencryption_1","displayName":"Enabled","description":null,"helpText":null}]},"911eb24fd267403a":{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeapplicationcontenturirules","displayName":"Turn on dynamic Content URI Rules for packaged Microsoft Store apps","description":"This policy setting lets you turn on Content URI Rules to supplement the static Content URI Rules that were defined as part of the app manifest and apply to all Windows Store apps that use the enterpriseAuthentication capability on a computer.\r\n\r\nIf you enable this policy setting, you can define additional Content URI Rules that all Windows Store apps that use the enterpriseAuthentication capability on a computer can use.\r\n\r\nIf you disable or don't set this policy setting, Windows Store apps will only use the static Content URI Rules.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeapplicationcontenturirules"],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":[{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeapplicationcontenturirules_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeapplicationcontenturirules_1","displayName":"Enabled","description":null,"helpText":null}]},"91aad67a1bcd654d":{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpdllcachedir_wfpdllcachedirbox","displayName":"Cache file path: (Device)","description":"\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":[],"categoryId":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","categoryName":"Windows File Protection","options":null},"917a4f34659f9e00":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended","displayName":"Enable Safe Browsing for trusted sources","description":"Setting the policy to Enabled or leaving it unset means downloaded files are sent to be analyzed by Safe Browsing, even when it's from a trusted source.\r\n\r\nSetting the policy to Disabled means downloaded files won't be sent to be analyzed by Safe Browsing when it's from a trusted source.\r\n\r\nThese restrictions apply to downloads triggered from webpage content, as well as the Download link menu option. These restrictions don't apply to the save or download of the currently displayed page or to saving as PDF from the printing options.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"913f82aa6e43b196":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_defaultsearchprovidername","displayName":"Default search provider name (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"914883b6be816d12":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_nativemessagingallowlistdesc","displayName":"Names of the native messaging hosts to exempt from the blocklist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":null},"91cfab45d3c638ae":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"91cf3cf9cea5b591":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage","displayName":"Allow importing of home page settings","description":"Allows users to import their home page setting from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import the home page setting is automatically selected.\r\n\r\nIf you disable this policy, the home page setting isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"9154164b10d04dda":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_managedsearchengines","displayName":"Manage Search Engines (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"91c920e805dcaea5":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_forceforegroundpriorityforalltabs","displayName":"Force foreground priority for all tabs","description":"This policy controls whether background web content runs at foreground priority.\r\n\r\nBy default, the browser optimizes resource usage by lowering the scheduling\r\npriority of content in background tabs. This helps improve overall system\r\nresponsiveness and performance for the active tab.\r\n\r\nIf you enable this policy, background web content runs at the same foreground\r\npriority as the active tab, regardless of visibility state.\r\n\r\nIf you disable or don't configure this policy, the browser determines the\r\npriority of web content based on standard heuristics. For example, content\r\nthat is not visible, not playing audio, and not participating in video calls\r\nmay be deprioritized.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_forceforegroundpriorityforalltabs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_forceforegroundpriorityforalltabs_1","displayName":"Enabled","description":null,"helpText":null}]},"91e422522bd9a7db":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_maximplicitcachesize","displayName":"Set the max size of the Office Document Cache","description":"This policy controls how large the user's Office Document Cache can be. It does not apply to explicitly cached files on \"OneDrive for Business Client\" and \"OneDrive (consumer) Client\".","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_maximplicitcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_maximplicitcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"91fd232813d9f4b0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_msaccessexe11","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_msaccessexe11_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_msaccessexe11_1","displayName":"True","description":null,"helpText":null}]},"911117fd0cffae46":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_customsyncrootfoldername_customsyncrootfoldernamelist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"910c9752867c340a":{"id":"device_vendor_msft_policy_config_system_configuremicrosoft365uploadendpoint","displayName":"Configure Microsoft 365 Upload Endpoint","description":"This policy sets the upload endpoint for this device’s diagnostic data as part of the Microsoft 365 Update Readiness program. If your organization is participating in the program and has been instructed to configure a custom upload endpoint, then use this setting to define that endpoint. The value for this setting will be provided by Microsoft as part of the onboarding process for the program. Value type is string.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#configuremicrosoft365uploadendpoint"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":null},"9159f5e381866620":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingopacity","displayName":"[Deprecated] QR code bitmap opacity (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"91678e6c7257cebb":{"id":"device_vendor_msft_policy_config_update_excludewudriversinqualityupdate","displayName":"Exclude WU Drivers In Quality Update","description":"NoteSince this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Allows IT Admins to exclude Windows Update (WU) drivers during updates.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#excludewudriversinqualityupdate"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_excludewudriversinqualityupdate_0","displayName":"Allow Windows Update drivers.","description":"Allow Windows Update drivers.","helpText":null},{"id":"device_vendor_msft_policy_config_update_excludewudriversinqualityupdate_1","displayName":"Exclude Windows Update drivers.","description":"Exclude Windows Update drivers.","helpText":null}]},"91eb3ed7f15ea421":{"id":"device_vendor_msft_policy_config_userrights_bypasstraversechecking","displayName":"Bypass Traverse Checking","description":"This user right determines which users can traverse directory trees even though the user may not have permissions on the traversed directory. This privilege does not allow the user to list the contents of a directory, only to traverse directories.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#bypasstraversechecking"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"9101b29669ad6e94":{"id":"mathsettings_calculator_mathnotesmode_enabled","displayName":"Enabled","description":"Controls whether the mode is enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":[{"id":"mathsettings_calculator_mathnotesmode_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_mathnotesmode_enabled_true","displayName":"True","description":null,"helpText":null}]},"91a1a215cfe9b551":{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls_restrictcplslist","displayName":"List of allowed Control Panel items (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"913012905c678811":{"id":"user_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_1","displayName":"Turn off Internet File Association service (User)","description":"This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.\r\n\r\nWhen a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application.\r\n\r\nIf you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed.\r\n\r\nIf you disable or do not configure this policy setting, the user is allowed to use the Web service.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellnouseinternetopenwith-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_1_1","displayName":"Enabled","description":null,"helpText":null}]},"9166015026b6852e":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_net_framework","displayName":".Net Framework Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-net-framework"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_net_framework_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_net_framework_1","displayName":"Enabled","description":null,"helpText":null}]},"915c2ee61e07ad6d":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy","displayName":"Execution Policy (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_allsigned","displayName":"Allow only signed scripts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_remotesigned","displayName":"Allow local scripts and remote signed scripts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_unrestricted","displayName":"Allow all scripts","description":null,"helpText":null}]},"9189b435e8c3424c":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_1","displayName":"Allow .rdp files from valid publishers and user's default .rdp settings (User)","description":"This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed the file with a valid certificate. A valid certificate is one issued by an authority recognized by the client, such as the issuers in the client's Third-Party Root Certification Authorities certificate store. This policy setting also controls whether the user can start an RDP session by using default .rdp settings (for example, when a user directly opens the Remote Desktop Connection [RDC] client without specifying an .rdp file).\r\n\r\nIf you enable or do not configure this policy setting, users can run .rdp files that are signed with a valid certificate. Users can also start an RDP session with default .rdp settings by directly opening the RDC client. When a user starts an RDP session, the user is asked to confirm whether they want to connect.\r\n\r\nIf you disable this policy setting, users cannot run .rdp files that are signed with a valid certificate. Additionally, users cannot start an RDP session by directly opening the RDC client and specifying the remote computer name. When a user tries to start an RDP session, the user receives a message that the publisher has been blocked.\r\n\r\nNote: You can define this policy setting in the Computer Configuration node or in the User Configuration node. If you configure this policy setting for the computer, all users on the computer are affected.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-allow-signed-files-1"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_1_1","displayName":"Enabled","description":null,"helpText":null}]},"913c5494f3dc78b5":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_enablescreensaver","displayName":"Allow Screen Saver (User)","description":"This policy setting allows a screen saver to interrupt playback.\r\n\r\nIf you enable this policy setting, a screen saver is displayed during playback of digital media according to the options selected on the Screen Saver tab in the Display Properties dialog box in Control Panel. The Allow screen saver during playback check box on the Player tab in the Player is selected and is not available.\r\n\r\nIf you disable this policy setting, a screen saver does not interrupt playback even if users have selected a screen saver. The Allow screen saver during playback check box is cleared and is not available.\r\n\r\nIf you do not configure this policy setting, users can change the setting for the Allow screen saver during playback check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-enablescreensaver"],"categoryId":"2f85405a-7472-44ce-8c05-b59bb54912d5","categoryName":"Playback","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_enablescreensaver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_enablescreensaver_1","displayName":"Enabled","description":null,"helpText":null}]},"91a882b5ea125a30":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled","displayName":"Control how Chrome Cleanup reports data to Google (User)","description":"Setting the policy to Enabled means if Chrome Cleanup detects unwanted software, it may, in line with policy set by SafeBrowsingExtendedReportingEnabled, report about the scan to Google. Chrome Cleanup asks users if they want the cleanup. It sends results to Google.\r\n\r\nSetting the policy to Disabled means if Chrome Cleanup detects unwanted software, it won't report about the scan to Google, regardless of the value of SafeBrowsingExtendedReportingEnabled. Chrome Cleanup asks users if they want the cleanup. The results aren't reported to Google.\r\n\r\nLeaving the policy unset means Chrome Cleanup may, in line with policy set by SafeBrowsingExtendedReportingEnabled, report about scans for detecting unwanted software to Google. Chrome Cleanup asks users if they want the cleanup and to share the results with Google to help with future unwanted software detection. These results have file metadata, automatically installed extensions, and registry keys, as described by the Chrome Privacy Whitepaper.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"912f98ff897aafc2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended","displayName":"Print PDF as Image Default (User)","description":"Controls if Google Chrome makes the Print as image option default to set when printing PDFs.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome then the user selection for Print as image option will be initially unset. The user will be allowed to select it for each individual PDFs print job, if the option is available.\r\n\r\nFor Microsoft® Windows® or macOS this policy only has an effect if PrintPdfAsImageAvailability is also enabled.","helpText":"","infoUrls":[],"categoryId":"20ceae56-e189-46ec-a440-791ce7454017","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"91d32ac7e7157e76":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_remoteaccesshostclientdomain","displayName":"Configure the required domain name for remote access clients (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"911b92008f890c51":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir","displayName":"Set Google Chrome Frame user data directory (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},"91e9eb1b2ee3687b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User)","description":"This policy setting controls whether the specified Office 2016 applications notify users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the ''Require that application add-ins are signed by Trusted Publisher'' policy setting, which prevents users from changing this policy setting. \r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if an application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the ''Add-ins'' category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"91783e0d46e35036":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_pathcolon65","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"916424b09f2d6f9c":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript","displayName":"Allow updates to status bar via script (User)","description":"This policy setting allows you to manage whether script is allowed to update the status bar within the zone.\n\nIf you enable this policy setting, script is allowed to update the status bar.\n\nIf you disable or do not configure this policy setting, script is not allowed to update the status bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowupdatestostatusbarviascript"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_1","displayName":"Enabled","description":null,"helpText":null}]},"91a2e79cc245ad14":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, the permission is set to Medium Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonejavapermissions"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"91d9977fdcf554a1":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions","displayName":"Logon options (User)","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon with current username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonelogonoptions"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"914ddccbd04812f5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},"918247d3ee593a7b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites","displayName":"Hide the default top sites from the new tab page (User)","description":"Hides the default top sites from the new tab page in Microsoft Edge.\r\n\r\nIf you set this policy to true, the default top site tiles are hidden.\r\n\r\nIf you set this policy to false or don't configure it, the default top site tiles remain visible.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_1","displayName":"Enabled","description":null,"helpText":null}]},"915dbc0f2f66bd36":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"04b46099-4ee5-4def-8e04-569c988057a9","categoryName":"Identity and sign-in","options":null},"9101603555534b88":{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass","displayName":"Allow users to bypass Enhanced Security Mode (User)","description":"Microsoft Edge will let users bypass Enhanced Security Mode on a site via Settings page or PageInfo flyout. This policy lets you configure whether users can bypass Enhanced Security Mode.\r\n\r\nIf you disable this policy, Microsoft Edge won't allow users to bypass Enhanced Security Mode.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will allow users to bypass Enhanced Security Mode.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_1","displayName":"Enabled","description":null,"helpText":null}]},"91fd8d18f3cbc417":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended","displayName":"Set the default New Tab Page feed tab to Work or Discover (User)","description":"This policy sets the default feed tab on the New Tab Page to Work or Discover.\r\n\r\nIf you set this policy to 'Work' (0) or don't configure this policy, Microsoft Edge sets the default feed tab to Work.\r\n\r\nIf you set this policy to 'Discover' (1), Microsoft Edge sets the default feed tab to Discover.\r\n\r\nThis policy only takes effect when 'ConfigureNTPFeedTabVisibility' (Configure whether the Discover or Work feed tabs are shown on the New Tab Page.) is set to 'EnableBothWorkDiscover' (0) or is not configured. If only one tab is visible, this policy has no effect.\r\n\r\nPolicy options mapping:\r\n\r\n* NTPDefaultFeedTabWork (0) = Work\r\n\r\n* NTPDefaultFeedTabDiscover (1) = Discover\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9191a060146627f2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_refreshfrequencylimit_l_refreshfrequencylimitdecimal","displayName":"Refresh frequency limit (minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":null},"918c2077c27498b4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacecompany","displayName":"Replace AD - Company (User)","description":"This policy setting allows you to customize the 12th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"company\" of line 12.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 12 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacecompany_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacecompany_1","displayName":"Enabled","description":null,"helpText":null}]},"91bf41e492832cfd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy4_l_placesbarname215","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"9196990260093469":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_l_workflowsig482","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_l_workflowsig482_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_l_workflowsig482_1","displayName":"True","description":null,"helpText":null}]},"9150d10dc6073055":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_lengthadattributecontainingpersonalsiteurl","displayName":"Length AD Attribute containing Personal Site URL (User)","description":"The Office client updates the User object in the Active Directory with the URL of the user's personal site. Please enter the length of URL that the attribute can accept. The default is 2048.","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_lengthadattributecontainingpersonalsiteurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_lengthadattributecontainingpersonalsiteurl_1","displayName":"Enabled","description":null,"helpText":null}]},"91ca70c7aaa0e2cc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_correcttwoinitialcapitals","displayName":"Correct TWo INitial CApitals (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"8084033c-156a-4d1b-ab0b-159541810459","categoryName":"Tools | AutoCorrect Options... (Excel, PowerPoint and Access)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_correcttwoinitialcapitals_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_correcttwoinitialcapitals_1","displayName":"Enabled","description":null,"helpText":null}]},"91f2764d4710432a":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngsaltlength_l_specifycngsaltlengthspinid","displayName":"Number of bytes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":null},"917c64ffb24af537":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_l_playremindersound","displayName":"Play reminder sound (User)","description":"","helpText":"","infoUrls":[],"categoryId":"13eb248a-4549-4d23-9ada-23b40edf36bf","categoryName":"Reminder Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_l_playremindersound_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_l_playremindersound_1","displayName":"True","description":null,"helpText":null}]},"91c6018831392adb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_applymacrosecuritysettings","displayName":"Apply macro security settings to macros, add-ins and additional actions (User)","description":"This policy setting controls whether Outlook also applies the macro security settings to installed COM add-ins and additional actions. \r\n\r\nIf you enable this policy setting, the macro security settings will also be applied to add-ins and additional actions. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not use the macro security settings to determine whether to run macros, installed COM add-ins, and additional actions.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_applymacrosecuritysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_applymacrosecuritysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"9108f68ef16a6cc0":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_whenselectingautomaticallyselectentireword","displayName":"When selecting, automatically select entire word (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_whenselectingautomaticallyselectentireword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_whenselectingautomaticallyselectentireword_1","displayName":"Enabled","description":null,"helpText":null}]},"919afb1e74d0af2a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders15","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders15_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders15_1","displayName":"True","description":null,"helpText":null}]},"91566e60b1b10293":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcproject_l_pjautocalc","displayName":"Automatic Calculation (User)","description":"Specifies that calculations should be done automatically as soon as a change is made.\r\n\r\nIf you enable this setting, calculations will be made after every change to the project.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"ed137c3d-d7bc-48f3-ad86-ff194fc6820d","categoryName":"Calculation options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcproject_l_pjautocalc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcproject_l_pjautocalc_1","displayName":"Enabled","description":null,"helpText":null}]},"910117840a1af9f7":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjdefaultfixedaccrual_l_pjdefaultfixedaccrual28","displayName":"Default fixed costs accrual (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjdefaultfixedaccrual_l_pjdefaultfixedaccrual28_1","displayName":"Start","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjdefaultfixedaccrual_l_pjdefaultfixedaccrual28_3","displayName":"Prorated","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjdefaultfixedaccrual_l_pjdefaultfixedaccrual28_2","displayName":"End","description":null,"helpText":null}]},"9144d4464d106884":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjhoursperday_l_pjhoursperday18","displayName":"Hours per day (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":null},"91f9bfcc2c25e410":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjsetautofilter","displayName":"Set AutoFilter on for new projects (User)","description":"This policy setting turns on AutoFilter automatically when the user creates a new project.\r\n\r\nIf you enable or do not configure this policy setting, AutoFilter is automatically turned on when users create a new project.\r\n\r\nIf you disable this policy setting, AutoFilter is not automatically turned on when users create a new project.","helpText":"","infoUrls":[],"categoryId":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","categoryName":"General options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjsetautofilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjsetautofilter_1","displayName":"Enabled","description":null,"helpText":null}]},"919113f280c7b4ec":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_movement_l_movement4","displayName":"Cursor movement (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_movement_l_movement4_0","displayName":"Logical","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_movement_l_movement4_1","displayName":"Visual","description":null,"helpText":null}]},"91eb895b582ea271":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages","displayName":"Web pages (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_1","displayName":"Enabled","description":null,"helpText":null}]},"919adc8e6cb7bbb1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_datecolon21","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"91442188156b2182":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_target","displayName":"Target","description":"Settings for the Windows Firewall for Hyper-V containers. Each setting applies on a per-VM Creator basis","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_target_wsl","displayName":"Windows Subsystem for Linux","description":"Windows Subsystem for Linux","helpText":null}}} \ No newline at end of file diff --git a/public/intune-definitions/92.json b/public/intune-definitions/92.json new file mode 100644 index 000000000000..d7e4831cbf78 --- /dev/null +++ b/public/intune-definitions/92.json @@ -0,0 +1 @@ +{"925d85095e77b735":{"id":"com.apple.airprint_airprint_item_resourcepath","displayName":"Resource Path","description":"The resource path associated with the printer. This path corresponds to the rp parameter of the _ipps.tcp Bonjour record. For example: printers/Canon_MG5300_series, printers/Xerox_Phaser_7600, ipp/print, Epson_IPP_Printer","helpText":null,"infoUrls":[],"categoryId":"429c4b85-a2b4-46ed-afa0-6c89c08a5544","categoryName":"AirPrint","options":null},"92d8b6a2d9f7d06f":{"id":"com.apple.app.lock_app_options_enablezoom","displayName":"Enable Zoom","description":"If true, enables Zoom. ","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_enablezoom_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_enablezoom_true","displayName":"True","description":null,"helpText":null}]},"923ada9317df8588":{"id":"com.apple.app.lock_app_userenabledoptions_voicecontrol","displayName":"Voice Control","description":"If true, allows the user to toggle Voice Control.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_userenabledoptions_voicecontrol_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_userenabledoptions_voicecontrol_true","displayName":"True","description":null,"helpText":null}]},"9216ddd4bab2b0e1":{"id":"com.apple.directoryservice.managed_adtrustchangepassintervaldays","displayName":"AD Trust Change Pass Interval Days","description":"The number of days before requiring a change of the computer trust account password. 0 disables the feature.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"92938725cab4cb61":{"id":"com.apple.extensiblesso_com.apple.extensiblesso-kerberos_kerberos","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"92cfeec3ce682864":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_enabled","displayName":"Enabled","description":"If true, enable these settings. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":[{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_enabled_true","displayName":"True","description":null,"helpText":null}]},"92f8447dd27f7167":{"id":"com.apple.managedclient.preferences_autodiscardsleepingtabsenabled","displayName":"Configure auto discard sleeping tabs","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab will need to be reloaded.\n\nIf the \"SleepingTabsEnabled\" policy is enabled, then this feature will be enabled by default.\n\nIf the \"SleepingTabsEnabled\" is disabled, then this feature will be disabled by default and cannot be enabled.\n\nIf enabled, idle background tabs will be discarded after 1.5 days.\n\nIf disabled, idle background tab will not be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autodiscardsleepingtabsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_autodiscardsleepingtabsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autodiscardsleepingtabsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9274c81479ed6ccb":{"id":"com.apple.managedclient.preferences_showacrobatsubscriptionbutton","displayName":"Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription","description":"This policy lets the native PDF viewer in Microsoft Edge show a button that lets a user looking for advanced digital document features to discover and subscribe to premium offerings. This is done via the Acrobat extension.\n\nIf you enable or don't configure this policy, the button will show up on the native PDF viewer in Microsoft Edge. A user will be able to buy Adobe subscription to access their premium offerings.\n\nIf you disable this policy, the button won't be visible on the native PDF viewer in Microsoft Edge. A user won't be able to discover Adobe's advanced PDF tools or buy their subscriptions.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showacrobatsubscriptionbutton"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showacrobatsubscriptionbutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showacrobatsubscriptionbutton_true","displayName":"Enabled","description":null,"helpText":null}]},"925d6f3ac20f4dfa":{"id":"com.apple.managedclient.preferences_weather_update_automatically","displayName":"Disable automatic updating of weather location","description":"Prevent users from choosing Update Location Automatically for weather location.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-automatic-updating-of-weather-location"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_weather_update_automatically_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_weather_update_automatically_true","displayName":"True","description":null,"helpText":null}]},"9248fd2a3d074e4a":{"id":"com.apple.mcxmenuextras_ichat.menu","displayName":"iChat","description":"If true, enables the iChat menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_ichat.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_ichat.menu_true","displayName":"True","description":null,"helpText":null}]},"9214603f66530c7d":{"id":"com.apple.mcxprinting_printmacaddress","displayName":"Print MAC Address","description":"If true, includes the MAC address.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":[{"id":"com.apple.mcxprinting_printmacaddress_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxprinting_printmacaddress_true","displayName":"True","description":null,"helpText":null}]},"928a1ba1ef1c9d1b":{"id":"com.apple.subscribedcalendar.account_com.apple.subscribedcalendar.account","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"fa20bbc3-d25d-4a7f-a349-9b211d186e21","categoryName":"Subscribed Calendars","options":null},"92ecf15cda375210":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting","description":"Administrators can use this policy to control whether websites can perform multiple downloads successively. Individual site behavior can be managed using the AutomaticDownloadsAllowedForUrls and AutomaticDownloadsBlockedForUrls policies.\n\nDefault behavior:\n\n- A user gesture is required for each additional download.\n\n- Users can modify their browser settings to disable successive downloads.\n\nPolicy options mapping:\n\n* AllowAutomaticDownloads (1) = Allow all websites to perform multiple downloads without requiring a user gesture between each download.\n\n* BlockAutomaticDownloads (2) = Prevent all websites from performing multiple downloads, even after a user gesture.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultautomaticdownloadssetting_allowautomaticdownloads","displayName":"Allow all websites to perform multiple downloads without requiring a user gesture between each download.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultautomaticdownloadssetting_blockautomaticdownloads","displayName":"Prevent all websites from performing multiple downloads, even after a user gesture.","description":null,"helpText":null}]},"9277663eafe090ed":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user entered so far.\n\nThis policy is optional. If you don't configure it, users can't see search suggestions; they see suggestions from their browsing history and favorites.\n\nBing's suggest URL can be specified as:\n\n'{bing:baseURL}qbox?query={searchTerms}'.\n\nGoogle's suggest URL can be specified as:\n\n'{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy isn't added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"92447cfbb184a2cb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_recommended","displayName":"Allow users to be alerted if their passwords are found to be unsafe (users can override)","description":"Allow Microsoft Edge to monitor user passwords.\n\nIf you enable this policy, the user gets alerted if any of their passwords stored in Microsoft Edge are found to be unsafe. Microsoft Edge will show an alert and this information will also be available in Settings > Passwords > Password Monitor.\n\nIf you disable this policy, users aren't asked for permission to enable this feature. Their passwords aren't scanned, and they aren't alerted either.\n\nIf you don't configure the policy, users can turn this feature on or off.\n\nTo learn more about how Microsoft Edge finds unsafe passwords see https://go.microsoft.com/fwlink/?linkid=2133833\n\nAdditional guidance:\n\nThis policy can be set as both Recommended and Mandatory, however with an important callout.\n\nMandatory enabled: If the policy is set to Mandatory enabled, the UI in Settings will be disabled but remain in 'On' state, and a briefcase icon will be made visible next to it with this description displayed on hover - \"This setting is managed by your organization.\"\n\nRecommended enabled: If the policy is set to Recommended enabled, the UI in Settings will remain in 'Off' state, but a briefcase icon will be made visible next to it with this description displayed on hover - \"Your organization recommends a specific value for this setting and you have chosen a different value\"\n\nMandatory and Recommended disabled: Both these states will work the normal way, with the usual captions being shown to users.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"92fd431e9f6f189b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.tabservicesenabled","displayName":"Enable tab organization suggestions","description":"This policy controls whether Microsoft Edge can use its tab organization service to help name or suggest tab groups to increase productivity.\n\nIf you enable or don't configure this policy, when a user creates a tab group or activates certain \"Group Similar Tabs\" features Microsoft Edge sends tab data to its tab organization service. This data includes URLs, page titles, and existing group information. The service uses this data to return suggestions for better groupings and group names.\n\nIf you disable this policy, no data is sent to the tab organization service. Microsoft Edge can't suggest group names when a group is created and certain \"Group Similar Tabs\" features that rely on the service aren't available.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.tabservicesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.tabservicesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"920e6586117ec35a":{"id":"device_vendor_msft_laps_policies_adencryptedpasswordhistorysize","displayName":"AD Encrypted Password History Size ","description":"Use this setting to configure how many previous encrypted passwords will be remembered in Active Directory.\n\nIf not specified, this setting will default to 0 passwords (disabled).\n\nThis setting has a minimum allowed value of 0 passwords.\n\nThis setting has a maximum allowed value of 12 passwords.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":null},"92230e60b1aeacc8":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehighpriorityunit","displayName":"High Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehighpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehighpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancehighpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"920f2397b952e51c":{"id":"device_vendor_msft_policy_config_admx_credui_enablesecurecredentialprompting","displayName":"Require trusted path for credential entry","description":"This policy setting requires the user to enter Microsoft Windows credentials using a trusted path, to prevent a Trojan horse or other types of malicious code from stealing the user’s Windows credentials.\r\n\r\nNote: This policy affects nonlogon authentication tasks only. As a security best practice, this policy should be enabled.\r\n\r\nIf you enable this policy setting, users will be required to enter Windows credentials on the Secure Desktop by means of the trusted path mechanism.\r\n\r\nIf you disable or do not configure this policy setting, users will enter Windows credentials within the user’s desktop session, potentially allowing malicious code access to the user’s Windows credentials.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credui#admx-credui-enablesecurecredentialprompting"],"categoryId":"58111f34-e9ac-47e2-b8ae-8d55c6a9ed6c","categoryName":"Credential User Interface","options":[{"id":"device_vendor_msft_policy_config_admx_credui_enablesecurecredentialprompting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credui_enablesecurecredentialprompting_1","displayName":"Enabled","description":null,"helpText":null}]},"92f41f846163e6b1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableremovabledrivescanning","displayName":"Scan removable drives","description":"This policy setting allows you to manage whether or not to scan for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan.\r\n\r\n If you enable this setting, removable drives will be scanned during any type of scan.\r\n\r\n If you disable or do not configure this setting, removable drives will not be scanned during a full scan. Removable drives may still be scanned during quick scan and custom scan.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disableremovabledrivescanning"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableremovabledrivescanning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableremovabledrivescanning_1","displayName":"Enabled","description":null,"helpText":null}]},"925d745c18c16cee":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_alwayspinsubfolders","displayName":"Subfolders always available offline","description":"Makes subfolders available offline whenever their parent folder is made available offline.\r\n\r\nThis setting automatically extends the \"make available offline\" setting to all new and existing subfolders of a folder. Users do not have the option of excluding subfolders.\r\n\r\nIf you enable this setting, when you make a folder available offline, all folders within that folder are also made available offline. Also, new folders that you create within a folder that is available offline are made available offline when the parent folder is synchronized.\r\n\r\nIf you disable this setting or do not configure it, the system asks users whether they want subfolders to be made available offline when they make a parent folder available offline.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-alwayspinsubfolders"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_alwayspinsubfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_alwayspinsubfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"9226555137b6931b":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_slowlinkspeed_lbl_slowlinkspeedspin","displayName":"Value:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"925bb41ef4a482dd":{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureduration_name","displayName":"Standard User Lockout Duration","description":"This policy setting allows you to manage the duration in minutes for counting standard user authorization failures for Trusted Platform Module (TPM) commands requiring authorization. If the number of TPM commands with an authorization failure within the duration equals a threshold, a standard user is prevented from sending commands requiring authorization to the TPM.\r\n\r\nThis setting helps administrators prevent the TPM hardware from entering a lockout mode because it slows the speed standard users can send commands requiring authorization to the TPM.\r\n\r\nAn authorization failure occurs each time a standard user sends a command to the TPM and receives an error response indicating an authorization failure occurred. Authorization failures older than this duration are ignored.\r\n\r\nFor each standard user two thresholds apply. Exceeding either threshold will prevent the standard user from sending a command to the TPM that requires authorization.\r\n\r\nThe Standard User Lockout Threshold Individual value is the maximum number of authorization failures each standard user may have before the user is not allowed to send commands requiring authorization to the TPM.\r\n\r\nThe Standard User Lockout Total Threshold value is the maximum total number of authorization failures all standard users may have before all standard users are not allowed to send commands requiring authorization to the TPM.\r\n\r\nThe TPM is designed to protect itself against password guessing attacks by entering a hardware lockout mode when it receives too many commands with an incorrect authorization value. When the TPM enters a lockout mode it is global for all users including administrators and Windows features like BitLocker Drive Encryption. The number of authorization failures a TPM allows and how long it stays locked out vary by TPM manufacturer. Some TPMs may enter lockout mode for successively longer periods of time with fewer authorization failures depending on past failures. Some TPMs may require a system restart to exit the lockout mode. Other TPMs may require the system to be on so enough clock cycles elapse before the TPM exits the lockout mode.\r\n\r\nAn administrator with the TPM owner password may fully reset the TPM's hardware lockout logic using the TPM Management Console (tpm.msc). Each time an administrator resets the TPM's hardware lockout logic all prior standard user TPM authorization failures are ignored; allowing standard users to use the TPM normally again immediately.\r\n\r\nIf this value is not configured, a default value of 480 minutes (8 hours) is used.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-standarduserauthorizationfailureduration-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureduration_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailureduration_name_1","displayName":"Enabled","description":null,"helpText":null}]},"924df17413560a78":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_chainmaxhostentries","displayName":"ChainMaxHostEntries","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"92664e9281c44856":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton","displayName":"Show Home button on toolbar","description":"Setting the policy to Enabled shows the Home button on Google Chrome's toolbar. Setting the policy to Disabled keeps the Home button from appearing.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users chooses whether to show the Home button.","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton_1","displayName":"Enabled","description":null,"helpText":null}]},"925f30d4b7fbe14f":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources","displayName":"Enable App Installer Additional Sources","description":"This policy controls additional sources provided by the enterprise IT administrator.\n\nIf you do not configure this policy, no additional sources will be configured for the Windows Package Manager.\n\nIf you enable this policy, the additional sources will be added to the Windows Package Manager and cannot be removed. The representation for each additional source can be obtained from installed sources using 'winget source export'.\n\nIf you disable this policy, no additional sources can be configured for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableadditionalsources"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_1","displayName":"Enabled","description":null,"helpText":null}]},"92d33d7b47d06d45":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path","description":"Specifies the path where difference disks will be created (when ProfileType or VHDAccessMode is configured to use them).\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\DiffDiskParentFolderPath\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_1","displayName":"Enabled","description":null,"helpText":null}]},"925a35ae3374d369":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff","displayName":"Reboot On User Logoff","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nReboots the machine when a user logs off\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RebootOnUserLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Any user, 2 = Any FSLogix Profile user","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"928572967f06ca87":{"id":"device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading","displayName":"Prevent downloading of enclosures","description":"This policy setting prevents the user from having enclosures (file attachments) downloaded from a feed to the user's computer.\n\nIf you enable this policy setting, the user cannot set the Feed Sync Engine to download an enclosure through the Feed property page. A developer cannot change the download setting through the Feed APIs.\n\nIf you disable or do not configure this policy setting, the user can set the Feed Sync Engine to download an enclosure through the Feed property page. A developer can change the download setting through the Feed APIs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableenclosuredownloading"],"categoryId":"9aaa7ee2-727d-426f-8a2b-6b10a4cd084f","categoryName":"RSS Feeds","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_1","displayName":"Enabled","description":null,"helpText":null}]},"92ce0722c969d0e5":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"928a027cfe6362fa":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_managedfavorites","displayName":"Configure favorites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"92e2f8933234ac58":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_filesystemwriteblockedforurlsdesc","displayName":"Block write access to files and directories on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"922e0a65b960fc06":{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled","displayName":"Allow Basic authentication for HTTP","description":"If you enable this policy or leave it unset, Basic authentication challenges received over non-secure HTTP will be allowed.\r\n\r\nIf you disable this policy, non-secure HTTP requests from the Basic authentication scheme are blocked, and only secure HTTPS is allowed.\r\n\r\nThis policy setting is ignored (and Basic is always forbidden) if the 'AuthSchemes' (Supported authentication schemes) policy is set and does not include Basic.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9245dee57d72bdbb":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins","displayName":"Allow Desktop, Window, and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Desktop, Window, and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).\r\n\r\nIf a site matches a URL pattern in this policy, the 'ScreenCaptureAllowed' (Allow or deny screen capture) will not be considered.\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"92e31106a5e19b80":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_grooveexe126","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_grooveexe126_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_grooveexe126_1","displayName":"True","description":null,"helpText":null}]},"923b4a32fb1155b7":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_visioexe33","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_visioexe33_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_visioexe33_1","displayName":"True","description":null,"helpText":null}]},"927b628d6519a546":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_visioexe173","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_visioexe173_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_visioexe173_1","displayName":"True","description":null,"helpText":null}]},"927794ab2664efaf":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_onenoteexe166","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_onenoteexe166_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_onenoteexe166_1","displayName":"True","description":null,"helpText":null}]},"9272585526186846":{"id":"device_vendor_msft_policy_config_search_disableremovabledriveindexing","displayName":"Disable Removable Drive Indexing","description":"This policy setting configures whether or not locations on removable drives can be added to libraries. If you enable this policy setting, locations on removable drives cannot be added to libraries. In addition, locations on removable drives cannot be indexed. If you disable or do not configure this policy setting, locations on removable drives can be added to libraries. In addition, locations on removable drives can be indexed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#disableremovabledriveindexing"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_disableremovabledriveindexing_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_disableremovabledriveindexing_1","displayName":"Enable.","description":"Enable.","helpText":null}]},"92124307ac3cd4a8":{"id":"device_vendor_msft_policy_config_system_allowembeddedmode","displayName":"Allow Embedded Mode","description":"Specifies whether set general purpose device to be in embedded mode. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowembeddedmode"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowembeddedmode_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowembeddedmode_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"92e564318d68b032":{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_public","displayName":"Enable RDP Shortpath for public network using NAT traversal","description":"This policy lets you control RDP Shortpath for public networks using NAT traversal. It is a direct UDP connection between the client device and session host, using the Simple Traversal Underneath NAT (STUN) protocol. Inbound ports on the session host aren't required to be allowed. \r\n \r\nIf you enable or do not configure this policy setting, Remote Desktop Protocol will consider public networks non-relayed paths to establish connection with the session host. \r\n \r\nIf you disable this policy, Remote Desktop Protocol will NOT consider public networks non-relayed paths to establish connection with the session host. \r\n\r\n ","helpText":"","infoUrls":[],"categoryId":"5d4e843b-2848-4508-9143-cb3217c2fe83","categoryName":"RDP Shortpath","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_public_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_public_1","displayName":"Enabled","description":null,"helpText":null}]},"921e6b2ada097395":{"id":"device_vendor_msft_policy_config_update_noupdatenotificationsduringactivehours","displayName":"No Update Notifications During Active Hours","description":"When enabled, notifications will only be disabled during active hours. Takes effect only if Update/UpdateNotificationLevel is configured to 1 or 2. To ensure that the device stays secure, a notification will still be shown if this option is selected once “Specify deadlines for automatic updates and restarts” deadline has been reached if configured, regardless of active hours.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#noupdatenotificationsduringactivehours"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_noupdatenotificationsduringactivehours_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_noupdatenotificationsduringactivehours_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"92801f685ac70e54":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_part_updatechecksuppressedstarthour","displayName":"Hour (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"78497707-c3e4-400b-a6bc-1813c3689fdc","categoryName":"Preferences","options":null},"92c50b4e64df3982":{"id":"device_vendor_msft_policy_config_userrights_debugprograms","displayName":"Debug Programs","description":"This user right determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components will need this user right to be able to do so. This user right provides complete access to sensitive and critical operating system components. Caution:Assigning this user right can be a security risk. Only assign this user right to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#debugprograms"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"92086e433fbf5774":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_1","displayName":"Internet Explorer Maintenance (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iemaintenance-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_1_1","displayName":"Enabled","description":null,"helpText":null}]},"92727d863f2a0dde":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_statistics","displayName":"Prohibit viewing of status for an active connection (User)","description":"Determines whether users can view the status for an active connection.\r\n\r\nConnection status is available from the connection status taskbar icon or from the Status dialog box. The Status dialog box displays information about the connection and its activity. It also provides buttons to disconnect and to configure the properties of the connection.\r\n\r\nIf you enable this setting, the connection status taskbar icon and Status dialog box are not available to users (including administrators). The Status option is disabled in the context menu for the connection and on the File menu in the Network Connections folder. Users cannot choose to show the connection icon in the taskbar from the Connection Properties dialog box.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the connection status taskbar icon and Status dialog box are available to all users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-statistics"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_statistics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_statistics_1","displayName":"Enabled","description":null,"helpText":null}]},"92c9571374e85c01":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon","displayName":"Internet Explorer Common Settings (User)","description":"This policy setting configures the synchronization of user settings which are common between the versions of Internet Explorer.\r\nBy default, the user settings which are common between the versions of Internet Explorer synchronize between computers. Use the policy setting to prevent the user settings of Internet Explorer from synchronization between computers. \r\nIf you enable this policy setting, the user settings which are common between the versions of Internet Explorer continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the versions of Internet Explorer are excluded from settings synchronization. If any version of the Internet Explorer settings are enabled this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorercommon"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon_1","displayName":"Enabled","description":null,"helpText":null}]},"924f48f9815fa4d2":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar","displayName":"Items displayed in Places Bar (User)","description":"Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify from 1 to 5 items to be displayed in the Places Bar.\r\n\r\nThe valid items you may display in the Places Bar are:\r\n\r\n1) Shortcuts to a local folders -- (ex. C:\\Windows)\r\n\r\n2) Shortcuts to remote folders -- (\\\\server\\share)\r\n\r\n3) FTP folders\r\n\r\n4) web folders\r\n\r\n5) Common Shell folders.\r\n\r\nThe list of Common Shell Folders that may be specified:\r\n\r\nDesktop, Recent Places, Documents, Pictures, Music, Recently Changed, Attachments and Saved Searches.\r\n\r\nIf you disable or do not configure this setting the default list of items will be displayed in the Places Bar.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-placesbar"],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_1","displayName":"Enabled","description":null,"helpText":null}]},"929f7a0072020bf7":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings","displayName":"Configure HTTP Proxy (User)","description":"This policy setting allows you to specify the HTTP proxy settings for Windows Media Player.\r\n\r\nIf you enable this policy setting, select one of the following proxy types:\r\n\r\n- Autodetect: the proxy settings are automatically detected.\r\n- Custom: unique proxy settings are used.\r\n- Use browser proxy settings: browser's proxy settings are used.\r\n\r\nIf the Custom proxy type is selected, the rest of the options on the Setting tab must be specified because no default settings are used for the proxy. The options are ignored if Autodetect or Browser is selected.\r\n\r\nThe Configure button on the Network tab in the Player is not available for the HTTP protocol and the proxy cannot be configured. If the \"Hide network tab\" policy setting is also enabled, the entire Network tab is hidden.\r\n\r\nThis policy is ignored if the \"Streaming media protocols\" policy setting is enabled and HTTP is not selected.\r\n\r\nIf you disable this policy setting, the HTTP proxy server cannot be used and the user cannot configure the HTTP proxy.\r\n\r\nIf you do not configure this policy setting, users can configure the HTTP proxy settings.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-configurehttpproxysettings"],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"921216ec199dae22":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation_roamingprofilelocation","displayName":"Set the roaming profile directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"92c8cf790af40a5e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls","displayName":"Automatically grant permission to sites to connect to USB serial devices. (User)","description":"Setting the policy allows you to list sites which are automatically granted permission to access USB serial devices with vendor and product IDs matching the vendor_id and product_id fields. Omitting the product_id field allows the given sites permission to access devices with a vendor ID matching the vendor_id field and any product ID.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn Chrome OS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultSerialGuardSetting, SerialAskForUrls, SerialBlockedForUrls and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the Web Serial API. To grant access to USB devices through the WebUSB API see the WebUsbAllowDevicesForUrls policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=SerialAllowUsbDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234,\r\n \"product_id\": 5678\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://specific-device.example.com\"\r\n ]\r\n },\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://all-vendor-devices.example.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"92102506b1a0a59d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpsharepointcardvisible","displayName":"Show SharePoint and OneDrive File Card on the New Tab Page (User)","description":"This policy controls the visibility of the SharePoint and OneDrive File Card on the New Tab Page. The card will only be displayed on the New Tab Page if the policy is enabled and your organization authorized the usage of the SharePoint and OneDrive File data in the browser.\r\n\r\nSharePoint and OneDrive data will not be stored by the browser.\r\n\r\nThe SharePoint and OneDrive Files recommendation card shows a list of recommended files. It aims to address the issue of context switching and enhance productivity by giving users a shortcut to their most important documents.\r\n\r\nThe Microsoft SharePoint and OneDrive card will require additional admin configuration. For detailed information on connecting the Chrome New Tab Page Card to Sharepoint, please see https://support.google.com/chrome/a?p=chrome_ntp_microsoft_cards.\r\n\r\nIf the NTPCardsVisible is disabled, the SharePoint and OneDrive Card will not be shown. If NTPCardsVisible is enabled, the SharePoint and OneDrive card will be shown if this policy is also enabled and there is data to be shown. If NTPCardsVisible is unset, the SharePoint and OneDrive card will be shown if this policy is also enabled, the user has the card enabled in Customize Chrome, and there is data to be shown.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpsharepointcardvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpsharepointcardvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"9272586efc9b6661":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication","displayName":"Allow PIN and pairing authentication methods for remote access hosts (User)","description":"Setting the policy to Enabled allows the remote access host to use PIN and pairing authentications when accepting client connections.\r\n\r\nSetting the policy to Disabled disallows PIN or pairing authentications.\r\n\r\nLeaving it unset lets the host decide whether PIN and/or pairing authentications can be used.\r\n\r\nNote: If the setting results in no mutually supported authentication methods by both the host and the client, then the connection will be rejected.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},"9280e8100ed477f3":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"92d61633891e6cc8":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled","displayName":"Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 126.\r\n\r\nThis Policy is obsoleted because Picture Dictionary is deprecated from Edge as of Sept, 2023. This policy won't work in Microsoft Edge Version 127. Enables the Picture Dictionary feature within Immersive Reader in Microsoft Edge.\r\nThis feature helps in reading comprehension by letting a user to click on any single word and see an illustration related to the meaning.\r\n\r\nIf you enable this policy or don't configure it, the Picture Dictionary option shows up within Immersive Reader.\r\nIf you disable this policy, users can't access the Picture Dictionary feature within Immersive Reader.","helpText":"","infoUrls":[],"categoryId":"8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","categoryName":"Immersive Reader settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"92ed2530978e80e8":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended","displayName":"Wallet Donation Enabled (User)","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\r\n\r\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\r\n\r\nIf you disable this policy, users can't use the Wallet Donation feature.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"92972b4b315932b3":{"id":"user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive","displayName":"Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground. (User)","description":"This policy controls whether to always keep the active Microsoft Edge window with an Internet Explorer mode tab in the foreground.\r\n\r\nIf you enable this policy, the active Microsoft Edge window with an Internet Explorer mode tab will always be in the foreground.\r\n\r\nIf you disable or don't configure this policy, the active Microsoft Edge window with an Internet Explorer mode tab will not be kept in the foreground.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_1","displayName":"Enabled","description":null,"helpText":null}]},"928bbfb83e19086c":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout","displayName":"Set a timeout for delay of tab navigation for the Enterprise Mode Site List (User)","description":"Allows you to set a timeout, in seconds, for Microsoft Edge tabs waiting to navigate until the browser has downloaded the initial Enterprise Mode Site List.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry\r\nand\r\n'DelayNavigationsForInitialSiteListDownload' (Require that the Enterprise Mode Site List is available before tab navigation) is set to \"All eligible navigations\" (1).\r\n\r\nTabs will not wait longer than this timeout for the Enterprise Mode Site List to download. If the browser has not finished downloading the Enterprise Mode Site List when the timeout expires, Microsoft Edge tabs will continue navigating anyway. The value of the timeout should be no greater than 20 seconds and no fewer than 1 second.\r\n\r\nIf you set the timeout in this policy to a value greater than the default of 2 seconds, an information bar is shown to the user after 2 seconds. The information bar contains a button that allows the user to quit waiting for the Enterprise Mode Site List download to complete.\r\n\r\nIf you don't configure this policy, the default timeout of 2 seconds is used. This default is subject to change in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"92f019413be4ab10":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit","displayName":"Save cookies when Microsoft Edge closes (User)","description":"When this policy is enabled, the specified set of cookies is exempt from deletion when the browser closes. This policy is only effective when:\r\n- The 'Cookies and other site data' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) is enabled or\r\n- The policy 'DefaultCookiesSetting' (Configure cookies) is set to 'Keep cookies for the duration of the session'.\r\n\r\nYou can define a list of sites, based on URL patterns, that will have their cookies preserved across sessions.\r\n\r\nNote: Users can still edit the cookie site list to add or remove URLs. However, they can't remove URLs that have been added by an Admin.\r\n\r\nIf you enable this policy, the list of cookies won't be cleared when the browser closes.\r\n\r\nIf you disable or don't configure this policy, the user's personal configuration is used.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"92ad37837dd94f9b":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_filesystemwriteblockedforurlsdesc","displayName":"Block write access to files and directories on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"923783ad04eed17f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishmalaysia","displayName":"English (Malaysia) (User)","description":"Enables the editing language English (Malaysia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishmalaysia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishmalaysia_1","displayName":"Enabled","description":null,"helpText":null}]},"92eebfc363b3a510":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_l_workflowsig492","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_l_workflowsig492_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_l_workflowsig492_1","displayName":"True","description":null,"helpText":null}]},"9221848791371431":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08_l_allowsubfolders269","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08_l_allowsubfolders269_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08_l_allowsubfolders269_1","displayName":"True","description":null,"helpText":null}]},"92c79085e190054b":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_includelinktosourcewhenpastingfromtheinternet","displayName":"Include link to source when pasting from the Internet (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_includelinktosourcewhenpastingfromtheinternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_includelinktosourcewhenpastingfromtheinternet_1","displayName":"Enabled","description":null,"helpText":null}]},"92b0a29c9aea9d78":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_showarchivefolderinfolderlist","displayName":"Show archive folder in folder list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_showarchivefolderinfolderlist_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_autoarchivesettings_l_showarchivefolderinfolderlist_1","displayName":"True","description":null,"helpText":null}]},"92b2fab5efda76c9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventotherdepartmentcalendarfromappearing","displayName":"Prevent Other Department Calendar from appearing (User)","description":"This policy setting prevents Other Department Calendar from appearing in the navigation pane.\r\n\r\nIf you enable this policy setting, Other Department Calendar will not appear in the navigation pane.\r\n\r\nIf you disable or do not configure this policy setting, Other Department Calendar will appear in the navigation pane.","helpText":"","infoUrls":[],"categoryId":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","categoryName":"Schedule View","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventotherdepartmentcalendarfromappearing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_scheduleview_l_preventotherdepartmentcalendarfromappearing_1","displayName":"Enabled","description":null,"helpText":null}]},"9265efb4cf7c0c13":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_configureaddintrustlevel","displayName":"Configure Add-In Trust Level (User)","description":"All installed trusted COM addins can be trusted. Exchange Settings for the addins still override if present and this option is selected.","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_configureaddintrustlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_configureaddintrustlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"92610cc606dbb413":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_definecustomlabelforsharepointstore_l_definecustomlabelforsharepointstorepart","displayName":"Enter custom label for SharePoint store: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":null},"9218b849855e996d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjpgsettingsforproject1_l_pjusedefaultstartpage_l_pjgbuidefaultpageurl","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"81bc8383-43a5-4c6a-9d51-951e86028934","categoryName":"Project Guide settings for 'Project1'","options":null},"92f6e946c45378e7":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_l_datecolon13","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"92184a4794c44a49":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc06_l_allowsubfolders31","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc06_l_allowsubfolders31_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc06_l_allowsubfolders31_1","displayName":"True","description":null,"helpText":null}]},"92c218a464bd85a5":{"id":"vendor_msft_sharedpc_maintenancestarttime","displayName":"Maintenance Start Time","description":"Daily start time of maintenance hour. Given in minutes from midnight. Default is 0 (12am). If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/93.json b/public/intune-definitions/93.json new file mode 100644 index 000000000000..c91d3da9632d --- /dev/null +++ b/public/intune-definitions/93.json @@ -0,0 +1 @@ +{"9366a35e3a805df4":{"id":"ade_requiresharedipadtemporarysessiononly","displayName":"Require Shared iPad temporary session only","description":"Available for devices running iPadOS versions 14.5 and later. When set to Yes, users only see the Guest Welcome pane, and can only sign in as a guest user. Users can't sign in with a Managed Apple ID.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_requiresharedipadtemporarysessiononly_0","displayName":"Not configured","description":null,"helpText":null},{"id":"ade_requiresharedipadtemporarysessiononly_1","displayName":"Yes","description":null,"helpText":null}]},"936d3519140990f6":{"id":"com.android.devicerestrictionpolicy.ultrawidebandblocked","displayName":"Block ultra wideband","description":"If 'True', the device prevents ultra wideband functionality, restricting user access to the setting. If 'False', Intune doesn't change or update this setting. By default, the OS follows the default ultra wideband behavior. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.ultrawidebandblocked_false","displayName":"False","description":"The user is allowed to toggle ultra wideband on or off.","helpText":null},{"id":"com.android.devicerestrictionpolicy.ultrawidebandblocked_true","displayName":"True","description":"Ultra wideband is disabled. The user is not allowed to toggle ultra wideband on or off.","helpText":null}]},"930e3c96069a395c":{"id":"com.apple.applicationaccess_forceondeviceonlydictation","displayName":"Force On Device Only Dictation (Deprecated)","description":"If true, disables connections to Siri servers for the purposes of dictation. Available in iOS 14.5 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceondeviceonlydictation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceondeviceonlydictation_true","displayName":"True","description":null,"helpText":null}]},"939e9670caf78faf":{"id":"com.apple.familycontrols.contentfilter_filterdenylist","displayName":"Filter Deny List","description":"The array of URLs that defines a deny list. When `restrictWeb` and `useContentFilter` are enabled, no URLs in the deny list are available to the user.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":null},"93bf02674d6be176":{"id":"com.apple.managedclient.preferences_networkpredictionoptions","displayName":"Enable network prediction","description":"Enables network prediction and prevents users from changing this setting.\n\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\n\nIf you don't configure this policy, network prediction is enabled but the user can change it.\n\n* 0 = Predict network actions on any network connection\n\n* 2 = Don't predict network actions on any network connection","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#networkpredictionoptions"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular. (Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_networkpredictionoptions_2","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},"931346fa7ef388f7":{"id":"com.apple.managedclient.preferences_restoreonstartupuserurlsenabled","displayName":"Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured","description":"This policy only works if you set the \"RestoreOnStartup\" policy to 'Open a list of URLs' (4) and the \"RestoreOnStartupURLs\" policy as mandatory.\nIf you enable this policy, users are allowed to add and remove their own URLs to open when starting Edge while maintaining the admin specified mandatory list of sites specified by setting \"RestoreOnStartup\" policy to open a list of URLS and providing the list of sites in the \"RestoreOnStartupURLs\" policy.\n\nIf you disable or don't configure this policy, there is no change to how the \"RestoreOnStartup\" and \"RestoreOnStartupURLs\" policies work.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#restoreonstartupuserurlsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_restoreonstartupuserurlsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_restoreonstartupuserurlsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"93e2b35e10ab93e1":{"id":"com.apple.mcx.filevault2_usekeychain","displayName":"Use Keychain","description":"If 'true' and no certificate information is provided in this payload, the keychain created at '/Library/Keychains/FileVaultMaster.keychain' is used when the institutional recovery key is added.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":[{"id":"com.apple.mcx.filevault2_usekeychain_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_usekeychain_true","displayName":"Enabled","description":null,"helpText":null}]},"938c5ef47804826a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgesidebarappurlhostforcelist","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar","description":"Define a list of sites, based on URL, that are forced to be shown in sidebar.\n\nIf you don't configure this policy, no app is forced to be shown in sidebar.\n\nIf the \"HubsSidebarEnabled\" policy is disabled, this list isn't used, and no sidebar can be shown.\n\nFor detailed information about valid URL, see https://go.microsoft.com/fwlink/?linkid=2281313.\n\nNote: URL patterns aren't supported in this policy. You should provide the exact URL of the app.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"93604917bef7e465":{"id":"com.microsoft.edge.mamedgeappconfigsettings.externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog","description":"This policy controls whether the \"Always allow this site to open links of this type\" checkbox is shown on external protocol launch confirmation prompts. This policy only applies to https:// links.\n\nIf you enable this policy, when an external protocol confirmation prompt is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.\n\nIf you disable this policy, the \"Always allow\" checkbox isn't displayed. The user is prompted for confirmation every time an external protocol is invoked.\n\nPrior to Microsoft Edge 83, if you don't configure this policy, the \"Always allow\" checkbox isn't displayed. The user is prompted for confirmation every time an external protocol is invoked.\n\nOn Microsoft Edge 83, if you don't configure this policy, the checkbox visibility is controlled by the \"Enable remembering protocol launch prompting preferences\" flag in edge://flags\n\nAs of Microsoft Edge 84, if you don't configure this policy, when an external protocol confirmation prompt is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.externalprotocoldialogshowalwaysopencheckbox_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.externalprotocoldialogshowalwaysopencheckbox_true","displayName":"Enabled","description":null,"helpText":null}]},"93c6fea8beec3848":{"id":"com.microsoft.edge.mamedgeappconfigsettings.hstspolicybypasslist","displayName":"Configure the list of names that will bypass the HSTS policy check","description":"Setting the policy specifies a list of hostnames that bypass preloaded HSTS (HTTP Strict Transport Security) upgrades from http to https.\n\nOnly single-label hostnames are allowed in this policy, and this policy only applies to static HSTS-preloaded entries (for example, \"app\", \"new\", \"search\", and \"play\"). This policy doesn't prevent HSTS upgrades for servers that have dynamically requested HSTS upgrades using a Strict-Transport-Security response header.\n\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific single-label hostnames specified and not to subdomains of those names.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"93a797966b23c8c7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsitelist","displayName":"Configure the Enterprise Mode Site List","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"93be27adeaab432d":{"id":"device_vendor_msft_passportforwork_biometrics_enableesswithsupportedperipherals","displayName":"Enable ESS with Supported Peripherals","description":"Enhanced Sign-in Security (ESS) isolates both biometric template data and matching operations to trusted hardware or specified memory regions, meaning the rest of the operating system cannot access or tamper with them. Because the channel of communication between the sensors and the algorithm is also secured, it is impossible for malware to inject or replay data in order to simulate a user signing in or to lock a user out of their machine.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_biometrics_enableesswithsupportedperipherals_0","displayName":"Enhanced sign-in security will be disabled on all systems. If a user already has a secure Windows Hello enrollment, they will lose their enrollment and must reset PIN, and they will have the option to re-enroll in normal face and fingerprint. Peripheral usage will be enabled by disabling Enhanced sign-in security. OS will not attempt to start secure components, even if the secure hardware and software components are present. (not recommended)","description":"Enhanced sign-in security will be disabled on all systems. If a user already has a secure Windows Hello enrollment, they will lose their enrollment and must reset PIN, and they will have the option to re-enroll in normal face and fingerprint. Peripheral usage will be enabled by disabling Enhanced sign-in security. OS will not attempt to start secure components, even if the secure hardware and software components are present. (not recommended)","helpText":null},{"id":"device_vendor_msft_passportforwork_biometrics_enableesswithsupportedperipherals_1","displayName":"Enhanced sign-in security will be enabled on systems with capable software and hardware, following the existing default behavior in Windows. For systems with one secure modality (face or fingerprint) and one insecure modality (fingerprint or face), only the secure sensor can be used for sign-in and the insecure sensor(s) will be blocked. This includes peripheral devices, which are unsupported and will be unusable. (default and recommended for highest security)","description":"Enhanced sign-in security will be enabled on systems with capable software and hardware, following the existing default behavior in Windows. For systems with one secure modality (face or fingerprint) and one insecure modality (fingerprint or face), only the secure sensor can be used for sign-in and the insecure sensor(s) will be blocked. This includes peripheral devices, which are unsupported and will be unusable. (default and recommended for highest security)","helpText":null}]},"931cc42047b1349f":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworknormalprioritylimit","displayName":"Normal Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"93670288d345d946":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security","displayName":"Configure security policy processing","description":"This policy setting determines when security policies are updated.\r\n\r\nThis policy setting affects all policies that use the security component of Group Policy, such as those in Windows Settings\\Security Settings.\r\n\r\nThis policy setting overrides customized settings that the program implementing the security policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they be updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-security"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_1","displayName":"Enabled","description":null,"helpText":null}]},"937e97bb410bd0c8":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_proxypacurl_proxypacurl","displayName":"Define proxy auto-config (.pac) for connecting to the network","description":null,"helpText":"","infoUrls":[],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":null},"9373c89d72ac4400":{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownmedia","displayName":"Allow users to use media source while elevated","description":"This policy setting allows users to install programs from removable media during privileged installations.\r\n\r\nIf you enable this policy setting, all users are permitted to install programs from removable media, such as floppy disks and CD-ROMs, even when the installation program is running with elevated system privileges.\r\n\r\nThis policy setting does not affect installations that run in the user's security context. By default, users can install from removable media when the installation runs in their own security context.\r\n\r\nIf you disable or do not configure this policy setting, by default, users can install programs from removable media only when the installation runs in the user's security context. During privileged installations, such as those offered on the desktop or displayed in Add or Remove Programs, only system administrators can install from removable media.\r\n\r\nAlso, see the \"Prevent removable media source for any install\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-allowlockdownmedia"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownmedia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownmedia_1","displayName":"Enabled","description":null,"helpText":null}]},"936a4af7397e0821":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsavoidregisterrecords","displayName":"Specify DC Locator DNS records not registered by the DCs","description":"This policy setting determines which DC Locator DNS records are not registered by the Net Logon service.\r\n\r\nIf you enable this policy setting, select Enabled and specify a list of space-delimited mnemonics (instructions) for the DC Locator DNS records that will not be registered by the DCs to which this setting is applied.\r\n\r\nSelect the mnemonics from the following list:\r\n\r\nMnemonic Type DNS Record\r\n\r\nLdapIpAddress A \r\nLdap SRV _ldap._tcp.\r\nLdapAtSite SRV _ldap._tcp.._sites.\r\nPdc SRV _ldap._tcp.pdc._msdcs.\r\nGc SRV _ldap._tcp.gc._msdcs.\r\nGcAtSite SRV _ldap._tcp.._sites.gc._msdcs.\r\nDcByGuid SRV _ldap._tcp..domains._msdcs.\r\nGcIpAddress A gc._msdcs.\r\nDsaCname CNAME ._msdcs.\r\nKdc SRV _kerberos._tcp.dc._msdcs.\r\nKdcAtSite SRV _kerberos._tcp.._sites.dc._msdcs.\r\nDc SRV _ldap._tcp.dc._msdcs.\r\nDcAtSite SRV _ldap._tcp.._sites.dc._msdcs.\r\nRfc1510Kdc SRV _kerberos._tcp.\r\nRfc1510KdcAtSite SRV _kerberos._tcp.._sites.\r\nGenericGc SRV _gc._tcp.\r\nGenericGcAtSite SRV _gc._tcp.._sites.\r\nRfc1510UdpKdc SRV _kerberos._udp.\r\nRfc1510Kpwd SRV _kpasswd._tcp.\r\nRfc1510UdpKpwd SRV _kpasswd._udp.\r\n\r\nIf you disable this policy setting, DCs configured to perform dynamic registration of DC Locator DNS records register all DC Locator DNS resource records.\r\n\r\nIf you do not configure this policy setting, DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-dnsavoidregisterrecords"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsavoidregisterrecords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsavoidregisterrecords_1","displayName":"Enabled","description":null,"helpText":null}]},"9364674040654698":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_quality_ts_audio_quality_level","displayName":"Audio Quality","description":null,"helpText":"","infoUrls":[],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_quality_ts_audio_quality_level_1","displayName":"Dynamic","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_quality_ts_audio_quality_level_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_quality_ts_audio_quality_level_7","displayName":"High","description":null,"helpText":null}]},"93d89aa53365e21a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common","displayName":"Microsoft Office 2013 Common Settings","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2013 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers.\r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2013 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2013 applications are enabled, this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013common"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common_1","displayName":"Enabled","description":null,"helpText":null}]},"930e1aa814af4fd8":{"id":"device_vendor_msft_policy_config_admx_userprofiles_cleanupprofiles","displayName":"Delete user profiles older than a specified number of days on system restart","description":"This policy setting allows an administrator to automatically delete user profiles on system restart that have not been used within a specified number of days. Note: One day is interpreted as 24 hours after a specific user profile was accessed.\r\n\r\nIf you enable this policy setting, the User Profile Service will automatically delete on the next system restart all user profiles on the computer that have not been used within the specified number of days. \r\n\r\nIf you disable or do not configure this policy setting, User Profile Service will not automatically delete any profiles on the next system restart.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-cleanupprofiles"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_cleanupprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_cleanupprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},"93ef8e4ffb4b616f":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_maxnegphasecorrection","displayName":"MaxNegPhaseCorrection","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"933f0a1498cd8fc7":{"id":"device_vendor_msft_policy_config_audit_detailedtracking_audittokenrightadjusted","displayName":"Detailed Tracking Audit Token Right Adjusted","description":"This policy setting allows you to audit events generated by adjusting the privileges of a token.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#detailedtracking_audittokenrightadjusted"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_detailedtracking_audittokenrightadjusted_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_audittokenrightadjusted_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_audittokenrightadjusted_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_audittokenrightadjusted_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"93c772db7738a3d3":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditregistry","displayName":"Object Access Audit Registry","description":"This policy setting allows you to audit attempts to access registry objects. A security audit event is generated only for objects that have system access control lists (SACLs) specified, and only if the type of access requested, such as Read, Write, or Modify, and the account making the request match the settings in the SACL. If you configure this policy setting, an audit event is generated each time an account accesses a registry object with a matching SACL. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when an account accesses a registry object with a matching SACL. Note: You can set a SACL on a registry object using the Permissions dialog box.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditregistry"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditregistry_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditregistry_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditregistry_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditregistry_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"934e69ed1055f9a4":{"id":"device_vendor_msft_policy_config_browser_allowpasswordmanager","displayName":"Allow Password Manager","description":"This setting lets you decide whether employees can save their passwords locally, using Password Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowpasswordmanager"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowpasswordmanager_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowpasswordmanager_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"932fe91cd4bc53b4":{"id":"device_vendor_msft_policy_config_browser_preventturningoffrequiredextensions","displayName":"Prevent Turning Off Required Extensions","description":"You can define a list of extensions in Microsoft Edge that users cannot turn off. You must deploy extensions through any available enterprise deployment channel, such as Microsoft Intune. When you enable this policy, users cannot uninstall extensions from their computer, but they can configure options for extensions defined in this policy, such as allow for InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically. When you enable this policy, you must provide a semi-colon delimited list of extension package family names (PFNs). For example, adding Microsoft.OneNoteWebClipper_8wekyb3d8bbwe;Microsoft.OfficeOnline_8wekyb3d8bbwe prevents a user from turning off the OneNote Web Clipper and Office Online extension. When enabled, removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. If disabled or not configured, extensions defined as part of this policy get ignored. Default setting: Disabled or not configured Related policies: Allow Developer Tools Related Documents: - Find a package family name (PFN) for per-app VPN (https://docs.microsoft.com/en-us/sccm/protect/deploy-use/find-a-pfn-for-per-app-vpn) - How to manage apps you purchased from the Microsoft Store for Business with Microsoft Intune (https://docs.microsoft.com/en-us/intune/windows-store-for-business) - How to assign apps to groups with Microsoft Intune (https://docs.microsoft.com/en-us/intune/apps-deploy) - Manage apps from the Microsoft Store for Business with System Center Configuration Manager (https://docs.microsoft.com/en-us/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business) - How to add Windows line-of-business (LOB) apps to Microsoft Intune (https://docs.microsoft.com/en-us/intune/lob-apps-windows)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventturningoffrequiredextensions"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"935989986dcd9778":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages","displayName":"Configure the content and order of preferred languages","description":"This policy allows admins to configure the order of the preferred languages in Google Chrome's settings.\r\n\r\nThe order of the list will appear in the same order under the \"Order languages based on your preference\" section in chrome://settings/languages. Users won't be able to remove or reorder languages set by the policy, but will be able to add languages underneath those set by the policy. Users will also have full control over the browser's UI language and translation/spell check settings, unless enforced by other policies.\r\n\r\nLeaving the policy unset lets users manipulate the entire list of preferred languages.\r\n\r\nExample value:\r\n\r\nen-US","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_1","displayName":"Enabled","description":null,"helpText":null}]},"930ea8f232db1366":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_filesystemreadaskforurlsdesc","displayName":"Allow read access via the File System API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"93cd819cedd24a09":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible","displayName":"Show Outlook Calendar card on the New Tab Page","description":"This policy controls the visibility of the Outlook Card on the New Tab Page. The card will only be displayed on the New Tab Page if the policy is enabled and your organization authorized the usage of the Outlook Calendar data in the browser.\r\n\r\nOutlook data will not be stored by the browser.\r\n\r\nThe Outlook card shows the next calendar event, along with a glanceable look at the rest of the day's meetings. It aims to address the issue of context switching and enhance productivity by giving users a shortcut to their next meeting.\r\n\r\nThe Microsoft Outlook card will require additional admin configuration. For detailed information on connecting the Chrome New Tab Page Card to Outlook, please see https://support.google.com/chrome/a?p=chrome_ntp_microsoft_cards.\r\n\r\nIf the NTPCardsVisible is disabled, the Outlook Card will not be shown. If NTPCardsVisible is enabled, the Outlook card will be shown if this policy is also enabled and there is data to be shown. If NTPCardsVisible is unset, the Outlook card will be shown if this policy is also enabled, the user has the card enabled in Customize Chrome, and there is data to be shown.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"93f1c80063be4d05":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer","displayName":"Restrict CPU core sharing for renderer process","description":"This policy mitigates side-channel cross process memory attacks by isolating the renderer process on the CPU core and preventing other processes from sharing the same core. The mitigation is supported on Microsoft® Windows® 11 24H2 and above. If the OS does not have the required scheduling support, this policy will have no effect. This policy may slow down performance in some demanding scenarios similar to disabling hyperthreading. For more information refer https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-process_mitigation_side_channel_isolation_policy\r\nIf this policy is enabled, all other processes will not be scheduled on the same CPU core when the renderer process is running.\r\nIf this policy is disabled, all other processes can be scheduled on the same CPU core if a renderer process is running on it.\r\nIf this policy is not set, all other processes can be scheduled on the same CPU core if a renderer process is running on the core. This may vary depending on Google Chrome release, currently running field trials, and platform.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer_1","displayName":"Enabled","description":null,"helpText":null}]},"93beed163ad3753b":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelaybackgrounddownloadfromhttp","displayName":"DO Delay Background Download From Http","description":"For background downloads that use P2P, specifies the time to wait before starting to download from the HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelaybackgrounddownloadfromhttp"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"932735da2901be41":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs","description":"CcdMaxCacheSizeInMBs specifies the maximum local cache size in megabytes, per user, during normal operation. Normal operation assumes that all Cloud Cache providers are available, and that storage performance is adequate to accept I/O at the rate necessary to accommodate profile utilization.\r\n\r\nCAUTION: Do not use this setting unless the performance and technical aspects to this setting are fully understood as this setting is a leading cause to poor performance and has limited use cases.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\CcdMaxCacheSizeInMBs\r\nType: DWORD\r\nValues: Min (No Limit) = 0, Max = 10000000","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},"935ba7ffe0a92c36":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_odfchealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":null},"93f8c0b8bdc6dea0":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect","displayName":"Disable HTTP fallback for SIP connection","description":"Prevents from HTTP being used for SIP connection in case TLS or TCP fail.","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"9356e62a5f23a0f2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowsocketpoolsizerandomizationforproxies","displayName":"Allow socket pool size randomization for proxies","description":"Controls whether Microsoft Edge randomizes socket pool sizes for proxy connections.\n\nSocket pool size randomization is a security mechanism that helps prevent attackers from using deterministic connection limits to infer cross-site information. For example, if the configured proxy socket pool limit is 128, Microsoft Edge can randomly set the effective limit between 128 and 256. This can allow up to twice as many proxy connections, though the expected increase is closer to 1.2x in practice.\n\nThis policy affects the limits configured by the 'MaxConnectionsPerProxy' (Maximum number of concurrent connections to the proxy server for non-WebSocket requests) and 'MaxConnectionsPerProxyForWebSocket' (Maximum number of concurrent connections to the proxy server for WebSocket requests) policies. When this policy is enabled, the effective upper limit can be randomized up to 2x the values configured by those policies.\n\nIf you enable this policy or don't configure it, Microsoft Edge enables socket pool size randomization for proxy connections.\n\nIf you disable this policy, Microsoft Edge disables socket pool size randomization for proxy connections. The values configured by 'MaxConnectionsPerProxy' and 'MaxConnectionsPerProxyForWebSocket' are used as the upper limits without randomization.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowsocketpoolsizerandomizationforproxies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowsocketpoolsizerandomizationforproxies_1","displayName":"Enabled","description":null,"helpText":null}]},"93bf8ab7dc3a60b2":{"id":"intelligencesettings_apps_calendar","displayName":"Calendar","description":"If present, configures Calendar and Reminders Intelligence features.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":null},"937b91301f6f4591":{"id":"setrecoverylock_recoverylockpasswordrotationschedule","displayName":"Recovery Lock Password Rotation Schedule","description":"Configure how often (in months) the recovery lock password should be rotated.","helpText":null,"infoUrls":[],"categoryId":"1fcd72cb-7c09-4e7b-a314-97a88df6e623","categoryName":"Recovery Lock Password","options":[{"id":"setrecoverylock_recoverylockpasswordrotationschedule_0","displayName":"1 month","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_1","displayName":"2 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_2","displayName":"3 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_3","displayName":"4 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_4","displayName":"5 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_5","displayName":"6 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_6","displayName":"7 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_7","displayName":"8 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_8","displayName":"9 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_9","displayName":"10 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_10","displayName":"11 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_11","displayName":"12 months","description":null,"helpText":null}]},"9344145323c341ad":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_descriptioncolon29","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"9357b3c17248f2a7":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasconnect","displayName":"Prohibit connecting and disconnecting a remote access connection (User)","description":"Determines whether users can connect and disconnect remote access connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), double-clicking the icon has no effect, and the Connect and Disconnect menu items are disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Connect and Disconnect options for remote access connections are available to all users. Users can connect or disconnect a remote access connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-rasconnect"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"93b1a731961f99a0":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016","displayName":"Microsoft Office 365 Visio 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Visio 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Visio 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365visio2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016_1","displayName":"Enabled","description":null,"helpText":null}]},"934f837ef704950d":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library2","displayName":"Location 3 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"9395b321581b31df":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_urlblocklistdesc","displayName":"Block access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"93be729de1882696":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls","displayName":"Allow JavaScript on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can run JavaScript.\r\n\r\nLeaving the policy unset means DefaultJavaScriptSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"93265e288a76ee49":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc","displayName":"Allow popups on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"93552c02f20faa2e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_printingpapersizedefault","displayName":"Default printing page size (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"93f338fdbecaa1a1":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled","displayName":"Enable Live Caption (User)","description":"Enable the Live Caption feature.\r\n\r\nIf this policy is set to Enabled, Live Caption will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Caption will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Caption is disabled initially but can be enabled by the user anytime.","helpText":"","infoUrls":[],"categoryId":"d9432f48-3072-4171-9031-4ebead394151","categoryName":"Accessibility settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"930edcaf462998b4":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_cahintcertificatesdesc","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"93ba5d8f9aa68b21":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_pathcolon5","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"930cef3547a6ecf1":{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_compatview_sitelist","displayName":"List of sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","categoryName":"Compatibility View","options":null},"9342708aa7f36de7":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"9324e465da3aa6cd":{"id":"user_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton","displayName":"Enable End Session Button (User)","description":"Enable/disable kiosk browser's end session button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enableendsessionbutton"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":[{"id":"user_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"user_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_0","displayName":"Disable","description":"Disable","helpText":null}]},"938c037d62df8ef9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability","displayName":"Control where developer tools can be used (User)","description":"Control where developer tools can be used.\r\n\r\nIf you set this policy to 'DeveloperToolsDisallowedForForceInstalledExtensions' (0, the default), users can access the developer tools and the JavaScript console in general, but not in the context of extensions installed by enterprise policy.\r\n\r\nIf you set this policy to 'DeveloperToolsAllowed' (1), users can access the developer tools and the JavaScript console in all contexts, including extensions installed by enterprise policy.\r\n\r\nIf you set this policy to 'DeveloperToolsDisallowed' (2), users can't access the developer tools or inspect website elements. Keyboard shortcuts and menu or context menu entries that open the developer tools or the JavaScript Console are disabled.\r\n\r\n* 0 = Block the developer tools on extensions installed by enterprise policy, allow in other contexts\r\n\r\n* 1 = Allow using the developer tools\r\n\r\n* 2 = Don't allow using the developer tools","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"9375adb167dc577a":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_clipboardblockedforurlsdesc","displayName":"Block clipboard use on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"931ce240f3d6757e":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts","displayName":"Allow importing of shortcuts (User)","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Shortcuts aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Shortcuts are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"932f30503f19e023":{"id":"user_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_0","displayName":"Standard mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_1","displayName":"Balanced mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_2","displayName":"Strict mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_3","displayName":"Basic mode","description":null,"helpText":null}]},"9373c1eca06d20ca":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_edo","displayName":"Edo (User)","description":"Enables the editing language Edo","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_edo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_edo_1","displayName":"Enabled","description":null,"helpText":null}]},"931631f0c079f5b9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_l_workflowdescrip490","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"93798a5364f9492c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_minsigsupportos_l_minsigsupportosdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_minsigsupportos_l_minsigsupportosdropid_0","displayName":"Windows XP","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_minsigsupportos_l_minsigsupportosdropid_1","displayName":"Windows Vista","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_minsigsupportos_l_minsigsupportosdropid_2","displayName":"Windows 7","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_minsigsupportos_l_minsigsupportosdropid_3","displayName":"Windows 8","description":null,"helpText":null}]},"93ac321e23b06772":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingothertypesofemailaccounts","displayName":"Prevent users from adding other types of e-mail accounts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingothertypesofemailaccounts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingothertypesofemailaccounts_1","displayName":"True","description":null,"helpText":null}]},"93ce85ff698ea2e6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_forceselectionofaccountbeforesending","displayName":"Force selection of account before sending (User)","description":"This policy setting enables you to force users to select an e-mail account from which to send outgoing e-mail.\r\n\r\nIf you enable this policy setting, users must choose an e-mail account before they can send an e-mail.\r\n\r\nIf you disable or do not configure this policy setting, e-mail is sent from the default e-mail account if users do not select a specific e-mail account.","helpText":"","infoUrls":[],"categoryId":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","categoryName":"Compose Messages","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_forceselectionofaccountbeforesending_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_forceselectionofaccountbeforesending_1","displayName":"Enabled","description":null,"helpText":null}]},"9367093975c4a90f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_restupdatesforcalendar","displayName":"REST updates for calendars (User)","description":"This policy determines if Outlook can use REST to update calendars.\r\n\r\n If you enable this policy, Outlook will use REST to update supported Office 365 and Outlook.com calendars.\r\n\r\n If you disable this policy, Outlook won't use REST to update any calendars.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_restupdatesforcalendar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_restupdatesforcalendar_1","displayName":"Enabled","description":null,"helpText":null}]},"93ce7cb3823fa12a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_hidejunkmailui","displayName":"Hide Junk Mail UI (User)","description":"This policy setting controls whether the Junk E-mail Filter is enabled in Outlook. The Junk E-mail Filter in Outlook is designed to intercept the most obvious junk e-mail, or spam, and send it to users' Junk E-mail folders. The filter evaluates each incoming message based on several factors, including the time when the message was sent and the content of the message. The filter does not single out any particular sender or message type, but instead analyzes each message based on its content and structure to discover whether or not it is probably spam.\r\n \r\nIf you enable this policy setting, junk e-mail filtering in Outlook is turned off entirely, in addition to hiding the filtering controls from users. In addition, you can use the \"Junk E-mail Protection level\" policy setting to preset a filtering level and prevent users from changing it. Note - This policy setting does not affect the configuration of the Microsoft Exchange Server Intelligent Message Filter (IMF), which provides server-level junk e-mail filtering. \r\n\r\nIf you disable or do not configure this policy setting, the Junk E-mail Filter in Outlook is enabled.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_hidejunkmailui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_hidejunkmailui_1","displayName":"Enabled","description":null,"helpText":null}]},"93d9d29626f581f0":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc12_l_pathcolon52","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"931d25da8bcf7c75":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_allowlocalpolicymerge","displayName":"Allow Local Policy Merge","description":"This value is used as an on/off switch. If this value is false, Hyper-V Firewall rules from the local store are ignored and not enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_allowlocalpolicymerge_false","displayName":"AllowLocalPolicyMerge Off","description":"AllowLocalPolicyMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_allowlocalpolicymerge_true","displayName":"AllowLocalPolicyMerge On","description":"AllowLocalPolicyMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/94.json b/public/intune-definitions/94.json new file mode 100644 index 000000000000..73401f14b8e7 --- /dev/null +++ b/public/intune-definitions/94.json @@ -0,0 +1 @@ +{"94be7ba91f33be74":{"id":"ade_macos_awaitconfiguration","displayName":"Await final configuration","description":"Keeps the device in Setup Assistant until the first sync between the device and Intune installs policies.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_macos_awaitconfiguration_0","displayName":"No","description":null,"helpText":null},{"id":"ade_macos_awaitconfiguration_1","displayName":"Yes","description":null,"helpText":null}]},"94323fb0c1cfc39f":{"id":"com.apple.domains_crosssitetrackingpreventionrelaxedapps","displayName":"Cross Site Tracking Prevention Relaxed Apps","description":"An array of up to 10 strings representing app bundle-ids. Apps matching the bundle-ids listed here have relaxed enforcement of cross-site tracking prevention for the domains listed in `CrossSiteTrackingPreventionRelaxedDomains`.\n\nAvailable in iOS 18 and later and macOS 15 and later.","helpText":null,"infoUrls":[],"categoryId":"224dc683-c0e0-4783-8ba8-8f02c76d161d","categoryName":"Domains","options":null},"94eb62d612016c33":{"id":"com.apple.extensiblesso_extensiondata_domainrealmmapping_generickey_kerberos_string","displayName":"Domain Realm Mapping","description":"An array of DNS Suffixes that map to the realm.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"94407b5a3740880d":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_enabled","displayName":"Enabled","description":"If true, enable these settings. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":[{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_enabled_true","displayName":"True","description":null,"helpText":null}]},"94f767af1900b116":{"id":"com.apple.managedclient.preferences_builtindnsclientenabled","displayName":"Use built-in DNS client","description":"Controls whether to use the built-in DNS client.\n\nThis does not affect which DNS servers are used; just the software stack which is used to communicate with them. For example if the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It is however possible that the built-in DNS client will address servers in different ways by using more modern DNS-related protocols such as DNS-over-TLS.\n\nIf you enable this policy, the built-in DNS client is used, if it's available.\n\nIf you disable this policy, the client is never used.\n\nIf you don't configure this policy, the built-in DNS client is enabled by default on MacOS, and users can change whether to use the built-in DNS client by editing edge://flags or by specifying a command-line flag.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#builtindnsclientenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_builtindnsclientenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_builtindnsclientenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9468a2c47a6bc2aa":{"id":"com.apple.managedclient.preferences_clearcachedimagesandfilesonexit","displayName":"Clear cached images and files when Microsoft Edge closes","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\n\nIf you enable this policy, cached images and files will be deleted each time Microsoft Edge closes.\n\nIf you disable this policy, users cannot configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\n\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\n\nIf you disable this policy, don't enable the \"ClearBrowsingDataOnExit\" policy, because they both deal with deleting data. If you configure both, the \"ClearBrowsingDataOnExit\" policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured \"ClearCachedImagesAndFilesOnExit\".","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#clearcachedimagesandfilesonexit"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_clearcachedimagesandfilesonexit_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_clearcachedimagesandfilesonexit_true","displayName":"Enabled","description":null,"helpText":null}]},"945a24e9bc6d5dea":{"id":"com.apple.managedclient.preferences_enableonlinerevocationchecks","displayName":"Enable online OCSP/CRL checks","description":"Online revocation checks don't provide a significant security benefit and are disabled by default.\n\nIf you enable this policy, Microsoft Edge will perform soft-fail, online OCSP/CRL checks. \"Soft fail\" means that if the revocation server can't be reached, the certificate will be considered valid.\n\nIf you disable the policy or don't configure it, Microsoft Edge won't perform online revocation checks.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enableonlinerevocationchecks"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enableonlinerevocationchecks_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enableonlinerevocationchecks_true","displayName":"Enabled","description":null,"helpText":null}]},"94772d68177953d0":{"id":"com.apple.managedclient.preferences_showcasticonintoolbar","displayName":"Show the cast icon in the toolbar","description":"Set this policy to true to show the Cast toolbar icon on the toolbar or the overflow menu. Users won't be able to remove it.\n\nIf you don't configure this policy or if you disable it, users can pin or remove the icon by using its contextual menu.\n\nIf you've also set the \"EnableMediaRouter\" policy to false, then this policy is ignored, and the toolbar icon isn't shown.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showcasticonintoolbar"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showcasticonintoolbar_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showcasticonintoolbar_true","displayName":"Enabled","description":null,"helpText":null}]},"94c8f2a5ea0a455c":{"id":"com.apple.managedclient.preferences_showpdfdefaultrecommendationsenabled","displayName":"Allow notifications to set Microsoft Edge as default PDF reader","description":"This policy setting lets you decide whether employees should receive recommendations to set Microsoft Edge as PDF handler.\n\nIf you enable or don't configure this setting, employees receive recommendations from Microsoft Edge to set itself as the default PDF handler.\n\nIf you disable this setting, employees will not receive any notifications from Microsoft Edge to set itself as the default PDF handler.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showpdfdefaultrecommendationsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showpdfdefaultrecommendationsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showpdfdefaultrecommendationsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"94f405df6c6640d4":{"id":"com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentregex","displayName":"Password Content Regex","description":"A regular expression string that they system matches against the password to determine whether it complies with a policy. The regular expression uses the ICU syntax (). The string must not exceed 2048 characters in length.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"9469b554f948e3fe":{"id":"com.apple.mobiledevice.passwordpolicy_minutesuntilfailedloginreset","displayName":"Minutes Until Failed Login Reset","description":"The number of minutes before the login is reset after the maximum number of unsuccessful login attempts is reached. This key requires setting Max Failed Attempts. Available in macOS 10.10 and later.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"94b09153943a4ef1":{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent","displayName":"Listen Event","description":"Allows the application to use CoreGraphics and HID APIs to listen to (receive) CGEvents and HID events from all processes. A profile can't grant access to these events; it can only deny it.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"9421a8f7bb9f7c2b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importfavorites","displayName":"Allow importing of favorites","description":"Allows users to import favorites from another browser into Microsoft Edge.\n\nIf you enable this policy, the Favorites check box is automatically selected in the Import browser data dialog box.\n\nIf you disable this policy, favorites aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\n\nNote: This policy currently manages import from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importfavorites_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importfavorites_true","displayName":"Enabled","description":null,"helpText":null}]},"941add0621c49882":{"id":"command_remotedesktop_remotedesktop","displayName":"Remote Desktop","description":"Enable/Disable Remote Desktop on the device","helpText":null,"infoUrls":[],"categoryId":"9c6a5b09-3fc4-4cf9-916f-d3a20496fd90","categoryName":"Remote Desktop","options":[{"id":"command_remotedesktop_remotedesktop_true","displayName":"Enable","description":null,"helpText":null},{"id":"command_remotedesktop_remotedesktop_false","displayName":"Disable","description":null,"helpText":null}]},"94929c29e026d4b2":{"id":"device_vendor_msft_email_emailserver","displayName":"Email Server","description":"The Exchange location (URL) of the email server to which the app you specified connects to get email.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/email2-csp"],"categoryId":"48cb2bee-74be-4165-bc19-89c5b1c50c00","categoryName":"Email","options":null},"94bd17fb0a23ed8b":{"id":"device_vendor_msft_policy_config_admx_credssp_restrictedremoteadministration","displayName":"Restrict delegation of credentials to remote servers","description":"When running in Restricted Admin or Remote Credential Guard mode, participating apps do not expose signed in or supplied credentials to a remote host. Restricted Admin limits access to resources located on other servers or networks from the remote host because credentials are not delegated. Remote Credential Guard does not limit access to resources because it redirects all requests back to the client device.\r\n\r\nParticipating apps:\r\nRemote Desktop Client\r\n\r\nIf you enable this policy setting, the following options are supported:\r\n \r\nRestrict credential delegation: Participating applications must use Restricted Admin or Remote Credential Guard to connect to remote hosts.\r\n \r\nRequire Remote Credential Guard: Participating applications must use Remote Credential Guard to connect to remote hosts.\r\n \r\nRequire Restricted Admin: Participating applications must use Restricted Admin to connect to remote hosts.\r\n\r\nIf you disable or do not configure this policy setting, Restricted Admin and Remote Credential Guard mode are not enforced and participating apps can delegate credentials to remote devices.\r\n\r\nNote: To disable most credential delegation, it may be sufficient to deny delegation in Credential Security Support Provider (CredSSP) by modifying Administrative template settings (located at Computer Configuration\\Administrative Templates\\System\\Credentials Delegation).\r\n\r\nNote: On Windows 8.1 and Windows Server 2012 R2, enabling this policy will enforce Restricted Administration mode, regardless of the mode chosen. These versions do not support Remote Credential Guard.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-restrictedremoteadministration"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_restrictedremoteadministration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_restrictedremoteadministration_1","displayName":"Enabled","description":null,"helpText":null}]},"94487dae2c4eb054":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_1","displayName":"Configure log access","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string.\r\n\r\nIf you enable this policy setting, only those users matching the security descriptor can access the log.\r\n\r\nIf you disable or do not configure this policy setting, all authenticated users and system services can write, read, or clear this log.\r\n\r\nNote: If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the \"Configure log access (legacy)\" policy setting to enforce this change across all tools and APIs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-1"],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_1_1","displayName":"Enabled","description":null,"helpText":null}]},"94b661923e479a70":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_assignaturedue_signatureupdate_assignaturedue","displayName":"Define the number of days before spyware security intelligence is considered out of date","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":null},"945d5696e356352d":{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownbrowse","displayName":"Allow users to browse for source while elevated","description":"This policy setting allows users to search for installation files during privileged installations.\r\n\r\nIf you enable this policy setting, the Browse button in the \"Use feature from\" dialog box is enabled. As a result, users can search for installation files even when the installation program is running with elevated system privileges.\r\n\r\nBecause the installation is running with elevated system privileges, users can browse through directories that their own permissions would not allow.\r\n\r\nThis policy setting does not affect installations that run in the user's security context. Also, see the \"Remove browse dialog box for new source\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, by default, only system administrators can browse during installations with elevated privileges, such as installations offered on the desktop or displayed in Add or Remove Programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-allowlockdownbrowse"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownbrowse_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownbrowse_1","displayName":"Enabled","description":null,"helpText":null}]},"944981b389bb7a8d":{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_permittedmanagers","displayName":"Specify permitted managers","description":"This policy setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent running on the client computer.\r\n\r\nSimple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events.\r\n\r\nThe manager is located on the host computer on the network. The manager's role is to poll the agents for certain requested information.\r\n\r\nIf you enable this policy setting, the SNMP agent only accepts requests from the list of permitted managers that you configure using this setting.\r\n\r\nIf you disable or do not configure this policy setting, SNMP service takes the permitted managers configured on the local computer instead.\r\n\r\nBest practice: For security purposes, it is recommended to restrict the HKLM\\SOFTWARE\\Policies\\SNMP\\Parameters\\PermittedManagers key to allow only the local admin group full control.\r\n\r\nNote: This policy setting has no effect if the SNMP agent is not installed on the client computer.\r\n\r\nAlso, see the other two SNMP policy settings: \"Specify trap configuration\" and \"Specify Community Name\".\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-snmp#admx-snmp-snmp-permittedmanagers"],"categoryId":"930d2960-3f70-48ca-9ead-b65a5a037c07","categoryName":"SNMP","options":[{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_permittedmanagers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_permittedmanagers_1","displayName":"Enabled","description":null,"helpText":null}]},"944d2251a302b4f0":{"id":"device_vendor_msft_policy_config_browser_configurefavoritesbar","displayName":"Configure Favorites Bar","description":"The favorites bar shows your user's links to sites they have added to it. With this policy, you can specify whether to set the favorites bar to always be visible or hidden on any page. If enabled, favorites bar is always visible on any page, and the favorites bar toggle in Settings sets to On, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings. The show bar/hide bar option is hidden from the context menu. If disabled, the favorites bar is hidden, and the favorites bar toggle resets to Off, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings. If not configured, the favorites bar is hidden but is visible on the Start and New Tab pages, and the favorites bar toggle in Settings sets to Off but is enabled allowing the user to make changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurefavoritesbar"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_configurefavoritesbar_0","displayName":"Disabled","description":"Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configurefavoritesbar_1","displayName":"Enabled","description":"Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.","helpText":null}]},"948e598a6fa69258":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins","displayName":"Allow running plugins that are outdated","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"94307bc164142ce7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_newtabpagelocation","displayName":"New Tab page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":null},"94f94608211375d7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings","displayName":"Enable automated password change","description":"This policy controls the availability of Google Chrome's automated password change feature.\r\n\r\nIf enabled, a user can trigger a process where the browser attempts to change their password on a website automatically. This process is managed by Generative AI. The new password is saved in the browser's password manager.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"94c549e462176368":{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats","displayName":"Remediation action for High severity threats","description":"","helpText":"","infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},"942926abbb33cfbb":{"id":"device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing","displayName":"Turn off InPrivate Browsing","description":"This policy setting allows you to turn off the InPrivate Browsing feature.\n\nInPrivate Browsing prevents Internet Explorer from storing data about a user's browsing session. This includes cookies, temporary Internet files, history, and other data.\n\nIf you enable this policy setting, InPrivate Browsing is turned off.\n\nIf you disable this policy setting, InPrivate Browsing is available for use.\n\nIf you do not configure this policy setting, InPrivate Browsing can be turned on or off through the registry.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinprivatebrowsing"],"categoryId":"f26fe4c2-d073-4e51-90bf-61c4bbdeb4f2","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_1","displayName":"Enabled","description":null,"helpText":null}]},"943af4d0f08396ee":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver","displayName":"Include local path when user is uploading files to a server","description":"This policy setting controls whether or not local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path.\n\nIf you enable this policy setting, path information is sent when the user is uploading a file via an HTML form.\n\nIf you disable this policy setting, path information is removed when the user is uploading a file via an HTML form.\n\nIf you do not configure this policy setting, the user can choose whether path information is sent when he or she is uploading a file via an HTML form. By default, path information is sent.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneincludelocalpathwhenuploadingfilestoserver"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_1","displayName":"Enabled","description":null,"helpText":null}]},"94e23314dd589ce8":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001","displayName":"Download signed ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_1","displayName":"Prompt","description":null,"helpText":null}]},"94c953ddec39957d":{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256","displayName":"PK Init Hash Algorithm SHA256","description":"Configure SHA-256 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha256"],"categoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_3","displayName":"Supported","description":"Supported","helpText":null}]},"94adbfb519bcf352":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile","displayName":"Shutdown Clear Virtual Memory Page File","description":"Shutdown: Clear virtual memory pagefile This security setting determines whether the virtual memory pagefile is cleared when the system is shut down. Virtual memory support uses a system pagefile to swap pages of memory to disk when they are not used. On a running system, this pagefile is opened exclusively by the operating system, and it is well protected. However, systems that are configured to allow booting to other operating systems might have to make sure that the system pagefile is wiped clean when this system shuts down. This ensures that sensitive information from process memory that might go into the pagefile is not available to an unauthorized user who manages to directly access the pagefile. When this policy is enabled, it causes the system pagefile to be cleared upon clean shutdown. If you enable this security option, the hibernation file (hiberfil.sys) is also zeroed out when hibernation is disabled. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#shutdown_clearvirtualmemorypagefile"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile_0","displayName":"Disable","description":"Disable","helpText":null}]},"940d01cbe3b79b4d":{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc","displayName":"Local group","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"categoryId":"b86100f0-e4ae-4f93-9dae-dd253a96726f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_administrators","displayName":"Administrators","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_users","displayName":"Users","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_guests","displayName":"Guests","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_powerusers","displayName":"Power Users","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_remotedesktopusers","displayName":"Remote Desktop Users","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_remotemanagementusers","displayName":"Remote Management Users","description":null,"helpText":null}]},"94ecb7c834ca277e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended","displayName":"Allow importing of favorites","description":"Allows users to import favorites from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, favorites aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9494dbc7d110a4e6":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc","displayName":"Allow notifications on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"943d2daacbdaaaba":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled","displayName":"DataURL Whitespace Preservation for all media types","description":"This policy provides a temporary opt-out for changes to how Edge handles whitepsace in data URLS.\r\nPreviously, whitespace would be kept only if the top level media type was text or contained the media type string xml.\r\nNow, whitespace will be preserved in all data URLs, regardless of media type.\r\n\r\nIf this policy is left unset or is set to True, the new behavior is enabled.\r\n\r\nWhen this policy is set to False, the old behavior is enabled.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"947aef90cc978eed":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended","displayName":"Allow importing of extensions","description":"Allows users to import extensions from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"943f5fc34d4abbe6":{"id":"device_vendor_msft_policy_config_update_engagedrestarttransitionscheduleforfeatureupdates","displayName":"Engaged Restart Transition Schedule For Feature Updates","description":"For Feature Updates, this policy specifies the timing before transitioning from Auto restarts scheduled_outside of active hours to Engaged restart, which requires the user to schedule. The period can be set between 2 and 30 days from the time the restart becomes pending. Value type is integer. Default value is 7 days. Supported value range: 2 - 30. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestarttransitionscheduleforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"940648929e061a96":{"id":"device_vendor_msft_policy_config_wifi_wlanscanmode","displayName":"WLAN Scan Mode","description":"Allow an enterprise to control the WLAN scanning behavior and how aggressively devices should be actively scanning for Wi-Fi networks to get devices connected. Supported values are 0-500, where 100 = normal scan frequency and 500 = low scan frequency. The default value is 0. Supported operations are Add, Delete, Get, and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#wlanscanmode"],"categoryId":"0a803a48-789a-48b0-b928-e52d56ab17f1","categoryName":"Wi-Fi Settings","options":null},"94367dcab2dcceea":{"id":"device_vendor_msft_policy_config_windowslogon_enumeratelocalusersondomainjoinedcomputers","displayName":"Enumerate local users on domain-joined computers","description":"This policy setting allows local users to be enumerated on domain-joined computers. \n\nIf you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers.\n\nIf you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-enumeratelocalusersondomainjoinedcomputers"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_windowslogon_enumeratelocalusersondomainjoinedcomputers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_enumeratelocalusersondomainjoinedcomputers_1","displayName":"Enabled","description":null,"helpText":null}]},"94c64e0515a13f06":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_internalname","displayName":"Internal name","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"94f044c4209cfe37":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_minimumpinlength","displayName":"Minimum PIN Length (User)","description":"Minimum PIN length configures the minimum number of characters required for the PIN. The lowest number you can configure for this policy setting is 4. The largest number you can configure must be less than the number configured in the Maximum PIN length policy setting or the number 127, whichever is the lowest.\n\nIf you configure this policy setting, the PIN length must be greater than or equal to this number.\n\nIf you do not configure this policy setting, the PIN length must be greater than or equal to 4.\n\nNOTE: If the above specified conditions for the minimum PIN length are not met, default values will be used for both the maximum and minimum PIN lengths.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"949e3e22509db916":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize","displayName":"List of error messages to customize (User)","description":"Defines a list of custom error messages to activate.","helpText":"","infoUrls":[],"categoryId":"6730f0be-a129-4b48-942f-e4ddf69fee66","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_1","displayName":"Enabled","description":null,"helpText":null}]},"94b76b72647c6ec7":{"id":"user_vendor_msft_policy_config_admx_icm_shellremoveorderprints_1","displayName":"Turn off the \"Order Prints\" picture task (User)","description":"This policy setting specifies whether the \"Order Prints Online\" task is available from Picture Tasks in Windows folders.\r\n\r\nThe Order Prints Online Wizard is used to download a list of providers and allow users to order prints online.\r\n\r\nIf you enable this policy setting, the task \"Order Prints Online\" is removed from Picture Tasks in File Explorer folders.\r\n\r\nIf you disable or do not configure this policy setting, the task is displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellremoveorderprints-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellremoveorderprints_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellremoveorderprints_1_1","displayName":"Enabled","description":null,"helpText":null}]},"94b576b4c8f7b10b":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_tpmmanagement","displayName":"TPM Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-tpmmanagement"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_tpmmanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_tpmmanagement_1","displayName":"Enabled","description":null,"helpText":null}]},"9468ceae05b3d74e":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity","displayName":"Turn off password security in Input Panel (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_4","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_5","displayName":"High","description":null,"helpText":null}]},"948e6700ad0da00b":{"id":"user_vendor_msft_policy_config_admx_wordwheel_customsearch_customsearch_nameprompt","displayName":"The string or DLL resource from which to load the string shown in the Instant Search menu. (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"72972c43-36a3-4034-8cc8-334c99087798","categoryName":"Instant Search","options":null},"940dd24fb5b2e7c5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended","displayName":"URLs to open on startup (User)","description":"If RestoreOnStartup is set to RestoreOnStartupIsURLs, then setting RestoreOnStartupURLs to a list of URLs specify which URLs open.\r\n\r\nIf not set, the New Tab page opens on start up.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nhttps://example.com\r\nhttps://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"94d75bf6116917b8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled","displayName":"Allow background tabs freeze (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"94950956db2b8555":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant extended background lifetime to the connecting extensions. (User)","description":"Extensions that connect to one of these origins will be be kept running as long as the port is connected.\r\n\r\nIf unset, the policy's default values will be used. These are app origins that offer SDKs that are known to not offer the possibility to restart a closed connection to a previous state:\r\n- Smart Card Connector\r\n- Citrix Receiver (stable, beta, back-up)\r\n- VMware Horizon (stable, beta)\r\n\r\nIf set, the default value list is extended with the newly configured values. Both defaults and the policy-provided entries will grant the exception to the connecting extensions, as long as the port is connected.\r\n\r\nExample value:\r\n\r\nchrome-extension://abcdefghijklmnopabcdefghijklmnop/\r\nchrome-extension://bcdefghijklmnopabcdefghijklmnopa/","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1","displayName":"Enabled","description":null,"helpText":null}]},"949887b17fef96a3":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist","displayName":"Blocklist for install types of extensions (User)","description":"The blocklist controls which extensions install types are disallowed.\r\n\r\nSetting \"command_line\" will block extension from being loaded from\r\ncommand line.\r\n\r\nExample value:\r\n\r\ncommand_line","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"941964004a0ebf5f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_descriptioncolon11","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"9486b1c592f6abf2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_enablefourdigityeardisplay","displayName":"Enable four-digit year display (User)","description":"When this setting is not enabled, Excel follows the Short date style setting under Regional Settings in Control Panel. When this setting is enabled, Excel always displays four digits when you type a date that includes a four-digit year, which may override the Short date style setting under Regional Settings in Control Panel.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_enablefourdigityeardisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_enablefourdigityeardisplay_1","displayName":"Enabled","description":null,"helpText":null}]},"94e4ccb98e1aa62a":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"94ecdc4965163f72":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"94df499c1976e2bf":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled","displayName":"Allow users to configure Site safety services (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy is obselete as the feature is being removed after Microsoft Edge version 127.\r\n\r\nThis policy disables site safety services from showing top site info in the page info dialog.\r\n\r\nIf you enable this policy or don't configure it, the top site info will be shown.\r\n\r\nIf you disable this policy, the top site info will not be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"94d2a2a7a99a9363":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains","displayName":"Configure the list of domains for which Edge Website Typo Protection won't trigger warnings (User)","description":"Configure the list of Edge Website Typo Protection trusted domains. This means:\r\nEdge Website Typo Protection won't check for potentially malicious typosquatting websites.\r\n\r\nIf you enable this policy, Edge Website Typo Protection trusts these domains.\r\nIf you disable or don't set this policy, default Edge Website Typo Protection protection is applied to all resources.\r\n\r\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10/11 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.\r\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender for Endpoint. You must configure your allow and block lists in Microsoft 365 Defender portal using Indicators (Settings > Endpoints > Indicators).\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"949418eca1e75765":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist_inprivatemodeurlallowlistdesc","displayName":"Allow access to a list of URLs in InPrivate mode. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"94874ff264204316":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_sensorsblockedforurlsdesc","displayName":"Block access to sensors on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"9431aab66afdd0ff":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls_filesystemreadblockedforurlsdesc","displayName":"Block read access via the File System API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"948e3b38ad1c1de7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy9_l_placesbarname225","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"9429bef31725a164":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyoutlook","displayName":"Disallow in Outlook (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyoutlook_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyoutlook_1","displayName":"True","description":null,"helpText":null}]},"9487cb822729fbae":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_portugueseportugal","displayName":"Portuguese (Portugal) (User)","description":"Enables the editing language Portuguese (Portugal)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_portugueseportugal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_portugueseportugal_1","displayName":"Enabled","description":null,"helpText":null}]},"94a780bef4517999":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_l_datecolon251","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"94aaac4cf94cdb33":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_l_descriptioncolon300","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"94d231097dceade4":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_uploadbandwidthlimit","displayName":"Limit the sync app upload speed to a fixed rate (User)","description":"This setting lets you configure the maximum speed at which the OneDrive sync app (OneDrive.exe) can upload files. This rate is a fixed value in kilobytes per second. The lower the rate, the slower the computer will upload files. The minimum rate that can be set is 1 KB/s and the maximum rate is 100000 KB/s. Any input lower than 50 KB/s will set the limit to 50 KB/s, even if the UI shows the inputted rate.\r\n\r\nIf you enable this setting, computers will use the maximum upload rate that you specify, and users will not be able to change it in OneDrive settings.\r\n\r\nIf you disable or do not configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to \"Adjust automatically\" which will use 70% of upload throughput to respond to increases and decreases in throughput.\r\n\r\nInstead of using this setting to limit the upload rate, we recommend enabling \"Limit the sync app upload rate to a percentage of throughput\" to set a limit that adjusts to changing conditions. You should not enable both settings at the same time.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_uploadbandwidthlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_uploadbandwidthlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"948d30673dfa656e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_v2_l_empty29","displayName":"\r\nSets which ActiveX controls to allow.\r\n","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_v2_l_empty29_0","displayName":"Load only Outlook Controls","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_v2_l_empty29_1","displayName":"Allows only Safe Controls","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_allowactivexoneoffforms_v2_l_empty29_2","displayName":"Allows all ActiveX Controls","description":null,"helpText":null}]},"944efa42a0814953":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_draganddroptextediting","displayName":"Allow text to be dragged and dropped (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_draganddroptextediting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_draganddroptextediting_1","displayName":"Enabled","description":null,"helpText":null}]},"9404800fcbc32ef5":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles","displayName":"PowerPoint 2007 and later presentations, shows, templates, themes and add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_ppt~l_options~l_security~l_trustcenter~l_fileblocksettings_l_ppt2007andlaterpresentationsshowstemplatesthemesandaddinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"947a2859a414687f":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_personaltemplatespath","displayName":"Personal templates path for Publisher (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"94a5c6ce415c6241":{"id":"user_vendor_msft_policy_config_remotedesktop_autosubscription","displayName":"Auto-subscription (User)","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider"],"categoryId":"c14c2e8b-0081-46e0-89ac-48ade3b83408","categoryName":"Remote Desktop","options":null},"9486014f06456452":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"943bbf66fa78250f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors","displayName":"Table compare colors (User)","description":"This option determines the colors used for displaying the results of compared tables. Selecting ''none'' will track the changes, but they will not be colored in the resulting document (they will be listed in the reviewing pane).","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_1","displayName":"Enabled","description":null,"helpText":null}]},"948b316189d2d1ce":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}_status","displayName":"Status (User)","description":"Univeral Print printer status.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PrinterProvisioning-csp/"],"categoryId":"56c54112-2991-4bda-9e01-e6868bd07726","categoryName":"Printer Provisioning","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/95.json b/public/intune-definitions/95.json new file mode 100644 index 000000000000..fbf0b3cc7543 --- /dev/null +++ b/public/intune-definitions/95.json @@ -0,0 +1 @@ +{"95099b0fed3abfd9":{"id":"com.android.devicerestrictionpolicy.factoryresetblockedaosp","displayName":"Block factory reset","description":"If 'True', prevents users from using the factory reset option in the device's settings. If 'False', Intune doesn't change or update this setting. By default, the OS might allow external media on the device.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.factoryresetblockedaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.factoryresetblockedaosp_true","displayName":"True","description":"True","helpText":null}]},"95d9265bd26e6183":{"id":"com.android.devicerestrictionpolicy.locationmode","displayName":"Location","description":"Select how location services are managed. 'Device Default' lets users turn location services on or off. 'Location enabled' requires location services to be on and prevents end users from turning it off. 'Location disabled' requires location services to be off and prevents end users from turning it on. When 'Location disabled' is configured, then any other setting that depends on the device location is affected, including the Locate device remote action that admins use. For corporate-owned work profile devices, this setting will only apply to devices running Android 10 or earlier. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.locationmode_notconfigured","displayName":"Device default","description":"No restrictions on the location detection setting and no specific behavior is set or enforced. This is the default.","helpText":null},{"id":"com.android.devicerestrictionpolicy.locationmode_disabled","displayName":"Location disabled","description":"Location detection setting is disabled on the device.","helpText":null},{"id":"com.android.devicerestrictionpolicy.locationmode_enforced","displayName":"Location enabled","description":"Location detection setting is enforced on the device.","helpText":null}]},"950f3c5e896b29fa":{"id":"com.android.devicerestrictionpolicy.smsblocked","displayName":"Block SMS","description":"If 'True', the device is prevented from sending and receiving SMS messages. If 'False', Intune doesn't change or update this setting. By default, the OS might allow SMS messaging. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.smsblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.smsblocked_true","displayName":"True","description":"True","helpText":null}]},"95e0bfd8b11aa171":{"id":"com.apple.directoryservice.managed_adwarnuserbeforecreatingmaflag","displayName":"AD Warn User Before Creating MA Flag","description":"If true, enables the AD Warn User Before Creating MA key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adwarnuserbeforecreatingmaflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adwarnuserbeforecreatingmaflag_true","displayName":"True","description":null,"helpText":null}]},"9508699da748bd97":{"id":"com.apple.dock_persistent-others_item_tile-data_file-type","displayName":"File Type","description":"The type of file","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_persistent-others_item_tile-data_file-type_0","displayName":"URL","description":null,"helpText":null},{"id":"com.apple.dock_persistent-others_item_tile-data_file-type_1","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_persistent-others_item_tile-data_file-type_2","displayName":"Directory","description":null,"helpText":null}]},"952b9890432b3547":{"id":"com.apple.gamed_gkfeatureaccountmodificationallowed","displayName":"GK Feature Account Modification Allowed","description":"If true, allows account modifications.","helpText":null,"infoUrls":[],"categoryId":"7ecdd7c9-6ab2-4dac-88ef-9bdad46e1f66","categoryName":"Parental Controls Game Center","options":[{"id":"com.apple.gamed_gkfeatureaccountmodificationallowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.gamed_gkfeatureaccountmodificationallowed_true","displayName":"True","description":null,"helpText":null}]},"95c98e9b9422b73c":{"id":"com.apple.managedclient.preferences_officeactivationemailaddress","displayName":"Office Activation Email Address","description":"The sign in sheet for Word, Excel, PowerPoint, Outlook, and OneNote will be automatically populated with the specified value.","helpText":null,"infoUrls":[],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":null},"9569615fa10d56c4":{"id":"com.apple.managedclient.preferences_webhidaskforurls","displayName":"Allow the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\n\nLeaving the policy unset means \"DefaultWebHidGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\n\n * \"WebHidBlockedForUrls\" (if there is a match),\n\n * \"DefaultWebHidGuardSetting\" (if set), or\n\n * Users' personal settings.\n\nURL patterns must not conflict with \"WebHidBlockedForUrls\". Neither policy takes precedence if a URL matches both patterns.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webhidaskforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"959a64e03bf19b3b":{"id":"com.apple.networkusagerules_applicationrules_item_allowroamingcellulardata","displayName":"Allow Roaming Cellular Data","description":"If false, disables cellular data while roaming for all matching managed apps.","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":[{"id":"com.apple.networkusagerules_applicationrules_item_allowroamingcellulardata_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.networkusagerules_applicationrules_item_allowroamingcellulardata_true","displayName":"True","description":null,"helpText":null}]},"95f2a94e83550d52":{"id":"com.apple.preference.security_dontallowlockmessageui","displayName":"Do Not Allow Lock Message UI","description":"If true, disables user changes to the lock message. ","helpText":null,"infoUrls":[],"categoryId":"8abddb23-7036-4ba8-8912-529279a849ea","categoryName":"Security Preferences","options":[{"id":"com.apple.preference.security_dontallowlockmessageui_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.preference.security_dontallowlockmessageui_true","displayName":"True","description":null,"helpText":null}]},"95b88c9947deae3f":{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"9531ae1eaa400f64":{"id":"com.apple.universalaccess_closeviewfarpoint","displayName":"Close View Far Point","description":"The minimum zoom level in the Zoom options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":null},"95d7b4412f8ce575":{"id":"com.apple.webcontent-filter_filterpacketproviderbundleidentifier","displayName":"Filter Packet Provider Bundle Identifier","description":"The bundle identifier string of the filter packet provider system extension. This string identifies the filter packet provider when the filter starts running. This field is a requirement if Filter Packets is true.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"95ff7106947fe970":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled","displayName":"Enable Password reveal button","description":"Lets you configure the default display of the browser password reveal button for password input fields on websites.\n\nIf you enable or don't configure this policy, the browser user setting defaults to displaying the password reveal button.\n\nIf you disable this policy, the browser user setting won't display the password reveal button.\n\nFor accessibility, users can change the browser setting from the default policy.\n\nThis policy only affects the browser password reveal button, it doesn't affect websites' custom reveal buttons.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"958677f4ad41dedb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.verticaltabsallowed","displayName":"Configures availability of a vertical layout for tabs on the side of the browser","description":"Configures whether a user can access an alternative layout where tabs are vertically aligned on the side of the browser instead of at the top.\nWhen there are several tabs open, this layout provides better tab viewing and management. There's better visibility of the site titles,\nit's easier to scan aligned icons, and there's more space to manage and close tabs.\n\nIf you disable this policy, then the vertical tab layout isn't available as an option for users.\n\nIf you enable or don't configure this policy, the tab layout remains at the top, but a user has the option to turn on vertical tabs on the side.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.verticaltabsallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.verticaltabsallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"95ce9b057b6958c1":{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentials_allowfreshcredentials_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"955ffa0291f0e932":{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_2","displayName":"Do not allow color changes","description":"This policy setting controls the ability to change the color of window frames. \r\n\r\nIf you enable this policy setting, you prevent users from changing the default window frame color. \r\n\r\nIf you disable or do not configure this policy setting, you allow users to change the default window frame color. \r\n\r\nNote: This policy setting can be used in conjunction with the \"Specify a default color for window frames\" policy setting, to enforce a specific color for window frames that cannot be changed by users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdisallowcolorizationcolorchanges-2"],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":[{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_2_1","displayName":"Enabled","description":null,"helpText":null}]},"95f8230c3d7dd8ab":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless","displayName":"Configure wireless policy processing","description":"This policy setting determines when policies that assign wireless network settings are updated.\r\n\r\nThis policy setting affects all policies that use the wireless network component of Group Policy, such as those in WindowsSettings\\Wireless Network Policies.\r\n\r\nIt overrides customized settings that the program implementing the wireless network set when it was installed.\r\n\r\nIf you enable this policy, you can use the check boxes provided to change the options.\r\n\r\nIf you disable this setting or do not configure it, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-wireless"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_1","displayName":"Enabled","description":null,"helpText":null}]},"95479053429c58a2":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_slowlink9","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_slowlink9_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wireless_cse_slowlink9_1","displayName":"True","description":null,"helpText":null}]},"95f28a1e4f02658e":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_warninglevel","displayName":"WarningLevel","description":null,"helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_warninglevel_50","displayName":"50%","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_warninglevel_60","displayName":"60%","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_warninglevel_70","displayName":"70%","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_warninglevel_80","displayName":"80%","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_warninglevel_warninglevel_90","displayName":"90%","description":null,"helpText":null}]},"9502bd636537710f":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio","displayName":"Allow audio and video playback redirection","description":"This policy setting allows you to specify whether users can redirect the remote computer's audio and video output in a Remote Desktop Services session.\r\nUsers can specify where to play the remote computer's audio output by configuring the remote audio settings on the Local Resources tab in Remote Desktop Connection (RDC). Users can choose to play the remote audio on the remote computer or on the local computer. Users can also choose to not play the audio. Video playback can be configured by using the videoplayback setting in a Remote Desktop Protocol (.rdp) file. By default, video playback is enabled.\r\n\r\nBy default, audio and video playback redirection is not allowed when connecting to a computer running Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003. Audio and video playback redirection is allowed by default when connecting to a computer running Windows 8, Windows Server 2012, Windows 7, Windows Vista, or Windows XP Professional.\r\n\r\nIf you enable this policy setting, audio and video playback redirection is allowed.\r\n\r\nIf you disable this policy setting, audio and video playback redirection is not allowed, even if audio playback redirection is specified in RDC, or video playback is specified in the .rdp file.\r\n\r\nIf you do not configure this policy setting audio and video playback redirection is not specified at the Group Policy level. \r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-audio"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_audio_1","displayName":"Enabled","description":null,"helpText":null}]},"95de118180f641e5":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-intranetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"95f5ca06b2ef33a1":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_basepolicyid","displayName":"Base policy id","description":"The id of the base policy for which this supplemental policy applies.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"953347b1656ee1f4":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_publishing_refresh_options","displayName":"User Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"95bf9bc341c620d9":{"id":"device_vendor_msft_policy_config_bluetooth_localdevicename","displayName":"Local Device Name","description":"Sets the local Bluetooth device name. If this is set, the value that it is set to will be used as the Bluetooth device name. To verify the policy is set, open the Bluetooth control panel on the device. Then, go to another Bluetooth-enabled device, open the Bluetooth control panel, and verify that the value that was specified. If this policy is not set or it is deleted, the default local radio name is used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Bluetooth#localdevicename"],"categoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","categoryName":"Bluetooth","options":null},"955648a40213c3a0":{"id":"device_vendor_msft_policy_config_cellular_letappsaccesscellulardata_userincontroloftheseapps","displayName":"Let Apps Access Cellular Data User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the cellular data access setting for the listed apps. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cellular#letappsaccesscellulardata_userincontroloftheseapps"],"categoryId":"d5d99ca9-9995-4724-bc46-fd07f362898c","categoryName":"Cellular","options":null},"9510ea8f1cbf0781":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"95beed4fb5a239a6":{"id":"device_vendor_msft_policy_config_experience_donotsyncbrowsersettings","displayName":"Do Not Sync Browser Settings","description":"You can configure Microsoft Edge, when enabled, to prevent the \"browser\" group from using the Sync your Settings option to sync information, such as history and favorites, between user's devices. If you want syncing turned off by default in Microsoft Edge but not disabled, enable the Allow users to turn browser syncing on policy. If disabled or not configured, the Sync your Settings options are turned on in Microsoft Edge by default, and configurable by the user. Related policy: PreventUsersFromTurningOnBrowserSyncing 0 (default) = allow syncing, 2 = disable syncing","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#donotsyncbrowsersettings"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_donotsyncbrowsersettings_2","displayName":"Disable Syncing","description":"Disable Syncing","helpText":null},{"id":"device_vendor_msft_policy_config_experience_donotsyncbrowsersettings_0","displayName":"Allow syncing","description":"Allow syncing","helpText":null}]},"954ae75f3839efb2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod","displayName":"Log Keeping Period","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies how many days worth of log files to keep before being cleaned up.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\LogFileKeepingPeriod\r\nType: DWORD\r\nValues: Min = 0, Max = 180","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"9502d09139240d73":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_odfcvhdnamepattern","displayName":"VHD Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":null},"95914cc2cfa0a4c4":{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"95f3d6986a900ba7":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"951426197618cb76":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel","displayName":"Interactive Logon Do Not Require CTRLALTDEL","description":"Interactive logon: Do not require CTRL+ALT+DEL This security setting determines whether pressing CTRL+ALT+DEL is required before a user can log on. If this policy is enabled on a computer, a user is not required to press CTRL+ALT+DEL to log on. Not having to press CTRL+ALT+DEL leaves users susceptible to attacks that attempt to intercept the users' passwords. Requiring CTRL+ALT+DEL before users log on ensures that users are communicating by means of a trusted path when entering their passwords. If this policy is disabled, any user is required to press CTRL+ALT+DEL before logging on to Windows. Default on domain-computers: Enabled: At least Windows 8/Disabled: Windows 7 or earlier. Default on stand-alone computers: Enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_donotrequirectrlaltdel"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel_1","displayName":"Enabled (a user is not required to press CTRL+ALT+DEL to log on)","description":"Enabled (a user is not required to press CTRL+ALT+DEL to log on)","helpText":null}]},"954040cc6e541431":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode","displayName":"Configure proxy server settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},"957dec3b8f8f369a":{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled","displayName":"Control Javascript setTimeout() function minimum timeout (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWhen the policy is set to Enabled, the Javascript setTimeout() with a timeout of 0ms will no longer be fixed to 1ms to schedule timer-based callbacks.\r\nWhen the policy is set to Disabled, the Javascript setTimeout() with a timeout of 0ms will be fixed to 1ms to schedule timer-based callbacks.\r\nWhen the policy is unset, use the browser's default behavior for setTimeout() function.\r\n\r\nThis is a web standards compliancy feature, but it may change task ordering on a web page, leading to unexpected behavior on sites that are dependent on a certain ordering.\r\nIt also may affect sites with a lot of setTimeout()s with a timeout of 0ms usage. For example, increasing CPU load.\r\n\r\nFor users where this policy is unset, Microsoft Edge Stable will roll out the change gradually on the stable channel.\r\n\r\nThis is a temporary policy that is planned to be removed in Microsoft Edge Stable 105.\r\nThis deadline may be extended if there is a need for enterprises.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"955c07d114088f9f":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will accept web contents using the compression dictionary transport feature.\r\n\r\nIf you disable this policy, Microsoft Edge will turn off the compression dictionary transport feature.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"95f8a034b758469b":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings","displayName":"Dynamic Code Settings","description":"This policy controls the dynamic code settings for Microsoft Edge.\r\n\r\nDisabling dynamic code improves the security of Microsoft Edge by preventing potentially hostile dynamic code and third-party code from making changes to Microsoft Edge's behavior. However this might cause compatibility issues with third-party software that must run in the browser process.\r\n\r\nIf you set this policy to 0 (the default) or leave unset, then Microsoft Edge will use the default settings.\r\n\r\nIf you set this policy to 1 – (EnabledForBrowser) then the Microsoft Edge browser process is prevented from creating dynamic code.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default dynamic code settings\r\n\r\n* EnabledForBrowser (1) = Prevent the browser process from creating dynamic code\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"95f67aaebadea731":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides","displayName":"Override IP address space mappings","description":"Specifies IP address space overrides for Local Network Access restrictions. This policy allows administrators to treat specific IP address ranges as public (exempt from Local Network Access restrictions) or as local (subject to Local Network Access restrictions).\r\n\r\nIP address space overrides can be specified using one of the following formats:\r\n\r\n• [cidr]=[public|local|loopback]\r\nwhere [cidr] is an IP address range in CIDR notation. CIDR overrides apply to all ports.\r\n\r\n• [ip-address]:[port]=[public|local|loopback]\r\n\r\nIPv6 addresses must be specified in URL-safe (bracketed) format.\r\n\r\nFor more information about Local Network Access, see https://wicg.github.io/local-network-access/.\r\n\r\nExample value:\r\n\r\n100.64.0.0/10=public\r\n[2001:db8::]/32=local\r\n192.168.0.1:8000=public\r\n[2001:DB8::8:800:200C:417A]:8080=local","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},"953c2edd0bf80f4b":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkblockedforurls_localnetworkblockedforurlsdesc","displayName":"Block sites from making network requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"95ec1b1fac66cc82":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled_synctypeslistdisableddesc","displayName":"Configure the list of types that are excluded from synchronization (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"95f5d324c2d1495d":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled","displayName":"Specifies whether the display-capture permissions-policy is checked or skipped (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 109.\r\n\r\nThis policy is obsolete. The policy was a temporary workaround for non-spec-compliant enterprise applications.\r\n\r\nThis policy stopped working in Microsoft Edge 107 and was obsoleted in Microsoft Edge 110.\r\n\r\nThe display-capture permissions-policy gates access to getDisplayMedia(),\r\nas per this spec:\r\nhttps://www.w3.org/TR/screen-capture/#feature-policy-integration\r\nHowever, if this policy is Disabled, this requirement is not enforced,\r\nand getDisplayMedia() is allowed from contexts that would otherwise be\r\nforbidden.\r\n\r\nIf you enable or don't configure this policy, sites can only call getDisplayMedia() from\r\ncontexts which are allowlisted by the display-capture permissions-policy.\r\n\r\nIf you disable this policy, sites can call getDisplayMedia() even from contexts\r\nwhich are not allowlisted by the display-capture permissions policy.\r\nNote that other restrictions may still apply.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"95d5bd531764bae1":{"id":"device_vendor_msft_policy_config_remoteassistance_sessionlogging","displayName":"Turn on session logging","description":"This policy setting allows you to turn logging on or off. Log files are located in the user's Documents folder under Remote Assistance.\n\nIf you enable this policy setting, log files are generated.\n\nIf you disable this policy setting, log files are not generated.\n\nIf you do not configure this setting, application-based settings are used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-sessionlogging"],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_sessionlogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_sessionlogging_1","displayName":"Enabled","description":null,"helpText":null}]},"957340bce7d48b16":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingheightfactor","displayName":"Height of grid box in percent relative to QR code bitmap height (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"95d9dacaf39d1f32":{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule","displayName":"[Deprecated] Auto Restart Notification Schedule","description":"Allows the IT Admin to specify the period for auto-restart reminder notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#update-autorestartnotificationschedule"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"95169681fb5c44b3":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_arguments","displayName":"Restrict Arguments","description":"Specifies the argument values of the argument based elevation rule.","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_arguments_allow","displayName":"Allow","description":"These are arguments the end user can run elevated with the file specified in the rule.","helpText":null}},"95464deeea8a5525":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder","displayName":"Default database folder (User)","description":"Specifies the default working folder.","helpText":"","infoUrls":[],"categoryId":"bd1dad69-5cbe-415e-8565-e87b15cd4431","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder_1","displayName":"Enabled","description":null,"helpText":null}]},"95ddbf3bf025a937":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork","displayName":"Allow Trusted Locations on the network (User)","description":"This policy setting controls whether trusted locations on the network can be used.\r\n \r\nIf you enable this policy setting, users can specify trusted locations on network shares or in other remote locations that are not under their direct control by selecting the \"Allow Trusted Locations on my network (not recommended)\" check box in the Trusted Locations section of the Trust Center. Content, code, and add-ins are allowed to load from trusted locations with minimal security and without prompting the user for permission.\r\n\r\nIf you disable or do not configure this policy setting, the selected application ignores any network locations listed in the Trusted Locations section of the Trust Center. Disabling this policy setting does not delete any network locations from the Trusted Locations list. Instead, it forces the selected application to treat the locations as non-trusted and prevents users from adding new network locations to the list.\r\n\r\nIf you also deploy Trusted Locations via Group Policy, you should verify whether any of them are remote locations. If any of them are remote locations and you do not allow remote locations via this policy setting, those policy keys that point to remote locations will be ignored on client computers.\r\n\r\nDisabling this policy setting will cause disruption for users who add network locations to the Trusted Locations list. However, it is not recommended to enable this policy setting (as the \"Allow Trusted Locations on my network (not recommended)\" check box itself states), so in practice it should be possible to disable this policy setting in most situations without causing significant usability issues for most users.\r\n","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"95995a04feebf0b4":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_sz_atc_adminadditem","displayName":"Enter URL(s) of desktop item(s) to Add (space separated): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":null},"95a98d369151decb":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ospfrouting","displayName":"OSPF Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ospfrouting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ospfrouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ospfrouting_1","displayName":"Enabled","description":null,"helpText":null}]},"95d04e3fbc0ef4d1":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup","displayName":"Word 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Word 2013.\r\nMicrosoft Word 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Word 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Word 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013wordbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"95683ae312b6e95d":{"id":"user_vendor_msft_policy_config_authentication_alloweapcertsso","displayName":"Allow EAP Cert SSO (User)","description":"Allows an EAP cert-based authentication for a single sign on (SSO) to access internal resources.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#alloweapcertsso"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":[{"id":"user_vendor_msft_policy_config_authentication_alloweapcertsso_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_authentication_alloweapcertsso_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"95591d45149180e9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended","displayName":"Set download directory (User)","description":"Setting the policy sets up the directory Chrome uses for downloading files. It uses the provided directory, whether or not users specify one or turned on the flag to be prompted for download location every time.\r\n\r\nLeaving the policy unset means Chrome uses the default download directory, and users can change it.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9573d430ec041bf8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_sensorsblockedforurlsdesc","displayName":"Block access to sensors on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"953b256e416f7ea3":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_standardizedbrowserzoomenabled","displayName":"Enable Standardized Browser Zoom Behavior (User)","description":"This policy enables conformance to the newly-adopted specification of CSS zoom.\r\n\r\nWhen this policy is Enabled or unset, the CSS \"zoom\" property will adhere to the specification:\r\n\r\nhttps://drafts.csswg.org/css-viewport/#zoom-property\r\n\r\nWhen Disabled, the CSS \"zoom\" property will fall back to its legacy pre-standardized behavior.\r\n\r\nThis policy is a temporary reprieve to allow time to migrate web content to the new behavior. There is also an origin trial (\"DisableStandardizedBrowserZoom\") that corresponds to the behavior when this policy is Disabled. This policy will be removed and the \"Enabled\" behavior made permanent in milestone 134.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_standardizedbrowserzoomenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_standardizedbrowserzoomenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"957e57d3bdeaa469":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed","displayName":"Allow Translator API (User)","description":"Setting the policy to Enabled or leaving it unset allows the use of Translator API in Google Chrome.\r\n\r\nSetting the policy to Disabled disallows the use of Translator API.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"95e4925886036bd4":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings","displayName":"Settings for Gemini integration (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings_0","displayName":"Allow Gemini integrations.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings_1","displayName":"Do not allow Gemini integrations.","description":null,"helpText":null}]},"9560fd28cd2c3e42":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant","displayName":"Make Access-Control-Allow-Methods matching in CORS preflight spec conformant (User)","description":"This policy controls whether request methods are uppercased when matching with Access-Control-Allow-Methods response headers in CORS preflight.\r\n\r\nIf the policy is Disabled, request methods are uppercased.\r\nThis is the behavior on or before Google Chrome 108.\r\n\r\nIf the policy is Enabled or not set, request methods are not uppercased, unless matching case-insensitively with DELETE, GET, HEAD, OPTIONS, POST, or PUT.\r\nThis would reject fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: FOO\" response header,\r\nand would accept fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: Foo\" response header.\r\n\r\nNote: request methods \"post\" and \"put\" are not affected, while \"patch\" is affected.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant_1","displayName":"Enabled","description":null,"helpText":null}]},"9522b8add03e4384":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles","displayName":"XML files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"95bbb74ab508fd41":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"95ea20a28b1b0c09":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowscriptlets"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"954c7c5122c56757":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled","displayName":"Allow queries to a Browser Network Time service (User)","description":"Prevents Microsoft Edge from occasionally sending queries to a browser network time service to retrieve an accurate timestamp.\r\n\r\nIf you disable this policy, Microsoft Edge will stop sending queries to a browser network time service.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will occasionally send queries to a browser network time service.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"95dc10dfcf3c0bd1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions","displayName":"Allow download restrictions (User)","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'Block dangerous downloads' (1) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings.\r\n\r\nSet 'Block potentially dangerous downloads' (2) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous downloads.\r\n\r\nSet 'Block all downloads' (3) to block all downloads.\r\n\r\nIf you don't configure this policy or set the 'No special restrictions' (0) option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\n* 0 = No special restrictions\r\n\r\n* 1 = Block dangerous downloads\r\n\r\n* 2 = Block potentially dangerous downloads\r\n\r\n* 3 = Block all downloads","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"9524f6d9468aed83":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (User)","description":"Setting the policy on Microsoft Edge turns on the restricted sign-in feature in Google Workspace and prevents users from changing this setting. Users can only access Google tools using accounts from the specified domains. To allow gmail or googlemail accounts, add consumer_accounts to the list of domains. This policy is based on the Chrome policy of the same name.\r\n\r\nIf you don't provide a domain name or leave this policy unset, users can access Google Workspace with any account.\r\n\r\nUsers cannot change or override this setting.\r\n\r\nNote: This policy causes the X-GoogApps-Allowed-Domains header to be appended to all HTTP and HTTPS requests to all google.com domains, as described in https://go.microsoft.com/fwlink/?linkid=2197973.\r\n\r\nExample value: example.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_1","displayName":"Enabled","description":null,"helpText":null}]},"951702c4eca154ed":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for InPrivate and Guest profiles (User)","description":"Configure this policy to allow/disallow ambient authentication for InPrivate and Guest profiles in Microsoft Edge.\r\n\r\nAmbient Authentication is http authentication with default credentials when explicit credentials aren't provided via NTLM/Kerberos/Negotiate challenge/response schemes.\r\n\r\nIf you set the policy to RegularOnly (value 0), it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions won't be allowed to ambiently authenticate.\r\n\r\nIf you set the policy to InPrivateAndRegular (value 1), it allows ambient authentication for InPrivate and Regular sessions. Guest sessions won't be allowed to ambiently authenticate.\r\n\r\nIf you set the policy to GuestAndRegular (value 2), it allows ambient authentication for Guest and Regular sessions. InPrivate sessions won't be allowed to ambiently authenticate\r\n\r\nIf you set the policy to All (value 3), it allows ambient authentication for all sessions.\r\n\r\nNote that ambient authentication is always allowed on regular profiles.\r\n\r\nIn Microsoft Edge version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.\r\n\r\n* 0 = Enable ambient authentication in regular sessions only\r\n\r\n* 1 = Enable ambient authentication in InPrivate and regular sessions\r\n\r\n* 2 = Enable ambient authentication in guest and regular sessions\r\n\r\n* 3 = Enable ambient authentication in regular, InPrivate and guest sessions","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9521a674ba7783f4":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare","displayName":"Configure the Share experience (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare_0","displayName":"Allow using the Share experience","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare_1","displayName":"Don't allow using the Share experience","description":null,"helpText":null}]},"9593b9f5fbec4e9f":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (User)","description":"Configures browsing data lifetime settings for Microsoft Edge.\r\nThis policy controls the lifetime of selected browsing data. This policy has no effect if Sync is enabled.\r\nThe available data types are the 'browsing_history', 'download_history', 'cookies_and_other_site_data', 'cached_images_and_files', 'password_signin', 'autofill', 'site_settings' and 'hosted_app_data'.\r\nMicrosoft Edge will regularly remove data of selected types that is older than 'time_to_live_in_hours'. Because data deletion only happens at certain intervals, some data might be kept slightly longer but never more than twice its expected 'time_to_live_in_hours'.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"data_types\": [\r\n \"browsing_history\"\r\n ], \r\n \"time_to_live_in_hours\": 24\r\n }, \r\n {\r\n \"data_types\": [\r\n \"password_signin\", \r\n \"autofill\"\r\n ], \r\n \"time_to_live_in_hours\": 12\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_1","displayName":"Enabled","description":null,"helpText":null}]},"951bfbcf0457d703":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastserviceservercapabilities0","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"95f3d048abcacbe7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastserviceserverdescription0","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"95cfbf9851d69669":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastserviceservername3","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"954bcaff430bcbb5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy2","displayName":"Places Bar Location 2 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy2_1","displayName":"Enabled","description":null,"helpText":null}]},"95e14d434f0cbb4c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy3","displayName":"Places Bar Location 3 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy3_1","displayName":"Enabled","description":null,"helpText":null}]},"9575321b7f1f18f5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_charttemplatesserverlocation","displayName":"Chart Templates Server Location (User)","description":"Specifies the location [URL or UNC] for server-based chart templates.","helpText":"","infoUrls":[],"categoryId":"a40e47b0-5b27-4e4d-b2ef-42f20540e812","categoryName":"Graph settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_charttemplatesserverlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_charttemplatesserverlocation_1","displayName":"Enabled","description":null,"helpText":null}]},"955a1fa20dbba19f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_improvederrorreporting_l_stopreportingerrormessages","displayName":"Stop reporting error messages (User)","description":"This policy setting controls whether the application reports error messages.\r\n\r\nIf you enable this policy, error messages will not be reported.\r\n\r\nIf you disable or do not configure this policy setting, error messages will be reported.","helpText":"","infoUrls":[],"categoryId":"33fb4f49-5c7f-472c-a0f3-e05646a55902","categoryName":"Improved Error Reporting","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_improvederrorreporting_l_stopreportingerrormessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_improvederrorreporting_l_stopreportingerrormessages_1","displayName":"Enabled","description":null,"helpText":null}]},"9534d8dffed26fff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_vietnamese","displayName":"Vietnamese (User)","description":"Enables the editing language Vietnamese","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_vietnamese_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_vietnamese_1","displayName":"Enabled","description":null,"helpText":null}]},"95a6aac42931f28b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_l_workflowdescrip460","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"95b53e8403971d2a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_l_pathcolon278","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"9525e56b6b252cda":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders_l_empty413","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"23c09e06-5bee-4b20-a391-36549bf0f620","categoryName":"Signing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders_l_empty413_0","displayName":"Enable Western and East Asian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders_l_empty413_1","displayName":"Suppress default Western","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders_l_empty413_2","displayName":"Suppress default East Asian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders_l_empty413_3","displayName":"Suppress both Western and East Asian","description":null,"helpText":null}]},"950fb775494058dd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationspublisher","displayName":"Publisher-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationspublisher_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationspublisher_1","displayName":"True","description":null,"helpText":null}]},"951e82288d258926":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"95e4fdda3751e503":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_hidesendlatestversionbutton","displayName":"Hide Send Latest Version button (User)","description":"This policy setting hides the \"Send Latest Version\" button and prevents it from appearing on out-of-date meeting forward notifications and responses.\r\n\r\nIf you enable this policy setting, the \"Send Latest Version\" button be hidden on out-of-date meeting forward notifications and responses. \r\n\r\nIf you disable or do not configure this policy setting, the \"Send Latest Version\" button will be turned on.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_hidesendlatestversionbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_hidesendlatestversionbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"95ce6b826edeec49":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapisend","displayName":"Configure Simple MAPI sending prompt (User)","description":"This policy setting allows you to specify what occurs when a program attempts to send mail programmatically, using Simple MAPI.\r\n\r\nIf you enable this policy setting, you can choose whether Outlook always allows sending mail, always disables sending mail, or prompts users to specify whether to allow or disallow sending mail.\r\n\r\nIf you disable or do not configure this policy setting, Outlook prompts users to specify whether to allow or disallow sending the mail.","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapisend_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapisend_1","displayName":"Enabled","description":null,"helpText":null}]},"952ac0e11fb1b399":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_datecolon57","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"95930f654e972665":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjenterdateooui","displayName":"Edits to start and finish dates (User)","description":"Specifies that the feedback triangle should appear in a corner of the Duration field or the Task Name field if you change a task's work, units, or duration.\r\n\r\nIf you enable this setting, a feedback triangle is displayed in the corner of the Duration or Task Name field if the user changes the task's work, units, or duration.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"fe7c8652-17d4-40a7-869c-f7cfc3454402","categoryName":"Show indicators and Option butons for","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjenterdateooui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjenterdateooui_1","displayName":"Enabled","description":null,"helpText":null}]},"95cdc2c351a9293c":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc18_l_descriptioncolon78","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"959c16ff6e78cbf5":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19_l_descriptioncolon82","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"9500df8ad42a8a8c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc17_l_datecolon73","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"956534a5d0adf5f7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_alwayscreatebackupcopy","displayName":"Always create backup copy (User)","description":"Checks/unchecks the corresponding UI option found under File tab | Options | Advanced | Save.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_alwayscreatebackupcopy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_alwayscreatebackupcopy_1","displayName":"Enabled","description":null,"helpText":null}]},"95c14989620ca953":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldshading","displayName":"Field shading (User)","description":"Specifies when field shading is displayed.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldshading_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_fieldshading_1","displayName":"Enabled","description":null,"helpText":null}]},"956600e58af8bd19":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/96.json b/public/intune-definitions/96.json new file mode 100644 index 000000000000..5cf0b452e2ef --- /dev/null +++ b/public/intune-definitions/96.json @@ -0,0 +1 @@ +{"9622972d915d0db1":{"id":"com.apple.assetcache.managed_publicranges_item_last","displayName":"Last","description":"The last IP address in the range.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"96fd41e637e6d46e":{"id":"com.apple.managedclient.preferences_prefetchwithserviceworkerenabled","displayName":"Allow SpeculationRules prefetch for ServiceWorker-controlled URLs","description":"Controls whether SpeculationRules prefetch requests are allowed for\nServiceWorker-controlled URLs.\n\nStarting with Microsoft Edge version 138,\nprefetch requests to ServiceWorker-controlled URLs are allowed by default when\nthe PrefetchServiceWorker feature is enabled.\n\nIf this policy is enabled or not configured, that default behavior is used.\n\nTo restore the legacy behavior from versions prior to 138, where prefetch requests\nto ServiceWorker-controlled URLs were blocked, set this policy to disabled.\n\nThis policy is intended to be temporary and will be removed in the future.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#prefetchwithserviceworkerenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_prefetchwithserviceworkerenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_prefetchwithserviceworkerenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9635993f1d286313":{"id":"com.microsoft.edge.mamedgeappconfigsettings.blocktruncatedcookies","displayName":"Block truncated cookies (Obsolete)","description":"This policy provides a temporary opt-out for changes to how Microsoft Edge handles cookies set via JavaScript that contain certain control characters (NULL, carriage return, and line feed).\nPreviously, the presence of any of these characters in a cookie string would cause it to be truncated but still set.\nNow, the presence of these characters will cause the whole cookie string to be ignored.\n\nIf you enable or don't configure this policy, the new behavior is enabled.\n\nIf you disable this policy, the old behavior is enabled.\n\nThis policy is obsolete because this policy was originally implemented as a safety measure if there was a breakage, but none have been reported.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.blocktruncatedcookies_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.blocktruncatedcookies_true","displayName":"Enabled","description":null,"helpText":null}]},"96a7c825210332bd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.customhelplink","displayName":"Specify custom help link","description":"Specify a link for the Help menu or the F1 key.\n\nIf you enable this policy, an admin can specify a link for the Help menu or the F1 key.\n\nIf you disable or don't configure this policy, the default link for the Help menu or the F1 key is used.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"964d6cebcea8643d":{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmpinkeyusagedropdown_name","displayName":"Configure TPM startup key and PIN:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmpinkeyusagedropdown_name_2","displayName":"Allow startup key and PIN with TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmpinkeyusagedropdown_name_1","displayName":"Require startup key and PIN with TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmpinkeyusagedropdown_name_0","displayName":"Do not allow startup key and PIN with TPM","description":null,"helpText":null}]},"964b43a20789b495":{"id":"device_vendor_msft_defender_configuration_disablegradualrelease","displayName":"Disable Gradual Release","description":"Enable this policy to disable gradual rollout of Defender updates.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablegradualrelease_1","displayName":"Gradual release is disabled","description":"Gradual release is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablegradualrelease_0","displayName":"Gradual release is enabled","description":"Gradual release is enabled","helpText":null}]},"96d03793a4bc1dc5":{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}","displayName":"Download Servers","description":"Node representing the discovery operation for a server name. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request.","helpText":"","infoUrls":[],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":null},"96d728261e6af9a4":{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogram_eventviewer_redirectionprogram","displayName":"Events.asp program","description":null,"helpText":"","infoUrls":[],"categoryId":"3453c694-bc38-4082-9d3d-886e385df927","categoryName":"Event Viewer","options":null},"9664ca1f313ebfd3":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_suppressrebootnotification","displayName":"Suppresses reboot notifications","description":"\r\n This policy setting allows user to supress reboot notifications in UI only mode (for cases where UI can't be in lockdown mode).\r\n\r\n If you enable this setting AM UI won't show reboot notifications.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-ux-configuration-suppressrebootnotification"],"categoryId":"a5060182-4d22-412b-bd0e-3a1e009b36c6","categoryName":"Client Interface","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_suppressrebootnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_suppressrebootnotification_1","displayName":"Enabled","description":null,"helpText":null}]},"960bda4e91bd0bb7":{"id":"device_vendor_msft_policy_config_admx_nca_passivemode","displayName":"DirectAccess Passive Mode","description":"Specifies whether NCA service runs in Passive Mode or not.\r\n\r\nSet this to Disabled to keep NCA probing actively all the time. If this setting is not configured, NCA probing is in active mode by default.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-passivemode"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_passivemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_passivemode_1","displayName":"Enabled","description":null,"helpText":null}]},"96a0d9ffaf01ef4d":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hosted","displayName":"Set BranchCache Hosted Cache mode","description":"This policy setting specifies whether BranchCache hosted cache mode is enabled on client computers to which this policy is applied. In addition to this policy, you must use the policy \"Turn on BranchCache\" to enable BranchCache on client computers.\r\n\r\nWhen a client computer is configured as a hosted cache mode client, it is able to download cached content from a hosted cache server that is located at the branch office. In addition, when the hosted cache client obtains content from a content server, the client can upload the content to the hosted cache server for access by other hosted cache clients at the branch office.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache settings are not applied to client computers by this policy. In the circumstance where client computers are domain members but you do not want to enable BranchCache on all client computers, you can specify Not Configured for this domain Group Policy setting, and then configure local computer policy to enable BranchCache on individual client computers. Because the domain Group Policy setting is not configured, it will not over-write the enabled setting that you use on individual client computers where you want to enable BranchCache.\r\n\r\n- Enabled. With this selection, BranchCache hosted cache mode is enabled for all client computers where the policy is applied. For example, if this policy is enabled in domain Group Policy, BranchCache hosted cache mode is turned on for all domain member client computers to which the policy is applied.\r\n\r\n- Disabled. With this selection, BranchCache hosted cache mode is turned off for all client computers where the policy is applied.\r\n\r\nIn circumstances where this setting is enabled, you can also select and configure the following option:\r\n\r\n- Type the name of the hosted cache server. Specifies the computer name of the hosted cache server. Because the hosted cache server name is also specified in the certificate enrolled to the hosted cache server, the name that you enter here must match the name of the hosted cache server that is specified in the server certificate. \r\n\r\nHosted cache clients must trust the server certificate that is issued to the hosted cache server. Ensure that the issuing CA certificate is installed in the Trusted Root Certification Authorities certificate store on all hosted cache client computers.\r\n\r\n* This policy setting is supported on computers that are running Windows Vista Business, Enterprise, and Ultimate editions with Background Intelligent Transfer Service (BITS) 4.0 installed.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-enablewindowsbranchcache-hosted"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hosted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_enablewindowsbranchcache_hosted_1","displayName":"Enabled","description":null,"helpText":null}]},"9612ae1d4de0250c":{"id":"device_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_win7","displayName":"Package Point and print - Approved servers","description":"Restricts package point and print to approved servers.\r\n\r\nThis policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the \"Point and Print Restrictions\" policy that governs the behavior of non-package point and print connections.\r\n\r\nWindows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server.\r\n\r\nIf this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers.\r\n\r\nIf this setting is disabled, or not configured, package point and print will not be restricted to specific print servers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-packagepointandprintserverlist-win7"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_win7_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_win7_1","displayName":"Enabled","description":null,"helpText":null}]},"965af0331f3ea663":{"id":"device_vendor_msft_policy_config_admx_qos_qosmaxoutstandingsends_qosmaxoutstandingsends_box","displayName":"Number of packets:","description":null,"helpText":"","infoUrls":[],"categoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","categoryName":"Qo S Packet Scheduler","options":null},"9663977c7d9dcd0b":{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_communities_snmp_communitieslistbox","displayName":"Communities","description":null,"helpText":"","infoUrls":[],"categoryId":"930d2960-3f70-48ca-9ead-b65a5a037c07","categoryName":"SNMP","options":null},"9627e542e94ca756":{"id":"device_vendor_msft_policy_config_admx_tpm_cleartpmifnotready_name","displayName":"Configure the system to clear the TPM if it is not in a ready state.","description":"This policy setting configures the system to prompt the user to clear the TPM if the TPM is detected to be in any state other than Ready. This policy will take effect only if the system’s TPM is in a state other than Ready, including if the TPM is “Ready, with reduced functionality”. The prompt to clear the TPM will start occurring after the next reboot, upon user login only if the logged in user is part of the Administrators group for the system. The prompt can be dismissed, but will reappear after every reboot and login until the policy is disabled or until the TPM is in a Ready state.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-cleartpmifnotready-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_cleartpmifnotready_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_cleartpmifnotready_name_1","displayName":"Enabled","description":null,"helpText":null}]},"96b8ff5af3d78ad7":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_auditmode","displayName":"Audit mode","description":"Turning audit mode on will not enforce the policy. We recommend first running the poliy with audit mode turned on prior to enforcement to determine the impacts of the policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_auditmode_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_auditmode_enabled","displayName":"Enabled","description":null,"helpText":null}]},"965de791de360fc9":{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditotherprivilegeuseevents","displayName":"Privilege Use Audit Other Privilege Use Events","description":"Not used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#privilegeuse_auditotherprivilegeuseevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditotherprivilegeuseevents_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditotherprivilegeuseevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditotherprivilegeuseevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditotherprivilegeuseevents_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"96f2dbf00a8031fa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites_1","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites_2","displayName":"Do not allow ads on sites with intrusive ads","description":null,"helpText":null}]},"96d7a9b06d77d2b7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled","displayName":"Specifies whether the display-capture permissions-policy is checked or skipped.","description":"\r\nThe display-capture permissions-policy gates access to getDisplayMedia(), as per this spec: https://www.w3.org/TR/screen-capture/#feature-policy-integration. However, if this policy is Disabled, this requirement is not enforced, and getDisplayMedia() is allowed from contexts that would otherwise be forbidden. This Enterprise policy is temporary; it's intended to be removed after Google Chrome version 100. It is intended to unblock Enterprise users whose application is non-spec compliant, but needs time to be fixed.\r\n\r\nWhen enabled or not set, sites can only call getDisplayMedia() from contexts which are allowlisted by the display-capture permissions-policy.\r\n\r\nWhen disabled, sites can call getDisplayMedia() even from contexts which are not allowlisted by the display-capture permissions policy. Note that other restrictions may still apply.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9671a87479807071":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURLPostParams specifies the parameters during image search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as {imageThumbnail}, real image thumbnail data replaces it.\r\n\r\nLeaving DefaultSearchProviderImageURLPostParams unset means image search request is sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"96e40ae2444fe83a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_strictermixedcontenttreatmentenabled","displayName":"Enable stricter treatment for mixed content","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_strictermixedcontenttreatmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_strictermixedcontenttreatmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"969b6a3c9912548c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin","displayName":"Enable the old web-based signin flow","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin_1","displayName":"Enabled","description":null,"helpText":null}]},"96a07f1ab72cb3ee":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled","displayName":"Enable Safe Browsing Extended Reporting","description":"Setting the policy to Enabled turns on Google Chrome's Safe Browsing Extended Reporting, which sends some system information and page content to Google servers to help detect dangerous apps and sites.\r\n\r\nSetting the policy to Disabled means reports are never sent.\r\n\r\nIf you set this policy, users can't change it. If not set, users can decide whether to send reports or not.\r\n\r\nSee more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"966d7a884e100a62":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"96a4d56ac7ec040b":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_odfcoutlookfolderpath","displayName":"Outlook Folder Path (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"96426a7b7a26aeae":{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview","displayName":"Restore PDF view","description":"Enables PDF View Recovery in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy Microsoft Edge will recover the last state of PDF view and land users to the section where they ended reading in the last session.\r\n\r\nIf you disable this policy Microsoft Edge will recover the last state of PDF view and land users at the start of the PDF file.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_1","displayName":"Enabled","description":null,"helpText":null}]},"96be22f6f55b5582":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_grooveexe168","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_grooveexe168_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_grooveexe168_1","displayName":"True","description":null,"helpText":null}]},"961578801ca0ce4c":{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin_enterachibernatetimeout","displayName":"System Hibernate Timeout (seconds):","description":"","helpText":"","infoUrls":[],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":null},"964de89ba2c9d75e":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_forceallowtheseapps","displayName":"Let Apps Access Motion Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"9628dd93f3569983":{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts","displayName":"Trusted Hosts","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses the list specified in TrustedHostsList to determine if the destination host is a trusted entity.\n\nIf you enable this policy setting, the WinRM client uses the list specified in TrustedHostsList to determine if the destination host is a trusted entity. The WinRM client uses this list when neither HTTPS nor Kerberos are used to authenticate the identity of the host.\n\nIf you disable or do not configure this policy setting and the WinRM client needs to use the list of trusted hosts, you must configure the list of trusted hosts locally on each computer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-trustedhosts"],"categoryId":"0f6d725e-2c2d-4926-8e78-3d2d5867eef5","categoryName":"Win RM Client","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts_1","displayName":"Enabled","description":null,"helpText":null}]},"96127995ed3fa72b":{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel","displayName":"Update Notification Level","description":"Display options for update notifications. This policy allows you to define what Windows Update notifications users see. This policy doesn't control how and when updates are downloaded and installed. Options:0 (default) – Use the default Windows Update notifications1 – Turn off all notifications, excluding restart warnings2 – Turn off all notifications, including restart warnings. Important. If you choose not to get update notifications and also define other Group policies so that devices aren't automatically getting updates, neither you nor device users will be aware of critical security, quality, or feature updates, and your devices may be at risk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#updatenotificationlevel"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel_0","displayName":"Use the default Windows Update notifications","description":"Use the default Windows Update notifications","helpText":null},{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel_1","displayName":"Turn off all notifications, excluding restart warnings","description":"Turn off all notifications, excluding restart warnings","helpText":null},{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel_2","displayName":"Turn off all notifications, including restart warnings","description":"Turn off all notifications, including restart warnings","helpText":null}]},"9642243dccdf564a":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"960b629f857eb454":{"id":"sirisettings_allowsiriai","displayName":"Allow Siri AI","description":"If `false`, disables the Siri AI specific features of Siri.","helpText":null,"infoUrls":[],"categoryId":"b85d9c04-4923-4fdf-a425-424686d47859","categoryName":"Siri Settings","options":[{"id":"sirisettings_allowsiriai_false","displayName":"False","description":null,"helpText":null},{"id":"sirisettings_allowsiriai_true","displayName":"True","description":null,"helpText":null}]},"9675ccc2d64780dc":{"id":"softwareupdate_beta","displayName":"Beta (Unsupported)","description":"Configurations for controlling or specifying the beta programs associated with a device. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"96d153e55ee5c827":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_descriptioncolon33","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"96675cf4935a914b":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_2","displayName":"Scripts (Startup/Shutdown) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-scriptsmachine-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_2_1","displayName":"Enabled","description":null,"helpText":null}]},"969766a9559018dc":{"id":"user_vendor_msft_policy_config_admx_programs_noprogramscpl","displayName":"Hide the Programs Control Panel (User)","description":"This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View.\r\n \r\nThe Programs Control Panel allows users to uninstall, change, and repair programs, enable and disable Windows Features, set program defaults, view installed updates, and purchase software from Windows Marketplace. Programs published or assigned to the user by the system administrator also appear in the Programs Control Panel.\r\n\r\nIf this setting is disabled or not configured, the Programs Control Panel in Category View and Programs and Features in Classic View will be available to all users.\r\n\r\nWhen enabled, this setting takes precedence over the other settings in this folder.\r\n\r\nThis setting does not prevent users from using other tools and methods to install or uninstall programs.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-noprogramscpl"],"categoryId":"dc16dbf0-aac8-4ff3-a546-1ddb55650f47","categoryName":"Programs","options":[{"id":"user_vendor_msft_policy_config_admx_programs_noprogramscpl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_noprogramscpl_1","displayName":"Enabled","description":null,"helpText":null}]},"968dfd3a1f17c48d":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchinternetinstartmenu","displayName":"Do not search Internet (User)","description":"If you enable this policy the start menu search box will not search for internet history or favorites.\r\n\r\nIf you disable or do not configure this policy, the start menu will search for for internet history or favorites, unless the user chooses not to in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchinternetinstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchinternetinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchinternetinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"96748f6d09a2bf86":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation","displayName":"Configure the New Tab page URL (User)","description":"Setting the policy configures the default New Tab page URL and prevents users from changing it.\r\n\r\nThe New Tab page opens with new tabs and windows.\r\n\r\nThis policy doesn't decide which pages open on start up. Those are controlled by the RestoreOnStartup policies. This policy does affect the homepage, if that's set to open the New Tab page, as well as the startup page if it's set to open the New Tab page.\r\n\r\nIt is a best practice to provide fully canonicalized URL, if the URL is not fully canonicalized Google Chrome will default to https://.\r\n\r\nLeaving the policy unset or empty puts the default New Tab page in use.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"96052c0bb495c2ab":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver","displayName":"Include local path when user is uploading files to a server (User)","description":"This policy setting controls whether or not local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path.\n\nIf you enable this policy setting, path information is sent when the user is uploading a file via an HTML form.\n\nIf you disable this policy setting, path information is removed when the user is uploading a file via an HTML form.\n\nIf you do not configure this policy setting, the user can choose whether path information is sent when he or she is uploading a file via an HTML form. By default, path information is sent.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_1","displayName":"Enabled","description":null,"helpText":null}]},"960019f7d1eb41d3":{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled","displayName":"Enable Microsoft Bing trending suggestions in the address bar (User)","description":"This policy controls whether Microsoft Bing trending suggestions appear in the address bar’s suggestion dropdown when users click the address bar while on a New Tab Page.\r\n\r\nIf this policy is enabled or not configured, Microsoft Bing trending suggestions will appear in the address bar suggestion dropdown.\r\n\r\nIf this policy is disabled, Microsoft Edge will not display Microsoft Bing trending suggestions when users click the address bar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"96793c9ff914f18d":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"9615f533f2719081":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationpowerpoint","displayName":"[Deprecated] Don’t AutoSave files in PowerPoint (User)","description":"Important: This policy setting will be removed in a future release and will no longer be supported. Please use the \"Turn off AutoSave by default in PowerPoint\" policy setting instead.\r\n \r\nThis policy setting controls whether files can be AutoSaved in the desktop version of PowerPoint after PowerPoint has been updated with new features. By default, Auto Saving files is Enabled.\r\n\r\nIf you enable this policy setting files will not be able to be AutoSaved.\r\n\r\nIf you disable or don’t configure this policy setting files will be able to be AutoSaved.\r\n\r\nNote: There are separate policy settings for Word, Excel, and PowerPoint.\r\n ","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationpowerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_dontautosaveinformationpowerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"96b69b76850b3caa":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastserviceminorversion1","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"9646e36594592502":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastserviceservercapabilities4","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"96b67ef10426f457":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastserviceserverterms6","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"9682452af6ef7ec0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkadd_l_workaddmapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"96fbd846254398f3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_greek","displayName":"Greek (User)","description":"Enables the editing language Greek","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_greek_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_greek_1","displayName":"Enabled","description":null,"helpText":null}]},"96933ec703166996":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_specifydefaultpermissionserver_l_empty407","displayName":"\r\nEnter Permission Policy Default Server for Quick Access Toolbar\r\n","description":"","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":null},"9609eba215bdeb42":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_disableinclusionofdocumentpropertiesinpdfandxpsoutput","displayName":"Disable inclusion of document properties in PDF and XPS output (User)","description":"This policy setting controls whether document metadata can be saved in PDF and XPS documents. \r\n\r\nIf you enable this policy setting, document properties metadata is not exported to PDF and XPS files. \r\n\r\nIf you disable this policy setting, document properties metadata will always be saved with PDF and XPS files, and users will not be able to override this configuration. \r\n\r\nIf you do not configure this policy setting, if the Microsoft Save as PDF or XPS Add-in for Microsoft Office Programs add-in is installed, document properties are saved as metadata when users save files using the PDF or XPS or Publish as PDF or XPS commands in Access, Excel, InfoPath, PowerPoint, and Word, unless the \"Document properties\" option is unchecked in the Options dialog.","helpText":"","infoUrls":[],"categoryId":"5b1be2c5-9939-4b2e-b29b-b22069455c90","categoryName":"Microsoft Save As PDF and XPS add-ins","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_disableinclusionofdocumentpropertiesinpdfandxpsoutput_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_disableinclusionofdocumentpropertiesinpdfandxpsoutput_1","displayName":"Enabled","description":null,"helpText":null}]},"96840704d315d5e1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]},"9674efbe5b8f1f2f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofrows","displayName":"Maximum number of rows fetched per request while populating a lookup in the SharePoint list control (User)","description":"The maximum number of rows fetched per request while populating a lookup in the SharePoint list control. Based on a standalone server's recommended hardware configuration a good default would be about 5000. The limit helps improve the performance of the SharePoint list control and is a defense in depth measure to prevent loading the server.","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofrows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_maximumnumberofrows_1","displayName":"Enabled","description":null,"helpText":null}]},"963caff6e750ff02":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_setdefaultimagedirctory","displayName":"Set default image directory (User)","description":"Sets the default directory for signing images (defaults to your pictures otherwise).","helpText":"","infoUrls":[],"categoryId":"23c09e06-5bee-4b20-a391-36549bf0f620","categoryName":"Signing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_setdefaultimagedirctory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_setdefaultimagedirctory_1","displayName":"Enabled","description":null,"helpText":null}]},"963caef7d10bf4ba":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_allowwebarchivestobesavedinanyhtmlencoding","displayName":"Allow Web Archives to be saved in any HTML encoding (User)","description":"Enabled: Allow the user to save Web Archives in any HTML encoding.\r\n\r\nNot enabled: Always use US-ASCII for Web Archives.\r\n\r\nThis results in smaller files, but is not supported in Windows Internet Explorer 5.0 or earlier.","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_allowwebarchivestobesavedinanyhtmlencoding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_allowwebarchivestobesavedinanyhtmlencoding_1","displayName":"Enabled","description":null,"helpText":null}]},"9611490afc44b685":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage","displayName":"RSS Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the RSS Feeds Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"962035839f9ed15a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_disableuserentriestoserverlist_l_checktodisableusersfromaddingentriestoserverlist","displayName":"Check to disable users from adding entries to server list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f77040df-7dd2-4916-b6a0-5ef962686d4e","categoryName":"Meeting Workspace","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_disableuserentriestoserverlist_l_checktodisableusersfromaddingentriestoserverlist_1","displayName":"Publish default, allow others","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_disableuserentriestoserverlist_l_checktodisableusersfromaddingentriestoserverlist_2","displayName":"Publish default, disallow others","description":null,"helpText":null}]},"962382db17221fb3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_disableautopreview","displayName":"Disable AutoPreview (User)","description":"Enabling this policy permanently disables the item preview. Users cannot turn it back on and the ribbon UI to change it is disabled.","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_disableautopreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_disableautopreview_1","displayName":"Enabled","description":null,"helpText":null}]},"96e89e314419d390":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_disableofficestartpowerpoint","displayName":"Disable the Office Start screen for PowerPoint (User)","description":"This policy setting controls whether the Office Start screen appears on boot for PowerPoint.\r\n\r\nIf you enable this policy setting, users will not see the Office Start screen when they boot PowerPoint.\r\n\r\nIf you disable or do not configure this policy setting, users will see the Office Start screen when they boot PowerPoint.\r\n\r\nNote: This policy setting is overridden by the policy setting \"Microsoft Office 2016 > Miscellaneous > Disable the Office Start screen for all Office applications\" if that policy setting is set.","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_disableofficestartpowerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_disableofficestartpowerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"969fbec9bf97819c":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_recentlyusedfilelist_l_sizeofrecentlyusedfilelist","displayName":"Size of recently used file list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":null},"96d0eb4678bbe515":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"96ea18b422e22ae0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_l_allowsubfolders15","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_l_allowsubfolders15_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_l_allowsubfolders15_1","displayName":"True","description":null,"helpText":null}]},"96fba43b0cd4677d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15_l_allowsubfolders67","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15_l_allowsubfolders67_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15_l_allowsubfolders67_1","displayName":"True","description":null,"helpText":null}]},"960e72abaf2c8ec6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_l_allowsubfolders87","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_l_allowsubfolders87_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_l_allowsubfolders87_1","displayName":"True","description":null,"helpText":null}]},"96c75381fef6cf06":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]},"96a316286e6ad21f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_l_allowsubfolders63","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_l_allowsubfolders63_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_l_allowsubfolders63_1","displayName":"True","description":null,"helpText":null}]},"9682256edd0a82a0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingblankcharactersusedforformatting","displayName":"Stop checking whether blank characters are used for formatting (User)","description":"This policy setting prevents the Accessibility Checker from checking to ensure that multiple consecutive whitespace characters have not been used for formatting.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking to ensure that multiple consecutive whitespace characters have not been used for formatting.\r\n\r\nIf you disable or do not configure this policy setting, documents will be checked for consecutive whitespace usage and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingblankcharactersusedforformatting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingblankcharactersusedforformatting_1","displayName":"Enabled","description":null,"helpText":null}]},"96dea5a366837051":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_descriptioncolon90","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/97.json b/public/intune-definitions/97.json new file mode 100644 index 000000000000..c6caa9be3f72 --- /dev/null +++ b/public/intune-definitions/97.json @@ -0,0 +1 @@ +{"97645c9726bea434":{"id":"com.android.devicerestrictionpolicy.wifiblockeditpolicydefinedconfigurations","displayName":"Block Wi-Fi setting changes","description":"If 'True', prevents users from changing Wi-Fi settings created by the device owner. Users can create their own Wi-Fi configurations. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to change the Wi-Fi settings on the device. Available for fully managed and dedicated devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.wifiblockeditpolicydefinedconfigurations_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.wifiblockeditpolicydefinedconfigurations_false","displayName":"False","description":"false","helpText":null}]},"97c522f485742670":{"id":"com.apple.applicationaccess_allowsystemappremoval","displayName":"Allow System App Removal","description":"If false, disables the removal of system apps from the device. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowsystemappremoval_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowsystemappremoval_true","displayName":"True","description":null,"helpText":null}]},"972afd646b2d26cc":{"id":"com.apple.assetcache.managed_allowpersonalcaching","displayName":"Allow Personal Caching","description":"If true, caches the user's iCloud data. Clients may take some time (hours or days) to react to changes to this setting; it doesn't have an immediate effect.\r\nAt least one of the Allow Personal Caching or Allow Shared Caching settings must be true.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_allowpersonalcaching_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_allowpersonalcaching_true","displayName":"True","description":null,"helpText":null}]},"97efaec55ff9182e":{"id":"com.apple.extensiblesso_extensiondata_helptext_kerberos","displayName":"Help Text","description":"The text to be displayed to the user at the bottom of the Kerberos login window. It can be used to display help information or disclaimer text. Available in iOS 14 and later and macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"97d291d4fee4e8a3":{"id":"com.apple.managedclient.preferences_dailyconfiguration","displayName":"Daily and Hourly quick scan configuration","description":"Check for definitions update before initiating a scheduled scan","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":null},"97ed9c403c05245b":{"id":"com.apple.managedclient.preferences_disablehttpparsing","displayName":"Disable HTTP parsing","description":"Disables parsing of HTTP traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disablehttpparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablehttpparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"97492a3966e4f134":{"id":"com.apple.managedclient.preferences_filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\n\nIf you don't set this policy, \"DefaultFileSystemWriteGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemWriteBlockedForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#filesystemwriteaskforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"97d65a99becd6012":{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"97d81b72bc44c9bb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.managedconfigurationperorigin","displayName":"Sets managed configuration values for websites to specific origins","description":"Setting this policy defines the return value of Managed Configuration API for given origin.\n\nManaged Configuration API is a key-value configuration that can be accessed via navigator.device.getManagedConfiguration() javascript call. This API is only available to origins, which correspond to force-installed web applications via \"WebAppInstallForceList\".","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"97e61b1df436447b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_recommended","displayName":"Set the system default printer as the default printer (users can override)","description":"Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer.\n\nIf you disable this policy or don't configure it, Print Preview uses the most recently used printer as the default destination choice.\n\nIf you enable this policy, Print Preview uses the OS system default printer as the default destination choice.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"97377aad256ea945":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_excludesecuritydevices_tpm12","displayName":"Restrict use of TPM 1.2","description":"Some Trusted Platform Modules (TPMs) are only compliant with the older 1.2 revision of the TPM specification defined by the Trusted Computing Group (TCG).\n\nIf you enable this policy setting, TPM revision 1.2 modules will be disallowed from being used with Windows Hello for Business.\n\nIf you disable or do not configure this policy setting, TPM revision 1.2 modules will be allowed to be used with Windows Hello for Business.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_excludesecuritydevices_tpm12_false","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_excludesecuritydevices_tpm12_true","displayName":"Enabled","description":"Enabled","helpText":null}]},"971aa15f65a5ef9b":{"id":"device_vendor_msft_policy_config_admx_power_diskacpowerdowntimeout_2_enterdiskacpowerdowntimeout","displayName":"Turn Off the Hard Disk (seconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"91c02e14-8848-485d-8844-b9933fa888ec","categoryName":"Hard Disk Settings","options":null},"975e3b2def036bb8":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2","displayName":"Set rules for remote control of Remote Desktop Services user sessions","description":"If you enable this policy setting, administrators can interact with a user's Remote Desktop Services session based on the option selected. Select the desired level of control and permission from the options list:\r\n\r\n1. No remote control allowed: Disallows an administrator to use remote control or view a remote user session.\r\n2. Full Control with user's permission: Allows the administrator to interact with the session, with the user's consent.\r\n3. Full Control without user's permission: Allows the administrator to interact with the session, without the user's consent.\r\n4. View Session with user's permission: Allows the administrator to watch the session of a remote user with the user's consent. \r\n5. View Session without user's permission: Allows the administrator to watch the session of a remote user without the user's consent.\r\n\r\nIf you disable this policy setting, administrators can interact with a user's Remote Desktop Services session, with the user's consent.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-remotecontrol-2"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_2_1","displayName":"Enabled","description":null,"helpText":null}]},"97f02670005e19bb":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup","displayName":"Word 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Word 2016.\r\nMicrosoft Word 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Word 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Word 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016wordbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"973bf067b7625671":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_enable_ntpserver","displayName":"Enable Windows NTP Server","description":"This policy setting allows you to specify whether the Windows NTP Server is enabled.\r\n\r\nIf you enable this policy setting for the Windows NTP Server, your computer can service NTP requests from other computers.\r\n\r\n\r\nIf you disable or do not configure this policy setting, your computer cannot service NTP requests from other computers.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-w32time#admx-w32time-w32time-policy-enable-ntpserver"],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":[{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_enable_ntpserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_enable_ntpserver_1","displayName":"Enabled","description":null,"helpText":null}]},"97721a7bfd7ca4c4":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_fileattributes_filedescriptiondetails","displayName":"File description","description":"The description of the selected file as stated in the file attributes.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"9789632b8c3393fc":{"id":"device_vendor_msft_policy_config_browser_allowsavinghistory","displayName":"Allow Saving History","description":"Microsoft Edge saves your user's browsing history, which is made up of info about the websites they visit, on their devices. If enabled or not configured, the browsing history is saved and visible in the History pane. If disabled, the browsing history stops saving and is not visible in the History pane. If browsing history exists before this policy was disabled, the previous browsing history remains visible in the History pane. This policy, when disabled, does not stop roaming of existing history or history coming from other roamed devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsavinghistory"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowsavinghistory_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowsavinghistory_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"97e6b1e6517e88c2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"97adb21e6cd1840f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed","displayName":"Allow fullscreen mode","description":"Setting the policy to True or leaving it unset means that, with appropriate permissions, users, apps, and extensions can enter Fullscreen mode (in which only web content appears).\r\n\r\nSetting the policy to False means users, apps, and extensions can't enter Fullscreen mode.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"975bb8fbf8d13b84":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended","displayName":"Import autofill form data from default browser on first run","description":"Setting the policy to Enabled imports autofill form data from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no autofill form data is imported on first run.\r\n\r\nUsers can trigger an import dialog and the autofill form data checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9744befb22a5bdfe":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed","displayName":"Suppress Google Cloud Print deprecation messages","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed_1","displayName":"Enabled","description":null,"helpText":null}]},"973b7f3effeebdb4":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules","displayName":"Attack Surface Reduction Rules","description":"Attack surface reduction rules help prevent actions that malware often abuse to compromise devices and networks. ","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender#attacksurfacereductionrules"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"97cbb4f902191c60":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent","displayName":"Block JavaScript or VBScript from launching downloaded executable content","description":"This rule prevents scripts from launching potentially malicious downloaded content. Malware written in JavaScript or VBScript often acts as a downloader to fetch and launch other malware from the Internet.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_warn","displayName":"Warn","description":null,"helpText":null}]},"97d00050e7639763":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowfontdownloads"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"974686c955c7040f":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"97c4b4d694722a36":{"id":"device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, etc.). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone, making the Local Machine security zone a prime target for malicious users. Zone Elevation also disables JavaScript navigation if there is no security context.\n\nIf you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes.\n\nIf you disable this policy setting, no zone receives such protection for Internet Explorer processes.\n\nIf you do not configure this policy setting, any zone can be protected from zone elevation by Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-protectionfromzoneelevationinternetexplorerprocesses"],"categoryId":"3bbaff1b-7d59-4b9c-ab53-c235d72b2fb0","categoryName":"Protection From Zone Elevation","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"9769f9e713b65222":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege","displayName":"Audit The Use Of Backup And Restoreprivilege","description":"Audit: Audit the use of Backup and Restore privilege This security setting determines whether to audit the use of all user privileges, including Backup and Restore, when the Audit privilege use policy is in effect. Enabling this option when the Audit privilege use policy is also enabled generates an audit event for every file that is backed up or restored. If you disable this policy, then use of the Backup or Restore privilege is not audited even when Audit privilege use is enabled. Note: On Windows versions prior to Windows Vista configuring this security setting, changes will not take effect until you restart Windows. Enabling this setting can cause a LOT of events, sometimes hundreds per second, during a backup operation. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#audit_audittheuseofbackupandrestoreprivilege"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege_aq==","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege_aa==","displayName":"Disable","description":"Disable","helpText":null}]},"97600baae2ecfd47":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin","displayName":"Browser sign-in settings","description":"Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign on. To control the availability of sync, use the 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) policy instead.\r\n\r\nIf you set this policy to 'Disable browser sign-in', make sure that you also set the 'NonRemovableProfileEnabled' (Configure whether a user always has a default profile automatically signed in with their work or school account) policy to disabled because 'NonRemovableProfileEnabled' disables the creation of an automatically signed in browser profile. If both policies are set, Microsoft Edge will use the 'Disable browser sign-in' policy and behave as if 'NonRemovableProfileEnabled' is set to disabled.\r\n\r\nIf you set this policy to 'Enable browser sign-in' (1), users can sign into the browser. Signing into the browser doesn't mean that sync is turned on by default; the user must separately opt-in to use this feature.\r\n\r\nIf you set this policy to 'Force browser sign-in' (2) users must sign into a profile to use the browser. By default, this will allow the user to choose whether they want to sync to their account, unless sync is disabled by the domain admin or with the 'SyncDisabled' policy. The default value of 'BrowserGuestModeEnabled' (Enable guest mode) policy is set to false.\r\n\r\nIf you don't configure this policy users can decide if they want to enable the browser sign-in option and use it as they see fit.\r\n\r\n* 0 = Disable browser sign-in\r\n\r\n* 1 = Enable browser sign-in\r\n\r\n* 2 = Force users to sign-in to use the browser","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},"9779f05e52c8282f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_userdatadir","displayName":"Set the user data directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"97ca35aeb5f69b8d":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet","displayName":"Enhanced Security Mode configuration for Intranet zone sites","description":"Microsoft Edge will apply Enhanced Security Mode on Intranet zone sites by default. This may lead to Intranet zone sites acting in an unexpected manner.\r\n\r\nIf you enable this policy, Microsoft Edge won't apply Enhanced Security Mode on Intranet zone sites.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will apply Enhanced Security Mode on Intranet zone sites.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_1","displayName":"Enabled","description":null,"helpText":null}]},"97388cc7af774e08":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended","displayName":"Allow suggestions from local providers","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\r\n\r\nIf you enable this policy, suggestions from local providers are used.\r\n\r\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions will not appear.\r\n\r\nIf you do not configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\r\n\r\nNote that some features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy.\r\n\r\nThis policy requires a browser restart to finish applying.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"97781e8a228d53e3":{"id":"device_vendor_msft_policy_config_mixedreality_allowlaunchuriinsingleappkiosk","displayName":"Allow Launch Uri In Single App Kiosk","description":"By default, launching applications via Launcher API (Launcher Class (Windows.System) - Windows UWP applications | Microsoft Docs) is disabled in single app kiosk mode. To enable applications to launch in single app kiosk mode on HoloLens devices, set the policy value to true.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#allowlaunchuriinsingleappkiosk"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_allowlaunchuriinsingleappkiosk_0","displayName":"Applications are not allowed to be launched with Launcher API, when in single app kiosk mode.","description":"Applications are not allowed to be launched with Launcher API, when in single app kiosk mode.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_allowlaunchuriinsingleappkiosk_1","displayName":"Applications are allowed to be launched with Launcher API, when in single app kiosk mode.","description":"Applications are allowed to be launched with Launcher API, when in single app kiosk mode.","helpText":null}]},"971fd6fa0fed35e4":{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_ignorewebproxy","displayName":"Cause sync client to ignore normal web proxy detection logic","description":"\r\n This setting controls whether the OneDrive sync client does its default web proxy detection logic or not.\r\n\r\n If you enable this setting, the sync client will not do its normal web proxy detection and will attempt direct connections to the internet web endpoints it needs to communicate with. This is equivalent of having no web proxy settings configured and no automatic proxy script.\r\n\r\n If you disable or do not configure this setting, the sync client will detect if a web proxy is configured on your network and use it if so.\r\n\r\n For more info see https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/use-group-policy-apply-winhttp-proxy-settings ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_ignorewebproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_ignorewebproxy_1","displayName":"Enabled","description":null,"helpText":null}]},"97cdae99e72724e9":{"id":"device_vendor_msft_policy_config_security_requiredeviceencryption","displayName":"Require Device Encryption","description":"Allows enterprise to turn on internal storage encryption. Most restricted value is 1. Important. If encryption has been enabled, it cannot be turned off by using this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#requiredeviceencryption"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_requiredeviceencryption_0","displayName":"Encryption is not required.","description":"Encryption is not required.","helpText":null},{"id":"device_vendor_msft_policy_config_security_requiredeviceencryption_1","displayName":"Encryption is required.","description":"Encryption is required.","helpText":null}]},"974d40cd280e81ba":{"id":"device_vendor_msft_policy_config_userrights_managevolume","displayName":"Manage Volume","description":"This user right determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation. Use caution when assigning this user right. Users with this user right can explore disks and extend files in to memory that contains other data. When the extended files are opened, the user might be able to read and modify the acquired data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#managevolume"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"9749e5ebec73c9fc":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath","displayName":"Shared installation path","description":"The directory where some packages shared across versions of instances of Visual Studio are installed. You can change the value anytime, but it will only affect future installs. Any products already installed to the old location must not be moved or they might not function correctly.\r\n\r\nThe Visual Studio Installer enforces a 150 character limit for the path.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath_1","displayName":"Enabled","description":null,"helpText":null}]},"975468f6c85e6c45":{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_autologoff_winapp_autologofftimeout","displayName":"Inactivity timeout (minutes):","description":"","helpText":"","infoUrls":[],"categoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","categoryName":"Windows App","options":null},"9759e680beaeaf4a":{"id":"device_vendor_msft_reboot_schedule_weeklyrecurrent","displayName":"Weekly Recurrent","description":"Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. While it is supported to set either DailyRecurrent or WeeklyRecurrent schedules, it is not supported to enable both settings simultaneously. A reboot will be scheduled to occur every week at the configured day and time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Reboot-csp/"],"categoryId":"effee722-f6ec-440e-a892-bf645bc341ff","categoryName":"Reboot","options":null},"97068e1497b47b78":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1","displayName":"Customize consent settings (User)","description":"This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\r\n\r\nIf you enable this policy setting, you can add specific event types to a list by clicking Show, and typing event types in the Value Name column of the Show Contents dialog box. Event types are those for generic, non-fatal errors: crash, no response, and kernel fault errors. For each specified event type, you can set a consent level of 0, 1, 2, 3, or 4.\r\n\r\n- 0 (Disable): Windows Error Reporting sends no data to Microsoft for this event type.\r\n\r\n- 1 (Always ask before sending data): Windows prompts the user for consent to send reports.\r\n\r\n- 2 (Send parameters): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, and Windows prompts the user for consent to send any additional data requested by Microsoft.\r\n\r\n- 3 (Send parameters and safe additional data): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, as well as data which Windows has determined (within a high probability) does not contain personally identifiable data, and prompts the user for consent to send any additional data requested by Microsoft.\r\n\r\n- 4 (Send all data): Any data requested by Microsoft is sent automatically.\r\n\r\nIf you disable or do not configure this policy setting, then the default consent settings that are applied are those specified by the user in Control Panel, or in the Configure Default Consent policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werconsentcustomize-1"],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_1","displayName":"Enabled","description":null,"helpText":null}]},"9723df091ca7fd8e":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remotedesktop","displayName":"Remote Desktops (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-remotedesktop"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remotedesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remotedesktop_1","displayName":"Enabled","description":null,"helpText":null}]},"97519d34b92caa70":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync","displayName":"Microsoft Lync 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Lync 2010.\r\nBy default, the user settings of Microsoft Lync 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Lync 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010lync"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync_1","displayName":"Enabled","description":null,"helpText":null}]},"97784f2093a610ac":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2","displayName":"Do not predict network actions on any network connection","description":null,"helpText":null}]},"9796f90534c52b9c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_webappinstallforcelist","displayName":"URLs for Web Apps to be silently installed. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"972a18467ba1a8cf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist","displayName":"Configure the required domain names for remote access hosts (User)","description":"Setting the policy specifies the host domain names that are imposed on remote access hosts, and users can't change them. Hosts can be shared only using accounts registered on one of the specified domain names.\r\n\r\nSetting the policy to an empty list or leaving it unset means hosts can be shared using any account.\r\n\r\nSee also RemoteAccessHostClientDomainList.\r\n\r\nNote: This setting will override RemoteAccessHostDomain, if present.\r\n\r\nExample value:\r\n\r\nmy-awesome-domain.com\r\nmy-auxiliary-domain.com","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"979e61fc2f5dc70b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_remoteaccesshostdomainlistdesc","displayName":"Configure the required domain names for remote access hosts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"97c48a7c0a0cfa92":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":null},"97010cb6e08783e7":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites_javascriptoptimizerblockedforsitesdesc","displayName":"Block JavaScript optimizations on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"9723b12e0ab66b45":{"id":"user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory","displayName":"Disable \"Configuring History\" (User)","description":"This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary Internet Files and History Settings dialog box, from the Menu bar, on the Tools menu, click Internet Options, click the General tab, and then click Settings under Browsing history.\n\nIf you enable this policy setting, a user cannot set the number of days that Internet Explorer tracks views of the pages in the History List. You must specify the number of days that Internet Explorer tracks views of pages in the History List. Users can not delete browsing history.\n\nIf you disable or do not configure this policy setting, a user can set the number of days that Internet Explorer tracks views of pages in the History list. Users can delete browsing history.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableconfiguringhistory"],"categoryId":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","categoryName":"Delete Browsing History","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"972f966faeee7561":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"973b5b250d219d1c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch","displayName":"Enforce Bing SafeSearch (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_0","displayName":"Don't configure search restrictions in Bing","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_1","displayName":"Configure moderate search restrictions in Bing","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_2","displayName":"Configure strict search restrictions in Bing","description":null,"helpText":null}]},"97ec761162b57b2b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation","displayName":"Ask where to save downloaded files (User)","description":"Set whether to ask where to save a file before downloading it.\r\n\r\nIf you enable this policy, the user is asked where to save each file before downloading; if you don't configure it, files are saved automatically to the default location, without asking the user.\r\n\r\nIf you don't configure this policy, the user will be able to change this setting.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_1","displayName":"Enabled","description":null,"helpText":null}]},"97fa9c84be36a239":{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled","displayName":"Enable tab preview on hover (User)","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\r\n\r\nIf you disable this policy, tab previews will not be shown on hover.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"971084d0e486f220":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls","displayName":"Block read access via the File System API on these sites (User)","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemReadGuardSetting' (Control use of the File System API for reading) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemReadAskForUrls' (Allow read access via the File System API on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"97e4657c004eea9b":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment","displayName":"Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages (User)","description":"This setting lets you specify a custom adjustment to the height of popup windows generated via window.open from the Internet Explorer mode site.\r\n\r\nIf you configure this policy, Microsoft Edge will add the adjustment value to the height, in pixels. The exact difference depends on the UI configuration of both IE and Edge, but a typical difference is 5.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will treat IE mode window.open the same as Edge mode window.open in window height calculations.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_1","displayName":"Enabled","description":null,"helpText":null}]},"97448d2ff3d21e53":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls","displayName":"Automatically grant sites permission to connect all serial ports (User)","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available serial ports.\r\n\r\nThe URLs must be valid, or the policy is ignored. Only the origin (scheme, host, and port) of the URL is considered.\r\n\r\nThis policy overrides 'DefaultSerialGuardSetting' (Control use of the Serial API), 'SerialAskForUrls' (Allow the Serial API on specific sites), 'SerialBlockedForUrls' (Block the Serial API on specific sites) and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9726f9f20f5f84a4":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist_passwordmanagerblocklistdesc","displayName":"Configure the list of domains for which the password manager UI (Save and Fill) will be disabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"97b3c12a41fde910":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastservicemajorversion4","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"97c6a555d78a9ed9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dutchnetherlands","displayName":"Dutch (Netherlands) (User)","description":"Enables the editing language Dutch (Netherlands)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dutchnetherlands_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dutchnetherlands_1","displayName":"Enabled","description":null,"helpText":null}]},"971ba00142c6b6c2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernfinland","displayName":"Sami, Northern (Finland) (User)","description":"Enables the editing language \"Sami, Northern (Finland)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernfinland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_saminorthernfinland_1","displayName":"Enabled","description":null,"helpText":null}]},"9791095f145d1270":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotusehardwareacceleration","displayName":"Do not use hardware graphics acceleration (User)","description":"This policy setting allows you to not use hardware graphics acceleration.\r\n\r\nIf you enable this policy setting, hardware graphics acceleration will not be used.\r\n\r\nIf you disable or do not configure this policy setting hardware graphics acceleration may be used.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotusehardwareacceleration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotusehardwareacceleration_1","displayName":"Enabled","description":null,"helpText":null}]},"974252946383e597":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotvalidateprintersbeforeusingthem","displayName":"Do not validate printers before using them (User)","description":"This policy setting allows you to determine whether Word, PowerPoint, or Excel validates its connection with a printer before attempting to use it in the Print tab in Backstage View.\r\n\r\nIf you enable this policy setting, Word, PowerPoint, and Excel do not validate printers before using them. If invalid data is returned from the printer, then Word, PowerPoint, and Excel still attempt to use the data, which can result in the application failing.\r\n\r\nIf you disable or do not configure this policy setting, Word, PowerPoint, and Excel validate printers before using them in the Print tab in Backstage View. If validation fails, the printer is disabled.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotvalidateprintersbeforeusingthem_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotvalidateprintersbeforeusingthem_1","displayName":"Enabled","description":null,"helpText":null}]},"9758f46a9bcafb0c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_freezedry","displayName":"Enable Smart Resume (User)","description":"If Outlook, Word, Excel, or PowerPoint shuts down unexpectedly and is restarted automatically (for example, by Document Recovery), the user is returned to a visual state similar to the state at shutdown. By default, this setting is enabled.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_freezedry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_freezedry_1","displayName":"Enabled","description":null,"helpText":null}]},"974904354099798b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences","displayName":"[Deprecated] Allow the use of additional optional connected experiences in Office (User)","description":"\r\n This policy setting allows you to control whether additional optional connected experiences are available to your users when they’re using Office.\r\n\r\n Additional optional connected experiences are offered by Microsoft directly to your users and are governed by terms other than your organization’s commercial agreement with Microsoft.\r\n\r\n The LinkedIn features of the Resume Assistant in Word or the 3D Maps feature in Excel, which uses Bing, are examples of additional optional connected experiences.\r\n\r\n Note: Even if you choose to make these additional optional connected experiences available to your users, your users will have the option to turn these additional optional connected experiences off as a group by going to File > Account > Account Privacy > Manage Settings.\r\n\r\n If you enable this policy setting, additional optional connected experiences will be available to your users.\r\n\r\n If you disable this policy setting, additional optional connected experiences won’t be available to your users.\r\n\r\n Note: Some additional optional connected experiences may be controlled by other policy settings instead of this policy setting. For more information, see the link below.\r\n\r\n If you don’t configure this policy setting, additional optional connected experiences will be available to your users.\r\n\r\n Note: If you disable the “Allow the use of connected experiences in Office” policy setting, additional optional connected experiences won’t be available to your users.\r\n\r\n For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085690\r\n ","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences_1","displayName":"Enabled","description":null,"helpText":null}]},"974f92fcbf9a17c2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey13_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"97538fdb4dc67898":{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_miscellaneous437_l_officeinsideruserexperience","displayName":"Show the option for Office Insider (User)","description":"This policy setting controls whether the option for Office Insider is shown under File > Account in an Office app, such as Word.\r\n\r\nBy showing this option, a user can choose to join or leave the Office Insider program. For more information about the Office Insider program, see https://insider.office.com.\r\n\r\nIf you enable this policy setting, the option for Office Insider is shown under File > Account.\r\n\r\nNote: if you enable this policy setting, you shouldn’t enable and configure the “Update Channel” or the “Update Path” policy setting under Computer Configuration\\Policies\\Administrative Templates\\Microsoft Office 2016 (Machine)\\Updates. If you do, those policy settings will take precedence, even though the option for Office Insider is shown.\r\n\r\nIf you disable this policy setting, the option for Office Insider is not shown under File > Account.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus, and to subscription versions of Project and Visio.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_miscellaneous437_l_officeinsideruserexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_miscellaneous437_l_officeinsideruserexperience_1","displayName":"Enabled","description":null,"helpText":null}]},"971554d36d6001b7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindppt","displayName":"Ctrl+F (Home | Editing | Find) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindppt_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindppt_1","displayName":"True","description":null,"helpText":null}]},"97b16be3e4595898":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_l_powerpointbetafilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_l_powerpointbetafilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_l_powerpointbetafilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_l_powerpointbetafilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_l_powerpointbetafilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_l_powerpointbetafilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetafiles_l_powerpointbetafilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"971ec080a591f7aa":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjopenlast","displayName":"Open last file on startup (User)","description":"Upon starting Project, automatically opens the last used project file.\r\n \r\nIf you enable this setting, the last file that the user had open automatically re-opens when they start Project.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","categoryName":"General options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjopenlast_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneralprojoptions_l_pjopenlast_1","displayName":"Enabled","description":null,"helpText":null}]},"97b9bc6e891503d6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjsaveevery","displayName":"Auto Save every (User)","description":"Specifies that you want Project to automatically save your projects periodically.\r\n\r\nIf you enable this setting, Project will save users projects at the specified interval.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dfd5d749-c68c-448f-ab3f-851c09f09df4","categoryName":"Auto Save Options","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjsaveevery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjsaveevery_1","displayName":"Enabled","description":null,"helpText":null}]},"97520b4fd8189ad0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjstatusbar","displayName":"Status Bar (User)","description":"Displays the status bar, which shows information about the progress of certain operations in Project.\r\n \r\nIf you enable this setting, the option to display the status bar is selected.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"251c6873-bf5b-4d85-8185-3c4973b6f33c","categoryName":"Show","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjstatusbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjstatusbar_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/98.json b/public/intune-definitions/98.json new file mode 100644 index 000000000000..e553792ea5c7 --- /dev/null +++ b/public/intune-definitions/98.json @@ -0,0 +1 @@ +{"9819a1473cc7dbd3":{"id":"com.apple.applicationaccess_allowcloudfreeform","displayName":"Allow Cloud Freeform","description":"If 'false', disallows iCloud Freeform services.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudfreeform_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudfreeform_true","displayName":"True","description":null,"helpText":null}]},"987294a9b3dd0024":{"id":"com.apple.directoryservice.managed_adallowmultidomainauthflag","displayName":"AD Allow Multi Domain Auth Flag","description":"If true, enables the AD Allow Multi Domain Auth key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adallowmultidomainauthflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adallowmultidomainauthflag_true","displayName":"True","description":null,"helpText":null}]},"9897b26b01d18a3f":{"id":"com.apple.extensiblesso_platformsso_authorizationgroups","displayName":"Authorization Groups","description":"The pairing of Authorization Rights to group names. The Authorization Right will be updated to use the group when used.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"983672f7b63019cc":{"id":"com.apple.security.firewall_enablefirewall","displayName":"Enable Firewall","description":"If true, enables the firewall.","helpText":null,"infoUrls":[],"categoryId":"70b5da13-9c31-4857-890d-b7eb223729c3","categoryName":"Firewall","options":[{"id":"com.apple.security.firewall_enablefirewall_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.security.firewall_enablefirewall_true","displayName":"True","description":null,"helpText":null}]},"9876805bd7293f03":{"id":"com.apple.systemconfiguration_proxies_socksenable","displayName":"SOCKS Enable","description":"If true, enable the SOCKS proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_socksenable_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_socksenable_1","displayName":"True","description":null,"helpText":null}]},"9809f539a5b04d72":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowgamesmenu","displayName":"Allow users to access the games menu (Deprecated)","description":"This policy is deprecated because it can be managed using the \"HubsSidebarEnabled\" policy.\n\nIf you enable or don't configure this policy, users can access the games menu.\n\nIf you disable this policy, users won't be able to access the games menu.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowgamesmenu_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowgamesmenu_true","displayName":"Enabled","description":null,"helpText":null}]},"98e9b81393fb5fc2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_recommended","displayName":"Allow importing of saved passwords (users can override)","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\n\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\n\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\n\nIf you don't configure this policy, no passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\n\nNote: This policy currently manages import from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"983798250636ef8a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode","description":"Overrides the last used setting for printing background graphics.\nIf you enable this setting, background graphics printing is enabled.\nIf you disable this setting, background graphics printing is disabled.\n\nPolicy options mapping:\n\n* enabled (enabled) = Enable background graphics printing mode by default\n\n* disabled (disabled) = Disable background graphics printing mode by default\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingbackgroundgraphicsdefault_enabled","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingbackgroundgraphicsdefault_disabled","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null}]},"98d616f0c819ed4d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_localsettingoverridescan_scheduletime","displayName":"Configure local setting override for the time of day to run a scheduled full scan to complete remediation","description":"This policy setting configures a local override for the configuration of the time to run a scheduled full scan to complete remediation. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-remediation-localsettingoverridescan-scheduletime"],"categoryId":"8212ba6e-101d-4ee8-8ca2-c4cd2cddba96","categoryName":"Remediation","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_localsettingoverridescan_scheduletime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_remediation_localsettingoverridescan_scheduletime_1","displayName":"Enabled","description":null,"helpText":null}]},"98aaf70348225d94":{"id":"device_vendor_msft_policy_config_admx_smartcard_allowsignatureonlykeys","displayName":"Allow signature keys valid for Logon","description":"This policy setting lets you allow signature key-based certificates to be enumerated and available for logon.\r\n\r\nIf you enable this policy setting then any certificates available on the smart card with a signature only key will be listed on the logon screen.\r\n\r\nIf you disable or do not configure this policy setting, any available smart card signature key-based certificates will not be listed on the logon screen.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-allowsignatureonlykeys"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_allowsignatureonlykeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_allowsignatureonlykeys_1","displayName":"Enabled","description":null,"helpText":null}]},"98af21a2c7703203":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup","displayName":"Common 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2016 applications.\r\nMicrosoft Office Suite 2016 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2016 applications.\r\nIf you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2016 applications will continue to be backed up.\r\nIf you disable this policy setting, certain user settings which are common between the Microsoft Office Suite 2016 applications will not be backed up. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016commonbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"98a10f305cbcfe40":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup","displayName":"OneNote 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft OneNote 2016.\r\nMicrosoft OneNote 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft OneNote 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft OneNote 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onenotebackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup_1","displayName":"Enabled","description":null,"helpText":null}]},"9860387131e9e39a":{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableupnp","displayName":"Turn off ability to configure using WCN over Ethernet (UPnP)","description":null,"helpText":"","infoUrls":[],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":[{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableupnp_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableupnp_1","displayName":"True","description":null,"helpText":null}]},"98778d4a04d3f9a7":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherdetails","displayName":"Publisher","description":"Creates a rule for a file that is signed by the software publisher. Upload the output generated by the binary file information extractor for your selected reference file.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherdetails_issuingca","displayName":"Issuing certificate authority","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherdetails_publishername","displayName":"Publisher","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherdetails_minimumversion","displayName":"Minimum version","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_publisherfilename","displayName":"File name","description":null,"helpText":null}]},"98206fab3c990089":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_global_publishing_refresh_options","displayName":"Global Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_global_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_global_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"98c4a5421efe3961":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin","displayName":"Minimum TLS version to fallback to (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin_tls1.1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null}]},"9858044bcd80f817":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\r\n\r\nSetting the policy to Enabled or leaving it unset means Google Chrome will accept web contents using the compression dictionary transport feature.\r\nSetting the policy to Disabled turns off the compression dictionary transport feature.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"98e52099577517fb":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled","displayName":"Control the new behavior for event dispatching on disabled form controls","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"98c7372d6fc64ec1":{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_devdriveattachpolicy","displayName":"Filter list","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"98ac2aa2b39aaca4":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_profilesccdunregistertimeout","displayName":"CCD Unregister Timeout (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":null},"98fd1adaf6d096db":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_profilesvhdnamepattern","displayName":"VHD Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":null},"989d0828b28f38e8":{"id":"device_vendor_msft_policy_config_internetexplorer_disableupdatecheck","displayName":"Disable Periodic Check for Internet Explorer software updates","description":"Prevents Internet Explorer from checking whether a new version of the browser is available.\n\nIf you enable this policy, it prevents Internet Explorer from checking to see whether it is the latest available browser version and notifying users if a new version is available.\n\nIf you disable this policy or do not configure it, Internet Explorer checks every 30 days by default, and then notifies users if a new version is available.\n\nThis policy is intended to help the administrator maintain version control for Internet Explorer by preventing users from being notified about new versions of the browser.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableupdatecheck"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableupdatecheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableupdatecheck_1","displayName":"Enabled","description":null,"helpText":null}]},"98b47f6c71bbfd1c":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500","displayName":"Protected Mode","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"984b1cbf929e0dc7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies","displayName":"Allow WebDriver to Override Incompatible Policies (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\n\r\nThis policy was removed in M83, because it is not necessary anymore as\r\nWebDriver is now compatible with all existing policies.\r\n\r\nThis policy allows users of the WebDriver feature to override\r\npolicies which can interfere with its operation.\r\n\r\nCurrently this policy disables 'SitePerProcess' (Enable site isolation for every site) and 'IsolateOrigins' (Enable site isolation for specific origins) policies.\r\n\r\nIf the policy is enabled, WebDriver will be able to override incomaptible\r\npolicies.\r\nIf the policy is disabled or not configured, WebDriver will not be allowed\r\nto override incompatible policies.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"9819171bf7d1e7de":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites","description":"Specify a list of sites, based on URL patterns, for which Microsoft Edge should automatically select a client certificate, if the site requests one.\r\n\r\nThe value must be an array of stringified JSON dictionaries. Each dictionary must have the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts from which client certificates the browser will automatically select. Independent of the filter, only certificates will be selected that match the server's certificate request. For example, if $FILTER has the form { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, additionally only client certificates are selected that are issued by a certificate with the CommonName $ISSUER_CN. If $FILTER contains an \"ISSUER\" and a \"SUBJECT\" section, a client certificate must satisfy both conditions to be selected. If $FILTER specifies an organization (\"O\"), a certificate must have at least one organization which matches the specified value to be selected. If $FILTER specifies an organization unit (\"OU\"), a certificate must have at least one organization unit which matches the specified value to be selected. If $FILTER is the empty dictionary {}, the selection of client certificates is not additionally restricted.\r\n\r\nIf you don't configure this policy, auto-selection isn't done for any site.\r\n\r\nExample value:\r\n\r\n{\"pattern\":\"https://www.contoso.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\", \"L\": \"certificate issuer location\", \"O\": \"certificate issuer org\", \"OU\": \"certificate issuer org unit\"}, \"SUBJECT\":{\"CN\":\"certificate subject name\", \"L\": \"certificate subject location\", \"O\": \"certificate subject org\", \"OU\": \"certificate subject org unit\"}}}","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9881a64e30c1c04a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls","displayName":"Allow images on these sites","description":"Define a list of sites, based on URL patterns, that can display images.\r\n\r\nIf you don't configure this policy, the global default value is used for all sites either from the 'DefaultImagesSetting' (Default images setting) policy (if set) or the user's personal configuration.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"98f517ec264dbb08":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls","displayName":"Allow pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that can open pop-up windows.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPopupsSetting' (Default pop-up window setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"98f33a4800818b2c":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins","displayName":"View XFA-based PDF files using IE Mode for allowed file origin.","description":"Internet Explorer (IE) mode uses the Adobe Acrobat Active-X PDF Plugin to open XFA-based PDF files. This policy will only work if the Active-X plugin is already on the user's device, it's not installed as part of this policy.\r\n\r\nIt's important to note that XFA is a legacy technology that is deprecated by its original creators. It is not an ISO standard and as such, doesn't align with the modern web architecture. Continued use poses potential risks and vulnerabilities.\r\n\r\nGiven the deprecated status of XFA technology and the lack of any investment by its creators, we strongly recommend that you start planning your transition to a more advanced HTML\\PDF form-based solutions.\r\n\r\nIn the interim, this policy provides a workaround for users to view XFA PDF in Microsoft Edge.\r\n\r\nIf you enable this policy, you can configure the list of origins from which XFA PDF files will be automatically opened in Microsoft Edge using IE Mode.\r\n\r\nIf you disable or don't configure the policy, XFA PDFs won't be considered for opening via Internet Explorer mode.\r\n\r\nFor detailed information on valid URL patterns, see - https://go.microsoft.com/fwlink/?linkid=2095322\r\n\r\nAlternatively, 'ViewXFAPDFInIEModeAllowedFileHash' (View XFA-based PDF files using IE Mode for allowed file hash.) can also be used to configure list of file hashes instead of URL origins, which will enable those files to be automatically opened in Microsoft Edge using IE Mode.\r\n\r\nExample value:\r\n\r\nhttps://contesso.sharepoint.com/accounts/\r\nhttps://contesso.sharepoint.com/transport/\r\nfile://account_forms/","helpText":"","infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"98200e3f46f34b9b":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended","displayName":"Shopping in Microsoft Edge Enabled","description":"This policy lets users compare the prices of a product they are looking at, get coupons from the website they're on, or auto-apply coupons during checkout.\r\n\r\nIf you enable or don't configure this policy, shopping features such as price comparison and coupons will be automatically applied for retail domains. Coupons for the current retailer and prices from other retailers will be fetched from a server.\r\n\r\nIf you disable this policy shopping features such as price comparison and coupons will not be automatically found for retail domains.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"98c9ea24a9ecf307":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled","displayName":"Configure Sleeping Tabs","description":"This policy setting lets you configure whether to turn on Sleeping Tabs. Sleeping Tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, Sleeping Tabs is turned on.\r\n\r\nIndividual sites may be blocked from being put to sleep by configuring the policy 'SleepingTabsBlockedForUrls' (Block Sleeping Tabs on specific sites).\r\n\r\nIf you enable this setting, Sleeping Tabs is turned on.\r\n\r\nIf you disable this setting, Sleeping Tabs is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Sleeping Tabs.","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9857f423ba97e44c":{"id":"device_vendor_msft_policy_config_msslegacy_allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers","displayName":"MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers","description":"MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-msslegacy#msslegacy-allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_msslegacy_allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers_1","displayName":"Enabled","description":null,"helpText":null}]},"98dba9629349e2ee":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_pptviewexe88","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_pptviewexe88_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_pptviewexe88_1","displayName":"True","description":null,"helpText":null}]},"98ac3aa1f5f1f051":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_localodtpath","displayName":"Location of Office Deployment Tool: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":null},"98e56731706b5652":{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_chk","displayName":"Users can only point and print to these servers:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_chk_1","displayName":"True","description":null,"helpText":null}]},"98b9b6bf1747e412":{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion","displayName":"Configure Japanese IME Version","description":"This policy allows the IT admin to configure the Microsoft Japanese IME version in the desktop. The following list shows the supported values: 0 (default) – The new Microsoft Japanese IME is on by default. Allow to control Microsoft Japanese IME version to use. 1 - The previous version of Microsoft Japanese IME is always selected. Not allowed to control Microsoft Japanese IME version to use. 2 - The new Microsoft Japanese IME is always selected. Not allowed to control Microsoft Japanese IME version to use.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#configurejapaneseimeversion"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion_0","displayName":"Allows you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is configured by default.","description":"Allows you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is configured by default.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion_1","displayName":"Does not allow you to configure which Microsoft Japanese IME version to use. The previous version of Microsoft Japanese IME is always selected.","description":"Does not allow you to configure which Microsoft Japanese IME version to use. The previous version of Microsoft Japanese IME is always selected.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion_2","displayName":"Does not allow you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is always selected.","description":"Does not allow you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is always selected.","helpText":null}]},"98e424b195044909":{"id":"device_vendor_msft_policy_config_update_ignoremoappdownloadlimit","displayName":"Ignore MO App Download Limit","description":"Specifies whether to ignore the MO download limit (allow unlimited downloading) over a cellular network for apps and their updates. If lower-level limits (for example, mobile caps) are required, those limits are controlled by external policies. WarningSetting this policy might cause devices to incur costs from MO operators.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#ignoremoappdownloadlimit"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_ignoremoappdownloadlimit_0","displayName":"Disabled","description":"Do not ignore MO download limit for apps and their updates.","helpText":null},{"id":"device_vendor_msft_policy_config_update_ignoremoappdownloadlimit_1","displayName":"Enabled","description":"Ignore MO download limit (allow unlimited downloading) for apps and their updates.","helpText":null}]},"981d22c88a910ab7":{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforfeatureupdates","displayName":"Set Policy Driven Update Source For Feature Updates","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setpolicydrivenupdatesourceforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforfeatureupdates_0","displayName":"Detect, download and deploy Feature Updates from Windows Update","description":"Detect, download and deploy Feature Updates from Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforfeatureupdates_1","displayName":"Detect, download and deploy Feature Updates from Windows Server Update Services (WSUS)","description":"Detect, download and deploy Feature Updates from Windows Server Update Services (WSUS)","helpText":null}]},"9806b015eed3e016":{"id":"device_vendor_msft_trustedcertificate_certificatefile","displayName":"Certificate file","description":null,"helpText":"","infoUrls":[],"categoryId":"dd9e4ae2-a432-4c48-a73a-52c75c3e5279","categoryName":"Trusted Certificate","options":null},"986c3706030675ed":{"id":"enrollment_autopilot_dpp_deploymenttype","displayName":"Deployment type","description":"","helpText":"","infoUrls":[],"categoryId":"47b863f6-8116-432b-9fc1-9e487fdaa203","categoryName":null,"options":{"id":"enrollment_autopilot_dpp_deploymenttype_0","displayName":"Single user","description":null,"helpText":null}},"98a536e2619ce7f8":{"id":"intelligencesettings_apps_notes_allowtranscriptionsummary","displayName":"Allow Transcription Summary","description":"If `false`, disables Notes Transcription Summary.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_apps_notes_allowtranscriptionsummary_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_apps_notes_allowtranscriptionsummary_true","displayName":"True","description":null,"helpText":null}]},"98fc9dc7a7bf8b33":{"id":"safari_privacy_permissiondefaults_generickey_keytobereplaced","displayName":"Permission Defaults","description":"The dictionary of website permission defaults. Each key in the dictionary represents a single website, or a website and its sub-domains. The dictionary values represent the permission defaults that Safari applies for each website that matches the key.\n\nSafari supports the following patterns for the website key:\n\n- A specific domain such as \"example.com\" or \"www.example.com\". The permission defaults apply to that website only.\n- A wildcard domain that uses a single \"\\*\" character as a prefix for the domain, such as \"\\*example.com\". The permission defaults apply to both the exact domain \"example.com\", and any sub-domains such as \"www.example.com\". It won't match other domains with a similar string suffix such as \"myexample.com\".\n\nWhen multiple patterns match a website, Safari uses the most precise pattern. For example, for the website \"www.example.com\", if rules \"www.example.com\" and \"*example.com\" match, Safari uses the former.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"981119607b7eae3c":{"id":"user_vendor_msft_policy_config_admx_eaime_l_donotincludenonpublishingstandardglyphinthecandidatelist","displayName":"Do not include Non-Publishing Standard Glyph in the candidate list (User)","description":"This policy setting allows you to include the Non-Publishing Standard Glyph in the candidate list when Publishing Standard Glyph for the word exists.\r\n\r\nIf you enable this policy setting, Non-Publishing Standard Glyph is not included in the candidate list when Publishing Standard Glyph for the word exists.\r\n\r\nIf you disable or do not configure this policy setting, both Publishing Standard Glyph and Non-Publishing Standard Glyph are included in the candidate list.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-donotincludenonpublishingstandardglyphinthecandidatelist"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_donotincludenonpublishingstandardglyphinthecandidatelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_donotincludenonpublishingstandardglyphinthecandidatelist_1","displayName":"Enabled","description":null,"helpText":null}]},"983b14396536ec75":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":null},"984cc7c64474dea3":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangeanimation","displayName":"Remove UI to change menu animation setting (User)","description":"This policy setting allows you to prevent users from enabling or disabling minor animations in the operating system for the movement of windows, menus, and lists.\r\n\r\nIf you enable this policy setting, the \"Use transition effects for menus and tooltips\" option in Display in Control Panel is disabled, and cannot be toggled by users.\r\n\r\nEffects, such as animation, are designed to enhance the user's experience but might be confusing or distracting to some users.\r\n\r\nIf you disable or do not configure this policy setting, users are allowed to turn on or off these minor system animations using the \"Use transition effects for menus and tooltips\" option in Display in Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nochangeanimation"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangeanimation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangeanimation_1","displayName":"Enabled","description":null,"helpText":null}]},"98537640ff9e99ae":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended","displayName":"Allow default search provider context menu search access (User)","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider will be available.\r\n\r\nThe policy value is only appled when the DefaultSearchProviderEnabled policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"98f1c68e394b79a0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended","displayName":"Show Home button on toolbar (User)","description":"Setting the policy to Enabled shows the Home button on Google Chrome's toolbar. Setting the policy to Disabled keeps the Home button from appearing.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users chooses whether to show the Home button.","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"98e5875a97b89c5f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior","displayName":"Control SafeSites adult content filtering. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior_0","displayName":"Do not filter sites for adult content","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior_1","displayName":"Filter top level sites (but not embedded iframes) for adult content","description":null,"helpText":null}]},"986b285095e0a433":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_filesystemwriteblockedforurlsdesc","displayName":"Block write access to files and directories on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"982daa4e0d0a74a9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls","displayName":"Allow access to sensors on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can access sensors like motion and light sensors.\r\n\r\nLeaving the policy unset means DefaultSensorsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nIf the same URL pattern exists in both this policy and the SensorsBlockedForUrls policy, the latter is prioritized and access to motion or light sensors will be blocked.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"98a624ed3e8344dc":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser","displayName":"Set a custom enterprise label for a managed browser (User)","description":"This policy controls a custom label used to indicate a managed browser. For managed browsers, this label will be shown in a management disclaimer on a footer on the New Tab page. The custom label will not be translated.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nExample value: Chromium","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_1","displayName":"Enabled","description":null,"helpText":null}]},"981753347f5abf6c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled","displayName":"Enable Related Website Sets (User)","description":"This policy allows to control the Related Website Sets feature enablement.\r\n\r\nThis policy overrides the FirstPartySetsEnabled policy.\r\n\r\nWhen this policy is unset or set to True, the Related Website Sets feature is enabled.\r\n\r\nWhen this policy is set to False, the Related Website Sets feature is disabled.","helpText":"","infoUrls":[],"categoryId":"ac821e49-1996-4d6c-99d4-9c3c3e4737b6","categoryName":"Related Website Sets Settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"98ec493dd0163838":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"98e37cb1f9c41e04":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_pathcolon69","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"98cf72e126c23dde":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended","displayName":"Edge Wallet E-Tree Enabled (User)","description":"The Edge Wallet E-Tree feature in Microsoft Edge allows users to plant a E-Tree for their own.\r\n\r\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\r\n\r\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9859068d6cd918fe":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays","displayName":"Specify the number of days that a site remains on the local IE mode site list (User)","description":"If the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or not configured, users will be able to tell Microsoft Edge to load specific pages in Internet Explorer mode for a limited number of days.\r\n\r\nYou can use this setting to determine how many days that configuration is remembered in the browser. After this period has elapsed, the individual page will no longer automatically load in IE mode.\r\n\r\nIf you disable the 'InternetExplorerIntegrationReloadInIEModeAllowed' policy, this policy has no effect.\r\n\r\nIf you disable or don't configure this policy, the default value of 30 days is used.\r\n\r\nIf you enable this policy, you must enter the number of days for which the sites are retained on the user's local site list in Microsoft Edge. The value can be from 0 to 90 days.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_1","displayName":"Enabled","description":null,"helpText":null}]},"983ecf307686fa29":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacebirthday","displayName":"Replace AD - Birthday (User)","description":"This policy setting allows you to customize the 16th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"birthday\" of line 16.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 16 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacebirthday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacebirthday_1","displayName":"Enabled","description":null,"helpText":null}]},"986737dc9c939d64":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_graphgallerypath","displayName":"Graph gallery path (User)","description":"Sets the path to store user-defined custom charts.","helpText":"","infoUrls":[],"categoryId":"a40e47b0-5b27-4e4d-b2ef-42f20540e812","categoryName":"Graph settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_graphgallerypath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_graphgallerypath_1","displayName":"Enabled","description":null,"helpText":null}]},"9858417dfb0ac2be":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_alwaysexpandgroupsinofficewhenrestrictingpermissionfordocume","displayName":"Always expand groups in Office when restricting permission for documents (User)","description":"This policy setting controls whether group names automatically expand to display all the members of the group when selected in the Permissions dialog box. \r\n\r\nIf you enable this policy setting, when users select a group name while applying Information Rights Management (IRM) permissions to Excel workbooks, InfoPath templates, Outlook e-mail messages, PowerPoint presentations, or Word documents in the Permissions dialog box, it will automatically expand to display all the members of the group. \r\n\r\nIf you disable or do not configure this policy setting, when users select a group name in the Permissions dialog box, the members of the group are not displayed.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_alwaysexpandgroupsinofficewhenrestrictingpermissionfordocume_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_alwaysexpandgroupsinofficewhenrestrictingpermissionfordocume_1","displayName":"Enabled","description":null,"helpText":null}]},"98b45464ecf1168a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_l_workflowcachename438","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"98e94ad4ede0bd5a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_officeconverters_l_blockopeningofprereleaseexcel","displayName":"Block opening of pre-release versions of file formats new to Excel 2016 through the Compatibility Pack for Office 2016 and Excel 2016 Converter (User)","description":"This policy setting controls whether users with the Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2016 File Formats installed can open Office Open XML files saved with pre-release versions of Excel 2016. Excel Open XML files usually have the following extensions: .xlsx, .xlsm, .xltx, .xltm, .xlam. \r\n\r\nIf you enable this policy setting, users of the Compatibility Pack will not be able to open Office Open XML files created in pre-release versions of Excel 2016.\r\n\r\nIf you disable this policy setting, users with the Compatibility Pack installed can open files saved by some pre-release versions of Excel, but not by others, which can lead to inconsistent file opening functionality.\r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled. ","helpText":"","infoUrls":[],"categoryId":"8b0e5a63-c309-430b-8521-7bd21e715b90","categoryName":"Office 2016 Converters","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_officeconverters_l_blockopeningofprereleaseexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_officeconverters_l_blockopeningofprereleaseexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"98e691a4ffd88e6d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc18_l_pathcolon18","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"989d7ec89355ff9a":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_embeddedfilesblockedextensions","displayName":"Embedded Files Blocked Extensions (User)","description":"To disable the ability of the users in your organization from being able to open a file attachment of a specific file type from a Microsoft OneNote page, add the extensions you want to disable using this format: \".ext1;.ext2;\" If you want to disable the opening of any attachment from a OneNote page, see the Disable embedded files policy. You cannot block embedded audio and video recordings (WMA & WMV) with this policy instead refer to the Disable embedded files policy.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_embeddedfilesblockedextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_embeddedfilesblockedextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"9830d5a34d4c39ce":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_setuncintervaltopollforchangesonfileservers_l_setuncintervaltopollforchangesonfileserversspinid","displayName":"Interval to poll the server (seconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":null},"98b1c6fb052c9333":{"id":"user_vendor_msft_policy_config_onent16v5~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_onenotetextprediction","displayName":"OneNote text prediction (User)","description":"\r\nThis policy setting controls whether users will see and be able to accept text predictions when writing notes in English in OneNote.\r\n\r\nIf you enable or don't configure this policy setting, users will see and be able to accept predicted text by using the Tab key or right arrow key while writing their notes. Or they can simply keep typing to ignore the predicted text.\r\n\r\nIf you disable this policy setting, users will not be able to see or accept text predictions while writing notes.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v5~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_onenotetextprediction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v5~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_onenotetextprediction_1","displayName":"Enabled","description":null,"helpText":null}]},"9802291ddf17a0e5":{"id":"user_vendor_msft_policy_config_outlk16~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablepreviewplace","displayName":"Disable Preview Place. (User)","description":"\r\n This policy setting determines whether the Preview Place feature is allowed. Enabling this setting will block the Preview Place feature from being available.\r\n Users will no longer be able to preview and provide feedback on upcoming changes in Outlook.\r\n\tNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablepreviewplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablepreviewplace_1","displayName":"Enabled","description":null,"helpText":null}]},"98f8a0ea611822f7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_encryptallemailmessages","displayName":"Encrypt all e-mail messages (User)","description":"This policy setting allows you to require that all e-mail messages be encrypted when sent from Outlook.\r\n\r\nIf you enable this policy setting, the Encrypt button is automatically selected on all outgoing e-mail messages, meeting invitations, and other Outlook items. Users must select an appropriate certificate to encrypt the message for the intended recipient.\r\n\r\nIf you disable or do not configure this policy setting, outgoing e-mail messages are not encrypted. If you disable this policy setting, users will not be able to change the configuration.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_encryptallemailmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_encryptallemailmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"98d2a6dc431db430":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2","displayName":"Configure Outlook object model prompt when accessing an address book (User)","description":"This policy setting controls what happens when an untrusted program attempts to gain access to an Address Book using the Outlook object model. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to programmatically access an Address Book using the Outlook object model:\r\n\r\n- Prompt user - Users are prompted to approve every access attempt. \r\n- Automatically approve - Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended. \r\n- Automatically deny - Outlook will automatically deny programmatic access requests from any program.\r\n- Prompt user based on computer security - Outlook will rely on the setting in the ''Programmatic Access'' section of the Trust Center. This is the default behavior.\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to access the address book programmatically, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center. ","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressbook_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"98f71c3a2d136e6e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyserverprincipalname","displayName":"Only connect if Proxy Server certificate has this principal name (User)","description":"This policy setting specifies the required certificate principal name for the RPC proxy server for Outlook Anywhere. \r\n\r\nIf you enable this policy setting, you must enter a server principal name. You must precede the server name with \"msstd:\" for this configuration to work. For example, you would enter the following text if the server principal name is mail.fourthcoffee.com: \r\n\r\nmsstd:mail.fourthcoffee.com \r\n\r\nIf you disable or do not configure this setting, Outlook uses the certificate principal name that is specified in Autodiscover.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyserverprincipalname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyserverprincipalname_1","displayName":"Enabled","description":null,"helpText":null}]},"98b213115743bea5":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_enablerecordingribbontab","displayName":"Turn on recording ribbon tab (User)","description":"This policy setting allows you to control the initial recording ribbon tab in PowerPoint. By default, the tab is not visible.\r\n\r\nIf you enable this policy setting, recording ribbon tab is visible. But, the user can choose to turn off the feature manually in the UI.\r\n\r\nIf you disable or don’t configure this policy setting, recording ribbon tab is not visible. The user can choose to turn on the feature manually in the UI.\r\n ","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_enablerecordingribbontab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_enablerecordingribbontab_1","displayName":"Enabled","description":null,"helpText":null}]},"989f62b937b31f63":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingmeaningfulorderofobjectsonslides","displayName":"Stop checking to ensure a meaningful order of objects on slides (User)","description":"This policy setting prevents the Accessibility Checker from checking if a slide has non-placeholder objects which might be read back out of order.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking if a slide has non-placeholder objects which might be read back out of order.\r\n\r\nIf you disable or do not configure this policy setting, slides will be checked for objects which might be read back out of order and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingmeaningfulorderofobjectsonslides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingmeaningfulorderofobjectsonslides_1","displayName":"Enabled","description":null,"helpText":null}]},"98096c1177180360":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_descriptioncolon38","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"98ce5447291f9127":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjactualcostscalc","displayName":"Actual costs are always calculated by Microsoft Project (User)","description":"Specifies that Project calculates actual costs automatically, based upon resource rates, per-use resource costs, and fixed task costs.\r\n\r\nIf you enable this setting, Project will automatically calculate actual costs.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjactualcostscalc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjactualcostscalc_1","displayName":"Enabled","description":null,"helpText":null}]},"98ce987891d801ce":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultotime_l_pjdefaultotime7","displayName":"Default overtime rate (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0a6bc3ed-c4cd-4928-bcbf-247369a51515","categoryName":"General options for 'Project1'","options":null},"987e251bb89a2b55":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":null},"9807bb2e457e716d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_personaltemplatespath","displayName":"Personal templates path for Visio (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"985c212b9d9bb54b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15","displayName":"Trusted Location #15 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15_1","displayName":"Enabled","description":null,"helpText":null}]},"9805f49d5af21db8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_convertcommonterms","displayName":"Convert common terms (User)","description":"Checks/unchecks the corresponding UI option in the \"Chinese Conversion\" dialog, which found under Review tab | Convert with Options button. This may only be visible when Chinese is enabled as an editing language.","helpText":"","infoUrls":[],"categoryId":"7bee4dea-82a4-4a03-b903-654b374819b1","categoryName":"Chinese Conversion | Convert with Options","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_convertcommonterms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_convertcommonterms_1","displayName":"Enabled","description":null,"helpText":null}]},"98aad2e827f54384":{"id":"vendor_msft_defender_configuration_tamperprotection","displayName":"TamperProtection","description":"Enable tamper protection to prevent Microsoft Defender being disabled.\r\nNot Configured state is default and will have no impact.\r\nEnabled will enable the Tamper Protection restrictions.\r\nDisabled will disable the Tamper Protection restrictions.\r\nWhen the Enabled or Disabled state exists on a client, deploying Not configured will have no impact on the setting. To change the state from currently Enabled/Disabled, you must deploy the opposite setting to have effect.","helpText":null,"infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"vendor_msft_defender_configuration_tamperprotection_0","displayName":"Not configured","description":null,"helpText":null},{"id":"vendor_msft_defender_configuration_tamperprotection_1","displayName":"Enabled","description":null,"helpText":null},{"id":"vendor_msft_defender_configuration_tamperprotection_2","displayName":"Disabled","description":null,"helpText":null}]},"98edf0bab6abb2f4":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_protocol","displayName":"Protocol","description":"0-255 number representing the ip protocol (TCP = 6, UDP = 17). If not specified the default is All.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/99.json b/public/intune-definitions/99.json new file mode 100644 index 000000000000..55feecc7dcaa --- /dev/null +++ b/public/intune-definitions/99.json @@ -0,0 +1 @@ +{"993ebe4f7a8775b1":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge","displayName":"Target version override","description":"When this policy is enabled, and auto-update is enabled, Microsoft Edge will be updated to the version specified by this policy value.\r\n\r\nThe policy value must be a specific Microsoft Edge version, e.g. 83.0.499.12.\r\n\r\nIf a device has newer version of Microsoft Edge than the value specified, Microsoft Edge will remain on the newer version and not downgrade to the specified version.\r\n\r\nIf the specified version does not exist, or is improperly formatted, then Microsoft Edge will remain on its current version and not update to future versions automatically.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"998f55d83a99497e":{"id":"ade_maximumsecondsafterscreenlockbeofrepasswordisrequired","displayName":"Maximum seconds after screen lock before password is required","description":"Available for Shared iPads. Maximum seconds after screen lock before password is required (0-14,400 seconds). If a device has a passcode, a change to a larger value doesn’t take effect until the user logs out or removes the passcode.","helpText":"Enter value","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":null},"995c80a60e2e9117":{"id":"com.android.devicerestrictionpolicy.userinitiatedaddesimsettings","displayName":"Block users from adding eSIM profiles","description":"If 'True', users cannot add eSIM profiles to the device. If 'False', Intune doesn't change or update this setting. By default, the OS allows users to add eSIM profiles. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.userinitiatedaddesimsettings_false","displayName":"False","description":"The user is allowed to add eSIM profiles on the device.","helpText":null},{"id":"com.android.devicerestrictionpolicy.userinitiatedaddesimsettings_true","displayName":"True","description":"The user is not allowed to add eSIM profiles on the device.","helpText":null}]},"99291f7cf052ebc7":{"id":"com.apple.applicationaccess_enforcedsoftwareupdatenonosdeferredinstalldelay","displayName":"Enforced Software Update Non OS Deferred Install Delay (Deprecated)","description":"This restriction allows the admin to set how many days to delay an app software update on the device. When this restriction is in place the user sees a non-OS software update only after the specified delay after the release of the software. This value controls the delay for Force Delayed App Software Updates. Available in macOS 11.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"99fb3995d242c8b1":{"id":"com.apple.associated-domains_configuration_item_applicationidentifier","displayName":"Application Identifier","description":"The app identifier to associate the domains with.","helpText":null,"infoUrls":[],"categoryId":"8efd284f-5a56-4da8-8821-f51984ff954d","categoryName":"Associated Domains","options":null},"99ff2a5278bc18d4":{"id":"com.apple.directoryservice.managed_password","displayName":"Password","description":"The password of the account for the domain.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"992f7dcc7ce99547":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_secondsperday","displayName":"Seconds Per Day","description":"The allowance for that day, in seconds. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"998955a6e08ec3c0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloaddirectory","displayName":"Set download directory","description":"Configures the directory to use when downloading files.\n\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user specified one or chose to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\n\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\n\nIf you set an invalid path, Microsoft Edge defaults to the user's default download directory.\n\nIf the folder specified by the path doesn't exist, the download triggers a prompt that asks the user where they want to save their download.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"995d8ffdc312e637":{"id":"com.microsoft.edge.mamedgeappconfigsettings.immersivereaderpicturedictionaryenabled","displayName":"Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (Obsolete)","description":"This Policy is obsoleted because Picture Dictionary is deprecated from Edge as of Sept, 2023. This policy won't work in Microsoft Edge Version 127. Enables the Picture Dictionary feature within Immersive Reader in Microsoft Edge.\nThis feature helps in reading comprehension by letting a user to click on any single word and see an illustration related to the meaning.\n\nIf you enable this policy or don't configure it, the Picture Dictionary option shows up within Immersive Reader.\nIf you disable this policy, users can't access the Picture Dictionary feature within Immersive Reader.","helpText":null,"infoUrls":[],"categoryId":"8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","categoryName":"Immersive Reader settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.immersivereaderpicturedictionaryenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.immersivereaderpicturedictionaryenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"994636922fb9e6ac":{"id":"device_vendor_msft_keyboardfilter_blockedkeys","displayName":"Blocked Keys (Windows Insiders only)","description":"Get operations return a comma-delimited string of keys and key combinations that are currently blocked. Returned list does not include scancodes that have been blocked. Use BlockedScancodes to retrieve blocked scancodes and modifier+scancode combinations.\nReplace operations expect a comma-delimited string of keys or modifier(s)+key values and sets them as blocked keys. Invalid keys result in an error. All keys are case-insensitive; to block upper-case letters, specify shift+letter. To block comma, space, tab, or other special characters, specify the key name. Examples of valid key names and modifier names can be found here: https://learn.microsoft.com/en-us/windows/configuration/keyboard-filter/keyboardfilter-key-names \n\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/KeyboardFilter-csp/"],"categoryId":"717b634f-72a6-44f6-92c5-e1397bb10f40","categoryName":"Keyboard Filter","options":null},"99db6926cdc4568c":{"id":"device_vendor_msft_policy_config_admx_filesys_enablepagefileencryption","displayName":"Enable NTFS pagefile encryption","description":"Encrypting the page file prevents malicious users from reading data that has been paged to disk, but also adds processing overhead for filesystem operations. Enabling this setting will cause the page files to be encrypted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filesys#admx-filesys-enablepagefileencryption"],"categoryId":"bb54b081-5004-4f05-a46c-f5b948f57b82","categoryName":"NTFS","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_enablepagefileencryption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_enablepagefileencryption_1","displayName":"Enabled","description":null,"helpText":null}]},"99a05060261a2bef":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_2_lbl_customgoofflineactionslist","displayName":"Customize actions:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"99943b8ed93096f7":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher","displayName":"Microsoft Publisher 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Publisher 2013.\r\nBy default, the user settings of Microsoft Publisher 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Publisher 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Publisher 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013publisher"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher_1","displayName":"Enabled","description":null,"helpText":null}]},"999c47074519df2d":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowreestablishmentretries_streaming_reestablishment_retries_prompt","displayName":"Reestablishment Retries:","description":"","helpText":"","infoUrls":[],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":null},"994595ebe1902c19":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist","displayName":"Allow merging list policies from different sources","description":"Setting the policy allows merging of selected policies when they come from different sources, with the same scopes and level.\r\n\r\nIf a policy is in the list and there's conflict between sources with:\r\n\r\n* The same scopes and level: The values merge into a new policy list.\r\n\r\n* Different scopes or level: The policy with the highest priority applies.\r\n\r\nIf a policy isn't in the list and there's conflict between sources, scopes, or level, the policy with the highest priority applies.\r\n\r\nExample value:\r\n\r\nExtensionInstallAllowlist\r\nExtensionInstallBlocklist","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_1","displayName":"Enabled","description":null,"helpText":null}]},"992cd780d8035f96":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_totalmemorylimitmb","displayName":"Set memory limit for Chrome instances: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"996aebe586c4f72c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode","displayName":"Choose how to specify proxy server settings","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_1","displayName":"Enabled","description":null,"helpText":null}]},"992ac47ad1b50c92":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominramallowedtopeer","displayName":"DO Min RAM Allowed To Peer","description":"Specifies the minimum total RAM size in GB required to use P2P.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominramallowedtopeer"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"992c922325c3a327":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_odfcccdlocations","displayName":"CCD Locations (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":null},"99e6c4b3acae9208":{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols","displayName":"Turn off blocking of outdated ActiveX controls for Internet Explorer","description":"This policy setting determines whether Internet Explorer blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.\n\nIf you enable this policy setting, Internet Explorer stops blocking outdated ActiveX controls.\n\nIf you disable or don't configure this policy setting, Internet Explorer continues to block specific outdated ActiveX controls.\n\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotblockoutdatedactivexcontrols"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"99fe9a339d9b70c1":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_renameguestaccount","displayName":"Accounts Rename Guest Account","description":"Accounts: Rename guest account This security setting determines whether a different account name is associated with the security identifier (SID) for the account \"Guest.\" Renaming the well-known Guest account makes it slightly more difficult for unauthorized persons to guess this user name and password combination. Default: Guest.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_renameguestaccount"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"99b7694dd4b80f1f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings","displayName":"Proxy settings","description":"Configures the proxy settings for Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge ignores all proxy-related options specified from the command line.\r\n\r\nIf you don't configure this policy, users can choose their own proxy settings.\r\n\r\nThis policy overrides the following individual policies:\r\n\r\n'ProxyMode' (Configure proxy server settings)\r\n'ProxyPacUrl' (Set the proxy .pac file URL)\r\n'ProxyServer' (Configure address or URL of proxy server)\r\n'ProxyBypassList' (Configure proxy bypass rules)\r\n\r\nThe ProxyMode field lets you specify the proxy server used by Microsoft Edge and prevents users from changing proxy settings.\r\n\r\nThe ProxyPacUrl field is a URL to a proxy .pac file.\r\n\r\nThe ProxyServer field is a URL for the proxy server.\r\n\r\nThe ProxyBypassList field is a list of proxy hosts that Microsoft Edge bypasses.\r\n\r\nIf you choose the 'direct' value as 'ProxyMode', a proxy is never used and all other fields are ignored.\r\n\r\nIf you choose the 'system' value as 'ProxyMode', the systems's proxy is used and all other fields are ignored.\r\n\r\nIf you choose the 'auto_detect' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'fixed_server' value as 'ProxyMode', the 'ProxyServer' and 'ProxyBypassList' fields are used.\r\n\r\nIf you choose the 'pac_script' value as 'ProxyMode', the 'ProxyPacUrl' and 'ProxyBypassList' fields are used.\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"direct\", \r\n \"ProxyPacUrl\": \"https://internal.site/example.pac\", \r\n \"ProxyServer\": \"123.123.123.123:8080\", \r\n \"ProxyBypassList\": \"https://www.example1.com,https://www.example2.com,https://internalsite/\"\r\n}","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"99a7bae7f21fd9ec":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates.","description":"Setting the policy to All (0) or leaving it unset lets users edit trust settings for all CA certificates, remove user-imported certificates, and import certificates using Certificate Manager. Setting the policy to UserOnly (1) lets users manage only user-imported certificates, but not change trust settings of built-in certificates. Setting it to None (2) lets users view (not manage) CA certificates.\r\n\r\nPolicy options mapping:\r\n\r\n* All (0) = Allow users to manage all certificates\r\n\r\n* UserOnly (1) = Allow users to manage user certificates\r\n\r\n* None (2) = Disallow users from managing certificates\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"9952f69c25f8ddbd":{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel","displayName":"MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)","description":"MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-msslegacy#msslegacy-ipsourceroutingprotectionlevel"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"99ef3a52966e700e":{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_sharedcontentdeleteconfirmation","displayName":"Prompt user to confirm when they delete shared content","description":"When local synced files are deleted, which multiple users have access, a dialog appears informing the user that other users will no longer have access to that content, and asking them to confirm the action before OneDrive propagates deletes online. After confirming, deletes of other shared content for a short period of time do not cause additional confirmations. Other content continues to sync.\r\n\r\nEnable this setting to prevent users from hiding the confirmation dialog. Each time the user deletes shared content, their confirmation is required before the item is deleted for everyone online.\r\n\r\nDisable this setting to not show the delete confirmation message. Deletes will immediately be made in the cloud.\r\n\r\nDo not configure this setting so users can choose to hide the warning, with the effects mentioned above.\r\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_sharedcontentdeleteconfirmation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_sharedcontentdeleteconfirmation_1","displayName":"Enabled","description":null,"helpText":null}]},"99f78f3b765b3c86":{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_client","displayName":"Allow unencrypted traffic","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network.\n\nIf you enable this policy setting, the WinRM client sends and receives unencrypted messages over the network.\n\nIf you disable or do not configure this policy setting, the WinRM client sends or receives only encrypted messages over the network.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowunencryptedtraffic-client"],"categoryId":"0f6d725e-2c2d-4926-8e78-3d2d5867eef5","categoryName":"Win RM Client","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_client_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_client_1","displayName":"Enabled","description":null,"helpText":null}]},"9948bff4093e2826":{"id":"device_vendor_msft_policy_config_system_allowdevicenameindiagnosticdata","displayName":"Allow device name to be sent in Windows diagnostic data","description":"This policy allows the device name to be sent to Microsoft as part of Windows diagnostic data. If you disable or do not configure this policy setting, then device name will not be sent to Microsoft as part of Windows diagnostic data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowdevicenameindiagnosticdata"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowdevicenameindiagnosticdata_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowdevicenameindiagnosticdata_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"99d59487e4a90823":{"id":"device_vendor_msft_policy_config_wifi_allowwifi","displayName":"Allow Wi Fi","description":"This policy has been deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowwifi"],"categoryId":"0a803a48-789a-48b0-b928-e52d56ab17f1","categoryName":"Wi-Fi Settings","options":[{"id":"device_vendor_msft_policy_config_wifi_allowwifi_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowwifi_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"997e930b356208c7":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion","displayName":"Inclusion list for high risk file types (User)","description":"This policy setting allows you to configure the list of high-risk file types. If the file attachment is in the list of high-risk file types and is from the restricted zone, Windows blocks the user from accessing the file. If the file is from the Internet zone, Windows prompts the user before accessing the file. This inclusion list takes precedence over the medium-risk and low-risk inclusion lists (where an extension is listed in more than one inclusion list).\r\n\r\nIf you enable this policy setting, you can create a custom list of high-risk file types.\r\n\r\nIf you disable this policy setting, Windows uses its built-in list of file types that pose a high risk.\r\n\r\nIf you do not configure this policy setting, Windows uses its built-in list of high-risk file types.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-sethighriskinclusion"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion_1","displayName":"Enabled","description":null,"helpText":null}]},"99e3dec323b90d99":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nosoundschemeui","displayName":"Prevent changing sounds (User)","description":"Prevents users from changing the sound scheme.\r\n\r\nBy default, users can use the Sounds tab in the Sound Control Panel to add, remove, or change the system Sound Scheme.\r\n\r\nIf you enable this setting, none of the Sound Scheme settings can be changed by the user.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nosoundschemeui"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nosoundschemeui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nosoundschemeui_1","displayName":"Enabled","description":null,"helpText":null}]},"99f400a907348d46":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title","displayName":"Add/Delete items (User)","description":"Adds and deletes specified Web content items.\r\n\r\nYou can use the \"Add\" box in this setting to add particular Web-based items or shortcuts to users' desktops. Users can close or delete the items (if settings allow), but the items are added again each time the setting is refreshed.\r\n\r\nYou can also use this setting to delete particular Web-based items from users' desktops. Users can add the item again (if settings allow), but the item is deleted each time the setting is refreshed.\r\n\r\nNote: Removing an item from the \"Add\" list for this setting is not the same as deleting it. Items that are removed from the \"Add\" list are not removed from the desktop. They are simply not added again.\r\n\r\nNote: For this setting to take affect, you must log off and log on to the system.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-admincomponents-title"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_1","displayName":"Enabled","description":null,"helpText":null}]},"9941e932178547a2":{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffhighlightmisspelledwords","displayName":"Turn off highlight misspelled words (User)","description":"\r\n This policy turns off the highlight misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The highlight misspelled words option controls whether or next spelling errors in typed text will be highlighted.\r\n\r\n If the policy is Enabled, then the option will be locked to not highlight misspelled words.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffhighlightmisspelledwords"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffhighlightmisspelledwords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffhighlightmisspelledwords_1","displayName":"Enabled","description":null,"helpText":null}]},"991987afa4f99f1a":{"id":"user_vendor_msft_policy_config_admx_startmenu_greymsiads","displayName":"Gray unavailable Windows Installer programs Start Menu shortcuts (User)","description":"Displays Start menu shortcuts to partially installed programs in gray text.\r\n\r\nThis setting makes it easier for users to distinguish between programs that are fully installed and those that are only partially installed.\r\n\r\nPartially installed programs include those that a system administrator assigns using Windows Installer and those that users have configured for full installation upon first use.\r\n\r\nIf you disable this setting or do not configure it, all Start menu shortcuts appear as black text.\r\n\r\nNote: Enabling this setting can make the Start menu slow to open.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-greymsiads"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_greymsiads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_greymsiads_1","displayName":"Enabled","description":null,"helpText":null}]},"99ca5d89f463309a":{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnails","displayName":"Turn off the display of thumbnails and only display icons. (User)","description":"This policy setting allows you to configure how File Explorer displays thumbnail images or icons on the local computer.\r\n\r\nFile Explorer displays thumbnail images by default. \r\n\r\nIf you enable this policy setting, File Explorer displays only icons and never displays thumbnail images.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer displays only thumbnail images.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-thumbnails#admx-thumbnails-disablethumbnails"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnails_1","displayName":"Enabled","description":null,"helpText":null}]},"99fc83169dc56512":{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_autoprovision_chk","displayName":"Force automatic setup (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"87667b72-85ce-48c2-8023-e6db7f5fe739","categoryName":"Work Folders","options":[{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_autoprovision_chk_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_autoprovision_chk_1","displayName":"True","description":null,"helpText":null}]},"99a4e778691f5e74":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled","displayName":"Enable Window Occlusion (User)","description":"Enables window occlusion in Google Chrome.\r\n\r\nIf you enable this setting, to reduce CPU and power consumption Google Chrome will detect when a window is covered by other windows, and will suspend work painting pixels.\r\n\r\nIf you disable this setting Google Chrome will not detect when a window is covered by other windows.\r\n\r\nIf this policy is left not set, occlusion detection will be enabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"99c9ba9289bc94ab":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_insecurecontentblockedforurlsdesc","displayName":"Block insecure content on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"99b0e55b32d71788":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode","displayName":"Choose how to specify proxy server settings (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: direct","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_1","displayName":"Enabled","description":null,"helpText":null}]},"9975062f38d6434e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled","displayName":"Use the legacy CORS implementation rather than new CORS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"99f1c0b3ba267aec":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist","displayName":"Always render the following URL patterns in Google Chrome Frame (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_1","displayName":"Enabled","description":null,"helpText":null}]},"9973aeddc8b5f9d5":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},"995e348af15be60a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb","displayName":"Cipher Feedback (CFB)","description":null,"helpText":null}]},"99d3d7d611a25df2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"998132bf1404dc24":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders20","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders20_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders20_1","displayName":"True","description":null,"helpText":null}]},"99557ab20da0f007":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_descriptioncolon67","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"99c80982c1b09f73":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallownetframeworkreliantcomponents"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"99a20f55d08b2208":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets","displayName":"Scripting of Java applets (User)","description":"This policy setting allows you to manage whether applets are exposed to scripts within the zone.\n\nIf you enable this policy setting, scripts can access applets automatically without user intervention.\n\nIf you select Prompt in the drop-down box, users are queried to choose whether to allow scripts to access applets.\n\nIf you disable this policy setting, scripts are prevented from accessing applets.\n\nIf you do not configure this policy setting, scripts are prevented from accessing applets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonescriptingofjavaapplets"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_1","displayName":"Enabled","description":null,"helpText":null}]},"99674168c8d75cd5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc","displayName":"Block images on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"99a95d16f3ee112a":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled","displayName":"Enable Workspaces (User)","description":"Microsoft Edge Workspaces helps improve productivity for users in your organization.\r\n\r\nIf you enable this policy, users will be able to access the Microsoft Edge Workspaces feature.\r\nIf you disable or don't configure this policy, users will not be able to access the Microsoft Edge Workspaces feature.\r\n\r\nTo learn more about the feature, see https://go.microsoft.com/fwlink/?linkid=2209950","helpText":"","infoUrls":[],"categoryId":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","categoryName":"Edge Workspaces settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"99fbfe5c55494049":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled","displayName":"Control the behavior for the cancel dialog produced by the beforeunload event (User)","description":"This policy provides a temporary opt-out for two related fixes to the behavior of the confirmation dialog that’s shown by the beforeunload event.\r\n\r\nWhen this policy is Enabled, the new (correct) behavior will be used.\r\nWhen this policy is Disabled, the old (legacy) behavior will be used.\r\nWhen this policy is left not set, the default behavior will be used.\r\nNote: This policy is a temporary workaround and will be removed in a future release.\r\n\r\nNew and correct behavior: In `beforeunload`, calling `event.preventDefault()` will trigger the confirmation dialog. Setting `event.returnValue` to the empty string won’t trigger the confirmation dialog.\r\n\r\nOld and legacy behavior: In `beforeunload`, calling `event.preventDefault()` won’t trigger the confirmation dialog. Setting `event.returnValue` to the empty string will trigger the confirmation dialog.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"99ad14cb2a5d6607":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed","displayName":"Allow Pin to taskbar wizard (User)","description":"Microsoft Edge uses the Pin to taskbar wizard to help users pin suggested sites to the taskbar. The Pin to taskbar wizard feature is enabled by default and accessible to the user through the Settings and more menu.\r\n\r\nIf you enable this policy or don't configure it, users can call the Pin to taskbar wizard from the Settings and More menu. The wizard can also be called via a protocol launch.\r\n\r\nIf you disable this policy, the Pin to taskbar wizard is disabled in the menu and cannot be called via a protocol launch.\r\n\r\nUser settings to enable or disable the Pin to taskbar wizard aren't available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"99ac5055ef46b698":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled","displayName":"Enable travel assistance (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy is obsolete as the feature is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy. It doesn't work in Microsoft Edge after version 105.\r\nConfigure this policy to allow/disallow travel assistance.\r\n\r\nThe travel assistance feature gives helpful and relevant information to a user who performs Travel related task within the browser. This feature provides trusted and validated suggestions / information to the users from across sources gathered by Microsoft.\r\n\r\nIf you enable or don't configure this setting, travel assistance will be enabled for the users when they are performing travel related tasks.\r\n\r\nIf you disable this setting, travel assistance will be disabled and users will not be able to see any travel related recommendations.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9972621db27b0d18":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction","displayName":"Enable or disable the User-Agent Reduction (User)","description":"The User-Agent HTTP request header is scheduled to be reduced. To facilitate testing and compatibility, this policy can enable the reduction feature for all websites, or disable the ability for origin trials, or field trials to enable the feature.\r\n\r\nIf you don't configure this policy or set it to Default, User-Agent will be controlled by experimentation.\r\n\r\nSet this policy to 'ForceEnabled' to force the reduced version of the User-Agent request header.\r\n\r\nSet this policy to 'ForceDisabled' to force the full version of the User-Agent request header.\r\n\r\nTo learn more about the User-Agent string, read here:\r\n\r\nhttps://docs.microsoft.com/en-us/microsoft-edge/web-platform/user-agent-guidance.\r\n\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = User-Agent reduction will be controllable via Experimentation\r\n\r\n* ForceDisabled (1) = User-Agent reduction diabled, and not enabled by Experimentation\r\n\r\n* ForceEnabled (2) = User-Agent reduction will be enabled for all origins\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_1","displayName":"Enabled","description":null,"helpText":null}]},"9980e3b73016ccf8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02","displayName":"Configure presentation service in PowerPoint and Word 3 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_1","displayName":"Enabled","description":null,"helpText":null}]},"999a00565aa692e2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy2_l_placesbarpath212","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"990c8b214812db86":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_alsatian","displayName":"Alsatian (User)","description":"Enables the editing language Alsatian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_alsatian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_alsatian_1","displayName":"Enabled","description":null,"helpText":null}]},"99ecc1a8a07e55e4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_estonian","displayName":"Estonian (User)","description":"Enables the editing language Estonian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_estonian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_estonian_1","displayName":"Enabled","description":null,"helpText":null}]},"99ccc0dd7e113db0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10","displayName":"Workflow Cache 10 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_1","displayName":"Enabled","description":null,"helpText":null}]},"992f6f318fe2b0f9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent","displayName":"[Deprecated] Allow the use of connected experiences in Office that download online content (User)","description":"\r\n This policy setting allows you to control whether connected experiences that download online content are available to your users when they’re using Office.\r\n\r\n Office templates and PowerPoint QuickStarter are examples of connected experiences that download online content.\r\n\r\n If you enable this policy setting, connected experiences that download online content will be available to your users.\r\n\r\n If you disable this policy setting, connected experiences that download online content won’t be available to your users.\r\n\r\n If you don’t configure this policy setting, connected experiences that download online content will be available to your users.\r\n\r\n Note: If you disable the “Allow the use of connected experiences in Office” policy setting, connected experiences that download online content won’t be available to your users.\r\n\r\n For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085688\r\n ","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent_1","displayName":"Enabled","description":null,"helpText":null}]},"9980f91b2409526b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc19_l_pathcolon19","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"9920273f355ff021":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_suggestfrommaindictionaryonly","displayName":"Suggest from main dictionary only (User)","description":"Allows users to select words from main lexicon only.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_suggestfrommaindictionaryonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_suggestfrommaindictionaryonly_1","displayName":"Enabled","description":null,"helpText":null}]},"991a35ce0665f530":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_attachembeddedfilestotheemail","displayName":"Attach embedded files to the email message as separate files (User)","description":"This policy setting allows you to configure the \"Attach embedded files to the email message as separate file\" option found under File tab | Options | Advanced | E-mail sent from OneNote.\r\n\r\nIf you enable or do not configure this policy setting, embedded files are attached to the email message as separate files.\r\n\r\nIf you disable this policy setting, embedded files are not attached to the email message as separate files.","helpText":"","infoUrls":[],"categoryId":"e4e72b9b-db0e-4a97-9d90-a21d87a4d9bf","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_attachembeddedfilestotheemail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_attachembeddedfilestotheemail_1","displayName":"Enabled","description":null,"helpText":null}]},"99f62345597668ae":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_addpropertiestoattachmentstoenablereplywithchanges_l_addpropertiestoattachmentstoenablereplywithchanges","displayName":"Add properties to attachments to enable Reply with Changes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_addpropertiestoattachmentstoenablereplywithchanges_l_addpropertiestoattachmentstoenablereplywithchanges_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_addpropertiestoattachmentstoenablereplywithchanges_l_addpropertiestoattachmentstoenablereplywithchanges_1","displayName":"True","description":null,"helpText":null}]},"99b7e5db6ad83250":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_journalfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage56","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_journalfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage56_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_journalfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage56_1","displayName":"True","description":null,"helpText":null}]},"99a71e2823cf9463":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_requestdeliveryrcptforallmsgsausersendsexchangeonly","displayName":"Request delivery rcpt for all msgs a user sends (Exchange only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","categoryName":"Tracking Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_requestdeliveryrcptforallmsgsausersendsexchangeonly_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_requestdeliveryrcptforallmsgsausersendsexchangeonly_1","displayName":"True","description":null,"helpText":null}]},"99990fd16e8f529d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_definecustomlabelforsharepointstore","displayName":"Define custom label for SharePoint store (User)","description":"You can use this setting to define a custom label for the SharePoint Lists PST and most other places where the term \"SharePoint\" is used in Outlook. (Setting this value replaces the word \"SharePoint\" in Outlook strings with the value you specify.) A custom label might be particularly useful when deploying a third-party server that supports the same Microsoft SharePoint Foundation Web services Outlook uses for synchronization.","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_definecustomlabelforsharepointstore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_definecustomlabelforsharepointstore_1","displayName":"Enabled","description":null,"helpText":null}]},"99d63908971546cf":{"id":"user_vendor_msft_policy_config_outlk16v3~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preferprovidedemailinautodiscoverauthprompts","displayName":"Prefer the provided account email in AutoDiscover auth prompts. (User)","description":"If set, this policy setting governs the displayed email in auth prompts related to AutoDiscover.\r\n\r\n Default (0): Prefers the account UPN, when available.\r\n\r\n If you enable this setting, then AutoDiscover auth prompts will prefer the provided account email (can be either SMTP or UPN depending on which was configured).","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v3~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preferprovidedemailinautodiscoverauthprompts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v3~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preferprovidedemailinautodiscoverauthprompts_1","displayName":"Enabled","description":null,"helpText":null}]},"997f906454f5a701":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_app_servicename","displayName":"Service Name","description":"Windows service short names are used in cases when a service, not an application, is sending or receiving traffic. Service short names can be retrieved by running the Get-Service command from PowerShell. You can define one application to be used in each Firewall rule. If you specify multiple conditions in a single rule, these will be treated as an AND operation. i.e program=svchost.exe AND service=mpssvc, etc. All of the app related conditions in a single rule work to scope the traffic even further, so they must all correspond to the specific app/service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/9a.json b/public/intune-definitions/9a.json new file mode 100644 index 000000000000..83953fad1b1d --- /dev/null +++ b/public/intune-definitions/9a.json @@ -0,0 +1 @@ +{"9ae86dfef3b07c6b":{"id":"com.apple.applicationaccess_allowsafariprivatebrowsing","displayName":"Allow Safari Private Browsing","description":"If `false`, the system disables the ability to use private browsing in Safari.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowsafariprivatebrowsing_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowsafariprivatebrowsing_true","displayName":"True","description":null,"helpText":null}]},"9a1fb15a2cec417f":{"id":"com.apple.extensiblesso_hosts_kerberos","displayName":"Hosts","description":"One or more host or domain names for which the app extension performs SSO. Host or domain names are matched case-insensitively, and all the host/domain names of all installed Extensible SSO payloads must be unique. Hosts that begin with a “.” are wildcard suffixes and will match all subdomains, otherwise the host must be an exact match.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"9a1a7fc829eb8d47":{"id":"com.apple.extensiblesso_platformsso_authorizationgroups_generickey","displayName":"ANY","description":"The key is an access right value, the value is the group to be associated with that access right.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"9a995e09e1ad4561":{"id":"com.apple.ldap.account_ldapaccountusessl","displayName":"LDAP Account Use SSL","description":"If true, enables SSL.","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":[{"id":"com.apple.ldap.account_ldapaccountusessl_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.ldap.account_ldapaccountusessl_true","displayName":"True","description":null,"helpText":null}]},"9a0c16c7dd468f2a":{"id":"com.apple.managedclient.preferences_autoopenfiletypes","displayName":"List of file types that should be automatically opened on download","description":"This policy sets a list of file types that should be automatically opened on download. Note: The leading separator should not be included when listing the file type, so list \"txt\" instead of \".txt\".\n\nBy default, these file types will be automatically opened on all URLs. You can use the \"AutoOpenAllowedForURLs\" policy to restrict the URLs for which these file types will be automatically opened on.\n\nFiles with types that should be automatically opened will still be subject to the enabled Microsoft Defender SmartScreen checks and won't be opened if they fail those checks.\n\nFile types that a user has already specified to automatically be opened will continue to do so when downloaded. The user will continue to be able to specify other file types to be automatically opened.\n\nIf you don't set this policy, only file types that a user has already specified to automatically be opened will do so when downloaded.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autoopenfiletypes"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"9ae0b6d19c35b251":{"id":"com.apple.managedclient.preferences_exclusions_item_isdirectory","displayName":"Directory (selected) or file (not selected)","description":"Directory if selected, or file if not selected","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_exclusions_item_isdirectory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_exclusions_item_isdirectory_true","displayName":"Enabled","description":null,"helpText":null}]},"9ada55415adb85cc":{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"9a770ef8a463fa12":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_1","displayName":"Control the location of the log file","description":"This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators.\r\n\r\nIf you enable this policy setting, the Event Log uses the path specified in this policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\\System32\\winevt\\Logs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-logfilepath-1"],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_1_1","displayName":"Enabled","description":null,"helpText":null}]},"9a6bd73ec3230e93":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableautoexclusions","displayName":"Turn off Auto Exclusions","description":"\r\n Allows an administrator to specify if Automatic Exclusions feature for Server SKUs should be turned off.\r\n\r\n Disabled (Default):\r\n Microsoft Defender will exclude pre-defined list of paths from the scan to improve performance.\r\n\r\n Enabled:\r\n Microsoft Defender will not exclude pre-defined list of paths from scans. This can impact machine performance in some scenarios.\r\n\r\n Not configured:\r\n Same as Disabled.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-disableautoexclusions"],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableautoexclusions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableautoexclusions_1","displayName":"Enabled","description":null,"helpText":null}]},"9a56fb6162483faf":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableblockatfirstseen","displayName":"Configure the 'Block at First Sight' feature","description":"This feature ensures the device checks in real time with the Microsoft Active Protection Service (MAPS) before allowing certain content to be run or accessed. If this feature is disabled, the check will not occur, which will lower the protection state of the device.\r\n Enabled – The Block at First Sight setting is turned on.\r\n Disabled – The Block at First Sight setting is turned off.\r\n \r\n This feature requires these Group Policy settings to be set as follows:\r\n MAPS -> The “Join Microsoft MAPS” must be enabled or the “Block at First Sight” feature will not function.\r\n MAPS -> The “Send file samples when further analysis is required” should be set to 1 (Send safe samples) or 3 (Send all samples). Setting to 0 (Always Prompt) will lower the protection state of the device. Setting to 2 (Never send) means the “Block at First Sight” feature will not function.\r\n Real-time Protection -> The “Scan all downloaded files and attachments” policy must be enabled or the “Block at First Sight” feature will not function.\r\n Real-time Protection -> Do not enable the “Turn off real-time protection” policy or the “Block at First Sight” feature will not function.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-disableblockatfirstseen"],"categoryId":"09c02465-dc11-457e-9eac-19fc542e4cda","categoryName":"MAPS","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableblockatfirstseen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableblockatfirstseen_1","displayName":"Enabled","description":null,"helpText":null}]},"9a4284fc456e4083":{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle","displayName":"Published State Check Interval:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle_30","displayName":"30 Minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle_60","displayName":"1 Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle_240","displayName":"4 Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle_480","displayName":"8 Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle_720","displayName":"12 Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle_1440","displayName":"1 Day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_verifypublishedstate_verifypublishedstatetitle_4294967295","displayName":"Never","description":null,"helpText":null}]},"9a9979d9214b4bb7":{"id":"device_vendor_msft_policy_config_admx_settingsync_disableappsyncsettingsync_checkbox_useroverride","displayName":"Allow users to turn \"AppSync\" syncing on.","description":null,"helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disableappsyncsettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disableappsyncsettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"9adaa539265c4cc2":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013","displayName":"Microsoft Office 365 Visio 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Visio 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Visio 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365visio2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013_1","displayName":"Enabled","description":null,"helpText":null}]},"9afcf8e605ecd8d6":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_refresh_interval_prompt","displayName":"User Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"9a36cea66b679c9a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings","description":"Configures browsing data lifetime settings for Google Chrome. This policy allows admins to configure (per data-type) when data is deleted by the browser. This is useful for customers that work with sensitive customer data. The policy will only take effect if SyncDisabled is set to true.\r\n\r\nThe available data types are 'browsing_history', 'download_history', 'cookies_and_other_site_data', 'cached_images_and_files', 'password_signin', 'autofill', 'site_settings' and 'hosted_app_data'.\r\n\r\nThe browser will automatically remove data of selected types that is older than 'time_to_live_in_hours'. The minimum value that can be set is 1 hour.\r\n\r\nThe deletion of expired data will happen 15 seconds after the browser starts then every hour while the browser is running.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowsingDataLifetime for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"time_to_live_in_hours\": 24,\r\n \"data_types\": [\r\n \"browsing_history\"\r\n ]\r\n },\r\n {\r\n \"time_to_live_in_hours\": 12,\r\n \"data_types\": [\r\n \"password_signin\",\r\n \"autofill\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_1","displayName":"Enabled","description":null,"helpText":null}]},"9ae9fd0a4f9efb15":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc","displayName":"Allow JavaScript on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"9ad0372e6854dae3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_homepagelocation","displayName":"Home page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":null},"9ab88701465d0acf":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc","displayName":"Automatically grant permission to sites to connect to any HID device. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"9a428d737869269f":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxuploadbandwidth","displayName":"DO Max Upload Bandwidth","description":"Specifies the minimum download QoS (Quality of Service or speed) in KiloBytes/sec for background downloads. This policy affects the blending of peer and HTTP sources. Delivery Optimization complements the download from the HTTP source to achieve the minimum QoS value set.","helpText":null,"infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"9af1e0a35aca5653":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern_profilessiddirectorynamepattern","displayName":"SID Directory Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":null},"9a6eab6e898835b4":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols","displayName":"Download signed ActiveX controls","description":"This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\n\nIf you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.\n\nIf you disable the policy setting, signed controls cannot be downloaded.\n\nIf you do not configure this policy setting, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedownloadsignedactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"9aeac1a001c96df5":{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate","displayName":"Enable Offline Maps Auto Update","description":"Disables the automatic download and update of map data. After the policy is applied, you can verify the settings in the user interface in System > Offline Maps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Maps#enableofflinemapsautoupdate"],"categoryId":"9a7843b4-6ec1-47c4-906b-75b8866e97c2","categoryName":"Maps","options":[{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_0","displayName":"Disabled. Force off auto-update.","description":"Disabled. Force off auto-update.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_1","displayName":"Enabled. Force on auto-update.","description":"Enabled. Force on auto-update.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_65535","displayName":"Not configured. User's choice.","description":"Not configured. User's choice.","helpText":null}]},"9af6f7a1d8cfd01f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting","displayName":"Default images setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_1","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_2","displayName":"Don't allow any site to show images","description":null,"helpText":null}]},"9a70b1b069d4a854":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_extensioninstallblocklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"9a50c2e3d5f67f21":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_authserverallowlist","displayName":"Configure list of allowed authentication servers (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"9ae6fe3c3472a12d":{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled","displayName":"Guided Switch Enabled","description":"Allows Microsoft Edge to prompt the user to switch to the appropriate profile when Microsoft Edge detects that a link is a personal or work link.\r\n\r\nIf you enable this policy, you'll be prompted to switch to another account if the current profile doesn't work for the requesting link.\r\n\r\nIf you disable this policy, you won't be prompted to switch to another account when there's a profile and link mismatch.\r\n\r\nIf this policy isn't configured, guided switch is turned on by default. A user can override this value in the browser settings.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9a8d9c8f66f9e859":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed","displayName":"Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode","description":"This policy controls whether MHT or MHTML files that are downloaded from the web are automatically opened in Internet Explorer mode.\r\n\r\nIf you enable this policy, the MHT or MHTML files that are downloaded from the web can be opened in both Microsoft Edge and Internet Explorer mode to provide the best user experience.\r\n\r\nIf you disable or don't configure this policy, MHT or MHTML files that are downloaded from the web won't automatically open in Internet Explorer mode.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"9ad8ff6f2411927d":{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended","displayName":"Enable tab preview on hover","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\r\n\r\nIf you disable this policy, tab previews will not be shown on hover.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9a7a351006783abf":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_1","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_2","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},"9a286d0de01faac1":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_donotsilentlyblockprotocolsfromorigins","displayName":"Define a list of protocols that can not be silently blocked by anti-flood protection (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"9ac17e76c52e9a23":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_orgideduenabledcentennial","displayName":"Enable EDU Org ID Sign In in Office from Windows Store","description":"This policy setting controls whether Office product is activated with the student’s email account. By default, Org Id sign in is not allowed.\r\n\r\nIf you enable this policy setting, student’s email Id sign in will be used to activate the version of Office installed on the computer.\r\n\r\nIf you disable this policy setting, student’s email Id sign in won’t be used to activate the version of Office installed on the computer.\r\n\r\nEnabling or disabling this policy setting takes precedence over any setting that’s been configured by using the Office Deployment Tool or by manually editing the registry.\r\n\r\nIf you don’t configure this policy setting, student’s email Id sign in won’t be used to activate the version of Office installed on the computer unless you’ve enabled Org ID to sign in by manually editing the registry.\r\n ","helpText":"","infoUrls":[],"categoryId":"2e3f0407-6387-41b4-b6c2-ada4354be759","categoryName":"Licensing Settings","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_orgideduenabledcentennial_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_orgideduenabledcentennial_1","displayName":"Enabled","description":null,"helpText":null}]},"9a85d4d1e1da1919":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_ageoutpolicy","displayName":"Age out documents older than n days","description":"This policy controls when locally cached Office documents are aged out of the Office Document Cache","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_ageoutpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_ageoutpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"9a1e5718708deeb6":{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_textbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"9acb6f286aa79148":{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlockmicrosoftidentityauthn","displayName":"Disconnect remote session on lock for Microsoft identity platform authentication","description":"This policy setting allows you to configure the user experience when the Remote Desktop session is locked by the user or by a policy. You can specify whether the remote session will show the remote lock screen or disconnect when the remote session is locked. Disconnecting the remote session ensures that a remote session cannot be left on the lock screen and cannot reconnect automatically due to loss of network connectivity.\n\nThis policy applies only when using an identity provider that uses the Microsoft identity platform, such as Microsoft Entra ID, to authenticate to the remote PC. This policy doesn't apply when using Legacy authentication which includes the NTLM, CredSSP, RDSTLS, TLS, and RDP basic authentication protocols.\n\nIf you enable or do not configure this policy setting, Remote Desktop connections using the Microsoft identity platform will disconnect the remote session when the remote session is locked. Users can reconnect when they're ready and can use passwordless authentication if configured.\n\nIf you disable this policy setting, Remote Desktop connections using the Microsoft identity platform will show the remote lock screen when the remote session is locked. Users can unlock the remote session using their username and password, or certificates.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-disconnectonlockmicrosoftidentityauthn"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlockmicrosoftidentityauthn_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlockmicrosoftidentityauthn_1","displayName":"Enabled","description":null,"helpText":null}]},"9a1429a713ed169e":{"id":"device_vendor_msft_policy_config_userrights_manageauditingandsecuritylog","displayName":"Manage Auditing And Security Log","description":"This user right determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys. This security setting does not allow a user to enable file and object access auditing in general. You can view audited events in the security log of the Event Viewer. A user with this privilege can also view and clear the security log.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#manageauditingandsecuritylog"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"9abf4e980244a3f9":{"id":"device_vendor_msft_policy_privilegemanagement_elevationclientsettings_defaultelevationresponse_validation","displayName":"Validation","description":"","helpText":null,"infoUrls":[],"categoryId":"b750fe41-33c4-4293-8dfc-42285be35752","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationclientsettings_defaultelevationresponse_validation_0","displayName":"Business justification","description":"Business Justification","helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationclientsettings_defaultelevationresponse_validation_1","displayName":"Windows authentication","description":"Windows Authentication","helpText":null}]},"9a0fa340b9575acf":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders30","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders30_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders30_1","displayName":"True","description":null,"helpText":null}]},"9a230063e71c8da3":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servermanager","displayName":"Server Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-servermanager"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servermanager_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servermanager_1","displayName":"Enabled","description":null,"helpText":null}]},"9abd98d2a53e2535":{"id":"user_vendor_msft_policy_config_admx_startmenu_nocommongroups","displayName":"Remove common program groups from Start Menu (User)","description":"Removes items in the All Users profile from the Programs menu on the Start menu.\r\n\r\nBy default, the Programs menu contains items from the All Users profile and items from the user's profile. If you enable this setting, only items in the user's profile appear in the Programs menu.\r\n\r\nTip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\\Microsoft\\Windows\\Start Menu\\Programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nocommongroups"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nocommongroups_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nocommongroups_1","displayName":"Enabled","description":null,"helpText":null}]},"9a97274ff16c6b2f":{"id":"user_vendor_msft_policy_config_admx_startmenu_notoolbarsontaskbar","displayName":"Do not display any custom toolbars in the taskbar (User)","description":"This setting affects the taskbar.\r\n\r\nThe taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.\r\n\r\nIf this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the \"Toolbars\" menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.\r\n\r\nIf this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the \"Toolbars\" command appears in the context menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notoolbarsontaskbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notoolbarsontaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notoolbarsontaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"9aec451dd072299b":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi","displayName":"VDI Configuration (User)","description":"This policy setting configures the synchronization of User Experience Virtualization (UE-V) rollback information for computers running in a non-persistent, pooled VDI environment. UE-V settings rollback data and checkpoints are normally stored only on the local computer. With this policy setting enabled, the rollback information is copied to the settings storage location when the user logs off or shuts down their VDI session. Enable this setting to register a VDI-specific settings location template and restore data on computers in pooled VDI environments that reset to a clean state on logout. With this policy enabled you can roll settings back to the state when UE-V was installed or to “last-known-good” configurations. Only enable this policy setting on computers running in a non-persistent VDI environment. The VDI Collection Name defines the name of the virtual desktop collection containing the virtual computers. \r\nIf you enable this policy setting, the UE-V rollback state is copied to the settings storage location on logout and restored on login.\r\nIf you disable this policy setting, no UE-V rollback state is copied to the settings storage location.\r\nIf you do not configure this policy, no UE-V rollback state is copied to the settings storage location.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-configurevdi"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi_1","displayName":"Enabled","description":null,"helpText":null}]},"9a5bfa7613d70c1e":{"id":"user_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge","displayName":"Prevent Access To About Flags In Microsoft Edge (User)","description":"Prevent access to the about:flags page in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventaccesstoaboutflagsinmicrosoftedge"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge_0","displayName":"Disabled","description":"Allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge_1","displayName":"Enabled","description":"Prevents users from accessing the about:flags page.","helpText":null}]},"9af6a558866c824b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_2","displayName":"Do not allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_3","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},"9a82686e0e513f53":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata","displayName":"Keep browsing data when creating enterprise profile by default (User)","description":"If this policy is Enabled, the option to keep any existing browsing data when creating an enterprise profile will be checked by default.\r\n\r\nIf this policy is unset or Disabled, the option to keep any existing browsing data when creating an enterprise profile will not be checked by default.\r\n\r\nRegardless of the value, the user will be able to decide whether or not to keep any existing browsing data when creating an enterprise profile.\r\n\r\nThis policy has no effect if the option to keep existing browsing data is not available; this happens if enterprise profile separation is strictly enforced, or if the data would be from an already managed profile.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata_1","displayName":"Enabled","description":null,"helpText":null}]},"9a1946caf617d3c6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings","displayName":"Settings for Google's AI Mode integrations in the address bar and New Tab page search box. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings_0","displayName":"Allow AI Mode integrations.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings_1","displayName":"Do not allow AI Mode integrations.","description":null,"helpText":null}]},"9a3e8ab698fde814":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode","displayName":"Turn on Protected Mode (User)","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenableprotectedmode"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"9a407a37feb9a250":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended","displayName":"Allow importing of favorites (User)","description":"Allows users to import favorites from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, favorites aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9aa56cc612e17bb9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls","displayName":"Block the Adobe Flash plug-in on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are blocked from running Adobe Flash.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPluginsSetting' (Default Adobe Flash setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9ae9eb8e68162635":{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended","displayName":"Allow users to access the Outlook menu (User)","description":"This policy is used to manage access to the Outlook menu from Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can access the Outlook menu.\r\nIf you disable this policy, users can't access the Outlook menu.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9ad6f6c6fd3086c9":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_1","displayName":"Allow all websites to perform automatic downloads","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_2","displayName":"Don't allow any website to perform automatic downloads","description":null,"helpText":null}]},"9acadcb57d89f8ab":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout_idletimeout","displayName":"Delay before running idle actions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":null},"9a83b00170b9225a":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist","displayName":"Open local files in Internet Explorer mode file extension allow list (User)","description":"This policy limits which file:// URLs are allowed to be launched into Internet Explorer mode based on file extension.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nWhen a file:// URL is requested to launch in Internet Explorer mode, the file extension of the URL must be present in this list in order for the URL to be allowed to launch in Internet Explorer mode. A URL which is blocked from opening in Internet Explorer mode will instead open in Edge mode.\r\n\r\nIf you set this policy to the special value \"*\" or don't configure it, all file extensions are allowed.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\nExample value:\r\n\r\n.mht\r\n.pdf\r\n.vsdx","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"9aff65034b008212":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_maximplicitcachesize_l_maximplicitcachesizedecimal","displayName":"Percent of disk space (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"9a4d66f25f703420":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastserviceservername8","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"9aeb2592e2f3f2b9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicypowerpoint","displayName":"Disallow in PowerPoint (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicypowerpoint_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicypowerpoint_1","displayName":"True","description":null,"helpText":null}]},"9ab9de5970bef1cd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc16_l_pathcolon16","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"9a10eca271995ba3":{"id":"user_vendor_msft_policy_config_outlk16v12~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disablesimplemapisendwithoutoutlook","displayName":"Running Outlook for Simple MAPI Mail Sending (User)","description":"This policy setting determines whether users can send mail through Simple MAPI when Outlook is not active.\r\n\r\nIf you enable this policy setting, users are required to have Outlook running to send mail through Simple MAPI. This will force users to open Outlook to send mail, ensuring that Outlook Add-ins run properly before the mail is sent. \r\n\r\nIf you disable this policy setting, users are allowed to send mail through Simple MAPI regardless of Outlook running.\r\n\r\nWhen this policy setting is not configured, it functions as if it has been disabled, allowing users to send mail through Simple MAPI without having Outlook running.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v12~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disablesimplemapisendwithoutoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v12~policy~l_microsoftofficeoutlook~l_miscellaneous_l_disablesimplemapisendwithoutoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"9a1a62e14e6f228f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"42ce9a9b-0574-4b5c-993b-7679de80be47","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid_0","displayName":"Block files","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid_1","displayName":"Open in Protected View","description":null,"helpText":null}]},"9a1282f1018ccc65":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07_l_descriptioncolon34","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"9ad4e9eacefd9552":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_optionalbreaks","displayName":"Optional breaks (User)","description":"Determines whether the symbol used to represent optional breaks is shown on the screen.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_optionalbreaks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_optionalbreaks_1","displayName":"Enabled","description":null,"helpText":null}]},"9aa3a16c03fd9e89":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_allowlocalpolicymerge","displayName":"Allow Local Policy Merge","description":"This value is used as an on/off switch. If this value is false, Hyper-V Firewall rules from the local store are ignored and not enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_allowlocalpolicymerge_false","displayName":"AllowLocalPolicyMerge Off","description":"AllowLocalPolicyMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_domainprofile_allowlocalpolicymerge_true","displayName":"AllowLocalPolicyMerge On","description":"AllowLocalPolicyMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/9b.json b/public/intune-definitions/9b.json new file mode 100644 index 000000000000..68c63d7e8ba4 --- /dev/null +++ b/public/intune-definitions/9b.json @@ -0,0 +1 @@ +{"9b86f6590715b179":{"id":"com.android.devicerestrictionpolicy.outgoingcallsblocked","displayName":"Block outgoing calls","description":"If 'True', the device is prevented from making outgoing phone calls. If 'False', Intune doesn't change or update this setting. By default, the OS might allow outgoing calls. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.outgoingcallsblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.outgoingcallsblocked_true","displayName":"True","description":"True","helpText":null}]},"9bcfb99fc4712fca":{"id":"com.android.devicerestrictionpolicy.personalprofilecamerablocked","displayName":"Block camera","description":"If 'True', prevents access to the camera during personal use. If 'False', Intune doesn't change or update this setting. By default, the OS might allow using the camera in the personal profile. Available for corporate-owned work profile devices (at personal profile level).","helpText":null,"infoUrls":[],"categoryId":"990880db-3f64-4436-ab4a-d7d5181dfa5d","categoryName":"Personal Profile","options":[{"id":"com.android.devicerestrictionpolicy.personalprofilecamerablocked_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.personalprofilecamerablocked_false","displayName":"False","description":"false","helpText":null}]},"9b5a8d88d575a28f":{"id":"com.apple.applicationaccess_allowrapidsecurityresponseinstallation","displayName":"Allow Background Security Improvement Installation (Deprecated)","description":"If false, Rapid Security Response will be disabled. ","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowrapidsecurityresponseinstallation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowrapidsecurityresponseinstallation_true","displayName":"True","description":null,"helpText":null}]},"9b950e2436e3c247":{"id":"com.apple.directoryservice.managed_adallowmultidomainauth","displayName":"AD Allow Multi Domain Auth","description":"If true, allows authentication from any domain in the namespace.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adallowmultidomainauth_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adallowmultidomainauth_true","displayName":"True","description":null,"helpText":null}]},"9bc46457f7e9a0bb":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_enabled","displayName":"Enabled","description":"If true, enable these settings. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":[{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_enabled_true","displayName":"True","description":null,"helpText":null}]},"9be8453245d3fd3f":{"id":"com.apple.loginwindow_autologinpassword","displayName":"Autologin Password","description":"Optional user password when setting up auto login. If this key does not exist, and a user name was specified, auto login will be set up the next time the specified user logs in to the client.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":null},"9bc94757a694e4fb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled","displayName":"Discover feature In Microsoft Edge (Obsolete)","description":"This policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the \"HubsSidebarEnabled\" policy.\n\nThis policy lets you configure the Discover feature in Microsoft Edge.\n\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\n\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\n\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9b9493a5952bfee4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgesafehostingextensionenabled","displayName":"Control Microsoft Edge Safe Hosting Extension","description":"This policy controls whether the Microsoft Edge Safe Hosting component extension is installed automatically when users visit supported Microsoft services, such as Microsoft 365 Copilot app.\n\nThe Microsoft Edge Safe Hosting extension provides additional security capabilities for these services. When a user accesses a supported service, the extension installs automatically to enable those protections.\n\nIf you enable or don't configure this policy, the extension installs automatically and remains installed for 90 days after the user's last visit, then is removed if no further activity occurs.\n\nIf you disable this policy, the extension won't install automatically. If it’s already installed, it will be removed.\n\nNote: This policy controls only automatic installation. It doesn’t prevent users from manually installing other extensions from the Microsoft Edge Add-ons website.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgesafehostingextensionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgesafehostingextensionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9bbc943866716f04":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_recommended","displayName":"Allow importing of search engine settings (users can override)","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\n\nIf you enable, this policy, the option to import search engine settings is automatically selected.\n\nIf you disable this policy, search engine settings aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This option means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"9b2825b3e988f26f":{"id":"device_vendor_msft_policy_config_admx_encryptfilesonmove_noencryptonmove","displayName":"Do not automatically encrypt files moved to encrypted folders","description":"This policy setting prevents File Explorer from encrypting files that are moved to an encrypted folder.\r\n\r\nIf you enable this policy setting, File Explorer will not automatically encrypt files that are moved to an encrypted folder.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer automatically encrypts files that are moved to an encrypted folder.\r\n\r\nThis setting applies only to files moved within a volume. When files are moved to other volumes, or if you create a new file in an encrypted folder, File Explorer encrypts those files automatically.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove#admx-encryptfilesonmove-noencryptonmove"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_encryptfilesonmove_noencryptonmove_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_encryptfilesonmove_noencryptonmove_1","displayName":"Enabled","description":null,"helpText":null}]},"9b2b5e4b530dd093":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsttl_netlogon_dnsttllabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"9be1cab8b6892ee1":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup","displayName":"Common 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2013 applications.\r\nMicrosoft Office Suite 2013 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2013 applications.\r\nIf you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2013 applications will continue to be backed up.\r\nIf you disable this policy setting, certain user settings which are common between the Microsoft Office Suite 2013 applications will not be backed up. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013commonbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"9b7cf8531f00af99":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled","displayName":"Enable Bookmark Bar","description":"Setting the policy to True displays a bookmark bar in Google Chrome. Setting the policy to False means users never see the bookmark bar.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide whether to use this function.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9b90e0377428b875":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls","displayName":"Allow cookies on these sites","description":"Allows you to set a list of url patterns that specify sites which are allowed to set cookies.\r\n\r\nIf this policy is left not set the global default value will be used for all sites either from the DefaultCookiesSetting policy if it is set, or the user's personal configuration otherwise.\r\n\r\nSee also policies CookiesBlockedForUrls and CookiesSessionOnlyForUrls. Note that there must be no conflicting URL patterns between these three policies - it is unspecified which policy takes precedence.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9bae2c796c8dee80":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication","description":"If enabled(or not set), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\r\n\r\nIf disabled, user-added TLS certificates from platform trust stores will not be used in path-building for TLS server authentication.","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9b7daf456ba984e8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page","description":"Control if users can turn on Developer Mode on chrome://extensions.\r\n\r\nIf the policy is not set, users can turn on developer mode on extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\r\nIf the policy is set to Allow (0), users can turn on developer mode on extensions page.\r\nIf the policy is set to Disallow (1), users can not turn on developer mode on extensions page.\r\n\r\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"9b174973875be46f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability","displayName":"Manage the deprecated prefixed video fullscreen API's availability","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"9b043e47ae5fa1f9":{"id":"device_vendor_msft_policy_config_defender_allowemailscanning","displayName":"Allow Email Scanning","description":"Allows or disallows scanning of email.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowemailscanning_0","displayName":"Not allowed. Turns off email scanning.","description":"Not allowed. Turns off email scanning.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowemailscanning_1","displayName":"Allowed. Turns on email scanning.","description":"Allowed. Turns on email scanning.","helpText":null}]},"9b9c5eb2d2ebcbba":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer","displayName":"Access Network as Computer Object","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nAttach as computer - folder must have permissions for computer objects\r\n\r\nCAUTION: Do not use this configuration setting unless your storage provider or architecture will NOT work with user-level permissions to the VHD(x) container locations. This setting will allow the virtual machine to access all the VHD(x) files on the storage provider creating a potential security risk.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\AccessNetworkAsComputerObject\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer_1","displayName":"Enabled","description":null,"helpText":null}]},"9b3ac120d1c4645b":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407","displayName":"Allow paste operations via script","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_1","displayName":"Prompt","description":null,"helpText":null}]},"9b66c96838ad4be4":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"9b276aab901585da":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, users are queried whether to allow HTML fonts to download.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowfontdownloads"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"9bf9f12fc7a0f7cd":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips","displayName":"Allow Google Cast to connect to Cast devices on all IP addresses","description":"Enable this policy to let Google Cast connect to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.\r\n\r\nDisable this policy to restrict Google Cast to Cast devices on RFC1918/RFC4193 private addresses.\r\n\r\nIf you don't configure this policy, Google Cast connects to Cast devices on RFC1918/RFC4193 private addresses only, unless you enable the CastAllowAllIPs feature.\r\n\r\nIf the 'EnableMediaRouter' (Enable Google Cast) policy is disabled, then this policy has no effect.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_1","displayName":"Enabled","description":null,"helpText":null}]},"9b8ea1c35b055ced":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC","description":"Restricts the UDP port range used by WebRTC to a specified port interval (endpoints included).\r\n\r\nBy configuring this policy, you specify the range of local UDP ports that WebRTC can use.\r\n\r\nIf you don't configure this policy, or if you set it to an empty string or invalid port range, WebRTC can use any available local UDP port.\r\n\r\nExample value: 10000-11999","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},"9bdb31ce67362c70":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_1","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_2","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},"9b3429bd5c0f16fe":{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_geolocationblockedforurlsdesc","displayName":"Block geolocation on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"9b35923209fcd2dd":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_exprwdexe164","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_exprwdexe164_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_exprwdexe164_1","displayName":"True","description":null,"helpText":null}]},"9b26633672a99090":{"id":"device_vendor_msft_policy_config_settings_allowdatetime","displayName":"Allow Date Time","description":"Allows the user to change date and time settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowdatetime"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowdatetime_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowdatetime_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"9be49a91245424d2":{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync","displayName":"Do not sync accessibility settings","description":"\n Prevent the \"accessibility\" group from syncing to and from this PC. This turns off and disables the \"accessibility\" group on the \"Windows backup\" settings page in PC settings.\n\nIf you enable this policy setting, the \"accessibility\" group will not be synced.\n\nUse the option \"Allow users to turn accessibility syncing on\" so that syncing is turned off by default but not disabled.\n\nIf you do not set or disable this setting, syncing of the \"accessibility\" group is on by default and configurable by the user.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-settingssync#settingssync-disableaccessibilitysettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"9ba8f67d0d7e0fb5":{"id":"device_vendor_msft_policy_config_update_allowautowindowsupdatedownloadovermeterednetwork","displayName":"Allow Auto Windows Update Download Over Metered Network","description":"Option to download updates automatically over metered connections (off by default). Value type is integer. A significant number of devices primarily use cellular data and do not have Wi-Fi access, which leads to a lower number of devices getting updates. Since a large number of devices have large data plans or unlimited data, this policy can unblock devices from getting updates. This policy is accessible through the Update setting in the user interface or Group Policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowautowindowsupdatedownloadovermeterednetwork"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_allowautowindowsupdatedownloadovermeterednetwork_0","displayName":"Not allowed","description":"Not allowed","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautowindowsupdatedownloadovermeterednetwork_1","displayName":"Allowed","description":"Allowed","helpText":null}]},"9b27dee7b0f9501a":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters","displayName":"Special Characters (User)","description":"Use this policy setting to configure the use of special characters in the Windows Hello for Business PIN gesture. Valid special characters for Windows Hello for Business PIN gestures include: ! \" # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \\ ] ^ _ ` { | } ~ .\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one special character in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using special characters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use special characters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_0","displayName":"Allows the use of special characters in PIN.","description":"Allows the use of special characters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_1","displayName":"Requires the use of at least one special characters in PIN.","description":"Requires the use of at least one special characters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_2","displayName":"Does not allow the use of special characters in PIN.","description":"Does not allow the use of special characters in PIN.","helpText":null}]},"9b22604efcd5dcd5":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles","displayName":"Path to shared Workgroup information file for secured MDB files (User)","description":"Specifies the default path and filename for the workgroup information file.","helpText":"","infoUrls":[],"categoryId":"a788a6e5-ab3f-41e5-96c8-ee59627dcb4d","categoryName":"Workgroup Administrator...","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"9bdb1c1c63f36a56":{"id":"user_vendor_msft_policy_config_admx_globalization_y2k_y2kyear","displayName":"Year (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"9b34969edfa111a4":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitytemplates","displayName":"Security Templates (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-securitytemplates"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitytemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitytemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"9b093624d69429a8":{"id":"user_vendor_msft_policy_config_browser_preventturningoffrequiredextensions","displayName":"Prevent Turning Off Required Extensions (User)","description":"You can define a list of extensions in Microsoft Edge that users cannot turn off. You must deploy extensions through any available enterprise deployment channel, such as Microsoft Intune. When you enable this policy, users cannot uninstall extensions from their computer, but they can configure options for extensions defined in this policy, such as allow for InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically. When you enable this policy, you must provide a semi-colon delimited list of extension package family names (PFNs). For example, adding Microsoft.OneNoteWebClipper_8wekyb3d8bbwe;Microsoft.OfficeOnline_8wekyb3d8bbwe prevents a user from turning off the OneNote Web Clipper and Office Online extension. When enabled, removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. If disabled or not configured, extensions defined as part of this policy get ignored. Default setting: Disabled or not configured Related policies: Allow Developer Tools Related Documents: - Find a package family name (PFN) for per-app VPN (https://docs.microsoft.com/en-us/sccm/protect/deploy-use/find-a-pfn-for-per-app-vpn) - How to manage apps you purchased from the Microsoft Store for Business with Microsoft Intune (https://docs.microsoft.com/en-us/intune/windows-store-for-business) - How to assign apps to groups with Microsoft Intune (https://docs.microsoft.com/en-us/intune/apps-deploy) - Manage apps from the Microsoft Store for Business with System Center Configuration Manager (https://docs.microsoft.com/en-us/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business) - How to add Windows line-of-business (LOB) apps to Microsoft Intune (https://docs.microsoft.com/en-us/intune/lob-apps-windows)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventturningoffrequiredextensions"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"9b1c8dc4b2d3e404":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory","displayName":"Import browsing history from default browser on first run (User)","description":"Setting the policy to Enabled imports browsing history from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no browsing history is imported on first run.\r\n\r\nUsers can trigger an import dialog and the browsing history checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"9bf8267f1e0fdc13":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended","displayName":"Import browsing history from default browser on first run (User)","description":"Setting the policy to Enabled imports browsing history from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no browsing history is imported on first run.\r\n\r\nUsers can trigger an import dialog and the browsing history checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9bc8e4d7ae4ac57b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_defaultsearchprovidericonurl","displayName":"Default search provider icon (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"9ba525c383c0f7e5":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl","displayName":"WebRTC per URL IP Handling (User)","description":"This policy allows restricting which IP addresses and interfaces WebRTC uses when attempting to find the best available connection for each specific URL pattern.\r\n\r\nIt accepts a list of URL patterns and handling type pairs. The URL patterns are checked in order and the first match will configure which handling is used by WebRTC for the domain. When the URL of the current document is not matched against any entry, it uses the configuration set by the policy WebRtcIPHandling.\r\n\r\nFor detailed information on valid input patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nValid handling values:\r\n\r\n* default - WebRTC uses all network interfaces.\r\n\r\n* default_public_and_private_interfaces - WebRTC uses all public and private interfaces.\r\n\r\n* default_public_interface_only - WebRTC uses all public interfaces, but not private ones.\r\n\r\n* disable_non_proxied_udp - WebRTC uses either UDP SOCKS proxying or will fallback to TCP proxying.\r\n\r\nSee RFC 8828 section 5.2 (https://tools.ietf.org/html/rfc8828.html#section-5.2) for a detailed description of all the handling values.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebRtcIPHandlingUrl for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.example.com\",\r\n \"handling\": \"default_public_and_private_interfaces\"\r\n },\r\n {\r\n \"url\": \"https://[*.]example.edu\",\r\n \"handling\": \"default_public_interface_only\"\r\n },\r\n {\r\n \"url\": \"*\",\r\n \"handling\": \"disable_non_proxied_udp\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"b811c4fe-7ff0-4bd1-a454-0918d4e2f896","categoryName":"Web Rtc settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_1","displayName":"Enabled","description":null,"helpText":null}]},"9b7cb73422c9278c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":null},"9b689a62c7695fd1":{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2","displayName":"Disable Internet Explorer 11 as a standalone browser (User)","description":"This policy lets you restrict launching of Internet Explorer as a standalone browser.\n\nIf you enable this policy, it:\n- Prevents Internet Explorer 11 from launching as a standalone browser.\n- Restricts Internet Explorer's usage to Microsoft Edge's native 'Internet Explorer mode'.\n- Redirects attempts at launching Internet Explorer 11 to Microsoft Edge Stable Channel browser.\n- Overrides any other policies that redirect to Internet Explorer 11.\n\nEven with this policy enabled launching Internet Explorer 11 using COM automation will still be allowed. To disable COM automation launches of Internet Explorer 11 use the \"Disable Internet Explorer 11 COM Automation\" group policy.\n\nIf you disable, or don’t configure this policy, all sites are opened using the current active browser settings. Note: Microsoft Edge Stable Channel must be installed for this policy to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerapp"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"9b0d6e999485f21b":{"id":"user_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, etc.). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone, making the Local Machine security zone a prime target for malicious users. Zone Elevation also disables JavaScript navigation if there is no security context.\n\nIf you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes.\n\nIf you disable this policy setting, no zone receives such protection for Internet Explorer processes.\n\nIf you do not configure this policy setting, any zone can be protected from zone elevation by Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-protectionfromzoneelevationinternetexplorerprocesses"],"categoryId":"3bbaff1b-7d59-4b9c-ab53-c235d72b2fb0","categoryName":"Protection From Zone Elevation","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"9bfb4a76496ce4e9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin","displayName":"Control where security restrictions on insecure origins apply (User)","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*.contoso.com\") for which security restrictions on insecure origins don't apply.\r\n\r\nThis policy lets you specify allowed origins for legacy applications that can't deploy TLS or set up a staging server for internal web development so that developers can test out features requiring secure contexts without having to deploy TLS on the staging server. This policy also prevents the origin from being labeled \"Not Secure\" in the omnibox.\r\n\r\nSetting a list of URLs in this policy has the same effect as setting the command-line flag '--unsafely-treat-insecure-origin-as-secure' to a comma-separated list of the same URLs. If you enable this policy, it overrides the command-line flag.\r\n\r\nFor more information on secure contexts, see https://www.w3.org/TR/secure-contexts/.\r\n\r\nExample value:\r\n\r\nhttp://testserver.contoso.com/\r\n*.contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"9bafb9f120a62148":{"id":"user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled","displayName":"Enable QR Code Generator (User)","description":"This policy enables the QR Code generator feature in Microsoft Edge.\r\n\r\nIf you enable this policy or don't configure it, the QR Code Generator feature is enabled.\r\n\r\nIf you disable this policy, the QR Code Generator feature is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9b2b5e8ae5fd0ad4":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls","displayName":"Block idle detection on these sites (User)","description":"Allows you to specify a list of URL patterns for sites that are not allowed to use the Idle Detection API.\r\n\r\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported.\r\n\r\nFor detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nIf you do not configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9bb53ba8f8254a81":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended","displayName":"Set default download directory (User)","description":"This policy sets the default directory that Microsoft Edge uses to download files. Users can change the directory through browser settings.\r\n\r\nIf you don't configure this policy, Microsoft Edge uses the platform-specific default download directory.\r\n\r\nThis policy has no effect if the DownloadDirectory policy is set.\r\n\r\nFor a list of supported variables, see https://learn.microsoft.com/en-us/deployedge/edge-learnmore-create-user-directory-vars .\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","categoryName":"Downloads","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9bf0fd916d64a028":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended","displayName":"Clear browsing data when Microsoft Edge closes (User)","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\r\n\r\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured 'DefaultCookiesSetting' (Configure cookies)\r\n\r\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\r\n\r\nIf you enable this policy, don't configure the 'AllowDeletingBrowserHistory' (Enable deleting browser and download history) or the 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes) policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured 'AllowDeletingBrowserHistory' or 'ClearCachedImagesAndFilesOnExit'.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9bf625565192d587":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites (User)","description":"If you set this policy, you can list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemWriteGuardSetting' (Control use of the File System API for writing) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemWriteBlockedForUrls' (Block write access to files and directories on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9b9906ccc5e95570":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_indonesian","displayName":"Indonesian (User)","description":"Enables the editing language Indonesian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_indonesian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_indonesian_1","displayName":"Enabled","description":null,"helpText":null}]},"9b5a1c11cf65637a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitenableusageagent","displayName":"Allow add-in usage data to be generated and collected by the Readiness Toolkit (User)","description":"This policy setting allows you to configure whether the Readiness Toolkit for Office generates and collects add-in usage data. The data generated and collected includes when the add-in is loaded and used, and if the add-in crashes. This information is available in reports provided by the Readiness Toolkit.\r\n\r\nIf you enable this policy setting, the Readiness Toolkit generates and collects add-in usage data.\r\n\r\nIf you disable or don't configure this policy setting, the Readiness Toolkit doesn't generate or collect add-in usage data.","helpText":"","infoUrls":[],"categoryId":"da04d4b8-bd11-439e-9663-5fd2399d9cc1","categoryName":"Readiness Toolkit","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitenableusageagent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_readinesstoolkit_l_officereadinesstoolkitenableusageagent_1","displayName":"Enabled","description":null,"helpText":null}]},"9b1139447088dbd2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3_l_loadcontrolsinforms3colon","displayName":"Load Controls in Forms3: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3_l_loadcontrolsinforms3colon_1","displayName":"1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3_l_loadcontrolsinforms3colon_2","displayName":"2","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3_l_loadcontrolsinforms3colon_3","displayName":"3","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_loadcontrolsinforms3_l_loadcontrolsinforms3colon_4","displayName":"4","description":null,"helpText":null}]},"9bd2aba86d265ecb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_usertemplatespath","displayName":"User templates path (User)","description":"Specifies the location of user templates.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_usertemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_usertemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},"9b7845d50ca9c6fe":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_legacyformatsignatires","displayName":"Legacy format signatures (User)","description":"This policy setting controls whether users can apply binary format digital signatures to Office 97-2003 documents. \r\n\r\nIf you enable this policy setting, Office 2016 applications use the Office 2003 binary format to apply digital signatures to Office 97-2003 binary documents so that they will be recognized by the Office 2003 release and earlier applications. \r\n\r\nIf you disable or do not configure this policy setting, Office 2016 applications use the XML--based XMLDSIG format to attach digital signatures to documents, including Office 97-2003 binary documents. XMLDSIG signatures are not recognized by Office 2003 applications or previous versions. If an Office 2003 user opens an Excel, PowerPoint, or Word binary document with an XMLDSIG signature attached, the signature will be lost.","helpText":"","infoUrls":[],"categoryId":"23c09e06-5bee-4b20-a391-36549bf0f620","categoryName":"Signing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_legacyformatsignatires_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_legacyformatsignatires_1","displayName":"Enabled","description":null,"helpText":null}]},"9b11132d31e00819":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofbackupfolder","displayName":"Location of Backup Folder (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofbackupfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofbackupfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"9b985d8a46213687":{"id":"user_vendor_msft_policy_config_outlk16v14~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationretryintervals_l_newoutlookautomigrationretryintervalsid","displayName":"New Outlook Auto Migration Retry Interval: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":null},"9bf1b7309efa0d02":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_turnonloggingforallconflicts_l_turnonloggingforallconflictsdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_turnonloggingforallconflicts_l_turnonloggingforallconflictsdropid_0","displayName":"No conflicts are logged (default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_turnonloggingforallconflicts_l_turnonloggingforallconflictsdropid_1","displayName":"All conflicts logged","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_turnonloggingforallconflicts_l_turnonloggingforallconflictsdropid_2","displayName":"Unresolved conflicts logged only","description":null,"helpText":null}]},"9ba645e994a10283":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooktodaysettings_l_urlforcustomoutlooktoday_l_entertheurlofoutlooktodayswebpagemax129chars","displayName":"Enter the URL of Outlook Today's web page (max 129 chars): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"75ad885f-6118-4508-a2fd-bb26be931c3f","categoryName":"Outlook Today Settings","options":null},"9bebeb601f043bed":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_sendallsignedmessagesasclearsignedmessages","displayName":"Send all signed messages as clear signed messages (User)","description":"This policy setting controls whether Outlook sends signed messages as clear text signed messages.\r\n\r\nIf you enable this policy setting, the \"Send clear text signed message when sending signed messages\" option is selected in the E-mail Security section of the Trust Center.\r\n\r\nIf you disable or do not configure this policy setting, when users sign e-mail messages with their digital signature and send them, Outlook uses the signature's private key to encrypt the digital signature but sends the messages as clear text, unless they are encrypted separately.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_sendallsignedmessagesasclearsignedmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_sendallsignedmessagesasclearsignedmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"9be5baf433e50cfd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enablerpcencryption","displayName":"Enable RPC encryption (User) (Deprecated)","description":"This policy setting controls whether Outlook uses remote procedure call (RPC) encryption to communicate with Microsoft Exchange servers. \r\n\r\nIf you enable this policy setting, Outlook uses RPC encryption when communicating with an Exchange server. Note - RPC encryption only encrypts the data from the Outlook client computer to the Exchange server. It does not encrypt the messages themselves as they traverse the Internet. \r\n\r\nIf you disable or do not configure this policy setting, RPC encryption is still used by default. This setting allows you to override the corresponding per-profile setting.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enablerpcencryption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enablerpcencryption_1","displayName":"Enabled","description":null,"helpText":null}]},"9bd2703de5980a3d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_l_pjdays10","displayName":"Days (User)","description":"","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_l_pjdays10_0","displayName":"d","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_l_pjdays10_1","displayName":"dy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_l_pjdays10_2","displayName":"day","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_l_pjdays10_3","displayName":"\r\n ","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_l_pjdays10_4","displayName":"\r\n ","description":null,"helpText":null}]},"9b83fc9c5edc005a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits","displayName":"Work is entered in (User)","description":"Specifies the default unit of time (minutes, hours, days, weeks, or months) used in the Work field in the current project.\r\n\r\nIf you enable this setting, whenever Project displays work values, the unit you specified will be used.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjworkunits_1","displayName":"Enabled","description":null,"helpText":null}]},"9bc7423de0ecc868":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc06_l_descriptioncolon30","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"9b77001a91dd76f8":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc13_l_datecolon57","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"9b38005ae821970c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15_l_allowsubfolders67","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15_l_allowsubfolders67_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc15_l_allowsubfolders67_1","displayName":"True","description":null,"helpText":null}]},"9bd398f954c1bba1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits","displayName":"Show measurements in units of (User)","description":"Selects the default measurement unit for the horizontal ruler and for measurements in dialog boxes.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_measurementunits_1","displayName":"Enabled","description":null,"helpText":null}]},"9b662d86c1a278c4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05","displayName":"Trusted Location #5 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/9c.json b/public/intune-definitions/9c.json new file mode 100644 index 000000000000..918480a6f746 --- /dev/null +++ b/public/intune-definitions/9c.json @@ -0,0 +1 @@ +{"9c79e0df0f4653d3":{"id":"com.android.devicerestrictionpolicy.passwordminimumuppercasecharacters","displayName":"Number of uppercase characters required","description":"Enter the number of uppercase characters the password must have, between 1 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"9c2a68784b565215":{"id":"com.apple.assetcache.managed_allowcachedelete","displayName":"Allow Cache Delete","description":"Allow the system to purge content from the cache automatically when it needs disk space for other apps (i.e. when free disk space runs low on the computer). Customers who want Content Caching to be as effective as possible should turn this setting off.\r\nAvailable in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_allowcachedelete_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_allowcachedelete_true","displayName":"True","description":null,"helpText":null}]},"9c7e7a1b6c92255b":{"id":"com.apple.assetcache.managed_displayalerts","displayName":"Display Alerts","description":"If true, Content Caching displays exceptional conditions (alerts) as system notifications in the upper corner of the screen. Alerts were automatically displayed starting in macOS 10.13. In macOS 10.15 the alerts are off by default, but still available via this setting.\r\nAvailable in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_displayalerts_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_displayalerts_true","displayName":"True","description":null,"helpText":null}]},"9c077c4af5b63ba2":{"id":"com.apple.directoryservice.managed_clientid","displayName":"Client ID","description":"The client's identifier.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"9cabacfb32493000":{"id":"com.apple.familycontrols.contentfilter_sitewhitelist_item_address","displayName":"Address","description":"The site prefix, including http(s) scheme.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":null},"9c0692a4c3275029":{"id":"com.apple.fileproviderd_managementremotesyncingallowlist","displayName":"Management Remote Syncing Allow List","description":"An array of strings representing the composed identifiers of apps. The device allows the corresponding apps to use File Provider extension synchronization. If present, and `ManagementAllowsRemoteSyncing` is set to `true`, the device allows only the apps in this list to use synchronization. This key is ignored if `ManagementAllowsRemoteSyncing` is set to `false`. If present, the other options will only be evaluated for the apps in this list. The format of the app identifiers is \"Bundle-ID (Team-ID)\", for example `com.example.app (ABCD1234)`.","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":null},"9cf782eb2a6017c0":{"id":"com.apple.managedclient.preferences_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users","description":"If FriendlyURLs are enabled, Microsoft Edge will compute additional representations of the URL and place them on the clipboard.\n\nThis policy configures what format will be pasted when the user pastes in external applications, or inside Microsoft Edge without the 'Paste as' context menu item.\n\nIf configured, this policy makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu will not be available.\n\n* Not configured = The user will be able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\n\n* 1 = No additional formats will be stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature will be disabled.\n\n* 3 = The user will get a friendly URL whenever they paste into surfaces that accept rich text. The plain URL will still be available for non-rich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\n\n* 4 = (Not currently used)\n\nThe richer formats may not be well-supported in some paste destinations and/or websites. As such, if this policy is to be configured, then the plain URL option is recommended.\n\nPolicy options mapping:\n\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\n\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.\n\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#configurefriendlyurlformat"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_configurefriendlyurlformat_0","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_configurefriendlyurlformat_1","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_configurefriendlyurlformat_2","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},"9c766e26b0ac28c1":{"id":"com.apple.managedclient.preferences_dnsoverhttpsmode","displayName":"Control the mode of DNS-over-HTTPS","description":"Control the mode of the DNS-over-HTTPS resolver. Note that this policy will only set the default mode for each query. The mode can be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.\n\nThe \"off\" mode will disable DNS-over-HTTPS.\n\nThe \"automatic\" mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error.\n\nThe \"secure\" mode will only send DNS-over-HTTPS queries and will fail to resolve on error.\n\nIf you don't configure this policy, the browser might send DNS-over-HTTPS requests to a resolver associated with the user's configured system resolver.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#dnsoverhttpsmode"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_dnsoverhttpsmode_0","displayName":"Enable DNS-over-HTTPS with insecure fallback","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_dnsoverhttpsmode_1","displayName":"Disable DNS-over-HTTPS","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_dnsoverhttpsmode_2","displayName":"Enable DNS-over-HTTPS without insecure fallback","description":null,"helpText":null}]},"9c8d7a267ab937c0":{"id":"com.apple.managedclient.preferences_extensioninstallallowlist","displayName":"Allow specific extensions to be installed","description":"By default, all extensions are allowed. However, if you block all extensions by setting the 'ExtensionInstallBlockList' policy to \"*,\" users can only install extensions defined in this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensioninstallallowlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"9c875a16ac53f21b":{"id":"com.apple.managedclient.preferences_localnetworkaccessrestrictionstemporaryoptout","displayName":"Specifies whether to opt out of Local Network Access restrictions","description":"This policy allows for opting out of restrictions on requests to local network endpoints.\n\nIf you enable this policy, Local Network Access requests will only display warnings in Edge DevTools when Local Network Access checks fail.\n\nIf you disable or don't configure this policy, Local Network Access requests will follow the default handling behavior.\n\nFor more information about Local Network Access restrictions, see Local Network Access .\n\nTo allow specific URL patterns that should automatically be granted Local Network Access permission, use the LocalNetworkAccessAllowedForUrls policy.\n\nNote: This opt-out policy is temporary and will be removed after Microsoft Edge version 152.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#localnetworkaccessrestrictionstemporaryoptout"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_localnetworkaccessrestrictionstemporaryoptout_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_localnetworkaccessrestrictionstemporaryoptout_true","displayName":"Enabled","description":null,"helpText":null}]},"9c01aa2215628706":{"id":"com.apple.mcx_com.apple.mcx-fdefilevaultoptions","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"5b327ef8-f9fb-4e10-ba9e-8a8ca9bf4ed9","categoryName":"FileVault Options","options":null},"9cdb65333c7b840a":{"id":"com.apple.mcxmenuextras_ppp.menu","displayName":"PPP","description":"If true, enables the PPP menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_ppp.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_ppp.menu_true","displayName":"True","description":null,"helpText":null}]},"9c164e03bd195f5a":{"id":"com.apple.tcc.configuration-profile-policy_com.apple.tcc.configuration-profile-policy","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"9c0fc341c988630c":{"id":"com.apple.universalaccess_stereoasmono","displayName":"Stereo as Mono","description":"If true, plays stereo audio as mono.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_stereoasmono_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_stereoasmono_true","displayName":"True","description":null,"helpText":null}]},"9c61e9fbf1ffe1a8":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_type","displayName":"Type","description":"Defines the action for the removable storage groups in IncludedIDList\nEnforcement: Allow or Deny\nAudit: AuditAllowed or AuditDenied","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":[{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_type_allow","displayName":"Allow","description":null,"helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_type_deny","displayName":"Deny","description":null,"helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_type_auditallowed","displayName":"Audit Allowed","description":null,"helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_type_auditdenied","displayName":"Audit Denied","description":null,"helpText":null}]},"9c729ca46fc87989":{"id":"device_vendor_msft_policy_config_admx_kerberos_alwayssendcompoundid","displayName":"Always send compound authentication first","description":"This policy setting controls whether a device always sends a compound authentication request when the resource domain requests compound identity.\r\n\r\nNote: For a domain controller to request compound authentication, the policies \"KDC support for claims, compound authentication, and Kerberos armoring\" and \"Request compound authentication\" must be configured and enabled in the resource account domain. \r\n\r\nIf you enable this policy setting and the resource domain requests compound authentication, devices that support compound authentication always send a compound authentication request. \r\n\r\nIf you disable or do not configure this policy setting and the resource domain requests compound authentication, devices will send a non-compounded authentication request first then a compound authentication request when the service requests compound authentication.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-alwayssendcompoundid"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_alwayssendcompoundid_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_alwayssendcompoundid_1","displayName":"Enabled","description":null,"helpText":null}]},"9c025b40badf7f68":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescheduletime","displayName":"Configure local setting override for scheduled scan time","description":"This policy setting configures a local override for the configuration of scheduled scan time. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-localsettingoverridescheduletime"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescheduletime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescheduletime_1","displayName":"Enabled","description":null,"helpText":null}]},"9ca6572d6a2f8bfe":{"id":"device_vendor_msft_policy_config_admx_power_allowsystempowerrequestac","displayName":"Allow applications to prevent automatic sleep (plugged in)","description":"This policy setting allows applications and services to prevent automatic sleep.\r\n\r\nIf you enable this policy setting, any application, service, or device driver prevents Windows from automatically transitioning to sleep after a period of user inactivity.\r\n\r\nIf you disable or do not configure this policy setting, applications, services, or drivers do not prevent Windows from automatically transitioning to sleep. Only user input is used to determine if Windows should automatically sleep.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-allowsystempowerrequestac"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_allowsystempowerrequestac_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_allowsystempowerrequestac_1","displayName":"Enabled","description":null,"helpText":null}]},"9c9005f20b07f417":{"id":"device_vendor_msft_policy_config_admx_servermanager_servermanagerautorefreshrate","displayName":"Configure the refresh interval for Server Manager","description":"This policy setting allows you to set the refresh interval for Server Manager. Each refresh provides Server Manager with updated information about which roles and features are installed on servers that you are managing by using Server Manager. Server Manager also monitors the status of roles and features installed on managed servers.\r\n\r\nIf you enable this policy setting, Server Manager uses the refresh interval specified in the policy setting instead of the “Configure Refresh Interval” setting (in Windows Server 2008 and Windows Server 2008 R2), or the “Refresh the data shown in Server Manager every [x] [minutes/hours/days]” setting (in Windows Server 2012) that is configured in the Server Manager console.\r\n\r\nIf you disable this policy setting, Server Manager does not refresh automatically. If you do not configure this policy setting, Server Manager uses the refresh interval settings that are specified in the Server Manager console.\r\n\r\nNote: The default refresh interval for Server Manager is two minutes in Windows Server 2008 and Windows Server 2008 R2, or 10 minutes in Windows Server 2012.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-servermanager#admx-servermanager-servermanagerautorefreshrate"],"categoryId":"e042b102-b12c-48d1-86ef-f6d296da5b95","categoryName":"Server Manager","options":[{"id":"device_vendor_msft_policy_config_admx_servermanager_servermanagerautorefreshrate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_servermanager_servermanagerautorefreshrate_1","displayName":"Enabled","description":null,"helpText":null}]},"9c390cca6db9e595":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_license_servers","displayName":"Use the specified Remote Desktop license servers","description":"This policy setting allows you to specify the order in which an RD Session Host server attempts to locate Remote Desktop license servers.\r\n\r\nIf you enable this policy setting, an RD Session Host server first attempts to locate the specified license servers. If the specified license servers cannot be located, the RD Session Host server will attempt automatic license server discovery. In the automatic license server discovery process, an RD Session Host server in a Windows Server-based domain attempts to contact a license server in the following order:\r\n\r\n 1. Remote Desktop license servers that are published in Active Directory Domain Services.\r\n\r\n 2. Remote Desktop license servers that are installed on domain controllers in the same domain as the RD Session Host server.\r\n\r\nIf you disable or do not configure this policy setting, the RD Session Host server does not specify a license server at the Group Policy level.\r\n\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-license-servers"],"categoryId":"4b540860-0858-48f4-8830-18383bb1766f","categoryName":"Licensing","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_license_servers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_license_servers_1","displayName":"Enabled","description":null,"helpText":null}]},"9ce844faf3e2cadf":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel","displayName":"Microsoft Excel 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Excel 2016.\r\nBy default, the user settings of Microsoft Excel 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Excel 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016excel"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel_1","displayName":"Enabled","description":null,"helpText":null}]},"9cdf2fc1f1ba5bd8":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_w32time_ntpserver","displayName":"NtpServer","description":null,"helpText":"","infoUrls":[],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":null},"9cd7ffd76cadb85e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on Shutdown: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"9c53356aaed09dfc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API","description":"Setting the policy to 3 lets websites ask for access to nearby Bluetooth devices. Setting the policy to 2 denies access to nearby Bluetooth devices.\r\n\r\nLeaving the policy unset lets sites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"9cc92c7434a3e058":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins_windowcaptureallowedbyoriginsdesc","displayName":"Allow Window and Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"9c1f7a579904dec7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication","description":"A list of TLS certificates that should be trusted by Google Chrome for server authentication.\r\nCertificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"9c2c04ecaf97a04f":{"id":"device_vendor_msft_policy_config_experience_showlockonusertile","displayName":"Show Lock On User Tile","description":"Shows or hides lock from the user tile menu. If you enable this policy setting, the lock option will be shown in the User Tile menu. If you disable this policy setting, the lock option will never be shown in the User Tile menu. If you do not configure this policy setting, users will be able to choose whether they want lock to show through the Power Options Control Panel.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#showlockonusertile"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_showlockonusertile_0","displayName":"Disabled","description":"The lock option is not displayed in the User Tile menu.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_showlockonusertile_1","displayName":"Enabled","description":"The lock option is displayed in the User Tile menu.","helpText":null}]},"9c53929332634521":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype","displayName":"Include Skype","description":"[ENABLED BY DEFAULT]\r\n\r\nSkype for Business GAL (Global Address List) data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeSkype\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype_1","displayName":"Enabled","description":null,"helpText":null}]},"9c099bfa5a0abb47":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled","displayName":"Enabled","description":"Enables ODFC containers which changes the location of some Office based data.\r\n\r\nCAUTION: ODFC containers are designed to work with other roaming profie solutions. It is recommended to only use Profile containers when using FSLogix.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\Enabled\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9c9c27c1a33fde16":{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar","displayName":"Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar","description":"This policy setting allows Internet Explorer to provide enhanced suggestions as the user types in the Address bar. To provide enhanced suggestions, the user's keystrokes are sent to Microsoft through Microsoft services.\n\nIf you enable this policy setting, users receive enhanced suggestions while typing in the Address bar. In addition, users won't be able to change the Suggestions setting on the Settings charm.\n\nIf you disable this policy setting, users won't receive enhanced suggestions while typing in the Address bar. In addition, users won't be able to change the Suggestions setting on the Settings charm.\n\nIf you don't configure this policy setting, users can change the Suggestions setting on the Settings charm.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenhancedsuggestionsinaddressbar"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},"9c02504b60f8a0d2":{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2","displayName":"Disable Internet Explorer 11 as a standalone browser","description":"This policy lets you restrict launching of Internet Explorer as a standalone browser.\n\nIf you enable this policy, it:\n- Prevents Internet Explorer 11 from launching as a standalone browser.\n- Restricts Internet Explorer's usage to Microsoft Edge's native 'Internet Explorer mode'.\n- Redirects attempts at launching Internet Explorer 11 to Microsoft Edge Stable Channel browser.\n- Overrides any other policies that redirect to Internet Explorer 11.\n\nEven with this policy enabled launching Internet Explorer 11 using COM automation will still be allowed. To disable COM automation launches of Internet Explorer 11 use the \"Disable Internet Explorer 11 COM Automation\" group policy.\n\nIf you disable, or don’t configure this policy, all sites are opened using the current active browser settings. Note: Microsoft Edge Stable Channel must be installed for this policy to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerapp"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"9c872a5ab7ba1827":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszonenavigatewindowsandframes"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"9ca7f6389d622ee8":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowautomaticpromptingforfiledownloads"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"9cc6931ea42be0fb":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_v2","displayName":"Interactive Logon Machine Inactivity Limit","description":"Interactive logon: Machine inactivity limit. Windows notices inactivity of a logon session, and if the amount of inactive time exceeds the inactivity limit, then the screen saver will run, locking the session. Default: not enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_machineinactivitylimit"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"9c025f79f367ac44":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_amountofidletimerequiredbeforesuspendingsession","displayName":"Microsoft Network Server Amount Of Idle Time Required Before Suspending Session","description":"Microsoft network server: Amount of idle time required before suspending a session This security setting determines the amount of continuous idle time that must pass in a Server Message Block (SMB) session before the session is suspended due to inactivity. Administrators can use this policy to control when a computer suspends an inactive SMB session. If client activity resumes, the session is automatically reestablished. For this policy setting, a value of 0 means to disconnect an idle session as quickly as is reasonably possible. The maximum value is 99999, which is 208 days; in effect, this value disables the policy. Default: This policy is not defined, which means that the system treats it as 15 minutes for servers and undefined for workstations.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_amountofidletimerequiredbeforesuspendingsession"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"9c03d68b6ebd7137":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites","displayName":"Configure favorites","description":"Configures a list of managed favorites.\r\n\r\nThe policy creates a list of favorites. Each favorite contains the keys \"name\" and \"url,\" which hold the favorite's name and its target. You can configure a subfolder by defining a favorites without an \"url\" key but with an additional \"children\" key that contains a list of favorites as defined above (some of which may be folders again). Microsoft Edge amends incomplete URLs as if they were submitted via the Address Bar, for example \"microsoft.com\" becomes \"https://microsoft.com/\".\r\n\r\nThese favorites are placed in a folder that can't be modified by the user (but the user can choose to hide it from the favorites bar). By default the folder name is \"Managed favorites\" but you can change it by adding to the list of favorites a dictionary containing the key \"toplevel_name\" with the desired folder name as the value.\r\n\r\nManaged favorites are not synced to the user account and can't be modified by extensions.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"toplevel_name\": \"My managed favorites folder\"\r\n }, \r\n {\r\n \"url\": \"microsoft.com\", \r\n \"name\": \"Microsoft\"\r\n }, \r\n {\r\n \"url\": \"bing.com\", \r\n \"name\": \"Bing\"\r\n }, \r\n {\r\n \"name\": \"Microsoft Edge links\", \r\n \"children\": [\r\n {\r\n \"url\": \"www.microsoftedgeinsider.com\", \r\n \"name\": \"Microsoft Edge Insiders\"\r\n }, \r\n {\r\n \"url\": \"www.microsoft.com/windows/microsoft-edge\", \r\n \"name\": \"Microsoft Edge\"\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_1","displayName":"Enabled","description":null,"helpText":null}]},"9cefad5de282ea3b":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_exemptfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"9c96dbcc5ee9dfca":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls","displayName":"Block insecure content on specified sites","description":"Create a list of URL patterns to specify sites that aren't allowed to display blockable (i.e. active) mixed content (that is, HTTP content on HTTPS sites) and for which optionally blockable mixed content upgrades will be disabled.\r\n\r\nIf you don't configure this policy, blockable mixed content will be blocked and optionally blockable mixed content will be upgraded. However, users will be allowed to set exceptions to allow insecure mixed content for specific sites.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9c4cd990d944d370":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox","displayName":"New tab page search box experience (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox_redirect","displayName":"Address bar","description":null,"helpText":null}]},"9c58a14054188695":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls_serialblockedforurlsdesc","displayName":"Block the Serial API on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"9c3c7856edc965b2":{"id":"device_vendor_msft_policy_config_mssecurityguide_turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications","displayName":"Turn on Windows Defender protection against Potentially Unwanted Applications (DEPRECATED)","description":"If this setting is enabled, Windows Defender protects against Potentially Unwanted Applications. For more information, see https://blogs.technet.microsoft.com/mmpc/2015/11/25/shields-up-on-potentially-unwanted-applications-in-your-enterprise/.\r\n\r\nIf this setting is disabled or not configured, Potentially Unwanted Application protection is disabled.\r\n\r\nBeginning with Windows 10 v1809 and Windows Server 2019, this functionality should instead be configured through the following Group Policy setting:\r\nComputer Configuration\\Administrative Templates\\Windows Components\\Windows Defender Antivirus, Configure detection for potentially unwanted applications.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications"],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications_1","displayName":"Enabled","description":null,"helpText":null}]},"9c31c8ef9a60e1e4":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_excelexe127","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_excelexe127_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_excelexe127_1","displayName":"True","description":null,"helpText":null}]},"9cb32e549a5aaecf":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_msaccessexe67","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_msaccessexe67_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_msaccessexe67_1","displayName":"True","description":null,"helpText":null}]},"9c83bd987a1959ec":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_exprwdexe","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_exprwdexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_exprwdexe_1","displayName":"True","description":null,"helpText":null}]},"9c8f04e397dc9c71":{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum","displayName":"Select the driver signature mechanism for this computer:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_0","displayName":"Require inbox signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_1","displayName":"Allow inbox and Print Drivers Trusted Store signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_2","displayName":"Allow inbox, Print Drivers Trusted Store, and WHQL signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_3","displayName":"Allow inbox, Print Drivers Trusted Store, WHQL, and Trusted Publisher Store signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_4","displayName":"Allow all validly signed drivers","description":null,"helpText":null}]},"9c751dc68daab7b8":{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_client","displayName":"Allow Basic authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication.\n\nIf you enable this policy setting, the WinRM client uses Basic authentication. If WinRM is configured to use HTTP transport, the user name and password are sent over the network as clear text.\n\nIf you disable or do not configure this policy setting, the WinRM client does not use Basic authentication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowbasicauthentication-client"],"categoryId":"0f6d725e-2c2d-4926-8e78-3d2d5867eef5","categoryName":"Win RM Client","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_client_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_client_1","displayName":"Enabled","description":null,"helpText":null}]},"9ceeadd5bcf9fcc7":{"id":"device_vendor_msft_policy_config_search_alwaysuseautolangdetection","displayName":"Always Use Auto Lang Detection","description":"Specifies whether to always use automatic language detection when indexing content and properties. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#alwaysuseautolangdetection"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_alwaysuseautolangdetection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_alwaysuseautolangdetection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"9ca7666bc91263cd":{"id":"device_vendor_msft_policy_config_timelanguagesettings_blockcleanupofunusedpreinstalledlangpacks","displayName":"Block Cleanup Of Unused Preinstalled Lang Packs","description":"This policy setting controls whether the LPRemove or Language Packs Uninstaller task will run to clean up language packs installed on a machine but are not used by any users on that machine.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#blockcleanupofunusedpreinstalledlangpacks"],"categoryId":"4a5a066e-27af-46c1-9714-9e4542ffc1f9","categoryName":"Time Language Settings","options":[{"id":"device_vendor_msft_policy_config_timelanguagesettings_blockcleanupofunusedpreinstalledlangpacks_0","displayName":"Block","description":"Not blocked.","helpText":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_blockcleanupofunusedpreinstalledlangpacks_1","displayName":"Allow","description":"Blocked.","helpText":null}]},"9cba151217b34f62":{"id":"passcode_maximumfailedattempts","displayName":"Maximum Number of Failed Attempts","description":"Specifies the number of failed passcode attempts that can be made before an iOS device is erased or a macOS device is locked. If you don’t change this setting, after six failed attempts, the device imposes a time delay before a passcode can be entered again. The time delay increases with each failed attempt. After the final failed attempt, all data and settings are securely erased from the iOS device. A macOS device locks after the final attempt. The passcode time delay begins after the sixth attempt, so if you set this value to six or lower, no time delay is imposed and the device is erased when the attempt limit is exceeded.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"9c64c3769922b129":{"id":"safari_privacy_permissiondefaults","displayName":"Permission Defaults","description":"The dictionary of website permission defaults. Each key in the dictionary represents a single website, or a website and its sub-domains. The dictionary values represent the permission defaults that Safari applies for each website that matches the key.\n\nSafari supports the following patterns for the website key:\n\n- A specific domain such as \"example.com\" or \"www.example.com\". The permission defaults apply to that website only.\n- A wildcard domain that uses a single \"\\*\" character as a prefix for the domain, such as \"\\*example.com\". The permission defaults apply to both the exact domain \"example.com\", and any sub-domains such as \"www.example.com\". It won't match other domains with a similar string suffix such as \"myexample.com\".\n\nWhen multiple patterns match a website, Safari uses the most precise pattern. For example, for the website \"www.example.com\", if rules \"www.example.com\" and \"*example.com\" match, Safari uses the former.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"9cee781fdea3f194":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"9cb8c2815ec8a1e1":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1","displayName":"Initial reminder balloon lifetime (User)","description":"Determines how long the first reminder balloon for a network status change is displayed.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the first reminder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-reminderinittimeout-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1_1","displayName":"Enabled","description":null,"helpText":null}]},"9c42b93f6545f55d":{"id":"user_vendor_msft_policy_config_admx_startmenu_nogamesfolderonstartmenu","displayName":"Remove Games link from Start Menu (User)","description":"If you enable this policy the start menu will not show a link to the Games folder.\r\n\r\nIf you disable or do not configure this policy, the start menu will show a link to the Games folder, unless the user chooses to remove it in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nogamesfolderonstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nogamesfolderonstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nogamesfolderonstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"9c4e9872cbba0817":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_override","displayName":"Allow users to change this setting (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_override_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_override_1","displayName":"True","description":null,"helpText":null}]},"9cbfd7a81c946815":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_browserswitcherurlgreylistdesc","displayName":"Websites that should never trigger a browser switch. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"9c69fd9bb161bc0a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"9c3d4feb5134337d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload","displayName":"Allows a page to show popups during its unloading (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload_1","displayName":"Enabled","description":null,"helpText":null}]},"9c15633fd9d8159d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation","displayName":"Configure the home page URL (User)","description":"Setting the policy sets the default homepage URL in Google Chrome. You open the homepage using the Home button. On desktop, the RestoreOnStartup policies control the pages that open on startup.\r\n\r\nIf the homepage is set to the New Tab Page, by the user or HomepageIsNewTabPage, this policy has no effect.\r\n\r\n The URL needs a standard scheme, such as http://example.com or https://example.com. When this policy is set, users can't change their homepage URL in Google Chrome.\r\n\r\nLeaving both HomepageLocation and HomepageIsNewTabPage unset lets users choose their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"9cd9695671baa8e2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled","displayName":"Use the Happy Eyeballs V3 algorithm (User)","description":"This feature enables the Happy Eyeballs V3 algorithm to make connection attempts. See https://datatracker.ietf.org/doc/draft-pauly-happy-happyeyeballs-v3 for details.\r\n\r\nSetting the policy to Enabled means Google Chrome will use the Happy Eyeballs V3 algorithm for connection attempts.\r\n\r\nSetting the policy to Disabled turns off the Happy Eyeballs V3 algorithm.\r\n\r\nNot setting the policy, Google Chrome will turn on or off the Happy Eyeballs V3 algorithm based on chrome://flags/#happy-eyeballs-v3.\r\n\r\nThis policy supports dynamic refresh.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9ce20d4415afc864":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled","displayName":"Control the new behavior of HTMLElement.offsetParent (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9c30e666b25fdafe":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally","displayName":"Always open PDF files externally (User)","description":"Disables the internal PDF viewer in Microsoft Edge.\r\n\r\nIf you enable this policy Microsoft Edge treats PDF files as downloads and lets users open them with the default application.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will open PDF files (unless the user disables it).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_1","displayName":"Enabled","description":null,"helpText":null}]},"9cfeb39e58d15482":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting","displayName":"Configure cookies (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_1","displayName":"Let all sites create cookies","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_2","displayName":"Don't let any site create cookies","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_4","displayName":"Keep cookies for the duration of the session","description":null,"helpText":null}]},"9c10fe303d5d9dde":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_applicationguardcontainerproxy","displayName":"Application Guard Container Proxy (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":null},"9c554978b4e5e536":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastserviceserverinfo4","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"9c4fada10fee98ad":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotuploadmediafiles","displayName":"Do not upload media files (User)","description":"Disables/Enables uploading of media files.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotuploadmediafiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donotuploadmediafiles_1","displayName":"Enabled","description":null,"helpText":null}]},"9c8ca48027e9bf99":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc17_l_pathcolon17","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"9c796133e855df2f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_uselongfilenameswheneverpossible","displayName":"Use long file names whenever possible (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"0775f21c-9ca1-446d-b1dc-3cea45f15605","categoryName":"Files","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_uselongfilenameswheneverpossible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_uselongfilenameswheneverpossible_1","displayName":"Enabled","description":null,"helpText":null}]},"9c42dc83e6b6803a":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_sendtoonenote_l_disableoutlooksendemailtoonenoteoption","displayName":"Disable Outlook send email to OneNote option (User)","description":"This policy disables the OneNote ''Send to OneNote'' add-in for Microsoft Outlook. By default OneNote installs an add-in on the Outlook toolbar which allows users to send emails to OneNote. The ''Send to OneNote'' button appears on the main mail module in Outlook as well as when viewing an email message. You may disable this feature with this policy.","helpText":"","infoUrls":[],"categoryId":"a87f9d6a-0c84-4cad-839f-e912c6006c12","categoryName":"Send to OneNote","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_sendtoonenote_l_disableoutlooksendemailtoonenoteoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_sendtoonenote_l_disableoutlooksendemailtoonenoteoption_1","displayName":"Enabled","description":null,"helpText":null}]},"9c6bd23b453d28f6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscripts","displayName":"Do not allow Outlook object model scripts to run for shared folders (User) (Deprecated)","description":"This policy setting controls whether Outlook executes scripts associated with custom forms or folder home pages for shared folders. \r\n\r\nIf you enable this policy setting, Outlook cannot execute any scripts associated with shared folders, overriding any configuration changes on users' computers. \r\n\r\nIf you disable this policy setting, Outlook will automatically run any scripts associated with custom forms or folder home pages for shared folders. \r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscripts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscripts_1","displayName":"Enabled","description":null,"helpText":null}]},"9cac66e91dae17c5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlylong_l_endearlylongspinid","displayName":"Minutes to reduce meetings by: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":null},"9c734807a72db142":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_newmaildesktopalert","displayName":"Do not display New Mail alert for users (User)","description":"By default, users receive an alert message on their desktops when new mail arrives. By enabling this setting, the alert is not displayed for new mail.","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_newmaildesktopalert_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_newmaildesktopalert_1","displayName":"Enabled","description":null,"helpText":null}]},"9cabc0eac35e417b":{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_autodiscoverredirectservers_l_autodiscoverredirectserverslist","displayName":"HTTPS server names: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":null},"9cee2efb8332bab3":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablelivesubtitles","displayName":"Don’t allow the use of Live Subtitles (User)","description":"\r\nThis policy setting controls whether users can turn on Live Subtitles during a presentation. By default, Live Subtitles are off but can be turned on by users.\r\n\r\nIf you enable this policy setting, users can't turn on Live Subtitles during a presentation.\r\n\r\nIf you disable or don't configure this policy setting, users can turn on Live Subtitles.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablelivesubtitles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_disablelivesubtitles_1","displayName":"Enabled","description":null,"helpText":null}]},"9c197154836a360d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtasks","displayName":"New tasks (User)","description":"Specifies the default start date for new tasks as they are entered in the current project. For projects scheduled from the start date, the options are \"Start on Project Start Date\" and \"Start on Current Date.\" For projects scheduled from the finish date, the options are \"Finish on Project Finish Date\" and \"Start on Current Date.\"\r\n\r\nIf you enable this setting, new tasks will start on the date you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtasks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtasks_1","displayName":"Enabled","description":null,"helpText":null}]},"9c38e8f0e9edc7a2":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enalbeconnectorsplitting","displayName":"Enable connector splitting (User)","description":"When you place a shape on the line of a connector, it splits and each piece becomes a separate connector glued to the shape. Not all drawing types support connector splitting.","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enalbeconnectorsplitting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enalbeconnectorsplitting_1","displayName":"Enabled","description":null,"helpText":null}]},"9c874d8cd4d721e0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_whitespacebetweenpagesprintviewonly","displayName":"Show white space between pages in Print Layout view (User)","description":"Determines whether the symbol used to represent white space between pages in Print view only is shown in the document.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_whitespacebetweenpagesprintviewonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_whitespacebetweenpagesprintviewonly_1","displayName":"Enabled","description":null,"helpText":null}]},"9c7c0fe396237a3c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_datecolon49","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/9d.json b/public/intune-definitions/9d.json new file mode 100644 index 000000000000..a7c444506b60 --- /dev/null +++ b/public/intune-definitions/9d.json @@ -0,0 +1 @@ +{"9dfcf389860cc29c":{"id":"ade_activatecellulardata","displayName":"Carrier activation server URL","description":"","helpText":"http://activation.carrier.net","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":null},"9d86cf3f4aa4f808":{"id":"com.apple.assetcache.managed_logclientidentity","displayName":"Log Client Identity","description":"If true, the Content Cache logs the IP address and port number of the clients that request content. ","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_logclientidentity_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_logclientidentity_true","displayName":"True","description":null,"helpText":null}]},"9d90987677f555bf":{"id":"com.apple.managedclient.preferences_cookiessessiononlyforurls","displayName":"Limit cookies from specific websites to the current session","description":"Cookies created by websites that match a URL pattern you define are deleted when the session ends (when the window closes).\n\nCookies created by websites that don't match the pattern are controlled by the \"DefaultCookiesSetting\" policy (if set) or by the user's personal configuration. This is also the default behavior if you don't configure this policy.\n\nIf Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See the \"BackgroundModeEnabled\" policy for information about configuring what happens when Microsoft Edge runs in background mode.\n\nYou can also use the \"CookiesAllowedForUrls\" and \"CookiesBlockedForUrls\" policies to control which websites can create cookies.\n\nNote there cannot be conflicting URL patterns set between these three policies:\n\n- \"CookiesBlockedForUrls\"\n\n- \"CookiesAllowedForUrls\"\n\n- CookiesSessionOnlyForUrls\n\nIf you set the \"RestoreOnStartup\" policy to restore URLs from previous sessions, this policy is ignored, and cookies are stored permanently for those sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#cookiessessiononlyforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"9d02e55a36a995e7":{"id":"com.apple.managedclient.preferences_manifestserver","displayName":"Deferred updates (Deprecated)","description":"You can tell AutoUpdate to either a) wait for a number of days to pass before downloading updates from the Current Channel, or b) stop Office from advancing beyond a given version. Deferred updates only affects Word, Excel, PowerPoint, Outlook, and OneNote. Other applications such as Edge, Defender, and Company Portal will receive updates based on the regular Current Channel schedule.","helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_manifestserver_0","displayName":"Defer 3 days","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_1","displayName":"Defer 7 days","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_2","displayName":"Defer 14 days","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_3","displayName":"Defer 21 days","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_4","displayName":"Defer 28 days","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_5","displayName":"Defer 45 days","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_6","displayName":"Pause at 16.64 (August 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_7","displayName":"Pause at 16.63 (July 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_8","displayName":"Pause at 16.62 (June 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_9","displayName":"Pause at 16.61 (May 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_10","displayName":"Pause at 16.60 (April 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_11","displayName":"Pause at 16.59 (March 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_12","displayName":"Pause at 16.58 (February 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_13","displayName":"Pause at 16.57 (January 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_14","displayName":"Pause at 16.56 (December 2021 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_15","displayName":"Pause at 16.55 (November 2021 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_16","displayName":"Pause at 16.54 (October 2021 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_17","displayName":"Pause at 16.53 (September 2021 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_18","displayName":"Pause at 16.52 (August 2021 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_19","displayName":"Pause at 16.51 (July 2021 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_20","displayName":"Pause at 16.80 (December 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_21","displayName":"Pause at 16.79 (November 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_22","displayName":"Pause at 16.78 (October 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_23","displayName":"Pause at 16.77 (September 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_24","displayName":"Pause at 16.76 (August 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_25","displayName":"Pause at 16.75 (July 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_26","displayName":"Pause at 16.74 (June 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_27","displayName":"Pause at 16.73 (May 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_28","displayName":"Pause at 16.72 (April 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_29","displayName":"Pause at 16.71 (March 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_30","displayName":"Pause at 16.70 (February 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_31","displayName":"Pause at 16.69 (January 2023 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_32","displayName":"Pause at 16.68 (December 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_33","displayName":"Pause at 16.67 (November 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_34","displayName":"Pause at 16.66 (October 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_35","displayName":"Pause at 16.65 (September 2022 Release)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_manifestserver_36","displayName":"Change Freeze","description":null,"helpText":null}]},"9d06edd5c865cb8b":{"id":"com.apple.managedclient.preferences_proxypacurl","displayName":"Set the proxy .pac file URL","description":"Specifies the URL for a proxy auto-config (PAC) file.\n\nThis policy is applied only if you selected 'Use a .pac proxy script' in the \"ProxyMode\" policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\n\nIf you enable this policy, you can specify the URL for a PAC file, which defines how the browser automatically chooses the appropriate proxy server for fetching a particular website.\n\nIf you disable or don't configure this policy, no PAC file is specified. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\n\nFor detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#proxypacurl"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"9dd2941532a0c110":{"id":"com.apple.managedclient.preferences_webrtclocalipsallowedurls","displayName":"Manage exposure of local IP addressess by WebRTC","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*contoso.com*\") for which local IP address should be exposed by WebRTC.\n\nIf you enable this policy and set a list of origins (URLs) or hostname patterns, when edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will expose the local IP address for cases that match patterns in the list.\n\nIf you disable or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will not expose local IP addresses. The local IP address is concealed with an mDNS hostname.\n\nIf you enable, disable, or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, WebRTC will expose local IP addresses.\n\nPlease note that this policy weakens the protection of local IP addresses that might be needed by administrators.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webrtclocalipsallowedurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"9da611083e71652f":{"id":"com.apple.screensaver_askforpassword","displayName":"Ask For Password","description":"If true, the user is prompted for a password when the screen saver is unlocked or stopped. When you use this prompt, you must also provide Ask For Password Delay. Available in macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"8cefd936-362e-4a24-bc76-e078b6fd13fa","categoryName":"Screensaver","options":[{"id":"com.apple.screensaver_askforpassword_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.screensaver_askforpassword_true","displayName":"True","description":null,"helpText":null}]},"9db062bbf6f37b02":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"9dd5a164367ef1d1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultlocalfontssetting","displayName":"Default Local Fonts permission setting","description":"Setting this policy controls the default behavior for the local fonts permission.\n\nIf you set the policy to BlockLocalFonts (value 2), access to local fonts is denied by default. Sites are prevented from accessing information about local fonts.\n\nIf you set the policy to AskLocalFonts (value 3), users are prompted when a site requests access to local fonts. If permission is granted, the site can access information about local fonts.\n\nIf a site is included in \"LocalFontsAllowedForUrls\" or \"LocalFontsBlockedForUrls\", then that setting overrides the value set for this policy.\n\nIf you don't configure this policy, users are prompted by default and can change this setting.\n\nPolicy options mapping:\n\n* BlockLocalFonts (2) = Denies the Local Fonts permission on all sites by default\n\n* AskLocalFonts (3) = Ask every time a site wants to obtain the Local Fonts permission\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultlocalfontssetting_blocklocalfonts","displayName":"Denies the Local Fonts permission on all sites by default","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultlocalfontssetting_asklocalfonts","displayName":"Ask every time a site wants to obtain the Local Fonts permission","description":null,"helpText":null}]},"9db77340043feccd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.idletimeout","displayName":"Delay before running idle actions","description":"Triggers an action when the computer is idle.\n\nIf you set this policy, it specifies the length of time without user input (in minutes) before the browser runs actions configured via the IdleTimeoutActions policy.\n\nIf you don't set this policy, the browser doesn't run any action.\n\nThe minimum threshold is 1 minute.\n\n\"User input\" is defined by Operating System APIs, and includes things like moving the mouse or typing on the keyboard.","helpText":null,"infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":null},"9df6f02ed63c881b":{"id":"device_vendor_msft_defender_configuration_oobeenablertpandsigupdate","displayName":"Oobe Enable Rtp And Sig Update","description":"This setting allows you to configure whether real-time protection and Security Intelligence Updates are enabled during OOBE (Out of Box experience).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_oobeenablertpandsigupdate_1","displayName":"If you enable this setting, real-time protection and Security Intelligence Updates are enabled during OOBE.","description":"If you enable this setting, real-time protection and Security Intelligence Updates are enabled during OOBE.","helpText":null},{"id":"device_vendor_msft_defender_configuration_oobeenablertpandsigupdate_0","displayName":"If you either disable or do not configure this setting, real-time protection and Security Intelligence Updates during OOBE is not enabled.","description":"If you either disable or do not configure this setting, real-time protection and Security Intelligence Updates during OOBE is not enabled.","helpText":null}]},"9de9f96f14c7d39e":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_simpletext_deviceinstall_deniedpolicy_simpletext_text","displayName":"Main Text","description":null,"helpText":"","infoUrls":[],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"9d80754cde398967":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_preferlocalresponsesoverlowerorderdns","displayName":"Prefer link local responses over DNS when received over a network with higher precedence","description":"Specifies that responses from link local name resolution protocols received over a network interface that is higher in the binding order are preferred over DNS responses from network interfaces lower in the binding order. Examples of link local name resolution protocols include link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT).\r\n\r\nIf you enable this policy setting, responses from link local protocols will be preferred over DNS responses if the local responses are from a network with a higher binding order.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, then DNS responses from networks lower in the binding order will be preferred over responses from link local protocols received from networks higher in the binding order.\r\n\r\nNote: This policy setting is applicable only if the turn off smart multi-homed name resolution policy setting is disabled or not configured.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-preferlocalresponsesoverlowerorderdns"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_preferlocalresponsesoverlowerorderdns_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_preferlocalresponsesoverlowerorderdns_1","displayName":"Enabled","description":null,"helpText":null}]},"9d835cd6fc01f396":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_nobackground5","displayName":"Do not apply during periodic background processing","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_nobackground5_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_nobackground5_1","displayName":"True","description":null,"helpText":null}]},"9dd7dc8ae737de82":{"id":"device_vendor_msft_policy_config_admx_pca_detectupdatefailurespolicy","displayName":"Detect applications unable to launch installers under UAC","description":"This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\\Administrative Templates\\Windows Components\\Application Compatibility.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pca#admx-pca-detectupdatefailurespolicy"],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectupdatefailurespolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectupdatefailurespolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"9dceb8ea76e460c7":{"id":"device_vendor_msft_policy_config_admx_qos_qosmaxoutstandingsends","displayName":"Limit outstanding packets","description":"Specifies the maximum number of outstanding packets permitted on the system. When the number of outstanding packets reaches this limit, the Packet Scheduler postpones all submissions to network adapters until the number falls below this limit.\r\n\r\n\"Outstanding packets\" are packets that the Packet Scheduler has submitted to a network adapter for transmission, but which have not yet been sent.\r\n\r\nIf you enable this setting, you can limit the number of outstanding packets.\r\n\r\nIf you disable this setting or do not configure it, then the setting has no effect on the system.\r\n\r\nImportant: If the maximum number of outstanding packets is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosmaxoutstandingsends"],"categoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","categoryName":"Qo S Packet Scheduler","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosmaxoutstandingsends_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosmaxoutstandingsends_1","displayName":"Enabled","description":null,"helpText":null}]},"9d4e49b3b0469b88":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_includeuserclaimscheck","displayName":"Include user claims","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_includeuserclaimscheck_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_includeuserclaimscheck_1","displayName":"True","description":null,"helpText":null}]},"9d296536e2fcf86e":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_auto_reconnect","displayName":"Automatic reconnection","description":"Specifies whether to allow Remote Desktop Connection clients to automatically reconnect to sessions on an RD Session Host server if their network link is temporarily lost. By default, a maximum of twenty reconnection attempts are made at five second intervals.\r\n\r\nIf the status is set to Enabled, automatic reconnection is attempted for all clients running Remote Desktop Connection whenever their network connection is lost.\r\n\r\nIf the status is set to Disabled, automatic reconnection of clients is prohibited.\r\n\r\nIf the status is set to Not Configured, automatic reconnection is not specified at the Group Policy level. However, users can configure automatic reconnection using the \"Reconnect if connection is dropped\" checkbox on the Experience tab in Remote Desktop Connection.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-auto-reconnect"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_auto_reconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_auto_reconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"9d80151d474295b1":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect","displayName":"Select network detection on the server","description":"This policy setting allows you to specify how the Remote Desktop Protocol will try to detect the network quality (bandwidth and latency).\r\n\r\nYou can choose to disable Connect Time Detect, Continuous Network Detect, or both Connect Time Detect and Continuous Network Detect. \r\n\r\nIf you disable Connect Time Detect, Remote Desktop Protocol will not determine the network quality at the connect time, and it will assume that all traffic to this server originates from a low-speed connection.\r\n\r\nIf you disable Continuous Network Detect, Remote Desktop Protocol will not try to adapt the remote user experience to varying network quality. \r\n\r\nIf you disable Connect Time Detect and Continuous Network Detect, Remote Desktop Protocol will not try to determine the network quality at the connect time; instead it will assume that all traffic to this server originates from a low-speed connection, and it will not try to adapt the user experience to varying network quality.\r\n\r\nIf you disable or do not configure this policy setting, Remote Desktop Protocol will spend up to a few seconds trying to determine the network quality prior to the connection, and it will continuously try to adapt the user experience to varying network quality.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-select-network-detect"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect_1","displayName":"Enabled","description":null,"helpText":null}]},"9ddeaf9b65c0307b":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2","displayName":"Set time limit for disconnected sessions","description":"This policy setting allows you to configure a time limit for disconnected Remote Desktop Services sessions.\r\n\r\nYou can use this policy setting to specify the maximum amount of time that a disconnected session remains active on the server. By default, Remote Desktop Services allows users to disconnect from a Remote Desktop Services session without logging off and ending the session.\r\n\r\nWhen a session is in a disconnected state, running programs are kept active even though the user is no longer actively connected. By default, these disconnected sessions are maintained for an unlimited time on the server.\r\n\r\nIf you enable this policy setting, disconnected sessions are deleted from the server after the specified amount of time. To enforce the default behavior that disconnected sessions are maintained for an unlimited time, select Never. If you have a console session, disconnected session time limits do not apply.\r\n\r\n\r\nIf you disable or do not configure this policy setting, this policy setting is not specified at the Group Policy level. Be y default, Remote Desktop Services disconnected sessions are maintained for an unlimited amount of time. \r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sessions-disconnected-timeout-2"],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_1","displayName":"Enabled","description":null,"helpText":null}]},"9d2f198a2820274f":{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditapplicationgroupmanagement","displayName":"Account Management Audit Application Group Management","description":"This policy setting allows you to audit events generated by changes to application groups such as the following: Application group is created, changed, or deleted. Member is added or removed from an application group. If you configure this policy setting, an audit event is generated when an attempt to change an application group is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when an application group changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountmanagement_auditapplicationgroupmanagement"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditapplicationgroupmanagement_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditapplicationgroupmanagement_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditapplicationgroupmanagement_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditapplicationgroupmanagement_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"9d958c8191f08bf0":{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditcomputeraccountmanagement","displayName":"Account Management Audit Computer Account Management","description":"This policy setting allows you to audit events generated by changes to computer accounts such as when a computer account is created, changed, or deleted. If you configure this policy setting, an audit event is generated when an attempt to change a computer account is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a computer account changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountmanagement_auditcomputeraccountmanagement"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditcomputeraccountmanagement_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditcomputeraccountmanagement_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditcomputeraccountmanagement_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditcomputeraccountmanagement_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"9d5586c65c088181":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_downloaddirectory","displayName":"Set download directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":null},"9ddcfcd18978cc4a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled","displayName":"Enable the Shared Clipboard Feature","description":"Enable the Shared Clipboard feature which allows users to send text between Chrome Desktops and an Android device when Sync is enabled and the user is Signed-in.\r\n\r\nIf this policy is set to true, the capability of sending text, cross device, for chrome user is enabled.\r\n\r\nIf this policy is set to false, the capability of sending text, cross device, for chrome user is disabled.\r\n\r\nIf you set this policy, users cannot change or override it.\r\n\r\nIf this policy is left unset, the shared clipboard feature is enabled by default.\r\n\r\nIt is up to the admins to set policies in all platforms they care about. It's recommended to set this policy to one value in all platforms.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9d539eab76b4fdc6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_browserswitcherurllistdesc","displayName":"Websites to open in alternative browser (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"9d134b987af9d1cf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain","displayName":"Configure the required domain name for remote access hosts","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: my-awesome-domain.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_1","displayName":"Enabled","description":null,"helpText":null}]},"9d07c95aa2943c6e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled","displayName":"Allows the AppCache feature to be re-enabled even if it is off by default.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9de2c7cb3c8f5d01":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings","displayName":"Settings for Tab Organizer (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_0","displayName":"Allow Tab Organizer and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_1","displayName":"Allow Tab Organizer without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_2","displayName":"Do not allow Tab Organizer.","description":null,"helpText":null}]},"9df1f03ef4523632":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl","displayName":"WebRTC per URL IP Handling","description":"This policy allows restricting which IP addresses and interfaces WebRTC uses when attempting to find the best available connection for each specific URL pattern.\r\n\r\nIt accepts a list of URL patterns and handling type pairs. The URL patterns are checked in order and the first match will configure which handling is used by WebRTC for the domain. When the URL of the current document is not matched against any entry, it uses the configuration set by the policy WebRtcIPHandling.\r\n\r\nFor detailed information on valid input patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nValid handling values:\r\n\r\n* default - WebRTC uses all network interfaces.\r\n\r\n* default_public_and_private_interfaces - WebRTC uses all public and private interfaces.\r\n\r\n* default_public_interface_only - WebRTC uses all public interfaces, but not private ones.\r\n\r\n* disable_non_proxied_udp - WebRTC uses either UDP SOCKS proxying or will fallback to TCP proxying.\r\n\r\nSee RFC 8828 section 5.2 (https://tools.ietf.org/html/rfc8828.html#section-5.2) for a detailed description of all the handling values.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebRtcIPHandlingUrl for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.example.com\",\r\n \"handling\": \"default_public_and_private_interfaces\"\r\n },\r\n {\r\n \"url\": \"https://[*.]example.edu\",\r\n \"handling\": \"default_public_interface_only\"\r\n },\r\n {\r\n \"url\": \"*\",\r\n \"handling\": \"disable_non_proxied_udp\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"b811c4fe-7ff0-4bd1-a454-0918d4e2f896","categoryName":"Web Rtc settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_1","displayName":"Enabled","description":null,"helpText":null}]},"9d98fb6936bdd498":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol","displayName":"Enable App Installer ms-appinstaller protocol","description":"This policy controls whether users can install packages from a website that is using the ms-appinstaller protocol.\n\nIf you enable this setting, users will be able to install packages from websites that use this protocol.\n\nIf you disable or do not configure this setting, users will not be able to install packages from websites that use this protocol.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablemsappinstallerprotocol"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol_1","displayName":"Enabled","description":null,"helpText":null}]},"9d043af21f72e07e":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"9d61197eef7eb632":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"9d8823b949749cc7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode","displayName":"Extend Adobe Flash content setting to all content","description":"If you enable this policy, all Adobe Flash content embedded in websites that are set to allow Adobe Flash in the content settings -- either by the user or by enterprise policy -- will run. This includes content from other origins and/or small content.\r\n\r\nTo control which websites are allowed to run Adobe Flash, see the specifications in the 'DefaultPluginsSetting' (Default Adobe Flash setting), 'PluginsAllowedForUrls' (Allow the Adobe Flash plug-in on specific sites), and 'PluginsBlockedForUrls' (Block the Adobe Flash plug-in on specific sites) policies.\r\n\r\nIf you disable this policy or don't configure it, Adobe Flash content from other origins (from sites that aren't specified in the three policies mentioned immediately above) or small content might be blocked.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_1","displayName":"Enabled","description":null,"helpText":null}]},"9dc3ab9b4bfe7656":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist","displayName":"Block access to a list of URLs","description":"Define a list of sites, based on URL patterns, that are blocked (your users can't load them).\r\n\r\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nYou can define exceptions in the 'URLAllowlist' (Define a list of allowed URLs) policy. These policies are limited to 1000 entries; subsequent entries are ignored.\r\n\r\nNote that blocking internal 'edge://*' URLs isn't recommended - this may lead to unexpected errors.\r\n\r\nThis policy doesn't prevent the page from updating dynamically through JavaScript. For example, if you block 'contoso.com/abc', users might still be able to visit 'contoso.com' and click on a link to visit 'contoso.com/abc', as long as the page doesn't refresh.\r\n\r\nIf you don't configure this policy, no URLs are blocked.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"9da0b3f67faf9ee7":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_evictserverversionspolicy","displayName":"Age out the locally cached copies of server document versions that are more than n days old.","description":"\r\n This policy controls when locally cached Office version documents from the server are aged out of the local cache.\r\n\r\n If you enable this policy setting, Office document versions from the server that have been locally cached for more than n days, will be deleted from the local cache.\r\n\r\n If you disable or do not configure this policy setting, Office document versions from the server that have been locally cached, will be deleted from the local cache if older than the default of one day.","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_evictserverversionspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_evictserverversionspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"9d867d658e06d4bb":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_spdesignexe135","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_spdesignexe135_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_spdesignexe135_1","displayName":"True","description":null,"helpText":null}]},"9d0a63c6ea141ccd":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_forceallowtheseapps","displayName":"Let Apps Access Messaging Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"9d56bdbb422e8073":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableaccountprotectionui","displayName":"Disable Account Protection UI","description":"Use this policy setting to specify if to display the Account protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disableaccountprotectionui"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableaccountprotectionui_0","displayName":"(Disable) The users can see the display of the Account protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the Account protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableaccountprotectionui_1","displayName":"(Enable) The users cannot see the display of the Account protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the Account protection area in Windows Defender Security Center.","helpText":null}]},"9d5d40089d050c48":{"id":"enrollment_autopilot_dpp_forcedenrollment","displayName":"Hide change account options","description":"Options to change account and start over with a different account appear, respectively, during initial device setup on the company sign-in page, and on the domain error page. To hide these options, you must configure company branding in Microsoft Entra ID","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_forcedenrollment_0","displayName":"Show","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_forcedenrollment_1","displayName":"Hide","description":null,"helpText":null}]},"9d81b20994676972":{"id":"passcode_customregex","displayName":"Custom Regex","description":"Specifies a regular expression, and its description, to enforce password compliance. Use the simpler passcode settings whenever possible, and rely on regular expression matching only when necessary. Mistakes in regular expressions can lead to frustrating user experiences, such as unsatisfiable passcode policies, or policy descriptions that don't match the enforced policy.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"9d7f0585ce32ccc7":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_descriptioncolon65","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"9d35c643803185cd":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_newconnectionwizard","displayName":"Prohibit access to the New Connection Wizard (User)","description":"Determines whether users can use the New Connection Wizard, which creates new network connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Make New Connection icon does not appear in the Start Menu on in the Network Connections folder. As a result, users (including administrators) cannot start the New Connection Wizard.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Make New Connection icon appears in the Start menu and in the Network Connections folder for all users. Clicking the Make New Connection icon starts the New Connection Wizard.\r\n\r\nNote: Changing this setting from Enabled to Not Configured does not restore the Make New Connection icon until the user logs off or on. When other changes to this setting are applied, the icon does not appear or disappear in the Network Connections folder until the folder is refreshed.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-newconnectionwizard"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_newconnectionwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_newconnectionwizard_1","displayName":"Enabled","description":null,"helpText":null}]},"9d164f84379fd1f9":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_1","displayName":"Synchronize all offline files when logging on (User)","description":"Determines whether offline files are fully synchronized when users log on.\r\n\r\nThis setting also disables the \"Synchronize all offline files before logging on\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, offline files are fully synchronized at logon. Full synchronization ensures that offline files are complete and current. Enabling this setting automatically enables logon synchronization in Synchronization Manager.\r\n\r\nIf this setting is disabled and Synchronization Manager is configured for logon synchronization, the system performs only a quick synchronization. Quick synchronization ensures that files are complete but does not ensure that they are current.\r\n\r\nIf you do not configure this setting and Synchronization Manager is configured for logon synchronization, the system performs a quick synchronization by default, but users can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To change the synchronization method without setting a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the \"Synchronize all offline files before logging on\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatlogon-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_1_1","displayName":"Enabled","description":null,"helpText":null}]},"9d5e46ad97c8c4e9":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnodragtoolbar","displayName":"Prevent users from rearranging toolbars (User)","description":"This policy setting allows you to prevent users from rearranging toolbars.\r\n\r\nIf you enable this policy setting, users are not able to drag or drop toolbars to the taskbar.\r\n\r\nIf you disable or do not configure this policy setting, users are able to rearrange the toolbars on the taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnodragtoolbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnodragtoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnodragtoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},"9df10a444ded0365":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_autoopenfiletypesdesc","displayName":"List of file types that should be automatically opened on download (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"9d511da61da4d324":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed","displayName":"Allow fullscreen mode (User)","description":"Setting the policy to True or leaving it unset means that, with appropriate permissions, users, apps, and extensions can enter Fullscreen mode (in which only web content appears).\r\n\r\nSetting the policy to False means users, apps, and extensions can't enter Fullscreen mode.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"9d78b23751a5c010":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist","displayName":"Kerberos delegation server whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: foobar.example.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"9dd1860e94e55667":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting","displayName":"Control use of the File Handling API (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"9dbccd253df3dc68":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls","displayName":"URLs to open on startup (User)","description":"If RestoreOnStartup is set to RestoreOnStartupIsURLs, then setting RestoreOnStartupURLs to a list of URLs specify which URLs open.\r\n\r\nIf not set, the New Tab page opens on start up.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nhttps://example.com\r\nhttps://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9df4dadb3a4d85f7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel","displayName":"WEBSERVICE Function Notification Settings (User)","description":"This policy setting controls how Excel will warn users when WEBSERVICE functions are present.\r\n\r\nIf you enable this policy setting, you can choose from three options for determining how the specified applications will warn the user about WEBSERVICE functions:\r\n\r\n- Disable all with notification: The application displays the Trust Bar for all WEBSERVICE functions. This option enforces the default configuration in Office.\r\n- Disable all without notification: The application disables all WEBSERVICE functions and does not notify users.\r\n- Enable all WEBSERVICE functions (not recommended): The application enables all WEBSERVICE functions and does not notify users. This option can significantly reduce security by allowing information disclosure to third party web services.\r\n\r\nIf you disable this policy setting, the “Disable all with notification” will be the default setting.\r\nIf you do not configure this policy setting, when users open workbooks that contain WEBSERVICE functions, Excel will open the files with the WEBSERVICE functions disabled and display the Trust Bar with a warning that WEBSERVICE functions are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking \"Enable Content\" on the Trust Bar. If the user clicks \"Enable Content,\" then the document is added as a trusted document.","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_1","displayName":"Enabled","description":null,"helpText":null}]},"9d27bbf0b6f45bec":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates","displayName":"Excel 97-2003 workbooks and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"9d99abf7206d170d":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_descriptioncolon39","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"9d1ec2000501b662":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"9dd04bf366e363ae":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowautomaticpromptingforactivexcontrols"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"9d223b8833ed971e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage","displayName":"Enable specific spellcheck languages (User)","description":"Enables different languages for spellcheck. Any language that you specify that isn't recognized is ignored.\r\n\r\nIf you enable this policy, spellcheck is enabled for the languages specified, as well as any languages the user has enabled.\r\n\r\nIf you don't configure or disable this policy, there's no change to the user's spellcheck preferences.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is disabled, this policy will have no effect.\r\n\r\nIf a language is included in both the 'SpellcheckLanguage' and the 'SpellcheckLanguageBlocklist' (Force disable spellcheck languages) policy, the spellcheck language is enabled.\r\n\r\nThe supported languages are: af, bg, ca, cs, cy, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"9d820b01060f8015":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled","displayName":"Personalize my top sites in Customize Sidebar enabled by default (User)","description":"This policy controls whether Microsoft Edge browser be allowed to use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you enable this policy, Microsoft Edge will use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you disable this policy, Microsoft Edge will not use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you don't configure this policy, the default behavior is to use the browsing history to personalize the top sites in the customize sidebar page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9d706326b455ac39":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector","displayName":"Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors (User)","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a file is attached to Microsoft Edge.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"9d0086a573fd8e7b":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting","displayName":"Idle detection (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_1","displayName":"Allow sites to detect idle state without asking the user","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_2","displayName":"Do not allow any site to detect the user's idle state","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_3","displayName":"Ask every time a site wants to detect the user's idle state","description":null,"helpText":null}]},"9deda141f2418a52":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist","displayName":"List of URL patterns for which developer tools are allowed to be opened (User)","description":"This policy controls where developer tools can be used in Microsoft Edge by specifying an allowlist of URL patterns.\r\n\r\nURL patterns are matched against the URL of every frame on the page being inspected.\r\n\r\nIf you configure this policy and do not configure the 'DeveloperToolsAvailabilityBlocklist' (List of URL patterns for which developer tools are blocked) policy, developer tools are available only when every frame on the page matches a pattern in this allowlist. If any frame does not match, developer tools are blocked for the entire page. For information on the URL format, see https://go.microsoft.com/fwlink/?linkid=2095322 .\r\n\r\nIf you configure both this policy and the 'DeveloperToolsAvailabilityBlocklist' policy, this allowlist takes precedence. URLs that match this allowlist are allowed even if they also match the blocklist. URLs that match the blocklist but not this allowlist are blocked. URLs that match neither are governed by the 'DeveloperToolsAvailability' (Control where developer tools can be used) policy.\r\n\r\nIf you disable or do not configure this policy, developer tools availability is determined by the 'DeveloperToolsAvailabilityBlocklist' and 'DeveloperToolsAvailability' policies.\r\n\r\nThis policy applies to developer tools opened for websites, extensions, and web applications.\r\n\r\nThis policy supports up to 1,000 entries.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\nhttps://ssl.server.com\r\ncontoso.com/good_path\r\nhttps://server.contoso.com:8080/path\r\n.exact.hostname.com\r\nfile://*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"9db5328c96cfbcfd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy10_l_placesbarname227","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"9d9b4ff9fa2fbaf2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy","displayName":"Turn off user customizations via UI (User)","description":"This policy setting can prevent users from customizing both the Quick Access Toolbar and Ribbon through the user interface (UI).\r\n\r\nIf you enable this policy setting, the following UI entry points are turned off: the Quick Access Toolbar and Ribbon tabs in the application's Office Center dialog box, and the Quick Access Toolbar and Ribbon customization options on the right-click menu on the Ribbon.\r\n\r\nIf you disable or do not configure this policy setting, users can customize the Quick Access Toolbar and Ribbon through both the application’s Office Center dialog box, and the right-click menu on the Ribbon.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"9d2270892a278391":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malaybrunei","displayName":"Malay (Brunei) (User)","description":"Enables the editing language Malay (Brunei)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malaybrunei_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malaybrunei_1","displayName":"Enabled","description":null,"helpText":null}]},"9d5837021c0a5246":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishdominicanrepublic","displayName":"Spanish (Dominican Republic) (User)","description":"Enables the editing language Spanish (Dominican Republic)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishdominicanrepublic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishdominicanrepublic_1","displayName":"Enabled","description":null,"helpText":null}]},"9d60328b0e747032":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_l_workflowcachename448","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"9ddf6743efb9c005":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_l_allowsubfolders285","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_l_allowsubfolders285_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_l_allowsubfolders285_1","displayName":"True","description":null,"helpText":null}]},"9d20a5454eccddcc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options","displayName":"Options (User)","description":"You can use these settings to specify how tracking options work for Outlook e-mail messages.","helpText":"","infoUrls":[],"categoryId":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","categoryName":"Tracking Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_1","displayName":"Enabled","description":null,"helpText":null}]},"9d965748b6b581fb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_l_setglobaltextdirection","displayName":"Set global text direction: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b9ab4d39-9e28-4897-aa34-0201a35ea989","categoryName":"Right-to-left","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_l_setglobaltextdirection_0","displayName":"Context-based","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_l_setglobaltextdirection_1","displayName":"Left to right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_l_setglobaltextdirection_2","displayName":"Right-to-left","description":null,"helpText":null}]},"9df80751ef3ea024":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blocksocialnetworkcontactsynchronization","displayName":"Block social network contact synchronization (User)","description":"This policy setting allows you to block synchronization of contacts between Outlook and social networks. \r\n\r\nIf you enable this policy setting, social network contact synchronization is blocked.\r\n\r\nIf you disable or you do not configure this policy setting, social network contact synchronization is allowed.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blocksocialnetworkcontactsynchronization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_blocksocialnetworkcontactsynchronization_1","displayName":"Enabled","description":null,"helpText":null}]},"9d0cd1b30daf0e45":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_includeonlinemodegalinanr","displayName":"Use the Online Global Address List for Nickname Resolution (User)","description":"This policy setting allows you to force Outlook to use the Online Global Address List for ambiguous name resolution when composing messages in Outlook, instead of using the Offline Address Book when it is available.\r\n\r\nIf you enable this policy setting, addresses are resolved using the Online Global Address List, which may contain additional information (that the Offline Address Book would not have) that allows an address to be resolved.\r\n\r\nIf you disable or do not configure this policy setting, Outlook resolves addresses using the Offline Address Book when it is available.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_includeonlinemodegalinanr_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_includeonlinemodegalinanr_1","displayName":"Enabled","description":null,"helpText":null}]},"9df7832ab051493e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_defaultsharepointlists_l_empty35_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":null},"9d5744688022f73e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_drawings_l_drawingscolon","displayName":"Drawings: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":null},"9d822474693a3597":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07","displayName":"Trusted Location #7 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_1","displayName":"Enabled","description":null,"helpText":null}]},"9d423cd7f19204de":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_alternaterevisionbarpositioninprinteddocument","displayName":"Alternate revision bar position in printed document (User)","description":"Checked: For a multi-column page, revision bars are printed to the side of the column in which the revision appears. | Unchecked: For a multi-column page, revision bars are printed to the side of the page in which the revision appears.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_alternaterevisionbarpositioninprinteddocument_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_alternaterevisionbarpositioninprinteddocument_1","displayName":"Enabled","description":null,"helpText":null}]},"9da18bdc79df070f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_descriptioncolon42","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/9e.json b/public/intune-definitions/9e.json new file mode 100644 index 000000000000..2e88a414c8ee --- /dev/null +++ b/public/intune-definitions/9e.json @@ -0,0 +1 @@ +{"9e9c3a82031c41d6":{"id":"ade_awaitconfiguration_basic","displayName":"Await final configuration","description":"Keeps the device in Setup Assistant until the first sync between the device and Intune installs policies.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_awaitconfiguration_basic_0","displayName":"No","description":null,"helpText":null},{"id":"ade_awaitconfiguration_basic_1","displayName":"Yes","description":null,"helpText":null}]},"9ed29841b64d1d7f":{"id":"com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domainaction","displayName":"Domain Action (Deprecated)","description":" The DNS settings behavior for the specified domains.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":[{"id":"com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domainaction_0","displayName":"Never Connect","description":null,"helpText":null},{"id":"com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domainaction_1","displayName":"Connect If Needed","description":null,"helpText":null}]},"9e6c6b696905bd4a":{"id":"com.apple.managedclient.preferences_dailyconfiguration_timeofday","displayName":"Time of day","description":"Specifies the time of day, as the number of minutes after midnight, to perform a daily quick scan.","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":null},"9e343e3f07b10e27":{"id":"com.apple.managedclient.preferences_microsofteditorproofingenabled","displayName":"Spell checking provided by Microsoft Editor","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages.\n\nIf you enable or don't configure this policy, Microsoft Editor spell check can be used for eligible text fields.\n\nIf you disable this policy, spell check can only be provided by local engines that use platform or Hunspell services. The results from these engines might be less informative than the results Microsoft Editor can provide.\n\nIf the \"SpellcheckEnabled\" policy is set to disabled, or the user disables spell checking in the settings page, this policy will have no effect.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#microsofteditorproofingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_microsofteditorproofingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_microsofteditorproofingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9e7cb281cc6c88a2":{"id":"com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentdescription_generickey","displayName":"Description","description":"A localized description.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"9ece6030042010da":{"id":"com.apple.systempolicy.control_enableassessment","displayName":"Enable Assessment","description":"If true, enables Gatekeeper.","helpText":null,"infoUrls":[],"categoryId":"763525a0-8456-4336-a8d1-392253e8fdd8","categoryName":"System Policy Control","options":[{"id":"com.apple.systempolicy.control_enableassessment_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systempolicy.control_enableassessment_true","displayName":"True","description":null,"helpText":null}]},"9e3e5d19bfcae1c4":{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"9ec8ed00290485c7":{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"9ec0f711e0f07697":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"9ef9b18aae83463c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication","description":"This policy defines certificates that Microsoft Edge doesn't explicitly trust or distrust but may be used as hints during certificate path-building.\n\nThe specified certificates are considered as intermediates during path validation; the server's certificate still chain to a trusted root to be considered valid.\n\nCertificates must be base64-encoded.","helpText":null,"infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"9ed1be22753ba0aa":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcloudneutralsitesreporting","displayName":"Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app","description":"This setting lets you enable reporting of sites that need to be configured as a neutral site on the Enterprise Mode Site List. The user must be signed in to Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant specified by the policy.\n\nIf you configure this policy, Microsoft Edge sends a report to the Microsoft 365 Admin Center Site Lists app when a navigation appears stuck redirecting back and forth between the Microsoft Edge and Internet Explorer (IE) engines several times. This indicates that redirection to an authentication server is switching engines, which repeatedly fails in a loop. The report shows the URL of the site that's the redirect target, minus any query string or fragment. The user's identity isn't reported.\n\nFor this reporting to work correctly, you must have successfully visited the Microsoft Edge Site Lists app in the Microsoft 365 Admin Center at least once. This activates a per-tenant storage account used to store these reports. Microsoft Edge still attempts to send reports if this step hasn't been completed. However, the reports aren't stored in the Site Lists app.\n\nIf you enable this policy, you must specify your Office 365 tenant ID. To learn more about finding your Office 365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668.\n\nIf you disable or don't configure this policy, Microsoft Edge never sends reports about misconfigured neutral sites to the Site Lists app.\n\nTo learn more about IE mode, see https://go.microsoft.com/fwlink/?linkid=2165707.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"9e7924279fb15c34":{"id":"com.microsoft.edge.mamedgeappconfigsettings.navigationdelayforinitialsitelistdownloadtimeout","displayName":"Set a timeout for delay of tab navigation for the Enterprise Mode Site List","description":"Allows you to set a timeout, in seconds, for Microsoft Edge tabs waiting to navigate until the browser has downloaded the initial Enterprise Mode Site List.\n\nThis setting works in conjunction with: \"InternetExplorerIntegrationLevel\" is set to 'IEMode' and \"InternetExplorerIntegrationSiteList\" policy where the list has at least one entry and \"DelayNavigationsForInitialSiteListDownload\" is set to \"All eligible navigations\" (1).\n\nTabs won't wait longer than this timeout for the Enterprise Mode Site List to download. If the browser hasn't finished downloading the Enterprise Mode Site List when the timeout expires, Microsoft Edge tabs continue navigating anyway. The value of the timeout should be no greater than 20 seconds and no fewer than 1 second.\n\nIf you set the timeout in this policy to a value greater than 2 seconds, an information bar is shown to the user after 2 seconds. The information bar contains a button that allows the user to quit waiting for the Enterprise Mode Site List download to complete.\n\nIf you don't configure this policy, the default timeout of 4 seconds is used. This default is subject to change in the future.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"9eef656bc92cd218":{"id":"com.microsoft.edge.mamedgeappconfigsettings.relatedmatchescloudserviceenabled","displayName":"Configure Related Matches in Find on Page (Obsolete)","description":"Specifies how the user receives related matches in Find on Page, which provides spellcheck, synonyms, and Q&A results in Microsoft Edge.\n\nIf you enable or don't configure this policy, users can receive related matches in Find on Page on all sites. The results are processed through a cloud service.\n\nIf you disable this policy, users can receive related matches in Find on Page on a limited set of sites. In this case, results are processed locally on the user's device.\n\nNote: This policy is obsolete. The associated cloud service is discontinued, so the feature and policy aren't supported on any versions of Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.relatedmatchescloudserviceenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.relatedmatchescloudserviceenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9e8caaec260a3ace":{"id":"device_vendor_msft_policy_config_admx_kerberos_devicepkinitenabled","displayName":"Support device authentication using certificate","description":"Support for device authentication using certificate will require connectivity to a DC in the device account domain which supports certificate authentication for computer accounts. \r\n\r\nThis policy setting allows you to set support for Kerberos to attempt authentication using the certificate for the device to the domain.\r\n\r\nIf you enable this policy setting, the device’s credentials will be selected based on the following options:\r\n\r\nAutomatic: Device will attempt to authenticate using its certificate. If the DC does not support computer account authentication using certificates then authentication with password will be attempted.\r\n\r\nForce: Device will always authenticate using its certificate. If a DC cannot be found which support computer account authentication using certificates then authentication will fail.\r\n\r\nIf you disable this policy setting, certificates will never be used.\r\nIf you do not configure this policy setting, Automatic will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-devicepkinitenabled"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_devicepkinitenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_devicepkinitenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9e5bc809ba10b71e":{"id":"device_vendor_msft_policy_config_admx_power_diskacpowerdowntimeout_2","displayName":"Turn Off the hard disk (plugged in)","description":"This policy setting specifies the period of inactivity before Windows turns off the hard disk.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the hard disk.\r\n\r\nIf you disable or do not configure this policy setting, users can see and change this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-diskacpowerdowntimeout-2"],"categoryId":"91c02e14-8848-485d-8844-b9933fa888ec","categoryName":"Hard Disk Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_diskacpowerdowntimeout_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_diskacpowerdowntimeout_2_1","displayName":"Enabled","description":null,"helpText":null}]},"9e54f5d62a560adb":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings","displayName":"Themes","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings_1","displayName":"True","description":null,"helpText":null}]},"9ef4dd627513ef03":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync","displayName":"Microsoft Lync 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Lync 2010.\r\nBy default, the user settings of Microsoft Lync 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Lync 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010lync"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync_1","displayName":"Enabled","description":null,"helpText":null}]},"9e7e7420b264026f":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_user_publishing_refresh_options","displayName":"User Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_user_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_user_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"9eb88f7d75989423":{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritysystemextension","displayName":"Audit Security System Extension","description":"This policy setting allows you to audit events related to security system extensions or services such as the following: A security system extension, such as an authentication, notification, or security package is loaded and is registered with the Local Security Authority (LSA). It is used to authenticate logon attempts, submit logon requests, and any account or password changes. Examples of security system extensions are Kerberos and NTLM. A service is installed and registered with the Service Control Manager. The audit log contains information about the service name, binary, type, start type, and service account. If you configure this policy setting, an audit event is generated when an attempt is made to load a security system extension. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when an attempt is made to load a security system extension.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#system_auditsecuritysystemextension"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritysystemextension_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritysystemextension_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritysystemextension_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsecuritysystemextension_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"9e4ebaa725a3969d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting","displayName":"Default JavaScript setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2","displayName":"Do not allow any site to run JavaScript","description":null,"helpText":null}]},"9edfddc9e200c845":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs.","description":"Setting the policy lets you list the URL patterns that specify which sites are automatically granted permission to access a USB device with the given vendor and product IDs. Each item in the list requires both devices and urls fields for the policy to be valid. Each item in the devices field can have a vendor_id and product_id field. Omitting the vendor_id field will create a policy matching any device. Omitting the product_id field will create a policy matching any device with the given vendor ID. A policy which has a product_id field without a vendor_id field is invalid.\r\n\r\nThe USB permission model will grant the specified URL permission to access the USB device as a top-level origin. If embedded frames need to access USB devices, the 'usb' feature-policy header should be used to grant access. The URL must be valid, otherwise the policy is ignored.\r\n\r\nDeprecated: The USB permission model used to support specifying both the requesting and embedding URLs. This is deprecated and only supported for backwards compatiblity in this manner: if both a requesting and embedding URL is specified, then the embedding URL will be granted the permission as top-level origin and the requsting URL will be ignored entirely.\r\n\r\nThis policy overrides DefaultWebUsbGuardSetting, WebUsbAskForUrls, WebUsbBlockedForUrls and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the WebUSB API. To grant access to USB devices through the Web Serial API see the SerialAllowUsbDevicesForUrls policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebUsbAllowDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234,\r\n \"product_id\": 5678\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://google.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9e2cb99a14a82802":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting","displayName":"Default mediastream setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting_2","displayName":"Do not allow any site to access the camera and microphone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting_3","displayName":"Ask every time a site wants to access the camera and/or microphone","description":null,"helpText":null}]},"9ef06302a505be91":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting","displayName":"Control use of the File Handling API","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"9e801abbd765f9fb":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended","displayName":"Enable Battery Saver Mode","description":"This policy enables or disables the Battery Saver Mode setting.\r\nOn Chrome, this setting makes it so that frame rate is throttled to lower power consumption. If this policy is unset, the end user can control this setting in chrome://settings/performance.\r\nOn ChromeOS, this setting makes it so that frame rate and CPU frequency are throttled, backlights are dimmed, and Android is put in Battery Saver Mode. On devices with multiple CPUs, some CPUs will be turned off.\r\nThe different levels are:\r\nDisabled (0): Battery Saver Mode will be disabled.\r\nEnabledBelowThreshold (1): Battery Saver Mode will be enabled when the device is on battery power and battery level is low.\r\nEnabledOnBattery (2): This value is deprecated as of M121. From M121 onwards, values will be treated as EnabledBelowThreshold.\r\n","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9e141311e73aaccf":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"9e01623cbe6cb1db":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemnullsessionfallback","displayName":"Network Security Allow Local System NULL Session Fallback","description":"Network security: Allow LocalSystem NULL session fallback Allow NTLM to fall back to NULL session when used with LocalSystem. The default is TRUE up to Windows Vista and FALSE in Windows 7.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_allowlocalsystemnullsessionfallback"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"9e51a39d409947bb":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended","displayName":"Set application locale","description":"Configures the application locale in Microsoft Edge and prevents users from changing the locale.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified locale. If the configured locale isn't supported, 'en-US' is used instead.\r\n\r\nIf you disable or don't configure this setting, Microsoft Edge uses either the user-specified preferred locale (if configured) or the fallback locale 'en-US'.\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9eae4aac3522b8ff":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled","displayName":"Configure if the ads transparency feature is enabled","description":"Lets you decide whether the ads transparency feature is enabled. This behavior only applies to the \"balanced\" mode of tracking prevention, and does not impact \"basic\" or \"strict\" modes. Your users' tracking prevention level can be configured using the 'TrackingPrevention' (Block tracking of users' web-browsing activity) policy. AdsTransparencyEnabled will only have an effect if 'TrackingPrevention' is set to TrackingPreventionBalanced or is not configured.\r\n\r\nIf you enable or don't configure this policy, transparency metadata provided by ads will be available to the user when the feature is active.\r\n\r\nWhen the feature is enabled, Tracking Prevention will enable exceptions for the associated ad providers that have met Microsoft's privacy standards.\r\n\r\nIf you disable this policy, Tracking Prevention will not adjust its behavior even when transparency metadata is provided by ads.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9ea8951d083df9ad":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled","displayName":"Enable Microsoft Bing trending suggestions in the address bar","description":"This policy controls whether Microsoft Bing trending suggestions appear in the address bar’s suggestion dropdown when users click the address bar while on a New Tab Page.\r\n\r\nIf this policy is enabled or not configured, Microsoft Bing trending suggestions will appear in the address bar suggestion dropdown.\r\n\r\nIf this policy is disabled, Microsoft Edge will not display Microsoft Bing trending suggestions when users click the address bar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9e97374c1e1eb8c9":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_maxconnectionsperproxyforwebsocket_maxconnectionsperproxyforwebsocket","displayName":"Maximum number of concurrent connections to the proxy server for WebSocket requests: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"9e80b9060535c35b":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled","displayName":"Enable security warnings for command-line flags","description":"If disabled, this policy prevents security warnings from appearing when Microsoft Edge is launched with potentially dangerous command-line flags.\r\n\r\nIf enabled or unset, security warnings are displayed when these command-line flags are used to launch Microsoft Edge.\r\n\r\nFor example, the --disable-gpu-sandbox flag generates this warning: You're using an unsupported command-line flag: --disable-gpu-sandbox. This poses stability and security risks.\r\n\r\nOn Windows, this policy is only available on instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro (or Enterprise) instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9e602199d9f013e5":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods","description":"Allows you to set whether websites can check if the user has payment methods saved.\r\n\r\nIf you disable this policy, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\r\n\r\nIf you enable this policy or don't set this policy, websites can check if the user has payment methods saved.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9ea1fe7cc3551a4a":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled","displayName":"Allow users to get a strong password suggestion whenever they are creating an account online","description":"Configures the Password Generator Settings toggle that enables/disables the feature for users.\r\n\r\nIf you enable or don't configure this policy, then Password Generator will offer users a strong and unique password suggestion (via a dropdown) on Signup and Change Password pages.\r\n\r\nIf you disable this policy, users will no longer see strong password suggestions on Signup or Change Password pages.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9e89f2f96b54509e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winprojexe76","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winprojexe76_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winprojexe76_1","displayName":"True","description":null,"helpText":null}]},"9e3e42fa4c0049c5":{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedforest_chk","displayName":"Users can only point and print to machines in their forest","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedforest_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedforest_chk_1","displayName":"True","description":null,"helpText":null}]},"9e11f293b7aa9497":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation","displayName":"Let Apps Access Location","description":"This policy setting specifies whether Windows apps can access location.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"9ebc61b6770def99":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks_userincontroloftheseapps","displayName":"Let Apps Access Tasks User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"9e88b6a541a56d7f":{"id":"device_vendor_msft_policy_config_search_allowsearchhighlights","displayName":"Allow Search Highlights","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowsearchhighlights"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":null},"9ef8ad65cef33343":{"id":"device_vendor_msft_policy_config_update_scheduledinstallsecondweek","displayName":"Scheduled Install Second Week","description":"Enables the IT admin to schedule the update installation on the second week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every second week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallsecondweek"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallsecondweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallsecondweek_1","displayName":"update is scheduled every second week of the month","description":"update is scheduled every second week of the month","helpText":null}]},"9e7ddf75a212a2e6":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},"9e7fa73205765cf0":{"id":"linux_mdatp_managed_cloudservice_automaticdefinitionupdateenabled","displayName":"Automatic security intelligence updates","description":"Determines whether security intelligence updates are installed automatically:","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-automatic-security-intelligence-updates"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"linux_mdatp_managed_cloudservice_automaticdefinitionupdateenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_automaticdefinitionupdateenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9e521b55cdbafac4":{"id":"softwareupdate_deferrals","displayName":"Deferrals","description":"Controls the deferral of software updates. Rapid Security Responses are not considered within 'Major', 'Minor', or 'System' deferral mechanism. Only applicable on Supervised devices with iOS 18+ and MacOS 15++","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"9e7dac0de88041ba":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_2007compatiblecachepolicy","displayName":"Use Access 2007 compatible cache (User)","description":"This policy setting allows you to force new and existing databases to use a cache compatible Access 2007.\r\n\r\nIf you enable this policy setting, new and existing databases will use caching compatible with Access 2007.\r\n\r\nIf you disable or do not configure this policy setting, new databases will default to use caching that is not compatible with Access 2007. Existing databases will use the caching mode that they were created with.\r\n","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_2007compatiblecachepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_2007compatiblecachepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"9e1e170518d0078f":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffcustomdictionary","displayName":"Turn off custom dictionary (User)","description":"This policy setting allows you to turn off the ability to use a custom dictionary.\r\n\r\nIf you enable this policy setting, you cannot add, edit, and delete words in the custom dictionary either with GUI tools or APIs. A word registered in the custom dictionary before enabling this policy setting can continue to be used for conversion.\r\n\r\nIf you disable or do not configure this policy setting, the custom dictionary can be used by default.\r\n\r\nFor Japanese Microsoft IME, [Clear auto-tuning information] works, even if this policy setting is enabled, and it clears self-tuned words from the custom dictionary.\r\n\r\nThis policy setting is applied to Japanese Microsoft IME.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffcustomdictionary"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffcustomdictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffcustomdictionary_1","displayName":"Enabled","description":null,"helpText":null}]},"9e0e981dd03d99b6":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmypictures","displayName":"Remove Pictures icon from Start Menu (User)","description":"This policy setting allows you to remove the Pictures icon from Start Menu.\r\n\r\nIf you enable this policy setting, the Pictures icon is no longer available from Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the Pictures icon is available from Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmmypictures"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmypictures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmypictures_1","displayName":"Enabled","description":null,"helpText":null}]},"9ec7c1337227d988":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel1","displayName":"Site Name 2 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"9e3907d40b84b1c1":{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior","displayName":"Set the default behavior for AutoRun (User)","description":"This policy setting sets the default behavior for Autorun commands.\n\n Autorun commands are generally stored in autorun.inf files. They often launch the installation program or other routines.\n\n Prior to Windows Vista, when media containing an autorun command is inserted, the system will automatically execute the program without user intervention.\n\n This creates a major security concern as code may be executed without user's knowledge. The default behavior starting with Windows Vista is to prompt the user whether autorun command is to be run. The autorun command is represented as a handler in the Autoplay dialog.\n\n If you enable this policy setting, an Administrator can change the default Windows Vista or later behavior for autorun to:\n\n a) Completely disable autorun commands, or\n b) Revert back to pre-Windows Vista behavior of automatically executing the autorun command.\n\n If you disable or not configure this policy setting, Windows Vista or later will prompt the user whether autorun command is to be run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-setdefaultautorunbehavior"],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"9ec89a7f2b6d15d5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled","displayName":"Enable the default search provider (User)","description":"Setting the policy to Enabled means a default search is performed when a user enters non-URL text in the address bar. To specify the default search provider, set the rest of the default search policies. If you leave those policies empty, the user can choose the default provider. Setting the policy to Disabled means there's no search when the user enters non-URL text in the address bar.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, the default search provider is on, and users can set the search provider list.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9ef048898f02dbc7":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowaccesstodatasources"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"9e5565203cfa8374":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload","displayName":"Enable Domain Actions Download from Microsoft (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nAlthough this policy is used to enable/disable download of the domain actions list, it doesn't always achieve the desired state. The Experimentation and Configuration Service, which handles the download, has its own group policy to configure what is downloaded from the service. To avoid conflicting states, this policy is being deprecated and will be obsolete in milestone 85 onward. Please use the 'ExperimentationAndConfigurationServiceControl' (Control communication with the Experimentation and Configuration Service) policy instead.\r\n\r\nIn Microsoft Edge, Domain Actions represent a series of compatibility features that help the browser work correctly on the web.\r\n\r\nMicrosoft keeps a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken due to the new User Agent string on Microsoft Edge. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nWhen the browser starts up and then periodically afterwards, the browser will contact the Experimentation and Configuration Service that contains the most up to date list of compatibility actions to perform. This list is saved locally after it is first retrieved so that subsequent requests will only update the list if the server's copy has changed.\r\n\r\nIf you enable this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you disable this policy, the list of Domain Actions will no longer be downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you don't configure this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_1","displayName":"Enabled","description":null,"helpText":null}]},"9ee17e37ab82a9cf":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification","displayName":"Notify a user that a browser restart is recommended or required for pending updates (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_1","displayName":"Recommended - Show a recurring prompt to the user indicating that a restart is recommended","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_2","displayName":"Required - Show a recurring prompt to the user indicating that a restart is required","description":null,"helpText":null}]},"9ed88cc499136687":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode","displayName":"Extend Adobe Flash content setting to all content (User)","description":"If you enable this policy, all Adobe Flash content embedded in websites that are set to allow Adobe Flash in the content settings -- either by the user or by enterprise policy -- will run. This includes content from other origins and/or small content.\r\n\r\nTo control which websites are allowed to run Adobe Flash, see the specifications in the 'DefaultPluginsSetting' (Default Adobe Flash setting), 'PluginsAllowedForUrls' (Allow the Adobe Flash plug-in on specific sites), and 'PluginsBlockedForUrls' (Block the Adobe Flash plug-in on specific sites) policies.\r\n\r\nIf you disable this policy or don't configure it, Adobe Flash content from other origins (from sites that aren't specified in the three policies mentioned immediately above) or small content might be blocked.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_1","displayName":"Enabled","description":null,"helpText":null}]},"9ed0e35ee071cf05":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup","displayName":"Action to take on startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"9ee06353e878cbac":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"9ea5a683851b1b20":{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled","displayName":"Enable efficiency mode when the device is connected to a power source (User)","description":"Allows efficiency mode to become active when the device is connected to a power source. On devices with no battery, this policy has no effect.\r\n\r\nIf you enable this policy, efficiency mode will become active when the device is connected to a power source.\r\n\r\nIf you disable or don't configure this policy, efficiency mode will never become active when the device is connected to a power source.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9ed3d3c4eacb5fc6":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled","displayName":"Compose is enabled for writing on the web (User)","description":"This policy lets you configure Compose in Microsoft Edge. Compose provides help for writing with AI-generated text, which lets the user get ideas for writing. This includes elaborating on text, re-writing, changing tone, formatting the text, and more.\r\n\r\nIf you enable or don't configure this policy, Compose can provide text generation for eligible fields, which are text editable and don't have an autocomplete attribute.\r\n\r\nIf you disable this policy, Compose will not be able to provide text generation for eligible fields. Compose will still be available for prompt-based text generation through the sidebar and must be managed with either 'EdgeDiscoverEnabled' (Discover feature In Microsoft Edge) policy or 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9e52548228005da7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_improvederrorreporting_l_stopreportingnoncriticalerrors","displayName":"Stop reporting non-critical errors (User)","description":"This policy setting controls whether the application reports non-critical errors.\r\n\r\nIf you enable this policy, non-critical errors will not be reported.\r\n\r\nIf you disable or do not configure this policy setting, non-critical errors will be reported.","helpText":"","infoUrls":[],"categoryId":"33fb4f49-5c7f-472c-a0f3-e05646a55902","categoryName":"Improved Error Reporting","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_improvederrorreporting_l_stopreportingnoncriticalerrors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_improvederrorreporting_l_stopreportingnoncriticalerrors_1","displayName":"Enabled","description":null,"helpText":null}]},"9ec5fdeb124c939e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey12","displayName":"Escrow Key #12 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey12_1","displayName":"Enabled","description":null,"helpText":null}]},"9e65fefc5e161362":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc10_l_pathcolon10","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"9e68c987afce333b":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":null},"9e498fed12bf2b13":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_promptifpowerpointisnotdefault","displayName":"Prompt the user if PowerPoint is not the default application for its file extensions (User)","description":"This policy setting specifies whether PowerPoint prompts users to change their file extension associations for any file types that are no longer associated with PowerPoint.\r\n\r\nIf you enable this policy setting, when users start PowerPoint, they are not prompted to change file extensions for any files that are no longer associated with PowerPoint. In addition, the checkbox on the user interface (UI) under File |Options | General | Start up options | Tell me is unchecked.\r\n\r\nIf you disable or do not configure this policy setting, when users start PowerPoint, they are prompted to change file extensions for any files that are no longer associated with PowerPoint. Users can change this behavior either by selecting the checkbox displayed in the prompt, or by selecting the UI checkbox under File |Options | General | Start up options | Tell me (which is selected by default).\r\n","helpText":"","infoUrls":[],"categoryId":"f5007db5-6ee6-4bbd-a391-9727902aad6d","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_promptifpowerpointisnotdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionsgeneral_l_promptifpowerpointisnotdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"9e53e9c56392b966":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_descriptioncolon14","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"9eca6bbc79433185":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_datecolon61","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"9ea2cbacad6e9429":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]},"9e659283095785ae":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_copyremotelystoredfiles","displayName":"Copy remotely stored files onto your computer, and update the remote file when saving (User)","description":"This policy setting allows you to set the \"Copy remotely stored files onto your computer, and update the remote file when saving\" option in Word Options | Advanced | Save.\r\n\r\nIf you enable this policy setting, \"Copy remotely stored files onto your computer, and update the remote file when saving\" will be set.\r\n\r\nIf you disable or do not configure this policy setting, \"Copy remotely stored files onto your computer, and update the remote file when saving\" will not be set.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_copyremotelystoredfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_copyremotelystoredfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"9eba5916210b1fca":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_verticalscrollbar","displayName":"Show vertical scroll bar (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_verticalscrollbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_verticalscrollbar_1","displayName":"Enabled","description":null,"helpText":null}]},"9efbc7fa5036b901":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_tools_l_tools14","displayName":"Tools (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":null},"9e789b772d3ee190":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_openattachmentsforfullscreenreading","displayName":"Open e-mail attachments in Reading View (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_openattachmentsforfullscreenreading_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_openattachmentsforfullscreenreading_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/9f.json b/public/intune-definitions/9f.json new file mode 100644 index 000000000000..88d0cd59072c --- /dev/null +++ b/public/intune-definitions/9f.json @@ -0,0 +1 @@ +{"9f3958b34dff47c0":{"id":"com.apple.applicationaccess_allowappstobelocked","displayName":"Allow Apps To Be Locked","description":"If false, disables the ability for the user to lock apps. Because hiding apps also requires locking them, disallowing locking also disallows hiding.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowappstobelocked_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowappstobelocked_true","displayName":"True","description":null,"helpText":null}]},"9f4401f8616f182c":{"id":"com.apple.extensiblesso_extensiondata_domainrealmmapping_generickey_kerberos_keytobereplaced","displayName":"Realm","description":"The name of the realm.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"9f8e3271a8ba071d":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app","displayName":"Microsoft Defender","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"9f45edaee4e1c592":{"id":"com.apple.managedclient.preferences_browserguestmodeenabled","displayName":"Enable guest mode","description":"Enable the option to allow the use of guest profiles in Microsoft Edge. In a guest profile, the browser doesn't import browsing data from existing profiles, and it deletes browsing data when all guest profiles are closed.\n\nIf you enable this policy or don't configure it, Microsoft Edge lets users browse in guest profiles.\n\nIf you disable this policy, Microsoft Edge doesn't let users browse in guest profiles.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#browserguestmodeenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_browserguestmodeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_browserguestmodeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9f871ec1977a58ae":{"id":"com.apple.managedclient.preferences_proxysettings_proxymode","displayName":"Proxy Mode","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_proxysettings_proxymode_0","displayName":"direct","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxysettings_proxymode_1","displayName":"auto_detect","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxysettings_proxymode_2","displayName":"pac_script","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxysettings_proxymode_3","displayName":"fixed_servers","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxysettings_proxymode_4","displayName":"system","description":null,"helpText":null}]},"9f73dd035341efa4":{"id":"com.apple.managedclient.preferences_quickviewofficefilesenabled","displayName":"Manage QuickView Office files capability in Microsoft Edge","description":"Allows you to set whether users can view publicly accessible Office files on the web that aren't on OneDrive or SharePoint. (For example: Word documents, PowerPoint presentations, and Excel spreadsheets)\n\nIf you enable or don't configure this policy, these files can be viewed in Microsoft Edge using Office Viewer instead of downloading the files.\n\nIf you disable this policy, these files will be downloaded to be viewed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#quickviewofficefilesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_quickviewofficefilesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_quickviewofficefilesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9f5113c4b176b91f":{"id":"com.apple.managedclient.preferences_readaloudenabled","displayName":"Enable Read Aloud feature in Microsoft Edge","description":"Enables the Read Aloud feature within Microsoft Edge.\nUsing this feature, users can listen to the content on the web page. This enables users to multi-task or improve their reading comprehension by hearing content at their own pace.\n\nIf you enable this policy or don't configure it, the Read Aloud option shows up in the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.\nIf you disable this policy, users can't access the Read Aloud feature from the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#readaloudenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_readaloudenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_readaloudenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9f8aff44aeed52e1":{"id":"com.apple.managedclient.preferences_walletdonationenabled","displayName":"Wallet Donation Enabled","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\n\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\n\nIf you disable this policy, users can't use the Wallet Donation feature.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#walletdonationenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_walletdonationenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_walletdonationenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9fafc6149959c629":{"id":"com.apple.networkusagerules_com.apple.networkusagerules","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":null},"9f14329661b80832":{"id":"com.apple.systemconfiguration_proxies_httpsproxy","displayName":"HTTPS Proxy","description":"The host name or IP address for the secure web proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"9f9eba60dcd2a13c":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles","displayName":"System Policy App Bundles","description":"Allows the application to update or delete other apps. Available in macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"9f5039c153b28a92":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"9f49711206be26a6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeenforcelistdomains","displayName":"Configure the list of domains for which enhance security mode will always be enforced","description":"Configure the list of enhance security untrusted domains. This means that\nenhance security mode is always enforced when loading the sites in untrusted domains.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"9f78ddb751384a7b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartactionsblocklist","displayName":"Block smart actions for a list of services","description":"List specific services, such as PDFs, and websites that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\n\nIf you enable the policy:\n - The smart action in the mini and full context menu is disabled for all profiles for services that match the given list.\n - Users won't see the smart action in the mini and full context menu on text selection for services that match the given list.\n - In Microsoft Edge settings, the smart action in the mini and full context menu is disabled for services that match the given list.\n\nIf you disable or don't configure this policy:\n - The smart action in the mini and full context menu is enabled for all profiles.\n - Users will see the smart action in the mini and full context menu on text selection.\n - In Microsoft Edge settings, the smart action in the mini and full context menu is enabled.\n\nPolicy options mapping:\n\n* smart_actions (smart_actions) = Smart actions in pdfs and on websites\n\n* smart_actions_website (smart_actions_website) = Smart actions on websites\n\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartactionsblocklist_smart_actions","displayName":"Smart actions in pdfs and on websites","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartactionsblocklist_smart_actions_website","displayName":"Smart actions on websites","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartactionsblocklist_smart_actions_pdf","displayName":"Smart actions in PDF","description":null,"helpText":null}]},"9f59113532931e5d":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd","displayName":"Password Settings","description":"\nConfigures password parameters\n\nPassword complexity: which characters are used when generating a new password\n Default: Large letters + small letters + numbers + special characters\n\nPassword length\n Minimum: 8 characters\n Maximum: 64 characters\n Default: 14 characters\n\nPassword age in days\n Minimum: 1 day\n Maximum: 365 days\n Default: 30 days\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-admpwd#admx-admpwd-pol-admpwd"],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":[{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_1","displayName":"Enabled","description":null,"helpText":null}]},"9fdc1ab259c66504":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworklowpriorityunit","displayName":"Low Priority Unit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworklowpriorityunit_1","displayName":"Kbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworklowpriorityunit_2","displayName":"Mbps","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworklowpriorityunit_3","displayName":"Unlimited","description":null,"helpText":null}]},"9fd9873e2d021836":{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_ciphersuiteorder_multitext_ciphersuiteorder","displayName":"Cipher suites:","description":null,"helpText":"","infoUrls":[],"categoryId":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","categoryName":"Lanman Server","options":null},"9ff4d595a6d5fb68":{"id":"device_vendor_msft_policy_config_admx_locationprovideradm_disablewindowslocationprovider_1","displayName":"Turn off Windows Location Provider","description":"\r\n This policy setting turns off the Windows Location Provider feature for this computer.\r\n\r\n If you enable this policy setting, the Windows Location Provider feature will be turned off, and all programs on this computer will not be able to use the Windows Location Provider feature.\r\n\r\n If you disable or do not configure this policy setting, all programs on this computer can use the Windows Location Provider feature.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-locationprovideradm#admx-locationprovideradm-disablewindowslocationprovider-1"],"categoryId":"3f8986f3-195d-4ee5-ae8d-96a007b20883","categoryName":"Windows Location Provider","options":[{"id":"device_vendor_msft_policy_config_admx_locationprovideradm_disablewindowslocationprovider_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_locationprovideradm_disablewindowslocationprovider_1_1","displayName":"Enabled","description":null,"helpText":null}]},"9f5a955e59eb00bd":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_uilockdown","displayName":"Enable headless UI mode","description":"\r\n This policy setting allows you to configure whether or not to display AM UI to the users.\r\n If you enable this setting AM UI won't be available to users.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-ux-configuration-uilockdown"],"categoryId":"a5060182-4d22-412b-bd0e-3a1e009b36c6","categoryName":"Client Interface","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_uilockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_uilockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"9f3937ff544de79c":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader","displayName":"Include invocation headers:","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader_1","displayName":"True","description":null,"helpText":null}]},"9f1c3a4542c228f9":{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority","displayName":"Directory pruning priority","description":"Sets the priority of the pruning thread.\r\n\r\n The pruning thread, which runs only on domain controllers, deletes printer objects from Active Directory if the printer that published the object does not respond to contact attempts. This process keeps printer information in Active Directory current.\r\n\r\n The thread priority influences the order in which the thread receives processor time and determines how likely it is to be preempted by higher priority threads.\r\n\r\n By default, the pruning thread runs at normal priority. However, you can adjust the priority to improve the performance of this service.\r\n\r\n Note: This setting is used only on domain controllers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-pruningpriority"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningpriority_1","displayName":"Enabled","description":null,"helpText":null}]},"9f600dd2b968b1b7":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenonconforming","displayName":"Non-conforming packets","description":"Specifies an alternate link layer (Layer-2) priority value for packets that do not conform to the flow specification. The Packet Scheduler inserts the corresponding priority value in the Layer-2 header of the packets.\r\n\r\nIf you enable this setting, you can change the default priority value associated with nonconforming packets.\r\n\r\nIf you disable this setting, the system uses the default priority value of 0.\r\n\r\nImportant: If the Layer-2 priority value for nonconforming packets is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypenonconforming"],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenonconforming_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenonconforming_1","displayName":"Enabled","description":null,"helpText":null}]},"9f01f6489cc7afe9":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_maps","displayName":"Maps","description":"This policy setting configures the synchronization of user settings for the Maps app.\r\nBy default, the user settings of Maps sync between computers. Use the policy setting to prevent the user settings of Maps from synchronizing between computers.\r\nIf you enable this policy setting, Maps user settings continue to sync.\r\nIf you disable this policy setting, Maps user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-maps"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_maps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_maps_1","displayName":"Enabled","description":null,"helpText":null}]},"9f0606945e9118d7":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_video","displayName":"Video","description":"This policy setting configures the synchronization of user settings for the Video app.\r\nBy default, the user settings of Video sync between computers. Use the policy setting to prevent the user settings of Video from synchronizing between computers.\r\nIf you enable this policy setting, Video user settings continue to sync.\r\nIf you disable this policy setting, Video user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-video"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_video_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_video_1","displayName":"Enabled","description":null,"helpText":null}]},"9f7ee0349511a971":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowscamera","displayName":"Windows Camera **","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowscamera_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowscamera_1","displayName":"True","description":null,"helpText":null}]},"9f4398c33086115e":{"id":"device_vendor_msft_policy_config_audit_policychange_auditmpssvcrulelevelpolicychange","displayName":"Policy Change Audit MPSSVC Rule Level Policy Change","description":"This policy setting allows you to audit events generated by changes in policy rules used by the Microsoft Protection Service (MPSSVC). This service is used by Windows Firewall. Events include the following: Reporting of active policies when Windows Firewall service starts. Changes to Windows Firewall rules. Changes to Windows Firewall exception list. Changes to Windows Firewall settings. Rules ignored or not applied by Windows Firewall Service. Changes to Windows Firewall Group Policy settings. If you configure this policy setting, an audit event is generated by attempts to change policy rules used by the MPSSVC. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated by changes in policy rules used by the MPSSVC.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#policychange_auditmpssvcrulelevelpolicychange"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_policychange_auditmpssvcrulelevelpolicychange_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditmpssvcrulelevelpolicychange_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditmpssvcrulelevelpolicychange_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditmpssvcrulelevelpolicychange_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"9f7422d31a10c666":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled","displayName":"Enable desktop sharing in the omnibox and 3-dot menu","description":"Setting the policy to True or leaving it unset lets users share or save the current webpage using actions provided by the desktop sharing hub. The sharing hub is accessed through either an omnibox icon or the 3-dot menu.\r\n\r\nSetting the policy to False removes the sharing icon from the omnibox and the entry from the 3-dot menu.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9f72c81e5e464b0c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices with the given vendor and product IDs. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"9f7749332aa02b9c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed","displayName":"Allows enabling the feature NewBaseUrlInheritanceBehavior","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"9fbaa8dd63e0406c":{"id":"device_vendor_msft_policy_config_experience_allowscreencapture","displayName":"Allow Screen Capture","description":"Allow screen capture","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowscreencapture"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowscreencapture_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowscreencapture_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"9f5b556d1f756798":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch","displayName":"SID Directory Name Match","description":"Specifies a string pattern used when matching a Profile or ODFC container folder. Use this setting to define how FSLogix will attempt to locate a users Profile or ODFC container. FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the SIDDIRNamePattern value matches this setting.\r\n\r\n- This setting has NO EFFECT when FlipFlopProfileDirectoryName is enabled.\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled.\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > SIDDirNameMatch (this setting)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\SIDDirNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_1","displayName":"Enabled","description":null,"helpText":null}]},"9fe57c50fbbf28e9":{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning","displayName":"Audit Client Does Not Support Signing","description":"This policy controls whether the SMB server will log the event when the SMB client doesn't support signing. If you enable this policy setting, the SMB server will log the event when the SMB client doesn't support signing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#auditclientdoesnotsupportsigning"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"9fd5b9e994416e2d":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"9fbbdd2f1f618747":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mse7exe69","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mse7exe69_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mse7exe69_1","displayName":"True","description":null,"helpText":null}]},"9f029398559deba8":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winwordexe77","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winwordexe77_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winwordexe77_1","displayName":"True","description":null,"helpText":null}]},"9f9095b0a10d3d5d":{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum","displayName":"Theme: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5d8272e2-1ed3-4a8d-9555-9a87fa13d078","categoryName":"Customize","options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_0","displayName":"Colorful","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_3","displayName":"Dark Gray","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_4","displayName":"Black","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_5","displayName":"White","description":null,"helpText":null}]},"9f0a36522b1c3cc7":{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_mec","displayName":"Monthly Enterprise Channel (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_mec_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_mec_1","displayName":"True","description":null,"helpText":null}]},"9f3a765af9d3444e":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone","displayName":"Let Apps Access Phone","description":"This policy setting specifies whether Windows apps can make phone calls","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"9f444872c4c7245c":{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance","displayName":"Configure Solicited Remote Assistance","description":"This policy setting allows you to turn on or turn off Solicited (Ask for) Remote Assistance on this computer.\n\nIf you enable this policy setting, users on this computer can use email or file transfer to ask someone for help. Also, users can use instant messaging programs to allow connections to this computer, and you can configure additional Remote Assistance settings.\n\nIf you disable this policy setting, users on this computer cannot use email or file transfer to ask someone for help. Also, users cannot use instant messaging programs to allow connections to this computer.\n\nIf you do not configure this policy setting, users can turn on or turn off Solicited (Ask for) Remote Assistance themselves in System Properties in Control Panel. Users can also configure Remote Assistance settings.\n\nIf you enable this policy setting, you have two ways to allow helpers to provide Remote Assistance: \"Allow helpers to only view the computer\" or \"Allow helpers to remotely control the computer.\"\n\nThe \"Maximum ticket time\" policy setting sets a limit on the amount of time that a Remote Assistance invitation created by using email or file transfer can remain open.\n\nThe \"Select the method for sending email invitations\" setting specifies which email standard to use to send Remote Assistance invitations. Depending on your email program, you can use either the Mailto standard (the invitation recipient connects through an Internet link) or the SMAPI (Simple MAPI) standard (the invitation is attached to your email message). This policy setting is not available in Windows Vista since SMAPI is the only method supported.\n\nIf you enable this policy setting you should also enable appropriate firewall exceptions to allow Remote Assistance communications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-solicitedremoteassistance"],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_1","displayName":"Enabled","description":null,"helpText":null}]},"9f5b989c4121a631":{"id":"device_vendor_msft_policy_config_system_disablechpe","displayName":"Disable CHPE","description":"This policy setting controls whether loading CHPE binaries is disabled on the ARM64 device. This policy has no effect on x64 devices. If you enable this policy setting, ARM64 devices will not load CHPE binaries. This setting is required for hotpatching on ARM64 devices. If you disable or do not configure this policy setting, ARM64 devices will load CHPE binaries.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disablechpe"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_disablechpe_0","displayName":"CHPE Binaries Enabled (Default)","description":"CHPE Binaries Enabled (Default)","helpText":null},{"id":"device_vendor_msft_policy_config_system_disablechpe_1","displayName":"CHPE Binaries Disabled","description":"CHPE Binaries Disabled","helpText":null}]},"9f1af1bf8e0888a7":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingcontent","displayName":"QR code embedded content (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingcontent_0","displayName":"Connection ID","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingcontent_1","displayName":"Device ID","description":null,"helpText":null}]},"9f93fcca80490116":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablehealthui","displayName":"Disable Health UI","description":"Use this policy setting if you want to disable the display of the device performance and health area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablehealthui"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablehealthui_0","displayName":"(Disable) The users can see the display of the device performance and health area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the device performance and health area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablehealthui_1","displayName":"(Enable) The users cannot see the display of the device performance and health area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the device performance and health area in Windows Defender Security Center.","helpText":null}]},"9fe35e02df997874":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_elevationvalidation","displayName":"Validation","description":"","helpText":"","infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_elevationvalidation_0","displayName":"Business justification","description":"Business Justification","helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_elevationvalidation_1","displayName":"Windows authentication","description":"Windows Authentication","helpText":null}]},"9f8864252cd57d31":{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_isdirectory","displayName":"Is directory","description":"Directory if selected, or file if not selected","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_isdirectory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_isdirectory_true","displayName":"Enabled","description":null,"helpText":null}]},"9f32ac618ea6a8c8":{"id":"mathsettings_systembehavior","displayName":"System Behavior","description":"If present, configures math behavior in the system.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"9faf458adf107ce1":{"id":"settings_item_accessibilitysettings_zoomenabled","displayName":"Zoom Enabled","description":"If true, enables zoom.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_zoomenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_zoomenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9fe874eceff30db7":{"id":"settings_item_dataroaming_enabled","displayName":"Enabled","description":"If `true`, enable data roaming, which also enables voice roaming. If `false`, disable data roaming. The device only applies this setting to the primary SIM.","helpText":null,"infoUrls":[],"categoryId":"0be23ead-c5f7-4ea5-9ec5-64c05d19cf5d","categoryName":"Data Roaming","options":[{"id":"settings_item_dataroaming_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_dataroaming_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"9fb740553f59e4ff":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols","displayName":"Streaming Media Protocols (User)","description":"This policy setting allows you to specify that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running Windows Media Services.\r\n\r\nIf you enable this policy setting, the protocols that are selected on the Network tab of the Player are used to receive a stream initiated through an MMS or RTSP URL from a Windows Media server. If the RSTP/UDP check box is selected, a user can specify UDP ports in the Use ports check box. If the user does not specify UDP ports, the Player uses default ports when using the UDP protocol. This policy setting also specifies that multicast streams can be received if the \"Allow the Player to receive multicast streams\" check box on the Network tab is selected.\r\n\r\nIf you enable this policy setting, the administrator must also specify the protocols that are available to users on the Network tab. If the administrator does not specify any protocols, the Player cannot access an MMS or RTSP URL from a Windows Media server. If the \"Hide network tab\" policy setting is enabled, the entire Network tab is hidden.\r\n\r\nIf you do not configure this policy setting, users can select the protocols to use on the Network tab.\r\n\r\nIf you disable this policy setting, the Protocols for MMS URLs and Multicast streams areas of the Network tab are not available and the Player cannot receive an MMS or RTSP stream from a Windows Media server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-windowsstreamingmediaprotocols"],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},"9ff405bd6112c596":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_clearbrowsingdataonexitlistdesc","displayName":"Clear Browsing Data on Exit (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"9fd06e8caad19559":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9f63acd426530ba2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls","displayName":"Allow insecure content on these sites (User)","description":"Allows you to set a list of url patterns that specify sites which are allowed to display blockable (i.e. active) mixed content (i.e. HTTP content on HTTPS sites) and for which optionally blockable mixed content upgrades will be disabled.\r\n\r\nIf this policy is left not set blockable mixed content will be blocked and optionally blockable mixed content will be upgraded, and users will be allowed to set exceptions to allow it for specific sites.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"9f9b42157bb0adf5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled","displayName":"Enable network prediction (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9f2f314dd27c6140":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc","displayName":"Block the WebHID API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"9ff0f743adad723f":{"id":"user_vendor_msft_policy_config_enterprisecloudprint_mopriadiscoveryresourceid","displayName":"Mopria Discovery Resource Id (User)","description":"Resource URI for which access is being requested by the Mopria discovery client during OAuth authentication","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-EnterpriseCloudPrint#mopriadiscoveryresourceid"],"categoryId":"14fe5c02-d4f6-4f2a-9eae-2d60d111ee77","categoryName":"Enterprise Cloud Print","options":null},"9fd2ffe029d74505":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_ignoreotherapplications","displayName":"Ignore other applications (User)","description":"This policy setting controls whether Excel can exchange data with other applications that use Dynamic Data Exchange (DDE).\r\n \r\n If you enable this policy setting, Excel does not allow the exchange of data with other applications that use DDE. In addition, the \"Ignore other applications that use Dynamic Data Exchange (DDE)\" user interface option under Excel Options | General is selected and users cannot change it. Enabling this policy setting can cause disruptions for users who rely on the DDE functionality in Excel to update information in workbooks. These users will have to use some other method to update information provided by other applications.\r\n \r\n If you disable or do not configure this policy setting, Excel can use the Dynamic Data Exchange (DDE) protocol to exchange messages and data with other applications. For example, a cell in an Excel workbook can be dynamically linked to a value provided by another application, such as weather or stock price information. When the value provided by the other application changes, Excel can automatically update the value in the workbook. Note: users can change this behavior by selecting the \"Ignore other applications that use Dynamic Data Exchange (DDE)\" user interface option under Excel Options | General.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_ignoreotherapplications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_ignoreotherapplications_1","displayName":"Enabled","description":null,"helpText":null}]},"9fec1955ca24ab4f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles","displayName":"Other data source files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"9f3461db9305eaec":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsblockedforurls_localfontsblockedforurlsdesc","displayName":"Block Local Fonts permission on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"9fc5625d6bb1ca19":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended","displayName":"Enable insecure download warnings (User)","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\r\n\r\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user will receive a UI warning, such as \"Insecure download blocked.\" The user will still have an option to proceed and download the item.\r\n\r\nIf you disable this policy, the warnings for insecure downloads will be suppressed.","helpText":"","infoUrls":[],"categoryId":"8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","categoryName":"Downloads","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"9ffa836f3ca84c6a":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (User)","description":"Allows you to set whether users can add exceptions to allow mixed content for specific sites.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'InsecureContentAllowedForUrls' (Allow insecure content on specified sites) and 'InsecureContentBlockedForUrls' (Block insecure content on specified sites) policies.\r\n\r\nIf this policy isn't set, users will be allowed to add exceptions to allow blockable mixed content and disable autoupgrades for optionally blockable mixed content.\r\n\r\n* 2 = Do not allow any site to load blockable mixed content\r\n\r\n* 3 = Allow users to add exceptions to allow blockable mixed content","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"9fb591f937259d2e":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled","displayName":"Mobile App Management Enabled (User)","description":"Allows the Microsoft Edge browser to retrieve policies from the Intune application management services and apply them to users' profiles.\r\n\r\nIf you enable this policy or don't configure it, Mobile App Management (MAM) Policies can be applied.\r\n\r\nIf you disable this policy, Microsoft Edge will not communicate with Intune to request MAM Policies.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9f2eef86bcfa6a55":{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode","displayName":"Configure when efficiency mode should become active (User)","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_1","displayName":"Enabled","description":null,"helpText":null}]},"9f15d74775357656":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled","displayName":"Enable Follow service in Microsoft Edge (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 126.\r\n\r\nLets Microsoft Edge browser enable Follow service and apply it to users.\r\n\r\nUsers can use the Follow feature for an influencer, site, or topic in Microsoft Edge..\r\n\r\nIf you enable or don't configure this policy, Follow in Microsoft Edge can be applied.\r\n\r\nIf you disable this policy, Microsoft Edge will not communicate with Follow service to provide the follow feature.\r\n\r\nThis policy is obsolete after version 126.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"9f0499f49b64ed3c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacebirthday_l_birthdaylabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"9f177af59cda9e86":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookglobaladdresslistdictionary","displayName":"Set comment fields for Outlook Global Address List Dictionary (User)","description":"This policy setting allows you to specify the fields to display in the comments in the Outlook Global Address List Dictionary. This policy setting applies to Japanese Microsoft IME only.\r\n\r\nIf you enable this policy setting, you can specify the fields to display by setting strings, which are represented by the following identification letter IDs. You must also use any IDs/strings in the following sequence.\r\n\r\nThe ID for each field is as follows:\r\na = Full Name\r\nc = Phonetic Name\r\ne = Company Name\r\nf = Department Name\r\ng = Title\r\nh = Office Location\r\nj = Email Address\r\nk = Business Telephone Number\r\nl = Business Address\r\n\r\nFor example, if you want to display Full Name, Phonetic Name and Company Name, specify 'ace'.\r\n\r\nIf you do not configure this policy setting, Full Name, Phonetic Name, Department Name, Job Title and Office Location are displayed in the comments, in this order.","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookglobaladdresslistdictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookglobaladdresslistdictionary_1","displayName":"Enabled","description":null,"helpText":null}]},"9fb33d52e21d9578":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_azerbaijanilatin","displayName":"Azerbaijani (Latin) (User)","description":"Enables the editing language Azerbaijani (Latin)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_azerbaijanilatin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_azerbaijanilatin_1","displayName":"Enabled","description":null,"helpText":null}]},"9f69039a7217abf8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishindonesia","displayName":"English (Indonesia) (User)","description":"Enables the editing language English (Indonesia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishindonesia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishindonesia_1","displayName":"Enabled","description":null,"helpText":null}]},"9f0757d8b7944f44":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey05_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"9f3f319a7f231441":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_general_l_relyoncssforfontformatting_l_usethecsssettingforwordasanemaileditor","displayName":"CSS setting for Word (User)","description":"","helpText":"","infoUrls":[],"categoryId":"eef9e433-0ca1-40b0-9a5d-c0ba1f8f0510","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_general_l_relyoncssforfontformatting_l_usethecsssettingforwordasanemaileditor_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_general_l_relyoncssforfontformatting_l_usethecsssettingforwordasanemaileditor_1","displayName":"True","description":null,"helpText":null}]},"9f953164cb303d26":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_uploadbandwidthlimit_uploadratevalue","displayName":"Bandwidth: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"9f8472b5ca37aa9a":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_disablescratchout","displayName":"Disable scratch out (User)","description":"Disables the scratch out gesture while inking.","helpText":"","infoUrls":[],"categoryId":"84de2eed-843c-401b-a3fd-e21be88f2365","categoryName":"Pen","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_disablescratchout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_pen_l_disablescratchout_1","displayName":"Enabled","description":null,"helpText":null}]},"9f03aa50f3d10353":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_fortezzacertificatepolicies","displayName":"Fortezza certificate policies (User)","description":"This policy setting specifies a list of policies allowed in the policies extension of a certificate that indicate the certificate is a Fortezza certificate. Fortezza is a hardware--based encryption standard created by the National Security Agency (NSA), a division of the United States Department of Defense. To be valid for use with Fortezza, a certificate must include an appropriate policy in the certificate's policies extension. \r\n\r\nIf you enable this policy setting, you can enter a list of policies in the supplied text box that can be used to indicate that a certificate is a Fortezza certificate. The list should be separated by semi-colons. For example: policy1;policy2;policy3. \r\n\r\nIf you disable or so nor configure this policy setting, a list of Fortezza certificate policies are not listed.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_fortezzacertificatepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_fortezzacertificatepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"9f02eb9362b6c8c6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc16_l_pathcolon68","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"9fd15d92cc27abed":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_customizableerrormessages_l_listoferrormessagestocustomize","displayName":"List of error messages to customize (User)","description":"Defines a list of custom error messages to activate.","helpText":"","infoUrls":[],"categoryId":"d5b3cab7-d486-4f74-8525-6bd740b950bc","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_customizableerrormessages_l_listoferrormessagestocustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_customizableerrormessages_l_listoferrormessagestocustomize_1","displayName":"Enabled","description":null,"helpText":null}]},"9f181770938712df":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchdiziduzu","displayName":"Match di/zi, du/zu (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchdiziduzu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchdiziduzu_1","displayName":"Enabled","description":null,"helpText":null}]},"9f3d19a23ab9ac0a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"9f3c46de08748ac2":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_l_setmaximumnumberoftrusteddocumentsspinid","displayName":"Maximum number: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":null},"9fed087968bf1125":{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningfultext","displayName":"Stop checking to ensure hyperlink text is meaningful (User)","description":"This policy setting prevents the Accessibility Checker from verifying that hyperlinks have meaningful text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that hyperlinks have meaningful text.\r\n\r\nIf you disable or do not configure this policy setting, hyperlink text will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningfultext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningfultext_1","displayName":"Enabled","description":null,"helpText":null}]},"9f5b7343d0c47939":{"id":"vendor_msft_wirelessnetworkpreference_parameters_cellularparameters_profileregistrationtimerinseconds","displayName":"Profile Registration Timer In Seconds (Windows Insiders only)","description":"When evaluating eSIM profiles for connectivity, this value configures the amount of time (in seconds) that the agent will wait for network registration before considering this profile unsatisfactory and moving on to the next one.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/a0.json b/public/intune-definitions/a0.json new file mode 100644 index 000000000000..4a83a595b4d6 --- /dev/null +++ b/public/intune-definitions/a0.json @@ -0,0 +1 @@ +{"a0982a0d93fd2290":{"id":"ade_setupassistant_tips","displayName":"Tips","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_tips_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_tips_1","displayName":"Show","description":null,"helpText":null}]},"a01c2d6ba8f994da":{"id":"app_privacy","displayName":"Privacy","description":"The dictionary of app settings.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"a01a3f697761e54c":{"id":"com.apple.app.lock_app_options_disableringerswitch","displayName":"Disable Ringer Switch","description":"If true, disables the ringer switch. When disabled, the ringer behavior depends on what position the switch was in when it was first disabled.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_disableringerswitch_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_disableringerswitch_true","displayName":"True","description":null,"helpText":null}]},"a0a8edfc686b6483":{"id":"com.apple.extensiblesso_deniedbundleidentifiers","displayName":"Denied Bundle Identifiers","description":"An array of bundle identifiers of apps that don't use SSO provided by this extension.\nAvailable in iOS 15 and later and macOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"a02a3e88ba5baf07":{"id":"com.apple.managedclient.preferences_systemextensions","displayName":"Use System Extensions","description":"Whether system extensions are used on MacOS 10.15 (Catalina) or not.","helpText":null,"infoUrls":["https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/microsoft-defender-atp-for-mac-is-moving-to-system-extensions/ba-p/1608736"],"categoryId":"a3ea4da3-445e-41c0-ac4d-c9ad2467ec26","categoryName":"Features","options":[{"id":"com.apple.managedclient.preferences_systemextensions_0","displayName":"enabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_systemextensions_1","displayName":"disabled","description":null,"helpText":null}]},"a018bc572c3fe4a5":{"id":"com.apple.mcx.filevault2_defer","displayName":"Defer","description":"If true, defers enabling FileVault until the designated user logs out. For details, see fdesetup(8). The person enabling FileVault must be either a local user or a mobile account user.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":{"id":"com.apple.mcx.filevault2_defer_true","displayName":"Enabled","description":null,"helpText":null}},"a093b6408b00ed46":{"id":"com.apple.softwareupdate_restrict-software-update-require-admin-to-install","displayName":"Restrict Software Update Require Admin To Install (Deprecated)","description":"If true, restrict app installations to admin users. This key has the same function as the Restrict Store Require Admin To Install key in the App Store profile. ","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_restrict-software-update-require-admin-to-install_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_restrict-software-update-require-admin-to-install_true","displayName":"True","description":null,"helpText":null}]},"a0063aab0e02ffa1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enablemediarouter","displayName":"Enable Google Cast","description":"Enable this policy to enable Google Cast. Users can launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\n\nDisable this policy to disable Google Cast.\n\nBy default, Google Cast is enabled.","helpText":null,"infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enablemediarouter_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enablemediarouter_true","displayName":"Enabled","description":null,"helpText":null}]},"a08520fc5bd46149":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeindicatoruienabled","displayName":"Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge","description":"This policy manages whether the indicator User Interface (UI) for enhanced security mode is shown or not when ESM is on.\n\nIf you enable or don't configure this policy, the indicator UI is on.\n\nIf you disable this policy, the indicator UI is off.\n\nNote: If this policy is used, only the indicator User Interface experience is supressed - ESM is still turned on. For more information, see the \"EnhanceSecurityMode\" policy.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeindicatoruienabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeindicatoruienabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a0b603f455111960":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes","displayName":"Configure the background types allowed for the new tab page layout","description":"You can configure which types of background image that are allowed on the new tab page layout in Microsoft Edge.\n\nIf you don't configure this policy, all background image types on the new tab page are enabled.\n\nPolicy options mapping:\n\n* DisableImageOfTheDay (1) = Disable daily background image type\n\n* DisableCustomImage (2) = Disable custom background image type\n\n* DisableAll (3) = Disable all background image types\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes_disableimageoftheday","displayName":"Disable daily background image type","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes_disablecustomimage","displayName":"Disable custom background image type","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes_disableall","displayName":"Disable all background image types","description":null,"helpText":null}]},"a0a4a9c042972daf":{"id":"device_vendor_msft_defender_configuration_allownetworkprotectiononwinserver","displayName":"Allow Network Protection On Win Server","description":"This settings controls whether Network Protection is allowed to be configured into block or audit mode on Windows Server. If false, the value of EnableNetworkProtection will be ignored.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_allownetworkprotectiononwinserver_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_defender_configuration_allownetworkprotectiononwinserver_0","displayName":"Disallow","description":"Disallow","helpText":null}]},"a052560f7eb717dc":{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockhostedappaccesswinrt","displayName":"Block launching Universal Windows apps with Windows Runtime API access from hosted content.","description":"\r\n This policy setting controls whether Universal Windows apps with Windows Runtime API access directly from web content can be launched.\r\n\r\n If you enable this policy setting, Universal Windows apps which declare Windows Runtime API access in ApplicationContentUriRules section of the manifest cannot be launched; Universal Windows apps which have not declared Windows Runtime API access in the manifest are not affected.\r\n\r\n If you disable or do not configure this policy setting, all Universal Windows apps can be launched.\r\n\r\n This policy should not be enabled unless recommended by Microsoft as a security response because it can cause severe app compatibility issues.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeblockhostedappaccesswinrt"],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":[{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockhostedappaccesswinrt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockhostedappaccesswinrt_1","displayName":"Enabled","description":null,"helpText":null}]},"a0c8a4f24fbd1f35":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcontentage","displayName":"Limit the age of files in the BITS Peercache","description":"This policy setting limits the maximum age of files in the Background Intelligent Transfer Service (BITS) peer cache. In order to make the most efficient use of disk space, by default BITS removes any files in the peer cache that have not been accessed in the past 90 days.\r\n\r\n If you enable this policy setting, you can specify in days the maximum age of files in the cache. You can enter a value between 1 and 120 days.\r\n\r\n If you disable or do not configure this policy setting, files that have not been accessed for the past 90 days will be removed from the peer cache.\r\n\r\n Note: This policy setting has no effect if the \"Allow BITS Peercaching\" policy setting is disabled or not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxcontentage"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcontentage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcontentage_1","displayName":"Enabled","description":null,"helpText":null}]},"a041fbcee7d07313":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxfilesperjob_bits_maxfilesperjoblist","displayName":"Maximum number of files allowed in a BITS job:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"a02f41cf6a42fdfb":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit","displayName":"Specify default quota limit and warning level","description":"This policy setting specifies the default disk quota limit and warning level for new users of the volume.\r\n\r\nThis policy setting determines how much disk space can be used by each user on each of the NTFS file system volumes on a computer. It also specifies the warning level, the point at which the user's status in the Quota Entries window changes to indicate that the user is approaching the disk quota limit.\r\n\r\nThis setting overrides new users’ settings for the disk quota limit and warning level on their volumes, and it disables the corresponding options in the \"Select the default quota limit for new users of this volume\" section on the Quota tab.\r\n\r\nThis policy setting applies to all new users as soon as they write to the volume. It does not affect disk quota limits for current users, or affect customized limits and warning levels set for particular users (on the Quota tab in Volume Properties).\r\n\r\nIf you disable or do not configure this policy setting, the disk space available to users is not limited. The disk quota management feature uses the physical space on each volume as its quota limit and warning level.\r\n\r\nWhen you select a limit, remember that the same limit applies to all users on all volumes, regardless of actual volume size. Be sure to set the limit and warning level so that it is reasonable for the range of volumes in the group.\r\n\r\nThis policy setting is effective only when disk quota management is enabled on the volume. Also, if disk quotas are not enforced, users can exceed the quota limit you set. When users reach the quota limit, their status in the Quota Entries window changes, but users can continue to write to the volume.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-diskquota#admx-diskquota-dq-limit"],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":[{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_1","displayName":"Enabled","description":null,"helpText":null}]},"a030ad26aea3c3d3":{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_disablepasswordauthentication","displayName":"Do not allow password authentication of Enhanced Storage devices","description":"This policy setting configures whether or not a password can be used to unlock an Enhanced Storage device.\r\n\r\nIf you enable this policy setting, a password cannot be used to unlock an Enhanced Storage device.\r\n\r\nIf you disable or do not configure this policy setting, a password can be used to unlock an Enhanced Storage device.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-enhancedstorage#admx-enhancedstorage-disablepasswordauthentication"],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_disablepasswordauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_disablepasswordauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},"a0076f0c7bc0f08d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_protectedfolders_exploitguard_controlledfolderaccess_protectedfolders_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":null},"a0c9431c9fa4ffe0":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath","displayName":"Settings storage path","description":"This policy setting configures where the settings package files that contain user settings are stored. \r\nIf you enable this policy setting, the user settings are stored in the specified location. \r\nIf you disable or do not configure this policy setting, the user settings are stored in the user’s home directory if configured for your environment. \r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-settingsstoragepath"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_1","displayName":"Enabled","description":null,"helpText":null}]},"a0771cc07c481a71":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowlocationprovider","displayName":"Location Provider","description":"Specifies the CLSID for a compatible implementation of the IAppvPackageLocationProvider interface.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingallowlocationprovider"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowlocationprovider_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowlocationprovider_1","displayName":"Enabled","description":null,"helpText":null}]},"a0c6eef348127085":{"id":"device_vendor_msft_policy_config_audit_objectaccess_audithandlemanipulation","displayName":"Object Access Audit Handle Manipulation","description":"This policy setting allows you to audit events generated when a handle to an object is opened or closed. Only objects with a matching system access control list (SACL) generate security audit events. If you configure this policy setting, an audit event is generated when a handle is manipulated. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a handle is manipulated. Note: Events in this subcategory generate events only for object types where the corresponding Object Access subcategory is enabled. For example, if File system object access is enabled, handle manipulation security audit events are generated. If Registry object access is not enabled, handle manipulation security audit events will not be generated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_audithandlemanipulation"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_audithandlemanipulation_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_audithandlemanipulation_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_audithandlemanipulation_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_audithandlemanipulation_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"a0304301bad46b3e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled","displayName":"Enable guest mode in browser","description":"If this policy is set to true or not configured, Google Chrome will enable guest logins. Guest logins are Google Chrome profiles where all windows are in incognito mode.\r\n\r\nIf this policy is set to false, Google Chrome will not allow guest profiles to be started.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a0d113dc64b2e25e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_windowplacementblockedforurlsdesc","displayName":"Block Window Placement permission on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"a00dd6c2bdab3eb7":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts","displayName":"Block execution of potentially obfuscated scripts","description":"This rule detects suspicious properties within an obfuscated script.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_warn","displayName":"Warn","description":null,"helpText":null}]},"a0249720321f0a8d":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthout","displayName":"Maximum Background Download Bandwidth (percentage) outside of Business Hours:","description":"","helpText":"","infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"a041ffb1b5fabd97":{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection","displayName":"Force Onlooker Detection","description":"Determines whether detect when other people are looking at my screen is forced on/off by the MDM policy. The user will not be able to change this setting and the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceonlookerdetection"],"categoryId":"a77e6e83-a02e-4a51-a27e-6437ea42aeb5","categoryName":"Human Presence","options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_2","displayName":"Forced Off.","description":"ForcedOff.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_1","displayName":"Forced On.","description":"ForcedOn.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},"a0d553cf5dfe5e18":{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect","displayName":"Max Smb2 Dialect","description":"This policy controls the maximum version of SMB protocol. Note: This group policy does not prevent use of SMB 1 if that component is still installed and enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#maxsmb2dialect"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_514","displayName":"SMB 2.0.2","description":"SMB 2.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_528","displayName":"SMB 2.1.0","description":"SMB 2.1.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_768","displayName":"SMB 3.0.0","description":"SMB 3.0.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_770","displayName":"SMB 3.0.2","description":"SMB 3.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_785","displayName":"SMB 3.1.1","description":"SMB 3.1.1","helpText":null}]},"a046ed37f8edf5ee":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_copilotaddressbarsuggestionsenabled","displayName":"Enable Copilot address bar suggestions","description":"This policy controls whether Copilot chat suggestions appear in the address bar of Microsoft Edge.\n\nIf you enable this policy or don't configure it, Copilot chat suggestions appear in the address bar.\n\nIf you disable this policy, Copilot chat suggestions don't appear in the address bar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_copilotaddressbarsuggestionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_copilotaddressbarsuggestionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a0738d7589f6f0f1":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage","displayName":"Enable specific spellcheck languages","description":"Enables different languages for spellcheck. Any language that you specify that isn't recognized is ignored.\r\n\r\nIf you enable this policy, spellcheck is enabled for the languages specified, as well as any languages the user has enabled.\r\n\r\nIf you don't configure or disable this policy, there's no change to the user's spellcheck preferences.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is disabled, this policy will have no effect.\r\n\r\nIf a language is included in both the 'SpellcheckLanguage' and the 'SpellcheckLanguageBlocklist' (Force disable spellcheck languages) policy, the spellcheck language is enabled.\r\n\r\nThe supported languages are: af, bg, ca, cs, cy, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"a0ffc041d5191700":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes","displayName":"Supported authentication schemes","description":"Specifies which HTTP authentication schemes are supported.\r\n\r\nYou can configure the policy by using these values: 'basic', 'digest', 'ntlm', and 'negotiate'. Separate multiple values with commas.\r\n\r\nIf you don't configure this policy, all four schemes are used.\r\n\r\nExample value: basic,digest,ntlm,negotiate","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_1","displayName":"Enabled","description":null,"helpText":null}]},"a00ba0d49dbb5018":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_sleepingtabsblockedforurlsdesc","displayName":"Block Sleeping Tabs on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":null},"a0d042f478051d4a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepackagerepair","displayName":"Disable Package Repair","description":"This policy setting lets you disable the option to repair Open XML documents. \r\n\r\nIf you enable this policy setting, Office 2016 prevents applications from performing a repair on corrupted Open XML documents.\r\n\r\nIf you disable or do not configure this policy setting, when an Office 2016 application detects that an Open XML document has been corrupted, the user is given the option of repairing the corrupted document. ","helpText":"","infoUrls":[],"categoryId":"f0190b73-0d5c-410e-bce1-e03aa1f62ed4","categoryName":"Security Settings","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepackagerepair_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepackagerepair_1","displayName":"Enabled","description":null,"helpText":null}]},"a040a9eebd66bb68":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_spdesignexe93","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_spdesignexe93_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_spdesignexe93_1","displayName":"True","description":null,"helpText":null}]},"a0b206e8e27fa624":{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinsettingsux","displayName":"Configure Telemetry Opt In Settings Ux","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#configuretelemetryoptinsettingsux"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinsettingsux_0","displayName":"Enable Telemetry opt-in Settings.","description":"Enable Telemetry opt-in Settings.","helpText":null},{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinsettingsux_1","displayName":"Disable Telemetry opt-in Settings.","description":"Disable Telemetry opt-in Settings.","helpText":null}]},"a031d6c29c7b14d6":{"id":"device_vendor_msft_policy_config_windowsai_disablegenerativefill","displayName":"Disable Generative Fill","description":"This policy setting allows you to control whether generative fill functionality is disabled in the Windows Paint app. If this policy is enabled, generative fill functionality will not be accessible in the Paint app. If this policy is disabled or not configured, users will be able to access generative fill functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disablegenerativefill"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disablegenerativefill_0","displayName":"Generative fill is enabled.","description":"Generative fill is enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disablegenerativefill_1","displayName":"Generative fill is disabled.","description":"Generative fill is disabled.","helpText":null}]},"a0c97fc5b60795d0":{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablechangepassword","displayName":"Remove Change Password (User)","description":"This policy setting prevents users from changing their Windows password on demand.\r\n\r\nIf you enable this policy setting, the 'Change Password' button on the Windows Security dialog box will not appear when you press Ctrl+Alt+Del.\r\n\r\nHowever, users are still able to change their password when prompted by the system. The system prompts users for a new password when an administrator requires a new password or their password is expiring.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ctrlaltdel#admx-ctrlaltdel-disablechangepassword"],"categoryId":"5536b5f4-3d31-4290-acea-9bef323bb83d","categoryName":"Ctrl Alt Del Options","options":[{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablechangepassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablechangepassword_1","displayName":"Enabled","description":null,"helpText":null}]},"a05d2ba60577a3fe":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_perflogsalerts","displayName":"Performance Logs and Alerts (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-perflogsalerts"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_perflogsalerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_perflogsalerts_1","displayName":"Enabled","description":null,"helpText":null}]},"a0cb0de870be1916":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher","displayName":"Microsoft Publisher 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Publisher 2010.\r\nBy default, the user settings of Microsoft Publisher 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Publisher 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Publisher 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010publisher"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher_1","displayName":"Enabled","description":null,"helpText":null}]},"a0e252c4c55d594b":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_bypassproxylocal","displayName":"Bypass proxy for local addresses (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_bypassproxylocal_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_bypassproxylocal_1","displayName":"True","description":null,"helpText":null}]},"a0e5347f99f6658c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended","displayName":"Import saved passwords from default browser on first run (User)","description":"Setting the policy to Enabled imports saved passwords from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no saved passwords are imported on first run.\r\n\r\nUsers can trigger an import dialog and the saved passwords checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a04cce44a3dc17e8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"a05df82f6cc5548d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger","displayName":"Password protection warning trigger (User)","description":"Setting the policy lets you control the triggering of password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\r\n\r\nUse PasswordProtectionLoginURLs and PasswordProtectionChangePasswordURL to set which password to protect.\r\n\r\nIf this policy is set to:\r\n\r\n* PasswordProtectionWarningOff, no password protection warning will be shown.\r\n\r\n* PasswordProtectionWarningOnPasswordReuse, password protection warning will be shown when the user reuses their protected password on a non-allowed site.\r\n\r\n* PasswordProtectionWarningOnPhishingReuse, password protection warning will be shown when the user reuses their protected password on a phishing site.\r\n\r\nLeaving the policy unset has the password protection service only protect Google passwords, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_1","displayName":"Enabled","description":null,"helpText":null}]},"a02eb866b09daff2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled","displayName":"Enable the browser's UI Automation accessibility framework provider on Windows (User)","description":"Enables the UI Automation accessibility framework\r\nprovider in Google Chrome for use by\r\naccessibility tools.\r\n\r\nThis policy is supported in\r\nGoogle Chrome for a one-year\r\ntransition period to allow enterprise administrators to control the deployment\r\nof the browser's UI Automation accessibility\r\nframework provider. Accessibility and other tools that use the\r\nUI Automation accessibility framework to interoperate\r\nwith the browser may require updates to function properly with the browser's\r\nUI Automation provider. Administrators can use this\r\npolicy to temporarily disable the browser's\r\nUI Automation provider (thereby reverting to the old\r\nbehavior) while they work with vendors to provide updates to impacted tools.\r\n\r\nWhen set to false, Google Chrome only\r\nenables its Microsoft Active Accessibility\r\nprovider. Accessibility and other tools that use the newer\r\nUI Automation accessibility framework to interoperate\r\nwith the browser will communicate with it by way of a compatibility shim in\r\nMicrosoft® Windows®.\r\n\r\nWhen set to true, Google Chrome\r\nenables its UI Automation provider in addition to its\r\nMicrosoft Active Accessibility provider.\r\nAccessibility and other tools that use the newer\r\nUI Automation accessibility framework to interoperate\r\nwith the browser will communicate directly with it.\r\n\r\nWhen left unset, the variations framework in Google Chrome is used to enable or disable\r\nthe provider.\r\n\r\nSupport for this policy setting will end in Google Chrome 146.","helpText":"","infoUrls":[],"categoryId":"d9432f48-3072-4171-9031-4ebead394151","categoryName":"Accessibility settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a0f7d0d7ebbbaf6e":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled","displayName":"Allow Safe Browsing Surveys (User)","description":"When this policy is enabled or left unset, the user may receive surveys related to Safe Browsing.\r\nWhen this policy is disabled, the user will not receive surveys related to Safe Browsing.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a0b54178ac220310":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation","displayName":"Default file location (User)","description":"This policy setting allows you to specify the folder that Excel uses when opening or saving a file. This setting can be found under File tab | Options | Save | Save workbook Options.\r\n\r\nIf you enable this policy setting, you may specify this folder.\r\n\r\nIf you disable or do not configure this policy setting, the default folder will be used.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"a05a60ba54fb3ab9":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Disable all application add-ins (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n \r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users, except if application add-ins are required to be signed by Trusted Publishers.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"a067386c6203f2fd":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1","displayName":"Configure SIP security mode (User)","description":"\r\nWhen Lync connects to the server, it supports various authentication mechanisms. This policy allows the user to specify whether Digest and Basic authentication are supported.\r\n\r\nDisabled (default): NTLM/Kerberos/TLS-DSK/Digest/Basic\r\nEnabled:\r\n Authentication mechanisms: NTLM/Kerberos/TLS-DSK\r\n Gal Download: Requires HTTPS if user is not logged in as an internal user.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1_1","displayName":"Enabled","description":null,"helpText":null}]},"a0f23ad6771bee7a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_audiocaptureallowedurlsdesc","displayName":"Sites that can access audio capture devices without requesting permission (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"a0441184876f12bb":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled","displayName":"Disable synchronization of data using Microsoft sync services (User)","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\r\n\r\nIf you don't set this policy or apply it as recommended, users will be able to turn sync on or off. If you apply this policy as mandatory, users will not be able to turn sync on.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a0cc8f2a6d6d071a":{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (User)","description":"If FriendlyURLs are enabled, Microsoft Edge will compute additional representations of the URL and place them on the clipboard.\r\n\r\nThis policy configures what format will be pasted when the user pastes in external applications, or inside Microsoft Edge without the 'Paste as' context menu item.\r\n\r\nIf configured, this policy makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu will not be available.\r\n\r\n* Not configured = The user will be able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\r\n\r\n* 1 = No additional formats will be stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature will be disabled.\r\n\r\n* 3 = The user will get a friendly URL whenever they paste into surfaces that accept rich text. The plain URL will still be available for non-rich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\r\n\r\n* 4 = (Not currently used)\r\n\r\nThe richer formats may not be well-supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\r\n\r\nThe recommended policy is available in Microsoft Edge 105 or later.\r\n\r\nPolicy options mapping:\r\n\r\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\r\n\r\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.\r\n\r\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a0bb5161c0ea4d24":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled","displayName":"Microsoft Edge management extensions feedback enabled (User)","description":"This setting controls whether Microsoft Edge sends data about blocked extensions to the Microsoft Edge management service.\r\n\r\nThe 'EdgeManagementEnabled' policy must also be enabled for this setting to take effect.\r\n\r\nIf you enable this policy, Microsoft Edge will send data to the Microsoft Edge service when a user tries to install a blocked extension.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge won't send any data to the Microsoft Edge service about blocked extensions.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a05f4d9576638f31":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":null},"a07f382d9f615f36":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy","displayName":"Turn off all user customizations (User)","description":"This policy setting can prevent users from making any Quick Access Toolbar and the Ribbon customizations. This includes customizations made through user interface (UI) entry points, or loaded from documents or templates.\r\n\r\nIf you enable this policy setting, users will not be able to customize the Quick Access Toolbar and Ribbon through either the Quick Access Toolbar and Ribbon tabs in the application's Office Center dialog box, or the right-click menu on the Ribbon. In addition, Quick Access Toolbar and Ribbon customizations originating from documents or templates will not be loaded when these documents are opened.\r\n\r\nIf you disable or do not configure this policy setting, users can make Quick Access Toolbar and Ribbon customizations through the UI, as well as load them from documents and templates.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"a095c992bf3e277c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tigrinyaethiopia","displayName":"Tigrinya (Ethiopia) (User)","description":"Enables the editing language Tigrinya (Ethiopia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tigrinyaethiopia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tigrinyaethiopia_1","displayName":"Enabled","description":null,"helpText":null}]},"a02671e6e813db3e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_controlblogging","displayName":"Control Blogging (User)","description":"This policy setting controls whether users can compose and post blog entries from Word.\r\n\r\nIf you enable this policy setting, you can choose from three options for controlling blogging: \r\n\r\n* Enabled - Users may compose and post blog entries from Word to any available blog provider. This is the default configuration in Word. \r\n\r\n* Only SharePoint blogs allowed - Users can only post blog entries to SharePoint sites. \r\n\r\n* Disabled - The blogging feature in Word is disabled entirely. \r\n\r\nIf you disable or do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled-Enabled.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_controlblogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_controlblogging_1","displayName":"Enabled","description":null,"helpText":null}]},"a05b6aa89288225b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration","displayName":"Requested XAdES level for signature generation (User)","description":"This policy setting allows you to specify a requested or desired XAdES level in creating a digital signature. \r\n\r\nIf you enable this policy setting, you may specify the XAdES level in creating a digital signature. If the desired XAdES level is not reached, the last highest XAdES level reached is used if the level is higher than the minimum XAdES level (XAdeES-BES).\r\n\r\n- No XAdES: XML-DSig - No XAdES\r\n- XAdES-BES: Minimal XAdES (Default)\r\n- XAdES-T: Will fall back to XAdES-BES if minimum XAdES level < XAdes-T\r\n- XAdES-C: Will fall back to XAdES-T if minimum XAdES level < XAdes-C\r\n- XAdES-X: Will fall back to XAdES-C if minimum XAdES level < XAdes-X\r\n- XAdES-X-L: Will fall back to XAdES-X if minimum XAdES level < XAdes-X-L\r\n\r\nIf you disable or do not configure this policy setting, XAdES-BES will be used.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_requestedxadeslevelforsignaturegeneration_1","displayName":"Enabled","description":null,"helpText":null}]},"a0cf4ab22c6442a2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel_l_setsignatureverificationleveldropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel_l_setsignatureverificationleveldropid_0","displayName":"No rules","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel_l_setsignatureverificationleveldropid_1","displayName":"Office 2007 rules","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel_l_setsignatureverificationleveldropid_2","displayName":"Office 2010 rules","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel_l_setsignatureverificationleveldropid_3","displayName":"Office 2013 rules","description":null,"helpText":null}]},"a0aaaf20f098eed8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc08_l_allowsubfolders08","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc08_l_allowsubfolders08_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc08_l_allowsubfolders08_1","displayName":"True","description":null,"helpText":null}]},"a065e2b82f1b05af":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingpsts_l_empty78","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingpsts_l_empty78_0","displayName":"(default) PSTs can be added","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingpsts_l_empty78_1","displayName":"No PSTs can be added","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingpsts_l_empty78_2","displayName":"Only Sharing-Exclusive PSTs can be added","description":null,"helpText":null}]},"a01ed35079fb7937":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstweekofyear_l_choosethefirstweekoftheyear","displayName":"Choose the first week of the year: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstweekofyear_l_choosethefirstweekoftheyear_0","displayName":"Starts on Jan. 1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstweekofyear_l_choosethefirstweekoftheyear_2","displayName":"First full week","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstweekofyear_l_choosethefirstweekoftheyear_1","displayName":"First four-day week","description":null,"helpText":null}]},"a0a64ededf6bac72":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_hideluckydayswhenusingrokuyoujapanesecalendar","displayName":"Hide lucky days when using Rokuyou (Japanese) calendar (User)","description":"Checked: Does not display lucky days when using a Japanese Rokuyou calendar. | Unchecked: Displays lucky days when using a Japanese Rokuyou calendar.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_hideluckydayswhenusingrokuyoujapanesecalendar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_hideluckydayswhenusingrokuyoujapanesecalendar_1","displayName":"Enabled","description":null,"helpText":null}]},"a09c8f83a781b757":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation","displayName":"Slide navigation (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"6fd44fd0-80d1-47a0-acad-c115e5b807b6","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_1","displayName":"Enabled","description":null,"helpText":null}]},"a0b4a1f46524b9bb":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc18_l_datecolon77","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"a05785436563e7a8":{"id":"vendor_msft_firewall_mdmstore_privateprofile_logfilepath","displayName":"Log File Path","description":"This value is a string that represents a file path to the log where the firewall logs dropped packets and successful connections. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured, otherwise the MdmStore value wins if it is configured, otherwise the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"a00cdc6b797deadd":{"id":"vendor_msft_firewall_mdmstore_publicprofile_shielded","displayName":"Shielded","description":"This value is used as an on/off switch. If this value is on and EnableFirewall is on, the server MUST block all incoming traffic regardless of other policy settings. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_shielded_false","displayName":"False","description":"Shielding Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_shielded_true","displayName":"True","description":"Shielding On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/a1.json b/public/intune-definitions/a1.json new file mode 100644 index 000000000000..bc63077f118e --- /dev/null +++ b/public/intune-definitions/a1.json @@ -0,0 +1 @@ +{"a10546c691801394":{"id":"ade_modernauth_awaitfinalconfiguration","displayName":"Await final configuration","description":"Keeps the device in Setup Assistant until the first sync between the device and Intune installs policies.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_modernauth_awaitfinalconfiguration_0","displayName":"No","description":null,"helpText":null},{"id":"ade_modernauth_awaitfinalconfiguration_1","displayName":"Yes","description":null,"helpText":null}]},"a197940f77c982b1":{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing","displayName":"Data sharing between work and personal profile","description":"Choose if data can be shared between work and personal profiles. Available for corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_notconfigured","displayName":"Device default","description":"Not configured; this value defaults to CROSS_PROFILE_DATA_SHARING_UNSPECIFIED.","helpText":null},{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_crossprofiledatasharingblocked","displayName":"Block all sharing between profiles","description":"Data cannot be shared from both the personal profile to work profile and the work profile to the personal profile.","helpText":null},{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_datasharingfromworktopersonalblocked","displayName":"Block sharing from work to personal profile","description":"Prevents users from sharing data from the work profile to apps in the personal profile. Personal data can be shared with work apps.","helpText":null},{"id":"com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_crossprofiledatasharingallowed","displayName":"No restrictions on sharing","description":"Data from either profile can be shared with the other profile.","helpText":null}]},"a13ad9b4e5deeee2":{"id":"com.apple.applicationaccess_allowdefaultbrowsermodification","displayName":"Allow Default Browser Modification","description":"If false, disables default browser preference modification. The MDM Settings command to set the default browser preference will still work when this is applied.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowdefaultbrowsermodification_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowdefaultbrowsermodification_true","displayName":"Enabled","description":null,"helpText":null}]},"a1b5b82f8ecb3bda":{"id":"com.apple.applicationaccess_allowesimmodification","displayName":"Allow ESIM Modification","description":"If false, disables modifications to carrier plan related settings (only available on select carriers). Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowesimmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowesimmodification_true","displayName":"True","description":null,"helpText":null}]},"a143ffcfe59edca8":{"id":"com.apple.dnssettings.managed_com.apple.dnssettings.managed","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"a1d93016cac72016":{"id":"com.apple.managedclient.preferences_defaultstolocalopensave","displayName":"Default to local files for open/save","description":"Prefer the local file system when accessing the Open and Save dialogs.","helpText":null,"infoUrls":["https://learn.microsoft.com/deployoffice/mac/preferences-office"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_defaultstolocalopensave_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultstolocalopensave_true","displayName":"True","description":null,"helpText":null}]},"a182238e37d855b6":{"id":"com.apple.managedclient.preferences_hidefirstrunexperience","displayName":"Hide the First-run experience and splash screen","description":"If you enable this policy, the First-run experience and the splash screen will not be shown to users when they run Microsoft Edge for the first time.\n\nFor the configuration options shown in the First Run Experience, the browser will default to the following:\n\n-On the New Tab Page, the feed type will be set to MSN News and the layout to Inspirational.\n\n-The user will still be automatically signed into Microsoft Edge if the Windows account is of AAD or MSA type.\n\n-Sync will not be enabled by default and users will be able to turn on sync from the sync settings.\n\nIf you disable or don't configure this policy, the First-run experience and the Splash screen will be shown.\n\nNote: The specific configuration options shown to the user in the First Run Experience, can also be managed by using other specific policies. You can use the HideFirstRunExperience policy in combination with these policies to configure a specific browser experience on your managed devices. Some of these other policies are:\n\n-\"AutoImportAtFirstRun\"\n\n-\"NewTabPageLocation\"\n\n-\"NewTabPageSetFeedType\"\n\n-\"SyncDisabled\"\n\n-\"BrowserSignin\"\n\n-\"NonRemovableProfileEnabled\"","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#hidefirstrunexperience"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_hidefirstrunexperience_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_hidefirstrunexperience_true","displayName":"Enabled","description":null,"helpText":null}]},"a1a5b0feae8cd600":{"id":"com.apple.managedclient.preferences_kfmsilentoptin","displayName":"Automatically and silently enable the Folder Backup feature (Known Folder Move)","description":"Use this setting to redirect and move your users Documents and/or Desktop folders to OneDrive without any user interaction. Enter your Microsoft 365 tenant ID to enable this feature.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#kfmsilentoptin"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":null},"a1cbd44e78f7540f":{"id":"com.apple.mcx.filevault2_username","displayName":"Username","description":"The user name of the Open Directory user to be added to FileVault.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":null},"a1268dd97cded688":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultidledetectionsetting","displayName":"Default idle detection setting","description":"Setting this policy to 1 - AllowIdleDetection allows websites to use the Idle Detection API without requesting user permission.\n\nSetting this policy to 2 - BlockIdleDetection prevents websites from using the Idle Detection API.\n\nSetting this policy to 3 - AskIdleDetection requires websites to request user permission each time before using the Idle Detection API.\n\nIf you do not configure this policy, users can decide whether to allow the Idle Detection API and can change this setting themselves.\n\nPolicy options mapping:\n\n* AllowIdleDetection (1) = Allow sites to detect idle state without asking the user\n\n* BlockIdleDetection (2) = Do not allow any site to detect the user's idle state\n\n* AskIdleDetection (3) = Ask every time a site wants to detect the user's idle state\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultidledetectionsetting_allowidledetection","displayName":"Allow sites to detect idle state without asking the user","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultidledetectionsetting_blockidledetection","displayName":"Do not allow any site to detect the user's idle state","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultidledetectionsetting_askidledetection","displayName":"Ask every time a site wants to detect the user's idle state","description":null,"helpText":null}]},"a1c0f6956d4e0c62":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_werminfreediskspace","displayName":"Minimum free disk space (MB):","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"a18b5081a99a24d0":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_proxybypass_proxybypass","displayName":"Define addresses to bypass proxy server","description":null,"helpText":"","infoUrls":[],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":null},"a14308caa0225590":{"id":"device_vendor_msft_policy_config_admx_msapolicy_microsoftaccount_disableuserauth","displayName":"Block all consumer Microsoft account user authentication","description":"This setting controls whether users can provide Microsoft accounts for authentication for applications or services. If this setting is enabled, all applications and services on the device are prevented from using Microsoft accounts for authentication. \r\nThis applies both to existing users of a device and new users who may be added. However, any application or service that has already authenticated a user will not be affected by enabling this setting until the authentication cache expires. \r\nIt is recommended to enable this setting before any user signs in to a device to prevent cached tokens from being present. If this setting is disabled or not configured, applications and services can use Microsoft accounts for authentication. \r\nBy default, this setting is Disabled. This setting does not affect whether users can sign in to devices by using Microsoft accounts, or the ability for users to provide Microsoft accounts via the browser for authentication with web-based applications. \r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msapolicy#admx-msapolicy-microsoftaccount-disableuserauth"],"categoryId":"60b898a9-0490-4599-b7f1-3cd451236266","categoryName":"Microsoft account","options":[{"id":"device_vendor_msft_policy_config_admx_msapolicy_microsoftaccount_disableuserauth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msapolicy_microsoftaccount_disableuserauth_1","displayName":"Enabled","description":null,"helpText":null}]},"a1ba55c27ce77865":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_nc","displayName":"Guaranteed service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that do not conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Guaranteed service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 0.\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypeguaranteed-nc"],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_nc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_nc_1","displayName":"Enabled","description":null,"helpText":null}]},"a1abb41d2f28f98c":{"id":"device_vendor_msft_policy_config_admx_wininit_shutdowntimeouthungsessionsdescription_shutdownsessiontimeout_time","displayName":"Hung session timeout in Minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"daf3f2c8-f6a5-40bd-96b3-2c6a28931614","categoryName":"Shutdown Options","options":null},"a1c30a63f7ec41cf":{"id":"device_vendor_msft_policy_config_browser_allowdonottrack","displayName":"Allow Do Not Track","description":"This setting lets you decide whether employees can send Do Not Track headers to websites that request tracking info.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowdonottrack"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowdonottrack_0","displayName":"Block","description":"Never send tracking information.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowdonottrack_1","displayName":"Allow","description":"Send tracking information.","helpText":null}]},"a100efb6c5e6d039":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled","displayName":"Allow background tabs freeze","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a1160f62cae5a5c8":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx","displayName":"Volume Type (VHD or VHDX)","description":"Specifies the type of virtual disk to auto-create. The default is VHD which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VolumeType\r\nType: REG_SZ\r\nValues: VHD, VHDX","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_1","displayName":"Enabled","description":null,"helpText":null}]},"a1403c35e0aece08":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled","displayName":"Enabled","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nControls whether or not the Profiles feature is active\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\Enabled\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a11afc24bae248a2":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a","displayName":"Include local directory path when uploading files to a server","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3","displayName":"Disable","description":null,"helpText":null}]},"a172c162dbef0383":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00","displayName":"Logon options","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"a1fa777f89a29b87":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"a1d70a03f7d4f823":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"a1be94fb5268526d":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_setntpdefaultfeedtab","displayName":"Set the default New Tab Page feed tab to Work or Discover (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_setntpdefaultfeedtab_0","displayName":"Work","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_setntpdefaultfeedtab_1","displayName":"Discover","description":null,"helpText":null}]},"a198d6acdc42664e":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash","displayName":"Block Flash activation in Office documents","description":"This policy setting controls whether the Adobe Flash control can be activated by Office documents. Note that activation blocking applies only within Office processes.\r\n\r\nIf you enable this policy setting, you can choose from three options to control whether and how Flash is blocked from activation:\r\n\r\n1. \"Block all activation\" prevents the Flash control from being loaded, whether directly referenced by the document or indirectly by another embedded object.\r\n\r\n2. \"Block embedding/linking, allow other activation\" prevents the Flash control from being loaded when directly referenced by the document, but does not prevent activation through another object.\r\n\r\n3. \"Allow all activation\" restores Office's default behavior, allowing the Flash control to be activated.\r\n\r\nBecause this setting is not a true Group Policy setting and \"tattoos\" the registry, enabling the \"Allow all activation\" option is the only way to restore default behavior after either of the \"Block\" options has been applied. We do not recommend configuring this setting to \"Disabled,\" nor to \"Not Configured\" after it has been enabled.\r\n","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_1","displayName":"Enabled","description":null,"helpText":null}]},"a120f34516af82ae":{"id":"device_vendor_msft_policy_config_system_disableonedrivefilesync","displayName":"Disable One Drive File Sync","description":"This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: users can’t access OneDrive from the OneDrive app and file picker; Microsoft Store apps can’t access OneDrive using the WinRT API; OneDrive doesn’t appear in the navigation pane in File Explorer; OneDrive files aren’t kept in sync with the cloud; Users can’t automatically upload photos and videos from the camera roll folder. If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disableonedrivefilesync"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_disableonedrivefilesync_0","displayName":"Sync enabled.","description":"Sync enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disableonedrivefilesync_1","displayName":"Sync disabled.","description":"Sync disabled.","helpText":null}]},"a1e85a62a2331035":{"id":"device_vendor_msft_policy_config_system_limitdiagnosticlogcollection","displayName":"Limit Diagnostic Log Collection","description":"This policy setting specifies whether diagnostic log data can be collected when more information is needed to troubleshoot a problem. The diagnostic data logs are collected, only if we have permission to collect optional diagnostic data, and only if the device meets the criteria for additional data collection. If you disable or do not configure this policy setting, we may occasionally collect advanced diagnostic data if the user has opted to send optional diagnostic data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#limitdiagnosticlogcollection"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_limitdiagnosticlogcollection_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_limitdiagnosticlogcollection_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"a11387fb11cf1a97":{"id":"device_vendor_msft_policy_config_update_automaticmaintenancewakeup","displayName":"Automatic Maintenance Wake Up","description":"This policy setting allows you to configure Automatic Maintenance wake up policy. The maintenance wakeup policy specifies if Automatic Maintenance should make a wake request to the OS for the daily scheduled maintenance. Note, that if the OS power wake policy is explicitly disabled, then this setting has no effect. If you enable this policy setting, Automatic Maintenance will attempt to set OS wake policy and make a wake request for the daily scheduled time, if required. If you disable or do not configure this policy setting, the wake setting as specified in Security and Maintenance/Automatic Maintenance Control Panel will apply.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#automaticmaintenancewakeup"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_automaticmaintenancewakeup_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_automaticmaintenancewakeup_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"a1a38f79219eba54":{"id":"device_vendor_msft_policy_config_update_pausequalityupdates","displayName":"Pause Quality Updates","description":"Allows IT Admins to pause Quality Updates.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausequalityupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_pausequalityupdates_0","displayName":"Quality Updates are not paused.","description":"Quality Updates are not paused.","helpText":null},{"id":"device_vendor_msft_policy_config_update_pausequalityupdates_1","displayName":"Quality Updates are paused for 35 days or until value set back to 0, whichever is sooner.","description":"Quality Updates are paused for 35 days or until value set back to 0, whichever is sooner.","helpText":null}]},"a10e28a29889fd82":{"id":"device_vendor_msft_policy_config_webthreatdefense_notifypasswordreuse","displayName":"Notify Password Reuse","description":"Configures Enhanced Phishing Protection notifications for protecting passwords from reuse.","helpText":"","infoUrls":[],"categoryId":"20b71dc7-cf08-4534-9e52-d297dd071ca5","categoryName":"Enhanced Phishing Protection","options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_notifypasswordreuse_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifypasswordreuse_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"a15d6f07cd4a4389":{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging","displayName":"Log script block invocation start / stop events:","description":"","helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging_1","displayName":"True","description":null,"helpText":null}]},"a1d370d8d714c5a5":{"id":"linux_mdatp_managed_edr_tags","displayName":"Device tags","description":null,"helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#add-tag-or-group-id-to-the-configuration-profile"],"categoryId":"22a2a407-0f28-481d-bdbe-1f9cb6d589c3","categoryName":" EDR preferences","options":null},"a1e7762c1a46994f":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_descriptioncolon25","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"a122af4975301059":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders58","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders58_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders58_1","displayName":"True","description":null,"helpText":null}]},"a15431203d52c1c4":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nocolorappearanceui","displayName":"Prevent changing color and appearance (User)","description":"Disables the Color (or Window Color) page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on systems where the Personalization feature is not available.\r\n\r\nThis setting prevents users from using Control Panel to change the window border and taskbar color (on Windows 8), glass color (on Windows Vista and Windows 7), system colors, or color scheme of the desktop and windows.\r\n\r\nIf this setting is disabled or not configured, the Color (or Window Color) page or Color Scheme dialog is available in the Personalization or Display Control Panel.\r\n\r\nFor systems prior to Windows Vista, this setting hides the Appearance and Themes tabs in the in Display in Control Panel.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nocolorappearanceui"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nocolorappearanceui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nocolorappearanceui_1","displayName":"Enabled","description":null,"helpText":null}]},"a16c9fcea64b5da3":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepincontacts","displayName":"Contacts (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepincontacts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepincontacts_1","displayName":"True","description":null,"helpText":null}]},"a144919816cc7357":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1","displayName":"Reminder balloon frequency (User)","description":"Determines how often reminder balloon updates appear.\r\n\r\nIf you enable this setting, you can select how often reminder balloons updates appear and also prevent users from changing this setting.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the update interval.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To set reminder balloon frequency without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the \"Display reminder balloons every ... minutes\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-reminderfreq-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1_1","displayName":"Enabled","description":null,"helpText":null}]},"a1fc307c89d2fbdc":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnopinnedlist","displayName":"Remove pinned programs from the Taskbar (User)","description":"This policy setting allows you to remove pinned programs from the taskbar.\r\n\r\nIf you enable this policy setting, pinned programs are prevented from being shown on the Taskbar. Users cannot pin programs to the Taskbar.\r\n\r\nIf you disable or do not configure this policy setting, users can pin programs so that the program shortcuts stay on the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnopinnedlist"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnopinnedlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnopinnedlist_1","displayName":"Enabled","description":null,"helpText":null}]},"a12daaad2bec2231":{"id":"user_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist","displayName":"Allow Microsoft Compatibility List (User)","description":"This policy setting lets you decide whether the Microsoft Compatibility List is enabled or disabled in Microsoft Edge. This feature uses a Microsoft-provided list to ensure that any sites with known compatibility issues are displayed correctly when a user navigates to them. By default, the Microsoft Compatibility List is enabled and can be viewed by navigating to about:compat. If you enable or don’t configure this setting, Microsoft Edge will periodically download the latest version of the list from Microsoft and will apply the configurations specified there during browser navigation. If a user visits a site on the Microsoft Compatibility List, he or she will be prompted to open the site in Internet Explorer 11. Once in Internet Explorer, the site will automatically be rendered as if the user is viewing it in the previous version of Internet Explorer it requires to display correctly. If you disable this setting, the Microsoft Compatibility List will not be used during browser navigation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowmicrosoftcompatibilitylist"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"a10f6eb8a3ec0d42":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action on startup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open New Tab Page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"a10cb670a0b04ce7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls","displayName":"Block notifications on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't display notifications.\r\n\r\nLeaving the policy unset means DefaultNotificationsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"a120a7749577fa1e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_descriptioncolon75","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"a15bf8ffc1c89331":{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate","displayName":"Trusted Sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_4","displayName":"High","description":null,"helpText":null}]},"a101767617d737d3":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols","displayName":"Download unsigned ActiveX controls (User)","description":"This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.\n\nIf you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.\n\nIf you disable this policy setting, users cannot run unsigned controls.\n\nIf you do not configure this policy setting, users cannot run unsigned controls.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedownloadunsignedactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"a17abc3e3f9264f2":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"a12165a19e2f6ef0":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (User)","description":"In Microsoft Edge, the Experimentation and Configuration Service is used to deploy Experimentation and Configuration payload.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nConfiguration payload consists of a list of settings that Microsoft wants to deploy to Microsoft Edge to optimize user experience. For example, configuration payload may specify how often Microsoft Edge sends requests to the Experimentation and Configuration Service to retrieve the newest payload.\r\n\r\nAdditionaly, configuration payload may also contain a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken due to the new User Agent string on Microsoft Edge. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nIf you set this policy to \"Retrieve configurations and experiments\" mode, the full payload is downloaded from the Experimentation and Configuration Service. This includes both the experimentation and configuration payloads.\r\n\r\nIf you set this policy to \"Retrieve configurations only\" mode, only the configuration payload is delivered.\r\n\r\nIf you set this policy to \"Disable communication with the Experimentation and Configuration Service\" mode, the communication with the Experimentation and Configuration Service is stopped completely.\r\n\r\nIf you don't configure this policy, on a managed device on Stable and Beta channels the behavior is the same as the \"Retrieve configurations only\" mode.\r\n\r\nIf you don't configure this policy, on an unmanaged device the behavior is the same as the \"Retrieve configurations and experiments\" mode.\r\n\r\n* 0 = Disable communication with the Experimentation and Configuration Service\r\n\r\n* 1 = Retrieve configurations only\r\n\r\n* 2 = Retrieve configurations and experiments","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"a1fc2f7fb1f28b8e":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting","displayName":"Configure browser process code integrity guard setting (User)","description":"This policy controls the use of code integrity guard in the browser process, which only allows Microsoft signed binaries to load.\r\n\r\nSetting this policy to Enabled will enable code integrity guard in the browser process.\r\n\r\nSetting this policy to Disabled, or if the policy is not set, will prevent the browser from enabling code integrity guard in the browser process.\r\n\r\nThe policy value Audit (1) is obsolete as of version 110. Setting this value is equivalent to the Disabled value.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances that enrolled for device management.\r\n\r\nThis policy will only take effect on Windows 10 RS2 and above.\r\n\r\nPolicy options mapping:\r\n\r\n* Disabled (0) = Do not enable code integrity guard in the browser process.\r\n\r\n* Audit (1) = Enable code integrity guard audit mode in the browser process.\r\n\r\n* Enabled (2) = Enable code integrity guard enforcement in the browser process.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_1","displayName":"Enabled","description":null,"helpText":null}]},"a1e0f5c26615718b":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended","displayName":"Suggest similar pages when a webpage can’t be found (User)","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\r\n\r\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\r\n\r\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Suggest similar pages when a webpage can’t be found** toggle, which the user can switch on or off. Note that if you have enable this policy (AlternateErrorPagesEnabled), the Suggest similar pages when a webpage can’t be found setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the Suggest similar pages when a webpage can’t be found setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a15ae8d69ae4b55c":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled","displayName":"Enable startup boost (User)","description":"Allows Microsoft Edge processes to start at OS sign-in and restart in background after the last browser window is closed.\r\n\r\nIf Microsoft Edge is running in background mode, the browser might not close when the last window is closed and the browser won't be restarted in background when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about what happens after configuring Microsoft Edge background mode behavior.\r\n\r\nIf you enable this policy, startup boost is turned on.\r\n\r\nIf you disable this policy, startup boost is turned off.\r\n\r\nIf you don't configure this policy, startup boost may initially be off or on. The user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about startup boost: https://go.microsoft.com/fwlink/?linkid=2147018","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a1db15eec03ef037":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitAllowedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT enabled, but fabrikam.com will use the policy from 'DefaultJavaScriptJitSetting' (Control use of JavaScript JIT), if set, or default to JavaScript JIT enabled.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptJitSetting' applies to the site, if set, otherwise Javascript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"a13396e0a181b5e0":{"id":"user_vendor_msft_policy_config_office16v16~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatieuser","displayName":"Disable local training of the Adaptive Floatie feature for the user. (User)","description":"\r\nThis policy setting disables local training of the Adaptive Floatie feature for the user.\r\n\r\nFor local training policy, feature-specific settings are prioritized over general settings and computer settings are prioritized over user settings.\r\n\r\nIf a higher priority policy setting is not configured, then:\r\n- If this policy setting is enabled, local training of the Adaptive Floatie feature is disabled for the user.\r\n- If this policy setting is disabled, local training of the Adaptive Floatie feature is enabled for the user.\r\n- If this policy setting is not configured, local training of the Adaptive Floatie feature is determined by lower priority policy settings.\r\n- If this policy setting is not configured and lower priority policy settings are also not configured, local training of the Adaptive Floatie feature is enabled for the user.\r\n\r\nFor this policy setting, the order of priority is:\r\n1. Disable local training of the Adaptive Floatie feature for the computer.\r\n2. Disable local training of all features for the computer.\r\n3. Disable local training of the Adaptive Floatie feature for the user.\r\n4. Disable local training of all features for the user.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v16~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatieuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v16~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatieuser_1","displayName":"Enabled","description":null,"helpText":null}]},"a149edfbfcfb6d30":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize351","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":null},"a13ce039c03455ff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy6","displayName":"Places Bar Location 6 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy6_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy6_1","displayName":"Enabled","description":null,"helpText":null}]},"a1d4869afbe00713":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishecuador","displayName":"Spanish (Ecuador) (User)","description":"Enables the editing language Spanish (Ecuador)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishecuador_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishecuador_1","displayName":"Enabled","description":null,"helpText":null}]},"a13b286fd60fdfda":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_l_workflowfriendly","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"a1c0d9825c58e500":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc04","displayName":"Unsafe Location #4 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc04_1","displayName":"Enabled","description":null,"helpText":null}]},"a13bb38cf8a388c9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc06_l_allowsubfolders06","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc06_l_allowsubfolders06_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc06_l_allowsubfolders06_1","displayName":"True","description":null,"helpText":null}]},"a1b95b4bfeddc434":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsword","displayName":"Word-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsword_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsword_1","displayName":"True","description":null,"helpText":null}]},"a1337affbe74ffd7":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_allowedcomaddins_l_allowedcomaddinslist","displayName":"Allowed COM/VSTO Add-ins: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"a1e76d9610103f6b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_l_turnoffinternetexplorersecuritychecks","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_l_turnoffinternetexplorersecuritychecks_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_l_turnoffinternetexplorersecuritychecks_1","displayName":"True","description":null,"helpText":null}]},"a1b7656115cc018e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscriptsforpublicfolders","displayName":"Do not allow Outlook object model scripts to run for public folders (User) (Deprecated)","description":"This policy setting controls whether Outlook executes scripts that are associated with custom forms or folder home pages for public folders.\r\n\r\nIf you enable this policy setting, Outlook cannot execute any scripts associated with public folders, overriding any configuration changes on users' computers. \r\n\r\nIf you disable this policy setting, Outlook will automatically run any scripts associated with custom forms or folder home pages for public folders, overriding any configuration changes on users' computers. \r\n\r\nIf you do not configure this policy setting, Outlook will not run any scripts associated with public folders by default. Users can configure the setting in the Trust Center by selecting the “Allow script in public folders” check box.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscriptsforpublicfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscriptsforpublicfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"a1c53d3ae90467f5":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15","displayName":"Followed hyperlink color (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3db7e884-6077-4b96-ace3-005a6b49ecc0","categoryName":"Hyperlink appearance in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_16","displayName":"Automatic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_1","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_2","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_3","displayName":"Lime","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_4","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_5","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_6","displayName":"Fuchsia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_7","displayName":"White","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_8","displayName":"Maroon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_9","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_10","displayName":"Olive","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_11","displayName":"Navy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_12","displayName":"Purple","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_13","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_14","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjfollowedlinkcolour_l_pjfollowedlinkcolour15_15","displayName":"Silver","description":null,"helpText":null}]},"a17e73eb44aa073b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave_l_pjfiletype_l_pjfiletype30","displayName":"Save Microsoft Project files as (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6ad0e199-ff50-4e86-b22f-b55ef4ff2329","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave_l_pjfiletype_l_pjfiletype30_msproject.mpp.12","displayName":"Project (*.mpp)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave_l_pjfiletype_l_pjfiletype30_msproject.mpt.12","displayName":"Template (*.mpt)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave_l_pjfiletype_l_pjfiletype30_msproject.mpp.9","displayName":"Project 2000-2003 (*.mpp)","description":null,"helpText":null}]},"a141c3130d183109":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjusttableformattingandalignmentonpaste","displayName":"Adjust table formatting and alignment on paste (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e63361ad-a54b-4557-acc7-02c272a3e58d","categoryName":"Smart cut and paste","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjusttableformattingandalignmentonpaste_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_adjusttableformattingandalignmentonpaste_1","displayName":"Enabled","description":null,"helpText":null}]},"a1df9041a0ebf20c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders87","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders87_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders87_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/a2.json b/public/intune-definitions/a2.json new file mode 100644 index 000000000000..945a0aa292b6 --- /dev/null +++ b/public/intune-definitions/a2.json @@ -0,0 +1 @@ +{"a2af011318eae547":{"id":"com.android.devicerestrictionpolicy.preferentialnetworkservice","displayName":"Allow selection of a preferential network service","description":"If 'True', the device will give priority to the specified network service over other available options (e.g., enterprise slice on 5G networks). If 'False', Intune doesn't change or update this setting. By default, the device connects using its default network selection process. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.preferentialnetworkservice_false","displayName":"False","description":"Preferential network service is disabled.","helpText":null},{"id":"com.android.devicerestrictionpolicy.preferentialnetworkservice_true","displayName":"True","description":"Preferential network service is enabled on the device.","helpText":null}]},"a237003e5db2329a":{"id":"com.android.devicerestrictionpolicy.wifiblockeditconfigurationsaosp","displayName":"Block Wi-Fi setting changes","description":"If 'True', prevents users from creating or changing any Wi-Fi configurations. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to change the Wi-Fi settings on the device.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.wifiblockeditconfigurationsaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.wifiblockeditconfigurationsaosp_true","displayName":"True","description":"True","helpText":null}]},"a242d1db394b52f1":{"id":"com.apple.cellularprivatenetwork.managed_com.apple.cellularprivatenetwork.managed","displayName":"com.apple.cellularprivatenetwork.managed","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"a22aa39e7903d676":{"id":"com.apple.extensiblesso_platformsso_useshareddevicekeys","displayName":"Use Shared Device Keys","description":"If set to true, Platform SSO will use the same signing and encryption keys for all users.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_useshareddevicekeys_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_useshareddevicekeys_true","displayName":"Enabled","description":null,"helpText":null}]},"a22df545a5ba5bb7":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_application id","displayName":"Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"a2e0beb5dda09fa7":{"id":"com.apple.managedclient.preferences_defaultjavascriptsetting","displayName":"Default JavaScript setting","description":"Set whether websites can run JavaScript. You can allow it for all sites (1) or block it for all sites (2).\n\nIf you don't configure this policy, all sites can run JavaScript by default, and the user can change this setting.\n\n* 1 = Allow all sites to run JavaScript\n\n* 2 = Don't allow any site to run JavaScript","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultjavascriptsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultjavascriptsetting_0","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultjavascriptsetting_1","displayName":"Don't allow any site to run JavaScript","description":null,"helpText":null}]},"a22f3ce083383e7f":{"id":"com.apple.managedclient.preferences_importopentabs","displayName":"Allow importing of open tabs","description":"Allows users to import open and pinned tabs from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, open tabs aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.\n\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importopentabs"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importopentabs_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importopentabs_true","displayName":"Enabled","description":null,"helpText":null}]},"a2fca6d1105f16cb":{"id":"com.apple.managedclient.preferences_searchfiltersenabled","displayName":"Search Filters Enabled","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions will be shown.\n\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\n\nIf you disable this policy, the autosuggestion dropdown won't display the ribbon of available filters.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#searchfiltersenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_searchfiltersenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_searchfiltersenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a2989b89c4b1644b":{"id":"com.apple.mcxmenuextras_eject.menu","displayName":"Eject","description":"If true, enables the Eject menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_eject.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_eject.menu_true","displayName":"True","description":null,"helpText":null}]},"a25caec4d6bbe701":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled","displayName":"Enable AutoFill for addresses","description":"Enables the AutoFill feature and allows users to autocomplete address information in web forms through previously stored information.\n\nIf you have enabled or not configured this policy, users manage AutoFill for addresses in Microsoft Edge settings. AutoFill allows users to complete address fields in web forms using previously saved information.\n\nIf you have disabled this policy, Microsoft Edge doesn't suggest, fill in, or save address information. AutoFill is also disabled for all web forms except payment and password fields, and previously saved addresses aren't available.\n\nIf you disable this policy, then \"EdgeAutofillMlEnabled\" is turned off.\n\nIf you disable this policy, all activities for all web forms are stopped, except payment and password forms. No further entries are saved, and Microsoft Edge doesn't suggest or AutoFill any previous entries.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a2571e1d51fc24e9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionsettings","displayName":"Configure extension management settings","description":"Setting this policy controls extension management settings for Microsoft Edge, including those configured by other extension-related policies. This policy supersedes any legacy policies.\n\nThis policy maps an extension ID or update URL to a specific configuration. You can define a default configuration using the special ID \"*\", which applies to extensions without a custom configuration.\n\nNote that any per-ID extension setting from either \"ExtensionInstallForcelist\", \"ExtensionInstallAllowlist\", \"ExtensionInstallBlocklist\", or \"ExtensionSettings\" will only inherit 'installation_mode' and 'update_url' from the \"*\" defaults. It will not inherit any other properties. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest. If the 'override_update_url' flag is set to true, the extension is installed and updated using the update URL specified in the \"ExtensionInstallForcelist\" policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is the Edge Add-ons website update URL. For more details, check out the detailed guide to ExtensionSettings policy available at https://go.microsoft.com/fwlink/?linkid=2161555.\n\nTo block extensions from a particular third party store, you only need to block the update_url for that store. For example, if you want to block extensions from Chrome Web Store, you can use the following JSON.\n\n{\"update_url:https://clients2.google.com/service/update2/crx\":{\"installation_mode\":\"blocked\"}}\n\nNote that you can still use \"ExtensionInstallForcelist\" and \"ExtensionInstallAllowlist\" to allow / force install specific extensions even if the store is blocked using the JSON in the previous example.\n\nIf the 'sidebar_auto_open_blocked' flag is set to true in an extension's configuration, the hub-app (sidebar app) corresponding to the specified extension will be prevented from automatically opening.\n\nOn Windows instances, apps and extensions from outside the Microsoft Edge Add-ons website can only be forced installed if the instance is joined to a Microsoft Active Directory domain or joined to Microsoft Azure Active Directory®.\n\nOn macOS instances, apps and extensions from outside the Microsoft Edge Add-ons website can only be force installed if the instance is managed via MDM, joined to a domain via MCX.\n\nStarting in Microsoft Edge version 149, the \"Microsoft365CopilotChatIconEnabled\" policy controls the display of Copilot in the toolbar.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"a214e8c781088cf7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled","displayName":"Enable Gamer Mode (Obsolete)","description":"Microsoft Edge Gamer Mode allows gamers to personalize their browser with gaming themes and gives them the option of enabling Efficiency Mode for PC gaming, the Gaming feed on new tabs, sidebar apps for gamers, and more.\n\nIf you enable or don't configure this policy, users can opt into Gamer Mode.\nIf you disable this policy, Gamer Mode is disabled.\nNote: With Microsoft Edge version 141, this policy is obsolete because the Gamer Mode feature is removed.","helpText":null,"infoUrls":[],"categoryId":"81c518f1-522e-4957-b850-e8a66d2ab215","categoryName":"Games settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a2294f356f9cd65b":{"id":"device_vendor_msft_bitlocker_allowstandarduserencryption","displayName":"Allow Standard User Encryption","description":"Allows Admin to enforce \"RequireDeviceEncryption\" policy for scenarios where policy is pushed while current logged on user is non-admin/standard user.\n \"AllowStandardUserEncryption\" policy is tied to \"AllowWarningForOtherDiskEncryption\" policy being set to \"0\", i.e, Silent encryption is enforced.\n If \"AllowWarningForOtherDiskEncryption\" is not set, or is set to \"1\", \"RequireDeviceEncryption\" policy will not try to encrypt drive(s) if a standard user\n is the current logged on user in the system.\n\n The expected values for this policy are: \n\n 1 = \"RequireDeviceEncryption\" policy will try to enable encryption on all fixed drives even if a current logged in user is standard user.\n 0 = This is the default, when the policy is not set. If current logged on user is a standard user, \"RequireDeviceEncryption\" policy\n will not try to enable encryption on any drive.\n\n If you want to disable this policy use the following SyncML:\n 111./Device/Vendor/MSFT/BitLocker/AllowStandardUserEncryptionint0","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"0a1347d2-90c0-407a-baa0-e4859260532a","categoryName":"BitLocker","options":[{"id":"device_vendor_msft_bitlocker_allowstandarduserencryption_0","displayName":"Disabled","description":"This is the default, when the policy is not set. If current logged on user is a standard user, \"RequireDeviceEncryption\" policy will not try to enable encryption on any drive.","helpText":null},{"id":"device_vendor_msft_bitlocker_allowstandarduserencryption_1","displayName":"Enabled","description":"\"RequireDeviceEncryption\" policy will try to enable encryption on all fixed drives even if a current logged in user is standard user.","helpText":null}]},"a2c5a4581ad86c38":{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmusagedropdown_name","displayName":"Configure TPM startup:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmusagedropdown_name_2","displayName":"Allow TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmusagedropdown_name_1","displayName":"Require TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configuretpmusagedropdown_name_0","displayName":"Do not allow TPM","description":null,"helpText":null}]},"a2b3790e33bb40e1":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_primarydnssuffix_dns_primarydnssuffixbox","displayName":"Enter a primary DNS suffix:","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":null},"a2047622bc2eba00":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist","displayName":"Process Mitigation Options","description":null,"helpText":"","infoUrls":[],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":null},"a24dfd60b3e4072e":{"id":"device_vendor_msft_policy_config_admx_nca_friendlyname_friendlyname_control","displayName":"Friendly Name","description":null,"helpText":"","infoUrls":[],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":null},"a2af5d71b06331fa":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointworkspace","displayName":"Microsoft SharePoint Workspace 2010","description":"This policy setting configures the synchronization of user settings for Microsoft SharePoint Workspace 2010.\r\nBy default, the user settings of Microsoft SharePoint Workspace 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Workspace 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Workspace 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Workspace 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010sharepointworkspace"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointworkspace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointworkspace_1","displayName":"Enabled","description":null,"helpText":null}]},"a2435091986bfbb6":{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_enablesoftdisconnect","displayName":"Enable Windows to soft-disconnect a computer from a network","description":"This policy setting determines whether Windows will soft-disconnect a computer from a network.\r\n\r\nIf this policy setting is enabled or not configured, Windows will soft-disconnect a computer from a network when it determines that the computer should no longer be connected to a network.\r\n\r\nIf this policy setting is disabled, Windows will disconnect a computer from a network immediately when it determines that the computer should no longer be connected to a network.\r\n\r\nWhen soft disconnect is enabled:\r\n- When Windows decides that the computer should no longer be connected to a network, it waits for traffic to settle on that network. The existing TCP session will continue uninterrupted.\r\n- Windows then checks the traffic level on the network periodically. If the traffic level is above a certain threshold, no further action is taken. The computer stays connected to the network and continues to use it. For example, if the network connection is currently being used to download files from the Internet, the files will continue to be downloaded using that network connection.\r\n- When the network traffic drops below this threshold, the computer will be disconnected from the network. Apps that keep a network connection active even when they’re not actively using it (for example, email apps) might lose their connection. If this happens, these apps should re-establish their connection over a different network. \r\n\r\nThis policy setting depends on other group policy settings. For example, if 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is disabled, Windows will not disconnect from any networks.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wcm#admx-wcm-wcm-enablesoftdisconnect"],"categoryId":"d4c9d046-a8c0-46f0-bd62-bc4d1614e891","categoryName":"Windows Connection Manager","options":[{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_enablesoftdisconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wcm_wcm_enablesoftdisconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"a2cea7dd75fdd134":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowpackageinstallationroot_streaming_package_installation_root_prompt","displayName":"Package Installation Root","description":"","helpText":"","infoUrls":[],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":null},"a20af9fa98b46f60":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_insecureprivatenetworkrequestsallowedforurlsdesc","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"a2e4e328e38a00d6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended","displayName":"Default search provider name","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderName specifies the default search provider's name.\r\n\r\nLeaving DefaultSearchProviderName unset means the hostname specified by the search URL is used.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a246582111e02186":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled","displayName":"List of types that should be excluded from synchronization","description":"If this policy is set all specified data types will be excluded from synchronization both for Chrome Sync as well as for roaming profile synchronization. This can be beneficial to reduce the size of the roaming profile or limit the type of data uploaded to the Chrome Sync Servers.\r\n\r\nThe current data types for this policy are: \"bookmarks\", \"readingList\", \"preferences\", \"passwords\", \"autofill\", \"themes\", \"typedUrls\", \"extensions\", \"apps\", \"tabs\", \"wifiConfigurations\". Those names are case sensitive!\r\n\r\nExample value:\r\n\r\nbookmarks","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a2ec3d93955b2ece":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode","displayName":"Force YouTube Safety Mode","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode_1","displayName":"Enabled","description":null,"helpText":null}]},"a21989420ed4d9df":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder","displayName":"No Profile Containing Folder","description":"VHD(x) file is placed and used in the root VHDLocation rather than in a SID directory under VHDLocation\r\n\r\nNOTE: This setting will override ANY OTHER setting related to container folders.\r\n\r\n- SIDDIRNameMatch has NO EFFECT when used in conjunction with this setting.\r\n- SIDDIRNamePattern has NO EFFECT when used in conjunction with this setting.\r\n- FlipFlopProfileDirectoryName has NO EFFECT when used in conjunction with this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\NoProfileContainingFolder\r\nType: DWORD\r\nValues: 0 = Disable, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"a22bd945ea382092":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708","displayName":"Enable dragging of content from different domains within a window","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3","displayName":"Disable","description":null,"helpText":null}]},"a2d348b0f3f98a97":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_extensionallowedtypesdesc","displayName":"Types of extensions/apps that are allowed to be installed (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"a27073578f746b44":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist","displayName":"Control which native messaging hosts users can use","description":"List specific native messaging hosts that users can use in Microsoft Edge.\r\n\r\nBy default, all native messaging hosts are allowed. If you set the 'NativeMessagingBlocklist' (Configure native messaging block list) policy to *, all native messaging hosts are blocked, and only native messaging hosts listed in here are loaded.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"a2db63d9248470f4":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled","displayName":"Configure auto discard sleeping tabs","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab will need to be reloaded.\r\n\r\nIf the 'SleepingTabsEnabled' (Configure sleeping tabs) policy is enabled, then this feature will be enabled by default.\r\n\r\nIf the 'SleepingTabsEnabled' is disabled, then this feature will be disabled by default and cannot be enabled.\r\n\r\nIf enabled, idle background tabs will be discarded after 1.5 days.\r\n\r\nIf disabled, idle background tab will not be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a201fe0cdf54b7cf":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\r\n\r\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\r\n\r\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' is not provided, the URL is used as the default title. If 'pinned' is not provided, the default value is false.\r\n\r\nMicrosoft Edge presents these in the order listed, from left to right, with all pinned tiles displayed ahead of non-pinned tiles.\r\n\r\nIf the policy is set as mandatory, the 'pinned' field will be ignored and all tiles will be pinned. The tiles can't be deleted by the user and will always appear at the front of the quick links list.\r\n\r\nIf the policy is set as recommended, pinned tiles will remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying non-pinned links via this policy to an existing browser profile, the links may not appear at all, depending on how they rank compared to the user's browsing history.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"pinned\": true,\r\n \"title\": \"Contoso Portal\",\r\n \"url\": \"https://contoso.com\"\r\n },\r\n {\r\n \"title\": \"Fabrikam\",\r\n \"url\": \"https://fabrikam.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_1","displayName":"Enabled","description":null,"helpText":null}]},"a2bef20df192af63":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled","displayName":"Control use of the Headless Mode","description":"This policy setting lets you decide whether users can launch Microsoft Edge in headless mode.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge allows use of the headless mode.\r\n\r\nIf you disable this policy, Microsoft Edge denies use of the headless mode.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a206a389ce2d0366":{"id":"device_vendor_msft_policy_config_power_enableenergysaver","displayName":"Enable Energy Saver","description":"This policy will extend battery life and reduce energy consumption by enabling Energy Saver to always be on. Energy Saver will always be on for desktops as well as laptops regardless of battery level for both AC and DC. If you disable or don't configure this policy setting, then Energy Saver will turn on based on the EnergySaverBatteryThreshold group policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#enableenergysaver"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_enableenergysaver_0","displayName":"Disable energy saver policy","description":"Disable energy saver policy","helpText":null},{"id":"device_vendor_msft_policy_config_power_enableenergysaver_1","displayName":"Enable energy saver always-on mode.","description":"Enable energy saver always-on mode.","helpText":null}]},"a2b3d751b6464dd2":{"id":"linux_mdatp_managed_antivirusengine_allowedthreats","displayName":"Allowed threats","description":"List of threats (identified by their name) that are not blocked by the product and are instead allowed to run.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#allowed-threats"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"a2d38fd85b4ab726":{"id":"passcode_requirepasscode","displayName":"Require Passcode on Device","description":"Specifies whether the user is forced to set a passcode. Setting this value, without any other keys present, forces the user to enter a passcode, without imposing a length or quality. The presence of any of the other keys implicitly requires a passcode be present on the device, and this key is ignored.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":[{"id":"passcode_requirepasscode_false","displayName":"False","description":null,"helpText":null},{"id":"passcode_requirepasscode_true","displayName":"True","description":null,"helpText":null}]},"a2fc160b6488bd6f":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_descriptioncolon37","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"a281f5760c8767e4":{"id":"user_vendor_msft_policy_config_admx_taskbar_enablelegacyballoonnotifications","displayName":"Disable showing balloon notifications as toasts. (User)","description":"This policy disables the functionality that converts balloons to toast notifications. \r\n\r\nIf you enable this policy setting, system and application notifications will render as balloons instead of toast notifications. \r\n\r\nEnable this policy setting if a specific app or system component that uses balloon notifications has compatibility issues with toast notifications. \r\n\r\nIf you disable or don’t configure this policy setting, all notifications will appear as toast notifications.\r\n\r\nA reboot is required for this policy setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-enablelegacyballoonnotifications"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_enablelegacyballoonnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_enablelegacyballoonnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"a237d990c7442c51":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016","displayName":"Microsoft Office 365 Project 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Project 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Project 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365project2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016_1","displayName":"Enabled","description":null,"helpText":null}]},"a256bcb353e6a983":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_defaultprinterselection","displayName":"Default printer selection rules (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"a201d39a6d2779c7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"a2868b5dd08b3ce6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout","displayName":"Delay before running idle actions (User)","description":"Triggers an action when the computer is idle.\r\n\r\nIf this policy is set, it specifies the length of time without user input (in minutes) before the browser runs actions configured via the IdleTimeoutActions policy.\r\n\r\nIf this policy is not set, no action will be ran.\r\n\r\nThe minimum threshold is 1 minute.\r\n\r\n\"User input\" is defined by Operating System APIs, and includes things like moving the mouse or typing on the keyboard.","helpText":"","infoUrls":[],"categoryId":"8c35f124-e249-43e3-9044-ecc0b0a5855a","categoryName":"Idle Browser Actions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"a202999556bad60a":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration","displayName":"Specifies how long (in seconds) a cast device selected with an access code or QR code stays in the Google Cast menu's list of cast devices. (User)","description":"This policy specifies how long (in seconds) a cast device that was previously selected via an access code or QR code can be seen within the Google Cast menu of cast devices.\r\nThe lifetime of an entry starts at the time the access code was first entered or the QR code was first scanned.\r\nDuring this period the cast device will appear in the Google Cast menu's list of cast devices.\r\nAfter this period, in order to use the cast device again the access code must be reentered or the QR code must be rescanned.\r\nBy default, the period is zero seconds, so cast devices will not stay in the Google Cast menu, and so the access code must be reentered, or the QR code rescanned, in order to initiate a new casting session.\r\nNote that this policy only affects how long a cast devices appears in the Google Cast menu, and has no effect on any ongoing cast session which will continue even if the period expires.\r\nThis policy has no effect unless the AccessCodeCastEnabled policy is Enabled.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_1","displayName":"Enabled","description":null,"helpText":null}]},"a2cc0836427f3455":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_internetandnetworkpathsashyperlinks","displayName":"Internet and network paths as hyperlinks (User)","description":"This policy setting determines whether Excel automatically creates hyperlinks when users enter URL or UNC path information.\r\n \r\nIf you enable this policy setting, when users type a string of characters that Excel recognizes as a Uniform Resource Locator (URL) or Uniform Naming Convention (UNC) path to a resource on the Internet or a local network, Excel will automatically transform it into a hyperlink. Clicking the hyperlink opens it in the configured default Web browser or the appropriate application.\r\n \r\nIf you disable this policy setting, Excel will not transform URLs and UNC paths to hyperlinks.\r\n \r\nIf you do not configure this policy setting, Excel will automatically transform URLs and UNC paths to hyperlinks and users can change the behavior by selecting or deselecting the \"Internet and network paths as hyperlinks\" check box under File tab | Help | Options | Proofing | AutoCorrect Options... | AutoFormat as You Type tab | Replace as you type.","helpText":"","infoUrls":[],"categoryId":"67eb1dab-7805-41bb-af5a-798dc7e29f23","categoryName":"Autocorrect Options","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_internetandnetworkpathsashyperlinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_internetandnetworkpathsashyperlinks_1","displayName":"Enabled","description":null,"helpText":null}]},"a2e0ffc1ea553610":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingformergedcells","displayName":"Stop checking for merged cells (User)","description":"This policy setting allows you to configure whether Accessibility Checker will verify that tables do not have merged cells.\r\n\r\nIf you enable this policy setting, no check will be made.\r\n\r\nIf you disable or do not configure this policy setting, worksheets will be checked for merged cells and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingformergedcells_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingformergedcells_1","displayName":"Enabled","description":null,"helpText":null}]},"a2fa62346a091251":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"a29437d05ad2364a":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"a28f59d2cac28031":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker","displayName":"Use Pop-up Blocker (User)","description":"This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.\n\nIf you enable this policy setting, most unwanted pop-up windows are prevented from appearing.\n\nIf you disable this policy setting, pop-up windows are not prevented from appearing.\n\nIf you do not configure this policy setting, most unwanted pop-up windows are prevented from appearing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneusepopupblocker"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_1","displayName":"Enabled","description":null,"helpText":null}]},"a24cecfb693cdb10":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_urlblocklistdesc","displayName":"Block access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"a2362cb8fac232d6":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings","displayName":"Configure navigation settings per groups of URLs in Microsoft Edge Workspaces (User)","description":"This setting lets you to define groups of URLs, and apply specific Microsoft Edge Workspaces navigation settings to each group.\r\n\r\nIf this policy is configured, Microsoft Edge Workspaces will use the configured settings when deciding whether and how to share navigations among collaborators in a Microsoft Edge Workspace.\r\n\r\nIf this policy is not configured, Microsoft Edge Workspaces will use only default and internally configured navigation settings.\r\n\r\nFor more information about configuration options, see https://go.microsoft.com/fwlink/?linkid=2218655\r\n\r\nNote, format url_patterns according to https://go.microsoft.com/fwlink/?linkid=2095322. You can configure the url_regex_patterns in this policy to match multiple URLs using a Perl style regular expression for the pattern. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"navigation_options\": {\r\n \"do_not_send_to\": true,\r\n \"remove_all_query_parameters\": true\r\n },\r\n \"url_patterns\": [\r\n \"https://contoso.com\",\r\n \"https://www.fabrikam.com\",\r\n \".exact.hostname.com\"\r\n ]\r\n },\r\n {\r\n \"navigation_options\": {\r\n \"query_parameters_to_remove\": [\r\n \"username\",\r\n \"login_hint\"\r\n ]\r\n },\r\n \"url_patterns\": [\r\n \"https://adatum.com\"\r\n ]\r\n },\r\n {\r\n \"navigation_options\": {\r\n \"do_not_send_from\": true,\r\n \"prefer_initial_url\": true\r\n },\r\n \"url_regex_patterns\": [\r\n \"\\\\Ahttps://.*?tafe\\\\..*?trs.*?\\\\.fabrikam.com/Sts\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","categoryName":"Edge Workspaces settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"a267c0ef0208bddf":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~manageability_mamwithdevicedlpenabled","displayName":"Allow MAM enrollment when managed device has Purview DLP policy configured (User)","description":"Controls whether Microsoft Edge allows Mobile Application Management (MAM) enrollment on managed devices when Microsoft Purview Data Loss Prevention (DLP) is configured.\r\n\r\nIf you enable this policy, MAM enrollment is allowed even when Purview DLP is detected on the device.\r\n\r\nIf you disable or don't configure this policy, MAM enrollment is blocked when Purview DLP is detected on the device.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~manageability_mamwithdevicedlpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~manageability_mamwithdevicedlpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a2562c667649d8aa":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_1","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_2","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},"a2b078c69fc00b82":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled","displayName":"Allow using the deprecated U2F Security Key API (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 103.\r\n\r\nThis policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content when it's found to be incompatible with the change to remove the U2F Security Key API. It doesn't work in Microsoft Edge after version 103.\r\n\r\nIf you enable this policy, the deprecated U2F Security Key API can be used and the deprecation reminder prompt shown for U2F API requests is suppressed.\r\n\r\nIf you disable this policy or don't configure it, the U2F Security Key API is disabled by default and can only be used by sites that register for and use the U2FSecurityKeyAPI origin trial which ended after Microsoft Edge version 103.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a2fb5f6f9cea4230":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_evictserverversionspolicy_l_evictserverversionspolicydecimal","displayName":"Number of days (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"a243b6b86717f1d8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_turkish","displayName":"Turkish (User)","description":"Enables the editing language Turkish","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_turkish_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_turkish_1","displayName":"Enabled","description":null,"helpText":null}]},"a2b2d4cc82808de1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_l_workflowcachename483","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"a28a1e16d1d73b9e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_l_workflowfriendly456","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"a2296356b0ae5e18":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey14_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"a2447fb5bc0c573a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc19_l_datecolon311","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"a2d4edefca29b759":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog01_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"a239f9b400ef646a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_enablelogging","displayName":"Turn on telemetry data collection (User)","description":"This policy setting allows you to turn on the data collection features in Office that are used by Office Telemetry Dashboard and Office Telemetry Log.\r\n\r\nIf you enable this policy setting, Office Telemetry Agent and Office applications will collect telemetry data, which includes Office application usage, most recently used Office documents (including file names) and solutions usage, compatibility issues, and critical errors that occur on the local computers. You can use Office Telemetry Dashboard to view this data remotely, and users can use Office Telemetry Log to view this data on their local computers.\r\n\r\nIf you disable or do not configure this policy setting, Office Telemetry Agent and Office applications do not generate or collect telemetry data.","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_enablelogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_enablelogging_1","displayName":"Enabled","description":null,"helpText":null}]},"a2e41ac3af7b1bda":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage","displayName":"Tasks Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Tasks Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"a24c769e46ea88ba":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint","displayName":"Legacy converters for PowerPoint (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save PowerPoint files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforpowerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"a207c136af448f3f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes","displayName":"Minutes (User)","description":"Sets the label for minutes.\r\n\r\nIf you enable this setting, minutes are displayed with the specified label.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_1","displayName":"Enabled","description":null,"helpText":null}]},"a2ce060d505a0455":{"id":"user_vendor_msft_policy_config_start_hidecategoryview","displayName":"Hide Category View (User)","description":"This policy setting allows you to hide the category view in the Start Menu. If you enable this policy setting, the Start Menu will no longer show the category view as an option and will default to grid view.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidecategoryview"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_hidecategoryview_0","displayName":"Category view shown.","description":"Category view shown.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hidecategoryview_1","displayName":"Category view hidden.","description":"Category view hidden.","helpText":null}]},"a245012642664872":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_l_pathcolon32","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"a211bec1d7cdde04":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocuments","displayName":"Turn off trusted documents (User)","description":"This policy setting allows you to turn off the trusted documents feature. The trusted documents feature allows users to always enable active content in documents such as macros, ActiveX controls, data connections, etc. so that they are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.\r\n\r\nIf you enable this policy setting, you will turn off the trusted documents feature. Users will receive a security prompt every time a document containing active content is opened.\r\n\r\nIf you disable or do not configure this policy setting, documents will be trusted when users enable content for a document, and users will not receive a security prompt.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"a2926c405cae6e32":{"id":"vendor_msft_sharedpc_diskleveldeletion","displayName":"Disk Level Deletion","description":"Accounts will start being deleted when available disk space falls below this threshold, given as percent of total disk capacity. Accounts that have been inactive the longest will be deleted first. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/a3.json b/public/intune-definitions/a3.json new file mode 100644 index 000000000000..32179ade1e9e --- /dev/null +++ b/public/intune-definitions/a3.json @@ -0,0 +1 @@ +{"a32fa00f6fc59f41":{"id":"com.apple.applicationaccess_allowmanagedtowriteunmanagedcontacts","displayName":"Allow Managed To Write Unmanaged Contacts","description":"If true, managed apps can write contacts to unmanaged contacts accounts. If Allow Open From Managed To Unmanaged is true, this restriction has no effect. If this restriction is set to true, you must install the payload through MDM. Available in iOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmanagedtowriteunmanagedcontacts_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmanagedtowriteunmanagedcontacts_true","displayName":"True","description":null,"helpText":null}]},"a3527f2638bbb666":{"id":"com.apple.configurationprofile.identification_payloadidentification_authmethod","displayName":"Auth Method","description":"The authorization method. Either the password is supplied in the profile or the user supplies it. ","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":[{"id":"com.apple.configurationprofile.identification_payloadidentification_authmethod_0","displayName":"Password","description":null,"helpText":null},{"id":"com.apple.configurationprofile.identification_payloadidentification_authmethod_1","displayName":"UserEnteredPassword","description":null,"helpText":null}]},"a38cbf74990f4378":{"id":"com.apple.discrecording_burnsupport","displayName":"Burn Support","description":"If off, disables disc burning. If on, allows normal default operation. Setting this key to on doesn't enable disc burn support if it has already been disabled by other mechanisms or preferences. It also must be enabled with the Finder profile. If authenticate, requires authentication.","helpText":null,"infoUrls":[],"categoryId":"87f460f4-8403-419c-bfb4-44dec5edcccb","categoryName":"Media Management Disc Burning","options":[{"id":"com.apple.discrecording_burnsupport_0","displayName":"off","description":null,"helpText":null},{"id":"com.apple.discrecording_burnsupport_1","displayName":"authenticate","description":null,"helpText":null},{"id":"com.apple.discrecording_burnsupport_2","displayName":"on","description":null,"helpText":null}]},"a334eef760ae8136":{"id":"com.apple.extensiblesso_platformsso_enablecreatefirstuserduringsetup","displayName":"Enable Create First User During Setup","description":"If `true`, the device uses Platform SSO to create the first user account on the Mac during `Setup Assistant`.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_enablecreatefirstuserduringsetup_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_enablecreatefirstuserduringsetup_true","displayName":"Enabled","description":null,"helpText":null}]},"a3314ca09571211e":{"id":"com.apple.loginwindow_disablescreenlockimmediate","displayName":"Disable Screen Lock Immediate","description":"If true, disables the immediate Screen Lock functions. Available in macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_disablescreenlockimmediate_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_disablescreenlockimmediate_true","displayName":"True","description":null,"helpText":null}]},"a39a732ac3e6eba4":{"id":"com.apple.loginwindow_hideadminusers","displayName":"Hide Admin Users","description":"If true, hides administrator users when showing a user list.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_hideadminusers_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_hideadminusers_true","displayName":"True","description":null,"helpText":null}]},"a3edc79bb8ce4c9f":{"id":"com.apple.managedclient.preferences_allowfileselectiondialogs","displayName":"Allow file selection dialogs","description":"Allow access to local files by letting Microsoft Edge display file selection dialogs.\n\nIf you enable or don't configure this policy, users can open file selection dialogs as normal.\n\nIf you disable this policy, whenever the user performs an action that triggers a file selection dialog (like importing favorites, uploading files, or saving links), a message is displayed instead, and the user is assumed to have clicked Cancel on the file selection dialog.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowfileselectiondialogs"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_allowfileselectiondialogs_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowfileselectiondialogs_true","displayName":"Allowed","description":null,"helpText":null}]},"a33e07a94d2619cf":{"id":"com.apple.managedclient.preferences_dailyconfiguration_interval","displayName":"Start time","description":"Specify how many hours should elapse before the next hourly quick scan. 0 indicates no hourly quick scan. 1 indicates a scan every hour. 24 indicates a scan once a day.","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":null},"a3483f1fbb362de2":{"id":"com.apple.managedclient.preferences_kfmoptinwithwizard","displayName":"Prompt users to enable the Folder Backup feature (Known Folder Move)","description":"This setting displays a wizard that prompts users to move their Documents and Desktop folders to OneDrive. Enter your Microsoft 365 tenant ID to enable this feature.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#kfmoptinwithwizard"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":null},"a312dd73d08a7058":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes","displayName":"Configure allowed extension types","description":"Setting the policy controls which apps and extensions can be installed in Microsoft Edge, which hosts they can interact with, and limits runtime access.\n\nIf you don't set this policy, there aren't any restrictions on acceptable extension and app types.\n\nExtensions and apps, which have a type that's not on the list can't be installed. Each value should be one of these strings:\n\n* \"extension\"\n\n* \"theme\"\n\n* \"user_script\"\n\n* \"hosted_app\"\n\nSee the Microsoft Edge extensions documentation for more information about these types.\n\nNote: This policy also affects extensions and apps to be force-installed using \"ExtensionInstallForcelist\".\n\nStarting in Microsoft Edge version 149, the \"Microsoft365CopilotChatIconEnabled\" policy controls the display of Copilot in the toolbar.\n\nPolicy options mapping:\n\n* extension (extension) = Extension\n\n* theme (theme) = Theme\n\n* user_script (user_script) = User script\n\n* hosted_app (hosted_app) = Hosted app\n\n* legacy_packaged_app (legacy_packaged_app) = Legacy packaged app\n\n* platform_app (platform_app) = Platform app\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_extension","displayName":"Extension","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_theme","displayName":"Theme","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_user_script","displayName":"User script","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_hosted_app","displayName":"Hosted app","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_legacy_packaged_app","displayName":"Legacy packaged app","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_platform_app","displayName":"Platform app","description":null,"helpText":null}]},"a3554b7ca89e4b89":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printrasterizationmode","displayName":"Print Rasterization Mode","description":"Controls how Microsoft Edge prints on Windows. When printing to a non-PostScript printer on Windows, some print jobs need to be rasterized to print correctly.\n\nIf you set this policy to 'Full' or don't configure it, Microsoft Edge performs full page rasterization if necessary.\n\nIf you set this policy to 'Fast', Microsoft Edge reduces the amount of rasterization, which can decrease print job sizes and increase printing speed.\n\nPolicy options mapping:\n\n* Full (0) = Full page rasterization\n\n* Fast (1) = Avoid rasterization if possible\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printrasterizationmode_full","displayName":"Full page rasterization","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printrasterizationmode_fast","displayName":"Avoid rasterization if possible","description":null,"helpText":null}]},"a314a52eb67667ef":{"id":"com.microsoft.edge.mamedgeappconfigsettings.syncdisabled_recommended","displayName":"Disable synchronization of data using Microsoft sync services (users can override)","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\n\nThis policy disables cloud synchronization only and has no impact on the \"RoamingProfileSupportEnabled\" policy.\n\nIf you don't set this policy or apply it as recommended, users can turn on or turn off sync. If you apply this policy as mandatory, users won't be able to turn on sync.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.syncdisabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.syncdisabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"a327b7798ec85af2":{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_deletionpolicy","displayName":"Deletion Policy","description":"Configures when profiles will be deleted. Allowed values: 0 (delete immediately upon device returning to a state with no currently active users); 1 (delete at storage capacity threshold); 2 (delete at both storage capacity threshold and profile inactivity threshold).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/AccountManagement-csp/"],"categoryId":"3b384fc5-5906-4dc4-bc48-a52b52fb054b","categoryName":"Account Management","options":[{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_deletionpolicy_0","displayName":"Delete immediately upon device returning to a state with no currently active users)","description":"Delete immediately upon device returning to a state with no currently active users)","helpText":null},{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_deletionpolicy_1","displayName":"Delete at storage capacity threshold","description":"Delete at storage capacity threshold","helpText":null},{"id":"device_vendor_msft_accountmanagement_userprofilemanagement_deletionpolicy_2","displayName":"Delete at both storage capacity threshold and profile inactivity threshold","description":"Delete at both storage capacity threshold and profile inactivity threshold","helpText":null}]},"a3ca05082bddc641":{"id":"device_vendor_msft_defender_configuration_aiagentprotection","displayName":"Ai Agent Protection","description":"This setting controls Defender's runtime AI Agent protection that scans prompts submitted to managed AI coding agents (e.g., Claude Code, GitHub Copilot CLI). When enabled, Defender invokes a bridge process from the agent's hook framework to scan each prompt for malware/abuse signals before the agent executes it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_aiagentprotection_0","displayName":"AI Agent protection is disabled (default).","description":"AI Agent protection is disabled (default).","helpText":null},{"id":"device_vendor_msft_defender_configuration_aiagentprotection_1","displayName":"AI Agent protection is enabled in block mode - prompts that match a detection are blocked.","description":"AI Agent protection is enabled in block mode - prompts that match a detection are blocked.","helpText":null},{"id":"device_vendor_msft_defender_configuration_aiagentprotection_2","displayName":"AI Agent protection is enabled in audit mode - prompts that match a detection are logged but not blocked.","description":"AI Agent protection is enabled in audit mode - prompts that match a detection are logged but not blocked.","helpText":null}]},"a3263b7fba1d1a02":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxcontentage_bits_maxcontentagelist","displayName":"Number of days:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"a32943285716b6d3":{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslciphersuiteorder","displayName":"SSL Cipher Suite Order","description":"This policy setting determines the cipher suites used by the Secure Socket Layer (SSL).\r\n\r\nIf you enable this policy setting, SSL cipher suites are prioritized in the order specified.\r\n\r\nIf you disable or do not configure this policy setting, default cipher suite order is used.\r\n\r\nLink for all the cipherSuites: http://go.microsoft.com/fwlink/?LinkId=517265\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder#admx-ciphersuiteorder-sslciphersuiteorder"],"categoryId":"86f46ebc-a93f-4a2b-b6e7-bab2ac95a3ae","categoryName":"SSL Configuration Settings","options":[{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslciphersuiteorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslciphersuiteorder_1","displayName":"Enabled","description":null,"helpText":null}]},"a37257e268081edb":{"id":"device_vendor_msft_policy_config_admx_help_helpqualifiedrootdir_comp_helpqualifiedrootdir_edit","displayName":"Enter folder names separated by semi-colons:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"a39dd68ee141ccc5":{"id":"device_vendor_msft_policy_config_admx_nca_customcommands","displayName":"Custom Commands","description":"Specifies commands configured by the administrator for custom logging. These commands will run in addition to default log commands.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-customcommands"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_customcommands_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_customcommands_1","displayName":"Enabled","description":null,"helpText":null}]},"a3b20a4b6834c499":{"id":"device_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first","displayName":"Run Windows PowerShell scripts first at user logon, logoff","description":"This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during user logon and logoff. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. \r\n \r\nIf you enable this policy setting, within each applicable Group Policy Object (GPO), PowerShell scripts are run before non-PowerShell scripts during user logon and logoff. \r\n\r\nFor example, assume the following scenario: \r\n\r\nThere are three GPOs (GPO A, GPO B, and GPO C). This policy setting is enabled in GPO A. \r\n\r\nGPO B and GPO C include the following user logon scripts:\r\n\r\nGPO B: B.cmd, B.ps1\r\nGPO C: C.cmd, C.ps1\r\n\r\nAssume also that there are two users, Qin Hong and Tamara Johnston. \r\nFor Qin, GPOs A, B, and C are applied. Therefore, the scripts for GPOs B and C run in the following order for Qin:\r\n\r\nWithin GPO B: B.ps1, B.cmd\r\nWithin GPO C: C.ps1, C.cmd\r\n \r\nFor Tamara, GPOs B and C are applied, but not GPO A. Therefore, the scripts for GPOs B and C run in the following order for Tamara:\r\n\r\nWithin GPO B: B.cmd, B.ps1\r\nWithin GPO C: C.cmd, C.ps1\r\n\r\nNote: This policy setting determines the order in which user logon and logoff scripts are run within all applicable GPOs. You can override this policy setting for specific script types within a specific GPO by configuring the following policy settings for the GPO:\r\n \r\nUser Configuration\\Policies\\Windows Settings\\Scripts (Logon/Logoff)\\Logon\r\nUser Configuration\\Policies\\Windows Settings\\Scripts (Logon/Logoff)\\Logoff\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the setting set in User Configuration.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-user-ps-scripts-first"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first_1","displayName":"Enabled","description":null,"helpText":null}]},"a3ff3662e360c91a":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2","displayName":"Turn off password security in Input Panel","description":"Adjusts password security settings in Touch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista). These settings include using the on-screen keyboard by default, preventing users from switching to another Input Panel skin (the writing pad or character pad), and not showing what keys are tapped when entering a password.\r\n\r\nTouch Keyboard and Handwriting panel enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy and choose “Low” from the drop-down box, password security is set to “Low.” At this setting, all password security settings are turned off. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose “Medium-Low” from the drop-down box, password security is set to “Medium-Low.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel displays the cursor and which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose “Medium” from the drop-down box, password security is set to “Medium.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is not allowed, and Input Panel displays the cursor and which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose to “Medium-High” from the drop-down box, password security is set to “Medium-High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you enable this policy and choose “High” from the drop-down box, password security is set to “High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is not allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you disable this policy, password security is set to “Medium-High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n \r\nIf you do not configure this policy, password security is set to “Medium-High” by default. At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will be able to configure this setting on the Advanced tab in Input Panel Options in Windows 7 and Windows Vista.\r\n\r\nCaution: If you lower password security settings, people who can see the user’s screen might be able to see their passwords.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-passwordsecurity-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_1","displayName":"Enabled","description":null,"helpText":null}]},"a3a1551c97aea885":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2013","displayName":"Microsoft Office 365 Word 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Word 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Word 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365word2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2013_1","displayName":"Enabled","description":null,"helpText":null}]},"a3834aac9ce65e47":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad","displayName":"WordPad","description":"This policy setting configures the synchronization of user settings of WordPad.\r\nBy default, the user settings of WordPad synchronize between computers. Use the policy setting to prevent the user settings of WordPad from synchronization between computers. \r\nIf you enable this policy setting, the WordPad user settings continue to synchronize. \r\nIf you disable this policy setting, WordPad user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-wordpad"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad_1","displayName":"Enabled","description":null,"helpText":null}]},"a3a79ec37ca15da8":{"id":"device_vendor_msft_policy_config_admx_workfoldersclient_pol_machineenableworkfolders","displayName":"Force automatic setup for all users","description":"This policy setting specifies whether Work Folders should be set up automatically for all users of the affected computer.\r\n \r\nIf you enable this policy setting, Work Folders will be set up automatically for all users of the affected computer. This prevents users from choosing not to use Work Folders on the computer; it also prevents them from manually specifying the local folder in which Work Folders stores files. Work Folders will use the settings specified in the \"Specify Work Folders settings\" policy setting in User Configuration\\Administrative Templates\\Windows Components\\WorkFolders. If the \"Specify Work Folders settings\" policy setting does not apply to a user, Work Folders is not automatically set up.\r\n \r\nIf you disable or do not configure this policy setting, Work Folders uses the \"Force automatic setup\" option of the \"Specify Work Folders settings\" policy setting to determine whether to automatically set up Work Folders for a given user.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-workfoldersclient#admx-workfoldersclient-pol-machineenableworkfolders"],"categoryId":"87667b72-85ce-48c2-8023-e6db7f5fe739","categoryName":"Work Folders","options":[{"id":"device_vendor_msft_policy_config_admx_workfoldersclient_pol_machineenableworkfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_workfoldersclient_pol_machineenableworkfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"a3059498e0fe03d0":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_user_refresh_interval_prompt","displayName":"User Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"a3b7eb6137c989ca":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditnetworkpolicyserver","displayName":"Account Logon Logoff Audit Network Policy Server","description":"This policy setting allows you to audit events generated by RADIUS (IAS) and Network Access Protection (NAP) user access requests. These requests can be Grant, Deny, Discard, Quarantine, Lock, and Unlock. If you configure this policy setting, an audit event is generated for each IAS and NAP user access request. Success audits record successful user access requests and Failure audits record unsuccessful attempts. If you do not configure this policy settings, IAS and NAP user access requests are not audited.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditnetworkpolicyserver"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditnetworkpolicyserver_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditnetworkpolicyserver_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditnetworkpolicyserver_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditnetworkpolicyserver_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"a3e70ce64b65de80":{"id":"device_vendor_msft_policy_config_authentication_enablefastfirstsignin","displayName":"Enable Fast First Sign In","description":"Specifies whether new non-admin AAD accounts should auto-connect to pre-created candidate local accounts","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#enablefastfirstsignin"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":[{"id":"device_vendor_msft_policy_config_authentication_enablefastfirstsignin_0","displayName":"The feature defaults to the existing SKU and device capabilities.","description":"The feature defaults to the existing SKU and device capabilities.","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_enablefastfirstsignin_1","displayName":"Enabled. Auto-connect new non-admin Azure AD accounts to pre-configured candidate local accounts","description":"Enabled. Auto-connect new non-admin Azure AD accounts to pre-configured candidate local accounts","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_enablefastfirstsignin_2","displayName":"Disabled. Do not auto-connect new non-admin Azure AD accounts to pre-configured local accounts","description":"Disabled. Do not auto-connect new non-admin Azure AD accounts to pre-configured local accounts","helpText":null}]},"a3f8b896160ecf9c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls","displayName":"Block cookies on these sites","description":"Setting the policy lets you make a list of URL patterns that specify sites that can't set cookies.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nWhile no specific policy takes precedence, see CookiesAllowedForUrls and CookiesSessionOnlyForUrls. URL patterns among these 3 policies must not conflict.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"a35c615ee74d392e":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_enterpriselogourl","displayName":"Enterprise Logo URL for a managed profile (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"a3e5df64ea3385a3":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings","displayName":"Change Memory Saver Mode Savings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_0","displayName":"Moderate memory savings.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_1","displayName":"Balanced memory savings.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_2","displayName":"Maximum memory savings.","description":null,"helpText":null}]},"a331d0e921d7b90b":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth","displayName":"Set Business Hours to Limit Background Download Bandwidth","description":"Specifies the maximum background download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deliveryoptimization#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_1","displayName":"Enabled","description":null,"helpText":null}]},"a36e80d431dde88c":{"id":"device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay","displayName":"Prevent display of the user interface for critical errors","description":"This policy setting prevents the display of the user interface for critical errors.\n\nIf you enable or do not configure this policy setting, Windows Error Reporting does not display any GUI-based error messages or dialog boxes for critical errors.\n\nIf you disable this policy setting, Windows Error Reporting displays the GUI-based error messages or dialog boxes for critical errors.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-preventcriticalerrordisplay"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay_1","displayName":"Enabled","description":null,"helpText":null}]},"a3a37a5282886411":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins","displayName":"Enable site isolation for specific origins","description":"Specify origins to run in isolation, in their own process.\r\nThis policy also isolates origins named by subdomains - for example, specifying https://contoso.com/ will cause https://foo.contoso.com/ to be isolated as part of the https://contoso.com/ site.\r\nIf the policy is enabled, each of the named origins in a comma-separated list will run in its own process.\r\nIf you disable this policy, then both the 'IsolateOrigins' and 'SitePerProcess' features are disabled. Users can still enable 'IsolateOrigins' policy manually, via command line flags.\r\nIf you don't configure the policy, the user can change this setting.\r\n\r\nExample value: https://contoso.com/,https://fabrikam.com/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"a314574e546c0609":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing","description":"If you set this policy to 3, websites can ask for write access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\r\n\r\nIf you don't set this policy, websites can ask for access. Users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockFileSystemWrite (2) = Don't allow any site to request write access to files and directories\r\n\r\n* AskFileSystemWrite (3) = Allow sites to ask the user to grant write access to files and directories\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"a340034ebe77156c":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_outlookexe22","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_outlookexe22_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_outlookexe22_1","displayName":"True","description":null,"helpText":null}]},"a3646db9b058b0c1":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_exprwdexe136","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_exprwdexe136_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_exprwdexe136_1","displayName":"True","description":null,"helpText":null}]},"a3e9971e5a4f609b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mse7exe111","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mse7exe111_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mse7exe111_1","displayName":"True","description":null,"helpText":null}]},"a34303dc7aba5d9a":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_winproj","displayName":"Project: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"a3d92e7d626002d1":{"id":"intelligencesettings_intelligencesettings","displayName":"com.apple.configuration.intelligence.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":null},"a34e12f9f26cede0":{"id":"loginwindow_disableloginitemssuppression","displayName":"Disable Login Items Suppression","description":"If true, prevents the user from disabling login item launches by using the Shift key.","helpText":null,"infoUrls":[],"categoryId":"0e937777-d01a-4180-a937-c2010451a529","categoryName":"Login Window Login Items","options":[{"id":"loginwindow_disableloginitemssuppression_false","displayName":"False","description":null,"helpText":null},{"id":"loginwindow_disableloginitemssuppression_true","displayName":"True","description":null,"helpText":null}]},"a309ca737763a24f":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1","displayName":"Specify administratively assigned Offline Files (User)","description":"This policy setting lists network files and folders that are always available for offline use. This ensures that the specified files and folders are available offline to users of the computer.\r\n\r\nIf you enable this policy setting, the files you enter are always available offline to users of the computer. To specify a file or folder, click Show. In the Show Contents dialog box in the Value Name column, type the fully qualified UNC path to the file or folder. Leave the Value column field blank.\r\n\r\nIf you disable this policy setting, the list of files or folders made always available offline (including those inherited from lower precedence GPOs) is deleted and no files or folders are made available for offline use by Group Policy (though users can still specify their own files and folders for offline use).\r\n\r\nIf you do not configure this policy setting, no files or folders are made available for offline use by Group Policy.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy settings will be combined and all specified files will be available for offline use.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-assignedofflinefiles-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_1","displayName":"Enabled","description":null,"helpText":null}]},"a364605e0f38e09d":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1_lbl_reminderfreqspin","displayName":"Minutes: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"a327ccefbc0a18ab":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1_lbl_remindertimeoutspin","displayName":"Seconds: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"a394a7fe8fa7122d":{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenusubfolders","displayName":"Remove user's folders from the Start Menu (User)","description":"Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.\r\n\r\nThis setting is designed for use with redirected folders. Redirected folders appear on the main (bottom) section of the Start menu. However, the original, user-specific version of the folder still appears on the top section of the Start menu. Because the appearance of two folders with the same name might confuse users, you can use this setting to hide user-specific folders.\r\n\r\nNote that this setting hides all user-specific folders, not just those associated with redirected folders.\r\n\r\nIf you enable this setting, no folders appear on the top section of the Start menu. If users add folders to the Start Menu directory in their user profiles, the folders appear in the directory but not on the Start menu.\r\n\r\nIf you disable this setting or do not configured it, Windows 2000 Professional and Windows XP Professional display folders on both sections of the Start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenusubfolders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenusubfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenusubfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"a386db6765f4684d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (User)","description":"Setting the policy enforces a minimum Restricted mode on YouTube and prevents users from picking a less restricted mode. If you set it to:\r\n\r\n* Strict, Strict Restricted mode on YouTube is always active.\r\n\r\n* Moderate, the user may only pick Moderate Restricted mode and Strict Restricted mode on YouTube, but can't turn off Restricted mode.\r\n\r\n* Off or if no value is set, Restricted mode on YouTube isn't enforced by Chrome. External policies such as YouTube policies might still enforce Restricted mode.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_1","displayName":"Enabled","description":null,"helpText":null}]},"a3fdd6aa1d675374":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended","displayName":"Parameters for image URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURLPostParams specifies the parameters during image search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as {imageThumbnail}, real image thumbnail data replaces it.\r\n\r\nLeaving DefaultSearchProviderImageURLPostParams unset means image search request is sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a3283d8aa1bff2cf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting","displayName":"Default sensors setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting_1","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting_2","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},"a3e6b1bc45cfd75b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_remoteaccesshostudpportrange","displayName":"Restrict the UDP port range used by the remote access host (User)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"a325f8971889732e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords","displayName":"Allow users to show passwords in Password Manager (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},"a3c589d64b913962":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"a372dbe95bcb4317":{"id":"user_vendor_msft_policy_config_experience_allowthirdpartysuggestionsinwindowsspotlight","displayName":"Allow Third Party Suggestions In Windows Spotlight (User)","description":"Specifies whether to allow app and content suggestions from third-party software publishers in Windows spotlight features like lock screen spotlight, suggested apps in the Start menu, and Windows tips. Users may still see suggestions for Microsoft features, apps, and services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowthirdpartysuggestionsinwindowsspotlight"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_allowthirdpartysuggestionsinwindowsspotlight_0","displayName":"Block","description":"Third-party suggestions not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_allowthirdpartysuggestionsinwindowsspotlight_1","displayName":"Allow","description":"Third-party suggestions allowed.","helpText":null}]},"a36d752bc72395b3":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"a3a270c5e66b1816":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"a31a86ecfcec7210":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowautomaticpromptingforactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"a3819ce824cba08f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling","displayName":"Restrict exposure of localhost IP address by WebRTC (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default","displayName":"Allow all interfaces. This exposes the local IP address","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_and_private_interfaces","displayName":"Allow public and private interfaces over http default route. This exposes the local IP address","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_interface_only","displayName":"Allow public interface over http default route. This doesn't expose the local IP address","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_disable_non_proxied_udp","displayName":"Use TCP unless proxy server supports UDP. This doesn't expose the local IP address","description":null,"helpText":null}]},"a3f1e4a689b921ee":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"a32c6d1f05dd7094":{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended","displayName":"Enable efficiency mode when the device is connected to a power source (User)","description":"Allows efficiency mode to become active when the device is connected to a power source. On devices with no battery, this policy has no effect.\r\n\r\nIf you enable this policy, efficiency mode will become active when the device is connected to a power source.\r\n\r\nIf you disable or don't configure this policy, efficiency mode will never become active when the device is connected to a power source.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a3955617a7bc01a3":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_printpreviewstickysettings","displayName":"Configure the sticky print preview settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":null},"a3d36504709d83b1":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors (User)","description":"The X.509 key usage extension declares how the key in a certificate can be\r\nused. These instructions ensure certificates aren't used in an unintended\r\ncontext, which protects against a class of cross-protocol attacks on HTTPS and\r\nother protocols. HTTPS clients must verify that server certificates match the\r\nconnection's TLS parameters.\r\n\r\nIf this policy is enabled,\r\nMicrosoft Edge will perform this key\r\ncheck. This helps prevent attacks where an attacker manipulates the browser into\r\ninterpreting a key in ways that the certificate owner did not intend.\r\n\r\nIf this policy is set to disabled or not configured,\r\nMicrosoft Edge will skip this key check in\r\nHTTPS connections that negotiate TLS 1.2 and use an RSA certificate that\r\nchains to a local trust anchor. Examples of local trust anchors include\r\npolicy-provided or user-installed root certificates. In all other cases, the\r\ncheck is performed independent of this policy's setting.\r\n\r\nThis policy is available for administrators to preview the behavior of a\r\nfuture release, which will enable this check by default. At that point, this\r\npolicy will remain temporarily available for administrators that need more\r\ntime to update their certificates to meet the new RSA key usage requirements.\r\n\r\nConnections that fail this check will fail with the error\r\nERR_SSL_KEY_USAGE_INCOMPATIBLE. Sites that fail with this error likely have a\r\nmisconfigured certificate. Modern ECDHE_RSA cipher suites use the\r\n\"digitalSignature\" key usage option, while legacy RSA decryption cipher suites\r\nuse the \"keyEncipherment\" key usage option. If uncertain, administrators should\r\ninclude both in RSA certificates meant for HTTPS.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a3ffdab9b9e629e5":{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl_webrtciphandlingurl","displayName":"WebRTC IP Handling Policy for URL Patterns (User)","description":"","helpText":"","infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":null},"a3de15d0a2538b28":{"id":"user_vendor_msft_policy_config_notifications_disallownotificationmirroring","displayName":"Disallow Notification Mirroring (User)","description":"Boolean value that turns off notification mirroring. For each user logged into the device, if you enable this policy (set value to 1) the app and system notifications received by this user on this device will not get mirrored to other devices of the same logged in user. If you disable or do not configure this policy (set value to 0) the notifications received by this user on this device will be mirrored to other devices of the same logged in user. This feature can be turned off by apps that do not want to participate in Notification Mirroring. This feature can also be turned off by the user in the Cortana setting page. No reboot or service restart is required for this policy to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Notifications#disallownotificationmirroring"],"categoryId":"cb1e177e-8f06-4a69-8215-ec1e91c19e30","categoryName":"Notifications","options":[{"id":"user_vendor_msft_policy_config_notifications_disallownotificationmirroring_0","displayName":"Block","description":"Enable notification mirroring.","helpText":null},{"id":"user_vendor_msft_policy_config_notifications_disallownotificationmirroring_1","displayName":"Allow","description":"Disable notification mirroring.","helpText":null}]},"a3514a984f0f7f8a":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantadminblockedurls_l_writingassistantadminblockedurlslistid","displayName":"Blocked URL patterns (e.g., example.com) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"05a6f86f-dab7-4888-97a1-db3457f00974","categoryName":"Writing Assistance","options":null},"a37ddf8a657cccd7":{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicylocalversioning","displayName":"Number of days to keep local document versions in the local cache (User)","description":"This policy controls how long local document versions are kept in the local cache. The default setting is 30 days and applies to Word, Excel, and PowerPoint. \r\n\r\nIf you enable this policy setting, local document versions will be kept for the number of days specified, after which they’ll be deleted from the local cache. You can configure the setting with a value from 1 to 30.\r\n\r\nIf you disable or don’t configure this policy setting, local document versions will be kept for 30 days, after which they’ll be deleted from the local cache.\r\n ","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicylocalversioning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicylocalversioning_1","displayName":"Enabled","description":null,"helpText":null}]},"a345eba1a380d907":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaulttimeout_l_webservicedefaulttimeoutdecimal","displayName":"Web service default timeout limit (milliseconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":null},"a3aa47ea7656b0fd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacecompany_l_companymapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"a337b59d9e2f6625":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicserbiaandmontenegro","displayName":"Serbian (Cyrillic, Serbia and Montenegro (Former)) (User)","description":"Enables the editing language \"Serbian (Cyrillic, Serbia and Montenegro (Former))\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicserbiaandmontenegro_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicserbiaandmontenegro_1","displayName":"Enabled","description":null,"helpText":null}]},"a324aa1880cf6113":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_welsh","displayName":"Welsh (User)","description":"Enables the editing language Welsh","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_welsh_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_welsh_1","displayName":"Enabled","description":null,"helpText":null}]},"a3642424e2df81ee":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_officedocumentcachelocation_l_officedocumentcachelocationid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2d6891a4-ee83-4e55-8e23-09513e1306e4","categoryName":"Microsoft Office Document Cache","options":null},"a3ac877a54a72b1c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc19_l_allowsubfolders19","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc19_l_allowsubfolders19_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc19_l_allowsubfolders19_1","displayName":"True","description":null,"helpText":null}]},"a3e412aec0bd6f63":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas","displayName":"Save this document as (User)","description":"","helpText":"","infoUrls":[],"categoryId":"025c640e-51e2-4f04-85e3-a13f30b5e08c","categoryName":"Encoding","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1256","displayName":"Arabic Alphabet (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_28594","displayName":"Baltic Alphabet (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1257","displayName":"Baltic Alphabet (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_852","displayName":"Central European (DOS)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_28592","displayName":"Central European Alphabet (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1250","displayName":"Central European Alphabet (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_936","displayName":"Chinese Simplified (GB2312)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_52936","displayName":"Chinese Simplified (HZ)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_950","displayName":"Chinese Traditional (Big 5)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_866","displayName":"Cyrillic Alphabet (DOS)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_28595","displayName":"Cyrillic Alphabet (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_20866","displayName":"Cyrillic Alphabet (KOI8-R)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1251","displayName":"Cyrillic Alphabet (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_28597","displayName":"Greek Alphabet (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1253","displayName":"Greek Alphabet (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1255","displayName":"Hebrew Alphabet (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_51932","displayName":"Japanese (EUC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_50220","displayName":"Japanese (JIS)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_50222","displayName":"Japanese (JIS-Allow 1 byte Kana - SO/SI)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_50221","displayName":"Japanese (JIS-Allow 1 byte Kana)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_932","displayName":"Japanese (Shift-JIS)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_949","displayName":"Korean","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_28593","displayName":"Latin 3 Alphabet (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_874","displayName":"Thai (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1254","displayName":"Turkish Alphabet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_21866","displayName":"Ukrainian Alphabet (KOI8-RU)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1200","displayName":"Universal Alphabet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1201","displayName":"Universal Alphabet (Big-Endian)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_65001","displayName":"Universal Alphabet (UTF-8)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1258","displayName":"Vietnamese Alphabet (Windows)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_28598","displayName":"Visual Hebrew (ISO)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_savethisdocumentas_1252","displayName":"Western Alphabet (Windows)","description":null,"helpText":null}]},"a3364a5e44884e96":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook","displayName":"Choose default codec to be used for Video notebook (User)","description":"This option will set the default codec used by OneNote for video recording that are created in OneNote.","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_choosedefaultcodectobeusedforvideonotebook_1","displayName":"Enabled","description":null,"helpText":null}]},"a3b4f1a436dc1cab":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions_l_empty11","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"1bfef2c3-a561-4e7a-8f0f-0944bc79c20f","categoryName":"Spelling","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions_l_empty11_0","displayName":"no spell checking","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions_l_empty11_1","displayName":"check spelling as you type","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions_l_empty11_2","displayName":"hide spelling errors","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_spelling_l_onenotespellingoptions_l_empty11_3","displayName":"check spelling but hide errors","description":null,"helpText":null}]},"a317786774741b04":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_custom_l_disablecommandbar38_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8184df77-410e-41a6-b687-88de05769977","categoryName":"Custom","options":null},"a31246f8aff3d5b3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_setmaximumnumberofexchangeaccounts","displayName":"Set maximum number of Exchange accounts per profile (User)","description":"This policy setting allows you to set the maximum number of Exchange accounts allowed per Outlook profile.\r\n\r\nIf you enable this policy setting, you will be able to set the maximum number of Exchange accounts allowed per Outlook profile.\r\n\r\nIf you disable or do not configure this policy setting, the default maximum number of Exchange accounts allowed per Outlook profile is 10.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_setmaximumnumberofexchangeaccounts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_setmaximumnumberofexchangeaccounts_1","displayName":"Enabled","description":null,"helpText":null}]},"a346f2353bee5f62":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipheralgorithm_l_setcngcipheralgorithmid","displayName":"CNG cipher algorithm: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":null},"a34a443626b18316":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_l_pathcolon84","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"a31564ae0096a986":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_webpages_l_webpagesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"a370bb934fd58e83":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}_clouddeviceid","displayName":"Cloud Device ID (User)","description":"Identifies the Universal Print printer, by its Printer ID, you wish to install on the targeted user account. The printer's Printer ID can be found in the printer's properties via the Universal Print portal. Note: the targeted user account must have access rights to both the printer and to the Universal Print service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PrinterProvisioning-csp/"],"categoryId":"56c54112-2991-4bda-9e01-e6868bd07726","categoryName":"Printer Provisioning","options":null},"a34d54207c7f0e80":{"id":"vendor_msft_firewall_mdmstore_domainprofile_disablestealthmodeipsecsecuredpacketexemption","displayName":"Disable Stealth Mode Ipsec Secured Packet Exemption","description":"This value is an on/off switch. This option is ignored if DisableStealthMode is on. Otherwise, when this option is true, the firewall's stealth mode rules MUST NOT prevent the host computer from responding to unsolicited network traffic if that traffic is secured by IPsec. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used. For schema versions 0x0200, 0x0201, and 0x020A, this value is invalid and MUST NOT be used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_disablestealthmodeipsecsecuredpacketexemption_false","displayName":"False","description":"FALSE","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_disablestealthmodeipsecsecuredpacketexemption_true","displayName":"True","description":"TRUE","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/a4.json b/public/intune-definitions/a4.json new file mode 100644 index 000000000000..f74bdcaa6ca7 --- /dev/null +++ b/public/intune-definitions/a4.json @@ -0,0 +1 @@ +{"a47d4feff48172e4":{"id":"com.android.devicerestrictionpolicy.cellbroadcastsconfigblocked","displayName":"Block configuring cell broadcasts","description":"If 'True', the device is prevented from configuring cell broadcast messages. If 'False', Intune doesn't change or update this setting. By default, the OS might allow cell broadcast configuration. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.cellbroadcastsconfigblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.cellbroadcastsconfigblocked_true","displayName":"True","description":"True","helpText":null}]},"a43ebbab151468b9":{"id":"com.apple.applicationaccess_allowpredictivekeyboard","displayName":"Allow Predictive Keyboard (Deprecated)","description":"If false, disables predictive keyboards. Requires a supervised device. Available in iOS 8.1.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpredictivekeyboard_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpredictivekeyboard_true","displayName":"True","description":null,"helpText":null}]},"a45c24e4ed73a1e6":{"id":"com.apple.extensiblesso_platformsso_tokentousermapping","displayName":"Token To User Mapping","description":"The attribute mapping used when creating new users or for authorization.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"a4777a33914e7f27":{"id":"com.apple.managedclient.preferences_managedsearchengines","displayName":"Managed Search Engines","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine.\nYou do not need to specify the encoding. Starting in Microsoft Edge 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge 80.\n\nStarting in Microsoft Edge 83, you can enable search engine discovery with the allow_search_engine_discovery optional parameter. This parameter must be the first item in the list. If allow_search_engine_discovery is not specified, search engine discovery will be disabled by default. Starting in Microsoft Edge 84, you can set this policy as a recommended policy to allow search provider discovery. You do not need to add the allow_search_engine_discovery optional parameter.\n\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\n\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\n\nIf the \"DefaultSearchProviderSearchURL\" policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#managedsearchengines"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"a4cb9d1a644ac193":{"id":"com.apple.mcxprinting_com.apple.mcxprinting","displayName":"Top Level Setting Group Collection","description":"com.apple.mcxprinting","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"a498f73f9100547d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.onbulkdataentryenterpriseconnector","displayName":"Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when data is entered in Microsoft Edge from the clipboard or by drag and dropping web content.\n\nConnector Fields\n\n1. url_list,\ntags,\nenable,\ndisable\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\nAnalysis is triggered if at least one tag is included in the request.\n\n2. service_provider\nIdentifies the analysis service provider the configuration applies to.\n\n3. block_until_verdict\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\nAny other integer value allows the page to access the data immediately.\n\n4. default_action\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\nAny other value permits the page to access the data.\n\n5. minimum_data_size\nSpecifies the minimum size (in bytes) that the entered data must meet or exceed to be scanned.\nDefault: 100 bytes if the field isn't set.\n\nThis policy requires further setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"a4c298dbb9fad1ae":{"id":"ddm-latestsoftwareupdate_ddm-latestsoftwareupdate","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"15be55d8-7477-4274-9b09-b775bce68416","categoryName":"Software Update Enforce Latest","options":null},"a4a4d673a5f16670":{"id":"device_vendor_msft_defender_configuration_devicecontrolenabled","displayName":"Device Control Enabled","description":"Control Device Control feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_devicecontrolenabled_1","displayName":"Device Control is enabled","description":"Device Control is enabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrolenabled_0","displayName":"Device Control is disabled","description":"Device Control is disabled","helpText":null}]},"a43aaedc81db2c8a":{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_wercercorporateportnumber","displayName":"Server port:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"a4937f17232a9899":{"id":"device_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_2","displayName":"Turn off automatic learning","description":"\r\n This policy setting turns off the automatic learning component of handwriting recognition personalization. \r\n\r\n\t\tAutomatic learning enables the collection and storage of text and ink written by the user in order to help adapt handwriting recognition to the vocabulary and handwriting style of the user. \r\n\r\n\t\tText that is collected includes all outgoing messages in Windows Mail, and MAPI enabled email clients, as well as URLs from the Internet Explorer browser history. The information that is stored includes word frequency and new words not already known to the handwriting recognition engines (for example, proper names and acronyms). Deleting email content or the browser history does not delete the stored personalization data. Ink entered through Input Panel is collected and stored. \r\n\r\n\t\tNote: Automatic learning of both text and ink might not be available for all languages, even when handwriting personalization is available. See Tablet PC Help for more information.\r\n\r\n\t\tIf you enable this policy setting, automatic learning stops and any stored data is deleted. Users cannot configure this setting in Control Panel.\r\n\r\n\t\tIf you disable this policy setting, automatic learning is turned on. Users cannot configure this policy setting in Control Panel. Collected data is only used for handwriting recognition, if handwriting personalization is turned on.\r\n\r\n\t\tIf you do not configure this policy, users can choose to enable or disable automatic learning either from the Handwriting tab in the Tablet Settings in Control Panel or from the opt-in dialog.\r\n\r\n\t\tThis policy setting is related to the \"Turn off handwriting personalization\" policy setting.\r\n\r\n\t\tNote: The amount of stored ink is limited to 50 MB and the amount of text information to approximately 5 MB. When these limits are reached and new data is collected, old data is deleted to make room for more recent data.\r\n\r\n\t\tNote: Handwriting personalization works only for Microsoft handwriting recognizers, and not with third-party recognizers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-implicitdatacollectionoff-2"],"categoryId":"9a79d480-8cb4-47b5-95c7-5da56eea5bb8","categoryName":"Handwriting personalization","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_2_1","displayName":"Enabled","description":null,"helpText":null}]},"a4f686ce13c5d6fa":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_cse_nochanges11","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_cse_nochanges11_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_security_cse_nochanges11_1","displayName":"True","description":null,"helpText":null}]},"a4bb6688c99be98c":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_ux_configuration_customdefaultactiontoaststring_ux_configuration_customdefaultactiontoaststring","displayName":"Display additional text to clients when they need to perform an action","description":null,"helpText":"","infoUrls":[],"categoryId":"a5060182-4d22-412b-bd0e-3a1e009b36c6","categoryName":"Client Interface","options":null},"a457c7c76bec7372":{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_donotshowlocalonlyicon","displayName":"Do not show the \"local access only\" network icon","description":"Specifies whether or not the \"local access only\" network icon will be shown.\r\n\r\nWhen enabled, the icon for Internet access will be shown in the system tray even when a user is connected to a network with local access only.\r\n\r\nIf you disable this setting or do not configure it, the \"local access only\" icon will be used when a user is connected to a network with local access only.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-donotshowlocalonlyicon"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_donotshowlocalonlyicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_donotshowlocalonlyicon_1","displayName":"Enabled","description":null,"helpText":null}]},"a43bf5963715ca95":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_2","displayName":"Synchronize all offline files when logging on","description":"Determines whether offline files are fully synchronized when users log on.\r\n\r\nThis setting also disables the \"Synchronize all offline files before logging on\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, offline files are fully synchronized at logon. Full synchronization ensures that offline files are complete and current. Enabling this setting automatically enables logon synchronization in Synchronization Manager.\r\n\r\nIf this setting is disabled and Synchronization Manager is configured for logon synchronization, the system performs only a quick synchronization. Quick synchronization ensures that files are complete but does not ensure that they are current.\r\n\r\nIf you do not configure this setting and Synchronization Manager is configured for logon synchronization, the system performs a quick synchronization by default, but users can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To change the synchronization method without setting a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the \"Synchronize all offline files before logging on\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatlogon-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_2_1","displayName":"Enabled","description":null,"helpText":null}]},"a49e542ee13ff12e":{"id":"device_vendor_msft_policy_config_admx_tpm_ignoredefaultlist_name","displayName":"Ignore the default list of blocked TPM commands","description":"This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) commands.\r\n\r\nIf you enable this policy setting, Windows will ignore the computer's default list of blocked TPM commands and will only block those TPM commands specified by Group Policy or the local list.\r\n\r\nThe default list of blocked TPM commands is pre-configured by Windows. You can view the default list by running \"tpm.msc\", navigating to the \"Command Management\" section, and making visible the \"On Default Block List\" column. The local list of blocked TPM commands is configured outside of Group Policy by running \"tpm.msc\" or through scripting against the Win32_Tpm interface. See the related policy setting to configure the Group Policy list of blocked TPM commands.\r\n\r\nIf you disable or do not configure this policy setting, Windows will block the TPM commands in the default list, in addition to commands in the Group Policy and local lists of blocked TPM commands. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-ignoredefaultlist-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_ignoredefaultlist_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_ignoredefaultlist_name_1","displayName":"Enabled","description":null,"helpText":null}]},"a49598d3022f9fa6":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016access","displayName":"Microsoft Access 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Access 2016.\r\nBy default, the user settings of Microsoft Access 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Access 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016access"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016access_1","displayName":"Enabled","description":null,"helpText":null}]},"a418ea01dd0023f4":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016accessbackup","displayName":"Access 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Access 2016.\r\nMicrosoft Access 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Access 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Access 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016accessbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016accessbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016accessbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"a4b8869f5034634a":{"id":"device_vendor_msft_policy_config_authentication_enablepasswordlessexperience","displayName":"Enable Passwordless Experience","description":"Specifies whether connected users on AADJ devices receive a Passwordless experience on Windows\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#enablepasswordlessexperience"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":[{"id":"device_vendor_msft_policy_config_authentication_enablepasswordlessexperience_0","displayName":"The feature defaults to the existing edition and device capabilities.","description":"The feature defaults to the existing edition and device capabilities.","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_enablepasswordlessexperience_1","displayName":"Enabled. The Passwordless experience will be enabled on Windows","description":"Enabled. The Passwordless experience will be enabled on Windows","helpText":null},{"id":"device_vendor_msft_policy_config_authentication_enablepasswordlessexperience_2","displayName":"Disabled. The Passwordless experience will not be enabled on Windows","description":"Disabled. The Passwordless experience will not be enabled on Windows","helpText":null}]},"a4a7a3be52a97711":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon","displayName":"Hide the web store from the New Tab Page and app launcher","description":"Hide the Chrome Web Store app and footer link from the New Tab Page and Google Chrome OS app launcher.\r\n\r\nWhen this policy is set to true, the icons are hidden.\r\n\r\nWhen this policy is set to false or is not configured, the icons are visible.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon_1","displayName":"Enabled","description":null,"helpText":null}]},"a4a76f3e58a345d9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords","displayName":"Import saved passwords from default browser on first run","description":"Setting the policy to Enabled imports saved passwords from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no saved passwords are imported on first run.\r\n\r\nUsers can trigger an import dialog and the saved passwords checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},"a4311cd6fbddb40a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_notificationsblockedforurlsdesc","displayName":"Block notifications on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"a4c529f2b038582a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_sensorsallowedforurlsdesc","displayName":"Allow access to sensors on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"a43ce53a8913d1d0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls","displayName":"Block WebUSB on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a USB device.\r\n\r\nLeaving the policy unset means DefaultWebUsbGuardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nURL patterns can't conflict with WebUsbAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"a487580e1ad99828":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended","displayName":"Enable Live Caption","description":"Enable the Live Caption feature.\r\n\r\nIf this policy is set to Enabled, Live Caption will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Caption will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Caption is disabled initially but can be enabled by the user anytime.","helpText":"","infoUrls":[],"categoryId":"12142994-4b30-486c-bab1-9206528b2b96","categoryName":"Accessibility settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a4242ee0287fa19c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings","displayName":"Managed toolbar avatar label setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_0","displayName":"Always display management label","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_1","displayName":"Display management labels for 30s","description":null,"helpText":null}]},"a42376195f7c7cbf":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_odfcreattachinterval","displayName":"Reattach Interval (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"a4e08f1343ef8a2f":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709","displayName":"Enable dragging of content from different domains across windows","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3","displayName":"Disable","description":null,"helpText":null}]},"a40fcdcc2630c60b":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_remotelyaccessibleregistrypathsandsubpaths","displayName":"Network Access Remotely Accessible Registry Paths And Subpaths","description":"Network access: Remotely accessible registry paths and subpaths This security setting determines which registry paths and subpaths can be accessed over the network, regardless of the users or groups listed in the access control list (ACL) of the winreg registry key. Default: System\\CurrentControlSet\\Control\\Print\\Printers System\\CurrentControlSet\\Services\\Eventlog Software\\Microsoft\\OLAP Server Software\\Microsoft\\Windows NT\\CurrentVersion\\Print Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows System\\CurrentControlSet\\Control\\ContentIndex System\\CurrentControlSet\\Control\\Terminal Server System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib System\\CurrentControlSet\\Services\\SysmonLog System\\CurrentControlSet\\Services\\CertSvc System\\CurrentControlSet\\Services\\Wins Caution Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer. Note: On Windows XP, this security setting was called \"Network access: Remotely accessible registry paths.\" If you configure this setting on a member of the Windows Server 2003 family that is joined to a domain, this setting is inherited by computers running Windows XP, but will appear as the \"Network access: Remotely accessible registry paths\" security option. For more information, see Network access: Remotely accessible registry paths and subpaths.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_remotelyaccessibleregistrypathsandsubpaths"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"a468ae95067aa9d2":{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended","displayName":"Set the default \"share additional operating system region\" setting","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\r\n\r\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting will be shared with the web through the default JavaScript locale. If shared, websites will be able to query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\r\n\r\nIf you set this policy to \"Limited\", the OS Regional format will only be shared if its language part matches the Microsoft Edge display language.\r\n\r\nIf you set this policy to \"Always\", the OS Regional format will always be shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months can be displayed in one language while the surrounding text is displayed in another language.\r\n\r\nIf you set this policy to \"Never\", the OS Regional format will never be shared.\r\n\r\nExample 1: In this example the OS Regional format is set to \"en-GB\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Limited\", or \"Always\".\r\n\r\nExample 2: In this example the OS Regional format is set to \"es-MX\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Always\" but will not if the policy is set to \"Limited\".\r\n\r\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282\r\n\r\nPolicy options mapping:\r\n\r\n* Limited (0) = Limited\r\n\r\n* Always (1) = Always share the OS Regional format\r\n\r\n* Never (2) = Never share the OS Regional format\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a4ea2d684c11cb0b":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings","displayName":"Disable SmartScreen AppRep based warnings for specified file types on specified domains","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from SmartScreen AppRep warnings. For example, if the \"vbe\" extension is associated with \"website1.com\", users would not see a SmartScreen AppRep warning when downloading \"vbe\" files from \"website1.com\", but may see a download warning when downloading \"vbe\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to file type extension-based security warnings and mixed-content download warnings.\r\n\r\nIf you disable this policy or don't configure it, files that trigger SmartScreen AppRep download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so \"vbe\" should be used instead of \".vbe\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent SmartScreen AppRep warnings on msi, exe, and vbe extensions for *.contoso.com domains. It may show the user a SmartScreen AppRep warning on any other domain for exe and msi files, but not for vbe files.\r\n\r\n[\r\n { \"file_extension\": \"msi\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"vbe\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of SmartScreen AppRep download warnings for \"vbe\" files for all domains, applying suppression of such warnings for all domains is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://contoso.com\",\r\n \"contoso2.com\"\r\n ],\r\n \"file_extension\": \"msi\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"vbe\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"a4d1257e18ddc60c":{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_tls13earlydataenabled","displayName":"Control whether TLS 1.3 Early Data is enabled in Microsoft Edge","description":"This policy controls whether TLS 1.3 Early Data is enabled in Microsoft Edge.\r\n\r\nTLS 1.3 Early Data is an extension that allows an HTTP request to be sent in parallel with the TLS handshake. When enabled and supported by the server, this can improve page load performance.\r\n\r\nEnabled – Microsoft Edge enables TLS 1.3 Early Data.\r\n\r\nDisabled – Microsoft Edge disables TLS 1.3 Early Data.\r\n\r\nNot configured – Microsoft Edge follows the default rollout process for TLS 1.3 Early Data.\r\n\r\nNOTE: When this feature is enabled, whether TLS 1.3 Early Data is used depends on server support. Most modern TLS servers and middleware can handle or reject Early Data without interrupting the connection. However, improperly implemented TLS stacks may cause connection failures. If such issues occur, contact the device or software vendor for a resolution.\r\n\r\nThis policy is temporary and intended to help test for compatibility issues. It may be removed in a future release once the feature is fully rolled out.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_tls13earlydataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_tls13earlydataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a4e7c38d2721ff46":{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration","displayName":"NetBT NodeType configuration","description":"The NetBT NodeType setting determines what methods NetBT uses to register and resolve names:\n* A B-node computer uses broadcasts.\n* A P-node computer uses only point-to-point name queries to a name server (WINS).\n* An M-node computer broadcasts first, and then queries the name server.\n* An H-node computer queries the name server first, and then broadcasts.\nResolution through LMHOSTS or DNS follows these methods. If the NodeType value is present, it overrides any DhcpNodeType value.\nIf neither NodeType nor DhcpNodeType is present, the computer uses B-node if there are no WINS servers configured for the network, or H-node if there is at least one WINS server configured.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-netbtnodetypeconfiguration"],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_1","displayName":"Enabled","description":null,"helpText":null}]},"a45994bd62ae8172":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mspubexe58","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mspubexe58_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mspubexe58_1","displayName":"True","description":null,"helpText":null}]},"a437e5223980dd41":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_forceallowtheseapps","displayName":"Let Apps Access Microphone Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"a4146dd5964d2f21":{"id":"device_vendor_msft_policy_config_visualstudiov1.updates~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled","displayName":"Disable IntelliCode custom model training","description":"This policy disables the ability to train custom IntelliCode models for IntelliSense completions.","helpText":"","infoUrls":[],"categoryId":"96277512-3d35-4876-ad74-2d849348799e","categoryName":"Privacy Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1.updates~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1.updates~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a4d062a2c72259f0":{"id":"device_vendor_msft_policy_config_windowsconnectionmanager_prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork","displayName":"Prohibit connection to non-domain networks when connected to domain authenticated network","description":"This policy setting prevents computers from connecting to both a domain based network and a non-domain based network at the same time.\n\nIf this policy setting is enabled, the computer responds to automatic and manual network connection attempts based on the following circumstances:\n\nAutomatic connection attempts\n- When the computer is already connected to a domain based network, all automatic connection attempts to non-domain networks are blocked.\n- When the computer is already connected to a non-domain based network, automatic connection attempts to domain based networks are blocked.\n\nManual connection attempts\n- When the computer is already connected to either a non-domain based network or a domain based network over media other than Ethernet, and a user attempts to create a manual connection to an additional network in violation of this policy setting, the existing network connection is disconnected and the manual connection is allowed.\n- When the computer is already connected to either a non-domain based network or a domain based network over Ethernet, and a user attempts to create a manual connection to an additional network in violation of this policy setting, the existing Ethernet connection is maintained and the manual connection attempt is blocked.\n\nIf this policy setting is not configured or is disabled, computers are allowed to connect simultaneously to both domain and non-domain networks.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowsconnectionmanager#windowsconnectionmanager-prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork"],"categoryId":"d4c9d046-a8c0-46f0-bd62-bc4d1614e891","categoryName":"Windows Connection Manager","options":[{"id":"device_vendor_msft_policy_config_windowsconnectionmanager_prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsconnectionmanager_prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"a407ec57c595633f":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_appliesto","displayName":"Applies to","description":"","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_allusers","displayName":"All device users","description":null,"helpText":null}},"a4a91e03db60aa6a":{"id":"passcode_requirealphanumericpasscode","displayName":"Require Alphanumeric Passcode","description":"If `true`, the passcode needs to consist of at least one alphabetic character and at least one number.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":[{"id":"passcode_requirealphanumericpasscode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"passcode_requirealphanumericpasscode_true","displayName":"Enabled","description":null,"helpText":null}]},"a43af5482b68926a":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_classicshell","displayName":"Turn on Classic Shell (User)","description":"This setting allows an administrator to revert specific Windows Shell behavior to classic Shell behavior.\r\n\r\nIf you enable this setting, users cannot configure their system to open items by single-clicking (such as in Mouse in Control Panel). As a result, the user interface looks and operates like the interface for Windows NT 4.0, and users cannot restore the new features.\r\nEnabling this policy will also turn off the preview pane and set the folder options for File Explorer to Use classic folders view and disable the users ability to change these options.\r\n\r\nIf you disable or not configure this policy, the default File Explorer behavior is applied to the user.\r\n\r\nNote: In operating systems earlier than Windows Vista, enabling this policy will also disable the Active Desktop and Web view. This setting will also take precedence over the \"Enable Active Desktop\" setting. If both policies are enabled, Active Desktop is disabled.\r\n\r\nAlso, see the \"Disable Active Desktop\" setting in User Configuration\\Administrative Templates\\Desktop\\Active Desktop and the \"Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon\" setting in User Configuration\\Administrative Templates\\Windows Components\\File Explorer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-classicshell"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_classicshell_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_classicshell_1","displayName":"Enabled","description":null,"helpText":null}]},"a4465980cd99021e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (User)","description":"Setting the policy to 3 lets websites ask for read access to files and directories in the host operating system's file system via the File System API. Setting the policy to 2 denies access.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"a4e044cbc58ada39":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"a427b4e88cd16b7d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled","displayName":"Control the visibility of the management notice on the New Tab Page for managed browsers (User)","description":"This policy controls the visibility of the management notice within the footer of the New Tab Page (NTP). By default, the NTP footer displays information when the browser is managed by an organization (indicated by a building icon and \"Managed by [domain name]\"). This can be customized using the EnterpriseCustomLabelForBrowser and EnterpriseLogoUrlForBrowser policies.\r\n\r\nIf this policy is left unset or set to true, managed browsers will display a “Managed by…” notice with an icon.\r\n\r\nIf this policy is set to false, the management notice will be hidden.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a4ac118f318eb38c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveautorecoverinfo","displayName":"Save AutoRecover info (User)","description":"Enabling this policy selects the user option to \"Save AutoRecover information every N minutes\".","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveautorecoverinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveautorecoverinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"a4d251000b60f339":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_descriptioncolon55","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"a47acd99ee398f4d":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c","displayName":"Only allow approved domains to use the TDC ActiveX control (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0","displayName":"Disable","description":null,"helpText":null}]},"a4e3b35eca2f5fe2":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"a4af3486a9d8b907":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_securitykeypermitattestationdesc","displayName":"Websites or domains that don't need permission to use direct Security Key attestation (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"a41f753e6331893a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation","displayName":"Configure the new tab page URL (User)","description":"Configures the default URL for the new tab page.\r\n\r\nThis policy determines the page that's opened when new tabs are created (including when new windows are opened). It also affects the startup page if that's set to open to the new tab page.\r\n\r\nThis policy doesn't determine which page opens on startup; that's controlled by the 'RestoreOnStartup' (Action to take on startup) policy. It also doesn’t affect the home page if that’s set to open to the new tab page.\r\n\r\nIf you don't configure this policy, the default new tab page is used.\r\n\r\nIf you configure this policy *and* the 'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience) policy, this policy has precedence.\r\n\r\nIf an invalid URL is provided, new tabs will open about://blank.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"a4fe836bc0e940bf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_disableitemsinuserinterface_l_hidebuiltinshapepresetstyles","displayName":"Hide built-in shape style presets (User)","description":"This policy setting allows you to specify whether or not to show the the built-in shape preset styles.","helpText":"","infoUrls":[],"categoryId":"866eedbc-ffd9-457d-b02b-7b163d55c4bd","categoryName":"Disable Items in User Interface","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_disableitemsinuserinterface_l_hidebuiltinshapepresetstyles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_disableitemsinuserinterface_l_hidebuiltinshapepresetstyles_1","displayName":"Enabled","description":null,"helpText":null}]},"a44c94dab79eaef6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy6_l_placesbarpath220","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"a45f8da29192e4a9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changedestinationurlforsharepointhyperlink","displayName":"Change destination URL for SharePoint hyperlink (User)","description":"This policy setting changes the destination URL of the Learn more about SharePoint hyperlink located on the Save to SharePoint form in the Backstage view for Word, PowerPoint, Excel, Visio, and Project.\r\n\r\nIf you enable this policy setting, the hyperlink destination you provide will be used.\r\n\r\nIf you disable or do not configure this policy setting, then the default destination URL to Learn more about SharePoint will be used.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changedestinationurlforsharepointhyperlink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changedestinationurlforsharepointhyperlink_1","displayName":"Enabled","description":null,"helpText":null}]},"a4298b84e09274ce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_l_workflowfriendly476","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"a495f02e8fcdadab":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey07_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"a4b6d4677ac53b8a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_powerpointdesigner_l_powerpointdesigneroptions_l_powerpointdesigneroptionsid","displayName":"PowerPoint Designer options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5838ed03-2902-4931-92cf-e349ab09c9b8","categoryName":"PowerPoint Designer","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_powerpointdesigner_l_powerpointdesigneroptions_l_powerpointdesigneroptionsid_0","displayName":"Disable PowerPoint Designer","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_powerpointdesigner_l_powerpointdesigneroptions_l_powerpointdesigneroptionsid_73187","displayName":"Enable PowerPoint Designer","description":null,"helpText":null}]},"a49b1ffde3fd0bc7":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_defaultrootdir_defaultrootdirlist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"a433e94b6bcd8fe5":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_pagetabsappearontheleft_l_specifylocationofthepagetabcontrol","displayName":"Specify location of the page tab control: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44774d3d-387b-4fa7-8de4-d82b039c06d1","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_pagetabsappearontheleft_l_specifylocationofthepagetabcontrol_0","displayName":"Right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_pagetabsappearontheleft_l_specifylocationofthepagetabcontrol_1","displayName":"Left","description":null,"helpText":null}]},"a4bac873e967d7db":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableoutlookfeedbackfeatures","displayName":"Disable Outlook features in the Feedback tab under the File menu in Outlook (User)","description":"This policy setting determines whether Outlook features will be displayed in the Feedback tab under the File menu in Outlook.\r\n\r\nIf you enable this policy setting, then Outlook features will not be displayed in the Feedback tab under the File menu in Outlook.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableoutlookfeedbackfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableoutlookfeedbackfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"a49834cf417ebc4e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_maximumnumberofundos","displayName":"Maximum number of undos (User)","description":"Specifies the maximum number of undo levels.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_maximumnumberofundos_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_maximumnumberofundos_1","displayName":"Enabled","description":null,"helpText":null}]},"a43861c2d3f29a58":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_defaultfilelocation_l_defaultfilelocation0","displayName":"Default file location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":null},"a4b92b256c6b0f0a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_l_setmaximumnumberoftrusteddocumentsspinid","displayName":"Maximum number: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":null},"a4635a4a57796955":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid","displayName":"Random number generator: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":null},"a4dfddd67f1d2184":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_l_datecolon61","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"a4c4f5ddeb054e87":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_usexpsenhancedprintpath","displayName":"Use XPS-enhanced print path (User)","description":"This policy setting allows you to use XPS-enhanced print path when available. \r\n\r\nIf you enable or do not configure this policy setting, the XPS print path will be used.\r\n\r\nIf you disable this policy setting, the XPS print path is not used.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_usexpsenhancedprintpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_usexpsenhancedprintpath_1","displayName":"Enabled","description":null,"helpText":null}]},"a486a266badc1459":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_preventfatallycorruptfilesfromopening","displayName":"Prompt to allow fatally corrupt files to open instead of blocking them (User)","description":"When disabled, fatally corrupt files are prevented from opening. When enabled, the user is warned but may choose to open the file.By default, fatally corrupt files are prevented from opening.","helpText":"","infoUrls":[],"categoryId":"0cea32b4-28be-4164-ae2a-6db33b9dadb7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_preventfatallycorruptfilesfromopening_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_preventfatallycorruptfilesfromopening_1","displayName":"Enabled","description":null,"helpText":null}]},"a4bd9c4d9e518707":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc10_l_datecolon45","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"a4ff97342d7fd25b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usectrlclicktofollowhyperlink","displayName":"Use CTRL + Click to follow hyperlink (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usectrlclicktofollowhyperlink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usectrlclicktofollowhyperlink_1","displayName":"Enabled","description":null,"helpText":null}]},"a4e453497d6da0ea":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_insertclosingphrasetomatchmemostyle","displayName":"Insert closing phrase to match memo style (User)","description":"Checks/unchecks the option \"Insert closing phrase to match memo style.\" This option may be hidden in Word until certain editing languages are enabled.","helpText":"","infoUrls":[],"categoryId":"e8ce968b-91cb-4301-ba98-b37d42bc5213","categoryName":"Automatically as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_insertclosingphrasetomatchmemostyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_insertclosingphrasetomatchmemostyle_1","displayName":"Enabled","description":null,"helpText":null}]},"a438058c7fa587be":{"id":"vendor_msft_firewall_mdmstore_global_presharedkeyencoding","displayName":"Preshared Key Encoding","description":"Specifies the preshared key encoding that is used. MUST be a valid value from the PRESHARED_KEY_ENCODING_VALUES enumeration. Default is 1 [UTF-8]. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, use the local store value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_global_presharedkeyencoding_0","displayName":"None","description":"FW_GLOBAL_CONFIG_PRESHARED_KEY_ENCODING_NONE: Preshared key is not encoded. Instead, it is kept in its wide-character format. This symbolic constant has a value of 0.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_presharedkeyencoding_1","displayName":"UTF8","description":"FW_GLOBAL_CONFIG_PRESHARED_KEY_ENCODING_UTF_8: Encode the preshared key using UTF-8. This symbolic constant has a value of 1.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/a5.json b/public/intune-definitions/a5.json new file mode 100644 index 000000000000..ed9ceb90e29f --- /dev/null +++ b/public/intune-definitions/a5.json @@ -0,0 +1 @@ +{"a50b3cb0024724e4":{"id":"ade_setupassistant_webcontentfiltering","displayName":"Web Content Filtering","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_webcontentfiltering_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_webcontentfiltering_1","displayName":"Show","description":null,"helpText":null}]},"a53af86d4ad70111":{"id":"com.android.devicerestrictionpolicy.camerablockedaosp","displayName":"Block access to camera","description":"If 'True', prevents access to the camera on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might allow access to the camera. Intune only manages access to the device camera. It doesn't have access to pictures or videos.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.camerablockedaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.camerablockedaosp_true","displayName":"True","description":"True","helpText":null}]},"a54dd396327492e5":{"id":"com.apple.applicationaccess_allowcloudprivaterelay","displayName":"Allow Cloud Private Relay","description":"If false, disables iCloud Private Relay. For iOS devices, this restriction requires a supervised device. Available in macOS 12 and later, and iOS 15 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudprivaterelay_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudprivaterelay_true","displayName":"True","description":null,"helpText":null}]},"a5aff7c3963ee8e5":{"id":"com.apple.applicationaccess_allowmusicservice","displayName":"Allow Music Service","description":"If false, disables the Music service, and the Music app reverts to classic mode. Requires a supervised device. Available in iOS 9.3 and later, and macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmusicservice_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmusicservice_true","displayName":"True","description":null,"helpText":null}]},"a51028d246bdca16":{"id":"com.apple.extensiblesso_platformsso_filevaultpolicy","displayName":"FileVault Policy","description":"The policy to apply when using Platform SSO at FileVault unlock on Apple Silicon Macs. Applies when 'AuthenticationMethod' is `Password`.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"a56fd8cf7ea656c0":{"id":"com.apple.managedclient.preferences_autofilladdressenabled","displayName":"Enable AutoFill for addresses","description":"Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.\n\nIf this policy is enabled or not configured, users can manage AutoFill for addresses in Microsoft Edge settings. AutoFill allows users to complete address fields in web forms using previously saved information.\n\nIf this policy is disabled, Microsoft Edge does not suggest, fill in, or save address information. AutoFill is also disabled for all web forms except payment and password fields, and previously saved addresses are not available.\n\nDisabling this policy also turns off \"EdgeAutofillMlEnabled\".\n\nNote that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won't suggest or AutoFill any previous entries.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autofilladdressenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_autofilladdressenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autofilladdressenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a56a2371552aa8a2":{"id":"com.apple.managedclient.preferences_automaticuploadbandwidthpercentage","displayName":"Automatic upload bandwidth percentage","description":"Enables the sync app to automatically set the amount of bandwidth used based on available bandwidth for uploading files. Accepted values are from 1 through 99.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#automaticuploadbandwidthpercentage"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":null},"a5b87fe6a41b7ac0":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_encoding","displayName":"Encoding","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"a54dd0b0340cb684":{"id":"com.apple.managedclient.preferences_printingwebpagelayout","displayName":"Sets layout for printing","description":"Configuring this policy sets the layout for printing webpages.\n\nIf you disable or don't configure this policy, users can decide whether to print webpages in Portrait or Landscape layout.\n\nIf you enable this policy, the selected option is set as the layout option.\n\nPolicy options mapping:\n\n* portrait (0) = Sets layout option as portrait\n\n* landscape (1) = Sets layout option as landscape\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#printingwebpagelayout"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_printingwebpagelayout_0","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printingwebpagelayout_1","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},"a57ddc1d371527ef":{"id":"com.apple.networkusagerules_simrules","displayName":"SIM Rules","description":"An array of SIM rules, that apply to all apps.","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":null},"a559b30100ea8ad3":{"id":"com.apple.softwareupdate_automaticcheckenabled","displayName":"Automatic Check Enabled (Deprecated)","description":"If false, deselects the \"Check for updates\" option and prevents the user from changing the option.","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_automaticcheckenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_automaticcheckenabled_true","displayName":"True","description":null,"helpText":null}]},"a5a4571fcfb4aaf7":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles","displayName":"System Policy All Files","description":"Allows the application access to all protected files, including system administration files.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"a56fd0350b2caac4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupurls_recommended","displayName":"Sites to open when the browser starts (users can override)","description":"Specify a list of websites to open automatically when the browser starts. If you don't configure this policy, no site is opened on startup.\n\nThis policy only works if you also set the \"RestoreOnStartup\" policy to 'Open a list of URLs' (4).\n\nThis policy is available only on specific Windows instances. These instances include devices that are joined to a Microsoft Active Directory domain, devices joined to Microsoft Azure Active Directory`, or devices enrolled for device management.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"a5abf18eccafa657":{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled","displayName":"Search in Sidebar enabled","description":"Search in Sidebar allows users to open search result in sidebar (including sidebar search for Progressive Web Apps).\n\nIf you configure this policy to 'EnableSearchInSidebar' or don't configure it, Search in sidebar is enabled.\n\nIf you configure this policy to 'DisableSearchInSidebarForKidsMode', Search in sidebar is disabled when in Kids mode. Some methods that would normally invoke sidebar search will invoke a traditional search instead.\n\nIf you configure this policy to 'DisableSearchInSidebar', Search in sidebar is disabled. Some methods that would invoke sidebar search invoke a traditional search instead.\n\nPolicy options mapping:\n\n* EnableSearchInSidebar (0) = Enable search in sidebar\n\n* DisableSearchInSidebarForKidsMode (1) = Disable search in sidebar for Kids Mode\n\n* DisableSearchInSidebar (2) = Disable search in sidebar\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled_enablesearchinsidebar","displayName":"Enable search in sidebar","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled_disablesearchinsidebarforkidsmode","displayName":"Disable search in sidebar for Kids Mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled_disablesearchinsidebar","displayName":"Disable search in sidebar","description":null,"helpText":null}]},"a5f9235f8536e3fb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showmicrosoftrewards_recommended","displayName":"Show Microsoft Rewards experiences (users can override)","description":"Show Microsoft Rewards experience and notifications.\nIf you enable this policy:\n - Microsoft account users (excludes Azure AD accounts) in search, new tab page, and earn markets see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings is enabled and toggled on.\n\nIf you disable this policy:\n - Microsoft account users (excludes Azure AD accounts) in search, new tab page, and earn markets won't see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings is disabled and toggled off.\n\nIf you don't configure this policy:\n - Microsoft account users (excludes Azure AD accounts) in search, new tab page, and earn markets see the Microsoft Rewards experience in their Microsoft Edge user profile.\n - The setting to enable Microsoft Rewards in Microsoft Edge settings is enabled and toggled on.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showmicrosoftrewards_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showmicrosoftrewards_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"a5f30dfe8652e1cf":{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionexclusions","displayName":"Remote Encryption Protection Exclusions","description":"Specify IP addresses, subnets, or workstation names to exclude from being blocked by Remote Encryption Protection. Note that attackers can spoof excluded addresses and names to bypass protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"a549c3509c434e45":{"id":"device_vendor_msft_defender_configuration_platformupdateschannel","displayName":"Platform Updates Channel","description":"[to be deprecated] Enable this policy to specify when devices receive Microsoft Defender platform updates during the monthly gradual rollout.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_platformupdateschannel_0","displayName":"Not configured (Default). The device will stay up to date automatically during the gradual release cycle. Suitable for most devices.","description":"Not configured (Default). The device will stay up to date automatically during the gradual release cycle. Suitable for most devices.","helpText":null},{"id":"device_vendor_msft_defender_configuration_platformupdateschannel_2","displayName":"Beta Channel: Devices set to this channel will be the first to receive new updates. Select Beta Channel to participate in identifying and reporting issues to Microsoft. Devices in the Windows Insider Program are subscribed to this channel by default. For use in (manual) test environments only and a limited number of devices.","description":"Beta Channel: Devices set to this channel will be the first to receive new updates. Select Beta Channel to participate in identifying and reporting issues to Microsoft. Devices in the Windows Insider Program are subscribed to this channel by default. For use in (manual) test environments only and a limited number of devices.","helpText":null},{"id":"device_vendor_msft_defender_configuration_platformupdateschannel_3","displayName":"Current Channel (Preview): Devices set to this channel will be offered updates earliest during the monthly gradual release cycle. Suggested for pre-production/validation environments.","description":"Current Channel (Preview): Devices set to this channel will be offered updates earliest during the monthly gradual release cycle. Suggested for pre-production/validation environments.","helpText":null},{"id":"device_vendor_msft_defender_configuration_platformupdateschannel_4","displayName":"Current Channel (Staged): Devices will be offered updates after the monthly gradual release cycle. Suggested to apply to a small, representative part of your production population (~10%).","description":"Current Channel (Staged): Devices will be offered updates after the monthly gradual release cycle. Suggested to apply to a small, representative part of your production population (~10%).","helpText":null},{"id":"device_vendor_msft_defender_configuration_platformupdateschannel_5","displayName":"Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).","description":"Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).","helpText":null},{"id":"device_vendor_msft_defender_configuration_platformupdateschannel_6","displayName":"Critical - Time delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only.","description":"Critical - Time delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only.","helpText":null}]},"a51026e768281aca":{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_approvedsilos","displayName":"Configure list of IEEE 1667 silos usable on your computer","description":"This policy setting allows you to create a list of IEEE 1667 silos, compliant with the Institute of Electrical and Electronics Engineers, Inc. (IEEE) 1667 specification, that are usable on your computer.\r\n\r\nIf you enable this policy setting, only IEEE 1667 silos that match a silo type identifier specified in this policy are usable on your computer.\r\n\r\nIf you disable or do not configure this policy setting, all IEEE 1667 silos on Enhanced Storage devices are usable on your computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-enhancedstorage#admx-enhancedstorage-approvedsilos"],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_approvedsilos_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_approvedsilos_1","displayName":"Enabled","description":null,"helpText":null}]},"a52b24e70aae8445":{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_enableofflinefilesforcashares","displayName":"Offline Files Availability on Continuous Availability Shares","description":"\r\n This policy setting determines the behavior of Offline Files on clients connecting to an SMB share where the Continuous Availability (CA) flag is enabled.\r\n\r\n If you enable this policy setting, the \"Always Available offline\" option will appear in the File Explorer menu on a Windows computer when connecting to a CA-enabled share. Pinning of files on CA-enabled shares using client-side caching will also be possible.\r\n\r\n If you disable or do not configure this policy setting, Windows will prevent use of Offline Files with CA-enabled shares.\r\n\r\n Note: Microsoft does not recommend enabling this group policy. Use of CA with Offline Files will lead to very long transition times between the online and offline states.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-lanmanworkstation#admx-lanmanworkstation-pol-enableofflinefilesforcashares"],"categoryId":"88a2c40a-7b95-4fd8-8ad8-81dc61d4adf5","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_enableofflinefilesforcashares_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_enableofflinefilesforcashares_1","displayName":"Enabled","description":null,"helpText":null}]},"a563403ba8f576c1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_sku_differentiation_signature_set_guid_nis_consumers_ips_sku_differentiation_signature_set_guidlist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","categoryName":"Network Inspection System","options":null},"a5a7300e2d6b96c7":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting","displayName":"Turn on PowerShell Transcription","description":"\r\n This policy setting lets you capture the input and output of Windows PowerShell commands into text-based transcripts.\r\n\r\n If you enable this policy setting, Windows PowerShell will enable transcripting for Windows PowerShell, the Windows PowerShell ISE, and any other\r\n applications that leverage the Windows PowerShell engine. By default, Windows PowerShell will record transcript output to each users' My Documents\r\n directory, with a file name that includes 'PowerShell_transcript', along with the computer name and time started. Enabling this policy is equivalent\r\n to calling the Start-Transcript cmdlet on each Windows PowerShell session.\r\n\r\n If you disable this policy setting, transcripting of PowerShell-based applications is disabled by default, although transcripting can still be enabled\r\n through the Start-Transcript cmdlet.\r\n \r\n If you use the OutputDirectory setting to enable transcript logging to a shared location, be sure to limit access to that directory to prevent users\r\n from viewing the transcripts of other users or computers.\r\n\r\n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enabletranscripting"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_1","displayName":"Enabled","description":null,"helpText":null}]},"a542749da1d1bddd":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8","displayName":"Internet Explorer 8","description":"This policy setting configures the synchronization of user settings for Internet Explorer 8.\r\nBy default, the user settings of Internet Explorer 8 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 8 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 8 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 8 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer8"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8_1","displayName":"Enabled","description":null,"helpText":null}]},"a5e63825c12ff47a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher","displayName":"Microsoft Publisher 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Publisher 2010.\r\nBy default, the user settings of Microsoft Publisher 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Publisher 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Publisher 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010publisher"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher_1","displayName":"Enabled","description":null,"helpText":null}]},"a5f2e0ed6bddf589":{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenarioexecutionpolicy","displayName":"Diagnostics: Configure scenario execution level","description":"This policy setting determines the execution level for Diagnostic Policy Service (DPS) scenarios.\r\n\r\nIf you enable this policy setting, you must select an execution level from the drop-down menu. If you select problem detection and troubleshooting only, the DPS will detect problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will attempt to automatically fix problems it detects or indicate to the user that assisted resolution is available.\r\n\r\nIf you disable this policy setting, Windows cannot detect, troubleshoot, or resolve any problems that are handled by the DPS.\r\n\r\nIf you do not configure this policy setting, the DPS enables all scenarios for resolution by default, unless you configure separate scenario-specific policy settings.\r\n\r\nThis policy setting takes precedence over any scenario-specific policy settings when it is enabled or disabled. Scenario-specific policy settings only take effect if this policy setting is not configured.\r\n\r\nNo reboots or service restarts are required for this policy setting to take effect: changes take effect immediately.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wdi#admx-wdi-wdidpsscenarioexecutionpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenarioexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenarioexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"a512986c6f8b2092":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode","displayName":"Control use of the Headless Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode_1","displayName":"Allow use of the Headless Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode_2","displayName":"Do not allow use of the Headless Mode","description":null,"helpText":null}]},"a512bdbb1e4f9b3f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended","displayName":"Enable AutoFill for credit cards","description":"Setting the policy to True or leaving it unset means users can control autofill suggestions for credit cards in the UI.\r\n\r\nSetting the policy to False means autofill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a54cbe08fad88103":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_insecurecontentallowedforurlsdesc","displayName":"Allow insecure content on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"a53d3c706d613f9c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_sensorsblockedforurlsdesc","displayName":"Block access to sensors on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"a562bc2309c193a4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist_proxybypasslist","displayName":"Comma-separated list of proxy bypass rules (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"a530d962eeff7246":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_enterpriselogourlforbrowser","displayName":"Enterprise Logo URL for a managed browser (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"a51bff82e62d07f7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting","displayName":"Default clipboard setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting_2","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting_3","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},"a5001d0747c3401f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_localfontsblockedforurlsdesc","displayName":"Block Local Fonts permission on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"a587ce3f6fd4162c":{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction","displayName":"Threat Severity Default Action","description":"","helpText":"","infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"a53b6c2f06ef50bc":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_0","displayName":"Logging Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_1","displayName":"Specific Logs Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_2","displayName":"Enable All Logs","description":null,"helpText":null}]},"a56c56f92a8ee56b":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_odfcattachedvhdsddl","displayName":"Attached VHD SDDL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"a5db1d595dc481f4":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval_profileslockedretryinterval","displayName":"Locked Retry Interval (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"a5fcee4ec65bdca9":{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_compatview_sitelist","displayName":"List of sites","description":"","helpText":"","infoUrls":[],"categoryId":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","categoryName":"Compatibility View","options":null},"a5489ab6a3871991":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowautomaticpromptingforactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"a5ca38b3d68a96e3":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic","displayName":"Network Security Restrict NTLM Audit Incoming NTLM Traffic","description":"Network security: Restrict NTLM: Audit Incoming NTLM Traffic This policy setting allows you to audit incoming NTLM traffic. If you select \"Disable\", or do not configure this policy setting, the server will not log events for incoming NTLM traffic. If you select \"Enable auditing for domain accounts\", the server will log events for NTLM pass-through authentication requests that would be blocked when the \"Network Security: Restrict NTLM: Incoming NTLM traffic\" policy setting is set to the \"Deny all domain accounts\" option. If you select \"Enable auditing for all accounts\", the server will log events for all NTLM authentication requests that would be blocked when the \"Network Security: Restrict NTLM: Incoming NTLM traffic\" policy setting is set to the \"Deny all accounts\" option. This policy is supported on at least Windows 7 or Windows Server 2008 R2. Note: Audit events are recorded on this computer in the \"Operational\" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_auditincomingntlmtraffic"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_0","displayName":"Disable","description":"Disable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_1","displayName":"Enable auditing for domain accounts","description":"Enable auditing for domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_2","displayName":"Enable auditing for all accounts","description":"Enable auditing for all accounts","helpText":null}]},"a5c8b22e61857eb7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls","displayName":"Limit cookies from specific websites to the current session","description":"Cookies created by websites that match a URL pattern you define are deleted when the session ends (when the window closes).\r\n\r\nCookies created by websites that don't match the pattern are controlled by the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or by the user's personal configuration. This is also the default behavior if you don't configure this policy.\r\n\r\nIf Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about configuring what happens when Microsoft Edge runs in background mode.\r\n\r\nYou can also use the 'CookiesAllowedForUrls' (Allow cookies on specific sites) and 'CookiesBlockedForUrls' (Block cookies on specific sites) policies to control which websites can create cookies.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- 'CookiesBlockedForUrls'\r\n\r\n- 'CookiesAllowedForUrls'\r\n\r\n- CookiesSessionOnlyForUrls\r\n\r\nIf you set the 'RestoreOnStartup' (Action to take on startup) policy to restore URLs from previous sessions, this policy is ignored, and cookies are stored permanently for those sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"a5ec9f5d3d016136":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch","displayName":"Allow import of data from other browsers on each Microsoft Edge launch","description":"If you enable this policy, users will see a prompt to import their browsing data from other browsers on each Microsoft Edge launch.\r\n\r\nIf you disable this policy, users will never see a prompt to import their browsing data from other browsers on each Microsoft Edge launch.\r\n\r\nIf the policy is left unconfigured, users can activate this feature from a Microsoft Edge prompt or from the Settings page.\r\n\r\nNote: A similar policy named 'AutoImportAtFirstRun' (Automatically import another browser's data and settings at first run) exists. This policy should be used if you want to import supported data from other browsers only once while setting up your device.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_1","displayName":"Enabled","description":null,"helpText":null}]},"a56469cbdd3a12d7":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms","displayName":"Prefer specific key exchange algorithms for TLS","description":"This policy configures Microsoft Edge to prioritize certain key agreement algorithms (supported groups) in TLS 1.3 based on compliance requirements.\r\n\r\nIf you set this policy to 'cnsa2', Microsoft Edge prefers the algorithms required for the Commercial National Security Algorithm Suite 2.0 (CNSA 2.0). If you leave this policy unset or set it to 'default', the browser uses its standard key exchange order.\r\n\r\nThis policy does not guarantee negotiation of a specific algorithm. It is designed to help server operators distinguish clients with compliance requirements and apply higher-strength, non-default algorithms only when appropriate.\r\n\r\nIf this policy would prefer a post-quantum key agreement algorithm but PostQuantumKeyAgreementEnabled is Disabled, the post-quantum setting takes precedence.\r\n\r\nThis policy applies only to TLS 1.3 and QUIC. The default cryptography used by Microsoft Edge already provides strong security, but enabling this policy may reduce performance when accessing websites.\r\n\r\nPolicy options mapping:\r\n\r\n* CNSA2.0 (cnsa2) = Prefer key exchange methods satisfying the requirements of CNSA 2.0\r\n\r\n* Default (default) = Use Microsoft Edge's default supported groups\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: cnsa2","helpText":"","infoUrls":[],"categoryId":"120b24dd-c04a-4291-8f24-9c48fcdc1434","categoryName":"Cryptography compliance policies","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_1","displayName":"Enabled","description":null,"helpText":null}]},"a53edfa0592cc8bd":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended","displayName":"Default search provider name","description":"Specifies the name of the default search provider.\r\n\r\nIf you enable this policy, you set the name of the default search provider.\r\n\r\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\r\n\r\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a5e7189ab2d06d39":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault","displayName":"Configure Automatic HTTPS (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_0","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_1","displayName":"Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_2","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},"a58cd371c3558a37":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout","displayName":"Sets layout for printing (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout_0","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout_1","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},"a5f0ebeaae22f223":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_msaccessexe151","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_msaccessexe151_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_msaccessexe151_1","displayName":"True","description":null,"helpText":null}]},"a55a9d4c0d10f180":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline","displayName":"Update Deadline","description":"This policy setting allows you to set a deadline by when updates to Office must be applied.\r\n\r\nYou can set a deadline in one of two ways:\r\n\r\n Specify a date and time\r\n\r\n Specify a certain number of days after the update has been downloaded\r\n\r\nPrior to the deadline, users will receive multiple reminders to install the updates. If Office isn't updated by the deadline, the updates are applied automatically. If any Office programs are open, they'll be closed, which might result in data loss.\r\n\r\nIf you're specifying a date and time, we recommend that you set the deadline at least a week in the future to allow users time to install the updates.\r\n\r\nIf you enable this policy setting, you need to either specify a date and time or specify a certain number of days.\r\n\r\nNote: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline_1","displayName":"Enabled","description":null,"helpText":null}]},"a547a68de7b918de":{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_enterdcstandbytimeout","displayName":"System Sleep Timeout (seconds):","description":"","helpText":"","infoUrls":[],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":null},"a50fc4c4c03083e0":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_winword","displayName":"Word: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"a51de37e41a74fc9":{"id":"device_vendor_msft_policy_config_userrights_shutdownthesystem","displayName":"Shut Down The System","description":"This security setting determines which users who are logged on locally to the computer can shut down the operating system using the Shut Down command. Misuse of this user right can result in a denial of service.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#shutdownthesystem"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"a5742dcc5deba37a":{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_surveysdisabled","displayName":"Disables external survey links throughout the IDE and installer","description":"This policy disables survey links throughout the IDE and installer, i.e. in the preview feature pane, bulletins, info bars with survey links.","helpText":"","infoUrls":[],"categoryId":"802f3065-0bf1-4578-9d6d-ab1ef02db3ec","categoryName":"Feedback Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_surveysdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_surveysdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a5fdcb9a0d86895c":{"id":"device_vendor_msft_policy_config_windowsai_allowrecallenablement","displayName":"Allow Recall Enablement","description":"This policy setting allows you to determine whether the Recall optional component is available for end users to enable on their device. By default, Recall is disabled for managed commercial devices. Recall isn’t available on managed devices by default, and individual users can’t enable Recall on their own. If this policy is not configured, end users will have the Recall component in a disabled state. If this policy is disabled, the Recall component will be in disabled state and the bits for Recall will be removed from the device. If snapshots were previously saved on the device, they will be deleted when this policy is disabled. Removing Recall requires a device restart. If the policy is enabled, end users will have Recall available on their device. Depending on the state of the DenyAIDataAnalysis policy (Turn off saving snapshots for use with Recall), end users will be able to choose if they want to save snapshots of their screen and use Recall to find things they've seen on their device.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#allowrecallenablement"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_allowrecallenablement_0","displayName":"Recall is not available","description":"Recall is not available","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_allowrecallenablement_1","displayName":"Recall is available","description":"Recall is available","helpText":null}]},"a51ba678a4c35a87":{"id":"device_vendor_msft_windowsdefenderapplicationguard_audit_auditapplicationguard","displayName":"Audit Application Guard","description":"This policy setting allows you to decide whether auditing events can be collected from Microsoft Defender Application Guard. If you enable this setting, Application Guard inherits auditing policies from your device and logs system events from the Application Guard container to your host. If you disable this setting, event logs aren't collected from your Application Guard container.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_audit_auditapplicationguard_0","displayName":"Disabled","description":"Audit event logs aren't collected for Application Guard.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_audit_auditapplicationguard_1","displayName":"Enabled","description":"Application Guard inherits its auditing policies from system and starts to audit security events for Application Guard container.","helpText":null}]},"a558f0f0a1e70799":{"id":"extensionsettings_managedextensions_generickey_privatebrowsing","displayName":"Private Browsing","description":"Controls whether an extension is allowed in Private Browsing.\n* Allowed - The user is allowed to turn the extension on or off in Private Browsing\n* AlwaysOn - The extension will always be on in Private Browsing if the extension is on outside of Private Browsing\n* AlwaysOff - The extension will never be on in Private Browsing","helpText":null,"infoUrls":[],"categoryId":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","categoryName":"Safari Extension Settings","options":[{"id":"extensionsettings_managedextensions_generickey_privatebrowsing_0","displayName":"Allowed","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_privatebrowsing_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_privatebrowsing_2","displayName":"AlwaysOff","description":null,"helpText":null}]},"a5aab8fbb161e387":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments","displayName":"Turn off trusted documents (User)","description":"This policy setting allows you to turn off the trusted documents feature. The trusted documents feature allows users to always enable active content in documents such as macros, ActiveX controls, data connections, etc. so that they are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.\r\n\r\nIf you enable this policy setting, you will turn off the trusted documents feature. Users will receive a security prompt every time a document containing active content is opened.\r\n\r\nIf you disable or do not configure this policy setting, documents will be trusted when users enable content for a document, and users will not receive a security prompt.","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"a55d9a534a31eb70":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11","displayName":"Trusted Location #11 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_1","displayName":"Enabled","description":null,"helpText":null}]},"a59278b86c8f324d":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_localusersgroups","displayName":"Local Users and Groups (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-localusersgroups"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_localusersgroups_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_localusersgroups_1","displayName":"Enabled","description":null,"helpText":null}]},"a55a23b2d656553c":{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_1","displayName":"Removable Disks: Deny read access (User)","description":"This policy setting denies read access to removable disks.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removabledisks-denyread-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"a505e57b0b13618c":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxyport","displayName":"Proxy port (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"a5929b029428560b":{"id":"user_vendor_msft_policy_config_browser_allowflashclicktorun","displayName":"Allow Flash Click To Run (User)","description":"Configure the Adobe Flash Click-to-Run setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowflashclicktorun"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowflashclicktorun_0","displayName":"Block","description":"Load and run Adobe Flash content automatically.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowflashclicktorun_1","displayName":"Allow","description":"Does not load or run Adobe Flash content automatically. Requires action from the user.","helpText":null}]},"a52ff5ba8a56e499":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled","displayName":"List of types that should be excluded from synchronization (User)","description":"If this policy is set all specified data types will be excluded from synchronization both for Chrome Sync as well as for roaming profile synchronization. This can be beneficial to reduce the size of the roaming profile or limit the type of data uploaded to the Chrome Sync Servers.\r\n\r\nThe current data types for this policy are: \"bookmarks\", \"readingList\", \"preferences\", \"passwords\", \"autofill\", \"themes\", \"typedUrls\", \"extensions\", \"apps\", \"tabs\", \"wifiConfigurations\". Those names are case sensitive!\r\n\r\nExample value:\r\n\r\nbookmarks","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a5b766bff0c2abc9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled","displayName":"Force WebSQL in third-party contexts to be re-enabled. (User)","description":"WebSQL in third-party contexts (e.g., cross-site iframes) is off by default as of M97 and will be fully removed in M101.\r\nIf this policy is set to false or unset, WebSQL in third party contexts will remain off.\r\nIf this policy is set to true, WebSQL in third-party contexts will be re-enabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a597caf82ed1ed05":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting","displayName":"Control use of the File Handling API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting_2","displayName":"Do not allow any web app to access file types via the File Handling API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting_3","displayName":"Allow web apps to ask the user to grant access to file types via the File Handling API","description":null,"helpText":null}]},"a5d01567ecd7f414":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showcontrolcharacters","displayName":"Show control characters (User)","description":"Enabling this policy selects the user option to \"Show control characters\". This option appears in the Advanced category when certain languages have been enabled.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showcontrolcharacters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showcontrolcharacters_1","displayName":"Enabled","description":null,"helpText":null}]},"a5727eb7adc529a4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets","displayName":"Excel 2 worksheets (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_1","displayName":"Enabled","description":null,"helpText":null}]},"a54497d364fa0aac":{"id":"user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols","displayName":"Turn off blocking of outdated ActiveX controls for Internet Explorer (User)","description":"This policy setting determines whether Internet Explorer blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.\n\nIf you enable this policy setting, Internet Explorer stops blocking outdated ActiveX controls.\n\nIf you disable or don't configure this policy setting, Internet Explorer continues to block specific outdated ActiveX controls.\n\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotblockoutdatedactivexcontrols"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"a57acf0c19e595aa":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809","displayName":"Use Pop-up Blocker (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_3","displayName":"Disable","description":null,"helpText":null}]},"a5c2b377407cec33":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"a5837351051341d5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines","displayName":"Manage Search Engines (User)","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine.\r\nYou do not need to specify the encoding. Starting in Microsoft Edge 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge 80.\r\n\r\nStarting in Microsoft Edge 83, you can enable search engine discovery with the allow_search_engine_discovery optional parameter. This parameter must be the first item in the list. If allow_search_engine_discovery is not specified, search engine discovery will be disabled by default.\r\n\r\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\r\n\r\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\r\n\r\nIf the 'DefaultSearchProviderSearchURL' (Default search provider search URL) policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allow_search_engine_discovery\": true\r\n }, \r\n {\r\n \"is_default\": true, \r\n \"suggest_url\": \"https://www.example1.com/qbox?query={searchTerms}\", \r\n \"search_url\": \"https://www.example1.com/search?q={searchTerms}\", \r\n \"name\": \"Example1\", \r\n \"keyword\": \"example1.com\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example2.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example2.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example2\", \r\n \"keyword\": \"example2.com\", \r\n \"image_search_post_params\": \"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}\", \r\n \"search_url\": \"https://www.example2.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example3.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example3.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example3\", \r\n \"keyword\": \"example3.com\", \r\n \"encoding\": \"UTF-8\", \r\n \"search_url\": \"https://www.example3.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"search_url\": \"https://www.example4.com/search?q={searchTerms}\", \r\n \"name\": \"Example4\", \r\n \"keyword\": \"example4.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_1","displayName":"Enabled","description":null,"helpText":null}]},"a5d7733caa6849a6":{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy","displayName":"Microsoft Edge management service policy overrides platform policy. (User)","description":"If you enable this policy, the cloud-based Microsoft Edge management service policy takes precedence if it conflicts with platform policy.\r\n\r\nIf you disable or don't configure this policy, platform policy takes precedence if it conflicts with the cloud-based Microsoft Edge management service policy.\r\n\r\nThis mandatory policy affects machine scope cloud-based Microsoft Edge management policies.\r\n\r\nMachine policies apply to all edge browser instances regardless of the user who is logged in.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"a509715915133c00":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_extensioninstalltypeblocklistdesc","displayName":"Blocklist for extension install types (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"a587a636cacce826":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended","displayName":"Allow importing of Cookies (User)","description":"Allows users to import Cookies from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Cookies aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Cookies are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a57342a55221984d":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox","displayName":"Configure the new tab page search box experience (User)","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL).\r\n\r\n If you disable or don't configure this policy and:\r\n\r\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\r\n- If the address bar default search engine is not Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\r\n\r\n\r\nIf you enable this policy and set it to:\r\n\r\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\r\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\r\n\r\nPolicy options mapping:\r\n\r\n* bing (bing) = Search box (Recommended)\r\n\r\n* redirect (redirect) = Address bar\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: bing","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_1","displayName":"Enabled","description":null,"helpText":null}]},"a5cf48bb540f62c6":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended","displayName":"Shopping in Microsoft Edge Enabled (User)","description":"This policy lets users compare the prices of a product they are looking at, get coupons from the website they're on, or auto-apply coupons during checkout.\r\n\r\nIf you enable or don't configure this policy, shopping features such as price comparison and coupons will be automatically applied for retail domains. Coupons for the current retailer and prices from other retailers will be fetched from a server.\r\n\r\nIf you disable this policy shopping features such as price comparison and coupons will not be automatically found for retail domains.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a563d40279820d22":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled","displayName":"Allow notifications to set Microsoft Edge as default PDF reader (User)","description":"This policy setting lets you decide whether employees should receive recommendations to set Microsoft Edge as PDF handler.\r\n\r\nIf you enable or don't configure this setting, employees receive recommendations from Microsoft Edge to set itself as the default PDF handler.\r\n\r\nIf you disable this setting, employees will not receive any notifications from Microsoft Edge to set itself as the default PDF handler.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a564b51641533b07":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled","displayName":"Microsoft Edge Insider Promotion Enabled (User)","description":"Shows content promoting the Microsoft Edge Insider channels on the About Microsoft Edge settings page.\r\n\r\nIf you enable or don't configure this policy, the Microsoft Edge Insider promotion content will be shown on the About Microsoft Edge page.\r\n\r\nIf you disable this policy, the Microsoft Edge Insider promotion content will not be shown on the About Microsoft Edge page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a55cc309115121d7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacework2_l_work2adreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"a5a8ee1a70003e12":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsoutlook","displayName":"Outlook-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsoutlook_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsoutlook_1","displayName":"True","description":null,"helpText":null}]},"a5068c4cab2258d4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode_l_empty238","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode_l_empty238_0","displayName":"Full","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode_l_empty238_1","displayName":"Partial","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode_l_empty238_2","displayName":"Mixed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_hebrewmode_l_empty238_3","displayName":"Mixed authorized","description":null,"helpText":null}]},"a58139b54b93b274":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_spoofyemails","displayName":"Hide warnings about suspicious domain names in e-mail addresses (User)","description":"By default, users are warned about suspicious domain names in the e-mail addresses. Use this setting to hide warnings about suspicious domain names in e-mail addreses.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_spoofyemails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_spoofyemails_1","displayName":"Enabled","description":null,"helpText":null}]},"a5e682813cb19fc0":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_descriptioncolon6","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"a58d6ada600f154e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":null},"a57ff017851e1129":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of Word add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Word\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\Word\\Addins.\r\n\r\nTo obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.\r\n\r\nYou can also obtain the ProgID or the file name of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.\r\n\r\nTo specify that a Word add-in is always enabled, in addition to configuring this policy setting, you must also specify a location that is used as a trusted source for open files in Word. To do this, configure the \"Trusted Locations\" policy setting at User Configuration\\Administrative Templates\\Microsoft Word 2016\\Word Options\\Security\\Trust Center, and then move the add-in file into the trusted location.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"a56b29f2c5fea831":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_recentlyusedfilelist","displayName":"Number of documents in the Recent Documents list (User)","description":"This policy setting specifies the number of entries displayed in the Recent Documents list that appears when users click Open on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent Documents list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Documents list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_recentlyusedfilelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_recentlyusedfilelist_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/a6.json b/public/intune-definitions/a6.json new file mode 100644 index 000000000000..429bace563ad --- /dev/null +++ b/public/intune-definitions/a6.json @@ -0,0 +1 @@ +{"a63adce1145bc373":{"id":"ade_setupassistant_screensaver","displayName":"Screen Saver","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_screensaver_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_screensaver_1","displayName":"Show","description":null,"helpText":null}]},"a69cf3a2c80fc3e0":{"id":"ade_setupassistant_tvroom","displayName":"TV Room","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_tvroom_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_tvroom_1","displayName":"Show","description":null,"helpText":null}]},"a6b746264190f764":{"id":"com.apple.applicationaccess_allowappleintelligencereport","displayName":"Allow Apple Intelligence Report (Deprecated)","description":"When false, disables Apple Intelligence reports.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowappleintelligencereport_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowappleintelligencereport_true","displayName":"True","description":null,"helpText":null}]},"a65bfa0fd048297a":{"id":"com.apple.applicationaccess_ratingmoviesie","displayName":"Rating Movies - Ireland","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesie_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesie_1","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesie_2","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesie_3","displayName":"12A","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesie_4","displayName":"15A","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesie_5","displayName":"16","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesie_6","displayName":"18","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesie_7","displayName":"All","description":null,"helpText":null}]},"a6d645d69ac3dcee":{"id":"com.apple.extensiblesso_realm_kerberos","displayName":"Realm","description":"The Kerberos realm, which should be properly capitalized. If in an Active Directory forest, this is the realm where the user logs in.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"a6e669994fb3d1e8":{"id":"com.apple.managedclient.preferences_authschemes","displayName":"Supported authentication schemes","description":"Specifies which HTTP authentication schemes are supported.\n\nYou can configure the policy by using these values: 'basic', 'digest', 'ntlm', and 'negotiate'. Separate multiple values with commas.\n\nIf you don't configure this policy, all four schemes are used.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#authschemes"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"a6def709251cb1e2":{"id":"com.apple.managedclient.preferences_smartscreenenabled","displayName":"Configure Microsoft Defender SmartScreen","description":"This policy setting lets you configure whether to turn on Microsoft Defender SmartScreen. Microsoft Defender SmartScreen provides warning messages to help protect your users from potential phishing scams and malicious software. By default, Microsoft Defender SmartScreen is turned on.\n\nIf you enable this setting, Microsoft Defender SmartScreen is turned on.\n\nIf you disable this setting, Microsoft Defender SmartScreen is turned off.\n\nIf you don't configure this setting, users can choose whether to use Microsoft Defender SmartScreen.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#smartscreenenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_smartscreenenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_smartscreenenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a6729e4e63ed4a09":{"id":"com.apple.managedclient.preferences_spellcheckenabled","displayName":"Enable spellcheck","description":"If you enable or don't configure this policy, the user can use spellcheck.\n\nIf you disable this policy, the user can't use spellcheck and the \"SpellcheckLanguage\" and \"SpellcheckLanguageBlocklist\" policies are also disabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#spellcheckenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_spellcheckenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_spellcheckenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a61706898b629f2a":{"id":"com.apple.managedclient.preferences_threattypesettings_item_key","displayName":"Threat type","description":"Type of the threat for which the behavior is configured.","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_threattypesettings_item_key_0","displayName":"potentially_unwanted_application","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_threattypesettings_item_key_1","displayName":"archive_bomb","description":null,"helpText":null}]},"a6a5d353f17517cf":{"id":"com.apple.preference.security_dontallowpasswordresetui","displayName":"Do Not Allow Password Reset UI","description":"If true, disables user changes to the password.","helpText":null,"infoUrls":[],"categoryId":"8abddb23-7036-4ba8-8912-529279a849ea","categoryName":"Security Preferences","options":[{"id":"com.apple.preference.security_dontallowpasswordresetui_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.preference.security_dontallowpasswordresetui_true","displayName":"True","description":null,"helpText":null}]},"a674ad816384fe1b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.doubleclickclosetabenabled","displayName":"Double Click feature in Microsoft Edge enabled (only available in China)","description":"This policy lets you configure the double click feature in Microsoft Edge.\n\nDouble Click lets users close a tab by double clicking the left mouse button.\n\nIf you enable or don't configure this policy, you can use the double click feature to close a tab on Microsoft Edge to start using this feature.\n\nIf you disable this policy, you can't use the double click feature in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.doubleclickclosetabenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.doubleclickclosetabenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a6faafa5f962c7ca":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_4_channel_log_filelogaccess","displayName":"Log Access","description":null,"helpText":"","infoUrls":[],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":null},"a6107cb788927ddc":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_rules","displayName":"Configure Attack Surface Reduction rules","description":"\r\n Set the state for each Attack Surface Reduction (ASR) rule.\r\n\r\n After enabling this setting, you can set each rule to the following in the Options section:\r\n - Block: the rule will be applied\r\n - Audit Mode: if the rule would normally cause an event, then it will be recorded (although the rule will not actually be applied)\r\n - Off: the rule will not be applied\r\n - Not Configured: the rule is enabled with default values\r\n - Warn: the rule will be applied and the end-user will have the option to bypass the block\r\n\r\n Unless the ASR rule is disabled, a subsample of audit events are collected for ASR rules will the value of not configured.\r\n\r\n Enabled:\r\n Specify the state for each ASR rule under the Options section for this setting.\r\n Enter each rule on a new line as a name-value pair:\r\n - Name column: Enter a valid ASR rule ID\r\n - Value column: Enter the status ID that relates to state you want to specify for the associated rule\r\n\r\n The following status IDs are permitted under the value column:\r\n - 1 (Block)\r\n - 0 (Off)\r\n - 2 (Audit)\r\n - 5 (Not Configured)\r\n - 6 (Warn)\r\n\r\n \r\n Example:\r\n xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 0\r\n xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 1\r\n xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 2\r\n\r\n Disabled:\r\n No ASR rules will be configured.\r\n\r\n Not configured:\r\n Same as Disabled.\r\n\r\n You can exclude folders or files in the \"Exclude files and paths from Attack Surface Reduction Rules\" GP setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-exploitguard-asr-rules"],"categoryId":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","categoryName":"Attack Surface Reduction","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_rules_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_rules_1","displayName":"Enabled","description":null,"helpText":null}]},"a68913bffe4af521":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_threats_threatiddefaultaction","displayName":"Specify threats upon which default action should not be taken when detected","description":"This policy setting customize which remediation action will be taken for each listed Threat ID when it is detected during a scan. Threats should be added under the Options for this setting. Each entry must be listed as a name value pair. The name defines a valid Threat ID, while the value contains the action ID for the remediation action that should be taken.\r\n\r\n Valid remediation action values are:\r\n 2 = Quarantine\r\n 3 = Remove\r\n 6 = Ignore\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-threats-threatiddefaultaction"],"categoryId":"2c43699e-90b5-4da6-9689-fe5ad3b25ac9","categoryName":"Threats","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_threats_threatiddefaultaction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_threats_threatiddefaultaction_1","displayName":"Enabled","description":null,"helpText":null}]},"a669bd4f87b1f5d2":{"id":"device_vendor_msft_policy_config_admx_msched_activationboundarypolicy_activationboundary","displayName":"Regular maintenance activation boundary","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"a6abb77132ae2928":{"id":"device_vendor_msft_policy_config_admx_msi_disablepatch","displayName":"Prevent users from using Windows Installer to install updates and upgrades","description":"This policy setting prevents users from using Windows Installer to install patches.\r\n\r\nIf you enable this policy setting, users are prevented from using Windows Installer to install patches. Patches are updates or upgrades that replace only those program files that have changed. Because patches can be easy vehicles for malicious programs, some installations prohibit their use.\r\n\r\nNote: This policy setting applies only to installations that run in the user's security context.\r\n\r\nIf you disable or do not configure this policy setting, by default, users who are not system administrators cannot apply patches to installations that run with elevated system privileges, such as those offered on the desktop or in Add or Remove Programs.\r\n\r\nAlso, see the \"Enable user to patch elevated products\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disablepatch"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disablepatch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disablepatch_1","displayName":"Enabled","description":null,"helpText":null}]},"a62fdd1e1170b667":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvweight","displayName":"Set Weight in the DC Locator DNS SRV records","description":"This policy setting specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC.\r\n\r\nThe Weight field in the SRV record can be used in addition to the Priority value to provide a load-balancing mechanism where multiple servers are specified in the SRV records Target field and are all set to the same priority. The probability with which the DNS client randomly selects the target host to be contacted is proportional to the Weight field value in the SRV record.\r\n\r\nTo specify the Weight in the DC Locator DNS SRV records, click Enabled, and then enter a value. The range of values is from 0 to 65535.\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-ldapsrvweight"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvweight_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvweight_1","displayName":"Enabled","description":null,"helpText":null}]},"a6126c3879defd82":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup","displayName":"Excel 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Excel 2016.\r\nMicrosoft Excel 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Excel 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Excel 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016excelbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"a680b3ba82f3bc35":{"id":"device_vendor_msft_policy_config_admx_userprofiles_dontforceunloadhive","displayName":"Do not forcefully unload the users registry at user logoff","description":"This policy setting controls whether Windows forcefully unloads the user's registry at logoff, even if there are open handles to the per-user registry keys. \r\n\r\nNote: This policy setting should only be used for cases where you may be running into application compatibility issues due to this specific Windows behavior. It is not recommended to enable this policy by default as it may prevent users from getting an updated version of their roaming user profile.\r\n\r\nIf you enable this policy setting, Windows will not forcefully unload the users registry at logoff, but will unload the registry when all open handles to the per-user registry keys are closed.\r\n\r\nIf you disable or do not configure this policy setting, Windows will always unload the users registry at logoff, even if there are any open handles to the per-user registry keys at user logoff.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-dontforceunloadhive"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_dontforceunloadhive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_dontforceunloadhive_1","displayName":"Enabled","description":null,"helpText":null}]},"a63435d906dd7713":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue","displayName":"Application locale","description":"Setting the policy specifies the locale Google Chrome uses.\r\n\r\nTurning it off or leaving it unset means the locale will be the first valid locale from:\r\n1) The user specified locale (if configured).\r\n2) The system locale.\r\n3) The fallback locale (en-US).\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_1","displayName":"Enabled","description":null,"helpText":null}]},"a6602872e34d049e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting","displayName":"Default cookies setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_1","displayName":"Allow all sites to set local data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_2","displayName":"Do not allow any site to set local data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_4","displayName":"Keep cookies for the duration of the session","description":null,"helpText":null}]},"a637e3772bcfaead":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"a65a2371208c310f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections","displayName":"Allow remote support connections to this machine","description":"If this policy is disabled, the remote support host cannot be started or configured to accept incoming connections.\r\n\r\nThis policy does not affect remote access scenarios.\r\n\r\nThis policy does not prevent enterprise admins from connecting to managed Chrome OS devices.\r\n\r\nThis policy has no effect if enabled, left empty, or is not set.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections_1","displayName":"Enabled","description":null,"helpText":null}]},"a6c63ed3caef3815":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain","displayName":"Enable curtaining of remote access hosts","description":"Setting the policy to Enabled turns off remote access hosts' physical input and output devices during a remote connection.\r\n\r\nSetting the policy to Disabled or leaving it unset lets both local and remote users interact with the host while it's shared.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain_1","displayName":"Enabled","description":null,"helpText":null}]},"a6884d1657365267":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange","displayName":"Restrict the UDP port range used by the remote access host","description":"Setting the policy restricts the UDP port range used by the remote access host in this machine.\r\n\r\nLeaving the policy unset or set to an empty string means the remote access host can use any available port.\r\n\r\nNote: If RemoteAccessHostFirewallTraversal is Disabled, the remote access host will use UDP ports in the 12400-12409 range.\r\n\r\nExample value: 12400-12409","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},"a6330ce71d01395c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins","displayName":"Allow file or directory picker APIs to be called without prior user gesture","description":"For security reasons, the\r\nshowOpenFilePicker(),\r\nshowSaveFilePicker() and\r\nshowDirectoryPicker() web APIs\r\nrequire a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail.\r\n\r\nWith this policy set, admins can specify origins on which these APIs can be\r\ncalled without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is\r\nnot an accepted value for this policy.\r\n\r\nIf this policy is unset, all origins will require a prior user gesture to call\r\nthese APIs.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"a689b894f92917a8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_2","displayName":"Denies the Local Fonts permission on all sites by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_3","displayName":"Ask every time a site wants obtain the Local Fonts permission","description":null,"helpText":null}]},"a6e6368d44be15c3":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxforegrounddownloadbandwidth","displayName":"DO Max Foreground Download Bandwidth","description":"Specifies the maximum foreground download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxforegrounddownloadbandwidth"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"a6c5297d0581a814":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_list","displayName":"Prevented device IDs","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"a65e44e99e5abe67":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictclientsallowedtomakeremotecallstosam","displayName":"Network Access Restrict Clients Allowed To Make Remote Calls To SAM","description":"Network access: Restrict clients allowed to make remote calls to SAM This policy setting allows you to restrict remote rpc connections to SAM. If not selected, the default security descriptor will be used. This policy is supported on at least Windows Server 2016.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_restrictclientsallowedtomakeremotecallstosam"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"a6ce16120306148c":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled","displayName":"Enable Drop feature in Microsoft Edge","description":"This policy lets you configure the Drop feature in Microsoft Edge.\r\n\r\nDrop lets users send messages or files to themselves.\r\n\r\nIf you enable or don't configure this policy, you can use the Drop feature in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Drop feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a6d353d6fab3f3ef":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled","displayName":"Allow users to open files using the DirectInvoke protocol","description":"Allow users to open files using the DirectInvoke protocol. The DirectInvoke protocol allows websites to request that the browser open files from a specific URL using a specific file handler on the user's computer or device.\r\n\r\nIf you enable or don't configure this policy, users can open files using the DirectInvoke protocol.\r\n\r\nIf you disable this policy, users can't open files using the DirectInvoke protocol. Instead, the file will be saved to the file system.\r\n\r\nNote: Disabling DirectInvoke may prevent certain Microsoft SharePoint Online features from working as expected.\r\n\r\nFor more information about DirectInvoke, see https://go.microsoft.com/fwlink/?linkid=2103872 and https://go.microsoft.com/fwlink/?linkid=2099871.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a69f1167163dfd81":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended","displayName":"Block Sleeping Tabs on specific sites","description":"Define a list of sites, based on URL patterns, that are not allowed to be put to sleep by Sleeping Tabs.\r\n\r\nIf the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is disabled, this list is not used and no sites will be put to sleep automatically.\r\n\r\nIf you don't configure this policy, all sites will be eligible to be put to sleep unless the user's personal configuration blocks them.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a66a3f453c89278a":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled","displayName":"Application Guard Traffic Identification","description":"If you enable or don't configure this policy, Application Guard will add an extra HTTP header (X-MS-ApplicationGuard-Initiated) to all outbound HTTP requests made from the Application Guard container.\r\n\r\nIf you disable this policy, the extra header is not added to the traffic.","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a602ca0b8c7b0b73":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_excelexe169","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_excelexe169_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_excelexe169_1","displayName":"True","description":null,"helpText":null}]},"a615068bf4d20602":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_forcedenytheseapps","displayName":"Let Apps Access Radios Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"a6e4039f5dfd42d7":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday","displayName":"Mute notifications all day","description":null,"helpText":null,"infoUrls":[],"categoryId":"ad1ecbf4-75da-4dc1-9354-7d00c0e2af72","categoryName":"Allday","options":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_1","displayName":"Require","description":null,"helpText":null}},"a6fea5dd0fbddb30":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_settingtype","displayName":"Setting type","description":"Specifies the type of system setting this rule applies to.","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_networksettings","displayName":"Network settings","description":null,"helpText":null}},"a6d55e1c84a9a944":{"id":"passcode_customregex_description_generickey","displayName":"ANY","description":"A localized description.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"a6a7f752c99d3dff":{"id":"softwareupdate_beta_requireprogram_token","displayName":"Token","description":"The Apple Business Manager or Apple School Manager seeding service token for the organization the MDM server is part of. This token is used to enroll the device in the corresponding beta program.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"a63f976bdbb19ad7":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder","displayName":"Do not automatically make specific redirected folders available offline (User)","description":"This policy setting allows you to control whether individual redirected shell folders are available offline by default.\r\n\r\nFor the folders affected by this setting, users must manually select the files they wish to make available offline.\r\n\r\nIf you disable or do not configure this policy setting, all redirected shell folders are automatically made available offline. All subfolders within the redirected folders are also made available offline.\r\n\r\nNote: This policy setting does not prevent files from being automatically cached if the network share is configured for \"Automatic Caching\", nor does it affect the availability of the \"Always available offline\" menu option in the user interface.\r\n\r\nNote: The configuration of this policy for any folder will override the configured value of \"Do not automatically make all redirected folders available offline\".\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-disablefradminpinbyfolder"],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"a65465715337fed8":{"id":"user_vendor_msft_policy_config_admx_startmenu_nouserfolderonstartmenu","displayName":"Remove user folder link from Start Menu (User)","description":"If you enable this policy the start menu will not show a link to the user's storage folder.\r\n\r\nIf you disable or do not configure this policy, the start menu will display a link, unless the user chooses to remove it in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nouserfolderonstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nouserfolderonstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nouserfolderonstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"a64f9c50128344a8":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_user","displayName":"Use Remote Desktop Easy Print printer driver first (User)","description":"This policy setting allows you to specify whether the Remote Desktop Easy Print printer driver is used first to install all client printers. \r\n\r\nIf you enable or do not configure this policy setting, the RD Session Host server first tries to use the Remote Desktop Easy Print printer driver to install all client printers. If for any reason the Remote Desktop Easy Print printer driver cannot be used, a printer driver on the RD Session Host server that matches the client printer is used. If the RD Session Host server does not have a printer driver that matches the client printer, the client printer is not available for the Remote Desktop session.\r\n\r\nIf you disable this policy setting, the RD Session Host server tries to find a suitable printer driver to install the client printer. If the RD Session Host server does not have a printer driver that matches the client printer, the server tries to use the Remote Desktop Easy Print driver to install the client printer. If for any reason the Remote Desktop Easy Print printer driver cannot be used, the client printer is not available for the Remote Desktop Services session.\r\n\r\nNote: If the \"Do not allow client printer redirection\" policy setting is enabled, the \"Use Remote Desktop Easy Print printer driver first\" policy setting is ignored.\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-easy-print-user"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_user_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_user_1","displayName":"Enabled","description":null,"helpText":null}]},"a6616d62f0fbb90b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc","displayName":"Block images on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"a650f07475eaedd1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"a6c831ce22f7aceb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"a619825be90396fd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist","displayName":"Allow media autoplay on a whitelist of URL patterns (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"a6a8a0b28aefde39":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_0","displayName":"Battery Saver Mode will be disabled.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_1","displayName":"Battery Saver Mode will be enabled when the device is on battery power and battery level is low.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_2","displayName":"This value is deprecated as of M121. In M121 and after, values will be treated as EnabledBelowThreshold.","description":null,"helpText":null}]},"a6d26fc5f94cd70b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support (User)","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\r\n\r\nSetting the policy to Enabled or leaving it unset means Google Chrome will accept web contents using the compression dictionary transport feature.\r\nSetting the policy to Disabled turns off the compression dictionary transport feature.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a6ff47ac0b6deaa9":{"id":"user_vendor_msft_policy_config_excel16v10~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_excelforcesupportforunicodesurrogates","displayName":"Force support for Unicode surrogates in Excel 2021 and Excel 2024 (User)","description":"Warning: this setting alters how your app calculates LEN, MID, SEARCH, FIND and REPLACE and forces files to Compatibility Version 2. When these workbooks are shared, users may see different calculation results. This setting only applies to non-subscription Excel 2021 and Excel 2024.\r\n \r\nIf you enable this policy setting, when any workbook is opened in non-subscription Excel 2021 or Excel 2024, it will automatically be set to Compatibility Version 2. This will cause LEN, MID, SEARCH, FIND and REPLACE functions to calculate differently in those workbooks.\r\n \r\nIf you disable or do not configure this policy setting, the Compatibility Version will not be automatically set when a file is opened in any version of non-subscription Excel 2021 and Excel 2024 (this setting never affects other versions).","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v10~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_excelforcesupportforunicodesurrogates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v10~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_excelforcesupportforunicodesurrogates_1","displayName":"Enabled","description":null,"helpText":null}]},"a6651f4c77d6694c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_descriptioncolon47","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"a64f99fc83761133":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszonejavapermissions"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"a637e153e252d2b9":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowautomaticpromptingforfiledownloads"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"a642fff23acfbb24":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"a6fb184745380fc2":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_proxyserver","displayName":"Configure address or URL of proxy server (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"a6408821486074f8":{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions (User)","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known or potentially dangerous downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockAllDownloads' to block all downloads.\r\n\r\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\r\n\r\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\nPolicy options mapping:\r\n\r\n* DefaultDownloadSecurity (0) = No special restrictions\r\n\r\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\r\n\r\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\r\n\r\n* BlockAllDownloads (3) = Block all downloads\r\n\r\n* BlockMaliciousDownloads (4) = Block malicious downloads\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a60aeb69b8201eba":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled","displayName":"Allow Local Network Access (LNA) requests in subframes without explicit delegation (User)","description":"Controls whether Local Network Access (LNA) permissions are inherited by cross-origin subframes.\r\n\r\nBy default, Local Network Access permissions can be requested in cross-origin subframes only if they are explicitly delegated.\r\n\r\nIf you enable this policy, subframes inherit all LNA Permissions Policy features by default and can make local network requests, which trigger the permission prompt.\r\n\r\nIf you disable or don't configure this policy, subframes must be explicitly delegated the Permissions Policy feature to make local network requests and trigger the permission prompt.\r\n\r\nThis policy applies to the Permissions Policy features \"local-network-access\", \"loopback-network\", and \"local-network\".\r\n\r\nFor more information about Local Network Access, see https://learn.microsoft.com/deployedge/ms-edge-local-network-access.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a621f4e0f6478d0c":{"id":"user_vendor_msft_policy_config_notifications_disallowtilenotification","displayName":"Disallow Tile Notification (User)","description":"This policy setting turns off tile notifications. If you enable this policy setting, applications and system features will not be able to update their tiles and tile badges in the Start screen. If you disable or do not configure this policy setting, tile and badge notifications are enabled and can be turned off by the administrator or user. No reboots or service restarts are required for this policy setting to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Notifications#disallowtilenotification"],"categoryId":"cb1e177e-8f06-4a69-8215-ec1e91c19e30","categoryName":"Notifications","options":[{"id":"user_vendor_msft_policy_config_notifications_disallowtilenotification_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"user_vendor_msft_policy_config_notifications_disallowtilenotification_1","displayName":"Allow","description":"Enabled.","helpText":null}]},"a66b5af67839e18c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastservicecreatesharednotes3","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastservicecreatesharednotes3_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastservicecreatesharednotes3_1","displayName":"True","description":null,"helpText":null}]},"a6c2f008bfa1fcdb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastserviceserverinfo6","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"a6dc035a40d856cd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacemobile_l_mobilelabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"a674ad058531e770":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyvisio","displayName":"Disallow in Visio (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyvisio_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyvisio_1","displayName":"True","description":null,"helpText":null}]},"a63eafb7ba39ab81":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchsenegal","displayName":"French (Senegal) (User)","description":"Enables the editing language French (Senegal)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchsenegal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchsenegal_1","displayName":"Enabled","description":null,"helpText":null}]},"a622cbf40ffa5598":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc13_l_allowsubfolders13","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc13_l_allowsubfolders13_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc13_l_allowsubfolders13_1","displayName":"True","description":null,"helpText":null}]},"a68ee1351dd6d7cd":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"1ae8c95a-5748-4647-80f8-b447e60601a2","categoryName":"Add-ins","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_addins_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"a60703591ac639b8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforostfiles","displayName":"Default location for OST files (User)","description":"This policy setting allows you to specify a different folder location for Outlook Data File (OST) files on user computers. \r\n\r\nIf you enable this policy setting, you can specify a location for OST files on user computers.\r\n\r\nIf you disable or do not configure this policy setting, OST files are located in: %LOCALAPPDATA%\\Microsoft\\Outlook on user computers.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforostfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforostfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"a6be5e02f9079c08":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags","displayName":"English message headers and flags (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","categoryName":"International Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internationaloptions_l_englishmessageheadersandflags_1","displayName":"Enabled","description":null,"helpText":null}]},"a61655307251e2e0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disablemeetingregeneration","displayName":"Do not regenerate meetings (User)","description":"By default, when a user accepts or tentatively accepts a meeting, Outlook creates a duplicate copy of the meeting with the new response status and a new entry ID. Outlook then deletes the old version of the meeting from the calendar. This setting allows you to roll back to the legacy behavior and prevent meeting regeneration.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disablemeetingregeneration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disablemeetingregeneration_1","displayName":"Enabled","description":null,"helpText":null}]},"a6a24db77efa8ab1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_overwriteorappendjunkmailimportlist","displayName":"Overwrite or Append Junk Mail Import List (User)","description":"By default, when a new Junk E-mail Filter list is deployed, Outlook appends the new Junk Mail Import List to the existing list. Enable this setting to replace the existing list with the new list, instead of appending to the current list.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_overwriteorappendjunkmailimportlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_overwriteorappendjunkmailimportlist_1","displayName":"Enabled","description":null,"helpText":null}]},"a692420dc295f5c1":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":null},"a6391663509624d7":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text_l_text7","displayName":"Text (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text_l_text7_51","displayName":"Picas","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text_l_text7_50","displayName":"Points","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text_l_text7_54","displayName":"Ciceros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_text_l_text7_53","displayName":"Didots","description":null,"helpText":null}]},"a6be485e24b35ec9":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_typingreplacesselection","displayName":"Typing replaces selected text (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_typingreplacesselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_typingreplacesselection_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/a7.json b/public/intune-definitions/a7.json new file mode 100644 index 000000000000..8f69d09e65f9 --- /dev/null +++ b/public/intune-definitions/a7.json @@ -0,0 +1 @@ +{"a74678b58509d0fd":{"id":"ade_accountsettings_adminaccountfullname","displayName":"Admin account full name","description":"The full name for the administrator account. This field is to be defaulted to 'Admin'.","helpText":"","infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":null},"a719b75c95b6256f":{"id":"com.apple.applicationaccess_allowassistantusergeneratedcontent","displayName":"Allow Assistant User Generated Content (Deprecated)","description":"If false, prevents Siri from querying user-generated content from the web. Requires a supervised device. Available in iOS 7 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowassistantusergeneratedcontent_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowassistantusergeneratedcontent_true","displayName":"True","description":null,"helpText":null}]},"a706f68c18a1670c":{"id":"com.apple.softwareupdate_com.apple.softwareupdate","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":null},"a708961a5b1fec06":{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"a7e85593e6963515":{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotaddressbarsuggestionsenabled","displayName":"Enable Copilot address bar suggestions","description":"This policy controls whether Copilot chat suggestions appear in the address bar of Microsoft Edge.\n\nIf you enable this policy or don't configure it, Copilot chat suggestions appear in the address bar.\n\nIf you disable this policy, Copilot chat suggestions don't appear in the address bar.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotaddressbarsuggestionsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotaddressbarsuggestionsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a72ab07b0a5ce252":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultclipboardsetting","displayName":"Default clipboard site permission","description":"This policy controls the default value for the clipboard site permission.\n\nSetting the policy to 2 blocks sites from using the clipboard site permission.\n\nSetting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use an API.\n\nThis policy can be overridden for specific URL patterns using the \"ClipboardAllowedForUrls\" and \"ClipboardBlockedForUrls\" policies.\n\nThis policy only affects clipboard operations controlled by the clipboard site permission and doesn't affect sanitized clipboard writes or trusted copy and paste operations.\n\nPolicy options mapping:\n\n* BlockClipboard (2) = Do not allow any site to use the clipboard site permission\n\n* AskClipboard (3) = Allow sites to ask the user to grant the clipboard site permission\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultclipboardsetting_blockclipboard","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultclipboardsetting_askclipboard","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},"a78c5c4f7a073b6c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled","displayName":"Enable the default search provider","description":"Enables the ability to use a default search provider.\n\nIf you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn't a URL).\n\nYou can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured) or configured incorrectly, the user can choose the default provider.\n\nIf you disable this policy, the user can't search from the address bar.\n\nIf you enable or disable this policy, users can't change or override it.\n\nIf you don't configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.\n\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a7d59dab6b1dd35c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.promptonmultiplematchingcertificates","displayName":"Prompt the user to select a certificate when multiple certificates match","description":"This policy controls whether the user is prompted to select a client certificate when more than one certificate matches \"AutoSelectCertificateForUrls\".\nIf this policy is set to True, the user is prompted to select a client certificate whenever the auto-selection policy matches multiple certificates.\nIf this policy is set to False or not set, the user may only be prompted when no certificate matches the auto-selection.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.promptonmultiplematchingcertificates_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.promptonmultiplematchingcertificates_true","displayName":"Enabled","description":null,"helpText":null}]},"a7d1ae237cd4e618":{"id":"com.microsoft.edge.mamedgeappconfigsettings.staticstoragequotaenabled","displayName":"Control whether storage quota APIs will return static values","description":"Controls how the Storage Quota APIs report the available quota to websites.\n\nWhen enabled, the Storage Quota APIs return a static quota value equal to the current usage plus the smaller of 10 GiB or the device's total storage rounded up to the nearest 1 GiB.\n\nWhen disabled, the Storage Quota APIs return a dynamic quota value that reflects the actual available device storage.\n\nWhen unset, the browser uses the default platform behavior.\n\nThis policy does not affect sites with unlimited storage permissions or enforced quota settings.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.staticstoragequotaenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.staticstoragequotaenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a7714208f956feb0":{"id":"device_vendor_msft_bitlocker_removabledrivesencryptiontype_rdvencryptiontypedropdown_name","displayName":"Select the encryption type:","description":"","helpText":"","infoUrls":[],"categoryId":"8e6b8d0c-faf6-41e6-8e31-4389a5470caf","categoryName":"Removable Data Drives","options":[{"id":"device_vendor_msft_bitlocker_removabledrivesencryptiontype_rdvencryptiontypedropdown_name_0","displayName":"Allow user to choose (default)","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_removabledrivesencryptiontype_rdvencryptiontypedropdown_name_1","displayName":"Full encryption","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_removabledrivesencryptiontype_rdvencryptiontypedropdown_name_2","displayName":"Used Space Only encryption","description":null,"helpText":null}]},"a794185b78dd18f4":{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configurepinusagedropdown_name","displayName":"Configure TPM startup PIN:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configurepinusagedropdown_name_2","displayName":"Allow startup PIN with TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configurepinusagedropdown_name_1","displayName":"Require startup PIN with TPM","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configurepinusagedropdown_name_0","displayName":"Do not allow startup PIN with TPM","description":null,"helpText":null}]},"a71b3d2811bbacee":{"id":"device_vendor_msft_passportforwork_biometrics_facialfeaturesuseenhancedantispoofing","displayName":"Facial Features Use Enhanced Anti Spoofing","description":"This setting determines whether enhanced anti-spoofing is required for Windows Hello face authentication.\n\nIf you enable this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. This disables Windows Hello face authentication on devices that do not support enhanced anti-spoofing.\n\nIf you disable or do not configure this setting, Windows doesn't require enhanced anti-spoofing for Windows Hello face authentication.\n\nNote that enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_biometrics_facialfeaturesuseenhancedantispoofing_false","displayName":"false","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_biometrics_facialfeaturesuseenhancedantispoofing_true","displayName":"true","description":"Enabled","helpText":null}]},"a7b732f0cfe3ea46":{"id":"device_vendor_msft_policy_config_activexcontrols_approvedinstallationsites_approvedactivexinstallsiteslist","displayName":"Host URLs","description":"","helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":null},"a7fbc80e2b0dde0e":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_searchlist","displayName":"DNS suffix search list","description":"Specifies the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name.\r\n\r\nAn unqualified single-label name contains no dots. The name \"example\" is a single-label name. This is different from a fully qualified domain name such as \"example.microsoft.com.\"\r\n\r\nClient computers that receive this policy setting will attach one or more suffixes to DNS queries for a single-label name. For example, a DNS query for the single-label name \"example\" will be modified to \"example.microsoft.com\" before sending the query to a DNS server if this policy setting is enabled with a suffix of \"microsoft.com.\"\r\n\r\nTo use this policy setting, click Enabled, and then enter a string value representing the DNS suffixes that should be appended to single-label names. You must specify at least one suffix. Use a comma-delimited string, such as \"microsoft.com,serverua.microsoft.com,office.microsoft.com\" to specify multiple suffixes.\r\n\r\nIf you enable this policy setting, one DNS suffix is attached at a time for each query. If a query is unsuccessful, a new DNS suffix is added in place of the failed suffix, and this new query is submitted. The values are used in the order they appear in the string, starting with the leftmost value and proceeding to the right until a query is successful or all suffixes are tried.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, the primary DNS suffix and network connection-specific DNS suffixes are appended to the unqualified queries.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-searchlist"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_searchlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_searchlist_1","displayName":"Enabled","description":null,"helpText":null}]},"a70023cad9d88b73":{"id":"device_vendor_msft_policy_config_admx_globalization_localeuserrestrict_2","displayName":"Restrict user locales","description":"This policy setting restricts users on a computer to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy setting does not change existing user locale settings; however, the next time a user attempts to change their user locale, their choices will be restricted to locales in this list.\r\n\r\nTo set this policy setting on a per-user basis, make sure that you do not configure the per-computer policy setting.\r\n\r\nThe locale list is specified using language tags, separated by a semicolon (;). For example, en-US is English (United States). Specifying \"en-CA;fr-CA\" would restrict the user locale to English (Canada) and French (Canada).\r\n\r\nIf you enable this policy setting, only locales in the specified locale list can be selected by users.\r\n\r\nIf you disable or do not configure this policy setting, users can select any locale installed on the computer, unless restricted by the \"Disallow selection of Custom Locales\" policy setting.\r\n\r\nIf this policy setting is enabled at the computer level, it cannot be disabled by a per-user policy. If this policy setting is disabled at the computer level, the per-user policy is ignored. If this policy setting is not configured at the computer level, restrictions are based on per-user policies.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-localeuserrestrict-2"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_localeuserrestrict_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_localeuserrestrict_2_1","displayName":"Enabled","description":null,"helpText":null}]},"a7dca56257ede7c9":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_forcerediscoveryinterval_netlogon_forcerediscoveryintervallabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"a7e0d47b2b694dd4":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_setdatacacheentrymaxage","displayName":"Set age for segments in the data cache","description":"This policy setting specifies the default age in days for which segments are valid in the BranchCache data cache on client computers.\r\n\r\nIf you enable this policy setting, you can configure the age for segments in the data cache.\r\n\r\nIf you disable or do not configure this policy setting, the age is set to 28 days.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache client computer cache age settings are not applied to client computers by this policy. In the circumstance where client computers are domain members but you do not want to configure a BranchCache client computer cache age setting on all client computers, you can specify Not Configured for this domain Group Policy setting, and then configure local computer policy to enable BranchCache client computer cache age settings on individual client computers. Because the domain Group Policy setting is not configured, it will not over-write the client computer cache age setting that you use on individual client computers.\r\n\r\n- Enabled. With this selection, the BranchCache client computer cache age setting is enabled for all client computers where the policy is applied. For example, if this policy setting is enabled in domain Group Policy, the BranchCache client computer cache age that you specify in the policy is turned on for all domain member client computers to which the policy is applied.\r\n\r\n- Disabled. With this selection, BranchCache client computers use the default client computer cache age setting of 28 days on the client computer.\r\n\r\nIn circumstances where this setting is enabled, you can also select and configure the following option:\r\n\r\n- Specify the age in days for which segments in the data cache are valid.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-setdatacacheentrymaxage"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_setdatacacheentrymaxage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_setdatacacheentrymaxage_1","displayName":"Enabled","description":null,"helpText":null}]},"a7865f3d84d18a10":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_session_end_on_limit_2","displayName":"End session when time limits are reached","description":"This policy setting specifies whether to end a Remote Desktop Services session that has timed out instead of disconnecting it.\r\n\r\nYou can use this setting to direct Remote Desktop Services to end a session (that is, the user is logged off and the session is deleted from the server) after time limits for active or idle sessions are reached. By default, Remote Desktop Services disconnects sessions that reach their time limits.\r\n\r\nTime limits are set locally by the server administrator or by using Group Policy. See the policy settings Set time limit for active Remote Desktop Services sessions and Set time limit for active but idle Remote Desktop Services sessions policy settings.\r\n\r\nIf you enable this policy setting, Remote Desktop Services ends any session that reaches its time-out limit.\r\n\r\nIf you disable this policy setting, Remote Desktop Services always disconnects a timed-out session, even if specified otherwise by the server administrator.\r\n\r\nIf you do not configure this policy setting, Remote Desktop Services disconnects a timed-out session, unless specified otherwise in local settings.\r\n\r\nNote: This policy setting only applies to time-out limits that are explicitly set by the administrator. This policy setting does not apply to time-out events that occur due to connectivity or network conditions. This setting appears in both Computer Configuration and User Configuration. If both settings are configured, the Computer Configuration setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-session-end-on-limit-2"],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_session_end_on_limit_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_session_end_on_limit_2_1","displayName":"Enabled","description":null,"helpText":null}]},"a70c69f6e29e8dcd":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_disablemotwoninsecurepathcopy","displayName":"Do not apply the Mark of the Web tag to files copied from insecure sources","description":"This policy setting determines the application of the Mark of the Web tag to files sourced from insecure locations.\n\nIf you enable this policy setting, files copied from unsecure sources will not be tagged with the Mark of the Web.\n\nIf you disable or do not configure this policy setting, files copied from unsecure sources will be tagged with the appropriate Mark of the Web.\n\nNote: Failure to tag files from unsecure sources with the Mark of the Web can expose users’ computers to security risks.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disablemotwoninsecurepathcopy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_disablemotwoninsecurepathcopy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_disablemotwoninsecurepathcopy_1","displayName":"Enabled","description":null,"helpText":null}]},"a733590c3e6171ed":{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosauthenticationservice","displayName":"Account Logon Audit Kerberos Authentication Service","description":"This policy setting allows you to audit events generated by Kerberos authentication ticket-granting ticket (TGT) requests. If you configure this policy setting, an audit event is generated after a Kerberos authentication TGT request. Success audits record successful requests and Failure audits record unsuccessful requests. If you do not configure this policy setting, no audit event is generated after a Kerberos authentication TGT request.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogon_auditkerberosauthenticationservice"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosauthenticationservice_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosauthenticationservice_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosauthenticationservice_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosauthenticationservice_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"a76abf15acbc4ee1":{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize","displayName":"Customize consent settings","description":"","helpText":"","infoUrls":[],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":null},"a7d100b71cb3eaa9":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity","displayName":"Roam Identity","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nAllows legacy roaming for credentials and tokens created by the Web Account Manager (WAM) system. Some Microsoft 365 applications may require authentication at every sign-in when disabled.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RoamIdentity\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity_1","displayName":"Enabled","description":null,"helpText":null}]},"a7029ad391eafa35":{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction","displayName":"Force Onlooker Detection Action","description":"Determines whether the Onlooker Detection action is forced by the MDM policy. The user will not be able to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceonlookerdetectionaction"],"categoryId":"a77e6e83-a02e-4a51-a27e-6437ea42aeb5","categoryName":"Human Presence","options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_3","displayName":"Forced Dim And Notify.","description":"ForcedDimAndNotify.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_2","displayName":"Forced Notify.","description":"ForcedNotify.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},"a7312be10cfb7f1d":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode","displayName":"Turn on Protected Mode","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://learn.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneenableprotectedmode"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"a72d0199af0ff7ec":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"a754c50f2667a00d":{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended","displayName":"Configure Edge scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen","description":"This policy controls whether Microsoft Edge shares URLs of sites that are detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge will share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.","helpText":"","infoUrls":[],"categoryId":"fea97af7-df89-4fde-8e2b-f8e7f7b6b741","categoryName":"Scareware Blocker settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a778e97cc48a4832":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype","displayName":"Configure the Microsoft Edge new tab page experience","description":"Lets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\r\n\r\nWhen you set this policy to Microsoft News feed experience (0), users will see the Microsoft News feed experience on the new tab page.\r\n\r\nWhen you set this policy to Office 365 feed experience (1), users with an Azure Active Directory browser sign-in will see the Office 365 feed experience on the new tab page.\r\n\r\nIf you disable or don't configure this policy:\r\n\r\n- Users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, as well as the standard new tab page feed experience.\r\n\r\n- Users without an Azure Active Directory browser sign-in will see the standard new tab page experience.\r\n\r\nIf you configure this policy *and* the 'NewTabPageLocation' (Configure the new tab page URL) policy, 'NewTabPageLocation' has precedence.\r\n\r\nDefault setting: Disabled or not configured.\r\n\r\n* 0 = Microsoft News feed experience\r\n\r\n* 1 = Office 365 feed experience","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_1","displayName":"Enabled","description":null,"helpText":null}]},"a7eac7ba97a9c0bd":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"a7a207b40d63d115":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_2","displayName":"Don't allow any site to request write access to files and directories","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_3","displayName":"Allow sites to ask the user to grant write access to files and directories","description":null,"helpText":null}]},"a7e602b341183d72":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled","displayName":"Prevents files from being uploaded while in Application Guard","description":"Sets whether files can be uploaded while in Application Guard.\r\n\r\nIf you enable this policy, users will not be able to upload files in Application Guard.\r\n\r\nIf you disable or don't configure this policy, users will be able to upload files while in Application Guard.","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a7cba0f5bf31a0cc":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_outlookexe148","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_outlookexe148_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_outlookexe148_1","displayName":"True","description":null,"helpText":null}]},"a711fe3358f1479c":{"id":"keyboardsettings_allowtextreplacement","displayName":"Allow Text Replacement","description":"If `false`, disables text replacement.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowtextreplacement_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowtextreplacement_true","displayName":"True","description":null,"helpText":null}]},"a77346872f3d58d7":{"id":"sirisettings_allowwhilelocked","displayName":"Allow While Locked","description":"If `false`, disables Siri while locked.","helpText":null,"infoUrls":[],"categoryId":"b85d9c04-4923-4fdf-a425-424686d47859","categoryName":"Siri Settings","options":[{"id":"sirisettings_allowwhilelocked_false","displayName":"False","description":null,"helpText":null},{"id":"sirisettings_allowwhilelocked_true","displayName":"True","description":null,"helpText":null}]},"a7d7bb38d1537ade":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode","displayName":"Configure CNG cipher chaining mode (User)","description":"This policy setting allows you to configure the cipher chaining mode used.\r\n\r\nIf you enable this policy setting, the cipher chaining mode specified will be applied.\r\n\r\nIf you disable or do not configure this policy setting, Cipher Block Chaining (CBC) will be the default CNG cipher chaining mode used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"a790ec7c8e19af77":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork","displayName":"Turn off Trusted Documents on the network (User)","description":"This policy setting allows you to turn off the trusted documents feature for documents opened from the network.\r\n\r\nIf you enable this policy setting, users will always see security notifications for active content such as macros, ActiveX controls, data connections, etc. for documents opened from the network.\r\n\r\nIf you disable or do not configure this policy setting, the trusted documents feature allows users to always allow active content in documents such as macros, ActiveX controls, data connections, etc. so that users are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"a714c75a630b19cb":{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper","displayName":"Desktop Wallpaper (User)","description":"Specifies the desktop background (\"wallpaper\") displayed on all users' desktops.\r\n\r\nThis setting lets you specify the wallpaper on users' desktops and prevents users from changing the image or its presentation. The wallpaper you specify can be stored in a bitmap (*.bmp) or JPEG (*.jpg) file.\r\n\r\nTo use this setting, type the fully qualified path and name of the file that stores the wallpaper image. You can type a local path, such as C:\\Windows\\web\\wallpaper\\home.jpg or a UNC path, such as \\\\Server\\Share\\Corp.jpg. If the specified file is not available when the user logs on, no wallpaper is displayed. Users cannot specify alternative wallpaper. You can also use this setting to specify that the wallpaper image be centered, tiled, or stretched. Users cannot change this specification.\r\n\r\nIf you disable this setting or do not configure it, no wallpaper is displayed. However, users can select the wallpaper of their choice.\r\n\r\nAlso, see the \"Allow only bitmapped wallpaper\" in the same location, and the \"Prevent changing wallpaper\" setting in User Configuration\\Administrative Templates\\Control Panel.\r\n\r\nNote: This setting does not apply to remote desktop server sessions.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-wallpaper"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_1","displayName":"Enabled","description":null,"helpText":null}]},"a7db464e4ed843f5":{"id":"user_vendor_msft_policy_config_admx_startmenu_showappsviewonstart","displayName":"Show the Apps view automatically when the user goes to Start (User)","description":"This policy setting allows the Apps view to be opened by default when the user goes to Start.\r\n\r\nIf you enable this policy setting, the Apps view will appear whenever the user goes to Start. Users will still be able to switch between the Apps view and the Start screen.\r\n\r\nIf you disable or don’t configure this policy setting, the Start screen will appear by default whenever the user goes to Start, and the user will be able to switch between the Apps view and the Start screen. Also, the user will be able to configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showappsviewonstart"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showappsviewonstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showappsviewonstart_1","displayName":"Enabled","description":null,"helpText":null}]},"a7e66f507cc29ace":{"id":"user_vendor_msft_policy_config_browser_allowextensions","displayName":"Allow Extensions (User)","description":"This setting lets you decide whether employees can load extensions in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowextensions"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowextensions_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowextensions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"a7ac10cafc7a3626":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended","displayName":"Parameters for instant URL which uses POST (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a7aa82298b588aef":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled","displayName":"Enable ending processes in Task Manager (User)","description":"Setting the policy to Disabled prevents users from ending processes in the Task Manager.\r\n\r\nSetting the policy to Enabled or leaving it unset lets users end processes in the Task Manager.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a7462f0e1e4c3da4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled","displayName":"Disable Developer Tools (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a733be6cb20f0828":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings","displayName":"Settings for AI-powered History Search (User)","description":"AI History Search is a feature that allows users to search their browsing history and receive generated answers based on page contents and not just the page title and URL.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"a75e52df2059151b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cutandcopyobjectswithcells","displayName":"Cut and copy objects with cells (User)","description":"This policy setting sets the \"Cut, copy, and sort inserted objects with their parent cells\" option found under File tab | Options | Advanced | Cut, copy, and paste Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will cut, copy, and sort inserted objects with their parent cells.\r\n\r\nIf you disable this policy setting, Excel will not cut and copy inserted objects with their parent cells.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cutandcopyobjectswithcells_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cutandcopyobjectswithcells_1","displayName":"Enabled","description":null,"helpText":null}]},"a7ace912cde9db77":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid","displayName":"Cipher key length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":null},"a77af04023e85fd3":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles","displayName":"Dif and Sylk files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"a7b14b317d3c6129":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_datecolon6","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"a7f78b7221b6f541":{"id":"user_vendor_msft_policy_config_excel16v6~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_xl4killswitchpolicy","displayName":"Prevent Excel from running XLM macros (User)","description":"This policy setting will prevent Excel from running Excel 4.0 (XLM) macros.\r\n\r\nIf you enable this policy setting, XLM macros cannot be run in Excel.\r\n\r\nIf you disable or don’t configure this policy setting, XLM macros can be run in Excel.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v6~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_xl4killswitchpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v6~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_xl4killswitchpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"a7888d4b557cad0d":{"id":"user_vendor_msft_policy_config_internetexplorer_allowaddonlist","displayName":"Add-on List (User)","description":"This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. Add-ons in this case are controls like ActiveX Controls, Toolbars, and Browser Helper Objects (BHOs) which are specifically written to extend or enhance the functionality of the browser or web pages.\n\nThis list can be used with the 'Deny all add-ons unless specifically allowed in the Add-on List' policy setting, which defines whether add-ons not listed here are assumed to be denied.\n\nIf you enable this policy setting, you can enter a list of add-ons to be allowed or denied by Internet Explorer. For each entry that you add to the list, enter the following information:\n\nName of the Value - the CLSID (class identifier) for the add-on you wish to add to the list. The CLSID should be in brackets for example, ‘{000000000-0000-0000-0000-0000000000000}'. The CLSID for an add-on can be obtained by reading the OBJECT tag from a Web page on which the add-on is referenced.\n\nValue - A number indicating whether Internet Explorer should deny or allow the add-on to be loaded. To specify that an add-on should be denied enter a 0 (zero) into this field. To specify that an add-on should be allowed, enter a 1 (one) into this field. To specify that an add-on should be allowed and also permit the user to manage the add-on through Add-on Manager, enter a 2 (two) into this field.\n\nIf you disable this policy setting, the list is deleted. The 'Deny all add-ons unless specifically allowed in the Add-on List' policy setting will still determine whether add-ons not in this list are assumed to be denied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowaddonlist"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowaddonlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowaddonlist_1","displayName":"Enabled","description":null,"helpText":null}]},"a752d1e4464d3526":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowfontdownloads"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"a727bfb2a941b12b":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended","displayName":"Configure the automatic profile switching site list (User)","description":"Set this policy to control which profiles Microsoft Edge will use to open sites in. Switching configurations for sites listed in this policy take precedence over other heuristics Microsoft Edge uses for switching sites but note that sites not listed on this policy are still subject to switching by those heuristics. If this policy is not configured, Microsoft Edge will continue using its heuristics to automatically switch sites.\r\n\r\nThis policy maps a URL hostname to a profile that it should be opened in.\r\n\r\nThe 'site' field should take the form of a URL hostname.\r\n\r\nThe 'profile' field can take one of the following values:\r\n- 'Work': The most recently used Microsoft Entra signed-in profile will be used to open 'site'.\r\n- 'Personal': The most recently used MSA signed-in profile will be used to open 'site'.\r\n- 'No preference': The currently used profile will be used to open 'site'.\r\n- Wildcard email address: This takes the form of '*@contoso.com'. A profile whose username ends with the contents following the '*' will be used to open 'site'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"site\": \"work.com\",\r\n \"profile\": \"Work\"\r\n },\r\n {\r\n \"site\": \"personal.com\",\r\n \"profile\": \"Personal\"\r\n },\r\n {\r\n \"site\": \"nopreference.com\",\r\n \"profile\": \"No preference\"\r\n },\r\n {\r\n \"site\": \"contoso.com\",\r\n \"profile\": \"*@contoso.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"04b46099-4ee5-4def-8e04-569c988057a9","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"a7b768d9fcf3463e":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader","displayName":"Allow software WebGL fallback using SwiftShader (User)","description":"Controls whether SwiftShader is used as a fallback for WebGL when hardware GPU acceleration is not available.\r\n\r\nWhen enabled, Microsoft Edge will use SwiftShader to support WebGL on systems without GPU acceleration, such as headless environments or virtual machines.\r\n\r\nStarting in Microsoft Edge version 139, SwiftShader has been deprecated due to security concerns. As a result, WebGL context creation will fail in scenarios where SwiftShader would have been used. Enabling this policy allows organizations to temporarily defer the deprecation and continue using SwiftShader.\r\n\r\nIf you disable or do not configure this policy, WebGL context creation may fail on systems without hardware acceleration. This could cause web content relying on WebGL to function incorrectly if it does not handle context creation failures.\r\n\r\nNote: This is a temporary policy and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader_1","displayName":"Enabled","description":null,"helpText":null}]},"a7ac2c8c7833356e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastserviceserverdescription3","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"a700c164db83d357":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_powerpoint","displayName":"Microsoft PowerPoint (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_powerpoint_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_powerpoint_1","displayName":"True","description":null,"helpText":null}]},"a76ec8bd54b26b95":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frisiannetherlands","displayName":"Frisian (Netherlands) (User)","description":"Enables the editing language Frisian (Netherlands)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frisiannetherlands_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frisiannetherlands_1","displayName":"Enabled","description":null,"helpText":null}]},"a77651b1793f0fa5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uppersorbian","displayName":"Upper Sorbian (User)","description":"Enables the editing language Upper Sorbian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uppersorbian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_uppersorbian_1","displayName":"Enabled","description":null,"helpText":null}]},"a7d03d5d643b2160":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_l_workflowsig502","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_l_workflowsig502_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_l_workflowsig502_1","displayName":"True","description":null,"helpText":null}]},"a7b9f00095155589":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences_l_optionalconnectedexperiencesdropid","displayName":"[Deprecated] Optional connected experiences in Office (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences_l_optionalconnectedexperiencesdropid_1","displayName":"Enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_optionalconnectedexperiences_l_optionalconnectedexperiencesdropid_2","displayName":"Disabled","description":null,"helpText":null}]},"a7ff4959cdcb35f1":{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_logcollection","displayName":"Allow users to include log files and content samples when they submit feedback to Microsoft (User)","description":"This policy setting controls whether your users see an option to include log files and content samples when they submit feedback to Microsoft.\r\n\r\nLog files and content samples help Microsoft troubleshoot product issues and Microsoft will use this information to improve product experiences for users. The option to include log files and content samples when submitting feedback to Microsoft is disabled by default.\r\n\r\nIf you enable this policy setting, your users will see an option to include log files and content samples when they submit feedback to Microsoft.\r\n\r\nIf you disable or don’t configure this policy setting, your users will not see an option to include log files and content samples when they submit feedback to Microsoft.\r\n\r\nComing soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center.\r\n\r\nNote: This policy setting has no effect if the \"Allow users to submit feedback to Microsoft\" policy setting is set to Disabled.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2142253","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_logcollection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_logcollection_1","displayName":"Enabled","description":null,"helpText":null}]},"a73f1b22fbf1a973":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersinexchangeonline_l_specifydaystokeepfoldersaliveinexchangeonlinemode","displayName":"Specify days to keep folders alive in Exchange online mode: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fb721630-fc42-465b-ba22-ab670698c8b5","categoryName":"Search Folders","options":null},"a712deb86d6b77ad":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm","displayName":"Specify CNG hash algorithm (User)","description":"This policy setting allows you to specify the hash algorithm used.\r\n\r\nIf you enable this policy setting, the hashing algorithm selected will be used by CNG.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG hash algorithm will be used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycnghashalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"a7a5f54f89147393":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork","displayName":"Allow Trusted Locations on the network (User)","description":"This policy setting controls whether trusted locations on the network can be used.\r\n\r\nIf you enable this policy setting, users can specify trusted locations on network shares or in other remote locations that are not under their direct control by clicking the \"Add new location\" button in the Trusted Locations section of the Trust Center. Content, code, and add-ins are allowed to load from trusted locations with minimal security and without prompting the user for permission.\r\n\r\nIf you disable this policy setting, the selected application ignores any network locations listed in the Trusted Locations section of the Trust Center. \r\n\r\nIf you also deploy Trusted Locations via Group Policy, you should verify whether any of them are remote locations. If any of them are remote locations and you do not allow remote locations via this policy setting, those policy keys that point to remote locations will be ignored on client computers.\r\n\r\nDisabling this policy setting does not delete any network locations from the Trusted Locations list, but causes disruption for users who add network locations to the Trusted Locations list. Users are also prevented from adding new network locations to the Trusted Locations list in the Trust Center. We recommended that you do not enable this policy setting (as the \"Allow Trusted Locations on my network (not recommended)\" check box also states). Therefore, in practice, it should be possible to disable this policy setting in most situations without causing significant usability issues for most users.\r\n\r\nIf you do not enable this policy setting, users can select the \"Allow Trusted Locations on my network (not recommended)\" check box if desired and then specify trusted locations by clicking the \"Add new location\" button.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/a8.json b/public/intune-definitions/a8.json new file mode 100644 index 000000000000..ba53064f726c --- /dev/null +++ b/public/intune-definitions/a8.json @@ -0,0 +1 @@ +{"a8953b965687c944":{"id":"ade_setupassistant_androidmigration","displayName":"Android migration","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_androidmigration_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_androidmigration_1","displayName":"Show","description":null,"helpText":null}]},"a86612e2fdad242a":{"id":"app_allowed_allowedbinaries","displayName":"Allowed Binaries","description":"If present, the device only allows binaries that match the binary identifier properties to run. A binary only matches when all the binary identifiers match. The device always runs system critical processes. Use \"codesign -dvvv \" to show the information you need to generate these values.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"a8d616a55d180d29":{"id":"com.apple.extensiblesso_extensiondata_generickey_boolean","displayName":"Value","description":"Keys and values to pass to the app extension.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_extensiondata_generickey_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_generickey_true","displayName":"True","description":null,"helpText":null}]},"a8ebaa3309abcc0f":{"id":"com.apple.managedclient.preferences_additionalsearchboxenabled","displayName":"Enable additional search box in browser","description":"A search box is an additional text input field located next to the address bar in a web browser. It allows users to perform web searches directly from the browser interface.\n\nIf you enable or don't configure this policy, the search box will be visible and available for use.\nUsers can toggle the search box in Edge Settings page edge://settings/appearance#SearchBoxInToolbar.\n\nIf you disable this policy, search box will not be visible, and users will have to use the address bar or navigate to a search engine to perform web searches.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#additionalsearchboxenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_additionalsearchboxenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_additionalsearchboxenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a8419d2dfbf61d9c":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app","displayName":"Microsoft Edge (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"a892ea9c0786a17c":{"id":"com.apple.managedclient.preferences_enablecheckforupdatesbutton","displayName":"Enable check for updates","description":"Allow users to check for app updates. The default value is true.","helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_enablecheckforupdatesbutton_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablecheckforupdatesbutton_true","displayName":"True","description":null,"helpText":null}]},"a8cc44bee8e68015":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_disk sleep timer","displayName":"Disk Sleep Timer","description":"The disk sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"a8c4f09152d8b3a1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.uploadfromphoneenabled","displayName":"Enable upload files from mobile in Microsoft Edge desktop","description":"This policy lets you configure the \"Upload from mobile\" feature in Microsoft Edge.\n\nUpload from mobile lets users select file from mobile devices to desktop when user upload file in a webpage in Microsoft Edge.\n\nIf you enable or don't configure this policy, you can use the Upload from mobile feature in Microsoft Edge.\n\nIf you disable this policy, you can't use the Upload from mobile feature in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.uploadfromphoneenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.uploadfromphoneenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a8547b32aabd6762":{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogram","displayName":"Events.asp program","description":"This is the program that will be invoked when the user clicks the events.asp link.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventviewer#admx-eventviewer-eventviewer-redirectionprogram"],"categoryId":"3453c694-bc38-4082-9d3d-886e385df927","categoryName":"Event Viewer","options":[{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogram_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogram_1","displayName":"Enabled","description":null,"helpText":null}]},"a8fc2f40cd1f275e":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_processes_exclusions_processeslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"a85f8cd6801ba098":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_globaldns","displayName":"Specify global DNS","description":"This policy setting enables you to specify DNS binding behavior. NCSI by default will restrict DNS lookups to the interface it is currently probing on. If you enable this setting, NCSI will allow the DNS lookups to happen on any interface.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ncsi#admx-ncsi-ncsi-globaldns"],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_globaldns_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_globaldns_1","displayName":"Enabled","description":null,"helpText":null}]},"a8431e350643a838":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_licensing_mode","displayName":"Set the Remote Desktop licensing mode","description":"\r\n This policy setting allows you to specify the type of Remote Desktop Services client access license (RDS CAL) that is required to connect to this RD Session Host server.\r\n\r\n You can use this policy setting to select one of three licensing modes: Per User , Per Device and AAD Per User .\r\n\r\n Per User licensing mode requires that each user account connecting to this RD Session Host server have an RDS Per User CAL issued from an RD Licensing server.\r\n\r\n Per Device licensing mode requires that each device connecting to this RD Session Host server have an RDS Per Device CAL issued from an RD Licensing server.\r\n\r\n AAD Per User licensing mode requires that each user account connecting to this RD Session Host server have a service plan that supports RDS licenses assigned in AAD.\r\n \r\n If you enable this policy setting, the Remote Desktop licensing mode that you specify is honored by the Remote Desktop license server and RD Session Host.\r\n\r\n If you disable or do not configure this policy setting, the licensing mode is not specified at the Group Policy level.\r\n \r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-licensing-mode"],"categoryId":"4b540860-0858-48f4-8830-18383bb1766f","categoryName":"Licensing","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_licensing_mode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_licensing_mode_1","displayName":"Enabled","description":null,"helpText":null}]},"a8a0aab6d1a20b09":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters","displayName":"Network Printers","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters_1","displayName":"True","description":null,"helpText":null}]},"a86fa5e904f9318e":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_frequencycorrectrate","displayName":"FrequencyCorrectRate","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"a817da7dc3bed27c":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_w32time_resolvepeerbackoffminutes","displayName":"ResolvePeerBackoffMinutes","description":null,"helpText":"","infoUrls":[],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":null},"a81766791bce112f":{"id":"device_vendor_msft_policy_config_applicationmanagement_launchappafterlogon","displayName":"Launch App After Log On","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are to be launched after logon.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#launchappafterlogon"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":null},"a895fac98fc76fc2":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_publishing_server_url_prompt","displayName":"Publishing Server URL","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"a8aa57939186027a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory","displayName":"Set download directory","description":"Setting the policy sets up the directory Chrome uses for downloading files. It uses the provided directory, whether or not users specify one or turned on the flag to be prompted for download location every time.\r\n\r\nLeaving the policy unset means Chrome uses the default download directory, and users can change it.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"a8a15164e23635ce":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_authschemes","displayName":"Supported authentication schemes (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":null},"a8bb1d6b28193d8d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting","displayName":"Default Flash setting","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"a837bc9f1d956eec":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_supervisedusercreationenabled","displayName":"Enable creation of supervised users","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_supervisedusercreationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_supervisedusercreationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a8b75b0dc72521ed":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup","displayName":"Action on startup","description":"Setting the policy lets you specify system behavior on startup. Turning this setting off amounts to leaving it unset as Google Chrome must have specified start up behavior.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can change it.\r\n\r\nSetting this policy to RestoreOnStartupIsLastSession turns off some settings that rely on sessions or that perform actions on exit, such as clearing browsing data on exit or session-only cookies.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"a8ebf655775e272c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled","displayName":"Control the nesting threshold before which Javascript setTimeout() function start being clamped","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a85707d687ca0064":{"id":"device_vendor_msft_policy_config_defender_securityintelligencelocation","displayName":"Security Intelligence Location","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#securityintelligencelocation"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"a8e5f9dc063c1ba8":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthin","displayName":"Maximum Foreground Download Bandwidth (percentage) during Business Hours:","description":"","helpText":"","infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"a801ae16182e608b":{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains","displayName":"Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains","description":"This policy setting allows you to manage a list of domains on which Internet Explorer will stop blocking outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.\n\nIf you enable this policy setting, you can enter a custom list of domains for which outdated ActiveX controls won't be blocked in Internet Explorer. Each domain entry must be formatted like one of the following:\n\n1. \"domain.name.TLD\". For example, if you want to include *.contoso.com/*, use \"contoso.com\"\n2. \"hostname\". For example, if you want to include http://example, use \"example\"\n3. \"file:///path/filename.htm\". For example, use \"file:///C:/Users/contoso/Desktop/index.htm\"\n\nIf you disable or don't configure this policy setting, the list is deleted and Internet Explorer continues to block specific outdated ActiveX controls on all domains in the Internet Zone.\n\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotblockoutdatedactivexcontrolsonspecificdomains"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"a8f3c5868183d691":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_disconnectclientswhenlogonhoursexpire","displayName":"Microsoft Network Server Disconnect Clients When Logon Hours Expire","description":"Microsoft network server: Disconnect clients when logon hours expire This security setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours. This setting affects the Server Message Block (SMB) component. When this policy is enabled, it causes client sessions with the SMB Service to be forcibly disconnected when the client's logon hours expire. If this policy is disabled, an established client session is allowed to be maintained after the client's logon hours have expired. Default on Windows Vista and above: Enabled. Default on Windows XP: Disabled\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_disconnectclientswhenlogonhoursexpire"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"a81975887d52a5df":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl","displayName":"Default search provider search URL","description":"Specifies the URL of the search engine used for a default search. The URL contains the string '{searchTerms}', which is replaced at query time by the terms the user is searching for.\r\n\r\nSpecify Bing's search URL as:\r\n\r\n'{bing:baseURL}search?q={searchTerms}'.\r\n\r\nSpecify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nThis policy is required when you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy; if you don't enable the latter policy, this policy is ignored.\r\n\r\nExample value: https://search.contoso.com/search?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_1","displayName":"Enabled","description":null,"helpText":null}]},"a8b16aaff09a8e15":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess","displayName":"Force networking code to run in the browser process","description":"This policy forces networking code to run in the browser process.\r\n\r\nThis policy is disabled by default. If enabled, users are open to security issues when the networking process is sandboxed.\r\n\r\nThis policy is intended to give enterprises a chance to migrate to 3rd party software that doesn't depend on hooking networking APIs. Proxy servers are recommended over LSPs and Win32 API patching.\r\n\r\nIf this policy isn't set, networking code may run out of the browser process depending on field trials of the NetworkService experiment.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"a85472974f399946":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mse7exe195","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mse7exe195_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mse7exe195_1","displayName":"True","description":null,"helpText":null}]},"a860eaebe97d2723":{"id":"device_vendor_msft_policy_config_system_allowmicrosoftmanageddesktopprocessing","displayName":"Allow Microsoft Managed Desktop Processing","description":"Allows diagnostic data from this device to be processed by Microsoft Managed Desktop. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Microsoft Managed Desktop. 32 – Diagnostic data is processed by Microsoft Managed Desktop. If this policy is disabled or not configured, diagnostic data from this device will not be processed by Microsoft Managed Desktop.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowmicrosoftmanageddesktopprocessing"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowmicrosoftmanageddesktopprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowmicrosoftmanageddesktopprocessing_32","displayName":"Allowed","description":"Allowed","helpText":null}]},"a806ee0f42890cbb":{"id":"device_vendor_msft_policy_config_webthreatdefense_serviceenabled","displayName":"Service Enabled","description":"Enables Enhanced Phishing Protection in audit mode for Windows 11 H2.","helpText":"","infoUrls":[],"categoryId":"20b71dc7-cf08-4534-9e52-d297dd071ca5","categoryName":"Enhanced Phishing Protection","options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_serviceenabled_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_serviceenabled_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"a82d70b309cd9ed2":{"id":"device_vendor_msft_wifi_profile_{ssid}_proxypacurl","displayName":"Connect Automatically when in range","description":"Connect to more preferred network if available","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"categoryId":"c4e48b1b-6d88-434f-a717-d5bab28eb245","categoryName":"Wi-Fi Connection","options":null},"a80cd713cad75c49":{"id":"settings_item_mdmoptions_mdmoptions_activationlockallowedwhilesupervised","displayName":"Activation Lock Allowed While Supervised","description":"If `true`, a supervised device registers itself with Activation Lock when the user enables Find My. This setting is available for supervised devices in iOS 7 and later, and macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"dd68a290-1ba7-470f-afca-339f443a767c","categoryName":"MDM Options","options":[{"id":"settings_item_mdmoptions_mdmoptions_activationlockallowedwhilesupervised_false","displayName":"Blocked","description":null,"helpText":null},{"id":"settings_item_mdmoptions_mdmoptions_activationlockallowedwhilesupervised_true","displayName":"Allowed","description":null,"helpText":null}]},"a8aca970d10080e3":{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcolorred","displayName":"Red (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"a8d78840fb89a259":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicysnapin","displayName":"Group Policy Object Editor (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-grouppolicysnapin"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicysnapin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicysnapin_1","displayName":"Enabled","description":null,"helpText":null}]},"a87478e0775b973b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled","displayName":"Allow DNS queries for additional DNS record types (User)","description":"This policy controls whether Google Chrome may query additional DNS record types when making insecure DNS requests. This policy has no effect on DNS queries made via Secure DNS, which may always query additional DNS types.\r\n\r\nIf this policy is unset or set to Enabled, additional types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).\r\n\r\nIf this policy is set to Disabled, DNS will only be queried for A (DNS type 1) and/or AAAA (DNS type 28).\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome. After removal of the policy, Google Chrome will always be able to query additional DNS types.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a84514f1db646399":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_browserswitcherdelay","displayName":"Delay before launching alternative browser (milliseconds): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"a8b5b45cae56b81d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowuiaccessforremoteassistance","displayName":"Allow remote users to interact with elevated windows in remote assistance sessions (User)","description":"Setting the policy to Enabled means the remote assistance host runs in a process with uiAccess permissions. This lets remote users interact with elevated windows on the local user's desktop.\r\n\r\nSetting the policy to Disabled or leaving it unset means the remote assistance host runs in the user's context, and remote users can't interact with elevated windows on the desktop.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowuiaccessforremoteassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowuiaccessforremoteassistance_1","displayName":"Enabled","description":null,"helpText":null}]},"a852646233145c6e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_1","displayName":"Enabled","description":null,"helpText":null}]},"a853fcc773084dfb":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinfullview","displayName":"Show Formula bar in Full View (User)","description":"Checked: Displays the Formula bar when the Full Screen command in the View menu is set. | Unchecked: Does not dispaly the Formula bar when the Full Screen command in the View menu is set.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinfullview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinfullview_1","displayName":"Enabled","description":null,"helpText":null}]},"a81db4a1638abb32":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp","displayName":"Turn off file synchronization via SOAP over HTTP (User)","description":"This policy setting controls file synchronization via SOAP over HTTP for Excel.\r\n\r\nIf you enable this policy setting, file synchronization via SOAP over HTTP is turned off for Excel.\r\n\r\nIf you disable or do not configure this policy setting this policy setting, file synchronization via SOAP over HTTP is turned on for Excel.\r\n\r\nNote: Turning off file synchronization via SOAP over HTTP will adversely affect the behavior of SharePoint Workspaces.","helpText":"","infoUrls":[],"categoryId":"183628a3-d0a5-47de-b444-e132d634ca38","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_1","displayName":"Enabled","description":null,"helpText":null}]},"a8a8a46c2a8fccfd":{"id":"user_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type.\n\nIf you enable this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type.\n\nIf you disable this policy setting, Internet Explorer processes will allow a MIME sniff promoting a file of one type to a more dangerous file type.\n\nIf you do not configure this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses"],"categoryId":"b03bfdc7-f42a-400e-935b-2b07fc71a7f1","categoryName":"Mime Sniffing Safety Feature","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"a8a2be3063097f1a":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"a8acbcc7a8b18af7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern","displayName":"Restrict which accounts can be used to sign in to Microsoft Edge (User)","description":"Determines which accounts can be used to sign in to the Microsoft Edge account that's chosen during the Sync opt-in flow.\r\n\r\nYou can configure this policy to match multiple accounts using a Perl style regular expression for the pattern. If a user tries to sign in to the browser with an account whose username doesn't match this pattern, they are blocked and will get the appropriate error message. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.\r\n\r\nIf you don't configure this policy or leave it blank, users can use any account to sign in to Microsoft Edge.\r\n\r\nNote that signed-in profiles with a username that doesn't match this pattern will be signed out after this policy is enabled.\r\n\r\nExample value: .*@contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_1","displayName":"Enabled","description":null,"helpText":null}]},"a8a7bb3e50b57030":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl","displayName":"Set the proxy .pac file URL (User)","description":"Specifies the URL for a proxy auto-config (PAC) file.\r\n\r\nThis policy is applied only if you selected 'Use a .pac proxy script' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, you can specify the URL for a PAC file, which defines how the browser automatically chooses the appropriate proxy server for fetching a particular website.\r\n\r\nIf you disable or don't configure this policy, no PAC file is specified. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: https://internal.contoso.com/example.pac","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_1","displayName":"Enabled","description":null,"helpText":null}]},"a85ab36d25bfa4b6":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled","displayName":"Controls whether the new HTML parser behavior for the element. This policy supports the old HTML parser behavior until M136.\r\n\r\nIf this policy is enabled or unset, the HTML parser will allow additional tags inside the element.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a852fb673e262feb":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio (User)","description":"This policy determines whether the browser enables adaptive buffering\r\nfor Web Audio. Adaptive buffering can reduce audio glitches but may\r\nincrease latency to varying degrees.\r\n\r\nEnabled: The browser will always use adaptive buffering.\r\nDisabled or Not Set: The browser will automatically decide during the\r\n feature launch process whether to use adaptive buffering.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a87b8c9bce99846c":{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls_localnetworkaccessallowedforurlsdesc","displayName":"Allow sites to make requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"a892427ee7c88202":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~protectedcontent_protectedcontentidentifiersallowed","displayName":"Allows web pages to use identifiers for the purpose of protected content playback (User)","description":"This policy controls whether sites can use hardware-specific device identifiers to enable hardware-secure DRM (for example, Widevine L1 or PlayReady SL3000), which may be required for high-resolution protected content playback.\r\n\r\nIf you enable this policy or do not configure it, sites are allowed to use protected content identifiers.\r\n\r\nIf you disable this policy, sites are not allowed to use protected content identifiers.","helpText":"","infoUrls":[],"categoryId":"2af24920-f611-4f03-99a6-205773869ae6","categoryName":"Protected Content","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~protectedcontent_protectedcontentidentifiersallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~protectedcontent_protectedcontentidentifiersallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"a8f9fa8f281ab648":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (User)","description":"This policy controls sending required and optional diagnostic data about browser usage to Microsoft.\r\n\r\nRequired diagnostic data is collected to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\nOptional diagnostic data includes data about how you use the browser, websites you visit and crash reports to Microsoft for product and service improvement.\r\n\r\nUp to version 121, this policy is not supported on Windows 10 devices. To control this data collection on Windows 10 for 121 and previous, IT admins must use the Windows diagnostic data group policy. This policy will either be 'Allow Telemetry' or 'Allow Diagnostic Data', depending on the version of Windows. Learn more about Windows 10 diagnostic data collection: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nFor version 122 and later, this policy is supported on Windows 10 devices to allow controlling Microsoft Edge data collection separately from Windows 10 diagnostics data collection.\r\n\r\nUse one of the following settings to configure this policy:\r\n\r\n'Off' turns off required and optional diagnostic data collection. This option is not recommended.\r\n\r\n'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\n'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.\r\n\r\nOn Windows 7/macOS, this policy controls sending required and optional data to Microsoft.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will default to the user's preference.\r\n\r\nPolicy options mapping:\r\n\r\n* Off (0) = Off (Not recommended)\r\n\r\n* RequiredData (1) = Required data\r\n\r\n* OptionalData (2) = Optional data\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_1","displayName":"Enabled","description":null,"helpText":null}]},"a8971770a989756e":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"a85177a55dc3936f":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown (User)","description":"Controls the duration (in seconds) that keepalive requests are allowed to prevent the browser from completing its shutdown.\r\n\r\nIf you configure this policy, the browser will block completing shutdown while it processes any outstanding keepalive requests (see https://fetch.spec.whatwg.org/#request-keepalive-flag) up to the maximum period of time specified by this policy.\r\n\r\nIf you disable or don't configure this policy, the default value of 0 seconds is used and outstanding keepalive requests will be immediately cancelled during browser shutdown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},"a8adc582a23cda31":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_croatianbosniaandherzegovina","displayName":"Croatian (Bosnia and Herzegovina) (User)","description":"Enables the editing language Croatian (Bosnia and Herzegovina)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_croatianbosniaandherzegovina_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_croatianbosniaandherzegovina_1","displayName":"Enabled","description":null,"helpText":null}]},"a8faf436492db607":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kanuri","displayName":"Kanuri (User)","description":"Enables the editing language Kanuri","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kanuri_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kanuri_1","displayName":"Enabled","description":null,"helpText":null}]},"a89fe4adf72dda76":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samiinarifinland","displayName":"Sami, Inari (Finland) (User)","description":"Enables the editing language \"Sami, Inari (Finland)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samiinarifinland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samiinarifinland_1","displayName":"Enabled","description":null,"helpText":null}]},"a8bf39100e6ffbc2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey17_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"a8e026281a033a7f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc11_l_allowsubfolders11","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc11_l_allowsubfolders11_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc11_l_allowsubfolders11_1","displayName":"True","description":null,"helpText":null}]},"a89849e767657f06":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_defaultformatforpublish_l_defaultformatforpublish405","displayName":"Default format for 'Publish' (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_defaultformatforpublish_l_defaultformatforpublish405_2","displayName":"Web Archive (*.mht)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_defaultformatforpublish_l_defaultformatforpublish405_1","displayName":"Web Page (*.htm)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_defaultformatforpublish_l_defaultformatforpublish405_0","displayName":"Default","description":null,"helpText":null}]},"a8bfc15406dd0571":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_changectrlentershortcutbehavior_l_changectrlentershortcutbehaviorid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_changectrlentershortcutbehavior_l_changectrlentershortcutbehaviorid_0","displayName":"CTRL+Enter is not a shortcut for sending a message","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_changectrlentershortcutbehavior_l_changectrlentershortcutbehaviorid_1","displayName":"CTRL+Enter is a shortcut for sending a message","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_changectrlentershortcutbehavior_l_changectrlentershortcutbehaviorid_2","displayName":"CTRL+Enter displays a prompt","description":null,"helpText":null}]},"a8cfe76835a85678":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_messagesexpireafterdays","displayName":"Messages expire after (days): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":null},"a82cb798c4465100":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_v2_l_signaturewarning30","displayName":"Signature Warning (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_v2_l_signaturewarning30_0","displayName":"Let user decide if they want to be warned","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_v2_l_signaturewarning30_1","displayName":"Always warn about invalid signatures","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_v2_l_signaturewarning30_2","displayName":"Never warn about invalid signatures","description":null,"helpText":null}]},"a877d9b8426b1800":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas","displayName":"Default file format (User)","description":"This policy setting governs the default format for new presentation files that users create.\r\n \r\nIf you enable this policy setting, when a user creates a new blank presentation, it is in the specified default format. Users may still override the default and specify a specific format when they create a presentation.\r\n\r\nIf you disable or do not configure this policy setting, PowerPoint Presentation is the default option.","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas_1","displayName":"Enabled","description":null,"helpText":null}]},"a885bdf45b0b7930":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjsplitinprogresstasks","displayName":"Split in-progress tasks (User)","description":"Allows rescheduling of remaining duration and work when a task slips or reports progress ahead of schedule.\r\n\r\nIf you enable this setting, the remaining duration and work will be rescheduled if a task slips or reports progress ahead of schedule.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjsplitinprogresstasks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjsplitinprogresstasks_1","displayName":"Enabled","description":null,"helpText":null}]},"a890aed2ffeac5c5":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc06_l_datecolon29","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"a86ca3b19f3184f2":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}_printersharedname","displayName":"Printer Shared Name (User)","description":"Identifies the Universal Print printer, by its Share Name, you wish to install on the targeted user account. The printer's Share Name can be found in the printer's properties via the Universal Print portal. Note: the targeted user account must have access rights to both the printer and to the Universal Print service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PrinterProvisioning-csp/"],"categoryId":"56c54112-2991-4bda-9e01-e6868bd07726","categoryName":"Printer Provisioning","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/a9.json b/public/intune-definitions/a9.json new file mode 100644 index 000000000000..674734f9adaf --- /dev/null +++ b/public/intune-definitions/a9.json @@ -0,0 +1 @@ +{"a95ccbf4749ab11d":{"id":"app_allowed_deniedbinaries_item_signingid","displayName":"Signing ID","description":"The code signature signing identifier of the binary.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"a9766aa72b0c4f4c":{"id":"com.android.devicerestrictionpolicy.certificatecredentialconfigurationdisabled","displayName":"Block users from configuring credentials (work profile-level)","description":"If 'True', prevents users from configuring certificates assigned to devices, even devices that aren't associated with a user account. If 'False', Intune doesn't change or update this setting. By default, the OS might make it possible for users to configure or change their credentials when they access them in the keystore. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":null,"infoUrls":[],"categoryId":"aad0d3ef-88f5-4b22-831b-27093eafbc64","categoryName":"Users and Accounts","options":[{"id":"com.android.devicerestrictionpolicy.certificatecredentialconfigurationdisabled_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.certificatecredentialconfigurationdisabled_false","displayName":"False","description":"false","helpText":null}]},"a9a4c2fdd2d3c1b4":{"id":"com.apple.applicationaccess_allowinternetsharingmodification","displayName":"Allow Internet Sharing Modification","description":"If 'false', prevents modifying Internet Sharing setting in System Settings.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowinternetsharingmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowinternetsharingmodification_true","displayName":"True","description":null,"helpText":null}]},"a96c3c0efd8ce4ac":{"id":"com.apple.applicationaccess_forcebypassscreencapturealert","displayName":"Force Bypass Screen Capture Alert","description":"If set to true, then the presentation of a screen capture alert will be bypassed.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcebypassscreencapturealert_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcebypassscreencapturealert_true","displayName":"Enabled","description":null,"helpText":null}]},"a91223b9886c0f0e":{"id":"com.apple.applicationaccess_safariallowautofill","displayName":"Safari Allow Autofill","description":"If false, disables Safari AutoFill for passwords, contact info, and credit cards and also prevents the Keychain from being used for AutoFill. Though third-party password managers are allowed and apps can use AutoFill. As of iOS 13, requires a supervised device. Available in iOS 4 and later, and macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_safariallowautofill_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_safariallowautofill_true","displayName":"True","description":null,"helpText":null}]},"a9802bcc09e8c1db":{"id":"com.apple.dock_magnification","displayName":"Magnification","description":"If true, enables magnification.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_magnification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_magnification_true","displayName":"True","description":null,"helpText":null}]},"a90b91d61f99d046":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_secondsperday","displayName":"Seconds Per Day","description":"The allowance for that day, in seconds. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"a975e573ca32cb97":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_staticcode","displayName":"Static Code","description":"If `true`, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_staticcode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_staticcode_true","displayName":"Enabled","description":null,"helpText":null}]},"a932648e1a9df5b9":{"id":"com.apple.webcontent-filter_autofilterenabled","displayName":"Auto Filter Enabled","description":"If true, automatic filtering is in an enabled state. This function evaluates each web page as it loads and attempts to identify and block content not suitable for children. The search algorithm is complex and may vary from release to release, but it’s basically looking for adult language.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_autofilterenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_autofilterenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"a94aeebb0f2c649f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotcdppagecontext","displayName":"Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (Obsolete)","description":"This policy has been obsoleted as of Edge 133. Instead of this obsolete policy, we recommend using \"EdgeEntraCopilotPageContext\".\n\nThis policy controls access to page contents for Copilot with Commercial Data Protection in the Edge sidebar. This policy applies only to Microsoft Entra ID profiles. To summarize pages and interact with text selections, it needs to be able to access the page contents. This policy doesn't apply to MSA profiles. This policy doesn't control access for Copilot without Commercial Data Protection. Access for Copilot without Commercial Data Protection is controlled by the policy CopilotPageContext.\n\nIf you enable this policy, Copilot with Commercial Data Protection will have access to page context.\n\nIf you don't configure this policy, a user can enable access to page context for Copilot with Commercial Data Protection using the setting toggle in Edge.\n\nIf you disable this policy, Copilot with Commercial Data Protection won't be able to access page context.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotcdppagecontext_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.copilotcdppagecontext_true","displayName":"Enabled","description":null,"helpText":null}]},"a9bebd014e50fe37":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localfontsallowedforurls","displayName":"Allow Local Fonts permission on these sites","description":"Specifies a list of site URL patterns for which the local fonts permission is automatically granted. Sites in this list can access information about local fonts.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are supported. This policy matches based on origin only; any path in the URL pattern is ignored.\n\nIf a site isn't included in this policy, the \"DefaultLocalFontsSetting\" policy applies if configured. Otherwise, the browser default behavior applies, and users can choose the permission on a per-site basis.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"a91b13fe1e645ef0":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_fontmitigation_fontmitigation_dl","displayName":"Mitigation Options","description":null,"helpText":"","infoUrls":[],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_fontmitigation_fontmitigation_dl_1000000000000","displayName":"Block untrusted fonts and log events","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_fontmitigation_fontmitigation_dl_2000000000000","displayName":"Do not block untrusted fonts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_fontmitigation_fontmitigation_dl_3000000000000","displayName":"Log events without blocking untrusted fonts","description":null,"helpText":null}]},"a922de1740dbfba4":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup","displayName":"Visio 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Visio 2013.\r\nMicrosoft Visio 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Visio 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Visio 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013visiobackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup_1","displayName":"Enabled","description":null,"helpText":null}]},"a969d2edbe41fdba":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016","displayName":"Microsoft Office 365 Word 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Word 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Word 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365word2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016_1","displayName":"Enabled","description":null,"helpText":null}]},"a9a48ccce969b15f":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_global_refresh_unit_options","displayName":"Global Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_global_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_global_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"a9083b26f14304cc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_printingpapersizedefault","displayName":"Default printing page size (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"a978a3cdb08965ac":{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths","displayName":"Hardened UNC Paths","description":"This policy setting configures secure access to UNC paths.\n\nIf you enable this policy, Windows only allows access to the specified UNC paths after fulfilling additional security requirements.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-connectivity#connectivity-hardeneduncpaths"],"categoryId":"643081a4-132d-463e-9d86-c8650cb2a011","categoryName":"Network Provider","options":[{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_1","displayName":"Enabled","description":null,"helpText":null}]},"a95769dbbc866ef7":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn","displayName":"DO Disallow Cache Server Downloads On VPN","description":"Specify to disallow downloads from Microsoft Connected Cache servers when the device has an active VPN connection. By default, the button is 'Not Set'. This means the device is allowed to download from Microsoft Connected Cache when the device has an active VPN connection. To block these downloads, turn the button on to 'Enabled'.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodisallowcacheserverdownloadsonvpn"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn_0","displayName":"Not Set","description":"Not Set","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"a9844a0f4c98522f":{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive","displayName":"Enable dev drive","description":"Dev drive or developer volume is a volume optimized for performance of developer scenarios. A developer volume allows an administrator to choose file system filters that are attached on the volume.\r\n\r\nDisabling this setting will disallow creation of new developer volumes, existing developer volumes will mount as regular volumes.\r\n\r\nIf this setting is not configured the default policy is to enable developer volumes while allowing antivirus filter to attach on a deveveloper volume. Further, if not configured, a local administrator can choose to not have antivirus filter attached to a developer volume.\r\n\r\nA reboot is required for this setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-filesystem#filesystem-enabledevdrive"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_1","displayName":"Enabled","description":null,"helpText":null}]},"a9819e7333847fab":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin","displayName":"Search Plugin","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Search Plugin.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\SearchPlugin\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin_1","displayName":"Enabled","description":null,"helpText":null}]},"a90689f02a9da18e":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"a99a9362826344e0":{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting","displayName":"Set the default \"share additional operating system region\" setting","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\r\n\r\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting will be shared with the web through the default JavaScript locale. If shared, websites will be able to query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\r\n\r\nIf you set this policy to \"Limited\", the OS Regional format will only be shared if its language part matches the Microsoft Edge display language.\r\n\r\nIf you set this policy to \"Always\", the OS Regional format will always be shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months can be displayed in one language while the surrounding text is displayed in another language.\r\n\r\nIf you set this policy to \"Never\", the OS Regional format will never be shared.\r\n\r\nExample 1: In this example the OS Regional format is set to \"en-GB\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Limited\", or \"Always\".\r\n\r\nExample 2: In this example the OS Regional format is set to \"es-MX\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Always\" but will not if the policy is set to \"Limited\".\r\n\r\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282\r\n\r\nPolicy options mapping:\r\n\r\n* Limited (0) = Limited\r\n\r\n* Always (1) = Always share the OS Regional format\r\n\r\n* Never (2) = Never share the OS Regional format\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"a921f34959b375fa":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout","displayName":"Set a timeout for delay of tab navigation for the Enterprise Mode Site List","description":"Allows you to set a timeout, in seconds, for Microsoft Edge tabs waiting to navigate until the browser has downloaded the initial Enterprise Mode Site List.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry\r\nand\r\n'DelayNavigationsForInitialSiteListDownload' (Require that the Enterprise Mode Site List is available before tab navigation) is set to \"All eligible navigations\" (1).\r\n\r\nTabs will not wait longer than this timeout for the Enterprise Mode Site List to download. If the browser has not finished downloading the Enterprise Mode Site List when the timeout expires, Microsoft Edge tabs will continue navigating anyway. The value of the timeout should be no greater than 20 seconds and no fewer than 1 second.\r\n\r\nIf you set the timeout in this policy to a value greater than the default of 2 seconds, an information bar is shown to the user after 2 seconds. The information bar contains a button that allows the user to quit waiting for the Enterprise Mode Site List download to complete.\r\n\r\nIf you don't configure this policy, the default timeout of 2 seconds is used. This default is subject to change in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"a922712238f1fb3c":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled","displayName":"Allow the audio process to run with priority above normal on Windows","description":"This policy controls the priority of the audio process on Windows.\r\nIf this policy is enabled, the audio process will run with above normal priority.\r\nIf this policy is disabled, the audio process will run with normal priority.\r\nIf this policy is not configured, the default configuration for the audio process will be used.\r\nThis policy is intended as a temporary measure to give enterprises the ability to\r\nrun audio with higher priority to address certain performance issues with audio capture.\r\nThis policy will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a9d0c46641d669e1":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_textbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"a9a7d261fa706281":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb_mindiskspacemb","displayName":"Minimum available disk space: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"a93940dc5dc67b63":{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports","displayName":"Sync Admin Reports","description":"This setting enables the Sync Admin Reports.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports_1","displayName":"Enabled","description":null,"helpText":null}]},"a93ee1b3d7292559":{"id":"device_vendor_msft_policy_config_search_donotusewebresults","displayName":"Do Not Use Web Results","description":"Don't search the web or display web results in Search. This policy setting allows you to control whether or not Search can perform queries on the web, and if the web results are displayed in Search. If you enable this policy setting, queries won't be performed on the web and web results won't be displayed when a user performs a query in Search. If you disable this policy setting, queries will be performed on the web and web results will be displayed when a user performs a query in Search.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#donotusewebresults"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_donotusewebresults_0","displayName":"Not allowed. Queries won't be performed on the web and web results won't be displayed when a user performs a query in Search.","description":"Not allowed. Queries won't be performed on the web and web results won't be displayed when a user performs a query in Search.","helpText":null},{"id":"device_vendor_msft_policy_config_search_donotusewebresults_1","displayName":"Allowed. Queries will be performed on the web and web results will be displayed when a user performs a query in Search.","description":"Allowed. Queries will be performed on the web and web results will be displayed when a user performs a query in Search.","helpText":null}]},"a97c80046942a380":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript","displayName":"Restrict legacy JScript execution for Office","description":"This policy setting controls JScript execution per Security Zone within Internet Explorer and WebBrowser Control (WebOC) for Office applications.\r\n\r\nIt's important to determine whether legacy JScript is being used to provide business-critical functionality before you enable this setting.\r\n\r\nIf Enabled, Office applications will not execute legacy JScript for the Internet or Restricted Sites zones and users aren’t notified by the application that legacy JScript execution is restricted. Modern JScript9 will continue to function for all zones.\r\n\r\nIf Disabled or Not Configured JScript will function without any restrictions.\r\n\r\nThe values are set in hexadecimal and should be converted prior to changing the setting value. To learn more about Internet Explorer Feature Control Key and the Restrict JScript process-level policy for Windows, please refer to: https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/general-info/ee330734(v=vs.85)#restrict-jscript-at-a-process-level ","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_1","displayName":"Enabled","description":null,"helpText":null}]},"a902bf0d06621645":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_connection_interval_graphics_data","displayName":"Enable Graphics related data logging for every connection interval","description":"\r\n This policy setting lets you enable graphics related data logging for every connection interval.\r\n\r\n If you enable this policy setting, the RD Session Host server logs graphics related data for every connection interval.\r\n\r\n If you disable or don’t configure this policy setting, the RD Session Host server logs graphics related data for only connection intervals with graphics issues.\r\n ","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_connection_interval_graphics_data_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_connection_interval_graphics_data_1","displayName":"Enabled","description":null,"helpText":null}]},"a9d810cbb0b3ed0c":{"id":"device_vendor_msft_policy_config_update_deferupdateperiod","displayName":"Defer Update Period","description":"Note. Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use DeferUpdatePeriod for Windows 10, version 1511 devices. Allows IT Admins to specify update delays for up to 4 weeks. Supported values are 0-4, which refers to the number of weeks to defer updates. In Windows 10 Mobile Enterprise version 1511 devices set to automatic updates, for DeferUpdatePeriod to work, you must set the following:Update/RequireDeferUpgrade must be set to 1System/AllowTelemetry must be set to 1 or higherIf the Specify intranet Microsoft update service location policy is enabled, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. If the Allow Telemetry policy is enabled and the Options value is set to 0, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. OS upgrade:Maximum deferral: 8 monthsDeferral increment: 1 monthUpdate type/notes:Upgrade - 3689BDC8-B205-4AF4-8D4A-A63924C5E9D5Update:Maximum deferral: 1 monthDeferral increment: 1 weekUpdate type/notes:If a machine has Microsoft Update enabled, any Microsoft Updates in these categories will also observe Defer / Pause logic. - Security Update - 0FA1201D-4330-4FA8-8AE9-B877473B6441- Critical Update - E6CF1350-C01B-414D-A61F-263D14D133B4- Update Rollup - 28BC880E-0592-4CBF-8F95-C79B17911D5F- Service Pack - 68C5B0A3-D1A6-4553-AE49-01D3A7827828- Tools - B4832BD8-E735-4761-8DAF-37F882276DAB- Feature Pack - B54E7D24-7ADD-428F-8B75-90A396FA584F- Update - CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83- Driver - EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0Other/cannot defer:Maximum deferral: No deferralDeferral increment: No deferralUpdate type/notes:Any update category not specifically enumerated above falls into this category. - Definition Update - E0789628-CE08-4437-BE74-2495B842F43B","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferupdateperiod"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"a9eb49a96fa2b456":{"id":"linux_customconfig_executioncontext","displayName":"Execution context","description":"Specifies in which context to execute the script.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"categoryId":"36716a4c-cedb-47bb-8f4b-5783fedc7c47","categoryName":null,"options":[{"id":"linux_customconfig_executioncontext_root","displayName":"Root","description":null,"helpText":null},{"id":"linux_customconfig_executioncontext_user","displayName":"User","description":null,"helpText":null}]},"a9e39cc63699eb00":{"id":"user_vendor_msft_policy_config_admx_previousversions_hidebackupentries_1","displayName":"Hide previous versions of files on backup location (User)","description":"This policy setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup media. Previous versions can come from the on-disk restore points or the backup media.\r\n\r\nIf you enable this policy setting, users cannot see any previous versions corresponding to backup copies, and can see only previous versions corresponding to on-disk restore points.\r\n\r\nIf you disable this policy setting, users can see previous versions corresponding to backup copies as well as previous versions corresponding to on-disk restore points.\r\n\r\nIf you do not configure this policy setting, it is disabled by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-hidebackupentries-1"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_hidebackupentries_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_hidebackupentries_1_1","displayName":"Enabled","description":null,"helpText":null}]},"a93da4fd88839904":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_news","displayName":"News (User)","description":"This policy setting configures the synchronization of user settings for the News app.\r\nBy default, the user settings of News sync between computers. Use the policy setting to prevent the user settings of News from synchronizing between computers.\r\nIf you enable this policy setting, News user settings continue to sync.\r\nIf you disable this policy setting, News user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-news"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_news_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_news_1","displayName":"Enabled","description":null,"helpText":null}]},"a9b96e02877134f6":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch","displayName":"Pin Internet search sites to the \"Search again\" links and the Start menu (User)","description":"This policy setting allows you to add Internet or intranet sites to the \"Search again\" links located at the bottom of search results in File Explorer and the Start menu links. The \"Search again\" links at the bottom of the Search Results view allow the user to reconduct a search but in a different location. The Internet search site will be searched with the text in the search box. To add an Internet search site, specify the URL of the search site in OpenSearch format with {searchTerms} for the query string (for example, http://www.example.com/results.aspx?q={searchTerms}).\r\n\r\nYou can add up to five additional links to the \"Search again\" links at the bottom of results returned in File Explorer after a search is executed. These links will be shared between Internet search sites and Search Connectors/Libraries. Search Connector/Library links take precedence over Internet search links.\r\n\r\nThe first several links will also be pinned to the Start menu. A total of four links can be pinned on the Start menu. The \"See more results\" link will be pinned first by default, unless it is disabled via Group Policy. The \"Search the Internet\" link is pinned second, if it is pinned via Group Policy (though this link is disabled by default). If a custom Internet search link is pinned using the \"Custom Internet search provider\" Group Policy, this link will be pinned third on the Start menu. The remaining link(s) will be shared between pinned Internet/intranet links and pinned Search Connectors/Libraries. Search Connector/Library links take precedence over Internet/intranet search links.\r\n\r\nIf you enable this policy setting, the specified Internet sites will appear in the \"Search again\" links and the Start menu links.\r\n\r\nIf you disable or do not configure this policy setting, no custom Internet search sites will be added to the \"Search again\" links or the Start menu links.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-tryharderpinnedopensearch"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_1","displayName":"Enabled","description":null,"helpText":null}]},"a925a14b24dcd051":{"id":"user_vendor_msft_policy_config_browser_enableextendedbookstelemetry","displayName":"Enable Extended Books Telemetry (User)","description":"This setting allows organizations to send extended telemetry on book usage from the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enableextendedbookstelemetry"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_enableextendedbookstelemetry_0","displayName":"Disabled","description":"Gather and send only basic diagnostic data, depending on the device configuration.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_enableextendedbookstelemetry_1","displayName":"Enabled","description":"Gather all diagnostic data.","helpText":null}]},"a9c1c6c1cb2051e5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed","displayName":"Allow or deny audio capture (User)","description":"Setting the policy to Enabled or leaving it unset means that, with the exception of URLs set in the AudioCaptureAllowedUrls list, users get prompted for audio capture access.\r\n\r\nSetting the policy to Disabled turns off prompts, and audio capture is only available to URLs set in the AudioCaptureAllowedUrls list.\r\n\r\nNote: The policy affects all audio input (not just the built-in microphone).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"a93312472d78f874":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_totalmemorylimitmb","displayName":"Set memory limit for Chrome instances: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"a9f96ab470959a68":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_cookiessessiononlyforurlsdesc","displayName":"Limit cookies from matching URLs to the current session (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"a93431373376d554":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes","displayName":"Disable URL protocol schemes (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nfile\r\nhttps","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_1","displayName":"Enabled","description":null,"helpText":null}]},"a9aa315186a5a839":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings","displayName":"Extension management settings (User)","description":"Setting the policy controls extension management settings for Google Chrome, including any controlled by existing extension-related policies. The policy supersedes any legacy policies that might be set.\r\n\r\nThis policy maps an extension ID or an update URL to its specific setting only. A default configuration can be set for the special ID \"*\", which applies to all extensions without a custom configuration in this policy. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest ( http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy ). If the 'override_update_url' flag is set to true, the extension is installed and updated using the \"update\" URL specified in the ExtensionInstallForcelist policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is a Chrome Web Store url.\r\n\r\nNote: For Windows® instances not joined to a Microsoft® Active Directory® domain, forced installation is limited to apps and extensions listed in the Chrome Web Store.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"abcdefghijklmnopabcdefghijklmnop\": {\r\n \"installation_mode\": \"allowed\",\r\n \"blocked_permissions\": [\r\n \"history\"\r\n ],\r\n \"minimum_version_required\": \"1.0.1\",\r\n \"toolbar_pin\": \"force_pinned\"\r\n },\r\n \"bcdefghijklmnopabcdefghijklmnopa\": {\r\n \"installation_mode\": \"force_installed\",\r\n \"update_url\": \"https://example.com/update_url\",\r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ],\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.example.com\"\r\n ],\r\n \"runtime_allowed_hosts\": [\r\n \"*://good.example.com\"\r\n ]\r\n },\r\n \"cdefghijklmnopabcdefghijklmnopab\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_install_message\": \"Custom error message.\"\r\n },\r\n \"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_install_message\": \"Custom error message.\"\r\n },\r\n \"update_url:https://www.example.com/update.xml\": {\r\n \"blocked_permissions\": [\r\n \"wallpaper\"\r\n ],\r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ],\r\n \"installation_mode\": \"allowed\"\r\n },\r\n \"fghijklmnopabcdefghijklmnopabcde\": {\r\n \"installation_mode\": \"removed\",\r\n \"blocked_install_message\": \"Custom removal message.\"\r\n },\r\n \"ghijklmnopabcdefghijklmnopabcdef\": {\r\n \"installation_mode\": \"force_installed\",\r\n \"update_url\": \"https://example.com/update_url\",\r\n \"override_update_url\": true\r\n },\r\n \"*\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_permissions\": [\r\n \"downloads\",\r\n \"bookmarks\"\r\n ],\r\n \"install_sources\": [\r\n \"https://company-intranet/chromeapps\"\r\n ],\r\n \"allowed_types\": [\r\n \"hosted_app\"\r\n ],\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.example.com\"\r\n ],\r\n \"runtime_allowed_hosts\": [\r\n \"*://good.example.com\"\r\n ],\r\n \"blocked_install_message\": \"Custom error message.\"\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"a93529a5905cbfb6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins","displayName":"Specify a list of enabled plugins (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"a95abbacaf7e9de0":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_0","displayName":"Battery Saver Mode will be disabled.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_1","displayName":"Battery Saver Mode will be enabled when the device is on battery power and battery level is low.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_2","displayName":"This value is deprecated as of M121. In M121 and after, values will be treated as EnabledBelowThreshold.","description":null,"helpText":null}]},"a9ff73372a54cdf6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins","displayName":"Allow file or directory picker APIs to be called without prior user gesture (User)","description":"For security reasons, the\r\nshowOpenFilePicker(),\r\nshowSaveFilePicker() and\r\nshowDirectoryPicker() web APIs\r\nrequire a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail.\r\n\r\nWith this policy set, admins can specify origins on which these APIs can be\r\ncalled without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is\r\nnot an accepted value for this policy.\r\n\r\nIf this policy is unset, all origins will require a prior user gesture to call\r\nthese APIs.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"a963886d2edda3c1":{"id":"user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_domainlist","displayName":"Domain allow list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"a9e28d307ec52469":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine","displayName":"Allow importing of search engine settings (User)","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\r\n\r\nIf you enable, this policy, the option to import search engine settings is automatically selected.\r\n\r\nIf you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_1","displayName":"Enabled","description":null,"helpText":null}]},"a9da999427322ca1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites","displayName":"Configure favorites (User)","description":"Configures a list of managed favorites.\r\n\r\nThe policy creates a list of favorites. Each favorite contains the keys \"name\" and \"url,\" which hold the favorite's name and its target. You can configure a subfolder by defining a favorites without an \"url\" key but with an additional \"children\" key that contains a list of favorites as defined above (some of which may be folders again). Microsoft Edge amends incomplete URLs as if they were submitted via the Address Bar, for example \"microsoft.com\" becomes \"https://microsoft.com/\".\r\n\r\nThese favorites are placed in a folder that can't be modified by the user (but the user can choose to hide it from the favorites bar). By default the folder name is \"Managed favorites\" but you can change it by adding to the list of favorites a dictionary containing the key \"toplevel_name\" with the desired folder name as the value.\r\n\r\nManaged favorites are not synced to the user account and can't be modified by extensions.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"toplevel_name\": \"My managed favorites folder\"\r\n }, \r\n {\r\n \"url\": \"microsoft.com\", \r\n \"name\": \"Microsoft\"\r\n }, \r\n {\r\n \"url\": \"bing.com\", \r\n \"name\": \"Bing\"\r\n }, \r\n {\r\n \"name\": \"Microsoft Edge links\", \r\n \"children\": [\r\n {\r\n \"url\": \"www.microsoftedgeinsider.com\", \r\n \"name\": \"Microsoft Edge Insiders\"\r\n }, \r\n {\r\n \"url\": \"www.microsoft.com/windows/microsoft-edge\", \r\n \"name\": \"Microsoft Edge\"\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_1","displayName":"Enabled","description":null,"helpText":null}]},"a9e981455a16fe31":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled","displayName":"Set WPAD optimization (User)","description":"Allows you to turn off WPAD (Web Proxy Auto-Discovery) optimization in Microsoft Edge.\r\n\r\nIf you disable this policy, WPAD optimization is disabled, which makes the browser wait longer for DNS-based WPAD servers.\r\n\r\nIf you enable or don't configure the policy, WPAD optimization is enabled.\r\n\r\nIndependent of whether or how this policy is enabled, the WPAD optimization setting cannot be changed by users.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"a9b42053497d964e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls","displayName":"Allow WebUSB on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a USB device.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policy - you can't both allow and block a URL.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"a9efefb2037b65b1":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist_internetexplorerintegrationsitelist","displayName":"Configure the Enterprise Mode Site List (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"a9891ec1bef31193":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention","displayName":"Block tracking of users' web-browsing activity (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_0","displayName":"Off (no tracking prevention)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_1","displayName":"Basic (blocks harmful trackers, content and ads will be personalized)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_2","displayName":"Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_3","displayName":"Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)","description":null,"helpText":null}]},"a9fce28af214ca57":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (User)","description":"If FriendlyURLs are enabled, Microsoft Edge will compute additional representations of the URL and place them on the clipboard.\r\n\r\nThis policy configures what format will be pasted when the user pastes in external applications, or inside Microsoft Edge without the 'Paste as' context menu item.\r\n\r\nIf configured, this policy makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu will not be available.\r\n\r\n* Not configured = The user will be able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\r\n\r\n* 1 = No additional formats will be stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature will be disabled.\r\n\r\n* 3 = The user will get a friendly URL whenever they paste into surfaces that accept rich text. The plain URL will still be available for non-rich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\r\n\r\n* 4 = (Not currently used)\r\n\r\nThe richer formats may not be well-supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\r\n\r\nThe recommended policy is available in Microsoft Edge 105 or later.\r\n\r\nPolicy options mapping:\r\n\r\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\r\n\r\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.\r\n\r\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_1","displayName":"Enabled","description":null,"helpText":null}]},"a9bd4466ec885e74":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasedefaulttimeout","displayName":"Set the database default timeout (User)","description":"This policy setting allows you to specify the default timeout in milliseconds used by the database shim. The application can specify a larger limit via the execution context.\r\n \r\nIf you enable this policy setting, you may specify the default timeout in milliseconds used by the database shim.\r\n\r\nIf you disable or do not configure this policy setting, a default of 7000 milliseconds will be used.","helpText":"","infoUrls":[],"categoryId":"952f69c8-2644-48df-976b-01fd624cbb3a","categoryName":"Database","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasedefaulttimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasedefaulttimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"a96e36df663e8912":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_graphicfilterlegacymode","displayName":"Graphic filter legacy mode (User)","description":"Controls code path used by legacy GIF/PNG/JPEG filters. The default is to use the GDI+ codecs for these image types. For a compatibility mode to previous versions of Office which will use the legacy filter code, enable this policy.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_graphicfilterlegacymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_graphicfilterlegacymode_1","displayName":"Enabled","description":null,"helpText":null}]},"a915cf5bedda5044":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits","displayName":"Configure minimum DSA public key size (User)","description":"This policy setting allows you to configure the minimum number of DSA public key bits Office allows to create digital signatures.\r\n \r\nIf you enable this policy setting, you can specify the minimum number of bits that can be used to create a digital signature. For example: 1024, 2048, etc.\r\n \r\nIf you disable or don’t configure this policy setting, Office allows all DSA keys, unless the legacy or invalid DSA policy settings are configured.\r\n\r\n If the legacy or invalid DSA public key bits policy settings are configured, then the default for this setting will be the next larger value. For example, if the number of DSA public key bits is set to 768, then this setting would default to 1024.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturemindsabits_1","displayName":"Enabled","description":null,"helpText":null}]},"a92241e08f407de2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_usethisresponsewhenyouproposenewmeetingtimes_l_usethisresponsewhenyouproposenewmeetingtimes6","displayName":"Use this response when you propose new meeting times (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_usethisresponsewhenyouproposenewmeetingtimes_l_usethisresponsewhenyouproposenewmeetingtimes6_2","displayName":"Tentative","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_usethisresponsewhenyouproposenewmeetingtimes_l_usethisresponsewhenyouproposenewmeetingtimes6_3","displayName":"Accept","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_usethisresponsewhenyouproposenewmeetingtimes_l_usethisresponsewhenyouproposenewmeetingtimes6_4","displayName":"Decline","description":null,"helpText":null}]},"a9b4da428af51723":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid","displayName":"Random number generator: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":null},"a929764072c56663":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_expandcollapseuimaximumzoomlevel_l_setexpandcollapseuimaximumzoomlevelspinid","displayName":"Set the maximum zoom level for expand / collapse on-object UI (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":null},"a911d502491384ed":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_tabcharacters","displayName":"Tab characters (User)","description":"Determines whether the symbol used to represent tabs is shown on the screen.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_tabcharacters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_tabcharacters_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/aa.json b/public/intune-definitions/aa.json new file mode 100644 index 000000000000..ea6705f023f6 --- /dev/null +++ b/public/intune-definitions/aa.json @@ -0,0 +1 @@ +{"aa9e77b2a9eed76a":{"id":"audioaccessory_temporarypairing_configuration_unpairingtime","displayName":"Unpairing Time","description":"A dictionary that describes when the device automatically unpairs temporarily paired audio accessories.","helpText":null,"infoUrls":[],"categoryId":"a42e2248-d2dc-4476-a92d-d152fd67e04b","categoryName":"Audio Accessory","options":null},"aaab9acde26bc2bd":{"id":"com.apple.directoryservice.managed_adpacketsignflag","displayName":"AD Packet Sign Flag","description":"If true, enables the AD Packet Sign key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adpacketsignflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adpacketsignflag_true","displayName":"True","description":null,"helpText":null}]},"aa26b7a2dd5f56b6":{"id":"com.apple.dnssettings.managed_ondemandrules","displayName":"On Demand Rules","description":"An array of rules defining the DNS settings. If rules are not present, the system always applies the DNS settings. These rules are identical to the OnDemandRules array in VPN payloads.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"aa5b0e4c4ec80b35":{"id":"com.apple.extensiblesso_extensiondata_generickey_integer","displayName":"Value","description":"Keys and values to pass to the app extension.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"aa49e0e063e17018":{"id":"com.apple.managedclient.preferences_customhelplink","displayName":"Specify custom help link","description":"Specify a link for the Help menu or the F1 key.\n\nIf you enable this policy, an admin can specify a link for the Help menu or the F1 key.\n\nIf you disable or don't configure this policy, the default link for the Help menu or the F1 key is used.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#customhelplink"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"aa6d6655967957a0":{"id":"com.apple.managedclient.preferences_enabledomainactionsdownload","displayName":"Enable Domain Actions Download from Microsoft","description":"In Microsoft Edge, Domain Actions represent a series of compatibility features that help the browser work correctly on the web.\n\nMicrosoft keeps a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken due to the new User Agent string on Microsoft Edge. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\n\nWhen the browser starts up and then periodically afterwards, the browser will contact the Experimentation and Configuration Service that contains the most up to date list of compatibility actions to perform. This list is saved locally after it is first retrieved so that subsequent requests will only update the list if the server's copy has changed.\n\nIf you enable this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.\n\nIf you disable this policy, the list of Domain Actions will no longer be downloaded from the Experimentation and Configuration Service.\n\nIf you don't configure this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enabledomainactionsdownload"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enabledomainactionsdownload_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enabledomainactionsdownload_true","displayName":"Enabled","description":null,"helpText":null}]},"aa7251cad3359fbb":{"id":"com.apple.managedclient.preferences_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode","description":"Enforces a minimum Restricted Mode on YouTube and prevents users from picking a less restricted mode.\n\nSet to Strict (2) to enforce Strict Restricted Mode on YouTube.\n\nSet to Moderate (1) to enforce the user to only use Moderate Restricted Mode and Strict Restricted Mode on YouTube. They can't disable Restricted Mode.\n\nSet to Off (0) or don't configure this policy to not enforce Restricted Mode on YouTube. External policies such as YouTube policies might still enforce Restricted Mode.\n\n* 0 = Do not enforce Restricted Mode on YouTube\n\n* 1 = Enforce at least Moderate Restricted Mode on YouTube\n\n* 2 = Enforce Strict Restricted Mode for YouTube","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forceyoutuberestrict"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forceyoutuberestrict_0","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forceyoutuberestrict_1","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forceyoutuberestrict_2","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},"aa0c86eacaa0d7af":{"id":"com.apple.managedclient.preferences_phoenixonboardingflowfrelaunched","displayName":"Hide the 'Personalize the new Outlook' dialog","description":"Suppress the welcome dialog that appears when users switch to New Outlook.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_phoenixonboardingflowfrelaunched_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_phoenixonboardingflowfrelaunched_true","displayName":"True","description":null,"helpText":null}]},"aa796fa8f76e21e0":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_time","displayName":"Time","description":"The time, in minutes, since midnight.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"aac3b12ebb80567f":{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths","displayName":"Recovery Key Rotation In Months","description":"The frequency to rotate the recovery key, in months","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":[{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_0","displayName":"Not configured","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_1","displayName":"1 month","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_2","displayName":"2 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_3","displayName":"3 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_4","displayName":"4 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_5","displayName":"5 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_6","displayName":"6 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_7","displayName":"7 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_8","displayName":"8 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_9","displayName":"9 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_10","displayName":"10 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_11","displayName":"11 months","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_recoverykeyrotationinmonths_12","displayName":"12 months","description":null,"helpText":null}]},"aa674a565506e78d":{"id":"com.apple.mcxmenuextras_displays.menu","displayName":"Displays","description":"If true, enables the Displays menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_displays.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_displays.menu_true","displayName":"True","description":null,"helpText":null}]},"aaeef741a8f2fe21":{"id":"com.apple.screensaver.user_com.apple.screensaver.user","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"11c4cf0f-a03d-4309-93b2-011be4c410d5","categoryName":"Screensaver User","options":null},"aaebf04f9c9e51ec":{"id":"com.apple.servicemanagement_rules_item_ruletype","displayName":"Rule Type","description":"The type of comparision to make.","helpText":null,"infoUrls":[],"categoryId":"9859957e-34f1-4669-9f95-2b7c79fff052","categoryName":"Service Management - Managed Login Items","options":[{"id":"com.apple.servicemanagement_rules_item_ruletype_0","displayName":"Bundle Identifier","description":null,"helpText":null},{"id":"com.apple.servicemanagement_rules_item_ruletype_1","displayName":"Bundle Identifier Prefix","description":null,"helpText":null},{"id":"com.apple.servicemanagement_rules_item_ruletype_2","displayName":"Label","description":null,"helpText":null},{"id":"com.apple.servicemanagement_rules_item_ruletype_3","displayName":"Label Prefix","description":null,"helpText":null},{"id":"com.apple.servicemanagement_rules_item_ruletype_4","displayName":"Team Identifier","description":null,"helpText":null}]},"aa8b7a680cd95477":{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary","displayName":"Media Library","description":"Allows the application to access Apple Music, music and video activity, and the media library.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"aac6aa2735cee543":{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockexternalextensions","displayName":"Blocks external extensions from being installed","description":"Control the installation of external extensions.\n\nIf you enable this setting, external extensions are blocked from being installed.\n\nIf you disable this setting or leave it unset, external extensions are allowed to be installed.\n\nExternal extensions and their installation are documented at [Alternate extension distribution methods](/microsoft-edge/extensions-chromium/developer-guide/alternate-distribution-options).","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockexternalextensions_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockexternalextensions_true","displayName":"Enabled","description":null,"helpText":null}]},"aa6381e84e593eca":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":null},"aa99c795b880bae5":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablepackedexescanning","displayName":"Scan packed executables","description":"This policy setting allows you to configure scanning for packed executables. It is recommended that this type of scanning remain enabled.\r\n\r\n If you enable or do not configure this setting, packed executables will be scanned.\r\n\r\n If you disable this setting, packed executables will not be scanned.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disablepackedexescanning"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablepackedexescanning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablepackedexescanning_1","displayName":"Enabled","description":null,"helpText":null}]},"aa8bf368b0c89f09":{"id":"device_vendor_msft_policy_config_admx_pca_disablepcauipolicy","displayName":"Detect compatibility issues for applications and drivers","description":"This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with application and driver compatibility. \r\n\r\nIf you enable this policy setting, the PCA is configured to detect failures during application installation, failures during application runtime, and drivers blocked due to compatibility issues. When failures are detected, the PCA will provide options to run the application in a compatibility mode or get help online through a Microsoft website.\r\n\r\nIf you disable this policy setting, the PCA does not detect compatibility issues for applications and drivers.\r\n\r\nIf you do not configure this policy setting, the PCA is configured to detect failures during application installation, failures during application runtime, and drivers blocked due to compatibility issues.\r\n\r\nNote: This policy setting has no effect if the \"Turn off Program Compatibility Assistant\" policy setting is enabled. The Diagnostic Policy Service (DPS) and Program Compatibility Assistant Service must be running for the PCA to run. These services can be configured by using the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pca#admx-pca-disablepcauipolicy"],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_disablepcauipolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_disablepcauipolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"aad1a9bc151c75e9":{"id":"device_vendor_msft_policy_config_admx_power_dccriticalsleeptransitionsdisable_2","displayName":"Turn on the ability for applications to prevent sleep transitions (on battery)","description":"This policy setting allows you to turn on the ability for applications and services to prevent the system from sleeping.\r\n\r\nIf you enable this policy setting, an application or service may prevent the system from sleeping (Hybrid Sleep, Stand By, or Hibernate).\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dccriticalsleeptransitionsdisable-2"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dccriticalsleeptransitionsdisable_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dccriticalsleeptransitionsdisable_2_1","displayName":"Enabled","description":null,"helpText":null}]},"aa6b57ca1af89b61":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout_repositorytimeout","displayName":"Synchronization timeout (in milliseconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"aa8700a119bbf987":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_bingweather","displayName":"MSN Weather","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_bingweather_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_bingweather_1","displayName":"True","description":null,"helpText":null}]},"aa711744ad2e5505":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_publishing_refresh_options","displayName":"Global Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"aa5c4adc5490e18b":{"id":"device_vendor_msft_policy_config_browser_configurehomebutton","displayName":"Configure Home Button","description":"The Home button loads either the default Start page, the New tab page, or a URL defined in the Set Home Button URL policy. By default, this policy is disabled or not configured and clicking the home button loads the default Start page. When enabled, the home button is locked down preventing your users from making changes in Microsoft Edge's UI settings. To let your users change the Microsoft Edge UI settings, enable the Unlock Home Button policy. If Enabled AND: - Show home button & set to Start page is selected, clicking the home button loads the Start page. - Show home button & set to New tab page is selected, clicking the home button loads a New tab page. - Show home button & set a specific page is selected, clicking the home button loads the URL specified in the Set Home Button URL policy. - Hide home button is selected, the home button is hidden in Microsoft Edge. Default setting: Disabled or not configured Related policies: - Set Home Button URL - Unlock Home Button","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurehomebutton"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_configurehomebutton_0","displayName":"Show home button and load the Start page","description":"Show home button and load the Start page","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configurehomebutton_1","displayName":"Show home button and load the New tab page","description":"Show home button and load the New tab page","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configurehomebutton_2","displayName":"Show home button and load the custom URL defined in the Set Home Button URL policy","description":"Show home button and load the custom URL defined in the Set Home Button URL policy","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configurehomebutton_3","displayName":"Hide home button","description":"Hide home button","helpText":null}]},"aa99aacf481255af":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled","displayName":"Control how Chrome Cleanup reports data to Google","description":"Setting the policy to Enabled means if Chrome Cleanup detects unwanted software, it may, in line with policy set by SafeBrowsingExtendedReportingEnabled, report about the scan to Google. Chrome Cleanup asks users if they want the cleanup. It sends results to Google.\r\n\r\nSetting the policy to Disabled means if Chrome Cleanup detects unwanted software, it won't report about the scan to Google, regardless of the value of SafeBrowsingExtendedReportingEnabled. Chrome Cleanup asks users if they want the cleanup. The results aren't reported to Google.\r\n\r\nLeaving the policy unset means Chrome Cleanup may, in line with policy set by SafeBrowsingExtendedReportingEnabled, report about scans for detecting unwanted software to Google. Chrome Cleanup asks users if they want the cleanup and to share the results with Google to help with future unwanted software detection. These results have file metadata, automatically installed extensions, and registry keys, as described by the Chrome Privacy Whitepaper.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"aac2c388d09f0d1e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls","displayName":"Allow popups on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can open pop-ups.\r\n\r\nLeaving the policy unset means DefaultPopupsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"aaa3218fb8677bcf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of capture.\r\n\r\nNote that windowed Chrome Apps with the same origin as this site will still be allowed to be captured.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: TabCaptureAllowedByOrigins, WindowCaptureAllowedByOrigins, ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"aa848159ea06e4fc":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_pdflocalfileaccessallowedfordomainsdesc","displayName":"Allow local file access to file:// URLs on these sites in the PDF Viewer (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"aac90938031330c0":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers","displayName":"Block abuse of exploited vulnerable signed drivers (Device)","description":"This rule prevents an application from writing a vulnerable signed driver to disk. In-the-wild, vulnerable signed drivers can be exploited by local applications - that have sufficient privileges - to gain access to the kernel. Vulnerable signed drivers enable attackers to disable or circumvent security solutions, eventually leading to system compromise. The Block abuse of exploited vulnerable signed drivers rule does not block a driver already existing on the system from being loaded.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_warn","displayName":"Warn","description":null,"helpText":null}]},"aac02946c903b220":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting","displayName":"Default Adobe Flash setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_2","displayName":"Block the Adobe Flash plugin","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_3","displayName":"Click to play","description":null,"helpText":null}]},"aae824b8e797c822":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled","displayName":"Configure Microsoft Defender SmartScreen","description":"This policy setting lets you configure whether to turn on Microsoft Defender SmartScreen. Microsoft Defender SmartScreen provides warning messages to help protect your users from potential phishing scams and malicious software. By default, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you enable this setting, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"aa204b0eda56354d":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled","displayName":"Swipe gestures in Microsoft Edge kiosk mode enabled","description":"This policy only applies to Microsoft Edge kiosk mode.\r\n\r\nIf you enable this policy or don't configure it, swipe gestures will behave as expected.\r\n\r\nIf you disable this policy, the user will not be able to use swipe gestures (for example navigate forwards and backwards, refresh page).\r\n\r\nFor detailed information on configuring kiosk mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"categoryId":"d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","categoryName":"Kiosk Mode settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"aac5a0eba5b0d31f":{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended","displayName":"Pin browser essentials toolbar button","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\r\n\r\nWhen the button is pinned, it will always appear on the toolbar.\r\n\r\nWhen the button isn't pinned, it will only appear when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\r\n\r\nIf you enable or don't configure this policy, the Browser essentials button will be pinned on the toolbar.\r\n\r\nIf you disable this policy, the Browser essentials button won't be pinned on the toolbar.\r\n\r\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"aa400b006e2dc0b5":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model","description":"Configure how Microsoft Edge downloads the foundational GenAI model and uses it for inference locally.\r\n\r\nWhen the policy is set to Allowed (0) or not set, the model is downloaded automatically, and used for inference.\r\n\r\nWhen the policy is set to Disabled (1), the model will not be downloaded.\r\n\r\nModel downloading can also be disabled by ComponentUpdatesEnabled.\r\n\r\nPolicy options mapping:\r\n\r\n* Allowed (0) = Downloads model automatically\r\n\r\n* Disabled (1) = Do not download model\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"76e34834-6d47-4e06-b14c-aa2888cdce27","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"aa1ea43e065842a3":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended_managedsearchengines","displayName":"Manage Search Engines (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":null},"aa45d78c999753e0":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls","displayName":"Block Sleeping Tabs on specific sites","description":"Define a list of sites, based on URL patterns, that are not allowed to be put to sleep by Sleeping Tabs.\r\n\r\nIf the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is disabled, this list is not used and no sites will be put to sleep automatically.\r\n\r\nIf you don't configure this policy, all sites will be eligible to be put to sleep unless the user's personal configuration blocks them.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"aa4741feb5b5fd23":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mse7exe139","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mse7exe139_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mse7exe139_1","displayName":"True","description":null,"helpText":null}]},"aa3928ff5de266b2":{"id":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage","displayName":"Allow Add Provisioning Package","description":"Specifies whether to allow the runtime configuration agent to install provisioning packages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#allowaddprovisioningpackage"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"aa2849292645f782":{"id":"device_vendor_msft_policy_config_start_disablecontextmenus","displayName":"Disable Context Menus","description":"Enabling this policy prevents context menus from being invoked in the Start Menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#disablecontextmenus"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_disablecontextmenus_0","displayName":"Disabled","description":"Do not disable.","helpText":null},{"id":"device_vendor_msft_policy_config_start_disablecontextmenus_1","displayName":"Enabled","description":"Disable.","helpText":null}]},"aaa22a14518585ae":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation","displayName":"Allow installation default","description":"You can specify the default behavior of all channels to allow or block Microsoft Edge on domain-joined devices.\r\n\r\nYou can override this policy for individual channels by enabling the 'Allow installation' policy for specific channels.\r\n\r\nIf you disable this policy, the installation of Microsoft Edge is blocked. This only affects the installation of Microsoft Edge software when the 'Allow installation' policy is set to Not Configured.\r\n\r\nThis policy doesn't prevent Microsoft Edge Update from running or prevent users from installing Microsoft Edge software using other methods.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_1","displayName":"Enabled","description":null,"helpText":null}]},"aa60a2cd983d75e0":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"aa0d4b332be379d1":{"id":"enrollment_autopilot_dpp_jointype","displayName":"Join type","description":"Specify how devices join an identity provider in your organization.","helpText":"","infoUrls":[],"categoryId":"47b863f6-8116-432b-9fc1-9e487fdaa203","categoryName":null,"options":{"id":"enrollment_autopilot_dpp_jointype_0","displayName":"Microsoft Entra joined","description":"Cloud-only without an on-premises Windows Server Active Directory","helpText":null}},"aa10cded268d5336":{"id":"linux_mdatp_managed_antivirusengine_nonexecmountpolicy","displayName":"non execute mount mute","description":"Specifies the behavior of RTP on mount point marked as nonexec. ","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#muting-non-exec-mounts"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_nonexecmountpolicy_0","displayName":"unmute","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_nonexecmountpolicy_1","displayName":"mute","description":null,"helpText":null}]},"aa6fa75565167377":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"aa1d3c758b325427":{"id":"user_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_1","displayName":"Prevent restoring previous versions from backups (User)","description":"This policy setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file, in which the previous version is stored on a backup.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a backup.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a backup. If the Restore button is clicked, Windows attempts to restore the file from the backup media.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a local file and stored on the backup.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablebackuprestore-1"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_1_1","displayName":"Enabled","description":null,"helpText":null}]},"aae23507d5f42873":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomanagemycomputerverb","displayName":"Hides the Manage item on the File Explorer context menu (User)","description":"Removes the Manage item from the File Explorer context menu. This context menu appears when you right-click File Explorer or My Computer.\r\n\r\nThe Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.\r\n\r\nThis setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.\r\n\r\nTip: To hide all context menus, use the \"Remove File Explorer's default context menu\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nomanagemycomputerverb"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomanagemycomputerverb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomanagemycomputerverb_1","displayName":"Enabled","description":null,"helpText":null}]},"aa35f005b56cd386":{"id":"user_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_1","displayName":"Turn off the offer to update to the latest version of Windows (User)","description":"Enables or disables the Store offer to update to the latest version of Windows.\r\n\r\nIf you enable this setting, the Store application will not offer updates to the latest version of Windows.\r\n\r\nIf you disable or do not configure this setting the Store application will offer updates to the latest version of Windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsstore#admx-windowsstore-disableosupgrade-1"],"categoryId":"be9bdbec-b52e-4174-9c5b-cf765dee855b","categoryName":"Store","options":[{"id":"user_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_1_1","displayName":"Enabled","description":null,"helpText":null}]},"aa7597523c7fd0f9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled","displayName":"Enable or disable bookmark editing (User)","description":"Setting the policy to True or leaving it unset lets users add, remove, or modify bookmarks.\r\n\r\nSetting the policy to False means users can't add, remove, or modify bookmarks. They can still use existing bookmarks.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"aa6782cc32806842":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch","displayName":"Force Google SafeSearch (User)","description":"Setting the policy to Enabled means SafeSearch in Google Search is always active, and users can't change this setting.\r\n\r\nSetting the policy to Disabled or leaving it unset means SafeSearch in Google Search is not enforced.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"aa0ebafc1f8f9abe":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain","displayName":"Configure the required domain name for remote access clients (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: my-awesome-domain.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_1","displayName":"Enabled","description":null,"helpText":null}]},"aa882f03dc762c5d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview","displayName":"Disable Print Preview (User)","description":"Setting the policy to Enabled has Google Chrome open the system print dialog instead of the built-in print preview when users request a printout.\r\n\r\nSetting the policy to Disabled or leaving it unset has print commands trigger the print preview screen.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview_1","displayName":"Enabled","description":null,"helpText":null}]},"aa82904a37d46546":{"id":"user_vendor_msft_policy_config_display_enableperprocessdpi","displayName":"Enable Per Process Dpi (User)","description":"Enable or disable Per-Process System DPI for all applications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#enableperprocessdpi"],"categoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_display_enableperprocessdpi_0","displayName":"Disabled","description":"Disable.","helpText":null},{"id":"user_vendor_msft_policy_config_display_enableperprocessdpi_1","displayName":"Enabled","description":"Enable.","helpText":null}]},"aa5c38fc557d23ed":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas","displayName":"Default file format (User)","description":"This policy setting controls the default file format for saving workbooks in Excel.\r\n\r\nIf you enable this policy setting, you can set the default file format for Excel from among the following options:\r\n\r\n- Excel Workbook (.xlsx).This option is the default configuration in Excel 2016.\r\n- Excel Macro-Enabled Workbook (.xlsm)\r\n- Excel Binary Workbook (.xlsb)\r\n- Web Page (.htm; .html)\r\n- Excel 97-2003 Workbook (.xls)\r\n- Excel 5.0/95 Workbook (.xls)\r\n- OpenDocument Spreadsheet (*.ods)\r\n\r\nUsers can choose to save workbooks in a different file format than the default.\r\n\r\nIf you disable or you do not configure this policy setting, Excel saves new workbooks in the Office Open XML format with an .xlsx extension.","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_1","displayName":"Enabled","description":null,"helpText":null}]},"aa346db15a1d353f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"aa96be928ba6c1db":{"id":"user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum_1","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum_0","displayName":"Show Additional Warning","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum_2","displayName":"Allow","description":null,"helpText":null}]},"aaf2747aba2245c1":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"aa385b04f284a2f6":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles","displayName":"Enable use of ephemeral profiles (User)","description":"Controls whether user profiles are switched to ephemeral mode. An ephemeral profile is created when a session begins, is deleted when the session ends, and is associated with the user's original profile.\r\n\r\nIf you enable this policy, profiles run in ephemeral mode. This lets users work from their own devices without saving browsing data to those devices. If you enable this policy as an OS policy (by using GPO on Windows, for example), it applies to every profile on the system.\r\n\r\nIf you disable this policy or don't configure it, users get their regular profiles when they sign in to the browser.\r\n\r\nIn ephemeral mode, profile data is saved on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies, and web databases aren't saved after the browser is closed. This doesn't prevent a user from manually downloading any data to disk, or from saving pages or printing them. If the user has enabled sync, all data is preserved in their sync accounts just like with regular profiles. Users can also use InPrivate browsing in ephemeral mode unless you explicitly disable this.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},"aab3044baac7c12a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended","displayName":"Enable AutoFill for addresses (User)","description":"Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills in address information, nor does it save additional address information that the user might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for addresses in the user interface.\r\n\r\nNote that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won't suggest or AutoFill any previous entries.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"aa2144b59e99a586":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls","displayName":"Allow JavaScript on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are allowed to run JavaScript.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultJavaScriptSetting' (Default JavaScript setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"aa3fc244905e03bf":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended","displayName":"Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work profile (User)","description":"Allow your organization's logo from Entra, if any, to be overlaid on the Microsoft Edge app icon of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\r\n\r\nIf you enable this policy, your organization's logo from Entra will be used.\r\n\r\nIf you disable or don't configure this policy, your organization's logo from Entra won't be used.\r\n\r\nFor more information about configuring your organization's logo on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"aa4031ecb4435463":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls","displayName":"Block Window Management permission on specified sites (User)","description":"Lets you configure a list of site url patterns that specify sites which will automatically deny the window management permission. This limits the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy isn't configured for a site, then the policy from 'DefaultWindowManagementSetting' (Default Window Management permission setting) applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"aaed12d3efa67e87":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_viewxfapdfiniemodeallowedoriginsdesc","displayName":"View XFA-based PDF files using IE Mode for allowed file origin. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":null},"aa4cb90ddd037ffd":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended","displayName":"Allow unconfigured sites to be reloaded in Internet Explorer mode (User)","description":"This policy allows users to reload unconfigured sites (that are not configured in the Enterprise Mode Site List) in Internet Explorer mode when browsing in Microsoft Edge and a site requires Internet Explorer for compatibility.\r\n\r\nAfter a site has been reloaded in Internet Explorer mode, \"in-page\" navigations will stay in Internet Explorer mode (for example, a link, script, or form on the page, or a server-side redirect from another \"in-page\" navigation). Users can choose to exit from Internet Explorer mode, or Microsoft Edge will automatically exit from Internet Explorer mode when a navigation that isn't \"in-page\" occurs (for example, using the address bar, the back button, or a favorite link).\r\n\r\nUsers can also optionally tell Microsoft Edge to use Internet Explorer mode for the site in the future. This choice will be remembered for a length of time managed by the 'InternetExplorerIntegrationLocalSiteListExpirationDays' (Specify the number of days that a site remains on the local IE mode site list) policy.\r\n\r\nIf the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) policy is set to 'IEMode', then sites explicitly configured by the 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy's site list to use Microsoft Edge can't be reloaded in Internet Explorer mode, and sites configured by the site list or by the 'SendIntranetToInternetExplorer' (Send all intranet sites to Internet Explorer) policy to use Internet Explorer mode can't exit from Internet Explorer mode.\r\n\r\nIf you enable this policy, users are allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nIf you disable this policy, users aren't allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nNote that if you enable this policy, it takes precedence over how you configured the 'InternetExplorerIntegrationTestingAllowed' (Allow Internet Explorer mode testing) policy, and that policy will be disabled.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"aa338bbf45decfe4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_l_workflowdescrip470","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"aad247bacc8ee1b5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey15_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"aa4c6c72a2447f32":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},"aaf5869065cd8d3b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_moreactionsurl","displayName":"More actions URL (User)","description":"This policy setting allows you to specify what URL to send users to when the More Actions button is clicked. The More Actions button can be found under File tab | Options | Proofing | Autocorrect Options... | Actions | More Actions.\r\n\r\nIf you enable this policy setting and you specify a URL, the More Actions button will send the user to the specified URL. If you enable this policy setting and you do not specify a URL (you leave the field blank), the More Actions button is disabled.\r\n\r\nIf you disable or do not configure this policy setting, the More Actions button will send the user to the default URL.","helpText":"","infoUrls":[],"categoryId":"69931627-230d-4df9-bbef-e3eac64ea8ef","categoryName":"Additional Actions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_moreactionsurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_moreactionsurl_1","displayName":"Enabled","description":null,"helpText":null}]},"aa23aea08ba834d8":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontsize_l_fontsize","displayName":"Font Size: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":null},"aa7079ad5c1df042":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_checktolocksections","displayName":"Check to lock sections (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1979a12b-2a72-438d-9de7-320d1b38e777","categoryName":"Password","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_checktolocksections_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_lockpasswordprotectedsectionsafteruserhasntworkedonthemforatime_l_checktolocksections_1","displayName":"True","description":null,"helpText":null}]},"aa6dc63843538d43":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_recurrenceoptions_l_disablenoenddate","displayName":"Disable the \"No end date\" option for recurring items (User)","description":"This policy setting allows you to disable the \"No end date\" option for the recurrence range in appointments, meetings, and tasks.\r\n\r\nIf you enable this policy setting, the “No end date” option is disabled, and the “End after” recurrence setting is selected and set to “10 occurrences” by default. You can change this default setting by configuring the “Specify total number of days in a recurring meeting or appointment” policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the “No end date” option is enabled and is the default setting for recurring meetings, appointments, and tasks.","helpText":"","infoUrls":[],"categoryId":"826db7fb-889b-4a99-80a6-38347ba37f21","categoryName":"Recurring item configuration","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_recurrenceoptions_l_disablenoenddate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_recurrenceoptions_l_disablenoenddate_1","displayName":"Enabled","description":null,"helpText":null}]},"aa2fbe58c572d690":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_l_onexecutecustomactionoom_setting","displayName":"When executing a custom action: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e11f4bd4-9041-49c9-9b8c-163827d606ce","categoryName":"Custom Form Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_l_onexecutecustomactionoom_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_l_onexecutecustomactionoom_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_l_onexecutecustomactionoom_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_l_onexecutecustomactionoom_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"aadc679bd57d13d7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipheralgorithm","displayName":"Set CNG cipher algorithm (User)","description":"This policy setting allows you to configure the CNG cipher algorithm that is used.\r\n\r\nIf you enable this policy setting, then the cipher provided will be used if it is a supported algorithm.\r\n\r\nIf you disable or do not configure this policy setting, AES will be used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipheralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipheralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"aa2d475e7c63fb88":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_datecolon9","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"aafb0afd3d8467bc":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultendtime","displayName":"Default end time (User)","description":"Specifies the finish time that Project assigns to tasks by default when you enter a finish date without specifying a time.\r\n\r\nIf you enable this setting, new tasks where the user does not enter an end time will have the end time that you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultendtime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultendtime_1","displayName":"Enabled","description":null,"helpText":null}]},"aab85e9c72cdbc3d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts","displayName":"Week starts on (User)","description":"Specifies the day of the week on which you want the scheduling week to begin.\r\n\r\nIf you enable this setting, weeks will start on the day you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjweekstarts_1","displayName":"Enabled","description":null,"helpText":null}]},"aa96730ac9baa256":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_l_pjminutes8","displayName":"Minutes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_l_pjminutes8_0","displayName":"m","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_l_pjminutes8_1","displayName":"min","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_l_pjminutes8_2","displayName":"minute","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_l_pjminutes8_3","displayName":"\r\n ","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjminutes_l_pjminutes8_4","displayName":"\r\n ","description":null,"helpText":null}]},"aaa3412b86281431":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle","displayName":"Angle (User)","description":"Specifies the unit of measure for the angle of rotation.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_angle_1","displayName":"Enabled","description":null,"helpText":null}]},"aa72855a1ed62a10":{"id":"user_vendor_msft_policy_config_windowsai_setcopilothardwarekey","displayName":"Set Copilot Hardware Key (User)","description":"This policy setting determines which app opens when the user presses the Copilot key on their keyboard. If the policy is enabled, the specified app will open when the user presses the Copilot key. Users can change the key assignment in Settings. If the policy is not configured, Copilot will open if it's available in that country or region.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setcopilothardwarekey"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":null},"aa6581eb0fb32887":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation","displayName":"Stop checking for alt text accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that objects such as images and shapes contain alt text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that objects such as images and shapes contain alt text.\r\n\r\nIf you disable or do not configure this policy setting, objects will be checked for alternative text and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/ab.json b/public/intune-definitions/ab.json new file mode 100644 index 000000000000..6a01be448ecc --- /dev/null +++ b/public/intune-definitions/ab.json @@ -0,0 +1 @@ +{"ab3899cd0fa9de85":{"id":"com.apple.airplay_passwords_item_password","displayName":"Password","description":"The password for the AirPlay destination.","helpText":null,"infoUrls":[],"categoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","categoryName":"AirPlay","options":null},"abf982be633a25f3":{"id":"com.apple.cellular_attachapn_allowedprotocolmask","displayName":"Allowed Protocol Mask","description":"The supported Internet Protocol versions.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":[{"id":"com.apple.cellular_attachapn_allowedprotocolmask_0","displayName":"IPv4","description":null,"helpText":null},{"id":"com.apple.cellular_attachapn_allowedprotocolmask_1","displayName":"IPv6","description":null,"helpText":null},{"id":"com.apple.cellular_attachapn_allowedprotocolmask_2","displayName":"Both","description":null,"helpText":null}]},"abdf76b3b6006c1c":{"id":"com.apple.dictionary_com.apple.dictionary","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"65087b94-7e45-4d74-a50d-df4377b67499","categoryName":"Parental Controls Dictionary","options":null},"abd18f621e66b485":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app","displayName":"OneDrive","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"abdde1588f3f2f44":{"id":"com.apple.managedclient.preferences_hidestatusmenuicon","displayName":"Show / hide status menu icon","description":"Whether the status menu icon (shown in the top-right corner of the screen) is hidden or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#show--hide-status-menu-icon"],"categoryId":"67cd904c-78e0-4e77-9dd4-c713b21763f3","categoryName":"User interface preferences","options":[{"id":"com.apple.managedclient.preferences_hidestatusmenuicon_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_hidestatusmenuicon_true","displayName":"Enabled","description":null,"helpText":null}]},"abb27d2c506a0ff0":{"id":"com.apple.managedclient.preferences_smartscreenpuaenabled","displayName":"Configure Microsoft Defender SmartScreen to block potentially unwanted apps","description":"This policy setting lets you configure whether to turn on blocking for potentially unwanted apps in Microsoft Defender SmartScreen. Potentially unwanted app blocking in Microsoft Defender SmartScreen provides warning messages to help protect users from adware, coin miners, bundleware, and other low-reputation apps that are hosted by websites. Potentially unwanted app blocking in Microsoft Defender SmartScreen is turned off by default.\n\nIf you enable this setting, potentially unwanted app blocking in Microsoft Defender SmartScreen is turned on.\n\nIf you disable this setting, potentially unwanted app blocking in Microsoft Defender SmartScreen is turned off.\n\nIf you don't configure this setting, users can choose whether to use potentially unwanted app blocking in Microsoft Defender SmartScreen.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#smartscreenpuaenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_smartscreenpuaenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_smartscreenpuaenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"ab7a27fc4c643812":{"id":"com.apple.managedclient.preferences_wpadquickcheckenabled","displayName":"Set WPAD optimization","description":"Allows you to turn off WPAD (Web Proxy Auto-Discovery) optimization in Microsoft Edge.\n\nIf you disable this policy, WPAD optimization is disabled, which makes the browser wait longer for DNS-based WPAD servers.\n\nIf you enable or don't configure the policy, WPAD optimization is enabled.\n\nIndependent of whether or how this policy is enabled, the WPAD optimization setting cannot be changed by users.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#wpadquickcheckenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_wpadquickcheckenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_wpadquickcheckenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"aba6bece86ade8e1":{"id":"com.apple.mobiledevice.passwordpolicy_mincomplexchars","displayName":"Min Complex Characters","description":"The minimum number of complex characters that a passcode must contain. A complex character is a character other than a number or a letter, such as & % $ #. This property is ignored for User Enrollments.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"abf94c6061e95bb6":{"id":"com.apple.webcontent-filter_filterdataproviderdesignatedrequirement","displayName":"Filter Data Provider Designated Requirement","description":"The designated requirement string that the system embeds in the code signature of the filter data provider system extension. This string identifies the filter data provider when the filter starts running. This field is a requirement if Filter Sockets is true.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"ab9ecc1b775eecf8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdflocalfileaccessallowedfordomains","displayName":"Allow specified sites to access file:// URLs in the PDF Viewer","description":"Controls which sites can access file:// URLs in the PDF Viewer.\n\nIf you enable this policy, sites in the list can access file:// URLs in the PDF Viewer.\n\nIf you disable or don't configure this policy, sites cannot access file:// URLs in the PDF Viewer.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"ab3faa0f9179b76a":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthservedforpeers","displayName":"Limit the maximum network bandwidth used for Peercaching","description":"This policy setting limits the network bandwidth that BITS uses for peer cache transfers (this setting does not affect transfers from the origin server).\r\n To prevent any negative impact to a computer caused by serving other peers, by default BITS will use up to 30 percent of the bandwidth of the slowest active network interface. For example, if a computer has both a 100 Mbps network card and a 56 Kbps modem, and both are active, BITS will use a maximum of 30 percent of 56 Kbps. \r\n You can change the default behavior of BITS, and specify a fixed maximum bandwidth that BITS will use for peer caching.\r\n\r\n If you enable this policy setting, you can enter a value in bits per second (bps) between 1048576 and 4294967200 to use as the maximum network bandwidth used for peer caching.\r\n\r\n If you disable this policy setting or do not configure it, the default value of 30 percent of the slowest active network interface will be used.\r\n\r\n Note: This setting has no effect if the \"Allow BITS peer caching\" policy setting is disabled or not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-maxbandwidthservedforpeers"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthservedforpeers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthservedforpeers_1","displayName":"Enabled","description":null,"helpText":null}]},"ab41a1629f2b9e65":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_exclusionlistsettings_lbl_exclusionlistsettingslist","displayName":"Extensions: ","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"abf054969128221e":{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_2_wdiscenarioexecutionpolicylevel","displayName":"Scenario Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"32b20540-8fe9-4730-a4b0-ff41f6b13a97","categoryName":"Windows System Responsiveness Performance Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_2_wdiscenarioexecutionpolicylevel_1","displayName":"Detection and Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_performancediagnostics_wdiscenarioexecutionpolicy_2_wdiscenarioexecutionpolicylevel_2","displayName":"Detection, Troubleshooting and Resolution","description":null,"helpText":null}]},"ababa1b4757ce3ad":{"id":"device_vendor_msft_policy_config_admx_printing_domainprinters_bluetoothprinters","displayName":"Number of Bluetooth printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"aba381ee84534532":{"id":"device_vendor_msft_policy_config_admx_printing_emfdespooling","displayName":"Always render print jobs on the server","description":"When printing through a print server, determines whether the print spooler on the client will process print jobs itself, or pass them on to the server to do the work.\r\n\r\nThis policy setting only effects printing to a Windows print server.\r\n\r\nIf you enable this policy setting on a client machine, the client spooler will not process print jobs before sending them to the print server. This decreases the workload on the client at the expense of increasing the load on the server.\r\n\r\nIf you disable this policy setting on a client machine, the client itself will process print jobs into printer device commands. These commands will then be sent to the print server, and the server will simply pass the commands to the printer. This increases the workload of the client while decreasing the load on the server.\r\n\r\nIf you do not enable this policy setting, the behavior is the same as disabling it.\r\n\r\nNote: This policy does not determine whether offline printing will be available to the client. The client print spooler can always queue print jobs when not connected to the print server. Upon reconnecting to the server, the client will submit any pending print jobs.\r\n\r\nNote: Some printer drivers require a custom print processor. In some cases the custom print processor may not be installed on the client machine, such as when the print server does not support transferring print processors during point-and-print. In the case of a print processor mismatch, the client spooler will always send jobs to the print server for rendering. Disabling the above policy setting does not override this behavior.\r\n\r\nNote: In cases where the client print driver does not match the server print driver (mismatched connection), the client will always process the print job, regardless of the setting of this policy.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-emfdespooling"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_emfdespooling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_emfdespooling_1","displayName":"Enabled","description":null,"helpText":null}]},"ab71a82cc40ee24b":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_easy_print","displayName":"Use Remote Desktop Easy Print printer driver first","description":"This policy setting allows you to specify whether the Remote Desktop Easy Print printer driver is used first to install all client printers. \r\n\r\nIf you enable or do not configure this policy setting, the RD Session Host server first tries to use the Remote Desktop Easy Print printer driver to install all client printers. If for any reason the Remote Desktop Easy Print printer driver cannot be used, a printer driver on the RD Session Host server that matches the client printer is used. If the RD Session Host server does not have a printer driver that matches the client printer, the client printer is not available for the Remote Desktop session.\r\n\r\nIf you disable this policy setting, the RD Session Host server tries to find a suitable printer driver to install the client printer. If the RD Session Host server does not have a printer driver that matches the client printer, the server tries to use the Remote Desktop Easy Print driver to install the client printer. If for any reason the Remote Desktop Easy Print printer driver cannot be used, the client printer is not available for the Remote Desktop Services session.\r\n\r\nNote: If the \"Do not allow client printer redirection\" policy setting is enabled, the \"Use Remote Desktop Easy Print printer driver first\" policy setting is ignored.\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-easy-print"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_1","displayName":"Enabled","description":null,"helpText":null}]},"ab8dca433bb1d070":{"id":"device_vendor_msft_policy_config_admx_userprofiles_leaveappmgmtdata","displayName":"Leave Windows Installer and Group Policy Software Installation Data","description":"This policy setting determines whether the system retains a roaming user's Windows Installer and Group Policy based software installation data on their profile deletion.\r\n\r\nBy default Windows deletes all information related to a roaming user (which includes the user's settings, data, Windows Installer related data, and the like) when their profile is deleted. As a result, the next time a roaming user whose profile was previously deleted on that client logs on, they will need to reinstall all apps published via policy at logon increasing logon time. You can use this policy setting to change this behavior.\r\n\r\nIf you enable this policy setting, Windows will not delete Windows Installer or Group Policy software installation data for roaming users when profiles are deleted from the machine. This will improve the performance of Group Policy based Software Installation during user logon when a user profile is deleted and that user subsequently logs on to the machine.\r\n\r\nIf you disable or do not configure this policy setting, Windows will delete the entire profile for roaming users, including the Windows Installer and Group Policy software installation data when those profiles are deleted.\r\n\r\nNote: If this policy setting is enabled for a machine, local administrator action is required to remove the Windows Installer or Group Policy software installation data stored in the registry and file system of roaming users' profiles on the machine.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-leaveappmgmtdata"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_leaveappmgmtdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_leaveappmgmtdata_1","displayName":"Enabled","description":null,"helpText":null}]},"ab6318ccb366524d":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_gamingapp","displayName":"Xbox Gaming App (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_gamingapp_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_gamingapp_1","displayName":"True","description":null,"helpText":null}]},"abaeaa905f277565":{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootglobal_integration_root_user_prompt","displayName":"Integration Root User","description":"","helpText":"","infoUrls":[],"categoryId":"ea9a092f-dd93-41d4-9bbb-118de1213578","categoryName":"Integration","options":null},"ab69b2c53b72f96c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended","displayName":"Enable Instant","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"abb2dfed4e7bdb9c":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors","displayName":"Allow binary and script behaviors","description":"This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached.\n\nIf you enable this policy setting, binary and script behaviors are available. If you select Administrator approved in the drop-down box, only behaviors listed in the Admin-approved Behaviors under Binary Behaviors Security Restriction policy are available.\n\nIf you disable this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.\n\nIf you do not configure this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowbinaryandscriptbehaviors"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_1","displayName":"Enabled","description":null,"helpText":null}]},"ab9a2887e3c8999a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc","displayName":"Block WebUSB on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"ab65158daeec07c8":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended","displayName":"Set the default New Tab Page feed tab to Work or Discover","description":"This policy sets the default feed tab on the New Tab Page to Work or Discover.\r\n\r\nIf you set this policy to 'Work' (0) or don't configure this policy, Microsoft Edge sets the default feed tab to Work.\r\n\r\nIf you set this policy to 'Discover' (1), Microsoft Edge sets the default feed tab to Discover.\r\n\r\nThis policy only takes effect when 'ConfigureNTPFeedTabVisibility' (Configure whether the Discover or Work feed tabs are shown on the New Tab Page.) is set to 'EnableBothWorkDiscover' (0) or is not configured. If only one tab is visible, this policy has no effect.\r\n\r\nPolicy options mapping:\r\n\r\n* NTPDefaultFeedTabWork (0) = Work\r\n\r\n* NTPDefaultFeedTabDiscover (1) = Discover\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ab06c7288172c7f3":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled","displayName":"Windows Hello For HTTP Auth Enabled","description":"Indicates if Windows Credential UI should be used to respond to NTLM and Negotiate authentication challenges.\r\n\r\nIf you disable this policy, a basic username and password prompt will be used to respond to NTLM and Negotiate challenges. If you enable or don't configure this policy, Windows Credential UI will be used.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ab420fe8176d8a3a":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled","displayName":"Enable renderer in app container","description":"Launches Renderer processes into an App Container for\r\nadditional security benefits.\r\n\r\nIf you don't configure this policy, Microsoft Edge will launch the renderer process in an app\r\ncontainer in a future update.\r\n\r\nIf you enable this policy, Microsoft Edge will launch the renderer process in an app container.\r\n\r\nIf you disable this policy, Microsoft Edge will not launch the renderer process in an app container.\r\n\r\nOnly turn off the policy if there are compatibility issues with\r\nthird-party software that must run inside Microsoft Edge's renderer processes.\r\n\r\nThis policy will only take effect on Windows 10 RS5 and above.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ab0f9bfc4647879d":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown","displayName":"Show notification to users after folders have been redirected: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_0","displayName":"No","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_1","displayName":"Yes","description":null,"helpText":null}]},"ab78d83c51fbe998":{"id":"device_vendor_msft_policy_config_privacy_uploaduseractivities","displayName":"Upload User Activities","description":"Allows ActivityFeed to upload published 'User Activities'.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#uploaduseractivities"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_uploaduseractivities_0","displayName":"Disabled","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_uploaduseractivities_1","displayName":"Enabled","description":"Allowed.","helpText":null}]},"abe413c671f0a469":{"id":"device_vendor_msft_policy_config_storage_enhancedstoragedevices","displayName":"Do not allow Windows to activate Enhanced Storage devices","description":"This policy setting configures whether or not Windows will activate an Enhanced Storage device.\n\nIf you enable this policy setting, Windows will not activate unactivated Enhanced Storage devices.\n\nIf you disable or do not configure this policy setting, Windows will activate unactivated Enhanced Storage devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-storage#storage-enhancedstoragedevices"],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":[{"id":"device_vendor_msft_policy_config_storage_enhancedstoragedevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_storage_enhancedstoragedevices_1","displayName":"Enabled","description":null,"helpText":null}]},"ab34ce0ac27c84e8":{"id":"device_vendor_msft_policy_config_system_disableenterpriseauthproxy","displayName":"Disable Enterprise Auth Proxy","description":"This policy setting blocks the Connected User Experience and Telemetry service from automatically using an authenticated proxy to send data back to Microsoft on Windows 10. If you disable or do not configure this policy setting, the Connected User Experience and Telemetry service will automatically use an authenticated proxy to send data back to Microsoft. Enabling this policy will block the Connected User Experience and Telemetry service from automatically using an authenticated proxy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disableenterpriseauthproxy"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_disableenterpriseauthproxy_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_system_disableenterpriseauthproxy_0","displayName":"Disable","description":"Disable","helpText":null}]},"abe6f375983ca185":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode","displayName":"Choose how to specify proxy server settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ff543267-540e-4e37-a1e9-daf6a5e16ba7","categoryName":"Proxy Server","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},"ab01a896d48c9d59":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates","displayName":"Let users update all apps on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for all apps. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nUpdates disabled (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"ab55432f27185895":{"id":"device_vendor_msft_policy_config_visualstudiov3~policy~visualstudio~installandupdatesettings_administratorupdatesnotifications","displayName":"Display administrator update notifications","description":"This setting enables Visual Studio to provide administrator update prompts and status information to end users via the Windows toast notification feature. \r\n \r\nIf set to a 1 (enabled), then Visual Studio will display administrator update notifications. \r\n\r\nThe Visual Studio administrator update notifications will report administrator update success or failure. In the case of administrator update failure, these notifications will provide information as to what the problem is, which should help facilitate diagnosis and resolution. One common reason that Visual Studio administrator updates fail to apply is because Visual Studio is open and in use. In this situation, the administrator update notifications will also prompt the user to close Visual Studio so that the administrator update can then be applied. \r\n\r\nThe administrator update notifications are governed by the settings that control Windows toast notifications on the client machine. \r\n\r\nFor more information, see https://aka.ms/vs/admin/updates/control.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov3~policy~visualstudio~installandupdatesettings_administratorupdatesnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov3~policy~visualstudio~installandupdatesettings_administratorupdatesnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"abfee532ea089b3c":{"id":"device_vendor_msft_policy_config_windowssandbox_allowvideoinput","displayName":"Allow Video Input","description":"Allow video input in Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowvideoinput"],"categoryId":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","categoryName":"Windows Sandbox","options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowvideoinput_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowvideoinput_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"ab5e39b593820841":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_fileversion","displayName":"Minimum version","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"ab1f6dcbd3789d8e":{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_name","displayName":"Process name","description":"Process name, either or full path or file name, wildcards NOT supported","helpText":null,"infoUrls":[],"categoryId":"d2191717-e304-46f7-bcc0-55e6477026c9","categoryName":"Exclusion Settings","options":null},"ab879d38b7048119":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_pathcolon43","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"ab898e0227f05a59":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_3","displayName":"Event Viewer (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-3"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_3_1","displayName":"Enabled","description":null,"helpText":null}]},"abd8f43e2095697d":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_4","displayName":"Event Viewer (Windows Vista) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-4"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_4_1","displayName":"Enabled","description":null,"helpText":null}]},"abccbe5276221b02":{"id":"user_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter","displayName":"Remove Notifications and Action Center (User)","description":"This policy setting removes Notifications and Action Center from the notification area on the taskbar.\r\n\r\nThe notification area is located at the far right end of the taskbar and includes icons for current notifications and the system clock. \r\n\r\nIf this setting is enabled, Notifications and Action Center is not displayed in the notification area. The user will be able to read notifications when they appear, but they won’t be able to review any notifications they miss. \r\n\r\nIf you disable or do not configure this policy setting, Notification and Security and Maintenance will be displayed on the taskbar. \r\n\r\nA reboot is required for this policy setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-disablenotificationcenter"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter_1","displayName":"Enabled","description":null,"helpText":null}]},"aba7887ff035e324":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended","displayName":"Clear site data on browser shutdown (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ab90b2e28634d976":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on these sites (User)","description":"Cookies set for domains matching these patterns will revert to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute, and skips the scheme comparison when evaluating if two sites are same-site. See https://www.chromium.org/administrators/policy-list-3/cookie-legacy-samesite-policies for full description.\r\n\r\nFor cookies on domains not covered by the patterns specified here, or for all cookies if this policy is not set, the global default value will be the user's personal configuration.\r\n\r\nFor detailed information on valid patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nNote that patterns you list here are treated as domains, not URLs, so you should not specify a scheme or port.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"abc3ed6be54eafca":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder","displayName":"Specify whether the plugin finder should be disabled (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder_1","displayName":"Enabled","description":null,"helpText":null}]},"abcd6ed62f8fbfd7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed","displayName":"Allow sites to simultaneously navigate and open pop-ups (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"ab08325e48ae4dd5":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_clipboardallowedforurlsdesc","displayName":"Allow clipboard on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"ab9fb5de396b1af2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (User)","description":"Control if users can turn on Developer Mode on chrome://extensions.\r\n\r\nIf the policy is not set, users can turn on developer mode on extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\r\nIf the policy is set to Allow (0), users can turn on developer mode on extensions page.\r\nIf the policy is set to Disallow (1), users can not turn on developer mode on extensions page.\r\n\r\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"ab34ec11c8f62eca":{"id":"user_vendor_msft_policy_config_connectivity_disablecrossdeviceresume","displayName":"Disable Cross Device Resume (User)","description":"This policy allows IT admins to turn off CrossDeviceResume feature to continue tasks, such as browsing file, continue using 1P/ 3P apps that require linking between Phone and PC. If you enable this policy setting, the Windows device will not receive any CrossDeviceResume notification. If you disable this policy setting, the Windows device will receive notification to resume activity from linked phone. If you do not configure this policy setting, the default behavior is that the CrossDeviceResume feature is turned 'ON'. Changes to this policy take effect on reboot.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#disablecrossdeviceresume"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"user_vendor_msft_policy_config_connectivity_disablecrossdeviceresume_0","displayName":"CrossDeviceResume is Enabled","description":"CrossDeviceResume is Enabled","helpText":null},{"id":"user_vendor_msft_policy_config_connectivity_disablecrossdeviceresume_1","displayName":"CrossDeviceResume is Disabled","description":"CrossDeviceResume is Disabled","helpText":null}]},"abbbb04c8a4ada18":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"abd5494d473c3ea3":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowsocketpoolsizerandomizationforproxies","displayName":"Allow socket pool size randomization for proxies (User)","description":"Controls whether Microsoft Edge randomizes socket pool sizes for proxy connections.\n\nSocket pool size randomization is a security mechanism that helps prevent attackers from using deterministic connection limits to infer cross-site information. For example, if the configured proxy socket pool limit is 128, Microsoft Edge can randomly set the effective limit between 128 and 256. This can allow up to twice as many proxy connections, though the expected increase is closer to 1.2x in practice.\n\nThis policy affects the limits configured by the 'MaxConnectionsPerProxy' (Maximum number of concurrent connections to the proxy server for non-WebSocket requests) and 'MaxConnectionsPerProxyForWebSocket' (Maximum number of concurrent connections to the proxy server for WebSocket requests) policies. When this policy is enabled, the effective upper limit can be randomized up to 2x the values configured by those policies.\n\nIf you enable this policy or don't configure it, Microsoft Edge enables socket pool size randomization for proxy connections.\n\nIf you disable this policy, Microsoft Edge disables socket pool size randomization for proxy connections. The values configured by 'MaxConnectionsPerProxy' and 'MaxConnectionsPerProxyForWebSocket' are used as the upper limits without randomization.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowsocketpoolsizerandomizationforproxies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowsocketpoolsizerandomizationforproxies_1","displayName":"Enabled","description":null,"helpText":null}]},"ab3ec40fc7f9f08d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory","displayName":"Allow importing of browsing history (User)","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.\r\n\r\nIf you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_1","displayName":"Enabled","description":null,"helpText":null}]},"abbd97a5ded910ac":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc","displayName":"Allow listed sites to connect to any HID device (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"abb651520f317aaa":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit","displayName":"Clear browsing data when Microsoft Edge closes (User)","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\r\n\r\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured 'DefaultCookiesSetting' (Configure cookies)\r\n\r\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\r\n\r\nIf you enable this policy, don't configure the 'AllowDeletingBrowserHistory' (Enable deleting browser and download history) or the 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes) policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured 'AllowDeletingBrowserHistory' or 'ClearCachedImagesAndFilesOnExit'.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"ab34045ae1b48b65":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled","displayName":"Control the IntensiveWakeUpThrottling feature (User)","description":"When enabled the IntensiveWakeUpThrottling feature causes Javascript timers in background tabs to be aggressively throttled and coalesced, running no more than once per minute after a page has been backgrounded for 5 minutes or more.\r\n\r\nThis is a web standards compliant feature, but it may break functionality on some websites by causing certain actions to be delayed by up to a minute. However, it results in significant CPU and battery savings when enabled. See https://bit.ly/30b1XR4 for more details.\r\n\r\nIf you enable this policy, the feature will be force enabled, and users will not be able to override this setting.\r\nIf you disable this policy, the feature will be force disabled, and users will not be able to override this setting.\r\nIf you don't configure this policy, the feature will be controlled by its own internal logic. Users can manually configure this setting.\r\n\r\nNote that the policy is applied per renderer process, with the most recent value of the policy setting in force when a renderer process starts. A full restart is required to ensure that all the loaded tabs receive a consistent policy setting. It is harmless for processes to be running with different values of this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"abb8c263a3aa6666":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_filesystemwriteaskforurlsdesc","displayName":"Allow write access to files and directories on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"abf718356371ea2e":{"id":"user_vendor_msft_policy_config_office16v16~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_allowuserdefinedfilesharecatalogs","displayName":"Allow users to control the Trusted Shared Folder Catalogs (User)","description":"\r\nThis policy setting allows users to control all the Trusted Shared Folder Catalogs when other policy settings in the Trusted Catalogs folder are set by policy. \r\n\r\nNote: This setting only applies to Version 2308 or later of Office.\r\n\r\nIf you enable this policy setting, users can set their own Trusted Shared Folder Catalogs including the Default Shared Folder location. Shared Folder Catalogs defined by policy will not be used.\r\n\r\nIf you disable this policy setting, then all Trusted Shared Folders Catalogs are policy controlled.\r\n\r\nIf you do not configure this policy setting but do configure other policy settings in the Trusted Catalogs folder, the Trusted Shared Folder Catalogs are policy controlled. If you do not configure this policy setting or any other policy setting in the Trusted Catalogs folder, users can set their own Trusted Shared Folder locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v16~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_allowuserdefinedfilesharecatalogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v16~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_allowuserdefinedfilesharecatalogs_1","displayName":"Enabled","description":null,"helpText":null}]},"ababdc8f0a013393":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastserviceminorversion3","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"ab930020b6896d52":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastserviceserverdescription7","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"abc55a949ff26b14":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxtimeout_l_webservicemaxtimeoutdecimal","displayName":"Web service maximum timeout limit (milliseconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":null},"ab59f668784ea48e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkfax","displayName":"Replace MAPI - WorkFax (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"work fax\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"work fax\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkfax_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkfax_1","displayName":"Enabled","description":null,"helpText":null}]},"ab616e3b60bd5359":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341","displayName":"Primary Editing Language (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3512a9f5-d692-4a1f-aedd-1bd431ae893e","categoryName":"Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1078","displayName":"Afrikaans","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1052","displayName":"Albanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1156","displayName":"Alsatian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1118","displayName":"Amharic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5121","displayName":"Arabic (Algeria)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_15361","displayName":"Arabic (Bahrain)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3073","displayName":"Arabic (Egypt)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2049","displayName":"Arabic (Iraq)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_11265","displayName":"Arabic (Jordan)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_13313","displayName":"Arabic (Kuwait)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_12289","displayName":"Arabic (Lebanon)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4097","displayName":"Arabic (Libya)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_6145","displayName":"Arabic (Morocco)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_8193","displayName":"Arabic (Oman)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_16385","displayName":"Arabic (Qatar)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1025","displayName":"Arabic (Saudi Arabia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_10241","displayName":"Arabic (Syria)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_7169","displayName":"Arabic (Tunisia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_14337","displayName":"Arabic (U.A.E.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_9217","displayName":"Arabic (Yemen)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1067","displayName":"Armenian (Armenia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1101","displayName":"Assamese (India)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2092","displayName":"Azerbaijani (Cyrillic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1068","displayName":"Azerbaijani (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2117","displayName":"Bangla (Bangladesh)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1093","displayName":"Bangla (India)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1133","displayName":"Bashkir","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1069","displayName":"Basque","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1059","displayName":"Belarusian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_8218","displayName":"Bosnian (Cyrillic, Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5146","displayName":"Bosnian (Latin, Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1150","displayName":"Breton","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1026","displayName":"Bulgarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1109","displayName":"Burmese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1027","displayName":"Catalan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1170","displayName":"Central Kurdish (Iraq)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1116","displayName":"Cherokee","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2052","displayName":"Chinese (PRC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3076","displayName":"Chinese (Hong Kong S.A.R.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5124","displayName":"Chinese (Macao S.A.R.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4100","displayName":"Chinese (Singapore)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1028","displayName":"Chinese (Taiwan)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1155","displayName":"Corsican","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4122","displayName":"Croatian (Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1050","displayName":"Croatian (Croatia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1029","displayName":"Czech","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1030","displayName":"Danish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1164","displayName":"Dari","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1125","displayName":"Divehi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2067","displayName":"Dutch (Belgium)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1043","displayName":"Dutch (Netherlands)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1126","displayName":"Edo","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3081","displayName":"English (Australia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_10249","displayName":"English (Belize)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4105","displayName":"English (Canada)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_9225","displayName":"English (Caribbean)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_15369","displayName":"English (Hong Kong S.A.R.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_16393","displayName":"English (India)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_14345","displayName":"English (Indonesia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_6153","displayName":"English (Ireland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_8201","displayName":"English (Jamaica)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_17417","displayName":"English (Malaysia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5129","displayName":"English (New Zealand)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_13321","displayName":"English (Philippines)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_18441","displayName":"English (Singapore)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_7177","displayName":"English (South Africa)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_11273","displayName":"English (Trinidad and Tobago)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2057","displayName":"English (U.K.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1033","displayName":"English (U.S.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_12297","displayName":"English (Zimbabwe)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1061","displayName":"Estonian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1080","displayName":"Faeroese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1124","displayName":"Filipino","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1035","displayName":"Finnish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2060","displayName":"French (Belgium)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_11276","displayName":"French (Cameroon)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3084","displayName":"French (Canada)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_7180","displayName":"French (Caribbean)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_9228","displayName":"French (Congo (DRC))","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_12300","displayName":"French (Côte d'Ivoire)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1036","displayName":"French (France)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_15372","displayName":"French (Haiti)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5132","displayName":"French (Luxembourg)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_13324","displayName":"French (Mali)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_6156","displayName":"French (Monaco)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_14348","displayName":"French (Morocco)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_8204","displayName":"French (Reunion)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_10252","displayName":"French (Senegal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4108","displayName":"French (Switzerland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1122","displayName":"Frisian (Netherlands)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1127","displayName":"Fulfulde","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1169","displayName":"Scottish Gaelic (United Kingdom)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1110","displayName":"Galician","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1079","displayName":"Georgian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3079","displayName":"German (Austria)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1031","displayName":"German (Germany)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5127","displayName":"German (Liechtenstein)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4103","displayName":"German (Luxembourg)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2055","displayName":"German (Switzerland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1032","displayName":"Greek","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1135","displayName":"Greenlandic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1140","displayName":"Guarani","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1095","displayName":"Gujarati","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1128","displayName":"Hausa (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1141","displayName":"Hawaiian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1037","displayName":"Hebrew (Israel)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1081","displayName":"Hindi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1038","displayName":"Hungarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1129","displayName":"Ibibio","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1039","displayName":"Icelandic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1136","displayName":"Igbo","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1057","displayName":"Indonesian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2141","displayName":"Inuktitut (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1117","displayName":"Inuktitut (Syllabics)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2108","displayName":"Irish (Ireland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1077","displayName":"isiZulu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1076","displayName":"isiXhosa","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1040","displayName":"Italian (Italy)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2064","displayName":"Italian (Switzerland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1041","displayName":"Japanese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1099","displayName":"Kannada","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1137","displayName":"Kanuri","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1120","displayName":"Kashmiri (Arabic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2144","displayName":"Kashmiri (Devanagari)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1087","displayName":"Kazakh","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1107","displayName":"Khmer","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1158","displayName":"K'iche","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1159","displayName":"Kinyarwanda","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1111","displayName":"Konkani","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1042","displayName":"Korean","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1088","displayName":"Kyrgyz","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1108","displayName":"Lao","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1142","displayName":"Latin","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1062","displayName":"Latvian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1063","displayName":"Lithuanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1134","displayName":"Luxembourgish (Luxembourg)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1071","displayName":"Macedonian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2110","displayName":"Malay (Brunei)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1086","displayName":"Malay (Malaysia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1100","displayName":"Malayalam","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1082","displayName":"Maltese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1112","displayName":"Manipuri","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1153","displayName":"Maori","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1146","displayName":"Mapudungun","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1102","displayName":"Marathi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1148","displayName":"Mohawk","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1104","displayName":"Mongolian (Cyrillic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2128","displayName":"Mongolian (Traditional Mongolian)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2145","displayName":"Nepali (India)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1121","displayName":"Nepali (Nepal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1044","displayName":"Norwegian (Bokmål)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2068","displayName":"Norwegian (Nynorsk)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1154","displayName":"Occitan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1138","displayName":"Oromo","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1096","displayName":"Odia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1145","displayName":"Papiamentu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1123","displayName":"Pashto","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1065","displayName":"Persian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1045","displayName":"Polish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1046","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2070","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1094","displayName":"Punjabi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2118","displayName":"Punjabi (Pakistan)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1131","displayName":"Quechua (Bolivia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2155","displayName":"Quechua (Ecuador)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3179","displayName":"Quechua (Peru)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1047","displayName":"Romansh (Switzerland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2072","displayName":"Romanian (Moldova)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1048","displayName":"Romanian (Romania)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2073","displayName":"Russian (Moldova)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1049","displayName":"Russian (Russia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_9275","displayName":"Sami, Inari (Finland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4155","displayName":"Sami, Lule (Norway)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5179","displayName":"Sami, Lule (Sweden)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3131","displayName":"Sami, Northern (Finland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1083","displayName":"Sami, Northern (Norway)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2107","displayName":"Sami, Northern (Sweden)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_8251","displayName":"Sami, Skolt (Finland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_6203","displayName":"Sami, Southern (Norway)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_7227","displayName":"Sami, Southern (Sweden)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1103","displayName":"Sanskrit","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_7194","displayName":"Serbian (Cyrillic, Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_6170","displayName":"Serbian (Latin, Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3098","displayName":"Serbian (Cyrillic, Serbia and Montenegro (Former))","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_10266","displayName":"Serbian (Cyrillic, Serbia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_12314","displayName":"Serbian (Cyrillic, Montenegro)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2074","displayName":"Serbian (Latin, Serbia and Montenegro (Former))","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_11290","displayName":"Serbian (Latin, Montenegro)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_9242","displayName":"Serbian (Latin, Serbia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1072","displayName":"Sesotho","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1132","displayName":"Sesotho sa Leboa","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1074","displayName":"Setswana","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1113","displayName":"Sindhi (Devanagari)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2137","displayName":"Sindhi (Arabic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1115","displayName":"Sinhala","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1051","displayName":"Slovak","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1060","displayName":"Slovenian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1143","displayName":"Somali","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2094","displayName":"Lower Sorbian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1070","displayName":"Upper Sorbian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_11274","displayName":"Spanish (Argentina)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_16394","displayName":"Spanish (Bolivia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_13322","displayName":"Spanish (Chile)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_9226","displayName":"Spanish (Colombia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_5130","displayName":"Spanish (Costa Rica)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_7178","displayName":"Spanish (Dominican Republic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_12298","displayName":"Spanish (Ecuador)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_17418","displayName":"Spanish (El Salvador)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_4106","displayName":"Spanish (Guatemala)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_18442","displayName":"Spanish (Honduras)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2058","displayName":"Spanish (Mexico)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_19466","displayName":"Spanish (Nicaragua)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_6154","displayName":"Spanish (Panama)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_15370","displayName":"Spanish (Paraguay)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_10250","displayName":"Spanish (Peru)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_20490","displayName":"Spanish (Puerto Rico)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_3082","displayName":"Spanish (Spain)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_21514","displayName":"Spanish (United States)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_14346","displayName":"Spanish (Uruguay)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_8202","displayName":"Spanish (Venezuela)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1089","displayName":"Swahili","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2077","displayName":"Swedish (Finland)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1053","displayName":"Swedish (Sweden)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1114","displayName":"Syriac","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2143","displayName":"Tamazight (Latin, Algeria)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1119","displayName":"Tamazight (Arabic, Morocco)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1097","displayName":"Tamil","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1092","displayName":"Tatar","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1098","displayName":"Telugu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1064","displayName":"Tajik","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1054","displayName":"Thai","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1105","displayName":"Tibetan (PRC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2163","displayName":"Tigrinya (Eritrea)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1139","displayName":"Tigrinya (Ethiopia)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1055","displayName":"Turkish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1090","displayName":"Turkmen","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1152","displayName":"Uyghur (PRC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1058","displayName":"Ukrainian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1056","displayName":"Urdu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2115","displayName":"Uzbek (Cyrillic)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1091","displayName":"Uzbek (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_2051","displayName":"Valencian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1075","displayName":"Venda","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1066","displayName":"Vietnamese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1106","displayName":"Welsh","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1160","displayName":"Wolof","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1073","displayName":"Xitsonga","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1157","displayName":"Sakha","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1144","displayName":"Yi (PRC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1085","displayName":"Yiddish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages_l_primaryeditinglanguage_l_primaryeditinglanguage341_1130","displayName":"Yoruba","description":null,"helpText":null}]},"ab46bf1dbcba763e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11","displayName":"Workflow Cache 11 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache11_1","displayName":"Enabled","description":null,"helpText":null}]},"abcb0cb8eb1142fb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_l_pathcolon286","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"ab2dc4e125cdf9e8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_onlinecontentoptions","displayName":"Online Content Options (User)","description":"This policy setting controls users' access to the online features of Office 2016.\r\n\r\nIf you enable this policy setting, you can choose one of two options for user access to online content and services:\r\n\r\n* Do not allow Office to connect to the Internet – Office applications do not connect to the Internet to access online services, or to download the latest online content from Office.com. Connected features of Office 2016 are disabled.\r\n\r\n* Allow Office to connect to the Internet – Office applications use online services and download the latest online content from Office.com when users’ computers are connected to the Internet. Connected features of Office 2016 are enabled. This option enforces the default configuration.\r\n\r\nIf you disable this policy setting or do not configure this policy setting, Office applications use online services and download the latest online content from Office.com when users’ computers are connected to the Internet. Users can change this behavior by deselecting the \"Allow Office to connect to the Internet\" checkbox in the Privacy Options section of the Trust Center.","helpText":"","infoUrls":[],"categoryId":"91041ad3-e0a6-43fd-bc7b-ad4c7dda5765","categoryName":"Online Content","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_onlinecontentoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_onlinecontentoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"ab547333d5443b2b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_l_showassociatedwebpage63","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_l_showassociatedwebpage63_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_l_showassociatedwebpage63_1","displayName":"True","description":null,"helpText":null}]},"abf293a576882e0d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_upgradeonlythedefaultstore","displayName":"Upgrade only the default store (User)","description":"This policy setting allows you to specify that only the default data file is upgraded on the first boot of Outlook.\r\n\r\nIf you enable this policy setting, only the data file associated with your delivery mailbox is upgraded.\r\n\r\nIf you disable or do not configure this policy setting, all Outlook Data Files are upgraded.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_upgradeonlythedefaultstore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_upgradeonlythedefaultstore_1","displayName":"Enabled","description":null,"helpText":null}]},"ab56725cb00b00fd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_l_showcalendardetailsinthegrid","displayName":"Show calendar details in the grid (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2592e8ea-5eb0-482b-b41e-eab92f33ac07","categoryName":"Planner Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_l_showcalendardetailsinthegrid_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_l_showcalendardetailsinthegrid_1","displayName":"True","description":null,"helpText":null}]},"abfed2d885043470":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifyactivityfeedsynchronizationinterval","displayName":"Specify activity feed synchronization interval (User)","description":"This policy setting specifies the minimum interval that Office waits before requesting activity feed information from social networks for a given contact.\r\n\r\nIf you enable this policy setting, Office waits for at least the specified interval before requesting a new activity feed for each contact.\r\n\r\nIf you disable or do not configure this policy setting, Office waits for at least the default interval (60 minutes) before requesting a new activity feed for each contact.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifyactivityfeedsynchronizationinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifyactivityfeedsynchronizationinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"ab234e8cc8bd0a71":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10","displayName":"Trusted Location #10 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_1","displayName":"Enabled","description":null,"helpText":null}]},"abe454b27d2a8502":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdefaulttasktypes_l_pjdefaulttasktypes25","displayName":"Default task type (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdefaulttasktypes_l_pjdefaulttasktypes25_1","displayName":"Fixed Duration","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdefaulttasktypes_l_pjdefaulttasktypes25_0","displayName":"Fixed Units","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjdefaulttasktypes_l_pjdefaulttasktypes25_2","displayName":"Fixed Work","description":null,"helpText":null}]},"ab14946441a3b476":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize98_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"d5b3cab7-d486-4f74-8525-6bd740b950bc","categoryName":"Customizable Error Messages","options":null},"ab4dce2bf0e08786":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchfor_l_searchfor10","displayName":"Search for: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"98cefd27-a980-4070-ba45-3696b623810d","categoryName":"Shape Search","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchfor_l_searchfor10_1","displayName":"All of the words (AND)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchfor_l_searchfor10_0","displayName":"Any of the words (OR)","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/ac.json b/public/intune-definitions/ac.json new file mode 100644 index 000000000000..920fde2d1bd9 --- /dev/null +++ b/public/intune-definitions/ac.json @@ -0,0 +1 @@ +{"ac4e110c2611ae92":{"id":"com.apple.managedclient.preferences_proxymode","displayName":"Configure proxy server settings","description":"Specify the proxy server settings used by Microsoft Edge. If you enable this policy, users can't change the proxy settings.\n\nIf you choose to never use a proxy server and to always connect directly, all other options are ignored.\n\nIf you choose to use system proxy settings, all other options are ignored.\n\nIf you choose to auto detect the proxy server, all other options are ignored.\n\nIf you choose fixed server proxy mode, you can specify further options in \"ProxyServer\" and 'Comma-separated list of proxy bypass rules'.\n\nIf you choose to use a .pac proxy script, you must specify the URL to the script in 'URL to a proxy .pac file'.\n\nFor detailed examples, go to https://go.microsoft.com/fwlink/?linkid=2094936.\n\nIf you enable this policy, Microsoft Edge will ignore all proxy-related options specified from the command line.\n\nIf you don't configure this policy users can choose their own proxy settings.\n\n* \"direct\" = Never use a proxy\n\n* \"auto_detect\" = Auto detect proxy settings\n\n* \"pac_script\" = Use a .pac proxy script\n\n* \"fixed_servers\" = Use fixed proxy servers\n\n* \"system\" = Use system proxy settings","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#proxymode"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_proxymode_0","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxymode_1","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxymode_2","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxymode_3","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_proxymode_4","displayName":"Use system proxy settings","description":null,"helpText":null}]},"ac0b6ab8ce28dc64":{"id":"com.apple.managedclient.preferences_verticaltabsallowed","displayName":"Configures availability of a vertical layout for tabs on the side of the browser","description":"Configures whether a user can access an alternative layout where tabs are vertically aligned on the side of the browser instead of at the top.\nWhen there are several tabs open, this layout provides better tab viewing and management. There's better visibility of the site titles,\nit's easier to scan aligned icons, and there's more space to manage and close tabs.\n\nIf you disable this policy, then the vertical tab layout will not be available as an option for users.\n\nIf you enable or don't configure this policy, the tab layout will still be at the top, but a user has the option to turn on vertical tabs on the side.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#verticaltabsallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_verticaltabsallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_verticaltabsallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"acaa194fc1482253":{"id":"com.apple.mcx_cachedaccounts.warnoncreate.allownever","displayName":"Warn On Create Allow Never","description":"If true, allows the user to stop the prompts about mobile account creation every time the user logs in. This key is only valid if Warn On Create is set to true.","helpText":null,"infoUrls":[],"categoryId":"ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","categoryName":"Mobile Accounts","options":[{"id":"com.apple.mcx_cachedaccounts.warnoncreate.allownever_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_cachedaccounts.warnoncreate.allownever_true","displayName":"True","description":null,"helpText":null}]},"ac9d0580aea387fa":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printstickysettings","displayName":"Print preview sticky settings","description":"Specifies whether print preview should apply last used settings for Microsoft Edge PDF and webpages.\n\nIf you set this policy to 'EnableAll' or don't configure it, Microsoft Edge applies the last used print preview settings for both PDF and webpages.\n\nIf you set this policy to 'DisableAll', Microsoft Edge doesn't apply the last used print preview settings for both PDF and webpages.\n\nIf you set this policy to 'DisablePdf', Microsoft Edge doesn't apply the last used print preview settings for PDF printing and retains it for webpages.\n\nIf you set this policy to 'DisableWebpage', Microsoft Edge doesn't apply the last used print preview settings for webpage printing and retain it for PDF.\n\nThis policy is only available if you enable or don't configure the \"PrintingEnabled\" policy.\n\nPolicy options mapping:\n\n* EnableAll (0) = Enable sticky settings for PDF and Webpages\n\n* DisableAll (1) = Disable sticky settings for PDF and Webpages\n\n* DisablePdf (2) = Disable sticky settings for PDF\n\n* DisableWebpage (3) = Disable sticky settings for Webpages\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_enableall","displayName":"Enable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_disableall","displayName":"Disable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_disablepdf","displayName":"Disable sticky settings for PDF","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_disablewebpage","displayName":"Disable sticky settings for Webpages","description":null,"helpText":null}]},"ac8878251bb29720":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_computersid","displayName":"Computer Sid","description":"Local computer Sid or computer Sid group or the Sid of the AD object, defines whether to apply this policy over a specific machine or machine group; one entry can have a maximum of one ComputerSid and an entry without any ComputerSid means applying the policy over the machine. If you want to apply an Entry to a specific user and specific machine, add both Sid and ComputerSid into the same Entry.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"ac518b022cddf98b":{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_maximumattempts","displayName":"Maximum Attempts (Windows Insiders only)","description":"How many times profile download should be attempted before giving up. A value of 0 indicates unlimited retry attempts. When a value is not specified, it defaults to 50, which is equivalent to about a month of retry attempts.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":null},"ac93661e6689fdc3":{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentialswhenntlmonly_allowsavedcredentialswhenntlmonly_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"ac0364a7bbedd330":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_policy_reboottime","displayName":"Time (in seconds) to force reboot when required for policy changes to take effect","description":"This policy setting establishes the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in device installation restriction policies.\r\n\r\nIf you enable this policy setting, set the amount of seconds you want the system to wait until a reboot.\r\n\r\nIf you disable or do not configure this policy setting, the system does not force a reboot.\r\n\r\nNote: If no reboot is forced, the device installation restriction right will not take effect until the system is restarted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-deviceinstallation#admx-deviceinstallation-deviceinstall-policy-reboottime"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_policy_reboottime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_policy_reboottime_1","displayName":"Enabled","description":null,"helpText":null}]},"aca5336ac6ccf19c":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domainnamedevolutionlevel","displayName":"Primary DNS suffix devolution level","description":"Specifies if the devolution level that DNS clients will use if they perform primary DNS suffix devolution during the name resolution process.\r\n\r\nWith devolution, a DNS client creates queries by appending a single-label, unqualified domain name with the parent suffix of the primary DNS suffix name, and the parent of that suffix, and so on, stopping if the name is successfully resolved or at a level determined by devolution settings. Devolution can be used when a user or application submits a query for a single-label domain name.\r\n\r\nThe DNS client appends DNS suffixes to the single-label, unqualified domain name based on the state of the Append primary and connection specific DNS suffixes radio button and Append parent suffixes of the primary DNS suffix check box on the DNS tab in Advanced TCP/IP Settings for the Internet Protocol (TCP/IP) Properties dialog box.\r\n\r\nDevolution is not enabled if a global suffix search list is configured using Group Policy.\r\n\r\nIf a global suffix search list is not configured, and the Append primary and connection specific DNS suffixes radio button is selected, the DNS client appends the following names to a single-label name when it sends DNS queries:\r\n\r\nThe primary DNS suffix, as specified on the Computer Name tab of the System control panel.\r\n\r\nEach connection-specific DNS suffix, assigned either through DHCP or specified in the DNS suffix for this connection box on the DNS tab in the Advanced TCP/IP Settings dialog box for each connection.\r\n\r\nFor example, when a user submits a query for a single-label name such as \"example,\" the DNS client attaches a suffix such as \"microsoft.com\" resulting in the query \"example.microsoft.com,\" before sending the query to a DNS server.\r\n\r\nIf a DNS suffix search list is not specified, the DNS client attaches the primary DNS suffix to a single-label name. If this query fails, the connection-specific DNS suffix is attached for a new query. If none of these queries are resolved, the client devolves the primary DNS suffix of the computer (drops the leftmost label of the primary DNS suffix), attaches this devolved primary DNS suffix to the single-label name, and submits this new query to a DNS server.\r\n\r\nFor example, if the primary DNS suffix ooo.aaa.microsoft.com is attached to the non-dot-terminated single-label name \"example,\" and the DNS query for example.ooo.aaa.microsoft.com fails, the DNS client devolves the primary DNS suffix (drops the leftmost label) till the specified devolution level, and submits a query for example.aaa.microsoft.com. If this query fails, the primary DNS suffix is devolved further if it is under specified devolution level and the query example.microsoft.com is submitted. If this query fails, devolution continues if it is under specified devolution level and the query example.microsoft.com is submitted, corresponding to a devolution level of two. The primary DNS suffix cannot be devolved beyond a devolution level of two. The devolution level can be configured using this policy setting. The default devolution level is two.\r\n\r\nIf you enable this policy setting and DNS devolution is also enabled, DNS clients use the DNS devolution level that you specify.\r\n\r\nIf this policy setting is disabled, or if this policy setting is not configured, DNS clients use the default devolution level of two provided that DNS devolution is enabled.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-domainnamedevolutionlevel"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domainnamedevolutionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domainnamedevolutionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"ac41f563baf255ce":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationenabled","displayName":"Dynamic update","description":"Specifies if DNS dynamic update is enabled. Computers configured for DNS dynamic update automatically register and update their DNS resource records with a DNS server.\r\n\r\nIf you enable this policy setting, or you do not configure this policy setting, computers will attempt to use dynamic DNS registration on all network connections that have connection-specific dynamic DNS registration enabled. For a dynamic DNS registration to be enabled on a network connection, the connection-specific configuration must allow dynamic DNS registration, and this policy setting must not be disabled.\r\n\r\nIf you disable this policy setting, computers may not use dynamic DNS registration for any of their network connections, regardless of the configuration for individual network connections.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-registrationenabled"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"acb2282b180bc80e":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions","displayName":"MSS: (TcpMaxConnectResponseRetransmissions) SYN-ACK retransmissions when a connection request is not acknowledged","description":"MSS: (TcpMaxConnectResponseRetransmissions) SYN-ACK retransmissions when a connection request is not acknowledged\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-tcpmaxconnectresponseretransmissions"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxconnectresponseretransmissions_1","displayName":"Enabled","description":null,"helpText":null}]},"ac419ed79ad4e392":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryinitialperiod","displayName":"Use initial DC discovery retry setting for background callers","description":"This policy setting determines the amount of time (in seconds) to wait before the first retry for applications that perform periodic searches for domain controllers (DC) that are unable to find a DC.\r\n\r\nThe default value for this setting is 10 minutes (10*60). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0.\r\n\r\nThis setting is relevant only to those callers of DsGetDcName that have specified the DS_BACKGROUND_ONLY flag.\r\n\r\nIf the value of this setting is less than the value specified in the NegativeCachePeriod subkey, the value in the NegativeCachePeriod subkey is used.\r\n\r\nWarning: If the value for this setting is too large, a client will not attempt to find any DCs that were initially unavailable. If the value set in this setting is very small and the DC is not available, the traffic caused by periodic DC discoveries may be excessive.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-backgroundretryinitialperiod"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryinitialperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryinitialperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"acaa2fd9f07a28cb":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources","displayName":"Configure extension, app, and user script install sources","description":"Setting the policy specifies which URLs may install extensions, apps, and themes. Before Google Chrome 21, users could click on a link to a *.crx file, and Google Chrome would offer to install the file after a few warnings. Afterwards, such files must be downloaded and dragged to the Google Chrome settings page. This setting allows specific URLs to have the old, easier installation flow.\r\n\r\nEach item in this list is an extension-style match pattern (see https://developer.chrome.com/extensions/match_patterns). Users can easily install items from any URL that matches an item in this list. Both the location of the *.crx file and the page where the download is started from (the referrer) must be allowed by these patterns.\r\n\r\nExtensionInstallBlocklist takes precedence over this policy. That is, an extension on the blocklist won't be installed, even if it happens from a site on this list.\r\n\r\nExample value:\r\n\r\nhttps://corp.mycompany.com/*","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_1","displayName":"Enabled","description":null,"helpText":null}]},"ac60a6b9095cf62a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_remoteaccesshostclipboardsizebytes","displayName":"The maximum size, in bytes, that can be transferred between client and host via clipboard synchronization: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"acd4c008083620f6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled","displayName":"Enable sending downloads to Google for deep scanning for users enrolled in the Advanced Protection program","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"acd7b9f2da07c9a5":{"id":"device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess","displayName":"Allow Direct Memory Access","description":"This policy setting allows you to block direct memory access (DMA) for all hot pluggable PCI downstream ports until a user logs into Windows. Once a user logs in, Windows will enumerate the PCI devices connected to the host plug PCI ports. Every time the user locks the machine, DMA will be blocked on hot plug PCI ports with no children devices until the user logs in again. Devices which were already enumerated when the machine was unlocked will continue to function until unplugged. This policy setting is only enforced when BitLocker Device Encryption is enabled. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-dataprotection#allowdirectmemoryaccess"],"categoryId":"22f2b16b-e1af-45fa-8d2f-687854b72c02","categoryName":"Data Protection","options":[{"id":"device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"ac2142d835527d0d":{"id":"device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching","displayName":"DO Allow VPN Peer Caching","description":"Specifies whether the device, with an active VPN connection, is allowed to participate in P2P or not.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#doallowvpnpeercaching"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching_0","displayName":"Not allowed","description":"Not allowed","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching_1","displayName":"Allowed","description":"Allowed","helpText":null}]},"acbf1a9b0f15a725":{"id":"device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications","displayName":"Do Not Show Feedback Notifications","description":"Prevents devices from showing feedback questions from Microsoft. If you enable this policy setting, users will no longer see feedback notifications through the Feedback hub app. If you disable or do not configure this policy setting, users may see notifications through the Feedback hub app asking users for feedback. If you disable or do not configure this policy setting, users can control how often they receive feedback questions.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#donotshowfeedbacknotifications"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications_0","displayName":"Feedback notifications are not disabled. The actual state of feedback notifications on the device will then depend on what GP has configured or what the user has configured locally.","description":"Feedback notifications are not disabled. The actual state of feedback notifications on the device will then depend on what GP has configured or what the user has configured locally.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications_1","displayName":"Feedback notifications are disabled.","description":"Feedback notifications are disabled.","helpText":null}]},"ac7880e379f377cc":{"id":"device_vendor_msft_policy_config_internetexplorer_disablecompatview","displayName":"Turn off Compatibility View","description":"This policy setting controls the Compatibility View feature, which allows the user to fix website display problems that he or she may encounter while browsing.\n\nIf you enable this policy setting, the user cannot use the Compatibility View button or manage the Compatibility View sites list.\n\nIf you disable or do not configure this policy setting, the user can use the Compatibility View button and manage the Compatibility View sites list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecompatview"],"categoryId":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","categoryName":"Compatibility View","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablecompatview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecompatview_1","displayName":"Enabled","description":null,"helpText":null}]},"ac63c2b8dae83b1c":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"ac4a0de2c4606e01":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"acd90ca8cd1c4dc8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_downloaddirectory","displayName":"Set download directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ac5145f31623dbc0":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_typosquattingallowlistdomainsdesc","displayName":"Configure the list of domains for which Edge Website Typo Protection won't trigger warnings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":null},"ac83470d05885a69":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_internetexplorerintegrationlocalsitelistexpirationdays","displayName":"Specify the number of days that a site remains on the local IE mode site list: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"acebc1393f7615ff":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_configureviewinfileexplorer","displayName":"Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"acb5061c89c6a6e0":{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1server","displayName":"Configure SMB v1 server","description":"Disabling this setting disables server-side processing of the SMBv1 protocol. (Recommended.)\n\nEnabling this setting enables server-side processing of the SMBv1 protocol. (Default.)\n\nChanges to this setting require a reboot to take effect.\n\nFor more information, see https://support.microsoft.com/kb/2696547\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-configuresmbv1server"],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1server_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1server_1","displayName":"Enabled","description":null,"helpText":null}]},"ac78627bed84090b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_outlookexe190","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_outlookexe190_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_outlookexe190_1","displayName":"True","description":null,"helpText":null}]},"ac8fc9da39293b70":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_msaccessexe","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_msaccessexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_msaccessexe_1","displayName":"True","description":null,"helpText":null}]},"ac0cfe06c6b0e066":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},"ac77d05b84004d63":{"id":"device_vendor_msft_policy_config_userrights_changetimezone","displayName":"Change Time Zone","description":"This user right determines which users and groups can change the time zone used by the computer for displaying the local time, which is the computer's system time plus the time zone offset. System time itself is absolute and is not affected by a change in the time zone. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#changetimezone"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"ac48173071041b1e":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpassword","displayName":"Network Password (Windows Insiders only)","description":"Refers to the password for the wifi network that the device will attempt to connect to during remediation. If a password is set without a SSID, then this will be ignored.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":null},"acae6102b4b53649":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_pathcolon31","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"acf4871da8bca7a2":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15","displayName":"Trusted Location #15 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_1","displayName":"Enabled","description":null,"helpText":null}]},"acd9e99e6c61b8dc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":null},"ac429b1e52a97e06":{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpapername","displayName":"Wallpaper Name: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":null},"ac4c46f5eac13ef6":{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion","displayName":"Restrict character code range of conversion (User)","description":"This policy setting allows you to restrict character code range of conversion by setting character filter.\r\n\r\nIf you enable this policy setting, then only the character code ranges specified by this policy setting are used for conversion of IME. You can specify multiple ranges by setting a value combined with a bitwise OR of following values:\r\n\r\n0x0001 // JIS208 area\r\n0x0002 // NEC special char code\r\n0x0004 // NEC selected IBM extended code\r\n0x0008 // IBM extended code\r\n0x0010 // Half width katakana code\r\n0x0100 // EUDC(GAIJI)\r\n0x0200 // S-JIS unmapped area\r\n0x0400 // Unicode char\r\n0x0800 // surrogate char\r\n0x1000 // IVS char\r\n0xFFFF // no definition.\r\n\r\nIf you disable or do not configure this policy setting, no range of characters are filtered by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-restrictcharactercoderangeofconversion"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion_1","displayName":"Enabled","description":null,"helpText":null}]},"acfc06b6b332ccd5":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_2","displayName":"Device Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-devicemanager-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_2_1","displayName":"Enabled","description":null,"helpText":null}]},"ac4e67392773816e":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskdefrag","displayName":"Disk Defragmenter (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-diskdefrag"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskdefrag_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskdefrag_1","displayName":"Enabled","description":null,"helpText":null}]},"acbfc14d267feda2":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word","displayName":"Microsoft Word 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Word 2016.\r\nBy default, the user settings of Microsoft Word 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016word"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word_1","displayName":"Enabled","description":null,"helpText":null}]},"aceb547fcb7f7c1c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.site.com will not correctly apply to site.com or subdomain.site.com since they both resolve to the same eTLD+1 (site.com) for which there is no policy. In this case, policy must be set on site.com to apply correctly for both site.com and subdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if site-one.com is listed in the JavaScriptJitAllowedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript JIT enabled, but site-two.com will use the policy from DefaultJavaScriptJitSetting, if set, or default to JavaScript JIT enabled.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptJitSetting applies to the site, if set, otherwise Javascript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"ac7d5302ee5a0841":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_remoteaccesshostclientdomainlistdesc","displayName":"Configure the required domain names for remote access clients (User)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"ac9b6d663e30336d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_1","displayName":"Enabled","description":null,"helpText":null}]},"acff216b531b4768":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction","displayName":"Enable or disable the User-Agent Reduction. (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_1","displayName":"Enabled","description":null,"helpText":null}]},"ac6c8481b4984d7a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizedocumentlocation","displayName":"File tab | Options | Customize Ribbon | All Commands | Document Location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizedocumentlocation_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizedocumentlocation_1","displayName":"True","description":null,"helpText":null}]},"acf5b74abc6e60dc":{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_enableblockunsecurequeryfiles","displayName":"Always prevent untrusted Microsoft Query files from opening (User)","description":"This policy setting controls whether Microsoft Query files (.iqy, oqy, .dqy, and .rqy) in an untrusted location are prevented from opening.\r\n\r\nIf you enable this policy setting, Microsoft Query files in an untrusted location are prevented from opening. Users will not be able to change this setting under File > Options > Trust Center > Trust Center Settings > External Content.\r\n\r\nIf you disable or don’t configure this policy setting, Microsoft Query files in an untrusted location are not prevented from opening, unless users have changed this setting in the Trust Center.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.","helpText":"","infoUrls":[],"categoryId":"e36863b6-3232-4a29-be02-32ee67cc48b9","categoryName":"External Content","options":[{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_enableblockunsecurequeryfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_enableblockunsecurequeryfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"acf8f84fc44bdaed":{"id":"user_vendor_msft_policy_config_internetexplorer_disablegeolocation","displayName":"Turn off browser geolocation (User)","description":"This policy setting allows you to disable browser geolocation support. This will prevent websites from requesting location data about the user.\n\nIf you enable this policy setting, browser geolocation support is turned off.\n\nIf you disable this policy setting, browser geolocation support is turned on.\n\nIf you do not configure this policy setting, browser geolocation support can be turned on or off in Internet Options on the Privacy tab.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablegeolocation"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablegeolocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablegeolocation_1","displayName":"Enabled","description":null,"helpText":null}]},"ac867124bd52dc4c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls","displayName":"Configure the list of enterprise login URLs where password protection service should capture fingerprint of password (User)","description":"Configure the list of enterprise login URLs (HTTP and HTTPS schemes only) where Microsoft Edge should capture the fingerprint of passwords and use it for password reuse detection.\r\n\r\nIf you enable this policy, the password protection service captures fingerprints of passwords on the defined URLs.\r\n\r\nIf you disable this policy or don't configure it, no password fingerprints are captured.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com/login.html\r\nhttps://login.contoso.com","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_1","displayName":"Enabled","description":null,"helpText":null}]},"ac7251379b1ccb39":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmonitorallowed_recommended","displayName":"Allow users to be alerted if their passwords are found to be unsafe (User)","description":"Allow Microsoft Edge to monitor user passwords.\r\n\r\nIf you enable this policy, the user will get alerted if any of their passwords stored in Microsoft Edge are found to be unsafe. Microsoft Edge will show an alert and this information will also be available in Settings > Passwords > Password Monitor.\r\n\r\nIf you disable this policy, users will not be asked for permission to enable this feature. Their passwords will not be scanned and they will not be alerted either.\r\n\r\nIf you don't configure the policy, users can turn this feature on or off.\r\n\r\nTo learn more about how Microsoft Edge finds unsafe passwords see https://go.microsoft.com/fwlink/?linkid=2133833\r\n\r\nAdditional guidance:\r\n\r\nThis policy can be set as both Recommended as well as Mandatory, however with an important callout.\r\n\r\nMandatory enabled: If the policy is set to Mandatory enabled, the UI in Settings will be disabled but remain in 'On' state, and a briefcase icon will be made visible next to it with this description displayed on hover - \"This setting is managed by your organization.\"\r\n\r\nRecommended enabled: If the policy is set to Recommended enabled, the UI in Settings will remain in 'Off' state, but a briefcase icon will be made visible next to it with this description displayed on hover - \"Your organization recommends a specific value for this setting and you have chosen a different value\"\r\n\r\nMandatory and Recommended disabled: Both these states will work the normal way, with the usual captions being shown to users.","helpText":"","infoUrls":[],"categoryId":"a877a2ff-f144-421f-814c-593e972a8a20","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmonitorallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmonitorallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"acf5dd5f9084833e":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages","displayName":"Define an ordered list of preferred languages that websites should display in if the site supports the language (User)","description":"Configures the language variants that Microsoft Edge sends to websites as part of the Accept-Language request HTTP header and prevents users from adding, removing, or changing the order of preferred languages in Microsoft Edge settings. Users who want to change the languages Microsoft Edge displays in or offers to translate pages to will be limited to the languages configured in this policy.\r\n\r\nIf you enable this policy, websites will appear in the first language in the list that they support unless other site-specific logic is used to determine the display language. The language variants defined in this policy override the languages configured as part of the 'SpellcheckLanguage' (Enable specific spellcheck languages) policy.\r\n\r\nIf you don't configure or disable this policy, Microsoft Edge sends websites the user-specified preferred languages as part of the Accept-Language request HTTP header.\r\n\r\nFor detailed information on valid language variants, see https://go.microsoft.com/fwlink/?linkid=2148854.\r\n\r\nExample value: en-US,fr,es","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_1","displayName":"Enabled","description":null,"helpText":null}]},"acb4a1f53d4df4ff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy8","displayName":"Places Bar Location 8 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy8_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy8_1","displayName":"Enabled","description":null,"helpText":null}]},"ac91ab607d05efbf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturehashingalgorithm_l_selectdigitalsignaturehashingalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"ac76a8e35d80cfef":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_reademailasplaintext","displayName":"Read e-mail as plain text (User)","description":"This policy setting determines whether Outlook renders all e-mail messages in plain text format for reading.Outlook can display e-mail messages and other items in three formats: plain text, Rich Text Format (RTF), and HTML. \r\n\r\nIf you enable this policy setting, the \"Read all standard mail in plain text\" check box option is selected in the \"E-mail Security\" section of the Trust Center and users cannot change it. This option only changes the way e-mail messages are displayed; the original message is not converted to plain text format. \r\n\r\nIf you disable or do not configure this policy setting, Outlook displays e-mail messages in whatever format they were received in.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_reademailasplaintext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_reademailasplaintext_1","displayName":"Enabled","description":null,"helpText":null}]},"ac4cc81f86cd6bb4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour","displayName":"Hyperlink color (User)","description":"Specifies the color of hyperlinks that have not yet been followed.\r\n \r\nIf you enable this setting, hyperlinks that have not been followed are displayed in the color you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3db7e884-6077-4b96-ace3-005a6b49ecc0","categoryName":"Hyperlink appearance in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_1","displayName":"Enabled","description":null,"helpText":null}]},"ac3c654d2df2cd8a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_help_l_helpcolon","displayName":"Help: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":null},"ac7e7b626fc982ce":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablertc","displayName":"Disable Real Time Coauthoring for Word (User)","description":"This policy lets admins disable Real Time Coauthoring. They may want to do so if they have solutions that are not compatible with some elements of real time coauthoring, such as add-ins that would trigger too often due to Real Time Coauthoring causing the frequent saving of user content. \r\n\r\nIf you enable this policy setting, it will prevent Real Time Coauthoring. \r\n\r\nIf you disable or do not configure this policy setting, users will be able to experience Real Time Coauthoring feature.","helpText":"","infoUrls":[],"categoryId":"e522c142-5666-4090-a7f4-1da1487f5384","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablertc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablertc_1","displayName":"Enabled","description":null,"helpText":null}]},"ac30086d22210aef":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_addbidirectionalmarkswhensavingtextfiles","displayName":"Add Bi-Directional Marks when saving Text files (User)","description":"Checked: Add Bi-Directional Marks when saving Text files. | Unchecked: Do not add Bi-Directional Marks when saving Text files.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_addbidirectionalmarkswhensavingtextfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_addbidirectionalmarkswhensavingtextfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"aca00a0c1e025a7b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior","displayName":"Set default file block behavior (User)","description":"This policy setting allows you to determine if users can open, view, or edit Word files.\r\n\r\nIf you enable this policy setting, you can set one of these options:\r\n- Blocked files are not opened\r\n- Blocked files open in Protected View and can not be edited\r\n- Blocked files open in Protected View and can be edited\r\n\r\nIf you disable or do not configure this policy setting, the behavior is the same as the \"Blocked files are not opened\" setting. Users will not be able to open blocked files.","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"ac256630aca9b908":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"aceded718d9d0f64":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_localuserauthorizedlist","displayName":"Local User Authorized List","description":"Specifies the list of authorized local users for this rule. A list of authorized users cannot be specified if the rule being authored is targeting a Windows service. If not specified, the default is all users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/ad.json b/public/intune-definitions/ad.json new file mode 100644 index 000000000000..8bc9d8c24a0e --- /dev/null +++ b/public/intune-definitions/ad.json @@ -0,0 +1 @@ +{"ad0bda41e4bb5f32":{"id":"com.android.devicerestrictionpolicy.passwordrequireunlock","displayName":"Required unlock frequency","description":"Select how long users have before they're required to unlock the device using a strong authentication method (password, PIN, or pattern). Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":[{"id":"com.android.devicerestrictionpolicy.passwordrequireunlock_devicedefault","displayName":"Device default","description":null,"helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordrequireunlock_requiredpasswordunlockdailyoption","displayName":"24 hours since last PIN, password, or pattern unlock","description":null,"helpText":null}]},"ad3af61b4619ffc2":{"id":"com.apple.managedclient.preferences_disableicmpparsing","displayName":"Disable ICMP parsing","description":"Disables parsing of ICMP traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disableicmpparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableicmpparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"ad48388ea6259bc1":{"id":"com.apple.managedclient.preferences_forcebingsafesearch","displayName":"Enforce Bing SafeSearch","description":"Ensure that queries in Bing web search are done with SafeSearch set to the value specified. Users can't change this setting.\n\nIf you configure this policy to \"Off\", SafeSearch in Bing search falls back to the bing.com value.\n\nIf you configure this policy to \"Moderate\", the moderate setting is used in SafeSearch. The moderate setting filters adult videos and images but not text from search results.\n\nIf you configure this policy to \"Strict\", the strict setting in SafeSearch is used. The strict setting filters adult text, images, and videos.\n\nIf you disable this policy or don't configure it, SafeSearch in Bing search isn't enforced, and users can set the value they want on bing.com.\n\n* 0 = Don't configure search restrictions in Bing\n\n* 1 = Configure moderate search restrictions in Bing\n\n* 2 = Configure strict search restrictions in Bing","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forcebingsafesearch"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forcebingsafesearch_0","displayName":"Don't configure search restrictions in Bing","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forcebingsafesearch_1","displayName":"Configure moderate search restrictions in Bing","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forcebingsafesearch_2","displayName":"Configure strict search restrictions in Bing","description":null,"helpText":null}]},"ad944bcc8fb9fa8d":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_is_default","displayName":"Is default","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_managedsearchengines_item_is_default_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_managedsearchengines_item_is_default_true","displayName":"Enabled","description":null,"helpText":null}]},"adde5445f36750c1":{"id":"com.apple.security.firewall_applications_item_bundleid","displayName":"Bundle ID","description":"The bundle identifier for an app.","helpText":null,"infoUrls":[],"categoryId":"70b5da13-9c31-4857-890d-b7eb223729c3","categoryName":"Firewall","options":null},"adabf83e33ae9137":{"id":"com.apple.systemconfiguration_proxies_ftpport","displayName":"FTP Port","description":"The FTP proxy port.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"adc034b77446e56e":{"id":"com.apple.webcontent-filter_allowlistbookmarks_item_url","displayName":"URL","description":"The URL of the bookmark in the allow list.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"adb76807b5297a25":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webusbaskforurls","displayName":"Allow WebUSB on specific sites","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a USB device.\n\nIf you don't configure this policy, the global default value from the \"DefaultWebUsbGuardSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nThe URL patterns defined in this policy can't conflict with those configured in the \"WebUsbBlockedForUrls\" policy - you can't both allow and block a URL. For detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"ad7a7cf45ef0b13c":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvallowdra_name","displayName":"Allow data recovery agent","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvallowdra_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvallowdra_name_1","displayName":"True","description":null,"helpText":null}]},"ad15a989aec1129f":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdvalue","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":null},"ad1632788dc5e4bc":{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage","displayName":"Restricts the UI language Windows uses for all logged users","description":"This policy setting restricts the Windows UI language for all users.\r\n\r\nThis is a policy setting for computers with more than one UI language installed.\r\n\r\nIf you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language will follow the language specified by the administrator as the system UI languages. The UI language selected by the user will be ignored if it is different than any of the system UI languages.\r\n\r\nIf you disable or do not configure this policy setting, the user can specify which UI language is used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-lockmachineuilanguage"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_globalization_lockmachineuilanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"adb7468f612f9372":{"id":"device_vendor_msft_policy_config_admx_kdc_emitlili","displayName":"Provide information about previous logons to client computers","description":"This policy setting controls whether the domain controller provides information about previous logons to client computers.\r\n\r\nIf you enable this policy setting, the domain controller provides the information message about previous logons.\r\n\r\nFor Windows Logon to leverage this feature, the \"Display information about previous logons during user logon\" policy setting located in the Windows Logon Options node under Windows Components also needs to be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the domain controller does not provide information about previous logons unless the \"Display information about previous logons during user logon\" policy setting is enabled.\r\n\r\nNote: Information about previous logons is provided only if the domain functional level is Windows Server 2008. In domains with a domain functional level of Windows Server 2003, Windows 2000 native, or Windows 2000 mixed, domain controllers cannot provide information about previous logons, and enabling this policy setting does not affect anything.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kdc#admx-kdc-emitlili"],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_emitlili_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_emitlili_1","displayName":"Enabled","description":null,"helpText":null}]},"adf69ed7c1325693":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobehost_ncsi_corpdnsprobehostbox","displayName":"Corporate DNS Probe Hostname:","description":null,"helpText":"","infoUrls":[],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":null},"ad7461307539d7db":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundsuccessfulrefreshperiod_netlogon_backgroundsuccessfulrefreshperiodlabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"add4df0c12cc9157":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_lbl_backgroundsyncblockoutperiodstarttime","displayName":"Blockout Start Time (HHMM)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"ad71c2b031c0064c":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_setcachepercent","displayName":"Set percentage of disk space used for client computer cache","description":"This policy setting specifies the default percentage of total disk space that is allocated for the BranchCache disk cache on client computers.\r\n\r\nIf you enable this policy setting, you can configure the percentage of total disk space to allocate for the cache.\r\n\r\nIf you disable or do not configure this policy setting, the cache is set to 5 percent of the total disk space on the client computer.\r\n\r\nPolicy configuration\r\n\r\nSelect one of the following:\r\n\r\n- Not Configured. With this selection, BranchCache client computer cache settings are not applied to client computers by this policy. In the circumstance where client computers are domain members but you do not want to configure a BranchCache client computer cache setting on all client computers, you can specify Not Configured for this domain Group Policy setting, and then configure local computer policy to enable BranchCache client computer cache settings on individual client computers. Because the domain Group Policy setting is not configured, it will not over-write the client computer cache setting that you use on individual client computers.\r\n\r\n- Enabled. With this selection, the BranchCache client computer cache setting is enabled for all client computers where the policy is applied. For example, if Set percentage of disk space used for client computer cache is enabled in domain Group Policy, the BranchCache client computer cache setting that you specify in the policy is turned on for all domain member client computers to which the policy is applied.\r\n\r\n- Disabled. With this selection, BranchCache client computers use the default client computer cache setting of five percent of the total disk space on the client computer.\r\n\r\nIn circumstances where this setting is enabled, you can also select and configure the following option:\r\n\r\n- Specify the percentage of total disk space allocated for the cache. Specifies an integer that is the percentage of total client computer disk space to use for the BranchCache client computer cache.\r\n\r\n* This policy setting is supported on computers that are running Windows Vista Business, Enterprise, and Ultimate editions with Background Intelligent Transfer Service (BITS) 4.0 installed.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-peertopeercaching#admx-peertopeercaching-setcachepercent"],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":[{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_setcachepercent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_setcachepercent_1","displayName":"Enabled","description":null,"helpText":null}]},"ad93d644164ec631":{"id":"device_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_2","displayName":"Turn off hardware buttons","description":"Turns off Tablet PC hardware buttons.\r\n\r\nIf you enable this policy, no actions will occur when the buttons are pressed, and the buttons tab in Tablet PC Control Panel will be removed.\r\n\r\nIf you disable this policy, user and OEM defined button actions will occur when the buttons are pressed.\r\n\r\nIf you do not configure this policy, user and OEM defined button actions will occur when the buttons are pressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-turnoffbuttons-2"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_2_1","displayName":"Enabled","description":null,"helpText":null}]},"adcc3e37956052bc":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013","displayName":"Microsoft Office 365 OneNote 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 OneNote 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 OneNote 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365onenote2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013_1","displayName":"Enabled","description":null,"helpText":null}]},"ade8fca10f0fa41a":{"id":"device_vendor_msft_policy_config_appvirtualization_allowroamingregistryexclusions_integration_roaming_registry_exclusions_prompt","displayName":"Roaming File Exclusions","description":"","helpText":"","infoUrls":[],"categoryId":"ea9a092f-dd93-41d4-9bbb-118de1213578","categoryName":"Integration","options":null},"ad0e46d69b9f4cb5":{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditdpapiactivity","displayName":"Detailed Tracking Audit DPAPI Activity","description":"This policy setting allows you to audit events generated when encryption or decryption requests are made to the Data Protection application interface (DPAPI). DPAPI is used to protect secret information such as stored password and key information. For more information about DPAPI, see https://go.microsoft.com/fwlink/?LinkId=121720. If you configure this policy setting, an audit event is generated when an encryption or decryption request is made to DPAPI. Success audits record successful requests and Failure audits record unsuccessful requests. If you do not configure this policy setting, no audit event is generated when an encryption or decryption request is made to DPAPI.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#detailedtracking_auditdpapiactivity"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditdpapiactivity_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditdpapiactivity_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditdpapiactivity_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditdpapiactivity_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"ad26e187fa5b8d5b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended","displayName":"Import saved passwords from default browser on first run","description":"Setting the policy to Enabled imports saved passwords from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no saved passwords are imported on first run.\r\n\r\nUsers can trigger an import dialog and the saved passwords checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"adebde612f0a4ea2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended","displayName":"Enable Live Translate","description":"Enable translation of live captions. Captions will be sent to Google for translation.\r\n\r\nIf this policy is set to Enabled, Live Translate will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Translate will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Translate is disabled initially but can be enabled by the user anytime.\r\n\r\nIn LiveCaptionEnabled is set to Disabled, Live Translate will be disabled regardless of this policy setting.","helpText":"","infoUrls":[],"categoryId":"12142994-4b30-486c-bab1-9206528b2b96","categoryName":"Accessibility settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ad78360932c527de":{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats","displayName":"Remediation action for Severe threats","description":"","helpText":"","infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},"adec7deb6ea755b1":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowfontdownloads"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"ade012b9592716ea":{"id":"device_vendor_msft_policy_config_lanmanserver_authratelimiterdelayinms","displayName":"Auth Rate Limiter Delay In Ms","description":"This policy controls whether the SMB server will use a default value in milliseconds for the invalid authentication delay. If you configure this policy setting, the authentication rate limiter will use the specified value for delaying invalid authentication attempts. If you do not configure this policy setting, the authentication rate limiter will use the default value obtained from either the software licensing service or the local registry.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#authratelimiterdelayinms"],"categoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","categoryName":"Lanman Server","options":null},"ad0997f31b6255ce":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_leteveryonepermissionsapplytoanonymoususers","displayName":"Network Access Let Everyone Permissions Apply To Anonymous Users","description":"Network access: Let Everyone permissions apply to anonymous users This security setting determines what additional permissions are granted for anonymous connections to the computer. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. By Default, the Everyone security identifier (SID) is removed from the token created for anonymous connections. Therefore, permissions granted to the Everyone group do not apply to anonymous users. If this option is set, anonymous users can only access those resources for which the anonymous user has been explicitly given permission. If this policy is enabled, the Everyone SID is added to the token that is created for anonymous connections. In this case, anonymous users are able to access any resource for which the Everyone group has been given permissions. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_leteveryonepermissionsapplytoanonymoususers"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"adf84fe920b464ce":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended","displayName":"Allow importing of search engine settings","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\r\n\r\nIf you enable, this policy, the option to import search engine settings is automatically selected.\r\n\r\nIf you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"adf857235a17a9ee":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotblocklist_browsingwithcopilotblocklistdesc","displayName":"Browsing with Copilot Blocked URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ad3b3c533bb7d1cc":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled","displayName":"Allow managed extensions to use the Enterprise Hardware Platform API","description":"When this policy is set to enabled, extensions installed by enterprise policy are allowed to use the Enterprise Hardware Platform API.\r\nWhen this policy is set to disabled or isn't set, no extensions are allowed to use the Enterprise Hardware Platform API.\r\nThis policy also applies to component extensions.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ad500ba6a4061b2b":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadaskforurls_filesystemreadaskforurlsdesc","displayName":"Allow read access via the File System API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"ad0780053442ff2f":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode","description":"Restricts background graphics printing mode. If this policy isn't set there's no restriction on printing background graphics.\r\n\r\nPolicy options mapping:\r\n\r\n* any (any) = Allow printing with and without background graphics\r\n\r\n* enabled (enabled) = Allow printing only with background graphics\r\n\r\n* disabled (disabled) = Allow printing only without background graphics\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_1","displayName":"Enabled","description":null,"helpText":null}]},"adeae8e67395c32d":{"id":"device_vendor_msft_policy_config_system_disablesystemrestore","displayName":"Turn off System Restore","description":"Allows you to disable System Restore.\n\nThis policy setting allows you to turn off System Restore.\n\nSystem Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. By default, System Restore is turned on for the boot volume.\n\nIf you enable this policy setting, System Restore is turned off, and the System Restore Wizard cannot be accessed. The option to configure System Restore or create a restore point through System Protection is also disabled.\n\nIf you disable or do not configure this policy setting, users can perform System Restore and configure System Restore settings through System Protection.\n\nAlso, see the \"Turn off System Restore configuration\" policy setting. If the \"Turn off System Restore\" policy setting is disabled or not configured, the \"Turn off System Restore configuration\" policy setting is used to determine whether the option to configure System Restore is available.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-disablesystemrestore"],"categoryId":"5c9a2f21-d3a8-4295-a803-e0535aa29489","categoryName":"System Restore","options":[{"id":"device_vendor_msft_policy_config_system_disablesystemrestore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_disablesystemrestore_1","displayName":"Enabled","description":null,"helpText":null}]},"ad2d7fb4db58766b":{"id":"linux_mdatp_managed_antivirusengine_enablerealtimeprotection","displayName":"Enable real-time protection (deprecated)","description":"Locates and stops malware from installing or running on your device. You can turn off this setting for a short time before it turns back on automatically.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-real-time-protection"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_enablerealtimeprotection_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enablerealtimeprotection_true","displayName":"Enabled","description":null,"helpText":null}]},"ad3d354ec91ad12b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders50","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders50_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders50_1","displayName":"True","description":null,"helpText":null}]},"adf636ba2665a2ec":{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_1","displayName":"Do not allow window animations (User)","description":"This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. \r\n\r\nIf you enable this policy setting, window animations are turned off. \r\n\r\nIf you disable or do not configure this policy setting, window animations are turned on. \r\n\r\nChanging this policy setting requires a logoff for it to be applied.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdisallowanimations-1"],"categoryId":"d52dd970-febb-4891-8eb7-1c8616cfb6cb","categoryName":"Desktop Window Manager","options":[{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_1_1","displayName":"Enabled","description":null,"helpText":null}]},"adb4614e401bf596":{"id":"user_vendor_msft_policy_config_admx_logon_run_1","displayName":"Run these programs at user logon (User)","description":"This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system.\r\n\r\nIf you enable this policy setting, you can specify which programs can run at the time the user logs on to this computer that has this policy applied.\r\n\r\nTo specify values for this policy setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file.\r\n\r\nIf you disable or do not configure this policy setting, the user will have to start the appropriate programs after logon.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting.\r\n\r\nAlso, see the \"Do not process the legacy run list\" and the \"Do not process the run once list\" settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-run-1"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"user_vendor_msft_policy_config_admx_logon_run_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_run_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ada8d65a239fb504":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_hra","displayName":"Health Registration Authority (HRA) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-hra"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_hra_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_hra_1","displayName":"Enabled","description":null,"helpText":null}]},"adbd13a30877062d":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_1","displayName":"Security Settings (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-securitysettings-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ad2f24bd40918af2":{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremoterestore_1","displayName":"Prevent restoring remote previous versions (User)","description":"This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a file on a file share.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a file on a file share.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a file on a file share. If the user clicks the Restore button, Windows attempts to restore the file from the file share.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a file on a file share.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disableremoterestore-1"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremoterestore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremoterestore_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ad7b68bb06ebe762":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd","displayName":"Prevent access to the command prompt (User)","description":"This policy setting prevents users from running the interactive command prompt, Cmd.exe. This policy setting also determines whether batch files (.cmd and .bat) can run on the computer.\r\n\r\nIf you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.\r\n\r\nIf you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally.\r\n\r\nNote: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-disablecmd"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_1","displayName":"Enabled","description":null,"helpText":null}]},"adabd09bf62e959e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"adf3034910cbe106":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled","displayName":"Enable Translate (User)","description":"Setting the policy to True provides translation functionality when it's appropriate for users by showing an integrated translate toolbar in Google Chrome and a translate option on the right-click context menu. Setting the policy to False shuts off all built-in translate features.\r\n\r\nIf you set the policy, users can't change this function. Leaving it unset lets them change the setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ad2e6b3c12e25c19":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printheaderfooter","displayName":"Print Headers and Footers (User)","description":"Setting the policy to Enabled turns headers and footers on in print preview. Setting the policy to Disabled turns them off in print preview.\r\n\r\nIf you set the policy, users can't change it. If unset, users decides whether headers and footers appear.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printheaderfooter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printheaderfooter_1","displayName":"Enabled","description":null,"helpText":null}]},"ad921f635a11436b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_enterprisesearchaggregatorsettings","displayName":"Enterprise search aggregator settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"add4ce8d58f36d06":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist","displayName":"Enterprise profile separation secondary domain allowlist (User)","description":"If this policy is unset, account logins will not be required to create a new separate profile.\r\n\r\nIf this policy is set, account logins from the listed domains will not be required to create a new separate profile.\r\n\r\nThis policy can be set to an empty string so that all account logins are required to create a new separate profile.\r\n\r\nExample value:\r\n\r\ndomain.com\r\notherdomain.com","helpText":"","infoUrls":[],"categoryId":"f00e9baf-9bbf-48e4-aaac-57410730f016","categoryName":"Sign-in settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_1","displayName":"Enabled","description":null,"helpText":null}]},"ad6e2b4f5b11eb64":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders68","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders68_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders68_1","displayName":"True","description":null,"helpText":null}]},"adbed1906f004d56":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_donotcachenetworkfileslocally","displayName":"Do not cache network files locally (User)","description":"This policy setting allows you to configure whether network files are locally cached when editing spreadsheets stored on network shares.\r\n\r\nIf you enable this policy setting, a file located on a network share may not be saved if the network connection was lost at any time while editing the file and the file contains a pivot table, VBE code or an embedded OLE object. \r\n\r\nIf you disable or do not configure this policy setting, network files are locally cached when editing spreadsheets stored on network shares. This may help prevent data loss during network failures.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_donotcachenetworkfileslocally_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_donotcachenetworkfileslocally_1","displayName":"Enabled","description":null,"helpText":null}]},"adf213170d2a3416":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode","displayName":"Run .NET Framework-reliant components signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute signed managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute signed managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute signed managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute signed managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_1","displayName":"Enabled","description":null,"helpText":null}]},"ad68c634c206dbb8":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_setntpdefaultfeedtab","displayName":"Set the default New Tab Page feed tab to Work or Discover (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_setntpdefaultfeedtab_0","displayName":"Work","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended~startup_recommended_setntpdefaultfeedtab_recommended_setntpdefaultfeedtab_1","displayName":"Discover","description":null,"helpText":null}]},"ad3630eaed7e5670":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastserviceserverdescription4","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"ad1d2239509e9344":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingadhocreview_l_empty388","displayName":"\r\nMax number of documents being reviewed using ad hoc review\r\n","description":"","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":null},"adf7d4bb67d0a33b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcameroon","displayName":"French (Cameroon) (User)","description":"Enables the editing language French (Cameroon)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcameroon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchcameroon_1","displayName":"Enabled","description":null,"helpText":null}]},"ad0f0805da71bed1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmorocco","displayName":"French (Morocco) (User)","description":"Enables the editing language French (Morocco)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmorocco_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchmorocco_1","displayName":"Enabled","description":null,"helpText":null}]},"ad56e3e37801d095":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_punjabi","displayName":"Punjabi (User)","description":"Enables the editing language Punjabi","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_punjabi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_punjabi_1","displayName":"Enabled","description":null,"helpText":null}]},"ad93e150e8351df3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tamil","displayName":"Tamil (User)","description":"Enables the editing language Tamil","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tamil_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tamil_1","displayName":"Enabled","description":null,"helpText":null}]},"adb70214d30dfc76":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey17","displayName":"Escrow Key #17 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey17_1","displayName":"Enabled","description":null,"helpText":null}]},"adfab9b5b93092d0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setworkgrouppathforlabelpagesizeupdatefiles_l_setworkgrouppathforlabelpagesizeupdatefilesid","displayName":"Workgroup path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":null},"ad77b5f4623c4d24":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9_l_freebusyupdatedontheservereveryxxxseconds","displayName":"Free/Busy updated on the server every xxx seconds: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":null},"ad3af6e25c71057c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifylistofsocialnetworkproviderstoload_l_specifylistofsocialnetworkproviderstoloadid","displayName":"Separate ProgIDs with semi-colons (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":null},"ad8da47f25677328":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_foldersizedisplay","displayName":"Do not display Folder Size button on folder properties dialog box (User)","description":"Retains/Removes the \"Folder Size\" button in the General tab of the Properties dialog box.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_foldersizedisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_foldersizedisplay_1","displayName":"Enabled","description":null,"helpText":null}]},"ad38d4aabdb6ea0f":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableoutlookmobilehyperlink","displayName":"Disable Outlook Mobile Hyperlink (User)","description":"This policy setting determines if the Outlook Mobile Hyperlink is shown in Account Settings.\r\n\r\nIf you enable this policy setting, users will be unable to view the Outlook Mobile Hyperlink in Account Settings.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableoutlookmobilehyperlink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableoutlookmobilehyperlink_1","displayName":"Enabled","description":null,"helpText":null}]},"ad9d3c1c7504b403":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_windowsintaskbar","displayName":"Show all windows in the Taskbar (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_windowsintaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_windowsintaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"adf571bca93d09df":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel","displayName":"Publisher Automation Security Level (User)","description":"This policy setting controls whether macros opened programmatically by another application can run in Publisher.\r\n\r\nIf you enable this policy setting, you may choose an option for controlling macro behavior in Publisher when the application is opened programmatically:\r\n\r\n- Low (enabled): Macros can run in the programmatically opened application.\r\n- By UI (prompted): Macro functionality is determined by the setting in the \"Macro Settings\" section of the Trust Center.\r\n- High (disabled): All macros are disabled in the programmatically opened application.\r\n\r\nIf you disable or do not configure this policy setting, Publisher will use the default Macro setting in Trust Center.","helpText":"","infoUrls":[],"categoryId":"0cea32b4-28be-4164-ae2a-6db33b9dadb7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_1","displayName":"Enabled","description":null,"helpText":null}]},"ad823a9ff74e8056":{"id":"user_vendor_msft_policy_config_windowsai_disableclicktodo","displayName":"Disable Click To Do (User)","description":"Click to Do lets people take action on content on their screens. When activated, it takes a screenshot of their screen and analyzes it to present actions. Click to Do ends when they exit it, and it can't take screenshots while closed. Screenshot analysis is always performed locally on their device. By default, Click to Do is enabled for users. This policy setting allows you to determine whether Click to Do is available for users on their device. When the policy is enabled, the Click to Do component and entry points will not be available to users. When the policy is disabled, users will have Click to Do available on their device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableclicktodo"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_disableclicktodo_0","displayName":"Click to Do is enabled","description":"Click to Do is enabled","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_disableclicktodo_1","displayName":"Click to Do is disabled.","description":"Click to Do is disabled.","helpText":null}]},"ad572ef2fcdf6490":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_defaultfilelocation_l_documents","displayName":"Documents (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":null},"adba08b65926c1fc":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_optionalhyphens","displayName":"Optional hyphens (User)","description":"Determines whether the symbol used to represent optional hyphens is shown on the screen.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_optionalhyphens_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_optionalhyphens_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/ae.json b/public/intune-definitions/ae.json new file mode 100644 index 000000000000..2cc061f5d1aa --- /dev/null +++ b/public/intune-definitions/ae.json @@ -0,0 +1 @@ +{"aec55195a8eba5fa":{"id":"com.apple.applicationaccess_allowcamera","displayName":"Allow Camera","description":"If false, disables the camera, and its icon is removed from the Home screen. Users are unable to take photographs. Requires a supervised device. Available in iOS 4 and later, and macOS 10.11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcamera_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcamera_true","displayName":"True","description":null,"helpText":null}]},"aed2c03823d55368":{"id":"com.apple.applicationaccess_allownfc","displayName":"Allow NFC","description":"If false, disables NFC. Requires a supervised device. Available in iOS 14.2 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allownfc_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allownfc_true","displayName":"True","description":null,"helpText":null}]},"aefe45b849babce0":{"id":"com.apple.applicationaccess_allowphotostream","displayName":"Allow Photo Stream (Deprecated)","description":"If false, disables Photo Stream. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowphotostream_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowphotostream_true","displayName":"True","description":null,"helpText":null}]},"ae2b56a6614c1e43":{"id":"com.apple.applicationaccess_allowradioservice","displayName":"Allow Radio Service","description":"If false, disables Apple Music Radio. Requires a supervised device. Available in iOS 9.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowradioservice_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowradioservice_true","displayName":"True","description":null,"helpText":null}]},"ae144a1b8a1242db":{"id":"com.apple.extensiblesso_extensiondata_domainrealmmapping_kerberos","displayName":"Domain Realm Mapping","description":"A custom domain-realm mapping for Kerberos. This is used when the DNS name of hosts do not match the realm name. Most administrators will not need to customize this.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"aee6d2ec264ef169":{"id":"com.apple.managedclient.preferences_enforcementlevel","displayName":"Enforcement level","description":"Specifies if network protection is disabled, in audit mode, or enforced","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_enforcementlevel_0","displayName":"disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enforcementlevel_1","displayName":"audit","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enforcementlevel_2","displayName":"block","description":null,"helpText":null}]},"ae9b378ee947f699":{"id":"com.apple.managedclient.preferences_guardagainstappmodification","displayName":"Guard against app modification","description":"Retain and reuse app clones after the update cycle. This allows for future delta updates even when the source app has been modified by a third-party tool.","helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_guardagainstappmodification_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_guardagainstappmodification_true","displayName":"Enabled","description":null,"helpText":null}]},"ae21a22c0374af22":{"id":"com.apple.managedclient.preferences_homepageisnewtabpage","displayName":"Set the new tab page as the home page","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\n\nIf you enable this policy, the new tab page is always used for the home page, and the home page URL location is ignored.\n\nIf you disable this policy, the user's home page can't be the new tab page, unless the URL is set to 'edge://newtab'.\n\nIf not configured users can choose whether the new tab page is their home page.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#homepageisnewtabpage"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_homepageisnewtabpage_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_homepageisnewtabpage_true","displayName":"Enabled","description":null,"helpText":null}]},"aeb77c65f8df1491":{"id":"com.apple.managedclient.preferences_inprivatemodeavailability","displayName":"Configure InPrivate mode availability","description":"Specifies whether the user can open pages in InPrivate mode in Microsoft Edge.\n\nIf you don't configure this policy or set it to 'Enabled' (0), users can open pages in InPrivate mode.\n\nSet this policy to 'Disable' (1) to stop users from using InPrivate mode.\n\nSet this policy to 'Forced' (2) to always use InPrivate mode.\n\n* 0 = InPrivate mode available\n\n* 1 = InPrivate mode disabled\n\n* 2 = InPrivate mode forced","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#inprivatemodeavailability"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_inprivatemodeavailability_0","displayName":"InPrivate mode available","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_inprivatemodeavailability_1","displayName":"InPrivate mode disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_inprivatemodeavailability_2","displayName":"InPrivate mode forced","description":null,"helpText":null}]},"ae0270caba1794f7":{"id":"com.apple.managedclient.preferences_optionalconnectedexperiencespreference","displayName":"Allow optional connected experiences","description":"Allow usage of third-party data controller services. Note: All Outlook add-ins will be disabled if the value is set to false.","helpText":null,"infoUrls":["https://aka.ms/macoce"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_optionalconnectedexperiencespreference_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_optionalconnectedexperiencespreference_true","displayName":"True","description":null,"helpText":null}]},"ae566c5a6337ab4e":{"id":"com.apple.managedclient.preferences_scarewareblockerallowlistdomains","displayName":"Configure the list of domains where Microsoft Edge Scareware blockers don't run","description":"This policy configures the list of trusted domains for Microsoft Edge Scareware blocker. When a website's source URL matches any domain in this list, Microsoft Edge Scareware blocker doesn't analyze that site.\n\nThis policy takes effect only if the ScarewareBlockerProtectionEnabled policy is enabled.\n\nIf you enable this policy, Microsoft Edge Scareware blocker trusts the specified domains.\n\nIf you disable or don't configure this policy, Microsoft Edge Scareware blocker analyzes all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#scarewareblockerallowlistdomains"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ae418f1f159ba567":{"id":"com.apple.managedclient.preferences_webhidblockedforurls","displayName":"Block the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\n\nLeaving the policy unset means \"DefaultWebHidGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\n\n * \"WebHidAskForUrls\" (if there is a match),\n\n * \"DefaultWebHidGuardSetting\" (if set), or\n\n * Users' personal settings.\n\nURL patterns can't conflict with \"WebHidAskForUrls\". Neither policy takes precedence if a URL matches both patterns.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webhidblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"aea88c5236d22874":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"aedf7a9e0d36a3af":{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceephemeralprofiles","displayName":"Enable use of ephemeral profiles","description":"Controls whether user profiles are switched to ephemeral mode. An ephemeral profile is created when a session begins, is deleted when the session ends, and is associated with the user's original profile.\n\nIf you enable this policy, profiles run in ephemeral mode. This setting lets users work from their own devices without saving browsing data to those devices. If you enable this policy as an OS policy (by using GPO on Windows, for example), it applies to every profile on the system.\n\nIf you disable this policy or don't configure it, users get their regular profiles when they sign in to the browser.\n\nIn ephemeral mode, profile data is saved on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies, and web databases aren't saved after the browser is closed. This setting doesn't prevent a user from manually downloading any data to disk, or from saving pages or printing them. If the user enabled sync, all data is preserved in their sync accounts just like with regular profiles. Users can also use InPrivate browsing in ephemeral mode unless you explicitly disable this setting.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceephemeralprofiles_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.forceephemeralprofiles_true","displayName":"Enabled","description":null,"helpText":null}]},"ae82624f4b9a5fc6":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_id","displayName":"ID","description":"GUID, a unique ID, represents the policy and will be used in the reporting and troubleshooting.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"aec443cf056ba610":{"id":"device_vendor_msft_defender_configuration_disablequicparsing","displayName":"Disable Quic Parsing","description":"This setting disables QUIC Parsing for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablequicparsing_1","displayName":"QUIC parsing is disabled","description":"QUIC parsing is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablequicparsing_0","displayName":"QUIC parsing is enabled","description":"QUIC parsing is enabled","helpText":null}]},"aea95292a4ca1795":{"id":"device_vendor_msft_euiccs_{euicc}","displayName":"eSIM","description":"Represents information associated with an eUICC. There is one subtree for each known eUICC, created by the Local Profile Assistant (LPA) when the eUICC is first seen. The node name is the eUICC ID (EID). The node name \"Default\" represents the currently active eUICC.","helpText":"","infoUrls":[],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":null},"ae3eaaaa150680d3":{"id":"device_vendor_msft_policy_config_accounts_allowaddingnonmicrosoftaccountsmanually","displayName":"Allow Adding Non Microsoft Accounts Manually","description":"Specifies whether user is allowed to add non-MSA email accounts. Most restricted value is 0. Note This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Accounts#AllowAddingNonMicrosoftAccountsManually"],"categoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","categoryName":"Accounts","options":[{"id":"device_vendor_msft_policy_config_accounts_allowaddingnonmicrosoftaccountsmanually_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_accounts_allowaddingnonmicrosoftaccountsmanually_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"ae463e0d95a6f928":{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentialswhenntlmonly_concatenatedefaults_afcn","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentialswhenntlmonly_concatenatedefaults_afcn_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentialswhenntlmonly_concatenatedefaults_afcn_1","displayName":"True","description":null,"helpText":null}]},"aef68ac2f3c16c04":{"id":"device_vendor_msft_policy_config_admx_desktop_nodesktop","displayName":"Hide and disable all items on the desktop","description":"Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.\n\nRemoving icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.\n\nAlso, see \"Items displayed in Places Bar\" in User Configuration\\Administrative Templates\\Windows Components\\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nodesktop"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_desktop_nodesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_desktop_nodesktop_1","displayName":"Enabled","description":null,"helpText":null}]},"aec80c9eb03bc7cb":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disablelgpoprocessing","displayName":"Turn off Local Group Policy Objects processing","description":"This policy setting prevents Local Group Policy Objects (Local GPOs) from being applied.\r\n\r\nBy default, the policy settings in Local GPOs are applied before any domain-based GPO policy settings. These policy settings can apply to both users and the local computer. You can disable the processing and application of all Local GPOs to ensure that only domain-based GPOs are applied.\r\n\r\nIf you enable this policy setting, the system does not process and apply any Local GPOs.\r\n\r\nIf you disable or do not configure this policy setting, Local GPOs continue to be applied.\r\n\r\nNote: For computers joined to a domain, it is strongly recommended that you only configure this policy setting in domain-based GPOs. This policy setting will be ignored on computers that are joined to a workgroup.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-disablelgpoprocessing"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disablelgpoprocessing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_disablelgpoprocessing_1","displayName":"Enabled","description":null,"helpText":null}]},"ae24677e89dc7fc5":{"id":"device_vendor_msft_policy_config_admx_power_inboxactiveschemeoverride_2","displayName":"Select an active power plan","description":"This policy setting specifies the active power plan from a list of default Windows power plans. To specify a custom power plan, use the Custom Active Power Plan setting.\r\n\r\nIf you enable this policy setting, specify a power plan from the Active Power Plan list.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-inboxactiveschemeoverride-2"],"categoryId":"290ec637-e780-4e95-9834-6368ac0437d1","categoryName":"Power Management","options":[{"id":"device_vendor_msft_policy_config_admx_power_inboxactiveschemeoverride_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_inboxactiveschemeoverride_2_1","displayName":"Enabled","description":null,"helpText":null}]},"aee9bc9cbf6765d2":{"id":"device_vendor_msft_policy_config_admx_printing_domainprinters_ipprinters","displayName":"Number of TCP/IP printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"ae007e1d7b233ee9":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_putdataownerontocheck","displayName":"Folder owner","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_putdataownerontocheck_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_putdataownerontocheck_1","displayName":"True","description":null,"helpText":null}]},"ae4d5dd3d7c39694":{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditotheraccountlogonevents","displayName":"Account Logon Audit Other Account Logon Events","description":"This policy setting allows you to audit events generated by responses to credential requests submitted for a user account logon that are not credential validation or Kerberos tickets. Currently, there are no events in this subcategory.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogon_auditotheraccountlogonevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditotheraccountlogonevents_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditotheraccountlogonevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditotheraccountlogonevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditotheraccountlogonevents_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"ae2610a7d012a918":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_enabledpluginsdesc","displayName":"List of enabled plugins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"ae06a968cd2d9245":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins","displayName":"Allow screen capture without prior user gesture","description":"For security reasons, the\r\ngetDisplayMedia() web API requires\r\na prior user gesture (\"transient activation\") to be called or will otherwise\r\nfail.\r\n\r\nWith this policy set, admins can specify origins on which this API can be\r\ncalled without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is\r\nnot an accepted value for this policy.\r\n\r\nIf this policy is unset, all origins will require a prior user gesture to call\r\nthis API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"ae185f0e11c883ad":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled","displayName":"Use the Happy Eyeballs V3 algorithm","description":"This feature enables the Happy Eyeballs V3 algorithm to make connection attempts. See https://datatracker.ietf.org/doc/draft-pauly-happy-happyeyeballs-v3 for details.\r\n\r\nSetting the policy to Enabled means Google Chrome will use the Happy Eyeballs V3 algorithm for connection attempts.\r\n\r\nSetting the policy to Disabled turns off the Happy Eyeballs V3 algorithm.\r\n\r\nNot setting the policy, Google Chrome will turn on or off the Happy Eyeballs V3 algorithm based on chrome://flags/#happy-eyeballs-v3.\r\n\r\nThis policy supports dynamic refresh.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"aea247a25c8868ca":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004","displayName":"Download unsigned ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_1","displayName":"Prompt","description":null,"helpText":null}]},"aed982deb7019a60":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"ae4e48bf8157dff9":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins","displayName":"Run ActiveX controls and plugins","description":"This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.\n\nIf you enable this policy setting, controls and plug-ins can run without user intervention.\n\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow the controls or plug-in to run.\n\nIf you disable this policy setting, controls and plug-ins are prevented from running.\n\nIf you do not configure this policy setting, controls and plug-ins are prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonerunactivexcontrolsandplugins"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"ae651db23eb86ca1":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic","displayName":"Network Security Restrict NTLM Incoming NTLM Traffic","description":"Network security: Restrict NTLM: Incoming NTLM traffic This policy setting allows you to deny or allow incoming NTLM traffic. If you select \"Allow all\" or do not configure this policy setting, the server will allow all NTLM authentication requests. If you select \"Deny all domain accounts,\" the server will deny NTLM authentication requests for domain logon and display an NTLM blocked error, but allow local account logon. If you select \"Deny all accounts,\" the server will deny NTLM authentication requests from incoming traffic and display an NTLM blocked error. This policy is supported on at least Windows 7 or Windows Server 2008 R2. Note: Block events are recorded on this computer in the \"Operational\" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_incomingntlmtraffic"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_0","displayName":"Allow all","description":"Allow all","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_1","displayName":"Deny all domain accounts","description":"Deny all domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_2","displayName":"Deny all accounts","description":"Deny all accounts","helpText":null}]},"aed0f6f4fb2f88ae":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin","displayName":"Browser sign-in settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_0","displayName":"Disable browser sign-in","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_1","displayName":"Enable browser sign-in","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_2","displayName":"Force users to sign-in to use the browser","description":null,"helpText":null}]},"aef74b310aea1552":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled","displayName":"Enable Proactive Authentication","description":"Lets you configure whether to turn on Proactive Authentication.\r\n\r\nIf you enable this policy, Microsoft Edge tries to proactively authenticate the signed-in user with Microsoft services. At regular intervals, Microsoft Edge checks with an online service for an updated manifest that contains the configuration that governs how to do this.\r\n\r\nIf you disable this policy, Microsoft Edge doesn't try to proactively authenticate the signed-in user with Microsoft services. Microsoft Edge no longer checks with an online service for an updated manifest that contains the configuration for doing this.\r\n\r\nIf you don't configure this policy, Proactive Authentication is turned on.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ae8f3df37d449562":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended","displayName":"Set download directory","description":"Configures the directory to use when downloading files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified one or chosen to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\r\n\r\nIf you set an invalid path, Microsoft Edge will default to the user's default download directory.\r\n\r\nIf the folder specified by the path doesn't exist, the download will trigger a prompt that asks the user where they want to save their download.\r\n\r\nExample value: \r\n Linux-based OSes (including Mac): /home/${user_name}/Downloads\r\n Windows: C:\\Users\\${user_name}\\Downloads","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"aee7626312642c20":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir","displayName":"Set the user data directory","description":"Set the directory to use for storing user data.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified directory regardless of whether the user has set the '--user-data-dir' command-line flag.\r\n\r\nIf you don't enable this policy, the default profile path is used, but the user can override it by using the '--user-data-dir' flag. Users can find the directory for the profile at edge://version/ under profile path.\r\n\r\nTo avoid data loss or other errors, don't configure this policy to a volume's root directory or to a directory that's used for other purposes, because Microsoft Edge manages its contents.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nExample value: ${users}/${user_name}/Edge","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},"ae2523eac1a1d56e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger","description":"Allows you to control when to trigger password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\r\n\r\nYou can use the 'PasswordProtectionLoginURLs' (Configure the list of enterprise login URLs where password protection service should capture fingerprint of password) and 'PasswordProtectionChangePasswordURL' (Configure the change password URL) policies to configure which passwords to protect.\r\n\r\nExemptions: Passwords for the sites listed in 'PasswordProtectionLoginURLs' and 'PasswordProtectionChangePasswordURL', as well as for the sites listed in 'SmartScreenAllowListDomains' (Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings), will not trigger a password-protection warning.\r\n\r\nSet to 'PasswordProtectionWarningOff' (0) to not show password protection warningss.\r\n\r\nSet to 'PasswordProtectionWarningOnPasswordReuse' (1) to show password protection warnings when the user reuses their protected password on a non-allowlisted site.\r\n\r\nIf you disable or don't configure this policy, then the warning trigger is not shown.\r\n\r\n* 0 = Password protection warning is off.\r\n\r\n* 1 = Password protection warning is triggered by password reuse.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_1","displayName":"Enabled","description":null,"helpText":null}]},"aeb95d2e07481854":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_autoopenfiletypesdesc","displayName":"List of file types that should be automatically opened on download (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ae944d859ef52e60":{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_0","displayName":"Standard mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_1","displayName":"Balanced mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_2","displayName":"Strict mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_3","displayName":"Basic mode","description":null,"helpText":null}]},"ae94b478f057fd1b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_msaccessexe81","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_msaccessexe81_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_msaccessexe81_1","displayName":"True","description":null,"helpText":null}]},"ae6bbb017d8de89b":{"id":"device_vendor_msft_policy_config_userrights_impersonateclient","displayName":"Impersonate Client","description":"Assigning this user right to a user allows programs running on behalf of that user to impersonate a client. Requiring this user right for this kind of impersonation prevents an unauthorized user from convincing a client to connect (for example, by remote procedure call (RPC) or named pipes) to a service that they have created and then impersonating that client, which can elevate the unauthorized user's permissions to administrative or system levels. Caution: Assigning this user right can be a security risk. Only assign this user right to trusted users. Note: By default, services that are started by the Service Control Manager have the built-in Service group added to their access tokens. Component Object Model (COM) servers that are started by the COM infrastructure and that are configured to run under a specific account also have the Service group added to their access tokens. As a result, these services get this user right when they are started. In addition, a user can also impersonate an access token if any of the following conditions exist. 1) The access token that is being impersonated is for this user. 2) The user, in this logon session, created the access token by logging on to the network with explicit credentials. 3) The requested level is less than Impersonate, such as Anonymous or Identify. Because of these factors, users do not usually need this user right. Warning: If you enable this setting, programs that previously had the Impersonate privilege may lose it, and they may not run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#impersonateclient"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"aee480b018f84aac":{"id":"linux_mdatp_managed_exclusionsettings_exclusions","displayName":"Global Exclusions","description":"Global exclusions apply to both Antivirus and Endpoint detection and response to exclude at a much lower level closer to sensors. Usage: Tackling performance issues. Risk: Significantly risks protection","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/linux-preferences#exclusion-setting-preferences"],"categoryId":"d2191717-e304-46f7-bcc0-55e6477026c9","categoryName":"Exclusion Settings","options":null},"ae74a8140571ac05":{"id":"settings_item_personalhotspot_enabled","displayName":"Enabled","description":"If `true`, enable Personal Hotspot. If `false`, disable Personal Hotspot.","helpText":null,"infoUrls":[],"categoryId":"1a056b49-3fb9-4097-b286-c5f493208578","categoryName":"Personal Hotspot","options":[{"id":"settings_item_personalhotspot_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_personalhotspot_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"aecca9500abb11ec":{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp_restrictrunfromhelp_edit","displayName":"Enter executables separated by commas: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"ae97095ae239a57b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory","displayName":"Set download directory (User)","description":"Setting the policy sets up the directory Chrome uses for downloading files. It uses the provided directory, whether or not users specify one or turned on the flag to be prompted for download location every time.\r\n\r\nLeaving the policy unset means Chrome uses the default download directory, and users can change it.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"aefbb0f932aa069a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_serialallowallportsforurlsdesc","displayName":"Automatically grant permission to sites to connect all serial ports. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"ae3dfdb6283f0d59":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies","displayName":"Allow WebDriver to Override Incompatible Policies (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"ae826665d741a01d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification (User)","description":"Upon https://w3c.github.io/ServiceWorker/#control-and-use-worker-client,\r\nworkers should inherit controllers for the blob URL. However, existing code\r\nallows only DedicatedWorkers to inherit the controller, and SharedWorkers do\r\nnot inherit the controller.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome inherit the controller\r\nif a blob URL is used as a SharedWorker URL.\r\n\r\nSetting the policy to Disabled leaves the behavior not aligned with the\r\nspecification as-is.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"aeb6f358220269c7":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_accesscodecastdeviceduration","displayName":"Specifies how long (in seconds) a cast device selected with an access code or QR code stays in the Google Cast menu's list of cast devices.: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":null},"ae7689f0f0b84ac2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_localnetworkaccessblockedforurlsdesc","displayName":"Block sites from making requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":null},"ae1b1431ced5f427":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"aeb7a68e6263e61e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize","displayName":"Set disk cache size, in bytes (User)","description":"Configures the size of the cache, in bytes, used to store files on the disk.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided cache size regardless of whether the user has specified the '--disk-cache-size' flag. The value specified in this policy isn't a hard boundary but rather a suggestion to the caching system; any value below a few megabytes is too small and will be rounded up to a reasonable minimum.\r\n\r\nIf you set the value of this policy to 0, the default cache size is used, and users can't change it.\r\n\r\nIf you don't configure this policy, the default size is used, but users can override it with the '--disk-cache-size' flag.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"ae8a835d6e29b772":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls","displayName":"Sites to open when the browser starts (User)","description":"Specify a list of websites to open automatically when the browser starts. If you don't configure this policy, no site is opened on startup.\r\n\r\nThis policy only works if you also set the 'RestoreOnStartup' (Action to take on startup) policy to 'Open a list of URLs' (4).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\nhttps://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_1","displayName":"Enabled","description":null,"helpText":null}]},"aeb871c1cbdf4c45":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton","displayName":"Show Home button on toolbar (User)","description":"Shows the Home button on Microsoft Edge's toolbar.\r\n\r\nEnable this policy to always show the Home button. Disable it to never show the button.\r\n\r\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_1","displayName":"Enabled","description":null,"helpText":null}]},"aef478b621a9859d":{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (User)","description":"This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigations to HTTPS.\r\n\r\nIf this setting is not set or is set to allowed, users will be able to enable HTTPS-Only Mode.\r\nIf this setting is set to disallowed, users will not be able to enable HTTPS-Only Mode.\r\nIf this setting is set to force_enabled, HTTPS-Only Mode will be enabled in Strict mode and users will not be able to disable it.\r\nIf this setting is set to force_balanced_enabled, HTTPS-Only Mode will be enabled in Balanced mode and users will not be able to disable it.\r\n\r\nIf you set this policy to a value that is not supported by the version of Microsoft Edge that receives the policy, Microsoft Edge will default to the allowed setting.\r\n\r\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\r\n\r\nPolicy options mapping:\r\n\r\n* allowed (allowed) = Do not restrict users' HTTPS-Only Mode setting\r\n\r\n* disallowed (disallowed) = Do not allow users to enable any HTTPS-Only Mode\r\n\r\n* force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode\r\n\r\n* force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: disallowed","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_1","displayName":"Enabled","description":null,"helpText":null}]},"ae95025bf3a99c16":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting","displayName":"Control use of the Serial API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting_2","displayName":"Do not allow any site to request access to serial ports via the Serial API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting_3","displayName":"Allow sites to ask for user permission to access a serial port","description":null,"helpText":null}]},"ae3a8a3d153222f3":{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent","displayName":"Allow the use of connected experiences in Office that analyze content (User)","description":"This policy setting allows you to control whether connected experiences that analyze content are available to your users when they're using Office.\r\n\r\nPowerPoint Designer and Editor in Word are examples of connected experiences that analyze content.\r\n\r\nIf you enable this policy setting, connected experiences that analyze content will be available to your users.\r\n\r\nIf you disable this policy setting, connected experiences that analyze content won't be available to your users.\r\n\r\nIf you don't configure this policy setting, connected experiences that analyze content will be available to your users.\r\n\r\nNote: If you disable the \"Allow the use of connected experiences in Office\" policy setting, connected experiences that analyze content won't be available to your users.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2085794\r\n\r\nNote: For information about how this policy setting affects Microsoft 365 Copilot, see https://go.microsoft.com/fwlink/p/?linkid=2248397.","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesanlayzingcontent_1","displayName":"Enabled","description":null,"helpText":null}]},"aecb5c3d5c569bb1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingadhocreview","displayName":"Max number of documents being reviewed using ad hoc review (User)","description":"Sets the total number of documents that can be sent for review by a user using ad-hoc review before reusing registry entries from previous review cycles.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingadhocreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_maxnumberofdocumentsbeingreviewedusingadhocreview_1","displayName":"Enabled","description":null,"helpText":null}]},"aed3bb8650011c7a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy2_l_placesbarname211","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"ae42ac7d36793a75":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeinventoryagentupload","displayName":"Turn on data uploading for Office Telemetry Agent (User)","description":"This policy setting turns on the data uploading feature in Office Telemetry Agent.\r\n\r\nIf you enable this policy setting, Office Telemetry Agent periodically uploads telemetry data to a shared folder.\r\n\r\nIf you disable or do not configure this policy setting, Office Telemetry Agent does not upload any data. However, telemetry data is still collected on the local computer and can be viewed by using Office Telemetry Log.","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeinventoryagentupload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeinventoryagentupload_1","displayName":"Enabled","description":null,"helpText":null}]},"aec77f333a1434c7":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm","displayName":"Specify CNG hash algorithm (User)","description":"This policy setting allows you to specify the hash algorithm used.\r\n\r\nIf you enable this policy setting, the hashing algorithm selected will be used by CNG.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG hash algorithm will be used.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycnghashalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"ae86495e0c140fd2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookmemoryalertthreshold","displayName":"Specify Outlook memory alert threshold for web extensions (User)","description":"This policy setting allows you to specify the memory usage limit Outlook uses before disabling a web extension during initialization. The memory alert threshold controls the maximum amount of virtual memory that can be used by a running web extension.\r\n\r\nIf you enable this policy setting, you can specify the memory alert threshold for web extensions. If the web extension requires more than the specified memory alert threshold when a memory or CPU check occurs, Outlook disables the web extension.\r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the default memory usage limit of 1500 MB. This memory alert threshold overrides the WEF memory alert threshold. The maximum memory alert threshold is 1500 MB, and the minimum memory alert threshold is 1 MB.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookmemoryalertthreshold_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookmemoryalertthreshold_1","displayName":"Enabled","description":null,"helpText":null}]},"ae78e2045f9b568f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_defaultmuteaudioinrecordingpresenterview","displayName":"Turn off microphone recording by default when recording a slide show (User)","description":"This policy setting allows you to set microphone recording off by default when recording a slide show.\r\n\r\nBy default, microphone recording is on the first time a user records a slide show. If the user turns off microphone recording, then microphone recording will be off the next time the slide show recording window is launched, even if PowerPoint is closed and reopened.\r\n\r\nIf you enable this policy setting, microphone recording is turned off by default. A user can turn on microphone recording when recording a slide show. But, the next time the slide show recording window is launched, microphone recording will be off by default.\r\n\r\nIf you disable or don’t configure this policy setting, the default state of microphone recording is determined by the user.\r\n\r\nNote: Enabling this policy setting also turns off camera recording by default when recording a slide show. There is a separate policy setting if you just want to turn off camera recording by default when recording a slide show.\r\n ","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_defaultmuteaudioinrecordingpresenterview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_defaultmuteaudioinrecordingpresenterview_1","displayName":"Enabled","description":null,"helpText":null}]},"aebd365a36d1f905":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_descriptioncolon46","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"ae887dc488696ba3":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_l_allowsubfolders39","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_l_allowsubfolders39_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_l_allowsubfolders39_1","displayName":"True","description":null,"helpText":null}]},"aee914336129d991":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_fractionswithfractioncharacter","displayName":"Fractions with fraction character (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"af9b2941-29f9-4ee5-ae09-215f4e242943","categoryName":"AutoCorrect Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_fractionswithfractioncharacter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_fractionswithfractioncharacter_1","displayName":"Enabled","description":null,"helpText":null}]},"ae25c3815526afb6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_englishword6095documents_l_englishword6095documents11","displayName":"English Word 6.0/95 documents (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_englishword6095documents_l_englishword6095documents11_0","displayName":"Contain Asian text","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_englishword6095documents_l_englishword6095documents11_1","displayName":"Open normally","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_englishword6095documents_l_englishword6095documents11_2","displayName":"Automatically detect Asian text","description":null,"helpText":null}]},"ae3f5e8c1a7ad945":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_clipartpictures_l_clipartpictures12","displayName":"Clipart pictures (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":null},"aefa607c446a3029":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10","displayName":"Trusted Location #10 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_1","displayName":"Enabled","description":null,"helpText":null}]},"ae656e602812c341":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_datecolon93","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/af.json b/public/intune-definitions/af.json new file mode 100644 index 000000000000..5346942afcb0 --- /dev/null +++ b/public/intune-definitions/af.json @@ -0,0 +1 @@ +{"af9832b72e000028":{"id":"com.apple.app.lock_com.apple.app.lock","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":null},"af3873b360e6ba21":{"id":"com.apple.applicationaccess_ratingappsfr","displayName":"Rating Apps - France","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsfr_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_1","displayName":"1+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_2","displayName":"2+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_3","displayName":"3+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_4","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_5","displayName":"5+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_6","displayName":"6+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_7","displayName":"7+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_8","displayName":"8+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_9","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_10","displayName":"10+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_11","displayName":"11+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_12","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_13","displayName":"13+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_14","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_15","displayName":"15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_16","displayName":"16+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_17","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_18","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_19","displayName":"19+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_20","displayName":"20+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_21","displayName":"21+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsfr_22","displayName":"All","description":null,"helpText":null}]},"afa2b92f99e2a550":{"id":"com.apple.appstore_restrict-store-disable-app-adoption","displayName":"Restrict-store-disable-app-adoption","description":"If true, disables app adoption by users. Available in macOS 10.10 and later.","helpText":null,"infoUrls":[],"categoryId":"f14014f5-a401-41e3-8a97-1a9e3c5e3614","categoryName":"App Store","options":[{"id":"com.apple.appstore_restrict-store-disable-app-adoption_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.appstore_restrict-store-disable-app-adoption_true","displayName":"True","description":null,"helpText":null}]},"afb15859d603a0a6":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogo_light_logo_hash","displayName":"Hash","description":"The SHA-256 hash of the image.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"af55d259eb654593":{"id":"com.microsoft.edge.mamedgeappconfigsettings.automaticfullscreenblockedforurls","displayName":"Block automatic full screen on specified sites","description":"For security reasons, the\nrequestFullscreen() web API\nrequires a prior user gesture (\"transient activation\") to be called or it\nfails. Users' personal settings can allow certain origins to call this API\nwithout a prior user gesture.\n\nThis policy supersedes users' personal settings and blocks matching origins\nfrom calling the API without a prior user gesture.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\nWildcards (*) are allowed.\n\nOrigins matching both blocked and allowed policy patterns are blocked.\nOrigins not specified by policy or user settings require a prior user\ngesture to call this API.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"afb99be11f01b71d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwindowmanagementsetting","displayName":"Default Window Management permission setting","description":"Setting the policy to \"BlockWindowManagement\" (value 2) automatically denies the window management permission to sites by default. This setting limits the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\n\nSetting the policy to \"AskWindowManagement\" (value 3) by default prompts the user when the window management permission is requested. If users allow the permission, it extends the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\n\nNot configuring the policy means the \"AskWindowManagement\" policy applies, but users can change this setting.\n\nPolicy options mapping:\n\n* BlockWindowManagement (2) = Denies the Window Management permission on all sites by default\n\n* AskWindowManagement (3) = Ask every time a site wants obtain the Window Management permission\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwindowmanagementsetting_blockwindowmanagement","displayName":"Denies the Window Management permission on all sites by default","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwindowmanagementsetting_askwindowmanagement","displayName":"Ask every time a site wants obtain the Window Management permission","description":null,"helpText":null}]},"af08156ee19cdf3f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadstoolbarbutton","displayName":"Show Downloads button on the toolbar","description":"Set this policy to always show the Downloads button on the toolbar.\n\nIf you enable this policy, the Downloads button is pinned to the toolbar.\n\nIf you disable or don't configure the policy, the Downloads button isn't shown on the toolbar by default. Users can toggle the Downloads button in edge://settings/appearance.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadstoolbarbutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadstoolbarbutton_true","displayName":"Enabled","description":null,"helpText":null}]},"afe222a03bec6524":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsenabled_recommended","displayName":"Configure sleeping tabs (users can override)","description":"This policy setting lets you configure whether to turn on sleeping tabs. Sleeping tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, sleeping tabs is turned on.\n\nIndividual sites may be blocked from being put to sleep by configuring the policy \"SleepingTabsBlockedForUrls\".\n\nIf this policy is enabled, sleeping tabs are turned on.\n\nIf this policy is disabled, sleeping tabs are turned off. However, during moderate memory pressure, the system may freeze (sleep) tabs before discarding them.\n\nIf this policy is not configured, users can choose whether to enable sleeping tabs.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"afbf6ab2b551a3be":{"id":"device_vendor_msft_policy_config_admx_credentialproviders_defaultcredentialprovider","displayName":"Assign a default credential provider","description":"This policy setting allows the administrator to assign a specified credential provider as the default credential provider.\r\n\r\nIf you enable this policy setting, the specified credential provider is selected on other user tile.\r\n\r\nIf you disable or do not configure this policy setting, the system picks the default credential provider on other user tile.\r\n\r\nNote: A list of registered credential providers and their GUIDs can be found in the registry at HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Authentication\\Credential Providers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credentialproviders#admx-credentialproviders-defaultcredentialprovider"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_credentialproviders_defaultcredentialprovider_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credentialproviders_defaultcredentialprovider_1","displayName":"Enabled","description":null,"helpText":null}]},"afd8d7746f97ce34":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_logonscriptdelay","displayName":"Configure Logon Script Delay","description":"\r\n Enter “0” to disable Logon Script Delay.\r\n\r\n This policy setting allows you to configure how long the Group Policy client waits after logon before running scripts.\r\n\r\n By default, the Group Policy client waits five minutes before running logon scripts. This helps create a responsive desktop environment by preventing disk contention.\r\n\r\n If you enable this policy setting, Group Policy will wait for the specified amount of time before running logon scripts.\r\n\r\n If you disable this policy setting, Group Policy will run scripts immediately after logon.\r\n\r\n If you do not configure this policy setting, Group Policy will wait five minutes before running logon scripts.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-logonscriptdelay"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_logonscriptdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_logonscriptdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"afde65f1a7738c6b":{"id":"device_vendor_msft_policy_config_admx_kerberos_serveracceptscompound_compoundidenabled","displayName":"Support authorization with client device information:","description":null,"helpText":"","infoUrls":[],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_serveracceptscompound_compoundidenabled_0","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_serveracceptscompound_compoundidenabled_1","displayName":"Automatic","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_serveracceptscompound_compoundidenabled_2","displayName":"Always","description":null,"helpText":null}]},"af0db70b22331a02":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_ioavmaxsize_realtimeprotection_ioavmaxsize","displayName":"Define the maximum size of downloaded files and attachments to be scanned","description":null,"helpText":"","infoUrls":[],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":null},"af849ddcd8e25553":{"id":"device_vendor_msft_policy_config_admx_printing2_autopublishing","displayName":"Automatically publish new printers in Active Directory","description":"Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory.\r\n\r\n If you enable this setting or do not configure it, the Add Printer Wizard automatically publishes all shared printers.\r\n\r\n If you disable this setting, the Add Printer Wizard does not automatically publish printers. However, you can publish shared printers manually.\r\n\r\n The default behavior is to automatically publish shared printers in Active Directory.\r\n\r\n Note: This setting is ignored if the \"Allow printers to be published\" setting is disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-autopublishing"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_autopublishing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_autopublishing_1","displayName":"Enabled","description":null,"helpText":null}]},"afeb872d2388bfd3":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016","displayName":"Microsoft Office 365 Project 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Project 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Project 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365project2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016_1","displayName":"Enabled","description":null,"helpText":null}]},"af4a0117c613fe4c":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_music","displayName":"Music","description":"This policy setting configures the synchronization of user settings for the Music app.\r\nBy default, the user settings of Music sync between computers. Use the policy setting to prevent the user settings of Music from synchronizing between computers.\r\nIf you enable this policy setting, Music user settings continue to sync.\r\nIf you disable this policy setting, Music user settings are excluded from the synchronizing settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-music"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_music_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_music_1","displayName":"Enabled","description":null,"helpText":null}]},"af8bb8b47d430ac2":{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration","displayName":"Disable or enable software Secure Attention Sequence","description":"This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS).\r\n\r\nIf you enable this policy setting, you have one of four options:\r\n\r\nIf you set this policy setting to \"None,\" user mode software cannot simulate the SAS.\r\nIf you set this policy setting to \"Services,\" services can simulate the SAS.\r\nIf you set this policy setting to \"Ease of Access applications,\" Ease of Access applications can simulate the SAS.\r\nIf you set this policy setting to \"Services and Ease of Access applications,\" both services and Ease of Access applications can simulate the SAS.\r\n\r\nIf you disable or do not configure this setting, only Ease of Access applications running on the secure desktop can simulate the SAS.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-softwaresasgeneration"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_winlogon_softwaresasgeneration_1","displayName":"Enabled","description":null,"helpText":null}]},"af68a2f88097384d":{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls_trust_apps","displayName":"Select additional rules for trusting apps","description":"By default, any devices targeted with this App Control for Business policy will have the setting to Trust Windows components and Store apps enabled, in either audit or enforce mode based on your selection./nFurther, you can optionally add some additional rules to your policy, such as selecting Trust apps with good reputation to allow reputable apps as defined by the Microsoft Intelligent Security Graph to run./nSelect Trust apps from managed installers to allow apps deployed via authorized sources of application deployment (managed installers). The Intune management extension will be considered a managed installer if it has been set as such within your organization. Any apps not marked as coming from a managed installer will not be allowed to run./nAll other apps and files not specified by the rules in this App Control for Business policy will be audited only in local client logs (if Audit only is selected), or blocked (if Enforce is selected) from running on devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create"],"categoryId":"56b82fc9-c632-4c76-bb4f-dcf8757f003e","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls_trust_apps_0","displayName":"Trust apps with good reputation","description":"Trust app with good reputation","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls_trust_apps_1","displayName":"Trust apps from managed installers","description":"Trust apps from managed installers","helpText":null}]},"af13f4d9a8028f47":{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditsensitiveprivilegeuse","displayName":"Privilege Use Audit Sensitive Privilege Use","description":"This policy setting allows you to audit events generated when sensitive privileges (user rights) are used such as the following: A privileged service is called. One of the following privileges are called: Act as part of the operating system. Back up files and directories. Create a token object. Debug programs. Enable computer and user accounts to be trusted for delegation. Generate security audits. Impersonate a client after authentication. Load and unload device drivers. Manage auditing and security log. Modify firmware environment values. Replace a process-level token. Restore files and directories. Take ownership of files or other objects. If you configure this policy setting, an audit event is generated when sensitive privilege requests are made. Success audits record successful requests and Failure audits record unsuccessful requests. If you do not configure this policy setting, no audit event is generated when sensitive privilege requests are made. ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#privilegeuse_auditsensitiveprivilegeuse"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditsensitiveprivilegeuse_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditsensitiveprivilegeuse_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditsensitiveprivilegeuse_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_privilegeuse_auditsensitiveprivilegeuse_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"af0908c9352407b4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions","description":"Setting the policy means users can't bypass download security decisions.\r\n\r\nThere are many types of download warnings within Chrome, which roughly break down into these categories (learn more about Safe Browsing verdicts https://support.google.com/chrome/?p=ib_download_blocked):\r\n\r\n* Malicious, as flagged by the Safe Browsing server\r\n* Uncommon or unwanted, as flagged by the Safe Browsing server\r\n* A dangerous file type (e.g. all SWF downloads and many EXE downloads)\r\n\r\nSetting the policy blocks different subsets of these, depending on it's value:\r\n\r\n0: No special restrictions. Default.\r\n\r\n1: Blocks malicious files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n2: Blocks malicious files flagged by the Safe Browsing server AND Blocks uncommon or unwanted files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n3: Blocks all downloads. Not recommended, except for special use cases.\r\n\r\n4: Blocks malicious files flagged by the Safe Browsing server, does not block dangerous file types. Recommended.\r\n\r\nNote: These restrictions apply to downloads triggered from webpage content, as well as the Download link... menu option. They don't apply to the download of the currently displayed page or to saving as PDF from the printing options. Read more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"afdf7f2bdb6384ea":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist","displayName":"Allow access to a list of URLs","description":"Setting the policy provides access to the listed URLs, as exceptions to URLBlocklist. See that policy's description for the format of entries of this list. For example, setting URLBlocklist to * will block all requests, and you can use this policy to allow access to a limited list of URLs. Use it to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths, using the format specified at ( https://www.chromium.org/administrators/url-blocklist-filter-format ). The most specific filter determines if a URL is blocked or allowed. The URLAllowlist policy takes precedence over URLBlocklist. This policy is limited to 1,000 entries.\r\n\r\nThis policy also allows enabling the automatic invocation by the browser of external application registered as protocol handlers for the listed protocols like \"tel:\" or \"ssh:\".\r\n\r\nLeaving the policy unset allows no exceptions to URLBlocklist.\r\n\r\nFrom Google Chrome version 92, this policy is also supported in the headless mode.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"af3de29cf0184988":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_urlwhitelistdesc","displayName":"Allow access to a list of URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"af8c98af4a145019":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal","displayName":"Enable firewall traversal from remote access host","description":"Setting the policy to Enabled or leaving it unset allows the usage of STUN servers, letting remote clients discover and connect to this machine, even if separated by a firewall.\r\n\r\nSetting the policy to Disabled when outgoing UDP connections are filtered by the firewall means the machine only allows connections from client machines within the local network.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal_1","displayName":"Enabled","description":null,"helpText":null}]},"af779e260fcd6e16":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings","displayName":"Enable automated password change (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings_0","displayName":"Allow feature use and improving AI models","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings_1","displayName":"Allow feature use without improving AI models","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings_2","displayName":"Do not allow feature","description":null,"helpText":null}]},"af218526565acdfe":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled","displayName":"Choose whether the Privacy Sandbox Site-suggested ads setting can be disabled","description":"A policy to control whether the Privacy Sandbox Site-suggested ads setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Site-suggested ads setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Site-suggested ads setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"af466a6627bf45ca":{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect","displayName":"Max Smb2 Dialect","description":"This policy controls the maximum version of SMB protocol. Note: This group policy does not prevent use of SMB 1 if that component is still installed and enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#maxsmb2dialect"],"categoryId":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_514","displayName":"SMB 2.0.2","description":"SMB 2.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_528","displayName":"SMB 2.1.0","description":"SMB 2.1.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_768","displayName":"SMB 3.0.0","description":"SMB 3.0.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_770","displayName":"SMB 3.0.2","description":"SMB 3.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_785","displayName":"SMB 3.1.1","description":"SMB 3.1.1","helpText":null}]},"af039ec822060dd4":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended","displayName":"Enables Microsoft Edge mini menu","description":"Enables Microsoft Edge mini menu on websites and PDFs. The mini menu is triggered on text selection and has basic actions like copy and smart actions like definitions.\r\n\r\nIf you enable or don't config this policy, selecting text on websites and PDFs will show the Microsoft Edge mini menu.\r\n\r\nIf you disable this policy, the Microsoft Edge mini menu will not be shown when text on websites and PDFs is selected.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"afb2926227d11630":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist_internetexplorerintegrationsitelist","displayName":"Configure the Enterprise Mode Site List (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"af68b60d024a07a4":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_managedconfigurationperorigin","displayName":"Sets managed configuration values for websites to specific origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"af9804388e1af42b":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol","displayName":"Configure users ability to override feature flags","description":"Configures users ability to override state of feature flags.\r\nIf you set this policy to 'CommandLineOverridesEnabled', users can override state of feature flags using command line arguments but not edge://flags page.\r\n\r\nIf you set this policy to 'OverridesEnabled', users can override state of feature flags using command line arguments or edge://flags page.\r\n\r\nIf you set this policy to 'OverridesDisabled', users can't override state of feature flags using command line arguments or edge://flags page.\r\n\r\nIf you don't configure this policy, the behavior is the same as the 'OverridesEnabled'.\r\n\r\nPolicy options mapping:\r\n\r\n* CommandLineOverridesEnabled (2) = Allow users to override feature flags using command line arguments only\r\n\r\n* OverridesEnabled (1) = Allow users to override feature flags\r\n\r\n* OverridesDisabled (0) = Prevent users from overriding feature flags\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"eb6409fc-fb52-413d-ae4b-eff017b52b30","categoryName":"Experimentation","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"af55d19706853f63":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls","displayName":"Automatically grant sites permission to connect all serial ports","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available serial ports.\r\n\r\nThe URLs must be valid, or the policy is ignored. Only the origin (scheme, host, and port) of the URL is considered.\r\n\r\nThis policy overrides 'DefaultSerialGuardSetting' (Control use of the Serial API), 'SerialAskForUrls' (Allow the Serial API on specific sites), 'SerialBlockedForUrls' (Block the Serial API on specific sites) and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"afba9a770bc839d7":{"id":"device_vendor_msft_policy_config_networkisolation_neutralresources","displayName":"Neutral Resources","description":"List of domain names that can used for work or personal resource.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#neutralresources"],"categoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","categoryName":"Network Isolation","options":null},"af30aa85f73a5404":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_visioexe","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_visioexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_visioexe_1","displayName":"True","description":null,"helpText":null}]},"afce13ffe27eb569":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winprojexe6","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winprojexe6_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winprojexe6_1","displayName":"True","description":null,"helpText":null}]},"af772f0aac63451e":{"id":"device_vendor_msft_policy_config_sudo_enablesudo","displayName":"Enable Sudo","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Sudo#enablesudo"],"categoryId":"2f524350-1bdb-4eee-a96d-b656bc2b0d70","categoryName":"Sudo","options":[{"id":"device_vendor_msft_policy_config_sudo_enablesudo_0","displayName":"Sudo is disabled.","description":"Sudo is disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_sudo_enablesudo_1","displayName":"Sudo is allowed in 'force new window' mode.","description":"Sudo is allowed in 'force new window' mode.","helpText":null},{"id":"device_vendor_msft_policy_config_sudo_enablesudo_2","displayName":"Sudo is allowed in 'disable input' mode.","description":"Sudo is allowed in 'disable input' mode.","helpText":null},{"id":"device_vendor_msft_policy_config_sudo_enablesudo_3","displayName":"Sudo is allowed in 'inline' mode.","description":"Sudo is allowed in 'inline' mode.","helpText":null}]},"afde221e57160974":{"id":"device_vendor_msft_policy_config_system_allowlocation","displayName":"Allow Location","description":"Specifies whether to allow app access to the Location service. Most restricted value is 0. While the policy is set to 0 (Force Location Off) or 2 (Force Location On), any Location service call from an app would trigger the value set by this policy. When switching the policy back from 0 (Force Location Off) or 2 (Force Location On) to 1 (User Control), the app reverts to its original Location service setting. For example, an app's original Location setting is Off. The administrator then sets the AllowLocation policy to 2 (Force Location On. ) The Location service starts working for that app, overriding the original setting. Later, if the administrator switches the AllowLocation policy back to 1 (User Control), the app will revert to using its original setting of Off.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowlocation"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowlocation_0","displayName":"Force Location Off. All Location Privacy settings are toggled off and grayed out. Users cannot change the settings, and no apps are allowed access to the Location service, including Cortana and Search.","description":"Force Location Off. All Location Privacy settings are toggled off and grayed out. Users cannot change the settings, and no apps are allowed access to the Location service, including Cortana and Search.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowlocation_1","displayName":"Location service is allowed. The user has control and can change Location Privacy settings on or off.","description":"Location service is allowed. The user has control and can change Location Privacy settings on or off.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowlocation_2","displayName":"Force Location On. All Location Privacy settings are toggled on and grayed out. Users cannot change the settings and all consent permissions will be automatically suppressed.","description":"Force Location On. All Location Privacy settings are toggled on and grayed out. Users cannot change the settings and all consent permissions will be automatically suppressed.","helpText":null}]},"af8b958c9622fcd6":{"id":"device_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall","displayName":"Restrict Language Packs And Features Install","description":"This policy setting restricts the install of language packs and language features, such as spell checkers, on a device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#restrictlanguagepacksandfeaturesinstall"],"categoryId":"4a5a066e-27af-46c1-9714-9e4542ffc1f9","categoryName":"Time Language Settings","options":[{"id":"device_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall_0","displayName":"Disabled","description":"Not restricted.","helpText":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall_1","displayName":"Enabled","description":"Restricted.","helpText":null}]},"afb664264ff8c23b":{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable","displayName":"Require UEFI Memory Attributes Table","description":"Require UEFI Memory Attributes Table","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-VirtualizationBasedTechnology#requireuefimemoryattributestable"],"categoryId":"3588f84a-69de-4900-910c-09a5b69e5d99","categoryName":"Virtualization Based Technology","options":[{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable_0","displayName":"Do not require UEFI Memory Attributes Table","description":"Do not require UEFI Memory Attributes Table","helpText":null},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable_1","displayName":"Require UEFI Memory Attributes Table","description":"Require UEFI Memory Attributes Table","helpText":null}]},"afb01718d4e8b177":{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy_winapp_updatemode","displayName":"Update restriction:","description":"","helpText":"","infoUrls":[],"categoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","categoryName":"Windows App","options":[{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy_winapp_updatemode_0","displayName":"Enable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy_winapp_updatemode_1","displayName":"Disable updates from all locations","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy_winapp_updatemode_2","displayName":"Disable updates from the Microsoft Store","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_updatepolicy_winapp_updatemode_3","displayName":"Disable updates from non-store CDN location","description":null,"helpText":null}]},"afccff94ade87f21":{"id":"settings_item_voiceroaming","displayName":"Voice Roaming","description":"A dictionary that contains voice roaming settings. This setting requires the Network Information access right, and doesn't support user enrollment. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"categoryId":"1fbc29d7-0530-4208-b506-9df648a402e9","categoryName":"Voice Roaming","options":null},"afa6171bc3d58a5e":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_datecolon48","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"af9ad64c2d5d10bf":{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtotaskbar","displayName":"Do not allow pinning programs to the Taskbar (User)","description":"This policy setting allows you to control pinning programs to the Taskbar.\r\n\r\nIf you enable this policy setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinned to the Taskbar, these programs continue to show in the Taskbar. However, users cannot unpin these programs already pinned to the Taskbar, and they cannot pin new programs to the Taskbar.\r\n\r\nIf you disable or do not configure this policy setting, users can change the programs currently pinned to the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nopinningtotaskbar"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtotaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtotaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"afe73fe96212a685":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hideprivacytab","displayName":"Hide Privacy Tab (User)","description":"This policy setting allows you to hide the Privacy tab in Windows Media Player.\r\n\r\nIf you enable this policy setting, the \"Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet\" check box on the Media Library tab is available, even though the Privacy tab is hidden, unless the \"Prevent music file media information retrieval\" policy setting is enabled.\r\n\r\nThe default privacy settings are used for the options on the Privacy tab unless the user changed the settings previously.\r\n\r\nIf you disable or do not configure this policy setting, the Privacy tab is not hidden, and users can configure any privacy settings not configured by other polices.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-hideprivacytab"],"categoryId":"7f461268-0fb6-4247-b6db-52515d42a20e","categoryName":"User Interface","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hideprivacytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hideprivacytab_1","displayName":"Enabled","description":null,"helpText":null}]},"aff20d6a7ceb466e":{"id":"user_vendor_msft_policy_config_attachmentmanager_hidezoneinfomechanism","displayName":"Hide mechanisms to remove zone information (User)","description":"This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments by clicking the Unblock button in the file's property sheet or by using a check box in the security warning dialog. Removing the zone information allows users to open potentially dangerous file attachments that Windows has blocked users from opening.\n\nIf you enable this policy setting, Windows hides the check box and Unblock button.\n\nIf you disable this policy setting, Windows shows the check box and Unblock button.\n\nIf you do not configure this policy setting, Windows hides the check box and Unblock button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-attachmentmanager#attachmentmanager-hidezoneinfomechanism"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_attachmentmanager_hidezoneinfomechanism_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_attachmentmanager_hidezoneinfomechanism_1","displayName":"Enabled","description":null,"helpText":null}]},"af3eb1e53da57e2d":{"id":"user_vendor_msft_policy_config_browser_allowinprivate","displayName":"Allow InPrivate (User)","description":"This setting lets you decide whether employees can browse using InPrivate website browsing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowinprivate"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowinprivate_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowinprivate_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"af5f343e3e62e6d7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"af4410ff56481432":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled","displayName":"Allow download deep scanning for Safe Browsing-enabled users (User)","description":"When this policy is enabled or left unset, Google Chrome can send suspicious downloads from Safe Browsing-enabled users to Google to scan for malware, or prompt users to provide a password for encrypted archives.\r\nWhen this policy is disabled, this scanning will not be performed.\r\nThis policy does not impact download content analysis configured by Chrome Enterprise Connectors.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"af58bea1aa08a0bc":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch","displayName":"Force file extension to match file type (User)","description":"This policy setting controls how Excel loads file types that do not match their extension. Excel can load files with extensions that do not match the files' type. For example, if a comma-separated values (CSV) file named example.csv is renamed example.xls (or any other file extension supported by Excel 2003 and earlier only), Excel can properly load it as a CSV file.\r\n\r\nIf you enable this policy setting, you can choose from three options for working with files that have non-matching extensions:\r\n\r\n- Allow different - Excel opens the files properly without warning users that the files have non-matching extensions. If users subsequently edit and save the files, Excel preserves both the true, underlying file format and the incorrect file extension.\r\n\r\n- Allow different, but warn - Excel opens the files properly, but warns users about the file type mismatch. This option is the default configuration in Excel.\r\n\r\n- Always match file type - Excel does not open any files that have non-matching extensions.\r\n\r\nIf you disable or do not configure this policy setting, if users attempt to open files with the wrong extension, Excel opens the file and displays a warning that the file type is not what Excel expected.","helpText":"","infoUrls":[],"categoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_1","displayName":"Enabled","description":null,"helpText":null}]},"af5ec78df43f17a9":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_datecolon18","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"af25bbf8951e007f":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c","displayName":"Only allow approved domains to use the TDC ActiveX control (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0","displayName":"Disable","description":null,"helpText":null}]},"af8c4928af2290f5":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"af6cd91280695891":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowuserdatapersistence"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"afd1be537f647aac":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled","displayName":"Use hardware acceleration when available (User)","description":"Specify to use hardware acceleration, if it's available. If you enable this policy or don't configure it, hardware acceleration is enabled unless a GPU feature is explicitly blocked.\r\n\r\nIf you disable this policy, hardware acceleration is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"aff7ae81c5a18068":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6d529e48-5477-4ceb-8ff7-c6e959a0e24f","categoryName":"Related Website Sets Settings","options":null},"af2e7df5d670e34a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_donotdisplayphotograph","displayName":"Do not display photograph (User)","description":"This policy setting lets you specify if the photograph is shown on the contact card, e-mail header, reading pane, fast search results, global address list (GAL) dialog, Backstage, and quick contacts. \r\n\r\nIf you enable this policy setting, photographs are not displayed in the locations listed above.\r\n\r\nIf you disable or do not configure this policy setting, photographs appear in the locations listed above.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_donotdisplayphotograph_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_donotdisplayphotograph_1","displayName":"Enabled","description":null,"helpText":null}]},"af7e52b1d77c3278":{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_insiderslow","displayName":"Current Channel (Preview) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_insiderslow_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_insiderslow_1","displayName":"True","description":null,"helpText":null}]},"af5bbb500c1eb7fe":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_loadanotebookonfirstboot","displayName":"Load a notebook on first boot (User)","description":"Points to a folder containing a notebook that should be loaded on first boot.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_loadanotebookonfirstboot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_loadanotebookonfirstboot_1","displayName":"Enabled","description":null,"helpText":null}]},"afe6c8e95bb2ab91":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_infopathintegration_l_disableinfopathpropertiespromotioninoutlook","displayName":"Do not promote InfoPath forms properties into Outlook properties (User)","description":"By default, InfoPath property promotion is enabled. This setting allows you to disable the ability to promote InfoPath forms properties into Outlook properties. This feature allows InfoPath forms to promote properties from the underlying data into named properties in Outlook. These properties are displayed in views on folders, and users can group, filter, and sort by them.","helpText":"","infoUrls":[],"categoryId":"e1a2f289-40d8-4e7c-b0a6-cd36f0ee9111","categoryName":"InfoPath Integration","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_infopathintegration_l_disableinfopathpropertiespromotioninoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_infopathintegration_l_disableinfopathpropertiespromotioninoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"af7bbc5ac382c8ef":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingpop3emailaccounts","displayName":"Prevent users from adding POP3 e-mail accounts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingpop3emailaccounts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingpop3emailaccounts_1","displayName":"True","description":null,"helpText":null}]},"afceff80d2c8e4c7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablepreviewplace","displayName":"Disable Preview Place. (User)","description":"\r\n This policy setting determines whether the Preview Place feature is allowed. Enabling this setting will block the Preview Place feature from being available.\r\n Users will no longer be able to preview and provide feedback on upcoming changes in Outlook.\r\n\tNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablepreviewplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablepreviewplace_1","displayName":"Enabled","description":null,"helpText":null}]},"af4da0d6d73502ea":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadfullitemsfilecachedexchangemode","displayName":"Disallow Download Full Items (User)","description":"This policy setting allows you to turn off the \"Download Full Items\" option.\r\n\r\nIf you enable this policy setting, you will turn off the \"Download Full Items\" option in the Download Preferences menu in the Send/Receive tab.\r\n\r\nIf you disable or do not configure this policy setting, you will allow the \"Download Full Items\" option in the Download Preferences menu in the Send/Receive tab.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadfullitemsfilecachedexchangemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadfullitemsfilecachedexchangemode_1","displayName":"Enabled","description":null,"helpText":null}]},"afb07877d433d009":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittodownloadchangesfromserver_l_entersecondstowaitbeforedownloaddefault30sec","displayName":"Enter seconds to wait before download(Default 30 sec.) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":null},"af9fd10f290faf70":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_usechinesefontsizes","displayName":"Use Chinese font sizes (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_usechinesefontsizes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_usechinesefontsizes_1","displayName":"Enabled","description":null,"helpText":null}]},"af0e5875d59e0aad":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usesmartparagraphselection","displayName":"Use smart paragraph selection (User)","description":"This policy setting controls the \"Use smart paragraph selection\" option found under File tab | Options | Advanced | Editing options.\r\n\r\nIf you enable or do not configure this policy setting, Word will automatically select the paragraph mark at the end of a selected range of text.\r\n\r\nIf you disable this policy setting, Word will not automatically select the paragraph mark at the end of a selected range of text. However, a user can still select the paragraph mark manually.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usesmartparagraphselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usesmartparagraphselection_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/b0.json b/public/intune-definitions/b0.json new file mode 100644 index 000000000000..a54ab17dbb52 --- /dev/null +++ b/public/intune-definitions/b0.json @@ -0,0 +1 @@ +{"b0193d5fe91edd07":{"id":"ade_useraffinitybasic","displayName":"User affinity","description":"User affinity associates devices with users. Users must authenticate to enroll with user affinity.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":{"id":"ade_useraffinitybasic_0","displayName":"Enroll without user affinity","description":null,"helpText":null}},"b06090ff25b9a050":{"id":"app_allowed_allowedbinaries_item_pathprefix","displayName":"Path Prefix","description":"The file system path prefix to match binaries.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"b0fbcb0a20fb3680":{"id":"com.apple.applicationaccess_allowrcsmessaging","displayName":"Allow RCS Messaging","description":"If false, prevents the use of RCS messaging.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowrcsmessaging_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowrcsmessaging_true","displayName":"True","description":null,"helpText":null}]},"b075bea73bf1783d":{"id":"com.apple.cellular_apns_item_username","displayName":"Username","description":"The user name for the APN.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"b0dad965ccc85e3f":{"id":"com.apple.familycontrols.contentfilter_sitewhitelist","displayName":"Site Allowlist","description":"An array of sites that defines an allow list. If specified, this defines additional allowed sites besides those in the automated allow list and deny list, including disallowed adult sites. This key is required if Allow List Enabled is true.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":null},"b049d4c6459f906d":{"id":"com.apple.managedclient.preferences_automaticsamplesubmissionconsent","displayName":"Automatic sample submission Consent","description":"Sends sample files to Microsoft to help protect device users and your organization from potential threats","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#enable--disable-automatic-sample-submissions"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"com.apple.managedclient.preferences_automaticsamplesubmissionconsent_0","displayName":"none","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automaticsamplesubmissionconsent_1","displayName":"safe","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automaticsamplesubmissionconsent_2","displayName":"all","description":null,"helpText":null}]},"b05e07d658fdbb41":{"id":"com.apple.managedclient.preferences_defaultcookiessetting","displayName":"Configure cookies","description":"Control whether websites can create cookies on the user's device. This policy is all or nothing - you can let all websites create cookies, or no websites create cookies. You can't use this policy to enable cookies from specific websites.\n\nSet the policy to 'SessionOnly' (4) to clear cookies when the session closes. If Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See \"BackgroundModeEnabled\" policy for information about configuring what happens when Microsoft Edge runs in background mode.\n\nIf you don't configure this policy, the default 'AllowCookies' (1) is used, and users can change this setting in Microsoft Edge Settings. (If you don't want users to be able to change this setting, set the policy.)\n\n* 1 = Let all sites create cookies\n\n* 2 = Don't let any site create cookies\n\n* 4 = Keep cookies for the duration of the session","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultcookiessetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultcookiessetting_0","displayName":"Let all sites create cookies","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultcookiessetting_1","displayName":"Don't let any site create cookies","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultcookiessetting_2","displayName":"Keep cookies for the duration of the session","description":null,"helpText":null}]},"b005b6ea9c3b8174":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"b00635a360a6aba4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication","description":"This policy enables defining a list of certificate public keys that should be distrusted by Microsoft Edge for TLS server\nauthentication.\n\nThe policy value is a list of base64-encoded X.509 certificates. Any\ncertificate with a matching SPKI (SubjectPublicKeyInfo) is distrusted.","helpText":null,"infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"b0a3b8110bb674be":{"id":"com.microsoft.edge.mamedgeappconfigsettings.definepreferredlanguages","displayName":"Define an ordered list of preferred languages that websites should display in if the site supports the language","description":"Configures the language variants that Microsoft Edge sends to websites as part of the Accept-Language request HTTP header and prevents users from adding, removing, or changing the order of preferred languages in Microsoft Edge settings. Users who want to change the languages Microsoft Edge displays in or offers to translate pages to will be limited to the languages configured in this policy.\n\nIf you enable this policy, websites will appear in the first language in the list that they support unless other site-specific logic is used to determine the display language. The language variants defined in this policy override the languages configured as part of the \"SpellcheckLanguage\" policy.\n\nIf you don't configure or disable this policy, Microsoft Edge sends websites the user-specified preferred languages as part of the Accept-Language request HTTP header.\n\nFor detailed information on valid language variants, see https://go.microsoft.com/fwlink/?linkid=2148854.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"b0b04441c7842c0d":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_options","displayName":"Options","description":"Defines whether to display notification or not.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":[{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_options_0","displayName":"None","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_options_1","displayName":"Show notification","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_options_2","displayName":"Send event","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_options_3","displayName":"Send notification and event","description":"","helpText":null},{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry_options_4","displayName":"Disable","description":"","helpText":null}]},"b083e8ea21f26614":{"id":"device_vendor_msft_pkcscertificate_certificatevalidityperiod","displayName":"Certificate validity period","description":"The amount of time remaining before the certificate expires. Enter a value that is equal to or lower than the validity period shown in the certificate template. Default is set at one year.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure"],"categoryId":"dbbe5cb3-fe2e-4d28-8918-24d075a91676","categoryName":"PKCS certificate","options":null},"b01a0d4c5b58f19f":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_cse_nochanges4","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_cse_nochanges4_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_folderredirection_cse_nochanges4_1","displayName":"True","description":null,"helpText":null}]},"b06e87987f6794dc":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_performrouterdiscovery","displayName":"MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)","description":"MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-performrouterdiscovery"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_performrouterdiscovery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_performrouterdiscovery_1","displayName":"Enabled","description":null,"helpText":null}]},"b031f02ca895de77":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_cachesize_lbl_autocachesizespin","displayName":"Size of auto-cached files:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"b0431ccea398ab8e":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_nc","displayName":"Network control service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkControl). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that do not conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Network Control service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 0.\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypenetworkcontrol-nc"],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_nc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenetworkcontrol_nc_1","displayName":"Enabled","description":null,"helpText":null}]},"b0f80763578dd653":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_pv_qospriorityvalue","displayName":"Priority value","description":null,"helpText":"","infoUrls":[],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":null},"b070dbf641137ae3":{"id":"device_vendor_msft_policy_config_admx_reliability_pch_reportshutdownevents","displayName":"Report unplanned shutdown events","description":"This policy setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled.\r\n\r\nIf you enable this policy setting, error reporting includes unplanned shutdown events.\r\n\r\nIf you disable this policy setting, unplanned shutdown events are not included in error reporting.\r\n\r\nIf you do not configure this policy setting, users can adjust this setting using the control panel, which is set to \"Upload unplanned shutdown events\" by default.\r\n\r\nAlso see the \"Configure Error Reporting\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-reliability#admx-reliability-pch-reportshutdownevents"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_reliability_pch_reportshutdownevents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_reliability_pch_reportshutdownevents_1","displayName":"Enabled","description":null,"helpText":null}]},"b012f55ecabf1928":{"id":"device_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_2","displayName":"Turn off Touch Panning","description":"Turn off Panning \r\nTurns off touch panning, which allows users pan inside windows by touch. On a compatible PC with a touch digitizer, by default users are able to scroll or pan inside a scrolling area by dragging up or down directly on the scrolling content.\r\n\r\nIf you enable this setting, the user will not be able to pan windows by touch. \r\n\r\nIf you disable this setting, the user can pan windows by touch.\r\n\r\nIf you do not configure this setting, Touch Panning is on by default.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-touchinput#admx-touchinput-panningeverywhereoff-2"],"categoryId":"abf781d7-1179-4f24-8d01-5611db14eddc","categoryName":"Touch Input","options":[{"id":"device_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_2_1","displayName":"Enabled","description":null,"helpText":null}]},"b0379a15ab6ce1ed":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup","displayName":"Outlook 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Outlook 2013.\r\nMicrosoft Outlook 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Outlook 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Outlook 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013outlookbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"b0b0191d1cd049e9":{"id":"device_vendor_msft_policy_config_admx_wlansvc_setcost","displayName":"Set Cost","description":"This policy setting configures the cost of Wireless LAN (WLAN) connections on the local machine.\r\n\r\nIf this policy setting is enabled, a drop-down list box presenting possible cost values will be active. Selecting one of the following values from the list will set the cost of all WLAN connections on the local machine:\r\n\r\n- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity constraints. \r\n\r\n- Fixed: Use of this connection is not restricted by usage charges and capacity constraints up to a certain data limit. \r\n\r\n- Variable: This connection is costed on a per byte basis.\r\n\r\nIf this policy setting is disabled or is not configured, the cost of Wireless LAN connections is Unrestricted by default.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wlansvc#admx-wlansvc-setcost"],"categoryId":"6cd02266-a42f-4675-b83e-37360dbf3c68","categoryName":"WLAN Media Cost","options":[{"id":"device_vendor_msft_policy_config_admx_wlansvc_setcost_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wlansvc_setcost_1","displayName":"Enabled","description":null,"helpText":null}]},"b0fb48ad7c81269b":{"id":"device_vendor_msft_policy_config_browser_allowfullscreenmode","displayName":"Allow Full Screen Mode","description":"With this policy, you can specify whether to allow full-screen mode, which shows only the web content and hides the Microsoft Edge UI. If enabled or not configured, full-screen mode is available for use in Microsoft Edge. Your users and extensions must have the proper permissions. If disabled, full-screen mode is unavailable for use in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowfullscreenmode"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowfullscreenmode_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowfullscreenmode_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"b0fb852674a52281":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"b0255fb5cd403132":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior","displayName":"Control SafeSites adult content filtering.","description":"Setting the policy controls the SafeSites URL filter, which uses the Google Safe Search API to classify URLs as pornographic or not.\r\n\r\nWhen this policy is set to:\r\n\r\n* Do not filter sites for adult content, or not set, sites aren't filtered\r\n\r\n* Filter top level sites for adult content, pornographic sites are filtered","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"b046a11ea9ccf821":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection","displayName":"Default printer selection rules","description":"Setting the policy sets the rules for selecting the default printer in Google Chrome, overriding the default rules. Printer selection occurs the first time users try to print, when Google Chrome seeks a printer matching the specified attributes. In case of a less than perfect match, Google Chrome can be set to select any matching printer, depending on the order printers are discovered.\r\n\r\nLeaving the policy unset or set to attributes for which there's no match means the built-in PDF printer is the default. If there's no PDF printer, Google Chrome defaults to none.\r\n\r\nPrinters connected to Google Cloud Print are considered \"cloud\", the rest of the printers are classified as \"local\".\r\n\r\nNote: Omitting a field means all values match. For example, not specifying connectivity causes Print Preview to start discovery of all kinds of printers, \"local\" and \"cloud\". Regular expression patterns must follow the JavaScript RegExp syntax, and matches are case sensistive.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=DefaultPrinterSelection for more information about schema and formatting.\r\n\r\n\r\nExample value: { \"kind\": \"cloud\", \"idPattern\": \".*public\", \"namePattern\": \".*Color\" }","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_1","displayName":"Enabled","description":null,"helpText":null}]},"b0b27d2c9abefce4":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled","displayName":"Control new behavior for the cancel dialog produced by the beforeunload event","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b0de405c436472fb":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath","displayName":"Set Temp Folders to Local Path","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nRedirects the TEMP, TMP, and INetCache paths to the local drive\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SetTempToLocalPath\r\nType: DWORD\r\nValues: 0 = No Action, 1 = Redirect TEMP and TMP to Local Disk, 2 = Redirect INetCache to Local Disk, 3 = Redirect TEMP, TMP, INetCache to Local Disk","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_1","displayName":"Enabled","description":null,"helpText":null}]},"b06d6e8acca8793d":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout","displayName":"CCD Unregister Timeout","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nCCD Unregister Timeout represents the number of seconds that a user's sign out will be delayed if the number of available providers is less than specified in Healthy Providers Required For Unregister.\r\n\r\nIf CCD Unregsiter Timeout is set to 0, then the user sign out will be held until the number of providers specified in Healthy Providers Required For Unregister are available. NOTE: If CCDUnregisterTimeout is set to 0, and the number of providers specified in Healthy Providers Required For Unregister is not met, then the user's sign out may appear to the user as if the session is locked. The sign out may be held infinitely.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CCDUnregisterTimeout\r\nType: DWORD\r\nValues: Min = 0, Max = 10000000","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"b0791d1aa80678df":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneinitializeandscriptactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"b009bae3c3f21279":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, the permission is set to High Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonejavapermissions"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"b0889b6c7b3b03b0":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"b034b1d73d512ad6":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode","displayName":"Turn on Protected Mode","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneturnonprotectedmode"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"b0a3edcd28a1048a":{"id":"device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor","displayName":"Kerberos client support for claims, compound authentication and Kerberos armoring","description":"This policy setting controls whether a device will request claims and compound authentication for Dynamic Access Control and Kerberos armoring using Kerberos authentication with domains that support these features. \r\nIf you enable this policy setting, the client computers will request claims, provide information required to create compounded authentication and armor Kerberos messages in domains which support claims and compound authentication for Dynamic Access Control and Kerberos armoring.\r\n\r\nIf you disable or do not configure this policy setting, the client devices will not request claims, provide information required to create compounded authentication and armor Kerberos messages. Services hosted on the device will not be able to retrieve claims for clients using Kerberos protocol transition. \r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-kerberosclientsupportsclaimscompoundarmor"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor_1","displayName":"Enabled","description":null,"helpText":null}]},"b0de22457a2ddd38":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers","displayName":"Network Security Minimum Session Security For NTLMSSP Based Servers","description":"Network security: Minimum session security for NTLM SSP based (including secure RPC) servers This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. Require 128-bit encryption. The connection will fail if strong encryption (128-bit) is not negotiated. Default: Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. Windows 7 and Windows Server 2008 R2: Require 128-bit encryption","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_minimumsessionsecurityforntlmsspbasedservers"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_0","displayName":"None","description":"None","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_524288","displayName":"Require NTLMv2 session security","description":"Require NTLMv2 session security","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_536870912","displayName":"Require 128-bit encryption","description":"Require 128-bit encryption","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_537395200","displayName":"Require NTLM and 128-bit encryption","description":"Require NTLM and 128-bit encryption","helpText":null}]},"b06f1c073c19f0f8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata","displayName":"Allow importing of autofill form data","description":"Allows users to import autofill form data from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import autofill data is automatically selected.\r\n\r\nIf you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.\r\n\r\nIf you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS) and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_1","displayName":"Enabled","description":null,"helpText":null}]},"b0a0b96de87e2004":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Microsoft Defender SmartScreen warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on swf, exe, and jnlp extensions for *.contoso.com domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n { \"file_extension\": \"jnlp\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://contoso.com\",\r\n \"contoso2.com\"\r\n ],\r\n \"file_extension\": \"jnlp\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"swf\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"b0f65fc017c28613":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets.","description":"This policy provides a way to override the list of sets Microsoft Edge uses for Related Website Sets\r\n\r\nEach set in the browser's list of Related Website Sets must meet the requirements of a Related Website Set. A Related Website Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all its ccTLD variants. See https://github.com/WICG/first-party-sets for more information on how Microsoft Edge uses Related Website Sets.\r\n\r\n\r\nAll sites in a Related Website Set must be a registrable domain served over HTTPS. Each site in a Related Website Set must also be unique, which means a site can't be listed more than once in a Related Website Set.\r\n\r\nWhen this policy is given an empty dictionary, Microsoft Edge uses the public list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the replacements list, if a site is also present on a Related Website Set in the browser's list, then that site will be removed from the browser's Related Website Set. After this, the policy's Related Website Set will be added to the Microsoft Edge's list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the additions list, if a site is also present on a Related Website Set in Microsoft Edge's list, then the browser's Related Website Set will be updated so that the new Related Website Set can be added to the browser's list. After the browser's list has been updated, the policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nThe browser's list of Related Website Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site can't be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) aren't supported as a policy value, or as a value within any Related Website Set in these lists.\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"additions\": [{\"associatedSites\": [\"https://associate2.test\"], \"ccTLDs\": {\"https://associate2.test\": [\"https://associate2.com\"]}, \"primary\": \"https://primary2.test\", \"serviceSites\": [\"https://associate2-content.test\"]}], \"replacements\": [{\"associatedSites\": [\"https://associate1.test\"], \"ccTLDs\": {\"https://associate1.test\": [\"https://associate1.co.uk\"]}, \"primary\": \"https://primary1.test\", \"serviceSites\": [\"https://associate1-content.test\"]}]}","helpText":"","infoUrls":[],"categoryId":"6d529e48-5477-4ceb-8ff7-c6e959a0e24f","categoryName":"Related Website Sets Settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},"b08c10fa7a1eeebc":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_pptviewexe46","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_pptviewexe46_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_pptviewexe46_1","displayName":"True","description":null,"helpText":null}]},"b04434eaf7622284":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname_liveshare_domainname_textbox","displayName":"Enter Domain Name: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":null},"b0d141a15b40c7a6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder_l_defaultdatabasefolder6","displayName":"Default database folder (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bd1dad69-5cbe-415e-8565-e87b15cd4431","categoryName":"General","options":null},"b0cea08dc1b67ac6":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindownloads","displayName":"Downloads (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindownloads_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindownloads_1","displayName":"True","description":null,"helpText":null}]},"b02aee6ea74e8753":{"id":"user_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_1","displayName":"Turn off Windows Mobility Center (User)","description":"This policy setting turns off Windows Mobility Center.\r\n\r\nIf you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mobility Center UI is removed from all shell entry points and the .exe file does not launch it.\r\n\r\nIf you disable this policy setting, the user is able to invoke Windows Mobility Center and the .exe file launches it.\r\n\r\nIf you do not configure this policy setting, Windows Mobility Center is on by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter#admx-mobilepcmobilitycenter-mobilitycenterenable-1"],"categoryId":"1ed9f90e-d8b6-413f-bfc2-face955141bc","categoryName":"Windows Mobility Center","options":[{"id":"user_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_1_1","displayName":"Enabled","description":null,"helpText":null}]},"b00680006b2c436d":{"id":"user_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge","displayName":"Sync Favorites Between IE And Microsoft Edge (User)","description":"Specifies whether favorites are kept in sync between Internet Explorer and Microsoft Edge. Changes to favorites in one browser are reflected in the other, including: additions, deletions, modifications, and ordering.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#syncfavoritesbetweenieandmicrosoftedge"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge_0","displayName":"Disabled","description":"Turned off/not syncing.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge_1","displayName":"Enabled","description":"Turned on/syncing.","helpText":null}]},"b014c7c527336e2c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled","displayName":"Enable WPAD optimization (User)","description":"Setting the policy to Enabled or leaving it unset turns on WPAD (Web Proxy Auto-Discovery) optimization in Google Chrome.\r\n\r\nSetting the policy to Disabled turns off WPAD optimization, causing Google Chrome to wait longer for DNS-based WPAD servers.\r\n\r\nWhether or not this policy is set, users can't change the WPAD optimization setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b0df56b203840915":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions","displayName":"Blocks external extensions from being installed (User)","description":"Controls external extensions installation.\r\n\r\nEnabling this setting blocks external extensions from being installed.\r\n\r\nDisabling this setting or leaving it unset allows external extensions to be installed.\r\n\r\nExternal extensions and their installation are documented at https://developer.chrome.com/apps/external_extensions.\r\n","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"b0c2146d46c1dabf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors","displayName":"Allow SHA-1 signed certificates issued by local trust anchors (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"b0856dab4e1251ea":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"b0267d82a77d441b":{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations","displayName":"Set Allowed Storage Locations (User)","description":"A value that can represent one or more storage locations in File Explorer. If not specified, the default is access to all storage locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#setallowedstoragelocations"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_0","displayName":"Access to all storage locations.","description":"Access to all storage locations.","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_1","displayName":"Removable Drives","description":"Removable Drives","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_2","displayName":"Sync roots","description":"Sync roots","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_3","displayName":"Removable Drives, Sync roots","description":"Removable Drives, Sync roots","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_4","displayName":"Local Drives","description":"Local Drives","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_5","displayName":"Removable Drives, Local Drives","description":"Removable Drives, Local Drives","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_6","displayName":"Sync Roots, Local Drives","description":"Sync Roots, Local Drives","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_7","displayName":"Removable Drives, Sync Roots, Local Drives","description":"Removable Drives, Sync Roots, Local Drives","helpText":null}]},"b0838a4d16598df7":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate","displayName":"Locked-Down Internet Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddowninternetzonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"b09e5db7162fa193":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1","displayName":"Disable server version check (User)","description":"Prevents Microsoft Lync from checking the server version before signing in.","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1_1","displayName":"Enabled","description":null,"helpText":null}]},"b0de4349f9640837":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls","displayName":"Block WebUSB on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can't ask the user to grant them access to a USB device.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nURL patterns in this policy can't conflict with those configured in the 'WebUsbAskForUrls' (Allow WebUSB on specific sites) policy. You can't both allow and block a URL.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b0e1f0eb0ebda7c5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_smartscreenallowlistdomainsdesc","displayName":"Configure the list of domains for which SmartScreen won't trigger warnings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":null},"b094914a8a11229f":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess","displayName":"Force WebSQL to be enabled (User)","description":"WebSQL is on by default as of Microsoft Edge version 101, but can be disabled via a Microsoft Edge flag.\r\nIf you enable this policy, WebSQL cannot be disabled.\r\nIf you disable or don't configure this policy, WebSQL can be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"b0ac9f77aa0c0d2e":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings","displayName":"Web App management settings (User)","description":"This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.\r\n\r\n- The manifest_id field is the Manifest ID for the Web App.\r\nSee https://developer.chrome.com/blog/pwa-manifest-id/\r\nfor instructions on how to determine the Manifest ID for an installed web app.\r\n- The run_on_os_login field specifies if a web app can be run during OS login.\r\nIf this field is set to blocked, the web app will not run during OS login and the user will not be able to enable this later.\r\nIf this field is set to run_windowed, the web app will run during OS login and the user won't be able to disable this later.\r\nIf this field is set to allowed, the user will be able to configure the web app to run at OS login.\r\nThe default policy configuration only allows the allowed and blocked values.\r\n- (Starting with Microsoft Edge version 120) The prevent_close_after_run_on_os_login field specifies if a web app can be prevented from closing in any way.\r\nFor example, by the user, by task manager, or by web APIs. This behavior can only be enabled if run_on_os_login is set to run_windowed.\r\nIf the app is already running, this setting will only take effect after the app is restarted.\r\nIf this field isn't defined, users can close the app.\r\n(This is currently not supported in Microsoft Edge.)\r\n- (Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, that is, shortcuts, file handlers, protocol handlers and so on will be removed or not.\r\nIf an app is already running, this property will come into effect after the app restarts.\r\nThis should be used with caution, since it can override any OS integration that is set automatically during the startup of the web applications system. This currently only works on Windows, Mac and Linux platforms.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://bar.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foobar.example/index.html\",\r\n \"run_on_os_login\": \"run_windowed\",\r\n \"prevent_close_after_run_on_os_login\": true\r\n },\r\n {\r\n \"manifest_id\": \"*\",\r\n \"run_on_os_login\": \"blocked\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"force_unregister_os_integration\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"b0d0727cb63ecfed":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy","displayName":"Use a default referrer policy of no-referrer-when-downgrade. (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis enterprise policy is for short-term adaptation and will be removed in M83.\r\n\r\nMicrosoft Edge’s default referrer policy is being strengthened from its current value of no-referrer-when-downgrade to the more secure strict-origin-when-cross-origin through a gradual rollout targeting M80 stable.\r\n\r\nBefore the rollout, this enterprise policy will have no effect. After the rollout, when this enterprise policy is enabled, Microsoft Edge’s default referrer policy will be set to its pre-M80 value of no-referrer-when-downgrade.\r\n\r\nThis enterprise policy is disabled by default","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"b0a702e452956c00":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"b0f37dce72fd4c5e":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended","displayName":"Visual search enabled (User)","description":"Visual search lets you quickly explore more related content about entities in an image.\r\n\r\nIf you enable or don't configure this policy, visual search will be enabled via image hover, context menu, and search in sidebar.\r\n\r\nIf you disable this policy, visual search will be disabled and you won't be able to get more info about images via hover, context menu, and search in sidebar.\r\n\r\nNote: Visual Search in Web Capture is still managed by 'WebCaptureEnabled' (Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge) policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b03ae019b84849e0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastservicenotesdefaulturl3","displayName":"Shared Notes Default Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"b09bfe1635c33f3c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy8_l_placesbarname223","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"b00c9a66df95ce6b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyword","displayName":"Disallow in Word (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyword_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyword_1","displayName":"True","description":null,"helpText":null}]},"b0466f536185777c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_changeordeletelinktoproofingtoolsdownloadsite_l_changeordeletelinktoproofingtoolsdownloadsiteid","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0f6020d9-278b-4284-894a-bc4a70c8cf32","categoryName":"Display Language","options":null},"b04026b001e9b9c7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_homeworkflowlibrary","displayName":"Home Workflow Library (User)","description":"Allows administrators to make workflows from a specified list or library available within the workflow enabled Office applications. The value of this key should be the URL to the list or library where the workflows have been made available.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_homeworkflowlibrary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_homeworkflowlibrary_1","displayName":"Enabled","description":null,"helpText":null}]},"b044d3dc6b732902":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_l_workflowfriendly496","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"b01f4ed98719c289":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey18","displayName":"Escrow Key #18 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey18_1","displayName":"Enabled","description":null,"helpText":null}]},"b0742963b09fd084":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc12","displayName":"Unsafe Location #12 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"b04f0056296773b2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc17","displayName":"Unsafe Location #17 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc17_1","displayName":"Enabled","description":null,"helpText":null}]},"b0ffd0d2b72383fe":{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_collaborationsettings_l_documentchat","displayName":"Allow co-authors to chat within a document (User)","description":"This policy setting controls whether co-authors can use the chat functionality within an Office application to collaborate with each other when editing a document.\r\n\r\nIf you enable or don’t configure this policy setting, users can chat with each other when co-authoring a document.\r\n\r\nIf you disable this policy setting, users can’t chat with each other when co-authoring a document.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_collaborationsettings_l_documentchat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_collaborationsettings_l_documentchat_1","displayName":"Enabled","description":null,"helpText":null}]},"b09df868bad7695e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_l_showassociatedwebpage48","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_l_showassociatedwebpage48_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_l_showassociatedwebpage48_1","displayName":"True","description":null,"helpText":null}]},"b00db7dfd8373bf3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas","displayName":"Configure Outlook object model prompt when executing Save As (User) (Deprecated)","description":"This policy setting controls what happens when an untrusted program attempts to use the Save As command to programmatically save an item. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to use the Save As command to programmatically save an item:\r\n\r\n- Prompt user. The user will be prompted to approve every access attempt. \r\n- Automatically approve. Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended. \r\n- Automatically deny. Outlook will automatically deny programmatic access requests from any program.\r\n- Prompt user based on computer security. Outlook will only prompt users when antivirus software is out of date or not running. This is the default configuration.\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to use the Save As command, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center.","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_1","displayName":"Enabled","description":null,"helpText":null}]},"b07172b3c5a8f0d1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverrootdomain","displayName":"Exclude the root domain query based on your primary SMTP address (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverrootdomain_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoverrootdomain_1","displayName":"True","description":null,"helpText":null}]},"b02a5d794860cd88":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_synchronizeoutlookrssfeedswithcommonfeedlist","displayName":"Synchronize Outlook RSS Feeds with Common Feed List (User)","description":"This policy setting controls whether Outlook subscribes to the Common Feed List, which is made available to multiple RSS clients. The Common Feed List is a hierarchical set of RSS Feeds to which clients such as Outlook, the Feeds list in Internet Explorer 7, and the Feed Headlines Sidebar gadget in Windows Vista can subscribe. \r\n\r\nIf you enable this policy setting, Outlook automatically subscribes to RSS Feeds added in Internet Explorer, and Outlook RSS Feeds are synchronized with the Common Feed List so they are available in Internet Explorer. Be aware that third-party applications besides Internet Explorer can add RSS Feeds to the Common Feed List, and if you enable this setting Outlook automatically subscribes to those RSS Feeds as well. \r\n\r\nIf you disable or do not configure this policy setting, Outlook maintains its own list of RSS Feeds and does not automatically subscribe to RSS Feeds that are added to the Common Feed List.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_synchronizeoutlookrssfeedswithcommonfeedlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_synchronizeoutlookrssfeedswithcommonfeedlist_1","displayName":"Enabled","description":null,"helpText":null}]},"b0b341f04ea02ffa":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_l_powerpointbetaconvertersdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_l_powerpointbetaconvertersdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_l_powerpointbetaconvertersdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_l_powerpointbetaconvertersdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_l_powerpointbetaconvertersdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_l_powerpointbetaconvertersdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_powerpointbetaconverters_l_powerpointbetaconvertersdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"b0d48005b1e0bc60":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_descriptioncolon54","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"b052155d1f2fdb0d":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_usetypeandreplace","displayName":"Use type and replace (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"77b0357b-412e-4a81-9469-e20a5f1345fd","categoryName":"Complex scripts","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_usetypeandreplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_usetypeandreplace_1","displayName":"Enabled","description":null,"helpText":null}]},"b062063dcb668753":{"id":"user_vendor_msft_policy_config_pub16v3~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the internet (User)","description":"\r\n This policy setting allows you to block macros from running in Office files that come from the internet.\r\n\r\n If you enable this policy setting, macros are blocked from running, even if \"Enable all macros\" is selected in the Macro Settings section of the Trust Center. Users will receive a notification that macros are blocked from running.\r\n\r\n The exceptions when macros will be allowed to run are:\r\n - The Office file is saved to a Trusted Location.\r\n - The Office file was previously trusted by the user.\r\n - Macros are digitally signed and the matching Trusted Publisher certificate is installed on the device.\r\n\r\n If you disable this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the internet.\r\n\r\n If you don’t configure this policy setting, macros will be blocked from running. Users will receive a notification telling them of the security risks of macros from the internet along with a link to learn more.\r\n\r\n For more information, see https://go.microsoft.com/fwlink/p/?linkid=2185771.\r\n ","helpText":"","infoUrls":[],"categoryId":"30da5d88-cf03-41f4-ab55-51ead91b3844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_pub16v3~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v3~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"b0f381d1d85d1a55":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_ordinals1stwithsuperscript","displayName":"Ordinals (1st) with superscript (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"b6cafb2c-81be-40cf-90d8-788f713f7099","categoryName":"Replace as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_ordinals1stwithsuperscript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_ordinals1stwithsuperscript_1","displayName":"Enabled","description":null,"helpText":null}]},"b05c971cb8dbe614":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},"b0faf5f99612003d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates","displayName":"Word 2000 binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2000binarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"b0031523cb58cce7":{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_cellular_plmnid","displayName":"PLMNID (Windows Insiders only)","description":"5- or 6-digit string identifying a cellular network. It consists of the combination of Mobile Country Code (MCC) and Mobile Network Code (MNC). \r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/b1.json b/public/intune-definitions/b1.json new file mode 100644 index 000000000000..0624972cea88 --- /dev/null +++ b/public/intune-definitions/b1.json @@ -0,0 +1 @@ +{"b13b081093c0a0c3":{"id":"ade_authenticationmethod","displayName":"Intune authentication method","description":"If your organization uses multifactor authentication, select Setup Assistant with modern authentication, which prompts users to authenticate based on settings in Entra.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":{"id":"ade_authenticationmethod_2","displayName":"Setup Assistant with modern authentication","description":null,"helpText":null}},"b15603abbe2b90e3":{"id":"com.apple.app.lock_app_options","displayName":"Options","description":"A dictionary of options that the user cannot change.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":null},"b101f18160c57fef":{"id":"com.apple.applicationaccess_forceairplayoutgoingrequestspairingpassword","displayName":"Force AirPlay Outgoing Requests Pairing Password","description":"If true, forces all devices receiving AirPlay requests from this device to use a pairing password. Available in iOS 7.1 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceairplayoutgoingrequestspairingpassword_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceairplayoutgoingrequestspairingpassword_true","displayName":"True","description":null,"helpText":null}]},"b1df89f0c8bf09d1":{"id":"com.apple.font_font","displayName":"Font","description":"The contents of the font file.","helpText":null,"infoUrls":[],"categoryId":"5401711f-292a-487a-be18-f99593a0477c","categoryName":"Font","options":null},"b15ea4c609cca502":{"id":"com.apple.managedclient.preferences_configuredonottrack","displayName":"Configure Do Not Track","description":"Specify whether to send Do Not Track requests to websites that ask for tracking info. Do Not Track requests let the websites you visit know that you don't want your browsing activity to be tracked. By default, Microsoft Edge doesn't send Do Not Track requests, but users can turn on this feature to send them.\n\nIf you enable this policy, Do Not Track requests are always sent to websites asking for tracking info.\n\nIf you disable this policy, requests are never sent.\n\nIf you don't configure this policy, users can choose whether to send these requests.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#configuredonottrack"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_configuredonottrack_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_configuredonottrack_true","displayName":"Enabled","description":null,"helpText":null}]},"b1c8aebfa3cceae4":{"id":"com.apple.managedclient.preferences_weeklyconfiguration","displayName":"Weekly scheduled scan configuration","description":"Should scheduled scan be run with low priority. (Scan might take longer to complete).","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":null},"b188b0c9de99eabf":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype","displayName":"Event Type","description":"The type of action defined by this schedule.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_0","displayName":"Wake","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_1","displayName":"Power On","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_2","displayName":"Wake Power On","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_3","displayName":"Sleep","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_4","displayName":"Shutdown","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_5","displayName":"Restart","description":null,"helpText":null}]},"b114779bbef55372":{"id":"com.apple.screensaver_askforpassworddelay","displayName":"Ask For Password Delay","description":"The number of seconds to delay before the password will be required to unlock or stop the screen saver (the grace period). A value of 2147483647 (for example, 0x7FFFFFFF) disables this requirement. To use this option, you must set Ask For Password to true. Available in macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"8cefd936-362e-4a24-bc76-e078b6fd13fa","categoryName":"Screensaver","options":null},"b122fd3d2b63ea55":{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"b131a60026d7d6e7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting","displayName":"Configure cookies","description":"Control whether websites can create cookies on the user's device. This policy is all or nothing - you can let all websites create cookies, or no websites create cookies. You can't use this policy to enable cookies from specific websites.\n\nSet the policy to 'SessionOnly' to clear cookies when the session closes.\n\nIf you don't configure this policy, the default 'AllowCookies' is used, and users can change this setting in Microsoft Edge Settings. (If you don't want users to be able to change this setting, set the policy.)\n\nPolicy options mapping:\n\n* AllowCookies (1) = Let all sites create cookies\n\n* BlockCookies (2) = Don't let any site create cookies\n\n* SessionOnly (4) = Keep cookies for the duration of the session, except ones listed in \"SaveCookiesOnExit\"\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting_allowcookies","displayName":"Let all sites create cookies","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting_blockcookies","displayName":"Don't let any site create cookies","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting_sessiononly","displayName":"Keep cookies for the duration of the session, except ones listed in \"SaveCookiesOnExit\"","description":null,"helpText":null}]},"b172c0c49a0f1310":{"id":"com.microsoft.edge.mamedgeappconfigsettings.managedsearchengines","displayName":"Manage Search Engines","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine. With Microsoft Edge version 100, you can configure up to 100 engines.\n\nYou don't need to specify the encoding. With Microsoft Edge version 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge version 80.\n\nWith Microsoft Edge version 83, you can enable search engine discovery with the optional allow_search_engine_discovery parameter. This parameter must be the first item in the list. If allow_search_engine_discovery isn't specified, search engine discovery is disabled by default. With Microsoft Edge version 84, you can set this policy as a recommended policy to allow search provider discovery. You don't need to add the optional allow_search_engine_discovery parameter. With Microsoft Edge version 100, setting this policy as a recommended policy also allows users to manually add new search engines from their Microsoft Edge settings.\n\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\n\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\n\nIf the \"DefaultSearchProviderSearchURL\" policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"b1f83a7d00bd1273":{"id":"com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_recommended","displayName":"Performance Detector Enabled (users can override)","description":"The performance detector detects tab performance issues and recommends actions to fix the performance issues.\n\nIf you enable or don't configure this policy, performance detector is turned on.\n\nIf you disable this policy, performance detector is turned off.\n\nThe user can configure its behavior in edge://settings/system.\n\nLearn more about performance detector: https://aka.ms/EdgePerformanceDetector","helpText":null,"infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"b199415e3c60916c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton","displayName":"Pin browser essentials toolbar button","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\n\nWhen the button is pinned, it always appears on the toolbar.\n\nWhen the button isn't pinned, it only appears when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\n\nIf you enable or don't configure this policy, the Browser essentials button is pinned on the toolbar.\n\nIf you disable this policy, the Browser essentials button isn't pinned on the toolbar.\n\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":null,"infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_true","displayName":"Enabled","description":null,"helpText":null}]},"b1f7becb8ade0877":{"id":"com.microsoft.edge.mamedgeappconfigsettings.setntpdefaultfeedtab","displayName":"Set the default New Tab Page feed tab to Work or Discover","description":"This policy sets the default feed tab on the New Tab Page to Work or Discover.\n\nIf you set this policy to 'Work' (0) or don't configure this policy, Microsoft Edge sets the default feed tab to Work.\n\nIf you set this policy to 'Discover' (1), Microsoft Edge sets the default feed tab to Discover.\n\nThis policy only takes effect when \"ConfigureNTPFeedTabVisibility\" is set to 'EnableBothWorkDiscover' (0) or is not configured. If only one tab is visible, this policy has no effect.\n\nPolicy options mapping:\n\n* NTPDefaultFeedTabWork (0) = Work\n\n* NTPDefaultFeedTabDiscover (1) = Discover\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.setntpdefaultfeedtab_ntpdefaultfeedtabwork","displayName":"Work","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.setntpdefaultfeedtab_ntpdefaultfeedtabdiscover","displayName":"Discover","description":null,"helpText":null}]},"b1a9c56f0bcb1552":{"id":"com.microsoft.edge.mamedgeappconfigsettings.typosquattingallowlistdomains","displayName":"Configure the list of domains for which Microsoft Edge Website Typo Protection won't trigger warnings","description":"Configures the list of Microsoft Edge Website Typo Protection trusted domains. This means:\nMicrosoft Edge Website Typo Protection won't check for potentially malicious typosquatting websites.\n\nIf you enable this policy, Microsoft Edge Website Typo Protection trusts these domains.\nIf you disable or don't set this policy, default Microsoft Edge Website Typo Protection protection is applied to all resources.\n\nThis only takes effect when TyposquattingCheckerEnabled policy isn't set or is set to enabled.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10/11 Pro; or Enterprise instances that enrolled for device management; or macOS instances that are that are managed via MDM or joined to a domain via MCX.\nThis policy doesn't apply if your organization has enabled Microsoft Defender for Endpoint. You must configure your allowlists and blocklists in Microsoft 365 Defender portal using Indicators (Settings > Endpoints > Indicators).","helpText":null,"infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":null},"b1f976b34dcacc1e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.usesystemprintdialog","displayName":"Print using system print dialog","description":"Shows the system print dialog instead of print preview.\n\nIf you enable this policy, Microsoft Edge opens the system print dialog instead of the built-in print preview when a user prints a page.\n\nIf you don't configure or disable this policy, print commands trigger the Microsoft Edge print preview screen.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.usesystemprintdialog_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.usesystemprintdialog_true","displayName":"Enabled","description":null,"helpText":null}]},"b1c0a41d5b1b0fb4":{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor","displayName":"KDC support for claims, compound authentication and Kerberos armoring","description":"This policy setting allows you to configure a domain controller to support claims and compound authentication for Dynamic Access Control and Kerberos armoring using Kerberos authentication.\r\n\r\nIf you enable this policy setting, client computers that support claims and compound authentication for Dynamic Access Control and are Kerberos armor-aware will use this feature for Kerberos authentication messages. This policy should be applied to all domain controllers to ensure consistent application of this policy in the domain. \r\n\r\nIf you disable or do not configure this policy setting, the domain controller does not support claims, compound authentication or armoring.\r\n\r\nIf you configure the \"Not supported\" option, the domain controller does not support claims, compound authentication or armoring which is the default behavior for domain controllers running Windows Server 2008 R2 or earlier operating systems.\r\n\r\nNote: For the following options of this KDC policy to be effective, the Kerberos Group Policy \"Kerberos client support for claims, compound authentication and Kerberos armoring\" must be enabled on supported systems. If the Kerberos policy setting is not enabled, Kerberos authentication messages will not use these features. \r\n\r\nIf you configure \"Supported\", the domain controller supports claims, compound authentication and Kerberos armoring. The domain controller advertises to Kerberos client computers that the domain is capable of claims and compound authentication for Dynamic Access Control and Kerberos armoring. \r\n\r\nDomain functional level requirements\r\nFor the options \"Always provide claims\" and \"Fail unarmored authentication requests\", when the domain functional level is set to Windows Server 2008 R2 or earlier then domain controllers behave as if the \"Supported\" option is selected. \r\n\r\nWhen the domain functional level is set to Windows Server 2012 then the domain controller advertises to Kerberos client computers that the domain is capable of claims and compound authentication for Dynamic Access Control and Kerberos armoring, and:\r\n - If you set the \"Always provide claims\" option, always returns claims for accounts and supports the RFC behavior for advertising the flexible authentication secure tunneling (FAST).\r\n - If you set the \"Fail unarmored authentication requests\" option, rejects unarmored Kerberos messages.\r\n\r\nWarning: When \"Fail unarmored authentication requests\" is set, then client computers which do not support Kerberos armoring will fail to authenticate to the domain controller.\r\n\r\nTo ensure this feature is effective, deploy enough domain controllers that support claims and compound authentication for Dynamic Access Control and are Kerberos armor-aware to handle the authentication requests. Insufficient number of domain controllers that support this policy result in authentication failures whenever Dynamic Access Control or Kerberos armoring is required (that is, the \"Supported\" option is enabled).\r\n\r\nImpact on domain controller performance when this policy setting is enabled:\r\n - Secure Kerberos domain capability discovery is required resulting in additional message exchanges.\r\n - Claims and compound authentication for Dynamic Access Control increases the size and complexity of the data in the message which results in more processing time and greater Kerberos service ticket size.\r\n - Kerberos armoring fully encrypts Kerberos messages and signs Kerberos errors which results in increased processing time, but does not change the service ticket size.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kdc#admx-kdc-cbacandarmor"],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor_1","displayName":"Enabled","description":null,"helpText":null}]},"b1f5f00a8ced2609":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisablebehaviormonitoring","displayName":"Configure local setting override for turn on behavior monitoring","description":"This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisablebehaviormonitoring"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisablebehaviormonitoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_localsettingoverridedisablebehaviormonitoring_1","displayName":"Enabled","description":null,"helpText":null}]},"b1545c2ba6855d48":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobecontent","displayName":"Specify corporate DNS probe host address","description":"This policy setting enables you to specify the expected address of the host name used for the DNS probe. Successful resolution of the host name to this address indicates corporate connectivity.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ncsi#admx-ncsi-ncsi-corpdnsprobecontent"],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobecontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobecontent_1","displayName":"Enabled","description":null,"helpText":null}]},"b15bad8fe3d0c1ce":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryquittime","displayName":"Use final DC discovery retry setting for background callers","description":"This policy setting determines when retries are no longer allowed for applications that perform periodic searches for domain controllers (DC) are unable to find a DC. For example, retires may be set to occur according to the Use maximum DC discovery retry interval policy setting, but when the value set in this policy setting is reached, no more retries occur. If a value for this policy setting is smaller than the value in the Use maximum DC discovery retry interval policy setting, the value for Use maximum DC discovery retry interval policy setting is used.\r\n\r\nThe default value for this setting is to not quit retrying (0). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0.\r\n\r\nWarning: If the value for this setting is too small, a client will stop trying to find a DC too soon.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-backgroundretryquittime"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryquittime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryquittime_1","displayName":"Enabled","description":null,"helpText":null}]},"b1f12911d6a938a9":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsnotepad","displayName":"Windows Notepad **","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsnotepad_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_windowsnotepad_1","displayName":"True","description":null,"helpText":null}]},"b116e6bf66e66a8d":{"id":"device_vendor_msft_policy_config_appvirtualization_allowroamingfileexclusions_integration_roaming_file_exclusions_prompt","displayName":"Roaming Registry Exclusions","description":"","helpText":"","infoUrls":[],"categoryId":"ea9a092f-dd93-41d4-9bbb-118de1213578","categoryName":"Integration","options":null},"b1d749b91b837016":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize","displayName":"Set disk cache size in bytes","description":"Setting the policy to None has Google Chrome use the default cache size for storing cached files on the disk. Users can't change it.\r\n\r\nIf you set the policy, Google Chrome uses the cache size you provide—whether or not users specify the --disk-cache-size flag. (Values below a few megabytes are rounded up.)\r\n\r\nIf not set, Google Chrome uses the default size. Users can change that setting using the --disk-cache-size flag.\r\n\r\nNote: The value specified in this policy is used as a hint to various cache subsystems in the browser. Therefore the actual total disk consumption of all caches will be higher but within the same order of magnitude as the value specified.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"b141bd098e9f6127":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended","displayName":"Enable Translate","description":"Setting the policy to True provides translation functionality when it's appropriate for users by showing an integrated translate toolbar in Google Chrome and a translate option on the right-click context menu. Setting the policy to False shuts off all built-in translate features.\r\n\r\nIf you set the policy, users can't change this function. Leaving it unset lets them change the setting.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b1bb9953d3d656d4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview","displayName":"Disable Print Preview","description":"Setting the policy to Enabled has Google Chrome open the system print dialog instead of the built-in print preview when users request a printout.\r\n\r\nSetting the policy to Disabled or leaving it unset has print commands trigger the print preview screen.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview_1","displayName":"Enabled","description":null,"helpText":null}]},"b1beb71e6d86eaa4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting","displayName":"Disable TLS False Start","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting_1","displayName":"Enabled","description":null,"helpText":null}]},"b1421d0498d28876":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls","displayName":"Configure the list of enterprise login URLs where password protection service should capture salted hashes of passwords.","description":"Setting the policy sets the list of enterprise login URLs (HTTP and HTTPS protocols only). Password protection service will capture salted hashes of passwords on these URLs and use them for password reuse detection. For Google Chrome to correctly capture password salted hashes, ensure your sign-in pages follow these guidelines ( https://www.chromium.org/developers/design-documents/create-amazing-password-forms ).\r\n\r\nTurning this setting off or leaving it unset means the password protection service only captures the password salted hashes on https://accounts.google.com.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nhttps://mydomain.com/login.html\r\nhttps://login.mydomain.com","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b1979a62649d0936":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc","displayName":"Block the WebHID API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"b15bf31b8f313282":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive","displayName":"Include OneDrive","description":"[ENABLED BY DEFAULT]\r\n\r\nOneDrive cache will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOneDrive\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive_1","displayName":"Enabled","description":null,"helpText":null}]},"b103b2af61588595":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode","displayName":"Outlook Cached Mode","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nWhen the Profile Container is successfully attached, set Outlook to work in cached mode for the user. The setting change will only be effective for the specific user and for the length of the user session\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\OutlookCachedMode\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled (only if container is attached)","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"b11e3d5bdf8fce3e":{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions","displayName":"Notify that Internet Explorer 11 browser is disabled","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_0","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_1","displayName":"Always","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_2","displayName":"Once per user","description":null,"helpText":null}]},"b176833b42ff5dbf":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonenavigatewindowsandframes"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"b1de2d34d7bbdd40":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked","displayName":"Interactive Logon Display User Information When The Session Is Locked","description":"Interactive Logon:Display user information when the session is locked User display name, domain and user names (1) User display name only (2) Do not display user information (3) Domain and user names only (4)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_displayuserinformationwhenthesessionislocked"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_1","displayName":"User display name, domain and user names","description":"User display name, domain and user names","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_2","displayName":"User display name only","description":"User display name only","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_3","displayName":"Do not display user information","description":"Do not display user information","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_4","displayName":"Domain and user names only","description":"Domain and user names only","helpText":null}]},"b1a1e01bf8e38c2e":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode","displayName":"User Account Control Run All Administrators In Admin Approval Mode","description":"User Account Control: Turn on Admin Approval Mode This policy setting controls the behavior of all User Account Control (UAC) policy settings for the computer. If you change this policy setting, you must restart your computer. The options are: • Enabled: (Default) Admin Approval Mode is enabled. This policy must be enabled and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. • Disabled: Admin Approval Mode and all related UAC policy settings are disabled. Note: If this policy setting is disabled, the Security Center notifies you that the overall security of the operating system has been reduced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_runalladministratorsinadminapprovalmode"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"b12753cb104ff4c3":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2","displayName":"Retrieve configurations and experiments","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1","displayName":"Retrieve configurations only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null}]},"b160e419687f8925":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors","description":"The X.509 key usage extension declares how the key in a certificate can be\r\nused. These instructions ensure certificates aren't used in an unintended\r\ncontext, which protects against a class of cross-protocol attacks on HTTPS and\r\nother protocols. HTTPS clients must verify that server certificates match the\r\nconnection's TLS parameters.\r\n\r\nIf this policy is enabled,\r\nMicrosoft Edge will perform this key\r\ncheck. This helps prevent attacks where an attacker manipulates the browser into\r\ninterpreting a key in ways that the certificate owner did not intend.\r\n\r\nIf this policy is set to disabled or not configured,\r\nMicrosoft Edge will skip this key check in\r\nHTTPS connections that negotiate TLS 1.2 and use an RSA certificate that\r\nchains to a local trust anchor. Examples of local trust anchors include\r\npolicy-provided or user-installed root certificates. In all other cases, the\r\ncheck is performed independent of this policy's setting.\r\n\r\nThis policy is available for administrators to preview the behavior of a\r\nfuture release, which will enable this check by default. At that point, this\r\npolicy will remain temporarily available for administrators that need more\r\ntime to update their certificates to meet the new RSA key usage requirements.\r\n\r\nConnections that fail this check will fail with the error\r\nERR_SSL_KEY_USAGE_INCOMPATIBLE. Sites that fail with this error likely have a\r\nmisconfigured certificate. Modern ECDHE_RSA cipher suites use the\r\n\"digitalSignature\" key usage option, while legacy RSA decryption cipher suites\r\nuse the \"keyEncipherment\" key usage option. If uncertain, administrators should\r\ninclude both in RSA certificates meant for HTTPS.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b114506053894bdd":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride","displayName":"Prevent bypassing Microsoft Defender SmartScreen prompts for sites","description":"This policy setting lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.\r\n\r\nIf you enable this setting, users can't ignore Microsoft Defender SmartScreen warnings and they are blocked from continuing to the site.\r\n\r\nIf you disable or don't configure this setting, users can ignore Microsoft Defender SmartScreen warnings and continue to the site.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_1","displayName":"Enabled","description":null,"helpText":null}]},"b14f7991451040a6":{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc","displayName":"Block third-party storage partitioning for these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"b12150804f5ff385":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled","displayName":"Enable deleting undecryptable passwords","description":"This policy controls whether the built-in password manager can delete undecryptable passwords from its database. This is required to restore the full functionality of the built-in password manager, but it may include a permanent data loss. Undecryptable password values will not become decryptable on their own.\r\n\r\nIf fixing them is possible, it usually requires complex user actions.\r\n\r\nEnabling this policy or leaving it unset means that users with undecryptable passwords saved to the built-in password manager will lose them. Passwords that are still in a working state will remain untouched.\r\n\r\nDisabling this policy means users will have their password manager data untouched, but will experience a broken password manager functionality.\r\n\r\nIf the policy is set, users can't override it in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b10e66a22d8da6ad":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting","displayName":"Default sensors setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting_1","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting_2","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},"b1e4c5f4ae038a63":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"b1d228b4af3e74ab":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer","displayName":"Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge","description":"This setting allows you to configure the View in File Explorer capability for file management in SharePoint Online while using Microsoft Edge.\r\n\r\nYou will need to list the specific domains where this is allowed and list cookies needed for SharePoint authentication (rtFa and FedAuth).\r\n\r\nBehind the scenes, the policy allows URLs with the viewinfileexplorer: scheme to open WebDAV URLs in Windows File Explorer on pages matching the list of domains and uses the cookies you specified for WebDAV authentication.\r\n\r\nIf you enable this policy, you can use the \"View in File Explorer\" feature on the SharePoint document libraries you list. You will need to specify the SharePoint domain and authentication cookies. See example value below.\r\n\r\nIf you disable or don't configure this policy, you cannot use the \"View in File Explorer\" feature on SharePoint document libraries.\r\n\r\nNote that while this is an available option through Microsoft Edge, rather than use the View in File Explorer option, the recommended approach to managing files and folders outside of SharePoint is to sync your SharePoint files or move or copy files in SharePoint.\r\nSync your SharePoint files: https://go.microsoft.com/fwlink/p/?linkid=2166983\r\nMove or copy files in SharePoint: https://go.microsoft.com/fwlink/p/?linkid=2167123\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"cookies\": [\r\n \"rtFa\",\r\n \"FedAuth\"\r\n ],\r\n \"domain\": \"contoso.sharepoint.com\"\r\n },\r\n {\r\n \"cookies\": [\r\n \"rtFa\",\r\n \"FedAuth\"\r\n ],\r\n \"domain\": \"contoso2.sharepoint.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"b15a478d9a29f232":{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~applicationguard_applicationguardpassivemodeenabled","displayName":"Ignore Application Guard site list configuration and browse Edge normally","description":"Set whether Edge should ignore the Application Guard site list configuration for trusted and untrusted sites.\r\n\r\nIf you enable this policy, all navigations from Edge, including navigations to untrusted sites, will be accessed normally within Edge without redirecting to the Application Guard container. Note: this policy ONLY impacts Edge, so navigations from other browsers might get redirected to the Application Guard Container if you have the corresponding extensions enabled.\r\n\r\nIf you disable or don't configure this policy, Edge does not ignore the Application Guard site list. If users try to navigate to an untrusted site in the host, the site will open in the container.","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~applicationguard_applicationguardpassivemodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~applicationguard_applicationguardpassivemodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b16cf3ffbd00d7bb":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled","displayName":"In-app support Enabled","description":"Microsoft Edge uses the in-app support feature (enabled by default) to allow users to contact our support agents directly from the browser. Also, by default, users can't disable (turn off) the in-app support feature.\r\n\r\nIf you enable this policy or don't configure it, users can invoke in-app support.\r\n\r\nIf you disable this policy, users can't invoke in-app support.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b1474d9a59ce706a":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting","displayName":"Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app","description":"This setting lets you enable reporting of sites that might need to be configured as a neutral site on the Enterprise Mode Site List. The user must be signed into Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant specified by the policy.\r\n\r\nIf you configure this policy, Microsoft Edge will send a report to the M365 Admin Center Site Lists app when a navigation appears stuck redirecting back and forth between the Microsoft Edge and Internet Explorer engines several times. This usually indicates that redirection to an authentication server is switching engines, which repeatedly fails in a loop. The report will show the URL of the site that is the redirect target, minus any query string or fragment. The user's identity isn't reported.\r\n\r\nFor this reporting to work correctly, you must have successfully visited the Microsoft Edge Site Lists app in the M365 Admin Center at least once. This activates a per-tenant storage account used to store these reports. Microsoft Edge will still attempt to send reports if this step hasn't been completed. However, the reports will not be stored in the Site Lists app.\r\n\r\nWhen enabling this policy, you must specify your O365 tenant ID. To learn more about finding your O365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will never send reports about potentially misconfigured neutral sites to the Site Lists app.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_1","displayName":"Enabled","description":null,"helpText":null}]},"b1224734de15976e":{"id":"device_vendor_msft_policy_config_networklistmanager_allowedtlsauthenticationendpoints","displayName":"Allowed Tls Authentication Endpoints","description":"List of URLs (seperated by Unicode character 0xF000) to endpoints accessible only within an enterprise's network. If any of the URLs can be resolved over HTTPS, the network would be considered authenticated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkListManager#allowedtlsauthenticationendpoints"],"categoryId":"7fc3275d-5ef6-4806-88b0-210bb175c182","categoryName":"Network List Manager","options":null},"b128f889fe8bf4b6":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},"b1c0fc2fb691385d":{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_adminreleasering","displayName":"Admin Release Ring Policy","description":"Allows administrators to specify the release ring for the Windows App.\n\nIf you enable this policy, choose one of the following options:\n\n Public: The Windows App uses the standard release ring.\n Insider: The Windows App uses the Insider release ring for early access to features.\n\nIf you disable or do not configure this policy, the Windows App uses the Public release ring.\n ","helpText":"","infoUrls":[],"categoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","categoryName":"Windows App","options":[{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_adminreleasering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_adminreleasering_1","displayName":"Enabled","description":null,"helpText":null}]},"b128afa3e039ca60":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenetworkui","displayName":"Disable Network UI","description":"Use this policy setting if you want to disable the display of the firewall and network protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablenetworkui"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenetworkui_0","displayName":"(Disable) The users can see the display of the firewall and network protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the firewall and network protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenetworkui_1","displayName":"(Enable) The users cannot see the display of the firewall and network protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the firewall and network protection area in Windows Defender Security Center.","helpText":null}]},"b1f38cf69edcc756":{"id":"enrollment_autopilot_dpp_skipeula","displayName":"Hide Microsoft Software License Terms","description":"Specify whether to show the end-user license agreement to users.","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_skipeula_0","displayName":"Show","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_skipeula_1","displayName":"Hide","description":null,"helpText":null}]},"b1503d5385bd6676":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddremoveprograms","displayName":"Remove Add or Remove Programs (User)","description":"Prevents users from using Add or Remove Programs.\r\n\r\nThis setting removes Add or Remove Programs from Control Panel and removes the Add or Remove Programs item from menus.\r\n\r\nAdd or Remove Programs lets users install, uninstall, repair, add, and remove features and components of Windows 2000 Professional and a wide variety of Windows programs. Programs published or assigned to the user appear in Add or Remove Programs.\r\n\r\nIf you disable this setting or do not configure it, Add or Remove Programs is available to all users.\r\n\r\nWhen enabled, this setting takes precedence over the other settings in this folder.\r\n\r\nThis setting does not prevent users from using other tools and methods to install or uninstall programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddremoveprograms"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddremoveprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddremoveprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"b1a89c2ac0d7ecc4":{"id":"user_vendor_msft_policy_config_admx_power_pw_promptpasswordonresume","displayName":"Prompt for password on resume from hibernate/suspend (User)","description":"This policy setting allows you to configure client computers to lock and prompt for a password when resuming from a hibernate or suspend state.\r\n\r\nIf you enable this policy setting, the client computer is locked and prompted for a password when it is resumed from a suspend or hibernate state.\r\n\r\nIf you disable or do not configure this policy setting, users control if their computer is automatically locked or not after performing a resume operation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-pw-promptpasswordonresume"],"categoryId":"290ec637-e780-4e95-9834-6368ac0437d1","categoryName":"Power Management","options":[{"id":"user_vendor_msft_policy_config_admx_power_pw_promptpasswordonresume_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_power_pw_promptpasswordonresume_1","displayName":"Enabled","description":null,"helpText":null}]},"b14ead39599e08b8":{"id":"user_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_1","displayName":"Do not allow Sound Recorder to run (User)","description":"Specifies whether Sound Recorder can run.\r\n\r\nSound Recorder is a feature of Microsoft Windows Vista that can be used to record sound from an audio input device where the recorded sound is encoded and saved as an audio file.\r\n\r\nIf you enable this policy setting, Sound Recorder will not run.\r\n\r\nIf you disable or do not configure this policy setting, Sound Recorder can be run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-soundrec#admx-soundrec-soundrec-diableapplication-titletext-1"],"categoryId":"088b8d8d-5f3f-4979-aa18-b3c4b2616a24","categoryName":"Sound Recorder","options":[{"id":"user_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_1_1","displayName":"Enabled","description":null,"helpText":null}]},"b1c1d1bde900dd54":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_hstspolicybypasslistdesc","displayName":"List of names that will bypass the HSTS policy check (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"b1fa0ee94dfe0519":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (User)","description":"This policy configures behavior for intranet redirection via DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nIf this policy is not set, the browser will use the default behavior of DNS interception checks and intranet redirect suggestions. In M88, they are enabled by default but will be disabled by default in the future release.\r\n\r\nDNSInterceptionChecksEnabled is a related policy that may also disable DNS interception checks; this policy is a more flexible version which may separately control intranet redirection infobars and may be expanded in the future.\r\nIf either DNSInterceptionChecksEnabled or this policy requests to disable interception checks, the checks will be disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"b13edc79a7c1b27d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_extensionsettings","displayName":"Extension management settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"b17cb99c45cd958e":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting (User)","description":"Setting the policy to BlockLocalFonts (value 2) automatically denies the local fonts permission to sites by default. This will limit the ability of sites to see information about local fonts.\r\n\r\nSetting the policy to AskLocalFonts (value 3) will prompt the user when the local fonts permission is requested by default. If users allow the permission, it will extend the ability of sites to see information about local fonts.\r\n\r\nLeaving the policy unset means the default behavior applies which is to prompt the user, but users can change this setting","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"b1fe905bdb5559dc":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices","displayName":"Show media controls for Google Cast sessions started by other devices on the local network (User)","description":"When this policy is enabled, media playback controls UI is available for Google Cast sessions started by other devices on the local network.\r\n\r\nWhen this policy is unset for enterprise users or is disabled, media playback controls UI is unavailable for Google Cast sessions started by other devices on the local network.\r\n\r\nIf the policy EnableMediaRouter is disabled, then this policy's value has no effect, as the entire Google Cast functionality is disabled.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices_1","displayName":"Enabled","description":null,"helpText":null}]},"b158aa5394970a01":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"b189ab5e854133c4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensureworkbooksallowprogrammaticaccess","displayName":"Stop checking to ensure workbooks allow programmatic access (User)","description":"This policy setting allows you to configure Accessibility Checker and whether it checks to ensure that workbooks have not blocked programmatic access through DRM.\r\n\r\nIf you enable this policy setting, no check will be made.\r\n\r\nIf you disable or do not configure this policy setting, workbooks will be checked for programmatic access and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"d9b5c806-099f-4be8-96e4-1152e99cbf26","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensureworkbooksallowprogrammaticaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensureworkbooksallowprogrammaticaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"b1c8cb3e816a68da":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":null},"b13e78c4e18a0994":{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions","displayName":"Download restrictions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_4","displayName":"Block malicious downloads","description":null,"helpText":null}]},"b1d89e8c3aa6c4a9":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled","displayName":"Web To Browser Sign-in Enabled (User)","description":"Allow user to sign in to the same account in Microsoft Edge when a user signs in to a Microsoft website.\r\nIf this policy is enabled or not configured, user are able to get sign in CTA or seamless sign in experience(if 'SeamlessWebToBrowserSignInEnabled' (Seamless Web To Browser Sign-in Enabled) is enabled) when user sign in on Microsoft website.\r\nIf this policy is disabled, user will not get sign in CTA or seamless sign in experience when user sign in on Microsoft website.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b1aac1b59162448f":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox","displayName":"New tab page search box experience (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox_redirect","displayName":"Address bar","description":null,"helpText":null}]},"b13f3572251cc8ed":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastserviceservername1","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"b133ddfd3fc9d398":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_offlinemodefordocumentinformationpanel","displayName":"Offline Mode for Document Information Panel (User)","description":"Specify if Offline Mode is disabled/enabled for custom Document Information Panel templates and if the Document Information Panel is currently in Offline Mode.","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_offlinemodefordocumentinformationpanel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_offlinemodefordocumentinformationpanel_1","displayName":"Enabled","description":null,"helpText":null}]},"b1b4a77ca0e04f14":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicjordan","displayName":"Arabic (Jordan) (User)","description":"Enables the editing language Arabic (Jordan)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicjordan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicjordan_1","displayName":"Enabled","description":null,"helpText":null}]},"b152593160f60621":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chineseprc","displayName":"Chinese (PRC) (User)","description":"Enables the editing language Chinese (PRC)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chineseprc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chineseprc_1","displayName":"Enabled","description":null,"helpText":null}]},"b10668ae47ae4e22":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sindhiarabic","displayName":"Sindhi (Arabic) (User)","description":"Enables the editing language Sindhi (Arabic)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sindhiarabic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sindhiarabic_1","displayName":"Enabled","description":null,"helpText":null}]},"b1dd37cf6c3dbc15":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_syriac","displayName":"Syriac (User)","description":"Enables the editing language Syriac","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_syriac_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_syriac_1","displayName":"Enabled","description":null,"helpText":null}]},"b164741d39496d24":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc05","displayName":"Unsafe Location #5 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc05_1","displayName":"Enabled","description":null,"helpText":null}]},"b1253ca9de563d86":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders","displayName":"Suppress Office Signing Providers (User)","description":"This policy setting controls whether users can apply a default Microsoft Office signature line to Word documents and Excel workbooks. Digital signatures provide assurances of authenticity, integrity, and non-repudiation to electronic documents. In Excel and Word, users can add visible representations of their signatures to a document at the same time that they add digital signatures. The ability to capture digital signatures by using signature lines in Office 2016 documents makes it possible for organizations to use paperless signing processes for documents such as contracts or other agreements. \r\n\r\nIf you enable this policy setting, you can choose from four options for enabling the default Microsoft Office 2016 signature lines: \r\n\r\n- Enable Western and East Asian - Both Microsoft Office Signature Line and Stamp Signature Line are available from the Signature Line drop-down menu on the Insert tab of the Ribbon. \r\n\r\n- Suppress default Western - Users cannot add the Microsoft Office Signature Line to documents. \r\n\r\n- Suppress default East Asian - Users cannot add the Stamp Signature Line to documents. \r\n\r\n- Suppress both Western and East Asian. Neither of the default signature lines is available. This only takes affect if there is at least one other valid third party signature provider installed. \r\n\r\nIf you disable or do not configure this policy setting, Excel and Word include support for two kinds of signature lines, called Microsoft Office Signature Line and Stamp Signature Lines. The choice(s) available to the user vary according to the editing language(s) that are configured for the application at installation. \r\n\r\n- Microsoft Office Signature Line displays the letter \"X\" followed by a horizontal line, a familiar convention for handwritten signature lines. \r\n\r\n- Stamp Signature Line is only available to users of the Simplified Chinese, Traditional Chinese, Japanese, or Korean language versions of Office 2016, or to users who have installed Office 2016 Multi-Language Pack for one of these languages. This signature line displays a square, a convention in countries where rubber identity stamps (called hanko in Japan and South Korea) are used to sign documents. \r\n\r\nBoth kinds of signature lines allow signers to specify their name, title, and e-mail address. If neither kind of signature line is appropriate, third-party signature products can be added to Office applications to serve different needs. \r\n\r\nIf the correct signature line is not available for users to choose, they might be prevented from digitally signing documents. \r\n\r\nNote - This policy setting only applies to visible signature lines in Excel workbooks and Word documents. It does not affect the ability of users to add invisible digital signatures to Excel workbooks, PowerPoint presentations, and Word documents.","helpText":"","infoUrls":[],"categoryId":"23c09e06-5bee-4b20-a391-36549bf0f620","categoryName":"Signing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_supressofficesigningproviders_1","displayName":"Enabled","description":null,"helpText":null}]},"b1f2c87cea22a4f2":{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior","displayName":"Control how Office handles form-based sign-in prompts (User)","description":"This policy setting controls how Office applications handle form-based sign-in prompts.​\r\n\r\nIf you enable this policy setting, you must choose one of the following options:​\r\n\r\nBlock all prompts​\r\nAsk the user what to do for each new host​\r\nShow prompts only from allowed hosts​\r\n\r\nIf you select “Block all prompts” then no form-based sign-in prompts are shown to the user and the user is shown a message that the sign-in method isn’t allowed.​\r\n\r\nIf you select “Ask the user what do for each new host” then the user is asked for each new host whether the user wants to sign-in to the host. If the user has previously signed-in to a host, a form-based sign-in prompt is shown for that host. Also, form-based sign-in prompts are shown for any hosts specified by the “Specify hosts allowed to show form-based sign-in prompts to users” setting.\r\n\r\nIf you select “Show prompts only from allowed hosts” then form-based sign-in prompts are shown only from hosts that have been specified by the additional “Specify hosts allowed to show form-based sign-in prompts to users” setting. Form-based sign-in prompts from all other hosts are blocked and the user is shown a message that the sign-in method isn’t allowed.\r\n\r\nNote: If you don’t configure the “Specify hosts allowed to show form-based sign-in prompts to users” setting or don’t specify any hosts in that setting, then the behavior of the “Show prompts only from allowed hosts” option will be the same as if you selected the “Block all prompts” option.\r\n\r\nIf you disable or don’t configure this policy setting, all form-based sign-in prompts are blocked and the user is shown a message that the sign-in method isn’t allowed. But users are able to change the behavior for form-based sign-in prompts by going to File > Options > Trust Center > Trust Center Settings > Form-based sign-in.\r\n\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus, and to subscription versions of Project and Visio.​","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"b10fca1aba5c8987":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepitemsinrecyclebin","displayName":"Days back to keep items in recycle bin (User)","description":"This policy setting allows you to set the number of days before which all items added to the Recycle Bin before value will be deleted when the version history is pruned. With a 2016 format notebook, OneNote will automatically store previous versions of the pages in the notebook, and it will also store a recycle bin for all of the deleted pages and sections.\r\n\r\nIf you enable this policy setting, you can set the number of days in the past to keep recycle bin items.\r\n\r\nIf you do not configure this policy setting OneNote will use the default value of 60 days in the past.","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepitemsinrecyclebin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepitemsinrecyclebin_1","displayName":"Enabled","description":null,"helpText":null}]},"b13d7b317c18d183":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookalertinterval_l_outlookalertintervalspinid","displayName":"(5 - 600 seconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":null},"b1523a7060e7ebdb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_preventcoauthoring","displayName":"Prevent co-authoring (User)","description":"This policy setting controls how PowerPoint opens a file for editing on document management servers that support co-authoring.\r\n\r\nIf you enable this policy setting, PowerPoint will prevent co-authoring by taking an exclusive file lock. \r\n\r\nIf you disable or do not configure this policy setting, PowerPoint will allow co-authoring by taking short-term shared locks. \r\n\r\nNote: When file synchronization via SOAP over HTTP is turned off it will prevent co-authoring.","helpText":"","infoUrls":[],"categoryId":"ceacf7fa-fa6e-434d-a381-e20e5245d180","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_preventcoauthoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_preventcoauthoring_1","displayName":"Enabled","description":null,"helpText":null}]},"b1ddb2be5b9c3ec4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_volumepreference_l_volumepreference179","displayName":"Volume preference (User)","description":"","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_volumepreference_l_volumepreference179_0","displayName":"Use Drive letter or UNC as entered","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_volumepreference_l_volumepreference179_2","displayName":"Convert Drive letter to UNC","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_volumepreference_l_volumepreference179_1","displayName":"Convert UNC to Drive letter","description":null,"helpText":null}]},"b1ab1d9cff8719eb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype","displayName":"Mark grammar errors as you type (User)","description":"Defines color to use for marking grammatical errors.","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_1","displayName":"Enabled","description":null,"helpText":null}]},"b15bf03d8e07eae1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_insertclosingphrasetomatchjapanesesalutation","displayName":"Insert closing phrase to match Japanese salutation (User)","description":"Checks/unchecks the option \"Insert closing phrase to match Japanese salutation.\" This option may be hidden in Word until certain editing languages are enabled.","helpText":"","infoUrls":[],"categoryId":"e8ce968b-91cb-4301-ba98-b37d42bc5213","categoryName":"Automatically as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_insertclosingphrasetomatchjapanesesalutation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_insertclosingphrasetomatchjapanesesalutation_1","displayName":"Enabled","description":null,"helpText":null}]},"b103d413f5108b0c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_firstlineindent","displayName":"First line indent (User)","description":"Checks/unchecks the option \"Spaces at beginning of paragraph with first-line indent\" in the group \"Replace as you type.\" This option may be hidden in Word until certain editing languages are enabled.","helpText":"","infoUrls":[],"categoryId":"b6cafb2c-81be-40cf-90d8-788f713f7099","categoryName":"Replace as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_firstlineindent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_firstlineindent_1","displayName":"Enabled","description":null,"helpText":null}]},"b12e3ac867f9723a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setparametersforcngcontext","displayName":"Set parameters for CNG context (User)","description":"This policy setting allows you to specify the encryption parameters that should be used for the CNG context. \r\n\r\nIf you enable this policy setting, the parameters specified will be passed to the CNG context.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG values will be used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setparametersforcngcontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setparametersforcngcontext_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/b2.json b/public/intune-definitions/b2.json new file mode 100644 index 000000000000..af72fc2b2102 --- /dev/null +++ b/public/intune-definitions/b2.json @@ -0,0 +1 @@ +{"b217058b84de101d":{"id":"3~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled","displayName":"Allow Basic authentication for HTTP (User)","description":"If you enable this policy or leave it unset, Basic authentication challenges received over non-secure HTTP will be allowed.\r\n\r\nIf you disable this policy, non-secure HTTP requests from the Basic authentication scheme are blocked, and only secure HTTPS is allowed.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"3~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"3~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b202fed790d6e690":{"id":"com.apple.applicationaccess_allowlocalusercreation","displayName":"Allow Local User Creation","description":"If 'false', prevents creating new users in System Settings.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowlocalusercreation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowlocalusercreation_true","displayName":"True","description":null,"helpText":null}]},"b2ab4cfb820506a6":{"id":"com.apple.applicationaccess_allowprintersharingmodification","displayName":"Allow Printer Sharing Modification","description":"If 'false', prevents modifying Printer Sharing setting in System Settings.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowprintersharingmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowprintersharingmodification_true","displayName":"True","description":null,"helpText":null}]},"b28804e34caccab9":{"id":"com.apple.configurationprofile.identification_payloadidentification_promptmessage","displayName":"Prompt Message","description":"The additional descriptive text for the user prompt.","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":null},"b233cd47843dcf93":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app","displayName":"Microsoft Teams (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"b24fa2fe390195b5":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_lcid","displayName":"Microsoft Word LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"b2b4d244b1e01da7":{"id":"com.apple.managedclient.preferences_builtincertificateverifierenabled","displayName":"Determines whether the built-in certificate verifier will be used to verify server certificates","description":"This policy is deprecated because it's intended to serve only as a short-term mechanism to give enterprises more time to update their environments and report issues if they are found to be incompatible with the built-in certificate verifier.\n\nThis policy is scheduled to be removed in Microsoft Edge for Mac OS X version 87, when support for the legacy certificate verifier on Mac OS X is planned to be removed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#builtincertificateverifierenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_builtincertificateverifierenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_builtincertificateverifierenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b23b92d738262437":{"id":"com.apple.managedclient.preferences_filesystemreadaskforurls","displayName":"Allow read access via the File System API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\n\nLeaving the policy unset means \"DefaultFileSystemReadGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemReadBlockedForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#filesystemreadaskforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"b225e5ec80acdf57":{"id":"com.apple.managedclient.preferences_proxysettings_proxypacurl","displayName":"Proxy PAC URL","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"b2c56042bc6bb90e":{"id":"com.apple.managedclient.preferences_restoreonstartupurls","displayName":"Sites to open when the browser starts","description":"Specify a list of websites to open automatically when the browser starts. If you don't configure this policy, no site is opened on startup.\n\nThis policy only works if you also set the \"RestoreOnStartup\" policy to 'Open a list of URLs' (4).\n\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#restoreonstartupurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"b230822f0c12f28b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.clipboardallowedforurls","displayName":"Allow clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\n\nSetting the policy lets you create a list of URL patterns that specify which sites can use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users can still paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\n\nLeaving the policy unset means \"DefaultClipboardSetting\" applies for all sites if it's set. If it isn't set, the user's personal setting applies.\n\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"b26f05e4a1341ebb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidername","displayName":"Default search provider name","description":"Specifies the name of the default search provider.\n\nIf you enable this policy, you set the name of the default search provider.\n\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\n\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy isn't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"b27ff578fbf2c919":{"id":"com.microsoft.edge.mamedgeappconfigsettings.filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\n\nIf you don't set this policy, \"DefaultFileSystemWriteGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemWriteAskForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"b28dfdca7780b936":{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoftofficemenuenabled","displayName":"Allow users to access the Microsoft Office menu (Deprecated)","description":"This policy is deprecated because the Microsoft Edge sidebar replaced it. Microsoft Office applications are now available in the sidebar, which are managed by HubsSidebarEnabled policy.\n\nWhen users can access the Microsoft Office menu, they can get access to Office applications such as Microsoft Word and Microsoft Excel.\n\nIf you enable or don't configure this policy, users can open the Microsoft Office menu.\n\nIf you disable this policy, users can't access the Microsoft Office menu.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoftofficemenuenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoftofficemenuenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b2392ce61c9cce4f":{"id":"device_vendor_msft_bitlocker_fixeddrivesencryptiontype_fdvencryptiontypedropdown_name","displayName":"Select the encryption type:","description":"","helpText":"","infoUrls":[],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesencryptiontype_fdvencryptiontypedropdown_name_0","displayName":"Allow user to choose (default)","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesencryptiontype_fdvencryptiontypedropdown_name_1","displayName":"Full encryption","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesencryptiontype_fdvencryptiontypedropdown_name_2","displayName":"Used Space Only encryption","description":null,"helpText":null}]},"b263e37b5deb9fb6":{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}_identifier","displayName":"Slot ID","description":"Node representing a SIM Slot. The node name is the Slot ID. SIM Slot ID format is \"0\", \"1\", etc., with exception of \"Embedded\" which represents the embedded Slot.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/MultiSIM-csp/"],"categoryId":"83fb8ae9-dfc0-4ff8-8a98-3a04f0edd919","categoryName":"Multi SIM","options":[{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}_identifier_embedded","displayName":"Embedded","description":"Embedded","helpText":null},{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}_identifier_0","displayName":"SIM Slot Id 0","description":"0","helpText":null},{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}_identifier_1","displayName":"SIM Slot Id 1","description":"1","helpText":null}]},"b2dbc136511fb2ee":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_sku_differentiation_signature_set_guid_nis_consumers_ips_sku_differentiation_signature_set_guidlist","displayName":"Specify additional definition sets for network traffic inspection","description":null,"helpText":"","infoUrls":[],"categoryId":"cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","categoryName":"Network Inspection System","options":null},"b2f29dcb92a0239d":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsttl","displayName":"Set TTL in the DC Locator DNS Records","description":"This policy setting specifies the value for the Time-To-Live (TTL) field in SRV resource records that are registered by the Net Logon service. These DNS records are dynamically registered, and they are used to locate the domain controller (DC).\r\n\r\nTo specify the TTL for DC Locator DNS records, click Enabled, and then enter a value in seconds (for example, the value \"900\" is 15 minutes).\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-dnsttl"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsttl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsttl_1","displayName":"Enabled","description":null,"helpText":null}]},"b25d42811448be2c":{"id":"device_vendor_msft_policy_config_admx_reliability_ee_enablepersistenttimestamp_ee_enablepersistenttimestamp_desc4","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"b2fe3733ae708f6a":{"id":"device_vendor_msft_policy_config_admx_startmenu_hidepoweroptions","displayName":"Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands","description":"This policy setting prevents users from performing the following commands from the Windows security screen, the logon screen, and the Start menu: Shut Down, Restart, Sleep, and Hibernate. This policy setting does not prevent users from running Windows-based programs that perform these functions.\r\n\r\nIf you enable this policy setting, the shutdown, restart, sleep, and hibernate commands are removed from the Start menu. The Power button is also removed from the Windows Security screen, which appears when you press CTRL+ALT+DELETE, and from the logon screen.\r\n\r\nIf you disable or do not configure this policy setting, the Power button and the Shut Down, Restart, Sleep, and Hibernate commands are available on the Start menu. The Power button on the Windows Security and logon screens is also available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-hidepoweroptions"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_hidepoweroptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_hidepoweroptions_1","displayName":"Enabled","description":null,"helpText":null}]},"b2fecff5ea25ba59":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint","displayName":"Microsoft PowerPoint 2010","description":"This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2010.\r\nBy default, the user settings of Microsoft PowerPoint 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010powerpoint"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"b269fea508201e9e":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup","displayName":"Excel 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Excel 2013.\r\nMicrosoft Excel 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Excel 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Excel 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013excelbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"b2edd151a093fbb6":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013","displayName":"Microsoft Office 365 Lync 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Lync 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Lync 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365lync2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013_1","displayName":"Enabled","description":null,"helpText":null}]},"b280808100cec1ee":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowcertificatefilterforclient_ssl","displayName":"Certificate Filter For Client SSL","description":"Specifies the path to a valid certificate in the certificate store.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingallowcertificatefilterforclient-ssl"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowcertificatefilterforclient_ssl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowcertificatefilterforclient_ssl_1","displayName":"Enabled","description":null,"helpText":null}]},"b2ce9a8120e85c76":{"id":"device_vendor_msft_policy_config_bits_bandwidththrottlingstarttime","displayName":"Bandwidth Throttling Start Time","description":"This policy specifies the bandwidth throttling start time that Background Intelligent Transfer Service (BITS) uses for background transfers. This policy setting does not affect foreground transfers. This policy is based on the 24-hour clock. Value type is integer. Default value is 8 (8 am). Supported value range: 0 - 23You can specify a limit to use during a specific time interval and at all other times. For example, limit the use of network bandwidth to 10 Kbps from 8:00 A. M. to 5:00 P. M. , and use all available unused bandwidth the rest of the day's hours. Using the three policies together (BandwidthThrottlingStartTime, BandwidthThrottlingEndTime, BandwidthThrottlingTransferRate), BITS will limit its bandwidth usage to the specified values. You can specify the limit in kilobits per second (Kbps). If you specify a value less than 2 kilobits, BITS will continue to use approximately 2 kilobits. To prevent BITS transfers from occurring, specify a limit of 0. If you disable or do not configure this policy setting, BITS uses all available unused bandwidth. Note: You should base the limit on the speed of the network link, not the computer's network interface card (NIC). This policy setting does not affect peer caching transfers between peer computers (it does affect transfers from the origin server); the Limit the maximum network bandwidth used for Peercaching policy setting should be used for that purpose. Consider using this setting to prevent BITS transfers from competing for network bandwidth when the client computer has a fast network card (10Mbs), but is connected to the network via a slow link (56Kbs).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-BITS#bandwidththrottlingstarttime"],"categoryId":"7443c1d4-1087-486c-9a0a-f9da9074e4e1","categoryName":"BITS","options":null},"b2c0dbfbe3142059":{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats","displayName":"Remediation action for Moderate severity threats","description":"","helpText":"","infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},"b26e8eee87a3269e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_profilesdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":null},"b289c564af5f053c":{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser","displayName":"First choice","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_","displayName":"","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},"b2218200e45f1a49":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402","displayName":"Scripting of Java applets","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_1","displayName":"Prompt","description":null,"helpText":null}]},"b2721c46b9ed21b0":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon with current username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonelogonoptions"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"b241f95a9510d75d":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc","displayName":"Sites to open when the browser starts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":null},"b257e086fe8ef32e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_proxysettings","displayName":"Proxy settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"b256be49539da8bb":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended","displayName":"Performance Detector Enabled","description":"The performance detector detects tab performance issues and recommends actions to fix the performance issues.\r\n\r\nIf you enable or don't configure this policy, performance detector is turned on.\r\n\r\nIf you disable this policy, performance detector is turned off.\r\n\r\nThe user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about performance detector: https://aka.ms/EdgePerformanceDetector","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b2c354b669b4a88d":{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled","displayName":"Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nX.509 certificates may encode constraints, such as Name Constraints, in extensions in the certificate. RFC 5280 specifies that enforcing such constraints on trust anchor certificates is optional.\r\n\r\nStarting in Microsoft Edge 112, such constraints in certificates loaded from the platform certificate store will now be enforced.\r\n\r\nThis policy exists as a temporary opt-out in case an enterprise encounters issues with the constraints encoded in their private roots. In that case this policy may be used to temporarily disable enforcement of the constraints while correcting the certificate issues.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will enforce constraints encoded into trust anchors loaded from the platform trust store.\r\n\r\nIf you disable this policy, Microsoft Edge will not enforce constraints encoded into trust anchors loaded from the platform trust store.\r\n\r\nThis policy has no effect if the 'MicrosoftRootStoreEnabled' (Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates) policy is disabled.\r\n\r\nThis policy was removed in Microsoft Edge version 128. Starting with that version, constraints in trust anchors are always enforced.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b20d5fa17ef1f5bf":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled","displayName":"Enable Work Search suggestions in the address bar","description":"Enables the display of relevant workplace suggestions in the address bar’s suggestion dropdown when users type a query in the address bar.\r\n\r\nIf this policy is enabled or not configured, users can view internal work-related suggestions, such as bookmarks, files, and people results powered by Microsoft 365, in the Microsoft Edge address bar suggestion dropdown. To access these results, users must be signed into Microsoft Edge with their Entra ID account associated with that organization.\r\n\r\nIf this policy is disabled, users will not see internal workplace results in the Microsoft Edge address bar suggestion dropdown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b255385aceaf18aa":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user","description":"Allows you to set a list of protocols, and for each protocol an associated list of allowed origin patterns, that can launch an external application without prompting the user. The trailing separator should not be included when listing the protocol and the protocol should be all lower case. For example, list \"skype\" instead of \"skype:\", \"skype://\" or \"Skype\".\r\n\r\nIf you configure this policy, a protocol will only be permitted to launch an external application without prompting by policy if:\r\n\r\n- the protocol is listed\r\n\r\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\r\n\r\nIf either condition is false, the external protocol launch prompt will not be omitted by policy.\r\n\r\nIf you don't configure this policy, no protocols can launch without a prompt. Users can opt out of prompts on a per-protocol/per-site basis unless the 'ExternalProtocolDialogShowAlwaysOpenCheckbox' (Show an \"Always open\" checkbox in external protocol dialog) policy is set to Disabled. This policy has no impact on per-protocol/per-site prompt exemptions set by users.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' (Block access to a list of URLs) policy, which are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\n\r\nThis policy does not work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ],\r\n \"protocol\": \"spotify\"\r\n },\r\n {\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ],\r\n \"protocol\": \"msteams\"\r\n },\r\n {\r\n \"allowed_origins\": [\r\n \"*\"\r\n ],\r\n \"protocol\": \"msoutlook\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"b2d64b3ed51e92b2":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject","displayName":"Bind to object","description":"Safe to bind to object","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_1","displayName":"Enabled","description":null,"helpText":null}]},"b2b20283f53857cf":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_autoupdatecheckperiod","displayName":"Auto-update check period override","description":"If enabled, this policy lets you set a value for the minimum number of minutes between automatic update checks. Otherwise, by default, auto-update checks for updates every 10 hours.\r\n\r\n If you want to disable all auto-update checks, set the value to 0 (not recommended).","helpText":"","infoUrls":[],"categoryId":"78497707-c3e4-400b-a6bc-1813c3689fdc","categoryName":"Preferences","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_autoupdatecheckperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_autoupdatecheckperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"b2971ea3afbeaf92":{"id":"device_vendor_msft_policy_config_windowsai_setdatalosspreventionprovider","displayName":"Set Data Loss Prevention Provider","description":"This policy allows an admin to specify a DLP provider, which Recall will use if the provider is properly installed. You will need to get the string for this from your provider. It will look something like 'key:HKEY_LOCAL_MACHINE\\Software\\Contoso\\DLP; value:InstallPath; binary:contosoDLP.dll' (without any quotes in the value). Important: This setting applies to Enterprise and Education client SKUs only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdatalosspreventionprovider"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":null},"b2f6171ac670274d":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_pathcolon51","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"b2c48d9de28108b5":{"id":"user_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_1","displayName":"Turn off the \"Publish to Web\" task for files and folders (User)","description":"This policy setting specifies whether the tasks \"Publish this file to the Web,\" \"Publish this folder to the Web,\" and \"Publish the selected items to the Web\" are available from File and Folder Tasks in Windows folders.\r\n\r\nThe Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web.\r\n\r\nIf you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders.\r\n\r\nIf you disable or do not configure this policy setting, the tasks are shown.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellremovepublishtoweb-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_1_1","displayName":"Enabled","description":null,"helpText":null}]},"b2451a6ba5402ab6":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall","displayName":"Windows Firewall with Advanced Security (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-windowsfirewall"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_1","displayName":"Enabled","description":null,"helpText":null}]},"b217757922ee1a3b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior","displayName":"Set default file block behavior (User)","description":"This policy setting allows you to determine if users can open, view, or edit Excel files.\r\n\r\nIf you enable this policy setting, you can set one of these options:\r\n- Blocked files are not opened\r\n- Blocked files open in Protected View and can not be edited\r\n- Blocked files open in Protected View and can be edited\r\n\r\nIf you disable or do not configure this policy setting, the behavior is the same as the \"Blocked files are not opened\" setting. Users will not be able to open blocked files.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"b2de6986dcd48e7e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders36","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders36_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders36_1","displayName":"True","description":null,"helpText":null}]},"b27231d35fc7b648":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000","displayName":"Allow Binary and Script Behaviors (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_65536","displayName":"Administrator approved","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_3","displayName":"Disable","description":null,"helpText":null}]},"b205b1664a0ee491":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended","displayName":"Configure the new tab page URL (User)","description":"Configures the default URL for the new tab page.\r\n\r\nThis policy determines the page that's opened when new tabs are created (including when new windows are opened). It also affects the startup page if that's set to open to the new tab page.\r\n\r\nThis policy doesn't determine which page opens on startup; that's controlled by the 'RestoreOnStartup' (Action to take on startup) policy. It also doesn’t affect the home page if that’s set to open to the new tab page.\r\n\r\nIf you don't configure this policy, the default new tab page is used.\r\n\r\nIf you configure this policy *and* the 'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience) policy, this policy has precedence.\r\n\r\nIf an invalid URL is provided, new tabs will open about://blank.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b2c69636ab24dadc":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling","displayName":"Restrict exposure of local IP address by WebRTC (User)","description":"Allows you to set whether or not WebRTC exposes the user's local IP address.\r\n\r\nIf you set this policy to \"AllowAllInterfaces\" ('default') or \"AllowPublicAndPrivateInterfaces\" ('default_public_and_private_interfaces'), WebRTC exposes the local IP address.\r\n\r\nIf you set this policy to \"AllowPublicInterfaceOnly\" ('default_public_interface_only') or \"DisableNonProxiedUdp\" ('disable_non_proxied_udp'), WebRTC doesn't expose the local IP address.\r\n\r\nIf you don't set this policy, or if you disable it, WebRTC exposes the local IP address.\r\n\r\n * 'default' = Allow all interfaces. This exposes the local IP address.\r\n * 'default_public_and_private_interfaces' = Allow public and private interfaces over http default route. This exposes the local IP address.\r\n * 'default_public_interface_only' = Allow public interface over http default route. This doesn't expose the local IP address.\r\n * 'disable_non_proxied_udp' = Use TCP unless proxy server supports UDP. This doesn't expose the local IP address.\r\n\r\nExample value: default","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_1","displayName":"Enabled","description":null,"helpText":null}]},"b2d4322db890da9f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc","displayName":"Allow notifications on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"b2e787179f7c5544":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls","displayName":"Block notifications on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are blocked from displaying notifications.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultNotificationsSetting' (Default notification setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b27a7e862d2c2409":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled","displayName":"Enable 3DES cipher suites in TLS (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 96.\r\n\r\n'This policy was removed in version 97 after 3DES was removed from Microsoft Edge.\r\n\r\nIf the policy is set to true, then 3DES cipher suites in TLS will be enabled. If it is set to false, they will be disabled. If the policy is unset, 3DES cipher suites are disabled by default. This policy may be used to temporarily retain compatibility with an outdated server. This is a stopgap measure and the server should be reconfigured.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b24ccd1538ac44ac":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in the 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins) policy.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"b2a3251e24b7832f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_maxretries","displayName":"Set maximum number of retries when synchronization fails (User)","description":"This policy setting allows you to specify the maximum number of times a failed synchronization operation can be retried.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of times a failed synchronization operation can be retried.\r\n\r\nIf you disable or do not configure this policy setting, then a default value of 50 times will be used.","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_maxretries_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_maxretries_1","displayName":"Enabled","description":null,"helpText":null}]},"b27b1d5087cdf8b1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_listofapprovedlocationspolicy_l_listofapprovedlocations","displayName":"List of Approved Locations: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":null},"b2a1e1c98d060672":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuispw","displayName":"Disallow in SharePoint Workspace (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuispw_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuispw_1","displayName":"True","description":null,"helpText":null}]},"b2d7174526b30399":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiclibya","displayName":"Arabic (Libya) (User)","description":"Enables the editing language Arabic (Libya)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiclibya_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiclibya_1","displayName":"Enabled","description":null,"helpText":null}]},"b2d97f43d618f804":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchswitzerland","displayName":"French (Switzerland) (User)","description":"Enables the editing language French (Switzerland)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchswitzerland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchswitzerland_1","displayName":"Enabled","description":null,"helpText":null}]},"b2edf0c6a4a2b3d4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_wolof","displayName":"Wolof (User)","description":"Enables the editing language Wolof","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_wolof_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_wolof_1","displayName":"Enabled","description":null,"helpText":null}]},"b254e1978b1b5520":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_activedirectorytimeoutforqueryingoneentryforgroupexpansion","displayName":"Active Directory timeout for querying one entry for group expansion (User)","description":"Specifies the timeout value for querying one Active Directory entry for group expansion.","helpText":"","infoUrls":[],"categoryId":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","categoryName":"Manage Restricted Permissions","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_activedirectorytimeoutforqueryingoneentryforgroupexpansion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_managerestrictedpermissions_l_activedirectorytimeoutforqueryingoneentryforgroupexpansion_1","displayName":"Enabled","description":null,"helpText":null}]},"b2beff0e6d26419e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14","displayName":"Workflow Cache 14 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_1","displayName":"Enabled","description":null,"helpText":null}]},"b2cf35941ef4b3cb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications","displayName":"Office applications to exclude from Office Telemetry Agent reporting (User)","description":"This policy setting allows you to prevent telemetry data for Office applications from being reported to Office Telemetry Dashboard.\r\n\r\nIf you enable this policy setting, Office Telemetry Agent does not upload telemetry data for the specified Office applications to Office Telemetry Dashboard.\r\n\r\nIf you disable or do not configure this policy setting, Office Telemetry Agent uploads telemetry data for all Office applications.","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_1","displayName":"Enabled","description":null,"helpText":null}]},"b2c5ae4aafc36567":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsonenote","displayName":"OneNote-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsonenote_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsonenote_1","displayName":"True","description":null,"helpText":null}]},"b2e15519b2d70302":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_allowonenoteemailattachments","displayName":"Allow OneNote e-mail attachments (User)","description":"Checks/Unchecks the option ''Attach a copy of the original notes as a OneNote file''.","helpText":"","infoUrls":[],"categoryId":"e4e72b9b-db0e-4a97-9d90-a21d87a4d9bf","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_allowonenoteemailattachments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_email_l_allowonenoteemailattachments_1","displayName":"Enabled","description":null,"helpText":null}]},"b2cb9d2f6261f4ae":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_calendarfolderhomepage","displayName":"Calendar Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Calendar Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_calendarfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_calendarfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"b2138b2f79e0e981":{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_nowarningnoelevationonupdate_enum","displayName":"When updating drivers for an existing connection: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_nowarningnoelevationonupdate_enum_0","displayName":"Show warning and elevation prompt","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_nowarningnoelevationonupdate_enum_1","displayName":"Show warning only","description":null,"helpText":null}]},"b289f839f154d30a":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_whenselectingautomaticallyselectentireword","displayName":"When selecting, automatically select entire word (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_whenselectingautomaticallyselectentireword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_whenselectingautomaticallyselectentireword_1","displayName":"Enabled","description":null,"helpText":null}]},"b2ad1b5520162336":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_centerselectiononzoom","displayName":"Center selection on zoom (User)","description":"Specifies that when you zoom in, whatever shape was selected appears in the center of the window.","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_centerselectiononzoom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_centerselectiononzoom_1","displayName":"Enabled","description":null,"helpText":null}]},"b2edbea83ee26476":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned","displayName":"Require that application add-ins are signed by Trusted Publisher (User)","description":"This policy setting controls whether add-ins for this applications must be digitally signed by a trusted publisher.\r\n \r\nIf you enable this policy setting, this application checks the digital signature for each add-in before loading it. If an add-in does not have a digital signature, or if the signature did not come from a trusted publisher, this application disables the add-in and notifies the user. Certificates must be added to the Trusted Publishers list if you require that all add-ins be signed by a trusted publisher. For detail on about obtaining and distributing certificates, see http://go.microsoft.com/fwlink/?LinkId=294922. Office 2016 stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Office 2016 still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store. Therefore, if you created a list of trusted publishers in a previous version of Office and you upgrade to Office 2016, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store. For more information about trusted publishers, see the Office Resource Kit.\r\n\r\nIf you disable or do not configure this policy setting, this application does not check the digital signature on application add-ins before opening them. If a dangerous add-in is loaded, it could harm users' computers or compromise data security.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_1","displayName":"Enabled","description":null,"helpText":null}]},"b2f0a5392c84cc53":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_saveautorecoverinfo","displayName":"Save AutoRecover info (User)","description":"If you enable this policy setting, you can specify the number of minutes that Word will wait between saving AutoRecover information for the file. To prevent Word from ever saving AutoRecover information for the file, enable this policy and set the value to '0'.\r\n\r\nIf you disable or do not configure this policy setting, this policy will have no effect on the number of minutes that Word will wait between saving AutoRecover information for the file. By default, Word saves AutoRecover information for the file every 10 minutes.","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_saveautorecoverinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_saveautorecoverinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"b288b5aefe020d04":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_storerandomnumbertoimprovemergeaccuracy","displayName":"Store random number to improve merge accuracy (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_storerandomnumbertoimprovemergeaccuracy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_storerandomnumbertoimprovemergeaccuracy_1","displayName":"Enabled","description":null,"helpText":null}]},"b2b2b1f56456704d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/b3.json b/public/intune-definitions/b3.json new file mode 100644 index 000000000000..f95d70938aa1 --- /dev/null +++ b/public/intune-definitions/b3.json @@ -0,0 +1 @@ +{"b3f74136101f3beb":{"id":"com.apple.applicationaccess_allowitunes","displayName":"Allow iTunes","description":"If false, disables the iTunes Music Store, and its icon is removed from the Home screen. Users cannot preview, purchase, or download content. As of iOS 13, requires a supervised device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowitunes_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowitunes_true","displayName":"True","description":null,"helpText":null}]},"b3573c8c3ba03ae5":{"id":"com.apple.loginwindow_showinputmenu","displayName":"Show Input Menu","description":"If `true`, the system shows the Input Menu in the Login Window.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_showinputmenu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_showinputmenu_true","displayName":"True","description":null,"helpText":null}]},"b38a3625ad942668":{"id":"com.apple.managedclient.preferences_automaticsamplesubmission","displayName":"Enable / disable automatic sample submissions","description":"Determines whether suspicious samples (that are likely to contain threats) are sent to Microsoft. You are prompted if the submitted file is likely to contain personal information.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#enable--disable-automatic-sample-submissions"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"com.apple.managedclient.preferences_automaticsamplesubmission_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_automaticsamplesubmission_true","displayName":"Enabled","description":null,"helpText":null}]},"b3763805d5e87337":{"id":"com.apple.managedclient.preferences_compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\n\nIf you enable this policy or don't configure it, Microsoft Edge will accept web contents using the compression dictionary transport feature.\n\nIf you disable this policy, Microsoft Edge will turn off the compression dictionary transport feature.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#compressiondictionarytransportenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_compressiondictionarytransportenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_compressiondictionarytransportenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b3fa842267dbac50":{"id":"com.apple.managedclient.preferences_edgesidebarappurlhostblocklist","displayName":"Control which apps cannot be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that cannot be opened in sidebar.\n\nIf you don't configure this policy, a user can open any app in sidebar.\n\nIf the \"HubsSidebarEnabled\" policy is disabled, this list isn't used and no sidebar can be opened.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.\n\nNote: A blocklist value of '*' means all apps are blocked unless they are explicitly listed in the \"EdgeSidebarAppUrlHostAllowList\" policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgesidebarappurlhostblocklist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"b3c4d77b923a84f8":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"b388980cd8205456":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderencodings_recommended","displayName":"Default search provider encodings (users can override)","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\n\nThis policy is optional. If not configured, the default, UTF-8, is used.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy won't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"b3a7c84398e09788":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypasslistdomains","displayName":"Configure the list of domains for which enhance security mode will not be enforced","description":"Configures the list of enhance security trusted domains. This means that enhance security mode isn't enforced when loading the sites in trusted domains.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"b3e5095cc66a007f":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_dontallowpwdexpirationbehindpolicy","displayName":"Do not allow password expiration time longer than required by policy","description":"\nWhen you enable this setting, planned password expiration longer than password age dictated by \"Password Settings\" policy is NOT allowed. When such expiration is detected, password is changed immediately and password expiration is set according to policy.\n\nWhen you disable or not configure this setting, password expiration time may be longer than required by \"Password Settings\" policy.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-admpwd#admx-admpwd-pol-admpwd-dontallowpwdexpirationbehindpolicy"],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":[{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_dontallowpwdexpirationbehindpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_dontallowpwdexpirationbehindpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"b3f5699976e0d5db":{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprograminventory","displayName":"Turn off Inventory Collector","description":"This policy setting controls the state of the Inventory Collector. \r\n\r\nThe Inventory Collector inventories applications, files, devices, and drivers on the system and sends the information to Microsoft. This information is used to help diagnose compatibility problems.\r\n\r\nIf you enable this policy setting, the Inventory Collector will be turned off and data will not be sent to Microsoft. Collection of installation data through the Program Compatibility Assistant is also disabled.\r\n\r\nIf you disable or do not configure this policy setting, the Inventory Collector will be turned on.\r\n\r\nNote: This policy setting has no effect if the Customer Experience Improvement Program is turned off. The Inventory Collector will be off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatturnoffprograminventory"],"categoryId":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","categoryName":"Application Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprograminventory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprograminventory_1","displayName":"Enabled","description":null,"helpText":null}]},"b3b8f9687be13be8":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_slowlink7","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_slowlink7_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_slowlink7_1","displayName":"True","description":null,"helpText":null}]},"b3a9d014f6e3ba85":{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor_cbacandarmor_levels","displayName":"Claims, compound authentication for Dynamic Access Control and Kerberos armoring options:","description":null,"helpText":"","infoUrls":[],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor_cbacandarmor_levels_0","displayName":"Not supported","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor_cbacandarmor_levels_1","displayName":"Supported","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor_cbacandarmor_levels_2","displayName":"Always provide claims","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_cbacandarmor_cbacandarmor_levels_3","displayName":"Fail unarmored authentication requests","description":null,"helpText":null}]},"b3c547fe324cedd1":{"id":"device_vendor_msft_policy_config_admx_msi_msilogging","displayName":"Specify the types of events Windows Installer records in its transaction log","description":"\r\n Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears in the Temp directory of the system volume.\r\n\r\n When you enable this policy setting, you can specify the types of events you want Windows Installer to record. To indicate that an event type is recorded, type the letter representing the event type. You can type the letters in any order and list as many or as few event types as you want.\r\n\r\n To disable logging, delete all of the letters from the box.\r\n\r\n If you disable or do not configure this policy setting, Windows Installer logs the default event types, represented by the letters \"iweap.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-msilogging"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_msilogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_msilogging_1","displayName":"Enabled","description":null,"helpText":null}]},"b3907fac374456c7":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autoshareserver","displayName":"MSS: (AutoShareServer) Enable Administrative Shares (recommended except for highly secure environments)","description":"MSS: (AutoShareServer) Enable Administrative Shares (recommended except for highly secure environments)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-autoshareserver"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autoshareserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autoshareserver_1","displayName":"Enabled","description":null,"helpText":null}]},"b3591af24d5962fc":{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_forcetunneling","displayName":"Route all traffic through the internal network","description":"This policy setting determines whether a remote client computer routes Internet traffic through the internal network or whether the client accesses the Internet directly.\r\n\r\nWhen a remote client computer connects to an internal network using DirectAccess, it can access the Internet in two ways: through the secure tunnel that DirectAccess establishes between the computer and the internal network, or directly through the local default gateway.\r\n\r\nIf you enable this policy setting, all traffic between a remote client computer running DirectAccess and the Internet is routed through the internal network.\r\n\r\nIf you disable this policy setting, traffic between remote client computers running DirectAccess and the Internet is not routed through the internal network.\r\n\r\nIf you do not configure this policy setting, traffic between remote client computers running DirectAccess and the Internet is not routed through the internal network.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-forcetunneling"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_forcetunneling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_forcetunneling_1","displayName":"Enabled","description":null,"helpText":null}]},"b33ec81f1dba7569":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_com","displayName":"Do not allow COM port redirection","description":"This policy setting specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Remote Desktop Services session.\r\n\r\nYou can use this setting to prevent users from redirecting data to COM port peripherals or mapping local COM ports while they are logged on to a Remote Desktop Services session. By default, Remote Desktop Services allows this COM port redirection.\r\n\r\nIf you enable this policy setting, users cannot redirect server data to the local COM port.\r\n\r\nIf you disable this policy setting, Remote Desktop Services always allows COM port redirection.\r\n\r\nIf you do not configure this policy setting, COM port redirection is not specified at the Group Policy level. \r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-com"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_com_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_com_1","displayName":"Enabled","description":null,"helpText":null}]},"b3210e6466c5da15":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype_ts_fallback_options","displayName":"When attempting to find a suitable driver:","description":"\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":[],"categoryId":"f1455024-7de9-448f-8d8f-a42db2af0a35","categoryName":"Printer Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype_ts_fallback_options_1","displayName":"Do nothing if one is not found.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype_ts_fallback_options_2","displayName":"Default to PCL if one is not found.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype_ts_fallback_options_3","displayName":"Default to PS if one is not found.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype_ts_fallback_options_4","displayName":"Show both PCL and PS if one is not found.","description":null,"helpText":null}]},"b3f1397e63561887":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_smart_card","displayName":"Do not allow smart card device redirection","description":"This policy setting allows you to control the redirection of smart card devices in a Remote Desktop Services session.\r\n\r\nIf you enable this policy setting, Remote Desktop Services users cannot use a smart card to log on to a Remote Desktop Services session.\r\n\r\nIf you disable or do not configure this policy setting, smart card device redirection is allowed. By default, Remote Desktop Services automatically redirects smart card devices on connection.\r\n\r\nNote: The client computer must be running at least Microsoft Windows 2000 Server or at least Microsoft Windows XP Professional and the target server must be joined to a domain.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-smart-card"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_smart_card_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_smart_card_1","displayName":"Enabled","description":null,"helpText":null}]},"b320d844f7f96940":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access","displayName":"Microsoft Access 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Access 2013.\r\nBy default, the user settings of Microsoft Access 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Access 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013access"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access_1","displayName":"Enabled","description":null,"helpText":null}]},"b3d80ac9c1734e89":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-intranetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"b3935511bd76e389":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_browserswitcherdelay","displayName":"Delay before launching alternative browser (milliseconds): (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"b38cbf3dc8261615":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled","displayName":"Enable the default search provider","description":"Setting the policy to Enabled means a default search is performed when a user enters non-URL text in the address bar. To specify the default search provider, set the rest of the default search policies. If you leave those policies empty, the user can choose the default provider. Setting the policy to Disabled means there's no search when the user enters non-URL text in the address bar.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, the default search provider is on, and users can set the search provider list.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b3c7ad28fd700312":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode","displayName":"Choose how to specify proxy server settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_0","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_1","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_2","displayName":"Manually specify proxy settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_3","displayName":"Use system proxy settings","description":null,"helpText":null}]},"b323d4df0b70d257":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist","displayName":"Block access to a list of URLs","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},"b3e2f086e7d31ffe":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist","displayName":"Configure native messaging allowlist","description":"Setting the policy specifies which native messaging hosts aren't subject to the deny list. A deny list value of * means all native messaging hosts are denied, unless they're explicitly allowed.\r\n\r\nAll native messaging hosts are allowed by default. But, if all native messaging hosts are denied by policy, the admin can use the allow list to change that policy.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"895e0884-6b60-4bb0-b2ab-3a1642103db7","categoryName":"Native Messaging","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"b37093b58d581538":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins","displayName":"Specify a list of disabled plugins","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"b3d2fe5061d281e3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcenetworkinprocess","displayName":"Force networking code to run in the browser process","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcenetworkinprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcenetworkinprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"b3949d448179bc5c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"b3a64ec9475aa887":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings","displayName":"Settings for Google's AI Mode integrations in the address bar and New Tab page search box. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings_0","displayName":"Allow AI Mode integrations.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings_1","displayName":"Do not allow AI Mode integrations.","description":null,"helpText":null}]},"b3d5c8e635876ca0":{"id":"device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage","displayName":"Disable Cellular Operator Settings Page (Windows Insiders only)","description":"This policy makes all configurable settings in the 'Cellular' > 'Mobile operator settings' page read-only.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#disablecellularoperatorsettingspage"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"b34e2980327654af":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallownetframeworkreliantcomponents"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"b3de143b2200bd67":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"b3fa5246a0817b51":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'Open new tab' (5).\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'Restore the last session' (1). The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'Open a list of URLs' (4).\r\n\r\nDisabling this setting is equivalent to leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\n* 1 = Restore the last session\r\n\r\n* 4 = Open a list of URLs\r\n\r\n* 5 = Open a new tab","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b3453f61dacfdbd1":{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode","description":"This policy lets you specify a list of extension IDs that must be explicitly allowed by the user to run in InPrivate mode in order to enable InPrivate browsing.\r\n\r\nIf users do not allow all listed extensions to run in InPrivate mode, they will be unable to navigate using InPrivate.\r\n\r\nIf any extension in the list is not installed, InPrivate navigation is blocked.\r\n\r\nThis policy only applies when InPrivate mode is enabled. If InPrivate mode is disabled using the InPrivateModeAvailability policy, this policy has no effect.\r\n\r\nExample value:\r\n\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_1","displayName":"Enabled","description":null,"helpText":null}]},"b3ffdc9ce0dba276":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync","displayName":"Force synchronization of browser data and do not show the sync consent prompt","description":"Forces data synchronization in Microsoft Edge. This policy also prevents the user from turning sync off.\r\n\r\nIf you don't configure this policy, users will be able to turn sync on or off. If you enable this policy, users will not be able to turn sync off.\r\n\r\nFor this policy to work as intended,\r\n'BrowserSignin' (Browser sign-in settings) policy must not be configured, or must be set to enabled. If 'ForceSync' (Force synchronization of browser data and do not show the sync consent prompt) is set to disabled, then 'BrowserSignin' will not take affect.\r\n\r\n'SyncDisabled' (Disable synchronization of data using Microsoft sync services) must not be configured or must be set to False. If this is set to True, 'ForceSync' will not take affect.\r\n\r\n0 = Do not automatically start sync and show the sync consent (default)\r\n1 = Force sync to be turned on for Azure AD/Azure AD-Degraded user profile and do not show the sync consent prompt","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync_1","displayName":"Enabled","description":null,"helpText":null}]},"b304aeee7acd7086":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_excelexe183","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_excelexe183_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_excelexe183_1","displayName":"True","description":null,"helpText":null}]},"b3d48785506b53b9":{"id":"device_vendor_msft_policy_config_settings_allowpowersleep","displayName":"Allow Power Sleep","description":"Allows the user to change power and sleep settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowpowersleep"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowpowersleep_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowpowersleep_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"b3293fb0a4ae955f":{"id":"device_vendor_msft_windowsbackupandrestore_enablewindowsrestore","displayName":"Enable Windows Restore","description":"Sets a policy to enable Windows Restore.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsBackupAndRestore-csp/"],"categoryId":"a3ec7cde-bca6-4e3e-9f7e-f66a43196924","categoryName":"Windows Backup And Restore","options":[{"id":"device_vendor_msft_windowsbackupandrestore_enablewindowsrestore_false","displayName":"Windows Restore Not Configured","description":"Windows Restore Not Configured","helpText":null},{"id":"device_vendor_msft_windowsbackupandrestore_enablewindowsrestore_true","displayName":"Windows Restore Enabled","description":"Windows Restore Enabled","helpText":null}]},"b359f28ba3736cca":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"b3d69d1d9f0586c6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_datecolon80","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"b332d403cf9d44ff":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3","displayName":"Hyperlink color (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cbb98485-6a36-47b8-b450-7821e08507ac","categoryName":"Web Options - General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_1","displayName":"Maroon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_2","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_3","displayName":"Olive","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_4","displayName":"Dark Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_5","displayName":"Violet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_6","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_7","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_8","displayName":"Silver","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_9","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_10","displayName":"Bright Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_11","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_12","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_13","displayName":"Fuchsia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_14","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_15","displayName":"White","description":null,"helpText":null}]},"b31d15b89453ca78":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noservices","displayName":"Go directly to Components Wizard (User)","description":"Prevents users from using Add or Remove Programs to configure installed services.\r\n\r\nThis setting removes the \"Set up services\" section of the Add/Remove Windows Components page. The \"Set up services\" section lists system services that have not been configured and offers users easy access to the configuration tools.\r\n\r\nIf you disable this setting or do not configure it, \"Set up services\" appears only when there are unconfigured system services. If you enable this setting, \"Set up services\" never appears.\r\n\r\nThis setting does not prevent users from using other methods to configure services.\r\n\r\nNote: When \"Set up services\" does not appear, clicking the Add/Remove Windows Components button starts the Windows Component Wizard immediately. Because the only remaining option on the Add/Remove Windows Components page starts the wizard, that option is selected automatically, and the page is bypassed.\r\n\r\nTo remove \"Set up services\" and prevent the Windows Component Wizard from starting, enable the \"Hide Add/Remove Windows Components page\" setting. If the \"Hide Add/Remove Windows Components page\" setting is enabled, this setting is ignored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noservices"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noservices_1","displayName":"Enabled","description":null,"helpText":null}]},"b3722a18ee7cdb74":{"id":"user_vendor_msft_policy_config_admx_startmenu_cleartilesonexit","displayName":"Clear tile notifications during log on (User)","description":"If you enable this setting, the system deletes tile notifications when the user logs on. As a result, the Tiles in the start view will always show their default content when the user logs on. In addition, any cached versions of these notifications will be cleared when the user logs on.\r\n\r\nIf you disable or do not configure this setting, the system retains notifications, and when a user logs on, the tiles appear just as they did when the user logged off, including the history of previous notifications for each tile.\r\n\r\nThis setting does not prevent new notifications from appearing. See the \"Turn off Application Notifications\" setting to prevent new notifications.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-cleartilesonexit"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_cleartilesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_cleartilesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"b31b6a206ff0bcd0":{"id":"user_vendor_msft_policy_config_admx_taskbar_noballoonfeatureadvertisements","displayName":"Turn off feature advertisement balloon notifications (User)","description":"This policy setting allows you to turn off feature advertisement balloon notifications.\r\n\r\nIf you enable this policy setting, certain notification balloons that are marked as feature advertisements are not shown.\r\n\r\nIf you disable do not configure this policy setting, feature advertisement balloons are shown.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-noballoonfeatureadvertisements"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_noballoonfeatureadvertisements_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_noballoonfeatureadvertisements_1","displayName":"Enabled","description":null,"helpText":null}]},"b37f72fcfb6cfaec":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_disabledpluginsdesc","displayName":"List of disabled plugins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"b362a7b7d0aa63fd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls_pluginsallowedforurlsdesc","displayName":"Allow the Flash plugin on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"b39a3fccca50beee":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_windowplacementallowedforurlsdesc","displayName":"Allow Window Placement permission on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"b396c4e208a6ea1e":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"b318785024e42e75":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"b3b7a645c52c476e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended","displayName":"Allow importing of search engine settings (User)","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\r\n\r\nIf you enable, this policy, the option to import search engine settings is automatically selected.\r\n\r\nIf you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b32ed6a4efdf82bf":{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc","displayName":"List of origins that allow all HTTP authentication (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"b3e1944c9b8b603a":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites_javascriptoptimizerallowedforsitesdesc","displayName":"Allow JavaScript optimization on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"b32a133ee26ed4b0":{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode","displayName":"Configure when efficiency mode should become active (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_4","displayName":"When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_5","displayName":"When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null}]},"b3faa62df4691b87":{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_securitysettings_l_basicauthpromptbehavior_l_authenticationbasicauthenabledhostsid","displayName":"Host names: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"b32bf328841098fb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastserviceserverterms2","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"b3105dd2fcb7aa36":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome2_l_home2adreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"b39ca0a53a73490f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishsingapore","displayName":"English (Singapore) (User)","description":"Enables the editing language English (Singapore)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishsingapore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishsingapore_1","displayName":"Enabled","description":null,"helpText":null}]},"b349d7cdb98ffb52":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_l_workflowpath454","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"b3c727544ee8d9d5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache8_l_workflowpath464","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"b3544aee3da56048":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey12_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"b384e9fc979781d5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_enablecolleagueimportoutlookaddintowork","displayName":"Enable Colleague Import Outlook Add-in to work with Microsoft SharePoint Server (User)","description":"This setting will enable the Colleague Import Outlook Add-in.","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_enablecolleagueimportoutlookaddintowork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_enablecolleagueimportoutlookaddintowork_1","displayName":"Enabled","description":null,"helpText":null}]},"b37677ea8cfdd75c":{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_mailtipsbardisplayoption","displayName":"MailTips bar display options (User)","description":"\r\n This policy setting controls MailTips bar display options. If the \"Disable MailTips\" policy is also enabled, this policy takes precedence.\r\n\r\n If you enable this policy setting, you can choose from three options for determining how the MailTips bar will display:\r\n\r\n - Display automatically when MailTips apply\r\n - Display at all times\r\n - Never Display MailTips\r\n\r\n If you disable or do not configure this policy setting, users can choose how the MailTips bar will display.\r\n ","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_mailtipsbardisplayoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_mailtipsbardisplayoption_1","displayName":"Enabled","description":null,"helpText":null}]},"b39b9437c8142d4f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_specifyofflineaddressbookpath","displayName":"Specify Offline Address Book path (User)","description":"This policy setting allows you to specify a path to save the Offline Address Book. This policy setting will apply to all Microsoft Exchange accounts.\r\n\r\nIf you enable this policy setting, you may specify a path to save the Offline Address Book.\r\n\r\nIf you disable or do not configure this policy setting, Outlook will save the Offline Address Book in %LOCALAPPDATA%\\Microsoft\\Outlook.","helpText":"","infoUrls":[],"categoryId":"ff87ffcb-a827-4d2b-90fc-e5789ef6d3e0","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_specifyofflineaddressbookpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_l_specifyofflineaddressbookpath_1","displayName":"Enabled","description":null,"helpText":null}]},"b3588b4836a7f143":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbooklimitnumberofincrementaloabdownloads","displayName":"Offline Address Book: Limit number of incremental OAB downloads (User)","description":"This policy setting allows you to specify the number of incremental download attempts of the offline address book (OAB) allowed in a 13 hour period.\r\n\r\nIf you enable this policy setting, you may specify the number of incremental download attempts of the offline address book (OAB) allowed in a 13 hour period. If you set the value to 0, then no incremental download attempts are allowed. If you set the value to the maximum of 65535, then that will allow an unlimited number of incremental OAB download attempts.\r\n\r\nIf you disable or do not configure this policy setting, an unlimited number of incremental OAB download attempts of the OAB will be allowed.","helpText":"","infoUrls":[],"categoryId":"e35a83ff-7c5b-48d4-9ba3-a57849c6b5f5","categoryName":"Offline Address Book","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbooklimitnumberofincrementaloabdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbooklimitnumberofincrementaloabdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"b3364d7de30f723f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjaddspace","displayName":"Add space before label (User)","description":"Adds a space between numbers and time unit labels.\r\n \r\nIf you enable this setting, a space is displayed between numbers and the time unit label.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjaddspace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjaddspace_1","displayName":"Enabled","description":null,"helpText":null}]},"b3e22730f5d512dc":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems2_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"907fd656-2a80-4f34-8615-a3acb11a2b95","categoryName":"Custom","options":null},"b38e5d27c8da9b92":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation","displayName":"Check for accessibility issues while editing (User)","description":"This policy setting controls whether accessibility issues are checked for automatically while the user is editing a document. By default, accessibility issues aren’t checked for automatically.\r\n\r\nIf you enable this policy setting, accessibility issues are checked for automatically and users won’t be able to turn it off. The status bar will indicate if accessibility recommendations are available to make the document more usable by people with disabilities.\r\n\r\nIf you disable or don’t configure this policy setting, accessibility issues won’t be checked for automatically while editing a document. Users can turn on automatic checking by going to File > Options > Ease of Access.\r\n","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"b363c54aa80af1b0":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_localaddressranges","displayName":"Local Address Ranges","description":"List of local addresses covered by the rule. Valid tokens include:​\r\n\r\n\"*\" indicates any local address. If present, this must be the only token included.\r\nA subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask nor a network prefix is specified, the subnet mask defaults to 255.255.255.255.​​\r\nA valid IPv6 address.​​\r\nAn IPv4 address range in the format of \"start address - end address\" with no spaces included, where the start address is less than the end address.​​\r\nAn IPv6 address range in the format of \"start address - end address\" with no spaces included, where the start address is less than the end address.\r\n\r\nIf not specified, the default is \"Any address.\"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/b4.json b/public/intune-definitions/b4.json new file mode 100644 index 000000000000..9540025e3182 --- /dev/null +++ b/public/intune-definitions/b4.json @@ -0,0 +1 @@ +{"b4546a881c446eff":{"id":"com.apple.directoryservice.managed_adcreatemobileaccountatlogin","displayName":"AD Create Mobile Account At Login","description":"If true, creates a mobile account at login.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adcreatemobileaccountatlogin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adcreatemobileaccountatlogin_true","displayName":"True","description":null,"helpText":null}]},"b40129be7ec23646":{"id":"com.apple.dnssettings.managed_dnssettings","displayName":"DNS Settings","description":"A dictionary that defines a configuration for an encrypted DNS server.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"b43e97dd6629f04d":{"id":"com.apple.extensiblesso_platformsso_authorizationgroups_group","displayName":"Group (Deprecated)","description":"The group to use for the Authorization Right.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"b474637b370d6080":{"id":"com.apple.loginwindow_loginwindowtext","displayName":"Login Window Text","description":"The text to display in the Login Window.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":null},"b4f5c656a2f41034":{"id":"com.apple.managedclient.preferences_kfmsilentoptindesktop","displayName":"Include ~/Desktop in Folder Backup (Known Folder Move)","description":null,"helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#kfmsilentoptin"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_kfmsilentoptindesktop_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_kfmsilentoptindesktop_true","displayName":"True","description":null,"helpText":null}]},"b4cc38fc96cef379":{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurekeyboardshortcuts","displayName":"Configure the list of commands for which to disable keyboard shortcuts","description":"Configure the list of Microsoft Edge commands for which keyboard shortcuts must be disabled.\n\nSee https://go.microsoft.com/fwlink/?linkid=2186950 for a list of possible commands to disable.\n\nIf you enable this policy, commands in the 'disabled' list are no longer activated by keyboard shortcuts.\n\nIf you disable this policy, all keyboard shortcuts behave as usual.\n\nNote: Disabling a command only removes its shortcut mapping. Commands in the 'disabled' list still function if accessed via browser UI.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"b4e5c1f5dbdc8a47":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationwindowopenheightadjustment","displayName":"Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages","description":"This setting lets you specify a custom adjustment to the height of popup windows generated via window.open from the Internet Explorer mode site.\n\nIf you configure this policy, Microsoft Edge will add the adjustment value to the height, in pixels. The exact difference depends on the UI configuration of both IE and Edge, but a typical difference is 5.\n\nIf you disable or don't configure this policy, Microsoft Edge will treat IE mode window.open the same as Edge mode window.open in window height calculations.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"b487c4b69d7d345b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_recommended","displayName":"Enable Windows to search local Microsoft Edge browsing data (users can override)","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\n\nIf you enable this policy or don't configure it, Microsoft Edge publishes local browsing data to the Windows Indexer.\n\nIf you disable this policy, Microsoft Edge won't share data to the Windows Indexer.\n\nNote that if you disable this policy, Microsoft Edge removes the data shared with Windows on the device and stops sharing any new browsing data.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"b47040ecaf11eb20":{"id":"com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice","displayName":"Enable resolution of navigation errors using a web service","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\n\nIf you enable this policy, a web service is used for network connectivity tests.\n\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\n\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\n\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice_true","displayName":"Enabled","description":null,"helpText":null}]},"b4ba35c16571b850":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabsblockedforurls","displayName":"Block sleeping tabs on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to be put to sleep by sleeping tabs. Sites in this list are also excluded from other performance optimizations like efficiency mode and tab discard.\n\nIf the policy \"SleepingTabsEnabled\" is disabled, this list isn't used and no sites are put to sleep automatically.\n\nIf you don't configure this policy, all sites are eligible to be put to sleep unless the user's personal configuration blocks them.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":null},"b42395cdabae0bc1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC","description":"This policy controls the use of post-quantum key agreement for WebRTC in Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge will offer post-quantum key agreement for WebRTC.\n\nIf you disable this policy, post-quantum key agreement won't be offered for WebRTC.\n\nIf you don't configure this policy, post-quantum key agreement won't be offered for WebRTC. A future version of Microsoft Edge may enable this feature by default.\n\nOffering a post-quantum key agreement is backwards compatible. Existing datagram transport layer security (DTLS) peers and networking middleware are expected to ignore the new option and continue using previous options.\n\nHowever, devices that don't correctly implement DTLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or larger message sizes. Such devices aren’t post-quantum-ready and may interfere with an organization's post-quantum transition. If this issue occurs, administrators should contact the device vendor for a fix.\n\nThis policy is temporary and will be removed in a future release.","helpText":null,"infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtcpostquantumkeyagreement_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtcpostquantumkeyagreement_true","displayName":"Enabled","description":null,"helpText":null}]},"b4d62b86223cf3a0":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_excludedidlist","displayName":"Excluded Devices","description":"The group(s) that the policy will not be applied to.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"b443cc6e78629aa1":{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassr2l","displayName":"Remote Link to Local Target","description":null,"helpText":"","infoUrls":[],"categoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","categoryName":"Filesystem","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassr2l_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassr2l_1","displayName":"True","description":null,"helpText":null}]},"b4545e27233b355d":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_legacy_rfx","displayName":"Enable RemoteFX encoding for RemoteFX clients designed for Windows Server 2008 R2 SP1","description":"This policy setting allows you to configure graphics encoding to use the RemoteFX Codec on the Remote Desktop Session Host server so that the sessions are compatible with non-Windows thin client devices designed for Windows Server 2008 R2 SP1. These clients only support the Windows Server 2008 R2 SP1 RemoteFX Codec.If you enable this policy setting, users' sessions on this server will only use the Windows Server 2008 R2 SP1 RemoteFX Codec for encoding. This mode is compatible with thin client devices that only support the Windows Server 2008 R2 SP1 RemoteFX Codec.If you disable or do not configure this policy setting, non-Windows thin clients that only support the Windows Server 2008 R2 SP1 RemoteFX Codec will not be able to connect to this server. This policy setting applies only to clients that are using Remote Desktop Protocol (RDP) 7.1, and does not affect clients that are using other RDP versions.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-server-legacy-rfx"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_legacy_rfx_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_legacy_rfx_1","displayName":"Enabled","description":null,"helpText":null}]},"b472f67ac523cf9e":{"id":"device_vendor_msft_policy_config_applicationmanagement_allowappstoreautoupdate","displayName":"Allow apps from the Microsoft app store to auto update","description":"Specifies whether automatic update of apps from Microsoft Store are allowed. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#allowappstoreautoupdate"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_allowappstoreautoupdate_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowappstoreautoupdate_1","displayName":"Allowed.","description":"Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowappstoreautoupdate_2","displayName":"Not configured.","description":"Not configured.","helpText":null}]},"b44fcd1d4b5ae95b":{"id":"device_vendor_msft_policy_config_browser_allowcookies","displayName":"Allow Cookies","description":"This setting lets you configure how your company deals with cookies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowcookies"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowcookies_0","displayName":"Block all cookies from all sites","description":"Block all cookies from all sites","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowcookies_1","displayName":"Block only cookies from third party websites","description":"Block only cookies from third party websites","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowcookies_2","displayName":"Allow all cookies from all sites","description":"Allow all cookies from all sites","helpText":null}]},"b46401c125250d35":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"b44e609287be0fd8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors","displayName":"Require online OCSP/CRL checks for local trust anchors","description":"Setting the policy to True means Google Chrome always performs revocation checking for successfully validated server certificates signed by locally installed CA certificates. If Google Chrome can't get revocation status information, Google Chrome treats these certificates as revoked (hard-fail).\r\n\r\nSetting the policy to False or leaving it unset means Google Chrome uses existing online revocation-checking settings.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"b4f9fd888adbcb41":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls","displayName":"Allow WebUSB on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a USB device.\r\n\r\nLeaving the policy unset means DefaultWebUsbGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with WebUsbAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b46b3c220d58503c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_remoteaccesshosttalkgadgetprefix","displayName":"Configure the TalkGadget prefix for remote access hosts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"b45449ffcc3a79ff":{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_allow_list","displayName":"Allowed Instance IDs","description":"","helpText":"","infoUrls":[],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"b4ee484595248559":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval","displayName":"Locked Retry Interval","description":"Specifies the number of seconds to wait between retries. The default value is 5 seconds which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\LockedRetryInterval\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"b486444e1140b8cd":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize","displayName":"VHDX Sector Size","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nThis setting is only applicable if the virtual disk type is VHDX\r\n\r\nNOTE: The default is the sytem default which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDXSectorSize\r\nType: DWORD\r\nValues: 0 = System Default, 512, 4096","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_1","displayName":"Enabled","description":null,"helpText":null}]},"b4033c4eb7f5a5d1":{"id":"device_vendor_msft_policy_config_internetexplorer_disablecrashdetection","displayName":"Turn off Crash Detection","description":"This policy setting allows you to manage the crash detection feature of add-on Management.\n\nIf you enable this policy setting, a crash in Internet Explorer will exhibit behavior found in Windows XP Professional Service Pack 1 and earlier, namely to invoke Windows Error Reporting. All policy settings for Windows Error Reporting continue to apply.\n\nIf you disable or do not configure this policy setting, the crash detection feature for add-on management will be functional.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecrashdetection"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablecrashdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecrashdetection_1","displayName":"Enabled","description":null,"helpText":null}]},"b4d706c29b602432":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"b4117845a3ce8a65":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers","displayName":"Network Security Restrict NTLM Outgoing NTLM Traffic To Remote Servers","description":"Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers This policy setting allows you to deny or audit outgoing NTLM traffic from this Windows 7 or this Windows Server 2008 R2 computer to any Windows remote server. If you select \"Allow all\" or do not configure this policy setting, the client computer can authenticate identities to a remote server by using NTLM authentication. If you select \"Audit all,\" the client computer logs an event for each NTLM authentication request to a remote server. This allows you to identify those servers receiving NTLM authentication requests from the client computer. If you select \"Deny all,\" the client computer cannot authenticate identities to a remote server by using NTLM authentication. You can use the \"Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication\" policy setting to define a list of remote servers to which clients are allowed to use NTLM authentication. This policy is supported on at least Windows 7 or Windows Server 2008 R2. Note: Audit and block events are recorded on this computer in the \"Operational\" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_0","displayName":"Allow all","description":"Allow all","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_1","displayName":"Deny all domain accounts","description":"Deny all domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_2","displayName":"Deny all accounts","description":"Deny all accounts","helpText":null}]},"b481733ae4f686ea":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles","displayName":"Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads","description":"This policy lets you determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads.\r\n\r\nIf you enable this policy, users in your organization can't ignore Microsoft Defender SmartScreen warnings, and they're prevented from completing the unverified downloads.\r\n\r\nIf you disable or don't configure this policy, users can ignore Microsoft Defender SmartScreen warnings and complete unverified downloads.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"b4c55ddd4e63d9fe":{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\r\n\r\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b45c7e0ebdc18c0b":{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_originkeyedprocessesenabled_recommended","displayName":"Enable origin-keyed process isolation for improved security","description":"This policy enables origin-keyed process isolation for most pages, which improves security by separating content from different origins into distinct processes. This may increase the number of processes created. Users can override this setting by using command-line flags or edge://flags to turn the feature on or off.\r\n\r\nIf you enable this policy, most origins will be isolated, even from other origins within the same site. For related configuration, see the IsolateOrigins and SitePerProcess policies.\r\n\r\nIf you disable this policy, origins will not be isolated from the rest of their site unless the origin explicitly requests isolation.\r\n\r\nIf you don’t configure this policy, the browser will decide which origins to isolate and when. By default, this feature is disabled. The default state may change in the future.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_originkeyedprocessesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_originkeyedprocessesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b4e1a8dc8ba03f70":{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled","displayName":"Enable RAM (memory) resource controls","description":"This policy controls whether users can access the RAM (memory) resource control feature. This feature lets users set an individual limit on how much RAM (memory) the browser can use.\r\n\r\nTo set a specific memory limit, use the 'TotalMemoryLimitMb' (Set limit on megabytes of memory a single Microsoft Edge instance can use) policy.\r\n\r\nIf you enable or don't configure this policy, users can enable resource control and set the amount of RAM that Microsoft Edge can use. Browser performance may be affected by low limits.\r\n\r\nIf you disable this policy, users can't use resource control.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b4d4d8e230e554b8":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_userincontroloftheseapps","displayName":"Let Apps Access Account Info User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the account information privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessaccountinfo_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"b4ac6c5a841e4088":{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_forceallowtheseapps","displayName":"Let Apps Get Diagnostic Info Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed to get diagnostic information about other apps, including user names. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"b4a6ab375600a9d0":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_endtime","displayName":"End time","description":null,"helpText":null,"infoUrls":[],"categoryId":"3ccd987e-bfca-4838-98ea-576de34b3ebe","categoryName":"Certain Hours","options":null},"b4d47f36b0a4c58a":{"id":"device_vendor_msft_policy_config_settings_allowyouraccount","displayName":"Allow Your Account","description":"Allows user to change account settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowyouraccount"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowyouraccount_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowyouraccount_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"b4abd1bcb5f8aae6":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog","displayName":"Disable the send-a-smile feature","description":"This policy disables the Visual Studio send-a-smile feature.","helpText":"","infoUrls":[],"categoryId":"802f3065-0bf1-4578-9d6d-ab1ef02db3ec","categoryName":"Feedback Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog_1","displayName":"Enabled","description":null,"helpText":null}]},"b45a4960860cb34d":{"id":"device_vendor_msft_policy_config_winre_quickmachinerecovery_allowautoremediation","displayName":"Allow auto remediation","description":"","helpText":null,"infoUrls":[],"categoryId":"cba65aaf-9580-4729-89b3-a814b74d2193","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_winre_quickmachinerecovery_allowautoremediation_1","displayName":"On","description":"On","helpText":null},{"id":"device_vendor_msft_policy_config_winre_quickmachinerecovery_allowautoremediation_0","displayName":"Off","description":"Off","helpText":null}]},"b4effe1372a14361":{"id":"safari_allowsummary","displayName":"Allow Summary","description":"If `false`, the system disables summarization of content in Safari.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_allowsummary_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowsummary_true","displayName":"Allowed","description":null,"helpText":null}]},"b484823364656132":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_indexingservice","displayName":"Indexing Service (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-indexingservice"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_indexingservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_indexingservice_1","displayName":"Enabled","description":null,"helpText":null}]},"b4c2b645f487ceba":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_lbl_syncatsuspendcombo","displayName":"Action: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_lbl_syncatsuspendcombo_0","displayName":"Quick","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_lbl_syncatsuspendcombo_1","displayName":"Full","description":null,"helpText":null}]},"b4e34e4fbc05d88a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"b4109a49c3ed6791":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled","displayName":"Use out-of-process iframe PDF Viewer (User)","description":"Controls whether the PDF viewer in Google Chrome uses an out-of-process iframe (OOPIF). This will be the new PDF viewer architecture in the future, as it is simpler and makes adding new features easier. The existing GuestView PDF viewer is an outdated, complex architecture that is being deprecated.\r\n\r\nWhen this policy is set to Enabled or not set, Google Chrome will be able to use the OOPIF PDF viewer architecture. Once Enabled or not set, the default behavior will be decided by Google Chrome.\r\n\r\nWhen this policy is set to Disabled, Google Chrome will strictly use the existing GuestView PDF viewer. It embeds a web page with a separate frame tree into another web page.\r\n\r\nThis policy will be removed in the future, after the OOPIF PDF viewer feature has fully rolled out.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b40a27a97318a7fd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled","displayName":"Specifies whether to apply restrictions to requests to more-private network endpoints (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b433225fa7d741e7":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowuserdatapersistence"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"b46a9a97f8095379":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowfontdownloads"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"b4ca857b6b3ef6b3":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains","displayName":"Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings (User)","description":"Configure the list of Microsoft Defender SmartScreen trusted domains. This means:\r\nMicrosoft Defender SmartScreen won't check for potentially malicious resources like phishing software and other malware if the source URLs match these domains.\r\nThe Microsoft Defender SmartScreen download protection service won't check downloads hosted on these domains.\r\n\r\nIf you enable this policy, Microsoft Defender SmartScreen trusts these domains.\r\nIf you disable or don't set this policy, default Microsoft Defender SmartScreen protection is applied to all resources.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender Advanced Threat Protection. You must configure your allow and block lists in Microsoft Defender Security Center instead.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"b4a6a71bfe8d4686":{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains","displayName":"Configure the list of domains where Microsoft Edge scareware blocker won't run (User)","description":"This policy configures the list of trusted domains for Microsoft Edge scareware blocker. When a website's source URL matches any domain in this list, Edge scareware blocker won’t analyze that site.\r\n\r\nThis policy takes effect only if the ScarewareBlockerProtectionEnabled policy is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge scareware blocker will trust the specified domains.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge scareware blocker will analyze all sites.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"b4f256d52f0acbc9":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantfirstrunexperienceadminchoice","displayName":"Writing Assistance First Run Experience Mode (User)","description":"This policy setting controls the Writing Assistance first run experience (FRE).If you enable this policy setting, choose one of the following options:Skip FRE entirely - Writing Assistance marks the first run experience as completed without showing it.Informational only - Writing Assistance shows the first run experience once without requiring user approval or sign-in. The experience is marked completed immediately, uses Next on page 1 and Okay on page 2, removes No Thanks, and is still completed if the user dismisses it.Approval required - Writing Assistance keeps the existing approval-required first run experience behavior.If you disable or don’t configure this policy setting, Writing Assistance uses the existing default first run experience behavior.Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for Enterprise.","helpText":"","infoUrls":[],"categoryId":"05a6f86f-dab7-4888-97a1-db3457f00974","categoryName":"Writing Assistance","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantfirstrunexperienceadminchoice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_writingassistance_l_writingassistantfirstrunexperienceadminchoice_1","displayName":"Enabled","description":null,"helpText":null}]},"b417327d262f832d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05","displayName":"Configure presentation service in PowerPoint and Word 6 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_1","displayName":"Enabled","description":null,"helpText":null}]},"b44a0dd78429b39b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_disabledocumentinformationpanel","displayName":"Disable Document Information Panel (User)","description":"This policy setting controls whether Excel, PowerPoint, and Word users can view document information in the Document Information Panel.The Document Information Panel replaces the modal Properties dialog box in earlier versions of Excel, PowerPoint, and Word, and allows users to view and edit metadata that is associated with the document. Office 2016 developers can create custom Document Information Panels to record a variety of information relevant to the document or the organization. \r\n\r\nIf you enable this policy setting, forms and controls do not display in the Document Information Panel. The panel itself will display when users open it, but it will be blank. \r\n\r\nIf you disable or do not configure this policy setting, users can view the Document Information Panel.","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_disabledocumentinformationpanel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_disabledocumentinformationpanel_1","displayName":"Enabled","description":null,"helpText":null}]},"b495a340fe082920":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kyrgyz","displayName":"Kyrgyz (User)","description":"Enables the editing language Kyrgyz","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kyrgyz_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kyrgyz_1","displayName":"Enabled","description":null,"helpText":null}]},"b4ae0b09aaa0225c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sinhala","displayName":"Sinhala (User)","description":"Enables the editing language Sinhala","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sinhala_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sinhala_1","displayName":"Enabled","description":null,"helpText":null}]},"b4b5ed9ae561a343":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey04","displayName":"Escrow Key #4 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey04_1","displayName":"Enabled","description":null,"helpText":null}]},"b4cb4228d949e65f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_l_allowsubfolders249","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_l_allowsubfolders249_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_l_allowsubfolders249_1","displayName":"True","description":null,"helpText":null}]},"b4d74219ad43d11a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationpowerpoint","displayName":"Don’t show the What’s New information for PowerPoint (User)","description":"This policy setting controls whether the What’s New information is shown when a user opens the desktop version of PowerPoint for the first time after PowerPoint has been updated with new features. By default, the What’s New information is shown.\r\n\r\nIf you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled.\r\n\r\nIf you disable or don’t configure this policy setting, the What’s New information is shown.\r\n\r\nNote: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio.\r\n ","helpText":"","infoUrls":[],"categoryId":"adf11731-7089-4e2e-8dde-4bd9ef86b067","categoryName":"What's New","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationpowerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationpowerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"b44ee224a7fe32c0":{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifywaitonsendtimeoutfordlpevaluation","displayName":"Specify wait time to evaluate sensitive content (User)","description":"This policy setting is used to define the waiting time for evaluating sensitive content in emails before a user can send them. Customize whether immediate email sending is allowed, sending is permitted after a specific wait time, or complete evaluation is required before sending. Regardless of the setting, the service will continue the evaluation in the background and take appropriate action based on the results, such as blocking delivery if necessary.\r\n\r\nIf you disable or do not configure this policy setting, emails will be sent right away without waiting for the final evaluation of the configured policies.\r\n\r\nIf you enable this policy setting, you can set a specific wait time, measured in seconds (in the range of 0-9999), before the \"Send Anyway\" button appears in the waiting dialog. This allows users to send the mail even before the policy evaluation is complete. \r\n\r\nPlease note that setting the wait time above 9999 indicates that users are not allowed to send the mail without evaluation. In such cases, the \"Send Anyway\" button will never be shown.","helpText":"","infoUrls":[],"categoryId":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","categoryName":"Compose Messages","options":[{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifywaitonsendtimeoutfordlpevaluation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifywaitonsendtimeoutfordlpevaluation_1","displayName":"Enabled","description":null,"helpText":null}]},"b4bb076a40c571e9":{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_smimedisabledataupload","displayName":"Block processing of S/MIME encrypted messages by certain connected experiences (User)","description":"\r\nThis policy controls whether certain connected experiences that analyze your content can process email messages with S/MIME encryption.\r\n\r\nIf you enable this policy setting, certain connected experiences that analyze your content can’t process email messages with S/MIME encryption. This means connected experiences such as the following won’t be available:\r\n\r\n-\tSpelling and grammar check (Editor)\r\n-\tSuggested replies\r\n-\tAutomatically apply or recommend sensitivity labels\r\n-\tMicrosoft Purview Data Loss Prevention policy tips\r\n\r\nFor more information about which connected experiences are affected, see https://go.microsoft.com/fwlink/p/?linkid=2268773.\r\n\r\nIf you disable or don’t configure this policy setting, all connected experiences that analyze your content can process email messages with S/MIME encryption.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_smimedisabledataupload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_smimedisabledataupload_1","displayName":"Enabled","description":null,"helpText":null}]},"b49016769143b05e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockexternalcontent","displayName":"Display pictures and external content in HTML e-mail (User)","description":"This policy setting setting controls whether Outlook downloads untrusted pictures and external content located in HTML e-mail messages without users explicitly choosing to download them. \r\n\r\nIf you enable this policy setting, Outlook will not automatically download content from external servers unless the sender is included in the Safe Senders list. Recipients can choose to download external content from untrusted senders on a message-by-message basis. \r\n\r\nIf you disable this policy setting, Outlook will display pictures and external content in HTML e-mail automatically.\r\n\r\nIf you do not configure this policy setting, Outlook does not download external content in HTML e-mail and RSS items unless the content is considered safe. Content that Outlook can be configured to consider safe includes: \r\n\r\n- Content in e-mail messages from senders and to recipients defined in the Safe Senders and Safe Recipients lists. \r\n- Content from Web sites in Internet Explorer's Trusted Sites security zone. \r\n- Content in RSS items. \r\n- Content from SharePoint Discussion Boards. Users can control what content is considered safe by changing the options in the \"Automatic Download\" section of the Trust Center. If Outlook's default blocking configuration is overridden, in the Trust Center or by some other method, Outlook will display external content in all HTML e-mail messages, including any that include Web beacons.","helpText":"","infoUrls":[],"categoryId":"a321fc04-d0cb-45ec-a6bf-51d60249922d","categoryName":"Automatic Picture Download Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockexternalcontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockexternalcontent_1","displayName":"Enabled","description":null,"helpText":null}]},"b435c006e4c4daec":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"b427666276221b8c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_typeandreplace","displayName":"Type and replace (User)","description":"This policy setting allows you to check or uncheck the \"Type and Replace\" checkbox found under File tab | Options | Advanced. This checkbox may only be shown when certain South East Asian languages, such as Thai or Vietnamese, are enabled.\r\n\r\nSouth Asian languages follow stringent grammatical rules that dictate which textual character elements are allowed next to one another in the composition of words. To compound the complexity of correctly entering South Asian characters, text includes both simple characters and characters that include one or more markings such as diacritics, tone marks, vowels, and accents— for example, in Thai, leading vowels are normally followed by a consonant that does or does not include vowel markings, but diacritics are located below it.\r\n\r\nTo assist you in correctly entering characters in your document that prescribe to the grammar rules for the enabled South Asian language, Word can automatically check the text for you. Word can also make logical substitutions for you by using Type and Replace, a complementary feature.\r\n\r\nSequence checking can be used by itself or in combination with Type and Replace. When sequence checking only is selected, Word will not allow an invalid character to be typed at the insertion point. If Type and Replace is also selected, Word will insert or replace an existing character to make a valid sequence.\r\n\r\nIf you enable or do not configure this policy setting, the \"Type and Replace\" checkbox is checked.\r\n\r\nIf you disable this policy setting, the \"Type and Replace\" checkbox is unchecked.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_typeandreplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_typeandreplace_1","displayName":"Enabled","description":null,"helpText":null}]},"b4a94ce266cde8fb":{"id":"vendor_msft_sharedpc_accountmodel","displayName":"Account Model","description":"Configures which type of accounts are allowed to use the PC. Allowed values: 0 (only guest), 1 (domain-joined only), 2 (domain-joined and guest). If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_accountmodel_0","displayName":"Guest","description":"Only guest accounts are allowed.","helpText":null},{"id":"vendor_msft_sharedpc_accountmodel_1","displayName":"Domain","description":"Only domain-joined accounts are allowed.","helpText":null},{"id":"vendor_msft_sharedpc_accountmodel_2","displayName":"Guest and Domain","description":"Domain-joined and guest accounts are allowed.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/b5.json b/public/intune-definitions/b5.json new file mode 100644 index 000000000000..6be22bdd3757 --- /dev/null +++ b/public/intune-definitions/b5.json @@ -0,0 +1 @@ +{"b5441b4e1f801627":{"id":"com.apple.dock_dblclickbehavior","displayName":"Double Click Behavior","description":"The behavior when the window's title bar is double-clicked.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_dblclickbehavior_0","displayName":"Minimize","description":null,"helpText":null},{"id":"com.apple.dock_dblclickbehavior_1","displayName":"Maximize","description":null,"helpText":null},{"id":"com.apple.dock_dblclickbehavior_2","displayName":"None","description":null,"helpText":null}]},"b5ef58db590d4cb3":{"id":"com.apple.dock_static-others_item_tile-data_url","displayName":"URL","description":"The URL string","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"b5aafa32a261f984":{"id":"com.apple.managedclient.preferences_addressbarworksearchresultsenabled","displayName":"Enable Work Search suggestions in the address bar","description":"Enables the display of relevant workplace suggestions in the address bar’s suggestion dropdown when users type a query in the address bar.\n\nIf this policy is enabled or not configured, users can view internal work-related suggestions, such as bookmarks, files, and people results powered by Microsoft 365, in the Microsoft Edge address bar suggestion dropdown. To access these results, users must be signed into Microsoft Edge with their Entra ID account associated with that organization.\n\nIf this policy is disabled, users will not see internal workplace results in the Microsoft Edge address bar suggestion dropdown.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#addressbarworksearchresultsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_addressbarworksearchresultsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_addressbarworksearchresultsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b576def03ad9a7fa":{"id":"com.apple.managedclient.preferences_authnegotiatedelegateallowlist","displayName":"Specifies a list of servers that Microsoft Edge can delegate user credentials to","description":"Configure the list of servers that Microsoft Edge can delegate to.\n\nSeparate multiple server names with commas. Wildcards (*) are allowed.\n\nIf you don't configure this policy Microsoft Edge won't delegate user credentials even if a server is detected as Intranet.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#authnegotiatedelegateallowlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"b5759a776d7ebe87":{"id":"com.apple.managedclient.preferences_enhancesecuritymodeoptoutuxenabled","displayName":"Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (Deprecated)","description":"This policy lets you manage whether the opt-out user experience for enhanced security mode is presented when ESM is turned on for Microsoft Edge.\n\nIf you enable or don't configure this policy, the UI for the opt-out user experience is on.\n\nIf you disable this policy, the UI for the opt-out user experience is off.\n\nNote: If this policy is used, only the User Interface for the opt-out experience is supressed - ESM is still turned on. For more information, see the \"EnhanceSecurityMode\" policy.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895.\n\nAfter careful evaluation, we have determined that this experimental opt-out UX is not required. As a result, this policy will be deprecated and stop working after Edge version 130.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enhancesecuritymodeoptoutuxenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enhancesecuritymodeoptoutuxenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enhancesecuritymodeoptoutuxenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b523ba37865416ad":{"id":"com.apple.managedclient.preferences_showdownloadstoolbarbutton","displayName":"Show Downloads button on the toolbar","description":"Set this policy to always show the Downloads button on the toolbar.\n\nIf you enable this policy, the Downloads button is pinned to the toolbar.\n\nIf you disable or don't configure the policy, the Downloads button isn't shown on the toolbar by default. Users can toggle the Downloads button in edge://settings/appearance.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showdownloadstoolbarbutton"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showdownloadstoolbarbutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showdownloadstoolbarbutton_true","displayName":"Enabled","description":null,"helpText":null}]},"b57dcfc3b1627a1f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeenhanceimagesenabled","displayName":"Enhance images enabled (Obsolete)","description":"The enhance images feature is deprecated and starting in Microsoft Edge version 122, this policy will be removed. Set whether Microsoft Edge can automatically enhance images to show you sharper images with better color, lighting, and contrast.\n\nIf you enable this policy or don't configure the policy, Microsoft Edge automatically enhances images on specific web applications.\n\nIf you disable this policy, Microsoft Edge doesn't enhance images.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeenhanceimagesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeenhanceimagesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b5843e664861eedb":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_7","displayName":"Configure log access (legacy)","description":"This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You must set both \"configure log access\" policy settings for this log in order to affect the both modern and legacy tools.\r\n\r\nIf you enable this policy setting, only those users matching the security descriptor can access the log.\r\n\r\nIf you disable this policy setting, all authenticated users and system services can write, read, or clear this log.\r\n\r\nIf you do not configure this policy setting, the previous policy setting configuration remains in effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-filelogaccess-7"],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_7_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_7_1","displayName":"Enabled","description":null,"helpText":null}]},"b5812dc11205d183":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshratedc","displayName":"Set Group Policy refresh interval for domain controllers","description":"This policy setting specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specified by this setting occur in addition to updates performed when the system starts.\r\n\r\nBy default, Group Policy on the domain controllers is updated every five minutes.\r\n\r\nIf you enable this setting, you can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the domain controller tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.\r\n\r\nIf you disable or do not configure this setting, the domain controller updates Group Policy every 5 minutes (the default). To specify that Group Policies for users should never be updated while the computer is in use, select the \"Turn off background refresh of Group Policy\" setting.\r\n\r\nThis setting also lets you specify how much the actual update interval varies. To prevent domain controllers with the same update interval from requesting updates simultaneously, the system varies the update interval for each controller by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that update requests overlap. However, updates might be delayed significantly.\r\n\r\nNote: This setting is used only when you are establishing policy for a domain, site, organizational unit (OU), or customized group. If you are establishing policy for a local computer only, the system ignores this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-grouppolicyrefreshratedc"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshratedc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshratedc_1","displayName":"Enabled","description":null,"helpText":null}]},"b5a4472ffef0cec6":{"id":"device_vendor_msft_policy_config_admx_logon_nowelcometips_2","displayName":"Do not display the Getting Started welcome screen at logon","description":"This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.\r\n\r\nIf you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.\r\n\r\nUsers can still display the welcome screen by selecting it on the Start menu or by typing \"Welcome\" in the Run dialog box.\r\n\r\nIf you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.\r\n\r\nThis setting applies only to Windows 2000 Professional. It does not affect the \"Configure Your Server on a Windows 2000 Server\" screen on Windows 2000 Server.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click \"Getting Started.\" To suppress the welcome screen without specifying a setting, clear the \"Show this screen at startup\" check box on the welcome screen.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-nowelcometips-2"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_nowelcometips_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_nowelcometips_2_1","displayName":"Enabled","description":null,"helpText":null}]},"b5264486c8a52f6d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_allowedapplications_exploitguard_controlledfolderaccess_allowedapplications_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":null},"b592e37c26332395":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynet_localsettingoverridespynetreporting","displayName":"Configure local setting override for reporting to Microsoft MAPS","description":"This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-spynet-localsettingoverridespynetreporting"],"categoryId":"09c02465-dc11-457e-9eac-19fc542e4cda","categoryName":"MAPS","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynet_localsettingoverridespynetreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynet_localsettingoverridespynetreporting_1","displayName":"Enabled","description":null,"helpText":null}]},"b5633303398dc31a":{"id":"device_vendor_msft_policy_config_admx_msdt_msdttooldownloadpolicy_msdttooldownloadpolicylevel","displayName":"Tool downloads allowed","description":null,"helpText":"","infoUrls":[],"categoryId":"f926f6e3-1bd6-4259-ae7c-e14108568882","categoryName":"Microsoft Support Diagnostic Tool","options":[{"id":"device_vendor_msft_policy_config_admx_msdt_msdttooldownloadpolicy_msdttooldownloadpolicylevel_1","displayName":"Remote troubleshooting only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msdt_msdttooldownloadpolicy_msdttooldownloadpolicylevel_2","displayName":"Local and remote troubleshooting","description":null,"helpText":null}]},"b52f5da9c0da2d03":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autosharewks","displayName":"MSS: (AutoShareWks) Enable Administrative Shares (recommended except for highly secure environments)","description":"MSS: (AutoShareWks) Enable Administrative Shares (recommended except for highly secure environments)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-autosharewks"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autosharewks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_autosharewks_1","displayName":"Enabled","description":null,"helpText":null}]},"b5316522002c51aa":{"id":"device_vendor_msft_policy_config_admx_userprofiles_cleanupprofiles_cleanupprofiles_days","displayName":"Delete user profiles older than (days)","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":null},"b57d406c27e2c32a":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_disableruntimefilepathrules","displayName":"Disable runtime file path rules","description":"Turning this off will disable FilePath rule protection of enforcing user-writeability and onlu allowing admin-writable locations.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_disableruntimefilepathrules_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_disableruntimefilepathrules_enabled","displayName":"Enabled","description":null,"helpText":null}]},"b50ca977f8fd1b01":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftstickynotes","displayName":"Microsoft Sticky Notes","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftstickynotes_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_microsoftstickynotes_1","displayName":"True","description":null,"helpText":null}]},"b5857ab605fe5314":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist","displayName":"Enable CORS check mitigations in the new CORS implementation","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_1","displayName":"Enabled","description":null,"helpText":null}]},"b57e5dcf603d3187":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls","displayName":"Block key generation on these sites","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b56272b83d3a78c8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled","displayName":"Enable PDF Annotations","description":"Controls if the PDF viewer in Google Chrome can annotate PDFs.\r\n\r\nWhen this policy is not set, or is set to true, then the PDF viewer will be able to annotate PDFs.\r\n\r\nWhen this policy is set to false, then the PDF viewer will not be able to annotate PDFs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b5ec9f5871b3784f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers","description":"Allows you to set whether Google Chrome\r\nwill run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\r\n\r\nDisabling JavaScript optimizations (by setting this policy's value to 2) will\r\nmean that Google Chrome may render web\r\ncontent more slowly.\r\n\r\nThis policy can be overridden for specific URL patterns using the JavaScriptOptimizerAllowedForSites and JavaScriptOptimizerBlockedForSites policies.\r\n\r\nIf this policy is left not set, JavaScript optimizations are enabled.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_1","displayName":"Enabled","description":null,"helpText":null}]},"b5d4a5b14cab8a70":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled","displayName":"Choose whether the Privacy Sandbox Ad topics setting can be disabled","description":"A policy to control whether the Privacy Sandbox Ad topics setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Ad topics setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Ad topics setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b5abd367190081d0":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"b5ec5ceab1fd73e7":{"id":"device_vendor_msft_policy_config_defender_schedulescanday","displayName":"Schedule Scan Day","description":"Selects the day that the Windows Defender scan should run. Note The scan type will depends on what scan type is selected in the Defender/ScanParameter setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#schedulescanday"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_schedulescanday_0","displayName":"Every day","description":"Every day","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_1","displayName":"Sunday","description":"Sunday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_2","displayName":"Monday","description":"Monday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_3","displayName":"Tuesday","description":"Tuesday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_4","displayName":"Wednesday","description":"Wednesday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_5","displayName":"Thursday","description":"Thursday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_6","displayName":"Friday","description":"Friday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_7","displayName":"Saturday","description":"Saturday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_8","displayName":"No scheduled scan","description":"No scheduled scan","helpText":null}]},"b553d239193373b2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface","displayName":"Driver Interface","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the driver interface.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\DriverInterface\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface_1","displayName":"Enabled","description":null,"helpText":null}]},"b5be0ea520a9bbad":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder","displayName":"Redirection XML Source Folder","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the path to a folder containing the XML file. If the folder contains a redirections.xml, it will be copied to the local profile and immediately used.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RedirXMLSourceFolder\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_1","displayName":"Enabled","description":null,"helpText":null}]},"b51dbaaab2e7d9fd":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister","displayName":"Clear Cache on Forced Unregister","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nIf the desired behavior is for the local cache to be deleted, even if the data has not been flushed to a CCD Location, then Clear Cache On Forced Unregister should be set to Enabled. Setting Clear Cache On Forced Unregister to Enabled may result in user data saved in the registry to be lost during the current session. It is important to understand that this data isn't recoverable if the local cache is cleared in this scenario. Verify that you understand the implications of changing the default value of this setting prior to making changes.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ClearCacheOnForcedUnregister\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister_1","displayName":"Enabled","description":null,"helpText":null}]},"b56b65289da4e6da":{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode","displayName":"Turn on Internet Explorer Standards Mode for local intranet","description":"This policy setting controls how Internet Explorer displays local intranet content. Intranet content is defined as any webpage that belongs to the local intranet security zone.\n\nIf you enable this policy setting, Internet Explorer uses the current user agent string for local intranet content. Additionally, all local intranet Standards Mode pages appear in the Standards Mode available with the latest version of Internet Explorer. The user cannot change this behavior through the Compatibility View Settings dialog box.\n\nIf you disable this policy setting, Internet Explorer uses an Internet Explorer 7 user agent string (with an additional string appended) for local intranet content. Additionally, all local intranet Standards Mode pages appear in Internet Explorer 7 Standards Mode. The user cannot change this behavior through the Compatibility View Settings dialog box.\n\nIf you do not configure this policy setting, Internet Explorer uses an Internet Explorer 7 user agent string (with an additional string appended) for local intranet content. Additionally, all local intranet Standards Mode pages appear in Internet Explorer 7 Standards Mode. This option results in the greatest compatibility with existing webpages, but newer content written to common Internet standards may be displayed incorrectly. This option matches the default behavior of Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetexplorerstandardsmode"],"categoryId":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","categoryName":"Compatibility View","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_1","displayName":"Enabled","description":null,"helpText":null}]},"b5d01de4e8210704":{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange","displayName":"Disable changing secondary home page settings","description":"Secondary home pages are the default Web pages that Internet Explorer loads in separate tabs from the home page whenever the browser is run. This policy setting allows you to set default secondary home pages.\n\nIf you enable this policy setting, you can specify which default home pages should load as secondary home pages. The user cannot set custom default secondary home pages.\n\nIf you disable or do not configure this policy setting, the user can add secondary home pages.\n\nNote: If the “Disable Changing Home Page Settings” policy is enabled, the user cannot add secondary home pages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesecondaryhomepagechange"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_1","displayName":"Enabled","description":null,"helpText":null}]},"b5b82589596b466b":{"id":"device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths","displayName":"Intranet Sites: Include all network paths (UNCs)","description":"This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.\n\nIf you enable this policy setting, all network paths are mapped into the Intranet Zone.\n\nIf you disable this policy setting, network paths are not necessarily mapped into the Intranet Zone (other rules might map one there).\n\nIf you do not configure this policy setting, users choose whether network paths are mapped into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includeallnetworkpaths"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_1","displayName":"Enabled","description":null,"helpText":null}]},"b50b7c11bea7aec3":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneinitializeandscriptactivexcontrols"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"b508665d33d94f75":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode","displayName":"User Account Control Use Admin Approval Mode","description":"User Account Control: Use Admin Approval Mode for the built-in Administrator account This policy setting controls the behavior of Admin Approval Mode for the built-in Administrator account. The options are: • Enabled: The built-in Administrator account uses Admin Approval Mode. By default, any operation that requires elevation of privilege will prompt the user to approve the operation. • Disabled: (Default) The built-in Administrator account runs all applications with full administrative privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_useadminapprovalmode"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode_0","displayName":"Disable","description":"Disable","helpText":null}]},"b5b332676b1a54b0":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled","displayName":"Disable saving browser history","description":"Disables saving browser history and prevents users from changing this setting.\r\n\r\nIf you enable this policy, browsing history isn't saved. This also disables tab syncing.\r\n\r\nIf you disable this policy or don't configure it, browsing history is saved.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b550d51584f20f3e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it’s replaced with real image thumbnail data. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nSpecify Bing's Image Search URL Post Params as:\r\n'imageBin={google:imageThumbnailBase64}'.\r\n\r\nSpecify Google's Image Search URL Post Params as:\r\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\r\n\r\nIf you don’t set this policy, image search requests are sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"b52bc44b2abd1641":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled","displayName":"Get user confirmation before closing a browser window with multiple tabs","description":"This policy lets you configure whether users see a confirmation dialog before closing a browser window with multiple tabs. This dialog asks users to confirm that the browser window can be closed.\r\n\r\nIf you enable this policy, users will be presented with a confirmation dialog when closing a browser window with multiple tabs.\r\n\r\nIf you disable or don't configure this policy, a browser window with multiple tabs will close immediately without user confirmation.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b5c10afda85329f5":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled","displayName":"Controls whether the new HTML parser behavior for the element. This policy supports the old HTML parser behavior until M136.\r\n\r\nIf this policy is enabled or unset, the HTML parser will allow additional tags inside the element.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b53106ac7252aeed":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_idletimeoutactionsdesc","displayName":"Actions to run when the computer is idle (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":null},"b5b078d8c4b40c93":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation","displayName":"Protection From Zone Elevation","description":"Zone Elevation","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_1","displayName":"Enabled","description":null,"helpText":null}]},"b5bd77dfab9f7438":{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderslow","displayName":"Current Channel (Preview) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderslow_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderslow_1","displayName":"True","description":null,"helpText":null}]},"b50da61e4d49e172":{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_edit","displayName":"Enter fully qualified server names separated by semicolons","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"b5bb6b0d4664319c":{"id":"device_vendor_msft_policy_config_update_engagedrestartsnoozescheduleforfeatureupdates","displayName":"Engaged Restart Snooze Schedule For Feature Updates","description":"For Feature Updates, this policy specifies the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. Value type is integer. Default is 3 days. Supported value range: 1 - 3. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestartsnoozescheduleforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"b592ca552fb7efe9":{"id":"device_vendor_msft_policy_config_update_pausefeatureupdatesstarttime","displayName":"Pause Feature Updates Start Time","description":"Specifies the date and time when the IT admin wants to start pausing the Feature Updates. Value type is string (yyyy-mm-dd, ex. 2018-10-28). Supported operations are Add, Get, Delete, and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausefeatureupdatesstarttime"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"b5342b5cdc13c090":{"id":"user_vendor_msft_pde_protectfolders_protectdesktop","displayName":"Protect Desktop (User)","description":"Allows the Admin to enable Personal Data Encryption on Desktop folder. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"categoryId":"1d5e7986-870c-444b-bf09-78bbf82a53fa","categoryName":"Personal Data Encryption","options":[{"id":"user_vendor_msft_pde_protectfolders_protectdesktop_0","displayName":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","description":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","helpText":null},{"id":"user_vendor_msft_pde_protectfolders_protectdesktop_1","displayName":"Enable Personal Data Encryption on the folder.","description":"Enable Personal Data Encryption on the folder.","helpText":null}]},"b5190fcd617c7024":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders38","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders38_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders38_1","displayName":"True","description":null,"helpText":null}]},"b56ff5473a3f58d8":{"id":"user_vendor_msft_policy_config_admx_desktop_nointerneticon","displayName":"Hide Internet Explorer icon on desktop (User)","description":"Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar.\r\n\r\nThis setting does not prevent the user from starting Internet Explorer by using other methods.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nointerneticon"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nointerneticon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nointerneticon_1","displayName":"Enabled","description":null,"helpText":null}]},"b51c71b9b7fe34eb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls","displayName":"Limit cookies from matching URLs to the current session (User)","description":"Unless the RestoreOnStartup policy is set to permanently restore URLs from previous sessions, then setting CookiesSessionOnlyForUrls lets you make a list of URL patterns that specify sites that can and can't set cookies for one session.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies. URLs not covered by the patterns specified also result in the use of defaults.\r\n\r\nWhile no specific policy takes precedence, see CookiesBlockedForUrls and CookiesAllowedForUrls. URL patterns among these 3 policies must not conflict.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b5f78506f14eb0b9":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio (User)","description":"This policy controls whether the browser uses adaptive buffering for\r\nWeb Audio, which may decrease audio glitches but may increase\r\nlatency by a variable amount.\r\n\r\nSetting the policy to Enabled will always use adaptive buffering.\r\n\r\nSetting the policy to Disabled or not set will allow the browser\r\nfeature launch process to decide if adaptive buffering is used.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b5fd4eb025afdb16":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_extensionextendedbackgroundlifetimeforportconnectionstourlsdesc","displayName":"Configure a list of origins that grant extended background lifetime to the connecting extensions. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"b5ae2d0b13891eac":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc","displayName":"List of origins allowing all HTTP authentication (User)","description":"","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":null},"b55e9ad85e2472d3":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled","displayName":"Choose whether the Privacy Sandbox ad measurement setting can be disabled (User)","description":"A policy to control whether the Privacy Sandbox Ad measurement setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Ad measurement setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Ad measurement setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b529fef3190a20b0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize87","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5b832259-c30b-43bb-b249-9d3ea4d5b028","categoryName":"Customizable Error Messages","options":null},"b57a18d149d11331":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions","displayName":"Logon options (User)","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon only in Intranet zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonelogonoptions"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"b5891fe7615a8b1c":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"b5827eb57484120d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_2","displayName":"Denies the Local Fonts permission on all sites by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_3","displayName":"Ask every time a site wants to obtain the Local Fonts permission","description":null,"helpText":null}]},"b57cc661ec5c593c":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled","displayName":"Search in Sidebar enabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_0","displayName":"Enable search in sidebar","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_1","displayName":"Disable search in sidebar for Kids Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_2","displayName":"Disable search in sidebar","description":null,"helpText":null}]},"b573d9cd08c8e0d8":{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_1","displayName":"Let third-party storage partitioning to be enabled.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_2","displayName":"Block third-party storage partitioning from being enabled.","description":null,"helpText":null}]},"b5fb8fe0431c75b1":{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled","displayName":"Configure Edge scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen (User)","description":"This policy controls whether Microsoft Edge shares URLs of sites that are detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge will share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b5f06301358a1d2c":{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforirm","displayName":"Encryption mode for Information Rights Management (IRM) (User)","description":"If you enable this policy setting, you can choose from two options for controlling the encryption mode that Excel, PowerPoint, Word, Visio, and Outlook applications use to protect content with Information Rights Management (IRM):\r\n\r\n- Electronic Codebook (ECB) – ECB mode is always used when applying IRM encryption.\r\n- Cipher Block Chaining (CBC) – CBC mode is always used when applying IRM encryption.\r\n\r\nIf you disable or don't configure this policy setting:\r\n\r\n- For Microsoft 365 Apps (Version 2304 or later): Cipher Block Chaining (CBC) mode is used.\r\n- For earlier Microsoft 365 Apps and Office LTSC 2021, 2019, and 2016: Electronic Codebook (ECB) mode is used.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforirm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforirm_1","displayName":"Enabled","description":null,"helpText":null}]},"b55bb3094f2719a9":{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforirm_l_encryptiontypeforirmcolon","displayName":"IRM Encryption Mode: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforirm_l_encryptiontypeforirmcolon_1","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforirm_l_encryptiontypeforirmcolon_2","displayName":"Electronic Codebook (ECB)","description":null,"helpText":null}]},"b5d9a64a232bd2d1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog03_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"b5640c3a8f9e5f52":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog04","displayName":"Trusted Catalog Location #4 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog04_1","displayName":"Enabled","description":null,"helpText":null}]},"b5b772bfc94a7125":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsproject","displayName":"Project-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsproject_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsproject_1","displayName":"True","description":null,"helpText":null}]},"b58a8f45c682bc71":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions_l_disablehyperlinkstowebtemplatesinfilenewandtaskpanes","displayName":"Disable web templates in File | New and on the Office Start screen (User)","description":"This policy setting controls whether users can download templates from Office.com from within the Office applications.\r\n\r\nIf you enable this policy setting, users will not see featured templates from Office.com in File | New and on the Office Start screen and will not be able to download templates from within Office applications.\r\n\r\nIf you disable or do not configure this policy setting, users will see featured templates from Office.com in File | New and on the Office Start screen and will be able to download templates from within Office applications.\r\n\r\nNote - Enabling this policy setting does not prevent users from downloading templates from Office.com using their Web browsers.","helpText":"","infoUrls":[],"categoryId":"2d5a483f-b408-426d-9234-2883eae20afb","categoryName":"Tools | Options | General | Web Options...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions_l_disablehyperlinkstowebtemplatesinfilenewandtaskpanes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions_l_disablehyperlinkstowebtemplatesinfilenewandtaskpanes_1","displayName":"Enabled","description":null,"helpText":null}]},"b59b8aa7e6c61a6a":{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser","displayName":"Default Office theme (User)","description":"This policy setting allows you to select the user interface (UI) theme used by Office, if the user has not already selected an Office theme.\r\n\r\nNote: This setting only applies to Version 1903 or later of Office.\r\n\r\nIf you enable this policy setting, you may choose the Office theme used in cases where the user has not selected an Office theme themselves.\r\n\r\nIf you disable or do not configure this policy setting, Office will use the Colorful theme in cases where the user has not selected an Office theme themselves.\r\n\r\nRegardless of how you configure this policy setting, users can change their Office theme by going to File > Account > Office Theme (or, in Outlook, by going to File > Office Account > Office Theme).\r\n\r\nNote: The “Default Office theme” policy setting located under Computer Configuration takes precedence over this policy setting.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_globaloptions~l_customize_l_defaultuithemeuser_1","displayName":"Enabled","description":null,"helpText":null}]},"b5d1d5f9fdbffc9d":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointsyncinterval_l_empty15","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":null},"b539f997a335b48c":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_allowcommasasaddressseparator","displayName":"Allow commas as address separator (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_allowcommasasaddressseparator_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_allowcommasasaddressseparator_1","displayName":"Enabled","description":null,"helpText":null}]},"b5428bfbc22197df":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_donotdownloadpermissionlicenseforirmemailduring","displayName":"Do not download rights permission license information for IRM e-mail during Exchange folder sync (User)","description":"By default, IRM license information for e-mail messages is downloaded to the user's local cache when Outlook synchronizes with Exchange. By enabling this setting, you can change this behavior so that licence information is not cached locally and users must connect to the network to retreive license information in order to open rights-managed e-mail messages.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_donotdownloadpermissionlicenseforirmemailduring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_donotdownloadpermissionlicenseforirmemailduring_1","displayName":"Enabled","description":null,"helpText":null}]},"b501e43ec51ed3d8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_configureaddintrustlevel_l_empty28","displayName":"\r\nSelect Add-In Trust Level:\r\n","description":"","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_configureaddintrustlevel_l_empty28_0","displayName":"Trust all, or use Exchange settings if present","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_configureaddintrustlevel_l_empty28_1","displayName":"Trust all loaded and installed COM addins","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_configureaddintrustlevel_l_empty28_2","displayName":"Do NOT trust loaded and installed COM addins","description":null,"helpText":null}]},"b5d6b14aa47c2551":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_l_securitylevel","displayName":"Security Level (User) (Deprecated)","description":"","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_l_securitylevel_2","displayName":"Always warn","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_l_securitylevel_4","displayName":"Never warn, disable all","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_l_securitylevel_3","displayName":"Warn for signed, disable unsigned","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_l_securitylevel_1","displayName":"No security check","description":null,"helpText":null}]},"b53ebd8bbe58c565":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing_l_checkspellingasyoutype","displayName":"Check spelling as you type (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e2610f41-9a95-47e5-9fc9-572e26dc6baa","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing_l_checkspellingasyoutype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_proofing_l_checkspellingasyoutype_1","displayName":"Enabled","description":null,"helpText":null}]},"b55157f30a467188":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo_l_autorecoversavelocation","displayName":"AutoRecover save location (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":null},"b55040275fcf60b3":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjchangedurationooui","displayName":"Edits to work, units or duration (User)","description":"Specifies that the feedback triangle should appear in a corner of a Task Name field if you change the task's start date or finish date.\r\n\r\nIf you enable this setting, a feedback triangle is displayed in the corner of the Task Name field if the user changes the task's start or finish date.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"fe7c8652-17d4-40a7-869c-f7cfc3454402","categoryName":"Show indicators and Option butons for","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjchangedurationooui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjchangedurationooui_1","displayName":"Enabled","description":null,"helpText":null}]},"b5372ec3f7ac5c38":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_defaultpublisherdirection_l_defaultpublisherdirection3","displayName":"Default Publisher direction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"77b0357b-412e-4a81-9469-e20a5f1345fd","categoryName":"Complex scripts","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_defaultpublisherdirection_l_defaultpublisherdirection3_0","displayName":"Left to right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_defaultpublisherdirection_l_defaultpublisherdirection3_1","displayName":"Right to left","description":null,"helpText":null}]},"b5a2e7662b8a5eac":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned","displayName":"Disable Trust Bar Notification for unsigned application add-ins (User) (Deprecated)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"30da5d88-cf03-41f4-ab55-51ead91b3844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1","displayName":"Enabled","description":null,"helpText":null}]},"b5f175a4d61ef924":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablecoauthoringondocmfiles","displayName":"Prevent co-authoring on files with macros for Word (User)","description":"This policy controls whether users will be able to co-author Word documents with macros.\r\n\r\nEnabling this policy setting will turn off the ability to co-author Word documents with macros.\r\n\r\nIf you disable or don't configure this policy setting, the user will be able to co-author Word documents with macros.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"e522c142-5666-4090-a7f4-1da1487f5384","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablecoauthoringondocmfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablecoauthoringondocmfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"b5c4c93fe14fd98d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize97","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12f9c95a-3ff1-49ef-bc8e-8d2b5ef4b06e","categoryName":"Customizable Error Messages","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/b6.json b/public/intune-definitions/b6.json new file mode 100644 index 000000000000..8a735b335cd9 --- /dev/null +++ b/public/intune-definitions/b6.json @@ -0,0 +1 @@ +{"b6d6333345fb7305":{"id":"com.apple.managedclient.preferences_disablesshparsing","displayName":"Disable SSH parsing","description":"Disables parsing of SSH traffic","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_disablesshparsing_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablesshparsing_true","displayName":"Enabled","description":null,"helpText":null}]},"b6f9184fffab99a0":{"id":"com.apple.managedclient.preferences_happyeyeballsv3enabled","displayName":"Use the Happy Eyeballs V3 algorithm for connection attempts","description":"Controls whether Microsoft Edge uses the Happy Eyeballs V3 algorithm to optimize connection attempts. This algorithm improves reliability and performance in dual-stack (IPv4/IPv6) networks by racing connection attempts across IP versions and HTTP protocols (e.g., HTTP/3 vs. others). For more details, see https://datatracker.ietf.org/doc/draft-pauly-happy-happyeyeballs-v3.\n\nEnabled: Uses the algorithm for connection attempts.\n\nDisabled or not configured: Disables the algorithm.\n\nNote: This policy supports dynamic refresh.\n\nImportant: This policy is temporary and will be removed in a future version.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#happyeyeballsv3enabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_happyeyeballsv3enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_happyeyeballsv3enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b676e069abee6930":{"id":"com.apple.systempolicy.managed_com.apple.systempolicy.managed","displayName":"Top Level Setting Group Collection","description":"com.apple.systempolicy.managed","helpText":null,"infoUrls":[],"categoryId":"64538726-8745-4e7a-b370-332f725b58bf","categoryName":"System Policy Managed","options":null},"b64994e3b984b955":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceivercoderequirement","displayName":"AE Receiver Code Requirement","description":"The code requirement for the receiving binary. This code requirement is required for AppleEvents service; not valid for other services.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"b669a2470a0fe569":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"b6863b1627355124":{"id":"com.microsoft.edge.mamedgeappconfigsettings.travelassistanceenabled_recommended","displayName":"Enable travel assistance (Obsolete) (users can override)","description":"This policy is obsolete as the feature is now contained within the Edge Sidebar and can be managed using the \"HubsSidebarEnabled\" policy. It doesn't work in Microsoft Edge after version 105.\nConfigure this policy to allow/disallow travel assistance.\n\nThe travel assistance feature gives helpful and relevant information to a user who performs a travel-related task within the browser. This feature provides trusted and validated suggestions/information to the users from across sources gathered by Microsoft.\n\nIf you enable or don't configure this setting, travel assistance is enabled for the users when they are performing travel-related tasks.\n\nIf you disable this setting, travel assistance will be disabled, and users won't be able to see any travel-related recommendations.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.travelassistanceenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.travelassistanceenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"b6935ac597d2d585":{"id":"device_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_2","displayName":"All Removable Storage classes: Deny all access","description":"Configure access to all removable storage classes.\r\n\r\nThis policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class.\r\n\r\nIf you enable this policy setting, no access is allowed to any removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removablestorageclasses-denyall-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"b6183d45c1f8407e":{"id":"device_vendor_msft_policy_config_admx_smartcard_enumerateecccerts","displayName":"Allow ECC certificates to be used for logon and authentication","description":"This policy setting allows you to control whether elliptic curve cryptography (ECC) certificates on a smart card can be used to log on to a domain.\r\n\r\nIf you enable this policy setting, ECC certificates on a smart card can be used to log on to a domain.\r\n\r\nIf you disable or do not configure this policy setting, ECC certificates on a smart card cannot be used to log on to a domain. \r\n\r\nNote: This policy setting only affects a user's ability to log on to a domain. ECC certificates on a smart card that are used for other applications, such as document signing, are not affected by this policy setting. \r\nNote: If you use an ECDSA key to log on, you must also have an associated ECDH key to permit logons when you are not connected to the network.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-enumerateecccerts"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_enumerateecccerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_enumerateecccerts_1","displayName":"Enabled","description":null,"helpText":null}]},"b6f2406399936f76":{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpshowprogress","displayName":"Hide the file scan progress window (Windows Insiders only)","description":"This policy setting hides the file scan progress window. This window provides status information to sophisticated users, but it might confuse novices.\r\n\r\nIf you enable this policy setting, the file scan window does not appear during file scanning.\r\n\r\nIf you disable or do not configure this policy setting, the file scan progress window appears.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsfileprotection#admx-windowsfileprotection-wfpshowprogress"],"categoryId":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","categoryName":"Windows File Protection","options":[{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpshowprogress_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpshowprogress_1","displayName":"Enabled","description":null,"helpText":null}]},"b6d821e2ebdf235d":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3","displayName":"Publishing Server 3 Settings","description":" Publishing Server Display Name: Displays the name of publishing server.\n \n Publishing Server URL: Displays the URL of publishing server.\n \n Global Publishing Refresh: Enables global publishing refresh (Boolean).\n \n Global Publishing Refresh On Logon: Triggers a global publishing refresh on logon (Boolean).\n \n Global Publishing Refresh Interval: Specifies the publishing refresh interval using the GlobalRefreshIntervalUnit. To disable package refresh, select 0.\n \n Global Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n \n User Publishing Refresh: Enables user publishing refresh (Boolean).\n \n User Publishing Refresh On Logon: Triggers a user publishing refresh on logon (Boolean).\n \n User Publishing Refresh Interval: Specifies the publishing refresh interval using the UserRefreshIntervalUnit. To disable package refresh, select 0.\n \n User Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-publishingallowserver3"],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_1","displayName":"Enabled","description":null,"helpText":null}]},"b6fbb026e52e14ff":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc","displayName":"Block cookies on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"b612c3709c6de06d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername","displayName":"Default search provider name (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"b62670e3a9e2f50d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_authserverwhitelist","displayName":"Authentication server whitelist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"b6eda88234d72f42":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled","displayName":"Default legacy SameSite cookie behavior setting","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b69a1ec8a0cc754e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck","displayName":"Skip the meta tag check in Google Chrome Frame","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck_1","displayName":"Enabled","description":null,"helpText":null}]},"b6ac971d093f3135":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings","displayName":"Site search settings","description":"This policy provides a list of sites that users can quickly search using shortcuts in the address bar. Users can initiate a search by typing the shortcut or @shortcut (e.g. @work), followed by Space or Tab, in the address bar.\r\n\r\nThe following fields are required for each site: name, shortcut, url.\r\n\r\nThe name field corresponds to the site or search engine name to be shown to the user in the address bar.\r\n\r\nThe shortcut can include plain words and characters, but cannot include spaces or start with the @ symbol. Shortcuts must also be unique.\r\n\r\nFor each entry, the url field specifies the URL of the search engine used during a search with the corresponding keyword. The URL must include the string '{searchTerms}', replaced in the query by the user's search terms. Invalid entries and entries with duplicate shortcuts are ignored.\r\n\r\nSite search entries configured as featured are displayed in the address bar when the user types \"@\". Up to three entries can be selected as featured.\r\n\r\nFor a site search entry where allow_user_override is true, users have the ability to edit or disable that entry. However, featured engines (beginning with \"@\") can only be disabled. If a user modifies an entry that was initially created by this policy, it will no longer be managed by policy and will be treated like a user-created shortcut. When allow_user_override is false or unspecified for a site search entry, users cannot edit or disable that entry. The setting to allow user override is only supported on M139 and later; earlier versions will default to disabling user override.\r\n\r\nUsers cannot create new site search entries with a shortcut previously created via this policy unless allow_user_override is set to true for the site search entry.\r\n\r\nIn case of a conflict with a shortcut previously created by the user, the user setting takes precedence. However, users can still trigger the option created by the policy by typing \"@\" in the search bar. For example, if the user already defined \"work\" as a shortcut to URL1 and the policy defines \"work\" as a shortcut to URL2, then typing \"work\" in the search bar will trigger a search to URL1, but typing \"@work\" in the search bar will trigger a search to URL2.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=SiteSearchSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"featured\": true,\r\n \"name\": \"Google Wikipedia\",\r\n \"shortcut\": \"wikipedia\",\r\n \"url\": \"https://www.google.com/search?q=site%3Awikipedia.com+%s\"\r\n },\r\n {\r\n \"name\": \"YouTube\",\r\n \"shortcut\": \"youtube\",\r\n \"url\": \"https://www.youtube.com/results?search_query=%s\"\r\n },\r\n {\r\n \"name\": \"Google Drive\",\r\n \"shortcut\": \"drive\",\r\n \"url\": \"https://drive.google.com/?q=%s\",\r\n \"allow_user_override\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"b615b335c25368bf":{"id":"device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp","displayName":"Turn off downloading of print drivers over HTTP","description":"This policy setting specifies whether to allow this client to download print driver packages over HTTP.\n\nTo set up HTTP printing, non-inbox drivers need to be downloaded over HTTP.\n\nNote: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. It only prohibits downloading drivers that are not already installed locally.\n\nIf you enable this policy setting, print drivers cannot be downloaded over HTTP.\n\nIf you disable or do not configure this policy setting, users can download print drivers over HTTP.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-disabledownloadingofprintdriversoverhttp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp_1","displayName":"Enabled","description":null,"helpText":null}]},"b69020a8c9107e7f":{"id":"device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows' title and status bars.\n\nIf you enable this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes.\n\nIf you disable this policy setting, scripts can continue to create popup windows and windows that obfuscate other windows.\n\nIf you do not configure this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-scriptedwindowsecurityrestrictionsinternetexplorerprocesses"],"categoryId":"622c83ff-f780-47e6-8b9c-bf82552e3f04","categoryName":"Scripted Window Security Restrictions","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"b6e8df525087a546":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled","displayName":"Enable profile creation from the Identity flyout menu or the Settings page","description":"Allows users to create new profiles, using the **Add profile** option.\r\nIf you enable this policy or don't configure it, Microsoft Edge allows users to use **Add profile** on the Identity flyout menu or the Settings page to create new profiles.\r\n\r\nIf you disable this policy, users cannot add new profiles from the Identity flyout menu or the Settings page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b66abd3f1b5cc79f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures","displayName":"Re-enable deprecated web platform features for a limited time","description":"Specify a list of deprecated web platform features to temporarily re-enable.\r\n\r\nThis policy lets you re-enable deprecated web platform features for a limited time. Features are identified by a string tag.\r\n\r\nIf you don't configure this policy, if the list is empty, or if a feature doesn't match one of the supported string tags, all deprecated web platform features remain disabled.\r\n\r\nWhile the policy itself is supported on the above platforms, the feature it's enabling might not be available on all of those platforms. Not all deprecated Web Platform features can be re-enabled. Only those explicitly listed below can be re-enabled, and only for a limited period of time, which differs per feature. You can review the intent behind the Web Platform feature changes at https://bit.ly/blinkintents.\r\n\r\nThe general format of the string tag is [DeprecatedFeatureName]_EffectiveUntil[yyyymmdd].\r\n\r\n* \"ExampleDeprecatedFeature_EffectiveUntil20080902\" = Enable ExampleDeprecatedFeature API through 2008/09/02\r\n\r\nExample value:\r\n\r\nExampleDeprecatedFeature_EffectiveUntil20080902","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"b61ca75d50bdf9e3":{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended","displayName":"Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work profile","description":"Allow the use of your organization's branding assets from Entra, if any, on the profile-related UI of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\r\n\r\nIf you enable this policy, your organization's branding assets from Entra will be used.\r\n\r\nIf you disable or don't configure this policy, your organization's branding assets from Entra won't be used.\r\n\r\nFor more information about configuring your organization's branding assets on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b6085281bef7755f":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_autoplayallowlistdesc","displayName":"Allow media autoplay on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"b6eab6c774738e71":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains","displayName":"Configure the list of domains for which enhance security mode will not be enforced","description":"Configure the list of enhance security trusted domains. This means that\r\nenhance security mode will not be enforced when loading the sites in trusted domains.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"b6ab003ac5d0a51c":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_pptviewexe158","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_pptviewexe158_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_pptviewexe158_1","displayName":"True","description":null,"helpText":null}]},"b609b021779775e5":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_disableofflinemode","displayName":"Prevent users at your organization from enabling offline mode in OneDrive on the web","description":"By default, offline mode is turned on for users of OneDrive on the web. If you enable this policy, offline mode in OneDrive on the web will be disabled for all users on the device. \n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_disableofflinemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_disableofflinemode_1","displayName":"Enabled","description":null,"helpText":null}]},"b61f6fe3ee79b141":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_userincontroloftheseapps","displayName":"Let Apps Access Call History User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the call history privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"b6499930f156b897":{"id":"safari_newtabstartpage_pagetype","displayName":"Page Type","description":"Sets the start page type in Safari:\n\n- `Start` - Safari uses the default start page. Safari disables the Homepage.\n- `Home` - Safari uses the page specified by `HomepageURL`, and Safari also sets that as the Homepage.\n- `Extension` - Safari uses the page specified by the Safari extension whose identifier is `ExtensionIdentifier`. Safari disables the Homepage.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_newtabstartpage_pagetype_0","displayName":"Start","description":null,"helpText":null},{"id":"safari_newtabstartpage_pagetype_1","displayName":"Home","description":null,"helpText":null},{"id":"safari_newtabstartpage_pagetype_2","displayName":"Extension","description":null,"helpText":null}]},"b6de28b6e270f50a":{"id":"softwareupdate_rapidsecurityresponse","displayName":"Background Security Improvement Settings","description":"These configurations set user access to interacting with Background Security Improvements.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"b626cd3e71e12d36":{"id":"softwareupdate_rapidsecurityresponse_enablerollback","displayName":"Enable Rollback","description":" If set to 'false', the system doesn't offer Background Security Improvement rollbacks to the user. If set to 'true', the system offers Background Security Improvement rollbacks to the user.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_rapidsecurityresponse_enablerollback_false","displayName":"False","description":null,"helpText":null},{"id":"softwareupdate_rapidsecurityresponse_enablerollback_true","displayName":"True","description":null,"helpText":null}]},"b611d246b13b6546":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddpage","displayName":"Hide Add New Programs page (User)","description":"Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.\r\n\r\nThe Add New Programs button lets users install programs published or assigned by a system administrator.\r\n\r\nIf you disable this setting or do not configure it, the Add New Programs button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to install programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddpage"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddpage_1","displayName":"Enabled","description":null,"helpText":null}]},"b6f31f0fbd495102":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinappdataroaming","displayName":"AppData(Roaming) (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinappdataroaming_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinappdataroaming_1","displayName":"True","description":null,"helpText":null}]},"b64f39433ac50cf9":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_gp","displayName":"IP Security Policy Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipsecmanage-gp"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_gp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_gp_1","displayName":"Enabled","description":null,"helpText":null}]},"b64a6f34cd760a6c":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasalluserproperties","displayName":"Ability to change properties of an all user remote access connection (User)","description":"Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer.\r\n\r\nTo create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the \"For all users\" option.\r\n\r\nThis setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box is available to users.\r\n\r\nIf you enable this setting, a Properties menu item appears when any user right-clicks the icon for a remote access connection. Also, when any user selects the connection, Properties appears on the File menu.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties menu items are disabled, and users (including administrators) cannot open the remote access connection properties dialog box.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can change properties of all-user remote access connections.\r\n\r\nNote: This setting takes precedence over settings that manipulate the availability of features inside the Remote Access Connection Properties dialog box. If this setting is disabled, nothing within the properties dialog box for a remote access connection will be available to users.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-rasalluserproperties"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasalluserproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasalluserproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"b63057ea7b406c29":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_server","displayName":"Set RD Gateway server address (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":null},"b62e73a7bc17f26c":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablesearchboxsuggestions","displayName":"Turn off display of recent search entries in the File Explorer search box (User)","description":"\r\nDisables suggesting recent queries for the Search Box and prevents entries into the Search Box from being stored in the registry for future references.\r\n\r\nFile Explorer shows suggestion pop-ups as users type into the Search Box. These suggestions are based on their past entries into the Search Box.\r\n\r\nNote: If you enable this policy, File Explorer will not show suggestion pop-ups as users type into the Search Box, and it will not store Search Box entries into the registry for future references. If the user types a property, values that match this property will be shown but no data will be saved in the registry or re-shown on subsequent uses of the search box.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disablesearchboxsuggestions"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablesearchboxsuggestions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablesearchboxsuggestions_1","displayName":"Enabled","description":null,"helpText":null}]},"b6e5bf53367e814a":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places4","displayName":"Item 5 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":null},"b6f3ac306a8fdbdf":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_enableexperimentalpoliciesdesc","displayName":"Enables experimental policies (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"b6812e481997ab12":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc","displayName":"Allow cookies on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"b62ac2604e7d838b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_extensioninstallblacklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"b6846d9770e2bc30":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures","displayName":"Enable deprecated web platform features for a limited time (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"b66b8d98e938cfaa":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting","displayName":"Default Window Placement permission setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting_2","displayName":"Denies the Window Placement permission on all sites by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting_3","displayName":"Ask every time a site wants obtain the Window Placement permission","description":null,"helpText":null}]},"b65f227286bc9703":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize87_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"5b832259-c30b-43bb-b249-9d3ea4d5b028","categoryName":"Customizable Error Messages","options":null},"b69a8b140ae62c75":{"id":"user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions","displayName":"New tab behavior (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_3","displayName":"New tab page with my news feed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_0","displayName":"about:blank","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_2","displayName":"New tab page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_1","displayName":"Home page","description":null,"helpText":null}]},"b69c3929c1b19214":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103","displayName":"Status bar updates via script (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_3","displayName":"Disable","description":null,"helpText":null}]},"b69d659178e53613":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips","displayName":"Allow Google Cast to connect to Cast devices on all IP addresses (User)","description":"Enable this policy to let Google Cast connect to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.\r\n\r\nDisable this policy to restrict Google Cast to Cast devices on RFC1918/RFC4193 private addresses.\r\n\r\nIf you don't configure this policy, Google Cast connects to Cast devices on RFC1918/RFC4193 private addresses only, unless you enable the CastAllowAllIPs feature.\r\n\r\nIf the 'EnableMediaRouter' (Enable Google Cast) policy is disabled, then this policy has no effect.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_1","displayName":"Enabled","description":null,"helpText":null}]},"b635435f3c9809f1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended","displayName":"Allow importing of autofill form data (User)","description":"Allows users to import autofill form data from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import autofill data is automatically selected.\r\n\r\nIf you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.\r\n\r\nIf you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS) and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b6baef68733514ae":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled","displayName":"Edge 3P SERP Telemetry Enabled (User)","description":"Edge3P Telemetry in Microsoft Edge captures the searches user does on third party search providers without identifying the person or the device and captures only if the user has consented to this collection of data. User can turn off the collection at any time in the browser settings.\r\n\r\nIf you enable or don't configure this policy, Edge 3P SERP Telemetry feature will be enabled.\r\n\r\nIf you disable this policy, Edge 3P SERP Telemetry feature will be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b6539a58c7d4d861":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastserviceserverterms7","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"b6e5f8e6789aeb84":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacework","displayName":"Replace AD - Work (User)","description":"This policy setting allows you to customize the 2nd value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"work phone\" of line 2.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 2 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacework_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacework_1","displayName":"Enabled","description":null,"helpText":null}]},"b6dd910f500a3f1b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceim_l_imlabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"b6781c3e53425854":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceoffice_l_officemapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"b6dd046cc514fe9c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_l_activexcontrolinitializationcolon","displayName":"ActiveX Control Initialization: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_l_activexcontrolinitializationcolon_1","displayName":"1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_l_activexcontrolinitializationcolon_2","displayName":"2","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_l_activexcontrolinitializationcolon_3","displayName":"3","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_l_activexcontrolinitializationcolon_4","displayName":"4","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_l_activexcontrolinitializationcolon_5","displayName":"5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_activexcontrolinitialization_l_activexcontrolinitializationcolon_6","displayName":"6","description":null,"helpText":null}]},"b68bfcf5426b4319":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey02_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"b60e763e2d650329":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey14","displayName":"Escrow Key #14 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey14_1","displayName":"Enabled","description":null,"helpText":null}]},"b6bae7217f818c44":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_locationofunfilednotessection_l_opensidenotesinthissection","displayName":"Open Side Notes in this section: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":null},"b6b6801f30384135":{"id":"user_vendor_msft_policy_config_outlk16v16~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationusersettingpolicy_l_newoutlookautomigrationusersettingpolicyid","displayName":"New Outlook Auto Migration User Setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":null},"b69bcf48cf1a24be":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek","displayName":"Length of work week: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_124","displayName":"Monday to Friday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_120","displayName":"Monday to Thursday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_60","displayName":"Tuesday to Friday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_126","displayName":"Monday to Saturday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_30","displayName":"Wednesday to Saturday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_142","displayName":"Thursday to Sunday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_252","displayName":"Sunday to Friday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_workweek_l_lengthofworkweek_254","displayName":"All seven days","description":null,"helpText":null}]},"b67be37601ffd9e1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions","displayName":"Internet Free/Busy Options (User)","description":"Checks/Unchecks the option \"Publish at my location\".","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"b6c4e68124c677a0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions_l_searchatthisurl","displayName":"Search at this URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":null},"b6c44a444e9ad868":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_disableattachmentpreviewing","displayName":"Do not allow attachment previewing in Outlook (User)","description":"This policy setting controls whether Outlook users can preview attachments in e-mail messages. \r\n\r\nIf you enable this policy setting, users cannot preview attachments within Outlook. Users must instead use the appropriate application to view attachments, depending on security settings. This configuration can be used to guard against theoretical future zero-day attacks that target specific file types. \r\n\r\nIf you disable or do not configure this policy setting, Outlook users can preview certain types of e-mail attachments within the message window or Reading Pane by clicking the icon that represents the attachment. Users can preview Outlook items, Word documents, PowerPoint presentations, Excel worksheets, Microsoft Visio® drawings, image files, and text files. To help protect users from malicious code, active content embedded in attachments (including scripts, macros, and ActiveX controls) is disabled during a preview.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_disableattachmentpreviewing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_disableattachmentpreviewing_1","displayName":"Enabled","description":null,"helpText":null}]},"b61c778f26691e17":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_l_saveforwardedmessages","displayName":"Save forwarded messages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_l_saveforwardedmessages_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_l_saveforwardedmessages_1","displayName":"True","description":null,"helpText":null}]},"b684a7aa77f82f61":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_defaultrssfeeds_l_defaultrsssubscriptionspart_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":null},"b6c456b450d524ca":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_turnoffrssfeature","displayName":"Turn off RSS feature (User)","description":"This policy setting controls whether the RSS aggregation feature in Outlook is enabled. \r\n\r\nIf you enable this policy setting, the RSS aggregation feature in Outlook is disabled. \r\n\r\nIf you disable or do not configure this policy setting, users can subscribe to RSS Feeds from within Outlook and read RSS items like e-mail messages.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_turnoffrssfeature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_turnoffrssfeature_1","displayName":"Enabled","description":null,"helpText":null}]},"b65a08bc9c9457dc":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas_l_savepowerpointfilesas1","displayName":"Save PowerPoint files as (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas_l_savepowerpointfilesas1_27","displayName":"PowerPoint Presentation (*.pptx)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas_l_savepowerpointfilesas1_28","displayName":"PowerPoint Macro-Enabled Presentation (*.pptm)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas_l_savepowerpointfilesas1_0","displayName":"PowerPoint 97-2003 Presentation (*.ppt)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_savepowerpointfilesas_l_savepowerpointfilesas1_52","displayName":"OpenDocument Presentation (*.odp)","description":null,"helpText":null}]},"b6e957022f14aeff":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_pathcolon44","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"b6190245fa9cf8cc":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral~l_pjgeneraloptions_l_pjdefaultstdrate_l_pjdefaultstdrate6","displayName":"Default standard rate (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0a6bc3ed-c4cd-4928-bcbf-247369a51515","categoryName":"General options for 'Project1'","options":null},"b6b0096a5f4ce3cc":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc16_l_descriptioncolon70","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"b6e1480351ed276d":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_sendentirepublicationasasingle","displayName":"Send entire publication as a single JPEG image (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_sendentirepublicationasasingle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_sendentirepublicationasasingle_1","displayName":"Enabled","description":null,"helpText":null}]},"b6721917179c77ea":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_dashlikecharacters","displayName":"Dash-like characters (User)","description":"Checks/unchecks the option \"Long vowel sounds with dash.\" This option may be hidden in Word until certain editing languages are enabled.","helpText":"","infoUrls":[],"categoryId":"b6cafb2c-81be-40cf-90d8-788f713f7099","categoryName":"Replace as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_dashlikecharacters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_dashlikecharacters_1","displayName":"Enabled","description":null,"helpText":null}]},"b69f1f6f69183ab9":{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook","displayName":"Specify default quality of compression done on inlined images inserted in Outlook (User)","description":"This policy setting allows you to specify default quality of compression done on inlined images in Outlook.\r\n\r\nIf you enable this policy setting, Outlook would compress the inlined images in the message as per the specified quality.\r\n\r\nIf you disable or don't configure this policy setting, inlined images would be compressed at the default quality (220 dpi).\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"61ecc5ec-c494-420b-a27b-a8d2fbdd7df1","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_defaultcompressionqualityforinlinedimagesinoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"b6f8a6ab4e762c65":{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogdroppedpackets","displayName":"Enable Log Dropped Packets","description":"This value is used as an on/off switch. If this value is on, the firewall logs all the dropped packets. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogdroppedpackets_false","displayName":"Disable Logging Of Dropped Packets","description":"Disable Logging Of Dropped Packets","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogdroppedpackets_true","displayName":"Enable Logging Of Dropped Packets","description":"Enable Logging Of Dropped Packets","helpText":null}]},"b6da87ee0750b59d":{"id":"vendor_msft_sharedpc_kioskmodeaumid","displayName":"Kiosk Mode AUMID","description":"Specifies the AUMID of the app to use with assigned access. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/b7.json b/public/intune-definitions/b7.json new file mode 100644 index 000000000000..a0a5eeb66d47 --- /dev/null +++ b/public/intune-definitions/b7.json @@ -0,0 +1 @@ +{"b73a6a62e7db7b43":{"id":"com.apple.applicationaccess_allowimagewand","displayName":"Allow Image Wand (Deprecated)","description":"When false, prohibits the use of Image Wand.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowimagewand_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowimagewand_true","displayName":"True","description":null,"helpText":null}]},"b766bbda44723758":{"id":"com.apple.managedclient.preferences_weeklyconfiguration_timeofday","displayName":"Time of day","description":"Specifies the time of day, as the number of minutes after midnight, to perform a weekly scan.","helpText":null,"infoUrls":[],"categoryId":"64c8233f-3057-4485-b902-d71a312318d7","categoryName":"Scheduled scan configuration","options":null},"b727998e78787458":{"id":"com.apple.security.firewall_enablelogging","displayName":"Enable Logging (Deprecated)","description":"If true, enables logging. Available in macOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"70b5da13-9c31-4857-890d-b7eb223729c3","categoryName":"Firewall","options":[{"id":"com.apple.security.firewall_enablelogging_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.security.firewall_enablelogging_true","displayName":"True","description":null,"helpText":null}]},"b7285c5b899a9bb1":{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_microphone_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"b728d7fbfbfd2b22":{"id":"device_vendor_msft_policy_config_admx_credssp_denydefaultcredentials","displayName":"Deny delegating default credentials","description":"This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection).\r\n\r\nIf you enable this policy setting, you can specify the servers to which the user's default credentials cannot be delegated (default credentials are those that you use when first logging on to Windows).\r\n\r\nIf you disable or do not configure (by default) this policy setting, this policy setting does not specify any server.\r\n\r\nNote: The \"Deny delegating default credentials\" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials cannot be delegated. The use of a single wildcard character is permitted when specifying the SPN.\r\n\r\nFor Example:\r\nTERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine\r\nTERMSRV/* Remote Desktop Session Host running on all machines.\r\nTERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com\r\n\r\nThis policy setting can be used in combination with the \"Allow delegating default credentials\" policy setting to define exceptions for specific servers that are otherwise permitted when using wildcard characters in the \"Allow delegating default credentials\" server list.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-denydefaultcredentials"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_denydefaultcredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_denydefaultcredentials_1","displayName":"Enabled","description":null,"helpText":null}]},"b7f4bbc9d8d0982c":{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassr2r","displayName":"Remote Link to Remote Target","description":null,"helpText":"","infoUrls":[],"categoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","categoryName":"Filesystem","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassr2r_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_symlinkevaluation_symlinkclassr2r_1","displayName":"True","description":null,"helpText":null}]},"b73f2722b4ff4e86":{"id":"device_vendor_msft_policy_config_admx_msdt_msdtsupportprovider","displayName":"Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider","description":"This policy setting configures Microsoft Support Diagnostic Tool (MSDT) interactive communication with the support provider. MSDT gathers diagnostic data for analysis by support professionals.\r\n\r\nIf you enable this policy setting, users can use MSDT to collect and send diagnostic data to a support professional to resolve a problem.\r\n\r\nBy default, the support provider is set to Microsoft Corporation.\r\n\r\nIf you disable this policy setting, MSDT cannot run in support mode, and no data can be collected or sent to the support provider.\r\n\r\nIf you do not configure this policy setting, MSDT support mode is enabled by default.\r\n\r\nNo reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msdt#admx-msdt-msdtsupportprovider"],"categoryId":"f926f6e3-1bd6-4259-ae7c-e14108568882","categoryName":"Microsoft Support Diagnostic Tool","options":[{"id":"device_vendor_msft_policy_config_admx_msdt_msdtsupportprovider_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msdt_msdtsupportprovider_1","displayName":"Enabled","description":null,"helpText":null}]},"b7661a20d2c13e7a":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_refresh_rate","displayName":"Set Teredo Refresh Rate","description":"This policy setting allows you to configure the Teredo refresh rate.\r\n\r\nNote: On a periodic basis (by default, every 30 seconds), Teredo clients send a single Router Solicitation packet to the Teredo server. The Teredo server sends a Router Advertisement Packet in response. This periodic packet refreshes the IP address and UDP port mapping in the translation table of the Teredo client's NAT device.\r\n\r\nIf you enable this policy setting, you can specify the refresh rate. If you choose a refresh rate longer than the port mapping in the Teredo client's NAT device, Teredo might stop working or connectivity might be intermittent.\r\n\r\nIf you disable or do not configure this policy setting, the refresh rate is configured using the local settings on the computer. The default refresh rate is 30 seconds.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-teredo-refresh-rate"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_refresh_rate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_refresh_rate_1","displayName":"Enabled","description":null,"helpText":null}]},"b73369f90c55be5f":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingstemplatecatalogpath_overridemstemplates","displayName":"Replace the default Microsoft templates","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingstemplatecatalogpath_overridemstemplates_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingstemplatecatalogpath_overridemstemplates_1","displayName":"True","description":null,"helpText":null}]},"b78047318d574676":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_id","displayName":"Rule Id","description":"The Id of the rule, leave this field blank, it will be filled in automatically.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"b73c12695efe1c9f":{"id":"device_vendor_msft_policy_config_applicationmanagement_disablestoreoriginatedapps","displayName":"Disable Store Originated Apps","description":"Boolean value that disables the launch of all apps from Microsoft Store that came pre-installed or were downloaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#disablestoreoriginatedapps"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_disablestoreoriginatedapps_0","displayName":"Disabled","description":"Enable launch of apps.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_disablestoreoriginatedapps_1","displayName":"Enabled","description":"Disable launch of apps.","helpText":null}]},"b7b9271c508127cf":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditgroupmembership","displayName":"Account Logon Logoff Audit Group Membership","description":"This policy allows you to audit the group memberhsip information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. When this setting is configured, one or more security audit events are generated for each successful logon. You must also enable the Audit Logon setting under Advanced Audit Policy Configuration\\System Audit Policies\\Logon/Logoff. Multiple events are generated if the group memberhsip information cannot fit in a single security audit event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditgroupmembership"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditgroupmembership_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditgroupmembership_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditgroupmembership_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditgroupmembership_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"b7b46d166c4a36fc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir","displayName":"Set user data directory","description":"Configures the directory that Google Chrome will use for storing user data.\r\n\r\nIf you set this policy, Google Chrome will use the provided directory regardless whether the user has specified the '--user-data-dir' flag or not. To avoid data loss or other unexpected errors this policy should not be set to a directory used for other purposes, because Google Chrome manages its contents.\r\n\r\nSee https://support.google.com/chrome/a?p=Supported_directory_variables for a list of variables that can be used.\r\n\r\nIf this policy is left not set the default profile path will be used and the user will be able to override it with the '--user-data-dir' command line flag.\r\n\r\nExample value: ${users}/${user_name}/Chrome","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},"b7aea43354a40a86":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls","displayName":"Allow access to sensors on these sites","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can access sensors like motion and light sensors.\r\n\r\nLeaving the policy unset means DefaultSensorsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nIf the same URL pattern exists in both this policy and the SensorsBlockedForUrls policy, the latter is prioritized and access to motion or light sensors will be blocked.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b7436cecdd3594de":{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout","displayName":"Set Max Connection Timeout","description":"IT admins can use this policy to set the max connection timeout. The connection timeout decides the max wait time for connecting to Cloud PC after sign in. The default max value is 5 min. For best user experience, it is recommended to continue with the default timeout of 5 min. Update only if it takes more than 5 min to connect to the Cloud PC in your organization.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-CloudDesktop#setmaxconnectiontimeout"],"categoryId":"39e4c352-be9c-4e75-8111-8236279c7f1e","categoryName":"Cloud Desktop","options":[{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_5","displayName":"5 min","description":"5 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_6","displayName":"6 min","description":"6 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_7","displayName":"7 min","description":"7 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_8","displayName":"8 min","description":"8 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_9","displayName":"9 min","description":"9 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_10","displayName":"10 min","description":"10 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_11","displayName":"11 min","description":"11 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_12","displayName":"12 min","description":"12 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_13","displayName":"13 min","description":"13 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_14","displayName":"14 min","description":"14 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_15","displayName":"15 min","description":"15 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_16","displayName":"16 min","description":"16 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_17","displayName":"17 min","description":"17 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_18","displayName":"18 min","description":"18 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_19","displayName":"19 min","description":"19 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_20","displayName":"20 min","description":"20 min","helpText":null}]},"b791b488d83c1ffa":{"id":"device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge","displayName":"Prohibit installation and configuration of Network Bridge on your DNS domain network","description":"Determines whether a user can install and configure the Network Bridge.\n\nImportant: This settings is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting does not apply.\n\nThe Network Bridge allows users to create a layer 2 MAC bridge, enabling them to connect two or more network segements together. This connection appears in the Network Connections folder.\n\nIf you disable this setting or do not configure it, the user will be able to create and modify the configuration of a Network Bridge. Enabling this setting does not remove an existing Network Bridge from the user's computer.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-prohibitinstallationandconfigurationofnetworkbridge"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge_1","displayName":"Enabled","description":null,"helpText":null}]},"b7d33e693c266f2c":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"b711f590da8ecd7d":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dopercentagemaxbackgroundbandwidth","displayName":"DO Percentage Max Background Bandwidth","description":"Specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dopercentagemaxbackgroundbandwidth"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"b7b648c83c0bf101":{"id":"device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior","displayName":"Control Event Log behavior when the log file reaches its maximum size","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size.\n\nIf you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost.\n\nIf you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events.\n\nNote: Old events may or may not be retained according to the \"Backup log automatically when full\" policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-controleventlogbehavior"],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":[{"id":"device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"b75aba3686faae08":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"b781f9f15341fa2c":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"b79cc5226f44591f":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"b7b1156671ac614c":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100","displayName":"Enable MIME Sniffing","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_3","displayName":"Disable","description":null,"helpText":null}]},"b7d1f7afb1a8230f":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_m365linksautoopencopilotenabled","displayName":"Automatically open Copilot side pane with contextual insights for links opened from Outlook","description":"This policy controls whether Microsoft Edge automatically opens the Microsoft Copilot side pane when users open web links from Outlook emails sent from the same tenant.\r\n\r\nStarting in Microsoft Edge version 148, when users open eligible links from Outlook emails sent from the same tenant, Microsoft Edge automatically opens the Copilot side pane with contextual insights. Copilot can use the originating Outlook email as context to surface relevant insights and suggested next steps alongside the web content.\r\n\r\nIf you enable this policy or don't configure it, the Copilot side pane opens automatically when users open links from Outlook emails sent from the same tenant.\r\n\r\nIf you disable this policy, the Copilot side pane doesn't open automatically when users open links from Outlook emails sent from the same tenant.\r\n\r\nThis feature applies only to links opened from Outlook emails sent from the same tenant and requires Microsoft Copilot to be available for the user in Microsoft Edge.\r\n\r\nThis feature is disabled if the 'CopilotPageContext' (Control Copilot access to page context for Microsoft Entra ID profiles) policy or the 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane) policy is disabled, regardless of this policy's configuration. Copilot requires access to page content to provide contextual insights.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_m365linksautoopencopilotenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_m365linksautoopencopilotenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b786dc1ca975a2bc":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended","displayName":"Visual search enabled","description":"Visual search lets you quickly explore more related content about entities in an image.\r\n\r\nIf you enable or don't configure this policy, visual search will be enabled via image hover, context menu, and search in sidebar.\r\n\r\nIf you disable this policy, visual search will be disabled and you won't be able to get more info about images via hover, context menu, and search in sidebar.\r\n\r\nNote: Visual Search in Web Capture is still managed by 'WebCaptureEnabled' (Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge) policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b7f926040a0c5f4e":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_sharepointonpremapplicationiduri","displayName":"Specify the Application ID URI for your Entra application for OIDC","description":"This setting allows you to specify an Application ID URI for your Entra application for OIDC if it is different from your SharePoint Server URL. To use this setting, you must also enable \"Enable the use of OIDC authentication for syncing content from a SharePoint Server\". This setting affects only OneDrive for Business sync functionality. It does not impact syncing team sites in SharePoint Online.\n\nIf you enable this setting and provide the Application ID URI, this value will be used for requests to the SharePoint Server.\n\nIf you disable or do not configure this setting, we will use the SharePoint Server URL as the Application ID URI instead.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_sharepointonpremapplicationiduri_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_sharepointonpremapplicationiduri_1","displayName":"Enabled","description":null,"helpText":null}]},"b7f809333c51cdb4":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_forceallowtheseapps","displayName":"Let Apps Access Account Info Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessaccountinfo_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"b7025e1a955b9b0c":{"id":"device_vendor_msft_policy_config_remotedesktopservices_promptforpassworduponconnection","displayName":"Always prompt for password upon connection","description":"This policy setting specifies whether Remote Desktop Services always prompts the client for a password upon connection.\n\nYou can use this setting to enforce a password prompt for users logging on to Remote Desktop Services, even if they already provided the password in the Remote Desktop Connection client.\n\nBy default, Remote Desktop Services allows users to automatically log on by entering a password in the Remote Desktop Connection client.\n\nIf you enable this policy setting, users cannot automatically log on to Remote Desktop Services by supplying their passwords in the Remote Desktop Connection client. They are prompted for a password to log on.\n\nIf you disable this policy setting, users can always log on to Remote Desktop Services automatically by supplying their passwords in the Remote Desktop Connection client.\n\nIf you do not configure this policy setting, automatic logon is not specified at the Group Policy level.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-promptforpassworduponconnection"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_promptforpassworduponconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_promptforpassworduponconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"b72279b186371df3":{"id":"device_vendor_msft_policy_config_start_forcestartsize","displayName":"Force Start Size","description":"Forces the start screen size. If there is policy configuration conflict, the latest configuration request is applied to the device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#forcestartsize"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_forcestartsize_0","displayName":"Do not force size of Start.","description":"Do not force size of Start.","helpText":null},{"id":"device_vendor_msft_policy_config_start_forcestartsize_1","displayName":"Force non-fullscreen size of Start.","description":"Force non-fullscreen size of Start.","helpText":null},{"id":"device_vendor_msft_policy_config_start_forcestartsize_2","displayName":"Force a fullscreen size of Start.","description":"Force a fullscreen size of Start.","helpText":null}]},"b7d2bc53de02000b":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidewindowssecuritynotificationareacontrol","displayName":"Hide Windows Security Notification Area Control","description":"This policy setting hides the Windows Security notification area control. The user needs to either sign out and sign in or reboot the computer for this setting to take effect. Enabled:Windows Security notification area control will be hidden. Disabled:Windows Security notification area control will be shown. Not configured:Same as Disabled. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hidewindowssecuritynotificationareacontrol"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidewindowssecuritynotificationareacontrol_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidewindowssecuritynotificationareacontrol_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"b799e1692d72c38f":{"id":"linux_mdatp_managed_advancedsettings_memoryscan","displayName":"Memory scan (preview) (Requires Behavior Monitoring for protection)","description":"Detects and blocks fileless and in-memory threats at runtime","helpText":null,"infoUrls":[],"categoryId":"1ae2f430-e0ca-4c68-ba28-aacbc6e33af3","categoryName":null,"options":[{"id":"linux_mdatp_managed_advancedsettings_memoryscan_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_advancedsettings_memoryscan_enabled","displayName":"Enabled","description":null,"helpText":null}]},"b75ebbf3d4cc77f1":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_datecolon20","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"b7e35dcb6b2f812a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders62","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders62_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders62_1","displayName":"True","description":null,"helpText":null}]},"b78cb40c9363bc4d":{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation","displayName":"Block launching desktop apps associated with a file. (User)","description":"This policy setting lets you control whether Windows Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a Windows Store app might compromise the system by opening a file in the default desktop app for a file type.\r\n\r\nIf you enable this policy setting, Windows Store apps cannot open files in the default desktop app for a file type; they can open files only in other Windows Store apps.\r\n\r\nIf you disable or do not configure this policy setting, Windows Store apps can open files in the default desktop app for a file type.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeblockfileelevation"],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":[{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation_1","displayName":"Enabled","description":null,"helpText":null}]},"b76d468e85f88859":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablecolorschemechoice","displayName":"Prevent changing color scheme (User)","description":"This setting forces the theme color scheme to be the default color scheme.\r\n\r\nIf you enable this setting, a user cannot change the color scheme of the current desktop theme.\r\n\r\nIf you disable or do not configure this setting, a user may change the color scheme of the current desktop theme.\r\n\r\nFor Windows 7 and later, use the \"Prevent changing color and appearance\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-disablecolorschemechoice"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablecolorschemechoice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablecolorschemechoice_1","displayName":"Enabled","description":null,"helpText":null}]},"b755997a8e54a44e":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio","displayName":"Microsoft Visio 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Visio 2010.\r\nBy default, the user settings of Microsoft Visio 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010visio"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio_1","displayName":"Enabled","description":null,"helpText":null}]},"b758969c9a608843":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013","displayName":"Microsoft Office 365 Outlook 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Outlook 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Outlook 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365outlook2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013_1","displayName":"Enabled","description":null,"helpText":null}]},"b7ddc691c742251c":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_sports","displayName":"Sports (User)","description":"This policy setting configures the synchronization of user settings for the Sports app.\r\nBy default, the user settings of Sports sync between computers. Use the policy setting to prevent the user settings of Sports from synchronizing between computers.\r\nIf you enable this policy setting, Sports user settings continue to sync.\r\nIf you disable this policy setting, Sports user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-sports"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_sports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_sports_1","displayName":"Enabled","description":null,"helpText":null}]},"b764679832af0606":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"b79a0816c9421865":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode","displayName":"Control use of the Headless Mode (User)","description":"Setting this policy to Enabled or leaving the policy unset allows use of the headless mode. Setting this policy to Disabled denies use of the headless mode.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_1","displayName":"Enabled","description":null,"helpText":null}]},"b736ee93bfabfc20":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled","displayName":"Enable the Shared Clipboard Feature (User)","description":"Enable the Shared Clipboard feature which allows users to send text between Chrome Desktops and an Android device when Sync is enabled and the user is Signed-in.\r\n\r\nIf this policy is set to true, the capability of sending text, cross device, for chrome user is enabled.\r\n\r\nIf this policy is set to false, the capability of sending text, cross device, for chrome user is disabled.\r\n\r\nIf you set this policy, users cannot change or override it.\r\n\r\nIf this policy is left unset, the shared clipboard feature is enabled by default.\r\n\r\nIt is up to the admins to set policies in all platforms they care about. It's recommended to set this policy to one value in all platforms.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b7f4eea44be24d87":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters","displayName":"Command-line parameters for switching from the alternative browser. (User)","description":"Setting the policy to a list of strings means the strings are joined with spaces and passed from Internet Explorer® to Google Chrome as command-line parameters. If an parameter contains ${url}, ${url} is replaced with the URL of the page to open. If no parameter contains ${url}, the URL is appended at the end of the command line.\r\n\r\nEnvironment variables are expanded. On Microsoft® Windows®, %ABC% is replaced with the value of the ABC environment variable.\r\n\r\nLeaving the policy unset means Internet Explorer® only passes the URL to Google Chrome as a command-line parameter.\r\n\r\nNote: If the Legacy Browser Support add-in for Internet Explorer® isn't installed, this policy has no effect.\r\n\r\nExample value:\r\n\r\n--force-dark-mode","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_1","displayName":"Enabled","description":null,"helpText":null}]},"b7f6ef61076e5000":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist","displayName":"Websites to open in alternative browser (User)","description":"Setting the policy controls the list of websites to open in an alternative browser. Each item is treated as a rule for something to open in an alternative browser. Google Chrome uses those rules when choosing if a URL should open in an alternative browser. When the Internet Explorer® add-in is on, Internet Explorer® switches back to Google Chrome when the rules don't match. If rules contradict each other, Google Chrome uses the most specific rule.\r\n\r\nLeaving the policy unset adds no websites to the list.\r\n\r\nNote: Elements can also be added to this list through the BrowserSwitcherUseIeSitelist and BrowserSwitcherExternalSitelistUrl policies.\r\n\r\nExample value:\r\n\r\nie.com\r\n!open-in-chrome.ie.com\r\nfoobar.com/ie-only/","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_1","displayName":"Enabled","description":null,"helpText":null}]},"b7d9b86b6a6940b1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls","displayName":"List of alternate URLs for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderAlternateURLs specifies a list of alternate URLs for extracting search terms from the search engine. The URLs should include the string '{searchTerms}'.\r\n\r\nLeaving DefaultSearchProviderAlternateURLs unset means no alternate URLs are used to extract search terms.\r\n\r\nExample value:\r\n\r\nhttps://search.my.company/suggest#q={searchTerms}\r\nhttps://search.my.company/suggest/search#q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b78978475ae466d9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection","displayName":"Default printer selection rules (User)","description":"Setting the policy sets the rules for selecting the default printer in Google Chrome, overriding the default rules. Printer selection occurs the first time users try to print, when Google Chrome seeks a printer matching the specified attributes. In case of a less than perfect match, Google Chrome can be set to select any matching printer, depending on the order printers are discovered.\r\n\r\nLeaving the policy unset or set to attributes for which there's no match means the built-in PDF printer is the default. If there's no PDF printer, Google Chrome defaults to none.\r\n\r\nPrinters connected to Google Cloud Print are considered \"cloud\", the rest of the printers are classified as \"local\".\r\n\r\nNote: Omitting a field means all values match. For example, not specifying connectivity causes Print Preview to start discovery of all kinds of printers, \"local\" and \"cloud\". Regular expression patterns must follow the JavaScript RegExp syntax, and matches are case sensistive.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=DefaultPrinterSelection for more information about schema and formatting.\r\n\r\n\r\nExample value: { \"kind\": \"cloud\", \"idPattern\": \".*public\", \"namePattern\": \".*Color\" }","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_1","displayName":"Enabled","description":null,"helpText":null}]},"b755967e54abf681":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]},"b79e5ad19de99067":{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlaunch","displayName":"Don’t allow Dynamic Data Exchange (DDE) server launch in Excel (User)","description":"This policy setting allows you to control whether Dynamic Data Exchange (DDE) server launch is allowed.\r\n\r\nBy default, DDE server launch is turned off, but users can turn on DDE server launch by going to File > Options > Trust Center > Trust Center Settings > External Content.\r\n\r\nFor security reasons, turning on DDE server launch is not recommended.\r\n\r\nNote: For DDE server launch to work, Dynamic Data Exchange (DDE) server lookup must be turned on. Be sure that the “Don’t allow Dynamic Data Exchange (DDE) server lookup” policy setting isn’t enabled, because enabling that policy setting turns off DDE server lookup.\r\n\r\nIf you enable this policy setting, DDE server launch isn’t allowed, and users can’t turn on DDE server launch in the Trust Center.\r\n\r\nIf you disable this policy setting, DDE server launch is allowed, and users cannot turn off DDE server launch in the Trust Center. For security reasons, this is not recommended.\r\n\r\nIf you don’t configure this policy setting, DDE server launch is turned off, but users can turn on DDE server launch in the Trust Center.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.","helpText":"","infoUrls":[],"categoryId":"e36863b6-3232-4a29-be02-32ee67cc48b9","categoryName":"External Content","options":[{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlaunch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlaunch_1","displayName":"Enabled","description":null,"helpText":null}]},"b773a96581c8c79d":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowlessprivilegedsites"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"b771a13c69dba4c6":{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled","displayName":"Hide App Launcher on Microsoft Edge new tab page (User)","description":"By default, the App Launcher is shown every time a user opens a new tab page.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and App Launcher is there for users.\r\n\r\nIf you disable this policy, App Launcher doesn't appear and users won't be able to launch M365 apps from Microsoft Edge new tab page via the App Launcher.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b7334ad81a2a6185":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls","displayName":"Block clipboard use on specific sites (User)","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\r\n\r\nSetting the policy lets you create a list of URL patterns that specify sites that can't use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\r\n\r\nLeaving the policy unset means 'DefaultClipboardSetting' (Default clipboard site permission) applies for all sites if it's set. If it isn't set, the user's personal setting applies.\r\n\r\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b7bea2f8ac7e60b8":{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext","displayName":"Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 132.\r\n\r\nThis policy has been obsoleted as of Edge 133. Instead of this obsolete policy, we recommend using 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane).\r\n\r\nThis policy controls access to page contents for Copilot with Commercial Data Protection in the Edge sidebar. This policy applies only to Microsoft Entra ID profiles. To summarize pages and interact with text selections, it needs to be able to access the page contents. This policy does not apply to MSA profiles. This policy doesn't control access for Copilot without Commercial Data Protection. Access for Copilot without Commercial Data Protection is controlled by the policy CopilotPageContext.\r\n\r\nIf you enable this policy, Copilot with Commercial Data Protection will have access to page context.\r\n\r\nIf you don't configure this policy, a user can enable access to page context for Copilot with Commercial Data Protection using the setting toggle in Edge.\r\n\r\nIf you disable this policy, Copilot with Commercial Data Protection will not be able to access page context.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},"b7386dd640b71cb9":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings_exemptdomainfiletypepairsfromfiletypedownloadwarningsdesc","displayName":"Disable download file type extension-based warnings for specified file types on domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"b7ab6e4af9520238":{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_securitysettings_l_basicauthproxybehavior","displayName":"Allow Basic Authentication prompts from network proxies (User)","description":"This policy setting controls whether network proxies are allowed to show Basic Authentication prompts.\r\n\r\nBy default, all Basic Authentication sign-in prompts are blocked, and the user is shown a message that the sign-in method isn’t allowed.\r\n\r\nIf you enable this policy setting, then network proxies will be allowed to show Basic Authentication prompts.\r\n\r\nWarning: Allowing Basic Authentication sign-in prompts isn’t recommended because it’s a security risk.\r\n\r\nIf you disable or don’t configure this policy setting, all Basic Authentication sign-in prompts from network proxes will be blocked, and the user will be shown a message that the sign-in method isn’t allowed.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2199001.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_securitysettings_l_basicauthproxybehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_securitysettings_l_basicauthproxybehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"b74c7d1dcb1c5a9e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffpowerpoint_l_autosavedefaultsettingenum","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffpowerpoint_l_autosavedefaultsettingenum_0","displayName":"Use AutoSave Default Setting","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffpowerpoint_l_autosavedefaultsettingenum_1","displayName":"AutoSave Is On By Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffpowerpoint_l_autosavedefaultsettingenum_2","displayName":"AutoSave Is Off By Default","description":null,"helpText":null}]},"b777ee6da9fd8e34":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastserviceminorversion9","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"b71cd1a2b23afe47":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookglobaladdresslistdictionary_l_setupdateintervalforoutlookglobaladdresslistdictionaryspinid","displayName":"(in minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":null},"b7da79986f16191b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordhashformatasisocompliant","displayName":"Set password hash format as ISO-compliant (User)","description":"This policy setting allows you create ISO-compliant modification password records.\r\n\r\nIf you enable this policy setting, then passwords created will be ISO-compliant.\r\n\r\nIf you disable or do not configure this policy setting, the default will be ECMA-style records.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordhashformatasisocompliant_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordhashformatasisocompliant_1","displayName":"Enabled","description":null,"helpText":null}]},"b7a775636fb04621":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setuserpathforthelabelpagesizeupdatefiles","displayName":"Set User path for the label page size update files (User)","description":"This policy setting allows you to override the User path for the label page size update files. \r\n\r\nIf you enable this policy setting, you may enter the path to the PSX update files and override the User path.\r\n\r\nIf you disable or do not configure this policy setting, the User path for the label page size update files remains valid.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setuserpathforthelabelpagesizeupdatefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_setuserpathforthelabelpagesizeupdatefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"b791fd725bac742d":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontsize","displayName":"Default Font Size (User)","description":"Specifies the value in the option ''Size''.","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_defaultfontsize_1","displayName":"Enabled","description":null,"helpText":null}]},"b7cd3e58bbae2e7f":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_disallowsaddonsaccesstopass","displayName":"Disallows add-ons access to password protected sections (User)","description":"This option disallows extensibility add-ons the ability to access password protected sections if they are unlocked.","helpText":"","infoUrls":[],"categoryId":"1979a12b-2a72-438d-9de7-320d1b38e777","categoryName":"Password","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_disallowsaddonsaccesstopass_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_password_l_disallowsaddonsaccesstopass_1","displayName":"Enabled","description":null,"helpText":null}]},"b70151fd552547dd":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid","displayName":"Random number generator: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":null},"b74b3212d8f993ad":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertonmouseoverinmillisec","displayName":"Specify duration of Desktop Alert on mouse over (in milliseconds) (User)","description":"Specify duration of Desktop Alert on mouse over (in milliseconds)","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertonmouseoverinmillisec_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertonmouseoverinmillisec_1","displayName":"Enabled","description":null,"helpText":null}]},"b72748e2f87f124b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_l_datecolon53","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"b726325de9fbb34d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_ordinalswithsuperscript","displayName":"Ordinals with superscript (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"af9b2941-29f9-4ee5-ae09-215f4e242943","categoryName":"AutoCorrect Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_ordinalswithsuperscript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_ordinalswithsuperscript_1","displayName":"Enabled","description":null,"helpText":null}]},"b77dd600ee2fc763":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_l_pathcolon36","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"b7f11e08291ebd33":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_toolscompareandmergedocumentslegalblackline","displayName":"Tools | Compare and Merge Documents, Legal blackline (User)","description":"If you enable this policy setting, a comparison between two documents automatically generates a new Legal Blackline document, leaving the original documents unchanged.","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_toolscompareandmergedocumentslegalblackline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_toolscompareandmergedocumentslegalblackline_1","displayName":"Enabled","description":null,"helpText":null}]},"b7f6895c5c193540":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingotherproofingtools_l_delaybeforestartingbackgroundgrammarchecker3","displayName":"Milliseconds (e.g. 5000 milliseconds = 5 seconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":null},"b791e810196fc3b5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_symbolcharacterswithsymbols","displayName":"Symbol characters (--) with symbols (User)","description":"Checks/unchecks the option ''Hyphens (--) with dash (-)''.","helpText":"","infoUrls":[],"categoryId":"b6cafb2c-81be-40cf-90d8-788f713f7099","categoryName":"Replace as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_symbolcharacterswithsymbols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_symbolcharacterswithsymbols_1","displayName":"Enabled","description":null,"helpText":null}]},"b794583a0a166949":{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablelogsuccessconnections","displayName":"Enable Log Success Connections","description":"This value is used as an on/off switch. If this value is on, the firewall logs all successful inbound connections. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablelogsuccessconnections_false","displayName":"Disable Logging Of Successful Connections","description":"Disable Logging Of Successful Connections","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablelogsuccessconnections_true","displayName":"Enable Logging Of Successful Connections","description":"Enable Logging Of Successful Connections","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/b8.json b/public/intune-definitions/b8.json new file mode 100644 index 000000000000..0cd561b7016f --- /dev/null +++ b/public/intune-definitions/b8.json @@ -0,0 +1 @@ +{"b8385c1ca3dac39e":{"id":"com.android.devicerestrictionpolicy.appsblockinstallfromunknownsourcesaosp","displayName":"Block user from turning on unknown sources","description":"If 'True', prevents users from sideloading apps. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to sideload apps from unknown sources.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.appsblockinstallfromunknownsourcesaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsblockinstallfromunknownsourcesaosp_true","displayName":"True","description":"True","helpText":null}]},"b8bb2f289d6e280e":{"id":"com.android.devicerestrictionpolicy.nfcblockoutgoingbeam","displayName":"Block beaming data from apps using NFC (work profile-level)","description":"If 'True', prevents using the Near Field Communication (NFC) technology to beam data from apps. If 'False', Intune doesn't change or update this setting. By default, the OS might allow using NFC to share data between devices. Available for fully managed, dedicated and corporate-owned work profile (at work profile level) devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.nfcblockoutgoingbeam_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.nfcblockoutgoingbeam_false","displayName":"False","description":"false","helpText":null}]},"b85b4434b2a723a5":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordpreviouspasswordcounttoblock","displayName":"Number of passwords required before user can reuse a password","description":"Use this setting to restrict users from creating previously used work profile passwords. Enter the number of previously used passwords that can't be used, from 1-24. For example, enter 5 so users can't set a new password to their current password or any of their previous four passwords. If the value is blank, Intune doesn't change or update this setting. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-24)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"b8c0fb1499988ea3":{"id":"com.apple.applicationaccess_ratingappsexemptedbundleids","displayName":"Rating Apps Exempted Bundle IDs","description":"If present, the system exempts apps with bundle IDs in the array from age-based rating restrictions. The system uses intersection combine rules to combine multiple payloads and any exceptions that parental control apps provide, including ScreenTime.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"b83274ee834f75bb":{"id":"com.apple.directoryservice.managed_com.apple.directoryservice.managed","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"b8229266cc0689d4":{"id":"com.apple.finder_prohibitgotofolder","displayName":"Prohibit Go To Folder","description":"If true, users are prevented from opening a folder or file by typing the path to that item. ","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":[{"id":"com.apple.finder_prohibitgotofolder_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.finder_prohibitgotofolder_true","displayName":"True","description":null,"helpText":null}]},"b8806180cc435c15":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_application id","displayName":"ApplicationsSystem//Applications/Microsoft Teams classic.app/Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"b83b28dc7aa6c151":{"id":"com.apple.managedclient.preferences_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading","description":"If you set this policy to 3, websites can ask for read access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\n\nIf you don't set this policy, websites can ask for access. Users can change this setting.\n\nPolicy options mapping:\n\n* BlockFileSystemRead (2) = Don't allow any site to request read access to files and directories via the File System API\n\n* AskFileSystemRead (3) = Allow sites to ask the user to grant read access to files and directories via the File System API\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultfilesystemreadguardsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultfilesystemreadguardsetting_0","displayName":"Don't allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultfilesystemreadguardsetting_1","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},"b8f02940845581ff":{"id":"com.apple.managedclient.preferences_sleepingtabsblockedforurls","displayName":"Block Sleeping Tabs on specific sites","description":"Define a list of sites, based on URL patterns, that are not allowed to be put to sleep by Sleeping Tabs.\n\nIf the policy \"SleepingTabsEnabled\" is disabled, this list is not used and no sites will be put to sleep automatically.\n\nIf you don't configure this policy, all sites will be eligible to be put to sleep unless the user's personal configuration blocks them.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sleepingtabsblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"b8f2e3dd314acac8":{"id":"com.apple.managedclient.preferences_useragentclienthintsenabled","displayName":"Enable the User-Agent Client Hints feature","description":"This policy is deprecated because it's only intended to be a short-term mechanism to give enterprises more time to update their web content if and when it's found to be incompatible with the User-Agent Client Hints feature. It won't work in Microsoft Edge version 89.\n\nWhen enabled the User-Agent Client Hints feature sends granular request headers that provide information about the user browser (for example, the browser version) and environment (for example, the system architecture).\n\nThis is an additive feature, but the new headers may break some websites that restrict the characters that requests may contain.\n\nIf you enable or don't configure this policy, the User-Agent Client Hints feature is enabled. If you disable this policy, this feature is unavailable.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#useragentclienthintsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_useragentclienthintsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_useragentclienthintsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b822e627ca84f94a":{"id":"com.apple.managedclient.preferences_visualbasicmacroexecutionstate","displayName":"Visual Basic macro policy","description":"Controls whether Visual Basic macros are allowed to execute in Word, Excel, and PowerPoint.","helpText":null,"infoUrls":["https://aka.ms/macvbpref"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_visualbasicmacroexecutionstate_0","displayName":"Macros disabled by default, with warning to enable","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_visualbasicmacroexecutionstate_1","displayName":"Disable all macros","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_visualbasicmacroexecutionstate_2","displayName":"Always allow macros to run (potentially dangerous)","description":null,"helpText":null}]},"b80fcfff87f2b51e":{"id":"com.apple.systempreferences_com.apple.systempreferences","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"c7c1ed5a-a2ec-4237-bbf1-d5723f94d033","categoryName":"System Preferences","options":null},"b8c90ed628023916":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization","displayName":"Authorization","description":"The 'Authorization' key is an optional replacement for the 'Allowed' key. Every payload must specify either 'Authorization' or 'Allowed', but not both.\n'Allow': Equivalent to a 'true' value for the 'Allowed' key.\n'Deny': Equivalent to a 'false' value for the 'Allowed' key.\n'AllowStandardUserToSetSystemService:' allows a standard (non-admin) user to configure the permissions for the specified app in the Privacy preferences for services that otherwise require admin authorization. 'AllowStandardUserToSetSystemService' is only valid for the 'ListenEvent' and 'ScreenCapture' services.\nAvailable in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization_2","displayName":"AllowStandardUserToSetSystemService","description":null,"helpText":null}]},"b8fc813d7a734932":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"b8b0c2bd62d52f12":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"b87af942eba716a6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_recommended","displayName":"Allow importing of shortcuts (users can override)","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\n\nIf you disable this policy, Shortcuts aren't imported on first run.\n\nIf you don't configure this policy, Shortcuts are imported on first run.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\n\nNote: This policy currently manages import from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"b8e0b9ca2ffbea1c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhistorythumbnails","displayName":"Show thumbnail images for browsing history","description":"This policy lets you configure whether the history thumbnail feature collects and saves images for the sites you visit. When enabled, this feature makes it easier to identify sites when you hover over your history results.\nIf you don't configure this policy, the thumbnail feature is turned on after a user visits the history hub twice in the past seven days.\nIf you enable this policy, the history thumbnail collects and saves images for visited sites.\nIf you disable this policy, the history thumbnail doesn't collect and save images for visited sites.\nWhen the feature is disabled, existing images are deleted on a per user basis, and the feature no longer collects or saves images when a site is visited.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhistorythumbnails_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhistorythumbnails_true","displayName":"Enabled","description":null,"helpText":null}]},"b86095d49c422883":{"id":"device_vendor_msft_laps_policies_postauthenticationactions","displayName":"Post Authentication Actions ","description":"Use this setting to specify the actions to take upon expiration of the configured grace period.\n\nIf not specified, this setting will default to 3 (Reset the password and logoff the managed account).\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_postauthenticationactions_1","displayName":"Reset password: upon expiry of the grace period, the managed account password will be reset.","description":"Reset password: upon expiry of the grace period, the managed account password will be reset.","helpText":null},{"id":"device_vendor_msft_laps_policies_postauthenticationactions_3","displayName":"Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated.","description":"Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated.","helpText":null},{"id":"device_vendor_msft_laps_policies_postauthenticationactions_5","displayName":"Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted.","description":"Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted.","helpText":null},{"id":"device_vendor_msft_laps_policies_postauthenticationactions_11","displayName":"Reset the password, logoff the managed account, and terminate any remaining processes: upon expiration of the grace period, the managed account password is reset, any interactive logon sessions using the managed account are logged off, and any remaining processes are terminated.","description":"Reset the password, logoff the managed account, and terminate any remaining processes: upon expiration of the grace period, the managed account password is reset, any interactive logon sessions using the managed account are logged off, and any remaining processes are terminated.","helpText":null}]},"b8ca2bb77bbbd28f":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werarchive_2_werarchivebehavior","displayName":"Archive behavior:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werarchive_2_werarchivebehavior_2","displayName":"Store all","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werarchive_2_werarchivebehavior_1","displayName":"Store parameters only","description":null,"helpText":null}]},"b85dc955e186f826":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretryquittime_netlogon_backgroundretryquittimelabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"b884162170c4a045":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_scavengeinterval_netlogon_scavengeintervallabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"b8c88f17501c04b4":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging","displayName":"Turn on Module Logging","description":"\r\n This policy setting allows you to turn on logging for Windows PowerShell modules.\r\n\r\n If you enable this policy setting, pipeline execution events for members of the specified modules are recorded in the Windows PowerShell log in Event Viewer. Enabling this policy setting for a module is equivalent to setting the LogPipelineExecutionDetails property of the module to True.\r\n\r\n If you disable this policy setting, logging of execution events is disabled for all Windows PowerShell modules. Disabling this policy setting for a module is equivalent to setting the LogPipelineExecutionDetails property of the module to False.\r\n\r\n If this policy setting is not configured, the LogPipelineExecutionDetails property of a module or snap-in determines whether the execution events of a module or snap-in are logged. By default, the LogPipelineExecutionDetails property of all modules and snap-ins is set to False.\r\n\r\n To add modules and snap-ins to the policy setting list, click Show, and then type the module names in the list. The modules and snap-ins in the list must be installed on the computer.\r\n\r\n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enablemodulelogging"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_1","displayName":"Enabled","description":null,"helpText":null}]},"b8a33f0b649c7d5a":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_default_m","displayName":"Do not set default client printer to be default printer in a session","description":"This policy setting allows you to specify whether the client default printer is automatically set as the default printer in a session on an RD Session Host server.\r\n\r\nBy default, Remote Desktop Services automatically designates the client default printer as the default printer in a session on an RD Session Host server. You can use this policy setting to override this behavior.\r\n\r\nIf you enable this policy setting, the default printer is the printer specified on the remote computer.\r\n\r\nIf you disable this policy setting, the RD Session Host server automatically maps the client default printer and sets it as the default printer upon connection.\r\n\r\nIf you do not configure this policy setting, the default printer is not specified at the Group Policy level.\r\n\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-default-m"],"categoryId":"f1455024-7de9-448f-8d8f-a42db2af0a35","categoryName":"Printer Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_default_m_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_default_m_1","displayName":"Enabled","description":null,"helpText":null}]},"b8369f6974310493":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_mediaplayer","displayName":"Windows Media Player ** (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_mediaplayer_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_mediaplayer_1","displayName":"True","description":null,"helpText":null}]},"b838ee7ddf3b8b81":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_quickassist","displayName":"Quick Assist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_quickassist_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_quickassist_1","displayName":"True","description":null,"helpText":null}]},"b8e7f973459071c5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"b80bf9e7dfd10b4b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed","displayName":"Allow reporting of domain reliability related data","description":"If this policy is set false, domain reliability diagnostic data reporting is disabled and no data is sent to Google.\r\nIf this policy is set true or not set, domain reliability diagnostic data reporting will follow the behavior of MetricsReportingEnabled for Google Chrome or DeviceMetricsReportingEnabled for Google ChromeOS.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"b8f253fb14009051":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_tabdiscardingexceptionsdesc","displayName":"URL pattern Exceptions to tab discarding (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"b8889c0d34834448":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol","displayName":"Allow only approved domains to use the TDC ActiveX control","description":"This policy setting controls whether or not the user is allowed to run the TDC ActiveX control on websites.\n\nIf you enable this policy setting, the TDC ActiveX control will not run from websites in this zone.\n\nIf you disable this policy setting, the TDC Active X control will run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowonlyapproveddomainstousetdcactivexcontrol"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"b80b9159ecc6b37a":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows","displayName":"Enable dragging of content from different domains across windows","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when both the source and destination are in different windows. Users cannot change this setting.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in different windows. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy or do not configure it, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1","displayName":"Enabled","description":null,"helpText":null}]},"b889f26e38a4ff0a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_extensioninstallallowlistdesc","displayName":"Extension IDs to exempt from the block list (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"b87ccda6f26dd50e":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled","displayName":"Microsoft Edge management enabled","description":"Microsoft Edge management service in Microsoft 365 Admin Center lets you set policy and manage users through a Microsoft Edge focused cloud-based management experience. This policy lets you control whether Microsoft Edge management is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will attempt to connect to the Microsoft Edge management service to download and apply policy assigned to the Azure AD account of the user.\r\n\r\nIf you disable this policy, Microsoft Edge will not attempt to connect to the Microsoft Edge management service.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b868294aa389195f":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio","description":"This policy determines whether the browser enables adaptive buffering\r\nfor Web Audio. Adaptive buffering can reduce audio glitches but may\r\nincrease latency to varying degrees.\r\n\r\nEnabled: The browser will always use adaptive buffering.\r\nDisabled or Not Set: The browser will automatically decide during the\r\n feature launch process whether to use adaptive buffering.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b8add6fe017f7798":{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_localnetworkaccessblockedforurlsdesc","displayName":"Block sites from making requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"b8db4628b5c7b71b":{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled","displayName":"Enable tab preview on hover","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\r\n\r\nIf you disable this policy, tab previews will not be shown on hover.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b864c01880d2c529":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls_loopbacknetworkallowedforurlsdesc","displayName":"Allow sites to make network requests to the local device. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"b87fac42accc3b34":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_exprwdexe52","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_exprwdexe52_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_exprwdexe52_1","displayName":"True","description":null,"helpText":null}]},"b86841772bb0a496":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_msaccessexe53","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_msaccessexe53_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_msaccessexe53_1","displayName":"True","description":null,"helpText":null}]},"b8ed9c596b3ecf3c":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winprojexe62","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winprojexe62_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winprojexe62_1","displayName":"True","description":null,"helpText":null}]},"b875953435721c32":{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationservice","displayName":"Allow CredSSP authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts CredSSP authentication from a remote client.\n\n If you enable this policy setting, the WinRM service accepts CredSSP authentication from a remote client.\n\n If you disable or do not configure this policy setting, the WinRM service does not accept CredSSP authentication from a remote client.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowcredsspauthenticationservice"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationservice_1","displayName":"Enabled","description":null,"helpText":null}]},"b8908d5ae31b878a":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash","displayName":"Block Flash player in Office (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash_block all flash activation","displayName":"Block all activation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash_block embedded flash activation only","displayName":"Block embedding/linking, allow other activation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash_allow all flash activation","displayName":"Allow all activation","description":null,"helpText":null}]},"b8b68d909a038b98":{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptshiftjis","displayName":"Exclude Japanese IME Except Shift JIS","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the users to restrict character code range of conversion by setting the character filter.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#excludejapaneseimeexceptshiftjis"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptshiftjis_0","displayName":"No characters are filtered.","description":"No characters are filtered.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptshiftjis_1","displayName":"All characters except ShiftJIS are filtered.","description":"All characters except ShiftJIS are filtered.","helpText":null}]},"b84ae9ed40567bba":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}","displayName":"Elevation Rule Name","description":"Unique alpha numeric identifier for the rule. The rule name must not include a forward slash (/).","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"b8663857a471a0df":{"id":"device_vendor_msft_scepcertificate_certificatetype","displayName":"CertificateType","description":null,"helpText":"","infoUrls":[],"categoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","categoryName":"SCEP certificate","options":null},"b8e4a5a7380f6e4a":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_lockfontsize","displayName":"Prohibit selection of visual style font size (User)","description":"Prevents users from changing the size of the font in the windows and buttons displayed on their screens.\r\n\r\nIf this setting is enabled, the \"Font size\" drop-down list on the Appearance tab in Display Properties is disabled. \r\n\r\nIf you disable or do not configure this setting, a user may change the font size using the \"Font size\" drop-down list on the Appearance tab.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-lockfontsize"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_lockfontsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_lockfontsize_1","displayName":"Enabled","description":null,"helpText":null}]},"b8f527d5791a41c1":{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_1","displayName":"Tape Drives: Deny read access (User)","description":"This policy setting denies read access to the Tape Drive removable storage class.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-tapedrives-denyread-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"b889cd1b001a0a71":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio","displayName":"Microsoft Visio 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Visio 2016.\r\nBy default, the user settings of Microsoft Visio 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016visio"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio_1","displayName":"Enabled","description":null,"helpText":null}]},"b8a088a662ebcb67":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013","displayName":"Microsoft Office 365 InfoPath 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 InfoPath 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 InfoPath 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 InfoPath 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 InfoPath 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 InfoPath 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365infopath2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013_1","displayName":"Enabled","description":null,"helpText":null}]},"b8c45071f4c96aee":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl","displayName":"URL of an XML file that contains URLs that should never trigger a browser switch. (User)","description":"Setting the policy to a valid URL has Google Chrome download the site list from that URL and apply the rules as if they were set up with the BrowserSwitcherUrlGreylist policy. These policies prevent Google Chrome and the alternative browser from opening one another.\r\n\r\nLeaving it unset (or set to a invalid URL) means Google Chrome doesn't use the policy as a source of rules for not switching browsers.\r\n\r\nNote: This policy points to an XML file in the same format as Internet Explorer®'s SiteList policy. This loads rules from an XML file, without sharing those rules with Internet Explorer®. Read more on Internet Explorer®'s SiteList policy ( https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode )\r\n\r\nExample value: http://example.com/greylist.xml","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl_1","displayName":"Enabled","description":null,"helpText":null}]},"b88eaffe510c2d6f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar","displayName":"Show the Google Cast toolbar icon (User)","description":"Setting the policy to Enabled displays the Cast toolbar icon on the toolbar or the overflow menu, and users can't remove it.\r\n\r\nSetting the policy to Disabled or leaving it unset lets users pin or remove the icon through its contextual menu.\r\n\r\nIf the policy EnableMediaRouter is set to Disabled, then this policy's value has no effect, and the toolbar icon doesn't appear.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},"b86c6cf5d75849c2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":null},"b8a23fb89f67c226":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled","displayName":"Enable chrome://devices (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b8a47c82b378a495":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed","displayName":"Restore permissive Chrome Apps behavior (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"b8cb453c81ba8cc2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_datecolon74","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"b8fdca64e2f820fb":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809","displayName":"Use Pop-up Blocker (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_3","displayName":"Disable","description":null,"helpText":null}]},"b896423a459d0dae":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled. (User)","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy.\r\nCurrently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers.\r\nThis enterprise policy can be used to opt out of this gradual deprecation by forcing the default to stay enabled.\r\n\r\nPages might depend on unload event handlers to save data or signal the end of a user session to the server.\r\nThis is not recommended because it's unreliable and impacts performance by blocking use of BackForwardCache.\r\nRecommended alternatives exist, but the unload event has been used for a long time. Some applications might still rely on them.\r\n\r\nIf you disable this policy or don't configure it, unload event handlers will gradually be deprecated in-line with the deprecation rollout and sites which don't set Permissions-Policy header will stop firing `unload` events.\r\n\r\nIf you enable this policy then unload event handlers will continue to work by default.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b8abb78bb95c385c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_authnegotiatedelegateallowlist","displayName":"Specifies a list of servers that Microsoft Edge can delegate user credentials to (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"b845988eec6b6000":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended","displayName":"Configure the sticky print preview settings (User)","description":"Configuring this policy sets the print preview settings as the most recent choice in Print Preview instead of the default print preview settings.\r\n\r\nEach item of this policy expects a boolean:\r\n\r\nLayout specifies if the webpage layout should be kept sticky or not in print preview settings. If we set this to True the webpage layout uses the recent choice otherwise it will set to default value.\r\n\r\nSize specifies if the page size should be kept sticky or not in print preview settings. If we set this to True the page size uses the recent choice otherwise it will set to default value.\r\n\r\nScale Type specifies if the scaling percentage and scale type should be kept sticky or not in print preview settings. If we set this to True the scale percentage and scale type both uses the recent choice oherwise it will set to default value.\r\n\r\nMargins specifies if the page margin should be kept sticky or not in print preview settings. If we set this to True the page margins uses the recent choice otherwise it will set to default value.\r\n\r\nIf you enable this policy, the selected values will use the most recent choice in Print Preview.\r\n\r\nIf you disable or don't configure this policy, print preview settings will not be impacted.\r\n\r\nExample value:\r\n\r\n{\r\n \"layout\": false,\r\n \"margins\": true,\r\n \"scaleType\": false,\r\n \"size\": true\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"layout\": false, \"margins\": true, \"scaleType\": false, \"size\": true}","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"b8d59ea5d8f10968":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed","displayName":"Live translation allowed (User)","description":"Allow users to turn the Realtime Video Translation feature on or off.\r\n\r\nThis feature allows videos being watched to be translated to the selected language in real time or live. Users need to click the translate icon that appears when they hover over a video to get started.\r\n\r\nThis is the on-device feature and none of the audio, data or even translated audio leave the device.\r\n\r\nIf you enable or don't configure this policy, users can turn this feature on or off in edge://settings/languages.\r\nIf you disable this policy, users will not be able to turn this feature on. If user has been using the feature already and policy gets disabled, the feature related files downloaded previously, will be deleted from the device after 30 days. We recommend not to disable the policy, unless it is needed in your environment.\r\n\r\nIf users enable this feature, the feature related files (approximately 200 megabytes) will be downloaded to the device on the first run and periodically thereafter to enhance performance and accuracy. These files will be deleted 30 days after their last use.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"b85dc9a170fceda5":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog (User)","description":"This policy controls whether the \"Always allow this site to open links of this type\" checkbox is shown on external protocol launch confirmation prompts.\r\n\r\nIf you set this policy to True, when an external protocol confirmation prompt is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.\r\n\r\nIf you set this policy to False, the \"Always allow\" checkbox isn't displayed. The user will be prompted for confirmation every time an external protocol is invoked.\r\n\r\nIf this policy is unset, the checkbox visibility is controlled by the \"Enable remembering protocol launch prompting preferences\" flag in edge://flags","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox_1","displayName":"Enabled","description":null,"helpText":null}]},"b8a1f4bd8bab296f":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links (User)","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\r\n\r\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\r\n\r\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' is not provided, the URL is used as the default title. If 'pinned' is not provided, the default value is false.\r\n\r\nMicrosoft Edge presents these in the order listed, from left to right, with all pinned tiles displayed ahead of non-pinned tiles.\r\n\r\nIf the policy is set as mandatory, the 'pinned' field will be ignored and all tiles will be pinned. The tiles can't be deleted by the user and will always appear at the front of the quick links list.\r\n\r\nIf the policy is set as recommended, pinned tiles will remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying non-pinned links via this policy to an existing browser profile, the links may not appear at all, depending on how they rank compared to the user's browsing history.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"pinned\": true,\r\n \"title\": \"Contoso Portal\",\r\n \"url\": \"https://contoso.com\"\r\n },\r\n {\r\n \"title\": \"Fabrikam\",\r\n \"url\": \"https://fabrikam.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_1","displayName":"Enabled","description":null,"helpText":null}]},"b88f13bcb4913f6a":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_webappinstallforcelist","displayName":"URLs for Web Apps to be silently installed. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"b8760e168c7bf2ed":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout","displayName":"Sets layout for printing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout_0","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout_1","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},"b8c727faaf37c034":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastserviceserverdescription8","displayName":"Description (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"b8240749e97078f5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache8_l_workflowcachename463","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"b8709584e9876ce5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage50","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage50_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage50_1","displayName":"True","description":null,"helpText":null}]},"b8463f6418965274":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoversrvrecord","displayName":"Exclude the SRV record query in DNS (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoversrvrecord_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_outlookdisableautodiscover_l_outlookdisableautodiscoversrvrecord_1","displayName":"True","description":null,"helpText":null}]},"b83c6bee9014ae0d":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp","displayName":"Turn off file synchronization via SOAP over HTTP (User)","description":"This policy setting controls file synchronization via SOAP over HTTP for PowerPoint.\r\n\r\nIf you enable this policy setting, file synchronization via SOAP over HTTP is turned off for PowerPoint.\r\n\r\nIf you disable or do not configure this policy setting this policy setting, file synchronization via SOAP over HTTP is turned on for PowerPoint.\r\n\r\nNote: Turning off file synchronization via SOAP over HTTP will also prevent co-authoring and adversely affect the behavior of SharePoint Workspaces.","helpText":"","infoUrls":[],"categoryId":"7aeaf6f8-5511-4216-9483-28f432a5a08f","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_1","displayName":"Enabled","description":null,"helpText":null}]},"b885195c44e86f97":{"id":"user_vendor_msft_policy_config_printers_enabledevicecontroluser","displayName":"Enable Device Control Printing Restrictions (User)","description":"\r\n Determines whether Device Control Printing Restrictions are enforced for printing on this computer.\r\n\r\n By default, there are no restrictions to printing based on connection type or printer Make/Model.\r\n\r\n If you enable this setting, the computer will restrict printing to printer connections on the corporate network or approved USB-connected printers.\r\n\r\n If you disable this setting or do not configure it, there are no restrictions to printing based on connection type or printer Make/Model.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-enabledevicecontroluser"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_printers_enabledevicecontroluser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_printers_enabledevicecontroluser_1","displayName":"Enabled","description":null,"helpText":null}]},"b863c655d1c1d9ac":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjschedproj_l_pjassignmentunits_l_pjassignmentunits21","displayName":"Show assignment units as (User)","description":"","helpText":"","infoUrls":[],"categoryId":"304a579b-ff3b-4897-8bb8-5a1dda45356f","categoryName":"Schedule options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjschedproj_l_pjassignmentunits_l_pjassignmentunits21_0","displayName":"Percentage","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjschedproj_l_pjassignmentunits_l_pjassignmentunits21_1","displayName":"Decimal","description":null,"helpText":null}]},"b872626529acc457":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]},"b846c770bad5eb37":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":null},"b8057e53e60129a3":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_allowhostpolicymerge","displayName":"Allow Host Policy Merge","description":"This value is used as an on/off switch. If this value is true, applicable host firewall rules and settings will be applied to Hyper-V Firewall.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_allowhostpolicymerge_false","displayName":"AllowHostPolicyMerge Off","description":"AllowHostPolicyMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_allowhostpolicymerge_true","displayName":"AllowHostPolicyMerge On","description":"AllowHostPolicyMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/b9.json b/public/intune-definitions/b9.json new file mode 100644 index 000000000000..680276da5fef --- /dev/null +++ b/public/intune-definitions/b9.json @@ -0,0 +1 @@ +{"b9676de43c52174a":{"id":"com.apple.applicationaccess_allowcloudcalendar","displayName":"Allow Cloud Calendar","description":"If false, disables iCloud Calendar services. Available in macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudcalendar_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudcalendar_true","displayName":"True","description":null,"helpText":null}]},"b9621076007ae2cc":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app","displayName":"Microsoft Edge Canary (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"b953bf8c639c9ec8":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_lcid","displayName":"Microsoft Excel LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"b9bf8273c7005bbf":{"id":"com.apple.system.logging_system","displayName":"System","description":"This dictionary has one key, Enable Private Data. Setting that value to true enables private data logging for the entire system.","helpText":null,"infoUrls":[],"categoryId":"0d4d90ab-7ad8-4524-ade0-bc01aa7b71a3","categoryName":"System Logging","options":null},"b99632039a8a648e":{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"b9ac7bad68ac0487":{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_allowed","displayName":"Allowed (Deprecated)","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_listenevent_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"b9e58a2ef622ef56":{"id":"com.apple.webcontent-filter_permittedurls","displayName":"Permitted URLs","description":"An array or URLs that are accessible whether or not the automatic filter allows access. The system uses this array only when Auto Filter Enabled is true. Otherwise, it ignores this field.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"b9283bb4b5e29f7b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT","description":"Allows you to set whether Microsoft Edge runs the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\n\nDisabling the JavaScript JIT means that Microsoft Edge can render web content more slowly, and can also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT can allow Microsoft Edge to render web content in a more secure configuration.\n\nThis policy can be overridden for specific URL patterns using the \"JavaScriptJitAllowedForSites\" and \"JavaScriptJitBlockedForSites\" policies.\n\nIf you don't configure this policy, JavaScript JIT is enabled.\n\nPolicy options mapping:\n\n* AllowJavaScriptJit (1) = Allow any site to run JavaScript JIT\n\n* BlockJavaScriptJit (2) = Do not allow any site to run JavaScript JIT\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptjitsetting_allowjavascriptjit","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptjitsetting_blockjavascriptjit","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},"b95cff4e93023ce1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerpasskeysenabled","displayName":"Enable saving passkeys to the password manager","description":"This policy controls whether users can save passkeys in the built-in password manager. It does not limit access to, or change the contents of, passkeys already saved in the password manager.\n\nIf the PasswordManagerEnabled policy is Disabled, saving to the built-in password manager is disabled in general, including passkeys. In this case, this policy has no effect.\n\nIf this policy is enabled or not configured, users can save passkeys in the built-in password manager when signed in to Microsoft Edge.\n\nIf this policy is disabled, users cannot save new passkeys to the built-in password manager. Previously saved passkeys continue to work.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerpasskeysenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerpasskeysenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"b9641cc5a3d46818":{"id":"device_vendor_msft_passportforwork_biometrics_usebiometrics","displayName":"Allow Use of Biometrics","description":"Windows Hello for Business enables users to use biometric gestures, such as face and fingerprints, as an alternative to the PIN gesture. However, users must still configure a PIN to use in case of failures.\n\nIf you enable or do not configure this policy setting, Windows Hello for Business allows the use of biometric gestures.\n\nIf you disable this policy setting, Windows Hello for Business prevents the use of biometric gestures.\n\nNOTE: Disabling this policy prevents the use of biometric gestures on the device for all account types.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_biometrics_usebiometrics_false","displayName":"False","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_biometrics_usebiometrics_true","displayName":"True","description":"Enabled","helpText":null}]},"b9dd2eb159901734":{"id":"device_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_2","displayName":"Do not process the run once list","description":"This policy setting ignores customized run-once lists.\r\n\r\nYou can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts.\r\n\r\nIf you enable this policy setting, the system ignores the run-once list.\r\n\r\nIf you disable or do not configure this policy setting, the system runs the programs in the run-once list.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.\r\n\r\nNote: Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce.\r\n\r\nAlso, see the \"Do not process the legacy run list\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disableexplorerrunoncelegacy-2"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_2_1","displayName":"Enabled","description":null,"helpText":null}]},"b9b8399e5ca25a3d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxdepth","displayName":"Specify the maximum depth to scan archive files","description":"This policy setting allows you to configure the maximum directory depth level into which archive files such as .ZIP or .CAB are unpacked during scanning. The default directory depth level is 0.\r\n\r\n If you enable this setting, archive files will be scanned to the directory depth level specified.\r\n\r\n If you disable or do not configure this setting, archive files will be scanned to the default directory depth level.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-archivemaxdepth"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxdepth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_archivemaxdepth_1","displayName":"Enabled","description":null,"helpText":null}]},"b938f7cd0d39a72f":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescheduleday","displayName":"Configure local setting override for schedule scan day","description":"This policy setting configures a local override for the configuration of scheduled scan day. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-localsettingoverridescheduleday"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescheduleday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverridescheduleday_1","displayName":"Enabled","description":null,"helpText":null}]},"b91619c3411cc75e":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_2","displayName":"Prevent Input Panel tab from appearing","description":"Prevents Input Panel tab from appearing on the edge of the Tablet PC screen.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel tab will not appear on the edge of the Tablet PC screen. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel tab will appear on the edge of the Tablet PC screen. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel tab will appear on the edge of the Tablet PC screen. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n\r\nCaution: If you enable both the “Prevent Input Panel from appearing next to text entry areas” policy and the “Prevent Input Panel tab from appearing” policy, and disable the “Show Input Panel taskbar icon” policy, the user will then have no way to access Input Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-edgetarget-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_2_1","displayName":"Enabled","description":null,"helpText":null}]},"b9dd84c7ae6bb46d":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_client_port","displayName":"Set Teredo Client Port","description":"This policy setting allows you to select the UDP port the Teredo client will use to send packets. If you leave the default of 0, the operating system will select a port (recommended). If you select a UDP port that is already in use by a system, the Teredo client will fail to initialize.\r\n\r\nIf you enable this policy setting, you can customize a UDP port for the Teredo client.\r\n\r\nIf you disable or do not configure this policy setting, the local host setting is used.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-teredo-client-port"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_client_port_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_client_port_1","displayName":"Enabled","description":null,"helpText":null}]},"b94edb02f0fd4c7c":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit","displayName":"Active session limit :","description":null,"helpText":"","infoUrls":[],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_0","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_2_ts_sessions_activelimit_432000000","displayName":"5 days","description":null,"helpText":null}]},"b9a320e7d3b6095f":{"id":"device_vendor_msft_policy_config_admx_windowsmediadrm_disableonline","displayName":"Prevent Windows Media DRM Internet Access","description":"Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet).\r\n\r\nWhen enabled, Windows Media DRM is prevented from accessing the Internet (or intranet) for license acquisition and security upgrades.\r\n\r\nWhen this policy is enabled, programs are not able to acquire licenses for secure content, upgrade Windows Media DRM security components, or restore backed up content licenses. Secure content that is already licensed to the local computer will continue to play. Users are also able to protect music that they copy from a CD and play this protected content on their computer, since the license is generated locally in this scenario.\r\n\r\nWhen this policy is either disabled or not configured, Windows Media DRM functions normally and will connect to the Internet (or intranet) to acquire licenses, download security upgrades, and perform license restoration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediadrm#admx-windowsmediadrm-disableonline"],"categoryId":"19ab385f-14f5-47cd-87b2-f4784eedcdd9","categoryName":"Windows Media Digital Rights Management","options":[{"id":"device_vendor_msft_policy_config_admx_windowsmediadrm_disableonline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsmediadrm_disableonline_1","displayName":"Enabled","description":null,"helpText":null}]},"b968acd5385ca47a":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_action","displayName":"Action","description":"Sets a rule to allow or deny the configured settings.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_action_allow","displayName":"Allow","description":null,"helpText":null}},"b9ed8dc0bee76279":{"id":"device_vendor_msft_policy_config_autoplay_turnoffautoplay","displayName":"Turn off Autoplay","description":"This policy setting allows you to turn off the Autoplay feature.\n\n Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.\n\n Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.\n\n Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.\n\n If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.\n\n This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.\n\n If you disable or do not configure this policy setting, AutoPlay is enabled.\n\n Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-turnoffautoplay"],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"device_vendor_msft_policy_config_autoplay_turnoffautoplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_autoplay_turnoffautoplay_1","displayName":"Enabled","description":null,"helpText":null}]},"b975569ab5d293cd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_browserswitcherurlgreylistdesc","displayName":"Websites that should never trigger a browser switch. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"b92c2f09ee8c48fa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist_nativemessagingblacklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"b9b309a0538b8b6f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls","displayName":"URLs to open on startup","description":"If RestoreOnStartup is set to RestoreOnStartupIsURLs, then setting RestoreOnStartupURLs to a list of URLs specify which URLs open.\r\n\r\nIf not set, the New Tab page opens on start up.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nhttps://example.com\r\nhttps://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_1","displayName":"Enabled","description":null,"helpText":null}]},"b940eb30681c94bb":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability","displayName":"Enable Battery Saver Mode","description":"This policy enables or disables the Battery Saver Mode setting.\r\nOn Chrome, this setting makes it so that frame rate is throttled to lower power consumption. If this policy is unset, the end user can control this setting in chrome://settings/performance.\r\nOn ChromeOS, this setting makes it so that frame rate and CPU frequency are throttled, backlights are dimmed, and Android is put in Battery Saver Mode. On devices with multiple CPUs, some CPUs will be turned off.\r\nThe different levels are:\r\nDisabled (0): Battery Saver Mode will be disabled.\r\nEnabledBelowThreshold (1): Battery Saver Mode will be enabled when the device is on battery power and battery level is low.\r\nEnabledOnBattery (2): This value is deprecated as of M121. From M121 onwards, values will be treated as EnabledBelowThreshold.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"b9ae45bb4fb9a1e8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting","displayName":"Default third-party storage partitioning setting","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"b939772d882dfa40":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides","displayName":"Override First-Party Sets.","description":"This policy provides a way to override the list of sets the browser uses for First-Party Sets features.\r\n\r\nEach set in the browser's list of First-Party Sets must meet the requirements of a First-Party Set.\r\nA First-Party Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all of its ccTLD variants.\r\nSee https://github.com/WICG/first-party-sets for more information on First-Party Sets are used by Google Chrome.\r\n\r\nAll sites in a First-Party Set must be a registrable domain served over HTTPS. Each site in a First-Party Set must also be unique,\r\nmeaning a site cannot be listed more than once in a First-Party Set.\r\n\r\nWhen this policy is given an empty dictionary, the browser uses the public list of First-Party Sets.\r\n\r\nFor all sites in a First-Party Set from the replacements list, if a site is also present\r\non a First-Party Set in the browser's list, then that site will be removed from the browser's First-Party Set.\r\nAfter this, the policy's First-Party Set will be added to the browser's list of First-Party Sets.\r\n\r\nFor all sites in a First-Party Set from the additions list, if a site is also present\r\non a First-Party Set in the browser's list, then the browser's First-Party Set will be updated so that the\r\nnew First-Party Set can be added to the browser's list. After the browser's list has been updated,\r\nthe policy's First-Party Set will be added to the browser's list of First-Party Sets.\r\n\r\nThe browser's list of First-Party Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site cannot be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) are not supported as a policy value, nor within any First-Party Set in these lists.\r\n\r\nAll sets provided by the policy must be valid First-Party Sets, if they aren't then an\r\nappropriate error will be outputted.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nThis is the equivalent of the RelatedWebsiteSetsOverrides policy.\r\nEither policy may be used, but this one will be deprecated soon so the RelatedWebsiteSetsOverrides policy is preferred.\r\nThey both have the same effect on the browser's behavior.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=FirstPartySetsOverrides for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"categoryId":"da78ddbc-fc94-48f9-8808-4b160d6f1d50","categoryName":"First- Party Sets Settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},"b9b66a19684cd395":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings","displayName":"Prevent installation of devices not described by other policy settings","description":"This policy setting allows you to prevent the installation of devices that are not specifically described by any other policy setting.\r\n\r\nIf you enable this policy setting, Windows is prevented from installing or updating the device driver for any device that is not described by either the \"Allow installation of devices that match any of these device IDs\" or the \"Allow installation of devices for these device classes\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, Windows is allowed to install or update the device driver for any device that is not described by the \"Prevent installation of devices that match any of these device IDs,\" \"Prevent installation of devices for these device classes,\" or \"Prevent installation of removable devices\" policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"b92d72b850182e11":{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordlength","displayName":"Min Device Password Length","description":"Specifies the minimum number or characters required in the PIN or password.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#mindevicepasswordlength"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"b992b405ab19d9dd":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_systemobjects_strengthendefaultpermissionsofinternalsystemobjects","displayName":"System Objects Strengthen Default Permissions Of Internal System Objects","description":"System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links) This security setting determines the strength of the default discretionary access control list (DACL) for objects. Active Directory maintains a global list of shared system resources, such as DOS device names, mutexes, and semaphores. In this way, objects can be located and shared among processes. Each type of object is created with a default DACL that specifies who can access the objects and what permissions are granted. If this policy is enabled, the default DACL is stronger, allowing users who are not administrators to read shared objects but not allowing these users to modify shared objects that they did not create. Default: Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#systemobjects_strengthendefaultpermissionsofinternalsystemobjects"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"b9058417031daafa":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations","displayName":"User Account Control Virtualize File And Registry Write Failures To Per User Locations","description":"User Account Control: Virtualize file and registry write failures to per-user locations This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\\system32, or HKLM\\Software. The options are: • Enabled: (Default) Application write failures are redirected at run time to defined user locations for both the file system and registry. • Disabled: Applications that write data to protected locations fail.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"b9df95db33ab41dd":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt","displayName":"Allow cross-origin HTTP Basic Auth prompts","description":"Controls whether third-party sub-content on a page can open an HTTP Basic Auth dialog box.\r\n\r\nTypically, this is disabled as a phishing defense. If you don't configure this policy, it's disabled and third-party sub-content can't open a HTTP Basic Auth dialog box.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"b9233ceadd0d8e30":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_customhelplink","displayName":"Specify custom help link (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"b98bd642a82dce17":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy","displayName":"Use a default referrer policy of no-referrer-when-downgrade. (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis enterprise policy is for short-term adaptation and will be removed in M83.\r\n\r\nMicrosoft Edge’s default referrer policy is being strengthened from its current value of no-referrer-when-downgrade to the more secure strict-origin-when-cross-origin through a gradual rollout targeting M80 stable.\r\n\r\nBefore the rollout, this enterprise policy will have no effect. After the rollout, when this enterprise policy is enabled, Microsoft Edge’s default referrer policy will be set to its pre-M80 value of no-referrer-when-downgrade.\r\n\r\nThis enterprise policy is disabled by default","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"b921034d8d79bc8d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_onenoteexe180","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_onenoteexe180_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_onenoteexe180_1","displayName":"True","description":null,"helpText":null}]},"b92d1111e92c60a5":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_forcedenytheseapps","displayName":"Let Apps Access Camera Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"b964ec0ffec2db2c":{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement","displayName":"Allow remote server management through WinRM","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service automatically listens on the network for requests on the HTTP transport over the default HTTP port.\n\nIf you enable this policy setting, the WinRM service automatically listens on the network for requests on the HTTP transport over the default HTTP port.\n\nTo allow WinRM service to receive requests over the network, configure the Windows Firewall policy setting with exceptions for Port 5985 (default port for HTTP).\n\nIf you disable or do not configure this policy setting, the WinRM service will not respond to requests from a remote computer, regardless of whether or not any WinRM listeners are configured.\n\nThe service listens on the addresses specified by the IPv4 and IPv6 filters. The IPv4 filter specifies one or more ranges of IPv4 addresses, and the IPv6 filter specifies one or more ranges of IPv6addresses. If specified, the service enumerates the available IP addresses on the computer and uses only addresses that fall within one of the filter ranges.\n\nYou should use an asterisk (*) to indicate that the service listens on all available IP addresses on the computer. When * is used, other ranges in the filter are ignored. If the filter is left blank, the service does not listen on any addresses.\n\nFor example, if you want the service to listen only on IPv4 addresses, leave the IPv6 filter empty.\n\nRanges are specified using the syntax IP1-IP2. Multiple ranges are separated using \",\" (comma) as the delimiter.\n\nExample IPv4 filters:\\n2.0.0.1-2.0.0.20, 24.0.0.1-24.0.0.22\nExample IPv6 filters:\\n3FFE:FFFF:7654:FEDA:1245:BA98:0000:0000-3FFE:FFFF:7654:FEDA:1245:BA98:3210:4562","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowremoteservermanagement"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement_1","displayName":"Enabled","description":null,"helpText":null}]},"b96e6c43e74d0df1":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_powerpnt","displayName":"PowerPoint: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"b9c3ef52ad28f3d7":{"id":"device_vendor_msft_policy_config_storage_configstoragesenseglobalcadence","displayName":"Config Storage Sense Global Cadence","description":"Storage Sense can automatically clean some of the user’s files to free up disk space. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the desired Storage Sense cadence. The following are supported options:1 – Daily7 – Weekly30 – Monthly0 – During low free disk spaceThe default is 0 (during low free disk space). If you do not configure this policy setting, then the Storage Sense cadence is set to “during low free disk space” by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesenseglobalcadence"],"categoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","categoryName":"Storage","options":null},"b9620151f5e9785f":{"id":"device_vendor_msft_policy_config_update_pausefeatureupdates","displayName":"Pause Feature Updates","description":"Since this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Allows IT Admins to pause Feature Updates for up to 60 days.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausefeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_pausefeatureupdates_0","displayName":"Feature Updates are not paused.","description":"Feature Updates are not paused.","helpText":null},{"id":"device_vendor_msft_policy_config_update_pausefeatureupdates_1","displayName":"Feature Updates are paused for 60 days or until value set to back to 0, whichever is sooner.","description":"Feature Updates are paused for 60 days or until value set to back to 0, whichever is sooner.","helpText":null}]},"b98e794b4e2a7bee":{"id":"device_vendor_msft_policy_config_windowslogon_overrideshellprogram","displayName":"Override Shell Program","description":"This policy is used by IT admin to override the registry based shell program.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsLogon#overrideshellprogram"],"categoryId":"500d2bb1-5186-447c-818f-401f2d9065ce","categoryName":"Windows Logon","options":[{"id":"device_vendor_msft_policy_config_windowslogon_overrideshellprogram_0","displayName":"Not Configured","description":"Not Configured","helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_overrideshellprogram_1","displayName":"Apply Lightweight shell","description":"Apply Lightweight shell","helpText":null}]},"b973c48fd9cb0940":{"id":"mathsettings_calculator_programmermode","displayName":"Programmer Mode","description":"If present, configures the programmer mode of the calculator. If not present, programmer mode is enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"b955c7a003140eb4":{"id":"passcode_requirecomplexpasscode","displayName":"Require Complex Passcode","description":"If set to true, a complex passcode is required. A complex passcode is one that does not contain repeated characters, or increasing/decreasing characters (such as 123 or CBA), but must contain at least one non-number/non-letter character.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":[{"id":"passcode_requirecomplexpasscode_false","displayName":"False","description":null,"helpText":null},{"id":"passcode_requirecomplexpasscode_true","displayName":"True","description":null,"helpText":null}]},"b90290a2bdb6aed4":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_datecolon56","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"b9ed356a85e99026":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion","displayName":"Inclusion list for moderate risk file types (User)","description":"This policy setting allows you to configure the list of moderate-risk file types. If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file. This inclusion list overrides the list of potentially high-risk file types built into Windows and it takes precedence over the low-risk inclusion list but has a lower precedence than the high-risk inclusion list (where an extension is listed in more than one inclusion list).\r\n\r\nIf you enable this policy setting, you can specify file types which pose a moderate risk.\r\n\r\nIf you disable this policy setting, Windows uses its default trust logic.\r\n\r\nIf you do not configure this policy setting, Windows uses its default trust logic.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-setmodriskinclusion"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion_1","displayName":"Enabled","description":null,"helpText":null}]},"b95c090b6266dfb4":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_moving","displayName":"Prohibit adjusting desktop toolbars (User)","description":"Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.\r\n\r\nThis setting does not prevent users from adding or removing toolbars on the desktop.\r\n\r\nNote: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.\r\n\r\nAlso, see the \"Prevent adding, dragging, dropping and closing the Taskbar's toolbars\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-db-moving"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_moving_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_moving_1","displayName":"Enabled","description":null,"helpText":null}]},"b9a911d5f2320b88":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist","displayName":"Process Mitigation Options (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":null},"b93727698dc47e93":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_lbl_customgoofflineactionslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"b962ef2e91a3a193":{"id":"user_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_1","displayName":"All Removable Storage classes: Deny all access (User)","description":"Configure access to all removable storage classes.\r\n\r\nThis policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class.\r\n\r\nIf you enable this policy setting, no access is allowed to any removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removablestorageclasses-denyall-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"b949d2beabedc355":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places2","displayName":"Item 3 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":null},"b9401ab7195ea951":{"id":"user_vendor_msft_policy_config_admx_wpn_noquiethours","displayName":"Turn off Quiet Hours (User)","description":"\r\n This policy setting turns off Quiet Hours functionality.\r\n \r\n If you enable this policy setting, toast notifications will not be suppressed and some background tasks will not be deferred during the designated Quiet Hours time window each day.\r\n \r\n If you disable this policy setting, toast notifications will be suppressed and some background task deferred during the designated Quiet Hours time window. Users will not be able to change this or any other Quiet Hours settings.\r\n \r\n If you do not configure this policy setting, Quiet Hours are enabled by default but can be turned off or by the administrator or user.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-noquiethours"],"categoryId":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","categoryName":"Notifications","options":[{"id":"user_vendor_msft_policy_config_admx_wpn_noquiethours_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_noquiethours_1","displayName":"Enabled","description":null,"helpText":null}]},"b9f0d82b5b5e14ee":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (User)","description":"Allows you to set a list of protocols, and for each protocol an associated list of allowed origin patterns, that can launch an external application without prompting the user. The trailing separator should not be included when listing the protocol, so list \"skype\" instead of \"skype:\" or \"skype://\".\r\n\r\nIf this policy is set, a protocol will only be permitted to launch an external application without prompting by policy if the protocol is listed, and the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list. If either condition is false the external protocol launch prompt will not be omitted by policy.\r\n\r\nIf this policy is not set, no protocols can launch without a prompt by default. Users may opt out of prompts on a per-protocol/per-site basis unless the ExternalProtocolDialogShowAlwaysOpenCheckbox policy is set to Disabled. This policy has no impact on per-protocol/per-site prompt exemptions set by users.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' policy, which are documented at http://www.chromium.org/administrators/url-blocklist-filter-format.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"spotify\",\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"teams\",\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"outlook\",\r\n \"allowed_origins\": [\r\n \"*\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"b92cd647fd67bb7e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting","displayName":"Default popups setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting_1","displayName":"Allow all sites to show pop-ups","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting_2","displayName":"Do not allow any site to show popups","description":null,"helpText":null}]},"b91164439fb9f810":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist","displayName":"Force disable spellcheck languages (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},"b9b92540a2dcb0e0":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":null},"b9b35eed0157f08c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_dataurlinwebworkeropaqueoriginenabled","displayName":"Enable opaque origins for data URLs in Web Workers (User)","description":"This policy controls whether Web Workers created from data URLs are assigned\na unique opaque origin.\n\nWeb Workers can be created using a data URL that contains the worker script.\nPreviously, these workers inherited the origin of the page that created them,\nwhich allowed them to access the same origin-bound data, such as local\nstorage and cookies.\n\nStarting in Microsoft Edge version\n149, Web Workers created from data URLs are assigned a unique opaque origin\nby default. This behavior improves security and aligns with the HTML\nspecification by isolating these workers from the page that created them.\n\nIf you enable this policy or don't configure it, Web Workers created from\ndata URLs are assigned a unique opaque origin.\n\nIf you disable this policy, Web Workers created from data URLs inherit the\norigin of the page that created them. Use this setting only as a temporary\nmitigation for compatibility issues with internal applications that depend\non the legacy behavior.\n\nThis policy is temporary and will be removed in Microsoft Edge\nversion 157.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_dataurlinwebworkeropaqueoriginenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_dataurlinwebworkeropaqueoriginenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b9e048de3d26ad7a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords","displayName":"Allow importing of saved passwords (User)","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\r\n\r\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},"b95da33dbfef8121":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled","displayName":"Swipe gestures in Microsoft Edge kiosk mode enabled (User)","description":"This policy only applies to Microsoft Edge kiosk mode.\r\n\r\nIf you enable this policy or don't configure it, swipe gestures will behave as expected.\r\n\r\nIf you disable this policy, the user will not be able to use swipe gestures (for example navigate forwards and backwards, refresh page).\r\n\r\nFor detailed information on configuring kiosk mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"categoryId":"d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","categoryName":"Kiosk Mode settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b96370e3ca2ce3c1":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled","displayName":"Hide the company logo on the Microsoft Edge new tab page (User)","description":"By default, the company logo is shown on the new tab page if the company logo is configured in Admin Portal.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and the company logo is there for users.\r\n\r\nIf you disable this policy, the company logo doesn't appear on Microsoft Edge new tab page.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"b9ce5e31f2d359ce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastserviceserverinfo9","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"b9d7732fc57b9464":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookglobaladdresslistdictionary_l_setcommentfieldsforoutlookglobaladdresslistdictionaryid","displayName":"Field identification letters: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":null},"b9d04ea62650beb3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableanimations","displayName":"Disable Office animations (User)","description":"This setting will disable all unnecessary Office animations. By default, animation effects, such as fading between views, are enabled.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableanimations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableanimations_1","displayName":"Enabled","description":null,"helpText":null}]},"b9e1d00d637dc830":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog01","displayName":"Trusted Catalog Location #1 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog01_1","displayName":"Enabled","description":null,"helpText":null}]},"b9cba291da12a279":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_allowfilesynchronizationviasoaponlyondomainnetworks","displayName":"Allow file synchronization via SOAP over HTTP only on domain networks (User)","description":"This policy setting controls file synchronization via SOAP over HTTP.\r\n\r\nIf you enable this policy setting, file synchronization via SOAP over HTTP is allowed only on domain networks. \r\n\r\nIf you disable or do not configure this policy setting, file synchronization via SOAP over HTTP functions on all networks.","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_allowfilesynchronizationviasoaponlyondomainnetworks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_allowfilesynchronizationviasoaponlyondomainnetworks_1","displayName":"Enabled","description":null,"helpText":null}]},"b9b0b554425e50f7":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_verticalscrollbarappearsonleft","displayName":"Vertical scroll bar appears on left (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"44774d3d-387b-4fa7-8de4-d82b039c06d1","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_verticalscrollbarappearsonleft_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_display_l_verticalscrollbarappearsonleft_1","displayName":"Enabled","description":null,"helpText":null}]},"b9ac197d8703214d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_custom_l_disablecommandbar38","displayName":"Disable command bar buttons and menu items (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"categoryId":"8184df77-410e-41a6-b687-88de05769977","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_custom_l_disablecommandbar38_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_custom_l_disablecommandbar38_1","displayName":"Enabled","description":null,"helpText":null}]},"b9149b4193299167":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_sortfoldersalphabetically","displayName":"Sort folders alphabetically (User)","description":"This policy setting controls whether users can rearrange their folders in Outlook.\r\n\r\nIf you enable this policy setting, users cannot rearrange their folders. The folders are displayed alphabetically.\r\n\r\nIf you disable this policy setting, users can rearrange their folders, but are not able to turn automatic alphabetical sorting back on from the Ribbon. \r\n\r\nIf you do not configure this policy setting, users can rearrange their folders, and turn automatic alphabetical sorting back on from the Ribbon.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_sortfoldersalphabetically_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_sortfoldersalphabetically_1","displayName":"Enabled","description":null,"helpText":null}]},"b93c7cbe8b1efcce":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertbeforefadeinmillisec_l_millisecdefault4000","displayName":"Millisec (Default 4000): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"b9ad3ccd40dbd2dd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeoutinmillisec","displayName":"Specify duration of fade out (in milliseconds) (User)","description":"Specify duration of fade out (in milliseconds)","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeoutinmillisec_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeoutinmillisec_1","displayName":"Enabled","description":null,"helpText":null}]},"b9410e1345b01185":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_donotallowondemandactivitysynchronization","displayName":"Do not allow on-demand activity synchronization (User)","description":"This policy setting allows you to prevent on-demand synchronization of activity information between Outlook and social networks.\r\n\r\nIf you enable this policy setting, on-demand synchronization is blocked. \r\n\r\nIf you disable or you do not configure this policy setting, on-demand synchronization is allowed.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_donotallowondemandactivitysynchronization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_donotallowondemandactivitysynchronization_1","displayName":"Enabled","description":null,"helpText":null}]},"b9f1a262db208ef1":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"b940f64c0ae85340":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05","displayName":"Trusted Location #5 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_1","displayName":"Enabled","description":null,"helpText":null}]},"b970970a228e20ef":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":null},"b9099dab0b27e3e4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usesequencechecking","displayName":"Use sequence checking (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usesequencechecking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_usesequencechecking_1","displayName":"Enabled","description":null,"helpText":null}]},"b994901c8894b0b3":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}","displayName":"VM Creator Id","description":"VM Creator ID that these settings apply to. Valid format is a GUID","helpText":"","infoUrls":[],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/ba.json b/public/intune-definitions/ba.json new file mode 100644 index 000000000000..536af05530f3 --- /dev/null +++ b/public/intune-definitions/ba.json @@ -0,0 +1 @@ +{"ba1800ed684874e2":{"id":"com.android.devicerestrictionpolicy.bluetoothblocked","displayName":"Block Bluetooth","description":"If 'True', disables Bluetooth entirely on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might allow Bluetooth to be used. Available for fully managed, dedicated, and corporate-owned work profile devices. In comparison, Bluetooth configuration disables the user from making changes to the Bluetooth toggle. As a result, it might be either 'On' or 'Off' depending on the state of Bluetooth prior to applying a policy with Bluetooth configuration enabled.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.bluetoothblocked_true","displayName":"True","description":"True","helpText":null},{"id":"com.android.devicerestrictionpolicy.bluetoothblocked_false","displayName":"False","description":"false","helpText":null}]},"ba203356254b5a62":{"id":"com.apple.app.lock_app_options_enablespeakselection","displayName":"Enable Speak Selection","description":"If true, enables Speak Selection.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_enablespeakselection_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_enablespeakselection_true","displayName":"True","description":null,"helpText":null}]},"ba62402b783327cf":{"id":"com.apple.applicationaccess_ratingappsnz","displayName":"Rating Apps - New Zealand","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsnz_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_1","displayName":"1+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_2","displayName":"2+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_3","displayName":"3+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_4","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_5","displayName":"5+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_6","displayName":"6+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_7","displayName":"7+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_8","displayName":"8+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_9","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_10","displayName":"10+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_11","displayName":"11+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_12","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_13","displayName":"13+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_14","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_15","displayName":"15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_16","displayName":"16+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_17","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_18","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_19","displayName":"19+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_20","displayName":"20+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_21","displayName":"21+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsnz_22","displayName":"All","description":null,"helpText":null}]},"bae33027ca684c61":{"id":"com.apple.dock_show-recents","displayName":"Show Recents","description":"If true, enables \"Show recent items.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_show-recents_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_show-recents_true","displayName":"True","description":null,"helpText":null}]},"ba4343ed0898d62c":{"id":"com.apple.domains_crosssitetrackingpreventionrelaxeddomains","displayName":"Cross Site Tracking Prevention Relaxed Domains","description":"Specify an array of up to ten domains \r\nwhen cross-site tracking is required for functionality.","helpText":null,"infoUrls":[],"categoryId":"224dc683-c0e0-4783-8ba8-8f02c76d161d","categoryName":"Domains","options":null},"baf792f5df4e5f75":{"id":"com.apple.extensiblesso_ignored_kerberos_$typepicker","displayName":"IGNORED","description":null,"helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":{"id":"com.apple.extensiblesso_ignored_kerberos_0","displayName":"Array","description":null,"helpText":null}},"ba62c638ee838256":{"id":"com.apple.managedclient.preferences_allowcertswithoutmatchingemailaddress","displayName":"Allow S/MIME certificates without a matching email address","description":"Allow users to decrypt and encrypt S/MIME messages when the S/MIME certificate does not match the email address.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#allow-smime-certificates-without-a-matching-email-address"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_allowcertswithoutmatchingemailaddress_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowcertswithoutmatchingemailaddress_true","displayName":"True","description":null,"helpText":null}]},"ba210359023742d9":{"id":"com.apple.managedclient.preferences_newtabpagebingchatenabled","displayName":"Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page","description":"By default, the Microsoft Edge new tab page includes three Bing Chat entry points: one inside the search box, one in the Bing autosuggest dropdown when users click or begin typing in the box, and one as a suggested prompt below the box.\n\nIf you enable or don't configure this policy, these Bing Chat entry points continue to appear on the new tab page.\n\nIf you disable this policy, all Bing Chat entry points are removed from the new tab page.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagebingchatenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpagebingchatenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpagebingchatenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"baddf3cff77bfee5":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogo_default_logo_hash","displayName":"Hash","description":"The SHA-256 hash of the image.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ba85355a980f93db":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogobackplatecolor","displayName":"Set the company logo backplate color on the new tab page.","description":"By default, the new tab page sets the company logo backplate color to the neutralStrokeActive (#cecece) constant.\n\nYou can configure this policy with a color hex code to change the company logo backplate color on the new tab page.\n\nIf this policy is not configured, the default neutralStrokeActive (#cecece) color will be used as the backplate color.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpagecompanylogobackplatecolor"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"baa8d4e0882538c4":{"id":"com.apple.systemconfiguration_proxies","displayName":"Proxies","description":"The dictionary containing all the proxies for this device.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"ba5cc988cf5ccbc3":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"ba8c76ee75fe0645":{"id":"com.microsoft.edge.mamedgeappconfigsettings.superdragdropenabled","displayName":"Super Drag Drop Enabled","description":"This policy lets you configure the Super Drag Drop feature in Microsoft Edge.\n\nWith this feature, users can drag a link or text from a webpage and drop it onto the same page. They can then either open the URL in a new tab or search the text using the default search engine.\n\nIf you enable or don't configure this policy, you can use the Super Drag Drop feature on Microsoft Edge.\n\nIf you disable this policy, you can't use the Super Drag Drop feature in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.superdragdropenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.superdragdropenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"ba9ae0583f874e07":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata","displayName":"Policy rule","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"ba1b8b4aef334808":{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentialswhenntlmonly","displayName":"Allow delegating fresh credentials with NTLM-only server authentication","description":"This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection).\r\n\r\nThis policy setting applies when server authentication was achieved via NTLM.\r\n\r\nIf you enable this policy setting, you can specify the servers to which the user's fresh credentials can be delegated (fresh credentials are those that you are prompted for when executing the application).\r\n\r\nIf you do not configure (by default) this policy setting, after proper mutual authentication, delegation of fresh credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*).\r\n\r\nIf you disable this policy setting, delegation of fresh credentials is not permitted to any machine.\r\n\r\nNote: The \"Allow delegating fresh credentials with NTLM-only server authentication\" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN.\r\n\r\nFor Example:\r\nTERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine\r\nTERMSRV/* Remote Desktop Session Host running on all machines.\r\nTERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-allowfreshcredentialswhenntlmonly"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentialswhenntlmonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentialswhenntlmonly_1","displayName":"Enabled","description":null,"helpText":null}]},"ba74dc1cc490e5c9":{"id":"device_vendor_msft_policy_config_admx_filesys_disabledeletenotification","displayName":"Disable delete notifications on all volumes","description":"Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation.\r\n\r\nA value of 0, the default, will enable delete notifications for all volumes. \r\nA value of 1 will disable delete notifications for all volumes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filesys#admx-filesys-disabledeletenotification"],"categoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","categoryName":"Filesystem","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_disabledeletenotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_disabledeletenotification_1","displayName":"Enabled","description":null,"helpText":null}]},"bacc4029b5d384ee":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_logonscriptdelay_asyncscriptdelay1","displayName":"minute:","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"baf1240af71fbf03":{"id":"device_vendor_msft_policy_config_admx_helpandsupport_activehelp","displayName":"Turn off Active Help","description":"This policy setting specifies whether active content links in trusted assistance content are rendered. By default, the Help viewer renders trusted assistance content with active elements such as ShellExecute links and Guided Help links.\r\n\r\nIf you enable this policy setting, active content links are not rendered. The text is displayed, but there are no clickable links for these elements.\r\n\r\nIf you disable or do not configure this policy setting, the default behavior applies (Help viewer renders trusted assistance content with active elements).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-helpandsupport#admx-helpandsupport-activehelp"],"categoryId":"5be35eeb-62e9-4317-8804-018a9dd31149","categoryName":"Online Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_helpandsupport_activehelp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_helpandsupport_activehelp_1","displayName":"Enabled","description":null,"helpText":null}]},"bab477d735237fb4":{"id":"device_vendor_msft_policy_config_admx_logon_syncforegroundpolicy","displayName":"Always wait for the network at computer startup and logon","description":"This policy setting determines whether Group Policy processing is synchronous (that is, whether computers wait for the network to be fully initialized during computer startup and user logon). By default, on client computers, Group Policy processing is not synchronous; client computers typically do not wait for the network to be fully initialized at startup and logon. Existing users are logged on using cached credentials, which results in shorter logon times. Group Policy is applied in the background after the network becomes available. \r\n\r\nNote that because this is a background refresh, extensions such as Software Installation and Folder Redirection take two logons to apply changes. To be able to operate safely, these extensions require that no users be logged on. Therefore, they must be processed in the foreground before users are actively using the computer. In addition, changes that are made to the user object, such as adding a roaming profile path, home directory, or user object logon script, may take up to two logons to be detected.\r\n\r\nIf a user with a roaming profile, home directory, or user object logon script logs on to a computer, computers always wait for the network to be initialized before logging the user on. If a user has never logged on to this computer before, computers always wait for the network to be initialized.\r\n\r\nIf you enable this policy setting, computers wait for the network to be fully initialized before users are logged on. Group Policy is applied in the foreground, synchronously. \r\n\r\nOn servers running Windows Server 2008 or later, this policy setting is ignored during Group Policy processing at computer startup and Group Policy processing will be synchronous (these servers wait for the network to be initialized during computer startup). \r\n\r\nIf the server is configured as follows, this policy setting takes effect during Group Policy processing at user logon:\r\n• The server is configured as a terminal server (that is, the Terminal Server role service is installed and configured on the server); and\r\n• The “Allow asynchronous user Group Policy processing when logging on through Terminal Services” policy setting is enabled. This policy setting is located under Computer Configuration\\Policies\\Administrative templates\\System\\Group Policy\\.\r\n\r\nIf this configuration is not implemented on the server, this policy setting is ignored. In this case, Group Policy processing at user logon is synchronous (these servers wait for the network to be initialized during user logon).\r\n\r\nIf you disable or do not configure this policy setting and users log on to a client computer or a server running Windows Server 2008 or later and that is configured as described earlier, the computer typically does not wait for the network to be fully initialized. In this case, users are logged on with cached credentials. Group Policy is applied asynchronously in the background.\r\n\r\nNotes: \r\n-If you want to guarantee the application of Folder Redirection, Software Installation, or roaming user profile settings in just one logon, enable this policy setting to ensure that Windows waits for the network to be available before applying policy. \r\n-If Folder Redirection policy will apply during the next logon, security policies will be applied asynchronously during the next update cycle, if network connectivity is available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-syncforegroundpolicy"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_syncforegroundpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_syncforegroundpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"baf6e64a5975a1c1":{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction0_2","displayName":"Critical battery notification action","description":"This policy setting specifies the action that Windows takes when battery capacity reaches the critical battery notification level.\r\n\r\nIf you enable this policy setting, select one of the following actions:\r\n-Take no action\r\n-Sleep\r\n-Hibernate\r\n-Shut down\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dcbatterydischargeaction0-2"],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction0_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction0_2_1","displayName":"Enabled","description":null,"helpText":null}]},"bad4a5aa0af60869":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_2","displayName":"For tablet pen input, don’t show the Input Panel icon","description":"Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available. This policy applies only when using a tablet pen as an input device.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will never appear next to text entry areas when using a tablet pen as an input device. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will appear next to any text entry area in applications where this behavior is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n\r\nCaution: If you enable both the “Prevent Input Panel from appearing next to text entry areas” policy and the “Prevent Input Panel tab from appearing” policy, and disable the “Show Input Panel taskbar icon” policy, the user will then have no way to access Input Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-iptiptarget-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_2_1","displayName":"Enabled","description":null,"helpText":null}]},"ba735cadebe13666":{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name_resolution_interval","displayName":"Set 6to4 Relay Name Resolution Interval","description":"This policy setting allows you to specify the interval at which the relay name is resolved. The 6to4 relay name resolution interval setting has no effect if 6to4 connectivity is not available on the host.\r\n\r\nIf you enable this policy setting, you can specify the value for the duration at which the relay name is resolved periodically.\r\n\r\nIf you disable or do not configure this policy setting, the local host setting is used.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-6to4-router-name-resolution-interval"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name_resolution_interval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_router_name_resolution_interval_1","displayName":"Enabled","description":null,"helpText":null}]},"ba571c74cc7de9b2":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics","displayName":"Optimize visual experience when using RemoteFX","description":"This policy setting allows you to specify the visual experience that remote users will have in Remote Desktop Connection (RDC) connections that use RemoteFX. You can use this policy to balance the network bandwidth usage with the type of graphics experience that is delivered.\r\n\r\nDepending on the requirements of your users, you can reduce network bandwidth usage by reducing the screen capture rate. You can also reduce network bandwidth usage by reducing the image quality (increasing the amount of image compression that is performed).\r\n\r\nIf you have a higher than average bandwidth network, you can maximize the utilization of bandwidth by selecting the highest setting for screen capture rate and the highest setting for image quality.\r\n\r\nBy default, Remote Desktop Connection sessions that use RemoteFX are optimized for a balanced experience over LAN conditions. If you disable or do not configure this policy setting, Remote Desktop Connection sessions that use RemoteFX will be the same as if the medium screen capture rate and the medium image compression settings were selected (the default behavior). \r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-remotedesktopvirtualgraphics"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_1","displayName":"Enabled","description":null,"helpText":null}]},"bac840b559233ca3":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_chaindisable","displayName":"ChainDisable","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"baf0a0af988624e9":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_maxpollinterval","displayName":"MaxPollInterval","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"bab974adc2bb8ac9":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users cannot preview items or get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-restricted"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted_1","displayName":"Enabled","description":null,"helpText":null}]},"baf39e9f13a6cc51":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_todo","displayName":"Microsoft To Do (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_todo_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_todo_1","displayName":"True","description":null,"helpText":null}]},"ba1fbac5b6339356":{"id":"device_vendor_msft_policy_config_bits_jobinactivitytimeout","displayName":"Job Inactivity Timeout","description":"This policy setting specifies the number of days a pending BITS job can remain inactive before the job is considered abandoned. By default BITS will wait 90 days before considering an inactive job abandoned. After a job is determined to be abandoned, the job is deleted from BITS and any downloaded files for the job are deleted from the disk. NoteAny property changes to the job or any successful download action will reset this timeout. Value type is integer. Default is 90 days. Supported values range: 0 - 999Consider increasing the timeout value if computers tend to stay offline for a long period of time and still have pending jobs. Consider decreasing this value if you are concerned about orphaned jobs occupying disk space. If you disable or do not configure this policy setting, the default value of 90 (days) will be used for the inactive job timeout.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-BITS#jobinactivitytimeout"],"categoryId":"7443c1d4-1087-486c-9a0a-f9da9074e4e1","categoryName":"BITS","options":null},"baa8c734077a11a4":{"id":"device_vendor_msft_policy_config_bluetooth_allowadvertising","displayName":"Allow Advertising","description":"Specifies whether the device can send out Bluetooth advertisements. If this is not set or it is deleted, the default value of 1 (Allow) is used. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Bluetooth#allowadvertising"],"categoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","categoryName":"Bluetooth","options":[{"id":"device_vendor_msft_policy_config_bluetooth_allowadvertising_0","displayName":"Block","description":"Not allowed. When set to 0, the device will not send out advertisements. To verify, use any Bluetooth LE app and enable it to do advertising. Then, verify that the advertisement is not received by the peripheral.","helpText":null},{"id":"device_vendor_msft_policy_config_bluetooth_allowadvertising_1","displayName":"Allow","description":"Allowed. When set to 1, the device will send out advertisements. To verify, use any Bluetooth LE app and enable it to do advertising. Then, verify that the advertisement is received by the peripheral.","helpText":null}]},"ba7c44e6ef1b601a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled","displayName":"Enable the network service sandbox","description":"This policy controls whether or not the network service process runs sandboxed.\r\nIf this policy is enabled, the network service process will run sandboxed.\r\nIf this policy is disabled, the network service process will run unsandboxed. This leaves users open to additional security risks related to running the network service unsandboxed.\r\nIf this policy is not set, the default configuration for the network sandbox will be used. This may vary depending on Google Chrome release, currently running field trials, and platform.\r\nThis policy is intended to give enterprises flexibility to disable the network sandbox if they use third party software that interferes with the network service sandbox.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ba1fc1c9b9869ff3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on these sites","description":"Cookies set for domains matching these patterns will revert to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute, and skips the scheme comparison when evaluating if two sites are same-site. See https://www.chromium.org/administrators/policy-list-3/cookie-legacy-samesite-policies for full description.\r\n\r\nFor cookies on domains not covered by the patterns specified here, or for all cookies if this policy is not set, the global default value will be the user's personal configuration.\r\n\r\nFor detailed information on valid patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nNote that patterns you list here are treated as domains, not URLs, so you should not specify a scheme or port.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"ba7f5117717deeb7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc","displayName":"Block WebUSB on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"ba289bc043b45888":{"id":"device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked","displayName":"Panel Default Mode Docked","description":"Specifies whether the handwriting panel comes up floating near the text box or attached to the bottom of the screen","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Handwriting#paneldefaultmodedocked"],"categoryId":"4e8db19c-cb8e-4361-8849-1d435d50bb66","categoryName":"Handwriting","options":[{"id":"device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"baf33cbaef24e25b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended","displayName":"Allow importing of browsing history","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.\r\n\r\nIf you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ba3d4e61daa10fc6":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended","displayName":"Register protocol handlers","description":"Register a list of protocol handlers. Set the protocol property to the scheme (like 'mailto') and the url property to the URL pattern of the application that handles the scheme. The pattern can include a '%s', which will be replaced by the handled URL.\r\n\r\nYou can recommend a specific value for this policy, but you can't require that your users use it.\r\n\r\nThe protocol handlers registered by policy are merged with any handlers registered by the user, and both are available for use. The user can override the protocol handlers installed by policy by installing a new default handler, but they can't remove a protocol handler registered by policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://mail.contoso.com/mail/?extsrc=mailto&url=%s\", \r\n \"default\": true, \r\n \"protocol\": \"mailto\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"0d4cf1d9-d8ad-4628-bd71-fa0de6598f28","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ba565c838991547a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls","displayName":"Grant access to specific sites to connect to specific USB devices","description":"Allows you to set a list of urls that specify which sites will automatically be granted permission to access a USB device with the given vendor and product IDs. Each item in the list must contain both devices and urls in order for the policy to be valid. Each item in devices can contain a vendor ID and product ID field. Any ID that is omitted is treated as a wildcard with one exception, and that exception is that a product ID cannot be specified without a vendor ID also being specified. Otherwise, the policy will not be valid and will be ignored.\r\n\r\nThe USB permission model uses the URL of the requesting site (\"requesting URL\") and the URL of the top-level frame site (\"embedding URL\") to grant permission to the requesting URL to access the USB device. The requesting URL may be different than the embedding URL when the requesting site is loaded in an iframe. Therefore, the \"urls\" field can contain up to two URL strings delimited by a comma to specify the requesting and embedding URL respectively. If only one URL is specified, then access to the corresponding USB devices will be granted when the requesting site's URL matches this URL regardless of embedding status. The URLs in \"urls\" must be valid URLs, otherwise the policy will be ignored.\r\n\r\nIf this policy is left not set, the global default value will be used for all sites either from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy if it is set, or the user's personal configuration otherwise.\r\n\r\nURL patterns in this policy should not clash with the ones configured via 'WebUsbBlockedForUrls' (Block WebUSB on specific sites). If there is a clash, this policy will take precedence over 'WebUsbBlockedForUrls' and 'WebUsbAskForUrls' (Allow WebUSB on specific sites).\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://contoso.com\", \r\n \"https://fabrikam.com\"\r\n ], \r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234, \r\n \"product_id\": 5678\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"ba977e1a53355ae2":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when:\r\n- The 'Passwords' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy ClearBrowsingDataOnExit is enabled\r\n\r\nIf you enable this policy, passwords won't be cleared when the browser closes.\r\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ba9bc2d4979c2fad":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_allowtokenbindingforurlsdesc","displayName":"Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ba471280b192bbb3":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winprojexe104","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winprojexe104_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winprojexe104_1","displayName":"True","description":null,"helpText":null}]},"bac646968a8fc393":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory","displayName":"Let Apps Access Call History","description":"This policy setting specifies whether Windows apps can access call history.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"baceb321b6172664":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture","displayName":"Disables send-a-smile's screenshot capability","description":"This policy disables the screenshot capability in the send-a-smile feature.","helpText":"","infoUrls":[],"categoryId":"802f3065-0bf1-4578-9d6d-ab1ef02db3ec","categoryName":"Feedback Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture_1","displayName":"Enabled","description":null,"helpText":null}]},"bacd7219fa058a77":{"id":"settings_item_accessibilitysettings_textsize","displayName":"Text Size","description":"The accessibility text size apps that support dynamic text use. 0 is the smallest value, and 11 is the largest available.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_textsize_0","displayName":"0","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_1","displayName":"1","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_2","displayName":"2","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_3","displayName":"3","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_4","displayName":"4","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_5","displayName":"5","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_6","displayName":"6","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_7","displayName":"7","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_8","displayName":"8","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_9","displayName":"9","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_10","displayName":"10","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_11","displayName":"11","description":null,"helpText":null}]},"badf14b08b0b8c56":{"id":"softwareupdate_automaticactions_installosupdates","displayName":"Install OS Updates","description":"Specifies whether automatic install of available OS updates can be controlled by the user:\n* \"Allowed\" - the user can enable or disable automatic installs.\n* \"AlwaysOn\". - automatic installs are always enabled. This option requires automatic downloads to be turned on.\n* \"AlwaysOff\" - automatic installs are always disabled.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_automaticactions_installosupdates_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installosupdates_1","displayName":"Always On","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installosupdates_2","displayName":"Always Off","description":null,"helpText":null}]},"ba36ebe2fe193a9a":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iis","displayName":"Internet Information Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iis"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iis_1","displayName":"Enabled","description":null,"helpText":null}]},"ba999e7863c309ae":{"id":"user_vendor_msft_policy_config_admx_msi_disablemedia","displayName":"Prevent removable media source for any installation (User)","description":"This policy setting prevents users from installing any programs from removable media.\r\n\r\nIf you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found.\r\n\r\nThis policy setting applies even when the installation is running in the user's security context.\r\n\r\nIf you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs.\r\n\r\nAlso, see the \"Enable user to use media source while elevated\" and \"Hide the 'Add a program from CD-ROM or floppy disk' option\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disablemedia"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"user_vendor_msft_policy_config_admx_msi_disablemedia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_msi_disablemedia_1","displayName":"Enabled","description":null,"helpText":null}]},"ba40e0cc3e81ae19":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup","displayName":"InfoPath 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft InfoPath 2013.\r\nMicrosoft InfoPath 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft InfoPath 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft InfoPath 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft InfoPath 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013infopathbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"ba4d098ec94a101a":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup","displayName":"Visio 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Visio 2013.\r\nMicrosoft Visio 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Visio 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Visio 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013visiobackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup_1","displayName":"Enabled","description":null,"helpText":null}]},"ba75f125fcbad1a3":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-localmachinelockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"babed335d3dca491":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled","displayName":"Allow ServiceWorker to control srcdoc iframes (User)","description":"https://github.com/w3c/ServiceWorker/issues/765 asks srcdoc iframe with\r\nthe \"allow-same-origin\" sandbox attribute to be under ServiceWorker control.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome makes srcdoc iframes\r\nwith \"allow-same-origin\" sandbox attributes to be under ServiceWorker control.\r\n\r\nSetting the policy to Disabled leaves the srcdoc iframe not controlled by\r\nServiceWorker.\r\n\r\nThis policy is intended to be temporary and will be removed in 2026.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ba932e52c82d1e1e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyflashfill","displayName":"Automatically Flash Fill (User)","description":"This policy setting controls the \"Automatically Flash Fill\" option found under File tab | Options | Advanced | Editing Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will enable automatic Flash Fill. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will turn off the Automatic Flash Fill feature.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyflashfill_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyflashfill_1","displayName":"Enabled","description":null,"helpText":null}]},"baba7d773ce6982c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_descriptioncolon59","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"badf9e49689871f4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_descriptioncolon71","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"baecc2a1d404d6d8":{"id":"user_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths","displayName":"Intranet Sites: Include all network paths (UNCs) (User)","description":"This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.\n\nIf you enable this policy setting, all network paths are mapped into the Intranet Zone.\n\nIf you disable this policy setting, network paths are not necessarily mapped into the Intranet Zone (other rules might map one there).\n\nIf you do not configure this policy setting, users choose whether network paths are mapped into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includeallnetworkpaths"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_1","displayName":"Enabled","description":null,"helpText":null}]},"bad9c288b4e1d28e":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102","displayName":"Allow script-initiated windows without size or position constraints (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_3","displayName":"Disable","description":null,"helpText":null}]},"baf4aad25201f182":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"ba05b374376d6003":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_copilotaddressbarsuggestionsenabled","displayName":"Enable Copilot address bar suggestions (User)","description":"This policy controls whether Copilot chat suggestions appear in the address bar of Microsoft Edge.\n\nIf you enable this policy or don't configure it, Copilot chat suggestions appear in the address bar.\n\nIf you disable this policy, Copilot chat suggestions don't appear in the address bar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_copilotaddressbarsuggestionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_copilotaddressbarsuggestionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ba01c00ed204ae11":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended","displayName":"Get user confirmation before closing a browser window with multiple tabs (User)","description":"This policy lets you configure whether users see a confirmation dialog before closing a browser window with multiple tabs. This dialog asks users to confirm that the browser window can be closed.\r\n\r\nIf you enable this policy, users will be presented with a confirmation dialog when closing a browser window with multiple tabs.\r\n\r\nIf you disable or don't configure this policy, a browser window with multiple tabs will close immediately without user confirmation.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"baf264e219a85087":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_2","displayName":"Do not allow any site to load blockable mixed content","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_3","displayName":"Allow users to add exceptions to allow blockable mixed content","description":null,"helpText":null}]},"ba90f7318a3d8daf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_korean","displayName":"Korean (User)","description":"Enables the editing language Korean","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_korean_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_korean_1","displayName":"Enabled","description":null,"helpText":null}]},"ba9dcdf709736863":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_l_pathcolon290","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"bab190c8b2bf514f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_allowunsecureapps","displayName":"Allow Unsecure web add-ins and Catalogs (User)","description":"This policy setting allows users to run unsecure web add-in, which are add-ins that have web page or catalog locations that are not SSL-secured (https://), and are not in users' Internet zones.\r\n\r\nIf you enable this policy setting, users can run unsecure apps. To enable specific unsecure web add-ins, you must also configure the Trusted Web add-in Catalog policy settings to trust the catalogs that contains those Add-ins.\r\n\r\nIf you disable or do not configure this policy setting, unsecure web add-ins are not allowed.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_allowunsecureapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_allowunsecureapps_1","displayName":"Enabled","description":null,"helpText":null}]},"ba96a6dcc408f3e8":{"id":"user_vendor_msft_policy_config_office16v7.updates~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendsurvey","displayName":"Allow users to receive and respond to in-product surveys from Microsoft (User)","description":"This policy setting allows you to control whether your users can receive and respond to in-product surveys in Microsoft 365 products. Microsoft will use this feedback to improve the product experience for users. The ability to receive and respond to in-product surveys is enabled by default.\r\n\r\nIf you enable this policy setting, your users will be able to receive and respond to in-product surveys about their experience using Microsoft 365 products.\r\n\r\nIf you disable this policy setting, Microsoft will not survey your users while they are using Microsoft 365 products.\r\n\r\nIf you don't configure this policy setting, your users will be able to receive and respond to in-product surveys about their experience using Microsoft 365 products.\r\n\r\nComing soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center.\r\n\r\nNote: This data will be considered \"Feedback\" under your Microsoft 365 agreement, including information that would otherwise be considered \"Customer Data\" or \"Personal Data\".\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2142253","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v7.updates~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendsurvey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7.updates~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendsurvey_1","displayName":"Enabled","description":null,"helpText":null}]},"ba7eff8d4a2afbe2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventmapiservicesfrombeingadded_l_preventmapiservicesfrombeingaddedpart","displayName":"Enter MAPI services to disable (semi-colon delimited) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"ba4a8546ee3810a5":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportbackstage","displayName":"Disable the Support tab under the File menu in Outlook (User)","description":"This policy setting determines whether the Support tab will be displayed under the File menu in Outlook.\r\n\r\nIf you enable this policy setting, then the Support tab will not be displayed under the File menu in Outlook.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportbackstage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablesupportbackstage_1","displayName":"Enabled","description":null,"helpText":null}]},"ba27b01aeb26c2de":{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_miscellaneous_l_equivalentcomaddin_l_equivalentcomaddin2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"baa32f5c4d67e561":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":null},"ba31f757695490be":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the Internet (User)","description":"\r\n This policy setting allows you to block macros from running in Office files that come from the Internet.\r\n\r\n If you enable this policy setting, macros are blocked from running, even if “Enable all macros” is selected in the Macro Settings section of the Trust Center. Also, instead of having the choice to “Enable Content,” users will receive a notification that macros are blocked from running. If the Office file is saved to a trusted location or was previously trusted by the user, macros will be allowed to run.\r\n\r\n If you disable or don’t configure this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the Internet.\r\n ","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"ba957ac9f7b4de61":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_l_setmaximumnumberoftrustrecordstopreservespinid","displayName":"Maximum to preserve: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":null},"ba6fea8ca7e8cb0e":{"id":"vendor_msft_firewall_mdmstore_privateprofile_disablestealthmode","displayName":"Disable Stealth Mode","description":"This value is an on/off switch. When this option is false, the server operates in stealth mode. The firewall rules used to enforce stealth mode are implementation-specific. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_disablestealthmode_false","displayName":"False","description":"Use Stealth Mode","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_disablestealthmode_true","displayName":"True","description":"Disable Stealth Mode","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/bb.json b/public/intune-definitions/bb.json new file mode 100644 index 000000000000..08e596356b30 --- /dev/null +++ b/public/intune-definitions/bb.json @@ -0,0 +1 @@ +{"bbed53d6befdd102":{"id":"com.apple.applicationaccess_allowproximitysetuptonewdevice","displayName":"Allow Proximity Setup To New Device","description":"If false, disables the prompt to set up new devices that are nearby. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowproximitysetuptonewdevice_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowproximitysetuptonewdevice_true","displayName":"True","description":null,"helpText":null}]},"bb7644f4db51009b":{"id":"com.apple.fileproviderd_managementallowsknownfoldersyncing","displayName":"Management Allows Known Folder Syncing","description":"If `false`, the device prevents the File Provider extension from using desktop and documents synchronization in any app. This doesn't impact the ability for apps to utilize the File Provider extension for file and folder syncing with remote storage.","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":[{"id":"com.apple.fileproviderd_managementallowsknownfoldersyncing_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.fileproviderd_managementallowsknownfoldersyncing_true","displayName":"Allowed","description":null,"helpText":null}]},"bb4115b4f2d5b238":{"id":"com.apple.managedclient.preferences_unthrottlednestedtimeoutenabled","displayName":"JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated)","description":"This policy is deprecated because it is a temporary policy for web standards compliance. It won't work in Microsoft Edge as soon as version 107.\nIf you enable this policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will not be clamped. This improves short horizon performance, but websites abusing the API will still eventually have their setTimeout usages clamped.\nIf you disable or don't configure policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will be clamped.\n\nThis is a web standards compliancy feature that may change task ordering on a web page, leading to unexpected behavior on sites that are dependent on a certain ordering.\nIt also may affect sites with a lot of usage of a timeout of 0ms for setTimeout. For example, increasing CPU load.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#unthrottlednestedtimeoutenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_unthrottlednestedtimeoutenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_unthrottlednestedtimeoutenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"bbf4516bfbb16180":{"id":"com.apple.proxy.http.global_proxypacfallbackallowed","displayName":"Proxy PAC Fallback Allowed","description":"If true, allows connecting directly to the destination if the proxy autoconfiguration (PAC) file is unreachable. ","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":[{"id":"com.apple.proxy.http.global_proxypacfallbackallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.proxy.http.global_proxypacfallbackallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"bb59e64ad018663d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_recommended","displayName":"Allow importing of autofill form data (users can override)","description":"Allows users to import autofill form data from another browser into Microsoft Edge.\n\nIf you enable this policy, the option to manually import autofill data is automatically selected.\n\nIf you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.\n\nIf you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This means that Microsoft Edge imports autofill data on first run, but users can select or clear autofill data option during manual import.\n\nNote: This policy currently manages import from Google Chrome (on Windows 7, 8, and 10 and on macOS) and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"bbd2f22add47f7d3":{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer","displayName":"Configure Corporate Windows Error Reporting","description":"This policy setting specifies a corporate server to which Windows Error Reporting sends reports (if you do not want to send error reports to Microsoft).\r\n\r\nIf you enable this policy setting, you can specify the name or IP address of an error report destination server on your organization’s network. You can also select Connect using SSL to transmit error reports over a Secure Sockets Layer (SSL) connection, and specify a port number on the destination server for transmission.\r\n\r\nIf you disable or do not configure this policy setting, Windows Error Reporting sends error reports to Microsoft.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-wercer"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_wercer_1","displayName":"Enabled","description":null,"helpText":null}]},"bb5152d0a590c061":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_randomizescheduletasktimes","displayName":"Randomize scheduled task times","description":"This policy setting allows you to enable or disable randomization of the scheduled scan start time and the scheduled security intelligence update start time. This setting is used to distribute the resource impact of scanning. For example, it could be used in guest virtual machines sharing a host, to prevent multiple guest virtual machines from undertaking a disk-intensive operation at the same time.\r\n\r\n If you enable or do not configure this setting, scheduled tasks will begin at a random time within an interval of 4 hours after the specified start time.\r\n\r\n If you disable this setting, scheduled tasks will begin at the specified start time.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-randomizescheduletasktimes"],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_randomizescheduletasktimes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_randomizescheduletasktimes_1","displayName":"Enabled","description":null,"helpText":null}]},"bb9c5d334219a90d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynetreporting_spynetreporting","displayName":"Join Microsoft MAPS","description":null,"helpText":"","infoUrls":[],"categoryId":"09c02465-dc11-457e-9eac-19fc542e4cda","categoryName":"MAPS","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynetreporting_spynetreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynetreporting_spynetreporting_1","displayName":"Basic MAPS","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_spynetreporting_spynetreporting_2","displayName":"Advanced MAPS","description":null,"helpText":null}]},"bbcab1046cb15e33":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_debugflag_netlogon_debugflaglabel","displayName":"Level:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"bbc6a9aca306f16c":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_expecteddialupdelay","displayName":"Specify expected dial-up delay on logon","description":"This policy setting specifies the additional time for the computer to wait for the domain controller’s (DC) response when logging on to the network.\r\n\r\nTo specify the expected dial-up delay at logon, click Enabled, and then enter the desired value in seconds (for example, the value \"60\" is 1 minute).\r\n\r\nIf you do not configure this policy setting, it is not applied to any computers, and computers use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-expecteddialupdelay"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_expecteddialupdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_expecteddialupdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"bb198e82092ef77b":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_nc_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":null},"bb432146839f2e15":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_sports","displayName":"Sports","description":"This policy setting configures the synchronization of user settings for the Sports app.\r\nBy default, the user settings of Sports sync between computers. Use the policy setting to prevent the user settings of Sports from synchronizing between computers.\r\nIf you enable this policy setting, Sports user settings continue to sync.\r\nIf you disable this policy setting, Sports user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-sports"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_sports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_sports_1","displayName":"Enabled","description":null,"helpText":null}]},"bb3622ceb2bd43cc":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled","displayName":"Enables the concept of policy atomic groups","description":"Setting the policy to Enabled means policies coming from an atomic group that don't share the source with the highest priority from that group get ignored.\r\n\r\nSetting the policy to Disabled means no policy is ignored because of its source. Policies are ignored only if there's a conflict, and the policy doesn't have the highest priority.\r\n\r\nIf this policy is set from a cloud source, it can't target a specific user.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bb5cd58ddaf7571a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting","displayName":"Default popups setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting_1","displayName":"Allow all sites to show pop-ups","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting_2","displayName":"Do not allow any site to show popups","description":null,"helpText":null}]},"bba7952c777e15f3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_chromeframecontenttypesdesc","displayName":"Allow Google Chrome Frame to handle the listed content types (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"bbe7c65763e8e6cc":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings","displayName":"Enterprise search aggregator settings","description":"This policy allows administrators to set a designated enterprise search aggregator that will provide search recommendations and results within the omnibox (address bar) and the search box on the New Tab page.\r\n\r\nBy default, enterprise search suggestions will be blended and shown alongside regular Google Chrome recommendations. Users can explicitly scope their search to just the enterprise search aggregator by typing the keyword specified in the shortcut field with or without the @ prefix (e.g. @work) followed by Space or Tab in the omnibox. Scoped enterprise searches (triggered by a keyword) are currently only supported in the omnibox and not in the search box on the New Tab page.\r\n\r\nThe following fields are required: name, shortcut, search_url, suggest_url.\r\n\r\nThe name field corresponds to the search engine name shown to the user in the address bar.\r\n\r\nThe shortcut field corresponds to the keyword that the user enters to trigger the search. The shortcut can include plain words and characters, but cannot include spaces or start with the @ symbol. Shortcuts must be unique.\r\n\r\nThe search_url field specifies the URL on which to search. Enter the web address for the search engine's results page, and use '{searchTerms}' in place of the query.\r\n\r\nThe suggest_url field specifies the URL that provides search suggestions. A POST request will be made and the user's query will be passed in the POST params under key 'query'.\r\n\r\nThe icon_url field specifies the URL to an image that will be used on the search suggestions. A default icon will be used when this field is not set. It's recommended to use a favicon (example https://www.google.com/favicon.ico). Supported image file formats: JPEG, PNG, and ICO.\r\n\r\nThe require_shortcut field specifies whether the address bar shortcut is required to see search recommendations. If required, suggestions will not be shown in the search box on the New Tab page, but will continue to be shown in the omnibox (address bar) in scoped search mode. If this field is not set, the address bar shortcut is not required.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=EnterpriseSearchAggregatorSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"name\": \"My Search Aggregator\",\r\n \"shortcut\": \"work\",\r\n \"search_url\": \"https://www.aggregator.com/search?q={searchTerms}\",\r\n \"suggest_url\": \"https://www.aggregator.com/suggest\",\r\n \"icon_url\": \"https://www.google.com/favicon.ico\",\r\n \"require_shortcut\": true\r\n}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"bbab2bcf8c6e18c9":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_odfcccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":null},"bbb94e3005e467fd":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_profilesattachedvhdsddl","displayName":"Attached VHD SDDL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"bbafbbdd38cbbe4f":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzonenavigatewindowsandframes"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"bb3cfb33b0f1b486":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter","displayName":"Turn on Cross-Site Scripting Filter","description":"This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.\n\nIf you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.\n\nIf you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenablecrosssitescriptingfilter"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_1","displayName":"Enabled","description":null,"helpText":null}]},"bbed5ecbf8ecdb49":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Prompt for username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonelogonoptions"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"bbac19db30f9caad":{"id":"device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings","displayName":"Security Zones: Use only machine settings ","description":"Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level.\n\nIf you enable this policy, changes that the user makes to a security zone will apply to all users of that computer.\n\nIf you disable this policy or do not configure it, users of the same computer can establish their own security zone settings.\n\nThis policy is intended to ensure that security zone settings apply uniformly to the same computer and do not vary from user to user.\n\nAlso, see the \"Security zones: Do not allow users to change policies\" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-securityzonesuseonlymachinesettings"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"bb3f177e6670f44c":{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyserversareauthoritative","displayName":"Enterprise Proxy Servers Are Authoritative","description":"Boolean value that tells the client to accept the configured list of proxies and not try to detect other work proxies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseproxyserversareauthoritative"],"categoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","categoryName":"Network Isolation","options":[{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyserversareauthoritative_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyserversareauthoritative_0","displayName":"Disable","description":"Disable","helpText":null}]},"bb5d1b4b3286c143":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_exprwdexe80","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_exprwdexe80_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_exprwdexe80_1","displayName":"True","description":null,"helpText":null}]},"bb5ff2145cfc6fde":{"id":"device_vendor_msft_policy_config_taskscheduler_enablexboxgamesavetask","displayName":"Enable Xbox Game Save Task","description":"This setting determines whether the specific task is enabled (1) or disabled (0). Default: Enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TaskScheduler#enablexboxgamesavetask"],"categoryId":"9b74c5a8-98f8-49f0-b4eb-51e071d75776","categoryName":"Task Scheduler","options":[{"id":"device_vendor_msft_policy_config_taskscheduler_enablexboxgamesavetask_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_taskscheduler_enablexboxgamesavetask_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"bbc214a6769d60aa":{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_part_updatepolicy","displayName":"Update Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"46eaa2b7-341b-4e39-be21-c3ea09dd5778","categoryName":"Microsoft Edge Web View2 Runtime","options":[{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},"bb0a87f9a8aec1a8":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname","displayName":"Allow only company domain accounts","description":"Prevents users from being able to share their session with any guests who are not part of their company or any other company that has been given access. Users must be logged in with their company email to access Live Share. If this policy is disabled, any user from any organization can access a shared Live Share session. Use ; to separate out multiple domains. For example, set the domain name as contoso.com or contoso.com;foo.com \r\nFor more information, see: https://aka.ms/vsls-policies ","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname_1","displayName":"Enabled","description":null,"helpText":null}]},"bb60f86d70db2267":{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors","displayName":"Disable Remote Agent Connectors (Windows Insiders only)","description":"Enable or Disable Remote Agent Connectors.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableremoteagentconnectors"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors_1","displayName":"Force Enable.","description":"Force Enable.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors_2","displayName":"Force Disable.","description":"Force Disable.","helpText":null}]},"bbc6eed66a8a3243":{"id":"setrecoverylock_enablerecoverylockpassword","displayName":"Enable Recovery Lock Password","description":"Set a recovery lock password that will be required to access RecoveryOS on Mac devices. Available for Apple silicon devices running macOS 11.5 and later.","helpText":null,"infoUrls":[],"categoryId":"1fcd72cb-7c09-4e7b-a314-97a88df6e623","categoryName":"Recovery Lock Password","options":{"id":"setrecoverylock_enablerecoverylockpassword_true","displayName":"Enabled","description":null,"helpText":null}},"bbe22685fed29022":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion_am_instructhighriskinclusionlist","displayName":"Specify high risk extensions (include a leading period, e.g. .cmd;.exe;). (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":null},"bbda222cf56cbfb3":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access","displayName":"Microsoft Access 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Access 2010.\r\nBy default, the user settings of Microsoft Access 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Access 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010access"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access_1","displayName":"Enabled","description":null,"helpText":null}]},"bb0da7e6ea6c34ac":{"id":"user_vendor_msft_policy_config_admx_windowsconnectnow_wcn_disablewcnui_1","displayName":"Prohibit access of the Windows Connect Now wizards (User)","description":"This policy setting prohibits access to Windows Connect Now (WCN) wizards. \r\n\r\nIf you enable this policy setting, the wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks, including \"Set up a wireless router or access point\" and \"Add a wireless device\" are disabled. \r\n\r\nIf you disable or do not configure this policy setting, users can access the wizard tasks, including \"Set up a wireless router or access point\" and \"Add a wireless device.\" The default for this policy setting allows users to access all WCN wizards.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsconnectnow#admx-windowsconnectnow-wcn-disablewcnui-1"],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":[{"id":"user_vendor_msft_policy_config_admx_windowsconnectnow_wcn_disablewcnui_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsconnectnow_wcn_disablewcnui_1_1","displayName":"Enabled","description":null,"helpText":null}]},"bb753eff93969503":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary","displayName":"Pin Libraries or Search Connectors to the \"Search again\" links and the Start menu (User)","description":"This policy setting allows up to five Libraries or Search Connectors to be pinned to the \"Search again\" links and the Start menu links. The \"Search again\" links at the bottom of the Search Results view allow the user to reconduct a search but in a different location. To add a Library or Search Connector link, specify the path of the .Library-ms or .searchConnector-ms file in the \"Location\" text box (for example, \"C:\\sampleLibrary.Library-ms\" for the Documents library, or \"C:\\sampleSearchConnector.searchConnector-ms\" for a Search Connector). The pinned link will only work if this path is valid and the location contains the specified .Library-ms or .searchConnector-ms file.\r\n\r\nYou can add up to five additional links to the \"Search again\" links at the bottom of results returned in File Explorer after a search is executed. These links will be shared between Internet search sites and Search Connectors/Libraries. Search Connector/Library links take precedence over Internet search links.\r\n\r\nThe first several links will also be pinned to the Start menu. A total of four links can be included on the Start menu. The \"See more results\" link will be pinned first by default, unless it is disabled via Group Policy. The \"Search the Internet\" link is pinned second, if it is pinned via Group Policy (though this link is disabled by default). If a custom Internet search link is pinned using the \"Custom Internet search provider\" Group Policy, this link will be pinned third on the Start menu. The remaining link(s) will be shared between pinned Search Connectors/Libraries and pinned Internet/intranet search links. Search Connector/Library links take precedence over Internet/intranet search links.\r\n\r\nIf you enable this policy setting, the specified Libraries or Search Connectors will appear in the \"Search again\" links and the Start menu links.\r\n\r\nIf you disable or do not configure this policy setting, no Libraries or Search Connectors will appear in the \"Search again\" links or the Start menu links.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-tryharderpinnedlibrary"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_1","displayName":"Enabled","description":null,"helpText":null}]},"bb3e8f7d4f8f9f80":{"id":"user_vendor_msft_policy_config_browser_clearbrowsingdataonexit","displayName":"Clear Browsing Data On Exit (User)","description":"Specifies whether to always clear browsing history on exiting Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#clearbrowsingdataonexit"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_clearbrowsingdataonexit_0","displayName":"Disabled","description":"Prevented/not allowed. Users can configure the 'Clear browsing data' option in Settings.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_clearbrowsingdataonexit_1","displayName":"Enabled","description":"Allowed. Clear the browsing data upon exit automatically.","helpText":null}]},"bb6ddb81fb623c92":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (User)","description":"Allows you to set whether Google Chrome will run the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\r\n\r\nDisabling the JavaScript JIT will mean that Google Chrome may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Google Chrome to render web content in a more secure configuration.\r\n\r\nThis policy can be overridden for specific URL patterns using the JavaScriptJitAllowedForSites and JavaScriptJitBlockedForSites policies.\r\n\r\nIf this policy is left not set, JavaScript JIT is enabled.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"bb476473c4bad07a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttp://testserver.example.com/\r\n*.example.org","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure_1","displayName":"Enabled","description":null,"helpText":null}]},"bb3d0e269dbf3cb8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies","displayName":"Policy overrides for Debug builds of the remote access host (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"bb4233e133561329":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_webauthenticationremotedesktopallowedoriginsdesc","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"bbb1ef1321ccf2d0":{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlight","displayName":"Allow Windows Spotlight (User)","description":"Specifies whether to turn off all Windows spotlight features at once. If you enable this policy setting, Windows spotlight on lock screen, Windows Tips, Microsoft consumer features and other related features will be turned off. You should enable this policy setting if your goal is to minimize network traffic from target devices. If you disable or do not configure this policy setting, Windows spotlight features are allowed and may be controlled individually using their corresponding policy settings. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowwindowsspotlight"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlight_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlight_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"bbc3f3613810f008":{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate","displayName":"Intranet Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowintranetzonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"bbfd05394a4a13d8":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"bb2416e9949c5899":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"bbb13062b0aa9c73":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, users are queried whether to allow HTML fonts to download.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowfontdownloads"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"bb2928824d905909":{"id":"user_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice","displayName":"Specify use of ActiveX Installer Service for installation of ActiveX controls (User)","description":"This policy setting allows you to specify how ActiveX controls are installed.\n\nIf you enable this policy setting, ActiveX controls are installed only if the ActiveX Installer Service is present and has been configured to allow the installation of ActiveX controls.\n\nIf you disable or do not configure this policy setting, ActiveX controls, including per-user controls, are installed through the standard installation process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-specifyuseofactivexinstallerservice"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_1","displayName":"Enabled","description":null,"helpText":null}]},"bb8bc3e3d179a948":{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled","displayName":"TLS Encrypted ClientHello Enabled (User)","description":"Encrypted ClientHello (ECH) is an extension to TLS that encrypts the sensitive fields of ClientHello to improve privacy.\r\n\r\nIf ECH is enabled, Microsoft Edge might or might not use ECH depending on server support, the availability of the HTTPS DNS record, or the rollout status.\r\n\r\nIf you enable or do not configure this policy, Microsoft Edge will follow the default rollout process for ECH.\r\n\r\nIf this policy is disabled, Microsoft Edge will not enable ECH.\r\n\r\nBecause ECH is an evolving protocol, Microsoft Edge's implementation is subject to change.\r\n\r\nAs such, this policy is a temporary measure to control the initial experimental implementation. It will be replaced with final controls as the protocol finalizes.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bb39c8b20703298a":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support (User)","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will accept web contents using the compression dictionary transport feature.\r\n\r\nIf you disable this policy, Microsoft Edge will turn off the compression dictionary transport feature.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bb06401f7dfa2ba7":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_allowbrowsingwithcopilot_recommended","displayName":"Controls the availability of browsing with Copilot in Microsoft Edge. (User)","description":"When browsing with Copilot is enabled, users can explicitly invoke it for a query. It isn't invoked automatically.\r\n\r\nBrowsing with Copilot is available only on domains specified in the 'BrowsingWithCopilotAllowList' (Browsing with Copilot Allowed URLs) policy and is blocked on domains specified in the 'BrowsingWithCopilotBlockList' (Browsing with Copilot Blocked URLs) policy. If no domains are configured in the allow list, browsing with Copilot is effectively disabled.\r\n\r\nThis feature is available only to users with an active Microsoft 365 Copilot subscription.\r\n\r\nFor more information about configuring browsing with Copilot, see https://go.microsoft.com/fwlink/?linkid=2346300.\r\n\r\nIf you enable this policy, browsing with Copilot is turned on for all users who receive the policy, and users can't turn it off.\r\n\r\nIf you disable this policy, browsing with Copilot is turned off for all users who receive the policy, and users can't turn it on.\r\n\r\nIf you don't configure this policy, browsing with Copilot is off by default, and users can turn it on.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_allowbrowsingwithcopilot_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_allowbrowsingwithcopilot_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"bbf7a4cb3b8e15f7":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"bb4cba0f1f442343":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastservicesharednotescustomurl2","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"bbac4de1ca029d5f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samiskoltfinland","displayName":"Sami, Skolt (Finland) (User)","description":"Enables the editing language \"Sami, Skolt (Finland)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samiskoltfinland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samiskoltfinland_1","displayName":"Enabled","description":null,"helpText":null}]},"bb4570af2146d4f1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_l_settheautomationsecuritylevel","displayName":"Set the Automation Security level (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_l_settheautomationsecuritylevel_3","displayName":"Disable macros by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_l_settheautomationsecuritylevel_2","displayName":"Use application macro security level","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_l_settheautomationsecuritylevel_1","displayName":"Macros enabled (default)","description":null,"helpText":null}]},"bb5dbf3870df8d09":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifyissuerfilter","displayName":"Specify filtering for certificate issuers (User)","description":"This policy setting allows you to configure Office to only allow certificates from a specific issuer when creating a digital signature.\r\n \r\nIf you enable this policy setting, Office only displays certificates that contain the string you set in the policy. This setting is case-sensitive.\r\n\r\nFor example, a setting of \"MyCA\" would match an issuer of \"MyCA 1\"and \"MyCA 2\", but not \"MYCA 3\".\r\n\r\nIf you disable or don’t configure this setting, then signing certificates from any issuer can be used.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifyissuerfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifyissuerfilter_1","displayName":"Enabled","description":null,"helpText":null}]},"bb5b28cc073ad6f2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_suppressnocertdialog","displayName":"Display alternative certificate providers (User)","description":"This policy setting allows you to configure whether Office displays a link to get a certificate from a Microsoft partner when there are no usable signing certificates.\r\n\r\nIf you enable this policy setting, the link won’t be displayed.\r\n\r\nIf you disable or don’t configure this policy setting, the link is displayed.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_suppressnocertdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_suppressnocertdialog_1","displayName":"Enabled","description":null,"helpText":null}]},"bbd77a254ff10d91":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys39_l_enterakeyandmodifiertodisable","displayName":"Enter a key and modifier to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8184df77-410e-41a6-b687-88de05769977","categoryName":"Custom","options":null},"bb1fe2a377955165":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_specifyoutlookpeoplesearchtimeout","displayName":"Set the time-out interval for Outlook people search (User)","description":"This policy setting controls the time-out interval of Outlook people search. Outlook returns as many people search results as possible before the time-out interval lapses. If the search results are incomplete, Outlook displays a message at the bottom of the results list.\r\n\r\nIf you enable this policy setting, you can specify the time-out interval in milliseconds.\r\n\r\nIf you disable or do not configure this policy setting, the time-out interval is 60,000 milliseconds (60 seconds).","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_specifyoutlookpeoplesearchtimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_specifyoutlookpeoplesearchtimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"bb69f64cbaffc3dd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_calendaritemdefaults","displayName":"Calendar item defaults (User)","description":"Sets the value in the option \"Default reminder\".","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_calendaritemdefaults_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_calendaritemdefaults_1","displayName":"Enabled","description":null,"helpText":null}]},"bb1367fe80e6b3ec":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disablechangingfolderpermissions","displayName":"Do not allow users to change permissions on folders (User)","description":"This policy setting prevents users from changing their mail folder permissions. \r\n\r\nIf you enable this policy setting, Outlook users cannot change permissions on folders; the settings on the Permissions tab are disabled. Enabling this policy setting does not affect existing permissions, and users can still change permissions by sending a sharing message.\r\n\r\nIf you disable or do not configure this policy setting, Outlook users can change the permissions for folders under their control by using the Permissions tab of the Properties dialog box for the folder.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disablechangingfolderpermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_disablechangingfolderpermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"bb6f6478082f60ba":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_backgroundprinting","displayName":"Print in background (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_backgroundprinting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_backgroundprinting_1","displayName":"Enabled","description":null,"helpText":null}]},"bb66589decdfa6d7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_disablepackageforcd","displayName":"Disable Package For CD (User)","description":"Check to Disable Package for CD; Uncheck to Enable Package for CD. Shows or hides the File tab | Save & Send | Package Presentation for CD command. Package for CD allows the user to package and burn presentations onto CD for portable viewing even when PowerPoint is not installed.","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_disablepackageforcd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_disablepackageforcd_1","displayName":"Enabled","description":null,"helpText":null}]},"bbf265da4f8c2164":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders75","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders75_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders75_1","displayName":"True","description":null,"helpText":null}]},"bbb2fd412dd857f2":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultendtime_l_pjdefaultendtime2","displayName":"Default end time (Minutes after 12am * 10) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":null},"bb5353c5c3dc8b0c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid3","displayName":"Rulers (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid3_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid3_1","displayName":"True","description":null,"helpText":null}]},"bb9084e2fd771f61":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enableautoconnect","displayName":"Enable AutoConnect (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enableautoconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_enableautoconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"bb41409fba61d09b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"bba454ce15712781":{"id":"user_vendor_msft_policy_config_word16v14~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_advancedtypographyoutlook","displayName":"Allow Advanced Typography features for Outlook (User)","description":"This policy setting sets the “Advanced Typography” options found under Outlook’s File tab | Outlook Options | Mail | Editor Options | Advanced | Advanced Typography.\r\n\r\nIf you enable or do not configure this policy setting, Advanced Typography features will be applied. This is the default behavior.\r\n\r\nIf you disable this policy setting, Advanced Typography features will not be applied.\r\n ","helpText":"","infoUrls":[],"categoryId":"61ecc5ec-c494-420b-a27b-a8d2fbdd7df1","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_word16v14~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_advancedtypographyoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v14~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_advancedtypographyoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"bbb248f7ae103099":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders35","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders35_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders35_1","displayName":"True","description":null,"helpText":null}]},"bb36f9dd32842ab0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_datecolon37","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"bb5d15f46de014d1":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_defaultinboundaction","displayName":"Default Inbound Action","description":"This value is the action that the Hyper-V Firewall does by default (and evaluates at the very end) on inbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 1 [Block].","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_defaultinboundaction_0","displayName":"Allow Inbound By Default","description":"Allow Inbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_defaultinboundaction_1","displayName":"Block Inbound By Default","description":"Block Inbound By Default","helpText":null}]},"bb836551ae698b1b":{"id":"vendor_msft_firewall_mdmstore_privateprofile_disableinboundnotifications","displayName":"Disable Inbound Notifications","description":"This value is an on/off switch. If this value is false, the firewall MAY display a notification to the user when an application is blocked from listening on a port. If this value is on, the firewall MUST NOT display such a notification. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_disableinboundnotifications_false","displayName":"False","description":"Firewall May Display Notification","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_disableinboundnotifications_true","displayName":"True","description":"Firewall Must Not Display Notification","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/bc.json b/public/intune-definitions/bc.json new file mode 100644 index 000000000000..283c52af61fd --- /dev/null +++ b/public/intune-definitions/bc.json @@ -0,0 +1 @@ +{"bc5cf3e90a20d1a7":{"id":"3~policy~microsoft_edge_targetblankimpliesnoopener","displayName":"Do not set window.opener for links targeting _blank (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 102.\r\n\r\nIf you enable this policy or leave it unset, the window.opener property is set to null unless the anchor specifies rel=\"opener\".\r\n\r\nIf you disable this policy, popups that target _blank are permitted to access (via JavaScript) the page that requested to open the popup.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"3~policy~microsoft_edge_targetblankimpliesnoopener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"3~policy~microsoft_edge_targetblankimpliesnoopener_1","displayName":"Enabled","description":null,"helpText":null}]},"bc7cb7819655bd4e":{"id":"com.apple.directoryservice.managed_adcreatemobileaccountatloginflag","displayName":"AD Create Mobile Account At Login Flag","description":"If true, enables the AD Create Mobile Account At Login key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adcreatemobileaccountatloginflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adcreatemobileaccountatloginflag_true","displayName":"True","description":null,"helpText":null}]},"bc829f87051751a0":{"id":"com.apple.dock_static-others_item_tile-data_file-type","displayName":"File Type","description":"The type of file","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_static-others_item_tile-data_file-type_0","displayName":"URL","description":null,"helpText":null},{"id":"com.apple.dock_static-others_item_tile-data_file-type_1","displayName":"File","description":null,"helpText":null},{"id":"com.apple.dock_static-others_item_tile-data_file-type_2","displayName":"Directory","description":null,"helpText":null}]},"bce5e241c8dc42a1":{"id":"com.apple.domains_webdomains","displayName":"Web Domains","description":"An array of domains. URLs matching the patterns listed here are considered managed.","helpText":null,"infoUrls":[],"categoryId":"224dc683-c0e0-4783-8ba8-8f02c76d161d","categoryName":"Domains","options":null},"bca40b6c16e1026b":{"id":"com.apple.extensiblesso_ignored_$typepicker","displayName":"Type","description":"Keys and values to pass to the app extension.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_ignored_0","displayName":"String","description":"String","helpText":null},{"id":"com.apple.extensiblesso_ignored_1","displayName":"Integer","description":"Integer","helpText":null},{"id":"com.apple.extensiblesso_ignored_2","displayName":"Boolean","description":"Boolean","helpText":null}]},"bc092bc3fd7a89d4":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_start","displayName":"Start","description":"The curfew start time, in the format %d:%d:%d.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"bc1dbe036a15f5c5":{"id":"com.apple.managedclient.preferences_cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication","description":"This policy defines certificates that are not explicitly trusted or distrusted by Microsoft Edge but may be used as hints during certificate path-building.\n\nThe specified certificates will be considered as intermediates during path validation; the server's certificate must still chain to a trusted root to be considered valid.\n\nCertificates must be base64-encoded.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#cahintcertificates"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"bce711139553f0af":{"id":"com.apple.managedclient.preferences_cookiesblockedforurls","displayName":"Block cookies on specific sites","description":"Define a list of sites, based on URL patterns, that can't set cookies.\n\nIf you don't configure this policy, the global default value from the \"DefaultCookiesSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nSee the \"CookiesAllowedForUrls\" and \"CookiesSessionOnlyForUrls\" policies for more information.\n\nNote there cannot be conflicting URL patterns set between these three policies:\n\n- CookiesBlockedForUrls\n\n- \"CookiesAllowedForUrls\"\n\n- \"CookiesSessionOnlyForUrls\"","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#cookiesblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"bca0c5bf1b32e4b0":{"id":"com.apple.managedclient.preferences_disablevisualbasicexternaldylibs","displayName":"Prevent Visual Basic macros from using external dynamic libraries","description":"Recommended: true, unless third-party add-ins and extensions are being used.","helpText":null,"infoUrls":["https://aka.ms/macvbpref"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_disablevisualbasicexternaldylibs_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablevisualbasicexternaldylibs_true","displayName":"True","description":null,"helpText":null}]},"bc756f40c4b5a1f9":{"id":"com.apple.managedclient.preferences_vbaobjectmodelistrusted","displayName":"Allow macros to modify Visual Basic projects","description":"Allow Visual Basic macros to modify Visual Basic projects. Recommended: false.","helpText":null,"infoUrls":["https://aka.ms/macvbpref"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_vbaobjectmodelistrusted_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_vbaobjectmodelistrusted_true","displayName":"True","description":null,"helpText":null}]},"bc514d807708755e":{"id":"com.apple.xsan_sanconfigurls","displayName":"San Config URLs","description":"An array of LDAP URLs where Xsan systems can obtain SAN configuration updates. This key is required for all Xsan SANs. There should be one entry for each Xsan MDC. Example URL: ldaps://mdc1.example.com:389","helpText":null,"infoUrls":[],"categoryId":"46af3391-ed6d-4ada-aef7-02dac2a1b136","categoryName":"Xsan","options":null},"bc143bc345867b7c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessblockedforurls","displayName":"Block sites from making network requests to local devices and local network endpoints.","description":"Specifies a list of URL patterns for which requests initiated from matching origins are blocked from issuing Local Network Access requests.\n\nNetwork requests initiated from websites served by matching origins are prevented from accessing local device and local network endpoints.\n\nFor origins not covered by the patterns specified here, the user's personal configuration applies.\n\nThere are multiple policies that control origins impacting requests to local device and local network endpoints. If an origin matches more than one of the following policies, the policies take precedence in the following order:\n\n- LocalNetworkBlockedForUrls\n- LocalNetworkAllowedForUrls\n- LoopbackNetworkAccessBlockedForUrls\n- LoopbackNetworkAccessAllowedForUrls\n- LocalNetworkAccessBlockedForUrls\n- LocalNetworkAccessAllowedForUrls\n\nFor detailed information about valid URL pattern syntax, see:\nhttps://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns\n\nFor more information about Local Network Access, see:\nhttps://wicg.github.io/local-network-access/\n\nNote: This policy blocks specified public websites from accessing private IP addresses. It helps reduce exposure of internal network resources unless access is explicitly permitted by policy.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"bc117716c8bf26dc":{"id":"com.microsoft.edge.mamedgeappconfigsettings.managedfavorites","displayName":"Configure favorites","description":"Configures a list of managed favorites.\n\nThe policy creates a list of favorites. Each favorite contains the keys \"name\" and \"url,\" which hold the favorite's name and its target. You can configure a subfolder by defining a favorite without an \"url\" key but with an extra \"children\" key that contains a list of favorites as defined earlier (some of which may be folders again). Microsoft Edge amends incomplete URLs as if they were submitted via the Address Bar, for example \"microsoft.com\" becomes \"https://microsoft.com/\".\n\nThese favorites are placed in a folder that can't be modified by the user (but the user can choose to hide it from the favorites bar). By default the folder name is \"Managed favorites\" but you can change it by adding to the list of favorites a dictionary containing the key \"toplevel_name\" with the desired folder name as the value.\n\nManaged favorites aren't synced to the user account and can't be modified by extensions.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"bcc5b5bfba2a1b7e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.notificationsblockedforurls","displayName":"Block notifications on specific sites","description":"Allows you to create a list of url patterns to specify sites that aren't allowed to display notifications.\n\nIf you don't set this policy, the global default value is used for all sites. This default value is from the \"DefaultNotificationsSetting\" policy if it's set, or from the user's personal configuration. For detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"bc047abd99a78d52":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_wermaxqueuecount","displayName":"Maximum number of reports to queue:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"bc4df8737685ba8c":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logenabled","displayName":"Turn on logging","description":"This policy setting turns on logging.\r\n\r\nIf you enable or do not configure this policy setting, then events can be written to this log.\r\n\r\nIf the policy setting is disabled, then no new events can be logged. Events can always be read from the log, regardless of this policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-logenabled"],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bc5b13897d19bdc0":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_sku_differentiation_signature_set_guid","displayName":"Specify additional definition sets for network traffic inspection","description":"This policy setting defines additional definition sets to enable for network traffic inspection. Definition set GUIDs should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a definition set GUID. As an example, the definition set GUID to enable test security intelligence is defined as: “{b54b6ac9-a737-498e-9120-6616ad3bf590}”. The value is not used and it is recommended that this be set to 0.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-nis-consumers-ips-sku-differentiation-signature-set-guid"],"categoryId":"cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","categoryName":"Network Inspection System","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_sku_differentiation_signature_set_guid_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_sku_differentiation_signature_set_guid_1","displayName":"Enabled","description":null,"helpText":null}]},"bc7bdd0703f9ad19":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverrideavgcpuloadfactor","displayName":"Configure local setting override for maximum percentage of CPU utilization","description":"This policy setting configures a local override for the configuration of maximum percentage of CPU utilization during scan. This setting can only be set by Group Policy.\r\n\r\n If you enable this setting, the local preference setting will take priority over Group Policy.\r\n\r\n If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-localsettingoverrideavgcpuloadfactor"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverrideavgcpuloadfactor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_localsettingoverrideavgcpuloadfactor_1","displayName":"Enabled","description":null,"helpText":null}]},"bcf7b6c4bb0ec46e":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_2","displayName":"Initial reminder balloon lifetime","description":"Determines how long the first reminder balloon for a network status change is displayed.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the first reminder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-reminderinittimeout-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_2_1","displayName":"Enabled","description":null,"helpText":null}]},"bcc7ac73d03f43ef":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy","displayName":"Execution Policy","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_allsigned","displayName":"Allow only signed scripts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_remotesigned","displayName":"Allow local scripts and remote signed scripts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_unrestricted","displayName":"Allow all scripts","description":null,"helpText":null}]},"bcfe6b4eb0ba47db":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_c","displayName":"Qualitative service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Qualitative service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 0.\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypequalitative-c"],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_c_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_c_1","displayName":"Enabled","description":null,"helpText":null}]},"bc1ae7be7a5a1b91":{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_state","displayName":"Set 6to4 State","description":"This policy setting allows you to configure 6to4, an address assignment and router-to-router automatic tunneling technology that is used to provide unicast IPv6 connectivity between IPv6 sites and hosts across the IPv4 Internet. 6to4 uses the global address prefix: 2002:WWXX:YYZZ::/48 in which the letters are a hexadecimal representation of the global IPv4 address (w.x.y.z) assigned to a site.\r\n\r\nIf you disable or do not configure this policy setting, the local host setting is used.\r\n\r\nIf you enable this policy setting, you can configure 6to4 with one of the following settings:\r\n\r\nPolicy Default State: 6to4 is enabled if the host has only link-local IPv6 connectivity and a public IPv4 address. If no global IPv6 address is present and no global IPv4 address is present, the host will not have a 6to4 interface. If no global IPv6 address is present and a global IPv4 address is present, the host will have a 6to4 interface.\r\n\r\nPolicy Enabled State: If a global IPv4 address is present, the host will have a 6to4 interface. If no global IPv4 address is present, the host will not have a 6to4 interface.\r\n\r\nPolicy Disabled State: 6to4 is turned off and connectivity with 6to4 will not be available.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-6to4-state"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_state_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_6to4_state_1","displayName":"Enabled","description":null,"helpText":null}]},"bce6d1f4670a80b7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_machinelevelusercloudpolicyenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"bcc305aff6c2fe22":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled","displayName":"Data URL support for SVGUseElement.","description":"This policy enables Data URL support for SVGUseElement, which will be disabled\r\nby default starting in M119.\r\nIf this policy is set to Enabled, Data URLs will continue to work in SVGUseElement.\r\nIf this policy is set to Disabled or not set, Data URLs won't work in SVGUseElement.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bc31796b4eae301d":{"id":"device_vendor_msft_policy_config_education_enableeduthemes","displayName":"Enable Edu Themes","description":"This policy setting allows you to control whether EDU-specific theme packs are available in Settings > Personalization. If you disable or don't configure this policy setting, EDU-specific theme packs will not be included. If you enable this policy setting, users will be able to personalize their devices with EDU-specific themes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Education#enableeduthemes"],"categoryId":"5e692f3e-1911-43b0-9192-64c2e65b7c10","categoryName":"Education","options":[{"id":"device_vendor_msft_policy_config_education_enableeduthemes_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_education_enableeduthemes_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"bc51c2ace564132e":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00","displayName":"Logon options","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"bce9247e76621fba":{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512","displayName":"PK Init Hash Algorithm SHA512","description":"Configure SHA-512 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha512"],"categoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_3","displayName":"Supported","description":"Supported","helpText":null}]},"bcf654ffbf05f431":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'Open new tab' (5).\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'Restore the last session' (1). The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'Open a list of URLs' (4).\r\n\r\nDisabling this setting is equivalent to leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\n* 1 = Restore the last session\r\n\r\n* 4 = Open a list of URLs\r\n\r\n* 5 = Open a new tab","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"bc715df36685fac0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_powerpntexe3","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_powerpntexe3_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_powerpntexe3_1","displayName":"True","description":null,"helpText":null}]},"bc5259f8146e3a1b":{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowwebauthnredirection","displayName":"Do not allow WebAuthn redirection","description":"This policy setting lets you control the redirection of web authentication (WebAuthn) requests from a Remote Desktop session to the local device. This redirection enables users to authenticate to resources inside the Remote Desktop session using their local authenticator (e.g., Windows Hello for Business, security key, or other).\n\nBy default, Remote Desktop allows redirection of WebAuthn requests.\n\nIf you enable this policy setting, users can't use their local authenticator inside the Remote Desktop session.\n\nIf you disable or do not configure this policy setting, users can use local authenticators inside the Remote Desktop session.\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-donotallowwebauthnredirection"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowwebauthnredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowwebauthnredirection_1","displayName":"Enabled","description":null,"helpText":null}]},"bcc7a8d7566b2dc7":{"id":"enrollment_autopilot_dpp_devicesecuritygroupids","displayName":"Device security group","description":"Choose a set of security groups to join the device to upon enrollment.","helpText":"","infoUrls":[],"categoryId":"264202da-475b-476e-bbc7-3c252f777145","categoryName":"Device security group","options":null},"bc774a2eb32e56fd":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffinternetsearchintegration","displayName":"Turn off Internet search integration (User)","description":"This policy setting allows you to turn off Internet search integration.\r\n\r\nSearch integration includes both using Search Provider (Japanese Microsoft IME) and performing bing search from predictive input for Japanese Microsoft IME.\r\n\r\nIf you enable this policy setting, you cannot use search integration.\r\n\r\nIf you disable or do not configure this policy setting, the search integration function can be used by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffinternetsearchintegration"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffinternetsearchintegration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffinternetsearchintegration_1","displayName":"Enabled","description":null,"helpText":null}]},"bcc99fbcbfb11354":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_1","displayName":"Event Viewer (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_1_1","displayName":"Enabled","description":null,"helpText":null}]},"bc023aad5bc0eb4a":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wmi","displayName":"WMI Control (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wmi"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wmi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wmi_1","displayName":"Enabled","description":null,"helpText":null}]},"bc65190de3c69c60":{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtodestinations","displayName":"Do not allow pinning items in Jump Lists (User)","description":"This policy setting allows you to control pinning items in Jump Lists.\r\n\r\nIf you enable this policy setting, users cannot pin files, folders, websites, or other items to their Jump Lists in the Start Menu and Taskbar. Users also cannot unpin existing items pinned to their Jump Lists. Existing items already pinned to their Jump Lists will continue to show.\r\n\r\nIf you disable or do not configure this policy setting, users can pin files, folders, websites, and other items to a program's Jump List so that the items is always present in this menu.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nopinningtodestinations"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtodestinations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtodestinations_1","displayName":"Enabled","description":null,"helpText":null}]},"bc7fb61359ee538f":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common","displayName":"Microsoft Office 2010 Common Settings (User)","description":"This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2010 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2010 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2010 applications from synchronization between computers. \r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2010 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2010 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2010 applications are enabled, this policy setting should not be disabled \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010common"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common_1","displayName":"Enabled","description":null,"helpText":null}]},"bce3ec44b3d517b4":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup","displayName":"PowerPoint 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft PowerPoint 2016.\r\nMicrosoft PowerPoint 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft PowerPoint 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft PowerPoint 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016powerpointbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"bca88b9b4a0c8e9d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots","displayName":"Disable taking screenshots (User)","description":"Setting the policy to True disallows screenshots taken with keyboard shortcuts or extension APIs. Setting the policy to False allows screenshots.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots_1","displayName":"Enabled","description":null,"helpText":null}]},"bc11e44f0f4b3f10":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_relaunchwindow","displayName":"Relaunch time window (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"bc5138e7f43604a2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_pdflocalfileaccessallowedfordomainsdesc","displayName":"Allow local file access to file:// URLs on these sites in the PDF Viewer (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"bcb048c64c525e83":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings","displayName":"Settings for Create Themes with AI (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_0","displayName":"Allow Create Themes and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_1","displayName":"Allow Create Themes without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_2","displayName":"Do not allow Create Themes.","description":null,"helpText":null}]},"bc7e33b79a015a8f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_asktoupdateautomaticlinks","displayName":"Ask to update automatic links (User)","description":"This policy setting controls whether Excel prompts users to update automatic links, or whether the updates occur in the background with no prompt.\r\n \r\nIf you enable or do not configure this policy setting, Excel will prompt users to update automatic links. In addition, the \"Ask to update automatic links\" user interface option under File tab | Advanced | General is selected.\r\n \r\nIf you disable this policy setting, Excel updates automatic links without prompting or informing users, which could compromise the integrity of some of the information in the workbook.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_asktoupdateautomaticlinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_asktoupdateautomaticlinks_1","displayName":"Enabled","description":null,"helpText":null}]},"bc89f84aed88c7f4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode","displayName":"Configure CNG cipher chaining mode (User)","description":"This policy setting allows you to configure the cipher chaining mode used.\r\n\r\nIf you enable this policy setting, the cipher chaining mode specified will be applied.\r\n\r\nIf you disable or do not configure this policy setting, Cipher Block Chaining (CBC) will be the default CNG cipher chaining mode used.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"bc8a826d361c88f8":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_datecolon10","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"bc15b27296f6637a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_pathcolon61","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"bcf150d7dee64bdc":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowuserdatapersistence"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"bc9a0b771a9fc8f6":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409","displayName":"Turn on Cross-Site Scripting (XSS) Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_3","displayName":"Disable","description":null,"helpText":null}]},"bcc4cdd283bd4e28":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (User)","description":"The Experimentation and Configuration Service is used to deploy Experimentation and Configuration payloads to the client.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nConfiguration payload consists of a list of recommended settings that Microsoft wants to deploy to optimize the user experience.\r\n\r\nConfiguration payload may also contain a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nIf you set this policy to 'FullMode', the full payload is downloaded from the Experimentation and Configuration Service. This includes both the experimentation and configuration payloads.\r\n\r\nIf you set this policy to 'ConfigurationsOnlyMode', only the configuration payload is downloaded.\r\n\r\nIf you set this policy to 'RestrictedMode', the communication with the Experimentation and Configuration Service is stopped completely. Microsoft does not recommend this setting.\r\n\r\nIf you don't configure this policy on a managed device, the behavior on Beta and Stable channels is the same as the 'ConfigurationsOnlyMode'. On Canary and Dev channels the behavior is the same as 'FullMode'.\r\n\r\nIf you don't configure this policy on an unmanaged device, the behavior is the same as the 'FullMode'.\r\n\r\nPolicy options mapping:\r\n\r\n* FullMode (2) = Retrieve configurations and experiments\r\n\r\n* ConfigurationsOnlyMode (1) = Retrieve configurations only\r\n\r\n* RestrictedMode (0) = Disable communication with the Experimentation and Configuration Service\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"bcc82eda191a91dc":{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled","displayName":"Allow users to access the Outlook menu (User)","description":"This policy is used to manage access to the Outlook menu from Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can access the Outlook menu.\r\nIf you disable this policy, users can't access the Outlook menu.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bc34eddfaf626744":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled","displayName":"Enable Drop feature in Microsoft Edge (User)","description":"This policy lets you configure the Drop feature in Microsoft Edge.\r\n\r\nDrop lets users send messages or files to themselves.\r\n\r\nIf you enable or don't configure this policy, you can use the Drop feature in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Drop feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bce01d31d8449cc5":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled","displayName":"Control whether storage quota APIs will return static values (User)","description":"Controls how the Storage Quota APIs report the available quota to websites.\r\n\r\nWhen enabled, the Storage Quota APIs return a static quota value equal to the current usage plus the smaller of 10 GiB or the device's total storage rounded up to the nearest 1 GiB.\r\n\r\nWhen disabled, the Storage Quota APIs return a dynamic quota value that reflects the actual available device storage.\r\n\r\nWhen unset, the browser uses the default platform behavior.\r\n\r\nThis policy does not affect sites with unlimited storage permissions or enforced quota settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bcca24d435dfa4de":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist","displayName":"Force disable spellcheck languages (User)","description":"Force-disables spellcheck languages. Unrecognized languages in that list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be disabled for the languages specified. The user can still enable or disable spellcheck for languages not in the list.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is set to disabled, this policy will have no effect.\r\n\r\nIf a language is included in both the 'SpellcheckLanguage' (Enable specific spellcheck languages) and the 'SpellcheckLanguageBlocklist' policy, the spellcheck language is enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"bca230df11db6361":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (User)","description":"Overrides the last used setting for printing background graphics.\r\nIf you enable this setting, background graphics printing is enabled.\r\nIf you disable this setting, background graphics printing is disabled.\r\n\r\nPolicy options mapping:\r\n\r\n* enabled (enabled) = Enable background graphics printing mode by default\r\n\r\n* disabled (disabled) = Disable background graphics printing mode by default\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"bc746318a1b5b9cc":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes","displayName":"Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_0","displayName":"Do not send form data or headers","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_1","displayName":"Send form data only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_2","displayName":"Send additional headers only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_3","displayName":"Send form data and additional headers","description":null,"helpText":null}]},"bce131033a8ddfbb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastservicesharednotescustomurl6","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"bc5859eab7cf4a05":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasedefaultinstanceslimit","displayName":"Set the database default instances limit (User)","description":"This policy setting allows you to specify the default limit of how many instances per page the database shim can return. The application is allowed to specify a larger timeout programmatically. This is a default value to be used by the database shim to restrict the number of results that can be returned per page. The application can specify a larger limit via execution context.\r\n\r\nIf you enable this policy setting, you may specify the default limit of how many instances the database shim can return.\r\n\r\nIf you disable or do not configure this policy setting, a default value of 200 instances per page will be used.","helpText":"","infoUrls":[],"categoryId":"952f69c8-2644-48df-976b-01fd624cbb3a","categoryName":"Database","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasedefaultinstanceslimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasedefaultinstanceslimit_1","displayName":"Enabled","description":null,"helpText":null}]},"bc434a4fb87d2177":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchluxembourg","displayName":"French (Luxembourg) (User)","description":"Enables the editing language French (Luxembourg)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchluxembourg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchluxembourg_1","displayName":"Enabled","description":null,"helpText":null}]},"bcec157049d42b13":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samilulenorway","displayName":"Sami, Lule (Norway) (User)","description":"Enables the editing language \"Sami, Lule (Norway)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samilulenorway_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samilulenorway_1","displayName":"Enabled","description":null,"helpText":null}]},"bc07a27c6746facd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_l_workflowdescrip450","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"bcf2262260fb0391":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache5_l_workflowpath449","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"bc178ce4c51c8056":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc03","displayName":"Unsafe Location #3 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"bc88578e4ffd78dc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_turnonfilesynchronizationviasoapoverhttp","displayName":"Turn on file synchronization via SOAP over HTTP (User)","description":"This policy setting controls file synchronization via SOAP over HTTP.\r\n\r\nIf you enable or do not configure this policy setting, file synchronization via SOAP over HTTP is turned on. Turning file synchronization on here will still allow application-specific file synchronization to be turned off.\r\n\r\nIf you disable this policy setting this policy setting, file synchronization via SOAP over HTTP is turned off. You will turn off file synchronization via SOAP over HTTP for other applications even if the application-specific file synchronization is turned on.\r\n\r\nImportant: If you disable this policy setting, which will turn off file synchronization via SOAP over HTTP, you will also prevent co-authoring for Word and PowerPoint, and it will adversely affect the behavior of SharePoint Workspaces.","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_turnonfilesynchronizationviasoapoverhttp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_turnonfilesynchronizationviasoapoverhttp_1","displayName":"Enabled","description":null,"helpText":null}]},"bcf22e37b53a8977":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"bcf85872c6ef49fe":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablecustomroot_disablecustomrootlist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"bc938c3313dc2e73":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_turnoffversionsandnotebookrecyclebininsharednotebooks","displayName":"Turn off Versions and Notebook Recycle Bin in shared notebooks (User)","description":"This policy setting allows you to turn off version history which includes versions and the notebook recycle bin. With a 2016 format notebook, OneNote will automatically store previous versions of the pages in the notebook, and it will also store a recycle bin for all of the deleted pages and sections.\r\n\r\nIf you enable this policy setting, it will turn off version history.\r\n\r\nIf you disable or do not configure this policy setting, OneNote will store previous versions by default.","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_turnoffversionsandnotebookrecyclebininsharednotebooks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_turnoffversionsandnotebookrecyclebininsharednotebooks_1","displayName":"Enabled","description":null,"helpText":null}]},"bcc6885cbe5ea721":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowonslowconnectionsonlydownloadheadersfilecachedexchan","displayName":"Disallow On Slow Connections Only Download Headers (User)","description":"This policy setting allows you to turn off the \"On Slow Connections Download Only Headers\" option.\r\n\r\nIf you enable this policy setting, you will turn off the \"On Slow Connections Download Only Headers\" option in the Download Preferences menu in the Send/Receive tab.\r\n\r\nIf you disable or do not configure this policy setting, you will allow the \"On Slow Connections Download Only Headers\" option in the Download Preferences menu in the Send/Receive tab.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowonslowconnectionsonlydownloadheadersfilecachedexchan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowonslowconnectionsonlydownloadheadersfilecachedexchan_1","displayName":"Enabled","description":null,"helpText":null}]},"bca5096ce22d1eee":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview","displayName":"Do not open files in unsafe locations in Protected View (User)","description":"This policy setting lets you determine if files located in unsafe locations will open in Protected View. If you have not specified unsafe locations, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders are considered unsafe locations.\r\n\r\nIf you enable this policy setting, files located in unsafe locations do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, files located in unsafe locations open in Protected View.","helpText":"","infoUrls":[],"categoryId":"42ce9a9b-0574-4b5c-993b-7679de80be47","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"bc3d5b3d64dbfccc":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1","displayName":"Enabled","description":null,"helpText":null}]},"bc92de0d96d71b54":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc18_l_datecolon77","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"bcba3e582842f328":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matcholdkanaforms","displayName":"Match old kana forms (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matcholdkanaforms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matcholdkanaforms_1","displayName":"Enabled","description":null,"helpText":null}]},"bc04800f6628af08":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_descriptioncolon22","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"bcf9773b2f19f3b8":{"id":"vendor_msft_firewall_mdmstore_global_enablepacketqueue","displayName":"Enable Packet Queue","description":"This value specifies how scaling for the software on the receive side is enabled for both the encrypted receive and clear text forward path for the IPsec tunnel gateway scenario. Use of this option also ensures that the packet order is preserved. The data type for this option value is a integer and is a combination of flags. A value of 0x00 indicates that all queuing is to be disabled. A value of 0x01 specifies that inbound encrypted packets are to be queued. A value of 0x02 specifies that packets are to be queued after decryption is performed for forwarding.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_global_enablepacketqueue_0","displayName":"Disabled","description":"Indicates that all queuing is to be disabled","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_enablepacketqueue_1","displayName":"Queue Inbound","description":"Specifies that inbound encrypted packets are to be queued","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_enablepacketqueue_2","displayName":"Queue Outbound","description":"Specifies that packets are to be queued after decryption is performed for forwarding","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/bd.json b/public/intune-definitions/bd.json new file mode 100644 index 000000000000..68c3a44c4cf7 --- /dev/null +++ b/public/intune-definitions/bd.json @@ -0,0 +1 @@ +{"bd23d70c117d9e2b":{"id":"ade_setupassistant_appearance","displayName":"Appearance","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_appearance_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_appearance_1","displayName":"Show","description":null,"helpText":null}]},"bdb0ea14c8fbc7c2":{"id":"com.apple.applicationaccess_allowfingerprintmodification","displayName":"Allow Fingerprint Modification","description":"If false, prevents the user from modifying Touch ID or Face ID. Requires a supervised device. Available in iOS 8.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfingerprintmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfingerprintmodification_true","displayName":"True","description":null,"helpText":null}]},"bd269f2a7b871b1f":{"id":"com.apple.carddav.account_carddavpassword","displayName":"Card DAV Password","description":"The user’s password.","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":null},"bd9a255f9c3339f8":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_lcid","displayName":"Company Portal LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"bd9eae816da3870b":{"id":"com.apple.managedclient.preferences_authserverallowlist","displayName":"Configure list of allowed authentication servers","description":"Specifies which servers to enable for integrated authentication. Integrated authentication is only enabled when Microsoft Edge receives an authentication challenge from a proxy or from a server in this list.\n\nSeparate multiple server names with commas. Wildcards (*) are allowed.\n\nIf you don't configure this policy, Microsoft Edge tries to detect if a server is on the intranet - only then will it respond to IWA requests. If the server is on the internet, IWA requests from it are ignored by Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#authserverallowlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"bdfd31fa7c71510e":{"id":"com.apple.managedclient.preferences_ipv6reachabilityoverrideenabled","displayName":"Enable IPv6 reachability check override","description":"This policy enables an override of the IPv6 reachability check. When overridden, the\nsystem will always query AAAA records when resolving host names. It applies to\nall users and interfaces on the device.\n\nIf you enable this policy, the IPv6 reachability check will be overridden.\n\nIf you disable or don't configure this policy, the IPv6 reachability check will not be overridden.\nThe system only queries AAAA records when it is reachable to a global IPv6 host.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#ipv6reachabilityoverrideenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_ipv6reachabilityoverrideenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_ipv6reachabilityoverrideenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"bd51b643df8a14e5":{"id":"com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (Deprecated)","description":"Cookies set for domains match specified patterns will revert to legacy SameSite behavior.\n\nReverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\n\nIf you don't set this policy, the global default value will be used. The global default will also be used for cookies on domains not covered by the patterns you specify.\n\nThe global default value can be configured using the \"LegacySameSiteCookieBehaviorEnabled\" policy. If \"LegacySameSiteCookieBehaviorEnabled\" is unset, the global default value falls back to other configuration sources.\n\nNote that patterns you list in this policy are treated as domains, not URLs, so you should not specify a scheme or port.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#legacysamesitecookiebehaviorenabledfordomainlist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"bd99a085c1eb783a":{"id":"com.apple.managedclient.preferences_sharedlinksenabled","displayName":"Show links shared from Microsoft 365 apps in History","description":"Allows Microsoft Edge to display links recently shared by or shared with the user from Microsoft 365 apps in History.\n\nIf you enable or don't configure this policy, Microsoft Edge displays links recently shared by or shared with the user from Microsoft 365 apps in History.\n\nIf you disable this policy, Microsoft Edge does not display links recently shared by or shared with the user from Microsoft 365 apps in History. The control in Microsoft Edge settings is disabled and set to off.\n\nThis policy only applies for Microsoft Edge local user profiles and profiles signed in using Azure Active Directory.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sharedlinksenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sharedlinksenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sharedlinksenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"bdff25ae7f14990e":{"id":"com.apple.mobiledevice.passwordpolicy_forcepin","displayName":"Force PIN","description":"If true, forces the user to enter a PIN.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":[{"id":"com.apple.mobiledevice.passwordpolicy_forcepin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mobiledevice.passwordpolicy_forcepin_true","displayName":"True","description":null,"helpText":null}]},"bd66e348f94788c7":{"id":"com.apple.profileremovalpassword_removalpassword","displayName":"Removal Password","description":"The password for allowing the profile to be removed.","helpText":null,"infoUrls":[],"categoryId":"e905d6cf-7820-48d4-86e0-b55fa991a5ad","categoryName":"Profile Removal Password","options":null},"bd656a4a1fa65d22":{"id":"com.apple.security.smartcard_tokenremovalaction","displayName":"Token Removal Action","description":"If set to Enabled, the screen saver is enabled when the SmartCard is removed. Available in macOS 10.13.4 and later.","helpText":null,"infoUrls":[],"categoryId":"f4a8384f-9e4e-4fc6-9ee2-28fa5260347a","categoryName":"Smart Card","options":[{"id":"com.apple.security.smartcard_tokenremovalaction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.security.smartcard_tokenremovalaction_1","displayName":"Enabled","description":null,"helpText":null}]},"bd464c5c2cb610dc":{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_medialibrary_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"bd32f7c24439dd1b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\n\nDisabling JavaScript optimizations (by setting this policy's value to 2) will mean that Microsoft Edge may render web content more slowly.\n\nThis policy can be overridden for specific URL patterns using the \"JavaScriptOptimizerAllowedForSites\" and \"JavaScriptOptimizerBlockedForSites\" policies.\n\nIf you don't configure this policy, JavaScript optimizations are enabled.\n\nPolicy options mapping:\n\n* AllowJavaScriptOptimizer (1) = Enable advanced JavaScript optimizations on all sites\n\n* BlockJavaScriptOptimizer (2) = Disable advanced JavaScript optimizations on all sites\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptoptimizersetting_allowjavascriptoptimizer","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptoptimizersetting_blockjavascriptoptimizer","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},"bdaf31fe28705f34":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeedropenabled","displayName":"Enable Drop feature in Microsoft Edge","description":"This policy lets you configure the Drop feature in Microsoft Edge.\n\nDrop lets users send messages or files to themselves.\n\nIf you enable or don't configure this policy, you can use the Drop feature in Microsoft Edge.\n\nIf you disable this policy, you can't use the Drop feature in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeedropenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeedropenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"bd36fcbdb2ea9942":{"id":"device_vendor_msft_bitlocker_systemdrivesenhancedpin","displayName":"Allow enhanced PINs for startup","description":"This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker.\r\n\r\nEnhanced startup PINs permit the use of characters including uppercase and lowercase letters, symbols, numbers, and spaces. This policy setting is applied when you turn on BitLocker.\r\n\r\nIf you enable this policy setting, all new BitLocker startup PINs set will be enhanced PINs.\r\n\r\nNote: Not all computers may support enhanced PINs in the pre-boot environment. It is strongly recommended that users perform a system check during BitLocker setup.\r\n\r\nIf you disable or do not configure this policy setting, enhanced PINs will not be used.\r\n\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesenhancedpin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesenhancedpin_1","displayName":"Enabled","description":null,"helpText":null}]},"bdda840beac45164":{"id":"device_vendor_msft_pkcsimportedcertificate_intendedpurpose","displayName":"Intended Purpose","description":null,"helpText":"","infoUrls":[],"categoryId":"b2b85670-5475-4148-ab3d-c4c86b4d5af0","categoryName":"PKCS imported certificate","options":null},"bd9caab6b6b89189":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableantispywaredefender","displayName":"Turn off Microsoft Defender Antivirus","description":"This policy setting turns off Microsoft Defender Antivirus.\r\n \r\n If you enable this policy setting, Microsoft Defender Antivirus does not run, and will not scan computers for malware or other potentially unwanted software.\r\n\r\n If you disable this policy setting, Microsoft Defender Antivirus will run regardless of any other installed antivirus product.\r\n\r\n If you do not configure this policy setting, Windows will internally manage Microsoft Defender Antivirus. If you install another antivirus program, Windows automatically disables Microsoft Defender Antivirus. Otherwise, Microsoft Defender Antivirus will scan your computers for malware and other potentially unwanted software.\r\n\r\n Enabling or disabling this policy may lead to unexpected or unsupported behavior. It is recommended that you leave this policy setting unconfigured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-disableantispywaredefender"],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableantispywaredefender_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disableantispywaredefender_1","displayName":"Enabled","description":null,"helpText":null}]},"bd57217437370c19":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_disablegenericreports","displayName":"Configure Watson events","description":"This policy setting allows you to configure whether or not Watson events are sent.\r\n\r\n If you enable or do not configure this setting, Watson events will be sent.\r\n\r\n If you disable this setting, Watson events will not be sent.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-disablegenericreports"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_disablegenericreports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_disablegenericreports_1","displayName":"Enabled","description":null,"helpText":null}]},"bdceb86563ad369a":{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyexecute_access_2","displayName":"Tape Drives: Deny execute access","description":"This policy setting denies execute access to the Tape Drive removable storage class.\r\n\r\nIf you enable this policy setting, execute access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, execute access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-tapedrives-denyexecute-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyexecute_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyexecute_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"bdabf6423f185dd3":{"id":"device_vendor_msft_policy_config_admx_servermanager_donotlaunchinitialconfigurationtasks","displayName":"Do not display Initial Configuration Tasks window automatically at logon","description":"This policy setting allows you to turn off the automatic display of the Initial Configuration Tasks window at logon on Windows Server 2008 and Windows Server 2008 R2. \r\n\r\nIf you enable this policy setting, the Initial Configuration Tasks window is not displayed when an administrator logs on to the server. \r\n\r\nIf you disable this policy setting, the Initial Configuration Tasks window is displayed when an administrator logs on to the server.\r\n\r\nIf you do not configure this policy setting, the Initial Configuration Tasks window is displayed when an administrator logs on to the server. However, if an administrator selects the \"Do not show this window at logon\" option, the window is not displayed on subsequent logons.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-servermanager#admx-servermanager-donotlaunchinitialconfigurationtasks"],"categoryId":"e042b102-b12c-48d1-86ef-f6d296da5b95","categoryName":"Server Manager","options":[{"id":"device_vendor_msft_policy_config_admx_servermanager_donotlaunchinitialconfigurationtasks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_servermanager_donotlaunchinitialconfigurationtasks_1","displayName":"Enabled","description":null,"helpText":null}]},"bdde2ff154e7c5ed":{"id":"device_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription","displayName":"Report when logon server was not available during user logon","description":"This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using previously stored account information.\r\n\r\nIf enabled, a notification popup will be displayed to the user when the user logs on with cached credentials.\r\n\r\nIf disabled or not configured, no popup will be displayed to the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-reportcachedlogonpolicydescription"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"device_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription_1","displayName":"Enabled","description":null,"helpText":null}]},"bd001b36a2bd5857":{"id":"device_vendor_msft_policy_config_applicationcontrol_policies_{policyguid}_policiesoptions","displayName":"Configuration settings format","description":"Select Enter XML data to type or paste an XML property list that contains your App Control for Business policy. Select Use built-in controls to choose from toggles exposed in this App Control for Business policy. Setting this to Not Configured will result in default behaviour on the device with no added options from the ApplicationControl CSP on the device.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"56b82fc9-c632-4c76-bb4f-dcf8757f003e","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_applicationcontrol_configure_xml_selected","displayName":"Enter xml data","description":"Enter xml data","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrol_built_in_controls_selected","displayName":"Use built-in controls","description":"Use built-in controls","helpText":null}]},"bd813da5239f154c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended","displayName":"Default search provider icon","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderIconURL specifies the default search provider's favorite icon URL.\r\n\r\nLeaving DefaultSearchProviderIconURL unset means there's no icon for the search provider.\r\n\r\nExample value: https://search.my.company/favicon.ico","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"bd8ee7619e57339c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled","displayName":"Allow using the deprecated U2F Security Key API","description":"If set to Enabled, the deprecated U2F Security Key API can be used and the deprecation reminder prompt shown for U2F API requests is suppressed.\r\n\r\nIf the policy is set to Disabled or left unset, the default behavior will apply.\r\n\r\nThe U2F Security Key API is deprecated and it will be disabled by default in Chrome 98.\r\n\r\nThis is a temporary opt-out mechanism. The U2F API will be removed from Chrome in Chrome 104, at which point this policy will cease to be supported.\r\n\r\nFor more information about the deprecation of the U2F Security Key API, please refer to https://groups.google.com/a/chromium.org/g/blink-dev/c/xHC3AtU_65A.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bde9e3ba428a8da3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist","displayName":"Force disable spellcheck languages","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},"bd8d3f22d4a7b2a1":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures","displayName":"Enable App Installer Experimental Features","description":"This policy controls whether users can enable experimental features in the Windows Package Manager.\n\nIf you enable or do not configure this setting, users will be able to enable experimental features for the Windows Package Manager.\n\nIf you disable this setting, users will not be able to enable experimental features for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableexperimentalfeatures"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"bdfd74a44603dcee":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols","displayName":"Download unsigned ActiveX controls","description":"This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.\n\nIf you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.\n\nIf you disable this policy setting, users cannot run unsigned controls.\n\nIf you do not configure this policy setting, users cannot run unsigned controls.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedownloadunsignedactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"bd4046dd8b3ac30d":{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration","displayName":"PK Init Hash Algorithm Configuration","description":"Configure hash algorithms for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmconfiguration"],"categoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration_0","displayName":"Disabled / Not Configured","description":"Disabled / Not Configured","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"bd8e5181d5e298f2":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"bd02965aa5ae171d":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended","displayName":"Get user confirmation before closing a browser window with multiple tabs","description":"This policy lets you configure whether users see a confirmation dialog before closing a browser window with multiple tabs. This dialog asks users to confirm that the browser window can be closed.\r\n\r\nIf you enable this policy, users will be presented with a confirmation dialog when closing a browser window with multiple tabs.\r\n\r\nIf you disable or don't configure this policy, a browser window with multiple tabs will close immediately without user confirmation.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"bd40b8cfb23fbf97":{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_edgesidebarappurlhostallowlistdesc","displayName":"Allow specific apps to be opened in Microsoft Edge sidebar (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"bdfcc4dc3713f582":{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls","displayName":"Block geolocation on these sites","description":"Use this policy to define a list of URL patterns for sites that are blocked from accessing the user's geolocation. These sites also can't prompt the user for location permissions.\r\n\r\nIf you enable this policy, the list you provide determines which sites are blocked from requesting or accessing geolocation.\r\n\r\nIf you disable or don't configure this policy, DefaultGeolocationSetting applies to all sites, if configured. If it's not configured, the user’s personal browser setting is used.\r\n\r\nFor detailed information on valid url patterns, see the documentation on pattern formats: https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"bd073148b95ef93c":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_totalmemorylimitmb","displayName":"Set memory limit for Microsoft Edge instances: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"bd4c8b49491821c0":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended","displayName":"Configure Sleeping Tabs","description":"This policy setting lets you configure whether to turn on Sleeping Tabs. Sleeping Tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, Sleeping Tabs is turned on.\r\n\r\nIndividual sites may be blocked from being put to sleep by configuring the policy 'SleepingTabsBlockedForUrls' (Block Sleeping Tabs on specific sites).\r\n\r\nIf you enable this setting, Sleeping Tabs is turned on.\r\n\r\nIf you disable this setting, Sleeping Tabs is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Sleeping Tabs.","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"bd167809d5ee1339":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_addedfolderharddeleteonunmount","displayName":"Hard-delete the contents of an added folder when unmounted","description":"This setting determines the behavior of the Sync client when encounters a request to unmount an added folder.\n\nIf admins enable this setting (value 1), when an unmount of an Added Folder is received, the Sync client will hard-delete all the contents of the folder.\n\nIf admins disable (value 0) or do not configure this setting, Sync will by default move the contents of the unmounted folder to the recycle-bin.\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_addedfolderharddeleteonunmount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_addedfolderharddeleteonunmount_1","displayName":"Enabled","description":null,"helpText":null}]},"bd9265001796c20f":{"id":"device_vendor_msft_policy_config_printers_requireippspolicy","displayName":"Require Ipps Policy","description":"Allows restricting IPP printer installation to only allow printers supporting IPPS to be installed. This ensures TLS is used for printer communication","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Printers#requireippspolicy"],"categoryId":"508b2c0e-f572-4a50-93bf-566e5b827c0e","categoryName":"Printers","options":[{"id":"device_vendor_msft_policy_config_printers_requireippspolicy_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_printers_requireippspolicy_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"bd759319a2c8a6d8":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks_forceallowtheseapps","displayName":"Let Apps Access Tasks Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"bdae6c01fa59cc57":{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode","displayName":"Configure Xbox Live Networking Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxlivenetworkingservicestartupmode"],"categoryId":"4f29ef5c-6ca0-4b09-893f-01755a670877","categoryName":"System Services","options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},"bd01843ae128a557":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver","displayName":"Address or URL of proxy server","description":"Allows you to specify the URL of the proxy server for Microsoft Edge Update to use.\r\n\r\n If you enable this policy, you can set the proxy server URL used by Microsoft Edge Update in your organization.\r\n\r\n This policy is applied only if you have selected manual proxy settings in the 'Choose how to specify proxy server settings' policy.\r\n\r\n Don't configure this policy if you have selected a proxy setting other than manual in the 'Choose how to specify proxy server settings' policy.","helpText":"","infoUrls":[],"categoryId":"ff543267-540e-4e37-a1e9-daf6a5e16ba7","categoryName":"Proxy Server","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},"bd1d5ad0b449d98c":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"bdcab0552839bb2d":{"id":"device_vendor_msft_policy_config_windowslogon_enablefirstlogonanimation","displayName":"Enable First Logon Animation","description":"This policy setting allows you to control whether users see the first sign-in animation when signing in to the computer for the first time. This applies to both the first user of the computer who completes the initial setup and users who are added to the computer later. It also controls if Microsoft account users will be offered the opt-in prompt for services during their first sign-in. If you enable this policy setting, Microsoft account users will see the opt-in prompt for services, and users with other accounts will see the sign-in animation. If you disable this policy setting, users will not see the animation and Microsoft account users will not see the opt-in prompt for services. If you do not configure this policy setting, the user who completes the initial Windows setup will see the animation during their first sign-in. If the first user had already completed the initial setup and this policy setting is not configured, users new to this computer will not see the animation. Note: The first sign-in animation will not be shown on Server, so this policy will have no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsLogon#enablefirstlogonanimation"],"categoryId":"500d2bb1-5186-447c-818f-401f2d9065ce","categoryName":"Windows Logon","options":[{"id":"device_vendor_msft_policy_config_windowslogon_enablefirstlogonanimation_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_enablefirstlogonanimation_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"bd15c175732f0de9":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm","displayName":"Specify CNG random number generator algorithm (User)","description":"This policy setting allows you to configure the CNG random number generator to use.\r\n\r\nIf you enable this policy setting, the random number generator specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default random number generator will be used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"bd681cc8d9d1bf82":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_1","displayName":"Determine if interactive users can generate Resultant Set of Policy data (User)","description":"This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.\r\n\r\nBy default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data.\r\n\r\nIf you enable this policy setting, interactive users cannot generate RSoP data.\r\n\r\nIf you disable or do not configure this policy setting, interactive users can generate RSoP.\r\n\r\nNote: This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data.\r\n\r\nNote: To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc\r\n\r\nNote: This policy setting exists as both a User Configuration and Computer Configuration setting.\r\n\r\nAlso, see the \"Turn off Resultant set of Policy logging\" policy setting in Computer Configuration\\Administrative Templates\\System\\GroupPolicy.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-denyrsoptointeractiveuser-1"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_1_1","displayName":"Enabled","description":null,"helpText":null}]},"bd2f3dc0d740ddfb":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoredock","displayName":"Prevent users from moving taskbar to another screen dock location (User)","description":"This policy setting allows you to prevent users from moving taskbar to another screen dock location.\r\n\r\nIf you enable this policy setting, users are not able to drag their taskbar to another area of the monitor(s).\r\n\r\nIf you disable or do not configure this policy setting, users are able to drag their taskbar to another area of the monitor unless prevented by another policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnoredock"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoredock_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoredock_1","displayName":"Enabled","description":null,"helpText":null}]},"bdc0c06186e90c5c":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemenu","displayName":"Remove File menu from File Explorer (User)","description":"Removes the File menu from My Computer and File Explorer.\r\n\r\nThis setting does not prevent users from using other methods to perform tasks available on the File menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nofilemenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemenu_1","displayName":"Enabled","description":null,"helpText":null}]},"bd3946374ba66fd5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"bd90408060f2a0d9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog. (User)","description":"This policy controls whether or not the \"Always open\" checkbox is shown on external protocol launch confirmation prompts.\r\n\r\n If this policy is set to True or not set, when an external protocol confirmation is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.\r\n\r\n If this policy is set to False, the \"Always allow\" checkbox is not displayed and the user will be prompted each time an external protocol is invoked.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox_1","displayName":"Enabled","description":null,"helpText":null}]},"bd2a46c90893c072":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_0","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_1","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_2","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},"bddfdd200b1a24ce":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl_browserswitcherexternalgreylisturl","displayName":"URL of an XML file that contains URLs that should never trigger a browser switch. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"bd0245a7850f48aa":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccessclientfirewalltraversal","displayName":"Enable firewall traversal from remote access client (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccessclientfirewalltraversal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccessclientfirewalltraversal_1","displayName":"Enabled","description":null,"helpText":null}]},"bdba84d61297b227":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowautomaticpromptingforactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"bdb7f0a6910e8892":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"bd0ece2a720b46ad":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"bd6f63f72f43c94a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls","displayName":"Allow the Adobe Flash plug-in on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can run the Adobe Flash plug-in.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPluginsSetting' (Default Adobe Flash setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"bd807032020f6315":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_seamlesswebtobrowsersigninenabled","displayName":"Seamless Web To Browser Sign-in Enabled (User)","description":"This policy only takes effect when the 'WebToBrowserSignInEnabled' (Web To Browser Sign-in Enabled) is enabled.\r\nIf you enable this policy and set this policy to True, users cannot turn off Seamless Web to Browser Sign-in feature from \"Automatic sign in on Microsoft Edge\" setting on Microsoft Edge profile settings page and that toggle will be greyed out.\r\nIf you enable this policy and set this policy to False, users cannot turn on Seamless Web to Browser Sign-in feature from \"Automatic sign in on Microsoft Edge\" setting on Microsoft Edge profile settings page and that toggle will be greyed out.\r\nIf you enable this policy but not configured or disabled, users can turn on/off Seamless Web to Browser Sign-in feature from settings by themselves.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_seamlesswebtobrowsersigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_seamlesswebtobrowsersigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bd4fcc4a1669b3d8":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_onfileattachedenterpriseconnector","displayName":"Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"bd38aef7df548596":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_developertoolsavailabilityallowlist_developertoolsavailabilityallowlistdesc","displayName":"List of URL patterns for which developer tools are allowed to be opened (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"bdecf0d8ecbaffb4":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled","displayName":"Enable the Collections feature (User)","description":"Lets you allow users to access the Collections feature, where they can collect, organize, share, and export content more efficiently and with Office integration.\r\n\r\nIf you enable or don't configure this policy, users can access and use the Collections feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't access and use Collections in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bd86470f00107ddb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastserviceserverterms9","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"bdd2ef0629c78e6a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withawebdiscussionslinkandanattachment_l_withawebdiscussionslinkandanattachment370","displayName":"With a Web discussions link and an attachment (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":null},"bd9b2ba74b0e3b43":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_outlook","displayName":"Microsoft Outlook (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_outlook_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_outlook_1","displayName":"True","description":null,"helpText":null}]},"bdd9f7cd4e66f3d7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_sharepoint","displayName":"Microsoft SharePoint Designer (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_sharepoint_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_sharepoint_1","displayName":"True","description":null,"helpText":null}]},"bdfcce4c3905f0bf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyonenote","displayName":"Disallow in OneNote (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyonenote_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyonenote_1","displayName":"True","description":null,"helpText":null}]},"bdd12eadf55074c6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_disableallcatalogs","displayName":"Block Web Add-ins (User)","description":"This policy setting allows you to prevent users from using web add-ins.\r\n\r\nIf you enable this policy setting, web add-ins are blocked and all other policy settings in the Trusted Catalogs folder are ignored.\r\n\r\nIf you disable or do not configure this policy setting, apps are allowed. Other policy settings in the Trusted Catalogs folder determine which specific app sources are allowed.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_disableallcatalogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_disableallcatalogs_1","displayName":"Enabled","description":null,"helpText":null}]},"bd4bbf4a508cdca6":{"id":"user_vendor_msft_policy_config_onent16v6.1~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_turnoffnewstickynotesinonenote","displayName":"Disable the new Sticky Notes experience (User)","description":"This policy controls the ability of users to access the new Sticky Notes experiences from OneNote.\r\n\r\nIf you enable this policy setting, users will be unable to access the new Sticky Notes experiences from OneNote.\r\n\r\nIf you disable this policy setting, users can access the new Sticky Notes experiences from OneNote.\r\n\r\nIf you do not set this policy setting, users can access the new Sticky Notes experiences from OneNote.\r\n\r\nNote: This policy does not affect the classic Microsoft Sticky Notes app available on the Microsoft Store. Additionally, disabling or not setting this policy does not guarantee access to the new Sticky Notes experiences from OneNote.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v6.1~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_turnoffnewstickynotesinonenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v6.1~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_turnoffnewstickynotesinonenote_1","displayName":"Enabled","description":null,"helpText":null}]},"bd6f06d336bc9349":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscripts_v2","displayName":"Do not allow Outlook object model scripts to run for shared folders (User)","description":"This policy setting controls whether Outlook executes scripts associated with custom forms or folder home pages for shared folders. \r\n\r\nIf you enable this policy setting, Outlook cannot execute any scripts associated with shared folders, overriding any configuration changes on users' computers. \r\n\r\nIf you disable this policy setting, Outlook will automatically run any scripts associated with custom forms or folder home pages for shared folders. \r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscripts_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disableoutlookobjectmodelscripts_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"bd44c23a164fe5a2":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjdeletenameooui","displayName":"Deletions in the Name column (User)","description":"Specifies that the delete indicator should appear in the Indicators field if you delete text in the Task Name or Resource Names field.\r\n\r\nIf you enable this setting, the delete indicator will appear if the user deletes a Task Name or Resource Names.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"fe7c8652-17d4-40a7-869c-f7cfc3454402","categoryName":"Show indicators and Option butons for","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjdeletenameooui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjinterface~l_pjshowindicators_l_pjdeletenameooui_1","displayName":"Enabled","description":null,"helpText":null}]},"bda1834039af0673":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_keeptasksonnearestworkingday","displayName":"Keep tasks on nearest working day (User)","description":"This policy setting will enable a constraint to be applied to tasks when they are toggled from Manually Scheduled Mode to Automatically Scheduled Mode, allowing the task date to be as close to the user-entered date as possible.\r\n\r\nIf you enable this policy setting, the task date will be as close to the user-entered date as possible when tasks are toggled from Manually Scheduled Mode to Automatically Scheduled Mode.\r\n\r\nIf you disable or do not configure this policy setting, the task date will not to be as close to the user-entered date when tasks are toggled from Manually Scheduled Mode to Automatically Scheduled Mode.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_keeptasksonnearestworkingday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_keeptasksonnearestworkingday_1","displayName":"Enabled","description":null,"helpText":null}]},"bda82a708d41d093":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":null},"bd1e8f018eaa25bb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowbackgroundsaves","displayName":"Allow background saves (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowbackgroundsaves_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowbackgroundsaves_1","displayName":"Enabled","description":null,"helpText":null}]},"bd8aa8506c57e03b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_pathcolon40","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"bd73d3195a9bb051":{"id":"vendor_msft_firewall_mdmstore_domainprofile_defaultoutboundaction","displayName":"Default Outbound Action","description":"This value is the action that the firewall does by default (and evaluates at the very end) on outbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 0 [Allow]. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_defaultoutboundaction_0","displayName":"Allow","description":"Allow Outbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_defaultoutboundaction_1","displayName":"Block","description":"Block Outbound By Default","helpText":null}]},"bd9d2e3f5c79c386":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_priority","displayName":"Priority","description":"This value represents the order of rule enforcement. A lower priority rule is evaluated first. If not specified, block rules are evaluated before allow rules. If priority is configured, it is highly recommended to configure the value for ALL rules to ensure expected evaluation of rules.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/be.json b/public/intune-definitions/be.json new file mode 100644 index 000000000000..63fca55cdca8 --- /dev/null +++ b/public/intune-definitions/be.json @@ -0,0 +1 @@ +{"be42a8b3df67021b":{"id":"com.apple.assetcache.managed_parentselectionpolicy","displayName":"Parent Selection Policy","description":"The policy to implement when choosing among more than one configured parent content cache. With every policy, parent caches that are temporarily unavailable are skipped.\r\nfirst-available: Always use the first available parent in the Parents list. Use this policy to designate permanent primary, secondary, and subsequent parents.\r\n\r\nurl-path-hash: Hash the path part of the requested URL so that the same parent is always used for the same URL. This is useful for maximizing the size of the combined caches of the parents.\r\n\r\nrandom: Choose a parent at random. Use this policy for load balancing.\r\n\r\nround-robin: Rotate through the parents in order. Use this policy for load balancing.\r\n\r\nsticky-available: Use the first available parent that is available in the Parents list until it becomes unavailable, then advance to the next one. Use this policy for designating floating primary, secondary, and subsequent parents. ","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_parentselectionpolicy_0","displayName":"first-available","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_parentselectionpolicy_1","displayName":"url-path-hash","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_parentselectionpolicy_2","displayName":"random","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_parentselectionpolicy_3","displayName":"round-robin","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_parentselectionpolicy_4","displayName":"sticky-available","description":null,"helpText":null}]},"be90a95d3f6fefbc":{"id":"com.apple.associated-domains_configuration","displayName":"Configuration","description":"Map apps to their associated domains.","helpText":null,"infoUrls":[],"categoryId":"8efd284f-5a56-4da8-8821-f51984ff954d","categoryName":"Associated Domains","options":null},"be39367f7f5f50ee":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_application id","displayName":"Microsoft Teams (work or school) Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"bea2a037e95ae5c5":{"id":"com.apple.managedclient.preferences_autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply","description":"A list of URLs to which \"AutoOpenFileTypes\" will apply to. This policy has no impact on automatically open values set by users via the download shelf ... > \"Always open files of this type\" menu entry.\n\nIf you set URLs in this policy, files will only automatically open by policy if the URL is part of this set and the file type is listed in \"AutoOpenFileTypes\". If either condition is false, the download won't automatically open by policy.\n\nIf you don't set this policy, all downloads where the file type is in \"AutoOpenFileTypes\" will automatically open.\n\nA URL pattern has to be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autoopenallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"be74af32f0a2669a":{"id":"com.apple.managedclient.preferences_extensioninstallblocklist","displayName":"Control which extensions cannot be installed","description":"List specific extensions that users can NOT install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed will be disabled, and the user won't be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.\n\nUse \"*\" to block all extensions that aren't explicitly listed in the allow list.\n\nIf you don't configure this policy, users can install any extension in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensioninstallblocklist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"beff107f7e33a4d8":{"id":"com.apple.managedclient.preferences_importfavorites","displayName":"Allow importing of favorites","description":"Allows users to import favorites from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, favorites aren't imported at first run, and users can’t import them manually.\n\nIf you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (on macOS) browsers.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importfavorites"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importfavorites_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importfavorites_true","displayName":"Enabled","description":null,"helpText":null}]},"be7734474c7ba77e":{"id":"com.apple.managedclient.preferences_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if Sleeping Tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\n\nTabs are only put to sleep automatically when the policy \"SleepingTabsEnabled\" is enabled or is not configured and the user has enabled the Sleeping Tabs setting.\n\nIf you don't configure this policy, users can choose the timeout value.\n\nPolicy options mapping:\n\n* 5Minutes (300) = 5 minutes of inactivity\n\n* 15Minutes (900) = 15 minutes of inactivity\n\n* 30Minutes (1800) = 30 minutes of inactivity\n\n* 1Hour (3600) = 1 hour of inactivity\n\n* 2Hours (7200) = 2 hours of inactivity\n\n* 3Hours (10800) = 3 hours of inactivity\n\n* 6Hours (21600) = 6 hours of inactivity\n\n* 12Hours (43200) = 12 hours of inactivity\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sleepingtabstimeout"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_0","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_1","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_2","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_3","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_4","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_5","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_6","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_7","displayName":"12 hours of inactivity","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sleepingtabstimeout_8","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"be22953feb606444":{"id":"com.apple.mcxprinting_userprinterlist","displayName":"User Printer List","description":"The printers available to a user.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"becbc88b0571480e":{"id":"com.apple.screensaver.user_modulepath","displayName":"Module Path","description":"A full path to the screen saver module to use.","helpText":null,"infoUrls":[],"categoryId":"11c4cf0f-a03d-4309-93b2-011be4c410d5","categoryName":"Screensaver User","options":null},"be4a57f03b645d62":{"id":"com.apple.softwareupdate_automaticallyinstallappupdates","displayName":"Automatically Install App Updates (Deprecated)","description":"If false, deselects the \"Install app updates from the App Store\" option and prevents the user from changing the option. ","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_automaticallyinstallappupdates_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_automaticallyinstallappupdates_true","displayName":"True","description":null,"helpText":null}]},"be9c7a9e4e3c717a":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_identifiertype","displayName":"Identifier Type","description":"The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_identifiertype_0","displayName":"bundle ID","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_identifiertype_1","displayName":"path","description":null,"helpText":null}]},"be0ea24cec57c12b":{"id":"com.apple.universalaccess_contrast","displayName":"Contrast","description":"The contrast value in the Display options.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":null},"beb185a34f30655d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurl_recommended","displayName":"Specifies the search-by-image feature for the default search provider (users can override)","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\n\nThis policy is optional. If you don't configure it, image search isn't available.\n\nSpecify Bing's Image Search URL as:\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\n\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\n\nSee \"DefaultSearchProviderImageURLPostParams\" policy to finish configuring image search.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy can't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"be8aa86c17b36332":{"id":"device_vendor_msft_policy_config_admx_disknvcache_solidstatepolicy","displayName":"Turn off solid state mode","description":"This policy setting turns off the solid state mode for the hybrid hard disks. \r\n\r\nIf you enable this policy setting, frequently written files such as the file system metadata and registry may not be stored in the NV cache.\r\n\r\nIf you disable this policy setting, the system will store frequently written data into the non-volatile (NV) cache. This allows the system to exclusively run out of the NV cache and power down the disk for longer periods to save power. Note that this can cause increased wear of the NV cache.\r\n\r\nIf you do not configure this policy setting, the default behavior of the system is observed and frequently written files will be stored in the NV cache.\r\n\r\nNote: This policy setting is applicable only if the NV cache feature is on.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-disknvcache#admx-disknvcache-solidstatepolicy"],"categoryId":"40c593b9-63cf-4b10-ad26-1ceb7c9491fe","categoryName":"Disk NV Cache","options":[{"id":"device_vendor_msft_policy_config_admx_disknvcache_solidstatepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_disknvcache_solidstatepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"be3ff4b6bf0e958e":{"id":"device_vendor_msft_policy_config_admx_kerberos_serveracceptscompound","displayName":"Support compound authentication","description":"This policy setting controls configuring the device's Active Directory account for compound authentication.\r\n\r\nSupport for providing compound authentication which is used for access control will require enough domain controllers in the resource account domains to support the requests. The Domain Administrator must configure the policy \"Support Dynamic Access Control and Kerberos armoring\" on all the domain controllers to support this policy.\r\n\r\nIf you enable this policy setting, the device's Active Directory account will be configured for compound authentication by the following options:\r\n\r\nNever: Compound authentication is never provided for this computer account.\r\n\r\nAutomatic: Compound authentication is provided for this computer account when one or more applications are configured for Dynamic Access Control.\r\n\r\nAlways: Compound authentication is always provided for this computer account.\r\n\r\nIf you disable this policy setting, Never will be used.\r\nIf you do not configure this policy setting, Automatic will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-serveracceptscompound"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_serveracceptscompound_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_serveracceptscompound_1","displayName":"Enabled","description":null,"helpText":null}]},"be2eed2fb51ba808":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_2_lbl_nopinfileslist","displayName":"Files and Folders:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"be4bfb86d259606d":{"id":"device_vendor_msft_policy_config_admx_tpm_optintodsha_name","displayName":"Enable Device Health Attestation Monitoring and Reporting","description":"This group policy enables Device Health Attestation reporting (DHA-report) on supported devices. It enables supported devices to send Device Health Attestation related information (device boot logs, PCR values, TPM certificate, etc.) to Device Health Attestation Service (DHA-Service) every time a device starts. Device Health Attestation Service validates the security state and health of the devices, and makes the findings accessible to enterprise administrators via a cloud based reporting portal. This policy is independent of DHA reports that are initiated by device manageability solutions (like MDM or SCCM), and will not interfere with their workflows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-optintodsha-name"],"categoryId":"99b4ac32-50b5-4659-a7a1-94bc708ae71a","categoryName":"Device Health Attestation Service","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_optintodsha_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_optintodsha_name_1","displayName":"Enabled","description":null,"helpText":null}]},"be27544cd979c635":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common","displayName":"Microsoft Office 2010 Common Settings","description":"This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2010 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2010 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2010 applications from synchronization between computers. \r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2010 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2010 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2010 applications are enabled, this policy setting should not be disabled \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010common"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common_1","displayName":"Enabled","description":null,"helpText":null}]},"beb811a4476ec944":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel","displayName":"Microsoft Excel 2010","description":"This policy setting configures the synchronization of user settings for Microsoft Excel 2010.\r\nBy default, the user settings of Microsoft Excel 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Excel 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010excel"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel_1","displayName":"Enabled","description":null,"helpText":null}]},"be7cf8c3ee8bdfbb":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftstickynotes","displayName":"Microsoft Sticky Notes (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftstickynotes_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_microsoftstickynotes_1","displayName":"True","description":null,"helpText":null}]},"be0f2f9cf26865cb":{"id":"device_vendor_msft_policy_config_browser_enterprisesitelistserviceurl","displayName":"Enterprise Site List Service Url","description":"Important. Discontinued in Windows 10, version 1511. Use the Browser/EnterpriseModeSiteList policy instead.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enterprisesitelistserviceurl"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"be0a6b49d1b060fc":{"id":"device_vendor_msft_policy_config_browser_unlockhomebutton","displayName":"Unlock Home Button","description":"By default, when enabling Configure Home Button or Set Home Button URL, the home button is locked down to prevent your users from changing what page loads when clicking the home button. Use this policy to let users change the home button even when Configure Home Button or Set Home Button URL are enabled. If enabled, the UI settings for the home button are enabled allowing your users to make changes, including hiding and showing the home button as well as configuring a custom URL. If disabled or not configured, the UI settings for the home button are disabled preventing your users from making changes. Default setting: Disabled or not configured Related policy: -Configure Home Button -Set Home Button URL","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#unlockhomebutton"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_unlockhomebutton_0","displayName":"Disabled","description":"Lock down and prevent users from making changes to the settings.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_unlockhomebutton_1","displayName":"Enabled","description":"Let users make changes.","helpText":null}]},"be8bd9b236ee2ed1":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates.","description":"Setting the policy to All (0) or leaving it unset lets users edit trust settings for all CA certificates, remove user-imported certificates, and import certificates using Certificate Manager. Setting the policy to UserOnly (1) lets users manage only user-imported certificates, but not change trust settings of built-in certificates. Setting it to None (2) lets users view (not manage) CA certificates.","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"be0ae3d94bd87c72":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"be2a2e6a66f04e3e":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled","displayName":"Configure tab lifecycles","description":"The tab lifecycles feature reclaims CPU and memory associated with running tabs that haven't been used in a long time, by first throttling, then freezing, and finally discarding them.\r\n\r\nIf you disable this policy, the tab lifecycles feature is disabled, and all tabs are left running normally.\r\n\r\nIf you enable or don't configure this policy, the tab lifecycles feature is enabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"be6aca540fad65e5":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls","displayName":"Allow clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\r\n\r\nSetting the policy lets you create a list of URL patterns that specify which sites can use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\r\n\r\nLeaving the policy unset means 'DefaultClipboardSetting' (Default clipboard site permission) applies for all sites if it's set. If it isn't set, the user's personal setting applies.\r\n\r\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"bef1f8de3aca5a99":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled","displayName":"Enable upload files from mobile in Microsoft Edge desktop","description":"This policy lets you configure the \"Upload from mobile\" feature in Microsoft Edge.\r\n\r\nUpload from mobile lets users select file from mobile devices to desktop when user upload file in a webpage in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, you can use the Upload from mobile feature in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Upload from mobile feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"be32d0b23772b599":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls","displayName":"Block Window Management permission on specified sites","description":"Lets you configure a list of site url patterns that specify sites which will automatically deny the window management permission. This limits the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy isn't configured for a site, then the policy from 'DefaultWindowManagementSetting' (Default Window Management permission setting) applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"be126f8b5475e809":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled","displayName":"Enhance images enabled (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 121.\r\n\r\nThe enhance images feature is deprecated and starting in 122 this policy will be removed. Set whether Microsoft Edge can automatically enhance images to show you sharper images with better color, lighting, and contrast.\r\n\r\nIf you enable this policy or don't configure the policy, Microsoft Edge will automatically enhance images on specific web applications.\r\n\r\nIf you disable this policy, Microsoft Edge will not enhance images.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bee32165a678f032":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_visioexe47","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_visioexe47_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_visioexe47_1","displayName":"True","description":null,"helpText":null}]},"be184f571c3b9763":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_outlookexe106","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_outlookexe106_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_outlookexe106_1","displayName":"True","description":null,"helpText":null}]},"be67fa33da780e80":{"id":"device_vendor_msft_policy_config_search_disablebackoff","displayName":"Disable Backoff","description":"If enabled, the search indexer backoff feature will be disabled. Indexing will continue at full speed even when system activity is high. If disabled, backoff logic will be used to throttle back indexing activity when system activity is high. Default is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#disablebackoff"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_disablebackoff_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_disablebackoff_1","displayName":"Enable.","description":"Enable.","helpText":null}]},"be2a23c1d641ec20":{"id":"enrollment_autopilot_dpp_allowedscriptids","displayName":"Allowed scripts","description":"Select up to 10 Windows PowerShell scripts to install during this deployment. These scripts should be already assigned to the device group selected earlier. You can check the installation status for these scripts in the Autopilot device preparation deployment report.","helpText":"","infoUrls":[],"categoryId":"db9fc5b8-fb50-437b-aceb-87d9d380def0","categoryName":null,"options":null},"be9e155d243c0949":{"id":"linux_mdatp_managed_cloudservice_diagnosticlevel","displayName":"Diagnostic data collection level","description":"We encourage you to share your diagnostic and usage data with us to help improve Microsoft products and services.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#diagnostic-collection-level"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"linux_mdatp_managed_cloudservice_diagnosticlevel_0","displayName":"optional","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_diagnosticlevel_1","displayName":"required","description":null,"helpText":null}]},"be1ddcc733379825":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnonotification","displayName":"Turn off all balloon notifications (User)","description":"This policy setting allows you to turn off all notification balloons.\r\n\r\nIf you enable this policy setting, no notification balloons are shown to the user.\r\n\r\nIf you disable or do not configure this policy setting, notification balloons are shown to the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnonotification"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnonotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnonotification_1","displayName":"Enabled","description":null,"helpText":null}]},"bef96af7ffc41c4d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled","displayName":"Continue running background apps when Google Chrome is closed (User)","description":"Setting the policy to Enabled turns background mode on. In background mode, a Google Chrome process is started on OS sign-in and keeps running when the last browser window is closed, allowing background apps and the browsing session to remain active. The background process displays an icon in the system tray and can always be closed from there.\r\n\r\nSetting the policy to Disabled turns background mode off.\r\n\r\nIf you set the policy, users can't change it in the browser settings. If unset, background mode is off at first, but users can change it.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"be33b7de3b8d355d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins","displayName":"Specify a list of disabled plugins (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"bec37f20eef84044":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostrequiretwofactor","displayName":"Enable two-factor authentication for remote access hosts (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostrequiretwofactor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostrequiretwofactor_1","displayName":"Enabled","description":null,"helpText":null}]},"bedc2f58e272b027":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites","displayName":"Block JavaScript optimizations on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites for which\r\nadvanced JavaScript optimizations are disabled.\r\n\r\nDisabling JavaScript optimizations will mean that Google Chrome may render web content more slowly.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site\r\ngranularity (eTLD+1). A policy set for only subdomain.site.com will not\r\ncorrectly apply to site.com or subdomain.site.com since they both resolve to\r\nthe same eTLD+1 (site.com) for which there is no policy. In this case, policy\r\nmust be set on site.com to apply correctly for both site.com and\r\nsubdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level\r\norigin url alone, so e.g. if site-one.com is listed in the JavaScriptOptimizerBlockedForSites policy but site-one.com loads a frame\r\ncontaining site-two.com then site-one.com will have JavaScript optimizations\r\ndisabled, but site-two.com will use the policy from DefaultJavaScriptOptimizerSetting, if set, or default to JavaScript\r\noptimizations enabled. Blocklist entries have higher priority than allowlist\r\nentries, which in turn have higher priority than the configured default value.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptOptimizerSetting applies to the site, if set, otherwise\r\nJavaScript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"bed1c920c79607b6":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting (User)","description":"Setting the policy to \"BlockWindowManagement\" (value 2) automatically denies the window management permission to sites by default. This limits the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nSetting the policy to \"AskWindowManagement\" (value 3) by default prompts the user when the window management permission is requested. If users allow the permission, it extends the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nNot configuring the policy means the \"AskWindowManagement\" policy applies, but users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockWindowManagement (2) = Denies the Window Management permission on all sites by default\r\n\r\n* AskWindowManagement (3) = Ask every time a site wants obtain the Window Management permission\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"bebf4370f7973a35":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_browsingwithcopilotallowlist_browsingwithcopilotallowlistdesc","displayName":"Browsing with Copilot Allowed URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"be5ca2a81e9f5bb0":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended","displayName":"Single sign-on for work or school sites using this profile enabled (User)","description":"'Allow single sign-on for work or school sites using this profile' option allows non-AAD profiles to be able to use single sign-on for work or school sites using work or school credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-AAD profiles only.\r\n\r\nIf you disable this policy, non-AAD profiles will not be able to use SSO using other credentials present on the machine. This will also ensure that 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' is turned off.\r\n\r\nIf you enable this policy or don't configure it, non-AAD profiles will be able to use SSO using other credentials present on the machine and 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' will continue working.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"be8677bba91c9358":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled","displayName":"Enable renderer in app container (User)","description":"Launches Renderer processes into an App Container for\r\nadditional security benefits.\r\n\r\nIf you don't configure this policy, Microsoft Edge will launch the renderer process in an app\r\ncontainer in a future update.\r\n\r\nIf you enable this policy, Microsoft Edge will launch the renderer process in an app container.\r\n\r\nIf you disable this policy, Microsoft Edge will not launch the renderer process in an app container.\r\n\r\nOnly turn off the policy if there are compatibility issues with\r\nthird-party software that must run inside Microsoft Edge's renderer processes.\r\n\r\nThis policy will only take effect on Windows 10 RS5 and above.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"be4b0e191c1a8277":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_maxretries_l_maxretriesdecimal","displayName":"Maximum number of retries (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":null},"be13e7b63524aeee":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceemail","displayName":"Replace AD - E-mail (User)","description":"This policy setting allows you to customize the 1st value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"email address\" of line 1.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 1 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceemail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceemail_1","displayName":"Enabled","description":null,"helpText":null}]},"be3ba3f3d191c6e5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_albanian","displayName":"Albanian (User)","description":"Enables the editing language Albanian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_albanian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_albanian_1","displayName":"Enabled","description":null,"helpText":null}]},"be89612c2544d488":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_officeconverters_l_blockopeningofprereleaseppt","displayName":"Block opening of pre-release versions of file formats new to PowerPoint 2016 through the Compatibility Pack for Office 2016 and PowerPoint 2016 Converter (User)","description":"This policy setting controls whether users with the Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2016 File Formats installed can open Office Open XML files saved with pre-release versions of PowerPoint 2016. PowerPoint Open XML files usually have the following extensions: .pptx, .pptm, .potx, .potm, .ppsx, .ppsm, .ppam, .thmx, .xml. \r\n\r\nIf you enable this policy setting, users of the Compatibility Pack will not be able to open Office Open XML files created in pre-release versions of PowerPoint 2016. \r\n\r\nIf you disable this policy setting, users with the Compatibility Pack installed can open files saved by some pre-release versions of PowerPoint, but not by others, which can lead to inconsistent file opening functionality.\r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled","helpText":"","infoUrls":[],"categoryId":"8b0e5a63-c309-430b-8521-7bd21e715b90","categoryName":"Office 2016 Converters","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_officeconverters_l_blockopeningofprereleaseppt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_officeconverters_l_blockopeningofprereleaseppt_1","displayName":"Enabled","description":null,"helpText":null}]},"be3b081c0e89294e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_l_pathcolon250","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"bed11f2c92d615b3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_outlooktnefinsmimemessages","displayName":"Always use TNEF formatting in S/MIME messages (User)","description":"This policy setting allows you to specify the formatting when sending S/MIME messages.\r\n\r\nIf you enable this policy setting, Outlook always uses TNEF formatting when sending S/MIME messages.\r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the format specified by the user when sending e-mail messages, including when sending S/MIME messages.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_outlooktnefinsmimemessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_outlooktnefinsmimemessages_1","displayName":"Enabled","description":null,"helpText":null}]},"beee78bcc2c5df77":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjautomaticsaveoption","displayName":"Save Active Project only (User)","description":"Saves only the active project at the interval you specify. This setting is only used by Project if Auto Save is turned on.\r\n\r\nIf you enable this setting, Project will only save the active project at specified intervals.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dfd5d749-c68c-448f-ab3f-851c09f09df4","categoryName":"Auto Save Options","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjautomaticsaveoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjautomaticsaveoption_1","displayName":"Enabled","description":null,"helpText":null}]},"be7a96057ec15160":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjcache_l_cachesizeperprofile_l_cachesizeperprofile38","displayName":"Local Project Cache Size Limit in MB (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e13ec567-e29c-4ca0-b599-e8c43587f10a","categoryName":"Tools | Local Project Cache","options":null},"becbab450390c4c8":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjscrollbar","displayName":"Scroll Bars (User)","description":"Displays scrollbars for views.\r\n \r\nIf you enable this setting, scrollbars are displayed in the views.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"251c6873-bf5b-4d85-8185-3c4973b6f33c","categoryName":"Show","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjscrollbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjscrollbar_1","displayName":"Enabled","description":null,"helpText":null}]},"be0a3fd80bd6f1d4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"be3d3d69fbc7231c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_l_pathcolon12","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"befaae035147dd3c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy","displayName":"VBA Macro Notification Settings (User)","description":"This policy setting controls how the specified applications warn users when Visual Basic for Applications (VBA) macros are present.\r\n\r\nIf you enable this policy setting, you can choose from four options for determining how the specified applications will warn the user about macros:\r\n \r\n- Disable all with notification: The application displays the Trust Bar for all macros, whether signed or unsigned. This option enforces the default configuration in Office.\r\n \r\n- Disable all except digitally signed macros: The application displays the Trust Bar for digitally signed macros, allowing users to enable them or leave them disabled. Any unsigned macros are disabled, and users are not notified.\r\n \r\n- Disable all without notification: The application disables all macros, whether signed or unsigned, and does not notify users.\r\n \r\n- Enable all macros (not recommended): All macros are enabled, whether signed or unsigned. This option can significantly reduce security by allowing dangerous code to run undetected.\r\n \r\nIf you disable this policy setting, \"Disable all with notification\" will be the default setting.\r\n \r\nIf you do not configure this policy setting, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking \"Enable Content\" on the Trust Bar. If the user clicks \"Enable Content\", then the document is added as a trusted document.\r\n \r\nImportant: If \"Disable all except digitally signed macros\" is selected, users will not be able to open unsigned Access databases.\r\n \r\nAlso, note that Microsoft Office stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Microsoft Office still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store.\r\n \r\nTherefore, if you created a list of trusted publishers in a previous version of Microsoft Office and you upgrade to Office, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"be4b76fc50f19fe5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies","displayName":"Mark formatting inconsistencies (User)","description":"Defines color to use for marking formatting inconsistencies.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_1","displayName":"Enabled","description":null,"helpText":null}]},"be98fdf410b4c04b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13","displayName":"Trusted Location #13 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/bf.json b/public/intune-definitions/bf.json new file mode 100644 index 000000000000..ef25dbf9375b --- /dev/null +++ b/public/intune-definitions/bf.json @@ -0,0 +1 @@ +{"bff0c17cf8ce0938":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_application id","displayName":"Microsoft Defender ATP Application ID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"bff7270142ad5424":{"id":"com.apple.managedclient.preferences_edgemanagementpolicyoverridesplatformpolicy","displayName":"Microsoft Edge management service policy overrides platform policy.","description":"If you enable this policy, the cloud-based Microsoft Edge management service policy takes precedence if it conflicts with platform policy.\n\nIf you disable or don't configure this policy, platform policy takes precedence if it conflicts with the cloud-based Microsoft Edge management service policy.\n\nThis mandatory policy affects machine scope cloud-based Microsoft Edge management policies.\n\nMachine policies apply to all edge browser instances regardless of the user who is logged in.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgemanagementpolicyoverridesplatformpolicy"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgemanagementpolicyoverridesplatformpolicy_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgemanagementpolicyoverridesplatformpolicy_true","displayName":"Enabled","description":null,"helpText":null}]},"bfa69bb7f6d0c65d":{"id":"com.apple.managedclient.preferences_enableunsafeswiftshader","displayName":"Allow software WebGL fallback using SwiftShader","description":"Controls whether SwiftShader is used as a fallback for WebGL when hardware GPU acceleration isn't available.\n\nWhen enabled, Microsoft Edge uses SwiftShader to support WebGL on systems without GPU acceleration, such as headless environments or virtual machines.\n\nStarting in Microsoft Edge version 144, SwiftShader has been deprecated due to security concerns. As a result, WebGL context creation fails in scenarios where SwiftShader would have been used. Enabling this policy allows organizations to temporarily defer the deprecation and continue using SwiftShader.\n\nIf you disable or don't configure this policy, WebGL context creation may fail on systems without hardware acceleration. This could cause web content relying on WebGL to function incorrectly if it doesn't handle context creation failures.\n\nNote: This policy is temporary and scheduled for removal in a future release. Microsoft does not guarantee the security of environments where this policy is enabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enableunsafeswiftshader"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enableunsafeswiftshader_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enableunsafeswiftshader_true","displayName":"Enabled","description":null,"helpText":null}]},"bfd65eb242a4f467":{"id":"com.apple.managedclient.preferences_screencaptureallowed","displayName":"Allow or deny screen capture","description":"If you enable this policy, or don't configure this policy, a web page can use screen-share APIs (for example, getDisplayMedia() or the Desktop Capture extension API) for a screen capture.\nIf you disable this policy, calls to screen-share APIs will fail. For example, if you're using a web-based online meeting, video or screen sharing will not work.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#screencaptureallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_screencaptureallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_screencaptureallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"bf029460664d9e15":{"id":"com.apple.managedclient.preferences_sendsiteinfotoimproveservices","displayName":"Send site information to improve Microsoft services","description":"This policy enables sending info about websites visited in Microsoft Edge to Microsoft to improve services like search.\n\nEnable this policy to send info about websites visited in Microsoft Edge to Microsoft. Disable this policy to not send info about websites visited in Microsoft Edge to Microsoft. In both cases, users can't change or override the setting.\n\nOn Windows 10, Beta and Stable if this policy is not configured, Microsoft Edge will default to the Windows diagnostic data setting. If this policy is enabled Microsoft Edge will only send info about websites visited in Microsoft Edge if the Windows Diagnostic data setting is set to Full. If this policy is disabled Microsoft Edge will not send info about websites visited. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\n\nOn Windows 10, Canary and Dev channels, this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.\n\nOn Windows 7, 8, and Mac this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sendsiteinfotoimproveservices"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sendsiteinfotoimproveservices_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sendsiteinfotoimproveservices_true","displayName":"Enabled","description":null,"helpText":null}]},"bf82ad0173e32ef0":{"id":"com.apple.managedclient.preferences_sharepointonpremtenantname","displayName":"SharePoint Server Tenant Name","description":"Specifies the name of the folder created for syncing the SharePoint Server 2019 files specified in the Front Door URL.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#sharepointonpremtenantname"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":null},"bf8ae0dbefabae1e":{"id":"com.apple.mcxprinting_userprinterlist_printer_printerlocked","displayName":"Printer Locked","description":"If true, locks the printer.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":[{"id":"com.apple.mcxprinting_userprinterlist_printer_printerlocked_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxprinting_userprinterlist_printer_printerlocked_true","displayName":"True","description":null,"helpText":null}]},"bf5efbb151a67984":{"id":"com.apple.system-extension-policy_removablesystemextensions_generickey","displayName":"Removable System Extensions","description":"The dictionary maps team identifiers (keys) to arrays of bundle identifiers, where the bundle identifier defines the system extension.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"bfcc8dab78c092f1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeworkspacesenabled","displayName":"Enable Workspaces","description":"Microsoft Edge Workspaces helps improve productivity for users in your organization.\n\nIf you enable or don't configure this policy, users can access the Microsoft Edge Workspaces feature.\nIf you disable this policy, users won't be able to access the Microsoft Edge Workspaces feature.\n\nTo learn more about the feature, see https://go.microsoft.com/fwlink/?linkid=2209950","helpText":null,"infoUrls":[],"categoryId":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","categoryName":"Edge Workspaces settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeworkspacesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeworkspacesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"bf38c7b2c41d5bff":{"id":"com.microsoft.edge.mamedgeappconfigsettings.m365linksautoopencopilotenabled","displayName":"Automatically open Copilot side pane with contextual insights for links opened from Outlook","description":"This policy controls whether Microsoft Edge automatically opens the Microsoft Copilot side pane when users open eligible web links from Outlook emails sent from the same tenant.\n\nStarting in Microsoft Edge version 148, eligible links from Outlook emails sent from the same tenant can open with the Copilot side pane. Copilot can use the originating Outlook email as context to surface relevant insights and suggested next steps alongside the web content.\n\nIf you enable this policy or don't configure it, the Copilot side pane opens automatically when users open eligible links from Outlook emails sent from the same tenant.\n\nIf you disable this policy, the Copilot side pane doesn't open automatically for those links.\n\nThis policy is not yet supported. When support becomes available, eligible links from Outlook emails sent from the same tenant can open with the Copilot side pane.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.m365linksautoopencopilotenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.m365linksautoopencopilotenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"bf0cc20172be8ae0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoftedgeinsiderpromotionenabled","displayName":"Microsoft Edge Insider Promotion Enabled","description":"Shows content promoting the Microsoft Edge Insider channels on the About Microsoft Edge settings page.\n\nIf you enable or don't configure this policy, the Microsoft Edge Insider promotion content is shown on the About Microsoft Edge page.\n\nIf you disable this policy, the Microsoft Edge Insider promotion content isn't shown on the About Microsoft Edge page.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoftedgeinsiderpromotionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoftedgeinsiderpromotionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"bfe14d406f9f2872":{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffapplicationimpacttelemetry","displayName":"Turn off Application Telemetry","description":"The policy controls the state of the Application Telemetry engine in the system.\r\n\r\nApplication Telemetry is a mechanism that tracks anonymous usage of specific Windows system components by applications.\r\n\r\nTurning Application Telemetry off by selecting \"enable\" will stop the collection of usage data.\r\n\r\nIf the customer Experience Improvement program is turned off, Application Telemetry will be turned off regardless of how this policy is set.\r\n\r\nDisabling telemetry will take effect on any newly launched applications. To ensure that telemetry collection has stopped for all applications, please reboot your machine.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatturnoffapplicationimpacttelemetry"],"categoryId":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","categoryName":"Application Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffapplicationimpacttelemetry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffapplicationimpacttelemetry_1","displayName":"Enabled","description":null,"helpText":null}]},"bf416a660ec1c16e":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto","displayName":"To","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto_0","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto_1","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto_4","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto_5","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancedaysto_6","displayName":"Saturday","description":null,"helpText":null}]},"bf4e09afdfb92cb5":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_dumppath_edit","displayName":"Corporate upload file path:","description":null,"helpText":"","infoUrls":[],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":null},"bfb4b723d488f273":{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogramcommandlineparameters","displayName":"Events.asp program command line parameters","description":"This specifies the command line parameters that will be passed to the events.asp program\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventviewer#admx-eventviewer-eventviewer-redirectionprogramcommandlineparameters"],"categoryId":"3453c694-bc38-4082-9d3d-886e385df927","categoryName":"Event Viewer","options":[{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogramcommandlineparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionprogramcommandlineparameters_1","displayName":"Enabled","description":null,"helpText":null}]},"bfb55a1b6e1916c7":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_sharedsignatureslocation","displayName":"Define security intelligence location for VDI clients.","description":"This policy setting allows you to define the security intelligence location for VDI-configured computers. \r\n\r\n If you disable or do not configure this setting, security intelligence will be referred from the default local source.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-sharedsignatureslocation"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_sharedsignatureslocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_sharedsignatureslocation_1","displayName":"Enabled","description":null,"helpText":null}]},"bfc7ede8be82f64d":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_c_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":null},"bfc0b6ec6842571c":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_refresh_rate_teredorefreshratebox","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":null},"bf49a26973509975":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings","displayName":"Roaming Credentials","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings_1","displayName":"True","description":null,"helpText":null}]},"bff47700a4e48455":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync","displayName":"Microsoft Lync 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Lync 2016.\r\nBy default, the user settings of Microsoft Lync 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Lync 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016lync"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync_1","displayName":"Enabled","description":null,"helpText":null}]},"bfe1c15a5d650521":{"id":"device_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_2","displayName":"Prohibit installing or uninstalling color profiles","description":"This policy setting affects the ability of users to install or uninstall color profiles.\r\n\r\nIf you enable this policy setting, users cannot install new color profiles or uninstall previously installed color profiles.\r\n\r\nIf you disable or do not configure this policy setting, all users can install new color profiles. Standard users can uninstall color profiles that they previously installed. Administrators will be able to uninstall all color profiles.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowscolorsystem#admx-windowscolorsystem-prohibitchanginginstalledprofilelist-2"],"categoryId":"444409a4-8b03-402d-91d0-1cd9565fb0fb","categoryName":"Windows Color System","options":[{"id":"device_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_2_1","displayName":"Enabled","description":null,"helpText":null}]},"bf8bb70e14103ba4":{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditcredentialvalidation","displayName":"Account Logon Audit Credential Validation","description":"This policy setting allows you to audit events generated by validation tests on user account logon credentials. Events in this subcategory occur only on the computer that is authoritative for those credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogon_auditcredentialvalidation"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditcredentialvalidation_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditcredentialvalidation_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditcredentialvalidation_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditcredentialvalidation_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"bf6117579eb279a6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability","displayName":"Control where Developer Tools can be used","description":"Setting the policy to 0 (the default) means you can access the developer tools and the JavaScript console, but not in the context of extensions installed by enterprise policy. Setting the policy to 1 means you can access the developer tools and the JavaScript console in all contexts, including that of extensions installed by enterprise policy. Setting the policy to 2 means you can't acess developer tools, and you can't inspect website elements.\r\n\r\nThis setting also turns off keyboard shortcuts and menu or context menu entries to open developer tools or the JavaScript console.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"bf05436998fb70df":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":null},"bf7e868191c6de9e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo","displayName":"Prevent app promotions from appearing on the new tab page","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo_1","displayName":"Enabled","description":null,"helpText":null}]},"bf9ae0385b3b8535":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_0","displayName":"Battery Saver Mode will be disabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_1","displayName":"Battery Saver Mode will be enabled when the device is on battery power and battery level is low.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_2","displayName":"This value is deprecated as of M121. In M121 and after, values will be treated as EnabledBelowThreshold.","description":null,"helpText":null}]},"bfd3450b2cfb0ba4":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"bfdddad172cccab5":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":null},"bfec044fd47d56bb":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar","description":"Define a list of sites, based on URL, that are forced to be shown in sidebar.\r\n\r\nIf you don't configure this policy, no app is forced to be shown in sidebar.\r\n\r\nIf the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy is disabled, this list isn't used and no sidebar can be shown.\r\n\r\nFor detailed information about valid url, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nNote: URL patterns are not supported in this policy. You should provide the exact URL of the app.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"bf897f08e60ad615":{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge_targetblankimpliesnoopener","displayName":"Do not set window.opener for links targeting _blank (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 102.\r\n\r\nIf you enable this policy or leave it unset, the window.opener property is set to null unless the anchor specifies rel=\"opener\".\r\n\r\nIf you disable this policy, popups that target _blank are permitted to access (via JavaScript) the page that requested to open the popup.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge_targetblankimpliesnoopener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge_targetblankimpliesnoopener_1","displayName":"Enabled","description":null,"helpText":null}]},"bf6a36562f3eadc2":{"id":"device_vendor_msft_policy_config_mixedreality_autologonuser","displayName":"Auto Logon User","description":"This policy controls whether a user will be automatically logged on. When the policy is set to a non-empty value, it specifies the email address of the auto-logon user. The specified user must logon to the device at least once to enable auto-logon.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#autologonuser"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":null},"bf481c79a9fe93c4":{"id":"device_vendor_msft_policy_config_mixedreality_disallownetworkconnectivitypassivepolling","displayName":"Disallow Network Connectivity Passive Polling","description":"Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. This policy allows IT admins to disable NCSI passive polling. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#disallownetworkconnectivitypassivepolling"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_disallownetworkconnectivitypassivepolling_0","displayName":"Allowed.","description":"Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_disallownetworkconnectivitypassivepolling_1","displayName":"Not allowed.","description":"Not allowed.","helpText":null}]},"bf389003e00896eb":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_msaccessexe137","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_msaccessexe137_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_msaccessexe137_1","displayName":"True","description":null,"helpText":null}]},"bfef0102257573e9":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_visioexe61","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_visioexe61_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_visioexe61_1","displayName":"True","description":null,"helpText":null}]},"bf694ed81efdd39f":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_visioexe103","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_visioexe103_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_visioexe103_1","displayName":"True","description":null,"helpText":null}]},"bf7fb99c2a7807b6":{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings","displayName":"Allow Pinned Folder Settings","description":"This policy controls the visibility of the Settings shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfoldersettings"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"bf4e70fc10692e6e":{"id":"keyboardsettings_allowdefinitionlookup","displayName":"Allow Definition Lookup","description":"If `false`, disables definition lookup.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowdefinitionlookup_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowdefinitionlookup_true","displayName":"True","description":null,"helpText":null}]},"bf20d692245720fe":{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_isdirectory","displayName":"Is directory","description":"Directory if selected, or file if not selected","helpText":null,"infoUrls":[],"categoryId":"d2191717-e304-46f7-bcc0-55e6477026c9","categoryName":"Exclusion Settings","options":[{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_isdirectory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_isdirectory_true","displayName":"Enabled","description":null,"helpText":null}]},"bf8d5947b262791e":{"id":"mathsettings_calculator_basicmode","displayName":"Basic Mode","description":"If present, configures the basic mode of the calculator. Basic mode is always enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"bf45a84940835961":{"id":"passcode_maximumpasscodeageindays","displayName":"Maximum Passcode Age In Days","description":"Specifies the maximum number of days that the passcode can remain unchanged. After this number of days, the system forces the user to change the passcode before it unlocks the device.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"bf39478e38e5ae0d":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting","displayName":"Turn on PowerShell Transcription (User)","description":"\r\n This policy setting lets you capture the input and output of Windows PowerShell commands into text-based transcripts.\r\n\r\n If you enable this policy setting, Windows PowerShell will enable transcripting for Windows PowerShell, the Windows PowerShell ISE, and any other\r\n applications that leverage the Windows PowerShell engine. By default, Windows PowerShell will record transcript output to each users' My Documents\r\n directory, with a file name that includes 'PowerShell_transcript', along with the computer name and time started. Enabling this policy is equivalent\r\n to calling the Start-Transcript cmdlet on each Windows PowerShell session.\r\n\r\n If you disable this policy setting, transcripting of PowerShell-based applications is disabled by default, although transcripting can still be enabled\r\n through the Start-Transcript cmdlet.\r\n \r\n If you use the OutputDirectory setting to enable transcript logging to a shared location, be sure to limit access to that directory to prevent users\r\n from viewing the transcripts of other users or computers.\r\n\r\n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enabletranscripting"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_1","displayName":"Enabled","description":null,"helpText":null}]},"bffe2d17cf04c030":{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_packagepointandprintserverlist_edit","displayName":"Enter fully qualified server names (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":null},"bfde8e6ef82b1247":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_1","displayName":"Allow .rdp files from unknown publishers (User)","description":"This policy setting allows you to specify whether users can run unsigned Remote Desktop Protocol (.rdp) files and .rdp files from unknown publishers on the client computer.\r\n\r\nIf you enable or do not configure this policy setting, users can run unsigned .rdp files and .rdp files from unknown publishers on the client computer. Before a user starts an RDP session, the user receives a warning message and is asked to confirm whether they want to connect.\r\n\r\nIf you disable this policy setting, users cannot run unsigned .rdp files and .rdp files from unknown publishers on the client computer. If the user tries to start an RDP session, the user receives a message that the publisher has been blocked.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-allow-unsigned-files-1"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_1_1","displayName":"Enabled","description":null,"helpText":null}]},"bfe7b953e416d6ec":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_enforceshellextensionsecurity","displayName":"Allow only per user or approved shell extensions (User)","description":"This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows is directed to only run those shell extensions that have either been approved by an administrator or that will not impact other users of the machine.\r\n\r\nA shell extension only runs if there is an entry in at least one of the following locations in registry.\r\n\r\nFor shell extensions that have been approved by the administrator and are available to all users of the computer, there must be an entry at HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Approved.\r\n\r\nFor shell extensions to run on a per-user basis, there must be an entry at HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Approved.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-enforceshellextensionsecurity"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_enforceshellextensionsecurity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_enforceshellextensionsecurity_1","displayName":"Enabled","description":null,"helpText":null}]},"bfa28e4e139e0251":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocachethumbnailpictures","displayName":"Turn off caching of thumbnail pictures (User)","description":"This policy setting allows you to turn off caching of thumbnail pictures.\r\n\r\nIf you enable this policy setting, thumbnail views are not cached.\r\n\r\nIf you disable or do not configure this policy setting, thumbnail views are cached.\r\n\r\nNote: For shared corporate workstations or computers where security is a top concern, you should enable this policy setting to turn off the thumbnail view cache, because the thumbnail cache can be read by everyone.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nocachethumbnailpictures"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocachethumbnailpictures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocachethumbnailpictures_1","displayName":"Enabled","description":null,"helpText":null}]},"bf3a4d88eacbf20e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled","displayName":"Enable Media Recommendations (User)","description":"By default the browser will show media recommendations that are personalized to the user. Setting this policy to Disabled will result in these recommendations being hidden from the user. Setting this policy to Enabled or leaving it unset will result in the media recommendations being shown to the user.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bf5bf82f810705a2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_keygenblockedforurlsdesc","displayName":"Block key generation on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"bf4933e0b73cdf7b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled","displayName":"Control new behavior for the cancel dialog produced by the beforeunload event (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"bf0462d468ff2de8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls","displayName":"Sites that can access audio capture devices without requesting permission (User)","description":"Specify websites, based on URL patterns, that can use audio capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to audio capture devices. Note, however, that the pattern \"*\", which matches any URL, is not supported by this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com/\r\nhttps://[*.]contoso.edu/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"bf6ce8deb3f63fb8":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist","displayName":"Allow access to a list of URLs in InPrivate mode. (User)","description":"This policy allows administrators to specify a list of URL patterns that are permitted to open in InPrivate mode. It can be used to create exceptions for URL patterns defined in 'InPrivateModeUrlBlocklist' (Block access to a list of URLs in InPrivate mode.). See how to format a URL pattern (https://go.microsoft.com/fwlink/?linkid=2095322).\r\n\r\nIf both this policy and 'InPrivateModeUrlBlocklist' are configured, the allowlist takes precedence. URLs that match a pattern on this allowlist are allowed. URLs that match the blocklist but not this allowlist are blocked. URLs that match neither list fall back to 'URLBlocklist' (Block access to a list of URLs) and 'URLAllowlist' (Define a list of allowed URLs).\r\n\r\nIf this policy is configured and 'InPrivateModeUrlBlocklist' is not configured, only the URLs specified in this allowlist can be opened in InPrivate mode. All other URLs are blocked.\r\n\r\nIf 'InPrivateModeAvailability' (Configure InPrivate mode availability) is set to disallow (value 1) but this policy is configured, InPrivate mode is available only for URLs that match the allowlist.\r\n\r\nIf this policy is not configured, no exceptions are applied to 'InPrivateModeUrlBlocklist' or 'InPrivateModeAvailability'.\r\n\r\nThis policy applies only to InPrivate mode. To allow URLs across all browsing modes and profiles, use the 'URLAllowlist' policy.\r\n\r\nThis policy supports up to 1000 entries.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"bf7c77643b922b3f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustasimplewebdiscussionslink","displayName":"With just a simple Web discussions link (User)","description":"Defines the default message body text used in a reply to an email request for review when the reply contains a simple Web discussions link. ","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustasimplewebdiscussionslink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustasimplewebdiscussionslink_1","displayName":"Enabled","description":null,"helpText":null}]},"bf2e47c817c8dbce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustasimplewebdiscussionslink_l_withjustasimplewebdiscussionslink377","displayName":"With just a simple Web discussions link (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":null},"bf1c13797736fae8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_defaultsaveprompttext_l_defaultsaveprompttext352","displayName":"Default save prompt text (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":null},"bfbbd69913e08e50":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchfrance","displayName":"French (France) (User)","description":"Enables the editing language French (France)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchfrance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchfrance_1","displayName":"Enabled","description":null,"helpText":null}]},"bfe64488038416c4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donottrackdocumenteditingtime","displayName":"Do not track document editing time (User)","description":"Checked: Do not calculate the total editing time while a document is open. | Unchecked: Track the editing time while a document is open.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donottrackdocumenteditingtime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_donottrackdocumenteditingtime_1","displayName":"Enabled","description":null,"helpText":null}]},"bff89231caece242":{"id":"user_vendor_msft_policy_config_outlk16v14.1~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationretryintervals","displayName":"Interval between new Outlook migration attempts (User)","description":"This policy setting controls the interval between new Outlook migration attempts.\r\n\r\nIf you don't set this or set this to 0 (default value), classic Outlook will stop executing \"New Outlook auto migration\" after the user toggles back to classic Outlook for Windows.\r\n\r\nIf you set this to 1, classic Outlook will show a blocking prompt on each app launch, which will attempt to switch the user to the new Outlook app.\r\n\r\nIf you set this to N (2 - 9900) value, \"New Outlook auto migration\" will be re-initiated N days after the user toggles back to classic Outlook.\r\n\r\nNote: This policy only applies to subscription-based Microsoft 365 Apps.\r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v14.1~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationretryintervals_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v14.1~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_newoutlookautomigrationretryintervals_1","displayName":"Enabled","description":null,"helpText":null}]},"bf91ab960ec301a3":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setimportance_l_setimportance","displayName":"Set importance: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setimportance_l_setimportance_2","displayName":"High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setimportance_l_setimportance_1","displayName":"Normal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setimportance_l_setimportance_0","displayName":"Low","description":null,"helpText":null}]},"bf962de95770b904":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstweekofyear","displayName":"First week of year (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstweekofyear_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstweekofyear_1","displayName":"Enabled","description":null,"helpText":null}]},"bff3264da68d1d4b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_configurecngcipherchainingmode","displayName":"Configure CNG cipher chaining mode (User)","description":"This policy setting allows you to configure the cipher chaining mode used.\r\n\r\nIf you enable this policy setting, the cipher chaining mode specified will be applied.\r\n\r\nIf you disable or do not configure this policy setting, Cipher Block Chaining (CBC) will be the default CNG cipher chaining mode used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"bf03a574136d1205":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowwordmailloadembeddedfonts","displayName":"Allow embedded TrueType fonts to be sent in messages (User)","description":"\r\n This policy setting controls whether embedded TrueType fonts can be sent in messages.\r\n\r\n By default, embedded TrueType fonts aren't allowed in messages. Allowing embedded TrueType fonts Isn't recommended because of security concerns.\r\n\r\n If you enable this policy setting, embedded TrueType fonts can be sent in messages.\r\n\r\n If you disable or don’t configure this policy setting, embedded TrueType fonts can't be sent in messages.\r\n ","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowwordmailloadembeddedfonts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowwordmailloadembeddedfonts_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c0.json b/public/intune-definitions/c0.json new file mode 100644 index 000000000000..f30483f8ffac --- /dev/null +++ b/public/intune-definitions/c0.json @@ -0,0 +1 @@ +{"c0e96193fc9ca665":{"id":"com.apple.extensiblesso_extensiondata_includemanagedappsinbundleidacl_kerberos","displayName":"Include Managed Apps In Bundle ID ACL","description":"If true, the Kerberos extension allows only managed apps to access and use the credential. This is in addition to the Credential Bundle ID ACL, if it is specified. Available in iOS 14 and later, and macOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_includemanagedappsinbundleidacl_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_includemanagedappsinbundleidacl_kerberos_true","displayName":"True","description":null,"helpText":null}]},"c010e06b44e94201":{"id":"com.apple.managedclient.preferences_automaticfullscreenallowedforurls","displayName":"Allow automatic full screen on specified sites","description":"For security reasons, the\nrequestFullscreen() web API\nrequires a prior user gesture (\"transient activation\") to be called or it will\nfail. Users' personal settings may allow certain origins to call this API\nwithout a prior user gesture.\n\nThis policy supersedes users' personal settings and allows matching origins to\ncall the API without a prior user gesture.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\nWildcards (*) are allowed.\n\nOrigins matching both blocked and allowed policy patterns will be blocked.\nOrigins not specified by policy or user settings will require a prior user\ngesture to call this API.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#automaticfullscreenallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c0dd72118aeab640":{"id":"com.apple.managedclient.preferences_pdfsecuremode","displayName":"Secure mode and Certificate-based Digital Signature validation in native PDF reader","description":"The policy enables Digital Signature validation for PDF files in a secure environment, which shows the correct validation status of the signatures.\n\nIf you enable this policy, PDF files with Certificate-based digital signatures are opened with an option to view and verify the validity of the signatures with high security.\n\nIf you disable or don't configure this policy, the capability to view and verify the signature will not be available.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#pdfsecuremode"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_pdfsecuremode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_pdfsecuremode_true","displayName":"Enabled","description":null,"helpText":null}]},"c04aaea9d5c05466":{"id":"com.apple.systemconfiguration_proxies_rtspproxy","displayName":"RTSP Proxy","description":"The host name or IP address for the streaming proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"c09fd8e8b175aaa4":{"id":"com.apple.systemconfiguration_proxies_socksproxy","displayName":"SOCKS Proxy","description":"The host name or IP address for the SOCKS proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"c0629747410d5b6b":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"c02c88ef6912f6d8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.managedsearchengines_recommended","displayName":"Manage Search Engines (users can override)","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine. With Microsoft Edge version 100, you can configure up to 100 engines.\n\nYou don't need to specify the encoding. With Microsoft Edge version 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge version 80.\n\nWith Microsoft Edge version 83, you can enable search engine discovery with the optional allow_search_engine_discovery parameter. This parameter must be the first item in the list. If allow_search_engine_discovery isn't specified, search engine discovery is disabled by default. With Microsoft Edge version 84, you can set this policy as a recommended policy to allow search provider discovery. You don't need to add the optional allow_search_engine_discovery parameter. With Microsoft Edge version 100, setting this policy as a recommended policy also allows users to manually add new search engines from their Microsoft Edge settings.\n\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\n\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\n\nIf the \"DefaultSearchProviderSearchURL\" policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"c079af839dd53f1a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.travelassistanceenabled","displayName":"Enable travel assistance (Obsolete)","description":"This policy is obsolete as the feature is now contained within the Edge Sidebar and can be managed using the \"HubsSidebarEnabled\" policy. It doesn't work in Microsoft Edge after version 105.\nConfigure this policy to allow/disallow travel assistance.\n\nThe travel assistance feature gives helpful and relevant information to a user who performs a travel-related task within the browser. This feature provides trusted and validated suggestions/information to the users from across sources gathered by Microsoft.\n\nIf you enable or don't configure this setting, travel assistance is enabled for the users when they are performing travel-related tasks.\n\nIf you disable this setting, travel assistance will be disabled, and users won't be able to see any travel-related recommendations.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.travelassistanceenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.travelassistanceenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c01e0d81c70ef367":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registerreverselookup","displayName":"Register PTR records","description":"Specifies if DNS client computers will register PTR resource records.\r\n\r\nBy default, DNS clients configured to perform dynamic DNS registration will attempt to register PTR resource record only if they successfully registered the corresponding A resource record.\r\n\r\nIf you enable this policy setting, registration of PTR records will be determined by the option that you choose under Register PTR records.\r\n\r\nTo use this policy setting, click Enabled, and then select one of the following options from the drop-down list:\r\n\r\nDo not register: Computers will not attempt to register PTR resource records.\r\n\r\nRegister: Computers will attempt to register PTR resource records even if registration of the corresponding A records was not successful.\r\n\r\nRegister only if A record registration succeeds: Computers will attempt to register PTR resource records only if registration of the corresponding A records was successful.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, computers will use locally configured settings.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-registerreverselookup"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registerreverselookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registerreverselookup_1","displayName":"Enabled","description":null,"helpText":null}]},"c0b441c5c6b976a3":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationoverwritesinconflict","displayName":"Replace addresses in conflicts","description":"Specifies whether dynamic updates should overwrite existing resource records that contain conflicting IP addresses.\r\n\r\nThis policy setting is designed for computers that register address (A) resource records in DNS zones that do not use Secure Dynamic Updates. Secure Dynamic Update preserves ownership of resource records and does not allow a DNS client to overwrite records that are registered by other computers.\r\n\r\nDuring dynamic update of resource records in a zone that does not use Secure Dynamic Updates, an A resource record might exist that associates the client's host name with an IP address different than the one currently in use by the client. By default, the DNS client attempts to replace the existing A resource record with an A resource record that has the client's current IP address.\r\n\r\nIf you enable this policy setting or if you do not configure this policy setting, DNS clients maintain their default behavior and will attempt to replace conflicting A resource records during dynamic update.\r\n\r\nIf you disable this policy setting, existing A resource records that contain conflicting IP addresses will not be replaced during a dynamic update, and an error will be recorded in Event Viewer.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-registrationoverwritesinconflict"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationoverwritesinconflict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationoverwritesinconflict_1","displayName":"Enabled","description":null,"helpText":null}]},"c02452870b478095":{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashsupportversion_lbl_hashversionsupportactioncombo","displayName":"Hash version supported:","description":null,"helpText":"","infoUrls":[],"categoryId":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashsupportversion_lbl_hashversionsupportactioncombo_1","displayName":"Supports V1 hash version only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashsupportversion_lbl_hashversionsupportactioncombo_2","displayName":"Supports V2 hash version only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_hashsupportversion_lbl_hashversionsupportactioncombo_3","displayName":"Supports V1 as well as V2 versions","description":null,"helpText":null}]},"c0595b9d776850fd":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_lbl_backgroundsyncblockoutperiodduration","displayName":"Blockout Duration (minutes)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"c04e5d5f3a126253":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_2","displayName":"Synchronize offline files before suspend","description":"Determines whether offline files are synchonized before a computer is suspended.\r\n\r\nIf you enable this setting, offline files are synchronized whenever the computer is suspended. Setting the synchronization action to \"Quick\" ensures only that all files in the cache are complete. Setting the synchronization action to \"Full\" ensures that all cached files and folders are up-to-date with the most current version.\r\n\r\nIf you disable or do not configuring this setting, files are not synchronized when the computer is suspended.\r\n\r\nNote: If the computer is suspended by closing the display on a portable computer, files are not synchronized. If multiple users are logged on to the computer at the time the computer is suspended, a synchronization is not performed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatsuspend-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_2_1","displayName":"Enabled","description":null,"helpText":null}]},"c02714c5f01c9baf":{"id":"device_vendor_msft_policy_config_admx_pca_detectundetectedinstallerspolicy","displayName":"Detect application installers that need to be run as administrator","description":"This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\\Administrative Templates\\Windows Components\\Application Compatibility.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pca#admx-pca-detectundetectedinstallerspolicy"],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectundetectedinstallerspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectundetectedinstallerspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"c0151c6e24c9ac77":{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate_stateselect","displayName":"Select Interface state from the following options:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate_stateselect_0","displayName":"Default State","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate_stateselect_2","displayName":"Enabled State","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_iphttps_clientstate_stateselect_3","displayName":"Disabled State","description":null,"helpText":null}]},"c0cab6c9e5605656":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecextendedmode","displayName":"Account Logon Logoff Audit I Psec Extended Mode","description":"This policy setting allows you to audit events generated by Internet Key Exchange protocol (IKE) and Authenticated Internet Protocol (AuthIP) during Extended Mode negotiations. If you configure this policy setting, an audit event is generated during an IPsec Extended Mode negotiation. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated during an IPsec Extended Mode negotiation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditipsecextendedmode"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecextendedmode_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecextendedmode_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecextendedmode_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditipsecextendedmode_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"c08d3195a1dc2379":{"id":"device_vendor_msft_policy_config_autoplay_turnoffautoplay_autorun_box","displayName":"Turn off Autoplay on:","description":"","helpText":"","infoUrls":[],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"device_vendor_msft_policy_config_autoplay_turnoffautoplay_autorun_box_181","displayName":"CD-ROM and removable media drives","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_autoplay_turnoffautoplay_autorun_box_255","displayName":"All drives","description":null,"helpText":null}]},"c0d6b2b12eba9f24":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection","displayName":"Enable the use of relay servers by the remote access host","description":"If RemoteAccessHostFirewallTraversal is set to Enabled, setting RemoteAccessHostAllowRelayedConnection to Enabled or leaving it unset allows the use of remote clients to use relay servers to connect to this machine when a direct connection is not available, for example, because of firewall restrictions.\r\n\r\nSetting the policy to Disabled doesn't turn remote access off, but only allows connections from the same network (not NAT traversal or relay).","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"c0278ccd1046338d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings","displayName":"Settings for Help Me Write","description":"Help Me Write is an AI-based writing assistant for short-form content on the web. Suggested content is based on prompts entered by the user and the content of the web page.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"c0e281549be1689f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled","displayName":"Enable keyboard focusable scrollers","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c0f5d92863d67cb5":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"c0c86505edc4fa84":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"c033373d62be47e5":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"c03a0eaf3e8e8d62":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"c0621884d24e1f73":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog","displayName":"Print using system print dialog","description":"Shows the system print dialog instead of print preview.\r\n\r\nIf you enable this policy, Microsoft Edge opens the system print dialog instead of the built-in print preview when a user prints a page.\r\n\r\nIf you don't configure or disable this policy, print commands trigger the Microsoft Edge print preview screen.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_1","displayName":"Enabled","description":null,"helpText":null}]},"c0899e6d7c491a9c":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled","displayName":"Control Microsoft Edge Safe Hosting Extension","description":"This policy controls whether the Microsoft Edge Safe Hosting component extension is installed automatically when users visit supported Microsoft services, such as Microsoft 365 Copilot app.\r\n\r\nThe Microsoft Edge Safe Hosting extension provides additional security capabilities for these services. When a user accesses a supported service, the extension installs automatically to enable those protections.\r\n\r\nIf you enable or don't configure this policy, the extension installs automatically and remains installed for 90 days after the user's last visit, then is removed if no further activity occurs.\r\n\r\nIf you disable this policy, the extension won't install automatically. If it’s already installed, it will be removed.\r\n\r\nNote: This policy controls only automatic installation. It doesn’t prevent users from manually installing other extensions from the Microsoft Edge Add-ons website.","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c0ce3722beac7187":{"id":"device_vendor_msft_policy_config_storage_allowstoragesenseglobal","displayName":"Allow Storage Sense Global","description":"Storage Sense can automatically clean some of the user’s files to free up disk space. By default, Storage Sense is automatically turned on when the machine runs into low disk space and is set to run whenever the machine runs into storage pressure. This cadence can be changed in Storage settings or set with the Storage/ConfigStorageSenseGlobalCadence group policy. If you enable this policy setting without setting a cadence, Storage Sense is turned on for the machine with the default cadence of during low free disk space. Users cannot disable Storage Sense, but they can adjust the cadence (unless you also configure the Storage/ConfigStorageSenseGlobalCadence group policy). If you disable this policy setting, the machine will turn off Storage Sense. Users cannot enable Storage Sense. If you do not configure this policy setting, Storage Sense is turned off by default until the user runs into low disk space or the user enables it manually. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#allowstoragesenseglobal"],"categoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","categoryName":"Storage","options":[{"id":"device_vendor_msft_policy_config_storage_allowstoragesenseglobal_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_storage_allowstoragesenseglobal_0","displayName":"Block","description":"Block","helpText":null}]},"c07835ccee5edd70":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingqrscale","displayName":"[Deprecated] QR code bitmap scale factor (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"c0f9b7bbcda40bdd":{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning","displayName":"Schedule Restart Warning","description":"Note This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise Allows the IT Admin to specify the period for auto-restart warning reminder notifications. The default value is 4 (hours).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#schedulerestartwarning"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_2","displayName":"2 Hours","description":"2 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_4","displayName":"4 Hours","description":"4 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_8","displayName":"8 Hours","description":"8 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_12","displayName":"12 Hours","description":"12 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_24","displayName":"24 Hours","description":"24 Hours","helpText":null}]},"c0b9a092a43288cf":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},"c0cee94778a1f7ca":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null}]},"c01fadd8677b513f":{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_configautomaticrestartsignondescription","displayName":"Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot","description":"","helpText":"","infoUrls":[],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_configautomaticrestartsignondescription_0","displayName":"Enabled if BitLocker is on and not suspended","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_configautomaticrestartsignondescription_1","displayName":"Always Enabled","description":null,"helpText":null}]},"c0022437ea2611e1":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl1","displayName":"Allow WSL1","description":"When set to disabled, this policy disables WSL1. When disabled, only WSL2 distributions can be used.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl1_1","displayName":"Enabled","description":null,"helpText":null}]},"c04d9d347830020a":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_userapplicabilitytype","displayName":"User applicability","description":"Specifies which users this system setting rule applies to.","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_allusers","displayName":"All device users","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_primaryuser","displayName":"Primary user","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_nameduser","displayName":"Named user","description":null,"helpText":null}]},"c0a49b5ed9e1f4c8":{"id":"device_vendor_msft_wifi_profile_{ssid}_proxy","displayName":"Company proxy settings","description":"The presence of the field enables WPAD for proxy lookup.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"categoryId":"c4e48b1b-6d88-434f-a717-d5bab28eb245","categoryName":"Wi-Fi Connection","options":null},"c0ab5a30b0e85178":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinstartmenu","displayName":"Start Menu (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinstartmenu_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinstartmenu_1","displayName":"True","description":null,"helpText":null}]},"c0a59b6091bd8169":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnothumbnail","displayName":"Turn off taskbar thumbnails (User)","description":"This policy setting allows you to turn off taskbar thumbnails.\r\n\r\nIf you enable this policy setting, the taskbar thumbnails are not displayed and the system uses standard text for the tooltips.\r\n\r\nIf you disable or do not configure this policy setting, the taskbar thumbnails are displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnothumbnail"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnothumbnail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnothumbnail_1","displayName":"Enabled","description":null,"helpText":null}]},"c050f543cbbf0e36":{"id":"user_vendor_msft_policy_config_browser_allowcookies","displayName":"Allow Cookies (User)","description":"This setting lets you configure how your company deals with cookies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowcookies"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowcookies_0","displayName":"Block all cookies from all sites","description":"Block all cookies from all sites","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowcookies_1","displayName":"Block only cookies from third party websites","description":"Block only cookies from third party websites","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowcookies_2","displayName":"Allow all cookies from all sites","description":"Allow all cookies from all sites","helpText":null}]},"c0ac0f8675d5d53f":{"id":"user_vendor_msft_policy_config_browser_allowdonottrack","displayName":"Allow Do Not Track (User)","description":"This setting lets you decide whether employees can send Do Not Track headers to websites that request tracking info.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowdonottrack"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowdonottrack_0","displayName":"Block","description":"Never send tracking information.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowdonottrack_1","displayName":"Allow","description":"Send tracking information.","helpText":null}]},"c0165b303eaaa25c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c02892ee54ef4ae7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_2","displayName":"Do not allow any site to request write access to files and directories","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_3","displayName":"Allow sites to ask the user to grant write access to files and directories","description":null,"helpText":null}]},"c09f89935e4a7962":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_autoplaywhitelistdesc","displayName":"Allow media autoplay on a whitelist of URL patterns (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"c00be5a6d18aed59":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist_nativemessagingblacklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"c0c0ba3481634343":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode","displayName":"Print Rasterization Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode_0","displayName":"Full","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode_1","displayName":"Fast","description":null,"helpText":null}]},"c024d054a18410c8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit","displayName":"Clear site data on browser shutdown (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"c040e6cacef3586d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_idletimeoutactionsdesc","displayName":"Actions to run when the computer is idle (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8c35f124-e249-43e3-9044-ecc0b0a5855a","categoryName":"Idle Browser Actions","options":null},"c03561abcb2081e0":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c0833ca622480c01":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed","displayName":"Allow modern buffer allocation for Graphics3D APIs PPAPI plugin. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"c001f4924472bb1f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject","displayName":"Trust access to Visual Basic Project (User)","description":"This policy setting controls whether automation clients such as Microsoft Visual Studio 2005 Tools for Microsoft Office (VSTO) can access the Visual Basic for Applications project system in the specified applications. VSTO projects require access to the Visual Basic for Applications project system in Excel, PowerPoint, and Word, even though the projects do not use Visual Basic for Applications. Design-time support of controls in both Visual Basic and C# projects depends on the Visual Basic for Applications project system in Word and Excel.\r\n\r\nIf you enable this policy setting, VSTO and other automation clients can access the Visual Basic for Applications project system in the specified applications. Users will not be able to change this behavior through the \"Trust access to the VBA project object model\" user interface option under the Macro Settings section of the Trust Center.\r\n\r\nIf you disable this policy setting, VSTO does not have programmatic access to VBA projects. In addition, the \"Trust access to the VBA project object model\" check box is cleared and users cannot change it. Note: Disabling this policy setting prevents VSTO projects from interacting properly with the VBA project system in the selected application.\r\n\r\nIf you do not configure this policy setting, automation clients do not have programmatic access to VBA projects. Users can enable this by selecting the \"Trust access to the VBA project object model\" in the \"Macro Settings\" section of the Trust Center. However, doing so allows macros in any documents the user opens to access the core Visual Basic objects, methods, and properties, which represents a potential security hazard.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_1","displayName":"Enabled","description":null,"helpText":null}]},"c06cb89dd6f53cc8":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles","displayName":"Text files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"c07d83c8739bf5cc":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_datecolon14","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"c06bbdb3bdfbfa7e":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"c0844e25fcdb9ae9":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608","displayName":"Allow META REFRESH (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_3","displayName":"Disable","description":null,"helpText":null}]},"c00310a47274b1a9":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting","displayName":"Script ActiveX controls marked safe for scripting (User)","description":"This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.\n\nIf you enable this policy setting, script interaction can occur automatically without user intervention.\n\nIf you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.\n\nIf you disable this policy setting, script interaction is prevented from occurring.\n\nIf you do not configure this policy setting, script interaction is prevented from occurring.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_1","displayName":"Enabled","description":null,"helpText":null}]},"c07f499a17df348f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls","displayName":"Disable Certificate Transparency enforcement for specific URLs (User)","description":"Disables enforcing Certificate Transparency requirements for the listed URLs.\r\n\r\nThis policy lets you not disclose certificates for the hostnames in the specified URLs via Certificate Transparency. This lets you use certificates that would otherwise be untrusted, because they weren't properly publicly disclosed, but it makes it harder to detect mis-issued certificates for those hosts.\r\n\r\nForm your URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322. Because certificates are valid for a given hostname, independent of the scheme, port, or path, only the hostname part of the URL is considered. Wildcard hosts are not supported.\r\n\r\nIf you don't configure this policy, any certificate that should be disclosed via Certificate Transparency is treated as untrusted if it's not disclosed.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\n.contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c05c6124e4de17a2":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_webusbaskforurlsdesc","displayName":"Allow WebUSB on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"c090c6a00b4de29e":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions. (User)","description":"Extensions that connect to one of these origins will keep running as long as the port is connected.\r\nIf unset, the policy's default values are used. These are the app origins that offer SDKs that are known to not offer the possibility to restart a closed connection to a previous state:\r\n- Smart Card Connector\r\n- Citrix Receiver (stable, beta, back-up)\r\n- VMware Horizon (stable, beta)\r\n\r\nIf set, the default value list is extended with the newly configured values. The defaults and policy-provided entries will grant the exception to the connecting extensions, as long as the port is connected.\r\n\r\nExample value:\r\n\r\nchrome-extension://abcdefghijklmnopabcdefghijklmnop/\r\nchrome-extension://bcdefghijklmnopabcdefghijklmnopa/","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1","displayName":"Enabled","description":null,"helpText":null}]},"c0510eb2f0d2a9b4":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_cacertificatesdesc","displayName":"TLS server certificates that should be trusted by Microsoft Edge (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"c03c16e22491b03c":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (User)","description":"This policy enables defining a list of certificates that are not trusted or distrusted in Microsoft Edge\r\nbut can be used as hints for path-building. Certificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"c074f9528579202e":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled","displayName":"Enable User Web App Install From Browser (User)","description":"This policy controls whether users can install web apps through Microsoft Edge.\r\nIf you enable or don’t configure this policy, users can install web apps through the browser.\r\nIf you disable this policy, users can’t install web apps through the browser, and the \"apps\" data type is excluded from synchronization.\r\nThis policy doesn't support dynamic refresh. Changes to this policy, whether enabled, disabled, or not configured, take effect only after the browser is restarted.\r\nThis policy doesn't affect the 'WebAppInstallForceList' policy. Web apps specified by that policy are installed regardless of this policy setting.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c0a5815e7b2b33ce":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled","displayName":"Enable renderer code integrity (deprecated) (User)","description":"If this policy is enabled or left unset, then Renderer Code Integrity is enabled. This policy should only be disabled if compatibility issues are encountered with third party software that must run inside Microsoft Edge's renderer processes.\r\n\r\nDisabling this policy has a detrimental effect on Microsoft Edge's security and stability because unknown and potentially hostile code will be allowed to load inside Microsoft Edge's renderer processes.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c06a0d05c651d9ac":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled","displayName":"Configure Sleeping Tabs (User)","description":"This policy setting lets you configure whether to turn on Sleeping Tabs. Sleeping Tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, Sleeping Tabs is turned on.\r\n\r\nIndividual sites may be blocked from being put to sleep by configuring the policy 'SleepingTabsBlockedForUrls' (Block Sleeping Tabs on specific sites).\r\n\r\nIf you enable this setting, Sleeping Tabs is turned on.\r\n\r\nIf you disable this setting, Sleeping Tabs is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Sleeping Tabs.","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c0f02b435c32071c":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (User)","description":"Restricts background graphics printing mode. If this policy isn't set there's no restriction on printing background graphics.\r\n\r\nPolicy options mapping:\r\n\r\n* any (any) = Allow printing with and without background graphics\r\n\r\n* enabled (enabled) = Allow printing only with background graphics\r\n\r\n* disabled (disabled) = Allow printing only without background graphics\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_1","displayName":"Enabled","description":null,"helpText":null}]},"c08542fd159d0a7b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastservicesharednotescustomurl4","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"c0c11f71eeb63f2e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastserviceserverinfo7","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"c04ecdb7f34e4359":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceotheradd","displayName":"Replace Label - Other Address (User)","description":"This policy setting allows you to change or remove the 15th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceotheradd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceotheradd_1","displayName":"Enabled","description":null,"helpText":null}]},"c0dc07336d20037d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_gujarati","displayName":"Gujarati (User)","description":"Enables the editing language Gujarati","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_gujarati_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_gujarati_1","displayName":"Enabled","description":null,"helpText":null}]},"c0dc89fd6ec00863":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordrulesdomaintimeout_l_setpasswordrulesdomaintimeoutspinid","displayName":"in milliseconds (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"c070372401fa57fc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_l_allowsubfolders297","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_l_allowsubfolders297_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_l_allowsubfolders297_1","displayName":"True","description":null,"helpText":null}]},"c0530ea051b56806":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_webarchiveencoding_l_webarchiveencoding402","displayName":"Web Archive encoding (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_webarchiveencoding_l_webarchiveencoding402_2","displayName":"Use 8 bit content-transfer-encoding","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_webarchiveencoding_l_webarchiveencoding402_1","displayName":"Use 8 bit only for encoding text parts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_webarchiveencoding_l_webarchiveencoding402_0","displayName":"Use RFC-approved encoding","description":null,"helpText":null}]},"c03931799fa2bca8":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_maximumnumberofonceperdayversionhistoryitemskept","displayName":"Maximum number of once-per-day version history items kept (User)","description":"This policy setting allows you to set the number of once-per-day history items to be kept for each page. With a 2016 format notebook, OneNote will automatically store previous versions of the pages in the notebook, and it will also store a recycle bin for all of the deleted pages and sections.\r\n\r\nIf you enable this policy setting, you can set the number of versions per day to keep. If you set a value of -1 this will tell OneNote to keep all old once-per-day version history items.\r\n \r\nIf you disable or do not configure this policy setting OneNote will keep a page for the past 10 days every day in the past.","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_maximumnumberofonceperdayversionhistoryitemskept_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_maximumnumberofonceperdayversionhistoryitemskept_1","displayName":"Enabled","description":null,"helpText":null}]},"c096a078fcb45ebb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertonmouseoverinmillisec_l_millisec1","displayName":"Millisec: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"c09b65bb66d62b3a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_turnoffsendandtrack","displayName":"Turn off Send and Track feature (User)","description":"By default, users can flag an e-mail that they send to help them remember to follow up on it later. The flag is not sent to the recipient. By enabling this setting, this feature is turned off.","helpText":"","infoUrls":[],"categoryId":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","categoryName":"Tracking Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_turnoffsendandtrack_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_turnoffsendandtrack_1","displayName":"Enabled","description":null,"helpText":null}]},"c0ccd7f8bd2d7107":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_attachmentsecuretemporaryfolder_l_enterthesecurefolderpath","displayName":"Enter the Secure Folder path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":null},"c0c87813300f47d7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_disableroamingofsharepointlists","displayName":"Do not roam users' SharePoint lists (User)","description":"By default, links to SharePoint lists are available on each client that the users use to connect to their Microsoft Exchange Server mailboxes. This setting allows you to disable roaming links to SharePoint lists. When roaming is disabled, SharePoint lists are available only on the client that originally linked them.","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_disableroamingofsharepointlists_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_disableroamingofsharepointlists_1","displayName":"Enabled","description":null,"helpText":null}]},"c0bbf4b4dc9ad88a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_determinewhethertoforceencryptedppt_l_determinewhethertoforceencryptedpptdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_determinewhethertoforceencryptedppt_l_determinewhethertoforceencryptedpptdropid_0","displayName":"Scan encrypted macros (default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_determinewhethertoforceencryptedppt_l_determinewhethertoforceencryptedpptdropid_1","displayName":"Scan if anti-virus software available","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_determinewhethertoforceencryptedppt_l_determinewhethertoforceencryptedpptdropid_2","displayName":"Load macros without scanning","description":null,"helpText":null}]},"c04015ec55bad9bb":{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_trustedservers_chk","displayName":"Users can only point and print to these servers: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_trustedservers_chk_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_trustedservers_chk_1","displayName":"True","description":null,"helpText":null}]},"c014d335acdad48e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c1.json b/public/intune-definitions/c1.json new file mode 100644 index 000000000000..f5a33e8f330d --- /dev/null +++ b/public/intune-definitions/c1.json @@ -0,0 +1 @@ +{"c13ff00aea7cb9dd":{"id":"com.apple.loginitems.managed_com.apple.loginitems.managed","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"6efb8802-223a-46a7-b13f-a68f28f8b2c2","categoryName":"Login Items","options":null},"c1cdb058160ea2a7":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"c1b4f2bd1b2f7075":{"id":"com.apple.mcxprinting_userprinterlist_printer_model","displayName":"Model","description":"The printer's model.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"c135578a4a14f975":{"id":"com.apple.security.firewall_loggingoption","displayName":"Logging Option (Deprecated)","description":"This string specifies the type of logging. Available in macOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"70b5da13-9c31-4857-890d-b7eb223729c3","categoryName":"Firewall","options":[{"id":"com.apple.security.firewall_loggingoption_0","displayName":"throttled","description":null,"helpText":null},{"id":"com.apple.security.firewall_loggingoption_1","displayName":"brief","description":null,"helpText":null},{"id":"com.apple.security.firewall_loggingoption_2","displayName":"detail","description":null,"helpText":null}]},"c197110673cdfcfb":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"c156c9abcd24717d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autoopenfiletypes","displayName":"List of file types that should be automatically opened on download","description":"This policy sets a list of file types that should be automatically opened on download. Note: The leading separator shouldn't be included when listing the file type, so list \"txt\" instead of \".txt\".\n\nBy default, these file types are automatically opened on all URLs. You can use the \"AutoOpenAllowedForURLs\" policy to restrict the URLs on which these file types are automatically opened.\n\nFiles with types that should be automatically opened are still subject to the enabled Microsoft Defender SmartScreen checks and won't be opened if they fail those checks.\n\nFile types that a user has already specified to automatically be opened continue to do so when downloaded. The user continues to be able to specify other file types to be automatically opened.\n\nIf you don't set this policy, only file types that a user has already specified to automatically be opened will do so when downloaded.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory or instances that enrolled for device management.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"c1b8cc78f07cb598":{"id":"com.microsoft.edge.mamedgeappconfigsettings.donotsilentlyblockprotocolsfromorigins","displayName":"Define a list of protocols that can not be silently blocked by anti-flood protection","description":"Allows you to create a list of protocols and an associated list of allowed origin patterns, for each protocol. These origins aren't silently blocked from launching an external application by anti-flood protection. The trailing separator shouldn't be included when listing the protocol. For example, list \"skype\" instead of \"skype:\" or \"skype://\".\n\nIf you configure this policy, a protocol is only permitted to bypass being silently blocked by anti-flood protection if:\n\n- the protocol is listed\n\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\n\nIf either condition is false, anti-flood protection protection blocks the external protocol launch.\n\nIf you don't configure this policy, no protocols can bypass being silently blocked.\n\nThe origin-matching patterns use a similar format to those patterns for the \"URLBlocklist\" policy, which are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\n\nHowever, origin-matching patterns for this policy can't contain \"/path\" or \"@query\" elements. Any pattern that contains a \"/path\" or \"@query\" element is ignored.\n\nThis policy doesn't work as expected with file://* wildcards.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"c1fb16f4153b466a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.viewxfapdfiniemodeallowedorigins","displayName":"View XFA-based PDF files using IE Mode for allowed file origin.","description":"Internet Explorer (IE) mode uses the Adobe Acrobat Active-X PDF Plugin to open XFA-based PDF files. This policy works only if the Active-X plugin is already on the user's device, it's not installed as part of this policy.\n\nIt's important to note that XFA is a legacy technology that's deprecated by its original creators. It's not an ISO standard and as such doesn't align with the modern web architecture. Continued use poses potential risks and vulnerabilities.\n\nGiven the deprecated status of XFA technology and the lack of any investment by its creators, we strongly recommend that you start planning your transition to more advanced HTML\\PDF form-based solutions.\n\nIn the interim, this policy provides a workaround for users to view XFA PDF in Microsoft Edge.\n\nIf you enable this policy, you can configure the list of origins from which XFA PDF files will be automatically opened in Microsoft Edge using IE Mode.\n\nIf you disable or don't configure the policy, XFA PDFs won't be considered for opening via Internet Explorer mode.\n\nFor detailed information on valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322\n\nAlternatively, \"ViewXFAPDFInIEModeAllowedFileHash\" can also be used to configure list of file hashes instead of URL origins, which enables those files to be automatically opened in Microsoft Edge using IE Mode.","helpText":null,"infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":null},"c190c3547293b4b4":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvhiderecoverypage_name","displayName":"Omit recovery options from the BitLocker setup wizard","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvhiderecoverypage_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvhiderecoverypage_name_1","displayName":"True","description":null,"helpText":null}]},"c1d87e327ed277c4":{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication","displayName":"Require additional authentication at startup","description":"This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with or without a Trusted Platform Module (TPM). This policy setting is applied when you turn on BitLocker.\n\nNote: Only one of the additional authentication options can be required at startup, otherwise a policy error occurs.\n\nIf you want to use BitLocker on a computer without a TPM, select the \"Allow BitLocker without a compatible TPM\" check box. In this mode either a password or a USB drive is required for start-up. When using a startup key, the key information used to encrypt the drive is stored on the USB drive, creating a USB key. When the USB key is inserted the access to the drive is authenticated and the drive is accessible. If the USB key is lost or unavailable or if you have forgotten the password then you will need to use one of the BitLocker recovery options to access the drive.\n\nOn a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can use only the TPM for authentication, or it can also require insertion of a USB flash drive containing a startup key, the entry of a 6-digit to 20-digit personal identification number (PIN), or both.\n\nIf you enable this policy setting, users can configure advanced startup options in the BitLocker setup wizard.\n\nIf you disable or do not configure this policy setting, users can configure only basic options on computers with a TPM.\n\nNote: If you want to require the use of a startup PIN and a USB flash drive, you must configure BitLocker settings using the command-line tool manage-bde instead of the BitLocker Drive Encryption setup wizard.\n\n","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},"c1f7f09dbba0fc0b":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_servicekeepalive","displayName":"Allow antimalware service to remain running always","description":"This policy setting allows you to configure whether or not the antimalware service remains running when antivirus and antispyware security intelligence is disabled. It is recommended that this setting remain disabled.\r\n\r\n If you enable this setting, the antimalware service will always remain running even if both antivirus and antispyware security intelligence is disabled.\r\n\r\n If you disable or do not configure this setting, the antimalware service will be stopped when both antivirus and antispyware security intelligence is disabled. If the computer is restarted, the service will be started if it is set to Automatic startup. After the service has started, there will be a check to see if antivirus and antispyware security intelligence is enabled. If at least one is enabled, the service will remain running. If both are disabled, the service will be stopped.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-servicekeepalive"],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_servicekeepalive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_servicekeepalive_1","displayName":"Enabled","description":null,"helpText":null}]},"c196358f9e2e2ae3":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_globaldns_ncsi_useglobaldns_checkbox","displayName":"Use global DNS","description":null,"helpText":"","infoUrls":[],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_globaldns_ncsi_useglobaldns_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_globaldns_ncsi_useglobaldns_checkbox_1","displayName":"True","description":null,"helpText":null}]},"c165d2842bca437d":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypequalitative_c_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":null},"c11f3d04801042bb":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_largephaseoffset","displayName":"LargePhaseOffset","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"c1c60d3c0fea402e":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_maxallowedphaseoffset","displayName":"MaxAllowedPhaseOffset","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"c1e4f17178f7e3d1":{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosserviceticketoperations","displayName":"Account Logon Audit Kerberos Service Ticket Operations","description":"This policy setting allows you to audit events generated by Kerberos authentication ticket-granting ticket (TGT) requests submitted for user accounts. If you configure this policy setting, an audit event is generated after a Kerberos authentication TGT is requested for a user account. Success audits record successful requests and Failure audits record unsuccessful requests. If you do not configure this policy setting, no audit event is generated after a Kerberos authentication TGT is request for a user account.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogon_auditkerberosserviceticketoperations"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosserviceticketoperations_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosserviceticketoperations_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosserviceticketoperations_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogon_auditkerberosserviceticketoperations_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"c1b7e80dda242734":{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditsecuritygroupmanagement","displayName":"Audit Security Group Management","description":"This policy setting allows you to audit events generated by changes to security groups such as the following: Security group is created, changed, or deleted. Member is added or removed from a security group. Group type is changed. If you configure this policy setting, an audit event is generated when an attempt to change a security group is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a security group changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountmanagement_auditsecuritygroupmanagement"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditsecuritygroupmanagement_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditsecuritygroupmanagement_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditsecuritygroupmanagement_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditsecuritygroupmanagement_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"c18f178251393763":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist","displayName":"Allow media autoplay on a allowlist of URL patterns","description":"Setting the policy lets videos play automatically (without user consent) with audio content in Google Chrome. If AutoplayAllowed policy is set to True, then this policy has no effect. If AutoplayAllowed is set to False, then any URL patterns set in this policy can still play. If this policy changes while Google Chrome is running, it only applies to newly opened tabs.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"c1580116ca53db3d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings","displayName":"Proxy settings","description":"Setting the policy configures the proxy settings for Chrome and ARC-apps, which ignore all proxy-related options specified from the command line.\r\n\r\n Leaving the policy unset lets users choose their proxy settings.\r\n\r\n Setting the ProxySettings policy accepts the following fields:\r\n * ProxyMode, which lets you specify the proxy server Chrome uses and prevents users from changing proxy settings\r\n * ProxyPacUrl, a URL to a proxy .pac file\r\n * ProxyPacMandatory, which prevents the network stack from falling back to direct connections with invalid or unavailable PAC script\r\n * ProxyServer, a URL of the proxy server\r\n * ProxyBypassList, a list of hosts for which the proxy will be bypassed\r\n\r\n The ProxyServerMode field is deprecated in favor of the ProxyMode field.\r\n\r\n For ProxyMode, if you choose the value:\r\n * direct, a proxy is never used and all other fields are ignored.\r\n * system, the systems's proxy is used and all other fields are ignored.\r\n * auto_detect, all other fields are ignored.\r\n * fixed_servers, the ProxyServer and ProxyBypassList fields are used.\r\n * pac_script, the ProxyPacUrl, ProxyPacMandatory and ProxyBypassList fields are used.\r\n\r\nNote: For more detailed examples, visit The Chromium Projects ( https://www.chromium.org/developers/design-documents/network-settings#TOC-Command-line-options-for-proxy-sett ).\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ProxySettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"fixed_servers\",\r\n \"ProxyServer\": \"123.123.123.123:8080\",\r\n \"ProxyBypassList\": \"https://www.example1.com,https://www.example2.com,https://internalsite/\"\r\n}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"c18add76b2c9c43f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended","displayName":"Enable Safe Browsing","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"de643352-007f-4a47-8c83-d75a79516b39","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c114e5d3f63385e0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"c1c672bba35e4e0a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls_passwordprotectionloginurlsdesc","displayName":"Configure the list of enterprise login URLs where password protection service should capture salted hashes of passwords. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":null},"c16ac53da6bd620b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_highefficiencymodeenabled","displayName":"Enable High Efficiency Mode","description":"This policy enables or disables the High Efficiency Mode setting. This setting makes it so that tabs are discarded after some period of time in the background to reclaim memory.\r\nIf this policy is unset, the end user can control this setting in chrome://settings/performance.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_highefficiencymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_highefficiencymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c1bd50a24ee50219":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_relaunchfastifoutdated","displayName":"Time period (days): (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c14a84b9c237fabc":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication with constraints","description":"A list of TLS certificates that should be trusted by Google Chrome for server authentication, with constraints added outside the certificate. If no constraint of a certain type is present, then any name of that type is allowed.\r\nCertificates should be base64-encoded. At least one constraint must be specified for each certificate.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=CACertificatesWithConstraints for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"certificate\": \"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\",\r\n \"constraints\": {\r\n \"permitted_dns_names\": [\r\n \"example.org\"\r\n ],\r\n \"permitted_cidrs\": [\r\n \"10.1.1.0/24\"\r\n ]\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints_1","displayName":"Enabled","description":null,"helpText":null}]},"c1a6ec13181d131b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Google Chrome for server authentication","description":"A list of certificate public keys that should be distrusted by Google Chrome for TLS server\r\nauthentication.\r\n\r\nThe policy value is a list of base64-encoded X.509 certificates. Any\r\ncertificate with a matching SPKI (SubjectPublicKeyInfo) will be distrusted.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"c1b784c59c631a91":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses","displayName":"Prevent installation of devices using drivers that match these device setup classes","description":"This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.\r\n \r\nIf you enable this policy setting, Windows is prevented from installing or updating device drivers whose device setup class GUIDs appear in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, Windows can install and update devices as allowed or prevented by other policy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_1","displayName":"Enabled","description":null,"helpText":null}]},"c1edc6f998ecebc0":{"id":"device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange","displayName":"Prevent changing the default search provider","description":"This policy setting prevents the user from changing the default search provider for the Address bar and the toolbar Search box.\n\nIf you enable this policy setting, the user cannot change the default search provider.\n\nIf you disable or do not configure this policy setting, the user can change the default search provider.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesearchproviderchange"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_1","displayName":"Enabled","description":null,"helpText":null}]},"c1fefc5212ccc5db":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowaccesstodatasources"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"c150c7ca52b17cc7":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_copilotnewtabpageenabled","displayName":"Enable the Copilot new tab page","description":"This policy configures the availability of the Copilot new tab page in Microsoft Edge for Business.\r\n\r\nThe Copilot new tab page combines search and chat into a single input box and includes personalized cards that provide quick access to relevant files, calendar events, and suggested Copilot prompts. Users who do not have a Microsoft 365 Copilot license might experience limited relevance in Copilot prompt card content.\r\n\r\nMost policies that customize the New Tab Page are supported on the Copilot new tab page. For a complete list of supported and unsupported policies, see https://go.microsoft.com/fwlink/?linkid=2330462.\r\n\r\nThis policy applies only to Microsoft Entra ID profiles and controls the Copilot new tab page experience in Microsoft Edge for Business. This policy does not apply to the Copilot new tab page on MSA profiles.\r\n\r\nIf you enable this policy, the Copilot new tab page is turned on.\r\n\r\nIf you disable or don't configure this policy, the Copilot new tab page is turned off. When the policy is not configured, users can turn it on via user settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_copilotnewtabpageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_copilotnewtabpageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c126c12f9a964294":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering","displayName":"Set the sync app update ring","description":"Updates to the OneDrive sync app (OneDrive.exe) are released to the public through three rings-first to Insiders, then Production, and finally Deferred. This setting lets you specify the sync app version for users in your organization. When you enable this setting and select a ring, users won't be able to change it.\r\n\r\nInsiders ring users will receive builds that let them preview new features coming to OneDrive.\r\n\r\nProduction ring users will get the latest features as they become available.\r\n\r\nDeferred ring users get new features, bug fixes, and performance improvements last. This ring lets you deploy updates from an internal network location and control the timing of the deployment (within a 60-day window).\r\n\r\nIf you disable or do not configure this setting, users will get OneDrive sync app updates when they become available in the Production ring. Users can join the Office or Windows Insiders programs to get updates on the Insiders ring.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_1","displayName":"Enabled","description":null,"helpText":null}]},"c1d5924ee73c2aff":{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy","displayName":"Manage processing of Queue-specific files","description":"\nManages how Queue-specific files are processed during printer installation. At printer installation time, a vendor-supplied installation application can specify a set of files, of any type, to be associated with a particular print queue. The files are downloaded to each client that connects to the print server.\n\nYou can enable this setting to change the default behavior involving queue-specific files. To use this setting, select one of the options below from the \"Manage processing of Queue-specific files\" box.\n\nIf you disable or do not configure this policy setting, the default behavior is \"Limit Queue-specific files to Color profiles\".\n\n-- \"Do not allow Queue-specific files\" specifies that no queue-specific files will be allowed/processed during print queue/printer connection installation.\n\n-- \"Limit Queue-specific files to Color profiles\" specifies that only queue-specific files that adhere to the standard color profile scheme will be allowed. This means entries using the Registry Key CopyFiles\\ICM, containing a Directory value of COLOR and supporting mscms.dll as the Module value. \"Limit Queue-specific files to Color profiles\" is the default behavior.\n\n-- \"Allow all Queue-specific files\" specifies that all queue-specific files will be allowed/processed during print queue/printer connection installation.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurecopyfilespolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"c19991790e2fab0d":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_userincontroloftheseapps","displayName":"Let Apps Access Location User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"c15b0814676abfd4":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromcdorfloppy","displayName":"Hide the \"Add a program from CD-ROM or floppy disk\" option (User)","description":"Removes the \"Add a program from CD-ROM or floppy disk\" section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media.\r\n\r\nIf you disable this setting or do not configure it, the \"Add a program from CD-ROM or floppy disk\" option is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to add or remove program components.\r\n\r\nNote: If the \"Hide Add New Programs page\" setting is enabled, this setting is ignored. Also, if the \"Prevent removable media source for any install\" setting (located in User Configuration\\Administrative Templates\\Windows Components\\Windows Installer) is enabled, users cannot add programs from removable media, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddfromcdorfloppy"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromcdorfloppy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromcdorfloppy_1","displayName":"Enabled","description":null,"helpText":null}]},"c123e15004ab97c3":{"id":"user_vendor_msft_policy_config_admx_framepanes_noreadingpane","displayName":"Turn off Preview Pane (User)","description":"Hides the Preview Pane in File Explorer.\r\n\r\nIf you enable this policy setting, the Preview Pane in File Explorer is hidden and cannot be turned on by the user.\r\n\r\nIf you disable, or do not configure this setting, the Preview Pane is hidden by default and can be displayed by the user.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-framepanes#admx-framepanes-noreadingpane"],"categoryId":"4124fc05-5c98-4790-a2a9-4ba2dee3d9b3","categoryName":"Explorer Frame Pane","options":[{"id":"user_vendor_msft_policy_config_admx_framepanes_noreadingpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_framepanes_noreadingpane_1","displayName":"Enabled","description":null,"helpText":null}]},"c17c5f111e7fcd7e":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_1","displayName":"Administrative Templates (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admcomputers-1"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_1_1","displayName":"Enabled","description":null,"helpText":null}]},"c1620ee3916a406a":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trustedlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-trustedlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trustedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trustedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"c19a653af4f9071a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_1","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_2","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},"c1bf0fabc7cc2ecd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_sitesearchsettings","displayName":"Site search settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c15eed942ad44bfa":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_webappsettings","displayName":"Web App management settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c1d7a6526c668592":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00","displayName":"Logon options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"c181ff7a505eb862":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"c1f5309034d07048":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"c1786d9efc3ebcaf":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_l_serveraddressexternal_value","displayName":"DNS name of the external server (User)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"c19115f4e676e21d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_0","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_1","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_2","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},"c180085c98a8ae25":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_passwordprotectionloginurlsdesc","displayName":"Configure the list of enterprise login URLs where password protection service should capture fingerprint of password (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"c1934016c490f4ba":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled","displayName":"Allow freezing of background tabs (User)","description":"Controls whether Microsoft Edge can freeze tabs that are in the background for at least 5 minutes.\r\n\r\nTab freezing reduces CPU, battery, and memory usage. Microsoft Edge uses heuristics to avoid freezing tabs that do useful work in the background, such as display notifications, play sound, and stream video.\r\n\r\nIf you enable or don't configure this policy, tabs that have been in the background for at least 5 minutes might be frozen.\r\n\r\nIf you disable this policy, no tabs will be frozen.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c16584988d13115b":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls","displayName":"Allow insecure content on specified sites (User)","description":"Create a list of URL patterns to specify sites that can display insecure mixed content (that is, HTTP content on HTTPS sites).\r\n\r\nIf you don't configure this policy, blockable mixed content will be blocked and optionally blockable mixed content will be upgraded. However, users will be allowed to set exceptions to allow insecure mixed content for specific sites.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c1fb320f5d64ea75":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled","displayName":"Enable preload of the new tab page for faster rendering (User)","description":"If you configure this policy, preloading the New tab page is enabled, and users can't change this setting. If you don't configure this policy, preloading is enabled and a user can change this setting.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c135b8b6caf1c8b9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastservicemajorversion6","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"c11ec44dc68bf7f2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastserviceservername9","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"c1178edee339f944":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey18_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"c1e6a1bf363e9a1a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07","displayName":"Trusted Location #7 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc07_1","displayName":"Enabled","description":null,"helpText":null}]},"c134d3bdf31fc272":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_savenewwebpagesaswebarchives","displayName":"Save new Web pages as Web archives (User)","description":"Checked: Use Web Archive (*.mht) as the default format for the Save as Web Page command (File menu). | Unchecked: Use Web page (*.htm) as the default format for the Save as Web Page command (File menu).","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_savenewwebpagesaswebarchives_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_savenewwebpagesaswebarchives_1","displayName":"Enabled","description":null,"helpText":null}]},"c12daf8b1da491b0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_draftsfolderhomepage","displayName":"Drafts Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Drafts Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_draftsfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_draftsfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"c1c2d3189643bb16":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationalertthreshold_l_outlookactivationalertthresholdspinid","displayName":"(100 - 10000 milliseconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":null},"c1a33e68d2cd4d26":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Disable all application add-ins (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n \r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"c1fe93a0379b889e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve","displayName":"Set maximum number of trust records to preserve (User)","description":"This policy setting allows you to specify the maximum number of trust records to preserve when the purge task detects that this application has trusted more than the number of trusted documents set by the \"Set maximum number of trusted documents\" policy setting.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of trust records to preserve, with an upper limit of 20000. Due to performance reasons, it is not recommended to set it to the upper limit.\r\n\r\nIf you disable or you do not configure this policy setting, the default value for of 400 is used.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_1","displayName":"Enabled","description":null,"helpText":null}]},"c195e1354dc9e6b9":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13","displayName":"Trusted Location #13 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_1","displayName":"Enabled","description":null,"helpText":null}]},"c1e2124ae8c70c0a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_descriptioncolon58","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"c161cb918c1af4d8":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjcritifless_l_pjcritifless29","displayName":"Tasks are critical if slack is less than or equal to (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":null},"c17e2b506fb072ef":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral_l_undolevels_l_undolevels5","displayName":"Undo Levels (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3265b420-4c88-4f7b-92cc-4e23d9452eb1","categoryName":"General","options":null},"c1761cae7375b95a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19_l_allowsubfolders83","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19_l_allowsubfolders83_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc19_l_allowsubfolders83_1","displayName":"True","description":null,"helpText":null}]},"c1add3af043634c3":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_automaticallysubstitutefontformissingeachars","displayName":"Automatically substitute font for missing East Asian characters (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_automaticallysubstitutefontformissingeachars_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_automaticallysubstitutefontformissingeachars_1","displayName":"Enabled","description":null,"helpText":null}]},"c1bff8e688835fa2":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Block application add-ins loading (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n \r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users, except if application add-ins are required to be signed by Trusted Publishers.","helpText":"","infoUrls":[],"categoryId":"30da5d88-cf03-41f4-ab55-51ead91b3844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c2.json b/public/intune-definitions/c2.json new file mode 100644 index 000000000000..1ca9fcd20a49 --- /dev/null +++ b/public/intune-definitions/c2.json @@ -0,0 +1 @@ +{"c22013a1db559cbc":{"id":"apple_customprofile_profile","displayName":"Profile","description":"A admin uploaded profile to install.","helpText":null,"infoUrls":[],"categoryId":"ddb64e9d-34b9-44f4-9980-a6623f14e445","categoryName":"Custom Profile","options":null},"c225cf7e8c9ee9c3":{"id":"com.apple.extensiblesso_extensiondata_customusernamelabel_kerberos","displayName":"Custom Username Label","description":"The custom user name label used in the Kerberos extension instead of “Username”. For example, “Company ID”. Available in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"c203778eb644af87":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"c2bc93d5737738f6":{"id":"com.apple.managedclient.preferences_certificatetransparencyenforcementdisabledforurls","displayName":"Disable Certificate Transparency enforcement for specific URLs","description":"Disables enforcing Certificate Transparency requirements for the listed URLs.\n\nThis policy lets you not disclose certificates for the hostnames in the specified URLs via Certificate Transparency. This lets you use certificates that would otherwise be untrusted, because they weren't properly publicly disclosed, but it makes it harder to detect mis-issued certificates for those hosts.\n\nForm your URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322. Because certificates are valid for a given hostname, independent of the scheme, port, or path, only the hostname part of the URL is considered. Wildcard hosts are not supported.\n\nIf you don't configure this policy, any certificate that should be disclosed via Certificate Transparency is treated as untrusted if it's not disclosed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#certificatetransparencyenforcementdisabledforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c2c65e7ec98c8718":{"id":"com.apple.managedclient.preferences_cloudblocklevel","displayName":"Cloud Block Level","description":"Determines how aggressive Defender for Endpoint will be in blocking and scanning suspicious files.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-preferences?view=o365-worldwide#configure-cloud-block-level"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"com.apple.managedclient.preferences_cloudblocklevel_0","displayName":"normal","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_cloudblocklevel_1","displayName":"moderate","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_cloudblocklevel_2","displayName":"high","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_cloudblocklevel_3","displayName":"high_plus","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_cloudblocklevel_4","displayName":"zero_tolerance","description":null,"helpText":null}]},"c2e86405c7141d27":{"id":"com.apple.managedclient.preferences_defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting","description":"Administrators can use this policy to control whether websites can perform multiple downloads successively. Individual site behavior can be managed using the AutomaticDownloadsAllowedForUrls and AutomaticDownloadsBlockedForUrls policies.\n\nDefault behavior:\n\n- A user gesture is required for each additional download.\n\n- Users can modify their browser settings to disable successive downloads.\n\nPolicy options mapping:\n\n* AllowAutomaticDownloads (1) = Allow all websites to perform multiple downloads without requiring a user gesture between each download.\n\n* BlockAutomaticDownloads (2) = Prevent all websites from performing multiple downloads, even after a user gesture.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultautomaticdownloadssetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultautomaticdownloadssetting_0","displayName":"Allow all websites to perform multiple downloads without requiring a user gesture between each download.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultautomaticdownloadssetting_1","displayName":"Prevent all websites from performing multiple downloads, even after a user gesture.","description":null,"helpText":null}]},"c27263d418fb23b0":{"id":"com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes","displayName":"Configure the background types allowed for the new tab page layout","description":"You can configure which types of background image that are allowed on the new tab page layout in Microsoft Edge.\n\nIf you don't configure this policy, all background image types on the new tab page are enabled.\n\nPolicy options mapping:\n\n* DisableImageOfTheDay (1) = Disable daily background image type\n\n* DisableCustomImage (2) = Disable custom background image type\n\n* DisableAll (3) = Disable all background image types\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newtabpageallowedbackgroundtypes"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes_0","displayName":"Disable daily background image type","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes_1","displayName":"Disable custom background image type","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes_2","displayName":"Disable all background image types","description":null,"helpText":null}]},"c2be5fed67b91d1c":{"id":"com.apple.managedclient.preferences_searchforimageenabled","displayName":"Search for image enabled","description":"This policy lets you configure the Image Search feature in the right-click context menu.\n\nIf you enable or don't configure this policy, then the \"Search the web for image\" option will be visible in the context menu.\n\nIf you disable this policy, then the \"Search the web for image\" will not be visible in the context menu.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#searchforimageenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_searchforimageenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_searchforimageenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c2f3e5bc776a23d0":{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_reminders_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"c224eaa8c747487b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes","description":"Disables enforcement of Certificate Transparency requirements for a list of subjectPublicKeyInfo hashes.\n\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they weren't properly publicly disclosed to still be used for Enterprise hosts.\n\nTo disable Certificate Transparency enforcement when this policy is set, one of the following sets of conditions must be met:\n1. The hash is of the server certificate's subjectPublicKeyInfo.\n2. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, that CA certificate is constrained via the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName contains an organizationName attribute.\n3. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate contains the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\n\nA subjectPublicKeyInfo hash is specified by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\n\nIf you disable this policy or don't configure it, any certificate required to be disclosed via Certificate Transparency is treated as untrusted if not disclosed according to the Certificate Transparency policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"c2c9fec25ae906e1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_recommended","displayName":"Enable favorites bar (users can override)","description":"Enables or disables the favorites bar.\n\nIf you enable this policy, users will see the favorites bar.\n\nIf you disable this policy, users won't see the favorites bar.\n\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"c26599084917731d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_recommended","displayName":"Allow importing of browser settings (users can override)","description":"Allows users to import browser settings from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, browser settings aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This option means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.\n\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"c26afcf874a62dcf":{"id":"device_vendor_msft_laps_policies_adpasswordencryptionenabled","displayName":"AD Password Encryption Enabled ","description":"Use this setting to configure whether the password is encrypted before being stored in Active Directory.\n\nThis setting is ignored if the password is currently being stored in Azure.\n\nThis setting is only honored when the Active Directory domain is at Windows Server 2016 Domain Functional Level or higher.\n\nIf this setting is enabled, and the Active Directory domain meets the DFL prerequisite, the password will be encrypted before before being stored in Active Directory.\n\nIf this setting is disabled, or the Active Directory domain does not meet the DFL prerequisite, the password will be stored as clear-text in Active Directory.\n\nIf not specified, this setting defaults to True.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_adpasswordencryptionenabled_false","displayName":"Store the password in clear-text form in Active Directory","description":"Store the password in clear-text form in Active Directory","helpText":null},{"id":"device_vendor_msft_laps_policies_adpasswordencryptionenabled_true","displayName":"Store the password in encrypted form in Active Directory","description":"Store the password in encrypted form in Active Directory","helpText":null}]},"c2eb67015405360d":{"id":"device_vendor_msft_policy_config_admx_credentialproviders_excludedcredentialproviders_excludedcredentialproviders_message","displayName":"Exclude the following credential providers:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"c2a87decc1060adb":{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_approvedenstordevices_approvedenstordevices_list","displayName":"Usable Enhanced Storage Devices:","description":null,"helpText":"","infoUrls":[],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":null},"c201a46fd47f2b82":{"id":"device_vendor_msft_policy_config_admx_printing2_prunedownlevel","displayName":"Prune printers that are not automatically republished","description":"Determines whether the pruning service on a domain controller prunes printer objects that are not automatically republished whenever the host computer does not respond,just as it does with Windows 2000 printers. This setting applies to printers running operating systems other than Windows 2000 and to Windows 2000 printers published outside their forest.\r\n\r\n The Windows pruning service prunes printer objects from Active Directory when the computer that published them does not respond to contact requests. Computers running Windows 2000 Professional detect and republish deleted printer objects when they rejoin the network. However, because non-Windows 2000 computers and computers in other domains cannot republish printers in Active Directory automatically, by default, the system never prunes their printer objects.\r\n\r\n You can enable this setting to change the default behavior. To use this setting, select one of the following options from the \"Prune non-republishing printers\" box:\r\n\r\n -- \"Never\" specifies that printer objects that are not automatically republished are never pruned. \"Never\" is the default.\r\n\r\n -- \"Only if Print Server is found\" prunes printer objects that are not automatically republished only when the print server responds, but the printer is unavailable.\r\n\r\n -- \"Whenever printer is not found\" prunes printer objects that are not automatically republished whenever the host computer does not respond, just as it does with Windows 2000 printers.\r\n\r\n Note: This setting applies to printers published by using Active Directory Users and Computers or Pubprn.vbs. It does not apply to printers published by using Printers in Control Panel.\r\n\r\n Tip: If you disable automatic pruning, remember to delete printer objects manually whenever you remove a printer or print server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-prunedownlevel"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_prunedownlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_prunedownlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"c2038148f12fa636":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screenimagequality","displayName":"Screen Image Quality:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screenimagequality_1","displayName":"Highest (best quality)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screenimagequality_2","displayName":"Medium (default)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_remotedesktopvirtualgraphics_ts_remotedesktopvirtualgraphics_screenimagequality_3","displayName":"Lowest","description":null,"helpText":null}]},"c27de39d24106c64":{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailuretotalthreshold_name","displayName":"Standard User Total Lockout Threshold","description":"This policy setting allows you to manage the maximum number of authorization failures for all standard users for the Trusted Platform Module (TPM). If the total number of authorization failures for all standard users within the duration for Standard User Lockout Duration equals this value, all standard users are prevented from sending commands to the Trusted Platform Module (TPM) that require authorization.\r\n\r\nThis setting helps administrators prevent the TPM hardware from entering a lockout mode because it slows the speed standard users can send commands requiring authorization to the TPM.\r\n\r\nAn authorization failure occurs each time a standard user sends a command to the TPM and receives an error response indicating an authorization failure occurred. Authorization failures older than the duration are ignored.\r\n\r\nFor each standard user two thresholds apply. Exceeding either threshold will prevent the standard user from sending a command to the TPM that requires authorization.\r\n\r\nThe Standard User Individual Lockout value is the maximum number of authorization failures each standard user may have before the user is not allowed to send commands requiring authorization to the TPM.\r\n\r\nThis value is the maximum total number of authorization failures all standard users may have before all standard users are not allowed to send commands requiring authorization to the TPM.\r\n\r\nThe TPM is designed to protect itself against password guessing attacks by entering a hardware lockout mode when it receives too many commands with an incorrect authorization value. When the TPM enters a lockout mode it is global for all users including administrators and Windows features like BitLocker Drive Encryption. The number of authorization failures a TPM allows and how long it stays locked out vary by TPM manufacturer. Some TPMs may enter lockout mode for successively longer periods of time with fewer authorization failures depending on past failures. Some TPMs may require a system restart to exit the lockout mode. Other TPMs may require the system to be on so enough clock cycles elapse before the TPM exits the lockout mode.\r\n\r\nAn administrator with the TPM owner password may fully reset the TPM's hardware lockout logic using the TPM Management Console (tpm.msc). Each time an administrator resets the TPM's hardware lockout logic all prior standard user TPM authorization failures are ignored; allowing standard users to use the TPM normally again immediately.\r\n\r\nIf this value is not configured, a default value of 9 is used.\r\n\r\nA value of zero means the OS will not allow standard users to send commands to the TPM which may cause an authorization failure.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-standarduserauthorizationfailuretotalthreshold-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailuretotalthreshold_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailuretotalthreshold_name_1","displayName":"Enabled","description":null,"helpText":null}]},"c21390f3d7d43df8":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9","displayName":"Internet Explorer 9","description":"This policy setting configures the synchronization of user settings for Internet Explorer 9.\r\nBy default, the user settings of Internet Explorer 9 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 9 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 9 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 9 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer9"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9_1","displayName":"Enabled","description":null,"helpText":null}]},"c24e7e3dd86f0120":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxidentityprovider","displayName":"Xbox Identity Provider * (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxidentityprovider_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxidentityprovider_1","displayName":"True","description":null,"helpText":null}]},"c24e765c1e7f9e09":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_user_refresh_unit_options","displayName":"User Publishing Refresh Interval Unit","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_user_refresh_unit_options_0","displayName":"Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver1_user_refresh_unit_options_1","displayName":"Day","description":null,"helpText":null}]},"c28e134a6eab4e9b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_maxinvalidationfetchdelay","displayName":"Maximum fetch delay after a policy invalidation: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c248aade04846a3a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting","displayName":"Control use of the File Handling API (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting_2","displayName":"Do not allow any web app to access file types via the File Handling API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting_3","displayName":"Allow web apps to ask the user to grant access to file types via the File Handling API","description":null,"helpText":null}]},"c2f0abadaae35630":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled","displayName":"Enable network prediction","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c2b4373318458ba4":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage","displayName":"Choose whether Blob URLs are partitioned during fetching and navigations","description":"This policy controls whether Blob URLs are partitioned during fetching and navigation.\r\nIf this policy is set to Enabled or not set, Blob URLs will be partitioned.\r\nIf this policy is set to Disabled, Blob URLs won't be partitioned.\r\n\r\nIf storage partitioning is disabled for a given top-level origin by either\r\nThirdPartyStoragePartitioningBlockedForOrigins\r\nor DefaultThirdPartyStoragePartitioningSetting,\r\nthen Blob URLs will also not be partitioned.\r\n\r\nIf you must use the policy, please file a bug at\r\nGoogle Chrome\r\nexplaining your use case. The policy is scheduled to be offered through\r\nGoogle Chrome version 143, after which\r\nthe old implementation will be removed.\r\n\r\nNOTE: Only newly-started renderer processes will reflect changes to this\r\npolicy while the browser is running.\r\n\r\nFor detailed information on third-party storage partitioning, please see\r\nhttps://developers.google.com/privacy-sandbox/cookies/storage-partitioning.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage_1","displayName":"Enabled","description":null,"helpText":null}]},"c26d20c67779555d":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthin","displayName":"Maximum Background Download Bandwidth (percentage) during Business Hours:","description":"","helpText":"","infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"c2cc4d31695c4202":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_list","displayName":"Prevented Instance IDs","description":"","helpText":"","infoUrls":[],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"c2a3f86c159cb318":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open additional windows and frames from other domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow additional windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open other windows and frames from other domains or access applications from different domains.\n\nIf you do not configure this policy setting, users cannot open other windows and frames from different domains or access applications from different domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszonenavigatewindowsandframes"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"c20801af0cfce83f":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire","displayName":"Network Security Force Logoff When Logon Hours Expire","description":"Network security: Force logoff when logon hours expire This security setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours. This setting affects the Server Message Block (SMB) component. When this policy is enabled, it causes client sessions with the SMB server to be forcibly disconnected when the client's logon hours expire. If this policy is disabled, an established client session is allowed to be maintained after the client's logon hours have expired. Default: Enabled. Note: This security setting behaves as an account policy. For domain accounts, there can be only one account policy. The account policy must be defined in the Default Domain Policy, and it is enforced by the domain controllers that make up the domain. A domain controller always pulls the account policy from the Default Domain Policy Group Policy object (GPO), even if there is a different account policy applied to the organizational unit that contains the domain controller. By default, workstations and servers that are joined to a domain (for example, member computers) also receive the same account policy for their local accounts. However, local account policies for member computers can be different from the domain account policy by defining an account policy for the organizational unit that contains the member computers. Kerberos settings are not applied to member computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_forcelogoffwhenlogonhoursexpire"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire_0","displayName":"Disable","description":"Disable","helpText":null}]},"c2930861e108d92d":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service","description":"The Experimentation and Configuration Service is used to deploy Experimentation and Configuration payloads to the client.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nConfiguration payload consists of a list of recommended settings that Microsoft wants to deploy to optimize the user experience.\r\n\r\nConfiguration payload may also contain a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nIf you set this policy to 'FullMode', the full payload is downloaded from the Experimentation and Configuration Service. This includes both the experimentation and configuration payloads.\r\n\r\nIf you set this policy to 'ConfigurationsOnlyMode', only the configuration payload is downloaded.\r\n\r\nIf you set this policy to 'RestrictedMode', the communication with the Experimentation and Configuration Service is stopped completely. Microsoft does not recommend this setting.\r\n\r\nIf you don't configure this policy on a managed device, the behavior on Beta and Stable channels is the same as the 'ConfigurationsOnlyMode'. On Canary and Dev channels the behavior is the same as 'FullMode'.\r\n\r\nIf you don't configure this policy on an unmanaged device, the behavior is the same as the 'FullMode'.\r\n\r\nPolicy options mapping:\r\n\r\n* FullMode (2) = Retrieve configurations and experiments\r\n\r\n* ConfigurationsOnlyMode (1) = Retrieve configurations only\r\n\r\n* RestrictedMode (0) = Disable communication with the Experimentation and Configuration Service\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"c25e9cb8617de866":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist","displayName":"Allow specific extensions to be installed","description":"By default, all extensions are allowed. However, if you block all extensions by setting the 'ExtensionInstallBlockList' policy to \"*,\" users can only install extensions defined in this policy.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"c2e22d7ca1b7a6be":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_homepagelocation","displayName":"Home page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"c220346d612dca82":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas","displayName":"Allow Save page as in Internet Explorer mode","description":"This policy enables 'Save page as' functionality in Internet Explorer mode.\r\nUsers can use this option to save the current page in the browser. When a user re-opens a saved page, it will be loaded in the default browser.\r\n\r\nIf you enable this policy, the \"Save page as\" option will be clickable in \"More tools\".\r\n\r\nIf you disable or don't configure this policy, users can't select the \"Save page as\" option in \"More tools\".\r\n\r\nNote: To make the \"Ctrl+S\" shortcut work, users must enable the Internet Explorer policy, 'Enable extended hot key in Internet Explorer mode'.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_1","displayName":"Enabled","description":null,"helpText":null}]},"c244510604ba5caa":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled","displayName":"Search Filters Enabled","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions will be shown.\r\n\r\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\r\n\r\nIf you disable this policy, the autosuggestion dropdown won't display the ribbon of available filters.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c20fd1ff1daebb53":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls","displayName":"Allow multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to perform multiple successive automatic downloads.\r\nIf you don't configure this policy, 'DefaultAutomaticDownloadsSetting' (Default automatic downloads setting) applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\r\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c247d1ce91df4f03":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled","displayName":"Control the behavior for the cancel dialog produced by the beforeunload event","description":"This policy provides a temporary opt-out for two related fixes to the behavior of the confirmation dialog that’s shown by the beforeunload event.\r\n\r\nWhen this policy is Enabled, the new (correct) behavior will be used.\r\nWhen this policy is Disabled, the old (legacy) behavior will be used.\r\nWhen this policy is left not set, the default behavior will be used.\r\nNote: This policy is a temporary workaround and will be removed in a future release.\r\n\r\nNew and correct behavior: In `beforeunload`, calling `event.preventDefault()` will trigger the confirmation dialog. Setting `event.returnValue` to the empty string won’t trigger the confirmation dialog.\r\n\r\nOld and legacy behavior: In `beforeunload`, calling `event.preventDefault()` won’t trigger the confirmation dialog. Setting `event.returnValue` to the empty string will trigger the confirmation dialog.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c2dd3b2e31ba3cbd":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode","displayName":"Print Rasterization Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode_0","displayName":"Full page rasterization","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode_1","displayName":"Avoid rasterization if possible","description":null,"helpText":null}]},"c29ba4c5fa7501e8":{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg","displayName":"Configure NetBT NodeType","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_1","displayName":"B-node","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_2","displayName":"P-node (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_4","displayName":"M-node","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_8","displayName":"H-node","description":null,"helpText":null}]},"c25a8f3da2366246":{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard","displayName":"Silently move Windows known folders to OneDrive","description":"This setting lets you redirect known folders to OneDrive without any user interaction. In sync app builds below 18.171.0823.0001, this setting only redirects empty known folders to OneDrive (or known folders already redirected to a different OneDrive account). In later builds, it redirects known folders that contain content and moves the content to OneDrive. We recommend using this setting together with \"Prompt users to move Windows known folders to OneDrive.\" If moving the known folders silently does not succeed, users will be prompted to correct the error and continue.\r\n\r\nIf you enable this setting and provide your tenant ID, you can choose whether to display a notification to users after their folders have been redirected.\r\n\r\nYou can move all folders at once or select the folders you want to move. After a folder is moved, this policy will not affect that folder again, even if you clear the check box for the folder. \r\n\r\nIf you disable or do not configure this setting, your users' known folders will not be silently redirected and/or moved to OneDrive.\r\n\r\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_1","displayName":"Enabled","description":null,"helpText":null}]},"c2ff1367f8b74e3a":{"id":"device_vendor_msft_policy_config_quiettime_rangesettings_endtime","displayName":"End","description":null,"helpText":null,"infoUrls":[],"categoryId":"39d1a447-308a-4a49-9716-3097b321da31","categoryName":null,"options":null},"c2646750f54a4a8c":{"id":"device_vendor_msft_policy_config_update_disablewufbsafeguards_v2","displayName":"Disable WUfB Safeguards","description":"This policy setting specifies that a Windows Update for Business device should skip safeguards.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#disablewufbsafeguards"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_disablewufbsafeguards_0","displayName":"Safeguards are enabled and devices may be blocked for upgrades until the safeguard is cleared.","description":"Safeguards are enabled and devices may be blocked for upgrades until the safeguard is cleared.","helpText":null},{"id":"device_vendor_msft_policy_config_update_disablewufbsafeguards_1","displayName":"Safeguards are not enabled and upgrades will be deployed without blocking on safeguards.","description":"Safeguards are not enabled and upgrades will be deployed without blocking on safeguards.","helpText":null}]},"c2fa70c842a8d43c":{"id":"device_vendor_msft_policy_config_update_targetreleaseversion","displayName":"Target Release Version","description":"Available in Windows 10, version 1803 and later. Enables IT administrators to specify which version they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see Windows 10 release information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#targetreleaseversion"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"c2c99a5e1d0a0766":{"id":"settings_item_accessibilitysettings_touchaccommodationsenabled","displayName":"Touch Accommodations Enabled","description":"If true, enables touch accommodations.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_touchaccommodationsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_touchaccommodationsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c269e4690ffb9b1f":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_datecolon12","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"c2a60cf4b14e8f44":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_werconsentcustomize_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":null},"c2aa6e9af44249fe":{"id":"user_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_1","displayName":"Turn off Windows presentation settings (User)","description":"This policy setting turns off Windows presentation settings.\r\n\r\nIf you enable this policy setting, Windows presentation settings cannot be invoked.\r\n\r\nIf you disable this policy setting, Windows presentation settings can be invoked. The presentation settings icon will be displayed in the notification area. This will give users a quick and easy way to configure their system settings before a presentation to block system notifications and screen blanking, adjust speaker volume, and apply a custom background image.\r\n\r\nNote: Users will be able to customize their system settings for presentations in Windows Mobility Center.\r\n\r\nIf you do not configure this policy setting, Windows presentation settings can be invoked.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings#admx-mobilepcpresentationsettings-presentationsettingsenable-1"],"categoryId":"751cf9ec-7214-4b38-a09e-24922684bd8f","categoryName":"Presentation Settings","options":[{"id":"user_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_1_1","displayName":"Enabled","description":null,"helpText":null}]},"c261fdc5b46a609c":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_changebindstate","displayName":"Prohibit Enabling/Disabling components of a LAN connection (User)","description":"Determines whether administrators can enable and disable the components used by LAN connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the check boxes for enabling and disabling components are disabled. As a result, administrators cannot enable or disable the components that a connection uses.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component, and clearing the check box disables the component.\r\n\r\nNote: When the \"Prohibit access to properties of a LAN connection\" setting is enabled, users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection.\r\n\r\nNote: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-changebindstate"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_changebindstate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_changebindstate_1","displayName":"Enabled","description":null,"helpText":null}]},"c22e95799bb3433d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins","displayName":"Allow proceeding from the SSL warning page on specific origins (User)","description":"If SSLErrorOverrideAllowed is Disabled, setting the policy lets you set a list of origin patterns that specify the sites where a user can click through warning pages Google Chrome shows when users navigate to sites that have SSL errors. Users will not be able to click through SSL warning pages on origins that are not on this list.\r\n\r\nIf SSLErrorOverrideAllowed is Enabled or unset, this policy does nothing.\r\n\r\nLeaving the policy unset means SSLErrorOverrideAllowed applies for all sites.\r\n\r\nFor detailed information on valid input patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"c2eefbd1d5f94e7c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls","displayName":"Block popups on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't open pop-ups.\r\n\r\nLeaving the policy unset means DefaultPopupsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c2169ebe58a3d1ce":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt","displayName":"Cross-origin HTTP Authentication prompts (User)","description":"Setting the policy to Enabled allows third-party images on a page to show an authentication prompt.\r\n\r\n Setting the policy to Disabled or leaving it unset renders third-party images unable to show an authentication prompt.\r\n\r\nTypically, this policy is Disabled as a phishing defense.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"c2c1dafaa74b90c6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist","displayName":"Disable printer types on the deny list (User)","description":"The printers of types placed on the deny list will be disabled from being discovered or having their capabilities fetched.\r\n\r\nPlacing all printer types on the deny list effectively disables printing, as there would be no available destinations to send a document for printing.\r\n\r\nIncluding cloud on the deny list has the same effect as setting the CloudPrintSubmitEnabled policy to false. In order to keep Google Cloud Print destinations discoverable, the CloudPrintSubmitEnabled policy must be set to true and cloud must not be on the deny list.\r\n\r\nIf the policy is not set, or is set to an empty list, all printer types will be available for discovery.\r\n\r\nExtension printers are also known as print provider destinations, and include any destination that belongs to a Google Chrome extension.\r\n\r\nLocal printers are also known as native printing destinations, and include destinations available to the local machine and shared network printers.\r\n\r\nExample value:\r\n\r\ncloud\r\nprivet","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},"c294f12ec0947958":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls_passwordprotectionloginurlsdesc","displayName":"Configure the list of enterprise login URLs where password protection service should capture salted hashes of passwords. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":null},"c2301c5a033beea3":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_l_dbaseiiiandivfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_l_dbaseiiiandivfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_l_dbaseiiiandivfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"c265c3f6cf5898dc":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"c2334aeffe414896":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_datecolon46","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"c29d133a40acfe81":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"Enables network prediction and prevents users from changing this setting.\r\n\r\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\r\n\r\nIf you don't configure this policy, network prediction is enabled but the user can change it.\r\n\r\n* 0 = Predict network actions on any network connection\r\n\r\n* 2 = Don't predict network actions on any network connection","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"c22ce2685079b493":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_extensioninstallblocklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"c212eba9c02b3879":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist","displayName":"Configure list of allowed authentication servers (User)","description":"Specifies which servers to enable for integrated authentication. Integrated authentication is only enabled when Microsoft Edge receives an authentication challenge from a proxy or from a server in this list.\r\n\r\nSeparate multiple server names with commas. Wildcards (*) are allowed.\r\n\r\nIf you don't configure this policy, Microsoft Edge tries to detect if a server is on the intranet - only then will it respond to IWA requests. If the server is on the internet, IWA requests from it are ignored by Microsoft Edge.\r\n\r\nExample value: *contoso.com,contoso.com","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"c2fc248df8f4b0cb":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes","displayName":"List of file types that should be automatically opened on download (User)","description":"This policy sets a list of file types that should be automatically opened on download. Note: The leading separator should not be included when listing the file type, so list \"txt\" instead of \".txt\".\r\n\r\nBy default, these file types will be automatically opened on all URLs. You can use the 'AutoOpenAllowedForURLs' (URLs where AutoOpenFileTypes can apply) policy to restrict the URLs for which these file types will be automatically opened on.\r\n\r\nFiles with types that should be automatically opened will still be subject to the enabled Microsoft Defender SmartScreen checks and won't be opened if they fail those checks.\r\n\r\nFile types that a user has already specified to automatically be opened will continue to do so when downloaded. The user will continue to be able to specify other file types to be automatically opened.\r\n\r\nIf you don't set this policy, only file types that a user has already specified to automatically be opened will do so when downloaded.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory or instances that enrolled for device management.\r\n\r\nExample value:\r\n\r\nexe\r\ntxt","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_1","displayName":"Enabled","description":null,"helpText":null}]},"c28db43fbf45f8a1":{"id":"user_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (User)","description":"This policy controls sending required and optional diagnostic data about browser usage to Microsoft.\r\n\r\nRequired diagnostic data is collected to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\nOptional diagnostic data includes data about how you use the browser, websites you visit and crash reports to Microsoft for product and service improvement.\r\n\r\nUp to version 121, this policy is not supported on Windows 10 devices. To control this data collection on Windows 10 for 121 and previous, IT admins must use the Windows diagnostic data group policy. This policy will either be 'Allow Telemetry' or 'Allow Diagnostic Data', depending on the version of Windows. Learn more about Windows 10 diagnostic data collection: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nFor version 122 and later, this policy is supported on Windows 10 devices to allow controlling Microsoft Edge data collection separately from Windows 10 diagnostics data collection.\r\n\r\nUse one of the following settings to configure this policy:\r\n\r\n'Off' turns off required and optional diagnostic data collection. This option is not recommended.\r\n\r\n'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\n'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.\r\n\r\nOn Windows 7/macOS, this policy controls sending required and optional data to Microsoft.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will default to the user's preference.\r\n\r\nPolicy options mapping:\r\n\r\n* Off (0) = Off (Not recommended)\r\n\r\n* RequiredData (1) = Required data\r\n\r\n* OptionalData (2) = Optional data\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_1","displayName":"Enabled","description":null,"helpText":null}]},"c27c907432137a52":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls","displayName":"Allow the Serial API on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a serial port.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSerialGuardSetting' (Control use of the Serial API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SerialBlockedForUrls' (Block the Serial API on specific sites) policy (if there is a match), the 'DefaultSerialGuardSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SerialBlockedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c26bafcb1da1c17a":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled","displayName":"CECPQ2 post-quantum key-agreement enabled for TLS (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 113.\r\n\r\nThis policy was removed in Microsoft Edge 114 and is ignored if set. It served to disable CECPQ2, but CECPQ2 has been disabled by default. A separate policy will be introduced to control the rollout of the replacement of CECPQ2. That replacement will be a combination of the standard key-agreement X25519 with NIST's chosen post-quantum KEM, called \"Kyber\".\r\n\r\nIf this policy is not configured, or is set to enabled, then Microsoft Edge will follow the default rollout process for CECPQ2, a post-quantum key-agreement algorithm in TLS.\r\n\r\nCECPQ2 results in larger TLS messages which, in very rare cases, can trigger bugs in some networking hardware. This policy can be set to False to disable CECPQ2 while networking issues are resolved.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c2ef0bb88412ffdd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastservicemajorversion5","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"c2b7c59bcdf33994":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasemaxinstanceslimit_l_databasemaxinstanceslimitdecimal","displayName":"Maximum number of instances returned (User)","description":"","helpText":"","infoUrls":[],"categoryId":"952f69c8-2644-48df-976b-01fd624cbb3a","categoryName":"Database","options":null},"c2007666c1435e8b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceother_l_othermapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"c2c5a8848d6f5e84":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_specifyissuerfilter_l_specifyissuerfilterid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":null},"c23bf6f46504fe49":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_suggestnameswhilecompletingtoccandbccfields_l_suggestnameswhilecompletingtoccandbccfields","displayName":"Suggest names while completing To, Cc, and Bcc fields (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_suggestnameswhilecompletingtoccandbccfields_l_suggestnameswhilecompletingtoccandbccfields_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_suggestnameswhilecompletingtoccandbccfields_l_suggestnameswhilecompletingtoccandbccfields_1","displayName":"True","description":null,"helpText":null}]},"c2f01cd401af19ec":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstabsolutemaximumsize_l_enterabsolutemaximumsizeforpstinbytes2","displayName":"(0 - 2,075,149,312 bytes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":null},"c271cec770c21385":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts","displayName":"Select the default setting for how to file new contacts (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_1","displayName":"Enabled","description":null,"helpText":null}]},"c27cd63cd98e1715":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersoffline","displayName":"Keep Search Folders offline (User)","description":"This policy setting allows you to specify the number of days to keep a Search Folder active when running in offline or cached mode. After a Search Folder has not been accessed for the specified number of days, it becomes dormant and no longer remains up-to-date with current contents of folders (viewing the Search Folder makes it active again and restarts the timer).\r\n\r\nIf you enable this policy setting, you may specify the number of days to keep a Search Folder active when running in offline mode.\r\n\r\nIf you disable or do not configure this policy setting, then Search Folders always remain dormant.","helpText":"","infoUrls":[],"categoryId":"fb721630-fc42-465b-ba22-ab670698c8b5","categoryName":"Search Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersoffline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersoffline_1","displayName":"Enabled","description":null,"helpText":null}]},"c267e5731dacf45a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_datecolon73","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"c28663bcddaafa3b":{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_trustedforest_chk","displayName":"Users can only point and print to machines in their forest (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_trustedforest_chk_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_trustedforest_chk_1","displayName":"True","description":null,"helpText":null}]},"c2203ffbce17e312":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjandmovecompleted","displayName":"And move end of completed parts forward to status date (User)","description":"Moves the completed portion of a task forward to finish at the status date.\r\n\r\nIf you enable this setting, the completed portion of the task moves forward to finish at the status date.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjandmovecompleted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjandmovecompleted_1","displayName":"Enabled","description":null,"helpText":null}]},"c23636540f22583e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckinglongdocumentsusestylesforstructure","displayName":"Stop checking to ensure long documents use styles for structure (User)","description":"This policy setting prevents the Accessibility Checker from checking to ensure that long documents have used styles to define content structure.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking to ensure that long documents have used styles to define content structure.\r\n\r\nIf you disable or do not configure this policy setting, documents will be checked for style usage and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckinglongdocumentsusestylesforstructure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckinglongdocumentsusestylesforstructure_1","displayName":"Enabled","description":null,"helpText":null}]},"c24bfe571d76cc4b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral_l_numeral16","displayName":"Numeral (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral_l_numeral16_0","displayName":"Arabic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral_l_numeral16_1","displayName":"Hindi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral_l_numeral16_2","displayName":"Context","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_numeral_l_numeral16_3","displayName":"System","description":null,"helpText":null}]},"c21dd58e3803875a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_tools","displayName":"Tools (User)","description":"Defines the default path to tools.","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_tools_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_tools_1","displayName":"Enabled","description":null,"helpText":null}]},"c263d44fac4f709c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_paragraphmarks","displayName":"Paragraph marks (User)","description":"Determines whether the symbol used to represent the end of paragraphs is shown on the screen.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_paragraphmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_paragraphmarks_1","displayName":"Enabled","description":null,"helpText":null}]},"c268f735f3beff89":{"id":"vendor_msft_firewall_mdmstore_privateprofile_defaultinboundaction","displayName":"Default Inbound Action for Private Profile","description":"Specifies how to filter inbound traffic. The acceptable values for this parameter are: NotConfigured, Allow, or Block.","helpText":" ","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_defaultinboundaction_0","displayName":"Allow","description":"Allow Inbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_defaultinboundaction_1","displayName":"Block","description":"Block Inbound By Default","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c3.json b/public/intune-definitions/c3.json new file mode 100644 index 000000000000..daecb628e451 --- /dev/null +++ b/public/intune-definitions/c3.json @@ -0,0 +1 @@ +{"c3140f339c357dd2":{"id":".globalpreferences_multiplesessionenabled","displayName":"Multiple Session Enabled","description":"If false, disables fast user switching.","helpText":null,"infoUrls":[],"categoryId":"1829cdc1-1bed-4058-9aba-9b778cd3d955","categoryName":"Global Preferences","options":[{"id":".globalpreferences_multiplesessionenabled_false","displayName":"False","description":null,"helpText":null},{"id":".globalpreferences_multiplesessionenabled_true","displayName":"True","description":null,"helpText":null}]},"c3ed748e24718a2f":{"id":"ade_accountsettings_restrictediting","displayName":"Restrict editing","description":"Prevent the end user from editing the full name and account name","helpText":null,"infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":[{"id":"ade_accountsettings_restrictediting_0","displayName":"Not configured","description":null,"helpText":null},{"id":"ade_accountsettings_restrictediting_1","displayName":"Yes","description":null,"helpText":null}]},"c397a0ff77c67d7c":{"id":"com.apple.applicationaccess_allowappcellulardatamodification","displayName":"Allow App Cellular Data Modification","description":"If false, disables changing settings for cellular data usage for apps. Requires a supervised device. Available in iOS 7 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowappcellulardatamodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowappcellulardatamodification_true","displayName":"True","description":null,"helpText":null}]},"c306c149e0f3cd2f":{"id":"com.apple.applicationaccess_allowassistant","displayName":"Allow Assistant (Deprecated)","description":"If false, disables Siri. Available in iOS 5 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowassistant_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowassistant_true","displayName":"True","description":null,"helpText":null}]},"c3af05d97366b55c":{"id":"com.apple.managedclient.preferences_automaticfullscreenblockedforurls","displayName":"Block automatic full screen on specified sites","description":"For security reasons, the\nrequestFullscreen() web API\nrequires a prior user gesture (\"transient activation\") to be called or it will\nfail. Users' personal settings may allow certain origins to call this API\nwithout a prior user gesture.\n\nThis policy supersedes users' personal settings and blocks matching origins\nfrom calling the API without a prior user gesture.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\nWildcards (*) are allowed.\n\nOrigins matching both blocked and allowed policy patterns will be blocked.\nOrigins not specified by policy or user settings will require a prior user\ngesture to call this API.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#automaticfullscreenblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c3b50856429dc214":{"id":"com.apple.managedclient.preferences_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage","description":"This policy controls sending required and optional diagnostic data about browser usage to Microsoft.\n\nRequired diagnostic data is collected keep Microsoft Edge secure, up to date and performing as expected.\n\nOptional diagnostic data includes data about how you use the browser, websites you visit and crash reports to Microsoft for product and service improvement.\n\nThis policy is not supported on Windows 10 devices. To control this data collection on Windows 10, IT admins must use the Windows diagnostic data group policy. This policy will either be 'Allow Telemetry' or 'Allow Diagnostic Data', depending on the version of Windows. Learn more about Windows 10 diagnostic data collection: https://go.microsoft.com/fwlink/?linkid=2099569\n\nUse one of the following settings to configure this policy:\n\n'Off' turns off required and optional diagnostic data collection. This option is not recommended.\n\n'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected.\n\n'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.\n\nOn Windows 7/macOS, this policy controls sending required and optional data to Microsoft.\n\nIf you don't configure this policy or disable it, Microsoft Edge will default to the user's preference.\n\nPolicy options mapping:\n\n* Off (0) = Off (Not recommended)\n\n* RequiredData (1) = Required data\n\n* OptionalData (2) = Optional data\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#diagnosticdata"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_diagnosticdata_0","displayName":"Off (Not recommended)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_diagnosticdata_1","displayName":"Required data","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_diagnosticdata_2","displayName":"Optional data","description":null,"helpText":null}]},"c386ad7461963c13":{"id":"com.apple.managedclient.preferences_originagentclusterdefaultenabled","displayName":"Origin-keyed agent clustering enabled by default","description":"The Origin-Agent-Cluster: HTTP header controls whether a document is isolated in an origin-keyed agent cluster or in a site-keyed agent cluster. This has security implications because an origin-keyed agent cluster allows isolating documents by origin. The consequence of this for developers is that the document.domain accessor can no longer be set when origin-keyed agent clustering is enabled.\n\nIf you enable or don't configure this policy, documents without the Origin-Agent-Cluster: header will be assigned to origin-keyed agent clustering by default. On these documents, the document.domain accessor will not be settable.\n\nIf you disable this policy, documents without the Origin-Agent-Cluster: header will be assigned to site-keyed agent clusters by default. On these documents, the document.domain accessor will be settable.\n\nSee https://go.microsoft.com/fwlink/?linkid=2191896 for additional details.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#originagentclusterdefaultenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_originagentclusterdefaultenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_originagentclusterdefaultenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c31053ff11ffa3c9":{"id":"com.apple.managedclient.preferences_savecookiesonexit","displayName":"Save cookies when Microsoft Edge closes","description":"When this policy is enabled, the specified set of cookies is exempt from deletion when the browser closes. This policy is only effective when:\n- The 'Cookies and other site data' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\n- The policy \"ClearBrowsingDataOnExit\" is enabled or\n- The policy \"DefaultCookiesSetting\" is set to 'Keep cookies for the duration of the session'.\n\nYou can define a list of sites, based on URL patterns, that will have their cookies preserved across sessions.\n\nNote: Users can still edit the cookie site list to add or remove URLs. However, they can't remove URLs that have been added by an Admin.\n\nIf you enable this policy, the list of cookies won't be cleared when the browser closes.\n\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#savecookiesonexit"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c3441107dc530353":{"id":"com.apple.mcxmenuextras_delayseconds","displayName":"Delay Seconds","description":"The number of seconds to delay after login before adding or removing menu extras. If the delay is too short, the menu extras don't appear, or disappear from the menu bar.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":null},"c345bb492890d727":{"id":"com.apple.mobiledevice.passwordpolicy_maxinactivity","displayName":"Max Inactivity","description":"The maximum number of minutes for which the device can be idle, without being unlocked by the user, before it gets locked by the system. When this limit is reached, the device is locked and the passcode must be entered. The user can edit this setting, but the value cannot exceed the Max Inactivity value. In macOS, this inactivity value is translated to screen-saver settings.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"c3eff031ffd84f8b":{"id":"com.apple.mobiledevice.passwordpolicy_pinhistory","displayName":"PIN History","description":"This value defines N, where the new passcode must be unique within the last N entries in the passcode history. ","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"c3412cd272020f04":{"id":"com.apple.notificationsettings_notificationsettings_item_bundleidentifier","displayName":"Bundle Identifier","description":"The bundle identifier of the app to which to apply these notification settings. Available in iOS 9.3 and later and macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":null},"c3d81c5545dfe858":{"id":"com.apple.system.logging_com.apple.system.logging","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"0d4d90ab-7ad8-4524-ade0-bc01aa7b71a3","categoryName":"System Logging","options":null},"c3c73dda4f129763":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo","displayName":"Allow importing of payment info","description":"Allows users to import payment info from another browser into Microsoft Edge.\n\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, payment info isn't imported at first run, and users can't import it manually.\n\nIf you don't configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This option means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\n\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_true","displayName":"Enabled","description":null,"helpText":null}]},"c3e9a3e1ee5fe5be":{"id":"com.microsoft.edge.mamedgeappconfigsettings.promptfordownloadlocation","displayName":"Ask where to save downloaded files","description":"Set whether to ask where to save a file before downloading it.\n\nIf you enable this policy, the user is asked where to save each file before downloading; if you don't configure it, files are saved automatically to the default location, without asking the user.\n\nIf you don't configure this policy, the user can change this setting.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.promptfordownloadlocation_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.promptfordownloadlocation_true","displayName":"Enabled","description":null,"helpText":null}]},"c3df28c16fc8f761":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications.","description":"This policy defines a list of allowed HTTPS origins for remote desktop client applications that initiate WebAuthn API requests from a browsing session on a remote host.\n\nOrigins specified in this policy can request WebAuthn authentication for Relying Party IDs (RP IDs) they wouldn't typically be authorized to claim.\n\nOnly HTTPS origins are supported. Wildcards aren't permitted. Entries that don't\nmeet these requirements will be ignored.\n\nFor more information about the WebAuthn Remote Desktop Support feature, see https://github.com/w3c/webauthn/wiki/Explainer:-Remote-Desktop-Support/a4e158c569f456c759d0ddd294a9015bd4d4eb9a.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"c3f36d14ef87c940":{"id":"device_vendor_msft_keyboardfilter_blockedscancodes","displayName":"Blocked Scancodes (Windows Insiders only)","description":"Get operations return a comma-delimited string of scancodes and modifier+scancode combinations that are currently blocked in hexadecimal format without the \"0x\" prefix. Returned list does not include keys that have been blocked. Use GetBlockedKeys to retrieve blocked keys and key combinations.\nReplace operations expect a comma-delimited string of scancodes or modifier(s)+scancode values in hexadecimal and sets them as blocked scancodes. When specifying hexadecimal values, do not include the \"0x\" prefix. Invalid inputs result in an error. Examples of modifier names can be found here: https://learn.microsoft.com/en-us/windows/configuration/keyboard-filter/keyboardfilter-key-names. Valid scancodes can be found here: https://learn.microsoft.com/en-us/windows/win32/inputdev/about-keyboard-input#scan-codes\n\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/KeyboardFilter-csp/"],"categoryId":"717b634f-72a6-44f6-92c5-e1397bb10f40","categoryName":"Keyboard Filter","options":null},"c3b28c499567b4fa":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork","displayName":"Use Windows Hello For Business (Device)","description":"Windows Hello for Business is an alternative method for signing into Windows using your Active Directory or Azure Active Directory account that can replace passwords, Smart Cards, and Virtual Smart Cards.\n\nIf you enable or do not configure this policy setting, the device provisions Windows Hello for Business for all users.\n\nIf you disable this policy setting, the device does not provision Windows Hello for Business for any user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork_false","displayName":"false","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork_true","displayName":"true","description":"Enabled","helpText":null}]},"c3aa8741649c8241":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_fontmitigation","displayName":"Untrusted Font Blocking","description":"This security feature provides a global setting to prevent programs from loading untrusted fonts. Untrusted fonts are any font installed outside of the %windir%\\Fonts directory. This feature can be configured to be in 3 modes: On, Off, and Audit. By default, it is Off and no fonts are blocked. If you aren't quite ready to deploy this feature into your organization, you can run it in Audit mode to see if blocking untrusted fonts causes any usability or compatibility issues.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-fontmitigation"],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_fontmitigation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_fontmitigation_1","displayName":"Enabled","description":null,"helpText":null}]},"c3e10b4968c47904":{"id":"device_vendor_msft_policy_config_admx_help_restrictrunfromhelp_comp","displayName":"Restrict these programs from being launched from Help","description":"\r\n This policy setting allows you to restrict programs from being run from online Help.\r\n \r\n If you enable this policy setting, you can prevent specified programs from being run from Help. When you enable this policy setting, enter the file names names of the programs you want to restrict, separated by commas.\r\n \r\n If you disable or do not configure this policy setting, users can run all applications from online Help.\r\n \r\n Note: You can also restrict users from running applications by using the Software Restriction Policy settings available in Computer Configuration\\Security Settings.\r\n \r\n Note: This policy setting is available under Computer Configuration and User Configuration. If both are settings are used, any programs listed in either of these locations cannot launched from Help\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-help#admx-help-restrictrunfromhelp-comp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_help_restrictrunfromhelp_comp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_help_restrictrunfromhelp_comp_1","displayName":"Enabled","description":null,"helpText":null}]},"c3b11af326f6df41":{"id":"device_vendor_msft_policy_config_admx_reliability_shutdowneventtrackerstatefile","displayName":"Activate Shutdown Event Tracker System State Data feature","description":"This policy setting defines when the Shutdown Event Tracker System State Data feature is activated.\r\n\r\nThe system state data file contains information about the basic system state as well as the state of all running processes.\r\n\r\nIf you enable this policy setting, the System State Data feature is activated when the user indicates that the shutdown or restart is unplanned.\r\n\r\nIf you disable this policy setting, the System State Data feature is never activated.\r\n\r\nIf you do not configure this policy setting, the default behavior for the System State Data feature occurs.\r\n\r\nNote: By default, the System State Data feature is always enabled on Windows Server 2003. See \"Supported on\" for all supported versions.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-reliability#admx-reliability-shutdowneventtrackerstatefile"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_reliability_shutdowneventtrackerstatefile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_reliability_shutdowneventtrackerstatefile_1","displayName":"Enabled","description":null,"helpText":null}]},"c3205a638892637d":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable","displayName":"Enable notification","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable_1","displayName":"True","description":null,"helpText":null}]},"c30208da84c33408":{"id":"device_vendor_msft_policy_config_applicationmanagement_allowgamedvr","displayName":"Allow Game DVR","description":"Note The policy is only enforced in Windows 10 for desktop. Specifies whether DVR and broadcasting is allowed. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#allowgamedvr"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_allowgamedvr_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowgamedvr_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"c33307c3f3eb067d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended","displayName":"Enable Bookmark Bar","description":"Setting the policy to True displays a bookmark bar in Google Chrome. Setting the policy to False means users never see the bookmark bar.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide whether to use this function.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c360c76ce57ad6bd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended","displayName":"Allow default search provider context menu search access","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider will be available.\r\n\r\nThe policy value is only appled when the DefaultSearchProviderEnabled policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c34d38f9a06dd01f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended","displayName":"Default search provider search URL","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURL specifies the URL of the search engine used during a default search. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nExample value: https://search.my.company/search?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c3128f556fb41801":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls","displayName":"URLs that will be granted access to video capture devices without prompt","description":"Setting the policy means you specify the URL list whose patterns get matched to the security origin of the requesting URL. A match grants access to video capture devices without prompt\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com/\r\nhttps://[*.]example.edu/","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c3ed248a123b0ad0":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_clipboardallowedforurlsdesc","displayName":"Allow clipboard on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"c38a23135a60f9ce":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings","displayName":"Settings for DevTools Generative AI Features (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_0","displayName":"Allow DevTools Generative AI Features and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_1","displayName":"Allow DevTools Generative AI Features without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_2","displayName":"Do not allow DevTools Generative AI Features.","description":null,"helpText":null}]},"c3d74a46892d34a6":{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate","displayName":"Internet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetzonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"c320ef74979b91ca":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate","displayName":"Local Machine Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlocalmachinezonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"c3b9f78e536810d9":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"c3879cbd30dad463":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"c3aaab672dbf05df":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallysignsecurechanneldatawhenpossible","displayName":"Domain Member Digitally Sign Secure Channel Data When Possible","description":"Domain member: Digitally sign secure channel data (when possible) This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. This setting determines whether or not the domain member attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain member will request signing of all secure channel traffic. If the Domain Controller supports signing of all secure channel traffic, then all secure channel traffic will be signed which ensures that it cannot be tampered with in transit. Default: Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_digitallysignsecurechanneldatawhenpossible"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"c3a12ce38c23da02":{"id":"device_vendor_msft_policy_config_localusersandgroups_configure","displayName":"Group Configuration","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"categoryId":"b86100f0-e4ae-4f93-9dae-dd253a96726f","categoryName":null,"options":null},"c3d6a6a0972ddbfc":{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled","displayName":"Hide App Launcher on Microsoft Edge new tab page","description":"By default, the App Launcher is shown every time a user opens a new tab page.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and App Launcher is there for users.\r\n\r\nIf you disable this policy, App Launcher doesn't appear and users won't be able to launch M365 apps from Microsoft Edge new tab page via the App Launcher.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c39354c16a3bdd47":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled","displayName":"Search for image enabled","description":"This policy lets you configure the Image Search feature in the right-click context menu.\r\n\r\nIf you enable or don't configure this policy, then the \"Search the web for image\" option will be visible in the context menu.\r\n\r\nIf you disable this policy, then the \"Search the web for image\" will not be visible in the context menu.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c31c61e07899bf3a":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication","description":"If enabled (or unset), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\r\n\r\nIf disabled, user-added TLS certificates from platform trust stores will not be used in path-building for TLS server authentication.","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c32532f9c3600434":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_newtabpagecompanylogobackplatecolor","displayName":"Set the company logo backplate color on the new tab page. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"c3f29db615baaabc":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled","displayName":"AutoLaunch Protocols Component Enabled","description":"Specifies whether the AutoLaunch Protocols component should be enabled. This component allows Microsoft to provide a list similar to that of the 'AutoLaunchProtocolsFromOrigins' (Define a list of protocols that can launch an external application from listed origins without prompting the user) policy, allowing certain external protocols to launch without prompt or blocking certain protocols (on specified origins). By default, this component is enabled.\r\n\r\nIf you enable or don't configure this policy, the AutoLaunch Protocols component is enabled.\r\n\r\nIf you disable this policy, the AutoLaunch Protocols component is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c301ac059e626706":{"id":"device_vendor_msft_policy_config_mixedreality_brightnessbuttondisabled","displayName":"Brightness Button Disabled","description":"This policy setting controls if pressing the brightness button changes the brightness or not. It only impacts brightness on HoloLens and not the functionality of the button when it's used with other buttons as combination for other purposes.","helpText":"","infoUrls":[],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_brightnessbuttondisabled_0","displayName":"Disabled","description":"Brightness can be changed with press of brightness button.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_brightnessbuttondisabled_1","displayName":"Enabled","description":"Brightness cannot be changed with press of brightness button.","helpText":null}]},"c39ac077f9f370c8":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_opendirectlyinapp","displayName":"Open Directly in Office Client Application","description":"This policy allows the admin to choose whether Office documents located on web servers open up directly in the App or go via the web browser","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_opendirectlyinapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_opendirectlyinapp_1","displayName":"Enabled","description":null,"helpText":null}]},"c3de5da5278697e1":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winprojexe174","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winprojexe174_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winprojexe174_1","displayName":"True","description":null,"helpText":null}]},"c349c316f776482b":{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo","displayName":"Exclude specific kinds of files from being uploaded","description":"This setting lets you enter keywords to prevent the OneDrive sync app (OneDrive.exe) from uploading certain files to OneDrive or SharePoint. You can enter complete names, such as \"setup.exe\" or use the asterisk (*) as a wildcard character to represent a series of characters. \r\n\r\nIf you enable this setting, the sync app doesn't upload new files that match the keywords you specified. No errors appear for the skipped files, and the files remain in the local OneDrive folder. The OneDrive sync app must be restarted after this setting is enabled for the setting to take effect. \r\n\r\nIf you disable or do not configure this setting, the sync app uploads all supported files in all synced folders.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo_1","displayName":"Enabled","description":null,"helpText":null}]},"c34cf3447eaad9c1":{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords","displayName":"Configure Windows Passwords","description":"Configures the use of passwords for Windows features","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#configurewindowspasswords"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords_0","displayName":"-Disallow passwords (Asymmetric credentials will be promoted to replace passwords on Windows features)","description":"-Disallow passwords (Asymmetric credentials will be promoted to replace passwords on Windows features)","helpText":null},{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords_1","displayName":"Allow passwords (Passwords continue to be allowed to be used for Windows features)","description":"Allow passwords (Passwords continue to be allowed to be used for Windows features)","helpText":null},{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords_2","displayName":"as per SKU and device capabilities. Windows 10 S devices will exhibit \"Disallow passwords\" default, and all other devices will default to \"Allow passwords\")","description":"as per SKU and device capabilities. Windows 10 S devices will exhibit \"Disallow passwords\" default, and all other devices will default to \"Allow passwords\")","helpText":null}]},"c37e12ec9e08bd90":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_name","displayName":"Rule name","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"c395305e8a4dc253":{"id":"osrecoverysettings_formatdisk","displayName":"Format disk","description":"By default, the primary disk is formatted. Or format all the partition","helpText":"","infoUrls":[],"categoryId":"71f79fa3-14c0-4df8-bf9c-8476e36ea755","categoryName":"Operating system settings","options":[{"id":"osrecoverysettings_formatdisk_0","displayName":"Format windows partition","description":null,"helpText":null},{"id":"osrecoverysettings_formatdisk_1","displayName":"Format all partition","description":null,"helpText":null}]},"c34d1d56c034fb44":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle_themes_name","displayName":"Path to Visual Style: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"c33f9291d080f172":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessnetworkpolicy","displayName":"Wireless Network (IEEE 802.11) Policies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wirelessnetworkpolicy"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessnetworkpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessnetworkpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"c3be28f13f1f7390":{"id":"user_vendor_msft_policy_config_admx_printing_printerdirectorysearchscope","displayName":"Default Active Directory path when searching for printers (User)","description":"Specifies the Active Directory location where searches for printers begin.\r\n\r\n The Add Printer Wizard gives users the option of searching Active Directory for a shared printer.\r\n\r\n If you enable this policy setting, these searches begin at the location you specify in the \"Default Active Directory path\" box. Otherwise, searches begin at the root of Active Directory.\r\n\r\n This setting only provides a starting point for Active Directory searches for printers. It does not restrict user searches through Active Directory.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-printerdirectorysearchscope"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_admx_printing_printerdirectorysearchscope_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_printerdirectorysearchscope_1","displayName":"Enabled","description":null,"helpText":null}]},"c385a980d54f6f49":{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflicks_1","displayName":"Prevent flicks (User)","description":"Makes pen flicks and all related features unavailable.\r\n\r\nIf you enable this policy, pen flicks and all related features are unavailable. This includes: pen flicks themselves, pen flicks training, pen flicks training triggers in Internet Explorer, the pen flicks notification and the pen flicks tray icon.\r\n\r\nIf you disable or do not configure this policy, pen flicks and related features are available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventflicks-1"],"categoryId":"b524d6e2-75bc-4409-ae3d-07605707d7ee","categoryName":"Pen UX Behaviors","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflicks_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflicks_1_1","displayName":"Enabled","description":null,"helpText":null}]},"c363ede9926e19a7":{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbsdbonnetworkfolders","displayName":"Turn off the caching of thumbnails in hidden thumbs.db files (User)","description":"Turns off the caching of thumbnails in hidden thumbs.db files.\r\n\r\nThis policy setting allows you to configure File Explorer to cache thumbnails of items residing in network folders in hidden thumbs.db files.\r\n\r\nIf you enable this policy setting, File Explorer does not create, read from, or write to thumbs.db files.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer creates, reads from, and writes to thumbs.db files.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-thumbnails#admx-thumbnails-disablethumbsdbonnetworkfolders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbsdbonnetworkfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbsdbonnetworkfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"c3aade1721144ac9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo","displayName":"Prevent app promotions from appearing on the new tab page (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo_1","displayName":"Enabled","description":null,"helpText":null}]},"c3bca109f0e2031d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowed","displayName":"Allow or deny screen capture (User)","description":"If enabled or not configured (default), a Web page can use\r\nscreen-share APIs (e.g., getDisplayMedia() or the Desktop Capture extension API)\r\nto prompt the user to select a tab, window or desktop to capture.\r\n\r\nWhen this policy is disabled, any calls to screen-share APIs will fail\r\nwith an error; however this policy is not considered (and a site will be\r\nallowed to use screen-share APIs) if the site matches an origin pattern in\r\nany of the following policies:\r\nScreenCaptureAllowedByOrigins,\r\nWindowCaptureAllowedByOrigins,\r\nTabCaptureAllowedByOrigins,\r\nSameOriginTabCaptureAllowedByOrigins.\r\n","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"c315b3c407c8a28f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (User)","description":"This policy enables or disables the Battery Saver Mode setting.\r\nOn Chrome, this setting makes it so that frame rate is throttled to lower power consumption. If this policy is unset, the end user can control this setting in chrome://settings/performance.\r\nOn ChromeOS, this setting makes it so that frame rate and CPU frequency are throttled, backlights are dimmed, and Android is put in Battery Saver Mode. On devices with multiple CPUs, some CPUs will be turned off.\r\nThe different levels are:\r\nDisabled (0): Battery Saver Mode will be disabled.\r\nEnabledBelowThreshold (1): Battery Saver Mode will be enabled when the device is on battery power and battery level is low.\r\nEnabledOnBattery (2): This value is deprecated as of M121. From M121 onwards, values will be treated as EnabledBelowThreshold.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"c3149b4e201a6fee":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins","displayName":"Allow screen capture without prior user gesture (User)","description":"For security reasons, the\r\ngetDisplayMedia() web API requires\r\na prior user gesture (\"transient activation\") to be called or will otherwise\r\nfail.\r\n\r\nWith this policy set, admins can specify origins on which this API can be\r\ncalled without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is\r\nnot an accepted value for this policy.\r\n\r\nIf this policy is unset, all origins will require a prior user gesture to call\r\nthis API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"c3ccf44deb778158":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites","displayName":"Allow JavaScript optimization on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites for which\r\nadvanced JavaScript optimizations are enabled.\r\n\r\nFor detailed information on valid site url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site\r\ngranularity (eTLD+1). A policy set for only subdomain.site.com will not\r\ncorrectly apply to site.com or subdomain.site.com since they both resolve to\r\nthe same eTLD+1 (site.com) for which there is no policy. In this case, policy\r\nmust be set on site.com to apply correctly for both site.com and\r\nsubdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level\r\norigin url alone, so e.g. if site-one.com is listed in the JavaScriptOptimizerAllowedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript optimizations\r\nenabled, but site-two.com will use the policy from DefaultJavaScriptOptimizerSetting, if set, or default to JavaScript\r\noptimizations enabled. Blocklist entries have higher priority than allowlist\r\nentries, which in turn have higher priority than the configured default value.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptOptimizerSetting applies to the site, if set, otherwise\r\nJavascript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"c39d7036d4601c40":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings","displayName":"Settings for enhanced autofill (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_0","displayName":"Allow enhanced autofill and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_1","displayName":"Allow enhanced autofill without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_2","displayName":"Do not allow enhanced autofill.","description":null,"helpText":null}]},"c355ebf2ab68d88d":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a","displayName":"Include local directory path when uploading files to a server (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3","displayName":"Disable","description":null,"helpText":null}]},"c312959fbc272da9":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"c336df0b5c0a5a49":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"c3a76c21e2e9120a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue","displayName":"Set application locale (User)","description":"Configures the application locale in Microsoft Edge and prevents users from changing the locale.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified locale. If the configured locale isn't supported, 'en-US' is used instead.\r\n\r\nIf you disable or don't configure this setting, Microsoft Edge uses either the user-specified preferred locale (if configured) or the fallback locale 'en-US'.\r\n\r\nExample value: en","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_1","displayName":"Enabled","description":null,"helpText":null}]},"c3319cf52783bc0a":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled","displayName":"Enable AutoFill for addresses (User)","description":"Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills in address information, nor does it save additional address information that the user might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for addresses in the user interface.\r\n\r\nNote that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won't suggest or AutoFill any previous entries.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c329ffd2de44b8ec":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates","displayName":"Prompt the user to select a certificate when multiple certificates match (User)","description":"This policy controls whether the user is prompted to select a client certificate when more than one certificate matches 'AutoSelectCertificateForUrls' (Automatically select client certificates for these sites).\r\nIf this policy is set to True, the user is prompted to select a client certificate whenever the auto-selection policy matches multiple certificates.\r\nIf this policy is set to False or not set, the user may only be prompted when no certificate matches the auto-selection.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"c32ad1323e0d979c":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery","displayName":"Disable DIAL protocol for cast device discovery (User)","description":"Enable this policy to disable the DIAL (Discovery And Launch) protocol for cast device discovery. (If EnableMediaRouter is disabled, this policy will have no effect).\r\n\r\nEnable this policy to disable DIAL protocol.\r\n\r\nBy default, Cast device discovery will use DIAL protocol.","helpText":"","infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_1","displayName":"Enabled","description":null,"helpText":null}]},"c3504a929b446976":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode (User)","description":"This policy lets you specify a list of extension IDs that must be explicitly allowed by the user to run in InPrivate mode in order to enable InPrivate browsing.\r\n\r\nIf users do not allow all listed extensions to run in InPrivate mode, they will be unable to navigate using InPrivate.\r\n\r\nIf any extension in the list is not installed, InPrivate navigation is blocked.\r\n\r\nThis policy only applies when InPrivate mode is enabled. If InPrivate mode is disabled using the InPrivateModeAvailability policy, this policy has no effect.\r\n\r\nExample value:\r\n\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_1","displayName":"Enabled","description":null,"helpText":null}]},"c336e932f203f15e":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab","displayName":"Set the default New Tab Page feed tab to Work or Discover (User)","description":"This policy sets the default feed tab on the New Tab Page to Work or Discover.\r\n\r\nIf you set this policy to 'Work' (0) or don't configure this policy, Microsoft Edge sets the default feed tab to Work.\r\n\r\nIf you set this policy to 'Discover' (1), Microsoft Edge sets the default feed tab to Discover.\r\n\r\nThis policy only takes effect when 'ConfigureNTPFeedTabVisibility' (Configure whether the Discover or Work feed tabs are shown on the New Tab Page.) is set to 'EnableBothWorkDiscover' (0) or is not configured. If only one tab is visible, this policy has no effect.\r\n\r\nPolicy options mapping:\r\n\r\n* NTPDefaultFeedTabWork (0) = Work\r\n\r\n* NTPDefaultFeedTabDiscover (1) = Discover\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_1","displayName":"Enabled","description":null,"helpText":null}]},"c3646ae33e7ad2f7":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled","displayName":"Control use of the Headless Mode (User)","description":"This policy setting lets you decide whether users can launch Microsoft Edge in headless mode.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge allows use of the headless mode.\r\n\r\nIf you disable this policy, Microsoft Edge denies use of the headless mode.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c3c6089073d9e947":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled","displayName":"Configure address bar editing (User)","description":"If you enable or don't configure this policy, users can change the URL in the address bar.\r\n\r\nIf you disable this policy, it prevents users from changing the URL in the address bar.\r\n\r\nNote: This policy doesn't prevent the browser from navigating to any URL. Users can still navigate to any URL by using the search option in the default New Tab Page, or using any link that leads to a web search engine. To ensure that users can only go to sites you expect, consider configuring the following policies in addition to this policy:\r\n\r\n- 'NewTabPageLocation' (Configure the new tab page URL)\r\n\r\n- 'HomepageLocation' (Configure the home page URL)\r\n\r\n- 'HomepageIsNewTabPage' (Set the new tab page as the home page)\r\n\r\n- 'URLBlocklist' (Block access to a list of URLs) and 'URLAllowlist' (Define a list of allowed URLs) to scope the pages that browser can navigate to.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c318a87a2024c8c1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samisouthernnorway","displayName":"Sami, Southern (Norway) (User)","description":"Enables the editing language \"Sami, Southern (Norway)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samisouthernnorway_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_samisouthernnorway_1","displayName":"Enabled","description":null,"helpText":null}]},"c358cb9808627a6a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_l_workflowfriendly471","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"c3552ee830c64c72":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_l_allowsubfolders301","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_l_allowsubfolders301_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_l_allowsubfolders301_1","displayName":"True","description":null,"helpText":null}]},"c31d4a1c4ae26c04":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc06_l_pathcolon06","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"c381d95cc0cb986e":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableembeddedfiles","displayName":"Disable embedded files (User)","description":"To disable the ability to embed files on a OneNote page, so people cannot transmit files that might not be caught by anti-virus software, etc. Note: This policy will only limit embedded files in the OneNote UI, if a page has an embedded file OneNote will still sync and replicate the embedded files in the file system.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableembeddedfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableembeddedfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"c34ee4740a960fa3":{"id":"user_vendor_msft_policy_config_outlk16v10~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disablecalendarsearchagendaview","displayName":"Do not allow Calendar search agenda view (User)","description":"This policy setting allows you to prevent agenda view for Calendar search.\r\n\r\nIf you enable this policy setting, Calendar search will default to list view.\r\n\r\nIf you disable or do not configure this policy setting, it will default to agenda view.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v10~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disablecalendarsearchagendaview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v10~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_disablecalendarsearchagendaview_1","displayName":"Enabled","description":null,"helpText":null}]},"c3a6bcbc73fa29c0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_addpeopleiemailtothesafesenderslist","displayName":"Add e-mail recipients to users' Safe Senders Lists (User)","description":"This policy setting controls whether recipients' e-mail addresses are automatically added to the user's Safe Senders List in Microsoft Outlook. Sometimes users will send e-mail messages to request that they be taken off a mailing list. If the e-mail recipient is then automatically added to the Safe Senders List, future e-mail messages from that address will no longer be sent to the users Junk E-mail folder, even if it would otherwise be considered junk. \r\n\r\nIf you enable this policy setting, all recipients of outgoing messages are automatically added to users' Safe Senders Lists. If users respond to junk e-mail senders while this policy setting is Enabled, all future junk e-mail from the same address will be considered safe. \r\n\r\nIf you disable this policy setting, recipients of outgoing messages are not automatically added to the Safe Senders List. Users must explicitly add addresses to the list. \r\n\r\nIf you do not configure this policy setting, recipients of outgoing messages are not added automatically to individual users' Safe Senders Lists. However, users can change this configuration in the Outlook user interface.","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_addpeopleiemailtothesafesenderslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_addpeopleiemailtothesafesenderslist_1","displayName":"Enabled","description":null,"helpText":null}]},"c3effbfe4e212fe8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats","displayName":"Support the following message formats: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats_1","displayName":"S/MIME","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats_2","displayName":"Exchange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats_20","displayName":"Fortezza","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats_3","displayName":"S/MIME and Exchange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats_21","displayName":"S/MIME and Fortezza","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats_22","displayName":"Exchange and Fortezza","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_messageformats_l_supportthefollowingmessageformats_23","displayName":"S/MIME, Exchange, and Fortezza","description":null,"helpText":null}]},"c3eaa7e8bf63f9e0":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation","displayName":"Stop checking for table alt text accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that tables contain alt text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that tables contain alt text.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for alternative text and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"c3499330241188f5":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays","displayName":"Days (User)","description":"Sets the label for days.\r\n \r\nIf you enable this setting, days are displayed with the specified label.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjdays_1","displayName":"Enabled","description":null,"helpText":null}]},"c3aed1e540d3fee4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_l_datecolon85","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"c34e883892482b39":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]},"c3184bfb80cd4b96":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingstylesusedfrequently","displayName":"Stop checking to ensure styles have been used frequently (User)","description":"This policy setting prevents the Accessibility Checker from checking to ensure that documents using styles have used them frequently enough to accurately represent the document's content structure.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from checking to ensure that documents using styles have used them frequently enough to accurately represent the document's content structure.\r\n\r\nIf you disable or do not configure this policy setting, the frequency of style usage will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingstylesusedfrequently_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingstylesusedfrequently_1","displayName":"Enabled","description":null,"helpText":null}]},"c33a1036a4a32550":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_closingstyletoletterclosings","displayName":"Closing style to letter closings (User)","description":"This policy setting allows you to set the \"Closing style to letter closings\" option found in Word Options | Proofing | AutoCorrect Options... | AutoFormat As You Type.\r\n\r\nIf you enable this policy setting, \"Closing style to letter closings\" will be set.\r\n\r\nIf you disable or do not configure this policy setting, \"Closing style to letter closings\" will not be set.","helpText":"","infoUrls":[],"categoryId":"62492a4c-fd70-4275-ae5e-d60e200e3553","categoryName":"Apply as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_closingstyletoletterclosings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_closingstyletoletterclosings_1","displayName":"Enabled","description":null,"helpText":null}]},"c3b3ce80f8b3031a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_datecolon57","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/c4.json b/public/intune-definitions/c4.json new file mode 100644 index 000000000000..568f3e9290f4 --- /dev/null +++ b/public/intune-definitions/c4.json @@ -0,0 +1 @@ +{"c4640e6ea1d0d58f":{"id":"ade_setupassistant_osshowcase","displayName":"OS showcase","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_osshowcase_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_osshowcase_1","displayName":"Show","description":null,"helpText":null}]},"c4b2f85ce916f1ff":{"id":"com.android.devicerestrictionpolicy.passwordminimumlength","displayName":"Minimum password length","description":"Enter the minimum number of digits or characters the password must have, between 4 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (4-16)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"c432bea332124cde":{"id":"com.apple.applicationaccess_allowremotescreenobservation","displayName":"Allow Remote Screen Observation","description":"If false, disables remote screen observation by the Classroom app. If Allow Screen Shot is set to false, the Classroom app doesn't observe remote screens. Required a supervised device until iOS 13 and macOS 10.15. Available in iOS 12 and later, and macOS 10.14.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowremotescreenobservation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowremotescreenobservation_true","displayName":"True","description":null,"helpText":null}]},"c48ef45ad6b2e35a":{"id":"com.apple.extensiblesso_platformsso_unlockpolicy","displayName":"Unlock Policy","description":"The policy to apply when using Platform SSO at screensaver unlock. Applies when 'AuthenticationMethod' is `Password`.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"c418104abfd92987":{"id":"com.apple.fileproviderd_managementallowsexternalvolumesyncing","displayName":"Management Allows External Volume Syncing","description":"If `false`, the device only allows File Provider extension volume synchronization for the system \"home\" volume and any data separated volume, and prevents synchronization with any other volumes. If `true``, the device allows File Provider extension volume synchronization for the system \"home\" volume, any data separated volume, and any encrypted APFS volumes (on either internal or external media).","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":[{"id":"com.apple.fileproviderd_managementallowsexternalvolumesyncing_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.fileproviderd_managementallowsexternalvolumesyncing_true","displayName":"Allowed","description":null,"helpText":null}]},"c4289e3307b3cd4a":{"id":"com.apple.managedclient.preferences_blockexternalsync","displayName":"Block external sync","description":"Prevents the sync app from syncing libraries and folders shared from other organizations.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#blockexternalsync"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_blockexternalsync_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_blockexternalsync_true","displayName":"True","description":null,"helpText":null}]},"c43ecd241d05c784":{"id":"com.apple.managedclient.preferences_channelname","displayName":"Update channel","description":"Specifies the channel to receive updates. The most stable channel is the Current Channel, which is recommended for the majority of your fleet. Users subscribed to the Preview Channel will receive production-quality updates a week before Current Channel users. Users subscribed to the Beta Channel will receive unsupported nightly builds that are designed for testing.","helpText":null,"infoUrls":["https://support.microsoft.com/office/update-office-for-mac-automatically-bfd1e497-c24d-4754-92ab-910a4074d7c1"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_channelname_2","displayName":"Current Channel (Deferred)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_channelname_3","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_channelname_4","displayName":"Current Channel (Monthly)","description":null,"helpText":null}]},"c497a377f1ea1808":{"id":"com.apple.managedclient.preferences_enhancesecuritymodeindicatoruienabled","displayName":"Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge","description":"This policy lets you manage whether the indicator User Interface (UI) for enhanced security mode is shown or not when ESM is turned on.\n\nIf you enable or don't configure this policy, the indicator UI is on.\n\nIf you disable this policy, the indicator UI is off.\n\nNote: If this policy is used, only the indicator User Interface experience is supressed - ESM is still turned on. For more information, see the \"EnhanceSecurityMode\" policy.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enhancesecuritymodeindicatoruienabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enhancesecuritymodeindicatoruienabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enhancesecuritymodeindicatoruienabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c47faf40deb76450":{"id":"com.apple.managedclient.preferences_exclusions_item_name","displayName":"Name","description":"Process name, either or full path or file name, wildcards supported","helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"c4580bf2c06cac64":{"id":"com.apple.managedclient.preferences_importshortcuts","displayName":"Allow importing of shortcuts","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\n\nIf you disable this policy, Shortcuts aren't imported on first run.\n\nIf you don’t configure this policy, Shortcuts are imported on first run.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\n\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#importshortcuts"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_importshortcuts_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_importshortcuts_true","displayName":"Enabled","description":null,"helpText":null}]},"c4e7b98d975bacc6":{"id":"com.apple.managedclient.preferences_precisegeolocationallowedforurls","displayName":"Allow precise geolocation on these sites","description":"This policy lets you specify a list of URL patterns for sites that are allowed to access the user's high-accuracy geolocation without prompting for permission.\n\nIf you leave this policy unset, DefaultGeolocationSetting applies to all sites (if configured). Otherwise, the user's personal setting is used.\n\nFor information about valid url patterns, see https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format. Wildcards (*) are supported.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#precisegeolocationallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c4cfada71245bf2c":{"id":"com.apple.mcx.filevault2_userentersmissinginfo","displayName":"User Enters Missing Info","description":"If true, enables a prompt for missing user name or password fields.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":[{"id":"com.apple.mcx.filevault2_userentersmissinginfo_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_userentersmissinginfo_true","displayName":"True","description":null,"helpText":null}]},"c4b05234c4395faf":{"id":"device_vendor_msft_pkcscertificate_subjectnameformat","displayName":"Subject name format","description":"CN={{UserName}},E={{EmailAddress}},OU=EnterpriseUsers,O=Contoso Corporation,L=Redmond,ST=WA,C=US\\nor\\nCN={{AAD_Device_ID}},E={{EmailAddress}},OU=EnterpriseUsers,O=Contoso Corporation,L=Redmond,ST=WA,C=US","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure"],"categoryId":"dbbe5cb3-fe2e-4d28-8918-24d075a91676","categoryName":"PKCS certificate","options":null},"c44e72622a47f467":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_nochanges3","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_nochanges3_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_efsrecovery_cse_nochanges3_1","displayName":"True","description":null,"helpText":null}]},"c47636e41a6ce2b5":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions","displayName":"Process Mitigation Options","description":"\r\n This security feature provides a means to override individual process MitigationOptions settings. This can be used to enforce a number of security policies specific to applications. The application name is specified as the Value name, including extension. The Value is specified as a bit field with a series of flags in particular positions. Bits can be set to either 0 (setting is forced off), 1 (setting is forced on), or ? (setting retains its existing value prior to GPO evaluation). The recognized bit locations are:\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE (0x00000001)\r\n Enables data execution prevention (DEP) for the child process\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_DEP_ATL_THUNK_ENABLE (0x00000002)\r\n Enables DEP-ATL thunk emulation for the child process. DEP-ATL thunk emulation causes the system to intercept NX faults that originate from the Active Template Library (ATL) thunk layer.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_SEHOP_ENABLE (0x00000004)\r\n Enables structured exception handler overwrite protection (SEHOP) for the child process. SEHOP blocks exploits that use the structured exception handler (SEH) overwrite technique.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON (0x00000100)\r\n The force Address Space Layout Randomization (ASLR) policy forcibly rebases images that are not dynamic base compatible by acting as though an image base collision happened at load time. If relocations are required, images that do not have a base relocation section will not be loaded.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_ON (0x00010000)\r\n PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF (0x00020000)\r\n The bottom-up randomization policy, which includes stack randomization options, causes a random location to be used as the lowest user address.\r\n\r\n For instance, to enable PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE and PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON, disable PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF, and to leave all other options at their default values, specify a value of:\r\n ???????????????0???????1???????1\r\n\r\n Setting flags not specified here to any value other than ? results in undefined behavior.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-processmitigationoptions"],"categoryId":"5dcea340-0469-4f43-b270-a49ed0597201","categoryName":"Mitigation Options","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"c4a840f7b6de0485":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_pingurgencymode","displayName":"Use urgent mode when pinging domain controllers","description":"This policy setting configures whether the computers to which this setting is applied are more aggressive when trying to locate a domain controller (DC).\r\n\r\nWhen an environment has a large number of DCs running both old and new operating systems, the default DC locator discovery behavior may be insufficient to find DCs running a newer operating system. This policy setting can be enabled to configure DC locator to be more aggressive about trying to locate a DC in such an environment, by pinging DCs at a higher frequency. Enabling this setting may result in additional network traffic and increased load on DCs. You should disable this setting once all DCs are running the same OS version.\r\n\r\nThe allowable values for this setting result in the following behaviors:\r\n\r\n1 - Computers will ping DCs at the normal frequency.\r\n2 - Computers will ping DCs at the higher frequency.\r\n\r\nTo specify this behavior, click Enabled and then enter a value. The range of values is from 1 to 2.\r\n\r\nIf you do not configure this policy setting, it is not applied to any computers, and computers use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-pingurgencymode"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_pingurgencymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_pingurgencymode_1","displayName":"Enabled","description":null,"helpText":null}]},"c489002d0df2f716":{"id":"device_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_2","displayName":"Prevent restoring local previous versions","description":"This policy setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a local file.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a local file. If the user clicks the Restore button, Windows attempts to restore the file from the local disk.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a local file.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablelocalrestore-2"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"device_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_2_1","displayName":"Enabled","description":null,"helpText":null}]},"c423638f25f4bad7":{"id":"device_vendor_msft_policy_config_admx_smartcard_x509hintsneeded","displayName":"Allow user name hint","description":"This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to enter his or her user name or user name and domain, thereby associating a certificate with that user.\r\n\r\nIf you enable this policy setting then an optional field that allows a user to enter their user name or user name and domain will be displayed.\r\n\r\nIf you disable or do not configure this policy setting, an optional field that allows users to enter their user name or user name and domain will not be displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-x509hintsneeded"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_x509hintsneeded_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_x509hintsneeded_1","displayName":"Enabled","description":null,"helpText":null}]},"c42c08161f83b64f":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_start_program_2_ts_workdir","displayName":"Working Directory","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":null},"c494e7f6ed8b4f7c":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_clockadjustmentauditlimit","displayName":"ClockAdjustmentAuditLimit","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"c4ed3dd7b48e8a28":{"id":"device_vendor_msft_policy_config_cellular_letappsaccesscellulardata_forcedenytheseapps","displayName":"Let Apps Access Cellular Data Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cellular#letappsaccesscellulardata_forcedenytheseapps"],"categoryId":"d5d99ca9-9995-4724-bc46-fd07f362898c","categoryName":"Cellular","options":null},"c4141fda1b815e74":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks","displayName":"Enable online OCSP/CRL checks","description":"Setting the policy to True means online OCSP/CRL checks are performed.\r\n\r\nSetting the policy to False or leaving it unset means Google Chrome won't perform online revocation checks in Google Chrome 19 and later.\r\n\r\nNote: OCSP/CRL checks provide no effective security benefit.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks_1","displayName":"Enabled","description":null,"helpText":null}]},"c4639146bba0d91d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_maxconnectionsperproxy","displayName":"Maximal number of concurrent connections to the proxy server: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c4caeec544eb3be0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promotionaltabsenabled","displayName":"Enable showing full-tab promotional content","description":"Setting the policy to True or leaving it unset lets Google Chrome show users product information as full-tab content.\r\n\r\nSetting the policy to False prevents Google Chrome from showing product information as full-tab content.\r\n\r\nSetting the policy controls the presentation of the welcome pages that help users sign in to Google Chrome, set Google Chrome as users' default browser, or otherwise inform them of product features.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promotionaltabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promotionaltabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c427a90fa545f426":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow","displayName":"Set the time interval for relaunch","description":"Specify a target time window for the end of the relaunch notification period.\r\n\r\nUsers are notified of the need for a browser relaunch or device restart based on the RelaunchNotification and RelaunchNotificationPeriod policy settings. Browsers and devices are forcibly restarted at the end of the notification period when the RelaunchNotification policy is set to 'Required'. This RelaunchWindow policy can be used to defer the end of the notification period so that it falls within a specific time window.\r\n\r\nIf this policy is not set, the default target time window for Google Chrome OS is between 2 AM and 4 AM. The default target time window for Google Chrome is the whole day (i.e., the end of the notification period is never deferred).\r\n\r\nNote: Though the policy can accept multiple items in entries, all but the first item are ignored.\r\nWarning: Setting this policy may delay application of software updates.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RelaunchWindow for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"entries\": [\r\n {\r\n \"start\": {\r\n \"hour\": 2,\r\n \"minute\": 15\r\n },\r\n \"duration_mins\": 240\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_1","displayName":"Enabled","description":null,"helpText":null}]},"c401819246ab133d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting","displayName":"Default notification setting","description":"Setting the policy to 1 lets websites display desktop notifications. Setting the policy to 2 denies desktop notifications.\r\n\r\nLeaving it unset means AskNotifications applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"c4a4e2c7fa0c3352":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin","displayName":"Minimum TLS version to fallback to","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_1","displayName":"Enabled","description":null,"helpText":null}]},"c4f739e3c4848615":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_fileordirectorypickerwithoutgestureallowedfororiginsdesc","displayName":"Allow file or directory picker APIs to be called without prior user gesture (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c458e3e771b6009e":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto","displayName":"To:","description":"","helpText":"","infoUrls":[],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_23","displayName":"11 PM","description":null,"helpText":null}]},"c458be2408fe45d0":{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch","displayName":"Configure System Guard Launch","description":"Secure Launch configuration: 0 - Unmanaged, configurable by Administrative user, 1 - Enables Secure Launch if supported by hardware, 2 - Disables Secure Launch.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#configuresystemguardlaunch"],"categoryId":"992a8a1e-428e-41cb-948e-4e5da86105fa","categoryName":"Device Guard","options":[{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_0","displayName":"Unmanaged Configurable by Administrative user","description":"Unmanaged Configurable by Administrative user","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_1","displayName":"Unmanaged Enables Secure Launch if supported by hardware","description":"Unmanaged Enables Secure Launch if supported by hardware","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_2","displayName":"Unmanaged Disables Secure Launch","description":"Unmanaged Disables Secure Launch","helpText":null}]},"c469500ea51376ea":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol","displayName":"Allow only approved domains to use the TDC ActiveX control","description":"This policy setting controls whether or not the user is allowed to run the TDC ActiveX control on websites.\n\nIf you enable this policy setting, the TDC ActiveX control will not run from websites in this zone.\n\nIf you disable this policy setting, the TDC Active X control will run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"c4525141bf78def3":{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection","displayName":"Allow Offline Maps Download Over Metered Connection","description":"Allows the download and update of map data over metered connections. After the policy is applied, you can verify the settings in the user interface in System > Offline Maps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Maps#allowofflinemapsdownloadovermeteredconnection"],"categoryId":"9a7843b4-6ec1-47c4-906b-75b8866e97c2","categoryName":"Maps","options":[{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_0","displayName":"Disabled. Force disable auto-update over metered connection.","description":"Disabled. Force disable auto-update over metered connection.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_1","displayName":"Enabled. Force enable auto-update over metered connection.","description":"Enabled. Force enable auto-update over metered connection.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_65535","displayName":"Not configured. User's choice.","description":"Not configured. User's choice.","helpText":null}]},"c49f9cce5719c710":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action to take on startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"c41b63827df92745":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_roamingprofilelocation","displayName":"Set the roaming profile directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c4460de19b7519af":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_2","displayName":"Don't allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_3","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},"c49b64d9632a3ec3":{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended","displayName":"Set the background tab inactivity timeout for sleeping tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure sleeping tabs) is enabled or is not configured and the user has enabled the sleeping tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 30Seconds (30) = 30 seconds of inactivity\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c4e29556c4376d22":{"id":"device_vendor_msft_policy_config_power_energysaverbatterythresholdpluggedin","displayName":"Energy Saver Battery Threshold Plugged In","description":"This policy setting allows you to specify battery charge level at which Energy Saver is turned on. If you enable this policy setting, you must provide a percent value, indicating the battery charge level. Energy Saver will be automatically turned on at (and below) the specified level. If you disable or do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#energysaverbatterythresholdpluggedin"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":null},"c4bc1270aeffa578":{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin","displayName":"Specify the system sleep timeout (plugged in)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep.\n\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep.\n\nIf you disable or do not configure this policy setting, users control this setting.\n\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-standbytimeoutpluggedin"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},"c406c902a776d3a5":{"id":"device_vendor_msft_policy_config_system_limitdumpcollection","displayName":"Limit Dump Collection","description":"This policy setting limits the type of dumps that can be collected when more information is needed to troubleshoot a problem. These dumps are not sent unless we have permission to collect optional diagnostic data. By enabling this policy setting, Windows Error Reporting is limited to sending kernel mini dumps and user mode triage dumps only. If you disable or do not configure this policy setting, we may occasionally collect full or heap dumps if the user has opted to send optional diagnostic data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#limitdumpcollection"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_limitdumpcollection_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_limitdumpcollection_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"c43ac44c5e98d7ba":{"id":"device_vendor_msft_scepcertificate_scepserverurls","displayName":"SCEP Server URLs","description":"Add one or more URLs for the NDES Server that issues certificates through SCEP.","helpText":"","infoUrls":[],"categoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","categoryName":"SCEP certificate","options":null},"c47feb58e294763d":{"id":"device_vendor_msft_windowsadvancedthreatprotection_onboarding","displayName":"Onboarding (Device)","description":"Set Windows Defender Advanced Threat Protection Onboarding blob and initiate onboarding to Windows Defender Advanced Threat Protection","helpText":null,"infoUrls":[],"categoryId":"577d5951-fc56-4906-90bc-2c508c6611ad","categoryName":"Microsoft Defender for Endpoint","options":null},"c49047876e95470a":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_certificatethumbprints","displayName":"Certificate Thumbprints","description":"This policy setting allows certain device level Root Certificates to be shared with the Microsoft Defender Application Guard container. If you enable this setting, certificates with a thumbprint matching the ones specified will be transferred into the container. Multiple certificates can be specified by using a comma to separate the thumbprints for each certificate you want to transfer. Here's an example: b4e72779a8a362c860c36a6461f31e3aa7e58c14,1b1d49f06d2a697a544a1059bd59a7b058cda924. If you disable or don’t configure this setting, certificates are not shared with the Microsoft Defender Application Guard container.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":null},"c4d3a1651bd3f538":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirdomtrusts","displayName":"Active Directory Domains and Trusts (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-activedirdomtrusts"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirdomtrusts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirdomtrusts_1","displayName":"Enabled","description":null,"helpText":null}]},"c4b3af0d2946dc63":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_logicalmappeddrives","displayName":"Logical and Mapped Drives (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-logicalmappeddrives"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_logicalmappeddrives_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_logicalmappeddrives_1","displayName":"Enabled","description":null,"helpText":null}]},"c4db74a8252f2c3d":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_gp","displayName":"Windows Firewall with Advanced Security (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-windowsfirewall-gp"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_gp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_gp_1","displayName":"Enabled","description":null,"helpText":null}]},"c4717253841b929e":{"id":"user_vendor_msft_policy_config_admx_touchinput_touchinputoff_1","displayName":"Turn off Tablet PC touch input (User)","description":"Turn off Tablet PC touch input\r\n\r\nTurns off touch input, which allows the user to interact with their computer using their finger.\r\n\r\nIf you enable this setting, the user will not be able to produce input with touch. They will not be able to use touch input or touch gestures such as tap and double tap, the touch pointer, and other touch-specific features.\r\n\r\nIf you disable this setting, the user can produce input with touch, by using gestures, the touch pointer, and other-touch specific features.\r\n\r\nIf you do not configure this setting, touch input is on by default.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-touchinput#admx-touchinput-touchinputoff-1"],"categoryId":"abf781d7-1179-4f24-8d01-5611db14eddc","categoryName":"Touch Input","options":[{"id":"user_vendor_msft_policy_config_admx_touchinput_touchinputoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_touchinput_touchinputoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},"c4c1562dd628d595":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel4","displayName":"Site Name 5 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"c469faf284d62445":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled","displayName":"Allow Basic authentication for HTTP (User)","description":"Setting the policy to Enabled or leaving it unset will allow Basic authentication challenges received over non-secure HTTP.\r\n\r\nSetting the policy to Disabled forbids non-secure HTTP requests from using the Basic authentication scheme; only secure HTTPS is allowed.\r\n\r\nThis policy setting is ignored (and Basic is always forbidden) if the AuthSchemes policy is set and does not include Basic.","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c4861f7356a47fda":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability","displayName":"Print PDF as Image Available (User)","description":"Controls how Google Chrome makes the Print as image option available on Microsoft® Windows® and macOS when printing PDFs.\r\n\r\nWhen printing a PDF on Microsoft® Windows® or macOS, sometimes print jobs need to be rasterized to an image for certain printers to get correct looking output.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will make the Print as image option available in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome the Print as image option will not be available to users in Print Preview and PDFs will be printed as usual without being rasterized to an image before being sent to the destination.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"c4f31ee71fd9a3c6":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"c412f32723fe5c5b":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads (User)","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowautomaticpromptingforfiledownloads"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"c404bd95265bc6e7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory","displayName":"Set download directory (User)","description":"Configures the directory to use when downloading files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified one or chosen to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\r\n\r\nIf you set an invalid path, Microsoft Edge will default to the user's default download directory.\r\n\r\nIf the folder specified by the path doesn't exist, the download will trigger a prompt that asks the user where they want to save their download.\r\n\r\nExample value: \r\n Linux-based OSes (including Mac): /home/${user_name}/Downloads\r\n Windows: C:\\Users\\${user_name}\\Downloads","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"c4fee312b00a8ae9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_imagesallowedforurlsdesc","displayName":"Allow images on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"c441049bb892ff5b":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkblockedforurls_localnetworkblockedforurlsdesc","displayName":"Block sites from making network requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"c4596af6f9b6b89d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffpresenceintegration","displayName":"Turn off presence integration (User)","description":"This policy setting allows you to turn off instant messaging (IM) presence integration for Microsoft Office applications. \r\n\r\nIf you enable this policy, setting IM presence icons will not be displayed and presence integration will be turned off for Office applications.\r\n\r\nIf you disable or do not configure this policy setting, IM presence icons will be displayed and presence integration will be turned on for Office applications.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffpresenceintegration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffpresenceintegration_1","displayName":"Enabled","description":null,"helpText":null}]},"c42862472ddaaaee":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy5_l_placesbarname217","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"c4d37e5d59db5c55":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyspd","displayName":"Disallow in SharePoint Designer (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyspd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyspd_1","displayName":"True","description":null,"helpText":null}]},"c4bac41be0103137":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_l_workflowpath","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"c4c0cb43fadbb0be":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesagave","displayName":"Web Add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesagave_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesagave_1","displayName":"True","description":null,"helpText":null}]},"c4627cc14d612b27":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffofficeinapplicationguard","displayName":"Don't use Application Guard with Office. (User)","description":"This policy setting allows you to control whether Office apps use Application Guard to isolate untrusted documents.\r\n\r\nIf you enable this policy setting, Office apps won't use Application Guard to isolate untrusted documents even if the device is configured to use Application Guard. Instead, Office will use Protected View to isolate untrusted documents.\r\n\r\nNote: You should consider enabling this policy setting if you want to stop Office apps from using Application Guard without impacting the use of Application Guard with other applications.\r\n\r\nIf you disable or don't configure this policy settings, Office apps will use Application Guard to isolate untrusted documents. The device must be configured to use Application Guard and the user must be licensed to use Application Guard.","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffofficeinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffofficeinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"c40c590dbe20554d":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_addonenoteicontonotificationarea","displayName":"Add OneNote icon to notification area (User)","description":"Checks/Unchecks the option ''Place OneNote icon in the notification area of the taskbar''.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_addonenoteicontonotificationarea_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_addonenoteicontonotificationarea_1","displayName":"Enabled","description":null,"helpText":null}]},"c49ffc5aebf8dd9e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_showanenvelopeiconinthesystemtray","displayName":"Show an envelope icon in the system tray (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_showanenvelopeiconinthesystemtray_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whennewitemsarrive_l_showanenvelopeiconinthesystemtray_1","displayName":"True","description":null,"helpText":null}]},"c4353180abfc011f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation","displayName":"Stop checking for alt text accessibility information (User)","description":"This policy setting prevents the Accessibility Checker from verifying that objects such as images and shapes contain alt text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that objects such as images and shapes contain alt text.\r\n\r\nIf you disable or do not configure this policy setting, objects will be checked for alternative text and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"c4e7c3e414afafbf":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_showslideanimationwhilebrowsing","displayName":"Show slide animation while browsing (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"6fd44fd0-80d1-47a0-acad-c115e5b807b6","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_showslideanimationwhilebrowsing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_showslideanimationwhilebrowsing_1","displayName":"Enabled","description":null,"helpText":null}]},"c4a2b0d573fdbc49":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_turnofffilevalidation","displayName":"Turn off file validation (User)","description":"This policy setting allows you turn off the file validation feature.\r\n\r\nIf you enable this policy setting, file validation will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, file validation will be turned on. Office Binary Documents (97-2003) are checked to see if they conform against the file format schema before they are opened.","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_turnofffilevalidation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_turnofffilevalidation_1","displayName":"Enabled","description":null,"helpText":null}]},"c40250ce3a2e1956":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders79","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders79_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders79_1","displayName":"True","description":null,"helpText":null}]},"c4f2ff4d1c793bbf":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_mrutemplatelistlength","displayName":"Most Recently Used Template List Length (User)","description":"This setting determines the length of the recently used templates list in the New Document task pane (File New...). The maximum value is 9 and the minimum value is 0. This setting applies only applies to Project.","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_mrutemplatelistlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_mrutemplatelistlength_1","displayName":"Enabled","description":null,"helpText":null}]},"c40a6b0784335d48":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_optionscustomizeribbon_l_displaydevelopertab","displayName":"Display Developer tab in the Ribbon (User)","description":"This policy setting controls whether the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you enable this policy setting, the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you disable this policy setting, the Developer tab will not be displayed in the Ribbon.\r\n\r\nIf you do not configure this policy setting, the Developer tab will not be displayed in the Ribbon, but its visibility can be changed via a setting in the application Options dialog box.","helpText":"","infoUrls":[],"categoryId":"8e48532a-ff0e-4422-82e2-6956b6786005","categoryName":"Customize Ribbon","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_optionscustomizeribbon_l_displaydevelopertab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_optionscustomizeribbon_l_displaydevelopertab_1","displayName":"Enabled","description":null,"helpText":null}]},"c48fab7289be8989":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral_l_undolevels","displayName":"Undo Levels (User)","description":"Limits the number of actions (1-99) that a user can undo. If you enable this setting, you can set a limit on the number of actions (1-99) a user is can undo. If you disable this setting or do not configure it, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"3265b420-4c88-4f7b-92cc-4e23d9452eb1","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral_l_undolevels_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjgeneral_l_undolevels_1","displayName":"Enabled","description":null,"helpText":null}]},"c4bb86619a16d4e3":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc13_l_pathcolon56","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"c4dc984023a4bd82":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc17_l_pathcolon72","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"c413b32cfbc4bcea":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc18_l_pathcolon76","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"c49ab3a2941246d4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":null},"c44567ba0f978e5d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_l_word6pt0binarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_l_word6pt0binarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_l_word6pt0binarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_l_word6pt0binarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_l_word6pt0binarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word6pt0binarydocumentsandtemplates_l_word6pt0binarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"c4ebcf9ed13fba8e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders59","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders59_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders59_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c5.json b/public/intune-definitions/c5.json new file mode 100644 index 000000000000..9b596f1e5c70 --- /dev/null +++ b/public/intune-definitions/c5.json @@ -0,0 +1 @@ +{"c577f8dc0b36b127":{"id":"com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy","displayName":"Default permission policy (work profile-level)","description":"Define the default permission policy for requests for runtime permissions. Available for fully managed, dedicated and corporate-owned work profile (at work profile level) devices.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_devicedefault","displayName":"Device default","description":"Device default value, no intent.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_prompt","displayName":"Prompt","description":"Prompt.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_autogrant","displayName":"Auto grant","description":"Auto grant.","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_autodeny","displayName":"Auto deny","description":"Auto deny.","helpText":null}]},"c587bdff643b2d08":{"id":"com.android.devicerestrictionpolicy.networkresetblocked","displayName":"Block network reset","description":"If 'True', the device is prevented from performing a network settings reset. If 'False', Intune doesn't change or update this setting. By default, the OS might allow the user to reset network settings. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.networkresetblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.networkresetblocked_true","displayName":"True","description":"True","helpText":null}]},"c547aadc3bd6d866":{"id":"com.apple.applicationaccess_enforcedsoftwareupdatedelay","displayName":"Enforced Software Update Delay (Deprecated)","description":"Sets how many days to delay a software update on the device. With this restriction in place, the user doesn't see a software update until the specified number of days after the software update release date. This value is used by Force Delayed App Software Updates and Force Delayed Software Updates. Requires a supervised device in iOS. Available in iOS 11.3 and later, and macOS 10.13.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"c58a8625d221a464":{"id":"com.apple.directoryservice.managed_description","displayName":"Description","description":"The directory service description.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"c5eb2e252624e00b":{"id":"com.apple.managedclient.preferences_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\n\nThis policy is optional. If you don't configure it, image search isn't available.\n\nSpecify Bing's Image Search URL as:\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\n\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\n\nSee \"DefaultSearchProviderImageURLPostParams\" policy to finish configuring image search.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchproviderimageurl"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c578cd3926d80f53":{"id":"com.apple.managedclient.preferences_kfmsilentoptindocuments","displayName":"Include ~/Documents in Folder Backup (Known Folder Move)","description":null,"helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#kfmsilentoptin"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_kfmsilentoptindocuments_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_kfmsilentoptindocuments_true","displayName":"True","description":null,"helpText":null}]},"c5c509e343cf3460":{"id":"com.apple.managedclient.preferences_passwordrevealenabled","displayName":"Enable Password reveal button","description":"Lets you configure the default display of the browser password reveal button for password input fields on websites.\n\nIf you enable or don't configure this policy, the browser user setting defaults to displaying the password reveal button.\n\nIf you disable this policy, the browser user setting won't display the password reveal button.\n\nFor accessibility, users can change the browser setting from the default policy.\n\nThis policy only affects the browser password reveal button, it doesn't affect websites' custom reveal buttons.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordrevealenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_passwordrevealenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_passwordrevealenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c546369436a009fc":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_dynamic power step","displayName":"Dynamic Power Step","description":"May not be available on all systems.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_dynamic power step_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_dynamic power step_1","displayName":"True","description":null,"helpText":null}]},"c5b8b87a3ce88e47":{"id":"com.apple.mcx.filevault2_forceenableinsetupassistant","displayName":"Force Enable In Setup Assistant","description":"If 'true', and installation of this payload occurs after enrolling with MDM in Setup Assistant, the system requests Setup Assistant to enable FileVault at setup time. In this case, the system also ignores all other keys in this payload, except for 'ShowRecoveryKey'.\nTo use this, enable the Await Device Configured DEP configuration option and send this profile with this key set, before sending the DeviceConfiguredCommand. An admin SecureToken user is required, otherwise the FileVault pane does not appear.","helpText":null,"infoUrls":[],"categoryId":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","categoryName":"FileVault","options":[{"id":"com.apple.mcx.filevault2_forceenableinsetupassistant_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx.filevault2_forceenableinsetupassistant_true","displayName":"True","description":null,"helpText":null}]},"c577b35452a109e0":{"id":"com.apple.mcxmenuextras_pccard.menu","displayName":"PCCard","description":"If true, enables the PCCard menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_pccard.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_pccard.menu_true","displayName":"True","description":null,"helpText":null}]},"c51be16713f2ed4b":{"id":"com.apple.systempolicy.control_com.apple.systempolicy.control","displayName":"Top Level Setting Group Collection","description":"com.apple.systempolicy.control","helpText":null,"infoUrls":[],"categoryId":"763525a0-8456-4336-a8d1-392253e8fdd8","categoryName":"System Policy Control","options":null},"c5274914572f096d":{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifier","displayName":"AE Receiver Identifier","description":"The identifier of the process receiving an Apple Event sent by the Identifier process.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"c5fa7c104a7f5140":{"id":"com.apple.webcontent-filter_username","displayName":"User Name","description":"The user name for the service.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"c59f84df47d0f0ea":{"id":"com.microsoft.edge.mamedgeappconfigsettings.adstransparencyenabled","displayName":"Configure if the ads transparency feature is enabled","description":"Lets you decide whether the ads transparency feature is enabled. This behavior only applies to the \"balanced\" mode of tracking prevention, and doesn't impact \"basic\" or \"strict\" modes. Your users' tracking prevention level can be configured using the \"TrackingPrevention\" policy. AdsTransparencyEnabled will only have an effect if \"TrackingPrevention\" is set to TrackingPreventionBalanced or isn't configured.\n\nIf you enable or don't configure this policy, transparency metadata provided by ads are available to the user when the feature is active.\n\nWhen the feature is enabled, Tracking Prevention enables exceptions for the associated ad providers that have met Microsoft's privacy standards.\n\nIf you disable this policy, Tracking Prevention won't adjust its behavior even when transparency metadata is provided by ads.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.adstransparencyenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.adstransparencyenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c5e2f539a9dabea6":{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionconfiguredstate","displayName":"Remote Encryption Protection Configured State","description":"Remote Encryption Protection in Microsoft Defender Antivirus detects and blocks attempts to replace local files with encrypted versions from another device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionconfiguredstate_0","displayName":"Not configured: Apply defaults set for the antivirus engine and platform","description":"Not configured: Apply defaults set for the antivirus engine and platform","helpText":null},{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionconfiguredstate_1","displayName":"Block: Prevent suspicious and malicious behaviors","description":"Block: Prevent suspicious and malicious behaviors","helpText":null},{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionconfiguredstate_2","displayName":"Audit: Generate EDR detections without blocking","description":"Audit: Generate EDR detections without blocking","helpText":null},{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionconfiguredstate_4","displayName":"Off: Feature is off with no performance impact","description":"Off: Feature is off with no performance impact","helpText":null}]},"c55a5ef3b8db59cc":{"id":"device_vendor_msft_defender_configuration_meteredconnectionupdates","displayName":"Metered Connection Updates","description":"Allow managed devices to update through metered connections. Default is 0 - not allowed, 1 - allowed","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_meteredconnectionupdates_1","displayName":"Allowed","description":"Allowed","helpText":null},{"id":"device_vendor_msft_defender_configuration_meteredconnectionupdates_0","displayName":"Not Allowed","description":"Not Allowed","helpText":null}]},"c5dd423703eca907":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters","displayName":"Uppercase Letters","description":"Use this policy setting to configure the use of uppercase letters in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one uppercase letter in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using uppercase letters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use uppercase letters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters_0","displayName":"Allowed","description":"Allows the use of uppercase letters in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters_1","displayName":"Required","description":"Requires the use of at least one uppercase letters in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters_2","displayName":"Blocked","description":"Does not allow the use of uppercase letters in PIN.","helpText":null}]},"c5263c8985d6597c":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_enabled","displayName":"Enable local admin password management","description":"\nEnables management of password for local administrator account\n\nIf you enable this setting, local administrator password is managed\n\nIf you disable or not configure this setting, local administrator password is NOT managed\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-admpwd#admx-admpwd-pol-admpwd-enabled"],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":[{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c5189dd9d6ac057c":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_8_channel_log_filelogaccess","displayName":"Log Access","description":null,"helpText":"","infoUrls":[],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":null},"c57d8d8bf47b9795":{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionurl","displayName":"Events.asp URL","description":"This is the URL that will be passed to the Description area in the Event Properties dialog box. Change this value if you want to use a different Web server to handle event information requests.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventviewer#admx-eventviewer-eventviewer-redirectionurl"],"categoryId":"3453c694-bc38-4082-9d3d-886e385df927","categoryName":"Event Viewer","options":[{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventviewer_eventviewer_redirectionurl_1","displayName":"Enabled","description":null,"helpText":null}]},"c5040dcc02331870":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_slowlink8","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_slowlink8_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_wired_cse_slowlink8_1","displayName":"True","description":null,"helpText":null}]},"c57f85d04c589765":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableheuristics","displayName":"Turn on heuristics","description":"This policy setting allows you to configure heuristics. Suspicious detections will be suppressed right before reporting to the engine client. Turning off heuristics will reduce the capability to flag new threats. It is recommended that you do not turn off heuristics.\r\n\r\n If you enable or do not configure this setting, heuristics will be enabled.\r\n\r\n If you disable this setting, heuristics will be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disableheuristics"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableheuristics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableheuristics_1","displayName":"Enabled","description":null,"helpText":null}]},"c54eb828b44ca9f1":{"id":"device_vendor_msft_policy_config_admx_nca_localnameson","displayName":"Prefer Local Names Allowed","description":"Specifies whether the user has Connect and Disconnect options for the DirectAccess entry when the user clicks the Networking notification area icon.\r\n\r\nIf the user clicks the Disconnect option, NCA removes the DirectAccess rules from the Name Resolution Policy Table (NRPT) and the DirectAccess client computer uses whatever normal name resolution is available to the client computer in its current network configuration, including sending all DNS queries to the local intranet or Internet DNS servers. Note that NCA does not remove the existing IPsec tunnels and users can still access intranet resources across the DirectAccess server by specifying IPv6 addresses rather than names.\r\n\r\nThe ability to disconnect allows users to specify single-label, unqualified names (such as “PRINTSVR”) for local resources when connected to a different intranet and for temporary access to intranet resources when network location detection has not correctly determined that the DirectAccess client computer is connected to its own intranet.\r\n\r\nTo restore the DirectAccess rules to the NRPT and resume normal DirectAccess functionality, the user clicks Connect.\r\n\r\nNote \r\nIf the DirectAccess client computer is on the intranet and has correctly determined its network location, the Disconnect option has no effect because the rules for DirectAccess are already removed from the NRPT.\r\n\r\nIf this setting is not configured, users do not have Connect or Disconnect options.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-localnameson"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_localnameson_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_localnameson_1","displayName":"Enabled","description":null,"helpText":null}]},"c58093e2d32805ee":{"id":"device_vendor_msft_policy_config_admx_qos_qosnonbesteffortlimit","displayName":"Limit reservable bandwidth","description":"Determines the percentage of connection bandwidth that the system can reserve. This value limits the combined bandwidth reservations of all programs running on the system.\r\n\r\nBy default, the Packet Scheduler limits the system to 80 percent of the bandwidth of a connection, but you can use this setting to override the default.\r\n\r\nIf you enable this setting, you can use the \"Bandwidth limit\" box to adjust the amount of bandwidth the system can reserve.\r\n\r\nIf you disable this setting or do not configure it, the system uses the default value of 80 percent of the connection.\r\n\r\nImportant: If a bandwidth limit is set for a particular network adapter in the registry, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosnonbesteffortlimit"],"categoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","categoryName":"Qo S Packet Scheduler","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosnonbesteffortlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosnonbesteffortlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"c531e1c94393ce39":{"id":"device_vendor_msft_policy_config_admx_sdiagschd_scheduleddiagnosticsexecutionpolicy_scheduleddiagnosticsexecutionpolicylevel","displayName":"Execution Level","description":null,"helpText":"","infoUrls":[],"categoryId":"fe3cb879-8869-4163-91d7-e432abd75da8","categoryName":"Scheduled Maintenance","options":[{"id":"device_vendor_msft_policy_config_admx_sdiagschd_scheduleddiagnosticsexecutionpolicy_scheduleddiagnosticsexecutionpolicylevel_1","displayName":"Troubleshooting Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sdiagschd_scheduleddiagnosticsexecutionpolicy_scheduleddiagnosticsexecutionpolicylevel_2","displayName":"Regular","description":null,"helpText":null}]},"c5ff8da3220a8b58":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth","displayName":"Limit maximum color depth","description":"This policy setting allows you to specify the maximum color resolution (color depth) for Remote Desktop Services connections.\r\n\r\nYou can use this policy setting to set a limit on the color depth of any connection that uses RDP. Limiting the color depth can improve connection performance, particularly over slow links, and reduce server load.\r\n\r\nIf you enable this policy setting, the color depth that you specify is the maximum color depth allowed for a user's RDP connection. The actual color depth for the connection is determined by the color support available on the client computer. If you select Client Compatible, the highest color depth supported by the client will be used.\r\n\r\nIf you disable or do not configure this policy setting, the color depth for connections is not specified at the Group Policy level.\r\n\r\nNote:\r\n1.\tSetting the color depth to 24 bits is only supported on Windows Server 2003 and Windows XP Professional.\r\n2.\tThe value specified in this policy setting is not applied to connections from client computers that are using at least Remote Desktop Protocol 8.0 (computers running at least Windows 8 or Windows Server 2012). The 32-bit color depth format is always used for these connections.\r\n3.\tFor connections from client computers that are using Remote Desktop Protocol 7.1 or earlier versions that are connecting to computers running at least Windows 8 or Windows Server 2012, the minimum of the following values is used as the color depth format:\r\na.\tValue specified by this policy setting\r\nb.\tMaximum color depth supported by the client\r\nc.\tValue requested by the client\r\n\r\nIf the client does not support at least 16 bits, the connection is terminated.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-colordepth"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_colordepth_1","displayName":"Enabled","description":null,"helpText":null}]},"c5a93c600f9fd921":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word","displayName":"Microsoft Word 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Word 2013.\r\nBy default, the user settings of Microsoft Word 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013word"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word_1","displayName":"Enabled","description":null,"helpText":null}]},"c5580865fe2993a6":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient","displayName":"Configure Windows NTP Client","description":"This policy setting specifies a set of parameters for controlling the Windows NTP Client.\r\n\r\nIf you enable this policy setting, you can specify the following parameters for the Windows NTP Client.\r\n\r\nIf you disable or do not configure this policy setting, the WIndows NTP Client uses the defaults of each of the following parameters.\r\n\r\nNtpServer\r\nThe Domain Name System (DNS) name or IP address of an NTP time source. This value is in the form of \"dnsName,flags\" where \"flags\" is a hexadecimal bitmask of the flags for that host. For more information, see the NTP Client Group Policy Settings Associated with Windows Time section of the Windows Time Service Group Policy Settings. The default value is \"time.windows.com,0x09\". \r\n\r\nType\r\nThis value controls the authentication that W32time uses. The default value is NT5DS.\r\n\r\nCrossSiteSyncFlags\r\nThis value, expressed as a bitmask, controls how W32time chooses time sources outside its own site. The possible values are 0, 1, and 2. Setting this value to 0 (None) indicates that the time client should not attempt to synchronize time outside its site. Setting this value to 1 (PdcOnly) indicates that only the computers that function as primary domain controller (PDC) emulator operations masters in other domains can be used as synchronization partners when the client has to synchronize time with a partner outside its own site. Setting a value of 2 (All) indicates that any synchronization partner can be used. This value is ignored if the NT5DS value is not set. The default value is 2 decimal (0x02 hexadecimal).\r\n\r\nResolvePeerBackoffMinutes\r\nThis value, expressed in minutes, controls how long W32time waits before it attempts to resolve a DNS name when a previous attempt failed. The default value is 15 minutes.\r\n\r\nResolvePeerBackoffMaxTimes\r\nThis value controls how many times W32time attempts to resolve a DNS name before the discovery process is restarted. Each time DNS name resolution fails, the amount of time to wait before the next attempt will be twice the previous amount. The default value is seven attempts.\r\n\r\nSpecialPollInterval\r\nThis NTP client value, expressed in seconds, controls how often a manually configured time source is polled when the time source is configured to use a special polling interval. If the SpecialInterval flag is enabled on the NTPServer setting, the client uses the value that is set as the SpecialPollInterval, instead of a variable interval between MinPollInterval and MaxPollInterval values, to determine how frequently to poll the time source. SpecialPollInterval must be in the range of [MinPollInterval, MaxPollInterval], else the nearest value of the range is picked. Default: 1024 seconds.\r\n\r\nEventLogFlags\r\nThis value is a bitmask that controls events that may be logged to the System log in Event Viewer. Setting this value to 0x1 indicates that W32time will create an event whenever a time jump is detected. Setting this value to 0x2 indicates that W32time will create an event whenever a time source change is made. Because it is a bitmask value, setting 0x3 (the addition of 0x1 and 0x2) indicates that both time jumps and time source changes will be logged.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-w32time#admx-w32time-w32time-policy-configure-ntpclient"],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":[{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_1","displayName":"Enabled","description":null,"helpText":null}]},"c5a5cab8691c591d":{"id":"device_vendor_msft_policy_config_appvirtualization_allowreportingserver_random_delay","displayName":"Delay reporting for the random minutes","description":"","helpText":"","infoUrls":[],"categoryId":"e7cc16d8-f74f-4cd7-890d-9b4082a19c39","categoryName":"Reporting","options":null},"c55bdd4d304dd5fa":{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditotheraccountmanagementevents","displayName":"Account Management Audit Other Account Management Events","description":"This policy setting allows you to audit events generated by other user account changes that are not covered in this category, such as the following: The password hash of a user account was accessed. This typically happens during an Active Directory Management Tool password migration. The Password Policy Checking API was called. Calls to this function can be part of an attack when a malicious application tests the policy to reduce the number of attempts during a password dictionary attack. Changes to the Default Domain Group Policy under the following Group Policy paths: Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Password Policy Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Account Lockout Policy","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountmanagement_auditotheraccountmanagementevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditotheraccountmanagementevents_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditotheraccountmanagementevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditotheraccountmanagementevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditotheraccountmanagementevents_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"c51b090418f2dd38":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory","displayName":"Enable mandatory cloud management enrollment","description":"Setting the policy to Enabled mandates Chrome Browser Cloud Management enrollment and blocks Google Chrome launch process if failed.\r\n\r\nSetting the policy to Disabled or leaving it unset renders Chrome Browser Cloud Management optional and doesn't block Google Chrome launch process if failed.\r\n\r\nMachine scope cloud policy enrollment on desktop uses this policy. See https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory_1","displayName":"Enabled","description":null,"helpText":null}]},"c5ae12587bc33195":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode","displayName":"Controls the mode of DNS-over-HTTPS","description":"Controls the mode of the DNS-over-HTTPS resolver. Please note that this policy will only set the default mode for each query. The mode may be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.\r\n\r\nThe \"off\" mode will disable DNS-over-HTTPS.\r\n\r\nThe \"automatic\" mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error.\r\n\r\nThe \"secure\" mode will only send DNS-over-HTTPS queries and will fail to resolve on error.\r\n\r\nOn Android Pie and above, if DNS-over-TLS is active, Google Chrome will not send insecure DNS requests.\r\n\r\nIf this policy is unset the browser may send DNS-over-HTTPS requests to a resolver associated with the user's configured system resolver.\r\n\r\nExample value: off","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_1","displayName":"Enabled","description":null,"helpText":null}]},"c5601bc5c344d3c1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended","displayName":"Show Home button on toolbar","description":"Setting the policy to Enabled shows the Home button on Google Chrome's toolbar. Setting the policy to Disabled keeps the Home button from appearing.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users chooses whether to show the Home button.","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c5df80342b79acef":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed","displayName":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context","description":"\r\nSpecifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context. Google Chrome will require cross-origin isolation when using SharedArrayBuffers from Google Chrome 91 onward (2021-05-25) for Web Compatibility reasons. Additional details can be found on: https://developer.chrome.com/blog/enabling-shared-array-buffer/.\r\n\r\nWhen set to Enabled, sites can use SharedArrayBuffer with no restrictions.\r\n\r\nWhen set to Disabled or not set, sites can only use SharedArrayBuffers when cross-origin isolated.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"c557e58eabe25748":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherenabled","displayName":"Enable the Legacy Browser Support feature.","description":"Setting the policy to Enabled means Google Chrome will try to launch some URLs in an alternate browser, such as Internet Explorer®. This feature is set using the policies in the Legacy Browser support group.\r\n\r\nSetting the policy to Disabled or leaving it unset means Google Chrome won't try to launch designated URLs in an alternate browser.","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c50a0d3841b869d5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting","displayName":"Default images setting","description":"Setting the policy to 1 lets all websites display images. Setting the policy to 2 denies image display.\r\n\r\nLeaving it unset allows images, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"c5cc6ab6471ddf6c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls","displayName":"Allow read access via the File System API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nLeaving the policy unset means DefaultFileSystemReadGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with FileSystemReadBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c54d68f1e25ed61a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled","displayName":"Enable showing the welcome page on the first browser launch following OS upgrade","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c584cc3cafad7704":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed","displayName":"Allow modern buffer allocation for Graphics3D APIs PPAPI plugin.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"c511972b30dc6d8a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode","displayName":"VHD Access Mode","description":"Controls whether the VHD/X file should be accessed directly or whether a difference disk should be used. The default is Direct Access (0) which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDAccessMode\r\nType: DWORD\r\nValues: 0 = Direct Access, 1 = DiffDisk on Network, 2 = Local DiffDisk, 3 = Unique Disk per Session","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_1","displayName":"Enabled","description":null,"helpText":null}]},"c569e63d3661d1f2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1","displayName":"Block dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2","displayName":"Block potentially dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null}]},"c57fdce9727df5c0":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled","displayName":"Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy lets you manage whether the opt-out user experience for enhanced security mode is presented when ESM is turned on for Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, the UI for the opt-out user experience is on.\r\n\r\nIf you disable this policy, the UI for the opt-out user experience is off.\r\n\r\nNote: If this policy is used, only the User Interface for the opt-out experience is supressed - ESM is still turned on. For more information, see the 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) policy.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895.\r\n\r\nAfter careful evaluation, we have determined that this experimental opt-out UX is not required. As a result, this policy will be deprecated and stop working after Edge version 130.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c5b251f1423dd1fa":{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins","description":"This policy lets you set a list of URL patterns that specify top-level origins for which third-party storage partitioning (partitioning of cross-origin iframe storage) should be disabled.\r\n\r\nIf this policy isn't set or a top-level origin doesn't match one of the URL patterns, then the value from 'DefaultThirdPartyStoragePartitioningSetting' (Default setting for third-party storage partitioning) will be used.\r\n\r\nNote that the patterns you list are treated as origins, not URLs, so you shouldn't specify a path. For detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"c53998d4ce95acff":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_hstspolicybypasslistdesc","displayName":"Configure the list of names that will bypass the HSTS policy check (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c53907c3723ddded":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (obsolete)","description":"Cookies set for domains match specified patterns will revert to legacy SameSite behavior.\r\n\r\nReverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\r\n\r\nIf you don't set this policy, the global default value will be used. The global default will also be used for cookies on domains not covered by the patterns you specify.\r\n\r\nThe global default value can be configured using the 'LegacySameSiteCookieBehaviorEnabled' (Enable default legacy SameSite cookie behavior setting) policy. If 'LegacySameSiteCookieBehaviorEnabled' is unset, the global default value falls back to other configuration sources.\r\n\r\nNote that patterns you list in this policy are treated as domains, not URLs, so you should not specify a scheme or port.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"c5f441cf71180e47":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver","description":"The URI template of the desired DNS-over-HTTPS resolver. To specify multiple DNS-over-HTTPS resolvers, separate the corresponding URI templates with spaces.\r\n\r\nIf you set 'DnsOverHttpsMode' (Control the mode of DNS-over-HTTPS) to \"secure\" then this policy must be set and cannot be empty.\r\n\r\nIf you set 'DnsOverHttpsMode' to \"automatic\" and this policy is set then the URI templates specified will be used. If you don't set this policy, then hardcoded mappings will be used to attempt to upgrade the user's current DNS resolver to a DoH resolver operated by the same provider.\r\n\r\nIf the URI template contains a dns variable, requests to the resolver will use GET; otherwise requests will use POST.\r\n\r\nIncorrectly formatted templates will be ignored.\r\n\r\nExample value: https://dns.example.net/dns-query{?dns}","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"c5ea3f299696e150":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended","displayName":"Enable sign in click to action dialog","description":"Configure this policy to show sign in click to action dialog on New tab page.\r\n\r\nIf you enable or don't configure this policy, sign in click to action dialog is shown on New tab page.\r\n\r\nIf you disable this policy, sign in click to action dialog isn't shown on the New tab page.","helpText":"","infoUrls":[],"categoryId":"04b46099-4ee5-4def-8e04-569c988057a9","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c5f6a7aee8bf0662":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_excelexe57","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_excelexe57_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_excelexe57_1","displayName":"True","description":null,"helpText":null}]},"c5e3985635f82611":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_exprwdexe66","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_exprwdexe66_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_exprwdexe66_1","displayName":"True","description":null,"helpText":null}]},"c5f1a2f44b2f42cd":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadhostnamesid","displayName":"Hostnames (optional):","description":"","helpText":"","infoUrls":[],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":null},"c56f794b1eccea19":{"id":"device_vendor_msft_policy_config_userrights_createtoken","displayName":"Create Token","description":"This user right determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal application programming interface (API) to create an access token. This user right is used internally by the operating system. Unless it is necessary, do not assign this user right to a user, group, or process other than Local System. Caution: Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process that you do not want to take over the system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createtoken"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"c5190313cacd8b38":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowvirtualgpu","displayName":"Allow hardware-accelerated rendering","description":"This policy setting determines whether Microsoft Defender Application Guard renders graphics using hardware or software acceleration. If you enable this setting, Microsoft Defender Application Guard uses Hyper-V to access supported, high-security rendering graphics hardware (GPUs). These GPUs improve rendering performance and battery life while using Microsoft Defender Application Guard, particularly for video playback and other graphics-intensive use cases. If you enable this setting without connecting any high-security rendering graphics hardware, Microsoft Defender Application Guard will automatically revert to software-based (CPU) rendering.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowvirtualgpu_0","displayName":"Disabled","description":"Cannot access the vGPU and uses the CPU to support rendering graphics. When the policy is not configured, it is the same as disabled (0).","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowvirtualgpu_1","displayName":"Enabled","description":"Turns on the functionality to access the vGPU offloading graphics rendering from the CPU. This can create a faster experience when working with graphics intense websites or watching video within the container.","helpText":null}]},"c545c669954c6e4d":{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_extension","displayName":"File extension","description":null,"helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"c5ec13b72dff0386":{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_path","displayName":"Path","description":"Path to exclude, wildcards are NOT supported","helpText":null,"infoUrls":[],"categoryId":"d2191717-e304-46f7-bcc0-55e6477026c9","categoryName":"Exclusion Settings","options":null},"c50a0f6a191bed58":{"id":"passcode_customregex_description","displayName":"Description","description":"A dictionary with supported OS language IDs for the keys (such as `en-US`), and values that represent a localized description of the policy that the regular expression enforces. Use the special `default` key for languages that the dictionary doesn't contain.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"c570b5d7bd5c92cc":{"id":"settings_item_defaultapplications_messaging","displayName":"Messaging","description":"The bundle identifier of the app that the system sets as the default messaging app. This app must be an eligible messaging app.","helpText":null,"infoUrls":[],"categoryId":"b32726b3-b0e9-465b-86f8-b61ad8af52f0","categoryName":"Default Applications","options":null},"c5bb998abf7fe692":{"id":"user_vendor_msft_policy_config_admx_controlpanel_forceclassiccontrolpanel","displayName":"Always open All Control Panel Items when opening Control Panel (User)","description":"This policy setting controls the default Control Panel view, whether by category or icons. \r\n\r\nIf this policy setting is enabled, the Control Panel opens to the icon view.\r\n\r\nIf this policy setting is disabled, the Control Panel opens to the category view.\r\n\r\nIf this policy setting is not configured, the Control Panel opens to the view used in the last Control Panel session.\r\nNote: Icon size is dependent upon what the user has set it to in the previous session.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-forceclassiccontrolpanel"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_forceclassiccontrolpanel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_forceclassiccontrolpanel_1","displayName":"Enabled","description":null,"helpText":null}]},"c5da8af0f1cf65d3":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocdburning","displayName":"Remove CD Burning features (User)","description":"This policy setting allows you to remove CD Burning features. File Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.\r\n\r\nIf you enable this policy setting, all features in the File Explorer that allow you to use your CD writer are removed.\r\n\r\nIf you disable or do not configure this policy setting, users are able to use the File Explorer CD burning features.\r\n\r\nNote: This policy setting does not prevent users from using third-party applications to create or modify CDs using a CD writer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nocdburning"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocdburning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocdburning_1","displayName":"Enabled","description":null,"helpText":null}]},"c505a07f6c24add2":{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_serverurl_edit","displayName":"Work Folders URL: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"87667b72-85ce-48c2-8023-e6db7f5fe739","categoryName":"Work Folders","options":null},"c5c04cf6a4196d1d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended","displayName":"Enable Instant (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c557fc3415d9b8ad":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_browserswitcherexternalsitelisturl","displayName":"URL of an XML file that contains URLs to load in an alternative browser. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"c5baf00a6c6759d4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist","displayName":"Authentication server whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: *.example.com,example.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"c57aeef09025529b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed","displayName":"Allow sign in to Google Chrome (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"c51e35d470de4528":{"id":"user_vendor_msft_policy_config_enterprisecloudprint_cloudprintoauthclientid","displayName":"Cloud Print OAuth Client Id (User)","description":"A GUID identifying the client application authorized to retrieve OAuth tokens from the OAuthAuthority","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-EnterpriseCloudPrint#cloudprintoauthclientid"],"categoryId":"14fe5c02-d4f6-4f2a-9eae-2d60d111ee77","categoryName":"Enterprise Cloud Print","options":null},"c5547a4d60bb8674":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngsaltlength_l_specifycngsaltlengthspinid","displayName":"Number of bytes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":null},"c5165338eeb8175f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},"c55a6fc406cb8019":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled_synctypeslistdisableddesc","displayName":"Configure the list of types that are excluded from synchronization (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c5036d7163ced23f":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled","displayName":"Configure Related Matches in Find on Page (User)","description":"Specifies how the user receives related matches in Find on Page, which provides spellcheck, synonyms, and Q&A results in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can receive related matches in Find on Page on all sites. The results are processed in a cloud service.\r\n\r\nIf you disable this policy, users can receive related matches in Find on Page on limited sites. The results are processed on the user's device.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c5598d74a3ef8b43":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastserviceserverterms1","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"c57aaeafa89c4114":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehomeadd_l_homeaddlabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"c533a1807a63867a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy9_l_placesbarpath226","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"c5633eb2b6c58d0a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_l_menuanimations209","displayName":"Menu animations (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_l_menuanimations209_0","displayName":"(System Default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_l_menuanimations209_1","displayName":"Random","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_l_menuanimations209_2","displayName":"Unfold","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_l_menuanimations209_3","displayName":"Slide","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_menuanimations_l_menuanimations209_4","displayName":"Fade","description":null,"helpText":null}]},"c5b7cfc614444fb2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabickuwait","displayName":"Arabic (Kuwait) (User)","description":"Enables the editing language Arabic (Kuwait)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabickuwait_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabickuwait_1","displayName":"Enabled","description":null,"helpText":null}]},"c5fcefbe5c93761b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lithuanian","displayName":"Lithuanian (User)","description":"Enables the editing language Lithuanian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lithuanian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lithuanian_1","displayName":"Enabled","description":null,"helpText":null}]},"c51ddde3c6a68cd6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_macedonian","displayName":"Macedonian (User)","description":"Enables the editing language Macedonian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_macedonian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_macedonian_1","displayName":"Enabled","description":null,"helpText":null}]},"c53b4d9e4427dd01":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02_l_allowsubfolders245","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02_l_allowsubfolders245_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02_l_allowsubfolders245_1","displayName":"True","description":null,"helpText":null}]},"c581a838d7d622f8":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_restrictcucomaddin","displayName":"Block loading of COM/VSTO add-ins registered in HKCU (User)","description":"This policy setting controls whether COM/VSTO add-ins registered only in HKEY_CURRENT_USER (HKCU) are blocked from loading.\r\n\r\nStandard users can install add-ins through ClickOnce deployment or the Office Add-ins settings, which typically register add-ins in HKCU rather than HKEY_LOCAL_MACHINE (HKLM).\r\n\r\nIf you enable this policy setting, all COM/VSTO add-ins registered only in HKCU will be blocked from loading, preventing users from running add-ins they have installed without administrator privileges.\r\n\r\nIf you disable or don't configure this policy setting, COM/VSTO add-ins registered in HKCU are allowed to load normally.\r\n\r\nNote: Add-ins registered in HKLM (typically installed by administrators) are not affected by this policy setting.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_restrictcucomaddin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_restrictcucomaddin_1","displayName":"Enabled","description":null,"helpText":null}]},"c527cfbe5d16d41d":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_notebookroot_l_empty1","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":null},"c5f51225c390e2a4":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofhourlyversionsnottopruneafterdaysback","displayName":"Days of hourly versions not to prune after Days Back (User)","description":"This policy setting allows you to set the number of hourly versions not to prune after Days Back. With a 2016 format notebook, OneNote will automatically store previous versions of the pages in the notebook, and it will also store a recycle bin for all of the deleted pages and sections.\r\n\r\nIf you enable this policy setting, you may specify the number of days to keep hourly versions after the Days Back setting. This value specifies the number of days past \"DaysOfAllVersions\" to keep hourly version history information. Users will keep one version per hour for this number of days after \"DaysOfAllVersions\".\r\n\r\nIf you disable or do not configure this policy setting, OneNote will keep hourly versions for the past 5 days.","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofhourlyversionsnottopruneafterdaysback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofhourlyversionsnottopruneafterdaysback_1","displayName":"Enabled","description":null,"helpText":null}]},"c5c6d8e79ed61e18":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_maximumnumberofonceperdayversionhistoryitemskept_l_maximumnumberofonceperdayversionhistoryitemskeptspinid","displayName":"Max number of versions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":null},"c5f8ac6952fff24a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_outlookrichtextoptions_l_whensendingoutlookrichtextmessagestointernetrecipients2","displayName":"Use this format: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","categoryName":"Internet Formatting","options":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_outlookrichtextoptions_l_whensendingoutlookrichtextmessagestointernetrecipients2_1","displayName":"Convert to Plain Text format","description":null,"helpText":null}},"c538495df9c2b5f7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_stationeryandfonts_l_stationeryfonts","displayName":"Stationery Fonts (User)","description":"This policy setting allows you to choose a Stationery font option.\r\n\r\nIf you enable this policy setting, a Stationery font option from the dropdown list will be enforced.\r\n\r\nIf you disable or do not configure this policy setting, the default setting (use theme's font) will be used.","helpText":"","infoUrls":[],"categoryId":"88b16683-81f2-450a-9bf2-42f582e0b748","categoryName":"Stationery and Fonts","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_stationeryandfonts_l_stationeryfonts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_stationeryandfonts_l_stationeryfonts_1","displayName":"Enabled","description":null,"helpText":null}]},"c5c8a98088b71cae":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_stationeryandfonts_l_stationeryfonts_l_stationeryfontoptions","displayName":"Stationery font options: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"88b16683-81f2-450a-9bf2-42f582e0b748","categoryName":"Stationery and Fonts","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_stationeryandfonts_l_stationeryfonts_l_stationeryfontoptions_0","displayName":"Use theme's font","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_stationeryandfonts_l_stationeryfonts_l_stationeryfontoptions_1","displayName":"Use user's font on replies and forwards","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_stationeryandfonts_l_stationeryfonts_l_stationeryfontoptions_2","displayName":"Always use user's fonts","description":null,"helpText":null}]},"c55edd7dc77b9786":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_l_setlayoutdirection","displayName":"Set layout direction: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b9ab4d39-9e28-4897-aa34-0201a35ea989","categoryName":"Right-to-left","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_l_setlayoutdirection_0","displayName":"Left to Right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_l_setlayoutdirection_1","displayName":"Right to Left","description":null,"helpText":null}]},"c52ede6dbd3d964b":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_disableslideupdate","displayName":"Disable Slide Update (User)","description":"This policy setting controls whether users can link slides in a presentation with their counterparts in a PowerPoint Slide Library.\r\n\r\nIf you enable this policy setting, PowerPoint cannot check the status of a slide in a Slide Library when a presentation with Slide Update data is opened.\r\n\r\nIf you disable or do not configure this policy setting, each time users open a presentation that contains a shared slide, PowerPoint notifies them if the slide has been updated and provides them with the opportunity to ignore the update, append a new slide to the outdated slide, or replace the outdated slide with the updated one.","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_disableslideupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_disableslideupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"c5efa651374010e4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"c5e972c1df49b1d6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjcritifless","displayName":"Tasks are critical if slack is less than or equal to (User)","description":"Specifies the number of days of slack Project uses to determine critical tasks.\r\n\r\nIf you enable this setting, tasks are marked as critical if the slack is less than or equal to the value you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjcritifless_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjcritifless_1","displayName":"Enabled","description":null,"helpText":null}]},"c54df8a4b2ee3891":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"c590fb34e30a9366":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_l_pathcolon48","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"c5fe4dfce526d408":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_usenewkeyonpasswordchange","displayName":"Use new key on password change (User)","description":"This policy setting allows you to specify if a new encryption key is used when the password is changed.\r\n\r\nIf you enable or do not configure this policy setting, a new intermediate key is generated when the password is changed. This causes any extra key encryptors to be removed when the file is saved.\r\n\r\nIf you disable this policy setting, a new intermediate key is not generated when the password is changed.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_1","displayName":"Enabled","description":null,"helpText":null}]},"c5ef4f764be44cda":{"id":"vendor_msft_firewall_mdmstore_publicprofile_disableinboundnotifications","displayName":"Disable Inbound Notifications","description":"This value is an on/off switch. If this value is false, the firewall MAY display a notification to the user when an application is blocked from listening on a port. If this value is on, the firewall MUST NOT display such a notification. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_disableinboundnotifications_false","displayName":"False","description":"Firewall May Display Notification","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_disableinboundnotifications_true","displayName":"True","description":"Firewall Must Not Display Notification","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c6.json b/public/intune-definitions/c6.json new file mode 100644 index 000000000000..1e5b62ca7e25 --- /dev/null +++ b/public/intune-definitions/c6.json @@ -0,0 +1 @@ +{"c631d22b247c8980":{"id":"com.apple.applicationaccess_forceclassroomunpromptedscreenobservation","displayName":"Force Classroom Unprompted Screen Observation","description":"If `true` and `ScreenObservationPermissionModificationAllowed` is also `true` in the Education payload, a student enrolled in a managed course through the Classroom app automatically gives permission to that course teacher's requests to observe the student's screen without prompting the student.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceclassroomunpromptedscreenobservation_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceclassroomunpromptedscreenobservation_true","displayName":"Enabled","description":null,"helpText":null}]},"c6c62a8faf7a4868":{"id":"com.apple.directoryservice.managed_adusewindowsuncpath","displayName":"AD Use Windows UNC Path","description":"If true, uses the UNC path from Active Directory to derive the network home location.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adusewindowsuncpath_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adusewindowsuncpath_true","displayName":"True","description":null,"helpText":null}]},"c6277898ce9f6b9e":{"id":"com.apple.dock_contents-immutable","displayName":"Contents Immutable","description":"If true, disables changes to the dock.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_contents-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_contents-immutable_true","displayName":"True","description":null,"helpText":null}]},"c6d9cab047c52a26":{"id":"com.apple.loginwindow_adminhostinfo","displayName":"Admin Host Info","description":"If this key is included in the payload, its value is displayed in the login window as additional computer information. Before macOS 10.10, this string could contain only certain information (host name, system version, or IP address). After macOS 10.10, setting this key to any value allows the user to click the time area of the menu bar to toggle through various computer information values.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":null},"c66d13c35a5f0034":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_lcid","displayName":"Microsoft Edge Canary LCID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"c6d3d9d24e291607":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_dynamic power step","displayName":"Dynamic Power Step","description":"May not be available on all systems.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_dynamic power step_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_dynamic power step_1","displayName":"True","description":null,"helpText":null}]},"c67594988a0d619c":{"id":"com.apple.system-extension-policy_nonremovablesystemextensions_generickey","displayName":"ANY","description":"System extension bundle identifiers","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"c6f8ba7edfcc1f15":{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_photos_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"c61660b0901bf69a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebusbguardsetting","displayName":"Control use of the WebUSB API","description":"Set whether websites can access connected USB devices. You can completely block access or ask the user each time a website wants to get access to connected USB devices.\n\nYou can override this policy for specific URL patterns by using the \"WebUsbAskForUrls\" and \"WebUsbBlockedForUrls\" policies.\n\nIf you don't configure this policy, sites can ask users whether they can access the connected USB devices ('AskWebUsb') by default, and users can change this setting.\n\nPolicy options mapping:\n\n* BlockWebUsb (2) = Do not allow any site to request access to USB devices via the WebUSB API\n\n* AskWebUsb (3) = Allow sites to ask the user to grant access to a connected USB device\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebusbguardsetting_blockwebusb","displayName":"Do not allow any site to request access to USB devices via the WebUSB API","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultwebusbguardsetting_askwebusb","displayName":"Allow sites to ask the user to grant access to a connected USB device","description":null,"helpText":null}]},"c6a5066b866532e4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.javascriptblockedforurls","displayName":"Block JavaScript on specific sites","description":"Defines a list of sites, based on URL patterns, that aren't allowed to run JavaScript.\n\nIf you don't configure this policy, \"DefaultJavaScriptSetting\" applies for all sites, if it's set. If not, the user's personal setting applies.\n\nFor detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\n\nThis policy blocks JavaScript based on whether the origin of the top-level document (usually the page URL that's also displayed in the address bar) matches any of the patterns. Therefore, this policy isn't appropriate for mitigating web supply-chain attacks. For example, supplying the pattern `https://[*.]foo.com/` doesn't prevent a page hosted on, say, `https://contoso.com`, from running a script loaded from `https://www.foo.com/example.js`. Furthermore, supplying the pattern `https://contoso.com/` doesn't prevent a document from `https://contoso.com` from running scripts if it isn't the top-level document, but embedded as a subframe into a page hosted on another origin, say, `https://www.fabrikam.com`.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"c68c060af48ecf89":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery","displayName":"Enable Pin Recovery","description":"If the user forgets their PIN, it can be changed to a new PIN using the Windows Hello for Business PIN recovery service. This cloud service encrypts a recovery secret which is stored locally on the client, but which can only be decrypted by the cloud service.\n\nIf you enable this policy setting, the PIN recovery secret will be stored on the device and the user will be able to change to a new PIN in case their PIN is forgotten.\n\nIf you disable or do not configure this policy setting, the PIN recovery secret will not be created or stored. If the user's PIN is forgotten, the only way to get a new PIN is by deleting the existing PIN and creating a new one, which will require the user to re-register with any services the old PIN provided access to.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_false","displayName":"false","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_true","displayName":"true","description":"Enabled","helpText":null}]},"c6108d7ed62a09cb":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_forceq_chk","displayName":"Force queue mode for application errors","description":null,"helpText":"","infoUrls":[],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_forceq_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_forceq_chk_1","displayName":"True","description":null,"helpText":null}]},"c645450649161c3b":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablebehaviormonitoring","displayName":"Turn on behavior monitoring","description":"This policy setting allows you to configure behavior monitoring.\r\n\r\n If you enable or do not configure this setting, behavior monitoring will be enabled.\r\n\r\n If you disable this setting, behavior monitoring will be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-disablebehaviormonitoring"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablebehaviormonitoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablebehaviormonitoring_1","displayName":"Enabled","description":null,"helpText":null}]},"c60391fb45993091":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt_nodefaultexempt","displayName":"NoDefaultExempt","description":null,"helpText":"","infoUrls":[],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt_nodefaultexempt_0","displayName":"Allow all exemptions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt_nodefaultexempt_1","displayName":"Multicast, broadcast, & ISAKMP exempt.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt_nodefaultexempt_2","displayName":"RSVP, Kerberos, and ISAKMP are exempt.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_nodefaultexempt_nodefaultexempt_3","displayName":"Only ISAKMP is exempt.","description":null,"helpText":null}]},"c6b8bc83c90ea816":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages","displayName":"Remove Default Microsoft Store packages from the system.","description":"Removes Default Microsoft Store packages from the system.\n\nIf you enable this policy, the selected Microsoft Store apps in the provided list will be uninstalled from the system. You can make adjustments to the default settings.\n\nUnselected apps in the list will not be removed.\n\nDefault is 'disabled' (key not present).\n\nIf the policy is disabled or not configured, no Default Microsoft Store packages will be removed from the system.\n\n* This is a headless app (no UI)\n\n** This app is the default handler for a common file type or protocol. Removing this app might result in a degraded user experience. We do not recommend removing this app.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-removedefaultmicrosoftstorepackages"],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_1","displayName":"Enabled","description":null,"helpText":null}]},"c681a0da531ab25a":{"id":"device_vendor_msft_policy_config_audit_policychange_auditpolicychange","displayName":"Audit Changes to Audit Policy","description":"This policy setting allows you to audit changes in the security audit policy settings such as the following: Settings permissions and audit settings on the Audit Policy object. Changes to the system audit policy. Registration of security event sources. De-registration of security event sources. Changes to the per-user audit settings. Changes to the value of CrashOnAuditFail. Changes to the system access control list on a file system or registry object. Changes to the Special Groups list. Note: System access control list (SACL) change auditing is done when a SACL for an object changes and the policy change category is enabled. Discretionary access control list (DACL) and ownership changes are audited when object access auditing is enabled and the object's SACL is configured for auditing of DACL/Owner change.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#policychange_auditpolicychange"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_policychange_auditpolicychange_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditpolicychange_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditpolicychange_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditpolicychange_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"c687b20a55cc3981":{"id":"device_vendor_msft_policy_config_bluetooth_setminimumencryptionkeysize","displayName":"Set Minimum Encryption Key Size","description":"There are multiple levels of encryption strength when pairing Bluetooth devices. This policy helps prevent weaker devices cryptographically being used in high security environments.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Bluetooth#setminimumencryptionkeysize"],"categoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","categoryName":"Bluetooth","options":null},"c6aa8b26700fa897":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed","displayName":"Allow media autoplay","description":"Setting the policy to True lets Google Chrome autoplay media. Setting the policy to False stops Google Chrome from autoplaying media.\r\n\r\n By default, Google Chrome doesn't autoplay media. But, for certain URL patterns, you can use the AutoplayAllowlist policy to change this setting.\r\n\r\nIf this policy changes while Google Chrome is running, it only applies to newly opened tabs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"c6369ac25a3401c2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_enableexperimentalpoliciesdesc","displayName":"Enables experimental policies (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c6a7a3e42f2f4a9f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl","displayName":"URL of an XML file that contains URLs to load in an alternative browser.","description":"Setting the policy to a valid URL has Google Chrome download the site list from that URL and apply the rules as if they were set up with the BrowserSwitcherUrlList policy.\r\n\r\nLeaving it unset (or set to a invalid URL) means Google Chrome doesn't use the policy as a source of rules for switching browsers.\r\n\r\nNote: This policy points to an XML file in the same format as Internet Explorer®'s SiteList policy. This loads rules from an XML file, without sharing those rules with Internet Explorer®. Read more on Internet Explorer®'s SiteList policy ( https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode)\r\n\r\nExample value: http://example.com/sitelist.xml","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_1","displayName":"Enabled","description":null,"helpText":null}]},"c614dd663284bce8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_popupsblockedforurlsdesc","displayName":"Block popups on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"c6bc55507aa2a9a2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled","displayName":"Enable Safe Browsing","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c637bf889adc2667":{"id":"device_vendor_msft_policy_config_deliveryoptimization_docachehostsource","displayName":"DO Cache Host Source","description":"Specifies how your client(s) can discover Microsoft Connected Cache servers dynamically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#docachehostsource"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"c6f7be2c6e1dd710":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_ccdwritecachedirectory","displayName":"Write Cache Directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"f2d139ed-a314-48b7-b700-4d11adfcc309","categoryName":"Cloud Cache Service","options":null},"c6a49d4fa948d978":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowedtoformatandejectremovablemedia","displayName":"Devices Allowed To Format And Eject Removable Media","description":"Devices: Allowed to format and eject removable media This security setting determines who is allowed to format and eject removable NTFS media. This capability can be given to: Administrators Administrators and Interactive Users Default: This policy is not defined and only Administrators have this ability.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_allowedtoformatandejectremovablemedia"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"c677d9d30b69ca20":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":null},"c6de42e35fe92b0d":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications","displayName":"Allows system notifications","description":"Lets you use system notifications instead of Microsoft Edge's embedded Message Center on Windows and Linux.\r\n\r\nIf set to True or not set, Microsoft Edge is allowed to use system notifications.\r\n\r\nIf set to False, Microsoft Edge will not use system notifications. Microsoft Edge's embedded Message Center will be used as a fallback.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"c6625090a39c8c1c":{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy","displayName":"Microsoft Edge management service policy overrides platform policy.","description":"If you enable this policy, the cloud-based Microsoft Edge management service policy takes precedence if it conflicts with platform policy.\r\n\r\nIf you disable or don't configure this policy, platform policy takes precedence if it conflicts with the cloud-based Microsoft Edge management service policy.\r\n\r\nThis mandatory policy affects machine scope cloud-based Microsoft Edge management policies.\r\n\r\nMachine policies apply to all edge browser instances regardless of the user who is logged in.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"c65404fe9317bbc4":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_onprintenterpriseconnector","displayName":"Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c64a5cfa1114f9f8":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_sharedworkerextendedlifetimeenabled","displayName":"Enable the extended lifetime option for SharedWorkers","description":"Controls whether Microsoft Edge allows SharedWorkers to use the extendedLifetime option.\r\n\r\nIf you enable or don't configure this policy, SharedWorkers can use the extended lifetime option in the SharedWorker constructor.\r\n\r\nIf you disable this policy, the extended lifetime option is ignored, even if it is requested by the page.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_sharedworkerextendedlifetimeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_sharedworkerextendedlifetimeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c6df38ad75dda8d4":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall","displayName":"Prevent install of the BHO to redirect incompatible sites from Internet Explorer to Microsoft Edge","description":"This setting lets you specify whether to block the install of the Browser Helper Object (BHO) that enables redirecting incompatible sites from Internet Explorer to Microsoft Edge for sites that require a modern browser.\r\n\r\nIf you enable this policy, the BHO will not be installed. If it is already installed it will be uninstalled on the next Microsoft Edge update.\r\n\r\nIf this policy is not configured or is disabled, the BHO will be installed.\r\n\r\nThe BHO is required for incompatible site redirection to occur, however whether redirection occurs or not is also controlled by 'RedirectSitesFromInternetExplorerRedirectMode' (Redirect incompatible sites from Internet Explorer to Microsoft Edge).\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall_1","displayName":"Enabled","description":null,"helpText":null}]},"c68828c66ce454c2":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites","displayName":"Block JavaScript from using JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are not allowed to run JavaScript JIT (Just In Time) compiler enabled.\r\n\r\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitBlockedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT disabled, but fabrikam.com will use the policy from 'DefaultJavaScriptJitSetting' (Control use of JavaScript JIT), if set, or default to JavaScript JIT enabled.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptJitSetting' applies to the site, if set, otherwise JavaScript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"c62f81f7f1544b38":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended","displayName":"Show Hubs Sidebar","description":"Shows a launcher bar on the right side of Microsoft Edge's screen.\r\n\r\nEnable this policy to always show the Sidebar.\r\nDisable this policy to never show the Sidebar.\r\n\r\nIf you don't configure the policy, users can choose whether to show the Sidebar.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c6327b92f64acb15":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_spdesignexe","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_spdesignexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_spdesignexe_1","displayName":"True","description":null,"helpText":null}]},"c69a40a617c3f2b0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winprojexe90","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winprojexe90_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winprojexe90_1","displayName":"True","description":null,"helpText":null}]},"c605f3a504fd557e":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_sharepointonpremoidc_sharepointonpremoidc_dropdown","displayName":"Allow OIDC authentication:","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_sharepointonpremoidc_sharepointonpremoidc_dropdown_0","displayName":"Disable OIDC Authentication","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_sharepointonpremoidc_sharepointonpremoidc_dropdown_1","displayName":"Enable OIDC Authentication","description":null,"helpText":null}]},"c6276fecb1212a89":{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery","displayName":"Select Lid Close Action On Battery","description":"This policy setting specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectlidcloseactiononbattery"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},"c680b66deb983eec":{"id":"device_vendor_msft_policy_config_privacy_allowautoacceptpairingandprivacyconsentprompts","displayName":"Allow Auto Accept Pairing And Privacy Consent Prompts","description":"Allows or disallows the automatic acceptance of the pairing and privacy user consent dialog when launching apps. NoteThere were issues reported with the previous release of this policy and a fix was Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#allowautoacceptpairingandprivacyconsentprompts"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_allowautoacceptpairingandprivacyconsentprompts_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_allowautoacceptpairingandprivacyconsentprompts_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"c6c0b8f407497195":{"id":"device_vendor_msft_policy_config_update_configuredeadlineforfeatureupdates","displayName":"Configure Deadline For Feature Updates","description":"Number of days before feature updates are installed on devices automatically regardless of active hours. Before the deadline passes, users will be able to schedule restarts, and automatic restarts can happen outside of active hours. When set to 0, updates will download and install immediately, but might not finish within the day due to device availability and network connectivity.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlineforfeatureupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"c6dd9bfe408028a4":{"id":"device_vendor_msft_policy_config_windowslogon_allowautomaticrestartsignon","displayName":"Sign-in and lock last interactive user automatically after a restart","description":"This policy setting controls whether a device will automatically sign in and lock the last interactive user after the system restarts or after a shutdown and cold boot.\n\nThis only occurs if the last interactive user didn’t sign out before the restart or shutdown.​\n\nIf the device is joined to Active Directory or Azure Active Directory, this policy only applies to Windows Update restarts. Otherwise, this will apply to both Windows Update restarts and user-initiated restarts and shutdowns.​\n\nIf you don’t configure this policy setting, it is enabled by default. When the policy is enabled, the user is automatically signed in and the session is automatically locked with all lock screen apps configured for that user after the device boots.​\n\nAfter enabling this policy, you can configure its settings through the ConfigAutomaticRestartSignOn policy, which configures the mode of automatically signing in and locking the last interactive user after a restart or cold boot​.\n\nIf you disable this policy setting, the device does not configure automatic sign in. The user’s lock screen apps are not restarted after the system restarts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-allowautomaticrestartsignon"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"device_vendor_msft_policy_config_windowslogon_allowautomaticrestartsignon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_allowautomaticrestartsignon_1","displayName":"Enabled","description":null,"helpText":null}]},"c6b1a702313b777f":{"id":"diskmanagement_restrictions_networkstorage","displayName":"Network Storage","description":"Specifies the mount policy for network storage:\n* Allowed - network storage that is read-write or read-only will be mounted.\n* ReadOnly - only network storage that is read-only will be mounted. Note that network storage that is read-write will not be mounted read-only.\n* Disallowed - no network storage will be mounted.","helpText":null,"infoUrls":[],"categoryId":"83febe72-a64f-4051-9071-1efae1ea9a15","categoryName":"Disk Management","options":[{"id":"diskmanagement_restrictions_networkstorage_0","displayName":"Allowed","description":null,"helpText":null},{"id":"diskmanagement_restrictions_networkstorage_1","displayName":"ReadOnly","description":null,"helpText":null},{"id":"diskmanagement_restrictions_networkstorage_2","displayName":"Disallowed","description":null,"helpText":null}]},"c65841855f2e24a2":{"id":"softwareupdate_beta_offerprograms_item_description","displayName":"Description","description":"A human readable description of the beta program.","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"c6940834f54ddd93":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname_newgpodisplaynameheading","displayName":"GPO Name: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"c671e3c0ea51768b":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_routing","displayName":"Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-routing"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_routing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_routing_1","displayName":"Enabled","description":null,"helpText":null}]},"c694bb73d9a0a65d":{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled","displayName":"Pin Apps to Start when installed (User)","description":"This policy setting allows pinning apps to Start by default, when they are included by AppID on the list.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-startpinappswheninstalled"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_1","displayName":"Enabled","description":null,"helpText":null}]},"c6273d2f8cd7dc46":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled","displayName":"Enable First-Party Sets. (User)","description":"This policy is provided as a way to opt-out of the First-Party Sets feature.\r\n\r\nWhen this policy is unset or set to Enabled, the First-Party Sets feature is enabled.\r\n\r\nWhen this policy is set to Disabled, the First-Party Sets feature is disabled.\r\n\r\nIt controls whether Chrome supports First-Party Sets related integrations.\r\n\r\nThis is the equivalent of the RelatedWebsiteSetsEnabled policy.\r\nEither policy may be used, but this one will be deprecated soon so the RelatedWebsiteSetsEnabled policy is preferred.\r\nThey both have the same effect on the browser's behavior.","helpText":"","infoUrls":[],"categoryId":"da78ddbc-fc94-48f9-8808-4b160d6f1d50","categoryName":"First- Party Sets Settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c61c041416eb6ed4":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"c62cd8829b53ffe7":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"c6b2cfb0d080c064":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowscriptlets"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"c6940fe2516e67c3":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowuserdatapersistence"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"c65249d46ee223b0":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804","displayName":"Launching applications and files in an IFRAME (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_1","displayName":"Prompt","description":null,"helpText":null}]},"c6f49540019d60b0":{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled","displayName":"Guided Switch Enabled (User)","description":"Allows Microsoft Edge to prompt the user to switch to the appropriate profile when Microsoft Edge detects that a link is a personal or work link.\r\n\r\nIf you enable this policy, you'll be prompted to switch to another account if the current profile doesn't work for the requesting link.\r\n\r\nIf you disable this policy, you won't be prompted to switch to another account when there's a profile and link mismatch.\r\n\r\nIf this policy isn't configured, guided switch is turned on by default. A user can override this value in the browser settings.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c6640da3b17b7c3f":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended","displayName":"Performance Detector Enabled (User)","description":"The performance detector detects tab performance issues and recommends actions to fix the performance issues.\r\n\r\nIf you enable or don't configure this policy, performance detector is turned on.\r\n\r\nIf you disable this policy, performance detector is turned off.\r\n\r\nThe user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about performance detector: https://aka.ms/EdgePerformanceDetector","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c67d5ea2f44dc085":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed","displayName":"Out-of-process print drivers allowed (User)","description":"This policy determines whether Microsoft Edge handles interactions with printer drivers through a separate service process.\r\n\r\nUsing a service process for tasks like querying available printers, retrieving print driver settings, and submitting documents to local printers improves browser stability and prevents UI freezing during Print Preview.\r\n\r\nEnabled or Not Set: Microsoft Edge will use a separate service process for these printing tasks.\r\n\r\nDisabled: Microsoft Edge will perform these printing tasks within the browser process.\r\n\r\nNote: This policy will be deprecated in the future once the transition to out-of-process print drivers is fully implemented.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"c622a3127bf9041b":{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended","displayName":"Configure Edge scareware blocker to block sites detected as potential tech scams (User)","description":"This policy controls whether Microsoft Edge blocks sites that are detected as potential tech scams.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block sites detected as potential tech scams.\r\n\r\nIf you disable this policy, Microsoft Edge will not block sites detected as potential tech scams.","helpText":"","infoUrls":[],"categoryId":"fea97af7-df89-4fde-8e2b-f8e7f7b6b741","categoryName":"Scareware Blocker settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c6f583891f3f84a0":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist","displayName":"Configure list of force-installed Web Apps (User)","description":"Specifies a list of websites that are installed silently, without user interaction, and which can't be uninstalled or disabled by the user.\r\n\r\nEach list item of the policy is an object with the following members:\r\n - \"url\", which is mandatory. \"url\" should be the URL of the web app to install.\r\n\r\nValues for the optional members are:\r\n - \"launch_container\" should be either \"window\" or \"tab\" to indicate how the Web App will be opened after it's installed.\r\n - \"create_desktop_shortcut\" should be true if a desktop shortcut should be created on Windows.\r\n\r\nIf \"default_launch_container\" is omitted, the app will open in a tab by default. Regardless of the value of \"default_launch_container\", users can change which container the app will open in. If \"create_desktop_shortcuts\" is omitted, no desktop shortcuts will be created.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.contoso.com/maps\", \r\n \"create_desktop_shortcut\": true, \r\n \"default_launch_container\": \"window\"\r\n }, \r\n {\r\n \"url\": \"https://app.contoso.edu\", \r\n \"default_launch_container\": \"tab\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"c662ef62c21657f4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_danish","displayName":"Danish (User)","description":"Enables the editing language Danish","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_danish_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_danish_1","displayName":"Enabled","description":null,"helpText":null}]},"c666933fd90935d0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_georgian","displayName":"Georgian (User)","description":"Enables the editing language Georgian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_georgian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_georgian_1","displayName":"Enabled","description":null,"helpText":null}]},"c69334009075c061":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustlegacysignature","displayName":"Trust legacy VBA signatures (User)","description":"This policy setting allows you to control how Office loads and verifies legacy Visual Basic for Applications (VBA) signatures.\r\n\r\nIf you enable or do not configure this policy setting, Office applications can load and verify legacy VBA signatures.\r\n\r\nIf you disable this policy setting, Office applications can’t load or verify legacy VBA signatures. They can only load and verify agile VBA signatures.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustlegacysignature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustlegacysignature_1","displayName":"Enabled","description":null,"helpText":null}]},"c61e2ad13f90b5f1":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_checktoenableautomaticbackup","displayName":"Check to enable automatic backup (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c02141e6-0725-4f6f-9138-83d10c6bc104","categoryName":"Backup","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_checktoenableautomaticbackup_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_checktoenableautomaticbackup_1","displayName":"True","description":null,"helpText":null}]},"c6ee67048fd04bca":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_deleteditemsfolderhomepage_l_urladdressofassociatedwebpage49","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"c6187e758892ccac":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingcrls","displayName":"Missing CRLs (User)","description":"This policy setting controls whether Outlook considers a missing certificate revocation list (CRL) a warning or an error. Digital certificates contain an attribute that shows where the corresponding CRL is located. CRLs contain lists of digital certificates that have been revoked by their controlling certification authorities (CAs), typically because the certificates were issued improperly or their associated private keys were compromised. If a CRL is missing or unavailable, Outlook cannot determine whether a certificate has been revoked. Therefore, an improperly issued certificate or one that has been compromised might be used to gain access to data. \r\n\r\nIf you enable this policy setting, you can choose between two options that determine how Outlook functions when a CRL is missing: \r\n\r\n- Warning. This option is the default configuration in Outlook and ensures that Outlook displays a warning message when a CRL is missing. \r\n\r\n- Error. This option ensures that Outlook displays an error message when a CRL is missing. \r\n\r\nIf you disable or do not configure this policy setting, Outlook displays a warning message when a CRL is not available.","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingcrls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingcrls_1","displayName":"Enabled","description":null,"helpText":null}]},"c6c220fae21986b1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_cachedexchangelowbandwidththreshold","displayName":"Cached Exchange low bandwidth threshold (User)","description":"Specifies the bit rate threshold value. If the bit rate of the active network connection is below this value, Outlook identifies the network connection as a \"slow\" connection and operates accordingly (for example, downloading headers instead of full messages).","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_cachedexchangelowbandwidththreshold_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_cachedexchangelowbandwidththreshold_1","displayName":"Enabled","description":null,"helpText":null}]},"c6bc0fd8a39388d4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_l_descriptioncolon86","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"c6d561513f7bbb4e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_datecolon53","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"c62dda0116e019e6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_descriptioncolon70","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"c6de6288216e86fa":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}_printersharedid","displayName":"Shared ID (User)","description":"Universal Print printer shared id","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/UPPrinterInstalls-csp/"],"categoryId":"56c54112-2991-4bda-9e01-e6868bd07726","categoryName":"Printer Provisioning","options":null},"c6711f76eb2245a1":{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_stayconnected","displayName":"Stay Connected (Windows Insiders only)","description":"When set to 0: Default network discovery behavior is applied. When set to 1: Once connected, the device will always stay connected to this network. This means the device will not attempt to discover or switch to other higher priority networks until it first loses connectivity to this network.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":[{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_stayconnected_0","displayName":"Default network discovery behavior.","description":"Default network discovery behavior.","helpText":null},{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}_stayconnected_1","displayName":"Once connected to this network, try to stay connected.","description":"Once connected to this network, try to stay connected.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c7.json b/public/intune-definitions/c7.json new file mode 100644 index 000000000000..88ea90bf56c1 --- /dev/null +++ b/public/intune-definitions/c7.json @@ -0,0 +1 @@ +{"c77d6b0f3cdbe0c9":{"id":"com.apple.cellular_attachapn_authenticationtype","displayName":"Authentication Type","description":"The authentication type for logging in.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":[{"id":"com.apple.cellular_attachapn_authenticationtype_0","displayName":"CHAP","description":null,"helpText":null},{"id":"com.apple.cellular_attachapn_authenticationtype_1","displayName":"PAP","description":null,"helpText":null}]},"c7f4a93bbd831420":{"id":"com.apple.dock_persistent-others_item_tile-data_url","displayName":"URL","description":"The URL string","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"c7db8a07f5f2888f":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogo_light_logo","displayName":"Light logo","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c717d8b8bdb74927":{"id":"com.apple.managedclient.preferences_profiles","displayName":"Performance Profiles","description":"Names of performance profiles to apply.","helpText":null,"infoUrls":[],"categoryId":"d40a32e1-ab3e-4cbc-aa03-4766792e563e","categoryName":"Performance Profiles Configuration","options":null},"c73b4dda6173aeb8":{"id":"com.apple.managedclient.preferences_sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\n\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\n\nIf a site matches a URL pattern in this policy, the following policies will not be considered: \"TabCaptureAllowedByOrigins\", \"WindowCaptureAllowedByOrigins\", \"ScreenCaptureAllowedByOrigins\", \"ScreenCaptureAllowed\".\n\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sameorigintabcaptureallowedbyorigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c78b7fcc25a7834f":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff","displayName":"Repeating Power Off","description":"The schedule for turning the device off. ","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"c75fdddf584922cd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.configuredonottrack","displayName":"Configure Do Not Track","description":"Specify whether to send Do Not Track requests to websites that ask for tracking info. Do Not Track requests let the websites you visit know that you don't want your browsing activity to be tracked. By default, Microsoft Edge doesn't send Do Not Track requests, but users can turn on this feature to send them.\n\nIf you enable this policy, Do Not Track requests are always sent to websites asking for tracking info.\n\nIf you disable this policy, requests are never sent.\n\nIf you don't configure this policy, users can choose whether to send these requests.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.configuredonottrack_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configuredonottrack_true","displayName":"Enabled","description":null,"helpText":null}]},"c794814170bcd7db":{"id":"com.microsoft.edge.mamedgeappconfigsettings.downloaddirectory_recommended","displayName":"Set download directory (users can override)","description":"Configures the directory to use when downloading files.\n\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user specified one or chose to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\n\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\n\nIf you set an invalid path, Microsoft Edge defaults to the user's default download directory.\n\nIf the folder specified by the path doesn't exist, the download triggers a prompt that asks the user where they want to save their download.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"c77b1739211c93e9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgefollowenabled","displayName":"Enable Follow service in Microsoft Edge (Obsolete)","description":"Lets Microsoft Edge browser enable Follow service and apply it to users.\n\nUsers can use the Follow feature for an influencer, site, or topic in Microsoft Edge.\n\nIf you enable or don't configure this policy, Follow in Microsoft Edge is applied.\n\nIf you disable this policy, Microsoft Edge won't communicate with Follow service to provide the follow feature.\n\nThis policy is obsolete after version 126.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgefollowenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgefollowenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c739c802b5bb1b6a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (Obsolete)","description":"This policy is obsoleted in favor of \"ExemptFileTypeDownloadWarnings\" because of a type mismatch that caused errors in Mac.\n\nYou can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that are exempted from file type extension-based download warnings. This exemption lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users don't see a warning when downloading \"jnlp\" files from \"website1.com\" but see a download warning when downloading \"jnlp\" files from \"website2.com\".\n\nFiles with file type extensions specified for domains identified by this policy are still subject to nonfile type extension-based security warnings such as mixed-content download warnings and Microsoft Defender SmartScreen warnings.\n\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings show warnings to the user.\n\nIf you enable this policy:\n\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\n* The file type extension entered must be in lower-cased ASCII. The leading separator shouldn't be included when listing the file type extension; so, list \"jnlp\" should be used instead of \".jnlp\".\n\nExample:\n\nThe following example value prevents file type extension-based download warnings on swf, exe, and jnlp extensions for *.contoso.com domains. It shows the user a file type extension-based download warning on any other domain for exe and jnlp files but not for swf files.\n\n[\n { \"file_extension\": \"jnlp\", \"domains\": [\"contoso.com\"] },\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\n { \"file_extension\": \"swf\", \"domains\": [\"*\"] }\n]\n\nWhile the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension isn't recommended due to security concerns. It's shown in the example merely to demonstrate the ability to do so.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"c7df4e20e7b6641c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended","displayName":"Enable network prediction (users can override)","description":"Enables network prediction and prevents users from changing this setting.\n\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\n\nIf you don't configure this policy, network prediction is enabled but the user can change it.\n\nPolicy options mapping:\n\n* NetworkPredictionAlways (0) = Predict network actions on any network connection\n\n* NetworkPredictionWifiOnly (1) = Not supported, if this value is used it will be treated as if 'Predict network actions on any network connection' (0) was set\n\n* NetworkPredictionNever (2) = Don't predict network actions on any network connection\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended_networkpredictionalways","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended_networkpredictionwifionly","displayName":"Not supported, if this value is used it will be treated as if 'Predict network actions on any network connection' (0) was set","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended_networkpredictionnever","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},"c72a7b2163fb895e":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werexlusion_2","displayName":"List of applications to be excluded","description":"This policy setting limits Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on.\r\n\r\nIf you enable this policy setting, you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors, click Show, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). File names must always include the .exe file name extension. To remove an application from the list, click the name, and then press DELETE. If this policy setting is enabled, the Exclude errors for applications on this list setting takes precedence.\r\n\r\nIf you disable or do not configure this policy setting, errors are reported on all Microsoft and Windows applications by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werexlusion-2"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werexlusion_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werexlusion_2_1","displayName":"Enabled","description":null,"helpText":null}]},"c72f939a211e5686":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_additionalactiontimeout_reporting_additionalactiontimeout","displayName":"Configure time out for detections requiring additional action","description":null,"helpText":"","infoUrls":[],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":null},"c77fac606ffec13f":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_purgeitemsafterdelay","displayName":"Turn on removal of items from scan history folder","description":"This policy setting defines the number of days items should be kept in the scan history folder before being permanently removed. The value represents the number of days to keep items in the folder. If set to zero, items will be kept forever and will not be automatically removed. By default, the value is set to 30 days.\r\n\r\n If you enable this setting, items will be removed from the scan history folder after the number of days specified.\r\n\r\n If you disable or do not configure this setting, items will be kept in the scan history folder for the default number of days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-purgeitemsafterdelay"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_purgeitemsafterdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_purgeitemsafterdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"c7a3e3f1d5460805":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_sharedsignatureslocation_signatureupdate_sharedsignatureslocation","displayName":"Define file share for downloading security intelligence updates in virtual environments","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":null},"c7e0e3205f6462e2":{"id":"device_vendor_msft_policy_config_admx_tcpip_windows_scaling_heuristics_state","displayName":"Set Window Scaling Heuristics State","description":"This policy setting allows you to configure Window Scaling Heuristics. Window Scaling Heuristics is an algorithm to identify connectivity and throughput problems caused by many Firewalls and other middle boxes that don't interpret Window Scaling option correctly.\r\n\r\nIf you do not configure this policy setting, the local host settings are used.\r\n\r\nIf you enable this policy setting, Window Scaling Heuristics will be enabled and system will try to identify connectivity and throughput problems and take appropriate measures.\r\n\r\nIf you disable this policy setting, Window Scaling Heuristics will be disabled and system will not try to identify connectivity and throughput problems casued by Firewalls or other middle boxes.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-windows-scaling-heuristics-state"],"categoryId":"91789113-6339-4e96-8e1d-73a4dec4967f","categoryName":"Parameters","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_windows_scaling_heuristics_state_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_windows_scaling_heuristics_state_1","displayName":"Enabled","description":null,"helpText":null}]},"c779948592c251dd":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_2","displayName":"Turn off shell protocol protected mode","description":"This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applications can open folders and launch files. The protected mode reduces the functionality of this protocol allowing applications to only open a limited set of folders. Applications are not able to open files with this protocol when it is in the protected mode. It is recommended to leave this protocol in the protected mode to increase the security of Windows.\r\n\r\nIf you enable this policy setting the protocol is fully enabled, allowing the opening of folders and files.\r\n\r\nIf you disable this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.\r\n\r\nIf you do not configure this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-shellprotocolprotectedmodetitle-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_2_1","displayName":"Enabled","description":null,"helpText":null}]},"c78786a2113e4373":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_diskcachesize","displayName":"Set disk cache size: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"c7eaed11313fa6c5":{"id":"device_vendor_msft_policy_config_defender_excludedpaths","displayName":"Excluded Paths","description":"Allows an administrator to specify a list of directory paths to ignore during a scan. Each path in the list must be in a new line.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#excludedpaths"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"c73c6fd2f72ad9f0":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares","displayName":"Network Access Do Not Allow Anonymous Enumeration Of Sam Accounts And Shares","description":"Network access: Do not allow anonymous enumeration of SAM accounts and shares This security setting determines whether anonymous enumeration of SAM accounts and shares is allowed. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. If you do not want to allow anonymous enumeration of SAM accounts and shares, then enable this policy. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_donotallowanonymousenumerationofsamaccountsandshares"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_0","displayName":"Disabled","description":"Disabled","helpText":null}]},"c73dc2d1cae917b3":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended","displayName":"Save and fill memberships","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\r\n\r\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c78b16c9ea002609":{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_mandatoryextensionsforinprivatenavigationdesc","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"c7c30e8719a4eaf7":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_importstartuppagesettings","displayName":"Allow importing of startup page settings","description":"Allows users to import Startup settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the Startup settings are always imported.\r\n\r\nIf you disable this policy, startup settings are not imported at first run or at manual import.\r\n\r\nIf you don't configure this policy, startup settings are imported at first run, and users can choose whether to import this data manually by selecting browser settings option during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import startup settings on first run, but users can select or clear **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Microsoft Edge Legacy and Google Chrome (on Windows 7, 8, and 10) browsers.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_importstartuppagesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_importstartuppagesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"c7db0be0a05d88a4":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_enhancesecuritymodeenforcelistdomainsdesc","displayName":"Configure the list of domains for which enhance security mode will always be enforced (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c7408a4a19535a91":{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_enteracstandbytimeout","displayName":"System Sleep Timeout (seconds):","description":"","helpText":"","infoUrls":[],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":null},"c7181cce077084fb":{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowsuggestedappsinwindowsinkworkspace","displayName":"Allow Suggested Apps In Windows Ink Workspace","description":"Show recommended app suggestions in the ink workspace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsInkWorkspace#allowsuggestedappsinwindowsinkworkspace"],"categoryId":"01d16911-19a1-4dcb-8089-ffa4781d977c","categoryName":"Windows Ink Workspace","options":[{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowsuggestedappsinwindowsinkworkspace_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowsuggestedappsinwindowsinkworkspace_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"c78c70ce21388c4a":{"id":"softwareupdate_automaticactions","displayName":"Automatic Actions","description":"Specifies various automatic Software Update functionality. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"c7c3261841f9e0bc":{"id":"user_vendor_msft_policy_config_admx_desktop_nowindowminimizingshortcuts","displayName":"Turn off Aero Shake window minimizing mouse gesture (User)","description":"Prevents windows from being minimized or restored when the active window is shaken back and forth with the mouse.\r\n \r\nIf you enable this policy, application windows will not be minimized or restored when the active window is shaken back and forth with the mouse.\r\n\r\nIf you disable or do not configure this policy, this window minimizing and restoring gesture will apply.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nowindowminimizingshortcuts"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nowindowminimizingshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nowindowminimizingshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"c77c9931c33f6da5":{"id":"user_vendor_msft_policy_config_admx_logon_run_1_runlistbox1","displayName":"Items to run at logon (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":null},"c798ee9c14b9507f":{"id":"user_vendor_msft_policy_config_admx_startmenu_memcheckboxinrundlg","displayName":"Add \"Run in Separate Memory Space\" check box to Run dialog box (User)","description":"Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process.\r\n\r\nAll DOS and 16-bit programs run on Windows 2000 Professional and Windows XP Professional in the Windows Virtual DOS Machine program. VDM simulates a 16-bit environment, complete with the DLLs required by 16-bit programs. By default, all 16-bit programs run as threads in a single, shared VDM process. As such, they share the memory space allocated to the VDM process and cannot run simultaneously.\r\n\r\nEnabling this setting adds a check box to the Run dialog box, giving users the option of running a 16-bit program in its own dedicated NTVDM process. The additional check box is enabled only when a user enters a 16-bit program in the Run dialog box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-memcheckboxinrundlg"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_memcheckboxinrundlg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_memcheckboxinrundlg_1","displayName":"Enabled","description":null,"helpText":null}]},"c77920c259b565e8":{"id":"user_vendor_msft_policy_config_admx_startmenu_noinstrumentation","displayName":"Turn off user tracking (User)","description":"This policy setting allows you to turn off user tracking.\r\n\r\nIf you enable this policy setting, the system does not track the programs that the user runs, and does not display frequently used programs in the Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the system tracks the programs that the user runs. The system uses this information to customize Windows features, such as showing frequently used programs in the Start Menu.\r\n\r\nAlso, see these related policy settings: \"Remove frequent programs liist from the Start Menu\" and \"Turn off personalized menus\".\r\n\r\nThis policy setting does not prevent users from pinning programs to the Start Menu or Taskbar. See the \"Remove pinned programs list from the Start Menu\" and \"Do not allow pinning programs to the Taskbar\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noinstrumentation"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noinstrumentation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noinstrumentation_1","displayName":"Enabled","description":null,"helpText":null}]},"c7bdba57d1c64fe3":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users cannot perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-restrictedlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"c77e53a42a5eed1a":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nohardwaretab","displayName":"Remove Hardware tab (User)","description":"Removes the Hardware tab.\r\n\r\nThis setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nohardwaretab"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nohardwaretab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nohardwaretab_1","displayName":"Enabled","description":null,"helpText":null}]},"c7993f1188d2144f":{"id":"user_vendor_msft_policy_config_browser_allowprelaunch","displayName":"Allow Prelaunch (User)","description":"Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowprelaunch"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowprelaunch_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowprelaunch_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"c70db99fecefc3c7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce","displayName":"Abusive Experience Intervention Enforce (User)","description":"If SafeBrowsingEnabled is not Disabled, then setting AbusiveExperienceInterventionEnforce to Enabled or leaving it unset prevents sites with abusive experiences from opening new windows or tabs.\r\n\r\nSetting SafeBrowsingEnabled to Disabled or AbusiveExperienceInterventionEnforce to Disabled lets sites with abusive experiences open new windows or tabs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce_1","displayName":"Enabled","description":null,"helpText":null}]},"c774e31b32cf3da8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled","displayName":"Set Google Chrome as Default Browser (User)","description":"Setting the policy to True has Google Chrome always check whether it's the default browser on startup and, if possible, automatically register itself. Setting the policy to False stops Google Chrome from ever checking if it's the default and turns user controls off for this option.\r\n\r\nLeaving the policy unset means Google Chrome lets users control whether it's the default and, if not, whether user notifications should appear.\r\n\r\nNote: For Microsoft®Windows® administrators, turning this setting on only works for machines running Windows 7. For later versions, you must deploy a \"default application associations\" file that makes Google Chrome the handler for the https and http protocols (and, optionally, the ftp protocol and other file formats). See Chrome Help ( https://support.google.com/chrome?p=make_chrome_default_win ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c7df5cdbfc1468db":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls","displayName":"Allow Local Fonts permission on these sites (User)","description":"Sets a list of site url patterns that specify sites which will automatically grant the local fonts permission. This will extend the ability of sites to see information about local fonts.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultLocalFontsSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c76781d48c8284aa":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist","displayName":"Number of workbooks in the Recent Workbooks list (User)","description":"This policy setting specifies the number of entries displayed in the Recent Workbooks list that appears when users click Open on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent Workbooks list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Workbooks list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist_1","displayName":"Enabled","description":null,"helpText":null}]},"c7a96b8c1c68b2ce":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05","displayName":"Trusted Location #5 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_1","displayName":"Enabled","description":null,"helpText":null}]},"c7ee66904ba41e40":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1","displayName":"Global Address Book Download Initial Delay (User)","description":"\r\nWhen set, this will delay the initial download of the Global Address Book by a random number between 0 and the number of minutes specified after sign-in. When the value is 0, the download will begin immediately after sign-in. By default, the value is 60. This means that there will be a random delay between 0 and 60 minutes after sign-in before Lync begins to download the address book.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1_1","displayName":"Enabled","description":null,"helpText":null}]},"c78cbef98f1f8470":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting","displayName":"Default clipboard site permission (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_2","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_3","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},"c792d5757a4b7feb":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting","displayName":"Default idle detection setting (User)","description":"Setting this policy to 1 - AllowIdleDetection allows websites to use the Idle Detection API without requesting user permission.\r\n\r\nSetting this policy to 2 - BlockIdleDetection prevents websites from using the Idle Detection API.\r\n\r\nSetting this policy to 3 - AskIdleDetection requires websites to request user permission each time before using the Idle Detection API.\r\n\r\nIf you do not configure this policy, users can decide whether to allow the Idle Detection API and can change this setting themselves.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowIdleDetection (1) = Allow sites to detect idle state without asking the user\r\n\r\n* BlockIdleDetection (2) = Do not allow any site to detect the user's idle state\r\n\r\n* AskIdleDetection (3) = Ask every time a site wants to detect the user's idle state\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"c730eea169a23138":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect","displayName":"Specify how \"in-page\" navigations to unconfigured sites behave when started from Internet Explorer mode pages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_1","displayName":"Keep only automatic navigations in Internet Explorer mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_2","displayName":"Keep all in-page navigations in Internet Explorer mode","description":null,"helpText":null}]},"c7959dbd635dde40":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_internetexplorerintegrationcloudusersitesreporting","displayName":"Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c76baa74fa44e50c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastserviceservername4","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"c7058313509d3fe6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_listoferrormessagestocustomize","displayName":"List of error messages to customize (User)","description":"Defines a list of custom error messages to activate.","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_listoferrormessagestocustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_listoferrormessagestocustomize_1","displayName":"Enabled","description":null,"helpText":null}]},"c7d710613c663512":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiclebanon","displayName":"Arabic (Lebanon) (User)","description":"Enables the editing language Arabic (Lebanon)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiclebanon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiclebanon_1","displayName":"Enabled","description":null,"helpText":null}]},"c7393d4de04eb207":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_officedocumentcachelocation","displayName":"Office document cache location (User)","description":"This policy setting determines the location where Office maintains the Office Document Cache.\r\n\r\nIf you enable this policy setting, you can specify the location where Office maintains the Office Document Cache.\r\n\r\nIf you disable or do not configure this policy setting, the Office Document Cache will be stored in the following location: %LocalAppData%\\Microsoft\\Office\\16.0\\OfficeFileCache","helpText":"","infoUrls":[],"categoryId":"2d6891a4-ee83-4e55-8e23-09513e1306e4","categoryName":"Microsoft Office Document Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_officedocumentcachelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_officedocumentcachelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"c708f94eeeddfcd7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache8_l_workflowdescrip465","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"c7585b35e56b45f0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_l_datecolon247","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"c76d5268cc18f14f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_frequencyforpollingtheservertodownload_l_empty426","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":null},"c7948e0e1c48f22c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_lengthadattributecontainingpersonalsiteurl_l_empty425","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":null},"c7381761d95c07d2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsaccess","displayName":"Access-related solutions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsaccess_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedhostapplications_l_officeosmpreventedhostapplicationsaccess_1","displayName":"True","description":null,"helpText":null}]},"c7e7ab1cad742de5":{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_securitysettings_l_useofficeforlabelling","displayName":"Use the Sensitivity feature in Office to apply and view sensitivity labels (User)","description":"This policy setting controls whether sensitivity labels configured by an admin can be applied and viewed by using the Sensitivity feature in an Office app, such as Word, or by using the Microsoft Azure Information Protection add-in, if the add-in is installed and enabled.\r\n\r\nIf you enable this policy setting, the Sensitivity feature in an Office app can be used to apply and view sensitivity labels. If the Microsoft Azure Information Protection add-in is installed, the add-in is prevented from loading, even if the add-in is enabled, and the add-in can’t be used to apply sensitivity labels.\r\n\r\nIf you disable this policy setting, the Sensitivity feature won’t be available in an Office app and can’t be used to apply or view sensitivity labels. If the Microsoft Azure Information Protection add-in is installed and enabled, the add-in will be allowed to load and can be used to apply sensitivity labels.\r\n\r\nIf you don’t configure this policy setting:\r\n\r\n- If the Microsoft Azure Information Protection add-in is installed and enabled, the add-in will be allowed to load and can be used to apply sensitivity labels. The Sensitivity feature won’t be available in an Office app and can’t be used to apply or view sensitivity labels.\r\n- If the Microsoft Azure Information Protection add-in is not installed, or is installed but is disabled, then the Sensitivity feature in an Office app can be used to apply and view sensitivity labels.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_securitysettings_l_useofficeforlabelling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_securitysettings_l_useofficeforlabelling_1","displayName":"Enabled","description":null,"helpText":null}]},"c75403634bd552d6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertbeforefadeinmillisec","displayName":"Specify duration of Desktop Alert before fade (in milliseconds) (User)","description":"Specify duration of Desktop Alert before fade (in milliseconds)","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertbeforefadeinmillisec_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationofdesktopalertbeforefadeinmillisec_1","displayName":"Enabled","description":null,"helpText":null}]},"c7356535691d040d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy_v2","displayName":"Remove file extensions blocked as Level 2 (User)","description":"This policy setting controls which types of attachments (determined by file extension) must be saved to disk before users can open them. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n\r\nIf you enable this policy setting, you can specify a list of attachment file types to classify as Level 2, which forces users to actively decide to download the attachment to view it. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not classify any file type extensions as Level 2. \r\n\r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2removefilepolicy_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"c74d60b80bd64ab4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_configurecachedexchangemode","displayName":"Use Cached Exchange Mode for new and existing Outlook profiles (User)","description":"By default, users can choose to configure Cached Exchange Mode or use Online mode. By enabling this setting, new and existing Outlook profiles are configured to use Cached Exchange Mode. Disabling this setting configures new and existing Outlook profiles to use Online mode.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_configurecachedexchangemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_configurecachedexchangemode_1","displayName":"Enabled","description":null,"helpText":null}]},"c73b500b9981fadd":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders11","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders11_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders11_1","displayName":"True","description":null,"helpText":null}]},"c72060985f598f10":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":null},"c77c24aca771d459":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_recentlyusedfilelist_l_numberofentries","displayName":"Number of entries: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":null},"c7ef6da1ae7ea537":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/c8.json b/public/intune-definitions/c8.json new file mode 100644 index 000000000000..5c29c8540e01 --- /dev/null +++ b/public/intune-definitions/c8.json @@ -0,0 +1 @@ +{"c8f54f7dc2eceba8":{"id":"app_privacy_permissiondefaults","displayName":"Permission Defaults","description":"The dictionary of app privacy permission defaults. Each key in the dictionary is an app identifier. The dictionary values represent the permission defaults that the device applies for each matching app.\n\nIn iOS, the app identifier is a bundle ID, for example, \"com.example.app\".\n\nIn macOS, the app identifier is a composed identifier. The format of the composed identifier is either \"Bundle-ID\", \"Bundle-ID (Team-ID)\", or \"Bundle-ID {Designated-Requirement}\". \"Bundle-ID\" is the bundle identifier string of the app. \"Team-ID\" is the team identifier from the app's code signature. \"Designated-Requirement\" is the designated requirement string from the code signature of the app. For example, \"com.example.app\" for the bundle ID format, \"com.example.app (ABCD1234)\" for the team ID format, or \"com.example.app {anchor apple generic}\" for the designated requirement format. The device only applies defaults for an app if its code signature matches the composed identifier.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"c8b8795f8a80acbc":{"id":"com.android.devicerestrictionpolicy.storageallowusb","displayName":"Allow USB storage","description":"If 'True', allow users to access USB storage on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might prevent access to USB storage. Available for fully managed and dedicated devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.storageallowusb_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.storageallowusb_false","displayName":"False","description":"false","helpText":null}]},"c8b4e1e60950a15c":{"id":"com.apple.applicationaccess_allowairprintibeacondiscovery","displayName":"Allow AirPrint iBeacon Discovery","description":"If false, disables iBeacon discovery of AirPrint printers, which prevents spurious AirPrint Bluetooth beacons from phishing for network traffic. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowairprintibeacondiscovery_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowairprintibeacondiscovery_true","displayName":"True","description":null,"helpText":null}]},"c8ee0b72ef3c7ef1":{"id":"com.apple.applicationaccess_allowuntrustedtlsprompt","displayName":"Allow Untrusted TLS Prompt","description":"If false, automatically rejects untrusted HTTPS certificates without prompting the user. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowuntrustedtlsprompt_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowuntrustedtlsprompt_true","displayName":"True","description":null,"helpText":null}]},"c807ce76ab30796b":{"id":"com.apple.applicationaccess_ratingtvshowsie","displayName":"Rating TV Shows - Ireland","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsie_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsie_1","displayName":"GA","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsie_2","displayName":"CH","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsie_3","displayName":"YA","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsie_4","displayName":"PS","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsie_5","displayName":"MA","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsie_6","displayName":"All","description":null,"helpText":null}]},"c8e190435e423551":{"id":"com.apple.directoryservice.managed_adusewindowsuncpathflag","displayName":"AD Use Windows UNC Path Flag","description":"If true, enables the AD Use Windows UNC Path key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adusewindowsuncpathflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adusewindowsuncpathflag_true","displayName":"True","description":null,"helpText":null}]},"c87bb6627d8d619c":{"id":"com.apple.managedclient.preferences_seamlesswebtobrowsersigninenabled","displayName":"Seamless Web To Browser Sign-in Enabled","description":"This policy only takes effect when the \"WebToBrowserSignInEnabled\" is enabled.\nIf this policy is enabled, users cannot turn off Seamless Web to Browser Sign-in feature from \"Automatic sign in on Microsoft Edge\" setting on Microsoft Edge profile settings page and that toggle will be greyed out.\nIf this policy is disabled, users cannot turn on Seamless Web to Browser Sign-in feature from \"Automatic sign in on Microsoft Edge\" setting on Microsoft Edge profile settings page and that toggle will be greyed out.\nIf this policy is not configured, users can turn on/off Seamless Web to Browser Sign-in feature from settings by themselves.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#seamlesswebtobrowsersigninenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_seamlesswebtobrowsersigninenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_seamlesswebtobrowsersigninenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c83d4f46f9148716":{"id":"com.microsoft.edge.mamedgeappconfigsettings.compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\n\nIf you enable this policy or don't configure it, Microsoft Edge accepts web contents using the compression dictionary transport feature.\n\nIf you disable this policy, Microsoft Edge turns off the compression dictionary transport feature.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.compressiondictionarytransportenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.compressiondictionarytransportenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c8462ca199ceb0d5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagemanagedquicklinks","displayName":"Set new tab page quick links","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\n\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\n\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' isn't provided, the URL is used as the default title. If 'pinned' isn't provided, the default value is false.\n\nMicrosoft Edge presents these tiles in the order listed, from left to right, with all pinned tiles displayed ahead of nonpinned tiles.\n\nIf you set this policy as mandatory, the 'pinned' field is ignored and all tiles are pinned. The tiles can't be deleted by the user and always appear at the front of the quick links list.\n\nIf you set this policy as recommended, pinned tiles remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying nonpinned links via this policy to an existing browser profile, the links don't appear at all, depending on how they rank compared to the user's browsing history.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"c8d60633b059118c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.unthrottlednestedtimeoutenabled","displayName":"JavaScript setTimeout will not be clamped until a higher nesting threshold is set (Deprecated)","description":"This policy is deprecated because it's a temporary policy for web standards compliance. It doesn't work in Microsoft Edge version 107 onward.\nIf you enable this policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4 ms, aren't clamped. This improves short horizon performance; however, websites abusing the API still have their setTimeout usages clamped.\nIf you disable or don't configure this policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4 ms, are clamped.\n\nThis is a web standards compliancy feature that changes task ordering on a webpage, leading to unexpected behavior on sites that are dependent on a certain ordering.\nIt also affects sites with a lot of usage of a timeout of 0 ms for setTimeout, for example, increasing CPU load.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.unthrottlednestedtimeoutenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.unthrottlednestedtimeoutenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c83a7de954d74fde":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_slowlinkdefaulttoasync","displayName":"Change Group Policy processing to run asynchronously when a slow network connection is detected.","description":"This policy directs Group Policy processing to skip processing any client side extension that requires synchronous processing (that is, whether computers wait for the network to be fully initialized during computer startup and user logon) when a slow network connection is detected.\r\n\r\nIf you enable this policy setting, when a slow network connection is detected, Group Policy processing will always run in an asynchronous manner.\r\nClient computers will not wait for the network to be fully initialized at startup and logon. Existing users will be logged on using cached credentials,\r\nwhich will result in shorter logon times. Group Policy will be applied in the background after the network becomes available.\r\nNote that because this is a background refresh, extensions requiring synchronous processing such as Software Installation, Folder Redirection\r\nand Drive Maps preference extension will not be applied.\r\n\r\nNote: There are two conditions that will cause Group Policy to be processed synchronously even if this policy setting is enabled:\r\n1 - At the first computer startup after the client computer has joined the domain.\r\n2 - If the policy setting \"Always wait for the network at computer startup and logon\" is enabled.\r\n\r\nIf you disable or do not configure this policy setting, detecting a slow network connection will not affect whether Group Policy processing will be synchronous or asynchronous.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-slowlinkdefaulttoasync"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_slowlinkdefaulttoasync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_slowlinkdefaulttoasync_1","displayName":"Enabled","description":null,"helpText":null}]},"c839d04c686323a3":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disableupdateonstartupwithoutengine","displayName":"Initiate security intelligence update on startup","description":"This policy setting allows you to configure security intelligence updates on startup when there is no antimalware engine present.\r\n\r\n If you enable or do not configure this setting, security intelligence updates will be initiated on startup when there is no antimalware engine present.\r\n\r\n If you disable this setting, security intelligence updates will not be initiated on startup when there is no antimalware engine present.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-disableupdateonstartupwithoutengine"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disableupdateonstartupwithoutengine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_disableupdateonstartupwithoutengine_1","displayName":"Enabled","description":null,"helpText":null}]},"c85d55c93e72d3f6":{"id":"device_vendor_msft_policy_config_admx_printing_domainprinters_shareprinters","displayName":"Number of shared printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"c85d046fcf870dfa":{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretrylog","displayName":"Log directory pruning retry events","description":"Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning the computer's printers.\r\n\r\n The pruning service periodically contacts computers that have published printers to verify that the printers are still available for use. If a computer does not respond to the contact attempt, the attempt is retried a specified number of times, at a specified interval. The \"Directory pruning retry\" setting determines the number of times the attempt is retried; the default value is two retries. The \"Directory Pruning Interval\" setting determines the time interval between retries; the default value is every eight hours. If the computer has not responded by the last contact attempt, its printers are pruned from the directory.\r\n\r\n If you enable this policy setting, the contact events are recorded in the event log.\r\n\r\n If you disable or do not configure this policy setting, the contact events are not recorded in the event log.\r\n\r\n Note: This setting does not affect the logging of pruning events; the actual pruning of a printer is always logged.\r\n\r\n Note: This setting is used only on domain controllers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-pruningretrylog"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretrylog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruningretrylog_1","displayName":"Enabled","description":null,"helpText":null}]},"c84a47c30aca9365":{"id":"device_vendor_msft_policy_config_admx_scripts_maxgposcriptwaitpolicy","displayName":"Specify maximum wait time for Group Policy scripts","description":"This policy setting determines how long the system waits for scripts applied by Group Policy to run. \r\n\r\nThis setting limits the total time allowed for all logon, logoff, startup, and shutdown scripts applied by Group Policy to finish running. If the scripts have not finished running when the specified time expires, the system stops script processing and records an error event.\r\n\r\nIf you enable this setting, then, in the Seconds box, you can type a number from 1 to 32,000 for the number of seconds you want the system to wait for the set of scripts to finish. To direct the system to wait until the scripts have finished, no matter how long they take, type 0. \r\n\r\nThis interval is particularly important when other system tasks must wait while the scripts complete. By default, each startup script must complete before the next one runs. Also, you can use the \"Run logon scripts synchronously\" setting to direct the system to wait for the logon scripts to complete before loading the desktop. \r\n\r\nAn excessively long interval can delay the system and inconvenience users. However, if the interval is too short, prerequisite tasks might not be done, and the system can appear to be ready prematurely.\r\n\r\nIf you disable or do not configure this setting the system lets the combined set of scripts run for up to 600 seconds (10 minutes). This is the default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-maxgposcriptwaitpolicy"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_maxgposcriptwaitpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_maxgposcriptwaitpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"c84ea6aa3bd37ae4":{"id":"device_vendor_msft_policy_config_admx_systemrestore_sr_disableconfig","displayName":"Turn off Configuration","description":"Allows you to disable System Restore configuration through System Protection.\r\n\r\nThis policy setting allows you to turn off System Restore configuration through System Protection.\r\n\r\nSystem Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. The behavior of this policy setting depends on the \"Turn off System Restore\" policy setting.\r\n\r\nIf you enable this policy setting, the option to configure System Restore through System Protection is disabled.\r\n\r\nIf you disable or do not configure this policy setting, users can change the System Restore settings through System Protection. \r\n\r\nAlso, see the \"Turn off System Restore\" policy setting. If the \"Turn off System Restore\" policy setting is enabled, the \"Turn off System Restore configuration\" policy setting is overwritten.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-systemrestore#admx-systemrestore-sr-disableconfig"],"categoryId":"5c9a2f21-d3a8-4295-a803-e0535aa29489","categoryName":"System Restore","options":[{"id":"device_vendor_msft_policy_config_admx_systemrestore_sr_disableconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_systemrestore_sr_disableconfig_1","displayName":"Enabled","description":null,"helpText":null}]},"c8aae569efda635e":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_nosecuritymenu","displayName":"Remove Windows Security item from Start menu","description":"Specifies whether to remove the Windows Security item from the Settings menu on Remote Desktop clients. You can use this setting to prevent inexperienced users from logging off from Remote Desktop Services inadvertently.\r\n\r\nIf the status is set to Enabled, Windows Security does not appear in Settings on the Start menu. As a result, users must type a security attention sequence, such as CTRL+ALT+END, to open the Windows Security dialog box on the client computer.\r\n\r\nIf the status is set to Disabled or Not Configured, Windows Security remains in the Settings menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-nosecuritymenu"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_nosecuritymenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_nosecuritymenu_1","displayName":"Enabled","description":null,"helpText":null}]},"c8e7bc201dff75b3":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_uploadxmldetails","displayName":"XML Upload","description":"The format of the XML property list varies depending on the settings you are configuring for the ApplicationControl CSP. Microsoft Endpoint Manager will validate the XML format; but not validate the settings behaviour, the settings applicability nor sign the policy binary. ApplicationControl CSP supports base and supplemental policies for devices running the Windows 1903 build and later. Supplemental policies are required to loosen a base policy; and are always less restrictive. A supplemental policy needs to support a specific base policy that has been deployed to the same client. If not, there is no effect on assigned Windows devices.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"c8834659613b3bfa":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver5_global_refresh_interval_prompt","displayName":"Global Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"c8fb9879c59aea66":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates","displayName":"Allow insecure algorithms in integrity checks on extension updates and installs","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"c86fdd5d04ee4fef":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax","displayName":"Maximum SSL version enabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax_tls1.3","displayName":"TLS 1.3","description":null,"helpText":null}]},"c8402c59c4b6950e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_1","displayName":"Single-user Search","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_2","displayName":"Multi-user Search","description":null,"helpText":null}]},"c8c2e1033799035e":{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout","displayName":"Force Lock Timeout","description":"Determines the timeout for Lock on Leave forced by the MDM policy. The user will be unable to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forcelocktimeout"],"categoryId":"a77e6e83-a02e-4a51-a27e-6437ea42aeb5","categoryName":"Human Presence","options":[{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_120","displayName":"Two Minutes","description":"TwoMinutes","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_30","displayName":"Thirty Seconds.","description":"ThirtySeconds.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_10","displayName":"Ten Seconds.","description":"TenSeconds.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_1","displayName":"Immediate.","description":"Immediate.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},"c843477dbf797864":{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist","displayName":"Use the Enterprise Mode IE website list","description":"This policy setting lets you specify where to find the list of websites you want opened using Enterprise Mode IE, instead of Standard mode, because of compatibility issues. Users can't edit this list.\n\nIf you enable this policy setting, Internet Explorer downloads the website list from your location (HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\Main\\EnterpriseMode), opening all listed websites using Enterprise Mode IE.\n\nIf you disable or don't configure this policy setting, Internet Explorer opens all websites using Standards mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenterprisemodesitelist"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"c843d842ba42104f":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate","displayName":"Restricted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsrestrictedsiteszonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"c842ad659c616cbb":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"c86b8be2c12eaa46":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors","displayName":"Specify if online OCSP/CRL checks are required for local trust anchors","description":"Control whether online revocation checks (OCSP/CRL checks) are required. If Microsoft Edge can't get revocation status information, these certificates are treated as revoked (\"hard-fail\").\r\n\r\nIf you enable this policy, Microsoft Edge always performs revocation checking for server certificates that successfully validate and are signed by locally-installed CA certificates.\r\n\r\nIf you don't configure or disable this policy, then Microsoft Edge uses the existing online revocation checking settings.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"c8c18527e95821a6":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery","displayName":"Disable DIAL protocol for cast device discovery","description":"Enable this policy to disable the DIAL (Discovery And Launch) protocol for cast device discovery. (If EnableMediaRouter is disabled, this policy will have no effect).\r\n\r\nEnable this policy to disable DIAL protocol.\r\n\r\nBy default, Cast device discovery will use DIAL protocol.","helpText":"","infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_1","displayName":"Enabled","description":null,"helpText":null}]},"c8c581146697cf33":{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended","displayName":"Allow importing of Cookies","description":"Allows users to import Cookies from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Cookies aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Cookies are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c8619ddbd27906ec":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled","displayName":"Mobile App Management Enabled","description":"Allows the Microsoft Edge browser to retrieve policies from the Intune application management services and apply them to users' profiles.\r\n\r\nIf you enable this policy or don't configure it, Mobile App Management (MAM) Policies can be applied.\r\n\r\nIf you disable this policy, Microsoft Edge will not communicate with Intune to request MAM Policies.","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c87b50ec065f7916":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault","displayName":"Configure Automatic HTTPS (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_0","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_1","displayName":"Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_2","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},"c86c188ee279513b":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_tabcaptureallowedbyoriginsdesc","displayName":"Allow Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"c84626b6f1c63ee9":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_customsyncrootfoldername_customsyncrootfoldernamelist","displayName":"New OneDrive folder name:","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"c8ec86844364c5ba":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},"c805ef780aea17ae":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablesharedserver","displayName":"Disable shared server","description":"Prevent the host from being able to explicitly share a new server. The policy also enforces “Live Share: Auto Share Servers” setting to false.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"categoryId":"d9d5f333-9402-4459-8ef1-e29330cac8be","categoryName":"Live Share Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablesharedserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablesharedserver_1","displayName":"Enabled","description":null,"helpText":null}]},"c8f68650473e73b8":{"id":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots","displayName":"Allow Auto Connect To Wi Fi Sense Hotspots","description":"Allow or disallow the device to automatically connect to Wi-Fi hotspots. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowautoconnecttowifisensehotspots"],"categoryId":"0a803a48-789a-48b0-b928-e52d56ab17f1","categoryName":"Wi-Fi Settings","options":[{"id":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"c8dbf111f97e0d1e":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disallowexploitprotectionoverride","displayName":"Disallow Exploit Protection Override","description":"Prevent users from making changes to the exploit protection settings area in the Windows Defender Security Center. If you disable or do not configure this setting, local users can make changes in the exploit protection settings area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disallowexploitprotectionoverride"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disallowexploitprotectionoverride_0","displayName":"(Disable) Local users are allowed to make changes in the exploit protection settings area.","description":"(Disable) Local users are allowed to make changes in the exploit protection settings area.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disallowexploitprotectionoverride_1","displayName":"(Enable) Local users cannot make changes in the exploit protection settings area.","description":"(Enable) Local users cannot make changes in the exploit protection settings area.","helpText":null}]},"c816c7aab9f62dff":{"id":"device_vendor_msft_policy_config_wslv4~policy~wsl~wslcontainer_allowwslcontainer","displayName":"Allow WSL container","description":"This policy controls whether WSL container can be used on this machine. When enabled or not configured, users and Windows applications can run Linux containers via WSL. When set to disabled, WSL container is blocked for all users and Windows apps cannot run Linux containers. Warning: Setting this to 'Disabled' can break Windows apps that depend on Linux containers.","helpText":"","infoUrls":[],"categoryId":"a787672d-4a33-455b-a2db-e340eb35a5c8","categoryName":"WSL container","options":[{"id":"device_vendor_msft_policy_config_wslv4~policy~wsl~wslcontainer_allowwslcontainer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv4~policy~wsl~wslcontainer_allowwslcontainer_1","displayName":"Enabled","description":null,"helpText":null}]},"c8e3701f10c13e48":{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalpage_1","displayName":"Hide previous versions list for local files (User)","description":"This policy setting lets you hide the list of previous versions of files that are on local disks. The previous versions could come from the on-disk restore points or from backup media.\r\n\r\nIf you enable this policy setting, users cannot list or restore previous versions of files on local disks.\r\n\r\nIf you disable this policy setting, users cannot list and restore previous versions of files on local disks.\r\n\r\nIf you do not configure this policy setting, it defaults to disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablelocalpage-1"],"categoryId":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","categoryName":"Previous Versions","options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalpage_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalpage_1_1","displayName":"Enabled","description":null,"helpText":null}]},"c866fd3d73f3bb15":{"id":"user_vendor_msft_policy_config_browser_usesharedfolderforbooks","displayName":"Use Shared Folder For Books (User)","description":"This setting specifies whether organizations should use a folder shared across users to store books from the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#usesharedfolderforbooks"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_usesharedfolderforbooks_0","displayName":"Disabled","description":"Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_usesharedfolderforbooks_1","displayName":"Enabled","description":"Allowed. Microsoft Edge downloads book files to a shared folder. For this policy to work correctly, you must also enable the Allow a Windows app to share application data between users group policy. Also, the users must be signed in with a school or work account.","helpText":null}]},"c85704a46d911df7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_defaultdownloaddirectory","displayName":"Set default download directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":null},"c8a29c637163dcdd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy","displayName":"Disable SPDY protocol (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy_1","displayName":"Enabled","description":null,"helpText":null}]},"c8d24d023e9b6737":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled","displayName":"Allow automatic sign-in to Microsoft® cloud identity providers (User)","description":"Configures automatic user sign-in for accounts backed by a Microsoft® cloud identity provider.\r\n\r\nBy setting this policy to 1 (Enabled), users who sign into their computer with an account backed by a Microsoft® cloud identity provider (i.e., Microsoft® Azure® Active Directory® or the consumer Microsoft® account identity provider) or who have added a work or school account to Microsoft® Windows® can be signed into web properties using that identity automatically. Information pertaining to the user's device and account is transmitted to the user's cloud identity provider for each authentication event.\r\n\r\nBy setting this policy to 0 (Disabled) or leaving it unset, automatic sign-in as described above is disabled.\r\n\r\nThis feature is available starting in Microsoft® Windows® 10.\r\n\r\nNote: This policy doesn't apply to Incognito or Guest modes.","helpText":"","infoUrls":[],"categoryId":"463e6791-7d54-4964-a36b-63bbedb7d0cd","categoryName":"Microsoft Active Directory management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c849896c450cbe34":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls","displayName":"Block the WebHID API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy, the following take precedence, in this order:\r\n\r\n * WebHidAskForUrls (if there is a match),\r\n\r\n * DefaultWebHidGuardSetting (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns can't conflict with WebHidAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c88e236bfc0d0606":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_descriptioncolon15","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"c8d51f739655b711":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode","displayName":"Turn on Protected Mode (User)","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://learn.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneenableprotectedmode"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"c80af391411eb159":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_idledetectionallowedforurlsdesc","displayName":"Allowed sites for idle detection (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"c82f17d958603c94":{"id":"user_vendor_msft_policy_config_office16v18~policy~l_microsoftofficesystem~l_miscellaneous437_l_linksopenrightdefaultsettingisnative","displayName":"File links open preference default selection as Desktop App (User)","description":"This policy setting controls which file links open preference is set as the default for users’ who has not make their selection. For more information about file links handling and open preference in Office, see https://go.microsoft.com/fwlink/?linkid=2277074. User can manually change the default selection anytime.\r\n\r\nIf you enabled this policy setting, file open preference in Word, Excel, PowerPoint, and Outlook will be defaulted to open in Desktop App.\r\n\r\nIf you disable this policy setting, file open preference in Word, Excel, PowerPoint, and Outlook will be defaulted to open in web browser.\r\n\r\nNote: This policy setting only applies to subscription version of Office.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v18~policy~l_microsoftofficesystem~l_miscellaneous437_l_linksopenrightdefaultsettingisnative_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v18~policy~l_microsoftofficesystem~l_miscellaneous437_l_linksopenrightdefaultsettingisnative_1","displayName":"Enabled","description":null,"helpText":null}]},"c8ea1d4bdd4b2ac6":{"id":"user_vendor_msft_policy_config_office16v2.updates.2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences","displayName":"Allow the use of connected experiences in Office (User)","description":"This policy setting allows you to control whether connected experiences are available to your users when they're using Office.\r\n\r\nConnected experiences include experiences that analyze content, such as Editor in Word, experiences that download online content, such as PowerPoint QuickStarter, and other connected experiences, such as document co-authoring and online file storage. It also includes additional optional connected experiences, such as inserting an online video into a PowerPoint presentation or the 3D Maps feature in Excel, which uses Bing. See the Note at the end for more information about other policy settings that you can use to control these connected experiences.\r\n\r\nIf you enable this policy setting, these connected experiences will be available to your users.\r\n\r\nIf you disable this policy setting, these connected experiences won't be available to your users.\r\n\r\nNote: If you disable this policy setting, nearly all connected experiences will be turned off. However, limited Office functionality will remain available, such as synching a mailbox in Outlook. Essential services, such as the licensing service that confirms that you’re properly licensed to use Office, will also remain available.\r\n\r\nIf you don't configure this policy setting, these connected experiences will be available to your users.\r\n\r\nNote: You can use these other policy settings if you want to disable just a certain group of connected experiences: \"Allow the use of connected experiences in Office that analyze content\", \"Allow the use of connected experiences in Office that download online content\", and \"Allow the use of additional optional connected experiences in Office\".\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2085689","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2.updates.2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2.updates.2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_connectedofficeexperiences_1","displayName":"Enabled","description":null,"helpText":null}]},"c8f98309d8cc889d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceoffice_l_officeadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"c80aa74c03223ca3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceworkfax","displayName":"Replace Label - WorkFax (User)","description":"This policy setting allows you to change or remove the 4th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceworkfax_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceworkfax_1","displayName":"Enabled","description":null,"helpText":null}]},"c8ae3b340bfafd72":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishuk","displayName":"English (U.K.) (User)","description":"Enables the editing language English (U.K.)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishuk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishuk_1","displayName":"Enabled","description":null,"helpText":null}]},"c8a673195bed6604":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuabolivia","displayName":"Quechua (Bolivia) (User)","description":"Enables the editing language Quechua (Bolivia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuabolivia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuabolivia_1","displayName":"Enabled","description":null,"helpText":null}]},"c834643bcb104a3d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableofficestartglobal","displayName":"Disable the Office Start screen for all Office applications (User)","description":"This policy setting controls whether the Office Start screen appears on boot for all Office applications.\r\n\r\nIf you enable this policy setting, users will not see the Office Start screen when they boot any Office application.\r\n\r\nIf you disable or do not configure this policy setting, users will see the Office Start screen when they boot their Office applications.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableofficestartglobal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableofficestartglobal_1","displayName":"Enabled","description":null,"helpText":null}]},"c8d0354ced8c9507":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_mrutemplatelistlength","displayName":"Most Recently Used Template List Length (User)","description":"This setting determines the length of the recently used templates list in the New Document dialog box. The maximum value is 25 and the minimum value is 0. This setting applies to Word, Powerpoint, and Excel.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_mrutemplatelistlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_mrutemplatelistlength_1","displayName":"Enabled","description":null,"helpText":null}]},"c84dbacca792ccbc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_l_workflowsig477","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_l_workflowsig477_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache10_l_workflowsig477_1","displayName":"True","description":null,"helpText":null}]},"c8d3f402a81821ba":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_pixelsperinch","displayName":"Pixels per inch (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8ee1d8d2-582f-401b-927a-993016f4290d","categoryName":"Browsers","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_pixelsperinch_72","displayName":"72","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_pixelsperinch_96","displayName":"96","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_browsers_l_targetmonitor_l_pixelsperinch_120","displayName":"120","description":null,"helpText":null}]},"c8e8cd80521ba8af":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointsyncinterval","displayName":"SharePoint sync interval for notebooks stored on SharePoint (User)","description":"Limits the number of times OneNote polls a SharePoint site for changes to a section. Enter the sync interval in seconds.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointsyncinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointsyncinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"c85d38904e5a02e7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_allowuserstolowerattachments","displayName":"Allow users to demote attachments to Level 2 (User) (Deprecated)","description":"This policy setting controls whether Outlook users can demote attachments to Level 2 by using a registry key, which will allow them to save files to disk and open them from that location. Outlook uses two levels of security to restrict access to files attached to e-mail messages or other items. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n\r\nIf you enable this policy setting, users can create a list of Level 1 file types to demote to Level 2 by adding the file types to the following registry key: HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\14.0\\Outlook\\Security\\Level1Remove. \r\n\r\nIf you disable or do not configure this policy setting, users cannot demote level 1 attachments to level 2, and the HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\14.0\\Outlook\\Security\\Level1Remove registry key has no effect.\r\n","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_allowuserstolowerattachments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_allowuserstolowerattachments_1","displayName":"Enabled","description":null,"helpText":null}]},"c8e00bfd6e6f6201":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_ostcreation","displayName":"Do not allow an OST file to be created (User)","description":"Prevents offline folder use at startup. This is equivalent to clicking the Disable Offline Use button in the Offline Folder Settings dialog box.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_ostcreation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_ostcreation_1","displayName":"Enabled","description":null,"helpText":null}]},"c823f1d1e2ac01b5":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlf5broadcastslideshow","displayName":"Ctrl+F5 (Slide Show | Start Slide Show | Broadcast Slide Show) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlf5broadcastslideshow_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlf5broadcastslideshow_1","displayName":"True","description":null,"helpText":null}]},"c8bdfd88aacb2ccd":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13_l_descriptioncolon58","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"c8a9e0b3eb24edb0":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"c82b22ac7e625806":{"id":"user_vendor_msft_policy_config_start_alwaysshownotificationicon","displayName":"Always Show Notification Icon (User)","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#alwaysshownotificationicon"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_alwaysshownotificationicon_0","displayName":"Auto-hide notification bell icon","description":"Auto-hide notification bell icon","helpText":null},{"id":"user_vendor_msft_policy_config_start_alwaysshownotificationicon_1","displayName":"Show notification bell icon","description":"Show notification bell icon","helpText":null}]},"c8bd5dacb287cc52":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_smileyfacesandarrowswithspecialsymbols","displayName":"Smiley faces and arrows with special symbols (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"af9b2941-29f9-4ee5-ae09-215f4e242943","categoryName":"AutoCorrect Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_smileyfacesandarrowswithspecialsymbols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_smileyfacesandarrowswithspecialsymbols_1","displayName":"Enabled","description":null,"helpText":null}]},"c80cd7e3e68031ee":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchseshezeje","displayName":"Match se/she, ze/je (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchseshezeje_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchseshezeje_1","displayName":"Enabled","description":null,"helpText":null}]},"c8765f020ab2719f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_deletionscolor","displayName":"Deletions color (User)","description":"Selects the color for tracked deletions. This corresponds to the choices in the Review ribbon | Track changes | Change tracking options dialog box.","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_deletionscolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_deletionscolor_1","displayName":"Enabled","description":null,"helpText":null}]},"c89217107417d1d0":{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogsuccessconnections","displayName":"Enable Log Success Connections","description":"This value is used as an on/off switch. If this value is on, the firewall logs all successful inbound connections. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogsuccessconnections_false","displayName":"Disable Logging Of Successful Connections","description":"Disable Logging Of Successful Connections","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablelogsuccessconnections_true","displayName":"Enable Logging Of Successful Connections","description":"Enable Logging Of Successful Connections","helpText":null}]},"c8a9d5edf4b2520a":{"id":"vendor_msft_firewall_mdmstore_global_crlcheck","displayName":"Certificate revocation list verification","description":"This value specifies how certificate revocation list (CRL) verification is enforced. The value MUST be 0, 1, or 2. A value of 0 disables CRL checking. A value of 1 specifies that CRL checking is attempted and that certificate validation fails only if the certificate is revoked. Other failures that are encountered during CRL checking (such as the revocation URL being unreachable) do not cause certificate validation to fail. A value of 2 means that checking is required and that certificate validation fails if any error is encountered during CRL processing. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, use the local store value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_global_crlcheck_0","displayName":"None","description":"Disables CRL checking","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_crlcheck_1","displayName":"Attempt","description":"Specifies that CRL checking is attempted and that certificate validation fails only if the certificate is revoked. Other failures that are encountered during CRL checking (such as the revocation URL being unreachable) do not cause certificate validation to fail.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_crlcheck_2","displayName":"Require","description":"Means that checking is required and that certificate validation fails if any error is encountered during CRL processing","helpText":null}]},"c8b486d0974dfd23":{"id":"vendor_msft_personalization_companylogourl","displayName":"Company Logo Url","description":"A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Company Logo or a file Url to a local image on the file system that needs to be used as the Company Logo. This setting is currently available for boot to cloud shared pc mode only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Personalization-csp/"],"categoryId":"1dd655c9-a1f3-4780-befb-cab19922277d","categoryName":"Personalization","options":null},"c8c8e266ce673ff3":{"id":"vendor_msft_sharedpc_restrictlocalstorage","displayName":"Restrict Local Storage","description":"Restricts the user from using local storage. This node is optional. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_restrictlocalstorage_false","displayName":"false","description":"False","helpText":null},{"id":"vendor_msft_sharedpc_restrictlocalstorage_true","displayName":"true","description":"True","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/c9.json b/public/intune-definitions/c9.json new file mode 100644 index 000000000000..5a44e5d96763 --- /dev/null +++ b/public/intune-definitions/c9.json @@ -0,0 +1 @@ +{"c984d54c478f8d53":{"id":"com.apple.managedclient.preferences_browsernetworktimequeriesenabled","displayName":"Allow queries to a Browser Network Time service","description":"Prevents Microsoft Edge from occasionally sending queries to a browser network time service to retrieve an accurate timestamp.\n\nIf you disable this policy, Microsoft Edge will stop sending queries to a browser network time service.\n\nIf you enable this policy or don't configure it, Microsoft Edge will occasionally send queries to a browser network time service.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#browsernetworktimequeriesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_browsernetworktimequeriesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_browsernetworktimequeriesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c930f7091a517adc":{"id":"com.apple.managedclient.preferences_defaultprinterselection","displayName":"Default printer selection rules","description":"Overrides Microsoft Edge default printer selection rules. This policy determines the rules for selecting the default printer in Microsoft Edge, which happens the first time a user tries to print a page.\n\nWhen this policy is set, Microsoft Edge tries to find a printer that matches all of the specified attributes and uses it as default printer. If there are multiple printers that meet the criteria, the first printer that matches is used.\n\nIf you don't configure this policy or no matching printers are found within the timeout, the printer defaults to the built-in PDF printer or no printer, if the PDF printer isn't available.\n\nThe value is parsed as a JSON object, conforming to the following schema: { \"type\": \"object\", \"properties\": { \"idPattern\": { \"description\": \"Regular expression to match printer id.\", \"type\": \"string\" }, \"namePattern\": { \"description\": \"Regular expression to match printer display name.\", \"type\": \"string\" } } }\n\nOmitting a field means all values match; for example, if you don't specify connectivity Print Preview starts discovering all kinds of local printers. Regular expression patterns must follow the JavaScript RegExp syntax and matches are case sensitive.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultprinterselection"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"c964acd7b60f9a22":{"id":"com.apple.managedclient.preferences_partitionedbloburlusage","displayName":"Manage Blob URL Partitioning During Fetching and Navigation","description":"The \"PartitionedBlobUrlUsage\" policy controls whether Blob URLs are partitioned during fetching and navigation.\nIf this policy is set to Enabled or not set, Blob URLs are partitioned.\nIf this policy is set to Disabled, Blob URLs won't be partitioned. This represents the Blob URL behavior before Microsoft Edge version 135.\n\nIf storage partitioning is disabled for a given top-level origin either by \"ThirdPartyStoragePartitioningBlockedForOrigins\" or \"DefaultThirdPartyStoragePartitioningSetting\", then Blob URLs aren't partitioned.\n\nThe policy is scheduled to be available through Microsoft Edge version 146. After this version, the policy will be removed, and Microsoft Edge will no longer support unpartitioned blob storage.\n\nFor detailed information on third-party storage partitioning, see https://github.com/privacycg/storage-partitioning.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#partitionedbloburlusage"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_partitionedbloburlusage_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_partitionedbloburlusage_true","displayName":"Enabled","description":null,"helpText":null}]},"c9908d99e8eefdd5":{"id":"com.apple.managedclient.preferences_updatecheckfrequency","displayName":"Update check frequency (mins)","description":"Specify how often AutoUpdate checks for updates. The allowed range is 240 minutes (4 hours) - 720 minutes (12 hours).","helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"c93c75b3a1b34742":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationrefreshinterval","displayName":"Registration refresh interval","description":"Specifies the interval used by DNS clients to refresh registration of A and PTR resource. This policy setting only applies to computers performing dynamic DNS updates.\r\n\r\nComputers configured to perform dynamic DNS registration of A and PTR resource records periodically reregister their records with DNS servers, even if the record has not changed. This reregistration is required to indicate to DNS servers that records are current and should not be automatically removed (scavenged) when a DNS server is configured to delete stale records.\r\n\r\nWarning: If record scavenging is enabled on the zone, the value of this policy setting should never be longer than the value of the DNS zone refresh interval. Configuring the registration refresh interval to be longer than the refresh interval of the DNS zone might result in the undesired deletion of A and PTR resource records.\r\n\r\nTo specify the registration refresh interval, click Enabled and then enter a value of 1800 or greater. The value that you specify is the number of seconds to use for the registration refresh interval. For example, 1800 seconds is 30 minutes.\r\n\r\nIf you enable this policy setting, registration refresh interval that you specify will be applied to all network connections used by computers that receive this policy setting.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, computers will use the local or DHCP supplied setting. By default, client computers configured with a static IP address attempt to update their DNS resource records once every 24 hours and DHCP clients will attempt to update their DNS resource records when a DHCP lease is granted or renewed.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-registrationrefreshinterval"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationrefreshinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationrefreshinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"c9c512f8ed81bf35":{"id":"device_vendor_msft_policy_config_admx_printing_physicallocation","displayName":"Computer location","description":"If this policy setting is enabled, it specifies the default location criteria used when searching for printers.\r\n\r\n This setting is a component of the Location Tracking feature of Windows printers. To use this setting, enable Location Tracking by enabling the \"Pre-populate printer search location text\" setting.\r\n\r\n When Location Tracking is enabled, the system uses the specified location as a criterion when users search for printers. The value you type here overrides the actual location of the computer conducting the search.\r\n\r\n Type the location of the user's computer. When users search for printers, the system uses the specified location (and other search criteria) to find a printer nearby. You can also use this setting to direct users to a particular printer or group of printers that you want them to use.\r\n\r\n If you disable this setting or do not configure it, and the user does not type a location as a search criterion, the system searches for a nearby printer based on the IP address and subnet mask of the user's computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-physicallocation"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_physicallocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_physicallocation_1","displayName":"Enabled","description":null,"helpText":null}]},"c98927bc0c6aacca":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio","displayName":"Microsoft Visio 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Visio 2013.\r\nBy default, the user settings of Microsoft Visio 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013visio"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio_1","displayName":"Enabled","description":null,"helpText":null}]},"c90a611b2c90e219":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup","displayName":"PowerPoint 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft PowerPoint 2016.\r\nMicrosoft PowerPoint 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft PowerPoint 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft PowerPoint 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016powerpointbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"c9786b87122fd2c3":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilteringplatformconnection","displayName":"Object Access Audit Filtering Platform Connection","description":"This policy setting allows you to audit connections that are allowed or blocked by the Windows Filtering Platform (WFP). The following events are included: The Windows Firewall Service blocks an application from accepting incoming connections on the network. The WFP allows a connection. The WFP blocks a connection. The WFP permits a bind to a local port. The WFP blocks a bind to a local port. The WFP allows a connection. The WFP blocks a connection. The WFP permits an application or service to listen on a port for incoming connections. The WFP blocks an application or service to listen on a port for incoming connections. If you configure this policy setting, an audit event is generated when connections are allowed or blocked by the WFP. Success audits record events generated when connections are allowed and Failure audits record events generated when connections are blocked. If you do not configure this policy setting, no audit event is generated when connected are allowed or blocked by the WFP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditfilteringplatformconnection"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilteringplatformconnection_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilteringplatformconnection_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilteringplatformconnection_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilteringplatformconnection_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"c9aeb64ebff3027f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lensregionsearchenabled","displayName":"Allow Google Lens region search menu item to be shown in context menu if supported.","description":"Leaving the policy unset or setting it to Enabled allows users to view and use the Google Lens region search menu item in the context menu. Setting the policy to Disabled means users will not see the Google Lens region search menu item in the context menu when Google Lens region search is supported.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lensregionsearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lensregionsearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c9cda32361af0fe5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls","displayName":"Allow the Serial API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a serial port.\r\n\r\nLeaving the policy unset means DefaultSerialGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy SerialBlockedForUrls (if there is a match), DefaultSerialGuardSetting (if set), or the users' personal settings take precedence, in that order.\r\n\r\nURL patterns must not conflict with SerialBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c99caa33a6d9d4d7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_disabledpluginsdesc","displayName":"List of disabled plugins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"c9a57d9a31e416b1":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled","displayName":"Allow Safe Browsing Surveys","description":"When this policy is enabled or left unset, the user may receive surveys related to Safe Browsing.\r\nWhen this policy is disabled, the user will not receive surveys related to Safe Browsing.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c9701dcb888b0fd4":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablesettings","displayName":"Enable App Installer Settings","description":"This policy controls whether users can change their settings.\n\nIf you enable or do not configure this setting, users will be able to change settings for the Windows Package Manager.\n\nIf you disable this setting, users will not be able to change settings for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablesettings"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"c978ee9f8b93f7bd":{"id":"device_vendor_msft_policy_config_experience_allowsaveasofofficefiles","displayName":"Allow Save As Of Office Files","description":"This policy is deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowsaveasofofficefiles"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowsaveasofofficefiles_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowsaveasofofficefiles_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"c96544adf009e6ad":{"id":"device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent","displayName":"Disable Cloud Optimized Content","description":"This policy controls Windows experiences that use the cloud optimized content client component. If you enable this policy, they will present only default content. If you disable or do not configure this policy, they will be able to use cloud provided content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#disablecloudoptimizedcontent"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"c9725e26c5c28bf5":{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_daystokeep_prompt","displayName":"Days to keep pages in History","description":"","helpText":"","infoUrls":[],"categoryId":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","categoryName":"Delete Browsing History","options":null},"c96eac8d60ada6b2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions","displayName":"Enable network prediction (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_2","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},"c9b3b078ef3e4311":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended","displayName":"Allow importing of autofill form data","description":"Allows users to import autofill form data from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import autofill data is automatically selected.\r\n\r\nIf you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.\r\n\r\nIf you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS) and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c9081a8bc16f78a5":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"c97e7b82b2c95a59":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled","displayName":"Personalize my top sites in Customize Sidebar enabled by default","description":"This policy controls whether Microsoft Edge browser be allowed to use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you enable this policy, Microsoft Edge will use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you disable this policy, Microsoft Edge will not use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you don't configure this policy, the default behavior is to use the browsing history to personalize the top sites in the customize sidebar page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c9d1a16de2295c37":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_automaticfullscreenallowedforurlsdesc","displayName":"Allow automatic full screen on specified sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"c932d55f27ecf6f2":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions","displayName":"Actions to run when the computer is idle","description":"List of actions to run when the timeout from the IdleTimeout policy is reached.\r\n\r\nIf the IdleTimeout policy is unset, this policy has no effect.\r\n\r\nWhen the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\r\n\r\nIf you do not set this policy or no actions are selected, the IdleTimeout policy has no effect.\r\n\r\nSupported actions are:\r\n\r\n'close_browsers': close all browser windows and PWAs for this profile.\r\n\r\n'reload_pages': reload all webpages. For some pages, the user may be prompted for confirmation first.\r\n\r\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings': clear the corresponding browsing data.\r\n\r\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' will disable sync for the respective data types if neither `Chrome Sync` is disabled by setting the SyncDisabled policy nor BrowserSignin is disabled.\r\n\r\nPolicy options mapping:\r\n\r\n* close_browsers (close_browsers) = Close Browsers\r\n\r\n* clear_browsing_history (clear_browsing_history) = Clear Browsing History\r\n\r\n* clear_download_history (clear_download_history) = Clear Download History\r\n\r\n* clear_cookies_and_other_site_data (clear_cookies_and_other_site_data) = Clear Cookies and Other Site Data\r\n\r\n* clear_cached_images_and_files (clear_cached_images_and_files) = Clear Cached Images and Files\r\n\r\n* clear_password_signin (clear_password_signin) = Clear Password Signin\r\n\r\n* clear_autofill (clear_autofill) = Clear Autofill\r\n\r\n* clear_site_settings (clear_site_settings) = Clear Site Settings\r\n\r\n* reload_pages (reload_pages) = Reload Pages\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nclose_browsers","helpText":"","infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_1","displayName":"Enabled","description":null,"helpText":null}]},"c900580b354aae81":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled","displayName":"CECPQ2 post-quantum key-agreement enabled for TLS (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 113.\r\n\r\nThis policy was removed in Microsoft Edge 114 and is ignored if set. It served to disable CECPQ2, but CECPQ2 has been disabled by default. A separate policy will be introduced to control the rollout of the replacement of CECPQ2. That replacement will be a combination of the standard key-agreement X25519 with NIST's chosen post-quantum KEM, called \"Kyber\".\r\n\r\nIf this policy is not configured, or is set to enabled, then Microsoft Edge will follow the default rollout process for CECPQ2, a post-quantum key-agreement algorithm in TLS.\r\n\r\nCECPQ2 results in larger TLS messages which, in very rare cases, can trigger bugs in some networking hardware. This policy can be set to False to disable CECPQ2 while networking issues are resolved.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c9d2f2deb07892a6":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_excelexe71","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_excelexe71_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_excelexe71_1","displayName":"True","description":null,"helpText":null}]},"c9b08086a7637cd7":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder_forceallowtheseapps","displayName":"Let Apps Access Graphics Capture Without Border Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to disable the screen capture border. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"c998015abdb1a343":{"id":"device_vendor_msft_policy_config_system_allowstoragecard","displayName":"Allow Storage Card","description":"Controls whether the user is allowed to use the storage card for device storage. This setting prevents programmatic access to the storage card. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowstoragecard"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowstoragecard_0","displayName":"SD card use is not allowed and USB drives are disabled. This setting does not prevent programmatic access to the storage card.","description":"SD card use is not allowed and USB drives are disabled. This setting does not prevent programmatic access to the storage card.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowstoragecard_1","displayName":"Allow a storage card.","description":"Allow a storage card.","helpText":null}]},"c92ab0444b1d1098":{"id":"mathsettings_mathsettings","displayName":"com.apple.configuration.math.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"c91f98abfc532c53":{"id":"settings_item_diagnosticsubmission_enabled","displayName":"Enabled","description":"If `true`, enables diagnostic submission. If `false`, disables diagnostic submission.","helpText":null,"infoUrls":[],"categoryId":"99d68d97-63b7-4f49-83dd-1ad3b3281d0d","categoryName":"Diagnostic Submission","options":[{"id":"settings_item_diagnosticsubmission_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_diagnosticsubmission_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"c9a195f9db7c50bd":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_l_setmaximumnumberoftrustrecordstopreservespinid","displayName":"Maximum to preserve: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":null},"c9a078a95ec710f6":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_disableautoadmupdate","displayName":"Turn off automatic update of ADM files (User)","description":"Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object Editor. Administrators might want to use this if they are concerned about the amount of space used on the system volume of a DC.\r\n\r\nBy default, when you start the Group Policy Object Editor, a timestamp comparison is performed on the source files in the local %SYSTEMROOT%\\inf directory and the source files stored in the GPO. If the local files are newer, they are copied into the GPO.\r\n\r\nChanging the status of this setting to Enabled will keep any source files from copying to the GPO.\r\n\r\nChanging the status of this setting to Disabled will enforce the default behavior. Files will always be copied to the GPO if they have a later timestamp.\r\n\r\nNOTE: If the Computer Configuration policy setting, \"Always use local ADM files for the Group Policy Object Editor\" is enabled, the state of this setting is ignored and always treated as Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-disableautoadmupdate"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_disableautoadmupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_disableautoadmupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"c931c0a05c033d3f":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013","displayName":"Microsoft Office 365 Access 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Access 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Access 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365access2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013_1","displayName":"Enabled","description":null,"helpText":null}]},"c94f4fefdcadcfbd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks","displayName":"Managed Bookmarks (User)","description":"Setting the policy sets up a list of bookmarks where each one is a dictionary with the keys \"name\" and \"url\". These keys hold the bookmark's name and target. Admins can set up a subfolder by defining a bookmark without a \"url\" key, but with an additional \"children\" key. This key also has a list of bookmarks, some of which can also be folders. Chrome amends incomplete URLs as if they were submitted through the address bar. For example, \"google.com\" becomes \"https://google.com/\".\r\n\r\nUsers can't change the folders the bookmarks are placed in (though they can hide it from the bookmark bar). The default folder name for managed bookmarks is \"Managed bookmarks\" but it can be changed by adding a new sub-dictionary to the policy with a single key named \"toplevel_name\" with the desired folder name as its value. Managed bookmarks are not synced to the user account and extensions can't modify them.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"toplevel_name\": \"My managed bookmarks folder\"\r\n },\r\n {\r\n \"name\": \"Google\",\r\n \"url\": \"google.com\"\r\n },\r\n {\r\n \"name\": \"Youtube\",\r\n \"url\": \"youtube.com\"\r\n },\r\n {\r\n \"name\": \"Chrome links\",\r\n \"children\": [\r\n {\r\n \"name\": \"Chromium\",\r\n \"url\": \"chromium.org\"\r\n },\r\n {\r\n \"name\": \"Chromium Developers\",\r\n \"url\": \"dev.chromium.org\"\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_1","displayName":"Enabled","description":null,"helpText":null}]},"c93e4b5254fc1db8":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts","displayName":"Setting shortcuts on the New Tab Page (Beta) (User)","description":"In development: for early preview only.\r\n\r\nSetting the policy pre-configures up to 10 custom shortcuts on the Google Chrome New Tab page.\r\n\r\nIf set, users will see these shortcuts by default and users can toggle between “My shortcuts,\" \"Most visited sites\" or \"My organization's shortcuts\" on the \"Customize Chrome\" panel. If empty or unset, the user will only be able to toggle between “My shortcuts\" or \"Most visited sites\" on the \"Customize Chrome\" panel.\r\n\r\nShortcut URLs must be unique.\r\n\r\nIf allow_user_edit is set to true, users can change the name of the shortcut. If set to false or unset, users cannot edit the name.\r\n\r\nIf allow_user_delete is set to true, users can remove the shortcut. If set to false or unset, users cannot remove the shortcut.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=NTPShortcuts for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"name\": \"Google\",\r\n \"url\": \"https://www.google.com\"\r\n },\r\n {\r\n \"name\": \"YouTube\",\r\n \"url\": \"https://www.youtube.com\"\r\n },\r\n {\r\n \"name\": \"Google Drive\",\r\n \"url\": \"https://www.drive.google.com\",\r\n \"allow_user_edit\": true,\r\n \"allow_user_delete\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"c9c598dbfb701f8b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended","displayName":"Enable Live Translate (User)","description":"Enable translation of live captions. Captions will be sent to Google for translation.\r\n\r\nIf this policy is set to Enabled, Live Translate will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Translate will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Translate is disabled initially but can be enabled by the user anytime.\r\n\r\nIn LiveCaptionEnabled is set to Disabled, Live Translate will be disabled regardless of this policy setting.","helpText":"","infoUrls":[],"categoryId":"12142994-4b30-486c-bab1-9206528b2b96","categoryName":"Accessibility settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c907cc6c94079d26":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings","displayName":"Settings for DevTools Generative AI Features (User)","description":"These features in Google Chrome's DevTools employ generative AI models to provide additional debugging information. To use these features, Google Chrome has to collect data such as error messages, stack traces, code snippets, and network requests and send them to a server owned by Google, which runs a generative AI model. Response body or authentication and cookie headers in network requests are not included in the data sent to the server.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nDevTools Generative AI features include:\r\n\r\n- Console Insights: explains console messages and offers suggestions on how to fix console errors.\r\n\r\n- AI assistance: get help with understanding CSS styles (since version 131), network requests, performance, and files (all since version 132).\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_1","displayName":"Enabled","description":null,"helpText":null}]},"c9f1d82a28164690":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_datecolon26","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"c9c37e7f0bc1fe86":{"id":"user_vendor_msft_policy_config_internetexplorer_disableactivexversionlistautodownload","displayName":"Turn off automatic download of the ActiveX VersionList (User)","description":"This setting determines whether IE automatically downloads updated versions of Microsoft’s VersionList.XML. IE uses this file to determine whether an ActiveX control should be stopped from loading.\n\nIf you enable this setting, IE stops downloading updated versions of VersionList.XML. Turning off this automatic download breaks the out-of-date ActiveX control blocking feature by not letting the version list update with newly outdated controls, potentially compromising the security of your computer.\n\nIf you disable or don't configure this setting, IE continues to download updated versions of VersionList.XML.\n\nFor more information, see \"Out-of-date ActiveX control blocking\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableactivexversionlistautodownload"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableactivexversionlistautodownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableactivexversionlistautodownload_1","displayName":"Enabled","description":null,"helpText":null}]},"c960cba60a526f18":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls (User)","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowautomaticpromptingforactivexcontrols"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"c946b6d68a0c513b":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowlessprivilegedsites"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"c99a853d3799f001":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended","displayName":"Enable favorites bar (User)","description":"Enables or disables the favorites bar.\r\n\r\nIf you enable this policy, users will see the favorites bar.\r\n\r\nIf you disable this policy, users won't see the favorites bar.\r\n\r\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c995a27643eac946":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended","displayName":"Configure Microsoft Defender SmartScreen (User)","description":"This policy setting lets you configure whether to turn on Microsoft Defender SmartScreen. Microsoft Defender SmartScreen provides warning messages to help protect your users from potential phishing scams and malicious software. By default, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you enable this setting, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"c989c9f90308dba3":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled","displayName":"Disable saving browser history (User)","description":"Disables saving browser history and prevents users from changing this setting.\r\n\r\nIf you enable this policy, browsing history isn't saved. This also disables tab syncing.\r\n\r\nIf you disable this policy or don't configure it, browsing history is saved.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c98f0432015fb381":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls","displayName":"Allow Window Management permission on specified sites (User)","description":"Lets you configure a list of site url patterns that specify sites which will automatically grant the window management permission. This extends the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy isn't configured for a site, then the policy from 'DefaultWindowManagementSetting' (Default Window Management permission setting) applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"c94ca0b65b5d8579":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_allowtrackingforurlsdesc","displayName":"Configure tracking prevention exceptions for specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c9ad6e9d2602867a":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84. (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThe Web Components v0 APIs (Shadow DOM v0, Custom Elements v0, and HTML Imports) were deprecated in 2018, and have been disabled by default starting in M80. This policy allows these features to be selectively re-enabled until M84.\r\n\r\n If you set this policy is set to True, the Web Components v0 features will be enabled for all sites.\r\n\r\n If you set this policy to False or don't set this policy, the Web Components v0 features will be disabled by default, starting in M80.\r\n\r\n This policy will be removed after Microsoft Edge 84.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c9e67bd85ffc29c3":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_definepreferredlanguages","displayName":"Define an ordered list of preferred languages that websites should display in if the site supports the language (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"c98bde28969cba41":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled","displayName":"Configure Edge Website Typo Protection (User)","description":"This policy setting lets you configure whether to turn on Edge Website Typo Protection. Edge Website Typo Protection provides warning messages to help protect your users from potential typosquatting sites. By default, Edge Website Typo Protection is turned on.\r\n\r\nIf you enable this policy, Edge Website Typo Protection is turned on.\r\n\r\nIf you disable this policy, Edge Website Typo Protection is turned off.\r\n\r\nIf you don't configure this policy, Edge Website Typo Protection is turned on but users can choose whether to use Edge Website Typo Protection.","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"c96a0a7217b41137":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehome2_l_home2mapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"c951389d30eebb38":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy1_l_placesbarpath","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"c9f53980abb8132f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08_l_pathcolon266","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"c937d901525d2a1f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc11_l_descriptioncolon280","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"c951222bd3401e6a":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifyencryptioncompatibility","displayName":"Specify encryption compatibility (User)","description":"This policy setting allows you to specify the encrypted database compatibility.\r\n\r\nIf you enable this policy setting, the compatibility format specified will be applied during encryption for new files\r\n- Use legacy format\r\n- Use next generation format\r\n- All files save with next generation format\r\n\r\nIf you disable or do not configure this policy setting, the default setting, \"Use next generation format,\" will be applied.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_1","displayName":"Enabled","description":null,"helpText":null}]},"c9e85459c20a8aec":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_donotdownloadphotosfromtheactivedirectory","displayName":"Do not download photos from the Active Directory (User)","description":"This policy setting controls whether user photos will be downloaded from the Active Directory (if available). \r\n\r\nIf you enable this policy setting, photos will not be downloaded.\r\n\r\nIf you disable or do not configure this policy setting, photos will be downloaded.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_donotdownloadphotosfromtheactivedirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_donotdownloadphotosfromtheactivedirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"c97782309bc7495e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosaferecipientslist_l_specifyfullpathandfilenametosaferecipientslist","displayName":"Specify full path and filename to Safe Recipients list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":null},"c9ec474571b77c9c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersinexchangeonline","displayName":"Keep Search Folders in Exchange online (User)","description":"This policy setting allows you to specify the number of days to keep a Search Folder active when running in online mode. After a Search Folder has not been accessed for the specified number of days, it becomes dormant and no longer remains up-to-date with current contents of folders (viewing the Search Folder makes it active again and restarts the timer).\r\n\r\nIf you enable this policy setting, you may specify the number of days to keep a Search Folder active when running in online mode.\r\n\r\nIf you disable or do not configure this policy setting, then Search Folders always remain dormant.","helpText":"","infoUrls":[],"categoryId":"fb721630-fc42-465b-ba22-ab670698c8b5","categoryName":"Search Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersinexchangeonline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersinexchangeonline_1","displayName":"Enabled","description":null,"helpText":null}]},"c980825b8ec53884":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_defaultrssfeeds","displayName":"Default RSS Feeds (User)","description":"This policy setting allows you to deploy default RSS Feeds by providing a list of URLs that point to content that is syndicated through RSS. Outlook reads the list when it starts, and the corresponding RSS Feeds are added to each of the user's profiles. By default, users are not subscribed to any RSS Feeds.\r\n\r\nIf you enable this policy setting, you may specify the URLs in the format: feed://, where \"feed://\" replaces \"http://\". This ensures that the URL is parsed as an RSS XML file in Outlook.\r\n\r\nIf you disable or do not configure this policy setting, users are not subscribed to any RSS Feeds.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_defaultrssfeeds_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_defaultrssfeeds_1","displayName":"Enabled","description":null,"helpText":null}]},"c915f5b296c2002c":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"4d69af55-f100-45fa-92e1-56d46434c647","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_0","displayName":"Blocked files are not opened","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_1","displayName":"Blocked files open in Protected View and can not be edited","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_2","displayName":"Blocked files open in Protected View and can be edited","description":null,"helpText":null}]},"c9c59234a3941354":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_l_descriptioncolon86","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/ca.json b/public/intune-definitions/ca.json new file mode 100644 index 000000000000..cc621614cb7e --- /dev/null +++ b/public/intune-definitions/ca.json @@ -0,0 +1 @@ +{"cac00a7b3af5bc18":{"id":"ade_accountsettings_hideusersgroups","displayName":"Hide in Users and Groups","description":"Make the admin account hidden in the login window and Users & Groups.","helpText":null,"infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":[{"id":"ade_accountsettings_hideusersgroups_0","displayName":"Not Configured","description":null,"helpText":null},{"id":"ade_accountsettings_hideusersgroups_1","displayName":"Yes","description":null,"helpText":null}]},"cae9334eb2ad915b":{"id":"com.android.devicerestrictionpolicy.storageblockexternalmediaaosp","displayName":"Block mounting of external media","description":"If 'True', prevents users from using or connecting any external media on the device. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to connect external media.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.storageblockexternalmediaaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.storageblockexternalmediaaosp_true","displayName":"True","description":"True","helpText":null}]},"caf75d8e64a3c5b6":{"id":"com.apple.applicationaccess_allowsafarihistoryclearing","displayName":"Allow Safari History Clearing","description":"If `false`, the system disables the ability to clear browsing history in Safari.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowsafarihistoryclearing_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowsafarihistoryclearing_true","displayName":"True","description":null,"helpText":null}]},"cabef952678c6fc6":{"id":"com.apple.extensiblesso_extensiondata_kerberos","displayName":"Extension Data","description":"This is the dictionary used by the Apple built-in Kerberos extension.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"ca03c03dd0b9500b":{"id":"com.apple.managedclient.preferences_isolateorigins","displayName":"Enable site isolation for specific origins","description":"Specify origins to run in isolation, in their own process.\nThis policy also isolates origins named by subdomains - for example, specifying https://contoso.com/ will cause https://foo.contoso.com/ to be isolated as part of the https://contoso.com/ site.\nIf the policy is enabled, each of the named origins in a comma-separated list will run in its own process.\nIf you disable this policy, then both the 'IsolateOrigins' and 'SitePerProcess' features are disabled. Users can still enable 'IsolateOrigins' policy manually, via command line flags.\nIf you don't configure the policy, the user can change this setting.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#isolateorigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ca738d42e94d0bc3":{"id":"com.apple.managedclient.preferences_updatepolicyoverride","displayName":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge","description":"If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\n\n- Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\n\n- Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\n\nIf you select manual updates, make sure you periodically check for updates by using Microsoft Autoupdate.\n\nIf you don't enable and configure this policy, Microsoft Edge Update automatically checks for updates.\n\nPolicy options mapping:\n\n* automatic-silent-only (automatic-silent-only) = Updates are applied only when they're found by the periodic update check.\n\n* manual-only (manual-only) = Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#updatepolicyoverride"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_updatepolicyoverride_0","displayName":"silent-only - Updates are applied only when they're found by the periodic update check.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_updatepolicyoverride_1","displayName":"only - Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)","description":null,"helpText":null}]},"cadd29622e73f2c0":{"id":"com.apple.systemconfiguration_proxies_proxyautoconfigurlstring","displayName":"Proxy Auto Config URL String","description":"The automatic proxy configuration URL.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"ca67ba07a378f55e":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization","displayName":"Authorization","description":"The `Authorization` key is an optional replacement for the `Allowed` key, which has one of the following possible values:\n\n- `Allow`: Equivalent to a `true` value for the `Allowed` key\n- `Deny`: Equivalent to a `false` value for the `Allowed` key\n- `AllowStandardUserToSetSystemService`: Allows a standard (non-admin) user to configure the permissions for the specified app in the Privacy preferences for services that otherwise require admin authorization; only valid for the `ListenEvent` and `ScreenCapture` services\n\n> Note:\n> Every payload needs to include either `Authorization` or `Allowed`, but not both.\n\nAvailable in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization_2","displayName":"AllowStandardUserToSetSystemService","description":null,"helpText":null}]},"ca70b1906c3fcb84":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowtrackingforurls","displayName":"Configure tracking prevention exceptions for specific sites","description":"Configure the list of URL patterns that are excluded from tracking prevention.\n\nIf you configure this policy, the list of configured URL patterns is excluded from tracking prevention.\n\nIf you don't configure this policy, the global default value from the \"Block tracking of users' web-browsing activity\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"ca1669513abe1352":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting","displayName":"Default geolocation setting","description":"Set whether websites can track users' physical locations. You can allow tracking by default ('AllowGeolocation'), deny it by default ('BlockGeolocation'), or ask the user each time a website requests their location ('AskGeolocation').\n\nIf you don't configure this policy, 'AskGeolocation' is used and the user can change it.\n\nPolicy options mapping:\n\n* AllowGeolocation (1) = Allow sites to track users' physical location\n\n* BlockGeolocation (2) = Don't allow any site to track users' physical location\n\n* AskGeolocation (3) = Ask whenever a site wants to track users' physical location\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting_allowgeolocation","displayName":"Allow sites to track users' physical location","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting_blockgeolocation","displayName":"Don't allow any site to track users' physical location","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting_askgeolocation","displayName":"Ask whenever a site wants to track users' physical location","description":null,"helpText":null}]},"caba2f1d42ef67c8":{"id":"defender_disableprivacymode","displayName":"Allow users to view the full History results","description":"Disable the privacy mode","helpText":null,"infoUrls":[],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"defender_disableprivacymode_0","displayName":"No","description":null,"helpText":null},{"id":"defender_disableprivacymode_1","displayName":"Yes","description":null,"helpText":null}]},"cafb824263c5a478":{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsosdropdown_name","displayName":"Select the encryption method for operating system drives:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp#encryptionmethodbydrivetype"],"categoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","categoryName":"BitLocker Drive Encryption","options":[{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsosdropdown_name_3","displayName":"AES-CBC 128-bit","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsosdropdown_name_4","displayName":"AES-CBC 256-bit","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsosdropdown_name_6","displayName":"XTS-AES 128-bit (default)","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_encryptionmethodbydrivetype_encryptionmethodwithxtsosdropdown_name_7","displayName":"XTS-AES 256-bit","description":null,"helpText":null}]},"ca55f4f542c0289c":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_nofilecollect_chk","displayName":"Do not collect additional files","description":null,"helpText":"","infoUrls":[],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_nofilecollect_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_nofilecollect_chk_1","displayName":"True","description":null,"helpText":null}]},"ca81281dd8af3f78":{"id":"device_vendor_msft_policy_config_admx_lanmanworkstation_pol_ciphersuiteorder_multitext_ciphersuiteorder","displayName":"Cipher suites:","description":null,"helpText":"","infoUrls":[],"categoryId":"88a2c40a-7b95-4fd8-8ad8-81dc61d4adf5","categoryName":"Lanman Workstation","options":null},"caf5aa45b9c41efe":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_2","displayName":"Remove \"Make Available Offline\" for these files and folders","description":"This policy setting allows you to manage a list of files and folders for which you want to block the \"Make Available Offline\" command.\r\n\r\nIf you enable this policy setting, the \"Make Available Offline\" command is not available for the files and folders that you list. To specify these files and folders, click Show. In the Show Contents dialog box, in the Value Name column box, type the fully qualified UNC path to the file or folder. Leave the Value column field blank.\r\n\r\nIf you disable this policy setting, the list of files and folders is deleted, including any lists inherited from lower precedence GPOs, and the \"Make Available Offline\" command is displayed for all files and folders.\r\n\r\nIf you do not configure this policy setting, the \"Make Available Offline\" command is available for all files and folders.\r\n\r\nNotes:\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy settings are combined, and the \"Make Available Offline\" command is unavailable for all specified files and folders.\r\n\r\nThe \"Make Available Offline\" command is called \"Always available offline\" on computers running Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 7, or Windows Vista.\r\n\r\nThis policy setting does not prevent files from being automatically cached if the network share is configured for \"Automatic Caching.\" It only affects the display of the \"Make Available Offline\" command in File Explorer.\r\n\r\nIf the \"Remove 'Make Available Offline' command\" policy setting is enabled, this setting has no effect.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nopinfiles-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_2_1","displayName":"Enabled","description":null,"helpText":null}]},"cacc57c39ef6c9fd":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_nc","displayName":"Best effort service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that do not conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Best Effort service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 0.\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypebesteffort-nc"],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_nc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_nc_1","displayName":"Enabled","description":null,"helpText":null}]},"ca440e10dbcb0e23":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-localmachine"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine_1","displayName":"Enabled","description":null,"helpText":null}]},"ca1a8152c581ca28":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-localmachinelockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"ca3afcbefb41d500":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingsupportbranchcache","displayName":"Enable Support for BranchCache","description":"If enabled, the App-V client will support BrancheCache compatible HTTP streaming. If BranchCache support is not desired, this should be disabled. The client can then apply HTTP optimizations which are incompatible with BranchCache","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingsupportbranchcache"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingsupportbranchcache_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingsupportbranchcache_1","displayName":"Enabled","description":null,"helpText":null}]},"ca7a801ee4ed30bd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge","displayName":"Enables merging of user cloud policies into machine-level policies","description":"Setting the policy to Enabled allows policies associated with a Google Workspace account to be merged into machine-level policies.\r\n\r\nOnly policies originating from secure users can be merged. A secure user is affiliated with the organization that manages their browser using Chrome Browser Cloud Management. All other user-level policies will always be ignored.\r\n\r\nPolicies that need to be merged also need to be set in either PolicyListMultipleSourceMergeList or PolicyDictionaryMultipleSourceMergeList. This policy will be ignored if neither of the two aforementioned policies is configured.\r\n\r\nLeaving the policy unset or setting it to Disabled prevents user-level cloud policies from being merged with policies from any other sources.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge_1","displayName":"Enabled","description":null,"helpText":null}]},"ca7fcd6c91c04549":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls_videocaptureallowedurlsdesc","displayName":"URLs that will be granted access to video capture devices without prompt (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"caf277882c03f525":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins","displayName":"Specify a list of enabled plugins","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"ca677f45ae21d9e3":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls","displayName":"Allow automatic fullscreen on these sites","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail. Users' personal settings may allow certain origins to call\r\nthis API without a prior user gesture, as described in\r\nhttps://chromestatus.com/feature/6218822004768768.\r\n\r\nThis policy supersedes users' personal settings and allows matching origins to\r\ncall the API without a prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy nor user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"caac09d1fec3ac36":{"id":"device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy","displayName":"Allow Fips Algorithm Policy","description":"Allows or disallows the Federal Information Processing Standard (FIPS) policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cryptography#allowfipsalgorithmpolicy"],"categoryId":"bdc32a5e-2bce-46b1-9838-ed557b1e287e","categoryName":"Cryptography","options":[{"id":"device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy_0","displayName":"Block","description":"Block","helpText":null}]},"cae2cc3029f7484b":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype_1","displayName":"Legacy Redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype_2","displayName":"FSLogix Redirection","description":null,"helpText":null}]},"cab6368d8a297727":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout","displayName":"CCD Unregister Timeout","description":"CCD Unregister Timeout represents the number of seconds that a user's sign out will be delayed if the number of available providers is less than specified in Healthy Providers Required For Unregister.\r\n\r\nIf CCD Unregsiter Timeout is set to 0, then the user sign out will be held until the number of providers specified in Healthy Providers Required For Unregister are available. NOTE: If CCDUnregisterTimeout is set to 0, and the number of providers specified in Healthy Providers Required For Unregister is not met, then the user's sign out may appear to the user as if the session is locked. The sign out may be held infinitely.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\CCDUnregisterTimeout\r\nType: DWORD\r\nValues: Min = 0, Max = 10000000","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"ca88f8859b83d1ee":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators","displayName":"User Account Control Behavior Of The Elevation Prompt For Administrators","description":"User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode This policy setting controls the behavior of the elevation prompt for administrators. The options are: • Elevate without prompting: Allows privileged accounts to perform an operation that requires elevation without requiring consent or credentials. Note: Use this option only in the most constrained environments. • Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. • Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. • Prompt for credentials: When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. • Prompt for consent: When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. • Prompt for consent for non-Windows binaries: (Default) When an operation for a non-Microsoft application requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_behavioroftheelevationpromptforadministrators"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_0","displayName":"Elevate without prompting","description":"Elevate without prompting","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_1","displayName":"Prompt for credentials on the secure desktop","description":"Prompt for credentials on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_2","displayName":"Prompt for consent on the secure desktop","description":"Prompt for consent on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_3","displayName":"Prompt for credentials","description":"Prompt for credentials","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_4","displayName":"Prompt for consent","description":"Prompt for consent","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_5","displayName":"Prompt for consent for non-Windows binaries","description":"Prompt for consent for non-Windows binaries","helpText":null}]},"cae60534aa14f8e8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictbackgroundfetchfromserviceworkerenabled","displayName":"Restrict Background Fetch API when called from a Service Worker","description":"This policy controls whether background fetch requests from Service Workers are restricted. If a feature that downloads files in the background is affected, this policy may be relevant.\n\nIf you enable this policy or don't configure it, the restriction is active, and background fetch requests from Service Worker contexts may be blocked.\n\nIf you disable this policy, the restriction is bypassed, allowing Service Workers to make background fetch requests.\n\nThis policy is temporary and will be removed after Microsoft Edge version 152.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictbackgroundfetchfromserviceworkerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictbackgroundfetchfromserviceworkerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ca1fa33acfcbc01f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_webusbaskforurlsdesc","displayName":"Allow WebUSB on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"ca6a70e12d141eec":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},"ca7bf0bcc65caaba":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_configurekeyboardshortcuts","displayName":"Configure the list of commands for which to disable keyboard shortcuts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"cac33b68053fbf63":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled","displayName":"Allow freezing of background tabs","description":"Controls whether Microsoft Edge can freeze tabs that are in the background for at least 5 minutes.\r\n\r\nTab freezing reduces CPU, battery, and memory usage. Microsoft Edge uses heuristics to avoid freezing tabs that do useful work in the background, such as display notifications, play sound, and stream video.\r\n\r\nIf you enable or don't configure this policy, tabs that have been in the background for at least 5 minutes might be frozen.\r\n\r\nIf you disable this policy, no tabs will be frozen.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cac32df3dd4e1241":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame","displayName":"Allow surf game","description":"If you disable this policy, users won't be able to play the surf game when the device is offline or if the user navigates to edge://surf.\r\n\r\nIf you enable or don't configure this policy, users can play the surf game.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame_1","displayName":"Enabled","description":null,"helpText":null}]},"cae0069cab93f037":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"cad7c8835580dc45":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_powerpntexe143","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_powerpntexe143_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_powerpntexe143_1","displayName":"True","description":null,"helpText":null}]},"ca63528a64e840bb":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl","displayName":"Specify SharePoint Server URL and organization name","description":"This setting lets you enable users to use the OneDrive sync app (OneDrive.exe) to sync files in SharePoint Server 2019. The URL defines the location of the SharePoint Server and enables the sync app to authenticate and set up sync. The organization name lets you specify the OneDrive and SharePoint folder names that will be created in File Explorer. The organization name is optional. If you don't provide it, the sync app will use the first segment of the URL as the name. For example, office.sharepoint.com would become \"Office,\" and the OneDrive folder name would be \"OneDrive - Office.\"\r\n\r\nIf you enable this setting and provide the SharePoint Server URL, users will be able to sync files in SharePoint Server 2019.\r\n\r\nIf you disable or do not configure this setting, or do not provide the SharePoint Server URL, users will not be able to sync files in SharePoint Server 2019. ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_1","displayName":"Enabled","description":null,"helpText":null}]},"ca2fe000e167cbe3":{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin","displayName":"Select Power Button Action Plugged In","description":"This policy setting specifies the action that Windows takes when a user presses the power button. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectpowerbuttonactionpluggedin"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},"ca6fd6df758c41b9":{"id":"device_vendor_msft_policy_config_update_deferqualityupdatesperiodindays","displayName":"Defer Quality Updates Period (Days)","description":"Defers Quality Updates for the specified number of days. Supported values are 0-30.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferqualityupdatesperiodindays"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"ca7ccc0605000753":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filehash","displayName":"File hash","description":"Hash of the file that should be elevated","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"ca43ed168fa83d41":{"id":"keyboardsettings_allowspellcheck","displayName":"Allow Spell Check","description":"If `false`, disables spell check.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowspellcheck_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowspellcheck_true","displayName":"True","description":null,"helpText":null}]},"caa50feec8eeb084":{"id":"passcode_passcode","displayName":"Passcode","description":"Use this configuration to define passcode policy settings","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"cac0ad8e0d037ae9":{"id":"user_vendor_msft_policy_config_admx_globalization_preventgeoidchange_1","displayName":"Disallow changing of geographic location (User)","description":"This policy setting prevents users from changing their user geographical location (GeoID).\r\n\r\nIf you enable this policy setting, users cannot change their GeoID.\r\n\r\nIf you disable or do not configure this policy setting, users may select any GeoID.\r\n\r\nIf you enable this policy setting at the computer level, it cannot be disabled by a per-user policy setting. If you disable this policy setting at the computer level, the per-user policy is ignored. If you do not configure this policy setting at the computer level, restrictions are based on per-user policy settings.\r\n\r\nTo set this policy setting on a per-user basis, make sure that the per-computer policy setting is not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-preventgeoidchange-1"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_preventgeoidchange_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_preventgeoidchange_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ca640a468d7a222e":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1","displayName":"Reminder balloon lifetime (User)","description":"Determines how long updated reminder balloons are displayed.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the update reminder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-remindertimeout-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ca1fe03119272a21":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_settingsstoragepath","displayName":"Settings storage path (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"ca9f055298d1e348":{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription","displayName":"Set action to take when logon hours expire (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription_1","displayName":"Lock","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription_2","displayName":"Disconnect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription_3","displayName":"Logoff","description":null,"helpText":null}]},"ca5a64a1baace2d9":{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics","displayName":"Configure Telemetry For Microsoft 365 Analytics (User)","description":"Configures what browsing data will be sent to Microsoft 365 Analytics for devices belonging to an organization.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configuretelemetryformicrosoft365analytics"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_0","displayName":"No data collected or sent","description":"No data collected or sent","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_1","displayName":"Send intranet history only","description":"Send intranet history only","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_2","displayName":"Send Internet history only","description":"Send Internet history only","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_3","displayName":"Send both intranet and Internet history","description":"Send both intranet and Internet history","helpText":null}]},"ca5fde039b8866f5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURL specifies the URL of the search engine used during a default search. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nExample value: https://search.my.company/search?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_1","displayName":"Enabled","description":null,"helpText":null}]},"caed3eeda74b5e22":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled","displayName":"Enable submission of documents to Google Cloud Print (User)","description":"Setting the policy to Enabled or leaving it unset lets users print to Google Cloud Print from the Google Chrome print dialog. Google Chrome can submit documents to Google Cloud Print for printing. This doesn't prevent users from submitting print jobs on websites.\r\n\r\nSetting the policy to Disabled means users can't print to Google Cloud Print from the Google Chrome print dialog.\r\n\r\nIn order to keep Google Cloud Print destinations discoverable, this policy must be set to Enabled and cloud must not be included in the PrinterTypeDenyList policy.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ca814f91f22cfdba":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings","displayName":"Settings for DevTools Generative AI Features (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_0","displayName":"Allow DevTools Generative AI Features and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_1","displayName":"Allow DevTools Generative AI Features without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_2","displayName":"Do not allow DevTools Generative AI Features.","description":null,"helpText":null}]},"ca7c319896ca9d70":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautomaticpercententry","displayName":"Enable automatic percent entry (User)","description":"Enabling this policy selects the Advanced (Editing options) user option to \"Enable automatic percent entry\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautomaticpercententry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautomaticpercententry_1","displayName":"Enabled","description":null,"helpText":null}]},"ca95f1951a690705":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_transitionnavigationkeys","displayName":"Transition navigation keys (User)","description":"Enabling this policy checks the Advanced (Lotus compatibility) user option named \"Transition navigation keys\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_transitionnavigationkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_transitionnavigationkeys_1","displayName":"Enabled","description":null,"helpText":null}]},"cadba96ebde99ac2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]},"ca23d84bfc635e05":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"ca8c8236240bd43c":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"ca59df3d9cc0ad8f":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"ca5a65a208111b7d":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowsmartscreenie"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"ca4a7c044c84b1e3":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled","displayName":"XFA support in native PDF reader enabled (User)","description":"Lets the Microsoft Edge browser enable XFA (XML Forms Architecture) support in the native PDF reader and allows users to open XFA PDF files in the browser.\r\n\r\nIf you enable this policy, XFA support in the native PDF reader will be enabled.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not enable XFA support in the native PDF reader.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ca068fade8a2d2d7":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ca2529414300ec5d":{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector","displayName":"Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors (User)","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when data is entered in Microsoft Edge from the clipboard or by drag and dropping web content.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\n5. minimum_data_size\r\nSpecifies the minimum size (in bytes) that the entered data must meet or exceed to be scanned.\r\nDefault: 100 bytes if the field is not set.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"minimum_data_size\": 100,\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},"ca1c13770fd5582c":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled","displayName":"Show links shared from Microsoft 365 apps in History (User)","description":"Allows Microsoft Edge to display links recently shared by or shared with the user from Microsoft 365 apps in History.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge displays links recently shared by or shared with the user from Microsoft 365 apps in History.\r\n\r\nIf you disable this policy, Microsoft Edge does not display links recently shared by or shared with the user from Microsoft 365 apps in History. The control in Microsoft Edge settings is disabled and set to off.\r\n\r\nThis policy only applies for Microsoft Edge local user profiles and profiles signed in using Azure Active Directory.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cabc8f4849a8c19b":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled","displayName":"Show Hubs Sidebar (User)","description":"Shows a launcher bar on the right side of Microsoft Edge's screen.\r\n\r\nEnable this policy to always show the Sidebar.\r\nDisable this policy to never show the Sidebar.\r\n\r\nIf you don't configure the policy, users can choose whether to show the Sidebar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ca4756b4c4935476":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastservicesharednotescustomurl7","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"ca46204c30323f15":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffclicktoimoption","displayName":"Turn off click to IM option (User)","description":"This policy setting allows you to remove the Instant Messaging (IM) option from the Contact Card and Outlook Ribbon.\r\n\r\nIf you enable this policy setting the Instant Messaging icon does not appear on the Contact Card and Outlook Ribbon.\r\n\r\nIf you disable or do not configure this policy setting the Instant Messaging icon appears on the Contact Card and Outlook Ribbon.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffclicktoimoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_turnoffclicktoimoption_1","displayName":"Enabled","description":null,"helpText":null}]},"ca86b932cebc2b10":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicypublisher","displayName":"Disallow in Publisher (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicypublisher_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicypublisher_1","displayName":"True","description":null,"helpText":null}]},"ca5e4302d8bfdfe5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_luxembourgishluxembourg","displayName":"Luxembourgish (Luxembourg) (User)","description":"Enables the editing language Luxembourgish (Luxembourg)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_luxembourgishluxembourg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_luxembourgishluxembourg_1","displayName":"Enabled","description":null,"helpText":null}]},"ca0e4cfd490239f8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_webfoldersmanagingpairsofwebpagesandfolders_l_webfoldersmanagingpairsofwebpagesandfolders506","displayName":"Web Folders: Managing pairs of Web pages and folders (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_webfoldersmanagingpairsofwebpagesandfolders_l_webfoldersmanagingpairsofwebpagesandfolders506_0","displayName":"Show and manage the pair as a single file","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_webfoldersmanagingpairsofwebpagesandfolders_l_webfoldersmanagingpairsofwebpagesandfolders506_2","displayName":"Show both parts and manage them individually","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_webfoldersmanagingpairsofwebpagesandfolders_l_webfoldersmanagingpairsofwebpagesandfolders506_1","displayName":"Show both parts but manage as a single file","description":null,"helpText":null}]},"ca2179b70d9c8cdc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkoleobjects_l_checkoleobjectsdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkoleobjects_l_checkoleobjectsdropid_0","displayName":"Do not check","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkoleobjects_l_checkoleobjectsdropid_1","displayName":"Override IE kill bit list","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_checkoleobjects_l_checkoleobjectsdropid_2","displayName":"Strict allow list","description":null,"helpText":null}]},"caa1e016458aa59f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey02","displayName":"Escrow Key #2 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey02_1","displayName":"Enabled","description":null,"helpText":null}]},"ca5507765b0d6582":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc19_l_descriptioncolon312","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"ca40a3007759c8c4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc06","displayName":"Unsafe Location #6 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc06_1","displayName":"Enabled","description":null,"helpText":null}]},"cadbd9a348d47860":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgroupbuildingblockspath","displayName":"Workgroup building blocks path (User)","description":"Specifies the location of workgroup building block templates.","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgroupbuildingblockspath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_workgroupbuildingblockspath_1","displayName":"Enabled","description":null,"helpText":null}]},"caa3a5b5785c8ddf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_alwayssavewebpagesinthedefaultencoding","displayName":"Always save Web pages in the default encoding. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"025c640e-51e2-4f04-85e3-a13f30b5e08c","categoryName":"Encoding","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_alwayssavewebpagesinthedefaultencoding_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_encoding_l_defaultorspecificencoding_l_alwayssavewebpagesinthedefaultencoding_1","displayName":"True","description":null,"helpText":null}]},"cacce2eb7befa785":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_deletemeetingrequestfrominboxwhenresponding","displayName":"Delete meeting request from Inbox when responding (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_deletemeetingrequestfrominboxwhenresponding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_deletemeetingrequestfrominboxwhenresponding_1","displayName":"Enabled","description":null,"helpText":null}]},"caa6cd8fb8221a3e":{"id":"user_vendor_msft_policy_config_outlk16v2.updates.4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventcopyingormovingitemsbetweenaccounts","displayName":"Prevent copying or moving items between accounts (User)","description":"This policy setting allows you to prevent items from being copied or moved to other accounts or PSTs.\r\n\r\nIf you enable this policy setting, items will be prevented from being moved or copied to other accounts or PSTs. Enter one of the following details:\r\n\r\n- \"Contoso.com\": prevents copying or moving from the account corresponding to the listed domain\r\n- \"*\": prevents copying from all accounts and PST's\r\n- \"SharePoint\": prevents copies or moves from the SharePoint PST\r\n\r\nIf you disable or do not configure this policy setting, copying or moving items between accounts or PSTs is allowed.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2.updates.4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventcopyingormovingitemsbetweenaccounts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2.updates.4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventcopyingormovingitemsbetweenaccounts_1","displayName":"Enabled","description":null,"helpText":null}]},"ca21ccc1dc6f1ac9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_whenforwardingamessage","displayName":"When forwarding a message: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_whenforwardingamessage_1","displayName":"Attach orginal message","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_whenforwardingamessage_2","displayName":"Include original message text","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_whenforwardingamessage_3","displayName":"Include and indent org. message text","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_whenforwardingamessage_1000","displayName":"Prefix each line of the org. message","description":null,"helpText":null}]},"ca2aff9ef1d3f7ff":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeininmillisec","displayName":"Specify duration of fade in (in milliseconds) (User)","description":"Specify duration of fade in (in milliseconds)","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeininmillisec_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydurationoffadeininmillisec_1","displayName":"Enabled","description":null,"helpText":null}]},"ca31e9b8d04c9be7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockinternet_v2","displayName":"Include Internet in Safe Zones for Automatic Picture Download (User)","description":"This policy setting controls whether pictures and external content in HTML e-mail messages from untrusted senders on the Internet are downloaded without Outlook users explicitly choosing to do so. \r\n\r\nIf you enable this policy setting, Outlook will automatically download external content in all e-mail messages sent over the Internet and users will not be able to change the setting. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not consider the Internet a safe zone, which means that Outlook will not automatically download content from external servers unless the sender is included in the Safe Senders list. Recipients can choose to download external content from untrusted senders on a message-by-message basis.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockinternet_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockinternet_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"ca8ab66f933f3207":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_enablescriptsinoneoffforms","displayName":"Allow scripts in one-off Outlook forms (User) (Deprecated)","description":"This policy setting controls whether scripts can run in Outlook forms in which the script and layout are contained within the message. \r\n\r\nIf you enable this policy setting, scripts can run in one-off Outlook forms. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not run scripts in forms in which the script and the layout are contained within the message. \r\n\r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"e11f4bd4-9041-49c9-9b8c-163827d606ce","categoryName":"Custom Form Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_enablescriptsinoneoffforms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_enablescriptsinoneoffforms_1","displayName":"Enabled","description":null,"helpText":null}]},"ca923c02617806d2":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_pathcolon20","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"ca68f02dbf4cda6b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_l_pathcolon16","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"ca4d83d788d7fcc3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_movement","displayName":"Cursor movement (User)","description":"Used for complex scripts. Specifies if logical or visual cursor control shall be used.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_movement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_movement_1","displayName":"Enabled","description":null,"helpText":null}]},"ca9bb60e2c4f16f8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingbackgroundspellingchecker","displayName":"Delay before starting background spelling checker (User)","description":"This policy setting allows you to configure when the background spell check is started.\r\n\r\nIf you enable this policy setting, you may specify the delay, in milliseconds, before the background spell check is started. This setting only applies when Word is running in a terminal server session.\r\n\r\nIf you disable or do not configure this policy setting, Word will behave normally when in a terminal server session.","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingbackgroundspellingchecker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingbackgroundspellingchecker_1","displayName":"Enabled","description":null,"helpText":null}]},"cabe71a0784dc208":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngsaltlength","displayName":"Specify CNG salt length (User)","description":"This policy setting allows you to specify the number of bytes of salt that should be used.\r\n\r\nIf you enable this policy setting, the bytes specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default length of 16 will be used.","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngsaltlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifycngsaltlength_1","displayName":"Enabled","description":null,"helpText":null}]},"ca3cd14947f04fd1":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3","displayName":"Checked: Allow edit. Unchecked: Do not allow edit. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8391e79d-d618-47c3-979c-83544da43739","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_1","displayName":"True","description":null,"helpText":null}]},"ca31e89c6da5234d":{"id":"vendor_msft_defender_configuration_tamperprotection_blob","displayName":"Tamper Protection Blob","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/defender-csp#:~:text=Configuration/TamperProtection"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"ca8362231ccb007c":{"id":"vendor_msft_firewall_mdmstore_publicprofile_globalportsallowuserprefmerge","displayName":"Global Ports Allow User Pref Merge","description":"This value is used as an on/off switch. If this value is false, global port firewall rules in the local store are ignored and not enforced. The setting only has meaning if it is set or enumerated in the Group Policy store or if it is enumerated from the GroupPolicyRSoPStore. The merge law for this option is to let the value GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_globalportsallowuserprefmerge_false","displayName":"False","description":"GlobalPortsAllowUserPrefMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_globalportsallowuserprefmerge_true","displayName":"True","description":"GlobalPortsAllowUserPrefMerge On","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/cb.json b/public/intune-definitions/cb.json new file mode 100644 index 000000000000..47b2ab321d4d --- /dev/null +++ b/public/intune-definitions/cb.json @@ -0,0 +1 @@ +{"cb63454b27c8806d":{"id":"com.apple.managedclient.preferences_screencaptureallowedbyorigins","displayName":"Allow Desktop, Window, and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Desktop, Window, and Tab Capture.\n\nLeaving the policy unset means that sites will not be considered for an override at this scope of Capture.\n\nThis policy is not considered if a site matches a URL pattern in any of the following policies: \"WindowCaptureAllowedByOrigins\", \"TabCaptureAllowedByOrigins\", \"SameOriginTabCaptureAllowedByOrigins\".\n\nIf a site matches a URL pattern in this policy, the \"ScreenCaptureAllowed\" will not be considered.\n\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#screencaptureallowedbyorigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"cb6066fbcceed873":{"id":"com.apple.managedclient.preferences_smimecertificateslookuporder","displayName":"Set the order in which S/MIME certificates are considered","description":"Set the order in which certificates will be used to decrypt and encrypt S/MIME messages.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#set-the-order-in-which-smime-certificates-are-considered"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_smimecertificateslookuporder_0","displayName":"Contacts","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_smimecertificateslookuporder_1","displayName":"Global Address List","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_smimecertificateslookuporder_2","displayName":"Device","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_smimecertificateslookuporder_3","displayName":"LDAP","description":null,"helpText":null}]},"cba799a2e9441706":{"id":"com.apple.mcx.timemachine_backupdesturl","displayName":"Backup Destination URL","description":"The URL of the backup destination.","helpText":null,"infoUrls":[],"categoryId":"361859d9-1382-47c3-b9ec-9251a62fbb25","categoryName":"Time Machine","options":null},"cb9746560b40de8d":{"id":"com.apple.mcxprinting_userprinterlist_printer_displayname","displayName":"Display Name","description":"The display name.","helpText":null,"infoUrls":[],"categoryId":"174ffe92-3770-4688-aa21-85b7535cf374","categoryName":"Printing","options":null},"cb49bc3b53bd11cf":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_recommended","displayName":"Enable AutoFill for addresses (users can override)","description":"Enables the AutoFill feature and allows users to autocomplete address information in web forms through previously stored information.\n\nIf you have enabled or not configured this policy, users manage AutoFill for addresses in Microsoft Edge settings. AutoFill allows users to complete address fields in web forms using previously saved information.\n\nIf you have disabled this policy, Microsoft Edge doesn't suggest, fill in, or save address information. AutoFill is also disabled for all web forms except payment and password fields, and previously saved addresses aren't available.\n\nIf you disable this policy, then \"EdgeAutofillMlEnabled\" is turned off.\n\nIf you disable this policy, all activities for all web forms are stopped, except payment and password forms. No further entries are saved, and Microsoft Edge doesn't suggest or AutoFill any previous entries.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"cb3eff8e7c8ee42c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cryptowalletenabled","displayName":"Enable CryptoWallet feature (Obsolete)","description":"This policy is obsoleted because this feature will no longer be supported, starting in Microsoft Edge 128. There's no replacement for this policy.\n Enables CryptoWallet feature in Microsoft Edge.\n\n If you enable this policy or don't configure it, users can use CryptoWallet feature that allows users to securely store, manage, and transact digital assets such as Bitcoin, Ethereum, and other cryptocurrencies. Therefore, Microsoft Edge may access Microsoft servers to communicate with the web3 world during the use of the CryptoWallet feature.\n\n If you disable this policy, users can't use CryptoWallet feature.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.cryptowalletenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.cryptowalletenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"cb0591ef064dc596":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsearchengine","displayName":"Allow importing of search engine settings","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\n\nIf you enable, this policy, the option to import search engine settings is automatically selected.\n\nIf you disable this policy, search engine settings aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\n\nYou can set this policy as a recommendation. This option means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\n\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_true","displayName":"Enabled","description":null,"helpText":null}]},"cb474b21a8dc8fd7":{"id":"device_vendor_msft_defender_configuration_disablecputhrottleonidlescans","displayName":"Disable Cpu Throttle On Idle Scans","description":"Indicates whether the CPU will be throttled for scheduled scans while the device is idle. This feature is enabled by default and will not throttle the CPU for scheduled scans performed when the device is otherwise idle, regardless of what ScanAvgCPULoadFactor is set to. For all other scheduled scans this flag will have no impact and normal throttling will occur.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablecputhrottleonidlescans_1","displayName":"Disable CPU Throttle on idle scans","description":"Disable CPU Throttle on idle scans","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablecputhrottleonidlescans_0","displayName":"Enable CPU Throttle on idle scans","description":"Enable CPU Throttle on idle scans","helpText":null}]},"cbef763691201602":{"id":"device_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_2","displayName":"Redirect folders on primary computers only","description":"This policy setting controls whether folders are redirected on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office.\r\n\r\nTo designate a user's primary computers, an administrator must use management software or a script to add primary computer attributes to the user's account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function.\r\n\r\nIf you enable this policy setting and the user has redirected folders, such as the Documents and Pictures folders, the folders are redirected on the user's primary computer only.\r\n\r\nIf you disable or do not configure this policy setting and the user has redirected folders, the folders are redirected on every computer that the user logs on to.\r\n\r\nNote: If you enable this policy setting in Computer Configuration and User Configuration, the Computer Configuration policy setting takes precedence.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-primarycomputer-fr-2"],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_2_1","displayName":"Enabled","description":null,"helpText":null}]},"cb3e71ecba453fb0":{"id":"device_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_2","displayName":"Turn off the Windows Messenger Customer Experience Improvement Program","description":"This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.\r\n\r\nWith the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used. This information is used to improve the product in future releases.\r\n\r\nIf you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown.\r\n\r\nIf you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown.\r\n\r\nIf you do not configure this policy setting, users have the choice to opt in and allow information to be collected.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-winmsg-noinstrumentation-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_2_1","displayName":"Enabled","description":null,"helpText":null}]},"cbaa95a0a6bd6340":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disablerealtimemonitoring","displayName":"Turn off real-time protection","description":"This policy setting turns off real-time protection prompts for known malware detection.\r\n\r\n Microsoft Defender Antivirus alerts you when malware or potentially unwanted software attempts to install itself or to run on your computer.\r\n\r\n If you enable this policy setting, Microsoft Defender Antivirus will not prompt users to take actions on malware detections.\r\n\r\n If you disable or do not configure this policy setting, Microsoft Defender Antivirus will prompt users to take actions on malware detections.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-disablerealtimemonitoring"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disablerealtimemonitoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_disablerealtimemonitoring_1","displayName":"Enabled","description":null,"helpText":null}]},"cb480318251f29c3":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_protectedfolders_exploitguard_controlledfolderaccess_protectedfolders","displayName":"Enter the folders that should be guarded:","description":null,"helpText":"","infoUrls":[],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":null},"cb75dc3dbd93fd7b":{"id":"device_vendor_msft_policy_config_admx_msi_disableautomaticapplicationshutdown","displayName":"Prohibit use of Restart Manager","description":"This policy setting controls Windows Installer's interaction with the Restart Manager. The Restart Manager API can eliminate or reduce the number of system restarts that are required to complete an installation or update.\r\n\r\nIf you enable this policy setting, you can use the options in the Prohibit Use of Restart Manager box to control file in use detection behavior.\r\n\r\n-- The \"Restart Manager On\" option instructs Windows Installer to use Restart Manager to detect files in use and mitigate a system restart, when possible.\r\n\r\n-- The \"Restart Manager Off\" option turns off Restart Manager for file in use detection and the legacy file in use behavior is used.\r\n\r\n-- The \"Restart Manager Off for Legacy App Setup\" option applies to packages that were created for Windows Installer versions lesser than 4.0. This option lets those packages display the legacy files in use UI while still using Restart Manager for detection.\r\n\r\nIf you disable or do not configure this policy setting, Windows Installer will use Restart Manager to detect files in use and mitigate a system restart, when possible.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disableautomaticapplicationshutdown"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_disableautomaticapplicationshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_disableautomaticapplicationshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},"cbb5d72316da5645":{"id":"device_vendor_msft_policy_config_admx_nca_dtes","displayName":"IPsec Tunnel Endpoints","description":"Specifies the IPv6 addresses of the endpoints of the Internet Protocol security (IPsec) tunnels that enable DirectAccess. NCA attempts to access the resources that are specified in the Corporate Resources setting through these configured tunnel endpoints. \r\n\r\nBy default, NCA uses the same DirectAccess server that the DirectAccess client computer connection is using. In default configurations of DirectAccess, there are typically two IPsec tunnel endpoints: one for the infrastructure tunnel and one for the intranet tunnel. You should configure one endpoint for each tunnel. \r\n\t \r\nEach entry consists of the text PING: followed by the IPv6 address of an IPsec tunnel endpoint. Example: PING:2002:836b:1::836b:1.\r\n\r\nYou must configure this setting to have complete NCA functionality.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-dtes"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_dtes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_dtes_1","displayName":"Enabled","description":null,"helpText":null}]},"cb653f0d48c55d10":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_passwordsecurity","displayName":"Turn off password security in Input Panel","description":null,"helpText":"","infoUrls":[],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_passwordsecurity_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_passwordsecurity_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_passwordsecurity_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_passwordsecurity_4","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_2_passwordsecurity_5","displayName":"High","description":null,"helpText":null}]},"cb9b243dd5ae4246":{"id":"device_vendor_msft_policy_config_appruntime_allowmicrosoftaccountstobeoptional","displayName":"Allow Microsoft accounts to be optional","description":"This policy setting lets you control whether Microsoft accounts are optional for packaged Microsoft Store apps that require an account to sign in. This policy only affects packaged Microsoft Store apps that support it.\n\nIf you enable this policy setting, packaged Microsoft Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead.\n\nIf you disable or do not configure this policy setting, users will need to sign in with a Microsoft account.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-appruntime#appruntime-allowmicrosoftaccountstobeoptional"],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":[{"id":"device_vendor_msft_policy_config_appruntime_allowmicrosoftaccountstobeoptional_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appruntime_allowmicrosoftaccountstobeoptional_1","displayName":"Enabled","description":null,"helpText":null}]},"cb4a185105c3e49e":{"id":"device_vendor_msft_policy_config_browser_allowtabpreloading","displayName":"Allow Tab Preloading","description":"Prevent Microsoft Edge from starting and loading the Start and New Tab page at Windows startup and each time Microsoft Edge is closed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowtabpreloading"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowtabpreloading_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowtabpreloading_1","displayName":"Allow","description":"Allowed. Preload Start and New tab pages.","helpText":null}]},"cbeea55439d957c5":{"id":"device_vendor_msft_policy_config_browser_configurekioskmode","displayName":"Configure Kiosk Mode","description":"Configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access, either as a single app or as one of multiple apps running on the kiosk device. You can control whether Microsoft Edge runs InPrivate full screen, InPrivate multi-tab with limited functionality, or normal Microsoft Edge. You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, these settings are ignored. To learn more about assigned access and kiosk configuration, see “Configure kiosk and shared devices running Windows desktop editions” (https://aka.ms/E489vw). If enabled and set to 0 (Default or not configured): - If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays. - If it’s one of many apps, Microsoft Edge runs as normal. If enabled and set to 1: - If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. - If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurekioskmode"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_configurekioskmode_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configurekioskmode_0","displayName":"Disable","description":"Disable","helpText":null}]},"cb1bea77e210521e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended","displayName":"Parameter providing search-by-image feature for the default search provider","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURL specifies the URL of the search engine used for image search. (If DefaultSearchProviderImageURLPostParams is set, then image search requests use the POST method instead.)\r\n\r\nLeaving DefaultSearchProviderImageURL unset means no image search is used.\r\n\r\nExample value: https://search.my.company/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cb47bf512f070684":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback.","description":"Following each major version update, Chrome will create a snapshot of certain portions of the user's browsing data for use in case of a later emergency version rollback. If an emergency rollback is performed to a version for which a user has a corresponding snapshot, the data in the snapshot is restored. This allows users to retain such settings as bookmarks and autofill data.\r\n\r\nIf this policy is not set, the default value of 3 is used\r\n\r\nIf the policy is set, old snapshots are deleted as needed to respect the limit. If the policy is set to 0, no snapshots will be taken","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"cb6a6f6b00dd0850":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_enabled","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_disabled","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null}]},"cb47ecea631692fd":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth","displayName":"Set Business Hours to Limit Foreground Download Bandwidth","description":"Specifies the maximum foreground download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deliveryoptimization#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_1","displayName":"Enabled","description":null,"helpText":null}]},"cba65f76c3d0295a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl","displayName":"Profile Directory SDDL","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSDDL string representing the ACLs to use when creating the profile directory.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ProfileDirSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_1","displayName":"Enabled","description":null,"helpText":null}]},"cb7cee7e659c8d44":{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck","displayName":"Turn off the Security Settings Check feature","description":"This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Explorer at risk.\n\nIf you enable this policy setting, the feature is turned off.\n\nIf you disable or do not configure this policy setting, the feature is turned on.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesecuritysettingscheck"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_1","displayName":"Enabled","description":null,"helpText":null}]},"cbd66c36add43cf3":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"cb49688b4e2c2caa":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended","displayName":"Enable favorites bar","description":"Enables or disables the favorites bar.\r\n\r\nIf you enable this policy, users will see the favorites bar.\r\n\r\nIf you disable this policy, users won't see the favorites bar.\r\n\r\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cb26312d9471f842":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting","displayName":"Default geolocation setting","description":"Set whether websites can track users' physical locations. You can allow tracking by default (1), deny it by default (2), or ask the user each time a website requests their location (3).\r\n\r\nIf you don't configure this policy, 'AskGeolocation' policy is used and the user can change it.\r\n\r\n* 1 = Allow sites to track users' physical location\r\n\r\n* 2 = Don't allow any site to track users' physical location\r\n\r\n* 3 = Ask whenever a site wants to track users' physical location","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"cb6e0553d0ea5aa2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_authnegotiatedelegateallowlist","displayName":"Specifies a list of servers that Microsoft Edge can delegate user credentials to (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":null},"cbf153204615ecd6":{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_4","displayName":"Block malicious downloads","description":null,"helpText":null}]},"cb223167164c06f8":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist","displayName":"Block access to a specified list of services and export targets in Collections","description":"List specific services and export targets that users can't access in the Collections feature in Microsoft Edge. This includes displaying additional data from Bing and exporting collections to Microsoft products or external partners.\r\n\r\nIf you enable this policy, services and export targets that match the given list are blocked.\r\n\r\nIf you don't configure this policy, no restrictions on the acceptable services and export targets are enforced.\r\n\r\nPolicy options mapping:\r\n\r\n* pinterest_suggestions (pinterest_suggestions) = Pinterest suggestions\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\npinterest_suggestions","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"cb9857f5c6a66b44":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winprojexe146","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winprojexe146_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winprojexe146_1","displayName":"True","description":null,"helpText":null}]},"cb6395e34e34468d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_powerpntexe171","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_powerpntexe171_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_powerpntexe171_1","displayName":"True","description":null,"helpText":null}]},"cbe58cc8dc76dc0b":{"id":"device_vendor_msft_policy_config_printers_configurerpcauthnlevelprivacyenabled","displayName":"Configure RPC packet level privacy setting for incoming connections","description":"\nThis policy setting controls whether packet level privacy is enabled for RPC for incoming connections.\n\nBy default packet level privacy is enabled for RPC for incoming connections.\n\nIf you enable or do not configure this policy setting, packet level privacy is enabled for RPC for incoming connections.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpcauthnlevelprivacyenabled"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcauthnlevelprivacyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcauthnlevelprivacyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cbb39c48c7371ed8":{"id":"device_vendor_msft_policy_config_start_hideusertile","displayName":"Hide User Tile","description":"Enabling this policy hides the user tile from appearing in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideusertile"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hideusertile_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideusertile_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"cb36b389fac2d927":{"id":"device_vendor_msft_policy_config_windowssandbox_allowvgpu","displayName":"Allow VGPU","description":"Allow vGPU sharing for Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowvgpu"],"categoryId":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","categoryName":"Windows Sandbox","options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowvgpu_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowvgpu_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"cb979f6eea8adaab":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filepath","displayName":"File path","description":null,"helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"cb10216383b06b49":{"id":"safari_acceptcookies","displayName":"Accept Cookies","description":"The policy Safari uses for managing cookies:\n\n- `Never`: Safari always blocks cookies.\n- `CurrentWebsite`: Safari allows cookies only from the current website.\n- `VisitedWebsites`: Safari allows cookies only from visited websites.\n- `Always`: Safari always allows cookies.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_acceptcookies_0","displayName":"Never","description":null,"helpText":null},{"id":"safari_acceptcookies_1","displayName":"CurrentWebsite","description":null,"helpText":null},{"id":"safari_acceptcookies_2","displayName":"VisitedWebsites","description":null,"helpText":null},{"id":"safari_acceptcookies_3","displayName":"Always","description":null,"helpText":null}]},"cba4dabd0a236f0f":{"id":"user_vendor_msft_policy_config_admx_startmenu_disableglobalsearchonappsview","displayName":"Search just apps from the Apps view (User)","description":"This policy setting prevents the user from searching apps, files, settings (and the web if enabled) when the user searches from the Apps view.\r\n\r\nThis policy setting is only applied when the Apps view is set as the default view for Start.\r\n\r\nIf you enable this policy setting, searching from the Apps view will only search the list of installed apps.\r\n\r\nIf you disable or don’t configure this policy setting, the user can configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-disableglobalsearchonappsview"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_disableglobalsearchonappsview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_disableglobalsearchonappsview_1","displayName":"Enabled","description":null,"helpText":null}]},"cb7eac4ba5d9b91a":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library1","displayName":"Location 2 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"cba0c2e9d8cdc73e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_quicallowed","displayName":"Allow QUIC protocol (User)","description":"Setting the policy to Enabled or leaving it unset allows the use of QUIC protocol in Google Chrome.\r\n\r\nSetting the policy to Disabled disallows the use of QUIC protocol.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_quicallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_quicallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"cbdc10d64dee3a7e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURLPostParams specifies the parameters when searching a URL with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSearchURLPostParams unset means search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"cb686a65b08c0a31":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist","displayName":"Configure the required domain names for remote access clients (User)","description":"Setting the policy specifies the client domain names that are imposed on remote access clients, and users can't change them. Only clients from one of the specified domains can connect to the host.\r\n\r\nSetting the policy to an empty list or leaving it unset applies the default policy for the connection type. For remote assistance, this allows clients from any domain to connect to the host. For anytime remote access, only the host owner can connect.\r\n\r\nSee also RemoteAccessHostDomainList.\r\n\r\nNote: This setting overrides RemoteAccessHostClientDomain, if present.\r\n\r\nExample value:\r\n\r\nmy-awesome-domain.com\r\nmy-auxiliary-domain.com","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"cbf3a8ed78b49a0e":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled","displayName":"Allow the shopping list feature to be enabled (User)","description":"This policy controls the availability of the shopping list feature.\r\nIf enabled, users will be presented with UI to track the price of the product displayed on the current page. The tracked product will be shown in the bookmarks side panel.\r\nIf this policy is set to Enabled or not set, the shopping list feature will be available to users.\r\nIf this policy is set to Disabled, the shopping list feature will be unavailable.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cb92f18bf8bd700f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement","displayName":"Cursor movement (User)","description":"Determines how the insertion point moves through bi-directional text. Possible values are Logical or Visual and the default is Logical.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_1","displayName":"Enabled","description":null,"helpText":null}]},"cb047b0173294f04":{"id":"user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions","displayName":"Select SmartScreen Filter mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_0","displayName":"Off","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_1","displayName":"On","description":null,"helpText":null}]},"cbec1d13b0099abc":{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility","displayName":"Configure whether the Discover or Work feed tabs are shown on the New Tab Page. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility_0","displayName":"Enable both Work and Discover tabs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility_1","displayName":"Enable only Work tab","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility_2","displayName":"Enable only Discover tab","description":null,"helpText":null}]},"cb5d8a8043ad1d14":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"cb751efda3612967":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions","displayName":"Blocks external extensions from being installed (User)","description":"Control the installation of external extensions.\r\n\r\nIf you enable this setting, external extensions are blocked from being installed.\r\n\r\nIf you disable this setting or leave it unset, external extensions are allowed to be installed.\r\n\r\nExternal extensions and their installation are documented at [Alternate extension distribution methods](/microsoft-edge/extensions-chromium/developer-guide/alternate-distribution-options).","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"cb507cece7518117":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiproject","displayName":"Disallow in Project (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiproject_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiproject_1","displayName":"True","description":null,"helpText":null}]},"cb2aa65497611cbd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey11","displayName":"Escrow Key #11 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey11_1","displayName":"Enabled","description":null,"helpText":null}]},"cb80a7f9dd5d482d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultfilesharecatalog_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"cbe212a0fa6a2112":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize37_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"ee62e9fc-14c8-4f24-aa7e-89524087a802","categoryName":"Customizable Error Messages","options":null},"cb9b273acc5dc264":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_calendarfolderhomepage_l_urladdressofassociatedwebpage43","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"cb439a51ad5b4487":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_managingcategoriesduringe_mailexchanges_l_acceptcategoriesassignedtoincomingmailbythesender","displayName":"Accept Categories assigned to incoming mail by the sender (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_managingcategoriesduringe_mailexchanges_l_acceptcategoriesassignedtoincomingmailbythesender_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_managingcategoriesduringe_mailexchanges_l_acceptcategoriesassignedtoincomingmailbythesender_1","displayName":"True","description":null,"helpText":null}]},"cb9622bd66efc3cf":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_plaintextoptions_l_automaticallywraptextatxcharacters","displayName":"Automatically wrap text at characters. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","categoryName":"Internet Formatting","options":null},"cba6fea0a716616c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydefaultlocationofdesktopalert","displayName":"Specify default location of Desktop Alert (User)","description":"You can change the default location of the Desktop Alert. In the Corner field, select a number corresponding to a quadrant of the user's screen: 0 = upper left, 1 = upper right, 2 = lower left, 3 = lower right (the default). In the XOffset field, enter a number representing the horizontal distance from the corner you've specified (the default is 44). In the YOffset field, enter a number representing the vertical distance from the corner you've specified (the default is 42).","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydefaultlocationofdesktopalert_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifydefaultlocationofdesktopalert_1","displayName":"Enabled","description":null,"helpText":null}]},"cb3cc585c1e2bf26":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjsaveinterval","displayName":"Save Interval (User)","description":"Specifies how often Project should automatically save your projects. This setting is only used by Project if Auto Save has been turned on.\r\n\r\nIf you enable this setting, Project will save users projects at the specified interval.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dfd5d749-c68c-448f-ab3f-851c09f09df4","categoryName":"Auto Save Options","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjsaveinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjautosave_l_pjsaveinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"cb6b9161166cb2e0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjprojectscreentips","displayName":"Project Screentips (User)","description":"Displays tips for Gantt bars and field headings, including dates for timescale units, and the full cell contents if a cell is too narrow to completely display the text in sheet and Network Diagram views.\r\n\r\nIf you enable this setting, tips are displayed fro Gantt bars and field headings.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"251c6873-bf5b-4d85-8185-3c4973b6f33c","categoryName":"Show","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjprojectscreentips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_pjshow_l_pjprojectscreentips_1","displayName":"Enabled","description":null,"helpText":null}]},"cba7df6ec3c868f9":{"id":"user_vendor_msft_policy_config_teamsv3~policy~l_teams_string_teams_signinrestriction_policy","displayName":"Restrict sign in to Teams to accounts in specific tenants (User)","description":"This policy setting allows you to control the accounts that can be used in Teams on managed devices running Windows. \r\n\r\nIf you enable this policy setting, users will only be allowed to sign in with accounts from Azure Active Directory (Azure AD) tenants that you specify. You can enter a comma separated list of tenant IDs. \r\n \r\nThe policy setting applies to all ways that the user signs in, including first and additional accounts on versions of Teams that support multiple accounts side by side. \r\n\r\nThe policy setting is also enforced when users sign out and sign back in. \r\n\r\nIf you disable or don't configure this policy setting, Teams will continue to allow users to sign in with work or school accounts, or personal Microsoft accounts. \r\n\r\nImportant: This policy setting only restricts which users can sign in. It does not restrict the ability for users to be invited as a guest in other Azure AD tenants, or switch to tenants they were invited to.\r\n\r\nNote: This policy does not apply to Teams web app.","helpText":"","infoUrls":[],"categoryId":"501b5a30-253c-48b7-ab40-de1d100e4358","categoryName":"Microsoft Teams","options":[{"id":"user_vendor_msft_policy_config_teamsv3~policy~l_teams_string_teams_signinrestriction_policy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_teamsv3~policy~l_teams_string_teams_signinrestriction_policy_1","displayName":"Enabled","description":null,"helpText":null}]},"cb98d474a25753e2":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc03_l_descriptioncolon18","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"cb70b46275f86a11":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc05_l_datecolon25","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"cb9e4209f0df9952":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_horizontalscrollbar","displayName":"Show horizontal scroll bar (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_horizontalscrollbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_horizontalscrollbar_1","displayName":"Enabled","description":null,"helpText":null}]},"cb321aae55935ad6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_objectanchors","displayName":"Object anchors (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_objectanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_objectanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"cb62a499c3d18cdb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowdde_l_allowddedropid","displayName":"Dynamic Data Exchange setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowdde_l_allowddedropid_1","displayName":"Limited Dynamic Data Exchange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowdde_l_allowddedropid_2","displayName":"Allow Dynamic Data Exchange","description":null,"helpText":null}]},"cb33a99fc9a683b7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]},"cb0d0ffc17eccf2a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1","displayName":"Color for inserted cells: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_1","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_0","displayName":"By Author","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_2","displayName":"Pink","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_3","displayName":"Light blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_4","displayName":"Light yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_5","displayName":"Light purple","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_6","displayName":"Light Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_7","displayName":"Light green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart1_8","displayName":"Gray","description":null,"helpText":null}]},"cb8ec33758893956":{"id":"vendor_msft_sharedpc_maxpagefilesizemb","displayName":"Max Page File Size MB","description":"Maximum size of the paging file in MB. Applies only to systems with less than 32 GB storage and at least 3 GB of RAM. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/SharedPC-csp/"],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/cc.json b/public/intune-definitions/cc.json new file mode 100644 index 000000000000..529ae17a0560 --- /dev/null +++ b/public/intune-definitions/cc.json @@ -0,0 +1 @@ +{"cc5a13e32608fd47":{"id":"com.android.devicerestrictionpolicy.cellulartwogblocked","displayName":"Block cellular 2G","description":"If 'True', the device prevents cellular 2G functionality, restricting user access to the setting. If 'False', Intune doesn't change or update this setting. By default, the OS follows the default cellular 2G behavior. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.cellulartwogblocked_false","displayName":"False","description":"The user is allowed to toggle cellular 2G on or off.","helpText":null},{"id":"com.android.devicerestrictionpolicy.cellulartwogblocked_true","displayName":"True","description":"Cellular 2G is disabled. The user is not allowed to toggle cellular 2G on or off.","helpText":null}]},"cc5f06aff6890c8c":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver","displayName":"Manifest Server","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"cc3edcccbbe459de":{"id":"com.apple.managedclient.preferences_diskcachedir","displayName":"Set disk cache directory","description":"Configures the directory to use to store cached files.\n\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified the '--disk-cache-dir' flag. To avoid data loss or other unexpected errors, don't configure this policy to a volume's root directory or to a directory used for other purposes, because Microsoft Edge manages its contents.\n\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables you can use when specifying directories and paths.\n\nIf you don't configure this policy, the default cache directory is used, and users can override that default with the '--disk-cache-dir' command line flag.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#diskcachedir"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"cc756935daa651be":{"id":"com.apple.managedclient.preferences_edgeshoppingassistantenabled","displayName":"Shopping in Microsoft Edge Enabled","description":"This policy lets users compare the prices of a product they are looking at, get coupons from the website they're on, or auto-apply coupons during checkout.\n\nIf you enable or don't configure this policy, shopping features such as price comparison and coupons will be automatically applied for retail domains. Coupons for the current retailer and prices from other retailers will be fetched from a server.\n\nIf you disable this policy shopping features such as price comparison and coupons will not be automatically found for retail domains.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeshoppingassistantenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeshoppingassistantenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeshoppingassistantenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"cce340cda92cd656":{"id":"com.apple.managedclient.preferences_enablesetwarntoblock","displayName":"Enable set warn to block","description":"Converts warn determinations into blocks","helpText":null,"infoUrls":[],"categoryId":"269c487f-8902-486a-88dd-db9b9b4454b8","categoryName":"Network protection","options":[{"id":"com.apple.managedclient.preferences_enablesetwarntoblock_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enablesetwarntoblock_true","displayName":"Enabled","description":null,"helpText":null}]},"cc8f13ab244bf81d":{"id":"com.apple.security.fderecoverykeyescrow_location","displayName":"Location","description":"The description of the location where the recovery key will be escrowed. This text will be inserted into the message the user sees when enabling FileVault.","helpText":null,"infoUrls":[],"categoryId":"bd5533e1-f1ee-4994-8a79-cffe02b12d5c","categoryName":"FileVault Recovery Key Escrow","options":null},"cc80450c44227728":{"id":"com.apple.systemconfiguration_proxies_proxycaptiveloginallowed","displayName":"Proxy Captive Login Allowed","description":"If true, allows client to log into captive portal network.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_proxycaptiveloginallowed_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_proxycaptiveloginallowed_1","displayName":"True","description":null,"helpText":null}]},"cc2ee3abd6c20f3c":{"id":"com.apple.webcontent-filter_safarihistoryretentionenabled","displayName":"Safari History Retention Enabled","description":"If `true`, this payload enforces a policy which requires retention of browsing history. This causes Safari to disable clearing of browsing history, and prevents the use of private browsing mode because that mode doesn't keep browsing history.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_safarihistoryretentionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_safarihistoryretentionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"cc4180221ea09a8b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionstemporaryoptout","displayName":"Specifies whether to opt out of Local Network Access restrictions","description":"This policy allows for opting out of restrictions on requests to local network endpoints.\n\nIf you enable this policy, Local Network Access requests will only display warnings in Edge DevTools when Local Network Access checks fail.\n\nIf you disable or don't configure this policy, Local Network Access requests follow the default handling behavior.\n\nFor more information about Local Network Access restrictions, see Local Network Access.\n\nTo allow specific URL patterns that should automatically be granted Local Network Access permission, use the LocalNetworkAccessAllowedForUrls policy.\n\nNote: This opt-out policy is temporary and will be removed after Microsoft Edge version 152.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionstemporaryoptout_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionstemporaryoptout_true","displayName":"Enabled","description":null,"helpText":null}]},"ccc213d72f74ad3a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.onfileattachedenterpriseconnector","displayName":"Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a file is attached to Microsoft Edge.\n\nConnector Fields\n\n1. url_list,\ntags,\nenable,\ndisable\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\nAnalysis is triggered if at least one tag is included in the request.\n\n2. service_provider\nIdentifies the analysis service provider the configuration applies to.\n\n3. block_until_verdict\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\nAny other integer value allows the page to access the data immediately.\n\n4. default_action\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\nAny other value permits the page to access the data.\n\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"ccc2ae0e7851beb1":{"id":"device_vendor_msft_policy_config_admx_credssp_denysavedcredentials_denysavedcredentials_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"cc119b7912d59139":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_werqueuebehavior","displayName":"Queuing behavior:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_werqueuebehavior_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_werqueuebehavior_1","displayName":"Always queue","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_werqueuebehavior_2","displayName":"Always queue for administrator","description":null,"helpText":null}]},"cc849442c43fad31":{"id":"device_vendor_msft_policy_config_admx_printing_printerserverthread","displayName":"Printer browsing","description":"Announces the presence of shared printers to print browse master servers for the domain.\r\n\r\nOn domains with Active Directory, shared printer resources are available in Active Directory and are not announced.\r\n\r\nIf you enable this setting, the print spooler announces shared printers to the print browse master servers.\r\n\r\nIf you disable this setting, shared printers are not announced to print browse master servers, even if Active Directory is not available.\r\n\r\nIf you do not configure this setting, shared printers are announced to browse master servers only when Active Directory is not available.\r\n\r\nNote: A client license is used each time a client computer announces a printer to a print browse master on the domain.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-printerserverthread"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_printerserverthread_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_printerserverthread_1","displayName":"Enabled","description":null,"helpText":null}]},"cc7cbfceb82e3350":{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_traps_public","displayName":"Specify traps for public community","description":"This policy setting allows trap configuration for the Simple Network Management Protocol (SNMP) agent.\r\n\r\nSimple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events.\r\n\r\nThis policy setting allows you to configure the name of the hosts that receive trap messages for the community sent by the SNMP service. A trap message is an alert or significant event that allows the SNMP agent to notify management systems asynchronously.\r\n\r\nIf you enable this policy setting, the SNMP service sends trap messages to the hosts within the \"public\" community.\r\n\r\nIf you disable or do not configure this policy setting, the SNMP service takes the trap configuration configured on the local computer instead.\r\n\r\nNote: This setting has no effect if the SNMP agent is not installed on the client computer.\r\n\r\nAlso, see the other two SNMP settings: \"Specify permitted managers\" and \"Specify Community Name\".\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-snmp#admx-snmp-snmp-traps-public"],"categoryId":"930d2960-3f70-48ca-9ead-b65a5a037c07","categoryName":"SNMP","options":[{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_traps_public_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_traps_public_1","displayName":"Enabled","description":null,"helpText":null}]},"ccd549d8f36e7dae":{"id":"device_vendor_msft_policy_config_admx_tcpip_isatap_router_name_routernamebox","displayName":"Enter a router or relay name:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":null},"cc8e16e9306a70db":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowscamera","displayName":"Windows Camera ** (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowscamera_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowscamera_1","displayName":"True","description":null,"helpText":null}]},"ccb611d3159c455b":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxidentityprovider","displayName":"Xbox Identity Provider *","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxidentityprovider_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxidentityprovider_1","displayName":"True","description":null,"helpText":null}]},"cc82fd6be8030349":{"id":"device_vendor_msft_policy_config_appvirtualization_allowroamingregistryexclusions","displayName":"Roaming Registry Exclusions","description":"Specifies the registry paths that do not roam with a user profile. Example usage: /REGISTRYEXCLUSIONLIST=software\\classes;software\\clients.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowroamingregistryexclusions"],"categoryId":"ea9a092f-dd93-41d4-9bbb-118de1213578","categoryName":"Integration","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowroamingregistryexclusions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowroamingregistryexclusions_1","displayName":"Enabled","description":null,"helpText":null}]},"cc2fae7d872f9abd":{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicechanges","displayName":"Audit Directory Service Changes","description":"This policy setting allows you to audit events generated by changes to objects in Active Directory Domain Services (AD DS). Events are logged when an object is created, deleted, modified, moved, or undeleted. When possible, events logged in this subcategory indicate the old and new values of the object’s properties. Events in this subcategory are logged only on domain controllers, and only objects in AD DS with a matching system access control list (SACL) are logged. Note: Actions on some objects and properties do not cause audit events to be generated due to settings on the object class in the schema. If you configure this policy setting, an audit event is generated when an attempt to change an object in AD DS is made. Success audits record successful attempts, however unsuccessful attempts are NOT recorded. If you do not configure this policy setting, no audit event is generated when an attempt to change an object in AD DS object is made.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#dsaccess_auditdirectoryservicechanges"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicechanges_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicechanges_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicechanges_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdirectoryservicechanges_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"ccadbebfdad8a8a4":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcentralaccesspolicystaging","displayName":"Object Access Audit Central Access Policy Staging","description":"This policy setting allows you to audit access requests where the permission granted or denied by a proposed policy differs from the current central access policy on an object. If you configure this policy setting, an audit event is generated each time a user accesses an object and the permission granted by the current central access policy on the object differs from that granted by the proposed policy. The resulting audit event will be generated as follows: 1) Success audits, when configured, records access attempts when the current central access policy grants access but the proposed policy denies access. 2) Failure audits when configured records access attempts when: a) The current central access policy does not grant access but the proposed policy grants access. b) A principal requests the maximum access rights they are allowed and the access rights granted by the current central access policy are different than the access rights granted by the proposed policy. Volume: Potentially high on a file server when the proposed policy differs significantly from the current central access policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditcentralaccesspolicystaging"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcentralaccesspolicystaging_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcentralaccesspolicystaging_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcentralaccesspolicystaging_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditcentralaccesspolicystaging_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"cc84b76faa781978":{"id":"device_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics","displayName":"Configure Telemetry For Microsoft 365 Analytics","description":"Configures what browsing data will be sent to Microsoft 365 Analytics for devices belonging to an organization.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configuretelemetryformicrosoft365analytics"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_0","displayName":"No data collected or sent","description":"No data collected or sent","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_1","displayName":"Send intranet history only","description":"Send intranet history only","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_2","displayName":"Send Internet history only","description":"Send Internet history only","helpText":null},{"id":"device_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_3","displayName":"Send both intranet and Internet history","description":"Send both intranet and Internet history","helpText":null}]},"cc8a38d67021b96c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended","displayName":"Configure the home page URL","description":"Setting the policy sets the default homepage URL in Google Chrome. You open the homepage using the Home button. On desktop, the RestoreOnStartup policies control the pages that open on startup.\r\n\r\nIf the homepage is set to the New Tab Page, by the user or HomepageIsNewTabPage, this policy has no effect.\r\n\r\n The URL needs a standard scheme, such as http://example.com or https://example.com. When this policy is set, users can't change their homepage URL in Google Chrome.\r\n\r\nLeaving both HomepageLocation and HomepageIsNewTabPage unset lets users choose their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cc4c195dff8d9bee":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies","displayName":"Policy overrides for Debug builds of the remote access host","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"ccf9d74cf2b5b628":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"cc2cdc7d916f75b6":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers","displayName":"Block Webshell creation for Servers","description":"This rule block webshell creation for servers.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_warn","displayName":"Warn","description":null,"helpText":null}]},"cc1a74534700dd4c":{"id":"device_vendor_msft_policy_config_deliveryoptimization_doabsolutemaxcachesize","displayName":"DO Absolute Max Cache Size","description":"Specifies the maximum size in GB of Delivery Optimization cache. This policy overrides the MaxCacheSize policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#doabsolutemaxcachesize"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"cc2e8990ed7b78d1":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride","displayName":"Enable App Installer Local Archive Malware Scan Override","description":"This policy controls the ability to override malware vulnerability scans when installing an archive file using a local manifest using the command line arguments.\n\nIf you enable this policy, users can override the malware scan when performing a local manifest install of an archive file.\n\nIf you disable this policy, users will be unable to override the malware scan of an archive file when installing using a local manifest.\n\nIf you do not configure this policy, the Windows Package Manager administrator settings will be adhered to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablelocalarchivemalwarescanoverride"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride_1","displayName":"Enabled","description":null,"helpText":null}]},"cc7b76ba0d0617a2":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory","displayName":"Cache Directory","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the location of the local cache location.\r\n\r\nRegistry Entry: HKLM\\SYSTEM\\CurrentControlSet\\Services\\frxccd\\Parameters\\CacheDirectory\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"f2d139ed-a314-48b7-b700-4d11adfcc309","categoryName":"Cloud Cache Service","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_1","displayName":"Enabled","description":null,"helpText":null}]},"ccc51b45e05c3c1f":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_odfcnumbersessionvhdstokeep","displayName":"Number Session VHD(s) To Keep (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"ccbe0419ea136811":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowuserdatapersistence"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"cc374ffc36376e9b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled","displayName":"Set WPAD optimization","description":"Allows you to turn off WPAD (Web Proxy Auto-Discovery) optimization in Microsoft Edge.\r\n\r\nIf you disable this policy, WPAD optimization is disabled, which makes the browser wait longer for DNS-based WPAD servers.\r\n\r\nIf you enable or don't configure the policy, WPAD optimization is enabled.\r\n\r\nIndependent of whether or how this policy is enabled, the WPAD optimization setting cannot be changed by users.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cc7b8ebb712a4b2a":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains","displayName":"Allow specified sites to access file:// URLs in the PDF Viewer","description":"Controls which sites can access file:// URLs in the PDF Viewer.\r\n\r\nIf you enable this policy, sites in the list can access file:// URLs in the PDF Viewer.\r\n\r\nIf you disable or don't configure this policy, sites cannot access file:// URLs in the PDF Viewer.\r\n\r\nExample value:\r\n\r\nexample.com\r\ncontoso.com","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains_1","displayName":"Enabled","description":null,"helpText":null}]},"cc645ceb0caec2d3":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled","displayName":"Enable renderer code integrity (deprecated)","description":"If this policy is enabled or left unset, then Renderer Code Integrity is enabled. This policy should only be disabled if compatibility issues are encountered with third party software that must run inside Microsoft Edge's renderer processes.\r\n\r\nDisabling this policy has a detrimental effect on Microsoft Edge's security and stability because unknown and potentially hostile code will be allowed to load inside Microsoft Edge's renderer processes.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cc8c5e3c76deb5c1":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed","displayName":"Allow access to the Enterprise Mode Site List Manager tool","description":"Allows you to set whether Enterprise Mode Site List Manager is available to users.\r\n\r\nIf you enable this policy, users can see the Enterprise Mode Site List Manager nav button on edge://compat page, navigate to the tool and use it.\r\n\r\nIf you disable or don't configure this policy, users won't see the Enterprise Mode Site List Manager nav button and won't be able to use it.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"cceccaf0656394d6":{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy","displayName":"Configure RPC connection settings","description":"\nThis policy setting controls which protocol and protocol settings to use for outgoing RPC connections to a remote print spooler.\n\nBy default, RPC over TCP is used and authentication is always enabled. For RPC over named pipes, authentication is always enabled for domain joined machines but disabled for non domain joined machines.\n\nProtocol to use for outgoing RPC connections:\n -- \"RPC over TCP\": Use RPC over TCP for outgoing RPC connections to a remote print spooler\n -- \"RPC over named pipes\": Use RPC over named pipes for outgoing RPC connections to a remote print spooler\n\nUse authentication for outgoing RPC over named pipes connections:\n -- \"Default\": By default domain joined computers enable RPC authentication for RPC over named pipes while non domain joined computers disable RPC authentication for RPC over named pipes\n -- \"Authentication enabled\": RPC authentication will be used for outgoing RPC over named pipes connections\n -- \"Authentication disabled\": RPC authentication will not be used for outgoing RPC over named pipes connections\n\nIf you disable or do not configure this policy setting, the above defaults will be used.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpcconnectionpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"cc5a3bddb8ece502":{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport_rpctcpport","displayName":"RPC over TCP port:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"cc780378b109e720":{"id":"device_vendor_msft_policy_config_search_allowfindmyfiles","displayName":"Allow Find My Files","description":"This feature allows you to disable find my files completely on the machine","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowfindmyfiles"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_allowfindmyfiles_1","displayName":"Find My Files feature can be toggled (still off by default), and the settings UI is present.","description":"Find My Files feature can be toggled (still off by default), and the settings UI is present.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowfindmyfiles_0","displayName":"Find My Files feature is turned off completely, and the settings UI is disabled.","description":"Find My Files feature is turned off completely, and the settings UI is disabled.","helpText":null}]},"cc07a23d73e792a4":{"id":"device_vendor_msft_policy_config_system_allowupdatecomplianceprocessing","displayName":"Allow Update Compliance Processing","description":"Allows IT admins to enable diagnostic data from this device to be processed by Update Compliance. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Update Compliance. 16 – Diagnostic data is allowed to be processed by Update Compliance. If you disable or do not configure this policy setting, diagnostic data from this device will not be processed by Update Compliance.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowupdatecomplianceprocessing"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowupdatecomplianceprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowupdatecomplianceprocessing_16","displayName":"Enabled","description":"Enabled","helpText":null}]},"cca0a0c8c154311f":{"id":"device_vendor_msft_policy_config_system_allowwufbcloudprocessing","displayName":"Allow WUfB Cloud Processing","description":"Allows IT admins to enable diagnostic data from this device to be processed by Windows Update for Business cloud. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Windows Update for Business cloud.. 8 – Diagnostic data is allowed to be processed by Windows Update for Business cloud.. If you disable or do not configure this policy setting, diagnostic data from this device will not be processed by Windows Update for Business cloud.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowwufbcloudprocessing"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowwufbcloudprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowwufbcloudprocessing_8","displayName":"Enabled","description":"Enabled","helpText":null}]},"cca441a369cde9c0":{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability","displayName":"Touch Keyboard Emoji Button Availability","description":"Specifies whether the emoji button is enabled or disabled for the touch keyboard. When this policy is set to disabled, the emoji button on touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardemojibuttonavailability"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability_1","displayName":"Emoji button on keyboard is always available.","description":"Emoji button on keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability_2","displayName":"Emoji button on keyboard is always disabled.","description":"Emoji button on keyboard is always disabled.","helpText":null}]},"cc894c096e2a406e":{"id":"device_vendor_msft_scepcertificate_keyusage","displayName":"Key usage","description":"Specify the cryptographic action that is required to exchange the certificate’s public key.","helpText":"","infoUrls":[],"categoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","categoryName":"SCEP certificate","options":null},"cc10c47aa9a7a6ab":{"id":"user_vendor_msft_policy_config_admx_desktop_norecentdocsnethood","displayName":"Do not add shares of recently opened documents to Network Locations (User)","description":"Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.\r\n\r\nIf you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations.\r\n\r\nIf you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-norecentdocsnethood"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_norecentdocsnethood_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_norecentdocsnethood_1","displayName":"Enabled","description":null,"helpText":null}]},"cc716e63a603cd75":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certs","displayName":"Certificates (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certs"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certs_1","displayName":"Enabled","description":null,"helpText":null}]},"cc95340367d2ed2c":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysprop","displayName":"System Properties (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sysprop"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysprop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysprop_1","displayName":"Enabled","description":null,"helpText":null}]},"ccf1aaa7fdb7c150":{"id":"user_vendor_msft_policy_config_admx_printing_legacydefaultprintermode","displayName":"Turn off Windows default printer management (User)","description":"This preference allows you to change default printer management.\r\n\r\nIf you enable this setting, Windows will not manage the default printer.\r\n \r\nIf you disable this setting, Windows will manage the default printer.\r\n\r\nIf you do not configure this setting, default printer management will not change. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-legacydefaultprintermode"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_admx_printing_legacydefaultprintermode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_legacydefaultprintermode_1","displayName":"Enabled","description":null,"helpText":null}]},"cc032475c9d5a602":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_disablecmdscripts","displayName":"Disable the command prompt script processing also? (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_disablecmdscripts_1","displayName":"Yes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_disablecmdscripts_2","displayName":"No","description":null,"helpText":null}]},"cc93e4203d63a94e":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup","displayName":"Outlook 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Outlook 2013.\r\nMicrosoft Outlook 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Outlook 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Outlook 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013outlookbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"cc36387e4ef16c0f":{"id":"user_vendor_msft_policy_config_browser_sethomebuttonurl","displayName":"Set Home Button URL (User)","description":"The home button can be configured to load a custom URL when your user clicks the home button. If enabled, or configured, and the Configure Home Button policy is enabled, and the Show home button & set a specific page is selected, a custom URL loads when your user clicks the home button. Default setting: Blank or not configured Related policy: Configure Home Button","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#sethomebuttonurl"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"ccf675326a63c9c2":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"cc0e62e88f5964bf":{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enabledatabasefileprotectedview","displayName":"Always open untrusted database files in Protected View (User)","description":"This policy setting controls whether database files (.dbf) opened from an untrusted location are always opened in Protected View.\r\n\r\nIf you enable this policy setting, database files opened from an untrusted location are always opened in Protected View. Users will not be able to change this setting under File > Options > Trust Center > Trust Center Settings > Protected View.\r\n\r\nIf you disable or don’t configure this policy setting, database files opened from an untrusted location are not opened in Protected View, unless users have changed this setting in the Trust Center.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enabledatabasefileprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enabledatabasefileprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"cce5bbd1eb58f4ac":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate","displayName":"Locked-Down Restricted Sites Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownrestrictedsiteszonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"cc7b5197f5f822c1":{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate","displayName":"Trusted Sites Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowtrustedsiteszonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"cc505566c624d68b":{"id":"user_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync","displayName":"Turn off background synchronization for feeds and Web Slices (User)","description":"This policy setting controls whether to have background synchronization for feeds and Web Slices.\n\nIf you enable this policy setting, the ability to synchronize feeds and Web Slices in the background is turned off.\n\nIf you disable or do not configure this policy setting, the user can synchronize feeds and Web Slices in the background.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablefeedsbackgroundsync"],"categoryId":"9aaa7ee2-727d-426f-8a2b-6b10a4cd084f","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_1","displayName":"Enabled","description":null,"helpText":null}]},"cc6ca9129026a75c":{"id":"user_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode","displayName":"Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled (User)","description":"This policy setting prevents ActiveX controls from running in Protected Mode when Enhanced Protected Mode is enabled. When a user has an ActiveX control installed that is not compatible with Enhanced Protected Mode and a website attempts to load the control, Internet Explorer notifies the user and gives the option to run the website in regular Protected Mode. This policy setting disables this notification and forces all websites to run in Enhanced Protected Mode.\n\nEnhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system.\n\nWhen Enhanced Protected Mode is enabled, and a user encounters a website that attempts to load an ActiveX control that is not compatible with Enhanced Protected Mode, Internet Explorer notifies the user and gives the option to disable Enhanced Protected Mode for that particular website.\n\nIf you enable this policy setting, Internet Explorer will not give the user the option to disable Enhanced Protected Mode. All Protected Mode websites will run in Enhanced Protected Mode.\n\nIf you disable or do not configure this policy setting, Internet Explorer notifies users and provides an option to run websites with incompatible ActiveX controls in regular Protected Mode. This is the default behavior.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotallowactivexcontrolsinprotectedmode"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"cca2b6c0e37ce247":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"ccf8cec06aa1af1f":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszonejavapermissions"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"ccc1e806f7369d0e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability","displayName":"Control where developer tools can be used (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_0","displayName":"Block the developer tools on extensions installed by enterprise policy, allow in other contexts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_1","displayName":"Allow using the developer tools","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_2","displayName":"Don't allow using the developer tools","description":null,"helpText":null}]},"ccd9879a5ab38848":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"cc75ecc14dd0379e":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled","displayName":"Enable Hiding of Native Windows (User)","description":"Enables hiding of native windows in Microsoft Edge.\r\n\r\nIf you enable this setting, to reduce CPU and power consumption Microsoft Edge will detect when a window is covered by other windows, and will suspend work painting pixels.\r\n\r\nIf you disable this setting Microsoft Edge will not detect when a window is covered by other windows.\r\n\r\nIf this policy is left not set, window hiding detection will be enabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ccbe3c8e411e34bf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_onenote","displayName":"Microsoft OneNote (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_onenote_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_onenote_1","displayName":"True","description":null,"helpText":null}]},"ccf4b8d4515c3d81":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyaccess","displayName":"Disallow in Access (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyaccess_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyaccess_1","displayName":"True","description":null,"helpText":null}]},"cc198dfeefd8276b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchhaiti","displayName":"French (Haiti) (User)","description":"Enables the editing language French (Haiti)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchhaiti_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_frenchhaiti_1","displayName":"Enabled","description":null,"helpText":null}]},"cc7266cb22297ee5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"cc5e968a3672f1c9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc08_l_datecolon267","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"cc1c71f2047ef19e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc18","displayName":"Unsafe Location #18 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc18_1","displayName":"Enabled","description":null,"helpText":null}]},"cc0709871aefce1e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disablefolderhomepagesforfoldersinnondefaultstores","displayName":"Do not allow folders in non-default stores to be set as folder home pages (User)","description":"By default, creating folder home pages for folders in non-default stores is blocked; you cannot define a folder home page for a folder that is in a non-default store. This setting allows you to unblock folder home pages for folders in non-default stores. Note that other settings might still prevent folder home pages from functioning.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disablefolderhomepagesforfoldersinnondefaultstores_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_disablefolderhomepagesforfoldersinnondefaultstores_1","displayName":"Enabled","description":null,"helpText":null}]},"cccb46dc7fcbe674":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_enablemailloggingtroubleshooting","displayName":"Enable mail logging (troubleshooting) (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_enablemailloggingtroubleshooting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_enablemailloggingtroubleshooting_1","displayName":"Enabled","description":null,"helpText":null}]},"cc8973700a328a25":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview","displayName":"Do not open files from the Internet zone in Protected View (User)","description":"This policy setting allows you to determine if files downloaded from the Internet zone open in Protected View.\r\n\r\nIf you enable this policy setting, files downloaded from the Internet zone do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, files downloaded from the Internet zone open in Protected View.","helpText":"","infoUrls":[],"categoryId":"42ce9a9b-0574-4b5c-993b-7679de80be47","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"cc4b97b29b510465":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_pathcolon72","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"cc300cd1c8de79b9":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setmaximumnumberofmruitemstodisplay","displayName":"Number of publications in the Recent Publications list (User)","description":"This policy setting specifies the number of entries displayed in the Recent Publications list that appears when users click Open on the File tab in Backstage view. \r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent Publications list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Publications list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setmaximumnumberofmruitemstodisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_setmaximumnumberofmruitemstodisplay_1","displayName":"Enabled","description":null,"helpText":null}]},"ccf48366c39f8e5e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize98","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d5b3cab7-d486-4f74-8525-6bd740b950bc","categoryName":"Customizable Error Messages","options":null},"cc4cf2c35f2e5450":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_openeachshapesheetinthesamewindow","displayName":"Open each ShapeSheet in the same window (User)","description":"Opens multiple ShapeSheets in the same window rather than displaying each ShapeSheet in its own window.","helpText":"","infoUrls":[],"categoryId":"4e62ada2-f091-49e1-99dd-ffdf5cf558cd","categoryName":"General Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_openeachshapesheetinthesamewindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_generaloptions_l_openeachshapesheetinthesamewindow_1","displayName":"Enabled","description":null,"helpText":null}]},"cc87b91f609cbcc4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_mergeformattingwhenpastingfrompowerpoint","displayName":"Merge formatting when pasting from PowerPoint (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e63361ad-a54b-4557-acc7-02c272a3e58d","categoryName":"Smart cut and paste","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_mergeformattingwhenpastingfrompowerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_smartcutandpaste_l_mergeformattingwhenpastingfrompowerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"ccb7234549feca89":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_keeplastautosavedversions","displayName":"Keep the last AutoSaved versions of files for the next session (User)","description":"This policy setting determines whether Word keeps the last AutoSaved version of a file if a user closes a file without saving it. (Note: AutoSave applies only when AutoRecover is enabled.)\r\n\r\nIf you enable or do not configure this policy setting, Word keeps the last AutoSaved version of the file and makes it available to the user the next time the file is opened if the user closes a file without saving it.\r\n\r\nIf you disable this policy setting, Word does not keep the last AutoSaved version of the file if the user closes a file without saving it.","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_keeplastautosavedversions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_keeplastautosavedversions_1","displayName":"Enabled","description":null,"helpText":null}]},"cc0a768275150322":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork","displayName":"Allow Trusted Locations on the network (User)","description":"This policy setting controls whether trusted locations on the network can be used.\r\n\r\nIf you enable this policy setting, users can specify trusted locations on network shares or in other remote locations that are not under their direct control by clicking the \"Add new location\" button in the Trusted Locations section of the Trust Center. Content, code, and add-ins are allowed to load from trusted locations with minimal security and without prompting the user for permission.\r\n\r\nIf you disable this policy setting, the selected application ignores any network locations listed in the Trusted Locations section of the Trust Center. \r\n\r\nIf you also deploy Trusted Locations via Group Policy, you should verify whether any of them are remote locations. If any of them are remote locations and you do not allow remote locations via this policy setting, those policy keys that point to remote locations will be ignored on client computers.\r\n\r\nDisabling this policy setting does not delete any network locations from the Trusted Locations list, but causes disruption for users who add network locations to the Trusted Locations list. Users are also prevented from adding new network locations to the Trusted Locations list in the Trust Center. We recommended that you do not enable this policy setting (as the \"Allow Trusted Locations on my network (not recommended)\" check box also states). Therefore, in practice, it should be possible to disable this policy setting in most situations without causing significant usability issues for most users.\r\n\r\nIf you do not enable this policy setting, users can select the \"Allow Trusted Locations on my network (not recommended)\" check box if desired and then specify trusted locations by clicking the \"Add new location\" button.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"cc2fb9b2ec56ac94":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_enableloopback","displayName":"Enable Loopback","description":"This value is an on/off switch for loopback traffic. This determines if this VM is able to send/receive loopback traffic to other VMs or the host.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_enableloopback_false","displayName":"Disable loopback","description":"Disable loopback","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_enableloopback_true","displayName":"Enable loopback","description":"Enable loopback","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/cd.json b/public/intune-definitions/cd.json new file mode 100644 index 000000000000..01aee7e21014 --- /dev/null +++ b/public/intune-definitions/cd.json @@ -0,0 +1 @@ +{"cd18f99f5c8f68d2":{"id":"com.apple.assetcache.managed_com.apple.assetcache.managed","displayName":"Top Level Setting Group Collection","description":"com.apple.AssetCache.managed","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"cdffcacb7204fd98":{"id":"com.apple.managedclient.preferences_automaticdownloadsblockedforurls","displayName":"Block multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, where multiple successive automatic downloads aren't allowed.\nIf you don't configure this policy, \"DefaultAutomaticDownloadsSetting\" applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#automaticdownloadsblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"cd316ff7e79f1949":{"id":"com.apple.managedclient.preferences_edgesidebarappurlhostforcelist","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar","description":"Define a list of sites, based on URL, that are forced to be shown in sidebar.\n\nIf you don't configure this policy, no app is forced to be shown in sidebar.\n\nIf the \"HubsSidebarEnabled\" policy is disabled, this list isn't used and no sidebar can be shown.\n\nFor detailed information about valid url, see https://go.microsoft.com/fwlink/?linkid=2281313.\n\nNote: URL patterns are not supported in this policy. You should provide the exact URL of the app.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgesidebarappurlhostforcelist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"cd7d0b41c42f65e6":{"id":"com.apple.managedclient.preferences_exclusions_item_$type","displayName":"Type","description":null,"helpText":null,"infoUrls":[],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_exclusions_item_$type_0","displayName":"Path","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_exclusions_item_$type_1","displayName":"File extension","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_exclusions_item_$type_2","displayName":"File name","description":null,"helpText":null}]},"cd3e1e4fd14bff9f":{"id":"com.apple.managedclient.preferences_javascriptblockedforurls","displayName":"Block JavaScript on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to run JavaScript.\n\nIf you don't configure this policy, the global default value from the \"DefaultJavaScriptSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#javascriptblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"cdc3070b1b872a1e":{"id":"com.apple.networkusagerules_applicationrules_item_appidentifiermatches","displayName":"App Identifier Matches","description":"A list of managed app identifiers, as strings, that must follow the associated rules. If this key is missing, the rules apply to all managed apps on the device. Each string in the AppIdentifierMatches array may either be an exact app identifier match (for example, com.mycompany.myapp) or it may specify a prefix match for the bundle ID by using the * wildcard character. If used, this character must appear after a period (.) and may only appear once, at the end of the string; for example, com.mycompany.*.","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":null},"cd17f28492f68f7a":{"id":"com.apple.xsan_sanauthmethod","displayName":"San Auth Method","description":"The authentication method for the SAN. This key is required for all Xsan SANs. It's optional for StorNext SANs but should be set if the StorNext SAN uses an auth_secret file. Only one value is accepted: auth_secret","helpText":null,"infoUrls":[],"categoryId":"46af3391-ed6d-4ada-aef7-02dac2a1b136","categoryName":"Xsan","options":{"id":"com.apple.xsan_sanauthmethod_0","displayName":"auth_secret","description":null,"helpText":null}},"cde3091c389e0d56":{"id":"com.microsoft.edge.mamedgeappconfigsettings.javascriptallowedforurls","displayName":"Allow JavaScript on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to run JavaScript.\n\nIf you don't configure this policy, \"DefaultJavaScriptSetting\" applies for all sites, when the setting is enabled. If not, the user's personal setting applies.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"cd56425bb66ba808":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showrecommendationsenabled","displayName":"Allow feature recommendations and browser assistance notifications from Microsoft Edge","description":"This setting controls the in-browser assistance notifications that are intended to help users get the most out of Microsoft Edge. This is done by recommending features and by helping them use browser features. These notifications take the form of dialog boxes, flyouts, coach marks and banners in the browser. An example of an assistance notification would be when a user has many tabs opened in the browser. In this instance, Microsoft Edge may prompt the user to try out the vertical tabs feature which is designed to give better browser tab management.\n\nDisabling this policy stops this message from appearing again even if the user has too many tabs open.\nAny features that have been disabled by a management policy aren't suggested to users.\nIf you enable or don't configure this setting, users receive recommendations or notifications from Microsoft Edge.\nIf you disable this setting, users won't receive any recommendations or notifications from Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showrecommendationsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showrecommendationsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"cd9b49756cd5809d":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_driverinstall_classes_allowuser","displayName":"Allow non-administrators to install drivers for these device setup classes","description":"This policy setting specifies a list of device setup class GUIDs describing driver packages that non-administrator members of the built-in Users group may install on the system.\n\nIf you enable this policy setting, members of the Users group may install new drivers for the specified device setup classes. The drivers must be signed according to Windows Driver Signing Policy, or be signed by publishers already in the TrustedPublisher store.\n\nIf you disable or do not configure this policy setting, only members of the Administrators group are allowed to install new driver packages on the system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-deviceinstallation#admx-deviceinstallation-driverinstall-classes-allowuser"],"categoryId":"1943deba-33f7-4c3d-98c8-6b5319ec98ab","categoryName":"Driver Installation","options":[{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_driverinstall_classes_allowuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_driverinstall_classes_allowuser_1","displayName":"Enabled","description":null,"helpText":null}]},"cdaf815fd13f7e85":{"id":"device_vendor_msft_policy_config_admx_devicesetup_driversearchplaces_searchorderconfiguration_driversearchplaces_searchorderconfiguration_dropdown","displayName":"Select search order:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_devicesetup_driversearchplaces_searchorderconfiguration_driversearchplaces_searchorderconfiguration_dropdown_1","displayName":"Always search Windows Update","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_devicesetup_driversearchplaces_searchorderconfiguration_driversearchplaces_searchorderconfiguration_dropdown_2","displayName":"Search Windows Update only if needed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_devicesetup_driversearchplaces_searchorderconfiguration_driversearchplaces_searchorderconfiguration_dropdown_0","displayName":"Do not search Windows Update","description":null,"helpText":null}]},"cd0935078c811ed0":{"id":"device_vendor_msft_policy_config_admx_kdc_requestcompoundid","displayName":"Request compound authentication","description":"This policy setting allows you to configure a domain controller to request compound authentication.\r\n\r\nNote: For a domain controller to request compound authentication, the policy \"KDC support for claims, compound authentication, and Kerberos armoring\" must be configured and enabled. \r\n\r\nIf you enable this policy setting, domain controllers will request compound authentication. The returned service ticket will contain compound authentication only when the account is explicitly configured. This policy should be applied to all domain controllers to ensure consistent application of this policy in the domain. \r\n\r\nIf you disable or do not configure this policy setting, domain controllers will return service tickets that contain compound authentication any time the client sends a compound authentication request regardless of the account configuration.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kdc#admx-kdc-requestcompoundid"],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_requestcompoundid_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_requestcompoundid_1","displayName":"Enabled","description":null,"helpText":null}]},"cd04603f327eadd4":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablerestorepoint","displayName":"Create a system restore point","description":"This policy setting allows you to create a system restore point on the computer on a daily basis prior to cleaning. \r\n\r\n If you enable this setting, a system restore point will be created.\r\n\r\n If you disable or do not configure this setting, a system restore point will not be created.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disablerestorepoint"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablerestorepoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disablerestorepoint_1","displayName":"Enabled","description":null,"helpText":null}]},"cdead83823db97ca":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_expecteddialupdelay_netlogon_expecteddialupdelaylabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"cdcc0e2b25294697":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_defcachesize_lbl_defcachesizespin","displayName":"Default cache size:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"cd177e75327a18bf":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_nc_qosdscpvalue","displayName":"DSCP value:","description":null,"helpText":"","infoUrls":[],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":null},"cd06d9f0f27345e9":{"id":"device_vendor_msft_policy_config_admx_sam_samngckeyrocavalidation_samngckeyrocavalidation_settings","displayName":"Options for handling ROCA-vulnerable WHfB keys:","description":"","helpText":"","infoUrls":[],"categoryId":"03a966f7-8f8e-4ecb-aab3-055fe907f5ab","categoryName":"Security Account Manager","options":[{"id":"device_vendor_msft_policy_config_admx_sam_samngckeyrocavalidation_samngckeyrocavalidation_settings_0","displayName":"Ignore ROCA-vulnerable WHfB keys","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sam_samngckeyrocavalidation_samngckeyrocavalidation_settings_1","displayName":"Audit ROCA-vulnerable WHfB keys on use","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sam_samngckeyrocavalidation_samngckeyrocavalidation_settings_2","displayName":"Block ROCA-vulnerable WHfB keys on use","description":null,"helpText":null}]},"cdf179e8e6aa0535":{"id":"device_vendor_msft_policy_config_admx_sensors_disablelocationscripting_2","displayName":"Turn off location scripting","description":"\r\n This policy setting turns off scripting for the location feature.\r\n\r\n If you enable this policy setting, scripts for the location feature will not run.\r\n\r\n If you disable or do not configure this policy setting, all location scripts will run.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablelocationscripting-2"],"categoryId":"b40cfb22-8f17-4317-bcbb-c1c871497446","categoryName":"Location and Sensors","options":[{"id":"device_vendor_msft_policy_config_admx_sensors_disablelocationscripting_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sensors_disablelocationscripting_2_1","displayName":"Enabled","description":null,"helpText":null}]},"cd4287741debb8ec":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_wddm_graphics_driver","displayName":"Use WDDM graphics display driver for Remote Desktop Connections","description":"This policy setting lets you enable WDDM graphics display driver for Remote Desktop Connections.\r\n\r\nIf you enable or do not configure this policy setting, Remote Desktop Connections will use WDDM graphics display driver.\r\n\r\nIf you disable this policy setting, Remote Desktop Connections will NOT use WDDM graphics display driver. In this case, the Remote Desktop Connections will use XDDM graphics display driver.\r\n\r\nFor this change to take effect, you must restart Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-server-wddm-graphics-driver"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_wddm_graphics_driver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_wddm_graphics_driver_1","displayName":"Enabled","description":null,"helpText":null}]},"cd8ca1efd05c0135":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016","displayName":"Microsoft Office 365 Lync 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Lync 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Lync 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365lync2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016_1","displayName":"Enabled","description":null,"helpText":null}]},"cd19f7eb420082d0":{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenariodatasizelimitpolicy","displayName":"Diagnostics: Configure scenario retention","description":"This policy setting determines the data retention limit for Diagnostic Policy Service (DPS) scenario data.\r\n\r\nIf you enable this policy setting, you must enter the maximum size of scenario data that should be retained in megabytes. Detailed troubleshooting data related to scenarios will be retained until this limit is reached.\r\n\r\nIf you disable or do not configure this policy setting, the DPS deletes scenario data once it exceeds 128 megabytes in size.\r\n\r\nNo reboots or service restarts are required for this policy setting to take effect: changes take effect immediately.\r\n\r\nThis policy setting will only take effect when the Diagnostic Policy Service is in the running state. When the service is stopped or disabled, diagnostic scenario data will not be deleted. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wdi#admx-wdi-wdidpsscenariodatasizelimitpolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenariodatasizelimitpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wdi_wdidpsscenariodatasizelimitpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"cd45dc6d61eca193":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enablesmartscreen_enablesmartscreendropdown","displayName":"Pick one of the following settings:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enablesmartscreen_enablesmartscreendropdown_block","displayName":"Warn and prevent bypass","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enablesmartscreen_enablesmartscreendropdown_warn","displayName":"Warn","description":null,"helpText":null}]},"cd1f38f30f5e08dd":{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorbackgroundpriority","displayName":"Costed Network Behavior Background Priority","description":"This policy setting defines the default behavior that the Background Intelligent Transfer Service (BITS) uses for background transfers when the system is connected to a costed network (3G, etc. ). Download behavior policies further limit the network usage of background transfers. If you enable this policy setting, you can define a default download policy for each BITS job priority. This setting does not override a download policy explicitly configured by the application that created the BITS job, but does apply to jobs that are created by specifying only a priority. For example, you can specify that background jobs are by default to transfer only when on uncosted network connections, but foreground jobs should proceed only when not roaming. The values that can be assigned are:1 - Always transfer2 - Transfer unless roaming3 - Transfer unless surcharge applies (when not roaming or overcap)4 - Transfer unless nearing limit (when not roaming or nearing cap)5 - Transfer only if unconstrained","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-BITS#costednetworkbehaviorbackgroundpriority"],"categoryId":"7443c1d4-1087-486c-9a0a-f9da9074e4e1","categoryName":"BITS","options":[{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorbackgroundpriority_1","displayName":"Always transfer","description":"Always transfer","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorbackgroundpriority_2","displayName":"Transfer unless roaming","description":"Transfer unless roaming","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorbackgroundpriority_3","displayName":"Transfer unless surcharge applies (when not roaming or over cap)","description":"Transfer unless surcharge applies (when not roaming or over cap)","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorbackgroundpriority_4","displayName":"Transfer unless nearing limit (when not roaming or nearing cap)","description":"Transfer unless nearing limit (when not roaming or nearing cap)","helpText":null},{"id":"device_vendor_msft_policy_config_bits_costednetworkbehaviorbackgroundpriority_5","displayName":"Transfer only if unconstrained","description":"Transfer only if unconstrained","helpText":null}]},"cd058cb13d49cf8a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_2","displayName":"Do not allow any site to load mixed content","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_3","displayName":"Allow users to add exceptions to allow mixed content","description":null,"helpText":null}]},"cd04c014122e6d24":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode","displayName":"Choose how to specify proxy server settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},"cd06ce06d4d1e790":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode","description":"Overrides default background graphics printing mode.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"cd0d218e197b7f7b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist","displayName":"Configure the list of domains for which the Password Manager (Save and Fill) will be disabled","description":"Configure the list of domains where Google Chrome should disable the Password Manager. This means that Save and Fill workflows will be disabled, ensuring that passwords for those websites can't be saved or auto filled into web forms.\r\n\r\nIf a domain is present in the list, the Password Manager will be disabled for it.\r\n\r\nIf a domain is not present in the list, the Password Manager will be available for it.\r\n\r\nIf the policy is unset, the Password Manager will be available for all domains.\r\n\r\nExample value:\r\n\r\nexample.com\r\nlogin.example.com","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"cdb3f28878b0be2b":{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel","displayName":"Configure which channel of Microsoft Edge to use for opening redirected sites","description":"Enables you to configure up to three versions of Microsoft Edge to open a redirected site (in order of preference). Use this policy if your environment is configured to redirect sites from Internet Explorer 11 to Microsoft Edge. If any of the chosen versions are not installed on the device, that preference will be bypassed.\n\nIf both the Windows Update for the next version of Microsoft Edge* and Microsoft Edge Stable channel are installed, the following behaviors occur:\n- If you disable or don't configure this policy, Microsoft Edge Stable channel is used. This is the default behavior.\n- If you enable this policy, you can configure redirected sites to open in up to three of the following channels where:\n 1 = Microsoft Edge Stable\n 2 = Microsoft Edge Beta version 77 or later\n 3 = Microsoft Edge Dev version 77 or later\n 4 = Microsoft Edge Canary version 77 or later\n\nIf the Windows Update for the next version of Microsoft Edge* or Microsoft Edge Stable channel are not installed, the following behaviors occur:\n- If you disable or don't configure this policy, Microsoft Edge version 45 or earlier is automatically used. This is the default behavior.\n- If you enable this policy, you can configure redirected sites to open in up to three of the following channels where:\n 0 = Microsoft Edge version 45 or earlier\n 1 = Microsoft Edge Stable\n 2 = Microsoft Edge Beta version 77 or later\n 3 = Microsoft Edge Dev version 77 or later\n 4 = Microsoft Edge Canary version 77 or later\n\n*For more information about the Windows update for the next version of Microsoft Edge including how to disable it, see https://go.microsoft.com/fwlink/?linkid=2102115. This update applies only to Windows 10 version 1709 and higher.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-configureedgeredirectchannel"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_1","displayName":"Enabled","description":null,"helpText":null}]},"cd65c8956f7c700e":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowsmartscreenie"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"cdcb4824116877a8":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer","displayName":"Allow VBScript to run in Internet Explorer","description":"This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer.\n\nIf you selected Enable in the drop-down box, VBScript can run without user intervention.\n\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run.\n\nIf you selected Disable in the drop-down box, VBScript is prevented from running.\n\nIf you do not configure or disable this policy setting, VBScript is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowvbscripttorunininternetexplorer"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"cd90c79b81ccdb1f":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_sharingandsecuritymodelforlocalaccounts","displayName":"Network Access Sharing And Security Model For Local Accounts","description":"Network access: Sharing and security model for local accounts This security setting determines how network logons that use local accounts are authenticated. If this setting is set to Classic, network logons that use local account credentials authenticate by using those credentials. The Classic model allows fine control over access to resources. By using the Classic model, you can grant different types of access to different users for the same resource. If this setting is set to Guest only, network logons that use local accounts are automatically mapped to the Guest account. By using the Guest model, you can have all users treated equally. All users authenticate as Guest, and they all receive the same level of access to a given resource, which can be either Read-only or Modify. Default on domain computers: Classic. Default on stand-alone computers: Guest only Important With the Guest only model, any user who can access your computer over the network (including anonymous Internet users) can access your shared resources. You must use the Windows Firewall or another similar device to protect your computer from unauthorized access. Similarly, with the Classic model, local accounts must be password protected; otherwise, those user accounts can be used by anyone to access shared system resources. Note: This setting does not affect interactive logons that are performed remotely by using such services as Telnet or Remote Desktop Services. Remote Desktop Services was called Terminal Services in previous versions of Windows Server. This policy will have no impact on computers running Windows 2000. When the computer is not joined to a domain, this setting also modifies the Sharing and Security tabs in File Explorer to correspond to the sharing and security model that is being used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_sharingandsecuritymodelforlocalaccounts"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"cd136a85eb14c780":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability","displayName":"Control where developer tools can be used (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_0","displayName":"Block the developer tools on extensions installed by enterprise policy, allow in other contexts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_1","displayName":"Allow using the developer tools","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_2","displayName":"Don't allow using the developer tools","description":null,"helpText":null}]},"cdc378318f3ffc42":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch","displayName":"Enforce Google SafeSearch","description":"Forces queries in Google Web Search to be performed with SafeSearch set to active, and prevents users from changing this setting.\r\n\r\nIf you enable this policy, SafeSearch in Google Search is always active.\r\n\r\nIf you disable this policy or don't configure it, SafeSearch in Google Search isn't enforced.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"cd9316a70bee57bd":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls","displayName":"Block clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\r\n\r\nSetting the policy lets you create a list of URL patterns that specify sites that can't use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\r\n\r\nLeaving the policy unset means 'DefaultClipboardSetting' (Default clipboard site permission) applies for all sites if it's set. If it isn't set, the user's personal setting applies.\r\n\r\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"cd10a1a57916349d":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts","displayName":"Allow Web Authentication requests on sites with broken TLS certificates.","description":"If you enable this policy, Microsoft Edge will allow Web Authentication requests on websites that have TLS certificates with errors (i.e. websites considered not secure).\r\n\r\nIf you disable or don't configure this policy, the default behavior of blocking such requests will apply.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts_1","displayName":"Enabled","description":null,"helpText":null}]},"cd8a369372ea1781":{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge~network_localnetworkaccessrestrictionsenabled","displayName":"Specifies whether to block requests from public websites to devices on a user's local network. (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nLocal Network Access restrictions prevent public websites from making\r\nrequests to devices on a user's local network without explicit user permission.\r\n\r\nIf you enable this policy, Microsoft Edge will\r\nblock any request that would otherwise trigger a DevTools warning\r\ndue to Local Network Access checks.\r\nThese requests will be denied without prompting the user.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will handle\r\nthese requests using the default behavior, which may include showing warnings in DevTools\r\nand allowing the request to proceed depending on the context.\r\n\r\nNote: This feature improves local network security by deprecating direct access to private IP addresses from public websites\r\nunless explicitly granted by the user.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge~network_localnetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge~network_localnetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cdb26434709f86cf":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_allowbrowsingwithcopilot","displayName":"Controls the availability of browsing with Copilot in Microsoft Edge.","description":"When browsing with Copilot is enabled, users can explicitly invoke it for a query. It isn't invoked automatically.\r\n\r\nBrowsing with Copilot is available only on domains specified in the 'BrowsingWithCopilotAllowList' (Browsing with Copilot Allowed URLs) policy and is blocked on domains specified in the 'BrowsingWithCopilotBlockList' (Browsing with Copilot Blocked URLs) policy. If no domains are configured in the allow list, browsing with Copilot is effectively disabled.\r\n\r\nThis feature is available only to users with an active Microsoft 365 Copilot subscription.\r\n\r\nFor more information about configuring browsing with Copilot, see https://go.microsoft.com/fwlink/?linkid=2346300.\r\n\r\nIf you enable this policy, browsing with Copilot is turned on for all users who receive the policy, and users can't turn it off.\r\n\r\nIf you disable this policy, browsing with Copilot is turned off for all users who receive the policy, and users can't turn it on.\r\n\r\nIf you don't configure this policy, browsing with Copilot is off by default, and users can turn it on.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_allowbrowsingwithcopilot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_allowbrowsingwithcopilot_1","displayName":"Enabled","description":null,"helpText":null}]},"cd4beeaa5ec0087f":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu","displayName":"Show context menu to open a link in Internet Explorer mode","description":"This policy controls the visibility of the 'Open link in new Internet Explorer mode tab' option on the context menu for file:// links.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nIf you set this policy to true, the 'Open link in new Internet Explorer mode tab' context menu item will be available for file:// links.\r\n\r\nIf you set this policy to false or don't configure it, the context menu item will not be added.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"cd6df22dc1f844a8":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_sameorigintabcaptureallowedbyoriginsdesc","displayName":"Allow Same Origin Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"cd3901fdc62022a5":{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_disablenewaccountdetection","displayName":"Disable a toast and activity center message to encourage a user to sign in OneDrive using an existing credential that is made available to Microsoft applications","description":"If admins enable this setting (value 1), the user won't see the toast and the activity center message about new accounts that can be used to sign-in with OneDrive.\r\n\r\nIf admins disable (value 0) or do not configure this setting, the user will see the toast and the activity center message when OneDrive detects a new account on the device.\r\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_disablenewaccountdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_disablenewaccountdetection_1","displayName":"Enabled","description":null,"helpText":null}]},"cdbc6b0ecdf59d18":{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationservice","displayName":"Disallow Negotiate authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Negotiate authentication from a remote client.\n\n If you enable this policy setting, the WinRM service does not accept Negotiate authentication from a remote client.\n\n If you disable or do not configure this policy setting, the WinRM service accepts Negotiate authentication from a remote client.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-disallownegotiateauthenticationservice"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationservice_1","displayName":"Enabled","description":null,"helpText":null}]},"cd0fc0475f1a88bc":{"id":"device_vendor_msft_policy_config_system_enableonesettingsauditing","displayName":"Enable One Settings Auditing","description":"This policy setting controls whether Windows records attempts to connect with the OneSettings service to the EventLog. If you enable this policy, Windows will record attempts to connect with the OneSettings service to the Microsoft\\Windows\\Privacy-Auditing\\Operational EventLog channel. If you disable or don't configure this policy setting, Windows will not record attempts to connect with the OneSettings service to the EventLog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#enableonesettingsauditing"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_enableonesettingsauditing_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_enableonesettingsauditing_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"cd9219c7d67816c2":{"id":"device_vendor_msft_policy_config_update_requiredeferupgrade","displayName":"Require Defer Upgrade","description":"NoteDon't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use RequireDeferUpgrade for Windows 10, version 1511 devices. Allows the IT admin to set a device to Semi-Annual Channel train.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#requiredeferupgrade"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_requiredeferupgrade_0","displayName":"User gets upgrades from Semi-Annual Channel (Targeted).","description":"User gets upgrades from Semi-Annual Channel (Targeted).","helpText":null},{"id":"device_vendor_msft_policy_config_update_requiredeferupgrade_1","displayName":"User gets upgrades from Semi-Annual Channel.","description":"User gets upgrades from Semi-Annual Channel.","helpText":null}]},"cda38d7a1d27f02c":{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_createdesktopshortcutmicrosoftedge","displayName":"Prevent Desktop Shortcut creation upon install","description":"If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.\r\n\r\n If you don't configure this policy for a channel, the 'CreateDesktopShortcut default' policy configuration determines shortcut creation when Microsoft Edge is installed.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_createdesktopshortcutmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_createdesktopshortcutmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"cdd54ed2f8c33b7a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders78","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders78_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders78_1","displayName":"True","description":null,"helpText":null}]},"cd220bb4ce4c9704":{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktop","displayName":"Hide and disable all items on the desktop (User)","description":"Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.\r\n\r\nRemoving icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.\r\n\r\nAlso, see \"Items displayed in Places Bar\" in User Configuration\\Administrative Templates\\Windows Components\\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nodesktop"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktop_1","displayName":"Enabled","description":null,"helpText":null}]},"cd992c0133e574a2":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_gp","displayName":"NAP Client Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-napsnap-gp"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_gp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_gp_1","displayName":"Enabled","description":null,"helpText":null}]},"cd9ec96948964377":{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvesearch","displayName":"Do not use the search-based method when resolving shell shortcuts (User)","description":"This policy setting prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.\r\n\r\nIf you enable this policy setting, the system does not conduct the final drive search. It just displays a message explaining that the file is not found.\r\n\r\nIf you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target's file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.\r\n\r\nNote: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.\r\n\r\nAlso, see the \"Do not track Shell shortcuts during roaming\" and the \"Do not use the tracking-based method when resolving shell shortcuts\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noresolvesearch"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"cd8aeac7aeb85160":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_password_saving_1","displayName":"Do not allow passwords to be saved (User)","description":"Controls whether a user can save passwords using Remote Desktop Connection.\r\n\r\nIf you enable this setting the credential saving checkbox in Remote Desktop Connection will be disabled and users will no longer be able to save passwords. When a user opens an RDP file using Remote Desktop Connection and saves his settings, any password that previously existed in the RDP file will be deleted.\r\n\r\nIf you disable this setting or leave it not configured, the user will be able to save passwords using Remote Desktop Connection\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-disable-password-saving-1"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_password_saving_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_password_saving_1_1","displayName":"Enabled","description":null,"helpText":null}]},"cd29267ab02feeb4":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable","displayName":"Enable notification (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable_1","displayName":"True","description":null,"helpText":null}]},"cd5ed3b9a0e7d836":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability","displayName":"Incognito mode availability (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_0","displayName":"Incognito mode available","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_1","displayName":"Incognito mode disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_2","displayName":"Incognito mode forced","description":null,"helpText":null}]},"cde9de45da44ffe9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended","displayName":"Default search provider keyword (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderKeyword specifies the keyword or shortcut used in the address bar to trigger the search for this provider.\r\n\r\nLeaving DefaultSearchProviderKeyword unset means no keyword activates the search provider.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cd0f171f2b0d2638":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended","displayName":"Enable network prediction (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cdc691fa8fe6dce3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled","displayName":"Enable URL-keyed anonymized data collection (User)","description":"Setting the policy to Enabled means URL-keyed anonymized data collection, which sends URLs of pages the user visits to Google to make searches and browsing better, is always active.\r\n\r\nSetting the policy to Disabled results in no URL-keyed anonymized data collection.\r\n\r\nIf you set the policy, users can't change. If not set, then URL-keyed anonymized data collection at first, but users can change it.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cdb95f6418d55982":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled","displayName":"Enable Safe Browsing (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cd51d8aa93664d96":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"cd4f795f5df9f9d8":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_pathcolon9","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"cda090cc28256d4f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders16","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders16_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders16_1","displayName":"True","description":null,"helpText":null}]},"cddb369d051fb067":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallownetframeworkreliantcomponents"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"cd09fab64b103fd0":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled","displayName":"DNS interception checks enabled (User)","description":"This policy configures a local switch that can be used to disable DNS interception checks. These checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nThis detection might not be necessary in an enterprise environment where the network configuration is known. It can be disabled to avoid additional DNS and HTTP traffic on start-up and each DNS configuration change.\r\n\r\nIf you enable or don’t set this policy, the DNS interception checks are performed.\r\n\r\nIf you disable this policy, DNS interception checks aren’t performed.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cd8c9d5e499c19df":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"cdacc40500da7a62":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_0","displayName":"Off (Not recommended)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_1","displayName":"Required data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_2","displayName":"Optional data","description":null,"helpText":null}]},"cdcfed24ede01ac1":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled","displayName":"Enable the User-Agent Client Hints feature (obsolete) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it's only intended to be a short-term mechanism to give enterprises more time to update their web content if and when it's found to be incompatible with the User-Agent Client Hints feature. It won't work in Microsoft Edge version 89.\r\n\r\nWhen enabled the User-Agent Client Hints feature sends granular request headers that provide information about the user browser (for example, the browser version) and environment (for example, the system architecture).\r\n\r\nThis is an additive feature, but the new headers may break some websites that restrict the characters that requests may contain.\r\n\r\nIf you enable or don't configure this policy, the User-Agent Client Hints feature is enabled. If you disable this policy, this feature is unavailable.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cd213bb53e16f060":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed","displayName":"Configures availability of a vertical layout for tabs on the side of the browser (User)","description":"Configures whether a user can access an alternative layout where tabs are vertically aligned on the side of the browser instead of at the top.\r\nWhen there are several tabs open, this layout provides better tab viewing and management. There's better visibility of the site titles,\r\nit's easier to scan aligned icons, and there's more space to manage and close tabs.\r\n\r\nIf you disable this policy, then the vertical tab layout will not be available as an option for users.\r\n\r\nIf you enable or don't configure this policy, the tab layout will still be at the top, but a user has the option to turn on vertical tabs on the side.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"cd698cb02853e161":{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_0","displayName":"Automatically","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_1","displayName":"With device password","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_2","displayName":"With custom primary password","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_3","displayName":"Autofill off","description":null,"helpText":null}]},"cd28cb35c4fec307":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing","displayName":"Activate Restricted Browsing (User)","description":"When Restricted Browsing is activated the save as dialog box will be restricted such that the user will only be able to navigate to those locations and the children of those locations specified in the \"Restricted Browsing\\Approve Locations\" policy setting. If you want to enable the \"Approve Locations\" policy setting, you must first enable the \"Approve Locations\" policy setting first.","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_1","displayName":"Enabled","description":null,"helpText":null}]},"cde102480fc93ac3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_showshortcutkeysinscreentips","displayName":"Show shortcut keys in ScreenTips (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_showshortcutkeysinscreentips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_showshortcutkeysinscreentips_1","displayName":"Enabled","description":null,"helpText":null}]},"cdcc0da00b2d480a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache4_l_workflowdescrip445","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"cd6173c546a6b14c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey06","displayName":"Escrow Key #6 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey06_1","displayName":"Enabled","description":null,"helpText":null}]},"cdbd7025ce1dd824":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc10_l_allowsubfolders10","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc10_l_allowsubfolders10_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc10_l_allowsubfolders10_1","displayName":"True","description":null,"helpText":null}]},"cd0e64f184a7adfa":{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockorgchart","displayName":"Block OrgChart (User)","description":"This policy setting allows you to control whether Organization Chart (OrgChart) Add-in for Microsoft Office programs runs in Microsoft 365 apps.\r\n\r\nIf you enable this policy setting, OrgChart will not run in any Microsoft 365 app. Instead, a static image will render in its place.\r\n\r\nIf you disable this policy setting, OrgChart will run in Microsoft 365 apps.\r\n\r\nIf you don't configure this policy setting, OrgChart will run in Microsoft 365 apps.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockorgchart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v23~policy~l_microsoftofficesystem~l_securitysettings_l_blockorgchart_1","displayName":"Enabled","description":null,"helpText":null}]},"cdcbe1abfd2d4fd1":{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_mailtipsbardisplayoption_l_mailtipsbardisplayoptions","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_mailtipsbardisplayoption_l_mailtipsbardisplayoptions_0","displayName":"Display automatically when MailTips apply","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_mailtipsbardisplayoption_l_mailtipsbardisplayoptions_1","displayName":"Display at all times","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v15~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_mailtipsbardisplayoption_l_mailtipsbardisplayoptions_2","displayName":"Never display MailTips","description":null,"helpText":null}]},"cda05e04b6a81f62":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entersecondstowaittouploadchangestoserver_l_entersecondstowaitbeforeuploaddefault15sec","displayName":"Enter seconds to wait before upload(Default 15 sec.) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":null},"cd66e16ac3d49930":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_disableroamingofrsssubscriptions","displayName":"Do not roam users' RSS Feeds (User)","description":"This policy setting allows you to change the default delivery location of RSS Feeds to a local PST.\r\n\r\nIf you enable this setting, the default delivery location will be changed to a local PST. When RSS Feeds are delivered to a local PST, they will not roam from client to client and will only be available on the computer where the user originally subscribed to the RSS Feed.\r\n\r\nIf you disable or do not configure this policy setting, subscriptions to RSS Feeds are delivered to the user's mailbox and roam from client to client via Exchange. This setting does not affect RSS Feeds that were subscribed before the policy setting was enabled. This setting also does not prevent the user from manually directing an RSS Feed to deliver to the user's mailbox, which allows the RSS Feed to roam from client to client.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_disableroamingofrsssubscriptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_disableroamingofrsssubscriptions_1","displayName":"Enabled","description":null,"helpText":null}]},"cdf05fa1ff5f532f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_descriptioncolon34","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"cd7b549bbc9b0d7f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_datecolon37","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"cd1e8d46ca6c2751":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"cdbe00964676f013":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_specifycngsaltlength_l_specifycngsaltlengthspinid","displayName":"Number of bytes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":null},"cd6aec662cb5097a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_l_descriptioncolon38","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"cdcdd0ded796b0de":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_defaultbuiltintab","displayName":"Default tab to show in Publisher on the Office Start screen and in File | New (User)","description":"This policy setting controls what displays as the default tab in Publisher on the Office Start screen and in File | New. \r\n\r\nIf you enable this policy setting, you can choose one of two options to become the default tab on the Office Start screen and in File | New:\r\n\r\n* Built-in – Users will the see built-in templates tab as the default tab in Publisher on the Office Start screen and in File | New.\r\n\r\n* Custom – Users will the see custom templates tab as the default tab in Publisher on the Office Start screen and in File | New when templates exist (this can include Custom XML programmed templates, templates in the Workgroup templates path, templates in the Personal templates path, or SharePoint templates).\r\n\r\nIf you disable or do not configure this policy setting, users will see the Featured templates tab as the default tab in Publisher on the Office Start screen and in File | New","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_defaultbuiltintab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_defaultbuiltintab_1","displayName":"Enabled","description":null,"helpText":null}]},"cd437741ee26ebcb":{"id":"user_vendor_msft_policy_config_start_configurestartpins","displayName":"Configure Start Pins (User)","description":"Allows admin to override the default items pinned to Start.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#configurestartpins"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":null},"cd608d514333a15f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":null},"cd21594ac622cae5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys175","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable any shortcut key by using its virtual key code ID, including shortcut keys that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter a virtual key code ID number to disable a specific shortcut key.\r\n\r\nIf you disable or do not configure this policy setting, all default shortcut keys are enabled for users.","helpText":"","infoUrls":[],"categoryId":"0f42fc50-66c8-4b70-9904-64f8d662c930","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys175_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys175_1","displayName":"Enabled","description":null,"helpText":null}]},"cd06d020eb19ed08":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchhyuiyubyuvyu","displayName":"Match hyu/iyu, byu/vyu (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchhyuiyubyuvyu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchhyuiyubyuvyu_1","displayName":"Enabled","description":null,"helpText":null}]},"cd07d93597a967ec":{"id":"vendor_msft_firewall_mdmstore_global_ipsecexempt","displayName":"IPsec Exceptions","description":"This value configures IPsec exceptions and MUST be a combination of the valid flags that are defined in IPSEC_EXEMPT_VALUES; therefore, the maximum value MUST always be IPSEC_EXEMPT_MAX-1 for servers supporting a schema version of 0x0201 and IPSEC_EXEMPT_MAX_V2_0-1 for servers supporting a schema version of 0x0200. If the maximum value is exceeded when the method RRPC_FWSetGlobalConfig (Opnum 4) is called, the method returns ERROR_INVALID_PARAMETER. This error code is returned if no other preceding error is discovered. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, use the local store value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_global_ipsecexempt_0","displayName":"FWGLOBALCONFIGIPSECEXEMPTNONE: No IPsec exemptions.","description":"FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NONE: No IPsec exemptions.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_ipsecexempt_1","displayName":"Exempt neighbor discover IPv6 ICMP type-codes from IPsec","description":"FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NEIGHBOR_DISC: Exempt neighbor discover IPv6 ICMP type-codes from IPsec.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_ipsecexempt_2","displayName":"Exempt ICMP from IPsec","description":"FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ICMP: Exempt ICMP from IPsec.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_ipsecexempt_4","displayName":"Exempt router discover IPv6 ICMP type-codes from IPsec","description":"FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ROUTER_DISC: Exempt router discover IPv6 ICMP type-codes from IPsec.","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_ipsecexempt_8","displayName":"Exempt both IPv4 and IPv6 DHCP traffic from IPsec","description":"FW_GLOBAL_CONFIG_IPSEC_EXEMPT_DHCP: Exempt both IPv4 and IPv6 DHCP traffic from IPsec.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/ce.json b/public/intune-definitions/ce.json new file mode 100644 index 000000000000..cce76bc70c45 --- /dev/null +++ b/public/intune-definitions/ce.json @@ -0,0 +1 @@ +{"ce5b74d3e712f6a2":{"id":"ade_appleconfiguratorcertificates","displayName":"Apple Configurator certificates","description":"Required to sync data with a supervised device. Make sure you save a local copy of the certificate that you can access later. You won't be able to make changes to the uploaded copy.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":null},"cefceb332a2b4c5c":{"id":"ade_setupassistant_voiceselection","displayName":"Voice selection","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_voiceselection_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_voiceselection_1","displayName":"Show","description":null,"helpText":null}]},"ce2a10ccb70cfbb6":{"id":"com.android.devicerestrictionpolicy.setusericonblocked","displayName":"Block setting user icon","description":"If 'True', the device is prevented from changing the user icon. If 'False', Intune doesn't change or update this setting. By default, the OS might allow the user to change their icon. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.setusericonblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.setusericonblocked_true","displayName":"True","description":"True","helpText":null}]},"cee8e25dcb559dab":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordminimumsymbolcharacters","displayName":"Number of symbol characters required","description":"Enter the number of symbol characters (&, #, %, and so on) the work profile password must have, between 1 and 16 characters. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"ce75d53c02d02df2":{"id":"com.apple.applicationaccess_allowkeyboardshortcuts","displayName":"Allow Keyboard Shortcuts (Deprecated)","description":"If false, disables keyboard shortcuts. Requires a supervised device. Available in iOS 9 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowkeyboardshortcuts_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowkeyboardshortcuts_true","displayName":"True","description":null,"helpText":null}]},"cec5fd7acbe5e8cc":{"id":"com.apple.applicationaccess_allowvisualintelligencesummary","displayName":"Allow Visual Intelligence Summary (Deprecated)","description":"If `false`, the system disables visual intelligence summarization.\n\nDeprecated: use the declarative management `com.apple.configuration.intelligence.settings` configuration.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowvisualintelligencesummary_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowvisualintelligencesummary_true","displayName":"Enabled","description":null,"helpText":null}]},"cea457ccc8f7e891":{"id":"com.apple.applicationaccess_ratingmoviesca","displayName":"Rating Movies - Canada","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesca_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesca_1","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesca_2","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesca_3","displayName":"14A","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesca_4","displayName":"18A","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesca_5","displayName":"R","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesca_6","displayName":"All","description":null,"helpText":null}]},"ce22cd6812f5c484":{"id":"com.apple.carddav.account_carddavhostname","displayName":"Card DAV Host Name","description":"The server’s address.","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":null},"ce4a58e8ce1fa9ca":{"id":"com.apple.cellular_apns_item_proxyport","displayName":"Proxy Port","description":"The proxy server's port number.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"ce51c619ed95475f":{"id":"com.apple.dock_minimize-to-application","displayName":"Minimize To Application","description":"If true, enables \"Minimize windows into application icon.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_minimize-to-application_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_minimize-to-application_true","displayName":"True","description":null,"helpText":null}]},"ceef9b8e8c688cb1":{"id":"com.apple.extensiblesso_teamidentifier","displayName":"Team Identifier","description":"The team identifier of the app extension. The device requires this key on macOS and ignores it elsewhere.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"ceec11fa287b2c73":{"id":"com.apple.ldap.account_ldapaccountdescription","displayName":"LDAP Account Description","description":"The description of the account.","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":null},"ce7f3b6179cf6f79":{"id":"com.apple.managedclient.preferences_disablescreenshots","displayName":"Disable taking screenshots","description":"Controls if users can take screenshots of the browser page.\n\nIf enabled, user can't take screenshots by using keyboard shortcuts or extension APIs.\n\nIf disabled or don't configure this policy, users can take screenshots.\n\nPlease note this policy controls screenshots taken from within the browser itself. Even if you enable this policy, users might still be able to take screenshots using some method outside of the browser (like using an operating system feature or another application).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#disablescreenshots"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_disablescreenshots_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablescreenshots_true","displayName":"Enabled","description":null,"helpText":null}]},"cedc508daea48681":{"id":"com.apple.managedclient.preferences_gotointranetsiteforsinglewordentryinaddressbar","displayName":"Force direct intranet site navigation instead of searching on single word entries in the Address Bar","description":"If you enable this policy, the top auto-suggest result in the address bar suggestion list will navigate to intranet sites if the text entered in the address bar is a single word without punctuation.\n\nDefault navigation when typing a single word without punctuation will conduct a navigation to an intranet site matching the entered text.\n\nIf you enable this policy, the second auto-suggest result in the address bar suggestion list will conduct a web search exactly as it was entered, provided that this text is a single word without punctuation. The default search provider will be used unless a policy to prevent web search is also enabled.\n\nTwo effects of enabling this policy are:\n\nNavigation to sites in response to single word queries that would typically resolve to a history item will no longer happen. Instead, the browser will attempt navigate to internal sites that may not exist in an organization’s intranet. This will result in a 404 error.\n\nPopular, single-word search terms will require manual selection of search suggestions to properly conduct a search.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#gotointranetsiteforsinglewordentryinaddressbar"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_gotointranetsiteforsinglewordentryinaddressbar_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_gotointranetsiteforsinglewordentryinaddressbar_true","displayName":"Enabled","description":null,"helpText":null}]},"cec9473ba4b28bfb":{"id":"com.apple.managedclient.preferences_restoreonstartup","displayName":"Action to take on startup","description":"Specify how Microsoft Edge behaves when it starts.\n\nIf you want a new tab to always open on startup, choose 'Open new tab' (5).\n\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'Restore the last session' (1). The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\n\nIf you want to open a specific set of URLs, choose 'Open a list of URLs' (4).\n\nDisabling this setting is equivalent to leaving it not configured. Users will be able to change it in Microsoft Edge.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\n\n* 5 = Open a new tab\n\n* 1 = Restore the last session\n\n* 4 = Open a list of URLs","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#restoreonstartup"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_restoreonstartup_0","displayName":"Restore the last session","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_restoreonstartup_1","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_restoreonstartup_2","displayName":"Open a new tab","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_restoreonstartup_3","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},"ce85a756b5c61e56":{"id":"com.apple.systemconfiguration_proxies_ftpenable","displayName":"FTP Enable","description":"If true, enables FTP proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_ftpenable_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_ftpenable_1","displayName":"True","description":null,"helpText":null}]},"ce72982700e7001a":{"id":"com.apple.universalaccess_stickykeyshowwindow","displayName":"Sticky Key Show Window","description":"If true, enables \"Display pressed keys on screen\" for Sticky Keys.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_stickykeyshowwindow_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_stickykeyshowwindow_true","displayName":"True","description":null,"helpText":null}]},"ce0836a2e2836fe3":{"id":"com.apple.webcontent-filter_password","displayName":"Password","description":"The password for the service.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"ceefca94ad371815":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_prebootrecoveryinfodropdown_name","displayName":"Select an option for the pre-boot recovery message:","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_prebootrecoveryinfodropdown_name_0","displayName":"","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_prebootrecoveryinfodropdown_name_1","displayName":"Use default recovery message and URL","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_prebootrecoveryinfodropdown_name_2","displayName":"Use custom recovery message","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoverymessage_prebootrecoveryinfodropdown_name_3","displayName":"Use custom recovery URL","description":null,"helpText":null}]},"ce665406acf6a24a":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2_werconsent","displayName":"Consent level","description":null,"helpText":"","infoUrls":[],"categoryId":"184981d4-712b-425e-b0a3-93eac7fbd3ee","categoryName":"Consent","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2_werconsent_1","displayName":"Always ask before sending data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2_werconsent_2","displayName":"Send parameters","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2_werconsent_3","displayName":"Send parameters and safe additional data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_2_werconsent_4","displayName":"Send all data","description":null,"helpText":null}]},"ce2f13f7de62c8e6":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_1","displayName":"Back up log automatically when full","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the \"Retain old events\" policy setting is enabled.\r\n\r\nIf you enable this policy setting and the \"Retain old events\" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started.\r\n\r\nIf you disable this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and old events are retained.\r\n\r\nIf you do not configure this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and the old events are retained.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-autobackup-1"],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ceb07697a028ce29":{"id":"device_vendor_msft_policy_config_admx_filesys_longpathsenabled","displayName":"Enable Win32 long paths","description":"Enabling Win32 long paths will allow manifested win32 applications and Windows Store applications to access paths beyond the normal 260 character limit per node on file systems that support it. Enabling this setting will cause the long paths to be accessible within the process.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filesys#admx-filesys-longpathsenabled"],"categoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","categoryName":"Filesystem","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_longpathsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_longpathsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cec03eac0c424553":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota","displayName":"Configure disk quota policy processing","description":"This policy setting determines when disk quota policies are updated.\r\n\r\nThis policy setting affects all policies that use the disk quota component of Group Policy, such as those in Computer Configuration\\Administrative Templates\\System\\Disk Quotas.\r\n\r\nThis policy setting overrides customized settings that the program implementing the disk quota policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-diskquota"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_1","displayName":"Enabled","description":null,"helpText":null}]},"ce4190688a053c95":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_syncwaittime_syncwaittime_minutes","displayName":"Amount of time to wait (in seconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"ce175b5ff69b62ce":{"id":"device_vendor_msft_policy_config_admx_help_restrictrunfromhelp_comp_restrictrunfromhelp_edit","displayName":"Enter executables separated by commas:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"ce5259e3936fdae0":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_2_lbl_reminderinittimeoutspin","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"ce82f02e69422d31":{"id":"device_vendor_msft_policy_config_admx_srmfci_enablemanualux","displayName":"File Classification Infrastructure: Display Classification tab in File Explorer","description":"This policy setting controls whether the Classification tab is displayed in the Properties dialog box in File Explorer.\r\n\r\nThe Classification tab enables users to manually classify files by selecting properties from a list. Administrators can define the properties for the organization by using Group Policy, and supplement these with properties defined on individual file servers by using File Classification Infrastructure, which is part of the File Server Resource Manager role service.\r\n\r\nIf you enable this policy setting, the Classification tab is displayed.\r\n\r\nIf you disable or do not configure this policy setting, the Classification tab is hidden.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-srmfci#admx-srmfci-enablemanualux"],"categoryId":"dd9a3dad-5851-4899-a5c1-c23318986846","categoryName":"File Classification Infrastructure","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_enablemanualux_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_enablemanualux_1","displayName":"Enabled","description":null,"helpText":null}]},"ceee891e141e7e34":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_config_w32time_chainentrytimeout","displayName":"ChainEntryTimeout","description":null,"helpText":"","infoUrls":[],"categoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","categoryName":"Windows Time Service","options":null},"cec993b8228eb735":{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootglobal","displayName":"Integration Root User","description":"Specifies the location where symbolic links are created to the current version of a per-user published package. Shortcuts, file type associations, etc. are created pointing to this path. If empty, symbolic links are not used during publishing. Example: %localappdata%\\Microsoft\\AppV\\Client\\Integration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-integrationallowrootglobal"],"categoryId":"ea9a092f-dd93-41d4-9bbb-118de1213578","categoryName":"Integration","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootglobal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_integrationallowrootglobal_1","displayName":"Enabled","description":null,"helpText":null}]},"ce5549b1cc0edbfa":{"id":"device_vendor_msft_policy_config_audit_accountmanagement_audituseraccountmanagement","displayName":"Audit User Account Management","description":"This policy setting allows you to audit changes to user accounts. Events include the following: A user account is created, changed, deleted; renamed, disabled, enabled, locked out, or unlocked. A user account’s password is set or changed. A security identifier (SID) is added to the SID History of a user account. The Directory Services Restore Mode password is configured. Permissions on administrative user accounts are changed. Credential Manager credentials are backed up or restored. If you configure this policy setting, an audit event is generated when an attempt to change a user account is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a user account changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountmanagement_audituseraccountmanagement"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountmanagement_audituseraccountmanagement_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_audituseraccountmanagement_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_audituseraccountmanagement_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_audituseraccountmanagement_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"cefe81b7cfbb610b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled","displayName":"Enable AutoFill for addresses","description":"Setting the policy to True or leaving it unset gives users control of Autofill for addresses in the UI.\r\n\r\nSetting the policy to False means Autofill never suggests or fills address information, nor does it save additional address information that users submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ce27999c3260ff52":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability","displayName":"Incognito mode availability (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_0","displayName":"Incognito mode available","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_1","displayName":"Incognito mode disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_2","displayName":"Incognito mode forced","description":null,"helpText":null}]},"ceb85a8f162723f5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification","displayName":"Notify a user that a browser relaunch or device restart is recommended or required (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification_1","displayName":"Show a recurring prompt to the user indicating that a relaunch is recommended","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification_2","displayName":"Show a recurring prompt to the user indicating that a relaunch is required","description":null,"helpText":null}]},"cebe2859445d8105":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern","displayName":"Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome","description":"Contains a regular expression which is used to determine which Google accounts can be set as browser primary accounts in Google Chrome (i.e. the account that is chosen during the Sync opt-in flow).\r\n\r\nAn appropriate error is displayed if a user tries to set a browser primary account with a username that does not match this pattern.\r\n\r\nIf this policy is left not set or blank, then the user can set any Google account as a browser primary account in Google Chrome.\r\n\r\nExample value: .*@example\\.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_1","displayName":"Enabled","description":null,"helpText":null}]},"ced860c995184292":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_renderinchromeframelistdesc","displayName":"Always render the following URL patterns in Google Chrome Frame (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"cea74ef60ac5b434":{"id":"device_vendor_msft_policy_config_datausage_setcost3g","displayName":"Set 3G Cost","description":"This policy setting configures the cost of 3G connections on the local machine.\n\nIf this policy setting is enabled, a drop-down list box presenting possible cost values will be active. Selecting one of the following values from the list will set the cost of all 3G connections on the local machine:\n\n- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity constraints. \n\n- Fixed: Use of this connection is not restricted by usage charges and capacity constraints up to a certain data limit. \n\n- Variable: This connection is costed on a per byte basis.\n\nIf this policy setting is disabled or is not configured, the cost of 3G connections is Fixed by default.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-datausage#datausage-setcost3g"],"categoryId":"edf3754c-b22d-4946-a744-4773240a5883","categoryName":"WWAN Media Cost","options":[{"id":"device_vendor_msft_policy_config_datausage_setcost3g_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost3g_1","displayName":"Enabled","description":null,"helpText":null}]},"ce261c5da3799cf1":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees","displayName":"Microsoft Network Client Digitally Sign Communications If Server Agrees","description":"Microsoft network client: Digitally sign communications (if server agrees) This security setting determines whether the SMB client attempts to negotiate SMB packet signing. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether the SMB client component attempts to negotiate SMB packet signing when it connects to an SMB server. If this setting is enabled, the Microsoft network client will ask the server to perform SMB packet signing upon session setup. If packet signing has been enabled on the server, packet signing will be negotiated. If this policy is disabled, the SMB client will never negotiate SMB packet signing. Default: Enabled. Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing is enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkclient_digitallysigncommunicationsifserveragrees"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees_0","displayName":"Disable","description":"Disable","helpText":null}]},"ceb1ba3057661a4c":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun","displayName":"Prevent users from running Microsoft Lync","description":"\r\nPrevents users from running Microsoft Lync.\r\n\r\nIf you enable this policy setting, users cannot run Microsoft Lync.\r\n\r\nIf you disable or do not configure this policy setting, users can run Microsoft Lync.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1","displayName":"Enabled","description":null,"helpText":null}]},"ce553eb0449c00b6":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions","displayName":"Enable network prediction","description":"Enables network prediction and prevents users from changing this setting.\r\n\r\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\r\n\r\nIf you don't configure this policy, network prediction is enabled but the user can change it.\r\n\r\n* 0 = Predict network actions on any network connection\r\n\r\n* 2 = Don't predict network actions on any network connection","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"ce2631c2ae68ccfb":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended","displayName":"Enable Gamer Mode","description":"Microsoft Edge Gamer Mode allows gamers to personalize their browser with gaming themes and gives them the option of enabling Efficiency Mode for PC gaming, the Gaming feed on new tabs, sidebar apps for gamers, and more.\r\n\r\nIf you enable or don't configure this policy, users can opt into Gamer Mode.\r\nIf you disable this policy, Gamer Mode will be disabled.","helpText":"","infoUrls":[],"categoryId":"48965ad9-3011-4722-855b-7179fef89954","categoryName":"Games settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cea3d200fdbcb297":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection","displayName":"Configure enhanced hang detection for Internet Explorer mode","description":"Enhanced hang detection is a more granular approach to detecting hung webpages in Internet Explorer mode than what standalone Internet Explorer uses. When a hung webpage is detected, the browser will apply a mitigation to prevent the rest of the browser from hanging.\r\n\r\nThis setting allows you to configure the use of enhanced hang detection in case you run into incompatible issues with any of your websites. We recommend disabling this policy only if you see notifications such as \"(website) is not responding\" in Internet Explorer mode but not in standalone Internet Explorer.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nIf you set this policy to 'Enabled' (1) or don’t configure it, websites running in Internet Explorer mode will use enhanced hang detection.\r\n\r\nIf you set this policy to 'Disabled' (0), enhanced hang detection is disabled, and users will get the basic Internet Explorer hang detection behavior.\r\n\r\n* 0 = Enhanced hang detection disabled\r\n\r\n* 1 = Enhanced hang detection enabled\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_1","displayName":"Enabled","description":null,"helpText":null}]},"ce328ad3abe15ab4":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement","displayName":"Add-on Management","description":"Add-on Management","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_1","displayName":"Enabled","description":null,"helpText":null}]},"ce96e8f7d8bccf80":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_excelexe29","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_excelexe29_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_excelexe29_1","displayName":"True","description":null,"helpText":null}]},"ceedd831128a5048":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge Canary may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"ce0e7221aef8646e":{"id":"safari_privacy_permissiondefaults_generickey","displayName":"ANY","description":"The dictionary that defines the website privacy permission defaults. Each key represents a website.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":null},"ce5f3442c178c6be":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility","displayName":"Specify encryption compatibility (User)","description":"This policy setting allows you to specify the encrypted database compatibility.\r\n\r\nIf you enable this policy setting, the compatibility format specified will be applied during encryption for new files\r\n- Use legacy format\r\n- Use next generation format\r\n- All files save with next generation format\r\n\r\nIf you disable or do not configure this policy setting, the default setting, \"Use next generation format,\" will be applied.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_1","displayName":"Enabled","description":null,"helpText":null}]},"cea8fbdd6d327643":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint","displayName":"Microsoft PowerPoint 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft PowerPoint 2016.\r\nBy default, the user settings of Microsoft PowerPoint 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016powerpoint"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"ceebae70354a1a98":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_travel","displayName":"Travel (User)","description":"This policy setting configures the synchronization of user settings for the Travel app.\r\nBy default, the user settings of Travel sync between computers. Use the policy setting to prevent the user settings of Travel from synchronizing between computers.\r\nIf you enable this policy setting, Travel user settings continue to sync.\r\nIf you disable this policy setting, Travel user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-travel"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_travel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_travel_1","displayName":"Enabled","description":null,"helpText":null}]},"ce436d20ae138da5":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library4","displayName":"Location 5 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"ce3379b87083a1e3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on Shutdown (User)","description":"Controls the duration (in seconds) allowed for keepalive requests on browser shutdown.\r\n\r\nWhen specified, browser shutdown can be blocked up to the specified seconds,\r\nto process keepalive (https://fetch.spec.whatwg.org/#request-keepalive-flag) requests.\r\n\r\nThe default value (0) means this feature is disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},"ce92422c895b9073":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_renderercodeintegrityenabled","displayName":"Enable Renderer Code Integrity (User)","description":"Setting the policy to Enabled or leaving it unset turns Renderer Code Integrity on.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security and stability as unknown and potentially hostile code can load inside Google Chrome's renderer processes. Only turn off the policy if there are compatibility issues with third-party software that must run inside Google Chrome's renderer processes.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_renderercodeintegrityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_renderercodeintegrityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ce56f46c3d8bacfd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings","displayName":"Settings for Gemini integration (User)","description":"This setting allows Gemini app integrations.\r\n\r\n0/unset = Gemini integration will be available for users.\r\n\r\n1 = Gemini integration will not be available for users.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information, please check the Help Center article https://support.google.com/chrome/a?p=gemini_in_chrome.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_1","displayName":"Enabled","description":null,"helpText":null}]},"ce880c552bcc6727":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders48","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders48_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders48_1","displayName":"True","description":null,"helpText":null}]},"cec33f10ee03f0ea":{"id":"user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet","displayName":"Block Excel XLL Add-ins that come from an untrusted source (User)","description":"\r\n This policy setting allows you to block Excel XLL Add-ins that come from an untrusted source.\r\n\r\n If you enable this policy setting, you can set one of these options:\r\n - Block: XLL add-ins from untrusted sources are blocked. Users will receive a notification that the add-in was blocked.\r\n - Show Additional Warning: Show an additional warning prompt after the user chooses to enable an XLL add-in from an untrusted source.\r\n - Allow: XLL add-ins from an untrusted source are allowed.\r\n\r\n The exceptions when Excel XLL Add-ins will be allowed to run are:\r\n - The XLL is stored in a Trusted Location.\r\n - The XLL is digitally signed and the matching Trusted Publisher certificate is installed on the device.\r\n\r\n If you disable this policy setting, the settings configured in the Macro and Add-in Settings sections of the Trust Center determine whether Excel XLL Add-ins that come from an untrusted source will be allowed.\r\n\r\n If you disable or do not configure this policy setting, users will be able to override default behavior by modifying the registry.\r\n\r\n For more information, see https://support.microsoft.com/topic/1e3752e2-1177-4444-a807-7b700266a6fb.\r\n ","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"cef0242ab42a1302":{"id":"user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_entersitelistprompt","displayName":"Type the location (URL) of your Enterprise Mode IE website list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":null},"ce881dece750d1ae":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors","displayName":"Allow binary and script behaviors (User)","description":"This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached.\n\nIf you enable this policy setting, binary and script behaviors are available. If you select Administrator approved in the drop-down box, only behaviors listed in the Admin-approved Behaviors under Binary Behaviors Security Restriction policy are available.\n\nIf you disable this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.\n\nIf you do not configure this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowbinaryandscriptbehaviors"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_1","displayName":"Enabled","description":null,"helpText":null}]},"ce086d9fc0508924":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression","displayName":"Configure SIP compression mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_0","displayName":"Always disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_1","displayName":"Always enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_2","displayName":"Based on adaptor speed (default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_3","displayName":"Based on ping round-trip time","description":null,"helpText":null}]},"ce53a750014e124b":{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled","displayName":"Hide restore pages dialog after browser crash (User)","description":"This policy gives an option to hide the \"Restore pages\" dialog after Microsoft Edge has crashed. The \"Restore pages\" dialog gives users the option to restore the pages that were previously open before Microsoft Edge crashed.\r\n\r\nIf you enable this policy, the \"Restore pages\" dialog will not be shown. In the event of a crash, Microsoft Edge will not restore previous tabs and will start the session with a new tab page.\r\n\r\nIf you disable or don't set this policy, the \"Restore pages\" dialog will be shown.\r\n\r\nIf you set this policy, do not set the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) or 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy since that prevents history from being saved which also disables the dialog.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ce495ee326094b0e":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled","displayName":"Enable split screen feature in Microsoft Edge (User)","description":"This policy lets you configure the split screen feature in Microsoft Edge. This feature lets a user open two web pages in one tab.\r\n\r\nIf you enable or don't configure this policy, users can use the split screen feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't use the split screen feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ce4146db54d51f39":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash","displayName":"View XFA-based PDF files using IE Mode for allowed file hash. (User)","description":"XFA is a legacy technology that is deprecated by its original creators. It is not an ISO standard and as such, doesn't align with the modern web architecture. Continued use poses potential risks and vulnerabilities. For more information, see - 'ViewXFAPDFInIEModeAllowedOrigins' (View XFA-based PDF files using IE Mode for allowed file origin.).\r\n\r\nIf you enable this policy, you can configure the list of base64 encoded SHA256 file hashes for which XFA PDF files will automatically open in Microsoft Edge using IE Mode.\r\n\r\nIf you disable or don't configure this policy, XFA PDFs won't be considered for opening via IE mode except the files from file origin mentioned in Policy 'ViewXFAPDFInIEModeAllowedOrigins'\r\n\r\nFor more information, see - [Get-FileHash](https://go.microsoft.com/fwlink/?linkid=2294823), [Dot Net Convert API](https://go.microsoft.com/fwlink/?linkid=2294913).\r\n\r\nExample value:\r\n\r\npZGm1Av0IEBKARczz7exkNYsZb8LzaMrV7J32a2fFG4=\r\nnFeL0Q+9HX7WFI3RsmSDFTlUtrbclXH67MTdXDwWuu4=","helpText":"","infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash_1","displayName":"Enabled","description":null,"helpText":null}]},"cee16153aab66ddc":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink","displayName":"Specify custom help link (User)","description":"Specify a link for the Help menu or the F1 key.\r\n\r\nIf you enable this policy, an admin can specify a link for the Help menu or the F1 key.\r\n\r\nIf you disable or don't configure this policy, the default link for the Help menu or the F1 key is used.\r\n\r\nExample value: https://go.microsoft.com/fwlink/?linkid=2080734","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_1","displayName":"Enabled","description":null,"helpText":null}]},"ce5dbde1344c4bdc":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (User)","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if Sleeping Tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is enabled or is not configured and the user has enabled the Sleeping Tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"ce5f7950c4bc3391":{"id":"user_vendor_msft_policy_config_office16v10~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_allownonadminuserinstalllaps","displayName":"Allow users who aren’t admins to install language accessory packs (User)","description":"This policy setting controls whether users can install language accessory packs for Office even if they don’t have local administrator permissions on their devices. By default, users must have local administrator permissions on their devices to install language accessory packs.\r\n\r\nIf you enable this policy setting, users will be able to install language accessory packs for Office even if they don’t have local administrator permissions on their devices. They can install those language accessory packs by going to File > Options > Language in the app, such as Word.\r\n\r\nIf you disable or don’t configure this policy setting, users who don’t have local administrator permissions on their devices won’t be able to install language accessory packs. Someone with local administrator permissions on the device will need to install the language accessory packs for the user.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2161939.\r\n ","helpText":"","infoUrls":[],"categoryId":"0f6020d9-278b-4284-894a-bc4a70c8cf32","categoryName":"Display Language","options":[{"id":"user_vendor_msft_policy_config_office16v10~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_allownonadminuserinstalllaps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v10~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_allownonadminuserinstalllaps_1","displayName":"Enabled","description":null,"helpText":null}]},"ce8b90a274af34cd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastserviceserverurl0","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"ce5c14667ac97a84":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_publisher","displayName":"Microsoft Publisher (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8b7e662c-0410-4e33-ae11-edb7c717d914","categoryName":"Restricted Browsing","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_publisher_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_restrictedbrowsing_l_activaterestrictedbrowsing_l_publisher_1","displayName":"True","description":null,"helpText":null}]},"cec399af9bfb56e3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sakha","displayName":"Sakha (User)","description":"Enables the editing language Sakha","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sakha_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sakha_1","displayName":"Enabled","description":null,"helpText":null}]},"cefff4118d11d0cb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_l_descriptioncolon284","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"ce6f22724ed0d65f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc15","displayName":"Unsafe Location #15 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc15_1","displayName":"Enabled","description":null,"helpText":null}]},"ce4197ec9ebbd4c6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcustomtags_l_officeosmcustomtagstag2","displayName":"Tag 2: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":null},"ce7e18993eabbf55":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage","displayName":"Sent Items Folder Home Page (User)","description":"This policy setting allows you to modify the \"Show home page by default for this folder\" in the Home Page tab of the Sent Items Properties dialog box.\r\n\r\nIf you enable this policy setting, you will set the \"Show home page by default for this folder\" check box. You will also be able to enter a URL, which has a maximum limit of 129 characters.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show home page by default for this folder\" check box will not be checked.","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_sentitemsfolderhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},"cefd82c897a2d9ab":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"93a20c17-1e34-4778-8c95-91a46980ea75","categoryName":"Out of Office Assistant","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_900000","displayName":"15 minutes (default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_1200000","displayName":"20 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_1500000","displayName":"25 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_2100000","displayName":"35 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_2400000","displayName":"40 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_2700000","displayName":"45 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_3000000","displayName":"50 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_14400000","displayName":"4 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_outofofficeassistant_l_pollingoofwebsrvice_l_empty21_86400000","displayName":"24 hours","description":null,"helpText":null}]},"ce32e17926c6adb1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_savemessages","displayName":"Save Messages (User)","description":"Specifies the folder in which unsent messages are saved.","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_savemessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_savemessages_1","displayName":"Enabled","description":null,"helpText":null}]},"ce0f0b807ea7f5c9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy_v2","displayName":"Remove file extensions blocked as Level 1 (User)","description":"This policy setting controls which types of attachments (determined by file extension) Outlook prevents from being delivered. \r\n\r\nOutlook uses two levels of security to restrict users' access to files attached to e-mail messages or other items. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n\r\nIf you enable this policy setting, you can specify the removal of file type extensions as that Outlook classifies as Level 1--that is, to be blocked from delivery--by entering them in the text field provided separated by semicolons. \r\n\r\nIf you disable or do not configure this policy setting, Outlook classifies a number of potentially harmful file types (such as those with .exe, .reg, and .vbs extensions) as Level 1 and blocks files with those extensions from being delivered. \r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"cea55709c33e8fa4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_enablelinksinemailmessages","displayName":"Allow hyperlinks in suspected phishing e-mail messages (User) (Deprecated)","description":"This policy setting controls whether hyperlinks in suspected phishing e-mail messages in Outlook are allowed. \r\n\r\nIf you enable this policy setting, Outlook will allow hyperlinks in suspected phishing messages that are not also classified as junk e-mail. \r\n\r\nIf you disable or do not configure this policy setting, Outlook will not allow hyperlinks in suspected phishing messages, even if they are not classified as junk e-mail.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_enablelinksinemailmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_enablelinksinemailmessages_1","displayName":"Enabled","description":null,"helpText":null}]},"ced38c1c0b2d053a":{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2","displayName":"Junk E-mail protection level (User)","description":"This policy setting controls your Junk E-mail protection level. The Junk E-mail Filter in Outlook helps to prevent junk e-mail messages, also known as spam, from cluttering user's Inbox. The filter evaluates each incoming message based on several factors, including the time when the message was sent and the content of the message. The filter does not single out any particular sender or message type, but instead analyzes each message based on its content and structure to discover whether or not it is probably spam.\r\n\r\nIf you enable this policy setting, you can select one of the four listed options available. After you select an option, users will not be able to change it.\r\n\r\nIf you disable this policy setting, Outlook reverts to the user-defined protection level.\r\n\r\nIf you do not configure this policy setting, users can change their junk e-mail filtering options.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v6~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_junkemailprotectionlevel_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"ceb91d6063b6ef5f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_chartreftrackingenabled","displayName":"Allow formatting and labels to track data points (User)","description":"This policy setting governs how custom formatting and data labels react to data changes in a chart.\r\n\r\nIf you enable or do not configure this policy setting, when the user creates a new presentation, custom formatting and data labels follow data points as they move or change in any chart in the workbook.\r\n\r\nIf you disable this policy setting, custom formatting and data labels do not follow data points, but instead follow data point indices.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_chartreftrackingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_chartreftrackingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ce5a09ec2461159d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_showtasksschedulewarnings","displayName":"Show tasks schedule warnings (User)","description":"This policy setting will allow the display of red task warnings to indicate potential problems.\r\n\r\nIf you enable or do not configure this policy setting, a red task warning will be displayed to indicate potential problems.\r\n\r\nIf you disable this policy setting, a red task warning will not be displayed to indicate potential problems.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_showtasksschedulewarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_showtasksschedulewarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"ce2b9d707065cb5b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowdde","displayName":"Dynamic Data Exchange (User)","description":"This policy setting controls the ability to use Dynamic Data Exchange (DDE) in Word. By default, DDE isn’t allowed in Word. Allowing DDE isn’t recommended because of security concerns.\r\n \r\nIf you enable this policy setting, you can select either of the following options:\r\n \r\n-Limit Dynamic Data Exchange\r\n-Allow Dynamic Data Exchange\r\n \r\nIf you choose “Limit Dynamic Data Exchange,” DDE requests made to an already running program are allowed.  But, DDE requests that require another executable program to be launched aren’t allowed.\r\n \r\nIf you disable or don’t configure this policy setting, DDE isn’t allowed.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowdde_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_allowdde_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/cf.json b/public/intune-definitions/cf.json new file mode 100644 index 000000000000..55a4c6468edc --- /dev/null +++ b/public/intune-definitions/cf.json @@ -0,0 +1 @@ +{"cf769417e208f0dd":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev","displayName":"Target version override","description":"When this policy is enabled, and auto-update is enabled, Microsoft Edge will be updated to the version specified by this policy value.\r\n\r\nThe policy value must be a specific Microsoft Edge version, e.g. 83.0.499.12.\r\n\r\nIf a device has newer version of Microsoft Edge than the value specified, Microsoft Edge will remain on the newer version and not downgrade to the specified version.\r\n\r\nIf the specified version does not exist, or is improperly formatted, then Microsoft Edge will remain on its current version and not update to future versions automatically.","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},"cfd7a64d57226835":{"id":"com.apple.directoryservice.managed_admapgidattributeflag","displayName":"AD Map GID Attribute Flag","description":"If true, enables the AD Map GID Attribute key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_admapgidattributeflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_admapgidattributeflag_true","displayName":"True","description":null,"helpText":null}]},"cf5317e09a39a075":{"id":"com.apple.dock_static-only","displayName":"Static Only","description":"If true, uses the Static Apps and Static Others dictionaries for the dock and ignores any items in the Persistent Apps and Persistent Others dictionaries. If false, the contents are merged with the static items listed first.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_static-only_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_static-only_true","displayName":"True","description":null,"helpText":null}]},"cf9049c69261a4a7":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app","displayName":"Microsoft PowerPoint","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"cf57ca665b56a987":{"id":"com.apple.managedclient.preferences_defaultsearchprovidersearchurl","displayName":"Default search provider search URL","description":"Specifies the URL of the search engine used for a default search. The URL contains the string '{searchTerms}', which is replaced at query time by the terms the user is searching for.\n\nSpecify Bing's search URL as:\n\n'{bing:baseURL}search?q={searchTerms}'.\n\nSpecify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\n\nThis policy is required when you enable the \"DefaultSearchProviderEnabled\" policy; if you don't enable the latter policy, this policy is ignored.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchprovidersearchurl"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"cf4318d0793df93f":{"id":"com.apple.managedclient.preferences_webrtclocalhostiphandling","displayName":"Restrict exposure of local IP address by WebRTC","description":"Allows you to set whether or not WebRTC exposes the user's local IP address.\n\nIf you set this policy to \"AllowAllInterfaces\" ('default') or \"AllowPublicAndPrivateInterfaces\" ('default_public_and_private_interfaces'), WebRTC exposes the local IP address.\n\nIf you set this policy to \"AllowPublicInterfaceOnly\" ('default_public_interface_only') or \"DisableNonProxiedUdp\" ('disable_non_proxied_udp'), WebRTC doesn't expose the local IP address.\n\nIf you don't set this policy, or if you disable it, WebRTC exposes the local IP address.\n\n * 'default' = Allow all interfaces. This exposes the local IP address.\n * 'default_public_and_private_interfaces' = Allow public and private interfaces over http default route. This exposes the local IP address.\n * 'default_public_interface_only' = Allow public interface over http default route. This doesn't expose the local IP address.\n * 'disable_non_proxied_udp' = Use TCP unless proxy server supports UDP. This doesn't expose the local IP address.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webrtclocalhostiphandling"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webrtclocalhostiphandling_0","displayName":"Allow all interfaces. This exposes the local IP address","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webrtclocalhostiphandling_1","displayName":"Allow public and private interfaces over http default route. This exposes the local IP address","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webrtclocalhostiphandling_2","displayName":"Allow public interface over http default route. This doesn't expose the local IP address","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webrtclocalhostiphandling_3","displayName":"Use TCP unless proxy server supports UDP. This doesn't expose the local IP address","description":null,"helpText":null}]},"cfc5a5d3772a1315":{"id":"com.apple.subscribedcalendar.account_subcalaccountusessl","displayName":"Account Use SSL","description":"If true, enables SSL.","helpText":null,"infoUrls":[],"categoryId":"fa20bbc3-d25d-4a7f-a349-9b211d186e21","categoryName":"Subscribed Calendars","options":[{"id":"com.apple.subscribedcalendar.account_subcalaccountusessl_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.subscribedcalendar.account_subcalaccountusessl_true","displayName":"True","description":null,"helpText":null}]},"cfbce7cea690d9d0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.m365authpopupsinworkenabled","displayName":"Allow M365 authentication popups in work profiles","description":"This policy controls whether Microsoft Edge allows Microsoft 365 authentication pop-ups to bypass the pop-up blocker in work profiles.\n\nWhen users are signed in with a work account, some Microsoft 365 sites (for example, microsoft.com, cloud.microsoft, and visualstudio.com) may open authentication pop-ups to login.microsoftonline.com, login.live.com, or login.microsoft.com. These pop-ups are required to complete sign-in.\n\nIf you enable this policy or don't configure it, Microsoft 365 authentication pop-ups are allowed in work profiles.\n\nIf you disable this policy, Microsoft 365 authentication pop-ups follow the default settings like other pop-ups.","helpText":null,"infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.m365authpopupsinworkenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.m365authpopupsinworkenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"cf0dfe226ff30595":{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\n\nIf you want a new tab to always open on startup, choose 'RestoreOnStartupIsNewTabPage'.\n\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'RestoreOnStartupIsLastSession'. The browsing session is restored as it was. This option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\n\nIf you want to open a specific set of URLs, choose 'RestoreOnStartupIsURLs'.\n\nStarting in Microsoft Edge version 125, if you want to reopen URLs that were open the last time Microsoft Edge closed and open a specific set of URLs, choose 'RestoreOnStartupIsLastSessionAndURLs'.\n\nDisabling this setting is the same as leaving it not configured. Users can change it in Microsoft Edge.\n\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is only available on instances that are managed via MDM or joined to a domain via MCX.\n\nPolicy options mapping:\n\n* RestoreOnStartupIsNewTabPage (5) = Open a new tab\n\n* RestoreOnStartupIsLastSession (1) = Restore the last session\n\n* RestoreOnStartupIsURLs (4) = Open a list of URLs\n\n* RestoreOnStartupIsLastSessionAndURLs (6) = Open a list of URLs and restore the last session\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupisnewtabpage","displayName":"Open a new tab","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupislastsession","displayName":"Restore the last session","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupisurls","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupislastsessionandurls","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},"cfb3b7aae64a887d":{"id":"device_vendor_msft_passportforwork_dynamiclock_dynamiclock","displayName":"Dynamic Lock","description":"Enables/Disables Dyanamic Lock","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_dynamiclock_dynamiclock_false","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_passportforwork_dynamiclock_dynamiclock_true","displayName":"Enabled","description":"Enabled","helpText":null}]},"cff6d25c6425901a":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom","displayName":"From","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhoursfrom_23","displayName":"11 PM","description":null,"helpText":null}]},"cf6b5924b5d6658b":{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_2","displayName":"Specify a default color","description":"This policy setting controls the default color for window frames when the user does not specify a color. \r\n\r\nIf you enable this policy setting and specify a default color, this color is used in glass window frames, if the user does not specify a color. \r\n\r\nIf you disable or do not configure this policy setting, the default internal color is used, if the user does not specify a color. \r\n\r\nNote: This policy setting can be used in conjunction with the \"Prevent color changes of window frames\" setting, to enforce a specific color for window frames that cannot be changed by users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdefaultcolorizationcolor-2"],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":[{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_2_1","displayName":"Enabled","description":null,"helpText":null}]},"cff31e04b16b895e":{"id":"device_vendor_msft_policy_config_admx_explorer_admininfourl","displayName":"Set a support web page link","description":"Sets the target of the More Information link that will be displayed when the user attempts to run a program that is blocked by policy.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-admininfourl"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_explorer_admininfourl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_explorer_admininfourl_1","displayName":"Enabled","description":null,"helpText":null}]},"cffb37067a483846":{"id":"device_vendor_msft_policy_config_admx_globalization_localeuserrestrict_2_allowableuserlocaletaglist","displayName":"User Locales","description":null,"helpText":"","infoUrls":[],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":null},"cfe6a459e80569ca":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_fallbackorder","displayName":"Define the order of sources for downloading security intelligence updates","description":"This policy setting allows you to define the order in which different security intelligence update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources in order. Possible values are: “InternalDefinitionUpdateServer”, “MicrosoftUpdateServer”, “MMPC”, and “FileShares”\r\n\r\n For example: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC }\r\n\r\n If you enable this setting, security intelligence update sources will be contacted in the order specified. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted.\r\n\r\n If you disable or do not configure this setting, security intelligence update sources will be contacted in a default order.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-fallbackorder"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_fallbackorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_fallbackorder_1","displayName":"Enabled","description":null,"helpText":null}]},"cfb5344f5efe4295":{"id":"device_vendor_msft_policy_config_admx_msdt_msdttooldownloadpolicy","displayName":"Microsoft Support Diagnostic Tool: Restrict tool download","description":"This policy setting restricts the tool download policy for Microsoft Support Diagnostic Tool.\r\n\r\nMicrosoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals. For some problems, MSDT may prompt the user to download additional tools for troubleshooting.\r\n\r\nThese tools are required to completely troubleshoot the problem. If tool download is restricted, it may not be possible to find the root cause of the problem.\r\n\r\nIf you enable this policy setting for remote troubleshooting, MSDT prompts the user to download additional tools to diagnose problems on remote computers only. If you enable this policy setting for local and remote troubleshooting, MSDT always prompts for additional tool downloading.\r\n\r\nIf you disable this policy setting, MSDT never downloads tools, and is unable to diagnose problems on remote computers.\r\n\r\nIf you do not configure this policy setting, MSDT prompts the user before downloading any additional tools.\r\n\r\nNo reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately.\r\n\r\nThis policy setting will take effect only when MSDT is enabled.\r\n\r\nThis policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled, diagnostic scenarios are not executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msdt#admx-msdt-msdttooldownloadpolicy"],"categoryId":"f926f6e3-1bd6-4259-ae7c-e14108568882","categoryName":"Microsoft Support Diagnostic Tool","options":[{"id":"device_vendor_msft_policy_config_admx_msdt_msdttooldownloadpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msdt_msdttooldownloadpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"cf2aaa08056c9312":{"id":"device_vendor_msft_policy_config_admx_msi_msi_disablepatchuninstall","displayName":"Prohibit removal of updates","description":"This policy setting controls the ability for users or administrators to remove Windows Installer based updates.\r\n\r\nThis policy setting should be used if you need to maintain a tight control over updates. One example is a lockdown environment where you want to ensure that updates once installed cannot be removed by users or administrators.\r\n\r\nIf you enable this policy setting, updates cannot be removed from the computer by a user or an administrator. The Windows Installer can still remove an update that is no longer applicable to the product.\r\n\r\nIf you disable or do not configure this policy setting, a user can remove an update from the computer only if the user has been granted privileges to remove the update. This can depend on whether the user is an administrator, whether \"Disable Windows Installer\" and \"Always install with elevated privileges\" policy settings are set, and whether the update was installed in a per-user managed, per-user unmanaged, or per-machine context.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-msi-disablepatchuninstall"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_msi_disablepatchuninstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_msi_disablepatchuninstall_1","displayName":"Enabled","description":null,"helpText":null}]},"cfba66f95ce1ecd3":{"id":"device_vendor_msft_policy_config_admx_msi_msi_enforceupgradecomponentrules","displayName":"Enforce upgrade component rules","description":"This policy setting causes the Windows Installer to enforce strict rules for component upgrades.\r\n\r\nIf you enable this policy setting, strict upgrade rules will be enforced by the Windows Installer which may cause some upgrades to fail. Upgrades can fail if they attempt to do one of the following:\r\n\r\n(1) Remove a component from a feature.\r\nThis can also occur if you change the GUID of a component. The component identified by the original GUID appears to be removed and the component as identified by the new GUID appears as a new component.\r\n\r\n(2) Add a new feature to the top or middle of an existing feature tree.\r\nThe new feature must be added as a new leaf feature to an existing feature tree.\r\n\r\nIf you disable or do not configure this policy setting, the Windows Installer will use less restrictive rules for component upgrades.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-msi-enforceupgradecomponentrules"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_msi_enforceupgradecomponentrules_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_msi_enforceupgradecomponentrules_1","displayName":"Enabled","description":null,"helpText":null}]},"cf82fa053f2c327d":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_defcachesize","displayName":"Default cache size","description":"Limits the percentage of the computer's disk space that can be used to store automatically cached offline files.\r\n\r\nThis setting also disables the \"Amount of disk space to use for temporary offline files\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nAutomatic caching can be set on any network share. When a user opens a file on the share, the system automatically stores a copy of the file on the user's computer.\r\n\r\nThis setting does not limit the disk space available for files that user's make available offline manually.\r\n\r\nIf you enable this setting, you can specify an automatic-cache disk space limit.\r\n\r\nIf you disable this setting, the system limits the space that automatically cached files occupy to 10 percent of the space on the system drive.\r\n\r\nIf you do not configure this setting, disk space for automatically cached files is limited to 10 percent of the system drive by default, but users can change it.\r\n\r\nTip: To change the amount of disk space used for automatic caching without specifying a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then use the slider bar associated with the \"Amount of disk space to use for temporary offline files\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-defcachesize"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_defcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_defcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"cf122c8de8e2686b":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_onlinecachingsettings_lbl_onlinecachingsettingslist","displayName":"Enter network latency value in milliseconds","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"cf0e22084481b7ba":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10","displayName":"Internet Explorer 10","description":"This policy setting configures the synchronization of user settings of Internet Explorer 10.\r\nBy default, the user settings of Internet Explorer 10 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 10 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 10 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 10 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer10"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10_1","displayName":"Enabled","description":null,"helpText":null}]},"cf3f89b4cb5ea982":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended","displayName":"Block third party cookies","description":"Setting the policy to Enabled prevents webpage elements that aren't from the domain that's in the browser's address bar from setting cookies. Setting the policy to Disabled lets those elements set cookies and prevents users from changing this setting.\r\n\r\nLeaving it unset turns third-party cookies on, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cfbcb6dc4cf9bf0e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc","displayName":"Block images on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"cf4e5090f921bfa3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled","displayName":"Enable Incognito mode","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cfbd83c502c6943a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist","displayName":"Allow access to a list of URLs","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"cf147db5ef40da55":{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming","displayName":"Allow Cellular Data Roaming","description":"Allows or disallows cellular data roaming on the device. Device reboot is not required to enforce the policy. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowcellulardataroaming"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_0","displayName":"Do not allow cellular data roaming. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","description":"Do not allow cellular data roaming. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_1","displayName":"Allow cellular data roaming.","description":"Allow cellular data roaming.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_2","displayName":"Allow cellular data roaming on. The user cannot turn it off.","description":"Allow cellular data roaming on. The user cannot turn it off.","helpText":null}]},"cf3cfeda363943a8":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"cf73b4c93c5046ec":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses","displayName":"Block Office applications from injecting code into other processes","description":"This rule blocks code injection attempts from Office apps into other processes.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_warn","displayName":"Warn","description":null,"helpText":null}]},"cf2a72cd27eb9214":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware","displayName":"Use advanced protection against ransomware","description":"This rule provides an extra layer of protection against ransomware. It scans executable files entering the system to determine whether they're trustworthy. If the files closely resemble ransomware, this rule blocks them from running, unless they're in a trusted list or an exclusion list.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_warn","displayName":"Warn","description":null,"helpText":null}]},"cf48192abf4a707f":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart","displayName":"Process Start","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Start Process component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\ProcessStart\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart_1","displayName":"Enabled","description":null,"helpText":null}]},"cfa7dbcbc4b0fb85":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled","displayName":"Enable saving passkeys to the password manager","description":"This policy controls whether users can save passkeys in the built-in password manager. It does not limit access to, or change the contents of, passkeys already saved in the password manager.\r\n\r\nIf the PasswordManagerEnabled policy is Disabled, saving to the built-in password manager is disabled in general, including passkeys. In this case, this policy has no effect.\r\n\r\nIf this policy is enabled or not configured, users can save passkeys in the built-in password manager when signed in to Microsoft Edge.\r\n\r\nIf this policy is disabled, users cannot save new passkeys to the built-in password manager. Previously saved passkeys continue to work.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cf5b6fa5e64b373e":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended","displayName":"Force Microsoft Defender SmartScreen checks on downloads from trusted sources","description":"This policy setting lets you configure whether Microsoft Defender SmartScreen checks download reputation from a trusted source.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen checks the download’s reputation regardless of source.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen doesn’t check the download’s reputation when downloading from a trusted source.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"cf20ab18925ec085":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationreloadiniemodeallowed","displayName":"Allow unconfigured sites to be reloaded in Internet Explorer mode","description":"This policy allows users to reload unconfigured sites (that are not configured in the Enterprise Mode Site List) in Internet Explorer mode when browsing in Microsoft Edge and a site requires Internet Explorer for compatibility.\r\n\r\nAfter a site has been reloaded in Internet Explorer mode, \"in-page\" navigations will stay in Internet Explorer mode (for example, a link, script, or form on the page, or a server-side redirect from another \"in-page\" navigation). Users can choose to exit from Internet Explorer mode, or Microsoft Edge will automatically exit from Internet Explorer mode when a navigation that isn't \"in-page\" occurs (for example, using the address bar, the back button, or a favorite link).\r\n\r\nUsers can also optionally tell Microsoft Edge to use Internet Explorer mode for the site in the future. This choice will be remembered for a length of time managed by the 'InternetExplorerIntegrationLocalSiteListExpirationDays' (Specify the number of days that a site remains on the local IE mode site list) policy.\r\n\r\nIf the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) policy is set to 'IEMode', then sites explicitly configured by the 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy's site list to use Microsoft Edge can't be reloaded in Internet Explorer mode, and sites configured by the site list or by the 'SendIntranetToInternetExplorer' (Send all intranet sites to Internet Explorer) policy to use Internet Explorer mode can't exit from Internet Explorer mode.\r\n\r\nIf you enable this policy, users are allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nIf you disable this policy, users aren't allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nNote that if you enable this policy, it takes precedence over how you configured the 'InternetExplorerIntegrationTestingAllowed' (Allow Internet Explorer mode testing) policy, and that policy will be disabled.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationreloadiniemodeallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationreloadiniemodeallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"cfc349a90428174a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winprojexe118","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winprojexe118_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winprojexe118_1","displayName":"True","description":null,"helpText":null}]},"cf666967820b9f95":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_grooveexe28","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_grooveexe28_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_grooveexe28_1","displayName":"True","description":null,"helpText":null}]},"cf74c66fbf700edc":{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_control_list","displayName":"Permit remote control of this computer:","description":"","helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_control_list_1","displayName":"Allow helpers to remotely control the computer","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_control_list_0","displayName":"Allow helpers to only view the computer","description":null,"helpText":null}]},"cfdff2416072a89e":{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_service","displayName":"Allow unencrypted traffic","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network.\n\nIf you enable this policy setting, the WinRM client sends and receives unencrypted messages over the network.\n\nIf you disable or do not configure this policy setting, the WinRM client sends or receives only encrypted messages over the network.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowunencryptedtraffic-service"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_service_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_service_1","displayName":"Enabled","description":null,"helpText":null}]},"cf3483917b082c8c":{"id":"device_vendor_msft_policy_config_start_hideswitchaccount","displayName":"Hide Switch Account","description":"Enabling this policy hides \"Switch account\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideswitchaccount"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hideswitchaccount_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideswitchaccount_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"cfa54dc57cb7a5d1":{"id":"device_vendor_msft_wifi_profile_{ssid}_proxywpad","displayName":"Connect to this network, even when its not broadcasting its SSID","description":"The presence of the field enables WPAD for proxy lookup.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"categoryId":"c4e48b1b-6d88-434f-a717-d5bab28eb245","categoryName":"Wi-Fi Connection","options":null},"cf85c88bdb46b5c3":{"id":"sirisettings_sirisettings","displayName":"com.apple.configuration.siri.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"b85d9c04-4923-4fdf-a425-424686d47859","categoryName":"Siri Settings","options":null},"cf7a7ffe7c633205":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"cf750589c6ee70a4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay","displayName":"Delay before launching alternative browser (milliseconds) (User)","description":"Setting the policy to a number has Google Chrome show a message for that number of milliseconds, then it opens an alternative browser.\r\n\r\nLeaving the policy unset or set to 0 means navigating to a designated URL immediately opens it in an alternative browser.","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"cf37e0c7969d6755":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist","displayName":"Always render the following URL patterns in the host browser (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_1","displayName":"Enabled","description":null,"helpText":null}]},"cf0e0d6905517a9f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (User)","description":"Setting the policy to Enabled means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Safe Browsing's download protection service won't check downloads hosted on these domains. Its password protection service won't check for password reuse.\r\n\r\nLeaving the policy unset means default Safe Browsing protection applies to all resources.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"cfafb4a3e55e55b9":{"id":"user_vendor_msft_policy_config_excel16v7~policy~l_microsoftofficeexcel~l_miscellaneous168_l_exceldisableofficescripts","displayName":"Disable Office Scripts in Excel for Windows Desktop (User)","description":"This policy setting controls whether Office Scripts (including the relevant commands on the Automate tab) are available for use.\r\n\r\nIf you enable this policy setting, Office Scripts will not be available for use on the installed Excel app on a desktop.\r\n\r\nIf you disable or don't configure this policy setting, Office Scripts will be available for use provided all other prerequisites are met, including the applicable Microsoft 365 subscription license.\r\n\r\nNote: This policy setting is independent of Office Scripts settings available to administrators in the Microsoft 365 Admin Center. Admin Center settings are always honored by the Excel app regardless of the state of this policy; however, turning on this policy will also hide Office Scripts-related entry points.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v7~policy~l_microsoftofficeexcel~l_miscellaneous168_l_exceldisableofficescripts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v7~policy~l_microsoftofficeexcel~l_miscellaneous168_l_exceldisableofficescripts_1","displayName":"Enabled","description":null,"helpText":null}]},"cf4b2ec5e4c29141":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"cf5310d90c938c34":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00","displayName":"Logon options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"cf63a3a780832c82":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin","displayName":"Minimum SSL version enabled (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1","displayName":"TLS 1.0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null}]},"cf539f14c465cd6f":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites","displayName":"Block JavaScript optimizations on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites for which advanced JavaScript optimizations are disabled.\r\n\r\nDisabling JavaScript optimizations will mean that Microsoft Edge may render web content more slowly.\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the 'JavaScriptOptimizerBlockedForSites' (Block JavaScript optimizations on these sites) policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript optimizations disabled, but fabrikam.com will use the policy from 'DefaultJavaScriptOptimizerSetting' (Control use of JavaScript optimizers), if set, or default to JavaScript optimizations enabled. Blocklist entries have higher priority than allowlist entries, which in turn have higher priority than the configured default value.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptOptimizerSetting' applies to the site, if set, otherwise JavaScript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"cf96e507fb2e74cb":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled","displayName":"Configure Edge Scareware Blocker Protection (User)","description":"This policy setting allows administrators to control whether Microsoft Edge enables the Scareware Blocker, an AI-powered feature that provides warning messages to help protect users from potential tech scams.\r\n\r\nIf this policy is enabled, Edge Scareware Blocker will warn users of potential tech scams.\r\n\r\nIf this policy is disabled, Edge Scareware Blocker will not warn users of potential tech scams.\r\n\r\nIf this policy is not configured, Edge Scareware Blocker will not warn users of potential tech scams, but users can choose warnings in settings.\r\n\r\nBy configuring this policy, administrators determine whether users receive proactive scam warnings or must manually enable them.","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cf54bef3627504b7":{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled","displayName":"Enable Silent Printing (User)","description":"This policy controls whether Microsoft Edge uses silent printing.\r\n\r\nIf you enable this policy, Edge automatically closes the print preview window and prints to the default printer using its default settings. If the default printer is Save as PDF, the file is saved to the user's Downloads folder.\r\n\r\nIf you disable or don't configure this policy, silent printing is disabled. The print preview window stays open and the user must choose print settings as usual.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"cf0660124b6bd98d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastserviceservercapabilities1","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"cf7dd9989fb1f970":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06","displayName":"Configure presentation service in PowerPoint and Word 7 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_1","displayName":"Enabled","description":null,"helpText":null}]},"cfbef0936417d307":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceemail_l_emailadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"cf65dc77f17d1ea7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy7","displayName":"Places Bar Location 7 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy7_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy7_1","displayName":"Enabled","description":null,"helpText":null}]},"cfc4baf7be25bee6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_listfontnamesintheirfont","displayName":"List font names in their font (User)","description":"Checks/Unchecks the corresponding UI option. This option only applies to CommandBars UI.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_listfontnamesintheirfont_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_listfontnamesintheirfont_1","displayName":"Enabled","description":null,"helpText":null}]},"cf3095e3ee54285a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_openofficedocumentdirectlyinofficeapplication","displayName":"Open Office document directly in Office application (User)","description":"This policy setting allows you to choose whether Office documents located on web servers open directly in the registered application or through the web browser. \r\n\r\nIf you enable this policy setting, files will open directly in the associated Office application, bypassing the web browser.\r\n\r\nIf you disable this policy setting files will open through the web browser.","helpText":"","infoUrls":[],"categoryId":"0775f21c-9ca1-446d-b1dc-3cea45f15605","categoryName":"Files","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_openofficedocumentdirectlyinofficeapplication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_openofficedocumentdirectlyinofficeapplication_1","displayName":"Enabled","description":null,"helpText":null}]},"cfc061559cc497cc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_showolepackageobj","displayName":"Display OLE package objects (User)","description":"By default, OLE package objects are not displayed in e-mail messages. You can change this behavior so that the package appears in the body of the e-mail message as an icon that represents an embedded or linked OLE object. When users double-click the icon representing the package, the program used to create the object either plays the object or opens and displays it. Be aware that the icon for OLE package objects can be easily changed and used to disguise malicious files.\r\n\r\nTo set Exchange Security Form settings by using Group Policy, note that this policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_showolepackageobj_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_showolepackageobj_1","displayName":"Enabled","description":null,"helpText":null}]},"cf2c57e5d96398ea":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_recentlyusedfilelist","displayName":"Number of entries in the Recent Drawings list (User)","description":"This policy setting specifies the number of entries displayed in the Recent Drawings list that appears when users click Open on the File tab in Backstage view. \r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent Drawings list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Drawings list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_recentlyusedfilelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_recentlyusedfilelist_1","displayName":"Enabled","description":null,"helpText":null}]},"cfd0a24ae9f11e51":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_optionscustomizeribbon_l_displaydevelopertab","displayName":"Display Developer tab in the Ribbon (User)","description":"This policy setting controls whether the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you enable this policy setting, the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you disable this policy setting, the Developer tab will not be displayed in the Ribbon.\r\n\r\nIf you do not configure this policy setting, the Developer tab will not be displayed in the Ribbon, but its visibility can be changed via a setting in the application Options dialog box.","helpText":"","infoUrls":[],"categoryId":"2764869c-54a3-462b-bc72-c580621ab6bb","categoryName":"Customize Ribbon","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_optionscustomizeribbon_l_displaydevelopertab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_optionscustomizeribbon_l_displaydevelopertab_1","displayName":"Enabled","description":null,"helpText":null}]},"cfc7b2a69c962b56":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_leftscrollbar","displayName":"Left scroll bar (User)","description":"Checks/unchecks the corresponding UI option. This option is only available if support for right-to-left languages is enabled through Microsoft Office Language Preferences. This setting also sets Right ruler (Print view only).","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_leftscrollbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_leftscrollbar_1","displayName":"Enabled","description":null,"helpText":null}]},"cf7e451314257a33":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_weboptions~l_files_l_checkifwordisthedefaulteditorforallotherwebpages","displayName":"Check if Word is the default editor for all other Web pages (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"d804205d-6c12-4f40-86a0-aa5a5355370f","categoryName":"Files","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_weboptions~l_files_l_checkifwordisthedefaulteditorforallotherwebpages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_weboptions~l_files_l_checkifwordisthedefaulteditorforallotherwebpages_1","displayName":"Enabled","description":null,"helpText":null}]},"cfac92ffe2cc86ce":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_descriptioncolon34","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"cf26815f5e62e034":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders55","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders55_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders55_1","displayName":"True","description":null,"helpText":null}]},"cf3ff74a20ff8da5":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_compareresultingdocument_l_compareresultingdocumentpart","displayName":"Document used for result of compare: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_compareresultingdocument_l_compareresultingdocumentpart_0","displayName":"Original Document","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_compareresultingdocument_l_compareresultingdocumentpart_1","displayName":"Revised Document","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_compareresultingdocument_l_compareresultingdocumentpart_2","displayName":"New document","description":null,"helpText":null}]},"cfbd1cb6f091a7c6":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_icmptypesandcodes","displayName":"ICMP Types And Codes","description":"\n String value. Multiple ICMP type+code pairs can be included in the string by separating each value with a \",\". If more than one ICMP type+code pair is specified, the strings must be separated by a comma.\n To specify all ICMP types and codes, use the \"*\" character. For specific ICMP types and codes, use the \":\" to separate the type and code.\n The following are valid examples: 3:4 or 1:*. The \"*\" character can be used to represent any code. The \"*\" character can't be used to specify any type, examples such as \"*:4\" or \"*:*\" are invalid.\n When setting this field in a firewall rule, the protocol field must also be set, to either 1 (ICMP) or 58 (IPv6-ICMP).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/d0.json b/public/intune-definitions/d0.json new file mode 100644 index 000000000000..1ab9e4dd7d3a --- /dev/null +++ b/public/intune-definitions/d0.json @@ -0,0 +1 @@ +{"d0606fc1df209361":{"id":"app_allowed_deniedapps","displayName":"Denied Apps","description":"If present, the device prevents showing or launching apps with bundle IDs in the\narray. Include the value `com.apple.webapp` to restrict all webclips. This applies to\nApp Store apps, marketplace apps, and locally installed apps (using Configurator,\nXcode, and so forth).\n> Note:\n> Denying system apps may disable other functionality. For example, denying the App\nStore app may prevent users from accepting the terms and conditions for the user-based\nVolume Purchase Program (VPP).","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"d04a71682214b2c0":{"id":"app_privacy_permissiondefaults_generickey_locationaccuracy","displayName":"Location Accuracy","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for access to precise location.\n* `Approximate`: The app privacy permission default is set to allow approximate access to location.\n* `Precise`: The app privacy permission default is set to allow precise access to location.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_locationaccuracy_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_locationaccuracy_1","displayName":"Approximate","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_locationaccuracy_2","displayName":"Precise","description":null,"helpText":null}]},"d09111034bb94a27":{"id":"com.apple.applicationaccess_allowfindmyfriends","displayName":"Allow Find My Friends","description":"If false, disables Find My Friends in the Find My app. Requires a supervised device. Available in iOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfindmyfriends_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfindmyfriends_true","displayName":"True","description":null,"helpText":null}]},"d01195008dc1babb":{"id":"com.apple.cellularprivatenetwork.managed_geofences_item_geofenceid","displayName":"Geofence Id","description":"A geofence identifier that's unique within a list of geofences.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"d04fa2f6e2cf971e":{"id":"com.apple.managedclient.preferences_accessibilityimagelabelsenabled","displayName":"Let screen reader users get image descriptions from Microsoft","description":"Lets screen reader users get descriptions of unlabeled images on the web.\n\nIf you enable or don't configure this policy, users have the option of using an anonymous Microsoft service. This service provides automatic descriptions for unlabeled images users encounter on the web when they're using a screen reader.\n\nIf you disable this policy, users can't enable the Get Image Descriptions from Microsoft feature.\n\nWhen this feature is enabled, the content of images that need a generated description is sent to Microsoft servers to generate a description.\n\nNo cookies or other user data is sent to Microsoft, and Microsoft doesn't save or log any image content.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#accessibilityimagelabelsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_accessibilityimagelabelsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_accessibilityimagelabelsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d06d7efa74533d30":{"id":"com.apple.managedclient.preferences_mutationeventsenabled","displayName":"Enable deprecated/removed Mutation Events (Deprecated)","description":"This policy provides a temporary opt-in back to a deprecated and removed set of platform events named Mutation Events.\n\nIf you enable this policy, mutation events will continue to be fired, even if they've been disabled by default for normal web users.\n\nIf you disable or don't configure this policy, these events will not be fired.\n\nThis policy is a temporary workaround, and enterprises should still work to remove their dependencies on these mutation events.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#mutationeventsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_mutationeventsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_mutationeventsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d0fa542d70661195":{"id":"com.apple.managedclient.preferences_newtabpagecompanylogo_default_logo","displayName":"Default logo","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"d03bfe6b235bd5ea":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on modem ring","displayName":"Wake On Modem Ring","description":"If true, enables \"Wake for modem ring.\"","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on modem ring_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on modem ring_1","displayName":"True","description":null,"helpText":null}]},"d0bd6268747d6da6":{"id":"com.apple.nsextension_com.apple.nsextension","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"d875dca1-dc97-4cc5-9df3-c50b813622a3","categoryName":"NS Extension Management","options":null},"d008344b8ad1569b":{"id":"com.apple.security.firewall_allowsignedapp","displayName":"Allow Signed App","description":"If true, allows downloaded signed software to receive incoming connections. Available in macOS 12.3 and later.","helpText":null,"infoUrls":[],"categoryId":"70b5da13-9c31-4857-890d-b7eb223729c3","categoryName":"Firewall","options":[{"id":"com.apple.security.firewall_allowsignedapp_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.security.firewall_allowsignedapp_true","displayName":"True","description":null,"helpText":null}]},"d07d61580d237e3d":{"id":"com.apple.security.firewall_enablestealthmode","displayName":"Enable Stealth Mode","description":"If true, enables stealth mode. ","helpText":null,"infoUrls":[],"categoryId":"70b5da13-9c31-4857-890d-b7eb223729c3","categoryName":"Firewall","options":[{"id":"com.apple.security.firewall_enablestealthmode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.security.firewall_enablestealthmode_true","displayName":"True","description":null,"helpText":null}]},"d0b23de53031feb7":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_2_cse_3g_default_to_slowlink_computer","displayName":"Always treat WWAN connections as a slow link","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_2_cse_3g_default_to_slowlink_computer_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_2_cse_3g_default_to_slowlink_computer_1","displayName":"True","description":null,"helpText":null}]},"d0f8a385ba5251a5":{"id":"device_vendor_msft_policy_config_admx_icm_removewindowsupdate_icm","displayName":"Turn off access to all Windows Update features","description":"This policy setting allows you to remove access to Windows Update.\r\n\r\nIf you enable this policy setting, all Windows Update features are removed. This includes blocking access to the Windows Update website at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy setting also prevents Device Manager from automatically installing driver updates from the Windows Update website.\r\n\r\nIf you disable or do not configure this policy setting, users can access the Windows Update website and enable automatic updating to receive notifications and critical updates from Windows Update.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-removewindowsupdate-icm"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_removewindowsupdate_icm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_removewindowsupdate_icm_1","displayName":"Enabled","description":null,"helpText":null}]},"d0872e40da20e1ca":{"id":"device_vendor_msft_policy_config_admx_msi_safeforscripting","displayName":"Prevent Internet Explorer security prompt for Windows Installer scripts","description":"This policy setting allows Web-based programs to install software on the computer without notifying the user.\r\n\r\nIf you disable or do not configure this policy setting, by default, when a script hosted by an Internet browser tries to install a program on the system, the system warns users and allows them to select or refuse the installation.\r\n\r\nIf you enable this policy setting, the warning is suppressed and allows the installation to proceed.\r\n\r\nThis policy setting is designed for enterprises that use Web-based tools to distribute programs to their employees. However, because this policy setting can pose a security risk, it should be applied cautiously.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-safeforscripting"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_safeforscripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_safeforscripting_1","displayName":"Enabled","description":null,"helpText":null}]},"d0962d92887f652e":{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disablewpd","displayName":"Turn off ability to configure Windows Portable Device (WPD)","description":null,"helpText":"","infoUrls":[],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":[{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disablewpd_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disablewpd_1","displayName":"True","description":null,"helpText":null}]},"d010389bbc15c1ad":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-internetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"d0009777bd98f154":{"id":"device_vendor_msft_policy_config_audit_system_auditothersystemevents","displayName":"System Audit Other System Events","description":"This policy setting allows you to audit any of the following events: Startup and shutdown of the Windows Firewall service and driver. Security policy processing by the Windows Firewall Service. Cryptography key file and migration operations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#system_auditothersystemevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_system_auditothersystemevents_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditothersystemevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditothersystemevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditothersystemevents_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"d089222032b0b0bd":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action on startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open New Tab Page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"d0e49c82e9ca0ec4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls","displayName":"Automatically grant permission to sites to connect all serial ports.","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available serial ports.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn Chrome OS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultSerialGuardSetting, SerialAskForUrls, SerialBlockedForUrls and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"d002497a71ac3a25":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes","displayName":"Supported authentication schemes","description":"Setting the policy specifies which HTTP authentication schemes Google Chrome supports.\r\n\r\nLeaving the policy unset employs all 4 schemes.\r\n\r\nValid values:\r\n\r\n* basic\r\n\r\n* digest\r\n\r\n* ntlm\r\n\r\n* negotiate\r\n\r\nNote: Separate multiple values with commas.\r\n\r\nExample value: basic,digest,ntlm,negotiate","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_1","displayName":"Enabled","description":null,"helpText":null}]},"d021f90400a22c33":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_webappsettings","displayName":"Web App management settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"d0d87c2e39c10ffa":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_2","displayName":"Denies the Window Management permission on all sites by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_3","displayName":"Ask every time a site wants obtain the Window Management permission","description":null,"helpText":null}]},"d0136681d4ff0969":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowlessprivilegedsites"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"d0031914ba567ad4":{"id":"device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge","displayName":"Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.","description":"This setting lets you decide whether to open all sites not included in the Enterprise Mode Site List in Microsoft Edge. If you use this setting, you must also turn on the Administrative Templates\\Windows Components\\Internet Explorer\\Use the Enterprise Mode IE website list policy setting and you must include at least one site in the Enterprise Mode Site List.\n\nEnabling this setting automatically opens all sites not included in the Enterprise Mode Site List in Microsoft Edge.\n\nDisabling, or not configuring this setting, opens all sites based on the currently active browser.\n\nNote: If you've also enabled the Administrative Templates\\Windows Components\\Microsoft Edge\\Send all intranet sites to Internet Explorer 11 policy setting, then all intranet sites will continue to open in Internet Explorer 11.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-sendsitesnotinenterprisesitelisttoedge"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_1","displayName":"Enabled","description":null,"helpText":null}]},"d04fb8a921eca974":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended","displayName":"Enable AutoFill for addresses","description":"Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills in address information, nor does it save additional address information that the user might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for addresses in the user interface.\r\n\r\nNote that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won't suggest or AutoFill any previous entries.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d05b1f0ba29d1183":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_downloaddirectory","displayName":"Set download directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":null},"d00965bc4490a02e":{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled","displayName":"Enable Related Website Sets","description":"This policy lets you control the enablement of the Related Website Sets feature. Related Website Sets (RWS) is a way for an organisation to declare relationships among sites, so that Microsoft Edge allows limited third-party cookie access for specific purposes across those sites.\r\n\r\nIf this policy set to True or unset, the Related Website Sets feature is enabled.\r\n\r\nIf this policy is set to False, the Related Website Sets feature is disabled.","helpText":"","infoUrls":[],"categoryId":"6d529e48-5477-4ceb-8ff7-c6e959a0e24f","categoryName":"Related Website Sets Settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d0f4c4f7723f9198":{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_onfileattachedenterpriseconnector","displayName":"Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d00dc55bf20fa260":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility","displayName":"Configure whether the Discover or Work feed tabs are shown on the New Tab Page. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility_0","displayName":"Enable both Work and Discover tabs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility_1","displayName":"Enable only Work tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_configurentpfeedtabvisibility_configurentpfeedtabvisibility_2","displayName":"Enable only Discover tab","description":null,"helpText":null}]},"d0819f7793d267c9":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled","displayName":"Use Windows proxy resolver","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nUse Windows to resolve proxies for all browser networking instead of the proxy resolver built into Microsoft Edge. The Windows proxy resolver enables Windows proxy features such as DirectAccess/NRPT.\r\n\r\nThis policy comes with the problems described by https://crbug.com/644030. It causes PAC files to be fetched and executed by Windows code, including PAC files set via the 'ProxyPacUrl' (Set the proxy .pac file URL) policy. Since Network Fetches for the PAC file happen via Windows instead of Microsoft Edge code, network policies such as 'DnsOverHttpsMode' (Control the mode of DNS-over-HTTPS) will not apply to network fetches for a PAC file.\r\n\r\nThis policy is deprecated. It will be superseded by a similar feature in a future release, see https://crbug.com/1032820.\r\n\r\nIf you enable this policy, the Windows proxy resolver will be used.\r\n\r\nIf you disable or don't configure this policy, the Microsoft Edge proxy resolver will be used.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d0adde4ae13ed20e":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist","displayName":"Allow media autoplay on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to autoplay media.\r\n\r\nIf you don't configure this policy, the global default value from the 'AutoplayAllowed' (Allow media autoplay for websites) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nNote: * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"d0bfb24be1cfc0b0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_onenoteexe152","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_onenoteexe152_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_onenoteexe152_1","displayName":"True","description":null,"helpText":null}]},"d0fb7dc51a2504bd":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels_forcedenytheseapps","displayName":"Let Apps Access System AI Models Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the use text and image generation features of Windows. This setting overrides the default LetAppsAccessSystemAIModels policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d001a031ca020aeb":{"id":"device_vendor_msft_policy_config_servicecontrolmanager_svchostprocessmitigation","displayName":"Enable svchost.exe mitigation options","description":"This policy setting enables process mitigation options on svchost.exe processes.\n\nIf you enable this policy setting, built-in system services hosted in svchost.exe processes will have stricter security policies enabled on them.\n\nThis includes a policy requiring all binaries loaded in these processes to be signed by microsoft, as well as a policy disallowing dynamically-generated code.\n\nIf you disable or do not configure this policy setting, these stricter security settings will not be applied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-servicecontrolmanager#servicecontrolmanager-svchostprocessmitigation"],"categoryId":"6c7168c3-6f34-4086-af0b-ed0b74301dc9","categoryName":"Security Settings","options":[{"id":"device_vendor_msft_policy_config_servicecontrolmanager_svchostprocessmitigation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_servicecontrolmanager_svchostprocessmitigation_1","displayName":"Enabled","description":null,"helpText":null}]},"d00acbe64d32f3be":{"id":"device_vendor_msft_policy_config_settings_allowregion","displayName":"Allow Region","description":"Allows the user to change the region settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowregion"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowregion_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowregion_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"d047b39a1a0bd26f":{"id":"device_vendor_msft_policy_config_system_disabledevicedelete","displayName":"Disable Device Delete","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disabledevicedelete"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_disabledevicedelete_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disabledevicedelete_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},"d09a0fa503854421":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edge","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"d073ca37666cf579":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},"d01c4ad8326d3afb":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_disablerollback","displayName":"Disable the ability to rollback or undo a Visual Studio update","description":"This policy determines whether the user can undo an update and rollback Visual Studio to the previously installed version.\r\n\r\nIf set to 1 (enabled), then users will be prevented from accessing the rollback capability, which will prevent Visual Studio from reverting the most recent update which may contain a security fix.\r\n\r\nIf set to 0 (disabled) or missing entirely, then users will be able to access the rollback feature in Visual Studio, and will be able to undo an update and rollback their Visual Studio instances to the previously installed version. Note: The default unconfigured setting enables the ability to rollback a Visual Studio update.\r\n\r\nThis policy applies to release instances of Visual Studio 2022 or higher that may be installed on the machine.\r\n\r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_disablerollback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_disablerollback_1","displayName":"Enabled","description":null,"helpText":null}]},"d0ff3e242e795e79":{"id":"device_vendor_msft_trustedcertificate_destinationstore","displayName":"Destination Store","description":"Destination store for trusted certificates.","helpText":"","infoUrls":[],"categoryId":"dd9e4ae2-a432-4c48-a73a-52c75c3e5279","categoryName":"Trusted Certificate","options":null},"d0a4184dffd501a9":{"id":"enrollment_restriction_blockmdmenrollment","displayName":"Block MDM enrollment","description":"Choose to block enrollment based on filters. Add a filter in the Assignments tab. To create a new filter, go to Filters section under Tenant admin.","helpText":"","infoUrls":[],"categoryId":"a93cb07c-fa96-42af-8987-40f78eae10bd","categoryName":null,"options":[{"id":"enrollment_restriction_blockmdmenrollment_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_restriction_blockmdmenrollment_1","displayName":"Yes","description":null,"helpText":null}]},"d01dad64f83cfb52":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfrominternet","displayName":"Hide the \"Add programs from Microsoft\" option (User)","description":"Removes the \"Add programs from Microsoft\" section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update.\r\n\r\nIf you disable this setting or do not configure it, \"Add programs from Microsoft\" is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to connect to Windows Update.\r\n\r\nNote: If the \"Hide Add New Programs page\" setting is enabled, this setting is ignored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddfrominternet"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"d09b6ea89564dccf":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_connectionsharingnat","displayName":"Connection Sharing (NAT) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-connectionsharingnat"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_connectionsharingnat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_connectionsharingnat_1","displayName":"Enabled","description":null,"helpText":null}]},"d096c5ca3359b5a7":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint","displayName":"Microsoft PowerPoint 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft PowerPoint 2013.\r\nBy default, the user settings of Microsoft PowerPoint 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013powerpoint"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"d0ff9f21d791cc52":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled","displayName":"Ping the settings storage location before sync (User)","description":"This policy setting allows you to configure the User Experience Virtualization (UE-V) sync provider to ping the settings storage path before attempting to sync settings. If the ping is successful then the sync provider attempts to synchronize the settings packages. If the ping is unsuccessful then the sync provider doesn’t attempt the synchronization. \r\nIf you enable this policy setting, the sync provider pings the settings storage location before synchronizing settings packages.\r\nIf you disable this policy setting, the sync provider doesn’t ping the settings storage location before synchronizing settings packages. \r\nIf you do not configure this policy, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncproviderpingenabled"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d004974ca8d13737":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended","displayName":"Enable AutoFill for addresses (User)","description":"Setting the policy to True or leaving it unset gives users control of Autofill for addresses in the UI.\r\n\r\nSetting the policy to False means Autofill never suggests or fills address information, nor does it save additional address information that users submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d07a1607bbfb197e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage","displayName":"Force enable spellcheck languages (User)","description":"Force-enables spellcheck languages. Unrecognized languages in the list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be enabled for the languages specified, in addition to the languages for which the user has enabled spellcheck.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the SpellcheckEnabled policy is set to false, this policy will have no effect.\r\n\r\nIf a language is included in both this policy and the SpellcheckLanguageBlocklist policy, this policy is prioritized and the spellcheck language is enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_1","displayName":"Enabled","description":null,"helpText":null}]},"d077f09fb31c4d44":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls","displayName":"Block read access via the File System API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nLeaving the policy unset means DefaultFileSystemReadGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with FileSystemReadAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"d0be969f85e35380":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcesafesearch","displayName":"Force SafeSearch (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"d0a01de7e6f372be":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt","displayName":"Prompt users to re-authenticate to the profile (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt_0","displayName":"Do not prompt for reauth","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt_1","displayName":"Prompt for reauth in a tab","description":null,"helpText":null}]},"d026eca1d45054b0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"d0c6cb4a8afca099":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, the permission is set to High Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonejavapermissions"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"d0f4e0954b3d7186":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"d05b9258a3cddba5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_popupsblockedforurlsdesc","displayName":"Block pop-up windows on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"d0e35ddf1116af85":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode","displayName":"Configure proxy server settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},"d049b509528a9f3a":{"id":"user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext","displayName":"Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane (User)","description":"This policy controls whether Copilot in the Microsoft Edge sidepane can access Microsoft Edge page content. This includes page summarization and similar contextual queries sent to Copilot.\r\n\r\nThis policy only applies to users who are signed in to Microsoft Edge with their Entra account and are using Copilot in the sidepane. This policy applies to all Copilot products in the Microsoft Edge sidepane - namely, Microsoft 365 Copilot Business Chat and Microsoft Copilot with enterprise data protection (EDP).\r\n\r\nIf you enable this policy, Copilot will be able to access Microsoft Edge page content when users ask a contextual query to Copilot in the Microsoft Edge sidepane.\r\n\r\nIf you disable this policy, Copilot will not be able to access Microsoft Edge page content.\r\n\r\nIf you don't configure this policy, the default behavior is as follows:\r\n\r\n- For non-EU countries, access is enabled by default.\r\n\r\n- For EU countries, access is disabled by default.\r\n\r\n- In both cases, if the policy is not configured, users can enable or disable Copilot access to Microsoft Edge page content using the toggle in Microsoft Edge settings.\r\n\r\nExceptions to the preceding behavior include when a page is protected using data loss prevention (DLP) measures. In that case, Copilot will not be able to access Microsoft Edge page content even when this policy is enabled. This behavior is to ensure the integrity of DLP.\r\n\r\nLearn more about Copilot's data usage and consent at https://go.microsoft.com/fwlink/?linkid=2288056","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},"d0d7b795bdbbf3fe":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints (User)","description":"This policy enables a list of TLS certificates that should be trusted by Microsoft Edge for server authentication, with constraints added outside the certificate. If no constraint of a certain type is present, then any name of that type is allowed.\r\nCertificates should be base64-encoded. At least one constraint must be specified for each certificate.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"certificate\": \"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\",\r\n \"constraints\": {\r\n \"permitted_dns_names\": [\r\n \"example.org\"\r\n ],\r\n \"permitted_cidrs\": [\r\n \"10.1.1.0/24\"\r\n ]\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_1","displayName":"Enabled","description":null,"helpText":null}]},"d058804413966438":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault","displayName":"Configure Automatic HTTPS (User)","description":"This policy lets you manage settings for 'AutomaticHttpsDefault' (Configure Automatic HTTPS), which switches connections from HTTP to HTTPS.\r\n\r\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\r\n\r\nNote: The 'UpgradeCapableDomains' configuration requires a component list, and will not upgrade these connections if 'ComponentUpdatesEnabled' (Enable component updates in Microsoft Edge) is set to 'Disabled'.\r\n\r\nIf you don't configure this policy, 'AutomaticHttpsDefault' will be enabled, and will only upgrade connections on domains likely to support HTTPS.\r\n\r\nPolicy options mapping:\r\n\r\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\r\n\r\n* UpgradeCapableDomains (1) = Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\r\n\r\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"d025da6c3e528161":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishmexico","displayName":"Spanish (Mexico) (User)","description":"Enables the editing language Spanish (Mexico)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishmexico_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishmexico_1","displayName":"Enabled","description":null,"helpText":null}]},"d099c58d79cfc65c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_l_chooseuistatewhenoscansupportfeature","displayName":"Choose UI State when OS can support feature: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_l_chooseuistatewhenoscansupportfeature_0","displayName":"Hidden","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_l_chooseuistatewhenoscansupportfeature_1","displayName":"All config UI enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_l_chooseuistatewhenoscansupportfeature_2","displayName":"Enable only On/Off control but not config UI","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_l_chooseuistatewhenoscansupportfeature_3","displayName":"Enable config UI when settings are pre-deployed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_enableexchangeoverinternetuserinterface_l_chooseuistatewhenoscansupportfeature_4","displayName":"Disable but show all config UI","description":null,"helpText":null}]},"d074c95b41702315":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_defaultpublisherdirection","displayName":"Default Publisher direction (User)","description":"Specifies the default layout orientation.","helpText":"","infoUrls":[],"categoryId":"77b0357b-412e-4a81-9469-e20a5f1345fd","categoryName":"Complex scripts","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_defaultpublisherdirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_defaultpublisherdirection_1","displayName":"Enabled","description":null,"helpText":null}]},"d0477a910d626eec":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_setdefaulttextflowdirection","displayName":"Set default text flow direction (User)","description":"This policy setting allows you to set the default text flow between Right-to-Left (RTL) and Left-to-Right (LTR). \r\n\r\nIf you enable this policy setting, you may choose whether text will flow RTL or LTR.\r\n\r\nIf you disable or not configure this policy setting, the default text flow setting is used.","helpText":"","infoUrls":[],"categoryId":"77b0357b-412e-4a81-9469-e20a5f1345fd","categoryName":"Complex scripts","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_setdefaulttextflowdirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_setdefaulttextflowdirection_1","displayName":"Enabled","description":null,"helpText":null}]},"d03adafd17df2d42":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_usesequencechecking","displayName":"Use sequence checking (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"77b0357b-412e-4a81-9469-e20a5f1345fd","categoryName":"Complex scripts","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_usesequencechecking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced~l_complexscripts_l_usesequencechecking_1","displayName":"Enabled","description":null,"helpText":null}]},"d0e9ef88ab4ab828":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient","displayName":"File tab | Share | Email (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_1","displayName":"True","description":null,"helpText":null}]},"d04f23e911da0798":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies","displayName":"Color for marking formatting inconsistencies (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_255","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_128","displayName":"Dark Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_3368703","displayName":"Light Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_52479","displayName":"Sky Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_10079487","displayName":"Pale Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_6710937","displayName":"Blue Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_65280","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_32768","displayName":"Dark Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_13056","displayName":"Darker Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_13434828","displayName":"Light Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_3355392","displayName":"Olive Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_3381606","displayName":"Sea Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16711680","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_8388608","displayName":"Dark Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16776960","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_8421376","displayName":"Dark Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16777113","displayName":"Light Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16777215","displayName":"White","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_10040064","displayName":"Brown","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16737792","displayName":"Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16750848","displayName":"Light Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_65535","displayName":"Cyan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_32896","displayName":"Dark Cyan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_13434879","displayName":"Light Cyan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16711935","displayName":"Magenta","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_8388736","displayName":"Dark Magenta","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_13158","displayName":"Dark Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_3355545","displayName":"Indigo","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_10079232","displayName":"Lime","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_3394764","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16763904","displayName":"Gold","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_10040166","displayName":"Plum","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16751052","displayName":"Rose","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_16764057","displayName":"Tan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_13408767","displayName":"Lavender","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_8421504","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_markformattinginconsistencies_l_colorformarkingformattinginconsistencies_12632256","displayName":"Gray 25%","description":null,"helpText":null}]},"d0fb7a86a3059f6b":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_app_packagefamilyname","displayName":"Package Family Name","description":"Package family names can be retrieved by running the Get-AppxPackage command from PowerShell. You can define one application to be used in each Firewall rule. If you specify multiple conditions in a single rule, these will be treated as an AND operation. i.e program=svchost.exe AND service=mpssvc, etc. All of the app related conditions in a single rule work to scope the traffic even further, so they must all correspond to the specific app/service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"d04ca2dacb034127":{"id":"vendor_msft_firewall_mdmstore_global_saidletime","displayName":"Security association idle time","description":"This value configures the security association idle time, in seconds. Security associations are deleted after network traffic is not seen for this specified period of time. The value MUST be in the range of 300 to 3,600 inclusive. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, use the local store value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/d1.json b/public/intune-definitions/d1.json new file mode 100644 index 000000000000..987b27dd6177 --- /dev/null +++ b/public/intune-definitions/d1.json @@ -0,0 +1 @@ +{"d13127e6b3fe9ce1":{"id":"com.android.devicerestrictionpolicy.enterprisedisplaynamevisibility","displayName":"Hide organization name","description":"If 'True', prevents the enterprise name from being displayed on the device (such as on the lock screen). If 'False', Intune doesn't change or update this setting. By default, the OS displays the enterprise name set during device setup. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.enterprisedisplaynamevisibility_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.enterprisedisplaynamevisibility_true","displayName":"True","description":"True","helpText":null}]},"d1bc167b14980d87":{"id":"com.apple.app.lock_app_options_enablevoicecontrol","displayName":"Enable Voice Control","description":"If true, enables Voice Control.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_options_enablevoicecontrol_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_options_enablevoicecontrol_true","displayName":"True","description":null,"helpText":null}]},"d198840baac016fb":{"id":"com.apple.managedclient.preferences_keyboardfocusablescrollersenabled","displayName":"Enable keyboard focusable scrollers (Deprecated)","description":"This policy provides a temporary opt-out for the new keyboard focusable scrollers behavior.\n\nWhen this policy is Enabled or unset, scrollers without focusable children are keyboard focusable by default. Further, scrollers are click focusable and programmatically focusable by default.\n\nWhen this policy is Disabled, scrollers are not focusable by default.\n\nThis policy is a temporary workaround and will be removed in Edge Stable 135.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#keyboardfocusablescrollersenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_keyboardfocusablescrollersenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_keyboardfocusablescrollersenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d18be39f1b1a3499":{"id":"com.apple.managedclient.preferences_webdriveroverridesincompatiblepolicies","displayName":"Allow WebDriver to Override Incompatible Policies","description":"This policy was removed in M83, because it is not necessary anymore as\nWebDriver is now compatible with all existing policies.\n\nThis policy allows users of the WebDriver feature to override\npolicies which can interfere with its operation.\n\nCurrently this policy disables \"SitePerProcess\" and \"IsolateOrigins\" policies.\n\nIf the policy is enabled, WebDriver will be able to override incomaptible\npolicies.\nIf the policy is disabled or not configured, WebDriver will not be allowed\nto override incompatible policies.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webdriveroverridesincompatiblepolicies"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webdriveroverridesincompatiblepolicies_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webdriveroverridesincompatiblepolicies_true","displayName":"Enabled","description":null,"helpText":null}]},"d1d05048d909c715":{"id":"com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command ''codesign -display -r -''.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"d1ad740516a1b4be":{"id":"com.apple.universalaccess_com.apple.universalaccess","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":null},"d1cc0e605147b53b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled","displayName":"Get user confirmation before closing a browser window with multiple tabs","description":"This policy lets you configure whether users see a confirmation dialog before closing a browser window with multiple tabs. This dialog asks users to confirm that the browser window can be closed.\n\nIf you enable this policy, users will be presented with a confirmation dialog when closing a browser window with multiple tabs.\n\nIf you disable or don't configure this policy, a browser window with multiple tabs will close immediately without user confirmation.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d195fe5e6c4fea18":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationenhancedhangdetection","displayName":"Configure enhanced hang detection for Internet Explorer mode","description":"Enhanced hang detection is a more granular approach to detecting hung webpages in Internet Explorer mode than what standalone Internet Explorer uses. When a hung webpage is detected, the browser applies a mitigation to prevent the rest of the browser from hanging.\n\nThis setting allows you to configure the use of enhanced hang detection in case you run into incompatible issues with any of your websites. We recommend disabling this policy only if you see notifications such as \"(website) is not responding\" in Internet Explorer mode but not in standalone Internet Explorer.\n\nThis setting works in conjunction with:\n\"InternetExplorerIntegrationLevel\" is set to 'IEMode'\nand\n\"InternetExplorerIntegrationSiteList\" policy where the list has at least one entry.\n\nIf you set this policy to 'Enabled' or don't configure it, websites running in Internet Explorer mode use enhanced hang detection.\n\nIf you set this policy to 'Disabled', enhanced hang detection is disabled, and users get the basic Internet Explorer hang detection behavior.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210\n\nPolicy options mapping:\n\n* Disabled (0) = Enhanced hang detection disabled\n\n* Enabled (1) = Enhanced hang detection enabled\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationenhancedhangdetection_disabled","displayName":"Enhanced hang detection disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationenhancedhangdetection_enabled","displayName":"Enhanced hang detection enabled","description":null,"helpText":null}]},"d10cc9af9d8c22f3":{"id":"device_vendor_msft_defender_configuration_disablesshparsing","displayName":"Disable Ssh Parsing","description":"This setting disables SSH Parsing for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablesshparsing_1","displayName":"SSH parsing is disabled","description":"SSH parsing is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablesshparsing_0","displayName":"SSH parsing is enabled","description":"SSH parsing is enabled","helpText":null}]},"d1d428def456f5cf":{"id":"device_vendor_msft_policy_config_admx_credssp_denydefaultcredentials_concatenatedefaults_ddc","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_denydefaultcredentials_concatenatedefaults_ddc_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_denydefaultcredentials_concatenatedefaults_ddc_1","displayName":"True","description":null,"helpText":null}]},"d11b682fcd90c34e":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem","displayName":"Configure Internet Explorer Maintenance policy processing","description":"This policy setting determines when Internet Explorer Maintenance policies are updated.\r\n\r\nThis policy setting affects all policies that use the Internet Explorer Maintenance component of Group Policy, such as those in Windows Settings\\Internet Explorer Maintenance.\r\n\r\nThis policy setting overrides customized settings that the program implementing the Internet Explorer Maintenance policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Do not apply during periodic background processing\" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-iem"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_1","displayName":"Enabled","description":null,"helpText":null}]},"d188f263d93b59a1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_proxyserver_proxyserver","displayName":"Define proxy server for connecting to the network","description":null,"helpText":"","infoUrls":[],"categoryId":"c9a65baa-de10-4818-97a2-b61babb28060","categoryName":"Microsoft Defender Antivirus","options":null},"d1e49aa944b2e7d7":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_2_lbl_assignedofflinefileslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"d113260188e10215":{"id":"device_vendor_msft_policy_config_admx_reliability_shutdownreason","displayName":"Display Shutdown Event Tracker","description":"The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions that is displayed when you invoke a shutdown to collect information related to why you are shutting down the computer.\r\n\r\nIf you enable this setting and choose \"Always\" from the drop-down menu list, the Shutdown Event Tracker is displayed when the computer shuts down.\r\n\r\nIf you enable this policy setting and choose \"Server Only\" from the drop-down menu list, the Shutdown Event Tracker is displayed when you shut down a computer running Windows Server. (See \"Supported on\" for supported versions.)\r\n\r\nIf you enable this policy setting and choose \"Workstation Only\" from the drop-down menu list, the Shutdown Event Tracker is displayed when you shut down a computer running a client version of Windows. (See \"Supported on\" for supported versions.)\r\n\r\nIf you disable this policy setting, the Shutdown Event Tracker is not displayed when you shut down the computer.\r\n\r\nIf you do not configure this policy setting, the default behavior for the Shutdown Event Tracker occurs.\r\n\r\nNote: By default, the Shutdown Event Tracker is only displayed on computers running Windows Server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-reliability#admx-reliability-shutdownreason"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_reliability_shutdownreason_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_reliability_shutdownreason_1","displayName":"Enabled","description":null,"helpText":null}]},"d19b7ce4ff5870d9":{"id":"device_vendor_msft_policy_config_admx_scripts_run_logon_script_sync_2","displayName":"Run logon scripts synchronously","description":"This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop.\r\n\r\nIf you enable this policy setting, File Explorer does not start until the logon scripts have finished running. This policy setting ensures that logon script processing is complete before the user starts working, but it can delay the appearance of the desktop.\r\n\r\nIf you disable or do not configure this policy setting, the logon scripts and File Explorer are not synchronized and can run simultaneously.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the policy setting set in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-logon-script-sync-2"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_run_logon_script_sync_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_run_logon_script_sync_2_1","displayName":"Enabled","description":null,"helpText":null}]},"d156ad5324cb66f9":{"id":"device_vendor_msft_policy_config_admx_sdiageng_scripteddiagnosticsexecutionpolicy","displayName":"Troubleshooting: Allow users to access and run Troubleshooting Wizards","description":"This policy setting allows users to access and run the troubleshooting tools that are available in the Troubleshooting Control Panel and to run the troubleshooting wizard to troubleshoot problems on their computers.\r\n\r\nIf you enable or do not configure this policy setting, users can access and run the troubleshooting tools from the Troubleshooting Control Panel.\r\n\r\nIf you disable this policy setting, users cannot access or run the troubleshooting tools from the Control Panel.\r\n\r\nNote that this setting also controls a user's ability to launch standalone troubleshooting packs such as those found in .diagcab files.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sdiageng#admx-sdiageng-scripteddiagnosticsexecutionpolicy"],"categoryId":"b6bb653a-73f0-42f4-b097-1ce556310904","categoryName":"Scripted Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_sdiageng_scripteddiagnosticsexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_sdiageng_scripteddiagnosticsexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"d1d01692a72e5f62":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_allowemailrequestscheck","displayName":"Enable users to request assistance","description":null,"helpText":"","infoUrls":[],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_allowemailrequestscheck_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_allowemailrequestscheck_1","displayName":"True","description":null,"helpText":null}]},"d1f5b22149f0f94e":{"id":"device_vendor_msft_policy_config_admx_touchinput_touchinputoff_2","displayName":"Turn off Tablet PC touch input","description":"Turn off Tablet PC touch input\r\n\r\nTurns off touch input, which allows the user to interact with their computer using their finger.\r\n\r\nIf you enable this setting, the user will not be able to produce input with touch. They will not be able to use touch input or touch gestures such as tap and double tap, the touch pointer, and other touch-specific features.\r\n\r\nIf you disable this setting, the user can produce input with touch, by using gestures, the touch pointer, and other-touch specific features.\r\n\r\nIf you do not configure this setting, touch input is on by default.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-touchinput#admx-touchinput-touchinputoff-2"],"categoryId":"abf781d7-1179-4f24-8d01-5611db14eddc","categoryName":"Touch Input","options":[{"id":"device_vendor_msft_policy_config_admx_touchinput_touchinputoff_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_touchinput_touchinputoff_2_1","displayName":"Enabled","description":null,"helpText":null}]},"d1166ebac9804f78":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxspeechtotextoverlay","displayName":"Xbox Speech To Text Overlay *","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxspeechtotextoverlay_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxspeechtotextoverlay_1","displayName":"True","description":null,"helpText":null}]},"d189f78397b92fe1":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_refresh_onlogon_options","displayName":"User Publishing Refresh On Logon","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_refresh_onlogon_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_user_refresh_onlogon_options_1","displayName":"True","description":null,"helpText":null}]},"d1de812395fa2330":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_audituserdeviceclaims","displayName":"Account Logon Logoff Audit User Device Claims","description":"This policy allows you to audit user and device claims information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. User claims are added to a logon token when claims are included with a user's account attributes in Active Directory. Device claims are added to the logon token when claims are included with a device's computer account attributes in Active Directory. In addition, compound identity must be enabled for the domain and on the computer where the user logged on. When this setting is configured, one or more security audit events are generated for each successful logon. You must also enable the Audit Logon setting under Advanced Audit Policy Configuration\\System Audit Policies\\Logon/Logoff. Multiple events are generated if the user and device claims information cannot fit in a single security audit event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_audituserdeviceclaims"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_audituserdeviceclaims_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_audituserdeviceclaims_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_audituserdeviceclaims_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_audituserdeviceclaims_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"d151735dd327f9c9":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditapplicationgenerated","displayName":"Object Access Audit Application Generated","description":"This policy setting allows you to audit applications that generate events using the Windows Auditing application programming interfaces (APIs). Applications designed to use the Windows Auditing API use this subcategory to log auditing events related to their function. Events in this subcategory include: Creation of an application client context. Deletion of an application client context. Initialization of an application client context. Other application operations using the Windows Auditing APIs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditapplicationgenerated"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditapplicationgenerated_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditapplicationgenerated_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditapplicationgenerated_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditapplicationgenerated_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"d1da35f09f9c5aac":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin","displayName":"Browser sign in settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_0","displayName":"Disable browser sign-in","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_1","displayName":"Enable browser sign-in","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_2","displayName":"Force users to sign-in to use the browser","description":null,"helpText":null}]},"d162803d740db342":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_applicationlocalevalue","displayName":"Application locale (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":null},"d18a7d0fd31eb470":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins","displayName":"Allow proceeding from the SSL warning page on specific origins","description":"If SSLErrorOverrideAllowed is Disabled, setting the policy lets you set a list of origin patterns that specify the sites where a user can click through warning pages Google Chrome shows when users navigate to sites that have SSL errors. Users will not be able to click through SSL warning pages on origins that are not on this list.\r\n\r\nIf SSLErrorOverrideAllowed is Enabled or unset, this policy does nothing.\r\n\r\nLeaving the policy unset means SSLErrorOverrideAllowed applies for all sites.\r\n\r\nFor detailed information on valid input patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"d118c62e5417365e":{"id":"device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials","displayName":"Remote host allows delegation of non-exportable credentials","description":"Remote host allows delegation of non-exportable credentials\n\nWhen using credential delegation, devices provide an exportable version of credentials to the remote host. This exposes users to the risk of credential theft from attackers on the remote host.\n\nIf you enable this policy setting, the host supports Restricted Admin or Remote Credential Guard mode.\n\nIf you disable or do not configure this policy setting, Restricted Administration and Remote Credential Guard mode are not supported. User will always need to pass their credentials to the host.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialsdelegation#credentialsdelegation-remotehostallowsdelegationofnonexportablecredentials"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials_1","displayName":"Enabled","description":null,"helpText":null}]},"d1b6f3e42d1daa9f":{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom","displayName":"Disable Internet Explorer 11 Launch Via COM Automation","description":"This policy lets you restrict launching of Internet Explorer using COM automation.\n\nIf you enable this policy, it prevents Internet Explorer 11 from being launched using COM automation.\n\nIf you disable, or don’t configure this policy, Internet Explorer 11 COM automation launches are allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerlaunchviacom"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_1","displayName":"Enabled","description":null,"helpText":null}]},"d1cebbb65a577bd9":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowscriptlets"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"d1044de53b488b20":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"d14bd06d4c175a09":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter","displayName":"Enable Google Cast","description":"Enable this policy to enable Google Cast. Users will be able to launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\r\n\r\nDisable this policy to disable Google Cast.\r\n\r\nBy default, Google Cast is enabled.","helpText":"","infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_1","displayName":"Enabled","description":null,"helpText":null}]},"d1e23e0df2d8c1ab":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled","displayName":"Performance Detector Enabled","description":"The performance detector detects tab performance issues and recommends actions to fix the performance issues.\r\n\r\nIf you enable or don't configure this policy, performance detector is turned on.\r\n\r\nIf you disable this policy, performance detector is turned off.\r\n\r\nThe user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about performance detector: https://aka.ms/EdgePerformanceDetector","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d11b58ad509f1396":{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 132.\r\n\r\nThe :--foo syntax for the CSS custom state feature is being changed to :state(foo) in Microsoft Edge in order to comply with changes that have been made in Firefox and Safari. This policy lets the deprecated syntax to be used until Stable 132.\r\n\r\nThis deprecation might break some Microsoft Edge-only websites that use the deprecated :--foo syntax.\r\n\r\nIf you enable this policy, the deprecated syntax will be enabled.\r\n\r\nIf you disable this policy or don't set it, the deprecated syntax will be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d1051ef8821b1af2":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled","displayName":"Enable sidebar customize","description":"Allow/Disallow to use sidebar customize.\r\n\r\nIf you enable or don't configure this policy, users will be able to access sidebar customize.\r\nIf you disable this policy, users will not be able to access the sidebar customize.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d16859411354635c":{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure sleeping tabs) is enabled or is not configured and the user has enabled the sleeping tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 30Seconds (30) = 30 seconds of inactivity\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"d19f69465f21af21":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins","displayName":"Allow users to proceed from the HTTPS warning page for specific origins","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\r\n\r\nIf you enable or don't configure the 'SSLErrorOverrideAllowed' (Allow users to proceed from the HTTPS warning page) policy, this policy does nothing.\r\n\r\nIf you disable the 'SSLErrorOverrideAllowed' policy, configuring this policy lets you configure a list of origin patterns for sites where users can continue to click through SSL error pages. Users can't click through SSL error pages on origins that are not on this list.\r\n\r\nIf you don't configure this policy, the 'SSLErrorOverrideAllowed' policy applies for all sites.\r\n\r\nFor detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy. This policy only matches based on origin, so any path or query in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"d1efd3f2fde88dcb":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout","displayName":"Sets layout for printing (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout_0","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout_1","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},"d15403a9efe61638":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled","displayName":"Microsoft Edge Insider Promotion Enabled","description":"Shows content promoting the Microsoft Edge Insider channels on the About Microsoft Edge settings page.\r\n\r\nIf you enable or don't configure this policy, the Microsoft Edge Insider promotion content will be shown on the About Microsoft Edge page.\r\n\r\nIf you disable this policy, the Microsoft Edge Insider promotion content will not be shown on the About Microsoft Edge page.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d1d40028cc541048":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsync","displayName":"Disables Lists sync on this device.","description":"\r\n By default, Lists sync is turned on for users of Microsoft Lists. If you enable this policy, Lists sync will be blocked from running on the device.\r\n\r\n ","helpText":"","infoUrls":[],"categoryId":"7fc23813-7a7c-412a-b9bd-eda07e6b1f5d","categoryName":"List Sync","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsync_1","displayName":"Enabled","description":null,"helpText":null}]},"d134ac1b81c87774":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_userincontroloftheseapps","displayName":"Let Apps Access Contacts User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d1567e96d1da26b0":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder","displayName":"Let Apps Access Graphics Capture Without Border","description":"This policy setting specifies whether Windows apps can disable the screen capture border.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d108373cad9b519d":{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo","displayName":"Let Apps Get Diagnostic Info","description":"This policy setting specifies whether Windows apps can get diagnostic information about other apps, including user names.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"d1720a2c53b57111":{"id":"device_vendor_msft_policy_config_update_autorestartrequirednotificationdismissal","displayName":"Auto Restart Required Notification Dismissal","description":"Allows the IT Admin to specify the method by which the auto-restart required notification is dismissed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartrequirednotificationdismissal"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_autorestartrequirednotificationdismissal_1","displayName":"Auto Dismissal.","description":"Auto Dismissal.","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartrequirednotificationdismissal_2","displayName":"User Dismissal.","description":"User Dismissal.","helpText":null}]},"d1919cc1ba1a7917":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl_part_proxypacurl","displayName":"URL to a proxy .pac file (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ff543267-540e-4e37-a1e9-daf6a5e16ba7","categoryName":"Proxy Server","options":null},"d1174409002634d0":{"id":"device_vendor_msft_policy_config_userrights_backupfilesanddirectories","displayName":"Backup Files And Directories","description":"This user right determines which users can bypass file, directory, registry, and other persistent objects permissions when backing up files and directories.Specifically, this user right is similar to granting the following permissions to the user or group in question on all files and folders on the system:Traverse Folder/Execute File, Read. Caution: Assigning this user right can be a security risk. Since users with this user right can read any registry settings and files, only assign this user right to trusted users","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#backupfilesanddirectories"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"d16509ab857c3802":{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel","displayName":"Enforcement Level","description":"Specifies the enforcement preference of antivirus engine. Real-time: Real-time protection (scan files as they're modified) is enabled. On-demand: Files are scanned only on demand and real-time protection is turned off. Passive: Runs the antivirus engine in passive mode. Audit: Similar to on-demand but logs detections without taking action.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#enforcement-level-for-antivirus-engine"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel_0","displayName":"Realtime","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel_1","displayName":"OnDemand","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel_2","displayName":"Passive","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel_3","displayName":"Audit","description":null,"helpText":null}]},"d141b996d6519202":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"d13155789a8d87ef":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge","displayName":"Enables merging of user cloud policies into machine-level policies (User)","description":"Setting the policy to Enabled allows policies associated with a Google Workspace account to be merged into machine-level policies.\r\n\r\nOnly policies originating from secure users can be merged. A secure user is affiliated with the organization that manages their browser using Chrome Browser Cloud Management. All other user-level policies will always be ignored.\r\n\r\nPolicies that need to be merged also need to be set in either PolicyListMultipleSourceMergeList or PolicyDictionaryMultipleSourceMergeList. This policy will be ignored if neither of the two aforementioned policies is configured.\r\n\r\nLeaving the policy unset or setting it to Disabled prevents user-level cloud policies from being merged with policies from any other sources.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge_1","displayName":"Enabled","description":null,"helpText":null}]},"d15b4c7e0f7d2c51":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist","displayName":"List of names that will bypass the HSTS policy check (User)","description":"Setting the policy specifies a list of hostnames that bypass preloaded HSTS upgrades from http to https.\r\n\r\nOnly single-label hostnames are allowed in this policy, and this policy only applies to \"static\" HSTS-preloaded entries (for instance, \"app\", \"new\", \"search\", \"play\"). This policy does not prevent HSTS upgrades for servers that have \"dynamically\" requested HSTS upgrades using a Strict-Transport-Security response header.\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific single-label hostnames specified, not to subdomains of those names.\r\n\r\nExample value:\r\n\r\nmeet","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},"d1cfdbdf6658eaf4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled","displayName":"Enable lock icon in the omnibox for secure connections (User)","description":"This policy controls the treatment for lock icon in the omnibox.\r\nFrom Chrome M93, there is a new omnibox icon for secure connections.\r\nIf the policy is Enabled, Chrome will use the existing lock icon for secure connections.\r\nIf the policy is Disabled or not set, Chrome will use the default icon for secure connections.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d1761947bd7bbd34":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended","displayName":"List of alternate URLs for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderAlternateURLs specifies a list of alternate URLs for extracting search terms from the search engine. The URLs should include the string '{searchTerms}'.\r\n\r\nLeaving DefaultSearchProviderAlternateURLs unset means no alternate URLs are used to extract search terms.\r\n\r\nExample value:\r\n\r\nhttps://search.my.company/suggest#q={searchTerms}\r\nhttps://search.my.company/suggest/search#q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d14cdd98288f9d0f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls","displayName":"Block the Flash plugin on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"d11afcc4a1b497ec":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_l_offlinecubefilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_l_offlinecubefilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_l_offlinecubefilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"d1dd8e35b2581b90":{"id":"user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist","displayName":"Use the Enterprise Mode IE website list (User)","description":"This policy setting lets you specify where to find the list of websites you want opened using Enterprise Mode IE, instead of Standard mode, because of compatibility issues. Users can't edit this list.\n\nIf you enable this policy setting, Internet Explorer downloads the website list from your location (HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\Main\\EnterpriseMode), opening all listed websites using Enterprise Mode IE.\n\nIf you disable or don't configure this policy setting, Internet Explorer opens all websites using Standards mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenterprisemodesitelist"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"d1fec4880df2b5d6":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains (User)","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonenavigatewindowsandframes"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"d1b01535947b2302":{"id":"user_vendor_msft_policy_config_internetexplorer_jscriptreplacement","displayName":"Replace JScript by loading JScript9Legacy in place of JScript. (User)","description":"This policy setting specifies whether JScript or JScript9Legacy is loaded.\n \nIf you enable this policy setting or not configured, JScript9Legacy will be loaded in situations where JScript is instantiated.\n\nIf you disable this policy, then JScript will be utilized.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-jscriptreplacement"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_jscriptreplacement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_jscriptreplacement_1","displayName":"Enabled","description":null,"helpText":null}]},"d1e7136510133ef5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_downloaddirectory","displayName":"Set download directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d1a78f868ac2daa8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended","displayName":"Set download directory (User)","description":"Configures the directory to use when downloading files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified one or chosen to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\r\n\r\nIf you set an invalid path, Microsoft Edge will default to the user's default download directory.\r\n\r\nIf the folder specified by the path doesn't exist, the download will trigger a prompt that asks the user where they want to save their download.\r\n\r\nExample value: \r\n Linux-based OSes (including Mac): /home/${user_name}/Downloads\r\n Windows: C:\\Users\\${user_name}\\Downloads","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d1596ff87955265b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled","displayName":"Enable ending processes in the Browser task manager (User)","description":"If you enable or don't configure this policy, users can end processes in the Browser task manager. If you disable it, users can't end processes, and the End process button is disabled in the Browser task manager.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d1669da80edc409f":{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled","displayName":"Enable tab organization suggestions (User)","description":"This policy controls whether Microsoft Edge can use its tab organization service to help name or suggest tab groups to increase productivity.\r\n\r\nIf you enable or don't configure this policy, when a user creates a tab group or activates certain \"Group Similar Tabs\" features Microsoft Edge sends tab data to its tab organization service. This data includes URLs, page titles, and existing group information. The service uses this data to return suggestions for better groupings and group names.\r\n\r\nIf you disable this policy, no data will be sent to the tab organization service. Microsoft Edge won't suggest group names when a group is created and certain \"Group Similar Tabs\" features that rely on the service won't be available.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d1c159c7da90caa0":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings","displayName":"Dynamic Code Settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_0","displayName":"Default dynamic code settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_1","displayName":"Prevent the browser process from creating dynamic code","description":null,"helpText":null}]},"d1197ddd81073cc1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastserviceserverurl5","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"d1bb3331ac7b6eac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastserviceminorversion6","displayName":"Server Minor Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"d16fc594d50c2182":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceim_l_imadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"d1d48a8759ac7c9a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishus","displayName":"English (U.S.) (User)","description":"Enables the editing language English (U.S.)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishus_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishus_1","displayName":"Enabled","description":null,"helpText":null}]},"d1f3740de3c33d57":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_protectdocumentmetadataforrightsmanaged","displayName":"Protect document metadata for rights managed Office Open XML Files (User)","description":"This policy setting determines whether metadata is encrypted in Office Open XML files that are protected by Information Rights Management (IRM). \r\n\r\nIf you enable this policy setting, Excel, PowerPoint, and Word encrypt metadata stored in rights-managed Office Open XML files and override any configuration changes on users' computers. \r\n\r\nIf you disable this policy setting, Office 2016 applications cannot encrypt metadata in rights-managed Office Open XML files, which can reduce security. \r\n\r\nIf you do not configure this policy setting, when Information Rights Management (IRM) is used to restrict access to an Office Open XML document, any metadata associated with the document is not encrypted.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_protectdocumentmetadataforrightsmanaged_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_protectdocumentmetadataforrightsmanaged_1","displayName":"Enabled","description":null,"helpText":null}]},"d1e4386ec3d96162":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_l_selectdigitalsignaturehashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_l_selectdigitalsignaturehashingalgorithmdropid_0","displayName":"0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_l_selectdigitalsignaturehashingalgorithmdropid_512","displayName":"512","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_l_selectdigitalsignaturehashingalgorithmdropid_768","displayName":"768","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_l_selectdigitalsignaturehashingalgorithmdropid_1024","displayName":"1024","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_l_selectdigitalsignaturehashingalgorithmdropid_1536","displayName":"1536","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidrsabits_l_selectdigitalsignaturehashingalgorithmdropid_2048","displayName":"2048","description":null,"helpText":null}]},"d1d34b603da7b648":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog07","displayName":"Trusted Catalog Location #7 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog07_1","displayName":"Enabled","description":null,"helpText":null}]},"d13ca1b646c30ec0":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysofhourlyversionsnottopruneafterdaysback_l_daysofhourlyversionsnottopruneafterdaysbackspinid","displayName":"Days back (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":null},"d1ac4ea62b87d9df":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_preventpublishingtoofficeonline","displayName":"Prevent publishing to Office.com (User)","description":"This policy setting controls whether Outlook users can publish their calendars to the Office.com Calendar Sharing Service. \r\n\r\nIf you enable this policy setting, Outlook users cannot publish their calendars to Office.com. \r\n\r\nIf you disable do not configure this policy setting, Outlook users can share their calendars with selected others by publishing them to the Microsoft Outlook Calendar Sharing Service. Users can control who can view their calendar and at what level of detail.","helpText":"","infoUrls":[],"categoryId":"34c07941-8f52-43ad-b0ca-a7284655afb4","categoryName":"Office.com Sharing Service","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_preventpublishingtoofficeonline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_preventpublishingtoofficeonline_1","displayName":"Enabled","description":null,"helpText":null}]},"d1a88801f66e6f7d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationmanagerretrylimit","displayName":"Specify activation manager retry limit for web extensions (User)","description":"This policy setting allows you to specify the retry limit Outlook uses before disabling a web extension during activation.\r\n\r\nIf you enable this policy setting, you can specify the activation manager retry limit. If the web extension requires more than the specified activation alert threshold for the number of occurrences specified by the activation manager retry limit during an Outlook session, Outlook automatically disables the web extension. \r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the default activation manager retry limit of 3 occurrences. The maximum activation manager retry limit is 5 occurrences, and the minimum activation manager retry limit is 1 occurrence.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationmanagerretrylimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationmanagerretrylimit_1","displayName":"Enabled","description":null,"helpText":null}]},"d1adbf1d4f1fe53c":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_datecolon25","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"d139ccc88c6d35af":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_descriptioncolon50","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"d16944305cf0c84a":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_l_allowsubfolders55","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_l_allowsubfolders55_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_l_allowsubfolders55_1","displayName":"True","description":null,"helpText":null}]},"d1912555e27e19cc":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_loadmicrosoftvisualbasicforapplicationsprojectsf","displayName":"Load Microsoft Visual Basic for Applications projects from text (User)","description":"If you want to be able to have your VBA project work in drawings created in other versions of Visio, select this option so that your VBA project is compiled when the file is loaded, but the compiled project is never saved.","helpText":"","infoUrls":[],"categoryId":"253fda23-118b-48c7-b24a-27b8c93df41a","categoryName":"Macro Security","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_loadmicrosoftvisualbasicforapplicationsprojectsf_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_loadmicrosoftvisualbasicforapplicationsprojectsf_1","displayName":"Enabled","description":null,"helpText":null}]},"d1777247d4741f2a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"d1ef0d27fe28f0bd":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork","displayName":"Turn off Trusted Documents on the network (User)","description":"This policy setting allows you to turn off the trusted documents feature for documents opened from the network.\r\n\r\nIf you enable this policy setting, users will always see security notifications for active content such as macros, ActiveX controls, data connections, etc. for documents opened from the network.\r\n\r\nIf you disable or do not configure this policy setting, the trusted documents feature allows users to always allow active content in documents such as macros, ActiveX controls, data connections, etc. so that users are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"d10fcd308c139847":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_writingstyle_l_writingstyle1","displayName":"Writing style (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_writingstyle_l_writingstyle1_0","displayName":"Grammar & Style","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_writingstyle_l_writingstyle1_1","displayName":"Grammar Only","description":null,"helpText":null}]},"d1600bfaba14c633":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_l_word2007andlaterbinarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_l_word2007andlaterbinarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_l_word2007andlaterbinarydocumentsandtemplatesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_l_word2007andlaterbinarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_l_word2007andlaterbinarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_l_word2007andlaterbinarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2007andlaterbinarydocumentsandtemplates_l_word2007andlaterbinarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/d2.json b/public/intune-definitions/d2.json new file mode 100644 index 000000000000..cf144637ab30 --- /dev/null +++ b/public/intune-definitions/d2.json @@ -0,0 +1 @@ +{"d233a160bef03bc8":{"id":"com.apple.applicationaccess_forcewifipoweron","displayName":"Force WiFi Power On","description":"If true, prevents Wi-Fi from being turned off in Settings or Control Center, even by entering or leaving Airplane Mode. It doesn’t prevent selecting which Wi-Fi network to use. Requires a supervised device. Available in iOS 13.0 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcewifipoweron_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcewifipoweron_true","displayName":"True","description":null,"helpText":null}]},"d2aef0b18ee52134":{"id":"com.apple.applicationaccess_ratingtvshowsca","displayName":"Rating TV Shows - Canada","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsca_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsca_1","displayName":"C","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsca_2","displayName":"C8","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsca_3","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsca_4","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsca_5","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsca_6","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsca_7","displayName":"All","description":null,"helpText":null}]},"d2280f694d9cc862":{"id":"com.apple.extensiblesso_extensiondata","displayName":"Extension Data","description":"A dictionary of arbitrary data passed through to the app extension.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"d2fe8223a3aba14d":{"id":"com.apple.managedclient.preferences_sharedarraybufferunrestrictedaccessallowed","displayName":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context","description":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context. A SharedArrayBuffer is a binary data buffer that can be used to create views on shared memory. SharedArrayBuffers have a memory access vulnerability in several popular CPUs.\n\nIf you enable this policy, sites are allowed to use SharedArrayBuffers with no restrictions.\n\nIf you disable or don't configure this policy, sites are allowed to use SharedArrayBuffers only when cross-origin isolated.\n\nMicrosoft Edge will require cross-origin isolation when using SharedArrayBuffers from Microsoft Edge 91 onward for Web Compatibility reasons.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#sharedarraybufferunrestrictedaccessallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_sharedarraybufferunrestrictedaccessallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sharedarraybufferunrestrictedaccessallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"d25d4722dea22567":{"id":"com.apple.managedclient.preferences_webtobrowsersigninenabled","displayName":"Web To Browser Sign-in Enabled","description":"Allow user to sign in to the same account in Microsoft Edge when a user signs in to a Microsoft website.\nIf this policy is enabled or not configured, user are able to get sign in CTA or seamless sign in experience(if \"SeamlessWebToBrowserSignInEnabled\" is enabled) when user sign in on Microsoft website.\nIf this policy is disabled, user will not get sign in CTA or seamless sign in experience when user sign in on Microsoft website.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webtobrowsersigninenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webtobrowsersigninenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webtobrowsersigninenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d278635be3b72fca":{"id":"com.apple.mcx_com.apple.mcx-timeserver","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"853f4181-42e8-411c-91cf-c06968c0a543","categoryName":"Time Server","options":null},"d2ddf292321d46f1":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowpopupsduringpageunload","displayName":"Allows a page to show popups during its unloading (Obsolete)","description":"This policy allows an admin to specify that a page can show popups during its unloading.\n\nWhen the policy is set to enabled, pages are allowed to show popups while they're being unloaded.\n\nWhen the policy is set to disabled or unset, pages aren't allowed to show popups while they're being unloaded. This restriction is as per the spec: (https://html.spec.whatwg.org/#apis-for-creating-and-navigating-browsing-contexts-by-name).\n\nThis policy was removed in Microsoft Edge 88 and is ignored if set.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowpopupsduringpageunload_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowpopupsduringpageunload_true","displayName":"Enabled","description":null,"helpText":null}]},"d2892cce6b1ded20":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsyncxhrinpagedismissal","displayName":"Allow pages to send synchronous XHR requests during page dismissal (Obsolete)","description":"This policy is obsolete because it was only intended to be a short-term mechanism to give enterprises more time to update their web content if and when it was found to be incompatible with the change to disallow synchronous XHR requests during page dismissal. It doesn't work in Microsoft Edge after version 99.\n\nThis policy lets you specify that a page can send synchronous XHR requests during page dismissal.\n\nIf you enable this policy, pages can send synchronous XHR requests during page dismissal.\n\nIf you disable this policy or don't configure this policy, pages aren't allowed to send synchronous XHR requests during page dismissal.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsyncxhrinpagedismissal_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsyncxhrinpagedismissal_true","displayName":"Enabled","description":null,"helpText":null}]},"d2280ca884c46975":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadsinsecurewarningsenabled_recommended","displayName":"Enable insecure download warnings (users can override)","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\n\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user receives a UI warning, such as \"Insecure download blocked\". The user can still download the item.\n\nIf you disable this policy, the warnings for insecure downloads are suppressed.","helpText":null,"infoUrls":[],"categoryId":"5e8e9c7f-1988-45cd-b5ca-78d939e3d49e","categoryName":"Downloads","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadsinsecurewarningsenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showdownloadsinsecurewarningsenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"d269d9e30f602652":{"id":"com.microsoft.edge.mamedgeappconfigsettings.tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\n\nLeaving the policy unset means that sites aren't considered for an override at this scope of capture.\n\nThis policy is not considered if a site matches a URL pattern in the \"SameOriginTabCaptureAllowedByOrigins\" policy.\n\nIf a site matches a URL pattern in this policy, the following policies aren't considered: \"WindowCaptureAllowedByOrigins\", \"ScreenCaptureAllowedByOrigins\", \"ScreenCaptureAllowed\".\n\nFor detailed information on valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.","helpText":null,"infoUrls":[],"categoryId":"05811ceb-2954-426c-8afa-2a53f02480cc","categoryName":"Permit or deny screen capture","options":null},"d219daa7d64ac606":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_entry","displayName":"Access","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"d27639deb6bc62b3":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxrangesperfile_bits_maxrangesperfilelist","displayName":"Maximum number of ranges that can be added to the file in a BITS job:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"d2404165f6b89079":{"id":"device_vendor_msft_policy_config_admx_credssp_allowfreshcredentialswhenntlmonly_allowfreshcredentialswhenntlmonly_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"d2fa774d83718026":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_noexternalurl_chk","displayName":"Do not display links to any Microsoft provided 'more information' web sites.","description":null,"helpText":"","infoUrls":[],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_noexternalurl_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_noexternalurl_chk_1","displayName":"True","description":null,"helpText":null}]},"d23aa86457f86c43":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_4","displayName":"Control the location of the log file","description":"This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators.\r\n\r\nIf you enable this policy setting, the Event Log uses the path specified in this policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\\System32\\winevt\\Logs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-logfilepath-4"],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_4_1","displayName":"Enabled","description":null,"helpText":null}]},"d25cba0083e6b7cf":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_ntfsdisable8dot3namecreation","displayName":"MSS: (NtfsDisable8dot3NameCreation) Enable the computer to stop generating 8.3 style filenames","description":"MSS: (NtfsDisable8dot3NameCreation) Enable the computer to stop generating 8.3 style filenames\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-ntfsdisable8dot3namecreation"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_ntfsdisable8dot3namecreation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_ntfsdisable8dot3namecreation_1","displayName":"Enabled","description":null,"helpText":null}]},"d2a143591d379673":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobehost","displayName":"Specify corporate DNS probe host name","description":"This policy setting enables you to specify the host name of a computer known to be on the corporate network. Successful resolution of this host name to the expected address indicates corporate connectivity.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ncsi#admx-ncsi-ncsi-corpdnsprobehost"],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobehost_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_corpdnsprobehost_1","displayName":"Enabled","description":null,"helpText":null}]},"d255936315758279":{"id":"device_vendor_msft_policy_config_admx_power_allowsystemsleepwithremotefilesopenac","displayName":"Allow automatic sleep with Open Network Files (plugged in)","description":"This policy setting allows you to manage automatic sleep with open network files.\r\n\r\nIf you enable this policy setting, the computer automatically sleeps when network files are open.\r\n\r\nIf you disable or do not configure this policy setting, the computer does not automatically sleep when network files are open.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-allowsystemsleepwithremotefilesopenac"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_allowsystemsleepwithremotefilesopenac_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_allowsystemsleepwithremotefilesopenac_1","displayName":"Enabled","description":null,"helpText":null}]},"d2de59e96d4261a4":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_2","displayName":"Turn off AutoComplete integration with Input Panel","description":"Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is available.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, application auto complete lists will never appear next to Input Panel. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, application auto complete lists will appear next to Input Panel in applications where the functionality is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, application auto complete lists will appear next to Input Panel in applications where the functionality is available. Users will be able to configure this setting on the Text completion tab in Input Panel Options.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-autocomplete-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_2_1","displayName":"Enabled","description":null,"helpText":null}]},"d27fa915b059849e":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_licensing_mode_ts_licensing_name","displayName":"Specify the licensing mode for the RD Session Host server.","description":"\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":[],"categoryId":"4b540860-0858-48f4-8830-18383bb1766f","categoryName":"Licensing","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_licensing_mode_ts_licensing_name_2","displayName":"Per Device","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_licensing_mode_ts_licensing_name_4","displayName":"Per User","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_licensing_mode_ts_licensing_name_6","displayName":"AAD Per User","description":null,"helpText":null}]},"d24f79acdb652c5f":{"id":"device_vendor_msft_policy_config_admx_windowsremotemanagement_disallowkerberos_1","displayName":"Disallow Kerberos authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Kerberos credentials over the network.\r\n\r\n If you enable this policy setting, the WinRM service does not accept Kerberos credentials over the network.\r\n\r\n If you disable or do not configure this policy setting, the WinRM service accepts Kerberos authentication from a remote client.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement#admx-windowsremotemanagement-disallowkerberos-1"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_admx_windowsremotemanagement_disallowkerberos_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsremotemanagement_disallowkerberos_1_1","displayName":"Enabled","description":null,"helpText":null}]},"d23e1b452adfe368":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads","description":"Unless SafeBrowsingEnabled is set to False, then setting AdsSettingForIntrusiveAdsSites to 1 or leaving it unset allows ads on all sites.\r\n\r\nSetting the policy to 2 blocks ads on sites with intrusive ads.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_1","displayName":"Enabled","description":null,"helpText":null}]},"d2579e21fdc66ce1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure_unsafelytreatinsecureoriginassecuredesc","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"d2e124873f3bfe34":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_extensionsettings","displayName":"Extension management settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"d22b69316bafff98":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},"d2ce70c9cd3cc006":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_sameorigintabcaptureallowedbyoriginsdesc","displayName":"Allow Same Origin Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"d23298def9783c91":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_screencaptureallowedbyoriginsdesc","displayName":"Allow Desktop, Window, and Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":null},"d212abe2a74868b4":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings","displayName":"Change Memory Saver Mode Savings","description":"This policy changes the savings level of Memory Saver.\r\n\r\nThis only takes effect when Memory Saver is enabled through settings or through the HighEfficiencyModeEnabled policy, and will affect how heuristics are used to determine when to discard tabs. For example, reducing the lifetime of an inactive tab before discarding it can save memory, but it also means that tabs will be reloaded more frequently which can lead to bad user experience and cost more network traffic.\r\n\r\nSetting the policy to 0 - Memory Saver will get moderate memory savings. Tabs become inactive after a longer period of time\r\n\r\nSetting the policy to 1 - Memory Saver will get balanced memory savings. Tabs become inactive after an optimal period of time.\r\n\r\nSetting the policy to 2 - Memory Saver will get maximum memory savings. Tabs become inactive after a shorter period of time.\r\n\r\nIf this policy is unset, the end user can control this setting in chrome://settings/performance.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_1","displayName":"Enabled","description":null,"helpText":null}]},"d21a9567ad0f5d14":{"id":"device_vendor_msft_policy_config_dataprotection_legacyselectivewipeid","displayName":"Legacy Selective Wipe ID","description":"Important. This policy may change in a future release. It may be used for testing purposes, but should not be used in a production environment at this time. Setting used by Windows 8. 1 Selective Wipe. Note This policy is not recommended for use in Windows 10.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DataProtection#legacyselectivewipeid"],"categoryId":"22f2b16b-e1af-45fa-8d2f-687854b72c02","categoryName":"Data Protection","options":null},"d235ddf710f2450d":{"id":"device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting","displayName":"Disable Windows Error Reporting","description":"This policy setting turns off Windows Error Reporting, so that reports are not collected or sent to either Microsoft or internal servers within your organization when software unexpectedly stops working or fails.\n\nIf you enable this policy setting, Windows Error Reporting does not send any problem information to Microsoft. Additionally, solution information is not available in Security and Maintenance in Control Panel.\n\nIf you disable or do not configure this policy setting, the Turn off Windows Error Reporting policy setting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings takes precedence. If Turn off Windows Error Reporting is also either disabled or not configured, user settings in Control Panel for Windows Error Reporting are applied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-disablewindowserrorreporting"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting_1","displayName":"Enabled","description":null,"helpText":null}]},"d2beee456551ed13":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker","displayName":"Use Pop-up Blocker","description":"This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.\n\nIf you enable this policy setting, most unwanted pop-up windows are prevented from appearing.\n\nIf you disable this policy setting, pop-up windows are not prevented from appearing.\n\nIf you do not configure this policy setting, most unwanted pop-up windows are prevented from appearing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneusepopupblocker"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_1","displayName":"Enabled","description":null,"helpText":null}]},"d2c5eb0335ae6c76":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_passwordprotectionloginurlsdesc","displayName":"Configure the list of enterprise login URLs where password protection service should capture fingerprint of password (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"d21f9cf486e14588":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc","displayName":"Allow Window Management permission on specified sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"d2dbc26f8d32f83b":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled","displayName":"Choose whether users can receive customized background images and text, suggestions, notifications,\r\nand tips for Microsoft services","description":"Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services.\r\n\r\nIf you enable or don't configure this setting, spotlight experiences and recommendations are turned on.\r\n\r\nIf you disable this setting, spotlight experiences and recommendations are turned off.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d287fd194f9d2c56":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes","displayName":"Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode","description":"Starting with Microsoft Edge version 96, navigations that switch between Internet Explorer mode and Microsoft Edge will include form data.\r\n\r\nIf you enable this policy, you can specify which data types should be included in navigations between Microsoft Edge and Internet Explorer mode.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the new behavior of including form data in navigations that change modes.\r\n\r\nTo learn more, see https://go.microsoft.com/fwlink/?linkid=2174004\r\n\r\nPolicy options mapping:\r\n\r\n* IncludeNone (0) = Do not send form data or headers\r\n\r\n* IncludeFormDataOnly (1) = Send form data only\r\n\r\n* IncludeHeadersOnly (2) = Send additional headers only\r\n\r\n* IncludeFormDataAndHeaders (3) = Send form data and additional headers\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_1","displayName":"Enabled","description":null,"helpText":null}]},"d26e101347af6c07":{"id":"device_vendor_msft_policy_config_mixedreality_aadgroupmembershipcachevalidityindays","displayName":"AAD Group Membership Cache Validity In Days","description":"This policy controls for how many days, AAD group membership cache is allowed to be used for Assigned Access configurations targeting AAD groups for signed in user. Once this policy is set only then cache is used otherwise not. In order for this policy to take effect, user must sign-out and sign-in with Internet available at least once before the cache can be used for subsequent 'disconnected' sessions.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#aadgroupmembershipcachevalidityindays"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":null},"d257a3d0bbf5da17":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winwordexe63","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winwordexe63_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winwordexe63_1","displayName":"True","description":null,"helpText":null}]},"d2a3585b053cf98a":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_userincontroloftheseapps","displayName":"Let Apps Access Radios User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d273243d18663c0c":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels","displayName":"Let Apps Access System AI Models","description":"This policy setting specifies whether Windows apps can use text and image generation features of Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d24d139e7b9aaff5":{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_forcedenytheseapps","displayName":"Let Apps Run In Background Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are not allowed to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d21c2ee5f43c008a":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_starttime","displayName":"Start time","description":null,"helpText":null,"infoUrls":[],"categoryId":"3ccd987e-bfca-4838-98ea-576de34b3ebe","categoryName":"Certain Hours","options":null},"d231b659744f27e5":{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer","displayName":"Allow Pinned Folder File Explorer","description":"This policy controls the visibility of the File Explorer shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderfileexplorer"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"d2052239e1fd6ac4":{"id":"enrollment_autopilot_dpp_deploymentmode","displayName":"Deployment mode","description":"Deployment mode controls if a user needs to provide credentials in order to provision the device.","helpText":"","infoUrls":[],"categoryId":"47b863f6-8116-432b-9fc1-9e487fdaa203","categoryName":null,"options":{"id":"enrollment_autopilot_dpp_deploymentmode_0","displayName":"User-driven","description":"Devices are associated with the user enrolling the device and user credentials are required to provision the device","helpText":null}},"d2c738e82929be9e":{"id":"safari_allowjavascript","displayName":"Allow Java Script","description":"If `false`, the system disables JavaScript in Safari.","helpText":null,"infoUrls":[],"categoryId":"e0ab6868-4b53-4310-b665-f7c979941db7","categoryName":"Safari Browser","options":[{"id":"safari_allowjavascript_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowjavascript_true","displayName":"Allowed","description":null,"helpText":null}]},"d2a14b3bfe625a72":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allowedfilesystemdirectories","displayName":"Allowed filesystem directories","description":"Specifies filesystem directories the contained agent can access. If no directories are configured, filesystem access is denied by default.","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":null},"d26af7055db875a6":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinpictures","displayName":"Pictures (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinpictures_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinpictures_1","displayName":"True","description":null,"helpText":null}]},"d29bed8d584c13d7":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamelanconnection","displayName":"Ability to rename LAN connections (User)","description":"Determines whether nonadministrators can rename a LAN connection.\r\n\r\nIf you enable this setting, the Rename option is enabled for LAN connections. Nonadministrators can rename LAN connections by clicking an icon representing the connection or by using the File menu.\r\n\r\nIf you disable this setting, the Rename option is disabled for nonadministrators only.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can rename LAN connections\r\n\r\nNote: This setting does not apply to Administrators.\r\n\r\nNote: When the \"Ability to rename LAN connections or remote access connections available to all users\" setting is configured (set to either enabled or disabled), this setting does not apply.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renamelanconnection"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamelanconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamelanconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"d2a882c189f2dbc5":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9","displayName":"Internet Explorer 9 (User)","description":"This policy setting configures the synchronization of user settings for Internet Explorer 9.\r\nBy default, the user settings of Internet Explorer 9 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 9 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 9 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 9 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer9"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9_1","displayName":"Enabled","description":null,"helpText":null}]},"d2c3fc2d41d755d6":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel","displayName":"Microsoft Excel 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Excel 2016.\r\nBy default, the user settings of Microsoft Excel 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Excel 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016excel"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel_1","displayName":"Enabled","description":null,"helpText":null}]},"d252b7e9824cdb31":{"id":"user_vendor_msft_policy_config_browser_enterprisesitelistserviceurl","displayName":"Enterprise Site List Service Url (User)","description":"Important. Discontinued in Windows 10, version 1511. Use the Browser/EnterpriseModeSiteList policy instead.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enterprisesitelistserviceurl"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"d229d85871bc1d10":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed","displayName":"Allow or deny video capture (User)","description":"Setting the policy to Enabled or leaving it unset means that, with the exception of URLs set in the VideoCaptureAllowedUrls list, users get prompted for video capture access.\r\n\r\nSetting the policy to Disabled turns off prompts, and video capture is only available to URLs set in the VideoCaptureAllowedUrls list.\r\n\r\nNote: The policy affects all video input (not just the built-in camera).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"d227838fb523eeea":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin","displayName":"Enable force sign in for Google Chrome (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},"d274732de4456ceb":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (User)","description":"Setting the policy to All (0) or leaving it unset lets users edit trust settings for all CA certificates, remove user-imported certificates, and import certificates using Certificate Manager. Setting the policy to UserOnly (1) lets users manage only user-imported certificates, but not change trust settings of built-in certificates. Setting it to None (2) lets users view (not manage) CA certificates.","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"d27eadcc6d37ae7c":{"id":"user_vendor_msft_policy_config_enterprisecloudprint_cloudprintoauthauthority","displayName":"Cloud Print OAuth Authority (User)","description":"Authentication endpoint for acquiring OAuth tokens","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-EnterpriseCloudPrint#cloudprintoauthauthority"],"categoryId":"14fe5c02-d4f6-4f2a-9eae-2d60d111ee77","categoryName":"Enterprise Cloud Print","options":null},"d2456f9dd543ba82":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacrosecurity","displayName":"Developer tab | Code | Macro Security (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacrosecurity_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacrosecurity_1","displayName":"True","description":null,"helpText":null}]},"d2007fa9ff587496":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm","displayName":"Specify CNG random number generator algorithm (User)","description":"This policy setting allows you to configure the CNG random number generator to use.\r\n\r\nIf you enable this policy setting, the random number generator specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default random number generator will be used.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"d28b1a027d30ba76":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},"d21517cd14167ec8":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneinitializeandscriptactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"d2b2f374167530e8":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"d28cdd5769277b3c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_nativemessagingallowlistdesc","displayName":"Names of the native messaging hosts to exempt from the block list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":null},"d293f38a93fff36a":{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled","displayName":"Enable insecure download warnings (User)","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\r\n\r\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user will receive a UI warning, such as \"Insecure download blocked.\" The user will still have an option to proceed and download the item.\r\n\r\nIf you disable this policy, the warnings for insecure downloads will be suppressed.","helpText":"","infoUrls":[],"categoryId":"5e8e9c7f-1988-45cd-b5ca-78d939e3d49e","categoryName":"Downloads","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d211c5efc57e54b6":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended","displayName":"Allow importing of extensions (User)","description":"Allows users to import extensions from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d2b71a69aed2be24":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_showmicrosoftrewards","displayName":"Show Microsoft Rewards experiences (User)","description":"Show Microsoft Rewards experience and notifications.\r\nIf you enable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.\r\n\r\nIf you disable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will not see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be disabled and toggled off.\r\n\r\nIf you don't configure this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_showmicrosoftrewards_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_showmicrosoftrewards_1","displayName":"Enabled","description":null,"helpText":null}]},"d2b826a264de082d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_donotpromptuserstoshareexcelworkbookswhensendingforreview","displayName":"Do not prompt users to share Excel workbooks when sending for review (User)","description":"Checked: Do not prompt the user to share Excel workbooks when sending them for review. | Unchecked: Prompt the user to share Excel workbooks when sending them for review.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_donotpromptuserstoshareexcelworkbookswhensendingforreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_donotpromptuserstoshareexcelworkbookswhensendingforreview_1","displayName":"Enabled","description":null,"helpText":null}]},"d212fe3a005856ea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy8_l_placesbarpath224","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":null},"d2b084f049e1b42a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordrulesdomaintimeout","displayName":"Set password rules domain timeout (User)","description":"This policy setting will define how long in milliseconds to wait when contacting a domain controller before timing out. This requires the \"Set password rules level\" to be enabled and set to \"Local length, local complexity, and domain policy checks.\"\r\n\r\nIf you enable this policy setting, you may set how long in milliseconds to wait when contacting a domain controller before timing out.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 4000 milliseconds is used.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordrulesdomaintimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordrulesdomaintimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"d2e1a018377b3fb8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidhashingalgorithm","displayName":"Configure invalid hashing algorithm (User)","description":"This policy setting allows you to configure whether Office displays a digital signature as invalid when it contains specific hash algorithms.\r\n\r\nIf you enable this policy setting, you can specify the weakest hash algorithm that Office treats as invalid. If you enable this policy setting, you can specify any of the following algorithms:\r\n- MD5\r\n- SHA1\r\n- SHA256\r\n- SHA384\r\n\r\nIf you don’t configure this policy setting, Office won’t treat digital signatures as invalid because of the hashing algorithm.\r\n\r\nFor example, if you set MD5 as the invalid hashing algorithm Office treats MD5 signatures as invalid.\r\n ","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidhashingalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureinvalidhashingalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"d2eb5331f1e25afb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits","displayName":"Configure minimum RSA public key size (User)","description":"This policy setting allows you to configure the minimum number of RSA public key bits Office allows to create digital signatures.\r\n \r\nIf you enable this policy setting, you can specify the minimum number of bits that can be used to create a digital signature. For example: 1024, 2048, etc.\r\n \r\nIf you disable or don’t configure this policy setting, Office allows all RSA keys, unless the legacy or invalid RSA policy settings are configured.\r\n\r\n If the legacy or invalid RSA public key bits policy settings are configured, then the default for this setting will be the next larger value. For example, if the number of RSA public key bits is set to 768, then this setting would default to 1024.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignatureminrsabits_1","displayName":"Enabled","description":null,"helpText":null}]},"d2b8fa126b24d7dd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings~l_sharepointserver_l_minimumtimebeforestartingcolleague_l_empty431","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","categoryName":"SharePoint Server","options":null},"d2c011153b70b29f":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngsaltlength","displayName":"Specify CNG salt length (User)","description":"This policy setting allows you to specific the number of bytes of salt that should be used.\r\n\r\nIf you enable this policy setting, the bytes specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default length or 16 will be used.","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngsaltlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_specifycngsaltlength_1","displayName":"Enabled","description":null,"helpText":null}]},"d2da51dfea3a0f62":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_preventclearsignedmessageandattachmentindexing","displayName":"Prevent clear signed message and attachment indexing (User)","description":"This policy setting allows you to turn off the indexing of the body and attachments of clear-text signed messages. The sender, subject line, and date will continue to be indexed and searchable. \r\n\r\nIf you enable this policy setting, indexing of clear-text signed messages will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, clear-text signed messages will be indexed and searchable.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_preventclearsignedmessageandattachmentindexing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_preventclearsignedmessageandattachmentindexing_1","displayName":"Enabled","description":null,"helpText":null}]},"d28ddd47ac39e0c1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings~l_trustedaddins_l_settrustedaddins_l_listoftrustedaddins","displayName":"List of trusted add-ins and hashes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e94d8ce3-d08e-4ee6-83e9-5f89aa37a6bf","categoryName":"Trusted Add-ins","options":null},"d2ca2c0142705e2b":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys158_l_enterakeyandmodifiertodisable","displayName":"Enter a key and modifier to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a20fe651-0f0a-4ddd-9d8b-273f17c89e22","categoryName":"Custom","options":null},"d27c497a853e1c22":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditorwd","displayName":"Alt+F11 (Developer | Code | Visual Basic) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditorwd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditorwd_1","displayName":"True","description":null,"helpText":null}]},"d23d7f90156d8372":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","categoryName":"Miscellaneous","options":null},"d28ba0a6ad8dd3ae":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_backofthesheet","displayName":"Print on back of the sheet for duplex printing (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_backofthesheet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_backofthesheet_1","displayName":"Enabled","description":null,"helpText":null}]},"d2cebe0a702ac894":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview","displayName":"Do not open files in unsafe locations in Protected View (User)","description":"This policy setting lets you determine if files located in unsafe locations will open in Protected View. If you have not specified unsafe locations, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders are considered unsafe locations.\r\n\r\nIf you enable this policy setting, files located in unsafe locations do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, files located in unsafe locations open in Protected View.","helpText":"","infoUrls":[],"categoryId":"8391e79d-d618-47c3-979c-83544da43739","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"d2794c75e10cf577":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders83","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders83_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders83_1","displayName":"True","description":null,"helpText":null}]},"d248899baa92a3e2":{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_donotcompressinlinedimagesinoutlook","displayName":"Do not compress the inlined images inserted in Outlook (User)","description":"This policy setting allows you to disable compression on inlined images in Outlook.\r\n\r\nIf you enable this policy setting, Outlook won't compress inlined images in the message.\r\n\r\nIf you disable or don't configure this policy setting, inlined images would be compressed.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"61ecc5ec-c494-420b-a27b-a8d2fbdd7df1","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_donotcompressinlinedimagesinoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v4~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_emailoptions_l_donotcompressinlinedimagesinoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"d2035cbb4df0b956":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_firewallrulename","displayName":null,"description":null,"helpText":null,"infoUrls":[],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"d21c32579da154ed":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_remoteportranges","displayName":"Remote Port Ranges","description":" Comma Separated list of ranges for eg. 100-120,200,300-320. If not specified the default is All.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null},"d2771b1a694a8afd":{"id":"vendor_msft_wirelessnetworkpreference_parameters_cellularparameters_networkdiscoveryoption","displayName":"Network Discovery Option (Windows Insiders only)","description":"Configures which approach should be used in the network discovery process. There are two possible values: (0) no network scan will be performed – rather, registration and connection will be attempted with each eSIM profile in descending order of preference; or (1) Network scan will be performed using the current active eSIM profile. This option works for modems that when performing a network scan show the complete list of available networks independently of which eSIM profile is active.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WirelessNetworkPreference-csp/"],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":[{"id":"vendor_msft_wirelessnetworkpreference_parameters_cellularparameters_networkdiscoveryoption_0","displayName":"No network scan will be performed -- rather, registration and connection will be attempted with each eSIM profile in descending order of preference.","description":"No network scan will be performed -- rather, registration and connection will be attempted with each eSIM profile in descending order of preference.","helpText":null},{"id":"vendor_msft_wirelessnetworkpreference_parameters_cellularparameters_networkdiscoveryoption_1","displayName":"Network scan will be performed using the current active eSIM profile.","description":"Network scan will be performed using the current active eSIM profile.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/d3.json b/public/intune-definitions/d3.json new file mode 100644 index 000000000000..3e0c7258aa60 --- /dev/null +++ b/public/intune-definitions/d3.json @@ -0,0 +1 @@ +{"d38848a856978890":{"id":"com.apple.applicationaccess_allowinapppurchases","displayName":"Allow In App Purchases","description":"If false, prohibits in-app purchasing. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowinapppurchases_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowinapppurchases_true","displayName":"True","description":null,"helpText":null}]},"d3a809b6f1192f2a":{"id":"com.apple.managedclient.preferences_personalizetopsitesincustomizesidebarenabled","displayName":"Personalize my top sites in Customize Sidebar enabled by default","description":"This policy controls whether Microsoft Edge browser be allowed to use the browsing history to personalize the top sites in the customize sidebar page.\n\nIf you enable this policy, Microsoft Edge will use the browsing history to personalize the top sites in the customize sidebar page.\n\nIf you disable this policy, Microsoft Edge will not use the browsing history to personalize the top sites in the customize sidebar page.\n\nIf you don't configure this policy, the default behavior is to use the browsing history to personalize the top sites in the customize sidebar page.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#personalizetopsitesincustomizesidebarenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_personalizetopsitesincustomizesidebarenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_personalizetopsitesincustomizesidebarenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d326f562019071ea":{"id":"com.apple.mcx.timemachine_skippaths","displayName":"Skip Paths","description":"The path to skip from start volume.","helpText":null,"infoUrls":[],"categoryId":"361859d9-1382-47c3-b9ec-9251a62fbb25","categoryName":"Time Machine","options":null},"d3e5399e90fabae6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupuserurlsenabled","displayName":"Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured.","description":"This policy only works if you set the \"RestoreOnStartup\" policy to 'Open a list of URLs' (4) and the RestoreOnStartupURLs policy as mandatory.\nIf you enable this policy, users are allowed to add and remove their own URLs to open when starting Microsoft Edge while maintaining the admin specified mandatory list of sites specified by setting \"RestoreOnStartup\" policy to open a list of URLS and providing the list of sites in the RestoreOnStartupURLs policy.\n\nIf you disable or don't configure this policy, there's no change to how the \"RestoreOnStartup\" and RestoreOnStartupURLs policies work.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupuserurlsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupuserurlsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d33f92c2d3d00143":{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentials_concatenatedefaults_asc","displayName":"Concatenate OS defaults with input above","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentials_concatenatedefaults_asc_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentials_concatenatedefaults_asc_1","displayName":"True","description":null,"helpText":null}]},"d35284eddf58b0f7":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornoneincms_chk","displayName":"Report all errors in Microsoft applications.","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornoneincms_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornoneincms_chk_1","displayName":"True","description":null,"helpText":null}]},"d3b38e2112f96a50":{"id":"device_vendor_msft_policy_config_admx_icm_certmgr_disableautorootupdates","displayName":"Turn off Automatic Root Certificates Update","description":"This policy setting specifies whether to automatically update root certificates using the Windows Update website. \r\n\r\nTypically, a certificate is used when you use a secure website or when you send and receive secure email. Anyone can issue certificates, but to have transactions that are as secure as possible, certificates must be issued by a trusted certificate authority (CA). Microsoft has included a list in Windows XP and other products of companies and organizations that it considers trusted authorities.\r\n\r\nIf you enable this policy setting, when you are presented with a certificate issued by an untrusted root authority, your computer will not contact the Windows Update website to see if Microsoft has added the CA to its list of trusted authorities.\r\n\r\nIf you disable or do not configure this policy setting, your computer will contact the Windows Update website.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-certmgr-disableautorootupdates"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_certmgr_disableautorootupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_certmgr_disableautorootupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"d3b2004831bf91f4":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_2_lbl_customgoofflineactionslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"d39a1a2e39e8dbac":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_rdsappx_waitforregistration","displayName":"Suspend user sign-in to complete app registration","description":"This policy setting allows you to specify whether the app registration is completed before showing the Start screen to the user. \r\n\r\nBy default, when a new user signs in to a computer, the Start screen is shown and apps are registered in the background. However, some apps may not work until app registration is complete.\r\n\r\nIf you enable this policy setting, user sign-in is blocked for up to 6 minutes to complete the app registration. You can use this policy setting when customizing the Start screen on Remote Desktop Session Host servers. \r\n\r\nIf you disable or do not configure this policy setting, the Start screen is shown and apps are registered in the background.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-rdsappx-waitforregistration"],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_rdsappx_waitforregistration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_rdsappx_waitforregistration_1","displayName":"Enabled","description":null,"helpText":null}]},"d3db771200c02b43":{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar","displayName":"Configuration of wireless settings using Windows Connect Now","description":"This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the discovery and configuration of devices over Ethernet (UPnP), over In-band 802.11 WLAN, through the Windows Portable Device API (WPD), and via USB Flash drives.\r\n\r\nAdditional options are available to allow discovery and configuration over a specific medium. \r\n\r\nIf you enable this policy setting, additional choices are available to turn off the operations over a specific medium. \r\n\r\nIf you disable this policy setting, operations are disabled over all media. \r\n\r\nIf you do not configure this policy setting, operations are enabled over all media. \r\n\r\nThe default for this policy setting allows operations over all media.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsconnectnow#admx-windowsconnectnow-wcn-enableregistrar"],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":[{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_1","displayName":"Enabled","description":null,"helpText":null}]},"d3e9d59a5af39d0b":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_refresh_onlogon_options","displayName":"Global Publishing Refresh On Logon","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_refresh_onlogon_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_global_refresh_onlogon_options_1","displayName":"True","description":null,"helpText":null}]},"d3541ac5c693738a":{"id":"device_vendor_msft_policy_config_browser_preventcerterroroverrides","displayName":"Prevent Cert Error Overrides","description":"Web security certificates are used to ensure a site your users go to is legitimate, and in some circumstances encrypts the data. With this policy, you can specify whether to prevent users from bypassing the security warning to sites that have SSL errors. If enabled, overriding certificate errors are not allowed. If disabled or not configured, overriding certificate errors are allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventcerterroroverrides"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_preventcerterroroverrides_0","displayName":"Disabled","description":"Allowed/turned on. Override the security warning to sites that have SSL errors.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_preventcerterroroverrides_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},"d3862715c04005cd":{"id":"device_vendor_msft_policy_config_cellular_showappcellularaccessui_showappcellularaccessui_option","displayName":"Please select one option to set:","description":"","helpText":"","infoUrls":[],"categoryId":"eefc9ae4-b9ae-4d77-8b68-359b9e5ec6f7","categoryName":"WWAN UI Settings","options":[{"id":"device_vendor_msft_policy_config_cellular_showappcellularaccessui_showappcellularaccessui_option_0","displayName":"Hide","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_cellular_showappcellularaccessui_showappcellularaccessui_option_1","displayName":"Show","description":null,"helpText":null}]},"d30811479e8bc247":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled","displayName":"DNS interception checks enabled","description":"This policy configures a local switch that can be used to disable DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nThis detection may not be necessary in an enterprise environment where the network configuration is known, since it causes some amount of DNS and HTTP traffic on start-up and each DNS configuration change.\r\n\r\nWhen this policy is not set, or is enabled, the DNS interception checks are performed. When explicitly disabled, they're not.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d339c46cc34a939c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips","displayName":"Allow Google Cast to connect to Cast devices on all IP addresses.","description":"Unless EnableMediaRouter is set to Disabled, setting MediaRouterCastAllowAllIPs to Enabled connects Google Cast to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.\r\n\r\nSetting the policy to Disabled connects Google Cast to Cast devices only on RFC1918/RFC4193.\r\n\r\nLeaving the policy unset connects Google Cast to Cast devices only on RFC1918/RFC4193, unless the CastAllowAllIPs feature is turned on.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips_1","displayName":"Enabled","description":null,"helpText":null}]},"d3cdcf95b9a7be4c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting","displayName":"Control use of the Serial API","description":"Setting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"d3b3704a1fd13070":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed","displayName":"Allow sign in to Google Chrome","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"d355d4751dc212a7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode","displayName":"Print Rasterization Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode_0","displayName":"Full","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode_1","displayName":"Fast","description":null,"helpText":null}]},"d391aac846056c03":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation","displayName":"Include Office Activation","description":"[ENABLED BY DEFAULT]\r\n\r\nOffice activation data is redirected to the container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOfficeActivation\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation_1","displayName":"Enabled","description":null,"helpText":null}]},"d3d1d603d735f40f":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallownetframeworkreliantcomponents"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"d326e3774ae41f5a":{"id":"device_vendor_msft_policy_config_kioskbrowser_blockedurls","displayName":"Blocked Urls","description":"List of blocked website URLs (with wildcard support). This is used to configure blocked URLs kiosk browsers can not navigate to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#blockedurls"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"d37fbc7b367d488b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended","displayName":"Sites to open when the browser starts","description":"Specify a list of websites to open automatically when the browser starts. If you don't configure this policy, no site is opened on startup.\r\n\r\nThis policy only works if you also set the 'RestoreOnStartup' (Action to take on startup) policy to 'Open a list of URLs' (4).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\nhttps://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d3a70dbc92b942cf":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":null},"d3b45242d01abd59":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_newtabpagecompanylogo","displayName":"New tab page company logo (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"d38378b6fd71c5f7":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox","displayName":"New tab page search box experience (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox_redirect","displayName":"Address bar","description":null,"helpText":null}]},"d3ceea8fded9576c":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled","displayName":"Enable preload of the new tab page for faster rendering","description":"If you configure this policy, preloading the New tab page is enabled, and users can't change this setting. If you don't configure this policy, preloading is enabled and a user can change this setting.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d3f3062360205284":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist","displayName":"Disable printer types on the deny list","description":"The printer types on the deny list won't be discovered or have their capabilities fetched.\r\n\r\nPlacing all printer types on the deny list effectively disables printing, because there's no print destination for documents.\r\n\r\nIf you don't configure this policy, or the printer list is empty, all printer types are discoverable.\r\n\r\nPrinter destinations include extension printers and local printers. Extension printers are also known as print provider destinations, and include any destination that belongs to a Microsoft Edge extension.\r\nLocal printers are also known as native printing destinations, and include destinations available to the local machine and shared network printers.\r\n\r\nIn Microsoft version 93 or later, if you set this policy to 'pdf' it also disables the 'save as Pdf' option from the right click context menu.\r\n\r\nIn Microsoft version 103 or later, if you set this policy to 'onedrive' it also disables the 'save as Pdf (OneDrive)' option from print preview.\r\n\r\nPolicy options mapping:\r\n\r\n* privet (privet) = Zeroconf-based (mDNS + DNS-SD) protocol destinations\r\n\r\n* extension (extension) = Extension-based destinations\r\n\r\n* pdf (pdf) = The 'Save as PDF' destination. (93 or later, also disables from context menu)\r\n\r\n* local (local) = Local printer destinations\r\n\r\n* onedrive (onedrive) = Save as PDF (OneDrive) printer destinations. (103 or later)\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nlocal\r\nprivet","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},"d368f17fe0f88cda":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winwordexe35","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winwordexe35_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winwordexe35_1","displayName":"True","description":null,"helpText":null}]},"d3661bd0f99ea0e1":{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout_idletimeout","displayName":"IdleTimeout","description":"","helpText":"","infoUrls":[],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":null},"d32a102fc3c9c9bf":{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability","displayName":"Touch Keyboard Narrow Mode Availability","description":"Specifies whether the narrow keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the narrow keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardnarrowmodeavailability"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability_1","displayName":"Narrow keyboard is always available.","description":"Narrow keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability_2","displayName":"Narrow keyboard is always disabled.","description":"Narrow keyboard is always disabled.","helpText":null}]},"d3675c2d32ad767c":{"id":"linux_mdatp_managed_antivirusengine_offlinedefinitionupdatefallbacktocloud","displayName":"Offline security intelligence update fallback to cloud","description":"Whether to fall back to cloud updates if offline security intelligence updates fail.","helpText":"Choose True to allow fallback to cloud update when offline security intelligence update fails.","infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/offline-Definition-Update-FallbackToCloud"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_offlinedefinitionupdatefallbacktocloud_false","displayName":"False","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_offlinedefinitionupdatefallbacktocloud_true","displayName":"True","description":null,"helpText":null}]},"d3c7fa5fbed6e3bd":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87_12","displayName":"Access 2007","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87_10","displayName":"Access 2002-2003","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87_9","displayName":"Access 2000","description":null,"helpText":null}]},"d3adc331ce3168fe":{"id":"user_vendor_msft_policy_config_admx_com_appmgmt_com_searchforclsid_1","displayName":"Download missing COM components (User)","description":"This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.\r\n\r\nMany Windows programs, such as the MMC snap-ins, use the interfaces provided by the COM components. These programs cannot perform all their functions unless Windows has internally registered the required components.\r\n\r\nIf you enable this policy setting and a component registration is missing, the system searches for it in Active Directory and, if it is found, downloads it. The resulting searches might make some programs start or run slowly.\r\n\r\nIf you disable or do not configure this policy setting, the program continues without the registration. As a result, the program might not perform all its functions, or it might stop.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-com#admx-com-appmgmt-com-searchforclsid-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_com_appmgmt_com_searchforclsid_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_com_appmgmt_com_searchforclsid_1_1","displayName":"Enabled","description":null,"helpText":null}]},"d36d5c410b70f631":{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames","displayName":"Allow Windows Runtime apps to revoke enterprise data (User)","description":"Windows Runtime applications can protect content which has been associated with an enterprise identifier (EID), but can only revoke access to content it protected. To allow an application to revoke access to all content on the device that is protected by a particular enterprise, add an entry to the list on a new line that contains the enterprise identifier, separated by a comma, and the Package Family Name of the application. The EID must be an internet domain belonging to the enterprise in standard international domain name format. \r\n \r\nExample value: \r\nContoso.com,ContosoIT.HumanResourcesApp_m5g0r7arhahqy\r\n \r\nIf you enable this policy setting, the application identified by the Package Family Name will be permitted to revoke access to all content protected using the specified EID on the device.\r\n \r\nIf you disable or do not configure this policy setting, the only Windows Runtime applications that can revoke access to all enterprise-protected content on the device are Windows Mail and the user-selected mailto protocol handler app. Any other Windows Runtime application will only be able to revoke access to content it protected.\r\n \r\nNote: File revocation applies to all content protected under the same second level domain as the provided enterprise identifier. So, revoking an enterprise ID of mail.contoso.com will revoke the user’s access to all content protected under the contoso.com hierarchy.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filerevocation#admx-filerevocation-delegatedpackagefamilynames"],"categoryId":"86e78a4b-706a-4ec8-be90-439461abb29d","categoryName":"File Revocation","options":[{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames_1","displayName":"Enabled","description":null,"helpText":null}]},"d3825dc68060403a":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_gprefreshrateoffset3","displayName":"Minutes: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"d3fdfa68abd98e6d":{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_1","displayName":"Do not process the legacy run list (User)","description":"This policy setting ignores the customized run list.\r\n\r\nYou can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts.\r\n\r\nIf you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional.\r\n\r\nIf you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.\r\n\r\nNote: To create a customized run list by using a policy setting, use the \"Run these applications at startup\" policy setting.\r\n\r\nAlso, see the \"Do not process the run once list\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disableexplorerrunlegacy-1"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_1_1","displayName":"Enabled","description":null,"helpText":null}]},"d3c0803f116a34e4":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode","displayName":"Set RD Gateway authentication method (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"a561e59a-09b7-4106-a6fa-0b82036a5b49","categoryName":"RD Gateway","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_5","displayName":"Ask for credentials, use Negotiate protocol","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_2","displayName":"Ask for credentials, use NTLM protocol","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_1","displayName":"Ask for credentials, use Basic protocol","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_4","displayName":"Use locally logged-on credentials","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_3","displayName":"Use smart-card","description":null,"helpText":null}]},"d39a024234bf1911":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-intranet"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet_1","displayName":"Enabled","description":null,"helpText":null}]},"d3d150f2c335fb8a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended","displayName":"Enable Translate (User)","description":"Setting the policy to True provides translation functionality when it's appropriate for users by showing an integrated translate toolbar in Google Chrome and a translate option on the right-click context menu. Setting the policy to False shuts off all built-in translate features.\r\n\r\nIf you set the policy, users can't change this function. Leaving it unset lets them change the setting.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d36b7afe1f2f7354":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended","displayName":"Default search provider instant URL (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d3a6b5ad962871fa":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_2","displayName":"Do not allow any site to load mixed content","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_3","displayName":"Allow users to add exceptions to allow mixed content","description":null,"helpText":null}]},"d3866354512d35d1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting","displayName":"Default JavaScript setting (User)","description":"Setting the policy to 1 lets websites run JavaScript. Setting the policy to 2 denies JavaScript.\r\n\r\nLeaving it unset allows JavaScript, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"d376e8fcad075361":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled","displayName":"Allow showing the most recent default search engine results page in a Browser side panel (User)","description":"Setting the policy to Enabled or leaving the policy unset means that users can bring up their most recent default search engine results page in a side panel via toggling an icon in the toolbar.\r\n\r\nSetting the policy to Disabled removes the icon from the toolbar that opens the side panel with the default search engine results page.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d384c36fdbbf7277":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_disableofficestartexcel","displayName":"Disable the Office Start screen for Excel (User)","description":"This policy setting controls whether the Office Start screen appears on boot for Excel.\r\n\r\nIf you enable this policy setting, users will not see the Office Start screen when they boot Excel.\r\n\r\nIf you disable or do not configure this policy setting, users will see the Office Start screen when they boot Excel.\r\n\r\nNote: This policy setting is overridden by the policy setting \"Microsoft Office 2016 > Miscellaneous > Disable the Office Start screen for all Office applications\" if that policy setting is set.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_disableofficestartexcel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_disableofficestartexcel_1","displayName":"Enabled","description":null,"helpText":null}]},"d3d2da8cd52bae1d":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder","displayName":"Configure the location of the browser executable folder (User)","description":"This policy configures WebView2 applications to use the WebView2 Runtime in the specified path. The folder should contain the following files: msedgewebview2.exe, msedge.dll, and so on.\r\n\r\nTo set the value for the folder path, provide a Value name and Value pair. Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications.\r\n\r\nExample value:\r\n\r\nName: *, Value: C:\\Program Files\\Microsoft Edge WebView2 Runtime Redistributable 85.0.541.0 x64","helpText":"","infoUrls":[],"categoryId":"13cc3b63-a150-4cf2-8d76-309975603c8e","categoryName":"Loader Override Settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_1","displayName":"Enabled","description":null,"helpText":null}]},"d359650c4b151161":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_cpuperformancetieroverride_cpuperformancetieroverride","displayName":"Override for the CPU performance tier: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d3e8c7bb4b34ff72":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_2","displayName":"Don't allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_3","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},"d3bfe7640fb1c8cb":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_travelassistanceenabled_recommended","displayName":"Enable travel assistance (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy is obsolete as the feature is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy. It doesn't work in Microsoft Edge after version 105.\r\nConfigure this policy to allow/disallow travel assistance.\r\n\r\nThe travel assistance feature gives helpful and relevant information to a user who performs Travel related task within the browser. This feature provides trusted and validated suggestions / information to the users from across sources gathered by Microsoft.\r\n\r\nIf you enable or don't configure this setting, travel assistance will be enabled for the users when they are performing travel related tasks.\r\n\r\nIf you disable this setting, travel assistance will be disabled and users will not be able to see any travel related recommendations.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_travelassistanceenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_travelassistanceenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d349fb70f8790067":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode","displayName":"Configure when efficiency mode should become active (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null}]},"d3c51283c2242131":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustanattachment","displayName":"With just an attachment (User)","description":"Defines the default message body text used in a reply to an email request for review when the reply contains a simple Web discussions link. ","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustanattachment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withjustanattachment_1","displayName":"Enabled","description":null,"helpText":null}]},"d3c29606f7d954a0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacemobile","displayName":"Replace AD - Mobile (User)","description":"This policy setting allows you to customize the 5th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"mobile phone\" of line 5.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 5 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacemobile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacemobile_1","displayName":"Enabled","description":null,"helpText":null}]},"d34ff9316a09602d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishbelize","displayName":"English (Belize) (User)","description":"Enables the editing language English (Belize)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishbelize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishbelize_1","displayName":"Enabled","description":null,"helpText":null}]},"d380fd773a16e476":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malaymalaysia","displayName":"Malay (Malaysia) (User)","description":"Enables the editing language Malay (Malaysia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malaymalaysia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_malaymalaysia_1","displayName":"Enabled","description":null,"helpText":null}]},"d3d0392fd63ee975":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishbolivia","displayName":"Spanish (Bolivia) (User)","description":"Enables the editing language Spanish (Bolivia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishbolivia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishbolivia_1","displayName":"Enabled","description":null,"helpText":null}]},"d35036e6edc52722":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_mrutemplatelistlength_l_mrutemplatelistlength505","displayName":"Most Recently Used Template List Length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"d3f2b97eeb9208fe":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_l_workflowpath469","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"d3c3c34ccdcdc681":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel_l_setpasswordrulesleveldropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel_l_setpasswordrulesleveldropid_0","displayName":"No password checks","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel_l_setpasswordrulesleveldropid_1","displayName":"Local length check","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel_l_setpasswordrulesleveldropid_2","displayName":"Local length and complexity checks","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_setpasswordruleslevel_l_setpasswordrulesleveldropid_3","displayName":"Local length, local complexity, and domain policy checks","description":null,"helpText":null}]},"d343f65487598233":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofchannelstorecord","displayName":"Specify number of channels to record (User)","description":"Specifies whether 1 or 2 channels are used when recording audio. If the appropriate codec is found, then this is the default number of channels used in the Format setting for Linked Audio found under File tab | Options | Audio & Video.","helpText":"","infoUrls":[],"categoryId":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","categoryName":"Audio and Video","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofchannelstorecord_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_audioandvideo_l_specifynumberofchannelstorecord_1","displayName":"Enabled","description":null,"helpText":null}]},"d3e790def06dab7a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"d320e276e45e9392":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_processreceiptsonarrival","displayName":"Process receipts on arrival (User)","description":"","helpText":"","infoUrls":[],"categoryId":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","categoryName":"Tracking Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_processreceiptsonarrival_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_processreceiptsonarrival_1","displayName":"True","description":null,"helpText":null}]},"d329423c3a2aaa3e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2addfilepolicy","displayName":"Add file extensions to block as Level 2 (User)","description":"This policy setting controls which types of attachments (determined by file extension) must be saved to disk before users can open them. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n\r\nIf you enable this policy setting, you can specify a list of attachment file types to classify as Level 2, which forces users to actively decide to download the attachment to view it. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not classify any file type extensions as Level 2. \r\n\r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2addfilepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2addfilepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"d360d51759e5f34b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2_l_onexecutecustomactionoom_setting","displayName":"When executing a custom action: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2_l_onexecutecustomactionoom_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2_l_onexecutecustomactionoom_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2_l_onexecutecustomactionoom_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_onexecutecustomactionoom_v2_l_onexecutecustomactionoom_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"d32ffa5c493e4f5f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2","displayName":"Configure Outlook object model prompt when reading address information (User)","description":"This policy setting controls what happens when an untrusted program attempts to gain access to a recipient field, such as the ''To:'' field, using the Outlook object model.\r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to access a recipient field using the Outlook object model:\r\n\r\n- Prompt user. The user will be prompted to approve every access attempt.\r\n- Automatically approve. Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended.\r\n- Automatically deny. Outlook will automatically deny programmatic access requests from any program.\r\n- Prompt user based on computer security. Outlook will only prompt users when antivirus software is out of date or not running. This is the default configuration.\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to access recipient fields, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"d3a384c1f0790568":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_verticalruler","displayName":"Show vertical ruler (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_verticalruler_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_verticalruler_1","displayName":"Enabled","description":null,"helpText":null}]},"d3d2844dc8033853":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_usenewkeyonpasswordchange","displayName":"Use new key on password change (User)","description":"This policy setting allows you to specify if a new encryption key is used when the password is changed.\r\n\r\nIf you enable or do not configure this policy setting, a new intermediate key is generated when the password is changed. This causes any extra key encryptors to be removed when the file is saved.\r\n\r\nIf you disable this policy setting, a new intermediate key is not generated when the password is changed.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_1","displayName":"Enabled","description":null,"helpText":null}]},"d3ce010309212d8b":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc11_l_descriptioncolon50","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"d3c012b0414522a4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_chartreftrackingenabled","displayName":"Allow formatting and labels to track data points (User)","description":"This policy setting governs how custom formatting and data labels react to data changes in a chart.\r\n\r\nIf you enable or do not configure this policy setting, when the user creates a new presentation, custom formatting and data labels follow data points as they move or change in any chart in the workbook.\r\n\r\nIf you disable this policy setting, custom formatting and data labels do not follow data points, but instead follow data point indices.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_chartreftrackingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_chartreftrackingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d317e6fbb6470b84":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_showreadabilitystatistics","displayName":"Show readability statistics (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_showreadabilitystatistics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_showreadabilitystatistics_1","displayName":"Enabled","description":null,"helpText":null}]},"d3e5cc3653e2ce38":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_automaticnumberedlists","displayName":"Automatic numbered lists (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"62492a4c-fd70-4275-ae5e-d60e200e3553","categoryName":"Apply as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_automaticnumberedlists_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_automaticnumberedlists_1","displayName":"Enabled","description":null,"helpText":null}]},"d34200d56b5510ef":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_autospace","displayName":"Auto space (User)","description":"This policy setting allows you to set the option \"Delete needless spaces between Asian and Western text\" in the group \"Automatically as you type.\" This option may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, \"Delete needless spaces between Asian and Western text\" will be set.\r\n\r\nIf you disable or do not configure this policy setting, \"Delete needless spaces between Asian and Western text\" will not be set.","helpText":"","infoUrls":[],"categoryId":"e8ce968b-91cb-4301-ba98-b37d42bc5213","categoryName":"Automatically as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_autospace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_autospace_1","displayName":"Enabled","description":null,"helpText":null}]},"d3b90e4009cd00c9":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates","displayName":"Word 2 and earlier binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/d4.json b/public/intune-definitions/d4.json new file mode 100644 index 000000000000..eeb290bf193a --- /dev/null +++ b/public/intune-definitions/d4.json @@ -0,0 +1 @@ +{"d422ab19b5f3a39e":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordexpirationdays","displayName":"Number of days until password expires","description":"Enter the number of days, until the work profile password must be changed, from 1-365. For example, enter 90 to expire the password after 90 days. When the password expires, users are prompted to create a new password. If the value is blank, Intune doesn't change or update this setting. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-365)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"d41fcc76d3e46e8b":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype","displayName":"Required password type","description":"Set the work profile password’s complexity requirements. Additional password requirements will become available based on your selection. Available for corporate-owned work profile devices (at work profile level). For more details, see the information provided in the ‘Learn More’ section below.","helpText":"","infoUrls":["https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-for-work?WT.mc_id=Portal-fx#device-password:~:text=owned%20work%20profiles.-,Required%20password%20type%3A,-Enter%20the%20required"],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":[{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_devicedefault","displayName":"Device default","description":"Device default value, no intent.","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_required","displayName":"Password required, no restrictions","description":"There must be a password set, but there are no restrictions on type.","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_lowsecuritybiometric","displayName":"Weak Biometric","description":"Low security biometrics based password required.","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_numeric","displayName":"Numeric","description":"At least numeric.","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_numericcomplex","displayName":"Numeric Complex","description":"At least numeric with no repeating or ordered sequences.","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_alphabetic","displayName":"Alphabetic","description":"At least alphabetic password.","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_alphanumeric","displayName":"Alphanumeric","description":"At least alphanumeric password","helpText":null},{"id":"com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_alphanumericwithsymbols","displayName":"Alphanumeric with symbols","description":"At least alphanumeric with symbols.","helpText":null}]},"d4e33452d0a1f98d":{"id":"com.apple.cellularprivatenetwork.managed_csgnetworkidentifier","displayName":"Csg Network Identifier","description":"A string using the 3GPP \"CSG_ID\" format (defined in 3GPP 23.003, Section 4.7). The device uses this value to match a SIM present on the device.\n\nAll combinations of `NetworkIdentifier` and `CsgNetworkIdentifier` must be unique across all profiles installed on the device.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"d45920003a810a75":{"id":"com.apple.dock_dblclickbehavior-immutable","displayName":"Double Click Behavior Immutable","description":"If true, locks \"Double-click a window's title bar.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_dblclickbehavior-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_dblclickbehavior-immutable_true","displayName":"True","description":null,"helpText":null}]},"d41ba5f14c82cbd3":{"id":"com.apple.managedclient.preferences_aadwebsitessousingthisprofileenabled","displayName":"Single sign-on for work or school sites using this profile enabled","description":"'Allow single sign-on for work or school sites using this profile' option allows non-AAD profiles to be able to use single sign-on for work or school sites using work or school credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-AAD profiles only.\n\nIf you enable or disable this policy, 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' will be turned off.\n\nIf you don't configure this policy, users can control whether to use SSO using other credentials present on the machine in edge://settings/profiles/multiProfileSettings.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#aadwebsitessousingthisprofileenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_aadwebsitessousingthisprofileenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_aadwebsitessousingthisprofileenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d4ecfaf7ad38d725":{"id":"com.apple.managedclient.preferences_edgedisabledialprotocolforcastdiscovery","displayName":"Disable DIAL protocol for cast device discovery","description":"Enable this policy to disable the DIAL (Discovery And Launch) protocol for cast device discovery. (If EnableMediaRouter is disabled, this policy will have no effect).\n\nEnable this policy to disable DIAL protocol.\n\nBy default, Cast device discovery will use DIAL protocol.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgedisabledialprotocolforcastdiscovery"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgedisabledialprotocolforcastdiscovery_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgedisabledialprotocolforcastdiscovery_true","displayName":"Enabled","description":null,"helpText":null}]},"d497b796354a9b55":{"id":"com.apple.managedclient.preferences_enableodignore","displayName":"Ignore named files","description":"This setting lets you enter keywords to prevent the OneDrive sync app from uploading certain files to OneDrive or SharePoint. You can enter complete names, such as setup.bin or use the asterisk (*) as a wildcard character to represent a series of characters, such as *.eml. Keywords aren't case-sensitive.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#allow-only-corporate-mailboxes-to-be-added"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":null},"d4004f4579115f2c":{"id":"com.apple.managedclient.preferences_threattypesettings","displayName":"Threat type settings","description":"The threatTypeSettings preference in the antivirus engine is used to control how certain threat types are handled by the product.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#threat-type-settings"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"d497b66b4122bdb1":{"id":"com.apple.managedclient.preferences_webappinstallforcelist","displayName":"Web App Install Force List","description":"Specifies a list of websites that are installed silently, without user interaction, and which can't be uninstalled or disabled by the user.\n\nEach list item of the policy is an object with the following members:\n - \"url\", which is mandatory. \"url\" should be the URL of the web app to install.\n\nValues for the optional members are:\n - \"launch_container\" should be either \"window\" or \"tab\" to indicate how the Web App will be opened after it's installed.\n - \"create_desktop_shortcut\" should be true if a desktop shortcut should be created on Windows.\n\nIf \"default_launch_container\" is omitted, the app will open in a tab by default. Regardless of the value of \"default_launch_container\", users can change which container the app will open in. If \"create_desktop_shortcuts\" is omitted, no desktop shortcuts will be created.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webappinstallforcelist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"d452bbd10349a068":{"id":"com.apple.systemconfiguration_proxies_ftppassive","displayName":"FTP Passive","description":"If true, enables passive FTP mode. ","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_ftppassive_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_ftppassive_1","displayName":"True","description":null,"helpText":null}]},"d4064101f74cd349":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_idnencoding","displayName":"Turn off IDN encoding","description":"Specifies whether the DNS client should convert internationalized domain names (IDNs) to Punycode when the computer is on non-domain networks with no WINS servers configured.\r\n\r\nIf this policy setting is enabled, IDNs are not converted to Punycode.\r\n\r\nIf this policy setting is disabled, or if this policy setting is not configured, IDNs are converted to Punycode when the computer is on non-domain networks with no WINS servers configured.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-idnencoding"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_idnencoding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_idnencoding_1","displayName":"Enabled","description":null,"helpText":null}]},"d4858cfe7758e5f1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablescanonrealtimeenable","displayName":"Turn on process scanning whenever real-time protection is enabled","description":"This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off.\r\n\r\n If you enable or do not configure this setting, a process scan will be initiated when real-time protection is turned on.\r\n\r\n If you disable this setting, a process scan will not be initiated when real-time protection is turned on.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-disablescanonrealtimeenable"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablescanonrealtimeenable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablescanonrealtimeenable_1","displayName":"Enabled","description":null,"helpText":null}]},"d490207f73690800":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_backgroundretrymaximumperiod_netlogon_backgroundretrymaximumperiodlabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"d40c73613c880cd1":{"id":"device_vendor_msft_policy_config_admx_printing_domainprinters_wsdprinters","displayName":"Number of Web Services Printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"d46f3224942e19d5":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_server_name","displayName":"Set Teredo Server Name","description":"This policy setting allows you to specify the name of the Teredo server. This server name will be used on the Teredo client computer where this policy setting is applied.\r\n\r\nIf you enable this policy setting, you can specify a Teredo server name that applies to a Teredo client.\r\n\r\nIf you disable or do not configure this policy setting, the local settings on the computer are used to determine the Teredo server name.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-teredo-server-name"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_server_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_server_name_1","displayName":"Enabled","description":null,"helpText":null}]},"d468d3d9773a47b7":{"id":"device_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_2","displayName":"Turn off the offer to update to the latest version of Windows","description":"Enables or disables the Store offer to update to the latest version of Windows.\r\n\r\nIf you enable this setting, the Store application will not offer updates to the latest version of Windows.\r\n\r\nIf you disable or do not configure this setting the Store application will offer updates to the latest version of Windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsstore#admx-windowsstore-disableosupgrade-2"],"categoryId":"be9bdbec-b52e-4174-9c5b-cf765dee855b","categoryName":"Store","options":[{"id":"device_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_2_1","displayName":"Enabled","description":null,"helpText":null}]},"d469490e837df0df":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforlegacycas_certificatetransparencyenforcementdisabledforlegacycasdesc","displayName":"Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"d416aa60be8580cf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_browserswitcherchromeparametersdesc","displayName":"Command-line parameters for switching from the alternative browser. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"d4e47e4b05d046d2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist","displayName":"Disable printer types on the deny list","description":"The printers of types placed on the deny list will be disabled from being discovered or having their capabilities fetched.\r\n\r\nPlacing all printer types on the deny list effectively disables printing, as there would be no available destinations to send a document for printing.\r\n\r\nIncluding cloud on the deny list has the same effect as setting the CloudPrintSubmitEnabled policy to false. In order to keep Google Cloud Print destinations discoverable, the CloudPrintSubmitEnabled policy must be set to true and cloud must not be on the deny list.\r\n\r\nIf the policy is not set, or is set to an empty list, all printer types will be available for discovery.\r\n\r\nExtension printers are also known as print provider destinations, and include any destination that belongs to a Google Chrome extension.\r\n\r\nLocal printers are also known as native printing destinations, and include destinations available to the local machine and shared network printers.\r\n\r\nExample value:\r\n\r\ncloud\r\nprivet","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},"d4f4cc54c8688c6f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings","displayName":"Default HTML renderer for Google Chrome Frame","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_1","displayName":"Enabled","description":null,"helpText":null}]},"d4e07c4433b6fe57":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation","displayName":"Configure the New Tab page URL","description":"Setting the policy configures the default New Tab page URL and prevents users from changing it.\r\n\r\nThe New Tab page opens with new tabs and windows.\r\n\r\nThis policy doesn't decide which pages open on start up. Those are controlled by the RestoreOnStartup policies. This policy does affect the homepage, if that's set to open the New Tab page, as well as the startup page if it's set to open the New Tab page.\r\n\r\nIt is a best practice to provide fully canonicalized URL, if the URL is not fully canonicalized Google Chrome will default to https://.\r\n\r\nLeaving the policy unset or empty puts the default New Tab page in use.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"d434704e64b2d818":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites","displayName":"Allow JavaScript optimization on these sites","description":"Allows you to set a list of site url patterns that specify sites for which\r\nadvanced JavaScript optimizations are enabled.\r\n\r\nFor detailed information on valid site url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site\r\ngranularity (eTLD+1). A policy set for only subdomain.site.com will not\r\ncorrectly apply to site.com or subdomain.site.com since they both resolve to\r\nthe same eTLD+1 (site.com) for which there is no policy. In this case, policy\r\nmust be set on site.com to apply correctly for both site.com and\r\nsubdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level\r\norigin url alone, so e.g. if site-one.com is listed in the JavaScriptOptimizerAllowedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript optimizations\r\nenabled, but site-two.com will use the policy from DefaultJavaScriptOptimizerSetting, if set, or default to JavaScript\r\noptimizations enabled. Blocklist entries have higher priority than allowlist\r\nentries, which in turn have higher priority than the configured default value.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptOptimizerSetting applies to the site, if set, otherwise\r\nJavascript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"d4cfe35b9da20836":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_firstpartysetsoverrides","displayName":"Override First-Party Sets. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"da78ddbc-fc94-48f9-8808-4b160d6f1d50","categoryName":"First- Party Sets Settings","options":null},"d432da3bac9a5a99":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_accesscodecastdeviceduration","displayName":"Specifies how long (in seconds) a cast device selected with an access code or QR code stays in the Google Cast menu's list of cast devices.: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":null},"d43a35b3379eb54a":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_1","displayName":"Single-user Search","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_2","displayName":"Multi-user Search","description":null,"helpText":null}]},"d4b24076adb9961f":{"id":"device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit","displayName":"Allow deleting browsing history on exit","description":"This policy setting allows the automatic deletion of specified items when the last browser window closes. The preferences selected in the Delete Browsing History dialog box (such as deleting temporary Internet files, cookies, history, form data, and passwords) are applied, and those items are deleted.\n\nIf you enable this policy setting, deleting browsing history on exit is turned on.\n\nIf you disable this policy setting, deleting browsing history on exit is turned off.\n\nIf you do not configure this policy setting, it can be configured on the General tab in Internet Options.\n\nIf the \"Prevent access to Delete Browsing History\" policy setting is enabled, this policy setting has no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowdeletingbrowsinghistoryonexit"],"categoryId":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","categoryName":"Delete Browsing History","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"d46dd6d785a11164":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon only in Intranet zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonelogonoptions"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"d42f974844ea9578":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_remotelyaccessibleregistrypaths","displayName":"Network Access Remotely Accessible Registry Paths","description":"Network access: Remotely accessible registry paths This security setting determines which registry keys can be accessed over the network, regardless of the users or groups listed in the access control list (ACL) of the winreg registry key. Default: System\\CurrentControlSet\\Control\\ProductOptions System\\CurrentControlSet\\Control\\Server Applications Software\\Microsoft\\Windows NT\\CurrentVersion Caution Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer. Note: This security setting is not available on earlier versions of Windows. The security setting that appears on computers running Windows XP, "Network access: Remotely accessible registry paths" corresponds to the "Network access: Remotely accessible registry paths and subpaths" security option on members of the Windows Server 2003 family. For more information, see Network access: Remotely accessible registry paths and subpaths.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_remotelyaccessibleregistrypaths"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"d43823f9ddc13690":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting","displayName":"Default notification setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1","displayName":"Allow sites to show desktop notifications","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2","displayName":"Don't allow any site to show desktop notifications","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3","displayName":"Ask every time a site wants to show desktop notifications","description":null,"helpText":null}]},"d4b9d3e1871f420c":{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage","description":"This policy controls sending required and optional diagnostic data about browser usage to Microsoft.\r\n\r\nRequired diagnostic data is collected to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\nOptional diagnostic data includes data about how you use the browser, websites you visit and crash reports to Microsoft for product and service improvement.\r\n\r\nUp to version 121, this policy is not supported on Windows 10 devices. To control this data collection on Windows 10 for 121 and previous, IT admins must use the Windows diagnostic data group policy. This policy will either be 'Allow Telemetry' or 'Allow Diagnostic Data', depending on the version of Windows. Learn more about Windows 10 diagnostic data collection: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nFor version 122 and later, this policy is supported on Windows 10 devices to allow controlling Microsoft Edge data collection separately from Windows 10 diagnostics data collection.\r\n\r\nUse one of the following settings to configure this policy:\r\n\r\n'Off' turns off required and optional diagnostic data collection. This option is not recommended.\r\n\r\n'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\n'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.\r\n\r\nOn Windows 7/macOS, this policy controls sending required and optional data to Microsoft.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will default to the user's preference.\r\n\r\nPolicy options mapping:\r\n\r\n* Off (0) = Off (Not recommended)\r\n\r\n* RequiredData (1) = Required data\r\n\r\n* OptionalData (2) = Optional data\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_1","displayName":"Enabled","description":null,"helpText":null}]},"d4b1048564449f2a":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_internetexplorerintegrationcloudneutralsitesreporting","displayName":"Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d4387c21faaea0db":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winprojexe188","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winprojexe188_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winprojexe188_1","displayName":"True","description":null,"helpText":null}]},"d4e1573062d39977":{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_saepreview","displayName":"Semi-Annual Enterprise Channel (Preview) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_saepreview_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_saepreview_1","displayName":"True","description":null,"helpText":null}]},"d4df85ba33ba4f4d":{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_addedfolderunmountonpermissionsloss","displayName":"Hard-delete the contents of an added folder when user loses permissions to the folder","description":"This setting determines the behavior of the Sync client when the user loses permissions to an added folder.\n\nIf admins enable this setting (value 1), when the Sync client detects that the user lost permissions to an Added Folder, the Sync client will hard-delete all the contents of the folder and the folder itself.\n\nIf admins disable (value 0) or do not configure this setting, Sync will by default mark the folder in error and prompt the user to remove it. When the user confirms the removals, the contents of the folder are moved to the recycle-bin.\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_addedfolderunmountonpermissionsloss_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengsc~policy~onedrivengsc_addedfolderunmountonpermissionsloss_1","displayName":"Enabled","description":null,"helpText":null}]},"d41895d0b73bfc1d":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb","displayName":"Warn users who are low on disk space","description":"This setting lets you specify a minimum amount of available disk space and warn users when the OneDrive sync app (OneDrive.exe) downloads a file that causes them to have less than this amount.\r\n\r\nUsers will be prompted with options to help free up space.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb_1","displayName":"Enabled","description":null,"helpText":null}]},"d412709e3fd36067":{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory","displayName":"Specify maximum amount of memory in MB per Shell","description":"This policy setting configures the maximum total amount of memory in megabytes that can be allocated by any active remote shell and all its child processes.\n\nAny value from 0 to 0x7FFFFFFF can be set, where 0 equals unlimited memory, which means the ability of remote operations to allocate memory is only limited by the available virtual memory.\n\nIf you enable this policy setting, the remote operation is terminated when a new allocation exceeds the specified quota.\n\nIf you disable or do not configure this policy setting, the value 150 is used by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifymaxmemory"],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory_1","displayName":"Enabled","description":null,"helpText":null}]},"d4f5e7df9fa85084":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allowedfilesystemdirectories_accesslevel","displayName":"Access level","description":"Level of filesystem access granted for this directory. Subdirectories inherit the same access level unless they have their own rule.","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":[{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allowedfilesystemdirectories_accesslevel_0","displayName":"Read","description":"Read-only access","helpText":null},{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allowedfilesystemdirectories_accesslevel_1","displayName":"Read/Write","description":"Read and write access","helpText":null}]},"d4b0e3dead89936a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm","displayName":"Set CNG cipher algorithm (User)","description":"This policy setting allows you to configure the CNG cipher algorithm that is used.\r\n\r\nIf you enable this policy setting, then the cipher provided will be used if it is a supported algorithm.\r\n\r\nIf you disable or do not configure this policy setting, AES will be used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"d457b47741d0468e":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07","displayName":"Trusted Location #7 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_1","displayName":"Enabled","description":null,"helpText":null}]},"d496edbe1950c3fa":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders70","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders70_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders70_1","displayName":"True","description":null,"helpText":null}]},"d436fdd58e19cd01":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_nocomponents","displayName":"Disable all items (User)","description":"Removes Active Desktop content and prevents users from adding Active Desktop content. \r\n\r\nThis setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop.\r\n\r\nNote: This setting does not disable Active Desktop. Users can still use image formats, such as JPEG and GIF, for their desktop wallpaper.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-nocomponents"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_nocomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_nocomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"d433304882a18c23":{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishsharedfolders","displayName":"Allow shared folders to be published (User)","description":"This policy setting determines whether the user can publish shared folders in Active Directory Domain Services (AD DS).\r\n\r\nIf you enable or do not configure this policy setting, users can use the \"Publish in Active Directory\" option in the Shared Folders snap-in to publish shared folders in AD DS.\r\n\r\nIf you disable this policy setting, users cannot publish shared folders in AD DS, and the \"Publish in Active Directory\" option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sharedfolders#admx-sharedfolders-publishsharedfolders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishsharedfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishsharedfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"d45dc9b3c1546db0":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmymusic","displayName":"Remove Music icon from Start Menu (User)","description":"This policy setting allows you to remove the Music icon from Start Menu.\r\n\r\nIf you enable this policy setting, the Music icon is no longer available from Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the Music icon is available from Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmmymusic"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmymusic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmymusic_1","displayName":"Enabled","description":null,"helpText":null}]},"d4cde5e67accb1f8":{"id":"user_vendor_msft_policy_config_admx_startmenu_notraycontextmenu","displayName":"Remove access to the context menus for the taskbar (User)","description":"This policy setting allows you to remove access to the context menus for the taskbar.\r\n\r\nIf you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.\r\n\r\nIf you disable or do not configure this policy setting, the context menus for the taskbar are available.\r\n\r\nThis policy setting does not prevent users from using other methods to issue the commands that appear on these menus.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notraycontextmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notraycontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notraycontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"d47f962abad404cd":{"id":"user_vendor_msft_policy_config_admx_startmenu_showstartondisplaywithforegroundonwinkey","displayName":"Show Start on the display the user is using when they press the Windows logo key (User)","description":"This policy setting allows the Start screen to appear on the display the user is using when they press the Windows logo key. This setting only applies to users who are using multiple displays.\r\n\r\nIf you enable this policy setting, the Start screen will appear on the display the user is using when they press the Windows logo key.\r\n\r\nIf you disable or don't configure this policy setting, the Start screen will always appear on the main display when the user presses the Windows logo key. Users will still be able to open Start on other displays by pressing the Start button on that display. Also, the user will be able to configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showstartondisplaywithforegroundonwinkey"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showstartondisplaywithforegroundonwinkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showstartondisplaywithforegroundonwinkey_1","displayName":"Enabled","description":null,"helpText":null}]},"d482612a2d82d9ed":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs_maxrecentdocs","displayName":"Maximum number of recent documents (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"d4b5502cc75546f1":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nonetconnectdisconnect","displayName":"Remove \"Map Network Drive\" and \"Disconnect Network Drive\" (User)","description":"Prevents users from using File Explorer or Network Locations to map or disconnect network drives.\r\n\r\nIf you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in File Explorer and Network Locations and from menus that appear when you right-click the File Explorer or Network Locations icons.\r\n\r\nThis setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.\r\n\r\nNote:\r\n\r\nThis setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.\r\n\r\nNote: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nonetconnectdisconnect"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nonetconnectdisconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nonetconnectdisconnect_1","displayName":"Enabled","description":null,"helpText":null}]},"d47a938c0872b072":{"id":"user_vendor_msft_policy_config_browser_allowpopups","displayName":"Allow Popups (User)","description":"This setting lets you decide whether to turn on Pop-up Blocker and whether to allow pop-ups to appear in secondary windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowpopups"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowpopups_0","displayName":"Block","description":"Turn off Pop-up Blocker letting pop-up windows open.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowpopups_1","displayName":"Allow","description":"Turn on Pop-up Blocker stopping pop-up windows from opening.","helpText":null}]},"d4c1e0ebf47756e4":{"id":"user_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar","displayName":"Allow Search Suggestionsin Address Bar (User)","description":"This setting lets you decide whether search suggestions should appear in the Address bar of Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsearchsuggestionsinaddressbar"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar_0","displayName":"Block","description":"Prevented/Not allowed. Hide the search suggestions.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar_1","displayName":"Allow","description":"Allowed. Show the search suggestions.","helpText":null}]},"d4b8fa330efb7a80":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer","displayName":"Restrict CPU core sharing for renderer process (User)","description":"This policy mitigates side-channel cross process memory attacks by isolating the renderer process on the CPU core and preventing other processes from sharing the same core. The mitigation is supported on Microsoft® Windows® 11 24H2 and above. If the OS does not have the required scheduling support, this policy will have no effect. This policy may slow down performance in some demanding scenarios similar to disabling hyperthreading. For more information refer https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-process_mitigation_side_channel_isolation_policy\r\nIf this policy is enabled, all other processes will not be scheduled on the same CPU core when the renderer process is running.\r\nIf this policy is disabled, all other processes can be scheduled on the same CPU core if a renderer process is running on it.\r\nIf this policy is not set, all other processes can be scheduled on the same CPU core if a renderer process is running on the core. This may vary depending on Google Chrome release, currently running field trials, and platform.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer_1","displayName":"Enabled","description":null,"helpText":null}]},"d4ab6a4f03cfb390":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc","displayName":"Automatically grant permission to sites to connect to any HID device. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"d486988eef3f6941":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled","displayName":"Bind Google credentials to a device (User)","description":"Controls the state of the Device Bound Session Credentials feature.\r\n\r\nDevice Bound Session Credentials protects Google authentication cookies against cookie theft by regularly providing a cryptographic proof of device possession to Google servers.\r\n\r\nIf this policy is set to false, Device Bound Session Credentials feature will be disabled.\r\n\r\nIf this policy is set to true, Device Bound Session Credentials feature will be enabled.\r\n\r\nIf this policy is unset, Google Chrome will follow the default rollout process for the Device Bound Session Credentials feature, which means that the feature will be gradually rolled out to an increasing number of users.","helpText":"","infoUrls":[],"categoryId":"f00e9baf-9bbf-48e4-aaac-57410730f016","categoryName":"Sign-in settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d45bc92be5b4f619":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_datecolon62","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"d43d7d7bd9dd5d54":{"id":"user_vendor_msft_policy_config_excel16v4~policy~l_microsoftofficeexcel~l_powerbi_l_disablefrompowerbidatasetorganizationname","displayName":"Disable displaying organization name in the buttons to create PivotTables from Power BI datasets (User)","description":"\r\n This policy setting allows you to prevent the organization name from being displayed in the buttons in the Excel ribbon used to create PivotTables from Power BI datasets. By default, the organization name will be shown in the ribbon if it is available from Graph.\r\n\r\n If you enable this policy setting, the organization name will not be shown.\r\n\r\n If you disable or don’t configure this policy setting, the organization name will be shown.\r\n\r\n Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"b473c6fa-a971-4e5d-ad15-2c27c17c5d3e","categoryName":"Power BI","options":[{"id":"user_vendor_msft_policy_config_excel16v4~policy~l_microsoftofficeexcel~l_powerbi_l_disablefrompowerbidatasetorganizationname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v4~policy~l_microsoftofficeexcel~l_powerbi_l_disablefrompowerbidatasetorganizationname_1","displayName":"Enabled","description":null,"helpText":null}]},"d4d4a6eef6e0c480":{"id":"user_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms","displayName":"Check for signatures on downloaded programs (User)","description":"This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it hasn't been modified or tampered with) on user computers before downloading executable programs.\n\nIf you enable this policy setting, Internet Explorer will check the digital signatures of executable programs and display their identities before downloading them to user computers.\n\nIf you disable this policy setting, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers.\n\nIf you do not configure this policy, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-checksignaturesondownloadedprograms"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"d4eeb0d3d3f654d1":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows","displayName":"Enable dragging of content from different domains across windows (User)","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when both the source and destination are in different windows. Users cannot change this setting.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in different windows. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy or do not configure it, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1","displayName":"Enabled","description":null,"helpText":null}]},"d4c3f9b2783272aa":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"d4364118ca8f01e5":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (User)","description":"This setting lets you specify whether Internet Explorer will redirect navigations to sites that require a modern browser to Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Sitelist', beginning in M87, Internet Explorer will redirect sites that require a modern browser to Microsoft Edge.\r\n\r\nMicrosoft provides a list of public sites that require such redirection, such as https://mail.yahoo.com.\r\n\r\nWhen a site is redirected from Internet Explorer to Microsoft Edge, the Internet Explorer tab that began loading that site is closed if it had no prior content. Otherwise, it is navigated to a Microsoft help page explaining why the site was redirected to Microsoft Edge.\r\n\r\nWhen Microsoft Edge is launched to load a site from IE, an information bar is shown to the user explaining that the site works best in a modern browser.\r\n\r\nIf you set this policy to 'Disable', Internet Explorer will not redirect any traffic to Microsoft Edge.\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable\r\n\r\n* Sitelist (1) = Redirect sites based on the incompatible sites sitelist\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d41273dbacbd99a1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffword","displayName":"Turn off AutoSave by default in Word (User)","description":"This policy setting allows you to turn off AutoSave by default in PowerPoint. AutoSave automatically saves all changes a user makes to files that are stored in OneDrive, OneDrive for Business, or SharePoint Online.\r\n\r\nIf you enable this policy setting, AutoSave is off by default in PowerPoint. But, the user can enable AutoSave for PowerPoint by going to File > Options > Save. Or, the user can enable AutoSave for a specific PowerPoint file by using the AutoSave toggle in the title bar.\r\n \r\nIf you disable or don’t configure this policy setting, AutoSave is on by default, but the user can disable AutoSave by going to File > Options > Save or by using the AutoSave toggle.\r\n \r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"9865907f-b775-4d36-9578-a016c5105dfe","categoryName":"AutoSave","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_autosave_l_autosavedefaultoffword_1","displayName":"Enabled","description":null,"helpText":null}]},"d44534b68ef97f54":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastservicenotesdefaulturl5","displayName":"Shared Notes Default Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"d4bfe90ae2d4e7a3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlooksendforreview_l_empty399","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlooksendforreview_l_empty399_0","displayName":"Enable 'send for review'","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlooksendforreview_l_empty399_2","displayName":"Exclude author's e-mail in documents","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_outlooksendforreview_l_empty399_1","displayName":"Disable 'send for review'","description":null,"helpText":null}]},"d4dfb8f7c259c1b2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacecompany","displayName":"Replace Label - Company (User)","description":"This policy setting allows you to change or remove the 12th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacecompany_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacecompany_1","displayName":"Enabled","description":null,"helpText":null}]},"d480a5d43261a54e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacemobile","displayName":"Replace Label - Mobile (User)","description":"This policy setting allows you to change or remove the 5th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacemobile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacemobile_1","displayName":"Enabled","description":null,"helpText":null}]},"d4d94a56a3d67d02":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_suppressrecommendedsettingsdialog","displayName":"Suppress recommended settings dialog (User)","description":"This policy setting controls the Recommended Settings dialog on first run of Office.\r\n\r\nIf you enable this policy setting, the recommended settings dialog will not be displayed on first run of Office.\r\n\r\nIf you disable or do not configure this policy setting, the recommended settings will provide choices to the user to opt into services such as such as Microsoft Update, new software notifications, Customer Experience Improvement Program, Office Diagnostics (Automatically receive small updates to improve reliability) Online Help (Online content options) and Online Search Relevancy that will help improve their Office experience.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_suppressrecommendedsettingsdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_suppressrecommendedsettingsdialog_1","displayName":"Enabled","description":null,"helpText":null}]},"d4cef577f139c7b0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_arabicmodes","displayName":"Arabic modes (User)","description":"Specifies the spelling rules to use for checking spelling of Arabic text. This option is available only if you are using a right-to-left language version of Microsoft Office or have installed Microsoft Office 2016 proofing tools or the Microsoft Office Single Language Pack 2016 for the language, and have enabled support for the language through Microsoft Office 2016 Language Preferences.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_arabicmodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_arabicmodes_1","displayName":"Enabled","description":null,"helpText":null}]},"d4bc6fc4b9d075fb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_customizableerrormessages_l_listoferrormessagestocustomize","displayName":"List of error messages to customize (User)","description":"Defines a list of custom error messages to activate.","helpText":"","infoUrls":[],"categoryId":"ee62e9fc-14c8-4f24-aa7e-89524087a802","categoryName":"Customizable Error Messages","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_customizableerrormessages_l_listoferrormessagestocustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_customizableerrormessages_l_listoferrormessagestocustomize_1","displayName":"Enabled","description":null,"helpText":null}]},"d4b2c06229473890":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_disablereadingpanecompose","displayName":"Disable Reading Pane Compose (User)","description":"This policy setting allows you to control whether user’s responses to emails are composed inline on the reading pane or in a new window.\r\n\r\nIf you enable this policy setting, responses to emails are composed in new windows.\r\n\r\nIf you disable or do not configure this policy setting, responses to emails are composed inline in the reading pane.","helpText":"","infoUrls":[],"categoryId":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","categoryName":"Compose Messages","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_disablereadingpanecompose_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_disablereadingpanecompose_1","displayName":"Enabled","description":null,"helpText":null}]},"d4790f1ab83e9bd7":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_displayenterprisethemes_l_displayenterprisethemesgallerytitle","displayName":"Enterprise themes category title (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":null},"d48ded2b10c8fedb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc","displayName":"Disable all trusted locations (User)","description":"This policy setting allows administrators to disable all trusted locations in the specified applications. Trusted locations specified in the Trust Center are used to define file locations that are assumed to be safe. Content, code, and add-ins are allowed to load from trusted locations with a minimal amount of security, without prompting the users for permission. If a dangerous file is opened from a trusted location, it will not be subject to standard security measures and could harm users' computers or data.\r\n \r\nIf you enable this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are ignored, including any trusted locations established by Office 2016 during setup, deployed to users using Group Policy, or added by users themselves. Users will be prompted again when opening files from trusted locations.\r\n\r\nIf you disable or do not configure this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are assumed to be safe.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1","displayName":"Enabled","description":null,"helpText":null}]},"d450fa0777195f20":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjdefaultfixedaccrual","displayName":"Default fixed costs accrual (User)","description":"Specifies how Project sets the fixed cost accrual for new tasks.\r\n\r\nIf you enable this setting, new tasks will accrue fixed cost according to the specification you made.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjdefaultfixedaccrual_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjdefaultfixedaccrual_1","displayName":"Enabled","description":null,"helpText":null}]},"d493ba0d878fb8a3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionscustomizeribbon_l_displaydevelopertab","displayName":"Display Developer tab in the Ribbon (User)","description":"This policy setting controls whether the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you enable this policy setting, the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you disable this policy setting, the Developer tab will not be displayed in the Ribbon.\r\n\r\nIf you do not configure this policy setting, the Developer tab will not be displayed in the Ribbon, but its visibility can be changed via a setting in the application Options dialog box.","helpText":"","infoUrls":[],"categoryId":"f9e53433-d8d9-4eaf-bdf3-d32de60d686e","categoryName":"Customize Ribbon","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionscustomizeribbon_l_displaydevelopertab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionscustomizeribbon_l_displaydevelopertab_1","displayName":"Enabled","description":null,"helpText":null}]},"d4c8d9d1ad990721":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_pathcolon48","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/d5.json b/public/intune-definitions/d5.json new file mode 100644 index 000000000000..5b5005738e15 --- /dev/null +++ b/public/intune-definitions/d5.json @@ -0,0 +1 @@ +{"d5bcb69ac3e3db4f":{"id":"ade_setupassistant_taptosetup","displayName":"Tap to Setup","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_taptosetup_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_taptosetup_1","displayName":"Show","description":null,"helpText":null}]},"d5427869a21fdd17":{"id":"com.apple.applicationaccess_ratingappsgb","displayName":"Rating Apps - Great Britain","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsgb_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_1","displayName":"1+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_2","displayName":"2+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_3","displayName":"3+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_4","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_5","displayName":"5+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_6","displayName":"6+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_7","displayName":"7+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_8","displayName":"8+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_9","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_10","displayName":"10+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_11","displayName":"11+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_12","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_13","displayName":"13+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_14","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_15","displayName":"15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_16","displayName":"16+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_17","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_18","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_19","displayName":"19+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_20","displayName":"20+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_21","displayName":"21+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsgb_22","displayName":"All","description":null,"helpText":null}]},"d5fc0430f30bbd89":{"id":"com.apple.cellularprivatenetwork.managed_geofences_item_longitude","displayName":"Longitude","description":"The longitude of the geofence.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"d5f644d5f0f8bc70":{"id":"com.apple.dnssettings.managed_dnssettings_serverurl","displayName":"Server URL","description":"The URI template of a DNS-over-HTTPS server, as defined in RFC 8484. This URL must use the https:// scheme, and the hostname or address in the URL will be used to validate the server certificate. If no ServerAddresses are provided, the hostname or address in the URL will be used to determine the server addresses. This key must be present only if the DNSProtocol is HTTPS.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"d599df85fe582b5f":{"id":"com.apple.domains_com.apple.domains","displayName":"Top Level Setting Group Collection","description":"com.apple.domains","helpText":null,"infoUrls":[],"categoryId":"224dc683-c0e0-4783-8ba8-8f02c76d161d","categoryName":"Domains","options":null},"d55da161dfca0749":{"id":"com.apple.managedclient.preferences_disable3dapis","displayName":"Disable support for 3D graphics APIs","description":"Prevent web pages from accessing the graphics processing unit (GPU). Specifically, web pages can't access the WebGL API and plug-ins can't use the Pepper 3D API.\n\nIf you don't configure or disable this policy, it potentially allows web pages to use the WebGL API and plug-ins to use the Pepper 3D API. Microsoft Edge might, by default, still require command line arguments to be passed in order to use these APIs.\n\nIf \"HardwareAccelerationModeEnabled\" policy is set to false, the setting for 'Disable3DAPIs' policy is ignored - it's the equivalent of setting 'Disable3DAPIs' policy to true.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#disable3dapis"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_disable3dapis_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disable3dapis_true","displayName":"Enabled","description":null,"helpText":null}]},"d5e9256a277f904f":{"id":"com.apple.managedclient.preferences_edgecollectionsenabled","displayName":"Enable the Collections feature","description":"Lets you allow users to access the Collections feature, where they can collect, organize, share, and export content more efficiently and with Office integration.\n\nIf you enable or don't configure this policy, users can access and use the Collections feature in Microsoft Edge.\n\nIf you disable this policy, users can't access and use Collections in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgecollectionsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgecollectionsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgecollectionsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d5d292042dddfec0":{"id":"com.apple.managedclient.preferences_httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades","description":"As of Microsoft Edge version 120, Microsoft Edge tries to upgrade HTTP navigations to HTTPS whenever possible to improve security. Navigations to captive portals, IP addresses, and non-unique hostnames are excluded from automatic upgrades.\n\nIf this policy is enabled or not configured, automatic HTTPS upgrades are turned on by default.\n\nIf this policy is disabled, Microsoft Edge won't attempt to upgrade HTTP connections to HTTPS.\n\nTo exempt specific hostnames or hostname patterns from being upgraded, use the HttpAllowlist policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#httpsupgradesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_httpsupgradesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_httpsupgradesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d56ee1123ac31d5b":{"id":"com.apple.managedclient.preferences_passwordmanagerrestrictlengthenabled","displayName":"Restrict the length of passwords that can be saved in the Password Manager","description":"Make Microsoft Edge restrict the length of usernames and/or passwords that can be saved in the Password Manager.\n\nIf you enable this policy, Microsoft Edge will not let the user save credentials with usernames and/or passwords longer than 256 characters.\n\nIf you disable or don't configure this policy, Microsoft Edge will let the user save credentials with arbitrarily long usernames and/or passwords.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordmanagerrestrictlengthenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_passwordmanagerrestrictlengthenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_passwordmanagerrestrictlengthenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d566a1552d95d057":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultprinterselection","displayName":"Default printer selection rules","description":"Overrides Microsoft Edge default printer selection rules. This policy determines the rules for selecting the default printer in Microsoft Edge, which happens the first time a user tries to print a page.\n\nWhen this policy is set, Microsoft Edge tries to find a printer that matches all of the specified attributes and uses it as default printer. If there are multiple printers that meet the criteria, the first printer that matches is used.\n\nIf you don't configure this policy or no matching printers are found within the timeout, the printer defaults to the built-in PDF printer or no printer, if the PDF printer isn't available.\n\nThe value is parsed as a JSON object, conforming to the following schema: { \"type\": \"object\", \"properties\": { \"idPattern\": { \"description\": \"Regular expression to match printer id.\", \"type\": \"string\" }, \"namePattern\": { \"description\": \"Regular expression to match printer display name.\", \"type\": \"string\" } } }\n\nOmitting a field means all values match; for example, if you don't specify connectivity Print Preview starts discovering all kinds of local printers. Regular expression patterns must follow the JavaScript RegExp syntax and matches are case sensitive.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"d5ccf2fab5892cc0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeentracopilotpagecontext","displayName":"Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane","description":"This policy controls whether Copilot in the Microsoft Edge side pane can access page content. This includes page summarization and other contextual queries.\n\nThis policy applies only to users who are signed in to Microsoft Edge with a Microsoft Entra account and are using Copilot in the side pane. It applies to Copilot experiences in the side pane, including Microsoft 365 Copilot Business Chat and Microsoft Copilot with enterprise data protection (EDP).\n\nIf you enable this policy, Copilot can access page content when users submit contextual queries in the side pane.\n\nIf you disable this policy, Copilot can't access page content. This also disables the M365LinksAutoOpenCopilotEnabled feature, because Copilot requires page content access to provide contextual insights for Microsoft 365 links.\n\nIf you don't configure this policy:\n- Access is enabled by default in non-EU regions.\n- Access is disabled by default in EU regions.\n- Users can turn this setting on or off in Microsoft Edge settings.\n\nCopilot can't access page content on pages protected by data loss prevention (DLP) policies, even if this policy is enabled.\n\nFor more information about Copilot data usage and consent, see https://go.microsoft.com/fwlink/?linkid=2288056","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeentracopilotpagecontext_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeentracopilotpagecontext_true","displayName":"Enabled","description":null,"helpText":null}]},"d5a1d8c05ad51a84":{"id":"device_vendor_msft_dmclient_provider_{providerid}_configrefresh_enabled","displayName":"Config refresh","description":"This node determines whether or not a periodic settings refresh for MDM policies will occur.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/DMClient-csp/"],"categoryId":"80b21376-0e9a-4e5b-8a74-b672adbe94a8","categoryName":"Config Refresh","options":[{"id":"device_vendor_msft_dmclient_provider_{providerid}_configrefresh_enabled_false","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_dmclient_provider_{providerid}_configrefresh_enabled_true","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"d53b5732b7c47196":{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementrandomizename","displayName":"Automatic Account Management Randomize Name","description":"Use this setting to configure whether the name of the automatically managed account uses a random numeric suffix each time the password is rotated.\n\nIf this setting is enabled, the name of the target account will use a random numeric suffix.\n\nIf this setting is disbled, the name of the target account will not use a random numeric suffix..\n\nIf not specified, this setting defaults to False.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementrandomizename_false","displayName":"The name of the target account will not use a random numeric suffix.","description":"The name of the target account will not use a random numeric suffix.","helpText":null},{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementrandomizename_true","displayName":"The name of the target account will use a random numeric suffix.","description":"The name of the target account will use a random numeric suffix.","helpText":null}]},"d5f76c684ff577c6":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_nonworklowprioritylimit","displayName":"Low Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"d55ec867da83a168":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_allowadmininstall","displayName":"Allow administrators to override Device Installation Restriction policies","description":"This policy setting allows you to determine whether members of the Administrators group can install and update the drivers for any device, regardless of other policy settings.\r\n\r\nIf you enable this policy setting, members of the Administrators group can use the Add Hardware wizard or the Update Driver wizard to install and update the drivers for any device. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, members of the Administrators group are subject to all policy settings that restrict device installation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-deviceinstallation#admx-deviceinstallation-deviceinstall-allowadmininstall"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_allowadmininstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_allowadmininstall_1","displayName":"Enabled","description":null,"helpText":null}]},"d5c84e23319e3f7f":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werexlusion_2_werexlusionlist","displayName":"List of applications to be excluded","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"d5d73f57e1457269":{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings","displayName":"Short name creation options","description":"These settings provide control over whether or not short names are generated during file creation. Some applications require short names for compatibility, but short names have a negative performance impact on the system.\r\n\r\nIf you enable short names on all volumes then short names will always be generated. If you disable them on all volumes then they will never be generated. If you set short name creation to be configurable on a per volume basis then an on-disk flag will determine whether or not short names are created on a given volume. If you disable short name creation on all data volumes then short names will only be generated for files created on the system volume.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filesys#admx-filesys-shortnamecreationsettings"],"categoryId":"bb54b081-5004-4f05-a46c-f5b948f57b82","categoryName":"NTFS","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_shortnamecreationsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"d51db750bf8ae9c5":{"id":"device_vendor_msft_policy_config_admx_smartcard_reversesubject","displayName":"Reverse the subject name stored in a certificate when displaying","description":"This policy setting lets you reverse the subject name from how it is stored in the certificate when displaying it during logon. \r\n \r\nBy default the user principal name (UPN) is displayed in addition to the common name to help users distinguish one certificate from another. For example, if the certificate subject was CN=User1, OU=Users, DN=example, DN=com and had an UPN of user1@example.com then \"User1\" will be displayed along with \"user1@example.com.\" If the UPN is not present then the entire subject name will be displayed. This setting controls the appearance of that subject name and might need to be adjusted per organization.\r\n\r\nIf you enable this policy setting or do not configure this setting, then the subject name will be reversed. \r\n\r\nIf you disable , the subject name will be displayed as it appears in the certificate.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-reversesubject"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_reversesubject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_reversesubject_1","displayName":"Enabled","description":null,"helpText":null}]},"d53b8fb2f473cb99":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming","displayName":"Sync settings over metered connections even when roaming","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections outside of the home provider network, for example when connected via a roaming connection.\r\nBy default, the UE-V Agent does not synchronize settings over a metered connection that is roaming.\r\nWith this setting enabled, the UE-V Agent synchronizes settings over a metered connection that is roaming.\r\nWith this setting disabled, the UE-V Agent will not synchronize settings over a metered connection that is roaming.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncovermeterednetworkwhenroaming"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming_1","displayName":"Enabled","description":null,"helpText":null}]},"d57433ec83487e0e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_webusballowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"d59bd1d59b57b18f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_javascriptoptimizerallowedforsitesdesc","displayName":"Allow JavaScript optimization on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"d5b6683d995305b3":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources","displayName":"Enable App Installer Allowed Sources","description":"This policy controls additional sources allowed by the enterprise IT administrator.\n\nIf you do not configure this policy, users will be able to add or remove additional sources other than those configured by policy.\n\nIf you enable this policy, only the sources specified can be added or removed from the Windows Package Manager. The representation for each allowed source can be obtained from installed sources using 'winget source export'.\n\nIf you disable this policy, no additional sources can be configured for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableallowedsources"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_1","displayName":"Enabled","description":null,"helpText":null}]},"d5420142ce8aaefe":{"id":"device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource","displayName":"Enable App Installer Default Source","description":"This policy controls the default source included with the Windows Package Manager.\n\nIf you do not configure this setting, the default source for the Windows Package Manager will be available and can be removed.\n\nIf you enable this setting, the default source for the Windows Package Manager will be available and cannot be removed.\n\nIf you disable this setting the default source for the Windows Package Manager will not be available.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enabledefaultsource"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource_1","displayName":"Enabled","description":null,"helpText":null}]},"d57d286e5bfba70d":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname","displayName":"Flip Flop Profile Directory Name","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nSID folder is created as %username%_%sid% instead of the default %sid%_%username%.\r\n\r\nNOTE:\r\n- This setting will OVERRIDE both SIDDirNameMatch and SIDDirNamePattern\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > (SIDDirNameMatch and SIDDirNamePattern)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\FlipFlopProfileDirectoryName\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname_1","displayName":"Enabled","description":null,"helpText":null}]},"d593ba2a6e5153ee":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API","description":"Control whether websites can access nearby Bluetooth devices. You can completely block access or require the site to ask the user each time it wants to access a Bluetooth device.\r\n\r\nIf you don't configure this policy, the default value (3, meaning users are asked each time) is used and users can change it.\r\n\r\n* 2 = Don't allow any site to request access to Bluetooth devices by using the Web Bluetooth API\r\n\r\n* 3 = Allow sites to ask the user to grant access to a nearby Bluetooth device","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"d5587cf309344684":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist","displayName":"Configure native messaging block list","description":"Specifies which native messaging hosts that shouldn't be used.\r\n\r\nUse '*' to block all native messaging hosts unless they are explicitly listed in the allow list.\r\n\r\nIf you don't configure this policy, Microsoft Edge will load all installed native messaging hosts.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"d5655fb26d388d79":{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\r\n\r\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d500cbf063fae083":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"d50e381377a94b11":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_outlookexe","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_outlookexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_outlookexe_1","displayName":"True","description":null,"helpText":null}]},"d5be1ba3e81ab5d2":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mspubexe86","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mspubexe86_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mspubexe86_1","displayName":"True","description":null,"helpText":null}]},"d52324bdab69e49d":{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_sae","displayName":"Semi-Annual Enterprise Channel (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_sae_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_sae_1","displayName":"True","description":null,"helpText":null}]},"d57a9fd1da4f04ea":{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport","displayName":"Configure RPC over TCP port","description":"\nThis policy setting controls which port is used for RPC over TCP for incoming connections to the print spooler and outgoing connections to remote print spoolers.\n\nBy default dynamic TCP ports are used.\n\nRPC over TCP port:\n -- The port to use for RPC over TCP. A value of 0 is the default and indicates that dynamic TCP ports will be used\n\nIf you disable or do not configure this policy setting, dynamic TCP ports are used.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpctcpport"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport_1","displayName":"Enabled","description":null,"helpText":null}]},"d5329f1477fa60fd":{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseuserdictionary","displayName":"Allow Japanese User Dictionary","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the Japanese user dictionary. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapaneseuserdictionary"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseuserdictionary_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseuserdictionary_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"d51c158dbea45be5":{"id":"device_vendor_msft_policy_config_updatev78diff~policy~cat_google~cat_googleupdate~cat_applications_pol_allowsidebysideexperience","displayName":"Allow Microsoft Edge Side by Side browser experience","description":"This policy lets a user run Microsoft Edge (Edge HTML) and Microsoft Edge (Chromium-based) side-by-side.\r\n\r\nIf this policy is set to “Not configured”, Microsoft Edge (Chromium-based) will replace Microsoft Edge (Edge HTML) after the Microsoft Edge (Chromium-based) stable channel and the November 2019 security updates are installed. This is the same behavior as the “Disabled” setting.\r\n\r\nThe “Disabled” setting blocks a side-by-side experience and Microsoft Edge (Chromium-based) will replace Microsoft Edge (Edge HTML) after the Microsoft Edge (Chromium-based) stable channel and the November 2019 security updates are installed. This is the same behavior as the “Not Configured” setting.\r\n\r\nWhen this policy is “Enabled”, Microsoft Edge (Chromium-based) and Microsoft Edge (Edge HTML) can run side-by-side after Microsoft Edge (Chromium-based) is installed.\r\n\r\nFor this group policy to take affect, it must be configured before the automatic install of Microsoft Edge (Chromium-based) by Windows Update. Note: ​A user can block the automatic update of Microsoft Edge (Chromium-based) by using the Microsoft Edge (Chromium-based) Blocker Toolkit.","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updatev78diff~policy~cat_google~cat_googleupdate~cat_applications_pol_allowsidebysideexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev78diff~policy~cat_google~cat_googleupdate~cat_applications_pol_allowsidebysideexperience_1","displayName":"Enabled","description":null,"helpText":null}]},"d5fabedc70431f76":{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsdiscovery","displayName":"Allow Mdns Discovery","description":"This policy setting allows you to turn off discovering the display service advertised over multicast DNS by a Wireless Display receiver.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowmdnsdiscovery"],"categoryId":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","categoryName":"Wireless Display","options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsdiscovery_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsdiscovery_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"d51c4398004218e6":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_userapplicability","displayName":"User applicability list","description":"JSON array of AAD user GUIDs that this system setting rule applies to. Only used when UserApplicabilityType is NamedUser.","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"d5f72befe3f5c9ac":{"id":"user_vendor_msft_policy_config_admx_startmenu_norun","displayName":"Remove Run menu from Start Menu (User)","description":"Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.\r\n\r\nIf you enable this setting, the following changes occur:\r\n\r\n(1) The Run command is removed from the Start menu.\r\n\r\n(2) The New Task (Run) command is removed from Task Manager.\r\n\r\n(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:\r\n\r\n--- A UNC path: \\\\\\ \r\n\r\n---Accessing local drives: e.g., C:\r\n\r\n--- Accessing local folders: e.g., \\temp>\r\n\r\nAlso, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.\r\n\r\nIf you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.\r\n\r\n\r\n\r\nNote:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.\r\n\r\nNote: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-norun"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_norun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_norun_1","displayName":"Enabled","description":null,"helpText":null}]},"d54f3f359a33703f":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels","displayName":"Options: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_0","displayName":"No remote control allowed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_1","displayName":"Full Control with user's permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_2","displayName":"Full Control without user's permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_3","displayName":"View Session with user's permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_4","displayName":"View Session without user's permission","description":null,"helpText":null}]},"d5a200a071f36c46":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc","displayName":"Disable Certificate Transparency enforcement for a list of URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"d55ded4d544017f6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action on startup (User)","description":"Setting the policy lets you specify system behavior on startup. Turning this setting off amounts to leaving it unset as Google Chrome must have specified start up behavior.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can change it.\r\n\r\nSetting this policy to RestoreOnStartupIsLastSession turns off some settings that rely on sessions or that perform actions on exit, such as clearing browsing data on exit or session-only cookies.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d5839a062b440070":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_spellchecklanguagedesc","displayName":"Force enable spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"d5395c8e003ad135":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings","displayName":"Default HTML renderer for Google Chrome Frame (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_1","displayName":"Enabled","description":null,"helpText":null}]},"d5736ea4196ecaff":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors","displayName":"Allow certificates issued by local trust anchors without subjectAlternativeName extension (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},"d55030b2cbd49cda":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin","displayName":"Minimum TLS version to fallback to (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin_tls1.1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null}]},"d578e47c60b9a8e2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings","displayName":"Tab Compare settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_0","displayName":"Allow Tab Compare and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_1","displayName":"Allow Tab Compare without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_2","displayName":"Do not allow Tab Compare.","description":null,"helpText":null}]},"d5b3f58aecf9519b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3b7e16e7-171f-4169-8904-c8483b06700d","categoryName":"Custom","options":null},"d512a37ca2fd6f25":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowlessprivilegedsites"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"d5aa10e234ee4139":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},"d53e8a304a2b4caa":{"id":"user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter","displayName":"Prevent managing SmartScreen Filter (User)","description":"This policy setting prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through \"phishing,\" or is known to host malware.\n\nIf you enable this policy setting, the user is not prompted to turn on SmartScreen Filter. All website addresses that are not on the filter's allow list are sent automatically to Microsoft without prompting the user.\n\nIf you disable or do not configure this policy setting, the user is prompted to decide whether to turn on SmartScreen Filter during the first-run experience.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-preventmanagingsmartscreenfilter"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_1","displayName":"Enabled","description":null,"helpText":null}]},"d54b96a67b09dd63":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol","displayName":"Allow only approved domains to use the TDC ActiveX control (User)","description":"This policy setting controls whether or not the user is allowed to run the TDC ActiveX control on websites.\n\nIf you enable this policy setting, the TDC ActiveX control will not run from websites in this zone.\n\nIf you disable this policy setting, the TDC Active X control will run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"d5c50d923f13d193":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled","displayName":"Enable AutoFill for payment instruments (User)","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. This includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for payment instruments.\r\n\r\nIf you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won't save any payment instrument information that users submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d5eb23c62d222be0":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_defaultprinterselection","displayName":"Default printer selection rules (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"d50a1708e386ebe4":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended","displayName":"Enables Microsoft Edge mini menu (User)","description":"Enables Microsoft Edge mini menu on websites and PDFs. The mini menu is triggered on text selection and has basic actions like copy and smart actions like definitions.\r\n\r\nIf you enable or don't config this policy, selecting text on websites and PDFs will show the Microsoft Edge mini menu.\r\n\r\nIf you disable this policy, the Microsoft Edge mini menu will not be shown when text on websites and PDFs is selected.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d53f7fe30c91ee6d":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls","displayName":"Allow listed sites to connect to any HID device (User)","description":"This setting allows you to list sites which are automatically granted permission to access all available devices.\r\n\r\nThe URLs must be valid or the policy is ignored. Only the origin (scheme, host and port) of the URL is evaluated.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nThis policy overrides 'DefaultWebHidGuardSetting' (Control use of the WebHID API), 'WebHidAskForUrls' (Allow the WebHID API on these sites), 'WebHidBlockedForUrls' (Block the WebHID API on these sites) and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"d52b5f365199320e":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended","displayName":"Search Filters Enabled (User)","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions will be shown.\r\n\r\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\r\n\r\nIf you disable this policy, the autosuggestion dropdown won't display the ribbon of available filters.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d54bf14f30009b44":{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled","displayName":"Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nX.509 certificates may encode constraints, such as Name Constraints, in extensions in the certificate. RFC 5280 specifies that enforcing such constraints on trust anchor certificates is optional.\r\n\r\nStarting in Microsoft Edge 112, such constraints in certificates loaded from the platform certificate store will now be enforced.\r\n\r\nThis policy exists as a temporary opt-out in case an enterprise encounters issues with the constraints encoded in their private roots. In that case this policy may be used to temporarily disable enforcement of the constraints while correcting the certificate issues.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will enforce constraints encoded into trust anchors loaded from the platform trust store.\r\n\r\nIf you disable this policy, Microsoft Edge will not enforce constraints encoded into trust anchors loaded from the platform trust store.\r\n\r\nThis policy has no effect if the 'MicrosoftRootStoreEnabled' (Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates) policy is disabled.\r\n\r\nThis policy was removed in Microsoft Edge version 128. Starting with that version, constraints in trust anchors are always enforced.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d50110c968e3ca0c":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls_serialblockedforurlsdesc","displayName":"Block the Serial API on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d594786abaa698e5":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes","displayName":"Configure the list of types that are included for synchronization (User)","description":"If you enable this policy all the specified data types will be included for synchronization for Azure AD/Azure AD-Degraded user profiles. This policy can be used to ensure the type of data uploaded to the Microsoft Edge synchronization service.\r\n\r\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", \"history\", \"openTabs\", \"edgeWallet\", \"collections\", \"apps\", and \"edgeFeatureUsage\". The \"edgeFeatureUsage\" data type will be supported starting in Microsoft Edge version 134. Note that these data type names are case sensitive.\r\n\r\nUsers will not be able to override the enabled data types.\r\n\r\nExample value:\r\n\r\nfavorites","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_1","displayName":"Enabled","description":null,"helpText":null}]},"d5cd3a4a172325fd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesemacaosar","displayName":"Chinese (Macao S.A.R.) (User)","description":"Enables the editing language Chinese (Macao S.A.R.)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesemacaosar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesemacaosar_1","displayName":"Enabled","description":null,"helpText":null}]},"d582376905fcf8d8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishvenezuela","displayName":"Spanish (Venezuela) (User)","description":"Enables the editing language Spanish (Venezuela)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishvenezuela_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishvenezuela_1","displayName":"Enabled","description":null,"helpText":null}]},"d5e218e7849fdcc1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_permitdownloadofcontentfromsafesenderandrecipientlists","displayName":"Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists (User)","description":"This policy setting controls whether Outlook automatically downloads external content in e-mail from senders in the Safe Senders List or Safe Recipients List. \r\n\r\nIf you enable this policy setting, Outlook automatically downloads content for e-mail from people in Safe Senders and Safe Recipients lists. \r\n\r\nIf you disable this policy setting, Outlook will not automatically download content from external servers for messages sent by people listed in users' Safe Senders Lists or Safe Recipients Lists. Recipients can choose to download external content on a message-by-message basis. \r\n\r\nIf you do not configure this policy setting, downloads are permitted when users receive e-mail from people listed in the user's Safe Senders List or Safe Recipients List.","helpText":"","infoUrls":[],"categoryId":"a321fc04-d0cb-45ec-a6bf-51d60249922d","categoryName":"Automatic Picture Download Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_permitdownloadofcontentfromsafesenderandrecipientlists_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_permitdownloadofcontentfromsafesenderandrecipientlists_1","displayName":"Enabled","description":null,"helpText":null}]},"d56238fc9d6d2c9a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_repliesorforwardstosignedencryptedmessagesaresignedencrypted","displayName":"Replies or forwards to signed/encrypted messages are signed/encrypted (User)","description":"This policy setting controls whether replies and forwards to signed/encrypted mail should also be signed/encrypted. \r\n\r\nIf you enable this policy setting, signing/encryption will be turned on when replying/forwarding a signed or encrypted message, even if the user is not configured for SMIME.\r\n\r\nIf you disable or do not configure this policy setting, signing/encryption is not enforced.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_repliesorforwardstosignedencryptedmessagesaresignedencrypted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_repliesorforwardstosignedencryptedmessagesaresignedencrypted_1","displayName":"Enabled","description":null,"helpText":null}]},"d57567ff18f86f78":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entermaximumsecondstowaittosyncchanges_l_entersecondstowaitbeforesyncdefault60sec","displayName":"Enter seconds to wait before sync(Default 60 sec.) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":null},"d5e5477dfaeceb50":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_adddoublequoteforhebrewalphabetnumbering","displayName":"Add double quote for Hebrew alphabet numbering (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_adddoublequoteforhebrewalphabetnumbering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_adddoublequoteforhebrewalphabetnumbering_1","displayName":"Enabled","description":null,"helpText":null}]},"d58dbf7c6f0dc1a4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_drawingobjects","displayName":"Print drawings created in Word (User)","description":"This policy setting allows you to configure the \"Print drawings created in Word\" setting found under File tab | Options | Display | Printing options.\r\n\r\nIf you enable this policy setting, Word will print graphics and floating text boxes. \r\n\r\nIf you disable or do not configure this policy setting, Word will not print graphics or floating text boxes. Instead, Word will print a blank box in the place of each graphic and floating text box.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_drawingobjects_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_drawingobjects_1","displayName":"Enabled","description":null,"helpText":null}]},"d5f13f8c36270e86":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_determinewhethertoforceencryptedword_l_determinewhethertoforceencryptedworddropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_determinewhethertoforceencryptedword_l_determinewhethertoforceencryptedworddropid_0","displayName":"Scan encrypted macros (default)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_determinewhethertoforceencryptedword_l_determinewhethertoforceencryptedworddropid_1","displayName":"Scan if anti-virus software available","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_determinewhethertoforceencryptedword_l_determinewhethertoforceencryptedworddropid_2","displayName":"Load macros without scanning","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/d6.json b/public/intune-definitions/d6.json new file mode 100644 index 000000000000..4fdc07ba11ad --- /dev/null +++ b/public/intune-definitions/d6.json @@ -0,0 +1 @@ +{"d66412d0068cf7e8":{"id":"com.apple.applicationaccess_allowmarketplaceappinstallation","displayName":"Allow Marketplace App Installation","description":"When 'false', the device prevents installation of alternative marketplace apps from the web, and prevents any installed alternative marketplace apps from installing apps.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmarketplaceappinstallation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmarketplaceappinstallation_true","displayName":"True","description":null,"helpText":null}]},"d6d84f522a1cde15":{"id":"com.apple.cellularprivatenetwork.managed_geofences_item_latitude","displayName":"Latitude","description":"The latitude of the geofence.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"d6872183336c45bd":{"id":"com.apple.directoryservice.managed_adforcehomelocalflag","displayName":"AD Force Home Local Flag","description":"If true, enables the AD Force Home Local key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adforcehomelocalflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adforcehomelocalflag_true","displayName":"True","description":null,"helpText":null}]},"d68f2a7f1a1213e2":{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek","displayName":"Specify first day of the week","description":"Set the first day of week in calendar view.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#specify-calendar-first-day-of-week"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek_0","displayName":"Sunday","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek_1","displayName":"Monday","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek_4","displayName":"Thursday","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek_5","displayName":"Friday","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_calendarfirstdayofweek_6","displayName":"Saturday","description":null,"helpText":null}]},"d64bde42699d5ef5":{"id":"com.apple.managedclient.preferences_passivemode","displayName":"Enable passive mode (deprecated)","description":"Whether the antivirus engine runs in passive mode or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#enable--disable-passive-mode"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_passivemode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_passivemode_true","displayName":"Enabled","description":null,"helpText":null}]},"d61ea4cbbc8edd72":{"id":"com.apple.managedclient.preferences_scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments","description":"This feature lets hyperlink and address bar URL navigations target specific text on a web page, which will be scrolled to after the web page finishes loading.\n​\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via a URL will be enabled.​\n\nIf you disable this policy, web page scrolling to specific text fragments via a URL will be disabled.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#scrolltotextfragmentenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_scrolltotextfragmentenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_scrolltotextfragmentenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d6e446db0c9886e5":{"id":"com.apple.system-extension-policy_allowedsystemextensions_generickey","displayName":"Allowed System Extensions","description":"The mapping of team identifiers to arrays of bundle identifiers, where the bundle identifier defines the system extension to install.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"d6ed36395f7eba54":{"id":"com.apple.webcontent-filter_userdefinedname","displayName":"User Defined Name","description":"The display name for this filtering configuration.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"d61cf110ab56b92c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (users can override)","description":"If FriendlyURLs are enabled, Microsoft Edge computes more representations of the URL and places them on the clipboard.\n\nThis policy configures what format is pasted when the user pastes in external applications or inside Microsoft Edge without the 'Paste as' context menu item.\n\nIf you configure this policy, it makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu won't be available.\n\n* Not configured = The users are able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\n\n* 1 = No additional formats are stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge, and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature is disabled.\n\n* 3 = The user gets a friendly URL whenever they paste into surfaces that accept rich text. The plain URL is still available for nonrich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\n\n* 4 = (Not currently used)\n\nThe richer formats may not be supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\n\nThe recommended policy is available in Microsoft Edge 105 or later.\n\nPolicy options mapping:\n\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\n\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL but whose visible text is the title of the destination page. This is the Friendly URL format.\n\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended_plaintext","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended_titledhyperlink","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended_webpreview","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},"d645d31bc1400155":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when the \"ClearBrowsingDataOnExit\" policy is enabled.\n\nIf you enable this policy, passwords aren't cleared when the browser closes.\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d60387657445896e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showtabpreviewenabled","displayName":"Enable tab preview on hover","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\n\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\n\nIf you disable this policy, tab previews aren't shown on hover.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showtabpreviewenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showtabpreviewenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d6c98ef887b3bcdd":{"id":"com.microsoft.edge.mamedgeappconfigsettings.useragentreduction","displayName":"Enable or disable the User-Agent Reduction (Obsolete)","description":"The User-Agent HTTP request header has been reduced by default since Microsoft Edge version 119. To continue receiving detailed platform information, migrate to User-Agent Client Hints, which replace the deprecated detailed User-Agent header. For more information, visit: https://web.dev/articles/migrate-to-ua-ch\n\nIf you don't configure this policy or set it to Default, the User-Agent header will be reduced and controlled by experimentation.\n\nSet this policy to 'ForceEnabled' to force the reduced version of the User-Agent request header for all origins.\n\nSet this policy to 'ForceDisabled' to always use the full (legacy) User-Agent header.\n\nTo learn more about the User-Agent string, read here:\n\nhttps://go.microsoft.com/fwlink/?linkid=2186267\n\nPolicy options mapping:\n\n* Default (0) = Reduced User Agent, or controlled by experimentation.\n\n* ForceDisabled (1) = Full (legacy) User Agent.\n\n* ForceEnabled (2) = Reduced User Agent.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.useragentreduction_default","displayName":"Reduced User Agent, or controlled by experimentation.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.useragentreduction_forcedisabled","displayName":"Full (legacy) User Agent.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.useragentreduction_forceenabled","displayName":"Reduced User Agent.","description":null,"helpText":null}]},"d689331bcdd6d4dc":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions","displayName":"Choose how BitLocker-protected fixed drives can be recovered","description":"This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the required credentials. This policy setting is applied when you turn on BitLocker.\n\nThe \"Allow data recovery agent\" check box is used to specify whether a data recovery agent can be used with BitLocker-protected fixed data drives. Before a data recovery agent can be used it must be added from the Public Key Policies item in either the Group Policy Management Console or the Local Group Policy Editor. Consult the BitLocker Drive Encryption Deployment Guide on Microsoft TechNet for more information about adding data recovery agents.\n\nIn \"Configure user storage of BitLocker recovery information\" select whether users are allowed, required, or not allowed to generate a 48-digit recovery password or a 256-bit recovery key.\n\nSelect \"Omit recovery options from the BitLocker setup wizard\" to prevent users from specifying recovery options when they turn on BitLocker on a drive. This means that you will not be able to specify which recovery option to use when you turn on BitLocker, instead BitLocker recovery options for the drive are determined by the policy setting.\n\nIn \"Save BitLocker recovery information to Active Directory Domain Services\" choose which BitLocker recovery information to store in AD DS for fixed data drives. If you select \"Backup recovery password and key package\", both the BitLocker recovery password and key package are stored in AD DS. Storing the key package supports recovering data from a drive that has been physically corrupted. If you select \"Backup recovery password only,\" only the recovery password is stored in AD DS.\n\nSelect the \"Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives\" check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds.\n\nNote: If the \"Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives\" check box is selected, a recovery password is automatically generated.\n\nIf you enable this policy setting, you can control the methods available to users to recover data from BitLocker-protected fixed data drives.\n\nIf this policy setting is not configured or disabled, the default recovery options are supported for BitLocker recovery. By default a DRA is allowed, the recovery options can be specified by the user including the recovery password and recovery key, and recovery information is not backed up to AD DS\n\n","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"d617db9b57141f42":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_history","displayName":"PIN History","description":"This policy specifies the number of past PINs that can be stored in the history that can’t be used. Valid values are 0 to 50 inclusive. If this policy is set to 0, then storage of previous PINs is not required. PIN history is not preserved through PIN reset.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"d624110eb8c46e0d":{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffuseractionrecord","displayName":"Turn off Steps Recorder","description":"This policy setting controls the state of Steps Recorder.\r\n\r\nSteps Recorder keeps a record of steps taken by the user. The data generated by Steps Recorder can be used in feedback systems such as Windows Error Reporting to help developers understand and fix problems. The data includes user actions such as keyboard input and mouse input, user interface data, and screen shots. Steps Recorder includes an option to turn on and off data collection.\r\n\r\nIf you enable this policy setting, Steps Recorder will be disabled.\r\n\r\nIf you disable or do not configure this policy setting, Steps Recorder will be enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatturnoffuseractionrecord"],"categoryId":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","categoryName":"Application Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffuseractionrecord_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatturnoffuseractionrecord_1","displayName":"Enabled","description":null,"helpText":null}]},"d606ab9f172e4ca1":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_2","displayName":"Configure Group Policy slow link detection","description":"This policy setting defines a slow connection for purposes of applying and updating Group Policy.\r\n\r\nIf the rate at which data is transferred from the domain controller providing a policy update to the computers in this group is slower than the rate specified by this setting, the system considers the connection to be slow.\r\n\r\nThe system's response to a slow policy connection varies among policies. The program implementing the policy can specify the response to a slow link. Also, the policy processing settings in this folder lets you override the programs' specified responses to slow links.\r\n\r\nIf you enable this setting, you can, in the \"Connection speed\" box, type a decimal number between 0 and 4,294,967,200, indicating a transfer rate in kilobits per second. Any connection slower than this rate is considered to be slow. If you type 0, all connections are considered to be fast.\r\n\r\nIf you disable this setting or do not configure it, the system uses the default value of 500 kilobits per second.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. The setting in Computer Configuration defines a slow link for policies in the Computer Configuration folder. The setting in User Configuration defines a slow link for settings in the User Configuration folder.\r\n\r\nAlso, see the \"Do not detect slow network connections\" and related policies in Computer Configuration\\Administrative Templates\\System\\User Profile. Note: If the profile server has IP connectivity, the connection speed setting is used. If the profile server does not have IP connectivity, the SMB timing is used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-gptransferrate-2"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_2_1","displayName":"Enabled","description":null,"helpText":null}]},"d6c85c126cf6ca2d":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableemailscanning","displayName":"Turn on e-mail scanning","description":"This policy setting allows you to configure e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files, according to their specific format, in order to analyze the mail bodies and attachments. Several e-mail formats are currently supported, for example: pst (Outlook), dbx, mbx, mime (Outlook Express), binhex (Mac).\r\n\r\n If you enable this setting, e-mail scanning will be enabled.\r\n\r\n If you disable or do not configure this setting, e-mail scanning will be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-disableemailscanning"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableemailscanning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_disableemailscanning_1","displayName":"Enabled","description":null,"helpText":null}]},"d636b05c3d2537f3":{"id":"device_vendor_msft_policy_config_admx_msdt_wdiscenarioexecutionpolicy","displayName":"Microsoft Support Diagnostic Tool: Configure execution level","description":"This policy setting determines the execution level for Microsoft Support Diagnostic Tool.\r\n\r\nMicrosoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals.\r\n\r\nIf you enable this policy setting, administrators can use MSDT to collect and send diagnostic data to a support professional to resolve a problem.\r\n\r\nIf you disable this policy setting, MSDT cannot gather diagnostic data.\r\n\r\nIf you do not configure this policy setting, MSDT is turned on by default.\r\n\r\nThis policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured.\r\n\r\nNo reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately.\r\n\r\nThis policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled, diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msdt#admx-msdt-wdiscenarioexecutionpolicy"],"categoryId":"f926f6e3-1bd6-4259-ae7c-e14108568882","categoryName":"Microsoft Support Diagnostic Tool","options":[{"id":"device_vendor_msft_policy_config_admx_msdt_wdiscenarioexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msdt_wdiscenarioexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"d6a43df760f3ae0a":{"id":"device_vendor_msft_policy_config_admx_msifilerecovery_wdiscenarioexecutionpolicy","displayName":"Configure MSI Corrupted File Recovery behavior","description":"This policy setting allows you to configure the recovery behavior for corrupted MSI files to one of three states:\r\n\r\nPrompt for Resolution: Detection, troubleshooting, and recovery of corrupted MSI applications will be turned on. Windows will prompt the user with a dialog box when application reinstallation is required. This is the default recovery behavior on Windows client.\r\n\r\nSilent: Detection, troubleshooting, and notification of MSI application to reinstall will occur with no UI. Windows will log an event when corruption is determined and will suggest the application that should be re-installed. This behavior is recommended for headless operation and is the default recovery behavior on Windows server.\r\n\r\nTroubleshooting Only: Detection and verification of file corruption will be performed without UI. Recovery is not attempted.\r\n\r\nIf you enable this policy setting, the recovery behavior for corrupted files is set to either the Prompt For Resolution (default on Windows client), Silent (default on Windows server), or Troubleshooting Only. \r\n\r\nIf you disable this policy setting, the troubleshooting and recovery behavior for corrupted files will be disabled. No troubleshooting or resolution will be attempted.\r\n\r\nIf you do not configure this policy setting, the recovery behavior for corrupted files will be set to the default recovery behavior.\r\n\r\nNo system or service restarts are required for changes to this policy setting to take immediate effect after a Group Policy refresh.\r\n\r\nNote: This policy setting will take effect only when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled, system file recovery will not be attempted. The DPS can be configured with the Services snap-in to the Microsoft Management Console.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msifilerecovery#admx-msifilerecovery-wdiscenarioexecutionpolicy"],"categoryId":"e50acc0f-d177-4803-aa31-fc97eeb60ff2","categoryName":"MSI Corrupted File Recovery","options":[{"id":"device_vendor_msft_policy_config_admx_msifilerecovery_wdiscenarioexecutionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msifilerecovery_wdiscenarioexecutionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"d6f1f38cbaacc80e":{"id":"device_vendor_msft_policy_config_admx_userprofiles_userinfoaccessaction","displayName":"User management of sharing user name, account picture, and domain information with apps (not desktop apps)","description":"This setting prevents users from managing the ability to allow apps to access the user name, account picture, and domain information.\r\n\r\nIf you enable this policy setting, sharing of user name, picture and domain information may be controlled by setting one of the following options:\r\n\r\n\"Always on\" - users will not be able to change this setting and the user's name and account picture will be shared with apps (not desktop apps). In addition apps (not desktop apps) that have the enterprise authentication capability will also be able to retrieve the user's UPN, SIP/URI, and DNS.\r\n\r\n\"Always off\" - users will not be able to change this setting and the user's name and account picture will not be shared with apps (not desktop apps). In addition apps (not desktop apps) that have the enterprise authentication capability will not be able to retrieve the user's UPN, SIP/URI, and DNS. Selecting this option may have a negative impact on certain enterprise software and/or line of business apps that depend on the domain information protected by this setting to connect with network resources.\r\n\r\nIf you do not configure or disable this policy the user will have full control over this setting and can turn it off and on. Selecting this option may have a negative impact on certain enterprise software and/or line of business apps that depend on the domain information protected by this setting to connect with network resources if users choose to turn the setting off.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-userinfoaccessaction"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_userinfoaccessaction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_userinfoaccessaction_1","displayName":"Enabled","description":null,"helpText":null}]},"d62814665c8d0521":{"id":"device_vendor_msft_policy_config_audit_system_auditipsecdriver","displayName":"System Audit I Psec Driver","description":"This policy setting allows you to audit events generated by the IPsec filter driver such as the following: Startup and shutdown of the IPsec services. Network packets dropped due to integrity check failure. Network packets dropped due to replay check failure. Network packets dropped due to being in plaintext. Network packets received with incorrect Security Parameter Index (SPI). This may indicate that either the network card is not working correctly or the driver needs to be updated. Inability to process IPsec filters. If you configure this policy setting, an audit event is generated on an IPsec filter driver operation. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated on an IPSec filter driver operation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#system_auditipsecdriver"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_system_auditipsecdriver_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditipsecdriver_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditipsecdriver_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditipsecdriver_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"d643379ad51eb7d8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir","displayName":"Set disk cache directory","description":"Setting the policy has Google Chrome use the directory you provide for storing cached files on the disk—whether or not users specify the --disk-cache-dir flag.\r\n\r\nIf not set, Google Chrome uses the default cache directory, but users can change that setting with the --disk-cache-dir command line flag.\r\n\r\nGoogle Chrome manages the contents of a volume's root directory. So to avoid data loss or other errors, do not set this policy to the root directory or any directory used for other purposes. See the variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: ${user_home}/Chrome_cache","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_1","displayName":"Enabled","description":null,"helpText":null}]},"d69797aa4971376e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains","displayName":"Suppress lookalike domain warnings on domains","description":"This policy prevents the display of lookalike URL warnings on the sites listed. These warnings are typically shown on sites that Google Chrome believes might be trying to spoof another site the user is familiar with.\r\n\r\nIf the policy is enabled and set to one or more domains, no lookalike warnings pages will be shown when the user visits pages on that domain.\r\n\r\nIf the policy is not set, or set to an empty list, warnings may appear on any site the user visits.\r\n\r\nA hostname can be allowed with a complete host match, or any domain match. For example, a URL like \"https://foo.example.com/bar\" may have warnings suppressed if this list includes either \"foo.example.com\" or \"example.com\".\r\n\r\nExample value:\r\n\r\nfoo.example.com\r\nexample.org","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"d619659d03ded868":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs","displayName":"Suppress JavaScript Dialogs triggered from different origin subframes","description":"As described in https://www.chromestatus.com/feature/5148698084376576 , JavaScript modal dialogs, triggered by window.alert, window.confirm, and window.prompt, will be blocked in Google Chrome if triggered from a subframe whose origin is different from the main frame origin.\r\nThis policy allows overriding that change.\r\nIf the policy is set to enabled or unset, JavaScript dialogs triggered from a different origin subframe will be blocked.\r\nIf the policy is set to disabled, JavaScript dialogs triggered from a different origin subframe will not be blocked.\r\n\r\nThis policy will be removed in Google Chrome version 95.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"d67dbb7799ee5c1e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURLPostParams specifies the parameters when searching a URL with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSearchURLPostParams unset means search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"d6e6c3eedb715d84":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes","displayName":"The maximum size, in bytes, that can be transferred between client and host via clipboard synchronization","description":"If this policy is set, clipboard data sent to and from the host will be truncated to the limit set by this policy.\r\n\r\nIf a value of 0 is set, then clipboard sync is disabled.\r\n\r\nThis policy affects both remote access and remote support scenarios.\r\n\r\nThis policy has no effect if it is not set.\r\n\r\nSetting the policy to a value that is not within the min/max range may prevent the host from starting.\r\n\r\nPlease note that the actual upper bound for the clipboard size is based on the maximum WebRTC data channel message size which this policy does not control.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_1","displayName":"Enabled","description":null,"helpText":null}]},"d64c1560b29d554a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_1","displayName":"Enabled","description":null,"helpText":null}]},"d63ff05285a95943":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication with constraints (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"d6296a09c42dbfae":{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata","displayName":"Allow Cellular Data","description":"Allows the cellular data channel on the device. Device reboot is not required to enforce the policy.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowcellulardata"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata_0","displayName":"Do not allow the cellular data channel. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","description":"Do not allow the cellular data channel. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata_1","displayName":"Allow the cellular data channel. The user can turn it off.","description":"Allow the cellular data channel. The user can turn it off.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata_2","displayName":"Allow the cellular data channel. The user cannot turn it off.","description":"Allow the cellular data channel. The user cannot turn it off.","helpText":null}]},"d64e222fe5aed53e":{"id":"device_vendor_msft_policy_config_defender_signatureupdatefallbackorder","displayName":"Signature Update Fallback Order","description":"This policy setting allows you to define the order in which different definition update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the definition update sources in order. Possible values are:InternalDefinitionUpdateServerMicrosoftUpdateServerMMPCFileSharesFor example: InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPCIf you enable this setting, definition update sources will be contacted in the order specified. Once definition updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted. If you disable or do not configure this setting, definition update sources will be contacted in a default order. OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/SignatureUpdateFallbackOrder","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#signatureupdatefallbackorder"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"d68be06f14dbbf61":{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog","displayName":"Specify the maximum log file size (KB)","description":"This policy setting specifies the maximum size of the log file in kilobytes.\n\nIf you enable this policy setting, you can configure the maximum log file size to be between 20 megabytes (20480 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.\n\nIf you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 20 megabytes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-specifymaximumfilesizesecuritylog"],"categoryId":"a28dd311-46e8-4868-89ab-d3745c0bca21","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_1","displayName":"Enabled","description":null,"helpText":null}]},"d605f0d685b27d33":{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog","displayName":"Specify the maximum log file size (KB)","description":"This policy setting specifies the maximum size of the log file in kilobytes.\n\nIf you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.\n\nIf you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-specifymaximumfilesizesystemlog"],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_1","displayName":"Enabled","description":null,"helpText":null}]},"d66b046695063a9e":{"id":"device_vendor_msft_policy_config_feeds_feedsenabled","displayName":"Enable News and interests","description":"This policy setting specifies whether News and interests is allowed on the device.","helpText":"","infoUrls":[],"categoryId":"b260992a-8216-4bfa-b60a-4eeea1f356c9","categoryName":"News and interests","options":[{"id":"device_vendor_msft_policy_config_feeds_feedsenabled_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_feeds_feedsenabled_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"d6a71d2843718a26":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff","displayName":"Shutdown On User Logoff","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nShuts down the machine when a user logs off\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ShutdownOnUserLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Any user, 2 = Any FSLogix Profile user","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},"d6a13ba3f6c90e34":{"id":"device_vendor_msft_policy_config_kioskbrowser_blockedurlexceptions","displayName":"Blocked Url Exceptions","description":"List of exceptions to the blocked website URLs (with wildcard support). This is used to configure URLs kiosk browsers are allowed to navigate to, which are a subset of the blocked URLs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#blockedurlexceptions"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"d631b9dbffb950bb":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},"d62f54b23aab8132":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains","displayName":"Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings","description":"Configure the list of Microsoft Defender SmartScreen trusted domains. This means:\r\nMicrosoft Defender SmartScreen won't check for potentially malicious resources like phishing software and other malware if the source URLs match these domains.\r\nThe Microsoft Defender SmartScreen download protection service won't check downloads hosted on these domains.\r\n\r\nIf you enable this policy, Microsoft Defender SmartScreen trusts these domains.\r\nIf you disable or don't set this policy, default Microsoft Defender SmartScreen protection is applied to all resources.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender Advanced Threat Protection. You must configure your allow and block lists in Microsoft Defender Security Center instead.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"d65b72fb0a89bbf7":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled","displayName":"Spell checking provided by Microsoft Editor","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages.\r\n\r\nIf you enable or don't configure this policy, Microsoft Editor spell check can be used for eligible text fields.\r\n\r\nIf you disable this policy, spell check can only be provided by local engines that use platform or Hunspell services. The results from these engines might be less informative than the results Microsoft Editor can provide.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is set to disabled, or the user disables spell checking in the settings page, this policy will have no effect.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d604b3a702759293":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"d6d537234a1e0549":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_exprwdexe38","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_exprwdexe38_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_exprwdexe38_1","displayName":"True","description":null,"helpText":null}]},"d62e7b88da8d5e99":{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine","displayName":"Default Office theme","description":"This policy setting allows you to select the user interface (UI) theme used by Office, if the user has not already selected an Office theme.\r\n\r\nNote: This setting only applies to Version 1903 or later of Office.\r\n\r\nIf you enable this policy setting, you may choose the Office theme used in cases where the user has not selected an Office theme themselves.\r\n\r\nIf you disable or do not configure this policy setting, Office will use the Colorful theme in cases where the user has not selected an Office theme themselves.\r\n\r\nRegardless of how you configure this policy setting, users can change their Office theme by going to File > Account > Office Theme (or, in Outlook, by going to File > Office Account > Office Theme).\r\n\r\nNote: This policy setting takes precedence over the “Default Office theme” policy setting located under User Configuration.","helpText":"","infoUrls":[],"categoryId":"5d8272e2-1ed3-4a8d-9555-9a87fa13d078","categoryName":"Customize","options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_1","displayName":"Enabled","description":null,"helpText":null}]},"d6699f145db15d9f":{"id":"device_vendor_msft_policy_config_systemservices_configurehomegroupproviderservicestartupmode","displayName":"Configure Home Group Provider Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurehomegroupproviderservicestartupmode"],"categoryId":"4f29ef5c-6ca0-4b09-893f-01755a670877","categoryName":"System Services","options":null},"d6c28299cc6c9d45":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},"d6eae8f04cd491c3":{"id":"linux_mdatp_managed_antivirusengine_scanarchives","displayName":"Enable scanning of archives","description":"Specifies whether to scan archives during on-demand antivirus scans.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#scan-archives-on-demand-antivirus-scans-only"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_scanarchives_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scanarchives_true","displayName":"Enabled","description":null,"helpText":null}]},"d6e32f468ba3bdff":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution","displayName":"Allow agent execution in container","description":"Controls whether agent tools and loops can execute. The specific behavior depends on the selected agent.","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":[{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_0","displayName":"Don't allow","description":"Agent tool execution is not allowed","helpText":null},{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_1","displayName":"Allow","description":"Agent tool execution is allowed with configured resource policies","helpText":null}]},"d6cacda81d93b758":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme","displayName":"Load a specific theme (User)","description":"Specifies which theme file is applied to the computer the first time a user logs on.\r\n\r\nIf you enable this setting, the theme that you specify will be applied when a new user logs on for the first time. This policy does not prevent the user from changing the theme or any of the theme elements such as the desktop background, color, sounds, or screen saver after the first logon.\r\n\r\nIf you disable or do not configure this setting, the default theme will be applied at the first logon.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-settheme"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_1","displayName":"Enabled","description":null,"helpText":null}]},"d63e2bafecbbe772":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_wermaxarchivecount","displayName":"Maximum number of reports to store: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"d6429638c54aa8e4":{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffoffertextpredictions","displayName":"Turn off offer text predictions as I type (User)","description":"\r\n This policy turns off the offer text predictions as I type option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The offer text predictions as I type option controls whether or not text prediction suggestions will be presented to the user on the on-screen keyboard.\r\n\r\n If the policy is Enabled, then the option will be locked to not offer text predictions.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffoffertextpredictions"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffoffertextpredictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffoffertextpredictions_1","displayName":"Enabled","description":null,"helpText":null}]},"d672cc15d9eac32a":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions","displayName":"Configure Group Policy domain controller selection (User)","description":"This policy setting determines which domain controller the Group Policy Object Editor snap-in uses.\r\n\r\nIf you enable this setting, you can which domain controller is used according to these options:\r\n\r\n\"Use the Primary Domain Controller\" indicates that the Group Policy Object Editor snap-in reads and writes changes to the domain controller designated as the PDC Operations Master for the domain.\r\n\r\n\"Inherit from Active Directory Snap-ins\" indicates that the Group Policy Object Editor snap-in reads and writes changes to the domain controller that Active Directory Users and Computers or Active Directory Sites and Services snap-ins use.\r\n\r\n\"Use any available domain controller\" indicates that the Group Policy Object Editor snap-in can read and write changes to any available domain controller.\r\n\r\nIf you disable this setting or do not configure it, the Group Policy Object Editor snap-in uses the domain controller designated as the PDC Operations Master for the domain.\r\n\r\nNote: To change the PDC Operations Master for a domain, in Active Directory Users and Computers, right-click a domain, and then click \"Operations Masters.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-gpdcoptions"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"d6227f4120d79cd6":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup","displayName":"Visio 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Visio 2016.\r\nMicrosoft Visio 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Visio 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Visio 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016visiobackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup_1","displayName":"Enabled","description":null,"helpText":null}]},"d66e88b5b3fb9721":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled","displayName":"Enable search suggestions (User)","description":"Setting the policy to True turns on search suggestions in Google Chrome's address bar. Setting the policy to False turns off these search suggestions.\r\n\r\nIf you set the policy, users can't change it. If not set, search suggestions are on at first, but users can turn them off any time.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d63462458a764f03":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess","displayName":"Require Site Isolation for every site (User)","description":"Since Google Chrome 67, site isolation has been enabled by default on all Desktop platforms, causing every site to run in its own process. A site is a scheme plus eTLD+1 (e.g., https://example.com). Setting this policy to Enabled does not change that behavior; it only prevents users from opting out (for example, using Disable site isolation in chrome://flags). Since Google Chrome 76, setting the policy to Disabled or leaving it unset doesn't turn off site isolation, but instead allows users to opt out.\r\n\r\nIsolateOrigins might also be useful for isolating specific origins at a finer granularity than site (e.g., https://a.example.com).\r\n\r\nOn Google Chrome OS version 76 and earlier, set the DeviceLoginScreenSitePerProcess device policy to the same value. (If the values don't match, a delay can occur when entering a user session.)\r\n\r\nNote: For Android, use the SitePerProcessAndroid policy instead.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess_1","displayName":"Enabled","description":null,"helpText":null}]},"d6a7d4a9e584246b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting","displayName":"Default images setting (User)","description":"Setting the policy to 1 lets all websites display images. Setting the policy to 2 denies image display.\r\n\r\nLeaving it unset allows images, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"d6fe7cec3f9179e7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes","displayName":"Maximum session duration allowed for remote access connections (User)","description":"If this policy is set, remote access connections will automatically disconnect after the number of minutes defined in the policy have elapsed. This does not prevent the client from reconnecting after the maximum session duration has been reached. Setting the policy to a value that is not within the min/max range may prevent the host from starting. This policy does not affect remote support scenarios.\r\n\r\nThis policy has no effect if it is not set. In this case, remote access connections will have no maximum duration on this machine.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_1","displayName":"Enabled","description":null,"helpText":null}]},"d6f3d8401f2f233c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_cacertificatesdesc","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"d6cef70af89f0080":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled","displayName":"Re-enable the deprecated async interface for FileSystemSyncAccessHandle in File System Access API (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d67ca5c802180898":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinnormalview","displayName":"Show Formula bar in Normal View (User)","description":"Enabling this setting selects the Advanced (Display) user option to \"Show formula bar\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinnormalview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinnormalview_1","displayName":"Enabled","description":null,"helpText":null}]},"d696fc2394e61d2e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_2","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},"d6092a4908124c58":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST (User)","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it’s replaced with real image thumbnail data. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nSpecify Bing's Image Search URL Post Params as:\r\n'imageBin={google:imageThumbnailBase64}'.\r\n\r\nSpecify Google's Image Search URL Post Params as:\r\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\r\n\r\nIf you don’t set this policy, image search requests are sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},"d600562be6a3dd42":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled","displayName":"Configure auto discard sleeping tabs (User)","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab will need to be reloaded.\r\n\r\nIf the 'SleepingTabsEnabled' (Configure sleeping tabs) policy is enabled, then this feature will be enabled by default.\r\n\r\nIf the 'SleepingTabsEnabled' is disabled, then this feature will be disabled by default and cannot be enabled.\r\n\r\nIf enabled, idle background tabs will be discarded after 1.5 days.\r\n\r\nIf disabled, idle background tab will not be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":"","infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d64d52928037896f":{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled","displayName":"Enables DALL-E themes generation (User)","description":"This policy lets you generate browser themes using DALL-E and apply them to Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, the AI generated themes will be enabled.\r\n\r\nIf you disable this policy, the AI generated themes will be disabled for your organization.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d6f70b8502d14050":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled","displayName":"Allow users to configure Family safety (User)","description":"This policy disables and completely hides the Family safety page in Settings. Navigation to edge://settings/familysafety will also be blocked. The Family safety page describes what features are available for family groups and how to join a family group. Learn more about family safety here: (https://go.microsoft.com/fwlink/?linkid=2098432).\r\n\r\nIf you enable this policy or don't configure it, the Family safety page will be shown.\r\n\r\nIf you disable this policy, the Family safety page will not be shown.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d65022d5248ad5bb":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (User)","description":"Allows you to set a list of protocols, and for each protocol an associated list of allowed origin patterns, that can launch an external application without prompting the user. The trailing separator should not be included when listing the protocol and the protocol should be all lower case. For example, list \"skype\" instead of \"skype:\", \"skype://\" or \"Skype\".\r\n\r\nIf you configure this policy, a protocol will only be permitted to launch an external application without prompting by policy if:\r\n\r\n- the protocol is listed\r\n\r\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\r\n\r\nIf either condition is false, the external protocol launch prompt will not be omitted by policy.\r\n\r\nIf you don't configure this policy, no protocols can launch without a prompt. Users can opt out of prompts on a per-protocol/per-site basis unless the 'ExternalProtocolDialogShowAlwaysOpenCheckbox' (Show an \"Always open\" checkbox in external protocol dialog) policy is set to Disabled. This policy has no impact on per-protocol/per-site prompt exemptions set by users.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' (Block access to a list of URLs) policy, which are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\n\r\nThis policy does not work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ],\r\n \"protocol\": \"spotify\"\r\n },\r\n {\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ],\r\n \"protocol\": \"msteams\"\r\n },\r\n {\r\n \"allowed_origins\": [\r\n \"*\"\r\n ],\r\n \"protocol\": \"msoutlook\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"d6890fd4597b1b06":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval_internetexplorerintegrationsitelistrefreshinterval","displayName":"Configure how frequently the Enterprise Mode Site List is refreshed: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d67f9562b6a6e607":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00","displayName":"Configure presentation service in PowerPoint and Word 1 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_1","displayName":"Enabled","description":null,"helpText":null}]},"d6975678bdf7bc21":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_l_broadcastservicemajorversion1","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"d63a7e15b87c998e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_configurepresenceicons_l_configurepresenceiconsdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_configurepresenceicons_l_configurepresenceiconsdropid_0","displayName":"Display all","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_configurepresenceicons_l_configurepresenceiconsdropid_1","displayName":"Display some","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_configurepresenceicons_l_configurepresenceiconsdropid_2","displayName":"Display none","description":null,"helpText":null}]},"d662df46e887bbe3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome_l_homeadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"d628d9f9a77f946d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceother","displayName":"Replace Label - Other (User)","description":"This policy setting allows you to change or remove the 8th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceother_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceother_1","displayName":"Enabled","description":null,"helpText":null}]},"d6741f3dd0ec5c19":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookcontactsdictionary_l_setcommentfieldsforoutlookcontactsdictionaryid","displayName":"Field identification letters: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":null},"d6ebfbee263c231f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin","displayName":"Display help in (User)","description":"Sets the default language of online Help. In addition to configuring this setting, consider enabling the same language in the 'Enabled Editing Languages' policy node.","helpText":"","infoUrls":[],"categoryId":"0f6020d9-278b-4284-894a-bc4a70c8cf32","categoryName":"Display Language","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_displayhelpin_1","displayName":"Enabled","description":null,"helpText":null}]},"d60140b7d88f24f4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1","displayName":"Workflow Cache 1 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_1","displayName":"Enabled","description":null,"helpText":null}]},"d61405f1bffd4cdc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_l_workflowfriendly501","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"d64248bb5d1179a3":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_notebookpresence","displayName":"Notebook Presence (User)","description":"This policy setting enables or disables the Notebook Presence feature in OneNote, which broadcasts user presence within a notebook and enables real-time synchronization for users who are editing the same page. Note: Any change to this policy does not take effect until OneNote is restarted.\r\n\r\nIf you enable or do not configure this policy setting, users are notified when they are editing the same page in a notebook as another user. OneNote also enters real-time sync when it discovers multiple users editing the same page. \r\n\r\nIf you disable this policy setting, users are not notified when they are editing the same page in a notebook as another user. OneNote does not enter real-time sync when multiple users are editing the same page.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_notebookpresence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_notebookpresence_1","displayName":"Enabled","description":null,"helpText":null}]},"d6f7819670e985f6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_workflowtasksinoutlook","displayName":"Do not display \"Open this task\" button for workflow tasks (User)","description":"As part of E-mail notification of workflow tasks, users can edit a task by clicking the \"Open this task\" button to display the task dialog box for the workflow task. When this setting is enabled, the \"Open this task\" button is not displayed.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_workflowtasksinoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_workflowtasksinoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"d6d2472b47a4b06f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_accesstopublishedcalendars","displayName":"Access to published calendars (User)","description":"This policy setting determines what restrictions apply to users who publish their calendars on Office.com or third-party World Wide Web Distributed Authoring and Versioning (WebDAV) servers. \r\n\r\nIf you enable or disable this policy setting, calendars that are published on Office.com must have restricted access (users other than the calendar owner/publisher who wish to view the calendar can only do so if they receive invitations from the calendar owner), and users cannot publish their calendars to third-party DAV servers. \r\n\r\nIf you do not configure this policy setting, users can share their calendars with others by publishing them to the Office.com Calendar Sharing Services and to a server that supports the World Wide Web Distributed Authoring and Versioning (WebDAV) protocol. Office.com allows users to choose whether to restrict access to their calendars to people they invite, or allow unrestricted access to anyone who knows the URL to reach the calendar. DAV access restrictions can only be achieved through server and folder permissions, and might require the assistance of a server administrator to set up and maintain.","helpText":"","infoUrls":[],"categoryId":"34c07941-8f52-43ad-b0ca-a7284655afb4","categoryName":"Office.com Sharing Service","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_accesstopublishedcalendars_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_accesstopublishedcalendars_1","displayName":"Enabled","description":null,"helpText":null}]},"d6e7852ed112429b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_preventsocialnetworkconnectivity","displayName":"Disable Office connections to social networks (User)","description":"This policy setting prevents users from connecting Office to social networks (including SharePoint), and prevents Office from displaying contacts and feeds from their social networks.\r\n\r\nIf you enable this policy setting, users cannot connect Office to social networks.\r\n\r\nIf you disable or you do not configure this policy setting, users can connect Office to social networks.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_preventsocialnetworkconnectivity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_preventsocialnetworkconnectivity_1","displayName":"Enabled","description":null,"helpText":null}]},"d666d4797651c204":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_setgalcontactsynchronizationinterval","displayName":"Set GAL contact synchronization interval (User)","description":"This policy setting controls how often contact information is synchronized between Outlook and connected social networks (in minutes). \r\n\r\nIf you enable this policy setting, you may specify the specified interval (in minutes) in which contact information is synchronized.\r\n\r\nIf you disable or you do not configure this policy setting, contact information is synchronized at the default interval (once every 4 days, or 5760 minutes).","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_setgalcontactsynchronizationinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_setgalcontactsynchronizationinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"d62cef91811bfdee":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_turnoffcontactexport","displayName":"Turn off contact export (User)","description":"This policy setting controls the ability of users to export contact information from the address book.\r\n\r\nIf you enable this policy setting, the \"Add to Contacts\" menu is not configurable in the address book.\r\n\r\nIf you disable or do not configure this policy setting, the \"Add to Contacts\" menu is configurable.","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_turnoffcontactexport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_turnoffcontactexport_1","displayName":"Enabled","description":null,"helpText":null}]},"d6406c479098ae4e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_datecolon41","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"d645c851273ac9f6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3","displayName":"Date Format (User)","description":"","helpText":"","infoUrls":[],"categoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","categoryName":"View","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_0","displayName":"1/31/00 12:33 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_1","displayName":"1/31/00","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_20","displayName":"1/31/2000","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_2","displayName":"January 31, 2000 12:33 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_3","displayName":"January 31, 2000","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_4","displayName":"Jan 31 12:33 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_5","displayName":"Jan 31 '00","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_6","displayName":"January 31","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_7","displayName":"Jan 31","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_8","displayName":"Mon 1/31/00 12:33 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_9","displayName":"Mon 1/31/00","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_10","displayName":"Mon Jan 31, '00","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_11","displayName":"Mon 12:33 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_15","displayName":"Mon Jan 31","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_16","displayName":"Mon 1/31","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_17","displayName":"Mon 31","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_12","displayName":"1/31","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_13","displayName":"31","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_14","displayName":"12:33 PM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_18","displayName":"W1/1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_l_pjdateformat3_19","displayName":"W1/1/00 12:33 PM","description":null,"helpText":null}]},"d65c4fbc66612617":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_disableofficestartvisio","displayName":"Disable the Office Start screen for Visio (User)","description":"This policy setting controls whether the Office Start screen appears on boot for Visio.\r\n\r\nIf you enable this policy setting, users will not see the Office Start screen when they boot Visio.\r\n\r\nIf you disable or do not configure this policy setting, users will see the Office Start screen when they boot Visio.\r\n\r\nNote: This policy setting is overridden by the policy setting \"Microsoft Office 2016 > Miscellaneous > Disable the Office Start screen for all Office applications\" if that policy setting is set.","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_disableofficestartvisio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_disableofficestartvisio_1","displayName":"Enabled","description":null,"helpText":null}]},"d6d2184fd4a2bdc7":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_l_descriptioncolon62","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"d6d7156ed4ea464d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems","displayName":"Disable commands (User)","description":"This policy setting allows you to disable some specific commands in Microsoft Word. Commands are buttons, menus, or other items that can be added to the Quick Access Toolbar or to the Ribbon under File tab | Options | Quick Access Toolbar or via File | Options | Customize Ribbon, respectively.\r\n\r\nIf you enable this policy setting then you can specify what commands in the user interface for Word are disabled.\r\n\r\nIf you disable or do not configure this policy setting, the commands in the predefined list are all enabled in Word.","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},"d66a9e100bfbe057":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_updatefields","displayName":"Update fields before printing (User)","description":"This policy setting allows you to configure the \"Update fields before printing\" setting found under File tab | Options | Display | Printing options.\r\n\r\nIf you enable this policy setting, Word will update fields in the document before the document is printed.\r\n\r\nIf you disable or do not configure this policy setting, Word will not update fields in the document before the document is printed.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_updatefields_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_updatefields_1","displayName":"Enabled","description":null,"helpText":null}]},"d6d330b009c1032c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_headings","displayName":"Headings (User)","description":"Checks/unchecks the option ''Built in Heading styles''.","helpText":"","infoUrls":[],"categoryId":"62492a4c-fd70-4275-ae5e-d60e200e3553","categoryName":"Apply as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_headings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_applyasyoutype_l_headings_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/d7.json b/public/intune-definitions/d7.json new file mode 100644 index 000000000000..5cb99e7263ed --- /dev/null +++ b/public/intune-definitions/d7.json @@ -0,0 +1 @@ +{"d7d85fa56029d924":{"id":"com.apple.applicationaccess_allowbluetoothmodification","displayName":"Allow Bluetooth Modification","description":"If false, prevents modification of Bluetooth settings. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowbluetoothmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowbluetoothmodification_true","displayName":"True","description":null,"helpText":null}]},"d781aeb1efc4b08f":{"id":"com.apple.assetcache.managed_publicranges_item_type","displayName":"IP Address Type","description":"The IP address type.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_publicranges_item_type_0","displayName":"IPv4","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_publicranges_item_type_1","displayName":"IPv6","description":null,"helpText":null}]},"d76941b42180069e":{"id":"com.apple.finder_com.apple.finder","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":null},"d7eb5149bf24d4c8":{"id":"com.apple.managedclient.preferences_audiocaptureallowedurls","displayName":"Sites that can access audio capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use audio capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to audio capture devices.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#audiocaptureallowedurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"d7c50faec4bfed34":{"id":"com.apple.managedclient.preferences_edgemanagementuserpolicyoverridescloudmachinepolicy","displayName":"Allow cloud-based Microsoft Edge management service user policies to override local user policies.","description":"If you enable this policy, cloud-based Microsoft Edge management service user policies takes precedence if it conflicts with local user policy.\n\nIf you disable or don't configure this policy, Microsoft Edge management service user policies will take precedence.\n\nThe policy can be combined with \"EdgeManagementPolicyOverridesPlatformPolicy\". If both policies are enabled, all cloud-based Microsoft Edge management service policies will take precedence over conflicting local service policies.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgemanagementuserpolicyoverridescloudmachinepolicy"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgemanagementuserpolicyoverridescloudmachinepolicy_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgemanagementuserpolicyoverridescloudmachinepolicy_true","displayName":"Enabled","description":null,"helpText":null}]},"d7f3cad41314ef81":{"id":"com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from in an insecure manner (Deprecated)","description":"List of URL patterns. Requests initiated from websites served by matching origins are not subject to Private Network Access checks.\n\nIf this policy is not set, this policy behaves as if set to the empty list.\n\nFor origins not covered by the patterns specified here, the global default value will be used either from the \"InsecurePrivateNetworkRequestsAllowed\" policy, if it is set, or the user's personal configuration otherwise.\n\nFor detailed information on valid URL patterns, see [Filter format for URL list-based policies](/DeployEdge/edge-learnmmore-url-list-filter%20format).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#insecureprivatenetworkrequestsallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"d7ba047cbfd2fb0a":{"id":"com.apple.managedclient.preferences_targetblankimpliesnoopener","displayName":"Do not set window.opener for links targeting _blank","description":"If you enable this policy or leave it unset, the window.opener property is set to null unless the anchor specifies rel=\"opener\".\n\nIf you disable this policy, popups that target _blank are permitted to access (via JavaScript) the page that requested to open the popup.\n\nThis policy will be obsoleted in Microsoft Edge version 95.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#targetblankimpliesnoopener"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_targetblankimpliesnoopener_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_targetblankimpliesnoopener_true","displayName":"Enabled","description":null,"helpText":null}]},"d7ec6a3ecdaadbd4":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"d79f33d501224fc9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.standardizedbrowserzoomenabled","displayName":"Enable Standardized Browser Zoom Behavior","description":"Configures whether the CSS \"zoom\" property follows the current CSS specification or legacy behavior.\n\nWhen this policy is enabled or not configured, the CSS \"zoom\" property follows the current specification defined by the CSS Working Group:\nhttps://drafts.csswg.org/css-viewport/#zoom-property\n\nWhen this policy is disabled, the CSS \"zoom\" property uses its legacy, pre-standardized behavior.\n\nThis policy is temporary and is intended to provide time for organizations to migrate web content to the updated behavior. In a future Microsoft Edge release, this policy will be removed and the standardized behavior will be enforced by default.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.standardizedbrowserzoomenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.standardizedbrowserzoomenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"d7a5201c88f366ad":{"id":"device_vendor_msft_defender_configuration_archivemaxsize","displayName":"Archive Max Size","description":"Specify the maximum size, in KB, of archive files to be extracted and scanned. If this configuration is off or not set, the default value (0) is applied, and all archives are extracted and scanned regardless of size.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"d7e49f121dce5465":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_recentlycleanedtimeout_reporting_recentlycleanedtimeout","displayName":"Configure time out for detections in recently remediated state","description":null,"helpText":"","infoUrls":[],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":null},"d731d9fa930327b5":{"id":"device_vendor_msft_policy_config_admx_pca_detectblockeddriverspolicy","displayName":"Notify blocked drivers","description":"This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\\Administrative Templates\\Windows Components\\Application Compatibility.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pca#admx-pca-detectblockeddriverspolicy"],"categoryId":"76c53aab-0288-4ac1-b399-0104e04c6457","categoryName":"Application Compatibility Diagnostics","options":[{"id":"device_vendor_msft_policy_config_admx_pca_detectblockeddriverspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_pca_detectblockeddriverspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"d7b1dc00e81b0056":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_start_program_2_ts_program_name","displayName":"Program path and file name","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":null},"d7fa2deef68ae3ff":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote","displayName":"Microsoft OneNote 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft OneNote 2016.\r\nBy default, the user settings of Microsoft OneNote 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft OneNote 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft OneNote 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onenote"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote_1","displayName":"Enabled","description":null,"helpText":null}]},"d73bd790f9a31a24":{"id":"device_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly","displayName":"Require Private Store Only","description":"Allows disabling of the retail catalog and only enables the Private store. Most restricted value is 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#requireprivatestoreonly"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly_0","displayName":"Allow both public and Private store.","description":"Allow both public and Private store.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly_1","displayName":"Only Private store is enabled.","description":"Only Private store is enabled.","helpText":null}]},"d790396fcb19c63e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended","displayName":"Enable network prediction","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"bce24fbf-4caf-449f-a210-5dd31a368b22","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d7827f00e36a2b49":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification","displayName":"Notify a user that a browser relaunch or device restart is recommended or required","description":"Notify users that Google Chrome must be relaunched or Google Chrome OS must be restarted to apply a pending update.\r\n\r\nThis policy setting enables notifications to inform the user that a browser relaunch or device restart is recommended or required. If not set, Google Chrome indicates to the user that a relaunch is needed via subtle changes to its menu, while Google Chrome OS indicates such via a notification in the system tray. If set to 'Recommended', a recurring warning will be shown to the user that a relaunch is recommended. The user can dismiss this warning to defer the relaunch. If set to 'Required', a recurring warning will be shown to the user indicating that a browser relaunch will be forced once the notification period passes. The default period is seven days for Google Chrome and four days for Google Chrome OS, and may be configured via the RelaunchNotificationPeriod policy setting.\r\n\r\nThe user's session is restored following the relaunch/restart.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_1","displayName":"Enabled","description":null,"helpText":null}]},"d7e098dac63ca01c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_2","displayName":"Do not allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_3","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},"d73984e8ca8023ab":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled","displayName":"Enable Instant","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d7ed1bf32dc95adc":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls","displayName":"Automatically grant permission to sites to connect to any HID device.","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available devices.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn ChromeOS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultWebHidGuardSetting, WebHidAskForUrls, WebHidBlockedForUrls and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"d7976fdbc0e50c61":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled","displayName":"Determines whether the Chrome Root Store and built-in certificate verifier will be used to verify server certificates","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d729891ad271f8c6":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork","displayName":"Prevent automatic download of applications associated with device metadata","description":"This policy setting allows you to prevent Windows from downloading applications associated with device metadata.\n\nIf you enable this policy setting, Windows does not download applications associated with device metadata for installed devices. This policy setting overrides the setting in the Device Installation Settings dialog box (Control Panel > System and Security > System > Advanced System Settings > Hardware tab).\n\nIf you disable or do not configure this policy setting, the setting in the Device Installation Settings dialog box controls whether Windows downloads applications associated with device metadata.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"d706340c73b9416d":{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock","displayName":"Force Instant Lock","description":"Determines whether Lock on Leave is forced on/off by the MDM policy. The user will not be able to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceinstantlock"],"categoryId":"a77e6e83-a02e-4a51-a27e-6437ea42aeb5","categoryName":"Human Presence","options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock_2","displayName":"Forced Off.","description":"ForcedOff.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock_1","displayName":"Forced On.","description":"ForcedOn.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},"d756c14e606ac76b":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzonenavigatewindowsandframes"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"d7826d719b2fa053":{"id":"device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons","displayName":"Enable Navigation Buttons","description":"Enable/disable kiosk browser's navigation buttons (forward/back).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enablenavigationbuttons"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":[{"id":"device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_0","displayName":"Disable","description":"Disable","helpText":null}]},"d72717aadcb7b577":{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_4","displayName":"Block malicious downloads","description":null,"helpText":null}]},"d747e1d9af066414":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended","displayName":"Configure auto discard sleeping tabs","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab will need to be reloaded.\r\n\r\nIf the 'SleepingTabsEnabled' (Configure sleeping tabs) policy is enabled, then this feature will be enabled by default.\r\n\r\nIf the 'SleepingTabsEnabled' is disabled, then this feature will be disabled by default and cannot be enabled.\r\n\r\nIf enabled, idle background tabs will be discarded after 1.5 days.\r\n\r\nIf disabled, idle background tab will not be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d7e59a7375d157ec":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_copilotnewtabpageenabled_recommended","displayName":"Enable the Copilot new tab page","description":"This policy configures the availability of the Copilot new tab page in Microsoft Edge for Business.\r\n\r\nThe Copilot new tab page combines search and chat into a single input box and includes personalized cards that provide quick access to relevant files, calendar events, and suggested Copilot prompts. Users who do not have a Microsoft 365 Copilot license might experience limited relevance in Copilot prompt card content.\r\n\r\nMost policies that customize the New Tab Page are supported on the Copilot new tab page. For a complete list of supported and unsupported policies, see https://go.microsoft.com/fwlink/?linkid=2330462.\r\n\r\nThis policy applies only to Microsoft Entra ID profiles and controls the Copilot new tab page experience in Microsoft Edge for Business. This policy does not apply to the Copilot new tab page on MSA profiles.\r\n\r\nIf you enable this policy, the Copilot new tab page is turned on.\r\n\r\nIf you disable or don't configure this policy, the Copilot new tab page is turned off. When the policy is not configured, users can turn it on via user settings.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_copilotnewtabpageenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_copilotnewtabpageenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d7ef8107907e5a55":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments","description":"This feature lets hyperlink and address bar URL navigations target specific text on a web page, which will be scrolled to after the web page finishes loading.\r\n​\r\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via a URL will be enabled.​\r\n\r\nIf you disable this policy, web page scrolling to specific text fragments via a URL will be disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d764eb3285f84b05":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mspubexe16","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mspubexe16_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mspubexe16_1","displayName":"True","description":null,"helpText":null}]},"d77628513db90d26":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups","displayName":"Block popups","description":"Block popups","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_1","displayName":"Enabled","description":null,"helpText":null}]},"d716186af9b278b4":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites","displayName":"Configure team site libraries to sync automatically","description":"This setting lets you specify SharePoint team site libraries to sync automatically the next time users sign in to the OneDrive sync app (OneDrive.exe). It may take up to 8 hours after a users signs in before the library begins to sync. To use the setting, you must enable OneDrive Files On-Demand, and the setting applies only for users on computers running Windows 10 (1709) Fall Creators Update or later. Do not enable this setting for the same library to more than 1,000 devices. To ensure a good sync experience, avoid enabling this feature on large libraries sets (For the most up to date guidance see https://docs.microsoft.com/en-us/onedrive/use-group-policy#AutoMountTeamSites). This feature is not enabled for on-premises SharePoint sites.\r\n \r\nIf you enable this setting, the OneDrive sync app will automatically download the contents of the libraries you specified as online-only files the next time the user signs in. The user won't be able to stop syncing the libraries.\r\n \r\nIf you disable this setting, team site libraries that you've specified won't be automatically synced for new users. Existing users can choose to stop syncing the libraries, but the libraries won't stop syncing automatically.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_1","displayName":"Enabled","description":null,"helpText":null}]},"d790c8737cba459b":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks","displayName":"Let Apps Access Tasks","description":"This policy setting specifies whether Windows apps can access tasks.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d76109f54941679b":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_enforcefirewall","displayName":"Enable firewall protection of Microsoft endpoints","description":"","helpText":"","infoUrls":[],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":[{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_enforcefirewall_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_enforcefirewall_1","displayName":"True","description":null,"helpText":null}]},"d7db3edf5658892e":{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_v2","displayName":"Auto Restart Notification Schedule","description":"Allows the IT Admin to specify the period for auto-restart reminder notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartnotificationschedule"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_15","displayName":"15 Minutes","description":"15 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_30","displayName":"30 Minutes","description":"30 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_60","displayName":"60 Minutes","description":"60 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_120","displayName":"120 Minutes","description":"120 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_240","displayName":"240 Minutes","description":"240 Minutes","helpText":null}]},"d716655af6137cbb":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"d7fcb1d9ee46e6eb":{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_rollbacktotargetversionmicrosoftedgebeta","displayName":"Rollback to Target version","description":"Specifies that Microsoft Edge Update should rollback installations of Microsoft Edge to the version indicated in 'Target version override'.\r\n\r\nThis policy has no effect unless 'Target version override' is set and 'Update policy override' is set to one of the ON states (Always allow updates, Automatic silent updates only, Manual updates only).\r\n\r\nIf you disable this policy or don't configure it, installs that have a version higher than that specified by 'Target version override' will be left as-is.\r\n\r\nIf you enable this policy, installs that have a current version higher than specified by the 'Target version override' will be downgraded to the target version.\r\n\r\nWe recommend that users install the latest version of the Microsoft Edge browser to ensure protection by the latest security updates. Rollback to an earlier version risks exposure to known security issues. This policy is meant to be used as a temporary fix to address issues in a Microsoft Edge browser update.\r\n\r\nBefore temporarily rolling back your browser version, we recommend that you turn on Sync (https://go.microsoft.com/fwlink/?linkid=2133032) for all users in your organization. If you don't turn on Sync, there is a risk of permanent browsing data loss. Use this policy at your own risk.\r\n\r\nNote: All versions available for rollback can be viewed here https://aka.ms/EdgeEnterprise.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nThis policy applies to Microsoft Edge version 86 or later.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2133918 for more information. This policy is meant to serve as temporary measure when Enterprise Administrators need to downgrade for business reasons. To ensure users are protected by the latest security updates, the most recent version should be used. When versions are downgraded to older versions, there could be incompatibilities.","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_rollbacktotargetversionmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_rollbacktotargetversionmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},"d7da18c7fc6577f3":{"id":"device_vendor_msft_policy_config_userrights_enabledelegation","displayName":"Enable Delegation","description":"This user right determines which users can set the Trusted for Delegation setting on a user or computer object. The user or object that is granted this privilege must have write access to the account control flags on the user or computer object. A server process running on a computer (or under a user context) that is trusted for delegation can access resources on another computer using delegated credentials of a client, as long as the client account does not have the Account cannot be delegated account control flag set. Caution: Misuse of this user right, or of the Trusted for Delegation setting, could make the network vulnerable to sophisticated attacks using Trojan horse programs that impersonate incoming clients and use their credentials to gain access to network resources.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#enabledelegation"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"d7ddf3071fed4be0":{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls_disallowcplslist","displayName":"List of disallowed Control Panel items (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"d70ae96b6527b163":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_1","displayName":"Do not throttle additional data (User)","description":"This policy setting determines whether Windows Error Reporting (WER) sends additional, second-level report data even if a CAB file containing data about the same event types has already been uploaded to the server.\r\n\r\nIf you enable this policy setting, WER does not throttle data; that is, WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report.\r\n\r\nIf you disable or do not configure this policy setting, WER throttles data by default; that is, WER does not upload more than one CAB file for a report that contains data about the same event types.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypassdatathrottling-1"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_1_1","displayName":"Enabled","description":null,"helpText":null}]},"d72eefb6239a9e09":{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_1","displayName":"Floppy Drives: Deny read access (User)","description":"This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-floppydrives-denyread-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"d7c95ba6e0953692":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8","displayName":"Internet Explorer 8 (User)","description":"This policy setting configures the synchronization of user settings for Internet Explorer 8.\r\nBy default, the user settings of Internet Explorer 8 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 8 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 8 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 8 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer8"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8_1","displayName":"Enabled","description":null,"helpText":null}]},"d770f001895e2516":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup","displayName":"Access 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Access 2013.\r\nMicrosoft Access 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Access 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Access 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013accessbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"d76a6a33d6a2557b":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-internet"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet_1","displayName":"Enabled","description":null,"helpText":null}]},"d70676bf2d32b2a8":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-internetlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"d7cf738bb02fe5fc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d7a2b2bb89befad4":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls","displayName":"Block Window Placement permission on these sites (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"d7986e6e5cf1031f":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"d758f950007f7900":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe","displayName":"Launching applications and files in an IFRAME (User)","description":"This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.\n\nIf you enable this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.\n\nIf you disable this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.\n\nIf you do not configure this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonelaunchingapplicationsandfilesiniframe"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_1","displayName":"Enabled","description":null,"helpText":null}]},"d7223e7ce16ef127":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled","displayName":"Enable favorites bar (User)","description":"Enables or disables the favorites bar.\r\n\r\nIf you enable this policy, users will see the favorites bar.\r\n\r\nIf you disable this policy, users won't see the favorites bar.\r\n\r\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d74cf98090f0e546":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider (User)","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\r\n\r\nThis policy is optional. If you don't configure it, image search isn't available.\r\n\r\nSpecify Bing's Image Search URL as:\r\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\r\n\r\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\r\n\r\nSee 'DefaultSearchProviderImageURLPostParams' (Parameters for an image URL that uses POST) policy to finish configuring image search.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: https://search.contoso.com/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_1","displayName":"Enabled","description":null,"helpText":null}]},"d7729f62e8ec8128":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled","displayName":"Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 114.\r\n\r\nWhen this policy is set to enabled, Microsoft Edge will perform verification of server certificates using the built-in certificate verifier with the Microsoft Root Store as the source of public trust.\r\n\r\nWhen this policy is set to disabled, Microsoft Edge will use the system certificate verifier and system root certificates.\r\n\r\nWhen this policy is not set, the Microsoft Root Store or system provided roots may be used.\r\n\r\nThis policy is planned to be removed in Microsoft Edge version\r\n121 for Android devices when support for using the platform supplied roots is planned to be removed.\r\n\r\nThis policy was removed in Microsoft Edge version 115 for\r\nMicrosoft Windows and macOS,\r\nMicrosoft Edge version 120 for\r\nLinux, and\r\nMicrosoft Edge version 121 for\r\nAndroid\r\nwhen support for using the platform supplied certificate verifier and roots was removed.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d76ee11b4db3df47":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastservicecreatesharednotes2","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastservicecreatesharednotes2_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice02_l_broadcastservicecreatesharednotes2_1","displayName":"True","description":null,"helpText":null}]},"d7bb06e9aa5146c0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_promptforsendingrevieweddocumenttoauthor","displayName":"Prompt for sending reviewed document to author (User)","description":"\"Never ask user\": Do not ask users if they want to send back changes to the author. | \"Prompt for 'send for review\"': Ask users if they want to send back changes to the author only if the document was sent using Send For Review and not with ad-hoc review. | \"Always prompt\": Ask users if they want to send back changes to the author for documents sent using either Send For Review or ad-hoc review.","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_promptforsendingrevieweddocumenttoauthor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_promptforsendingrevieweddocumenttoauthor_1","displayName":"Enabled","description":null,"helpText":null}]},"d7732b1276b559e9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_italianitaly","displayName":"Italian (Italy) (User)","description":"Enables the editing language Italian (Italy)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_italianitaly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_italianitaly_1","displayName":"Enabled","description":null,"helpText":null}]},"d738ab2b0f965f37":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_deletefilesfromofficedocumentcache","displayName":"Delete files from Office Document Cache (User)","description":"This policy setting determines whether or not documents opened in Office are deleted from the Office Document Cache when they are closed.\r\n\r\nIf you enable this policy setting documents are deleted from the Office Document Cache when they are closed. \r\n\r\nIf you disable or do not configure this policy setting, documents are not deleted from the Office Document Cache when they are closed.\r\n\r\nNote: This policy setting does not apply to documents in SharePoint Workspace. Documents in SharePoint Workspace will not be deleted from the Office Document cache when they are closed. Sharepoint Workspace will not work correctly if this Group Policy is enabled.","helpText":"","infoUrls":[],"categoryId":"2d6891a4-ee83-4e55-8e23-09513e1306e4","categoryName":"Microsoft Office Document Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_deletefilesfromofficedocumentcache_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_deletefilesfromofficedocumentcache_1","displayName":"Enabled","description":null,"helpText":null}]},"d72f56a773ad1f54":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablewebviewintheofficefiledialogs","displayName":"Disable web view in the Office file dialog boxes (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablewebviewintheofficefiledialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disablewebviewintheofficefiledialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"d7b64b6f2d45d0ec":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache2_l_workflowcachename433","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"d7e3476238bb1262":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache4_l_workflowfriendly446","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"d7f75625700fe816":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_inboxfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage","displayName":"Turn off Windows Internet Explorer security checks for this web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_inboxfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_inboxfolderhomepage_l_turnoffinternetexplorersecuritychecksforthiswebpage_1","displayName":"True","description":null,"helpText":null}]},"d7a598ce91610b91":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherupdatefrequency","displayName":"Weather Bar Update Frequency (User)","description":"This policy setting allows you to set the update frequency (in minutes) for the Weather Bar. \r\n\r\nIf you enable this policy setting, Outlook sets the update frequency to the specified value. \r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the default value of 120 minutes.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherupdatefrequency_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_weatherupdatefrequency_1","displayName":"Enabled","description":null,"helpText":null}]},"d7395482976d107a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_disablehithighlighting","displayName":"Do not display hit highlights in search results (User)","description":"By default, hit highlights are included in search results. Enable this setting to turn off search hit highlighting.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_disablehithighlighting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_disablehithighlighting_1","displayName":"Enabled","description":null,"helpText":null}]},"d7896bd758feba19":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_permitdownloadofcontentfromsafezones","displayName":"Do not permit download of content from safe zones (User)","description":"This policy setting controls whether Outlook automatically downloads content from safe zones when displaying messages. \r\n\r\nIf you enable this policy setting content from safe zones will be downloaded automatically. \r\n\r\nIf you disable this policy Outlook will not automatically download content from safe zones. Recipients can choose to download external content from untrusted senders on a message-by-message basis. \r\n\r\nIf you do not configure this policy setting, Outlook automatically downloads content from sites that are considered \"safe,\" as defined in the Security tab of the Internet Options dialog box in Internet Explorer. \r\n\r\nImportant - Note that this policy setting is \"backward.\" Despite the name, disabling the policy setting prevents the download of content from safe zones and enabling the policy setting allows it.","helpText":"","infoUrls":[],"categoryId":"a321fc04-d0cb-45ec-a6bf-51d60249922d","categoryName":"Automatic Picture Download Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_permitdownloadofcontentfromsafezones_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_permitdownloadofcontentfromsafezones_1","displayName":"Enabled","description":null,"helpText":null}]},"d7ebd52066ba11ce":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkppt","displayName":"Ctrl+K (Insert | Links | Hyperlink) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkppt_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkppt_1","displayName":"True","description":null,"helpText":null}]},"d73eef78949e8d55":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_turnofffileformatcompatiblitydialogforodp","displayName":"Suppress file format compatibility dialog box for OpenDocument Presentation format (User)","description":"This policy setting allows you to enable or disable the file format compatibility dialog box when saving a file as an OpenDocument presentation file in Microsoft PowerPoint.\r\n\r\nIf you enable this policy, the file format compatibility dialog is displayed whenever you save as an OpenDocument presentation file in PowerPoint.\r\n\r\nIf you disable this policy, the file format compatibility dialog is not displayed when you save as an OpenDocument presentation file in PowerPoint.","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_turnofffileformatcompatiblitydialogforodp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_turnofffileformatcompatiblitydialogforodp_1","displayName":"Enabled","description":null,"helpText":null}]},"d7dabcc1d7edaf47":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_pathcolon4","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"d7c0bef7d7961352":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchfor","displayName":"Search for: (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"98cefd27-a980-4070-ba45-3696b623810d","categoryName":"Shape Search","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchfor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_shapesearch_l_searchfor_1","displayName":"Enabled","description":null,"helpText":null}]},"d7fe55a1b6e66831":{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots","displayName":"Set Maximum Storage Duration For Recall Snapshots (User)","description":"This policy setting allows you to control the maximum amount of time (in days) that Windows saves snapshots for Recall. The default value for this setting is '0' which doesn't set a time frame to delete snapshots. When the default is used, snapshots aren't deleted until the maximum storage allocation for Recall is reached and the oldest snapshots are deleted first. You can configure the maximum storage duration to be 30, 60, 90, or 180 days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragedurationforrecallsnapshots"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_0","displayName":"Let the OS define the maximum amount of time the snapshots will be saved","description":"Let the OS define the maximum amount of time the snapshots will be saved","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_30","displayName":"30 days","description":"30 days","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_60","displayName":"60 days","description":"60 days","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_90","displayName":"90 days","description":"90 days","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_180","displayName":"180 days","description":"180 days","helpText":null}]},"d78859a1e3974e00":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchiaiyapianopiyano","displayName":"Match ia/iya (piano/piyano) (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchiaiyapianopiyano_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchiaiyapianopiyano_1","displayName":"Enabled","description":null,"helpText":null}]},"d71e655d28c4f280":{"id":"vendor_msft_firewall_mdmstore_hypervfirewallrules_{firewallrulename}_localportranges","displayName":"Local Port Ranges","description":"Comma Separated list of ranges for eg. 100-120,200,300-320. If not specified the default is All.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/d8.json b/public/intune-definitions/d8.json new file mode 100644 index 000000000000..8eb989e93999 --- /dev/null +++ b/public/intune-definitions/d8.json @@ -0,0 +1 @@ +{"d889958f7482bbe5":{"id":"ade_setupassistant_camerabutton","displayName":"Camera button","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_camerabutton_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_camerabutton_1","displayName":"Show","description":null,"helpText":null}]},"d8c4305ba8e489eb":{"id":"com.apple.applicationaccess_ratingtvshowsde","displayName":"Rating TV Shows - Germany","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsde_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsde_1","displayName":"Ab 0 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsde_2","displayName":"Ab 6 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsde_3","displayName":"Ab 12 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsde_4","displayName":"Ab 16 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsde_5","displayName":"Ab 18 Jahren","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsde_7","displayName":"All","description":null,"helpText":null}]},"d8ea3111502ec861":{"id":"com.apple.asam_allowedapplications_item_teamidentifier","displayName":"Team Identifier","description":"The developer's team identifier, used when the app was signed.","helpText":null,"infoUrls":[],"categoryId":"daa2ea69-8026-465a-942c-75eb0396d5b9","categoryName":"Autonomous Single App Mode","options":null},"d892a4fa7075c07b":{"id":"com.apple.familycontrols.contentfilter_whitelistenabled","displayName":"Allowlist Enabled","description":"If true, enables web content filters.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":[{"id":"com.apple.familycontrols.contentfilter_whitelistenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.contentfilter_whitelistenabled_true","displayName":"True","description":null,"helpText":null}]},"d82f92982cd6f28a":{"id":"com.apple.shareddeviceconfiguration_assettaginformation","displayName":"Asset Tag Information","description":"The asset tag information for the device, displayed in the Login Window and Lock Screen.","helpText":null,"infoUrls":[],"categoryId":"dec8381a-0a61-406b-842b-fc6ae9930795","categoryName":"Lock Screen Message","options":null},"d8502c3d5bc99018":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cookiesallowedforurls","displayName":"Allow cookies on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to set cookies. URL patterns can be a single URL indicating that the site can use cookies on all top-level sites. Patterns can also be two URLs delimited by a comma. The first specifies the site that should be allowed to use cookies. The second specifies the top-level site that the first value should be applied on. If you use a pair of URLs, the first value in the pair supports *, but the second value doesn't. Using * for the first value indicates that all sites can use cookies when the second URL is the top-level site.\n\nIf you don't configure this policy, the global default value from the \"DefaultCookiesSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor more information, see the \"CookiesBlockedForUrls\" and \"CookiesSessionOnlyForUrls\" policies.\n\nNote there can't be conflicting URL patterns set between these three policies:\n\n- \"CookiesBlockedForUrls\"\n\n- CookiesAllowedForUrls\n\n- \"CookiesSessionOnlyForUrls\"\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.\n\nTo allow third-party cookies to be set, specify a pair of URL patterns delimited by a comma. The first value in the pair specifies the third-party site that should be allowed to use cookies. The second value in the pair specifies the top-level site that the first value should be applied on. The first value in the pair supports * but the second value doesn't.\n\nTo exclude cookies from being deleted on exit, configure the \"SaveCookiesOnExit\" policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"d86e13ef62ceaf02":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge","description":"This policy lets you enhance the security state in Microsoft Edge.\n\nIf you set this policy to 'StandardMode', the enhanced mode is turned off, and Microsoft Edge falls back to its standard security mode.\n\nIf you set this policy to 'BalancedMode', the security state is in balanced mode.\n\nIf you set this policy to 'StrictMode', the security state is in strict mode.\n\nIf you set this policy to 'BasicMode', the security state is in basic mode.\n\nNote: Sites that use WebAssembly (WASM) aren't supported on 32-bit systems when \"EnhanceSecurityMode\" is enabled. If you require access to a site that uses WASM, consider adding it to your exception list as described in https://go.microsoft.com/fwlink/?linkid=2183321.\n\nStarting from Microsoft Edge version 113, 'BasicMode' is deprecated and is treated the same as 'BalancedMode'. It doesn't work in Microsoft Edge version 116.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895.\n\nPolicy options mapping:\n\n* StandardMode (0) = Standard mode\n\n* BalancedMode (1) = Balanced mode\n\n* StrictMode (2) = Strict mode\n\n* BasicMode (3) = (Deprecated) Basic mode\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_standardmode","displayName":"Standard mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_balancedmode","displayName":"Balanced mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_strictmode","displayName":"Strict mode","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_basicmode","displayName":"(Deprecated) Basic mode","description":null,"helpText":null}]},"d8c04e6b4bf04847":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_recommended","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled (users can override)","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\n\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\n\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"d834d5a0a924981c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.securitykeypermitattestation","displayName":"Websites or domains that don't need permission to use direct Security Key attestation","description":"Specifies the WebAuthn RP IDs that don't need explicit user permission when attestation certificates from security keys are requested. Additionally, a signal is sent to the security key indicating that it can use enterprise attestation. Without this policy, users are prompted each time a site requests attestation of security keys.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"d858c8add1c36d78":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sslerroroverrideallowedfororigins","displayName":"Allow users to proceed from the HTTPS warning page for specific origins","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\n\nIf you enable or don't configure the \"SSLErrorOverrideAllowed\" policy, this policy does nothing.\n\nIf you disable the \"SSLErrorOverrideAllowed\" policy, configuring this policy lets you configure a list of origin patterns for sites where users can continue to click through SSL error pages. Users can't click through SSL error pages on origins that are not on this list.\n\nIf you don't configure this policy, the \"SSLErrorOverrideAllowed\" policy applies for all sites.\n\nFor detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy. This policy only matches based on origin, so any path or query in the URL pattern is ignored.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"d80682e47695a24b":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordlength","displayName":"Password Length","description":"","helpText":"","infoUrls":[],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":null},"d87856bbfd78513c":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_onlinecachingsettings","displayName":"Enable Transparent Caching","description":"This policy setting controls whether files read from file shares over a slow network are transparently cached in the Offline Files cache for future reads. When a user tries to access a file that has been transparently cached, Windows reads from the cached copy after verifying its integrity. This improves end-user response times and decreases bandwidth consumption over WAN links.\r\n\r\nThe cached files are temporary and are not available to the user when offline. The cached files are not kept in sync with the version on the server, and the most current version from the server is always available for subsequent reads.\r\n\r\nThis policy setting is triggered by the configured round trip network latency value. We recommend using this policy setting when the network connection to the server is slow. For example, you can configure a value of 60 ms as the round trip latency of the network above which files should be transparently cached in the Offline Files cache. If the round trip latency of the network is less than 60ms, reads to remote files will not be cached.\r\n\r\nIf you enable this policy setting, transparent caching is enabled and configurable.\r\n\r\nIf you disable or do not configure this policy setting, remote files will be not be transparently cached on client computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-onlinecachingsettings"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_onlinecachingsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_onlinecachingsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"d8c3fe2353c7f7d3":{"id":"device_vendor_msft_policy_config_admx_servermanager_do_not_display_manage_your_server_page","displayName":"Do not display Manage Your Server page at logon","description":"This policy setting allows you to turn off the automatic display of the Manage Your Server page. \r\n\r\nIf you enable this policy setting, the Manage Your Server page is not displayed each time an administrator logs on to the server. \r\n\r\nIf you disable or do not configure this policy setting, the Manage Your Server page is displayed each time an administrator logs on to the server. However, if the administrator has selected the \"Don’t display this page at logon\" option at the bottom of the Manage Your Server page, the page is not displayed.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-servermanager#admx-servermanager-do-not-display-manage-your-server-page"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_servermanager_do_not_display_manage_your_server_page_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_servermanager_do_not_display_manage_your_server_page_1","displayName":"Enabled","description":null,"helpText":null}]},"d859fa7c25994f49":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_hardware_mode","displayName":"Do not allow hardware accelerated decoding","description":"This policy setting specifies whether the Remote Desktop Connection can use hardware acceleration if supported hardware is available. If you use this setting, the Remote Desktop Client will use only software decoding. For example, if you have a problem that you suspect may be related to hardware acceleration, use this setting to disable the acceleration; then, if the problem still occurs, you will know that there are additional issues to investigate. If you disable this setting or leave it not configured, the Remote Desktop client will use hardware accelerated decoding if supported hardware is available.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-disable-hardware-mode"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_hardware_mode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_hardware_mode_1","displayName":"Enabled","description":null,"helpText":null}]},"d8294684159b3e47":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"d890256a3a4de03e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended","displayName":"Enable AutoFill for addresses","description":"Setting the policy to True or leaving it unset gives users control of Autofill for addresses in the UI.\r\n\r\nSetting the policy to False means Autofill never suggests or fills address information, nor does it save additional address information that users submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d86c3f101b98ade9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended","displayName":"Enable leak detection for entered credentials","description":"Setting the policy to Enabled lets users have Google Chrome check whether usernames and passwords entered were part of a leak.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, credential leak checking is allowed, but the user can turn it off.\r\n\r\nThis behavior will not trigger if Safe Browsing is disabled (either by policy or by the user). In order to force Safe Browsing on, use the SafeBrowsingEnabled policy or the SafeBrowsingProtectionLevel policy.","helpText":"","infoUrls":[],"categoryId":"6d6b289c-c1e9-4004-b5ab-3123920cf10d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d811984ef305aa0c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled","displayName":"Enable signin interception","description":"This settings enables or disables signin interception.\r\n\r\nWhen this policy not set or is set to True, the signin interception dialog triggers when a Google account is added on the web, and the user may benefit from moving this account to another (new or existing) profile.\r\n\r\nWhen this is set to False, the signin interception dialog does not trigger.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d8b4b0f05bba3106":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"d8ce4b97c72a312c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled","displayName":"Allow ServiceWorker to dispatch navigation requests without waiting for its startup","description":"https://github.com/WICG/service-worker-auto-preload\r\nThe ServiceWorkerAutoPreload feature dispatches a network request for a main resource at the same time it begins the ServiceWorker bootstrap process.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome enables ServiceWorkerAutoPreload. The navigation request is automatically dispatched while starting the ServiceWorker in some scenarios, e.g. ServiceWorker is not running,\r\n\r\nIf it is disabled, Google Chrome will not enable ServiceWorkerAutoPreload. The navigation request is dispatched always after starting the ServiceWorker.\r\n\r\nThis policy is a temporary measure to control the feature and will be removed in M144.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d87846f5cef64e5c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings","displayName":"Settings for Help Me Write (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_0","displayName":"Allow Help Me Write and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_1","displayName":"Allow Help Me Write without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_2","displayName":"Do not allow Help Me Write.","description":null,"helpText":null}]},"d8eb80faa3b5debb":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled","displayName":"Enable deleting undecryptable passwords","description":"This policy controls whether the built-in password manager can delete undecryptable passwords from its database. This is required to restore the full functionality of the built-in password manager, but it may include a permanent data loss. Undecryptable password values will not become decryptable on their own and, if fixing them is possible, it usually requires complex user actions.\r\n\r\nSetting the policy to Enabled or leaving it unset means that users with undecryptable passwords saved to the built-in password manager will lose them. Passwords that are still in a working state will remain untouched.\r\n\r\nSetting the policy to Disabled means users will leave their password manager data untouched, but will experience a broken password manager functionality.\r\n\r\nIf the policy is set, users can't change it in Google Chrome.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d8d44d203305e32e":{"id":"device_vendor_msft_policy_config_devicelock_passwordhistorysize","displayName":"Password History Size","description":"Enforce password history This security setting determines the number of unique new passwords that have to be associated with a user account before an old password can be reused. The value must be between 0 and 24 passwords. This policy enables administrators to enhance security by ensuring that old passwords are not reused continually. Default: 24 on domain controllers. 0 on stand-alone servers. Note: By default, member computers follow the configuration of their domain controllers. To maintain the effectiveness of the password history, do not allow passwords to be changed immediately after they were just changed by also enabling the Minimum password age security policy setting. For information about the minimum password age security policy setting, see Minimum password age.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#passwordhistorysize"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"d8ad7ec32e95260d":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\n\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\n\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\n\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezonenavigatewindowsandframes"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},"d88320e5527cee4f":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b","displayName":"Only allow approved domains to use ActiveX controls without prompt","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0","displayName":"Disable","description":null,"helpText":null}]},"d8e36e82b6671422":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, a warning is issued to the user that potentially risky navigation is about to occur.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowlessprivilegedsites"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"d87461e0e63c9742":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service","description":"In Microsoft Edge, the Experimentation and Configuration Service is used to deploy Experimentation and Configuration payload.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nConfiguration payload consists of a list of settings that Microsoft wants to deploy to Microsoft Edge to optimize user experience. For example, configuration payload may specify how often Microsoft Edge sends requests to the Experimentation and Configuration Service to retrieve the newest payload.\r\n\r\nAdditionaly, configuration payload may also contain a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken due to the new User Agent string on Microsoft Edge. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nIf you set this policy to \"Retrieve configurations and experiments\" mode, the full payload is downloaded from the Experimentation and Configuration Service. This includes both the experimentation and configuration payloads.\r\n\r\nIf you set this policy to \"Retrieve configurations only\" mode, only the configuration payload is delivered.\r\n\r\nIf you set this policy to \"Disable communication with the Experimentation and Configuration Service\" mode, the communication with the Experimentation and Configuration Service is stopped completely.\r\n\r\nIf you don't configure this policy, on a managed device on Stable and Beta channels the behavior is the same as the \"Retrieve configurations only\" mode.\r\n\r\nIf you don't configure this policy, on an unmanaged device the behavior is the same as the \"Retrieve configurations and experiments\" mode.\r\n\r\n* 0 = Disable communication with the Experimentation and Configuration Service\r\n\r\n* 1 = Retrieve configurations only\r\n\r\n* 2 = Retrieve configurations and experiments","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"d84fffa62423f1fd":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended","displayName":"Enable resolution of navigation errors using a web service","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\r\n\r\nIf you enable this policy, a web service is used for network connectivity tests.\r\n\r\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\r\n\r\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d80da6f9aa452f17":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_cadistrustedcertificatesdesc","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"d82b853ed73bf7e9":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended","displayName":"Set default download directory","description":"This policy sets the default directory that Microsoft Edge uses to download files. Users can change the directory through browser settings.\r\n\r\nIf you don't configure this policy, Microsoft Edge uses the platform-specific default download directory.\r\n\r\nThis policy has no effect if the DownloadDirectory policy is set.\r\n\r\nFor a list of supported variables, see https://learn.microsoft.com/en-us/deployedge/edge-learnmore-create-user-directory-vars .\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","categoryName":"Downloads","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_recommended~downloads_recommended_defaultdownloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d83a85634c91f783":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback","description":"Following each major version update, Microsoft Edge will create a snapshot of parts of the user's browsing data to use in case of a later emergency that requires a temporary version rollback. If a temporary rollback is performed to a version for which a user has a corresponding snapshot, the data in the snapshot is restored. This lets users keep settings such as bookmarks and autofill data.\r\n\r\nIf you don't set this policy, the default value of 3 snapshots is used.\r\n\r\nIf you set this policy, old snapshots are deleted as needed to respect the limit you set. If you set this policy to 0, no snapshots are taken.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_1","displayName":"Enabled","description":null,"helpText":null}]},"d84bc2b708ff28b1":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitAllowedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT enabled, but fabrikam.com will use the policy from 'DefaultJavaScriptJitSetting' (Control use of JavaScript JIT), if set, or default to JavaScript JIT enabled.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptJitSetting' applies to the site, if set, otherwise Javascript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"d8a51356f603437a":{"id":"device_vendor_msft_policy_config_mixedreality_eyetrackingcalibrationprompt","displayName":"Eye Tracking Calibration Prompt","description":"This policy controls when a new person uses Hololens device, if Hololens should automatically ask to run eye calibration.","helpText":"","infoUrls":[],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_eyetrackingcalibrationprompt_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_eyetrackingcalibrationprompt_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"d860aa7889c83c1f":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic_forcedenytheseapps","displayName":"Let Apps Access Graphics Capture Programmatic Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the use of screen capture on arbitrary windows or displays. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"d835d3cb3e69db35":{"id":"device_vendor_msft_policy_config_storage_configstoragesenserecyclebincleanupthreshold","displayName":"Config Storage Sense Recycle Bin Cleanup Threshold","description":"When Storage Sense runs, it can delete files in the user’s Recycle Bin if they have been there for over a certain amount of days. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the minimum age threshold (in days) of a file in the Recycle Bin before Storage Sense will delete it. Supported values are: 0–365. If you set this value to zero, Storage Sense will not delete files in the user’s Recycle Bin. The default is 30 days. If you disable or do not configure this policy setting, Storage Sense will delete files in the user’s Recycle Bin that have been there for over 30 days by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesenserecyclebincleanupthreshold"],"categoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","categoryName":"Storage","options":null},"d80d3f0e8c7a2c9e":{"id":"extensionsettings_managedextensions_generickey_state","displayName":"State","description":"Controls whether an extension is allowed.\n* Allowed - The user is allowed to turn the extension on or off\n* AlwaysOn - The extension will always be on\n* AlwaysOff - The extension will always be off","helpText":null,"infoUrls":[],"categoryId":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","categoryName":"Safari Extension Settings","options":[{"id":"extensionsettings_managedextensions_generickey_state_0","displayName":"Allowed","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_state_1","displayName":"Always On","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_state_2","displayName":"Always Off","description":null,"helpText":null}]},"d8c0984d8eec1d87":{"id":"linux_mdatp_managed_antivirusengine_enablefilehashcomputation","displayName":"Enable file hash computation","description":"Whether the antivirus engine computes hashes for the files it scans or not.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#configure-file-hash-computation-feature"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_enablefilehashcomputation_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enablefilehashcomputation_true","displayName":"Enabled","description":null,"helpText":null}]},"d879e3ddc3409c17":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpin","displayName":"Do not automatically make all redirected folders available offline (User)","description":"This policy setting allows you to control whether all redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\\Roaming, are available offline by default.\r\n\r\nIf you enable this policy setting, users must manually select the files they wish to make available offline. \r\n\r\nIf you disable or do not configure this policy setting, redirected shell folders are automatically made available offline. All subfolders within the redirected folders are also made available offline. \r\n\r\nNote: This policy setting does not prevent files from being automatically cached if the network share is configured for \"Automatic Caching\", nor does it affect the availability of the \"Always available offline\" menu option in the user interface. \r\n\r\nNote: Do not enable this policy setting if users will need access to their redirected files if the network or server holding the redirected files becomes unavailable.\r\n\r\nNote: If one or more valid folder GUIDs are specified in the policy setting \"Do not automatically make specific redirected folders available offline\", that setting will override the configured value of \"Do not automatically make all redirected folders available offline\".\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-disablefradminpin"],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpin_1","displayName":"Enabled","description":null,"helpText":null}]},"d84c517a46aed4c7":{"id":"user_vendor_msft_policy_config_admx_startmenu_intellimenus","displayName":"Turn off personalized menus (User)","description":"Disables personalized menus.\r\n\r\nWindows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been used recently. Users can display the hidden items by clicking an arrow to extend the menu.\r\n\r\nIf you enable this setting, the system does not personalize menus. All menu items appear and remain in standard order. Also, this setting removes the \"Use Personalized Menus\" option so users do not try to change the setting while a setting is in effect.\r\n\r\nNote: Personalized menus require user tracking. If you enable the \"Turn off user tracking\" setting, the system disables user tracking and personalized menus and ignores this setting.\r\n\r\nTip: To Turn off personalized menus without specifying a setting, click Start, click Settings, click Taskbar and Start Menu, and then, on the General tab, clear the \"Use Personalized Menus\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-intellimenus"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_intellimenus_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_intellimenus_1","displayName":"Enabled","description":null,"helpText":null}]},"d8e748aa364ec6d4":{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_1","displayName":"Prevent press and hold (User)","description":"Prevents press and hold actions on hardware buttons, so that only one action is available per button.\r\n\r\nIf you enable this policy, press and hold actions are unavailable, and the button configuration dialog will display the following text: \"Some settings are controlled by Group Policy. If a setting is unavailable, contact your system administrator.\"\r\n\r\nIf you disable this policy, press and hold actions for buttons will be available.\r\n\r\nIf you do not configure this policy, press and hold actions will be available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventpressandhold-1"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_1_1","displayName":"Enabled","description":null,"helpText":null}]},"d8295901722e256a":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10","displayName":"Internet Explorer 10 (User)","description":"This policy setting configures the synchronization of user settings of Internet Explorer 10.\r\nBy default, the user settings of Internet Explorer 10 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 10 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 10 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 10 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer10"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10_1","displayName":"Enabled","description":null,"helpText":null}]},"d8b2aae39b571c42":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel2","displayName":"Site Name 3 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"d8c6e819dbc9b128":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_bypassproxylocal","displayName":"Bypass proxy for local addresses (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_bypassproxylocal_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_bypassproxylocal_1","displayName":"True","description":null,"helpText":null}]},"d80d36f4cb0170da":{"id":"user_vendor_msft_policy_config_browser_allowprinting","displayName":"Allow Printing (User)","description":"With this policy, you can restrict whether printing web content in Microsoft Edge is allowed. If enabled, printing is allowed. If disabled, printing is not allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowprinting"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowprinting_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowprinting_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"d84717b8f8d68b44":{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer","displayName":"Show Message When Opening Sites In Internet Explorer (User)","description":"You can configure Microsoft Edge to open a site automatically in Internet Explorer 11 and choose to display a notification before the site opens. If you want to display a notification, you must enable Configure the Enterprise Mode Site List or Send all intranets sites to Internet Explorer 11 or both. If enabled, the notification appears on a new page. If you want users to continue in Microsoft Edge, select the Show Keep going in Microsoft Edge option from the drop-down list under Options. If disabled or not configured, the default app behavior occurs and no additional page displays. Default setting: Disabled or not configured Related policies: -Configure the Enterprise Mode Site List -Send all intranet sites to Internet Explorer 11","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#showmessagewhenopeningsitesininternetexplorer"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_0","displayName":"No additional message displays.","description":"No additional message displays.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_1","displayName":"Show an additional message stating that a site has opened in IE11.","description":"Show an additional message stating that a site has opened in IE11.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_2","displayName":"Show an additional message with a \"Keep going in Microsoft Edge\" link.","description":"Show an additional message with a \"Keep going in Microsoft Edge\" link.","helpText":null}]},"d895de5940d62c95":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords","displayName":"Import saved passwords from default browser on first run (User)","description":"Setting the policy to Enabled imports saved passwords from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no saved passwords are imported on first run.\r\n\r\nUsers can trigger an import dialog and the saved passwords checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},"d83fe12e95b0841b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended","displayName":"Enable alternate error pages (User)","description":"Setting the policy to True means Google Chrome uses alternate error pages built into (such as \"page not found\"). Setting the policy to False means Google Chrome never uses alternate error pages.\r\n\r\nIf you set the policy, users can't change it. If not set, the policy is on, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d8e0b1184a971b47":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled","displayName":"Enable Printing LPAC Sandbox (User)","description":"Setting the policy to Enabled or leaving it unset enables the LPAC Sandbox for printing services whenever the system configuration supports it.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security as services used for printing might run in a weaker sandbox configuration.\r\n\r\nOnly turn off the policy if there are compatibility issues with third party software that prevent printing services from operating correctly inside the LPAC Sandbox.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d857e93ad08b449c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alertbeforeoverwritingcells","displayName":"Alert before overwriting cells (User)","description":"This policy setting sets the \"Alert before overwriting cells\" option found under File tab | Options | Advanced | Editing Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will give a warning if cells are about to be overwritten. This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will suppress the warning that cells are about to be overwritten.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alertbeforeoverwritingcells_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alertbeforeoverwritingcells_1","displayName":"Enabled","description":null,"helpText":null}]},"d8ca1fcecc39d389":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptlets"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"d8da7b5f5e8575a0":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallownetframeworkreliantcomponents"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"d8a9f413cec76050":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"d8e3e421daa7a9f7":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols","displayName":"Allow scripting of Internet Explorer WebBrowser controls (User)","description":"This policy setting determines whether a page can control embedded WebBrowser controls via script.\n\nIf you enable this policy setting, script access to the WebBrowser control is allowed.\n\nIf you disable this policy setting, script access to the WebBrowser control is not allowed.\n\nIf you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"d8cd49b14a850480":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode","displayName":"Turn on Protected Mode (User)","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneturnonprotectedmode"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"d86ffd1b1de92b8e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_urlallowlistdesc","displayName":"Define a list of allowed URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d899c7e9df0d0de5":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL (User)","description":"Configures the change password URL (HTTP and HTTPS schemes only).\r\n\r\nPassword protection service will send users to this URL to change their password after seeing a warning in the browser.\r\n\r\nIf you enable this policy, then password protection service sends users to this URL to change their password.\r\n\r\nIf you disable this policy or don't configure it, then password protection service will not redirect users to a change password URL.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://contoso.com/change_password.html","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_1","displayName":"Enabled","description":null,"helpText":null}]},"d83a5a3fd8b5946d":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled","displayName":"Choose whether users can receive customized background images and text, suggestions, notifications,\r\nand tips for Microsoft services (User)","description":"Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services.\r\n\r\nIf you enable or don't configure this setting, spotlight experiences and recommendations are turned on.\r\n\r\nIf you disable this setting, spotlight experiences and recommendations are turned off.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d8b07997f66e8a1e":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended","displayName":"Allow single sign-on for Microsoft personal sites using this profile (User)","description":"'Allow single sign-on for Microsoft personal sites using this profile' option allows non-MSA profiles to be able to use single sign-on for Microsoft sites using MSA credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-MSA profiles only.\r\n\r\nIf you disable this policy, non-MSA profiles will not be able to use single sign-on for Microsoft sites using MSA credentials present on the machine.\r\n\r\nIf you enable this policy or don't configure it, users will be able to use the Settings option to ensure non-MSA profiles are able to use single sign-on for Microsoft sites using MSA credentials present on the machine provided only a single MSA account exists on the machine.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d805a65889064dca":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicypowerpoint","displayName":"Disallow in PowerPoint (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicypowerpoint_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicypowerpoint_1","displayName":"True","description":null,"helpText":null}]},"d8b183acfa4931f4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanliechtenstein","displayName":"German (Liechtenstein) (User)","description":"Enables the editing language German (Liechtenstein)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanliechtenstein_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanliechtenstein_1","displayName":"Enabled","description":null,"helpText":null}]},"d8e821eaaf67aae5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_l_workflowfriendly491","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"d8b1dcf766e9b057":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_inboxfolderhomepage_l_urladdressofassociatedwebpage41","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"d81cf45fe6b26ab2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_l_showassociatedwebpage57","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_l_showassociatedwebpage57_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_notesfolderhomepage_l_showassociatedwebpage57_1","displayName":"True","description":null,"helpText":null}]},"d87c2e1e640509eb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingexchangeemailaccounts","displayName":"Prevent users from adding Exchange e-mail accounts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingexchangeemailaccounts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_preventusersfromaddingemailaccounttypes_l_preventusersfromaddingexchangeemailaccounts_1","displayName":"True","description":null,"helpText":null}]},"d8264c637409a9eb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards","displayName":"On replies and forwards (User)","description":"Sets the values in the corresponding UI options.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_1","displayName":"Enabled","description":null,"helpText":null}]},"d8582e85dd6f9869":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders35","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders35_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders35_1","displayName":"True","description":null,"helpText":null}]},"d8854651eeff343d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_showmorehandles","displayName":"Show more handles on hover (User)","description":"This policy setting allows you to show more shape handles when hovering over a selected shape.\r\n\r\nIf you enable this policy setting, more shape handles will be shown after a brief delay.\r\n\r\nIf you disable or do not configure this policy setting, more shape handles will not be shown.\r\n","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_showmorehandles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_showmorehandles_1","displayName":"Enabled","description":null,"helpText":null}]},"d81a396cee190c1c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_drawings","displayName":"Drawings (User)","description":"Displays the additional location of drawings. When you add a location here, it becomes the default save location.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_drawings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_drawings_1","displayName":"Enabled","description":null,"helpText":null}]},"d832c318d015c14a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced~l_filelocations_l_autorecoverfiles_l_autorecoverfiles13","displayName":"AutoRecover files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc65521d-e48a-4e95-899f-49df827808ca","categoryName":"File Locations","options":null},"d873428cb5cc8db2":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_defaultinboundaction","displayName":"Default Inbound Action","description":"This value is the action that the Hyper-V Firewall does by default (and evaluates at the very end) on inbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 1 [Block].","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_defaultinboundaction_0","displayName":"Allow Inbound By Default","description":"Allow Inbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_privateprofile_defaultinboundaction_1","displayName":"Block Inbound By Default","description":"Block Inbound By Default","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/d9.json b/public/intune-definitions/d9.json new file mode 100644 index 000000000000..b7c742da4f98 --- /dev/null +++ b/public/intune-definitions/d9.json @@ -0,0 +1 @@ +{"d9d58a3e8b0c6d52":{"id":"com.apple.applicationaccess_allowcontinuouspathkeyboard","displayName":"Allow Continuous Path Keyboard (Deprecated)","description":"If false, disables QuickPath keyboard. Requires a supervised device. Available in iOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcontinuouspathkeyboard_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcontinuouspathkeyboard_true","displayName":"True","description":null,"helpText":null}]},"d9ab44eeae5f4a68":{"id":"com.apple.applicationaccess_allowpasscodemodification","displayName":"Allow Passcode Modification","description":"If false, prevents the device passcode from being added, changed, or removed. This restriction is ignored by Shared iPads. Requires a supervised device. Available in iOS 9 and later, and macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpasscodemodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpasscodemodification_true","displayName":"True","description":null,"helpText":null}]},"d9388a73bd80986f":{"id":"com.apple.familycontrols.contentfilter_sitewhitelist_item_pagetitle","displayName":"Page Title","description":"The site page title.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":null},"d92ed2f729015af0":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_application id","displayName":"Microsoft Defender Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"d93a72e4770dc15f":{"id":"com.apple.managedclient.preferences_enhancesecuritymodeenforcelistdomains","displayName":"Configure the list of domains for which enhance security mode will always be enforced","description":"Configure the list of enhance security untrusted domains. This means that\nenhance security mode will always be enforced when loading the sites in untrusted domains.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enhancesecuritymodeenforcelistdomains"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"d9a0b725ef4df97f":{"id":"com.apple.security.smartcard_enforcesmartcard","displayName":"Enforce Smart Card","description":"If true, a user can only log in or authenticate with a SmartCard. Ensure that users have a SmartCard before being targeted with this setting, or they may not be able to access the device. Available in macOS 10.13.2 and later.","helpText":null,"infoUrls":[],"categoryId":"f4a8384f-9e4e-4fc6-9ee2-28fa5260347a","categoryName":"Smart Card","options":[{"id":"com.apple.security.smartcard_enforcesmartcard_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.security.smartcard_enforcesmartcard_true","displayName":"True","description":null,"helpText":null}]},"d955043ff3ddf1b9":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes","displayName":"System Policy Network Volumes","description":"Allows the application to access files on network volumes.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"d957d02092f2ff91":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultserialguardsetting","displayName":"Control use of the Serial API","description":"Set whether websites can access serial ports. You can completely block access or ask the user each time a website wants to get access to a serial port.\n\nSetting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\n\nYou can override this policy for specific URL patterns by using the \"SerialAskForUrls\" and \"SerialBlockedForUrls\" policies.\n\nIf you don't configure this policy, by default, websites can ask users whether they can access a serial port, and users can change this setting.\n\nPolicy options mapping:\n\n* BlockSerial (2) = Do not allow any site to request access to serial ports via the Serial API\n\n* AskSerial (3) = Allow sites to ask for user permission to access a serial port\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultserialguardsetting_blockserial","displayName":"Do not allow any site to request access to serial ports via the Serial API","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultserialguardsetting_askserial","displayName":"Allow sites to ask for user permission to access a serial port","description":null,"helpText":null}]},"d9c3c701dd2db0b5":{"id":"com.microsoft.edge.mamedgeappconfigsettings.fileordirectorypickerwithoutgestureallowedfororigins","displayName":"Allow file or directory picker APIs to be called without prior user gesture","description":"For security reasons, the showOpenFilePicker(), showSaveFilePicker(), and showDirectoryPicker() web APIs require a prior user gesture (\"transient activation\") to be called; else, they fail.\n\nIf you enable this policy, admins can specify origins on which these APIs can be called without prior user gesture.\n\nFor detailed information on valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.\n\nIf you disable or don't configure this policy, all origins will require a prior user gesture to call these APIs.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"d9003938886ae1fe":{"id":"com.microsoft.edge.mamedgeappconfigsettings.mandatoryextensionsforinprivatenavigation","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode","description":"This policy lets you specify a list of extension IDs that the user must explicitly allow to run in InPrivate mode in order to enable InPrivate browsing.\n\nIf users don't allow all listed extensions to run in InPrivate mode, they're unable to navigate using InPrivate.\n\nIf any extension in the list isn't installed, InPrivate navigation is blocked.\n\nThis policy only applies when InPrivate mode is enabled. If InPrivate mode is disabled using the InPrivateModeAvailability policy, this policy has no effect.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"d9e2e52b715e2c8c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox","displayName":"Configure the new tab page search box experience","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\".\n\n If you disable or don't configure this policy and:\n\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\n- If the address bar default search engine isn't Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\n\n\nIf you enable this policy and set it to:\n\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\n\nPolicy options mapping:\n\n* bing (bing) = Search box (Recommended)\n\n* redirect (redirect) = Address bar\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_redirect","displayName":"Address bar","description":null,"helpText":null}]},"d9012b01b3a42196":{"id":"com.microsoft.edge.mamedgeappconfigsettings.spellchecklanguageblocklist","displayName":"Force disable spellcheck languages","description":"Force-disables spellcheck languages. Unrecognized languages in that list will be ignored.\n\nIf you enable this policy, spellcheck will be disabled for the languages specified. The user can still enable or disable spellcheck for languages not in the list.\n\nIf you don't set this policy, or disable it, there is no change to the user's spellcheck preferences.\n\nIf the \"SpellcheckEnabled\" policy is set to disabled, this policy has no effect.\n\nIf a language is included in both the \"SpellcheckLanguage\" and the 'SpellcheckLanguageBlocklist' policy, the spellcheck language is enabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"d9606ccd7b80c29b":{"id":"device_vendor_msft_bitlocker_requiredeviceencryption","displayName":"Require Device Encryption","description":"Allows the Admin to require encryption to be turned on using BitLocker\\Device Encryption.\n The format is integer.\n Sample value for this node to enable this policy:\n 1\n\n Disabling the policy will not turn off the encryption on the system drive. But will stop prompting the user to turn it on.\n If you want to disable this policy use the following SyncML:\n 101./Device/Vendor/MSFT/BitLocker/RequireDeviceEncryptionint0","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"0a1347d2-90c0-407a-baa0-e4859260532a","categoryName":"BitLocker","options":[{"id":"device_vendor_msft_bitlocker_requiredeviceencryption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_requiredeviceencryption_1","displayName":"Enabled","description":null,"helpText":null}]},"d9799df5397cbe73":{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_2_dwmdefaultcolorizationcolorblue","displayName":"Blue","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"d9303e8634b58469":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_corpconnsyncwaittime_corpconnsyncwaittime_seconds","displayName":"Amount of time to wait (in seconds):","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"d903cd643f244e0c":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scanonlyifidle","displayName":"Start the scheduled scan only when computer is on but not in use","description":"This policy setting allows you to configure scheduled scans to start only when your computer is on but not in use.\r\n\r\n If you enable or do not configure this setting, scheduled scans will only run when the computer is on but not in use.\r\n\r\n If you disable this setting, scheduled scans will run at the scheduled time.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-scanonlyifidle"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scanonlyifidle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scanonlyifidle_1","displayName":"Enabled","description":null,"helpText":null}]},"d9d26c11a1a9fb9e":{"id":"device_vendor_msft_policy_config_admx_power_dont_poweroff_aftershutdown","displayName":"Do not turn off system power after a Windows system shutdown has occurred.","description":"This policy setting allows you to configure whether power is automatically turned off when Windows shutdown completes. This setting does not affect Windows shutdown behavior when shutdown is manually selected using the Start menu or Task Manager user interfaces. Applications such as UPS software may rely on Windows shutdown behavior.\r\n\r\nThis setting is only applicable when Windows shutdown is initiated by software programs invoking the Windows programming interfaces ExitWindowsEx() or InitiateSystemShutdown().\r\n\r\nIf you enable this policy setting, the computer system safely shuts down and remains in a powered state, ready for power to be safely removed.\r\n\r\nIf you disable or do not configure this policy setting, the computer system safely shuts down to a fully powered-off state.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dont-poweroff-aftershutdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_power_dont_poweroff_aftershutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dont_poweroff_aftershutdown_1","displayName":"Enabled","description":null,"helpText":null}]},"d923cf75b4ca0bbd":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_home_dir","displayName":"Home Dir Root Path:","description":null,"helpText":"","infoUrls":[],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":null},"d94e2dc832ed93e0":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_paint","displayName":"Paint (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_paint_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_paint_1","displayName":"True","description":null,"helpText":null}]},"d9710d2e6d5e921c":{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditdistributiongroupmanagement","displayName":"Account Management Audit Distribution Group Management","description":"This policy setting allows you to audit events generated by changes to distribution groups such as the following: Distribution group is created, changed, or deleted. Member is added or removed from a distribution group. Distribution group type is changed. If you configure this policy setting, an audit event is generated when an attempt to change a distribution group is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a distribution group changes. Note: Events in this subcategory are logged only on domain controllers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountmanagement_auditdistributiongroupmanagement"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditdistributiongroupmanagement_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditdistributiongroupmanagement_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditdistributiongroupmanagement_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountmanagement_auditdistributiongroupmanagement_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"d9cb2075e47dff2e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting","displayName":"Default geolocation setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1","displayName":"Allow sites to track the users' physical location","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2","displayName":"Do not allow any site to track the users' physical location","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3","displayName":"Ask whenever a site wants to track the users' physical location","description":null,"helpText":null}]},"d9f2c2c3674c8ace":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowbackforwardcacheforcachecontrolnostorepageenabled","displayName":"Allow pages with Cache-Control: no-store header to enter back/forward cache","description":"This policy controls if a page with Cache-Control: no-store header can be stored in back/forward cache. The website setting this header may not expect the page to be restored from back/forward cache since some sensitive information could still be displayed after the restoration even if it is no longer accessible.\r\n\r\nIf the policy is enabled or unset, the page with Cache-Control: no-store header might be restored from back/forward cache unless the cache eviction is triggered (e.g. when there is HTTP-only cookie change to the site).\r\n\r\nIf the policy is disabled, the page with Cache-Control: no-store header will not be stored in back/forward cache.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowbackforwardcacheforcachecontrolnostorepageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowbackforwardcacheforcachecontrolnostorepageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d928c19b809c3c3b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls","displayName":"Allow Window Management permission on these sites","description":"Allows you to set a list of site url patterns that specify sites which will automatically grant the window management permission. This will extend the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultWindowManagementSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nThis replaces the deprecated WindowPlacementAllowedForUrls policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"d945aa54016b3e67":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount","displayName":"Locked Retry Count","description":"Specifies the number of retries to perform when a VHD(x) file is locked (open by another process or computer). The default value is 12 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\LockedRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_1","displayName":"Enabled","description":null,"helpText":null}]},"d9749e3a43bf9701":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch","displayName":"VHD Name Match","description":"Specifies a string pattern used when matching a users ODFC container. Use this setting to define how FSLogix will attempt to locate a users ODFC container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNamePattern value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_1","displayName":"Enabled","description":null,"helpText":null}]},"d920f3a89e37f190":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"d97b6c17862d5070":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor","displayName":"Set the company logo backplate color on the new tab page.","description":"By default, the new tab page sets the company logo backplate color to the neutralStrokeActive (#cecece) constant.\r\n\r\nYou can configure this policy with a color hex code to change the company logo backplate color on the new tab page.\r\n\r\nIf this policy is not configured, the default neutralStrokeActive (#cecece) color will be used as the backplate color.\r\n\r\nExample value: #cecece","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_1","displayName":"Enabled","description":null,"helpText":null}]},"d9523259beb0bd01":{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_relaunchfastifoutdated","displayName":"Time period (days): (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"d949d3ab572f9d51":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_legacysamesitecookiebehaviorenabledfordomainlistdesc","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"d91b38c5f6f786e3":{"id":"device_vendor_msft_policy_config_networkisolation_enterprisecloudresources","displayName":"Enterprise Cloud Resources","description":"Contains a list of Enterprise resource domains hosted in the cloud that need to be protected. Connections to these resources are considered enterprise data. If a proxy is paired with a cloud resource, traffic to the cloud resource will be routed through the enterprise network via the denoted proxy server (on Port 80). A proxy server used for this purpose must also be configured using the EnterpriseInternalProxyServers policy. This domain list is a pipe-separated list of cloud resources. Each cloud resource can also be paired optionally with an internal proxy server by using a trailing comma followed by the proxy address. For example, ||,||,|.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterprisecloudresources"],"categoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","categoryName":"Network Isolation","options":null},"d94c0a28ca9ad4ff":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_onenoteexe","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_onenoteexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_onenoteexe_1","displayName":"True","description":null,"helpText":null}]},"d92f5660382e85cc":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_savefilestohost","displayName":"Allow files to download and save to the host operating system","description":"This policy setting determines whether to save downloaded files to the host operating system from the Microsoft Defender Application Guard container. If you enable this setting, people can save downloaded files from the Microsoft Defender Application Guard container to the host operating system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_savefilestohost_0","displayName":"Disabled","description":"The user cannot download files from Edge in the container to the host file system. When the policy is not configured, it is the same as disabled (0).","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_savefilestohost_1","displayName":"Enabled","description":"Turns on the functionality to allow users to download files from Edge in the container to the host file system.","helpText":null}]},"d9544cc856d0e1a2":{"id":"user_vendor_msft_agentgovernance_{profileid}_resourcepolicy_allowagenttoolexecution_allowedfilesystemdirectories_directorypath","displayName":"Directory","description":"The filesystem directory path to which this access rule applies. Supports absolute paths and environment variables (e.g. D:\\Repos, %USERPROFILE%).","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":null},"d932809a45a0a60a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid","displayName":"Cipher key length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":null},"d90b138f567d7739":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddinsacc","displayName":"Database Tools | Database Tools | Add-Ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddinsacc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddinsacc_1","displayName":"True","description":null,"helpText":null}]},"d9198b0cd418d2e7":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":null},"d98bf954025940b9":{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nosupportinfo","displayName":"Remove Support Information (User)","description":"Removes links to the Support Info dialog box from programs on the Change or Remove Programs page.\r\n\r\nPrograms listed on the Change or Remove Programs page can include a \"Click here for support information\" hyperlink. When clicked, the hyperlink opens a dialog box that displays troubleshooting information, including a link to the installation files and data that users need to obtain product support, such as the Product ID and version number of the program. The dialog box also includes a hyperlink to support information on the Internet, such as the Microsoft Product Support Services Web page.\r\n\r\nIf you disable this setting or do not configure it, the Support Info hyperlink appears.\r\n\r\nNote: Not all programs provide a support information hyperlink.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-nosupportinfo"],"categoryId":"023e0367-b563-4fae-8fb6-589c836ee223","categoryName":"Add or Remove Programs","options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nosupportinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nosupportinfo_1","displayName":"Enabled","description":null,"helpText":null}]},"d9e16d6bf44b2d33":{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpimplicitfeedback","displayName":"Turn off Help Experience Improvement Program (User)","description":"This policy setting specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program collects information about how customers use Windows Help so that Microsoft can improve it.\r\n\r\nIf you enable this policy setting, users cannot participate in the Help Experience Improvement program.\r\n\r\nIf you disable or do not configure this policy setting, users can turn on the Help Experience Improvement program feature from the Help and Support settings page.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-helpandsupport#admx-helpandsupport-hpimplicitfeedback"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpimplicitfeedback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpimplicitfeedback_1","displayName":"Enabled","description":null,"helpText":null}]},"d9cc176c384e9226":{"id":"user_vendor_msft_policy_config_admx_startmenu_notrayitemsdisplay","displayName":"Hide the notification area (User)","description":"This setting affects the notification area (previously called the \"system tray\") on the taskbar.\r\n\r\nDescription: The notification area is located at the far right end of the task bar and includes the icons for current notifications and the system clock.\r\n\r\nIf this setting is enabled, the user’s entire notification area, including the notification icons, is hidden. The taskbar displays only the Start button, taskbar buttons, custom toolbars (if any), and the system clock.\r\n\r\nIf this setting is disabled or is not configured, the notification area is shown in the user's taskbar.\r\n\r\nNote: Enabling this setting overrides the \"Turn off notification area cleanup\" setting, because if the notification area is hidden, there is no need to clean up the icons.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notrayitemsdisplay"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notrayitemsdisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notrayitemsdisplay_1","displayName":"Enabled","description":null,"helpText":null}]},"d969c3b88baf4745":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern","displayName":"Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome (User)","description":"Contains a regular expression which is used to determine which Google accounts can be set as browser primary accounts in Google Chrome (i.e. the account that is chosen during the Sync opt-in flow).\r\n\r\nAn appropriate error is displayed if a user tries to set a browser primary account with a username that does not match this pattern.\r\n\r\nIf this policy is left not set or blank, then the user can set any Google account as a browser primary account in Google Chrome.\r\n\r\nExample value: .*@example\\.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_1","displayName":"Enabled","description":null,"helpText":null}]},"d9b74f944355e1d4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist","displayName":"Block access to a list of URLs (User)","description":"Setting the policy prevents webpages with prohibited URLs from loading. It provides a list of URL patterns that specify forbidden URLs. Leaving the policy unset means no URLs are prohibited in the browser. Format the URL pattern according to this format ( https://www.chromium.org/administrators/url-blocklist-filter-format ). Up to 1,000 exceptions can be defined in URLAllowlist.\r\n\r\nFrom Google Chrome version 73, you can block javascript://* URLs. However, it affects only JavaScript entered in the address bar (or, for example, bookmarklets). In-page JavaScript URLs with dynamically loaded data aren't subject to this policy. For example, if you block example.com/abc, then example.com can still load example.com/abc using XMLHTTPRequest.\r\n\r\nFrom Google Chrome version 92, this policy is also supported in the headless mode.\r\n\r\nNote: Blocking internal chrome://* URLs can lead to unexpected errors.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"d92961ff49fe1b53":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_urlblacklistdesc","displayName":"Block access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"d9421a1ba5aa7d9c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled","displayName":"Enable saving passwords to the password manager (User)","description":"Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.\r\n\r\nSetting the policy to Disabled means users can't save new passwords, but previously saved passwords will still work.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, the user can turn off password saving.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d9f1778b0546bcce":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_remoteaccesshostclipboardsizebytes","displayName":"The maximum size, in bytes, that can be transferred between client and host via clipboard synchronization: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":null},"d9ab349b04f55d5b":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended","displayName":"Enable Live Caption (User)","description":"Enable the Live Caption feature.\r\n\r\nIf this policy is set to Enabled, Live Caption will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Caption will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Caption is disabled initially but can be enabled by the user anytime.","helpText":"","infoUrls":[],"categoryId":"12142994-4b30-486c-bab1-9206528b2b96","categoryName":"Accessibility settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d9a6277e57abfd3e":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode","displayName":"Turn on Protected Mode (User)","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://learn.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneenableprotectedmode"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"d9945d0ec072ec3c":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled","displayName":"Enable component updates in Microsoft Edge (User)","description":"If you enable or don't configure this policy, component updates are enabled in Microsoft Edge.\r\n\r\nIf you disable this policy or set it to false, component updates are disabled for all components in Microsoft Edge.\r\n\r\nHowever, some components are exempt from this policy. This includes any component that doesn't contain executable code, that doesn't significantly alter the behavior of the browser, or that's critical for security. That is, updates that are deemed \"critical for security\" are still applied even if you disable this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"d9188133d7ff72f3":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended","displayName":"Enable AutoFill for credit cards (User)","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete credit card information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for credit cards.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"d9f1461f134f7608":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection","displayName":"Default printer selection rules (User)","description":"Overrides Microsoft Edge default printer selection rules. This policy determines the rules for selecting the default printer in Microsoft Edge, which happens the first time a user tries to print a page.\r\n\r\nWhen this policy is set, Microsoft Edge tries to find a printer that matches all of the specified attributes and uses it as default printer. If there are multiple printers that meet the criteria, the first printer that matches is used.\r\n\r\nIf you don't configure this policy or no matching printers are found within the timeout, the printer defaults to the built-in PDF printer or no printer, if the PDF printer isn't available.\r\n\r\nThe value is parsed as a JSON object, conforming to the following schema: { \"type\": \"object\", \"properties\": { \"idPattern\": { \"description\": \"Regular expression to match printer id.\", \"type\": \"string\" }, \"namePattern\": { \"description\": \"Regular expression to match printer display name.\", \"type\": \"string\" } } }\r\n\r\nOmitting a field means all values match; for example, if you don't specify connectivity Print Preview starts discovering all kinds of local printers. Regular expression patterns must follow the JavaScript RegExp syntax and matches are case sensitive.\r\n\r\nExample value: { \"idPattern\": \".*public\", \"namePattern\": \".*Color\" }","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_1","displayName":"Enabled","description":null,"helpText":null}]},"d949055f2fe108b8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withasimplewebdiscussionslink373","displayName":"With a simple Web discussions link (User)","description":"Defines the default message body text used in a reply to an email request for review when the reply contains a simple Web discussions link. ","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withasimplewebdiscussionslink373_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withasimplewebdiscussionslink373_1","displayName":"Enabled","description":null,"helpText":null}]},"d961587be9b3a6fb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishuruguay","displayName":"Spanish (Uruguay) (User)","description":"Enables the editing language Spanish (Uruguay)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishuruguay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishuruguay_1","displayName":"Enabled","description":null,"helpText":null}]},"d9f0d394f4d64364":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey06_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"d910d601d4e35fee":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey11_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"d92e92b460ca2a54":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc09_l_allowsubfolders09","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc09_l_allowsubfolders09_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc09_l_allowsubfolders09_1","displayName":"True","description":null,"helpText":null}]},"d9dbfebb886cc957":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_l_showassociatedwebpage60","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_l_showassociatedwebpage60_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_outboxfolderhomepage_l_showassociatedwebpage60_1","displayName":"True","description":null,"helpText":null}]},"d9eb0aa06d4d380c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfileasorder","displayName":"Default File As order: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","categoryName":"Contact Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfileasorder_32791","displayName":"Last First","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfileasorder_32823","displayName":"First Last","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfileasorder_14870","displayName":"Company","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfileasorder_32793","displayName":"Last, First (Company)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_contactoptions_l_selectthedefaultsettingforhowtofilenewcontacts_l_defaultfileasorder_32792","displayName":"Company (Last, First)","description":null,"helpText":null}]},"d97c1c594030d903":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setimportance","displayName":"Set importance: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setimportance_2","displayName":"High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setimportance_1","displayName":"Normal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_whensendingamessage_l_setimportance_0","displayName":"Low","description":null,"helpText":null}]},"d9bf32b0d544e832":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_turnoffautomaticsearchindexreconciliation","displayName":"Turn off automatic search index reconciliation (User)","description":"This policy setting configures the automatic verification of the integrity of Outlook's search index every 72 hours.\r\n\r\nIf you enable this policy setting, automatic reconciliation will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, Outlook will reconcile its index every 72 hours.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_turnoffautomaticsearchindexreconciliation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_turnoffautomaticsearchindexreconciliation_1","displayName":"Enabled","description":null,"helpText":null}]},"d9df8d8c8dd60c8b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingcrls_l_indicateamissingcrlasan","displayName":"Indicate a missing CRL as a(n): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingcrls_l_indicateamissingcrlasan_0","displayName":"Warning","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_missingcrls_l_indicateamissingcrlasan_1","displayName":"Error","description":null,"helpText":null}]},"d95048b9e3f52997":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_runrulesonrssitems","displayName":"Run rules on RSS items (User)","description":"By default, rules are not run on RSS items. Use this setting to make rules run on RSS items.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_runrulesonrssitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_runrulesonrssitems_1","displayName":"Enabled","description":null,"helpText":null}]},"d9970911ad9fb11a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_maximumnumberofundos_l_maximumnumberofundos2","displayName":"Maximum number of undos (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":null},"d917806e927ac4dd":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},"d944cacf549cb38a":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]},"d9e49595d78b032f":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_calendartype_l_calendartype0_l_calendartype1","displayName":"Calendar Type (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70b0e7ef-ceac-4c25-8f9f-5a6bf07163b6","categoryName":"Calendar Type","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_calendartype_l_calendartype0_l_calendartype1_1","displayName":"Gregorian Calendar","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_calendartype_l_calendartype0_l_calendartype1_6","displayName":"Hijri Calendar","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview~l_calendartype_l_calendartype0_l_calendartype1_7","displayName":"Thai Buddhist","description":null,"helpText":null}]},"d9b5a6088356c137":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_templates_l_templatescolon","displayName":"Templates: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":null},"d9c5f0971148a365":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_enableclickandtype","displayName":"Enable click and type (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_enableclickandtype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_enableclickandtype_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/da.json b/public/intune-definitions/da.json new file mode 100644 index 000000000000..47cbbf876fd4 --- /dev/null +++ b/public/intune-definitions/da.json @@ -0,0 +1 @@ +{"da50247a9d50121a":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta_part_targetversionprefix","displayName":"Target version (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":null},"da7fd05295158886":{"id":"com.apple.directoryservice.managed_admapggidattributeflag","displayName":"AD Map GGID Attribute Flag","description":"If true, enables the AD Map GGID Attribute Flag key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_admapggidattributeflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_admapggidattributeflag_true","displayName":"True","description":null,"helpText":null}]},"da4445dc766f18a5":{"id":"com.apple.ldap.account_ldapaccountpassword","displayName":"LDAP Account Password","description":"The user’s password. The password is enabled only with encrypted profiles.","helpText":null,"infoUrls":[],"categoryId":"9ba1b877-865a-4104-8376-b43a0c75b04b","categoryName":"LDAP","options":null},"dae804ba649f4ad5":{"id":"com.apple.managedclient.preferences_autofillmembershipsenabled","displayName":"Save and fill memberships","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\n\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\n\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\n\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autofillmembershipsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_autofillmembershipsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autofillmembershipsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"dae1118b0a8dbe88":{"id":"com.apple.managedclient.preferences_edgeassetdeliveryserviceenabled","displayName":"Allow features to download assets from the Asset Delivery Service","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\nThese assets can be config files or Machine Learning models that power the features that use this service.\n\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\n\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeassetdeliveryserviceenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeassetdeliveryserviceenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeassetdeliveryserviceenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"da8d17aae6f600f4":{"id":"com.apple.managedclient.preferences_relaunchnotificationperiod","displayName":"Set the time period for update notifications","description":"Allows you to set the time period, in milliseconds, over which users are notified that Microsoft Edge must be relaunched or that a Microsoft Edge OS device must be restarted to apply a pending update.\n\nOver this time period, the user will be repeatedly informed of the need for an update. For Microsoft Edge OS devices, a restart notification appears in the system tray according to the RelaunchHeadsUpPeriod policy. For Microsoft Edge browsers, the app menu changes to indicate that a relaunch is needed once one third of the notification period passes. This notification changes color once two thirds of the notification period passes, and again once the full notification period has passed. The additional notifications enabled by the \"RelaunchNotification\" policy follow this same schedule.\n\nIf not set, the default period of 604800000 milliseconds (one week) is used.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#relaunchnotificationperiod"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"da1c98953a3cb17e":{"id":"com.apple.managedclient.preferences_suppressunsupportedoswarning","displayName":"Suppress the unsupported OS warning","description":"Suppresses the warning that appears when Microsoft Edge is running on a computer or operating system that is no longer supported.\n\nIf this policy is false or unset, the warnings will appear on such unsupported computers or operating systems.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#suppressunsupportedoswarning"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_suppressunsupportedoswarning_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_suppressunsupportedoswarning_true","displayName":"Enabled","description":null,"helpText":null}]},"da41e733414f89ec":{"id":"com.apple.servicemanagement_com.apple.servicemanagement","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"9859957e-34f1-4669-9f95-2b7c79fff052","categoryName":"Service Management - Managed Login Items","options":null},"dada2d2db97173f2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.nativemessaginguserlevelhosts","displayName":"Allow user-level native messaging hosts (installed without admin permissions)","description":"If you set this policy to Enabled or leave it unset, Microsoft Edge can use native messaging hosts installed at the user level.\n\nIf you set this policy to Disabled, Microsoft Edge can only use these hosts if they're installed at the system level.","helpText":null,"infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.nativemessaginguserlevelhosts_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.nativemessaginguserlevelhosts_true","displayName":"Enabled","description":null,"helpText":null}]},"da213314a513d832":{"id":"device_vendor_msft_defender_configuration_devicecontrol_policyrules_{ruleid}_ruledata_includedidlist","displayName":"Included Devices","description":"The group(s) that the policy will be applied to. If multiple groups are added, the policy will be applied to any media in all those groups.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control"],"categoryId":"5ed18ca1-36d1-4375-bfd6-fd67801c2659","categoryName":null,"options":null},"da5f4063d5e728be":{"id":"device_vendor_msft_laps_policies_passwordagedays","displayName":"Password Age Days ","description":"Use this policy to configure the maximum password age of the managed local administrator account.\n\nIf not specified, this setting will default to 30 days\n\nThis setting has a minimum allowed value of 1 day when backing the password to onpremises Active Directory, and 7 days when backing the password to Microsoft Entra ID..\n\nThis setting has a maximum allowed value of 365 days.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":null},"dae04d376a3d5ef4":{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}_isselected","displayName":"Is Selected","description":"Indicates whether this Slot is selected or not.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/MultiSIM-csp/"],"categoryId":"83fb8ae9-dfc0-4ff8-8a98-3a04f0edd919","categoryName":"Multi SIM","options":[{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}_isselected_false","displayName":"Not selected","description":"Not selected","helpText":null},{"id":"device_vendor_msft_multisim_{modemid}_slots_{slotid}_isselected_true","displayName":"Selected","description":"Selected","helpText":null}]},"da00ac77dfa5efec":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_driverinstall_classes_allowuser_driverinstall_classes_allowuser_list","displayName":"Allow Users to install driver packages for these classes:","description":"","helpText":"","infoUrls":[],"categoryId":"1943deba-33f7-4c3d-98c8-6b5319ec98ab","categoryName":"Driver Installation","options":null},"daf8082b471e7558":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ndncsitecoverage_netlogon_ndncsitecoveragelabel","displayName":"Sites:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"da58514f9f44d57a":{"id":"device_vendor_msft_policy_config_admx_printing_applicationdriverisolation","displayName":"Isolate print drivers from applications","description":"Determines if print driver components are isolated from applications instead of normally loading them into applications. Isolating print drivers greatly reduces the risk of a print driver failure causing an application crash.\r\n\r\nNot all applications support driver isolation. By default, Microsoft Excel 2007, Excel 2010, Word 2007, Word 2010 and certain other applications are configured to support it. Other applications may also be capable of isolating print drivers, depending on whether they are configured for it.\r\n\r\nIf you enable or do not configure this policy setting, then applications that are configured to support driver isolation will be isolated.\r\n\r\nIf you disable this policy setting, then print drivers will be loaded within all associated application processes.\r\n\r\nNotes:\r\n-This policy setting applies only to applications opted into isolation.\r\n-This policy setting applies only to print drivers loaded by applications. Print drivers loaded by the print spooler are not affected.\r\n-This policy setting is only checked once during the lifetime of a process. After changing the policy, a running application must be relaunched before settings take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-applicationdriverisolation"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_applicationdriverisolation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_applicationdriverisolation_1","displayName":"Enabled","description":null,"helpText":null}]},"daca37529aa6836a":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_security_layer_policy","displayName":"Require use of specific security layer for remote (RDP) connections","description":"This policy setting specifies whether to require the use of a specific security layer to secure communications between clients and RD Session Host servers during Remote Desktop Protocol (RDP) connections.\r\n\r\nIf you enable this policy setting, all communications between clients and RD Session Host servers during remote connections must use the security method specified in this setting. The following security methods are available:\r\n\r\n* Negotiate: The Negotiate method enforces the most secure method that is supported by the client. If Transport Layer Security (TLS) version 1.0 is supported, it is used to authenticate the RD Session Host server. If TLS is not supported, native Remote Desktop Protocol (RDP) encryption is used to secure communications, but the RD Session Host server is not authenticated. Native RDP encryption (as opposed to SSL encryption) is not recommended.\r\n\r\n* RDP: The RDP method uses native RDP encryption to secure communications between the client and RD Session Host server. If you select this setting, the RD Session Host server is not authenticated. Native RDP encryption (as opposed to SSL encryption) is not recommended.\r\n\r\n* SSL (TLS 1.0): The SSL method requires the use of TLS 1.0 to authenticate the RD Session Host server. If TLS is not supported, the connection fails. This is the recommended setting for this policy.\r\n\r\nIf you disable or do not configure this policy setting, the security method to be used for remote connections to RD Session Host servers is not specified at the Group Policy level.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-security-layer-policy"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_security_layer_policy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_security_layer_policy_1","displayName":"Enabled","description":null,"helpText":null}]},"dab42d9e895b77e2":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint","displayName":"Microsoft PowerPoint 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft PowerPoint 2013.\r\nBy default, the user settings of Microsoft PowerPoint 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013powerpoint"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},"da3f0009c95304dd":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-trustedlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"da495ae0e056baca":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_trustappswithgoodreputation","displayName":"Trust apps with good reputation","description":"When enabled, applications with known good reputation as defined by the Microsoft's Intelligent Security Graph (ISG) are white listed.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_trustappswithgoodreputation_disabled","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_trustappswithgoodreputation_enabled","displayName":"Enabled","description":null,"helpText":null}]},"da2def72028eaab5":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_refresh_interval_prompt","displayName":"User Publishing Refresh Interval","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"daca404d7a3c17a6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport","displayName":"CORS non-wildcard request headers support","description":"Configures support of CORS non-wildcard request headers.\r\n\r\nGoogle Chrome version 97 introduces support for CORS non-wildcard request headers. When scripts make a cross-origin network request via fetch() and XMLHttpRequest with a script-added Authorization header, the header must be explicitly allowed by the Access-Control-Allow-Headers header in the CORS preflight response. \"Explicitly\" here means that the wild card symbol \"*\" doesn't cover the Authorization header. See https://www.chromest atus.com/feature/5768642492891136 for more detail.\r\n\r\nIf this policy is not set, or set to True, Google Chrome will support the CORS non-wildcard request headers and behave as described above.\r\n\r\nWhen this policy is set to False, chrome will allow the wildcard symbol (\"*\") in the Access-Control-Allow-Headers header in the CORS preflight response to cover the Authorization header.\r\n\r\nThis Enterprise policy is temporary; it's intended to be removed after Google Chrome version 103.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport_1","displayName":"Enabled","description":null,"helpText":null}]},"da40b3d232fd04c6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"da307ed1b9127516":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled","displayName":"Allow download deep scanning for Safe Browsing-enabled users","description":"When this policy is enabled or left unset, Google Chrome can send suspicious downloads from Safe Browsing-enabled users to Google to scan for malware, or prompt users to provide a password for encrypted archives.\r\nWhen this policy is disabled, this scanning will not be performed.\r\nThis policy does not impact download content analysis configured by Chrome Enterprise Connectors.","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"da5a1a1f8ddad48e":{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope","displayName":"[Deprecated] Config Device Health Monitoring Scope","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which types of events are monitored.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringscope"],"categoryId":"55c888df-44ff-49d1-808e-ad9cb8429aff","categoryName":"Device Health Monitoring","options":null},"dadc6106aa7143c7":{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordenabled","displayName":"Device Password Enabled","description":"Specifies whether device lock is enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#devicepasswordenabled"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":[{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordenabled_0","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordenabled_1","displayName":"Disabled","description":"Disabled","helpText":null}]},"da2e7688dc797065":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"da95842b3be4abd5":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'Block dangerous downloads' (1) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings.\r\n\r\nSet 'Block potentially dangerous downloads' (2) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous downloads.\r\n\r\nSet 'Block all downloads' (3) to block all downloads.\r\n\r\nIf you don't configure this policy or set the 'No special restrictions' (0) option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\n* 0 = No special restrictions\r\n\r\n* 1 = Block dangerous downloads\r\n\r\n* 2 = Block potentially dangerous downloads\r\n\r\n* 3 = Block all downloads","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"da39bd88c35db328":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block potentially dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null}]},"da839c0470735877":{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled","displayName":"Enable IPv6 reachability check override","description":"This policy enables an override of the IPv6 reachability check. When overridden, the\r\nsystem will always query AAAA records when resolving host names. It applies to\r\nall users and interfaces on the device.\r\n\r\nIf you enable this policy, the IPv6 reachability check will be overridden.\r\n\r\nIf you disable or don't configure this policy, the IPv6 reachability check will not be overridden.\r\nThe system only queries AAAA records when it is reachable to a global IPv6 host.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"da78d643a45be68c":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_allowbrowsingwithcopilot_recommended","displayName":"Controls the availability of browsing with Copilot in Microsoft Edge.","description":"When browsing with Copilot is enabled, users can explicitly invoke it for a query. It isn't invoked automatically.\r\n\r\nBrowsing with Copilot is available only on domains specified in the 'BrowsingWithCopilotAllowList' (Browsing with Copilot Allowed URLs) policy and is blocked on domains specified in the 'BrowsingWithCopilotBlockList' (Browsing with Copilot Blocked URLs) policy. If no domains are configured in the allow list, browsing with Copilot is effectively disabled.\r\n\r\nThis feature is available only to users with an active Microsoft 365 Copilot subscription.\r\n\r\nFor more information about configuring browsing with Copilot, see https://go.microsoft.com/fwlink/?linkid=2346300.\r\n\r\nIf you enable this policy, browsing with Copilot is turned on for all users who receive the policy, and users can't turn it off.\r\n\r\nIf you disable this policy, browsing with Copilot is turned off for all users who receive the policy, and users can't turn it on.\r\n\r\nIf you don't configure this policy, browsing with Copilot is off by default, and users can turn it on.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_allowbrowsingwithcopilot_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge_recommended_allowbrowsingwithcopilot_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"dad150e8c7f640c4":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended","displayName":"Configure Microsoft Defender SmartScreen to block potentially unwanted apps","description":"This policy setting lets you configure whether to turn on blocking for potentially unwanted apps with Microsoft Defender SmartScreen. Potentially unwanted app blocking with Microsoft Defender SmartScreen provides warning messages to help protect users from adware, coin miners, bundleware, and other low-reputation apps that are hosted by websites. Potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off by default.\r\n\r\nIf you enable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use potentially unwanted app blocking with Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"da36c210d67dc34c":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb","displayName":"Set limit on megabytes of memory a single Microsoft Edge instance can use.","description":"Configures the amount of memory that a single Microsoft Edge instance can use before tabs start getting discarded to save memory. The memory used by the tab will be freed and the tab will have to be reloaded when switched to.\r\n\r\nIf you enable this policy, the browser will start to discard tabs to save memory once the limitation is exceeded. However, there is no guarantee that the browser is always running under the limit. Any value under 1024 will be rounded up to 1024.\r\n\r\nIf you don't set this policy, the browser will only attempt to save memory when it has detected that the amount of physical memory on its machine is low.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_1","displayName":"Enabled","description":null,"helpText":null}]},"daf5e1733ce6ad35":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting","displayName":"Default sensors setting","description":"Set whether websites can access and use sensors such as motion and light sensors. You can completely block or allow websites to get access to sensors.\r\n\r\nSetting the policy to 1 lets websites access and use sensors. Setting the policy to 2 denies access to sensors.\r\n\r\nYou can override this policy for specific URL patterns by using the 'SensorsAllowedForUrls' (Allow access to sensors on specific sites) and 'SensorsBlockedForUrls' (Block access to sensors on specific sites) policies.\r\n\r\nIf you don't configure this policy, websites can access and use sensors, and users can change this setting. This is the global default for 'SensorsAllowedForUrls' and 'SensorsBlockedForUrls'.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowSensors (1) = Allow sites to access sensors\r\n\r\n* BlockSensors (2) = Do not allow any site to access sensors\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"da00dd677ab1a84f":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction","displayName":"Enable or disable the User-Agent Reduction","description":"The User-Agent HTTP request header is scheduled to be reduced. To facilitate testing and compatibility, this policy can enable the reduction feature for all websites, or disable the ability for origin trials, or field trials to enable the feature.\r\n\r\nIf you don't configure this policy or set it to Default, User-Agent will be controlled by experimentation.\r\n\r\nSet this policy to 'ForceEnabled' to force the reduced version of the User-Agent request header.\r\n\r\nSet this policy to 'ForceDisabled' to force the full version of the User-Agent request header.\r\n\r\nTo learn more about the User-Agent string, read here:\r\n\r\nhttps://docs.microsoft.com/en-us/microsoft-edge/web-platform/user-agent-guidance.\r\n\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = User-Agent reduction will be controllable via Experimentation\r\n\r\n* ForceDisabled (1) = User-Agent reduction diabled, and not enabled by Experimentation\r\n\r\n* ForceEnabled (2) = User-Agent reduction will be enabled for all origins\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_1","displayName":"Enabled","description":null,"helpText":null}]},"dad1d0816353bac5":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_excelexe113","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_excelexe113_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_excelexe113_1","displayName":"True","description":null,"helpText":null}]},"dad94d186177146d":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_spdesignexe177","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_spdesignexe177_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_spdesignexe177_1","displayName":"True","description":null,"helpText":null}]},"da0e9d4920d079f0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mspubexe2","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mspubexe2_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mspubexe2_1","displayName":"True","description":null,"helpText":null}]},"dae5251ca587082b":{"id":"device_vendor_msft_policy_config_start_disableeditingquicksettings","displayName":"Disable Editing Quick Settings","description":"Allows admin to disable editing Quick Settings, such as by accessing the 'Edit quick settings' context through right-clicking on Quick Settings buttons.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#disableeditingquicksettings"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_disableeditingquicksettings_0","displayName":"Enable editing Quick Settings.","description":"Enable editing Quick Settings.","helpText":null},{"id":"device_vendor_msft_policy_config_start_disableeditingquicksettings_1","displayName":"Disable editing Quick Settings.","description":"Disable editing Quick Settings.","helpText":null}]},"da78772d811250a6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb","displayName":"Cipher Feedback (CFB)","description":null,"helpText":null}]},"dad5447aa5d22744":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85","displayName":"Disable commands (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"categoryId":"dba1a547-e288-45ac-8553-27a3b564699e","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85_1","displayName":"Enabled","description":null,"helpText":null}]},"da9969b8e3dbee83":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensaverissecure","displayName":"Password protect the screen saver (User)","description":"Determines whether screen savers used on the computer are password protected.\r\n\r\nIf you enable this setting, all screen savers are password protected. If you disable this setting, password protection cannot be set on any screen saver.\r\n\r\nThis setting also disables the \"Password protected\" checkbox on the Screen Saver dialog in the Personalization or Display Control Panel, preventing users from changing the password protection setting.\r\n\r\nIf you do not configure this setting, users can choose whether or not to set password protection on each screen saver.\r\n\r\nTo ensure that a computer will be password protected, enable the \"Enable Screen Saver\" setting and specify a timeout via the \"Screen Saver timeout\" setting.\r\n\r\nNote: To remove the Screen Saver dialog, use the \"Prevent changing Screen Saver\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-screensaverissecure"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensaverissecure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensaverissecure_1","displayName":"Enabled","description":null,"helpText":null}]},"da140b73224b7579":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_dwp_nohtmlpaper","displayName":"Allow only bitmapped wallpaper (User)","description":"Permits only bitmap images for wallpaper. This setting limits the desktop background (\"wallpaper\") to bitmap (.bmp) files. If users select files with other image formats, such as JPEG, GIF, PNG, or HTML, through the Browse button on the Desktop tab, the wallpaper does not load. Files that are autoconverted to a .bmp format, such as JPEG, GIF, and PNG, can be set as Wallpaper by right-clicking the image and selecting \"Set as Wallpaper\".\r\n\r\nAlso, see the \"Desktop Wallpaper\" and the \"Prevent changing wallpaper\" (in User Configuration\\Administrative Templates\\Control Panel\\Display) settings.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-dwp-nohtmlpaper"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_dwp_nohtmlpaper_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_dwp_nohtmlpaper_1","displayName":"Enabled","description":null,"helpText":null}]},"da82244d6eebcd09":{"id":"user_vendor_msft_policy_config_admx_globalization_hidelanguageselection","displayName":"Hide the select language group options (User)","description":"This policy setting removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options control panel.\r\n\r\nThis policy setting is used only to simplify the Regional Options control panel.\r\n\r\nIf you enable this policy setting, the user does not see the option for changing the UI language. This does not prevent the user or an application from changing the UI language programmatically.\r\n\r\nIf you disable or do not configure this policy setting, the user sees the option for changing the UI language.\r\n\r\nNote: Even if a user can see the option to change the UI language, other policy settings can prevent them from changing their UI language.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hidelanguageselection"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hidelanguageselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hidelanguageselection_1","displayName":"Enabled","description":null,"helpText":null}]},"da5a692febb53b56":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_raschangeproperties","displayName":"Prohibit access to properties of components of a remote access connection (User)","description":"Determines whether users can view and change the properties of components used by a private or all-user remote access connection.\r\n\r\nThis setting determines whether the Properties button for components used by a private or all-user remote access connection is enabled.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties button is disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Properties button is enabled for all users.\r\n\r\nThe Networking tab of the Remote Access Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.\r\n\r\nNote: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.\r\n\r\nNote: When the \"Ability to change properties of an all user remote access connection\" or \"Prohibit changing properties of a private remote access connection\" settings are set to deny access to the Remote Access Connection Properties dialog box, the Properties button for remote access connection components is blocked.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-raschangeproperties"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_raschangeproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_raschangeproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"dac9596dc86862d6":{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown","displayName":"Choose one of the following actions (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_0","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_3","displayName":"Collapse","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_2","displayName":"Collapse and disable setting","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_1","displayName":"Remove and disable setting","description":null,"helpText":null}]},"daf0ccabd77f216a":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchfilesinstartmenu","displayName":"Do not search for files (User)","description":"If you enable this policy setting the Start menu search box will not search for files.\r\n\r\nIf you disable or do not configure this policy setting, the Start menu will search for files, unless the user chooses not to do so directly in Control Panel. If you enable this policy, a \"See more results\" / \"Search Everywhere\" link will not be shown when the user performs a search in the start menu search box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchfilesinstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchfilesinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchfilesinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"dad2b580b272659e":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit","displayName":"Active session limit : (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_432000000","displayName":"5 days","description":null,"helpText":null}]},"dab5c39eeda6c25a":{"id":"user_vendor_msft_policy_config_admx_wpn_nocallsduringquiethours","displayName":"Turn off calls during Quiet Hours (User)","description":"\r\n This policy setting blocks voice and video calls during Quiet Hours.\r\n\r\n If you enable this policy setting, voice and video calls will be blocked during the designated Quiet Hours time window each day, and users will not be able to customize any other Quiet Hours settings.\r\n\r\n If you disable this policy setting, voice and video calls will be allowed during Quiet Hours, and users will not be able to customize this or any other Quiet Hours settings.\r\n\r\n If you do not configure this policy setting, voice and video calls will be allowed during Quiet Hours by default. Adminstrators and users will be able to modify this setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-nocallsduringquiethours"],"categoryId":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","categoryName":"Notifications","options":[{"id":"user_vendor_msft_policy_config_admx_wpn_nocallsduringquiethours_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_nocallsduringquiethours_1","displayName":"Enabled","description":null,"helpText":null}]},"dab384129130d402":{"id":"user_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary","displayName":"Allow Configuration Update For Books Library (User)","description":"This policy setting lets you decide whether Microsoft Edge can automatically update the configuration data for the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowconfigurationupdateforbookslibrary"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary_1","displayName":"Allow","description":"Allowed. Microsoft Edge updates the configuration data for the Books Library automatically.","helpText":null}]},"da82b406a0e29bd3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed","displayName":"Enable additional protections for users enrolled in the Advanced Protection program (User)","description":"This policy controls whether users enrolled in the Advanced Protection program receive extra protections. Some of these features may involve the sharing of data with Google (for example, Advanced Protection users will be able to send their downloads to Google for malware scanning). If set to True or not set, enrolled users will receive extra protections. If set to False, Advanced Protection users will receive only the standard consumer features.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"da2984d9ba17b49f":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_proxyserver","displayName":"Address or URL of proxy server (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"daba080aefae59d8":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_javascriptoptimizerallowedforsitesdesc","displayName":"Allow JavaScript optimization on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"da69a74f23fdd60b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166_l_enterakeyandmodifiertodisable","displayName":"Enter a key and modifier to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3b7e16e7-171f-4169-8904-c8483b06700d","categoryName":"Custom","options":null},"daed9f8215843abc":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"da5896a8d6efd92c":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets","displayName":"Web pages and Excel 2003 XML spreadsheets (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_1","displayName":"Enabled","description":null,"helpText":null}]},"dafabcad433ce2ec":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"da60aa66630454b8":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript","displayName":"Allow cut, copy or paste operations from the clipboard via script (User)","description":"This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region.\n\nIf you enable this policy setting, a script can perform a clipboard operation.\n\nIf you select Prompt in the drop-down box, users are queried as to whether to perform clipboard operations.\n\nIf you disable this policy setting, a script cannot perform a clipboard operation.\n\nIf you do not configure this policy setting, a script cannot perform a clipboard operation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowcopypasteviascript"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_1","displayName":"Enabled","description":null,"helpText":null}]},"da3f21cd4c67e26b":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"da9ae5da8137e0d2":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"daa503f4ad3724af":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"da6a6bbb88391e91":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting","displayName":"Control use of the Serial API (User)","description":"\r\nSet whether websites can access serial ports. You can completely block access or ask the user each time a website wants to get access to a serial port.\r\n\r\nSetting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\r\n\r\nYou can override this policy for specific URL patterns by using the 'SerialAskForUrls' (Allow the Serial API on specific sites) and 'SerialBlockedForUrls' (Block the Serial API on specific sites) policies.\r\n\r\nIf you don't configure this policy, by default, websites can ask users whether they can access a serial port, and users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockSerial (2) = Do not allow any site to request access to serial ports via the Serial API\r\n\r\n* AskSerial (3) = Allow sites to ask for user permission to access a serial port\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"da76047d57ca58cd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastservicecreatesharednotes7","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastservicecreatesharednotes7_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice07_l_broadcastservicecreatesharednotes7_1","displayName":"True","description":null,"helpText":null}]},"dad6676d88e8a3ea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiinfopath","displayName":"Disallow in InfoPath (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiinfopath_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiinfopath_1","displayName":"True","description":null,"helpText":null}]},"da9ac954082f3ae4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm","displayName":"Configure legacy hashing algorithm (User)","description":"This policy setting allows you to configure whether Office displays a digital signature as legacy when it contains specific hash algorithms.\r\n\r\nIf you enable this policy setting, you can specify the weakest hash algorithm that Office treats as legacy. You can specify any of the following algorithms:\r\n- MD5\r\n- SHA1\r\n- SHA256\r\n- SHA384\r\n\r\nIf you don’t configure this policy setting, Office treats digital signatures containing SHA1 or better as valid.\r\n\r\nFor example, if you set SHA256 as the legacy hashing algorithm, Office treats SHA384 signatures as valid.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyhashingalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"dae8cfca3d0fb0d4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc19_l_pathcolon310","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"dad1e80dc39c84c8":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffclipboardaccessinapplicationguard","displayName":"Don't allow copy and paste from Office documents opened in Application Guard. (User)","description":"This policy setting allows you to control whether users can copy and paste content from Office to and from documents opened in Application Guard.\r\nNote: Application Guard only allows copying text and images and doesn’t allow copying of rich content.\r\n\r\nIf you enable this policy setting, users can't copy and paste content to and from documents opened in Application Guard to other locations outside Application Guard.\r\n\r\nIf you disable or don't configure this policy setting, users can copy and paste content to and from documents opened in Application Guard to other locations outside Application Guard.\r\n\r\nNote: This policy setting only applies to Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffclipboardaccessinapplicationguard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffclipboardaccessinapplicationguard_1","displayName":"Enabled","description":null,"helpText":null}]},"daf5c55bcc86b40b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeuseissuerserialnumber","displayName":"Use UserIssuerSerialNumber (User)","description":"This policy setting determines whether Outlook uses IssuerSerialNumber as the SignerIdentifier, which enables third-party email client software applications to read encrypted Outlook email messages. For more information about Cryptographic Message Syntax, refer to the RFC 5652 specification.\r\n\r\nIf you enable or do not configure this policy setting, Outlook uses the IssuerSerialNumber as the SignerIdentifier.\r\n\r\nIf you disable this policy setting, Outlook uses SubjectKeyIdentifier for the SignerIdentifier, which might prevent third-party email client software applications from reading encrypted Outlook email messages.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeuseissuerserialnumber_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_smimeuseissuerserialnumber_1","displayName":"Enabled","description":null,"helpText":null}]},"da34dc4f0a385bb2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_v2_l_securitylevel","displayName":"Security Level (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_v2_l_securitylevel_2","displayName":"Always warn","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_v2_l_securitylevel_4","displayName":"Never warn, disable all","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_v2_l_securitylevel_3","displayName":"Warn for signed, disable unsigned","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_v2_l_securitylevel_1","displayName":"No security check","description":null,"helpText":null}]},"da3ad3be2107faad":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders39","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders39_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders39_1","displayName":"True","description":null,"helpText":null}]},"da44bf3e215dd5fb":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat","displayName":"Date Format (User)","description":"Specifies the format for displaying dates. Some information, such as time formats and the date separator, is set through the Control Panel.\r\n \r\nIf you enable this setting, dates are displayed in the format you set.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","categoryName":"View","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_pjdateformat_1","displayName":"Enabled","description":null,"helpText":null}]},"dac162f1c652e885":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc10_l_datecolon45","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"dad2a08542daf8fd":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},"da7b59d60e89859a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_preventshowingnewscreenonlaunch","displayName":"Prevent showing New screen on launch (User)","description":"This policy setting allows you to prevent the New screen to be shown on launch of Visio.\r\n\r\nIf you enable this policy setting, the New screen will not be shown on launch.\r\n\r\nIf you disable or do not configure this policy setting, the New screen, including a catalog of templates, is shown when you open Visio.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_preventshowingnewscreenonlaunch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_preventshowingnewscreenonlaunch_1","displayName":"Enabled","description":null,"helpText":null}]},"daa9d3c0f4e70731":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_enablemicrosoftvisualbasicforapplicationsproject","displayName":"Enable Microsoft Visual Basic for Applications project creation (User)","description":"Enables creations of VBA projects when you open (or create) a document that does not already contain a project. If you clear this check box, you will not be able to create a macro in a document that does not already contain a project.","helpText":"","infoUrls":[],"categoryId":"253fda23-118b-48c7-b24a-27b8c93df41a","categoryName":"Macro Security","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_enablemicrosoftvisualbasicforapplicationsproject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_enablemicrosoftvisualbasicforapplicationsproject_1","displayName":"Enabled","description":null,"helpText":null}]},"da3d92deaaa1a6b4":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Disable all application add-ins (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n \r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users, except if application add-ins are required to be signed by Trusted Publishers.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"da097dea613c3955":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork","displayName":"Turn off Trusted Documents on the network (User)","description":"This policy setting allows you to turn off the trusted documents feature for documents opened from the network.\r\n\r\nIf you enable this policy setting, users will always see security notifications for active content such as macros, ActiveX controls, data connections, etc. for documents opened from the network.\r\n\r\nIf you disable or do not configure this policy setting, the trusted documents feature allows users to always allow active content in documents such as macros, ActiveX controls, data connections, etc. so that users are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/db.json b/public/intune-definitions/db.json new file mode 100644 index 000000000000..bf7be79f8b9b --- /dev/null +++ b/public/intune-definitions/db.json @@ -0,0 +1 @@ +{"db149c1c7c0d943e":{"id":"com.apple.applicationaccess_allowfindmyfriendsmodification","displayName":"Allow Find My Friends Modification","description":"If false, disables changes to Find My Friends. Requires a supervised device. Available in iOS 7 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfindmyfriendsmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfindmyfriendsmodification_true","displayName":"True","description":null,"helpText":null}]},"db5bf2cc0d4e9b20":{"id":"com.apple.applicationaccess_forceairprinttrustedtlsrequirement","displayName":"Force AirPrint Trusted TLS Requirement","description":"If true, requires trusted certificates for TLS printing communication. Requires a supervised device. Available in iOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceairprinttrustedtlsrequirement_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceairprinttrustedtlsrequirement_true","displayName":"True","description":null,"helpText":null}]},"dbccaa7bd66b27f0":{"id":"com.apple.cellular_com.apple.cellular","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"dba10ff907ed017b":{"id":"com.apple.extensiblesso_extensiondata_pwreqcomplexity_kerberos","displayName":"Password Req Complexity","description":"If true, passwords must meet Active Directory's definition of \"complex\". Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_pwreqcomplexity_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_pwreqcomplexity_kerberos_true","displayName":"True","description":null,"helpText":null}]},"db6461bf83d9af41":{"id":"com.apple.managedclient.preferences_addressbartrendingsuggestenabled","displayName":"Enable Microsoft Bing trending suggestions in the address bar","description":"This policy controls whether Microsoft Bing trending suggestions appear in the address bar’s suggestion dropdown when users click the address bar while on a New Tab Page.\n\nIf this policy is enabled or not configured, Microsoft Bing trending suggestions will appear in the address bar suggestion dropdown.\n\nIf this policy is disabled, Microsoft Edge will not display Microsoft Bing trending suggestions when users click the address bar.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#addressbartrendingsuggestenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_addressbartrendingsuggestenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_addressbartrendingsuggestenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"db78401022080a5d":{"id":"com.apple.managedclient.preferences_allowcrossoriginauthprompt","displayName":"Allow cross-origin HTTP Basic Auth prompts","description":"Controls whether third-party sub-content on a page can open an HTTP Basic Auth dialog box.\n\nTypically, this is disabled as a phishing defense. If you don't configure this policy, it's disabled and third-party sub-content can't open a HTTP Basic Auth dialog box.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowcrossoriginauthprompt"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_allowcrossoriginauthprompt_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowcrossoriginauthprompt_true","displayName":"Allowed","description":null,"helpText":null}]},"db528e783d0e13af":{"id":"com.apple.managedclient.preferences_commandlineflagsecuritywarningsenabled","displayName":"Enable security warnings for command-line flags","description":"If disabled, this policy prevents security warnings from appearing when Microsoft Edge is launched with potentially dangerous command-line flags.\n\nIf enabled or unset, security warnings are displayed when these command-line flags are used to launch Microsoft Edge.\n\nFor example, the --disable-gpu-sandbox flag generates this warning: You're using an unsupported command-line flag: --disable-gpu-sandbox. This poses stability and security risks.\n\nOn Windows, this policy is only available on instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro (or Enterprise) instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#commandlineflagsecuritywarningsenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_commandlineflagsecuritywarningsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_commandlineflagsecuritywarningsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"dba96de4b199b5b0":{"id":"com.apple.managedclient.preferences_inappsupportenabled","displayName":"In-app support Enabled","description":"Microsoft Edge uses the in-app support feature (enabled by default) to allow users to contact our support agents directly from the browser. Also, by default, users can't disable (turn off) the in-app support feature.\n\nIf you enable this policy or don't configure it, users can invoke in-app support.\n\nIf you disable this policy, users can't invoke in-app support.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#inappsupportenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_inappsupportenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_inappsupportenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"dbc7c96f4961163c":{"id":"com.apple.managedclient.preferences_offlinedefinitionupdate","displayName":"Enable offline security intelligence updates","description":"Enables or disables offline security intelligence updates feature. When this feature is enabled Defender will use a local mirror server to update the signatures.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/mac-support-offline-security-intelligence-update"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_offlinedefinitionupdate_0","displayName":"enabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_offlinedefinitionupdate_1","displayName":"disabled","description":null,"helpText":null}]},"db09d9befaa46f31":{"id":"com.apple.managedclient.preferences_proxysettings_proxyserver","displayName":"Proxy Server","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"dbdf4a6ad8d875e5":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"db86090b11468fdb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads","description":"Controls whether ads are blocked on sites with intrusive ads.\n\nPolicy options mapping:\n\n* AllowAds (1) = Allow ads on all sites\n\n* BlockAds (2) = Block ads on sites with intrusive ads. (Default value)\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.adssettingforintrusiveadssites_allowads","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.adssettingforintrusiveadssites_blockads","displayName":"Block ads on sites with intrusive ads. (Default value)","description":null,"helpText":null}]},"dbc7ab559c854740":{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_recommended","displayName":"Clear browsing data when Microsoft Edge closes (users can override)","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\n\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured \"DefaultCookiesSetting\"\n\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\n\nIf you enable this policy, don't configure the \"AllowDeletingBrowserHistory\" or the \"ClearCachedImagesAndFilesOnExit\" policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured \"AllowDeletingBrowserHistory\" or \"ClearCachedImagesAndFilesOnExit\".\n\nTo exclude cookies from being deleted on exit, configure the \"SaveCookiesOnExit\" policy.\nTo exclude passwords from being deleted on exit, configure the \"PasswordDeleteOnBrowserCloseEnabled\" policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"db39132c289a3e1e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_recommended","displayName":"Enable saving passwords to the password manager (users can override)","description":"Enable Microsoft Edge to save user passwords. The next time a user visits a site with a saved password, Microsoft Edge will enter the password automatically.\n\nIf you enable or don't configure this policy, users can save and add their passwords in Microsoft Edge.\n\nIf you disable this policy, users can't save and add new passwords, but they can still use previously saved passwords.","helpText":null,"infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"db8152f1d9f19531":{"id":"com.microsoft.edge.mamedgeappconfigsettings.thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins (Obsolete)","description":"This policy lets you set a list of URL patterns that specify top-level origins for which third-party storage partitioning (partitioning of cross-origin iframe storage) should be disabled.\n\nIf this policy isn't set or a top-level origin doesn't match one of the URL patterns, then the value from \"DefaultThirdPartyStoragePartitioningSetting\" will be used.\n\nNote that the patterns you list are treated as origins, not URLs, so you shouldn't specify a path. For detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nThis feature has been removed starting in Microsoft Edge version 146. To ensure compatibility, use the requestStorageAccess method instead. For more information, see https://developer.mozilla.org/en-US/docs/Web/API/Document/requestStorageAccess.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"dbc3af70cc84e1cb":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webhidaskforurls","displayName":"Allow the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\n\nLeaving the policy unset means \"DefaultWebHidGuardSetting\" applies for all sites, if set. If not, users' personal settings apply.\n\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\n\n * \"WebHidBlockedForUrls\" (if there's a match),\n\n * \"DefaultWebHidGuardSetting\" (if set), or\n\n * Users' personal settings.\n\nURL patterns must not conflict with \"WebHidBlockedForUrls\". Neither policy takes precedence if a URL matches both patterns.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"db86b3cda35454ab":{"id":"device_vendor_msft_bitlocker_systemdrivesencryptiontype_osencryptiontypedropdown_name","displayName":"Select the encryption type:","description":"","helpText":"","infoUrls":[],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesencryptiontype_osencryptiontypedropdown_name_0","displayName":"Allow user to choose (default)","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesencryptiontype_osencryptiontypedropdown_name_1","displayName":"Full encryption","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesencryptiontype_osencryptiontypedropdown_name_2","displayName":"Used Space Only encryption","description":null,"helpText":null}]},"dbbde7bad240d099":{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentials_allowsavedcredentials_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"db88073324b5312d":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_enforce","displayName":"Enforce disk quota limit","description":"This policy setting determines whether disk quota limits are enforced and prevents users from changing the setting.\r\n\r\nIf you enable this policy setting, disk quota limits are enforced. If you disable this policy setting, disk quota limits are not enforced. When you enable or disable this policy setting, the system disables the \"Deny disk space to users exceeding quota limit\" option on the Quota tab so administrators cannot make changes while the setting is in effect.\r\n\r\nIf you do not configure this policy setting, the disk quota limit is not enforced by default, but administrators can change the setting.\r\n\r\nEnforcement is optional. When users reach an enforced disk quota limit, the system responds as though the physical space on the volume were exhausted. When users reach an unenforced limit, their status in the Quota Entries window changes, but they can continue to write to the volume as long as physical space is available.\r\n\r\nNote: This policy setting overrides user settings that enable or disable quota enforcement on their volumes.\r\n\r\nNote: To specify a disk quota limit, use the \"Default quota limit and warning level\" policy setting. Otherwise, the system uses the physical space on the volume as the quota limit.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-diskquota#admx-diskquota-dq-enforce"],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":[{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_enforce_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_enforce_1","displayName":"Enabled","description":null,"helpText":null}]},"dbd9c35630a7c007":{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxydisableserverrevocationcheck","displayName":"Disable revocation checking for the SSL certificate of KDC proxy servers","description":"This policy setting allows you to disable revocation check for the SSL certificate of the targeted KDC proxy server.\r\n\r\nIf you enable this policy setting, revocation check for the SSL certificate of the KDC proxy server is ignored by the Kerberos client. This policy setting should only be used in troubleshooting KDC proxy connections. \r\nWarning: When revocation check is ignored, the server represented by the certificate is not guaranteed valid. \r\n\r\nIf you disable or do not configure this policy setting, the Kerberos client enforces the revocation check for the SSL certificate. The connection to the KDC proxy server is not established if the revocation check fails.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-kdcproxydisableserverrevocationcheck"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxydisableserverrevocationcheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_kdcproxydisableserverrevocationcheck_1","displayName":"Enabled","description":null,"helpText":null}]},"dba639b627a060f6":{"id":"device_vendor_msft_policy_config_admx_power_reservebatterynotificationlevel","displayName":"Reserve battery notification level","description":"This policy setting specifies the percentage of battery capacity remaining that triggers the reserve power mode.\r\n\r\nIf you enable this policy setting, you must enter a numeric value (percentage) to set the battery level that triggers the reserve power notification.\r\n\r\nIf you disable or do not configure this policy setting, users can see and change this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-reservebatterynotificationlevel"],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_reservebatterynotificationlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_reservebatterynotificationlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"dbda4f0ae7a44f26":{"id":"device_vendor_msft_policy_config_admx_smartcard_integratedunblockpromptstring","displayName":"Display string when smart card is blocked","description":"This policy setting allows you to manage the displayed message when a smart card is blocked.\r\n\r\nIf you enable this policy setting, the specified message will be displayed to the user when the smart card is blocked. Note: The following policy setting must be enabled - Allow Integrated Unblock screen to be displayed at the time of logon.\r\n\r\nIf you disable or do not configure this policy setting, the default message will be displayed to the user when the smart card is blocked, if the integrated unblock feature is enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-integratedunblockpromptstring"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_integratedunblockpromptstring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_integratedunblockpromptstring_1","displayName":"Enabled","description":null,"helpText":null}]},"dbe9d13b2e570628":{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown","displayName":"Choose one of the following actions","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_3","displayName":"Collapse","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_2","displayName":"Collapse and disable setting","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_1","displayName":"Remove and disable setting","description":null,"helpText":null}]},"db60914d1711fb35":{"id":"device_vendor_msft_policy_config_applicationmanagement_blocknonadminuserinstall","displayName":"Block Non Admin User Install","description":"Manages non-administrator users' ability to install Windows app packages. If you enable this policy, non-administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies. If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#blocknonadminuserinstall"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_blocknonadminuserinstall_0","displayName":"Block","description":"Disabled. All users will be able to initiate installation of Windows app packages.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_blocknonadminuserinstall_1","displayName":"Allow","description":"Enabled. Non-administrator users will not be able to initiate installation of Windows app packages.","helpText":null}]},"dbc85498648cc86d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled","displayName":"Allow queries to a Google time service","description":"Setting the policy to Enabled or leaving it unset means Google Chrome send occasional queries to a Google server to retrieve an accurate timestamp.\r\n\r\nSetting the policy to Disabled stops Google Chrome from sending these queries.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"db670b708d5a13d9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin","displayName":"Browser sign in settings","description":"This policy controls the sign-in behavior of the browser. It allows you to specify if the user can sign in to Google Chrome with their account and use account related services like Google Chrome Sync.\r\n\r\nIf the policy is set to \"Disable browser sign-in\" then the user cannot sign in to the browser and use account-based services. In this case browser-level features like Google Chrome Sync cannot be used and will be unavailable. On iOS, if the user was signed in and the policy is set to \"Disabled\" they will be signed out immediately. On other platforms, they will be signed out the next time they run Google Chrome. On all platforms, their local profile data like bookmarks, passwords etc. will be preserved and still usable. The user will still be able to sign into and use Google web services like Gmail.\r\n\r\nIf the policy is set to \"Enable browser sign-in,\" then the user is allowed to sign in to the browser. On all platforms except iOS, the user is automatically signed in to the browser when signed in to Google web services like Gmail. Being signed in to the browser means the user's account information will be kept by the browser. However, it does not mean that Google Chrome Sync will be turned on by default; the user must separately opt-in to use this feature. Enabling this policy will prevent the user from turning off the setting that allows browser sign-in. To control the availability of Google Chrome Sync, use the SyncDisabled policy.\r\n\r\nIf the policy is set to \"Force browser sign-in\" the user is presented with an account selection dialog and has to choose and sign in to an account to use the browser. This ensures that for managed accounts the policies associated with the account are applied and enforced. The default value of BrowserGuestModeEnabled will be set to disabled. Note that existing unsigned profiles will be locked and inaccessible after enabling this policy. For more information, see help center article: https://support.google.com/chrome/a/answer/7572556 . This option is not supported on Linux, Android or iOS. It will fall back to \"Enable browser sign-in\" if used.\r\n\r\nIf this policy is not set then the user can decide if they want to enable browser sign-in in the Google Chrome settings and use it as they see fit.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},"db1976a04097c0e6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts.","description":"List of URL patterns. Private network requests initiated from insecure websites served by matching origins are allowed.\r\n\r\nIf unset, this policy behaves as if set to the empty list.\r\n\r\nFor origins not covered by the patterns specified here, the global default value will be used either from the InsecurePrivateNetworkRequestsAllowed policy, if it is set, or the user's personal configuration otherwise.\r\n\r\nNote that this policy only affects insecure origins, so secure origins (e.g. https://example.com) included in this list will be ignored.\r\n\r\nFor detailed information on valid URL patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dbfd4028447d7865":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist","displayName":"Websites that should never trigger a browser switch.","description":"Setting the policy controls the list of websites that will never cause a browser switch. Each item is treated as a rule. Those rules that match won't open an alternative browser. Unlike the BrowserSwitcherUrlList policy, rules apply to both directions. When the Internet Explorer® add-in is on, it also controls whether Internet Explorer® should open these URLs in Google Chrome.\r\n\r\nLeaving the policy unset adds no websites to the list.\r\n\r\nNote: Elements can also be added to this list through the BrowserSwitcherExternalGreylistUrl policy.\r\n\r\nExample value:\r\n\r\nie.com\r\n!open-in-chrome.ie.com\r\nfoobar.com/ie-only/","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_1","displayName":"Enabled","description":null,"helpText":null}]},"db2c6cef40d60220":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled","displayName":"Control Accept-Language Reduction","description":"The Accept-Language HTTP request header and the JavaScript navigator.languages getter are planned for reduction for privacy reasons.\r\nTo facilitate testing and ensure compatibility, this policy allows you to enable or disable the Accept-Language Reduction feature.\r\n\r\nIf this policy is set to enabled or left unset, Accept-Language Reduction will be applied through field trials.\r\nIf this policy is set to disabled, field trials will not be able to activate Accept-Language Reduction.\r\n\r\nFor more information about this feature, please visit: https://github.com/explainers-by-googlers/reduce-accept-language.\r\n\r\nNOTE: Only newly-started renderer processes will reflect changes to this policy while the browser is running.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"dbf6b4a659eb4937":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"db597b03593c242b":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"db2fd60341e364ad":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneinitializeandscriptactivexcontrols"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"db6ddcc2f58eb02a":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"db23f26b44f24691":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"db81c7b3d92e4744":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when:\r\n- The 'Passwords' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy ClearBrowsingDataOnExit is enabled\r\n\r\nIf you enable this policy, passwords won't be cleared when the browser closes.\r\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":"","infoUrls":[],"categoryId":"a877a2ff-f144-421f-814c-593e972a8a20","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"db15c10e8011b687":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_collectionsservicesandexportsblocklistdesc","displayName":"Block access to a specified list of services and export targets in Collections (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"db6673440511440e":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"db8ec4062df74022":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading","description":"If you set this policy to 3, websites can ask for read access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\r\n\r\nIf you don't set this policy, websites can ask for access. Users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockFileSystemRead (2) = Don't allow any site to request read access to files and directories via the File System API\r\n\r\n* AskFileSystemRead (3) = Allow sites to ask the user to grant read access to files and directories via the File System API\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"dbadf6095189105a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sharedcomputerlicensing","displayName":"Use shared computer activation","description":"\r\nThis policy setting controls whether shared computer activation is used to activate the version of Office installed on the computer. By default, shared computer activation isn’t used for activation. \r\n \r\nShared computer activation is used only for situations where multiple users share the same computer. For example, when using Remote Desktop Services (RDS). \r\n \r\nIf you enable this policy setting, shared computer activation is used to activate the version of Office installed on the computer.\r\n\r\nIf you disable or don’t configure this policy setting, shared computer activation won’t be used to activate the version of Office installed on the computer unless you’ve enabled shared computer activation by using the Office Deployment Tool or by manually editing the registry.\r\n\r\nNote: Shared computer activation is supported only with Office 365 subscription plans that include Office 365 ProPlus, Visio Pro for Office 365, or Project Online Desktop Client.\r\n ","helpText":"","infoUrls":[],"categoryId":"2e3f0407-6387-41b4-b6c2-ada4354be759","categoryName":"Licensing Settings","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sharedcomputerlicensing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sharedcomputerlicensing_1","displayName":"Enabled","description":null,"helpText":null}]},"dbf5d49581643be4":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox","displayName":"Libraries: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"dbb756abef25c13a":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist_blocktenantlistbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"dbe0f898f2c5e65d":{"id":"device_vendor_msft_policy_config_printers_configureipppagecountspolicy","displayName":"Always send job page count information for IPP printers","description":"\nDetermines whether to always send page count information for accounting purposes for printers using the Microsoft IPP Class Driver.\n\nBy default, pages are sent to the printer as soon as they are rendered and page count information is not sent to the printer unless pages must be reordered.\n\nIf you enable this setting the system will render all print job pages up front and send the printer the total page count for the print job.\n\nIf you disable this setting or do not configure it, pages are printed as soon as they are rendered and page counts are only sent when page reordering is required to process the job.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configureipppagecountspolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configureipppagecountspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configureipppagecountspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"dbc43419ab7bac01":{"id":"device_vendor_msft_policy_config_update_ignoremoupdatedownloadlimit","displayName":"Ignore MO Update Download Limit","description":"Specifies whether to ignore the MO download limit (allow unlimited downloading) over a cellular network for OS updates. If lower-level limits (for example, mobile caps) are required, those limits are controlled by external policies. WarningSetting this policy might cause devices to incur costs from MO operators.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#ignoremoupdatedownloadlimit"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_ignoremoupdatedownloadlimit_0","displayName":"Disabled","description":"Do not ignore MO download limit for OS updates.","helpText":null},{"id":"device_vendor_msft_policy_config_update_ignoremoupdatedownloadlimit_1","displayName":"Enabled","description":"Ignore MO download limit (allow unlimited downloading) for OS updates.","helpText":null}]},"db49b248cda4fc20":{"id":"device_vendor_msft_vpnconnection_servers","displayName":"Servers","description":"List of VPN servers. Exactly one needs to be marked as the default server.","helpText":"","infoUrls":[],"categoryId":"7f5517b0-3ff7-4f7e-aa4c-3d2ccbf37bdc","categoryName":"VPN Connection","options":null},"dbff26de78e88e2a":{"id":"linux_mdatp_managed_antivirusengine_threattypesettings","displayName":"Threat type settings","description":"The threatTypeSettings preference in the antivirus engine is used to control how certain threat types are handled by the product.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#threat-type-settings"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"db59a8e8ea098166":{"id":"settings_item_dataroaming","displayName":"Data Roaming","description":"A dictionary that contains data roaming settings. This setting requires the Network Information access right, and doesn't support user enrollment. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"categoryId":"0be23ead-c5f7-4ea5-9ec5-64c05d19cf5d","categoryName":"Data Roaming","options":null},"db8ff93869bbcaa8":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext","displayName":"Set parameters for CNG context (User)","description":"This policy setting allows you to specify the encryption parameters that should be used for the CNG context. \r\n\r\nIf you enable this policy setting, the parameters specified will be passed to the CNG context.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG values will be used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext_1","displayName":"Enabled","description":null,"helpText":null}]},"db575e36ecd3f822":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4","displayName":"Followed hyperlink color (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cbb98485-6a36-47b8-b450-7821e08507ac","categoryName":"Web Options - General","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_1","displayName":"Maroon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_2","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_3","displayName":"Olive","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_4","displayName":"Dark Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_5","displayName":"Violet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_6","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_7","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_8","displayName":"Silver","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_9","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_10","displayName":"Bright Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_11","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_12","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_13","displayName":"Fuchsia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_14","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_15","displayName":"White","description":null,"helpText":null}]},"dbc0d6ceed0f5e86":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgroupaccounts","displayName":"File tab | Access Options | Customize | All Commands | User and Group accounts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgroupaccounts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgroupaccounts_1","displayName":"True","description":null,"helpText":null}]},"dbfff8d8977832e4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize","displayName":"Set disk cache size in bytes (User)","description":"Setting the policy to None has Google Chrome use the default cache size for storing cached files on the disk. Users can't change it.\r\n\r\nIf you set the policy, Google Chrome uses the cache size you provide—whether or not users specify the --disk-cache-size flag. (Values below a few megabytes are rounded up.)\r\n\r\nIf not set, Google Chrome uses the default size. Users can change that setting using the --disk-cache-size flag.\r\n\r\nNote: The value specified in this policy is used as a hint to various cache subsystems in the browser. Therefore the actual total disk consumption of all caches will be higher but within the same order of magnitude as the value specified.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"dbfe9ab0d8c7070d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs. (User)","description":"Setting the policy lets you list the URL patterns that specify which sites are automatically granted permission to access a USB device with the given vendor and product IDs. Each item in the list requires both devices and urls fields for the policy to be valid. Each item in the devices field can have a vendor_id and product_id field. Omitting the vendor_id field will create a policy matching any device. Omitting the product_id field will create a policy matching any device with the given vendor ID. A policy which has a product_id field without a vendor_id field is invalid.\r\n\r\nThe USB permission model will grant the specified URL permission to access the USB device as a top-level origin. If embedded frames need to access USB devices, the 'usb' feature-policy header should be used to grant access. The URL must be valid, otherwise the policy is ignored.\r\n\r\nDeprecated: The USB permission model used to support specifying both the requesting and embedding URLs. This is deprecated and only supported for backwards compatiblity in this manner: if both a requesting and embedding URL is specified, then the embedding URL will be granted the permission as top-level origin and the requsting URL will be ignored entirely.\r\n\r\nThis policy overrides DefaultWebUsbGuardSetting, WebUsbAskForUrls, WebUsbBlockedForUrls and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the WebUSB API. To grant access to USB devices through the Web Serial API see the SerialAllowUsbDevicesForUrls policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebUsbAllowDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234,\r\n \"product_id\": 5678\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://google.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dbaec340aa9547bb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_authnegotiatedelegateallowlist","displayName":"Kerberos delegation server allowlist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":null},"db817c838fcb8d0c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (User)","description":"Restricts background graphics printing mode. Unset policy is treated as no restriction.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_1","displayName":"Enabled","description":null,"helpText":null}]},"dba7e609218e5474":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled","displayName":"Control the User-Agent Client Hints feature. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"db0cd5a72ab70090":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (User)","description":"Allows you to set whether Google Chrome\r\nwill run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\r\n\r\nDisabling JavaScript optimizations (by setting this policy's value to 2) will\r\nmean that Google Chrome may render web\r\ncontent more slowly.\r\n\r\nThis policy can be overridden for specific URL patterns using the JavaScriptOptimizerAllowedForSites and JavaScriptOptimizerBlockedForSites policies.\r\n\r\nIf this policy is left not set, JavaScript optimizations are enabled.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_1","displayName":"Enabled","description":null,"helpText":null}]},"db7cf993ce57088d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings","displayName":"Managed toolbar avatar label setting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"dbb6c4444b92a38a":{"id":"user_vendor_msft_policy_config_education_preventaddingnewprinters","displayName":"Prevent Adding New Printers (User)","description":"Boolean that specifies whether or not to prevent user to install new printers","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Education#preventaddingnewprinters"],"categoryId":"5e692f3e-1911-43b0-9192-64c2e65b7c10","categoryName":"Education","options":[{"id":"user_vendor_msft_policy_config_education_preventaddingnewprinters_0","displayName":"Disabled","description":"Allow user installation.","helpText":null},{"id":"user_vendor_msft_policy_config_education_preventaddingnewprinters_1","displayName":"Enabled","description":"Prevent user installation.","helpText":null}]},"db5bb345d4459955":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"db54350a493c13e6":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_pathcolon49","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"dba812a40a33929e":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows","displayName":"Enable dragging of content from different domains within a window (User)","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy setting or do not configure it, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"db101f9ddb83a344":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes.\n\nIf you enable this policy setting, prompting for ActiveX control installations will be blocked for Internet Explorer processes.\n\nIf you disable this policy setting, prompting for ActiveX control installations will not be blocked for Internet Explorer processes.\n\nIf you do not configure this policy setting, the user's preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictactivexinstallinternetexplorerprocesses"],"categoryId":"e6911a08-946f-4b70-99cb-2a8b92c461e0","categoryName":"Restrict ActiveX Install","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"db2d3de304bb8433":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls","displayName":"Allow multiple automatic downloads in quick succession on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are allowed to perform multiple successive automatic downloads.\r\nIf you don't configure this policy, 'DefaultAutomaticDownloadsSetting' (Default automatic downloads setting) applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\r\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dbff1ac639291e9c":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit","displayName":"Delete files downloaded as part of kiosk session when Microsoft Edge closes (User)","description":"This policy only applies to Microsoft Edge kiosk mode.\r\n\r\nIf you enable this policy, files downloaded as part of the kiosk session are deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy or don't configure it, files downloaded as part of the kiosk session are not deleted when Microsoft Edge closes.\r\n\r\nFor detailed information on configuring kiosk Mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"categoryId":"d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","categoryName":"Kiosk Mode settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"db99c6ef7d141733":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed","displayName":"Enable the Search bar (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nEnables the search bar. When enabled, users can use the search bar to search the web from their desktop or from an application. The search bar provides a search box that shows web suggestions and opens all web searches in Microsoft Edge. The search box provides search (powered by Bing) and URL suggestions. The search bar can be launched from the \"More tools\" menu or jump list in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy:\r\nThe search bar will be automatically enabled for all profiles.\r\nThe option to enable the search bar at startup will be toggled on if the 'WebWidgetIsEnabledOnStartup' (Allow the Search bar at Windows startup) policy is enabled.\r\nIf the 'WebWidgetIsEnabledOnStartup' is disabled or not configured, the option to enable the search bar at startup will be toggled off.\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge \"More tools\" menu. Users can launch the search bar from \"More tools\".\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge jump list menu. Users can launch the search bar from the Microsoft Edge jump list menu.\r\nThe search bar can be turned off by the \"Quit\" option in the System tray or by closing the search bar from the 3 dot menu. The search bar will be restarted on system reboot if auto-start is enabled.\r\n\r\n\r\nIf you disable this policy:\r\nThe search bar will be disabled for all profiles.\r\nThe option to launch the search bar from Microsoft Edge \"More tools\" menu will be disabled.\r\nThe option to launch the search bar from Microsoft Edge jump list menu will be disabled.\r\n\r\nThis policy is deprecated due to the deprecation of the Web widget's vertical layout. This policy will be made obsolete in 119 release.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"db1edff47a50890e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01","displayName":"Configure presentation service in PowerPoint and Word 2 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice01_1","displayName":"Enabled","description":null,"helpText":null}]},"db197ae4600f7f6b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxtimeout","displayName":"Set maximum web service default timeout (User)","description":"This policy setting allows you to specify the maximum timeout in milliseconds for the web service shim. This maximum value is enforced for applications that do not respect the default.\r\n\r\nIf you enable this policy setting, you may specify the maximum timeout in milliseconds for the web service shim.\r\n\r\nIf you disable or do not configure this policy setting, no maximum limit will be enforced.","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxtimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxtimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"dbd05294458a6bfa":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withawebdiscussionslink380","displayName":"With a Web discussions link (User)","description":"Defines the default message body text used in a reply to an email request for review when the reply contains a simple Web discussions link. ","helpText":"","infoUrls":[],"categoryId":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","categoryName":"Default message text for a reply...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withawebdiscussionslink380_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareply_l_withawebdiscussionslink380_1","displayName":"Enabled","description":null,"helpText":null}]},"db58ce51da3ea5d6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacework_l_workmapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"dba08311d248466a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc16_l_datecolon299","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"db0be3d9ba782121":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_l_datecolon307","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"dba4d449f6262eb8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc18_l_pathcolon306","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"db72aaed53e1b5c9":{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_saepreview","displayName":"Semi-Annual Enterprise Channel (Preview) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_saepreview_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_saepreview_1","displayName":"True","description":null,"helpText":null}]},"db1ea4b5f3c7d9c4":{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifymaxcertlengthallowedtostamp","displayName":"Maximum Size Limit for certificate in Reply to Encrypted Emails cases. (User)","description":"When replying to a digitally signed email using Outlook, Win32 saves the certificate chain of the original sender in Exchange. This allows for encrypted replies without adding the original sender to the contact list. \r\nHowever, there are cases where a sent email may not be delivered or saved in the sent items if the size of the stored certificate on the Exchange server is too large.\r\nTo avoid this issue caused by large certificate sizes of the original email sender in Win32 Outlook, the default upper limit is set at 12921 bytes. However, administrators have the option to configure a higher limit, up to a maximum of 16384 bytes.\t\r\n ","helpText":"","infoUrls":[],"categoryId":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","categoryName":"Compose Messages","options":[{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifymaxcertlengthallowedtostamp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifymaxcertlengthallowedtostamp_1","displayName":"Enabled","description":null,"helpText":null}]},"db9dedda3327fc74":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_allowcommasasaddressseparator_l_allowcommasasaddressseparator","displayName":"Allow commas as address separator (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_allowcommasasaddressseparator_l_allowcommasasaddressseparator_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_allowcommasasaddressseparator_l_allowcommasasaddressseparator_1","displayName":"True","description":null,"helpText":null}]},"db04c6fed573d4ce":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2","displayName":"Configure Outlook object model prompt when executing Save As (User)","description":"This policy setting controls what happens when an untrusted program attempts to use the Save As command to programmatically save an item. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to use the Save As command to programmatically save an item:\r\n\r\n- Prompt user. The user will be prompted to approve every access attempt. \r\n- Automatically approve. Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended. \r\n- Automatically deny. Outlook will automatically deny programmatic access requests from any program.\r\n- Prompt user based on computer security. Outlook will only prompt users when antivirus software is out of date or not running. This is the default configuration.\r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to use the Save As command, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"dbfeb4a50910cc06":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\MS Project\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\MS Project\\Addins.\r\n\r\nYou can also obtain the ProgID of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"db0698f6aed0b560":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_projectsummarytask","displayName":"Project Summary Task (User)","description":"Allows you to manage whether the project summary task is displayed. If you enable this setting, the project summary task is displayed. If this setting is disabled or not configured, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","categoryName":"View","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_projectsummarytask_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_projectsummarytask_1","displayName":"Enabled","description":null,"helpText":null}]},"db2a6d6c0283e32d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors","displayName":"Color for marking grammatical errors (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_255","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_128","displayName":"Dark Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_3368703","displayName":"Light Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_52479","displayName":"Sky Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_10079487","displayName":"Pale Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_6710937","displayName":"Blue Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_65280","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_32768","displayName":"Dark Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_13056","displayName":"Darker Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_13434828","displayName":"Light Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_3355392","displayName":"Olive Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_3381606","displayName":"Sea Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16711680","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_8388608","displayName":"Dark Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16776960","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_8421376","displayName":"Dark Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16777113","displayName":"Light Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16777215","displayName":"White","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_10040064","displayName":"Brown","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16737792","displayName":"Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16750848","displayName":"Light Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_65535","displayName":"Cyan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_32896","displayName":"Dark Cyan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_13434879","displayName":"Light Cyan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16711935","displayName":"Magenta","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_8388736","displayName":"Dark Magenta","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_13158","displayName":"Dark Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_3355545","displayName":"Indigo","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_10079232","displayName":"Lime","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_3394764","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16763904","displayName":"Gold","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_10040166","displayName":"Plum","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16751052","displayName":"Rose","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_16764057","displayName":"Tan","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_13408767","displayName":"Lavender","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_8421504","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_checkgrammarasyoutype_l_colorformarkinggrammaticalerrors_12632256","displayName":"Gray 25%","description":null,"helpText":null}]},"db54649130ce2061":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_0","displayName":"Use legacy format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_1","displayName":"Use next generation format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_2","displayName":"All files save with next generation format","description":null,"helpText":null}]},"dbf27d5407f71e77":{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablefirewall","displayName":"Enable Domain Network Firewall","description":"This value is an on/off switch for the firewall and advanced security enforcement. If this value is false, the server MUST NOT block any network traffic, regardless of other policy settings. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":" ","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablefirewall_false","displayName":"False","description":"Disable Firewall","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_enablefirewall_true","displayName":"True","description":"Enable Firewall","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/dc.json b/public/intune-definitions/dc.json new file mode 100644 index 000000000000..ce4941c034d0 --- /dev/null +++ b/public/intune-definitions/dc.json @@ -0,0 +1 @@ +{"dcf609c815a6174c":{"id":"com.apple.app.lock_app_userenabledoptions_voiceover","displayName":"Voice Over","description":"If true, allows the user to toggle Voice Over. ","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_userenabledoptions_voiceover_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_userenabledoptions_voiceover_true","displayName":"True","description":null,"helpText":null}]},"dc28df177197944f":{"id":"com.apple.extensiblesso_extensiondata_credentialbundleidacl_kerberos","displayName":"Credential Bundle ID ACL","description":"A list of bundle IDs allowed to access the ticket-granting ticket (TGT).","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"dcf722b1bfb232fb":{"id":"com.apple.extensiblesso_platformsso_enableauthorization","displayName":"Enable Authorization","description":"Enables using identity provider accounts at authorization prompts. Requires 'UseSharedDeviceKeys' is true. The account will be assigned groups using the 'AdministratorGroups', 'AdditionalGroups', or 'AuthorizationGroups'.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_enableauthorization_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_enableauthorization_true","displayName":"Enabled","description":null,"helpText":null}]},"dc49e63307a2da25":{"id":"com.apple.font_name","displayName":"Name","description":"The user-visible name for the font. This field is replaced by the actual name of the font after installation. Each payload must contain exactly one font file in trueType (.ttf) or OpenType (.otf) format. Collection formats (.ttc or .otc) are not supported.\n\nFonts are identified by their embedded PostScript names. Two fonts with the same PostScript name are considered to be the same font even if their contents differ. Installing two different fonts with the same PostScript name isn't supported, and the resulting behavior is undefined.","helpText":null,"infoUrls":[],"categoryId":"5401711f-292a-487a-be18-f99593a0477c","categoryName":"Font","options":null},"dceaed4e3064af77":{"id":"com.apple.managedclient.preferences_autoimportatfirstrun","displayName":"Automatically import another browser's data and settings at first run","description":"If you enable this policy, all supported datatypes and settings from the specified browser will be silently and automatically imported at first run. During the First Run Experience, the import section will also be skipped.\n\nThe browser data from Microsoft Edge Legacy will always be silently migrated at the first run, irrespective of the value of this policy. You can use the following values for this policy:\n\n* 0 = Automatically imports all supported datatypes and settings from the default browser\n\n* 1 = Automatically imports all supported datatypes and settings from Internet Explorer\n\n* 2 = Automatically imports all supported datatypes and settings from Google Chrome\n\n* 3 = Automatically imports all supported datatypes and settings from Safari\n\n* 4 = Disables automatic import, and the import section of the first-run experience is skipped\n\n* 5 = Automatically imports all supported datatypes and settings from Mozilla Firefox\n\nIf this policy is set to the default value (0), then the datatypes corresponding to the default browser on the managed device will be imported.\n\nIf the browser specified as the value of this policy is not present in the managed device, Microsoft Edge will simply skip the import without any notification to the user.\n\nIf you set this policy to 'DisabledAutoImport' (4), the import section of the first-run experience is skipped entirely and Microsoft Edge doesn't import browser data and settings automatically.\n\nIf this policy is set to the value of Internet Explorer (1), the following datatypes will be imported from Internet Explorer:\n1. Favorites or bookmarks\n2. Saved passwords\n3. Search engines\n4. Browsing history\n5. Home page\n\nIf this policy is set to the value of Google Chrome (2), the following datatypes will be imported from Google Chrome:\n1. Favorites\n2. Saved passwords\n3. Addresses and more\n4. Payment info\n5. Browsing history\n6. Settings\n7. Pinned and Open tabs\n8. Extensions\n9. Cookies\n\nNote: For more details on what is imported from Google Chrome, please see https://go.microsoft.com/fwlink/?linkid=2120835\n\nIf this policy is set to the value of Safari (3), user data is no longer imported into Microsoft Edge. This is due to the way Full Disk Access works on Mac.\nOn macOS Mojave and above, it's no longer possible to have automated and unattended import of Safari data into Microsoft Edge.\n\nStarting with Microsoft Edge version 83, if this policy is set to the value of Mozilla Firefox (5), the following datatypes will be imported from Mozilla Firefox:\n1. Favorites or bookmarks\n2. Saved passwords\n3. Addresses and more\n4. Browsing History\n\nIf you want to restrict specific datatypes from getting imported on the managed devices, you can use this policy with other policies such as \"ImportAutofillFormData\", \"ImportBrowserSettings\", \"ImportFavorites\", and etc.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#autoimportatfirstrun"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_autoimportatfirstrun_0","displayName":"Automatically imports all supported datatypes and settings from the default browser","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autoimportatfirstrun_1","displayName":"Automatically imports all supported datatypes and settings from Internet Explorer","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autoimportatfirstrun_2","displayName":"Automatically imports all supported datatypes and settings from Google Chrome","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autoimportatfirstrun_3","displayName":"Automatically imports all supported datatypes and settings from Safari","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autoimportatfirstrun_4","displayName":"Disables automatic import, and the import section of the first-run experience is skipped","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_autoimportatfirstrun_5","displayName":"Automatically imports all supported datatypes and settings from Mozilla Firefox","description":null,"helpText":null}]},"dc568596911a42e6":{"id":"com.apple.managedclient.preferences_exclusions_item_args_tamperprotection","displayName":"Process's arguments","description":"Command line arguments","helpText":null,"infoUrls":[],"categoryId":"5c4df3be-80b0-40cc-a8c8-0258120b0de5","categoryName":"Tamper protection","options":null},"dc14d6b99f511160":{"id":"com.apple.managedclient.preferences_insecurecontentallowedforurls","displayName":"Allow insecure content on specified sites","description":"Create a list of URL patterns to specify sites that can display insecure mixed content (that is, HTTP content on HTTPS sites).\n\nIf you don't configure this policy, blockable mixed content will be blocked and optionally blockable mixed content will be upgraded. However, users will be allowed to set exceptions to allow insecure mixed content for specific sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#insecurecontentallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"dcc97315e4779d63":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_name","displayName":"Name","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"dcabb5b95098004b":{"id":"com.apple.managedclient.preferences_preventtyposquattingpromptoverride","displayName":"Prevent bypassing Edge Website Typo Protection prompts for sites","description":"This policy setting lets you decide whether users can override the Edge Website Typo Protection warnings about potential typosquatting websites.\n\nIf you enable this setting, users can't ignore Edge Website Typo Protection warnings and they are blocked from continuing to the site.\n\nIf you disable or don't configure this setting, users can ignore Edge Website Typo Protection warnings and continue to the site.\n\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#preventtyposquattingpromptoverride"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_preventtyposquattingpromptoverride_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_preventtyposquattingpromptoverride_true","displayName":"Enabled","description":null,"helpText":null}]},"dc5db9fcd2f73216":{"id":"com.apple.managedclient.preferences_windowcaptureallowedbyorigins","displayName":"Allow Window and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Window and Tab Capture.\n\nLeaving the policy unset means that sites will not be considered for an override at this scope of Capture.\n\nThis policy is not considered if a site matches a URL pattern in any of the following policies: \"TabCaptureAllowedByOrigins\", \"SameOriginTabCaptureAllowedByOrigins\".\n\nIf a site matches a URL pattern in this policy, the following policies will not be considered: \"ScreenCaptureAllowedByOrigins\", \"ScreenCaptureAllowed\".\n\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#windowcaptureallowedbyorigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"dcb0ac8a60dd8e56":{"id":"com.apple.mobiledevice.passwordpolicy_changeatnextauth","displayName":"Change At Next Auth","description":"If true, causes a password reset to occur the next time the user tries to authenticate. If this key is set in a device profile, the setting takes effect for all users, and admin authentications may fail until the admin user password is also reset. Available in macOS 10.13 and later.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":[{"id":"com.apple.mobiledevice.passwordpolicy_changeatnextauth_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mobiledevice.passwordpolicy_changeatnextauth_true","displayName":"True","description":null,"helpText":null}]},"dcbea6de0821f518":{"id":"com.apple.subscribedcalendar.account_subcalaccounthostname","displayName":"Account Host Name","description":"The server’s address.","helpText":null,"infoUrls":[],"categoryId":"fa20bbc3-d25d-4a7f-a349-9b211d186e21","categoryName":"Subscribed Calendars","options":null},"dc91ab4b35d5ace4":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"dc74f829dceaa03b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enterprisemodesitelistmanagerallowed","displayName":"Allow access to the Enterprise Mode Site List Manager tool","description":"Allows you to set whether Enterprise Mode Site List Manager is available to users.\n\nIf you enable this policy, users can see the Enterprise Mode Site List Manager nav button on edge://compat page, navigate to the tool, and use it.\n\nIf you disable or don't configure this policy, users can't see the Enterprise Mode Site List Manager nav button and can't use it.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enterprisemodesitelistmanagerallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enterprisemodesitelistmanagerallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"dc5282d7e084e51e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecontentenabled","displayName":"Allow Microsoft content on the new tab page","description":"This policy applies for Microsoft Edge to all profile types, namely unsigned local user profiles, profiles signed in using a Microsoft Account, profiles signed in using Active Directory, and profiles signed in using Microsoft Entra ID. The Enterprise new tab page for profiles signed in using Microsoft Entra ID can be configured in the Microsoft 365 admin portal, but this policy setting takes precedence; therefore, any Microsoft 365 admin portal configurations are ignored.\n\nIf you enable or don't configure this policy, Microsoft Edge displays Microsoft content on the new tab page. The user can choose different display options for the content. These options include, but aren't limited to: \"Content off\", \"Content visible on scroll\", \"Headings only\", and \"Content visible\". Enabling this policy doesn't force content to be visible - the users can keep setting their own preferred content position.\n\nIf you disable this policy, Microsoft Edge doesn't display Microsoft content on the new tab page. The Content control in the NTP settings flyout is disabled and set to \"Content off\", and the Layout control in the NTP settings flyout is disabled and set to \"Custom\".\n\nRelated policies: \"NewTabPageAllowedBackgroundTypes\", \"NewTabPageQuickLinksEnabled\"","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecontentenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagecontentenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"dcddffc4572975d4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sandboxexternalprotocolblocked","displayName":"Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe","description":"Microsoft Edge blocks navigations to external protocols inside a sandboxed iframe.\n\nIf you enable or don't configure this policy, Microsoft Edge blocks those navigations.\n\nIf you disable this policy, Microsoft Edge doesn't block those navigations.\n\nThis policy can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Microsoft Edge version 117.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sandboxexternalprotocolblocked_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sandboxexternalprotocolblocked_true","displayName":"Enabled","description":null,"helpText":null}]},"dca19d17f82f5788":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_slowlink2","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_slowlink2_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_diskquota_cse_slowlink2_1","displayName":"True","description":null,"helpText":null}]},"dcb2354b5aebff8a":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_extensions_exclusions_extensionslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"dc5e752ca0e9b130":{"id":"device_vendor_msft_policy_config_admx_msched_randomdelaypolicy","displayName":"Automatic Maintenance Random Delay","description":"\r\n This policy setting allows you to configure Automatic Maintenance activation random delay.\r\n\r\n The maintenance random delay is the amount of time up to which Automatic Maintenance will delay starting from its Activation Boundary.\r\n\r\n If you enable this policy setting, Automatic Maintenance will delay starting from its Activation Boundary, by upto this time.\r\n\r\n If you do not configure this policy setting, 4 hour random delay will be applied to Automatic Maintenance.\r\n\r\n If you disable this policy setting, no random delay will be applied to Automatic Maintenance.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msched#admx-msched-randomdelaypolicy"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_msched_randomdelaypolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msched_randomdelaypolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"dc64752970bb97bd":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_encryptofflinefiles","displayName":"Encrypt the Offline Files cache","description":"This policy setting determines whether offline files are encrypted.\r\n\r\nOffline files are locally cached copies of files from a network share. Encrypting this cache reduces the likelihood that a user could access files from the Offline Files cache without proper permissions.\r\n\r\nIf you enable this policy setting, all files in the Offline Files cache are encrypted. This includes existing files as well as files added later. The cached copy on the local computer is affected, but the associated network copy is not. The user cannot unencrypt Offline Files through the user interface.\r\n\r\nIf you disable this policy setting, all files in the Offline Files cache are unencrypted. This includes existing files as well as files added later, even if the files were stored using NTFS encryption or BitLocker Drive Encryption while on the server. The cached copy on the local computer is affected, but the associated network copy is not. The user cannot encrypt Offline Files through the user interface.\r\n\r\nIf you do not configure this policy setting, encryption of the Offline Files cache is controlled by the user through the user interface. The current cache state is retained, and if the cache is only partially encrypted, the operation completes so that it is fully encrypted. The cache does not return to the unencrypted state. The user must be an administrator on the local computer to encrypt or decrypt the Offline Files cache.\r\n\r\nNote: By default, this cache is protected on NTFS partitions by ACLs.\r\n\r\nThis setting is applied at user logon. If this setting is changed after user logon then user logoff and logon is required for this setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-encryptofflinefiles"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_encryptofflinefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_encryptofflinefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"dc00912cc328bd02":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016","displayName":"Microsoft Office 365 Publisher 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Publisher 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Publisher 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365publisher2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016_1","displayName":"Enabled","description":null,"helpText":null}]},"dc28b7a37e670f77":{"id":"device_vendor_msft_policy_config_admx_userprofiles_slowlinktimeout","displayName":"Control slow network connection timeout for user profiles","description":"This policy setting defines a slow connection for roaming user profiles and establishes thresholds for two tests of network speed. \r\n\r\nTo determine the network performance characteristics, a connection is made to the file share storing the user's profile and 64 kilobytes of data is transfered. From that connection and data transfer, the network's latency and connection speed are determined.\r\n\r\nThis policy setting and related policy settings in this folder together define the system's response when roaming user profiles are slow to load.\r\n\r\nIf you enable this policy setting, you can change how long Windows waits for a response from the server before considering the connection to be slow.\r\n\r\nIf you disable or do not configure this policy setting, Windows considers the network connection to be slow if the server returns less than 500 kilobits of data per second or take 120 milliseconds to respond.Consider increasing this value for clients using DHCP Service-assigned addresses or for computers accessing profiles across dial-up connections.Important: If the \"Do not detect slow network connections\" policy setting is enabled, this policy setting is ignored. Also, if the \"Delete cached copies of roaming profiles\" policy setting is enabled, there is no local copy of the roaming profile to load when the system detects a slow connection.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-slowlinktimeout"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_slowlinktimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_slowlinktimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"dc48c501065d7cc7":{"id":"device_vendor_msft_policy_config_admx_winlogon_displaylastlogoninfodescription","displayName":"Display information about previous logons during user logon","description":"This policy setting controls whether or not the system displays information about previous logons and logon failures to the user.\r\n\r\nFor local user accounts and domain user accounts in domains of at least a Windows Server 2008 functional level, if you enable this setting, a message appears after the user logs on that displays the date and time of the last successful logon by that user, the date and time of the last unsuccessful logon attempted with that user name, and the number of unsuccessful logons since the last successful logon by that user. This message must be acknowledged by the user before the user is presented with the Microsoft Windows desktop.\r\n\r\nFor domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level.\r\n\r\nIf you disable or do not configure this setting, messages about the previous logon or logon failures are not displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-displaylastlogoninfodescription"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"device_vendor_msft_policy_config_admx_winlogon_displaylastlogoninfodescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_winlogon_displaylastlogoninfodescription_1","displayName":"Enabled","description":null,"helpText":null}]},"dc08a9df8d542485":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_publishing_server2_name_prompt","displayName":"Publishing Server Display Name","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"dce0e5807e4b5e15":{"id":"device_vendor_msft_policy_config_audit_system_auditsystemintegrity","displayName":"System Audit System Integrity","description":"This policy setting allows you to audit events that violate the integrity of the security subsystem, such as the following: Events that could not be written to the event log because of a problem with the auditing system. A process that uses a local procedure call (LPC) port that is not valid in an attempt to impersonate a client by replying, reading, or writing to or from a client address space. The detection of a Remote Procedure Call (RPC) that compromises system integrity. The detection of a hash value of an executable file that is not valid as determined by Code Integrity. Cryptographic operations that compromise system integrity.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#system_auditsystemintegrity"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_system_auditsystemintegrity_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsystemintegrity_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsystemintegrity_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_system_auditsystemintegrity_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"dcfe50a4aece2174":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce","displayName":"Abusive Experience Intervention Enforce","description":"If SafeBrowsingEnabled is not Disabled, then setting AbusiveExperienceInterventionEnforce to Enabled or leaving it unset prevents sites with abusive experiences from opening new windows or tabs.\r\n\r\nSetting SafeBrowsingEnabled to Disabled or AbusiveExperienceInterventionEnforce to Disabled lets sites with abusive experiences open new windows or tabs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce_1","displayName":"Enabled","description":null,"helpText":null}]},"dc432da9ea75aa12":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_autoopenallowedforurlsdesc","displayName":"URLs where AutoOpenFileTypes can apply (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"dcbbbb00a3287e50":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist","displayName":"Kerberos delegation server allowlist","description":"Setting the policy assigns servers that Google Chrome may delegate to. Separate multiple server names with commas. Wildcards, *, are allowed.\r\n\r\nLeaving the policy unset means Google Chrome won't delegate user credentials, even if a server is detected as intranet.\r\n\r\nExample value: foobar.example.com","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"dca250beb2a29ad7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir","displayName":"Set Google Chrome Frame user data directory","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},"dc0ce3f24fc53f56":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls","displayName":"Allow key generation on these sites","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dc6b1f8f989088ed":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled","displayName":"Use Skia renderer for PDF rendering","description":"Controls whether the PDF viewer in Google Chrome uses Skia renderer.\r\n\r\nWhen this policy is enabled, the PDF viewer uses Skia renderer.\r\n\r\nWhen this policy is disabled, the PDF viewer uses its current AGG renderer.\r\n\r\nWhen this policy is not set, the PDF renderer will be chosen by the browser.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"dc0c28e4b9f10ed0":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled","displayName":"Choose whether the Privacy Sandbox prompt can be shown to your users","description":"A policy to control whether your users see the Privacy Sandbox prompt.\r\nThe prompt is a user-blocking flow which informs your users of the Privacy Sandbox settings. See https://privacysandbox.com for details about Chrome’s effort to deprecate third-party cookies.\r\n\r\nIf you set this policy to Disabled, then Google Chrome won’t show the Privacy Sandbox prompt.\r\nIf you set this policy to Enabled or keep it unset, then Google Chrome determines whether the Privacy Sandbox prompt can be shown or not and then show it if possible.\r\n\r\nIf any of the following policies are set, it’s required to set this policy to Disabled:\r\nPrivacySandboxAdTopicsEnabled\r\nPrivacySandboxSiteEnabledAdsEnabled\r\nPrivacySandboxAdMeasurementEnabled","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"dc17ebd6825f1717":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed","displayName":"Restore permissive Chrome Apps behavior","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"dcbb4385bb780233":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled","displayName":"Specifies whether to apply restrictions to requests to more-private network endpoints","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"dcf3dce8c6b0c179":{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations","displayName":"Set Allowed Folder Locations","description":"A value that can represent one or more folder locations in File Explorer. If not specified, the default is access to all folder locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#setallowedfolderlocations"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_0","displayName":"Access to all folder locations.","description":"Access to all folder locations.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_13","displayName":"Documents, Pictures, Downloads","description":"Documents, Pictures, Downloads","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_15","displayName":"Desktop, Documents, Pictures, Downloads","description":"Desktop, Documents, Pictures, Downloads","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_31","displayName":"Desktop, Documents, Pictures, Downloads, Network","description":"Desktop, Documents, Pictures, Downloads, Network","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_47","displayName":"This PC, Desktop, Documents, Pictures, Downloads","description":"This PC, Desktop, Documents, Pictures, Downloads","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_63","displayName":"This PC, Desktop, Documents, Pictures, Downloads, Network","description":"This PC, Desktop, Documents, Pictures, Downloads, Network","helpText":null}]},"dccff86363e37ebf":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"dc04ab0e7c023db2":{"id":"device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode","displayName":"Reset zoom to default for HTML dialogs in Internet Explorer mode","description":"This policy setting lets admins reset zoom to default for HTML dialogs in Internet Explorer mode.\n\nIf you enable this policy, the zoom of an HTML dialog in Internet Explorer mode will not get propagated from its parent page.\n\nIf you disable, or don't configure this policy, the zoom of an HTML dialog in Internet Explorer mode will be set based on the zoom of it's parent page.\n\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2220107","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-resetzoomfordialoginiemode"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_1","displayName":"Enabled","description":null,"helpText":null}]},"dce82e1351f6c7af":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_proxybypasslist","displayName":"Comma-separated list of proxy bypass rules (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"dcb486ab0cc0e8cb":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls","displayName":"Block sites from making network requests to the local device.","description":"Specifies a list of URL patterns for which requests initiated from matching origins to loopback addresses (127.0.0.1, ::1, localhost) are blocked from issuing Local Network Access requests.\r\n\r\nIf a requesting origin matches a URL pattern specified in this policy, requests to loopback addresses are blocked.\r\n\r\nFor origins not covered by this policy, the user's personal settings and local network access restrictions apply.\r\n\r\nMultiple policies can specify origins that affect requests to the local device. If an origin matches more than one of the following policies, they are applied in the following order of precedence:\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nNote: This policy improves local network security by blocking specified public websites from accessing loopback addresses. It helps prevent unauthorized external sites from reaching local services running on the device unless explicitly permitted.\r\n\r\nFor more information about Local Network Access, see https://wicg.github.io/local-network-access/\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dc44f36dda66942b":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab","displayName":"Set the default New Tab Page feed tab to Work or Discover","description":"This policy sets the default feed tab on the New Tab Page to Work or Discover.\r\n\r\nIf you set this policy to 'Work' (0) or don't configure this policy, Microsoft Edge sets the default feed tab to Work.\r\n\r\nIf you set this policy to 'Discover' (1), Microsoft Edge sets the default feed tab to Discover.\r\n\r\nThis policy only takes effect when 'ConfigureNTPFeedTabVisibility' (Configure whether the Discover or Work feed tabs are shown on the New Tab Page.) is set to 'EnableBothWorkDiscover' (0) or is not configured. If only one tab is visible, this policy has no effect.\r\n\r\nPolicy options mapping:\r\n\r\n* NTPDefaultFeedTabWork (0) = Work\r\n\r\n* NTPDefaultFeedTabDiscover (1) = Discover\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_1","displayName":"Enabled","description":null,"helpText":null}]},"dcf0306582d58129":{"id":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests","displayName":"Allow widgets","description":"Allow widgets\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider"],"categoryId":"14fa4ad9-525c-440d-a295-a279c73f97f1","categoryName":"Widgets","options":[{"id":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"dc77cfae5520ced0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_spdesignexe51","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_spdesignexe51_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_spdesignexe51_1","displayName":"True","description":null,"helpText":null}]},"dc6b2505d06bbdd0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl","displayName":"Navigate URL","description":"Block malformed navigation","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_1","displayName":"Enabled","description":null,"helpText":null}]},"dcd0972c0deb4456":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_forceallowtheseapps","displayName":"Let Apps Access Location Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"dc159b34eea05ae6":{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode","displayName":"Configure Xbox Accessory Management Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxaccessorymanagementservicestartupmode"],"categoryId":"4f29ef5c-6ca0-4b09-893f-01755a670877","categoryName":"System Services","options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},"dcc921fd9c3a05b4":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking","displayName":"Enable watermarking","description":"This policy setting allows you to specify whether watermarking is enabled for a remote session.\r\nIf you enable this policy setting, then the RD Session Host server will instruct the client to project the watermarking QR code in a remote session. \r\n\r\nIf client is not compatible with watermarking, then connection will be denied.\r\n\r\nIf you disable or do not configure this policy setting, then the watermarking will be disabled.\r\n\r\nNote: You can choose the Device ID option for QR code embedded content only if the target device is Azure AD joined or Hybrid Azure AD joined. \r\n ","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_1","displayName":"Enabled","description":null,"helpText":null}]},"dc3a6d070a7709f9":{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability","displayName":"Touch Keyboard Split Mode Availability","description":"Specifies whether the split keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the split keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardsplitmodeavailability"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability_1","displayName":"Split keyboard is always available.","description":"Split keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability_2","displayName":"Split keyboard is always disabled.","description":"Split keyboard is always disabled.","helpText":null}]},"dc70f86f3e5da479":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_1","displayName":"Enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_2","displayName":"Enabled and delete user data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_3","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_0","displayName":"Not Configured","description":null,"helpText":null}]},"dcd5f2c63223a8cd":{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype","displayName":"Edge preview enrollment type (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_1","displayName":"Allow Opt-out","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_3","displayName":"Required","description":null,"helpText":null}]},"dc551dc07360ff89":{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown","displayName":"Default Networking Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_1","displayName":"NAT","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_3","displayName":"Mirrored","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_4","displayName":"VirtioProxy","description":null,"helpText":null}]},"dc0b5b834536e9f7":{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype","displayName":"Network Password Encryption Type (Windows Insiders only)","description":"Refers to the type of encryption that can be used for the network password. If you specify \"Encrypt with custom certificate\" you must also enter the encryption store.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"categoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","categoryName":"Remote Remediation","options":[{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype_1","displayName":"No encryption","description":"No encryption","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype_2","displayName":"Encrypt using Mdm certificate","description":"Encrypt using Mdm certificate","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype_3","displayName":"Encrypt with custom certificate","description":"Encrypt with custom certificate","helpText":null}]},"dc9baa48df3c20b6":{"id":"linux_mdatp_managed_antivirusengine_scanresultsretentiondays","displayName":"Scan results retention","description":"Specify the number of days that results are retained in the scan history on the device. Old scan results are removed from the history. Old quarantined files that are also removed from the disk.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#antivirus-scan-history-retention-in-days"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"dc9efb2de041977c":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_ignoreexclusions","displayName":"Ignore Exclusions","description":"This setting allows you to select whether to ignore exclusions set on the client while running schedule scans","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":[{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_ignoreexclusions_false","displayName":"Disable","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_ignoreexclusions_true","displayName":"Enable","description":null,"helpText":null}]},"dc0551862bf7799c":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_randomizescanstarttime","displayName":"Randomize scan start time","description":"Only applicable for daily quick scans or weekly quick/full scans. Randomize the start time of the scan by up to specified number of hours. For example, if a scan is scheduled for 2 p.m and randomizeScanStartTime is set to 2, the scan commences at a random time between 2 p.m and 4 p.m. Set to 0 to disable randomization.","helpText":"Sets the number of hours (0–23) by which the scan start time is randomized. 0 disables randomization.","infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":null},"dcb598e5b648d7c7":{"id":"mathsettings_calculator_scientificmode_enabled","displayName":"Enabled","description":"Controls whether the mode is enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":[{"id":"mathsettings_calculator_scientificmode_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_scientificmode_enabled_true","displayName":"True","description":null,"helpText":null}]},"dcdf15b97a513856":{"id":"mde_managed_antivirusengine_offlinedefinitionupdateurl","displayName":"Offline Definition Update URL or Directory","description":"The URL or directory path where offline definition updates are served.","helpText":"Specify the location where security intelligence updates are served. This can either be a local server URL (e.g., http://172.22.199.67:8000/linux/production/) or an absolute directory path (e.g., /tmp/wdav-update/linux/production).","infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/offline-definition-update-Url"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"dcd80104a0ffec52":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement","displayName":"Cursor movement (User)","description":"Specifies the default cursor movement mode.","helpText":"","infoUrls":[],"categoryId":"33b9194b-4027-4c23-b662-52f25db7f839","categoryName":"International","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_1","displayName":"Enabled","description":null,"helpText":null}]},"dc8b2c7de0058531":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"dc5a3c1abcd998d6":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings","displayName":"Synchronize Windows settings (User)","description":"\r\nThis policy setting configures the synchronization of Windows settings between computers.\r\nCertain Windows settings will synchronize between computers by default. These settings include Windows themes, Windows desktop settings, Ease of Access settings, and network printers. Use this policy setting to specify which Windows settings synchronize between computers. You can also use these settings to enable synchronization of users' sign-in information for certain apps, networks, and certificates.\r\nIf you enable this policy setting, only the selected Windows settings synchronize. Unselected Windows settings are excluded from settings synchronization.\r\nIf you disable this policy setting, all Windows Settings are excluded from the settings synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-disablewindowsossettings"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_1","displayName":"Enabled","description":null,"helpText":null}]},"dc127b4baf9abecb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"dcb3486cf106fb6b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist","displayName":"Configure native messaging blocklist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},"dc5feced5c205955":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_webrtciphandlingurl","displayName":"WebRTC per URL IP Handling (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b811c4fe-7ff0-4bd1-a454-0918d4e2f896","categoryName":"Web Rtc settings","options":null},"dc17c9c87cecef87":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_pathcolon21","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"dc3c8373170b4487":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath_l_graphgallerypath169","displayName":"Graph gallery path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":null},"dc39e867c2a3911d":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},"dc58042b71979187":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowfontdownloads"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"dc018923dfef7a3e":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1","displayName":"Configure SIP compression mode (User)","description":"\r\nDefines when to turn on SIP compression. Default: Based on adaptor speed.\r\n\r\nSetting this policy may cause an increase in sign-in time.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_1","displayName":"Enabled","description":null,"helpText":null}]},"dc1395874b3174eb":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_managedfavorites","displayName":"Configure favorites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"dcbc95785130ab3d":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls","displayName":"Allow clipboard use on specific sites (User)","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\r\n\r\nSetting the policy lets you create a list of URL patterns that specify which sites can use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\r\n\r\nLeaving the policy unset means 'DefaultClipboardSetting' (Default clipboard site permission) applies for all sites if it's set. If it isn't set, the user's personal setting applies.\r\n\r\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dcbf77b1f62104a9":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled","displayName":"Visual search enabled (User)","description":"Visual search lets you quickly explore more related content about entities in an image.\r\n\r\nIf you enable or don't configure this policy, visual search will be enabled via image hover, context menu, and search in sidebar.\r\n\r\nIf you disable this policy, visual search will be disabled and you won't be able to get more info about images via hover, context menu, and search in sidebar.\r\n\r\nNote: Visual Search in Web Capture is still managed by 'WebCaptureEnabled' (Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge) policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"dc2bbb83d88a87f6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_trustcentersolution_l_empty421_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":null},"dcce875b1ae012b1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyinfopath","displayName":"Disallow in InfoPath (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyinfopath_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyinfopath_1","displayName":"True","description":null,"helpText":null}]},"dc988684eb691670":{"id":"user_vendor_msft_policy_config_onent16v8~policy~l_microsoftofficeonenote~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems290","displayName":"Disable commands (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"categoryId":"b135b86c-b0f4-4cb5-94f4-a6c7ae2013d9","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_onent16v8~policy~l_microsoftofficeonenote~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems290_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v8~policy~l_microsoftofficeonenote~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems290_1","displayName":"Enabled","description":null,"helpText":null}]},"dcb5dbdb547647bc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_v2","displayName":"Signature Warning (User)","description":"This policy setting controls how Outlook warns users about messages with invalid digital signatures.\r\n\r\nIf you enable this policy setting, you can choose from three options for controlling how Outlook users are warned about invalid signatures:\r\n\r\n- Let user decide if they want to be warned. This option enforces the default configuration.\r\n- Always warn about invalid signatures.\r\n- Never warn about invalid signatures.\r\n\r\nIf you disable or do not configure this policy setting, if users open e-mail messages that include invalid digital signatures, Outlook displays a warning dialog. Users can decide whether they want to be warned about invalid signatures in the future.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"dcce53f9a844618f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":null},"dcc04461a13ddb54":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4","displayName":"Default Project Currency (User)","description":"","helpText":"","infoUrls":[],"categoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","categoryName":"View","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_aed","displayName":"United Arab Emirates, Dirhams","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_afa","displayName":"Afghanistan, Afghanis","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_all","displayName":"Albania, Leke","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_amd","displayName":"Armenia, Drams","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_aoa","displayName":"Angola, Kwanza","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ars","displayName":"Argentina, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_aud","displayName":"Australia, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_awg","displayName":"Aruba, Guilders (also called Florins)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_azm","displayName":"Azerbaijan, Manats","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bam","displayName":"Bosnia and Herzegovina, Convertible Marka","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bbd","displayName":"Barbados, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bdt","displayName":"Bangladesh, Taka","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bgn","displayName":"Bulgaria, Leva","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bhd","displayName":"Bahrain, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bif","displayName":"Burundi, Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bmd","displayName":"Bermuda, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bnd","displayName":"Brunei Darussalam, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bob","displayName":"Bolivia, Bolivianos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_brl","displayName":"Brazil, Brazil Real","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bsd","displayName":"Bahamas, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_btn","displayName":"Bhutan, Ngultrum","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bwp","displayName":"Botswana, Pulas","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_byr","displayName":"Belarus, Rubles","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_bzd","displayName":"Belize, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_cad","displayName":"Canada, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_cdf","displayName":"Congo (DRC)//Kinshasa, Congolese Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_chf","displayName":"Switzerland, Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_clp","displayName":"Chile, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_cny","displayName":"China, Yuan Renminbi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_cop","displayName":"Colombia, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_crc","displayName":"Costa Rica, Colones","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_csd","displayName":"Serbia, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_cup","displayName":"Cuba, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_cve","displayName":"Cabo Verde, Escudos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_czk","displayName":"Czech Republic, Koruny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_djf","displayName":"Djibouti, Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_dkk","displayName":"Denmark, Kroner","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_dop","displayName":"Dominican Republic, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_dzd","displayName":"Algeria, Algeria Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_egp","displayName":"Egypt, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ern","displayName":"Eritrea, Nakfa","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_etb","displayName":"Ethiopia, Birr","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_eur","displayName":"Euro Member Countries, Euro","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_fjd","displayName":"Fiji, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_fkp","displayName":"Falkland (Malvinas) Islands, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_gbp","displayName":"United Kingdom, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_gel","displayName":"Georgia, Lari","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ggp","displayName":"Guernsey, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ghc","displayName":"Ghana, Cedis","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_gip","displayName":"Gibraltar, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_gmd","displayName":"Gambia, Dalasi","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_gnf","displayName":"Guinea, Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_gtq","displayName":"Guatemala, Quetzales","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_gyd","displayName":"Guyana, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_hkd","displayName":"Hong Kong, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_hnl","displayName":"Honduras, Lempiras","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_hrk","displayName":"Croatia, Kuna","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_htg","displayName":"Haiti, Gourdes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_huf","displayName":"Hungary, Forint","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_idr","displayName":"Indonesia, Rupiahs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ils","displayName":"Israel, New Shekels","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_imp","displayName":"Isle of Man, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_inr","displayName":"India, Rupees","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_iqd","displayName":"Iraq, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_irr","displayName":"Iran, Rials","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_isk","displayName":"Iceland, Kronur","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_jep","displayName":"Jersey, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_jmd","displayName":"Jamaica, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_jod","displayName":"Jordan, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_jpy","displayName":"Japan, Yen","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_kes","displayName":"Kenya, Shillings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_kgs","displayName":"Kyrgyzstan, Soms","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_khr","displayName":"Cambodia, Riels","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_kmf","displayName":"Comoros, Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_kpw","displayName":"North Korea, Won","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_krw","displayName":"Korea, Won","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_kwd","displayName":"Kuwait, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_kyd","displayName":"Cayman Islands, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_kzt","displayName":"Kazakhstan, Tenge","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_lak","displayName":"Laos, Kips","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_lbp","displayName":"Lebanon, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_lkr","displayName":"Sri Lanka, Rupees","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_lrd","displayName":"Liberia, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_lsl","displayName":"Lesotho, Maloti","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ltl","displayName":"Lithuania, Litai","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_lyd","displayName":"Libya, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mad","displayName":"Morocco, Dirhams","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mdl","displayName":"Moldova, Lei","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mga","displayName":"Madagascar, Ariary","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mkd","displayName":"Macedonia FYRO, Denars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mmk","displayName":"Myanmar (Burma), Kyats","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mnt","displayName":"Mongolia, Tugriks","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mop","displayName":"Macao, Patacas","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mro","displayName":"Mauritania, Ouguiyas","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mur","displayName":"Mauritius, Rupees","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mvr","displayName":"Maldives (Maldive Islands), Rufiyaa","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mwk","displayName":"Malawi, Kwachas","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mxn","displayName":"Mexico, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_myr","displayName":"Malaysia, Ringgits","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_mzm","displayName":"Mozambique, Meticais","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_nad","displayName":"Namibia, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ngn","displayName":"Nigeria, Nairas","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_nio","displayName":"Nicaragua, Cordobas","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_nok","displayName":"Norway, Krone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_npr","displayName":"Nepal, Nepal Rupees","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_nzd","displayName":"New Zealand, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_omr","displayName":"Oman, Rials","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_pab","displayName":"Panama, Balboa","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_pen","displayName":"Peru, Nuevos Soles","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_pgk","displayName":"Papua New Guinea, Kina","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_php","displayName":"Philippines, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_pkr","displayName":"Pakistan, Rupees","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_pln","displayName":"Poland, Zlotych","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_pyg","displayName":"Paraguay, Guarani","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_qar","displayName":"Qatar, Rials","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ron","displayName":"Romania, New Lei","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_rub","displayName":"Russia, Rubles","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_rwf","displayName":"Rwanda, Rwanda Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_sar","displayName":"Saudi Arabia, Riyals","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_sbd","displayName":"Solomon Islands, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_scr","displayName":"Seychelles, Rupees","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_sdd","displayName":"Sudan, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_sek","displayName":"Sweden, Kronor","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_sgd","displayName":"Singapore, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_shp","displayName":"Saint Helena, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_sll","displayName":"Sierra Leone, Leones","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_sos","displayName":"Somalia, Shillings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_spl","displayName":"Seborga, Luigini","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_srd","displayName":"Suriname, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_std","displayName":"São Tome and Principe, Dobras","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_svc","displayName":"El Salvador, Colones","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_syp","displayName":"Syria, Pounds","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_szl","displayName":"Swaziland, Emalangeni","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_thb","displayName":"Thailand, Baht","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_tjs","displayName":"Tajikistan, Somoni","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_tmm","displayName":"Turkmenistan, Manats","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_tnd","displayName":"Tunisia, Dinars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_top","displayName":"Tonga, Pa'anga","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_try","displayName":"Turkey, Lira","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ttd","displayName":"Trinidad and Tobago, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_tvd","displayName":"Tuvalu, Tuvalu Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_twd","displayName":"Taiwan, New Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_tzs","displayName":"Tanzania, Shillings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_uah","displayName":"Ukraine, Hryvnia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ugx","displayName":"Uganda, Shillings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_usd","displayName":"United States of America, Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_uyu","displayName":"Uruguay, Pesos","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_uzs","displayName":"Uzbekistan, Sums","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_ves","displayName":"Venezuela, Bolívar","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_vnd","displayName":"Vietnam, Dong","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_vuv","displayName":"Vanuatu, Vatu","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_wst","displayName":"Samoa, Tala","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xaf","displayName":"Communauté Financière Africaine BEAC, Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xag","displayName":"Silver, Ounces","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xau","displayName":"Gold, Ounces","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xcd","displayName":"East Caribbean Dollars","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xdr","displayName":"International Monetary Fund (IMF) Special Drawing Rights","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xof","displayName":"Communauté Financière Africaine BCEAO, Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xpd","displayName":"Palladium Ounces","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xpf","displayName":"Comptoirs Français du Pacifique Francs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_xpt","displayName":"Platinum, Ounces","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_yer","displayName":"Yemen, Rials","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_zar","displayName":"South Africa, Rand","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_zmk","displayName":"Zambia, Kwacha","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjview_l_defaultprojectcurrency_l_defaultprojectcurrency4_zwd","displayName":"Zimbabwe, Zimbabwe Dollars","description":null,"helpText":null}]},"dcb8ce63ee2dec19":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolstemplatesandaddins","displayName":"Developer tab | Templates | Document Template (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolstemplatesandaddins_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolstemplatesandaddins_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/dd.json b/public/intune-definitions/dd.json new file mode 100644 index 000000000000..eae7c40a264d --- /dev/null +++ b/public/intune-definitions/dd.json @@ -0,0 +1 @@ +{"dd357f66e8a48d7a":{"id":"ade_setupassistant_softwareupdatecompleted","displayName":"Software Update completed","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_softwareupdatecompleted_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_softwareupdatecompleted_1","displayName":"Show","description":null,"helpText":null}]},"dd6c4bf76ebf15fa":{"id":"com.android.devicerestrictionpolicy.vpnconfigblocked","displayName":"Block configuring VPN","description":"If 'True', the device is prevented from configuring VPN connections. If 'False', Intune doesn't change or update this setting. By default, the OS might allow VPN configuration. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":"","infoUrls":[],"categoryId":"929c169a-3480-467c-9f47-d1836b359ef7","categoryName":"Connectivity","options":[{"id":"com.android.devicerestrictionpolicy.vpnconfigblocked_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.vpnconfigblocked_true","displayName":"True","description":"True","helpText":null}]},"dd8f99f3487c0382":{"id":"com.apple.applicationaccess_allowdiagnosticsubmission","displayName":"Allow Diagnostic Submission","description":"If false, prevents the device from automatically submitting diagnostic reports to Apple. Available in iOS 6 and later, and macOS 10.13 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowdiagnosticsubmission_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowdiagnosticsubmission_true","displayName":"True","description":null,"helpText":null}]},"ddb7fbcec1ce44a6":{"id":"com.apple.dock_static-apps_item_tile-data_label","displayName":"Label","description":"The label of the Dock item.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"ddbd386c622fcfc3":{"id":"com.apple.extensiblesso_extensiondata_useplatformssotgt_kerberos","displayName":"Use Platform SSOTGT","description":"If `true`, the system requires this configuration uses a TGT from Platform SSO instead of requesting a new one. Available in macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_useplatformssotgt_kerberos_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_useplatformssotgt_kerberos_true","displayName":"Enabled","description":null,"helpText":null}]},"dd21f87251ae497b":{"id":"com.apple.managedclient.preferences_clipboardblockedforurls","displayName":"Block clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\n\nSetting the policy lets you create a list of URL patterns that specify sites that can't use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\n\nLeaving the policy unset means \"DefaultClipboardSetting\" applies for all sites if it's set. If it isn't set, the user's personal setting applies.\n\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#clipboardblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"dd4b59ba96371a7d":{"id":"com.apple.managedclient.preferences_hidefoldersonmycomputerrootinfolderlist","displayName":"Hide On My Computer folders","description":"Disable local folder storage.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#hide-local-folders"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_hidefoldersonmycomputerrootinfolderlist_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_hidefoldersonmycomputerrootinfolderlist_true","displayName":"True","description":null,"helpText":null}]},"dd798b54cf3a6dea":{"id":"com.apple.managedclient.preferences_idletimeoutactions","displayName":"Actions to run when the computer is idle","description":"When the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\n\nIf you don't configure the IdleTimeout policy, this policy has no effect.\n\nIf you don't configure this policy or no actions are selected, the IdleTimeout policy has no effect.\n\nSupported actions are:\n\n'close_browsers': close all browser windows and PWAs for this profile.\n\n'reload_pages': reload all webpages. For some pages, the user might be prompted for confirmation first.\n\n'sign_out': sign out of browser. (This action only applies to iOS.)\n\n'close_tabs': close all open tabs and create an NTP (New Tab Page). Supported in Android and iOS.\n\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings': clear the corresponding browsing data. Deleting cookies using this policy doesn't sign the user out of their profile, the user stays signed in.\n\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' disables sync for the respective data types if sync isn't already disabled by setting either the SyncDisabled policy or BrowserSignin to disabled.\n\nPolicy options mapping:\n\n* close_browsers (close_browsers) = Close Browsers\n\n* clear_browsing_history (clear_browsing_history) = Clear Browsing History\n\n* clear_download_history (clear_download_history) = Clear Download History\n\n* clear_cookies_and_other_site_data (clear_cookies_and_other_site_data) = Clear Cookies and Other Site Data\n\n* clear_cached_images_and_files (clear_cached_images_and_files) = Clear Cached Images and Files\n\n* clear_password_signin (clear_password_signin) = Clear Password sign in\n\n* clear_autofill (clear_autofill) = Clear Autofill\n\n* clear_site_settings (clear_site_settings) = Clear Site Settings\n\n* reload_pages (reload_pages) = Reload Pages\n\n* sign_out (sign_out) = Sign Out\n\n* close_tabs (close_tabs) = Close Tabs\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#idletimeoutactions"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ddb21131f5a5f969":{"id":"com.apple.managedclient.preferences_merge_policy","displayName":"Performance profiles merge policy","description":"Specify the merge policy for performance profiles. This can be a combination of administrator-defined and user-defined profiles (merge) or only administrator-defined profiles (admin_only).","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/performance-profiles"],"categoryId":"d40a32e1-ab3e-4cbc-aa03-4766792e563e","categoryName":"Performance Profiles Configuration","options":[{"id":"com.apple.managedclient.preferences_merge_policy_0","displayName":"merge","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_merge_policy_1","displayName":"admin_only","description":null,"helpText":null}]},"dd2175d5fa944e54":{"id":"com.apple.managedclient.preferences_registeredprotocolhandlers_item_url","displayName":"URL","description":"The URL of the protocol handler.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ddb96a26cd514013":{"id":"com.apple.managedclient.preferences_trackingprevention","displayName":"Block tracking of users' web-browsing activity","description":"Lets you decide whether to block websites from tracking users' web-browsing activity.\n\nIf you enable this policy, you have the following options for setting the level of tracking prevention:\n\n* 0 = Off (no tracking prevention)\n\n* 1 = Basic (blocks harmful trackers, content and ads will be personalized)\n\n* 2 = Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)\n\n* 3 = Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)\n\nIf you disable this policy or don't configure it, users can set their own level of tracking prevention.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#trackingprevention"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_trackingprevention_0","displayName":"Off (no tracking prevention)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_trackingprevention_1","displayName":"Basic (blocks harmful trackers, content and ads will be personalized)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_trackingprevention_2","displayName":"Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_trackingprevention_3","displayName":"Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)","description":null,"helpText":null}]},"dd31b56e19d16e9f":{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_allowed","displayName":"Allowed","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_appleevents_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"dd3a82031d0eaf05":{"id":"com.apple.webcontent-filter_filtersockets","displayName":"Filter Sockets","description":"If true, enables the filtering of socket traffic.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_filtersockets_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_filtersockets_true","displayName":"True","description":null,"helpText":null}]},"ddf4f01db8476657":{"id":"com.microsoft.edge.mamedgeappconfigsettings.automaticdownloadsblockedforurls","displayName":"Block multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, where multiple successive automatic downloads aren't allowed.\nIf you don't configure this policy, \"DefaultAutomaticDownloadsSetting\" applies for all sites, if that setting is active. If it isn't set, then the user's personal setting applies.\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"dd8065ca1227a36a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsensorssetting","displayName":"Default sensors setting","description":"Set whether websites can access and use sensors such as motion and light sensors. You can completely block or allow websites to get access to sensors.\n\nSetting the policy to 1 lets websites access and use sensors. Setting the policy to 2 denies access to sensors.\n\nYou can override this policy for specific URL patterns by using the \"SensorsAllowedForUrls\" and \"SensorsBlockedForUrls\" policies.\n\nIf you don't configure this policy, websites can access and use sensors, and users can change this setting. This setting is the global default for \"SensorsAllowedForUrls\" and \"SensorsBlockedForUrls\".\n\nPolicy options mapping:\n\n* AllowSensors (1) = Allow sites to access sensors\n\n* BlockSensors (2) = Do not allow any site to access sensors\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsensorssetting_allowsensors","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsensorssetting_blocksensors","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},"dd2d0991f3f05d29":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_recommended","displayName":"Shopping in Microsoft Edge Enabled (users can override)","description":"This policy lets users compare the prices of a product they're looking at, get coupons or rebates from the website they're on, autoapply coupons, and help checkout faster using autofill data.\n\nIf you enable or don't configure this policy, shopping features such as price comparison, coupons, rebates, and express checkout are automatically applied for retail domains. Coupons for the current retailer and prices from other retailers are fetched from a server.\n\nIf you disable this policy, shopping features such as price comparison, coupons, rebates, and express checkout aren't automatically found for retail domains.\n\nStarting from version 90.0.818.56, the behavior of the messaging letting users know that there's a coupon, rebate, price comparison, or price history available on shopping domains is also done through a horizontal banner below the address bar. Previously, this messaging was done on the address bar.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"dd2c3e826d192387":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importcookies_recommended","displayName":"Allow importing of Cookies (users can override)","description":"Allows users to import Cookies from another browser into Microsoft Edge.\n\nIf you disable this policy, Cookies aren't imported on first run.\n\nIf you don't configure this policy, Cookies are imported on first run.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\n\nNote: This policy currently manages Google Chrome import (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importcookies_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importcookies_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"dd8f21aae6eac068":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_recommended","displayName":"Allow unconfigured sites to be reloaded in Internet Explorer mode (users can override)","description":"This policy allows users to reload unconfigured sites (ones that aren't configured in the Enterprise Mode Site List) in Internet Explorer mode when browsing in Microsoft Edge, and a site requires Internet Explorer for compatibility.\n\nAfter a site is reloaded in Internet Explorer mode, \"in-page\" navigation stays in Internet Explorer mode (for example, a link, script, or form on the page, or a server-side redirect from another \"in-page\" navigation). Users can choose to exit from Internet Explorer mode, or Microsoft Edge automatically exits from Internet Explorer mode when a navigation that isn't \"in-page\" occurs (for example, using the address bar, the back button, or a favorite link).\n\nUsers can also optionally tell Microsoft Edge to use Internet Explorer mode for the site in the future. This choice is remembered for a length of time managed by the \"InternetExplorerIntegrationLocalSiteListExpirationDays\" policy.\n\nIf the \"InternetExplorerIntegrationLevel\" policy is set to 'IEMode', then sites explicitly configured by the \"InternetExplorerIntegrationSiteList\" policy's site list to use Microsoft Edge aren't reloaded in Internet Explorer mode, and sites configured by the site list or by the \"SendIntranetToInternetExplorer\" policy to use Internet Explorer mode can't exit from Internet Explorer mode.\n\nIf you enable this policy, users are allowed to reload unconfigured sites in Internet Explorer mode.\n\nIf you disable this policy, users aren't allowed to reload unconfigured sites in Internet Explorer mode.\n\nIf you enable this policy, it takes precedence over how you configured the \"InternetExplorerIntegrationTestingAllowed\" policy, and that policy is disabled.\n\nFor more information about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"ddc65682e9c1dbb6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.partitionedbloburlusage","displayName":"Manage Blob URL Partitioning During Fetching and Navigation","description":"The \"PartitionedBlobUrlUsage\" policy controls whether Blob URLs are partitioned during fetching and navigation.\nIf this policy is set to Enabled or not set, Blob URLs are partitioned.\nIf this policy is set to Disabled, Blob URLs can't be partitioned. This represents the Blob URL behavior before Microsoft Edge version 135.\n\nThe policy is scheduled to be available through Microsoft Edge version 146. After this version, the policy will be removed, and Microsoft Edge will no longer support unpartitioned blob storage.\n\nFor detailed information on third-party storage partitioning, see https://github.com/privacycg/storage-partitioning.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.partitionedbloburlusage_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.partitionedbloburlusage_true","displayName":"Enabled","description":null,"helpText":null}]},"dda0fb396acfbf83":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installsignedocx","displayName":"Installation Policy for signed ActiveX control","description":null,"helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installsignedocx_0","displayName":"Don't install","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installsignedocx_1","displayName":"Prompt the user","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_installsignedocx_2","displayName":"Silently install","description":null,"helpText":null}]},"dd946831055a3496":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_work_bits_workhighprioritylimit","displayName":"High Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"dd719a1b4f1447da":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_smartprotocolreorder","displayName":"Turn off smart protocol reordering","description":"Specifies that the DNS client should prefer responses from link local name resolution protocols on non-domain networks over DNS responses when issuing queries for flat names. Examples of link local name resolution protocols include link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT).\r\n\r\nIf you enable this policy setting, the DNS client will prefer DNS responses, followed by LLMNR, followed by NetBT for all networks. \r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, the DNS client will prefer link local responses for flat name queries on non-domain networks. \r\n\r\nNote: This policy setting is applicable only if the turn off smart multi-homed name resolution policy setting is disabled or not configured.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-smartprotocolreorder"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_smartprotocolreorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_smartprotocolreorder_1","displayName":"Enabled","description":null,"helpText":null}]},"dd10412fdd8bf3a9":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablerawwritenotification","displayName":"Turn on raw volume write notifications","description":"This policy setting controls whether raw volume write notifications are sent to behavior monitoring.\r\n\r\n If you enable or do not configure this setting, raw write notifications will be enabled.\r\n\r\n If you disable this setting, raw write notifications be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-disablerawwritenotification"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablerawwritenotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_disablerawwritenotification_1","displayName":"Enabled","description":null,"helpText":null}]},"ddbcab728da052b4":{"id":"device_vendor_msft_policy_config_admx_printing_allowwebprinting","displayName":"Activate Internet printing","description":"Internet printing lets you display printers on Web pages so that printers can be viewed, managed, and used across the Internet or an intranet.\r\n\r\n If you enable this policy setting, Internet printing is activated on this server.\r\n\r\n If you disable this policy setting or do not configure it, Internet printing is not activated.\r\n\r\n Internet printing is an extension of Internet Information Services (IIS). To use Internet printing, IIS must be installed, and printing support and this setting must be enabled.\r\n\r\n Note: This setting affects the server side of Internet printing only. It does not prevent the print client on the computer from printing across the Internet.\r\n\r\n Also, see the \"Custom support URL in the Printers folder's left pane\" setting in this folder and the \"Browse a common Web site to find printers\" setting in User Configuration\\Administrative Templates\\Control Panel\\Printers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-allowwebprinting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_allowwebprinting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_allowwebprinting_1","displayName":"Enabled","description":null,"helpText":null}]},"dd4698d2362c68ec":{"id":"device_vendor_msft_policy_config_admx_servicing_servicing","displayName":"Specify settings for optional component installation and component repair","description":"\r\nThis policy setting specifies the network locations that will be used for the repair of operating system corruption and for enabling optional features that have had their payload files removed.\r\n\r\nIf you enable this policy setting and specify the new location, the files in that location will be used to repair operating system corruption and for enabling optional features that have had their payload files removed. You must enter the fully qualified path to the new location in the \"Alternate source file path\" text box. Multiple locations can be specified when each path is separated by a semicolon. \r\n\r\nThe network location can be either a folder, or a WIM file. If it is a WIM file, the location should be specified by prefixing the path with “wim:” and include the index of the image to use in the WIM file. For example “wim:\\\\server\\share\\install.wim:3”.\r\n\r\nIf you disable or do not configure this policy setting, or if the required files cannot be found at the locations specified in this policy setting, the files will be downloaded from Windows Update, if that is allowed by the policy settings for the computer.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-servicing#admx-servicing-servicing"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_servicing_servicing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_servicing_servicing_1","displayName":"Enabled","description":null,"helpText":null}]},"dd7aef4a0350f6d2":{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_2","displayName":"Prevent Back-ESC mapping","description":"Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavior.\r\n\r\nIf you enable this policy, a button assigned to Back will not map to ESC.\r\n\r\nIf you disable this policy, Back->ESC mapping will occur.\r\n\r\nIf you do not configure this policy, Back->ESC mapping will occur.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventbackescmapping-2"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_2_1","displayName":"Enabled","description":null,"helpText":null}]},"ddcbc2a2c9240cf7":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_authentication_policy","displayName":"Require user authentication for remote connections by using Network Level Authentication","description":"This policy setting allows you to specify whether to require user authentication for remote connections to the RD Session Host server by using Network Level Authentication. This policy setting enhances security by requiring that user authentication occur earlier in the remote connection process.\r\n\r\nIf you enable this policy setting, only client computers that support Network Level Authentication can connect to the RD Session Host server.\r\n\r\nTo determine whether a client computer supports Network Level Authentication, start Remote Desktop Connection on the client computer, click the icon in the upper-left corner of the Remote Desktop Connection dialog box, and then click About. In the About Remote Desktop Connection dialog box, look for the phrase Network Level Authentication supported.\r\n\r\nIf you disable this policy setting, Network Level Authentication is not required for user authentication before allowing remote connections to the RD Session Host server.\r\n\r\nIf you do not configure this policy setting, the local setting on the target computer will be enforced. On Windows Server 2012 and Windows 8, Network Level Authentication is enforced by default.\r\n\r\nImportant: Disabling this policy setting provides less security because user authentication will occur later in the remote connection process.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-user-authentication-policy"],"categoryId":"579d6272-8708-4b22-a352-89cbd705ca82","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_authentication_policy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_authentication_policy_1","displayName":"Enabled","description":null,"helpText":null}]},"ddf004c8c63f8f04":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_mandatory_profiles","displayName":"Use mandatory profiles on the RD Session Host server","description":"This policy setting allows you to specify whether Remote Desktop Services uses a mandatory profile for all users connecting remotely to the RD Session Host server.\r\n\r\nIf you enable this policy setting, Remote Desktop Services uses the path specified in the \"Set path for Remote Desktop Services Roaming User Profile\" policy setting as the root folder for the mandatory user profile. All users connecting remotely to the RD Session Host server use the same user profile.\r\n\r\nIf you disable or do not configure this policy setting, mandatory user profiles are not used by users connecting remotely to the RD Session Host server.\r\n\r\nNote:\r\n\r\nFor this policy setting to take effect, you must also enable and configure the \"Set path for Remote Desktop Services Roaming User Profile\" policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-user-mandatory-profiles"],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_mandatory_profiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_mandatory_profiles_1","displayName":"Enabled","description":null,"helpText":null}]},"dddc8bbe29175d47":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_defaultlibrarieslocation","displayName":"Default Libraries definition location","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"dd611a632af007e3":{"id":"device_vendor_msft_policy_config_authentication_preferredaadtenantdomainname","displayName":"Preferred Aad Tenant Domain Name","description":"Specifies the preferred domain among available domains in the AAD tenant.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#preferredaadtenantdomainname"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":null},"dd8fd81c4f5c6d36":{"id":"device_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge","displayName":"Sync Favorites Between IE And Microsoft Edge","description":"Specifies whether favorites are kept in sync between Internet Explorer and Microsoft Edge. Changes to favorites in one browser are reflected in the other, including: additions, deletions, modifications, and ordering.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#syncfavoritesbetweenieandmicrosoftedge"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge_0","displayName":"Disabled","description":"Turned off/not syncing.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge_1","displayName":"Enabled","description":"Turned on/syncing.","helpText":null}]},"ddf3da0567cf8b2b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled","displayName":"Enable leak detection for entered credentials","description":"Setting the policy to Enabled lets users have Google Chrome check whether usernames and passwords entered were part of a leak.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, credential leak checking is allowed, but the user can turn it off.\r\n\r\nThis behavior will not trigger if Safe Browsing is disabled (either by policy or by the user). In order to force Safe Browsing on, use the SafeBrowsingEnabled policy or the SafeBrowsingProtectionLevel policy.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"dd6cf1f6522e13c2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings","displayName":"Settings for Google's AI Mode integrations in the address bar and New Tab page search box.","description":"This policy controls Google's AI Mode integrations in the address bar and the New Tab page search box.\r\n\r\nTo access this feature, Google must be set as the user's default search engine.\r\n\r\n0/unset = The feature will be available to users.\r\n\r\n1 = The feature will not be available to users.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"dde082a1d64cbb04":{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth","displayName":"Allow Bluetooth","description":"Allows the user to enable Bluetooth or restrict access. Note  This value is not supported in Windows Phone 8. 1 MDM and EAS, Windows 10 for desktop, or Windows 10 Mobile. If this is not set or it is deleted, the default value of 2 (Allow) is used. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowbluetooth"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth_0","displayName":"Disallow Bluetooth. The radio in the Bluetooth control panel will be grayed out and the user will not be able to turn Bluetooth on.","description":"Disallow Bluetooth. If this is set to 0, the radio in the Bluetooth control panel will be grayed out and the user will not be able to turn Bluetooth on.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth_1","displayName":"Reserved. The radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","description":"Reserved. If this is set to 1, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth_2","displayName":"Allow Bluetooth. The radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","description":"Allow Bluetooth. If this is set to 2, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","helpText":null}]},"dd639dcb28b8732a":{"id":"device_vendor_msft_policy_config_connectivity_disablecellularsettingspage","displayName":"Disable Cellular Settings Page (Windows Insiders only)","description":"This policy makes all configurable settings in the 'Cellular' Settings page read-only.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#disablecellularsettingspage"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_disablecellularsettingspage_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disablecellularsettingspage_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"ddeabd14803e2455":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowfontdownloads"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"ddc518ab449489bc":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"dd801426579528b3":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"dd73bcf8ff48d5a6":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes.\n\nIf you enable this policy setting, prompting for ActiveX control installations will be blocked for Internet Explorer processes.\n\nIf you disable this policy setting, prompting for ActiveX control installations will not be blocked for Internet Explorer processes.\n\nIf you do not configure this policy setting, the user's preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictactivexinstallinternetexplorerprocesses"],"categoryId":"e6911a08-946f-4b70-99cb-2a8b92c461e0","categoryName":"Restrict ActiveX Install","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"ddad3c3476f0bdc4":{"id":"device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice","displayName":"Specify use of ActiveX Installer Service for installation of ActiveX controls","description":"This policy setting allows you to specify how ActiveX controls are installed.\n\nIf you enable this policy setting, ActiveX controls are installed only if the ActiveX Installer Service is present and has been configured to allow the installation of ActiveX controls.\n\nIf you disable or do not configure this policy setting, ActiveX controls, including per-user controls, are installed through the standard installation process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-specifyuseofactivexinstallerservice"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_1","displayName":"Enabled","description":null,"helpText":null}]},"dd13122d6c5ff944":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_restrictsignintopattern","displayName":"Restrict which accounts can be used as Microsoft Edge primary accounts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"dd110dd336c3a4e5":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL","description":"Configures the change password URL (HTTP and HTTPS schemes only).\r\n\r\nPassword protection service will send users to this URL to change their password after seeing a warning in the browser.\r\n\r\nIf you enable this policy, then password protection service sends users to this URL to change their password.\r\n\r\nIf you disable this policy or don't configure it, then password protection service will not redirect users to a change password URL.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://contoso.com/change_password.html","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_1","displayName":"Enabled","description":null,"helpText":null}]},"dd4b4c0471005ae0":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended","displayName":"Configure the sticky print preview settings","description":"Configuring this policy sets the print preview settings as the most recent choice in Print Preview instead of the default print preview settings.\r\n\r\nEach item of this policy expects a boolean:\r\n\r\nLayout specifies if the webpage layout should be kept sticky or not in print preview settings. If we set this to True the webpage layout uses the recent choice otherwise it will set to default value.\r\n\r\nSize specifies if the page size should be kept sticky or not in print preview settings. If we set this to True the page size uses the recent choice otherwise it will set to default value.\r\n\r\nScale Type specifies if the scaling percentage and scale type should be kept sticky or not in print preview settings. If we set this to True the scale percentage and scale type both uses the recent choice oherwise it will set to default value.\r\n\r\nMargins specifies if the page margin should be kept sticky or not in print preview settings. If we set this to True the page margins uses the recent choice otherwise it will set to default value.\r\n\r\nIf you enable this policy, the selected values will use the most recent choice in Print Preview.\r\n\r\nIf you disable or don't configure this policy, print preview settings will not be impacted.\r\n\r\nExample value:\r\n\r\n{\r\n \"layout\": false,\r\n \"margins\": true,\r\n \"scaleType\": false,\r\n \"size\": true\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"layout\": false, \"margins\": true, \"scaleType\": false, \"size\": true}","helpText":"","infoUrls":[],"categoryId":"6b71fbf6-7156-471a-b488-3eece04bda86","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"dd07fcb1acc7ea7b":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_printpreviewstickysettings","displayName":"Configure the sticky print preview settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":null},"ddecbd646ec5226f":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled","displayName":"Enable browser legacy extension point blocking","description":"Sets the ProcessExtensionPointDisablePolicy on Microsoft Edge's browser process to block code injection from legacy third party applications.\r\n\r\nIf you enable or don't configure this policy, the ProcessExtensionPointDisablePolicy is applied to block legacy extension points in the browser process.\r\n\r\nIf you disable this policy, the ProcessExtensionPointDisablePolicy is not applied to block legacy extension points in the browser process. This has a detrimental effect on Microsoft Edge's security and stability as unknown and potentially hostile code can load inside Microsoft Edge's browser process. Only turn off the policy if there are compatibility issues with third-party software that must run inside Microsoft Edge's browser process.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"dd4b13c2699d1fde":{"id":"device_vendor_msft_policy_config_textinput_allowimelogging","displayName":"Allow IME Logging","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the user to turn on and off the logging for incorrect conversion and saving auto-tuning result to a file and history-based predictive input. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowimelogging"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowimelogging_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowimelogging_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"dd0f1894d529dff2":{"id":"device_vendor_msft_policy_config_update_setdisablepauseuxaccess","displayName":"Block \"Pause Updates\" ability","description":"This policy allows the IT admin to disable the Pause Updates feature. When this policy is enabled, the user cannot access the Pause updates feature. Value type is integer. Default is 0. Supported values 0, 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setdisablepauseuxaccess"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_setdisablepauseuxaccess_1","displayName":"Block","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_update_setdisablepauseuxaccess_0","displayName":"Allow","description":"Disable","helpText":null}]},"dd30db5bf6871759":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"dd216ce05ac02cb1":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenotifications","displayName":"Disable Notifications","description":"Use this policy setting if you want to disable the display of Windows Defender Security Center notifications. If you disable or do not configure this setting, Windows Defender Security Center notifications will display on devices. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablenotifications"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenotifications_0","displayName":"(Disable) The users can see the display of Windows Defender Security Center notifications.","description":"(Disable) The users can see the display of Windows Defender Security Center notifications.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenotifications_1","displayName":"(Enable) The users cannot see the display of Windows Defender Security Center notifications.","description":"(Enable) The users cannot see the display of Windows Defender Security Center notifications.","helpText":null}]},"dd691d28e6136f59":{"id":"externalintelligencesettings_externalintelligencesettings","displayName":"com.apple.configuration.external-intelligence.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"d9654cb3-57c8-487c-90a5-454e15336731","categoryName":"External Intelligence Settings","options":null},"dd961dcded15dfab":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_2","displayName":"Internet Explorer Maintenance (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iemaintenance-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_2_1","displayName":"Enabled","description":null,"helpText":null}]},"ddcb21fabfce2968":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_enableadminprohibits","displayName":"Enable Windows 2000 Network Connections settings for Administrators (User)","description":"Determines whether settings that existed in Windows 2000 Server family will apply to Administrators.\r\n\r\nThe set of Network Connections group settings that existed in Windows 2000 Professional also exists in Windows XP Professional. In Windows 2000 Professional, all of these settings had the ability to prohibit the use of certain features from Administrators.\r\n\r\nBy default, Network Connections group settings in Windows XP Professional do not have the ability to prohibit the use of features from Administrators.\r\n\r\nIf you enable this setting, the Windows XP settings that existed in Windows 2000 Professional will have the ability to prohibit Administrators from using certain features. These settings are \"Ability to rename LAN connections or remote access connections available to all users\", \"Prohibit access to properties of components of a LAN connection\", \"Prohibit access to properties of components of a remote access connection\", \"Ability to access TCP/IP advanced configuration\", \"Prohibit access to the Advanced Settings Item on the Advanced Menu\", \"Prohibit adding and removing components for a LAN or remote access connection\", \"Prohibit access to properties of a LAN connection\", \"Prohibit Enabling/Disabling components of a LAN connection\", \"Ability to change properties of an all user remote access connection\", \"Prohibit changing properties of a private remote access connection\", \"Prohibit deletion of remote access connections\", \"Ability to delete all user remote access connections\", \"Prohibit connecting and disconnecting a remote access connection\", \"Ability to Enable/Disable a LAN connection\", \"Prohibit access to the New Connection Wizard\", \"Prohibit renaming private remote access connections\", \"Prohibit access to the Remote Access Preferences item on the Advanced menu\", \"Prohibit viewing of status for an active connection\". When this setting is enabled, settings that exist in both Windows 2000 Professional and Windows XP Professional behave the same for administrators.\r\n\r\nIf you disable this setting or do not configure it, Windows XP settings that existed in Windows 2000 will not apply to administrators.\r\n\r\nNote: This setting is intended to be used in a situation in which the Group Policy object that these settings are being applied to contains both Windows 2000 Professional and Windows XP Professional computers, and identical Network Connections policy behavior is required between all Windows 2000 Professional and Windows XP Professional computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-enableadminprohibits"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_enableadminprohibits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_enableadminprohibits_1","displayName":"Enabled","description":null,"helpText":null}]},"dd2e8727abc39174":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanproperties","displayName":"Prohibit access to properties of a LAN connection (User)","description":"Determines whether users can change the properties of a LAN connection.\r\n\r\nThis setting determines whether the Properties menu item is enabled, and thus, whether the Local Area Connection Properties dialog box is available to users.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties menu items are disabled for all users, and users cannot open the Local Area Connection Properties dialog box.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, a Properties menu item appears when users right-click the icon representing a LAN connection. Also, when users select the connection, Properties is enabled on the File menu.\r\n\r\nNote: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a LAN connection is available to users.\r\n\r\nNote: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-lanproperties"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanproperties_1","displayName":"Enabled","description":null,"helpText":null}]},"dd95bbd845dceb3f":{"id":"user_vendor_msft_policy_config_admx_printing_nodeleteprinter","displayName":"Prevent deletion of printers (User)","description":"If this policy setting is enabled, it prevents users from deleting local and network printers.\r\n\r\n If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action.\r\n\r\n This setting does not prevent users from running other programs to delete a printer.\r\n\r\n If this policy is disabled, or not configured, users can delete printers using the methods described above.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-nodeleteprinter"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_admx_printing_nodeleteprinter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_nodeleteprinter_1","displayName":"Enabled","description":null,"helpText":null}]},"dd3b374a33d2dc5f":{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription","displayName":"Set action to take when logon hours expire (User)","description":"This policy controls which action will be taken when the logon hours expire for the logged on user. The actions include lock the workstation, disconnect the user, or log the user off completely.\r\n\r\nIf you choose to lock or disconnect a session, the user cannot unlock the session or reconnect except during permitted logon hours.\r\n\r\nIf you choose to log off a user, the user cannot log on again except during permitted logon hours. If you choose to log off a user, the user might lose unsaved data.\r\n\r\nIf you enable this setting, the system will perform the action you specify when the user’s logon hours expire.\r\n\r\nIf you disable or do not configure this setting, the system takes no action when the user’s logon hours expire. The user can continue the existing session, but cannot log on to a new session.\r\n\r\nNote: If you configure this setting, you might want to examine and appropriately configure the “Remove logon hours expiration warnings” setting\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-logonhourspolicydescription"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_1","displayName":"Enabled","description":null,"helpText":null}]},"dddc8507083ab285":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_downloaddirectory","displayName":"Set download directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"dde8f1d41d6578ff":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_0","displayName":"Use default browser behavior.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_1","displayName":"Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_2","displayName":"Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_3","displayName":"Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null}]},"ddd3068a8c7ec1f0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressunsupportedoswarning","displayName":"Suppress the unsupported OS warning (User)","description":"Setting the policy to Enabled suppresses the warning that appears when Google Chrome is running on an unsupported computer or operating system.\r\n\r\nSetting the policy to Disabled or leaving it unset means the warnings appear on unsupported systems.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressunsupportedoswarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressunsupportedoswarning_1","displayName":"Enabled","description":null,"helpText":null}]},"dd1f740f9c44b41a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting","displayName":"Default geolocation setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1","displayName":"Allow sites to track the users' physical location","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2","displayName":"Do not allow any site to track the users' physical location","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3","displayName":"Ask whenever a site wants to track the users' physical location","description":null,"helpText":null}]},"dda82ace51069d2e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode","displayName":"Force YouTube Safety Mode (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode_1","displayName":"Enabled","description":null,"helpText":null}]},"dd9c0f5a800665f3":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage. (User)","description":"Setting the policy lets you list the URLs that specify which sites are automatically granted permission to access a HID device containing a top-level collection with the given HID usage. Each item in the list requires both usages and urls fields for the policy to be valid. Each item in the usages field must have a usage_page and may have a usage field. Omitting the usage field will create a policy matching any device containing a top-level collection with a usage from the specified usage page. An item which has a usage field without a usage_page field is invalid and is ignored.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies, if it's set. If not, the user's personal setting applies.\r\n\r\nURLs in this policy shouldn't conflict with those configured through WebHidBlockedForUrls. If they do, this policy takes precedence over WebHidBlockedForUrls.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebHidAllowDevicesWithHidUsagesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://google.com\",\r\n \"https://chromium.org\"\r\n ],\r\n \"usages\": [\r\n {\r\n \"usage\": 5678,\r\n \"usage_page\": 1234\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dda8654df66563f0":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc","displayName":"Disable third-party storage partitioning for specific top-level origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"ddbdf614d55d13a9":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview","displayName":"Do not open files from the Internet zone in Protected View (User)","description":"This policy setting allows you to determine if files downloaded from the Internet zone open in Protected View.\r\n\r\nIf you enable this policy setting, files downloaded from the Internet zone do not open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, files downloaded from the Internet zone open in Protected View.","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"ddc34e5c6e60e139":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_strictmimetypecheckforworkerscriptsenabled","displayName":"Enable strict MIME type checking for worker scripts (User)","description":"This policy controls whether strict MIME type checking is used for worker scripts.\n\nIf you enable or don't configure this policy, worker scripts use strict MIME type checking for JavaScript. Worker scripts that use legacy MIME types are rejected.\n\nIf you disable this policy, worker scripts use lax MIME type checking. This allows worker scripts that use legacy MIME types, such as text/ascii, to continue to load and run.\n\nBrowsers traditionally used lax MIME type checking, which allowed JavaScript resources to load with several legacy MIME types. This behavior can create security risks by allowing resources to load as scripts when they weren't intended to be used that way.\n\nMicrosoft Edge uses strict MIME type checking by default. Enabling this policy follows the default behavior. Disabling this policy lets admins temporarily retain the legacy behavior for compatibility.\n\nFor more information about JavaScript and ECMAScript media types, see https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguage.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_strictmimetypecheckforworkerscriptsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_strictmimetypecheckforworkerscriptsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ddc92af3a7def615":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_serialallowallportsforurlsdesc","displayName":"Automatically grant sites permission to connect all serial ports (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"dd2ae97297cb24ec":{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent","displayName":"Allow the use of connected experiences in Office that download online content (User)","description":"This policy setting allows you to control whether connected experiences that download online content are available to your users when they’re using Office.\r\n\r\nOffice templates and PowerPoint QuickStarter are examples of connected experiences that download online content.\r\n\r\nIf you enable this policy setting, connected experiences that download online content will be available to your users.\r\n\r\nIf you disable this policy setting, connected experiences that download online content won’t be available to your users.\r\n\r\nIf you don’t configure this policy setting, connected experiences that download online content will be available to your users.\r\n\r\nNote: If you disable the “Allow the use of connected experiences in Office” policy setting, connected experiences that download online content won’t be available to your users.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2085688","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2.updates.3~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_officeexperiencesdownloadingcontent_1","displayName":"Enabled","description":null,"helpText":null}]},"dd1351e306668ee9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_l_broadcastservicemajorversion3","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"dda4fc5d6921b50f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_queryinstanceslimit_l_queryinstanceslimitdecimal","displayName":"Query instances limit (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":null},"dd1b6457cf2b19f5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_promptforsendingrevieweddocumenttoauthor_l_empty395","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","categoryName":"Collaboration Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_promptforsendingrevieweddocumenttoauthor_l_empty395_2","displayName":"Never ask user","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_promptforsendingrevieweddocumenttoauthor_l_empty395_1","displayName":"Prompt for 'send for review'","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings_l_promptforsendingrevieweddocumenttoauthor_l_empty395_0","displayName":"Always prompt","description":null,"helpText":null}]},"dd3a03c3cf2222e4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework2_l_work2labelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"ddad0a05acddeb6d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_maori","displayName":"Maori (User)","description":"Enables the editing language Maori","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_maori_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_maori_1","displayName":"Enabled","description":null,"helpText":null}]},"dd89fe0b958108bd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_valencian","displayName":"Valencian (User)","description":"Enables the editing language Valencian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_valencian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_valencian_1","displayName":"Enabled","description":null,"helpText":null}]},"dd5aac8d568f4f22":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendtelemetry","displayName":"Configure the level of client software diagnostic data sent by Office to Microsoft (User)","description":"\r\n This policy setting allows you to configure the level of client software diagnostic data that is collected and sent to Microsoft about the Office client software running on the user's device.\r\n\r\n Client software diagnostic data is used to keep Office secure and up-to-date, detect, diagnose and remediate problems, and also make product improvements. This data does not include a user's name or email address, the content of the user's files, or information about apps unrelated to Office.\r\n\r\n If you enable this policy setting, you must choose which level of diagnostic data is sent to Microsoft. Your choices are Required, Optional, or Neither.\r\n\r\n If you choose Required, the minimum data needed to keep Office secure, up-to-date, and performing as expected on the device it's installed on is sent to Microsoft.\r\n\r\n If you choose Optional, additional data that helps make product improvements and provides enhanced information to help detect, diagnose, and remediate issues is sent to Microsoft. If you choose to send optional diagnostic data, required diagnostic data is also included.\r\n\r\n If you choose Neither, no diagnostic data about Office client software running on the user's device is sent to Microsoft. This option, however, significantly limits Microsoft's ability to detect, diagnose, and remediate problems that your users may encounter when using Office.\r\n\r\n If you disable or don't configure this policy setting, optional diagnostic data is sent to Microsoft.\r\n\r\n For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085687 ","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendtelemetry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_sendtelemetry_1","displayName":"Enabled","description":null,"helpText":null}]},"ddca0ec460ee7840":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_macroruntimescanscope","displayName":"Macro Runtime Scan Scope (User)","description":"This policy setting specifies for which documents the VBA Runtime Scan feature is enabled.\r\n\r\nIf the feature is disabled for all documents, no runtime scanning of enabled macros will be performed.\r\n\r\nIf the feature is enabled for low trust documents, the feature will be enabled for all documents for which macros are enabled except:\r\n\r\n - Documents opened while macro security settings are set to \"Enable All Macros\"\r\n\r\n - Documents opened from a Trusted Location\r\n\r\n - Documents that are Trusted Documents\r\n\r\n - Documents that contain VBA that is digitally signed by a Trusted Publisher\r\n\r\nIf the feature is enabled for all documents, then the above class of documents are not excluded from the behavior.\r\n\r\nThis protocol allows the VBA runtime to report to the Anti-Virus system certain high-risk code behaviors it is about to execute and allows the Anti-Virus to report back to the process if the sequence of observed behaviors indicates likely malicious activity so the Office application can take appropriate action.\r\n\r\nWhen this feature is enabled, affected VBA projects' runtime performance may be reduced.\r\n ","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_macroruntimescanscope_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_macroruntimescanscope_1","displayName":"Enabled","description":null,"helpText":null}]},"ddb7694e16e81b3a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel","displayName":"Set signature verification level (User)","description":"This policy setting allows you to set the verification level used by Office 2016 applications when validating a digital signature.\r\n\r\nNote: Enabling this policy setting is not recommended for subscription versions of Office, such as Office 365 ProPlus, because it will use the legacy registry based rules settings (described below) instead of basing the verification level on the Office version that signed the file.\r\n\r\nIf you enable this policy setting, you can set the verification level to any of the following:\r\n\r\n- No rules: Office 2016 digital signature rules are disabled.\r\n\r\n- Office 2007 rules: Office 2016 uses the Office 2007 digital signature rules.\r\n\r\n- Office 2010 rules: Office 2016 uses the Office 2010 digital signature rules.\r\n\r\n- Office 2013 rules: Office 2016 uses the Office 2013 digital signature rules.\r\n\r\nIf you disable or do not configure this policy setting, subscription versions of Office 2016 use the rules of the Office version that was used to sign the document to validate the digital signature.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_setsignatureverificationlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"dd1d5331d6462d6c":{"id":"user_vendor_msft_policy_config_office16v5~policy~l_microsoftofficesystem~l_securitysettings_l_authenticationfbabehavior_l_authenticationfbaenabledhostsid","displayName":"Specify hosts allowed to show form-based sign-in prompts to users: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"dd0f3f1ceea38e2f":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_noteflags_l_showdimmedtaggednotesinthetagssummarytaskpane","displayName":"Show dimmed tagged notes in the Tags Summary task pane (User)","description":"Checks/unchecks the option \"Show dimmed tagged notes in the Tags Summary task pane.\"","helpText":"","infoUrls":[],"categoryId":"4a7b0e92-ba43-46aa-96e8-c5839dbcb524","categoryName":"Note Flags","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_noteflags_l_showdimmedtaggednotesinthetagssummarytaskpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_noteflags_l_showdimmedtaggednotesinthetagssummarytaskpane_1","displayName":"Enabled","description":null,"helpText":null}]},"ddbdc14004d31de6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_addnewcategories_l_enternewcategoriessemicolondelimited","displayName":"Enter new categories (comma or semicolon delimited) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":null},"dd0bf8c101d37131":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeturnoffansi","displayName":"Exchange Unicode Mode - Turn off ANSI mode (User)","description":"This policy setting controls the creation of ANSI OST files.\r\n\r\nIf you enable or do not configure this policy setting, new ANSI OST files cannot be created.\r\n\r\nIf you disable this policy setting, all new OST files for an Outlook profile are created in ANSI format.\r\n\r\nProfiles with multiple Exchange accounts will always create Unicode OST files, regardless of this policy setting.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeturnoffansi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeturnoffansi_1","displayName":"Enabled","description":null,"helpText":null}]},"ddfc7739fe2062a4":{"id":"user_vendor_msft_policy_config_start_startlayout","displayName":"Start Layout (User)","description":"Important For more information, see Policy scope. Allows you to override the default Start layout and prevents the user from changing it. If both user and device policies are set, the user policy will be used. Apps pinned to the taskbar can also be changed with this policyFor further details on how to customize the Start layout, please see Customize and export Start layout and Configure Windows 10 taskbar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#startlayout"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":null},"ddbd774e2848958b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_l_datecolon85","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"ddde755cd36562d6":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2000files","displayName":"Visio 2000-2002 Binary Drawings, Templates and Stencils (User)","description":"This policy setting allows you to determine whether users can open or save Visio files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked: Both opening and saving of the file type will be blocked.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"75f9bfd8-8ee2-47b0-b080-a4d179724ca8","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2000files_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio2000files_1","displayName":"Enabled","description":null,"helpText":null}]},"dd6b0fea27462eaa":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_translationdirection_l_translationdirection96","displayName":"Translation direction (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7bee4dea-82a4-4a03-b903-654b374819b1","categoryName":"Chinese Conversion | Convert with Options","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_translationdirection_l_translationdirection96_2052","displayName":"Traditional Chinese to Simplified Chinese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_reviewtab~l_reviewchinesetranslation_l_translationdirection_l_translationdirection96_1028","displayName":"Simplified Chinese to Traditional Chinese","description":null,"helpText":null}]},"ddcb7309108b55f7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_promptbeforesavingnormaltemplate","displayName":"Prompt before saving Normal template (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_promptbeforesavingnormaltemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_promptbeforesavingnormaltemplate_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/de.json b/public/intune-definitions/de.json new file mode 100644 index 000000000000..dfdea3254831 --- /dev/null +++ b/public/intune-definitions/de.json @@ -0,0 +1 @@ +{"deab55c07b2f3e53":{"id":"ade_setupassistant_locationservices","displayName":"Location services","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_locationservices_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_locationservices_1","displayName":"Show","description":null,"helpText":null}]},"de89ef59abfc5a51":{"id":"ade_setupassistant_restore","displayName":"Restore","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_restore_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_restore_1","displayName":"Show","description":null,"helpText":null}]},"deeab297e3408e42":{"id":"com.apple.extensiblesso_extensiondata_domainrealmmapping_realm_kerberos","displayName":"Realm (Deprecated)","description":"The key should be the name of the realm, and the value is an array of DNS suffixes that map to the realm.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"ded0082952d16b63":{"id":"com.apple.managedclient.preferences_allowbackforwardcacheforcachecontrolnostorepageenabled","displayName":"Allow pages with Cache-Control: no-store header to enter back/forward cache","description":"This policy controls if a page with Cache-Control: no-store header can be stored in back/forward cache. The website setting this header may not expect the page to be restored from back/forward cache since some sensitive information could still be displayed after the restoration even if it is no longer accessible.\n\nIf you enable or don't configure this policy, the page with Cache-Control: no-store header might be restored from back/forward cache unless the cache eviction is triggered (e.g. when there is HTTP-only cookie change to the site).\n\nIf you disable this policy, the page with Cache-Control: no-store header will not be stored in back/forward cache.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowbackforwardcacheforcachecontrolnostorepageenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_allowbackforwardcacheforcachecontrolnostorepageenabled_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowbackforwardcacheforcachecontrolnostorepageenabled_true","displayName":"Allowed","description":null,"helpText":null}]},"def8444da079b33b":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver","displayName":"Update channel override (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"de0cb1d3ec172a05":{"id":"com.apple.systemconfiguration_proxies_rtspport","displayName":"RTSP Port","description":"The streaming proxy port.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"dedf9f6d70ccc5e7":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"deed3676c1242f04":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpagelocation","displayName":"Configure the new tab page URL","description":"Configures the default URL for the new tab page.\n\nThe recommended version of this policy doesn't currently work and functions exactly like the mandatory version.\n\nThis policy determines the page that opens when new tabs are created (including when new windows are opened). It also affects the startup page if this page opens to the new tab page.\n\nThis policy doesn't determine which page opens on startup; that factor is controlled by the \"RestoreOnStartup\" policy. It also doesn't affect the home page if this home page opens to the new tab page.\n\nIf you don't configure this policy, the default new tab page is used.\n\nIf you configure this policy *and* the \"NewTabPageSetFeedType\" policy, this policy takes precedence.\n\nIf a blank tab is preferred, \"about:blank\" is the correct URL to use, not \"about://blank\".\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or joined to instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"de7f479b87cdff36":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showpdfdefaultrecommendationsenabled","displayName":"Allow notifications to set Microsoft Edge as default PDF reader","description":"This policy setting lets you decide whether employees should receive recommendations to set Microsoft Edge as PDF handler.\n\nIf you enable or don't configure this setting, employees receive recommendations from Microsoft Edge to set itself as the default PDF handler.\n\nIf you disable this setting, employees can't receive any notifications from Microsoft Edge to set itself as the default PDF handler.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showpdfdefaultrecommendationsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showpdfdefaultrecommendationsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"de8982eac5487a48":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webselectenabled","displayName":"Web Select Enabled (Obsolete)","description":"This policy is obsoleted because Web Select is part of Web Capture and can be controlled by \"WebCaptureEnabled\". This policy doesn't work in Microsoft Edge version 117. If Web Capture is disabled by \"WebCaptureEnabled\", Web select won't be available in Web Capture.\n\nWeb select lets users select and copy web content while preserving its formatting when pasted in most cases. It also allows more targeted selection on some web elements, such as copying a single column in a table.\n\nIf you enable or don't configure this policy, Web select is available in Web Capture and can be accessed directly using the CTRL+SHIFT+X keyboard shortcut.\n\nIf you disable this policy, Web select won't be available in Web Capture and the CTRL+SHIFT+X keyboard shortcut will also not work.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.webselectenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webselectenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"dea25ab7e249203a":{"id":"device_vendor_msft_bitlocker_identificationfield_secidentificationfield","displayName":"Allowed BitLocker identification field:","description":"","helpText":"","infoUrls":[],"categoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","categoryName":"BitLocker Drive Encryption","options":null},"de513d656991784c":{"id":"device_vendor_msft_policy_config_admx_eventforwarding_forwarderresourceusage_maxforwardingrate","displayName":"The maximum forwarding rate ( events/sec ) allowed for the forwarder:","description":null,"helpText":"","infoUrls":[],"categoryId":"c859dc1a-fdeb-4591-af97-79d078ee715b","categoryName":"Event Forwarding","options":null},"de6a908b15d43b46":{"id":"device_vendor_msft_policy_config_admx_filesys_disablecompression","displayName":"Do not allow compression on all NTFS volumes","description":"Compression can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of compressed files. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filesys#admx-filesys-disablecompression"],"categoryId":"bb54b081-5004-4f05-a46c-f5b948f57b82","categoryName":"NTFS","options":[{"id":"device_vendor_msft_policy_config_admx_filesys_disablecompression_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_filesys_disablecompression_1","displayName":"Enabled","description":null,"helpText":null}]},"de31dccdc649f58c":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_extensions","displayName":"Extension Exclusions","description":"This policy setting allows you specify a list of file types that should be excluded from scheduled, custom, and real-time scanning. File types should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of the file type extension (such as \"obj\" or \"lib\"). The value is not used and it is recommended that this be set to 0.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-exclusions-extensions"],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_extensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_extensions_1","displayName":"Enabled","description":null,"helpText":null}]},"de494f98dfb9642e":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_assignaturedue","displayName":"Define the number of days before spyware security intelligence is considered out of date","description":"This policy setting allows you to define the number of days that must pass before spyware security intelligence is considered out of date. If security intelligence is determined to be out of date, this state may trigger several additional actions, including falling back to an alternative update source or displaying a warning icon in the user interface. By default, this value is set to 7 days.\r\n\r\n If you enable this setting, spyware security intelligence will be considered out of date after the number of days specified have passed without an update.\r\n\r\n If you disable or do not configure this setting, spyware security intelligence will be considered out of date after the default number of days have passed without an update.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-signatureupdate-assignaturedue"],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_assignaturedue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_assignaturedue_1","displayName":"Enabled","description":null,"helpText":null}]},"de54c182b4ddbfba":{"id":"device_vendor_msft_policy_config_admx_power_dcstartmenubuttonaction_2_selectdcstartmenubuttonaction","displayName":"User Interface Sleep Button Action","description":null,"helpText":"","infoUrls":[],"categoryId":"5d03766c-9480-43f2-9e85-461a44c821d4","categoryName":"Button Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcstartmenubuttonaction_2_selectdcstartmenubuttonaction_0","displayName":"Sleep","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcstartmenubuttonaction_2_selectdcstartmenubuttonaction_1","displayName":"Hibernate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcstartmenubuttonaction_2_selectdcstartmenubuttonaction_2","displayName":"Shut down","description":null,"helpText":null}]},"deaa70b6b5a6e9a2":{"id":"device_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_2","displayName":"Removable Disks: Deny read access","description":"This policy setting denies read access to removable disks.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removabledisks-denyread-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"de82d66ed7cb55f3":{"id":"device_vendor_msft_policy_config_admx_tabletshell_disablejournal_2","displayName":"Do not allow Windows Journal to be run","description":"Prevents start of Windows Journal.\r\n\r\nIf you enable this policy, the Windows Journal accessory will not run.\r\n\r\nIf you disable this policy, the Windows Journal accessory will run.\r\n\r\nIf you do not configure this policy, the Windows Journal accessory will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablejournal-2"],"categoryId":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","categoryName":"Accessories","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_disablejournal_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_disablejournal_2_1","displayName":"Enabled","description":null,"helpText":null}]},"de315ccf65bba721":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2","displayName":"Remove Microsoft Store apps with dynamic list","description":"Removes Default Microsoft Store packages from the system.\r\n\r\nIf you enable this policy, the selected Microsoft Store apps in the provided list will be uninstalled from the system. You can make adjustments to the default settings.\r\n\r\nUnselected apps in the list will not be removed.\r\n\r\n* This is a headless app (no UI)\r\n\r\n** This app is the default handler for a common file type or protocol. Removing this app might result in a degraded user experience. We do not recommend removing this app.\r\n\r\nIf you enable this policy, you can also remove an app by entering the app's package family name(e.g., Microsoft.WindowsCalculator_8wekyb3d8bbwe) in the dynamic list under \"Specify additional package family names to remove.\".\r\n\r\nIf this policy is enabled, reinstallation of a previously removed app requires de-selecting the app from the provided list or removing the app's package family name from the dynamic list.\r\n\r\nYou cannot remove Windows System components via the dynamic app removal list.\r\n\r\nValidation of package family names in the dynamic app removal list occurs upon user login, not at policy configuration time.\r\n\r\nDefault is 'disabled' (key not present).\r\n\r\nIf the policy is disabled or not configured, no Default apps will be removed from the system.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-removedefaultmicrosoftstorepackages-2"],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_1","displayName":"Enabled","description":null,"helpText":null}]},"de09a14ec2d7ee77":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_outlookforwindows","displayName":"Outlook for Windows","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_outlookforwindows_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_outlookforwindows_1","displayName":"True","description":null,"helpText":null}]},"dea69a5b92b6257f":{"id":"device_vendor_msft_policy_config_applicationmanagement_restrictapptosystemvolume","displayName":"Restrict App To System Volume","description":"Specifies whether the installation of applications is restricted to the system drive. Most restricted value is 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#restrictapptosystemvolume"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_restrictapptosystemvolume_0","displayName":"Disabled","description":"Not restricted.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_restrictapptosystemvolume_1","displayName":"Enabled","description":"Restricted.","helpText":null}]},"deeabca9649a22ac":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_publishing_refresh_options","displayName":"Global Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_global_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"de1b5bebce06c681":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowpackagesourceroot","displayName":"Package Source Root","description":"Overrides source location for downloading package content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingallowpackagesourceroot"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowpackagesourceroot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingallowpackagesourceroot_1","displayName":"Enabled","description":null,"helpText":null}]},"de16726adf60da80":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin","displayName":"Enable force sign in for Google Chrome","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},"de198db1e235a9ae":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled","displayName":"Enable Live Caption","description":"Enable the Live Caption feature.\r\n\r\nIf this policy is set to Enabled, Live Caption will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Caption will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Caption is disabled initially but can be enabled by the user anytime.","helpText":"","infoUrls":[],"categoryId":"d9432f48-3072-4171-9031-4ebead394151","categoryName":"Accessibility settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"de916600e3c2da1e":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domonthlyuploaddatacap","displayName":"DO Monthly Upload Data Cap","description":"Specifies the maximum bytes in GB that Delivery Optimization is allowed to upload to Internet peers in each calendar month.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domonthlyuploaddatacap"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"de198b3ab5a35287":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming","displayName":"Search Roaming","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Search Roam setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Search\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming_1","displayName":"Enabled","description":null,"helpText":null}]},"dec1dbee3c7e9cdd":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer","displayName":"Allow VBScript to run in Internet Explorer","description":"This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer.\n\nIf you selected Enable in the drop-down box, VBScript can run without user intervention.\n\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run.\n\nIf you selected Disable in the drop-down box, VBScript is prevented from running.\n\nIf you do not configure or disable this policy setting, VBScript is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowvbscripttorunininternetexplorer"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"de16e0c38ce70023":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowautomaticpromptingforfiledownloads"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"dea7e96c087887c7":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript","displayName":"Allow cut, copy or paste operations from the clipboard via script","description":"This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region.\n\nIf you enable this policy setting, a script can perform a clipboard operation.\n\nIf you select Prompt in the drop-down box, users are queried as to whether to perform clipboard operations.\n\nIf you disable this policy setting, a script cannot perform a clipboard operation.\n\nIf you do not configure this policy setting, a script cannot perform a clipboard operation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowcopypasteviascript"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_1","displayName":"Enabled","description":null,"helpText":null}]},"de0132157692c10a":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001","displayName":"Run .NET Framework-reliant components signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1","displayName":"Prompt","description":null,"helpText":null}]},"de8e65d491d6b9c2":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay","displayName":"Global Address Book Download Initial Delay","description":"\r\nWhen set, this will delay the initial download of the Global Address Book by a random number between 0 and the number of minutes specified after sign-in. When the value is 0, the download will begin immediately after sign-in. By default, the value is 60. This means that there will be a random delay between 0 and 60 minutes after sign-in before Lync begins to download the address book.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"dea98a0d1ee53d94":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability","displayName":"Control where developer tools can be used","description":"Control where developer tools can be used.\r\n\r\nIf you set this policy to 'DeveloperToolsDisallowedForForceInstalledExtensions' (0, the default), users can access the developer tools and the JavaScript console in general, but not in the context of extensions installed by enterprise policy.\r\n\r\nIf you set this policy to 'DeveloperToolsAllowed' (1), users can access the developer tools and the JavaScript console in all contexts, including extensions installed by enterprise policy.\r\n\r\nIf you set this policy to 'DeveloperToolsDisallowed' (2), users can't access the developer tools or inspect website elements. Keyboard shortcuts and menu or context menu entries that open the developer tools or the JavaScript Console are disabled.\r\n\r\n* 0 = Block the developer tools on extensions installed by enterprise policy, allow in other contexts\r\n\r\n* 1 = Allow using the developer tools\r\n\r\n* 2 = Don't allow using the developer tools","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"deb6d4b1647f235d":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_automaticdownloadsallowedforurlsdesc","displayName":"Allow multiple automatic downloads in quick succession on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"decb2768014fccdb":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled","displayName":"Edge Wallet E-Tree Enabled","description":"The Edge Wallet E-Tree feature in Microsoft Edge allows users to plant a E-Tree for their own.\r\n\r\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\r\n\r\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"de3e63f5d0452b46":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls","displayName":"Allow Window Management permission on specified sites","description":"Lets you configure a list of site url patterns that specify sites which will automatically grant the window management permission. This extends the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy isn't configured for a site, then the policy from 'DefaultWindowManagementSetting' (Default Window Management permission setting) applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"de6125780e5ada46":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed","displayName":"Allow or deny screen capture","description":"If you enable this policy, or don't configure this policy, a web page can use screen-share APIs (for example, getDisplayMedia() or the Desktop Capture extension API) for a screen capture.\r\nIf you disable this policy, calls to screen-share APIs will fail. For example, if you're using a web-based online meeting, video or screen sharing will not work. However, this policy is not considered\r\n(and a site will be allowed to use screen-share APIs) if the site matches an origin pattern in any of the following policies:\r\n'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins),\r\n'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins),\r\n'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins),\r\n'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"defcad92e23e0509":{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled","displayName":"Force WebSQL in third-party contexts to be re-enabled (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 100.\r\n\r\nThis policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content when it's found to be incompatible with the change to disable WebSQL in third-party contexts. It doesn't work in Microsoft Edge after version 100.\r\n\r\nWebSQL in third-party contexts (for example, cross-site iframes) is off by default as of Microsoft Edge version 97 and was fully removed in version 101.\r\n\r\nIf you enable this policy, WebSQL in third-party contexts will be re-enabled.\r\n\r\nIf you disable this policy or don't configure it, WebSQL in third-party contexts will stay off.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"de2ffccba6ed857e":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winprojexe48","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winprojexe48_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winprojexe48_1","displayName":"True","description":null,"helpText":null}]},"de2725e85b4e5b17":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage_bandwidthspinbox","displayName":"Bandwidth: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"de2181e4a3cf6d03":{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_createdesktopshortcutmicrosoftedgecanary","displayName":"Prevent Desktop Shortcut creation upon install","description":"If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.\r\n\r\n If you don't configure this policy for a channel, the 'CreateDesktopShortcut default' policy configuration determines shortcut creation when Microsoft Edge is installed.","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_createdesktopshortcutmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_createdesktopshortcutmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"de6497860d3b989e":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_pathcolon19","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"de02f6a3e253dd41":{"id":"user_vendor_msft_policy_config_admx_explorer_alwaysshowclassicmenu","displayName":"Display the menu bar in File Explorer (User)","description":"This policy setting configures File Explorer to always display the menu bar.\r\n\r\nNote: By default, the menu bar is not displayed in File Explorer.\r\n\r\nIf you enable this policy setting, the menu bar will be displayed in File Explorer.\r\n\r\nIf you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer.\r\n\r\nNote: When the menu bar is not displayed, users can access the menu bar by pressing the 'ALT' key.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-alwaysshowclassicmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_explorer_alwaysshowclassicmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_explorer_alwaysshowclassicmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"de80f35970d652e3":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup","displayName":"Excel 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Excel 2016.\r\nMicrosoft Excel 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Excel 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Excel 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016excelbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"de8d737ac8130036":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled","displayName":"Enable desktop sharing in the omnibox and 3-dot menu (User)","description":"Setting the policy to True or leaving it unset lets users share or save the current webpage using actions provided by the desktop sharing hub. The sharing hub is accessed through either an omnibox icon or the 3-dot menu.\r\n\r\nSetting the policy to False removes the sharing icon from the omnibox and the entry from the 3-dot menu.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"de36fc920a78ae17":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_lensoverlaysettings","displayName":"Settings for the Lens Overlay feature (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_lensoverlaysettings_0","displayName":"Allow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_lensoverlaysettings_1","displayName":"Do not allow","description":null,"helpText":null}]},"de732fd403b1ed77":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_datecolon70","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"de80587f9cc25c25":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy","displayName":"Maximum number of concurrent connections to the proxy server (User)","description":"Specifies the maximum number of simultaneous connections to the proxy server.\r\n\r\nSome proxy servers can't handle a high number of concurrent connections per client - you can solve this by setting this policy to a lower value.\r\n\r\nThe value of this policy should be lower than 100 and higher than 6. The default value is 32.\r\n\r\nSome web apps are known to consume many connections with hanging GETs - lowering the maximum connections below 32 may lead to browser networking hangs if too many of these kind of web apps are open.\r\n\r\nIf you don't configure this policy, the default value (32) is used.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_1","displayName":"Enabled","description":null,"helpText":null}]},"deb6ffc1127a1ba1":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled","displayName":"Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge (User)","description":"This policy lets you manage whether the indicator User Interface (UI) for enhanced security mode is shown or not when ESM is turned on.\r\n\r\nIf you enable or don't configure this policy, the indicator UI is on.\r\n\r\nIf you disable this policy, the indicator UI is off.\r\n\r\nNote: If this policy is used, only the indicator User Interface experience is supressed - ESM is still turned on. For more information, see the 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) policy.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"de0e32c48a4fb07c":{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories","displayName":"Configure Web Content Filtering (User)","description":"You can configure this policy to block certain categories of URLs. Blocking a category prevents users in specified device groups from accessing URLs associated with the category.\r\n\r\nThe list of possible categories, their Category String, and their description are detailed at https://go.microsoft.com/fwlink/?linkid=2249965\r\n\r\nTo block a category, add the Category String of the category to the following List of blocked categories If you leave this policy unset or disable the policy, no URLs will be blocked.\r\n\r\nIf you want to block a specific URL without blocking an entire category, add the URL to the list of blocked URLs using the 'URLBlocklist' (Block access to a list of URLs) policy.\r\n\r\nIf you want a specific URL in a blocked category to be accessible, add the URL to the list of allowed URLs using the 'URLAllowlist' (Define a list of allowed URLs) policy.\r\n\r\nThis Web Content Filtering policy only works on Microsoft Edge on Windows 10 devices or above.\r\n\r\nPolicy options mapping:\r\n\r\n* chat (chat) = Chat\r\n\r\n* child_abuse_images (child_abuse_images) = Child Abuse Images\r\n\r\n* criminal_activity (criminal_activity) = Criminal Activity\r\n\r\n* download_sites (download_sites) = Download Sites\r\n\r\n* gambling (gambling) = Gambling\r\n\r\n* games (games) = Games\r\n\r\n* hacking (hacking) = Hacking\r\n\r\n* hate_and_intolerance (hate_and_intolerance) = Hate and Intolerance\r\n\r\n* illegal_drug (illegal_drug) = Illegal Drug\r\n\r\n* illegal_software (illegal_software) = Illegal Software\r\n\r\n* image_sharing (image_sharing) = Image Sharing\r\n\r\n* instant_messaging (instant_messaging) = Instant Messaging\r\n\r\n* nudity (nudity) = Nudity\r\n\r\n* peer_to_peer (peer_to_peer) = Peer to Peer\r\n\r\n* pornography_or_sexually_explicit (pornography_or_sexually_explicit) = Pornography or Sexually Explicit\r\n\r\n* professional_networking (professional_networking) = Professional Networking\r\n\r\n* self_harm (self_harm) = Self Harm\r\n\r\n* sex_education (sex_education) = Sex Education\r\n\r\n* social_networking (social_networking) = Social Networking\r\n\r\n* streaming_and_downloads (streaming_and_downloads) = Streaming Media and Downloads\r\n\r\n* tasteless (tasteless) = Tasteless\r\n\r\n* violence (violence) = Violence\r\n\r\n* weapons (weapons) = Weapons\r\n\r\n* web_based_email (web_based_email) = Web Based Email\r\n\r\n* none (none) = None\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\ngambling\r\nstreaming_and_downloads\r\ngames","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_1","displayName":"Enabled","description":null,"helpText":null}]},"debfd12d17e15574":{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled","displayName":"Allow pages to use the built-in AI APIs. (User)","description":"Use this policy to control whether websites can access the built-in AI APIs, including the LanguageModel API, Summarization API, Writer API, and Rewriter API.\r\n\r\nEnable this policy to allow pages to use the APIs. If you don’t configure this policy, the APIs are still allowed.\r\n\r\nDisable this policy to block access to the APIs. The APIs will return an error when used.\r\n\r\nFor more information, see https://github.com/webmachinelearning/writing-assistance-apis/blob/main/README.md.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"de97c4c57531eaf3":{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_serviceworkerautopreloadenabled","displayName":"Allow ServiceWorker to dispatch navigation requests without waiting for its startup (User)","description":"This policy controls whether Microsoft Edge enables the ServiceWorkerAutoPreload feature.\r\n\r\nWhen enabled or not configured, Microsoft Edge may initiate the main resource network request concurrently with the Service Worker bootstrap process. This can improve performance in scenarios where the Service Worker is not already running.\r\n\r\nIf you disable this policy, Microsoft Edge will wait to dispatch the navigation request until after the Service Worker has started.\r\n\r\nThis is a temporary policy and will be removed in version 144 of Microsoft Edge.\r\n\r\nFor more details on the feature, see https://github.com/WICG/service-worker-auto-preload.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_serviceworkerautopreloadenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_serviceworkerautopreloadenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"de6126c4fbae56c9":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended","displayName":"Default search provider URL for suggestions (User)","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user has entered so far.\r\n\r\nThis policy is optional. If you don't configure it, users won't see search suggestions; they will see suggestions from their browsing history and favorites.\r\n\r\nBing's suggest URL can be specified as:\r\n\r\n'{bing:baseURL}qbox?query={searchTerms}'.\r\n\r\nGoogle's suggest URL can be specified as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: https://search.contoso.com/suggest?q={searchTerms}","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"de9954b87088d778":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_autoopenallowedforurlsdesc","displayName":"URLs where AutoOpenFileTypes can apply (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"de3b2f89347f8c9e":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_maximplicitcachesize","displayName":"Set the max size of the Office Document Cache (User)","description":"This policy controls how large the user's Office Document Cache can be. It does not apply to explicitly cached files on \"OneDrive for Business Client\" and \"OneDrive (consumer) Client\".","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_maximplicitcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_maximplicitcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"deb61f130b6c7ea5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_igx_l_logfilemaximumsize_l_logfilemaximumsizepart","displayName":"Bytes: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"055293ad-c585-40c0-b66c-76ff5cc0a332","categoryName":"Microsoft Office SmartArt","options":null},"de395f3bafaf553f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_belarusian","displayName":"Belarusian (User)","description":"Enables the editing language Belarusian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_belarusian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_belarusian_1","displayName":"Enabled","description":null,"helpText":null}]},"de3f3572232e6de6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_latin","displayName":"Latin (User)","description":"Enables the editing language Latin","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_latin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_latin_1","displayName":"Enabled","description":null,"helpText":null}]},"dea385000fbac3af":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicserbia","displayName":"Serbian (Cyrillic, Serbia) (User)","description":"Enables the editing language \"Serbian (Cyrillic, Serbia)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicserbia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_serbiancyrillicserbia_1","displayName":"Enabled","description":null,"helpText":null}]},"de537fdb7caf24df":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishelsalvador","displayName":"Spanish (El Salvador) (User)","description":"Enables the editing language Spanish (El Salvador)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishelsalvador_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishelsalvador_1","displayName":"Enabled","description":null,"helpText":null}]},"deea2561e743365e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_l_pathcolon282","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"de3a0971156775e6":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin","displayName":"Automatically back up at this interval (min): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c02141e6-0725-4f6f-9138-83d10c6bc104","categoryName":"Backup","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_1","displayName":"1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_2","displayName":"2","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_3","displayName":"3","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_4","displayName":"4","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_5","displayName":"5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_10","displayName":"10","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_15","displayName":"15","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_30","displayName":"30","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_60","displayName":"60","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_120","displayName":"120","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_180","displayName":"180","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_240","displayName":"240","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_300","displayName":"300","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_360","displayName":"360","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_480","displayName":"480","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_720","displayName":"720","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_960","displayName":"960","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_1440","displayName":"1440","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_2880","displayName":"2880","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_4320","displayName":"4320","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_5760","displayName":"5760","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_7200","displayName":"7200","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_8640","displayName":"8640","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_10080","displayName":"10080","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_20160","displayName":"20160","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_30240","displayName":"30240","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_40320","displayName":"40320","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_50400","displayName":"50400","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_l_automaticallybackupatthisintervalmin_60480","displayName":"60480","description":null,"helpText":null}]},"de16790cd2c54a09":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]},"de1ebe167086470a":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc07_l_descriptioncolon34","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"de84d88bb06650ec":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize97_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"12f9c95a-3ff1-49ef-bc8e-8d2b5ef4b06e","categoryName":"Customizable Error Messages","options":null},"dea0bab21b039787":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_description","displayName":"Description","description":"Specifies the description of the rule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/df.json b/public/intune-definitions/df.json new file mode 100644 index 000000000000..a209eca3b87d --- /dev/null +++ b/public/intune-definitions/df.json @@ -0,0 +1 @@ +{"df5140a3463f0c04":{"id":"com.apple.applicationaccess_allowusbrestrictedmode","displayName":"Allow USB Restricted Mode","description":"If false, allows the device to always connect to USB accessories while locked. On macOS, allows new USB accessories to connect without authorization.\r\nRequires a supervised device. Available in iOS 11.4.1 and later and macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowusbrestrictedmode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowusbrestrictedmode_true","displayName":"True","description":null,"helpText":null}]},"dfaa4856317c9a32":{"id":"com.apple.applicationaccess.new_familycontrolsenabled","displayName":"Family Controls Enabled","description":"If true, enables app access restrictions.","helpText":null,"infoUrls":[],"categoryId":"f019963f-f4ed-4429-b6e3-babfb24c36a8","categoryName":"Parental Controls Application Restrictions","options":[{"id":"com.apple.applicationaccess.new_familycontrolsenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess.new_familycontrolsenabled_true","displayName":"True","description":null,"helpText":null}]},"df77400c252b2953":{"id":"com.apple.assetcache.managed_listenranges","displayName":"Listen Ranges","description":"The range of client IP addresses to serve.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"df9298e158b325ef":{"id":"com.apple.caldav.account_caldavhostname","displayName":"Cal DAV Host Name","description":"The server’s address.","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":null},"dfd24a8f4405dd03":{"id":"com.apple.carddav.account_carddavaccountdescription","displayName":"Card DAV Account Description","description":"The description of the account.","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":null},"df1f55fe2c821a99":{"id":"com.apple.dnssettings.managed_dnssettings_servername","displayName":"Server Name","description":"The hostname of a DNS-over-TLS server used to validate the server certificate, as defined in RFC 7858. If no ServerAddresses are provided, the hostname will be used to determine the server addresses. This key must be present only if the DNSProtocol is TLS.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":null},"df9dde6d67385ca4":{"id":"com.apple.dock_mineffect-immutable","displayName":"Minimize Effect Immutable","description":"If true, locks \"Minimize windows using.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_mineffect-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_mineffect-immutable_true","displayName":"True","description":null,"helpText":null}]},"dfcd364ea93f96db":{"id":"com.apple.extensiblesso_extensiondata_allowplatformssoauthfallback_kerberos","displayName":"Allow Platform SSO OAuth Fallback","description":"If `true` and `usePlatformSSOTGT` is `true`, the system allows the user to manually sign in. Available in macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_allowplatformssoauthfallback_kerberos_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_allowplatformssoauthfallback_kerberos_true","displayName":"Enabled","description":null,"helpText":null}]},"df725e47553f89c2":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance","displayName":"Weekday Allowance","description":"The weekday allowance settings.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"df6d03b6bd706dd5":{"id":"com.apple.managedclient.preferences_disablepersonalsync","displayName":"Disable personal accounts","description":"Blocks users from signing in and syncing files in personal OneDrive accounts. If this key is set after a user has set up sync with a personal account, the user will be signed out.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#disablepersonalsync"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_disablepersonalsync_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablepersonalsync_true","displayName":"True","description":null,"helpText":null}]},"df7e3f2ae3190db8":{"id":"com.apple.managedclient.preferences_officewebaddindisableomexcatalog","displayName":"Disable third-party store add-in catalog","description":"Prevent users from accessing and downloading third-party add-ins from the Microsoft store (affects Word, Excel, and PowerPoint).","helpText":null,"infoUrls":["https://learn.microsoft.com/deployoffice/mac/preferences-add-ins"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_officewebaddindisableomexcatalog_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_officewebaddindisableomexcatalog_true","displayName":"True","description":null,"helpText":null}]},"df8b98726108c8fa":{"id":"com.apple.managedclient.preferences_pinbrowseressentialstoolbarbutton","displayName":"Pin browser essentials toolbar button","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\n\nWhen the button is pinned, it will always appear on the toolbar.\n\nWhen the button isn't pinned, it will only appear when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\n\nIf you enable or don't configure this policy, the Browser essentials button will be pinned on the toolbar.\n\nIf you disable this policy, the Browser essentials button won't be pinned on the toolbar.\n\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#pinbrowseressentialstoolbarbutton"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_pinbrowseressentialstoolbarbutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_pinbrowseressentialstoolbarbutton_true","displayName":"Enabled","description":null,"helpText":null}]},"dfe07dd79e13e371":{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization","displayName":"Authorization","description":"The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization_0","displayName":"Allow","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization_1","displayName":"Deny","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization_2","displayName":"Allow Standard User To Set System Service","description":null,"helpText":null}]},"df4897513a675bab":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhomebutton","displayName":"Show Home button on toolbar","description":"Shows the Home button on Microsoft Edge's toolbar.\n\nEnable this policy to always show the Home button. Disable it to never show the button.\n\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhomebutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showhomebutton_true","displayName":"Enabled","description":null,"helpText":null}]},"dfbe6334e3eacdae":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignorewrongcertusage","displayName":"Wrong certificate usage","description":null,"helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignorewrongcertusage_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignorewrongcertusage_1","displayName":"True","description":null,"helpText":null}]},"df26b562f5bce248":{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefcredentialswhenntlmonly_allowdefcredentialswhenntlmonly_name","displayName":"Add servers to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":null},"df32c395d5a3a46c":{"id":"device_vendor_msft_policy_config_admx_diskdiagnostic_dfdalertpolicy_dfdalertpolicytitle","displayName":"Custom alert text","description":null,"helpText":"","infoUrls":[],"categoryId":"e3ca94a7-e506-4133-8fae-41931dc863a5","categoryName":"Disk Diagnostic","options":null},"df1b8837fdc49462":{"id":"device_vendor_msft_policy_config_admx_kdc_forestsearch_forestsearchlist","displayName":"Forests to Search","description":null,"helpText":"","infoUrls":[],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":null},"df04bd00fa8d1efa":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_rules_exploitguard_asr_rules_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","categoryName":"Attack Surface Reduction","options":null},"df1076aa8ae54133":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_scheduletime_signatureupdate_scheduletime","displayName":"Specify the time to check for security intelligence updates","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":null},"dfe9664e45844a28":{"id":"device_vendor_msft_policy_config_admx_msi_msi_maxpatchcachesize_msi_maxpatchcachesize","displayName":"Baseline file cache maximum size","description":null,"helpText":"","infoUrls":[],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":null},"df208e6b829882b5":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime","displayName":"MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds","description":"MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-keepalivetime"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_keepalivetime_1","displayName":"Enabled","description":null,"helpText":null}]},"df07102f8e6806e5":{"id":"device_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter","displayName":"Remove Notifications and Action Center","description":"This policy setting removes Notifications and Action Center from the notification area on the taskbar.\n\nThe notification area is located at the far right end of the taskbar and includes icons for current notifications and the system clock.\n\nIf this setting is enabled, Notifications and Action Center is not displayed in the notification area. The user will be able to read notifications when they appear, but they won’t be able to review any notifications they miss.\n\nIf you disable or do not configure this policy setting, Notification and Security and Maintenance will be displayed on the taskbar.\n\nA reboot is required for this policy setting to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-disablenotificationcenter"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter_1","displayName":"Enabled","description":null,"helpText":null}]},"df4f34ba65b4be66":{"id":"device_vendor_msft_policy_config_admx_tcpip_ip_stateless_autoconfiguration_limits_state","displayName":"Set IP Stateless Autoconfiguration Limits State","description":"This policy setting allows you to configure IP Stateless Autoconfiguration Limits.\r\n\r\nIf you enable or do not configure this policy setting, IP Stateless Autoconfiguration Limits will be enabled and system will limit the number of autoconfigured addresses and routes.\r\n\r\nIf you disable this policy setting, IP Stateless Autoconfiguration Limits will be disabled and system will not limit the number of autoconfigured addresses and routes.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-ip-stateless-autoconfiguration-limits-state"],"categoryId":"91789113-6339-4e96-8e1d-73a4dec4967f","categoryName":"Parameters","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_ip_stateless_autoconfiguration_limits_state_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_ip_stateless_autoconfiguration_limits_state_1","displayName":"Enabled","description":null,"helpText":null}]},"df2830c72a349dbc":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown","displayName":"Allow OpenSearch queries in File Explorer","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users cannot perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-restrictedlockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"df656182bcf8b449":{"id":"device_vendor_msft_policy_config_browser_configureadditionalsearchengines","displayName":"Configure Additional Search Engines","description":"Allows you to add up to 5 additional search engines for MDM-enrolled devices. If this setting is turned on, you can add up to 5 additional search engines for your employee. For each additional search engine you wish to add, you must specify a link to the OpenSearch XML file that contains, at minimum, the short name and the URL to the search engine. This policy does not affect the default search engine. Employees will not be able to remove these search engines, but they can set any one of these as the default. If this setting is not configured, the search engines are the ones specified in the App settings. If this setting is disabled, the search engines you had added will be deleted from your employee's machine. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configureadditionalsearchengines"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"dfe380315ca7ea85":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls","displayName":"Block images on these sites","description":"Setting the policy lets you set a list of URL patterns that specify sites that can't display images.\r\n\r\nLeaving the policy unset means DefaultImagesSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\n For detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\n Note that previously this policy was erroneously enabled on Android, but this functionality has never been fully supported on Android.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"dff2dd23d8212927":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger","displayName":"Password protection warning trigger (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_2","displayName":"Password protection warning is triggered by password reuse on phishing page","description":null,"helpText":null}]},"df4b41693af5d14b":{"id":"device_vendor_msft_policy_config_connectivity_allowconnecteddevices","displayName":"Allow Connected Devices","description":"Note This policy requires reboot to take effect. Allows IT Admins the ability to disable the Connected Devices Platform (CDP) component. CDP enables discovery and connection to other devices (either proximally with BT/LAN or through the cloud) to support remote app launching, remote messaging, remote app sessions, and other cross-device experiences.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowconnecteddevices"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowconnecteddevices_0","displayName":"Block","description":"Disable (CDP service not available).","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowconnecteddevices_1","displayName":"Allow","description":"Allow (CDP service available).","helpText":null}]},"df4d2019217ed33f":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptlets"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"df3ca8ee18eb4d9f":{"id":"device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail.\n\nIf you enable this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail.\n\nIf you disable this policy setting, applications can use the MK protocol API. Resources hosted on the MK protocol will work for the File Explorer and Internet Explorer processes.\n\nIf you do not configure this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-mkprotocolsecurityrestrictioninternetexplorerprocesses"],"categoryId":"853d5a82-91e4-4c53-8338-fd1a3d9b542c","categoryName":"MK Protocol Security Restriction","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"df768240b70ae700":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch","displayName":"Enforce Bing SafeSearch","description":"Ensure that queries in Bing web search are done with SafeSearch set to the value specified. Users can't change this setting.\r\n\r\nIf you configure this policy to \"Off\", SafeSearch in Bing search falls back to the bing.com value.\r\n\r\nIf you configure this policy to \"Moderate\", the moderate setting is used in SafeSearch. The moderate setting filters adult videos and images but not text from search results.\r\n\r\nIf you configure this policy to \"Strict\", the strict setting in SafeSearch is used. The strict setting filters adult text, images, and videos.\r\n\r\nIf you disable this policy or don't configure it, SafeSearch in Bing search isn't enforced, and users can set the value they want on bing.com.\r\n\r\n* 0 = Don't configure search restrictions in Bing\r\n\r\n* 1 = Configure moderate search restrictions in Bing\r\n\r\n* 2 = Configure strict search restrictions in Bing","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},"df501e306b4534e6":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_2","displayName":"Denies the Local Fonts permission on all sites by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_3","displayName":"Ask every time a site wants to obtain the Local Fonts permission","description":null,"helpText":null}]},"df0ef66253ae7bf1":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl","displayName":"Set the proxy .pac file URL","description":"Specifies the URL for a proxy auto-config (PAC) file.\r\n\r\nThis policy is applied only if you selected 'Use a .pac proxy script' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, you can specify the URL for a PAC file, which defines how the browser automatically chooses the appropriate proxy server for fetching a particular website.\r\n\r\nIf you disable or don't configure this policy, no PAC file is specified. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: https://internal.contoso.com/example.pac","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_1","displayName":"Enabled","description":null,"helpText":null}]},"df28608e363f6055":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_inprivatemodeurlallowlist_inprivatemodeurlallowlistdesc","displayName":"Allow access to a list of URLs in InPrivate mode. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"dfa4169b816f5ea9":{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability","displayName":"Touch Keyboard Wide Mode Availability","description":"Specifies whether the wide keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the wide keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardwidemodeavailability"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability_1","displayName":"Wide keyboard is always available.","description":"Wide keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability_2","displayName":"Wide keyboard is always disabled.","description":"Wide keyboard is always disabled.","helpText":null}]},"dfbdc6a9f170b084":{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots","displayName":"[Deprecated] Set Maximum Storage Space For Recall Snapshots (Windows Insiders only)","description":"This policy setting allows you to control the maximum amount of disk space that can be used by Windows to save snapshots for Recall. The default value of '0' will let the OS configure the amount of storage allocated to snapshots. When the default value of '0' is used, the OS configures the storage allocation for snapshots based on the device storage capacity. 25 GB is allocated when the device storage capacity is 256 GB. 75 GB is allocated when the device storage capacity is 512 GB. 150 GB is allocated when the device storage capacity is 1 TB or higher.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragespaceforrecallsnapshots"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_0","displayName":"Let the OS define the maximum storage amount based on hard drive storage size","description":"Let the OS define the maximum storage amount based on hard drive storage size","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_10000","displayName":"10GB","description":"10GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_25000","displayName":"25GB","description":"25GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_50000","displayName":"50GB","description":"50GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_75000","displayName":"75GB","description":"75GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_100000","displayName":"100GB","description":"100GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_150000","displayName":"150GB","description":"150GB","helpText":null}]},"dfe12512b705d9d0":{"id":"intelligencesettings_apps_mail_allowsmartreplies","displayName":"Allow Smart Replies","description":"If `false`, disables Mail Smart Replies.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_apps_mail_allowsmartreplies_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_apps_mail_allowsmartreplies_true","displayName":"True","description":null,"helpText":null}]},"dfebad758ea2fd46":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_lbl_nopinfileslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"dfe0f78fca65bbd1":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup","displayName":"Excel 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Excel 2013.\r\nMicrosoft Excel 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Excel 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Excel 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013excelbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"df7de37bb6ae5515":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"df86689ae07f9ce9":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_thirdpartyblockingenabled","displayName":"Enable third party software injection blocking (User)","description":"Setting the policy to Enabled or leaving it unset prevents third-party software from injecting executable code into Google Chrome's processes.\r\n\r\nSetting the policy to Disabled allows this software to inject such code into Google Chrome's processes.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_thirdpartyblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_thirdpartyblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"df0674262c208e80":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls","displayName":"Allow read access via the File System API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nLeaving the policy unset means DefaultFileSystemReadGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with FileSystemReadBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"df629202b5b481bc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls","displayName":"Allow notifications on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can display notifications.\r\n\r\nLeaving the policy unset means DefaultNotificationsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"df879340501e4f9d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix","displayName":"Configure the TalkGadget prefix for remote access hosts (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_1","displayName":"Enabled","description":null,"helpText":null}]},"dfcacc4d0c52c3ee":{"id":"user_vendor_msft_policy_config_internetexplorer_disableproxychange","displayName":"Prevent changing proxy settings (User)","description":"This policy setting specifies if a user can change proxy settings.\n\nIf you enable this policy setting, the user will not be able to configure proxy settings.\n\nIf you disable or do not configure this policy setting, the user can configure proxy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableproxychange"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableproxychange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableproxychange_1","displayName":"Enabled","description":null,"helpText":null}]},"df0241bc4ceaba98":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowaccesstodatasources"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"dfd347e69a428db8":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"df9b3d23843e23fa":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls","displayName":"Allow Local Fonts permission on these sites (User)","description":"Specifies a list of site URL patterns for which the local fonts permission is automatically granted. Sites in this list can access information about local fonts.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are supported. This policy matches based on origin only; any path in the URL pattern is ignored.\n\nIf a site isn't included in this policy, the 'DefaultLocalFontsSetting' (Default Local Fonts permission setting) policy applies if configured. Otherwise, the browser default behavior applies, and users can choose the permission on a per-site basis.\n\nExample value:\n\nhttps://www.example.com\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"df6d15c346031687":{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins","displayName":"Allow screen capture without prior user gesture (User)","description":"For security reasons, the\r\ngetDisplayMedia() web API requires\r\na prior user gesture (\"transient activation\") to be called or the API will\r\nfail.\r\n\r\nWhen this policy is configured, admins can specify origins on which this API\r\ncan be called without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, see\r\nhttps://go.microsoft.com/fwlink/?linkid=2095322. Note: * is not an accepted\r\nvalue for this policy.\r\n\r\nIf this policy is not configured, all origins require a prior user gesture to\r\ncall this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"df48934544fdd943":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkadd","displayName":"Replace AD - Work Address (User)","description":"This policy setting allows you to customize the 13th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"work address\" of line 13.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 13 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkadd_1","displayName":"Enabled","description":null,"helpText":null}]},"dff60ecd2ff328ac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceother_l_otherlabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"df6b4562bb2b0a7a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacemobile","displayName":"Replace MAPI - Mobile (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"mobile phone\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"mobile phone\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacemobile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacemobile_1","displayName":"Enabled","description":null,"helpText":null}]},"df06435f567a3a25":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicsyria","displayName":"Arabic (Syria) (User)","description":"Enables the editing language Arabic (Syria)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicsyria_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicsyria_1","displayName":"Enabled","description":null,"helpText":null}]},"df5ec058075830bc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_l_allowsubfolders305","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_l_allowsubfolders305_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_l_allowsubfolders305_1","displayName":"True","description":null,"helpText":null}]},"df8032f3e9c8ddd1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc05_l_allowsubfolders05","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc05_l_allowsubfolders05_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc05_l_allowsubfolders05_1","displayName":"True","description":null,"helpText":null}]},"dfa87de68c60ada9":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_allowedcomaddins_l_allowedcomaddinslist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"df25506580d73dfc":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_blockmotwmacrointrustedorsigned","displayName":"Block all internet macros (ignore trusted locations or publishers) (User)","description":"This policy setting removes the trusted location and trusted publisher exceptions for files downloaded from the internet with Mark of the Web (MOTW).\r\n\r\nBy default, Office blocks macros from the internet but allows exceptions for files that are either in trusted locations or signed by trusted publishers.\r\n\r\nIf you enable this policy setting, all macros in files downloaded from the internet will be blocked, including those in trusted locations or signed by trusted publishers. This provides maximum protection against internet-based macro threats.\r\n\r\nIf you disable or don't configure this policy setting, the default behavior applies where macros from the internet are blocked except when the file is in a trusted location or signed by a trusted publisher.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_blockmotwmacrointrustedorsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_blockmotwmacrointrustedorsigned_1","displayName":"Enabled","description":null,"helpText":null}]},"df491798210d9cfc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_tasksfolderhomepage_l_urladdressofassociatedwebpage67","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"dfc86d4b99579eb4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning","displayName":"Signature Warning (User) (Deprecated)","description":"This policy setting controls how Outlook warns users about messages with invalid digital signatures.\r\n\r\nIf you enable this policy setting, you can choose from three options for controlling how Outlook users are warned about invalid signatures:\r\n\r\n- Let user decide if they want to be warned. This option enforces the default configuration.\r\n- Always warn about invalid signatures.\r\n- Never warn about invalid signatures.\r\n\r\nIf you disable or do not configure this policy setting, if users open e-mail messages that include invalid digital signatures, Outlook displays a warning dialog. Users can decide whether they want to be warned about invalid signatures in the future.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_1","displayName":"Enabled","description":null,"helpText":null}]},"df9d5c2872eb1633":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists","displayName":"Retrieving CRLs (Certificate Revocation Lists) (User) (Deprecated)","description":"This policy setting controls how Outlook retrieves Certificate Revocation Lists to verify the validity of certificates.Certificate revocation lists (CRLs) are lists of digital certificates that have been revoked by their controlling certificate authorities (CAs), typically because the certificates were issued improperly or their associated private keys were compromised. \r\n\r\nIf you enable this policy setting, you can choose from three options to govern how Outlook uses CRLs: \r\n\r\n- Use system Default. Outlook relies on the CRL download schedule that is configured for the operating system. \r\n- When online always retrieve the CRL. This option is the default configuration in Outlook. \r\n- Never retrieve the CRL. Outlook will not attempt to download the CRL for a certificate, even if it is online. This option can reduce security. \r\n\r\nIf you disable or do not configure this policy setting, when Outlook handles a certificate that includes a URL from which a CRL can be downloaded, Outlook will retrieve the CRL from the provided URL if Outlook is online.","helpText":"","infoUrls":[],"categoryId":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","categoryName":"Signature Status dialog box","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography~l_signaturestatusdialog_l_retrievingcrlscertificaterevocationlists_1","displayName":"Enabled","description":null,"helpText":null}]},"df672e5b63c1d66f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbookpromptbeforedownloadingfulloab","displayName":"Offline Address Book: Prompt before Downloading Full OAB (User)","description":"Specifies that the user is asked for permission before initiating a full download of the offline address book.","helpText":"","infoUrls":[],"categoryId":"e35a83ff-7c5b-48d4-9ba3-a57849c6b5f5","categoryName":"Offline Address Book","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbookpromptbeforedownloadingfulloab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_offlineaddressbook_l_offlineaddressbookpromptbeforedownloadingfulloab_1","displayName":"Enabled","description":null,"helpText":null}]},"df57bcf313022348":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks","displayName":"Weeks (User)","description":"Sets the label for weeks.\r\n\r\nIf you enable this setting, weeks are displayed with the specified label.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjweeks_1","displayName":"Enabled","description":null,"helpText":null}]},"dfafb40dc0dfda41":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"dfc784d9c75a6a44":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacro","displayName":"Developer tab (User)","description":"","helpText":"","infoUrls":[],"categoryId":"441d6cc4-e51f-453e-a44d-8394509415be","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacro_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacro_1","displayName":"True","description":null,"helpText":null}]},"df19803edfd6199f":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio50andearlierfiles_l_visio50andearlierfilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"75f9bfd8-8ee2-47b0-b080-a4d179724ca8","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio50andearlierfiles_l_visio50andearlierfilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter~l_fileblocksettings_l_visio50andearlierfiles_l_visio50andearlierfilesdropid_2","displayName":"Open/Save blocked","description":null,"helpText":null}]},"df4ec4916cf4212b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_donotautomaticallymergeserverandlocaldocument","displayName":"Do not automatically merge server and local document (User)","description":"This policy setting determines if changes made to a server document should be automatically merged with the locally-cached copy of the document on the next save. This policy pertains to the co-authoring experience in Word.\r\n\r\nIf you enable this policy setting, then changes made to a server document will not be automatically merged with the locally-cached copy of the document on the next save. \r\n\r\nIf you disable or do not configure this policy setting, then changes made to a server document will be automatically merged with the locally-cached copy of the document on the next save.","helpText":"","infoUrls":[],"categoryId":"e522c142-5666-4090-a7f4-1da1487f5384","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_donotautomaticallymergeserverandlocaldocument_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_donotautomaticallymergeserverandlocaldocument_1","displayName":"Enabled","description":null,"helpText":null}]},"df29b042c63bc837":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_boldand_italic_withrealformatting","displayName":"*Bold* and _italic_ with real formatting (User)","description":"This policy setting allows you to set the \"*Bold* and _italic_ with real formatting\" option.\r\n\r\nIf you enable this policy setting, you will set the the \"*Bold* and _italic_ with real formatting\" option in File | Options | Proofing | AutoCorrect Options... | AutoFormat.\r\n\r\nIf you disable or do not configure this policy setting, the option is not set.","helpText":"","infoUrls":[],"categoryId":"b6cafb2c-81be-40cf-90d8-788f713f7099","categoryName":"Replace as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_boldand_italic_withrealformatting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_replaceasyoutype_l_boldand_italic_withrealformatting_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e0.json b/public/intune-definitions/e0.json new file mode 100644 index 000000000000..f710277fc59c --- /dev/null +++ b/public/intune-definitions/e0.json @@ -0,0 +1 @@ +{"e04f0099bbd1c989":{"id":"ade_setupassistant_appleid","displayName":"Apple ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_appleid_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_appleid_1","displayName":"Show","description":null,"helpText":null}]},"e02b61338169db7b":{"id":"com.apple.applicationaccess_allowpasswordproximityrequests","displayName":"Allow Password Proximity Requests","description":"If false, disables requesting passwords from nearby devices. Requires a supervised device. Available in iOS 12 and later, and macOS 10.14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpasswordproximityrequests_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpasswordproximityrequests_true","displayName":"True","description":null,"helpText":null}]},"e0bbfc1fbdd95072":{"id":"com.apple.directoryservice.managed_admapggidattribute","displayName":"AD Map GGID Attribute","description":"The map group GID to attribute.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"e0fdb233b9b5922f":{"id":"com.apple.extensiblesso_platformsso_tokentousermapping_fullname","displayName":"Full Name","description":"The claim name to use for the user's full name.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"e00ce3f6ed4a15fe":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew","displayName":"Weekday Curfew","description":"The weekday curfew settings.","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":null},"e075360a21c657de":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"e0e9788ac9a9415a":{"id":"com.apple.managedclient.preferences_disableauthnegotiatecnamelookup","displayName":"Disable CNAME lookup when negotiating Kerberos authentication","description":"Determines whether the generated Kerberos SPN is based on the canonical DNS name (CNAME) or on the original name entered.\n\nIf you enable this policy, CNAME lookup is skipped and the server name (as entered) is used.\n\nIf you disable this policy or don't configure it, the canonical name of the server is used. This is determined through CNAME lookup.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#disableauthnegotiatecnamelookup"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_disableauthnegotiatecnamelookup_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableauthnegotiatecnamelookup_true","displayName":"Enabled","description":null,"helpText":null}]},"e046d51945feabf3":{"id":"com.apple.managedclient.preferences_disablerespondtomeetingwithoutresponse","displayName":"Disable 'Do not send response'","description":"Prevent users from selecting 'Do not send response' when replying to a meeting request.","helpText":null,"infoUrls":["https://learn.microsoft.com/deployoffice/mac/preferences-outlook#disable-do-not-send-a-response"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_disablerespondtomeetingwithoutresponse_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablerespondtomeetingwithoutresponse_true","displayName":"Enabled","description":null,"helpText":null}]},"e0f8af4aa2bbb646":{"id":"com.apple.managedclient.preferences_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled","description":"This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigations to HTTPS.\n\nIf this setting isn't set or is set to allowed, users are able to enable HTTPS-Only Mode.\nIf this setting is set to `disallowed`, users can't enable HTTPS-Only Mode.\nIf this setting is set to force_enabled, HTTPS-Only Mode is enabled in Strict mode and users can't disable it.\nIf this setting is set to force_balanced_enabled, HTTPS-Only Mode is enabled in Balanced mode and users can't disable it.\n\nIf you set this policy to a value that isn't supported by the version of Microsoft Edge that receives the policy, Microsoft Edge defaults to the allowed setting.\n\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\n\nPolicy options mapping:\n\n* allowed (allowed) = Don't restrict users' HTTPS-Only Mode setting\n\n* disallowed (disallowed) = Don't allow users to enable any HTTPS-Only Mode\n\n* force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode\n\n* force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#httpsonlymode"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_httpsonlymode_0","displayName":"Don't restrict users' HTTPS-Only Mode setting","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_httpsonlymode_1","displayName":"Don't allow users to enable any HTTPS-Only Mode","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_httpsonlymode_2","displayName":"Force enable HTTPS-Only Mode in Balanced Mode","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_httpsonlymode_3","displayName":"Force enable HTTPS-Only Mode in Strict mode","description":null,"helpText":null}]},"e0133553184221e6":{"id":"com.apple.tcc.configuration-profile-policy_services_microphone","displayName":"Microphone (deprecated)","description":"A system microphone. A profile can't grant access to the microphone; it can only deny it.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"e05f0e5cdfe40b95":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_staticcode","displayName":"Static Code","description":"If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_staticcode_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_staticcode_true","displayName":"True","description":null,"helpText":null}]},"e0110cc64df85966":{"id":"com.apple.xsan_com.apple.xsan","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"46af3391-ed6d-4ada-aef7-02dac2a1b136","categoryName":"Xsan","options":null},"e0d4bedccbd2a11d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled","displayName":"Configure auto discard sleeping tabs","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab needs to be reloaded.\n\nIf the \"SleepingTabsEnabled\" policy is enabled, then this feature is enabled by default.\n\nIf the \"SleepingTabsEnabled\" is disabled, then this feature is disabled by default and can't be enabled.\n\nIf enabled, idle background tabs will be discarded after 1.5 days.\n\nIf disabled, idle background tab won't be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e024a3e96cab48e8":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderkeyword","displayName":"Default search provider keyword","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\n\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.\n\nStarting in Microsoft Edge version 84, you can set this policy as a recommended policy. If the user set a default search provider, the default search provider configured by this recommended policy can't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"e05a8784ac13a777":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcloudusersitesreporting","displayName":"Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app","description":"This setting lets you enable reporting of sites that Microsoft Edge users add to their local IE Mode site list. The user must be signed in to Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant that the policy specifies.\n\nIf you configure this policy, Microsoft Edge sends a report to the Microsoft 365 Admin Center Site Lists app when a user adds a site to their local IE mode site list. The report shows the URL of the site the user added, minus any query string or fragment. The user's identity isn't reported.\n\nFor this reporting to work correctly, you must successfully visit the Microsoft Edge Site Lists app in the Microsoft 365 Admin Center at least once. This visit activates a per-tenant storage account used to store these reports. Microsoft Edge still attempts to send reports if this step isn't completed. However, the reports aren't stored in the Site Lists app.\n\nIf you enable this policy, you must specify your O365 tenant ID. To learn more about finding your O365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668.\n\nIf you disable or don't configure this policy, Microsoft Edge never sends reports about URLs added to a user's local site list to the Site Lists app.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"e0110ab07317a6ce":{"id":"com.microsoft.edge.mamedgeappconfigsettings.websqlnonsecurecontextenabled","displayName":"Force WebSQL in non-secure contexts to be enabled (Obsolete)","description":"This policy doesn't work because WebSQL in nonsecure contexts is on by default as of Microsoft Edge 105.\nIf you enable this policy, WebSQL in nonsecure contexts is enabled.\nIf you disable or don't configure this policy, WebSQL in nonsecure contexts follows the default settings of the browser.\n\nThis policy was removed in Microsoft Edge 113, and it's ignored if configured.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.websqlnonsecurecontextenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.websqlnonsecurecontextenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e0c18c06a5a0d4fd":{"id":"device_vendor_msft_bitlocker_systemdrivesencryptiontype","displayName":"Enforce drive encryption type on operating system drives","description":"This policy setting allows you to configure the encryption type used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. Changing the encryption type has no effect if the drive is already encrypted or if encryption is in progress. Choose full encryption to require that the entire drive be encrypted when BitLocker is turned on. Choose used space only encryption to require that only the portion of the drive used to store data is encrypted when BitLocker is turned on.\r\n\r\nIf you enable this policy setting the encryption type that BitLocker will use to encrypt drives is defined by this policy and the encryption type option will not be presented in the BitLocker setup wizard.\r\n\r\nIf you disable or do not configure this policy setting, the BitLocker setup wizard will ask the user to select the encryption type before turning on BitLocker.\r\n\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/BitLocker-csp/"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesencryptiontype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesencryptiontype_1","displayName":"Enabled","description":null,"helpText":null}]},"e0fb8fef26307631":{"id":"device_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_2","displayName":"Turn off Windows presentation settings","description":"This policy setting turns off Windows presentation settings.\r\n\r\nIf you enable this policy setting, Windows presentation settings cannot be invoked.\r\n\r\nIf you disable this policy setting, Windows presentation settings can be invoked. The presentation settings icon will be displayed in the notification area. This will give users a quick and easy way to configure their system settings before a presentation to block system notifications and screen blanking, adjust speaker volume, and apply a custom background image.\r\n\r\nNote: Users will be able to customize their system settings for presentations in Windows Mobility Center.\r\n\r\nIf you do not configure this policy setting, Windows presentation settings can be invoked.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings#admx-mobilepcpresentationsettings-presentationsettingsenable-2"],"categoryId":"751cf9ec-7214-4b38-a09e-24922684bd8f","categoryName":"Presentation Settings","options":[{"id":"device_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e01dce2901ff562c":{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_showsharedaccessui","displayName":"Prohibit use of Internet Connection Sharing on your DNS domain network","description":"Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service can run on the computer.\r\n\r\nICS lets administrators configure their system as an Internet gateway for a small network and provides network services, such as name resolution and addressing through DHCP, to the local private network.\r\n\r\nIf you enable this setting, ICS cannot be enabled or configured by administrators, and the ICS service cannot run on the computer. The Advanced tab in the Properties dialog box for a LAN or remote access connection is removed. The Internet Connection Sharing page is removed from the New Connection Wizard. The Network Setup Wizard is disabled.\r\n\r\nIf you disable this setting or do not configure it and have two or more connections, administrators can enable ICS. The Advanced tab in the properties dialog box for a LAN or remote access connection is available. In addition, the user is presented with the option to enable Internet Connection Sharing in the Network Setup Wizard and Make New Connection Wizard. (The Network Setup Wizard is available only in Windows XP Professional.)\r\n\r\nBy default, ICS is disabled when you create a remote access connection, but administrators can use the Advanced tab to enable it. When running the New Connection Wizard or Network Setup Wizard, administrators can choose to enable ICS.\r\n\r\nNote: Internet Connection Sharing is only available when two or more network connections are present.\r\n\r\nNote: When the \"Prohibit access to properties of a LAN connection,\" \"Ability to change properties of an all user remote access connection,\" or \"Prohibit changing properties of a private remote access connection\" settings are set to deny access to the Connection Properties dialog box, the Advanced tab for the connection is blocked.\r\n\r\nNote: Nonadministrators are already prohibited from configuring Internet Connection Sharing, regardless of this setting.\r\n\r\nNote: Disabling this setting does not prevent Wireless Hosted Networking from using the ICS service for DHCP services. To prevent the ICS service from running, on the Network Permissions tab in the network's policy properties, select the \"Don't use hosted networks\" check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-showsharedaccessui"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_showsharedaccessui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_networkconnections_nc_showsharedaccessui_1","displayName":"Enabled","description":null,"helpText":null}]},"e030d244706fae50":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_2","displayName":"Non-default server disconnect actions","description":"Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specified response, and the response specified in the \"Action on server disconnect\" setting.\r\n\r\nTo use this setting, click Show. In the Show Contents dialog box in the Value Name column box, type the server's computer name. Then, in the Value column box, type \"0\" if users can work offline when they are disconnected from this server, or type \"1\" if they cannot.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured for a particular server, the setting in Computer Configuration takes precedence over the setting in User Configuration. Both Computer and User configuration take precedence over a user's setting. This setting does not prevent users from setting custom actions through the Offline Files tab. However, users are unable to change any custom actions established via this setting.\r\n\r\nTip: To configure this setting without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click Advanced. This setting corresponds to the settings in the \"Exception list\" section.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-customgoofflineactions-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e09c2c65cbbab620":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_c","displayName":"Guaranteed service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Guaranteed service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 40 (0x28).\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypeguaranteed-c"],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_c_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_c_1","displayName":"Enabled","description":null,"helpText":null}]},"e020dc0422e9233f":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_2","displayName":"Allow .rdp files from valid publishers and user's default .rdp settings","description":"This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed the file with a valid certificate. A valid certificate is one that is issued by an authority recognized by the client, such as the issuers in the client's Third-Party Root Certification Authorities certificate store. This policy setting also controls whether the user can start an RDP session by using default .rdp settings (for example, when a user directly opens the Remote Desktop Connection [RDC] client without specifying an .rdp file).\r\n\r\nIf you enable or do not configure this policy setting, users can run .rdp files that are signed with a valid certificate. Users can also start an RDP session with default .rdp settings by directly opening the RDC client. When a user starts an RDP session, the user is asked to confirm whether they want to connect.\r\n\r\nIf you disable this policy setting, users cannot run .rdp files that are signed with a valid certificate. Additionally, users cannot start an RDP session by directly opening the RDC client and specifying the remote computer name. When a user tries to start an RDP session, the user receives a message that the publisher has been blocked.\r\n\r\nNote: You can define this policy setting in the Computer Configuration node or in the User Configuration node. If you configure this policy setting for the computer, all users on the computer are affected.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-allow-signed-files-2"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e0e408098c0831ef":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected","displayName":"End a disconnected session","description":null,"helpText":"","infoUrls":[],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_0","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_2_ts_sessions_enddisconnected_432000000","displayName":"5 days","description":null,"helpText":null}]},"e02fe21f72b72e33":{"id":"device_vendor_msft_policy_config_admx_tpm_osmanagedauth_name","displayName":"Configure the level of TPM owner authorization information available to the operating system","description":"This policy setting configures how much of the TPM owner authorization information is stored in the registry of the local computer. Depending on the amount of TPM owner authorization information stored locally, the operating system and TPM-based applications can perform certain TPM actions which require TPM owner authorization without requiring the user to enter the TPM owner password.\r\n\r\nYou can choose to have the operating system store either the full TPM owner authorization value, the TPM administrative delegation blob plus the TPM user delegation blob, or none.\r\n\r\nIf you enable this policy setting, Windows will store the TPM owner authorization in the registry of the local computer according to the operating system managed TPM authentication setting you choose.\r\n\r\nChoose the operating system managed TPM authentication setting of \"Full\" to store the full TPM owner authorization, the TPM administrative delegation blob and the TPM user delegation blob in the local registry. This setting allows use of the TPM without requiring remote or external storage of the TPM owner authorization value. This setting is appropriate for scenarios which do not depend on preventing reset of the TPM anti-hammering logic or changing the TPM owner authorization value. Some TPM-based applications may require this setting be changed before features which depend on the TPM anti-hammering logic can be used.\r\n\r\nChoose the operating system managed TPM authentication setting of \"Delegated\" to store only the TPM administrative delegation blob and the TPM user delegation blob in the local registry. This setting is appropriate for use with TPM-based applications that depend on the TPM anti-hammering logic.\r\n\r\nChoose the operating system managed TPM authentication setting of \"None\" for compatibility with previous operating systems and applications or for use with scenarios that require TPM owner authorization not be stored locally. Using this setting might cause issues with some TPM-based applications.\r\n\r\nNote: If the operating system managed TPM authentication setting is changed from \"Full\" to \"Delegated\", the full TPM owner authorization value will be regenerated and any copies of the original TPM owner authorization value will be invalid.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tpm#admx-tpm-osmanagedauth-name"],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":[{"id":"device_vendor_msft_policy_config_admx_tpm_osmanagedauth_name_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tpm_osmanagedauth_name_1","displayName":"Enabled","description":null,"helpText":null}]},"e02207d0bd39e4bc":{"id":"device_vendor_msft_policy_config_admx_w32time_w32time_policy_configure_ntpclient_w32time_specialpollinterval","displayName":"SpecialPollInterval","description":null,"helpText":"","infoUrls":[],"categoryId":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","categoryName":"Time Providers","options":null},"e02f18384e625d0c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_managedbookmarks","displayName":"Managed Bookmarks (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"e096933f2580385d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled","displayName":"Enable reporting of usage and crash-related data","description":"When this policy is enabled, anonymous reporting of usage and crash-related data about Chrome to Google is enabled by default. Users will still be able to change this setting in the Chrome settings.\r\n\r\nWhen this policy is disabled, anonymous reporting is disabled and no usage or crash data is sent to Google. Users won't be able to change this setting.\r\n\r\nWhen this policy isn't set, users can choose the anonymous reporting behavior at installation or first run, and can later change the setting in the Chrome settings.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain or Windows 10 Pro or Enterprise instances that are enrolled for device management, and macOS instances that are managed via MDM or joined to a domain via MCX.\r\n\r\n(For Chrome OS, see DeviceMetricsReportingEnabled.)","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e0e3a0d6c6f96e8e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting","displayName":"Default JavaScript setting","description":"Setting the policy to 1 lets websites run JavaScript. Setting the policy to 2 denies JavaScript.\r\n\r\nLeaving it unset allows JavaScript, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e05f8a47ad79ff36":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nLeaving the policy unset means DefaultFileSystemWriteGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with FileSystemWriteBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e09e0227b3fd8e34":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~other_promptonmultiplematchingcertificates","displayName":"Prompt for the client certificate when multiple certificates match.","description":"This policy controls whether the user is prompted to select a client certificate when more than one certificate matches AutoSelectCertificateForUrls.\r\nIf this policy is set to Enabled, the user is prompted to select a client certificate whenever the auto-selection policy matches multiple certificates.\r\nIf this policy is set to Disabled or not set, the user may only be prompted when no certificate matches the auto-selection.","helpText":"","infoUrls":[],"categoryId":"b46f4e70-d3d1-4177-8e22-62f806d4568c","categoryName":"Other","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~other_promptonmultiplematchingcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~other_promptonmultiplematchingcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"e03ca557c2fdf564":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt","displayName":"Suppress the Google Chrome Frame turndown prompt","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"e0c394920e539972":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies","displayName":"Allow WebDriver to Override Incompatible Policies","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"e02a726df88c47c1":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed","displayName":"Allow Translator API","description":"Setting the policy to Enabled or leaving it unset allows the use of Translator API in Google Chrome.\r\n\r\nSetting the policy to Disabled disallows the use of Translator API.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"e04c4457a8b07af4":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc","displayName":"Disable third-party storage partitioning for specific top-level origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"e0a52b8fe64b0855":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc","displayName":"List of origins allowing all HTTP authentication (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":null},"e02db678bd14dd12":{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters","displayName":"Min Device Password Complex Characters","description":"The number of complex element types (uppercase and lowercase letters, numbers, and punctuation) required for a strong PIN or password.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#mindevicepasswordcomplexcharacters"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":[{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_1","displayName":"Digits only","description":"Digits only","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_2","displayName":"Digits and lowercase letters are required","description":"Digits and lowercase letters are required","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_3","displayName":"Digits lowercase letters and uppercase letters are required. Not supported in desktop Microsoft accounts and domain accounts","description":"Digits lowercase letters and uppercase letters are required. Not supported in desktop Microsoft accounts and domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_4","displayName":"Digits lowercase letters uppercase letters and special characters are required. Not supported in desktop","description":"Digits lowercase letters uppercase letters and special characters are required. Not supported in desktop","helpText":null}]},"e06b1f1e3854af20":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowfontdownloads"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"e07be539c525e84c":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608","displayName":"Allow META REFRESH","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_3","displayName":"Disable","description":null,"helpText":null}]},"e0764014a21a1de7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled","displayName":"Allow queries to a Browser Network Time service","description":"Prevents Microsoft Edge from occasionally sending queries to a browser network time service to retrieve an accurate timestamp.\r\n\r\nIf you disable this policy, Microsoft Edge will stop sending queries to a browser network time service.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will occasionally send queries to a browser network time service.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e0b6e8b1c5b535fe":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions","displayName":"Enable network prediction (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},"e040feef17605add":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting","displayName":"Configure cookies","description":"Control whether websites can create cookies on the user's device. This policy is all or nothing - you can let all websites create cookies, or no websites create cookies. You can't use this policy to enable cookies from specific websites.\r\n\r\nSet the policy to 'SessionOnly' (4) to clear cookies when the session closes. If Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about configuring what happens when Microsoft Edge runs in background mode.\r\n\r\nIf you don't configure this policy, the default 'AllowCookies' (1) is used, and users can change this setting in Microsoft Edge Settings. (If you don't want users to be able to change this setting, set the policy.)\r\n\r\n* 1 = Let all sites create cookies\r\n\r\n* 2 = Don't let any site create cookies\r\n\r\n* 4 = Keep cookies for the duration of the session","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e05766916b1dae4f":{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls","displayName":"Block the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\r\n\r\n * 'WebHidAskForUrls' (Allow the WebHID API on these sites) (if there is a match),\r\n\r\n * 'DefaultWebHidGuardSetting' (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns can't conflict with 'WebHidAskForUrls'. Neither policy takes precedence if a URL matches both patterns.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e085b21d80322f9d":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled","displayName":"Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured","description":"If you enable this policy, users are allowed to add and remove their own URLs to open when starting Edge while maintaining the admin specified mandatory list of sites specified by setting 'RestoreOnStartup' (Action to take on startup) policy to open a list of URLS and providing the list of sites in the 'RestoreOnStartupURLs' (Sites to open when the browser starts) policy.\r\n\r\nIf you disable or don't configure this policy, there is no change to how the 'RestoreOnStartup' and 'RestoreOnStartupURLs' policies work.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e089a756205cf9b3":{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails","displayName":"Show thumbnail images for browsing history","description":"This policy lets you configure whether the history thumbnail feature collects and saves images for the sites you visit. When enabled, this feature makes it easier to identify sites when you hover over your history results.\r\nIf you don't configure this policy, the thumbnail feature is turned on after a user visits the history hub twice in the past 7 days.\r\nIf you enable this policy, the history thumbnail collects and saves images for visited sites.\r\nIf you disable this policy, the history thumbnail doesn't collect and save images for visited sites.\r\nWhen the feature is disabled, existing images are deleted on a per user basis, and the feature no longer collects or saves images when a site is visited.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_1","displayName":"Enabled","description":null,"helpText":null}]},"e0d4cc3a23e196ca":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist","displayName":"Blocklist for extension install types","description":"The blocklist controls which extension install types are disallowed.\r\n\r\nSetting the \"command_line\" will block an extension from being loaded from command line.\r\n\r\nPolicy options mapping:\r\n\r\n* command_line (command_line) = Blocks extensions from being loaded from command line\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\ncommand_line","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"e02edbd0069d447f":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":null},"e023c014dc1f3e9c":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls","displayName":"Allow insecure content on specified sites","description":"Create a list of URL patterns to specify sites that can display insecure mixed content (that is, HTTP content on HTTPS sites).\r\n\r\nIf you don't configure this policy, blockable mixed content will be blocked and optionally blockable mixed content will be upgraded. However, users will be allowed to set exceptions to allow insecure mixed content for specific sites.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e0fe48bbd41306eb":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault","displayName":"Default printing page size","description":"Overrides default printing page size.\r\n\r\nname should contain one of the listed formats or 'custom' if required paper size is not in the list. If 'custom' value is provided custom_size property should be specified. It describes the desired height and width in micrometers. Otherwise custom_size property shouldn't be specified. Policy that violates these rules is ignored.\r\n\r\nIf the page size is unavailable on the printer chosen by the user this policy is ignored.\r\n\r\nExample value:\r\n\r\n{\r\n \"custom_size\": {\r\n \"height\": 297000,\r\n \"width\": 210000\r\n },\r\n \"name\": \"custom\"\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"custom_size\": {\"height\": 297000, \"width\": 210000}, \"name\": \"custom\"}","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_1","displayName":"Enabled","description":null,"helpText":null}]},"e048fc8a6d3de93a":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled","displayName":"Configure Edge Website Typo Protection","description":"This policy setting lets you configure whether to turn on Edge Website Typo Protection. Edge Website Typo Protection provides warning messages to help protect your users from potential typosquatting sites. By default, Edge Website Typo Protection is turned on.\r\n\r\nIf you enable this policy, Edge Website Typo Protection is turned on.\r\n\r\nIf you disable this policy, Edge Website Typo Protection is turned off.\r\n\r\nIf you don't configure this policy, Edge Website Typo Protection is turned on but users can choose whether to use Edge Website Typo Protection.","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e08608a07dfa2fd3":{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery","displayName":"Turn Off Hybrid Sleep On Battery","description":"This policy setting allows you to turn off hybrid sleep. If you set this to 0, a hiberfile is not generated when the system transitions to sleep (Stand By). If you do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#turnoffhybridsleeponbattery"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery_0","displayName":"","description":"","helpText":null},{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery_1","displayName":"hybrid sleep","description":"hybrid sleep","helpText":null}]},"e022ee2ecc273eac":{"id":"device_vendor_msft_policy_config_timelanguagesettings_allowset24hourclock","displayName":"Allow Set24 Hour Clock","description":"This policy is deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#allowset24hourclock"],"categoryId":"4a5a066e-27af-46c1-9714-9e4542ffc1f9","categoryName":"Time Language Settings","options":[{"id":"device_vendor_msft_policy_config_timelanguagesettings_allowset24hourclock_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_allowset24hourclock_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e0d2189fa8f58b8c":{"id":"device_vendor_msft_policy_config_update_scheduledinstalleveryweek","displayName":"Scheduled Install Every Week","description":"Enables the IT admin to schedule the update installation on the every week. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every week","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstalleveryweek"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstalleveryweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstalleveryweek_1","displayName":"update is scheduled every week","description":"update is scheduled every week","helpText":null}]},"e0e8366e8f7d1bed":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},"e0303e3c3fce90c8":{"id":"device_vendor_msft_policy_config_windowsai_disablesettingsagent","displayName":"Disable Settings Agent","description":"This policy setting allows you to determine whether Settings Agentic search experience is available for users on their device. When the policy is enabled, the agentic experience will not be available, limiting search results to statically indexed searches and semantic searches. When the policy is disabled, users will have Settings Agent search experience available on their device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disablesettingsagent"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"device_vendor_msft_policy_config_windowsai_disablesettingsagent_0","displayName":"Settings Agentic search experience is enabled","description":"Settings Agentic search experience is enabled","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disablesettingsagent_1","displayName":"Settings Agentic search experience is not enabled","description":"Settings Agentic search experience is not enabled","helpText":null}]},"e098db4e0d00f726":{"id":"enforcement_targetosversion","displayName":"Target OS Version","description":"The target OS version to update the device to by the appropriate time. This is the OS version number, for example, '16.1'. It may also include a supplemental version identifier, for example, '16.1.1'.","helpText":null,"infoUrls":[],"categoryId":"42a6198f-bdec-402e-b619-315400b65488","categoryName":"Software Update","options":null},"e094a946cfc84a80":{"id":"linux_mdatp_managed_antivirusengine_passivemode","displayName":"Enable passive mode (deprecated)","description":"Whether the antivirus engine runs in passive mode or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-passive-mode"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"linux_mdatp_managed_antivirusengine_passivemode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_passivemode_true","displayName":"Enabled","description":null,"helpText":null}]},"e0e54888decd8ac9":{"id":"settings_item_voiceroaming_enabled","displayName":"Enabled","description":"If `true`, enable voice roaming. If `false`, disable voice roaming, which also disables data roaming. The setting is only available for certain carriers.","helpText":null,"infoUrls":[],"categoryId":"1fbc29d7-0530-4208-b506-9df648a402e9","categoryName":"Voice Roaming","options":[{"id":"settings_item_voiceroaming_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_voiceroaming_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e0be841ca542e398":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_noscreensaverui","displayName":"Prevent changing screen saver (User)","description":"Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel.\r\n \r\nThis setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer. It does not prevent a screen saver from running.\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-noscreensaverui"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_noscreensaverui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_noscreensaverui_1","displayName":"Enabled","description":null,"helpText":null}]},"e087e8fc647c4fac":{"id":"user_vendor_msft_policy_config_admx_logon_nowelcometips_1","displayName":"Do not display the Getting Started welcome screen at logon (User)","description":"This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.\r\n\r\nIf you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.\r\n\r\nUsers can still display the welcome screen by selecting it on the Start menu or by typing \"Welcome\" in the Run dialog box.\r\n\r\nIf you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.\r\n\r\nThis setting applies only to Windows 2000 Professional. It does not affect the \"Configure Your Server on a Windows 2000 Server\" screen on Windows 2000 Server.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click \"Getting Started.\" To suppress the welcome screen without specifying a setting, clear the \"Show this screen at startup\" check box on the welcome screen.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-nowelcometips-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_logon_nowelcometips_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_nowelcometips_1_1","displayName":"Enabled","description":null,"helpText":null}]},"e0373482065c6d2e":{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown","displayName":"Choose one of the following actions (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_2","displayName":"Shut Down","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_16","displayName":"Sleep","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_1","displayName":"Log off","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_512","displayName":"Lock","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_4","displayName":"Restart","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_256","displayName":"Switch User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_64","displayName":"Hibernate","description":null,"helpText":null}]},"e06bc443601ef79a":{"id":"user_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription","displayName":"Report when logon server was not available during user logon (User)","description":"This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using previously stored account information.\r\n\r\nIf enabled, a notification popup will be displayed to the user when the user logs on with cached credentials.\r\n\r\nIf disabled or not configured, no popup will be displayed to the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-reportcachedlogonpolicydescription"],"categoryId":"43eca758-22c0-4625-8f12-85a8a34ea8b1","categoryName":"Windows Logon Options","options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription_1","displayName":"Enabled","description":null,"helpText":null}]},"e0768a552334b9c4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_spellcheckserviceenabled_recommended","displayName":"Enable or disable spell checking web service (User)","description":"Setting the policy to Enabled puts a Google web service in use to help resolve spelling errors. This policy only controls the use of the online service. Setting the policy to Disabled means this service is never used.\r\n\r\nLeaving the policy unset lets users choose whether to use the spellcheck service.\r\n\r\nThe spell check can always use a downloaded dictionary locally unless the feature is disabled by SpellcheckEnabled in which case this policy will have no effect.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_spellcheckserviceenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_spellcheckserviceenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e0257456d9a637fd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting","displayName":"Default JavaScript setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2","displayName":"Do not allow any site to run JavaScript","description":null,"helpText":null}]},"e0aa34df04c204d7":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting","displayName":"Default mediastream setting (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e0a8cca0f157465c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessallowedforurls_localnetworkaccessallowedforurlsdesc","displayName":"Allow sites to make requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":null},"e0978d51ec353197":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled","displayName":"Choose whether the Privacy Sandbox Site-suggested ads setting can be disabled (User)","description":"A policy to control whether the Privacy Sandbox Site-suggested ads setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Site-suggested ads setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Site-suggested ads setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e0efb112bda7689a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength","displayName":"Set CNG cipher key length (User)","description":"This policy setting allows you to configure the number of bits to use when creating the cipher key. This number will be rounded down to a multiple of 8.\r\n\r\nIf you enable this policy setting, the key bits specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default value will be used.","helpText":"","infoUrls":[],"categoryId":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength_1","displayName":"Enabled","description":null,"helpText":null}]},"e055a0363f1e4b2c":{"id":"user_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing","displayName":"Turn off InPrivate Browsing (User)","description":"This policy setting allows you to turn off the InPrivate Browsing feature.\n\nInPrivate Browsing prevents Internet Explorer from storing data about a user's browsing session. This includes cookies, temporary Internet files, history, and other data.\n\nIf you enable this policy setting, InPrivate Browsing is turned off.\n\nIf you disable this policy setting, InPrivate Browsing is available for use.\n\nIf you do not configure this policy setting, InPrivate Browsing can be turned on or off through the registry.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinprivatebrowsing"],"categoryId":"f26fe4c2-d073-4e51-90bf-61c4bbdeb4f2","categoryName":"Privacy","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_1","displayName":"Enabled","description":null,"helpText":null}]},"e091297971fd4125":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastserviceserverinfo5","displayName":"Information URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"e03d994a73f3b979":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastservicesharednotescustomurl8","displayName":"Shared Notes Url (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"e00e91651a98039b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20framework","displayName":"Set download location for Microsoft .NET Framework 2.0 (User)","description":"Set a custom path to where users can access the missing component.","helpText":"","infoUrls":[],"categoryId":"bc633a5a-c712-49a6-9f56-775ca9321df4","categoryName":"Downloading Framework Components","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20framework_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20framework_1","displayName":"Enabled","description":null,"helpText":null}]},"e0536c2c7b77408c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kazakh","displayName":"Kazakh (User)","description":"Enables the editing language Kazakh","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kazakh_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_kazakh_1","displayName":"Enabled","description":null,"helpText":null}]},"e00785236cee0e0e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions","displayName":"Block signing into Office (User)","description":"This policy setting controls whether users can provide credentials to Office using either their Microsoft Account or the user ID assigned by your organization for accessing Office 365.\r\nIf you enable this policy setting, you can specify one of the following options:\r\n\r\n- If you select \"Both IDs allowed\", users can sign in and access Office content by using either ID\r\n- If you select \"Microsoft Account only\", users can sign in only by using their Microsoft Account.\r\n- If you select \"Organization only\", users can sign in only by using the user ID assigned by your organization for accessing Office 365.\r\n- If you select \"None allowed\", users cannot sign in by using either ID.\r\n\r\nIf you disable or do not configure this policy setting, users can sign in by using either ID.\r\n\r\nNote: This policy does not apply to licensing. A user can license their product using any applicable ID if they have a valid license associated with that account. Providing credentials for licensing purposes when that ID type has been disabled, however, will not affect the signed in state of Office.\r\n ","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_signinoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"e0f7c7b1eca0b918":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6","displayName":"Workflow Cache 6 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_1","displayName":"Enabled","description":null,"helpText":null}]},"e0364787f8f4bfbc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_l_workflowsig462","displayName":"Workflow requires the user to sign the document (Word/Excel only) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_l_workflowsig462_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache7_l_workflowsig462_1","displayName":"True","description":null,"helpText":null}]},"e03565bd1368424a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc07_l_pathcolon07","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"e0bc94e1b6080321":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_inboxfolderhomepage_l_showassociatedwebpage40","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_inboxfolderhomepage_l_showassociatedwebpage40_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_inboxfolderhomepage_l_showassociatedwebpage40_1","displayName":"True","description":null,"helpText":null}]},"e04953a8753079a4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_downloadimages","displayName":"Unblock automatic download of linked images (User)","description":"This policy setting determines whether PowerPoint automatically downloads links from external sources.\r\n\r\nIf you enable this policy setting, PowerPoint will load images saved in remote locations.\r\n\r\nIf you disable or do not configure this policy setting, when PowerPoint opens a presentation it does not display any linked images saved on a different computer unless the presentation itself is saved in a trusted location (as configured in the Trust Center).","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_downloadimages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_downloadimages_1","displayName":"Enabled","description":null,"helpText":null}]},"e0876bb1088ecead":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_descriptioncolon26","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"e0c2fbed7b28df22":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc13_l_datecolon57","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"e0ae9e684bf2f492":{"id":"user_vendor_msft_policy_config_start_hiderecentlyaddedapps","displayName":"Hide Recently Added Apps (User)","description":"Enabling this policy hides recently added apps from appearing on the start menu and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderecentlyaddedapps"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_hiderecentlyaddedapps_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hiderecentlyaddedapps_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"e02c828b7b47ae92":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp","displayName":"Turn off file synchronization via SOAP over HTTP (User)","description":"This policy setting controls file synchronization via SOAP over HTTP for Word.\r\n\r\nIf you enable this policy setting, file synchronization via SOAP over HTTP is turned off for Word.\r\n\r\nIf you disable or do not configure this policy setting this policy setting, file synchronization via SOAP over HTTP is turned on for Word.\r\n\r\nNote: Turning off file synchronization via SOAP over HTTP will also prevent co-authoring and adversely affect the behavior of SharePoint Workspaces.","helpText":"","infoUrls":[],"categoryId":"b206e4ef-a288-4fb7-a7ee-4a30b4df3b98","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_miscellaneous178~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_1","displayName":"Enabled","description":null,"helpText":null}]},"e0f6ab6dc473e000":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_turnofffilevalidation","displayName":"Turn off file validation (User)","description":"This policy setting allows you turn off the file validation feature.\r\n\r\nIf you enable this policy setting, file validation will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, file validation will be turned on. Office Binary Documents (97-2003) are checked to see if they conform against the file format schema before they are opened.","helpText":"","infoUrls":[],"categoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_turnofffilevalidation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_turnofffilevalidation_1","displayName":"Enabled","description":null,"helpText":null}]},"e064e0d4c481833e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb","displayName":"Cipher Feedback (CFB)","description":null,"helpText":null}]},"e080c7c22162b26b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates","displayName":"Word 2003 binary documents and templates (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"e0b1f8a356253477":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_datecolon89","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"e05f81a21c12cf1d":{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningfultextextension","displayName":"Stop checking to ensure hyperlink text extension is meaningful if they include extensions (User)","description":"This policy setting prevents the Accessibility Checker from verifying that hyperlinks have meaningful text if they include extensions.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that hyperlinks have meaningful text if they include extensions.\r\n\r\nIf you disable or do not configure this policy setting, hyperlink text that include extensions will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningfultextextension_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v9~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningfultextextension_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e1.json b/public/intune-definitions/e1.json new file mode 100644 index 000000000000..b419805dd7c7 --- /dev/null +++ b/public/intune-definitions/e1.json @@ -0,0 +1 @@ +{"e1b055ab8a7bd673":{"id":"app_privacy_permissiondefaults_generickey_organizationjustification","displayName":"Organization Justification","description":"Text you provide that clearly explains to the user the reason why the organization requires these app permission defaults. The device includes this text in the permission consent prompt it displays when it launches the app.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"e1d1bf9e7bc75453":{"id":"com.apple.asam_com.apple.asam","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"daa2ea69-8026-465a-942c-75eb0396d5b9","categoryName":"Autonomous Single App Mode","options":null},"e186ae8554c37082":{"id":"com.apple.configurationprofile.identification_payloadidentification_username","displayName":"User Name","description":"The UNIX user name for the accounts.","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":null},"e13942ad8a01f0c6":{"id":"com.apple.desktop_com.apple.desktop","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"e42edcd8-fcb0-4255-a774-c78b34f0b0c9","categoryName":"Desktop","options":null},"e1afc993940ab73a":{"id":"com.apple.dock_persistent-others_item_tile-data_label","displayName":"Label","description":"The label of the Dock item.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"e1b7b9f5c8787b2b":{"id":"com.apple.managedclient.preferences_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled.","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy.\nCurrently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers.\nThis enterprise policy can be used to opt out of this gradual deprecation by forcing the default to stay enabled.\n\nPages might depend on unload event handlers to save data or signal the end of a user session to the server.\nThis is not recommended because it's unreliable and impacts performance by blocking use of BackForwardCache.\nRecommended alternatives exist, but the unload event has been used for a long time. Some applications might still rely on them.\n\nIf you disable this policy or don't configure it, unload event handlers will gradually be deprecated in-line with the deprecation rollout and sites which don't set Permissions-Policy header will stop firing `unload` events.\n\nIf you enable this policy then unload event handlers will continue to work by default.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forcepermissionpolicyunloaddefaultenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_forcepermissionpolicyunloaddefaultenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_forcepermissionpolicyunloaddefaultenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e1d9b3f8e02c38d8":{"id":"com.apple.managedclient.preferences_newpdfreaderenabled","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\n\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\n\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#newpdfreaderenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_newpdfreaderenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_newpdfreaderenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e1ed0360b174dbb9":{"id":"com.apple.webcontent-filter_filterpacketproviderdesignatedrequirement","displayName":"Filter Packet Provider Designated Requirement","description":"The designated requirement string that the system embeds in the code signature of the filter packet provider system extension. This string identifies the filter packet provider when the filter starts running. This field is a requirement if Filter Packets is true.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"e1bdec78fca3ff7c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbartrendingsuggestenabled","displayName":"Enable Microsoft Bing trending suggestions in the address bar","description":"This policy controls whether Microsoft Bing trending suggestions appear in the address bar’s suggestion dropdown when users select the address bar while on a New Tab Page.\n\nIf this policy is enabled or not configured, Microsoft Bing trending suggestions appear in the address bar suggestion dropdown.\n\nIf this policy is disabled, Microsoft Edge doesn't display Microsoft Bing trending suggestions when users select the address bar.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbartrendingsuggestenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbartrendingsuggestenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e173683f3475d9d9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_recommended","displayName":"Set the new tab page as the home page (users can override)","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\n\nIf you enable this policy, the Home button is set to the new tab page as configured by the user or with the policy \"NewTabPageLocation\" and the URL set with the policy \"HomepageLocation\" is not taken into consideration.\n\nIf you disable this policy, the Home button is the set URL as configured by the user or as configured in the policy \"HomepageLocation\".\n\nIf you don't configure this policy, users can choose whether the set URL or the new tab page is their home page.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"e11e4250ea878cab":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileextensionallowlist","displayName":"Open local files in Internet Explorer mode file extension allow list","description":"This policy limits which file:// URLs are allowed to launch into Internet Explorer mode based on file extension.\n\nThis setting works when \"InternetExplorerIntegrationLevel\" is set to 'IEMode'.\n\nWhen a file:// URL is requested to launch in Internet Explorer mode, the file extension of the URL must be present in this list for the URL to be allowed to launch in Internet Explorer mode. A URL that's blocked from opening in Internet Explorer mode is instead opened in Microsoft Edge mode.\n\nIf you set this policy to the special value \"*\" or don't configure it, all file extensions are allowed.\n\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"e12e9e77d03ca8d2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.smartscreenallowlistdomains","displayName":"Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings","description":"Configures the list of Microsoft Defender SmartScreen trusted domains. This means:\n\n- Microsoft Defender SmartScreen won't check for potentially malicious resources like phishing software and other malware if the source URLs match these domains.\n- The Microsoft Defender SmartScreen download protection service won't check downloads hosted on these domains.\n\nIf you enable this policy, Microsoft Defender SmartScreen trusts these domains.\nIf you disable or don't set this policy, default Microsoft Defender SmartScreen protection is applied to all resources.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10/11 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via mobile device management (MDM) or joined to a domain via MCX.\nNote: If your organization has enabled Microsoft Defender for Endpoint, this policy and any allowlists created with the policy are ignored. You must configure your allowlists and blocklists in Microsoft 365 Defender portal using \"Indicators\" (Settings > Endpoints > Indicators).","helpText":null,"infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":null},"e1490864c34e098c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webhidblockedforurls","displayName":"Block the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\n\nLeaving the policy unset means \"DefaultWebHidGuardSetting\" applies for all sites, if set. If not, users' personal settings apply.\n\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\n\n * \"WebHidAskForUrls\" (if there's a match),\n\n * \"DefaultWebHidGuardSetting\" (if set), or\n\n * Users' personal settings.\n\nURL patterns can't conflict with \"WebHidAskForUrls\". Neither policy takes precedence if a URL matches both patterns.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e1cc8fc3d8e1b054":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC","description":"Restricts the UDP port range used by WebRTC to a specified port interval (endpoints included).\n\nBy configuring this policy, you specify the range of local UDP ports that WebRTC can use.\n\nIf you don't configure this policy, or if you set it to an empty string or invalid port range, WebRTC can use any available local UDP port.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"e1caf80bc9448c50":{"id":"device_vendor_msft_defender_configuration_disabledatagramprocessing","displayName":"Disable Datagram Processing","description":"Control whether network protection inspects User Datagram Protocol (UDP) traffic","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disabledatagramprocessing_1","displayName":"UDP inspection is off","description":"UDP inspection is off","helpText":null},{"id":"device_vendor_msft_defender_configuration_disabledatagramprocessing_0","displayName":"UDP inspection is on","description":"UDP inspection is on","helpText":null}]},"e13b36590ec6d310":{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablepeercachingclient","displayName":"Do not allow the computer to act as a BITS Peercaching client","description":"This policy setting specifies whether the computer will act as a BITS peer caching client. By default, when BITS peer caching is enabled, the computer acts as both a peer caching server (offering files to its peers) and a peer caching client (downloading files from its peers).\r\n\r\n If you enable this policy setting, the computer will no longer use the BITS peer caching feature to download files; files will be downloaded only from the origin server. However, the computer will still make files available to its peers.\r\n\r\n If you disable or do not configure this policy setting, the computer attempts to download peer-enabled BITS jobs from peer computers before reverting to the origin server.\r\n\r\n Note: This policy setting has no effect if the \"Allow BITS peer caching\" policy setting is disabled or not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-bits#admx-bits-bits-disablepeercachingclient"],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":[{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablepeercachingclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_bits_bits_disablepeercachingclient_1","displayName":"Enabled","description":null,"helpText":null}]},"e1478ab332a290ea":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_nameserver","displayName":"DNS servers","description":"Defines the DNS servers to which a computer sends queries when it attempts to resolve names. This policy setting supersedes the list of DNS servers configured locally and those configured using DHCP. \r\n\r\nTo use this policy setting, click Enabled, and then enter a space-delimited list of IP addresses in the available field. To use this policy setting, you must enter at least one IP address.\r\n\r\nIf you enable this policy setting, the list of DNS servers is applied to all network connections used by computers that receive this policy setting. \r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, computers will use the local or DHCP supplied list of DNS servers, if configured.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-nameserver"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_nameserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_nameserver_1","displayName":"Enabled","description":null,"helpText":null}]},"e13f4060d43aeba8":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday","displayName":"Specify the day of the week to run a scheduled scan","description":"This policy setting allows you to specify the day of the week on which to perform a scheduled scan. The scan can also be configured to run every day or to never run at all.\r\n\r\n This setting can be configured with the following ordinal number values:\r\n (0x0) Every Day\r\n (0x1) Sunday \r\n (0x2) Monday\r\n (0x3) Tuesday\r\n (0x4) Wednesday\r\n (0x5) Thursday\r\n (0x6) Friday\r\n (0x7) Saturday\r\n (0x8) Never (default)\r\n\r\n If you enable this setting, a scheduled scan will run at the frequency specified.\r\n\r\n If you disable or do not configure this setting, a scheduled scan will run at a default frequency.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-scheduleday"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_scheduleday_1","displayName":"Enabled","description":null,"helpText":null}]},"e171c4d74a0f163f":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_maximumlogfilesize_netlogon_maximumlogfilesizelabel","displayName":"Bytes:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"e1359b3e31c92925":{"id":"device_vendor_msft_policy_config_applicationmanagement_allowalltrustedapps","displayName":"Allow All Trusted Apps","description":"Specifies whether non Microsoft Store apps are allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#allowalltrustedapps"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_allowalltrustedapps_0","displayName":"Explicit deny.","description":"Explicit deny.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowalltrustedapps_1","displayName":"Explicit allow unlock.","description":"Explicit allow unlock.","helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_allowalltrustedapps_65535","displayName":"Not configured.","description":"Not configured.","helpText":null}]},"e19721657427f2d9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_policyrefreshrate","displayName":"Refresh rate for user policy: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"e12013685adb948d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended","displayName":"Register protocol handlers","description":"Setting the policy (as recommended only) lets you register a list of protocol handlers, which merge with the ones that the user registers, putting both sets in use. Set the property \"protocol\" to the scheme, such as \"mailto\", and set the property \"URL\" to the URL pattern of the application that handles the scheme specified in the \"protocol\" field. The pattern can include a \"%s\" placeholder, which the handled URL replaces.\r\n\r\nUsers can't remove a protocol handler registered by policy. However, by installing a new default handler, they can change the protocol handlers installed by policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RegisteredProtocolHandlers for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"mailto\",\r\n \"url\": \"https://mail.google.com/mail/?extsrc=mailto&url=%s\",\r\n \"default\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"962a2377-ad9a-4654-a526-a77c14152fd7","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e166d5aaf4655b26":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of capture.\r\n\r\nNote that windowed Chrome Apps will still be allowed to be captured.\r\n\r\nThis policy is not considered if a site matches a URL pattern in the SameOriginTabCaptureAllowedByOrigins policy.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: WindowCaptureAllowedByOrigins, ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"4aa852ab-6269-4883-906f-0a0944fa1261","categoryName":"Allow or deny screen capture","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"e1f4ee719e453943":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_cadistrustedcertificatesdesc","displayName":"TLS certificates that should be distrusted by Google Chrome for server authentication (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"e15fd138efb83ea5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins","displayName":"List of origins allowing all HTTP authentication","description":"Setting the policy specifies for which origins to allow all the HTTP authentication schemes Google Chrome supports regardless of the AuthSchemes policy.\r\n\r\nFormat the origin pattern according to this format (https://support.google.com/chrome/a?p=url_blocklist_filter_format). Up to 1,000 exceptions can be defined in AllHttpAuthSchemesAllowedForOrigins.\r\nWildcards are allowed for the whole origin or parts of the origin, either the scheme, host, port.\r\n\r\nExample value:\r\n\r\n*.example.com","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"e1fff984603ceaed":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowsmartscreenie"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"e173421e4b472123":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"e14f7e9687e86db2":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"e1dc996e08643d9b":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallownetframeworkreliantcomponents"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"e1bf20d3e188623c":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, the permission is set to Low Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonejavapermissions"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"e102333198173083":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended","displayName":"Set new tab page quick links","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\r\n\r\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\r\n\r\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' is not provided, the URL is used as the default title. If 'pinned' is not provided, the default value is false.\r\n\r\nMicrosoft Edge presents these in the order listed, from left to right, with all pinned tiles displayed ahead of non-pinned tiles.\r\n\r\nIf the policy is set as mandatory, the 'pinned' field will be ignored and all tiles will be pinned. The tiles can't be deleted by the user and will always appear at the front of the quick links list.\r\n\r\nIf the policy is set as recommended, pinned tiles will remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying non-pinned links via this policy to an existing browser profile, the links may not appear at all, depending on how they rank compared to the user's browsing history.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"pinned\": true,\r\n \"title\": \"Contoso Portal\",\r\n \"url\": \"https://contoso.com\"\r\n },\r\n {\r\n \"title\": \"Fabrikam\",\r\n \"url\": \"https://fabrikam.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e16929aebbdde33a":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_sensorsblockedforurlsdesc","displayName":"Block access to sensors on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e1703d38175188f0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair","displayName":"Online Repair","description":"\r\nThis policy setting controls whether users can run an online repair for an Office client, such as Office 365 ProPlus, that comes with an Office 365 plan. You can also control whether the online repair only uses a local source and doesn't use the Office Content Delivery Network (CDN) on the Internet.\r\n\r\nNote: Users must have administrative privileges on the local computer to run an online repair.\r\n\r\nIf you enable or don't configure this policy setting, users can run an online repair from \"Programs and Features\" or \"Add/Remove Programs\" in Control Panel.\r\n\r\nThe online repair downloads and reinstalls Office from the Office CDN or from a local source, such a network share, depending on how Office is configured to get updates. If you aren't using the Office CDN, the local source must contain all the required files, including language files, to perform the repair.\r\n\r\nSelect \"Use Office CDN (if needed)\" if you want to use the Office CDN as an alternative location for the repair if the local source isn't available or doesn't contain all the necessary files.\r\n\r\nYou can also use a local copy of the Office Deployment Tool (setup.exe) for the repair by entering a local path for the Office Deployment Tool. This path can be a network share. If setup.exe can't be found in the local path specified, and \"Use Office CDN (if needed)\" is selected, then the online repair downloads a copy of setup.exe from the Office CDN. Otherwise, the online repair will fail.\r\n\r\nThe repair maintains all configuration settings, including products, languages, excluded applications, and update settings.\r\n\r\nIf you disable this policy setting, users can't run an online repair, but they can still run a quick repair.\r\n\r\nImportant: This policy setting only applies to Office clients, such as Office 365 ProPlus, that come with an Office 365 plan. This policy setting also applies to Visio and Project products that come with an Office 365 plan. This policy has no effect on Office products that are installed by using Windows Installer (MSI).\r\n ","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_1","displayName":"Enabled","description":null,"helpText":null}]},"e100ac0e159a184b":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_forceallowtheseapps","displayName":"Let Apps Access Contacts Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"e152a6f8387da5ff":{"id":"device_vendor_msft_policy_config_system_feedbackhubalwayssavediagnosticslocally","displayName":"Feedback Hub Always Save Diagnostics Locally","description":"Diagnostic files created when a feedback is filed in the Feedback Hub app will always be saved locally. If this policy is not present or set to false, users will be presented with the option to save locally. The default is to not save locally.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#feedbackhubalwayssavediagnosticslocally"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_feedbackhubalwayssavediagnosticslocally_0","displayName":"False. The Feedback Hub will not always save a local copy of diagnostics that may be created when a feedback is submitted. The user will have the option to do so.","description":"False. The Feedback Hub will not always save a local copy of diagnostics that may be created when a feedback is submitted. The user will have the option to do so.","helpText":null},{"id":"device_vendor_msft_policy_config_system_feedbackhubalwayssavediagnosticslocally_1","displayName":"True. The Feedback Hub should always save a local copy of diagnostics that may be created when a feedback is submitted.","description":"True. The Feedback Hub should always save a local copy of diagnostics that may be created when a feedback is submitted.","helpText":null}]},"e1f0de0ca0b197c3":{"id":"device_vendor_msft_policy_config_update_scheduledinstallday","displayName":"Scheduled Install Day","description":"Enables the IT admin to schedule the day of the update installation. The data type is a integer. Supported operations are Add, Delete, Get, and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallday"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_0","displayName":"Every day","description":"Every day","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_1","displayName":"Sunday","description":"Sunday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_2","displayName":"Monday","description":"Monday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_3","displayName":"Tuesday","description":"Tuesday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_4","displayName":"Wednesday","description":"Wednesday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_5","displayName":"Thursday","description":"Thursday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_6","displayName":"Friday","description":"Friday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_7","displayName":"Saturday","description":"Saturday","helpText":null}]},"e1bc9ea1283bd7c0":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enablecustomizedtoasts","displayName":"Enable Customized Toasts","description":"Enable this policy to display your company name and contact options in the notifications. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will display a default notification text. Value type is integer. Supported operations are Add, Get, Replace, and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#enablecustomizedtoasts"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enablecustomizedtoasts_0","displayName":"(Disable) Notifications contain a default notification text.","description":"(Disable) Notifications contain a default notification text.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enablecustomizedtoasts_1","displayName":"(Enable) Notifications contain the company name and contact options.","description":"(Enable) Notifications contain the company name and contact options.","helpText":null}]},"e1576412dbacf492":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid","displayName":"Random number generator: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":null},"e13adbb1bdcb5b8f":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"e1f2a8c7393bf641":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016","displayName":"Microsoft Office 365 Excel 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Excel 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Excel 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365excel2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016_1","displayName":"Enabled","description":null,"helpText":null}]},"e1d0cab24bd17cf8":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout_repositorytimeout","displayName":"Synchronization timeout (in milliseconds): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"e1255059fe784645":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hidesecuritytab","displayName":"Hide Security Tab (User)","description":"This policy setting allows you to hide the Security tab in Windows Media Player.\r\n\r\nIf you enable this policy setting, the default security settings for the options on the Security tab are used unless the user changed the settings previously. Users can still change security and zone settings by using Internet Explorer unless these settings have been hidden or disabled by Internet Explorer policies.\r\n\r\nIf you disable or do not configure this policy setting, users can configure the security settings on the Security tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-hidesecuritytab"],"categoryId":"7f461268-0fb6-4247-b6db-52515d42a20e","categoryName":"User Interface","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hidesecuritytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hidesecuritytab_1","displayName":"Enabled","description":null,"helpText":null}]},"e1d5615bb6959f48":{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell","displayName":"Custom User Interface (User)","description":"Specifies an alternate user interface.\r\n\r\nThe Explorer program (%windir%\\explorer.exe) creates the familiar Windows interface, but you can use this setting to specify an alternate interface. If you enable this setting, the system starts the interface you specify instead of Explorer.exe.\r\n\r\nTo use this setting, copy your interface program to a network share or to your system drive. Then, enable this setting, and type the name of the interface program, including the file name extension, in the Shell name text box. If the interface program file is not located in a folder specified in the Path environment variable for your system, enter the fully qualified path to the file.\r\n\r\nIf you disable this setting or do not configure it, the setting is ignored and the system displays the Explorer interface.\r\n\r\nTip: To find the folders indicated by the Path environment variable, click System Properties in Control Panel, click the Advanced tab, click the Environment Variables button, and then, in the System variables box, click Path.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-customshell"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell_1","displayName":"Enabled","description":null,"helpText":null}]},"e147b525eb506ad8":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls","displayName":"Allow cookies on these sites (User)","description":"Allows you to set a list of url patterns that specify sites which are allowed to set cookies.\r\n\r\nIf this policy is left not set the global default value will be used for all sites either from the DefaultCookiesSetting policy if it is set, or the user's personal configuration otherwise.\r\n\r\nSee also policies CookiesBlockedForUrls and CookiesSessionOnlyForUrls. Note that there must be no conflicting URL patterns between these three policies - it is unspecified which policy takes precedence.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e165b12f0e34a5db":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_javascriptenabled","displayName":"Enable JavaScript (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_javascriptenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_javascriptenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e191ada71e941224":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizationmailrecipient","displayName":"File tab | Share | Email (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizationmailrecipient_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizationmailrecipient_1","displayName":"True","description":null,"helpText":null}]},"e1041587455c6b29":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85","displayName":"Comments (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85_0","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85_1","displayName":"Comment indicator only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85_2","displayName":"Comment & indicator","description":null,"helpText":null}]},"e15e6848da01ccf6":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets","displayName":"Excel 4 worksheets (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_1","displayName":"Enabled","description":null,"helpText":null}]},"e1d795f80a279729":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_descriptioncolon35","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"e1d67718cd7d15f2":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802","displayName":"Allow drag and drop or copy and paste files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_1","displayName":"Prompt","description":null,"helpText":null}]},"e1eb9133e78ea448":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers","displayName":"Register protocol handlers (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0d4cf1d9-d8ad-4628-bd71-fa0de6598f28","categoryName":"Content settings","options":null},"e1561eebfe03c792":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc","displayName":"Block cookies on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e1af6c6fd95503ca":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null}]},"e144fe9e886fdaaf":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (User)","description":"Configure how Microsoft Edge downloads the foundational GenAI model and uses it for inference locally.\r\n\r\nWhen the policy is set to Allowed (0) or not set, the model is downloaded automatically, and used for inference.\r\n\r\nWhen the policy is set to Disabled (1), the model will not be downloaded.\r\n\r\nModel downloading can also be disabled by ComponentUpdatesEnabled.\r\n\r\nPolicy options mapping:\r\n\r\n* Allowed (0) = Downloads model automatically\r\n\r\n* Disabled (1) = Do not download model\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"76e34834-6d47-4e06-b14c-aa2888cdce27","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"e10a563f7649b807":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_microsoft365copilotchaticonenabled","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar (User)","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon will be shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\r\n\r\nThis policy only applies when users are accessing Copilot in the sidepane.\r\n\r\nIf the policy is enabled: Copilot will appear in the toolbar.\r\n\r\nIf the policy is disabled: Copilot will not appear in the toolbar.\r\n\r\nIf the policy is not configured: Otherwise, Copilot will show in the toolbar and users may enable or disable Copilot from showing by using the Show Copilot toggle in settings.\r\n\r\nWhen both this policy and 'HubsSidebarEnabled' (Show Hubs Sidebar) are configured, this policy takes precedence in determining whether Copilot appears in the toolbar. If this policy is not configured and 'HubsSidebarEnabled' is disabled, Copilot will remain hidden. In a future release, this policy will be the sole control for managing Copilot's visibility in the toolbar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_microsoft365copilotchaticonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_microsoft365copilotchaticonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e14e59a92e9168ad":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 109.\r\n\r\nThis policy has been obsoleted in favor of 'ExemptFileTypeDownloadWarnings' (Disable download file type extension-based warnings for specified file types on domains) because of a type mismatch that caused errors in Mac.\r\n\r\nYou can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Microsoft Defender SmartScreen warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on swf, exe, and jnlp extensions for *.contoso.com domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n { \"file_extension\": \"jnlp\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n{\"domains\": [\"https://contoso.com\", \"contoso2.com\"], \"file_extension\": \"jnlp\"}\r\n{\"domains\": [\"*\"], \"file_extension\": \"swf\"}","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"e1b1633c7bcf70d0":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode","displayName":"Configure when efficiency mode should become active (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null}]},"e12425b8bce58b10":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice04_l_broadcastserviceserverterms4","displayName":"Service agreement URL (optional): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"e11b799b3b1bd16f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome2","displayName":"Replace AD - Home2 (User)","description":"This policy setting allows you to customize the 7th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"home phone 2\" of line 7.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 7 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplacehome2_1","displayName":"Enabled","description":null,"helpText":null}]},"e196970efc721763":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanshswitzerland","displayName":"Romansh (Switzerland) (User)","description":"Enables the editing language Romansh (Switzerland)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanshswitzerland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_romanshswitzerland_1","displayName":"Enabled","description":null,"helpText":null}]},"e1b5b239134f188f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_changelabelofsavetosharepoint_l_changelabelofsavetosharepointid","displayName":"Custom string to be displayed: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":null},"e17b860f6c2a22eb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_l_workflowcachename468","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"e112cd263bc0af0b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc20_l_allowsubfolders20","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc20_l_allowsubfolders20_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc20_l_allowsubfolders20_1","displayName":"True","description":null,"helpText":null}]},"e17e1409a9011a95":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_services~l_fax_l_disallowcustomcoversheet","displayName":"Disallow custom cover sheet (User)","description":"Disables the custom fax cover sheet by displaying the message, \"This option has been disabled by administrative policy\" when the user clicks the Custom button in the Fax Service pane of the email message.","helpText":"","infoUrls":[],"categoryId":"a5607145-2bd3-4473-a8ee-d7fa5c2f2675","categoryName":"Fax","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_services~l_fax_l_disallowcustomcoversheet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_services~l_fax_l_disallowcustomcoversheet_1","displayName":"Enabled","description":null,"helpText":null}]},"e155aa80fe0ff5d1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_downloadfulltextofarticles","displayName":"Download full text of articles as HTML attachments (User)","description":"This policy setting controls whether Outlook automatically makes an offline copy of the RSS items as HTML attachments.\r\n\r\nIf you enable this policy setting, Outlook automatically makes an offline copy of RSS items as HTML attachments. \r\n\r\nIf you disable or do not configure this policy setting, Outlook will not automatically make an offline copy of RSS items as HTML attachments.","helpText":"","infoUrls":[],"categoryId":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","categoryName":"RSS Feeds","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_downloadfulltextofarticles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_rsssubscriptions_l_downloadfulltextofarticles_1","displayName":"Enabled","description":null,"helpText":null}]},"e1269e05905eb1e8":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_pathcolon8","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"e1311e47b07f4e48":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc02_l_pathcolon12","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"e14ef38abf3c8fd9":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc18_l_allowsubfolders79","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc18_l_allowsubfolders79_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc18_l_allowsubfolders79_1","displayName":"True","description":null,"helpText":null}]},"e185fcd60d875144":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_whenselectingautomaticallyselectentireword","displayName":"When selecting, automatically select entire word (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_whenselectingautomaticallyselectentireword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_whenselectingautomaticallyselectentireword_1","displayName":"Enabled","description":null,"helpText":null}]},"e169a5bc3cd49ef6":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}_install","displayName":"Install (User)","description":"Install Univeral Print printer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PrinterProvisioning-csp/"],"categoryId":"56c54112-2991-4bda-9e01-e6868bd07726","categoryName":"Printer Provisioning","options":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}_install_true","displayName":"Install","description":"Install this printer","helpText":null}}} \ No newline at end of file diff --git a/public/intune-definitions/e2.json b/public/intune-definitions/e2.json new file mode 100644 index 000000000000..70ac0666b49f --- /dev/null +++ b/public/intune-definitions/e2.json @@ -0,0 +1 @@ +{"e21c0c1d040631ee":{"id":"app_app","displayName":"com.apple.configuration.app.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"e2de5c3eb8387336":{"id":"com.apple.familycontrols.timelimits.v2_familycontrolsenabled","displayName":"Family Controls Enabled","description":"If true, enables time limits. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":[{"id":"com.apple.familycontrols.timelimits.v2_familycontrolsenabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.timelimits.v2_familycontrolsenabled_true","displayName":"True","description":null,"helpText":null}]},"e2cc8cf5ef785668":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"e239fd92af040e0c":{"id":"com.apple.managedclient.preferences_certificatetransparencyenforcementdisabledforlegacycas","displayName":"Disable Certificate Transparency enforcement for a list of legacy certificate authorities (Deprecated)","description":"Disables enforcing Certificate Transparency requirements for a list of legacy certificate authorities (Cas).\n\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed, continue to be used for enterprise hosts.\n\nIn order for Certificate Transparency enforcement to be disabled, you must set the hash to a subjectPublicKeyInfo appearing in a CA certificate that is recognized as a legacy certificate authority (CA). A legacy CA is a CA that has been publicly trusted by default by one or more operating systems supported by Microsoft Edge.\n\nYou specify a subjectPublicKeyInfo hash by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\n\nIf you don't configure this policy, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it isn't disclosed according to the Certificate Transparency policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#certificatetransparencyenforcementdisabledforlegacycas"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"e223fdf4ca977eb1":{"id":"com.apple.managedclient.preferences_diskcachesize","displayName":"Set disk cache size, in bytes","description":"Configures the size of the cache, in bytes, used to store files on the disk.\n\nIf you enable this policy, Microsoft Edge uses the provided cache size regardless of whether the user has specified the '--disk-cache-size' flag. The value specified in this policy isn't a hard boundary but rather a suggestion to the caching system; any value below a few megabytes is too small and will be rounded up to a reasonable minimum.\n\nIf you set the value of this policy to 0, the default cache size is used, and users can't change it.\n\nIf you don't configure this policy, the default size is used, but users can override it with the '--disk-cache-size' flag.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#diskcachesize"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"e24269a345879663":{"id":"com.apple.managedclient.preferences_tabservicesenabled","displayName":"Enable tab organization suggestions","description":"This policy controls whether Microsoft Edge can use its tab organization service to help name or suggest tab groups to increase productivity.\n\nIf you enable or don't configure this policy, when a user creates a tab group or activates certain \"Group Similar Tabs\" features Microsoft Edge sends tab data to its tab organization service. This data includes URLs, page titles, and existing group information. The service uses this data to return suggestions for better groupings and group names.\n\nIf you disable this policy, no data will be sent to the tab organization service. Microsoft Edge won't suggest group names when a group is created and certain \"Group Similar Tabs\" features that rely on the service won't be available.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#tabservicesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_tabservicesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_tabservicesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e25244e79751f48e":{"id":"com.apple.tcc.configuration-profile-policy_services_postevent_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"e240c10e932df441":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_recommended","displayName":"Pin browser essentials toolbar button (users can override)","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\n\nWhen the button is pinned, it always appears on the toolbar.\n\nWhen the button isn't pinned, it only appears when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\n\nIf you enable or don't configure this policy, the Browser essentials button is pinned on the toolbar.\n\nIf you disable this policy, the Browser essentials button isn't pinned on the toolbar.\n\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":null,"infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"e23c5701ea11e3fa":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2","displayName":"Configure Report Queue","description":"This policy setting determines the behavior of the Windows Error Reporting report queue.\r\n\r\nIf you enable this policy setting, you can configure report queue behavior by using the controls in the policy setting. When the Queuing behavior pull-down list is set to Default, Windows determines, when a problem occurs, whether the report should be placed in the reporting queue, or the user should be prompted to send it immediately. When Queuing behavior is set to Always queue, all reports are added to the queue until the user is prompted to send the reports, or until the user sends problem reports by using the Solutions to Problems page in Control Panel. If Queuing behavior is set to Always queue for administrator, reports are queued until an administrator is prompted to send them, or until the administrator sends them by using the Solutions to Problems page in Control Panel.\r\n\r\nThe Maximum number of reports to queue setting determines how many reports can be queued before older reports are automatically deleted. The setting for Number of days between solution check reminders determines the interval time between the display of system notifications that remind the user to check for solutions to problems. A value of 0 disables the reminder.\r\n\r\nIf you disable or do not configure this policy setting, Windows Error Reporting reports are not queued, and users can only send reports at the time that a problem occurs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werqueue-2"],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werqueue_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e21f7ba291cfcc04":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_4","displayName":"Back up log automatically when full","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the \"Retain old events\" policy setting is enabled.\r\n\r\nIf you enable this policy setting and the \"Retain old events\" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started.\r\n\r\nIf you disable this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and old events are retained.\r\n\r\nIf you do not configure this policy setting and the \"Retain old events\" policy setting is enabled, new events are discarded and the old events are retained.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-log-autobackup-4"],"categoryId":"55a61bb8-e023-4741-8213-99995c5902e5","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_autobackup_4_1","displayName":"Enabled","description":null,"helpText":null}]},"e2e6c8615e8f3501":{"id":"device_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_2","displayName":"Restrict Internet communication","description":"This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.\r\n\r\nIf you enable this setting, all of the the policy settings listed in the \"Internet Communication settings\" section are set such that their respective features cannot access the Internet.\r\n\r\nIf you disable this policy setting, all of the the policy settings listed in the \"Internet Communication settings\" section are set such that their respective features can access the Internet.\r\n\r\nIf you do not configure this policy setting, all of the the policy settings in the \"Internet Communication settings\" section are set to not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-internetmanagement-restrictcommunication-2"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e2e89b2c1966b78d":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_addresslookuponpingbehavior","displayName":"Specify address lookup behavior for DC locator ping","description":"This policy setting configures how a domain controller (DC) behaves when responding to a client whose IP address does not map to any configured site.\r\n\r\nDomain controllers use the client IP address during a DC locator ping request to compute which Active Directory site the client belongs to. If no site mapping can be computed, the DC may do an address lookup on the client network name to discover other IP addresses which may then be used to compute a matching site for the client. \r\n\r\nThe allowable values for this setting result in the following behaviors:\r\n\r\n0 - DCs will never perform address lookups.\r\n1 - DCs will perform an exhaustive address lookup to discover additional client IP addresses.\r\n2 - DCs will perform a fast, DNS-only address lookup to discover additional client IP addresses.\r\n\r\nTo specify this behavior in the DC Locator DNS SRV records, click Enabled, and then enter a value. The range of values is from 0 to 2.\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-addresslookuponpingbehavior"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_addresslookuponpingbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_addresslookuponpingbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"e2700de8404e0a8d":{"id":"device_vendor_msft_policy_config_admx_power_dcstartmenubuttonaction_2","displayName":"Select the Start menu Power button action (on battery)","description":"This policy setting specifies the action that Windows takes when a user presses the Start menu Power button.\r\n\r\nIf you enable this policy setting, select one of the following actions:\r\n-Sleep\r\n-Hibernate\r\n-Shut down\r\n\r\nIf you disable this policy or do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dcstartmenubuttonaction-2"],"categoryId":"5d03766c-9480-43f2-9e85-461a44c821d4","categoryName":"Button Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcstartmenubuttonaction_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcstartmenubuttonaction_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e28fc7f161abb508":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_pv_qospriorityvalue","displayName":"Priority value","description":null,"helpText":"","infoUrls":[],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":null},"e24fb31dbd9630e0":{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_2","displayName":"Floppy Drives: Deny write access","description":"This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-floppydrives-denywrite-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e2b9e183489e926e":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablepersonalizationsettingsync","displayName":"Do not sync personalize","description":"Prevent the \"personalize\" group from syncing to and from this PC. This turns off and disables the \"personalize\" group on the \"sync your settings\" page in PC settings.\r\n\r\nIf you enable this policy setting, the \"personalize\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn personalize syncing on\" so that syncing it turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"personalize\" group is on by default and configurable by the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disablepersonalizationsettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablepersonalizationsettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablepersonalizationsettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"e2c5e48fccd2b83a":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_1","displayName":"Specify SHA1 thumbprints of certificates representing trusted .rdp publishers","description":"This policy setting allows you to specify a list of Secure Hash Algorithm 1 (SHA1) certificate thumbprints that represent trusted Remote Desktop Protocol (.rdp) file publishers.\r\n\r\nIf you enable this policy setting, any certificate with an SHA1 thumbprint that matches a thumbprint on the list is trusted. If a user tries to start an .rdp file that is signed by a trusted certificate, the user does not receive any warning messages when they start the file. To obtain the thumbprint, view the certificate details, and then click the Thumbprint field.\r\n\r\nIf you disable or do not configure this policy setting, no publisher is treated as a trusted .rdp publisher.\r\n\r\nNotes:\r\n\r\nYou can define this policy setting in the Computer Configuration node or in the User Configuration node. If you configure this policy setting for the computer, the list of certificate thumbprints trusted for a user is a combination of the list defined for the computer and the list defined for the user.\r\n\r\nThis policy setting overrides the behavior of the \"Allow .rdp files from valid publishers and user's default .rdp settings\" policy setting.\r\n\r\nIf the list contains a string that is not a certificate thumbprint, it is ignored.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-trusted-certificate-thumbprints-1"],"categoryId":"4c604a0e-9339-4c01-9536-b689bd0abe5f","categoryName":"Remote Desktop Connection Client","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_1_1","displayName":"Enabled","description":null,"helpText":null}]},"e2e31af33b446648":{"id":"device_vendor_msft_policy_config_appvirtualization_allowdynamicvirtualization","displayName":"Enable Dynamic Virtualization","description":"Enables Dynamic Virtualization of supported shell extensions, browser helper objects, and ActiveX controls.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowdynamicvirtualization"],"categoryId":"10835ce3-31c8-4ec6-aa00-c5af48e550a8","categoryName":"Virtualization","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowdynamicvirtualization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowdynamicvirtualization_1","displayName":"Enabled","description":null,"helpText":null}]},"e21dc1a6d8298e80":{"id":"device_vendor_msft_policy_config_appvirtualization_allowreportingserver_start_time","displayName":"Reporting Time","description":"","helpText":"","infoUrls":[],"categoryId":"e7cc16d8-f74f-4cd7-890d-9b4082a19c39","categoryName":"Reporting","options":null},"e2a8713f50afbf67":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath","displayName":"Alternative browser to launch for configured websites.","description":"Setting the policy controls which command to use to open URLs in an alternative browser. The policy can be set to one of ${ie}, ${firefox}, ${safari}, ${opera}, ${edge} or a file path. When this policy is set to a file path, that file is used as an executable file. ${ie} is only available on Microsoft® Windows®. ${safari} and ${edge} are only available on Microsoft® Windows® and macOS.\r\n\r\nLeaving the policy unset puts a platform-specific default in use: Internet Explorer® for Microsoft® Windows®, or Safari® for macOS. On Linux®, launching an alternative browser will fail.\r\n\r\nExample value: ${ie}","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_1","displayName":"Enabled","description":null,"helpText":null}]},"e290d037ed2dca8c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled","displayName":"Specifies whether in-product Google Chrome surveys are shown to users.","description":"Google Chrome in-product surveys collect user feedback for the browser. Survey responses are not associated with user accounts.\r\nWhen this policy is Enabled or not set, in-product surveys may be shown to users.\r\nWhen this policy is Disabled, in-product surveys are not shown to users.\r\n\r\nThis policy has no effect if MetricsReportingEnabled is set to Disabled, which disables in-product surveys as well.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e29bbcb5c1417d10":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled","displayName":"Choose whether the Privacy Sandbox Fingerprinting Protection feature is to be enabled in Incognito mode.","description":"A policy to control whether the Privacy Sandbox Fingerprinting Protection setting is to be enabled in Incognito mode or disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Fingerprinting Protection feature setting will be turned off for your users.\r\nIf you set this policy to Enabled, your users will have the Fingerprinting Protection feature setting turned on in Incognito mode.\r\nIf the policy is not set, users will be able to turn on or off the Fingerprinting Protection feature for Incognito mode in their UI settings. The default state will be false or disabled, meaning the Fingerprinting Protection feature will be turned off.","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e290e5a55074e723":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominbackgroundqos","displayName":"DO Min Background Qos","description":"Specifies the minimum download QoS (Quality of Service) in KiloBytes/sec for background downloads.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominbackgroundqos"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"e2212d55e81b4bab":{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"e2cf70f8e9cde75c":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar","displayName":"Show the cast icon in the toolbar","description":"Set this policy to true to show the Cast toolbar icon on the toolbar or the overflow menu. Users won't be able to remove it.\r\n\r\nIf you don't configure this policy or if you disable it, users can pin or remove the icon by using its contextual menu.\r\n\r\nIf you've also set the 'EnableMediaRouter' (Enable Google Cast) policy to false, then this policy is ignored, and the toolbar icon isn't shown.","helpText":"","infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},"e28b769371967a96":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled","displayName":"Restrict the length of passwords that can be saved in the Password Manager","description":"Make Microsoft Edge restrict the length of usernames and/or passwords that can be saved in the Password Manager.\r\n\r\nIf you enable this policy, Microsoft Edge will not let the user save credentials with usernames and/or passwords longer than 256 characters.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will let the user save credentials with arbitrarily long usernames and/or passwords.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e2e2ddeb5ccebded":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories","displayName":"Configure Web Content Filtering","description":"You can configure this policy to block certain categories of URLs. Blocking a category prevents users in specified device groups from accessing URLs associated with the category.\r\n\r\nThe list of possible categories, their Category String, and their description are detailed at https://go.microsoft.com/fwlink/?linkid=2249965\r\n\r\nTo block a category, add the Category String of the category to the following List of blocked categories If you leave this policy unset or disable the policy, no URLs will be blocked.\r\n\r\nIf you want to block a specific URL without blocking an entire category, add the URL to the list of blocked URLs using the 'URLBlocklist' (Block access to a list of URLs) policy.\r\n\r\nIf you want a specific URL in a blocked category to be accessible, add the URL to the list of allowed URLs using the 'URLAllowlist' (Define a list of allowed URLs) policy.\r\n\r\nThis Web Content Filtering policy only works on Microsoft Edge on Windows 10 devices or above.\r\n\r\nPolicy options mapping:\r\n\r\n* chat (chat) = Chat\r\n\r\n* child_abuse_images (child_abuse_images) = Child Abuse Images\r\n\r\n* criminal_activity (criminal_activity) = Criminal Activity\r\n\r\n* download_sites (download_sites) = Download Sites\r\n\r\n* gambling (gambling) = Gambling\r\n\r\n* games (games) = Games\r\n\r\n* hacking (hacking) = Hacking\r\n\r\n* hate_and_intolerance (hate_and_intolerance) = Hate and Intolerance\r\n\r\n* illegal_drug (illegal_drug) = Illegal Drug\r\n\r\n* illegal_software (illegal_software) = Illegal Software\r\n\r\n* image_sharing (image_sharing) = Image Sharing\r\n\r\n* instant_messaging (instant_messaging) = Instant Messaging\r\n\r\n* nudity (nudity) = Nudity\r\n\r\n* peer_to_peer (peer_to_peer) = Peer to Peer\r\n\r\n* pornography_or_sexually_explicit (pornography_or_sexually_explicit) = Pornography or Sexually Explicit\r\n\r\n* professional_networking (professional_networking) = Professional Networking\r\n\r\n* self_harm (self_harm) = Self Harm\r\n\r\n* sex_education (sex_education) = Sex Education\r\n\r\n* social_networking (social_networking) = Social Networking\r\n\r\n* streaming_and_downloads (streaming_and_downloads) = Streaming Media and Downloads\r\n\r\n* tasteless (tasteless) = Tasteless\r\n\r\n* violence (violence) = Violence\r\n\r\n* weapons (weapons) = Weapons\r\n\r\n* web_based_email (web_based_email) = Web Based Email\r\n\r\n* none (none) = None\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\ngambling\r\nstreaming_and_downloads\r\ngames","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_1","displayName":"Enabled","description":null,"helpText":null}]},"e21af2d8a7d5ce7f":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed","displayName":"Allow default search provider context menu search access","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider and sidebar search will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider and sidebar search will be available.\r\n\r\nThe policy value is only applied when the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"e26a54c928562933":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_1","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_3","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_4","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},"e298a772fc0a6450":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode","displayName":"Print PostScript Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode_1","displayName":"Type42","description":null,"helpText":null}]},"e23c127c559d0e34":{"id":"device_vendor_msft_policy_config_quiettime_allowusertochangesetting","displayName":"Allow user to change setting","description":"Disallowing end users from changing this setting will prevent them from editing their global quiet time settings. Note: If Non-working time policy is applied to the user, they will be prevented from editing their global quiet time settings by default.","helpText":"","infoUrls":[],"categoryId":"a876b9c1-f22c-48aa-9826-e112f4fbe6d8","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_quiettime_allowusertochangesetting_0","displayName":"No","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_allowusertochangesetting_1","displayName":"Yes","description":null,"helpText":null}]},"e22d8b6d04787f00":{"id":"device_vendor_msft_policy_config_search_allowwindowsindexer","displayName":"Allow Windows Indexer","description":"Allow Windows indexer. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowwindowsindexer"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":null},"e2db8aba56f1ac14":{"id":"device_vendor_msft_policy_config_secureboot_configuremicrosoftupdatemanagedoptin","displayName":"Configure Microsoft Update Managed Opt In","description":"This policy controls provides permission to opt-in to CFR servicing (Microsoft Managed)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SecureBoot#configuremicrosoftupdatemanagedoptin"],"categoryId":"a3e48951-624d-4fee-b470-d17ce16e6b0c","categoryName":"Secure Boot","options":[{"id":"device_vendor_msft_policy_config_secureboot_configuremicrosoftupdatemanagedoptin_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_secureboot_configuremicrosoftupdatemanagedoptin_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"e25c31a145e134ef":{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseivscharacters","displayName":"Allow Japanese IVS Characters","description":"Note The policy is only enforced in Windows 10 for desktop. Allows Japanese Ideographic Variation Sequence (IVS) characters. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapaneseivscharacters"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseivscharacters_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseivscharacters_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e266d2c11d10eb33":{"id":"device_vendor_msft_policy_config_wifi_allowinternetsharing","displayName":"Allow Internet Sharing","description":"Allow or disallow internet sharing. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowinternetsharing"],"categoryId":"0a803a48-789a-48b0-b928-e52d56ab17f1","categoryName":"Wi-Fi Settings","options":[{"id":"device_vendor_msft_policy_config_wifi_allowinternetsharing_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowinternetsharing_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e2b8e6ba02b7c70a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength","displayName":"Set CNG cipher key length (User)","description":"This policy setting allows you to configure the number of bits to use when creating the cipher key. This number will be rounded down to a multiple of 8.\r\n\r\nIf you enable this policy setting, the key bits specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default value will be used.","helpText":"","infoUrls":[],"categoryId":"7eaa5e09-e5ab-4051-b557-64a124ae497c","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength_1","displayName":"Enabled","description":null,"helpText":null}]},"e275b0b734c8d965":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_frontpageext","displayName":"FrontPage Server Extensions (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-frontpageext"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_frontpageext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_frontpageext_1","displayName":"Enabled","description":null,"helpText":null}]},"e27a35a0830e50f5":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_1","displayName":"Synchronize all offline files before logging off (User)","description":"Determines whether offline files are fully synchronized when users log off.\r\n\r\nThis setting also disables the \"Synchronize all offline files before logging off\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, offline files are fully synchronized. Full synchronization ensures that offline files are complete and current.\r\n\r\nIf you disable this setting, the system only performs a quick synchronization. Quick synchronization ensures that files are complete, but does not ensure that they are current.\r\n\r\nIf you do not configure this setting, the system performs a quick synchronization by default, but users can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To change the synchronization method without changing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the \"Synchronize all offline files before logging off\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatlogoff-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},"e2b06c8cc1c60642":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1","displayName":"Start a program on connection (User)","description":"Configures Remote Desktop Services to run a specified program automatically upon connection.\r\n\r\nYou can use this setting to specify a program to run automatically when a user logs on to a remote computer.\r\n\r\nBy default, Remote Desktop Services sessions provide access to the full Windows desktop, unless otherwise specified with this setting, by the server administrator, or by the user in configuring the client connection. Enabling this setting overrides the \"Start Program\" settings set by the server administrator or user. The Start menu and Windows Desktop are not displayed, and when the user exits the program the session is automatically logged off.\r\n\r\nTo use this setting, in Program path and file name, type the fully qualified path and file name of the executable file to be run when the user logs on. If necessary, in Working Directory, type the fully qualified path to the starting directory for the program. If you leave Working Directory blank, the program runs with its default working directory. If the specified program path, file name, or working directory is not the name of a valid directory, the RD Session Host server connection fails with an error message.\r\n\r\nIf the status is set to Enabled, Remote Desktop Services sessions automatically run the specified program and use the specified Working Directory (or the program default directory, if Working Directory is not specified) as the working directory for the program.\r\n\r\nIf the status is set to Disabled or Not Configured, Remote Desktop Services sessions start with the full desktop, unless the server administrator or user specify otherwise. (See \"Computer Configuration\\Administrative Templates\\System\\Logon\\Run these programs at user logon\" setting.)\r\n\r\nNote: This setting appears in both Computer Configuration and User Configuration. If both settings are configured, the Computer Configuration setting overrides.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-start-program-1"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_1","displayName":"Enabled","description":null,"helpText":null}]},"e2c582bfd82127fd":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync","displayName":"Microsoft Lync 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Lync 2016.\r\nBy default, the user settings of Microsoft Lync 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Lync 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016lync"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync_1","displayName":"Enabled","description":null,"helpText":null}]},"e2528105964bdeee":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad","displayName":"Notepad (User)","description":"This policy setting configures the synchronization of user settings of Notepad.\r\nBy default, the user settings of Notepad synchronize between computers. Use the policy setting to prevent the user settings of Notepad from synchronization between computers. \r\nIf you enable this policy setting, the Notepad user settings continue to synchronize. \r\nIf you disable this policy setting, Notepad user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-notepad"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad_1","displayName":"Enabled","description":null,"helpText":null}]},"e2e079b6392a3b4e":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxytype","displayName":"Proxy type (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxytype_3","displayName":"Autodetect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxytype_2","displayName":"Custom","description":null,"helpText":null}]},"e28a9b6411655aee":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_blockthirdpartycookies","displayName":"Block third party cookies (User)","description":"Setting the policy to Enabled prevents webpage elements that aren't from the domain that's in the browser's address bar from setting cookies. Setting the policy to Disabled lets those elements set cookies and prevents users from changing this setting.\r\n\r\nLeaving it unset turns third-party cookies on, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_blockthirdpartycookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_blockthirdpartycookies_1","displayName":"Enabled","description":null,"helpText":null}]},"e256eadbe77c89a0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURL specifies the URL of the search engine used for image search. (If DefaultSearchProviderImageURLPostParams is set, then image search requests use the POST method instead.)\r\n\r\nLeaving DefaultSearchProviderImageURL unset means no image search is used.\r\n\r\nExample value: https://search.my.company/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e2c16d6e91e23983":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls","displayName":"Block images on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify sites that can't display images.\r\n\r\nLeaving the policy unset means DefaultImagesSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\n For detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\n Note that previously this policy was erroneously enabled on Android, but this functionality has never been fully supported on Android.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e28359d221749842":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings","displayName":"Settings for the Lens Overlay feature (User)","description":"Lens Overlay lets users perform contextual Google searches either via a screenshot or by asking a question about the current page's contents. This feature requires the end user to opt-in.\r\n\r\nThis feature is available to all users with Google as their default search engine, unless it is disabled by this policy.\r\n\r\nWhen policy is set to 0 - Allow or not set, the feature will be available to users.\r\n\r\nWhen policy is set to 1 - Do not allow, the feature will not be available.\r\n\r\nStarting in Google Chrome 140, if the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"e2a118a594633a52":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros","displayName":"Alt+F8 (Developer | Code | Macros) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_1","displayName":"True","description":null,"helpText":null}]},"e24c2f844c6f63d7":{"id":"user_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist","displayName":"Add-on List (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"e2c9d03f2a2c4fcf":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowlessprivilegedsites"],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"e228a7e96197602f":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended","displayName":"Allow importing of browsing history (User)","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.\r\n\r\nIf you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e257aa3769ef5a04":{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled","displayName":"Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured (User)","description":"If you enable this policy, users are allowed to add and remove their own URLs to open when starting Edge while maintaining the admin specified mandatory list of sites specified by setting 'RestoreOnStartup' (Action to take on startup) policy to open a list of URLS and providing the list of sites in the 'RestoreOnStartupURLs' (Sites to open when the browser starts) policy.\r\n\r\nIf you disable or don't configure this policy, there is no change to how the 'RestoreOnStartup' and 'RestoreOnStartupURLs' policies work.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e2666715bed0fb11":{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled","displayName":"Allow DNS queries for more DNS record types (User)","description":"This policy controls whether Microsoft Edge can query more DNS record types when making insecure (non-Secure DNS) requests.\r\n\r\nIf this policy is unset or set to Enabled, more record types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).\r\n\r\nIf this policy is set to Disabled, Microsoft Edge will only query A and AAAA record types for insecure DNS requests.\r\n\r\nThis setting doesn't affect DNS queries made via Secure DNS, which may always use more record types.\r\n\r\nNote: This is a temporary policy and is planned for removal in a future version of Microsoft Edge. After removal, Microsoft Edge will always be able to query more DNS types during insecure requests.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e23170a6bc392a31":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended","displayName":"Default search provider encodings (User)","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.\r\n\r\nThis policy is optional. If not configured, the default, UTF-8, is used.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e2189f762bc5d02f":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (User)","description":"If you set this policy to 3, websites can ask for write access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\r\n\r\nIf you don't set this policy, websites can ask for access. Users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockFileSystemWrite (2) = Don't allow any site to request write access to files and directories\r\n\r\n* AskFileSystemWrite (3) = Allow sites to ask the user to grant write access to files and directories\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e271e8f6d4406207":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice05_l_broadcastserviceservercapabilities5","displayName":"Server Capabilities flags: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"e2792d83077c6395":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_errorscleanupinterval_l_errorscleanupintervaldecimal","displayName":"Errors cleanup interval (minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":null},"e27f912a573b186c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslinkandanattachment_l_withasimplewebdiscussionslinkandanattachment364","displayName":"With a simple Web discussions link and an attachment (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":null},"e25ef6606c5bb982":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacehome2_l_home2labelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"e26f39af2323ab8d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishnewzealand","displayName":"English (New Zealand) (User)","description":"Enables the editing language English (New Zealand)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishnewzealand_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishnewzealand_1","displayName":"Enabled","description":null,"helpText":null}]},"e2746176d5efae6d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog10_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":null},"e202faee3cdec971":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_suggestnameswhilecompletingtoccandbccfields","displayName":"Suggest names while completing To, Cc, and Bcc fields (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_suggestnameswhilecompletingtoccandbccfields_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_suggestnameswhilecompletingtoccandbccfields_1","displayName":"Enabled","description":null,"helpText":null}]},"e2cffbdba125242b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1addfilepolicy","displayName":"Add file extensions to block as Level 1 (User)","description":"This policy setting controls which types of attachments (determined by file extension) Outlook prevents from being delivered. \r\n\r\nOutlook uses two levels of security to restrict users' access to files attached to e-mail messages or other items. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n\r\nIf you enable this policy setting, you can specify additional file type extensions as Level 1--that is, to be blocked from delivery--by entering them in the text field provided separated by semicolons. \r\n\r\nIf you disable or do not configure this policy setting, Outlook classifies a number of potentially harmful file types (such as those with .exe, .reg, and .vbs extensions) as Level 1 and blocks files with those extensions from being delivered. Important: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1addfilepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1addfilepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"e2c754a91b40cb73":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions_l_disableguesssmart","displayName":"Disable GuessSmart in Outlook. (User)","description":"This policy setting determines whether GuessSmart will be used to configure an account.\r\n\r\nIf you enable this policy setting, GuessSmart will not be used to configure an account.","helpText":"","infoUrls":[],"categoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","categoryName":"Outlook Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions_l_disableguesssmart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions_l_disableguesssmart_1","displayName":"Enabled","description":null,"helpText":null}]},"e21c3a377662d7c1":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys158","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable any shortcut key by using its virtual key code ID, including shortcut keys that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter a virtual key code ID number to disable a specific shortcut key.\r\n\r\nIf you disable or do not configure this policy setting, all default shortcut keys are enabled for users.","helpText":"","infoUrls":[],"categoryId":"a20fe651-0f0a-4ddd-9d8b-273f17c89e22","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys158_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys158_1","displayName":"Enabled","description":null,"helpText":null}]},"e2001f41ae25179b":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy","displayName":"VBA Macro Notification Settings (User)","description":"This policy setting controls how the specified applications warn users when Visual Basic for Applications (VBA) macros are present.\r\n\r\nIf you enable this policy setting, you can choose from four options for determining how the specified applications will warn the user about macros:\r\n \r\n- Disable all with notification: The application displays the Trust Bar for all macros, whether signed or unsigned. This option enforces the default configuration in Office.\r\n \r\n- Disable all except digitally signed macros: The application displays the Trust Bar for digitally signed macros, allowing users to enable them or leave them disabled. Any unsigned macros are disabled, and users are not notified.\r\n \r\n- Disable all without notification: The application disables all macros, whether signed or unsigned, and does not notify users.\r\n \r\n- Enable all macros (not recommended): All macros are enabled, whether signed or unsigned. This option can significantly reduce security by allowing dangerous code to run undetected.\r\n \r\nIf you disable this policy setting, \"Disable all with notification\" will be the default setting.\r\n \r\nIf you do not configure this policy setting, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking \"Enable Content\" on the Trust Bar. If the user clicks \"Enable Content\", then the document is added as a trusted document.\r\n \r\nImportant: If \"Disable all except digitally signed macros\" is selected, users will not be able to open unsigned Access databases.\r\n \r\nAlso, note that Microsoft Office stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Microsoft Office still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store.\r\n \r\nTherefore, if you created a list of trusted publishers in a previous version of Microsoft Office and you upgrade to Office, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"e2113364dde1e524":{"id":"user_vendor_msft_policy_config_start_hiderecentjumplists","displayName":"Hide Recent Jumplists (User)","description":"Enabling this policy hides recent jumplists from appearing on the start menu/taskbar and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderecentjumplists"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_hiderecentjumplists_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hiderecentjumplists_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"e296f4c59136f219":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_descriptioncolon50","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"e2ae23bd0af4a23f":{"id":"vendor_msft_firewall_mdmstore_publicprofile_defaultinboundaction","displayName":"Default Inbound Action for Public Profile","description":"Specifies how to filter inbound traffic. The acceptable values for this parameter are: NotConfigured, Allow, or Block.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_defaultinboundaction_0","displayName":"Allow","description":"Allow Inbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_defaultinboundaction_1","displayName":"Block","description":"Block Inbound By Default","helpText":null}]},"e2397a9e37b36ed6":{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablelogignoredrules","displayName":"Enable Log Ignored Rules","description":"This value is used as an on/off switch. The server MAY use this value in an implementation-specific way to control logging of events if a rule is not enforced for any reason. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablelogignoredrules_false","displayName":"Disable Logging Of Ignored Rules","description":"Disable Logging Of Ignored Rules","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablelogignoredrules_true","displayName":"Enable Logging Of Ignored Rules","description":"Enable Logging Of Ignored Rules","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e3.json b/public/intune-definitions/e3.json new file mode 100644 index 000000000000..dcf1fa2fa11f --- /dev/null +++ b/public/intune-definitions/e3.json @@ -0,0 +1 @@ +{"e369eaed3fcf3d8b":{"id":"ade_maximumcachedusers","displayName":"Maximum cached users","description":"The maximum number of users that can use a Shared iPad. You can cache up to 24 users on a 32GB or 64GB device.","helpText":null,"infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":null},"e3662103237c956a":{"id":"ade_useraffinity_awaitfinalconfiguration","displayName":"Await final configuration","description":"Keeps the device in Setup Assistant until the first sync between the device and Intune installs policies.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_useraffinity_awaitfinalconfiguration_0","displayName":"No","description":null,"helpText":null},{"id":"ade_useraffinity_awaitfinalconfiguration_1","displayName":"Yes","description":null,"helpText":null}]},"e392e3bc11cd1ca4":{"id":"com.android.devicerestrictionpolicy.screencaptureblockedaosp","displayName":"Block screen capture","description":"If 'True', prevents screenshots or screen captures on the device. It also prevents the content from being shown on display devices that don't have a secure video output. If 'False', Intune doesn't change or update this setting. By default, the OS might let users capture the screen contents as an image.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.screencaptureblockedaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.screencaptureblockedaosp_true","displayName":"True","description":"True","helpText":null}]},"e3755c306f400656":{"id":"com.apple.applicationaccess_allowmailprivacyprotection","displayName":"Allow Mail Privacy Protection","description":"If false, disables Mail Privacy Protection on the device. Available in iOS 15.2 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowmailprivacyprotection_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowmailprivacyprotection_true","displayName":"True","description":null,"helpText":null}]},"e38251cba2412065":{"id":"com.apple.applicationaccess_forcedelayedmajorsoftwareupdates","displayName":"Force Delayed Major Software Updates (Deprecated)","description":"If true, delays user visibility of non-OS Software Updates. Requires a supervised device. Visibility of Operating System updates is controlled through Force Delayed Software Updates. The delay is 30 days unless Enforced Software Update Delay is set to another value. Available in macOS 11 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcedelayedmajorsoftwareupdates_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcedelayedmajorsoftwareupdates_true","displayName":"True","description":null,"helpText":null}]},"e33b673f69723952":{"id":"com.apple.dock_windowtabbing-immutable","displayName":"Window Tabbing Immutable","description":"If true, disables \"Prefer tabs when opening documents\" checkbox.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_windowtabbing-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_windowtabbing-immutable_true","displayName":"True","description":null,"helpText":null}]},"e311efde107d46a3":{"id":"com.apple.managedclient.preferences_searchsuggestenabled","displayName":"Enable search suggestions","description":"Enables web search suggestions in Microsoft Edge's Address Bar and Auto-Suggest List and prevents users from changing this policy.\n\nIf you enable this policy, web search suggestions are used.\n\nIf you disable this policy, web search suggestions are never used, however local history and local favorites suggestions still appear. If you disable this policy, neither the typed characters, nor the URLs visited will be included in telemetry to Microsoft.\n\nIf this policy is left not set, search suggestions are enabled but the user can change that.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#searchsuggestenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_searchsuggestenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_searchsuggestenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e386953ad497a725":{"id":"com.apple.mcx_disableguestaccount","displayName":"Disable Guest Account","description":"If true, disables the guest account. This property has no effect if Enable Guest Account is true.","helpText":null,"infoUrls":[],"categoryId":"5214f1e7-a5a9-4de5-80b4-2f7084a8d068","categoryName":"Accounts","options":[{"id":"com.apple.mcx_disableguestaccount_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_disableguestaccount_true","displayName":"True","description":null,"helpText":null}]},"e3ff54522a6e8ef0":{"id":"com.apple.system-extension-policy_com.apple.system-extension-policy","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"e3cdc1a3aa53cb02":{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_recommended","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar (users can override)","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon is shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\n\nThis policy only applies when users are accessing Copilot in the sidepane.\n\nIf the policy is enabled: Copilot appears in the toolbar.\n\nIf the policy is disabled: Copilot doesn't appear in the toolbar.\n\nIf the policy isn't configured: Otherwise, Copilot shows in the toolbar and users can enable or disable Copilot from showing by using the Show Copilot toggle in settings.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"e3ab5c1303c8b724":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_2","displayName":"Automatically send memory dumps for OS-generated error reports","description":"This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically. This policy does not apply to error reports generated by 3rd-party products, or additional data other than memory dumps.\r\n\r\nIf you enable or do not configure this policy setting, any memory dumps generated for error reports by Microsoft Windows are automatically uploaded, without notification to the user.\r\n\r\nIf you disable this policy setting, then all memory dumps are uploaded according to the default consent and notification settings.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werautoapproveosdumps-2"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e3c9e0d18a0c700d":{"id":"device_vendor_msft_policy_config_admx_kdc_forestsearch","displayName":"Use forest search order","description":"This policy setting defines the list of trusting forests that the Key Distribution Center (KDC) searches when attempting to resolve two-part service principal names (SPNs).\r\n\r\nIf you enable this policy setting, the KDC will search the forests in this list if it is unable to resolve a two-part SPN in the local forest. The forest search is performed by using a global catalog or name suffix hints. If a match is found, the KDC will return a referral ticket to the client for the appropriate domain.\r\n\r\nIf you disable or do not configure this policy setting, the KDC will not search the listed forests to resolve the SPN. If the KDC is unable to resolve the SPN because the name is not found, NTLM authentication might be used.\r\n\r\nTo ensure consistent behavior, this policy setting must be supported and set identically on all domain controllers in the domain.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kdc#admx-kdc-forestsearch"],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_forestsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_forestsearch_1","displayName":"Enabled","description":null,"helpText":null}]},"e3eb3a2b7d01e3eb":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_protectedfolders_exploitguard_controlledfolderaccess_protectedfolders_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":null},"e32a0cd186e044ec":{"id":"device_vendor_msft_policy_config_admx_nca_dtes_dtes_control","displayName":"DTEs","description":null,"helpText":"","infoUrls":[],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":null},"e3ab1687b77d5e2c":{"id":"device_vendor_msft_policy_config_admx_power_enabledesktopslideshowac","displayName":"Turn on desktop background slideshow (plugged in)","description":"This policy setting allows you to specify if Windows should enable the desktop background slideshow.\n\nIf you enable this policy setting, desktop background slideshow is enabled.\n\nIf you disable this policy setting, the desktop background slideshow is disabled.\n\nIf you disable or do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-enabledesktopslideshowac"],"categoryId":"01da0c26-af30-4eb2-a899-7d5e7ecb9738","categoryName":"Video and Display Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_enabledesktopslideshowac_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_enabledesktopslideshowac_1","displayName":"Enabled","description":null,"helpText":null}]},"e3a702a1ad7d4d59":{"id":"device_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_2","displayName":"Set time (in seconds) to force reboot","description":"This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices.\r\n\r\nIf you enable this policy setting, you can set the number of seconds you want the system to wait until a reboot.\r\n\r\nIf you disable or do not configure this setting, the operating system does not force a reboot.\r\n\r\nNote: If no reboot is forced, the access right does not take effect until the operating system is restarted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-accessrights-reboottime-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e39c52849cbbf0f1":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list","displayName":"Sync Method:","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_syncprovider","displayName":"SyncProvider","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_none","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_external","displayName":"External","description":null,"helpText":null}]},"e3005413623df905":{"id":"device_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist","displayName":"Allow Microsoft Compatibility List","description":"This policy setting lets you decide whether the Microsoft Compatibility List is enabled or disabled in Microsoft Edge. This feature uses a Microsoft-provided list to ensure that any sites with known compatibility issues are displayed correctly when a user navigates to them. By default, the Microsoft Compatibility List is enabled and can be viewed by navigating to about:compat. If you enable or don’t configure this setting, Microsoft Edge will periodically download the latest version of the list from Microsoft and will apply the configurations specified there during browser navigation. If a user visits a site on the Microsoft Compatibility List, he or she will be prompted to open the site in Internet Explorer 11. Once in Internet Explorer, the site will automatically be rendered as if the user is viewing it in the previous version of Internet Explorer it requires to display correctly. If you disable this setting, the Microsoft Compatibility List will not be used during browser navigation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowmicrosoftcompatibilitylist"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e32a3c0f03eff492":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes","description":"Setting the policy turns off enforcement of Certificate Transparency disclosure requirements for a list of subjectPublicKeyInfo hashes. Enterprise hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed). To turn off enforcement, the hash must meet one of these conditions:\r\n\r\n* It's of the server certificate's subjectPublicKeyInfo.\r\n\r\n* It's of a subjectPublicKeyInfo that appears in a Certificate Authority (CA) certificate in the certificate chain. That CA certificate is constrained through the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName has an organizationName attribute.\r\n\r\n* It's of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate has the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\r\n\r\nSpecify a subjectPublicKeyInfo hash by linking the hash algorithm name, a slash, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. Base64 encoding format matches that of an SPKI Fingerprint. The only recognized hash algorithm is sha256; others are ignored.\r\n\r\nLeaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_1","displayName":"Enabled","description":null,"helpText":null}]},"e3d0864aefbaec62":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures","displayName":"Enable deprecated web platform features for a limited time","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"e346eaa5e9874a7a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e30b53fc2cc22a81":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension","displayName":"Load the CryptoToken component extension at startup","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension_1","displayName":"Enabled","description":null,"helpText":null}]},"e3b96d7616c53df8":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses","displayName":"Block Adobe Reader from creating child processes","description":"This rule prevents attacks by blocking Adobe Reader from creating additional processes.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_warn","displayName":"Warn","description":null,"helpText":null}]},"e33d3220c91acd85":{"id":"device_vendor_msft_policy_config_devicelock_maxinactivitytimedevicelock","displayName":"Max Inactivity Time Device Lock","description":"Specifies the maximum amount of time (in minutes) allowed after the device is idle that will cause the device to become PIN or password locked. Users can select any existing timeout value less than the specified maximum time in the Settings app. 0 - No timeout is defined","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#maxinactivitytimedevicelock"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"e30c213fa548cd55":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_odfcreattachcount","displayName":"Reattach Count (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"e3d5f4da29fc0217":{"id":"device_vendor_msft_policy_config_games_allowadvancedgamingservices","displayName":"Allow Advanced Gaming Services","description":"Specifies whether advanced gaming services can be used. These services may send data to Microsoft or publishers of games that use these services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Games#allowadvancedgamingservices"],"categoryId":"0497eec4-fe3a-44f2-8caf-b5ab11839893","categoryName":"Games","options":[{"id":"device_vendor_msft_policy_config_games_allowadvancedgamingservices_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_games_allowadvancedgamingservices_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e3a9ad417bb9753e":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"e3e7d55bb9837f85":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Automatic logon with current username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonelogonoptions"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"e3be36502d966c10":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneinitializeandscriptactivexcontrols"],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"e34644db3d5d744d":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression","displayName":"Configure SIP compression mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_0","displayName":"Always disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_1","displayName":"Always enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_2","displayName":"Based on adaptor speed (default)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_3","displayName":"Based on ping round-trip time","description":null,"helpText":null}]},"e3dfc957151b5673":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_localfontsallowedforurls_localfontsallowedforurlsdesc","displayName":"Allow Local Fonts permission on these sites","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e368a28769608aae":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings","displayName":"Configure extension management settings","description":"Configures extension management settings for Microsoft Edge.\r\n\r\nThis policy controls multiple settings, including settings controlled by any existing extension-related policies. This policy overrides any legacy policies if both are set.\r\n\r\nThis policy maps an extension ID or an update URL to its configuration. With an extension ID, the configuration is applied only to the specified extension. Set a default configuration for the special ID \"*\", to apply to all extensions that aren't specifically listed in this policy. With an update URL, the configuration is applied to all extensions with the exact update URL stated in manifest of this extension, as described at https://go.microsoft.com/fwlink/?linkid=2095043.\r\n\r\nExample value:\r\n\r\n{\r\n \"abcdefghijklmnopabcdefghijklmnop\": {\r\n \"blocked_permissions\": [\r\n \"history\"\r\n ], \r\n \"installation_mode\": \"allowed\", \r\n \"minimum_version_required\": \"1.0.1\"\r\n }, \r\n \"bcdefghijklmnopabcdefghijklmnopa\": {\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.contoso.com\"\r\n ], \r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ], \r\n \"update_url\": \"https://contoso.com/update_url\", \r\n \"runtime_allowed_hosts\": [\r\n \"*://good.contoso.com\"\r\n ], \r\n \"installation_mode\": \"force_installed\"\r\n }, \r\n \"cdefghijklmnopabcdefghijklmnopab\": {\r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"installation_mode\": \"blocked\"\r\n }, \r\n \"*\": {\r\n \"blocked_permissions\": [\r\n \"downloads\", \r\n \"bookmarks\"\r\n ], \r\n \"installation_mode\": \"blocked\", \r\n \"runtime_blocked_hosts\": [\r\n \"*://*.contoso.com\"\r\n ], \r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"allowed_types\": [\r\n \"hosted_app\"\r\n ], \r\n \"runtime_allowed_hosts\": [\r\n \"*://good.contoso.com\"\r\n ], \r\n \"install_sources\": [\r\n \"https://company-intranet/apps\"\r\n ]\r\n }, \r\n \"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd\": {\r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"installation_mode\": \"blocked\"\r\n }, \r\n \"fghijklmnopabcdefghijklmnopabcde\": {\r\n \"blocked_install_message\": \"Custom removal message.\", \r\n \"installation_mode\": \"removed\"\r\n }, \r\n \"update_url:https://www.contoso.com/update.xml\": {\r\n \"blocked_permissions\": [\r\n \"wallpaper\"\r\n ], \r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ], \r\n \"installation_mode\": \"allowed\"\r\n }\r\n}","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"e382f325bf22e955":{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended","displayName":"Efficiency mode enabled","description":"Enables efficiency mode which helps extend battery life by saving computer resources. By default, efficiency mode is enabled for devices with a battery and disabled otherwise.\r\n\r\nIf you enable this policy, efficiency mode will become active according to the setting chosen by the user. You can configure the efficiency mode setting using the 'EfficiencyMode' (Configure when efficiency mode should become active) policy. If the device does not have a battery, efficiency mode will always be active.\r\n\r\nIf you disable this policy, efficiency mode will never become active. The 'EfficiencyMode' and 'EfficiencyModeOnPowerEnabled' (Enable efficiency mode when the device is connected to a power source) policies will have no effect.\r\n\r\nIf you don't configure this policy, efficiency mode will be enabled for devices with a battery and disabled otherwise. Users can choose the efficiency mode option they want in edge://settings/system.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e3b5d88c2e71d4db":{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended","displayName":"Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work profile","description":"Allow your organization's logo from Entra, if any, to be overlaid on the Microsoft Edge app icon of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\r\n\r\nIf you enable this policy, your organization's logo from Entra will be used.\r\n\r\nIf you disable or don't configure this policy, your organization's logo from Entra won't be used.\r\n\r\nFor more information about configuring your organization's logo on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e3a9d5bef23b7359":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls","displayName":"Manage exposure of local IP addressess by WebRTC","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*contoso.com*\") for which local IP address should be exposed by WebRTC.\r\n\r\nIf you enable this policy and set a list of origins (URLs) or hostname patterns, when edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will expose the local IP address for cases that match patterns in the list.\r\n\r\nIf you disable or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will not expose local IP addresses. The local IP address is concealed with an mDNS hostname.\r\n\r\nIf you enable, disable, or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, WebRTC will expose local IP addresses.\r\n\r\nPlease note that this policy weakens the protection of local IP addresses that might be needed by administrators.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n*contoso.com*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e368086f7e400229":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode","displayName":"Control the mode of DNS-over-HTTPS","description":"Control the mode of the DNS-over-HTTPS resolver. Note that this policy will only set the default mode for each query. The mode can be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.\r\n\r\nThe \"off\" mode will disable DNS-over-HTTPS.\r\n\r\nThe \"automatic\" mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error.\r\n\r\nThe \"secure\" mode will only send DNS-over-HTTPS queries and will fail to resolve on error.\r\n\r\nIf you don't configure this policy, the browser might send DNS-over-HTTPS requests to a resolver associated with the user's configured system resolver.\r\n\r\nExample value: off","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_1","displayName":"Enabled","description":null,"helpText":null}]},"e34054c4458b66f5":{"id":"device_vendor_msft_policy_config_start_hideshutdown","displayName":"Hide Shut Down","description":"Enabling this policy hides \"Shut down/Update and shut down\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideshutdown"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hideshutdown_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideshutdown_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"e332ec7f3475564f":{"id":"device_vendor_msft_policy_config_system_disableonesettingsdownloads","displayName":"Disable One Settings Downloads","description":"This policy setting controls whether Windows attempts to connect with the OneSettings service. If you enable this policy, Windows will not attempt to connect with the OneSettings Service. If you disable or don't configure this policy setting, Windows will periodically attempt to connect with the OneSettings service to download configuration settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disableonesettingsdownloads"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_disableonesettingsdownloads_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disableonesettingsdownloads_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},"e3f61be19b8d84e3":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edgecanary","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"e3c00aaaa31875ee":{"id":"user_vendor_msft_policy_config_admx_controlpanel_nocontrolpanel","displayName":"Prohibit access to Control Panel and PC settings (User)","description":"Disables all Control Panel programs and the PC settings app.\r\n\r\nThis setting prevents Control.exe and SystemSettings.exe, the program files for Control Panel and PC settings, from starting. As a result, users cannot start Control Panel or PC settings, or run any of their items.\r\n\r\nThis setting removes Control Panel from:\r\nThe Start screen\r\nFile Explorer\r\n\r\nThis setting removes PC settings from:\r\nThe Start screen\r\nSettings charm\r\nAccount picture\r\nSearch results\r\n\r\nIf users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-nocontrolpanel"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_nocontrolpanel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_nocontrolpanel_1","displayName":"Enabled","description":null,"helpText":null}]},"e3fde02afd125167":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname","displayName":"Set default name for new Group Policy objects (User)","description":"This policy setting allows you to set the default display name for new Group Policy objects.\r\n\r\nThis setting allows you to specify the default name for new Group Policy objects created from policy compliant Group Policy Management tools including the Group Policy tab in Active Directory tools and the GPO browser.\r\n\r\nThe display name can contain environment variables and can be a maximum of 255 characters long.\r\n\r\nIf this setting is Disabled or Not Configured, the default display name of New Group Policy object is used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-newgpodisplayname"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname_1","displayName":"Enabled","description":null,"helpText":null}]},"e3b867573b2c1afa":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamemyrasconnection","displayName":"Prohibit renaming private remote access connections (User)","description":"Determines whether users can rename their private remote access connections.\r\n\r\nPrivate connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the \"Only for myself\" option.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Rename option is disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Rename option is enabled for all users' private remote access connections. Users can rename their private connection by clicking an icon representing the connection or by using the File menu.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renamemyrasconnection"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamemyrasconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamemyrasconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"e3e77fb63680ba98":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_spellchecklanguageblacklistdesc","displayName":"Force disable spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"e391894763478a82":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled","displayName":"Enable Instant (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e371a3c6874e0827":{"id":"user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport","displayName":"Turn off encryption support (User)","description":"This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0, or SSL 3.0 in the browser. TLS and SSL are protocols that help protect communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other’s list of supported protocols and versions, and they select the most preferred match.\n\nIf you enable this policy setting, the browser negotiates or does not negotiate an encryption tunnel by using the encryption methods that you select from the drop-down list.\n\nIf you disable or do not configure this policy setting, the user can select which encryption method the browser supports.\n\nNote: SSL 2.0 is off by default and is no longer supported starting with Windows 10 Version 1607. SSL 2.0 is an outdated security protocol, and enabling SSL 2.0 impairs the performance and functionality of TLS 1.0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableencryptionsupport"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_1","displayName":"Enabled","description":null,"helpText":null}]},"e3081b8a9eb2ec0c":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets","displayName":"Allow scriptlets (User)","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowscriptlets"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"e312cb4f98f9c4ad":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"e393458093d5b7b2":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech","displayName":"Configure Online Text To Speech (User)","description":"Set whether the browser can leverage Online Text to Speech voice fonts, part of Azure Cognitive Services. These voice fonts are higher quality than the pre-installed system voice fonts.\r\n\r\nIf you enable or don't configure this policy, web-based applications that use the SpeechSynthesis API can use Online Text to Speech voice fonts.\r\n\r\nIf you disable this policy, the voice fonts aren't available.\r\n\r\nRead more about this feature here:\r\nSpeechSynthesis API: https://go.microsoft.com/fwlink/?linkid=2110038\r\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2110141","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_1","displayName":"Enabled","description":null,"helpText":null}]},"e3fac78de654f617":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation","displayName":"Websites or domains that don't need permission to use direct Security Key attestation (User)","description":"Specifies websites and domains that don't need explicit user permission when attestation certificates from security keys are requested. Additionally, a signal is sent to the security key indicating that it can use individual attestation. Without this, users are prompted each time a site requests attestation of security keys.\r\n\r\nSites (like https://contoso.com/some/path) only match as U2F appIDs. Domains (like contoso.com) only match as webauthn RP IDs. To cover both U2F and webauthn APIs for a given site, you need to list both the appID URL and domain.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_1","displayName":"Enabled","description":null,"helpText":null}]},"e3bad8257b9266ca":{"id":"user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls","displayName":"Allow listed sites connect to specific HID devices (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e321ead3290266d4":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications","displayName":"Allows system notifications (User)","description":"Lets you use system notifications instead of Microsoft Edge's embedded Message Center on Windows and Linux.\r\n\r\nIf set to True or not set, Microsoft Edge is allowed to use system notifications.\r\n\r\nIf set to False, Microsoft Edge will not use system notifications. Microsoft Edge's embedded Message Center will be used as a fallback.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"e33ac63e9d030b86":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled","displayName":"Machine learning powered autofill suggestions (User)","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and will not be used elsewhere.\r\n\r\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\r\n\r\nIf you disable this policy, machine learning powered autofill suggestions will not be shown, and autofill will no longer use cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e3794c11cf1ea418":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare","displayName":"Configure the Share experience (User)","description":"If you set this policy to 'ShareAllowed' (0, the default), users will be able to access the Windows 10 Share experience from the Settings and More Menu in Microsoft Edge to share with other apps on the system.\r\n\r\nIf you set this policy to 'ShareDisallowed' (1), users won't be able to access the Windows 10 Share experience. If the Share button is on the toolbar, it will also be hidden.\r\n\r\n* 0 = Allow using the Share experience\r\n\r\n* 1 = Don't allow using the Share experience\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_1","displayName":"Enabled","description":null,"helpText":null}]},"e359742fd52ac649":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed","displayName":"Allow default search provider context menu search access (User)","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider and sidebar search will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider and sidebar search will be available.\r\n\r\nThe policy value is only applied when the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"e33025ea95fc2c84":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicy","displayName":"Age out documents older than n days (User)","description":"This policy controls when locally cached Office documents are aged out of the Office Document Cache","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"e3dac31b14f1a4ac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice08_l_broadcastservicemajorversion8","displayName":"Server Major Version: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"e3dc1caf8f73ad1b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehomeadd","displayName":"Replace MAPI - Home Address (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"home address\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"home address\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehomeadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacehomeadd_1","displayName":"Enabled","description":null,"helpText":null}]},"e3773cea439bc3e4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy4","displayName":"Places Bar Location 4 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy4_1","displayName":"Enabled","description":null,"helpText":null}]},"e375f05ab8861692":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_automaticdiscovery_l_automaticdiscovery210","displayName":"Automatic Discovery (User)","description":"","helpText":"","infoUrls":[],"categoryId":"13123148-c522-437f-b316-d78f5cc0d28d","categoryName":"Shared Workspace","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_automaticdiscovery_l_automaticdiscovery210_on","displayName":"On","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace_l_automaticdiscovery_l_automaticdiscovery210_off","displayName":"Off","description":null,"helpText":null}]},"e300282c1969ad81":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_norwegiannynorsk","displayName":"Norwegian (Nynorsk) (User)","description":"Enables the editing language Norwegian (Nynorsk)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_norwegiannynorsk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_norwegiannynorsk_1","displayName":"Enabled","description":null,"helpText":null}]},"e3b8083f3e09f816":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yoruba","displayName":"Yoruba (User)","description":"Enables the editing language Yoruba","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yoruba_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_yoruba_1","displayName":"Enabled","description":null,"helpText":null}]},"e32eb6491aee99f7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache13_l_workflowpath489","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"e337d2e931677bfc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changethelimitfriendlyname_l_empty72","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":null},"e3f67157d8d85122":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_allowcryptoautosave","displayName":"Extend Outlook Autosave to include encrypted e-mail messages (User)","description":"By default, Outlook does not automatically save copies of unsent e-mail messages that are encrypted. You can enable this setting so that Outlook autosaves unsent encrypted e-mail messages to the user's Drafts folder.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_allowcryptoautosave_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_allowcryptoautosave_1","displayName":"Enabled","description":null,"helpText":null}]},"e3f5eebbaa6eb059":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_saverssconflicts","displayName":"Save RSS conflicts (User)","description":"This policy setting allows you to save RSS conflicts.\r\n\r\nIf you enable this policy setting, RSS conflicts will be saved. This policy setting takes precedence over the \"Prevent saving sync conflicts\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, RSS conflicts are not saved.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_saverssconflicts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_saverssconflicts_1","displayName":"Enabled","description":null,"helpText":null}]},"e39aaef1ca384b30":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest","displayName":"Configure Outlook object model prompt when responding to meeting and task requests (User) (Deprecated)","description":"This policy setting controls what happens when an untrusted program attempts to programmatically send e-mail in Outlook using the Response method of a task or meeting request. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to programmatically send e-mail using the Response method of a task or meeting request:\r\n\r\n- Prompt user. The user will be prompted to approve every access attempt.\r\n- Automatically approve. Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended.\r\n- Automatically deny. Outlook will automatically deny programmatic access requests from any program. \r\n- Prompt user based on computer security. Outlook only prompts users when antivirus software is out of date or not running. This is the default configuration. \r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to respond to tasks or meeting requests programmatically, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center. ","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_1","displayName":"Enabled","description":null,"helpText":null}]},"e35b37ec807cca42":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize80","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"categoryId":"28ab8eed-623a-4e9b-813e-13256472dbaf","categoryName":"Customizable Error Messages","options":null},"e3fb571ab0b8b6d0":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_datecolon45","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"e3deb56282c17f2d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngcipherkeylength","displayName":"Set CNG cipher key length (User)","description":"This policy setting allows you to configure the number of bits to use when creating the cipher key. This number will be rounded down to a multiple of 8.\r\n\r\nIf you enable this policy setting, the key bits specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default value will be used.","helpText":"","infoUrls":[],"categoryId":"1671dfc3-a1dd-4178-9093-10fb6b62586a","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngcipherkeylength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_cryptography_l_setcngcipherkeylength_1","displayName":"Enabled","description":null,"helpText":null}]},"e37030b4b81e2ec4":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_l_duration9","displayName":"Duration (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_l_duration9_43","displayName":"Weeks","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_l_duration9_44","displayName":"Days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_l_duration9_45","displayName":"Hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_l_duration9_46","displayName":"Minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_duration_l_duration9_47","displayName":"Seconds","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e4.json b/public/intune-definitions/e4.json new file mode 100644 index 000000000000..2e069ded3526 --- /dev/null +++ b/public/intune-definitions/e4.json @@ -0,0 +1 @@ +{"e4de0f4de4fc8394":{"id":"ade_accountsettings_primaryaccountname","displayName":"Primary account name","description":"The account name for the account. Setup Assistant will use this value to prefill the Account Name field if 'Prefill account info' is set to 'Not configured'. This field is to be defaulted to the variable, {{partialupn}}, for example, 'John'. For macOS ADE enrollment policies without user device affinity, we recommend configuring {{serialNumber}} as the unique identifier of userless devices.","helpText":null,"infoUrls":[],"categoryId":"6c217eb1-e939-4a7d-8a27-da4b6dbf9513","categoryName":null,"options":null},"e4a8c4a22a53b50f":{"id":"com.apple.applicationaccess_allowvoicedialing","displayName":"Allow Voice Dialing (Deprecated)","description":"If false, disables voice dialing if the device is locked with a passcode. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowvoicedialing_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowvoicedialing_true","displayName":"True","description":null,"helpText":null}]},"e4a2aab8a1108268":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_application id","displayName":"Microsoft Word Application ID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"e45ef8f36a436e0f":{"id":"com.apple.managedclient.preferences_taskmanagerendprocessenabled","displayName":"Enable ending processes in the Browser task manager","description":"If you enable or don't configure this policy, users can end processes in the Browser task manager. If you disable it, users can't end processes, and the End process button is disabled in the Browser task manager.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#taskmanagerendprocessenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_taskmanagerendprocessenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_taskmanagerendprocessenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e4d77ef7256751d6":{"id":"com.apple.managedclient.preferences_webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications.","description":"This policy defines a list of allowed HTTPS origins for remote desktop client applications that initiate WebAuthn API requests from a browsing session on a remote host.\n\nOrigins specified in this policy can request WebAuthn authentication for Relying Party IDs (RP IDs) they would not typically be authorized to claim.\n\nOnly HTTPS origins are supported. Wildcards are not permitted. Entries that do not\nmeet these requirements will be ignored.\n\nFor more information about the WebAuthn Remote Desktop Support feature, please see https://github.com/w3c/webauthn/wiki/Explainer:-Remote-Desktop-Support/a4e158c569f456c759d0ddd294a9015bd4d4eb9a.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#webauthenticationremotedesktopallowedorigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"e47f9d3ffff24984":{"id":"com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentdescription_generickey_keytobereplaced","displayName":"Password Content Description","description":"Contains a dictionary of keys for supported OS language IDs (for example, \"en-US\"), and whose values represent a localized description of the policy enforced by the regular expression. Use the special `default` key can for languages that aren't contained in the dictionary.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"e4f88344a22e274c":{"id":"com.apple.tcc.configuration-profile-policy_services_accessibility","displayName":"Accessibility (deprecated)","description":"Specifies the policies for the app via the Accessibility subsystem. This profile deprecated its ability to grant access as of macOS 26.2, and removes that ability in macOS 27.0.\n\nDeprecated: use the `Privacy` key in the declarative management `com.apple.configuration.app-settings` configuration.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"e498f9b4cd55107c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.certificatetransparencyenforcementdisabledforlegacycas","displayName":"Disable Certificate Transparency enforcement for a list of legacy certificate authorities (Obsolete)","description":"Disables enforcing Certificate Transparency requirements for a list of legacy certificate authorities (Cas).\n\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This disablement of requirements allows otherwise-untrusted certificates (on account of not being publicly disclosed) to continue to be used for enterprise hosts.\n\nFor Certificate Transparency enforcement to be disabled, you must set the hash to a subjectPublicKeyInfo appearing in an authority-issued certificate that's recognized as a legacy certificate authority (CA). A legacy CA is a CA publicly trusted, by default, by one or more operating systems supported by Microsoft Edge.\n\nYou specify a subjectPublicKeyInfo hash by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\n\nIf you don't configure this policy, any certificate that's required to be disclosed via Certificate Transparency is treated as untrusted if it isn't disclosed according to the Certificate Transparency policy.\n\nThis policy is obsolete because the feature to disable Certificate Transparency enforcement for legacy certificates has been removed.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"e4c12ae2777a444e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultpluginssetting","displayName":"Default Adobe Flash setting (Obsolete)","description":"This policy doesn't work because Flash is no longer supported by Microsoft Edge.\n\n\"PluginsAllowedForUrls\" and \"PluginsBlockedForUrls\" are checked first, then this policy. The options are 'ClickToPlay' and 'BlockPlugins'. If you set this policy to 'BlockPlugins', this plugin is denied for all websites. 'ClickToPlay' lets the Flash plugin run, but users click the placeholder to start it.\n\nIf you don't configure this policy, the user can change this setting manually.\n\nNote: Automatic playback is only for domains explicitly listed in the \"PluginsAllowedForUrls\" policy. To turn automatic playback on for all sites, add http://* and https://* to the allowed list of URLs.\n\nPolicy options mapping:\n\n* BlockPlugins (2) = Block the Adobe Flash plugin\n\n* ClickToPlay (3) = Click to play\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultpluginssetting_blockplugins","displayName":"Block the Adobe Flash plugin","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultpluginssetting_clicktoplay","displayName":"Click to play","description":null,"helpText":null}]},"e47ed032850cd25b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.fullscreenallowed","displayName":"Allow full screen mode","description":"Set the availability of full screen mode - all Microsoft Edge UI is hidden and only web content is visible.\n\nIf you enable this policy or don't configure it, the user, apps, and extensions with appropriate permissions can enter full screen mode.\n\nIf you disable this policy, users, apps, and extensions can't enter full screen mode.\n\nOpening Microsoft Edge in kiosk mode using the command line is unavailable when full screen mode is disabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.fullscreenallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.fullscreenallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"e49563f6eb0629db":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importextensions_recommended","displayName":"Allow importing of extensions (users can override)","description":"Allows users to import extensions from another browser into Microsoft Edge.\n\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\n\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\n\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.\n\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importextensions_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importextensions_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"e4f5e75cc273f360":{"id":"com.microsoft.edge.mamedgeappconfigsettings.paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods","description":"Allows you to set whether websites can check if the user has payment methods saved.\n\nIf you disable this policy, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\n\nIf you enable this policy or don't set this policy, websites can check if the user has payment methods saved.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.paymentmethodqueryenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.paymentmethodqueryenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e472f457f5e2be65":{"id":"com.microsoft.edge.mamedgeappconfigsettings.viewxfapdfiniemodeallowedfilehash","displayName":"View XFA-based PDF files using IE Mode for allowed file hash.","description":"XFA is a legacy technology that's deprecated by its original creators. It's not an ISO standard and as such, it doesn't align with the modern web architecture. Continued use poses potential risks and vulnerabilities. For more information, see \"ViewXFAPDFInIEModeAllowedOrigins\".\n\nIf you enable this policy, you can configure the list of base64 encoded SHA256 file hashes for which XFA PDF files automatically open in Microsoft Edge using IE Mode.\n\nIf you disable or don't configure this policy, XFA PDFs won't be considered for opening via IE mode except the files from file origin mentioned in Policy \"ViewXFAPDFInIEModeAllowedOrigins\"\n\nFor more information, see - [Get-FileHash](https://go.microsoft.com/fwlink/?linkid=2294823), [Dot Net Convert API](https://go.microsoft.com/fwlink/?linkid=2294913).","helpText":null,"infoUrls":[],"categoryId":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","categoryName":"PDF Reader","options":null},"e40a3f3e8f603e6a":{"id":"device_vendor_msft_bitlocker_removabledrivesrequireencryption","displayName":"Deny write access to removable drives not protected by BitLocker","description":"This policy setting configures whether BitLocker protection is required for a computer to be able to write data to a removable data drive.\n\nIf you enable this policy setting, all removable data drives that are not BitLocker-protected will be mounted as read-only. If the drive is protected by BitLocker, it will be mounted with read and write access.\n\nIf the \"Deny write access to devices configured in another organization\" option is selected, only drives with identification fields matching the computer's identification fields will be given write access. When a removable data drive is accessed it will be checked for valid identification field and allowed identification fields. These fields are defined by the \"Provide the unique identifiers for your organization\" policy setting.\n\nIf you disable or do not configure this policy setting, all removable data drives on the computer will be mounted with read and write access.\n\nNote: This policy setting can be overridden by the policy settings under User Configuration\\Administrative Templates\\System\\Removable Storage Access. If the \"Removable Disks: Deny write access\" policy setting is enabled this policy setting will be ignored.\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"8e6b8d0c-faf6-41e6-8e31-4389a5470caf","categoryName":"Removable Data Drives","options":[{"id":"device_vendor_msft_bitlocker_removabledrivesrequireencryption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_removabledrivesrequireencryption_1","displayName":"Enabled","description":null,"helpText":null}]},"e41430e12564c8b5":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_primarydnssuffix","displayName":"Primary DNS suffix","description":"Specifies the primary DNS suffix used by computers in DNS name registration and DNS name resolution.\r\n\r\nTo use this policy setting, click Enabled and enter the entire primary DNS suffix you want to assign. For example: microsoft.com.\r\n\r\nImportant: In order for changes to this policy setting to be applied on computers that receive it, you must restart Windows.\r\n\r\nIf you enable this policy setting, it supersedes the primary DNS suffix configured in the DNS Suffix and NetBIOS Computer Name dialog box using the System control panel.\r\n\r\nYou can use this policy setting to prevent users, including local administrators, from changing the primary DNS suffix.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, each computer uses its local primary DNS suffix, which is usually the DNS name of Active Directory domain to which it is joined.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-primarydnssuffix"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_primarydnssuffix_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_primarydnssuffix_1","displayName":"Enabled","description":null,"helpText":null}]},"e480adc17cbd1eed":{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_lockdeviceonmachinelock","displayName":"Lock Enhanced Storage when the computer is locked","description":"This policy setting locks Enhanced Storage devices when the computer is locked.\r\n\r\nThis policy setting is supported in Windows Server SKUs only.\r\n\r\nIf you enable this policy setting, the Enhanced Storage device remains locked when the computer is locked.\r\n\r\nIf you disable or do not configure this policy setting, the Enhanced Storage device state is not changed when the computer is locked.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-enhancedstorage#admx-enhancedstorage-lockdeviceonmachinelock"],"categoryId":"2461b964-02f6-4da2-921a-f7e8f868c69d","categoryName":"Enhanced Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_lockdeviceonmachinelock_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_enhancedstorage_lockdeviceonmachinelock_1","displayName":"Enabled","description":null,"helpText":null}]},"e4cef49b5bf6838b":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimizationonserversku","displayName":"Enable Group Policy Caching for Servers","description":"\r\n This policy setting allows you to configure Group Policy caching behavior on Windows Server machines.\r\n If you enable this policy setting, Group Policy caches policy information after every background processing session. This cache saves applicable GPOs and the settings contained within them. When Group Policy runs in synchronous foreground mode, it refers to this cache, which enables it to run faster. When the cache is read, Group Policy attempts to contact a logon domain controller to determine the link speed. When Group Policy runs in background mode or asynchronous foreground mode, it continues to download the latest version of the policy information, and it uses a bandwidth estimate to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.)\r\n The slow link value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before reporting the link speed as slow. The default is 500 milliseconds.\r\n The timeout value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before determining that there is no network connectivity. This stops the current Group Policy processing. Group Policy will run in the background the next time a connection to a domain controller is established. Setting this value too high might result in longer waits for the user at boot or logon. The default is 5000 milliseconds.\r\n If you disable or do not configure this policy setting, the Group Policy client will not cache applicable GPOs or settings that are contained within the GPOs. When Group Policy runs synchronously, it downloads the latest version of the policy from the network and uses bandwidth estimates to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.)\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-enablelogonoptimizationonserversku"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimizationonserversku_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimizationonserversku_1","displayName":"Enabled","description":null,"helpText":null}]},"e4f53284b8194d8e":{"id":"device_vendor_msft_policy_config_admx_logon_blockuserfromshowingaccountdetailsonsignin","displayName":"Block user from showing account details on sign-in","description":"This policy prevents the user from showing account details (email address or user name) on the sign-in screen.\r\n\r\nIf you enable this policy setting, the user cannot choose to show account details on the sign-in screen.\r\n\r\nIf you disable or do not configure this policy setting, the user may choose to show account details on the sign-in screen.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-blockuserfromshowingaccountdetailsonsignin"],"categoryId":"439f715e-5511-44fd-9a0f-644ba7cc6baf","categoryName":"Logon","options":[{"id":"device_vendor_msft_policy_config_admx_logon_blockuserfromshowingaccountdetailsonsignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_logon_blockuserfromshowingaccountdetailsonsignin_1","displayName":"Enabled","description":null,"helpText":null}]},"e4bfcf877837c7f5":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_allowedapplications_exploitguard_controlledfolderaccess_allowedapplications","displayName":"Enter the applications that should be trusted:","description":null,"helpText":"","infoUrls":[],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":null},"e4ab6d0e43837a97":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_2_lbl_assignedofflinefileslist","displayName":"Files and Folders:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"e40760939850d72f":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes","displayName":"Settings package size warning threshold","description":"This policy setting allows you to configure the UE-V Agent to write a warning event to the event log when a settings package file size reaches a defined threshold. By default the UE-V Agent does not report information about package file size. \r\nIf you enable this policy setting, specify the threshold file size in bytes. When the settings package file exceeds this threshold the UE-V Agent will write a warning event to the event log.\r\nIf you disable or do not configure this policy setting, no event is written to the event log to report settings package size.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-maxpackagesizeinbytes"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_1","displayName":"Enabled","description":null,"helpText":null}]},"e4dec754ef7acde0":{"id":"device_vendor_msft_policy_config_browser_allowflashclicktorun","displayName":"Allow Flash Click To Run","description":"Configure the Adobe Flash Click-to-Run setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowflashclicktorun"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowflashclicktorun_0","displayName":"Block","description":"Load and run Adobe Flash content automatically.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowflashclicktorun_1","displayName":"Allow","description":"Does not load or run Adobe Flash content automatically. Requires action from the user.","helpText":null}]},"e4ba2372ed4dd6f2":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_authnegotiatedelegatewhitelist","displayName":"Kerberos delegation server whitelist (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"e45a53300d1c404a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc","displayName":"Enable deprecated web platform features for a limited time (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"e48a681204b7717f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist","displayName":"Always render the following URL patterns in Google Chrome Frame","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_1","displayName":"Enabled","description":null,"helpText":null}]},"e4a6974da2813eb7":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled","displayName":"Control the visibility of the management notice on the New Tab Page for managed browsers","description":"This policy controls the visibility of the management notice within the footer of the New Tab Page (NTP). By default, the NTP footer displays information when the browser is managed by an organization (indicated by a building icon and \"Managed by [domain name]\"). This can be customized using the EnterpriseCustomLabelForBrowser and EnterpriseLogoUrlForBrowser policies.\r\n\r\nIf this policy is left unset or set to true, managed browsers will display a “Managed by…” notice with an icon.\r\n\r\nIf this policy is set to false, the management notice will be hidden.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e4e695998176d104":{"id":"device_vendor_msft_policy_config_defender_allowbehaviormonitoring","displayName":"Allow Behavior Monitoring","description":"Allows or disallows Windows Defender Behavior Monitoring functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowbehaviormonitoring_0","displayName":"Not allowed. Turns off behavior monitoring.","description":"Not allowed. Turns off behavior monitoring.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowbehaviormonitoring_1","displayName":"Allowed. Turns on real-time behavior monitoring.","description":"Allowed. Turns on real-time behavior monitoring.","helpText":null}]},"e4d68d3444f98a59":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_profilessiddirectorysddl","displayName":"SID Directory SDDL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"e47bba53c8046a42":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"e420d554592c5e85":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineaccountlockoutthreshold","displayName":"Interactive Logon Machine Account Lockout Threshold","description":"Interactive logon: Machine account threshold. The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup policies are enabled. This security setting determines the number of failed logon attempts that causes the machine to be locked out. A locked out machine can only be recovered by providing recovery key at console. You can set the value between 1 and 999 failed logon attempts. If you set the value to 0, the machine will never be locked out. Values from 1 to 3 will be interpreted as 4. Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password protected screen savers counts as failed logon attempts. The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that the appropriate recovery password backup policies are enabled. Default: 0.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_machineaccountlockoutthreshold"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"e467c55c3fd0e10c":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended","displayName":"Search Filters Enabled","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions will be shown.\r\n\r\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\r\n\r\nIf you disable this policy, the autosuggestion dropdown won't display the ribbon of available filters.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e4f4e12b4f420b78":{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled","displayName":"Data URL support for SVGUseElement","description":"This policy enables Data URL support for SVGUseElement, which will be disabled\r\nby default starting in Edge stable version 119.\r\nIf this policy is Enabled, Data URLs will keep working in SVGUseElement.\r\nIf this policy is Disabled or left not set, Data URLs won't work in SVGUseElement.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e425500f33920068":{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled","displayName":"Enables background updates to the list of available templates for Collections and other features that use templates (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because we are moving to a new policy. It won't work in Microsoft Edge as soon as version 104. The new policy to use is 'EdgeAssetDeliveryServiceEnabled' (Allow features to download assets from the Asset Delivery Service).\r\n\r\nLets you enable or disable background updates to the list of available templates for Collections and other features that use templates. Templates are used to extract rich metadata from a webpage when the page is saved to a collection.\r\n\r\nIf you enable this setting or the setting is unconfigured, the list of available templates will be downloaded in the background from a Microsoft service every 24 hours.\r\n\r\nIf you disable this setting the list of available templates will be downloaded on demand. This type of download might result in small performance penalties for Collections and other features.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e4d2ccf91788940c":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablesyncadminreports","displayName":"Enable sync health reporting for OneDrive","description":"\r\n The OneDrive sync health dashboard provides reporting on sync app devices and health. This setting lets the OneDrive sync app compile sync device and health data into administrative reports. These reports allow you to proactively identify, investigate, and resolve common errors across an organization.\r\n\r\n If you enable this setting, the OneDrive sync app will report device and health data into administrative reports. You must enable this setting on the devices you want to get reports from.\r\n\r\n If you disable or do not configure this setting, OneDrive sync app device and health data will not appear in the OneDrive sync health dashboard.\r\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablesyncadminreports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablesyncadminreports_1","displayName":"Enabled","description":null,"helpText":null}]},"e42736d43bc939f0":{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpcauthenticationprotocol_enum","displayName":"Authentication protocol to use for incoming RPC connections:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpcauthenticationprotocol_enum_0","displayName":"Negotiate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpcauthenticationprotocol_enum_1","displayName":"Kerberos","description":null,"helpText":null}]},"e489feff8e75e9bc":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception","displayName":"Let Apps Access Background Spatial Perception","description":"This policy setting specifies whether Windows apps can access the movement of the user's head, hands, motion controllers, and other tracked objects, while the apps are running in the background.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessbackgroundspatialperception"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"e43ffdc56d7cd13d":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_forceallowtheseapps","displayName":"Let Apps Access Radios Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"e483a80d66d8b925":{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text","displayName":"Restrict clipboard transfer from server to client:","description":"","helpText":"","infoUrls":[],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_0","displayName":"Disable clipboard transfers from server to client","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_1","displayName":"Allow plain text","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_2","displayName":"Allow plain text and images","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_3","displayName":"Allow plain text, images and Rich Text Format","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_4","displayName":"Allow plain text, images, Rich Text Format and HTML","description":null,"helpText":null}]},"e43ef07d598a2f48":{"id":"device_vendor_msft_policy_config_textinput_allowlanguagefeaturesuninstall","displayName":"Allow Language Features Uninstall","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the uninstall of language features, such as spell checkers, on a device. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowlanguagefeaturesuninstall"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowlanguagefeaturesuninstall_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowlanguagefeaturesuninstall_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e4bcbf97da275e8f":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabletpmfirmwareupdatewarning","displayName":"Disable Tpm Firmware Update Warning","description":"Hide the recommendation to update TPM Firmware when a vulnerable firmware is detected. Enabled:Users will not be shown a recommendation to update their TPM Firmware. Disabled:Users will see a recommendation to update their TPM Firmware if Windows Security detects the system contains a TPM with vulnerable firmware. Not configured:Same as Disabled. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disabletpmfirmwareupdatewarning"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabletpmfirmwareupdatewarning_0","displayName":"(Disable or Not configured) A warning will be displayed if the firmware of the security processor (TPM) should be updated for TPMs that have a vulnerability.","description":"(Disable or Not configured) A warning will be displayed if the firmware of the security processor (TPM) should be updated for TPMs that have a vulnerability.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabletpmfirmwareupdatewarning_1","displayName":"(Enabled) No warning will be displayed if the firmware of the security processor (TPM) should be updated.","description":"(Enabled) No warning will be displayed if the firmware of the security processor (TPM) should be updated.","helpText":null}]},"e4adca4c6baf47a7":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowcameramicrophoneredirection","displayName":"Allow camera and microphone access","description":"This policy allows you to determine whether applications inside Microsoft Defender Application Guard can access the device’s camera and microphone when these settings are enabled on the user’s device. If you enable this policy, applications inside Microsoft Defender Application Guard will be able to access the camera and microphone on the user’s device. If you disable this policy, applications inside Microsoft Defender Application Guard will be unable to access the camera and microphone on the user’s device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowcameramicrophoneredirection_0","displayName":"Disabled","description":"Microsoft Defender Application Guard cannot access the device's camera and microphone. When the policy is not configured, it is the same as disabled (0).","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowcameramicrophoneredirection_1","displayName":"Enabled","description":"Turns on the functionality to allow Microsoft Defender Application Guard to access the device's camera and microphone.","helpText":null}]},"e44a968f17d5a9c3":{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonerrorscreens","displayName":"Enable Physical Device Access On Error Screens (User) (Windows Insiders only)","description":"Configuring this node gives access to the physical devices used to boot to Cloud PCs from the error screens for specified users. This node supports these options: 0. Not enabled 1. Enabled.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/CloudDesktop-csp/"],"categoryId":"39e4c352-be9c-4e75-8111-8236279c7f1e","categoryName":"Cloud Desktop","options":[{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonerrorscreens_false","displayName":"Access to physical device on error screens disabled","description":"Access to physical device on error screens disabled","helpText":null},{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonerrorscreens_true","displayName":"Access to physical device on error screens enabled","description":"Access to physical device on error screens enabled","helpText":null}]},"e42a2c11d78ab6ff":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_pathcolon27","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"e4e8a4df18b10aa2":{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation","displayName":"Block launching desktop apps associated with a URI scheme (User)","description":"This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a URI scheme launched by a Windows Store app might compromise the system by launching a desktop app.\r\n\r\nIf you enable this policy setting, Windows Store apps cannot open URIs in the default desktop app for a URI scheme; they can open URIs only in other Windows Store apps.\r\n\r\nIf you disable or do not configure this policy setting, Windows Store apps can open URIs in the default desktop app for a URI scheme.\r\n\r\nNote: Enabling this policy setting does not block Windows Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeblockprotocolelevation"],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":[{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation_1","displayName":"Enabled","description":null,"helpText":null}]},"e45261feef178bdd":{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist","displayName":"Remove All Programs list from the Start menu (User)","description":"If you enable this setting, the Start Menu will either collapse or remove the all apps list from the Start menu.\r\n\r\nSelecting \"Collapse\" will not display the app list next to the pinned tiles in Start. An \"All apps\" button will be displayed on Start to open the all apps list. This is equivalent to setting the \"Show app list in Start\" in Settings to Off.\r\n\r\nSelecting \"Collapse and disable setting\" will do the same as the collapse option and disable the \"Show app list in Start menu\" in Settings, so users cannot turn it to On.\r\n\r\nSelecting \"Remove and disable setting\" will remove the all apps list from Start and disable the \"Show app list in Start menu\" in Settings, so users cannot turn it to On. Select this option for compatibility with earlier versions of Windows.\r\n\r\nIf you disable or do not configure this setting, the all apps list will be visible by default, and the user can change \"Show app list in Start\" in Settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nomoreprogramslist"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_1","displayName":"Enabled","description":null,"helpText":null}]},"e42036a3c1e75b1b":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_1","displayName":"Include rarely used Chinese, Kanji, or Hanja characters (User)","description":"Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only to the use of the Microsoft recognizers for Chinese (Simplified), Chinese (Traditional), Japanese, and Korean. This setting appears in Input Panel Options (in Windows 7 and Windows Vista only) only when these input languages or keyboards are installed. \r\n\r\nTouch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista) enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, rarely used Chinese, Kanji, and Hanja characters will be included in recognition results when handwriting is converted to typed text. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, rarely used Chinese, Kanji, and Hanja characters will not be included in recognition results when handwriting is converted to typed text. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, rarely used Chinese, Kanji, and Hanja characters will not be included in recognition results when handwriting is converted to typed text. Users will be able to configure this setting on the Ink to text conversion tab in Input Panel Options (in Windows 7 and Windows Vista).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-rarechar-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_1_1","displayName":"Enabled","description":null,"helpText":null}]},"e42f12ddf562da8f":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup","displayName":"Publisher 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Publisher 2013.\r\nMicrosoft Publisher 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Publisher 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Publisher 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013publisherbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"e4e2eae9be80ce2d":{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith","displayName":"Configure Open Microsoft Edge With (User)","description":"You can configure Microsoft Edge to lock down the Start page, preventing users from changing or customizing it. If enabled, you can choose one of the following options: - Start page: the Start page loads ignoring the Configure Start Pages policy. - New tab page: the New tab page loads ignoring the Configure Start Pages policy. - Previous pages: all tabs the user had open when Microsoft Edge last closed loads ignoring the Configure Start Pages policy. - A specific page or pages: the URL(s) specified with Configure Start Pages policy load(s). If selected, you must specify at least one URL in Configure Start Pages; otherwise, this policy is ignored. When enabled, and you want to make changes, you must first set the Disable Lockdown of Start Pages to not configured, make the changes to the Configure Open Edge With policy, and then enable the Disable Lockdown of Start Pages policy. If disabled or not configured, and you enable the Disable Lockdown of Start Pages policy, your users can change or customize the Start page. Default setting: A specific page or pages (default) Related policies: -Disable Lockdown of Start Pages -Configure Start Pages","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configureopenmicrosoftedgewith"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_0","displayName":"Load the Start page","description":"Load the Start page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_1","displayName":"Load the New tab page","description":"Load the New tab page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_2","displayName":"Load the previous pages","description":"Load the previous pages","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_3","displayName":"Load a specific page or pages","description":"Load a specific page or pages","helpText":null}]},"e4fd97ad1a49cbf3":{"id":"user_vendor_msft_policy_config_browser_provisionfavorites","displayName":"Provision Favorites (User)","description":"This policy setting allows you to configure a default set of favorites, which will appear for employees. Employees cannot modify, sort, move, export or delete these provisioned favorites. If you enable this setting, you can set favorite URL's and favorite folders to appear on top of users' favorites list (either in the Hub or Favorites Bar). The user favorites will appear after these provisioned favorites. Important Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. If you disable or don't configure this setting, employees will see the favorites they set in the Hub and Favorites Bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#provisionfavorites"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"e4b0d306d4c0596a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_isolateorigins","displayName":"Enable Site Isolation for specified origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"e489ef162f7161cc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist","displayName":"Websites that should never trigger a browser switch. (User)","description":"Setting the policy controls the list of websites that will never cause a browser switch. Each item is treated as a rule. Those rules that match won't open an alternative browser. Unlike the BrowserSwitcherUrlList policy, rules apply to both directions. When the Internet Explorer® add-in is on, it also controls whether Internet Explorer® should open these URLs in Google Chrome.\r\n\r\nLeaving the policy unset adds no websites to the list.\r\n\r\nNote: Elements can also be added to this list through the BrowserSwitcherExternalGreylistUrl policy.\r\n\r\nExample value:\r\n\r\nie.com\r\n!open-in-chrome.ie.com\r\nfoobar.com/ie-only/","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_1","displayName":"Enabled","description":null,"helpText":null}]},"e412013fca75b06e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid_0","displayName":"Block files","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid_1","displayName":"Open in Protected View","description":null,"helpText":null}]},"e461d4224f01786d":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00","displayName":"Logon options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"e4b06208aaa5b654":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"e42f6c3432366652":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc","displayName":"Allow cookies on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e4a93b6bf5123267":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_cookiessessiononlyforurlsdesc","displayName":"Limit cookies from specific websites to the current session (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e4c2d641843874e0":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_roamingprofilelocation","displayName":"Set the roaming profile directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e42338a59873dc74":{"id":"user_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_tlsciphersuitedenylistdesc","displayName":"Specify the TLS cipher suites to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e48919ce43f1da56":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled","displayName":"AutoLaunch Protocols Component Enabled (User)","description":"Specifies whether the AutoLaunch Protocols component should be enabled. This component allows Microsoft to provide a list similar to that of the 'AutoLaunchProtocolsFromOrigins' (Define a list of protocols that can launch an external application from listed origins without prompting the user) policy, allowing certain external protocols to launch without prompt or blocking certain protocols (on specified origins). By default, this component is enabled.\r\n\r\nIf you enable or don't configure this policy, the AutoLaunch Protocols component is enabled.\r\n\r\nIf you disable this policy, the AutoLaunch Protocols component is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e49213ead529340d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicemaxsizelimit_l_webservicemaxsizelimitdecimal","displayName":"Web service maximum size limit (KB) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":null},"e436dfa83c491c66":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_disableitemsinuserinterface_l_turnoffscreenclipping","displayName":"Turn off screen clipping (User)","description":"This policy setting allows you to turn off the Insert Screenshot feature.\r\n\r\nIf you enable this policy setting, you will turn off the Insert Screenshot feature found in Microsoft Excel, PowerPoint, Outlook, and Word. This setting does not affect the screen clipping feature found in Microsoft OneNote or the Print Screen key on your keyboard.\r\n\r\nIf you disable or do not configure this policy setting, the Insert Screenshot feature in Microsoft Excel, PowerPoint, Outlook, and Word will be available. This feature allows users to insert both screen clippings and the contents of an entire active window. ","helpText":"","infoUrls":[],"categoryId":"866eedbc-ffd9-457d-b02b-7b163d55c4bd","categoryName":"Disable Items in User Interface","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_disableitemsinuserinterface_l_turnoffscreenclipping_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_disableitemsinuserinterface_l_turnoffscreenclipping_1","displayName":"Enabled","description":null,"helpText":null}]},"e45172513b70d5ad":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swahili","displayName":"Swahili (User)","description":"Enables the editing language Swahili","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swahili_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swahili_1","displayName":"Enabled","description":null,"helpText":null}]},"e43ab3ca92437f63":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedofficeopen","displayName":"Encryption type for password protected Office Open XML files (User)","description":"This policy setting allows you to specify an encryption type for Office Open XML files.\r\n \r\nIf you enable this policy setting, you can specify the type of encryption that Office applications use to encrypt password-protected files in the Office Open XML file formats used by Excel, PowerPoint, and Word. The chosen encryption type must have a corresponding cryptographic service provider (CSP) installed on the computer that encrypts the file. See the HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider\\ registry key for a list of CSPs installed on the local computer. Specify the encryption type to use by entering it in the provided text box in the following form:\r\n\r\n,,\r\n\r\nFor example: Microsoft Enhanced Cryptographic Provider v1.0,RC4,128\r\n\r\nIf you disable or do not configure this policy setting, the default CSP is used. The default cryptographic service provider (CSP) is Microsoft Enhanced RSA and AES Cryptographic Provider, AES-128, 128-bit.\r\n\r\nNote: This policy setting does not take effect unless the registry key \r\nHKEY_CURRENT_USER\\Software\\Microsoft\\Office\\16.0\\\\Security\\Crypto\\CompatMode is set to 0. By default the CompatMode registry key is set to 1.\r\n","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedofficeopen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedofficeopen_1","displayName":"Enabled","description":null,"helpText":null}]},"e4eaf544305dca63":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_preventwordandexcelfromloadingmanagedcodeextensions","displayName":"Prevent Word and Excel from loading managed code extensions (User)","description":"This policy setting allows you to prevent Word 2016 and Excel 2016 from loading managed code extensions.\r\n\r\nIf you enable this policy setting, Word 2016 and Excel 2016 will not load managed code extensions.\r\n\r\nIf you disable or do not configure this policy setting, Word 2016 and Excel 2016 will load managed code extensions automatically.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_preventwordandexcelfromloadingmanagedcodeextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_preventwordandexcelfromloadingmanagedcodeextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"e41f465663ae001c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey09","displayName":"Escrow Key #9 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey09_1","displayName":"Enabled","description":null,"helpText":null}]},"e4d9cf6f3231491a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]},"e4b670a59f87338e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc20_l_pathcolon20","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"e444f28a7f00c130":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_serviceleveloptions","displayName":"Service Level Options (User)","description":"This policy setting controls the types of services that can be used by the online features of Office 2016.\r\n \r\nIf you enable this policy setting, you can choose one of three options for gating access to online services based on the owner of the service:\r\n\r\n* Office services only - Office 2016 applications on the computer communicate only with Office-owned services. All other Microsoft or third-party service integration in Office 2016 is disabled on the computer. This is the most restrictive option.\r\n\r\n* Microsoft services only - Office 2016 applications on the computer communicate only with Microsoft-owned services. All third-party service integration in Office 2016 is disabled on the computer.\r\n\r\n* All services - All service integration in Office 2016 is enabled on the computer. This is also the default configuration.\r\n\r\nIf you disable or do not configure this policy setting, Office 2016 client applications allow all service integrations. Individual users can manage the set of services they use through the new My Office place in Office Backstage view.","helpText":"","infoUrls":[],"categoryId":"91041ad3-e0a6-43fd-bc7b-ad4c7dda5765","categoryName":"Online Content","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_serviceleveloptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralserviceoptions~l_onlinecontent_l_serviceleveloptions_1","displayName":"Enabled","description":null,"helpText":null}]},"e4f7a22a5e296dde":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_allowaccenteduppercaseinfrench","displayName":"Allow accented uppercase in French (User)","description":"Checks/Unchecks the option \"Enforce accented uppercase in French\".","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_allowaccenteduppercaseinfrench_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_allowaccenteduppercaseinfrench_1","displayName":"Enabled","description":null,"helpText":null}]},"e44a10f77cd9476f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstsizetodisableaddingnewcontent_l_entersizetodisableaddingnewcontenttopstinbytes2","displayName":"(0 - 2,075,149,312 Bytes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":null},"e47ae7fa88349358":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingpsts","displayName":"Prevent users from adding PSTs to Outlook profiles and/or prevent using Sharing-Exclusive PSTs (User)","description":"By default, users can add PSTs to their Outlook profiles and can use Sharing-Exclusive PSTs for storing SharePoint Lists and Internet Calendars. You can use this setting to limit users' ability to store mail in a decentralized fashion. You can block the use of PSTs completely, but be aware that blocking all PSTs disables Outlook features such as SharePoint Lists and Internet Calendar. \r\n\r\nIf instead you allow only Sharing-Exclusive PSTs to be added to user profiles, PST usage is still limited but the Outlook features that rely on special PSTs are not disabled. The setting that allows Sharing-Exclusive PSTs to be added blocks users from creating new folders in the Sharing-Exclusive PST; copying existing mail folders from their default store to the PST; and copying individual mail items to the root of the PST.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingpsts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_preventusersfromaddingpsts_1","displayName":"Enabled","description":null,"helpText":null}]},"e4de24bce75ff88a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions_l_publishfreebusyinformation","displayName":"Publish free/busy information (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions_l_publishfreebusyinformation_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_internetfreebusyoptions_l_publishfreebusyinformation_1","displayName":"True","description":null,"helpText":null}]},"e4c9a2a836f767b6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_l_showpopupcalendardetails","displayName":"Show popup calendar details (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2592e8ea-5eb0-482b-b41e-eab92f33ac07","categoryName":"Planner Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_l_showpopupcalendardetails_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_l_showpopupcalendardetails_1","displayName":"True","description":null,"helpText":null}]},"e42b8250986b2743":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_desktopalert_l_specifyopacityatstartoffadein_l_specifyopacityatstartoffadein3","displayName":"Specify opacity at start of fade in (User)","description":"","helpText":"","infoUrls":[],"categoryId":"35f245bd-8d1f-424c-83de-a80be27a6a4e","categoryName":"Desktop Alert","options":null},"e43d0c8a766ddd8f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_maximumnumberofonlinesearchfolderspermailbox_l_specifymaximumnumberofsearchfolders2","displayName":"Maximum number of Search Folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fb721630-fc42-465b-ba22-ab670698c8b5","categoryName":"Search Folders","options":null},"e4ed553e1980d207":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_automaticallyconfigureprofilebasedonactiveonce","displayName":"Automatically configure only the first profile based on Active Directory primary SMTP address (User)","description":"Automatically configure profile based on Active Directory Primary SMTP address once\r\n\r\nThis policy setting controls whether users who are joined to a domain in an Active Directory environment can change the primary SMTP address that is used when they set up accounts in Outlook.\r\n\r\nIf this policy setting is enabled, users can create a new profile by entering a profile name. The profile is created without using the New Account wizard. No user interface appears as the profile is created. \r\n\r\nThis key will be ignored after the first profile has been successfully created.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_automaticallyconfigureprofilebasedonactiveonce_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_automaticallyconfigureprofilebasedonactiveonce_1","displayName":"Enabled","description":null,"helpText":null}]},"e45345cd243aaffb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entermaximumsecondstowaittosyncchanges","displayName":"Enter maximum seconds to wait to sync changes (User)","description":"Specifies maximum number of seconds to wait before synchronizing changes with the Exchange server.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entermaximumsecondstowaittosyncchanges_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_entermaximumsecondstowaittosyncchanges_1","displayName":"Enabled","description":null,"helpText":null}]},"e4480a4a9a5c2604":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_defaultsharepointlists","displayName":"Default SharePoint lists (User)","description":"This policy setting allows you to deploy SharePoint lists.\r\n\r\nIf you enable this policy setting, you can provide a list of SharePoint list URLs in the following format:\r\n\r\nValue name: SPsite1\r\nValue: SPsite1 stssync:// URL. See MS-STSSYN for documentation.\r\n\r\nValue name: SPSite2\r\nValue: SPsite2 stssync:// URL. See MS-STSSYN for documentation.\r\n\r\nThe list of URLs provided is read when Outlook starts up, and the corresponding SharePoint lists are added to each of the user's profiles.\r\n\r\nIf you disable or do not configure this policy setting, users will not have any default SharePoint lists.","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_defaultsharepointlists_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_defaultsharepointlists_1","displayName":"Enabled","description":null,"helpText":null}]},"e484ea3079076f2c":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions_l_disableroamingsettings","displayName":"Disable roaming settings in Outlook. (User)","description":"This policy setting determines whether roaming settings will be used to store accounts and their settings.\r\n\r\nIf you enable this policy setting, roaming settings will not store Outlook accounts or their settings in the cloud.","helpText":"","infoUrls":[],"categoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","categoryName":"Outlook Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions_l_disableroamingsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_outlookoptions_l_disableroamingsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"e49f8c29591a30f4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3","displayName":"Checked: Allow edit. Unchecked: Do not allow edit. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42ce9a9b-0574-4b5c-993b-7679de80be47","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_1","displayName":"True","description":null,"helpText":null}]},"e41085be73dfbd93":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]},"e40e57f2ebe15621":{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection","displayName":"Restrict clipboard transfer from server to client (User)","description":"This policy setting allows you to restrict clipboard data transfers from server to client.\r\n\r\nIf you enable this policy setting, you must choose from the following behaviors:\r\n\r\n- Disable clipboard transfers from server to client.\r\n\r\n- Allow plain text copying from server to client.\r\n\r\n- Allow plain text and images copying from server to client.\r\n\r\n- Allow plain text, images and Rich Text Format copying from server to client.\r\n\r\n- Allow plain text, images, Rich Text Format and HTML copying from server to client.\r\n\r\nIf you disable or do not configure this policy setting, users can copy arbitrary contents from server to client if clipboard redirection is enabled.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-limitservertoclientclipboardredirection"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_1","displayName":"Enabled","description":null,"helpText":null}]},"e4ed089713c96af0":{"id":"user_vendor_msft_policy_config_start_hidepeoplebar","displayName":"Hide People Bar (User)","description":"Enabling this policy removes the people icon from the taskbar as well as the corresponding settings toggle. It also prevents users from pinning people to the taskbar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidepeoplebar"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"user_vendor_msft_policy_config_start_hidepeoplebar_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"user_vendor_msft_policy_config_start_hidepeoplebar_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"e4aae38ba2118307":{"id":"user_vendor_msft_policy_config_windowsai_disableaidataanalysis","displayName":"Disable AI Data Analysis (User)","description":"This policy setting allows you to determine whether end users have the option to allow snapshots to be saved on their PCs. If disabled, end users will have a choice to save snapshots of their screen on their PC and then use Recall to find things they've seen. If the policy is enabled, end users will not be able to save snapshots on their PC. If the policy is not configured, end users will not be able to save snapshots on their PC.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableaidataanalysis"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_disableaidataanalysis_0","displayName":"Enable Saving Snapshots for Windows.","description":"Enable Saving Snapshots for Windows.","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_disableaidataanalysis_1","displayName":"Disable Saving Snapshots for Windows.","description":"Disable Saving Snapshots for Windows.","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e5.json b/public/intune-definitions/e5.json new file mode 100644 index 000000000000..62e5f41c096a --- /dev/null +++ b/public/intune-definitions/e5.json @@ -0,0 +1 @@ +{"e5c2142019452dcd":{"id":"app_privacy_permissiondefaults_generickey_microphone","displayName":"Microphone","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for use of the microphone.\n* `Allow`: The app privacy permission default is set to allow use of the microphone.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_microphone_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_microphone_1","displayName":"Allow","description":null,"helpText":null}]},"e5754306ed93232d":{"id":"com.android.devicerestrictionpolicy.appsallowinstallfromunknownsources","displayName":"Allow installation from unknown sources","description":"If 'True', allows users to enable unknown sources. This setting permits app installation from sources other than the Google Play Store, enabling users to side-load apps through alternative methods. If 'False', Intune doesn't change or update this setting. By default, the OS may prevent users from enabling unknown sources. Available for fully managed, dedicated, and corporate-owned work profile devices.","helpText":null,"infoUrls":[],"categoryId":"2257f7e1-3e88-4d4d-a666-437bbe42baca","categoryName":"Applications","options":[{"id":"com.android.devicerestrictionpolicy.appsallowinstallfromunknownsources_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.appsallowinstallfromunknownsources_false","displayName":"False","description":"false","helpText":null}]},"e51916721749f50f":{"id":"com.apple.cellular_apns_item_proxyserver","displayName":"Proxy Server","description":"The proxy server's address.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":null},"e55e2c22c4e5dbd0":{"id":"com.apple.dock_autohide-immutable","displayName":"Auto Hide Immutable","description":"If true, locks \"Automatically hide.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_autohide-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_autohide-immutable_true","displayName":"True","description":null,"helpText":null}]},"e54490f7ffff6402":{"id":"com.apple.managedclient.preferences_exclusions_item_signingid_tamperprotection","displayName":"Process's Signing Identifier","description":"Code signature Identifier","helpText":null,"infoUrls":[],"categoryId":"5c4df3be-80b0-40cc-a8c8-0258120b0de5","categoryName":"Tamper protection","options":null},"e52acb9971487f5d":{"id":"com.apple.managedclient.preferences_organizationalbrandingonworkprofileuienabled","displayName":"Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work or school profile","description":"Allow the use of your organization's branding assets from Entra, if any, on the profile-related UI of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\n\nIf you enable this policy, your organization's branding assets from Entra will be used.\n\nIf you disable or don't configure this policy, your organization's branding assets from Entra won't be used.\n\nFor more information about configuring your organization's branding assets on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#organizationalbrandingonworkprofileuienabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_organizationalbrandingonworkprofileuienabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_organizationalbrandingonworkprofileuienabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e5b04d95582408b5":{"id":"com.apple.managedclient.preferences_scanafterdefinitionupdate","displayName":"Run a scan after definitions are updated","description":"Specifies whether to start a process scan after new security intelligence updates are downloaded on the device. Enabling this setting will trigger an antivirus scan on the running processes of the device.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-preferences?view=o365-worldwide#run-a-scan-after-definitions-are-updated"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_scanafterdefinitionupdate_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_scanafterdefinitionupdate_true","displayName":"Enabled","description":null,"helpText":null}]},"e50f5039f401be3b":{"id":"com.apple.managedclient.preferences_videocaptureallowedurls","displayName":"Sites that can access video capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use video capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to video capture devices.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#videocaptureallowedurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"e5621565c7152325":{"id":"com.apple.system-extension-policy_allowedteamidentifiers","displayName":"Allowed Team Identifiers","description":"An array of team identifiers that defines valid, signed system extensions that are allowable to load. Approved system extensions are those signed with any of the specified team identifiers. It’s an error for the same team identifier to appear in both this array and as a key in the Allowed System Extensions dictionary.","helpText":null,"infoUrls":[],"categoryId":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","categoryName":"System Extensions","options":null},"e5270f2f5dc62d31":{"id":"com.microsoft.edge.mamedgeappconfigsettings.caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication","description":"If enabled (or unset), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\n\nIf disabled, user-added TLS certificates from platform trust stores won't be used in path-building for TLS server authentication.","helpText":null,"infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.caplatformintegrationenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.caplatformintegrationenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e5008ad76784dce2":{"id":"com.microsoft.edge.mamedgeappconfigsettings.nativemessagingallowlist","displayName":"Control which native messaging hosts users can use","description":"Setting the policy specifies which native messaging hosts aren't subject to the deny list. A deny list value of * means all native messaging hosts are denied unless they're explicitly allowed.\n\nAll native messaging hosts are allowed by default. However, if a native messaging host is denied by policy, the admin can use the allow list to change that policy.","helpText":null,"infoUrls":[],"categoryId":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","categoryName":"Native Messaging","options":null},"e5d1351f34ce3bc6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.notificationsallowedforurls","displayName":"Allow notifications on specific sites","description":"Allows you to create a list of URL patterns to specify sites that are allowed to display notifications.\n\nIf you don't set this policy, the global default value is used for all sites. This default value is from the \"DefaultNotificationsSetting\" policy if set, or from the user's personal configuration. For detailed information on valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e5f0b048a0b14b83":{"id":"com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsenabled","displayName":"Enable Related Website Sets (Deprecated)","description":"This policy lets you control the enablement of the Related Website Sets feature. Related Website Sets (RWS) is a way for an organisation to declare relationships among sites, so that Microsoft Edge allows limited third-party cookie access for specific purposes across those sites.\n\nIf this policy set to True or unset, the Related Website Sets feature is enabled.\n\nIf this policy is set to False, the Related Website Sets feature is disabled.\n\nThis policy is deprecated as of Microsoft Edge version 144 with the deprecation of Related Website Sets.","helpText":null,"infoUrls":[],"categoryId":"6d529e48-5477-4ceb-8ff7-c6e959a0e24f","categoryName":"Related Website Sets Settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e59efc911d094c45":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancelowprioritylimit","displayName":"Low Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"e52e49fc096f60a7":{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckexemptionlist_dcom_lbl_actseccheckexemptionlist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"a57b27b6-48e0-42b2-812a-2be86c113a0c","categoryName":"Application Compatibility Settings","options":null},"e50bbf820f68b990":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_wpptracingcomponents","displayName":"Configure Windows software trace preprocessor components","description":"This policy configures Windows software trace preprocessor (WPP Software Tracing) components.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-reporting-wpptracingcomponents"],"categoryId":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","categoryName":"Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_wpptracingcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_reporting_wpptracingcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"e5635f3e452a8c88":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnssrvrecorduselowercasehostnames","displayName":"Use lowercase DNS host names when registering domain controller SRV records","description":"This policy setting configures whether the domain controllers to which this setting is applied will lowercase their DNS host name when registering SRV records.\r\n\r\nIf enabled, domain controllers will lowercase their DNS host name when registering domain controller SRV records. A best-effort attempt will be made to delete any previously registered SRV records that contain mixed-case DNS host names. For more information and potential manual cleanup procedures, see the link below.\r\n\r\nIf disabled, domain controllers will use their configured DNS host name as-is when registering domain controller SRV records.\r\n\r\nIf not configured, domain controllers will default to using their local configuration.\r\n\r\nThe default local configuration is enabled.\r\n\r\nA reboot is not required for changes to this setting to take effect.\r\n\r\nMore information is available at https://aka.ms/lowercasehostnamesrvrecord\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-dnssrvrecorduselowercasehostnames"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnssrvrecorduselowercasehostnames_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnssrvrecorduselowercasehostnames_1","displayName":"Enabled","description":null,"helpText":null}]},"e5737cc47588876e":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_2_lbl_syncatsuspendcombo","displayName":"Action:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_2_lbl_syncatsuspendcombo_0","displayName":"Quick","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_2_lbl_syncatsuspendcombo_1","displayName":"Full","description":null,"helpText":null}]},"e579c9674be1cecb":{"id":"device_vendor_msft_policy_config_admx_power_powerthrottlingturnoff","displayName":"Turn off Power Throttling","description":"This policy setting allows you to turn off Power Throttling.\r\n\r\nIf you enable this policy setting, Power Throttling will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-powerthrottlingturnoff"],"categoryId":"86b4fa22-f6f1-4ca5-8fe4-8788f9b3fd89","categoryName":"Power Throttling Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_powerthrottlingturnoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_powerthrottlingturnoff_1","displayName":"Enabled","description":null,"helpText":null}]},"e5d0b8c369275cf9":{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval","displayName":"Directory pruning interval","description":"Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational.\r\n\r\n The pruning service periodically contacts computers that have published printers. If a computer does not respond to the contact message (optionally, after repeated attempts), the pruning service \"prunes\" (deletes from Active Directory) printer objects the computer has published.\r\n\r\n By default, the pruning service contacts computers every eight hours and allows two repeated contact attempts before deleting printers from Active Directory.\r\n\r\n If you enable this setting, you can change the interval between contact attempts.\r\n\r\n If you do not configure or disable this setting the default values will be used.\r\n\r\n Note: This setting is used only on domain controllers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing2#admx-printing2-pruninginterval"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_1","displayName":"Enabled","description":null,"helpText":null}]},"e509d889f7712e97":{"id":"device_vendor_msft_policy_config_admx_snmp_snmp_permittedmanagers_snmp_permittedmanagerslistbox","displayName":"Permitted managers","description":null,"helpText":"","infoUrls":[],"categoryId":"930d2960-3f70-48ca-9ead-b65a5a037c07","categoryName":"SNMP","options":null},"e598e76a473da90b":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype","displayName":"Specify RD Session Host server fallback printer driver behavior","description":"This policy setting allows you to specify the RD Session Host server fallback printer driver behavior.\r\n\r\nBy default, the RD Session Host server fallback printer driver is disabled. If the RD Session Host server does not have a printer driver that matches the client's printer, no printer will be available for the Remote Desktop Services session.\r\n\r\nIf you enable this policy setting, the fallback printer driver is enabled, and the default behavior is for the RD Session Host server to find a suitable printer driver. If one is not found, the client's printer is not available. You can choose to change this default behavior. The available options are:\r\n\r\n\"Do nothing if one is not found\" - If there is a printer driver mismatch, the server will attempt to find a suitable driver. If one is not found, the client's printer is not available. This is the default behavior.\r\n\r\n\"Default to PCL if one is not found\" - If no suitable printer driver can be found, default to the Printer Control Language (PCL) fallback printer driver.\r\n\r\n\"Default to PS if one is not found\" - If no suitable printer driver can be found, default to the PostScript (PS) fallback printer driver.\r\n\r\n\"Show both PCL and PS if one is not found\" - If no suitable driver can be found, show both PS and PCL-based fallback printer drivers.\r\n\r\nIf you disable this policy setting, the RD Session Host server fallback driver is disabled and the RD Session Host server will not attempt to use the fallback printer driver.\r\n\r\nIf you do not configure this policy setting, the fallback printer driver behavior is off by default.\r\n\r\nNote: If the \"Do not allow client printer redirection\" setting is enabled, this policy setting is ignored and the fallback printer driver is disabled.\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-fallbackprintdrivertype"],"categoryId":"f1455024-7de9-448f-8d8f-a42db2af0a35","categoryName":"Printer Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_fallbackprintdrivertype_1","displayName":"Enabled","description":null,"helpText":null}]},"e5604525363b83b2":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook","displayName":"Microsoft Outlook 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Outlook 2016.\r\nBy default, the user settings of Microsoft Outlook 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016outlook"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook_1","displayName":"Enabled","description":null,"helpText":null}]},"e526ce9e9e31c51b":{"id":"device_vendor_msft_policy_config_browser_allowflash","displayName":"Allow Flash","description":"This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowflash"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowflash_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowflash_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e5e08457d8bb1e3b":{"id":"device_vendor_msft_policy_config_browser_allowprinting","displayName":"Allow Printing","description":"With this policy, you can restrict whether printing web content in Microsoft Edge is allowed. If enabled, printing is allowed. If disabled, printing is not allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowprinting"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowprinting_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowprinting_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e58db1f867a3fb27":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction","displayName":"Add restrictions on managed accounts","description":"\r\n This policy requires SigninInterceptionEnabled to be set to True to take effect.\r\n\r\n If this policy is set to 'primary_account' at the machine level, all managed accounts will be forced to be primary.\r\n If this policy is set to 'primary_account' on an account, that account will always be a primary account, but may have secondary accounts in its profile.\r\n\r\n If this policy is set to 'primary_account_strict' at the machine level, all managed accounts will be forced to be primary.\r\n If this policy is set to 'primary_account_strict' on an account, that account will always be a primary account and will not have any secondary accounts in its profile.\r\n\r\n If this policy is set to 'none' or not set, managed accounts have no restrictions. This may result in a managed account being a secondary account, which disables its ability to receive policies set on the account by the admin.\r\n\r\n\r\nExample value: primary_account","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_1","displayName":"Enabled","description":null,"helpText":null}]},"e5497714c84f67b4":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended","displayName":"Enable reporting of usage and crash-related data","description":"When this policy is enabled, anonymous reporting of usage and crash-related data about Chrome to Google is enabled by default. Users will still be able to change this setting in the Chrome settings.\r\n\r\nWhen this policy is disabled, anonymous reporting is disabled and no usage or crash data is sent to Google. Users won't be able to change this setting.\r\n\r\nWhen this policy isn't set, users can choose the anonymous reporting behavior at installation or first run, and can later change the setting in the Chrome settings.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain or Windows 10 Pro or Enterprise instances that are enrolled for device management, and macOS instances that are managed via MDM or joined to a domain via MCX.\r\n\r\n(For Chrome OS, see DeviceMetricsReportingEnabled.)","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e5b7490e73dd6ae8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended","displayName":"Enable the default search provider","description":"Setting the policy to Enabled means a default search is performed when a user enters non-URL text in the address bar. To specify the default search provider, set the rest of the default search policies. If you leave those policies empty, the user can choose the default provider. Setting the policy to Disabled means there's no search when the user enters non-URL text in the address bar.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, the default search provider is on, and users can set the search provider list.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e508792600861190":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended","displayName":"Use New Tab Page as homepage","description":"Setting the policy to Enabled makes the New Tab page the user's homepage, ignoring any homepage URL location. Setting the policy to Disabled means that their homepage is never the New Tab page, unless the user's homepage URL is set to chrome://newtab.\r\n\r\nIf you set the policy, users can't change their homepage type in Google Chrome. If not set, the user decides whether or not the New Tab page is their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e5314e1e6b1d45bf":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting","displayName":"Default mediastream setting","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e5befd4e99f9d809":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode","displayName":"Choose how to specify proxy server settings","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: direct","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_1","displayName":"Enabled","description":null,"helpText":null}]},"e50c1b62c9800c4f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections","displayName":"Allow remote access connections to this machine","description":"If this policy is Disabled, the remote access host service cannot be started or configured to accept incoming connections. This policy does not affect remote support scenarios.\r\n\r\nThis policy has no effect if it is set to Enabled, left empty, or is not set.","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections_1","displayName":"Enabled","description":null,"helpText":null}]},"e5034b75377e4e30":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata","displayName":"Keep browsing data when creating enterprise profile by default","description":"If this policy is Enabled, the option to keep any existing browsing data when creating an enterprise profile will be checked by default.\r\n\r\nIf this policy is unset or Disabled, the option to keep any existing browsing data when creating an enterprise profile will not be checked by default.\r\n\r\nRegardless of the value, the user will be able to decide whether or not to keep any existing browsing data when creating an enterprise profile.\r\n\r\nThis policy has no effect if the option to keep existing browsing data is not available; this happens if enterprise profile separation is strictly enforced, or if the data would be from an already managed profile.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata_1","displayName":"Enabled","description":null,"helpText":null}]},"e5dc01459f4ca3b5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls","displayName":"Block the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy, the following take precedence, in this order:\r\n\r\n * WebHidAskForUrls (if there is a match),\r\n\r\n * DefaultWebHidGuardSetting (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns can't conflict with WebHidAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e53d31a63adb2c05":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath","displayName":"Outlook Folder Path","description":"Specifies the path to the user's Outlook data folder.\r\n\r\nDefault value: %userprofile%\\AppData\\Local\\Microsoft\\Outlook\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\OutlookFolderPath\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_1","displayName":"Enabled","description":null,"helpText":null}]},"e516c6872ca358f0":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx","displayName":"Volume Type (VHD or VHDX)","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the type of virtual disk to auto-create. Default is VHD. The default is VHD which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VolumeType\r\nType: REG_SZ\r\nValues: VHD, VHDX","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_1","displayName":"Enabled","description":null,"helpText":null}]},"e5952fd200f0bbf2":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"e525c1232da83365":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"e5faf15db0d0bdb7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload","displayName":"Enable Domain Actions Download from Microsoft (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nAlthough this policy is used to enable/disable download of the domain actions list, it doesn't always achieve the desired state. The Experimentation and Configuration Service, which handles the download, has its own group policy to configure what is downloaded from the service. To avoid conflicting states, this policy is being deprecated and will be obsolete in milestone 85 onward. Please use the 'ExperimentationAndConfigurationServiceControl' (Control communication with the Experimentation and Configuration Service) policy instead.\r\n\r\nIn Microsoft Edge, Domain Actions represent a series of compatibility features that help the browser work correctly on the web.\r\n\r\nMicrosoft keeps a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken due to the new User Agent string on Microsoft Edge. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nWhen the browser starts up and then periodically afterwards, the browser will contact the Experimentation and Configuration Service that contains the most up to date list of compatibility actions to perform. This list is saved locally after it is first retrieved so that subsequent requests will only update the list if the server's copy has changed.\r\n\r\nIf you enable this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you disable this policy, the list of Domain Actions will no longer be downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you don't configure this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_1","displayName":"Enabled","description":null,"helpText":null}]},"e50a95800c1c96dd":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin","displayName":"Minimum SSL version enabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1","displayName":"TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null}]},"e55b8d84fcd4ccbc":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting","displayName":"Default geolocation setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1","displayName":"Allow sites to track users' physical location","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2","displayName":"Don't allow any site to track users' physical location","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3","displayName":"Ask whenever a site wants to track users' physical location","description":null,"helpText":null}]},"e5bc12908564f0d9":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting","displayName":"Configure browser process code integrity guard setting","description":"This policy controls the use of code integrity guard in the browser process, which only allows Microsoft signed binaries to load.\r\n\r\nSetting this policy to Enabled will enable code integrity guard in the browser process.\r\n\r\nSetting this policy to Disabled, or if the policy is not set, will prevent the browser from enabling code integrity guard in the browser process.\r\n\r\nThe policy value Audit (1) is obsolete as of version 110. Setting this value is equivalent to the Disabled value.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances that enrolled for device management.\r\n\r\nThis policy will only take effect on Windows 10 RS2 and above.\r\n\r\nPolicy options mapping:\r\n\r\n* Disabled (0) = Do not enable code integrity guard in the browser process.\r\n\r\n* Audit (1) = Enable code integrity guard audit mode in the browser process.\r\n\r\n* Enabled (2) = Enable code integrity guard enforcement in the browser process.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e5fff9247ff97c10":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting","displayName":"Default idle detection setting","description":"Setting this policy to 1 - AllowIdleDetection allows websites to use the Idle Detection API without requesting user permission.\r\n\r\nSetting this policy to 2 - BlockIdleDetection prevents websites from using the Idle Detection API.\r\n\r\nSetting this policy to 3 - AskIdleDetection requires websites to request user permission each time before using the Idle Detection API.\r\n\r\nIf you do not configure this policy, users can decide whether to allow the Idle Detection API and can change this setting themselves.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowIdleDetection (1) = Allow sites to detect idle state without asking the user\r\n\r\n* BlockIdleDetection (2) = Do not allow any site to detect the user's idle state\r\n\r\n* AskIdleDetection (3) = Ask every time a site wants to detect the user's idle state\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e5f49c07ae5975b8":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval_internetexplorerintegrationsitelistrefreshinterval","displayName":"Configure how frequently the Enterprise Mode Site List is refreshed: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e5886b559177ef65":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_pptviewexe102","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_pptviewexe102_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_pptviewexe102_1","displayName":"True","description":null,"helpText":null}]},"e51455ced6dae388":{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin","displayName":"Select Lid Close Action Plugged In","description":"This policy setting specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectlidcloseactionpluggedin"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":[{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},"e5f282096eb7f053":{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttpslistener","displayName":"Turn On Compatibility HTTPS Listener","description":"This policy setting turns on or turns off an HTTPS listener created for backward compatibility purposes in the Windows Remote Management (WinRM) service.\n\n If you enable this policy setting, the HTTPS listener always appears.\n\n If you disable or do not configure this policy setting, the HTTPS listener never appears.\n\n When certain port 443 listeners are migrated to WinRM 2.0, the listener port number changes to 5986.\n\n A listener might be automatically created on port 443 to ensure backward compatibility.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-turnoncompatibilityhttpslistener"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttpslistener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttpslistener_1","displayName":"Enabled","description":null,"helpText":null}]},"e514fbbb250ed6cc":{"id":"device_vendor_msft_policy_config_textinput_allowinputpanel","displayName":"Allow Input Panel","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the IT admin to disable the touch/handwriting keyboard on Windows. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowinputpanel"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowinputpanel_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowinputpanel_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e58c1c1b1729b95f":{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent","displayName":"Allow Optional Content","description":"This policy enables devices to get optional updates (including gradual feature rollouts (CFRs) - learn more by visiting aka.ms/AllowOptionalContent)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowoptionalcontent"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_0","displayName":"Don't receive optional updates","description":"Don't receive optional updates","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_1","displayName":"Automatically receive optional updates (including CFRs)","description":"Automatically receive optional updates (including CFRs)","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_2","displayName":"Automatically receive optional updates","description":"Automatically receive optional updates","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_3","displayName":"Users can select which optional updates to receive","description":"Users can select which optional updates to receive","helpText":null}]},"e51bc6736bfcf993":{"id":"device_vendor_msft_policy_config_update_deferfeatureupdatesperiodindays","displayName":"Defer Feature Updates Period In Days","description":"Since this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Defers Feature Updates for the specified number of days. Supported values are 0-365 days. Important The default maximum number of days to defer an update has been increased from 180 (Windows 10, version 1607) to 365 in Windows 10, version 1703.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferfeatureupdatesperiodindays"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"e5616d9907cfe11b":{"id":"sirisettings_allowusergeneratedcontent","displayName":"Allow User Generated Content","description":"If `false`, disables Siri user-generated content.","helpText":null,"infoUrls":[],"categoryId":"b85d9c04-4923-4fdf-a425-424686d47859","categoryName":"Siri Settings","options":[{"id":"sirisettings_allowusergeneratedcontent_false","displayName":"False","description":null,"helpText":null},{"id":"sirisettings_allowusergeneratedcontent_true","displayName":"True","description":null,"helpText":null}]},"e550354164ae686f":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlivestickers","displayName":"Turn on Live Sticker (User)","description":"This policy setting controls the live sticker feature, which uses an online service to provide stickers online.\r\n\r\nIf you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the live stickers, and the user won't be able to turn it off.\r\n\r\nIf you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on.\r\n\r\nIf you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the live sticker feature.\r\n\r\nThis Policy setting applies only to Microsoft CHS Pinyin IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnonlivestickers"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlivestickers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlivestickers_1","displayName":"Enabled","description":null,"helpText":null}]},"e5b1b8ebcacd7a04":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_enterprisepki","displayName":"Enterprise PKI (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-enterprisepki"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_enterprisepki_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_enterprisepki_1","displayName":"Enabled","description":null,"helpText":null}]},"e54864c2d0839302":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ias","displayName":"Internet Authentication Service (IAS) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ias"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ias_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ias_1","displayName":"Enabled","description":null,"helpText":null}]},"e5e6e18ce03031e0":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_qosadmission","displayName":"QoS Admission Control (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-qosadmission"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_qosadmission_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_qosadmission_1","displayName":"Enabled","description":null,"helpText":null}]},"e5cd23ed89f11439":{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps","displayName":"Run only specified Windows applications (User)","description":"Limits the Windows programs that users have permission to run on the computer.\r\n\r\nIf you enable this policy setting, users can only run programs that you add to the list of allowed applications.\r\n\r\nIf you disable this policy setting or do not configure it, users can run all applications.\r\n\r\nThis policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.\r\n\r\nNote: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.\r\nNote: To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-restrictapps"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps_1","displayName":"Enabled","description":null,"helpText":null}]},"e5f96db9fc1a654d":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-localmachinelockdown"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown_1","displayName":"Enabled","description":null,"helpText":null}]},"e56526effd58045e":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noworkgroupcontents","displayName":"No Computers Near Me in Network Locations (User)","description":"This policy setting allows you to remove computers in the user's workgroup and domain from lists of network resources in File Explorer and Network Locations.\r\n\r\nIf you enable this policy setting, the system removes the \"Computers Near Me\" option and the icons representing nearby computers from Network Locations. This policy setting also removes these icons from the Map Network Drive browser.\r\n\r\nIf you disable or do not configure this policy setting, computers in the user's workgroup and domain appear in lists of network resources in File Explorer and Network Locations.\r\n\r\nThis policy setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods, such as typing the share name in the Run dialog box or the Map Network Drive dialog box.\r\n\r\nTo remove network computers from lists of network resources, use the \"No Entire Network in Network Locations\" policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noworkgroupcontents"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noworkgroupcontents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noworkgroupcontents_1","displayName":"Enabled","description":null,"helpText":null}]},"e5da59815c143949":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_networkbuffering","displayName":"Configure Network Buffering (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"e5866f0014d082f6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport","displayName":"CORS non-wildcard request headers support (User)","description":"Configures support of CORS non-wildcard request headers.\r\n\r\nGoogle Chrome version 97 introduces support for CORS non-wildcard request headers. When scripts make a cross-origin network request via fetch() and XMLHttpRequest with a script-added Authorization header, the header must be explicitly allowed by the Access-Control-Allow-Headers header in the CORS preflight response. \"Explicitly\" here means that the wild card symbol \"*\" doesn't cover the Authorization header. See https://www.chromest atus.com/feature/5768642492891136 for more detail.\r\n\r\nIf this policy is not set, or set to True, Google Chrome will support the CORS non-wildcard request headers and behave as described above.\r\n\r\nWhen this policy is set to False, chrome will allow the wildcard symbol (\"*\") in the Access-Control-Allow-Headers header in the CORS preflight response to cover the Authorization header.\r\n\r\nThis Enterprise policy is temporary; it's intended to be removed after Google Chrome version 103.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport_1","displayName":"Enabled","description":null,"helpText":null}]},"e50973efb0c6c8ec":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl","displayName":"URL of an XML file that contains URLs to load in an alternative browser. (User)","description":"Setting the policy to a valid URL has Google Chrome download the site list from that URL and apply the rules as if they were set up with the BrowserSwitcherUrlList policy.\r\n\r\nLeaving it unset (or set to a invalid URL) means Google Chrome doesn't use the policy as a source of rules for switching browsers.\r\n\r\nNote: This policy points to an XML file in the same format as Internet Explorer®'s SiteList policy. This loads rules from an XML file, without sharing those rules with Internet Explorer®. Read more on Internet Explorer®'s SiteList policy ( https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode)\r\n\r\nExample value: http://example.com/sitelist.xml","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_1","displayName":"Enabled","description":null,"helpText":null}]},"e5ff83ed29abfb1e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck","displayName":"Skip the meta tag check in Google Chrome Frame (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck_1","displayName":"Enabled","description":null,"helpText":null}]},"e582cd1970f06d52":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_enterpriselogourl","displayName":"Enterprise Logo URL for a managed profile (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"e5ad5c9e8e433400":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"e5fe3d52dc1a1ab3":{"id":"user_vendor_msft_policy_config_kioskbrowser_defaulturl","displayName":"Default URL (User)","description":"Configures the default URL kiosk browsers to navigate on launch and restart.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#defaulturl"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"e5b9c590513c88e8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc","displayName":"Control where security restrictions on insecure origins apply (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e53f57ae30dcf0ab":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc","displayName":"Allow JavaScript on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e50d287aa270a477":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_baseurl_l_baseurl349","displayName":"Base URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":null},"e5c407e4aac70e11":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_documentinformationpanelbeaconingui","displayName":"Document Information Panel Beaconing UI (User)","description":"This policy setting controls whether users see a security warning when they open custom Document Information Panels that contain a Web beaconing threat. InfoPath can be used to create custom Document Information Panels that can be attached to Excel workbooks, PowerPoint presentations, and Word documents. \r\n\r\nIf you enable this policy setting, you can choose from three options for controlling when users are prompted about Web beaconing threats: \r\n\r\n- Never show UI \r\n\r\n- Always show UI \r\n\r\n- Show UI if XSN is in Internet Zone \r\n\r\nIf you disable or do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled -- Never show UI.","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_documentinformationpanelbeaconingui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_documentinformationpanelbeaconingui_1","displayName":"Enabled","description":null,"helpText":null}]},"e5a4679c81766c32":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesesingapore","displayName":"Chinese (Singapore) (User)","description":"Enables the editing language Chinese (Singapore)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesesingapore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesesingapore_1","displayName":"Enabled","description":null,"helpText":null}]},"e520a12a4ac163a7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc09_l_allowsubfolders273","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc09_l_allowsubfolders273_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc09_l_allowsubfolders273_1","displayName":"True","description":null,"helpText":null}]},"e541d7bd99b078bc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_flagrepeatedwords","displayName":"Flag Repeated Words (User)","description":"Allows users to flag or ignore repeated words.","helpText":"","infoUrls":[],"categoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","categoryName":"Tools | Options | Spelling","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_flagrepeatedwords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsspelling_l_flagrepeatedwords_1","displayName":"Enabled","description":null,"helpText":null}]},"e5267b77a60657f7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_webarchiveencoding","displayName":"Web Archive encoding (User)","description":"\"Use 8 bit content-transfer-encoding\": Use a content-transfer-encoding of 8bit for all parts in a Web Archive file. | \"Use 8 bit only for encoding text parts\": Use a content-transfer-encoding of 8bit only for text parts. | \"Use RFC-approved encoding\": Always use RFC-approved encodings.","helpText":"","infoUrls":[],"categoryId":"2f56761a-8e8b-4788-a589-a73ab91818e6","categoryName":"Web Archives","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_webarchiveencoding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_webarchives_l_webarchiveencoding_1","displayName":"Enabled","description":null,"helpText":null}]},"e5d8d6c542885acb":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableonenotescreenclippings","displayName":"Disable OneNote Screen Clippings (User)","description":"Disables the screen clipping feature in OneNote.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableonenotescreenclippings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableonenotescreenclippings_1","displayName":"Enabled","description":null,"helpText":null}]},"e5da38dd7a40b10f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_addnewcategories","displayName":"Add new categories (User)","description":"This policy setting allows you to add (append) new categories to the user's current list of categories.\r\n\r\nIf you enable this policy setting, you may add (append) new categories to the user's current list of categories (the default list of categories or the list of categories the user has created). A category's length should not exceed 255 characters.\r\n\r\nIf you disable or do not configure this policy setting, the user's current list of categories is not modified.","helpText":"","infoUrls":[],"categoryId":"f5a1a387-6665-4527-b532-88a64a76e732","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_addnewcategories_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous_l_addnewcategories_1","displayName":"Enabled","description":null,"helpText":null}]},"e501d0df41502719":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_defaultlocationforostfiles_l_defaultlocationforostfilespart","displayName":"Default location for OST files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":null},"e58956a418cf8ed5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_publishinterval","displayName":"Publish interval (User)","description":"By default, Outlook does not publish calendars to Office.com more often then the publish interval set by Office.com. This setting allows users to publish calendars more often than the Office.com interval specifies.","helpText":"","infoUrls":[],"categoryId":"34c07941-8f52-43ad-b0ca-a7284655afb4","categoryName":"Office.com Sharing Service","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_publishinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_publishinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"e5a0b7d1aa91a113":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosafesenderslist_l_specifyfullpathandfilenametosafesenderslist","displayName":"Specify full path and filename to Safe Senders list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":null},"e507ac570704dcae":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview","displayName":"File tab | Options | Customize Ribbon | All Commands | Web Page Preview (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filewebpagepreview_1","displayName":"True","description":null,"helpText":null}]},"e579beed5459d900":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_disableofficestartpublisher","displayName":"Disable the Office Start screen for Publisher (User)","description":"This policy setting controls whether the Office Start screen appears on boot for Publisher.\r\n\r\nIf you enable this policy setting, users will not see the Office Start screen when they boot Publisher.\r\n\r\nIf you disable or do not configure this policy setting, users will see the Office Start screen when they boot Publisher.\r\n\r\nNote: This policy setting is overridden by the policy setting \"Microsoft Office 2016 > Miscellaneous > Disable the Office Start screen for all Office applications\" if that policy setting is set.","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_disableofficestartpublisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_disableofficestartpublisher_1","displayName":"Enabled","description":null,"helpText":null}]},"e5f40ba6347c87f0":{"id":"user_vendor_msft_printerprovisioning_upprinterinstalls_{printersharedid}_errorcode","displayName":"Error code (User)","description":"Univeral Print printer installation error code.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PrinterProvisioning-csp/"],"categoryId":"56c54112-2991-4bda-9e01-e6868bd07726","categoryName":"Printer Provisioning","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/e6.json b/public/intune-definitions/e6.json new file mode 100644 index 000000000000..71102cc20ee5 --- /dev/null +++ b/public/intune-definitions/e6.json @@ -0,0 +1 @@ +{"e62a3df1c05207af":{"id":"app_privacy_permissiondefaults_generickey_dictation","displayName":"Dictation","description":"Controls whether an app privacy permission default is set.\n* `None`: No app privacy permission default is set for use of dictation.\n* `Allow`: The app privacy permission default is set to allow use of dictation.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":[{"id":"app_privacy_permissiondefaults_generickey_dictation_0","displayName":"None","description":null,"helpText":null},{"id":"app_privacy_permissiondefaults_generickey_dictation_1","displayName":"Allow","description":null,"helpText":null}]},"e62fa8a60fd54ac6":{"id":"com.apple.applicationaccess_allowremoteappleeventsmodification","displayName":"Allow Remote Apple Events Modification","description":"If 'false', prevents modifying Remote Apple Events Sharing setting in System Settings.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowremoteappleeventsmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowremoteappleeventsmodification_true","displayName":"True","description":null,"helpText":null}]},"e6d1afb73aebef04":{"id":"com.apple.applicationaccess_ratingtvshowsau","displayName":"Rating TV Shows - Australia","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsau_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_1","displayName":"P","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_2","displayName":"C","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_3","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_4","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_5","displayName":"M","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_6","displayName":"MA15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_7","displayName":"AV15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_8","displayName":"All","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsau_9","displayName":"All","description":null,"helpText":null}]},"e6ee5577286560f4":{"id":"com.apple.caldav.account_caldavaccountdescription","displayName":"Cal DAV Account Description","description":"The description of the account.","helpText":null,"infoUrls":[],"categoryId":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","categoryName":"Caldav","options":null},"e674c1d43ec820c5":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_application id","displayName":"Microsoft Teams Application ID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"e6a6b660af1fa73c":{"id":"com.apple.managedclient.preferences_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API","description":"Control whether websites can access nearby Bluetooth devices. You can completely block access or require the site to ask the user each time it wants to access a Bluetooth device.\n\nIf you don't configure this policy, the default value (3, meaning users are asked each time) is used and users can change it.\n\n* 2 = Don't allow any site to request access to Bluetooth devices by using the Web Bluetooth API\n\n* 3 = Allow sites to ask the user to grant access to a nearby Bluetooth device","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultwebbluetoothguardsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultwebbluetoothguardsetting_0","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultwebbluetoothguardsetting_1","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},"e6680bf62e316386":{"id":"com.apple.managedclient.preferences_scanarchives","displayName":"Scanning inside archive files","description":"If true, Defender will unpack archives and scan files inside them. Otherwise archive content will be skipped, that will improve scanning performance.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-preferences?view=o365-worldwide#scan-archives-on-demand-antivirus-scans-only"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_scanarchives_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_scanarchives_true","displayName":"True","description":null,"helpText":null}]},"e6db8347c571e579":{"id":"com.apple.managedclient.preferences_scanhistorymaximumitems","displayName":"Scan history size","description":"Specify the maximum number of entries to keep in the scan history. Entries include all on-demand scans performed in the past and all antivirus detections.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#maximum-number-of-items-in-the-antivirus-scan-history"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"e693691724e1b2b3":{"id":"com.apple.managedclient.preferences_sharepointonpremprioritizationpolicy","displayName":"SharePoint Prioritization","description":"For hybrid scenarios where the email is the same for both SharePoint Server on-premises and SharePoint Online, determines whether or not the client should set up sync for SharePoint Server or SharePoint Online first during the first-run scenario.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#sharepointonpremprioritizationpolicy"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_sharepointonpremprioritizationpolicy_0","displayName":"Prioritize SharePoint Online","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_sharepointonpremprioritizationpolicy_1","displayName":"Prioritize SharePoint Server","description":null,"helpText":null}]},"e65934226c6c518a":{"id":"com.apple.managedclient.preferences_smartactionsblocklist","displayName":"Block smart actions for a list of services","description":"List specific services, such as PDFs, and websites that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\n\nIf you enable the policy:\n - The smart action in the mini and full context menu will be disabled for all profiles for services that match the given list.\n - Users will not see the smart action in the mini and full context menu on text selection for services that match the given list.\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be disabled for services that match the given list.\n\nIf you disable or don't configure this policy:\n - The smart action in the mini and full context menu will be enabled for all profiles.\n - Users will see the smart action in the mini and full context menu on text selection.\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be enabled.\n\nPolicy options mapping:\n\n* smart_actions (smart_actions) = Smart actions in pdfs and on websites\n\n* smart_actions_website (smart_actions_website) = Smart actions on websites\n\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#smartactionsblocklist"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"e6dc8205bc368f9a":{"id":"com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentdescription","displayName":"Password Content Description","description":"Contains a dictionary of keys for supported OS language IDs (for example, \"en-US\"), and whose values represent a localized description of the policy enforced by the regular expression. Use the special `default` key can for languages that aren't contained in the dictionary.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"e68242be1dc0cc2d":{"id":"com.apple.proxy.http.global_proxyusername","displayName":"Proxy Username","description":"The user name used to authenticate to the proxy server.","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":null},"e6f175ebc087497e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurentpfeedtabvisibility","displayName":"Configure whether the Discover or Work feed tabs are shown on the New Tab Page.","description":"This policy configures whether the Discover or Work feed tabs are shown on the New Tab Page. By default, both Work and Discover tabs are enabled.\n\nIf you set this policy to 'EnableBothWorkDiscover' (0) or do not configure this policy, Microsoft Edge shows both the Work and Discover feed tabs on the new tab page.\n\nIf you set this policy to 'EnableOnlyWork' (1), Microsoft Edge shows only the Work feed tab on the new tab page.\n\nIf you set this policy to 'EnableOnlyDiscover' (2), Microsoft Edge shows only the Discover feed tab on the new tab page.\n\nThis policy works with the SetNTPDefaultFeedTab policy, which controls which feed tab is selected by default when both tabs are available.\n\nPolicy options mapping:\n\n* EnableBothWorkDiscover (0) = Enable both Work and Discover tabs\n\n* EnableOnlyWork (1) = Enable only Work tab\n\n* EnableOnlyDiscover (2) = Enable only Discover tab\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurentpfeedtabvisibility_enablebothworkdiscover","displayName":"Enable both Work and Discover tabs","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurentpfeedtabvisibility_enableonlywork","displayName":"Enable only Work tab","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.configurentpfeedtabvisibility_enableonlydiscover","displayName":"Enable only Discover tab","description":null,"helpText":null}]},"e6439af96b72b120":{"id":"com.microsoft.edge.mamedgeappconfigsettings.extensioninstallsources","displayName":"Configure extension and user script install sources","description":"Define URLs that can install extensions and themes.\n\nDefine URLs that can install extensions and themes directly without having to drag and drop the packages to the edge://extensions page.\n\nEach item in this list is an extension-style match pattern (see https://go.microsoft.com/fwlink/?linkid=2095039). Users can easily install items from any URL that matches an item in this list. Both the location of the *.crx file and the page where the download is started from (in other words, the referrer) must be allowed by these patterns. Don't host the files at a location that requires authentication.\n\nThe \"ExtensionInstallBlocklist\" policy takes precedence over this policy. Any extensions that's on the blocklist won't be installed, even if it comes from a site on this list.","helpText":null,"infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"e60ecb4052c61d51":{"id":"com.microsoft.edge.mamedgeappconfigsettings.originagentclusterdefaultenabled","displayName":"Origin-keyed agent clustering enabled by default","description":"The Origin-Agent-Cluster: HTTP header controls whether a document is isolated in an origin-keyed agent cluster or in a site-keyed agent cluster. This functionality has security implications because an origin-keyed agent cluster allows isolating documents by origin. The consequence of this for developers is that the document.domain accessor can no longer be set when origin-keyed agent clustering is enabled.\n\nIf you enable or don't configure this policy, documents without the Origin-Agent-Cluster: header are assigned to origin-keyed agent clustering by default. On these documents, the document.domain accessor isn't settable.\n\nIf you disable this policy, documents without the Origin-Agent-Cluster: header are assigned to site-keyed agent clusters by default. On these documents, the document.domain accessor is settable.\n\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2191896.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.originagentclusterdefaultenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.originagentclusterdefaultenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e65ab229c4c71d9d":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_simpletext","displayName":"Display a custom message title when device installation is prevented by a policy setting","description":"This policy setting allows you to display a custom message title in a notification when a device installation is attempted and a policy setting prevents the installation.\r\n\r\nIf you enable this policy setting, Windows displays the text you type in the Main Text box as the title text of a notification when a policy setting prevents device installation.\r\n\r\nIf you disable or do not configure this policy setting, Windows displays a default title in a notification when a policy setting prevents device installation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-deviceinstallation#admx-deviceinstallation-deviceinstall-deniedpolicy-simpletext"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":[{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_simpletext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_deniedpolicy_simpletext_1","displayName":"Enabled","description":null,"helpText":null}]},"e66c590710772362":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registeradaptername","displayName":"Register DNS records with connection-specific DNS suffix","description":"Specifies if a computer performing dynamic DNS registration will register A and PTR resource records with a concatenation of its computer name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its computer name and the primary DNS suffix.\r\n\r\nBy default, a DNS client performing dynamic DNS registration registers A and PTR resource records with a concatenation of its computer name and the primary DNS suffix. For example, a computer name of mycomputer and a primary DNS suffix of microsoft.com will be registered as: mycomputer.microsoft.com.\r\n\r\nIf you enable this policy setting, a computer will register A and PTR resource records with its connection-specific DNS suffix, in addition to the primary DNS suffix. This applies to all network connections used by computers that receive this policy setting.\r\n\r\nFor example, with a computer name of mycomputer, a primary DNS suffix of microsoft.com, and a connection specific DNS suffix of VPNconnection, a computer will register A and PTR resource records for mycomputer.VPNconnection and mycomputer.microsoft.com when this policy setting is enabled.\r\n\r\nImportant: This policy setting is ignored on a DNS client computer if dynamic DNS registration is disabled.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, a DNS client computer will not register any A and PTR resource records using a connection-specific DNS suffix.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-registeradaptername"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registeradaptername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registeradaptername_1","displayName":"Enabled","description":null,"helpText":null}]},"e68fce46a245caac":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logmaxsize_3","displayName":"Specify the maximum log file size (KB)","description":"This policy setting specifies the maximum size of the log file in kilobytes.\r\n\r\nIf you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.\r\n\r\nIf you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-logmaxsize-3"],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logmaxsize_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logmaxsize_3_1","displayName":"Enabled","description":null,"helpText":null}]},"e64597fc8200e2c8":{"id":"device_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_startpinappswheninstalled_name","displayName":"Add AppIDs to the list:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"e6603d2949c4d042":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_2_scratchout","displayName":"Turn off tolerant and Z-shaped scratch-out gestures","description":null,"helpText":"","infoUrls":[],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_2_scratchout_1","displayName":"All","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_2_scratchout_2","displayName":"Tolerant","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_2_scratchout_3","displayName":"None","description":null,"helpText":null}]},"e6e4396e0c5751aa":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_server_name_teredoservernamebox","displayName":"Enter a Teredo server name:","description":null,"helpText":"","infoUrls":[],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":null},"e6587481f8368123":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016","displayName":"Microsoft Office 365 Excel 2016","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Excel 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Excel 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365excel2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016_1","displayName":"Enabled","description":null,"helpText":null}]},"e6f3dd604f3589fa":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingstemplatecatalogpath","displayName":"Settings template catalog path","description":"This policy setting configures where custom settings location templates are stored and if the catalog will be used to replace the default Microsoft templates installed with the UE-V Agent.\r\nIf you enable this policy setting, the UE-V Agent checks the specified location once each day and updates its synchronization behavior based on the templates in this location. Settings location templates added or updated since the last check are registered by the UE-V Agent. The UE-V Agent deregisters templates that were removed from this location.\r\nIf you specify a UNC path and leave the option to replace the default Microsoft templates unchecked, the UE-V Agent will use the default Microsoft templates installed by the UE-V Agent and custom templates in the settings template catalog. If there are custom templates in the settings template catalog which use the same ID as the default Microsoft templates, they will be ignored.\r\nIf you specify a UNC path and check the option to replace the default Microsoft templates, all of the default Microsoft templates installed by the UE-V Agent will be deleted from the computer and only the templates located in the settings template catalog will be used.\r\nIf you disable this policy setting, the UE-V Agent will not use the custom settings location templates. If you disable this policy setting after it has been enabled, the UE-V Agent will not restore the default Microsoft templates. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-settingstemplatecatalogpath"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingstemplatecatalogpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_settingstemplatecatalogpath_1","displayName":"Enabled","description":null,"helpText":null}]},"e6a4cbf23514aa7f":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_publishing_refresh_options","displayName":"User Publishing Refresh","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_publishing_refresh_options_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver4_user_publishing_refresh_options_1","displayName":"True","description":null,"helpText":null}]},"e691144e182aa25a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_browserswitcherexternalsitelisturl","displayName":"URL of an XML file that contains URLs to load in an alternative browser. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"e6007fc82542bf83":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_serialallowusbdevicesforurls","displayName":"Automatically grant permission to sites to connect to USB serial devices. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"e680f8813f469ae2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts","displayName":"Setting shortcuts on the New Tab Page (Beta)","description":"In development: for early preview only.\r\n\r\nSetting the policy pre-configures up to 10 custom shortcuts on the Google Chrome New Tab page.\r\n\r\nIf set, users will see these shortcuts by default and users can toggle between “My shortcuts,\" \"Most visited sites\" or \"My organization's shortcuts\" on the \"Customize Chrome\" panel. If empty or unset, the user will only be able to toggle between “My shortcuts\" or \"Most visited sites\" on the \"Customize Chrome\" panel.\r\n\r\nShortcut URLs must be unique.\r\n\r\nIf allow_user_edit is set to true, users can change the name of the shortcut. If set to false or unset, users cannot edit the name.\r\n\r\nIf allow_user_delete is set to true, users can remove the shortcut. If set to false or unset, users cannot remove the shortcut.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=NTPShortcuts for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"name\": \"Google\",\r\n \"url\": \"https://www.google.com\"\r\n },\r\n {\r\n \"name\": \"YouTube\",\r\n \"url\": \"https://www.youtube.com\"\r\n },\r\n {\r\n \"name\": \"Google Drive\",\r\n \"url\": \"https://www.drive.google.com\",\r\n \"allow_user_edit\": true,\r\n \"allow_user_delete\": true\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"e61f537479199805":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed","displayName":"Out-of-process print drivers allowed","description":"Controls if Google Chrome interacts with printer drivers from a separate service process. Platform printing calls to query available printers, get print driver settings, and submit documents for printing to local printers are made from a service process. Moving such calls out of the browser process helps improve stability and reduce frozen UI behavior in Print Preview.\r\n\r\nWhen this policy is set to Enabled or not set, Google Chrome will use a separate service process for platform printing tasks.\r\n\r\nWhen this policy is set to Disabled, Google Chrome will use the browser process for platform printing tasks.\r\n\r\nThis policy will be removed in the future, after the out-of-process print drivers feature has fully rolled out.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"e65bd4bb60ac4204":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled","displayName":"Force WebSQL in non-secure contexts to be enabled.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e65813067ac60742":{"id":"device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword","displayName":"Allow Simple Device Password","description":"Specifies whether PINs or passwords such as 1111 or 1234 are allowed. For the desktop, it also controls the use of picture passwords.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#allowsimpledevicepassword"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":[{"id":"device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"e6a0a4835b97c4a3":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork","displayName":"Network","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Network component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Network\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"e667563090d49d00":{"id":"device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms","displayName":"Check for signatures on downloaded programs","description":"This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it hasn't been modified or tampered with) on user computers before downloading executable programs.\n\nIf you enable this policy setting, Internet Explorer will check the digital signatures of executable programs and display their identities before downloading them to user computers.\n\nIf you disable this policy setting, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers.\n\nIf you do not configure this policy, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-checksignaturesondownloadedprograms"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"e6d8a1f81d49ac98":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"e62b3fdeb4d8c2c0":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls","displayName":"Block cookies on specific sites","description":"Define a list of sites, based on URL patterns, that can't set cookies.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nSee the 'CookiesAllowedForUrls' (Allow cookies on specific sites) and 'CookiesSessionOnlyForUrls' (Limit cookies from specific websites to the current session) policies for more information.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- CookiesBlockedForUrls\r\n\r\n- 'CookiesAllowedForUrls'\r\n\r\n- 'CookiesSessionOnlyForUrls'\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e69562e9bba93c18":{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users","description":"If FriendlyURLs are enabled, Microsoft Edge will compute additional representations of the URL and place them on the clipboard.\r\n\r\nThis policy configures what format will be pasted when the user pastes in external applications, or inside Microsoft Edge without the 'Paste as' context menu item.\r\n\r\nIf configured, this policy makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu will not be available.\r\n\r\n* Not configured = The user will be able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\r\n\r\n* 1 = No additional formats will be stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature will be disabled.\r\n\r\n* 3 = The user will get a friendly URL whenever they paste into surfaces that accept rich text. The plain URL will still be available for non-rich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\r\n\r\n* 4 = (Not currently used)\r\n\r\nThe richer formats may not be well-supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\r\n\r\nThe recommended policy is available in Microsoft Edge 105 or later.\r\n\r\nPolicy options mapping:\r\n\r\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\r\n\r\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.\r\n\r\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e682453a6f77ab38":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled","displayName":"Configure Microsoft Defender SmartScreen to block potentially unwanted apps","description":"This policy setting lets you configure whether to turn on blocking for potentially unwanted apps with Microsoft Defender SmartScreen. Potentially unwanted app blocking with Microsoft Defender SmartScreen provides warning messages to help protect users from adware, coin miners, bundleware, and other low-reputation apps that are hosted by websites. Potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off by default.\r\n\r\nIf you enable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use potentially unwanted app blocking with Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e6bc1b225aef69ca":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode","displayName":"Control the mode of DNS-over-HTTPS (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_off","displayName":"Disable DNS-over-HTTPS","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_automatic","displayName":"Enable DNS-over-HTTPS with insecure fallback","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_secure","displayName":"Enable DNS-over-HTTPS without insecure fallback","description":null,"helpText":null}]},"e6ab2e1736f52e32":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_exprwdexe108","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_exprwdexe108_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_exprwdexe108_1","displayName":"True","description":null,"helpText":null}]},"e6022aa8f079c407":{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttplistener","displayName":"Turn On Compatibility HTTP Listener","description":"This policy setting turns on or turns off an HTTP listener created for backward compatibility purposes in the Windows Remote Management (WinRM) service.\n\n If you enable this policy setting, the HTTP listener always appears.\n\n If you disable or do not configure this policy setting, the HTTP listener never appears.\n\n When certain port 80 listeners are migrated to WinRM 2.0, the listener port number changes to 5985.\n\n A listener might be automatically created on port 80 to ensure backward compatibility.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-turnoncompatibilityhttplistener"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttplistener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttplistener_1","displayName":"Enabled","description":null,"helpText":null}]},"e6fe1d092d3cdfa2":{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode","displayName":"Configure Xbox Live Auth Manager Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxliveauthmanagerservicestartupmode"],"categoryId":"4f29ef5c-6ca0-4b09-893f-01755a670877","categoryName":"System Services","options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},"e6976e9293865bc0":{"id":"device_vendor_msft_policy_config_update_configuredeadlineforqualityupdates","displayName":"Quality Update Deadline Period (Days)","description":"Number of days before quality updates are installed on devices automatically regardless of active hours. Before the deadline passes, users will be able to schedule restarts, and automatic restarts can happen outside of active hours. When set to 0, updates will download and install immediately, but might not finish within the day due to device availability and network connectivity.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlineforqualityupdates"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"e65722a7c90b8a7b":{"id":"device_vendor_msft_policy_config_userrights_denyaccessfromnetwork","displayName":"Deny Access From Network","description":"This user right determines which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this computer from the network policy setting if a user account is subject to both policies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denyaccessfromnetwork"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"e630db2cfa41586b":{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion","displayName":"Inclusion list for low file types (User)","description":"This policy setting allows you to configure the list of low-risk file types. If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file's zone information. This inclusion list overrides the list of high-risk file types built into Windows and has a lower precedence than the high-risk or medium-risk inclusion lists (where an extension is listed in more than one inclusion list).\r\n\r\nIf you enable this policy setting, you can specify file types that pose a low risk.\r\n\r\nIf you disable this policy setting, Windows uses its default trust logic.\r\n\r\nIf you do not configure this policy setting, Windows uses its default trust logic.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-setlowriskinclusion"],"categoryId":"634e4243-284b-4cb7-a7e6-08ca7e262937","categoryName":"Attachment Manager","options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion_1","displayName":"Enabled","description":null,"helpText":null}]},"e6e25ba4ba14300b":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_gprefreshrate3","displayName":"Minutes: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"e60f9a3d3eb06e2f":{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintonly","displayName":"Only use Package Point and print (User)","description":"This policy restricts clients computers to use package point and print only.\r\n\r\nIf this setting is enabled, users will only be able to point and print to printers that use package-aware drivers. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers.\r\n\r\nIf this setting is disabled, or not configured, users will not be restricted to package-aware point and print only.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-packagepointandprintonly"],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintonly_1","displayName":"Enabled","description":null,"helpText":null}]},"e62a7ac462075755":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled","displayName":"Enables the concept of policy atomic groups (User)","description":"Setting the policy to Enabled means policies coming from an atomic group that don't share the source with the highest priority from that group get ignored.\r\n\r\nSetting the policy to Disabled means no policy is ignored because of its source. Policies are ignored only if there's a conflict, and the policy doesn't have the highest priority.\r\n\r\nIf this policy is set from a cloud source, it can't target a specific user.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e6596bcc7866cbc5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended","displayName":"Set default download directory (User)","description":"Setting the policy changes the default directory that Chrome downloads files to, but users can change the directory.\r\n\r\nLeaving the policy unset means Chrome uses its platform-specific default directory.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e6a8a9d3434856af":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended","displayName":"Default search provider name (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderName specifies the default search provider's name.\r\n\r\nLeaving DefaultSearchProviderName unset means the hostname specified by the search URL is used.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e646eca508de10e9":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication with constraints (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"e6d6d1c4f4c0717c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides","displayName":"Override First-Party Sets. (User)","description":"This policy provides a way to override the list of sets the browser uses for First-Party Sets features.\r\n\r\nEach set in the browser's list of First-Party Sets must meet the requirements of a First-Party Set.\r\nA First-Party Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all of its ccTLD variants.\r\nSee https://github.com/WICG/first-party-sets for more information on First-Party Sets are used by Google Chrome.\r\n\r\nAll sites in a First-Party Set must be a registrable domain served over HTTPS. Each site in a First-Party Set must also be unique,\r\nmeaning a site cannot be listed more than once in a First-Party Set.\r\n\r\nWhen this policy is given an empty dictionary, the browser uses the public list of First-Party Sets.\r\n\r\nFor all sites in a First-Party Set from the replacements list, if a site is also present\r\non a First-Party Set in the browser's list, then that site will be removed from the browser's First-Party Set.\r\nAfter this, the policy's First-Party Set will be added to the browser's list of First-Party Sets.\r\n\r\nFor all sites in a First-Party Set from the additions list, if a site is also present\r\non a First-Party Set in the browser's list, then the browser's First-Party Set will be updated so that the\r\nnew First-Party Set can be added to the browser's list. After the browser's list has been updated,\r\nthe policy's First-Party Set will be added to the browser's list of First-Party Sets.\r\n\r\nThe browser's list of First-Party Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site cannot be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) are not supported as a policy value, nor within any First-Party Set in these lists.\r\n\r\nAll sets provided by the policy must be valid First-Party Sets, if they aren't then an\r\nappropriate error will be outputted.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nThis is the equivalent of the RelatedWebsiteSetsOverrides policy.\r\nEither policy may be used, but this one will be deprecated soon so the RelatedWebsiteSetsOverrides policy is preferred.\r\nThey both have the same effect on the browser's behavior.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=FirstPartySetsOverrides for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"categoryId":"da78ddbc-fc94-48f9-8808-4b160d6f1d50","categoryName":"First- Party Sets Settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},"e62172543f2c7c44":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection","displayName":"Default sheet direction (User)","description":"This setting controls the default sheet direction, which is either \"Left to Right\" or \"Right to Left\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_1","displayName":"Enabled","description":null,"helpText":null}]},"e68216e20a2f9eb2":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_editdirectlyincell","displayName":"Edit directly in cell (User)","description":"This policy setting sets the \"Edit directly in cell\" option found under File tab | Options | Advanced | Editing Options.\r\n\r\nIf you enable or do not configure this policy setting, Excel will allow editing directly in the cell This is the default behavior.\r\n\r\nIf you disable this policy setting, Excel will not allow editing to be done directly in the cell.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_editdirectlyincell_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_editdirectlyincell_1","displayName":"Enabled","description":null,"helpText":null}]},"e6e08667ba434b29":{"id":"user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":null},"e645a7da080eae9e":{"id":"user_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation","displayName":"Check for server certificate revocation (User)","description":"This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have been compromised or are no longer valid, and this option protects users from submitting confidential data to a site that may be fraudulent or not secure.\n\nIf you enable this policy setting, Internet Explorer will check to see if server certificates have been revoked.\n\nIf you disable this policy setting, Internet Explorer will not check server certificates to see if they have been revoked.\n\nIf you do not configure this policy setting, Internet Explorer will not check server certificates to see if they have been revoked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-checkservercertificaterevocation"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_1","displayName":"Enabled","description":null,"helpText":null}]},"e60c97447f1b19ef":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"e66aa37cee63f4b1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist","displayName":"Define a list of allowed URLs (User)","description":"Allow access to the listed URLs, as exceptions to the URL block list.\r\n\r\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nYou can use this policy to open exceptions to restrictive block lists. For example, you can include '*' in the block list to block all requests, and then use this policy to allow access to a limited list of URLs. You can use this policy to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths.\r\n\r\nThe most specific filter determines if a URL is blocked or allowed. The allowed list takes precedence over the block list.\r\n\r\nThis policy is limited to 1000 entries; subsequent entries are ignored.\r\n\r\nIf you don't configure this policy, there are no exceptions to the block list in the 'URLBlocklist' (Block access to a list of URLs) policy.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"e67c8cac8f58ee92":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_exemptsmartscreendownloadwarnings","displayName":"Disable SmartScreen AppRep based warnings for specified file types on specified domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":null},"e6fc06e128801643":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacebirthday_l_birthdaymapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"e616e0ca8909d396":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyproject","displayName":"Disallow in Project (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyproject_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_nousercustomizationpolicy_l_nousercustomizationpolicyproject_1","displayName":"True","description":null,"helpText":null}]},"e67a7aaa665bd6bb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_turnoffoutlooknamedictionaries","displayName":"Turn off Outlook name dictionaries update (User)","description":"This policy setting allows you to turn off updating for Outlook name dictionaries of Microsoft IME (Input Method Editor). This policy setting applies to Japanese Microsoft IME only.\r\n\r\nIf you enable this policy setting, all Outlook name dictionaries are not updated.\r\nOutlook name dictionaries that were added before enabling this policy setting are used for conversion.\r\n\r\nIf you disable or do not configure this policy setting, Outlook name dictionaries are generated, updated and used for conversion.","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_turnoffoutlooknamedictionaries_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_turnoffoutlooknamedictionaries_1","displayName":"Enabled","description":null,"helpText":null}]},"e66070f5e05a8df6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_displaylanguage_l_changeordeletelinktolanguagepackdownloadsite_l_changeordeletelinktolanguagepackdownloadsiteid","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0f6020d9-278b-4284-894a-bc4a70c8cf32","categoryName":"Display Language","options":null},"e640a4d44a2363c6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dari","displayName":"Dari (User)","description":"Enables the editing language Dari","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dari_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_dari_1","displayName":"Enabled","description":null,"helpText":null}]},"e63dcc460e98671f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableclipboardtoolbartriggers","displayName":"Disable Clipboard Toolbar triggers (User)","description":"Checked: Prevents the Office Clipboard from automatically appearing when multiple Copy commands are performed in any of the Office programs. | Unchecked: Permits the Office Clipboard to appear automatically when multiple Copy commands are performed in Office programs.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableclipboardtoolbartriggers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_disableclipboardtoolbartriggers_1","displayName":"Enabled","description":null,"helpText":null}]},"e6a87cd298ffee6e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12","displayName":"Workflow Cache 12 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_1","displayName":"Enabled","description":null,"helpText":null}]},"e6148b8c87cf7a47":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache15_l_workflowcachename498","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"e6dbb5adf8e2a508":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc08_l_pathcolon08","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"e685c71017f40b7f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_showautocorrectoptionsbuttons","displayName":"Show AutoCorrect Options buttons (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"8084033c-156a-4d1b-ab0b-159541810459","categoryName":"Tools | AutoCorrect Options... (Excel, PowerPoint and Access)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_showautocorrectoptionsbuttons_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess_l_showautocorrectoptionsbuttons_1","displayName":"Enabled","description":null,"helpText":null}]},"e6bd8c8a4c1adffa":{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_securitysettings_l_forceruntimeavscan","displayName":"Force Runtime AV Scan (User)","description":"This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus or Visio Pro for Office 365. \r\n\r\nThis policy setting controls when Office files are scanned at runtime by an installed Anti-Virus software.\r\n\r\nNote, files will only be scanned if the Anti-Virus software registers as a provider for runtime scanning.\r\n\r\nIf you enable this policy setting, Office applications will submit all files for a runtime scan by Antivirus.\r\n\r\nIf you disable or do not configure this policy setting, Office will selectively submit certain files, for example encrypted files, for a runtime scan by Antivirus.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_securitysettings_l_forceruntimeavscan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v3~policy~l_microsoftofficesystem~l_securitysettings_l_forceruntimeavscan_1","displayName":"Enabled","description":null,"helpText":null}]},"e6f1879c689f4904":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablecustomroot","displayName":"Prevent users from changing the location of their OneDrive folder (User)","description":"This setting lets you block users from changing the location of their OneDrive - {organization name} folder during setup of the OneDrive sync app.\r\n\r\nIf you enable this setting, the \"Change location\" link is hidden in OneDrive Setup. The OneDrive folder will be created in the default location, or in the custom location you specified if you enabled the \"Set the default location for the OneDrive folder\" setting.\r\n\r\nIf you disable or do not configure this setting, users can click the \"Change location\" link to change the location of their OneDrive folder in OneDrive Setup.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablecustomroot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablecustomroot_1","displayName":"Enabled","description":null,"helpText":null}]},"e668a8b6103b6d3d":{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointlivesyncintervalmultiplier_l_empty17","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":null},"e66383c95e0acc63":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_disableformregions_l_disableformregionspart","displayName":"Configure form regions permissions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e0e10e94-325c-49e6-ab48-4f146254395f","categoryName":"Form Region Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_disableformregions_l_disableformregionspart_0","displayName":"All form regions are allowed to run","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_disableformregions_l_disableformregionspart_1","displayName":"Allow only those registered in HKLM","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_disableformregions_l_disableformregionspart_2","displayName":"No form regions are allowed to run","description":null,"helpText":null}]},"e681828e539440b3":{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_disableaccountsettingsdetectionservice","displayName":"Prevent Outlook from interacting with the account settings detection service (User)","description":"This policy setting determines whether Outlook can interact with the account settings detection service to gather information about a user's account settings.\r\n\r\nIf you enable this policy setting, users will need to manually configure their account settings.","helpText":"","infoUrls":[],"categoryId":"ff87ffcb-a827-4d2b-90fc-e5789ef6d3e0","categoryName":"E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_disableaccountsettingsdetectionservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v4~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_accountsettingsemail_disableaccountsettingsdetectionservice_1","displayName":"Enabled","description":null,"helpText":null}]},"e6f689a4500c6c26":{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_autodiscoverredirectservers","displayName":"Don’t show redirect warnings for Autodiscover for the specified HTTPS server names (User)","description":"This policy setting allows you to specify HTTPS server names for which Autodiscover won’t show a warning message when redirecting from HTTP to HTTPS.\r\n\r\nBy default, when an Autodiscover operation redirects from HTTP to HTTPS, you may be shown a warning message about the redirection.\r\n\r\nIf you enable this policy setting, you need to specify HTTPS server names, and for those server names, you won’t be shown a warning message. For example, if you enter contoso.com, you won’t be shown a warning message when Autodiscover redirects to https://contoso.com.\r\n\r\nIf you disable or don’t configure this policy setting, you may be shown a warning message when an Autodiscover operation redirects from HTTP to HTTPS.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_autodiscoverredirectservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_autodiscoverredirectservers_1","displayName":"Enabled","description":null,"helpText":null}]},"e6b63b039ff7721f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_recentlyusedfilelist","displayName":"Number of presentations in the Recent Presentations list (User)","description":"This policy setting specifies the number of entries displayed in the Recent Presentations list that appears when users click Open on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent Presentations list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Presentations list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_recentlyusedfilelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_recentlyusedfilelist_1","displayName":"Enabled","description":null,"helpText":null}]},"e69d54881d429549":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":null},"e68e0ae7bb1e9832":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_l_pjhours9","displayName":"Hours (User)","description":"","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_l_pjhours9_0","displayName":"h","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_l_pjhours9_1","displayName":"hr","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_l_pjhours9_2","displayName":"hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_l_pjhours9_3","displayName":"\r\n ","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_l_pjhours9_4","displayName":"\r\n ","description":null,"helpText":null}]},"e6364c90710f7d6e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_providefeedbackwithanimation","displayName":"Provide feedback with animation (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_providefeedbackwithanimation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_providefeedbackwithanimation_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e7.json b/public/intune-definitions/e7.json new file mode 100644 index 000000000000..676ba6e3d554 --- /dev/null +++ b/public/intune-definitions/e7.json @@ -0,0 +1 @@ +{"e779d4f500a983f5":{"id":"ade_setupassistant_actionbutton","displayName":"Action Button","description":null,"helpText":null,"infoUrls":[],"categoryId":"0d23daec-d948-4eee-8ee5-89ab1c59e440","categoryName":null,"options":[{"id":"ade_setupassistant_actionbutton_0","displayName":"Hide","description":null,"helpText":null},{"id":"ade_setupassistant_actionbutton_1","displayName":"Show","description":null,"helpText":null}]},"e7c7647bfea0c97d":{"id":"com.apple.applicationaccess_allowpersonalizedhandwritingresults","displayName":"Allow Personalized Handwriting Results (Deprecated)","description":"If false, prevents the system from generating text in the user's handwriting.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpersonalizedhandwritingresults_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpersonalizedhandwritingresults_true","displayName":"True","description":null,"helpText":null}]},"e7ae92161c369aa1":{"id":"com.apple.managedclient.preferences_edgeworkspacesenabled","displayName":"Enable Workspaces","description":"Microsoft Edge Workspaces helps improve productivity for users in your organization.\n\nIf you enable or don't configure this policy, users will be able to access the Microsoft Edge Workspaces feature.\nIf you disable this policy, users will not be able to access the Microsoft Edge Workspaces feature.\n\nTo learn more about the feature, see https://go.microsoft.com/fwlink/?linkid=2209950","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#edgeworkspacesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_edgeworkspacesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_edgeworkspacesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e7659689bc7e0235":{"id":"com.apple.managedclient.preferences_screencapturewithoutgestureallowedfororigins","displayName":"Allow screen capture without prior user gesture","description":"For security reasons, the\ngetDisplayMedia() web API requires\na prior user gesture (\"transient activation\") to be called or the API will\nfail.\n\nWhen this policy is configured, admins can specify origins on which this API\ncan be called without prior user gesture.\n\nFor detailed information on valid url patterns, see\nhttps://go.microsoft.com/fwlink/?linkid=2095322. Note: * is not an accepted\nvalue for this policy.\n\nIf this policy is not configured, all origins require a prior user gesture to\ncall this API.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#screencapturewithoutgestureallowedfororigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"e7ff3a96fdb12050":{"id":"device_vendor_msft_policy_config_admx_hotspotauth_hotspotauth_enable","displayName":"Enable Hotspot Authentication","description":"This policy setting defines whether WLAN hotspots are probed for Wireless Internet Service Provider roaming (WISPr) protocol support.\r\n\r\nIf a WLAN hotspot supports the WISPr protocol, users can submit credentials when manually connecting to the network. If authentication is successful, users will be connected automatically on subsequent attempts. Credentials can also be configured by network operators.\r\n\r\nIf you enable this policy setting, or if you do not configure this policy setting, WLAN hotspots are automatically probed for WISPR protocol support.\r\n\r\nIf you disable this policy setting, WLAN hotspots are not probed for WISPr protocol support, and users can only authenticate with WLAN hotspots using a web browser.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-hotspotauth#admx-hotspotauth-hotspotauth-enable"],"categoryId":"6d4184ab-a66c-47f1-b54e-af55f654e2a5","categoryName":"Hotspot Authentication","options":[{"id":"device_vendor_msft_policy_config_admx_hotspotauth_hotspotauth_enable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_hotspotauth_hotspotauth_enable_1","displayName":"Enabled","description":null,"helpText":null}]},"e78fe5a92169bfb9":{"id":"device_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_2","displayName":"Turn off Windows Mobility Center","description":"This policy setting turns off Windows Mobility Center.\r\n\r\nIf you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mobility Center UI is removed from all shell entry points and the .exe file does not launch it.\r\n\r\nIf you disable this policy setting, the user is able to invoke Windows Mobility Center and the .exe file launches it.\r\n\r\nIf you do not configure this policy setting, Windows Mobility Center is on by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter#admx-mobilepcmobilitycenter-mobilitycenterenable-2"],"categoryId":"1ed9f90e-d8b6-413f-bfc2-face955141bc","categoryName":"Windows Mobility Center","options":[{"id":"device_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e77706a40be2c191":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablestartlayoutsettingsync_checkbox_useroverride","displayName":"Allow users to turn \"start layout\" syncing on.","description":null,"helpText":"","infoUrls":[],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablestartlayoutsettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablestartlayoutsettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},"e79b0a2ac5ca44f2":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup","displayName":"InfoPath 2013 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft InfoPath 2013.\r\nMicrosoft InfoPath 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft InfoPath 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft InfoPath 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft InfoPath 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013infopathbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"e75e34a3d4a4ba2b":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common","displayName":"Microsoft Office 2016 Common Settings","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2016 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers.\r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2016 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2016 applications are enabled, this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016common"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common_1","displayName":"Enabled","description":null,"helpText":null}]},"e733a4106d5e05ad":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_showhibernateoption","displayName":"Show hibernate in the power options menu","description":"Shows or hides hibernate from the power options menu.\r\n\r\nIf you enable this policy setting, the hibernate option will be shown in the Power Options menu (as long as it is supported by the machine's hardware).\r\n\r\nIf you disable this policy setting, the hibernate option will never be shown in the Power Options menu.\r\n\r\nIf you do not configure this policy setting, users will be able to choose whether they want hibernate to show through the Power Options Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-showhibernateoption"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_showhibernateoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_showhibernateoption_1","displayName":"Enabled","description":null,"helpText":null}]},"e7865ef0d2268dbf":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditspeciallogon","displayName":"Audit Special Logon","description":"This policy setting allows you to audit events generated by special logons such as the following : The use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level. A logon by a member of a Special Group. Special Groups enable you to audit events generated when a member of a certain group has logged on to your network. You can configure a list of group security identifiers (SIDs) in the registry. If any of those SIDs are added to a token during logon and the subcategory is enabled, an event is logged. For more information about this feature, see article 947223 in the Microsoft Knowledge Base (https://go.microsoft.com/fwlink/?LinkId=121697).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditspeciallogon"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditspeciallogon_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditspeciallogon_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditspeciallogon_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditspeciallogon_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"e78ae22c8f1904fd":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditotherobjectaccessevents","displayName":"Object Access Audit Other Object Access Events","description":"This policy setting allows you to audit events generated by the management of task scheduler jobs or COM+ objects. For scheduler jobs, the following are audited: Job created. Job deleted. Job enabled. Job disabled. Job updated. For COM+ objects, the following are audited: Catalog object added. Catalog object updated. Catalog object deleted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditotherobjectaccessevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditotherobjectaccessevents_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditotherobjectaccessevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditotherobjectaccessevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditotherobjectaccessevents_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"e7acac091a7ee8b5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed","displayName":"Allow or deny audio capture","description":"Setting the policy to Enabled or leaving it unset means that, with the exception of URLs set in the AudioCaptureAllowedUrls list, users get prompted for audio capture access.\r\n\r\nSetting the policy to Disabled turns off prompts, and audio capture is only available to URLs set in the AudioCaptureAllowedUrls list.\r\n\r\nNote: The policy affects all audio input (not just the built-in microphone).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"e73353c8c4abe4ff":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy","displayName":"Google Chrome cloud policy overrides Platform policy.","description":"Setting the policy to Enabled means cloud policy takes precedence if it conflicts with platform policy.\r\n\r\nSetting the policy to Disabled or leaving it unset means platform policy takes precedence if it conflicts with cloud policy.\r\n\r\nThis mandatory policy affects machine scope cloud policies.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"e791021f6b027b3b":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers","displayName":"Register protocol handlers (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"962a2377-ad9a-4654-a526-a77c14152fd7","categoryName":"Content settings","options":null},"e70e3cfa15c9c4e9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended","displayName":"Default search provider keyword","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderKeyword specifies the keyword or shortcut used in the address bar to trigger the search for this provider.\r\n\r\nLeaving DefaultSearchProviderKeyword unset means no keyword activates the search provider.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e7f7dbedebee6246":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation","displayName":"URLs/domains automatically permitted direct Security Key attestation","description":"Setting the policy specifies URLs and domains for which no prompt appears when attestation certificates from Security Keys are requested. A signal is also sent to the Security Key indicating that individual attestation may be used. Without this, when sites request attestation of Security Keys, users are prompted in Google Chrome version 65 and later.\r\n\r\nURLs will only match as U2F appIDs. Domains only match as webauthn RP IDs. So to cover both U2F and webauthn APIs, list the appID URL and domain for a given site.\r\n\r\nExample value:\r\n\r\nhttps://example.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_1","displayName":"Enabled","description":null,"helpText":null}]},"e7738ba147c01fbf":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls","displayName":"Allow Window Placement permission on these sites","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e760a7450c7f64d5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_extensioninstalltypeblocklistdesc","displayName":"Blocklist for install types of extensions (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":null},"e7c52f95a5a7e82c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled","displayName":"Control the URL parameter filter feature","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e70fb8a8d51dcda8":{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist","displayName":"Please select a 4G connection cost value to set:","description":"","helpText":"","infoUrls":[],"categoryId":"edf3754c-b22d-4946-a744-4773240a5883","categoryName":"WWAN Media Cost","options":[{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_1","displayName":"Unrestricted","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_2","displayName":"Fixed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_3","displayName":"Variable","description":null,"helpText":null}]},"e789b449803c83a1":{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog","displayName":"Specify the maximum log file size (KB)","description":"This policy setting specifies the maximum size of the log file in kilobytes.\n\nIf you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.\n\nIf you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-specifymaximumfilesizeapplicationlog"],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":[{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_1","displayName":"Enabled","description":null,"helpText":null}]},"e7f35e83d93f6786":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_profilesvhdlocations","displayName":"VHD Locations (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"e792423bff0ad661":{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_preventteamsinstall","displayName":"Don’t install Microsoft Teams with new installations or updates of Office","description":"This policy setting allows you to control whether Microsoft Teams is installed with a new installation of Office or when an existing installation of Office is updated.\r\n\r\nNote: This policy setting only applies to versions of Office, such as Office 365 ProPlus, where Teams is installed with a new installation or an update of Office.\r\n\r\nIf you enable this policy setting, Teams won’t be installed with a new installation or an update of Office.\r\n\r\nIf you disable or don’t configure this policy setting, Teams will be installed as part of a new installation or an update of Office, unless you have used some other method, such as the Office Deployment Tool, to exclude the installation of Teams.","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_preventteamsinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_preventteamsinstall_1","displayName":"Enabled","description":null,"helpText":null}]},"e70695f43f0f33f8":{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_dacl_edit","displayName":"Helpers:","description":"","helpText":"","infoUrls":[],"categoryId":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","categoryName":"Remote Assistance","options":null},"e77646441b1dbaff":{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection","displayName":"Restrict clipboard transfer from server to client","description":"This policy setting allows you to restrict clipboard data transfers from server to client.\r\n\r\nIf you enable this policy setting, you must choose from the following behaviors:\r\n\r\n- Disable clipboard transfers from server to client.\r\n\r\n- Allow plain text copying from server to client.\r\n\r\n- Allow plain text and images copying from server to client.\r\n\r\n- Allow plain text, images and Rich Text Format copying from server to client.\r\n\r\n- Allow plain text, images, Rich Text Format and HTML copying from server to client.\r\n\r\nIf you disable or do not configure this policy setting, users can copy arbitrary contents from server to client if clipboard redirection is enabled.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-limitservertoclientclipboardredirection"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_1","displayName":"Enabled","description":null,"helpText":null}]},"e7c2162e29614c47":{"id":"device_vendor_msft_policy_config_storage_removablediskdenywriteaccess","displayName":"Removable Disk Deny Write Access","description":"If you enable this policy setting, write access is denied to this removable storage class. If you disable or do not configure this policy setting, write access is allowed to this removable storage class. Note: To require that users write data to BitLocker-protected storage, enable the policy setting \"Deny write access to drives not protected by BitLocker,\" which is located in \"Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Removable Data Drives.\"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#removablediskdenywriteaccess"],"categoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","categoryName":"Storage","options":[{"id":"device_vendor_msft_policy_config_storage_removablediskdenywriteaccess_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_storage_removablediskdenywriteaccess_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},"e785022220a74023":{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"e7613a36a127c710":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders54","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders54_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders54_1","displayName":"True","description":null,"helpText":null}]},"e74b4bf9927f2792":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosetfolders","displayName":"Remove programs on Settings menu (User)","description":"This policy setting allows you to remove programs on Settings menu.\r\n\r\nIf you enable this policy setting, the Control Panel, Printers, and Network and Connection folders are removed from Settings on the Start menu, and from Computer and File Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.\r\n\r\nHowever, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking Computer to start System.\r\n\r\nIf you disable or do not configure this policy setting, the Control Panel, Printers, and Network and Connection folders from Settings are available on the Start menu, and from Computer and File Explorer.\r\n\r\nAlso, see the \"Disable Control Panel,\" \"Disable Display in Control Panel,\" and \"Remove Network Connections from Start Menu\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosetfolders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosetfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosetfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"e79607bcb7b62b28":{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskbarclock","displayName":"Remove Clock from the system notification area (User)","description":"Prevents the clock in the system notification area from being displayed.\r\n\r\nIf you enable this setting, the clock will not be displayed in the system notification area.\r\n\r\nIf you disable or do not configure this setting, the default behavior of the clock appearing in the notification area will occur.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notaskbarclock"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskbarclock_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskbarclock_1","displayName":"Enabled","description":null,"helpText":null}]},"e74d5b3ef41bf8a5":{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskgrouping","displayName":"Prevent grouping of taskbar items (User)","description":"This setting affects the taskbar buttons used to switch between running programs.\r\n\r\nTaskbar grouping consolidates similar applications when there is no room on the taskbar. It kicks in when the user's taskbar is full.\r\n\r\nIf you enable this setting, it prevents the taskbar from grouping items that share the same program name. By default, this setting is always enabled.\r\n\r\nIf you disable or do not configure it, items on the taskbar that share the same program are grouped together. The users have the option to disable grouping if they choose.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notaskgrouping"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskgrouping_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskgrouping_1","displayName":"Enabled","description":null,"helpText":null}]},"e761e44b9276a07c":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming","displayName":"Sync settings over metered connections even when roaming (User)","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections outside of the home provider network, for example when connected via a roaming connection.\r\nBy default, the UE-V Agent does not synchronize settings over a metered connection that is roaming.\r\nWith this setting enabled, the UE-V Agent synchronizes settings over a metered connection that is roaming.\r\nWith this setting disabled, the UE-V Agent will not synchronize settings over a metered connection that is roaming.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncovermeterednetworkwhenroaming"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming_1","displayName":"Enabled","description":null,"helpText":null}]},"e71b2c825649dca5":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noentirenetwork","displayName":"No Entire Network in Network Locations (User)","description":"Removes all computers outside of the user's workgroup or local domain from lists of network resources in File Explorer and Network Locations.\r\n\r\nIf you enable this setting, the system removes the Entire Network option and the icons representing networked computers from Network Locations and from the browser associated with the Map Network Drive option.\r\n\r\nThis setting does not prevent users from viewing or connecting to computers in their workgroup or domain. It also does not prevent users from connecting to remote computers by other commonly used methods, such as by typing the share name in the Run dialog box or the Map Network Drive dialog box.\r\n\r\nTo remove computers in the user's workgroup or domain from lists of network resources, use the \"No Computers Near Me in Network Locations\" setting.\r\n\r\nNote: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noentirenetwork"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noentirenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noentirenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"e7cbbb0f7127c779":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions","displayName":"Allow download restrictions (User)","description":"Setting the policy means users can't bypass download security decisions.\r\n\r\nThere are many types of download warnings within Chrome, which roughly break down into these categories (learn more about Safe Browsing verdicts https://support.google.com/chrome/?p=ib_download_blocked):\r\n\r\n* Malicious, as flagged by the Safe Browsing server\r\n* Uncommon or unwanted, as flagged by the Safe Browsing server\r\n* A dangerous file type (e.g. all SWF downloads and many EXE downloads)\r\n\r\nSetting the policy blocks different subsets of these, depending on it's value:\r\n\r\n0: No special restrictions. Default.\r\n\r\n1: Blocks malicious files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n2: Blocks malicious files flagged by the Safe Browsing server AND Blocks uncommon or unwanted files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n3: Blocks all downloads. Not recommended, except for special use cases.\r\n\r\n4: Blocks malicious files flagged by the Safe Browsing server, does not block dangerous file types. Recommended.\r\n\r\nNote: These restrictions apply to downloads triggered from webpage content, as well as the Download link... menu option. They don't apply to the download of the currently displayed page or to saving as PDF from the printing options. Read more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},"e7cc5bb4b202dcc3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_filesystemreadblockedforurlsdesc","displayName":"Block read access via the File System API on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"e790505c8e4faca4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist","displayName":"Configure extension installation whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"e7741cd7645325b1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes","displayName":"Supported authentication schemes (User)","description":"Setting the policy specifies which HTTP authentication schemes Google Chrome supports.\r\n\r\nLeaving the policy unset employs all 4 schemes.\r\n\r\nValid values:\r\n\r\n* basic\r\n\r\n* digest\r\n\r\n* ntlm\r\n\r\n* negotiate\r\n\r\nNote: Separate multiple values with commas.\r\n\r\nExample value: basic,digest,ntlm,negotiate","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_1","displayName":"Enabled","description":null,"helpText":null}]},"e76c3d0232c37a78":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_enabledpluginsdesc","displayName":"List of enabled plugins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"e73a3b6a57248bde":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains (User)","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\n\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\n\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowaccesstodatasources"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},"e73f27d483e74aee":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b","displayName":"Only allow approved domains to use ActiveX controls without prompt (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0","displayName":"Disable","description":null,"helpText":null}]},"e7a0fd6bde08309c":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00","displayName":"Logon options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},"e7e58b53bc15f0f0":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1","displayName":"Disable HTTP fallback for SIP connection (User)","description":"Prevents from HTTP being used for SIP connection in case TLS or TCP fail.","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1_1","displayName":"Enabled","description":null,"helpText":null}]},"e7a02cefc42b9da5":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1","displayName":"Allow storage of user passwords (User)","description":"\r\nAllows Microsoft Lync to store user passwords.\r\n\r\nIf you enable this policy setting, Microsoft Lync can store a password on request from the user.\r\n\r\nIf you disable this policy setting, Microsoft Lync cannot store a password.\r\n\r\nIf you do not configure this policy setting and the user logs on to a domain, Microsoft Lync does not store the password. If you do not configure this policy setting and the user does not log on to a domain (for example, if the user logs on to a workgroup), Microsoft Lync can store the password.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1_1","displayName":"Enabled","description":null,"helpText":null}]},"e75c37368f1d6297":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots","displayName":"Disable taking screenshots (User)","description":"Controls if users can take screenshots of the browser page.\r\n\r\nIf enabled, user can't take screenshots by using keyboard shortcuts or extension APIs.\r\n\r\nIf disabled or don't configure this policy, users can take screenshots.\r\n\r\nPlease note this policy controls screenshots taken from within the browser itself. Even if you enable this policy, users might still be able to take screenshots using some method outside of the browser (like using an operating system feature or another application).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_1","displayName":"Enabled","description":null,"helpText":null}]},"e79f20741c7a9525":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_isolateorigins","displayName":"Enable site isolation for specific origins (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e7613d3e18593064":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_downloaddirectory","displayName":"Set download directory (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":null},"e7f419ae705614ce":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions (User)","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'Block dangerous downloads' (1) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings.\r\n\r\nSet 'Block potentially dangerous downloads' (2) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous downloads.\r\n\r\nSet 'Block all downloads' (3) to block all downloads.\r\n\r\nIf you don't configure this policy or set the 'No special restrictions' (0) option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\n* 0 = No special restrictions\r\n\r\n* 1 = Block dangerous downloads\r\n\r\n* 2 = Block potentially dangerous downloads\r\n\r\n* 3 = Block all downloads","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e7cbd0d9920942e9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir","displayName":"Set the user data directory (User)","description":"Set the directory to use for storing user data.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified directory regardless of whether the user has set the '--user-data-dir' command-line flag.\r\n\r\nIf you don't enable this policy, the default profile path is used, but the user can override it by using the '--user-data-dir' flag. Users can find the directory for the profile at edge://version/ under profile path.\r\n\r\nTo avoid data loss or other errors, don't configure this policy to a volume's root directory or to a directory that's used for other purposes, because Microsoft Edge manages its contents.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nExample value: ${users}/${user_name}/Edge","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},"e7131aa6dba572b6":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention","displayName":"Block tracking of users' web-browsing activity (User)","description":"Lets you decide whether to block websites from tracking users' web-browsing activity.\r\n\r\nIf you enable this policy, you have the following options for setting the level of tracking prevention:\r\n\r\n* 0 = Off (no tracking prevention)\r\n\r\n* 1 = Basic (blocks harmful trackers, content and ads will be personalized)\r\n\r\n* 2 = Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)\r\n\r\n* 3 = Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)\r\n\r\nIf you disable this policy or don't configure it, users can set their own level of tracking prevention.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_1","displayName":"Enabled","description":null,"helpText":null}]},"e7fa1975c68de0d3":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs","displayName":"Allow importing of open tabs (User)","description":"Allows users to import open and pinned tabs from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, open tabs aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs_1","displayName":"Enabled","description":null,"helpText":null}]},"e713ef0e1144e4b4":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled","displayName":"Enable globally scoped HTTP auth cache (User)","description":"This policy configures a single global per profile cache with HTTP server authentication credentials.\r\n\r\nIf you disable or don’t set this policy, the browser will use the default behavior of cross-site auth, which as of version 80, will be to scope HTTP server authentication credentials by top-level site. So, if two sites use resources from the same authenticating domain, credentials will need to be provided independently in the context of both sites. Cached proxy credentials will be reused across sites.\r\n\r\nIf you enable this policy HTTP auth credentials entered in the context of one site will automatically be used in the context of another site.\r\n\r\nEnabling this policy leaves sites open to some types of cross-site attacks, and allows users to be tracked across sites even without cookies by adding entries to the HTTP auth cache using credentials embedded in URLs.\r\n\r\nThis policy is intended to give enterprises depending on the legacy behavior a chance to update their login procedures and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e77a371be5d8aa35":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting","displayName":"Default sensors setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting_1","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting_2","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},"e7fddc94938d8176":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_greenlandic","displayName":"Greenlandic (User)","description":"Enables the editing language Greenlandic","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_greenlandic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_greenlandic_1","displayName":"Enabled","description":null,"helpText":null}]},"e72a752fa615b0b8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache8_l_workflowfriendly466","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"e73984a861015e40":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc04_l_descriptioncolon252","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"e7d265b23ea4a733":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_notebookroot","displayName":"Notebook Root (User)","description":"To change to where new notebooks are defaulted, enter a path to a folder relative to your documents.","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_notebookroot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_notebookroot_1","displayName":"Enabled","description":null,"helpText":null}]},"e7f6afd07e29d01c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_calendaritemdefaults_l_showremindersxminutesbeforetheeventstarts","displayName":"Show reminders minutes before the event starts: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":null},"e7620289d66ce75b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_l_signaturewarning30","displayName":"Signature Warning (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_l_signaturewarning30_0","displayName":"Let user decide if they want to be warned","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_l_signaturewarning30_1","displayName":"Always warn about invalid signatures","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_signaturewarning_l_signaturewarning30_2","displayName":"Never warn about invalid signatures","description":null,"helpText":null}]},"e79c5b98242df65b":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy","displayName":"Remove file extensions blocked as Level 1 (User) (Deprecated)","description":"This policy setting controls which types of attachments (determined by file extension) Outlook prevents from being delivered. \r\n\r\nOutlook uses two levels of security to restrict users' access to files attached to e-mail messages or other items. Files with specific extensions can be categorized as Level 1 (users cannot view the file) or Level 2 (users can open the file after saving it to disk). Users can freely open files of types that are not categorized as Level 1 or Level 2. \r\n\r\nIf you enable this policy setting, you can specify the removal of file type extensions as that Outlook classifies as Level 1--that is, to be blocked from delivery--by entering them in the text field provided separated by semicolons. \r\n\r\nIf you disable or do not configure this policy setting, Outlook classifies a number of potentially harmful file types (such as those with .exe, .reg, and .vbs extensions) as Level 1 and blocks files with those extensions from being delivered. \r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"e704275c692bcb87":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_defaultmuteaudioinscreenrecorder","displayName":"Turn off audio recording for screen recording (User)","description":"This policy setting allows you to control the initial audio recording setting for a screen recording in PowerPoint. By default, audio is recorded during a screen recording.\r\n \r\nIf you enable this policy setting, audio isn’t recorded during a screen recording. But, the user can choose to turn on audio recording manually in the UI.\r\n \r\nIf you disable or don’t configure this policy setting, audio is recorded during a screen recording. The user can choose to turn off audio recording manually in the UI.","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_defaultmuteaudioinscreenrecorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_defaultmuteaudioinscreenrecorder_1","displayName":"Enabled","description":null,"helpText":null}]},"e77a7ed6490bc5fb":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionscustomizeribbon_l_displaydevelopertab","displayName":"Display Developer tab in the Ribbon (User)","description":"This policy setting controls whether the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you enable this policy setting, the Developer tab will be displayed in the Ribbon.\r\n\r\nIf you disable this policy setting, the Developer tab will not be displayed in the Ribbon.\r\n\r\nIf you do not configure this policy setting, the Developer tab will not be displayed in the Ribbon, but its visibility can be changed via a setting in the application Options dialog box.","helpText":"","infoUrls":[],"categoryId":"f66fb7e4-a968-4969-b627-f99aaad0dfc3","categoryName":"Customize Ribbon","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionscustomizeribbon_l_displaydevelopertab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_optionscustomizeribbon_l_displaydevelopertab_1","displayName":"Enabled","description":null,"helpText":null}]},"e77bc2495bc4fdc1":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_datecolon69","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"e7cb3e11c6ae44f5":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline","displayName":"Baseline for Earned Value calculations (User)","description":"Specifies the baseline that is used to measure project performance using earned value analysis.\r\n\r\nIf you enable this setting, Project will calculate earned value using the baseline you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"acbc106b-796a-4ba3-ab5f-c130530ad455","categoryName":"Earned Value options for Project1","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile~l_pjev_l_pjevbaseline_1","displayName":"Enabled","description":null,"helpText":null}]},"e74110f741db985e":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems2","displayName":"Disable commands (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. \r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"categoryId":"907fd656-2a80-4f34-8615-a3acb11a2b95","categoryName":"Custom","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems2_1","displayName":"Enabled","description":null,"helpText":null}]},"e7f614e5fbcf0a07":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save_l_turnoffcaddwgfunctionality","displayName":"Turn off CAD/DWG functionality (User)","description":"This policy setting allows you to turn off all entry points related to CAD/DWG files.\r\n\r\nIf you enable this policy setting, CAD/DWG functionality will be turned off.\r\n\r\nIf you disable or do not configure this policy setting, CAD/DWG functionality will be turned on.","helpText":"","infoUrls":[],"categoryId":"ad9610c6-d1c5-4c7a-9e74-58b810dd759d","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save_l_turnoffcaddwgfunctionality_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save_l_turnoffcaddwgfunctionality_1","displayName":"Enabled","description":null,"helpText":null}]},"e7bd389fd168d93b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc11_l_descriptioncolon50","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"e7432753376cec8d":{"id":"user_vendor_msft_policy_config_word16v13~policy~l_microsoftofficeword_l_showesignribbon","displayName":"Allow the use of SharePoint eSignature for Microsoft Word (User)","description":"This policy setting allows you to control whether users can request eSignatures directly from Word in tenants that have enabled Microsoft's native eSignature service.\r\n\r\nIf you enable this policy setting, users can request eSignatures from within Word. This policy setting applies only to subscription versions of Word.\r\n\r\nIf you disable this policy setting, users cannot request eSignatures from within Word.\r\n\r\nIf you don't configure this policy setting, users cannot request eSignatures from within Word.","helpText":"","infoUrls":[],"categoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","categoryName":"Microsoft Word 2016","options":[{"id":"user_vendor_msft_policy_config_word16v13~policy~l_microsoftofficeword_l_showesignribbon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v13~policy~l_microsoftofficeword_l_showesignribbon_1","displayName":"Enabled","description":null,"helpText":null}]},"e7af63a59f9d66ec":{"id":"user_vendor_msft_policy_config_word16v13~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_startupboostoption","displayName":"Allow Startup Boost feature (User)","description":"This policy setting configures the \"Startup Boost\" checkbox found under File tab | Options | General. Startup Boost improves Word's boot time by prewarming the app on user login.\r\n\r\nIf you enable or do not configure this policy, users will be able to use the Startup Boost feature. The Startup Boost checkbox will be enabled and checked by default.\r\n\r\nIf you disable this policy setting, the Startup Boost feature will not be available. The Startup Boost checkbox will be disabled and unchecked.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.\r\n ","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v13~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_startupboostoption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v13~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_startupboostoption_1","displayName":"Enabled","description":null,"helpText":null}]},"e777b60efd87817c":{"id":"vendor_msft_firewall_mdmstore_publicprofile_disablestealthmodeipsecsecuredpacketexemption","displayName":"Disable Stealth Mode Ipsec Secured Packet Exemption","description":"This value is an on/off switch. This option is ignored if DisableStealthMode is on. Otherwise, when this option is true, the firewall's stealth mode rules MUST NOT prevent the host computer from responding to unsolicited network traffic if that traffic is secured by IPsec. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used. For schema versions 0x0200, 0x0201, and 0x020A, this value is invalid and MUST NOT be used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_disablestealthmodeipsecsecuredpacketexemption_false","displayName":"False","description":"FALSE","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_disablestealthmodeipsecsecuredpacketexemption_true","displayName":"True","description":"TRUE","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e8.json b/public/intune-definitions/e8.json new file mode 100644 index 000000000000..ec0132ff2a70 --- /dev/null +++ b/public/intune-definitions/e8.json @@ -0,0 +1 @@ +{"e869d6c80b6871c2":{"id":"app_allowed_deniedbinaries_item_cdhash","displayName":"CD Hash","description":"The code signature code directory hash of the binary.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"e880b6af1a6c5879":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordminimumnonlettercharacters","displayName":"Number of non-letter characters required","description":"Enter the number of non-letters (anything other than letters in the alphabet) the work profile password must have, between 1 and 16 characters. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"e8b4dc89050217e6":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordsigninfailurecountbeforefactoryreset","displayName":"Number of sign-in failures before wiping device","description":"Enter the number of wrong passwords allowed before the work profile is wiped, from 4-11. If the value is blank, Intune doesn't change or update this setting. Available for corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (4-11)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"e895b96742df6f7a":{"id":"com.apple.applicationaccess_allowlockscreencontrolcenter","displayName":"Allow Lock Screen Control Center","description":"If false, prevents Control Center from appearing on the Lock screen. Available in iOS 7 and later. Also available for user enrollment.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowlockscreencontrolcenter_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowlockscreencontrolcenter_true","displayName":"True","description":null,"helpText":null}]},"e89c7bcc7cf12f85":{"id":"com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses","displayName":"Force Classroom Request Permission To Leave Classes","description":"If true, a student enrolled in an unmanaged course through Classroom requests permission from the teacher when attempting to leave the course. Requires a supervised device. Available in iOS 11.3 and later, and macOS 10.14.4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses_true","displayName":"True","description":null,"helpText":null}]},"e8fbbd92279c0404":{"id":"com.apple.extensiblesso_screenlockedbehavior","displayName":"Screen Locked Behavior","description":"When set to Do Not Handle, the request continues without SSO. Available in iOS 15 and later and macOS 12 and later.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":{"id":"com.apple.extensiblesso_screenlockedbehavior_0","displayName":"Do Not Handle","description":null,"helpText":null}},"e8b29bc503493cbd":{"id":"com.apple.managedclient.preferences_defaultpopupssetting","displayName":"Default pop-up window setting","description":"Set whether websites can show pop-up windows. You can allow them on all websites (1) or block them on all sites (2).\n\nIf you don't configure this policy, pop-up windows are blocked by default, and users can change this setting.\n\n* 1 = Allow all sites to show pop-ups\n\n* 2 = Don't allow any site to show pop-up windows","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultpopupssetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultpopupssetting_0","displayName":"Allow all sites to show pop-ups","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultpopupssetting_1","displayName":"Do not allow any site to show popups","description":null,"helpText":null}]},"e82971d06b1df1b8":{"id":"com.apple.managedclient.preferences_enabledeprecatedwebplatformfeatures","displayName":"Re-enable deprecated web platform features for a limited time","description":"Specify a list of deprecated web platform features to temporarily re-enable.\n\nThis policy lets you re-enable deprecated web platform features for a limited time. Features are identified by a string tag.\n\nIf you don't configure this policy, if the list is empty, or if a feature doesn't match one of the supported string tags, all deprecated web platform features remain disabled.\n\nWhile the policy itself is supported on the above platforms, the feature it's enabling might not be available on all of those platforms. Not all deprecated Web Platform features can be re-enabled. Only those explicitly listed below can be re-enabled, and only for a limited period of time, which differs per feature. You can review the intent behind the Web Platform feature changes at https://bit.ly/blinkintents.\n\nThe general format of the string tag is [DeprecatedFeatureName]_EffectiveUntil[yyyymmdd].\n\n* \"ExampleDeprecatedFeature_EffectiveUntil20080902\" = Enable ExampleDeprecatedFeature API through 2008/09/02","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enabledeprecatedwebplatformfeatures"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"e8a547885df1f12e":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_reduce processor speed","displayName":"Reduce Processor Speed","description":"May not be available on all systems.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_reduce processor speed_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_reduce processor speed_1","displayName":"True","description":null,"helpText":null}]},"e8fa5982460c93fd":{"id":"com.apple.universalaccess_whiteonblack","displayName":"White On Black","description":"If true, enables Invert Colors in Display Accommodations.","helpText":null,"infoUrls":[],"categoryId":"c00d6468-cac3-429c-ada5-ba3adf4982a8","categoryName":"Accessibility","options":[{"id":"com.apple.universalaccess_whiteonblack_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.universalaccess_whiteonblack_true","displayName":"True","description":null,"helpText":null}]},"e8f1603a759dffa6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.exemptsmartscreendownloadwarnings","displayName":"Disable SmartScreen AppRep based warnings for specified file types on specified domains","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that are exempted from SmartScreen AppRep warnings. For example, if the `vbe` extension is associated with \"contoso.com,\" users can't see a SmartScreen AppRep warning when downloading `vbe` files from \"contoso.com.\" They can, however, see a download warning when downloading `vbe` files from \"fabrikam.com.\"\n\nFiles with file type extensions specified for domains identified by this policy are still subject to file type extension-based security warnings and mixed-content download warnings.\n\nIf you disable this policy or don't configure it, files that trigger SmartScreen AppRep download warnings show warnings to the user.\n\nIf you enable this policy:\n\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\n* The file type extension entered must be in lower-cased ASCII. The leading separator shouldn't be included when listing the file type extension; so, `vbe` should be used instead of `.vbe`.\n\nExample:\n\nThe following example prevents SmartScreen AppRep warnings on msi, exe, and vbe extensions for *.contoso.com domains. It might show the user a SmartScreen AppRep warning on any other domain for exe and msi files but not for vbe files.\n\n[\n { \"file_extension\": \"msi\", \"domains\": [\"contoso.com\"] },\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\n { \"file_extension\": \"vbe\", \"domains\": [\"*\"] }\n]\n\nNote: While the preceding example shows the suppression of SmartScreen AppRep download warnings for `vbe` files for all domains, applying suppression of such warnings for all domains isn't recommended due to security concerns. The ability to suppress warnings for all domains is shown in the example merely to demonstrate the ability to do so.","helpText":null,"infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":null},"e8b8abae9b8f7bfe":{"id":"device_vendor_msft_bitlocker_removabledrivesconfigurebde_rdvdisablebde_name","displayName":"Allow users to suspend and decrypt BitLocker protection on removable data drives","description":"","helpText":"","infoUrls":[],"categoryId":"8e6b8d0c-faf6-41e6-8e31-4389a5470caf","categoryName":"Removable Data Drives","options":[{"id":"device_vendor_msft_bitlocker_removabledrivesconfigurebde_rdvdisablebde_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_removabledrivesconfigurebde_rdvdisablebde_name_1","displayName":"True","description":null,"helpText":null}]},"e8961e834e0d5d53":{"id":"device_vendor_msft_policy_config_admx_deviceinstallation_deviceinstall_policy_reboottime_deviceinstall_policy_reboottime_time","displayName":"Reboot Timeout (in seconds)","description":null,"helpText":"","infoUrls":[],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"e8b5488465acb451":{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_2_dwmdefaultcolorizationcolorgreen","displayName":"Green","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"e8f5d60d22bd3d18":{"id":"device_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_2_dwmdefaultcolorizationcolorred","displayName":"Red","description":null,"helpText":"","infoUrls":[],"categoryId":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","categoryName":"Window Frame Coloring","options":null},"e80ce04b59ea1fcb":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_quickadimpin","displayName":"Turn on economical application of administratively assigned Offline Files","description":"This policy setting allows you to turn on economical application of administratively assigned Offline Files.\r\n\r\nIf you enable or do not configure this policy setting, only new files and folders in administratively assigned folders are synchronized at logon. Files and folders that are already available offline are skipped and are synchronized later.\r\n\r\nIf you disable this policy setting, all administratively assigned folders are synchronized at logon.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-quickadimpin"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_quickadimpin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_quickadimpin_1","displayName":"Enabled","description":null,"helpText":null}]},"e8afd205d751a302":{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_rpcextendederrorinformationlist","displayName":"Propagation of extended error information:","description":null,"helpText":"","infoUrls":[],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":[{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_rpcextendederrorinformationlist_0","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_rpcextendederrorinformationlist_1","displayName":"On with Exceptions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_rpcextendederrorinformationlist_2","displayName":"Off with Exceptions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_rpcextendederrorinformationlist_3","displayName":"On","description":null,"helpText":null}]},"e8903d559fec1fed":{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_2","displayName":"Include rarely used Chinese, Kanji, or Hanja characters","description":"Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only to the use of the Microsoft recognizers for Chinese (Simplified), Chinese (Traditional), Japanese, and Korean. This setting appears in Input Panel Options (in Windows 7 and Windows Vista only) only when these input languages or keyboards are installed. \r\n\r\nTouch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista) enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, rarely used Chinese, Kanji, and Hanja characters will be included in recognition results when handwriting is converted to typed text. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, rarely used Chinese, Kanji, and Hanja characters will not be included in recognition results when handwriting is converted to typed text. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, rarely used Chinese, Kanji, and Hanja characters will not be included in recognition results when handwriting is converted to typed text. Users will be able to configure this setting on the Ink to text conversion tab in Input Panel Options (in Windows 7 and Windows Vista).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-rarechar-2"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_2_1","displayName":"Enabled","description":null,"helpText":null}]},"e8645e924deaf820":{"id":"device_vendor_msft_policy_config_admx_userprofiles_profileerroraction","displayName":"Do not log users on with temporary profiles","description":"This policy setting will automatically log off a user when Windows cannot load their profile. \r\n\r\nIf Windows cannot access the user profile folder or the profile contains errors that prevent it from loading, Windows logs on the user with a temporary profile. This policy setting allows the administrator to disable this behavior, preventing Windows from loggin on the user with a temporary profile.\r\n\r\nIf you enable this policy setting, Windows will not log on a user with a temporary profile. Windows logs the user off if their profile cannot be loaded.\r\n\r\nIf you disable this policy setting or do not configure it, Windows logs on the user with a temporary profile when Windows cannot load their user profile.\r\n\r\nAlso, see the \"Delete cached copies of roaming profiles\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-profileerroraction"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_profileerroraction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_profileerroraction_1","displayName":"Enabled","description":null,"helpText":null}]},"e8f8215a1a2735ff":{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilesystem","displayName":"Object Access Audit File System","description":"This policy setting allows you to audit user attempts to access file system objects. A security audit event is generated only for objects that have system access control lists (SACL) specified, and only if the type of access requested, such as Write, Read, or Modify and the account making the request match the settings in the SACL. For more information about enabling object access auditing, see https://go.microsoft.com/fwlink/?LinkId=122083. If you configure this policy setting, an audit event is generated each time an account accesses a file system object with a matching SACL. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when an account accesses a file system object with a matching SACL. Note: You can set a SACL on a file system object using the Security tab in that object's Properties dialog box.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#objectaccess_auditfilesystem"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilesystem_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilesystem_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilesystem_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_objectaccess_auditfilesystem_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"e875b2d642e05931":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled","displayName":"Enable IPv6 reachability check override","description":"Setting the policy to true overrides the IPv6 reachability check. This means that the\r\nsystem will always query AAAA records when resolving host names. It applies to\r\nall users and interfaces on the device.\r\n\r\nSetting the policy to false or leaving it unset does not overrides the IPv6 reachability check.\r\nThe system only queries AAAA records when it is reachable to a global IPv6 host.","helpText":"","infoUrls":[],"categoryId":"fa2722a8-dcfd-4e14-a429-2b0041642c77","categoryName":"Network settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e8ba72b14ba10316":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"e88556e7704b7a69":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400","displayName":"Allow active scripting","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_1","displayName":"Prompt","description":null,"helpText":null}]},"e89f795290b27f44":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled","displayName":"Enable search suggestions","description":"Enables web search suggestions in Microsoft Edge's Address Bar and Auto-Suggest List and prevents users from changing this policy.\r\n\r\nIf you enable this policy, web search suggestions are used.\r\n\r\nIf you disable this policy, web search suggestions are never used, however local history and local favorites suggestions still appear. If you disable this policy, neither the typed characters, nor the URLs visited will be included in telemetry to Microsoft.\r\n\r\nIf this policy is left not set, search suggestions are enabled but the user can change that.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e899f56cf484c5a4":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_proxyserver","displayName":"Configure address or URL of proxy server (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"e8bbef877ccd1d25":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page","description":"Control if users can turn on Developer Mode on edge://extensions.\r\n\r\nIf the policy isn't set, users can turn on developer mode on the extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\r\nIf the policy is set to Allow (0), users can turn on developer mode on the extensions page.\r\nIf the policy is set to Disallow (1), users cannot turn on developer mode on the extensions page.\r\n\r\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.\r\n\r\nPolicy options mapping:\r\n\r\n* Allow (0) = Allow the usage of developer mode on extensions page\r\n\r\n* Disallow (1) = Do not allow the usage of developer mode on extensions page\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},"e86a1a99b13eb0ca":{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls","displayName":"Block idle detection on these sites","description":"Allows you to specify a list of URL patterns for sites that are not allowed to use the Idle Detection API.\r\n\r\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported.\r\n\r\nFor detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nIf you do not configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e88e6ad7e070d98d":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare","displayName":"Configure the Share experience (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare_0","displayName":"Allow using the Share experience","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare_1","displayName":"Don't allow using the Share experience","description":null,"helpText":null}]},"e86f9596fc6ef004":{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_0","displayName":"Automatically","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_1","displayName":"With device password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_2","displayName":"With custom primary password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_3","displayName":"Autofill off","description":null,"helpText":null}]},"e8d21ef5e48e6be0":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_exprwdexe94","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_exprwdexe94_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_exprwdexe94_1","displayName":"True","description":null,"helpText":null}]},"e8a74ebb351ea2ea":{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine","displayName":"Show the option for the Office Update Channel experience","description":"This policy setting controls whether the option for Update Channel experience is shown under File > Account on an Office app, such as Word.\r\n\r\nBy showing this option, a user can choose to receive Office updates from the Office update channels that the administrator chooses to expose to the users.\r\n\r\nIf you enable this policy setting, the option for Update Channel experience is shown under File > Account.\r\n\r\nNote: This policy supersedes the “Show the option for Office Insider” in cases where both policies are configured.\r\n\r\nNote: If you enable this policy setting, you shouldn’t enable and configure the “Target Version”, “Update Channel” or the “Update Path” policy setting under Computer Configuration\\Policies\\Administrative Templates\\Microsoft Office 2016 (Machine)\\Updates. If you do, those policy settings will take precedence, blocking user access to the Office Update Channel experience.\r\n\r\nIf you disable this policy setting, the option for Office Channel experience is not shown under File > Account.","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_1","displayName":"Enabled","description":null,"helpText":null}]},"e8d64f1260d7e862":{"id":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery","displayName":"Turn off the display (on battery)","description":"This policy setting allows you to specify the period of inactivity before Windows turns off the display.\n\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the display.\n\nIf you disable or do not configure this policy setting, users control this setting.\n\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the display from turning off. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-displayofftimeoutonbattery"],"categoryId":"01da0c26-af30-4eb2-a899-7d5e7ecb9738","categoryName":"Video and Display Settings","options":[{"id":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},"e82c32c1f566070a":{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_l_listofexternalconvertersppt_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"686ae3dd-a663-4484-854e-8f8d578fe3b8","categoryName":"Converters","options":null},"e8c39932c12ec039":{"id":"device_vendor_msft_policy_config_update_deferupgradeperiod","displayName":"Defer Upgrade Period","description":"NoteSince this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use DeferUpgradePeriod for Windows 10, version 1511 devices. Allows IT Admins to specify additional upgrade delays for up to 8 months. Supported values are 0-8, which refers to the number of months to defer upgrades. If the Specify intranet Microsoft update service location policy is enabled, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. If the Allow Telemetry policy is enabled and the Options value is set to 0, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferupgradeperiod"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"e8ccb4cc9ce76893":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},"e8bb6683e353a704":{"id":"keyboardsettings_keyboardsettings","displayName":"com.apple.configuration.keyboard.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":null},"e870e41e96288899":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disabledel","displayName":"Prohibit deleting items (User)","description":"Prevents users from deleting Web content from their Active Desktop.\r\n\r\nThis setting removes the Delete button from the Web tab in Display in Control Panel. As a result, users can temporarily remove, but not delete, Web content from their Active Desktop.\r\n\r\nThis setting does not prevent users from adding Web content to their Active Desktop.\r\n\r\nAlso, see the \"Prohibit closing items\" and \"Disable all items\" settings.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-disabledel"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disabledel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disabledel_1","displayName":"Enabled","description":null,"helpText":null}]},"e8563e9f34fec05f":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindesktop","displayName":"Desktop (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindesktop_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindesktop_1","displayName":"True","description":null,"helpText":null}]},"e8292faede984da0":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinlinks","displayName":"Links (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinlinks_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinlinks_1","displayName":"True","description":null,"helpText":null}]},"e80c5df2f616e1c7":{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1_transferrateop1","displayName":"Connection speed (Kbps): (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"e8308ac121b98768":{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescanetwork","displayName":"Remove the networking icon (User)","description":"This policy setting allows you to remove the networking icon from the system control area.\r\n\r\nIf you enable this policy setting, the networking icon is not displayed in the system notification area.\r\n\r\nIf you disable or do not configure this policy setting, the networking icon is displayed in the system notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-hidescanetwork"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescanetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescanetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"e8cc98d66fda998d":{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_sizemessage","displayName":"Custom Message (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":null},"e8909ee6f6d523d6":{"id":"user_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly","displayName":"Require Private Store Only (User)","description":"Allows disabling of the retail catalog and only enables the Private store. Most restricted value is 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#requireprivatestoreonly"],"categoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","categoryName":"Microsoft App Store","options":[{"id":"user_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly_0","displayName":"Allow both public and Private store.","description":"Allow both public and Private store.","helpText":null},{"id":"user_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly_1","displayName":"Only Private store is enabled.","description":"Only Private store is enabled.","helpText":null}]},"e896792c82952910":{"id":"user_vendor_msft_policy_config_browser_allowbrowser","displayName":"Allow Browser (User)","description":"This policy is deprecated","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowbrowser"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowbrowser_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowbrowser_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"e8a8b5f36cfb98c6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting","displayName":"Default popups setting (User)","description":"Setting the policy to 1 lets websites display pop-ups. Setting the policy to 2 denies pop-ups.\r\n\r\nLeaving it unset means BlockPopups applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"e894c0e14150b729":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls","displayName":"Block Local Fonts permission on these sites (User)","description":"Sets a list of site url patterns that specify sites which will automatically deny the local fonts permission. This will limit the ability of sites to see information about local fonts.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultLocalFontsSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"e801ee2852211bbd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled","displayName":"Choose whether the Privacy Sandbox prompt can be shown to your users (User)","description":"A policy to control whether your users see the Privacy Sandbox prompt.\r\nThe prompt is a user-blocking flow which informs your users of the Privacy Sandbox settings. See https://privacysandbox.com for details about Chrome’s effort to deprecate third-party cookies.\r\n\r\nIf you set this policy to Disabled, then Google Chrome won’t show the Privacy Sandbox prompt.\r\nIf you set this policy to Enabled or keep it unset, then Google Chrome determines whether the Privacy Sandbox prompt can be shown or not and then show it if possible.\r\n\r\nIf any of the following policies are set, it’s required to set this policy to Disabled:\r\nPrivacySandboxAdTopicsEnabled\r\nPrivacySandboxSiteEnabledAdsEnabled\r\nPrivacySandboxAdMeasurementEnabled","helpText":"","infoUrls":[],"categoryId":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","categoryName":"Privacy Sandbox policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e834c9b9919e82be":{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode","displayName":"Turn on Internet Explorer Standards Mode for local intranet (User)","description":"This policy setting controls how Internet Explorer displays local intranet content. Intranet content is defined as any webpage that belongs to the local intranet security zone.\n\nIf you enable this policy setting, Internet Explorer uses the current user agent string for local intranet content. Additionally, all local intranet Standards Mode pages appear in the Standards Mode available with the latest version of Internet Explorer. The user cannot change this behavior through the Compatibility View Settings dialog box.\n\nIf you disable this policy setting, Internet Explorer uses an Internet Explorer 7 user agent string (with an additional string appended) for local intranet content. Additionally, all local intranet Standards Mode pages appear in Internet Explorer 7 Standards Mode. The user cannot change this behavior through the Compatibility View Settings dialog box.\n\nIf you do not configure this policy setting, Internet Explorer uses an Internet Explorer 7 user agent string (with an additional string appended) for local intranet content. Additionally, all local intranet Standards Mode pages appear in Internet Explorer 7 Standards Mode. This option results in the greatest compatibility with existing webpages, but newer content written to common Internet standards may be displayed incorrectly. This option matches the default behavior of Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetexplorerstandardsmode"],"categoryId":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","categoryName":"Compatibility View","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_1","displayName":"Enabled","description":null,"helpText":null}]},"e82ae6ccea6bc977":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed","displayName":"Allow or block video capture (User)","description":"Control whether sites can capture video.\r\n\r\nIf enabled or not configured (default), the user will be asked about video capture access for all sites except those with URLs configured in the 'VideoCaptureAllowedUrls' (Sites that can access video capture devices without requesting permission) policy list, which will be granted access without prompting.\r\n\r\nIf you disable this policy, the user isn't prompted, and video capture is only available to URLs configured in 'VideoCaptureAllowedUrls' policy.\r\n\r\nThis policy affects all types of video inputs, not only the built-in camera.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"e8ba3eabcf805714":{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay","displayName":"Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer (User)","description":"Lets you display zoom in IE Mode tabs similar to how it was displayed in Internet Explorer, where the DPI scale of the display is factored in.\r\n\r\nFor example, if you have a page zoomed to 200% on a 100 DPI scale display and you change the display to 150 DPI, Microsoft Edge would still display the zoom as 200%. However, Internet Explorer factors in the DPI scale and displays 300%.\r\n\r\nIf you enable this policy, zoom values will be displayed with the DPI scale included for IE Mode tabs.\r\n\r\nIf you disable or don't configure this policy, zoom values will be displayed without DPI scale included for IE Mode tabs","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_1","displayName":"Enabled","description":null,"helpText":null}]},"e8f167b8a740384b":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient","displayName":"Forces Microsoft Edge to use its built-in WNS push client to connect to the Windows Push Notification Service. (User)","description":"In some environments, the Windows OS client can't connect to the Windows Push Notification Service (WNS). For these environments, you can use the Microsoft Edge built-in WNS push client, which may be able to connect successfully.\r\n\r\nIf enabled, Microsoft Edge will use its built-in WNS push client to connect to WNS.\r\n\r\nIf disabled or not configured, Microsoft Edge will use the Windows OS client to connect to the Windows Push Notification Service. This is the default setting.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_1","displayName":"Enabled","description":null,"helpText":null}]},"e83e4ef3513de299":{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout","displayName":"Specifies whether to opt out of Local Network Access restrictions (User)","description":"This policy allows for opting out of restrictions on requests to local network endpoints.\r\n\r\nIf you enable this policy, Local Network Access requests will only display warnings in Edge DevTools when Local Network Access checks fail.\r\n\r\nIf you disable or don't configure this policy, Local Network Access requests will follow the default handling behavior.\r\n\r\nFor more information about Local Network Access restrictions, see Local Network Access .\r\n\r\nThis enterprise policy is temporary and will be removed after Microsoft Edge version 146.\r\n\r\nTo allow specific URL patterns that should automatically be granted Local Network Access permission, use the LocalNetworkAccessAllowedForUrls policy.\r\n\r\nNote: If the LocalNetworkAccessRestrictionsEnabled policy is enabled, it takes precedence over this policy.","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout_1","displayName":"Enabled","description":null,"helpText":null}]},"e89b76b7e6d2fa4a":{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist","displayName":"Block smart actions for a list of services (User)","description":"List specific services, such as PDFs, that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\r\n\r\nIf you enable the policy: :\r\n - The smart action in the mini and full context menu will be disabled for all profiles for services that match the given list.\r\n - Users will not see the smart action in the mini and full context menu on text selection for services that match the given list.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be disabled for services that match the given list.\r\n\r\nIf you disable or don't configure this policy:\r\n - The smart action in the mini and full context menu will be enabled for all profiles.\r\n - Users will see the smart action in the mini and full context menu on text selection.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nsmart_actions_pdf","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"e87ad2e9d1a0bde8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser","displayName":"Disable Microsoft Save As PDF and XPS add-ins (User)","description":"Allows the user or administrator to specify which of the installed Microsoft PDF and XPS add-ins are available. \r\n\r\nWhen this setting is not configured, installed Microsoft PDF and XPS add-ins are visible to users. \r\n\r\nDefault: same as not configured. \r\n\r\nDisable XPS: Hides and disables the Microsoft Save As XPS add-in. \r\n\r\nDisable PDF: Hides and disables the Microsoft Save As PDF add-in. \r\n\r\nDisable XPS and PDF: Hides and disables both the Microsoft Save As PDF and Save As XPS add-ins.","helpText":"","infoUrls":[],"categoryId":"5b1be2c5-9939-4b2e-b29b-b22069455c90","categoryName":"Microsoft Save As PDF and XPS add-ins","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_pdfandxps_l_specifytypesoffixedformatoptionsavailabletotheuser_1","displayName":"Enabled","description":null,"helpText":null}]},"e830b86f535e6549":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_l_allowsubfolders293","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_l_allowsubfolders293_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc14_l_allowsubfolders293_1","displayName":"True","description":null,"helpText":null}]},"e8ddf34a343b1dfa":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_signing_l_ekufiltering_l_empty412","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"23c09e06-5bee-4b20-a391-36549bf0f620","categoryName":"Signing","options":null},"e8160db86d18fb5b":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_noteflags_l_copyitemswhenmovingthem","displayName":"Copy items when moving them (User)","description":"This policy setting allows you to configure tagged notes.\r\n\r\nIf you enable or do not configure this policy setting, the option \"Leave original tagged notes unchanged\" will be checked.\r\n\r\nIf you disable this policy setting, the option \"Show original tagged notes as dimmed\" will be checked.","helpText":"","infoUrls":[],"categoryId":"4a7b0e92-ba43-46aa-96e8-c5839dbcb524","categoryName":"Note Flags","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_noteflags_l_copyitemswhenmovingthem_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_noteflags_l_copyitemswhenmovingthem_1","displayName":"Enabled","description":null,"helpText":null}]},"e8ae8ba19beca935":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_archiveignorelastmodifiedtime","displayName":"Change the criteria that Outlook uses to archive different item types (User)","description":"If you enable this policy setting, Outlook ignores the last modified date and archives items based on a date that is specific for the item type, as follows:\r\n\r\n-Email message: The received date.\r\n-Calendar item: The actual date that an appointment, event, or meeting is scheduled for.\r\n-Task: The completion date. Tasks that are not marked as completed are not archived. Tasks that are assigned to other users are archived only if the status is completed. \r\n-Note: The last modified date and time.\r\n-Journal entry: The date when the journal entry is created.\r\n-Contact: Not archived.\r\n\r\nIf you disable or do not configure this policy setting, Outlook archives different items based on the item type, as follows:\r\n\r\n-Email message: The received date or the last modified date and time, whichever is later. \r\n-Calendar item: The last modified date and time or the actual date that an appointment, event, or meeting is scheduled for, whichever is later. \r\n-Task: The completion date or the last modified date and time, whichever is later. Tasks that are not marked as completed are not archived. Tasks that are assigned to other users are archived only if the status is completed. \r\n-Note: The last modified date and time.\r\n-Journal entry: The date when the journal entry is created or the last modified date and time, whichever is later.\r\n-Contact: Not archived.","helpText":"","infoUrls":[],"categoryId":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","categoryName":"AutoArchive","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_archiveignorelastmodifiedtime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_autoarchive_l_archiveignorelastmodifiedtime_1","displayName":"Enabled","description":null,"helpText":null}]},"e8fc5760f951a647":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear","displayName":"Specify ScreenTips to appear (User)","description":"This policy setting allows you to specify what ScreenTips appear in Visio to help you identify and use various features, including drawing window rulers, control handles, and ShapeSheet cells.\r\n\r\nIf you enable this policy setting, you may specify one or more other ScreenTips that will appear for:\r\n- Drawing\r\n- Dialogs\r\n- Rulers\r\n- ShapeSheet\r\n\r\nIf you disable or do not configure this policy setting, no ScreenTips will appear for the options listed above.","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_1","displayName":"Enabled","description":null,"helpText":null}]},"e83814ea926f06e8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_descriptioncolon94","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"e89d6e517d801ae0":{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablelogsuccessconnections","displayName":"Enable Log Success Connections","description":"This value is used as an on/off switch. If this value is on, the firewall logs all successful inbound connections. The merge law for this option is to let \"on\" values win.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablelogsuccessconnections_false","displayName":"Disable Logging Of Successful Connections","description":"Disable Logging Of Successful Connections","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_enablelogsuccessconnections_true","displayName":"Enable Logging Of Successful Connections","description":"Enable Logging Of Successful Connections","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/e9.json b/public/intune-definitions/e9.json new file mode 100644 index 000000000000..c8d85f2a3c42 --- /dev/null +++ b/public/intune-definitions/e9.json @@ -0,0 +1 @@ +{"e976443d26a6166c":{"id":"com.apple.applicationaccess_allowdefaultmessagingappmodification","displayName":"Allow Default Messaging App Modification","description":"If false, disables default messaging app preference modification. The MDM Settings command to set the default messaging app preference will still work when this is applied.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowdefaultmessagingappmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowdefaultmessagingappmodification_true","displayName":"True","description":null,"helpText":null}]},"e99e3fe2d26d6594":{"id":"com.apple.applicationaccess_allowfilesharingmodification","displayName":"Allow File Sharing Modification","description":"If 'false', prevents modifying File Sharing setting in System Settings.\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfilesharingmodification_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfilesharingmodification_true","displayName":"True","description":null,"helpText":null}]},"e9c9b4d974cc7e76":{"id":"com.apple.applicationaccess_ratingtvshowsjp","displayName":"Rating TV Shows - Japan","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsjp_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsjp_1","displayName":"Explicit Allowed","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsjp_2","displayName":"All","description":null,"helpText":null}]},"e9716fc61a5d2c20":{"id":"com.apple.dock_launchanim-immutable","displayName":"Launch Animation Immutable","description":"If true, locks \"Animate opening applications.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_launchanim-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_launchanim-immutable_true","displayName":"True","description":null,"helpText":null}]},"e92b8ca5f118c120":{"id":"com.apple.familycontrols.contentfilter_filterblacklist","displayName":"Filter Blocklist (Deprecated)","description":"The array of URLs that defines a deny list. When Restrict Web and Use Content Filter are enabled, no URLs in the deny list are available to the user.","helpText":null,"infoUrls":[],"categoryId":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","categoryName":"Parental Controls Content Filter","options":null},"e9e80c49a463e57d":{"id":"com.apple.managedclient.preferences_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page","description":"Control if users can turn on Developer Mode on edge://extensions.\n\nIf the policy isn't set, users can turn on developer mode on the extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\nIf the policy is set to Allow (0), users can turn on developer mode on the extensions page.\nIf the policy is set to Disallow (1), users cannot turn on developer mode on the extensions page.\n\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.\n\nPolicy options mapping:\n\n* Allow (0) = Allow the usage of developer mode on extensions page\n\n* Disallow (1) = Do not allow the usage of developer mode on extensions page\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#extensiondevelopermodesettings"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_extensiondevelopermodesettings_0","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_extensiondevelopermodesettings_1","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},"e993fb6cfe68d24c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsurfgame","displayName":"Allow surf game","description":"If you disable this policy, users won't be able to play the surf game when the device is offline or if the user navigates to edge://surf.\n\nIf you enable or don't configure this policy, users can play the surf game.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsurfgame_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.allowsurfgame_true","displayName":"Enabled","description":null,"helpText":null}]},"e945ece0942b43fa":{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended","displayName":"Configure Automatic HTTPS (Obsolete) (users can override)","description":"This policy lets you manage settings for \"AutomaticHttpsDefault\", which switches connections from HTTP to HTTPS.\n\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\n\nMicrosoft Edge attempts to upgrade some navigations from HTTP to HTTPS, when possible. This policy can be used to disable this behavior. If set to \"AlwaysUpgrade\" or left unset, this feature is enabled by default.\n\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\n\nThis policy is obsolete, and is replaced with the policy \"HttpsUpgradesEnabled\".\n\nPolicy options mapping:\n\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\n\n* UpgradeCapableDomains (1) = (Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\n\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended_disableautomatichttps","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended_upgradecapabledomains","displayName":"(Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended_alwaysupgrade","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},"e9f328a6c94fb106":{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit","displayName":"Clear browsing data when Microsoft Edge closes","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\n\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured \"DefaultCookiesSetting\"\n\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\n\nIf you enable this policy, don't configure the \"AllowDeletingBrowserHistory\" or the \"ClearCachedImagesAndFilesOnExit\" policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured \"AllowDeletingBrowserHistory\" or \"ClearCachedImagesAndFilesOnExit\".\n\nTo exclude cookies from being deleted on exit, configure the \"SaveCookiesOnExit\" policy.\nTo exclude passwords from being deleted on exit, configure the \"PasswordDeleteOnBrowserCloseEnabled\" policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_true","displayName":"Enabled","description":null,"helpText":null}]},"e9bec20488048504":{"id":"com.microsoft.edge.mamedgeappconfigsettings.editfavoritesenabled","displayName":"Allows users to edit favorites","description":"Enable this policy to let users add, remove, and modify favorites. This is the default behavior if you don't configure the policy.\n\nDisable this policy to stop users from adding, removing, or modifying favorites. They can still use existing favorites.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.editfavoritesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.editfavoritesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"e9b7a9766ddf1dc6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.scarewareblockerallowlistdomains","displayName":"Configure the list of domains where Microsoft Edge Scareware blockers don't run","description":"This policy configures the list of trusted domains for Microsoft Edge Scareware blocker. When a website's source URL matches any domain in this list, Microsoft Edge Scareware blocker doesn't analyze that site.\n\nThis policy takes effect only if the ScarewareBlockerProtectionEnabled policy is enabled.\n\nIf you enable this policy, Microsoft Edge Scareware blocker trusts the specified domains.\n\nIf you disable or don't configure this policy, Microsoft Edge Scareware blocker analyzes all sites.","helpText":null,"infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":null},"e95ffc376ec4203e":{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentials","displayName":"Allow delegating saved credentials","description":"This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection).\r\n\r\nThis policy setting applies when server authentication was achieved via a trusted X509 certificate or Kerberos.\r\n\r\nIf you enable this policy setting, you can specify the servers to which the user's saved credentials can be delegated (saved credentials are those that you elect to save/remember using the Windows credential manager).\r\n\r\nIf you do not configure (by default) this policy setting, after proper mutual authentication, delegation of saved credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*).\r\n\r\nIf you disable this policy setting, delegation of saved credentials is not permitted to any machine.\r\n\r\nNote: The \"Allow delegating saved credentials\" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN.\r\n\r\nFor Example:\r\nTERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine\r\nTERMSRV/* Remote Desktop Session Host running on all machines.\r\nTERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-allowsavedcredentials"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowsavedcredentials_1","displayName":"Enabled","description":null,"helpText":null}]},"e941570d520f0457":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornonedef_list","displayName":"Default:","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornonedef_list_1","displayName":"Report all application errors","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_allornonedef_pch_allornonedef_list_0","displayName":"Do not report any application errors","description":null,"helpText":null}]},"e98455e77f1cdb0a":{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_hibernate","displayName":"Allow hibernate (S4) when starting from a Windows To Go workspace","description":"\r\n\r\nSpecifies whether the PC can use the hibernation sleep state (S4) when started from a Windows To Go workspace.\r\n\r\nIf you enable this setting, Windows, when started from a Windows To Go workspace, can hibernate the PC.\r\n\r\nIf you disable or don't configure this setting, Windows, when started from a Windows To Go workspace, can't hibernate the PC.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-externalboot#admx-externalboot-portableoperatingsystem-hibernate"],"categoryId":"68a3b82d-d1f4-422d-bfee-2168ec260ad7","categoryName":"Portable Operating System","options":[{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_hibernate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_externalboot_portableoperatingsystem_hibernate_1","displayName":"Enabled","description":null,"helpText":null}]},"e9bc0bc74be4d299":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_allowx-forestpolicy-and-rup","displayName":"Allow cross-forest user policy and roaming user profiles","description":"This policy setting allows user-based policy processing, roaming user profiles, and user object logon scripts for interactive logons across forests.\r\n\r\nThis policy setting affects all user accounts that interactively log on to a computer in a different forest when a trust across forests or a two-way forest trust exists.\r\n\r\nIf you do not configure this policy setting:\r\n- No user-based policy settings are applied from the user's forest.\r\n- Users do not receive their roaming profiles; they receive a local profile on the computer from the local forest. A warning message appears to the user, and an event log message (1529) is posted.\r\n- Loopback Group Policy processing is applied, using the Group Policy Objects (GPOs) that are scoped to the computer.\r\n- An event log message (1109) is posted, stating that loopback was invoked in Replace mode.\r\n\r\nIf you enable this policy setting, the behavior is exactly the same as in Windows 2000: user policy is applied, and a roaming user profile is allowed from the trusted forest.\r\n\r\nIf you disable this policy setting, the behavior is the same as if it is not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-allowx-forestpolicy-and-rup"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_allowx-forestpolicy-and-rup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_allowx-forestpolicy-and-rup_1","displayName":"Enabled","description":null,"helpText":null}]},"e97e0a0eca5e3489":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_avsignaturedue_signatureupdate_avsignaturedue","displayName":"Define the number of days before virus security intelligence is considered out of date","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":null},"e94f33991307eee4":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_sitename_netlogon_sitenamelabel","displayName":"Site:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"e9f9d94da4d1b9b6":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypenonconforming_qospriorityvalue","displayName":"Priority value","description":null,"helpText":"","infoUrls":[],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":null},"e9df70dc29ff777a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions","displayName":"Enable network prediction (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions_2","displayName":"Do not predict network actions on any network connection","description":null,"helpText":null}]},"e903be92a940a7a5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc","displayName":"Allow cookies on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"e9764b3622e58608":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses","displayName":"Block all Office applications from creating child processes","description":"This rule blocks Office apps from creating child processes. This includes Word, Excel, PowerPoint, OneNote, and Access.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_warn","displayName":"Warn","description":null,"helpText":null}]},"e9c76e72eb16b1c0":{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids_deviceinstall_ids_allow_list","displayName":"Allowed device IDs","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"e93baaedafdba279":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzonejavapermissions"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"e9ea652ce7c22e94":{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"e95c9f12939de5ed":{"id":"device_vendor_msft_policy_config_kioskbrowser_restartonidletime","displayName":"Restart On Idle Time","description":"Amount of time in minutes the session is idle until the kiosk browser restarts in a fresh state.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#restartonidletime"],"categoryId":"26c1af84-7c09-4910-8b2f-486072fef710","categoryName":"Kiosk Browser","options":null},"e9a3581d3a1a7620":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation","displayName":"Network Access Allow Anonymous SID Or Name Translation","description":"Network access: Allow anonymous SID/name translation This policy setting determines whether an anonymous user can request security identifier (SID) attributes for another user. If this policy is enabled, an anonymous user can request the SID attribute for another user. An anonymous user with knowledge of an administrator's SID could contact a computer that has this policy enabled and use the SID to get the administrator's name. This setting affects both the SID-to-name translation as well as the name-to-SID translation. If this policy setting is disabled, an anonymous user cannot request the SID attribute for another user. Default on workstations and member servers: Disabled. Default on domain controllers running Windows Server 2008 or later: Disabled. Default on domain controllers running Windows Server 2003 R2 or earlier: Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_allowanonymoussidornametranslation"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation_0","displayName":"Disable","description":"Disable","helpText":null}]},"e9d9cc6e44177203":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes","description":"Disables enforcement of Certificate Transparency requirements for a list of subjectPublicKeyInfo hashes.\r\n\r\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed to still be used for Enterprise hosts.\r\n\r\nTo disable Certificate Transparency enforcement when this policy is set, one of the following sets of conditions must be met:\r\n1. The hash is of the server certificate's subjectPublicKeyInfo.\r\n2. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, that CA certificate is constrained via the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName contains an organizationName attribute.\r\n3. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate contains the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\r\n\r\nA subjectPublicKeyInfo hash is specified by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\r\n\r\nIf you disable this policy or don't configure it, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it's not disclosed according to the Certificate Transparency policy.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_1","displayName":"Enabled","description":null,"helpText":null}]},"e9d1cfb8e31ab809":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended","displayName":"Enable Translate","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge offers translation functionality to the user by showing an integrated translate flyout when appropriate, and a translate option on the right-click context menu.\r\n\r\nDisable this policy to disable all built-in translate features.\r\n\r\nIf you don't configure the policy, users can choose whether to use the translation functionality or not.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e970a787b0cb784c":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc","displayName":"Block cookies on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e9950bc52c8f9df2":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_notificationsblockedforurlsdesc","displayName":"Block notifications on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"e9aa66d2b71b6abc":{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_edgemanagementenrollmenttoken","displayName":"Microsoft Edge management enrollment token (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":null},"e9261f61e1bd673a":{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended","displayName":"Enable insecure download warnings","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\r\n\r\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user will receive a UI warning, such as \"Insecure download blocked.\" The user will still have an option to proceed and download the item.\r\n\r\nIf you disable this policy, the warnings for insecure downloads will be suppressed.","helpText":"","infoUrls":[],"categoryId":"8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","categoryName":"Downloads","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e98816c5d41b2b0e":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist","displayName":"Configure the Enterprise Mode Site List","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\nExample value: https://internal.contoso.com/sitelist.xml","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"e9e1909ffd4593eb":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit","displayName":"Save cookies when Microsoft Edge closes","description":"When this policy is enabled, the specified set of cookies is exempt from deletion when the browser closes. This policy is only effective when:\r\n- The 'Cookies and other site data' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) is enabled or\r\n- The policy 'DefaultCookiesSetting' (Configure cookies) is set to 'Keep cookies for the duration of the session'.\r\n\r\nYou can define a list of sites, based on URL patterns, that will have their cookies preserved across sessions.\r\n\r\nNote: Users can still edit the cookie site list to add or remove URLs. However, they can't remove URLs that have been added by an Admin.\r\n\r\nIf you enable this policy, the list of cookies won't be cleared when the browser closes.\r\n\r\nIf you disable or don't configure this policy, the user's personal configuration is used.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"e9ab1be4ff0e292f":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit","displayName":"Delete files downloaded as part of kiosk session when Microsoft Edge closes","description":"This policy only applies to Microsoft Edge kiosk mode.\r\n\r\nIf you enable this policy, files downloaded as part of the kiosk session are deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy or don't configure it, files downloaded as part of the kiosk session are not deleted when Microsoft Edge closes.\r\n\r\nFor detailed information on configuring kiosk Mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"categoryId":"d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","categoryName":"Kiosk Mode settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"e9f52de0ba205cda":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepasswordcaching","displayName":"Disable Password Caching","description":"This policy lets you control whether passwords can be stored in Microsoft Office 2016 files. \r\n\r\nIf you enable this policy setting, Office 2016 users are prevented from storing passwords in Office 2016 files.\r\n\r\nIf you disable or do not configure this policy setting, users can store passwords in Office 2016 files.","helpText":"","infoUrls":[],"categoryId":"f0190b73-0d5c-410e-bce1-e03aa1f62ed4","categoryName":"Security Settings","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepasswordcaching_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepasswordcaching_1","displayName":"Enabled","description":null,"helpText":null}]},"e9ce4df4611ad0ce":{"id":"device_vendor_msft_policy_config_power_energysaverbatterythresholdonbattery","displayName":"Energy Saver Battery Threshold On Battery","description":"This policy setting allows you to specify battery charge level at which Energy Saver is turned on. If you enable this policy setting, you must provide a percent value, indicating the battery charge level. Energy Saver will be automatically turned on at (and below) the specified level. If you disable or do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#energysaverbatterythresholdonbattery"],"categoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","categoryName":"Power","options":null},"e9706b5cc430a473":{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowdriveredirection","displayName":"Do not allow drive redirection","description":"This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session (drive redirection).\r\n\r\nBy default, an RD Session Host server maps client drives automatically upon connection. Mapped drives appear in the session folder tree in File Explorer or Computer in the format on . You can use this policy setting to override this behavior.\r\n\r\nIf you enable this policy setting, client drive redirection is not allowed in Remote Desktop Services sessions, and Clipboard file copy redirection is not allowed on computers running Windows Server 2003, Windows 8, and Windows XP.\r\n\r\nIf you disable this policy setting, client drive redirection is always allowed. In addition, Clipboard file copy redirection is always allowed if Clipboard redirection is allowed.\r\n\r\nIf you do not configure this policy setting, client drive redirection and Clipboard file copy redirection are not specified at the Group Policy level.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-donotallowdriveredirection"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowdriveredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowdriveredirection_1","displayName":"Enabled","description":null,"helpText":null}]},"e9a7a35df74962b1":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditoracc","displayName":"Alt+F11 (Database Tools | Macro | Visual Basic) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditoracc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditoracc_1","displayName":"True","description":null,"helpText":null}]},"e9e06c7d3a033482":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout","displayName":"Screen saver timeout (User)","description":"Specifies how much user idle time must elapse before the screen saver is launched.\r\n\r\nWhen configured, this idle time can be set from a minimum of 1 second to a maximum of 86,400 seconds, or 24 hours. If set to zero, the screen saver will not be started.\r\n\r\nThis setting has no effect under any of the following circumstances:\r\n\r\n - The setting is disabled or not configured.\r\n\r\n - The wait time is set to zero.\r\n\r\n - The \"Enable Screen Saver\" setting is disabled.\r\n\r\n - Neither the \"Screen saver executable name\" setting nor the Screen Saver dialog of the client computer's Personalization or Display Control Panel specifies a valid existing screen saver program on the client.\r\n\r\nWhen not configured, whatever wait time is set on the client through the Screen Saver dialog in the Personalization or Display Control Panel is used. The default is 15 minutes.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-screensavertimeout"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"e92e4b81c33fd16c":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_video","displayName":"Video (User)","description":"This policy setting configures the synchronization of user settings for the Video app.\r\nBy default, the user settings of Video sync between computers. Use the policy setting to prevent the user settings of Video from synchronizing between computers.\r\nIf you enable this policy setting, Video user settings continue to sync.\r\nIf you disable this policy setting, Video user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-video"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_video_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_video_1","displayName":"Enabled","description":null,"helpText":null}]},"e98d09b2e42408de":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library3","displayName":"Location 4 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"e9e3a4da9c3687b5":{"id":"user_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices","displayName":"Disallow Autoplay for non-volume devices (User)","description":"This policy setting disallows AutoPlay for MTP devices like cameras or phones.\n\n If you enable this policy setting, AutoPlay is not allowed for MTP devices like cameras or phones.\n\n If you disable or do not configure this policy setting, AutoPlay is enabled for non-volume devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-disallowautoplayfornonvolumedevices"],"categoryId":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","categoryName":"Auto Play Policies","options":[{"id":"user_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices_1","displayName":"Enabled","description":null,"helpText":null}]},"e9d06ce9c37e0690":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains","displayName":"Suppress lookalike domain warnings on domains (User)","description":"This policy prevents the display of lookalike URL warnings on the sites listed. These warnings are typically shown on sites that Google Chrome believes might be trying to spoof another site the user is familiar with.\r\n\r\nIf the policy is enabled and set to one or more domains, no lookalike warnings pages will be shown when the user visits pages on that domain.\r\n\r\nIf the policy is not set, or set to an empty list, warnings may appear on any site the user visits.\r\n\r\nA hostname can be allowed with a complete host match, or any domain match. For example, a URL like \"https://foo.example.com/bar\" may have warnings suppressed if this list includes either \"foo.example.com\" or \"example.com\".\r\n\r\nExample value:\r\n\r\nfoo.example.com\r\nexample.org","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"e96f399c868357de":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled","displayName":"Enable reporting of usage and crash-related data (User)","description":"When this policy is enabled, anonymous reporting of usage and crash-related data about Chrome to Google is enabled by default. Users will still be able to change this setting in the Chrome settings.\r\n\r\nWhen this policy is disabled, anonymous reporting is disabled and no usage or crash data is sent to Google. Users won't be able to change this setting.\r\n\r\nWhen this policy isn't set, users can choose the anonymous reporting behavior at installation or first run, and can later change the setting in the Chrome settings.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain or Windows 10 Pro or Enterprise instances that are enrolled for device management, and macOS instances that are managed via MDM or joined to a domain via MCX.\r\n\r\n(For Chrome OS, see DeviceMetricsReportingEnabled.)","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"e974090aca0ce2c3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings","displayName":"Default search provider encodings (User)","description":"If DefaultSearchProviderEnabled is on, setting DefaultSearchProviderEncodings specifies the character encodings supported by the search provider. Encodings are code page names such as UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\r\n\r\nLeaving DefaultSearchProviderEncodings unset puts UTF-8 in use.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_1","displayName":"Enabled","description":null,"helpText":null}]},"e9f4d686583ec883":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings","displayName":"Change Memory Saver Mode Savings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_0","displayName":"Moderate memory savings.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_1","displayName":"Balanced memory savings.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_2","displayName":"Maximum memory savings.","description":null,"helpText":null}]},"e9f24996528decd4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks","displayName":"Excel 95 workbooks (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_1","displayName":"Enabled","description":null,"helpText":null}]},"e98a052ef96e0b51":{"id":"user_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode","displayName":"Reset zoom to default for HTML dialogs in Internet Explorer mode (User)","description":"This policy setting lets admins reset zoom to default for HTML dialogs in Internet Explorer mode.\n\nIf you enable this policy, the zoom of an HTML dialog in Internet Explorer mode will not get propagated from its parent page.\n\nIf you disable, or don't configure this policy, the zoom of an HTML dialog in Internet Explorer mode will be set based on the zoom of it's parent page.\n\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2220107","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-resetzoomfordialoginiemode"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_1","displayName":"Enabled","description":null,"helpText":null}]},"e90742c2d4d037b4":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices","displayName":"Send site information to improve Microsoft services (User)","description":"This policy enables sending info about websites visited in Microsoft Edge to Microsoft to improve services like search.\r\n\r\nEnable this policy to send info about websites visited in Microsoft Edge to Microsoft. Disable this policy to not send info about websites visited in Microsoft Edge to Microsoft. In both cases, users can't change or override the setting.\r\n\r\nOn Windows 10, Beta and Stable if this policy is not configured, Microsoft Edge will default to the Windows diagnostic data setting. If this policy is enabled Microsoft Edge will only send info about websites visited in Microsoft Edge if the Windows Diagnostic data setting is set to Full. If this policy is disabled Microsoft Edge will not send info about websites visited. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 10, Canary and Dev channels, this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.\r\n\r\nOn Windows 7, 8, and Mac this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_1","displayName":"Enabled","description":null,"helpText":null}]},"e993b5fccf0fa0a7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_extensioninstallallowlistdesc","displayName":"Extension IDs to exempt from the block list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":null},"e96c946c4babb7df":{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended","displayName":"Pin browser essentials toolbar button (User)","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\r\n\r\nWhen the button is pinned, it will always appear on the toolbar.\r\n\r\nWhen the button isn't pinned, it will only appear when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\r\n\r\nIf you enable or don't configure this policy, the Browser essentials button will be pinned on the toolbar.\r\n\r\nIf you disable this policy, the Browser essentials button won't be pinned on the toolbar.\r\n\r\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":"","infoUrls":[],"categoryId":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","categoryName":"Performance","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"e9f27301333a9fdc":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_sensorsallowedforurlsdesc","displayName":"Allow access to sensors on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e960bd3d519e25f2":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_forcesynctypesdesc","displayName":"Configure the list of types that are included for synchronization (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e9c72f2c77e40036":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_donotsilentlyblockprotocolsfromorigins","displayName":"Define a list of protocols that can not be silently blocked by anti-flood protection (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"e9bbc45a26cd90b0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_displaylegacygaldialog","displayName":"Display legacy GAL dialog (User)","description":"This policy setting allows you to specify the way contact information is displayed.\r\n\r\nIf you enable this policy setting the global address list (GAL) dialog is displayed instead of the Contact Card when users double click a contact in Outlook. \r\n\r\nIf you disable or do not configure this policy setting the Contact Card is displayed when users double click a contact in Outlook.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_displaylegacygaldialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_displaylegacygaldialog_1","displayName":"Enabled","description":null,"helpText":null}]},"e9a7465fa77dcb6a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacecompany","displayName":"Replace MAPI - Company (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"company\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"company\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacecompany_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacecompany_1","displayName":"Enabled","description":null,"helpText":null}]},"e9d3f2f9d418dfac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_documentinformationpanel_l_trustcentersolution_l_empty421","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0696109e-045f-486a-9a6b-ab7877887bed","categoryName":"Document Information Panel","options":null},"e99686580335e212":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy","displayName":"Disable UI extending from documents and templates (User)","description":"This policy setting controls whether Office 2016 applications load any custom user interface (UI) code included with a document or template. Office 2016 allows developers to extend the UI with customization code that is included in a document or template. \r\n\r\nIf you enable this policy setting, Office 2016 applications cannot load any UI customization code included with documents and templates. \r\n\r\nIf you disable or do not configure this policy setting, Office 2016 applications load any UI customization code included with a document or template when opening it.","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"e9cf9692e8ab1190":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookglobaladdresslistdictionary","displayName":"Set update interval for Outlook Global Address List Dictionary (User)","description":"This policy setting allows you to specify the update interval for the Outlook Global Address List Dictionary. This policy setting applies to Japanese Microsoft IME only.\r\n\r\n\r\nIf you enable this policy setting, you can specify the update interval in minutes. For example, if you specify \"720,\" the Outlook Global Address List Dictionary is updated every 720 minutes.\r\n\r\nIf you do not configure this policy setting, the Outlook Global Address List Dictionary is updated every 1440 minutes (24 hours).","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookglobaladdresslistdictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setupdateintervalforoutlookglobaladdresslistdictionary_1","displayName":"Enabled","description":null,"helpText":null}]},"e9763ba1de38589e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_amharic","displayName":"Amharic (User)","description":"Enables the editing language Amharic","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_amharic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_amharic_1","displayName":"Enabled","description":null,"helpText":null}]},"e9b49d070caf3f7e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_portuguesebrazil","displayName":"Portuguese (Brazil) (User)","description":"Enables the editing language Portuguese (Brazil)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_portuguesebrazil_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_portuguesebrazil_1","displayName":"Enabled","description":null,"helpText":null}]},"e9286079496b600d":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings_l_model3dblockedextensions","displayName":"Disable 3D Model File Formats List (User)","description":"This policy setting allows you to specify a list of 3D model file formats that will be blocked from being loaded in Office applications.\r\n\r\nIf you enable this policy setting, you can specify a list of 3D Model file format that Office applications will block on insert or load. You should specify the list of 3D model file formats to block in a list of files extensions. For example, to block the FBX extension, enter the string “FBX”. To block the FBX and OBJ extensions, enter the string “FBX; OBJ”.\r\n\r\nIf you disable or do not configure this policy setting, Office applications do not restrict any 3D model file formats.\r\n","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings_l_model3dblockedextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings_l_model3dblockedextensions_1","displayName":"Enabled","description":null,"helpText":null}]},"e99e7529b1c70ff9":{"id":"user_vendor_msft_policy_config_onent16v4~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disablesupportdiagnostics","displayName":"Turn off support diagnostics in OneNote (User)","description":"This policy setting controls whether OneNote sends client information to support services on failure.\r\n\r\nSending client information to support services on failure can help diagnose the issue, provide resolution steps, or show contextual error messaging to the user.\r\n\r\nIf you enable this policy setting, OneNote won’t send client information to support services on failure.\r\n\r\nIf you disable or don’t configure this policy setting, OneNote will send client information to support services on failure.\r\n\r\nNote: This policy setting only applies to Version 2207 and later of OneNote.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v4~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disablesupportdiagnostics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v4~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disablesupportdiagnostics_1","displayName":"Enabled","description":null,"helpText":null}]},"e96354a24b944c68":{"id":"user_vendor_msft_policy_config_onent16v7~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_onenotesensitivitylabels","displayName":"Enable OneNote Sensitivity Labels (User)","description":"This policy setting controls whether Purview Sensitivity Label capabilities can be enabled for OneNote Sections.\r\n\r\nIf you enable this policy, users can use supported Purview features, such as manual labeling, label removal, or default labels, to apply sensitivity labels to OneNote sections and help protect sensitive information. At this time, mandatory labels, auto labeling, and dynamic watermarking are not supported.\r\n\r\nIf you disable this policy, users won't be able to apply, change or remove Sensitivity Labels in OneNote Sections.\r\n\r\nIf you do not configure this policy setting, users won't be able to apply, change or remove Sensitivity Labels in OneNote Sections.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v7~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_onenotesensitivitylabels_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v7~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_onenotesensitivitylabels_1","displayName":"Enabled","description":null,"helpText":null}]},"e9dad70d93d99140":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_markitemasreadwhenselectionchanges","displayName":"Mark item as read when selection changes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_markitemasreadwhenselectionchanges_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_readingpane_l_markitemasreadwhenselectionchanges_1","displayName":"True","description":null,"helpText":null}]},"e9ccf839dd9ef6ab":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_freebusyoptions_l_options9_l_monthsoffreebusyinformationpublished","displayName":"Months of Free/Busy information published: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c6b72060-8ecb-41d8-8625-2984dd756d4a","categoryName":"Free/Busy Options","options":null},"e941d7bf6ab48e21":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_processrequestsandresponsesonarrival","displayName":"Process requests and responses on arrival (User)","description":"","helpText":"","infoUrls":[],"categoryId":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","categoryName":"Tracking Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_processrequestsandresponsesonarrival_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_trackingoptions_l_options_l_processrequestsandresponsesonarrival_1","displayName":"True","description":null,"helpText":null}]},"e9d9b9eacfa2a97d":{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablecrashnotificationonrestart","displayName":"Disable the Outlook crash notification when Outlook restarts. (User)","description":"This policy setting determines if the Outlook crash notification on restart is allowed. Enabling this setting will block Outlook crash notification on restart.","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablecrashnotificationonrestart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disablecrashnotificationonrestart_1","displayName":"Enabled","description":null,"helpText":null}]},"e9c8ea21a6448197":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},"e98e706ad678f72d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc09_l_datecolon41","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"e94fa2b29908d64a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_datecolon85","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/ea.json b/public/intune-definitions/ea.json new file mode 100644 index 000000000000..09f1b5a5ceb6 --- /dev/null +++ b/public/intune-definitions/ea.json @@ -0,0 +1 @@ +{"eaebd8e51d0e1165":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge_part_targetversionprefix","displayName":"Target version (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":null},"ea1fa59c2cd4e50c":{"id":"com.apple.airplay_com.apple.airplay","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","categoryName":"AirPlay","options":null},"ea3f819c497e845c":{"id":"com.apple.directoryservice.managed_adorganizationalunit","displayName":"AD Organizational Unit","description":"The organizational unit where the joining computer object is added.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"ead00a71c8e2d38d":{"id":"com.apple.fileproviderd_managementdomainautoenablementlist","displayName":"Management Domain Auto Enablement List","description":"An array of strings representing the composed identifiers of apps. The device automatically enables the File Provider domains for the corresponding apps. The device doesn't enable existing domains if enrollment happens after they are created. The device doesn't prevent the user from disabling these File Provider domains. Users need to manually enable File Provider domains in the Finder if their corresponding apps aren't listed here. The format of the app identifiers is \"Bundle-ID (Team-ID)\", for example `com.example.app (ABCD1234)`.","helpText":null,"infoUrls":[],"categoryId":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","categoryName":"File Provider","options":null},"ea6c08ecea39e42a":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"ea8202a80ea2f01c":{"id":"com.apple.managedclient.preferences_doubleclickclosetabenabled","displayName":"Double Click feature in Microsoft Edge enabled (only available in China)","description":"This policy lets you configure the double click feature in Microsoft Edge.\n\nDouble Click lets users close a tab by double clicking the left mouse button.\n\nIf you enable or don't configure this policy, you can use the double click feature to close a tab on Microsoft Edge to start using this feature.\n\nIf you disable this policy, you can't use the double click feature in Microsoft Edge.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#doubleclickclosetabenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_doubleclickclosetabenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_doubleclickclosetabenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"ea0192325f08e44d":{"id":"com.apple.managedclient.preferences_enhancesecuritymodebypasslistdomains","displayName":"Configure the list of domains for which enhance security mode will not be enforced","description":"Configure the list of enhance security trusted domains. This means that\nenhance security mode will not be enforced when loading the sites in trusted domains.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enhancesecuritymodebypasslistdomains"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ea197d2ad64385cf":{"id":"com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabled","displayName":"Enable default legacy SameSite cookie behavior setting","description":"Lets you revert all cookies to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\n\nYou can set the following values for this policy:\n\n* 1 = Revert to legacy SameSite behavior for cookies on all sites\n\n* 2 = Use SameSite-by-default behavior for cookies on all sites\n\nIf you don't set this policy, the default behavior for cookies that don't specify a SameSite attribute will depend on other configuration sources for the SameSite-by-default feature. This feature might be set by a field trial or by enabling the same-site-by-default-cookies flag in edge://flags.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#legacysamesitecookiebehaviorenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabled_0","displayName":"Revert to legacy SameSite behavior for cookies on all sites","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabled_1","displayName":"Use SameSite-by-default behavior for cookies on all sites","description":null,"helpText":null}]},"ea51a77bf3a91c07":{"id":"com.apple.managedclient.preferences_userfeedbackallowed","displayName":"Allow user feedback","description":"Microsoft Edge uses the Edge Feedback feature (enabled by default) to allow users to send feedback, suggestions or customer surveys and to report any issues with the browser. Also, by default, users can't disable (turn off) the Edge Feedback feature.\n\nIf you enable this policy or don't configure it, users can invoke Edge Feedback.\n\nIf you disable this policy, users can't invoke Edge Feedback.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#userfeedbackallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_userfeedbackallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_userfeedbackallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"ea880661c1660bd6":{"id":"com.microsoft.edge.mamedgeappconfigsettings.proactiveauthenabled","displayName":"Enable Proactive Authentication (Obsolete)","description":"This policy is obsolete because it doesn't work independently of browser sign in. It doesn't work in Microsoft Edge after version 90. If you want to configure browser sign in, use the \"BrowserSignin\" policy.\n\nLets you configure whether to turn on Proactive Authentication in Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge tries to seamlessly authenticate to websites and services using the account which is signed-in to the browser.\n\nIf you disable this policy, Microsoft Edge doesn't try to authenticate with websites or services using single sign-on (SSO). Authenticated experiences like the Enterprise New Tab Page won't work (for example, recent and recommended Office documents will not be available).\n\nIf you don't configure this policy, Proactive Authentication is turned on.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.proactiveauthenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.proactiveauthenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"eac5174dca027d43":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_minimumpinlength","displayName":"Minimum PIN Length","description":"Minimum PIN length configures the minimum number of characters required for the PIN. The lowest number you can configure for this policy setting is 4. The largest number you can configure must be less than the number configured in the Maximum PIN length policy setting or the number 127, whichever is the lowest.\n\nIf you configure this policy setting, the PIN length must be greater than or equal to this number.\n\nIf you do not configure this policy setting, the PIN length must be greater than or equal to 4.\n\nNOTE: If the above specified conditions for the minimum PIN length are not met, default values will be used for both the maximum and minimum PIN lengths.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"ea0f59138c3fef62":{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreinvalidcertdate","displayName":"Expired certificate validation date","description":null,"helpText":"","infoUrls":[],"categoryId":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","categoryName":"ActiveX Installer Service","options":[{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreinvalidcertdate_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_activexinstallservice_axisurlzonepolicies_ignoreinvalidcertdate_1","displayName":"True","description":null,"helpText":null}]},"eabfe1f932c5b873":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationttl","displayName":"TTL value for A and PTR records","description":"\r\nSpecifies the value of the time to live (TTL) field in A and PTR resource records that are registered by computers to which this policy setting is applied.\r\n\r\nTo specify the TTL, click Enabled and then enter a value in seconds (for example, 900 is 15 minutes).\r\n\r\nIf you enable this policy setting, the TTL value that you specify will be applied to DNS resource records registered for all network connections used by computers that receive this policy setting.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, computers will use the TTL settings specified in DNS. By default, the TTL is 1200 seconds (20 minutes).\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-registrationttl"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationttl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationttl_1","displayName":"Enabled","description":null,"helpText":null}]},"eaab3e7b7767dc67":{"id":"device_vendor_msft_policy_config_admx_errorreporting_pch_configurereport_pch_companytext_edit","displayName":"Replace instances of the word 'Microsoft' with:","description":null,"helpText":"","infoUrls":[],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":null},"ea791508d73882e6":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimizationonserversku_syncmodeslowlinkthreshold1","displayName":"Slow link value:[number field] milliseconds","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"ea96ca57619022a9":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_domainlocationdeterminationurl_ncsi_domainlocationdeterminationurlbox","displayName":"Corporate Domain Location Determination URL:","description":null,"helpText":"","infoUrls":[],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":null},"ea485d3aa7c64ece":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2","displayName":"Publishing Server 2 Settings","description":" Publishing Server Display Name: Displays the name of publishing server.\n \n Publishing Server URL: Displays the URL of publishing server.\n \n Global Publishing Refresh: Enables global publishing refresh (Boolean).\n \n Global Publishing Refresh On Logon: Triggers a global publishing refresh on logon (Boolean).\n \n Global Publishing Refresh Interval: Specifies the publishing refresh interval using the GlobalRefreshIntervalUnit. To disable package refresh, select 0.\n \n Global Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n \n User Publishing Refresh: Enables user publishing refresh (Boolean).\n \n User Publishing Refresh On Logon: Triggers a user publishing refresh on logon (Boolean).\n \n User Publishing Refresh Interval: Specifies the publishing refresh interval using the UserRefreshIntervalUnit. To disable package refresh, select 0.\n \n User Publishing Refresh Interval Unit: Specifies the interval unit (Hour 0-23, Day 0-31).\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-publishingallowserver2"],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver2_1","displayName":"Enabled","description":null,"helpText":null}]},"ea8c522822edab1f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain","displayName":"Configure the required domain name for remote access clients","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: my-awesome-domain.com","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_1","displayName":"Enabled","description":null,"helpText":null}]},"eae81320ccfcacb8":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled","displayName":"Enable TLS Encrypted ClientHello","description":"Encrypted ClientHello (ECH) is an extension to TLS to encrypt sensitive fields of the ClientHello and improve privacy.\r\n\r\nIf this policy is not configured, or is set to enabled, Google Chrome will follow the default rollout process for ECH. If it is disabled, Google Chrome will not enable ECH.\r\n\r\nWhen the feature is enabled, Google Chrome may or may not use ECH depending on server support, availability of the HTTPS DNS record, or rollout status.\r\n\r\nECH is an evolving protocol, so Google Chrome's implementation is subject to change. As such, this policy is a temporary measure to control the initial experimental implementation. It will be replaced with final controls as the protocol finalizes.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ea49365149bac19e":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail","displayName":"Block executable content from email client and webmail","description":"This rule blocks the following file types from launching from email opened within the Microsoft Outlook application, or Outlook.com and other popular webmail providers: Executable files (such as .exe, .dll, or .scr), Script files (such as a PowerShell .ps, VisualBasic .vbs, or JavaScript .js file).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_warn","displayName":"Warn","description":null,"helpText":null}]},"ea46960949728207":{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_list","displayName":"Prevented Classes","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"categoryId":"68237832-f376-4f0e-ba26-4e06fce7a35d","categoryName":"Device Installation Restrictions","options":null},"ea2e72452a8cb512":{"id":"device_vendor_msft_policy_config_devicelock_enforcelockscreenprovider","displayName":"Enforce Lock Screen Provider","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#enforcelockscreenprovider"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"eaa4091b0a493fb4":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c","displayName":"Allow VBScript to run in Internet Explorer","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_1","displayName":"Prompt","description":null,"helpText":null}]},"eaaaacf51a271520":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon","displayName":"Devices Allow Undock Without Having To Logon","description":"Devices: Allow undock without having to log on This security setting determines whether a portable computer can be undocked without having to log on. If this policy is enabled, logon is not required and an external hardware eject button can be used to undock the computer. If disabled, a user must log on and have the Remove computer from docking station privilege to undock the computer. Default: Enabled. Caution Disabling this policy may tempt users to try and physically remove the laptop from its docking station using methods other than the external hardware eject button. Since this may cause damage to the hardware, this setting, in general, should only be disabled on laptop configurations that are physically securable.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_allowundockwithouthavingtologon"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon_0","displayName":"Block","description":"Block","helpText":null}]},"ea6a61d17149d08d":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist","displayName":"HTTP Allowlist","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as '[*.]example.com') that will not be upgraded to HTTPS and will not show an error interstitial if HTTPS-First Mode is enabled. Organizations can use this policy to maintain access to servers that do not support HTTPS, without needing to disable \"AutomaticHttpsDefault\".\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead, HTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their specific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"ea66c1ab9c63ba71":{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting","description":"Setting the policy to \"BlockWindowManagement\" (value 2) automatically denies the window management permission to sites by default. This limits the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nSetting the policy to \"AskWindowManagement\" (value 3) by default prompts the user when the window management permission is requested. If users allow the permission, it extends the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nNot configuring the policy means the \"AskWindowManagement\" policy applies, but users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockWindowManagement (2) = Denies the Window Management permission on all sites by default\r\n\r\n* AskWindowManagement (3) = Ask every time a site wants obtain the Window Management permission\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"ea872f2abcbbad3c":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended","displayName":"Clear browsing data when Microsoft Edge closes","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\r\n\r\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured 'DefaultCookiesSetting' (Configure cookies)\r\n\r\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\r\n\r\nIf you enable this policy, don't configure the 'AllowDeletingBrowserHistory' (Enable deleting browser and download history) or the 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes) policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured 'AllowDeletingBrowserHistory' or 'ClearCachedImagesAndFilesOnExit'.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ea46ceae994488fb":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_sleepingtabsblockedforurlsdesc","displayName":"Block Sleeping Tabs on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":null},"ea86e3fbe127a6ee":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended","displayName":"Configure Automatic HTTPS","description":"This policy lets you manage settings for 'AutomaticHttpsDefault' (Configure Automatic HTTPS), which switches connections from HTTP to HTTPS.\r\n\r\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\r\n\r\nNote: The 'UpgradeCapableDomains' configuration requires a component list, and will not upgrade these connections if 'ComponentUpdatesEnabled' (Enable component updates in Microsoft Edge) is set to 'Disabled'.\r\n\r\nIf you don't configure this policy, 'AutomaticHttpsDefault' will be enabled, and will only upgrade connections on domains likely to support HTTPS.\r\n\r\nPolicy options mapping:\r\n\r\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\r\n\r\n* UpgradeCapableDomains (1) = Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\r\n\r\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"eaee939bbf2d7cb7":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist_passwordmanagerblocklistdesc","displayName":"Configure the list of domains for which the password manager UI (Save and Fill) will be disabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":null},"eaecb1aa05f1c84a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_pptviewexe144","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_pptviewexe144_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_pptviewexe144_1","displayName":"True","description":null,"helpText":null}]},"ea25344bd2cade8f":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_userincontroloftheseapps","displayName":"Let Apps Access Notifications User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessnotifications_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"ea5f151c2e068076":{"id":"device_vendor_msft_policy_config_update_pausedeferrals","displayName":"Pause Deferrals","description":"NoteDon't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use PauseDeferrals for Windows 10, version 1511 devices. Allows IT Admins to pause updates and upgrades for up to 5 weeks. Paused deferrals will be reset after 5 weeks. If the Specify intranet Microsoft update service location policy is enabled, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. If the Allow Telemetry policy is enabled and the Options value is set to 0, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausedeferrals"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":[{"id":"device_vendor_msft_policy_config_update_pausedeferrals_0","displayName":"Deferrals are not paused.","description":"Deferrals are not paused.","helpText":null},{"id":"device_vendor_msft_policy_config_update_pausedeferrals_1","displayName":"Deferrals are paused.","description":"Deferrals are paused.","helpText":null}]},"ea51b6f2a760eae3":{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_scantype","displayName":"Weekly Scheduled scan type","description":"Selects whether to perform a quick scan or full scan. Quick scan checks the most likely locations where malware could be registered to start with the system. Full scan checks all files and running programs on your hard disk.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scheduled-scan"],"categoryId":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","categoryName":"Schedule Scan","options":[{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_scantype_quick","displayName":"Quick scan","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scheduledscan_scantype_full","displayName":"Full scan","description":null,"helpText":null}]},"ea22bb16eb2bfa74":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18","displayName":"Trusted Location #18 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_1","displayName":"Enabled","description":null,"helpText":null}]},"ea822fe28a0acf46":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacroconvertmacrostovisualbasic","displayName":"Database Tools | Macro | Convert Macros to Visual Basic (User)","description":"","helpText":"","infoUrls":[],"categoryId":"55eebd7c-beb9-48b6-907f-df4997e18bdb","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacroconvertmacrostovisualbasic_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacroconvertmacrostovisualbasic_1","displayName":"True","description":null,"helpText":null}]},"ea31f9a6588b3c50":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_themefilename","displayName":"Path to theme file: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"ea61a77e50dd3783":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinmusic","displayName":"Music (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinmusic_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinmusic_1","displayName":"True","description":null,"helpText":null}]},"ea3662a53aaa0b42":{"id":"user_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_1","displayName":"Turn off the Windows Messenger Customer Experience Improvement Program (User)","description":"This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.\r\n\r\nWith the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used. This information is used to improve the product in future releases.\r\n\r\nIf you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown.\r\n\r\nIf you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown.\r\n\r\nIf you do not configure this policy setting, users have the choice to opt in and allow information to be collected.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-winmsg-noinstrumentation-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_1_1","displayName":"Enabled","description":null,"helpText":null}]},"eae072cd64b1fa9d":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamealluserrasconnection","displayName":"Ability to rename all user remote access connections (User)","description":"Determines whether nonadministrators can rename all-user remote access connections.\r\n\r\nTo create an all-user connection, on the Connection Availability page in the New Connection Wizard, click the \"For all users\" option.\r\n\r\nIf you enable this setting, the Rename option is enabled for all-user remote access connections. Any user can rename all-user connections by clicking an icon representing the connection or by using the File menu.\r\n\r\nIf you disable this setting, the Rename option is disabled for nonadministrators only.\r\n\r\nIf you do not configure the setting, only Administrators and Network Configuration Operators can rename all-user remote access connections.\r\n\r\nNote: This setting does not apply to Administrators\r\n\r\nNote: When the \"Ability to rename LAN connections or remote access connections available to all users\" setting is configured (set to either Enabled or Disabled), this setting does not apply.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renamealluserrasconnection"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamealluserrasconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamealluserrasconnection_1","displayName":"Enabled","description":null,"helpText":null}]},"ea3666374edd2fbc":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomputerlinkinstartmenu","displayName":"Remove Search Computer link (User)","description":"If you enable this policy, the \"See all results\" link will not be shown when the user performs a search in the start menu search box.\r\n\r\nIf you disable or do not configure this policy, the \"See all results\" link will be shown when the user performs a search in the start menu search box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchcomputerlinkinstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomputerlinkinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomputerlinkinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"eae6f80bf4e17e88":{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_1","displayName":"Prevent Flicks Learning Mode (User)","description":"Makes pen flicks learning mode unavailable.\r\n\r\nIf you enable this policy, pen flicks are still available but learning mode is not. Pen flicks are off by default and can be turned on system-wide, but cannot be restricted to learning mode applications. This means that the pen flicks training triggers in Internet Explorer are disabled and that the pen flicks notification will never be displayed. However, pen flicks, the pen flicks tray icon and pen flicks training (that can be accessed through CPL) are still available. Conceptually this policy is a subset of the Disable pen flicks policy.\r\n\r\nIf you disable or do not configure this policy, all the features described above will be available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventflickslearningmode-1"],"categoryId":"6f0e6df6-8654-4b57-b1d5-2160c5a0a54e","categoryName":"Pen Flicks Learning","options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_1_1","displayName":"Enabled","description":null,"helpText":null}]},"eaa2fb301c2f5cde":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders","displayName":"Disable Known Folders (User)","description":"This policy setting allows you to specify a list of known folders that should be disabled. Disabling a known folder will prevent the underlying file or directory from being created via the known folder API. If the folder exists before the policy is applied, the folder must be manually deleted since the policy only blocks the creation of the folder.\r\n\r\nYou can specify a known folder using its known folder id or using its canonical name. For example, the Sample Videos known folder can be disabled by specifying {440fcffd-a92b-4739-ae1a-d4a54907c53f} or SampleVideos.\r\n\r\nNote: Disabling a known folder can introduce application compatibility issues in applications that depend on the existence of the known folder.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disableknownfolders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"eaf576ca1c00ddac":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior","displayName":"Control SafeSites adult content filtering. (User)","description":"Setting the policy controls the SafeSites URL filter, which uses the Google Safe Search API to classify URLs as pornographic or not.\r\n\r\nWhen this policy is set to:\r\n\r\n* Do not filter sites for adult content, or not set, sites aren't filtered\r\n\r\n* Filter top level sites for adult content, pornographic sites are filtered","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},"ea3569b077413a04":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist","displayName":"Use Internet Explorer's SiteList policy for Legacy Browser Support. (User)","description":"This policy controls whether to load rules from Internet Explorer®'s SiteList policy.\r\n\r\nWhen this policy is set to true, Google Chrome reads Internet Explorer®'s SiteList to obtain the site list's URL. Google Chrome then downloads the site list from that URL, and applies the rules as if they had been configured with the BrowserSwitcherUrlList policy.\r\n\r\nWhen this policy is false or unset, Google Chrome does not use Internet Explorer®'s SiteList policy as a source of rules for switching browsers.\r\n\r\nFor more information on Internet Explorer's SiteList policy: https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist_1","displayName":"Enabled","description":null,"helpText":null}]},"ea925a354a59e204":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting","displayName":"Default notification setting (User)","description":"Setting the policy to 1 lets websites display desktop notifications. Setting the policy to 2 denies desktop notifications.\r\n\r\nLeaving it unset means AskNotifications applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"ea2f4859c2b72362":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting","displayName":"Default key generation setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting_1","displayName":"Allow all sites to use key generation","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting_2","displayName":"Do not allow any site to use key generation","description":null,"helpText":null}]},"ea4abde63cd6fbbc":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_enterprisecustomlabelforbrowser","displayName":"Set a custom enterprise label for a managed browser (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"eae19b497eb467f4":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_datarecovery_l_donotshowdataextractionoptionswhenopeningcorruptworkbooks","displayName":"Do not show data extraction options when opening corrupt workbooks (User)","description":"This policy setting controls whether Excel presents users with a list of data extraction options before beginning an Open and Repair operation when users choose to open a corrupt workbook in repair or extract mode.\r\n \r\nIf you enable this policy setting, Excel opens the file using the Safe Load process and does not prompt users to choose between repairing or extracting data.\r\n \r\nIf you disable or do not configure this policy setting, Excel prompts the user to select either to repair or to extract data, and to select either to convert to values or to recover formulas.","helpText":"","infoUrls":[],"categoryId":"28831364-ca54-4f31-acca-1aa0c7a7d3d2","categoryName":"Data Recovery","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_datarecovery_l_donotshowdataextractionoptionswhenopeningcorruptworkbooks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_datarecovery_l_donotshowdataextractionoptionswhenopeningcorruptworkbooks_1","displayName":"Enabled","description":null,"helpText":null}]},"ea207972ac40aaf7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},"ea34df46fd2345f1":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins, Excel Automation add-ins, and RTD add-ins, or specify the file name of Excel XLL add-ins and Excel add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Excel\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\Excel\\Addins.\r\n\r\nTo obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.\r\n\r\nYou can also obtain the ProgID or the file name of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"categoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"eae09a1f28293e73":{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightwindowswelcomeexperience","displayName":"Allow Windows Spotlight Windows Welcome Experience (User)","description":"This policy setting lets you turn off the Windows spotlight Windows welcome experience feature. The Windows welcome experience feature introduces onboard users to Windows; for example, launching Microsoft Edge with a webpage that highlights new features. If you enable this policy, the Windows welcome experience will no longer be displayed when there are updates and changes to Windows and its apps. If you disable or do not configure this policy, the Windows welcome experience will be launched to inform onboard users about what's new, changed, and suggested. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowwindowsspotlightwindowswelcomeexperience"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightwindowswelcomeexperience_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_experience_allowwindowsspotlightwindowswelcomeexperience_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"eaa197b417cebfbf":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles","displayName":"Allow loading of XAML files (User)","description":"This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation.\n\nIf you enable this policy setting and set the drop-down box to Enable, XAML files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XAML files.\n\nIf you disable this policy setting, XAML files are not loaded inside Internet Explorer. The user cannot change this behavior.\n\nIf you do not configure this policy setting, the user can decide whether to load XAML files inside Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowloadingofxamlfiles"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"ea1e01fbadb94a08":{"id":"user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"ea8cb5e390413072":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled","displayName":"Continue running background apps after Microsoft Edge closes (User)","description":"Allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window is closed. In this scenario, background apps and the current browsing session remain active, including any session cookies. An open background process displays an icon in the system tray and can always be closed from there.\r\n\r\nIf you enable this policy, background mode is turned on.\r\n\r\nIf you disable this policy, background mode is turned off.\r\n\r\nIf you don't configure this policy, background mode is initially turned off, and the user can configure its behavior in edge://settings/system.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ea0ef8706d8eeb20":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression","displayName":"Block all ads on Bing search results (User)","description":"Enables an ad-free search experience on Bing.com\r\n\r\nIf you enable this policy, then a user can search on bing.com and have an ad-free search experience. At the same time, the SafeSearch setting will be set to 'Strict' and can't be changed by the user.\r\n\r\nIf you don't configure this policy, then the default experience will have ads in the search results on bing.com. SafeSearch will be set to 'Moderate' by default and can be changed by the user.\r\n\r\nThis policy is only available for K-12 SKUs that are identified as EDU tenants by Microsoft.\r\n\r\nPlease refer to https://go.microsoft.com/fwlink/?linkid=2119711 to learn more about this policy or if the following scenarios apply to you:\r\n\r\n* You have an EDU tenant, but the policy doesn't work.\r\n\r\n* You had your IP whitelisted for having an ad free search experience.\r\n\r\n* You were experiencing an ad-free search experience on Microsoft Edge Legacy and want to upgrade to the new version of Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression_1","displayName":"Enabled","description":null,"helpText":null}]},"ea978fb86ba95c74":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol","displayName":"Configure users ability to override feature flags (User)","description":"Configures users ability to override state of feature flags.\r\nIf you set this policy to 'CommandLineOverridesEnabled', users can override state of feature flags using command line arguments but not edge://flags page.\r\n\r\nIf you set this policy to 'OverridesEnabled', users can override state of feature flags using command line arguments or edge://flags page.\r\n\r\nIf you set this policy to 'OverridesDisabled', users can't override state of feature flags using command line arguments or edge://flags page.\r\n\r\nIf you don't configure this policy, the behavior is the same as the 'OverridesEnabled'.\r\n\r\nPolicy options mapping:\r\n\r\n* CommandLineOverridesEnabled (2) = Allow users to override feature flags using command line arguments only\r\n\r\n* OverridesEnabled (1) = Allow users to override feature flags\r\n\r\n* OverridesDisabled (0) = Prevent users from overriding feature flags\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"eb6409fc-fb52-413d-ae4b-eff017b52b30","categoryName":"Experimentation","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_1","displayName":"Enabled","description":null,"helpText":null}]},"ea0b4fb33ecd1138":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled","displayName":"Allow users to get a strong password suggestion whenever they are creating an account online (User)","description":"Configures the Password Generator Settings toggle that enables/disables the feature for users.\r\n\r\nIf you enable or don't configure this policy, then Password Generator will offer users a strong and unique password suggestion (via a dropdown) on Signup and Change Password pages.\r\n\r\nIf you disable this policy, users will no longer see strong password suggestions on Signup or Change Password pages.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ea7864852663985c":{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_opendirectlyinapp","displayName":"Open Directly in Office Client Application (User)","description":"This policy allows the admin to choose whether Office documents located on web servers open up directly in the App or go via the web browser","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_opendirectlyinapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16~policy~l_microsoftofficesystem~l_miscellaneous437_l_opendirectlyinapp_1","displayName":"Enabled","description":null,"helpText":null}]},"ea1e9d680a2b6596":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastserviceserverurl6","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"eae02bdf84204187":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacebirthday","displayName":"Replace MAPI - Birthday (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"birthday\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"birthday\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacebirthday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplacebirthday_1","displayName":"Enabled","description":null,"helpText":null}]},"eaba37b96c6cbeaf":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcommonfileshare_l_officeosmcommonfilesharefileshare","displayName":"UNC path to store Office telemetry data: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":null},"eab1e87bc9c3f092":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepauseonmeterednetwork","displayName":"Continue syncing on metered networks (User)","description":"This setting lets you turn off the auto-pause feature when devices connect to metered networks.\r\n\r\nIf you enable this setting, syncing will continue when devices are on a metered network. OneDrive will not automatically pause syncing.\r\n\r\nIf you disable or do not configure this setting, syncing will pause automatically when a metered network is detected and a notification will be displayed. Users can choose not to pause syncing by clicking \"Sync Anyway\" in the notification. When syncing is paused, uers can resume syncing by clicking the OneDrive cloud icon in the notification area of the taskbar and then clicking the alert at the top of the activity center.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepauseonmeterednetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablepauseonmeterednetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"ea5e6d7e347370c3":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_enableholdthefile","displayName":"Allow users to choose how to handle Office file sync conflicts (User)","description":"This setting specifies what happens when there's a conflict between Office file versions during sync. By default, users can decide if they want to merge changes or keep both copies. Users can also change settings in the OneDrive sync app to always keep both copies. (This option is available for Office 2016 or later only. With earlier versions of Office, both copies are always kept.)\r\n\r\nIf you enable this setting or do not configure this setting, users can decide if they want to merge changes or keep both copies. Users can also select in OneDrive sync app settings to keep both copies.\r\n\r\nIf you disable this setting, both copies of the file will be kept when versions of a file conflict. Users won't be able to change the setting and merge changes.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_enableholdthefile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_enableholdthefile_1","displayName":"Enabled","description":null,"helpText":null}]},"ea2f93ec14417d44":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_largepstsizetodisableaddingnewcontent_l_entersizetodisableaddingnewcontenttopstinmegabytes2","displayName":"(0 - 4,294,967,295 MB) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":null},"ea01aa9ff64da1ac":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_checkforgottenattachments","displayName":"Attachment Reminder Options (User)","description":"This policy setting governs the enabling or disabling of the Attachment Reminder feature in Outlook.\r\n\r\nIf you enable or do not configure this policy setting, when a user sends an email, Outlook looks for any references to attachments in the email, and if no attachments are found, displays a dialog box to alert the user.\r\n\r\nIf you disable this policy setting, Outlook does not check for any references to attachments, and the Attachment Reminder dialog box does not pop up.","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_checkforgottenattachments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_checkforgottenattachments_1","displayName":"Enabled","description":null,"helpText":null}]},"ea609c74c8ef3950":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtoblockedsenderslist","displayName":"Specify path to Blocked Senders list (User)","description":"Specify a text file containing a list of e-mail addresses to append to or overwrite the Blocked Senders list (depending on the policy \"Overwrite or Append Junk Mail Import List\").","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtoblockedsenderslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtoblockedsenderslist_1","displayName":"Enabled","description":null,"helpText":null}]},"ea6254cd5d34569a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level1removefilepolicy_l_removedextensions","displayName":"Removed Extensions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":null},"eaf3af3abc741373":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjallowcelldragdrop","displayName":"Allow cell drag and drop (User)","description":"Allow fields in sheets to be moved using the mouse.\r\nIf you enable this setting, users can move rows and fields to new locations using the mouse.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"d33133b4-77df-429a-9580-ed70f7da676d","categoryName":"Edit options for Microsoft Project","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjallowcelldragdrop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjeditoptionsproj_l_pjallowcelldragdrop_1","displayName":"Enabled","description":null,"helpText":null}]},"ea235961fe91517b":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy","displayName":"VBA Macro Notification Settings (User)","description":"This policy setting controls how the specified applications warn users when Visual Basic for Applications (VBA) macros are present.\r\n\r\nIf you enable this policy setting, you can choose from four options for determining how the specified applications will warn the user about macros:\r\n \r\n- Disable all with notification: The application displays the Trust Bar for all macros, whether signed or unsigned. This option enforces the default configuration in Office.\r\n \r\n- Disable all except digitally signed macros: The application displays the Trust Bar for digitally signed macros, allowing users to enable them or leave them disabled. Any unsigned macros are disabled, and users are not notified.\r\n \r\n- Disable all without notification: The application disables all macros, whether signed or unsigned, and does not notify users.\r\n \r\n- Enable all macros (not recommended): All macros are enabled, whether signed or unsigned. This option can significantly reduce security by allowing dangerous code to run undetected.\r\n \r\nIf you disable this policy setting, \"Disable all with notification\" will be the default setting.\r\n \r\nIf you do not configure this policy setting, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking \"Enable Content\" on the Trust Bar. If the user clicks \"Enable Content\", then the document is added as a trusted document.\r\n \r\nImportant: If \"Disable all except digitally signed macros\" is selected, users will not be able to open unsigned Access databases.\r\n \r\nAlso, note that Microsoft Office stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Microsoft Office still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store.\r\n \r\nTherefore, if you created a list of trusted publishers in a previous version of Microsoft Office and you upgrade to Office, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store.","helpText":"","infoUrls":[],"categoryId":"30da5d88-cf03-41f4-ab55-51ead91b3844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"ea6b4e6c96f9cdd4":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize98_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"d5b3cab7-d486-4f74-8525-6bd740b950bc","categoryName":"Customizable Error Messages","options":null},"eadc96be3a71c162":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation_l_setdefaultcompatibilitymodeonfilecreationdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation_l_setdefaultcompatibilitymodeonfilecreationdropid_11","displayName":"Word 2003","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation_l_setdefaultcompatibilitymodeonfilecreationdropid_12","displayName":"Word 2007","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation_l_setdefaultcompatibilitymodeonfilecreationdropid_14","displayName":"Word 2010","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_setdefaultcompatibilitymodeonfilecreation_l_setdefaultcompatibilitymodeonfilecreationdropid_15","displayName":"Full functionality mode","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/eb.json b/public/intune-definitions/eb.json new file mode 100644 index 000000000000..35206400b192 --- /dev/null +++ b/public/intune-definitions/eb.json @@ -0,0 +1 @@ +{"ebd32cc225e570af":{"id":"com.apple.applicationaccess_deniediccidsforimessagefacetime","displayName":"Denied ICCIDs For iMessage And FaceTime","description":"An array of strings representing ICCIDs of cellular plans. The device prevents use of any matching cellular networks in iMessage and FaceTime. The array must contain no more than 4 ICCID strings.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"eb96d85effad348c":{"id":"com.apple.applicationaccess_enforcedsoftwareupdateminorosdeferredinstalldelay","displayName":"Enforced Software Update Minor OS Deferred Install Delay (Deprecated)","description":"This restriction allows the admin to set how many days to delay a minor OS software update on the device. When this restriction is in place the user see a software update only after the specified delay after the release of the software update. This value controls the delay for Force Delayed Software Updates. Available in macOS 11.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"eb26408356975aee":{"id":"com.apple.configurationprofile.identification_payloadidentification_password","displayName":"Password","description":"The password for the account. Required when the Auth Method is of type password.","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":null},"eb25ed4a3c81816e":{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_enabled","displayName":"Enabled","description":"If true, enable these settings. ","helpText":null,"infoUrls":[],"categoryId":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","categoryName":"Parental Controls Time Limits","options":[{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_enabled_true","displayName":"True","description":null,"helpText":null}]},"eb8fd645235a7d4c":{"id":"com.apple.gamed_com.apple.gamed","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"7ecdd7c9-6ab2-4dac-88ef-9bdad46e1f66","categoryName":"Parental Controls Game Center","options":null},"eb8b19d967dd11f5":{"id":"com.apple.loginwindow_disableconsoleaccess","displayName":"Disable Console Access","description":"If true, disregards the >console special user name, which will provide a command line UI.","helpText":null,"infoUrls":[],"categoryId":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","categoryName":"Login Window Behavior","options":[{"id":"com.apple.loginwindow_disableconsoleaccess_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.loginwindow_disableconsoleaccess_true","displayName":"True","description":null,"helpText":null}]},"eb423d301a6d256a":{"id":"com.apple.managedclient.preferences_defaultemailaddressordomain","displayName":"Default domain name","description":"Specify the domain or full email address of the Microsoft 365 mailbox to be added on first launch (e.g. contoso.com or fred@contoso.com).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#specify-microsoft-365-mailbox-to-be-added-on-first-launch"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":null},"eb56cd8bc81dc6d7":{"id":"com.apple.managedclient.preferences_defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning (deprecated)","description":"This policy controls whether third-party storage partitioning is allowed by default.\n\nIf this policy is set to 1 - AllowPartitioning, or unset, third-party storage partitioning will be allowed by default. This default may be overridden for specific top-level origins by other means.\n\nIf this policy is set to 2 - BlockPartitioning, third-party storage partitioning will be disabled for all contexts.\n\nUse ThirdPartyStoragePartitioningBlockedForOrigins to disable third-party storage partitioning for specific top-level origins.\n\nThis feature will be removed starting in Microsoft Edge version 145. To ensure compatibility, use the requestStorageAccess method instead. For more information, see https://developer.mozilla.org/en-US/docs/Web/API/Document/requestStorageAccess.\n\nPolicy options mapping:\n\n* AllowPartitioning (1) = Allow third-party storage partitioning by default.\n\n* BlockPartitioning (2) = Disable third-party storage partitioning.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultthirdpartystoragepartitioningsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultthirdpartystoragepartitioningsetting_0","displayName":"Allow third-party storage partitioning by default.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultthirdpartystoragepartitioningsetting_1","displayName":"Disable third-party storage partitioning.","description":null,"helpText":null}]},"eb4388e6fbe521e7":{"id":"com.apple.managedclient.preferences_oopprintdriversallowed","displayName":"Out-of-process print drivers allowed","description":"This policy determines whether Microsoft Edge handles interactions with printer drivers through a separate service process.\n\nUsing a service process for tasks like querying available printers, retrieving print driver settings, and submitting documents to local printers improves browser stability and prevents UI freezing during Print Preview.\n\nEnabled or Not Set: Microsoft Edge will use a separate service process for these printing tasks.\n\nDisabled: Microsoft Edge will perform these printing tasks within the browser process.\n\nNote: This policy will be deprecated in the future once the transition to out-of-process print drivers is fully implemented.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#oopprintdriversallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_oopprintdriversallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_oopprintdriversallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"eb0cf11bf57da2d4":{"id":"com.apple.managedclient.preferences_sharepointonpremfrontdoorurl","displayName":"SharePoint Server Front Door URL","description":"Specifies the SharePoint Server 2019 on-premises URL that the OneDrive sync app should try to authenticate and sync against.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#sharepointonpremfrontdoorurl"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":null},"ebcaaf2d17c7da62":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_staticcode","displayName":"Static Code","description":"If `true`, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_staticcode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_staticcode_true","displayName":"Enabled","description":null,"helpText":null}]},"eb82e6e9a1d6e78a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting","displayName":"Set the default \"share additional operating system region\" setting","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\n\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting is shared with the web through the default JavaScript locale. If shared, websites can query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\n\nIf you set this policy to \"Limited\", the OS Regional format is shared only if its language part matches the Microsoft Edge display language.\n\nIf you set this policy to \"Always\", the OS Regional format is always shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months are displayed in one language while the surrounding text is displayed in another language.\n\nIf you set this policy to \"Never\", the OS Regional format is never shared.\n\nExample 1: In this example the OS Regional format is set to \"en-GB\", and the browser display language is set to \"en-US\". Then the OS Regional format is shared if the policy is set to \"Limited\", or \"Always\".\n\nExample 2: In this example the OS Regional format is set to \"es-MX\", and the browser display language is set to \"en-US\". Then the OS Regional format is shared if the policy is set to \"Always\"; however, the OS Regional format isn't shared if the policy is set to \"Limited\".\n\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282.\n\nPolicy options mapping:\n\n* Limited (0) = Limited\n\n* Always (1) = Always share the OS Regional format\n\n* Never (2) = Never share the OS Regional format\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_limited","displayName":"Limited","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_always","displayName":"Always share the OS Regional format","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_never","displayName":"Never share the OS Regional format","description":null,"helpText":null}]},"eb4a799f09701ddb":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters","displayName":"Lowercase Letters","description":"Use this policy setting to configure the use of lowercase letters in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one lowercase letter in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using lowercase letters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use lowercase letters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_0","displayName":"Allowed","description":"Allows the use of lowercase letters in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_1","displayName":"Required","description":"Requires the use of at least one lowercase letters in PIN.","helpText":null},{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_2","displayName":"Blocked","description":"Does not allow the use of lowercase letters in PIN.","helpText":null}]},"eb53864355c0a393":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity","displayName":"Password Complexity","description":"","helpText":"","infoUrls":[],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":[{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity_1","displayName":"Large letters","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity_2","displayName":"Large letters + small letters","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity_3","displayName":"Large letters + small letters + numbers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity_4","displayName":"Large letters + small letters + numbers + specials","description":null,"helpText":null}]},"ebf060ea0074d4c9":{"id":"device_vendor_msft_policy_config_admx_credentialproviders_excludedcredentialproviders","displayName":"Exclude credential providers","description":"This policy setting allows the administrator to exclude the specified\r\ncredential providers from use during authentication.\r\n\r\nNote: credential providers are used to process and validate user\r\ncredentials during logon or when authentication is required.\r\nWindows Vista provides two default credential providers:\r\nPassword and Smart Card. An administrator can install additional\r\ncredential providers for different sets of credentials\r\n(for example, to support biometric authentication).\r\n\r\nIf you enable this policy, an administrator can specify the CLSIDs\r\nof the credential providers to exclude from the set of installed\r\ncredential providers available for authentication purposes.\r\n\r\nIf you disable or do not configure this policy, all installed and otherwise enabled credential providers are available for authentication purposes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credentialproviders#admx-credentialproviders-excludedcredentialproviders"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_credentialproviders_excludedcredentialproviders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credentialproviders_excludedcredentialproviders_1","displayName":"Enabled","description":null,"helpText":null}]},"eb6921f661541250":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_registrationttl_dns_registrationttllabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":null},"eb68fe4bd8a9f1a8":{"id":"device_vendor_msft_policy_config_admx_msched_randomdelaypolicy_randomdelay","displayName":"Regular maintenance random delay","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"eb3194242c3d1788":{"id":"device_vendor_msft_policy_config_admx_nca_supportemail","displayName":"Support Email Address","description":"Specifies the e-mail address to be used when sending the log files that are generated by NCA to the network administrator. \r\n\r\nWhen the user sends the log files to the Administrator, NCA uses the default e-mail client to open a new message with the support email address in the To: field of the message, then attaches the generated log files as a .html file. The user can review the message and add additional information before sending the message.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-supportemail"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_supportemail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_supportemail_1","displayName":"Enabled","description":null,"helpText":null}]},"ebdc56d8f53bf10a":{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2","displayName":"Low battery notification action","description":"This policy setting specifies the action that Windows takes when battery capacity reaches the low battery notification level.\r\n\r\nIf you enable this policy setting, select one of the following actions:\r\n-Take no action\r\n-Sleep\r\n-Hibernate\r\n-Shut down\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dcbatterydischargeaction1-2"],"categoryId":"7226f8a2-c542-471a-8d9e-e0df527325d3","categoryName":"Notification Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcbatterydischargeaction1_2_1","displayName":"Enabled","description":null,"helpText":null}]},"eb8588d9200b6609":{"id":"device_vendor_msft_policy_config_admx_power_dcconnectivityinstandby_2","displayName":"Allow network connectivity during connected-standby (on battery)","description":"This policy setting allows you to control the network connectivity state in standby on modern standby-capable systems.\r\n\r\nIf you enable this policy setting, network connectivity will be maintained in standby.\r\n\r\nIf you disable this policy setting, network connectivity in standby is not guaranteed. This connectivity restriction currently applies to WLAN networks only, and is subject to change.\r\n\r\nIf you do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-dcconnectivityinstandby-2"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_dcconnectivityinstandby_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_dcconnectivityinstandby_2_1","displayName":"Enabled","description":null,"helpText":null}]},"eb07080108f73295":{"id":"device_vendor_msft_policy_config_admx_printing_nondomainprinters_ipprinters","displayName":"Number of TCP/IP printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"ebb8705d6e68b38e":{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration","displayName":"Customize message for Access Denied errors","description":"This policy setting specifies the message that users see when they are denied access to a file or folder. You can customize the Access Denied message to include additional text and links. You can also provide users with the ability to send an email to request access to the file or folder to which they were denied access.\r\n\r\nIf you enable this policy setting, users receive a customized Access Denied message from the file servers on which this policy setting is applied. \r\n\r\nIf you disable this policy setting, users see a standard Access Denied message that doesn't provide any of the functionality controlled by this policy setting, regardless of the file server configuration.\r\n\r\nIf you do not configure this policy setting, users see a standard Access Denied message unless the file server is configured to display the customized Access Denied message. By default, users see the standard Access Denied message.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-srmfci#admx-srmfci-accessdeniedconfiguration"],"categoryId":"32180186-7378-4d45-b0cc-c533a124bdbc","categoryName":"Access- Denied Assistance","options":[{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_srmfci_accessdeniedconfiguration_1","displayName":"Enabled","description":null,"helpText":null}]},"eb05c0dc934dac51":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_license_servers_ts_license_edit","displayName":"License servers to use:","description":"\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":[],"categoryId":"4b540860-0858-48f4-8830-18383bb1766f","categoryName":"Licensing","options":null},"ebb410bf896d3642":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect_ts_select_network_detect_level","displayName":"Select Network Detect Level","description":null,"helpText":"","infoUrls":[],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect_ts_select_network_detect_level_0","displayName":"Use both Connect Time Detect and Continuous Network Detect","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect_ts_select_network_detect_level_1","displayName":"Turn off Connect Time Detect","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect_ts_select_network_detect_level_2","displayName":"Turn off Continuous Network Detect","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_network_detect_ts_select_network_detect_level_3","displayName":"Turn off Connect Time Detect and Continuous Network Detect","description":null,"helpText":null}]},"eb1a66d6a7843285":{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpscan","displayName":"Set Windows File Protection scanning (Windows Insiders only)","description":"This policy setting allows you to set when Windows File Protection scans protected files. This policy setting directs Windows File Protection to enumerate and scan all system files for changes.\r\n\r\nIf you enable this policy setting, select a rate from the \"Scanning Frequency\" box. You can use this setting to direct Windows File Protection to scan files more often.\r\n\r\n-- \"Do not scan during startup,\" the default, scans files only during setup.\r\n\r\n-- \"Scan during startup\" also scans files each time you start Windows XP. This setting delays each startup.\r\n\r\nIf you disable or do not configure this policy setting, by default, files are scanned only during setup.\r\n\r\nNote: This policy setting affects file scanning only. It does not affect the standard background file change detection that Windows File Protection provides.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsfileprotection#admx-windowsfileprotection-wfpscan"],"categoryId":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","categoryName":"Windows File Protection","options":[{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpscan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpscan_1","displayName":"Enabled","description":null,"helpText":null}]},"ebc2078bae0d93a7":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions","displayName":"Configuration settings format","description":"Select Enter XML data to type or paste an XML property list that contains your Application Control policy. Select Use built-in controls to choose from toggles exposed in this Application Control policy. Setting this to Not Configured will result in default behaviour on the device with no added options from the ApplicationControl CSP on the device.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":[{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_uploadxml","displayName":"Enter xml data","description":"Enter xml data","helpText":null},{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_builtincontrols","displayName":"Use built-in controls","description":"Use built-in controls","helpText":null}]},"ebbc3552614c7b7c":{"id":"device_vendor_msft_policy_config_appvirtualization_allowappvclient","displayName":"Enable App-V Client","description":"This policy setting allows you to enable or disable Microsoft Application Virtualization (App-V) feature. Reboot is needed for disable to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-allowappvclient"],"categoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","categoryName":"App-V","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_allowappvclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_allowappvclient_1","displayName":"Enabled","description":null,"helpText":null}]},"ebb3e525c57f6f58":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible","displayName":"Show history clusters on the Chrome history page","description":"This policy controls the visibility of history clusters on the Chrome history page.\r\n\r\nIf the policy is set to Enabled, history clusters will be visible at chrome://history/journeys.\r\n\r\nIf the policy is set to Disabled, history clusters will not be visible at chrome://history/journeys.\r\n\r\nIf the policy is left unset, history clusters will be visible at chrome://history/journeys by default and users can change the visibility of history clusters.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"eb21d117fc2be750":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended","displayName":"Set download directory","description":"Setting the policy sets up the directory Chrome uses for downloading files. It uses the provided directory, whether or not users specify one or turned on the flag to be prompted for download location every time.\r\n\r\nLeaving the policy unset means Chrome uses the default download directory, and users can change it.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"eb60a9109852f676":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended","displayName":"Import browsing history from default browser on first run","description":"Setting the policy to Enabled imports browsing history from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no browsing history is imported on first run.\r\n\r\nUsers can trigger an import dialog and the browsing history checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ebb5e1f97784120d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings","displayName":"Tab Compare settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_0","displayName":"Allow Tab Compare and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_1","displayName":"Allow Tab Compare without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_2","displayName":"Do not allow Tab Compare.","description":null,"helpText":null}]},"ebba98291d0319da":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"ebd5b42a98c8d839":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominfilesizetocache","displayName":"DO Min File Size To Cache","description":"Specifies the minimum content file size in MB eligible to use P2P.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominfilesizetocache"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"eb3113a4cabaa880":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate","displayName":"Restricted Sites","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_4","displayName":"High","description":null,"helpText":null}]},"eb200d8c09afe795":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\n\nIf you enable this policy setting, the user can run scriptlets.\n\nIf you disable this policy setting, the user cannot run scriptlets.\n\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowscriptlets"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},"ebfd5219d3a9e44b":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled","displayName":"Use hardware acceleration when available","description":"Specify to use hardware acceleration, if it's available. If you enable this policy or don't configure it, hardware acceleration is enabled unless a GPU feature is explicitly blocked.\r\n\r\nIf you disable this policy, hardware acceleration is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"eb50b66ee20421ad":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_homepagelocation","displayName":"Home page URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":null},"ebc0473a67bcbec8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_securitykeypermitattestationdesc","displayName":"Websites or domains that don't need permission to use direct Security Key attestation (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"eb6022542b03c576":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup","displayName":"Disable CNAME lookup when negotiating Kerberos authentication","description":"Determines whether the generated Kerberos SPN is based on the canonical DNS name (CNAME) or on the original name entered.\r\n\r\nIf you enable this policy, CNAME lookup is skipped and the server name (as entered) is used.\r\n\r\nIf you disable this policy or don't configure it, the canonical name of the server is used. This is determined through CNAME lookup.","helpText":"","infoUrls":[],"categoryId":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_1","displayName":"Enabled","description":null,"helpText":null}]},"eb2c44054c8b59fd":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled","displayName":"Enable the linked account feature","description":"Microsoft Edge guides a user to the account management page where they can link a Microsoft Account (MSA) to an Azure Active Directory (Azure AD) account.\r\n\r\nIf you enable or don't configure this policy, linked account information will be shown on a flyout. When the Azure AD profile doesn't have a linked account it will show \"Add account\".\r\n\r\nIf you disable this policy, linked accounts will be turned off and no extra information will be shown.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"eb92c754ed98dd3c":{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_definepreferredlanguages","displayName":"Define an ordered list of preferred languages that websites should display in if the site supports the language (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ebb19efe30367242":{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout","displayName":"Specify Shell Timeout","description":"\nThis policy setting is deprecated and has no effect when set to any state: Enabled, Disabled, or Not Configured.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifyshelltimeout"],"categoryId":"f69e6993-2e88-4938-bfe5-cea9ab21a858","categoryName":"Windows Remote Shell","options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"eb76ba2bc55d1581":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"eb8d3f1fd887e912":{"id":"device_vendor_msft_policy_config_userrights_changesystemtime","displayName":"Change System Time","description":"This user right determines which users and groups can change the time and date on the internal clock of the computer. Users that are assigned this user right can affect the appearance of event logs. If the system time is changed, events that are logged will reflect this new time, not the actual time that the events occurred.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#changesystemtime"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"ebb1f3f7b9398e91":{"id":"device_vendor_msft_policy_config_wifi_allowwifidirect","displayName":"Allow Wi Fi Direct","description":"Allow WiFi Direct connection. .","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowwifidirect"],"categoryId":"0a803a48-789a-48b0-b928-e52d56ab17f1","categoryName":"Wi-Fi Settings","options":[{"id":"device_vendor_msft_policy_config_wifi_allowwifidirect_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowwifidirect_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"ebc802650b622a75":{"id":"linux_mdatp_managed_antivirusengine_maximumondemandscanthreads","displayName":"maximum on demand scan threads","description":"Specify the maximum number of number of threads used to perform the on demand scan.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#maximum-number-of-items-in-the-antivirus-scan-history"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"ebe90c1c08b3f521":{"id":"settings_item_defaultapplications_calling","displayName":"Calling","description":"The bundle identifier of the app that the system sets as the default calling app. This app must be an eligible calling app.","helpText":null,"infoUrls":[],"categoryId":"b32726b3-b0e9-465b-86f8-b61ad8af52f0","categoryName":"Default Applications","options":null},"eb7a8e1ca703daf1":{"id":"user_vendor_msft_agentgovernance","displayName":"Agent Governance","description":"Agent Governance policy for configuring AI agent containment settings.","helpText":"","infoUrls":[],"categoryId":"ea5fabb0-6eec-4c3e-8c6d-7523739207c3","categoryName":null,"options":null},"eb243e073539895a":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery","displayName":"Enable Pin Recovery (User)","description":"If the user forgets their PIN, it can be changed to a new PIN using the Windows Hello for Business PIN recovery service. This cloud service encrypts a recovery secret which is stored locally on the client, but which can only be decrypted by the cloud service.\n\nIf you enable this policy setting, the PIN recovery secret will be stored on the device and the user will be able to change to a new PIN in case their PIN is forgotten.\n\nIf you disable or do not configure this policy setting, the PIN recovery secret will not be created or stored. If the user's PIN is forgotten, the only way to get a new PIN is by deleting the existing PIN and creating a new one, which will require the user to re-register with any services the old PIN provided access to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_false","displayName":"false","description":"Disabled","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_true","displayName":"true","description":"Enabled","helpText":null}]},"ebad1a5b13ca1d41":{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werupdatecheck","displayName":"Number of days between solution check reminders: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"1551f6d3-415c-44a8-b184-393de7c42adf","categoryName":"Advanced Error Reporting Settings","options":null},"eb4716527670ab04":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync","displayName":"Do not synchronize Windows Apps (User)","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings for Windows apps.\r\nBy default, the UE-V Agent synchronizes settings for Windows apps between the computer and the settings storage location. \r\nIf you enable this policy setting, the UE-V Agent will not synchronize settings for Windows apps.\r\nIf you disable this policy setting, the UE-V Agent will synchronize settings for Windows apps. \r\nIf you do not configure this policy setting, any defined values are deleted.\r\nNote: If the user connects their Microsoft account for their computer then the UE-V Agent will not synchronize Windows apps. The Windows apps will default to whatever settings are configured in the Sync your settings configuration in Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-disablewin8sync"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync_1","displayName":"Enabled","description":null,"helpText":null}]},"ebc1a95a6e7718c8":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation","displayName":"Location where all default Library definition files for users/machines reside. (User)","description":"\r\nThis policy setting allows you to specify a location where all default Library definition files for users/machines reside.\r\n\r\nIf you enable this policy setting, administrators can specify a path where all default Library definition files for users reside. The user will not be allowed to make changes to these Libraries from the UI. On every logon, the policy settings are verified and Libraries for the user are updated or changed according to the path defined.\r\n\r\nIf you disable or do not configure this policy setting, no changes are made to the location of the default Library definition files.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-defaultlibrarieslocation"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_1","displayName":"Enabled","description":null,"helpText":null}]},"ebdf096e6883115b":{"id":"user_vendor_msft_policy_config_browser_configureadditionalsearchengines","displayName":"Configure Additional Search Engines (User)","description":"Allows you to add up to 5 additional search engines for MDM-enrolled devices. If this setting is turned on, you can add up to 5 additional search engines for your employee. For each additional search engine you wish to add, you must specify a link to the OpenSearch XML file that contains, at minimum, the short name and the URL to the search engine. This policy does not affect the default search engine. Employees will not be able to remove these search engines, but they can set any one of these as the default. If this setting is not configured, the search engines are the ones specified in the App settings. If this setting is disabled, the search engines you had added will be deleted from your employee's machine. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configureadditionalsearchengines"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"eb369d1b95ef0e64":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability","displayName":"Incognito mode availability (User)","description":"Specifies whether the user may open pages in Incognito mode in Google Chrome.\r\n\r\nIf 'Enabled' is selected or the policy is left unset, pages may be opened in Incognito mode.\r\n\r\nIf 'Disabled' is selected, pages may not be opened in Incognito mode.\r\n\r\nIf 'Forced' is selected, pages may be opened ONLY in Incognito mode. Note that 'Forced' does not work for Android-on-Chrome\r\n\r\nNote: On iOS, if the policy is changed during a session, it will only take effect on relaunch.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"ebe2d311ff0e7473":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI (User)","description":"Controls print image resolution when Google Chrome prints PDFs with rasterization.\r\n\r\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution will significantly increase the processing and printing time while a low resolution can lead to poor imaging quality.\r\n\r\nThis policy allows a particular resolution to be specified for use when rasterizing PDFs for printing.\r\n\r\nIf this policy is set to zero or not set at all then the system default resolution will be used during rasterization of page images.","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_1","displayName":"Enabled","description":null,"helpText":null}]},"eb5119280d9f2a5c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins","displayName":"Allow running plugins that are outdated (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins_1","displayName":"Enabled","description":null,"helpText":null}]},"eb7ad34d320df9c7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_l_otherdatasourcefilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_l_otherdatasourcefilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_l_otherdatasourcefilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null}]},"ebd059cca1f02992":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting","displayName":"Default Adobe Flash setting (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_2","displayName":"Block the Adobe Flash plugin","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_3","displayName":"Click to play","description":null,"helpText":null}]},"eb2ac6cf51ef90d7":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"eb2a750a8a5b1d10":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver","displayName":"Configure address or URL of proxy server (User)","description":"Specifies the URL of the proxy server.\r\n\r\nThis policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, the proxy server configured by this policy will be used for all URLs.\r\n\r\nIf you disable or don't configure this policy, users can choose their own proxy settings while in this proxy mode. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor more options and detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: 123.123.123.123:8080","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},"eb1397a75a8b2f4b":{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled","displayName":"Enable Read Aloud feature in Microsoft Edge (User)","description":"Enables the Read Aloud feature within Microsoft Edge.\r\nUsing this feature, users can listen to the content on the web page. This enables users to multi-task or improve their reading comprehension by hearing content at their own pace.\r\n\r\nIf you enable this policy or don't configure it, the Read Aloud option shows up in the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.\r\nIf you disable this policy, users can't access the Read Aloud feature from the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"eb2b79f183d8a8f4":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication (User)","description":"If enabled (or unset), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\r\n\r\nIf disabled, user-added TLS certificates from platform trust stores will not be used in path-building for TLS server authentication.","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"eb94885e0bcef466":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled","displayName":"Allow managed extensions to use the Enterprise Hardware Platform API (User)","description":"When this policy is set to enabled, extensions installed by enterprise policy are allowed to use the Enterprise Hardware Platform API.\r\nWhen this policy is set to disabled or isn't set, no extensions are allowed to use the Enterprise Hardware Platform API.\r\nThis policy also applies to component extensions.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},"eb438cdfd84ae1f2":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled","displayName":"Suggest similar pages when a webpage can’t be found (User)","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\r\n\r\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\r\n\r\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Suggest similar pages when a webpage can’t be found** toggle, which the user can switch on or off. Note that if you have enable this policy (AlternateErrorPagesEnabled), the Suggest similar pages when a webpage can’t be found setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the Suggest similar pages when a webpage can’t be found setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ebe82566a9566765":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled","displayName":"Allow personalization of ads, search and news by sending browsing history to Microsoft (User)","description":"This policy prevents Microsoft from collecting a user's Microsoft Edge browsing history to be used for personalizing advertising, search, news and other Microsoft services.\r\n\r\nThis setting is only available for users with a Microsoft account. This setting is not available for child accounts or enterprise accounts.\r\n\r\nIf you disable this policy, users can't change or override the setting. If this policy is enabled or not configured, Microsoft Edge will default to the user’s preference.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ebbef6498a06cc9c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03","displayName":"Configure presentation service in PowerPoint and Word 4 (User)","description":"This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint.\r\n\r\nIf you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. \r\n\r\nIf you disable or do not configure this policy setting, the More services link displays only services that are manually added by users.","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice03_1","displayName":"Enabled","description":null,"helpText":null}]},"eb5cf2ccc65c9a2b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_database_l_databasedefaulttimeout_l_databasedefaulttimeoutdecimal","displayName":"Database default timeout (milliseconds) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"952f69c8-2644-48df-976b-01fd624cbb3a","categoryName":"Database","options":null},"eb76abe18037feb8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacebirthday","displayName":"Replace Label - Birthday (User)","description":"This policy setting allows you to change or remove the 16th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacebirthday_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacebirthday_1","displayName":"Enabled","description":null,"helpText":null}]},"ebbb400eb1c83235":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_firstrun_l_disablemovie","displayName":"Disable First Run Movie (User)","description":"This policy setting determines whether a video about signing-in to Office is played when Office first runs.\r\n\r\nIf you enable this policy setting, the video does not run during Office First Run.\r\n\r\nIf you disable or do not configure this policy setting, a video about signing-in to Office plays when Office first runs.","helpText":"","infoUrls":[],"categoryId":"72a7524b-11c5-4695-9fcf-6cf30c8ba2b9","categoryName":"First Run","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_firstrun_l_disablemovie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_firstrun_l_disablemovie_1","displayName":"Enabled","description":null,"helpText":null}]},"eb3cc107138840be":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sanskrit","displayName":"Sanskrit (User)","description":"Enables the editing language Sanskrit","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sanskrit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sanskrit_1","displayName":"Enabled","description":null,"helpText":null}]},"ebdc66c0d2795bfe":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishcolombia","displayName":"Spanish (Colombia) (User)","description":"Enables the editing language Spanish (Colombia)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishcolombia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishcolombia_1","displayName":"Enabled","description":null,"helpText":null}]},"eb627bb830bdb8fa":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swedishfinland","displayName":"Swedish (Finland) (User)","description":"Enables the editing language Swedish (Finland)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swedishfinland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_swedishfinland_1","displayName":"Enabled","description":null,"helpText":null}]},"ebdbbb7a7f289c1b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc13_l_descriptioncolon288","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"eb2481a663501b76":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesdocumentfiles","displayName":"Office document files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesdocumentfiles_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmpreventedsolutiontypes_l_officeosmpreventedsolutiontypesdocumentfiles_1","displayName":"True","description":null,"helpText":null}]},"ebc7c1b12ffe1bbf":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_securitysettings_l_allowedcomaddins_l_allowedcomaddinslist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"eb19561169656dc7":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableonenotescreenclippingnotifications","displayName":"Disable OneNote screen clipping notifications (User)","description":"Turns off all of the OneNote screen clipping notifications.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableonenotescreenclippingnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableonenotescreenclippingnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},"eb14581c64ce3f40":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationalertthreshold","displayName":"Specify activation disabling threshold for web extensions (User)","description":"This policy setting allows you to specify the threshold that Outlook refers to before disabling a web extension during activation. \r\n\r\nIf you enable this policy setting, you can specify a threshold (in milliseconds) for the activation manager retry limit during an Outlook session. If the web extension requires more than the specified threshold for the number of occurrences specified by the activation manager retry limit during an Outlook session, Outlook disables the web extension. \r\n\r\nIf you disable or do not configure this policy setting, Outlook uses the default activation alert threshold of 1000 milliseconds. The maximum activation alert threshold is 10000 milliseconds, and the minimum activation alert threshold is 100 milliseconds.","helpText":"","infoUrls":[],"categoryId":"c3db5686-3bb2-437c-8906-60da1a1fa844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationalertthreshold_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_outlookactivationalertthreshold_1","displayName":"Enabled","description":null,"helpText":null}]},"eb6af616db6f88dd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_imap_l_turnonpurgewhenswitchingfolders","displayName":"Turn on purge when switching folders (User)","description":"When \"purge on switch\" is enabled, IMAP e-mail messages marked for deletion in the current folder will be permanently removed from the server when the user switches to another folder. This setting will allow you to enable the IMAP \"purge on switch\" feature.","helpText":"","infoUrls":[],"categoryId":"63ca5d8b-829d-42c5-92e8-35f9ca47fb0e","categoryName":"IMAP","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_imap_l_turnonpurgewhenswitchingfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_imap_l_turnonpurgewhenswitchingfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"eb6d08a5c2acb260":{"id":"user_vendor_msft_policy_config_outlk16v9~policy~l_microsoftofficeoutlook~l_outlookoptions_l_specifymaxgroupssupported_l_specifymaxgroupssupportedid","displayName":"Groups Count: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","categoryName":"Outlook Options","options":null},"ebcdec3af58b1959":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_disableautosavewhencoauthoring","displayName":"Don’t automatically save changes when working in the same PowerPoint presentation as others (User)","description":"This policy setting controls whether changes are saved automatically when users are working together in the same presentation.\r\n\r\nBy default, when users are working together in the same presentation, changes are automatically saved. This allows users to see the edits made by others in real time. But, some add-ins or solutions might not be compatible with PowerPoint saving so frequently.\r\n\r\nIf you enable this policy setting, changes aren’t saved automatically and users won’t see real-time edits.\r\n\r\nIf you disable or don't configure this policy setting, changes are saved automatically and users will see real-time edits.\r\n\r\nNote: this policy setting doesn’t affect the AutoRecover settings configured under File > Options > Save.\r\n ","helpText":"","infoUrls":[],"categoryId":"ceacf7fa-fa6e-434d-a381-e20e5245d180","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_disableautosavewhencoauthoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_collaborationsettings~l_coauthoring_l_disableautosavewhencoauthoring_1","displayName":"Enabled","description":null,"helpText":null}]},"eb9a26c6069562ba":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsandcolumns","displayName":"Stop checking for blank table rows and columns (User)","description":"This policy setting prevents the Accessibility Checker from verifying that blank rows and columns have not been inserted into tables.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that blank rows and columns have not been inserted into tables.\r\n\r\nIf you disable or do not configure this policy setting, tables will be checked for blank rows and columns and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"f5babdb3-c718-4675-b977-6c7bc7e6f886","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsandcolumns_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsandcolumns_1","displayName":"Enabled","description":null,"helpText":null}]},"ebc5b15839d03878":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_disablesettopology","displayName":"Do not allow PowerPoint to automatically extend the display when presenting on a laptop or tablet (User)","description":"This policy setting specifies whether PowerPoint automatically extends the display when users present on a laptop or tablet computer.\r\n\r\nIf you enable this policy setting, PowerPoint does not automatically extend the display when users present on a laptop or tablet computer. In addition, the \"Automatically extend display when presenting on a laptop or tablet\" checkbox on the user interface (UI) under File | Options | Advanced | Display is unchecked.\r\n\r\nIf you disable or do not configure this policy setting, PowerPoint automatically extends the display when users present on a laptop or tablet computer. Users can change this behavior by unchecking the \"Automatically extend display when presenting on a laptop or tablet\" checkbox on the UI under File | Options | Advanced | Display","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_disablesettopology_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_disablesettopology_1","displayName":"Enabled","description":null,"helpText":null}]},"eb199a313d2f2165":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_defaultfilelocation","displayName":"Default file location (User)","description":"Specifies the default location for presentation files.","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_defaultfilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_defaultfilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"eb1de7090130a287":{"id":"user_vendor_msft_policy_config_ppt16v5~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_oleactions","displayName":"OLE Active Content (User)","description":"This policy setting controls the prompting and activation behavior for the \"OLE Active Content\" option in PowerPoint.\r\n\r\nIf you enable this policy setting, you can choose from three options to control how the \"OLE Active Content\" option functions:\r\n\r\n- Disable (don't activate any OLE Active Content). If users click an action button with the \"Object action\" action assigned to it, nothing will happen.\r\n\r\n- Enable (prompt user before activating OLE Active Content). If users click an action button with the \"Object action\" action assigned to it, PowerPoint will prompt them to continue before activating the action. This option enforces the default configuration in PowerPoint.\r\n\r\n- Enable all (allow activating OLE Active Content without prompting). If users click an action button with the \"Object action\" action assigned to it. PowerPoint will activate the action automatically, without prompting.\r\n\r\nIf you do not configure this policy setting, PowerPoint follows the Enable (prompt user before activating OLE Active Content) option.","helpText":"","infoUrls":[],"categoryId":"85810387-3320-4056-bae2-953beeb246f7","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_ppt16v5~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_oleactions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v5~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security_l_oleactions_1","displayName":"Enabled","description":null,"helpText":null}]},"eba12d53949a24ec":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_l_pjmonths12","displayName":"Months (User)","description":"","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_l_pjmonths12_0","displayName":"mo","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_l_pjmonths12_1","displayName":"mon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_l_pjmonths12_2","displayName":"month","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_l_pjmonths12_3","displayName":"\r\n ","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjmonths_l_pjmonths12_4","displayName":"\r\n ","description":null,"helpText":null}]},"ebbb5dd63c016ee0":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"eb99ed8551147e2e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4","displayName":"Color for split cells: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2f6205e9-8680-4b8f-97f3-be12e252e038","categoryName":"Track changes and compare","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_1","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_0","displayName":"By Author","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_2","displayName":"Pink","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_3","displayName":"Light blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_4","displayName":"Light yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_5","displayName":"Light purple","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_6","displayName":"Light Orange","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_7","displayName":"Light green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_trackchangesandcompare_l_tablecomparecolors_l_tablecomparecolorspart4_8","displayName":"Gray","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/ec.json b/public/intune-definitions/ec.json new file mode 100644 index 000000000000..7458fed5a3e4 --- /dev/null +++ b/public/intune-definitions/ec.json @@ -0,0 +1 @@ +{"ec21d8e290aa5bc3":{"id":"app_allowed_allowedbinaries_item_teamid","displayName":"Team ID","description":"The code signature team identifier of the binary. Use the value \"*APPLE*\" instead of an empty string for Apple binaries with an empty team identifier.","helpText":null,"infoUrls":[],"categoryId":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","categoryName":"App Settings","options":null},"ec9442bf8788ccae":{"id":"com.apple.directoryservice.managed_adtrustchangepassintervaldaysflag","displayName":"AD Trust Change Pass Interval Days Flag","description":"If true, enables the AD Trust Change Pass Interval Days key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adtrustchangepassintervaldaysflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adtrustchangepassintervaldaysflag_true","displayName":"True","description":null,"helpText":null}]},"ec7aea429a02e4c7":{"id":"com.apple.managedclient.preferences_additionaldnsquerytypesenabled","displayName":"Allow DNS queries for more DNS record types","description":"This policy controls whether Microsoft Edge can query more DNS record types when making insecure (non-Secure DNS) requests.\n\nIf this policy is unset or set to Enabled, more record types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).\n\nIf this policy is set to Disabled, Microsoft Edge will only query A and AAAA record types for insecure DNS requests.\n\nThis setting doesn't affect DNS queries made via Secure DNS, which may always use more record types.\n\nNote: This is a temporary policy and is planned for removal in a future version of Microsoft Edge. After removal, Microsoft Edge will always be able to query more DNS types during insecure requests.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#additionaldnsquerytypesenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_additionaldnsquerytypesenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_additionaldnsquerytypesenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"ec844d5f5bc35332":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_application id","displayName":"Microsoft Edge Dev Application ID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"ec900ee31427a7ed":{"id":"com.apple.managedclient.preferences_maximumondemandscanthreads","displayName":"Degree of parallelism for on-demand scans","description":"Specifies the degree of parallelism for on-demand scans. This corresponds to the number of threads used to perform the scan and impacts the CPU usage, as well as the duration of the on-demand scan.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-preferences?view=o365-worldwide#degree-of-parallelism-for-on-demand-scans"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"ec6b53bcdef51e7a":{"id":"com.apple.managedclient.preferences_openatlogin","displayName":"Open at login","description":"Specifies whether OneDrive starts automatically when the user logs in.","helpText":null,"infoUrls":["https://learn.microsoft.com/sharepoint/deploy-and-configure-on-macos#openatlogin"],"categoryId":"19ba782c-3594-45da-b829-72b54f6d45c7","categoryName":"Microsoft OneDrive","options":[{"id":"com.apple.managedclient.preferences_openatlogin_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_openatlogin_true","displayName":"True","description":null,"helpText":null}]},"ece4a5d0dacfe0f6":{"id":"com.apple.managedclient.preferences_runallflashinallowmode","displayName":"Extend Adobe Flash content setting to all content","description":"If you enable this policy, all Adobe Flash content embedded in websites that are set to allow Adobe Flash in the content settings -- either by the user or by enterprise policy -- will run. This includes content from other origins and/or small content.\n\nTo control which websites are allowed to run Adobe Flash, see the specifications in the \"DefaultPluginsSetting\", \"PluginsAllowedForUrls\", and \"PluginsBlockedForUrls\" policies.\n\nIf you disable this policy or don't configure it, Adobe Flash content from other origins (from sites that aren't specified in the three policies mentioned immediately above) or small content might be blocked.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#runallflashinallowmode"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_runallflashinallowmode_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_runallflashinallowmode_true","displayName":"Allowed","description":null,"helpText":null}]},"ec6b19edefdf4f5c":{"id":"com.apple.systemconfiguration_proxies_gopherport","displayName":"Gopher Port","description":"The gopher proxy port. ","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"ec21b4754bd1be1c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecureformswarningsenabled","displayName":"Enable warnings for insecure forms (Deprecated)","description":"This policy controls the handling of insecure forms (forms submitted over HTTP) embedded in secure (HTTPS) sites in the browser.\nIf you enable this policy or don't set it, a full page warning is shown when an insecure form is submitted. Additionally, a warning bubble is shown next to the form fields when they're focused, and autofill will be disabled for those forms.\nIf you disable this policy, warnings won't be shown for insecure forms, and autofill works normally.\n\nThis policy may be removed as soon as Edge 132. The feature is enabled by default since Edge 131.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecureformswarningsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecureformswarningsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"ec49eb8fe9f8a52e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverride","displayName":"Prevent bypassing Microsoft Defender SmartScreen prompts for sites","description":"This policy setting lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.\n\nIf you enable this setting, users can't ignore Microsoft Defender SmartScreen warnings and they're blocked from continuing to the site.\n\nIf you disable or don't configure this setting, users can ignore Microsoft Defender SmartScreen warnings and continue to the site.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":null,"infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverride_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverride_true","displayName":"Enabled","description":null,"helpText":null}]},"ecf6e50ac4ca960a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.textpredictionenabled","displayName":"Text prediction enabled by default","description":"The Microsoft Turing service uses natural language processing to generate predictions for long-form editable text fields on web pages.\n\nIf you enable or don't configure this policy, text predictions are provided for eligible text fields.\n\nIf you disable this policy, text predictions aren't provided in eligible text fields. Sites may still provide their own text predictions.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.textpredictionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.textpredictionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"ec40dcd40c2b3d66":{"id":"device_vendor_msft_dmclient_provider_{providerid}","displayName":" Provider ID","description":"This node contains the URI-encoded value of the bootstrapped device management account’s Provider ID. Scope is dynamic. This value is set and controlled by the MDM server. As a best practice, use text that doesn’t require XML/URI escaping.","helpText":"","infoUrls":[],"categoryId":"80b21376-0e9a-4e5b-8a74-b672adbe94a8","categoryName":"Config Refresh","options":null},"ec145cb6447d5ab9":{"id":"device_vendor_msft_policy_config_admx_bits_bits_maxbandwidthv2_maintenance_bits_maintenancenormalprioritylimit","displayName":"Normal Priority Limit:","description":null,"helpText":"","infoUrls":[],"categoryId":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","categoryName":"Background Intelligent Transfer Service BITS","options":null},"ecfe0dcfaf324763":{"id":"device_vendor_msft_policy_config_admx_datacollection_commercialidpolicy_commercialidvalue","displayName":"Commercial Id:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"ecd6694ef09aafad":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_nochanges5","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_nochanges5_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_iem_cse_nochanges5_1","displayName":"True","description":null,"helpText":null}]},"ec1af73d88e6eef3":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_maxpackagesizeinbytes","displayName":"Package size threshold (in bytes):","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"ec5beec7c9f7af5a":{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogon","displayName":"Account Logon Logoff Audit Logon","description":"This policy setting allows you to audit events generated by user account logon attempts on the computer. Events in this subcategory are related to the creation of logon sessions and occur on the computer which was accessed. For an interactive logon, the security audit event is generated on the computer that the user account logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. The following events are included: Successful logon attempts. Failed logon attempts. Logon attempts using explicit credentials. This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch logon configurations, such as scheduled tasks or when using the RUNAS command. Security identifiers (SIDs) were filtered and not allowed to log on.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#accountlogonlogoff_auditlogon"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogon_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogon_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogon_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_accountlogonlogoff_auditlogon_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"ecb81a97b1f3ad0c":{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthorizationpolicychange","displayName":"Audit Authorization Policy Change","description":"This policy setting allows you to audit events generated by changes to the authorization policy such as the following: Assignment of user rights (privileges), such as SeCreateTokenPrivilege, that are not audited through the “Authentication Policy Change” subcategory. Removal of user rights (privileges), such as SeCreateTokenPrivilege, that are not audited through the “Authentication Policy Change” subcategory. Changes in the Encrypted File System (EFS) policy. Changes to the Resource attributes of an object. Changes to the Central Access Policy (CAP) applied to an object. If you configure this policy setting, an audit event is generated when an attempt to change the authorization policy is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when the authorization policy changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#policychange_auditauthorizationpolicychange"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthorizationpolicychange_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthorizationpolicychange_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthorizationpolicychange_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthorizationpolicychange_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"ece6e51a3c59926a":{"id":"device_vendor_msft_policy_config_authentication_configurewebcamaccessdomainnames","displayName":"Configure Webcam Access Domain Names","description":"Specifies a list of domains that are allowed to access the webcam in Web Sign-in based authentication scenarios.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#configurewebcamaccessdomainnames"],"categoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","categoryName":"Authentication","options":null},"eccc2b70aa852686":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop","description":"Setting the policy means Google Chrome tries to register itself with Chrome Browser Cloud Management. The value of this policy is an enrollment token you can retrieve from the Google Admin console.\r\n\r\nSee https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.\r\n\r\nExample value: 37185d02-e055-11e7-80c1-9a214cf093ae","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},"eca37eddd31cb28c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled","displayName":"Control the IntensiveWakeUpThrottling feature.","description":"When enabled the IntensiveWakeUpThrottling feature causes Javascript timers in background tabs to be aggressively throttled and coalesced, running no more than once per minute after a page has been backgrounded for 5 minutes or more.\r\n\r\nThis is a web standards compliant feature, but it may break functionality\r\non some websites by causing certain actions to be delayed by up to a\r\nminute. However, it results in significant CPU and battery savings when\r\nenabled. See https://bit.ly/30b1XR4 for more details.\r\n\r\nIf this policy is set to enabled then the feature will be force enabled, and\r\nusers will not be able to override this.\r\n\r\nIf this policy is set to disabled then the feature will be force disabled, and\r\nusers will not be able to override this.\r\n\r\nIf this policy is left unset then the feature will be controlled by its\r\nown internal logic, which can be manually configured by users.\r\n\r\nNote that the policy is applied per renderer process, with the most recent\r\nvalue of the policy setting in force when a renderer process starts. A full\r\nrestart is required to ensure that all loaded tabs receive a consistent\r\npolicy setting. It is harmless for processes to be running with different\r\nvalues of this policy.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ecfd86c32d82ab4f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab","displayName":"Keep last tab open in Chrome.","description":"Setting the policy to Enabled or leaving it unset has Google Chrome keep at least one tab open, after switching to an alternate browser.\r\n\r\nSetting the policy to Disabled has Google Chrome close the tab after switching to an alternate browser, even if it was the last tab. This causes Google Chrome to exit completely.","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab_1","displayName":"Enabled","description":null,"helpText":null}]},"ec7f9a43837d959f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup","displayName":"Action on startup (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_5","displayName":"Open New Tab Page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},"ecf04d50c528d1e3":{"id":"device_vendor_msft_policy_config_connectivity_allowusbconnection","displayName":"Allow USB Connection","description":"Note Currently, this policy is supported only in HoloLens 2, Hololens (1st gen) Commercial Suite, and HoloLens (1st gen) Development Edition. Enables USB connection between the device and a computer to sync files with the device or to use developer tools to deploy or debug applications. Changing this policy does not affect USB charging. Both Media Transfer Protocol (MTP) and IP over USB are disabled when this policy is enforced. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#allowusbconnection"],"categoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","categoryName":"Connectivity","options":[{"id":"device_vendor_msft_policy_config_connectivity_allowusbconnection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowusbconnection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"ec676264f639e0c5":{"id":"device_vendor_msft_policy_config_deliveryoptimization_domodifycachedrive","displayName":"DO Modify Cache Drive","description":"Specifies the drive that Delivery Optimization should use for its cache. The drive location can be specified using environment variables, drive letter or using a full path.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domodifycachedrive"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"ec92efe5ad31ece8":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_odfcdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":null},"ec2919636117ff1e":{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate","displayName":"Locked-Down Local Machine Zone","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},"ec41dcc56b630a7c":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"ecd7d69c319080e8":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszonejavapermissions"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"ec752caf20a71b1f":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways","displayName":"Microsoft Network Client Digitally Sign Communications Always","description":"Microsoft network client: Digitally sign communications (always) This security setting determines whether packet signing is required by the SMB client component. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB server is permitted. If this setting is enabled, the Microsoft network client will not communicate with a Microsoft network server unless that server agrees to perform SMB packet signing. If this policy is disabled, SMB packet signing is negotiated between the client and server. Default: Disabled. Important For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. To enable client-side SMB packet signing, set Microsoft network client: Digitally sign communications (if server agrees). Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later operating systems, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkclient_digitallysigncommunicationsalways"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways_0","displayName":"Disable","description":"Disable","helpText":null}]},"ec5c73078432d5db":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended","displayName":"Enable search suggestions","description":"Enables web search suggestions in Microsoft Edge's Address Bar and Auto-Suggest List and prevents users from changing this policy.\r\n\r\nIf you enable this policy, web search suggestions are used.\r\n\r\nIf you disable this policy, web search suggestions are never used, however local history and local favorites suggestions still appear. If you disable this policy, neither the typed characters, nor the URLs visited will be included in telemetry to Microsoft.\r\n\r\nIf this policy is left not set, search suggestions are enabled but the user can change that.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ec3d4042ee320af0":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagecontentenabled","displayName":"Allow Microsoft content on the new tab page","description":"This policy applies for Microsoft Edge to all profile types, namely unsigned local user profiles, profiles signed in using a Microsoft Account, profiles signed in using Active Directory and profiles signed in using Microsoft Entra ID. The Enterprise new tab page for profiles signed in using Microsoft Entra ID can be configured in the M365 admin portal, but this policy setting takes precedence, so any M365 admin portal configurations will be ignored.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge displays Microsoft content on the new tab page. The user can choose different display options for the content. These options include, but aren't limited to: Content off, Content visible on scroll, Headings only, and Content visible. Enabling this policy doesn't force content to be visible - the user can keep setting their own preferred content position.\r\n\r\nIf you disable this policy, Microsoft Edge doesn't display Microsoft content on the new tab page, the Content control in the NTP settings flyout is disabled and set to \"Content off\", and the Layout control in the NTP settings flyout is disabled and set to \"Custom\".\r\n\r\nRelated policies: 'NewTabPageAllowedBackgroundTypes' (Configure the background types allowed for the new tab page layout), 'NewTabPageQuickLinksEnabled' (Allow quick links on the new tab page)","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagecontentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagecontentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ece529b6921f339d":{"id":"device_vendor_msft_policy_config_printers_restrictdriverinstallationtoadministrators","displayName":"Limits print driver installation to Administrators","description":"\nDetermines whether users that aren't Administrators can install print drivers on this computer.\n\nBy default, users that aren't Administrators can't install print drivers on this computer.\n\nIf you enable this setting or do not configure it, the system will limit installation of print drivers to Administrators of this computer.\n\nIf you disable this setting, the system won't limit installation of print drivers to this computer.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-restrictdriverinstallationtoadministrators"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_printers_restrictdriverinstallationtoadministrators_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_restrictdriverinstallationtoadministrators_1","displayName":"Enabled","description":null,"helpText":null}]},"ec44e741b7ce53b6":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios","displayName":"Let Apps Access Radios","description":"This policy setting specifies whether Windows apps have access to control radios.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"eca20b8fed24c4c9":{"id":"device_vendor_msft_policy_config_start_hidepowerbutton","displayName":"Hide Power Button","description":"Enabling this policy hides the power button from appearing in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidepowerbutton"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_hidepowerbutton_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidepowerbutton_1","displayName":"Enabled","description":"Hide.","helpText":null}]},"ecc7792ccf45c4e7":{"id":"device_vendor_msft_policy_config_system_allowcommercialdatapipeline","displayName":"Allow Commercial Data Pipeline","description":"AllowCommercialDataPipeline controls whether Microsoft is a processor or controller for Windows diagnostic data collected from this device. If you enable this policy Microsoft will be the processor of Windows diagnostic data collected from the Windows device and the customer will be the controller. The device must be registered in Azure AD for this policy to succeed. If you disable or don't configure this policy setting, Microsoft will be the controller of Windows diagnostic data collected from this device. This policy only controls if Microsoft is a processor for Windows diagnostic data from this device. Configuring this setting does not change whether diagnostic data is collected or the ability of the user to change the level. To configure collection level please use the "Allow Diagnostic Data" policy, and to restrict users on this device from changing the diagnostic data level please use the "Configure diagnostic data opt-in settings user interface" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowcommercialdatapipeline"],"categoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","categoryName":"System","options":[{"id":"device_vendor_msft_policy_config_system_allowcommercialdatapipeline_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowcommercialdatapipeline_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},"ec5ebbdddd44ba3a":{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications_pol_defaultcreatedesktopshortcut","displayName":"Prevent Desktop Shortcut creation upon install default","description":"Lets you specify the default behavior for all channels for creating a desktop shortcut when Microsoft Edge is installed.\r\n\r\n If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.","helpText":"","infoUrls":[],"categoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications_pol_defaultcreatedesktopshortcut_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications_pol_defaultcreatedesktopshortcut_1","displayName":"Enabled","description":null,"helpText":null}]},"ecbe12c7cd0a9a88":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype","displayName":"Elevation type","description":"","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_self","displayName":"User confirmed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_automatic","displayName":"Automatic","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_deny","displayName":"Deny","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_supportarbitrated","displayName":"Support approved","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_userconfirmeduser","displayName":"Elevate as current user","description":null,"helpText":null}]},"ecc8e768dbe8d465":{"id":"intelligencesettings_apps_mail_allowsummary","displayName":"Allow Summary","description":"If `false`, disables Mail Summary.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_apps_mail_allowsummary_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_apps_mail_allowsummary_true","displayName":"True","description":null,"helpText":null}]},"ec442e6decc318e0":{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_linktoweb","displayName":"Link to Web Address (User)","description":"Permits or prohibits use of this snap-in.\n\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.\n\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted.\n\n To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited.\n\n To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.\n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-linktoweb"],"categoryId":"acb49e73-5a6a-479b-9d58-c3cd7f632e9b","categoryName":"Restricted Permitted snap-ins","options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_linktoweb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_linktoweb_1","displayName":"Enabled","description":null,"helpText":null}]},"ec6671a0a1fb3a5d":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_lbl_assignedofflinefileslist","displayName":"Files and Folders: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"ec40d905ca3e86b3":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_games","displayName":"Games (User)","description":"This policy setting configures the synchronization of user settings for the Games app.\r\nBy default, the user settings of Games sync between computers. Use the policy setting to prevent the user settings of Games from synchronizing between computers.\r\nIf you enable this policy setting, Games user settings continue to sync.\r\nIf you disable this policy setting, Games user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-games"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_games_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_games_1","displayName":"Enabled","description":null,"helpText":null}]},"ec5e7c5a01f7a319":{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize","displayName":"Limit profile size (User)","description":"This policy setting sets the maximum size of each user profile and determines the system's response when a user profile reaches the maximum size. This policy setting affects both local and roaming profiles.\r\n\r\nIf you disable this policy setting or do not configure it, the system does not limit the size of user profiles.\r\n\r\nIf you enable this policy setting, you can:\r\n\r\n-- Set a maximum permitted user profile size.\r\n-- Determine whether the registry files are included in the calculation of the profile size.\r\n-- Determine whether users are notified when the profile exceeds the permitted maximum size.\r\n-- Specify a customized message notifying users of the oversized profile.\r\n-- Determine how often the customized message is displayed.\r\n\r\nNote: In operating systems earlier than Microsoft Windows Vista, Windows will not allow users to log off until the profile size has been reduced to within the allowable limit. In Microsoft Windows Vista, Windows will not block users from logging off. Instead, if the user has a roaming user profile, Windows will not synchronize the user's profile with the roaming profile server if the maximum profile size limit specified here is exceeded.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-limitsize"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_1","displayName":"Enabled","description":null,"helpText":null}]},"ecbcdb06d873f903":{"id":"user_vendor_msft_policy_config_admx_wpn_nolockscreentoastnotification","displayName":"Turn off toast notifications on the lock screen (User)","description":"\r\n This policy setting turns off toast notifications on the lock screen.\r\n\r\n If you enable this policy setting, applications will not be able to raise toast notifications on the lock screen.\r\n\r\n If you disable or do not configure this policy setting, toast notifications on the lock screen are enabled and can be turned off by the administrator or user.\r\n\r\n No reboots or service restarts are required for this policy setting to take effect.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-nolockscreentoastnotification"],"categoryId":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","categoryName":"Notifications","options":[{"id":"user_vendor_msft_policy_config_admx_wpn_nolockscreentoastnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_nolockscreentoastnotification_1","displayName":"Enabled","description":null,"helpText":null}]},"ecb4e94243746799":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled","displayName":"Control the IntensiveWakeUpThrottling feature. (User)","description":"When enabled the IntensiveWakeUpThrottling feature causes Javascript timers in background tabs to be aggressively throttled and coalesced, running no more than once per minute after a page has been backgrounded for 5 minutes or more.\r\n\r\nThis is a web standards compliant feature, but it may break functionality\r\non some websites by causing certain actions to be delayed by up to a\r\nminute. However, it results in significant CPU and battery savings when\r\nenabled. See https://bit.ly/30b1XR4 for more details.\r\n\r\nIf this policy is set to enabled then the feature will be force enabled, and\r\nusers will not be able to override this.\r\n\r\nIf this policy is set to disabled then the feature will be force disabled, and\r\nusers will not be able to override this.\r\n\r\nIf this policy is left unset then the feature will be controlled by its\r\nown internal logic, which can be manually configured by users.\r\n\r\nNote that the policy is applied per renderer process, with the most recent\r\nvalue of the policy setting in force when a renderer process starts. A full\r\nrestart is required to ensure that all loaded tabs receive a consistent\r\npolicy setting. It is harmless for processes to be running with different\r\nvalues of this policy.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ec43df054b0b4576":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"This policy controls network prediction in Google Chrome. It controls DNS prefetching, TCP, and SSL preconnection and prerendering of webpages.\r\n\r\nIf you set the policy, users can't change it. Leaving it unset turns on network prediction, but the user can change it.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"ec03a794553785df":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods. (User)","description":"Allows you to set whether websites are allowed to check if the user has payment methods saved.\r\n\r\nIf this policy is set to disabled, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\r\n\r\nIf the setting is enabled or not set then websites are allowed to check if the user has payment methods saved.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ec821f36f4b3d2bb":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_safebrowsingallowlistdomainsdesc","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":null},"ecc0f500cbe8cbd2":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"ec9c6b539d48a2ab":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"ec22662c38791410":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun","displayName":"Automatically import another browser's data and settings at first run (User)","description":"If you enable this policy, all supported datatypes and settings from the specified browser will be silently and automatically imported at first run. During the First Run Experience, the import section will also be skipped.\r\n\r\nThe browser data from Microsoft Edge Legacy will always be silently migrated at the first run, irrespective of the value of this policy. You can use the following values for this policy:\r\n\r\n* 0 = Automatically imports all supported datatypes and settings from the default browser\r\n\r\n* 1 = Automatically imports all supported datatypes and settings from Internet Explorer\r\n\r\n* 2 = Automatically imports all supported datatypes and settings from Google Chrome\r\n\r\n* 3 = Automatically imports all supported datatypes and settings from Safari\r\n\r\n* 4 = Disables automatic import, and the import section of the first-run experience is skipped\r\n\r\n* 5 = Automatically imports all supported datatypes and settings from Mozilla Firefox\r\n\r\nIf this policy is set to the default value (0), then the datatypes corresponding to the default browser on the managed device will be imported.\r\n\r\nIf the browser specified as the value of this policy is not present in the managed device, Microsoft Edge will simply skip the import without any notification to the user.\r\n\r\nIf you set this policy to 'DisabledAutoImport' (4), the import section of the first-run experience is skipped entirely and Microsoft Edge doesn't import browser data and settings automatically.\r\n\r\nIf this policy is set to the value of Internet Explorer (1), the following datatypes will be imported from Internet Explorer:\r\n1. Favorites or bookmarks\r\n2. Saved passwords\r\n3. Search engines\r\n4. Browsing history\r\n5. Home page\r\n\r\nIf this policy is set to the value of Google Chrome (2), the following datatypes will be imported from Google Chrome:\r\n1. Favorites\r\n2. Saved passwords\r\n3. Addresses and more\r\n4. Payment info\r\n5. Browsing history\r\n6. Settings\r\n7. Pinned and Open tabs\r\n8. Extensions\r\n9. Cookies\r\n\r\nNote: For more details on what is imported from Google Chrome, please see https://go.microsoft.com/fwlink/?linkid=2120835\r\n\r\nIf this policy is set to the value of Safari (3), the following datatypes will be imported from Safari:\r\n1. Favorites or bookmarks\r\n2. Browsing history\r\n\r\nStarting with Microsoft Edge version 83, if this policy is set to the value of Mozilla Firefox (5), the following datatypes will be imported from Mozilla Firefox:\r\n1. Favorites or bookmarks\r\n2. Saved passwords\r\n3. Addresses and more\r\n4. Browsing History\r\n\r\nIf you want to restrict specific datatypes from getting imported on the managed devices, you can use this policy with other policies such as 'ImportAutofillFormData' (Allow importing of autofill form data), 'ImportBrowserSettings' (Allow importing of browser settings), 'ImportFavorites' (Allow importing of favorites), and etc.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_1","displayName":"Enabled","description":null,"helpText":null}]},"ec678a0adcf0fbb8":{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled","displayName":"Edge Wallet E-Tree Enabled (User)","description":"The Edge Wallet E-Tree feature in Microsoft Edge allows users to plant a E-Tree for their own.\r\n\r\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\r\n\r\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ecd4dbcd9ba36394":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastserviceserverurl9","displayName":"Service URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"ec6983605a923d13":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishguatemala","displayName":"Spanish (Guatemala) (User)","description":"Enables the editing language Spanish (Guatemala)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishguatemala_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_spanishguatemala_1","displayName":"Enabled","description":null,"helpText":null}]},"ec6983047595ebf3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tibetanprc","displayName":"Tibetan (PRC) (User)","description":"Enables the editing language Tibetan (PRC)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tibetanprc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tibetanprc_1","displayName":"Enabled","description":null,"helpText":null}]},"ecf949d5e56f4de7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_screenshot","displayName":"Allow including screenshot with Office Feedback (User)","description":"This policy setting manages whether the Office Feedback Tool (a.k.a. Send a Smile) allows the user to send a screenshot of their desktop with their feedback to Microsoft. The Office Feedback Tool allows users to provide Microsoft feedback regarding their positive and negative experiences when using Office.\r\n\r\nIf you enable this policy setting, the Office Feedback Tool will allow the user to send a screenshot of their desktop with their feedback to Microsoft.\r\n\r\nIf you disable this policy setting, the Office Feedback Tool will not allow the user to send a screenshot of their desktop with their feedback to Microsoft.\r\n\r\nIf you do not configure this policy setting, the behavior is the equivalent of setting the policy to \"Enabled\".","helpText":"","infoUrls":[],"categoryId":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_screenshot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_privacy~l_trustcenter_l_screenshot_1","displayName":"Enabled","description":null,"helpText":null}]},"ecd66ba1cb72460e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc20_l_descriptioncolon316","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"eca245923e3ac7eb":{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_onlytrustvbasignaturev3","displayName":"Only trust VBA macros that use V3 signatures (User)","description":"This policy setting controls whether only VBA macros that use V3 signatures can be trusted and run in the application.\r\n\r\nIf you enable this policy setting, only VBA macros that use V3 signatures can be trusted and run in the application.\r\n\r\nIf you enable this policy setting, we also recommend that you enable the “VBA Macro Notification Settings” policy setting for the application and then select the “Disable all except digitally signed macros” option.\r\n\r\nNote: Before enabling this policy setting, you should upgrade your existing VBA macros to use V3 signatures.\r\n\r\nIf you disable or don’t configure this policy setting, VBA macros signed with legacy signature schemes can be trusted and run in the application.","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_onlytrustvbasignaturev3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v8~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_onlytrustvbasignaturev3_1","displayName":"Enabled","description":null,"helpText":null}]},"ecc9141f90a11172":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_l_infoldersotherthantheinboxsavereplieswithoriginalmessage","displayName":"In folders other than the Inbox, save replies with original message (User)","description":"","helpText":"","infoUrls":[],"categoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","categoryName":"Advanced E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_l_infoldersotherthantheinboxsavereplieswithoriginalmessage_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions_l_moresavemessages_l_infoldersotherthantheinboxsavereplieswithoriginalmessage_1","displayName":"True","description":null,"helpText":null}]},"ec9c745076552aa6":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_pathcolon12","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"ec7bbd92849a0ac1":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel_l_pjsecuritylevel36","displayName":"Security Level (User)","description":"","helpText":"","infoUrls":[],"categoryId":"26dfd0a7-546b-4583-b0c7-85b98ac5a40c","categoryName":"Tools | Macro","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel_l_pjsecuritylevel36_1","displayName":"Low (not recommended)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel_l_pjsecuritylevel36_2","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel_l_pjsecuritylevel36_3","displayName":"High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_pjmacro_l_pjsecuritylevel_l_pjsecuritylevel36_4","displayName":"Very High","description":null,"helpText":null}]},"ec3b18d386a479f8":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_selectshapespartiallywithinarea","displayName":"Select shapes partially within area (User)","description":"If you select shapes by using a selection net(dragging a box around shapes on the drawing page), you can change the selection settings to also include shapes that are partially within the selection net.","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_selectshapespartiallywithinarea_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_selectshapespartiallywithinarea_1","displayName":"Enabled","description":null,"helpText":null}]},"ec610e0942e5045c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_savevisiofilesas","displayName":"Save Visio files as (User)","description":"Identifies the default file format in which Visio files are saved.","helpText":"","infoUrls":[],"categoryId":"73415dea-0103-4427-83c5-6c97bf81af1d","categoryName":"Save Documents","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_savevisiofilesas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_save~l_savedocuments_l_savevisiofilesas_1","displayName":"Enabled","description":null,"helpText":null}]},"ec87e50c03cd606d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc06_l_allowsubfolders31","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc06_l_allowsubfolders31_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc06_l_allowsubfolders31_1","displayName":"True","description":null,"helpText":null}]},"ec4b9803c263b32e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve","displayName":"Set maximum number of trust records to preserve (User)","description":"This policy setting allows you to specify the maximum number of trust records to preserve when the purge task detects that this application has trusted more than the number of trusted documents set by the \"Set maximum number of trusted documents\" policy setting.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of trust records to preserve, with an upper limit of 20000. Due to performance reasons, it is not recommended to set it to the upper limit.\r\n\r\nIf you disable or you do not configure this policy setting, the default value for of 400 is used.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_1","displayName":"Enabled","description":null,"helpText":null}]},"ec4bc82c7c9149e7":{"id":"vendor_msft_sharedpc_kioskmodeusertiledisplaytext","displayName":"Kiosk Mode User Tile Display Text","description":"Specifies the display text for the account shown on the sign-in screen which launches the app specified by KioskModeAUMID. If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/ed.json b/public/intune-definitions/ed.json new file mode 100644 index 000000000000..1bd3523357f3 --- /dev/null +++ b/public/intune-definitions/ed.json @@ -0,0 +1 @@ +{"eda31ac53cb7f431":{"id":"com.apple.applicationaccess_allowpassbookwhilelocked","displayName":"Allow Passbook While Locked","description":"If false, hides Passbook notifications from the lock screen. Available in iOS 6 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpassbookwhilelocked_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpassbookwhilelocked_true","displayName":"True","description":null,"helpText":null}]},"ed74aba5341c6467":{"id":"com.apple.applicationaccess_allowpodcasts","displayName":"Allow Podcasts","description":"If false, disables podcasts. Requires a supervised device. Available in iOS 8 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowpodcasts_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowpodcasts_true","displayName":"True","description":null,"helpText":null}]},"edf29db46ded028c":{"id":"com.apple.applicationaccess_forcelimitadtracking","displayName":"Force Limit Ad Tracking","description":"If true, limits ad tracking. Additionally, it disables app tracking and the Allow Apps To Request To Track setting. Available in iOS 7 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcelimitadtracking_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcelimitadtracking_true","displayName":"True","description":null,"helpText":null}]},"edeb5e8b545c80c8":{"id":"com.apple.configurationprofile.identification_payloadidentification_emailaddress","displayName":"Email Address","description":"The address for the account.","helpText":null,"infoUrls":[],"categoryId":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","categoryName":"Identification (Deprecated)","options":null},"ed673b0f01850daf":{"id":"com.apple.dock_static-apps_item_tile-data","displayName":"Tile Data","description":"The information about the Dock item.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"ed95391f981002ea":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app","displayName":"Microsoft Teams classic","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"ed3cc86dc9c30812":{"id":"com.apple.managedclient.preferences_externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog","description":"This policy controls whether the \"Always open\" checkbox is shown on external protocol launch confirmation prompts.\n\nIf you set this policy to True, when an external protocol confirmation prompt is shown, the user can select \"Always open\". The user won’t get any future confirmation prompts for this protocol.\n\nIf you set this policy to False, or the policy is unset, the \"Always open\" checkbox isn’t displayed. The user will be prompted for confirmation every time an external protocol is invoked.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#externalprotocoldialogshowalwaysopencheckbox"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_externalprotocoldialogshowalwaysopencheckbox_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_externalprotocoldialogshowalwaysopencheckbox_true","displayName":"Enabled","description":null,"helpText":null}]},"ed2de47a70f45585":{"id":"com.apple.tcc.configuration-profile-policy_services","displayName":"Services","description":"A dictionary whose keys are limited to the privacy policy control services. In the case of conflicting specifications, the most restrictive setting (deny) is used.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"ed3090aa4f0982e8":{"id":"com.apple.tcc.configuration-profile-policy_services_calendar_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"edc3505882f5196f":{"id":"com.apple.webcontent-filter_hidedenylisturls","displayName":"Hide Deny List UR Ls","description":"If `true`, the device hides the `DenyListURLs` item in the profiles that display in Settings > General > VPN & Device Management.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":[{"id":"com.apple.webcontent-filter_hidedenylisturls_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.webcontent-filter_hidedenylisturls_true","displayName":"Enabled","description":null,"helpText":null}]},"ede7f0715142855c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabled","displayName":"Enable default legacy SameSite cookie behavior setting (Obsolete)","description":"This policy doesn't work because it was only intended to serve only as a short-term mechanism to give enterprises more time to update their environments if they were found to be incompatible with the SameSite behavior change.\n\nIf you still require legacy cookie behavior, please use \"LegacySameSiteCookieBehaviorEnabledForDomainList\" to configure behavior on a per-domain basis.\n\nLets you revert all cookies to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute, and skips the scheme comparison when evaluating if two sites are same-site.\n\nIf you don't set this policy, the default SameSite behavior for cookies will depend on other configuration sources for the SameSite-by-default feature, the Cookies-without-SameSite-must-be-secure feature, and the Schemeful Same-Site feature. These features can also be configured by a field trial or the same-site-by-default-cookies flag, the cookies-without-same-site-must-be-secure flag, or the schemeful-same-site flag in edge://flags.\n\nPolicy options mapping:\n\n* DefaultToLegacySameSiteCookieBehavior (1) = Revert to legacy SameSite behavior for cookies on all sites\n\n* DefaultToSameSiteByDefaultCookieBehavior (2) = Use SameSite-by-default behavior for cookies on all sites\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabled_defaulttolegacysamesitecookiebehavior","displayName":"Revert to legacy SameSite behavior for cookies on all sites","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabled_defaulttosamesitebydefaultcookiebehavior","displayName":"Use SameSite-by-default behavior for cookies on all sites","description":null,"helpText":null}]},"ed0814c16f7fa37e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.strictermixedcontenttreatmentenabled","displayName":"Enable stricter treatment for mixed content (Obsolete)","description":"This policy doesn't work because it was only intended to be a short-term mechanism to give enterprises more time to update their web content if it was found to be incompatible with stricter mixed content treatment.\n\nThis policy controls the treatment for mixed content (HTTP content in HTTPS sites) in the browser.\n\nIf you set this policy to true or not set, audio and video mixed content is automatically upgraded to HTTPS (that is, the URL will be rewritten as HTTPS, without a fallback if the resource isn't available over HTTPS), and a 'Not Secure' warning is shown in the URL bar for image mixed content.\n\nIf you set the policy to false, auto upgrades are disabled for audio and video, and no warning is shown for images.\n\nThis policy doesn't affect other types of mixed content other than audio, video, and images.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.strictermixedcontenttreatmentenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.strictermixedcontenttreatmentenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"ed73a6ad1b79dac4":{"id":"device_vendor_msft_pkcsimportedcertificate_keystorageprovider","displayName":"Key storage provider (KSP)","description":"Select where you want to store the certificate’s key.","helpText":"","infoUrls":[],"categoryId":"b2b85670-5475-4148-ab3d-c4c86b4d5af0","categoryName":"PKCS imported certificate","options":null},"edd95c9060619ebe":{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatprevent16bitmach","displayName":"Prevent access to 16-bit applications","description":"Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this computer. This setting affects the launching of 16-bit applications in the operating system.\r\n\r\nYou can use this setting to turn off the MS-DOS subsystem, which will reduce resource usage and prevent users from running 16-bit applications. To run any 16-bit application or any application with 16-bit components, ntvdm.exe must be allowed to run. The MS-DOS subsystem starts when the first 16-bit application is launched. While the MS-DOS subsystem is running, any subsequent 16-bit applications launch faster, but overall resource usage on the system is increased.\r\n\r\nIf the status is set to Enabled, the MS-DOS subsystem is prevented from running, which then prevents any 16-bit applications from running. In addition, any 32-bit applications with 16-bit installers or other 16-bit components cannot run.\r\n\r\nIf the status is set to Disabled, the MS-DOS subsystem runs for all users on this computer.\r\n\r\nIf the status is set to Not Configured, the OS falls back on a local policy set by the registry DWORD value HKLM\\System\\CurrentControlSet\\Control\\WOW\\DisallowedPolicyDefault. If that value is non-0, this prevents all 16-bit applications from running. If that value is 0, 16-bit applications are allowed to run. If that value is also not present, on Windows 10 and above the OS will launch the 16-bit application support control panel to allow an elevated administrator to make the decision; on windows 7 and downlevel, the OS will allow 16-bit applications to run.\r\n\r\nNote: This setting appears in only Computer Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatprevent16bitmach"],"categoryId":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","categoryName":"Application Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatprevent16bitmach_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appcompat_appcompatprevent16bitmach_1","displayName":"Enabled","description":null,"helpText":null}]},"ed85201848e0b8e3":{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_forcedefaultlockscreen_lockscreenoverlaysdisabled","displayName":"Turn off fun facts, tips, tricks, and more on lock screen","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_forcedefaultlockscreen_lockscreenoverlaysdisabled_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_forcedefaultlockscreen_lockscreenoverlaysdisabled_1","displayName":"True","description":null,"helpText":null}]},"ed486e0f3dc77320":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_slowlink6","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_slowlink6_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_ipsecurity_cse_slowlink6_1","displayName":"True","description":null,"helpText":null}]},"ed646cf405b01c20":{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_ciphersuiteorder","displayName":"Cipher suite order","description":"This policy setting determines the cipher suites used by the SMB server.\r\n\r\nIf you enable this policy setting, cipher suites are prioritized in the order specified.\r\n\r\nIf you enable this policy setting and do not specify at least one supported cipher suite, or if you disable or do not configure this policy setting, the default cipher suite order is used.\r\n\r\nSMB 3.11 cipher suites:\r\n\r\nAES_128_GCM\r\nAES_128_CCM\r\n\r\nSMB 3.0 and 3.02 cipher suites:\r\n\r\nAES_128_CCM\r\n\r\nHow to modify this setting:\r\n\r\nArrange the desired cipher suites in the edit box, one cipher suite per line, in order from most to least preferred, with the most preferred cipher suite at the top. Remove any cipher suites you don't want to use.\r\n\r\nNote: When configuring this security setting, changes will not take effect until you restart Windows.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-lanmanserver#admx-lanmanserver-pol-ciphersuiteorder"],"categoryId":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","categoryName":"Lanman Server","options":[{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_ciphersuiteorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_lanmanserver_pol_ciphersuiteorder_1","displayName":"Enabled","description":null,"helpText":null}]},"eddac0df509017f1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_disablesignatureretirement","displayName":"Turn on definition retirement","description":"This policy setting allows you to configure definition retirement for network protection against exploits of known vulnerabilities. Definition retirement checks to see if a computer has the required security updates necessary to protect it against a particular vulnerability. If the system is not vulnerable to the exploit detected by a definition, then that definition is \"retired\". If all security intelligence for a given protocal are retired then that protocol is no longer parsed. Enabling this feature helps to improve performance. On a computer that is up-to-date with all the latest security updates, network protection will have no impact on network performance.\r\n\r\n If you enable or do not configure this setting, definition retirement will be enabled.\r\n\r\n If you disable this setting, definition retirement will be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-nis-consumers-ips-disablesignatureretirement"],"categoryId":"cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","categoryName":"Network Inspection System","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_disablesignatureretirement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_consumers_ips_disablesignatureretirement_1","displayName":"Enabled","description":null,"helpText":null}]},"edc98cf746aa86d1":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_missedscheduledscancountbeforecatchup","displayName":"Define the number of days after which a catch-up scan is forced","description":"\r\n This policy setting allows you to define the number of consecutive scheduled scans that can be missed after which a catch-up scan will be forced. By default, the value of this setting is 2 consecutive scheduled scans.\r\n\r\n If you enable this setting, a catch-up scan will occur after the specified number consecutive missed scheduled scans.\r\n\r\n If you disable or do not configure this setting, a catch-up scan will occur after the 2 consecutive missed scheduled scans.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-scan-missedscheduledscancountbeforecatchup"],"categoryId":"428f107c-2167-4bc2-9293-8f1d6728a0c5","categoryName":"Scan","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_missedscheduledscancountbeforecatchup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_scan_missedscheduledscancountbeforecatchup_1","displayName":"Enabled","description":null,"helpText":null}]},"edf07757d7248bf9":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_negativecacheperiod","displayName":"Specify negative DC Discovery cache setting","description":"This policy setting specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. When a subsequent attempt to locate the DC occurs within the time set in this setting, DC Discovery immediately fails, without attempting to find the DC.\r\n\r\nThe default value for this setting is 45 seconds. The maximum value for this setting is 7 days (7*24*60*60). The minimum value for this setting is 0.\r\n\r\nWarning: If the value for this setting is too large, a client will not attempt to find any DCs that were initially unavailable. If the value for this setting is too small, clients will attempt to find DCs even when none are available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-negativecacheperiod"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_negativecacheperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_negativecacheperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"edc06c75436dcb0c":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_pingurgencymode_netlogon_pingurgencymodelabel","displayName":"Ping urgency mode:","description":null,"helpText":"","infoUrls":[],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":null},"ed18b7e7655ef18a":{"id":"device_vendor_msft_policy_config_admx_printing_customizedsupporturl","displayName":"Custom support URL in the Printers folder's left pane","description":"By default, the Printers folder includes a link to the Microsoft Support Web page called \"Get help with printing\". It can also include a link to a Web page supplied by the vendor of the currently selected printer.\r\n\r\n If you enable this policy setting, you replace the \"Get help with printing\" default link with a link to a Web page customized for your enterprise.\r\n\r\n If you disable this setting or do not configure it, or if you do not enter an alternate Internet address, the default link will appear in the Printers folder.\r\n\r\n Note: Web pages links only appear in the Printers folder when Web view is enabled. If Web view is disabled, the setting has no effect. (To enable Web view, open the Printers folder, and, on the Tools menu, click Folder Options, click the General tab, and then click \"Enable Web content in folders.\")\r\n\r\n Also, see the \"Activate Internet printing\" setting in this setting folder and the \"Browse a common web site to find printers\" setting in User Configuration\\Administrative Templates\\Control Panel\\Printers.\r\n\r\n Web view is affected by the \"Turn on Classic Shell\" and \"Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon\" settings in User Configuration\\Administrative Templates\\Windows Components\\Windows Explorer, and by the \"Enable Active Desktop\" setting in User Configuration\\Administrative Templates\\Desktop\\Active Desktop.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-customizedsupporturl"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_customizedsupporturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_customizedsupporturl_1","displayName":"Enabled","description":null,"helpText":null}]},"ed9847960dad6060":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_max_con_policy_ts_maximum_connections_allowed","displayName":"RD Maximum Connections allowed","description":null,"helpText":"","infoUrls":[],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":null},"ed40ec95f0fa66d1":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_transport_ts_select_transport_type","displayName":"Select Transport Type","description":null,"helpText":"","infoUrls":[],"categoryId":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","categoryName":"Connections","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_transport_ts_select_transport_type_0","displayName":"Use both UDP and TCP","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_transport_ts_select_transport_type_1","displayName":"Use only TCP","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_select_transport_ts_select_transport_type_2","displayName":"Use either UDP or TCP","description":null,"helpText":null}]},"edfb9a075a9c3a40":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork","displayName":"Sync settings over metered connections","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections.\r\nBy default, the UE-V Agent does not synchronize settings over a metered connection.\r\nWith this setting enabled, the UE-V Agent synchronizes settings over a metered connection.\r\nWith this setting disabled, the UE-V Agent does not synchronize settings over a metered connection.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncovermeterednetwork"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"edbf3ac58cd3a48d":{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home","displayName":"Set user home folder","description":"This policy setting allows you to specify the location and root (file share or local path) of a user's home folder for a logon session.\r\n\r\nIf you enable this policy setting, the user's home folder is configured to the specified local or network location, creating a new folder for each user name.\r\n\r\nTo use this policy setting, in the Location list, choose the location for the home folder. If you choose “On the network,” enter the path to a file share in the Path box (for example, \\\\ComputerName\\ShareName), and then choose the drive letter to assign to the file share. If you choose “On the local computer,” enter a local path (for example, C:\\HomeFolder) in the Path box.\r\n\r\nDo not specify environment variables or ellipses in the path. Also, do not specify a placeholder for the user name because the user name will be appended at logon.\r\n\r\nNote: The Drive letter box is ignored if you choose “On the local computer” from the Location list. If you choose “On the local computer” and enter a file share, the user's home folder will be placed in the network location without mapping the file share to a drive letter.\r\n\r\nIf you disable or do not configure this policy setting, the user's home folder is configured as specified in the user's Active Directory Domain Services account.\r\n\r\nIf the \"Set Remote Desktop Services User Home Directory\" policy setting is enabled, the “Set user home folder” policy setting has no effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-user-home"],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_1","displayName":"Enabled","description":null,"helpText":null}]},"edf0e11e10001d71":{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_maxwcndevicenumber","displayName":"Maximum number of WCN devices allowed:","description":null,"helpText":"","infoUrls":[],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":null},"ed19cce337201071":{"id":"device_vendor_msft_policy_config_applicationdefaults_defaultassociationsconfiguration","displayName":"Default Associations Configuration","description":"This policy allows an administrator to set default file type and protocol associations. When set, default associations will be applied on sign-in to the PC. The association file can be created using the DISM tool (dism /online /export-defaultappassociations:appassoc. xml), and then needs to be base64 encoded before being added to SyncML. If policy is enabled and the client machine is Azure Active Directory joined, the associations assigned in SyncML will be processed and default associations will be applied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationDefaults#defaultassociationsconfiguration"],"categoryId":"ddcc8634-edc3-40ef-a444-45f806439c18","categoryName":"Application Defaults","options":null},"ed5c788644b25f37":{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdetaileddirectoryservicereplication","displayName":"DS Access Audit Detailed Directory Service Replication","description":"This policy setting allows you to audit events generated by detailed Active Directory Domain Services (AD DS) replication between domain controllers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#dsaccess_auditdetaileddirectoryservicereplication"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdetaileddirectoryservicereplication_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdetaileddirectoryservicereplication_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdetaileddirectoryservicereplication_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_dsaccess_auditdetaileddirectoryservicereplication_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"ed0702aa7fb8d5d8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_0","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_1","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_2","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},"ed4cba737da7a99f":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin","displayName":"Sets managed configuration values to websites to specific origins","description":"Setting the policy defines the return value of Managed Configuration API for given origin.\r\n\r\n Managed configuration API is a key-value configuration that can be accessed via navigator.managed.getManagedConfiguration() javascript call. This API is only available to origins which correspond to force-installed web applications via WebAppInstallForceList.\r\n\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedConfigurationPerOrigin for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"origin\": \"https://www.google.com\",\r\n \"managed_configuration_url\": \"https://gstatic.google.com/configuration.json\",\r\n \"managed_configuration_hash\": \"asd891jedasd12ue9h\"\r\n },\r\n {\r\n \"origin\": \"https://www.example.com\",\r\n \"managed_configuration_url\": \"https://gstatic.google.com/configuration2.json\",\r\n \"managed_configuration_hash\": \"djio12easd89u12aws\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_1","displayName":"Enabled","description":null,"helpText":null}]},"ed779fa98261b73c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting","displayName":"Default notification setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1","displayName":"Allow sites to show desktop notifications","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2","displayName":"Do not allow any site to show desktop notifications","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3","displayName":"Ask every time a site wants to show desktop notifications","description":null,"helpText":null}]},"ed001274637c1b2d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls_javascriptblockedforurlsdesc","displayName":"Block JavaScript on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"edac32f6321739aa":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx_vhd","displayName":"VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx_vhdx","displayName":"VHDX","description":null,"helpText":null}]},"edbb13f58f724e37":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode","description":"","helpText":"","infoUrls":[],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"ed6d23a61f1b806f":{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings","displayName":"Configure navigation settings per groups of URLs in Microsoft Edge Workspaces","description":"This setting lets you to define groups of URLs, and apply specific Microsoft Edge Workspaces navigation settings to each group.\r\n\r\nIf this policy is configured, Microsoft Edge Workspaces will use the configured settings when deciding whether and how to share navigations among collaborators in a Microsoft Edge Workspace.\r\n\r\nIf this policy is not configured, Microsoft Edge Workspaces will use only default and internally configured navigation settings.\r\n\r\nFor more information about configuration options, see https://go.microsoft.com/fwlink/?linkid=2218655\r\n\r\nNote, format url_patterns according to https://go.microsoft.com/fwlink/?linkid=2095322. You can configure the url_regex_patterns in this policy to match multiple URLs using a Perl style regular expression for the pattern. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"navigation_options\": {\r\n \"do_not_send_to\": true,\r\n \"remove_all_query_parameters\": true\r\n },\r\n \"url_patterns\": [\r\n \"https://contoso.com\",\r\n \"https://www.fabrikam.com\",\r\n \".exact.hostname.com\"\r\n ]\r\n },\r\n {\r\n \"navigation_options\": {\r\n \"query_parameters_to_remove\": [\r\n \"username\",\r\n \"login_hint\"\r\n ]\r\n },\r\n \"url_patterns\": [\r\n \"https://adatum.com\"\r\n ]\r\n },\r\n {\r\n \"navigation_options\": {\r\n \"do_not_send_from\": true,\r\n \"prefer_initial_url\": true\r\n },\r\n \"url_regex_patterns\": [\r\n \"\\\\Ahttps://.*?tafe\\\\..*?trs.*?\\\\.fabrikam.com/Sts\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","categoryName":"Edge Workspaces settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"ed6f39beb495d0ca":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended","displayName":"Default search provider keyword","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\r\n\r\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ed0347589002272e":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (obsolete)","description":"This policy lets you enhance the security state in Microsoft Edge.\r\n\r\nIf you set this policy to 'StandardMode', the enhanced mode will be turned off and Microsoft Edge will fallback to its standard security mode.\r\n\r\nIf you set this policy to 'BalancedMode', the security state will be in balanced mode.\r\n\r\nIf you set this policy to 'StrictMode', the security state will be in strict mode.\r\n\r\nIf you set this policy to 'BasicMode', the security state will be in basic mode.\r\n\r\nNote: Sites that use WebAssembly (WASM) are not supported on 32-bit systems when 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) is enabled. If you require access to a site that uses WASM, consider adding it to your exception list as described in https://go.microsoft.com/fwlink/?linkid=2183321.\r\n\r\nStarting in Microsoft Edge 113, 'BasicMode' is deprecated and is treated the same as 'BalancedMode'. It won't work in Microsoft Edge version 116.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895\r\n\r\nPolicy options mapping:\r\n\r\n* StandardMode (0) = Standard mode\r\n\r\n* BalancedMode (1) = Balanced mode\r\n\r\n* StrictMode (2) = Strict mode\r\n\r\n* BasicMode (3) = (Deprecated) Basic mode\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},"ed458a95528c77dc":{"id":"device_vendor_msft_policy_config_networklistmanager_configuredtlsauthenticationnetworkname","displayName":"Configured Tls Authentication Network Name","description":"The string will be used to name the network authenticated against one of the endpoints listed in AllowedTlsAuthenticationEndpoints policy","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkListManager#configuredtlsauthenticationnetworkname"],"categoryId":"7fc3275d-5ef6-4806-88b0-210bb175c182","categoryName":"Network List Manager","options":null},"ed4abfbdb11d9105":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mspubexe44","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mspubexe44_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mspubexe44_1","displayName":"True","description":null,"helpText":null}]},"ed48871f09537419":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_silentaccountconfig","displayName":"Silently sign in users to the OneDrive sync app with their Windows credentials","description":"This setting lets you silently sign in users to the OneDrive sync app (OneDrive.exe) with their Windows credentials.\r\n\r\nIf you enable this setting, users who are signed in on the PC with the primary Windows account (the account used to join the PC to the domain) can set up the sync app without entering the credentials for the account. Users will still be shown OneDrive Setup so they can select folders to sync and change the location of their OneDrive folder. If a user is using the previous OneDrive for Business sync app (Groove.exe), the new sync app will attempt to take over syncing the user's OneDrive from the previous app and preserve the user's sync settings. This setting is frequently used together with \"Set the maximum size of a user's OneDrive that can download automatically\" on PCs that don't have Files On-Demand, and \"Set the default location for the OneDrive folder.\"\r\n\r\nIf you disable or do not configure this setting, users will need to sign in with their work or school account to set up sync.\r\n\r\n","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_silentaccountconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_silentaccountconfig_1","displayName":"Enabled","description":null,"helpText":null}]},"edeebd3a10befdaa":{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig","displayName":"Disable silently sign in users to the OneDrive sync app with an existing credential that is made available to Microsoft applications","description":"This setting determines whether or not the Sync client can automatically sign in.\r\n\r\nIf admins enable this setting (value 1), it prevents Sync from automatically signing with an existing AAD credential that is made available to Microsoft applications.\r\n\r\nIf admins disable (value 0) or do not configure this setting, Sync will automatically sign in.\r\n ","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig_1","displayName":"Enabled","description":null,"helpText":null}]},"ed8101b445dc1632":{"id":"device_vendor_msft_policy_config_visualstudiov8~policy~visualstudio~installandupdatesettings_disablemigrationdialog","displayName":"Disable the dialog in the IDE that prompts users to stay on the latest version of Visual Studio.","description":"If this setting is enabled, it will prevent your users from seeing the dialog that prompts users to stay on the latest version in the Visual Studio IDE. For more information, see: https://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov8~policy~visualstudio~installandupdatesettings_disablemigrationdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov8~policy~visualstudio~installandupdatesettings_disablemigrationdialog_1","displayName":"Enabled","description":null,"helpText":null}]},"ed618e8b76432789":{"id":"passcode_customregex_description_generickey_keytobereplaced","displayName":"Description","description":"A dictionary with supported OS language IDs for the keys (such as `en-US`), and values that represent a localized description of the policy that the regular expression enforces. Use the special `default` key for languages that the dictionary doesn't contain.","helpText":null,"infoUrls":[],"categoryId":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","categoryName":"Passcode","options":null},"ed48bf696252f46d":{"id":"softwareupdate_recommendedcadence","displayName":"Recommendation Cadence","description":"Specifies how the device shows software updates to the user. When more than one update is available update, the device behaves as follows:\n* \"All\" - Shows all software update versions.\n* \"Oldest\" - Shows only the oldest (lower numbered) software update version.\n* \"Newest\" - Shows only the newest (highest numbered) software update version. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":[{"id":"softwareupdate_recommendedcadence_0","displayName":"All","description":null,"helpText":null},{"id":"softwareupdate_recommendedcadence_1","displayName":"Oldest","description":null,"helpText":null},{"id":"softwareupdate_recommendedcadence_2","displayName":"Newest","description":null,"helpText":null}]},"ed534ded997e46bb":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_descriptioncolon21","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"edf7fdc215c06562":{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnomultimon","displayName":"Do not allow taskbars on more than one display (User)","description":"This policy setting allows you to prevent taskbars from being displayed on more than one monitor.\r\n\r\nIf you enable this policy setting, users are not able to show taskbars on more than one display. The multiple display section is not enabled in the taskbar properties dialog.\r\n\r\nIf you disable or do not configure this policy setting, users can show taskbars on more than one display.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnomultimon"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnomultimon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnomultimon_1","displayName":"Enabled","description":null,"helpText":null}]},"ed49448bc3dedd8d":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodfstab","displayName":"Remove DFS tab (User)","description":"This policy setting allows you to remove the DFS tab from File Explorer.\r\n\r\nIf you enable this policy setting, the DFS (Distributed File System) tab is removed from File Explorer and from other programs that use the File Explorer browser, such as My Computer. As a result, users cannot use this tab to view or change the properties of the DFS shares available from their computer.\r\n\r\nThis policy setting does not prevent users from using other methods to configure DFS.\r\n\r\nIf you disable or do not configure this policy setting, the DFS tab is available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nodfstab"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodfstab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodfstab_1","displayName":"Enabled","description":null,"helpText":null}]},"ed79a37c7a70d8f0":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls","displayName":"Disable Certificate Transparency enforcement for a list of URLs (User)","description":"Setting the policy turns off Certificate Transparency disclosure requirements for the hostnames in the specified URLs. While making it harder to detect misissued certificates, hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed).\r\n\r\nLeaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.\r\n\r\nA URL pattern follows this format ( https://www.chromium.org/administrators/url-blocklist-filter-format ). However, because the validity of certificates for a given hostname is independent of the scheme, port, or path, Google Chrome only considers the hostname portion of the URL. Wildcard hosts aren't supported.\r\n\r\nExample value:\r\n\r\nexample.com\r\n.example.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"ed35f431ff9fb1af":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended","displayName":"Enable leak detection for entered credentials (User)","description":"Setting the policy to Enabled lets users have Google Chrome check whether usernames and passwords entered were part of a leak.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, credential leak checking is allowed, but the user can turn it off.\r\n\r\nThis behavior will not trigger if Safe Browsing is disabled (either by policy or by the user). In order to force Safe Browsing on, use the SafeBrowsingEnabled policy or the SafeBrowsingProtectionLevel policy.","helpText":"","infoUrls":[],"categoryId":"6d6b289c-c1e9-4004-b5ab-3123920cf10d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"eda18e2bac6c7c64":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support (User)","description":"Setting the policy to True or leaving it unset means Google Chrome will accept web contents served as Signed HTTP Exchanges.\r\n\r\nSetting the policy to False prevents Signed HTTP Exchanges from loading.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ed6f499af075e6e9":{"id":"user_vendor_msft_policy_config_display_configuremultipledisplaymode","displayName":"Configure Multiple Display Mode (User)","description":"Set the default display arrangement as clone, extend, internalOnly, externalOnly or default Windows Settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#configuremultipledisplaymode"],"categoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_display_configuremultipledisplaymode_0","displayName":"Default.","description":"Default.","helpText":null},{"id":"user_vendor_msft_policy_config_display_configuremultipledisplaymode_1","displayName":"Internal Only.","description":"Internal Only.","helpText":null},{"id":"user_vendor_msft_policy_config_display_configuremultipledisplaymode_2","displayName":"External Only.","description":"External Only.","helpText":null},{"id":"user_vendor_msft_policy_config_display_configuremultipledisplaymode_3","displayName":"Clone.","description":"Clone.","helpText":null},{"id":"user_vendor_msft_policy_config_display_configuremultipledisplaymode_4","displayName":"Extend.","description":"Extend.","helpText":null}]},"ed4de79f848a5811":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_formulas_l_r1c1referencestyle","displayName":"R1C1 reference style (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"9215e382-4e7b-4554-8c80-80277136b544","categoryName":"Formulas","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_formulas_l_r1c1referencestyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_formulas_l_r1c1referencestyle_1","displayName":"Enabled","description":null,"helpText":null}]},"ed05decccfd21b17":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallownetframeworkreliantcomponents"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"edd0d9dc01df8f28":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzonejavapermissions"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"ed53b79ecc596897":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},"ed414a3e998d08e6":{"id":"user_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"This policy setting allows you to manage whether the Notification bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification bar is displayed for Internet Explorer processes.\n\nIf you enable this policy setting, the Notification bar will be displayed for Internet Explorer Processes.\n\nIf you disable this policy setting, the Notification bar will not be displayed for Internet Explorer processes.\n\nIf you do not configure this policy setting, the Notification bar will be displayed for Internet Explorer Processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-notificationbarinternetexplorerprocesses"],"categoryId":"18296501-4825-47ea-835d-66a01aba9384","categoryName":"Notification bar","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"edfa40e4144fd817":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_certificatetransparencyenforcementdisabledforlegacycasdesc","displayName":"Disable Certificate Transparency enforcement for a list of legacy certificate authorities (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"edac0dbba659988b":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_restrictsignintopattern","displayName":"Restrict which accounts can be used as Microsoft Edge primary accounts (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"eddb66a70f78d01a":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_insecurecontentallowedforurlsdesc","displayName":"Allow insecure content on specified sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"ed2ca0b1ce56d16c":{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled","displayName":"Application Guard Favorites Sync Enabled (User)","description":"This policy allows Microsoft Edge computers/devices that have application guard enabled to sync favorites from the host to the container so the favorites match.\r\n\r\nIf 'ManagedFavorites' (Configure favorites) are configured, those favorites will also be synced to the container.\r\n\r\nIf you enable this policy, editing favorites in the container is disabled. So, the add favorites and add favorites folder buttons will be blurred out in the UI of the container browser.\r\n\r\nIf you disable or don't configure this policy, favorites on the host will not be shared to the container.","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ed23a394bcc5ef6a":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport","displayName":"CORS non-wildcard request header support enabled (User)","description":"This policy lets you configure support of CORS non-wildcard request headers.\r\n\r\nMicrosoft Edge version 97 introduces support for CORS non-wildcard request headers. When a script makes a cross-origin network request via fetch() and XMLHttpRequest with a script-added Authorization header, the header must be explicitly allowed by the Access-Control-Allow-Headers header in the CORS preflight response. \"Explicitly\" here means that the wild card symbol \"*\" doesn't cover the Authorization header. See https://go.microsoft.com/fwlink/?linkid=2180022 for more detail.\r\n\r\nIf you enable or don't configure the policy, Microsoft Edge will support the CORS non-wildcard request headers and behave as previously described.\r\n\r\nIf you disable this policy, Microsoft Edge will allow the wildcard symbol (\"*\") in the Access-Control-Allow-Headers header in the CORS preflight response to cover the Authorization header.\r\n\r\nThis policy is a temporary workaround for the new CORS non-wildcard request header feature. It's intended to be removed in the future.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport_1","displayName":"Enabled","description":null,"helpText":null}]},"ed4ad31f1e0d1378":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceemail","displayName":"Replace MAPI - E-mail (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"email address\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"email address\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceemail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceemail_1","displayName":"Enabled","description":null,"helpText":null}]},"edacbb48cf456ac6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_graphsettings_l_charttemplatesserverlocation_l_location","displayName":"Location: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a40e47b0-5b27-4e4d-b2ef-42f20540e812","categoryName":"Graph settings","options":null},"ed5dac1e3284608a":{"id":"user_vendor_msft_policy_config_outlk16v11~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mail~l_composemessages_l_specifymaxcertlengthallowedtostamp_l_specifymaxcertlengthallowedtostampspinid","displayName":"In bytes: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","categoryName":"Compose Messages","options":null},"ed4daffad2f5556a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapisend_l_simplemapi_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","categoryName":"Programmatic Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapisend_l_simplemapi_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapisend_l_simplemapi_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_simplemapisend_l_simplemapi_setting_0","displayName":"Automatically Deny","description":null,"helpText":null}]},"ed1bfce7c17fb473":{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_allowprivatekeycheck","displayName":"Check for the user's private key when the user sends an encrypted email that includes the user as a recipient (User)","description":"This policy setting controls whether Outlook checks for the user's private key when the user sends an encrypted email and the user is included as a recipient of the email. The user can be included as recipient either directly or as a member of a distribution list.\r\n\r\nIf you enable this policy setting, Outlook checks for the user's private key.\r\n\r\nIf you disable this policy setting, Outlook doesn't check for the user's private key.\r\n\r\nIf you don't configure this policy setting, Outlook checks for the user's private key.\r\n ","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_allowprivatekeycheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v5~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_allowprivatekeycheck_1","displayName":"Enabled","description":null,"helpText":null}]},"ed8e6432ecfa6e39":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_resizegraphicstofitbrowserwindow","displayName":"Resize graphics to fit browser window (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"6fd44fd0-80d1-47a0-acad-c115e5b807b6","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_resizegraphicstofitbrowserwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_resizegraphicstofitbrowserwindow_1","displayName":"Enabled","description":null,"helpText":null}]},"ed5886a7f74adcaa":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1","displayName":"Enabled","description":null,"helpText":null}]},"ed694bb3ade6c261":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_updatemanuallyscheduledtaskswheneditinglinks","displayName":"Update manually scheduled tasks when editing links (User)","description":"This policy setting will allow the update of manually scheduled task dates when predecessor links are created or updated.\r\n\r\nIf you enable or do not configure this policy setting, manually scheduled task dates will be updated when predecessor links are created or updated.\r\n\r\nIf you disable this policy setting, manually scheduled task dates will not be updated when predecessor links are created or updated.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_updatemanuallyscheduledtaskswheneditinglinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_updatemanuallyscheduledtaskswheneditinglinks_1","displayName":"Enabled","description":null,"helpText":null}]},"ed034356c54c117a":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned","displayName":"Require that application add-ins are signed by Trusted Publisher (User)","description":"This policy setting controls whether add-ins for this applications must be digitally signed by a trusted publisher.\r\n \r\nIf you enable this policy setting, this application checks the digital signature for each add-in before loading it. If an add-in does not have a digital signature, or if the signature did not come from a trusted publisher, this application disables the add-in and notifies the user. Certificates must be added to the Trusted Publishers list if you require that all add-ins be signed by a trusted publisher. For detail on about obtaining and distributing certificates, see http://go.microsoft.com/fwlink/?LinkId=294922. Office 2016 stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Office 2016 still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store. Therefore, if you created a list of trusted publishers in a previous version of Office and you upgrade to Office 2016, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store. For more information about trusted publishers, see the Office Resource Kit.\r\n\r\nIf you disable or do not configure this policy setting, this application does not check the digital signature on application add-ins before opening them. If a dangerous add-in is loaded, it could harm users' computers or compromise data security.","helpText":"","infoUrls":[],"categoryId":"30da5d88-cf03-41f4-ab55-51ead91b3844","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_1","displayName":"Enabled","description":null,"helpText":null}]},"ed0b2b540123bc0e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_hyphenswithdash","displayName":"Hyphens with dash (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"af9b2941-29f9-4ee5-ae09-215f4e242943","categoryName":"AutoCorrect Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_hyphenswithdash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_proofing~l_autocorrectoptions_l_hyphenswithdash_1","displayName":"Enabled","description":null,"helpText":null}]},"ed6d7fefd4c1762b":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc19_l_pathcolon80","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"ed0f9374c49a1ded":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_monthnames_l_monthnames17","displayName":"Month names (User)","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_monthnames_l_monthnames17_0","displayName":"Arabic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_monthnames_l_monthnames17_1","displayName":"English transliterated","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_monthnames_l_monthnames17_2","displayName":"French transliterated","description":null,"helpText":null}]},"ed163355ec6e1c44":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_saveautorecoverinfo_l_saveautorecoverinfoeveryminutes","displayName":"Save AutoRecover info every (minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/ee.json b/public/intune-definitions/ee.json new file mode 100644 index 000000000000..d080c90db1e9 --- /dev/null +++ b/public/intune-definitions/ee.json @@ -0,0 +1 @@ +{"ee09cfe2a79003fd":{"id":"com.apple.applicationaccess_ratingmoviesnz","displayName":"Rating Movies - New Zealand","description":"The maximum level of movie content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingmoviesnz_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_1","displayName":"G","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_2","displayName":"PG","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_3","displayName":"M","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_4","displayName":"R13","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_5","displayName":"R15","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_6","displayName":"R16","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_7","displayName":"R18","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_8","displayName":"R","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_9","displayName":"RP16","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingmoviesnz_10","displayName":"All","description":null,"helpText":null}]},"eee5853f14083d0e":{"id":"com.apple.extensiblesso_authenticationmethod","displayName":"Authentication Method (Deprecated)","description":"The Platform SSO authentication method the extension uses. Requires that the SSO Extension also supports the method.\nAvailable in macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_authenticationmethod_0","displayName":"Password","description":null,"helpText":null},{"id":"com.apple.extensiblesso_authenticationmethod_1","displayName":"UserSecureEnclaveKey","description":null,"helpText":null}]},"eee044ff5a3b2f8c":{"id":"com.apple.managedclient.preferences_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\n\nDisabling JavaScript optimizations (by setting this policy's value to 2) will mean that Microsoft Edge may render web content more slowly.\n\nThis policy can be overridden for specific URL patterns using the \"JavaScriptOptimizerAllowedForSites\" and \"JavaScriptOptimizerBlockedForSites\" policies.\n\nIf you don't configure this policy, JavaScript optimizations are enabled.\n\nPolicy options mapping:\n\n* AllowJavaScriptOptimizer (1) = Enable advanced JavaScript optimizations on all sites\n\n* BlockJavaScriptOptimizer (2) = Disable advanced JavaScript optimizations on all sites\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultjavascriptoptimizersetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultjavascriptoptimizersetting_0","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultjavascriptoptimizersetting_1","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},"ee73e433c1cb5914":{"id":"com.apple.managedclient.preferences_homepagelocation","displayName":"Configure the home page URL","description":"Configures the default home page URL in Microsoft Edge.\n\nThe home page is the page opened by the Home button. The pages that open on startup are controlled by the \"RestoreOnStartup\" policies.\n\nYou can either set a URL here or set the home page to open the new tab page. If you select to open the new tab page, then this policy doesn't take effect.\n\nIf you enable this policy, users can't change their home page URL, but they can choose to use the new tab page as their home page.\n\nIf you disable or don't configure this policy, users can choose their own home page, as long as the \"HomepageIsNewTabPage\" policy isn't enabled.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#homepagelocation"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ee2a83e7fcb31c1e":{"id":"com.apple.managedclient.preferences_managedsearchengines_item_suggest_url","displayName":"Suggest URL","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ee6d7e0d2aab9f27":{"id":"com.apple.proxy.http.global_proxyserverport","displayName":"Proxy Server Port","description":"The proxy server's port number.","helpText":null,"infoUrls":[],"categoryId":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","categoryName":"Global HTTP Proxy","options":null},"ee9c25ca0539894c":{"id":"com.apple.subscribedcalendar.account_subcalaccountdescription","displayName":"Account Description","description":"The description of the account.","helpText":null,"infoUrls":[],"categoryId":"fa20bbc3-d25d-4a7f-a349-9b211d186e21","categoryName":"Subscribed Calendars","options":null},"eee5797fcc3b817a":{"id":"com.apple.systemconfiguration_proxies_httpsport","displayName":"HTTPS Port","description":"The secure web proxy port.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":null},"ee821081bd6dedf7":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"eef2b7f0b5206320":{"id":"com.microsoft.edge.mamedgeappconfigsettings.browsingwithcopilotallowlist","displayName":"Browsing with Copilot Allowed URLs","description":"Allows you to define a list of URLs where browsing with Copilot is available. Users cannot modify this list.\n\nIf you enable this policy, browsing with Copilot is available only on the sites specified in the list. To allow a broader set of sites while blocking specific exceptions, configure this policy together with the \"BrowsingWithCopilotBlockList\" policy. For example, you can include '*' to allow all sites, and then use the block list to restrict access to specific URLs.\n\nYou can define exceptions based on schemes, subdomains, ports, or origins. When multiple filters apply, the most specific match determines whether a URL is allowed or blocked. The block list takes precedence over the allow list.\n\nIf you disable or do not configure this policy, browsing with Copilot is unavailable on all sites, even if the \"AllowBrowsingWithCopilot\" policy is enabled.\n\nBrowsing with Copilot supports only HTTP and HTTPS protocols. Wildcards (*) are supported, and subdomains are matched even without wildcards. This policy applies only to the site origin; any path specified in the URL pattern is ignored. For guidance on formatting URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"eee3c5d211c11c31":{"id":"device_vendor_msft_defender_configuration_enableconvertwarntoblock","displayName":"Enable Convert Warn To Block","description":"This setting controls whether network protection blocks network traffic instead of displaying a warning","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_enableconvertwarntoblock_1","displayName":"Warn verdicts are converted to block","description":"Warn verdicts are converted to block","helpText":null},{"id":"device_vendor_msft_defender_configuration_enableconvertwarntoblock_0","displayName":"Warn verdicts are not converted to block","description":"Warn verdicts are not converted to block","helpText":null}]},"ee3dab1421c48012":{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_autoenable","displayName":"Auto Enable","description":"Indicates whether the discovered profile must be enabled automatically after install. This must be set by the MDM when the ServerName subtree is created.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":[{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_autoenable_false","displayName":"Disable","description":"Disable","helpText":null},{"id":"device_vendor_msft_euiccs_{euicc}_downloadservers_{servername}_autoenable_true","displayName":"Enable","description":"Enable","helpText":null}]},"eeb44f73811c4a07":{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_2","displayName":"Send additional data when on battery power","description":"This policy setting determines whether Windows Error Reporting (WER) checks if the computer is running on battery power. By default, when a computer is running on battery power, WER only checks for solutions, but does not upload additional report data until the computer is connected to a more permanent power source.\r\n\r\nIf you enable this policy setting, WER does not determine whether the computer is running on battery power, but checks for solutions and uploads report data normally.\r\n\r\nIf you disable or do not configure this policy setting, WER checks for solutions while a computer is running on battery power, but does not upload report data until the computer is connected to a more permanent power source.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypasspowerthrottling-2"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_2_1","displayName":"Enabled","description":null,"helpText":null}]},"eee9ab93b428c03e":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_7_channel_log_filelogaccess","displayName":"Log Access","description":null,"helpText":"","infoUrls":[],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":null},"ee2152d6679d1cc7":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimization","displayName":"Configure Group Policy Caching","description":"\r\n This policy setting allows you to configure Group Policy caching behavior.\r\n\r\n If you enable or do not configure this policy setting, Group Policy caches policy information after every background processing session. This cache saves applicable GPOs and the settings contained within them. When Group Policy runs in synchronous foreground mode, it refers to this cache, which enables it to run faster. When the cache is read, Group Policy attempts to contact a logon domain controller to determine the link speed. When Group Policy runs in background mode or asynchronous foreground mode, it continues to download the latest version of the policy information, and it uses a bandwidth estimate to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.)\r\n\r\n The slow link value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before reporting the link speed as slow. The default is 500 milliseconds.\r\n\r\n The timeout value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before determining that there is no network connectivity. This stops the current Group Policy processing. Group Policy will run in the background the next time a connection to a domain controller is established. Setting this value too high might result in longer waits for the user at boot or logon. The default is 5000 milliseconds.\r\n\r\n If you disable this policy setting, the Group Policy client will not cache applicable GPOs or settings that are contained within the GPOs. When Group Policy runs synchronously, it downloads the latest version of the policy from the network and uses bandwidth estimates to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.)\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-enablelogonoptimization"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_enablelogonoptimization_1","displayName":"Enabled","description":null,"helpText":null}]},"eed5b988a69c2125":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_purgeatlogoff_lbl_purgeonlyautocachedfiles","displayName":"Delete only the temporary offline files.","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_purgeatlogoff_lbl_purgeonlyautocachedfiles_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_purgeatlogoff_lbl_purgeonlyautocachedfiles_1","displayName":"True","description":null,"helpText":null}]},"ee60fb212016fa84":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_2","displayName":"Reminder balloon lifetime","description":"Determines how long updated reminder balloons are displayed.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the update reminder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-remindertimeout-2"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_2_1","displayName":"Enabled","description":null,"helpText":null}]},"ee6b433fb57af305":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_nc","displayName":"Controlled load service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoad). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that do not conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Controlled Load service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 0.\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypecontrolledload-nc"],"categoryId":"cf968979-f316-47cb-a207-bf9ef28cd1aa","categoryName":"DSCP value of non-conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_nc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_nc_1","displayName":"Enabled","description":null,"helpText":null}]},"ee725f8bc1f8c2c0":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator","displayName":"Calculator","description":"This policy setting configures the synchronization of user settings of Calculator.\r\nBy default, the user settings of Calculator synchronize between computers. Use the policy setting to prevent the user settings of Calculator from synchronization between computers. \r\nIf you enable this policy setting, the Calculator user settings continue to synchronize. \r\nIf you disable this policy setting, Calculator user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-calculator"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator_1","displayName":"Enabled","description":null,"helpText":null}]},"eed7e1613c6aca5e":{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableflashconfig","displayName":"Turn off ability to configure using a USB Flash Drive","description":null,"helpText":"","infoUrls":[],"categoryId":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","categoryName":"Windows Connect Now","options":[{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableflashconfig_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsconnectnow_wcn_enableregistrar_wcn_enableregistrar_disableflashconfig_1","displayName":"True","description":null,"helpText":null}]},"eeb1b77f552b3211":{"id":"device_vendor_msft_policy_config_browser_disablelockdownofstartpages","displayName":"Disable Lockdown Of Start Pages","description":"You can configure Microsoft Edge to disable the lockdown of Start pages allowing users to change or customize their start pages. To do this, you must also enable the Configure Start Pages or Configure Open Microsoft With policy. When enabled, all configured start pages are editable. Any Start page configured using the Configure Start pages policy is not locked down allowing users to edit their Start pages. If disabled or not configured, the Start pages configured in the Configure Start Pages policy cannot be changed and remain locked down. Supported devices: Domain-joined or MDM-enrolled Related policy: - Configure Start Pages - Configure Open Microsoft Edge With","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#disablelockdownofstartpages"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_disablelockdownofstartpages_0","displayName":"Disabled","description":"Lock down Start pages configured in either the ConfigureOpenEdgeWith policy and HomePages policy.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_disablelockdownofstartpages_1","displayName":"Enabled","description":"Unlocked. Users can make changes to all configured start pages.","helpText":null}]},"ee6a595640072737":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_defaultsearchproviderkeyword","displayName":"Default search provider keyword (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"ee464683e9036416":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURL specifies the URL of the search engine used for image search. (If DefaultSearchProviderImageURLPostParams is set, then image search requests use the POST method instead.)\r\n\r\nLeaving DefaultSearchProviderImageURL unset means no image search is used.\r\n\r\nExample value: https://search.my.company/searchbyimage/upload","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_1","displayName":"Enabled","description":null,"helpText":null}]},"eeb39f6b899b5852":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_nativehostsexecutableslaunchdirectly","displayName":"Force Windows executable Native Messaging hosts to launch directly","description":"This policy controls whether native host executables launch directly on Windows.\r\n\r\nSetting the policy to Enabled forces Google Chrome to launch native messaging hosts implemented as executables directly.\r\n\r\nSetting the policy to Disabled will result in Google Chrome launching hosts using cmd.exe as an intermediary process.\r\n\r\nLeaving the policy unset allows Google Chrome to decide which approach to use.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_nativehostsexecutableslaunchdirectly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_nativehostsexecutableslaunchdirectly_1","displayName":"Enabled","description":null,"helpText":null}]},"ee17c2427e195766":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709","displayName":"Enable dragging of content from different domains across windows","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3","displayName":"Disable","description":null,"helpText":null}]},"ee0a6f7a140ad9aa":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode","displayName":"Turn on Protected Mode","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\n\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\n\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\n\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenableprotectedmode"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},"eeb7bd2694d89ccb":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"eef6d6ef2aa172ae":{"id":"device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type.\n\nIf you enable this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type.\n\nIf you disable this policy setting, Internet Explorer processes will allow a MIME sniff promoting a file of one type to a more dangerous file type.\n\nIf you do not configure this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses"],"categoryId":"b03bfdc7-f42a-400e-935b-2b07fc71a7f1","categoryName":"Mime Sniffing Safety Feature","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"ee18e354ff36b708":{"id":"device_vendor_msft_policy_config_lanmanworkstation_requireencryption","displayName":"Require Encryption","description":"This policy controls whether the SMB client will require encryption. If you enable this policy setting, the SMB client will require the SMB server to support encryption and encrypt the data. If you disable or do not configure this policy setting, the SMB client will not require encryption. However, SMB encryption may still be required; see notes below. Note: This policy is combined with per-share, per-server, and per mapped drive connection properties, through which SMB encryption may be required. The SMB server must support and enable SMB encryption. For example, should this policy be disabled (or not configured), the SMB client may still perform encryption if an SMB server share has required encryption. Important: SMB encryption requires SMB 3.0 or later.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#requireencryption"],"categoryId":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_requireencryption_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_requireencryption_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"eef12ab563a54091":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_maximummachineaccountpasswordage","displayName":"Domain Member Maximum Machine Account Password Age","description":"Domain member: Maximum machine account password age This security setting determines how often a domain member will attempt to change its computer account password. Default: 30 days. Important This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_maximummachineaccountpasswordage"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"ee866fa1bed0a311":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed","displayName":"Allows enabling the feature NewBaseUrlInheritanceBehavior","description":"NewBaseUrlInheritanceBehavior is a Microsoft Edge feature that causes about:blank and about:srcdoc frames to consistently inherit their base url values via snapshots of their initiator's base url.\r\n\r\nIf you disable this policy, it prevents users or Microsoft Edge variations from enabling NewBaseUrlInheritanceBehavior, in case compatibility issues are discovered.\r\n\r\nIf you enable or don't configure this policy, it allows enabling NewBaseUrlInheritanceBehavior.","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"ee7045040ca37f9a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_proxypacurl","displayName":"Set the proxy .pac file URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"eef78e55407c7df5":{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl_webrtciphandlingurl","displayName":"WebRTC IP Handling Policy for URL Patterns (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"08677354-6f67-455e-a430-4d8d2fbabe84","categoryName":"Web Rtc settings","options":null},"eeecf1fc272783fa":{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled","displayName":"Configure Edge scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen","description":"This policy controls whether Microsoft Edge shares URLs of sites that are detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge will share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"eea160a47f7bec98":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls","displayName":"Block access to sensors on specific sites","description":"Define a list of sites, based on URL patterns, that can't access sensors such as motion and light sensors.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSensorsSetting' (Default sensors setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SensorsAllowedForUrls' (Allow access to sensors on specific sites) policy (if there is a match), the 'DefaultSensorsSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SensorsAllowedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"ee0c82c8914514c7":{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays_l_deferupdatedaysid","displayName":"Days: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":null},"ee7b10ef9404db4d":{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate","displayName":"Force Touch Keyboard Docked State","description":"Specifies the touch keyboard is always docked. When this policy is set to enabled, the touch keyboard is always docked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#forcetouchkeyboarddockedstate"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate_1","displayName":"Touch keyboard is always docked.","description":"Touch keyboard is always docked.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate_2","displayName":"Touch keyboard docking can be changed.","description":"Touch keyboard docking can be changed.","helpText":null}]},"eefbfd84f1a80326":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sendconsolemessage","displayName":"Send Console Message (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sendconsolemessage"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sendconsolemessage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sendconsolemessage_1","displayName":"Enabled","description":null,"helpText":null}]},"ee4b5074a999b404":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_terminalservices","displayName":"Remote Desktop Services Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-terminalservices"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_terminalservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_terminalservices_1","displayName":"Enabled","description":null,"helpText":null}]},"ee63644827b44a9d":{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_advancedsettings","displayName":"Prohibit access to the Advanced Settings item on the Advanced menu (User)","description":"Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators.\r\n\r\nThe Advanced Settings item lets users view and change bindings and view and change the order in which the computer accesses connections, network providers, and print providers.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Advanced Settings item is disabled for administrators.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Advanced Settings item is enabled for administrators.\r\n\r\nNote: Nonadministrators are already prohibited from accessing the Advanced Settings dialog box, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-advancedsettings"],"categoryId":"d982a1ef-84be-4832-99d4-8b71a4644b74","categoryName":"Network Connections","options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_advancedsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_advancedsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"ee35e421c8caca6e":{"id":"user_vendor_msft_policy_config_admx_sharing_noinplacesharing","displayName":"Prevent users from sharing files within their profile. (User)","description":"This policy setting specifies whether users can share files within their profile. By default users are allowed to share files within their profile to other users on their network after an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to share a file within their profile.\r\n\r\nIf you enable this policy setting, users cannot share files within their profile using the sharing wizard. Also, the sharing wizard cannot create a share at %root%\\users and can only be used to create SMB shares on folders.\r\n\r\nIf you disable or don't configure this policy setting, users can share files out of their user profile after an administrator has opted in the computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sharing#admx-sharing-noinplacesharing"],"categoryId":"2b3d275d-4a48-4ac8-9c14-4dc5aa20a80b","categoryName":"Network Sharing","options":[{"id":"user_vendor_msft_policy_config_admx_sharing_noinplacesharing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sharing_noinplacesharing_1","displayName":"Enabled","description":null,"helpText":null}]},"ee49e2adb3d4902c":{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchprogramsinstartmenu","displayName":"Do not search programs and Control Panel items (User)","description":"If you enable this policy setting the Start menu search box will not search for programs or Control Panel items.\r\n\r\nIf you disable or do not configure this policy setting, the Start menu search box will search for programs and Control Panel items, unless the user chooses not to do so directly in Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchprogramsinstartmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchprogramsinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchprogramsinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"ee00fe83b2904c09":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places3","displayName":"Item 4 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":null},"eeac11550821a554":{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailybeginminute","displayName":"Set the time Quiet Hours begins each day (User)","description":"\r\n This policy setting specifies the number of minutes after midnight (local time) that Quiet Hours is to begin each day.\r\n\r\n If you enable this policy setting, the specified time will be used, and users will not be able to customize any Quiet Hours settings.\r\n\r\n If you disable this policy setting, a default value will be used, and users will not be able to change it or any other Quiet Hours setting.\r\n\r\n If you do not configure this policy setting, a default value will be used, which administrators and users will be able to modify.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-quiethoursdailybeginminute"],"categoryId":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","categoryName":"Notifications","options":[{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailybeginminute_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailybeginminute_1","displayName":"Enabled","description":null,"helpText":null}]},"ee46c78302d4354c":{"id":"user_vendor_msft_policy_config_browser_allowsearchenginecustomization","displayName":"Allow Search Engine Customization (User)","description":"Allow search engine customization for MDM enrolled devices. Users can change their default search engine. If this setting is turned on or not configured, users can add new search engines and change the default used in the address bar from within Microsoft Edge Settings. If this setting is disabled, users will be unable to add search engines or change the default used in the address bar. This policy will only apply on domain joined machines or when the device is MDM enrolled. For more information, see Microsoft browser extension policy (aka.ms/browserpolicy).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsearchenginecustomization"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_allowsearchenginecustomization_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsearchenginecustomization_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"ee382796d33a0796":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_authserverallowlist","displayName":"Authentication server allowlist (User)","description":"","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":null},"ee3cdb2b63965d03":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication (User)","description":"A list of TLS certificates that should be trusted by Google Chrome for server authentication.\r\nCertificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\nMIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736GjOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL24CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/JdmZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"eeafe321db72c622":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled","displayName":"Allow using Google Assistant on the web, e.g. to enable changing passwords automatically (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ee2fa502091d113d":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview","displayName":"Open files on local Intranet UNC in Protected View (User)","description":"This policy setting lets you determine if files on local Intranet UNC file shares open in Protected View.\r\n\r\nIf you enable this policy setting, files on local Intranet UNC file shares open in Protected View if their UNC paths appear to be within the Internet zone.\r\n\r\nIf you disable or do not configure this policy setting, files on Intranet UNC file shares do not open in Protected View if their UNC paths appear to be within the Internet zone.","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview_1","displayName":"Enabled","description":null,"helpText":null}]},"eec0daa0bd1c7b12":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},"eedc786f50b8979d":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions","displayName":"Logon options (User)","description":"This policy setting allows you to manage settings for logon options.\n\nIf you enable this policy setting, you can choose from the following logon options.\n\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\n\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\n\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\n\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\n\nIf you do not configure this policy setting, logon is set to Prompt for username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonelogonoptions"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"ee08c67a199dca69":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1_l_trustmodeldata_value","displayName":"Trusted Domains (comma separated list): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":null},"ee9979738b7b3bf9":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls","displayName":"Allow cookies on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are allowed to set cookies.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nSee the 'CookiesBlockedForUrls' (Block cookies on specific sites) and 'CookiesSessionOnlyForUrls' (Limit cookies from specific websites to the current session) policies for more information.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- 'CookiesBlockedForUrls'\r\n\r\n- CookiesAllowedForUrls\r\n\r\n- 'CookiesSessionOnlyForUrls'\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"ee90e65f0beb3b63":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist","displayName":"Control which extensions cannot be installed (User)","description":"List specific extensions that users can NOT install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed will be disabled, and the user won't be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.\r\n\r\nUse \"*\" to block all extensions that aren't explicitly listed in the allow list.\r\n\r\nIf you don't configure this policy, users can install any extension in Microsoft Edge.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"categoryId":"66615d2a-fec9-47f1-8eaf-9813e30cc023","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"eeffa036721a7a28":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings","displayName":"Disable SmartScreen AppRep based warnings for specified file types on specified domains (User)","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from SmartScreen AppRep warnings. For example, if the \"vbe\" extension is associated with \"website1.com\", users would not see a SmartScreen AppRep warning when downloading \"vbe\" files from \"website1.com\", but may see a download warning when downloading \"vbe\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to file type extension-based security warnings and mixed-content download warnings.\r\n\r\nIf you disable this policy or don't configure it, files that trigger SmartScreen AppRep download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so \"vbe\" should be used instead of \".vbe\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent SmartScreen AppRep warnings on msi, exe, and vbe extensions for *.contoso.com domains. It may show the user a SmartScreen AppRep warning on any other domain for exe and msi files, but not for vbe files.\r\n\r\n[\r\n { \"file_extension\": \"msi\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"vbe\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of SmartScreen AppRep download warnings for \"vbe\" files for all domains, applying suppression of such warnings for all domains is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://contoso.com\",\r\n \"contoso2.com\"\r\n ],\r\n \"file_extension\": \"msi\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"vbe\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"ee8730eaaf07448a":{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled","displayName":"Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page (User)","description":"By default, there are two Bing chat entry-points on new tab page. One is inside the new tab page search box, and one is in the Bing Autosuggest drawer on-click.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge Enterprise new tab page and the Bing chat entry-points are there for users.\r\n\r\nIf you disable this policy, Bing chat entry-points don't appear on the new tab page.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ee05dc37a8c3e493":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites","displayName":"Block JavaScript from using JIT on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which are not allowed to run JavaScript JIT (Just In Time) compiler enabled.\r\n\r\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitBlockedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT disabled, but fabrikam.com will use the policy from 'DefaultJavaScriptJitSetting' (Control use of JavaScript JIT), if set, or default to JavaScript JIT enabled.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptJitSetting' applies to the site, if set, otherwise JavaScript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},"eea186144383062b":{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_m365linkshandling_l_m365linksbrowserchoice_l_browserchoiceenum","displayName":"Browser: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"94ce8206-be22-496c-aa72-f3560e2a5c8d","categoryName":"Links","options":[{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_m365linkshandling_l_m365linksbrowserchoice_l_browserchoiceenum_0","displayName":"System default browser","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v14~policy~l_microsoftofficesystem~l_m365linkshandling_l_m365linksbrowserchoice_l_browserchoiceenum_1","displayName":"Microsoft Edge","description":null,"helpText":null}]},"ee88208f2a144f6f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc12_l_datecolon283","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"ee74311df253f22d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_sharedpaths_l_enterprisetemplatespath_l_enterprisetemplatespath329","displayName":"Enterprise templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7a8b936d-b4b0-408f-bec5-3c97050730f8","categoryName":"Shared paths","options":null},"eeee214c0c980c03":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_messagesexpireafterdays_l_messagesexpireafterdays","displayName":"Messages expire after (days): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":null},"ee3d9e45f35f18a7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions_l_internetandnetworkpathsintohyperlinks","displayName":"Internet and network paths into hyperlinks (User)","description":"This policy setting specifies whether Outlook automatically turns text that represents Internet and network paths into hyperlinks. This option can also be configured by selecting the “Internet and network paths with hyperlinks” check box that is available on the Outlook | File | Options | Mail | Editor Options.... | Proofing | AutoCorrect Options… | AutoFormat tab on the user interface (UI).\r\n\r\nIf you enable or do not configure this policy setting, text in Outlook that represents internet and network paths are automatically turned into hyperlinks. This is the default behavior of Outlook.\r\n\r\nIf you disable this policy setting, text in Outlook that represents internet and network paths are not automatically turned into hyperlinks.","helpText":"","infoUrls":[],"categoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","categoryName":"Outlook Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions_l_internetandnetworkpathsintohyperlinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions_l_internetandnetworkpathsintohyperlinks_1","displayName":"Enabled","description":null,"helpText":null}]},"ee3210fdba88a059":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner","displayName":"Meeting Planner (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"2592e8ea-5eb0-482b-b41e-eab92f33ac07","categoryName":"Planner Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_planneroptions_l_meetingplanner_1","displayName":"Enabled","description":null,"helpText":null}]},"ee8b83f5d0a47aaa":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2","displayName":"Configure Outlook object model prompt when responding to meeting and task requests (User)","description":"This policy setting controls what happens when an untrusted program attempts to programmatically send e-mail in Outlook using the Response method of a task or meeting request. \r\n\r\nIf you enable this policy setting, you can choose from four different options when an untrusted program attempts to programmatically send e-mail using the Response method of a task or meeting request:\r\n\r\n- Prompt user. The user will be prompted to approve every access attempt.\r\n- Automatically approve. Outlook will automatically grant programmatic access requests from any program. This option can create a significant vulnerability, and is not recommended.\r\n- Automatically deny. Outlook will automatically deny programmatic access requests from any program. \r\n- Prompt user based on computer security. Outlook only prompts users when antivirus software is out of date or not running. This is the default configuration. \r\n\r\nIf you disable or do not configure this policy setting, when an untrusted application attempts to respond to tasks or meeting requests programmatically, Outlook relies on the setting configured in the ''Programmatic Access'' section of the Trust Center. ","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"eed33f0c30d24aa9":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm","displayName":"Specify CNG random number generator algorithm (User)","description":"This policy setting allows you to configure the CNG random number generator to use.\r\n\r\nIf you enable this policy setting, the random number generator specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default random number generator will be used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},"ee6be1fc1590a9aa":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjsave~l_pjfilelocations_l_pjfilelocusertemplates_l_pjfilelocusertemplates32","displayName":"User Templates (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d679b407-a753-40aa-bc9f-175f363b0eff","categoryName":"File locations","options":null},"ee529f3eb4bb3308":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_adddoublequotesinhebrewalphabetnumbering","displayName":"Add double quotes in Hebrew alphabet numbering (User)","description":"Checked: Adds double quotation marks ('') to Hebrew numbering. | Unchecked: Does not add double quotation marks ('') to Hebrew numbering.","helpText":"","infoUrls":[],"categoryId":"c6c1120b-988c-4581-a21c-b9786a821242","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_adddoublequotesinhebrewalphabetnumbering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_miscellaneous_l_adddoublequotesinhebrewalphabetnumbering_1","displayName":"Enabled","description":null,"helpText":null}]},"ee9f939b2843b262":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":null},"eefdbd59af3a87f7":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchtsithichidhizi","displayName":"Match tsi/thi/chi, dhi/zi (User)","description":"This policy setting allows you to check or uncheck the corresponding UI option in the \"Japanese Find\" dialog. The \"Japanese Find\" dialog may be accessed from the Find dialog, under Home tab | Editing | Find | Go To... | Search Options | Options.... It could also be found under the Navigation Pane, under Home tab | Editing | Find | < down arrow > | Options... | Sounds Like (Japanese) | Options. The \"Sounds like (Japanese)\" checkbox and the \"Options...\" button may be hidden in Word until certain editing languages are enabled.\r\n\r\nIf you enable this policy setting, you will check the corresponding UI option as specified in this policy setting's title.\r\n\r\nIf you disable or do not configure this policy setting, the corresponding UI option will be unchecked.\r\n","helpText":"","infoUrls":[],"categoryId":"b8adcde1-500a-430f-8636-f97eaae2a2c6","categoryName":"Japanese Find","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchtsithichidhizi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_japanesefind_l_matchtsithichidhizi_1","displayName":"Enabled","description":null,"helpText":null}]},"ee9f46134e9c59eb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_visualselection","displayName":"Cursor visual selection (User)","description":"Specifies if Block or Continuous selection shall be used. Block selection parodies the selection behavior within the Windows explorer when files in a folder. You draw a rectangle with the curson, and everything inside the rectangle is selected.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_visualselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_visualselection_1","displayName":"Enabled","description":null,"helpText":null}]},"ee2df244b9cece56":{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_enablefirewall","displayName":"Enable Public Network Firewall","description":"This value is an on/off switch for the Hyper-V Firewall enforcement.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_enablefirewall_false","displayName":"False","description":"Disable Hyper-V Firewall","helpText":null},{"id":"vendor_msft_firewall_mdmstore_hypervvmsettings_{vmcreatorid}_publicprofile_enablefirewall_true","displayName":"True","description":"Enable Hyper-V Firewall","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/ef.json b/public/intune-definitions/ef.json new file mode 100644 index 000000000000..8393e44688f2 --- /dev/null +++ b/public/intune-definitions/ef.json @@ -0,0 +1 @@ +{"ef4d083a2eed6775":{"id":"ade_macos_useraffinity","displayName":"User affinity","description":"User affinity associates devices with users. Users must authenticate to enroll with user affinity.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_macos_useraffinity_1","displayName":"Enroll with user affinity","description":null,"helpText":null},{"id":"ade_macos_useraffinity_0","displayName":"Enroll without user affinity","description":null,"helpText":null}]},"ef8f830928c610af":{"id":"com.apple.applicationaccess_allowautodim","displayName":"Allow Auto Dim","description":"If set to false, disables auto dim on iPads with OLED displays.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowautodim_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowautodim_true","displayName":"Enabled","description":null,"helpText":null}]},"ef42508a8a497a05":{"id":"com.apple.dock_persistent-apps","displayName":"Persistent Apps","description":"Dock items located on the Applications side of the Dock that can be removed.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"efb1ab6c810cb3fe":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver","displayName":"Update channel override","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"efa3d2426d271257":{"id":"com.apple.managedclient.preferences_configureonlinetexttospeech","displayName":"Configure Online Text To Speech","description":"Set whether the browser can leverage Online Text to Speech voice fonts, part of Azure Cognitive Services. These voice fonts are higher quality than the pre-installed system voice fonts.\n\nIf you enable or don't configure this policy, web-based applications that use the SpeechSynthesis API can use Online Text to Speech voice fonts.\n\nIf you disable this policy, the voice fonts aren't available.\n\nRead more about this feature here:\nSpeechSynthesis API: https://go.microsoft.com/fwlink/?linkid=2110038\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2110141","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#configureonlinetexttospeech"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_configureonlinetexttospeech_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_configureonlinetexttospeech_true","displayName":"Enabled","description":null,"helpText":null}]},"ef832ad3b021fbe0":{"id":"com.apple.managedclient.preferences_consumerexperience","displayName":"Control sign-in to consumer version","description":"Specify whether users can sign into the consumer version of Microsoft Defender","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#control-sign-in-to-consumer-version-of-microsoft-defender"],"categoryId":"67cd904c-78e0-4e77-9dd4-c713b21763f3","categoryName":"User interface preferences","options":[{"id":"com.apple.managedclient.preferences_consumerexperience_0","displayName":"enabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_consumerexperience_1","displayName":"disabled","description":null,"helpText":null}]},"ef3f8aad6a641a51":{"id":"com.apple.managedclient.preferences_disableinsidercheckbox","displayName":"Disable Office Insider membership","description":"Prevent users from changing to an Office Insider channel and obtaining Preview or Beta updates. The default value is false.","helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_disableinsidercheckbox_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableinsidercheckbox_true","displayName":"True","description":null,"helpText":null}]},"ef0f46805507301d":{"id":"com.apple.managedclient.preferences_filesystemreadblockedforurls","displayName":"Block read access via the File System API on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\n\nIf you don't set this policy, \"DefaultFileSystemReadGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemReadAskForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#filesystemreadblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"efc6dac3fde18319":{"id":"com.apple.managedclient.preferences_localnetworkaccessallowedforurls","displayName":"Allow sites to make requests to local network endpoints.","description":"Specifies a list of URL patterns for which requests initiated from matching origins are exempt from Local Network Access restrictions.\n\nIf an origin is specified by both this policy and the \"LocalNetworkAccessBlockedForUrls\" policy, the blocked list takes precedence.\n\nFor origins not covered by this policy, the user's personal settings and local network access restrictions will apply.\n\nFor guidance on valid URL pattern syntax, see:\nhttps://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns\n\nNote: This policy enables controlled exceptions to local network access restrictions. It allows specific public websites to access private IP addresses when necessary for trusted local communication scenarios. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#localnetworkaccessallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"efcd97b18628c0cc":{"id":"com.apple.managedclient.preferences_microsoftedgeinsiderpromotionenabled","displayName":"Microsoft Edge Insider Promotion Enabled","description":"Shows content promoting the Microsoft Edge Insider channels on the About Microsoft Edge settings page.\n\nIf you enable or don't configure this policy, the Microsoft Edge Insider promotion content will be shown on the About Microsoft Edge page.\n\nIf you disable this policy, the Microsoft Edge Insider promotion content will not be shown on the About Microsoft Edge page.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#microsoftedgeinsiderpromotionenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_microsoftedgeinsiderpromotionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_microsoftedgeinsiderpromotionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"efc8a63c6d299ef4":{"id":"com.apple.managedclient.preferences_visualbasicentirelydisabled","displayName":"Prevent all Visual Basic macros from executing","description":"Prevent all Visual Basic code from running in Word, Excel, and PowerPoint - even from trusted locations like the default template. Requires 16.32 or later. Recommended: true, where macros should never be used.","helpText":null,"infoUrls":["https://aka.ms/macvbpref"],"categoryId":"b5169b74-41be-460a-9402-b13b6c22582b","categoryName":"Microsoft Office","options":[{"id":"com.apple.managedclient.preferences_visualbasicentirelydisabled_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_visualbasicentirelydisabled_true","displayName":"True","description":null,"helpText":null}]},"ef9d9ec005829a61":{"id":"com.apple.screensaver_com.apple.screensaver","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"8cefd936-362e-4a24-bc76-e078b6fd13fa","categoryName":"Screensaver","options":null},"efddfab66b8ce683":{"id":"com.apple.screensaver_loginwindowidletime","displayName":"Login Window Idle Time","description":"The number of seconds of inactivity before the screen saver activates (0 = Never activate). ","helpText":null,"infoUrls":[],"categoryId":"8cefd936-362e-4a24-bc76-e078b6fd13fa","categoryName":"Screensaver","options":null},"ef198cff19f5e1d4":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfxfaenabled","displayName":"XFA support in native PDF reader enabled","description":"Lets the Microsoft Edge browser enable XFA (XML Forms Architecture) support in the native PDF reader and allows users to open XFA PDF files in the browser.\n\nIf you enable this policy, XFA support in the native PDF reader is enabled.\n\nIf you disable or don't configure this policy, Microsoft Edge won't enable XFA support in the native PDF reader.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfxfaenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfxfaenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"efe6947164cb8d8e":{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osactivedirectorybackup_name","displayName":"Save BitLocker recovery information to AD DS for operating system drives","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osactivedirectorybackup_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrecoveryoptions_osactivedirectorybackup_name_1","displayName":"True","description":null,"helpText":null}]},"ef410ef602f5b7bc":{"id":"device_vendor_msft_dmclient_provider_{providerid}_configrefresh_cadence","displayName":"Refresh cadence","description":"This node determines the number of minutes between refreshes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/DMClient-csp/"],"categoryId":"80b21376-0e9a-4e5b-8a74-b672adbe94a8","categoryName":"Config Refresh","options":null},"ef670f1c153e9c2d":{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation","displayName":"Block launching desktop apps associated with a file.","description":"This policy setting lets you control whether Windows Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a Windows Store app might compromise the system by opening a file in the default desktop app for a file type.\r\n\r\nIf you enable this policy setting, Windows Store apps cannot open files in the default desktop app for a file type; they can open files only in other Windows Store apps.\r\n\r\nIf you disable or do not configure this policy setting, Windows Store apps can open files in the default desktop app for a file type.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeblockfileelevation"],"categoryId":"e972d9fe-a9b7-4a65-a88f-0958fab19584","categoryName":"App runtime","options":[{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation_1","displayName":"Enabled","description":null,"helpText":null}]},"efa63640322e88b0":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_cse_slowlink1","displayName":"Allow processing across a slow network connection","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_cse_slowlink1_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_cse_slowlink1_1","displayName":"True","description":null,"helpText":null}]},"ef382902249e4c30":{"id":"device_vendor_msft_policy_config_admx_iis_preventiisinstall","displayName":"Prevent IIS installation","description":"\"This policy setting prevents installation of Internet Information Services (IIS) on this computer. If you enable this policy setting, Internet Information Services (IIS) cannot be installed, and you will not be able to install Windows components or applications that require IIS. Users installing Windows components or applications that require IIS might not receive a warning that IIS cannot be installed because of this Group Policy setting. Enabling this setting will not have any effect on IIS if IIS is already installed on the computer. If you disable or do not configure this policy setting, IIS can be installed, as well as all the programs and applications that require IIS to run.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-iis#admx-iis-preventiisinstall"],"categoryId":"93c28398-faef-4ca5-9667-f5ed004da32c","categoryName":"Internet Information Services","options":[{"id":"device_vendor_msft_policy_config_admx_iis_preventiisinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_iis_preventiisinstall_1","displayName":"Enabled","description":null,"helpText":null}]},"efaebfb008ea2779":{"id":"device_vendor_msft_policy_config_admx_msi_transformssecure","displayName":"Save copies of transform files in a secure location on workstation","description":"This policy setting saves copies of transform files in a secure location on the local computer.\r\n\r\nTransform files consist of instructions to modify or customize a program during installation.\r\n\r\nIf you enable this policy setting, the transform file is saved in a secure location on the user's computer.\r\n\r\nIf you do not configure this policy setting on Windows Server 2003, Windows Installer requires the transform file in order to repeat an installation in which the transform file was used, therefore, the user must be using the same computer or be connected to the original or identical media to reinstall, remove, or repair the installation.\r\n\r\nThis policy setting is designed for enterprises to prevent unauthorized or malicious editing of transform files.\r\n\r\nIf you disable this policy setting, Windows Installer stores transform files in the Application Data directory in the user's profile.\r\n\r\nIf you do not configure this policy setting on Windows 2000 Professional, Windows XP Professional and Windows Vista, when a user reinstalls, removes, or repairs an installation, the transform file is available, even if the user is on a different computer or is not connected to the network.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-transformssecure"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_transformssecure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_transformssecure_1","displayName":"Enabled","description":null,"helpText":null}]},"ef9d23cd0ecdd51f":{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_passivepolling_ncsi_disablepassivepolling_checkbox","displayName":"Disable passive polling","description":null,"helpText":"","infoUrls":[],"categoryId":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","categoryName":"Network Connectivity Status Indicator","options":[{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_passivepolling_ncsi_disablepassivepolling_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ncsi_ncsi_passivepolling_ncsi_disablepassivepolling_checkbox_1","displayName":"True","description":null,"helpText":null}]},"ef9c8c22a2666862":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_gcsitecoverage_netlogon_gcsitecoveragelabel","displayName":"Sites:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"ef8c02262acb0867":{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation","displayName":"Propagate extended error information","description":"This policy setting controls whether the RPC runtime generates extended error information when an error occurs.\r\n\r\nExtended error information includes the local time that the error occurred, the RPC version, and the name of the computer on which the error occurred, or from which it was propagated. Programs can retrieve the extended error information by using standard Windows application programming interfaces (APIs).\r\n\r\nIf you disable this policy setting, the RPC Runtime only generates a status code to indicate an error condition.\r\n\r\nIf you do not configure this policy setting, it remains disabled. It will only generate a status code to indicate an error condition.\r\n\r\nIf you enable this policy setting, the RPC runtime will generate extended error information. You must select an error response type in the drop-down box.\r\n\r\n-- \"Off\" disables all extended error information for all processes. RPC only generates an error code.\r\n\r\n-- \"On with Exceptions\" enables extended error information, but lets you disable it for selected processes. To disable extended error information for a process while this policy setting is in effect, the command that starts the process must begin with one of the strings in the Extended Error Information Exception field.\r\n\r\n-- \"Off with Exceptions\" disables extended error information, but lets you enable it for selected processes. To enable extended error information for a process while this policy setting is in effect, the command that starts the process must begin with one of the strings in the Extended Error Information Exception field.\r\n\r\n-- \"On\" enables extended error information for all processes.\r\n\r\nNote: For information about the Extended Error Information Exception field, see the Windows Software Development Kit (SDK).\r\n\r\nNote: Extended error information is formatted to be compatible with other operating systems and older Microsoft operating systems, but only newer Microsoft operating systems can read and respond to the information.\r\n\r\nNote: The default policy setting, \"Off,\" is designed for systems where extended error information is considered to be sensitive, and it should not be made available remotely.\r\n\r\nNote: This policy setting will not be applied until the system is rebooted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-rpc#admx-rpc-rpcextendederrorinformation"],"categoryId":"f1278d6b-60ec-4369-88cf-21df47caaec6","categoryName":"Remote Procedure Call","options":[{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_rpc_rpcextendederrorinformation_1","displayName":"Enabled","description":null,"helpText":null}]},"ef3c9bc1ab40fd91":{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesynconpaidnetwork","displayName":"Do not sync on metered connections","description":"Prevent syncing to and from this PC when on metered Internet connections. This turns off and disables \"sync your settings on metered connections\" switch on the \"sync your settings\" page in PC Settings.\r\n\r\nIf you enable this policy setting, syncing on metered connections will be turned off, and no syncing will take place when this PC is on a metered connection.\r\n\r\nIf you do not set or disable this setting, syncing on metered connections is configurable by the user.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disablesynconpaidnetwork"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesynconpaidnetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disablesynconpaidnetwork_1","displayName":"Enabled","description":null,"helpText":null}]},"ef9e75309d03ff2e":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_reader","displayName":"Reader","description":"This policy setting configures the synchronization of user settings for the Reader app.\r\nBy default, the user settings of Reader sync between computers. Use the policy setting to prevent the user settings of Reader from synchronizing between computers.\r\nIf you enable this policy setting, Reader user settings continue to sync.\r\nIf you disable this policy setting, Reader user settings are excluded from the synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-reader"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_reader_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_reader_1","displayName":"Enabled","description":null,"helpText":null}]},"ef31f2b7e8ac6f39":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"efd6da175c801f8d":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_defaultsearchprovidersuggesturl","displayName":"Default search provider suggest URL (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"ef55bf2b32cf11c6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended","displayName":"Use System Default Printer as Default","description":"Setting the policy to Enabled means Google Chrome uses the OS default printer as the default destination for print preview.\r\n\r\nSetting the policy to Disabled or leaving it unset means Google Chrome uses the most recently used printer as the default destination for print preview.","helpText":"","infoUrls":[],"categoryId":"20ceae56-e189-46ec-a440-791ce7454017","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ef5f7fcf5127d9c6":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled","displayName":"Enable search suggestions","description":"Setting the policy to True turns on search suggestions in Google Chrome's address bar. Setting the policy to False turns off these search suggestions.\r\n\r\nIf you set the policy, users can't change it. If not set, search suggestions are on at first, but users can turn them off any time.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ef1898dc9ff4d448":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled","displayName":"Enable spellcheck","description":"Setting the policy to Enabled turns spellcheck on, and users can't turn it off. On Microsoft® Windows®, Google Chrome OS and Linux®, spellcheck languages can be switched on or off individually, so users can still turn spellcheck off by switching off every spellcheck language. To avoid that, use the SpellcheckLanguage to force-enable specific spellcheck languages.\r\n\r\nSetting the policy to Disabled turns off spellcheck from all sources, and users can't turn it on. The SpellCheckServiceEnabled, SpellcheckLanguage and SpellcheckLanguageBlocklist policies have no effect when this policy is set to False.\r\n\r\nLeaving the policy unset lets users turn spellcheck on or off in the language settings.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ef4a519204f2d969":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL.","description":"Setting the policy sets the URL for users to change their password after seeing a warning in the browser. The password protection service sends users to the URL (HTTP and HTTPS protocols only) you designate through this policy. For Google Chrome to correctly capture the salted hash of the new password on this change password page, make sure your change password page follows these guidelines ( https://www.chromium.org/developers/design-documents/create-amazing-password-forms ).\r\n\r\nTurning the policy off or leaving it unset means the service sends users to https://myaccount.google.com to change their password.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://mydomain.com/change_password.html","helpText":"","infoUrls":[],"categoryId":"b485695b-0fae-41ae-861c-3030769b28df","categoryName":"Safe Browsing settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_1","displayName":"Enabled","description":null,"helpText":null}]},"ef7a7f01a2c22b04":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification","description":"Upon https://w3c.github.io/ServiceWorker/#control-and-use-worker-client,\r\nworkers should inherit controllers for the blob URL. However, existing code\r\nallows only DedicatedWorkers to inherit the controller, and SharedWorkers do\r\nnot inherit the controller.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome inherit the controller\r\nif a blob URL is used as a SharedWorker URL.\r\n\r\nSetting the policy to Disabled leaves the behavior not aligned with the\r\nspecification as-is.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ef64e8a6917cbb3f":{"id":"device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards","displayName":"Turn off Internet download for Web publishing and online ordering wizards","description":"This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards.\n\nThese wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry.\n\nIf you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed.\n\nIf you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards.\n\nSee the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-disableinternetdownloadforwebpublishingandonlineorderingwizards"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards_1","displayName":"Enabled","description":null,"helpText":null}]},"ef3577397b73007d":{"id":"device_vendor_msft_policy_config_eap_allowtls1_3","displayName":"Allow TLS13","description":"Added in Windows 10, version 21H1. Allow or disallow use of TLS 1.3 during EAP client authentication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Eap#allowtls1_3"],"categoryId":"8d9eaa88-a2b4-42e7-83e5-8dc12f51d36b","categoryName":"Eap","options":[{"id":"device_vendor_msft_policy_config_eap_allowtls1_3_0","displayName":"Use of TLS version 1.3 is not allowed for authentication.","description":"Use of TLS version 1.3 is not allowed for authentication.","helpText":null},{"id":"device_vendor_msft_policy_config_eap_allowtls1_3_1","displayName":"Use of TLS version 1.3 is allowed for authentication.","description":"Use of TLS version 1.3 is allowed for authentication.","helpText":null}]},"efa57c5049277ede":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"ef89450ad8d3aca9":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200","displayName":"Run ActiveX controls and plugins","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_65536","displayName":"Administrator approved","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_1","displayName":"Prompt","description":null,"helpText":null}]},"ef623041aef4e7c8":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites","displayName":"Allow importing of favorites","description":"Allows users to import favorites from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, favorites aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_1","displayName":"Enabled","description":null,"helpText":null}]},"efd03072e390ad8a":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_explicitlyallowednetworkportsdesc","displayName":"Explicitly allowed network ports (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ef97241816f07302":{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended","displayName":"Allow importing of startup page settings","description":"Allows users to import Startup settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the Startup settings are always imported.\r\n\r\nIf you disable this policy, startup settings are not imported at first run or at manual import.\r\n\r\nIf you don't configure this policy, startup settings are imported at first run, and users can choose whether to import this data manually by selecting browser settings option during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import startup settings on first run, but users can select or clear **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Microsoft Edge Legacy and Google Chrome (on Windows 7, 8, and 10) browsers.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"ef92f665e76b6e5e":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"3edb2860-b77b-4240-af16-fb34d45d6ba1","categoryName":"Performance","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_1","displayName":"Enabled","description":null,"helpText":null}]},"ef650ddcf73d29d8":{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_production","displayName":"Current Channel (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_production_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_production_1","displayName":"True","description":null,"helpText":null}]},"ef9d7d08ee7085b7":{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock","displayName":"Let Apps Activate With Voice Above Lock","description":"This policy setting specifies whether Windows apps can be activated by voice while the system is locked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsactivatewithvoiceabovelock"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock_0","displayName":"User in control. Users can decide if Windows apps can be activated by voice while the screen is locked using Settings > Privacy options on the device.","description":"User in control. Users can decide if Windows apps can be activated by voice while the screen is locked using Settings > Privacy options on the device.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock_1","displayName":"Force allow. Windows apps can be activated by voice while the screen is locked, and users cannot change it.","description":"Force allow. Windows apps can be activated by voice while the screen is locked, and users cannot change it.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock_2","displayName":"Force deny. Windows apps cannot be activated by voice while the screen is locked, and users cannot change it.","description":"Force deny. Windows apps cannot be activated by voice while the screen is locked, and users cannot change it.","helpText":null}]},"efdecad5df664df1":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingwidthfactor","displayName":"[Deprecated] Width of grid box in percent relative to QR code bitmap width (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"ef880b96004328f7":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidesecureboot","displayName":"Hide Secure Boot","description":"Use this policy to hide the Secure boot area in the Windows Defender Security Center.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hidesecureboot"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidesecureboot_0","displayName":"(Disable or not configured) The Secure boot area is displayed.","description":"(Disable or not configured) The Secure boot area is displayed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidesecureboot_1","displayName":"(Enable) The Secure boot area is hidden.","description":"(Enable) The Secure boot area is hidden.","helpText":null}]},"eff88ffb7089199c":{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelcommandlineusersettingconfigurable","displayName":"Allow kernel command line configuration","description":"When set to disabled, this policy disables kernel command line configuration via .wslconfig (wsl2.kernelCommandLine). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelcommandlineusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelcommandlineusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},"ef59875433f684d6":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Access\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\Access\\Addins.\r\n\r\nYou can also obtain the ProgID of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"ef40af0340b87122":{"id":"user_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_1","displayName":"Disallow selection of Custom Locales (User)","description":"This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system.\r\n\r\nThis does not affect the selection of replacement locales. To prevent the selection of replacement locales, adjust the permissions of the %windir%\\Globalization directory to prevent the installation of locales by unauthorized users.\r\n\r\nThe policy setting \"Restrict user locales\" can also be enabled to disallow selection of a custom locale, even if this policy setting is not configured.\r\n\r\nIf you enable this policy setting, the user cannot select a custom locale as their user locale, but they can still select a replacement locale if one is installed.\r\n\r\nIf you disable or do not configure this policy setting, the user can select a custom locale as their user locale.\r\n\r\nIf this policy setting is enabled at the machine level, it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level, the per-user policy setting will be ignored. If this policy setting is not configured at the machine level, restrictions will be based on per-user policy settings.\r\n\r\nTo set this policy setting on a per-user basis, make sure that you do not configure the per-machine policy setting.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-customlocalesnoselect-1"],"categoryId":"edd1e620-09e1-47ea-abc8-1e241a174ed9","categoryName":"Locale Services","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ef90e138d9784555":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxrouting","displayName":"IPX Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipxrouting"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxrouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxrouting_1","displayName":"Enabled","description":null,"helpText":null}]},"effb7bb7d95a5f19":{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1","displayName":"Action on server disconnect (User)","description":"Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files.\r\n\r\nThis setting also disables the \"When a network connection is lost\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, you can use the \"Action\" box to specify how computers in the group respond.\r\n\r\n-- \"Work offline\" indicates that the computer can use local copies of network files while the server is inaccessible.\r\n\r\n-- \"Never go offline\" indicates that network files are not available while the server is inaccessible.\r\n\r\nIf you disable this setting or select the \"Work offline\" option, users can work offline if disconnected.\r\n\r\nIf you do not configure this setting, users can work offline by default, but they can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To configure this setting without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, click Advanced, and then select an option in the \"When a network connection is lost\" section.\r\n\r\nAlso, see the \"Non-default server disconnect actions\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-goofflineaction-1"],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ef9b614acd66ecd4":{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_1","displayName":"WPD Devices: Deny write access (User)","description":"This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-wpddevices-denywrite-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"ef33cf888e793fe6":{"id":"user_vendor_msft_policy_config_admx_startmenu_removeundockpcbutton","displayName":"Remove the \"Undock PC\" button from the Start Menu (User)","description":"If you enable this setting, the \"Undock PC\" button is removed from the simple Start Menu, and your PC cannot be undocked.\r\n\r\nIf you disable this setting or do not configure it, the \"Undock PC\" button remains on the simple Start menu, and your PC can be undocked.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-removeundockpcbutton"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_removeundockpcbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_removeundockpcbutton_1","displayName":"Enabled","description":null,"helpText":null}]},"ef6ed91f900e2877":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod","displayName":"Configure Sync Method (User)","description":"This policy setting configures the sync provider used by User Experience Virtualization (UE-V) to sync settings between users’ computers. With Sync Method set to ”SyncProvider,” the UE-V Agent uses a built-in sync provider to keep user settings synchronized between the computer and the settings storage location. This is the default value. You can disable the sync provider on computers that never go offline and are always connected to the settings storage location.\r\nWhen SyncMethod is set to “None,” the UE-V Agent uses no sync provider. Settings are written directly to the settings storage location rather than being cached to sync later. \r\nSet SyncMethod to “External” when an external synchronization engine is being deployed for settings sync. This could use OneDrive, Work Folders, SharePoint or any other engine that uses a local folder to synchronize data between users’ computers. In this mode, UE-V writes settings data to the local folder specified in the settings storage path. These settings are then synchronized to other computers by an external synchronization engine. UE-V has no control over this synchronization. It only reads and writes the settings data when the normal UE-V triggers take place.\r\nWith notifications enabled, UE-V users receive a message when the settings sync is delayed. The notification delay policy setting defines the delay before a notification appears.\r\nIf you disable this policy setting, the sync provider is used to synchronize settings between computers and the settings storage location.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-configuresyncmethod"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_1","displayName":"Enabled","description":null,"helpText":null}]},"ef15a0bd5abde4ca":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes","displayName":"Settings package size warning threshold (User)","description":"This policy setting allows you to configure the UE-V Agent to write a warning event to the event log when a settings package file size reaches a defined threshold. By default the UE-V Agent does not report information about package file size. \r\nIf you enable this policy setting, specify the threshold file size in bytes. When the settings package file exceeds this threshold the UE-V Agent will write a warning event to the event log.\r\nIf you disable or do not configure this policy setting, no event is written to the event log to report settings package size.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-maxpackagesizeinbytes"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_1","displayName":"Enabled","description":null,"helpText":null}]},"ef10dcac1a9804bd":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab","displayName":"Keep last tab open in Chrome. (User)","description":"Setting the policy to Enabled or leaving it unset has Google Chrome keep at least one tab open, after switching to an alternate browser.\r\n\r\nSetting the policy to Disabled has Google Chrome close the tab after switching to an alternate browser, even if it was the last tab. This causes Google Chrome to exit completely.","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab_1","displayName":"Enabled","description":null,"helpText":null}]},"ef1e5a22b6815147":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts","displayName":"Allow Web Authentication requests on sites with broken TLS certificates. (User)","description":"If set to Enabled, Google Chrome will\r\nallow Web Authentication requests on websites that have TLS certificates with\r\nerrors (i.e. websites considered not secure).\r\n\r\nIf the policy is set to Disabled or left unset, the default behavior of\r\nblocking such requests will apply.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts_1","displayName":"Enabled","description":null,"helpText":null}]},"ef3635b406d5caeb":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled","displayName":"Control Accept-Language Reduction (User)","description":"The Accept-Language HTTP request header and the JavaScript navigator.languages getter are planned for reduction for privacy reasons.\r\nTo facilitate testing and ensure compatibility, this policy allows you to enable or disable the Accept-Language Reduction feature.\r\n\r\nIf this policy is set to enabled or left unset, Accept-Language Reduction will be applied through field trials.\r\nIf this policy is set to disabled, field trials will not be able to activate Accept-Language Reduction.\r\n\r\nFor more information about this feature, please visit: https://github.com/explainers-by-googlers/reduce-accept-language.\r\n\r\nNOTE: Only newly-started renderer processes will reflect changes to this policy while the browser is running.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ef58eac18572fbb8":{"id":"user_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":null},"ef588cf55cb7e65c":{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom","displayName":"Disable Internet Explorer 11 Launch Via COM Automation (User)","description":"This policy lets you restrict launching of Internet Explorer using COM automation.\n\nIf you enable this policy, it prevents Internet Explorer 11 from being launched using COM automation.\n\nIf you disable, or don’t configure this policy, Internet Explorer 11 COM automation launches are allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerlaunchviacom"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_1","displayName":"Enabled","description":null,"helpText":null}]},"ef9c9dcce4bfb61f":{"id":"user_vendor_msft_policy_config_internetexplorer_searchproviderlist","displayName":"Restrict search providers to a specific list (User)","description":"This policy setting allows you to restrict the search providers that appear in the Search box in Internet Explorer to those defined in the list of policy keys for search providers (found under [HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\SearchScopes]). Normally, search providers can be added from third-party toolbars or in Setup, but the user can also add them from a search provider's website.\n\nIf you enable this policy setting, the user cannot configure the list of search providers on his or her computer, and any default providers installed do not appear (including providers installed from other applications). The only providers that appear are those in the list of policy keys for search providers. Note: This list can be created through a custom administrative template file. For information about creating this custom administrative template file, see the Internet Explorer documentation on search providers.\n\nIf you disable or do not configure this policy setting, the user can configure his or her list of search providers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-searchproviderlist"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_searchproviderlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_searchproviderlist_1","displayName":"Enabled","description":null,"helpText":null}]},"ef7191b737e7d56d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled","displayName":"Enable full-tab promotional content (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nControl the presentation of full-tab promotional or educational content. This setting controls the presentation of welcome pages that help users sign into Microsoft Edge, choose their default browser, or learn about product features.\r\n\r\nIf you enable this policy (set it true) or don't configure it, Microsoft Edge can show full-tab content to users to provide product information.\r\n\r\nIf you disable (set to false) this policy, Microsoft Edge can't show full-tab content to users.\r\n\r\nThis is deprecated - use ShowRecommendationsEnabled instead.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ef26eead514a4999":{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled","displayName":"Enable Microsoft Defender SmartScreen DNS requests (User)","description":"This policy lets you configure whether to enable DNS requests made by Microsoft Defender SmartScreen. Note: Disabling DNS requests will prevent Microsoft Defender SmartScreen from getting IP addresses, and potentially impact the IP-based protections provided.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen will make DNS requests.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen will not make any DNS requests.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ef7ff45a8ae48adc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_italianswitzerland","displayName":"Italian (Switzerland) (User)","description":"Enables the editing language Italian (Switzerland)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_italianswitzerland_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_italianswitzerland_1","displayName":"Enabled","description":null,"helpText":null}]},"ef72749f773a19eb":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache6_l_workflowcachename453","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"ef77660bb1300a8f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits","displayName":"Configure legacy RSA public key size (User)","description":"This policy setting allows you to configure whether Office displays a digital signature as legacy because of the number of RSA public key bits used in the digital signature.\r\n\r\nIf you enable this policy setting, you can specify the number of bits that Office treats as legacy in a digital signature. For example: 512, 768, etc.\r\n\r\nIf you don’t configure this policy setting, Office won’t treat any digital signatures as legacy because of the number of bits in the public key.\r\n\r\nEnabling this policy causes the minimum RSA public key size to be the next largest option.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacyrsabits_1","displayName":"Enabled","description":null,"helpText":null}]},"ef82a41f0d0d7aad":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_l_pathcolon302","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"efc2385e4eb466da":{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_mec","displayName":"Monthly Enterprise Channel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_mec_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_mec_1","displayName":"True","description":null,"helpText":null}]},"efd80c9b524561e6":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_automaticnamechecking_l_automaticnamechecking","displayName":"Automatic name checking (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_automaticnamechecking_l_automaticnamechecking_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_automaticnamechecking_l_automaticnamechecking_1","displayName":"True","description":null,"helpText":null}]},"ef2cd67ef78f8283":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_keepsearchfoldersoffline_l_specifydaystokeepfoldersaliveinofflineorcachedmode","displayName":"Specify days to keep folders alive in offline or cached mode: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fb721630-fc42-465b-ba22-ab670698c8b5","categoryName":"Search Folders","options":null},"efb0564500e1a428":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode","displayName":"Outlook Security Mode (User)","description":"This policy setting controls which set of security settings are enforced in Outlook. \r\n\r\nIf you enable this policy setting, you can choose from four options for enforcing Outlook security settings: \r\n\r\n* Outlook Default Security - This option is the default configuration in Outlook. Users can configure security themselves, and Outlook ignores any security-related settings configured in Group Policy. \r\n\r\n* Use Security Form from 'Outlook Security Settings' Public Folder - Outlook uses the settings from the security form published in the designated public folder. \r\n\r\n* Use Security Form from 'Outlook 10 Security Settings' Public Folder - Outlook uses the settings from the security form published in the designated public folder. \r\n\r\n* Use Outlook Security Group Policy - Outlook uses security settings from Group Policy. \r\n\r\nImportant - You must enable this policy setting if you want to apply the other Outlook security policy settings mentioned in this guide. \r\n\r\nIf you disable or do not configure this policy setting, Outlook users can configure security for themselves, and Outlook ignores any security-related settings that are configured in Group Policy. \r\n\r\nNote - In previous versions of Outlook, when security settings were published in a form in Exchange Server public folders, users who needed these settings required the HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Security\\CheckAdminSettings registry key to be set on their computers for the settings to apply. In Outlook, the CheckAdminSettings registry key is no longer used to determine users' security settings. Instead, the Outlook Security Mode setting can be used to determine whether Outlook security should be controlled directly by Group Policy, by the security form from the Outlook Security Settings Public Folder, or by the settings on users' own computers.","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings_l_outlooksecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},"ef5a302a1409647c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeignoreostformat_l_choosewhetherexistingostformatdeterminesmailboxmode","displayName":"Choose whether existing OST format determines mailbox mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeignoreostformat_l_choosewhetherexistingostformatdeterminesmailboxmode_0","displayName":"OST Format determines mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeignoreostformat_l_choosewhetherexistingostformatdeterminesmailboxmode_1","displayName":"Create new OST if format doesn't match mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeignoreostformat_l_choosewhetherexistingostformatdeterminesmailboxmode_2","displayName":"Prompt to create new OST if format doesn't match mode","description":null,"helpText":null}]},"eff2348c3a12073f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems157_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a20fe651-0f0a-4ddd-9d8b-273f17c89e22","categoryName":"Custom","options":null},"ef052d14f6b6fdb4":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails","displayName":"Set document behavior if file validation fails (User)","description":"This policy setting controls how Office handles documents when they fail file validation. \r\n\r\nIf you enable this policy setting, you can configure the following options for files that fail file validation:\r\n\r\n- Block files completely. Users cannot open the files.\r\n- Open files in Protected View and disallow edit. Users cannot edit the files. This is also how Office handles the files if you disable this policy setting.\r\n- Open files in Protected View and allow edit. Users can edit the files. This is also how Office handles the files if you do not configure this policy setting.\r\n\r\nIf you disable this policy setting, Office follows the \"Open files in Protected View and disallow edit\" behavior.\r\n\r\nIf you do not configure this policy setting, Office follows the \"Open files in Protected View and allow edit\" behavior.","helpText":"","infoUrls":[],"categoryId":"42ce9a9b-0574-4b5c-993b-7679de80be47","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_1","displayName":"Enabled","description":null,"helpText":null}]},"efb7815146b66702":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Visio\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Visio\\Addins.\r\n\r\nYou can also obtain the ProgID of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"categoryId":"e6f727b7-f474-4010-b214-83149ffdac2b","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_miscellaneous_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/f0.json b/public/intune-definitions/f0.json new file mode 100644 index 000000000000..bee47b1d479e --- /dev/null +++ b/public/intune-definitions/f0.json @@ -0,0 +1 @@ +{"f05ad35966dd298c":{"id":"com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch","displayName":"Interface Type Match","description":"An interface type. If specified, this rule matches only if the primary network interface hardware matches the specified type.","helpText":null,"infoUrls":[],"categoryId":"bbe51018-a17d-46c4-9517-ff45c54d8d18","categoryName":"DNS Settings","options":[{"id":"com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch_0","displayName":"Ethernet","description":null,"helpText":null},{"id":"com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch_1","displayName":"WiFi","description":null,"helpText":null},{"id":"com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch_2","displayName":"Cellular","description":null,"helpText":null}]},"f037cb9cad74fbcb":{"id":"com.apple.extensiblesso_registrationtoken","displayName":"Registration Token","description":"The token this device uses for registration with Platform SSO. Use it for silent registration with the Identity Provider. Requires that 'AuthenticationMethod' isn't empty.\nAvailable in macOS 13 and later.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"f075709802152535":{"id":"com.apple.managedclient.preferences_defaultsearchprovidercontextmenuaccessallowed","displayName":"Allow default search provider context menu search access","description":"Enables the use of a default search provider on the context menu.\n\nIf you set this policy to disabled the search context menu item that relies on your default search provider and sidebar search will not be available.\n\nIf this policy is set to enabled or not set, the context menu item for your default search provider and sidebar search will be available.\n\nThe policy value is only appled when the \"DefaultSearchProviderEnabled\" policy is enabled, and is not applicable otherwise.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchprovidercontextmenuaccessallowed"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultsearchprovidercontextmenuaccessallowed_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultsearchprovidercontextmenuaccessallowed_true","displayName":"Allowed","description":null,"helpText":null}]},"f0f39ccd731396e0":{"id":"com.apple.managedclient.preferences_defaultsensorssetting","displayName":"Default sensors setting","description":"Set whether websites can access and use sensors such as motion and light sensors. You can completely block or allow websites to get access to sensors.\n\nSetting the policy to 1 lets websites access and use sensors. Setting the policy to 2 denies acess to sensors.\n\nYou can override this policy for specific URL patterns by using the \"SensorsAllowedForUrls\" and \"SensorsBlockedForUrls\" policies.\n\nIf you don't configure this policy, websites can access and use sensors, and users can change this setting. This is the global default for \"SensorsAllowedForUrls\" and \"SensorsBlockedForUrls\".\n\nPolicy options mapping:\n\n* AllowSensors (1) = Allow sites to access sensors\n\n* BlockSensors (2) = Do not allow any site to access sensors\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsensorssetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultsensorssetting_0","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultsensorssetting_1","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},"f085600e91f37c93":{"id":"com.apple.managedclient.preferences_printheaderfooter","displayName":"Print headers and footers","description":"Force 'headers and footers' to be on or off in the printing dialog.\n\nIf you don't configure this policy, users can decide whether to print headers and footers.\n\nIf you disable this policy, users can't print headers and footers.\n\nIf you enable this policy, users always print headers and footers.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#printheaderfooter"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_printheaderfooter_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_printheaderfooter_true","displayName":"Enabled","description":null,"helpText":null}]},"f0b2f82ccb0f8296":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_reduce processor speed","displayName":"Reduce Processor Speed","description":"May not be available on all systems.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":[{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_reduce processor speed_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_reduce processor speed_1","displayName":"True","description":null,"helpText":null}]},"f0e56ba0316822f8":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_system sleep timer","displayName":"System Sleep Timer","description":"System sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"f0027d536ac7db10":{"id":"com.apple.xsan.preferences_denydlc","displayName":"Deny DLC","description":"An array of StorNext volume names. If the Xsan client is attempting to mount a volume named in this array, the client only mounts the volume if its logical units (LUNs) are available through Fibre Channel. It doesn't attempt to mount the volume using Distributed LAN Client (DLC).","helpText":null,"infoUrls":[],"categoryId":"fd3717c1-dcf8-4038-b7f7-4ad3359a9d32","categoryName":"Xsan Preferences","options":null},"f060acda7f6c4796":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled","displayName":"Enable Wallet Checkout feature","description":"Enables Wallet Checkout feature in Microsoft Edge.\n\nIf you enable or don't configure this policy, users can choose whether to use wallet checkout while shopping on Microsoft Edge.\n\nIf you disable this policy, users can't use wallet checkout while shopping on Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f003298057d92b56":{"id":"com.microsoft.edge.mamedgeappconfigsettings.importcookies","displayName":"Allow importing of Cookies","description":"Allows users to import Cookies from another browser into Microsoft Edge.\n\nIf you disable this policy, Cookies aren't imported on first run.\n\nIf you don't configure this policy, Cookies are imported on first run.\n\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\n\nNote: This policy currently manages Google Chrome import (on Windows 7, 8, and 10 and on macOS).","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.importcookies_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.importcookies_true","displayName":"Enabled","description":null,"helpText":null}]},"f04fdd39cd259b3a":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84 (Obsolete)","description":"This policy doesn't work because this policy allowed these features to be selectively re-enabled until Microsoft Edge version 85. The Web Components v0 APIs (Shadow DOM v0, Custom Elements v0, and HTML Imports) were deprecated in 2018, and are disabled by default starting in Microsoft Edge version 80.\n\nIf you set this policy to True, the Web Components v0 features are enabled for all sites.\n\nIf you set this policy to False or don't set this policy, the Web Components v0 features are disabled by default, starting in Microsoft Edge version 80.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.webcomponentsv0enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webcomponentsv0enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f0ef7f5b633d2340":{"id":"device_vendor_msft_bitlocker_systemdrivesminimumpinlength","displayName":"Configure minimum PIN length for startup","description":"\n This policy setting allows you to configure a minimum length for a Trusted Platform Module (TPM) startup PIN. This policy setting is applied when you turn on BitLocker. The startup PIN must have a minimum length of 4 digits and can have a maximum length of 20 digits.\n\n If you enable this policy setting, you can require a minimum number of digits to be used when setting the startup PIN.\n\n If you disable or do not configure this policy setting, users can configure a startup PIN of any length between 6 and 20 digits.\n\n NOTE: If minimum PIN length is set below 6 digits, Windows will attempt to update the TPM 2.0 lockout period to be greater than the default when a PIN is changed. If successful, Windows will only reset the TPM lockout period back to default if the TPM is reset.\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesminimumpinlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesminimumpinlength_1","displayName":"Enabled","description":null,"helpText":null}]},"f0e16ab89d9d2834":{"id":"device_vendor_msft_passportforwork_deviceunlock_groupb","displayName":"Group B","description":"Contains a list of providers by GUID that are to be considered for the second step of authentication","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"f0fcd5ddde577e70":{"id":"device_vendor_msft_policy_config_admx_eventforwarding_subscriptionmanager","displayName":"Configure target Subscription Manager","description":"This policy setting allows you to configure the server address, refresh interval, and issuer certificate authority (CA) of a target Subscription Manager.\r\n\r\nIf you enable this policy setting, you can configure the Source Computer to contact a specific FQDN (Fully Qualified Domain Name) or IP Address and request subscription specifics.\r\n\r\nUse the following syntax when using the HTTPS protocol:\r\nServer=https://:5986/wsman/SubscriptionManager/WEC,Refresh=,IssuerCA=. When using the HTTP protocol, use port 5985.\r\n\r\nIf you disable or do not configure this policy setting, the Event Collector computer will not be specified.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventforwarding#admx-eventforwarding-subscriptionmanager"],"categoryId":"c859dc1a-fdeb-4591-af97-79d078ee715b","categoryName":"Event Forwarding","options":[{"id":"device_vendor_msft_policy_config_admx_eventforwarding_subscriptionmanager_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventforwarding_subscriptionmanager_1","displayName":"Enabled","description":null,"helpText":null}]},"f0ded7a147302065":{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr","displayName":"Turn on Responder (RSPNDR) driver","description":"This policy setting changes the operational behavior of the Responder network protocol driver.\r\n\r\nThe Responder allows a computer to participate in Link Layer Topology Discovery requests so that it can be discovered and located on the network. It also allows a computer to participate in Quality-of-Service activities such as bandwidth estimation and network health analysis.\r\n\r\nIf you enable this policy setting, additional options are available to fine-tune your selection. You may choose the \"Allow operation while in domain\" option to allow the Responder to operate on a network interface that's connected to a managed network. On the other hand, if a network interface is connected to an unmanaged network, you may choose the \"Allow operation while in public network\" and \"Prohibit operation while in private network\" options instead.\r\n\r\nIf you disable or do not configure this policy setting, the default behavior for the Responder will apply.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery#admx-linklayertopologydiscovery-lltd-enablerspndr"],"categoryId":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","categoryName":"Link- Layer Topology Discovery","options":[{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_linklayertopologydiscovery_lltd_enablerspndr_1","displayName":"Enabled","description":null,"helpText":null}]},"f0cff6aa4a8942e9":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_gcsitecoverage","displayName":"Specify sites covered by the GC Locator DNS SRV Records","description":"This policy setting specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the GC resides, and records registered by a GC configured to register GC Locator DNS SRV records for those sites without a GC that are closest to it. \r\n\r\nThe GC Locator DNS records and the site-specific SRV records are dynamically registered by the Net Logon service, and they are used to locate the GC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication. A GC is a domain controller that contains a partial replica of every domain in Active Directory.\r\n\r\nTo specify the sites covered by the GC Locator DNS SRV records, click Enabled, and enter the sites' names in a space-delimited format.\r\n\r\nIf you do not configure this policy setting, it is not applied to any GCs, and GCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-gcsitecoverage"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_gcsitecoverage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_gcsitecoverage_1","displayName":"Enabled","description":null,"helpText":null}]},"f0363fb70d7743ec":{"id":"device_vendor_msft_policy_config_admx_printing_physicallocationsupport","displayName":"Pre-populate printer search location text","description":"Enables the physical Location Tracking setting for Windows printers.\r\n\r\nUse Location Tracking to design a location scheme for your enterprise and assign computers and printers to locations in the scheme. Location Tracking overrides the standard method used to locate and associate computers and printers. The standard method uses a printer's IP address and subnet mask to estimate its physical location and proximity to computers.\r\n\r\nIf you enable this setting, users can browse for printers by location without knowing the printer's location or location naming scheme. Enabling Location Tracking adds a Browse button in the Add Printer wizard's Printer Name and Sharing Location screen and to the General tab in the Printer Properties dialog box. If you enable the Group Policy Computer location setting, the default location you entered appears in the Location field by default.\r\n\r\nIf you disable this setting or do not configure it, Location Tracking is disabled. Printer proximity is estimated using the standard method (that is, based on IP address and subnet mask).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-physicallocationsupport"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_physicallocationsupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_physicallocationsupport_1","displayName":"Enabled","description":null,"helpText":null}]},"f08b8c8a7b93d9fd":{"id":"device_vendor_msft_policy_config_admx_smartcard_certproprootcleanupstring_rootcertcleanupoption_levels","displayName":"Root certificate clean up options","description":null,"helpText":"","infoUrls":[],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_certproprootcleanupstring_rootcertcleanupoption_levels_0","displayName":"No cleanup","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_certproprootcleanupstring_rootcertcleanupoption_levels_1","displayName":"Clean up certificates on smart card removal","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_certproprootcleanupstring_rootcertcleanupoption_levels_2","displayName":"Clean up certificates on log off","description":null,"helpText":null}]},"f0a7d96acc83c496":{"id":"device_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled","displayName":"Pin Apps to Start when installed","description":"This policy setting allows pinning apps to Start by default, when they are included by AppID on the list.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-startpinappswheninstalled"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_1","displayName":"Enabled","description":null,"helpText":null}]},"f0a662af6d82f277":{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_state","displayName":"Set Teredo State","description":"This policy setting allows you to configure Teredo, an address assignment and automatic tunneling technology that provides unicast IPv6 connectivity across the IPv4 Internet.\r\n\r\nIf you disable or do not configure this policy setting, the local host settings are used.\r\n\r\nIf you enable this policy setting, you can configure Teredo with one of the following settings:\r\n\r\nDefault: The default state is \"Client.\"\r\n\r\nDisabled: No Teredo interfaces are present on the host.\r\n\r\nClient: The Teredo interface is present only when the host is not on a network that includes a domain controller.\r\n\r\nEnterprise Client: The Teredo interface is always present, even if the host is on a network that includes a domain controller.\r\n\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tcpip#admx-tcpip-teredo-state"],"categoryId":"486f25cc-c865-446e-95b2-c5b061883a7a","categoryName":"I Pv6 Transition Technologies","options":[{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_state_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tcpip_teredo_state_1","displayName":"Enabled","description":null,"helpText":null}]},"f051ad86284041e1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_browserthemecolor","displayName":"Configure the color of the browser's theme (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"f05903764eff58ce":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations","displayName":"Determine the availability of variations (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations_0","displayName":"Enable all variations","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations_1","displayName":"Enable variations concerning critical fixes only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations_2","displayName":"Disable all variations","description":null,"helpText":null}]},"f09ff096ff715768":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended","displayName":"Continue running background apps when Google Chrome is closed","description":"Setting the policy to Enabled turns background mode on. In background mode, a Google Chrome process is started on OS sign-in and keeps running when the last browser window is closed, allowing background apps and the browsing session to remain active. The background process displays an icon in the system tray and can always be closed from there.\r\n\r\nSetting the policy to Disabled turns background mode off.\r\n\r\nIf you set the policy, users can't change it in the browser settings. If unset, background mode is off at first, but users can change it.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f05a8035327daea3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled","displayName":"Default legacy SameSite cookie behavior setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_1","displayName":"Revert to legacy SameSite behavior for cookies on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_2","displayName":"Use SameSite-by-default behavior for cookies on all sites","description":null,"helpText":null}]},"f0b6f2b520ffe038":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed","displayName":"Allow sites to simultaneously navigate and open pop-ups","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"f0da4bb09fca6cbd":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings","displayName":"Controls visibility of enterprise profile badge in the toolbar (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings_0","displayName":"Show expanded enterprise toolbar badge","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings_1","displayName":"Hide expanded enterprise toolbar badge","description":null,"helpText":null}]},"f06d3e224383e32f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled","displayName":"Re-enable deprecated/removed Mutation Events","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f07f3a6f27b7883f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled","displayName":"Enable zstd content-encoding support","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f0bcb07b61ad86ef":{"id":"device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems","displayName":"Disable Graph Recent Items","description":"Turning off this setting will prevent File Explorer from displaying files based on account and cloud provider activity.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#disablegraphrecentitems"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems_0","displayName":"File Explorer will request cloud file metadata and display it in the Quick access view.","description":"File Explorer will request cloud file metadata and display it in the Quick access view.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems_1","displayName":"File Explorer will not request cloud file metadata or display it in the Quick access view.","description":"File Explorer will not request cloud file metadata or display it in the Quick access view.","helpText":null}]},"f0fe273e07219755":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},"f09fedea1a573b8b":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled","displayName":"Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 114.\r\n\r\nWhen this policy is set to enabled, Microsoft Edge will perform verification of server certificates using the built-in certificate verifier with the Microsoft Root Store as the source of public trust.\r\n\r\nWhen this policy is set to disabled, Microsoft Edge will use the system certificate verifier and system root certificates.\r\n\r\nWhen this policy is not set, the Microsoft Root Store or system provided roots may be used.\r\n\r\nThis policy is planned to be removed in Microsoft Edge version\r\n121 for Android devices when support for using the platform supplied roots is planned to be removed.\r\n\r\nThis policy was removed in Microsoft Edge version 115 for\r\nMicrosoft Windows and macOS,\r\nMicrosoft Edge version 120 for\r\nLinux, and\r\nMicrosoft Edge version 121 for\r\nAndroid\r\nwhen support for using the platform supplied certificate verifier and roots was removed.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f0662c4edeb65790":{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'RestoreOnStartupIsNewTabPage'.\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'RestoreOnStartupIsLastSession'. The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'RestoreOnStartupIsURLs'.\r\n\r\nStarting in Microsoft Edge version 125, if you want to reopen URLs that were open the last time Microsoft Edge closed and open a specific set of URLs, choose 'RestoreOnStartupIsLastSessionAndURLs'.\r\n\r\nDisabling this setting is the same as leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is only available on instances that are managed via MDM or joined to a domain via MCX.\r\n\r\nPolicy options mapping:\r\n\r\n* RestoreOnStartupIsNewTabPage (5) = Open a new tab\r\n\r\n* RestoreOnStartupIsLastSession (1) = Restore the last session\r\n\r\n* RestoreOnStartupIsURLs (4) = Open a list of URLs\r\n\r\n* RestoreOnStartupIsLastSessionAndURLs (6) = Open a list of URLs and restore the last session\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"f057293adc5da4c2":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval","displayName":"Configure how frequently the Enterprise Mode Site List is refreshed","description":"This setting lets you specify a custom refresh interval for the Enterprise Mode Site List. The refresh interval is specified in minutes. The minimum refresh interval is 30 minutes.\r\n\r\nThis setting is applicable only when the 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) or 'InternetExplorerIntegrationCloudSiteList' (Configure the Enterprise Mode Cloud Site List) setting is configured.\r\n\r\nIf you configure this policy, Microsoft Edge will attempt to retrieve an updated version of the configured Enterprise Mode Site List using the specified refresh interval.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use a default refresh interval, it is 10080 minutes (7 days) starting from version 110 or later, 120 minutes from version 93 to 110, and 30 minutes before version 93.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"f07a8d27f9dfc45b":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains_enhancesecuritymodebypasslistdomainsdesc","displayName":"Configure the list of domains for which enhance security mode will not be enforced (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f00b68c33b760502":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_grooveexe98","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_grooveexe98_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_grooveexe98_1","displayName":"True","description":null,"helpText":null}]},"f0f09cc17087ff0b":{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_driver_exclusionlistentry","displayName":"File Hash File Name:","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"f0f6e41dba5d12ee":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts","displayName":"Let Apps Access Contacts","description":"This policy setting specifies whether Windows apps can access contacts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"f0511075dd2b6536":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone","displayName":"Let Apps Access Microphone","description":"This policy setting specifies whether Windows apps can access the microphone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},"f03058639917c611":{"id":"device_vendor_msft_policy_config_settingssync_enablewindowsbackup","displayName":"Enable Windows Backup","description":"This policy setting allows administrators to configure and manage windows backup for their organization.\n\nIf you enable this policy setting, windows backup will occur periodically.\n\nIf you disable or do not configure this policy setting, windows backup will not take place.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-settingssync#settingssync-enablewindowsbackup"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_settingssync_enablewindowsbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_enablewindowsbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"f03d7e6d7085f91e":{"id":"device_vendor_msft_policy_config_taskmanager_allowendtask","displayName":"Allow End Task","description":"This setting determines whether non-administrators can use Task Manager to end tasks - enabled (1) or disabled (0). Default: enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TaskManager#allowendtask"],"categoryId":"d2f1d28a-682d-49e9-bb71-0782e4a06c1b","categoryName":"Task Manager","options":[{"id":"device_vendor_msft_policy_config_taskmanager_allowendtask_0","displayName":"Block","description":"Disabled. EndTask functionality is blocked in TaskManager.","helpText":null},{"id":"device_vendor_msft_policy_config_taskmanager_allowendtask_1","displayName":"Allow","description":"Enabled. Users can perform EndTask in TaskManager.","helpText":null}]},"f07de5894424ea77":{"id":"linux_platformupdatecontrols_schedule_daysofmonth","displayName":"Platform Update Schedule Day of Month","description":"Specifies on which day of the month platform updates are allowed. Select 'Every Day' for no restriction, or choose a specific day (1-31).","helpText":null,"infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":[{"id":"linux_platformupdatecontrols_schedule_daysofmonth_1","displayName":"1","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_2","displayName":"2","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_3","displayName":"3","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_4","displayName":"4","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_5","displayName":"5","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_6","displayName":"6","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_7","displayName":"7","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_8","displayName":"8","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_9","displayName":"9","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_10","displayName":"10","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_11","displayName":"11","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_12","displayName":"12","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_13","displayName":"13","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_14","displayName":"14","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_15","displayName":"15","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_16","displayName":"16","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_17","displayName":"17","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_18","displayName":"18","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_19","displayName":"19","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_20","displayName":"20","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_21","displayName":"21","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_22","displayName":"22","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_23","displayName":"23","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_24","displayName":"24","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_25","displayName":"25","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_26","displayName":"26","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_27","displayName":"27","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_28","displayName":"28","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_29","displayName":"29","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_30","displayName":"30","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_daysofmonth_31","displayName":"31","description":null,"helpText":null}]},"f0dd645bfe09095a":{"id":"loginwindow_loginwindow","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"0e937777-d01a-4180-a937-c2010451a529","categoryName":"Login Window Login Items","options":null},"f0300d35e54cb66d":{"id":"user_vendor_msft_policy_config_admx_digitallocker_digitalx_diableapplication_titletext_1","displayName":"Do not allow Digital Locker to run (User)","description":"Specifies whether Digital Locker can run.\r\n\r\nDigital Locker is a dedicated download manager associated with Windows Marketplace and a feature of Windows that can be used to manage and download products acquired and stored in the user's Windows Marketplace Digital Locker.\r\n\r\nIf you enable this setting, Digital Locker will not run.\r\n\r\nIf you disable or do not configure this setting, Digital Locker can be run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-digitallocker#admx-digitallocker-digitalx-diableapplication-titletext-1"],"categoryId":"1dabc7da-bdf8-4c60-95de-427a4b2cb6bf","categoryName":"Digital Locker","options":[{"id":"user_vendor_msft_policy_config_admx_digitallocker_digitalx_diableapplication_titletext_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_digitallocker_digitalx_diableapplication_titletext_1_1","displayName":"Enabled","description":null,"helpText":null}]},"f0d422264fb4fed2":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ris","displayName":"Remote Installation Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ris"],"categoryId":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","categoryName":"Group Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ris_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ris_1","displayName":"Enabled","description":null,"helpText":null}]},"f0a04bca0247d03e":{"id":"user_vendor_msft_policy_config_admx_startmenu_nohelp","displayName":"Remove Help menu from Start Menu (User)","description":"This policy setting allows you to remove the Help command from the Start menu.\r\n\r\nIf you enable this policy setting, the Help command is removed from the Start menu.\r\n\r\nIf you disable or do not configure this policy setting, the Help command is available from the Start menu.\r\n\r\nThis policy setting only affects the Start menu. It does not remove the Help menu from File Explorer and does not prevent users from running Help.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nohelp"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nohelp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nohelp_1","displayName":"Enabled","description":null,"helpText":null}]},"f078bc96acae8d25":{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnuser","displayName":"Notify user when profile storage space is exceeded. (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnuser_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnuser_1","displayName":"True","description":null,"helpText":null}]},"f073682dc223b804":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nowindowshotkeys","displayName":"Turn off Windows Key hotkeys (User)","description":"Turn off Windows Key hotkeys.\r\n\r\nKeyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing Windows+E starts File Explorer. By using this setting, you can disable these Windows Key hotkeys.\r\n\r\nIf you enable this setting, the Windows Key hotkeys are unavailable.\r\n\r\nIf you disable or do not configure this setting, the Windows Key hotkeys are available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nowindowshotkeys"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nowindowshotkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nowindowshotkeys_1","displayName":"Enabled","description":null,"helpText":null}]},"f09f94e5bba60d99":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_explicitlyallowednetworkportsdesc","displayName":"Explicitly allowed network ports (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"f04118613c0b7b59":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist","displayName":"Configure list of force-installed Web Apps (User)","description":"Setting the policy specifies a list of web apps that install silently, without user interaction, and which users can't uninstall or turn off.\r\n\r\nEach list item of the policy is an object with a mandatory member:\r\nurl (the URL of the web app to install)\r\n\r\nand 5 optional members:\r\n- default_launch_container\r\n(for how the web app opens—a new tab is the default)\r\n\r\n- create_desktop_shortcut\r\n(True if you want to create Linux and\r\nMicrosoft® Windows® desktop shortcuts).\r\n\r\n- fallback_app_name\r\n(Starting with Google Chrome version 90,\r\nallows you to override the app name if it is not a\r\nProgressive Web App (PWA), or the app name that is temporarily\r\ninstalled if it is a PWA but authentication is required before the\r\ninstallation can be completed. If both\r\ncustom_name and\r\nfallback_app_name are provided,\r\nthe latter will be ignored.)\r\n\r\n- custom_name\r\n(Starting with Google Chrome\r\nversion 96, allows you to permanently override the app name for all web\r\napps and PWAs. Currently only supported on\r\nGoogle Chrome OS.)\r\n\r\n- custom_icon\r\n(Starting with Google Chrome\r\nversion 96, allows you to override the app icon of installed apps. The\r\nicons have to be square, maximal 1 MB in size, and in one of the following\r\nformats: jpeg, png, gif, webp, ico. The hash value has to be the SHA256\r\nhash of the icon file. Currently only supported on\r\nGoogle Chrome OS.)\r\n\r\nSee PinnedLauncherApps for pinning apps to the Google Chrome OS shelf.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebAppInstallForceList for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.google.com/maps\",\r\n \"default_launch_container\": \"window\",\r\n \"create_desktop_shortcut\": true\r\n },\r\n {\r\n \"url\": \"https://docs.google.com\",\r\n \"default_launch_container\": \"tab\"\r\n },\r\n {\r\n \"url\": \"https://docs.google.com/editor\",\r\n \"default_launch_container\": \"window\",\r\n \"fallback_app_name\": \"Editor\"\r\n },\r\n {\r\n \"url\": \"https://docs.google.com/sheets\",\r\n \"default_launch_container\": \"window\",\r\n \"custom_name\": \"Spreadsheets\"\r\n },\r\n {\r\n \"url\": \"https://weather.example.com\",\r\n \"custom_icon\": {\r\n \"url\": \"https://mydomain.example.com/sunny_icon.png\",\r\n \"hash\": \"c28f469c450e9ab2b86ea47038d2b324c6ad3b1e9a4bd8960da13214afd0ca38\"\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"f066a88ed01bd261":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_corsmitigationlistdesc","displayName":"Enable CORS check mitigations in the new CORS implementation (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"f064be62677023d3":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_notificationsblockedforurlsdesc","displayName":"Block notifications on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"f0a4ecdae65339ef":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled","displayName":"Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (obsolete) (User)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 125.\r\n\r\nThis policy is obsoleted because Grammar Tools is deprecated from Edge. This policy won't work in Microsoft Edge version 126. Enables the Grammar Tools feature within Immersive Reader in Microsoft Edge.\r\nThis helps improve reading comprehension by splitting words into syllables and highlighting nouns, verbs, adverbs, and adjectives.\r\n\r\nIf you enable this policy or don't configure it, the Grammar Tools option shows up within Immersive Reader.\r\nIf you disable this policy, users can't access the Grammar Tools feature within Immersive Reader.","helpText":"","infoUrls":[],"categoryId":"8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","categoryName":"Immersive Reader settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f0132df0f740bc56":{"id":"user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_typosquattingallowlistdomainsdesc","displayName":"Configure the list of domains for which Edge Website Typo Protection won't trigger warnings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fb1e99d0-b921-4b19-9842-17e3e7987528","categoryName":"Edge Website Typo Protection settings","options":null},"f00f916cffad0823":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls","displayName":"Configure tracking prevention exceptions for specific sites (User)","description":"Configure the list of URL patterns that are excluded from tracking prevention.\r\n\r\nIf you configure this policy, the list of configured URL patterns is excluded from tracking prevention.\r\n\r\nIf you don't configure this policy, the global default value from the \"Block tracking of users' web-browsing activity\" policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f0a2b1d411776b78":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts (User)","description":"List of URL patterns. Private network requests initiated from insecure websites served by matching origins are allowed.\r\n\r\nIf this policy is not set, this policy behaves as if set to the empty list.\r\n\r\nFor origins not covered by the patterns specified here, the global default value will be used either from the 'InsecurePrivateNetworkRequestsAllowed' (Specifies whether to allow insecure websites to make requests to more-private network endpoints) policy, if it is set, or the user's personal configuration otherwise.\r\n\r\nNote that this policy only affects insecure origins, so secure origins (e.g. https://example.com) included in this list will be ignored.\r\n\r\nFor detailed information on valid URL patterns, please see https://docs.microsoft.com/en-us/DeployEdge/edge-learnmmore-url-list-filter%20format.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"43057320-7058-46d5-86f9-a56c80bbf8b9","categoryName":"Private Network Request Settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f0ebe0952e8047ff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiciraq","displayName":"Arabic (Iraq) (User)","description":"Enables the editing language Arabic (Iraq)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiciraq_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabiciraq_1","displayName":"Enabled","description":null,"helpText":null}]},"f059a197c303c550":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_burmese","displayName":"Burmese (User)","description":"Enables the editing language Burmese","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_burmese_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_burmese_1","displayName":"Enabled","description":null,"helpText":null}]},"f02f16a8ab9eeea8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache12_l_workflowpath484","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"f0d122d00b1973e9":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc15_l_datecolon295","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"f06fcf8e4372c62f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_subscriptionactivation_l_hidemanageaccountlink","displayName":"Do not show \"Manage Account\" link for subscription licenses. (User)","description":"This policy setting controls whether a \"Manage Account\" link is exposed in Account tab of the File menu for subscription licenses.\r\n\r\nIf you enable this policy setting, Office does not expose a \"Manage Account\" link for subscription licenses.\r\n\r\nIf you disable or do not configure this policy setting, Office exposes a \"Manage Account\" link for subscription licenses.","helpText":"","infoUrls":[],"categoryId":"760376f3-6b74-4992-89eb-aa41d6190e94","categoryName":"Subscription Activation","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_subscriptionactivation_l_hidemanageaccountlink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_subscriptionactivation_l_hidemanageaccountlink_1","displayName":"Enabled","description":null,"helpText":null}]},"f0703d95ab59b6db":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_versionsandrecylebin_l_daysbacktokeepitemsinrecyclebin_l_daysbacktokeepitemsinrecyclebinspinid","displayName":"Days back to keep items in recycle bin (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c492dd55-8876-4b1b-b620-615cc9b65ef8","categoryName":"Versions and Recyle Bin","options":null},"f09bafda9bc7468f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions","displayName":"Layout Options (User)","description":"Sets the value in the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"b9ab4d39-9e28-4897-aa34-0201a35ea989","categoryName":"Right-to-left","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_righttoleft_l_layoutoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"f0f96f04eba9743b":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_addslidenavigationcontrols","displayName":"Add slide navigation controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6fd44fd0-80d1-47a0-acad-c115e5b807b6","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_addslidenavigationcontrols_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced~l_weboptions~l_general_l_slidenavigation_l_addslidenavigationcontrols_1","displayName":"True","description":null,"helpText":null}]},"f00ae5c0cf85d28f":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipherkeylength","displayName":"Set CNG cipher key length (User)","description":"This policy setting allows you to configure the number of bits to use when creating the cipher key. This number will be rounded down to a multiple of 8.\r\n\r\nIf you enable this policy setting, the key bits specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default value will be used.","helpText":"","infoUrls":[],"categoryId":"9544c86b-47bb-4cb2-a725-63214a0454f4","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipherkeylength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_cryptography_l_setcngcipherkeylength_1","displayName":"Enabled","description":null,"helpText":null}]},"f040f4f330032316":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders55","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders55_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders55_1","displayName":"True","description":null,"helpText":null}]},"f01df096f87a0aaa":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_l_allowsubfolders19","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_l_allowsubfolders19_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc03_l_allowsubfolders19_1","displayName":"True","description":null,"helpText":null}]},"f0408c2c3b4dea69":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_myshapes","displayName":"My Shapes (User)","description":"Displays the path of the My Shapes folder.","helpText":"","infoUrls":[],"categoryId":"66395272-f132-4170-b88e-87f794f987f4","categoryName":"File Locations","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_myshapes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_filelocations_l_myshapes_1","displayName":"Enabled","description":null,"helpText":null}]},"f0163956d854f849":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc18_l_descriptioncolon78","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"f06063a5314702c0":{"id":"vendor_msft_wirelessnetworkpreference_connectionprofiles_{connectionprofileid}","displayName":" Connection Profile ID (Windows Insiders only)","description":"Unique identifier of a network preference policy. Unique ID is auto-generated.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":[],"categoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","categoryName":"Wireless Network Preference","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/f1.json b/public/intune-definitions/f1.json new file mode 100644 index 000000000000..702e3dc69d33 --- /dev/null +++ b/public/intune-definitions/f1.json @@ -0,0 +1 @@ +{"f174dc7b729fbc41":{"id":"com.apple.carddav.account_carddavport","displayName":"Card DAV Port","description":"The server’s port.","helpText":null,"infoUrls":[],"categoryId":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","categoryName":"Carddav","options":null},"f1891249e1fe54f8":{"id":"com.apple.directoryservice.managed_adrestrictddnsflag","displayName":"AD Restrict DDNS Flag","description":"If true, enables the AD Restrict DDNS key.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":[{"id":"com.apple.directoryservice.managed_adrestrictddnsflag_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.directoryservice.managed_adrestrictddnsflag_true","displayName":"True","description":null,"helpText":null}]},"f1c930527a08eaa7":{"id":"com.apple.dock_persistent-others","displayName":"Persistent Others","description":"Dock items located on the Documents side of the Dock that can be removed.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"f11060a9ab3de740":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_lcid","displayName":"Skype for Business LCID","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"f160ff16b1a4364e":{"id":"com.apple.managedclient.preferences_disableencryptonly","displayName":"Disable Microsoft 365 encryption options","description":"Prevent users from applying the Encrypt-Only option to emails when using Microsoft 365 Message Encryption.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-encrypt-only"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_disableencryptonly_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disableencryptonly_true","displayName":"True","description":null,"helpText":null}]},"f178c2b5a55b4295":{"id":"com.apple.managedclient.preferences_disablesmimecompose","displayName":"Disable S/MIME","description":"Prevent users from applying S/MIME option to email messages.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#disable-smime"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":[{"id":"com.apple.managedclient.preferences_disablesmimecompose_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_disablesmimecompose_true","displayName":"True","description":null,"helpText":null}]},"f1144498cdf12922":{"id":"com.apple.managedclient.preferences_passwordprotectionloginurls","displayName":"Configure the list of enterprise login URLs where password protection service should capture fingerprint of password","description":"Configure the list of enterprise login URLs (HTTP and HTTPS schemes only) where Microsoft Edge should capture the fingerprint of passwords and use it for password reuse detection.\n\nIf you enable this policy, the password protection service captures fingerprints of passwords on the defined URLs.\n\nIf you disable this policy or don't configure it, no password fingerprints are captured.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordprotectionloginurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f147e5faa8f31808":{"id":"com.apple.managedclient.preferences_profiletypeinprofilebuttonenabled","displayName":"Controls the display of the profile button label for the work or school profile","description":"Controls whether the label for the work or school profile type is shown in the profile button.\n\nThis policy does not apply when the OrganizationalBrandingOnWorkProfileUIEnabled policy is enabled.\n\nIf you enable this policy, the label for the work or school profile type appears in the profile button.\n\nIf you disable this policy or leave it not configured, the label is not shown.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#profiletypeinprofilebuttonenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_profiletypeinprofilebuttonenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_profiletypeinprofilebuttonenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f1e228f737eedd9e":{"id":"com.apple.mcxmenuextras_homesync.menu","displayName":"HomeSync","description":"If true, enables the HomeSync menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_homesync.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_homesync.menu_true","displayName":"True","description":null,"helpText":null}]},"f13bda1d9450e9f4":{"id":"com.apple.mcxmenuextras_maxwaitseconds","displayName":"Max Wait Seconds","description":"The maximum wait, in seconds, for all menu extras to be added or removed.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":null},"f1c186609921b3fa":{"id":"com.apple.mobiledevice.passwordpolicy_requirealphanumeric","displayName":"Require Alphanumeric Passcode","description":"If true, requires alphabetic characters (abcd) instead of only numeric characters.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":[{"id":"com.apple.mobiledevice.passwordpolicy_requirealphanumeric_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mobiledevice.passwordpolicy_requirealphanumeric_true","displayName":"True","description":null,"helpText":null}]},"f1bd795c593835f9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.composeinlineenabled","displayName":"Control access to Microsoft 365 Copilot writing assistance in Microsoft Edge for Business","description":"This policy controls whether users can use writing support features in Microsoft Edge for Business, such as Rewrite, which utilizes Microsoft 365 Copilot Chat. With Rewrite, users can receive help with drafting content, rewriting text, and adjusting style directly in their browser tab. In Microsoft Edge, users can trigger it when highlighting editable content in their main browser through the right-click context menu.\n\nThis policy applies only to Microsoft Entra accounts and doesn't apply to Microsoft accounts.\n\nIf you enable this policy, users can use Rewrite in Microsoft Edge when logged in with an Entra account.\n\nIf you disable this policy, users within your tenant can't use Rewrite.\n\nIf you don't configure this policy, the default behavior is as follows:\n\n- Rewrite is available to users\n\n- Users can enable or disable Microsoft 365 Copilot access to Microsoft Edge page content using the toggle in Microsoft Edge settings.\n\nNote: Rewrite isn't available on pages protected by data loss prevention (DLP) policies to help maintain compliance.\n\nLearn more about Microsoft 365 Copilot Chat data, privacy, and security here: https://go.microsoft.com/fwlink/?linkid=2321816","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.composeinlineenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.composeinlineenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f12e6280f0e8c8e9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.cpuperformancetieroverride","displayName":"Override for the CPU performance tier","description":"This policy allows you to override the value returned by the CPU Performance API (that is, navigator.cpuPerformance).\n\nIf you enable this policy, the value of navigator.cpuPerformance is overridden with the specified value.\n\nIf you don’t configure this policy, the default performance tier calculation is used.\n\nYou can specify a value from 0 through 4.\n\nFor more information, see https://github.com/WICG/cpu-performance.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"f14f202efa2a7e8b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.mousegestureenabled","displayName":"Mouse Gesture Enabled","description":"This policy lets you configure the Mouse Gesture feature in Microsoft Edge.\n\nThis feature provides an easy way for users to complete tasks like scroll forward or backward, open new tab, refresh page, etc. They can finish a task by pressing and holding the mouse right button to draw certain patterns on a webpage, instead of clicking the buttons or using keyboard shortcuts.\n\nIf you enable or don't configure this policy, you can use the Mouse Gesture feature on Microsoft Edge to start using this feature.\n\nIf you disable this policy, you can't use the Mouse Gesture feature in Microsoft Edge.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.mousegestureenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.mousegestureenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f110dab1a70ae0b0":{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdunits","displayName":"Units","description":null,"helpText":"","infoUrls":[],"categoryId":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","categoryName":"Disk Quotas","options":[{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdunits_1","displayName":"KB","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdunits_2","displayName":"MB","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdunits_3","displayName":"GB","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdunits_4","displayName":"TB","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdunits_5","displayName":"PB","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_diskquota_dq_limit_dq_thresholdunits_6","displayName":"EB","description":null,"helpText":null}]},"f1c776aae7c8c2a0":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_dnsrefreshinterval_netlogon_dnsrefreshintervallabel","displayName":"Seconds:","description":null,"helpText":"","infoUrls":[],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":null},"f128b60844281feb":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed","displayName":"Allow default search provider context menu search access","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider will be available.\r\n\r\nThe policy value is only appled when the DefaultSearchProviderEnabled policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"f132833cef63039e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata","displayName":"Import autofill form data from default browser on first run","description":"Setting the policy to Enabled imports autofill form data from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no autofill form data is imported on first run.\r\n\r\nUsers can trigger an import dialog and the autofill form data checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata_1","displayName":"Enabled","description":null,"helpText":null}]},"f12cc87ea1b13316":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_urlblocklistdesc","displayName":"Block access to a list of URLs (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"f1650a05715638f6":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled.","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy. Currently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers. This enterprise policy can be used to opt out of this gradual deprecation by forcing the default to remain as enabled.\r\n\r\nPages may depend on unload event handlers to save data or signal the end of a user session to the server. This is not recommended as it is unreliable and impacts performance by blocking use of BackForwardCache. Recommended alternatives exist, however the unload event has been used for a long time. Some applications may still rely on them.\r\n\r\nIf this policy is set to false or not set, then unload events handlers will be gradually deprecated in-line with the deprecation rollout and sites which do not set Permissions-Policy header will stop firing `unload` events.\r\n\r\nIf this policy is set to true then unload event handlers will continue to work by default.\r\n\r\nNOTE: This policy had an incorrectly documented default of `true` in M117. The unload event did and will not change in M117, so this policy has no effect in that version.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_forcepermissionpolicyunloaddefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_forcepermissionpolicyunloaddefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f1e20551a26babe2":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},"f1133500f4026c79":{"id":"device_vendor_msft_policy_config_defender_avgcpuloadfactor","displayName":"Avg CPU Load Factor","description":"Represents the average CPU load factor for the Windows Defender scan (in percent). The default value is 50.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"f18714fcbeffd1be":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_0","displayName":"Do not mirror OST to VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_1","displayName":"Copy OST to VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_2","displayName":"Move OST to VHD","description":null,"helpText":null}]},"f182db32bae62162":{"id":"device_vendor_msft_policy_config_internetexplorer_includealllocalsites","displayName":"Intranet Sites: Include all local (intranet) sites not listed in other zones","description":"This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone.\n\nIf you enable this policy setting, local sites which are not explicitly mapped into a zone are considered to be in the Intranet Zone.\n\nIf you disable this policy setting, local sites which are not explicitly mapped into a zone will not be considered to be in the Intranet Zone (so would typically be in the Internet Zone).\n\nIf you do not configure this policy setting, users choose whether to force local sites into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includealllocalsites"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_includealllocalsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_includealllocalsites_1","displayName":"Enabled","description":null,"helpText":null}]},"f13d2c5437427b85":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"f1fdf40885f649e7":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"f1156ae31c46d491":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},"f118223d805bff48":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc","displayName":"Block images on specific sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"f19fb669b156de80":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled","displayName":"Default Profile Setting Enabled","description":"Configuring this policy will let you set a default profile in Microsoft Edge to be used when opening the browser rather than the last profile used. This policy won't affect when \"--profile-directory\" parameter has been specified. Set the value to \"Default\" to refer to the default profile. The value is case sensitive.\r\nThe value of the policy is the name of the profile (case sensitive) and can be configured with string that is the name of a specific profile.\r\nThe value \"Edge Kids Mode\" and \"Guest Profile\" are considered not useful values because they not supposed to be a default profile.\r\nThis policy won't impact the following scenarios:\r\n 1) Settings specified in \"Profile preferences for sites\" in \"Profile preferences\"\r\n 2) Links opening from Outlook and Teams.\r\n\r\nThe following statements are under the condition of not specify the \"--profile-directory\" and configured value is not \"Edge Kids Mode\" or \"Guest Profile\":\r\nIf you enable this policy and configure it with a specific profile name and the specified profile can be found, Microsoft Edge will use the specified profile when launching and the setting of \"Default profile for external link\" is changed to the specified profile name and greyed out.\r\nIf you enable this policy and configure it with a specific profile name but it can't be found, the policy will behave like it's never been set before.\r\nIf you enable this policy, but don't configure or disable it, the policy will behave like it's never been set before.\r\n\r\nExample value: Default","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f1b9b5b611eb103f":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_tlsciphersuitedenylistdesc","displayName":"Specify the TLS cipher suites to disable (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f196185ebd9e4fb3":{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended","displayName":"Show Microsoft Rewards experiences","description":"Show Microsoft Rewards experience and notifications.\r\nIf you enable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.\r\n\r\nIf you disable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will not see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be disabled and toggled off.\r\n\r\nIf you don't configure this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f19e9716b1754a0f":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains","displayName":"Configure the list of domains for which enhance security mode will always be enforced","description":"Configure the list of enhance security untrusted domains. This means that\r\nenhance security mode will always be enforced when loading the sites in untrusted domains.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},"f19c542df53eabce":{"id":"device_vendor_msft_policy_config_security_cleartpmifnotready","displayName":"Clear TPM If Not Ready","description":"Admin access is required. The prompt will appear on first admin logon after a reboot when the TPM is in a non-ready state that can be remediated with a TPM Clear. The prompt will have a description of what clearing the TPM does and that it requires a reboot. The user can dismiss it, but it will appear on next admin logon after restart.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#cleartpmifnotready"],"categoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","categoryName":"Security","options":[{"id":"device_vendor_msft_policy_config_security_cleartpmifnotready_0","displayName":"Disabled","description":"Will not force recovery from a non-ready TPM state.","helpText":null},{"id":"device_vendor_msft_policy_config_security_cleartpmifnotready_1","displayName":"Enabled","description":"Will prompt to clear the TPM if the TPM is in a non-ready state (or reduced functionality) which can be remediated with a TPM Clear.","helpText":null}]},"f1cb669a7a2452c4":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl","displayName":"URL to a proxy .pac file","description":"Allows you to specify a URL for a proxy auto-config (PAC) file.\r\n\r\n If you enable this policy, you can specify a URL for a PAC file to automate how Microsoft Edge Update selects the appropriate proxy server for fetching a particular website.\r\n\r\n This policy is applied only if you have specified manual proxy settings in the 'Choose how to specify proxy server settings' policy.\r\n\r\n Don't configure this policy if you have selected a proxy setting other than manual in the 'Choose how to specify proxy server settings' policy.","helpText":"","infoUrls":[],"categoryId":"ff543267-540e-4e37-a1e9-daf6a5e16ba7","categoryName":"Proxy Server","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl_1","displayName":"Enabled","description":null,"helpText":null}]},"f199ce83fd439328":{"id":"device_vendor_msft_policy_config_userrights_createglobalobjects","displayName":"Create Global Objects","description":"This security setting determines whether users can create global objects that are available to all sessions. Users can still create objects that are specific to their own session if they do not have this user right. Users who can create global objects could affect processes that run under other users' sessions, which could lead to application failure or data corruption. Caution: Assigning this user right can be a security risk. Assign this user right only to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createglobalobjects"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"f1a38fa1159e52b5":{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilotforindividuals","displayName":"Disable Copilot for Individual","description":"If this setting is enabled, it will prevent your users from using GitHub Copilot for Individual. GitHub Copilot for Business and GitHub Copilot for Enterprise will still be enabled. For more information, see: https://aka.ms/CopilotGroupPolicy","helpText":"","infoUrls":[],"categoryId":"652a676c-9d60-4c9a-88b6-823a24961a9b","categoryName":"Copilot Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilotforindividuals_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilotforindividuals_1","displayName":"Enabled","description":null,"helpText":null}]},"f1f52a9a89bf85e5":{"id":"enrollment_autopilot_dpp_enablequ","displayName":"Install Windows updates (might restart the device)","description":"","helpText":"","infoUrls":[],"categoryId":"72e4d72b-e01e-427c-a3b6-05bdcf04ef8d","categoryName":null,"options":[{"id":"enrollment_autopilot_dpp_enablequ_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_enablequ_1","displayName":"Yes","description":null,"helpText":null}]},"f15731beee9a8858":{"id":"linux_platformupdatecontrols_schedule_starttime","displayName":"Platform Update Window Start Time","description":"Specifies the start of the allowed time window for platform updates (24-hour clock). Select 'All Day' for no restriction. Use together with end time to define an update window.","helpText":null,"infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":[{"id":"linux_platformupdatecontrols_schedule_starttime_every","displayName":"All Day","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_0","displayName":"00:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_1","displayName":"01:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_2","displayName":"02:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_3","displayName":"03:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_4","displayName":"04:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_5","displayName":"05:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_6","displayName":"06:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_7","displayName":"07:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_8","displayName":"08:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_9","displayName":"09:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_10","displayName":"10:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_11","displayName":"11:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_12","displayName":"12:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_13","displayName":"13:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_14","displayName":"14:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_15","displayName":"15:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_16","displayName":"16:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_17","displayName":"17:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_18","displayName":"18:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_19","displayName":"19:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_20","displayName":"20:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_21","displayName":"21:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_22","displayName":"22:00","description":null,"helpText":null},{"id":"linux_platformupdatecontrols_schedule_starttime_23","displayName":"23:00","description":null,"helpText":null}]},"f183c9705d359308":{"id":"linux_platformupdatecontrols_version_fixedvalue","displayName":"Platform Update Fixed Version","description":"Specify the exact platform version to pin to, e.g. 101.26021.0002","helpText":"101.26021.0002","infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#platform-update-preferences"],"categoryId":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","categoryName":"Platform Update","options":null},"f1f6d3d9bfac8133":{"id":"mde_managed_antivirusengine_offlinedefinitionupdatefallbacktocloud","displayName":"Offline Definition Update Fallback To Cloud","description":"Whether to fall back to cloud updates if offline updates fail.","helpText":"Choose True to allow fallback to cloud update when offline update fails.","infoUrls":["https://learn.microsoft.com/microsoft-365/security/defender-endpoint/offline-Definition-Update-FallbackToCloud"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"mde_managed_antivirusengine_offlinedefinitionupdatefallbacktocloud_false","displayName":"False","description":null,"helpText":null},{"id":"mde_managed_antivirusengine_offlinedefinitionupdatefallbacktocloud_true","displayName":"True","description":null,"helpText":null}]},"f1a405494ee3b20e":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout_screensavertimeoutfreqspin","displayName":"Seconds: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":null},"f18a80e6f13fc767":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sca","displayName":"Security Configuration and Analysis (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sca"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sca_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sca_1","displayName":"Enabled","description":null,"helpText":null}]},"f114fedc7e5dc440":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader","displayName":"Include invocation headers: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader_1","displayName":"True","description":null,"helpText":null}]},"f1c20f92d5516bc7":{"id":"user_vendor_msft_policy_config_admx_programs_noprogramsandfeatures","displayName":"Hide \"Programs and Features\" page (User)","description":"This setting prevents users from accessing \"Programs and Features\" to view, uninstall, change, or repair programs that are currently installed on the computer.\r\n\r\nIf this setting is disabled or not configured, \"Programs and Features\" will be available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to view or uninstall programs. It also does not prevent users from linking to related Programs Control Panel Features including Windows Features, Get Programs, or Windows Marketplace.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-noprogramsandfeatures"],"categoryId":"dc16dbf0-aac8-4ff3-a546-1ddb55650f47","categoryName":"Programs","options":[{"id":"user_vendor_msft_policy_config_admx_programs_noprogramsandfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_noprogramsandfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},"f1e06e5bfe2bd107":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor","displayName":"Configure the color of the browser's theme (User)","description":"This policy allows admins to configure the color of Google Chrome's theme. The input string should be a valid hex color string matching the format \"#RRGGBB\".\r\n\r\nSetting the policy to a valid hex color causes a theme based on that color to be automatically generated and applied to the browser. Users won't be able to change the theme set by the policy.\r\n\r\nLeaving the policy unset lets users change their browser's theme as preferred.\r\n\r\nExample value: #FFFFFF","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_1","displayName":"Enabled","description":null,"helpText":null}]},"f1a917c42049c61e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible","displayName":"Show history clusters on the Chrome history page (User)","description":"This policy controls the visibility of history clusters on the Chrome history page.\r\n\r\nIf the policy is set to Enabled, history clusters will be visible at chrome://history/journeys.\r\n\r\nIf the policy is set to Disabled, history clusters will not be visible at chrome://history/journeys.\r\n\r\nIf the policy is left unset, history clusters will be visible at chrome://history/journeys by default and users can change the visibility of history clusters.\r\n","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"f197757de6f2486b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks","displayName":"Import bookmarks from default browser on first run (User)","description":"Setting the policy to Enabled imports bookmarks from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no bookmarks are imported on first run.\r\n\r\nUsers can trigger an import dialog and the bookmarks checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks_1","displayName":"Enabled","description":null,"helpText":null}]},"f143f91e05de8cd6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended","displayName":"Enable AutoFill (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"de643352-007f-4a47-8c83-d75a79516b39","categoryName":"Deprecated policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f1647e25a273dc95":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled","displayName":"Allow pages to use the built-in AI APIs. (User)","description":"This policy controls if a page can use the built-in AI APIs (such as LanguageModel API, Summarization API, Writer API, and Rewriter API).\r\n\r\nIf the policy is enabled or unset, the APIs are enabled to be used.\r\n\r\nIf the policy is disabled, attempting using the APIs will result in an error.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f154fbdf09da57c9":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess","displayName":"Force WebSQL to be enabled. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"f1fb0b76a0641f33":{"id":"user_vendor_msft_policy_config_education_allowgraphingcalculator","displayName":"Allow Graphing Calculator (User)","description":"This policy setting allows you to control whether graphing functionality is available in the Windows Calculator app. If you disable this policy setting, graphing functionality will not be accessible in the Windows Calculator app. If you enable or don't configure this policy setting, users will be able to access graphing functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Education#allowgraphingcalculator"],"categoryId":"5e692f3e-1911-43b0-9192-64c2e65b7c10","categoryName":"Education","options":[{"id":"user_vendor_msft_policy_config_education_allowgraphingcalculator_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"user_vendor_msft_policy_config_education_allowgraphingcalculator_1","displayName":"Allow","description":"Enabled.","helpText":null}]},"f1c803ba0c67416a":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the Internet (User)","description":"\r\n This policy setting allows you to block macros from running in Office files that come from the Internet.\r\n\r\n If you enable this policy setting, macros are blocked from running, even if “Enable all macros” is selected in the Macro Settings section of the Trust Center. Also, instead of having the choice to “Enable Content,” users will receive a notification that macros are blocked from running. If the Office file is saved to a trusted location or was previously trusted by the user, macros will be allowed to run.\r\n\r\n If you disable or don’t configure this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the Internet.\r\n ","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"f1eb97f64d5ad78f":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]},"f174aa43eff99b47":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"f10cc633779e6518":{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","categoryName":"Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},"f1d801054ba060f1":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links (User)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":null},"f1b91f91646befc0":{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (User) (obsolete)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_0","displayName":"Standard mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_1","displayName":"Balanced mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_2","displayName":"Strict mode","description":null,"helpText":null}]},"f14650ada3f76c35":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookcontactsdictionary","displayName":"Set comment fields for Outlook Contacts Dictionary (User)","description":"This policy setting allows you to specify the fields to display in the comments in the Outlook Contacts Dictionary. This policy setting applies to Japanese Microsoft IME only.\r\n\r\nIf you enable this policy setting, you can specify the fields to display by setting strings, which are represented by the following identification letter IDs. You must also use any IDs/strings in the following sequence.\r\n\r\nID for each field is as follows:\r\na = Full Name\r\nc = Phonetic Name\r\ne = Company Name\r\nf = Department Name\r\ng = Title\r\nh = Office Location\r\nj = Email Address\r\nk = Business Telephone Number\r\nl = Business Address\r\n\r\nFor example, if you want to display Full Name, Phonetic Name and Company Name, specify 'ace'.\r\n\r\nIf you do not configure this policy setting, Full Name, Phonetic Name, Company Name, Department Name, and Job Title are displayed in the comments in this order.","helpText":"","infoUrls":[],"categoryId":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","categoryName":"IME (Japanese)","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookcontactsdictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_imejapanese_l_setcommentfieldsforoutlookcontactsdictionary_1","displayName":"Enabled","description":null,"helpText":null}]},"f1bae3368df1f8e2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey09_l_certhashcolon","displayName":"Certificate Hash: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":null},"f16d7e29f57da3d8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog06","displayName":"Trusted Catalog Location #6 (User)","description":"This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document.\r\n\r\nIf you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL.\r\n\r\nIf you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs.\r\n\r\nIf you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_trustedcatalog06_1","displayName":"Enabled","description":null,"helpText":null}]},"f163e08b320bbf9b":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableocr","displayName":"Disable OCR (User)","description":"This policy turns off the OneNote image optical character recognition (OCR) feature. The OCR feature allows OneNote to automatically scan through images to find text that will appear in search results.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableocr_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_disableocr_1","displayName":"Enabled","description":null,"helpText":null}]},"f1b5038dc50161fb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockinternet","displayName":"Include Internet in Safe Zones for Automatic Picture Download (User) (Deprecated)","description":"This policy setting controls whether pictures and external content in HTML e-mail messages from untrusted senders on the Internet are downloaded without Outlook users explicitly choosing to do so. \r\n\r\nIf you enable this policy setting, Outlook will automatically download external content in all e-mail messages sent over the Internet and users will not be able to change the setting. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not consider the Internet a safe zone, which means that Outlook will not automatically download content from external servers unless the sender is included in the Safe Senders list. Recipients can choose to download external content from untrusted senders on a message-by-message basis.","helpText":"","infoUrls":[],"categoryId":"a321fc04-d0cb-45ec-a6bf-51d60249922d","categoryName":"Automatic Picture Download Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockinternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_automaticpicturedownloadsettings_l_blockinternet_1","displayName":"Enabled","description":null,"helpText":null}]},"f13598d7944c5664":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05_l_descriptioncolon26","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"f1c0e0daec7d970a":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_showscreentipsonobjects","displayName":"Show ScreenTips on objects (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_showscreentipsonobjects_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_showscreentipsonobjects_1","displayName":"Enabled","description":null,"helpText":null}]},"f19ed263fddeb56e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_turnoffsmartdeletebehaviorofconnectorswhendeletingshapes","displayName":"Turn off smart delete behavior of connectors when deleting shapes (User)","description":"This policy setting turns off smart delete behavior of connectors when deleting shapes.\r\n\r\nIf you enable this policy setting, connectors are not deleted when shapes are deleted.\r\n\r\nIf you disable or do not configure this policy setting, connectors are deleted when shapes are deleted.","helpText":"","infoUrls":[],"categoryId":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","categoryName":"Editing Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_turnoffsmartdeletebehaviorofconnectorswhendeletingshapes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_editingoptions_l_turnoffsmartdeletebehaviorofconnectorswhendeletingshapes_1","displayName":"Enabled","description":null,"helpText":null}]},"f1729dc884cb7998":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc02_l_descriptioncolon14","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"f1b9b4f2bd261473":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingotherproofingtools","displayName":"Delay before starting other proofing tools (User)","description":"This policy setting allows you to configure when the background grammar check is started.\r\n\r\nIf you enable this policy setting, you may specify the delay, in milliseconds, before the background grammar check is started. This setting only applies when Word is running in a terminal server session.\r\n\r\nIf you disable or do not configure this policy setting, Word will behave normally when in a terminal server session.","helpText":"","infoUrls":[],"categoryId":"dc049161-17c6-411e-906b-a871b33651cd","categoryName":"Proofing","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingotherproofingtools_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing_l_delaybeforestartingotherproofingtools_1","displayName":"Enabled","description":null,"helpText":null}]},"f14ee0ea2037e12c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3","displayName":"Save Word files as (User)","description":"","helpText":"","infoUrls":[],"categoryId":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_","displayName":"Word Document (*.docx)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_webarchive","displayName":"Single Files Web Page (*.mht)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_html","displayName":"Web Page (*.htm; *.html)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_reducedhtml","displayName":"Web Page, Filtered (*.htm, *.html)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_rtf","displayName":"Rich Text Format (*.rtf)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_text","displayName":"Plain Text (*.txt)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_msword6exp","displayName":"Word 6.0/95 (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_msword6scexp","displayName":"Word 6.0/95 - Chinese (Simplified) (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_msword6tcexp","displayName":"Word 6.0/95 - Chinese (Traditional) (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_msword6jexp","displayName":"Word 6.0/95 - Japanese (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_msword95kexp","displayName":"Word 6.0/95 - Korean (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_msword6rtfexp","displayName":"Word 97-2002 & 6.0/95 - RTF","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_mswordmac51","displayName":"Word 5.1 for Macintosh (*.mcw)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_mswordmac5","displayName":"Word 5.0 for Macintosh (*.mcw)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_mswordwin2","displayName":"Word 2.x for Windows (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_msworkswin4","displayName":"Works 4.0 for Windows (*.wps)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_wrdprfctwin","displayName":"WordPerfect 5.x for Windows (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_wrdprfctdos51","displayName":"WordPerfect 5.1 for DOS (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_macroenableddocument","displayName":"Word Macro-Enabled Document (*.docm)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_template","displayName":"Word Template (*.dotx)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_macroenabledtemplate","displayName":"Word Macro-Enabled Template (*.dotm)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_doc","displayName":"Word 97 - 2003 Document (*.doc)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_dot","displayName":"Word 97 - 2003 Template (*.dot)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_flatxml","displayName":"Word XML Document (*.xml)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_docxstrict","displayName":"Strict Open XML Document (*.docx)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_save_l_savewordfilesas_l_savewordfilesas3_odt","displayName":"OpenDocument Text (*.odt)","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/f2.json b/public/intune-definitions/f2.json new file mode 100644 index 000000000000..644e6af1ed59 --- /dev/null +++ b/public/intune-definitions/f2.json @@ -0,0 +1 @@ +{"f29bec1b12806b13":{"id":"com.apple.applicationaccess_allowvideoconferencing","displayName":"Allow Video Conferencing","description":"If false, hides the FaceTime app. As of iOS 13, requires a supervised device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowvideoconferencing_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowvideoconferencing_true","displayName":"True","description":null,"helpText":null}]},"f2b990b63d072ff5":{"id":"com.apple.applicationaccess_forcecaptiveportalconnectionfromlockscreen","displayName":"Force Captive Portal Connection From Lock Screen","description":"If `true`, the system allows use of the captive WiFi portal at login or unlock.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_forcecaptiveportalconnectionfromlockscreen_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.applicationaccess_forcecaptiveportalconnectionfromlockscreen_true","displayName":"Enabled","description":null,"helpText":null}]},"f2c7637d3e2e1122":{"id":"com.apple.cellularprivatenetwork.managed_enablenrstandalone","displayName":"Enable NR Standalone","description":"Set to `true` if this private network is NR Standalone.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":[{"id":"com.apple.cellularprivatenetwork.managed_enablenrstandalone_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.cellularprivatenetwork.managed_enablenrstandalone_true","displayName":"Enabled","description":null,"helpText":null}]},"f22445d7d256c93b":{"id":"com.apple.managedclient.preferences_featureflagoverridescontrol","displayName":"Configure users ability to override feature flags","description":"Configures users ability to override state of feature flags.\nIf you set this policy to 'CommandLineOverridesEnabled', users can override state of feature flags using command line arguments but not edge://flags page.\n\nIf you set this policy to 'OverridesEnabled', users can override state of feature flags using command line arguments or edge://flags page.\n\nIf you set this policy to 'OverridesDisabled', users can't override state of feature flags using command line arguments or edge://flags page.\n\nIf you don't configure this policy, the behavior is the same as the 'OverridesEnabled'.\n\nPolicy options mapping:\n\n* CommandLineOverridesEnabled (2) = Allow users to override feature flags using command line arguments only\n\n* OverridesEnabled (1) = Allow users to override feature flags\n\n* OverridesDisabled (0) = Prevent users from overriding feature flags\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#featureflagoverridescontrol"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_featureflagoverridescontrol_0","displayName":"Prevent users from overriding feature flags","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_featureflagoverridescontrol_1","displayName":"Allow users to override feature flags","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_featureflagoverridescontrol_2","displayName":"Allow users to override feature flags using command line arguments only","description":null,"helpText":null}]},"f25516b335e00abe":{"id":"com.apple.managedclient.preferences_textpredictionenabled","displayName":"Text prediction enabled by default","description":"The Microsoft Turing service uses natural language processing to generate predictions for long-form editable text fields on web pages.\n\nIf you enable or don't configure this policy, text predictions will be provided for eligible text fields.\n\nIf you disable this policy, text predictions will not be provided in eligible text fields. Sites may still provide their own text predictions.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#textpredictionenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_textpredictionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_textpredictionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f225692f95368815":{"id":"com.apple.managedclient.preferences_threattypesettingsmergepolicy","displayName":"Threat type settings merge","description":"Specify the merge policy for threat type settings. This can be a combination of administrator-defined and user-defined settings (merge) or only administrator-defined settings (admin_only). This setting can be used to restrict local users from defining their own settings for different threat types.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#threat-type-settings-merge-policy"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_threattypesettingsmergepolicy_0","displayName":"merge","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_threattypesettingsmergepolicy_1","displayName":"admin_only","description":null,"helpText":null}]},"f22bd1a575d0a5c9":{"id":"com.apple.managedclient.preferences_windowmanagementblockedforurls","displayName":"Block Window Management permission on specified sites","description":"Lets you configure a list of site url patterns that specify sites which will automatically deny the window management permission. This limits the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\n\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\n\nIf this policy isn't configured for a site, then the policy from \"DefaultWindowManagementSetting\" applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#windowmanagementblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f2ba2a83f3867900":{"id":"com.apple.mcx_com.apple.energysaver.desktop.acpower_display sleep timer","displayName":"Display Sleep Timer","description":"The display sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"f2302152414608d8":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower_display sleep timer","displayName":"Display Sleep Timer","description":"The display sleep time, in minutes. A value of 0 means never.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"f22ae38b70ceb2f7":{"id":"com.apple.mcxmenuextras_airport.menu","displayName":"AirPort","description":"If true, enables the AirPort menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_airport.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_airport.menu_true","displayName":"True","description":null,"helpText":null}]},"f2a975b39658f7a9":{"id":"com.microsoft.edge.mamedgeappconfigsettings.csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled (Obsolete)","description":"The :--foo syntax for the CSS custom state feature is being changed to :state(foo) in Microsoft Edge to comply with changes that are made in Firefox and Safari. This policy allows the deprecated syntax to be used until Stable 132.\n\nThis deprecation breaks some Microsoft Edge-only websites that use the deprecated :--foo syntax.\n\nIf you enable this policy, the deprecated syntax is enabled.\n\nIf you disable or don't configure this policy, the deprecated syntax is disabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.csscustomstatedeprecatedsyntaxenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.csscustomstatedeprecatedsyntaxenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f2dc5b59d51f9b42":{"id":"com.microsoft.edge.mamedgeappconfigsettings.filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\n\nIf you don't set this policy, \"DefaultFileSystemWriteGuardSetting\" applies for all sites, if it's set. If not, users' personal settings apply.\n\nURL patterns can't conflict with \"FileSystemWriteBlockedForUrls\". Neither policy takes precedence if a URL matches with both.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * isn't an accepted value for this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"f2975ce4f1c3ae48":{"id":"com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessallowedforurls","displayName":"Allow sites to make network requests to local devices and local network endpoints.","description":"Specifies a list of URL patterns for which requests initiated from matching origins are exempt from Local Network Access restrictions.\n\nNetwork requests initiated from websites served by matching origins are not subject to Local Network Access checks.\n\nFor origins not covered by the patterns specified here, the user's personal configuration and applicable local network access restrictions apply.\n\nThere are multiple policies that control origins impacting requests to local device and local network endpoints. If an origin matches more than one of the following policies, the policies take precedence in the following order:\n\n- LocalNetworkBlockedForUrls\n- LocalNetworkAllowedForUrls\n- LoopbackNetworkAccessBlockedForUrls\n- LoopbackNetworkAccessAllowedForUrls\n- LocalNetworkAccessBlockedForUrls\n- LocalNetworkAccessAllowedForUrls\n\nFor detailed information about valid URL pattern syntax, see:\nhttps://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns\n\nFor more information about Local Network Access, see:\nhttps://wicg.github.io/local-network-access/\n\nNote: This policy enables controlled exceptions to local network access restrictions. It allows specified public websites to access private IP addresses when required for trusted local communication scenarios.","helpText":null,"infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"f2fadaa835a87a56":{"id":"com.microsoft.edge.mamedgeappconfigsettings.spellchecklanguage","displayName":"Enable specific spellcheck languages","description":"Enables different languages for spellcheck. Any language that you specify that isn't recognized is ignored.\n\nIf you enable this policy, spellcheck is enabled for the languages specified, and any languages the user enabled.\n\nIf you don't configure or disable this policy, there's no change to the user's spellcheck preferences.\n\nIf the \"SpellcheckEnabled\" policy is disabled, this policy has no effect.\n\nIf a language is included in both the 'SpellcheckLanguage' and the \"SpellcheckLanguageBlocklist\" policy, the spellcheck language is enabled.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"f26475476114853f":{"id":"device_vendor_msft_clouddesktop_boottocloudpcenhanced","displayName":"Boot To Cloud PC Enhanced","description":"This node allows to configure different kinds of Boot to Cloud mode. Boot to cloud mode enables users to seamlessly sign-in to a Cloud PC. For using this feature, Cloud Provider application must be installed on the PC and the user must have a Cloud PC provisioned. This node supports the below options: 0. Not Configured. 1. Enable Boot to Cloud Shared PC Mode: Boot to Cloud Shared PC mode allows multiple users to sign-in on the device and use for shared purpose. 2. Enable Boot to Cloud Dedicated Mode (Cloud only): Dedicated mode allows user to sign-in on the device using various authentication mechanism configured by their organization (For ex. PIN, Biometrics etc). This mode preserves user personalization, including their profile picture and username in local machine, and facilitates fast account switching.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/CloudDesktop-csp/"],"categoryId":"39e4c352-be9c-4e75-8111-8236279c7f1e","categoryName":"Cloud Desktop","options":[{"id":"device_vendor_msft_clouddesktop_boottocloudpcenhanced_0","displayName":"Not Configured","description":"Not Configured","helpText":null},{"id":"device_vendor_msft_clouddesktop_boottocloudpcenhanced_1","displayName":"Enable Boot to Cloud Shared PC Mode","description":"Enable Boot to Cloud Shared PC Mode","helpText":null},{"id":"device_vendor_msft_clouddesktop_boottocloudpcenhanced_2","displayName":"Enable Boot to Cloud Dedicated Mode (Cloud only)","description":"Enable Boot to Cloud Dedicated Mode (Cloud only)","helpText":null}]},"f244d311cf64aa27":{"id":"device_vendor_msft_defender_configuration_securityintelligencelocationupdateatscheduledtimeonly","displayName":"Security Intelligence Location Update At Scheduled Time Only","description":"This setting allows you to configure security intelligence updates according to the scheduler for VDI-configured computers. It is used together with the shared security intelligence location (SecurityIntelligenceLocation).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_securityintelligencelocationupdateatscheduledtimeonly_1","displayName":"If you enable this setting and configure SecurityIntelligenceLocation, updates from the configured location occur only at the previously configured scheduled update time.","description":"If you enable this setting and configure SecurityIntelligenceLocation, updates from the configured location occur only at the previously configured scheduled update time.","helpText":null},{"id":"device_vendor_msft_defender_configuration_securityintelligencelocationupdateatscheduledtimeonly_0","displayName":"If you either disable or do not configure this setting, updates occur whenever a new security intelligence update is detected at the location that is specified by SecurityIntelligenceLocation.","description":"If you either disable or do not configure this setting, updates occur whenever a new security intelligence update is detected at the location that is specified by SecurityIntelligenceLocation.","helpText":null}]},"f2e75c156188b1f9":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_domain_dns_domainlabel","displayName":"DNS suffix:","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":null},"f28dfdfc117bec4a":{"id":"device_vendor_msft_policy_config_admx_explorer_admininfourl_admininfourl_textbox","displayName":"Support Web page URL","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"f2c50b54b2482cf4":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvpriority","displayName":"Set Priority in the DC Locator DNS SRV records","description":"This policy setting specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used to locate the DC.\r\n\r\nThe Priority field in the SRV record sets the preference for target hosts (specified in the SRV record’s Target field). DNS clients that query for SRV resource records attempt to contact the first reachable host with the lowest priority number listed.\r\n\r\nTo specify the Priority in the DC Locator DNS SRV resource records, click Enabled, and then enter a value. The range of values is from 0 to 65535.\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-ldapsrvpriority"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvpriority_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_ldapsrvpriority_1","displayName":"Enabled","description":null,"helpText":null}]},"f2959621240263c0":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_sitecoverage","displayName":"Specify sites covered by the DC Locator DNS SRV records","description":"This policy setting specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it. \r\n\r\nThe DC Locator DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication.\r\n\r\nTo specify the sites covered by the DC Locator DNS SRV records, click Enabled, and then enter the sites names in a space-delimited format.\r\n\r\nIf you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-sitecoverage"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_sitecoverage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_sitecoverage_1","displayName":"Enabled","description":null,"helpText":null}]},"f29f4e3503cced22":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_profiles","displayName":"Set path for Remote Desktop Services Roaming User Profile","description":"This policy setting allows you to specify the network path that Remote Desktop Services uses for roaming user profiles.\r\n\r\nBy default, Remote Desktop Services stores all user profiles locally on the RD Session Host server. You can use this policy setting to specify a network share where user profiles can be centrally stored, allowing a user to access the same profile for sessions on all RD Session Host servers that are configured to use the network share for user profiles.\r\n\r\nIf you enable this policy setting, Remote Desktop Services uses the specified path as the root directory for all user profiles. The profiles are contained in subfolders named for the account name of each user.\r\n\r\nTo configure this policy setting, type the path to the network share in the form of \\\\Computername\\Sharename. Do not specify a placeholder for the user account name, because Remote Desktop Services automatically adds this when the user logs on and the profile is created. If the specified network share does not exist, Remote Desktop Services displays an error message on the RD Session Host server and will store the user profiles locally on the RD Session Host server.\r\n\r\nIf you disable or do not configure this policy setting, user profiles are stored locally on the RD Session Host server. You can configure a user's profile path on the Remote Desktop Services Profile tab on the user's account Properties dialog box.\r\n\r\nNotes:\r\n1. The roaming user profiles enabled by the policy setting apply only to Remote Desktop Services connections. A user might also have a Windows roaming user profile configured. The Remote Desktop Services roaming user profile always takes precedence in a Remote Desktop Services session.\r\n2. To configure a mandatory Remote Desktop Services roaming user profile for all users connecting remotely to the RD Session Host server, use this policy setting together with the \"Use mandatory profiles on the RD Session Host server\" policy setting located in Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\RD Session Host\\Profiles. The path set in the \"Set path for Remote Desktop Services Roaming User Profile\" policy setting should contain the mandatory profile.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-user-profiles"],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_profiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_profiles_1","displayName":"Enabled","description":null,"helpText":null}]},"f22f5158e09b8261":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowsnotepad","displayName":"Windows Notepad ** (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowsnotepad_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_windowsnotepad_1","displayName":"True","description":null,"helpText":null}]},"f211d080f0886c76":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_quickassist","displayName":"Quick Assist","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_quickassist_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_quickassist_1","displayName":"True","description":null,"helpText":null}]},"f2ce45cb5d63cc3a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy","displayName":"Allow user cloud policies to override Chrome Browser Cloud Management policies.","description":"Setting the policy to Enabled allows policies associated with a Google Workspace account to take precedence if they conflict with Chrome Browser Cloud Management policies.\r\n\r\nOnly policies originating from secure users can be merged. A secure user is affiliated with the organization that manages their browser using Chrome Browser Cloud Management. All other user-level policies will have default precedence.\r\n\r\nThe policy can be combined with CloudPolicyOverridesPlatformPolicy. If both policies are enabled, user cloud policies will also take precedence over conflicting platform policies.\r\n\r\nLeaving the policy unset or setting it to disabled causes user-level cloud policies to have default priority.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"f27a766e4cbd1e28":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_keygenallowedforurlsdesc","displayName":"Allow key generation on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"f221e9dd74892b11":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_cahintcertificatesdesc","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"1d6d392c-8b32-459b-b114-af964a4bbbc5","categoryName":"Certificate management settings","options":null},"f2af887f4f621309":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"f28a87c3bea5c6ed":{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon","displayName":"Audit Insecure Guest Logon","description":"This policy controls whether the SMB client will enable the audit event when the client is logged on as guest account. If you enable this policy setting, the SMB client will log the event when the client is logged on as guest account. If you disable or do not configure this policy setting, the SMB client will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#auditinsecureguestlogon"],"categoryId":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","categoryName":"Lanman Workstation","options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"f274e07fc599d4d2":{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_restrictfloppyaccesstolocallyloggedonuseronly","displayName":"Devices Restrict Floppy Access To Locally Logged On User Only","description":"Devices: Restrict floppy access to locally logged-on user only This security setting determines whether removable floppy media are accessible to both local and remote users simultaneously. If this policy is enabled, it allows only the interactively logged-on user to access removable floppy media. If this policy is enabled and no one is logged on interactively, the floppy can be accessed over the network. Default: This policy is not defined and floppy disk drive access is not restricted to the locally logged-on user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_restrictfloppyaccesstolocallyloggedonuseronly"],"categoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","categoryName":"Local Policies Security Options","options":null},"f290571415f1cf1c":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled","displayName":"Enable guest mode","description":"Enable the option to allow the use of guest profiles in Microsoft Edge. In a guest profile, the browser doesn't import browsing data from existing profiles, and it deletes browsing data when all guest profiles are closed.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge lets users browse in guest profiles.\r\n\r\nIf you disable this policy, Microsoft Edge doesn't let users browse in guest profiles.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f2f2969f75a6dc47":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f2d1672a76f39313":{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting","displayName":"Configure browser process code integrity guard setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_0","displayName":"Do not enable code integrity guard in the browser process.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_1","displayName":"Enable code integrity guard audit mode in the browser process.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_2","displayName":"Enable code integrity guard enforcement in the browser process.","description":null,"helpText":null}]},"f28443b9c30665d1":{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled","displayName":"Standalone Sidebar Enabled","description":"Standalone Sidebar is an optional mode for the Sidebar in Microsoft Edge. When this mode is activated by a user, the Sidebar appears in a fixed position on the Microsoft Windows desktop, and is hidden from the browser application frame.\r\n\r\nIf you enable or don't configure this policy, users will have the ability to activate the Standalone Sidebar.\r\nIf you disable this policy, options to activate Standalone Sidebar will be hidden or made unavailable. Note that blocking 'HubsSidebarEnabled' (Show Hubs Sidebar) will also prevent users from accessing Standalone Sidebar.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f2f9a201822e964f":{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated","displayName":"Relaunch browser quickly when the current version is outdated","description":"This policy specifies the minimum release age after which relaunch notifications become more aggressive. The release age is calculated from the time the currently running version was last served to clients.\r\n\r\nIf a browser relaunch is needed to finalize a pending update and the current version has been outdated for more than the number of days specified by this setting, the RelaunchNotificationPeriod policy is overridden to 2 hours. If the RelaunchNotification policy is set to 1 ('Required'), a browser relaunch will be forced at the end of the period.\r\n\r\nIf not set, or if the release age cannot be determined, the RelaunchNotificationPeriod policy will be used for all updates.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_1","displayName":"Enabled","description":null,"helpText":null}]},"f2d2a75856225905":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention","displayName":"Block tracking of users' web-browsing activity","description":"Lets you decide whether to block websites from tracking users' web-browsing activity.\r\n\r\nIf you enable this policy, you have the following options for setting the level of tracking prevention:\r\n\r\n* 0 = Off (no tracking prevention)\r\n\r\n* 1 = Basic (blocks harmful trackers, content and ads will be personalized)\r\n\r\n* 2 = Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)\r\n\r\n* 3 = Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)\r\n\r\nIf you disable this policy or don't configure it, users can set their own level of tracking prevention.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_1","displayName":"Enabled","description":null,"helpText":null}]},"f25fb6dd6beabceb":{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings","displayName":"Print preview sticky settings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_0","displayName":"Enable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_1","displayName":"Disable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_2","displayName":"Disable sticky settings for PDF","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_3","displayName":"Disable sticky settings for Webpages","description":null,"helpText":null}]},"f24a01022ce36a43":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mse7exe153","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mse7exe153_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mse7exe153_1","displayName":"True","description":null,"helpText":null}]},"f25ad8ab293d50e2":{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_service","displayName":"Allow Basic authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from a remote client.\n\n If you enable this policy setting, the WinRM service accepts Basic authentication from a remote client.\n\n If you disable or do not configure this policy setting, the WinRM service does not accept Basic authentication from a remote client.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowbasicauthentication-service"],"categoryId":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","categoryName":"Win RM Service","options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_service_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_service_1","displayName":"Enabled","description":null,"helpText":null}]},"f24b3b84917c60c1":{"id":"device_vendor_msft_policy_config_search_preventindexinglowdiskspacemb","displayName":"Prevent Indexing Low Disk Space MB","description":"Enabling this policy prevents indexing from continuing after less than the specified amount of hard drive space is left on the same drive as the index location. Select between 0 and 1. Enable this policy if computers in your environment have extremely limited hard drive space. When this policy is disabled or not configured, Windows Desktop Search automatically manages your index size.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#preventindexinglowdiskspacemb"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_preventindexinglowdiskspacemb_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_preventindexinglowdiskspacemb_1","displayName":"Enable.","description":"Enable.","helpText":null}]},"f27eb4a490f65195":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection","displayName":"Enable screen capture protection","description":"This policy setting allows you to specify whether protection against screen capture is enabled for a remote session across client and server. \r\n\r\nIf you enable this policy setting to block screen capture on client, the RD Session Host Server will instruct the client to enable the screen capture protection for a remote session. If a compatible client is used, it will prevent screen capture of the applications running in the remote session. \r\n\r\nIf you enable this policy setting to block screen capture on client and server, it will block on the client as described above in addition to instructing the session host to prevent tools and services within the session host from capturing the screen. This option requires the session host to be OS version Windows 11, version 22H2 or later.\r\n\r\nIf the client is not compatible with screen capture protection, the connection will be denied. \r\n\r\nIf you disable or not configure this policy setting, the screen capture protection will be disabled. \r\n ","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection_1","displayName":"Enabled","description":null,"helpText":null}]},"f2a7c675319623ee":{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel","displayName":"Configure cloud block level","description":"Determines how aggressive Defender for Endpoint is in blocking and scanning suspicious files.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#configure-cloud-block-level"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_normal","displayName":"Normal","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_moderate","displayName":"Moderate","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_high","displayName":"High","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_high_plus","displayName":"High_Plus","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_zero_tolerance","displayName":"Zero_Tolerance","description":null,"helpText":null}]},"f2777224530ca130":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection","displayName":"Default direction (User)","description":"Specifies the default left-right text direction.","helpText":"","infoUrls":[],"categoryId":"33b9194b-4027-4c23-b662-52f25db7f839","categoryName":"International","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_1","displayName":"Enabled","description":null,"helpText":null}]},"f230b4c549312d7d":{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1_customclasses_list","displayName":"GUID for custom removable storage class: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":null},"f2ec1e8509f17b78":{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_1","displayName":"For touch input, don’t show the Input Panel icon (User)","description":"Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available. This policy applies only when a user is using touch input.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will never appear next to any text entry area when a user is using touch input. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-iptiptouchtarget-1"],"categoryId":"395a548d-737b-41fe-8449-c68c51e3a349","categoryName":"Input Panel","options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_1_1","displayName":"Enabled","description":null,"helpText":null}]},"f25da98f02405b68":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings","displayName":"Desktop settings (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings_1","displayName":"True","description":null,"helpText":null}]},"f2166cdb759f6b34":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout","displayName":"Synchronization timeout (User)","description":"This policy setting configures the number of milliseconds that the computer waits when retrieving user settings from the settings storage location. \r\nYou can use this setting to override the default value of 2000 milliseconds. \r\nIf you enable this policy setting, set the number of milliseconds that the system waits to retrieve settings. \r\nIf you disable or do not configure this policy setting, the default value of 2000 milliseconds is used.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-repositorytimeout"],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"f23243ca3341b65f":{"id":"user_vendor_msft_policy_config_browser_configurehomebutton","displayName":"Configure Home Button (User)","description":"The Home button loads either the default Start page, the New tab page, or a URL defined in the Set Home Button URL policy. By default, this policy is disabled or not configured and clicking the home button loads the default Start page. When enabled, the home button is locked down preventing your users from making changes in Microsoft Edge's UI settings. To let your users change the Microsoft Edge UI settings, enable the Unlock Home Button policy. If Enabled AND: - Show home button & set to Start page is selected, clicking the home button loads the Start page. - Show home button & set to New tab page is selected, clicking the home button loads a New tab page. - Show home button & set a specific page is selected, clicking the home button loads the URL specified in the Set Home Button URL policy. - Hide home button is selected, the home button is hidden in Microsoft Edge. Default setting: Disabled or not configured Related policies: - Set Home Button URL - Unlock Home Button","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurehomebutton"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_0","displayName":"Show home button and load the Start page","description":"Show home button and load the Start page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_1","displayName":"Show home button and load the New tab page","description":"Show home button and load the New tab page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_2","displayName":"Show home button and load the custom URL defined in the Set Home Button URL policy","description":"Show home button and load the custom URL defined in the Set Home Button URL policy","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_3","displayName":"Hide home button","description":"Hide home button","helpText":null}]},"f28aa12e09087e2e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled","displayName":"Enable alternate error pages (User)","description":"Setting the policy to True means Google Chrome uses alternate error pages built into (such as \"page not found\"). Setting the policy to False means Google Chrome never uses alternate error pages.\r\n\r\nIf you set the policy, users can't change it. If not set, the policy is on, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f28d3e1b259752f6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_lookalikewarningallowlistdomainsdesc","displayName":"Suppress lookalike domain warnings on domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"f2556f360daba1fa":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended","displayName":"Import autofill form data from default browser on first run (User)","description":"Setting the policy to Enabled imports autofill form data from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no autofill form data is imported on first run.\r\n\r\nUsers can trigger an import dialog and the autofill form data checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f2f202b01bc7b8da":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting","displayName":"Default clipboard setting (User)","description":"Setting the policy to 2 blocks sites from using the clipboard site permission. Setting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use one.\r\n\r\nThis policy can be overridden for specific URL patterns using the ClipboardAllowedForUrls and ClipboardBlockedForUrls policies.\r\n\r\nThis policy only affects clipboard operations controlled by the clipboard site permission, and does not affect sanitized clipboard writes or trusted copy and paste operations.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"f27cb968a09f76db":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles","displayName":"Excel 4 macrosheets and add-in files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_1","displayName":"Enabled","description":null,"helpText":null}]},"f29fc7ae6ed3cad5":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_datecolon30","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f259b748415626c8":{"id":"user_vendor_msft_policy_config_experience_enableorganizationalmessages","displayName":"Enable delivery of organizational messages (User)","description":"Organizational messages allow Administrators to deliver messages to their end users on selected Windows 11 experiences. Organizational messages are available to Administrators via services like Microsoft Endpoint Manager. By default, this policy is disabled. If you enable this policy, these experiences will show content booked by Administrators. Enabling this policy will have no impact on existing MDM policy settings governing delivery of content from Microsoft on Windows experiences.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#enableorganizationalmessages"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"user_vendor_msft_policy_config_experience_enableorganizationalmessages_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"user_vendor_msft_policy_config_experience_enableorganizationalmessages_1","displayName":"Enabled","description":"Enabled","helpText":null}]},"f28c196264fe327c":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"f2a97a86fd5a29fb":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_browserguestmodeenforced","displayName":"Enforce Edge guest mode (User)","description":"Controls whether Microsoft Edge enforces Guest-only browsing.\r\n\r\nIf you enable this policy, Microsoft Edge enforces Guest sessions and prevents profile sign-in. Guest sessions run in InPrivate mode.\r\n\r\nIf you disable or don't configure this policy, users can create and use profiles. Guest mode can also be controlled separately using the BrowserGuestModeEnabled policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_browserguestmodeenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_browserguestmodeenforced_1","displayName":"Enabled","description":null,"helpText":null}]},"f20ef291883f1aee":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_configureviewinfileexplorer","displayName":"Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f2af50a6323c12ca":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaulttimeout","displayName":"Set web service default timeout (User)","description":"This policy setting allows you to specify the default timeout in milliseconds for the web service shim. The application is allowed to specify a larger timeout programmatically.\r\n\r\nIf you enable this policy setting, you may specify the default timeout in milliseconds for the web service shim.\r\n\r\nIf you disable or do not configure this policy setting, a default of 7000 milliseconds will be used.","helpText":"","infoUrls":[],"categoryId":"c72d9f00-d625-43ec-add4-514891035839","categoryName":"Web Service","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaulttimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_webservice_l_webservicedefaulttimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"f2bcb2383e3f2586":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceoffice","displayName":"Replace MAPI - Office (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"office location\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"office location\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceoffice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceoffice_1","displayName":"Enabled","description":null,"helpText":null}]},"f22b634c38d40acc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceworkfax_l_workfaxmapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"f285aa84c7b3903f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationoutlook","displayName":"Don’t show the What’s New information for Outlook (User)","description":"This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Outlook for the first time after Outlook has been updated with new features. By default, the What’s New information is shown.\r\n\r\nIf you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Office Account is disabled.\r\n\r\nIf you disable or don’t configure this policy setting, the What’s New information is shown.\r\n\r\nNote: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio.\r\n ","helpText":"","infoUrls":[],"categoryId":"adf11731-7089-4e2e-8dde-4bd9ef86b067","categoryName":"What's New","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_whatsnew_l_dontshowwhatsnewinformationoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"f2e752548077ab45":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_draftsfolderhomepage_l_urladdressofassociatedwebpage52","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"f27707281a089eb5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstsizetodisableaddingnewcontent","displayName":"Legacy PST: Size to disable adding new content (User)","description":"Specifies the size at which Outlook will no longer accept new content into an Outlook Data File.","helpText":"","infoUrls":[],"categoryId":"cb6472c8-3e22-4029-af98-8a97f03a5a44","categoryName":"PST Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstsizetodisableaddingnewcontent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_pstsettings_l_legacypstsizetodisableaddingnewcontent_1","displayName":"Enabled","description":null,"helpText":null}]},"f2c6e4c4eb093d67":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_calendarweeknumbers","displayName":"Calendar week numbers (User)","description":"By default, week numbers are not shown in the Date Navigator in the Calendar. You can change this behavior to show week numbers in the Date Navigator by enabling this setting.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_calendarweeknumbers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_calendarweeknumbers_1","displayName":"Enabled","description":null,"helpText":null}]},"f205cdd567cae294":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_donotshowsocialnetworkinfobars","displayName":"Do not show social network info-bars (User)","description":"This policy setting controls whether certain info-bar messages that will prompt users to install social network providers are displayed in the social connector. \r\n\r\nIf you enable this policy setting, the info-bars are not shown.\r\n\r\nIf you disable or you do not configure this policy setting, the info-bars are shown.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_donotshowsocialnetworkinfobars_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_donotshowsocialnetworkinfobars_1","displayName":"Enabled","description":null,"helpText":null}]},"f249dd97a19ec6a3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_urlforsmimecertificates","displayName":"URL for S/MIME certificates (User)","description":"This policy setting provides a URL at which Outlook users can obtain S/MIME certificates. \r\n\r\nIf you enable this policy setting, you can enter a URL from which users can obtain S/MIME certificates. The URL can contain three variables, %1, %2, and %3, which will be replaced by the user's name, e-mail address, and language, respectively. When users click \"Get a Digital ID\", they will be directed to the supplied URL. \r\n\r\nIf you disable or do not configure this policy setting, a URL for S/MIME certificates is not provided.","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_urlforsmimecertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_urlforsmimecertificates_1","displayName":"Enabled","description":null,"helpText":null}]},"f256fd28fe3d5dcd":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":null},"f229a90a0287faac":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_datecolon17","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":null},"f28fb8f7649cc459":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18","displayName":"Trusted Location #18 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_1","displayName":"Enabled","description":null,"helpText":null}]},"f2979a099e04722e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultstarttime_l_pjdefaultstarttime2","displayName":"Default start time (Minutes after 12am * 10) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":null},"f28dff5fba021680":{"id":"user_vendor_msft_policy_config_windowsai_turnoffwindowscopilot","displayName":"Turn Off Copilot in Windows (User)","description":"This policy setting allows you to turn off Windows Copilot. If you enable this policy setting, users will not be able to use Copilot. The Copilot icon will not appear on the taskbar either. If you disable or do not configure this policy setting, users will be able to use Copilot when it's available to them.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#turnoffwindowscopilot"],"categoryId":"33a43c22-104b-4683-995b-5652cfd5b490","categoryName":"Windows AI","options":[{"id":"user_vendor_msft_policy_config_windowsai_turnoffwindowscopilot_0","displayName":"Enable Copilot","description":"Enable Copilot","helpText":null},{"id":"user_vendor_msft_policy_config_windowsai_turnoffwindowscopilot_1","displayName":"Disable Copilot","description":"Disable Copilot","helpText":null}]},"f24673e65f35d18a":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowa4letterpaperresizing","displayName":"Scale content for A4 or 8.5'' x 11'' paper sizes (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowa4letterpaperresizing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_allowa4letterpaperresizing_1","displayName":"Enabled","description":null,"helpText":null}]},"f2829ef3fbd0eb7b":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipheralgorithm_l_setcngcipheralgorithmid","displayName":"CNG cipher algorithm: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":null},"f255eb638426af95":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_descriptioncolon54","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"f2a37950814419cc":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders67","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders67_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders67_1","displayName":"True","description":null,"helpText":null}]},"f2c34e0f0d8cfe18":{"id":"vendor_msft_firewall_mdmstore_domainprofile_defaultinboundaction","displayName":"Default Inbound Action for Domain Profile","description":"This value is the action that the firewall does by default (and evaluates at the very end) on inbound connections. The allow action is represented by 0x00000000; 0x00000001 represents a block action. Default value is 1 [Block]. The merge law for this option is to let the value of the GroupPolicyRSoPStore.win if it is configured; otherwise, the local store value is used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_domainprofile_defaultinboundaction_0","displayName":"Allow","description":"Allow Inbound By Default","helpText":null},{"id":"vendor_msft_firewall_mdmstore_domainprofile_defaultinboundaction_1","displayName":"Block","description":"Block Inbound By Default","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/f3.json b/public/intune-definitions/f3.json new file mode 100644 index 000000000000..edefe1943fbc --- /dev/null +++ b/public/intune-definitions/f3.json @@ -0,0 +1 @@ +{"f306f323fc28373a":{"id":"com.apple.applicationaccess_allowspellcheck","displayName":"Allow Spell Check (Deprecated)","description":"If false, disables keyboard spell-check. Requires a supervised device. Available in iOS 8.1.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowspellcheck_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowspellcheck_true","displayName":"True","description":null,"helpText":null}]},"f35eb2d09f850673":{"id":"com.apple.managedclient.preferences_allowsyncxhrinpagedismissal","displayName":"Allow pages to send synchronous XHR requests during page dismissal","description":"This policy lets you specify that a page can send synchronous XHR requests during page dismissal.\n\nIf you enable this policy, pages can send synchronous XHR requests during page dismissal.\n\nIf you disable this policy or don't configure this policy, pages aren't allowed to send synchronous XHR requests during page dismissal.\n\nThis policy is temporary and will be removed in a future release.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#allowsyncxhrinpagedismissal"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_allowsyncxhrinpagedismissal_false","displayName":"Blocked","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_allowsyncxhrinpagedismissal_true","displayName":"Allowed","description":null,"helpText":null}]},"f3e8609f62326741":{"id":"com.apple.managedclient.preferences_enableauthnegotiateport","displayName":"Include non-standard port in Kerberos SPN","description":"Specifies whether the generated Kerberos SPN should include a non-standard port.\n\nIf you enable this policy, and a user includes a non-standard port (a port other than 80 or 443) in a URL, that port is included in the generated Kerberos SPN.\n\nIf you don't configure or disable this policy, the generated Kerberos SPN won't include a port in any case.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#enableauthnegotiateport"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_enableauthnegotiateport_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enableauthnegotiateport_true","displayName":"Enabled","description":null,"helpText":null}]},"f32ff767c6a47e7f":{"id":"com.apple.managedclient.preferences_showofficeshortcutinfavoritesbar","displayName":"Show Microsoft Office shortcut in favorites bar","description":"Specifies whether to include a shortcut to Office.com in the favorites bar. For users signed into Microsoft Edge the shortcut takes users to their Microsoft Office apps and docs.\n\nIf this policy is enabled or not configure, users can choose whether to see the shortcut by changing the toggle in the favorites bar context menu.\n\nIf the policy is disabled, the shortcut won't be shown.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#showofficeshortcutinfavoritesbar"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_showofficeshortcutinfavoritesbar_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_showofficeshortcutinfavoritesbar_true","displayName":"Enabled","description":null,"helpText":null}]},"f3a0f1908ca42f16":{"id":"com.apple.managedclient.preferences_translateenabled","displayName":"Enable Translate","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge offers translation functionality to the user by showing an integrated translate flyout when appropriate, and a translate option on the right-click context menu.\n\nDisable this policy to disable all built-in translate features.\n\nIf you don't configure the policy, users can choose whether to use the translation functionality or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#translateenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_translateenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_translateenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f37c0a919a1ed8a5":{"id":"com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron","displayName":"Repeating Power On","description":"The schedule for powering the device on. ","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"f376ccbf46dcfcd8":{"id":"com.apple.mobiledevice.passwordpolicy_customregex","displayName":"Custom Regex","description":"Specifies a regular expression, and its description, used to enforce password compliance. Use the simpler passcode restrictions whenever possible, and rely on regular expression matching only when necessary. Mistakes in regular expressions can lead to frustrating user experiences, such as unsatisfiable passcode policies, or policy descriptions that don't match the enforced policy.\n\nAvailable in macOS 14 and later.","helpText":null,"infoUrls":[],"categoryId":"d68abc4d-559a-4339-be48-c41a77a87034","categoryName":"Passcode","options":null},"f3232e877e4fdebd":{"id":"com.apple.xsan_fsnameservers","displayName":"FS Name Servers","description":"An array of storage area network (SAN) File System Name Server coordinators. The list should contain the same addresses in the same order as the metadata controller (MDC) /Library/Preferences/Xsan/fsnameservers file. Xsan SAN clients automatically receive updates to the fsnameservers list from the SAN configuration servers whenever this list changes. StorNext administrators should update their profile whenever the fsnameservers list changes. This key is required for StorNext SANs.","helpText":null,"infoUrls":[],"categoryId":"46af3391-ed6d-4ada-aef7-02dac2a1b136","categoryName":"Xsan","options":null},"f3a6b20b2199dd5e":{"id":"com.microsoft.edge.mamedgeappconfigsettings.guidedswitchenabled","displayName":"Guided Switch Enabled","description":"Allows Microsoft Edge to prompt the user to switch to the appropriate profile when Microsoft Edge detects that a link is a personal or work link.\n\nIf you enable this policy, you're prompted to switch to another account if the current profile doesn't work for the requesting link.\n\nIf you disable this policy, you aren't prompted to switch to another account when there's a profile and link mismatch.\n\nIf this policy isn't configured, guided switch is turned on by default. A user can override this value in the browser settings.","helpText":null,"infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.guidedswitchenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.guidedswitchenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f32cecaad59ad451":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_nameserver_dns_nameserverlabel","displayName":"IP addresses:","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":null},"f3ec6fcb459038d5":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_disableprotocolrecognition","displayName":"Turn on protocol recognition","description":"This policy setting allows you to configure protocol recognition for network protection against exploits of known vulnerabilities.\r\n\r\n If you enable or do not configure this setting, protocol recognition will be enabled.\r\n\r\n If you disable this setting, protocol recognition will be disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-nis-disableprotocolrecognition"],"categoryId":"cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","categoryName":"Network Inspection System","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_disableprotocolrecognition_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_nis_disableprotocolrecognition_1","displayName":"Enabled","description":null,"helpText":null}]},"f3d260dfa9730711":{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_2","displayName":"Tape Drives: Deny write access","description":"This policy setting denies write access to the Tape Drive removable storage class.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-tapedrives-denywrite-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"f30e58ef9e127745":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_avc_hw_encode_preferred","displayName":"Configure H.264/AVC hardware encoding for Remote Desktop Connections","description":"This policy setting lets you enable H.264/AVC hardware encoding support for Remote Desktop Connections. When you enable hardware encoding, if an error occurs, we will attempt to use software encoding. If you disable or do not configure this policy, we will always use software encoding.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-server-avc-hw-encode-preferred"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_avc_hw_encode_preferred_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_server_avc_hw_encode_preferred_1","displayName":"Enabled","description":null,"helpText":null}]},"f3e095aee1d603be":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_start_program_2","displayName":"Start a program on connection","description":"Configures Remote Desktop Services to run a specified program automatically upon connection.\r\n\r\nYou can use this setting to specify a program to run automatically when a user logs on to a remote computer.\r\n\r\nBy default, Remote Desktop Services sessions provide access to the full Windows desktop, unless otherwise specified with this setting, by the server administrator, or by the user in configuring the client connection. Enabling this setting overrides the \"Start Program\" settings set by the server administrator or user. The Start menu and Windows Desktop are not displayed, and when the user exits the program the session is automatically logged off.\r\n\r\nTo use this setting, in Program path and file name, type the fully qualified path and file name of the executable file to be run when the user logs on. If necessary, in Working Directory, type the fully qualified path to the starting directory for the program. If you leave Working Directory blank, the program runs with its default working directory. If the specified program path, file name, or working directory is not the name of a valid directory, the RD Session Host server connection fails with an error message.\r\n\r\nIf the status is set to Enabled, Remote Desktop Services sessions automatically run the specified program and use the specified Working Directory (or the program default directory, if Working Directory is not specified) as the working directory for the program.\r\n\r\nIf the status is set to Disabled or Not Configured, Remote Desktop Services sessions start with the full desktop, unless the server administrator or user specify otherwise. (See \"Computer Configuration\\Administrative Templates\\System\\Logon\\Run these programs at user logon\" setting.)\r\n\r\nNote: This setting appears in both Computer Configuration and User Configuration. If both settings are configured, the Computer Configuration setting overrides.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-start-program-2"],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_start_program_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_start_program_2_1","displayName":"Enabled","description":null,"helpText":null}]},"f341e26e6ec01fd5":{"id":"device_vendor_msft_policy_config_admx_wpn_notoastnotification","displayName":"Turn off toast notifications","description":"\n This policy setting turns off toast notifications for applications.\n\n If you enable this policy setting, applications will not be able to raise toast notifications.\n\n Note that this policy does not affect taskbar notification balloons.\n\n Note that Windows system features are not affected by this policy. You must enable/disable system features individually to stop their ability to raise toast notifications.\n\n If you disable or do not configure this policy setting, toast notifications are enabled and can be turned off by the administrator or user.\n\n No reboots or service restarts are required for this policy setting to take effect.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-notoastnotification"],"categoryId":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","categoryName":"Notifications","options":[{"id":"device_vendor_msft_policy_config_admx_wpn_notoastnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wpn_notoastnotification_1","displayName":"Enabled","description":null,"helpText":null}]},"f3e6ada50c22fc4f":{"id":"device_vendor_msft_policy_config_browser_enterprisemodesitelist","displayName":"Enterprise Mode Site List","description":"This setting lets you configure whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy websites.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enterprisemodesitelist"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":null},"f35d7b3b02de3264":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist","displayName":"Configure list of force-installed Web Apps","description":"Setting the policy specifies a list of web apps that install silently, without user interaction, and which users can't uninstall or turn off.\r\n\r\nEach list item of the policy is an object with a mandatory member:\r\nurl (the URL of the web app to install)\r\n\r\nand 5 optional members:\r\n- default_launch_container\r\n(for how the web app opens—a new tab is the default)\r\n\r\n- create_desktop_shortcut\r\n(True if you want to create Linux and\r\nMicrosoft® Windows® desktop shortcuts).\r\n\r\n- fallback_app_name\r\n(Starting with Google Chrome version 90,\r\nallows you to override the app name if it is not a\r\nProgressive Web App (PWA), or the app name that is temporarily\r\ninstalled if it is a PWA but authentication is required before the\r\ninstallation can be completed. If both\r\ncustom_name and\r\nfallback_app_name are provided,\r\nthe latter will be ignored.)\r\n\r\n- custom_name\r\n(Starting with Google Chrome\r\nversion 96, allows you to permanently override the app name for all web\r\napps and PWAs. Currently only supported on\r\nGoogle Chrome OS.)\r\n\r\n- custom_icon\r\n(Starting with Google Chrome\r\nversion 96, allows you to override the app icon of installed apps. The\r\nicons have to be square, maximal 1 MB in size, and in one of the following\r\nformats: jpeg, png, gif, webp, ico. The hash value has to be the SHA256\r\nhash of the icon file. Currently only supported on\r\nGoogle Chrome OS.)\r\n\r\nSee PinnedLauncherApps for pinning apps to the Google Chrome OS shelf.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebAppInstallForceList for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.google.com/maps\",\r\n \"default_launch_container\": \"window\",\r\n \"create_desktop_shortcut\": true\r\n },\r\n {\r\n \"url\": \"https://docs.google.com\",\r\n \"default_launch_container\": \"tab\"\r\n },\r\n {\r\n \"url\": \"https://docs.google.com/editor\",\r\n \"default_launch_container\": \"window\",\r\n \"fallback_app_name\": \"Editor\"\r\n },\r\n {\r\n \"url\": \"https://docs.google.com/sheets\",\r\n \"default_launch_container\": \"window\",\r\n \"custom_name\": \"Spreadsheets\"\r\n },\r\n {\r\n \"url\": \"https://weather.example.com\",\r\n \"custom_icon\": {\r\n \"url\": \"https://mydomain.example.com/sunny_icon.png\",\r\n \"hash\": \"c28f469c450e9ab2b86ea47038d2b324c6ad3b1e9a4bd8960da13214afd0ca38\"\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"f36ef10ddd8288b8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled","displayName":"Disable Developer Tools","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f31cb469a093592c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist","displayName":"Configure the list of force-installed apps and extensions","description":"Setting the policy specifies a list of apps and extensions that install silently, without user interaction, and which users can't uninstall or turn off. Permissions are granted implicitly, including for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These 2 APIs aren't available to apps and extensions that aren't force-installed.)\r\n\r\nLeaving the policy unset means no apps or extensions are autoinstalled, and users can uninstall any app or extension in Google Chrome.\r\n\r\nThis policy superseeds ExtensionInstallBlocklist policy. If a previously force-installed app or extension is removed from this list, Google Chrome automatically uninstalls it.\r\n\r\nOn Microsoft® Windows® instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.\r\n\r\nOn macOS instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, or joined to a domain via MCX.\r\n\r\nThe source code of any extension may be altered by users through developer tools, potentially rendering the extension dysfunctional. If this is a concern, set the DeveloperToolsDisabled policy.\r\n\r\nEach list item of the policy is a string that contains an extension ID and, optionally, an \"update\" URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on chrome://extensions when in Developer mode. If specified, the \"update\" URL should point to an Update Manifest XML document ( https://developer.chrome.com/extensions/autoupdate ). By default, the Chrome Web Store's update URL is used. The \"update\" URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension's manifest.\r\n\r\n Note: This policy doesn't apply to Incognito mode. Read about hosting extensions ( https://developer.chrome.com/extensions/hosting ).\r\n\r\nExample value:\r\n\r\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"categoryId":"216de445-a80d-4981-b151-3b4466edc808","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"f3bec7309a03c210":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled","displayName":"Enable QR Code Generator","description":"This policy enables the QR Code generator feature in Google Chrome.\r\n\r\nIf you enable this policy or don't configure it, the QR Code Generator feature is enabled.\r\n\r\nIf you disable this policy, the QR Code Generator feature is disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f3b82b5dc91f10c6":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings","displayName":"Settings for Gemini integration","description":"This setting allows Gemini app integrations.\r\n\r\n0/unset = Gemini integration will be available for users.\r\n\r\n1 = Gemini integration will not be available for users.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information, please check the Help Center article https://support.google.com/chrome/a?p=gemini_in_chrome.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_1","displayName":"Enabled","description":null,"helpText":null}]},"f3123c21bd6725af":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC","description":"This policy allows controlling post-quantum key agreement for WebRTC.\r\n\r\nIf this policy is set to Enabled, post-quantum key agreement would be offered for\r\nWebRTC.\r\n\r\nIf this policy is set to Disabled, post-quantum key agreement would not be offered\r\nfor WebRTC.\r\n\r\nIf this policy is not set, the value would be set by the default rollout process\r\nfor post-quantum key agreement offered for WebRTC.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing DTLS\r\npeers and networking middleware are expected to ignore the new option and\r\ncontinue selecting previous options.\r\n\r\nHowever, devices that do not correctly implement DTLS may malfunction when\r\noffered the new option. For example, they may disconnect in response to\r\nunrecognized options or the resulting larger messages. Such devices are not\r\npost-quantum-ready and will interfere with an enterprise's post-quantum\r\ntransition. If encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed after some milestones.","helpText":"","infoUrls":[],"categoryId":"b811c4fe-7ff0-4bd1-a454-0918d4e2f896","categoryName":"Web Rtc settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_1","displayName":"Enabled","description":null,"helpText":null}]},"f366eaeff0addb76":{"id":"device_vendor_msft_policy_config_credentialproviders_blockpicturepassword","displayName":"Turn off picture password sign-in","description":"This policy setting allows you to control whether a domain user can sign in using a picture password.\n\nIf you enable this policy setting, a domain user can't set up or sign in with a picture password. \n\nIf you disable or don't configure this policy setting, a domain user can set up and use a picture password.\n\nNote that the user's domain password will be cached in the system vault when using this feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialproviders#credentialproviders-blockpicturepassword"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_credentialproviders_blockpicturepassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialproviders_blockpicturepassword_1","displayName":"Enabled","description":null,"helpText":null}]},"f33f4d180ca74053":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd","displayName":"Is Dynamic (VHD)","description":"[ENABLED BY DEFAULT]\r\n\r\nVHD(x) containers will be dynamically allocated. VHD(x) file size will grow as data is added to the VHD(x). If disabled, VHD(x) containers that are auto-created will be fully allocated.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IsDynamic\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd_1","displayName":"Enabled","description":null,"helpText":null}]},"f3ddfce1bdf87d69":{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions","displayName":"Secure Protocol combinations","description":"","helpText":"","infoUrls":[],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_0","displayName":"Use no secure protocols","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8","displayName":"Only use SSL 2.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_32","displayName":"Only use SSL 3.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_40","displayName":"Use SSL 2.0 and SSL 3.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_128","displayName":"Only use TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_136","displayName":"Use SSL 2.0 and TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_160","displayName":"Use SSL 3.0 and TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_168","displayName":"Use SSL 2.0, SSL 3.0, and TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_512","displayName":"Only use TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_520","displayName":"Use SSL 2.0 and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_544","displayName":"Use SSL 3.0 and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_552","displayName":"Use SSL 2.0, SSL 3.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_640","displayName":"Use TLS 1.0 and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_648","displayName":"Use SSL 2.0, TLS 1.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_672","displayName":"Use SSL 3.0, TLS 1.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_680","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2048","displayName":"Only use TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2056","displayName":"Use SSL 2.0 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2080","displayName":"Use SSL 3.0 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2088","displayName":"Use SSL 2.0, SSL 3.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2176","displayName":"Use TLS 1.0 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2184","displayName":"Use SSL 2.0, TLS 1.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2208","displayName":"Use SSL 3.0, TLS 1.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2216","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2560","displayName":"Use TLS 1.1 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2568","displayName":"Use SSL 2.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2592","displayName":"Use SSL 3.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2600","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2688","displayName":"Use TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2696","displayName":"Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2720","displayName":"Use SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2728","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8192","displayName":"Only use TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10240","displayName":"Use TLS 1.2 and TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10752","displayName":"Use TLS 1.1, TLS 1.2, and TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10880","displayName":"Use TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10912","displayName":"Use SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3","description":null,"helpText":null}]},"f3d43a32ec004280":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c","displayName":"Allow VBScript to run in Internet Explorer","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_1","displayName":"Prompt","description":null,"helpText":null}]},"f30bfb89018131fd":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowlessprivilegedsites"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"f397ab31c63973a6":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed","displayName":"Allow full screen mode","description":"Set the availability of full screen mode - all Microsoft Edge UI is hidden and only web content is visible.\r\n\r\nIf you enable this policy or don't configure it, the user, apps, and extensions with appropriate permissions can enter full screen mode.\r\n\r\nIf you disable this policy, users, apps, and extensions can't enter full screen mode.\r\n\r\nOpening Microsoft Edge in kiosk mode using the command line is unavailable when full screen mode is disabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"f349d336eab0eb4e":{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage","description":"This setting allows you to list the URLs that specify which sites are automatically granted permission to access a HID device containing a top-level collection with the given HID usage.\r\n\r\nEach item in the list requires both usages and urls fields for the policy to be valid.\r\n\r\n * Each item in the usages field must have a usage_page and may have a usage field.\r\n\r\n * Omitting the usage field will create a policy matching any device containing a top-level collection with a usage from the specified usage page.\r\n\r\n * An item which has a usage field without a usage_page field is invalid and is ignored.\r\n\r\nIf you don't set this policy, that means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nURLs in this policy shouldn't conflict with those configured through 'WebHidBlockedForUrls' (Block the WebHID API on these sites). If they do, this policy takes precedence over 'WebHidBlockedForUrls'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://microsoft.com\",\r\n \"https://chromium.org\"\r\n ],\r\n \"usages\": [\r\n {\r\n \"usage\": 5678,\r\n \"usage_page\": 1234\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f3e5e642d96c917f":{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_setntpdefaultfeedtab","displayName":"Set the default New Tab Page feed tab to Work or Discover (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_setntpdefaultfeedtab_0","displayName":"Work","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev148~policy~microsoft_edge~startup_setntpdefaultfeedtab_setntpdefaultfeedtab_1","displayName":"Discover","description":null,"helpText":null}]},"f3486a54a52e979d":{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting","displayName":"Control use of the Serial API","description":"\r\nSet whether websites can access serial ports. You can completely block access or ask the user each time a website wants to get access to a serial port.\r\n\r\nSetting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\r\n\r\nYou can override this policy for specific URL patterns by using the 'SerialAskForUrls' (Allow the Serial API on specific sites) and 'SerialBlockedForUrls' (Block the Serial API on specific sites) policies.\r\n\r\nIf you don't configure this policy, by default, websites can ask users whether they can access a serial port, and users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockSerial (2) = Do not allow any site to request access to serial ports via the Serial API\r\n\r\n* AskSerial (3) = Allow sites to ask for user permission to access a serial port\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"f3af7dd76d94c471":{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge","description":"This setting lets you specify whether Internet Explorer will redirect navigations to sites that require a modern browser to Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Sitelist', beginning in M87, Internet Explorer will redirect sites that require a modern browser to Microsoft Edge.\r\n\r\nMicrosoft provides a list of public sites that require such redirection, such as https://mail.yahoo.com.\r\n\r\nWhen a site is redirected from Internet Explorer to Microsoft Edge, the Internet Explorer tab that began loading that site is closed if it had no prior content. Otherwise, it is navigated to a Microsoft help page explaining why the site was redirected to Microsoft Edge.\r\n\r\nWhen Microsoft Edge is launched to load a site from IE, an information bar is shown to the user explaining that the site works best in a modern browser.\r\n\r\nIf you set this policy to 'Disable', Internet Explorer will not redirect any traffic to Microsoft Edge.\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable\r\n\r\n* Sitelist (1) = Redirect sites based on the incompatible sites sitelist\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Enabled","description":null,"helpText":null}]},"f3e496a2fc7f4919":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_pptviewexe186","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_pptviewexe186_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_pptviewexe186_1","displayName":"True","description":null,"helpText":null}]},"f3804f2bcab379de":{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadcloudid","displayName":"Cloud ID (optional):","description":"","helpText":"","infoUrls":[],"categoryId":"90e3acc6-80d5-41b4-8141-a8620a211c0e","categoryName":"Tenant Restrictions","options":null},"f3b31e376e924459":{"id":"device_vendor_msft_policy_config_update_engagedrestarttransitionschedule","displayName":"Engaged Restart Transition Schedule","description":"For Quality Updates, this policy specifies the timing before transitioning from Auto restarts scheduled outside of active hours to Engaged restart, which requires the user to schedule. The period can be set between 2 and 30 days from the time the restart becomes pending. Value type is integer. Default value is 7 days. Supported value range: 2 - 30. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestarttransitionschedule"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"f328b8bb819add8e":{"id":"keyboardsettings_allowautocorrection","displayName":"Allow Auto Correction","description":"If `false`, disables auto-correction.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowautocorrection_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowautocorrection_true","displayName":"True","description":null,"helpText":null}]},"f3e6baef3778f834":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_pathcolon23","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"f3654d958e75c5fa":{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableclose","displayName":"Prohibit closing items (User)","description":"Prevents users from removing Web content from their Active Desktop.\r\n\r\nIn Active Desktop, you can add items to the desktop but close them so they are not displayed.\r\n\r\nIf you enable this setting, items added to the desktop cannot be closed; they always appear on the desktop. This setting removes the check boxes from items on the Web tab in Display in Control Panel.\r\n\r\nNote: This setting does not prevent users from deleting items from their Active Desktop.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-disableclose"],"categoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","categoryName":"Desktop","options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableclose_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableclose_1","displayName":"Enabled","description":null,"helpText":null}]},"f3f6df6fb74b3557":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidate","displayName":"Turn on cloud candidate (User)","description":"This policy setting controls the cloud candidates feature, which uses an online service to provide input suggestions that don't exist in a PC's local dictionary.\r\n\r\nIf you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the suggestions, and the user won't be able to turn it off.\r\n\r\nIf you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on.\r\n\r\nIf you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the cloud candidates feature.\r\n\r\nThis Policy setting applies to Microsoft CHS Pinyin IME and JPN IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoncloudcandidate"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidate_1","displayName":"Enabled","description":null,"helpText":null}]},"f3d2e45259aeae12":{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_extendview","displayName":"Extended View (Web View) (User)","description":"Permits or prohibits use of this snap-in.\n\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.\n\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted.\n\n To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.\n\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited.\n\n To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.\n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-extendview"],"categoryId":"756d2b0b-5f06-45e7-b5c5-c066deb5ed2f","categoryName":"Extension snap-ins","options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_extendview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_extendview_1","displayName":"Enabled","description":null,"helpText":null}]},"f30db9dbb2a7afb1":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remstore","displayName":"Removable Storage (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-remstore"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remstore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remstore_1","displayName":"Enabled","description":null,"helpText":null}]},"f37c2bdfe7f90139":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup","displayName":"PowerPoint 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft PowerPoint 2013.\r\nMicrosoft PowerPoint 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft PowerPoint 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft PowerPoint 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013powerpointbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"f31b06d13a03a098":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup","displayName":"Word 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Word 2016.\r\nMicrosoft Word 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Word 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Word 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016wordbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"f3118d7dc22ac758":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (User)","description":"Configures browsing data lifetime settings for Google Chrome. This policy allows admins to configure (per data-type) when data is deleted by the browser. This is useful for customers that work with sensitive customer data. The policy will only take effect if SyncDisabled is set to true.\r\n\r\nThe available data types are 'browsing_history', 'download_history', 'cookies_and_other_site_data', 'cached_images_and_files', 'password_signin', 'autofill', 'site_settings' and 'hosted_app_data'.\r\n\r\nThe browser will automatically remove data of selected types that is older than 'time_to_live_in_hours'. The minimum value that can be set is 1 hour.\r\n\r\nThe deletion of expired data will happen 15 seconds after the browser starts then every hour while the browser is running.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowsingDataLifetime for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"time_to_live_in_hours\": 24,\r\n \"data_types\": [\r\n \"browsing_history\"\r\n ]\r\n },\r\n {\r\n \"time_to_live_in_hours\": 12,\r\n \"data_types\": [\r\n \"password_signin\",\r\n \"autofill\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_1","displayName":"Enabled","description":null,"helpText":null}]},"f3ab964a3bffc364":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist","displayName":"Clear Browsing Data on Exit (User)","description":"Configures a list of browsing data types that should be deleted when the user closes all browser windows. The available data types are browsing history (browsing_history), download history (download_history), cookies (cookies_and_other_site_data), cache(cached_images_and_files), autofill (autofill), passwords (password_signin), site settings (site_settings) and hosted apps data (hosted_app_data). This policy does not take precedence over AllowDeletingBrowserHistory.\r\n\r\nThis policy requires the SyncDisabled policy to be set to true, otherwise it will be ignored. If this policy is set at platform level, Sync should be disabled at platform level. If this policy is set at user level, Sync should be disabled for that user in order for this policy to take effect.\r\n\r\nIf Google Chrome does not exit cleanly (for example, if the browser or the OS crashes), the browsing data will be cleared the next time the profile is loaded.\r\n\r\nExample value:\r\n\r\nbrowsing_history\r\ndownload_history\r\ncookies_and_other_site_data\r\ncached_images_and_files\r\npassword_signin\r\nautofill\r\nsite_settings\r\nhosted_app_data","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_1","displayName":"Enabled","description":null,"helpText":null}]},"f37f0f64501e65c4":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_policyrefreshrate","displayName":"Refresh rate for user policy: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"f3c11224c77e4ecc":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckserviceenabled","displayName":"Enable or disable spell checking web service (User)","description":"Setting the policy to Enabled puts a Google web service in use to help resolve spelling errors. This policy only controls the use of the online service. Setting the policy to Disabled means this service is never used.\r\n\r\nLeaving the policy unset lets users choose whether to use the spellcheck service.\r\n\r\nThe spell check can always use a downloaded dictionary locally unless the feature is disabled by SpellcheckEnabled in which case this policy will have no effect.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f331844fccc4bd29":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled","displayName":"Enable PAC URL stripping (for https://) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f3c26f562b254167":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC (User)","description":"This policy allows controlling post-quantum key agreement for WebRTC.\r\n\r\nIf this policy is set to Enabled, post-quantum key agreement would be offered for\r\nWebRTC.\r\n\r\nIf this policy is set to Disabled, post-quantum key agreement would not be offered\r\nfor WebRTC.\r\n\r\nIf this policy is not set, the value would be set by the default rollout process\r\nfor post-quantum key agreement offered for WebRTC.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing DTLS\r\npeers and networking middleware are expected to ignore the new option and\r\ncontinue selecting previous options.\r\n\r\nHowever, devices that do not correctly implement DTLS may malfunction when\r\noffered the new option. For example, they may disconnect in response to\r\nunrecognized options or the resulting larger messages. Such devices are not\r\npost-quantum-ready and will interfere with an enterprise's post-quantum\r\ntransition. If encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed after some milestones.","helpText":"","infoUrls":[],"categoryId":"b811c4fe-7ff0-4bd1-a454-0918d4e2f896","categoryName":"Web Rtc settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_1","displayName":"Enabled","description":null,"helpText":null}]},"f3c828b4b0b31b67":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1","displayName":"Save Excel files as (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_51","displayName":"Excel Workbook (*.xlsx)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_52","displayName":"Excel Macro-Enabled Workbook (*.xlsm)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_50","displayName":"Excel Binary Workbook (*.xlsb)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_44","displayName":"Web Page (*.htm; *.html)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_56","displayName":"Excel 97-2003 Workbook (*.xls)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_39","displayName":"Excel 5.0/95 Workbook (*.xls)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_60","displayName":"OpenDocument Spreadsheet (*.ods)","description":null,"helpText":null}]},"f3bb6794ff430376":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_pathcolon13","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f329ada644fecfad":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_datecolon22","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f32b64cae140a822":{"id":"user_vendor_msft_policy_config_internetexplorer_disablecompatview","displayName":"Turn off Compatibility View (User)","description":"This policy setting controls the Compatibility View feature, which allows the user to fix website display problems that he or she may encounter while browsing.\n\nIf you enable this policy setting, the user cannot use the Compatibility View button or manage the Compatibility View sites list.\n\nIf you disable or do not configure this policy setting, the user can use the Compatibility View button and manage the Compatibility View sites list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecompatview"],"categoryId":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","categoryName":"Compatibility View","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablecompatview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablecompatview_1","displayName":"Enabled","description":null,"helpText":null}]},"f33203ed1aba6bf5":{"id":"user_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation","displayName":"Prevent participation in the Customer Experience Improvement Program (User)","description":"This policy setting prevents the user from participating in the Customer Experience Improvement Program (CEIP).\n\nIf you enable this policy setting, the user cannot participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.\n\nIf you disable this policy setting, the user must participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.\n\nIf you do not configure this policy setting, the user can choose to participate in the CEIP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecustomerexperienceimprovementprogramparticipation"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_1","displayName":"Enabled","description":null,"helpText":null}]},"f38685a0e6a1ead9":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"f3fd0a5be3a68ed3":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting","displayName":"Allow active scripting (User)","description":"This policy setting allows you to manage whether script code on pages in the zone is run.\n\nIf you enable this policy setting, script code on pages in the zone can run automatically. If you select Prompt in the drop-down box, users are queried to choose whether to allow script code on pages in the zone to run.\n\nIf you disable this policy setting, script code on pages in the zone is prevented from running.\n\nIf you do not configure this policy setting, script code on pages in the zone is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowactivescripting"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_1","displayName":"Enabled","description":null,"helpText":null}]},"f3c2767f60e82ce7":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts","displayName":"Configure the list of commands for which to disable keyboard shortcuts (User)","description":"Configure the list of Microsoft Edge commands for which to disable keyboard shortcuts.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2186950 for a list of possible commands to disable.\r\n\r\nIf you enable this policy, commands in the 'disabled' list will no longer be activated by keyboard shortcuts.\r\n\r\nIf you disable this policy, all keyboard shortcuts behave as usual.\r\n\r\nNote: Disabling a command will only remove its shortcut mapping. Commands in the 'disabled' list will still function if accessed via browser UI.\r\n\r\nExample value:\r\n\r\n{\r\n \"disabled\": [\r\n \"new_tab\",\r\n \"fullscreen\"\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"disabled\": [\"new_tab\", \"fullscreen\"]}","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"f35cdc22e71df042":{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended","displayName":"Set the default \"share additional operating system region\" setting (User)","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\r\n\r\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting will be shared with the web through the default JavaScript locale. If shared, websites will be able to query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\r\n\r\nIf you set this policy to \"Limited\", the OS Regional format will only be shared if its language part matches the Microsoft Edge display language.\r\n\r\nIf you set this policy to \"Always\", the OS Regional format will always be shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months can be displayed in one language while the surrounding text is displayed in another language.\r\n\r\nIf you set this policy to \"Never\", the OS Regional format will never be shared.\r\n\r\nExample 1: In this example the OS Regional format is set to \"en-GB\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Limited\", or \"Always\".\r\n\r\nExample 2: In this example the OS Regional format is set to \"es-MX\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Always\" but will not if the policy is set to \"Limited\".\r\n\r\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282\r\n\r\nPolicy options mapping:\r\n\r\n* Limited (0) = Limited\r\n\r\n* Always (1) = Always share the OS Regional format\r\n\r\n* Never (2) = Never share the OS Regional format\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f340b5dc3881feb7":{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled","displayName":"Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy lets you manage whether the opt-out user experience for enhanced security mode is presented when ESM is turned on for Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, the UI for the opt-out user experience is on.\r\n\r\nIf you disable this policy, the UI for the opt-out user experience is off.\r\n\r\nNote: If this policy is used, only the User Interface for the opt-out experience is supressed - ESM is still turned on. For more information, see the 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) policy.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895.\r\n\r\nAfter careful evaluation, we have determined that this experimental opt-out UX is not required. As a result, this policy will be deprecated and stop working after Edge version 130.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f3a682ca1ac68813":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled","displayName":"Enable saving passkeys to the password manager (User)","description":"This policy controls whether users can save passkeys in the built-in password manager. It does not limit access to, or change the contents of, passkeys already saved in the password manager.\r\n\r\nIf the PasswordManagerEnabled policy is Disabled, saving to the built-in password manager is disabled in general, including passkeys. In this case, this policy has no effect.\r\n\r\nIf this policy is enabled or not configured, users can save passkeys in the built-in password manager when signed in to Microsoft Edge.\r\n\r\nIf this policy is disabled, users cannot save new passkeys to the built-in password manager. Previously saved passkeys continue to work.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f3086863c964fd14":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for InPrivate and Guest profiles (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_0","displayName":"Enable ambient authentication in regular sessions only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_1","displayName":"Enable ambient authentication in InPrivate and regular sessions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_2","displayName":"Enable ambient authentication in guest and regular sessions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_3","displayName":"Enable ambient authentication in regular, InPrivate and guest sessions","description":null,"helpText":null}]},"f34a9650ccefc2b6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_help_l_federatedsearchforhelp","displayName":"Federated search for help (User)","description":"\r\n This policy setting allows you to determine the sources of content that Office users in your organization can access through Office Help (F1).\r\n\r\n If you enable or do not configure this policy setting, users who utilize Office Help see content from both Office and the Internet.\r\n\r\n If you disable this setting, Office users’ search results through Help are limited to Office content.\r\n ","helpText":"","infoUrls":[],"categoryId":"1942922a-cba9-44c8-871f-3d915c62bd06","categoryName":"Help","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_help_l_federatedsearchforhelp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_help_l_federatedsearchforhelp_1","displayName":"Enabled","description":null,"helpText":null}]},"f36f2a61fd8b8e6b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_corsican","displayName":"Corsican (User)","description":"Enables the editing language Corsican","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_corsican_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_corsican_1","displayName":"Enabled","description":null,"helpText":null}]},"f35ddce1912b58db":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mongoliantraditionalmongolian","displayName":"Mongolian (Traditional Mongolian) (User)","description":"Enables the editing language Mongolian (Traditional Mongolian)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mongoliantraditionalmongolian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_mongoliantraditionalmongolian_1","displayName":"Enabled","description":null,"helpText":null}]},"f37ba394a8ab897c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_l_workflowfriendly441","displayName":"Name of the document library to be shown the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"f30c766b1b5fb467":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablefretutorial","displayName":"Disable the tutorial that appears at the end of OneDrive Setup (User)","description":"This setting lets you prevent the tutorial from launching in a web browser at the end of OneDrive Setup.\r\n\r\nIf you enable this setting, users will not see the tutorial after they complete OneDrive Setup.\r\n\r\nIf you disable or do not configure this setting, the tutorial will appear at the end of OneDrive Setup.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablefretutorial_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablefretutorial_1","displayName":"Enabled","description":null,"helpText":null}]},"f33698855a433e32":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity","displayName":"Set sensitivity (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity_1","displayName":"Enabled","description":null,"helpText":null}]},"f3073dc06df08a98":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_disableuserentriestoserverlist","displayName":"Disable user entries to server list (User)","description":"This policy setting controls whether Outlook users can add entries to the list of SharePoint servers when establishing a meeting workspace. \r\n\r\nIf you enable this policy setting, you can choose between two options to determine whether Outlook users can add entries to the published server list: \r\n\r\n- Publish default, allow others. This option is the default configuration in Outlook. \r\n\r\n- Publish default, disallow others. This option prevents users from adding servers to the default published server list. \r\n\r\nIf you disable or do not configure this policy setting, when users create a meeting workspace, they can choose a server from a default list provided by administrators or manually enter the address of a server that is not listed. This is the equivalent of Enabled -- Publish default, allow others.","helpText":"","infoUrls":[],"categoryId":"f77040df-7dd2-4916-b6a0-5ef962686d4e","categoryName":"Meeting Workspace","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_disableuserentriestoserverlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_meetingworkspace_l_disableuserentriestoserverlist_1","displayName":"Enabled","description":null,"helpText":null}]},"f3044db7b246edb5":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlylong","displayName":"Reduce the end time of long appointments and meetings by a specified number of minutes (User)","description":"\r\n This policy setting allows you to specify how many minutes to reduce the end time of a long appointment or meeting by when a user creates an appointment or meeting. A long appointment or meeting is one that lasts for one hour or longer.\r\n\r\n If you enable this policy setting, you specify the number of minutes to reduce the end time of a long appointment or meeting by when a user creates an appointment or meeting. The user won’t be able to change this value by going to File > Options > Calendar.\r\n\r\n Note: You should also enable the “End appointments and meetings early” policy setting\r\n\r\n If you disable or don’t configure this policy setting, the default value of 10 minutes is used or whatever the user specifies by going to File > Options > Calendar.\r\n\r\n Note: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.\r\n ","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlylong_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlylong_1","displayName":"Enabled","description":null,"helpText":null}]},"f30c06f8274be64a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2_l_oomaddressaccess_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2_l_oomaddressaccess_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2_l_oomaddressaccess_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2_l_oomaddressaccess_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomaddressaccess_v2_l_oomaddressaccess_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"f3fd6fd3d11f85b0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2_l_oomsaveas_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2_l_oomsaveas_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2_l_oomsaveas_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2_l_oomsaveas_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oomsaveas_v2_l_oomsaveas_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"f3fe104ef630cedd":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventnondefaultexchangeaccounts","displayName":"Prevent adding non-default Exchange accounts (User)","description":"This policy allows you to prevent users from adding non-default Exchange accounts to existing Outlook profiles.\r\n\r\nIf you enable this policy setting, you will prevent users from adding non-default Exchange accounts via the Add New E-mail Account wizard.\r\n\r\nIf you disable or do not configure this policy setting, users can add non-default Exchange accounts to existing Outlook profiles.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventnondefaultexchangeaccounts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_preventnondefaultexchangeaccounts_1","displayName":"Enabled","description":null,"helpText":null}]},"f34183f75bb12255":{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_delegatesentitemsstyle","displayName":"Saving messages sent from a shared mailbox to the Sent Items folder (User)","description":"This policy setting controls whether messages sent from a shared mailbox are saved to the Sent Items folder of the shared mailbox.\r\n\r\nBy default, messages sent from a shared mailbox aren't saved to the Sent Items folder of the shared mailbox.\r\n\r\nIf you enable this policy setting, messages sent from a shared mailbox will be saved to the Sent Items folder of the shared mailbox.\r\n\r\nIf you disable or don’t configure this policy setting, messages sent from a shared mailbox won’t be saved to the Sent Items folder of the shared mailbox.","helpText":"","infoUrls":[],"categoryId":"fcc8ad48-a1e7-4cba-adae-7c916cbbc897","categoryName":"Delegates","options":[{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_delegatesentitemsstyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v7~policy~l_microsoftofficeoutlook~l_outlookoptions~l_delegates_l_delegatesentitemsstyle_1","displayName":"Enabled","description":null,"helpText":null}]},"f31e83d2afebfc3e":{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_nowarningnoelevationoninstall_enum","displayName":"When installing drivers for a new connection: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","categoryName":"Printers","options":[{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_nowarningnoelevationoninstall_enum_0","displayName":"Show warning and elevation prompt","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_printers_pointandprintrestrictions_user_pointandprint_nowarningnoelevationoninstall_enum_1","displayName":"Show warning only","description":null,"helpText":null}]},"f3d03abd3883f2a1":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours","displayName":"Hours (User)","description":"Sets the label for hours.\r\n \r\nIf you enable this setting, hours are displayed with the specified label.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjhours_1","displayName":"Enabled","description":null,"helpText":null}]},"f3c54d38ed9776c9":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems1_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e4deef0-4528-47d5-8869-4143c506f18b","categoryName":"Custom","options":null},"f3bab2fb18ce0421":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_pathcolon44","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"f3a6d8fd4f9c5593":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_descriptioncolon62","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/f4.json b/public/intune-definitions/f4.json new file mode 100644 index 000000000000..e0965f295357 --- /dev/null +++ b/public/intune-definitions/f4.json @@ -0,0 +1 @@ +{"f479ef61ff5b13a7":{"id":"com.android.devicerestrictionpolicy.passwordblockkeyguard","displayName":"Disable lock screen","description":"If 'True', blocks all Keyguard lock screen features from being used. If 'False', Intune doesn't change or update this setting. By default, when the device is in lock screen, the OS might allow all the Keyguard features, such as camera, fingerprint unlock, and more. Available for fully managed and dedicated devices.","helpText":null,"infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":[{"id":"com.android.devicerestrictionpolicy.passwordblockkeyguard_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.passwordblockkeyguard_false","displayName":"False","description":"false","helpText":null}]},"f40d14273e8359ad":{"id":"com.android.devicerestrictionpolicy.personalprofileappsallowinstallfromunknownsources","displayName":"Allow users to enable app installation from unknown sources in the personal profile","description":"If 'True, allows users to install apps from unknown sources in the personal profile. It allows users to install apps from sources other than the Google Play Store. If 'False', Intune doesn't change or update this setting. By default, the OS might prevent users from installing apps from unknown sources in the personal profile. Available for corporate-owned work profile devices (at personal profile level).","helpText":null,"infoUrls":[],"categoryId":"990880db-3f64-4436-ab4a-d7d5181dfa5d","categoryName":"Personal Profile","options":[{"id":"com.android.devicerestrictionpolicy.personalprofileappsallowinstallfromunknownsources_true","displayName":"True","description":"true","helpText":null},{"id":"com.android.devicerestrictionpolicy.personalprofileappsallowinstallfromunknownsources_false","displayName":"False","description":"false","helpText":null}]},"f4c40868446ea61a":{"id":"com.apple.extensiblesso_platformsso_loginpolicy","displayName":"Login Policy","description":"The policy to apply when using Platform SSO at the login window. Applies when 'AuthenticationMethod' is `Password`.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"f425d925b8407ecc":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_lcid","displayName":"Microsoft Edge Beta LCID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"f414f7c1f21064ff":{"id":"com.apple.managedclient.preferences_exclusions_item_path_tamperprotection","displayName":"Process path","description":"Full and exact path to the process binary","helpText":null,"infoUrls":[],"categoryId":"5c4df3be-80b0-40cc-a8c8-0258120b0de5","categoryName":"Tamper protection","options":null},"f4d6b01ab63aad62":{"id":"com.apple.managedclient.preferences_forcesynctypes","displayName":"Configure the list of types that are included for synchronization","description":"If you enable this policy all the specified data types will be included for synchronization for Azure AD/Azure AD-Degraded user profiles. This policy can be used to ensure the type of data uploaded to the Microsoft Edge synchronization service.\n\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", \"history\", \"openTabs\", \"edgeWallet\", \"collections\", \"apps\", and \"edgeFeatureUsage\". The \"edgeFeatureUsage\" data type will be supported starting in Microsoft Edge version 134. Note that these data type names are case sensitive.\n\nUsers will not be able to override the enabled data types.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#forcesynctypes"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f41df630769d9091":{"id":"com.apple.managedclient.preferences_notificationsallowedforurls","displayName":"Allow notifications on specific sites","description":"Define a list of sites, based on URL patterns, that can display notifications.\n\nIf you don't configure this policy, the global default value from the \"DefaultNotificationsSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#notificationsallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f446d470b5baa47f":{"id":"com.apple.managedclient.preferences_passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger","description":"Allows you to control when to trigger password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\n\nYou can use the \"PasswordProtectionLoginURLs\" and \"PasswordProtectionChangePasswordURL\" policies to configure which passwords to protect.\n\nExemptions: Passwords for the sites listed in \"PasswordProtectionLoginURLs\" and \"PasswordProtectionChangePasswordURL\", as well as for the sites listed in \"SmartScreenAllowListDomains\", will not trigger a password-protection warning.\n\nSet to 'PasswordProtectionWarningOff' (0) to not show password protection warningss.\n\nSet to 'PasswordProtectionWarningOnPasswordReuse' (1) to show password protection warnings when the user reuses their protected password on a non-whitelisted site.\n\nIf you disable or don't configure this policy, then the warning trigger is not shown.\n\n* 0 = Password protection warning is off.\n\n* 1 = Password protection warning is triggered by password reuse.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#passwordprotectionwarningtrigger"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_passwordprotectionwarningtrigger_0","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_passwordprotectionwarningtrigger_1","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null}]},"f4a67672bc8cb26f":{"id":"com.apple.managedclient.preferences_reduceipaddresschangenotificationenabled","displayName":"Enable Reduce IP Address Change Notification","description":"This policy lets you configure the Reduce IP address change notification feature in Microsoft Edge on macOS.\n\nIf you enable or don't configure this policy, the Reduce IP address change notification feature is enabled by default. This helps reduce unnecessary network change notifications when IP addresses change.\n\nIf you disable this policy, all IP address changes trigger network change notifications, regardless of the feature's status.\n\nThis feature is only available on macOS.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#reduceipaddresschangenotificationenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_reduceipaddresschangenotificationenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_reduceipaddresschangenotificationenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f41f59eaaa968dc4":{"id":"com.apple.nsextension_deniedextensions","displayName":"Denied Extensions","description":"An array of identifiers for extensions that aren't allowed to run on the system.","helpText":null,"infoUrls":[],"categoryId":"d875dca1-dc97-4cc5-9df3-c50b813622a3","categoryName":"NS Extension Management","options":null},"f4651c957f96700b":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"f48d1706335ce2e5":{"id":"device_vendor_msft_bitlocker_identificationfield_identificationfield","displayName":"BitLocker identification field:","description":"","helpText":"","infoUrls":[],"categoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","categoryName":"BitLocker Drive Encryption","options":null},"f4bf3e3051d733c6":{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementenableaccount","displayName":"Automatic Account Management Enable Account","description":"Use this setting to configure whether the automatically managed account is enabled or disabled.\n\nIf this setting is enabled, the target account will be enabled.\n\nIf this setting is disabled, the target account will be disabled.\n\nIf not specified, this setting defaults to False.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":[{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementenableaccount_false","displayName":"The target account will be disabled","description":"The target account will be disabled","helpText":null},{"id":"device_vendor_msft_laps_policies_automaticaccountmanagementenableaccount_true","displayName":"The target account will be enabled","description":"The target account will be enabled","helpText":null}]},"f4e8d713a67ef9a5":{"id":"device_vendor_msft_policy_config_admx_devicecompat_drivershims","displayName":"Driver compatibility settings","description":"Changes behavior of 3rd-party drivers to work around incompatibilities introduced between OS versions.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-devicecompat#admx-devicecompat-drivershims"],"categoryId":"27087ae6-d02f-4b54-a143-6cde89c04989","categoryName":"Device and Driver Compatibility","options":[{"id":"device_vendor_msft_policy_config_admx_devicecompat_drivershims_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_devicecompat_drivershims_1","displayName":"Enabled","description":null,"helpText":null}]},"f45077b671f3dc3e":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exclusions_paths_exclusions_pathslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"c805d788-1950-4ed1-adfb-771f12564a0c","categoryName":"Exclusions","options":null},"f4273efda61e53bf":{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyexecute_access_2","displayName":"Floppy Drives: Deny execute access","description":"This policy setting denies execute access to the Floppy Drives removable storage class, including USB Floppy Drives.\r\n\r\nIf you enable this policy setting, execute access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, execute access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-floppydrives-denyexecute-access-2"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyexecute_access_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyexecute_access_2_1","displayName":"Enabled","description":null,"helpText":null}]},"f420cbbf9500235c":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013","displayName":"Microsoft Office 365 Common 2013","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2013 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers with UE-V.\r\nIf you enable this policy setting, user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize with UE-V.\r\nIf you disable this policy setting, user settings which are common between the Microsoft Office Suite 2013 applications are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365common2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013_1","displayName":"Enabled","description":null,"helpText":null}]},"f423fc5794b7c212":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled","displayName":"Enable chrome://devices","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f4c20da318c32a9d":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_idletimeoutactionsdesc","displayName":"Actions to run when the computer is idle (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"8c35f124-e249-43e3-9044-ecc0b0a5855a","categoryName":"Idle Browser Actions","options":null},"f465d80a26a04ff1":{"id":"device_vendor_msft_policy_config_devicelock_accountlockoutpolicy","displayName":"Account Lockout Policy","description":" Account lockout threshold - This security setting determines the number of failed logon attempts that causes a user account to be locked out. A locked-out account cannot be used until it is reset by an administrator or until the lockout duration for the account has expired. You can set a value between 0 and 999 failed logon attempts. If you set the value to 0, the account will never be locked out. Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password-protected screen savers count as failed logon attempts. Default: 0 Account lockout duration - This security setting determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked. The available range is from 0 minutes through 99,999 minutes. If you set the account lockout duration to 0, the account will be locked out until an administrator explicitly unlocks it. If an account lockout threshold is defined, the account lockout duration must be greater than or equal to the reset time. Default: None, because this policy setting only has meaning when an Account lockout threshold is specified. Reset account lockout counter after - This security setting determines the number of minutes that must elapse after a failed logon attempt before the failed logon attempt counter is reset to 0 bad logon attempts. The available range is 1 minute to 99,999 minutes. If an account lockout threshold is defined, this reset time must be less than or equal to the Account lockout duration. Default: None, because this policy setting only has meaning when an Account lockout threshold is specified.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#accountlockoutpolicy"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"f4988ee1ae6d85cf":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowfontdownloads"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"f41b60a4024b1913":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802","displayName":"Allow drag and drop or copy and paste files","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_1","displayName":"Prompt","description":null,"helpText":null}]},"f467c665791eccf5":{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_users","displayName":"Selected user(s)","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"categoryId":"b86100f0-e4ae-4f93-9dae-dd253a96726f","categoryName":null,"options":null},"f4c234bdfdb957dd":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning","displayName":"Suppress the unsupported OS warning","description":"Suppresses the warning that appears when Microsoft Edge is running on a computer or operating system that is no longer supported.\r\n\r\nIf this policy is false or unset, the warnings will appear on such unsupported computers or operating systems.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_1","displayName":"Enabled","description":null,"helpText":null}]},"f4fdb25809839bb7":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed","displayName":"Allow or block video capture","description":"Control whether sites can capture video.\r\n\r\nIf enabled or not configured (default), the user will be asked about video capture access for all sites except those with URLs configured in the 'VideoCaptureAllowedUrls' (Sites that can access video capture devices without requesting permission) policy list, which will be granted access without prompting.\r\n\r\nIf you disable this policy, the user isn't prompted, and video capture is only available to URLs configured in 'VideoCaptureAllowedUrls' policy.\r\n\r\nThis policy affects all types of video inputs, not only the built-in camera.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"f4068e6282e82fa3":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f483f8c319d2ba3d":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled","displayName":"Allow ServiceWorker to control srcdoc iframes","description":"https://github.com/w3c/ServiceWorker/issues/765 asks srcdoc iframe with the \"allow-same-origin\" sandbox attribute to be under ServiceWorker control.\r\n\r\nBy default (if left unset) or when set to Enabled, Microsoft Edge makes srcdoc iframes with \"allow-same-origin\" sandbox attributes to be under ServiceWorker control.\r\n\r\nSetting the policy to Disabled prevents ServiceWorker control over srcdoc iframes.\r\n\r\nThis policy is temporary and planned for deprecation in 2026.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f4ff2207758c6a84":{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled","displayName":"Enable travel assistance (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy is obsolete as the feature is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy. It doesn't work in Microsoft Edge after version 105.\r\nConfigure this policy to allow/disallow travel assistance.\r\n\r\nThe travel assistance feature gives helpful and relevant information to a user who performs Travel related task within the browser. This feature provides trusted and validated suggestions / information to the users from across sources gathered by Microsoft.\r\n\r\nIf you enable or don't configure this setting, travel assistance will be enabled for the users when they are performing travel related tasks.\r\n\r\nIf you disable this setting, travel assistance will be disabled and users will not be able to see any travel related recommendations.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f4401aca0c50f546":{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked","displayName":"Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe","description":"Microsoft Edge will block navigations to external protocols inside a\r\nsandboxed iframe.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block those navigations.\r\n\r\nIf you disable this policy, Microsoft Edge will not block those navigations.\r\n\r\nThis can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Microsoft Edge version 104.\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked_1","displayName":"Enabled","description":null,"helpText":null}]},"f4896e198254e403":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_powerpntexe45","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_powerpntexe45_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_powerpntexe45_1","displayName":"True","description":null,"helpText":null}]},"f4a6ee518184d79b":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_onenoteexe124","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_onenoteexe124_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_onenoteexe124_1","displayName":"True","description":null,"helpText":null}]},"f43bea74c7ccc7fa":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath","displayName":"Update Path","description":"This policy setting allows you to specify the location where Office will get updates from.\r\n\r\nIf you enable this policy setting, you can specify one of the following for the update location: a network share, a folder on the local computer where Office is installed, or an HTTP address. Mapped network drives aren’t supported. \r\n\r\nIf you enable this policy setting, but you leave the update location blank, Office will get updates from the Internet.\r\n\r\nIf you disable or don’t configure this policy setting, Office will get updates from the Internet, unless you specify a different location by using the Office Deployment Tool.\r\n\r\nImportant: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath_1","displayName":"Enabled","description":null,"helpText":null}]},"f42787b62ce562df":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_enableautomaticuploadbandwidthmanagement","displayName":"Enable automatic upload bandwidth management for OneDrive","description":"This setting lets the OneDrive sync app (OneDrive.exe) upload data in the background only when unused bandwidth is available. It prevents the sync app from interfering with other apps that are using the network. This setting is powered by the Windows LEDBAT (Low Extra Delay Background Transport) protocol. When LEDBAT detects increased latency that indicates other TCP connections are consuming bandwidth, the sync app will reduce its own consumption to prevent interference. When network latency decreases again and bandwidth is freed up, the sync app will increase the upload rate and consume the unused bandwidth.\r\n\r\nIf you enable this setting, the sync app upload rate will be set to \"Adjust automatically\" based on bandwidth availability and users won't be able to change it.\r\n\r\nIf you disable or do not configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to \"Adjust automatically\".\r\n\r\nImportant\r\nIf you enable or disable this setting, and then change it back to Not Configured, the last configuration will remain in effect. We recommend enabling this setting instead of \"Limit the sync app upload speed to a fixed rate.\" You should not enable both settings at the same time. This setting will override \"Limit the sync app upload rate to a percentage of throughput\" if both are enabled on the same device.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_enableautomaticuploadbandwidthmanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_enableautomaticuploadbandwidthmanagement_1","displayName":"Enabled","description":null,"helpText":null}]},"f42d6489f05871ec":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_permitdisablepermissioninheritance","displayName":"Allow OneDrive to disable Windows permission inheritance in folders synced read-only","description":"This setting lets the OneDrive sync app remove all inherited permissions within read-only folders syncing on a user's PC.\r\n\r\nIf you enable this setting, the OneDrive sync app can disable permission inheritance in read-only folders to improve sync speed.\r\n\r\nIf you disable or do not configure this setting, the OneDrive sync app will preserve permission inheritance in read-only folders. Sync speed may be significantly slower.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_permitdisablepermissioninheritance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_permitdisablepermissioninheritance_1","displayName":"Enabled","description":null,"helpText":null}]},"f4507d8176a94b75":{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices_approvedusbprintdevices_list","displayName":"vid/pid","description":"","helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"f422265bf2704fbe":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge Dev will only be deployed machine-wide.\r\n\r\nIf you set this policy to Force Installs (Machine-Wide), Microsoft Edge Dev may only be deployed machine-wide if Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge Dev may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"categoryId":"13f62499-a266-42c8-a4dc-531efcea55cb","categoryName":"Microsoft Edge Dev","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},"f4f0c34a68aa652e":{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel","displayName":"Target Channel (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_stable","displayName":"Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_beta","displayName":"Beta","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_dev","displayName":"Dev","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_extended","displayName":"Extended Stable","description":null,"helpText":null}]},"f49b2580abf23e56":{"id":"device_vendor_msft_policy_config_visualstudio~policy~visualstudio~copilotsettings_disablemcp","displayName":"Disable Model Context Protocol (MCP)","description":"If this setting is enabled, it will prevent your users from using MCP for GitHub Copilot. For more information, see: https://aka.ms/CopilotGroupPolicy","helpText":"","infoUrls":[],"categoryId":"652a676c-9d60-4c9a-88b6-823a24961a9b","categoryName":"Copilot Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudio~policy~visualstudio~copilotsettings_disablemcp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudio~policy~visualstudio~copilotsettings_disablemcp_1","displayName":"Enabled","description":null,"helpText":null}]},"f40ece44e8a64c80":{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopiconsui","displayName":"Prevent changing desktop icons (User)","description":"Prevents users from changing the desktop icons.\r\n\r\nBy default, users can use the Desktop Icon Settings dialog in the Personalization or Display Control Panel to show, hide, or change the desktop icons.\r\n\r\nIf you enable this setting, none of the desktop icons can be changed by the user.\r\n\r\nFor systems prior to Windows Vista, this setting also hides the Desktop tab in the Display Control Panel.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nodesktopiconsui"],"categoryId":"6424714c-e50a-4b53-acbf-8739825ebf0b","categoryName":"Personalization","options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopiconsui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopiconsui_1","displayName":"Enabled","description":null,"helpText":null}]},"f425c0ef44f097f4":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_npsui","displayName":"Network Policy Server (NPS) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-npsui"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_npsui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_npsui_1","displayName":"Enabled","description":null,"helpText":null}]},"f4eb90013436f39c":{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentdocsonexit","displayName":"Clear history of recently opened documents on exit (User)","description":"Clear history of recently opened documents on exit.\r\n\r\nIf you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Recent Items menu on the Start menu is always empty when the user logs on. In addition, recently and frequently used items in the Jump Lists off of programs in the Start Menu and Taskbar will be cleared when the user logs off.\r\n\r\nIf you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on, the Recent Items menu and the Jump Lists appear just as it did when the user logged off.\r\n\r\nNote: The system saves document shortcuts in the user profile in the System-drive\\Users\\User-name\\Recent folder.\r\n\r\nAlso, see the \"Remove Recent Items menu from Start Menu\" and \"Do not keep history of recently opened documents\" policies in this folder. The system only uses this setting when neither of these related settings are selected.\r\n\r\nThis setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the \"Do not keep history of recently opened documents\" setting.\r\n\r\nThis policy setting also does not hide document shortcuts displayed in the Open dialog box. See the \"Hide the dropdown list of recent files\" setting.\r\n\r\nThis policy also does not clear items that the user may have pinned to the Jump Lists, or Tasks that the application has provided for their menu. See the \"Do not allow pinning items in Jump Lists\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-clearrecentdocsonexit"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentdocsonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentdocsonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"f48c057c8c1efecf":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016uploadcenter","displayName":"Microsoft Office 2016 Upload Center (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 2016 Upload Center.\r\nBy default, the user settings of Microsoft Office 2016 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2016 Upload Center from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Office 2016 Upload Center user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Office 2016 Upload Center user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016uploadcenter"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016uploadcenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016uploadcenter_1","displayName":"Enabled","description":null,"helpText":null}]},"f41bc5f4a9fe78ff":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_donotuseproxylocal","displayName":"Do not use proxy server for addresses beginning with (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"f469f9d0d65f017c":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxyaddress","displayName":"Proxy address (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"f4a8f0726a6cb4fa":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation","displayName":"URLs/domains automatically permitted direct Security Key attestation (User)","description":"Setting the policy specifies URLs and domains for which no prompt appears when attestation certificates from Security Keys are requested. A signal is also sent to the Security Key indicating that individual attestation may be used. Without this, when sites request attestation of Security Keys, users are prompted in Google Chrome version 65 and later.\r\n\r\nURLs will only match as U2F appIDs. Domains only match as webauthn RP IDs. So to cover both U2F and webauthn APIs, list the appID URL and domain for a given site.\r\n\r\nExample value:\r\n\r\nhttps://example.com","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_1","displayName":"Enabled","description":null,"helpText":null}]},"f4abb0277c303390":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt","displayName":"Suppress the Google Chrome Frame turndown prompt (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt_1","displayName":"Enabled","description":null,"helpText":null}]},"f466c610ef20b353":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_homepagelocation","displayName":"Home page URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":null},"f4634fb49de7b150":{"id":"user_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites","displayName":"Intranet Sites: Include all sites that bypass the proxy server (User)","description":"This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.\n\nIf you enable this policy setting, sites which bypass the proxy server are mapped into the Intranet Zone.\n\nIf you disable this policy setting, sites which bypass the proxy server aren't necessarily mapped into the Intranet Zone (other rules might map one there).\n\nIf you do not configure this policy setting, users choose whether sites which bypass the proxy server are mapped into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includeallproxybypasssites"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_1","displayName":"Enabled","description":null,"helpText":null}]},"f46cef42943ee2f9":{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneinitializeandscriptactivexcontrols"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"f42b7082b824a9b5":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols","displayName":"Allow only approved domains to use ActiveX controls without prompt (User)","description":"This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.\n\nIf you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.\n\nIf you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"f41baea44a541184":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile","displayName":"Prioritize App specified profile to open external links (User)","description":"This policy controls whether the profile specified by an app (such as Microsoft Teams or Outlook) is given priority when opening external links, instead of the profile selected in the Default profile for external links setting.\r\n\r\nPolicy behavior:\r\n1. Enabled or not configured: The app-specified profile is prioritized for opening external links. This behavior overrides the profile selected in settings, and the behavior defined by the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies. If the app doesn't specify a profile, this policy has no effect.\r\n2. Disabled: The profile selected in settings—along with the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies—will be used to determine which profile opens external links.\r\n\r\nNOTE:\r\nThis policy doesn't override user-defined preferences set through Automatic profile switching, including the Custom site switch setting located within it. If a user has configured specific sites to open in designated profiles, those preferences take precedence.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"f430b6da4f1126ef":{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated","displayName":"Relaunch browser quickly when the current version is outdated (User)","description":"This policy specifies the minimum release age after which relaunch notifications become more aggressive. The release age is calculated from the time the currently running version was last served to clients.\r\n\r\nIf a browser relaunch is needed to finalize a pending update and the current version has been outdated for more than the number of days specified by this setting, the RelaunchNotificationPeriod policy is overridden to 2 hours. If the RelaunchNotification policy is set to 1 ('Required'), a browser relaunch will be forced at the end of the period.\r\n\r\nIf not set, or if the release age cannot be determined, the RelaunchNotificationPeriod policy will be used for all updates.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_1","displayName":"Enabled","description":null,"helpText":null}]},"f4147ef9c49e01aa":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls","displayName":"Manage exposure of local IP addressess by WebRTC (User)","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*contoso.com*\") for which local IP address should be exposed by WebRTC.\r\n\r\nIf you enable this policy and set a list of origins (URLs) or hostname patterns, when edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will expose the local IP address for cases that match patterns in the list.\r\n\r\nIf you disable or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will not expose local IP addresses. The local IP address is concealed with an mDNS hostname.\r\n\r\nIf you enable, disable, or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, WebRTC will expose local IP addresses.\r\n\r\nPlease note that this policy weakens the protection of local IP addresses that might be needed by administrators.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n*contoso.com*","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f4b957a507efd198":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_preventaccesstouserspecifiedservices","displayName":"Prevent users from adding online presentation services in PowerPoint and Word (User)","description":"This policy setting allows you to prevent users from adding new or previously created presentation services to the list of online presentation services in PowerPoint and Word. These services appear when a user selects the More services link under Present Online on the Share tab in Backstage view.\r\n\r\nIf you enable or do not configure this policy setting, the More services link does not allow users to add a new presentation service. In addition, all services previously added by users are removed from the list.\r\n\r\nIf you disable this policy setting, the More Services link provides an option for users to add a new presentation service. In addition, the list of services previously added by users appears in the list of services.","helpText":"","infoUrls":[],"categoryId":"5bf4c2ba-be08-4cda-bf33-d10707580d78","categoryName":"Present Online","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_preventaccesstouserspecifiedservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast_l_preventaccesstouserspecifiedservices_1","displayName":"Enabled","description":null,"helpText":null}]},"f4ed4c11c3d43dea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceotheradd","displayName":"Replace MAPI - Other Address (User)","description":"\r\n\r\nIf you enable this policy setting, you can remove or change the default value \"other address\".\r\n\r\nIt is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. \r\n\r\nIf you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored.\r\n\r\nFor example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286.\r\n\r\nYou would enter: \r\n976224286.\r\n\r\nTo remove the value entirely you would enter null.\r\n\r\nNote that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes.\r\n\r\nRelated policy settings: \r\nReplace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.\r\n\r\nIf you disable or do not configure this policy setting, the default value of \"other address\" is shown.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceotheradd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceotheradd_1","displayName":"Enabled","description":null,"helpText":null}]},"f464b25591313bf1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tatar","displayName":"Tatar (User)","description":"Enables the editing language Tatar","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tatar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_tatar_1","displayName":"Enabled","description":null,"helpText":null}]},"f40833fade3cef09":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_checkthexadesportionsofadigitalsignature","displayName":"Check the XAdES portions of a digital signature (User)","description":"This policy setting lets you specify whether or not Office 2016 checks the XAdES portions of a digital signature, if present, when validating a digital signature for a document. \r\n\r\nIf you enable this policy setting, Office 2016 checks the XAdES portions of a digital signature when validating it.\r\n\r\nIf you disable or do not configure this policy setting, Office 2016 only validates XML-DSig and XAdES-BES portions of a digital signature.","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_checkthexadesportionsofadigitalsignature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_checkthexadesportionsofadigitalsignature_1","displayName":"Enabled","description":null,"helpText":null}]},"f49a1857f092d005":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc10","displayName":"Unsafe Location #10 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc10_1","displayName":"Enabled","description":null,"helpText":null}]},"f4cd3a44500158ba":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_endearlyshort_l_endearlyshortspinid","displayName":"Minutes to reduce meetings by: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":null},"f41bdee71fce1574":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_allowuserscommentstobemarked","displayName":"Allow user's comments to be marked (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","categoryName":"E-mail Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_allowuserscommentstobemarked_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions_l_onrepliesandforwards_l_allowuserscommentstobemarked_1","displayName":"True","description":null,"helpText":null}]},"f44d9d007cc183b0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags","displayName":"Select a combination of RPC/HTTP connection flags (see Explain tab for details): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags_0","displayName":"No Flags","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags_47","displayName":"Flags: 1 + 2 + 3 + 4 + 5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags_39","displayName":"Flags: 1 + 2 + 3 + 5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags_43","displayName":"Flags: 1 + 2 + 4 + 5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags_35","displayName":"Flags: 1 + 2 + 5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags_41","displayName":"Flags: 1 + 4 + 5","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpchttpconnectionflags_l_selectrpchttpconnectionflags_33","displayName":"Flags: 1 + 5","description":null,"helpText":null}]},"f45926912aa67a4e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":null},"f4b72b3c27a4ee03":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders27","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders27_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders27_1","displayName":"True","description":null,"helpText":null}]},"f42a400a58b2e4b4":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears","displayName":"Years (User)","description":"Sets the label for years.\r\n \r\nIf you enable this setting, years are displayed with the specified label.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"06c4a76a-805b-4370-9d80-08e720ab2305","categoryName":"View options for time units in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjviewoptions_l_pjyears_1","displayName":"Enabled","description":null,"helpText":null}]},"f464dda88e4d1e9d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07","displayName":"Trusted Location #7 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc07_1","displayName":"Enabled","description":null,"helpText":null}]},"f44205469b73a753":{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text","displayName":"Restrict clipboard transfer from server to client: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_0","displayName":"Disable clipboard transfers from server to client","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_1","displayName":"Allow plain text","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_2","displayName":"Allow plain text and images","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_3","displayName":"Allow plain text, images and Rich Text Format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_4","displayName":"Allow plain text, images, Rich Text Format and HTML","description":null,"helpText":null}]},"f4c2b66e9d1fd794":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrowd","displayName":"View tab | Macros | Macros (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrowd_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrowd_1","displayName":"True","description":null,"helpText":null}]},"f4647b15019a4291":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_wraptowindow","displayName":"Show text wrapped within the document window (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_wraptowindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_wraptowindow_1","displayName":"Enabled","description":null,"helpText":null}]},"f47b1e1428e4e11e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles","displayName":"RTF files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Word files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.\r\n","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_1","displayName":"Enabled","description":null,"helpText":null}]},"f4e23f5e0d5e185e":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_remoteportranges","displayName":"Remote Port Ranges","description":"List of remote port ranges. Valid values include:​\r\n\r\nA valid port number between 0 and 65535. For example, 200\r\nA port range in the format of \"start port – end port\" with no spaces included, where the start port is less than the end port. For example, 300-320\r\n\r\nIf not specified, the default is \"All ports.\" When defining multiple local and remote port ranges, the Firewall rule will be evaluated as OR operations within an individual field, and AND operations across rule fields. i.e. (local port A OR local port B) AND (remote port A OR remote port B). When setting this field in a firewall rule, the protocol field must also be set, to either 6 (TCP) or 17 (UDP).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/f5.json b/public/intune-definitions/f5.json new file mode 100644 index 000000000000..c324c62480c0 --- /dev/null +++ b/public/intune-definitions/f5.json @@ -0,0 +1 @@ +{"f56a8896c372920c":{"id":"audioaccessory_temporarypairing_configuration","displayName":"Configuration","description":"A dictionary providing configuration for temporary pairing. Required if `Disabled` isn't present or is `false`.","helpText":null,"infoUrls":[],"categoryId":"a42e2248-d2dc-4476-a92d-d152fd67e04b","categoryName":"Audio Accessory","options":null},"f54d1ac9af513935":{"id":"com.apple.managedclient.preferences_defaultwebhidguardsetting","displayName":"Control use of the WebHID API","description":"Setting the policy to 3 lets websites ask for access to HID devices. Setting the policy to 2 denies access to HID devices.\n\nLeaving it unset lets websites ask for access, but users can change this setting.\n\nThis policy can be overridden for specific url patterns using the \"WebHidAskForUrls\" and \"WebHidBlockedForUrls\" policies.\n\nPolicy options mapping:\n\n* BlockWebHid (2) = Do not allow any site to request access to HID devices via the WebHID API\n\n* AskWebHid (3) = Allow sites to ask the user to grant access to a HID device\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultwebhidguardsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultwebhidguardsetting_0","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultwebhidguardsetting_1","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},"f51ea16c707c1581":{"id":"com.apple.managedclient.preferences_enabled","displayName":"Enable / disable cloud delivered protection","description":"Whether cloud delivered protection is enabled on the device or not. To improve the security of your services, we recommend keeping this feature turned on.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#enable--disable-cloud-delivered-protection"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":[{"id":"com.apple.managedclient.preferences_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f5e23947cdbe217b":{"id":"com.apple.managedclient.preferences_localnetworkaccessblockedforurls","displayName":"Block sites from making requests to local network endpoints.","description":"List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.\n\nIf an origin is covered by both this policy and by \"LocalNetworkAccessAllowedForUrls\", this policy takes precedence.\n\nDepending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.\n\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\n\nFor detailed information on valid URL patterns, please see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\n\nNote: This policy improves local network security by blocking specified public websites from accessing private IP addresses. It helps prevent unauthorized external sites from reaching internal resources unless explicitly permitted. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#localnetworkaccessblockedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f5ba32f20670f8fe":{"id":"com.apple.mcx_com.apple.energysaver.portable.batterypower","displayName":"Laptop Battery Power","description":"The settings for a laptop computer using battery power.","helpText":null,"infoUrls":[],"categoryId":"8c75a12d-664d-43ba-a3aa-5259425f9b37","categoryName":"Energy Saver","options":null},"f511969decd94999":{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefaultcredentials","displayName":"Allow delegating default credentials","description":"This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection).\r\n\r\nThis policy setting applies when server authentication was achieved by using a trusted X509 certificate or Kerberos.\r\n\r\nIf you enable this policy setting, you can specify the servers to which the user's default credentials can be delegated (default credentials are those that you use when first logging on to Windows).\r\n\r\nThe policy becomes effective the next time the user signs on to a computer running Windows.\r\n\r\nIf you disable or do not configure (by default) this policy setting, delegation of default credentials is not permitted to any computer. Applications depending upon this delegation behavior might fail authentication. For more information, see KB.\r\n\r\nFWlink for KB:\r\nhttp://go.microsoft.com/fwlink/?LinkId=301508\r\n\r\nNote: The \"Allow delegating default credentials\" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN.\r\n\r\nFor Example:\r\nTERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine\r\nTERMSRV/* Remote Desktop Session Host running on all machines.\r\nTERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-credssp#admx-credssp-allowdefaultcredentials"],"categoryId":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","categoryName":"Credentials Delegation","options":[{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefaultcredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_credssp_allowdefaultcredentials_1","displayName":"Enabled","description":null,"helpText":null}]},"f529a835f7332b7f":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_1_channel_logfilepath","displayName":"Log File Path","description":null,"helpText":"","infoUrls":[],"categoryId":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","categoryName":"Application","options":null},"f54a6ca8c5707866":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrate_gprefreshrate1","displayName":"Minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":null},"f5137c177e1e1f95":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_threats_threatiddefaultaction_threats_threatiddefaultactionlist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"categoryId":"2c43699e-90b5-4da6-9689-fe5ad3b25ac9","categoryName":"Threats","options":null},"f522d0442d312b6a":{"id":"device_vendor_msft_policy_config_admx_power_accriticalsleeptransitionsdisable_2","displayName":"Turn on the ability for applications to prevent sleep transitions (plugged in)","description":"This policy setting allows you to turn on the ability for applications and services to prevent the system from sleeping.\r\n\r\nIf you enable this policy setting, an application or service may prevent the system from sleeping (Hybrid Sleep, Stand By, or Hibernate).\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-accriticalsleeptransitionsdisable-2"],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_accriticalsleeptransitionsdisable_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_accriticalsleeptransitionsdisable_2_1","displayName":"Enabled","description":null,"helpText":null}]},"f56afe1796b04807":{"id":"device_vendor_msft_policy_config_admx_scripts_run_startup_script_visible","displayName":"Display instructions in startup scripts as they run","description":"This policy setting displays the instructions in startup scripts as they run.\r\n\r\nStartup scripts are batch files of instructions that run before the user is invited to log on. By default, the system does not display the instructions in the startup script.\r\n\r\nIf you enable this policy setting, the system displays each instruction in the startup script as it runs. Instructions appear in a command window. This policy setting is designed for advanced users.\r\n\r\nIf you disable or do not configure this policy setting, the instructions are suppressed.\r\n\r\nNote: Starting with Windows Vista operating system, scripts that are configured to run asynchronously are no longer visible on startup, whether this policy setting is enabled or not.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-startup-script-visible"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"device_vendor_msft_policy_config_admx_scripts_run_startup_script_visible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_scripts_run_startup_script_visible_1","displayName":"Enabled","description":null,"helpText":null}]},"f5e20985d5e9d9b5":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2","displayName":"Set time limit for active but idle Remote Desktop Services sessions","description":"This policy setting allows you to specify the maximum amount of time that an active Remote Desktop Services session can be idle (without user input) before it is automatically disconnected.\r\n\r\nIf you enable this policy setting, you must select the desired time limit in the Idle session limit list. Remote Desktop Services will automatically disconnect active but idle sessions after the specified amount of time. The user receives a warning two minutes before the session disconnects, which allows the user to press a key or move the mouse to keep the session active. If you have a console session, idle session time limits do not apply.\r\n\r\nIf you disable or do not configure this policy setting, the time limit is not specified at the Group Policy level. By default, Remote Desktop Services allows sessions to remain active but idle for an unlimited amount of time. \r\n\r\nIf you want Remote Desktop Services to end instead of disconnect a session when the time limit is reached, you can configure the policy setting Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Session Time Limits\\End session when time limits are reached.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sessions-idle-limit-2"],"categoryId":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","categoryName":"Session Time Limits","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_2_1","displayName":"Enabled","description":null,"helpText":null}]},"f507e6e45ec5b84e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver","description":"The URI template of the desired DNS-over-HTTPS resolver. To specify multiple DNS-over-HTTPS resolvers, separate the corresponding URI templates with spaces.\r\n\r\nIf the DnsOverHttpsMode is set to \"secure\" then this policy must be set and not empty.\r\n\r\nIf the DnsOverHttpsMode is set to \"automatic\" and this policy is set then the URI templates specified will be used; if this policy is unset then hardcoded mappings will be used to attempt to upgrade the user's current DNS resolver to a DoH resolver operated by the same provider.\r\n\r\nIf the URI template contains a dns variable, requests to the resolver will use GET; otherwise requests will use POST.\r\n\r\nIncorrectly formatted templates will be ignored.\r\n\r\nExample value: https://dns.example.net/dns-query{?dns}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"f55dc6ceae40718e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"f59f67b7d1bcc421":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist","displayName":"Websites to open in alternative browser","description":"Setting the policy controls the list of websites to open in an alternative browser. Each item is treated as a rule for something to open in an alternative browser. Google Chrome uses those rules when choosing if a URL should open in an alternative browser. When the Internet Explorer® add-in is on, Internet Explorer® switches back to Google Chrome when the rules don't match. If rules contradict each other, Google Chrome uses the most specific rule.\r\n\r\nLeaving the policy unset adds no websites to the list.\r\n\r\nNote: Elements can also be added to this list through the BrowserSwitcherUseIeSitelist and BrowserSwitcherExternalSitelistUrl policies.\r\n\r\nExample value:\r\n\r\nie.com\r\n!open-in-chrome.ie.com\r\nfoobar.com/ie-only/","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_1","displayName":"Enabled","description":null,"helpText":null}]},"f5a56ed5cf8470d1":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload","displayName":"Allows a page to show popups during its unloading","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload_1","displayName":"Enabled","description":null,"helpText":null}]},"f5b5d21f185cda0a":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting","displayName":"Default Window Placement permission setting","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"f5ad4ca2b4651b0e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices","displayName":"Services","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the FSLogix services.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Service\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices_1","displayName":"Enabled","description":null,"helpText":null}]},"f53fa22a9f8ee9ba":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_odfcvolumewaittimemilliseconds","displayName":"Volume Wait Time (milliseconds) (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","categoryName":"ODFC Containers","options":null},"f5739c2f11a2faaf":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nThis setting specifies the number of healthy CCD Locations required for a user to sign out. The default setting is 1, meaning that at least one remote CCD Location is required for the user to sign out.\r\n\r\nIf the number of available CCD Locations, when a user attempts to sign out, is less than the number set for Healthy Providers Required For Unregister, the user's sign out will be prevented for the time specified in CCD Unregister Timeout.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\HealthyProvidersRequiredForUnregister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_1","displayName":"Enabled","description":null,"helpText":null}]},"f5f2a655ab18d950":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern","displayName":"VHD Name Pattern","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies a string pattern used when creating a users Profile container. Use this setting to define how FSLogix will attempt to create a users Profile container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to create.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNameMatch value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDNamePattern\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_1","displayName":"Enabled","description":null,"helpText":null}]},"f5a745ba2d374d9f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls","displayName":"Disable Certificate Transparency enforcement for specific URLs","description":"Disables enforcing Certificate Transparency requirements for the listed URLs.\r\n\r\nThis policy lets you not disclose certificates for the hostnames in the specified URLs via Certificate Transparency. This lets you use certificates that would otherwise be untrusted, because they weren't properly publicly disclosed, but it makes it harder to detect mis-issued certificates for those hosts.\r\n\r\nForm your URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322. Because certificates are valid for a given hostname, independent of the scheme, port, or path, only the hostname part of the URL is considered. Wildcard hosts are not supported.\r\n\r\nIf you don't configure this policy, any certificate that should be disclosed via Certificate Transparency is treated as untrusted if it's not disclosed.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\n.contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f5f7683fd564290a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy","displayName":"Maximum number of concurrent connections to the proxy server","description":"Specifies the maximum number of simultaneous connections to the proxy server.\r\n\r\nSome proxy servers can't handle a high number of concurrent connections per client - you can solve this by setting this policy to a lower value.\r\n\r\nThe value of this policy should be lower than 100 and higher than 6. The default value is 32.\r\n\r\nSome web apps are known to consume many connections with hanging GETs - lowering the maximum connections below 32 may lead to browser networking hangs if too many of these kind of web apps are open.\r\n\r\nIf you don't configure this policy, the default value (32) is used.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_1","displayName":"Enabled","description":null,"helpText":null}]},"f5ee5f1f4bc3a2aa":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting","description":"Setting this policy controls the default behavior for the local fonts permission.\n\nIf you set the policy to BlockLocalFonts (value 2), access to local fonts is denied by default. Sites are prevented from accessing information about local fonts.\n\nIf you set the policy to AskLocalFonts (value 3), users are prompted when a site requests access to local fonts. If permission is granted, the site can access information about local fonts.\n\nIf a site is included in 'LocalFontsAllowedForUrls' (Allow Local Fonts permission on these sites) or 'LocalFontsBlockedForUrls' (Block Local Fonts permission on these sites), then that setting overrides the value set for this policy.\n\nIf you don't configure this policy, users are prompted by default and can change this setting.\n\nPolicy options mapping:\n\n* BlockLocalFonts (2) = Denies the Local Fonts permission on all sites by default\n\n* AskLocalFonts (3) = Ask every time a site wants to obtain the Local Fonts permission\n\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultlocalfontssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"f51312778989f922":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null}]},"f52caad645d328b7":{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed","displayName":"Out-of-process print drivers allowed","description":"This policy determines whether Microsoft Edge handles interactions with printer drivers through a separate service process.\r\n\r\nUsing a service process for tasks like querying available printers, retrieving print driver settings, and submitting documents to local printers improves browser stability and prevents UI freezing during Print Preview.\r\n\r\nEnabled or Not Set: Microsoft Edge will use a separate service process for these printing tasks.\r\n\r\nDisabled: Microsoft Edge will perform these printing tasks within the browser process.\r\n\r\nNote: This policy will be deprecated in the future once the transition to out-of-process print drivers is fully implemented.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"f51f820686c542ac":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing_l_empty196","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","categoryName":"Miscellaneous","options":null},"f53e959a88b82281":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mse7exe55","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mse7exe55_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mse7exe55_1","displayName":"True","description":null,"helpText":null}]},"f5a8786a344eb4c1":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_outlookexe120","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_outlookexe120_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_outlookexe120_1","displayName":"True","description":null,"helpText":null}]},"f5832accdc1a1845":{"id":"device_vendor_msft_policy_config_privacy_allowcrossdeviceclipboard","displayName":"Allow Cross Device Clipboard","description":"Allows syncing of Clipboard across devices under the same Microsoft account.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#allowcrossdeviceclipboard"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_allowcrossdeviceclipboard_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_allowcrossdeviceclipboard_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"f5c9b4c6050ec456":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_forcedenytheseapps","displayName":"Let Apps Access Contacts Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"f5f9f5781e813097":{"id":"device_vendor_msft_policy_config_settings_pagevisibilitylist","displayName":"Page Visibility List","description":"Allows IT Admins to either prevent specific pages in the System Settings app from being visible or accessible, or to do so for all pages except those specified. The mode will be specified by the policy string beginning with either the string showonly: or hide:.  Pages are identified by a shortened version of their already published URIs, which is the URI minus the ms-settings: prefix. For example, if the URI for a settings page is ms-settings:bluetooth, the page identifier used in the policy will be just bluetooth. Multiple page identifiers are separated by semicolons. The following example illustrates a policy that would allow access only to the about and bluetooth pages, which have URI ms-settings:about and ms-settings:bluetooth respectively:showonly:about;bluetooth. If the policy is not specified, the behavior will be that no pages are affected. If the policy string is formatted incorrectly, it will be ignored entirely (i. e. treated as not set) to prevent the machine from becoming unserviceable if data corruption occurs. Note that if a page is already hidden for another reason, then it will remain hidden even if it is in a showonly: list. The format of the PageVisibilityList value is as follows: The value is a unicode string up to 10,000 characters long, which will be used without case sensitivity. There are two variants: one that shows only the given pages and one which hides the given pages. The first variant starts with the string showonly: and the second with the string hide:. Following the variant identifier is a semicolon-delimited list of page identifiers, which must not have any extra whitespace. Each page identifier is the ms-settings:xyz URI for the page, minus the ms-settings: prefix, so the identifier for the page with URI ms-settings:network-wifi would be just network-wifi. The default value for this setting is an empty string, which is interpreted as show everything. Example 1, specifies that only the wifi and bluetooth pages should be shown (they have URIs ms-settings:network-wifi and ms-settings:bluetooth). All other pages (and the categories they're in) will be hidden:showonly:network-wifi;bluetooth. Example 2, specifies that the wifi page should not be shown:hide:network-wifi","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#pagevisibilitylist"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":null},"f5e044aed92aadb0":{"id":"device_vendor_msft_policy_config_start_simplifyquicksettings","displayName":"Simplify Quick Settings","description":"Allows admin to control the Quick Settings layout. If enabled, fewer Quick Settings buttons will be shown (only WiFi, Bluetooth, VPN, and Accessibility). If disabled or not configured, the regular Quick Settings layout will be loaded.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#simplifyquicksettings"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_simplifyquicksettings_0","displayName":"Load regular Quick Settings layout.","description":"Load regular Quick Settings layout.","helpText":null},{"id":"device_vendor_msft_policy_config_start_simplifyquicksettings_1","displayName":"Load simplified Quick Settings layout.","description":"Load simplified Quick Settings layout.","helpText":null}]},"f5709cacaa59faa4":{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_direct","displayName":"Enable RDP Shortpath for managed network using NAT traversal","description":"This policy lets you control RDP Shortpath for managed networks. It's a direct UDP connection between a client device and session host using a private connection, such as ExpressRoute private peering or a virtual private network (VPN). When the RDP Shortpath listener isn't enabled on session hosts and an inbound port isn't allowed, ICE/STUN is used to discover available IP addresses and a dynamic port that can be used for a connection. \r\n \r\nIf you enable or do not configure the policy this policy setting, Remote Desktop Protocol will consider managed networks paths to establish connection with the session host. \r\n \r\nIf you disable this policy, Remote Desktop Protocol will NOT consider managed networks path to establish connection with the session host.\r\n ","helpText":"","infoUrls":[],"categoryId":"5d4e843b-2848-4508-9143-cb3217c2fe83","categoryName":"RDP Shortpath","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_direct_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_direct_1","displayName":"Enabled","description":null,"helpText":null}]},"f5986fbdae9e312d":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesoptout","displayName":"Opt out of administrator updates","description":"Indicates that the user does not want to receive administrator updates to Visual Studio. \r\n \r\nIf set to 1 (enabled) then the Visual Studio user does not want to receive administrator updates to Visual Studio. This policy is for the developer user to set if they have admin permissions on the client machine. \r\n \r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesoptout_1","displayName":"Enabled","description":null,"helpText":null}]},"f5940b579bf50598":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_descriptioncolon61","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"f5af7471f3fc1151":{"id":"user_vendor_msft_policy_config_admx_programs_nodefaultprograms","displayName":"Hide \"Set Program Access and Computer Defaults\" page (User)","description":"This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users cannot view or change the associated page.\r\n\r\nThe Set Program Access and Computer Defaults page allows administrators to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as specify the programs that are accessible from the Start menu, desktop, and other locations.\r\n\r\nIf this setting is disabled or not configured, the Set Program Access and Defaults button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to change program access or defaults.\r\n\r\nThis setting does not prevent the Default Programs icon from appearing on the Start menu.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-nodefaultprograms"],"categoryId":"dc16dbf0-aac8-4ff3-a546-1ddb55650f47","categoryName":"Programs","options":[{"id":"user_vendor_msft_policy_config_admx_programs_nodefaultprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_nodefaultprograms_1","displayName":"Enabled","description":null,"helpText":null}]},"f577665307193b74":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_finance","displayName":"Finance (User)","description":"This policy setting configures the synchronization of user settings for the Finance app.\r\nBy default, the user settings of Finance sync between computers. Use the policy setting to prevent the user settings of Finance from synchronizing between computers.\r\nIf you enable this policy setting, Finance user settings continue to sync.\r\nIf you disable this policy setting, Finance user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-finance"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_finance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_finance_1","displayName":"Enabled","description":null,"helpText":null}]},"f50d36d257773e86":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-internet"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet_1","displayName":"Enabled","description":null,"helpText":null}]},"f522e49e7e3417e9":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-localmachine"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine_1","displayName":"Enabled","description":null,"helpText":null}]},"f56df653cdc9702e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites_1","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites_2","displayName":"Do not allow ads on sites with intrusive ads","description":null,"helpText":null}]},"f52e0df125c3b2e5":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_webrtclocalipsallowedurlsdesc","displayName":"URLs for which local IPs are exposed in WebRTC ICE candidates (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"f55c8db94dfba0f6":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades (User)","description":"Google Chrome attempts to upgrade some\r\nnavigations from HTTP to HTTPS, when possible. This policy can be used to\r\ndisable this behavior. If set to \"true\" or left unset, this feature will be\r\nenabled by default.\r\n\r\nThe separate HttpAllowlist policy\r\ncan be used to exempt specific hostnames or hostname patterns from being\r\nupgraded to HTTPS by this feature.\r\n\r\nSee also the HttpsOnlyMode policy.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f548afdcba2be6f7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey","displayName":"Microsoft Excel menu or Help key (User)","description":"This policy setting allows you to set the ASCII value for the key of choice (e.g. '/'=47).","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey_1","displayName":"Enabled","description":null,"helpText":null}]},"f50ec272e0a1edc7":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f57bd6220c2101e0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_datecolon38","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f5f304c1e72a9873":{"id":"user_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_enterreportbackprompt","displayName":"Type the location (URL) of where to receive reports about the websites for which users turn on and use Enterprise Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":null},"f51f774cc13210b8":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols","displayName":"Allow only approved domains to use ActiveX controls without prompt (User)","description":"This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.\n\nIf you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.\n\nIf you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowonlyapproveddomainstouseactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"f551ee5820330a82":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions","displayName":"Java permissions (User)","description":"This policy setting allows you to manage permissions for Java applets.\n\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\n\nLow Safety enables applets to perform all operations.\n\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\n\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\n\nIf you disable this policy setting, Java applets cannot run.\n\nIf you do not configure this policy setting, the permission is set to Medium Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonejavapermissions"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},"f550a0851e5786ee":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads","displayName":"Allow font downloads (User)","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\n\nIf you disable this policy setting, HTML fonts are prevented from downloading.\n\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowfontdownloads"],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"f53bec12f1bcb529":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability","displayName":"Configure InPrivate mode availability (User)","description":"Specifies whether the user can open pages in InPrivate mode in Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Enabled' (0), users can open pages in InPrivate mode.\r\n\r\nSet this policy to 'Disable' (1) to stop users from using InPrivate mode.\r\n\r\nSet this policy to 'Forced' (2) to always use InPrivate mode.\r\n\r\n* 0 = InPrivate mode available\r\n\r\n* 1 = InPrivate mode disabled\r\n\r\n* 2 = InPrivate mode forced","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"f57750a5059471a8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls","displayName":"Block JavaScript on specific sites (User)","description":"Define a list of sites, based on URL patterns, that aren't allowed to run JavaScript.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultJavaScriptSetting' (Default JavaScript setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f579d6e3575cec3f":{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls","displayName":"Allow idle detection on these sites (User)","description":"Allows you to specify a list of URL patterns for sites that are allowed to use the Idle Detection API.\r\n\r\nIf you do not configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.\r\n\r\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported. For detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=209532.\r\n\r\nURL patterns specified in the blocklist take precedence over this allowlist. This allowlist takes precedence over the DefaultIdleDetectionSetting policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f5f64ff67a64f53b":{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action to take on Microsoft Edge startup (User)","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'RestoreOnStartupIsNewTabPage'.\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'RestoreOnStartupIsLastSession'. The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'RestoreOnStartupIsURLs'.\r\n\r\nStarting in Microsoft Edge version 125, if you want to reopen URLs that were open the last time Microsoft Edge closed and open a specific set of URLs, choose 'RestoreOnStartupIsLastSessionAndURLs'.\r\n\r\nDisabling this setting is the same as leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is only available on instances that are managed via MDM or joined to a domain via MCX.\r\n\r\nPolicy options mapping:\r\n\r\n* RestoreOnStartupIsNewTabPage (5) = Open a new tab\r\n\r\n* RestoreOnStartupIsLastSession (1) = Restore the last session\r\n\r\n* RestoreOnStartupIsURLs (4) = Open a list of URLs\r\n\r\n* RestoreOnStartupIsLastSessionAndURLs (6) = Open a list of URLs and restore the last session\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f52c108d6f227469":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended","displayName":"Configure the Microsoft Edge new tab page experience (User)","description":"Lets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\r\n\r\nWhen you set this policy to Microsoft News feed experience (0), users will see the Microsoft News feed experience on the new tab page.\r\n\r\nWhen you set this policy to Office 365 feed experience (1), users with an Azure Active Directory browser sign-in will see the Office 365 feed experience on the new tab page.\r\n\r\nIf you disable or don't configure this policy:\r\n\r\n- Users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, as well as the standard new tab page feed experience.\r\n\r\n- Users without an Azure Active Directory browser sign-in will see the standard new tab page experience.\r\n\r\nIf you configure this policy *and* the 'NewTabPageLocation' (Configure the new tab page URL) policy, 'NewTabPageLocation' has precedence.\r\n\r\nDefault setting: Disabled or not configured.\r\n\r\n* 0 = Microsoft News feed experience\r\n\r\n* 1 = Office 365 feed experience","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f5b78019cee4e65f":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype","displayName":"New tab page experience (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype_0","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype_1","displayName":"Office 365 feed experience","description":null,"helpText":null}]},"f5718871b529858d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice06_l_broadcastserviceservername6","displayName":"Name: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":null},"f54dd18740cde808":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_businessdata~l_synchronization_l_retryintervallimit_l_retryintervallimitdecimal","displayName":"Maximum retry interval (minutes) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","categoryName":"Synchronization","options":null},"f5fa20cda9bff926":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceprofile","displayName":"Replace AD - Profile (User)","description":"This policy setting allows you to customize the 10th value of the Contact Tab.\r\n\r\nIf you enable this policy setting, you can change or remove the default value - \"profile\" of line 10.\r\n\r\nIf you disable or do not configure this policy setting, the default value for line 10 is displayed.\r\n\r\nImportant:\r\nIt is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored.\r\n\r\nExample:\r\nTo display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name.\r\n\r\nTo remove the value, enter: null.\r\n\r\nNote: \r\nThe Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. \r\n\r\nRelated policy settings: \r\nReplace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"f5599e0a1e0b7024":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9","displayName":"Workflow Cache 9 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache9_1","displayName":"Enabled","description":null,"helpText":null}]},"f5d11e8e6efd969d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc08","displayName":"Unsafe Location #8 (User)","description":"This policy setting allows you to specify a location containing files that should always open in Protected View.\r\n\r\nIf you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the \"Allow sub folders\" option, sub folders will also be included.\r\n\r\nIf you disable or do not configure this policy setting, only the \"Downloaded Program Files\" and \"Temporary Internet Files\" folders will be considered unsafe locations.","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc08_1","displayName":"Enabled","description":null,"helpText":null}]},"f5268aea72051141":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity_l_setsensitivity","displayName":"Set sensitivity: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity_l_setsensitivity_0","displayName":"Normal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity_l_setsensitivity_1","displayName":"Personal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity_l_setsensitivity_2","displayName":"Private","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_setsensitivity_l_setsensitivity_3","displayName":"Confidential","description":null,"helpText":null}]},"f52a0907407f1e72":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_msgunicodeformatwhendraggingtofilesystem","displayName":"Use Unicode format when dragging e-mail message to file system (User) (Deprecated)","description":"This policy setting controls whether e-mail messages dragged from Outlook to the file system are saved in Unicode or ANSI format. \r\n\r\nIf you enable or do not configure this policy setting, when users drag an e-mail message from Outlook to the file system, Outlook uses the Unicode character encoding standard to create the message file, which preserves special characters in the message. \r\n\r\nIf you disable this policy setting, when users drag an e-mail message from Outlook to the file system, the message file created is in ANSI format.","helpText":"","infoUrls":[],"categoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_msgunicodeformatwhendraggingtofilesystem_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced_l_msgunicodeformatwhendraggingtofilesystem_1","displayName":"Enabled","description":null,"helpText":null}]},"f5ac35d0d2ad4145":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize80_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"28ab8eed-623a-4e9b-813e-13256472dbaf","categoryName":"Customizable Error Messages","options":null},"f59d37367a13e28e":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditorppt","displayName":"Alt+F11 (Developer | Code | Visual Basic) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditorppt_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditorppt_1","displayName":"True","description":null,"helpText":null}]},"f57982f2080ded11":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1","displayName":"Enabled","description":null,"helpText":null}]},"f5dc6a42b3f76fe3":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04","displayName":"Trusted Location #4 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_1","displayName":"Enabled","description":null,"helpText":null}]},"f5fcafc18c7ca186":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_pathcolon84","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/f6.json b/public/intune-definitions/f6.json new file mode 100644 index 000000000000..b503c0b776cf --- /dev/null +++ b/public/intune-definitions/f6.json @@ -0,0 +1 @@ +{"f6559c9f7d445924":{"id":"com.apple.applicationaccess_allowchat","displayName":"Allow Chat","description":"If false, disables the use of the iMessage with supervised devices. If the device supports text messaging, the user can still send and receive text messages. Requires a supervised device. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowchat_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowchat_true","displayName":"True","description":null,"helpText":null}]},"f6a173539b94d347":{"id":"com.apple.cellularprivatenetwork.managed_geofences","displayName":"Geofences","description":"A list of up to 1000 geofences for private networks. Geofencing is only used on iPhone.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":null},"f640b847d76c6dbe":{"id":"com.apple.dock_show-process-indicators","displayName":"Show Process Indicators","description":"If true, shows the process indicator.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_show-process-indicators_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_show-process-indicators_true","displayName":"True","description":null,"helpText":null}]},"f68b7c22fc37af61":{"id":"com.apple.extensiblesso_extensiondata_usesiteautodiscovery_kerberos","displayName":"Use Site Auto Discovery","description":"If false, the Kerberos extension doesn't automatically use LDAP and DNS to determine its AD site name.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":[{"id":"com.apple.extensiblesso_extensiondata_usesiteautodiscovery_kerberos_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.extensiblesso_extensiondata_usesiteautodiscovery_kerberos_true","displayName":"True","description":null,"helpText":null}]},"f6cf8123536ecfa8":{"id":"com.apple.managedclient.preferences_defaultsearchproviderkeyword","displayName":"Default search provider keyword","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\n\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\n\nThis policy is applied only if you enable the \"DefaultSearchProviderEnabled\" and \"DefaultSearchProviderSearchURL\" policies.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchproviderkeyword"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f6d496c229dac703":{"id":"com.apple.managedclient.preferences_offlinedefinitionupdateurl","displayName":"URL for a security intelligence updates mirror server","description":"Sets the URL for a local offline security intelligence updates mirror server. When the feature is enabled Defender will use it to update the signatures.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/mac-support-offline-security-intelligence-update#configure-the-endpoints"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"f651c0a0808d9247":{"id":"com.apple.managedclient.preferences_typosquattingallowlistdomains","displayName":"Configure the list of domains for which Edge Website Typo Protection won't trigger warnings","description":"Configure the list of Edge Website Typo Protection trusted domains. This means:\nEdge Website Typo Protection won't check for potentially malicious typosquatting websites.\n\nIf you enable this policy, Edge Website Typo Protection trusts these domains.\nIf you disable or don't set this policy, default Edge Website Typo Protection protection is applied to all resources.\n\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10/11 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender for Endpoint. You must configure your allow and block lists in Microsoft 365 Defender portal using Indicators (Settings > Endpoints > Indicators).","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#typosquattingallowlistdomains"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f6fbce66ec414f11":{"id":"com.apple.managedclient.preferences_updateroptimization","displayName":"Updater optimization technique","description":"By default AutoUpdate will optimize for smaller packages on the network. However, this can cause larger CPU overheads when security agents (e.g. CrowdStrike) are installed. Alternatively, you can choose to lower the CPU overheads to process updates but accept larger download packages","helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_updateroptimization_0","displayName":"Lower network overhead","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_updateroptimization_1","displayName":"Lower processor overhead","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_updateroptimization_2","displayName":"Always use full updates","description":null,"helpText":null}]},"f640413e98f73922":{"id":"com.apple.mcxmenuextras_script menu.menu","displayName":"Script Menu","description":"If true, enables the Script menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_script menu.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_script menu.menu_true","displayName":"True","description":null,"helpText":null}]},"f654c1ccbb0cabd5":{"id":"com.apple.tcc.configuration-profile-policy_services_reminders","displayName":"Reminders","description":"Specifies the policies for reminders information managed by the Reminders app.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"f688233a3f808024":{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfsecuremode","displayName":"Secure mode and Certificate-based Digital Signature validation in native PDF reader","description":"The policy enables Digital Signature validation for PDF files in a secure environment, which shows the correct validation status of the signatures.\n\nIf you enable this policy, PDF files with Certificate-based digital signatures are opened with an option to view and verify the validity of the signatures with high security.\n\nIf you disable or don't configure this policy, the capability to view and verify the signature isn't available.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfsecuremode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.pdfsecuremode_true","displayName":"Enabled","description":null,"helpText":null}]},"f6f229113fab7825":{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxysettings","displayName":"Proxy settings","description":"Configures the proxy settings for Microsoft Edge.\n\nIf you enable this policy, Microsoft Edge ignores all proxy-related options specified from the command line.\n\nIf you don't configure this policy, users can choose their own proxy settings.\n\nThis policy overrides the following individual policies:\n\n\"ProxyMode\"\n\n\"ProxyPacUrl\"\n\n\"ProxyServer\"\n\n\"ProxyBypassList\"\n\nSetting the \"ProxySettings\" policy accepts the following fields:\n\n* ProxyMode, which lets you specify the proxy server used by Microsoft Edge and prevents users from changing proxy settings\n\n* ProxyPacUrl, a URL to a proxy .pac file or a PAC script encoded as a data URL with MIME type application/x-ns-proxy-autoconfig\n\n* ProxyPacMandatory, a boolean flag that prevents the network stack from falling back to direct connections with invalid or unavailable PAC script\n\n* ProxyServer, a URL for the proxy server\n\n* ProxyBypassList, a list of proxy hosts that Microsoft Edge bypasses\n\nFor ProxyMode, the following values when chosen lead to the following results:\n\n* direct, a proxy is never used and all other fields are ignored.\n\n* system, the systems's proxy is used and all other fields are ignored.\n\n* auto_detect, all other fields are ignored.\n\n* fixed_servers, the ProxyServer and ProxyBypassList fields are used.\n\n* pac_script, the ProxyPacUrl, ProxyPacMandatory and ProxyBypassList fields are used.\n\nFor more detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.","helpText":null,"infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"f66ec61936906d3c":{"id":"device_vendor_msft_defender_configuration_disablerdpparsing","displayName":"Disable Rdp Parsing","description":"This setting disables RDP Parsing for Network Protection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_defender_configuration_disablerdpparsing_1","displayName":"RDP Parsing is disabled","description":"RDP Parsing is disabled","helpText":null},{"id":"device_vendor_msft_defender_configuration_disablerdpparsing_0","displayName":"RDP Parsing is enabled","description":"RDP Parsing is enabled","helpText":null}]},"f6a70f0883a17a40":{"id":"device_vendor_msft_policy_config_accounts_domainnamesforemailsync","displayName":"Domain Names For Email Sync","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Accounts#domainnamesforemailsync"],"categoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","categoryName":"Accounts","options":null},"f6d19b63d774189f":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatetopleveldomainzones","displayName":"Update top level domain zones","description":"Specifies if computers may send dynamic updates to zones with a single label name. These zones are also known as top-level domain zones, for example: \"com.\"\r\n\r\nBy default, a DNS client that is configured to perform dynamic DNS update will update the DNS zone that is authoritative for its DNS resource records unless the authoritative zone is a top-level domain or root zone.\r\n\r\nIf you enable this policy setting, computers send dynamic updates to any zone that is authoritative for the resource records that the computer needs to update, except the root zone.\r\n\r\nIf you disable this policy setting, or if you do not configure this policy setting, computers do not send dynamic updates to the root zone or top-level domain zones that are authoritative for the resource records that the computer needs to update.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-updatetopleveldomainzones"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatetopleveldomainzones_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatetopleveldomainzones_1","displayName":"Enabled","description":null,"helpText":null}]},"f6da783a90e7c7ec":{"id":"device_vendor_msft_policy_config_admx_power_enabledesktopslideshowdc","displayName":"Turn on desktop background slideshow (on battery)","description":"This policy setting allows you to specify if Windows should enable the desktop background slideshow.\n\nIf you enable this policy setting, desktop background slideshow is enabled.\n\nIf you disable this policy setting, the desktop background slideshow is disabled.\n\nIf you disable or do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-enabledesktopslideshowdc"],"categoryId":"01da0c26-af30-4eb2-a899-7d5e7ecb9738","categoryName":"Video and Display Settings","options":[{"id":"device_vendor_msft_policy_config_admx_power_enabledesktopslideshowdc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_power_enabledesktopslideshowdc_1","displayName":"Enabled","description":null,"helpText":null}]},"f69a996b1542d2e8":{"id":"device_vendor_msft_policy_config_admx_smartcard_filterduplicatecerts","displayName":"Filter duplicate logon certificates","description":"This policy settings lets you configure if all your valid logon certificates are displayed.\r\n\r\nDuring the certificate renewal period, a user can have multiple valid logon certificates issued from the same certificate template. This can cause confusion as to which certificate to select for logon. The common case for this behavior is when a certificate is renewed and the old one has not yet expired. Two certificates are determined to be the same if they are issued from the same template with the same major version and they are for the same user (determined by their UPN). \r\n \r\nIf there are two or more of the \"same\" certificate on a smart card and this policy is enabled then the certificate that is used for logon on Windows 2000, Windows XP, and Windows 2003 Server will be shown, otherwise the the certificate with the expiration time furthest in the future will be shown. Note: This setting will be applied after the following policy: \"Allow time invalid certificates\"\r\n\r\nIf you enable or do not configure this policy setting, filtering will take place.\r\n\r\nIf you disable this policy setting, no filtering will take place.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-smartcard#admx-smartcard-filterduplicatecerts"],"categoryId":"a34ade49-964d-407c-9f60-2e8cd9dfef05","categoryName":"Smart Card","options":[{"id":"device_vendor_msft_policy_config_admx_smartcard_filterduplicatecerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_smartcard_filterduplicatecerts_1","displayName":"Enabled","description":null,"helpText":null}]},"f6be3d9a05ad6faa":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay","displayName":"Maximum fetch delay after a policy invalidation","description":"Setting the policy specifies the maximum delay in milliseconds between receiving a policy invalidation and fetching the new policy from the device management service. Valid values range from 1,000 (1 second) to 300,000 (5 minutes). Values outside this range will be clamped to the respective boundary.\r\n\r\nLeaving the policy unset means Google Chrome uses the default value of 10 seconds.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_1","displayName":"Enabled","description":null,"helpText":null}]},"f60f37c4e506da1e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod","displayName":"Set the time period for update notifications","description":"Allows you to set the time period, in milliseconds, over which users are notified that Google Chrome must be relaunched or that a Google Chrome OS device must be restarted to apply a pending update.\r\n\r\nOver this time period, the user will be repeatedly informed of the need for an update. For Google Chrome OS devices, a restart notification appears in the system tray according to the RelaunchHeadsUpPeriod policy. For Google Chrome browsers, the app menu changes to indicate that a relaunch is needed once one third of the notification period passes. This notification changes color once two thirds of the notification period passes, and again once the full notification period has passed. The additional notifications enabled by the RelaunchNotification policy follow this same schedule.\r\n\r\nIf not set, the default period of 604800000 milliseconds (one week) is used.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"f60b5c4698b861b0":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices","displayName":"Show media controls for Google Cast sessions started by other devices on the local network","description":"When this policy is enabled, media playback controls UI is available for Google Cast sessions started by other devices on the local network.\r\n\r\nWhen this policy is unset for enterprise users or is disabled, media playback controls UI is unavailable for Google Cast sessions started by other devices on the local network.\r\n\r\nIf the policy EnableMediaRouter is disabled, then this policy's value has no effect, as the entire Google Cast functionality is disabled.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices_1","displayName":"Enabled","description":null,"helpText":null}]},"f6bc9038b98cc28b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_1","displayName":"Enabled","description":null,"helpText":null}]},"f611ef7cf98c3315":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess","displayName":"Force WebSQL to be enabled.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"f62a1c7ccc93accc":{"id":"device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives","displayName":"Allow Full Scan On Mapped Network Drives","description":"Allows or disallows a full scan of mapped network drives.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives_0","displayName":"Not allowed. Disables scanning on mapped network drives.","description":"Not allowed. Disables scanning on mapped network drives.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives_1","displayName":"Allowed. Scans mapped network drives.","description":"Allowed. Scans mapped network drives.","helpText":null}]},"f6790bd5bb625c59":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed","displayName":"Allow user feedback","description":"Microsoft Edge uses the Edge Feedback feature (enabled by default) to allow users to send feedback, suggestions or customer surveys and to report any issues with the browser. Also, by default, users can't disable (turn off) the Edge Feedback feature.\r\n\r\nIf you enable this policy or don't configure it, users can invoke Edge Feedback.\r\n\r\nIf you disable this policy, users can't invoke Edge Feedback.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"f661523002fa2901":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist","displayName":"Configure proxy bypass rules","description":"Defines a list of hosts for which Microsoft Edge bypasses any proxy.\r\n\r\nThis policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, you can create a list of hosts for which Microsoft Edge doesn't use a proxy.\r\n\r\nIf you don't configure this policy, no list of hosts is created for which Microsoft Edge bypasses a proxy. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor more detailed examples go to https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: https://www.contoso.com, https://www.fabrikam.com","helpText":"","infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},"f60f9e35c2f961b7":{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled","displayName":"Re-enable the Event.path API until Microsoft Edge version 115","description":"Starting in Microsoft Edge version 109, the non-standard API Event.path will be removed to improve web compatibility. This policy re-enables the API until version 115.\r\n\r\nIf you enable this policy, the Event.path API will be available.\r\n\r\nIf you disable this policy, the Event.path API will be unavailable.\r\n\r\nIf this policy is not set, the Event.path API will be in the following default states: available before version 109, and unavailable in version 109 to version 114.\r\n\r\nThis policy will be made obsolete after Microsoft Edge version 115.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f698137516f0fe76":{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive","displayName":"Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground.","description":"This policy controls whether to always keep the active Microsoft Edge window with an Internet Explorer mode tab in the foreground.\r\n\r\nIf you enable this policy, the active Microsoft Edge window with an Internet Explorer mode tab will always be in the foreground.\r\n\r\nIf you disable or don't configure this policy, the active Microsoft Edge window with an Internet Explorer mode tab will not be kept in the foreground.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_1","displayName":"Enabled","description":null,"helpText":null}]},"f632d3f6748905cf":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_cahintcertificatesdesc","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","categoryName":"Certificate management settings","options":null},"f6fdeb52bc715e4c":{"id":"device_vendor_msft_policy_config_search_disablesearch","displayName":"Disable Search","description":"Enabling this policy completely disables Search UI and all its entry points such as keyboard shortcuts and touchpad gestures. It removes the Search button from the Taskbar and the corresponding option in the Settings. It also disables type-to-search in the Start menu and removes the Start menu's search box.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#disablesearch"],"categoryId":"794337be-8833-4b9a-bb88-8a030141578d","categoryName":"Search","options":[{"id":"device_vendor_msft_policy_config_search_disablesearch_0","displayName":"Do not disable.","description":"Do not disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_disablesearch_1","displayName":"Disable.","description":"Disable.","helpText":null}]},"f6d2219b45135dff":{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","categoryName":"Microsoft Edge Beta","options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},"f6709e888f922190":{"id":"device_vendor_msft_policy_privilegemanagement_systemsettingrules_{systemsettingrulename}_description","displayName":"Description","description":"Specifies the description of the system setting rule.","helpText":null,"infoUrls":[],"categoryId":"4f3a6fca-a74c-448d-95b1-9d6d7a5d4449","categoryName":null,"options":null},"f69e1a246101e4e6":{"id":"softwareupdate_softwareupdate","displayName":"com.apple.configuration.softwareupdate.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"categoryId":"b382d980-7459-4850-a45e-75dd99488972","categoryName":"Software Update Settings","options":null},"f6ce68a395455219":{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonctrlaltdel","displayName":"Enable Physical Device Access On Ctrl Alt Del (User) (Windows Insiders only)","description":"Configuring this node gives access to the physical devices used to boot to Cloud PCs from the Ctrl+Alt+Del page for specified users. This node supports these options: 0. Not enabled 1. Enabled.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/CloudDesktop-csp/"],"categoryId":"39e4c352-be9c-4e75-8111-8236279c7f1e","categoryName":"Cloud Desktop","options":[{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonctrlaltdel_false","displayName":"Access to physical device on CtrlAltDel page disabled","description":"Access to physical device on CtrlAltDel page disabled","helpText":null},{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonctrlaltdel_true","displayName":"Access to physical device on CtrlAltDel page enabled","description":"Access to physical device on CtrlAltDel page enabled","helpText":null}]},"f6a5c5252af08661":{"id":"user_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_1","displayName":"Redirect folders on primary computers only (User)","description":"This policy setting controls whether folders are redirected on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office.\r\n\r\nTo designate a user's primary computers, an administrator must use management software or a script to add primary computer attributes to the user's account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function.\r\n\r\nIf you enable this policy setting and the user has redirected folders, such as the Documents and Pictures folders, the folders are redirected on the user's primary computer only.\r\n\r\nIf you disable or do not configure this policy setting and the user has redirected folders, the folders are redirected on every computer that the user logs on to.\r\n\r\nNote: If you enable this policy setting in Computer Configuration and User Configuration, the Computer Configuration policy setting takes precedence.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-primarycomputer-fr-1"],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_1_1","displayName":"Enabled","description":null,"helpText":null}]},"f62d819f998f4c2a":{"id":"user_vendor_msft_policy_config_admx_globalization_hideadminoptions","displayName":"Hide Regional and Language Options administrative options (User)","description":"This policy setting removes the Administrative options from the Region settings control panel. Administrative options include interfaces for setting system locale and copying settings to the default user. This policy setting does not, however, prevent an administrator or another application from changing these values programmatically.\r\n\r\nThis policy setting is used only to simplify the Regional Options control panel.\r\n\r\nIf you enable this policy setting, the user cannot see the Administrative options.\r\n\r\nIf you disable or do not configure this policy setting, the user can see the Administrative options.\r\n\r\nNote: Even if a user can see the Administrative options, other policies may prevent them from modifying the values.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hideadminoptions"],"categoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","categoryName":"Regional and Language Options","options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hideadminoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hideadminoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"f6da0d455d20fe00":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remoteaccess","displayName":"Remote Access (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-remoteaccess"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remoteaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remoteaccess_1","displayName":"Enabled","description":null,"helpText":null}]},"f69d1c38c0633e3c":{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_1","displayName":"WPD Devices: Deny read access (User)","description":"This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-wpddevices-denyread-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"f6c6942f3f69674c":{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_visible","displayName":"Display instructions in logon scripts as they run (User)","description":"This policy setting displays the instructions in logon scripts as they run.\r\n\r\nLogon scripts are batch files of instructions that run when the user logs on. By default, the system does not display the instructions in logon scripts.\r\n\r\nIf you enable this policy setting, the system displays each instruction in the logon script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.\r\n\r\nIf you disable or do not configure this policy setting, the instructions are suppressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-logon-script-visible"],"categoryId":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","categoryName":"Scripts","options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_visible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_visible_1","displayName":"Enabled","description":null,"helpText":null}]},"f69f5912ad56efbc":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath","displayName":"Microsoft InfoPath 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft InfoPath 2013.\r\nBy default, the user settings of Microsoft InfoPath 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft InfoPath 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft InfoPath 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013infopath"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath_1","displayName":"Enabled","description":null,"helpText":null}]},"f61819a34dc46138":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016","displayName":"Microsoft Office 365 PowerPoint 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 PowerPoint 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 PowerPoint 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365powerpoint2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016_1","displayName":"Enabled","description":null,"helpText":null}]},"f69325e64f45e5dc":{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverrideforfiles","displayName":"Prevent Smart Screen Prompt Override For Files (User)","description":"Don't allow Windows Defender SmartScreen warning overrides for unverified files.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventsmartscreenpromptoverrideforfiles"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverrideforfiles_0","displayName":"Disabled","description":"Allowed/turned off. Users can ignore the warning and continue to download the unverified file(s).","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverrideforfiles_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},"f6c942ee21b370fa":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin","displayName":"Browser sign in settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_0","displayName":"Disable browser sign-in","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_1","displayName":"Enable browser sign-in","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_2","displayName":"Force users to sign-in to use the browser","description":null,"helpText":null}]},"f6503c4a91682d62":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations","displayName":"Determine the availability of variations (User)","description":"Configuring this policy allows to specify which variations are allowed to be applied in Google Chrome.\r\n\r\nVariations provide a means for offering modifications to Google Chrome without shipping a new version of the browser by selectively enabling or disabling already existing features. See https://support.google.com/chrome/a?p=Manage_the_Chrome_variations_framework for more information.\r\n\r\nSetting the VariationsEnabled (value 0), or leaving the policy not set allows all variations to be applied to the browser.\r\n\r\nSetting the CriticalFixesOnly (value 1), allows only variations considered critical security or stability fixes to be applied to Google Chrome.\r\n\r\nSetting the VariationsDisabled (value 2), prevent all variations from being applied to the browser. Please note that this mode can potentially prevent the Google Chrome developers from providing critical security fixes in a timely manner and is thus not recommended.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_1","displayName":"Enabled","description":null,"helpText":null}]},"f6192e33c1589c33":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended","displayName":"Parameters for search URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURLPostParams specifies the parameters when searching a URL with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSearchURLPostParams unset means search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f6ad9c95bc1fc7a6":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath","displayName":"Path to Chrome for switching from the alternative browser. (User)","description":"This policy controls the command to use to open URLs in Google Chrome when switching from Internet Explorer®. This policy can be set to an executable file path or ${chrome} to autodetect the location of Google Chrome.\r\n\r\nLeaving the policy unset means Internet Explorer® autodetects Google Chrome's own executable path when launching Google Chrome from Internet Explorer.\r\n\r\nNote: If the Legacy Browser Support add-in for Internet Explorer® isn't installed, this policy has no effect.\r\n\r\nExample value: ${chrome}","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_1","displayName":"Enabled","description":null,"helpText":null}]},"f69203f09c624221":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting","displayName":"Default sensors setting (User)","description":"Setting the policy to 1 lets websites access and use sensors such as motion and light. Setting the policy to 2 denies acess to sensors.\r\n\r\nLeaving it unset means AllowSensors applies, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_1","displayName":"Enabled","description":null,"helpText":null}]},"f6715c27e030a44d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls","displayName":"Automatically grant permission to sites to connect to any HID device. (User)","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available devices.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn ChromeOS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultWebHidGuardSetting, WebHidAskForUrls, WebHidBlockedForUrls and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f6a262928395b3c2":{"id":"user_vendor_msft_policy_config_enterprisecloudprint_cloudprinterdiscoveryendpoint","displayName":"Cloud Printer Discovery End Point (User)","description":"This policy provisions per-user discovery end point to discover cloud printers","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-EnterpriseCloudPrint#cloudprinterdiscoveryendpoint"],"categoryId":"14fe5c02-d4f6-4f2a-9eae-2d60d111ee77","categoryName":"Enterprise Cloud Print","options":null},"f6a06e6f8f3b5afe":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_descriptioncolon19","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f6b85efab784d2ea":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_descriptioncolon79","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f660672bc43737e1":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802","displayName":"Allow drag and drop or copy and paste files (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_1","displayName":"Prompt","description":null,"helpText":null}]},"f63cf95fbc6dcbf8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability","displayName":"Configure InPrivate mode availability (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_0","displayName":"InPrivate mode available","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_1","displayName":"InPrivate mode disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_2","displayName":"InPrivate mode forced","description":null,"helpText":null}]},"f6683ddeacff6cb8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls","displayName":"Limit cookies from specific websites to the current session (User)","description":"Cookies created by websites that match a URL pattern you define are deleted when the session ends (when the window closes).\r\n\r\nCookies created by websites that don't match the pattern are controlled by the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or by the user's personal configuration. This is also the default behavior if you don't configure this policy.\r\n\r\nIf Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about configuring what happens when Microsoft Edge runs in background mode.\r\n\r\nYou can also use the 'CookiesAllowedForUrls' (Allow cookies on specific sites) and 'CookiesBlockedForUrls' (Block cookies on specific sites) policies to control which websites can create cookies.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- 'CookiesBlockedForUrls'\r\n\r\n- 'CookiesAllowedForUrls'\r\n\r\n- CookiesSessionOnlyForUrls\r\n\r\nIf you set the 'RestoreOnStartup' (Action to take on startup) policy to restore URLs from previous sessions, this policy is ignored, and cookies are stored permanently for those sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f6ee9f6bb664f069":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting","displayName":"Default images setting (User)","description":"Set whether websites can display images. You can allow images on all sites (1) or block them on all sites (2).\r\n\r\nIf you don't configure this policy, images are allowed by default, and the user can change this setting.\r\n\r\n* 1 = Allow all sites to show all images\r\n\r\n* 2 = Don't allow any site to show images","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_1","displayName":"Enabled","description":null,"helpText":null}]},"f6c989efcde954bb":{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms","displayName":"Prefer specific key exchange algorithms for TLS (User)","description":"","helpText":"","infoUrls":[],"categoryId":"120b24dd-c04a-4291-8f24-9c48fcdc1434","categoryName":"Cryptography compliance policies","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms_cnsa2","displayName":"Prefer key exchange methods satisfying the requirements of CNSA 2.0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms_default","displayName":"Use Microsoft Edge's default supported groups","description":null,"helpText":null}]},"f673011cf1b662c6":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy","displayName":"Application Guard Container Proxy (User)","description":"Configures the proxy settings for Microsoft Edge Application Guard.\r\nIf you enable this policy, Microsoft Edge Application Guard ignores other sources of proxy configurations.\r\n\r\nIf you don't configure this policy, Microsoft Edge Application Guard uses the proxy configuration of the host.\r\n\r\nThis policy does not affect the proxy configuration of Microsoft Edge outside of Application Guard (on the host).\r\n\r\nThe ProxyMode field lets you specify the proxy server used by Microsoft Edge Application Guard.\r\n\r\nThe ProxyPacUrl field is a URL to a proxy .pac file.\r\n\r\nThe ProxyServer field is a URL for the proxy server.\r\n\r\nIf you choose the 'direct' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'auto_detect' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'fixed_servers' value as 'ProxyMode', the 'ProxyServer' field is used.\r\n\r\nIf you choose the 'pac_script' value as 'ProxyMode', the 'ProxyPacUrl' field is used.\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"direct\", \r\n \"ProxyPacUrl\": \"https://internal.site/example.pac\", \r\n \"ProxyServer\": \"123.123.123.123:8080\"\r\n}","helpText":"","infoUrls":[],"categoryId":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","categoryName":"Application Guard settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_1","displayName":"Enabled","description":null,"helpText":null}]},"f64a2dc1aa225584":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync","displayName":"Force synchronization of browser data and do not show the sync consent prompt (User)","description":"Forces data synchronization in Microsoft Edge. This policy also prevents the user from turning sync off.\r\n\r\nIf you don't configure this policy, users will be able to turn sync on or off. If you enable this policy, users will not be able to turn sync off.\r\n\r\nFor this policy to work as intended,\r\n'BrowserSignin' (Browser sign-in settings) policy must not be configured, or must be set to enabled. If 'ForceSync' (Force synchronization of browser data and do not show the sync consent prompt) is set to disabled, then 'BrowserSignin' will not take affect.\r\n\r\n'SyncDisabled' (Disable synchronization of data using Microsoft sync services) must not be configured or must be set to False. If this is set to True, 'ForceSync' will not take affect.\r\n\r\n0 = Do not automatically start sync and show the sync consent (default)\r\n1 = Force sync to be turned on for Azure AD/Azure AD-Degraded user profile and do not show the sync consent prompt","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync_1","displayName":"Enabled","description":null,"helpText":null}]},"f674513c546b4e1e":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (User)","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if Sleeping Tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is enabled or is not configured and the user has enabled the Sleeping Tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f6553fcf5a75ee72":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer","displayName":"Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge (User)","description":"This setting allows you to configure the View in File Explorer capability for file management in SharePoint Online while using Microsoft Edge.\r\n\r\nYou will need to list the specific domains where this is allowed and list cookies needed for SharePoint authentication (rtFa and FedAuth).\r\n\r\nBehind the scenes, the policy allows URLs with the viewinfileexplorer: scheme to open WebDAV URLs in Windows File Explorer on pages matching the list of domains and uses the cookies you specified for WebDAV authentication.\r\n\r\nIf you enable this policy, you can use the \"View in File Explorer\" feature on the SharePoint document libraries you list. You will need to specify the SharePoint domain and authentication cookies. See example value below.\r\n\r\nIf you disable or don't configure this policy, you cannot use the \"View in File Explorer\" feature on SharePoint document libraries.\r\n\r\nNote that while this is an available option through Microsoft Edge, rather than use the View in File Explorer option, the recommended approach to managing files and folders outside of SharePoint is to sync your SharePoint files or move or copy files in SharePoint.\r\nSync your SharePoint files: https://go.microsoft.com/fwlink/p/?linkid=2166983\r\nMove or copy files in SharePoint: https://go.microsoft.com/fwlink/p/?linkid=2167123\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"cookies\": [\r\n \"rtFa\",\r\n \"FedAuth\"\r\n ],\r\n \"domain\": \"contoso.sharepoint.com\"\r\n },\r\n {\r\n \"cookies\": [\r\n \"rtFa\",\r\n \"FedAuth\"\r\n ],\r\n \"domain\": \"contoso2.sharepoint.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"f6054ba8513b7f50":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_internetexplorerintegrationwindowopenheightadjustment","displayName":"Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f664a0c9efaa66ff":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_banglaindia","displayName":"Bangla (India) (User)","description":"Enables the editing language Bangla (India)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_banglaindia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_banglaindia_1","displayName":"Enabled","description":null,"helpText":null}]},"f634e6e15b047e9e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lao","displayName":"Lao (User)","description":"Enables the editing language Lao","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lao_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lao_1","displayName":"Enabled","description":null,"helpText":null}]},"f687bff4bca4fdb6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_encryptiontypeforpasswordprotectedofficeopen_l_encryptiontypecolon","displayName":"Encryption type: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"f6f9580804e1e75e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_formregionsettings_l_lockedformregions_l_empty76_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"e0e10e94-325c-49e6-ab48-4f146254395f","categoryName":"Form Region Settings","options":null},"f6e6edc49e88a33d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat_l_disablesignatures","displayName":"Do not allow signatures for e-mail messages (User)","description":"This policy setting allows you to prevent Outlook users from adding signatures to e-mails they create, reply to, or forward. \r\n\r\nIf you enable this policy setting, Outlook users cannot manually add signatures to e-mails they create, reply to, or forward, nor will they be able to configure automatic signatures.\r\n\r\nIf you disable or do not configure this policy setting, Outlook 2016 users can add signatures to e-mail messages either manually or automatically.","helpText":"","infoUrls":[],"categoryId":"f2bf77fd-37df-448b-8959-6478abf96f6f","categoryName":"Mail Format","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat_l_disablesignatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat_l_disablesignatures_1","displayName":"Enabled","description":null,"helpText":null}]},"f69aaeb6788adac8":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadheadersthenfullitemsfilecachedexchangemode","displayName":"Disallow Download Headers then Full Items (User)","description":"This policy setting allows you to turn off the \"Download Headers and then Full Items\" option. Microsoft Exchange Server 2003 or later is required.\r\n\r\nIf you enable this policy setting, you will turn off the \"Download Headers and then Full Items\" option in the Download Preferences menu in the Send/Receive tab.\r\n\r\nIf you disable or do not configure this policy setting, you will allow the \"Download Headers and then Full Items\" option in the Download Preferences menu in the Send/Receive tab.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadheadersthenfullitemsfilecachedexchangemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_disallowdownloadheadersthenfullitemsfilecachedexchangemode_1","displayName":"Enabled","description":null,"helpText":null}]},"f6e546b878ca8b67":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_save_l_saveautorecoverinfo_l_autorecoversavefrequencyminutes","displayName":"AutoRecover save frequency (minutes): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c3b5e77d-c00d-4578-84c9-289362ad0b00","categoryName":"Save","options":null},"f6beac50bc0e8d27":{"id":"user_vendor_msft_policy_config_word16~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablewpm","displayName":"Disable lock‑free coauthoring (User)","description":"This policy controls whether Word can use lock‑free coauthoring in collaboration sessions.\n\nLock‑free coauthoring allows multiple collaborators to edit the same paragraph at the same time when supported for a collaboration session.\n\nIf you enable this policy, Word will not use lock‑free coauthoring and will instead use the existing coauthoring behavior to support collaboration across the session.\n\nIf you disable or do not configure this policy, Word will automatically use lock‑free coauthoring when it is supported for a collaboration session.","helpText":"","infoUrls":[],"categoryId":"e522c142-5666-4090-a7f4-1da1487f5384","categoryName":"Co-authoring","options":[{"id":"user_vendor_msft_policy_config_word16~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablewpm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16~policy~l_microsoftofficeword~l_collaborationsettings~l_coauthoring_l_disablewpm_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/f7.json b/public/intune-definitions/f7.json new file mode 100644 index 000000000000..b5e0ebec4801 --- /dev/null +++ b/public/intune-definitions/f7.json @@ -0,0 +1 @@ +{"f71f606531d8b826":{"id":"ade_lockedenrollment","displayName":"Locked enrollment","description":"Blocks the user from removing the management profile through the Settings menu.","helpText":"","infoUrls":[],"categoryId":"75e27534-3163-45b1-b34e-ca79b077b286","categoryName":null,"options":[{"id":"ade_lockedenrollment_0","displayName":"No","description":null,"helpText":null},{"id":"ade_lockedenrollment_1","displayName":"Yes","description":null,"helpText":null}]},"f704e2d80b186daf":{"id":"com.android.devicerestrictionpolicy.bluetoothblockedaosp","displayName":"Block Bluetooth","description":"If 'True', disables Bluetooth on the device so that users can't pair with other devices. If 'False', Intune doesn't change or update this setting. By default, the OS might enable Bluetooth on the device.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.bluetoothblockedaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.bluetoothblockedaosp_true","displayName":"True","description":"True","helpText":null}]},"f7ff38a080452206":{"id":"com.apple.applicationaccess_allowfilesusbdriveaccess","displayName":"Allow Files USB Drive Access","description":"If false, prevents connecting to any connected USB devices in the Files app. Requires a supervised device. Available in iOS 13.1 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowfilesusbdriveaccess_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowfilesusbdriveaccess_true","displayName":"True","description":null,"helpText":null}]},"f7b473c1906e0406":{"id":"com.apple.dock_autohide","displayName":"Auto Hide","description":"If true, enables \"Automatically hide and show the dock.\"","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_autohide_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_autohide_true","displayName":"True","description":null,"helpText":null}]},"f7db26186255dd55":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver","displayName":"Update channel override (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_2","displayName":"Beta Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_3","displayName":"Change Freeze","description":null,"helpText":null}]},"f7ac888fd98df5d8":{"id":"com.apple.managedclient.preferences_defaultsearchproviderenabled","displayName":"Enable the default search provider","description":"Enables the use of a default search provider.\n\nIf you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn't a URL).\n\nYou can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured), the user can choose the default provider.\n\nIf you disable this policy, the user can't search from the address bar.\n\nIf you enable or disable this policy, users can't change or override it.\n\nIf you don't configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultsearchproviderenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultsearchproviderenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultsearchproviderenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f7aa4000c330f1d1":{"id":"com.apple.managedclient.preferences_savingbrowserhistorydisabled","displayName":"Disable saving browser history","description":"Disables saving browser history and prevents users from changing this setting.\n\nIf you enable this policy, browsing history isn't saved. This also disables tab syncing.\n\nIf you disable this policy or don't configure it, browsing history is saved.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#savingbrowserhistorydisabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_savingbrowserhistorydisabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_savingbrowserhistorydisabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f7b6e2327ce0ddf9":{"id":"com.apple.managedclient.preferences_strictermixedcontenttreatmentenabled","displayName":"Enable stricter treatment for mixed content","description":"This policy controls the treatment for mixed content (HTTP content in HTTPS sites) in the browser.\n\nIf you set this policy to true or not set, audio and video mixed content will be automatically upgraded to HTTPS (that is, the URL will be rewritten as HTTPS, without a fallback if the resource isn’t available over HTTPS) and a 'Not Secure' warning will be shown in the URL bar for image mixed content.\n\nIf you set the policy to false, auto upgrades will be disabled for audio and video, and no warning will be shown for images.\n\nThis policy does not affect other types of mixed content other than audio, video, and images.\n\nThis policy will no longer take effect starting in Microsoft Edge 84.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#strictermixedcontenttreatmentenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_strictermixedcontenttreatmentenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_strictermixedcontenttreatmentenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f7ecaab4b776614c":{"id":"com.apple.softwareupdate_allowprereleaseinstallation","displayName":"Allow Pre Release Installation (Deprecated)","description":"If true, prerelease software can be installed on this computer. ","helpText":null,"infoUrls":[],"categoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","categoryName":"Software Update","options":[{"id":"com.apple.softwareupdate_allowprereleaseinstallation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.softwareupdate_allowprereleaseinstallation_true","displayName":"True","description":null,"helpText":null}]},"f7657734f4b908c8":{"id":"com.apple.tcc.configuration-profile-policy_services_camera_item_coderequirement","displayName":"Code Requirement","description":"Obtained via the command \"codesign –display -r -\".","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"f7d5d2df889de959":{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_allowed","displayName":"Allowed (Deprecated)","description":"If true, access is granted; otherwise, the process doesn't have access. The user isn't prompted and can't change this value.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":[{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_allowed_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.tcc.configuration-profile-policy_services_screencapture_item_allowed_true","displayName":"True","description":null,"helpText":null}]},"f76a1557df4a1337":{"id":"com.apple.xsan_sharedsecret","displayName":"Shared Secret","description":"The shared secret used for Xsan network authentication. This key is required when the San Auth Method key is present. The value should equal the content of the MDC's /Library/Preferences/Xsan/.auth_secret file.","helpText":null,"infoUrls":[],"categoryId":"46af3391-ed6d-4ada-aef7-02dac2a1b136","categoryName":"Xsan","options":null},"f76e9323c264ad5f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.organizationlogooverlayonappiconenabled_recommended","displayName":"Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work or school profile (users can override)","description":"Allows your organization's logo from Entra, if any, to be overlaid on the Microsoft Edge app icon of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\n\nIf you enable this policy, your organization's logo from Entra is used.\n\nIf you disable or don't configure this policy, your organization's logo from Entra won't be used.\n\nFor more information about configuring your organization's logo on Entra, visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.organizationlogooverlayonappiconenabled_recommended_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.organizationlogooverlayonappiconenabled_recommended_true","displayName":"Enabled","description":null,"helpText":null}]},"f7b568c89b36192b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpostscriptmode","displayName":"Print PostScript Mode","description":"Controls how Microsoft Edge prints on Microsoft Windows.\n\nPrinting to a PostScript printer on Microsoft Windows different PostScript generation methods can affect printing performance.\n\nIf you set this policy to Default, Microsoft Edge uses a set of default options when generating PostScript. Text in particular, is always rendered using Type 3 fonts.\n\nIf you set this policy to Type42, Microsoft Edge renders text using Type 42 fonts if possible. This should increase printing speed for some PostScript printers.\n\nIf you don't configure this policy, Microsoft Edge remains in Default mode.\n\nPolicy options mapping:\n\n* Default (0) = Default\n\n* Type42 (1) = Type42\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpostscriptmode_default","displayName":"Default","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printpostscriptmode_type42","displayName":"Type42","description":null,"helpText":null}]},"f7793e6f510ad63f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webappinstallbyuserenabled","displayName":"Enable User Web App Install From Browser","description":"This policy controls whether users can install web apps through Microsoft Edge.\nIf you enable or don’t configure this policy, users can install web apps through the browser.\nIf you disable this policy, users can’t install web apps through the browser, and the \"apps\" data type is excluded from synchronization.\nThis policy doesn't support dynamic refresh. Changes to this policy, whether enabled, disabled, or not configured, take effect only after the browser is restarted.\nThis policy doesn't affect the 'WebAppInstallForceList' policy. Web apps specified by that policy are installed regardless of this policy setting.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.webappinstallbyuserenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.webappinstallbyuserenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f712d5e0b3fbfaf8":{"id":"com.microsoft.intune.mam.managedbrowser.appproxyredirection","displayName":"Application proxy redirection","description":"Enable App proxy redirection to give users access to corporate links and on-premise web apps.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.intune.mam.managedbrowser.appproxyredirection_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.intune.mam.managedbrowser.appproxyredirection_true","displayName":"Enabled","description":null,"helpText":null}]},"f7c26fce27716375":{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownpatch","displayName":"Allow users to patch elevated products","description":"This policy setting allows users to patch elevated products.\r\n\r\nIf you enable this policy setting, all users are permitted to install patches, even when the installation program is running with elevated system privileges. Patches are updates or upgrades that replace only those program files that have changed. Because patches can easily be vehicles for malicious programs, some installations prohibit their use.\r\n\r\nIf you disable or do not configure this policy setting, by default, only system administrators can apply patches during installations with elevated privileges, such as installations offered on the desktop or displayed in Add or Remove Programs.\r\n\r\nThis policy setting does not affect installations that run in the user's security context. By default, users can install patches to programs that run in their own security context. Also, see the \"Prohibit patching\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-allowlockdownpatch"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownpatch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_allowlockdownpatch_1","displayName":"Enabled","description":null,"helpText":null}]},"f7d381d02b7fbb25":{"id":"device_vendor_msft_policy_config_admx_msi_msidisableembeddedui","displayName":"Prevent embedded UI","description":"This policy setting controls the ability to prevent embedded UI.\r\n\r\nIf you enable this policy setting, no packages on the system can run embedded UI.\r\n\r\nIf you disable or do not configure this policy setting, embedded UI is allowed to run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-msidisableembeddedui"],"categoryId":"156f2e6a-6638-4749-9f43-e7acc4aba762","categoryName":"Windows Installer","options":[{"id":"device_vendor_msft_policy_config_admx_msi_msidisableembeddedui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_msi_msidisableembeddedui_1","displayName":"Enabled","description":null,"helpText":null}]},"f7482739d97b7750":{"id":"device_vendor_msft_policy_config_admx_peertopeercaching_setcachepercent_wbc_cache_size_percent_dctxtbox","displayName":"Specify the percentage of total disk space allocated for the cache","description":null,"helpText":"","infoUrls":[],"categoryId":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","categoryName":"Branch Cache","options":null},"f748c3420946243d":{"id":"device_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_sourcepathforupdatehelp","displayName":"Default Source Path","description":null,"helpText":"","infoUrls":[],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":null},"f7fd5ada3ec638a9":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_pv","displayName":"Controlled load service type","description":"Specifies an alternate link layer (Layer-2) priority value for packets with the Controlled Load service type (ServiceTypeControlledLoad). The Packet Scheduler inserts the corresponding priority value in the Layer-2 header of the packets.\r\n\r\nIf you enable this setting, you can change the default priority value associated with the Controlled Load service type.\r\n\r\nIf you disable this setting, the system uses the default priority value of 0.\r\n\r\nImportant: If the Layer-2 priority value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypecontrolledload-pv"],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_pv_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypecontrolledload_pv_1","displayName":"Enabled","description":null,"helpText":null}]},"f7bdda1b521348c6":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_clipboard","displayName":"Do not allow Clipboard redirection","description":"This policy setting specifies whether to prevent the sharing of Clipboard contents (Clipboard redirection) between a remote computer and a client computer during a Remote Desktop Services session.\r\n\r\nYou can use this setting to prevent users from redirecting Clipboard data to and from the remote computer and the local computer. By default, Remote Desktop Services allows Clipboard redirection.\r\n\r\nIf you enable this policy setting, users cannot redirect Clipboard data.\r\n\r\nIf you disable this policy setting, Remote Desktop Services always allows Clipboard redirection.\r\n\r\nIf you do not configure this policy setting, Clipboard redirection is not specified at the Group Policy level. \r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-clipboard"],"categoryId":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","categoryName":"Device and Resource Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_clipboard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_client_clipboard_1","displayName":"Enabled","description":null,"helpText":null}]},"f711285e2829ba5d":{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_user_home_location","displayName":"Location:","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_user_home_location_1","displayName":"On the network","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userprofiles_user_home_user_home_location_0","displayName":"On the local computer","description":null,"helpText":null}]},"f7172c981ce9bad5":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxtcui","displayName":"Xbox TCUI * (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxtcui_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_2_xboxtcui_1","displayName":"True","description":null,"helpText":null}]},"f70cb2c43702b5df":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browseraddpersonenabled","displayName":"Enable add person in user manager","description":"If this policy is set to true or not configured, Google Chrome will allow Add Person from the user manager.\r\n\r\nIf this policy is set to false, Google Chrome will not allow creation of new profiles from the user manager.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browseraddpersonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browseraddpersonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f778dc2def56777c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on Shutdown","description":"Controls the duration (in seconds) allowed for keepalive requests on browser shutdown.\r\n\r\nWhen specified, browser shutdown can be blocked up to the specified seconds,\r\nto process keepalive (https://fetch.spec.whatwg.org/#request-keepalive-flag) requests.\r\n\r\nThe default value (0) means this feature is disabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},"f7cfe2956a236dec":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"f7ded026d84480c5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist","displayName":"Configure the required domain names for remote access hosts","description":"Setting the policy specifies the host domain names that are imposed on remote access hosts, and users can't change them. Hosts can be shared only using accounts registered on one of the specified domain names.\r\n\r\nSetting the policy to an empty list or leaving it unset means hosts can be shared using any account.\r\n\r\nSee also RemoteAccessHostClientDomainList.\r\n\r\nNote: This setting will override RemoteAccessHostDomain, if present.\r\n\r\nExample value:\r\n\r\nmy-awesome-domain.com\r\nmy-auxiliary-domain.com","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},"f76662ccf88db863":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowsmartscreenie"],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"f7b04cf3f849a982":{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'RestoreOnStartupIsNewTabPage'.\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'RestoreOnStartupIsLastSession'. The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'RestoreOnStartupIsURLs'.\r\n\r\nStarting in Microsoft Edge version 125, if you want to reopen URLs that were open the last time Microsoft Edge closed and open a specific set of URLs, choose 'RestoreOnStartupIsLastSessionAndURLs'.\r\n\r\nDisabling this setting is the same as leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is only available on instances that are managed via MDM or joined to a domain via MCX.\r\n\r\nPolicy options mapping:\r\n\r\n* RestoreOnStartupIsNewTabPage (5) = Open a new tab\r\n\r\n* RestoreOnStartupIsLastSession (1) = Restore the last session\r\n\r\n* RestoreOnStartupIsURLs (4) = Open a list of URLs\r\n\r\n* RestoreOnStartupIsLastSessionAndURLs (6) = Open a list of URLs and restore the last session\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f71eae0e554e5020":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist","displayName":"Configure list of force-installed Web Apps","description":"Specifies a list of websites that are installed silently, without user interaction, and which can't be uninstalled or disabled by the user.\r\n\r\nEach list item of the policy is an object with the following members:\r\n - \"url\", which is mandatory. \"url\" should be the URL of the web app to install.\r\n\r\nValues for the optional members are:\r\n - \"launch_container\" should be either \"window\" or \"tab\" to indicate how the Web App will be opened after it's installed.\r\n - \"create_desktop_shortcut\" should be true if a desktop shortcut should be created on Windows.\r\n\r\nIf \"default_launch_container\" is omitted, the app will open in a tab by default. Regardless of the value of \"default_launch_container\", users can change which container the app will open in. If \"create_desktop_shortcuts\" is omitted, no desktop shortcuts will be created.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.contoso.com/maps\", \r\n \"create_desktop_shortcut\": true, \r\n \"default_launch_container\": \"window\"\r\n }, \r\n {\r\n \"url\": \"https://app.contoso.edu\", \r\n \"default_launch_container\": \"tab\"\r\n }\r\n]","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"f7fd3902ef770d56":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_spdesignexe107","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_spdesignexe107_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_spdesignexe107_1","displayName":"True","description":null,"helpText":null}]},"f7ecc10d43fd9677":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_grooveexe0","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_grooveexe0_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_grooveexe0_1","displayName":"True","description":null,"helpText":null}]},"f75d7e0c32c6b069":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_forceallowtheseapps","displayName":"Let Apps Access Camera Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera_forceallowtheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"f71231b7925f3795":{"id":"device_vendor_msft_policy_config_textinput_allowhardwarekeyboardtextsuggestions","displayName":"Allow Hardware Keyboard Text Suggestions","description":"Placeholder only. Do not use in production environment.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowhardwarekeyboardtextsuggestions"],"categoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","categoryName":"Text Input","options":[{"id":"device_vendor_msft_policy_config_textinput_allowhardwarekeyboardtextsuggestions_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowhardwarekeyboardtextsuggestions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"f738e8ea71d423b0":{"id":"keyboardsettings_allowmathkeyboardsuggestions","displayName":"Allow Math Keyboard Suggestions","description":"If `false`, disables keyboard suggestions that include math solutions. This key is also supported by the math.settings configuration.","helpText":null,"infoUrls":[],"categoryId":"dba26132-cba6-4178-93c3-f02476532f08","categoryName":"Keyboard Settings","options":[{"id":"keyboardsettings_allowmathkeyboardsuggestions_false","displayName":"False","description":null,"helpText":null},{"id":"keyboardsettings_allowmathkeyboardsuggestions_true","displayName":"True","description":null,"helpText":null}]},"f7128f10c23051ea":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"categoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1","displayName":"Enabled","description":null,"helpText":null}]},"f751db8ee730f3f1":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04","displayName":"Trusted Location #4 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_1","displayName":"Enabled","description":null,"helpText":null}]},"f7b925f7f9a6f19b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_datecolon72","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"f7c3b517922c3968":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting","displayName":"Control use of the Serial API (User)","description":"Setting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"f7b617d5ea2e7f95":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled","displayName":"Determines whether the Chrome Root Store and built-in certificate verifier will be used to verify server certificates (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f723071481e0fa8b":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable specific shortcut key combinations in the specified applications.\r\n \r\n If you enable this policy setting you can disable specific shortcut keys for the selected application. The predefined list of shortcut keys you can disable becomes available to you when you enable this policy setting.\r\n \r\n If you disable or do not configure this policy setting, the predefined list of shortcut keys are enabled for the application.","helpText":"","infoUrls":[],"categoryId":"3fa63a9d-e22d-4fc8-8464-a13b56461115","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_1","displayName":"Enabled","description":null,"helpText":null}]},"f70fe9e4d19ef591":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_windowsintaskbar","displayName":"Show all windows in the Taskbar (User)","description":"When multiple workbooks are open simultaneously, this determines whether the user will see a single entry for Excel in the taskbar or a separate entry in the taskbar for each open workbook.","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_windowsintaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_windowsintaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},"f7b61065559d2692":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles","displayName":"Offline cube files (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will not be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"f7d65b635778fe56":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders24","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders24_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders24_1","displayName":"True","description":null,"helpText":null}]},"f7be3ddb638f6422":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders56","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders56_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders56_1","displayName":"True","description":null,"helpText":null}]},"f720b90d9af368d9":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_pathcolon77","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":null},"f721c7bd433fe28a":{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp","displayName":"[Deprecated] Disable Internet Explorer 11 as a standalone browser (User)","description":"This policy lets you restrict launching of Internet Explorer as a standalone browser.\r\n\r\nIf you enable this policy, it:\r\n- Prevents Internet Explorer 11 from launching as a standalone browser.\r\n- Restricts Internet Explorer's usage to Microsoft Edge's native 'Internet Explorer mode'.\r\n- Redirects all attempts at launching Internet Explorer 11 to Microsoft Edge Stable Channel browser.\r\n- Overrides any other policies that redirect to Internet Explorer 11.\r\n\r\nIf you disable, or don’t configure this policy, all sites are opened using the current active browser settings. Note: Microsoft Edge Stable Channel must be installed for this policy to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerapp"],"categoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","categoryName":"Internet Explorer","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_1","displayName":"Enabled","description":null,"helpText":null}]},"f74e01e55d4ffded":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},"f79ff036e864ec3a":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004","displayName":"Download unsigned ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_1","displayName":"Prompt","description":null,"helpText":null}]},"f7eed14c0ea7833e":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing","displayName":"Enable MIME Sniffing (User)","description":"This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.\n\nIf you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.\n\nIf you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.\n\nIf you do not configure this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenablemimesniffing"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_1","displayName":"Enabled","description":null,"helpText":null}]},"f78fd1e05bbfd2cb":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies","displayName":"Allow WebDriver to Override Incompatible Policies (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\n\r\nThis policy was removed in M83, because it is not necessary anymore as\r\nWebDriver is now compatible with all existing policies.\r\n\r\nThis policy allows users of the WebDriver feature to override\r\npolicies which can interfere with its operation.\r\n\r\nCurrently this policy disables 'SitePerProcess' (Enable site isolation for every site) and 'IsolateOrigins' (Enable site isolation for specific origins) policies.\r\n\r\nIf the policy is enabled, WebDriver will be able to override incomaptible\r\npolicies.\r\nIf the policy is disabled or not configured, WebDriver will not be allowed\r\nto override incompatible policies.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},"f7dd011baebf84d6":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_1","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_2","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},"f7a2d6da13d6ba4d":{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls","displayName":"Block insecure content on specified sites (User)","description":"Create a list of URL patterns to specify sites that aren't allowed to display blockable (i.e. active) mixed content (that is, HTTP content on HTTPS sites) and for which optionally blockable mixed content upgrades will be disabled.\r\n\r\nIf you don't configure this policy, blockable mixed content will be blocked and optionally blockable mixed content will be upgraded. However, users will be allowed to set exceptions to allow insecure mixed content for specific sites.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"f75514b36633aaaf":{"id":"user_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_internetexplorerintegrationcloudneutralsitesreporting","displayName":"Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f75bf90344761a9f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceprofile","displayName":"Replace Label - Profile (User)","description":"This policy setting allows you to change or remove the 10th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . \r\n\r\nIf you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. \r\n\r\nIf you disable or do not configure this policy setting, the default label is displayed.","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplaceprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"f76454957e3249ec":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesetaiwan","displayName":"Chinese (Taiwan) (User)","description":"Enables the editing language Chinese (Taiwan)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesetaiwan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_chinesetaiwan_1","displayName":"Enabled","description":null,"helpText":null}]},"f74140076d9833fc":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanaustria","displayName":"German (Austria) (User)","description":"Enables the editing language German (Austria)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanaustria_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_germanaustria_1","displayName":"Enabled","description":null,"helpText":null}]},"f7b491c3cd665a82":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_isizulu","displayName":"isiZulu (User)","description":"Enables the editing language isiZulu","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_isizulu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_isizulu_1","displayName":"Enabled","description":null,"helpText":null}]},"f771d93c70142a1a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_controlblogging_l_empty503","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_controlblogging_l_empty503_0","displayName":"Enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_controlblogging_l_empty503_1","displayName":"Only SharePoint blogs allowed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_controlblogging_l_empty503_2","displayName":"All blogging disabled","description":null,"helpText":null}]},"f7f8f5c54630af6a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_iscustomaddintabdefaultbackstageplace","displayName":"Take users to a custom File menu tab (User)","description":"\r\nThis policy setting controls whether users are taken to a custom menu tab when they choose the File menu in an Office app, such as Word or PowerPoint. A custom menu tab can be provided by an installed add-in.\r\n\r\nBy default, when users choose the File menu, they are taken to one of the File menu tabs provided by Office, such as Home or Info.\r\n\r\nIf you enable this policy setting, and an installed add-in provides a custom File menu tab, users will be taken to that custom tab when they choose the File menu.\r\n\r\nIf you disable or don’t configure this policy setting, when users choose the File menu, users will be taken to one of the File menu tabs provided by Office, such as Home or Info.\r\n\r\nNote: This policy setting only applies to Office clients, such as Office 365 ProPlus, that come with an Office 365 plan.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_iscustomaddintabdefaultbackstageplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_iscustomaddintabdefaultbackstageplace_1","displayName":"Enabled","description":null,"helpText":null}]},"f70e335d1964ee1b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache4","displayName":"Workflow Cache 4 (User)","description":"The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. \r\n\r\nThis workflow must also be made available on the document library (setting these values only lets the client know about the workflow).","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache4_1","displayName":"Enabled","description":null,"helpText":null}]},"f7a0827bc2c96c61":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache4_l_workflowcachename443","displayName":"Name of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"f75e85591217e7f6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsautocorrectoptionsexcelpowerpointandaccess~l_additionalactions_l_checkfornewactionsurl_l_checkfornewactionsurl231","displayName":"Check for new actions URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"69931627-230d-4df9-bbef-e3eac64ea8ef","categoryName":"Additional Actions","options":null},"f7adf3a01da1125c":{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnoffxpsprintinginapplicationguard","displayName":"Disable XPS printing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"517e55f5-729f-4b4d-9555-33baa95a0e5a","categoryName":"Application Guard","options":[{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnoffxpsprintinginapplicationguard_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v7~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_applicationguard_l_turnoffprintsettingsinapplicationguard_l_turnoffxpsprintinginapplicationguard_1","displayName":"True","description":null,"helpText":null}]},"f72c0350377d6cf0":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_disablecustomroot_disablecustomrootlist","displayName":"Change location setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"f7146437f94b389a":{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_enableallocsiclients","displayName":"Coauthor and share in Office desktop apps (User)","description":"This setting lets multiple users use the Office 365 ProPlus, Office 2019, or Office 2016 desktop apps to simultaneously edit an Office file stored in OneDrive. It also lets users share files from the Office desktop apps.\r\n\r\nIf you enable this setting, coauthoring and sharing in the Office desktop apps is enabled. Users can disable these features by opening the OneDrive sync app settings, clicking the Office tab, and clearing the \"Use Office applications to sync Office files that I open\" check box.\r\n\r\nIf you disable this setting, coauthoring and sharing in the Office desktop apps is disabled, and the Office tab is hidden in sync app. The \"Office file conflicts\" setting will also be disabled and when two versions of a file conflict, both copies will be kept.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_enableallocsiclients_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_enableallocsiclients_1","displayName":"Enabled","description":null,"helpText":null}]},"f7587eecf75f569e":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyservername","displayName":"RPC Proxy Server Name (User)","description":"This policy setting determines the RPC proxy server that Outlook Anywhere uses when connecting to Exchange.\r\n \r\nIf you enable this policy setting, Outlook uses only the RPC proxy server that you specify when connecting to Exchange. It ignores the proxy server specified in Autodiscover.\r\n\r\nIf you disable or do not configure this policy setting Outlook uses the RPC proxy server that is specified in Autodiscover.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyservername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_rpcproxyservername_1","displayName":"Enabled","description":null,"helpText":null}]},"f75becb2068dc791":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05","displayName":"Trusted Location #5 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc05_1","displayName":"Enabled","description":null,"helpText":null}]},"f7f763037330ebfe":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid1","displayName":"Drawing (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f59804be-7fc6-43c3-9baa-942aab85be84","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid1_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_display_l_specifyscreentipstoappear_l_specifyscreentipstoappearboolid1_1","displayName":"True","description":null,"helpText":null}]},"f7036cb460c51551":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_allowselectionfloaties","displayName":"Show Mini Toolbar on selection (User)","description":"Disabling this policy setting will result in Mini Toolbar not being displayed on text selection. By default, Mini Toolbar on selection is enabled and its visibility can be changed via a setting in the Word Options dialog box.","helpText":"","infoUrls":[],"categoryId":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","categoryName":"General","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_allowselectionfloaties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_optionsgeneral_l_allowselectionfloaties_1","displayName":"Enabled","description":null,"helpText":null}]},"f7107ee49ef83c78":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_pathcolon28","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":null},"f71c684caf9d56cc":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_localportranges","displayName":"Local Port Ranges","description":"List of local port ranges. Valid values include:​\r\n\r\nA valid port number between 0 and 65535. For example, 200\r\nA port range in the format of \"start port – end port\" with no spaces included, where the start port is less than the end port. For example, 300-320\r\n\r\nIf not specified, the default is \"All ports.\" When defining multiple local and remote port ranges, the Firewall rule will be evaluated as OR operations within an individual field, and AND operations across rule fields. i.e. (local port A OR local port B) AND (remote port A OR remote port B). When setting this field in a firewall rule, the protocol field must also be set, to either 6 (TCP) or 17 (UDP).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/f8.json b/public/intune-definitions/f8.json new file mode 100644 index 000000000000..56ef4204b3a2 --- /dev/null +++ b/public/intune-definitions/f8.json @@ -0,0 +1 @@ +{"f8e6d7b08238b351":{"id":"com.apple.applicationaccess_allowautomaticappdownloads","displayName":"Allow Automatic App Downloads","description":"If false, prevents automatic downloading of apps purchased on other devices. This setting doesn’t affect updates to existing apps. Requires a supervised device. Available in iOS 9 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowautomaticappdownloads_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowautomaticappdownloads_true","displayName":"True","description":null,"helpText":null}]},"f8a4ccca9b66777d":{"id":"com.apple.applicationaccess_allowimageplayground","displayName":"Allow Image Playground (Deprecated)","description":"If false, prohibits the use of image generation.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowimageplayground_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowimageplayground_true","displayName":"True","description":null,"helpText":null}]},"f842428ae0aad8b7":{"id":"com.apple.assetcache.managed_peerlistenranges_item_type","displayName":"IP Address Type","description":"The IP address type.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_peerlistenranges_item_type_0","displayName":"IPv4","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_peerlistenranges_item_type_1","displayName":"IPv6","description":null,"helpText":null}]},"f84a3882bd66b1c3":{"id":"com.apple.dock_persistent-apps_item_tile-data","displayName":"Tile Data","description":"The information about the Dock item.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":null},"f8ba294e51da7385":{"id":"com.apple.extensiblesso_platformsso_nonplatformssoaccounts","displayName":"Non Platform SSO Accounts","description":"The list of local accounts that are not subject to the 'FileVaultPolicy', 'LoginPolicy', or 'UnlockPolicy'. The accounts are also not prompted to register for Platform SSO.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"f85db409951203d4":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"f812b7686293e17e":{"id":"com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_url","displayName":"URL","description":"The URL for the quick link.","helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f8c1f4abbe263cd1":{"id":"com.apple.managedclient.preferences_smartscreenallowlistdomains","displayName":"Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings","description":"Configure the list of Microsoft Defender SmartScreen trusted domains. This means:\nMicrosoft Defender SmartScreen won't check for potentially malicious resources like phishing software and other malware if the source URLs match these domains.\nThe Microsoft Defender SmartScreen download protection service won't check downloads hosted on these domains.\n\nIf you enable this policy, Microsoft Defender SmartScreen trusts these domains.\nIf you disable or don't set this policy, default Microsoft Defender SmartScreen protection is applied to all resources.\n\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender Advanced Threat Protection. You must configure your allow and block lists in Microsoft Defender Security Center instead.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#smartscreenallowlistdomains"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f805dafe30c3c3a4":{"id":"com.apple.systemconfiguration_proxies_gopherenable","displayName":"Gopher Enable","description":"If true, enables gopher proxy.","helpText":null,"infoUrls":[],"categoryId":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","categoryName":"Network Proxy Configuration","options":[{"id":"com.apple.systemconfiguration_proxies_gopherenable_0","displayName":"False","description":null,"helpText":null},{"id":"com.apple.systemconfiguration_proxies_gopherenable_1","displayName":"True","description":null,"helpText":null}]},"f813382d45fc2e97":{"id":"com.microsoft.edge.mamedgeappconfigsettings.autoplayallowlist","displayName":"Allow media autoplay on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to autoplay media.\n\nIf you don't configure this policy, the global default value from the \"AutoplayAllowed\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\n\nNote: * is not an accepted value for this policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"f88126bc464c2598":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultimagessetting","displayName":"Default images setting","description":"Set whether websites can display images. You can allow images on all sites ('AllowImages') or block them on all sites ('BlockImages').\n\nIf you don't configure this policy, images are allowed by default, and the user can change this setting.\n\nPolicy options mapping:\n\n* AllowImages (1) = Allow all sites to show all images\n\n* BlockImages (2) = Don't allow any site to show images\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultimagessetting_allowimages","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultimagessetting_blockimages","displayName":"Don't allow any site to show images","description":null,"helpText":null}]},"f89f9378745b5c69":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled","displayName":"Show the Reload in Internet Explorer mode button in the toolbar","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button is only shown on the toolbar when the \"InternetExplorerIntegrationReloadInIEModeAllowed\" policy is enabled or if the user chose to enable \"Allow sites to be reloaded in Internet Explorer mode\".\n\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\n\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"f84b822092217e6f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.popupsallowedforurls","displayName":"Allow pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that can open pop-up windows. Wildcards (*) are allowed.\n\nIf you don't configure this policy, the global default value from the \"DefaultPopupsSetting\" policy (if set) or the user's personal configuration is used for all sites.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"f8363a982ad33480":{"id":"com.microsoft.edge.mamedgeappconfigsettings.proxyoverriderules","displayName":"Proxy override rules","description":"This policy enables rule-based proxy selection that determines which proxy Microsoft Edge uses based on the destination URL and any other conditions you define.\n\nWhen this policy is configured, it takes precedence over proxy settings configured by the ProxySettings policy, the Edge.proxy extension API, and any manual user settings.\n\nIf this policy is disabled or not configured, existing proxy policies and user-defined settings continue to apply.\n\nWhen Edge selects a proxy, it evaluates entries in the ProxyOverrideRules policy in order. A rule is considered a match when all the following conditions are met:\n* At least one URL pattern in DestinationMatchers is matched.\n* No URL pattern in ExcludeDestinationMatchers is matched.\n* If Conditions is specified and non-empty, all conditions are satisfied.\n\nFor a matching rule, the value specified in ProxyList is used as the proxy. If no rule matches, proxy selection falls back to the settings defined by the ProxySettings policy.\n\nThe URL patterns supported by DestinationMatchers and ExcludeDestinationMatchers are documented at https://review.learn.microsoft.com/en-us/DeployEdge/configure-microsoft-edge-proxy-support?branch=pr-en-us-6681#proxy-config-url-patterns .\nEntries in ProxyList correspond to PAC-style proxy strings, such as:\n* DIRECT\n* PROXY host:port\n* HTTPS host:port\n* SOCKS4 host:port\n* SOCKS5 host:port\n\nAlternatively, URL-form proxy specifiers can be used, for example:\n* http://host :port\n* https://host :port\n* socks4://host:port\n* socks5://host:port\n\nThe first reachable proxy in the list is used. Invalid entries are ignored.\n\nThe Conditions field specifies conditions that must all be met for an override rule to be applied when selecting a proxy. If this field is not set, the rule is applied when at least one host in DestinationMatchers matches.\n\nThe DnsProbe condition checks whether the specified DNS Host can be resolved to an IP address. The host must include a hostname (for example, example.com) and can optionally include a scheme or port (for example, https://example.com, example.com:123, or https://example.com:123). When a secure scheme (for example, https) is specified, the DNS lookup may also request the HTTPS record (see RFC 9460).\n\nIf Result is set to resolved, the condition is met when resolution succeeds. If set to not_found, the condition is met only when resolution fails.","helpText":null,"infoUrls":[],"categoryId":"fe845e81-5993-4a65-b22a-decfc5928c65","categoryName":"Proxy server","options":null},"f83f72ecdbbbccdf":{"id":"com.microsoft.edge.mamedgeappconfigsettings.webappinstallforcelist","displayName":"Configure list of force-installed Web Apps","description":"Setting the policy specifies a list of web apps that install silently, without user interaction. Users can't turn off the policy or uninstall these web apps.\n\nEach list item of the policy is an object with a mandatory member:\nurl (the URL of the web app to install)\n\nand 6 optional members:\n- default_launch_container\n(for how the web app opens—a new tab is the default)\n\n- create_desktop_shortcut\n(True if you want to create Linux and\nMicrosoft Windows desktop shortcuts).\n\n- fallback_app_name\n(Starting with Microsoft Edge version 90,\nyou can permanently override the app name if it's not a Progressive Web App (PWA)\nor you can temporarily override the app name if authentication is required before\ninstallation can be completed. If both\ncustom_name and\nfallback_app_name are provided,\nthe latter is ignored.)\n\n- custom_name\n(Starting with Microsoft Edge version 112\non all desktop platforms, you can permanently override the app name for all\nweb apps and PWAs.)\n\n- custom_icon\n(Starting with Microsoft Edge version 112\non all desktop platforms, you can override the app icon of installed apps.\nThe icons have to be square, maximal 1 MB in size, and in one of the following formats:\njpeg, png, gif, webp, ico. The hash value has to be the SHA256 hash of the icon file.\nThe url should be accessible without authentication to\nensure that the icon can be used upon app installation.)\n\n- install_as_shortcut\n(Starting with Microsoft Edge\nversion 107). If enabled, the given url is installed as a shortcut,\nas if done via the \"Create Shortcut...\" option in the desktop browser GUI.\nWhen installed as a shortcut, it won't be updated if the manifest in url changes.\nIf disabled or unset, the web app at the given url is installed normally.\n(This isn't currently supported in Microsoft Edge.)\n\nThe 'WebAppInstallByUserEnabled' policy doesn't affect this policy. Web apps specified by this policy are installed regardless of the 'WebAppInstallByUserEnabled' policy setting.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"f82a6b3d03742a64":{"id":"device_vendor_msft_defender_configuration_behavioralnetworkblocks_remoteencryptionprotection_remoteencryptionprotectionmaxblocktime","displayName":"Remote Encryption Protection Max Block Time","description":"Set the maximum time an IP address is blocked by Remote Encryption Protection. After this time, blocked IP addresses will be able to reinitiate connections. If set to 0, internal feature logic will determine blocking time.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"f8b3084eb8e2ac64":{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslcurveorder","displayName":"ECC Curve Order","description":"This policy setting determines the priority order of ECC curves used with ECDHE cipher suites.\r\n\r\nIf you enable this policy setting, ECC curves are prioritized in the order specified.(Enter one Curve name per line)\r\n\r\nIf you disable or do not configure this policy setting, the default ECC curve order is used.\r\n\r\nDefault Curve Order\r\n============\r\ncurve25519\r\nNistP256\r\nNistP384\r\n\r\nTo See all the curves supported on the system, Use the following command:\r\n\r\nCertUtil.exe -DisplayEccCurve\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder#admx-ciphersuiteorder-sslcurveorder"],"categoryId":"86f46ebc-a93f-4a2b-b6e7-bab2ac95a3ae","categoryName":"SSL Configuration Settings","options":[{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslcurveorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_ciphersuiteorder_sslcurveorder_1","displayName":"Enabled","description":null,"helpText":null}]},"f871bfe9f086e132":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_idnmapping","displayName":"IDN mapping","description":"Specifies whether the DNS client should convert internationalized domain names (IDNs) to the Nameprep form, a canonical Unicode representation of the string.\r\n\r\nIf this policy setting is enabled, IDNs are converted to the Nameprep form.\r\n\r\nIf this policy setting is disabled, or if this policy setting is not configured, IDNs are not converted to the Nameprep form.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dnsclient#admx-dnsclient-dns-idnmapping"],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_idnmapping_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_idnmapping_1","displayName":"Enabled","description":null,"helpText":null}]},"f857ccff166a331d":{"id":"device_vendor_msft_policy_config_admx_eventforwarding_subscriptionmanager_subscriptionmanager_listbox","displayName":"SubscriptionManagers","description":null,"helpText":"","infoUrls":[],"categoryId":"c859dc1a-fdeb-4591-af97-79d078ee715b","categoryName":"Event Forwarding","options":null},"f812bde75239196f":{"id":"device_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_2","displayName":"Use localized subfolder names when redirecting Start Menu and My Documents","description":"This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Pictures, and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively.\r\n\r\nIf you enable this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use localized folder names for these subfolders when redirecting the Start Menu or legacy My Documents folder.\r\n\r\nIf you disable or not configure this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use the standard English names for these subfolders when redirecting the Start Menu or legacy My Documents folder.\r\n\r\nNote: This policy is valid only on Windows Vista, Windows 7, Windows 8, and Windows Server 2012 when it processes a legacy redirection policy already deployed for these folders in your existing localized environment.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-localizexprelativepaths-2"],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"device_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_2_1","displayName":"Enabled","description":null,"helpText":null}]},"f8c21f71665aaba6":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_signatureupdate_signatureupdatecatchupinterval_signatureupdate_signatureupdatecatchupinterval","displayName":"Define the number of days after which a catch-up security intelligence update is required","description":null,"helpText":"","infoUrls":[],"categoryId":"94b5c25e-3af3-4c08-b738-a0527f91dc22","categoryName":"Security Intelligence Updates","options":null},"f823a7a9ce5115c9":{"id":"device_vendor_msft_policy_config_admx_tpm_standarduserauthorizationfailuretotalthreshold_name_dxt_standarduserauthorizationfailuretotalthreshold_name","displayName":"Maximum number of authorization failures per duration:","description":null,"helpText":"","infoUrls":[],"categoryId":"24b30053-14d2-4430-9966-281e926a6918","categoryName":"Trusted Platform Module Services","options":null},"f8a1ff9819bcad3a":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013","displayName":"Microsoft Office 365 Outlook 2013","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Outlook 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Outlook 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365outlook2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013_1","displayName":"Enabled","description":null,"helpText":null}]},"f894db598a8006a3":{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthenticationpolicychange","displayName":"Audit Authentication Policy Change","description":"This policy setting allows you to audit events generated by changes to the authentication policy such as the following: Creation of forest and domain trusts. Modification of forest and domain trusts. Removal of forest and domain trusts. Changes to Kerberos policy under Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Kerberos Policy. Granting of any of the following user rights to a user or group: Access This Computer From the Network. Allow Logon Locally. Allow Logon Through Terminal Services. Logon as a Batch Job. Logon a Service. Namespace collision. For example, when a new trust has the same name as an existing namespace name. If you configure this policy setting, an audit event is generated when an attempt to change the authentication policy is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when the authentication policy is changed. Note: The security audit event is logged when the group policy is applied. It does not occur at the time when the settings are modified.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#policychange_auditauthenticationpolicychange"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthenticationpolicychange_0","displayName":"Off/None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthenticationpolicychange_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthenticationpolicychange_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_policychange_auditauthenticationpolicychange_3","displayName":"Success+Failure","description":"Success+Failure","helpText":null}]},"f8b15875f1535a4f":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_passwordmanagerblocklistdesc","displayName":"Configure the list of domains for which the Password Manager (Save and Fill) will be disabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":null},"f8758fc0a2aeac34":{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb","displayName":"Block untrusted and unsigned processes that run from USB","description":"With this rule, admins can prevent unsigned or untrusted scripts (such as VBScript, JavaScript) and executables (such as .exe, .dll, .scr files) from removable USB drives, including attached SD cards, from running.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_warn","displayName":"Warn","description":null,"helpText":null}]},"f8a5364dc322aff3":{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval","displayName":"Set App Installer Source Auto Update Interval In Minutes","description":"This policy controls the auto-update interval for package-based sources. The default source for Windows Package Manager is configured such that an index of the packages is cached on the local machine. The index is downloaded when a user invokes a command, and the interval has passed.\n\nIf you disable or do not configure this setting, the default interval or the value specified in the Windows Package Manager settings will be used.\n\nIf you enable this setting, the number of minutes specified will be used by the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-sourceautoupdateinterval"],"categoryId":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","categoryName":"Desktop App Installer","options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_1","displayName":"Enabled","description":null,"helpText":null}]},"f8cc20c89eb0408e":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile","displayName":"Prevent Login With Temp Profile","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nPrevent user login when a user receives a temporary Windows profile\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\PreventLoginWithTempProfile\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile_1","displayName":"Enabled","description":null,"helpText":null}]},"f8868a289deaefbc":{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2","displayName":"Second choice","description":"","helpText":"","infoUrls":[],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_","displayName":"","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},"f8a8c1063eed60f4":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\n\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\n\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\n\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowlessprivilegedsites"],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},"f888dd616f2c379f":{"id":"device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols","displayName":"Remove \"Run this time\" button for outdated ActiveX controls in Internet Explorer ","description":"This policy setting allows you to stop users from seeing the \"Run this time\" button and from running specific outdated ActiveX controls in Internet Explorer.\n\nIf you enable this policy setting, users won't see the \"Run this time\" button on the warning message that appears when Internet Explorer blocks an outdated ActiveX control.\n\nIf you disable or don't configure this policy setting, users will see the \"Run this time\" button on the warning message that appears when Internet Explorer blocks an outdated ActiveX control. Clicking this button lets the user run the outdated ActiveX control once.\n\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-removerunthistimebuttonforoutdatedactivexcontrols"],"categoryId":"4560c525-12a1-4536-9cca-338330e58389","categoryName":"Add-on Management","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"f89ade2bd6ccb998":{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay","displayName":"Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer","description":"Lets you display zoom in IE Mode tabs similar to how it was displayed in Internet Explorer, where the DPI scale of the display is factored in.\r\n\r\nFor example, if you have a page zoomed to 200% on a 100 DPI scale display and you change the display to 150 DPI, Microsoft Edge would still display the zoom as 200%. However, Internet Explorer factors in the DPI scale and displays 300%.\r\n\r\nIf you enable this policy, zoom values will be displayed with the DPI scale included for IE Mode tabs.\r\n\r\nIf you disable or don't configure this policy, zoom values will be displayed without DPI scale included for IE Mode tabs","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_1","displayName":"Enabled","description":null,"helpText":null}]},"f8030238a98b3cc1":{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_xsltenabled","displayName":"Control the availability of the XSLT feature","description":"Controls whether the XSLT feature (the XSLTProcessor JavaScript API and the XSL processing instruction) is available in Microsoft Edge.\r\n\r\nIf you enable this policy, XSLT is available regardless of the browser's default configuration.\r\n\r\nIf you disable this policy, XSLT is unavailable regardless of the browser's default configuration.\r\n\r\nIf you don't configure this policy, XSLT availability is determined by the browser's default configuration and any applicable field trials.\r\n\r\nThis policy is temporary and will be removed in a future version of Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_xsltenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge_xsltenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f8fbc1a1c6833233":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_navigationdelayforinitialsitelistdownloadtimeout","displayName":"Set a timeout for delay of tab navigation for the Enterprise Mode Site List: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f8f9d9e32086902a":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_excelexe141","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_excelexe141_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_excelexe141_1","displayName":"True","description":null,"helpText":null}]},"f8b0316a0627cf30":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar","displayName":"Information Bar","description":"Security Band","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_1","displayName":"Enabled","description":null,"helpText":null}]},"f8cdbe869e8dca65":{"id":"device_vendor_msft_policy_config_storage_configstoragesensecloudcontentdehydrationthreshold","displayName":"Config Storage Sense Cloud Content Dehydration Threshold","description":"When Storage Sense runs, it can dehydrate cloud-backed content that hasn’t been opened in a certain amount of days. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the minimum number of days a cloud-backed file can remain unopened before Storage Sense dehydrates it. Supported values are: 0–365. If you set this value to zero, Storage Sense will not dehydrate any cloud-backed content. The default value is 0, which never dehydrates cloud-backed content. If you disable or do not configure this policy setting, then Storage Sense will not dehydrate any cloud-backed content by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesensecloudcontentdehydrationthreshold"],"categoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","categoryName":"Storage","options":null},"f8ae4bca688e7808":{"id":"device_vendor_msft_policy_config_update_scheduledinstalltime","displayName":"Scheduled Install Time","description":"Note This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile EnterpriseEnables the IT admin to schedule the time of the update installation. The data type is a integer. Supported operations are Add, Delete, Get, and Replace. Supported values are 0-23, where 0 = 12 AM and 23 = 11 PM. The default value is 3.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstalltime"],"categoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","categoryName":"Windows Update For Business","options":null},"f82931162d240a13":{"id":"device_vendor_msft_policy_config_visualstudiov5~policy~visualstudio~installandupdatesettings_updatenotificationsoptout","displayName":"Disable update notifications in Visual Studio","description":"Allows an administrator to control the update notification in the Visual Studio IDE in specific situations.\r\n\r\nIf set to 0 (blocked) or missing entirely, update notifications will appear in the Visual Studio IDE whenever an update is detected.\r\n\r\nIf set to a 1, the update notification in the Visual Studio IDE will be suppressed for the Enterprise and Professional editions on the Release or LTSC channels, only if they are either receiving updates from a layout or if they are enrolled to receive Visual Studio Administrator Updates.\r\n\r\nFor more information, see https://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":[{"id":"device_vendor_msft_policy_config_visualstudiov5~policy~visualstudio~installandupdatesettings_updatenotificationsoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov5~policy~visualstudio~installandupdatesettings_updatenotificationsoptout_1","displayName":"Enabled","description":null,"helpText":null}]},"f825b7ca033be5cd":{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype","displayName":"Microsoft Defender for Endpoint client configuration package type","description":"Microsoft Defender for Endpoint endpoint detection and response capabilities provide advanced attack detections that are near real-time and actionable. Security analysts can prioritize alerts effectively, gain visibility into the full scope of a breach, and take response actions to remediate threats.","helpText":null,"infoUrls":[],"categoryId":"577d5951-fc56-4906-90bc-2c508c6611ad","categoryName":"Microsoft Defender for Endpoint","options":[{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype_autofromconnector","displayName":"Auto from connector","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype_onboard","displayName":"Onboard","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype_offboard","displayName":"Offboard","description":null,"helpText":null}]},"f855bf4baa7ea691":{"id":"intelligencesettings_forceondeviceonlytranslation","displayName":"Force On Device Only Translation","description":"If `true`, forces On-Device Only Translation.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_forceondeviceonlytranslation_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_forceondeviceonlytranslation_true","displayName":"True","description":null,"helpText":null}]},"f89fe8b075262d88":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings","displayName":"Configure RTSP Proxy (User)","description":"This policy setting allows you to specify the RTSP proxy settings for Windows Media Player.\r\n\r\nIf you enable this policy setting, select one of the following proxy types:\r\n\r\n- Autodetect: the proxy settings are automatically detected.\r\n- Custom: unique proxy settings are used.\r\n\r\nIf the Custom proxy type is selected, the rest of the options on the Setting tab must be specified; otherwise, the default settings are used. The options are ignored if Autodetect is selected.\r\n\r\nThe Configure button on the Network tab in the Player is not available and the protocol cannot be configured. If the \"Hide network tab\" policy setting is also enabled, the entire Network tab is hidden.\r\n\r\nIf you disable this policy setting, the RTSP proxy server cannot be used and users cannot change the RTSP proxy settings.\r\n\r\nIf you do not configure this policy setting, users can configure the RTSP proxy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-configurertspproxysettings"],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"f89b8bbaf7b9e750":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_policycodecupdate","displayName":"Prevent Codec Download (User)","description":"This policy setting allows you to prevent Windows Media Player from downloading codecs.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically downloading codecs to your computer. In addition, the Download codecs automatically check box on the Player tab in the Player is not available.\r\n\r\nIf you disable this policy setting, codecs are automatically downloaded and the Download codecs automatically check box is not available.\r\n\r\nIf you do not configure this policy setting, users can change the setting for the Download codecs automatically check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-policycodecupdate"],"categoryId":"2f85405a-7472-44ce-8c05-b59bb54912d5","categoryName":"Playback","options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_policycodecupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_policycodecupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"f841c3067fddf0a1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"f820fae1fd982f6c":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderKeyword specifies the keyword or shortcut used in the address bar to trigger the search for this provider.\r\n\r\nLeaving DefaultSearchProviderKeyword unset means no keyword activates the search provider.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_1","displayName":"Enabled","description":null,"helpText":null}]},"f80b044567b91f72":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled","displayName":"Enable RC4 cipher suites in TLS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f83077a16e995e2f":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings","displayName":"Settings for Help Me Write (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_0","displayName":"Allow Help Me Write and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_1","displayName":"Allow Help Me Write without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_2","displayName":"Do not allow Help Me Write.","description":null,"helpText":null}]},"f8c7218956707cbb":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments","displayName":"Comments (User)","description":"Determines how comments are displayed on the worksheet.","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_1","displayName":"Enabled","description":null,"helpText":null}]},"f8c27290f50f93fb":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},"f8ce6476f6afe41d":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804","displayName":"Launching applications and files in an IFRAME (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_1","displayName":"Prompt","description":null,"helpText":null}]},"f8b1281b2a1a1269":{"id":"user_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail.\n\nIf you enable this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail.\n\nIf you disable this policy setting, applications can use the MK protocol API. Resources hosted on the MK protocol will work for the File Explorer and Internet Explorer processes.\n\nIf you do not configure this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-mkprotocolsecurityrestrictioninternetexplorerprocesses"],"categoryId":"853d5a82-91e4-4c53-8338-fd1a3d9b542c","categoryName":"MK Protocol Security Restriction","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"f855f63150fcb1a1":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter","displayName":"Enable Google Cast (User)","description":"Enable this policy to enable Google Cast. Users will be able to launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\r\n\r\nDisable this policy to disable Google Cast.\r\n\r\nBy default, Google Cast is enabled.","helpText":"","infoUrls":[],"categoryId":"fddc444c-3591-4a50-865b-d8993b798e12","categoryName":"Cast","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_1","displayName":"Enabled","description":null,"helpText":null}]},"f8aef5d3a7939649":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended","displayName":"Configure default state of Allow extensions from other stores setting (User)","description":"This policy allows you to control the default state of the Allow extensions from other stores setting.\r\nThis policy can't be used to stop installation of extensions from other stores such as Chrome Web Store.\r\nTo stop installation of extensions from other stores, use the Extension Settings policy: https://go.microsoft.com/fwlink/?linkid=2187098.\r\n\r\nWhen enabled, Allow extensions from other stores will be turned on. So, users won't have to turn on the flag manually\r\nwhile installing extensions from other supported stores such as Chrome Web Store. However a user can override this setting.\r\nIf the user has already turned on the setting and then turned it off, this setting may not work.\r\nIf the Admin first sets the policy as Enabled, but then changes it to not configured or disabled, it will have no impact on\r\nuser settings and the setting will remain as it is.\r\n\r\nWhen disabled or not configured, the user can manage the Allow extensions from other store setting.","helpText":"","infoUrls":[],"categoryId":"b96b63eb-0292-4a73-85d7-c68d330c109e","categoryName":"Extensions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f89505e671391366":{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled","displayName":"Enable deprecated/removed Mutation Events (deprecated) (User)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy provides a temporary opt-in back to a deprecated and removed set of platform events named Mutation Events.\r\n\r\nIf you enable this policy, mutation events will continue to be fired, even if they've been disabled by default for normal web users.\r\n\r\nIf you disable or don't configure this policy, these events will not be fired.\r\n\r\nThis policy is a temporary workaround, and enterprises should still work to remove their dependencies on these mutation events.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f888cb373c02b19b":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceprofile_l_profilemapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"f815e784db05686d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc03_l_pathcolon246","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"f8b1ee72197f9ce1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_catalogrefreshperiod","displayName":"Catalog Refresh Period (User)","description":"This policy setting sets the apps for Office catalog refresh period, which is the amount of time (hours) Office waits between refreshes of the app catalogs. Refreshing the catalogs detects whether entitlements to any apps have expired.\r\n\r\nIf you enable this policy setting, set the number of hours to determine the length of the refresh period. Choose a value between 0 (always refresh) and 10,000.\r\n\r\nIf you disable or do not configure this policy setting, the catalog refresh period is set to the default 72 hours.","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_catalogrefreshperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_catalogrefreshperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"f8f49438ccc1aff8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_openofficedocumentsasreadwritewhilebrowsing","displayName":"Open Office documents as read/write while browsing (User)","description":"This policy setting controls whether users can edit and save Office 2016 documents on Web servers that they have opened using Internet Explorer.\r\n \r\nIf enable this policy setting, when users browse to an Office 2016 document on a Web server using Internet Explorer the appropriate application opens the file in read/write mode.\r\n\r\nIf you disable or do not configure this policy setting, when users browse to an Office 2016 document on a Web server using Internet Explorer, the appropriate application opens the file in read-only mode.","helpText":"","infoUrls":[],"categoryId":"0775f21c-9ca1-446d-b1dc-3cea45f15605","categoryName":"Files","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_openofficedocumentsasreadwritewhilebrowsing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_toolsoptionsgeneralweboptions~l_files_l_openofficedocumentsasreadwritewhilebrowsing_1","displayName":"Enabled","description":null,"helpText":null}]},"f87e8a7c46d3b66a":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_numberofdaysbeforewarningthatserveris_l_empty14","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":null},"f8edcdb7e1ac273d":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_calendarfolderhomepage_l_showassociatedwebpage42","displayName":"Show associated web page (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_calendarfolderhomepage_l_showassociatedwebpage42_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_calendarfolderhomepage_l_showassociatedwebpage42_1","displayName":"True","description":null,"helpText":null}]},"f87d3fdadcba880c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek","displayName":"Choose the first day of the week: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek_0","displayName":"Sunday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek_1","displayName":"Monday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek_4","displayName":"Thursday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek_5","displayName":"Friday","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_firstdayoftheweek_l_choosethefirstdayoftheweek_6","displayName":"Saturday","description":null,"helpText":null}]},"f85ba0aba46f43bc":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_disableinstallationprompts","displayName":"Prevent installation prompts when Windows Desktop Search component is not present (User)","description":"This policy setting allows you to prevent a dialog box from being shown when the Windows Desktop Search 4.0 or above system component is not present on the user's computer and removes the other links provided in Outlook to allow users to download the component. The new search functionality in Outlook requires Windows Desktop Search 4.0 or above.\r\n\r\nIf you enable this policy setting, the dialog box is not shown.\r\n\r\nIf you disable or do not configure this policy setting, the dialog box is shown when this system component is not present. Users are prompted with a dialog box when Outlook starts that explains how to download the system component to install on their computers. In addition, other links are provided by default in Outlook to allow users to download the system component. \r\n\r\nNote: If the required Windows system component is not available, the buttons in the Outlook Search ribbon tab will be disabled regardless of how this policy setting is configured.","helpText":"","infoUrls":[],"categoryId":"d0a1763a-5cdf-4672-8596-435ec1d94b54","categoryName":"Search Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_disableinstallationprompts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_searchoptions_l_disableinstallationprompts_1","displayName":"Enabled","description":null,"helpText":null}]},"f8066a3191ae8bdb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_enablescriptsinoneoffforms_v2","displayName":"Allow scripts in one-off Outlook forms (User)","description":"This policy setting controls whether scripts can run in Outlook forms in which the script and layout are contained within the message. \r\n\r\nIf you enable this policy setting, scripts can run in one-off Outlook forms. \r\n\r\nIf you disable or do not configure this policy setting, Outlook does not run scripts in forms in which the script and the layout are contained within the message. \r\n\r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_enablescriptsinoneoffforms_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_misccustomformsettings_l_enablescriptsinoneoffforms_v2_1","displayName":"Enabled","description":null,"helpText":null}]},"f8437e0ac4fac88c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2_l_oommeetingtaskrequest_setting","displayName":"Guard behavior: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","categoryName":"Security Form Settings","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2_l_oommeetingtaskrequest_setting_1","displayName":"Prompt User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2_l_oommeetingtaskrequest_setting_2","displayName":"Automatically Approve","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2_l_oommeetingtaskrequest_setting_0","displayName":"Automatically Deny","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_programmaticsettings_l_oommeetingtaskrequest_v2_l_oommeetingtaskrequest_setting_3","displayName":"Prompt user based on computer security","description":null,"helpText":null}]},"f874fe4d7052ee22":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjeditstototaltask","displayName":"Edits to total task % complete will be spread to the status date (User)","description":"Distributes the changes to total percent complete evenly across the schedule to the project status date (or to the current date if you haven't specified a project status date).\r\n\r\nIf you enable this setting, edits to total task percent complete are evenly distributed across the schedule up to the status date.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","categoryName":"Calculation options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjeditstototaltask_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalculation~l_pjcalcprojectfile_l_pjeditstototaltask_1","displayName":"Enabled","description":null,"helpText":null}]},"f8e08bd72c9b9d4e":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15","displayName":"Trusted Location #15 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc15_1","displayName":"Enabled","description":null,"helpText":null}]},"f8e685c50fff5450":{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_allowtexttobedraggedanddropped","displayName":"Allow text to be dragged and dropped (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_allowtexttobedraggedanddropped_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_puboptions~l_advanced_l_allowtexttobedraggedanddropped_1","displayName":"Enabled","description":null,"helpText":null}]},"f824b8e46a37c477":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_backgroundprinting","displayName":"Print in background (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_backgroundprinting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_backgroundprinting_1","displayName":"Enabled","description":null,"helpText":null}]},"f88ce86df100b68d":{"id":"vendor_msft_sharedpc_deletionpolicy","displayName":"Deletion Policy","description":"Configures when accounts will be deleted. Allowed values: 0 (delete immediately), 1 (delete at disk space threshold), 2 (Delete at disk space threshold and inactive threshold). If used, this value must be set before the action on the EnableSharedPCMode node is taken.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_deletionpolicy_0","displayName":"Delete immediately","description":"Delete immediately.","helpText":null},{"id":"vendor_msft_sharedpc_deletionpolicy_1","displayName":"Delete at disk space threshold","description":"Delete at disk space threshold","helpText":null},{"id":"vendor_msft_sharedpc_deletionpolicy_2","displayName":"Delete at disk space threshold and inactive threshold","description":"Delete at disk space threshold and inactive threshold","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/f9.json b/public/intune-definitions/f9.json new file mode 100644 index 000000000000..b12d6b34e9a8 --- /dev/null +++ b/public/intune-definitions/f9.json @@ -0,0 +1 @@ +{"f9de9f6461dce507":{"id":"com.apple.assetcache.managed_denytetheredcaching","displayName":"Deny Tethered Caching","description":"If true, disables tethered caching.","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":[{"id":"com.apple.assetcache.managed_denytetheredcaching_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.assetcache.managed_denytetheredcaching_true","displayName":"True","description":null,"helpText":null}]},"f9171699cf8ebd11":{"id":"com.apple.cellular_apns_item_allowedprotocolmaskinroaming","displayName":"Allowed Protocol Mask In Roaming","description":"The supported Internet Protocol versions while roaming. Available in iOS 10.3 and later.","helpText":null,"infoUrls":[],"categoryId":"5c722b3f-9d77-428a-b859-3fb556162cd6","categoryName":"Cellular","options":[{"id":"com.apple.cellular_apns_item_allowedprotocolmaskinroaming_0","displayName":"IPv4","description":null,"helpText":null},{"id":"com.apple.cellular_apns_item_allowedprotocolmaskinroaming_1","displayName":"IPv6","description":null,"helpText":null},{"id":"com.apple.cellular_apns_item_allowedprotocolmaskinroaming_2","displayName":"Both","description":null,"helpText":null}]},"f9b0e66e46f9eb3a":{"id":"com.apple.finder_prohibitburn","displayName":"Prohibit Burn","description":"If true, disables the Finder's burn support.","helpText":null,"infoUrls":[],"categoryId":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","categoryName":"Finder","options":[{"id":"com.apple.finder_prohibitburn_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.finder_prohibitburn_true","displayName":"True","description":null,"helpText":null}]},"f9e11addd14e0359":{"id":"com.apple.managedclient.preferences_definitionupdatesinterval","displayName":"Security intelligence update interval (in seconds)","description":"Specifies the time interval (in seconds) after which security intelligence updates will be checked.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/mac-preferences#security-intelligence-update-interval-in-seconds"],"categoryId":"93099bd4-c685-434b-9d72-f0cb6db5e753","categoryName":"Cloud delivered protection preferences","options":null},"f993e9bf893f9b45":{"id":"com.apple.managedclient.preferences_overridesecurityrestrictionsoninsecureorigin","displayName":"Control where security restrictions on insecure origins apply","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*.contoso.com\") for which security restrictions on insecure origins don't apply.\n\nThis policy allows you to specify permitted origins for legacy applications that cannot deploy TLS or for internal web development staging servers. It enables developers to test features requiring secure contexts without the need to configure TLS on the staging server. Patterns are only accepted for hostnames; URLs or origins with schemes must be exact matches. This policy also prevents the origin from being labeled \"Not Secure\" in the omnibox.\n\nSetting a list of URLs in this policy has the same effect as setting the command-line flag '--unsafely-treat-insecure-origin-as-secure' to a comma-separated list of the same URLs. If you enable this policy, it overrides the command-line flag.\n\nFor more information on secure contexts, see https://www.w3.org/TR/secure-contexts/.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#overridesecurityrestrictionsoninsecureorigin"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"f99ab7335f3a1143":{"id":"com.apple.mcxmenuextras_volume.menu","displayName":"Volume","description":"If true, enables the Volume menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_volume.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_volume.menu_true","displayName":"True","description":null,"helpText":null}]},"f9db0ca26254584f":{"id":"com.apple.mcxmenuextras_vpn.menu","displayName":"VPN","description":"If true, enables the VPN menu extra.","helpText":null,"infoUrls":[],"categoryId":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","categoryName":"Managed Menu Extras","options":[{"id":"com.apple.mcxmenuextras_vpn.menu_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.mcxmenuextras_vpn.menu_true","displayName":"True","description":null,"helpText":null}]},"f9ee852b0da8b953":{"id":"device_vendor_msft_keyboardfilter_disablekeyboardfilterforadministrators","displayName":"Disable Keyboard Filter For Administrators (Windows Insiders only)","description":"Determines if Keyboard Filter should be disabled for administrators. Defaults to false. If an admin is currently signed in when this value is set, it will take effect on the next sign-in. \r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/KeyboardFilter-csp/"],"categoryId":"717b634f-72a6-44f6-92c5-e1397bb10f40","categoryName":"Keyboard Filter","options":[{"id":"device_vendor_msft_keyboardfilter_disablekeyboardfilterforadministrators_false","displayName":"Blocked keys and scancodes are blocked for Administrators","description":"Blocked keys and scancodes are blocked for Administrators","helpText":null},{"id":"device_vendor_msft_keyboardfilter_disablekeyboardfilterforadministrators_true","displayName":"Blocked keys and scancodes are not blocked for Administrators","description":"Blocked keys and scancodes are not blocked for Administrators","helpText":null}]},"f9d1d55c8b84d513":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_3","displayName":"Control the location of the log file","description":"This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators.\r\n\r\nIf you enable this policy setting, the Event Log uses the path specified in this policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\\System32\\winevt\\Logs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eventlog#admx-eventlog-channel-logfilepath-3"],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":[{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_logfilepath_3_1","displayName":"Enabled","description":null,"helpText":null}]},"f95c87ca445cd320":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_sysvolsharecompatibilitymode","displayName":"Set SYSVOL share compatibility","description":"This policy setting controls whether or not the SYSVOL share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing semantics with earlier applications.\r\n\r\nWhen this setting is enabled, the SYSVOL share will honor file sharing semantics that grant requests for exclusive read access to files on the share even when the caller has only read permission.\r\n\r\nWhen this setting is disabled or not configured, the SYSVOL share will grant shared read access to files on the share when exclusive access is requested and the caller has only read permission.\r\n\r\nBy default, the SYSVOL share will grant shared read access to files on the share when exclusive access is requested.\r\n\r\nNote: The SYSVOL share is a share created by the Net Logon service for use by Group Policy clients in the domain. The default behavior of the SYSVOL share ensures that no application with only read permission to files on the sysvol share can lock the files by requesting exclusive read access, which might prevent Group Policy settings from being updated on clients in the domain. When this setting is enabled, an application that relies on the ability to lock files on the SYSVOL share with only read permission will be able to deny Group Policy clients from reading the files, and in general the availability of the SYSVOL share on the domain will be decreased.\r\n\r\nIf you enable this policy setting, domain administrators should ensure that the only applications using the exclusive read capability in the domain are those approved by the administrator.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-sysvolsharecompatibilitymode"],"categoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","categoryName":"Net Logon","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_sysvolsharecompatibilitymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_sysvolsharecompatibilitymode_1","displayName":"Enabled","description":null,"helpText":null}]},"f99a824629e793ec":{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle","displayName":"Interval:","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_0","displayName":"Continuous","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_10","displayName":"10 Minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_30","displayName":"30 Minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_60","displayName":"1 Hour","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_240","displayName":"4 Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_480","displayName":"8 Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_720","displayName":"12 Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_1440","displayName":"1 Day","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_2880","displayName":"2 Days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_4320","displayName":"3 Days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_5760","displayName":"4 Days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_7200","displayName":"5 Days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_8640","displayName":"6 Days","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_10080","displayName":"1 Week","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_20160","displayName":"2 Weeks","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_30240","displayName":"3 Weeks","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_40320","displayName":"4 Weeks","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_50400","displayName":"5 Weeks","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_60480","displayName":"6 Weeks","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_70560","displayName":"7 Weeks","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing2_pruninginterval_pruningintervaltitle_4294967295","displayName":"Infinite","description":null,"helpText":null}]},"f9798938698058f8":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup","displayName":"Publisher 2016 backup only","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Publisher 2016.\r\nMicrosoft Publisher 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Publisher 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Publisher 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016publisherbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"f923a370f030b385":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilesupportenabled","displayName":"Enable the creation of roaming copies for Google Chrome profile data","description":"If you enable this setting, the settings stored in Google Chrome profiles like bookmarks, autofill data, passwords, etc. will also be written to a file stored in the Roaming user profile folder or a location specified by the Administrator through the RoamingProfileLocation policy. Enabling this policy disables cloud sync.\r\n\r\nIf this policy is disabled or left not set only the regular local profiles will be used.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilesupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilesupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f950abe56ab83ea3":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar","displayName":"Show the Google Cast toolbar icon","description":"Setting the policy to Enabled displays the Cast toolbar icon on the toolbar or the overflow menu, and users can't remove it.\r\n\r\nSetting the policy to Disabled or leaving it unset lets users pin or remove the icon through its contextual menu.\r\n\r\nIf the policy EnableMediaRouter is set to Disabled, then this policy's value has no effect, and the toolbar icon doesn't appear.","helpText":"","infoUrls":[],"categoryId":"f7486553-9e63-4d63-9423-56e5ffe48700","categoryName":"Google Cast","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},"f9aebc5264c0efd5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc","displayName":"Block Window Management permission on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"f9b6c295424f831e":{"id":"device_vendor_msft_policy_config_errorreporting_displayerrornotification","displayName":"Display Error Notification","description":"This policy setting controls whether users are shown an error dialog box that lets them report an error.\n\nIf you enable this policy setting, users are notified in a dialog box that an error has occurred, and can display more details about the error. If the Configure Error Reporting policy setting is also enabled, the user can also report the error.\n\nIf you disable this policy setting, users are not notified that errors have occurred. If the Configure Error Reporting policy setting is also enabled, errors are reported, but users receive no notification. Disabling this policy setting is useful for servers that do not have interactive users.\n\nIf you do not configure this policy setting, users can change this setting in Control Panel, which is set to enable notification by default on computers that are running Windows XP Personal Edition and Windows XP Professional Edition, and disable notification by default on computers that are running Windows Server.\n\nSee also the Configure Error Reporting policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-displayerrornotification"],"categoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","categoryName":"Windows Error Reporting","options":[{"id":"device_vendor_msft_policy_config_errorreporting_displayerrornotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_displayerrornotification_1","displayName":"Enabled","description":null,"helpText":null}]},"f9af91e26f6fd51d":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations","displayName":"CCD Locations","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nCCDLocations are formatted using a type, name and a connectionString separated using a ; as the delimiter. The type will accept either smb or azure. The name is a free-form field used to describe the location. The connectionString for smb type must include the full UNC path to the file share. The connectionString for azure type should be secured as per the documentation (https://aka.ms/fslogix). The strings are case sensitive.\r\n\r\n- CCDLocations using SMB: type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=smb,name=\"SMB Share 2\"connectionString=\\\\\\\r\n\r\n- CCDLocations using Azure (secure): type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=azure,name=\"Azure Blob 1\",connectionString=\"|fslogix/stgacct1-connectionstring|\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CCDLocations\r\nType: REG_SZ","helpText":"","infoUrls":[],"categoryId":"719595d8-ab5d-4418-88aa-8cd55c2964ba","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},"f942092646f01d7b":{"id":"device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning","displayName":"Turn on certificate address mismatch warning","description":"This policy setting allows you to turn on the certificate address mismatch security warning. When this policy setting is turned on, the user is warned when visiting Secure HTTP (HTTPS) websites that present certificates issued for a different website address. This warning helps prevent spoofing attacks.\n\nIf you enable this policy setting, the certificate address mismatch warning always appears.\n\nIf you disable or do not configure this policy setting, the user can choose whether the certificate address mismatch warning appears (by using the Advanced page in the Internet Control panel).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowcertificateaddressmismatchwarning"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_1","displayName":"Enabled","description":null,"helpText":null}]},"f995016feea6870b":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102","displayName":"Allow script-initiated windows without size or position constraints","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_3","displayName":"Disable","description":null,"helpText":null}]},"f9b9822e32128a67":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing","displayName":"Disable automatic upload of sign-in failure logs","description":"\r\nUploads the sign-in failure logs to the Microsoft Lync Server automatically for analysis. No logs will be automatically uploaded if sign-in is successful.\r\n\r\nIf this policy is not configured, then the following happens: \r\nFor Lync Online Users: Sign-in failure logs are automatically uploaded.\r\nFor Lync On-Premise Users: A confirmation seeking consent from the user is shown before upload.\r\n\r\nWhen this is disabled, sign-in logs would be uploaded to the Microsoft Lync Server for both Lync On-Premise and Online users automatically.\r\n\r\nWhen this is enabled, sign-in logs will never be uploaded automatically.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1","displayName":"Enabled","description":null,"helpText":null}]},"f9bcf485ca5cab7a":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir","displayName":"Set disk cache directory","description":"Configures the directory to use to store cached files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified the '--disk-cache-dir' flag. To avoid data loss or other unexpected errors, don't configure this policy to a volume's root directory or to a directory used for other purposes, because Microsoft Edge manages its contents.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables you can use when specifying directories and paths.\r\n\r\nIf you don't configure this policy, the default cache directory is used, and users can override that default with the '--disk-cache-dir' command line flag.\r\n\r\nExample value: ${user_home}/Edge_cache","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_1","displayName":"Enabled","description":null,"helpText":null}]},"f94415040ec30bf8":{"id":"device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled","displayName":"Enable Application Bound Encryption","description":"Enabling this policy or leaving it unset binds the encryption keys used for local data storage to Microsoft Edge whenever possible.\r\n\r\nDisabling this policy has a detrimental effect on Microsoft Edge's security because unknown and potentially hostile apps can retrieve the encryption keys used to secure data.\r\n\r\nOnly turn off this policy if there are compatibility issues, such as scenarios where other applications need legitimate access to Microsoft Edge's data. Encrypted user data is expected to be fully portable between different computers or the integrity and location of Microsoft Edge's executable files isn’t consistent.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f95bda707d0da47f":{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_insecureprivatenetworkrequestsallowedforurlsdesc","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"43057320-7058-46d5-86f9-a56c80bbf8b9","categoryName":"Private Network Request Settings","options":null},"f9d022c29b9f4171":{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform","displayName":"Configure Moving Platform","description":"This policy controls the behavior of moving platform feature on HoloLens 2, that is, whether it’s turned off / on or it can be toggled by a user. It should only be used by customers who intend to use HoloLens 2 in moving environments with low dynamic motion. Please refer to HoloLens 2 Moving Platform Mode for background information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#configuremovingplatform"],"categoryId":"f10138ba-123a-43bc-8031-4458ba327374","categoryName":"Mixed Reality","options":[{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform_0","displayName":"Last set user's preference. Initial state is OFF and after that user's preference is persisted across reboots and is used to initialize the system.","description":"Last set user's preference. Initial state is OFF and after that user's preference is persisted across reboots and is used to initialize the system.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform_1","displayName":"Moving platform is disabled and cannot be changed by user.","description":"Moving platform is disabled and cannot be changed by user.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform_2","displayName":"Moving platform is enabled and cannot be changed by user.","description":"Moving platform is enabled and cannot be changed by user.","helpText":null}]},"f9c1690878890b65":{"id":"device_vendor_msft_policy_config_networkisolation_enterprisenetworkdomainnames","displayName":"Enterprise Network Domain Names","description":"This is the list of domains that comprise the boundaries of the enterprise. Data from one of these domains that is sent to a device will be considered enterprise data and protected These locations will be considered a safe destination for enterprise data to be shared to. This is a comma-separated list of domains, for example contoso. sharepoint. com, Fabrikam. com. Note The client requires domain name to be canonical, otherwise the setting will be rejected by the client.  Here are the steps to create canonical domain names:Transform the ASCII characters (A-Z only) to lower case. For example, Microsoft. COM -> microsoft. com. Call IdnToAscii with IDN_USE_STD3_ASCII_RULES as the flags. Call IdnToUnicode with no flags set (dwFlags = 0).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterprisenetworkdomainnames"],"categoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","categoryName":"Network Isolation","options":null},"f987769bd6b96241":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockknownfoldermove","displayName":"Prevent users from moving their Windows known folders to OneDrive","description":"This setting prevents users from moving their Documents, Pictures, and Desktop folders to any OneDrive for Business account.\r\nNote: Moving known folders to personal OneDrive accounts is already blocked on domain-joined PCs.\r\n\r\nIf you enable this setting, users won't be prompted with the \"Set up protection of important folders\" window, and the \"Start protection\" command will be disabled. If the user has already moved their known folders, the files in those folders will remain in OneDrive. This setting will not take effect if you enable \"Prompt users to move Windows known folders to OneDrive\" or \"Silently move Windows known folders to OneDrive.\"\r\n\r\nIf you disable or do not configure this setting, users can choose to move their known folders.","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockknownfoldermove_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockknownfoldermove_1","displayName":"Enabled","description":null,"helpText":null}]},"f911467b6ea2e4b8":{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_forcedenytheseapps","displayName":"Let Apps Access Call History Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"f9cf893edcd90394":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgazeinput_userincontroloftheseapps","displayName":"Let Apps Access Gaze Input User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the eye tracker privacy setting for the listed apps. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgazeinput_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"f9bbb5c4a0663edb":{"id":"mathsettings_calculator_inputmodes","displayName":"Input Modes","description":"If present, controls global input options of the calculator. If not present, all input modes are enabled.","helpText":null,"infoUrls":[],"categoryId":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","categoryName":"Math Settings","options":null},"f9b16e71608c06fd":{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindocuments","displayName":"Documents (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"45d15759-2add-40db-9294-d1b391515dba","categoryName":"Folder Redirection","options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindocuments_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindocuments_1","displayName":"True","description":null,"helpText":null}]},"f905228e7e493c93":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewcontextmenu","displayName":"Remove File Explorer's default context menu (User)","description":"Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item.\r\n\r\nIf you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noviewcontextmenu"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewcontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewcontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},"f98cbcd1ebebf587":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_policydictionarymultiplesourcemergelistdesc","displayName":"Allow merging dictionary policies from different sources (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"f9761bad0735692e":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_l_setmaximumnumberoftrusteddocumentsspinid","displayName":"Maximum number: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":null},"f91209e11c0e955b":{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"f91efd04d4c3ea53":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},"f9fb5f2e06ea0cf8":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer","displayName":"Send all intranet sites to Internet Explorer (User)","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"f9bc1f48e04de37e":{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled","displayName":"Super Drag Drop Enabled (User)","description":"This policy lets you configure the Super Drag Drop feature in Microsoft Edge.\r\n\r\nWith this feature, users can drag a link or text from a webpage and drop it onto the same page. They can then either open the URL in a new tab or search the text using the default search engine.\r\n\r\nIf you enable or don't configure this policy, you can use the Super Drag Drop feature on Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Super Drag Drop feature in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f951a79fbf684fb7":{"id":"user_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_scarewareblockerallowlistdomainsdesc","displayName":"Configure the list of domains where Microsoft Edge scareware blocker won't run (User)","description":"","helpText":"","infoUrls":[],"categoryId":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","categoryName":"Scareware Blocker settings","options":null},"f970edebe4642559":{"id":"user_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_allowtokenbindingforurlsdesc","displayName":"Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with. (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"f95c4b7c45a3ec8c":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended_managedsearchengines","displayName":"Manage Search Engines (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":null},"f91e03081bc3f177":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended","displayName":"Enable the default search provider (User)","description":"Enables the ability to use a default search provider.\r\n\r\nIf you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn't a URL).\r\n\r\nYou can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured) or configured incorrectly, the user can choose the default provider.\r\n\r\nIf you disable this policy, the user can't search from the address bar.\r\n\r\nIf you enable or disable this policy, users can't change or override it.\r\n\r\nIf you don't configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"f99a02d1ecec4cc2":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_edgeshoppingassistantenabled","displayName":"Shopping in Microsoft Edge Enabled (User)","description":"This policy lets users compare the prices of a product they are looking at, get coupons from the website they're on, or auto-apply coupons during checkout.\r\n\r\nIf you enable or don't configure this policy, shopping features such as price comparison and coupons will be automatically applied for retail domains. Coupons for the current retailer and prices from other retailers will be fetched from a server.\r\n\r\nIf you disable this policy shopping features such as price comparison and coupons will not be automatically found for retail domains.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_edgeshoppingassistantenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_edgeshoppingassistantenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"f997e7b2193a6727":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabadreplaceworkfax_l_workfaxadreplace","displayName":"AD Attribute: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"f9feb96c4f4b1f2e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_downloadingframeworkcomponents_l_setdownloadlocationfornet20framework_l_empty434","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"bc633a5a-c712-49a6-9f56-775ca9321df4","categoryName":"Downloading Framework Components","options":null},"f91ed8ffa649bcf4":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy5","displayName":"Places Bar Location 5 (User)","description":"This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template.","helpText":"","infoUrls":[],"categoryId":"4a832199-a841-4b6a-84fa-51365902a742","categoryName":"Places Bar Locations","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy5_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_fileopensave~l_placesbarlocations_l_placesbarlocationpolicy5_1","displayName":"Enabled","description":null,"helpText":null}]},"f91d42ba81f581ea":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_opendocumentsfromofficedocumentcachefirst","displayName":"Open documents from Office Document Cache first (User)","description":"This policy setting allows the client application to open a document directly from the Office Document Cache if it is aware that the server the document resides on is not reachable. It may be useful in situations where you would like to wait to contact the server every time, time out and then fallback to the cache. \r\n\r\nIf you enable or do not configure this policy setting, documents will be opened directly from the Office Document Cache when the server the document resides on is not reachable. \r\n\r\nIf you disable this policy setting, Office will always attempt to first reach the server the document resides on before opening it from the Office Document Cache.","helpText":"","infoUrls":[],"categoryId":"2d6891a4-ee83-4e55-8e23-09513e1306e4","categoryName":"Microsoft Office Document Cache","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_opendocumentsfromofficedocumentcachefirst_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_microsoftofficedocumentcache_l_opendocumentsfromofficedocumentcachefirst_1","displayName":"Enabled","description":null,"helpText":null}]},"f9f39af930549e15":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_microsoftofficeshareddrawingcodeformeta","displayName":"Disable Microsoft Office shared drawing code for metafile rendering (User)","description":"Disables nearly all EMF's and WMF's will no longer be converted at runtime to be anti-aliased. Examples of EMF/WMF's that would remain \"aliased\" are: clipart, OLE object placeholders, any user inserted EMF/WMF image, etc. Any EMF/WMF containing text would be an exception to this and would be still getting anti-aliased.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_microsoftofficeshareddrawingcodeformeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437_l_microsoftofficeshareddrawingcodeformeta_1","displayName":"Enabled","description":null,"helpText":null}]},"f9c61e34cc40d65d":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_suppresshyperlinkwarnings","displayName":"Suppress hyperlink warnings (User)","description":"This policy setting controls whether Office 2016 applications notify users about unsafe hyperlinks. Links that Office 2016 considers unsafe include links to executable files, TIFF files, and Microsoft Document Imaging (MDI) files. Other unsafe links are those that use protocols considered to be unsafe such as javascript. \r\n\r\nIf you enable this policy setting, unsafe hyperlink warnings are suppressed for all users. \r\n\r\nIf you disable or do not configure this policy setting, hyperlink warnings cannot be suppressed by any means. Office 2016 users will be notified that links are unsafe and must enable them manually to use them.","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_suppresshyperlinkwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_suppresshyperlinkwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},"f9c97fccaa832de9":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_addpropertiestoattachmentstoenablereplywithchanges","displayName":"Add properties to attachments to enable Reply with Changes (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_addpropertiestoattachmentstoenablereplywithchanges_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_addpropertiestoattachmentstoenablereplywithchanges_1","displayName":"Enabled","description":null,"helpText":null}]},"f9329863790e8429":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_outlookrichtextoptions","displayName":"Outlook Rich Text options (User)","description":"This policy setting controls how Outlook sends Rich Text Format (RTF) messages to Internet recipients.\r\n\r\nIf you enable this policy setting, you may choose from the following for handling RTF messages addressed to recipients on the Internet:\r\n* Convert to Plain Text format - Outlook converts the message to plain text format in the default character set. Any message formatting will be lost.\r\n\r\nIf you disable or do not configure this policy setting, Outlook automatically converts RTF formatted messages that are sent over the Internet to HTML format, so that the message formatting is maintained and attachments are received.","helpText":"","infoUrls":[],"categoryId":"db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","categoryName":"Internet Formatting","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_outlookrichtextoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_mailformat~l_internetformatting_l_outlookrichtextoptions_1","displayName":"Enabled","description":null,"helpText":null}]},"f98bdca0400ce1b9":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_allowattendeestoproposenewtimesformeetingsyouorganize","displayName":"Allow attendees to propose new times for meetings you organize (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_allowattendeestoproposenewtimesformeetingsyouorganize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_allowattendeestoproposenewtimesformeetingsyouorganize_1","displayName":"Enabled","description":null,"helpText":null}]},"f97e5a6ce893a3d1":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosafesenderslist","displayName":"Specify path to Safe Senders list (User)","description":"Specify a text file containing a list of e-mail addresses to append to or overwrite the Safe Senders list (depending on the policy \"Overwrite or Append Junk Mail Import List\").","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosafesenderslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtosafesenderslist_1","displayName":"Enabled","description":null,"helpText":null}]},"f9da7cc33f47af86":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_useprotectedviewforattachmentsreceivedfrominternalsenders","displayName":"Use Protected View for attachments received from internal senders (User)","description":"This policy setting allows you to determine if attachments received from senders within your organization open in Protected View. This setting only applies to Outlook accounts setup to use an Exchange server.\r\n\r\nIf you enable this policy setting, attachments received from senders within your organization open in Protected View.\r\n\r\nIf you disable or do not configure this policy setting, attachments received from senders within your organization do not open in Protected View.","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_useprotectedviewforattachmentsreceivedfrominternalsenders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_useprotectedviewforattachmentsreceivedfrominternalsenders_1","displayName":"Enabled","description":null,"helpText":null}]},"f98f45e3768398bb":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_level2addfilepolicy_l_additionalextensions23","displayName":"Additional Extensions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":null},"f9f95fe3df69c4ba":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_overridepublishedsyncinteral","displayName":"Override published sync interval (User)","description":"By default, Outlook follows the sync interval specified by the Internet Calendar publisher and Internet Calendar subscriptions will not be sync'd more often than allowed by the Internet Calendar publisher. This setting allows you to prevent users from overriding the sync interval published by Internet Calendar publishers.","helpText":"","infoUrls":[],"categoryId":"060e7533-6c2f-4ed1-9173-f3de58de4bed","categoryName":"Internet Calendars","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_overridepublishedsyncinteral_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_webcalsubscriptions_l_overridepublishedsyncinteral_1","displayName":"Enabled","description":null,"helpText":null}]},"f925181895fc8b74":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_webaddressppt","displayName":"File tab | Options | Customize Ribbon | All Commands | Address (User)","description":"","helpText":"","infoUrls":[],"categoryId":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_webaddressppt_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_webaddressppt_1","displayName":"True","description":null,"helpText":null}]},"f9fad116930c5f73":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtaskseffort","displayName":"New tasks are effort driven (User)","description":"This policy setting specifies that new tasks are scheduled such that the work on the task remains constant as you add or remove assignments.\r\n\r\nIf you enable this policy setting, new tasks will be effort-driven.\r\n\r\nIf you disable or do not configure this policy setting, new tasks will not be effort-driven.","helpText":"","infoUrls":[],"categoryId":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","categoryName":"Scheduling options for 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtaskseffort_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjschedule~l_pjscheddoc_l_pjnewtaskseffort_1","displayName":"Enabled","description":null,"helpText":null}]},"f9ebe0ec54984f4d":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_donotshowminitoolbaronselectionoftext","displayName":"Do not show Mini Toolbar on selection of text (User)","description":"This policy setting allows you to configure the Mini Toolbar on selection of text.\r\n\r\nIf you enable this policy setting, the Mini Toolbar is not shown on selection.\r\n\r\nIf you disable or do not configure this policy setting, the Mini Toolbar is shown on selection.","helpText":"","infoUrls":[],"categoryId":"a7d55d90-e1d1-4577-8bfd-fe2641bce461","categoryName":"User Interface Options","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_donotshowminitoolbaronselectionoftext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_general~l_userinterfaceoptions_l_donotshowminitoolbaronselectionoftext_1","displayName":"Enabled","description":null,"helpText":null}]},"f9bf9d9cc002dd1d":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_advanced_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"83087772-6560-4488-a1c5-bb6e4889e868","categoryName":"Advanced","options":null},"f97f5628a10735bd":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correcttwoinitialcapitals","displayName":"Correct TWo INitial CApitals (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e95db55a-8337-416d-a61f-e60f55cc0d13","categoryName":"AutoCorrect","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correcttwoinitialcapitals_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autocorrect_l_correcttwoinitialcapitals_1","displayName":"Enabled","description":null,"helpText":null}]},"f99034cd990325ce":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_formatbeginningoflistitemliketheonebeforeit","displayName":"Format beginning of list item like the one before it (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"e8ce968b-91cb-4301-ba98-b37d42bc5213","categoryName":"Automatically as you type","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_formatbeginningoflistitemliketheonebeforeit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_proofing~l_autoformatasyoutype~l_automaticallyasyoutype_l_formatbeginningoflistitemliketheonebeforeit_1","displayName":"Enabled","description":null,"helpText":null}]},"f96383eb93ed03fb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_l_word2003binarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_l_word2003binarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_l_word2003binarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_l_word2003binarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_l_word2003binarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2003binarydocumentsandtemplates_l_word2003binarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"f9e48cf30c719de8":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders95","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders95_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders95_1","displayName":"True","description":null,"helpText":null}]},"f96fa428acb25f67":{"id":"vendor_msft_firewall_mdmstore_global_opportunisticallymatchauthsetperkm","displayName":"Opportunistically Match Auth Set Per KM","description":"This value is used as an on/off switch. When this option is false, keying modules MUST ignore the entire authentication set if they do not support all of the authentication suites specified in the set. When this option is true, keying modules MUST ignore only the authentication suites that they don’t support. For schema versions 0x0200, 0x0201, and 0x020A, this value is invalid and MUST NOT be used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_global_opportunisticallymatchauthsetperkm_false","displayName":"False","description":"FALSE","helpText":null},{"id":"vendor_msft_firewall_mdmstore_global_opportunisticallymatchauthsetperkm_true","displayName":"True","description":"TRUE","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/fa.json b/public/intune-definitions/fa.json new file mode 100644 index 000000000000..28a027b12ece --- /dev/null +++ b/public/intune-definitions/fa.json @@ -0,0 +1 @@ +{"faa4c8653d79d0ae":{"id":"com.apple.applicationaccess_allowcloudbookmarks","displayName":"Allow Cloud Bookmarks","description":"If false, disables iCloud Bookmark sync. Available in macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudbookmarks_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudbookmarks_true","displayName":"True","description":null,"helpText":null}]},"fa56dfc744a6bac2":{"id":"com.apple.extensiblesso_extensionidentifier","displayName":"Extension Identifier","description":"The bundle identifier of the app extension that performs SSO for the specified URLs.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"fa1eb48c6deb0d1a":{"id":"com.apple.extensiblesso_platformsso","displayName":"Platform SSO","description":"This is the dictionary used to configure PlatformSSO.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"fa2467b8e03ebdf8":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname","displayName":"Channel Name (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":[{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname_0","displayName":"Current Channel","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname_1","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname_2","displayName":"Beta Channel","description":null,"helpText":null}]},"fa96c6d1eb173360":{"id":"com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service","description":"In Microsoft Edge, the Experimentation and Configuration Service is used to deploy Experimentation and Configuration payload.\n\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\n\nConfiguration payload consists of a list of settings that Microsoft wants to deploy to Microsoft Edge to optimize user experience. For example, configuration payload may specify how often Microsoft Edge sends requests to the Experimentation and Configuration Service to retrieve the newest payload.\n\nIf you set this policy to \"Retrieve configurations and experiments\" mode, the full payload is downloaded from the Experimentation and Configuration Service. This includes both the experimentation and configuration payloads.\n\nIf you set this policy to \"Retrieve configurations only\" mode, only the configuration payload is delivered.\n\nIf you set this policy to \"Disable communication with the Experimentation and Configuration Service\" mode, the communication with the Experimentation and Configuration Service is stopped completely.\n\nIf you don't configure this policy, on a managed device on Stable and Beta channels the behavior is the same as the \"Retrieve configurations only\" mode.\n\nIf you don't configure this policy, on an unmanaged device the behavior is the same as the \"Retrieve configurations and experiments\" mode.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#experimentationandconfigurationservicecontrol"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol_0","displayName":"Retrieve configurations and experiments","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol_1","displayName":"Retrieve configurations only","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol_2","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null}]},"fa5d35453c367398":{"id":"com.apple.managedclient.preferences_switchintranetsitestoworkprofile","displayName":"Switch intranet sites to a work or school profile","description":"Allows Microsoft Edge to switch to the appropriate profile when Microsoft Edge detects that a URL is the intranet.\n\nIf you enable or don't configure this policy, navigations to intranet URLs will switch to the most recently used work or school profile if one exists.\n\nIf you disable this policy, navigations to intranet URLs will remain in the current browser profile.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#switchintranetsitestoworkprofile"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_switchintranetsitestoworkprofile_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_switchintranetsitestoworkprofile_true","displayName":"Enabled","description":null,"helpText":null}]},"fa7f9cedb0f954d1":{"id":"com.apple.managedclient.preferences_updatedeadline.finalcountdown","displayName":"Number of minutes for the final countdown timer","description":"Specify the number of minutes for the forced deadline countdown timer. The allowed range is 10 - 720 minutes (12 hours). The default is 60 minutes.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline"],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"fa7213dc70ce014f":{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbarworksearchresultsenabled","displayName":"Enable Work Search suggestions in the address bar","description":"Enables the display of relevant workplace suggestions in the address bar’s suggestion dropdown when users type a query in the address bar.\n\nIf this policy is enabled or not configured, users can view internal work-related suggestions, such as bookmarks, files, and people results powered by Microsoft 365, in the Microsoft Edge address bar suggestion dropdown. To access these results, users must be signed into Microsoft Edge with their Entra ID account associated with that organization.\n\nIf this policy is disabled, users can't see internal workplace results in the Microsoft Edge address bar suggestion dropdown.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbarworksearchresultsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.addressbarworksearchresultsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fa1c316358b7a5a3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed","displayName":"Allow unconfigured sites to be reloaded in Internet Explorer mode","description":"This policy allows users to reload unconfigured sites (ones that aren't configured in the Enterprise Mode Site List) in Internet Explorer mode when browsing in Microsoft Edge, and a site requires Internet Explorer for compatibility.\n\nAfter a site is reloaded in Internet Explorer mode, \"in-page\" navigation stays in Internet Explorer mode (for example, a link, script, or form on the page, or a server-side redirect from another \"in-page\" navigation). Users can choose to exit from Internet Explorer mode, or Microsoft Edge automatically exits from Internet Explorer mode when a navigation that isn't \"in-page\" occurs (for example, using the address bar, the back button, or a favorite link).\n\nUsers can also optionally tell Microsoft Edge to use Internet Explorer mode for the site in the future. This choice is remembered for a length of time managed by the \"InternetExplorerIntegrationLocalSiteListExpirationDays\" policy.\n\nIf the \"InternetExplorerIntegrationLevel\" policy is set to 'IEMode', then sites explicitly configured by the \"InternetExplorerIntegrationSiteList\" policy's site list to use Microsoft Edge aren't reloaded in Internet Explorer mode, and sites configured by the site list or by the \"SendIntranetToInternetExplorer\" policy to use Internet Explorer mode can't exit from Internet Explorer mode.\n\nIf you enable this policy, users are allowed to reload unconfigured sites in Internet Explorer mode.\n\nIf you disable this policy, users aren't allowed to reload unconfigured sites in Internet Explorer mode.\n\nIf you enable this policy, it takes precedence over how you configured the \"InternetExplorerIntegrationTestingAllowed\" policy, and that policy is disabled.\n\nFor more information about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"fa0573239908f939":{"id":"com.microsoft.edge.mamedgeappconfigsettings.workspacesnavigationsettings","displayName":"Configure navigation settings per groups of URLs in Microsoft Edge Workspaces","description":"This setting lets you define groups of URLs, and apply specific Microsoft Edge Workspaces navigation settings to each group.\n\nIf you configure this policy, Microsoft Edge Workspaces use the configured settings when deciding whether and how to share navigations among collaborators in a Microsoft Edge Workspace.\n\nIf you don't configure this policy, Microsoft Edge Workspaces use only default and internally configured navigation settings.\n\nFor more information about configuration options, see https://go.microsoft.com/fwlink/?linkid=2218655\n\nNote, format url_patterns according to https://go.microsoft.com/fwlink/?linkid=2095322. You can configure the url_regex_patterns in this policy to match multiple URLs using a Perl style regular expression for the pattern. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.","helpText":null,"infoUrls":[],"categoryId":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","categoryName":"Edge Workspaces settings","options":null},"fa097fb9b7f1c8ab":{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckexemptionlist_dcom_lbl_actseccheckexemptionlist","displayName":"Add\\remove DCOM servers to the exemption list:","description":null,"helpText":"","infoUrls":[],"categoryId":"a57b27b6-48e0-42b2-812a-2be86c113a0c","categoryName":"Application Compatibility Settings","options":null},"fa1cbe885b18b696":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_protectedfolders","displayName":"Configure protected folders","description":"\r\n Specify additional folders that should be guarded by the Controlled folder access feature.\r\n\r\n Files in these folders cannot be modified or deleted by untrusted applications.\r\n\r\n Default system folders are automatically protected. You can configure this setting to add additional folders. \r\n The list of default system folders that are protected is shown in Windows Security.\r\n\r\n Enabled:\r\n Specify additional folders that should be protected in the Options section.\r\n\r\n Disabled:\r\n No additional folders will be protected.\r\n\r\n Not configured:\r\n Same as Disabled.\r\n\r\n You can enable controlled folder access in the Configure controlled folder access GP setting.\r\n\r\n Microsoft Defender Antivirus automatically determines which applications can be trusted. You can add additional trusted applications in the Configure allowed applications GP setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-exploitguard-controlledfolderaccess-protectedfolders"],"categoryId":"72f61c7d-e5d2-4170-baf3-c953c1082e19","categoryName":"Controlled Folder Access","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_protectedfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_controlledfolderaccess_protectedfolders_1","displayName":"Enabled","description":null,"helpText":null}]},"fa38eba63917611f":{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_trynextclosestsite","displayName":"Try Next Closest Site","description":"This policy setting enables DC Locator to attempt to locate a DC in the nearest site based on the site link cost if a DC in same the site is not found. In scenarios with multiple sites, failing over to the try next closest site during DC Location streamlines network traffic more effectively.\r\n\r\nThe DC Locator service is used by clients to find domain controllers for their Active Directory domain. The default behavior for DC Locator is to find a DC in the same site. If none are found in the same site, a DC in another site, which might be several site-hops away, could be returned by DC Locator. Site proximity between two sites is determined by the total site-link cost between them. A site is closer if it has a lower site link cost than another site with a higher site link cost. \r\n\r\nIf you enable this policy setting, Try Next Closest Site DC Location will be turned on for the computer.\r\n\r\nIf you disable this policy setting, Try Next Closest Site DC Location will not be used by default for the computer. However, if a DC Locator call is made using the DS_TRY_NEXTCLOSEST_SITE flag explicitly, the Try Next Closest Site behavior is honored.\r\n\r\nIf you do not configure this policy setting, Try Next Closest Site DC Location will not be used by default for the machine. If the DS_TRY_NEXTCLOSEST_SITE flag is used explicitly, the Next Closest Site behavior will be used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-trynextclosestsite"],"categoryId":"41ba590e-9105-4eda-92fb-13c7d34b8eee","categoryName":"DC Locator DNS Records","options":[{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_trynextclosestsite_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_netlogon_netlogon_trynextclosestsite_1","displayName":"Enabled","description":null,"helpText":null}]},"fa054b24efa7193f":{"id":"device_vendor_msft_policy_config_admx_wininit_hiberboot","displayName":"Require use of fast startup","description":"This policy setting controls the use of fast startup. \r\n\r\nIf you enable this policy setting, the system requires hibernate to be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the local setting is used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wininit#admx-wininit-hiberboot"],"categoryId":"60b55db1-53fc-45ea-93d3-e4372b1e19a5","categoryName":"Shutdown","options":[{"id":"device_vendor_msft_policy_config_admx_wininit_hiberboot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_wininit_hiberboot_1","displayName":"Enabled","description":null,"helpText":null}]},"fadb1d0d2b7ae781":{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxtcui","displayName":"Xbox TCUI *","description":"","helpText":"","infoUrls":[],"categoryId":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","categoryName":"App Package Deployment","options":[{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxtcui_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_applicationmanagement_removedefaultmicrosoftstorepackages_xboxtcui_1","displayName":"True","description":null,"helpText":null}]},"fa7a32af557616ad":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability","displayName":"Incognito mode availability","description":"Specifies whether the user may open pages in Incognito mode in Google Chrome.\r\n\r\nIf 'Enabled' is selected or the policy is left unset, pages may be opened in Incognito mode.\r\n\r\nIf 'Disabled' is selected, pages may not be opened in Incognito mode.\r\n\r\nIf 'Forced' is selected, pages may be opened ONLY in Incognito mode. Note that 'Forced' does not work for Android-on-Chrome\r\n\r\nNote: On iOS, if the policy is changed during a session, it will only take effect on relaunch.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},"fae6a223909e2442":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_policylistmultiplesourcemergelistdesc","displayName":"Allow merging list policies from different sources (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"fa822679fe6bfb75":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_webrtclocalipsallowedurlsdesc","displayName":"URLs for which local IPs are exposed in WebRTC ICE candidates (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"fad0b53bc71ebab8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting","displayName":"Default images setting (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting_1","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting_2","displayName":"Do not allow any site to show images","description":null,"helpText":null}]},"fa62624a5e013f96":{"id":"device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode","displayName":"Allow \"Save Target As\" in Internet Explorer mode","description":"This policy setting allows admins to enable \"Save Target As\" context menu in Internet Explorer mode.\n\nIf you enable this policy, \"Save Target As\" will show up in the Internet Explorer mode context menu and work the same as Internet Explorer.\n\nIf you disable or do not configure this policy setting, \"Save Target As\" will not show up in the Internet Explorer mode context menu.\n\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2102115","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsavetargetasiniemode"],"categoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","categoryName":"Internet Explorer","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_1","displayName":"Enabled","description":null,"helpText":null}]},"fa2362c01266302b":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409","displayName":"Turn on Cross-Site Scripting (XSS) Filter","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_3","displayName":"Disable","description":null,"helpText":null}]},"fad21a3ae57f45eb":{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode","displayName":"Specify server","description":"\r\nSpecifies how Microsoft Lync identifies the server.\r\n\r\nIf you enable this policy setting, you must specify the server name that Microsoft Lync uses.\r\n\r\nIf you disable this policy setting, Microsoft Lync uses a DNS lookup to identify the server.\r\n\r\nIf you do not configure this policy setting, the user can choose automatic configuration, or the user can specify the name of the server in Microsoft Lync user preferences. To set the user preferences, from the Microsoft Lync Tools menu, click Options, click the Personal tab, within the SIP Communications My Account area click Advanced, select Configure Settings, type the server name in the Server name field.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1","displayName":"Enabled","description":null,"helpText":null}]},"fa8ec2f16575245b":{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"c945edd8-c865-4932-806d-83752e3f46ad","categoryName":"Microsoft Edge Web View2","options":null},"fac06e144b3ad5c4":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs","displayName":"Allow file selection dialogs","description":"Allow access to local files by letting Microsoft Edge display file selection dialogs.\r\n\r\nIf you enable or don't configure this policy, users can open file selection dialogs as normal.\r\n\r\nIf you disable this policy, whenever the user performs an action that triggers a file selection dialog (like importing favorites, uploading files, or saving links), a message is displayed instead, and the user is assumed to have clicked Cancel on the file selection dialog.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"faffcc3b261caae5":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings","displayName":"Default search provider encodings","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.\r\n\r\nThis policy is optional. If not configured, the default, UTF-8, is used.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_1","displayName":"Enabled","description":null,"helpText":null}]},"faa0d9305319ef1d":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended","displayName":"Configure default state of Allow extensions from other stores setting","description":"This policy allows you to control the default state of the Allow extensions from other stores setting.\r\nThis policy can't be used to stop installation of extensions from other stores such as Chrome Web Store.\r\nTo stop installation of extensions from other stores, use the Extension Settings policy: https://go.microsoft.com/fwlink/?linkid=2187098.\r\n\r\nWhen enabled, Allow extensions from other stores will be turned on. So, users won't have to turn on the flag manually\r\nwhile installing extensions from other supported stores such as Chrome Web Store. However a user can override this setting.\r\nIf the user has already turned on the setting and then turned it off, this setting may not work.\r\nIf the Admin first sets the policy as Enabled, but then changes it to not configured or disabled, it will have no impact on\r\nuser settings and the setting will remain as it is.\r\n\r\nWhen disabled or not configured, the user can manage the Allow extensions from other store setting.","helpText":"","infoUrls":[],"categoryId":"b96b63eb-0292-4a73-85d7-c68d330c109e","categoryName":"Extensions","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fab87717cba20a29":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_defaultsearchprovidername","displayName":"Default search provider name (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"fa49a88814c83852":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder_forcedenytheseapps","displayName":"Let Apps Access Graphics Capture Without Border Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied configuration access to the screen capture border. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder_forcedenytheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"fa3e906bf66afe82":{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_onenote","displayName":"OneNote: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5371d50c-0aaa-425a-a075-2cb1c59968b9","categoryName":"MS Security Guide","options":null},"faeb58e134a741c2":{"id":"osrecoverysettings_os","displayName":"OS","description":"Select the operating system to be installed in recovery scenarios for devices in your organization. Learn more about OS recovery scenarios.","helpText":"","infoUrls":[],"categoryId":"b92241c7-e419-4dc7-b373-08e595c1db1d","categoryName":"Operating system","options":null},"fa35cba5567263c5":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_nevercachepolicy","displayName":"Never cache data (User)","description":"This policy setting allows you to force databases that do not use Access 2016 compatible caching to not cache any data.\r\n\r\nIf you enable this policy setting, then data from Microsoft SharePoint or Business Data Catalog (BDC) will not be cached for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when enabled.\r\n\r\nIf you disable or do not configure this policy setting, then data from Microsoft SharePoint or Business Data Catalog (BDC) will be cached for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when disabled or not configured.","helpText":"","infoUrls":[],"categoryId":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_nevercachepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_nevercachepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"fa0fc98d1695d764":{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonmisconversionloggingformisconversionreport","displayName":"Turn on misconversion logging for misconversion report (User)","description":"This policy setting allows you to turn on logging of misconversion for the misconversion report.\r\n\r\nIf you enable this policy setting, misconversion logging is turned on.\r\n\r\nIf you disable or do not configure this policy setting, misconversion logging is turned off.\r\n\r\nThis policy setting applies to Japanese Microsoft IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnonmisconversionloggingformisconversionreport"],"categoryId":"7d331987-7e2d-4975-b23b-d99a5af26ddf","categoryName":"IME","options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonmisconversionloggingformisconversionreport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonmisconversionloggingformisconversionreport_1","displayName":"Enabled","description":null,"helpText":null}]},"fa0d35457205d8d2":{"id":"user_vendor_msft_policy_config_admx_icm_disablehttpprinting_1","displayName":"Turn off printing over HTTP (User)","description":"This policy setting specifies whether to allow printing over HTTP from this client.\r\n\r\nPrinting over HTTP allows a client to print to printers on the intranet as well as the Internet.\r\n\r\nNote: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP.\r\n\r\nIf you enable this policy setting, it prevents this client from printing to Internet printers over HTTP.\r\n\r\nIf you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP.\r\n\r\nAlso, see the \"Web-based printing\" policy setting in Computer Configuration/Administrative Templates/Printers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-disablehttpprinting-1"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_icm_disablehttpprinting_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_disablehttpprinting_1_1","displayName":"Enabled","description":null,"helpText":null}]},"fac20f6997df6f41":{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_1","displayName":"Floppy Drives: Deny write access (User)","description":"This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-floppydrives-denywrite-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"fadfe8d9477768c4":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup","displayName":"Project 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Project 2016.\r\nMicrosoft Project 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Project 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Project 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016projectbackup"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup_1","displayName":"Enabled","description":null,"helpText":null}]},"fa7dcffc9043819d":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_music","displayName":"Music (User)","description":"This policy setting configures the synchronization of user settings for the Music app.\r\nBy default, the user settings of Music sync between computers. Use the policy setting to prevent the user settings of Music from synchronizing between computers.\r\nIf you enable this policy setting, Music user settings continue to sync.\r\nIf you disable this policy setting, Music user settings are excluded from the synchronizing settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-music"],"categoryId":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","categoryName":"Windows Apps","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_music_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_music_1","displayName":"Enabled","description":null,"helpText":null}]},"fad411c93fa8aa83":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch4","displayName":"Site URL 5 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"fad1684de98451f9":{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxyport","displayName":"Proxy port (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","categoryName":"Networking","options":null},"fa9cd63dbba8851b":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_defaultserialguardsetting","displayName":"Control use of the Serial API (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_defaultserialguardsetting_2","displayName":"Do not allow any site to request access to serial ports via the Serial API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_defaultserialguardsetting_3","displayName":"Allow sites to ask the user to grant access to a serial port","description":null,"helpText":null}]},"fad4e97397114dee":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange","displayName":"Restrict the UDP port range used by the remote access host (User)","description":"Setting the policy restricts the UDP port range used by the remote access host in this machine.\r\n\r\nLeaving the policy unset or set to an empty string means the remote access host can use any available port.\r\n\r\nNote: If RemoteAccessHostFirewallTraversal is Disabled, the remote access host will use UDP ports in the 12400-12409 range.\r\n\r\nExample value: 12400-12409","helpText":"","infoUrls":[],"categoryId":"098942c3-afe3-40c8-823f-37f0b5b13ad4","categoryName":"Remote access","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},"face0f1b222e3b7c":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled","displayName":"Enable PDF Annotations (User)","description":"Controls if the PDF viewer in Google Chrome can annotate PDFs.\r\n\r\nWhen this policy is not set, or is set to true, then the PDF viewer will be able to annotate PDFs.\r\n\r\nWhen this policy is set to false, then the PDF viewer will not be able to annotate PDFs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fae9e689abf94477":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended","displayName":"Enable Battery Saver Mode (User)","description":"This policy enables or disables the Battery Saver Mode setting.\r\nOn Chrome, this setting makes it so that frame rate is throttled to lower power consumption. If this policy is unset, the end user can control this setting in chrome://settings/performance.\r\nOn ChromeOS, this setting makes it so that frame rate and CPU frequency are throttled, backlights are dimmed, and Android is put in Battery Saver Mode. On devices with multiple CPUs, some CPUs will be turned off.\r\nThe different levels are:\r\nDisabled (0): Battery Saver Mode will be disabled.\r\nEnabledBelowThreshold (1): Battery Saver Mode will be enabled when the device is on battery power and battery level is low.\r\nEnabledOnBattery (2): This value is deprecated as of M121. From M121 onwards, values will be treated as EnabledBelowThreshold.\r\n","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fafba25d847087ef":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls","displayName":"Block sites from making requests to local network endpoints. (User)","description":"List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.\r\n\r\nIf an origin is covered by both this policy and by LocalNetworkAccessAllowedForUrls, this policy takes precedence.\r\n\r\nDepending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.\r\n\r\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\r\n\r\nFor detailed information on valid URL patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nSee https://wicg.github.io/local-network-access/ for Local Network Access restrictions.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"categoryId":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","categoryName":"Local Network Access settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"faf3a9909e3700fb":{"id":"user_vendor_msft_policy_config_credentialsui_disablepasswordreveal","displayName":"Do not display the password reveal button (User)","description":"This policy setting allows you to configure the display of the password reveal button in password entry user experiences.\n\nIf you enable this policy setting, the password reveal button will not be displayed after a user types a password in the password entry text box.\n\nIf you disable or do not configure this policy setting, the password reveal button will be displayed after a user types a password in the password entry text box.\n\nBy default, the password reveal button is displayed after a user types a password in the password entry text box. To display the password, click the password reveal button.\n\nThe policy applies to all Windows components and applications that use the Windows system controls, including Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialsui#credentialsui-disablepasswordreveal"],"categoryId":"58111f34-e9ac-47e2-b8ae-8d55c6a9ed6c","categoryName":"Credential User Interface","options":[{"id":"user_vendor_msft_policy_config_credentialsui_disablepasswordreveal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_credentialsui_disablepasswordreveal_1","displayName":"Enabled","description":null,"helpText":null}]},"faba543016cd7095":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_shownames","displayName":"Show names (User)","description":"Enabling this setting selects the Advanced (Display) user option to \"Show chart element names on hover\".","helpText":"","infoUrls":[],"categoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_shownames_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_shownames_1","displayName":"Enabled","description":null,"helpText":null}]},"fa6649b2e0d79e48":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments","displayName":"Turn off trusted documents (User)","description":"This policy setting allows you to turn off the trusted documents feature. The trusted documents feature allows users to always enable active content in documents such as macros, ActiveX controls, data connections, etc. so that they are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.\r\n\r\nIf you enable this policy setting, you will turn off the trusted documents feature. Users will receive a security prompt every time a document containing active content is opened.\r\n\r\nIf you disable or do not configure this policy setting, documents will be trusted when users enable content for a document, and users will not receive a security prompt.","helpText":"","infoUrls":[],"categoryId":"7490c4fd-c326-42f7-9908-006504616d4c","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"faea1b97e39f22f5":{"id":"user_vendor_msft_policy_config_internetexplorer_disableadobeflash","displayName":"Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects (User)","description":"This policy setting turns off Adobe Flash in Internet Explorer and prevents applications from using Internet Explorer technology to instantiate Flash objects.\r\n\r\nIf you enable this policy setting, Flash is turned off for Internet Explorer, and applications cannot use Internet Explorer technology to instantiate Flash objects. In the Manage Add-ons dialog box, the Flash status will be 'Disabled', and users cannot enable Flash. If you enable this policy setting, Internet Explorer will ignore settings made for Adobe Flash through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings.\r\n\r\nIf you disable, or do not configure this policy setting, Flash is turned on for Internet Explorer, and applications can use Internet Explorer technology to instantiate Flash objects. Users can enable or disable Flash in the Manage Add-ons dialog box.\r\n\r\nNote that Adobe Flash can still be disabled through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings, even if this policy setting is disabled, or not configured. However, if Adobe Flash is disabled through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings and not through this policy setting, all applications that use Internet Explorer technology to instantiate Flash object can still do so. For more information, see \"Group Policy Settings in Internet Explorer 10\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-InternetExplorer#internetexplorer-disableadobeflash"],"categoryId":"89c0381d-3b9b-4be5-8077-ffb18d47e910","categoryName":"Add-on Management","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableadobeflash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableadobeflash_1","displayName":"Enabled","description":null,"helpText":null}]},"fa17f0ac7e680ca2":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin","displayName":"Browser sign-in settings (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_0","displayName":"Disable browser sign-in","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_1","displayName":"Enable browser sign-in","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_2","displayName":"Force users to sign-in to use the browser","description":null,"helpText":null}]},"fa5c69cb74124e42":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (User)","description":"Set whether websites can access connected USB devices. You can completely block access or ask the user each time a website wants to get access to connected USB devices.\r\n\r\nYou can override this policy for specific URL patterns by using the 'WebUsbAskForUrls' (Allow WebUSB on specific sites) and 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policies.\r\n\r\nIf you don't configure this policy, sites can ask users whether they can access the connected USB devices (3) by default, and users can change this setting.\r\n\r\n* 2 = Don't allow any site to request access to USB devices via the WebUSB API\r\n\r\n* 3 = Allow sites to ask the user to grant access to a connected USB device","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"fa4db1d3016f46bd":{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled","displayName":"Enable deleting undecryptable passwords (User)","description":"This policy controls whether the built-in password manager can delete undecryptable passwords from its database. This is required to restore the full functionality of the built-in password manager, but it may include a permanent data loss. Undecryptable password values will not become decryptable on their own.\r\n\r\nIf fixing them is possible, it usually requires complex user actions.\r\n\r\nEnabling this policy or leaving it unset means that users with undecryptable passwords saved to the built-in password manager will lose them. Passwords that are still in a working state will remain untouched.\r\n\r\nDisabling this policy means users will have their password manager data untouched, but will experience a broken password manager functionality.\r\n\r\nIf the policy is set, users can't override it in Microsoft Edge.","helpText":"","infoUrls":[],"categoryId":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","categoryName":"Password manager and protection","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fa49af74a3ce2d5e":{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout","displayName":"Delay before running idle actions (User)","description":"Triggers an action when the computer is idle.\r\n\r\nIf you set this policy, it specifies the length of time without user input (in minutes) before the browser runs actions configured via the IdleTimeoutActions policy.\r\n\r\nIf you not set this policy, no action will be ran.\r\n\r\nThe minimum threshold is 1 minute.\r\n\r\n\"User input\" is defined by Operating System APIs, and includes things like moving the mouse or typing on the keyboard.","helpText":"","infoUrls":[],"categoryId":"526e363a-84db-4256-a13c-e01c8c646e26","categoryName":"Idle Browser Actions","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout_1","displayName":"Enabled","description":null,"helpText":null}]},"fa40a0d81aa209e9":{"id":"user_vendor_msft_policy_config_microsoft_edgev147~policy~microsoft_edge~contentsettings_pdflocalfileaccessallowedfordomains_pdflocalfileaccessallowedfordomainsdesc","displayName":"Allow specified sites to access file:// URLs in the PDF Viewer (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"fa58d7beb37cfb8a":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls","displayName":"Block the Serial API on specific sites (User)","description":"Define a list of sites, based on URL patterns, that can't ask the user to grant them access to a serial port.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSerialGuardSetting' (Control use of the Serial API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SerialAskForUrls' (Allow the Serial API on specific sites) policy (if there is a match), the 'DefaultSerialGuardSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns in this policy can't conflict with those configured in the 'SerialAskForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"fa0830ca308aa5b7":{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled","displayName":"Enable browser legacy extension point blocking (User)","description":"Sets the ProcessExtensionPointDisablePolicy on Microsoft Edge's browser process to block code injection from legacy third party applications.\r\n\r\nIf you enable or don't configure this policy, the ProcessExtensionPointDisablePolicy is applied to block legacy extension points in the browser process.\r\n\r\nIf you disable this policy, the ProcessExtensionPointDisablePolicy is not applied to block legacy extension points in the browser process. This has a detrimental effect on Microsoft Edge's security and stability as unknown and potentially hostile code can load inside Microsoft Edge's browser process. Only turn off the policy if there are compatibility issues with third-party software that must run inside Microsoft Edge's browser process.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fa55e4f28b7e9994":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastservicecreatesharednotes9","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastservicecreatesharednotes9_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice09_l_broadcastservicecreatesharednotes9_1","displayName":"True","description":null,"helpText":null}]},"fa6cffe153927a02":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize~l_sharedworkspace~l_definesharedworkspaceurls_l_site1_l_url","displayName":"URL: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"725adbdf-1eb8-45c4-8eb1-44747bd1615d","categoryName":"Define Shared Workspace URL's","options":null},"faa44641e06ec4d1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishzimbabwe","displayName":"English (Zimbabwe) (User)","description":"Enables the editing language English (Zimbabwe)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishzimbabwe_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_englishzimbabwe_1","displayName":"Enabled","description":null,"helpText":null}]},"fa7d5e9478f011b1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuaperu","displayName":"Quechua (Peru) (User)","description":"Enables the editing language Quechua (Peru)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuaperu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_quechuaperu_1","displayName":"Enabled","description":null,"helpText":null}]},"fa0bae1ba0ffa28c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultfilesharecatalog","displayName":"Default Shared Folder Location (User)","description":"This policy setting sets allows you to set the location of the Shared Folder that is designated as Default.\r\n\r\nIf you enable this policy setting, you can set the URL for the Shared Folder from which users can insert web add-ins into their Office documents.\r\n\r\nIf you disable this policy setting, users cannot insert web add-ins from a Shared Folder.\r\n\r\nIf you do not configure this policy setting, or any other policy settings in the Trusted Catalogs folder, users can set their own Default Shared Folder location.","helpText":"","infoUrls":[],"categoryId":"24f6d328-64e7-4490-be38-452ac3b61f6f","categoryName":"Trusted Catalogs","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultfilesharecatalog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_trustedcatalogs_l_defaultfilesharecatalog_1","displayName":"Enabled","description":null,"helpText":null}]},"fab4362c14aa68f8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_catalogrefreshperiod_l_empty601","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":null},"fa5be329206e9fc8":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_disabletheuserfromsettingthepersonalsiteurl","displayName":"Disable the user from setting the Personal Site URL (User)","description":"This setting will disable the Office client applications from setting the personal site URL in the Active Directory.","helpText":"","infoUrls":[],"categoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","categoryName":"Server Settings","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_disabletheuserfromsettingthepersonalsiteurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_serversettings_l_disabletheuserfromsettingthepersonalsiteurl_1","displayName":"Enabled","description":null,"helpText":null}]},"fa3cd1b13d214649":{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_insiderfast","displayName":"Beta Channel (User)","description":"","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_insiderfast_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v9~policy~l_microsoftofficesystem~l_miscellaneous437_l_updatechannelselectoruser_l_uc_insiderfast_1","displayName":"True","description":null,"helpText":null}]},"fa7a682e35ce30cd":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook","displayName":"Automatically back up my notebook... (User)","description":"Checks/Unchecks the option ''Automatically back up my notebook at the following time interval''.","helpText":"","infoUrls":[],"categoryId":"c02141e6-0725-4f6f-9138-83d10c6bc104","categoryName":"Backup","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_backup_l_automaticallybackupmynotebook_1","displayName":"Enabled","description":null,"helpText":null}]},"fa692c6d97519217":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipheralgorithm_l_setcngcipheralgorithmid","displayName":"CNG cipher algorithm: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":null},"fa10c9d5e135ba5c":{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_messagesexpireafterdays","displayName":"Messages expire after (days) (User)","description":"Sets the value for the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"832f3a51-5e73-4541-8f14-1323cd9919bc","categoryName":"When sending a message","options":[{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_messagesexpireafterdays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v18~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_emailoptions~l_advancedemailoptions~l_whensendingamessagecategory_l_messagesexpireafterdays_1","displayName":"Enabled","description":null,"helpText":null}]},"faddf42149dc2bf6":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_predefined_l_hidequickstepsgallery","displayName":"Disable Quick Steps Gallery (User)","description":"This policy setting allows you to hide the Quick Steps Gallery in the Ribbon. By default, the Quick Steps Gallery is included in the Home tab of the Outlook explorer Ribbon. \r\n\r\nIf you enable this policy setting, you will hide the Quick Steps Gallery in the Ribbon.\r\n\r\nIf you disable or do not configure this policy setting, the Quick Steps Gallery will be included in the Home tab of the Outlook explorer Ribbon.","helpText":"","infoUrls":[],"categoryId":"d59dfcc1-6c35-41de-bfb6-de94b8120ca5","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_predefined_l_hidequickstepsgallery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_disableitemsinuserinterface~l_predefined_l_hidequickstepsgallery_1","displayName":"Enabled","description":null,"helpText":null}]},"fa3e83011fd1c9f3":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_mimitomapiconversion_l_changelimitmimebody_l_empty75","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","categoryName":"MIME to MAPI Conversion","options":null},"fa128ec59183643c":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_preventshutdownifexternalreferencesexist","displayName":"Prevent shutdown if external references exist (User)","description":"This policy setting controls whether Outlook should ignore external references during shutdown.\r\n\r\nIf you enable this policy setting, shutdown will not occur if external references exist.\r\n\r\nIf you disable or do not configure this policy setting, external references will be ignored during shutdown.","helpText":"","infoUrls":[],"categoryId":"ffb0a109-2507-42b3-b26f-9f667f2d5029","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_preventshutdownifexternalreferencesexist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_miscellaneous~l_shutdown_l_preventshutdownifexternalreferencesexist_1","displayName":"Enabled","description":null,"helpText":null}]},"fa5890cb1a2dc918":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_includeappointmentsonlywithinworkinghours","displayName":"Include appointments only within working hours (User)","description":"By default, all appointments in a calendar are included when that calendar is shared through e-mail or by using the Office.com Sharing Service. This setting allows users to publish only appointments that are within users' working hours.","helpText":"","infoUrls":[],"categoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","categoryName":"Calendar Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_includeappointmentsonlywithinworkinghours_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions_l_includeappointmentsonlywithinworkinghours_1","displayName":"Enabled","description":null,"helpText":null}]},"fa8156f9f8784fe7":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_preventusersfromcustomizingattachmentsecuritysettings","displayName":"Prevent users from customizing attachment security settings (User) (Deprecated)","description":"This policy setting prevents users from overriding the set of attachments blocked by Outlook.\r\n\r\nIf you enable this policy setting users will be prevented from overriding the set of attachments blocked by Outlook. Outlook also checks the \"Level1Remove\" registry key when this setting is specified. \r\n\r\nIf you disable or do not configure this policy setting, users will be allowed to override the set of attachments blocked by Outlook.","helpText":"","infoUrls":[],"categoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_preventusersfromcustomizingattachmentsecuritysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security_l_preventusersfromcustomizingattachmentsecuritysettings_1","displayName":"Enabled","description":null,"helpText":null}]},"fa6b1d4ba135d5e4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_nopromptlevel1close","displayName":"Do not prompt about Level 1 attachments when closing an item (User)","description":"This policy setting controls whether Outlook displays a warning before closing an item that contains an unsafe attachment that will be blocked when the item is re-opened.To protect users from viruses and other harmful files, Outlook uses two levels of security, designated Level 1 and Level 2, to restrict users' access to files attached to e-mail messages or other items. Outlook completely blocks access to Level 1 files by default, and requires users to save Level 2 files to disk before opening them. Potentially harmful files can be classified into these two levels by file type extension, with all other file types considered safe. \r\n\r\nIf you enable this policy setting, Outlook will not display a warning when users close items with Level 1 attachments, which could cause data loss. \r\n\r\nIf you disable or do not configure this policy setting, when a user closes an item to which a level 1 file has been attached, Outlook warns the user that the message contains a potentially unsafe attachment and that the user might not be able to access the attachment when opening the item later. (Such a sequence of events might occur when a user closes a draft message that they intend to resume editing at some future time.) \r\n\r\nImportant: This policy setting only applies if the \"Outlook Security Mode\" policy setting under \"Microsoft Outlook 2016\\Security\\Security Form Settings\" is configured to \"Use Outlook Security Group Policy.\"","helpText":"","infoUrls":[],"categoryId":"c400a917-cdff-4e15-a70f-59b82df4c038","categoryName":"Attachment Security","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_nopromptlevel1close_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_securityformsettings~l_miscattachmentsettings_l_nopromptlevel1close_1","displayName":"Enabled","description":null,"helpText":null}]},"fa224b3edf7d5520":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders19","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders19_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders19_1","displayName":"True","description":null,"helpText":null}]},"faae5d36df2ec085":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"categoryId":"e344b25a-2046-4e70-a3b9-1a418613861f","categoryName":"Miscellaneous","options":null},"fa19ff078d0b717d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultstarttime","displayName":"Default start time (User)","description":"Specifies the start time that Project assigns to tasks by default when you enter a start date without specifying a time.\r\n\r\nIf you enable this setting, new tasks where the user does not enter a start time will use the start time that you specified.\r\n\r\nIf you disable or do not configure this setting, the user's default setting is used.","helpText":"","infoUrls":[],"categoryId":"9ecb05b7-e942-4b60-9040-d612385f5c67","categoryName":"Calendar","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultstarttime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjcalendar_l_pjdefaultstarttime_1","displayName":"Enabled","description":null,"helpText":null}]},"fa2ef0cf689ad4b6":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14","displayName":"Hyperlink color (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3db7e884-6077-4b96-ace3-005a6b49ecc0","categoryName":"Hyperlink appearance in 'Project1'","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_16","displayName":"Automatic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_1","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_2","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_3","displayName":"Lime","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_4","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_5","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_6","displayName":"Fuchsia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_7","displayName":"White","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_8","displayName":"Maroon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_9","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_10","displayName":"Olive","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_11","displayName":"Navy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_12","displayName":"Purple","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_13","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_14","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_pjedit~l_pjhyperlinkappear_l_pjhyperlinkcolour_l_pjhyperlinkcolour14_15","displayName":"Silver","description":null,"helpText":null}]},"fa35fe1284712774":{"id":"user_vendor_msft_policy_config_proj16v3~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the internet (User)","description":"\r\nThis policy setting allows you to block macros from running in Office files that come from the internet.\r\n\r\nIf you enable this policy setting, macros are blocked from running, even if \"Enable all macros\" is selected in the Macro Settings section of the Trust Center. Users will receive a notification that macros are blocked from running.\r\n\r\nThe exceptions when macros will be allowed to run are:\r\n- The Office file is saved to a Trusted Location.\r\n- The Office file was previously trusted by the user.\r\n- Macros are digitally signed and the matching Trusted Publisher certificate is installed on the device.\r\n\r\nIf you disable this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the internet.\r\n\r\nIf you don’t configure this policy setting, macros will be blocked from running. Users will receive a notification telling them of the security risks of macros from the internet along with a link to learn more.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2185771.","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v3~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v3~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},"fa7d52771f098c17":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros","displayName":"Alt+F8 (Developer | Code | Macros) (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_1","displayName":"True","description":null,"helpText":null}]},"fac8bc0b6b86e414":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_screentips","displayName":"Show document tooltips on hover (User)","description":"Determines whether the symbol used to represent Screen Tips are shown in the document.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_screentips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_screentips_1","displayName":"Enabled","description":null,"helpText":null}]},"fad05c74c2c6606c":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders43","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders43_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders43_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/fb.json b/public/intune-definitions/fb.json new file mode 100644 index 000000000000..7e3cdf484fce --- /dev/null +++ b/public/intune-definitions/fb.json @@ -0,0 +1 @@ +{"fbeb87c361570def":{"id":"com.android.devicerestrictionpolicy.storageblockusbfiletransferaosp","displayName":"Block USB file transfer","description":"If 'True', prevents users from transferring files over USB. If 'False', Intune doesn't change or update this setting. By default, the OS might allow users to transfer files.","helpText":"","infoUrls":[],"categoryId":"b6733d23-eadc-486a-abfc-62b78698a16c","categoryName":"General","options":[{"id":"com.android.devicerestrictionpolicy.storageblockusbfiletransferaosp_false","displayName":"False","description":"False","helpText":null},{"id":"com.android.devicerestrictionpolicy.storageblockusbfiletransferaosp_true","displayName":"True","description":"True","helpText":null}]},"fb8e2e214870e268":{"id":"com.apple.applicationaccess_deniediccidsforrcs","displayName":"Denied ICCIDs For RCS","description":"An array of strings representing ICCIDs of cellular plans. The device prevents use of any matching cellular networks with RCS messaging. The array must contain no more than 4 ICCID strings.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":null},"fbe5fccd77812f31":{"id":"com.apple.applicationaccess_ratingtvshowsfr","displayName":"Rating TV Shows - France","description":"The maximum level of TV content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingtvshowsfr_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsfr_1","displayName":"-10","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsfr_2","displayName":"-12","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsfr_3","displayName":"-16","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsfr_4","displayName":"-18","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingtvshowsfr_5","displayName":"All","description":null,"helpText":null}]},"fbbc551328c9e4b5":{"id":"com.apple.assetcache.managed_datapath","displayName":"Data Path","description":"The path to the directory used to store cached content. Changing this setting manually doesn't automatically move cached content from the old location to the new one. To move content automatically, use the Sharing preference's Content Caching pane. The value must be (or end with) /Library/Application Support/Apple/AssetCache/Data.\r\nA directory and its intermediates are created for the given data path if it doesn't already exist. The directory is owned by _assetcache:_assetcache and has mode 0750. Its immediate parent directory (.../Library/Application Support/Apple/AssetCache) is owned by _assetcache:_assetcache and has mode 0755. ","helpText":null,"infoUrls":[],"categoryId":"e95335ec-2704-47ab-8b40-f602b31eeb9d","categoryName":"Content Caching","options":null},"fb945143571c2c95":{"id":"com.apple.extensiblesso_platformsso_additionalgroups","displayName":"Additional Groups","description":"The list of groups that are created and do not have administrator access.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":null},"fb6a3caee0aceb7a":{"id":"com.apple.managedclient.preferences_developertoolsavailability","displayName":"Control where developer tools can be used","description":"Control where developer tools can be used.\n\nIf you set this policy to 'DeveloperToolsDisallowedForForceInstalledExtensions' (0, the default), users can access the developer tools and the JavaScript console in general, but not in the context of extensions installed by enterprise policy.\n\nIf you set this policy to 'DeveloperToolsAllowed' (1), users can access the developer tools and the JavaScript console in all contexts, including extensions installed by enterprise policy.\n\nIf you set this policy to 'DeveloperToolsDisallowed' (2), users can't access the developer tools or inspect website elements. Keyboard shortcuts and menu or context menu entries that open the developer tools or the JavaScript Console are disabled.\n\n* 0 = Block the developer tools on extensions installed by enterprise policy, allow in other contexts\n\n* 1 = Allow using the developer tools\n\n* 2 = Don't allow using the developer tools","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#developertoolsavailability"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_developertoolsavailability_0","displayName":"Block the developer tools on extensions installed by enterprise policy, allow in other contexts","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_developertoolsavailability_1","displayName":"Allow using the developer tools","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_developertoolsavailability_2","displayName":"Don't allow using the developer tools","description":null,"helpText":null}]},"fb93a98aeba3d5a4":{"id":"com.apple.managedclient.preferences_exclusions","displayName":"Scan exclusions","description":"Entities that have been excluded from the scan. Exclusions can be specified by full paths, extensions, or file names.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#scan-exclusions"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":null},"fbe973e347c2118c":{"id":"com.apple.managedclient.preferences_offlinedefinitionupdatefallbacktocloud","displayName":"Fallback to Microsoft cloud updates","description":"Determine the Defender for Endpoint security intelligence update approach when offline mirror server fails to serve the update request. If set to true, the update is retried via the Microsoft cloud when offline security intelligence update failed.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/mac-support-offline-security-intelligence-update#configure-the-endpoints"],"categoryId":"13467142-14e7-4380-8573-4866e842c7f6","categoryName":"Antivirus engine","options":[{"id":"com.apple.managedclient.preferences_offlinedefinitionupdatefallbacktocloud_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_offlinedefinitionupdatefallbacktocloud_true","displayName":"Enabled","description":null,"helpText":null}]},"fb34961e737d6a2a":{"id":"com.apple.managedclient.preferences_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI","description":"Controls print image resolution when Microsoft Edge prints PDFs with rasterization.\n\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution will significantly increase the processing and printing time while a low resolution can lead to poor imaging quality.\n\nIf you set this policy, it allows a particular resolution to be specified for use when rasterizing PDFs for printing.\n\nIf you set this policy to zero or don't configure it, the system default resolution will be used during rasterization of page images.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#printrasterizepdfdpi"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"fb6e17ff943fa896":{"id":"com.apple.managedclient.preferences_registeredprotocolhandlers","displayName":"Registered Protocol Handlers","description":"Register a list of protocol handlers. Set the protocol property to the scheme (like 'mailto') and the url property to the URL pattern of the application that handles the scheme. The pattern can include a '%s', which will be replaced by the handled URL.\n\nYou can recommend a specific value for this policy, but you can't require that your users use it.\n\nThe protocol handlers registered by policy are merged with any handlers registered by the user, and both are available for use. The user can override the protocol handlers installed by policy by installing a new default handler, but they can't remove a protocol handler registered by policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#registeredprotocolhandlers"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"fb3d470df9c89159":{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies","displayName":"Block third party cookies","description":"This policy controls whether third-party cookies are blocked in regular browsing sessions.\n\nIf you enable this policy, web page elements that are not from the domain shown in the address bar can't set cookies.\n\nIf you disable this policy, third-party cookies are allowed, including from domains other than the one shown in the address bar.\n\nIf you don't configure this policy, third-party cookies are allowed by default, but users can change this setting.\n\nNote: This policy doesn't apply in InPrivate mode. In InPrivate, third-party cookies are blocked by default and can only be allowed at the site level using the CookiesAllowedForUrls policy.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_true","displayName":"Enabled","description":null,"helpText":null}]},"fbc3a60df74fa000":{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgemanagementextensionsfeedbackenabled","displayName":"Microsoft Edge management extensions feedback enabled","description":"This setting controls whether Microsoft Edge sends data about blocked extensions to the Microsoft Edge management service.\n\nThe 'EdgeManagementEnabled' policy must also be enabled for this setting to take effect.\n\nIf you enable this policy, Microsoft Edge sends data to the Microsoft Edge service when a user tries to install a blocked extension.\n\nIf you disable or don't configure this policy, Microsoft Edge can't send any data to the Microsoft Edge service about blocked extensions.","helpText":null,"infoUrls":[],"categoryId":"dfab5866-1712-4bbf-8edf-5b080b315b9b","categoryName":"Manageability","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgemanagementextensionsfeedbackenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.edgemanagementextensionsfeedbackenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fbc24d4f24cde70d":{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypassintranet","displayName":"Enhanced Security Mode configuration for Intranet zone sites","description":"Microsoft Edge applies Enhanced Security Mode on Intranet zone sites by default. This can lead to Intranet zone sites acting in an unexpected manner.\n\nIf you enable this policy, Microsoft Edge can't apply Enhanced Security Mode on Intranet zone sites.\n\nIf you disable or don't configure this policy, Microsoft Edge applies Enhanced Security Mode on Intranet zone sites.\n\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypassintranet_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypassintranet_true","displayName":"Enabled","description":null,"helpText":null}]},"fbf25f2b1fc670da":{"id":"com.microsoft.edge.mamedgeappconfigsettings.imagesblockedforurls","displayName":"Block images on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to display images.\n\nIf you don't configure this policy, the global default value from the \"DefaultImagesSetting\" policy (if set) or the user's personal configuration is used for all sites.\n\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards (*) are allowed.","helpText":null,"infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"fb47ca80291f9bb7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs are automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\n\nTabs are only put to sleep automatically when the policy \"SleepingTabsEnabled\" is enabled or isn't configured, and the user has enabled the sleeping tabs setting.\n\nIf you don't configure this policy, users can choose the timeout value.\n\nPolicy options mapping:\n\n* 30Seconds (30) = 30 seconds of inactivity\n\n* 5Minutes (300) = 5 minutes of inactivity\n\n* 15Minutes (900) = 15 minutes of inactivity\n\n* 30Minutes (1800) = 30 minutes of inactivity\n\n* 1Hour (3600) = 1 hour of inactivity\n\n* 2Hours (7200) = 2 hours of inactivity\n\n* 3Hours (10800) = 3 hours of inactivity\n\n* 6Hours (21600) = 6 hours of inactivity\n\n* 12Hours (43200) = 12 hours of inactivity\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","categoryName":"Sleeping Tabs settings","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_30seconds","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_5minutes","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_15minutes","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_30minutes","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_1hour","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_2hours","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_3hours","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_6hours","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sleepingtabstimeout_12hours","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"fb9d4212abc9b80a":{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverykeyusagedropdown_name","displayName":"FDVRecoveryKeyUsageDropDown_Name","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"a18508d1-fd74-4955-8032-3bd9219a0944","categoryName":"Fixed Data Drives","options":[{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverykeyusagedropdown_name_2","displayName":"Allow 256-bit recovery key","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverykeyusagedropdown_name_1","displayName":"Require 256-bit recovery key","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_fixeddrivesrecoveryoptions_fdvrecoverykeyusagedropdown_name_0","displayName":"Do not allow 256-bit recovery key","description":null,"helpText":null}]},"fbf237481913273e":{"id":"device_vendor_msft_policy_config_admx_kerberos_mitrealms","displayName":"Define interoperable Kerberos V5 realm settings","description":"This policy setting configures the Kerberos client so that it can authenticate with interoperable Kerberos V5 realms, as defined by this policy setting.\r\n \r\nIf you enable this policy setting, you can view and change the list of interoperable Kerberos V5 realms and their settings. To view the list of interoperable Kerberos V5 realms, enable the policy setting and then click the Show button. To add an interoperable Kerberos V5 realm, enable the policy setting, note the syntax, and then click Show. In the Show Contents dialog box in the Value Name column, type the interoperable Kerberos V5 realm name. In the Value column, type the realm flags and host names of the host KDCs using the appropriate syntax format. To remove an interoperable Kerberos V5 realm Value Name or Value entry from the list, click the entry, and then press the DELETE key. To edit a mapping, remove the current entry from the list and add a new one with different parameters.\r\n\r\nIf you disable this policy setting, the interoperable Kerberos V5 realm settings defined by Group Policy are deleted.\r\n\r\nIf you do not configure this policy setting, the system uses the interoperable Kerberos V5 realm settings that are defined in the local registry, if they exist.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-kerberos#admx-kerberos-mitrealms"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_admx_kerberos_mitrealms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kerberos_mitrealms_1","displayName":"Enabled","description":null,"helpText":null}]},"fb259a1685084ac5":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_exploitguard_asr_rules_exploitguard_asr_rules","displayName":"Set the state for each ASR rule:","description":null,"helpText":"","infoUrls":[],"categoryId":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","categoryName":"Attack Surface Reduction","options":null},"fb942bbcb9a66168":{"id":"device_vendor_msft_policy_config_admx_nca_friendlyname","displayName":"Friendly Name","description":"Specifies the string that appears for DirectAccess connectivity when the user clicks the Networking notification area icon. For example, you can specify “Contoso Intranet Access” for the DirectAccess clients of the Contoso Corporation.\r\n\r\nIf this setting is not configured, the string that appears for DirectAccess connectivity is “Corporate Connection”.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-nca#admx-nca-friendlyname"],"categoryId":"ac0a894c-173a-48fc-b961-901f28463c77","categoryName":"Direct Access Client Experience Settings","options":[{"id":"device_vendor_msft_policy_config_admx_nca_friendlyname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_nca_friendlyname_1","displayName":"Enabled","description":null,"helpText":null}]},"fb3bd4c34a98427c":{"id":"device_vendor_msft_policy_config_admx_printing_nondomainprinters_wsdprinters","displayName":"Number of Web Services Printers","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"fb316f6737dde758":{"id":"device_vendor_msft_policy_config_appvirtualization_publishingallowserver3_publishing_server_url_prompt","displayName":"Publishing Server URL","description":"","helpText":"","infoUrls":[],"categoryId":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","categoryName":"Publishing","options":null},"fb83ee896353fb6c":{"id":"device_vendor_msft_policy_config_appvirtualization_streamingverifycertificaterevocationlist","displayName":"Verify certificate revocation list","description":"Verifies Server certificate revocation status before streaming using HTTPS.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-appvirtualization#appvirtualization-streamingverifycertificaterevocationlist"],"categoryId":"5011ca61-1a58-42da-9c66-7763236acc84","categoryName":"Streaming","options":[{"id":"device_vendor_msft_policy_config_appvirtualization_streamingverifycertificaterevocationlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_appvirtualization_streamingverifycertificaterevocationlist_1","displayName":"Enabled","description":null,"helpText":null}]},"fbf542ea3b3cf547":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled","displayName":"CECPQ2 post-quantum key-agreement enabled for TLS","description":"If this policy is not configured, or is set to enabled, then Google Chrome will follow the default rollout process for CECPQ2, a post-quantum key-agreement algorithm in TLS.\r\n\r\nCECPQ2 results in larger TLS messages which, in very rare cases, can trigger bugs in some networking hardware. This policy can be set to False to disable CECPQ2 while networking issues are resolved.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fbe737d75f9426a9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_sslerroroverrideallowedfororiginsdesc","displayName":"Allow proceeding from the SSL warning page on specific origins (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"fb3feb3be04850d7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls","displayName":"Block insecure content on these sites","description":"Allows you to set a list of url patterns that specify sites which are not allowed to display blockable (i.e. active) mixed content (i.e. HTTP content on HTTPS sites), and for which optionally blockable (i.e. passive) mixed content will be upgraded.\r\n\r\nIf this policy is left not set blockable mixed content will be blocked and optionally blockable mixed content will be upgraded, but users will be allowed to set exceptions to allow it for specific sites.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"fb029e7519af4392":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls","displayName":"Allow the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy, the following take precedence, in this order:\r\n\r\n * WebHidBlockedForUrls (if there is a match),\r\n\r\n * DefaultWebHidGuardSetting (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns must not conflict with WebHidBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"fbce6d64f0aafb9c":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings","displayName":"Managed toolbar avatar label setting","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"fb850a54a53b0795":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_odfcsiddirectorynamematch","displayName":"SID Directory Name Match (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"81eb92d0-acda-4ea2-8183-29ed5457276b","categoryName":"Container and Directory Naming","options":null},"fb0604083ba34016":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure","displayName":"Prevent Login With Failure","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nPrevent user login when a failure occurs while attaching an FSLogix container\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\PreventLoginWithFailure\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure_1","displayName":"Enabled","description":null,"helpText":null}]},"fbea20e3336f73f0":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype_1","displayName":"Legacy Redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype_2","displayName":"FSLogix Redirection","description":null,"helpText":null}]},"fb0c06b69855569f":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\n\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\n\nIf you don't configure this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedonotrunantimalwareagainstactivexcontrols"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"fb7b4e954d3682c3":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001","displayName":"Run .NET Framework-reliant components signed with Authenticode","description":"","helpText":"","infoUrls":[],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1","displayName":"Prompt","description":null,"helpText":null}]},"fb0eb50a410a5841":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\n\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\n\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\n\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallownetframeworkreliantcomponents"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},"fba3234fa58bc7ad":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c","displayName":"Only allow approved domains to use the TDC ActiveX control","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0","displayName":"Disable","description":null,"helpText":null}]},"fbbd85f40f82ff4f":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies","displayName":"Block third party cookies","description":"Block web page elements that aren't from the domain that's in the address bar from setting cookies.\r\n\r\nIf you enable this policy, web page elements that are not from the domain that is in the address bar can't set cookies\r\n\r\nIf you disable this policy, web page elements from domains other than in the address bar can set cookies.\r\n\r\nIf you don't configure this policy, third-party cookies are enabled but users can change this setting.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_1","displayName":"Enabled","description":null,"helpText":null}]},"fb23f59a338c2d5c":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended","displayName":"Allow users to configure Site safety services (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy is obselete as the feature is being removed after Microsoft Edge version 127.\r\n\r\nThis policy disables site safety services from showing top site info in the page info dialog.\r\n\r\nIf you enable this policy or don't configure it, the top site info will be shown.\r\n\r\nIf you disable this policy, the top site info will not be shown.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fb37d27d1eba37ea":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit","displayName":"Clear browsing data when Microsoft Edge closes","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\r\n\r\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured 'DefaultCookiesSetting' (Configure cookies)\r\n\r\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\r\n\r\nIf you enable this policy, don't configure the 'AllowDeletingBrowserHistory' (Enable deleting browser and download history) or the 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes) policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured 'AllowDeletingBrowserHistory' or 'ClearCachedImagesAndFilesOnExit'.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit_1","displayName":"Enabled","description":null,"helpText":null}]},"fbdd8c675a689f6c":{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended","displayName":"Windows Hello For HTTP Auth Enabled","description":"Indicates if Windows Credential UI should be used to respond to NTLM and Negotiate authentication challenges.\r\n\r\nIf you disable this policy, a basic username and password prompt will be used to respond to NTLM and Negotiate challenges. If you enable or don't configure this policy, Windows Credential UI will be used.","helpText":"","infoUrls":[],"categoryId":"6fafeb5c-65ce-4993-b421-46e60da69131","categoryName":"HTTP authentication","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fb460cda893b4214":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_grooveexe112","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_grooveexe112_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_grooveexe112_1","displayName":"True","description":null,"helpText":null}]},"fb8c90fe3bf7b5a5":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_onenoteexe68","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_onenoteexe68_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_onenoteexe68_1","displayName":"True","description":null,"helpText":null}]},"fb5099e63a5d4b0c":{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb_warningmindiskspacemb","displayName":"Minimum available disk space: (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"fb9af1192b4d8ea3":{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery_enterdchibernatetimeout","displayName":"System Hibernate Timeout (seconds):","description":"","helpText":"","infoUrls":[],"categoryId":"3b64e99d-0359-4264-be38-c544c647f493","categoryName":"Sleep Settings","options":null},"fbb6569899dbd2b1":{"id":"device_vendor_msft_policy_config_privacy_allowinputpersonalization","displayName":"Allow Input Personalization","description":"Updated in Windows 10, version 1809. This policy specifies whether users on the device have the option to enable online speech recognition. When enabled, users can use their voice for dictation and to talk to Cortana and other apps that use Microsoft cloud-based speech recognition. Microsoft will use voice input to help improve our speech services. If the policy value is set to 0, online speech recognition will be disabled and users cannot enable online speech recognition via settings. If policy value is set to 1 or is not configured, control is deferred to users. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#allowinputpersonalization"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":[{"id":"device_vendor_msft_policy_config_privacy_allowinputpersonalization_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_allowinputpersonalization_1","displayName":"Allow","description":"Choice deferred to user's preference.","helpText":null}]},"fb15bf688d615dd0":{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_userincontroloftheseapps","displayName":"Let Apps Access Phone User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"fb50f92f26123c15":{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads","displayName":"Allow Pinned Folder Downloads","description":"This policy controls the visibility of the Downloads shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderdownloads"],"categoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","categoryName":"Start","options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},"fb35f13a0b771e18":{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge","displayName":"Edge Preview enrollment type","description":"Details for this policy will be available in a future release","helpText":"","infoUrls":[],"categoryId":"3bb9ca38-645e-479c-ac5f-01959aec9c30","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},"fbc7b64ab3296b27":{"id":"device_vendor_msft_policy_elevationclientsettings_allowelevationdetection","displayName":"(Preview) Automatically detect elevations","description":"","helpText":"When set to Yes, applications that need elevated permissions to run will automatically be elevated (based on the rules you set). Otherwise, the system only evaluates requests through the right-click menu or if they are set for automatic elevation.","infoUrls":[],"categoryId":"b750fe41-33c4-4293-8dfc-42285be35752","categoryName":null,"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_allowelevationdetection_0","displayName":"No","description":"No","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_allowelevationdetection_1","displayName":"Yes","description":"Yes","helpText":null}]},"fbd3f80c3508883a":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]},"fb16038ebca275dc":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06","displayName":"Trusted Location #6 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_1","displayName":"Enabled","description":null,"helpText":null}]},"fb91c80eace53b4b":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"fb6d580e8a1e8b08":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging","displayName":"Turn on Module Logging (User)","description":"\r\n This policy setting allows you to turn on logging for Windows PowerShell modules.\r\n\r\n If you enable this policy setting, pipeline execution events for members of the specified modules are recorded in the Windows PowerShell log in Event Viewer. Enabling this policy setting for a module is equivalent to setting the LogPipelineExecutionDetails property of the module to True.\r\n\r\n If you disable this policy setting, logging of execution events is disabled for all Windows PowerShell modules. Disabling this policy setting for a module is equivalent to setting the LogPipelineExecutionDetails property of the module to False.\r\n\r\n If this policy setting is not configured, the LogPipelineExecutionDetails property of a module or snap-in determines whether the execution events of a module or snap-in are logged. By default, the LogPipelineExecutionDetails property of all modules and snap-ins is set to False.\r\n\r\n To add modules and snap-ins to the policy setting list, click Show, and then type the module names in the list. The modules and snap-ins in the list must be installed on the computer.\r\n\r\n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enablemodulelogging"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_1","displayName":"Enabled","description":null,"helpText":null}]},"fba27a6a24e4e21a":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner","displayName":"Microsoft SharePoint Designer 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2013.\r\nBy default, the user settings of Microsoft SharePoint Designer 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Designer 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Designer 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013sharepointdesigner"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner_1","displayName":"Enabled","description":null,"helpText":null}]},"fbdc17d7019f4d69":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs","displayName":"Maximum number of recent documents (User)","description":"\"This policy setting allows you to set the maximum number of shortcuts the system can display in the Recent Items menu on the Start menu.\r\n\r\nThe Recent Items menu contains shortcuts to the nonprogram files the user has most recently opened.\r\n\r\nIf you enable this policy setting, the system displays the number of shortcuts specified by the policy setting.\r\n\r\nIf you disable or do not configure this policy setting, by default, the system displays shortcuts to the 10 most recently opened documents.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-maxrecentdocs"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs_1","displayName":"Enabled","description":null,"helpText":null}]},"fb1061b71908ba68":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs","displayName":"Suppress JavaScript Dialogs triggered from different origin subframes (User)","description":"As described in https://www.chromestatus.com/feature/5148698084376576 , JavaScript modal dialogs, triggered by window.alert, window.confirm, and window.prompt, will be blocked in Google Chrome if triggered from a subframe whose origin is different from the main frame origin.\r\nThis policy allows overriding that change.\r\nIf the policy is set to enabled or unset, JavaScript dialogs triggered from a different origin subframe will be blocked.\r\nIf the policy is set to disabled, JavaScript dialogs triggered from a different origin subframe will not be blocked.\r\n\r\nThis policy will be removed in Google Chrome version 95.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs_1","displayName":"Enabled","description":null,"helpText":null}]},"fb72a65cf4775ca7":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc","displayName":"Block Window Management permission on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"fba22d25d16e0666":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_0","displayName":"Downloads model automatically","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_1","displayName":"Do not download model","description":null,"helpText":null}]},"fbb16860b501ad13":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled","displayName":"Enable deleting undecryptable passwords (User)","description":"This policy controls whether the built-in password manager can delete undecryptable passwords from its database. This is required to restore the full functionality of the built-in password manager, but it may include a permanent data loss. Undecryptable password values will not become decryptable on their own and, if fixing them is possible, it usually requires complex user actions.\r\n\r\nSetting the policy to Enabled or leaving it unset means that users with undecryptable passwords saved to the built-in password manager will lose them. Passwords that are still in a working state will remain untouched.\r\n\r\nSetting the policy to Disabled means users will leave their password manager data untouched, but will experience a broken password manager functionality.\r\n\r\nIf the policy is set, users can't change it in Google Chrome.","helpText":"","infoUrls":[],"categoryId":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","categoryName":"Password manager","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fbd559d5362fcc25":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks","displayName":"Excel 4 workbooks (User)","description":"This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified by the title of this policy setting.\r\n\r\nIf you enable this policy setting, you can specify whether users can open, view, edit, or save files.\r\n\r\nThe options that can be selected are below. Note: Not all options may be available for this policy setting.\r\n\r\n- Do not block: The file type will not be blocked.\r\n\r\n- Save blocked: Saving of the file type will be blocked.\r\n\r\n- Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the \"default file block behavior\" key.\r\n\r\n- Block: Both opening and saving of the file type will be blocked, and the file will not open.\r\n\r\n- Open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit the file type will not be enabled.\r\n\r\n- Allow editing and open in Protected View: Both opening and saving of the file type will be blocked, and the option to edit will be enabled.\r\n\r\nIf you disable or do not configure this policy setting, the file type will be blocked.","helpText":"","infoUrls":[],"categoryId":"5c4224e0-6a48-4665-9332-958d98124157","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_1","displayName":"Enabled","description":null,"helpText":null}]},"fb8a97ca89f71200":{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate","displayName":"Locked-Down Local Machine Zone Template (User)","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\n\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\n\nIf you disable this template policy setting, no security level is configured.\n\nIf you do not configure this template policy setting, no security level is configured.\n\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\n\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownlocalmachinezonetemplate"],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},"fb86fc621a647309":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe (User)","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\n\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\n\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\n\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\n\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneinitializeandscriptactivexcontrols"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"fb303c459deaebe1":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter","displayName":"Turn on Cross-Site Scripting Filter (User)","description":"This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.\n\nIf you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.\n\nIf you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenablecrosssitescriptingfilter"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_1","displayName":"Enabled","description":null,"helpText":null}]},"fb44118cc60d88da":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708","displayName":"Enable dragging of content from different domains within a window (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3","displayName":"Disable","description":null,"helpText":null}]},"fb80ced17f214ecd":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended","displayName":"Show Home button on toolbar (User)","description":"Shows the Home button on Microsoft Edge's toolbar.\r\n\r\nEnable this policy to always show the Home button. Disable it to never show the button.\r\n\r\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fb9ce5646d2f619d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride","displayName":"Prevent bypassing Microsoft Defender SmartScreen prompts for sites (User)","description":"This policy setting lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.\r\n\r\nIf you enable this setting, users can't ignore Microsoft Defender SmartScreen warnings and they are blocked from continuing to the site.\r\n\r\nIf you disable or don't configure this setting, users can ignore Microsoft Defender SmartScreen warnings and continue to the site.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"categoryId":"08c5f391-e156-4a72-bbb9-3670f2f63a56","categoryName":"SmartScreen settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_1","displayName":"Enabled","description":null,"helpText":null}]},"fb0b9a6fb09f0499":{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed","displayName":"Live captions allowed (User)","description":"Allow users to turn the Live captions feature on or off.\r\n\r\nLive captions is an accessibility feature that converts speech from the audio that plays in Microsoft Edge in to text and shows this text in a separate window. The entire process happens on the device and no audio or caption text ever leaves the device.\r\n\r\nNote: This feature is not generally available. Clients that have the 'ExperimentationAndConfigurationServiceControl' (Control communication with the Experimentation and Configuration Service) policy set to 'FullMode' may receive the feature before broad availability. Broad availability will be announced via Microsoft Edge release notes.\r\n\r\nIf you enable or don't configure this policy, users can turn this feature on or off at edge://settings/accessibility.\r\n\r\nIf you disable this policy, users will not be able to turn this accessibility feature on. If speech recognition files have been downloaded previously, they will be deleted from the device in 30 days. We recommend avoiding this option unless it's needed in your environment.\r\n\r\nIf users choose to turn on Live captions, speech recognition files (approximately 100 megabytes) will be downloaded to the device on first run and then periodically to improve performance and accuracy. These files will be deleted after 30 days.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},"fb1d6c6293453390":{"id":"user_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions (User)","description":"","helpText":"","infoUrls":[],"categoryId":"6f1386e5-148d-4dc3-84d1-79df721e3233","categoryName":"Default search provider","options":null},"fb0cb17c121c1a9f":{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (User)","description":"","helpText":"","infoUrls":[],"categoryId":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","categoryName":"Sleeping Tabs settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},"fb331eb1bb3edd8e":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled","displayName":"Enable implicit sign-in (User)","description":"Configure this policy to allow/disallow implicit sign-in.\r\n\r\nIf you have configured the 'BrowserSignin' (Browser sign-in settings) policy to 'Disable browser sign-in', this policy will not take any effect.\r\n\r\nIf you enable or don't configure this setting, implicit sign-in will be enabled, Edge will attempt to sign the user into their profile based on what and how they sign in to their OS.\r\n\r\nIf you disable this setting, implicit sign-in will be disabled.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fb00e3975b306dd3":{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI (User)","description":"Controls print image resolution when Microsoft Edge prints PDFs with rasterization.\r\n\r\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution will significantly increase the processing and printing time while a low resolution can lead to poor imaging quality.\r\n\r\nIf you set this policy, it allows a particular resolution to be specified for use when rasterizing PDFs for printing.\r\n\r\nIf you set this policy to zero or don't configure it, the system default resolution will be used during rasterization of page images.","helpText":"","infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_1","displayName":"Enabled","description":null,"helpText":null}]},"fb30d3376a911ba1":{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_miscellaneous437_l_disallowedroamingmrudomains","displayName":"Turn off roaming of file names and metadata by server domain. (User)","description":"\r\nThis policy setting controls whether file names and metadata for Office files are roamed and appear in the list of recently opened files in an Office app, such as Word, on different devices.\r\n\r\nRoaming, which relies on a web-based Microsoft service, occurs when a user signs into Office with the same work or school account on different devices.\r\n\r\nNote: This policy is applied to any Office files stored on a specified list of server domains. The set of disallowed domains is a semicolon separated list: \"*.contoso.com;service.microsoft.com\".\r\n\r\nIf you enable this policy setting, file names and metadata won't roam and won’t appear in the list of recently opened files in Office apps on other devices, unless the file has been opened on that device.\r\n\r\nIf you disable or don't configure this policy setting, file names and metadata will roam and will appear in the list of recently opened files in Office apps on other devices, even if the file hasn’t been opened on that device.","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_miscellaneous437_l_disallowedroamingmrudomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_miscellaneous437_l_disallowedroamingmrudomains_1","displayName":"Enabled","description":null,"helpText":null}]},"fb00976aac675252":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_removememberoftab","displayName":"Remove Member Of tab (User)","description":"This policy setting allows you to remove the Member Of tab from the Contact Card.\r\n\r\nIf you enable this policy setting the Member Of tab is removed from the Contact Card.\r\n\r\nIf you disable or do not configure this policy setting the Member Of tab appears on the Contact Card.","helpText":"","infoUrls":[],"categoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","categoryName":"Contact Card","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_removememberoftab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard_l_removememberoftab_1","displayName":"Enabled","description":null,"helpText":null}]},"fbb4f4bdb2a05829":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_disableitemsinuserinterface_l_tooltipfordisabledtoolbarbuttonsandmenuitems_l_tooltipfordisabledtoolbarbuttonsandmenuitems353","displayName":"Tooltip for disabled toolbar buttons and menu items (User)","description":"","helpText":"","infoUrls":[],"categoryId":"866eedbc-ffd9-457d-b02b-7b163d55c4bd","categoryName":"Disable Items in User Interface","options":null},"fb6be6e5d11ad081":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyaccess","displayName":"Disallow in Access (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyaccess_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_noextensibilitycustomizationfromdocumentpolicy_l_noextensibilitycustomizationfromdocumentpolicyaccess_1","displayName":"True","description":null,"helpText":null}]},"fba7db6888a415b6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicegypt","displayName":"Arabic (Egypt) (User)","description":"Enables the editing language Arabic (Egypt)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicegypt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_arabicegypt_1","displayName":"Enabled","description":null,"helpText":null}]},"fbdd2b79a986a52f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_xitsonga","displayName":"Xitsonga (User)","description":"Enables the editing language Xitsonga","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_xitsonga_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_xitsonga_1","displayName":"Enabled","description":null,"helpText":null}]},"fbce2f637fb62221":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote","displayName":"Default unit of measurement used in OneNote (User)","description":"Sets the value in the option ''Measurement units''.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_defaultunitofmeasurementusedinonenote_1","displayName":"Enabled","description":null,"helpText":null}]},"fb089549210303d2":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableonlinemodeauthdiagnostics","displayName":"Disable online mode for Get Diagnostics. (User)","description":"\r\n This policy setting determines whether online mode for Get Diagnostics is allowed. Enabling this setting will block Get Diagnostics feature from sending authentication and diagnostics logs to our service.\r\n Users will now go through offline mode. We will collect all the logs and store them in the Downloads folder of the user. This user can contact support and decide if they want to send us the logs. \r\n ","helpText":"","infoUrls":[],"categoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableonlinemodeauthdiagnostics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other_l_disableonlinemodeauthdiagnostics_1","displayName":"Enabled","description":null,"helpText":null}]},"fb77ed0e24ae7c5f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifylistofsocialnetworkproviderstoload","displayName":"Specify list of social network providers to load (User)","description":"This policy setting determines the list of social network providers that are loaded by the Outlook Social Connector.\r\n\r\nIf you enable this policy setting, you may enter a list of provider progIDs of social network providers that will be loaded by the Outlook Social Connector. This list needs to be semi-colon delimited. Note that if you enable this policy setting, only social network providers that are on this list will be loaded by the Outlook Social Connector. No other social network providers will be loaded.\r\n\r\nIf you disable or you do not configure this policy setting, the Outlook Social Connector can load any provider specified by the user.","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifylistofsocialnetworkproviderstoload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifylistofsocialnetworkproviderstoload_1","displayName":"Enabled","description":null,"helpText":null}]},"fb2ca4a9a3f8ddef":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_cachedexchangemodefilecachedexchangemode","displayName":"Cached Exchange Mode (File | Cached Exchange Mode) (User)","description":"Specifies the default Cached Exchange Mode for new profiles and disables the download options in the Cached Exchange Mode command submenu in the File menu.","helpText":"","infoUrls":[],"categoryId":"82ecfab7-b76a-4cec-8e76-859db4599ac2","categoryName":"Cached Exchange Mode","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_cachedexchangemodefilecachedexchangemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings~l_cachedexchangemode_l_cachedexchangemodefilecachedexchangemode_1","displayName":"Enabled","description":null,"helpText":null}]},"fbf241c31a55481c":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"categoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_miscellaneous160_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},"fbbb49f1f9746249":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4","displayName":"Language for file conversion (User)","description":"This policy setting specifies how Visio determines what language to use when converting to or from an earlier version of Visio. \r\n\r\nIf you enable this policy setting, you may select from one of these options:\r\n\r\n- Let Visio decide language\r\n- Prompt for language\r\n- Use the following language: You must specify the numeric Microsoft Locale ID (LCID) for that language.\r\n\r\nIf you disable or do not configure this policy setting, Visio decides what language to use.","helpText":"","infoUrls":[],"categoryId":"6ae0d607-832c-403b-b3bc-c563e390ebad","categoryName":"Save/Open","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_advanced~l_saveopen_l_languageforfileconversion4_1","displayName":"Enabled","description":null,"helpText":null}]},"fbf660e734c304f0":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments","displayName":"Set maximum number of trusted documents (User)","description":"This policy setting allows you to specify the maximum number of trust records for trusted documents that can be stored in the registry before the purge task runs. The purge task reduces the number of trusted documents stored in the registry to the value set by the \"Set maximum number of trust records to preserve\" policy setting.\r\n\r\nIf you enable this policy setting, you can specify the maximum number of trusted documents to be stored in the registry before the purge task runs, with an upper limit of 20,000 documents. For performance reasons, we do not recommend setting this policy setting to the upper limit.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 500 is used for the maximum number of trusted documents that can be stored in the registry before the purge task runs.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},"fb54f307b409690c":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},"fb8d2875884a2ccb":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingfortablesusedforlayout","displayName":"Stop checking for tables used for layout (User)","description":"This policy setting prevents the Accessibility Checker from flagging layout tables (i.e. tables with no style applied).\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from flagging layout tables (i.e. tables with no style applied).\r\n\r\nIf you disable or do not configure this policy setting, tables with no style will be flagged and the violations will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingfortablesusedforlayout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingfortablesusedforlayout_1","displayName":"Enabled","description":null,"helpText":null}]},"fbe71eeb62a471c0":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful","displayName":"Stop checking to ensure hyperlink text is meaningful (User)","description":"This policy setting prevents the Accessibility Checker from verifying that hyperlinks have meaningful text.\r\n\r\nIf you enable this policy setting, the Accessibility Checker will be prevented from verifying that hyperlinks have meaningful text.\r\n\r\nIf you disable or do not configure this policy setting, hyperlink text will be checked and any issues will appear in the Accessibility Checker.","helpText":"","infoUrls":[],"categoryId":"73bc2db9-d37f-4add-a64d-a8239273edb3","categoryName":"Check Accessibility","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_1","displayName":"Enabled","description":null,"helpText":null}]},"fbce3ad6a0854f2f":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_updatelinks","displayName":"Update linked data before printing (User)","description":"This policy setting controls the \"Update linked data before printing\" setting found under File tab | Options | Display | Printing options.\r\n\r\nIf you enable this policy setting, Word will update linked data in the document before the document is printed. One example of linked data in Word is an embedded Excel chart that is linked to an Excel spreadsheet.\r\n\r\nIf you disable or do not configure this policy setting, Word will not update linked data in the document before the document is printed.","helpText":"","infoUrls":[],"categoryId":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","categoryName":"Display","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_updatelinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_display_l_updatelinks_1","displayName":"Enabled","description":null,"helpText":null}]},"fbca7c7a26e26800":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid","displayName":"Cipher key length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a5ce858b-74c2-4663-9b3e-068d31349a13","categoryName":"Cryptography","options":null},"fb617dfa29f2591e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders71","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders71_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders71_1","displayName":"True","description":null,"helpText":null}]},"fb823848b82e9070":{"id":"vendor_msft_firewall_mdmstore_publicprofile_allowlocalpolicymerge","displayName":"Allow Local Policy Merge","description":"This value is used as an on/off switch. If this value is false, firewall rules from the local store are ignored and not enforced. The merge law for this option is to always use the value of the GroupPolicyRSoPStore. This value is valid for all schema versions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_publicprofile_allowlocalpolicymerge_false","displayName":"False","description":"AllowLocalPolicyMerge Off","helpText":null},{"id":"vendor_msft_firewall_mdmstore_publicprofile_allowlocalpolicymerge_true","displayName":"True","description":"AllowLocalPolicyMerge On","helpText":null}]},"fb2bac09e2fc6222":{"id":"vendor_msft_sharedpc_enablesharedpcmode","displayName":"Enable Shared PC Mode","description":"Setting this node to \"true\" triggers the action to configure a device to Shared PC mode.","helpText":"","infoUrls":[],"categoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","categoryName":"Shared PC","options":[{"id":"vendor_msft_sharedpc_enablesharedpcmode_false","displayName":"false","description":"Not configured","helpText":null},{"id":"vendor_msft_sharedpc_enablesharedpcmode_true","displayName":"true","description":"Enabled","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/fc.json b/public/intune-definitions/fc.json new file mode 100644 index 000000000000..1c9144265bdb --- /dev/null +++ b/public/intune-definitions/fc.json @@ -0,0 +1 @@ +{"fc6e77f05706ac6b":{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary","displayName":"Target version override","description":"When this policy is enabled, and auto-update is enabled, Microsoft Edge will be updated to the version specified by this policy value.\r\n\r\nThe policy value must be a specific Microsoft Edge version, e.g. 83.0.499.12.\r\n\r\nIf a device has newer version of Microsoft Edge than the value specified, Microsoft Edge will remain on the newer version and not downgrade to the specified version.\r\n\r\nIf the specified version does not exist, or is improperly formatted, then Microsoft Edge will remain on its current version and not update to future versions automatically.","helpText":"","infoUrls":[],"categoryId":"797ac384-f48e-4567-b931-33a6ce923b94","categoryName":"Microsoft Edge Canary","options":[{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},"fc7356e7ba8326b5":{"id":"com.apple.app.lock_app_userenabledoptions_assistivetouch","displayName":"Assistive Touch","description":"If true, allows the user to toggle Assistive Touch.","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_userenabledoptions_assistivetouch_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_userenabledoptions_assistivetouch_true","displayName":"True","description":null,"helpText":null}]},"fcd8f653222832ec":{"id":"com.apple.applicationaccess_ratingappsjp","displayName":"Rating Apps - Japan","description":"The maximum level of app content allowed on the device. Available in iOS 4 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_ratingappsjp_0","displayName":"None","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_1","displayName":"1+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_2","displayName":"2+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_3","displayName":"3+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_4","displayName":"4+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_5","displayName":"5+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_6","displayName":"6+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_7","displayName":"7+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_8","displayName":"8+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_9","displayName":"9+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_10","displayName":"10+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_11","displayName":"11+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_12","displayName":"12+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_13","displayName":"13+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_14","displayName":"14+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_15","displayName":"15+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_16","displayName":"16+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_17","displayName":"17+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_18","displayName":"18+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_19","displayName":"19+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_20","displayName":"20+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_21","displayName":"21+","description":null,"helpText":null},{"id":"com.apple.applicationaccess_ratingappsjp_22","displayName":"All","description":null,"helpText":null}]},"fc5babb14e1e01f5":{"id":"com.apple.dock_magsize-immutable","displayName":"Magnification Size Immutable","description":"If true, locks the magnification slider.","helpText":null,"infoUrls":[],"categoryId":"cc388035-b49c-493e-a598-14b0d0de4359","categoryName":"Dock","options":[{"id":"com.apple.dock_magsize-immutable_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.dock_magsize-immutable_true","displayName":"True","description":null,"helpText":null}]},"fc93d3a4207297c2":{"id":"com.apple.managedclient.preferences_defaultshareadditionalosregionsetting","displayName":"Set the default \"share additional operating system region\" setting","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\n\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting will be shared with the web through the default JavaScript locale. If shared, websites will be able to query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\n\nIf you set this policy to \"Limited\", the OS Regional format will only be shared if its language part matches the Microsoft Edge display language.\n\nIf you set this policy to \"Always\", the OS Regional format will always be shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months can be displayed in one language while the surrounding text is displayed in another language.\n\nIf you set this policy to \"Never\", the OS Regional format will never be shared.\n\nExample 1: In this example the OS Regional format is set to \"en-GB\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Limited\", or \"Always\".\n\nExample 2: In this example the OS Regional format is set to \"es-MX\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Always\" but will not if the policy is set to \"Limited\".\n\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282\n\nPolicy options mapping:\n\n* Limited (0) = Limited\n\n* Always (1) = Always share the OS Regional format\n\n* Never (2) = Never share the OS Regional format\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#defaultshareadditionalosregionsetting"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_defaultshareadditionalosregionsetting_0","displayName":"Limited","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultshareadditionalosregionsetting_1","displayName":"Always share the OS Regional format","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_defaultshareadditionalosregionsetting_2","displayName":"Never share the OS Regional format","description":null,"helpText":null}]},"fc2ef0f830e15e7f":{"id":"com.apple.managedclient.preferences_visualsearchenabled","displayName":"Visual search enabled","description":"Visual search lets you quickly explore more related content about entities in an image.\n\nIf you enable or don't configure this policy, visual search will be enabled via image hover, context menu, and search in sidebar.\n\nIf you disable this policy, visual search will be disabled and you won't be able to get more info about images via hover, context menu, and search in sidebar.\n\nNote: Visual Search in Web Capture is still managed by \"WebCaptureEnabled\" policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#visualsearchenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_visualsearchenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_visualsearchenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fcdff67f98094b2b":{"id":"com.apple.notificationsettings_notificationsettings","displayName":"Notification Settings","description":"An array of notification settings dictionaries.","helpText":null,"infoUrls":[],"categoryId":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","categoryName":"Notifications","options":null},"fcb8cfeafa94352c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageapplauncherenabled","displayName":"Hide App Launcher on Microsoft Edge new tab page","description":"By default, the App Launcher is shown every time a user opens a new tab page.\n\nIf you enable or don't configure this policy, there's no change on the Microsoft Edge new tab page and App Launcher is there for users.\n\nIf you disable this policy, App Launcher doesn't appear and users can't launch Microsoft 365 apps from Microsoft Edge new tab page via the App Launcher.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageapplauncherenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.newtabpageapplauncherenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fcfcaa445d3d8f45":{"id":"com.microsoft.edge.mamedgeappconfigsettings.sslerroroverrideallowed","displayName":"Allow users to proceed from the HTTPS warning page","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\n\nIf you enable or don't configure (default) this policy, users can click through these warning pages.\n\nIf you disable this policy, users are blocked from clicking through any warning page.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.sslerroroverrideallowed_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.sslerroroverrideallowed_true","displayName":"Enabled","description":null,"helpText":null}]},"fca7e4837292c9f2":{"id":"device_vendor_msft_keyboardfilter_breakoutkeyscancode","displayName":"Breakout Key Scancode (Windows Insiders only)","description":"Get or set the scancode that forces the device to the login screen when pressed five times consecutively. The value is the string representation of the hexadecimal scancode (without the \"0x\" prefix). Defaults to \"5b\", the scancode for the \"left windows key\". Only set a single scancode; scancode combinations are not supported. After setting this value, a reboot is required for the change to take effect.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/KeyboardFilter-csp/"],"categoryId":"717b634f-72a6-44f6-92c5-e1397bb10f40","categoryName":"Keyboard Filter","options":null},"fca5a916bdffb659":{"id":"device_vendor_msft_policy_config_admx_disknvcache_cachepowermodepolicy","displayName":"Turn off cache power mode","description":"This policy setting turns off power save mode on the hybrid hard disks in the system.\r\n\r\nIf you enable this policy setting, the hard disks are not put into NV cache power save mode and no power savings are achieved.\r\n\r\nIf you disable this policy setting, the hard disks are put into an NV cache power saving mode. In this mode, the system tries to save power by aggressively spinning down the disk.\r\n\r\nIf you do not configure this policy setting, the default behavior is to allow the hybrid hard disks to be in power save mode.\r\n\r\nNote: This policy setting is applicable only if the NV cache feature is on.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-disknvcache#admx-disknvcache-cachepowermodepolicy"],"categoryId":"40c593b9-63cf-4b10-ad26-1ceb7c9491fe","categoryName":"Disk NV Cache","options":[{"id":"device_vendor_msft_policy_config_admx_disknvcache_cachepowermodepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_disknvcache_cachepowermodepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},"fc5d1ab07af06ed0":{"id":"device_vendor_msft_policy_config_admx_kdc_pkinitfreshness_pkinitfreshness_levels","displayName":"PKInit Freshness Extension options:","description":null,"helpText":"","infoUrls":[],"categoryId":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","categoryName":"KDC","options":[{"id":"device_vendor_msft_policy_config_admx_kdc_pkinitfreshness_pkinitfreshness_levels_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_pkinitfreshness_pkinitfreshness_levels_1","displayName":"Supported","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_kdc_pkinitfreshness_pkinitfreshness_levels_2","displayName":"Required","description":null,"helpText":null}]},"fc5dd726eea81ada":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_lbl_backgroundsyncignoreblockouttime","displayName":"Maximum Allowed Time Without A Sync (minutes)","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"fc875918638c7773":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypeguaranteed_pv_qospriorityvalue","displayName":"Priority value","description":null,"helpText":"","infoUrls":[],"categoryId":"c87ae066-cc1a-44c9-8645-1db2359f7484","categoryName":"Layer-2 priority value","options":null},"fc5852454441aab1":{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditpnpactivity","displayName":"Detailed Tracking Audit PNP Activity","description":"This policy setting allows you to audit when plug and play detects an external device. If you configure this policy setting, an audit event is generated whenever plug and play detects an external device. Only Success audits are recorded for this category. If you do not configure this policy setting, no audit event is generated when an external device is detected by plug and play.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#detailedtracking_auditpnpactivity"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditpnpactivity_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditpnpactivity_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditpnpactivity_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditpnpactivity_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"fc1d87a4b0d14112":{"id":"device_vendor_msft_policy_config_cellular_letappsaccesscellulardata","displayName":"Let Apps Access Cellular Data","description":"This policy setting specifies whether Windows apps can access cellular data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cellular#letappsaccesscellulardata"],"categoryId":"d5d99ca9-9995-4724-bc46-fd07f362898c","categoryName":"Cellular","options":[{"id":"device_vendor_msft_policy_config_cellular_letappsaccesscellulardata_0","displayName":"User is in control","description":"User is in control","helpText":null},{"id":"device_vendor_msft_policy_config_cellular_letappsaccesscellulardata_1","displayName":"Force Allow","description":"Force Allow","helpText":null},{"id":"device_vendor_msft_policy_config_cellular_letappsaccesscellulardata_2","displayName":"Force Deny","description":"Force Deny","helpText":null}]},"fcf5e9a367bced92":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled","displayName":"Enable AutoFill for credit cards","description":"Setting the policy to True or leaving it unset means users can control autofill suggestions for credit cards in the UI.\r\n\r\nSetting the policy to False means autofill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fcb762552d6ab4f0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis","displayName":"Disable support for 3D graphics APIs","description":"Setting the policy to True (or setting HardwareAccelerationModeEnabled to False) prevents webpages from accessing the WebGL API, and plugins can't use the Pepper 3D API.\r\n\r\nSetting the policy to False or leaving it unset lets webpages use the WebGL API and plugins use the Pepper 3D API, but the browser's default settings might still require command line arguments to use these APIs.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis_1","displayName":"Enabled","description":null,"helpText":null}]},"fc95383aa7f63bf9":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended","displayName":"Default search provider new tab page URL","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderNewTabURL specifies the URL of the search engine used to provide a New Tab page.\r\n\r\nLeaving DefaultSearchProviderNewTabURL unset means no new tab page is provided.\r\n\r\nExample value: https://search.my.company/newtab","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fc9cdc518cb224e7":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","categoryName":"Default search provider","options":null},"fcd7e93ed505563a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin","displayName":"Minimum SSL version enabled","description":"Setting the policy to a valid value means Google Chrome won't use SSL/TLS versions less than the specified version. Unrecognized values are ignored.\r\n\r\nIf this policy is not set, then Google Chrome will show an error for TLS 1.0 and TLS 1.1, but the user will be able to bypass it.\r\n\r\nIf this policy is set to \"tls1.2\", the user will not be able to bypass this error.\r\n\r\nSupport for setting this policy to \"tls1\" or \"tls1.1\" was removed in version 91. Suppressing the TLS 1.0/1.1 warning is no longer supported.\r\n\r\nExample value: tls1.2","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_1","displayName":"Enabled","description":null,"helpText":null}]},"fca76c270d62d40a":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled","displayName":"Enable Translate","description":"Setting the policy to True provides translation functionality when it's appropriate for users by showing an integrated translate toolbar in Google Chrome and a translate option on the right-click context menu. Setting the policy to False shuts off all built-in translate features.\r\n\r\nIf you set the policy, users can't change this function. Leaving it unset lets them change the setting.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fc8b6cfc55e50f36":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings","displayName":"Default search provider encodings","description":"If DefaultSearchProviderEnabled is on, setting DefaultSearchProviderEncodings specifies the character encodings supported by the search provider. Encodings are code page names such as UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\r\n\r\nLeaving DefaultSearchProviderEncodings unset puts UTF-8 in use.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_1","displayName":"Enabled","description":null,"helpText":null}]},"fc6c552bbedad4b8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"fcaaec9a0c5cdfa5":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings","displayName":"Settings for AI-powered History Search","description":"AI History Search is a feature that allows users to search their browsing history and receive generated answers based on page contents and not just the page title and URL.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"categoryId":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","categoryName":"Generative AI","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_1","displayName":"Enabled","description":null,"helpText":null}]},"fc040b9d027421fe":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled","displayName":"Re-enable the deprecated async interface for FileSystemSyncAccessHandle in File System Access API","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fc47e0386a66740d":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder","displayName":"No Profile Containing Folder","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nVHD(x) file is placed and used in the root VHDLocation rather than in a SID directory under VHDLocation\r\n\r\nNOTE: This setting will override ANY OTHER setting related to container folders.\r\n\r\n- SIDDIRNameMatch has NO EFFECT when used in conjunction with this setting.\r\n- SIDDIRNamePattern has NO EFFECT when used in conjunction with this setting.\r\n- FlipFlopProfileDirectoryName has NO EFFECT when used in conjunction with this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\NoProfileContainingFolder\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"479c2edd-6539-4e1d-96ba-518d6f6264c3","categoryName":"Container and Directory Naming","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder_1","displayName":"Enabled","description":null,"helpText":null}]},"fc1411c80079b034":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"categoryId":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","categoryName":"Locked- Down Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},"fc2a79f38c2e0420":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles","displayName":"Enable use of ephemeral profiles","description":"Controls whether user profiles are switched to ephemeral mode. An ephemeral profile is created when a session begins, is deleted when the session ends, and is associated with the user's original profile.\r\n\r\nIf you enable this policy, profiles run in ephemeral mode. This lets users work from their own devices without saving browsing data to those devices. If you enable this policy as an OS policy (by using GPO on Windows, for example), it applies to every profile on the system.\r\n\r\nIf you disable this policy or don't configure it, users get their regular profiles when they sign in to the browser.\r\n\r\nIn ephemeral mode, profile data is saved on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies, and web databases aren't saved after the browser is closed. This doesn't prevent a user from manually downloading any data to disk, or from saving pages or printing them. If the user has enabled sync, all data is preserved in their sync accounts just like with regular profiles. Users can also use InPrivate browsing in ephemeral mode unless you explicitly disable this.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},"fc017f55d24616b0":{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare","displayName":"Configure the Share experience","description":"If you set this policy to 'ShareAllowed' (0, the default), users will be able to access the Windows 10 Share experience from the Settings and More Menu in Microsoft Edge to share with other apps on the system.\r\n\r\nIf you set this policy to 'ShareDisallowed' (1), users won't be able to access the Windows 10 Share experience. If the Share button is on the toolbar, it will also be hidden.\r\n\r\n* 0 = Allow using the Share experience\r\n\r\n* 1 = Don't allow using the Share experience\r\n","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_1","displayName":"Enabled","description":null,"helpText":null}]},"fc6e6036d5620d41":{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled","displayName":"Specifies whether WebAssembly modules can be sent cross-origin (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 98.\r\n\r\nSpecifies whether WebAssembly modules can be sent to another window or worker cross-origin. Cross-origin WebAssembly module sharing was deprecated as part of the efforts to deprecate document.domain, see https://github.com/mikewest/deprecating-document-domain. This policy allowed re-enabling of cross-origin WebAssembly module sharing. This policy is obsolete because it was intended to offer a longer transition period in the deprecation process.\r\n\r\nIf you enable this policy, sites can send WebAssembly modules cross-origin\r\nwithout restrictions.\r\n\r\nIf you disable or don't configure this policy, sites can only send\r\nWebAssembly modules to windows and workers in the same origin.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fc9d8504be12a2f4":{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled","displayName":"Show links shared from Microsoft 365 apps in History","description":"Allows Microsoft Edge to display links recently shared by or shared with the user from Microsoft 365 apps in History.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge displays links recently shared by or shared with the user from Microsoft 365 apps in History.\r\n\r\nIf you disable this policy, Microsoft Edge does not display links recently shared by or shared with the user from Microsoft 365 apps in History. The control in Microsoft Edge settings is disabled and set to off.\r\n\r\nThis policy only applies for Microsoft Edge local user profiles and profiles signed in using Azure Active Directory.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fca21feac5f012c9":{"id":"device_vendor_msft_policy_config_office16v5~policy~l_microsoftofficemachine~l_updates_l_preventbinginstall","displayName":"Don’t install extension for Microsoft Search in Bing that makes Bing the default search engine","description":"This policy setting allows you to control whether an extension for Microsoft Search in Bing is installed that makes Bing the default search engine for Google Chrome and Firefox web browsers. This extension is installed with a new installation of Office or when an existing installation of Office is updated.\r\n\r\nIf you enable this policy setting, the extension won’t be installed and Bing won’t be made the default search engine.\r\n\r\nIf you disable or don’t configure this policy setting, the extension will be installed and Bing will be made the default search engine, unless you have used some other method, such as the Office Deployment Tool, to exclude the extension from being installed.\r\n\r\nNote: Even if Bing is made the default search engine, users can still change the default search engine in Google Chrome or Firefox.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2109345.\r\n ","helpText":"","infoUrls":[],"categoryId":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","categoryName":"Updates","options":[{"id":"device_vendor_msft_policy_config_office16v5~policy~l_microsoftofficemachine~l_updates_l_preventbinginstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v5~policy~l_microsoftofficemachine~l_updates_l_preventbinginstall_1","displayName":"Enabled","description":null,"helpText":null}]},"fcddc7d139655e88":{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode","displayName":"Choose how to specify proxy server settings","description":"Allows you to specify the proxy server settings that are used by Microsoft Edge Update.\r\n\r\n If you enable this policy, you can choose between the following proxy server options:\r\n - If you choose to never use a proxy server and always connect directly, all other options are ignored.\r\n - If you choose to use system proxy settings or auto-detect the proxy server, all other options are ignored.\r\n - If you choose fixed server proxy mode, you can specify further options in 'Address or URL of proxy server'.\r\n - If you choose to use a .pac proxy script, you must specify the URL for the script in 'URL to a proxy .pac file'.\r\n\r\n If you enable this policy, users in your organization can't change the proxy settings in Microsoft Edge Update.\r\n\r\n If you disable or don't configure this policy, no proxy server settings are configured, but users in your organization can choose their own proxy settings for Microsoft Edge Update.","helpText":"","infoUrls":[],"categoryId":"ff543267-540e-4e37-a1e9-daf6a5e16ba7","categoryName":"Proxy Server","options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_1","displayName":"Enabled","description":null,"helpText":null}]},"fc8a0b2f67444125":{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_cachepath_cachepath_textbox","displayName":"Package Manifest and Payload Cache Path (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","categoryName":"Install and Update Settings","options":null},"fcacb5892e21664e":{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_autocreatedesktopshortcuts","displayName":"Automatically creates Windows App shortcuts to desktop","description":"Automatically creates Windows App shortcuts to the desktop to launch resources specified by the IT administrator.\n\nIf you enable this policy, Windows App will automatically create desktop shortcuts for resources configured by the IT admin in the Azure Virtual Desktop portal. After the user signs in, these shortcuts will be created on the desktop. When the user signs out, the shortcuts will be automatically cleaned up.\n\nIf you disable or do not configure this policy, desktop shortcuts will not be automatically created.\n ","helpText":"","infoUrls":[],"categoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","categoryName":"Windows App","options":[{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_autocreatedesktopshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsapp~policy~winapp_node_winapp_autocreatedesktopshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},"fcb1198452b010e1":{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablecleartpmbutton","displayName":"Disable Clear Tpm Button","description":"Disable the Clear TPM button in Windows Security. Enabled:The Clear TPM button will be unavailable for use. Disabled:The Clear TPM button will be available for use on supported systems. Not configured:Same as Disabled. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablecleartpmbutton"],"categoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","categoryName":"Windows Defender Security Center","options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablecleartpmbutton_0","displayName":"(Disabled or not configured) The security processor troubleshooting page shows a button that initiates the process to clear the security processor (TPM).","description":"(Disabled or not configured) The security processor troubleshooting page shows a button that initiates the process to clear the security processor (TPM).","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablecleartpmbutton_1","displayName":"(Enabled) The security processor troubleshooting page will not show a button to initiate the process to clear the security processor (TPM)","description":"(Enabled) The security processor troubleshooting page will not show a button to initiate the process to clear the security processor (TPM)","helpText":null}]},"fc32a155744d0d04":{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype","displayName":"Clipboard content options","description":"If you choose to enable copying, this policy determines the type of content that can be copied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"categoryId":"cd55f347-a417-4fe9-83ee-8f1f40ac5eb0","categoryName":null,"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype_1","displayName":"Allow text copying","description":"Allow text copying.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype_2","displayName":"Allow image copying","description":"Allow image copying.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype_3","displayName":"Allow both text and image copying","description":"Allow text and image copying.","helpText":null}]},"fc9b21bc1191d828":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath","displayName":"Set the default source path for Update-Help (User)","description":"This policy setting allows you to set the default value of the SourcePath parameter on the Update-Help cmdlet.\r\n\r\nIf you enable this policy setting, the Update-Help cmdlet will use the specified value as the default value for the SourcePath parameter. This default value can be overridden by specifying a different value with the SourcePath parameter on the Update-Help cmdlet.\r\n\r\nIf this policy setting is disabled or not configured, this policy setting does not set a default value for the SourcePath parameter of the Update-Help cmdlet.\r\n\r\nNote: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enableupdatehelpdefaultsourcepath"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_1","displayName":"Enabled","description":null,"helpText":null}]},"fc3660eb4fff2df8":{"id":"user_vendor_msft_policy_config_admx_programs_noinstalledupdates","displayName":"Hide \"Installed Updates\" page (User)","description":"This setting prevents users from accessing \"Installed Updates\" page from the \"View installed updates\" task.\r\n\r\n\"Installed Updates\" allows users to view and uninstall updates currently installed on the computer. The updates are often downloaded directly from Windows Update or from various program publishers.\r\n\r\nIf this setting is disabled or not configured, the \"View installed updates\" task and the \"Installed Updates\" page will be available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to install or uninstall programs.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-noinstalledupdates"],"categoryId":"dc16dbf0-aac8-4ff3-a546-1ddb55650f47","categoryName":"Programs","options":[{"id":"user_vendor_msft_policy_config_admx_programs_noinstalledupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_noinstalledupdates_1","displayName":"Enabled","description":null,"helpText":null}]},"fc54986f6b179d08":{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_1","displayName":"Custom Classes: Deny write access (User)","description":"This policy setting denies write access to custom removable storage classes.\r\n\r\nIf you enable this policy setting, write access is denied to these removable storage classes.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to these removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-customclasses-denywrite-access-1"],"categoryId":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","categoryName":"Removable Storage Access","options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},"fceb157bf22904bb":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013","displayName":"Microsoft Office 365 PowerPoint 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 PowerPoint 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 PowerPoint 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365powerpoint2013"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013_1","displayName":"Enabled","description":null,"helpText":null}]},"fc11d595883c2c05":{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute","displayName":"Set the time Quiet Hours ends each day (User)","description":"\r\n This policy setting specifies the number of minutes after midnight (local time) that Quiet Hours is to end each day.\r\n\r\n If you enable this policy setting, the specified time will be used, and users will not be able to customize any Quiet Hours settings.\r\n\r\n If you disable this policy setting, a default value will be used, and users will not be able to change it or any other Quiet Hours setting.\r\n\r\n If you do not configure this policy setting, a default value will be used, which administrators and users will be able to modify.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-quiethoursdailyendminute"],"categoryId":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","categoryName":"Notifications","options":[{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute_1","displayName":"Enabled","description":null,"helpText":null}]},"fcac313fed993b36":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc","displayName":"Allow Window Management permission on these sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"fc34e40664e561fb":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins","displayName":"List of origins allowing all HTTP authentication (User)","description":"Setting the policy specifies for which origins to allow all the HTTP authentication schemes Google Chrome supports regardless of the AuthSchemes policy.\r\n\r\nFormat the origin pattern according to this format (https://support.google.com/chrome/a?p=url_blocklist_filter_format). Up to 1,000 exceptions can be defined in AllHttpAuthSchemesAllowedForOrigins.\r\nWildcards are allowed for the whole origin or parts of the origin, either the scheme, host, port.\r\n\r\nExample value:\r\n\r\n*.example.com","helpText":"","infoUrls":[],"categoryId":"93ed2300-658d-40f3-8211-9295a240579c","categoryName":"HTTP authentication","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},"fc53c8c2022bb242":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled","displayName":"Extend support for Chrome Apps on Microsoft® Windows®, macOS, and Linux. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fc672c7ec22ce274":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font_l_namesize","displayName":"Name, Size (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","categoryName":"General","options":null},"fc1e6b9b2f42c5c0":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails","displayName":"Set document behavior if file validation fails (User)","description":"This policy setting controls how Office handles documents when they fail file validation. \r\n\r\nIf you enable this policy setting, you can configure the following options for files that fail file validation:\r\n\r\n- Block files completely. Users cannot open the files.\r\n- Open files in Protected View and disallow edit. Users cannot edit the files. This is also how Office handles the files if you disable this policy setting.\r\n- Open files in Protected View and allow edit. Users can edit the files. This is also how Office handles the files if you do not configure this policy setting.\r\n\r\nIf you disable this policy setting, Office follows the \"Open files in Protected View and disallow edit\" behavior.\r\n\r\nIf you do not configure this policy setting, Office follows the \"Open files in Protected View and allow edit\" behavior.","helpText":"","infoUrls":[],"categoryId":"fe54701d-42bd-47f0-9c49-26ff6a928b32","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_1","displayName":"Enabled","description":null,"helpText":null}]},"fc1d21a780ced2a7":{"id":"user_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc","displayName":"Allow Option To Show This PC (User)","description":"When This PC location is restricted, give the user the option to enumerate and navigate into it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#allowoptiontoshowthispc"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"user_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_0","displayName":"Not Allowed.","description":"Not Allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"fc878c6aa5ef39b3":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone (User)","description":"","helpText":"","infoUrls":[],"categoryId":"99dfe848-181d-480a-bd20-3f93f04b6f5c","categoryName":"Locked- Down Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},"fc59e4d47455d620":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls (User)","description":"","helpText":"","infoUrls":[],"categoryId":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","categoryName":"Locked- Down Local Machine Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},"fc6a6e6c9213c81d":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles","displayName":"Allow drag and drop or copy and paste files (User)","description":"This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\n\nIf you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.\n\nIf you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.\n\nIf you do not configure this policy setting, users are queried to choose whether to drag or copy files from this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowdraganddropcopyandpastefiles"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"fc17e90fb423bd6b":{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402","displayName":"Scripting of Java applets (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_1","displayName":"Prompt","description":null,"helpText":null}]},"fce4ae26045915fc":{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1","displayName":"Disable automatic upload of sign-in failure logs (User)","description":"\r\nUploads the sign-in failure logs to the Microsoft Lync Server automatically for analysis. No logs will be automatically uploaded if sign-in is successful.\r\n\r\nIf this policy is not configured, then the following happens: \r\nFor Lync Online Users: Sign-in failure logs are automatically uploaded.\r\nFor Lync On-Premise Users: A confirmation seeking consent from the user is shown before upload.\r\n\r\nWhen this is disabled, sign-in logs would be uploaded to the Microsoft Lync Server for both Lync On-Premise and Online users automatically.\r\n\r\nWhen this is enabled, sign-in logs will never be uploaded automatically.\r\n ","helpText":"","infoUrls":[],"categoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","categoryName":"Microsoft Lync Feature Policies","options":[{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1_1","displayName":"Enabled","description":null,"helpText":null}]},"fc2629516190626e":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting","displayName":"Default JavaScript setting (User)","description":"Set whether websites can run JavaScript. You can allow it for all sites (1) or block it for all sites (2).\r\n\r\nIf you don't configure this policy, all sites can run JavaScript by default, and the user can change this setting.\r\n\r\n* 1 = Allow all sites to run JavaScript\r\n\r\n* 2 = Don't allow any site to run JavaScript","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"fc05c86a72ca1d75":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup (User)","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'Open new tab' (5).\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'Restore the last session' (1). The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'Open a list of URLs' (4).\r\n\r\nDisabling this setting is equivalent to leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\n* 1 = Restore the last session\r\n\r\n* 4 = Open a list of URLs\r\n\r\n* 5 = Open a new tab","helpText":"","infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},"fc059e60faba6fda":{"id":"user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":null},"fc60b4d713e53ad2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_inuktitutsyllabics","displayName":"Inuktitut (Syllabics) (User)","description":"Enables the editing language Inuktitut (Syllabics)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_inuktitutsyllabics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_inuktitutsyllabics_1","displayName":"Enabled","description":null,"helpText":null}]},"fc7f79ed97b41258":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lowersorbian","displayName":"Lower Sorbian (User)","description":"Enables the editing language Lower Sorbian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lowersorbian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_lowersorbian_1","displayName":"Enabled","description":null,"helpText":null}]},"fcb468e3796eaeb2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sindhidevanagari","displayName":"Sindhi (Devanagari) (User)","description":"Enables the editing language Sindhi (Devanagari)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sindhidevanagari_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_sindhidevanagari_1","displayName":"Enabled","description":null,"helpText":null}]},"fcd99fd07edbba4a":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache3_l_workflowpath439","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"fc0a5a0a9b77b014":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_allowedextensions_l_allowedextensionsole","displayName":"File extensions: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"50b4bc60-802c-477a-9366-80e09154595f","categoryName":"Security Settings","options":null},"fc45b7e12bb17bf2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc15_l_pathcolon15","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":null},"fc9b74bfb0ff07e4":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders","displayName":"Reminders (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"13eb248a-4549-4d23-9ada-23b40edf36bf","categoryName":"Reminder Options","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_other~l_advanced~l_reminderoptions_l_reminders_1","displayName":"Enabled","description":null,"helpText":null}]},"fc3bb8b0dfe5d596":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbook","displayName":"Turn off Hierarchical Address Book (User)","description":"This policy setting turns off the Hierarchical Address Book (HAB).\r\n\r\nIf you enable this policy setting, the HAB will be turned off. \r\n\r\nIf you disable or do not configure this policy setting, the HAB will be displayed.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_turnoffhierarchicaladdressbook_1","displayName":"Enabled","description":null,"helpText":null}]},"fc064a4a6e0d009d":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc04_l_descriptioncolon22","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"fc95a786bc8a79f1":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc20_l_pathcolon84","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":null},"fcdd8ec4c25e8202":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient","displayName":"File Tab | Share | Email (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_1","displayName":"True","description":null,"helpText":null}]},"fc0724cd4b95b9ab":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_l_rtffilesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_l_rtffilesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_l_rtffilesdropid_1","displayName":"Save blocked","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_l_rtffilesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_l_rtffilesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_l_rtffilesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_rtffiles_l_rtffilesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"fcfd84b336484464":{"id":"vendor_msft_firewall_mdmstore_firewallrules_{firewallrulename}_remoteaddressdynamickeywords","displayName":"Reusable groups","description":"Comma separated list of Dynamic Keyword Address Ids (GUID strings) specifying the remote addresses covered by the rule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Firewall-csp/"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":null}} \ No newline at end of file diff --git a/public/intune-definitions/fd.json b/public/intune-definitions/fd.json new file mode 100644 index 000000000000..f54a4259736a --- /dev/null +++ b/public/intune-definitions/fd.json @@ -0,0 +1 @@ +{"fdde04c7e4dfa0b7":{"id":"com.apple.applicationaccess_allowappstobehidden","displayName":"Allow Apps To Be Hidden","description":"If false, disables the ability for the user to hide apps. It does not affect the user's ability to leave it in the App Library, while removing it from the home screen.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowappstobehidden_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowappstobehidden_true","displayName":"True","description":null,"helpText":null}]},"fd2d49b6a0658526":{"id":"com.apple.applicationaccess_allowcloudreminders","displayName":"Allow Cloud Reminders","description":"If false, disables iCloud Reminder services. Available in macOS 10.12 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowcloudreminders_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowcloudreminders_true","displayName":"True","description":null,"helpText":null}]},"fd898ce00494957b":{"id":"com.apple.applicationaccess_allowwebdistributionappinstallation","displayName":"Allow Web Distribution App Installation","description":"When 'false', the device prevents installation of apps directly from the web.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowwebdistributionappinstallation_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowwebdistributionappinstallation_true","displayName":"True","description":null,"helpText":null}]},"fd4b802f418d05b3":{"id":"com.apple.cellularprivatenetwork.managed_cellulardatapreferred","displayName":"Cellular Data Preferred","description":"Set to `true` to prefer this private network over Wi-Fi.","helpText":null,"infoUrls":[],"categoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","categoryName":"Cellular Private Network","options":[{"id":"com.apple.cellularprivatenetwork.managed_cellulardatapreferred_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.cellularprivatenetwork.managed_cellulardatapreferred_true","displayName":"True","description":null,"helpText":null}]},"fd49908c2bdc3f38":{"id":"com.apple.directoryservice.managed_adpreferreddcserver","displayName":"AD Preferred DC Server","description":"The preferred domain server.","helpText":null,"infoUrls":[],"categoryId":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","categoryName":"Directory Service","options":null},"fd4243564c7566ac":{"id":"com.apple.managedclient.preferences_audiosandboxenabled","displayName":"Allow the audio sandbox to run","description":"This policy controls the audio process sandbox.\n\nIf you enable this policy, the audio process will run sandboxed.\n\nIf you disable this policy, the audio process will run unsandboxed and the WebRTC audio-processing module will run in the renderer process.\nThis leaves users open to security risks related to running the audio subsystem unsandboxed.\n\nIf you don't configure this policy, the default configuration for the audio sandbox will be used, which might differ based on the platform.\n\nThis policy is intended to give enterprises flexibility to disable the audio sandbox if they use security software setups that interfere with the sandbox.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#audiosandboxenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_audiosandboxenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_audiosandboxenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fd463c979b79b5b8":{"id":"com.apple.managedclient.preferences_composeinlineenabled","displayName":"Control access to Microsoft 365 Copilot writing assistance in Microsoft Edge for Business","description":"This policy controls whether users can use writing support features in Microsoft Edge for Business, such as Rewrite, which utilizes Microsoft 365 Copilot Chat. With Rewrite, users can receive help with drafting content, rewriting text, and adjusting style directly in their browser tab. In Edge, users can trigger it when highlighting editable content in their main browser through the right-click context menu.\n\nThis policy applies only to Microsoft Entra accounts and does not apply to Microsoft accounts.\n\nIf you enable this policy, users can use Rewrite in Microsoft Edge when logged in with an Entra account.\n\nIf you disable this policy, users within your tenant will not be able to use Rewrite.\n\nIf you don't configure this policy, the default behavior is as follows:\n\n- Rewrite is available to users\n\n- Users can enable or disable Microsoft 365 Copilot access to Microsoft Edge page content using the toggle in Microsoft Edge settings.\n\nNote: Rewrite is not available on pages protected by data loss prevention (DLP) policies to help maintain compliance.\n\nLearn more about Microsoft 365 Copilot Chat data, privacy, and security here: https://go.microsoft.com/fwlink/?linkid=2321816","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#composeinlineenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_composeinlineenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_composeinlineenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fd85a593f311c347":{"id":"com.apple.managedclient.preferences_defaultweatherlocation","displayName":"Default weather location","description":"Sets the default weather location in the Calendar view. Enter the city and state or country (e.g. Redmond, WA or Paris, France)","helpText":null,"infoUrls":["https://docs.microsoft.com/deployoffice/mac/preferences-outlook#specify-default-weather-location"],"categoryId":"191a84f2-13b5-4609-808f-8b743b7f0247","categoryName":"Microsoft Outlook","options":null},"fd49bcfd38b199a4":{"id":"com.apple.managedclient.preferences_intranetredirectbehavior","displayName":"Intranet Redirection Behavior","description":"This policy configures behavior for intranet redirection via DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\n\nIf this policy isn't configured, the browser will use the default behavior of DNS interception checks and intranet redirect suggestions. In M88, they are enabled by default but will be disabled by default in the future release.\n\n\"DNSInterceptionChecksEnabled\" is a related policy that might also disable DNS interception checks. However, this policy is a more flexible version which might separately control intranet redirection infobars and might be expanded in the future.\nIf either \"DNSInterceptionChecksEnabled\" or this policy make a request to disable interception checks, the checks will be disabled.\nIf DNS interception checks are disabled by this policy but \"GoToIntranetSiteForSingleWordEntryInAddressBar\" is enabled, single word queries will still result in intranet navigations.\n\nPolicy options mapping:\n\n* Default (0) = Use default browser behavior.\n\n* DisableInterceptionChecksDisableInfobar (1) = Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\n\n* DisableInterceptionChecksEnableInfobar (2) = Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.\n\n* EnableInterceptionChecksEnableInfobar (3) = Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#intranetredirectbehavior"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_intranetredirectbehavior_0","displayName":"Use default browser behavior.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_intranetredirectbehavior_1","displayName":"Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_intranetredirectbehavior_2","displayName":"Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_intranetredirectbehavior_3","displayName":"Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null}]},"fdc77e95fa31202f":{"id":"com.apple.managedclient.preferences_tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\n\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\n\nThis policy is not considered if a site matches a URL pattern in the \"SameOriginTabCaptureAllowedByOrigins\" policy.\n\nIf a site matches a URL pattern in this policy, the following policies will not be considered: \"WindowCaptureAllowedByOrigins\", \"ScreenCaptureAllowedByOrigins\", \"ScreenCaptureAllowed\".\n\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#tabcaptureallowedbyorigins"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"fdda1e75c31728fd":{"id":"com.apple.managedclient.preferences_zstdcontentencodingenabled","displayName":"Enable zstd content encoding support (Deprecated)","description":"This feature enables advertising \"zstd\" support in the Accept-Encoding request header and support for decompressing zstd web content.\n\nIf you enable or don't configure this policy, Microsoft Edge will accept server responses compressed with zstd.\n\nIf you disable this policy, the zstd content encoding feature will not be advertised or supported when processing server responses.\n\nThis policy is temporary and will be removed in the future.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#zstdcontentencodingenabled"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_zstdcontentencodingenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_zstdcontentencodingenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fdc416f5f44a386d":{"id":"com.apple.preference.security_dontallowfirewallui","displayName":"Do Not Allow Firewall UI","description":"If true, disables user changes to the firewall settings.","helpText":null,"infoUrls":[],"categoryId":"8abddb23-7036-4ba8-8912-529279a849ea","categoryName":"Security Preferences","options":[{"id":"com.apple.preference.security_dontallowfirewallui_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.preference.security_dontallowfirewallui_true","displayName":"True","description":null,"helpText":null}]},"fdc177d176e60559":{"id":"com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifier","displayName":"Identifier","description":"The bundle ID or installation path of the binary.\n\n> Note:\n> This value is case-sensitive.","helpText":null,"infoUrls":[],"categoryId":"82d173f9-ba0b-4b09-bbb8-68cba4916162","categoryName":"Privacy Preferences Policy Control","options":null},"fd56c5b8958e1c7d":{"id":"com.apple.webcontent-filter_organization","displayName":"Organization","description":"The organization string that passes to the third-party plug-in.","helpText":null,"infoUrls":[],"categoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","categoryName":"Web Content Filter","options":null},"fd664c56d1a21215":{"id":"com.microsoft.edge.mamedgeappconfigsettings.dataurlinwebworkeropaqueoriginenabled","displayName":"Enable opaque origins for data URLs in Web Workers","description":"This policy controls whether Web Workers created from data URLs are assigned\na unique opaque origin.\n\nWeb Workers can be created using a data URL that contains the worker script.\nPreviously, these workers inherited the origin of the page that created them,\nwhich allowed them to access the same origin-bound data, such as local\nstorage and cookies.\n\nStarting in Microsoft Edge version\n149, Web Workers created from data URLs are assigned a unique opaque origin\nby default. This behavior improves security and aligns with the HTML\nspecification by isolating these workers from the page that created them.\n\nIf you enable this policy or don't configure it, Web Workers created from\ndata URLs are assigned a unique opaque origin.\n\nIf you disable this policy, Web Workers created from data URLs inherit the\norigin of the page that created them. Use this setting only as a temporary\nmitigation for compatibility issues with internal applications that depend\non the legacy behavior.\n\nThis policy is temporary and will be removed in Microsoft Edge\nversion 157.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.dataurlinwebworkeropaqueoriginenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.dataurlinwebworkeropaqueoriginenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fda4d8706e0c9671":{"id":"com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidersearchurl_recommended","displayName":"Default search provider search URL (users can override)","description":"Specifies the URL of the search engine used for a default search. The URL contains the string '{searchTerms}', which is replaced at query time by the terms the user is searching for.\n\nSpecify Bing's search URL as:\n\n'{bing:baseURL}search?q={searchTerms}'.\n\nSpecify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\n\nThis policy is required when you enable the \"DefaultSearchProviderEnabled\" policy; if you don't enable the latter policy, this policy is ignored.\n\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy won't be added to the list of search providers the user can choose from. If this is the desired behavior, use the \"ManagedSearchEngines\" policy.","helpText":null,"infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"fdb01edd171e3f56":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_recommended","displayName":"Sets layout for printing (users can override)","description":"Configuring this policy sets the layout for printing webpages.\n\nIf you disable or don't configure this policy, users can decide whether to print webpages in Portrait or Landscape layout.\n\nIf you enable this policy, the selected option is set as the layout option.\n\nPolicy options mapping:\n\n* portrait (0) = Sets layout option as portrait\n\n* landscape (1) = Sets layout option as landscape\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_recommended_portrait","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_recommended_landscape","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},"fd105d4e01992e9e":{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_ioavmaxsize","displayName":"Define the maximum size of downloaded files and attachments to be scanned","description":"This policy setting defines the maximum size (in kilobytes) of downloaded files and attachments that will be scanned.\r\n\r\n If you enable this setting, downloaded files and attachments smaller than the size specified will be scanned.\r\n\r\n If you disable or do not configure this setting, a default size will be applied.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus#admx-microsoftdefenderantivirus-realtimeprotection-ioavmaxsize"],"categoryId":"8a03aebc-9249-4917-a1c3-2957717d9123","categoryName":"Real-time Protection","options":[{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_ioavmaxsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_microsoftdefenderantivirus_realtimeprotection_ioavmaxsize_1","displayName":"Enabled","description":null,"helpText":null}]},"fd3d4a2a3efcf74a":{"id":"device_vendor_msft_policy_config_admx_printing_forcesoftwarerasterization","displayName":"Always rasterize content to be printed using a software rasterizer","description":"Determines whether the XPS Rasterization Service or the XPS-to-GDI conversion (XGC) is forced to use a software rasterizer instead of a Graphics Processing Unit (GPU) to rasterize pages.\r\n\r\nThis setting may improve the performance of the XPS Rasterization Service or the XPS-to-GDI conversion (XGC) on machines that have a relatively powerful CPU as compared to the machine’s GPU.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-forcesoftwarerasterization"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_printing_forcesoftwarerasterization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_printing_forcesoftwarerasterization_1","displayName":"Enabled","description":null,"helpText":null}]},"fda69e08354157bc":{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_c","displayName":"Best effort service type","description":"Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.\r\n\r\nThis setting applies only to packets that conform to the flow specification.\r\n\r\nIf you enable this setting, you can change the default DSCP value associated with the Best Effort service type.\r\n\r\nIf you disable this setting, the system uses the default DSCP value of 0.\r\n\r\nImportant: If the DSCP value for this service type is specified in the registry for a particular network adapter, this setting is ignored when configuring that network adapter.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-qos#admx-qos-qosservicetypebesteffort-c"],"categoryId":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","categoryName":"DSCP value of conforming packets","options":[{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_c_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_qos_qosservicetypebesteffort_c_1","displayName":"Enabled","description":null,"helpText":null}]},"fd163b019f924c80":{"id":"device_vendor_msft_policy_config_admx_settingsync_disabledesktopthemesettingsync","displayName":"Do not sync desktop personalization","description":"Prevent the \"desktop personalization\" group from syncing to and from this PC. This turns off and disables the \"desktop personalization\" group on the \"sync your settings\" page in PC settings.\r\n\r\nIf you enable this policy setting, the \"desktop personalization\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn desktop personalization syncing on\" so that syncing it turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"desktop personalization\" group is on by default and configurable by the user.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-settingsync#admx-settingsync-disabledesktopthemesettingsync"],"categoryId":"902f5df1-31d6-44ee-ba95-2561199db35f","categoryName":"Sync your settings","options":[{"id":"device_vendor_msft_policy_config_admx_settingsync_disabledesktopthemesettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_settingsync_disabledesktopthemesettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},"fd492ead726cbabb":{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enableshellshortcuticonremotepath","displayName":"Allow the use of remote paths in file shortcut icons","description":"This policy setting determines whether remote paths can be used for file shortcut (.lnk file) icons.\r\n\r\nIf you enable this policy setting, file shortcut icons are allowed to be obtained from remote paths.\r\n\r\nIf you disable or do not configure this policy setting, file shortcut icons that use remote paths are prevented from being displayed.\r\n\r\nNote: Allowing the use of remote paths in file shortcut icons can expose users’ computers to security risks.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-enableshellshortcuticonremotepath"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enableshellshortcuticonremotepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_windowsexplorer_enableshellshortcuticonremotepath_1","displayName":"Enabled","description":null,"helpText":null}]},"fdaca30f3454611b":{"id":"device_vendor_msft_policy_config_browser_allowinprivate","displayName":"Allow InPrivate","description":"This setting lets you decide whether employees can browse using InPrivate website browsing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowinprivate"],"categoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","categoryName":"Browser","options":[{"id":"device_vendor_msft_policy_config_browser_allowinprivate_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_browser_allowinprivate_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"fdf533c0b7204ee0":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation_roamingprofilelocation","displayName":"Set the roaming profile directory (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"fdce1ab41d70b455":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled","displayName":"Enable HTTP/0.9 support on non-default ports","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fd336a0eeb79a2e5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation","displayName":"Configure the home page URL","description":"Setting the policy sets the default homepage URL in Google Chrome. You open the homepage using the Home button. On desktop, the RestoreOnStartup policies control the pages that open on startup.\r\n\r\nIf the homepage is set to the New Tab Page, by the user or HomepageIsNewTabPage, this policy has no effect.\r\n\r\n The URL needs a standard scheme, such as http://example.com or https://example.com. When this policy is set, users can't change their homepage URL in Google Chrome.\r\n\r\nLeaving both HomepageLocation and HomepageIsNewTabPage unset lets users choose their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"categoryId":"148a6f4e-8816-4c00-87a3-57481c85c331","categoryName":"Startup Home page and New Tab page","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"fd9c942c95c2a370":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting","displayName":"Control use of the WebHID API","description":"Setting the policy to 3 lets websites ask for access to HID devices. Setting the policy to 2 denies access to HID devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.\r\n\r\nThis policy can be overridden for specific url patterns using the WebHidAskForUrls and WebHidBlockedForUrls policies.","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},"fd66eb9874823d2b":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled","displayName":"Re-enable the Event.path API until M115.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fd7ccc3e4a25c43f":{"id":"device_vendor_msft_policy_config_experience_allowclipboardhistory","displayName":"Allow Clipboard History","description":"Allows history of clipboard items to be stored in memory.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowclipboardhistory"],"categoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","categoryName":"Experience","options":[{"id":"device_vendor_msft_policy_config_experience_allowclipboardhistory_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowclipboardhistory_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"fdfb9854d77a70e6":{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\n\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\n\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowautomaticpromptingforactivexcontrols"],"categoryId":"4086190d-2e5b-439d-8426-08492ebb8c9f","categoryName":"Local Machine Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"fddb17119c8810e7":{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\n\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\n\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},"fde9c87551ee5335":{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_edgedefaultprofileenabled","displayName":"Default Profile Setting Enabled (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":null},"fd898d285ccbab79":{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_loopbacknetworkblockedforurlsdesc","displayName":"Block sites from making network requests to the local device. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"3fbd3b29-bafd-4adf-89e4-3be612dee275","categoryName":"Network settings","options":null},"fd67b1f9d3808c18":{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled","displayName":"Configure whether a user always has a default profile automatically signed in with their work or school account","description":"This policy determines if a user can remove the Microsoft Edge profile automatically signed in with a user's work or school account.\r\n\r\nIf you enable this policy, a non-removable profile will be created with the user's work or school account on Windows. This profile can't be signed out or removed.\r\n\r\nIf you disable or don't configure this policy, the profile automatically signed in with a user's work or school account on Windows can be signed out or removed by the user.\r\n\r\nIf you want to configure browser sign in, use the 'BrowserSignin' (Browser sign-in settings) policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fd5f6d87f9d05785":{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended","displayName":"Suggest similar pages when a webpage can’t be found","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\r\n\r\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\r\n\r\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Suggest similar pages when a webpage can’t be found** toggle, which the user can switch on or off. Note that if you have enable this policy (AlternateErrorPagesEnabled), the Suggest similar pages when a webpage can’t be found setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the Suggest similar pages when a webpage can’t be found setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fd378c310c267cfc":{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled","displayName":"Allows the AppCache feature to be re-enabled, even if it's turned off by default (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 96.\r\n\r\nSupport for AppCache and this policy was removed from Microsoft Edge starting in version 97.\r\n\r\nIf you set this policy to true, the AppCache is enabled, even when AppCache in Microsoft Edge is not available by default.\r\n\r\nIf you set this policy to false, or don't set it, AppCache will follow Microsoft Edge's defaults.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fd6c4309dd72af58":{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_userincontroloftheseapps","displayName":"Let Apps Sync With Devices User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'Communicate with unpaired wireless devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"fd26a69ed5bef21a":{"id":"device_vendor_msft_policy_config_settings_allowvpn","displayName":"Allow VPN","description":"Allows the user to change VPN settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowvpn"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowvpn_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowvpn_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"fd7c52fd43d863ec":{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode","displayName":"Configure default networking mode","description":"This policy specifies the default networking mode to be used for WSL2.","helpText":"","infoUrls":[],"categoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","categoryName":"Windows Subsystem For Linux","options":[{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_1","displayName":"Enabled","description":null,"helpText":null}]},"fdcf4103fa7a57f9":{"id":"intelligencesettings_apps_safari_allowsummary","displayName":"Allow Summary","description":"If `false`, disables Safari Summary.","helpText":null,"infoUrls":[],"categoryId":"11d26400-1d13-4dd6-ab4b-cb323494b127","categoryName":"Intelligence Settings","options":[{"id":"intelligencesettings_apps_safari_allowsummary_false","displayName":"False","description":null,"helpText":null},{"id":"intelligencesettings_apps_safari_allowsummary_true","displayName":"True","description":null,"helpText":null}]},"fda799b90a516ab6":{"id":"osrecoverysettings_keyboardsettings","displayName":"Keyboard settings","description":"","helpText":"","infoUrls":[],"categoryId":"71f79fa3-14c0-4df8-bf9c-8476e36ea755","categoryName":"Operating system settings","options":[{"id":"osrecoverysettings_keyboardsettings_afrikaans","displayName":"Afrikaans","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_afrikaansn","displayName":"Afrikaans (Namibia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_albanian","displayName":"Albanian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_albaniank","displayName":"Albanian (Kosovo)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_alsatianf","displayName":"Alsatian (France)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_amharic","displayName":"Amharic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabic","displayName":"Arabic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabica","displayName":"Arabic (Algeria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicb","displayName":"Arabic (Bahrain)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabice","displayName":"Arabic (Egypt)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabici","displayName":"Arabic (Iraq)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicj)","displayName":"Arabic (Jordan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabick","displayName":"Arabic (Kuwait)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicl","displayName":"Arabic (Lebanon)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicli","displayName":"Arabic (Libya)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicm","displayName":"Arabic (Morocco)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaico","displayName":"Arabic (Oman)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaicq","displayName":"Arabic (Qatar)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaics","displayName":"Arabic (Syria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaict","displayName":"Arabic (Tunisia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaicu","displayName":"Arabic (United Arab Emirates)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicw","displayName":"Arabic (World)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicy","displayName":"Arabic (Yemen)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_armenian","displayName":"Armenian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_assamese","displayName":"Assamese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_azerbaijani","displayName":"Azerbaijani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_azerbaijanic","displayName":"Azerbaijani (Cyrillic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bangla","displayName":"Bangla","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bashkir","displayName":"Bashkir","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_basque","displayName":"Basque","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_belarusian","displayName":"Belarusian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bengali","displayName":"Bengali (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bosnian","displayName":"Bosnian (Latin)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_breton","displayName":"Breton","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bulgarian","displayName":"Bulgarian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_burmese","displayName":"Burmese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalan","displayName":"Catalan","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalana","displayName":"Catalan (Andorra)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalanfrance","displayName":"Catalan (France)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalanitaly","displayName":"Catalan (Italy)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralatlastamazight","displayName":"Central Atlas Tamazight","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralatlastamazightarabic","displayName":"Central Atlas Tamazight (Arabic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralatlastamazighttifinagh","displayName":"Central Atlas Tamazight (Tifinagh)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralkurdish","displayName":"Central Kurdish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chechen","displayName":"Chechen","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_cherokee","displayName":"Cherokee","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinese","displayName":"Chinese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesesimplifiedhongkongsar","displayName":"Chinese (Simplified, Hong Kong SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesesimplifiedmacaosar","displayName":"Chinese (Simplified, Macao SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesetraditional","displayName":"Chinese (Traditional)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesetraditionaltaiwan","displayName":"Chinese (Traditional, Taiwan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_churchslavic","displayName":"Church Slavic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_colognian","displayName":"Colognian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_cornish","displayName":"Cornish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_corsican","displayName":"Corsican","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_croatian","displayName":"Croatian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_croatianbosniaherzegovina","displayName":"Croatian (Bosnia & Herzegovina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_czech","displayName":"Czech","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_danish","displayName":"Danish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_danishgreenland","displayName":"Danish (Greenland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_divehi","displayName":"Divehi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutch","displayName":"Dutch","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutcharuba","displayName":"Dutch (Aruba)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchbelgium","displayName":"Dutch (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchbonaires","displayName":"Dutch (Bonaire, Sint Eustatius and Saba)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchcuracao","displayName":"Dutch (Curaçao)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchsintmaarten","displayName":"Dutch (Sint Maarten)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchsuriname","displayName":"Dutch (Suriname)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dzongkha","displayName":"Dzongkha","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_english","displayName":"English","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishaustralia","displayName":"English (Australia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishaustria","displayName":"English (Austria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishbelgium","displayName":"English (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishbelize","displayName":"English (Belize)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishbritishvirginislands","displayName":"English (British Virgin Islands)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishburundi","displayName":"English (Burundi)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishcanada","displayName":"English (Canada)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishcaribbean","displayName":"English (Caribbean)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishdenmark","displayName":"English (Denmark)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishfalklandislands","displayName":"English (Falkland Islands)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishfinland","displayName":"English (Finland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishgermany","displayName":"English (Germany)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishgibraltar","displayName":"English (Gibraltar)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishguernsey","displayName":"English (Guernsey)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishhongkongsar","displayName":"English (Hong Kong SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishindia","displayName":"English (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishireland","displayName":"English (Ireland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishisleofman","displayName":"English (Isle of Man)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishisrael","displayName":"English (Israel)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishjamaica","displayName":"English (Jamaica)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishjersey","displayName":"English (Jersey)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishmalaysia","displayName":"English (Malaysia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishmalta","displayName":"English (Malta)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishnetherlands","displayName":"English (Netherlands)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishnewzealand","displayName":"English (New Zealand)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishphilippines","displayName":"English (Philippines)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishsingapore","displayName":"English (Singapore)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishslovenia","displayName":"English (Slovenia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishsouthafrica","displayName":"English (South Africa)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishsweden","displayName":"English (Sweden)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishswitzerland","displayName":"English (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishtrinidadtobago","displayName":"English (Trinidad & Tobago)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishuk","displayName":"English (United Kingdom)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishzimbabwe","displayName":"English (Zimbabwe)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_estonian","displayName":"Estonian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_faroese","displayName":"Faroese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_filipino","displayName":"Filipino","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_finnish","displayName":"Finnish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_french","displayName":"French","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchbelgium","displayName":"French (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcameroon","displayName":"French (Cameroon)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcanada","displayName":"French (Canada)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcotedivoire","displayName":"French (Côte d’Ivoire)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchhaiti","displayName":"French (Haiti)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchluxembourg","displayName":"French (Luxembourg)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchmali","displayName":"French (Mali)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchmonaco","displayName":"French (Monaco)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchmorocco","displayName":"French (Morocco)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchreunion","displayName":"French (Réunion)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchsenegal","displayName":"French (Senegal)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchswitzerland","displayName":"French (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcongodrc","displayName":"French Congo (DRC)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_friulian","displayName":"Friulian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulah","displayName":"Fulah","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahadlam","displayName":"Fulah (Adlam)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahburkinafaso","displayName":"Fulah (Latin, Burkina Faso)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahcameroon","displayName":"Fulah (Latin, Cameroon)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahgambia","displayName":"Fulah (Latin, Gambia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahghana","displayName":"Fulah (Latin, Ghana)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahguinea","displayName":"Fulah (Latin, Guinea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahguineabissau","displayName":"Fulah (Latin, Guinea-Bissau)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahliberia","displayName":"Fulah (Latin, Liberia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahmauritania","displayName":"Fulah (Latin, Mauritania)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahniger","displayName":"Fulah (Latin, Niger)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahnigeria","displayName":"Fulah (Latin, Nigeria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahsierraleone","displayName":"Fulah (Latin, Sierra Leone)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_galician","displayName":"Galician","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_georgian","displayName":"Georgian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_german","displayName":"German","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanaustria","displayName":"German (Austria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanbelgium","displayName":"German (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanitaly","displayName":"German (Italy)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanliechtenstein","displayName":"German (Liechtenstein)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanluxembourg","displayName":"German (Luxembourg)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanswitzerland","displayName":"German (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_greek","displayName":"Greek","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_guarani","displayName":"Guarani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_gujarati","displayName":"Gujarati","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hausa","displayName":"Hausa","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hawaiian","displayName":"Hawaiian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hebrew","displayName":"Hebrew","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hindi","displayName":"Hindi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hungarian","displayName":"Hungarian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_icelandic","displayName":"Icelandic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_igbo","displayName":"Igbo","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_indonesian","displayName":"Indonesian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_interlingua","displayName":"Interlingua","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_inuktitut","displayName":"Inuktitut","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_inuktitutsyllabics","displayName":"Inuktitut (Syllabics)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_irish","displayName":"Irish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_irishunitedkingdom","displayName":"Irish (United Kingdom)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_italian","displayName":"Italian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_italianswitzerland","displayName":"Italian (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_italianvaticancity","displayName":"Italian (Vatican City)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_japanese","displayName":"Japanese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_javanese","displayName":"Javanese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_javanesejavanese","displayName":"Javanese (Javanese)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kalaallisut","displayName":"Kalaallisut","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kannada","displayName":"Kannada","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kashmiri","displayName":"Kashmiri","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kashmiridevanagari","displayName":"Kashmiri (Devanagari)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kazakh","displayName":"Kazakh","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_khmer","displayName":"Khmer","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kinyarwanda","displayName":"Kinyarwanda","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahili","displayName":"Kiswahili","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahilicongodrc","displayName":"Kiswahili (Congo DRC)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahilitanzania","displayName":"Kiswahili (Tanzania)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahiliuganda","displayName":"Kiswahili (Uganda)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_konkani","displayName":"Konkani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_korean","displayName":"Korean","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_koreannorthkorea","displayName":"Korean (North Korea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kyrgyz","displayName":"Kyrgyz","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_lao","displayName":"Lao","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_latvian","displayName":"Latvian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_lithuanian","displayName":"Lithuanian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_lowersorbian","displayName":"Lower Sorbian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_luxembourgish","displayName":"Luxembourgish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_macedonian","displayName":"Macedonian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malagasy","displayName":"Malagasy","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malay","displayName":"Malay","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malaybrunei","displayName":"Malay (Brunei)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malayindonesia","displayName":"Malay (Indonesia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malaysingapore","displayName":"Malay (Singapore)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malayalam","displayName":"Malayalam","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_maltese","displayName":"Maltese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_manipuri","displayName":"Manipuri","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_manx","displayName":"Manx","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_maori","displayName":"Maori","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mapuche","displayName":"Mapuche","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_marathi","displayName":"Marathi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mazanderani","displayName":"Mazanderani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mohawk","displayName":"Mohawk","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mongolian","displayName":"Mongolian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mongolian_traditional_mongolian","displayName":"Mongolian (Traditional Mongolian)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mongolian_traditional_mongolian_mongolia","displayName":"Mongolian (Traditional Mongolian, Mongolia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_nko","displayName":"N'ko","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_nepali","displayName":"Nepali","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_nepali_india","displayName":"Nepali (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_northern_luri","displayName":"Northern Luri","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_northern_sami","displayName":"Northern Sami","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_norwegian","displayName":"Norwegian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_norwegian_nynorsk","displayName":"Norwegian Nynorsk","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_occitan","displayName":"Occitan","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_odia","displayName":"Odia","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_oromo","displayName":"Oromo","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_oromo_kenya","displayName":"Oromo (Kenya)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_ossetic","displayName":"Ossetic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_papiamento","displayName":"Papiamento","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_pashto","displayName":"Pashto","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_pashto_pakistan","displayName":"Pashto (Pakistan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_persian","displayName":"Persian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_persian_afghanistan","displayName":"Persian (Afghanistan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_polish","displayName":"Polish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese","displayName":"Portuguese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_angola","displayName":"Portuguese (Angola)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_cabo_verde","displayName":"Portuguese (Cabo Verde)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_equatorial_guinea","displayName":"Portuguese (Equatorial Guinea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_guinea_bissau","displayName":"Portuguese (Guinea-Bissau)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_luxembourg","displayName":"Portuguese (Luxembourg)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_macao_sar","displayName":"Portuguese (Macao SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_mozambique","displayName":"Portuguese (Mozambique)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_portugal","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_switzerland","displayName":"Portuguese (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_sao_tome_principe","displayName":"Portuguese (São Tomé & Príncipe)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_timor_leste","displayName":"Portuguese (Timor-Leste)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_prussian","displayName":"Prussian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_punjabi","displayName":"Punjabi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_quechua","displayName":"Quechua","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_quechua_ecuador","displayName":"Quechua (Ecuador)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_quechua_peru","displayName":"Quechua (Peru)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_romanian","displayName":"Romanian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_romanian_moldova","displayName":"Romanian (Moldova)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_romansh","displayName":"Romansh","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_russian","displayName":"Russian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_russian_moldova","displayName":"Russian (Moldova)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sakha","displayName":"Sakha","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_lule_norway","displayName":"Sami, Lule (Norway)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_northern_finland","displayName":"Sami, Northern (Finland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_northern_sweden","displayName":"Sami, Northern (Sweden)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_southern_norway","displayName":"Sami, Southern (Norway)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sanskrit","displayName":"Sanskrit","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_scottish_gaelic","displayName":"Scottish Gaelic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian","displayName":"Serbian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic","displayName":"Serbian (Cyrillic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic_bosnia_herzegovina","displayName":"Serbian (Cyrillic, Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic_kosovo","displayName":"Serbian (Cyrillic, Kosovo)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic_montenegro","displayName":"Serbian (Cyrillic, Montenegro)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_latin_bosnia_herzegovina","displayName":"Serbian (Latin, Bosnia & Herzegovina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_latin_kosovo","displayName":"Serbian (Latin, Kosovo)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_latin_montenegro","displayName":"Serbian (Latin, Montenegro)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sesotho","displayName":"Sesotho","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sesotho_lesotho","displayName":"Sesotho (Lesotho)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sesotho_sa_leboa","displayName":"Sesotho sa Leboa","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_setswana","displayName":"Setswana","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_setswana_botswana","displayName":"Setswana (Botswana)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_shona","displayName":"Shona","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sinhala","displayName":"Sinhala","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_slovak","displayName":"Slovak","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_slovenian","displayName":"Slovenian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali","displayName":"Somali","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali_djibouti","displayName":"Somali (Djibouti)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali_ethiopia","displayName":"Somali (Ethiopia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali_kenya","displayName":"Somali (Kenya)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish","displayName":"Spanish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_argentina","displayName":"Spanish (Argentina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_belize","displayName":"Spanish (Belize)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_bolivia","displayName":"Spanish (Bolivia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_brazil","displayName":"Spanish (Brazil)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_chile","displayName":"Spanish (Chile)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_colombia","displayName":"Spanish (Colombia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_costa_rica","displayName":"Spanish (Costa Rica)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_cuba","displayName":"Spanish (Cuba)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_dominican_republic","displayName":"Spanish (Dominican Republic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_ecuador","displayName":"Spanish (Ecuador)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_el_salvador","displayName":"Spanish (El Salvador)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_equatorial_guinea","displayName":"Spanish (Equatorial Guinea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_guatemala","displayName":"Spanish (Guatemala)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_honduras","displayName":"Spanish (Honduras)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_latin_america","displayName":"Spanish (Latin America)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_mexico","displayName":"Spanish (Mexico)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_nicaragua","displayName":"Spanish (Nicaragua)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_panama","displayName":"Spanish (Panama)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_paraguay","displayName":"Spanish (Paraguay)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_peru","displayName":"Spanish (Peru)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_philippines","displayName":"Spanish (Philippines)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_puerto_rico","displayName":"Spanish (Puerto Rico)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_united_states","displayName":"Spanish (United States)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_uruguay","displayName":"Spanish (Uruguay)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_venezuela","displayName":"Spanish (Venezuela)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_standard_moroccan_tamazight","displayName":"Standard Moroccan Tamazight","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_swedish","displayName":"Swedish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_swedish_finland","displayName":"Swedish (Finland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_swiss_german","displayName":"Swiss German","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_syriac","displayName":"Syriac","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tachelhit","displayName":"Tachelhit","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tachelhit_latin","displayName":"Tachelhit (Latin)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tajik","displayName":"Tajik","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil","displayName":"Tamil","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil_malaysia","displayName":"Tamil (Malaysia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil_singapore","displayName":"Tamil (Singapore)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil_sri_lanka","displayName":"Tamil (Sri Lanka)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tatar","displayName":"Tatar","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_telugu","displayName":"Telugu","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_thai","displayName":"Thai","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tibetan","displayName":"Tibetan","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tibetan_india","displayName":"Tibetan (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tigrinya","displayName":"Tigrinya","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_turkish","displayName":"Turkish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_turkmen","displayName":"Turkmen","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_ukrainian","displayName":"Ukrainian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_upper_sorbian","displayName":"Upper Sorbian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_urdu","displayName":"Urdu","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_urdu_india","displayName":"Urdu (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uyghur","displayName":"Uyghur","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uzbek","displayName":"Uzbek","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uzbek_arabic","displayName":"Uzbek (Arabic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uzbek_cyrillic","displayName":"Uzbek (Cyrillic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_valencian_spain","displayName":"Valencian (Spain)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_vietnamese","displayName":"Vietnamese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_walser","displayName":"Walser","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_welsh","displayName":"Welsh","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_western_frisian","displayName":"Western Frisian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_wolof","displayName":"Wolof","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_xitsonga","displayName":"Xitsonga","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_yi","displayName":"Yi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_yoruba","displayName":"Yoruba","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_isixhosa","displayName":"IsiXhosa","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_isizulu","displayName":"IsiZulu","description":null,"helpText":null}]},"fd218256f48d5b43":{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_maximumpinlength","displayName":"Maximum PIN Length (User)","description":"Maximum PIN length configures the maximum number of characters allowed for the PIN. The largest number you can configure for this policy setting is 127. The lowest number you can configure must be larger than the number configured in the Minimum PIN length policy setting or the number 4, whichever is greater.\n\nIf you configure this policy setting, the PIN length must be less than or equal to this number.\n\nIf you do not configure this policy setting, the PIN length must be less than or equal to 127.\n\nNOTE: If the above specified conditions for the maximum PIN length are not met, default values will be used for both the maximum and minimum PIN lengths.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"fd6e0d53aed4f5eb":{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvetrack","displayName":"Do not use the tracking-based method when resolving shell shortcuts (User)","description":"This policy setting prevents the system from using NTFS tracking features to resolve a shortcut.\r\n\r\nIf you enable this policy setting, the system does not try to locate the file by using its file ID. It skips this step and begins a comprehensive search of the drive specified in the target path.\r\n\r\nIf you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target's file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.\r\n\r\nNote: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.\r\n\r\nAlso, see the \"Do not track Shell shortcuts during roaming\" and the \"Do not use the search-based method when resolving shell shortcuts\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noresolvetrack"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvetrack_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvetrack_1","displayName":"Enabled","description":null,"helpText":null}]},"fdc83990a4e1d642":{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_ts_workdir","displayName":"Working Directory (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","categoryName":"Remote Session Environment","options":null},"fd49dfc9580db7ef":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_disabledschemesdesc","displayName":"List of disabled protocol schemes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"fd2bde73fe8892f3":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_renderinhostlistdesc","displayName":"Always render the following URL patterns in the host browser (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":null},"fd29a2e599889fa9":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings","displayName":"Settings for Tab Organizer (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_0","displayName":"Allow Tab Organizer and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_1","displayName":"Allow Tab Organizer without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_2","displayName":"Do not allow Tab Organizer.","description":null,"helpText":null}]},"fd5f6c398174d3ce":{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"This policy setting allows you to specify a folder as a trusted location from which to open 2016 Word, Excel, PowerPoint, Access and Visio files. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you can specify a trusted location (or folder) from which the 2016 Office application can open the files which run macros without warning.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},"fdbd2443009b2e44":{"id":"user_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork","displayName":"Allow Option To Show Network (User)","description":"When the Network folder is restricted, give the user the option to enumerate and navigate into it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#allowoptiontoshownetwork"],"categoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","categoryName":"File Explorer","options":[{"id":"user_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_0","displayName":"Not Allowed.","description":"Not Allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},"fd9b38e97b86a72a":{"id":"user_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses","displayName":"Internet Explorer Processes (User)","description":"Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server.\n\nThis policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME sniff indicates that the file is really an executable file, Internet Explorer renames the file by saving it in the Internet Explorer cache and changing its extension.\n\nIf you enable this policy setting, Internet Explorer requires consistent MIME data for all received files.\n\nIf you disable this policy setting, Internet Explorer will not require consistent MIME data for all received files.\n\nIf you do not configure this policy setting, Internet Explorer requires consistent MIME data for all received files.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-consistentmimehandlinginternetexplorerprocesses"],"categoryId":"ab33bc0d-aea2-440a-a3c3-bf0fb84b98ce","categoryName":"Consistent Mime Handling","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},"fd7312a8d2006176":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8aa3383a-efac-4ec4-841d-06e3e18646d8","categoryName":"Default search provider","options":null},"fd32e855d1bc3068":{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu","displayName":"Enables Microsoft Edge mini menu (User)","description":"Enables Microsoft Edge mini menu on websites and PDFs. The mini menu is triggered on text selection and has basic actions like copy and smart actions like definitions.\r\n\r\nIf you enable or don't config this policy, selecting text on websites and PDFs will show the Microsoft Edge mini menu.\r\n\r\nIf you disable this policy, the Microsoft Edge mini menu will not be shown when text on websites and PDFs is selected.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_1","displayName":"Enabled","description":null,"helpText":null}]},"fd6fb91008208113":{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar (User)","description":"Define a list of sites, based on URL, that are forced to be shown in sidebar.\r\n\r\nIf you don't configure this policy, no app is forced to be shown in sidebar.\r\n\r\nIf the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy is disabled, this list isn't used and no sidebar can be shown.\r\n\r\nFor detailed information about valid url, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nNote: URL patterns are not supported in this policy. You should provide the exact URL of the app.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},"fde53c6949ce489b":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_customhelplink","displayName":"Specify custom help link (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"fdd2684a93b2a03e":{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled","displayName":"Enable stricter treatment for mixed content (User)","description":"This policy controls the treatment for mixed content (HTTP content in HTTPS sites) in the browser.\r\n\r\nIf you set this policy to true or not set, audio and video mixed content will be automatically upgraded to HTTPS (that is, the URL will be rewritten as HTTPS, without a fallback if the resource isn’t available over HTTPS) and a 'Not Secure' warning will be shown in the URL bar for image mixed content.\r\n\r\nIf you set the policy to false, auto upgrades will be disabled for audio and video, and no warning will be shown for images.\r\n\r\nThis policy does not affect other types of mixed content other than audio, video, and images.\r\n\r\nThis policy will no longer take effect starting in Microsoft Edge 84.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fd357d3abfc53e17":{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault","displayName":"Configure Automatic HTTPS (User)","description":"","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_0","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_1","displayName":"Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_2","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},"fd82b0609f74e38b":{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist","displayName":"Allow media autoplay on specific sites (User)","description":"Define a list of sites, based on URL patterns, that are allowed to autoplay media.\r\n\r\nIf you don't configure this policy, the global default value from the 'AutoplayAllowed' (Allow media autoplay for websites) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nNote: * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},"fdd90c4e17978db7":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttablabelreplacework_l_worklabelreplace","displayName":"Label: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"fddefc748cf037c2":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_papiamentu","displayName":"Papiamentu (User)","description":"Enables the editing language Papiamentu","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_papiamentu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_papiamentu_1","displayName":"Enabled","description":null,"helpText":null}]},"fddbd2e3386fdbbd":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_punjabipakistan","displayName":"Punjabi (Pakistan) (User)","description":"Enables the editing language Punjabi (Pakistan)","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_punjabipakistan_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_punjabipakistan_1","displayName":"Enabled","description":null,"helpText":null}]},"fdcb95c021f9f9d1":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_urdu","displayName":"Urdu (User)","description":"Enables the editing language Urdu","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_urdu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_urdu_1","displayName":"Enabled","description":null,"helpText":null}]},"fd03dab0c71cdd2f":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache14_l_workflowpath494","displayName":"Full URL to the document library with which the workflow is associated (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"fd58ffd5b592bff6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeosmcustomtags_l_officeosmcustomtagstag4","displayName":"Tag 4: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":null},"fde23540dc99275b":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autonumberingrecognition","displayName":"Auto Numbering Recognition (User)","description":"Checks/Unchecks the option ''Apply numbering to lists automatically''.","helpText":"","infoUrls":[],"categoryId":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","categoryName":"Editing","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autonumberingrecognition_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_editing_l_autonumberingrecognition_1","displayName":"Enabled","description":null,"helpText":null}]},"fd72957bd9625551":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_calendaroptions~l_microsoftofficeonlinesharing_l_pathtodavserver_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"34c07941-8f52-43ad-b0ca-a7284655afb4","categoryName":"Office.com Sharing Service","options":null},"fdb600ca64a812ad":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlooksocialconnector_l_specifyactivityfeedsynchronizationinterval_l_specifyactivityfeedsynchronizationintervalspinid","displayName":"Synchronization interval (in minutes): (User)","description":"","helpText":"","infoUrls":[],"categoryId":"b3e317cd-c580-478e-885c-666ce3079e78","categoryName":"Outlook Social Connector","options":null},"fd1f967cb3f0102a":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_maximumnumberofonlinesearchfolderspermailbox","displayName":"Maximum Number of Online Search Folders per mailbox (User)","description":"Specifies the maximum number of Search Folders that run on the Exchange server. The number of Search Folders running on the client computer is not affected.","helpText":"","infoUrls":[],"categoryId":"fb721630-fc42-465b-ba22-ab670698c8b5","categoryName":"Search Folders","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_maximumnumberofonlinesearchfolderspermailbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_searchfolders_l_maximumnumberofonlinesearchfolderspermailbox_1","displayName":"Enabled","description":null,"helpText":null}]},"fdbb32c888d73e69":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_cryptography_l_requiredcertificateauthority_l_x509issuednthatrestrictschoiceofcertifyingauthorities","displayName":"X.509 issue DN that restricts choice of certifying authorities: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","categoryName":"Cryptography","options":null},"fdea9df4ea9fe2a5":{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09_l_allowsubfolders43","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"cc50f179-0c39-4486-a555-de5a6e6ed365","categoryName":"Trust Center","options":[{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09_l_allowsubfolders43_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_trustedloc09_l_allowsubfolders43_1","displayName":"True","description":null,"helpText":null}]},"fd81d90399e0fe31":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc14_l_pathcolon60","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"fd7ef2f89c57ec5e":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_makehiddenmarkupvisible","displayName":"Make hidden markup visible (User)","description":"Checks/unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","categoryName":"Security","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_makehiddenmarkupvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security_l_makehiddenmarkupvisible_1","displayName":"Enabled","description":null,"helpText":null}]},"fd0f2d5eb46ecaa6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_l_word2andearlierbinarydocumentsandtemplatesdropid","displayName":"File block setting: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","categoryName":"File Block Settings","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_l_word2andearlierbinarydocumentsandtemplatesdropid_0","displayName":"Do not block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_l_word2andearlierbinarydocumentsandtemplatesdropid_2","displayName":"Open/Save blocked, use open policy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_l_word2andearlierbinarydocumentsandtemplatesdropid_3","displayName":"Block","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_l_word2andearlierbinarydocumentsandtemplatesdropid_4","displayName":"Open in Protected View","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_fileblocksettings_l_word2andearlierbinarydocumentsandtemplates_l_word2andearlierbinarydocumentsandtemplatesdropid_5","displayName":"Allow editing and open in Protected View","description":null,"helpText":null}]},"fd579d5d4b6b87e6":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"categoryId":"fe786056-6f4a-4d16-bff4-5fbb640308d2","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/fe.json b/public/intune-definitions/fe.json new file mode 100644 index 000000000000..a1d313400189 --- /dev/null +++ b/public/intune-definitions/fe.json @@ -0,0 +1 @@ +{"feae16d2e1d55a6c":{"id":"com.apple.app.lock_app_userenabledoptions_invertcolors","displayName":"Invert Colors","description":"If true, allows the user to toggle Invert Colors. ","helpText":null,"infoUrls":[],"categoryId":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","categoryName":"App Lock","options":[{"id":"com.apple.app.lock_app_userenabledoptions_invertcolors_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.app.lock_app_userenabledoptions_invertcolors_true","displayName":"True","description":null,"helpText":null}]},"fe9772151f31aaad":{"id":"com.apple.extensiblesso_platformsso_authenticationmethod","displayName":"Authentication Method","description":"The Platform SSO authentication method to be used with the extension. Requires that the SSO Extension also support the method.","helpText":null,"infoUrls":[],"categoryId":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","categoryName":"Extensible Single Sign On (SSO)","options":[{"id":"com.apple.extensiblesso_platformsso_authenticationmethod_0","displayName":"Password","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_authenticationmethod_1","displayName":"UserSecureEnclaveKey","description":null,"helpText":null},{"id":"com.apple.extensiblesso_platformsso_authenticationmethod_2","displayName":"SmartCard","description":null,"helpText":null}]},"fe1c7a25f140071f":{"id":"com.apple.managedclient.preferences_tags_item_key","displayName":"Type of tag","description":"Specify a tag name and its value. The GROUP tag, tags the device with the specified value. The tag is reflected in the portal under the device page and can be used for filtering and grouping devices.","helpText":null,"infoUrls":[],"categoryId":"b77a3a7b-6fab-4240-b5c3-852aa78781d5","categoryName":"Endpoint Detection and Response (EDR) preferences","options":{"id":"com.apple.managedclient.preferences_tags_item_key_0","displayName":"GROUP","description":null,"helpText":null}},"fea303365cecb1c3":{"id":"com.apple.networkusagerules_applicationrules","displayName":"Application Rules","description":"An array of application rules, that apply to only managed apps.","helpText":null,"infoUrls":[],"categoryId":"06a85f5b-2614-4467-91cf-4a64d0c9326f","categoryName":"Network Usage Rules","options":null},"fe81f4cddb1470e0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.mutationeventsenabled","displayName":"Enable deprecated/removed Mutation Events (Obsolete)","description":"This policy provides a temporary opt-in back to a deprecated and removed set of platform events named Mutation Events.\n\nIf you enable this policy, mutation events continue to be fired, even if they've been disabled by default for normal web users.\n\nIf you disable or don't configure this policy, these events won't be fired.\n\nNote:\nThis policy is a temporary workaround and will be obsolete starting with Microsoft Edge version 137.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.mutationeventsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.mutationeventsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"fe10824b7d4ecb6c":{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode","description":"Restricts background graphics printing mode. If this policy isn't set there's no restriction on printing background graphics.\n\nPolicy options mapping:\n\n* any (any) = Allow printing with and without background graphics\n\n* enabled (enabled) = Allow printing only with background graphics\n\n* disabled (disabled) = Allow printing only without background graphics\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"c6099521-a05f-480a-8562-7e71318e2cda","categoryName":"Printing","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes_any","displayName":"Allow printing with and without background graphics","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes_enabled","displayName":"Allow printing only with background graphics","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes_disabled","displayName":"Allow printing only without background graphics","description":null,"helpText":null}]},"fe5c670612d1b0e7":{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configurenontpmstartupkeyusage_name","displayName":"Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive)","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp"],"categoryId":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","categoryName":"Operating System Drives","options":[{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configurenontpmstartupkeyusage_name_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_bitlocker_systemdrivesrequirestartupauthentication_configurenontpmstartupkeyusage_name_1","displayName":"True","description":null,"helpText":null}]},"fe8dbb18d95b9577":{"id":"device_vendor_msft_defender_configuration_dataduplicationmaximumquota","displayName":"Data Duplication Maximum Quota","description":"Defines the maximum data duplication quota in MB that can be collected. When the quota is reached the filter will stop duplicating any data until the service manages to dispatch the existing collected data, thus decreasing the quota again below the maximum. The valid interval is [5-5000] MB. By default, the maximum quota will be 500 MB.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Defender-csp/"],"categoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","categoryName":"Defender","options":null},"fe6c9551b59b84ff":{"id":"device_vendor_msft_euiccs_{euicc}_profiles_{iccid}_matchingid","displayName":"Matching ID","description":"Matching ID (activation code token) for profile download. Must be set by the MDM when the ICCID subtree is created.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/eUICCs-csp/"],"categoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","categoryName":"eSIM","options":null},"fe28db75a3f43805":{"id":"device_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_maximumpinlength","displayName":"Maximum PIN Length","description":"Maximum PIN length configures the maximum number of characters allowed for the PIN. The largest number you can configure for this policy setting is 127. The lowest number you can configure must be larger than the number configured in the Minimum PIN length policy setting or the number 4, whichever is greater.\n\nIf you configure this policy setting, the PIN length must be less than or equal to this number.\n\nIf you do not configure this policy setting, the PIN length must be less than or equal to 127.\n\nNOTE: If the above specified conditions for the maximum PIN length are not met, default values will be used for both the maximum and minimum PIN lengths.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"categoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","categoryName":"Windows Hello For Business","options":null},"fe9af9c0379742bd":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_nochanges7","displayName":"Process even if the Group Policy objects have not changed","description":null,"helpText":"","infoUrls":[],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_nochanges7_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_scripts_cse_nochanges7_1","displayName":"True","description":null,"helpText":null}]},"fe512cf36fa92132":{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxdataretransmissions","displayName":"MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)","description":"MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mss-legacy#admx-mss-legacy-pol-mss-tcpmaxdataretransmissions"],"categoryId":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","categoryName":"MSS (Legacy)","options":[{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxdataretransmissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_mss-legacy_pol_mss_tcpmaxdataretransmissions_1","displayName":"Enabled","description":null,"helpText":null}]},"fe8de091be94de09":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_lbl_backgroundsyncinforcedoffline","displayName":"Enable Background Sync for shares in user selected \"Work Offline\" mode","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":[{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_lbl_backgroundsyncinforcedoffline_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_backgroundsyncsettings_lbl_backgroundsyncinforcedoffline_1","displayName":"True","description":null,"helpText":null}]},"fe8ff091758de8da":{"id":"device_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_win7_packagepointandprintserverlist_edit","displayName":"Enter fully qualified server names","description":null,"helpText":"","infoUrls":[],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":null},"fef221b368f05427":{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_2","displayName":"Prevent launch an application","description":"Prevents the user from launching an application from a Tablet PC hardware button.\r\n\r\nIf you enable this policy, applications cannot be launched from a hardware button, and \"Launch an application\" is removed from the drop down menu for configuring button actions (in the Tablet PC Control Panel buttons tab).\r\n\r\nIf you disable this policy, applications can be launched from a hardware button.\r\n\r\nIf you do not configure this policy, applications can be launched from a hardware button.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventlaunchapp-2"],"categoryId":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","categoryName":"Hardware Buttons","options":[{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_2_1","displayName":"Enabled","description":null,"helpText":null}]},"fee7054059ac68a4":{"id":"device_vendor_msft_policy_config_admx_windowsfileprotection_wfpquota_wfpquota_size","displayName":"Cache size (in MB) (Device)","description":"\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":[],"categoryId":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","categoryName":"Windows File Protection","options":null},"fe222e05153644e3":{"id":"device_vendor_msft_policy_config_applicationcontrolv2_supplementalpolicy_buildoptions_{ruleid}_type_filepathdetails","displayName":"File Path","description":"The path of the directory or file for application of this rule.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/applicationcontrol-csp"],"categoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","categoryName":"App Control for Business","options":null},"febd065a7f41dbc8":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal","displayName":"Allows a page to perform synchronous XHR requests during page dismissal.","description":"This policy allows an admin to specify that a page may send synchronous XHR requests during page dismissal.\r\n\r\nWhen the policy is set to enabled, pages are allowed to send synchronous XHR requests during page dismissal.\r\n\r\nWhen the policy is set to disabled or not set, pages are not allowed to send synchronous XHR requests during page dismissal.\r\n\r\nThis policy will be removed in Chrome 93.\r\n\r\nSee https://www.chromestatus.com/feature/4664843055398912 .","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal_1","displayName":"Enabled","description":null,"helpText":null}]},"fed8720b62324713":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_clearbrowsingdataonexitlistdesc","displayName":"Clear Browsing Data on Exit (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"fe47691fa8ac61a5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_filesystemreadblockedforurlsdesc","displayName":"Block read access via the File System API on these sites (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":null},"fe8dfe932d32a6ee":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy","displayName":"Disable SPDY protocol","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy_1","displayName":"Enabled","description":null,"helpText":null}]},"fea805536d2f904c":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols","displayName":"Use Legacy Form Controls until M84.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},"fe58ed423b7a5086":{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled","displayName":"Control the new behavior of HTMLElement.offsetParent","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fea73ade8f4f5422":{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominbatterypercentageallowedtoupload","displayName":"DO Min Battery Percentage Allowed To Upload","description":"Specifies the minimum battery level required for uploading to peers, while on battery power.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominbatterypercentageallowedtoupload"],"categoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","categoryName":"Delivery Optimization","options":null},"fec82bd1bef992c8":{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordhistory","displayName":"Device Password History","description":"Specifies how many passwords can be stored in the history that can’t be used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#devicepasswordhistory"],"categoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","categoryName":"Device Lock","options":null},"fec5b622381f3967":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin","displayName":"IE plugin","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the IE Plugin.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\IEPlugin\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"categoryId":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","categoryName":"Logging","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin_1","displayName":"Enabled","description":null,"helpText":null}]},"fe13091f8a0b5588":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_profilesreattachinterval","displayName":"Reattach Interval (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","categoryName":"Profile Containers","options":null},"feb2ff066ce43f1e":{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting","displayName":"Script ActiveX controls marked safe for scripting","description":"This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.\n\nIf you enable this policy setting, script interaction can occur automatically without user intervention.\n\nIf you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.\n\nIf you disable this policy setting, script interaction is prevented from occurring.\n\nIf you do not configure this policy setting, script interaction is prevented from occurring.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting"],"categoryId":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","categoryName":"Restricted Sites Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_1","displayName":"Enabled","description":null,"helpText":null}]},"fed01b4e366946c9":{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer","displayName":"Send all intranet sites to Internet Explorer","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},"fed8a31daf55bcaa":{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation","displayName":"Set the roaming profile directory","description":"Configures the directory to use to store the roaming copy of profiles.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory to store a roaming copy of the profiles, as long as you've also enabled the 'RoamingProfileSupportEnabled' (Enable using roaming copies for Microsoft Edge profile data) policy. If you disable the 'RoamingProfileSupportEnabled' policy or don't configure it, the value stored in this policy isn't used.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables you can use.\r\n\r\nIf you don't configure this policy, the default roaming profile path is used.\r\n\r\nExample value: ${roaming_app_data}\\edge-profile","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},"feb2db17d8dd1a0e":{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge","description":"This policy lets you enhance the security state in Microsoft Edge.\r\n\r\nIf you set this policy to 'StandardMode', the enhanced mode will be turned off and Microsoft Edge will fallback to its standard security mode.\r\n\r\nIf you set this policy to 'BalancedMode', the security state will be in balanced mode.\r\n\r\nIf you set this policy to 'StrictMode', the security state will be in strict mode.\r\n\r\nIf you set this policy to 'BasicMode', the security state will be in basic mode.\r\n\r\nNote: Sites that use WebAssembly (WASM) are not currently supported when 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) is enabled. If you require access to a site that uses WASM, consider adding it to your exception list as described in https://go.microsoft.com/fwlink/?linkid=2183321.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2195852\r\n\r\nPolicy options mapping:\r\n\r\n* StandardMode (0) = Standard mode\r\n\r\n* BalancedMode (1) = Balanced mode\r\n\r\n* StrictMode (2) = Strict mode\r\n\r\n* BasicMode (2) = Basic mode\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},"feafe7305a390e55":{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_pptviewexe172","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"fa8e7b34-c736-47ec-be83-a9f1960d5281","categoryName":"IE Security","options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_pptviewexe172_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_pptviewexe172_1","displayName":"True","description":null,"helpText":null}]},"fec0023fb2bbb31f":{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_userincontroloftheseapps","displayName":"Let Apps Run In Background User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the background apps privacy setting for the listed Windows apps. This setting overrides the default LetAppsRunInBackground policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground_userincontroloftheseapps"],"categoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","categoryName":"Privacy","options":null},"fe2c166b5c12c480":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_stun_client_port_range_part_iceclientportrange","displayName":"Port pool size (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":null},"fe6009f9a92ff7ad":{"id":"settings_item_accessibilitysettings_reducetransparencyenabled","displayName":"Reduce Transparency Enabled","description":"If 'true', enables reduced transparency.","helpText":null,"infoUrls":[],"categoryId":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","categoryName":"Accessibility Settings","options":[{"id":"settings_item_accessibilitysettings_reducetransparencyenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_reducetransparencyenabled_true","displayName":"Enabled","description":null,"helpText":null}]},"febe7f7f3f0cadd4":{"id":"user_vendor_msft_pde_enablepersonaldataencryption","displayName":"Enable Personal Data Encryption (User)","description":"Allows the Admin to enable Personal Data Encryption. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"categoryId":"1d5e7986-870c-444b-bf09-78bbf82a53fa","categoryName":"Personal Data Encryption","options":[{"id":"user_vendor_msft_pde_enablepersonaldataencryption_0","displayName":"Disable Personal Data Encryption.","description":"Disable Personal Data Encryption.","helpText":null},{"id":"user_vendor_msft_pde_enablepersonaldataencryption_1","displayName":"Enable Personal Data Encryption.","description":"Enable Personal Data Encryption.","helpText":null}]},"feec3bc5eef283ba":{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_2","displayName":"Administrative Templates (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \n\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \n\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \n\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \n\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \n\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admcomputers-2"],"categoryId":"73935f55-c845-40ce-819e-838c0041f6fa","categoryName":"Resultant Set of Policy snap-in extensions","options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_2_1","displayName":"Enabled","description":null,"helpText":null}]},"fe4a32585841e7ce":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote","displayName":"Microsoft OneNote 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft OneNote 2016.\r\nBy default, the user settings of Microsoft OneNote 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft OneNote 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft OneNote 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onenote"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote_1","displayName":"Enabled","description":null,"helpText":null}]},"fea23dbcefeb0b9d":{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016","displayName":"Microsoft Office 365 Lync 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Lync 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Lync 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365lync2016"],"categoryId":"5966d21b-220b-4937-9323-c6dd46cda942","categoryName":"Applications","options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016_1","displayName":"Enabled","description":null,"helpText":null}]},"fed1a8cdcbdf6d86":{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnusertimeout","displayName":"Remind user every X minutes: (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","categoryName":"User Profiles","options":null},"fe9066629f243c2a":{"id":"user_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_1","displayName":"Prohibit installing or uninstalling color profiles (User)","description":"This policy setting affects the ability of users to install or uninstall color profiles.\r\n\r\nIf you enable this policy setting, users cannot install new color profiles or uninstall previously installed color profiles.\r\n\r\nIf you disable or do not configure this policy setting, all users can install new color profiles. Standard users can uninstall color profiles that they previously installed. Administrators will be able to uninstall all color profiles.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowscolorsystem#admx-windowscolorsystem-prohibitchanginginstalledprofilelist-1"],"categoryId":"444409a4-8b03-402d-91d0-1cd9565fb0fb","categoryName":"Windows Color System","options":[{"id":"user_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_1_1","displayName":"Enabled","description":null,"helpText":null}]},"fef7bb0479c2731f":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemru","displayName":"Hide the dropdown list of recent files (User)","description":"Removes the list of most recently used files from the Open dialog box.\r\n\r\nIf you disable this setting or do not configure it, the \"File name\" field includes a drop-down list of recently used files. If you enable this setting, the \"File name\" field is a simple text box. Users must browse directories to find a file or type a file name in the text box.\r\n\r\nThis setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.\r\n\r\nTo see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nofilemru"],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemru_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemru_1","displayName":"Enabled","description":null,"helpText":null}]},"fee2f2fb0a4b0289":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_autoplayallowlistdesc","displayName":"Allow media autoplay on a allowlist of URL patterns (User)","description":"","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":null},"fe63505de1337b01":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled","displayName":"Specifies whether WebAssembly modules can be sent cross-origin (User)","description":"\r\nSpecifies whether WebAssembly modules can be sent to another window or worker cross-origin. Cross-origin WebAssembly module sharing will be deprecated as part of the efforts to deprecate document.domain, see https://github.com/mikewest/deprecating-document-domain. This policy allows to re-enable cross-origin WebAssembly module sharing to offer a longer transition period in the deprecation process.\r\n\r\nWhen set to True, sites can send WebAssembly modules also cross-origin without restrictions.\r\n\r\nWhen set to False or not set, sites can only send WebAssembly modules to windows and workers in the same origin.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fe9b95f58b0ca488":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (User)","description":"The URI template of the desired DNS-over-HTTPS resolver. To specify multiple DNS-over-HTTPS resolvers, separate the corresponding URI templates with spaces.\r\n\r\nIf the DnsOverHttpsMode is set to \"secure\" then this policy must be set and not empty.\r\n\r\nIf the DnsOverHttpsMode is set to \"automatic\" and this policy is set then the URI templates specified will be used; if this policy is unset then hardcoded mappings will be used to attempt to upgrade the user's current DNS resolver to a DoH resolver operated by the same provider.\r\n\r\nIf the URI template contains a dns variable, requests to the resolver will use GET; otherwise requests will use POST.\r\n\r\nIncorrectly formatted templates will be ignored.\r\n\r\nExample value: https://dns.example.net/dns-query{?dns}","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_1","displayName":"Enabled","description":null,"helpText":null}]},"fe37d96929088e9a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"","helpText":"","infoUrls":[],"categoryId":"70498fad-5ddb-4730-8130-d755ff675760","categoryName":"Default search provider","options":null},"fee3bf78cd01d50d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize","displayName":"Set media disk cache size in bytes (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_1","displayName":"Enabled","description":null,"helpText":null}]},"fef918594081c0be":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent","displayName":"Freeze User-Agent string major version at 99 (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_1","displayName":"Enabled","description":null,"helpText":null}]},"fe2a36fde8f93758":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled","displayName":"Enable Optimization Guide Fetching (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fe4ec56fe0b33f4d":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled","displayName":"Enable zstd content-encoding support (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"categoryId":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","categoryName":"Removed policies","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"feec416251a54ad3":{"id":"user_vendor_msft_policy_config_enterprisecloudprint_cloudprintresourceid","displayName":"Cloud Print Resource Id (User)","description":"Resource URI for which access is being requested by the Enterprise Cloud Print client during OAuth authentication","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-EnterpriseCloudPrint#cloudprintresourceid"],"categoryId":"14fe5c02-d4f6-4f2a-9eae-2d60d111ee77","categoryName":"Enterprise Cloud Print","options":null},"fe7dc8e7dc9f96b9":{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan (User)","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\n\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\n\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\n\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowsmartscreenie"],"categoryId":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","categoryName":"Intranet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},"fe6df2e0ef8187b7":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains (User)","description":"","helpText":"","infoUrls":[],"categoryId":"ac014aea-e417-46ad-a4a5-9a1fb1030882","categoryName":"Locked- Down Internet Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},"fe79ef0d0bf3170c":{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence (User)","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\n\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\n\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowuserdatapersistence"],"categoryId":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","categoryName":"Locked- Down Trusted Sites Zone","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},"fe6dc6d513a8db21":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel","displayName":"Configure Internet Explorer integration (User)","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\n* 0 = None\r\n\r\n* 1 = Internet Explorer mode\r\n\r\n* 2 = Internet Explorer 11","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_1","displayName":"Enabled","description":null,"helpText":null}]},"fe4e0f1f61c276fd":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action to take on Microsoft Edge startup (User)","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'Open new tab' (5).\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'Restore the last session' (1). The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'Open a list of URLs' (4).\r\n\r\nDisabling this setting is equivalent to leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\n* 1 = Restore the last session\r\n\r\n* 4 = Open a list of URLs\r\n\r\n* 5 = Open a new tab","helpText":"","infoUrls":[],"categoryId":"1653fa6c-aa99-4918-92c7-1df85d8843e1","categoryName":"Startup, home page and new tab page","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fe7b2c377bd37903":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin","displayName":"Minimum TLS version enabled (User)","description":"Sets the minimum supported version of SSL. If you don't configure this policy, Microsoft Edge uses a default minimum version, TLS 1.0.\r\n\r\nIf you enable this policy, you can set the minimum version to one of the following values: \"tls1\", \"tls1.1\" or \"tls1.2\". When set, Microsoft Edge won't use any version of SSL/TLS lower than the specified version. Any unrecognized value is ignored.\r\n\r\n* \"tls1\" = TLS 1.0\r\n\r\n* \"tls1.1\" = TLS 1.1\r\n\r\n* \"tls1.2\" = TLS 1.2\r\n\r\nExample value: tls1","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_1","displayName":"Enabled","description":null,"helpText":null}]},"feee67a93ab53dfa":{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended","displayName":"Allow features to download assets from the Asset Delivery Service (User)","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\r\nThese assets can be config files or Machine Learning models that power the features that use this service.\r\n\r\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\r\n\r\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":"","infoUrls":[],"categoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","categoryName":"Microsoft Edge - Default Settings (users can override)","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fe0c2e6841d876a3":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_automaticdownloadsallowedforurlsdesc","displayName":"Allow multiple automatic downloads in quick succession on specific sites (User)","description":"","helpText":"","infoUrls":[],"categoryId":"92d69c43-75ac-49b1-a3ef-9350079eef86","categoryName":"Content settings","options":null},"fe74c673726363fb":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (User)","description":"Controls whether ads are blocked on sites with intrusive ads. You can set this policy to one of the following options:\r\n\r\n* 1 = Allow ads on all sites.\r\n\r\n* 2 = Block ads on sites with intrusive ads (Default value).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_1","displayName":"Enabled","description":null,"helpText":null}]},"fe93165ca51b84a3":{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar","displayName":"Force direct intranet site navigation instead of searching on single word entries in the Address Bar (User)","description":"If you enable this policy, the top auto-suggest result in the address bar suggestion list will navigate to intranet sites if the text entered in the address bar is a single word without punctuation.\r\n\r\nDefault navigation when typing a single word without punctuation will conduct a navigation to an intranet site matching the entered text.\r\n\r\nIf you enable this policy, the second auto-suggest result in the address bar suggestion list will conduct a web search exactly as it was entered, provided that this text is a single word without punctuation. The default search provider will be used unless a policy to prevent web search is also enabled.\r\n\r\nTwo effects of enabling this policy are:\r\n\r\nNavigation to sites in response to single word queries that would typically resolve to a history item will no longer happen. Instead, the browser will attempt navigate to internal sites that may not exist in an organization’s intranet. This will result in a 404 error.\r\n\r\nPopular, single-word search terms will require manual selection of search suggestions to properly conduct a search.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},"fee9a0437cd55c52":{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist","displayName":"Configure the list of names that will bypass the HSTS policy check (User)","description":"Hostnames specified in this list will be exempt from the HSTS policy check that could potentially upgrade requests from \"http://\" to \"https://\". Only single-label hostnames are allowed in this policy. Hostnames must be canonicalized. Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific hostnames specified; it doesn't apply to subdomains of the names in the list.\r\n\r\nExample value:\r\n\r\nmeet","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},"fec0b0e7d8bb5035":{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled","displayName":"Hide the one-time redirection dialog and the banner on Microsoft Edge (User)","description":"This policy gives an option to disable one-time redirection dialog and the banner. When this policy is enabled, users will not see both the one-time dialog and the banner.\r\nUsers will continue to be redirected to Microsoft Edge when they encounter an incompatible website on Internet Explorer, but their browsing data will not be imported.\r\n\r\n- If you enable this policy the one-time redirection dialog and banner will never be shown to users. Users' browsing data will not be imported when a redirection happens.\r\n\r\n- If you disable or don't set this policy, the redirection dialog will be shown on the first redirection and the persistent redirection banner will be shown to users on sessions that begin with a redirection. Users' browsing data will be imported every time user encounters such redirection (ONLY IF user consents to it on the one-time dialog).","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"fe47a1db376f7a60":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_contactcard~l_contacttab_l_turnoncontacttabmapireplaceotheradd_l_otheraddmapireplace","displayName":"MAPI Property: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"20bacabf-cd07-48be-a184-f0ae76d31e4a","categoryName":"Contact Tab","options":null},"fe37105d27a28eab":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize351_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","categoryName":"Customizable Error Messages","options":null},"fe7ea477e1acabd3":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiaccess","displayName":"Disallow in Access (User)","description":"","helpText":"","infoUrls":[],"categoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","categoryName":"Customize","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiaccess_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_gloabloptions~l_customize_l_disabletoolbarcustomizationuipolicy_l_disabletoolbarcustomizationuiaccess_1","displayName":"True","description":null,"helpText":null}]},"fe45e84ce0cae218":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_fulfulde","displayName":"Fulfulde (User)","description":"Enables the editing language Fulfulde","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_fulfulde_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_fulfulde_1","displayName":"Enabled","description":null,"helpText":null}]},"fe6a812246f4c446":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_persian","displayName":"Persian (User)","description":"Enables the editing language Persian","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_persian_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_persian_1","displayName":"Enabled","description":null,"helpText":null}]},"feffe1fb455d75d0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_miscellaneous437~l_workflowcache_l_workflowcache1_l_workflowdescrip","displayName":"Description of the workflow to be shown to the user (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5f048379-3a42-43f0-9fd5-d269f292aa35","categoryName":"Workflow Cache","options":null},"fe857358859f6eb5":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc05_l_pathcolon254","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"fed19d4db0bf3a93":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_trustedloc17_l_datecolon303","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","categoryName":"Trust Center","options":null},"fe90bb8a0fd20bd6":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc14_l_allowsubfolders14","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc14_l_allowsubfolders14_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc14_l_allowsubfolders14_1","displayName":"True","description":null,"helpText":null}]},"fe2935495f94b4da":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_enableabilitytooptimizeonenotefiles","displayName":"Enable ability to optimize OneNote files... (User)","description":"Checks/Unchecks the option ''Optimize sections after OneNote has been inactive for the following number of minutes''.","helpText":"","infoUrls":[],"categoryId":"acfe6c36-66ab-4a3e-86b0-a178377427d2","categoryName":"Save","options":[{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_enableabilitytooptimizeonenotefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_save_l_enableabilitytooptimizeonenotefiles_1","displayName":"Enabled","description":null,"helpText":null}]},"fece68d0319ec057":{"id":"user_vendor_msft_policy_config_onent16v2~policy~l_microsoftofficeonenote~l_onenoteoptions~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid","displayName":"Cipher key length (User)","description":"","helpText":"","infoUrls":[],"categoryId":"25a84f2d-dbac-457e-b734-bc2605305f2b","categoryName":"Cryptography","options":null},"feb99c0a3885d746":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeignoreostformat","displayName":"Exchange Unicode Mode - Ignore OST Format (User)","description":"This policy setting allows you to specify whether existing OST format determines the mailbox mode.\r\n\r\nIf you enable this policy setting, you may choose one of these options:\r\n\r\n* OST Format determines mode: the format of the user's OST file will be used to determine whether to run in Unicode or ANSI mode.\r\n* Create new OST if format doesn't match mode: create a new OST file if needed.\r\n* Prompt to create new OST if format doesn't match mode\r\n\r\nIf you disable or do not configure this policy setting, you will not be able to specify whether existing OST format determines the mailbox mode.\r\n\r\nThis policy is ignored if PreferANSI is not set and the OST is enabled but either does not exist or is a Unicode OST, because it would be impossible for the user to create an ANSI OST.","helpText":"","infoUrls":[],"categoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","categoryName":"Exchange","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeignoreostformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_exchangesettings_l_exchangeunicodemodeignoreostformat_1","displayName":"Enabled","description":null,"helpText":null}]},"fe28d6a72b16cfd5":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_trustedloc08_l_descriptioncolon38","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","categoryName":"Trust Center","options":null},"fe1b882cdadc5aaa":{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity","displayName":"Developer tab | Code | Macro Security (User)","description":"","helpText":"","infoUrls":[],"categoryId":"44e27b70-4bdb-4aec-a75d-0568a1edc332","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrosecurity_1","displayName":"True","description":null,"helpText":null}]},"fefc1884ec3f89df":{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablefirewall","displayName":"Enable Private Network Firewall","description":"This value is an on/off switch for the firewall and advanced security enforcement. If this value is false, the server MUST NOT block any network traffic, regardless of other policy settings. The merge law for this option is to let the value of the GroupPolicyRSoPStore win if it is configured; otherwise, the local store value is used.","helpText":" ","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/firewall-csp"],"categoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","categoryName":"Firewall","options":[{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablefirewall_false","displayName":"False","description":"Disable Firewall","helpText":null},{"id":"vendor_msft_firewall_mdmstore_privateprofile_enablefirewall_true","displayName":"True","description":"Enable Firewall","helpText":null}]}} \ No newline at end of file diff --git a/public/intune-definitions/ff.json b/public/intune-definitions/ff.json new file mode 100644 index 000000000000..8c850218155a --- /dev/null +++ b/public/intune-definitions/ff.json @@ -0,0 +1 @@ +{"ff115805ebde6d36":{"id":"com.android.devicerestrictionpolicy.passwordpreviouspasswordcounttoblock","displayName":"Number of passwords required before user can reuse a password","description":"Use this setting to restrict users from creating previously used passwords. Enter the number of previously used passwords that can't be used, from 1-24. For example, enter 5 so users can't set a new password to their current password or any of their previous four passwords. If the value is blank, Intune doesn't change or update this setting. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-24)","infoUrls":[],"categoryId":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","categoryName":"Device password","options":null},"ffb221d92797bd5b":{"id":"com.android.devicerestrictionpolicy.workprofilepasswordminimumlettercharacters","displayName":"Number of characters required","description":"Enter the number of characters the work profile password must have, between 1 and 16 characters. Available for fully managed, dedicated and corporate-owned work profile devices (at work profile level).","helpText":"Enter a number (1-16)","infoUrls":[],"categoryId":"70c4566f-a079-4a8e-ac97-0736b405df1d","categoryName":"Work profile password","options":null},"ff8158f5c54071b6":{"id":"com.apple.applicationaccess_allowairplayincomingrequests","displayName":"Allow Air Play Incoming Requests","description":"If false, disables incoming AirPlay requests. Requires a supervised device. Available in macOS 12.3 and later.","helpText":null,"infoUrls":[],"categoryId":"eda31027-9270-4959-801b-397fa05512e2","categoryName":"Restrictions","options":[{"id":"com.apple.applicationaccess_allowairplayincomingrequests_false","displayName":"False","description":null,"helpText":null},{"id":"com.apple.applicationaccess_allowairplayincomingrequests_true","displayName":"True","description":null,"helpText":null}]},"ff8e90614f95e8fb":{"id":"com.apple.extensiblesso_extensiondata_pwreqlength_kerberos","displayName":"Password Req Length","description":"The minimum length of passwords on the domain. Available in macOS 10.15 and later.","helpText":null,"infoUrls":[],"categoryId":"f35cc803-3a06-4262-b38b-a5295321f756","categoryName":"Extensible Single Sign On Kerberos","options":null},"fff5e5103fe3be82":{"id":"com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_lcid","displayName":"Microsoft Edge Dev LCID (Deprecated)","description":null,"helpText":null,"infoUrls":[],"categoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","categoryName":"Microsoft AutoUpdate (MAU)","options":null},"fff122974f4aec7c":{"id":"com.apple.managedclient.preferences_automaticdownloadsallowedforurls","displayName":"Allow multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to perform multiple successive automatic downloads.\nIf you don't configure this policy, \"DefaultAutomaticDownloadsSetting\" applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#automaticdownloadsallowedforurls"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ff0f10efd62b1545":{"id":"com.apple.managedclient.preferences_javascriptoptimizerallowedforsites","displayName":"Allow JavaScript optimization on these sites","description":"Allows you to set a list of site url patterns that specify sites for which advanced JavaScript optimizations are enabled.\n\nFor detailed information on valid site url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\n\nJavaScript optimization policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\n\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the \"JavaScriptOptimizerAllowedForSites\" policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript optimizations enabled, but fabrikam.com will use the policy from \"DefaultJavaScriptOptimizerSetting\", if set, or default to JavaScript optimizations enabled. Blocklist entries have higher priority than allowlist entries, which in turn have higher priority than the configured default value.\n\nIf you don't configure this policy for a site then the policy from \"DefaultJavaScriptOptimizerSetting\" applies to the site, if set, otherwise Javascript optimization is enabled for the site.","helpText":null,"infoUrls":["https://docs.microsoft.com/deployedge/microsoft-edge-policies#javascriptoptimizerallowedforsites"],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":null},"ff6118376e124538":{"id":"com.apple.managedclient.preferences_webappinstallforcelist_item_create_desktop_shortcut","displayName":"Create desktop shortcut","description":null,"helpText":null,"infoUrls":[],"categoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","categoryName":"Microsoft Edge","options":[{"id":"com.apple.managedclient.preferences_webappinstallforcelist_item_create_desktop_shortcut_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.apple.managedclient.preferences_webappinstallforcelist_item_create_desktop_shortcut_true","displayName":"Enabled","description":null,"helpText":null}]},"ffbf3142406455e7":{"id":"com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from in an insecure manner (Obsolete)","description":"List of URL patterns. Requests initiated from websites served by matching origins aren't subject to Private Network Access checks.\n\nIf this policy isn't set, this policy behaves as if set to the empty list.\n\nFor origins not covered by the patterns specified here, the global default value is used either from the \"InsecurePrivateNetworkRequestsAllowed\" policy, if it's set, or the user's personal configuration otherwise.\n\nFor detailed information on valid URL patterns, see [Filter format for URL list-based policies](/DeployEdge/edge-learnmmore-url-list-filter%20format).\n\nThis policy is obsolete. The previous blanket override has been replaced by the permission-based Local Network Access model, which blocks cross-space requests until users grant explicit consent.","helpText":null,"infoUrls":[],"categoryId":"43057320-7058-46d5-86f9-a56c80bbf8b9","categoryName":"Private Network Request Settings","options":null},"ffab0a52434992d3":{"id":"com.microsoft.edge.mamedgeappconfigsettings.serialblockedforurls","displayName":"Block the Serial API on specific sites","description":"Specifies URL patterns for sites that aren't allowed to request access to a serial port.\n\nIf not configured, Microsoft Edge uses the value from the DefaultSerialGuardSetting policy (if set), or the user's settings.\n\nFor unmatched sites, the following order applies:\n\n1. SerialAskForUrls (if matched).\n\n2. DefaultSerialGuardSetting (if set).\n\n3. User's settings.\n\nURL patterns in this policy must not conflict with those in SerialAskForUrls. This policy takes precedence.\n\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":null},"fff66343aff4da3b":{"id":"com.microsoft.edge.mamedgeappconfigsettings.setntpdefaultfeedtab_recommended","displayName":"Set the default New Tab Page feed tab to Work or Discover (users can override)","description":"This policy sets the default feed tab on the New Tab Page to Work or Discover.\n\nIf you set this policy to 'Work' (0) or don't configure this policy, Microsoft Edge sets the default feed tab to Work.\n\nIf you set this policy to 'Discover' (1), Microsoft Edge sets the default feed tab to Discover.\n\nThis policy only takes effect when \"ConfigureNTPFeedTabVisibility\" is set to 'EnableBothWorkDiscover' (0) or is not configured. If only one tab is visible, this policy has no effect.\n\nPolicy options mapping:\n\n* NTPDefaultFeedTabWork (0) = Work\n\n* NTPDefaultFeedTabDiscover (1) = Discover\n\nUse the preceding information when configuring this policy.","helpText":null,"infoUrls":[],"categoryId":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","categoryName":"Startup, home page and new tab page","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.setntpdefaultfeedtab_recommended_ntpdefaultfeedtabwork","displayName":"Work","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.setntpdefaultfeedtab_recommended_ntpdefaultfeedtabdiscover","displayName":"Discover","description":null,"helpText":null}]},"ff2868a0e8d9e7d0":{"id":"com.microsoft.edge.mamedgeappconfigsettings.showacrobatsubscriptionbutton","displayName":"Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription","description":"This policy lets the native PDF viewer in Microsoft Edge show a button that lets a user looking for advanced digital document features to discover and subscribe to premium offerings. This is done via the Acrobat extension.\n\nIf you enable or don't configure this policy, the button shows up on the native PDF viewer in Microsoft Edge. A user can buy Adobe subscription to access their premium offerings.\n\nIf you disable this policy, the button isn't visible on the native PDF viewer in Microsoft Edge. A user can't discover Adobe's advanced PDF tools or buy their subscriptions.","helpText":null,"infoUrls":[],"categoryId":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","categoryName":"Uncategorized","options":[{"id":"com.microsoft.edge.mamedgeappconfigsettings.showacrobatsubscriptionbutton_false","displayName":"Disabled","description":null,"helpText":null},{"id":"com.microsoft.edge.mamedgeappconfigsettings.showacrobatsubscriptionbutton_true","displayName":"Enabled","description":null,"helpText":null}]},"ffb0d7ee27f6d8c6":{"id":"device_vendor_msft_laps_policies_adpasswordencryptionprincipal","displayName":"AD Password Encryption Principal ","description":"Use this setting to configure the name or SID of a user or group that can decrypt the password stored in Active Directory.\n\nThis setting is ignored if the password is currently being stored in Azure.\n\nIf not specified, the password will be decryptable by the Domain Admins group in the device's domain.\n\nIf specified, the specified user or group will be able to decrypt the password stored in Active Directory.\n\nIf the specified user or group account is invalid the device will fallback to using the Domain Admins group in the device's domain.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/LAPS-csp/"],"categoryId":"f1dcf7b6-2d89-41bf-b5eb-02a879c6db5d","categoryName":null,"options":null},"ff20add57702091d":{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_adminname","displayName":"Name of administrator account to manage","description":"\nAdministrator account name: name of the local account you want to manage password for.\n DO NOT configure when you use built-in admin account. Built-in admin account is auto-detected by well-known SID, even when renamed\n\n DO configure when you use custom local admin account\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-admpwd#admx-admpwd-pol-admpwd-adminname"],"categoryId":"b3b2fc04-4b88-4a1c-8370-04573019eebe","categoryName":"LAPS","options":[{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_adminname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_adminname_1","displayName":"Enabled","description":null,"helpText":null}]},"ffaa2f3869c5ff1c":{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckallowlocallist","displayName":"Allow local activation security check exemptions","description":"Allows you to specify that local computer administrators can supplement the \"Define Activation Security Check exemptions\" list.\r\n\r\nIf you enable this policy setting, and DCOM does not find an explicit entry for a DCOM server application id (appid) in the \"Define Activation Security Check exemptions\" policy (if enabled), DCOM will look for an entry in the locally configured list.\r\n\r\nIf you disable this policy setting, DCOM will not look in the locally configured DCOM activation security check exemption list.\r\n\r\nIf you do not configure this policy setting, DCOM will only look in the locally configured exemption list if the \"Define Activation Security Check exemptions\" policy is not configured.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dcom#admx-dcom-dcomactivationsecuritycheckallowlocallist"],"categoryId":"a57b27b6-48e0-42b2-812a-2be86c113a0c","categoryName":"Application Compatibility Settings","options":[{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckallowlocallist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dcom_dcomactivationsecuritycheckallowlocallist_1","displayName":"Enabled","description":null,"helpText":null}]},"ffa883ea85cd3e16":{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatesecuritylevel_dns_updatesecuritylevel_box","displayName":"Update security level:","description":null,"helpText":"","infoUrls":[],"categoryId":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","categoryName":"DNS Client","options":[{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatesecuritylevel_dns_updatesecuritylevel_box_256","displayName":"Only secure","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatesecuritylevel_dns_updatesecuritylevel_box_16","displayName":"Only unsecure","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_dnsclient_dns_updatesecuritylevel_dns_updatesecuritylevel_box_0","displayName":"Unsecure followed by secure","description":null,"helpText":null}]},"ff5a0428f0bab998":{"id":"device_vendor_msft_policy_config_admx_eventlog_channel_log_filelogaccess_3_channel_log_filelogaccess","displayName":"Log Access","description":null,"helpText":"","infoUrls":[],"categoryId":"1a2a4fc8-c54b-4906-a422-7dd51a196211","categoryName":"Setup","options":null},"ffd480955c570d89":{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt","displayName":"Configure software Installation policy processing","description":"This policy setting determines when software installation policies are updated.\r\n\r\nThis policy setting affects all policy settings that use the software installation component of Group Policy, such as policy settings in Software Settings\\Software Installation. You can set software installation policy only for Group Policy Objects stored in Active Directory, not for Group Policy Objects on the local computer.\r\n\r\nThis policy setting overrides customized settings that the program implementing the software installation policy set when it was installed.\r\n\r\nIf you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.\r\n\r\nThe \"Allow processing across a slow network connection\" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.\r\n\r\nThe \"Process even if the Group Policy objects have not changed\" option updates and reapplies the policies even if the policies have not changed. Many policy setting implementations specify that they are updated only when changed. However, you might want to update unchanged policy settings, such as reapplying a desired policies in case a user has changed it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-cse-appmgmt"],"categoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","categoryName":"Group Policy","options":[{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_grouppolicy_cse_appmgmt_1","displayName":"Enabled","description":null,"helpText":null}]},"ff6e2ee814e754cd":{"id":"device_vendor_msft_policy_config_admx_icm_driversearchplaces_dontsearchwindowsupdate","displayName":"Turn off Windows Update device driver searching","description":"This policy setting specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present.\r\n\r\nIf you enable this policy setting, Windows Update is not searched when a new device is installed.\r\n\r\nIf you disable this policy setting, Windows Update is always searched for drivers when no local drivers are present.\r\n\r\nIf you do not configure this policy setting, searching Windows Update is optional when installing a device.\r\n\r\nAlso see \"Turn off Windows Update device driver search prompt\" in \"Administrative Templates/System,\" which governs whether an administrator is prompted before searching Windows Update for device drivers if a driver is not found locally.\r\n\r\nNote: This policy setting is replaced by \"Specify Driver Source Search Order\" in \"Administrative Templates/System/Device Installation\" on newer versions of Windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-driversearchplaces-dontsearchwindowsupdate"],"categoryId":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","categoryName":null,"options":[{"id":"device_vendor_msft_policy_config_admx_icm_driversearchplaces_dontsearchwindowsupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_icm_driversearchplaces_dontsearchwindowsupdate_1","displayName":"Enabled","description":null,"helpText":null}]},"ff7973acd9264422":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_2_lbl_nopinfileslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"ffd82ac0c6e6cc08":{"id":"device_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_2_lbl_reminderfreqspin","displayName":"Minutes:","description":null,"helpText":"","infoUrls":[],"categoryId":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","categoryName":"Offline Files","options":null},"ff7b97cdb1ef84bf":{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter","displayName":"Drive Letter","description":null,"helpText":"","infoUrls":[],"categoryId":"89ad0055-1603-420e-940d-9944a63e3da9","categoryName":"Profiles","options":[{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_g:","displayName":"G:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_h:","displayName":"H:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_i:","displayName":"I:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_j:","displayName":"J:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_k:","displayName":"K:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_l:","displayName":"L:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_m:","displayName":"M:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_n:","displayName":"N:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_o:","displayName":"O:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_p:","displayName":"P:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_q:","displayName":"Q:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_r:","displayName":"R:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_s:","displayName":"S:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_t:","displayName":"T:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_u:","displayName":"U:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_v:","displayName":"V:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_w:","displayName":"W:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_x:","displayName":"X:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_y:","displayName":"Y:","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_admx_terminalserver_ts_user_home_ts_drive_letter_z:","displayName":"Z:","description":null,"helpText":null}]},"ff47b78bb3c0ee3f":{"id":"device_vendor_msft_policy_config_admx_userexperiencevirtualization_contactiturl_contactiturl","displayName":"Contact IT URL","description":null,"helpText":"","infoUrls":[],"categoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","categoryName":"Microsoft User Experience Virtualization","options":null},"ff17a4730f750339":{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditrpcevents","displayName":"Detailed Tracking Audit RPC Events","description":"This policy setting allows you to audit inbound remote procedure call (RPC) connections. If you configure this policy setting, an audit event is generated when a remote RPC connection is attempted. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a remote RPC connection is attempted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Audit#detailedtracking_auditrpcevents"],"categoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","categoryName":"Auditing","options":[{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditrpcevents_0","displayName":"Off/ None","description":"Off/None","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditrpcevents_1","displayName":"Success","description":"Success","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditrpcevents_2","displayName":"Failure","description":"Failure","helpText":null},{"id":"device_vendor_msft_policy_config_audit_detailedtracking_auditrpcevents_3","displayName":"Success+ Failure","description":"Success+Failure","helpText":null}]},"ffe1f94a404e9ee5":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled","displayName":"Enable the Click to Call Feature","description":"Enable the Click to Call feature which allows users to send phone numbers from Chrome Desktops to an Android device when the user is Signed-in. For more information, see help center article: https://support.google.com/chrome/answer/9430554?hl=en.\r\n\r\nIf this policy is set to enabled, the capability of sending phone numbers to Android devices will be enabled for the Chrome user.\r\n\r\nIf this policy is set to disabled, the capability of sending phone numbers to Android devices will be disabled for the Chrome user.\r\n\r\nIf you set this policy, users cannot change or override it.\r\n\r\nIf this policy is left unset, the Click to Call feature is enabled by default.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ff876db34f4afa1e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled","displayName":"Allow users to customize the background on the New Tab page","description":"If the policy is set to false, the New Tab page won't allow users to customize the background. Any existing custom background will be permanently removed even if the policy is set to true later.\r\n\r\nIf the policy is set to true or unset, users can customize the background on the New Tab page.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ffd9208405c1a28e":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled","displayName":"Enable Window Occlusion","description":"Enables window occlusion in Google Chrome.\r\n\r\nIf you enable this setting, to reduce CPU and power consumption Google Chrome will detect when a window is covered by other windows, and will suspend work painting pixels.\r\n\r\nIf you disable this setting Google Chrome will not detect when a window is covered by other windows.\r\n\r\nIf this policy is left not set, occlusion detection will be enabled.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ff3bd019ba3d5128":{"id":"device_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_browserswitcherchromepath","displayName":"Path to Chrome for switching from the alternative browser. (Device)","description":"","helpText":"","infoUrls":[],"categoryId":"10247787-95ea-4507-93de-dbd166df12b5","categoryName":"Legacy Browser Support","options":null},"ff8b8c0c5f700f11":{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister","description":"This setting specifies the number of healthy CCD Locations required for a user to sign out. The default setting is 1, meaning that at least one remote CCD Location is required for the user to sign out.\r\n\r\nIf the number of available CCD Locations, when a user attempts to sign out, is less than the number set for Healthy Providers Required For Unregister, the user's sign out will be prevented for the time specified in CCD Unregister Timeout.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\HealthyProvidersRequiredForUnregister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"categoryId":"0bae3158-5f75-4e25-acf4-859d2612f892","categoryName":"Cloud Cache","options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_1","displayName":"Enabled","description":null,"helpText":null}]},"ff533b6f13011435":{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows","displayName":"Enable dragging of content from different domains within a window","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window.\n\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting.\n\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.\n\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users can change this setting in the Internet Options dialog.\n\nIn Internet Explorer 9 and earlier versions, if you disable this policy setting or do not configure it, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows"],"categoryId":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","categoryName":"Internet Zone","options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_1","displayName":"Enabled","description":null,"helpText":null}]},"ff1154cc26da444c":{"id":"device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation","displayName":"Require strict KDC validation","description":"This policy setting controls the Kerberos client's behavior in validating the KDC certificate for smart card and system certificate logon. \r\n\r\nIf you enable this policy setting, the Kerberos client requires that the KDC's X.509 certificate contains the KDC key purpose object identifier in the Extended Key Usage (EKU) extensions, and that the KDC's X.509 certificate contains a dNSName subjectAltName (SAN) extension that matches the DNS name of the domain. If the computer is joined to a domain, the Kerberos client requires that the KDC's X.509 certificate must be signed by a Certificate Authority (CA) in the NTAuth store. If the computer is not joined to a domain, the Kerberos client allows the root CA certificate on the smart card to be used in the path validation of the KDC's X.509 certificate.\r\n\r\nIf you disable or do not configure this policy setting, the Kerberos client requires only that the KDC certificate contain the Server Authentication purpose object identifier in the EKU extensions which can be issued to any server.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-requirestrictkdcvalidation"],"categoryId":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","categoryName":"Kerberos","options":[{"id":"device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation_1","displayName":"Enabled","description":null,"helpText":null}]},"ff2f1985effd74b1":{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled","displayName":"Web To Browser Sign-in Enabled","description":"Allow user to sign in to the same account in Microsoft Edge when a user signs in to a Microsoft website.\r\nIf this policy is enabled or not configured, user are able to get sign in CTA or seamless sign in experience(if 'SeamlessWebToBrowserSignInEnabled' (Seamless Web To Browser Sign-in Enabled) is enabled) when user sign in on Microsoft website.\r\nIf this policy is disabled, user will not get sign in CTA or seamless sign in experience when user sign in on Microsoft website.","helpText":"","infoUrls":[],"categoryId":"45a89c1f-0a34-4f78-b28f-d30b623fa423","categoryName":"Identity and sign-in","options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ff7716b27dd2991e":{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"categoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","categoryName":"OneDrive","options":null},"ff5ef3af8b993222":{"id":"device_vendor_msft_policy_config_settings_allowlanguage","displayName":"Allow Language","description":"Allows the user to change the language settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowlanguage"],"categoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","categoryName":"Settings","options":[{"id":"device_vendor_msft_policy_config_settings_allowlanguage_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowlanguage_1","displayName":"Allow","description":"Allowed.","helpText":null}]},"ffcad8606fba1b85":{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector","displayName":"Enable RDP Shortpath for managed networks","description":"This policy setting lets you enable RDP Shortpath for managed networks.\r\n\r\nIf you enable this policy setting, Azure Virtual Desktop clients connected over managed networks will use UDP to connect to the session host.\r\n\r\nIf you disable or don’t configure this policy setting, the clients won’t use RDP Shortpath for managed networks to connect to the session host.\r\n\r\nIf you enable this policy setting, you should also enable the required firewall exceptions that will allow RDP Shortpath for managed networks to work properly.\r\n ","helpText":"","infoUrls":[],"categoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","categoryName":"Azure Virtual Desktop","options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector_1","displayName":"Enabled","description":null,"helpText":null}]},"ff13a740195becd2":{"id":"device_vendor_msft_policy_config_userrights_actaspartoftheoperatingsystem","displayName":"Act As Part Of The Operating System","description":"This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. Processes that require this privilege should use the LocalSystem account, which already includes this privilege, rather than using a separate user account with this privilege specially assigned. Caution:Assigning this user right can be a security risk. Only assign this user right to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#actaspartoftheoperatingsystem"],"categoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","categoryName":"User Rights","options":null},"ffb16cf4af0d083e":{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_pathcolon71","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","categoryName":"Trusted Locations","options":null},"ffb84e0316e5654b":{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts","displayName":"Turn on Script Execution (User)","description":"This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run.\r\n\r\nIf you enable this policy setting, the scripts selected in the drop-down list are allowed to run.\r\n\r\nThe \"Allow only signed scripts\" policy setting allows scripts to execute only if they are signed by a trusted publisher.\r\n\r\nThe \"Allow local scripts and remote signed scripts\" policy setting allows any local scrips to run; scripts that originate from the Internet must be signed by a trusted publisher.\r\n\r\nThe \"Allow all scripts\" policy setting allows all scripts to run.\r\n\r\nIf you disable this policy setting, no scripts are allowed to run.\r\n\r\nNote: This policy setting exists under both \"Computer Configuration\" and \"User Configuration\" in the Local Group Policy Editor. The \"Computer Configuration\" has precedence over \"User Configuration.\"\r\n\r\nIf you disable or do not configure this policy setting, it reverts to a per-machine preference setting; the default if that is not configured is \"No scripts allowed.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enablescripts"],"categoryId":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","categoryName":"Windows Power Shell","options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_1","displayName":"Enabled","description":null,"helpText":null}]},"ff8981d41db40fd6":{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places1","displayName":"Item 2 (User)","description":null,"helpText":"","infoUrls":[],"categoryId":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","categoryName":"Common Open File Dialog","options":null},"ffd275e0c304007a":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes","displayName":"List of file types that should be automatically opened on download (User)","description":"List of file types that should be automatically opened on download. The leading separator should not be included when listing the file type, so list \"txt\" instead of \".txt\".\r\n\r\nFiles with types that should be automatically opened will still be subject to the enabled safe browsing checks and won't be opened if they fail those checks.\r\n\r\nIf this policy isn't set, only file types that a user has already specified to automatically be opened will do so when downloaded.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nexe\r\ntxt","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_1","displayName":"Enabled","description":null,"helpText":null}]},"ffc3814ce5a0959e":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended","displayName":"Continue running background apps when Google Chrome is closed (User)","description":"Setting the policy to Enabled turns background mode on. In background mode, a Google Chrome process is started on OS sign-in and keeps running when the last browser window is closed, allowing background apps and the browsing session to remain active. The background process displays an icon in the system tray and can always be closed from there.\r\n\r\nSetting the policy to Disabled turns background mode off.\r\n\r\nIf you set the policy, users can't change it in the browser settings. If unset, background mode is off at first, but users can change it.","helpText":"","infoUrls":[],"categoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","categoryName":"Google Chrome - Default Settings users can override","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},"fff09994ef20d96d":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod","displayName":"Set the time period for update notifications (User)","description":"Allows you to set the time period, in milliseconds, over which users are notified that Google Chrome must be relaunched or that a Google Chrome OS device must be restarted to apply a pending update.\r\n\r\nOver this time period, the user will be repeatedly informed of the need for an update. For Google Chrome OS devices, a restart notification appears in the system tray according to the RelaunchHeadsUpPeriod policy. For Google Chrome browsers, the app menu changes to indicate that a relaunch is needed once one third of the notification period passes. This notification changes color once two thirds of the notification period passes, and again once the full notification period has passed. The additional notifications enabled by the RelaunchNotification policy follow this same schedule.\r\n\r\nIf not set, the default period of 604800000 milliseconds (one week) is used.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_1","displayName":"Enabled","description":null,"helpText":null}]},"ff3d4423432afb79":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nLeaving the policy unset means DefaultFileSystemWriteGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with FileSystemWriteBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"categoryId":"59d29716-55b0-4014-a458-38b408ff9530","categoryName":"Content settings","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},"ffdc8adba0bdcd54":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure_unsafelytreatinsecureoriginassecuredesc","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"","helpText":"","infoUrls":[],"categoryId":"5900ac65-f656-459c-bd82-1329a862544d","categoryName":"Deprecated policies","options":null},"ff6d495b7f1193f1":{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (User)","description":"Overrides default background graphics printing mode.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"categoryId":"62499519-97eb-43e7-ae96-d7909c5820d3","categoryName":"Printing","options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},"ff07b217ace939cd":{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled","displayName":"Use Skia renderer for PDF rendering (User)","description":"Controls whether the PDF viewer in Google Chrome uses Skia renderer.\r\n\r\nWhen this policy is enabled, the PDF viewer uses Skia renderer.\r\n\r\nWhen this policy is disabled, the PDF viewer uses its current AGG renderer.\r\n\r\nWhen this policy is not set, the PDF renderer will be chosen by the browser.","helpText":"","infoUrls":[],"categoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","categoryName":"Google Chrome","options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ff95da5cb870a124":{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate","displayName":"Intranet (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8d503574-f93a-4277-a30d-19895d46dd13","categoryName":"Security Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_4","displayName":"High","description":null,"helpText":null}]},"ff6d253f9340a3b6":{"id":"user_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature","displayName":"Turn off the flip ahead with page prediction feature (User)","description":"This policy setting determines whether a user can swipe across a screen or click Forward to go to the next pre-loaded page of a website.\n\nMicrosoft collects your browsing history to improve how flip ahead with page prediction works. This feature isn't available for Internet Explorer for the desktop.\n\nIf you enable this policy setting, flip ahead with page prediction is turned off and the next webpage isn't loaded into the background.\n\nIf you disable this policy setting, flip ahead with page prediction is turned on and the next webpage is loaded into the background.\n\nIf you don't configure this setting, users can turn this behavior on or off, using the Settings charm.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableflipaheadfeature"],"categoryId":"822bd634-4d01-486e-adad-8085968fd1c4","categoryName":"Advanced Page","options":[{"id":"user_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_1","displayName":"Enabled","description":null,"helpText":null}]},"ff5a2fa91cb5ca2d":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins","displayName":"Enable site isolation for specific origins (User)","description":"Specify origins to run in isolation, in their own process.\r\nThis policy also isolates origins named by subdomains - for example, specifying https://contoso.com/ will cause https://foo.contoso.com/ to be isolated as part of the https://contoso.com/ site.\r\nIf the policy is enabled, each of the named origins in a comma-separated list will run in its own process.\r\nIf you disable this policy, then both the 'IsolateOrigins' and 'SitePerProcess' features are disabled. Users can still enable 'IsolateOrigins' policy manually, via command line flags.\r\nIf you don't configure the policy, the user can change this setting.\r\n\r\nExample value: https://contoso.com/,https://fabrikam.com/","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_1","displayName":"Enabled","description":null,"helpText":null}]},"ff7d93c9f1b4ac25":{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled","displayName":"Configure tab lifecycles (User)","description":"The tab lifecycles feature reclaims CPU and memory associated with running tabs that haven't been used in a long time, by first throttling, then freezing, and finally discarding them.\r\n\r\nIf you disable this policy, the tab lifecycles feature is disabled, and all tabs are left running normally.\r\n\r\nIf you enable or don't configure this policy, the tab lifecycles feature is enabled.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ff26f10a9f4f7050":{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled","displayName":"Search in Sidebar enabled (User)","description":"Search in Sidebar allows users to open search result in sidebar (including sidebar search for Progressive Web Apps).\r\n\r\nIf you configure this policy to 'EnableSearchInSidebar' or don't configure it, Search in sidebar will be enabled.\r\n\r\nIf you configure this policy to 'DisableSearchInSidebarForKidsMode', Search in sidebar will be disabled when in Kids mode. Some methods that would normally invoke sidebar search will invoke a traditional search instead.\r\n\r\nIf you configure this policy to 'DisableSearchInSidebar', Search in sidebar will be disabled. Some methods that would normally invoke sidebar search will invoke a traditional search instead.\r\n\r\nPolicy options mapping:\r\n\r\n* EnableSearchInSidebar (0) = Enable search in sidebar\r\n\r\n* DisableSearchInSidebarForKidsMode (1) = Disable search in sidebar for Kids Mode\r\n\r\n* DisableSearchInSidebar (2) = Disable search in sidebar\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},"ffccf27a0478576b":{"id":"user_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector_onsecurityevententerpriseconnector","displayName":"Configuration policy for Microsoft Edge for Business Reporting Connectors (User)","description":"","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":null},"ffce33db87f01ce4":{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist","displayName":"Block access to a specified list of services and export targets in Collections (User)","description":"List specific services and export targets that users can't access in the Collections feature in Microsoft Edge. This includes displaying additional data from Bing and exporting collections to Microsoft products or external partners.\r\n\r\nIf you enable this policy, services and export targets that match the given list are blocked.\r\n\r\nIf you don't configure this policy, no restrictions on the acceptable services and export targets are enforced.\r\n\r\nPolicy options mapping:\r\n\r\n* pinterest_suggestions (pinterest_suggestions) = Pinterest suggestions\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\npinterest_suggestions","helpText":"","infoUrls":[],"categoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","categoryName":"Microsoft Edge","options":[{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},"ff4c371f7a9fb62c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastservicecreatesharednotes0","displayName":"Create Shared Notes (User)","description":"","helpText":"","infoUrls":[],"categoryId":"0be98651-a552-4470-b2dc-71c66a5ce1e6","categoryName":"Presentation Services","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastservicecreatesharednotes0_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_broadcast~l_broadcastservices_l_configurebroadcastservice00_l_broadcastservicecreatesharednotes0_1","displayName":"True","description":null,"helpText":null}]},"ffc6863b40c8d80e":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslink","displayName":"With a simple Web discussions link (User)","description":"Defines the default message body text used in an email request for review when the review document is included only as an attachment.","helpText":"","infoUrls":[],"categoryId":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","categoryName":"Default message text for a review request...","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_collaborationsettings~l_defaultmessagetextforareviewrequest_l_withasimplewebdiscussionslink_1","displayName":"Enabled","description":null,"helpText":null}]},"ff7f699c45fed1ce":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bosniancyrillicbosniaandherzegovina","displayName":"Bosnian (Cyrillic, Bosnia and Herzegovina) (User)","description":"Enables the editing language \"Bosnian (Cyrillic, Bosnia and Herzegovina)\"","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bosniancyrillicbosniaandherzegovina_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_bosniancyrillicbosniaandherzegovina_1","displayName":"Enabled","description":null,"helpText":null}]},"ffb972fa58c5c927":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_turkmen","displayName":"Turkmen (User)","description":"Enables the editing language Turkmen","helpText":"","infoUrls":[],"categoryId":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","categoryName":"Enabled Editing Languages","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_turkmen_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_languagesettings~l_editinglanguages~l_enablededitinglanguages_l_turkmen_1","displayName":"Enabled","description":null,"helpText":null}]},"ff189da11fc56cf0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits_l_selectdigitalsignaturehashingalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"categoryId":"512f133b-9d53-46b8-834f-52501f9b6527","categoryName":"Digital Signatures","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits_l_selectdigitalsignaturehashingalgorithmdropid_0","displayName":"0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits_l_selectdigitalsignaturehashingalgorithmdropid_512","displayName":"512","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits_l_selectdigitalsignaturehashingalgorithmdropid_768","displayName":"768","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_digsig_l_selectdigitalsignaturelegacydsabits_l_selectdigitalsignaturehashingalgorithmdropid_1024","displayName":"1024","description":null,"helpText":null}]},"ff190c8e582c4fe0":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey15","displayName":"Escrow Key #15 (User)","description":"This policy setting allows you to specify a certificate to use as an escrow key for password protected files.\r\n\r\nIf you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine.\r\n\r\nIf you disable or do not configure this policy setting, an escrow key is not configured.","helpText":"","infoUrls":[],"categoryId":"4f671de2-9777-4969-acf3-8d90c733434c","categoryName":"Escrow Certificates","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_escrowkeycerts_l_escrowkey15_1","displayName":"Enabled","description":null,"helpText":null}]},"ff959538f41ec8ac":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc18_l_allowsubfolders18","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"135e4013-43b8-4227-99fd-54ddeac4e329","categoryName":"Protected View","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc18_l_allowsubfolders18_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241~l_protectedview_l_unsafeloc18_l_allowsubfolders18_1","displayName":"True","description":null,"helpText":null}]},"ff48c17836a4953c":{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeinventoryagentfilemetadataobfuscation","displayName":"Turn on privacy settings in Office Telemetry Agent (User)","description":"This policy setting configures Office Telemetry Agent to disguise, or obfuscate, certain file properties that are reported in telemetry data.\r\n\r\nIf you enable this policy setting, Office Telemetry Agent obfuscates the file name, file path, and title of Office documents before uploading telemetry data to the shared folder.\r\n\r\nIf you disable or do not configure this policy setting, Office Telemetry Agent uploads telemetry data that shows the full file name, file path, and title of all Office documents.","helpText":"","infoUrls":[],"categoryId":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","categoryName":"Telemetry Dashboard","options":[{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeinventoryagentfilemetadataobfuscation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_telemetrydashboard_l_officeinventoryagentfilemetadataobfuscation_1","displayName":"Enabled","description":null,"helpText":null}]},"ff48e856c9b6c1de":{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicyincludingfilespendingupload","displayName":"Age out documents older than n days Including documents with pending uploads (User)","description":"\r\n This policy controls when locally cached Office documents are aged out of the Office Document Cache including if the file may have pending uploads. This acts as a maximum possible age (in days) for any file to remain in the Office Document Cache.\r\n\r\n If you enable this policy setting, files older than the policy \"Age out documents older than n days\" as well as this setting will get cleaned up regardless of file pending upload status.\r\n\r\n If you disable this policy setting or if you do not configure this policy setting, Office will clean out only files that do not have pending changes per the policy \"Age out documents older than n days\". Configuring this policy with a value of 0 is also considered disabling the policy.\r\n\r\n For more information https://support.microsoft.com/en-us/topic/managing-office-document-cache-size-ea64af72-b597-408e-8ecf-fd55daa02476\r\n\r\n Note: This policy setting only applies to Office builds 19328.20000 and newer\r\n ","helpText":"","infoUrls":[],"categoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","categoryName":"Miscellaneous","options":[{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicyincludingfilespendingupload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_office16v21~policy~l_microsoftofficesystem~l_miscellaneous437_l_ageoutpolicyincludingfilespendingupload_1","displayName":"Enabled","description":null,"helpText":null}]},"ff90e8a4792af587":{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointlivesyncintervalmultiplier","displayName":"Multiplier for foreground sync interval for the currently viewed section stored on SharePoint (User)","description":"This policy setting allows you to increase the interval between foreground polls of a SharePoint site for changes to the currently viewed section.\r\n\r\nIf you enable this policy setting, OneNote will poll SharePoint less frequently for changes to the currently viewed section. Intervals are multiplied by the entered value, a positive integer value from 1 to 10. Larger intervals will slow section sync but reduce server load.\r\n\r\nIf you disable or do not configure this policy setting, OneNote will sync the currently viewed section at the default rate (multiplier value of 1).\r\n\r\nNote: This policy setting only applies to volume licensed versions of Office 2016 that use Windows Installer (MSI), such as Office Professional Plus 2016 and Office Standard 2016.","helpText":"","infoUrls":[],"categoryId":"ab8301d6-b122-4d40-868a-d00d3c0f1916","categoryName":"Other","options":[{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointlivesyncintervalmultiplier_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_onent16v3~policy~l_microsoftofficeonenote~l_onenoteoptions~l_other_l_sharepointlivesyncintervalmultiplier_1","displayName":"Enabled","description":null,"helpText":null}]},"fffa6c13b194aad0":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_folderhomepagesforoutlookspecialfolders_l_rssfolderhomepage_l_urladdressofassociatedwebpage","displayName":"URL address of associated web page: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"3f216590-fb12-4f8e-924f-2a6895d94126","categoryName":"Folder Home Pages for Outlook Special Folders","options":null},"ff405a6a7c391266":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_outlookoptions~l_preferences~l_junkemail_l_specifypathtoblockedsenderslist_l_specifyfullpathandfilenametoblockedsenderslist","displayName":"Specify full path and filename to Blocked Senders list (User)","description":"","helpText":"","infoUrls":[],"categoryId":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","categoryName":"Junk E-mail","options":null},"ffe7ec839715ab4f":{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_disablesharepointintegrationinoutlook","displayName":"Do not allow Sharepoint-Outlook integration (User)","description":"This policy setting allows you to prevent access to Microsoft SharePoint Foundation with Outlook.\r\n\r\nIf you enable this policy setting, user profiles will not be able to upload new items or sync changes to the SharePoint list from the server; however, user profiles that have pre-existing SharePoint lists will retain their local data. In addition, new SharePoint lists cannot be connected when this policy setting is enabled. This can be toggled on and off to restore synchronization to existing lists. Note that users will not receive a message if synchronization has been prevented.\r\n\r\nIf you disable or do not configure this policy setting, Microsoft SharePoint Foundation access will be allowed with Outlook.","helpText":"","infoUrls":[],"categoryId":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","categoryName":"SharePoint Lists","options":[{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_disablesharepointintegrationinoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_toolsaccounts~l_sharepointintegration_l_disablesharepointintegrationinoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},"ff7a5bb852782673":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_printtruetypefontsasgraphics","displayName":"Print TrueType fonts as graphics (User)","description":"Checks/Unchecks the corresponding UI option.","helpText":"","infoUrls":[],"categoryId":"76b233cc-f977-4305-b02f-deef6667251d","categoryName":"Advanced","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_printtruetypefontsasgraphics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_advanced_l_printtruetypefontsasgraphics_1","displayName":"Enabled","description":null,"helpText":null}]},"ffe2af2ee0a579b2":{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders59","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"categoryId":"76ad3567-c6cb-43b5-b91d-a52a34853c03","categoryName":"Trusted Locations","options":[{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders59_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders59_1","displayName":"True","description":null,"helpText":null}]},"ffd29843aa9dcd9e":{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_visiooptions99","displayName":"File tab | Options (User)","description":"","helpText":"","infoUrls":[],"categoryId":"fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","categoryName":"Predefined","options":[{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_visiooptions99_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_visiooptions99_1","displayName":"True","description":null,"helpText":null}]}} \ No newline at end of file diff --git a/public/intuneCategories.json b/public/intuneCategories.json new file mode 100644 index 000000000000..07353ca0444b --- /dev/null +++ b/public/intuneCategories.json @@ -0,0 +1 @@ +[{"id":"005ddf8f-da22-4b23-ab02-289f8f6c7960","displayName":"Internet Explorer","description":"Administrative Templates Internet Explorer","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["a1fbe395-3b60-475f-8a34-3710d6b2e09f","b491424f-100c-4f84-9b9c-8573b2ff9ac7","d4bf78d5-f6da-463d-85a3-d763e6fbe32b","3f6bb987-17dc-4442-a946-c1c5b1d089d7","f26fe4c2-d073-4e51-90bf-61c4bbdeb4f2","bd63ba46-330b-4c49-bfb7-114e1d0cf5e4"],"platforms":"windows10","technologies":"mdm"},{"id":"00d7396c-cadc-4d29-86ba-fe4df2ecb110","displayName":"Startup, home page and new tab page","description":"Microsoft Edge\\Startup, home page and new tab page","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"0101d1d0-1e54-47b0-a749-62c6bd7ab3da","displayName":"BitLocker Drive Encryption","description":"Administrative Templates\\Windows Components\\BitLocker Drive Encryption","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["949a5b32-bbe6-40f6-9d73-99cf9fafe75f","27e0674a-ea53-4f63-9c2e-fe76aa1021d0","36aafec3-7ffb-4ab9-bef9-b8bb431bf8b3"],"platforms":"windows10","technologies":"mdm"},{"id":"015936bf-8273-4499-bb71-33b385ee7d16","displayName":"Hard Disk Settings","description":"Administrative Templates\\System\\Power Management\\Hard Disk Settings","helpText":null,"parentCategoryId":"62b373da-c112-40f4-9047-9cc3e8d8ab13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"01bbe7c3-10eb-40a3-8387-c74c33c294b1","displayName":"Video and Display Settings","description":"Administrative Templates\\System\\Power Management\\Video and Display Settings","helpText":null,"parentCategoryId":"62b373da-c112-40f4-9047-9cc3e8d8ab13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"01d16911-19a1-4dcb-8089-ffa4781d977c","displayName":"Windows Ink Workspace","description":"Windows Ink Workspace","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"01d16911-19a1-4dcb-8089-ffa4781d977c","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"01da0c26-af30-4eb2-a899-7d5e7ecb9738","displayName":"Video and Display Settings","description":"Administrative Templates Power Management Video and Display Settings","helpText":null,"parentCategoryId":"290ec637-e780-4e95-9834-6368ac0437d1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"01f2fac4-fdab-4391-bebe-ebdf6d8fcc77","displayName":"QoS Packet Scheduler","description":"Administrative Templates\\Network\\QoS Packet Scheduler","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["67c06154-a798-44bb-83c8-d706a3709c10","3426ef3d-40f5-474e-a493-4a1545c62348","82d20a08-90b8-4e6d-940a-5574844d1b26"],"platforms":"windows10","technologies":"mdm"},{"id":"023116df-a32c-43b0-a384-d6fe7ad9fabe","displayName":"WinRM Service","description":"Administrative Templates\\Windows Components\\Windows Remote Management (WinRM)\\WinRM Service","helpText":null,"parentCategoryId":"a37dba52-d558-47fb-9d46-a5d3bdc5fdd7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0236af48-9ce0-44d5-b085-de2323d7348e","displayName":"Scripting","description":"Administrative Templates\\System\\App-V\\Scripting","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"023e0367-b563-4fae-8fb6-589c836ee223","displayName":"Add or Remove Programs","description":"Administrative Templates Add or Remove Programs","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"025c640e-51e2-4f04-85e3-a13f30b5e08c","displayName":"Encoding","description":"Microsoft Office 2016\\Tools | Options | General | Web Options...\\Encoding","helpText":null,"parentCategoryId":"2d5a483f-b408-426d-9234-2883eae20afb","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"038b49c9-4f13-4ace-be8d-bd076bffa23e","displayName":"Save","description":"Microsoft Publisher 2016\\Publisher Options\\Save","helpText":null,"parentCategoryId":"c7aba693-8132-4b9f-9a69-dbaaa0ecc03d","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"03a966f7-8f8e-4ecb-aab3-055fe907f5ab","displayName":"Security Account Manager","description":"Administrative Templates Security Account Manager","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"042ab9cf-9524-4dd4-b049-4d5f4ff7053f","displayName":"Manage Restricted Permissions","description":"Microsoft Office 2016\\Manage Restricted Permissions","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0456dcd5-c003-4a8b-80e6-61bacf854330","displayName":"RD Licensing","description":"Administrative Templates Remote Desktop Services RD Licensing","helpText":null,"parentCategoryId":"c48917c1-fd99-405f-b1d2-9dfec169e5d8","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","displayName":"Microsoft Publisher 2016","description":"Microsoft Publisher 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":["9caa3b08-b545-4c21-a3b7-b5d2302c1a81","0cea32b4-28be-4164-ae2a-6db33b9dadb7","c7aba693-8132-4b9f-9a69-dbaaa0ecc03d","c6c1120b-988c-4581-a21c-b9786a821242"],"platforms":"windows10","technologies":"mdm"},{"id":"0497eec4-fe3a-44f2-8caf-b5ab11839893","displayName":"Games","description":"Games","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0497eec4-fe3a-44f2-8caf-b5ab11839893","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"04b46099-4ee5-4def-8e04-569c988057a9","displayName":"Identity and sign-in","description":"Microsoft Edge - Default Settings (users can override)\\ Identity and sign-in","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"05305a87-0b19-41bb-bf1e-0bd92bfcdc16","displayName":"Push To Install","description":"Administrative Templates Push To Install","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"055293ad-c585-40c0-b66c-76ff5cc0a332","displayName":"Microsoft Office SmartArt","description":"Microsoft Office 2016\\Microsoft Office SmartArt","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"05811ceb-2954-426c-8afa-2a53f02480cc","displayName":"Permit or deny screen capture","description":"Microsoft Edge\\ Permit or deny screen capture","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"05a6f86f-dab7-4888-97a1-db3457f00974","displayName":"Writing Assistance","description":"Microsoft Office 2016 Writing Assistance","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"060e7533-6c2f-4ed1-9173-f3de58de4bed","displayName":"Internet Calendars","description":"Microsoft Outlook 2016\\Account Settings\\Internet Calendars","helpText":null,"parentCategoryId":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0696109e-045f-486a-9a6b-ab7877887bed","displayName":"Document Information Panel","description":"Microsoft Office 2016\\Document Information Panel","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"06a85f5b-2614-4467-91cf-4a64d0c9326f","displayName":"Network Usage Rules","description":"Networking > Network Usage Rules","helpText":null,"parentCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","rootCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"06c4a76a-805b-4370-9d80-08e720ab2305","displayName":"View options for time units in 'Project1'","description":"Microsoft Project 2016\\Project Options\\Edit\\View options for time units in 'Project1'","helpText":null,"parentCategoryId":"5bd8c27a-0141-4bbf-93f7-214b2389ff2d","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"07221402-6a9c-4440-ae6f-3217ce5ad8fd","displayName":"Attack Surface Reduction","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Microsoft Defender Exploit Guard\\ Attack Surface Reduction","helpText":null,"parentCategoryId":"49abf969-2a98-4479-b234-6990b152cb21","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0775f21c-9ca1-446d-b1dc-3cea45f15605","displayName":"Files","description":"Microsoft Office 2016\\Tools | Options | General | Web Options...\\Files","helpText":null,"parentCategoryId":"2d5a483f-b408-426d-9234-2883eae20afb","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"07c023d3-0899-40af-a04f-805876d99a9b","displayName":"Microsoft Management Console","description":"Administrative Templates Microsoft Management Console","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["acb49e73-5a6a-479b-9d58-c3cd7f632e9b"],"platforms":"windows10","technologies":"mdm"},{"id":"08677354-6f67-455e-a430-4d8d2fbabe84","displayName":"Web Rtc settings","description":"Microsoft Edge Web Rtc settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"088b8d8d-5f3f-4979-aa18-b3c4b2616a24","displayName":"Sound Recorder","description":"Administrative Templates Sound Recorder","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","displayName":"Disk Quotas","description":"Administrative Templates Disk Quotas","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"08c5f391-e156-4a72-bbb9-3670f2f63a56","displayName":"SmartScreen settings","description":"Microsoft Edge\\SmartScreen settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"0937f5ff-aabc-49a9-a94f-6f98c4702580","displayName":"Qo S Packet Scheduler","description":"Administrative Templates Qo S Packet Scheduler","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["4ca3b8c7-0350-4043-b96d-918f24df0a3b","c87ae066-cc1a-44c9-8645-1db2359f7484","cf968979-f316-47cb-a207-bf9ef28cd1aa"],"platforms":"windows10","technologies":"mdm"},{"id":"098942c3-afe3-40c8-823f-37f0b5b13ad4","displayName":"Remote access","description":"Google Google Chrome Remote access","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"09c02465-dc11-457e-9eac-19fc542e4cda","displayName":"MAPS","description":"Administrative Templates Microsoft Defender Antivirus MAPS","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0a1347d2-90c0-407a-baa0-e4859260532a","displayName":"BitLocker","description":"BitLocker","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0a1347d2-90c0-407a-baa0-e4859260532a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0a6bc3ed-c4cd-4928-bcbf-247369a51515","displayName":"General options for 'Project1'","description":"Microsoft Project 2016\\Project Options\\General\\General options for 'Project1'","helpText":null,"parentCategoryId":"3265b420-4c88-4f7b-92cc-4e23d9452eb1","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0a803a48-789a-48b0-b928-e52d56ab17f1","displayName":"Wi-Fi Settings","description":"Wi-Fi Settings","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0a803a48-789a-48b0-b928-e52d56ab17f1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0a9f982a-3515-4728-a231-fa000eb9e550","displayName":"User Preferences","description":"Preferences > User Preferences","helpText":null,"parentCategoryId":"187e5f4f-a789-4487-a848-7bf0f41597c7","rootCategoryId":"187e5f4f-a789-4487-a848-7bf0f41597c7","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","displayName":"Profile Containers","description":"FS Logix Profile Containers","helpText":null,"parentCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":["479c2edd-6539-4e1d-96ba-518d6f6264c3","719595d8-ab5d-4418-88aa-8cd55c2964ba"],"platforms":"windows10","technologies":"mdm"},{"id":"0b635a19-976c-4c28-a642-87ede7649bef","displayName":"Playback","description":"Administrative Templates\\Windows Components\\Windows Media Player\\Playback","helpText":null,"parentCategoryId":"22ebd92b-80b6-493d-99d8-3c72f1a0827e","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0bae3158-5f75-4e25-acf4-859d2612f892","displayName":"Cloud Cache","description":"FS Logix ODFC Containers Cloud Cache","helpText":null,"parentCategoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0be23ead-c5f7-4ea5-9ec5-64c05d19cf5d","displayName":"Data Roaming","description":"Managed Settings Data Roaming","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"0be98651-a552-4470-b2dc-71c66a5ce1e6","displayName":"Presentation Services","description":"Microsoft Office 2016\\Present Online\\Presentation Services","helpText":null,"parentCategoryId":"5bf4c2ba-be08-4cda-bf33-d10707580d78","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","displayName":"RD Connection Broker","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host RD Connection Broker","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0c2613c9-a7c7-4458-8b0d-2fff13e2beeb","displayName":"Connections","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Connections","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0cc63077-26e9-4fbd-a343-fd88102efd7e","displayName":"Application Compatibility","description":"Administrative Templates\\Windows Components\\Application Compatibility","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0cea32b4-28be-4164-ae2a-6db33b9dadb7","displayName":"Security","description":"Microsoft Publisher 2016\\Security","helpText":null,"parentCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":["30da5d88-cf03-41f4-ab55-51ead91b3844"],"platforms":"windows10","technologies":"mdm"},{"id":"0d37dddd-6575-485c-92dd-37a3c23edbf9","displayName":"BitLocker Drive Encryption","description":"Administrative Templates BitLocker Drive Encryption","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["acbc98d1-689b-4f9c-9c5a-e6bbf305e654","a18508d1-fd74-4955-8032-3bd9219a0944","8e6b8d0c-faf6-41e6-8e31-4389a5470caf"],"platforms":"windows10","technologies":"mdm"},{"id":"0d4cf1d9-d8ad-4628-bd71-fa0de6598f28","displayName":"Content settings","description":"Microsoft Edge - Default Settings (users can override)\\Content settings","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0d4d90ab-7ad8-4524-ade0-bc01aa7b71a3","displayName":"System Logging","description":"System Configuration > System Logging","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","displayName":"Wireless Network Preference","description":"Wireless Network Preference","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0d9ee4f5-7d6b-41fd-9089-b0886f7ff944","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0e1122f8-2bbf-475b-bce0-9e43a2f5e475","displayName":"Schedule Scan","description":"Microsoft Defender Schedule Scan","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"linux","technologies":"microsoftSense"},{"id":"0e6c9053-73d6-4c56-9147-53513f6eefd8","displayName":"Windows Update For Business","description":"Windows Update For Business","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0e6c9053-73d6-4c56-9147-53513f6eefd8","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","displayName":"Microsoft Project 2016","description":"Microsoft Project 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["1266b519-e436-4698-8ff4-442acc97efd4","e344b25a-2046-4e70-a3b9-1a418613861f"],"platforms":"windows10","technologies":"mdm"},{"id":"0e937777-d01a-4180-a937-c2010451a529","displayName":"Login Window Login Items","description":"Login > Login Window Login Items","helpText":null,"parentCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","rootCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"0ef80736-8b59-4c6a-8bdc-e2b246b30e92","displayName":"Integration","description":"Administrative Templates\\System\\App-V\\Integration","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","displayName":"Windows Sandbox","description":"Windows Sandbox","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"0f05f2c4-3a19-482f-82e8-92a46a4fcbfd","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0f42fc50-66c8-4b70-9904-64f8d662c930","displayName":"Custom","description":"Microsoft Word 2016\\Disable Items in User Interface\\Custom","helpText":null,"parentCategoryId":"740e7a10-3774-4a1c-9970-6907e0f0b848","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0f6020d9-278b-4284-894a-bc4a70c8cf32","displayName":"Display Language","description":"Microsoft Office 2016\\Language Preferences\\Display Language","helpText":null,"parentCategoryId":"eb947c30-3c43-4d34-a566-a842a1a142f3","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"0f6d725e-2c2d-4926-8e78-3d2d5867eef5","displayName":"Win RM Client","description":"Administrative Templates Windows Remote Management Win RM Win RM Client","helpText":null,"parentCategoryId":"364787de-93e4-4fd6-9608-dce1ad8f88c2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"10247787-95ea-4507-93de-dbd166df12b5","displayName":"Legacy Browser Support","description":"Google Google Chrome Legacy Browser Support","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1043e7ed-8651-44b2-b918-7230c0b75a6c","displayName":"Profile settings","description":"Microsoft Edge Profile settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"10835ce3-31c8-4ec6-aa00-c5af48e550a8","displayName":"Virtualization","description":"Administrative Templates App-V Virtualization","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"114356a4-dfc9-44e9-9a62-f1d601d48445","displayName":"Mail Setup","description":"Microsoft Outlook 2016\\Outlook Options\\Mail Setup","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"119ca05b-5f1f-4714-a942-2a76b05d2a7b","displayName":"Lock Down","description":"Lock Down","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"119ca05b-5f1f-4714-a942-2a76b05d2a7b","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"11c4cf0f-a03d-4309-93b2-011be4c410d5","displayName":"Screensaver User","description":"User Experience > Screensaver User","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"11d26400-1d13-4dd6-ab4b-cb323494b127","displayName":"Intelligence Settings","description":"Declarative Device Management preview Intelligence Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"120b24dd-c04a-4291-8f24-9c48fcdc1434","displayName":"Cryptography compliance policies","description":"Microsoft Edge Cryptography compliance policies","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"12142994-4b30-486c-bab1-9206528b2b96","displayName":"Accessibility settings","description":"Google Google Chrome - Default Settings users can override Accessibility settings","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1219a9c2-dccb-445f-9f90-8e86e2de22d6","displayName":"Windows Remote Shell","description":"Administrative Templates\\Windows Components\\Windows Remote Shell","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1266b519-e436-4698-8ff4-442acc97efd4","displayName":"Project Options","description":"Microsoft Project 2016\\Project Options","helpText":null,"parentCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["db47f067-f435-4095-8b98-aa3805bc0050","84b7f123-e849-40f9-914b-4b97b57bd3b4","9ecb05b7-e942-4b60-9040-d612385f5c67","6ad0e199-ff50-4e86-b22f-b55ef4ff2329","28c4859e-1faa-4b51-96cf-068cb4354093","623d41fb-000e-41d8-b955-373f8c700def","3265b420-4c88-4f7b-92cc-4e23d9452eb1","20ed0d61-bbf7-421e-8926-0921c7ff7e75","8e48532a-ff0e-4422-82e2-6956b6786005","5bd8c27a-0141-4bbf-93f7-214b2389ff2d"],"platforms":"windows10","technologies":"mdm"},{"id":"12a1b259-a0d5-4505-aedf-b8ca811cd5f9","displayName":"Remote Assistance","description":"Administrative Templates\\System\\Remote Assistance","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"12ad5ec7-346d-4b8b-9eba-d826cdb61c31","displayName":"Trusted Locations","description":"Microsoft Access 2016\\Application Settings\\Security\\Trust Center\\Trusted Locations","helpText":null,"parentCategoryId":"a9edc695-b4a9-4111-b07d-627f934f5a1a","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","displayName":"Common Open File Dialog","description":"Administrative Templates Common Open File Dialog","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"12f9c95a-3ff1-49ef-bc8e-8d2b5ef4b06e","displayName":"Customizable Error Messages","description":"Microsoft Word 2016\\Customizable Error Messages","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"13123148-c522-437f-b316-d78f5cc0d28d","displayName":"Shared Workspace","description":"Microsoft Office 2016\\Global Options\\Customize\\Shared Workspace","helpText":null,"parentCategoryId":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["725adbdf-1eb8-45c4-8eb1-44747bd1615d"],"platforms":"windows10","technologies":"mdm"},{"id":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","displayName":"AirPlay","description":"AirPlay > AirPlay","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"132003c7-1130-4f59-96a7-dfb6adb8bd5d","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"13467142-14e7-4380-8573-4866e842c7f6","displayName":"Antivirus engine","description":"Microsoft Defender > Antivirus engine","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS,linux","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"135e4013-43b8-4227-99fd-54ddeac4e329","displayName":"Protected View","description":"Microsoft Office 2016\\Security Settings\\Trust Center\\Protected View","helpText":null,"parentCategoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"139974ad-f615-442b-b3dc-84a44e3ec663","displayName":"Experience","description":"Experience","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"139974ad-f615-442b-b3dc-84a44e3ec663","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"13cc3b63-a150-4cf2-8d76-309975603c8e","displayName":"Loader Override Settings","description":"Microsoft Edge WebView2\\Loader Override Settings","helpText":null,"parentCategoryId":"c945edd8-c865-4932-806d-83752e3f46ad","rootCategoryId":"c945edd8-c865-4932-806d-83752e3f46ad","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"13eb248a-4549-4d23-9ada-23b40edf36bf","displayName":"Reminder Options","description":"Microsoft Outlook 2016\\Outlook Options\\Other\\Advanced\\Reminder Options","helpText":null,"parentCategoryId":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"13f025df-7d3f-4ecd-bd38-d7af7853b66e","displayName":"Time Providers","description":"Administrative Templates Windows Time Service Time Providers","helpText":null,"parentCategoryId":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"13f62499-a266-42c8-a4dc-531efcea55cb","displayName":"Microsoft Edge Dev","description":"Microsoft Edge Update\\Applications\\Microsoft Edge Dev","helpText":null,"parentCategoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"148a6f4e-8816-4c00-87a3-57481c85c331","displayName":"Startup Home page and New Tab page","description":"Google Google Chrome Startup Home page and New Tab page","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","displayName":"Kerberos","description":"Kerberos","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"14df2cb2-fc75-43af-87f8-a1fbd56a64e3","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"14fa4ad9-525c-440d-a295-a279c73f97f1","displayName":"Widgets","description":"Widgets","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"14fa4ad9-525c-440d-a295-a279c73f97f1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"14fe5c02-d4f6-4f2a-9eae-2d60d111ee77","displayName":"Enterprise Cloud Print","description":"Enterprise Cloud Print","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"14fe5c02-d4f6-4f2a-9eae-2d60d111ee77","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","displayName":"Microsoft Lync Feature Policies","description":"Skype for Business 2016\\Microsoft Lync Feature Policies","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"151e95d3-64ec-424f-ba7e-4d1ba6ef5aa1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1526dde4-6726-470e-aebf-3272ae70a99c","displayName":"Server Manager","description":"Administrative Templates\\System\\Server Manager","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1551f6d3-415c-44a8-b184-393de7c42adf","displayName":"Advanced Error Reporting Settings","description":"Administrative Templates Windows Error Reporting Advanced Error Reporting Settings","helpText":null,"parentCategoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"156f2e6a-6638-4749-9f43-e7acc4aba762","displayName":"Windows Installer","description":"Administrative Templates Windows Installer","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"15be55d8-7477-4274-9b09-b775bce68416","displayName":"Software Update Enforce Latest","description":"Declarative Device Management preview Software Update Enforce Latest","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"1638d9ec-63d5-4d6b-b1b6-4b0402268e36","displayName":"Tenant Restrictions","description":"Administrative Templates\\ Windows Components\\ Tenant Restrictions","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1653fa6c-aa99-4918-92c7-1df85d8843e1","displayName":"Startup, home page and new tab page","description":"Microsoft Edge - Default Settings (users can override)\\Startup, home page and new tab page","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1671dfc3-a1dd-4178-9093-10fb6b62586a","displayName":"Cryptography","description":"Microsoft Project 2016\\Project Options\\Security\\Cryptography","helpText":null,"parentCategoryId":"623d41fb-000e-41d8-b955-373f8c700def","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1671f10e-7300-46e3-a93f-ef38bf906cb1","displayName":"Mime Sniffing Safety Feature","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Mime Sniffing Safety Feature","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"16ea64a1-563e-43cc-b34a-728c8e7cd13c","displayName":"Scareware Blocker settings","description":"Microsoft Edge Scareware Blocker settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"1720d60f-40a6-471c-8e4c-efbacaf46997","displayName":"Cryptography","description":"Microsoft Outlook 2016\\Security\\Cryptography","helpText":null,"parentCategoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff"],"platforms":"windows10","technologies":"mdm"},{"id":"174ffe92-3770-4688-aa21-85b7535cf374","displayName":"Printing","description":"Printing > Printing","helpText":null,"parentCategoryId":"a01c03d4-ec76-4c01-b982-de71620feb19","rootCategoryId":"a01c03d4-ec76-4c01-b982-de71620feb19","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","displayName":"Install and Update Settings","description":"Visual Studio Install and Update Settings","helpText":null,"parentCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","rootCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"176ed477-020a-41af-8859-0605c2caad98","displayName":"Portable Operating System","description":"Administrative Templates\\Windows Components\\Portable Operating System","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"17bc9899-d157-4eac-a949-810b4a841e28","displayName":"Restrict File Download","description":"Administrative Templates Internet Explorer Security Features Restrict File Download","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"17f0fdd3-e292-4ecb-ab5f-e4848e9cae1a","displayName":"Button Settings","description":"Administrative Templates\\System\\Power Management\\Button Settings","helpText":null,"parentCategoryId":"62b373da-c112-40f4-9047-9cc3e8d8ab13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"180b2a03-16d4-43cd-ba84-9b4546753ef4","displayName":"Removable Storage Access","description":"Administrative Templates\\System\\Removable Storage Access","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,microsoftSense"},{"id":"18296501-4825-47ea-835d-66a01aba9384","displayName":"Notification bar","description":"Administrative Templates Internet Explorer Security Features Notification bar","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1829cdc1-1bed-4058-9aba-9b778cd3d955","displayName":"Global Preferences","description":"Preferences > Global Preferences","helpText":null,"parentCategoryId":"187e5f4f-a789-4487-a848-7bf0f41597c7","rootCategoryId":"187e5f4f-a789-4487-a848-7bf0f41597c7","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"183628a3-d0a5-47de-b444-e132d634ca38","displayName":"Server Settings","description":"Microsoft Excel 2016\\Miscellaneous\\Server Settings","helpText":null,"parentCategoryId":"bc58391f-664c-42dd-9d18-269e65f324a7","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"184981d4-712b-425e-b0a3-93eac7fbd3ee","displayName":"Consent","description":"Administrative Templates Windows Error Reporting Consent","helpText":null,"parentCategoryId":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"184aa343-0f0b-4bf5-aeeb-42111fedfbbf","displayName":"Internet Communication Management","description":"Administrative Templates\\System\\Internet Communication Management","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["72dfdba4-e7bb-4f09-862c-e003ea763452"],"platforms":"windows10","technologies":"mdm"},{"id":"1851afa1-5177-4268-8dfc-5b5e1a17ff7f","displayName":"Remote Assistance","description":"Administrative Templates Remote Assistance","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"187e5f4f-a789-4487-a848-7bf0f41597c7","displayName":"Preferences","description":"Preferences","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"187e5f4f-a789-4487-a848-7bf0f41597c7","childCategoryIds":["1829cdc1-1bed-4058-9aba-9b778cd3d955","0a9f982a-3515-4728-a231-fa000eb9e550","c7c1ed5a-a2ec-4237-bbf1-d5723f94d033"],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"18893f00-c309-4695-bcaf-b66286ad99c1","displayName":"Camera","description":"Camera","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"18893f00-c309-4695-bcaf-b66286ad99c1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"18b972fd-74f2-4345-9449-087c80dd38a3","displayName":"Windows Boot Performance Diagnostics","description":"Administrative Templates Windows Boot Performance Diagnostics","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"18db3d59-661b-47ec-900a-bf75495ca598","displayName":"Regional and Language Options","description":"Administrative Templates\\Control Panel\\Regional and Language Options","helpText":null,"parentCategoryId":"7a3a7335-4837-4bc5-9282-448402a05d89","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["e50b312c-2bb3-4565-9212-080dba8d3d85"],"platforms":"windows10","technologies":"mdm"},{"id":"191a84f2-13b5-4609-808f-8b743b7f0247","displayName":"Microsoft Outlook","description":"Microsoft Outlook > Microsoft Outlook","helpText":null,"parentCategoryId":"522c3302-7a25-4904-a274-66cef9fd6aa0","rootCategoryId":"522c3302-7a25-4904-a274-66cef9fd6aa0","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"1942922a-cba9-44c8-871f-3d915c62bd06","displayName":"Help","description":"Microsoft Office 2016\\Help","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1943deba-33f7-4c3d-98c8-6b5319ec98ab","displayName":"Driver Installation","description":"Administrative Templates Driver Installation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1979a12b-2a72-438d-9de7-320d1b38e777","displayName":"Password","description":"Microsoft OneNote 2016\\OneNote Options\\Password","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"19ab385f-14f5-47cd-87b2-f4784eedcdd9","displayName":"Windows Media Digital Rights Management","description":"Administrative Templates Windows Media Digital Rights Management","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"19ba782c-3594-45da-b829-72b54f6d45c7","displayName":"Microsoft OneDrive","description":"Microsoft Office > Microsoft OneDrive","helpText":null,"parentCategoryId":"522c3302-7a25-4904-a274-66cef9fd6aa0","rootCategoryId":"522c3302-7a25-4904-a274-66cef9fd6aa0","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"1a0386fd-354b-441e-a0d6-1523c209dae7","displayName":"General","description":"Microsoft Publisher 2016\\Publisher Options\\General","helpText":null,"parentCategoryId":"c7aba693-8132-4b9f-9a69-dbaaa0ecc03d","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1a056b49-3fb9-4097-b286-c5f493208578","displayName":"Personal Hotspot","description":"Managed Settings Personal Hotspot","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"1a2a4fc8-c54b-4906-a422-7dd51a196211","displayName":"Setup","description":"Administrative Templates Event Log Service Setup","helpText":null,"parentCategoryId":"f14fcb64-a868-4531-a3b4-c3cdf03c2b99","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1ae8c95a-5748-4647-80f8-b447e60601a2","displayName":"Add-ins","description":"Microsoft OneNote 2016\\OneNote Options\\Add-ins","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1aef6e33-cb5c-4ad5-b433-c198750bbc98","displayName":"Locked-Down Local Machine Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Locked-Down Local Machine Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1b1be733-8615-4738-8797-c159d4d484be","displayName":"Wireless Display","description":"Administrative Templates\\Network\\Wireless Display","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1b59bea5-b6db-4a37-9fdd-5bc2e141a61d","displayName":"Preferences","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["2fbb7677-651a-4b62-8b8c-d502ea29936b","decab1d2-3474-4727-87c0-d0bc648f2458","8e7b730f-c3c9-4e04-9e45-ce06be97908c","d0a1763a-5cdf-4672-8596-435ec1d94b54","2b03e224-c77c-4bb0-8491-cec0b64d9a86"],"platforms":"windows10","technologies":"mdm"},{"id":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","displayName":"Excel Options","description":"Microsoft Excel 2016\\Excel Options","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":["a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","67eb1dab-7805-41bb-af5a-798dc7e29f23","d1e2bb0d-6c0e-4f40-9f2e-52055edc14b5","5886bba1-bc05-46ca-afbf-66d1b4265ca4","3503e1ba-8168-4b55-92b1-84613292cadc","9215e382-4e7b-4554-8c80-80277136b544","cd1855c4-f7d1-4bed-8d6e-b8c1aab72007"],"platforms":"windows10","technologies":"mdm"},{"id":"1b97e23d-996f-4b8e-9abf-53cfa0fc8917","displayName":"Default message text for a reply...","description":"Microsoft Office 2016\\Collaboration Settings\\Default message text for a reply...","helpText":null,"parentCategoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1bfef2c3-a561-4e7a-8f0f-0944bc79c20f","displayName":"Spelling","description":"Microsoft OneNote 2016\\OneNote Options\\Spelling","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","displayName":"Lanman Server","description":"Lanman Server","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"1c3001ea-af28-4291-94b0-7f12ea93d3ca","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1ccd3115-55e7-464f-9bb9-d38a92191306","displayName":"Edge Website Typo Protection settings","description":"Microsoft Edge - Default Settings users can override Edge Website Typo Protection settings","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1cda8821-d9e2-485e-8d78-1829593d41ca","displayName":"BranchCache","description":"Administrative Templates\\Network\\BranchCache","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1d5e7986-870c-444b-bf09-78bbf82a53fa","displayName":"Personal Data Encryption","description":"Personal Data Encryption","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"1d5e7986-870c-444b-bf09-78bbf82a53fa","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1d6d392c-8b32-459b-b114-af964a4bbbc5","displayName":"Certificate management settings","description":"Google Google Chrome Certificate management settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1dabc7da-bdf8-4c60-95de-427a4b2cb6bf","displayName":"Digital Locker","description":"Administrative Templates Digital Locker","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1dd655c9-a1f3-4780-befb-cab19922277d","displayName":"Personalization","description":"Personalization","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"1dd655c9-a1f3-4780-befb-cab19922277d","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1ed81d90-7326-4d0b-8934-b0a8bdddc5ce","displayName":"App runtime","description":"Administrative Templates\\Windows Components\\App runtime","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1ed9f90e-d8b6-413f-bfc2-face955141bc","displayName":"Windows Mobility Center","description":"Administrative Templates Windows Mobility Center","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1f31ae2d-4867-4733-b52c-cecc0128e10c","displayName":"Scheduled Maintenance","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Scheduled Maintenance","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1f5d8243-cb7e-4b52-a12f-5f0e070d2769","displayName":"Virtualization","description":"Administrative Templates\\System\\App-V\\Virtualization","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1fa3b0c3-e453-4ef3-80aa-a7474d8eb354","displayName":"Digital Locker","description":"Administrative Templates\\Windows Components\\Digital Locker","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"1fbc29d7-0530-4208-b506-9df648a402e9","displayName":"Voice Roaming","description":"Managed Settings Voice Roaming","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"1fcd72cb-7c09-4e7b-a314-97a88df6e623","displayName":"Recovery Lock Password","description":"Recovery Lock Password","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"1fcd72cb-7c09-4e7b-a314-97a88df6e623","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"1fddd12c-a630-47f0-9633-638808e228f9","displayName":"Review Tab","description":"Microsoft Word 2016\\Review Tab","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["d79c9f9a-f469-4f39-a66a-6f7d5ee77e81","7bee4dea-82a4-4a03-b903-654b374819b1"],"platforms":"windows10","technologies":"mdm"},{"id":"200c575d-37d9-405b-aa92-c7a3da6f9358","displayName":"User Interface","description":"Administrative Templates\\Windows Components\\Windows Media Player\\User Interface","helpText":null,"parentCategoryId":"22ebd92b-80b6-493d-99d8-3c72f1a0827e","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","displayName":"Platform Update","description":"Microsoft Defender Platform Update","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"linux","technologies":"microsoftSense"},{"id":"20b71dc7-cf08-4534-9e52-d297dd071ca5","displayName":"Enhanced Phishing Protection","description":"Smart Screen\\ Enhanced Phishing Protection","helpText":null,"parentCategoryId":"3f61a5fe-8508-44dd-bcf0-83273643026a","rootCategoryId":"3f61a5fe-8508-44dd-bcf0-83273643026a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"20bacabf-cd07-48be-a184-f0ae76d31e4a","displayName":"Contact Tab","description":"Microsoft Office 2016\\Contact Card\\Contact Tab","helpText":null,"parentCategoryId":"5cd6dc4f-b231-449f-bc10-16041b73356a","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"20ceae56-e189-46ec-a440-791ce7454017","displayName":"Printing","description":"Google Google Chrome - Default Settings users can override Printing","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"20ed0d61-bbf7-421e-8926-0921c7ff7e75","displayName":"Calculation","description":"Microsoft Project 2016\\Project Options\\Calculation","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","ed137c3d-d7bc-48f3-ad86-ff194fc6820d"],"platforms":"windows10","technologies":"mdm"},{"id":"2108b443-384c-4bb3-9b9f-acb4a754a86a","displayName":"Web Options...","description":"Microsoft Word 2016\\Word Options\\Advanced\\Web Options...","helpText":null,"parentCategoryId":"83087772-6560-4488-a1c5-bb6e4889e868","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["d804205d-6c12-4f40-86a0-aa5a5355370f","56e510be-ca39-46a2-9eb2-6f1af6d4b16a"],"platforms":"windows10","technologies":"mdm"},{"id":"210b9c4d-e72a-45a4-97d3-339a6b30c49c","displayName":"Attack Surface Reduction","description":"Administrative Templates Microsoft Defender Antivirus Microsoft Defender Exploit Guard Attack Surface Reduction","helpText":null,"parentCategoryId":"ad84cea3-5664-4e42-a9d6-1446828bea45","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"216de445-a80d-4981-b151-3b4466edc808","displayName":"Extensions","description":"Google Google Chrome Extensions","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"22086dab-6c7f-408f-bd0c-cc34b2ad086d","displayName":"Ctrl+Alt+Del Options","description":"Administrative Templates\\System\\Ctrl+Alt+Del Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"224dc683-c0e0-4783-8ba8-8f02c76d161d","displayName":"Domains","description":"Networking > Domains","helpText":null,"parentCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","rootCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"2257f7e1-3e88-4d4d-a666-437bbe42baca","displayName":"Applications","description":"Device Restriction Applications","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise","technologies":"android"},{"id":"22a2a407-0f28-481d-bdbe-1f9cb6d589c3","displayName":" EDR preferences","description":"Microsoft Defender EDR preferences","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"linux","technologies":"microsoftSense"},{"id":"22ebd92b-80b6-493d-99d8-3c72f1a0827e","displayName":"Windows Media Player","description":"Administrative Templates\\Windows Components\\Windows Media Player","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["c7c32942-a139-4d7e-a19e-3495d5e372e7","200c575d-37d9-405b-aa92-c7a3da6f9358","0b635a19-976c-4c28-a642-87ede7649bef"],"platforms":"windows10","technologies":"mdm"},{"id":"22f2b16b-e1af-45fa-8d2f-687854b72c02","displayName":"Data Protection","description":"Data Protection","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"22f2b16b-e1af-45fa-8d2f-687854b72c02","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","displayName":"Login","description":"Login","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","childCategoryIds":["0e937777-d01a-4180-a937-c2010451a529","6efb8802-223a-46a7-b13f-a68f28f8b2c2","9859957e-34f1-4669-9f95-2b7c79fff052","8f831e0a-feb7-4cbb-acc1-2e583f3f4de3"],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"2373de26-8270-4e74-a53f-9aeb55d5553c","displayName":"Microsoft AutoUpdate (MAU)","description":"Microsoft AutoUpdate (MAU)","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"2373de26-8270-4e74-a53f-9aeb55d5553c","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"23c09e06-5bee-4b20-a391-36549bf0f620","displayName":"Signing","description":"Microsoft Office 2016\\Signing","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"23e93393-4a75-44e6-9693-208eedb06976","displayName":"Advanced Error Reporting Settings","description":"Administrative Templates\\Windows Components\\Windows Error Reporting\\Advanced Error Reporting Settings","helpText":null,"parentCategoryId":"d9b7efad-fe18-4c98-925b-c4a5db0f2815","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"23fd467e-24f8-4200-8b19-c6c11afa8926","displayName":"Security","description":"Microsoft Access 2016\\Application Settings\\Security","helpText":null,"parentCategoryId":"d0a3bbad-8ed0-4545-8249-9e464a13e1b7","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":["7eaa5e09-e5ab-4051-b557-64a124ae497c","a9edc695-b4a9-4111-b07d-627f934f5a1a"],"platforms":"windows10","technologies":"mdm"},{"id":"2461b964-02f6-4da2-921a-f7e8f868c69d","displayName":"Enhanced Storage Access","description":"Administrative Templates Enhanced Storage Access","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"24b30053-14d2-4430-9966-281e926a6918","displayName":"Trusted Platform Module Services","description":"Administrative Templates Trusted Platform Module Services","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"24f6d328-64e7-4490-be38-452ac3b61f6f","displayName":"Trusted Catalogs","description":"Microsoft Office 2016\\Security Settings\\Trust Center\\Trusted Catalogs","helpText":null,"parentCategoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"251c6873-bf5b-4d85-8185-3c4973b6f33c","displayName":"Show","description":"Microsoft Project 2016\\Project Options\\View\\Show","helpText":null,"parentCategoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"253fda23-118b-48c7-b24a-27b8c93df41a","displayName":"Macro Security","description":"Microsoft Visio 2016\\Visio Options\\Security\\Macro Security","helpText":null,"parentCategoryId":"2ea63962-4cac-4a5c-9181-e6a364489db0","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2592e8ea-5eb0-482b-b41e-eab92f33ac07","displayName":"Planner Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Calendar Options\\Planner Options","helpText":null,"parentCategoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"25a84f2d-dbac-457e-b734-bc2605305f2b","displayName":"Cryptography","description":"Microsoft OneNote 2016\\OneNote Options\\Security\\Cryptography","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"25df12bc-5ebd-4db2-8930-5d27690f3e60","displayName":"Message Format","description":"Microsoft Outlook 2016\\Outlook Options\\Mail Format\\Internet Formatting\\Message Format","helpText":null,"parentCategoryId":"db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"264202da-475b-476e-bbc7-3c252f777145","displayName":"Device security group","description":"Device security group","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"264202da-475b-476e-bbc7-3c252f777145","childCategoryIds":[],"platforms":"windows10","technologies":"enrollment"},{"id":"2694014c-e044-45a0-99b1-1694bd01827a","displayName":"User Accounts","description":"Administrative Templates\\Control Panel\\User Accounts","helpText":null,"parentCategoryId":"7a3a7335-4837-4bc5-9282-448402a05d89","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"269c487f-8902-486a-88dd-db9b9b4454b8","displayName":"Network protection","description":"Microsoft Defender Network protection","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS,linux","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"26c1af84-7c09-4910-8b2f-486072fef710","displayName":"Kiosk Browser","description":"Kiosk Browser","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"26c1af84-7c09-4910-8b2f-486072fef710","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"26dfd0a7-546b-4583-b0c7-85b98ac5a40c","displayName":"Tools | Macro","description":"Microsoft Project 2016\\Project Options\\Security\\Tools | Macro","helpText":null,"parentCategoryId":"623d41fb-000e-41d8-b955-373f8c700def","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"27087ae6-d02f-4b54-a143-6cde89c04989","displayName":"Device and Driver Compatibility","description":"Administrative Templates Device and Driver Compatibility","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2764869c-54a3-462b-bc72-c580621ab6bb","displayName":"Customize Ribbon","description":"Microsoft Visio 2016\\Visio Options\\Customize Ribbon","helpText":null,"parentCategoryId":"f106d9e2-60ce-4e16-b74d-bd9ef401d7ba","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"27ccaa0b-8755-4116-a0e3-b5d21d68ab65","displayName":"Cryptography","description":"Microsoft Excel 2016\\Excel Options\\Security\\Cryptography","helpText":null,"parentCategoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"27e0674a-ea53-4f63-9c2e-fe76aa1021d0","displayName":"Operating System Drives","description":"Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Operating System Drives","helpText":null,"parentCategoryId":"0101d1d0-1e54-47b0-a749-62c6bd7ab3da","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2806d29a-7c7a-4ff0-baa2-4a0044425ea6","displayName":"Default message text for a review request...","description":"Microsoft Office 2016\\Collaboration Settings\\Default message text for a review request...","helpText":null,"parentCategoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"28831364-ca54-4f31-acca-1aa0c7a7d3d2","displayName":"Data Recovery","description":"Microsoft Excel 2016\\Data Recovery","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"28ab8eed-623a-4e9b-813e-13256472dbaf","displayName":"Customizable Error Messages","description":"Microsoft PowerPoint 2016\\Customizable Error Messages","helpText":null,"parentCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"28c4859e-1faa-4b51-96cf-068cb4354093","displayName":"View","description":"Microsoft Project 2016\\Project Options\\View","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["70b0e7ef-ceac-4c25-8f9f-5a6bf07163b6","251c6873-bf5b-4d85-8185-3c4973b6f33c"],"platforms":"windows10","technologies":"mdm"},{"id":"290ec637-e780-4e95-9834-6368ac0437d1","displayName":"Power Management","description":"Administrative Templates Power Management","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["3b64e99d-0359-4264-be38-c544c647f493","7226f8a2-c542-471a-8d9e-e0df527325d3","86b4fa22-f6f1-4ca5-8fe4-8788f9b3fd89","01da0c26-af30-4eb2-a899-7d5e7ecb9738","5d03766c-9480-43f2-9e85-461a44c821d4","91c02e14-8848-485d-8844-b9933fa888ec"],"platforms":"windows10","technologies":"mdm"},{"id":"2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","displayName":"MIME to MAPI Conversion","description":"Microsoft Outlook 2016\\MIME to MAPI Conversion","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"297f09f9-0a48-4058-81b8-66a630a3c0ea","displayName":"Disk NV Cache","description":"Administrative Templates\\System\\Disk NV Cache","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2a1bbe00-0730-430e-8d19-3eec2fd6b63c","displayName":"Device and Resource Redirection","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Device and Resource Redirection","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2ac8fe19-ca17-4533-8818-a5e12030de51","displayName":"MSI Corrupted File Recovery","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\MSI Corrupted File Recovery","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2af24920-f611-4f03-99a6-205773869ae6","displayName":"Protected Content","description":"Microsoft Edge Protected Content","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"2b03e224-c77c-4bb0-8491-cec0b64d9a86","displayName":"Contact Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Contact Options","helpText":null,"parentCategoryId":"1b59bea5-b6db-4a37-9fdd-5bc2e141a61d","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2b3d275d-4a48-4ac8-9c14-4dc5aa20a80b","displayName":"Network Sharing","description":"Administrative Templates Network Sharing","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2b54b208-5459-4e40-8db1-002cb90495bc","displayName":"Windows Memory Leak Diagnosis","description":"Administrative Templates Windows Memory Leak Diagnosis","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2b8e43c0-e66b-4bec-b20d-54a1f7151212","displayName":"Display","description":"Administrative Templates\\Control Panel\\Display","helpText":null,"parentCategoryId":"7a3a7335-4837-4bc5-9282-448402a05d89","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2becddf1-d8ea-49ec-8560-c8c401faa9bb","displayName":"Printers","description":"Administrative Templates\\Printers","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2c156b7e-99c8-4a21-a828-4f9b94479b0d","displayName":"Time Zone","description":"Managed Settings Time Zone","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"2c43699e-90b5-4da6-9689-fe5ad3b25ac9","displayName":"Threats","description":"Administrative Templates Microsoft Defender Antivirus Threats","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","displayName":"Applications","description":"Microsoft Edge Update\\Applications","helpText":null,"parentCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":["797ac384-f48e-4567-b931-33a6ce923b94","7b91ab31-7ed5-4de9-bd49-d04303fd3c74","13f62499-a266-42c8-a4dc-531efcea55cb","3bb9ca38-645e-479c-ac5f-01959aec9c30"],"platforms":"windows10","technologies":"mdm"},{"id":"2cbf2609-1f6a-4597-84e2-a57da0ad0472","displayName":"Locale Services","description":"Administrative Templates\\System\\Locale Services","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2cc013ad-e5a3-42d9-b2b6-2a872a4c086d","displayName":"Session Time Limits","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Session Time Limits","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2cdd4a96-23c1-4419-b88c-41bbaa119e68","displayName":"Passcode","description":"Declarative Device Management (DDM)\\ Passcode","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"2d5a483f-b408-426d-9234-2883eae20afb","displayName":"Tools | Options | General | Web Options...","description":"Microsoft Office 2016\\Tools | Options | General | Web Options...","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["025c640e-51e2-4f04-85e3-a13f30b5e08c","8ee1d8d2-582f-401b-927a-993016f4290d","0775f21c-9ca1-446d-b1dc-3cea45f15605","eef9e433-0ca1-40b0-9a5d-c0ba1f8f0510"],"platforms":"windows10","technologies":"mdm"},{"id":"2d6891a4-ee83-4e55-8e23-09513e1306e4","displayName":"Microsoft Office Document Cache","description":"Microsoft Office 2016\\Microsoft Office Document Cache","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2d842579-300e-4a24-bc42-7c39af62c468","displayName":"File Share Shadow Copy Provider","description":"Administrative Templates\\System\\File Share Shadow Copy Provider","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2d8634c7-19ca-46e0-923d-019ba18ff4e0","displayName":"RD Licensing","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\RD Licensing","helpText":null,"parentCategoryId":"572bc940-42d4-4e00-ac55-012e9b90f6df","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2dc7de59-a2b5-4f4a-96a4-597927af0617","displayName":"AutoPlay Policies","description":"Administrative Templates\\Windows Components\\AutoPlay Policies","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2de362c7-2c4a-4b24-bda3-f82cb6ed5990","displayName":"Kerberos","description":"Administrative Templates Kerberos","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2e241b46-e5ae-41d7-a559-fe40819e86f4","displayName":"Typosquatting Checker settings","description":"Microsoft Edge\\ Typosquatting Checker settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2e3f0407-6387-41b4-b6c2-ada4354be759","displayName":"Licensing Settings","description":"Microsoft Office 2016 (Machine)\\Licensing Settings","helpText":null,"parentCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2e57e23c-4847-4864-8e8e-5f6add1f7a84","displayName":"Windows Color System","description":"Administrative Templates\\Windows Components\\Windows Color System","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2e71c6fd-dafa-444d-9542-55d838331939","displayName":"NTFS","description":"Administrative Templates\\System\\Filesystem\\NTFS","helpText":null,"parentCategoryId":"50fb9f56-84f1-4fa9-83f5-0aa0bca8ff49","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2ea4b701-fcb8-46b2-a83f-c792b861f5ad","displayName":"Accessories","description":"Administrative Templates\\Windows Components\\Tablet PC\\Accessories","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2ea63962-4cac-4a5c-9181-e6a364489db0","displayName":"Security","description":"Microsoft Visio 2016\\Visio Options\\Security","helpText":null,"parentCategoryId":"f106d9e2-60ce-4e16-b74d-bd9ef401d7ba","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["f34e3da0-b440-43dc-a368-4fd39646a9c5","253fda23-118b-48c7-b24a-27b8c93df41a"],"platforms":"windows10","technologies":"mdm"},{"id":"2eed22da-106f-4c93-9a45-5ce803b50233","displayName":"Offline Editing","description":"Microsoft Visio 2016\\Visio Options\\Save\\Offline Editing","helpText":null,"parentCategoryId":"ad9610c6-d1c5-4c7a-9e74-58b810dd759d","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2f524350-1bdb-4eee-a96d-b656bc2b0d70","displayName":"Sudo","description":"Sudo","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"2f524350-1bdb-4eee-a96d-b656bc2b0d70","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2f56761a-8e8b-4788-a589-a73ab91818e6","displayName":"Web Archives","description":"Microsoft Office 2016\\Web Archives","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2f6205e9-8680-4b8f-97f3-be12e252e038","displayName":"Track changes and compare","description":"Microsoft Word 2016\\Word Options\\Track changes and compare","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2f85405a-7472-44ce-8c05-b59bb54912d5","displayName":"Playback","description":"Administrative Templates Windows Media Player Playback","helpText":null,"parentCategoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","displayName":"Trusted Locations","description":"Microsoft Excel 2016\\Excel Options\\Security\\Trust Center\\Trusted Locations","helpText":null,"parentCategoryId":"7490c4fd-c326-42f7-9908-006504616d4c","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"2fbb7677-651a-4b62-8b8c-d502ea29936b","displayName":"E-mail Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\E-mail Options","helpText":null,"parentCategoryId":"1b59bea5-b6db-4a37-9fdd-5bc2e141a61d","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["897675f9-0d1b-437b-ba0a-584fbd54df95","71f4af65-b7fa-4c54-bf73-19b0c7ffe162"],"platforms":"windows10","technologies":"mdm"},{"id":"304a579b-ff3b-4897-8bb8-5a1dda45356f","displayName":"Schedule options for Microsoft Project","description":"Microsoft Project 2016\\Project Options\\Schedule\\Schedule options for Microsoft Project","helpText":null,"parentCategoryId":"db47f067-f435-4095-8b98-aa3805bc0050","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"30918d48-dafd-4b25-be63-70f6c7ba8a3d","displayName":"Background Intelligent Transfer Service BITS","description":"Administrative Templates Background Intelligent Transfer Service BITS","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"30da5d88-cf03-41f4-ab55-51ead91b3844","displayName":"Trust Center","description":"Microsoft Publisher 2016\\Security\\Trust Center","helpText":null,"parentCategoryId":"0cea32b4-28be-4164-ae2a-6db33b9dadb7","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"30fcb92f-4d0c-4dbf-95d0-a86350e9efc6","displayName":"Hotspot Authentication","description":"Administrative Templates\\Network\\Hotspot Authentication","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"31070051-859e-4d27-9df3-c07b8a2d2179","displayName":"Word Options","description":"Microsoft Word 2016\\Word Options","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","dc049161-17c6-411e-906b-a871b33651cd","2f6205e9-8680-4b8f-97f3-be12e252e038","89be4acb-fdf9-447b-ad16-9a5af1d68b8b","ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","f9e53433-d8d9-4eaf-bdf3-d32de60d686e","bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","83087772-6560-4488-a1c5-bb6e4889e868"],"platforms":"windows10","technologies":"mdm"},{"id":"311e1dac-a77c-4bc0-a376-35ad55923b7d","displayName":"Start","description":"Start","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"311e1dac-a77c-4bc0-a376-35ad55923b7d","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3181c361-f4f0-44ff-82cc-24aac8075843","displayName":"Sound Recorder","description":"Administrative Templates\\Windows Components\\Sound Recorder","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"31d3b4c4-767e-403a-834c-51f3691bbf2b","displayName":"Security Center","description":"Administrative Templates Security Center","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"320ccaa3-a391-4d29-a9c4-594561f4104d","displayName":"Miscellaneous","description":"Microsoft Word 2016\\Miscellaneous","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["b206e4ef-a288-4fb7-a7ee-4a30b4df3b98"],"platforms":"windows10","technologies":"mdm"},{"id":"32180186-7378-4d45-b0cc-c533a124bdbc","displayName":"Access- Denied Assistance","description":"Administrative Templates Access- Denied Assistance","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3265b420-4c88-4f7b-92cc-4e23d9452eb1","displayName":"General","description":"Microsoft Project 2016\\Project Options\\General","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["0a6bc3ed-c4cd-4928-bcbf-247369a51515","501e47c0-6c18-4a88-9366-adc0bbc2c9b4"],"platforms":"windows10","technologies":"mdm"},{"id":"32b20540-8fe9-4730-a4b0-ff41f6b13a97","displayName":"Windows System Responsiveness Performance Diagnostics","description":"Administrative Templates Windows System Responsiveness Performance Diagnostics","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","displayName":"Microsoft Office 2016 (Machine)","description":"Microsoft Office 2016 (Machine)","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":["5d8272e2-1ed3-4a8d-9555-9a87fa13d078","712d184f-d9ac-45fc-9eea-aade3a22b55e","f0190b73-0d5c-410e-bce1-e03aa1f62ed4","2e3f0407-6387-41b4-b6c2-ada4354be759","8c879ddf-7acf-45f3-81d3-2c78c7a1321b","86dae9f9-7eb1-4566-8558-b63fa2e20fee"],"platforms":"windows10","technologies":"mdm"},{"id":"32ee73d6-947f-45e9-856b-793b584c626d","displayName":"MAPS","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\MAPS","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3334730b-b9f7-4c99-bde8-57f6b2cd826f","displayName":"","description":"Administrative Templates","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"33a43c22-104b-4683-995b-5652cfd5b490","displayName":"Windows AI","description":"Windows AI","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"33a43c22-104b-4683-995b-5652cfd5b490","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"33b9194b-4027-4c23-b662-52f25db7f839","displayName":"International","description":"Microsoft Access 2016\\Application Settings\\International","helpText":null,"parentCategoryId":"d0a3bbad-8ed0-4545-8249-9e464a13e1b7","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"33fb4f49-5c7f-472c-a0f3-e05646a55902","displayName":"Improved Error Reporting","description":"Microsoft Office 2016\\Improved Error Reporting","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3426ef3d-40f5-474e-a493-4a1545c62348","displayName":"DSCP value of conforming packets","description":"Administrative Templates\\Network\\QoS Packet Scheduler\\DSCP value of conforming packets","helpText":null,"parentCategoryId":"01f2fac4-fdab-4391-bebe-ebdf6d8fcc77","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"343eb575-3ac8-4da9-b66d-ce84b84be7c3","displayName":"Project Guide settings","description":"Microsoft Project 2016\\Project Options\\Interface\\Project Guide settings","helpText":null,"parentCategoryId":"84b7f123-e849-40f9-914b-4b97b57bd3b4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3453c694-bc38-4082-9d3d-886e385df927","displayName":"Event Viewer","description":"Administrative Templates Event Viewer","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"349c31c1-9b5b-42c8-91f2-aa41f4a36a71","displayName":"Window Frame Coloring","description":"Administrative Templates Desktop Window Manager Window Frame Coloring","helpText":null,"parentCategoryId":"d52dd970-febb-4891-8eb7-1c8616cfb6cb","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"34c07941-8f52-43ad-b0ca-a7284655afb4","displayName":"Office.com Sharing Service","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Calendar Options\\Office.com Sharing Service","helpText":null,"parentCategoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3503e1ba-8168-4b55-92b1-84613292cadc","displayName":"Advanced","description":"Microsoft Excel 2016\\Excel Options\\Advanced","helpText":null,"parentCategoryId":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":["b90fb0dc-b8c1-4fc3-b9f9-dfbda4b3f03d"],"platforms":"windows10","technologies":"mdm"},{"id":"3512a9f5-d692-4a1f-aedd-1bd431ae893e","displayName":"Editing Languages","description":"Microsoft Office 2016\\Language Preferences\\Editing Languages","helpText":null,"parentCategoryId":"eb947c30-3c43-4d34-a566-a842a1a142f3","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["60ea21c6-4c2b-4510-83f4-3a2d04fd99a0"],"platforms":"windows10","technologies":"mdm"},{"id":"35525ba9-da99-460e-afd3-ba86506b0ba3","displayName":"File Explorer","description":"Administrative Templates\\Windows Components\\File Explorer","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["7c34b514-0fb4-4868-8418-cb9b28f9f6e3","93decccd-de24-4ec4-b21c-e08c14f13576","e21bab5b-308d-4dcd-b6bb-a019e7347373"],"platforms":"windows10","technologies":"mdm"},{"id":"3588f84a-69de-4900-910c-09a5b69e5d99","displayName":"Virtualization Based Technology","description":"Virtualization Based Technology","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"3588f84a-69de-4900-910c-09a5b69e5d99","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"35f245bd-8d1f-424c-83de-a80be27a6a4e","displayName":"Desktop Alert","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\E-mail Options\\Advanced E-mail Options\\Desktop Alert","helpText":null,"parentCategoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"361859d9-1382-47c3-b9ec-9251a62fbb25","displayName":"Time Machine","description":"User Experience > Time Machine","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"361dc9bb-0cf7-4d8b-af4b-6117aeb46511","displayName":"System Policy Control","description":"System Policy","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"361dc9bb-0cf7-4d8b-af4b-6117aeb46511","childCategoryIds":["64538726-8745-4e7a-b370-332f725b58bf","763525a0-8456-4336-a8d1-392253e8fdd8"],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"3634c01b-1a85-4f50-9f52-63bc10bf0e39","displayName":"Removed policies","description":"Google Google Chrome Removed policies","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"363982dd-fc96-49ce-a499-f6401f2c212b","displayName":"iSCSI","description":"Administrative Templates\\System\\iSCSI","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["f5e39798-0511-462f-b859-f892fdde4328","b62de64d-03ed-4e09-be5c-5cc93e34ea47","7d7f6a09-2088-4f1f-a1f1-14fbca93a808"],"platforms":"windows10","technologies":"mdm"},{"id":"364787de-93e4-4fd6-9608-dce1ad8f88c2","displayName":"Windows Remote Management Win RM","description":"Administrative Templates Windows Remote Management Win RM","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","0f6d725e-2c2d-4926-8e78-3d2d5867eef5"],"platforms":"windows10","technologies":"mdm"},{"id":"366a0d4a-8f27-44e7-82d0-d2eafe5b6d6f","displayName":"Windows Standby/Resume Performance Diagnostics","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Windows Standby/Resume Performance Diagnostics","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"36aafec3-7ffb-4ab9-bef9-b8bb431bf8b3","displayName":"Fixed Data Drives","description":"Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Fixed Data Drives","helpText":null,"parentCategoryId":"0101d1d0-1e54-47b0-a749-62c6bd7ab3da","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","displayName":"Google Chrome","description":"Google Google Chrome","helpText":null,"parentCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":["1d6d392c-8b32-459b-b114-af964a4bbbc5","fa2722a8-dcfd-4e14-a429-2b0041642c77","3634c01b-1a85-4f50-9f52-63bc10bf0e39","b811c4fe-7ff0-4bd1-a454-0918d4e2f896","d9432f48-3072-4171-9031-4ebead394151","5900ac65-f656-459c-bd82-1329a862544d","5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","d4ad9168-8c49-45d6-a7e5-86ba990fff3e","ac821e49-1996-4d6c-99d4-9c3c3e4737b6","216de445-a80d-4981-b151-3b4466edc808","da78ddbc-fc94-48f9-8808-4b160d6f1d50","f7486553-9e63-4d63-9423-56e5ffe48700","b46f4e70-d3d1-4177-8e22-62f806d4568c","62499519-97eb-43e7-ae96-d7909c5820d3","59d29716-55b0-4014-a458-38b408ff9530","70498fad-5ddb-4730-8130-d755ff675760","93ed2300-658d-40f3-8211-9295a240579c","8c35f124-e249-43e3-9044-ecc0b0a5855a","f66e6bf2-a437-4d36-b46c-e965b31a5d4f","a5a38799-7bf1-4b83-86fe-62729cd9ed9d","4cd10f38-02cf-40f2-aa87-ad70a2190a1a","f00e9baf-9bbf-48e4-aaac-57410730f016","463e6791-7d54-4964-a36b-63bbedb7d0cd","148a6f4e-8816-4c00-87a3-57481c85c331","4aa852ab-6269-4883-906f-0a0944fa1261","895e0884-6b60-4bb0-b2ab-3a1642103db7","10247787-95ea-4507-93de-dbd166df12b5","098942c3-afe3-40c8-823f-37f0b5b13ad4","b485695b-0fae-41ae-861c-3030769b28df"],"platforms":"windows10","technologies":"mdm"},{"id":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","displayName":"Trust Center","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Security\\Trust Center","helpText":null,"parentCategoryId":"85810387-3320-4056-bae2-953beeb246f7","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["42ce9a9b-0574-4b5c-993b-7679de80be47","76ad3567-c6cb-43b5-b91d-a52a34853c03","4d69af55-f100-45fa-92e1-56d46434c647"],"platforms":"windows10","technologies":"mdm"},{"id":"3800661e-5841-4499-8d4e-914527435f59","displayName":"Streaming","description":"Administrative Templates\\System\\App-V\\Streaming","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"394ae912-b5c9-45a0-8883-84791c6acb16","displayName":"RemoteApp and Desktop Connections","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\RemoteApp and Desktop Connections","helpText":null,"parentCategoryId":"572bc940-42d4-4e00-ac55-012e9b90f6df","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"394b2dfb-3404-4668-94af-5acc825fcf51","displayName":"System Restore","description":"Administrative Templates\\System\\System Restore","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"395a548d-737b-41fe-8449-c68c51e3a349","displayName":"Input Panel","description":"Administrative Templates Input Panel","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3969f56d-a8b5-4509-86fb-00eb481665fa","displayName":"Advanced Page","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Advanced Page","helpText":null,"parentCategoryId":"586c5c5a-15cd-4592-beae-1709c6daf5b7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"39e4c352-be9c-4e75-8111-8236279c7f1e","displayName":"Cloud Desktop","description":"Cloud Desktop","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"39e4c352-be9c-4e75-8111-8236279c7f1e","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3a28f10c-cb75-4f85-871b-87eb9dcd883c","displayName":"TCPIP Settings","description":"Administrative Templates\\Network\\TCPIP Settings","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["f52d9745-eaf4-4e39-84b2-6b32c3b15aa3","d512207c-854d-482d-8e52-26637eef24e3"],"platforms":"windows10","technologies":"mdm"},{"id":"3a901a80-e2b6-470c-9658-d66ba5458370","displayName":"Remote App and Desktop Connections","description":"Administrative Templates Remote Desktop Services Remote App and Desktop Connections","helpText":null,"parentCategoryId":"c48917c1-fd99-405f-b1d2-9dfec169e5d8","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3abaf4c2-d5db-4b3b-a461-b1a208231b36","displayName":"Certificate management settings","description":"Microsoft Edge Certificate management settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"3afbcb74-88c5-4a41-bdc2-82c117b4e82e","displayName":"Applications","description":"Administrative Templates\\Windows Components\\Microsoft User Experience Virtualization\\Applications","helpText":null,"parentCategoryId":"9e857bed-81f8-4dfc-b049-c93eb68b4064","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","displayName":"Scheduling options for 'Project1'","description":"Microsoft Project 2016\\Project Options\\Schedule\\Scheduling options for 'Project1'","helpText":null,"parentCategoryId":"db47f067-f435-4095-8b98-aa3805bc0050","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3b384fc5-5906-4dc4-bc48-a52b52fb054b","displayName":"Account Management","description":"Account Management","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"3b384fc5-5906-4dc4-bc48-a52b52fb054b","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3b64e99d-0359-4264-be38-c544c647f493","displayName":"Sleep Settings","description":"Administrative Templates Power Management Sleep Settings","helpText":null,"parentCategoryId":"290ec637-e780-4e95-9834-6368ac0437d1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3b7e16e7-171f-4169-8904-c8483b06700d","displayName":"Custom","description":"Microsoft Excel 2016\\Disable Items in User Interface\\Custom","helpText":null,"parentCategoryId":"a2806db0-3cea-4a1a-8c1c-f9e1fdfd316b","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3ba8106d-4b2f-4775-939d-1cc8703a41dc","displayName":"Password manager and protection","description":"Microsoft Edge\\Password manager and protection","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"3bb9ca38-645e-479c-ac5f-01959aec9c30","displayName":"Microsoft Edge","description":"Microsoft Edge Update\\Applications\\Microsoft Edge","helpText":null,"parentCategoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3bbaff1b-7d59-4b9c-ab53-c235d72b2fb0","displayName":"Protection From Zone Elevation","description":"Administrative Templates Internet Explorer Security Features Protection From Zone Elevation","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3c46dc04-e649-41b9-be99-04b771303fdd","displayName":"eSIM","description":"eSIM","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"3c46dc04-e649-41b9-be99-04b771303fdd","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3c7f15ef-a539-411c-93f1-5f97b7bd5519","displayName":"Bluetooth","description":"Managed Settings Bluetooth","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"3ccd987e-bfca-4838-98ea-576de34b3ebe","displayName":"Certain Hours","description":"Certain Hours","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"3ccd987e-bfca-4838-98ea-576de34b3ebe","childCategoryIds":[],"platforms":"android,iOS","technologies":"exchangeOnline"},{"id":"3d32fb39-ff23-48d9-9890-c8625d2d21e9","displayName":"Group Policy","description":"Administrative Templates\\Windows Components\\Microsoft Management Console\\Restricted/Permitted snap-ins\\Group Policy","helpText":null,"parentCategoryId":"9e882396-4a1c-4d06-a62d-8d910ded8e7d","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["61205786-952e-489c-91f7-5654a5bde11b","814e9e4d-b838-4747-a257-72390a535d56"],"platforms":"windows10","technologies":"mdm"},{"id":"3db7e884-6077-4b96-ace3-005a6b49ecc0","displayName":"Hyperlink appearance in 'Project1'","description":"Microsoft Project 2016\\Project Options\\Edit\\Hyperlink appearance in 'Project1'","helpText":null,"parentCategoryId":"5bd8c27a-0141-4bbf-93f7-214b2389ff2d","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3deb76aa-8336-4ff9-aa98-4dcaf8901468","displayName":"Shutdown","description":"Administrative Templates\\System\\Shutdown","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3e50e056-24bf-46c3-975f-b0aedbc96329","displayName":"Protection From Zone Elevation","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Protection From Zone Elevation","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3e98c3bc-254c-445f-a1c8-4a93c2e0fcf2","displayName":"Tablet PC Pen Training","description":"Administrative Templates\\Windows Components\\Tablet PC\\Tablet PC Pen Training","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3edb2860-b77b-4240-af16-fb34d45d6ba1","displayName":"Performance","description":"Microsoft Edge\\Performance","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"3f216590-fb12-4f8e-924f-2a6895d94126","displayName":"Folder Home Pages for Outlook Special Folders","description":"Microsoft Outlook 2016\\Folder Home Pages for Outlook Special Folders","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3f56adc1-2207-4033-a6e2-07f64c08e3ff","displayName":"FileVault","description":"FileVault > FileVault","helpText":null,"parentCategoryId":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","rootCategoryId":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"3f61a5fe-8508-44dd-bcf0-83273643026a","displayName":"Smart Screen","description":"Smart Screen","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"3f61a5fe-8508-44dd-bcf0-83273643026a","childCategoryIds":["20b71dc7-cf08-4534-9e52-d297dd071ca5"],"platforms":"windows10","technologies":"mdm,configManager"},{"id":"3f693856-7cbb-4a1c-93be-0d05aa41059f","displayName":"i SCSI","description":"Administrative Templatesi SCSI","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["60ea8de3-bc6d-4b01-974a-a53860fe4ef6","ca1aedf4-b951-45f5-a77c-dec776a82e21","6c1d9109-e4d1-4718-a537-dd685464fdbe"],"platforms":"windows10","technologies":"mdm"},{"id":"3f6bb987-17dc-4442-a946-c1c5b1d089d7","displayName":"Internet Control Panel","description":"Administrative Templates Internet Explorer Internet Control Panel","helpText":null,"parentCategoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["8d503574-f93a-4277-a30d-19895d46dd13","822bd634-4d01-486e-adad-8085968fd1c4"],"platforms":"windows10","technologies":"mdm"},{"id":"3f8299b3-6803-4576-be08-7c311d04b8b9","displayName":"Attachment Manager","description":"Administrative Templates\\Windows Components\\Attachment Manager","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3f8986f3-195d-4ee5-ae8d-96a007b20883","displayName":"Windows Location Provider","description":"Administrative Templates Windows Location Provider","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3fa63a9d-e22d-4fc8-8464-a13b56461115","displayName":"Predefined","description":"Microsoft Excel 2016\\Disable Items in User Interface\\Predefined","helpText":null,"parentCategoryId":"a2806db0-3cea-4a1a-8c1c-f9e1fdfd316b","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"3fbd3b29-bafd-4adf-89e4-3be612dee275","displayName":"Network settings","description":"Microsoft Edge Network settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"40605d4b-d999-4235-9a5a-59fad165ec51","displayName":"Locked-Down Restricted Sites Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Locked-Down Restricted Sites Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4086190d-2e5b-439d-8426-08492ebb8c9f","displayName":"Local Machine Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Local Machine Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"40c593b9-63cf-4b10-ad26-1ceb7c9491fe","displayName":"Disk NV Cache","description":"Administrative Templates Disk NV Cache","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"41081a6b-ec9f-4b4f-b6ae-1d4dda162654","displayName":"Folder Redirection","description":"Administrative Templates\\System\\Folder Redirection","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4124fc05-5c98-4790-a2a9-4ba2dee3d9b3","displayName":"Explorer Frame Pane","description":"Administrative Templates Explorer Frame Pane","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"41ba590e-9105-4eda-92fb-13c7d34b8eee","displayName":"DC Locator DNS Records","description":"Administrative Templates Net Logon DC Locator DNS Records","helpText":null,"parentCategoryId":"8c30a64e-ad24-47a0-97a8-52320360fd88","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"424a0e73-8002-42e3-b47d-2062fc17c3b3","displayName":"Troubleshooting and Diagnostics","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["439f1603-5241-40c7-a5fe-44ae6744543f","5c1c00f2-def5-4064-925d-aedf4aa0f060","b4272e06-316f-4f9a-a198-93f4168f0c78","366a0d4a-8f27-44e7-82d0-d2eafe5b6d6f","94f6e868-1296-4811-b404-1afa2d50bc7c","2ac8fe19-ca17-4533-8818-a5e12030de51","78b3d753-d84d-496b-a93c-d577ab5865bd","8eb61398-1074-4fa0-8bd4-04d751a9ccad","9c815001-eace-4aa6-a929-14af0a46aaf5","a24e6384-a862-4d0e-8f6c-eb99e5f6a9db","1f31ae2d-4867-4733-b52c-cecc0128e10c","7bc264db-6da2-4c6b-a357-aec47c717737","a4f5cedd-a8f7-4def-b8b6-8fbf9ce9e0d8","f783d1ea-2f9b-4fcb-96cc-fb455cfe69f9"],"platforms":"windows10","technologies":"mdm"},{"id":"425669eb-3a49-43d1-98a5-0fcc5b04ffcb","displayName":"Application Compatibility","description":"Administrative Templates Application Compatibility","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"428f107c-2167-4bc2-9293-8f1d6728a0c5","displayName":"Scan","description":"Administrative Templates Microsoft Defender Antivirus Scan","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"429c4b85-a2b4-46ed-afa0-6c89c08a5544","displayName":"AirPrint","description":"Printing > AirPrint","helpText":null,"parentCategoryId":"a01c03d4-ec76-4c01-b982-de71620feb19","rootCategoryId":"a01c03d4-ec76-4c01-b982-de71620feb19","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"42a6198f-bdec-402e-b619-315400b65488","displayName":"Software Update","description":"Declarative Device Management (DDM) Software Update","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"42ce9a9b-0574-4b5c-993b-7679de80be47","displayName":"Protected View","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Security\\Trust Center\\Protected View","helpText":null,"parentCategoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"42d8353a-a135-4c2d-8d06-c6cf9961c6c5","displayName":"Telemetry Dashboard","description":"Microsoft Office 2016\\Telemetry Dashboard","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"43053249-ecd1-4d9f-9fa9-c05e7713da7f","displayName":"SharePoint Lists","description":"Microsoft Outlook 2016\\Account Settings\\SharePoint Lists","helpText":null,"parentCategoryId":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"43057320-7058-46d5-86f9-a56c80bbf8b9","displayName":"Private Network Request Settings","description":"Microsoft Edge\\ Private Network Request Settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"431c3b32-abe7-4534-81a1-9f10c8e0c512","displayName":"Scan","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Scan","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4331c310-93b0-4383-8c55-acd653f37f80","displayName":"Network Inspection System","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Network Inspection System","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","displayName":"Microsoft Edge - Default Settings (users can override)","description":"Microsoft Edge - Default Settings (users can override)","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":["04b46099-4ee5-4def-8e04-569c988057a9","6f1386e5-148d-4dc3-84d1-79df721e3233","a7b038e5-3af5-41fe-919e-e8befe83a9a5","fea97af7-df89-4fde-8e2b-f8e7f7b6b741","48965ad9-3011-4722-855b-7179fef89954","1653fa6c-aa99-4918-92c7-1df85d8843e1","6b71fbf6-7156-471a-b488-3eece04bda86","7db75ddb-f702-49f8-ae2b-991d1afd2d17","a877a2ff-f144-421f-814c-593e972a8a20","1ccd3115-55e7-464f-9bb9-d38a92191306","6fafeb5c-65ce-4993-b421-46e60da69131","acabc66f-5faf-4a13-af32-322ccfc1a5b3","70dd505d-40d4-4685-b639-67efc9274ec4","8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","b96b63eb-0292-4a73-85d7-c68d330c109e","0d4cf1d9-d8ad-4628-bd71-fa0de6598f28"],"platforms":"windows10","technologies":"mdm"},{"id":"439f1603-5241-40c7-a5fe-44ae6744543f","displayName":"Application Compatibility Diagnostics","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Application Compatibility Diagnostics","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"439f715e-5511-44fd-9a0f-644ba7cc6baf","displayName":"Logon","description":"Administrative Templates Logon","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"43eca758-22c0-4625-8f12-85a8a34ea8b1","displayName":"Windows Logon Options","description":"Administrative Templates Windows Logon Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"43fc9dcc-1e66-4108-bded-2d005eeb7ccb","displayName":"Microsoft Edge WebView","description":"Microsoft Edge Update\\Microsoft Edge WebView","helpText":null,"parentCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"441d6cc4-e51f-453e-a44d-8394509415be","displayName":"Predefined","description":"Microsoft Publisher 2016\\Disable Items in User Interface\\Predefined","helpText":null,"parentCategoryId":"9caa3b08-b545-4c21-a3b7-b5d2302c1a81","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"444409a4-8b03-402d-91d0-1cd9565fb0fb","displayName":"Windows Color System","description":"Administrative Templates Windows Color System","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"44541a16-c3a2-4be1-ba42-4fc15bde4c46","displayName":"Business Data","description":"Microsoft Office 2016\\Business Data","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["952f69c8-2644-48df-976b-01fd624cbb3a","a6e0cee7-34a0-4ca2-b4da-f819a057b532","c72d9f00-d625-43ec-add4-514891035839"],"platforms":"windows10","technologies":"mdm"},{"id":"44774d3d-387b-4fa7-8de4-d82b039c06d1","displayName":"Display","description":"Microsoft OneNote 2016\\OneNote Options\\Display","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4479c9b6-8e08-424f-a20a-2058126dc048","displayName":"Data Collection and Preview Builds","description":"Administrative Templates\\Windows Components\\Data Collection and Preview Builds","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"449201b6-5002-42d1-85ed-d288fb6552da","displayName":"Smart Documents (Word, Excel)","description":"Microsoft Office 2016\\Smart Documents (Word, Excel)","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"44c15b2f-10da-4e1e-836b-8b71c19fe34c","displayName":"Internet Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Internet Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"44e27b70-4bdb-4aec-a75d-0568a1edc332","displayName":"Predefined","description":"Microsoft Word 2016\\Disable Items in User Interface\\Predefined","helpText":null,"parentCategoryId":"740e7a10-3774-4a1c-9970-6907e0f0b848","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4560c525-12a1-4536-9cca-338330e58389","displayName":"Add-on Management","description":"Administrative Templates Internet Explorer Security Features Add-on Management","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"45a89c1f-0a34-4f78-b28f-d30b623fa423","displayName":"Identity and sign-in","description":"Microsoft Edge\\ Identity and sign-in","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"45d15759-2add-40db-9294-d1b391515dba","displayName":"Folder Redirection","description":"Administrative Templates Folder Redirection","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"45fe783f-a80b-42d9-ab3c-8c4081be8d05","displayName":"Carddav","description":"Accounts > CardDAV","helpText":null,"parentCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","rootCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"463e6791-7d54-4964-a36b-63bbedb7d0cd","displayName":"Microsoft Active Directory management settings","description":"Google Google Chrome Microsoft Active Directory management settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"46af3391-ed6d-4ada-aef7-02dac2a1b136","displayName":"Xsan","description":"Xsan > Xsan","helpText":null,"parentCategoryId":"811f63f1-1619-4b48-b8f0-3d388729bd47","rootCategoryId":"811f63f1-1619-4b48-b8f0-3d388729bd47","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"46eaa2b7-341b-4e39-be21-c3ea09dd5778","displayName":"Microsoft Edge Web View2 Runtime","description":"Microsoft Edge Update Microsoft Edge Web View2 Runtime","helpText":null,"parentCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"476e0bfc-ddb6-4612-8446-bed86e875141","displayName":"Fault Tolerant Heap","description":"Administrative Templates Fault Tolerant Heap","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"478ed057-8ee7-4dd2-8276-06dad8f85397","displayName":"Services","description":"Microsoft Office 2016\\Services","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["a5607145-2bd3-4473-a8ee-d7fa5c2f2675"],"platforms":"windows10","technologies":"mdm"},{"id":"479c2edd-6539-4e1d-96ba-518d6f6264c3","displayName":"Container and Directory Naming","description":"FS Logix Profile Containers Container and Directory Naming","helpText":null,"parentCategoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"486dc66e-960c-4622-b3cb-3ff9a2d434eb","displayName":"Device Installation","description":"Administrative Templates\\System\\Device Installation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["979412d7-6716-440c-9a64-5889026d73da"],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"486f25cc-c865-446e-95b2-c5b061883a7a","displayName":"I Pv6 Transition Technologies","description":"Administrative Templates TCPIP Settings I Pv6 Transition Technologies","helpText":null,"parentCategoryId":"785c6df2-c6d0-4d6e-bd73-c3b62caca754","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"48965ad9-3011-4722-855b-7179fef89954","displayName":"Games settings","description":"Microsoft Edge - Default Settings users can override Games settings","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"48b8705b-58a8-4504-ab7a-2704980f4577","displayName":"Microsoft Defender","description":"Microsoft Defender","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":["d40a32e1-ab3e-4cbc-aa03-4766792e563e","67cd904c-78e0-4e77-9dd4-c713b21763f3","5c4df3be-80b0-40cc-a8c8-0258120b0de5","20af2e37-4e39-4e47-ba5d-d1cadbfb4b0a","269c487f-8902-486a-88dd-db9b9b4454b8","22a2a407-0f28-481d-bdbe-1f9cb6d589c3","13467142-14e7-4380-8573-4866e842c7f6","b77a3a7b-6fab-4240-b5c3-852aa78781d5","a3ea4da3-445e-41c0-ac4d-c9ad2467ec26","64c8233f-3057-4485-b902-d71a312318d7","d2191717-e304-46f7-bcc0-55e6477026c9","93099bd4-c685-434b-9d72-f0cb6db5e753","0e1122f8-2bbf-475b-bce0-9e43a2f5e475"],"platforms":"macOS,linux","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"48be5f9d-4941-4189-8015-dd78f87aacd5","displayName":"Administrative Templates","description":"Administrative Templates","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["07c023d3-0899-40af-a04f-805876d99a9b","180b2a03-16d4-43cd-ba84-9b4546753ef4","6bed088c-c9b0-4149-b26f-df0c247cdb5b","78d3d93f-03d0-4fa0-be56-be4bca0a7b3b","87e607d8-500d-4dba-a58f-d7695945c973","a7e7529f-1030-41da-8b4d-024e1c08bbac","99ba9e42-9872-4a03-a615-fc4a4cebc067","c01c7d3f-ace1-48bf-abce-e8a02ba877ab","634e4243-284b-4cb7-a7e6-08ca7e262937","c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","909339a5-8f04-4fa2-8807-5d38c83ef547","08c4d8e5-ef84-4b98-a6b8-96a4b5a0c7b1","f3027ba5-9a2f-42c6-9872-ec21f726929c","395a548d-737b-41fe-8449-c68c51e3a349","d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","5dcea340-0469-4f43-b270-a49ed0597201","5371d50c-0aaa-425a-a075-2cb1c59968b9","03a966f7-8f8e-4ecb-aab3-055fe907f5ab","088b8d8d-5f3f-4979-aa18-b3c4b2616a24","50fb9f56-84f1-4fa9-83f5-0aa0bca8ff49","41081a6b-ec9f-4b4f-b6ae-1d4dda162654","2cbf2609-1f6a-4597-84e2-a57da0ad0472","53936d6e-5445-4897-8a40-e3f810ea50c4","b49cb414-bdfb-49d4-af5d-176ded4f9591","6b87c5da-cfd9-44bc-be05-ed08eb2144c7","fff51673-04b8-4277-98ef-4baffbd8d192","444409a4-8b03-402d-91d0-1cd9565fb0fb","cef993dc-bf18-44f7-8e9f-465ef1a0f144","156f2e6a-6638-4749-9f43-e7acc4aba762","bd04d2ce-3275-496c-8cc1-e17ab19888a3","cebd5934-9dfe-4278-966d-b9d880cb30e7","dbb76878-34a9-4f87-bbc6-4de7ea223ff4","e6b767af-2ce1-4c91-9360-15abbb0bf3bc","2b54b208-5459-4e40-8db1-002cb90495bc","2d842579-300e-4a24-bc42-7c39af62c468","32b20540-8fe9-4730-a4b0-ff41f6b13a97","73a3a483-dcba-4b34-b7cb-9c68c871864c","8280dcb9-f2bc-417b-b4ef-cd6c35398f94","8d27fb75-5aeb-44f0-aab2-064cc4b9ecd6","ac0a894c-173a-48fc-b961-901f28463c77","023e0367-b563-4fae-8fb6-589c836ee223","76bbc368-9d0b-4aa7-b8e2-2dcfd864b9ee","2461b964-02f6-4da2-921a-f7e8f868c69d","98dc5bd0-2b16-4263-ba2f-62115b680017","edd1e620-09e1-47ea-abc8-1e241a174ed9","439f715e-5511-44fd-9a0f-644ba7cc6baf","d982a1ef-84be-4832-99d4-8b71a4644b74","dad3971c-b07b-461b-8ead-6eda80ee57e1","b524d6e2-75bc-4409-ae3d-07605707d7ee","751cf9ec-7214-4b38-a09e-24922684bd8f","dab7104a-b79c-4318-afb0-5d5cfed9caa9","0937f5ff-aabc-49a9-a94f-6f98c4702580","c6a912c5-0334-40fb-8dc5-f2d2547b8071","fe3cb879-8869-4163-91d7-e432abd75da8","b6bb653a-73f0-42f4-b097-1ce556310904","930d2960-3f70-48ca-9ead-b65a5a037c07","5161db41-7947-49ea-b9b3-dd92539e6783","43eca758-22c0-4625-8f12-85a8a34ea8b1","d4c9d046-a8c0-46f0-bd62-bc4d1614e891","18b972fd-74f2-4345-9449-087c80dd38a3","27087ae6-d02f-4b54-a143-6cde89c04989","6c7168c3-6f34-4086-af0b-ed0b74301dc9","734bed4f-be52-46ef-ae60-8fd195dc8f4d","93c28398-faef-4ca5-9667-f5ed004da32c","3334730b-b9f7-4c99-bde8-57f6b2cd826f","32180186-7378-4d45-b0cc-c533a124bdbc","425669eb-3a49-43d1-98a5-0fcc5b04ffcb","56fdfd66-f34d-4bf8-b951-f130114ffb3d","736134cb-4d82-427a-97b7-d219ac6a22f0","9b894b32-3697-4a83-9731-3db2a35455ad","cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","ad47f904-ede2-4b12-849e-bf751d88abf5","c859dc1a-fdeb-4591-af97-79d078ee715b","f14fcb64-a868-4531-a3b4-c3cdf03c2b99","476e0bfc-ddb6-4612-8446-bed86e875141","72972c43-36a3-4034-8cc8-334c99087798","005ddf8f-da22-4b23-ab02-289f8f6c7960","3f693856-7cbb-4a1c-93be-0d05aa41059f","68a3b82d-d1f4-422d-bfee-2168ec260ad7","dc16dbf0-aac8-4ff3-a546-1ddb55650f47","1851afa1-5177-4268-8dfc-5b5e1a17ff7f","31d3b4c4-767e-403a-834c-51f3691bbf2b","daf3f2c8-f6a5-40bd-96b3-2c6a28931614","c08e929f-742a-4cd8-a7e6-9a3d170fe020","d9f5ccc9-5180-43b7-9c81-89ac3364ce00","dd9a3dad-5851-4899-a5c1-c23318986846","f96201d4-894e-4a72-87fb-22146039a802","364787de-93e4-4fd6-9608-dce1ad8f88c2","65873bfe-2798-42fc-ae33-02295b23b3d3","8e19ed1e-e870-4769-bd6f-321f6f47023b","4d36a1f3-29f9-45af-9480-32891a0bf8ef","e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","4124fc05-5c98-4790-a2a9-4ba2dee3d9b3","9dbd66e3-4544-4ca8-a118-272c874bc684","e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","8c30a64e-ad24-47a0-97a8-52320360fd88","643081a4-132d-463e-9d86-c8650cb2a011","6424714c-e50a-4b53-acbf-8739825ebf0b","2becddf1-d8ea-49ec-8560-c8c401faa9bb","05305a87-0b19-41bb-bf1e-0bd92bfcdc16","297f09f9-0a48-4058-81b8-66a630a3c0ea","363982dd-fc96-49ce-a499-f6401f2c212b","fe65603b-1980-446b-ae17-516eb885c6be","785c6df2-c6d0-4d6e-bd73-c3b62caca754","abf781d7-1179-4f24-8d01-5611db14eddc","7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","8eed5d21-a5e9-4bc7-b2df-4526af3e2726","be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","4dd8280d-6c01-4a06-bfd1-e1cb4c529494","f14074a2-de74-48df-b273-48791217ef4d","f926f6e3-1bd6-4259-ae7c-e14108568882","22086dab-6c7f-408f-bd0c-cc34b2ad086d","6cd02266-a42f-4675-b83e-37360dbf3c68","71f349a7-1ca3-4945-8c7d-fd68df3759ac","1dabc7da-bdf8-4c60-95de-427a4b2cb6bf","75e080fb-3ed7-4a73-a6e0-eb93f0119d68","d0e46713-238c-42b7-a996-653cf952c367","7d331987-7e2d-4975-b23b-d99a5af26ddf","b3b2fc04-4b88-4a1c-8370-04573019eebe","b40cfb22-8f17-4317-bcbb-c1c871497446","94a92db4-8704-487b-b0c5-c15d6ac20e6d","5be35eeb-62e9-4317-8804-018a9dd31149","60b55db1-53fc-45ea-93d3-e4372b1e19a5","deadde1d-7e7f-4577-bd6e-fc237c3854c5","bc4f0cce-a5cc-44c9-9e50-b504e09e7eb1","80ed7629-87dd-4bb1-8ea0-555f20d3b156","bedf20d1-1f5a-4840-8458-6d0fa974b664","62b373da-c112-40f4-9047-9cc3e8d8ab13","9329c2bd-9e56-4394-9c89-5726e8b76f2f","394b2dfb-3404-4668-94af-5acc825fcf51","1ed9f90e-d8b6-413f-bfc2-face955141bc","b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","87667b72-85ce-48c2-8023-e6db7f5fe739","0d37dddd-6575-485c-92dd-37a3c23edbf9","184aa343-0f0b-4bf5-aeeb-42111fedfbbf","24b30053-14d2-4430-9966-281e926a6918","99b4ac32-50b5-4659-a7a1-94bc708ae71a","b6d13875-fd8e-41a0-a712-3dab8b75b93f","7a3a7335-4837-4bc5-9282-448402a05d89","e3ca94a7-e506-4133-8fae-41931dc863a5","86e78a4b-706a-4ec8-be90-439461abb29d","cc13d92c-673f-4af7-9748-50342fc8795a","45d15759-2add-40db-9294-d1b391515dba","2de362c7-2c4a-4b24-bda3-f82cb6ed5990","50e243ad-0e21-43f5-b5dc-31ec61ee43d0","4beed579-3d9c-4c6d-9e88-e7df5e2b4613","be9bdbec-b52e-4174-9c5b-cf765dee855b","a24f4ab6-289a-450a-b438-1c4bb1214942","df0be435-d790-485a-b355-6f00eae29511","12a1b259-a0d5-4505-aedf-b8ca811cd5f9","ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","3f8986f3-195d-4ee5-ae8d-96a007b20883","f69e6993-2e88-4938-bfe5-cea9ab21a858","7f363efe-1ea5-4eb8-baf7-8c34456b43fc","86f46ebc-a93f-4a2b-b6e7-bab2ac95a3ae","a57b27b6-48e0-42b2-812a-2be86c113a0c","9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","788355e5-e113-4b17-ada9-fb5ef38bffa1","40c593b9-63cf-4b10-ad26-1ceb7c9491fe","3453c694-bc38-4082-9d3d-886e385df927","88a2c40a-7b95-4fd8-8ad8-81dc61d4adf5","ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","6f0e6df6-8654-4b57-b1d5-2160c5a0a54e","c48917c1-fd99-405f-b1d2-9dfec169e5d8","9aaa7ee2-727d-426f-8a2b-6b10a4cd084f","e042b102-b12c-48d1-86ef-f6d296da5b95","902f5df1-31d6-44ee-ba95-2561199db35f","5c9a2f21-d3a8-4295-a803-e0535aa29489","3deb76aa-8336-4ff9-aa98-4dcaf8901468","90e3acc6-80d5-41b4-8141-a8620a211c0e","f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","cd5d4069-6a72-41fa-ad0d-ef78de5c5a68","c9a65baa-de10-4818-97a2-b61babb28060","cae68a5f-9d1e-44e8-a34b-6a390b88c451","ffd1a98f-0fac-47fe-813f-7510d0dacbc3","424a0e73-8002-42e3-b47d-2062fc17c3b3","53ba922e-db4d-489c-b5ab-dbc4b8321206","e972d9fe-a9b7-4a65-a88f-0958fab19584","12ec8efa-2dcc-4c0c-9166-72ecc3cd463e","5536b5f4-3d31-4290-acea-9bef323bb83d","60b898a9-0490-4599-b7f1-3cd451236266","290ec637-e780-4e95-9834-6368ac0437d1","f1278d6b-60ec-4369-88cf-21df47caaec6","f8bb78a3-d1e4-4c5d-8b0a-904a83830519","9b0b8f3b-8e08-4083-9e2b-2e6bfeb01f83","f4fd69bc-8622-411d-91bb-0e214f8fb112","1526dde4-6726-470e-aebf-3272ae70a99c","e740736f-75f9-481d-990c-02018abc2ea5","30918d48-dafd-4b25-be63-70f6c7ba8a3d","5c3d081f-6f7c-4650-8a40-200f44eb4794","6e1431f2-131e-4cf2-bb60-87b889f1d11b","1943deba-33f7-4c3d-98c8-6b5319ec98ab","5133d5ea-1a12-494f-afb2-5cfaf41d9518","6d4184ab-a66c-47f1-b54e-af55f654e2a5","2b3d275d-4a48-4ac8-9c14-4dc5aa20a80b","a34ade49-964d-407c-9f60-2e8cd9dfef05","19ab385f-14f5-47cd-87b2-f4784eedcdd9","486dc66e-960c-4622-b3cb-3ff9a2d434eb","76c53aab-0288-4ac1-b399-0104e04c6457","58111f34-e9ac-47e2-b8ae-8d55c6a9ed6c","d52dd970-febb-4891-8eb7-1c8616cfb6cb","8da2792e-3ad7-4fe4-bb04-b797c3abcbe7","e50acc0f-d177-4803-aa31-fc97eeb60ff2"],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"48cb2bee-74be-4165-bc19-89c5b1c50c00","displayName":"Email","description":"Email","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"48cb2bee-74be-4165-bc19-89c5b1c50c00","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"48f508a5-5a2c-4d20-8d89-2d352a209907","displayName":"Reporting","description":"Administrative Templates\\System\\App-V\\Reporting","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"49abf969-2a98-4479-b234-6990b152cb21","displayName":"Microsoft Defender Exploit Guard","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Microsoft Defender Exploit Guard","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["98c9cd71-f6eb-4dfd-b045-85c7e0b44487","07221402-6a9c-4440-ae6f-3217ce5ad8fd"],"platforms":"windows10","technologies":"mdm"},{"id":"49d75a11-64c6-43d1-bc25-0ab156ff4216","displayName":"Microsoft Defender Antivirus","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["32ee73d6-947f-45e9-856b-793b584c626d","c4665793-15ea-44c9-bd0a-d542b3915fe0","5fe14828-4e5b-42ae-87b2-89a579045d1e","4331c310-93b0-4383-8c55-acd653f37f80","4f48b5aa-e887-49ea-a16e-3bb379ccc47c","ad100c6c-9a9a-42cf-8f42-b31c406c1a56","49abf969-2a98-4479-b234-6990b152cb21","a0f1f801-7fce-427c-b5e2-6c6b30065fa5","e06fb472-94c1-4dd9-afdf-6bb2ddaa3dc6","d99ac221-1000-44d8-9ab4-5cdac69562ed","edba50d5-da3c-48cb-8e50-381ad0bfaaaf","431c3b32-abe7-4534-81a1-9f10c8e0c512","eb5baf57-86c8-4bfa-ac3a-53025686e37c"],"platforms":"windows10","technologies":"mdm"},{"id":"4a5a066e-27af-46c1-9714-9e4542ffc1f9","displayName":"Time Language Settings","description":"Time Language Settings","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"4a5a066e-27af-46c1-9714-9e4542ffc1f9","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","displayName":"Firewall","description":"Firewall","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"4a5e4714-00ac-4793-b0cc-5049041b0ed7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"4a7b0e92-ba43-46aa-96e8-c5839dbcb524","displayName":"Note Flags","description":"Microsoft OneNote 2016\\OneNote Options\\Note Flags","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4a832199-a841-4b6a-84fa-51365902a742","displayName":"Places Bar Locations","description":"Microsoft Office 2016\\File Open/Save dialog box\\Places Bar Locations","helpText":null,"parentCategoryId":"92be4fc7-8095-441c-b52b-9861c21bc337","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4aa852ab-6269-4883-906f-0a0944fa1261","displayName":"Allow or deny screen capture","description":"Google Google Chrome Allow or deny screen capture","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4ad00da1-5ed6-47d8-aef3-70f5bcbbbc77","displayName":"Network Provider","description":"Administrative Templates\\Network\\Network Provider","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4aec010d-487a-4752-8e66-aedb9e4fbb5a","displayName":"Customizable Error Messages","description":"Microsoft Office 2016\\Customizable Error Messages","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4b2f3557-98e9-48d2-9b78-bcb100f72372","displayName":"Sleep Settings","description":"Administrative Templates\\System\\Power Management\\Sleep Settings","helpText":null,"parentCategoryId":"62b373da-c112-40f4-9047-9cc3e8d8ab13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4b540860-0858-48f4-8830-18383bb1766f","displayName":"Licensing","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Licensing","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4beed579-3d9c-4c6d-9e88-e7df5e2b4613","displayName":"Scripts","description":"Administrative Templates Scripts","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4c604a0e-9339-4c01-9536-b689bd0abe5f","displayName":"Remote Desktop Connection Client","description":"Administrative Templates Remote Desktop Services Remote Desktop Connection Client","helpText":null,"parentCategoryId":"c48917c1-fd99-405f-b1d2-9dfec169e5d8","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4ca3b8c7-0350-4043-b96d-918f24df0a3b","displayName":"DSCP value of conforming packets","description":"Administrative Templates Qo S Packet Scheduler DSCP value of conforming packets","helpText":null,"parentCategoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4cd10f38-02cf-40f2-aa87-ad70a2190a1a","displayName":"Protected Content","description":"Google Google Chrome Protected Content","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4d36a1f3-29f9-45af-9480-32891a0bf8ef","displayName":"Credentials Delegation","description":"Administrative Templates Credentials Delegation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4d69af55-f100-45fa-92e1-56d46434c647","displayName":"File Block Settings","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Security\\Trust Center\\File Block Settings","helpText":null,"parentCategoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4dae3032-1f16-4ace-911b-a957db0b8089","displayName":"AutoFormat as you type","description":"Microsoft Word 2016\\Word Options\\Proofing\\AutoFormat as you type","helpText":null,"parentCategoryId":"dc049161-17c6-411e-906b-a871b33651cd","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["b6cafb2c-81be-40cf-90d8-788f713f7099","e8ce968b-91cb-4301-ba98-b37d42bc5213","62492a4c-fd70-4275-ae5e-d60e200e3553"],"platforms":"windows10","technologies":"mdm"},{"id":"4dd8280d-6c01-4a06-bfd1-e1cb4c529494","displayName":"Wireless Display","description":"Administrative Templates Wireless Display","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4e0d279d-5ddd-4c4e-8590-6ed92129444d","displayName":"Customize","description":"Microsoft Office 2016\\Global Options\\Customize","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["13123148-c522-437f-b316-d78f5cc0d28d"],"platforms":"windows10","technologies":"mdm"},{"id":"4e349e4a-dd0b-4175-8974-a2a0f5e35b4d","displayName":"RSS Feeds","description":"Microsoft Outlook 2016\\Account Settings\\RSS Feeds","helpText":null,"parentCategoryId":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4e4deef0-4528-47d5-8869-4143c506f18b","displayName":"Custom","description":"Microsoft Visio 2016\\Disable Items in User Interface\\Custom","helpText":null,"parentCategoryId":"c67c9e69-6e69-4b63-868c-3b3df5d17e47","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4e62ada2-f091-49e1-99dd-ffdf5cf558cd","displayName":"General Options","description":"Microsoft Visio 2016\\Visio Options\\Advanced\\General Options","helpText":null,"parentCategoryId":"957a5b24-ed7a-4f84-9d73-7b6131367396","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4e8db19c-cb8e-4361-8849-1d435d50bb66","displayName":"Handwriting","description":"Handwriting","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"4e8db19c-cb8e-4361-8849-1d435d50bb66","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4f081af6-7b21-44fc-8dd9-d4e0a61a474d","displayName":"Control Policy Conflict","description":"Control Policy Conflict","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"4f081af6-7b21-44fc-8dd9-d4e0a61a474d","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4f29ef5c-6ca0-4b09-893f-01755a670877","displayName":"System Services","description":"System Services","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"4f29ef5c-6ca0-4b09-893f-01755a670877","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4f48b5aa-e887-49ea-a16e-3bb379ccc47c","displayName":"Threats","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Threats","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4f671de2-9777-4969-acf3-8d90c733434c","displayName":"Escrow Certificates","description":"Microsoft Office 2016\\Security Settings\\Escrow Certificates","helpText":null,"parentCategoryId":"50b4bc60-802c-477a-9366-80e09154595f","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"4fc4d2f3-35ee-43ec-a033-ef78da571e70","displayName":"Smart Card","description":"Administrative Templates\\Windows Components\\Smart Card","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"500d2bb1-5186-447c-818f-401f2d9065ce","displayName":"Windows Logon","description":"Windows Logon","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"500d2bb1-5186-447c-818f-401f2d9065ce","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5011ca61-1a58-42da-9c66-7763236acc84","displayName":"Streaming","description":"Administrative Templates App-V Streaming","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"501b5a30-253c-48b7-ab40-de1d100e4358","displayName":"Microsoft Teams","description":"Microsoft Teams","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"501b5a30-253c-48b7-ab40-de1d100e4358","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"501e47c0-6c18-4a88-9366-adc0bbc2c9b4","displayName":"General options for Microsoft Project","description":"Microsoft Project 2016\\Project Options\\General\\General options for Microsoft Project","helpText":null,"parentCategoryId":"3265b420-4c88-4f7b-92cc-4e23d9452eb1","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","displayName":"Tablet PC","description":"Administrative Templates\\Windows Components\\Tablet PC","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["cc8a93d5-503f-4d46-ac42-65e169642237","e8514a44-e44c-47af-a714-7697ebb2baf7","2ea4b701-fcb8-46b2-a83f-c792b861f5ad","90bbab80-ecf0-47c6-bf01-76b26a3dc503","aa67f0c0-4eb0-492f-a528-decd3e256a22","3e98c3bc-254c-445f-a1c8-4a93c2e0fcf2","917d0fb9-b5dd-401b-982b-1d32f6e0a306","575369a6-17a2-435e-81d4-71772e7d55b5"],"platforms":"windows10","technologies":"mdm"},{"id":"508b2c0e-f572-4a50-93bf-566e5b827c0e","displayName":"Printers","description":"Printers","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"508b2c0e-f572-4a50-93bf-566e5b827c0e","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"50b4bc60-802c-477a-9366-80e09154595f","displayName":"Security Settings","description":"Microsoft Office 2016\\Security Settings","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["512f133b-9d53-46b8-834f-52501f9b6527","4f671de2-9777-4969-acf3-8d90c733434c","efb8c441-bad5-4e2f-b07c-5ac299cf3d22"],"platforms":"windows10","technologies":"mdm"},{"id":"50e243ad-0e21-43f5-b5dc-31ec61ee43d0","displayName":"Lanman Server","description":"Administrative Templates Lanman Server","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"50fb9f56-84f1-4fa9-83f5-0aa0bca8ff49","displayName":"Filesystem","description":"Administrative Templates\\System\\Filesystem","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["2e71c6fd-dafa-444d-9542-55d838331939"],"platforms":"windows10","technologies":"mdm"},{"id":"512f133b-9d53-46b8-834f-52501f9b6527","displayName":"Digital Signatures","description":"Microsoft Office 2016\\Security Settings\\Digital Signatures","helpText":null,"parentCategoryId":"50b4bc60-802c-477a-9366-80e09154595f","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5133d5ea-1a12-494f-afb2-5cfaf41d9518","displayName":"Hardware Buttons","description":"Administrative Templates Hardware Buttons","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5161db41-7947-49ea-b9b3-dd92539e6783","displayName":"Start Menu and Taskbar","description":"Administrative Templates\\Start Menu and Taskbar","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["cb98f9d4-d921-4a8b-a763-cf69ce2ada62"],"platforms":"windows10","technologies":"mdm"},{"id":"517e55f5-729f-4b4d-9555-33baa95a0e5a","displayName":"Application Guard","description":"Microsoft Office 2016\\Security Settings\\Trust Center\\Application Guard","helpText":null,"parentCategoryId":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"51e0cebb-cac4-4905-9b31-539295e4b85b","displayName":"Proofing","description":"Microsoft Publisher 2016\\Publisher Options\\Proofing","helpText":null,"parentCategoryId":"c7aba693-8132-4b9f-9a69-dbaaa0ecc03d","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5214f1e7-a5a9-4de5-80b4-2f7084a8d068","displayName":"Accounts","description":"Accounts > Accounts","helpText":null,"parentCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","rootCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"522c3302-7a25-4904-a274-66cef9fd6aa0","displayName":"Microsoft Office","description":"Microsoft Office","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"522c3302-7a25-4904-a274-66cef9fd6aa0","childCategoryIds":["b5169b74-41be-460a-9402-b13b6c22582b","19ba782c-3594-45da-b829-72b54f6d45c7","191a84f2-13b5-4609-808f-8b743b7f0247"],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"5261c543-0bf4-49a8-9657-45e2044420d1","displayName":"Messaging","description":"Messaging","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"5261c543-0bf4-49a8-9657-45e2044420d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"526e363a-84db-4256-a13c-e01c8c646e26","displayName":"Idle Browser Actions","description":"Microsoft Edge Idle Browser Actions","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","displayName":"Remote Remediation","description":"Remote Remediation","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"52e76943-bfc9-4fb5-bdc8-5d4e8c6a436e","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5371d50c-0aaa-425a-a075-2cb1c59968b9","displayName":"MS Security Guide","description":"Administrative Templates\\MS Security Guide","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"53936d6e-5445-4897-8a40-e3f810ea50c4","displayName":"Shutdown Options","description":"Administrative Templates\\System\\Shutdown Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"53ba922e-db4d-489c-b5ab-dbc4b8321206","displayName":"Microsoft User Experience Virtualization","description":"Administrative Templates Microsoft User Experience Virtualization","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["c0ea0178-ad93-4596-94b2-9d7d1bbe8789","5966d21b-220b-4937-9323-c6dd46cda942"],"platforms":"windows10","technologies":"mdm"},{"id":"5401711f-292a-487a-be18-f99593a0477c","displayName":"Font","description":"System Configuration\\ Font","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"5454d0eb-7eaa-4500-a1fb-f69b76aed740","displayName":"Connections","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Connections","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"54f2e032-bdcc-4877-b7a0-973d0a7c1653","displayName":"Startup Home page and New Tab page","description":"Google Google Chrome - Default Settings users can override Startup Home page and New Tab page","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5536b5f4-3d31-4290-acea-9bef323bb83d","displayName":"Ctrl Alt Del Options","description":"Administrative Templates Ctrl Alt Del Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"55a61bb8-e023-4741-8213-99995c5902e5","displayName":"System","description":"Administrative Templates Event Log Service System","helpText":null,"parentCategoryId":"f14fcb64-a868-4531-a3b4-c3cdf03c2b99","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"55c888df-44ff-49d1-808e-ad9cb8429aff","displayName":"Device Health Monitoring","description":"Device Health Monitoring","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"55c888df-44ff-49d1-808e-ad9cb8429aff","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"55eebd7c-beb9-48b6-907f-df4997e18bdb","displayName":"Predefined","description":"Microsoft Access 2016\\Disable Items in User Interface\\Predefined","helpText":null,"parentCategoryId":"b8158968-c839-4d37-9eb8-887bd6fd7402","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"569c6b8d-9491-471b-9960-17e3ac60734a","displayName":"RSS Feeds","description":"Administrative Templates\\Windows Components\\RSS Feeds","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"56c54112-2991-4bda-9e01-e6868bd07726","displayName":"Printer Provisioning","description":"Printer Provisioning","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"56c54112-2991-4bda-9e01-e6868bd07726","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"56e510be-ca39-46a2-9eb2-6f1af6d4b16a","displayName":"Browser","description":"Microsoft Word 2016\\Word Options\\Advanced\\Web Options...\\Browser","helpText":null,"parentCategoryId":"2108b443-384c-4bb3-9b9f-acb4a754a86a","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"56fdfd66-f34d-4bf8-b951-f130114ffb3d","displayName":"Branch Cache","description":"Administrative Templates Branch Cache","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"572bc940-42d4-4e00-ac55-012e9b90f6df","displayName":"Remote Desktop Services","description":"Administrative Templates\\Windows Components\\Remote Desktop Services","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["2d8634c7-19ca-46e0-923d-019ba18ff4e0","66e289cf-85cb-425f-94a1-54777950f78b","85c586a6-6b68-48b2-8050-c4fb86aff486","394ae912-b5c9-45a0-8883-84791c6acb16","a4877a42-7e62-4216-a477-0b35357ab313"],"platforms":"windows10","technologies":"mdm"},{"id":"57514d69-d9b1-469a-9b54-b5e94320c2a1","displayName":"Windows Subsystem For Linux","description":"Windows Subsystem For Linux","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","childCategoryIds":["a787672d-4a33-455b-a2db-e340eb35a5c8"],"platforms":"windows10","technologies":"mdm"},{"id":"575369a6-17a2-435e-81d4-71772e7d55b5","displayName":"Input Panel","description":"Administrative Templates\\Windows Components\\Tablet PC\\Input Panel","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"577d5951-fc56-4906-90bc-2c508c6611ad","displayName":"Microsoft Defender for Endpoint","description":"Microsoft Defender for Endpoint","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"577d5951-fc56-4906-90bc-2c508c6611ad","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"579d6272-8708-4b22-a352-89cbd705ca82","displayName":"Security","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Security","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"58111f34-e9ac-47e2-b8ae-8d55c6a9ed6c","displayName":"Credential User Interface","description":"Administrative Templates Credential User Interface","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5838ed03-2902-4931-92cf-e349ab09c9b8","displayName":"PowerPoint Designer","description":"Microsoft Office 2016\\Tools | Options | General | Service Options...\\PowerPoint Designer","helpText":null,"parentCategoryId":"af14a55b-d79b-4299-946c-b7582412b748","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"586c5c5a-15cd-4592-beae-1709c6daf5b7","displayName":"Internet Control Panel","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel","helpText":null,"parentCategoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["d2da164d-dd77-4489-b67f-d7fbdb19cde2","3969f56d-a8b5-4509-86fb-00eb481665fa"],"platforms":"windows10","technologies":"mdm"},{"id":"5886bba1-bc05-46ca-afbf-66d1b4265ca4","displayName":"General","description":"Microsoft Excel 2016\\Excel Options\\General","helpText":null,"parentCategoryId":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"58ae30f4-10a2-4144-a593-b5f5bd93c10d","displayName":"Locked- Down Trusted Sites Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Locked- Down Trusted Sites Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5900ac65-f656-459c-bd82-1329a862544d","displayName":"Deprecated policies","description":"Google Google Chrome Deprecated policies","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5915e06c-9b74-4c5e-86de-93e67ae183de","displayName":"Online Assistance","description":"Administrative Templates\\Windows Components\\Online Assistance","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5966d21b-220b-4937-9323-c6dd46cda942","displayName":"Applications","description":"Administrative Templates Microsoft User Experience Virtualization Applications","helpText":null,"parentCategoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5995d2ad-5ec7-49d2-ada2-d9c2b57746ba","displayName":"Directory Service","description":"Authentication > Directory Service","helpText":null,"parentCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","rootCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"59c9b1c4-1757-4cf3-9b27-954dafe016d5","displayName":"Trust Center","description":"Microsoft Office 2016\\Privacy\\Trust Center","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"59d29716-55b0-4014-a458-38b408ff9530","displayName":"Content settings","description":"Google Google Chrome Content settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5a92aaed-3c64-4074-bacf-91dc1896d6f1","displayName":"Windows PowerShell","description":"Administrative Templates\\Windows Components\\Windows PowerShell","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5b1be2c5-9939-4b2e-b29b-b22069455c90","displayName":"Microsoft Save As PDF and XPS add-ins","description":"Microsoft Office 2016\\Microsoft Save As PDF and XPS add-ins","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5b327ef8-f9fb-4e10-ba9e-8a8ca9bf4ed9","displayName":"FileVault Options","description":"FileVault > FileVault Options","helpText":null,"parentCategoryId":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","rootCategoryId":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"5b832259-c30b-43bb-b249-9d3ea4d5b028","displayName":"Customizable Error Messages","description":"Microsoft Excel 2016\\Customizable Error Messages","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5bb9fb31-007d-4e3f-967b-11e865fcdc70","displayName":"Group Policy snap-in extensions","description":"Administrative Templates Group Policy Group Policy snap-in extensions","helpText":null,"parentCategoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5bd0eaf1-1818-44e8-9168-fc75c5739cc8","displayName":"Application Guard settings","description":"Microsoft Edge\\Application Guard settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5bd8c27a-0141-4bbf-93f7-214b2389ff2d","displayName":"Edit","description":"Microsoft Project 2016\\Project Options\\Edit","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["d33133b4-77df-429a-9580-ed70f7da676d","3db7e884-6077-4b96-ace3-005a6b49ecc0","06c4a76a-805b-4370-9d80-08e720ab2305"],"platforms":"windows10","technologies":"mdm"},{"id":"5be35eeb-62e9-4317-8804-018a9dd31149","displayName":"Online Assistance","description":"Administrative Templates Online Assistance","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5bf4c2ba-be08-4cda-bf33-d10707580d78","displayName":"Present Online","description":"Microsoft Office 2016\\Present Online","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["0be98651-a552-4470-b2dc-71c66a5ce1e6"],"platforms":"windows10","technologies":"mdm"},{"id":"5c1c00f2-def5-4064-925d-aedf4aa0f060","displayName":"Microsoft Support Diagnostic Tool","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Microsoft Support Diagnostic Tool","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5c3d081f-6f7c-4650-8a40-200f44eb4794","displayName":"File Classification Infrastructure","description":"Administrative Templates\\System\\File Classification Infrastructure","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5c4224e0-6a48-4665-9332-958d98124157","displayName":"File Block Settings","description":"Microsoft Excel 2016\\Excel Options\\Security\\Trust Center\\File Block Settings","helpText":null,"parentCategoryId":"7490c4fd-c326-42f7-9908-006504616d4c","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5c4df3be-80b0-40cc-a8c8-0258120b0de5","displayName":"Tamper protection","description":"Microsoft Defender Tamper protection","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"5c645a3e-bc39-44e9-8786-4c82e0553d22","displayName":"ODFC Containers","description":"FS Logix ODFC Containers","helpText":null,"parentCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":["81eb92d0-acda-4ea2-8183-29ed5457276b","0bae3158-5f75-4e25-acf4-859d2612f892"],"platforms":"windows10","technologies":"mdm"},{"id":"5c722b3f-9d77-428a-b859-3fb556162cd6","displayName":"Cellular","description":"Networking > Cellular","helpText":null,"parentCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","rootCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"5c9a2f21-d3a8-4295-a803-e0535aa29489","displayName":"System Restore","description":"Administrative Templates System Restore","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","displayName":"Auditing","description":"Auditing","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"5cb7f4f0-ef00-4eb3-80f4-2c2b97b053ea","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,microsoftSense"},{"id":"5cd6dc4f-b231-449f-bc10-16041b73356a","displayName":"Contact Card","description":"Microsoft Office 2016\\Contact Card","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["20bacabf-cd07-48be-a184-f0ae76d31e4a"],"platforms":"windows10","technologies":"mdm"},{"id":"5d03766c-9480-43f2-9e85-461a44c821d4","displayName":"Button Settings","description":"Administrative Templates Power Management Button Settings","helpText":null,"parentCategoryId":"290ec637-e780-4e95-9834-6368ac0437d1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5d19c257-8b7e-4071-9303-19317c94d7f7","displayName":"Credential User Interface","description":"Administrative Templates\\Windows Components\\Credential User Interface","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5d4e843b-2848-4508-9143-cb3217c2fe83","displayName":"RDP Shortpath","description":"Administrative Templates Windows Components Remote Desktop Services Remote Desktop Session Host Azure Virtual Desktop RDP Shortpath","helpText":null,"parentCategoryId":"845ff38a-408b-449c-9ef3-7fdc331027df","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5d8272e2-1ed3-4a8d-9555-9a87fa13d078","displayName":"Customize","description":"Microsoft Office 2016 (Machine)\\Global Options\\Customize","helpText":null,"parentCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","displayName":"Browser","description":"Browser","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"5d835ac8-2e5e-4887-8e4d-0c3846d0ad9f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager"},{"id":"5dcea340-0469-4f43-b270-a49ed0597201","displayName":"Mitigation Options","description":"Administrative Templates Mitigation Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","displayName":"Other","description":"Microsoft Outlook 2016\\Outlook Options\\Other","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["6535c74f-74ac-4713-9c7a-ae15f62e97aa","f29a5e42-24f5-47fb-bdcf-9ed9418035ee"],"platforms":"windows10","technologies":"mdm"},{"id":"5e692f3e-1911-43b0-9192-64c2e65b7c10","displayName":"Education","description":"Education","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"5e692f3e-1911-43b0-9192-64c2e65b7c10","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5e8e9c7f-1988-45cd-b5ca-78d939e3d49e","displayName":"Downloads","description":"Microsoft Edge Downloads","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","displayName":"Microsoft Visio 2016","description":"Microsoft Visio 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["c67c9e69-6e69-4b63-868c-3b3df5d17e47","e6f727b7-f474-4010-b214-83149ffdac2b","d5b3cab7-d486-4f74-8525-6bd740b950bc","f106d9e2-60ce-4e16-b74d-bd9ef401d7ba"],"platforms":"windows10","technologies":"mdm"},{"id":"5ee1e57c-db64-4f8e-a9ec-5308b5c633c4","displayName":"Generative AI","description":"Google Google Chrome Generative AI","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","displayName":"OneDrive","description":"OneDrive","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"5ee629c1-94da-49b3-b7a1-a24b279f36d4","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5f048379-3a42-43f0-9fd5-d269f292aa35","displayName":"Workflow Cache","description":"Microsoft Office 2016\\Miscellaneous\\Workflow Cache","helpText":null,"parentCategoryId":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","displayName":"Remote Session Environment","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Remote Session Environment","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["b7bde490-eac6-4f57-8808-e0786b8191a1"],"platforms":"windows10","technologies":"mdm"},{"id":"5f71c40e-01aa-42d2-9c8c-7d560126cd4b","displayName":"App Analytics","description":"Managed Settings App Analytics","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","displayName":"Trust Center","description":"Microsoft Word 2016\\Word Options\\Security\\Trust Center","helpText":null,"parentCategoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["8391e79d-d618-47c3-979c-83544da43739","c8cdd1a5-3f43-47c5-a775-d27bba4411f5","fe786056-6f4a-4d16-bff4-5fbb640308d2"],"platforms":"windows10","technologies":"mdm"},{"id":"5fe14828-4e5b-42ae-87b2-89a579045d1e","displayName":"Real-time Protection","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Real-time Protection","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"607a1c39-a3db-496f-8db6-c99d67f5f76c","displayName":"Tools | Security","description":"Microsoft Access 2016\\Tools | Security","helpText":null,"parentCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":["a788a6e5-ab3f-41e5-96c8-ee59627dcb4d"],"platforms":"windows10","technologies":"mdm"},{"id":"60a3188c-7ee3-40db-8f9f-33648dc74555","displayName":"Shutdown Options","description":"Administrative Templates\\Windows Components\\Shutdown Options","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"60b55db1-53fc-45ea-93d3-e4372b1e19a5","displayName":"Shutdown","description":"Administrative Templates Shutdown","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"60b898a9-0490-4599-b7f1-3cd451236266","displayName":"Microsoft account","description":"Administrative Templates Microsoft account","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"60ea21c6-4c2b-4510-83f4-3a2d04fd99a0","displayName":"Enabled Editing Languages","description":"Microsoft Office 2016\\Language Preferences\\Editing Languages\\Enabled Editing Languages","helpText":null,"parentCategoryId":"3512a9f5-d692-4a1f-aedd-1bd431ae893e","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"60ea8de3-bc6d-4b01-974a-a53860fe4ef6","displayName":"i SCSI Target Discovery","description":"Administrative Templatesi SCS Ii SCSI Target Discovery","helpText":null,"parentCategoryId":"3f693856-7cbb-4a1c-93be-0d05aa41059f","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"61205786-952e-489c-91f7-5654a5bde11b","displayName":"Resultant Set of Policy snap-in extensions","description":"Administrative Templates\\Windows Components\\Microsoft Management Console\\Restricted/Permitted snap-ins\\Group Policy\\Resultant Set of Policy snap-in extensions","helpText":null,"parentCategoryId":"3d32fb39-ff23-48d9-9890-c8625d2d21e9","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"618e0144-c57c-45e1-8b55-94dd3d9fec33","displayName":"Windows Connection Manager","description":"Administrative Templates\\Network\\Windows Connection Manager","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"61ecc5ec-c494-420b-a27b-a8d2fbdd7df1","displayName":"E-mail Options","description":"Microsoft Word 2016\\Word Options\\Advanced\\E-mail Options","helpText":null,"parentCategoryId":"83087772-6560-4488-a1c5-bb6e4889e868","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"622c83ff-f780-47e6-8b9c-bf82552e3f04","displayName":"Scripted Window Security Restrictions","description":"Administrative Templates Internet Explorer Security Features Scripted Window Security Restrictions","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"623d41fb-000e-41d8-b955-373f8c700def","displayName":"Security","description":"Microsoft Project 2016\\Project Options\\Security","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["26dfd0a7-546b-4583-b0c7-85b98ac5a40c","1671dfc3-a1dd-4178-9093-10fb6b62586a","cc50f179-0c39-4486-a555-de5a6e6ed365"],"platforms":"windows10","technologies":"mdm"},{"id":"62492a4c-fd70-4275-ae5e-d60e200e3553","displayName":"Apply as you type","description":"Microsoft Word 2016\\Word Options\\Proofing\\AutoFormat as you type\\Apply as you type","helpText":null,"parentCategoryId":"4dae3032-1f16-4ace-911b-a957db0b8089","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"62499519-97eb-43e7-ae96-d7909c5820d3","displayName":"Printing","description":"Google Google Chrome Printing","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"62b373da-c112-40f4-9047-9cc3e8d8ab13","displayName":"Power Management","description":"Administrative Templates\\System\\Power Management","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["01bbe7c3-10eb-40a3-8387-c74c33c294b1","17f0fdd3-e292-4ecb-ab5f-e4848e9cae1a","7120bf9e-e5f6-42cd-8f7e-15d2ca445c37","015936bf-8273-4499-bb71-33b385ee7d16","4b2f3557-98e9-48d2-9b78-bcb100f72372","d5585700-13a0-4ab4-9b19-4c15c1ead170"],"platforms":"windows10","technologies":"mdm"},{"id":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","displayName":"Remote Desktop Session Host","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host","helpText":null,"parentCategoryId":"c48917c1-fd99-405f-b1d2-9dfec169e5d8","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["579d6272-8708-4b22-a352-89cbd705ca82","b40b8f80-c0e6-4494-8085-f90cadc167a9","0bf6e038-dc12-44c3-94fb-e5c4ffe6375c","5454d0eb-7eaa-4500-a1fb-f69b76aed740","2a1bbe00-0730-430e-8d19-3eec2fd6b63c","4b540860-0858-48f4-8830-18383bb1766f","5f28f9ff-58f8-43af-9692-3d06e083bbd9","89ad0055-1603-420e-940d-9944a63e3da9","ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","f1455024-7de9-448f-8d8f-a42db2af0a35"],"platforms":"windows10","technologies":"mdm"},{"id":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","displayName":"Security","description":"Security","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","childCategoryIds":["d68abc4d-559a-4339-be48-c41a77a87034","8abddb23-7036-4ba8-8912-529279a849ea","f4a8384f-9e4e-4fc6-9ee2-28fa5260347a"],"platforms":"iOS,macOS,windows10","technologies":"mdm,appleRemoteManagement"},{"id":"634e4243-284b-4cb7-a7e6-08ca7e262937","displayName":"Attachment Manager","description":"Administrative Templates Attachment Manager","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6355e85b-aeef-49e8-b8c9-5d6cd9a39985","displayName":"Extension snap-ins","description":"Administrative Templates\\Windows Components\\Microsoft Management Console\\Restricted/Permitted snap-ins\\Extension snap-ins","helpText":null,"parentCategoryId":"9e882396-4a1c-4d06-a62d-8d910ded8e7d","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"63b9904f-bbdf-4461-954a-c1d67fa8b357","displayName":"File Explorer","description":"File Explorer","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"63b9904f-bbdf-4461-954a-c1d67fa8b357","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"63ca5d8b-829d-42c5-92e8-35f9ca47fb0e","displayName":"IMAP","description":"Microsoft Outlook 2016\\Account Settings\\IMAP","helpText":null,"parentCategoryId":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"63e167a4-65be-4d34-9e9c-186466f2b064","displayName":"Troubleshooting","description":"Troubleshooting","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"63e167a4-65be-4d34-9e9c-186466f2b064","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6424714c-e50a-4b53-acbf-8739825ebf0b","displayName":"Personalization","description":"Administrative Templates Personalization","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"643081a4-132d-463e-9d86-c8650cb2a011","displayName":"Network Provider","description":"Administrative Templates Network Provider","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"64538726-8745-4e7a-b370-332f725b58bf","displayName":"System Policy Managed","description":"System Policy > System Policy Managed","helpText":null,"parentCategoryId":"361dc9bb-0cf7-4d8b-af4b-6117aeb46511","rootCategoryId":"361dc9bb-0cf7-4d8b-af4b-6117aeb46511","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"64c8233f-3057-4485-b902-d71a312318d7","displayName":"Scheduled scan configuration","description":"Microsoft Defender Scheduled scan configuration","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","displayName":"Network Isolation","description":"Network Isolation","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"64cf78b2-0594-4178-8e80-bdfe3dc38e63","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager"},{"id":"65087b94-7e45-4d74-a50d-df4377b67499","displayName":"Parental Controls Dictionary","description":"Parental Controls > Parental Controls Dictionary","helpText":null,"parentCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","rootCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"652a676c-9d60-4c9a-88b6-823a24961a9b","displayName":"Copilot Settings","description":"Visual Studio Copilot Settings","helpText":null,"parentCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","rootCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6535c74f-74ac-4713-9c7a-ae15f62e97aa","displayName":"Advanced","description":"Microsoft Outlook 2016\\Outlook Options\\Other\\Advanced","helpText":null,"parentCategoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["13eb248a-4549-4d23-9ada-23b40edf36bf"],"platforms":"windows10","technologies":"mdm"},{"id":"65873bfe-2798-42fc-ae33-02295b23b3d3","displayName":"Security Account Manager","description":"Administrative Templates System Security Account Manager","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"66395272-f132-4170-b88e-87f794f987f4","displayName":"File Locations","description":"Microsoft Visio 2016\\Visio Options\\Advanced\\File Locations","helpText":null,"parentCategoryId":"957a5b24-ed7a-4f84-9d73-7b6131367396","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"66448b13-cc0a-4ffe-9ad5-62c4821dc77f","displayName":"Setup","description":"Administrative Templates\\Windows Components\\Event Log Service\\Setup","helpText":null,"parentCategoryId":"fcddcc0b-7cf8-4ebc-a818-d10689603263","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"66615d2a-fec9-47f1-8eaf-9813e30cc023","displayName":"Extensions","description":"Microsoft Edge\\Extensions","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"66c92e07-234b-4992-a081-9afe4c113ba3","displayName":"SCEP certificate","description":"SCEP certificate","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"66c92e07-234b-4992-a081-9afe4c113ba3","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"66e289cf-85cb-425f-94a1-54777950f78b","displayName":"Remote Desktop Session Host","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host","helpText":null,"parentCategoryId":"572bc940-42d4-4e00-ac55-012e9b90f6df","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["92503b7f-9fa0-4365-8482-57dd61e6d535","cc9231e6-ed1b-4680-aff4-bc72f16733c0","8778eb21-bf7c-41a7-bae1-412c0e3029db","2cc013ad-e5a3-42d9-b2b6-2a872a4c086d","b237a91d-a442-4a7e-8169-1bd6c798f490","bd1bf2cb-c806-479b-a68c-af9dffd438c9","ce572b49-4d47-47b6-b787-ac1252753581","0c2613c9-a7c7-4458-8b0d-2fff13e2beeb","845ff38a-408b-449c-9ef3-7fdc331027df","fe52de11-190e-4429-96c1-106b22724456","f3264346-fdc4-4e23-9a2a-dcfc34022e59"],"platforms":"windows10","technologies":"mdm"},{"id":"6730f0be-a129-4b48-942f-e4ddf69fee66","displayName":"Customizable Error Messages","description":"Microsoft Access 2016\\Customizable Error Messages","helpText":null,"parentCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6776f6fa-8836-408c-b91c-1e444e0cba5c","displayName":"Security Features","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features","helpText":null,"parentCategoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["1671f10e-7300-46e3-a93f-ef38bf906cb1","a126378d-a916-476e-ad91-e3bd82fd3a48","91ed1812-8841-4eb3-b24e-a5e1f4eaa6c8","3e50e056-24bf-46c3-975f-b0aedbc96329","d39f73b0-9d26-4d4c-a8b0-d1b720890d2e","89c0381d-3b9b-4be5-8077-ffb18d47e910","829d1e81-4cbc-4259-bd0e-8cc44870f00e","8d5ce834-5b70-4ec2-8d07-eae26ab6493f","b74f852c-d19b-4a22-a44a-431f7a72a4d6"],"platforms":"windows10","technologies":"mdm"},{"id":"67b48a23-9bc3-48f5-bf6e-c9b3cd7000e4","displayName":"File Revocation","description":"Administrative Templates\\Windows Components\\File Revocation","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"67c06154-a798-44bb-83c8-d706a3709c10","displayName":"Layer-2 priority value","description":"Administrative Templates\\Network\\QoS Packet Scheduler\\Layer-2 priority value","helpText":null,"parentCategoryId":"01f2fac4-fdab-4391-bebe-ebdf6d8fcc77","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"67cd904c-78e0-4e77-9dd4-c713b21763f3","displayName":"User interface preferences","description":"Microsoft Defender > User interface preferences","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"67eb1dab-7805-41bb-af5a-798dc7e29f23","displayName":"Autocorrect Options","description":"Microsoft Excel 2016\\Excel Options\\Proofing\\Autocorrect Options","helpText":null,"parentCategoryId":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"68237832-f376-4f0e-ba26-4e06fce7a35d","displayName":"Device Installation Restrictions","description":"Administrative Templates Device Installation Device Installation Restrictions","helpText":null,"parentCategoryId":"8da2792e-3ad7-4fe4-bb04-b797c3abcbe7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"684799ba-398b-4728-aa21-40c8469cbe87","displayName":"Printers","description":"Administrative Templates\\Control Panel\\Printers","helpText":null,"parentCategoryId":"7a3a7335-4837-4bc5-9282-448402a05d89","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"686ae3dd-a663-4484-854e-8f8d578fe3b8","displayName":"Converters","description":"Microsoft PowerPoint 2016 (Machine)\\Converters","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"686ae3dd-a663-4484-854e-8f8d578fe3b8","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"68a3b82d-d1f4-422d-bfee-2168ec260ad7","displayName":"Portable Operating System","description":"Administrative Templates Portable Operating System","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"69931627-230d-4df9-bbef-e3eac64ea8ef","displayName":"Additional Actions","description":"Microsoft Office 2016\\Tools | AutoCorrect Options... (Excel, PowerPoint and Access)\\Additional Actions","helpText":null,"parentCategoryId":"8084033c-156a-4d1b-ab0b-159541810459","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"69ec00d9-5698-4b8b-ad54-8d9a537a0fa9","displayName":"Internet Information Services","description":"Administrative Templates\\Windows Components\\Internet Information Services","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","displayName":"Advanced","description":"Microsoft Publisher 2016\\Publisher Options\\Advanced","helpText":null,"parentCategoryId":"c7aba693-8132-4b9f-9a69-dbaaa0ecc03d","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":["77b0357b-412e-4a81-9469-e20a5f1345fd"],"platforms":"windows10","technologies":"mdm"},{"id":"6ad0e199-ff50-4e86-b22f-b55ef4ff2329","displayName":"Save","description":"Microsoft Project 2016\\Project Options\\Save","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["dfd5d749-c68c-448f-ab3f-851c09f09df4","e13ec567-e29c-4ca0-b599-e8c43587f10a","d679b407-a753-40aa-bc9f-175f363b0eff"],"platforms":"windows10","technologies":"mdm"},{"id":"6ae0d607-832c-403b-b3bc-c563e390ebad","displayName":"Save/Open","description":"Microsoft Visio 2016\\Visio Options\\Advanced\\Save/Open","helpText":null,"parentCategoryId":"957a5b24-ed7a-4f84-9d73-7b6131367396","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","displayName":"Server Settings","description":"Microsoft Office 2016\\Server Settings","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["8e143bee-82fa-4e45-8bd0-c4032b0182d2"],"platforms":"windows10","technologies":"mdm"},{"id":"6b71fbf6-7156-471a-b488-3eece04bda86","displayName":"Printing","description":"Microsoft Edge - Default Settings (users can override)\\Printing","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","displayName":"Tools | Options | Spelling","description":"Microsoft Office 2016\\Tools | Options | Spelling","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["df357f0c-78fe-4aee-a465-f3da7499077e"],"platforms":"windows10","technologies":"mdm"},{"id":"6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","displayName":"Math Settings","description":"Declarative Device Management preview Math Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"6b87c5da-cfd9-44bc-be05-ed08eb2144c7","displayName":"User Accounts","description":"Administrative Templates User Accounts","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","displayName":"Desktop","description":"Administrative Templates\\Desktop","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["f4f0dfd7-4638-4173-8b3b-0f08608bf330","a69e7a98-5af7-4834-bae1-2a1047663a71"],"platforms":"windows10","technologies":"mdm"},{"id":"6bed088c-c9b0-4149-b26f-df0c247cdb5b","displayName":"Network Connectivity Status Indicator","description":"Administrative Templates Network Connectivity Status Indicator","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6c142a01-47fa-422d-8135-29e81bc970cc","displayName":"Conversion Service","description":"Microsoft Office 2016\\Tools | Options | General | Service Options...\\Conversion Service","helpText":null,"parentCategoryId":"af14a55b-d79b-4299-946c-b7582412b748","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6c1d9109-e4d1-4718-a537-dd685464fdbe","displayName":"i SCSI Security","description":"Administrative Templatesi SCS Ii SCSI Security","helpText":null,"parentCategoryId":"3f693856-7cbb-4a1c-93be-0d05aa41059f","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6c7168c3-6f34-4086-af0b-ed0b74301dc9","displayName":"Security Settings","description":"Administrative Templates Service Control Manager Settings Security Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6cd02266-a42f-4675-b83e-37360dbf3c68","displayName":"WLAN Media Cost","description":"Administrative Templates WLAN Service WLAN Media Cost","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6d1e32eb-61f7-4907-b9fe-b83fda8ad67d","displayName":"Customize Ribbon","description":"Microsoft Publisher 2016\\Publisher Options\\Customize Ribbon","helpText":null,"parentCategoryId":"c7aba693-8132-4b9f-9a69-dbaaa0ecc03d","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6d4184ab-a66c-47f1-b54e-af55f654e2a5","displayName":"Hotspot Authentication","description":"Administrative Templates Hotspot Authentication","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6d529e48-5477-4ceb-8ff7-c6e959a0e24f","displayName":"Related Website Sets Settings","description":"Microsoft Edge Related Website Sets Settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"6d6b289c-c1e9-4004-b5ab-3123920cf10d","displayName":"Password manager","description":"Google Google Chrome - Default Settings users can override Password manager","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6e1431f2-131e-4cf2-bb60-87b889f1d11b","displayName":"Link- Layer Topology Discovery","description":"Administrative Templates Link- Layer Topology Discovery","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6efb8802-223a-46a7-b13f-a68f28f8b2c2","displayName":"Login Items","description":"Login > Login Items","helpText":null,"parentCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","rootCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"6f0e6df6-8654-4b57-b1d5-2160c5a0a54e","displayName":"Pen Flicks Learning","description":"Administrative Templates Pen Flicks Learning","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6f1386e5-148d-4dc3-84d1-79df721e3233","displayName":"Default search provider","description":"Microsoft Edge - Default Settings (users can override)\\Default search provider","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6fafeb5c-65ce-4993-b421-46e60da69131","displayName":"HTTP authentication","description":"Microsoft Edge - Default Settings (users can override)\\HTTP authentication","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"6fd44fd0-80d1-47a0-acad-c115e5b807b6","displayName":"General","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Advanced\\Web Options...\\General","helpText":null,"parentCategoryId":"76b233cc-f977-4305-b02f-deef6667251d","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"70063d93-03f0-462e-9943-b0241b88d54d","displayName":"Desktop App Installer","description":"Administrative Templates Windows Components Desktop App Installer","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"70498fad-5ddb-4730-8130-d755ff675760","displayName":"Default search provider","description":"Google Google Chrome Default search provider","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"70b0e7ef-ceac-4c25-8f9f-5a6bf07163b6","displayName":"Calendar Type","description":"Microsoft Project 2016\\Project Options\\View\\Calendar Type","helpText":null,"parentCategoryId":"28c4859e-1faa-4b51-96cf-068cb4354093","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"70b5da13-9c31-4857-890d-b7eb223729c3","displayName":"Firewall","description":"Networking > Firewall","helpText":null,"parentCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","rootCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"70c4566f-a079-4a8e-ac97-0736b405df1d","displayName":"Work profile password","description":"Device Restriction Work profile password","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise","technologies":"android"},{"id":"70d374bf-6444-4b74-a879-a29e4d44c566","displayName":"News And Interests","description":"News And Interests","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"70d374bf-6444-4b74-a879-a29e4d44c566","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"70dd505d-40d4-4685-b639-67efc9274ec4","displayName":"Typosquatting Checker settings","description":"Microsoft Edge - Default Settings (users can override)\\ Typosquatting Checker settings","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7120bf9e-e5f6-42cd-8f7e-15d2ca445c37","displayName":"Power Throttling Settings","description":"Administrative Templates\\System\\Power Management\\Power Throttling Settings","helpText":null,"parentCategoryId":"62b373da-c112-40f4-9047-9cc3e8d8ab13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"712d184f-d9ac-45fc-9eea-aade3a22b55e","displayName":"Volume Activation","description":"Microsoft Office 2016 (Machine)\\Volume Activation","helpText":null,"parentCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"717b634f-72a6-44f6-92c5-e1397bb10f40","displayName":"Keyboard Filter","description":"Keyboard Filter","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"717b634f-72a6-44f6-92c5-e1397bb10f40","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"719595d8-ab5d-4418-88aa-8cd55c2964ba","displayName":"Cloud Cache","description":"FS Logix Profile Containers Cloud Cache","helpText":null,"parentCategoryId":"0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"71f349a7-1ca3-4945-8c7d-fd68df3759ac","displayName":"Enhanced Storage Access","description":"Administrative Templates\\System\\Enhanced Storage Access","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"71f4af65-b7fa-4c54-bf73-19b0c7ffe162","displayName":"Tracking Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\E-mail Options\\Tracking Options","helpText":null,"parentCategoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"71f79fa3-14c0-4df8-bf9c-8476e36ea755","displayName":"Operating system settings","description":"Operating system settings","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"71f79fa3-14c0-4df8-bf9c-8476e36ea755","childCategoryIds":[],"platforms":"windows10","technologies":"windowsOsRecovery"},{"id":"71f9795f-defc-4b03-a2b4-31e129b6f861","displayName":"Network Sharing","description":"Administrative Templates\\Windows Components\\Network Sharing","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7226f8a2-c542-471a-8d9e-e0df527325d3","displayName":"Notification Settings","description":"Administrative Templates Power Management Notification Settings","helpText":null,"parentCategoryId":"290ec637-e780-4e95-9834-6368ac0437d1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"724d930a-7a3c-4171-a17c-431cee336518","displayName":"Software Update Settings","description":"Managed Settings Software Update Settings","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"725adbdf-1eb8-45c4-8eb1-44747bd1615d","displayName":"Define Shared Workspace URL's","description":"Microsoft Office 2016\\Global Options\\Customize\\Shared Workspace\\Define Shared Workspace URL's","helpText":null,"parentCategoryId":"13123148-c522-437f-b316-d78f5cc0d28d","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"728890f5-bddd-4b69-a1b6-efb221d902d4","displayName":"RemoteFX USB Device Redirection","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Connection Client\\RemoteFX USB Device Redirection","helpText":null,"parentCategoryId":"a4877a42-7e62-4216-a477-0b35357ab313","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"72972c43-36a3-4034-8cc8-334c99087798","displayName":"Instant Search","description":"Administrative Templates Instant Search","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"72a7524b-11c5-4695-9fcf-6cf30c8ba2b9","displayName":"First Run","description":"Microsoft Office 2016\\First Run","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"72dfdba4-e7bb-4f09-862c-e003ea763452","displayName":"Internet Communication settings","description":"Administrative Templates\\System\\Internet Communication Management\\Internet Communication settings","helpText":null,"parentCategoryId":"184aa343-0f0b-4bf5-aeeb-42111fedfbbf","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"72f61c7d-e5d2-4170-baf3-c953c1082e19","displayName":"Controlled Folder Access","description":"Administrative Templates Microsoft Defender Antivirus Microsoft Defender Exploit Guard Controlled Folder Access","helpText":null,"parentCategoryId":"ad84cea3-5664-4e42-a9d6-1446828bea45","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"73415dea-0103-4427-83c5-6c97bf81af1d","displayName":"Save Documents","description":"Microsoft Visio 2016\\Visio Options\\Save\\Save Documents","helpText":null,"parentCategoryId":"ad9610c6-d1c5-4c7a-9e74-58b810dd759d","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"734bed4f-be52-46ef-ae60-8fd195dc8f4d","displayName":"Access-Denied Assistance","description":"Administrative Templates\\System\\Access-Denied Assistance","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"736134cb-4d82-427a-97b7-d219ac6a22f0","displayName":"Corrupted File Recovery","description":"Administrative Templates Corrupted File Recovery","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"73935f55-c845-40ce-819e-838c0041f6fa","displayName":"Resultant Set of Policy snap-in extensions","description":"Administrative Templates Group Policy Resultant Set of Policy snap-in extensions","helpText":null,"parentCategoryId":"98dc5bd0-2b16-4263-ba2f-62115b680017","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"73a3a483-dcba-4b34-b7cb-9c68c871864c","displayName":"Remote Procedure Call","description":"Administrative Templates\\System\\Remote Procedure Call","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"73bc2db9-d37f-4add-a64d-a8239273edb3","displayName":"Check Accessibility","description":"Microsoft Word 2016\\File Tab\\Check Accessibility","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"740e7a10-3774-4a1c-9970-6907e0f0b848","displayName":"Disable Items in User Interface","description":"Microsoft Word 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["0f42fc50-66c8-4b70-9904-64f8d662c930","44e27b70-4bdb-4aec-a75d-0568a1edc332"],"platforms":"windows10","technologies":"mdm"},{"id":"7443c1d4-1087-486c-9a0a-f9da9074e4e1","displayName":"BITS","description":"BITS","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"7443c1d4-1087-486c-9a0a-f9da9074e4e1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7444c3f0-214b-45ea-9b8e-f74b81543644","displayName":"Microsoft account","description":"Administrative Templates\\Windows Components\\Microsoft account","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7490c4fd-c326-42f7-9908-006504616d4c","displayName":"Trust Center","description":"Microsoft Excel 2016\\Excel Options\\Security\\Trust Center","helpText":null,"parentCategoryId":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":["5c4224e0-6a48-4665-9332-958d98124157","2fa6b5a0-040e-4059-9690-4a1f4aa5c3c7","fe54701d-42bd-47f0-9c49-26ff6a928b32","e36863b6-3232-4a29-be02-32ee67cc48b9"],"platforms":"windows10","technologies":"mdm"},{"id":"751cf9ec-7214-4b38-a09e-24922684bd8f","displayName":"Presentation Settings","description":"Administrative Templates Presentation Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"756d2b0b-5f06-45e7-b5c5-c066deb5ed2f","displayName":"Extension snap-ins","description":"Administrative Templates Microsoft Management Console Restricted Permitted snap-ins Extension snap-ins","helpText":null,"parentCategoryId":"acb49e73-5a6a-479b-9d58-c3cd7f632e9b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7574a907-5608-491f-8011-c57d487457f4","displayName":"Sync your settings","description":"Administrative Templates\\Windows Components\\Sync your settings","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"75ad885f-6118-4508-a2fd-bb26be931c3f","displayName":"Outlook Today Settings","description":"Microsoft Outlook 2016\\Outlook Today Settings","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"75e080fb-3ed7-4a73-a6e0-eb93f0119d68","displayName":"Event Logging","description":"Administrative Templates Event Logging","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"75f9bfd8-8ee2-47b0-b080-a4d179724ca8","displayName":"File Block Settings","description":"Microsoft Visio 2016\\Visio Options\\Security\\Trust Center\\File Block Settings","helpText":null,"parentCategoryId":"f34e3da0-b440-43dc-a368-4fd39646a9c5","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"760376f3-6b74-4992-89eb-aa41d6190e94","displayName":"Subscription Activation","description":"Microsoft Office 2016\\Subscription Activation","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"763525a0-8456-4336-a8d1-392253e8fdd8","displayName":"System Policy Control","description":"System Policy\\ System Policy Control","helpText":null,"parentCategoryId":"361dc9bb-0cf7-4d8b-af4b-6117aeb46511","rootCategoryId":"361dc9bb-0cf7-4d8b-af4b-6117aeb46511","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"7652894d-4667-443f-b925-b1686a942729","displayName":"Disable Items in User Interface","description":"Microsoft Outlook 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["8184df77-410e-41a6-b687-88de05769977","d59dfcc1-6c35-41de-bfb6-de94b8120ca5"],"platforms":"windows10","technologies":"mdm"},{"id":"768d9aa4-7407-4ed9-b97f-2385b8cadb47","displayName":"File Provider","description":"System Configuration > File Provider","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"macOS","technologies":"mdm"},{"id":"76ad3567-c6cb-43b5-b91d-a52a34853c03","displayName":"Trusted Locations","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Security\\Trust Center\\Trusted Locations","helpText":null,"parentCategoryId":"36ddafde-fdc7-4787-bf6e-2291446ccc6b","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"76b233cc-f977-4305-b02f-deef6667251d","displayName":"Advanced","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Advanced","helpText":null,"parentCategoryId":"da92dfd6-a29e-42a0-92ed-276bb6904455","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["6fd44fd0-80d1-47a0-acad-c115e5b807b6"],"platforms":"windows10","technologies":"mdm"},{"id":"76bbc368-9d0b-4aa7-b8e2-2dcfd864b9ee","displayName":"Audit Process Creation","description":"Administrative Templates Audit Process Creation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"76c53aab-0288-4ac1-b399-0104e04c6457","displayName":"Application Compatibility Diagnostics","description":"Administrative Templates Application Compatibility Diagnostics","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"76c8131a-62fe-4134-aeac-d999f01911ed","displayName":"Network Connections","description":"Administrative Templates\\Network\\Network Connections","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"76e34834-6d47-4e06-b14c-aa2888cdce27","displayName":"Generative AI","description":"Microsoft Edge Generative AI","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"76f2d08c-0a3f-4f4e-ad04-51aa16aea0bf","displayName":"Intranet Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Intranet Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7740c7ba-aa61-4486-ad26-cb8721a2efb4","displayName":"Publishing","description":"Administrative Templates App-V Publishing","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"77b0357b-412e-4a81-9469-e20a5f1345fd","displayName":"Complex scripts","description":"Microsoft Publisher 2016\\Publisher Options\\Advanced\\Complex scripts","helpText":null,"parentCategoryId":"69f3ad9d-871d-42b3-8e10-07dc076a4d32","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"77ca5e78-a1fe-456e-9814-034b1ea2658d","displayName":"PowerPoint Designer","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\PowerPoint Designer","helpText":null,"parentCategoryId":"da92dfd6-a29e-42a0-92ed-276bb6904455","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"78497707-c3e4-400b-a6bc-1813c3689fdc","displayName":"Preferences","description":"Microsoft Edge Update\\Preferences","helpText":null,"parentCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"785c6df2-c6d0-4d6e-bd73-c3b62caca754","displayName":"TCPIP Settings","description":"Administrative Templates TCPIP Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["91789113-6339-4e96-8e1d-73a4dec4967f","486f25cc-c865-446e-95b2-c5b061883a7a"],"platforms":"windows10","technologies":"mdm"},{"id":"788355e5-e113-4b17-ada9-fb5ef38bffa1","displayName":"App-V","description":"Administrative Templates App-V","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["7740c7ba-aa61-4486-ad26-cb8721a2efb4","e7cc16d8-f74f-4cd7-890d-9b4082a19c39","efabaf11-42e4-48ab-81ca-4514199d239b","b9201072-3681-4e95-ad90-869e6166b129","10835ce3-31c8-4ec6-aa00-c5af48e550a8","5011ca61-1a58-42da-9c66-7763236acc84","ea9a092f-dd93-41d4-9bbb-118de1213578","f125d7cd-a333-4f24-a5f4-99fc289c6d22"],"platforms":"windows10","technologies":"mdm"},{"id":"78906e32-f4fb-453b-939b-05717ffaae59","displayName":"ActiveX Installer Service","description":"Administrative Templates\\Windows Components\\ActiveX Installer Service","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"78b3d753-d84d-496b-a93c-d577ab5865bd","displayName":"Scripted Diagnostics","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Scripted Diagnostics","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"78d3d93f-03d0-4fa0-be56-be4bca0a7b3b","displayName":"Trusted Platform Module Services","description":"Administrative Templates\\System\\Trusted Platform Module Services","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"794337be-8833-4b9a-bb88-8a030141578d","displayName":"Search","description":"Search","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"794337be-8833-4b9a-bb88-8a030141578d","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"797ac384-f48e-4567-b931-33a6ce923b94","displayName":"Microsoft Edge Canary","description":"Microsoft Edge Update\\Applications\\Microsoft Edge Canary","helpText":null,"parentCategoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7a3a7335-4837-4bc5-9282-448402a05d89","displayName":"Control Panel","description":"Administrative Templates\\Control Panel","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["e6231142-3d39-44a7-9522-6a3357bd439f","2694014c-e044-45a0-99b1-1694bd01827a","18db3d59-661b-47ec-900a-bf75495ca598","a809df26-b5db-4af9-b247-a539ada4e869","2b8e43c0-e66b-4bec-b20d-54a1f7151212","684799ba-398b-4728-aa21-40c8469cbe87","f4eaa5be-1498-482e-abe6-de4fed7e3302"],"platforms":"windows10","technologies":"mdm"},{"id":"7a85e72a-a755-4903-b1fd-4939049380f4","displayName":"Privacy","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Privacy","helpText":null,"parentCategoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7a8b936d-b4b0-408f-bec5-3c97050730f8","displayName":"Shared paths","description":"Microsoft Office 2016\\Shared paths","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7aeaf6f8-5511-4216-9483-28f432a5a08f","displayName":"Server Settings","description":"Microsoft PowerPoint 2016\\Miscellaneous\\Server Settings","helpText":null,"parentCategoryId":"da1503cb-e474-4545-8e77-cdd577f34a08","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","displayName":"App Lock","description":"App Management > App Lock","helpText":null,"parentCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","rootCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","displayName":"Extensible Single Sign On (SSO)","description":"Authentication > Extensible Single Sign On (SSO)","helpText":null,"parentCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","rootCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm"},{"id":"7b91ab31-7ed5-4de9-bd49-d04303fd3c74","displayName":"Microsoft Edge Beta","description":"Microsoft Edge Update\\Applications\\Microsoft Edge Beta","helpText":null,"parentCategoryId":"2c7e8e8e-47fe-48ba-8cb4-55ce296edced","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7bc264db-6da2-4c6b-a357-aec47c717737","displayName":"Disk Diagnostic","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Disk Diagnostic","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7bee4dea-82a4-4a03-b903-654b374819b1","displayName":"Chinese Conversion | Convert with Options","description":"Microsoft Word 2016\\Review Tab\\Chinese Conversion | Convert with Options","helpText":null,"parentCategoryId":"1fddd12c-a630-47f0-9633-638808e228f9","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7c34b514-0fb4-4868-8418-cb9b28f9f6e3","displayName":"Previous Versions","description":"Administrative Templates\\Windows Components\\File Explorer\\Previous Versions","helpText":null,"parentCategoryId":"35525ba9-da99-460e-afd3-ba86506b0ba3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7ca3f367-a3a3-4f2a-9cdd-a8fa82bd6919","displayName":"Windows Connect Now","description":"Administrative Templates Windows Connect Now","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7d331987-7e2d-4975-b23b-d99a5af26ddf","displayName":"IME","description":"Administrative Templates IME","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7d7f6a09-2088-4f1f-a1f1-14fbca93a808","displayName":"General iSCSI","description":"Administrative Templates\\System\\iSCSI\\General iSCSI","helpText":null,"parentCategoryId":"363982dd-fc96-49ce-a499-f6401f2c212b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7d9e5b9b-84e7-473c-b6ca-a1629448df55","displayName":"Safari Extension Settings","description":"Declarative Device Management preview Extension Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"7db75ddb-f702-49f8-ae2b-991d1afd2d17","displayName":"Performance","description":"Microsoft Edge - Default Settings (users can override)\\Performance","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","displayName":"Predefined","description":"Microsoft PowerPoint 2016\\Disable Items in User Interface\\Predefined","helpText":null,"parentCategoryId":"e5cbbf8a-45b9-44c8-bce1-c5c2416c998a","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7eaa5e09-e5ab-4051-b557-64a124ae497c","displayName":"Cryptography","description":"Microsoft Access 2016\\Application Settings\\Security\\Cryptography","helpText":null,"parentCategoryId":"23fd467e-24f8-4200-8b19-c6c11afa8926","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7ecdd7c9-6ab2-4dac-88ef-9bdad46e1f66","displayName":"Parental Controls Game Center","description":"Parental Controls > Parental Controls Game Center","helpText":null,"parentCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","rootCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"7f07427b-9bc2-4bfc-a74e-1a1d8961bd89","displayName":"Display","description":"Microsoft Word 2016\\Word Options\\Display","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","displayName":"Display","description":"Display","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"7f22e772-942b-4eeb-82b9-eac9265a3d6e","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","displayName":"Regional and Language Options","description":"Administrative Templates Regional and Language Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["9a79d480-8cb4-47b5-95c7-5da56eea5bb8"],"platforms":"windows10","technologies":"mdm"},{"id":"7f431009-e8fe-460e-b247-06c838c8a914","displayName":"Location and Sensors","description":"Administrative Templates\\Windows Components\\Location and Sensors","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["d6595bc3-dd73-44a3-8b32-d57af6e40208"],"platforms":"windows10","technologies":"mdm"},{"id":"7f461268-0fb6-4247-b6db-52515d42a20e","displayName":"User Interface","description":"Administrative Templates Windows Media Player User Interface","helpText":null,"parentCategoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7f4d325e-bff8-4d91-8313-614243e55e6d","displayName":"DC Locator DNS Records","description":"Administrative Templates\\System\\Net Logon\\DC Locator DNS Records","helpText":null,"parentCategoryId":"bedf20d1-1f5a-4840-8458-6d0fa974b664","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7f5517b0-3ff7-4f7e-aa4c-3d2ccbf37bdc","displayName":"VPN Connection","description":"VPN Connection","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"7f5517b0-3ff7-4f7e-aa4c-3d2ccbf37bdc","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7fc23813-7a7c-412a-b9bd-eda07e6b1f5d","displayName":"List Sync","description":"List Sync","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"7fc23813-7a7c-412a-b9bd-eda07e6b1f5d","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"7fc3275d-5ef6-4806-88b0-210bb175c182","displayName":"Network List Manager","description":"Network List Manager","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"7fc3275d-5ef6-4806-88b0-210bb175c182","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,microsoftSense"},{"id":"8028dead-8f13-4fe3-9998-ba1e841324d7","displayName":"Windows Apps","description":"Administrative Templates\\Windows Components\\Microsoft User Experience Virtualization\\Windows Apps","helpText":null,"parentCategoryId":"9e857bed-81f8-4dfc-b049-c93eb68b4064","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"802f3065-0bf1-4578-9d6d-ab1ef02db3ec","displayName":"Feedback Settings","description":"Visual Studio Feedback Settings","helpText":null,"parentCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","rootCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8084033c-156a-4d1b-ab0b-159541810459","displayName":"Tools | AutoCorrect Options... (Excel, PowerPoint and Access)","description":"Microsoft Office 2016\\Tools | AutoCorrect Options... (Excel, PowerPoint and Access)","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["69931627-230d-4df9-bbef-e3eac64ea8ef"],"platforms":"windows10","technologies":"mdm"},{"id":"80b21376-0e9a-4e5b-8a74-b672adbe94a8","displayName":"Config Refresh","description":"Config Refresh","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"80b21376-0e9a-4e5b-8a74-b672adbe94a8","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"80ed7629-87dd-4bb1-8ea0-555f20d3b156","displayName":"Mitigation Options","description":"Administrative Templates\\System\\Mitigation Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"80f5fb2f-e74a-4533-81aa-a92163f49e16","displayName":"Local Machine Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Local Machine Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"811f63f1-1619-4b48-b8f0-3d388729bd47","displayName":"Xsan","description":"Xsan","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"811f63f1-1619-4b48-b8f0-3d388729bd47","childCategoryIds":["46af3391-ed6d-4ada-aef7-02dac2a1b136","fd3717c1-dcf8-4038-b7f7-4ad3359a9d32"],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"814e9e4d-b838-4747-a257-72390a535d56","displayName":"Group Policy snap-in extensions","description":"Administrative Templates\\Windows Components\\Microsoft Management Console\\Restricted/Permitted snap-ins\\Group Policy\\Group Policy snap-in extensions","helpText":null,"parentCategoryId":"3d32fb39-ff23-48d9-9890-c8625d2d21e9","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8184df77-410e-41a6-b687-88de05769977","displayName":"Custom","description":"Microsoft Outlook 2016\\Disable Items in User Interface\\Custom","helpText":null,"parentCategoryId":"7652894d-4667-443f-b925-b1686a942729","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"81bc8383-43a5-4c6a-9d51-951e86028934","displayName":"Project Guide settings for 'Project1'","description":"Microsoft Project 2016\\Project Options\\Interface\\Project Guide settings for 'Project1'","helpText":null,"parentCategoryId":"84b7f123-e849-40f9-914b-4b97b57bd3b4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"81c518f1-522e-4957-b850-e8a66d2ab215","displayName":"Games settings","description":"Microsoft Edge Games settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"81eb92d0-acda-4ea2-8183-29ed5457276b","displayName":"Container and Directory Naming","description":"FS Logix ODFC Containers Container and Directory Naming","helpText":null,"parentCategoryId":"5c645a3e-bc39-44e9-8786-4c82e0553d22","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8212ba6e-101d-4ee8-8ca2-c4cd2cddba96","displayName":"Remediation","description":"Administrative Templates Microsoft Defender Antivirus Remediation","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"822bd634-4d01-486e-adad-8085968fd1c4","displayName":"Advanced Page","description":"Administrative Templates Internet Explorer Internet Control Panel Advanced Page","helpText":null,"parentCategoryId":"3f6bb987-17dc-4442-a946-c1c5b1d089d7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"826db7fb-889b-4a99-80a6-38347ba37f21","displayName":"Recurring item configuration","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Calendar Options\\Recurring item configuration","helpText":null,"parentCategoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8280dcb9-f2bc-417b-b4ef-cd6c35398f94","displayName":"Driver Installation","description":"Administrative Templates\\System\\Driver Installation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"829d1e81-4cbc-4259-bd0e-8cc44870f00e","displayName":"Restrict ActiveX Install","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Restrict ActiveX Install","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"82a437a8-6be8-4003-a951-951999e86db8","displayName":"Parental Controls","description":"Parental Controls","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","childCategoryIds":["f019963f-f4ed-4429-b6e3-babfb24c36a8","7ecdd7c9-6ab2-4dac-88ef-9bdad46e1f66","f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","dc270c70-1cf4-4d98-ad26-8c2d441173f1","65087b94-7e45-4d74-a50d-df4377b67499"],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"82a9c23f-2c09-4479-9cd3-e7f185d7676f","displayName":"Offline Files","description":"Administrative Templates\\Network\\Offline Files","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"82d173f9-ba0b-4b09-bbb8-68cba4916162","displayName":"Privacy Preferences Policy Control","description":"Privacy > Privacy Preferences Policy Control","helpText":null,"parentCategoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","rootCategoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","childCategoryIds":[],"platforms":"macOS","technologies":"mdm"},{"id":"82d20a08-90b8-4e6d-940a-5574844d1b26","displayName":"DSCP value of non-conforming packets","description":"Administrative Templates\\Network\\QoS Packet Scheduler\\DSCP value of non-conforming packets","helpText":null,"parentCategoryId":"01f2fac4-fdab-4391-bebe-ebdf6d8fcc77","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"82ecfab7-b76a-4cec-8e76-859db4599ac2","displayName":"Cached Exchange Mode","description":"Microsoft Outlook 2016\\Account Settings\\Exchange\\Cached Exchange Mode","helpText":null,"parentCategoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"83087772-6560-4488-a1c5-bb6e4889e868","displayName":"Advanced","description":"Microsoft Word 2016\\Word Options\\Advanced","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["bc65521d-e48a-4e95-899f-49df827808ca","e63361ad-a54b-4557-acc7-02c272a3e58d","61ecc5ec-c494-420b-a27b-a8d2fbdd7df1","2108b443-384c-4bb3-9b9f-acb4a754a86a"],"platforms":"windows10","technologies":"mdm"},{"id":"831dcaee-a6fa-4893-a32d-e13fdf7d3777","displayName":"Caldav","description":"Accounts > CalDAV","helpText":null,"parentCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","rootCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"832f3a51-5e73-4541-8f14-1323cd9919bc","displayName":"When sending a message","description":"Microsoft Outlook 2016 Outlook Options Preferences E-mail Options Advanced E-mail Options When sending a message","helpText":null,"parentCategoryId":"897675f9-0d1b-437b-ba0a-584fbd54df95","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8391e79d-d618-47c3-979c-83544da43739","displayName":"Protected View","description":"Microsoft Word 2016\\Word Options\\Security\\Trust Center\\Protected View","helpText":null,"parentCategoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"83fb8ae9-dfc0-4ff8-8a98-3a04f0edd919","displayName":"Multi SIM","description":"Multi SIM","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"83fb8ae9-dfc0-4ff8-8a98-3a04f0edd919","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"83febe72-a64f-4051-9071-1efae1ea9a15","displayName":"Disk Management","description":"Declarative Device Management preview Disk Management","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"macOS","technologies":"appleRemoteManagement"},{"id":"845ff38a-408b-449c-9ef3-7fdc331027df","displayName":"Azure Virtual Desktop","description":"Administrative Templates Windows Components Remote Desktop Services Remote Desktop Session Host Azure Virtual Desktop","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["5d4e843b-2848-4508-9143-cb3217c2fe83"],"platforms":"windows10","technologies":"mdm"},{"id":"8495c82c-f273-4bcc-8886-6751103a9c7b","displayName":"Proofing","description":"Microsoft Visio 2016 Visio Options Proofing","helpText":null,"parentCategoryId":"f106d9e2-60ce-4e16-b74d-bd9ef401d7ba","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["af9b2941-29f9-4ee5-ae09-215f4e242943"],"platforms":"windows10","technologies":"mdm"},{"id":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","displayName":"User Experience","description":"User Experience","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":["e42edcd8-fcb0-4255-a774-c78b34f0b0c9","cc388035-b49c-493e-a598-14b0d0de4359","361859d9-1382-47c3-b9ec-9251a62fbb25","c00d6468-cac3-429c-ada5-ba3adf4982a8","11c4cf0f-a03d-4309-93b2-011be4c410d5","b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","ff90bf4b-0583-4761-a1c4-5aa4b50c5872","d8f06fcf-7328-43ac-b5b7-f7166b5333de"],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"84b7f123-e849-40f9-914b-4b97b57bd3b4","displayName":"Interface","description":"Microsoft Project 2016\\Project Options\\Interface","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["343eb575-3ac8-4da9-b66d-ce84b84be7c3","81bc8383-43a5-4c6a-9d51-951e86028934","fe7c8652-17d4-40a7-869c-f7cfc3454402"],"platforms":"windows10","technologies":"mdm"},{"id":"84de2eed-843c-401b-a3fd-e21be88f2365","displayName":"Pen","description":"Microsoft OneNote 2016\\OneNote Options\\Pen","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"853d5a82-91e4-4c53-8338-fd1a3d9b542c","displayName":"MK Protocol Security Restriction","description":"Administrative Templates Internet Explorer Security Features MK Protocol Security Restriction","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"853f4181-42e8-411c-91cf-c06968c0a543","displayName":"Time Server","description":"System Configuration > Time Server","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"85810387-3320-4056-bae2-953beeb246f7","displayName":"Security","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Security","helpText":null,"parentCategoryId":"da92dfd6-a29e-42a0-92ed-276bb6904455","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["9544c86b-47bb-4cb2-a725-63214a0454f4","36ddafde-fdc7-4787-bf6e-2291446ccc6b"],"platforms":"windows10","technologies":"mdm"},{"id":"859f3bfb-70f6-447a-822e-680ac98e91ce","displayName":"Microsoft Visual Studio","description":"Visual Studio","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","childCategoryIds":["802f3065-0bf1-4578-9d6d-ab1ef02db3ec","175ddbac-b0ae-4d9d-b76e-4eb1a487fc93","b3b30966-47ac-4b54-a75a-04418d5c6153","d9d5f333-9402-4459-8ef1-e29330cac8be","652a676c-9d60-4c9a-88b6-823a24961a9b","96277512-3d35-4876-ad74-2d849348799e"],"platforms":"windows10","technologies":"mdm"},{"id":"85c586a6-6b68-48b2-8050-c4fb86aff486","displayName":"RD Gateway","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\RD Gateway","helpText":null,"parentCategoryId":"572bc940-42d4-4e00-ac55-012e9b90f6df","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"865a5fd9-f9be-496d-acb4-cd7cdb03e19f","displayName":"Security Center","description":"Administrative Templates\\Windows Components\\Security Center","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"866eedbc-ffd9-457d-b02b-7b163d55c4bd","displayName":"Disable Items in User Interface","description":"Microsoft Office 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"86b4fa22-f6f1-4ca5-8fe4-8788f9b3fd89","displayName":"Power Throttling Settings","description":"Administrative Templates Power Management Power Throttling Settings","helpText":null,"parentCategoryId":"290ec637-e780-4e95-9834-6368ac0437d1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"86dae9f9-7eb1-4566-8558-b63fa2e20fee","displayName":"Updates","description":"Microsoft Office 2016 (Machine)\\Updates","helpText":null,"parentCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"86e78a4b-706a-4ec8-be90-439461abb29d","displayName":"File Revocation","description":"Administrative Templates File Revocation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"86f46ebc-a93f-4a2b-b6e7-bab2ac95a3ae","displayName":"SSL Configuration Settings","description":"Administrative Templates SSL Configuration Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"87667b72-85ce-48c2-8023-e6db7f5fe739","displayName":"Work Folders","description":"Administrative Templates Work Folders","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8778eb21-bf7c-41a7-bae1-412c0e3029db","displayName":"Licensing","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Licensing","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"87e607d8-500d-4dba-a58f-d7695945c973","displayName":"Early Launch Antimalware","description":"Administrative Templates\\System\\Early Launch Antimalware","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"87f460f4-8403-419c-bfb4-44dec5edcccb","displayName":"Media Management Disc Burning","description":"Media Management > Media Management Disc Burning","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"87f460f4-8403-419c-bfb4-44dec5edcccb","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"88a2c40a-7b95-4fd8-8ad8-81dc61d4adf5","displayName":"Lanman Workstation","description":"Administrative Templates Lanman Workstation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"88b16683-81f2-450a-9bf2-42f582e0b748","displayName":"Stationery and Fonts","description":"Microsoft Outlook 2016\\Outlook Options\\Mail Format\\Stationery and Fonts","helpText":null,"parentCategoryId":"f2bf77fd-37df-448b-8959-6478abf96f6f","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"891d2958-5a8c-479c-aa68-69b1b6c735e1","displayName":"Shared PC","description":"Shared PC","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"891d2958-5a8c-479c-aa68-69b1b6c735e1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"89519fc9-9b38-4401-8767-b0a047cae515","displayName":"Device Restriction","description":"Device Restriction","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":["2257f7e1-3e88-4d4d-a666-437bbe42baca","929c169a-3480-467c-9f47-d1836b359ef7","bf8e3e9c-f7e7-4a43-8898-2caf7b01d987","70c4566f-a079-4a8e-ac97-0736b405df1d","990880db-3f64-4436-ab4a-d7d5181dfa5d","f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","aad0d3ef-88f5-4b22-831b-27093eafbc64","b6733d23-eadc-486a-abfc-62b78698a16c"],"platforms":"androidEnterprise,aosp","technologies":"android"},{"id":"895e0884-6b60-4bb0-b2ab-3a1642103db7","displayName":"Native Messaging","description":"Google Google Chrome Native Messaging","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8974dbd2-bbb1-4706-86f2-162b2e8bf9b5","displayName":"Downloads","description":"Microsoft Edge - Default Settings users can override Downloads","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"897675f9-0d1b-437b-ba0a-584fbd54df95","displayName":"Advanced E-mail Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\E-mail Options\\Advanced E-mail Options","helpText":null,"parentCategoryId":"2fbb7677-651a-4b62-8b8c-d502ea29936b","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["35f245bd-8d1f-424c-83de-a80be27a6a4e","832f3a51-5e73-4541-8f14-1323cd9919bc"],"platforms":"windows10","technologies":"mdm"},{"id":"89ad0055-1603-420e-940d-9944a63e3da9","displayName":"Profiles","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Profiles","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"89be4acb-fdf9-447b-ad16-9a5af1d68b8b","displayName":"Save","description":"Microsoft Word 2016\\Word Options\\Save","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"89c0381d-3b9b-4be5-8077-ffb18d47e910","displayName":"Add-on Management","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Add-on Management","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8a03aebc-9249-4917-a1c3-2957717d9123","displayName":"Real-time Protection","description":"Administrative Templates Microsoft Defender Antivirus Real-time Protection","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8a409581-8ea5-493c-9e9e-2190f66381c3","displayName":"DirectAccess Client Experience Settings","description":"Administrative Templates\\Network\\DirectAccess Client Experience Settings","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8aa3383a-efac-4ec4-841d-06e3e18646d8","displayName":"Default search provider","description":"Microsoft Edge\\Default search provider","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"8abddb23-7036-4ba8-8912-529279a849ea","displayName":"Security Preferences","description":"Security > Security Preferences","helpText":null,"parentCategoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","rootCategoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"8b0e5a63-c309-430b-8521-7bd21e715b90","displayName":"Office 2016 Converters","description":"Microsoft Office 2016\\Office 2016 Converters","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8b7e662c-0410-4e33-ae11-edb7c717d914","displayName":"Restricted Browsing","description":"Microsoft Office 2016\\File Open/Save dialog box\\Restricted Browsing","helpText":null,"parentCategoryId":"92be4fc7-8095-441c-b52b-9861c21bc337","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","displayName":"Immersive Reader settings","description":"Microsoft Edge Immersive Reader settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"8c30a64e-ad24-47a0-97a8-52320360fd88","displayName":"Net Logon","description":"Administrative Templates Net Logon","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["41ba590e-9105-4eda-92fb-13c7d34b8eee"],"platforms":"windows10","technologies":"mdm"},{"id":"8c35f124-e249-43e3-9044-ecc0b0a5855a","displayName":"Idle Browser Actions","description":"Google Google Chrome Idle Browser Actions","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8c75a12d-664d-43ba-a3aa-5259425f9b37","displayName":"Energy Saver","description":"System Configuration > Energy Saver","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"8c86f511-1729-4fe9-b0b2-111d9044e1ba","displayName":"App Settings","description":"Declarative Device Management preview App Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"8c879ddf-7acf-45f3-81d3-2c78c7a1321b","displayName":"Miscellaneous","description":"Microsoft Office 2016 (Machine)\\Miscellaneous","helpText":null,"parentCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8caf4546-4ed8-4e8a-b9e7-5ab48c13b709","displayName":"PackageManagement","description":"Administrative Templates\\System\\App-V\\PackageManagement","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8ccb6340-4f25-4bda-a527-127d269b3cbf","displayName":"Windows Calendar","description":"Administrative Templates\\Windows Components\\Windows Calendar","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8cefd936-362e-4a24-bc76-e078b6fd13fa","displayName":"Screensaver","description":"System Configuration > Screensaver","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","displayName":"Trusted Sites Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Trusted Sites Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8d27fb75-5aeb-44f0-aab2-064cc4b9ecd6","displayName":"Audit Process Creation","description":"Administrative Templates\\System\\Audit Process Creation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8d4a5b79-8399-4075-a71f-80ac3099ae78","displayName":"Bluetooth","description":"Bluetooth","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"8d4a5b79-8399-4075-a71f-80ac3099ae78","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"8d503574-f93a-4277-a30d-19895d46dd13","displayName":"Security Page","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page","helpText":null,"parentCategoryId":"3f6bb987-17dc-4442-a946-c1c5b1d089d7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["4086190d-2e5b-439d-8426-08492ebb8c9f","58ae30f4-10a2-4144-a593-b5f5bd93c10d","dfede24d-d1c8-4e20-82a3-89e1b52057d5","99dfe848-181d-480a-bd20-3f93f04b6f5c","fca9261c-1e93-467d-90cf-ba9108e4cb2e","8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","8cf3550f-14a0-4abd-9d3e-ad44960cf5b3","9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","ac014aea-e417-46ad-a4a5-9a1fb1030882","44c15b2f-10da-4e1e-836b-8b71c19fe34c"],"platforms":"windows10","technologies":"mdm"},{"id":"8d5ce834-5b70-4ec2-8d07-eae26ab6493f","displayName":"Consistent Mime Handling","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Consistent Mime Handling","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8d9eaa88-a2b4-42e7-83e5-8dc12f51d36b","displayName":"Eap","description":"Eap","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"8d9eaa88-a2b4-42e7-83e5-8dc12f51d36b","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8da2792e-3ad7-4fe4-bb04-b797c3abcbe7","displayName":"Device Installation","description":"Administrative Templates Device Installation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["68237832-f376-4f0e-ba26-4e06fce7a35d"],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"8dca6b5f-ff9c-44c8-9822-008acef616aa","displayName":"Security","description":"Administrative Templates\\Windows Components\\Event Log Service\\Security","helpText":null,"parentCategoryId":"fcddcc0b-7cf8-4ebc-a818-d10689603263","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8e143bee-82fa-4e45-8bd0-c4032b0182d2","displayName":"SharePoint Server","description":"Microsoft Office 2016\\Server Settings\\SharePoint Server","helpText":null,"parentCategoryId":"6aeb1df3-d796-4c5b-921d-9f3970a754cc","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8e19ed1e-e870-4769-bd6f-321f6f47023b","displayName":"Application Compatibility Settings","description":"Administrative Templates\\System\\Distributed COM\\Application Compatibility Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8e48532a-ff0e-4422-82e2-6956b6786005","displayName":"Customize Ribbon","description":"Microsoft Project 2016\\Project Options\\Customize Ribbon","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8e5e115e-ab37-4dc7-94bc-35a28bf5f4df","displayName":"Intranet Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Intranet Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8e6b8d0c-faf6-41e6-8e31-4389a5470caf","displayName":"Removable Data Drives","description":"Administrative Templates BitLocker Drive Encryption Removable Data Drives","helpText":null,"parentCategoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8e7b730f-c3c9-4e04-9e45-ce06be97908c","displayName":"Junk E-mail","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Junk E-mail","helpText":null,"parentCategoryId":"1b59bea5-b6db-4a37-9fdd-5bc2e141a61d","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8eb61398-1074-4fa0-8bd4-04d751a9ccad","displayName":"Windows Memory Leak Diagnosis","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Windows Memory Leak Diagnosis","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8ee1d8d2-582f-401b-927a-993016f4290d","displayName":"Browsers","description":"Microsoft Office 2016\\Tools | Options | General | Web Options...\\Browsers","helpText":null,"parentCategoryId":"2d5a483f-b408-426d-9234-2883eae20afb","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"8eed5d21-a5e9-4bc7-b2df-4526af3e2726","displayName":"Windows Error Reporting","description":"Administrative Templates Windows Error Reporting","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["1551f6d3-415c-44a8-b184-393de7c42adf","184981d4-712b-425e-b0a3-93eac7fbd3ee"],"platforms":"windows10","technologies":"mdm"},{"id":"8efd284f-5a56-4da8-8821-f51984ff954d","displayName":"Associated Domains","description":"App Management > Associated Domains","helpText":null,"parentCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","rootCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","childCategoryIds":[],"platforms":"macOS","technologies":"mdm"},{"id":"8f831e0a-feb7-4cbb-acc1-2e583f3f4de3","displayName":"Login Window Behavior","description":"Login > Login Window Behavior","helpText":null,"parentCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","rootCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"8ff93a7a-503c-4955-89be-900d475b7c5e","displayName":"Managed Settings","description":"Managed Settings","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":["0be23ead-c5f7-4ea5-9ec5-64c05d19cf5d","99d68d97-63b7-4f49-83dd-1ad3b3281d0d","1fbc29d7-0530-4208-b506-9df648a402e9","5f71c40e-01aa-42d2-9c8c-7d560126cd4b","b32726b3-b0e9-465b-86f8-b61ad8af52f0","ef7328b1-c666-40fe-a933-57b14bc77dd3","e7dccaa6-2b16-4dd3-b835-83ca641d0c80","3c7f15ef-a539-411c-93f1-5f97b7bd5519","1a056b49-3fb9-4097-b286-c5f493208578","724d930a-7a3c-4171-a17c-431cee336518","dd68a290-1ba7-470f-afca-339f443a767c","2c156b7e-99c8-4a21-a828-4f9b94479b0d"],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"902a93e8-8beb-46c5-ba26-4e2bf6161e22","displayName":"Networking","description":"Administrative Templates Windows Media Player Networking","helpText":null,"parentCategoryId":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"902f5df1-31d6-44ee-ba95-2561199db35f","displayName":"Sync your settings","description":"Administrative Templates Sync your settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"906df5cd-1d9e-49d0-ab32-cf5c5a041974","displayName":"Global HTTP Proxy","description":"Proxies > Global HTTP Proxy","helpText":null,"parentCategoryId":"a754c9bd-2116-4dd6-9014-07f914869145","rootCategoryId":"a754c9bd-2116-4dd6-9014-07f914869145","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"907fd656-2a80-4f34-8615-a3acb11a2b95","displayName":"Custom","description":"Microsoft Publisher 2016\\Disable Items in User Interface\\Custom","helpText":null,"parentCategoryId":"9caa3b08-b545-4c21-a3b7-b5d2302c1a81","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"909339a5-8f04-4fa2-8807-5d38c83ef547","displayName":"Device Guard","description":"Administrative Templates Device Guard","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"90bbab80-ecf0-47c6-bf01-76b26a3dc503","displayName":"Touch Input","description":"Administrative Templates\\Windows Components\\Tablet PC\\Touch Input","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"90e3acc6-80d5-41b4-8141-a8620a211c0e","displayName":"Tenant Restrictions","description":"Administrative Templates Tenant Restrictions","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"91041ad3-e0a6-43fd-bc7b-ad4c7dda5765","displayName":"Online Content","description":"Microsoft Office 2016\\Tools | Options | General | Service Options...\\Online Content","helpText":null,"parentCategoryId":"af14a55b-d79b-4299-946c-b7582412b748","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","displayName":"Local Policies Security Options","description":"Local Policies Security Options","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"914a31d0-ae3b-4ae5-bd31-504b9f0b91df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"91789113-6339-4e96-8e1d-73a4dec4967f","displayName":"Parameters","description":"Administrative Templates TCPIP Settings Parameters","helpText":null,"parentCategoryId":"785c6df2-c6d0-4d6e-bd73-c3b62caca754","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"917d0fb9-b5dd-401b-982b-1d32f6e0a306","displayName":"Pen UX Behaviors","description":"Administrative Templates\\Windows Components\\Tablet PC\\Pen UX Behaviors","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"91bf761c-1a1e-4a3a-adbf-27288ea7b0b3","displayName":"International Options","description":"Microsoft Outlook 2016\\Outlook Options\\Mail Format\\International Options","helpText":null,"parentCategoryId":"f2bf77fd-37df-448b-8959-6478abf96f6f","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"91c02e14-8848-485d-8844-b9933fa888ec","displayName":"Hard Disk Settings","description":"Administrative Templates Power Management Hard Disk Settings","helpText":null,"parentCategoryId":"290ec637-e780-4e95-9834-6368ac0437d1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"91ed1812-8841-4eb3-b24e-a5e1f4eaa6c8","displayName":"Restrict File Download","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Restrict File Download","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9215e382-4e7b-4554-8c80-80277136b544","displayName":"Formulas","description":"Microsoft Excel 2016\\Excel Options\\Formulas","helpText":null,"parentCategoryId":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"92503b7f-9fa0-4365-8482-57dd61e6d535","displayName":"RD Connection Broker","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\RD Connection Broker","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"929c169a-3480-467c-9f47-d1836b359ef7","displayName":"Connectivity","description":"Device Restriction Connectivity","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise","technologies":"android"},{"id":"92be4fc7-8095-441c-b52b-9861c21bc337","displayName":"File Open/Save dialog box","description":"Microsoft Office 2016\\File Open/Save dialog box","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["8b7e662c-0410-4e33-ae11-edb7c717d914","4a832199-a841-4b6a-84fa-51365902a742"],"platforms":"windows10","technologies":"mdm"},{"id":"92d69c43-75ac-49b1-a3ef-9350079eef86","displayName":"Content settings","description":"Microsoft Edge\\Content settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","displayName":"Account Settings","description":"Microsoft Outlook 2016\\Account Settings","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["060e7533-6c2f-4ed1-9173-f3de58de4bed","43053249-ecd1-4d9f-9fa9-c05e7713da7f","c4dbc05f-da1e-440d-8beb-91bf9dad1875","b161cf66-abfa-4a36-a9ac-c20ca60594e0","63ca5d8b-829d-42c5-92e8-35f9ca47fb0e","ff87ffcb-a827-4d2b-90fc-e5789ef6d3e0","4e349e4a-dd0b-4175-8974-a2a0f5e35b4d"],"platforms":"windows10","technologies":"mdm"},{"id":"93099bd4-c685-434b-9d72-f0cb6db5e753","displayName":"Cloud delivered protection preferences","description":"Microsoft Defender > Cloud-delivered protection preferences","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS,linux","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"930d2960-3f70-48ca-9ead-b65a5a037c07","displayName":"SNMP","description":"Administrative Templates SNMP","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9329c2bd-9e56-4394-9c89-5726e8b76f2f","displayName":"Scripts","description":"Administrative Templates\\System\\Scripts","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"93a20c17-1e34-4778-8c95-91a46980ea75","displayName":"Out of Office Assistant","description":"Microsoft Outlook 2016\\Outlook Options\\Out of Office Assistant","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"93c28398-faef-4ca5-9667-f5ed004da32c","displayName":"Internet Information Services","description":"Administrative Templates Internet Information Services","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"93decccd-de24-4ec4-b21c-e08c14f13576","displayName":"Common Open File Dialog","description":"Administrative Templates\\Windows Components\\File Explorer\\Common Open File Dialog","helpText":null,"parentCategoryId":"35525ba9-da99-460e-afd3-ba86506b0ba3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"93ed2300-658d-40f3-8211-9295a240579c","displayName":"HTTP authentication","description":"Google Google Chrome HTTP authentication","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"949a5b32-bbe6-40f6-9d73-99cf9fafe75f","displayName":"Removable Data Drives","description":"Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Removable Data Drives","helpText":null,"parentCategoryId":"0101d1d0-1e54-47b0-a749-62c6bd7ab3da","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"94a92db4-8704-487b-b0c5-c15d6ac20e6d","displayName":"Notifications","description":"Administrative Templates Notifications","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"94b5c25e-3af3-4c08-b738-a0527f91dc22","displayName":"Security Intelligence Updates","description":"Administrative Templates Microsoft Defender Antivirus Security Intelligence Updates","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"94ce8206-be22-496c-aa72-f3560e2a5c8d","displayName":"Links","description":"Microsoft Office 2016 Links","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"94f6e868-1296-4811-b404-1afa2d50bc7c","displayName":"Windows Boot Performance Diagnostics","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Windows Boot Performance Diagnostics","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","displayName":"Storage","description":"Storage","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"94fd7e7e-2a0f-4b5e-903a-28868a2e7e3c","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,microsoftSense"},{"id":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","displayName":"Accounts","description":"Accounts","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","childCategoryIds":["5214f1e7-a5a9-4de5-80b4-2f7084a8d068","fa20bbc3-d25d-4a7f-a349-9b211d186e21","ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","9ba1b877-865a-4104-8376-b43a0c75b04b","831dcaee-a6fa-4893-a32d-e13fdf7d3777","45fe783f-a80b-42d9-ab3c-8c4081be8d05"],"platforms":"iOS,macOS,windows10","technologies":"mdm,appleRemoteManagement"},{"id":"952f69c8-2644-48df-976b-01fd624cbb3a","displayName":"Database","description":"Microsoft Office 2016\\Business Data\\Database","helpText":null,"parentCategoryId":"44541a16-c3a2-4be1-ba42-4fc15bde4c46","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9544c86b-47bb-4cb2-a725-63214a0454f4","displayName":"Cryptography","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Security\\Cryptography","helpText":null,"parentCategoryId":"85810387-3320-4056-bae2-953beeb246f7","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"957a5b24-ed7a-4f84-9d73-7b6131367396","displayName":"Advanced","description":"Microsoft Visio 2016\\Visio Options\\Advanced","helpText":null,"parentCategoryId":"f106d9e2-60ce-4e16-b74d-bd9ef401d7ba","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["bec8c55d-5aee-4d87-a17d-34d5b3b78f19","4e62ada2-f091-49e1-99dd-ffdf5cf558cd","98cefd27-a980-4070-ba45-3696b623810d","f59804be-7fc6-43c3-9baa-942aab85be84","6ae0d607-832c-403b-b3bc-c563e390ebad","66395272-f132-4170-b88e-87f794f987f4"],"platforms":"windows10","technologies":"mdm"},{"id":"96277512-3d35-4876-ad74-2d849348799e","displayName":"Privacy Settings","description":"Visual Studio Privacy Settings","helpText":null,"parentCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","rootCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"962a2377-ad9a-4654-a526-a77c14152fd7","displayName":"Content settings","description":"Google Google Chrome - Default Settings users can override Content settings","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"979412d7-6716-440c-9a64-5889026d73da","displayName":"Device Installation Restrictions","description":"Administrative Templates\\System\\Device Installation\\Device Installation Restrictions","helpText":null,"parentCategoryId":"486dc66e-960c-4622-b3cb-3ff9a2d434eb","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"9859957e-34f1-4669-9f95-2b7c79fff052","displayName":"Service Management - Managed Login Items","description":"Login > Service Management - Managed Login Items","helpText":null,"parentCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","rootCategoryId":"22f83491-cbb8-4a84-92c9-301ab9b3c6e3","childCategoryIds":[],"platforms":"macOS","technologies":"mdm"},{"id":"9865907f-b775-4d36-9578-a016c5105dfe","displayName":"AutoSave","description":"Microsoft Office 2016\\AutoSave","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"98c9cd71-f6eb-4dfd-b045-85c7e0b44487","displayName":"Controlled Folder Access","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Microsoft Defender Exploit Guard\\ Controlled Folder Access","helpText":null,"parentCategoryId":"49abf969-2a98-4479-b234-6990b152cb21","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"98cefd27-a980-4070-ba45-3696b623810d","displayName":"Shape Search","description":"Microsoft Visio 2016\\Visio Options\\Advanced\\Shape Search","helpText":null,"parentCategoryId":"957a5b24-ed7a-4f84-9d73-7b6131367396","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"98dc5bd0-2b16-4263-ba2f-62115b680017","displayName":"Group Policy","description":"Administrative Templates Group Policy","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["73935f55-c845-40ce-819e-838c0041f6fa","5bb9fb31-007d-4e3f-967b-11e865fcdc70"],"platforms":"windows10","technologies":"mdm"},{"id":"98e76d3e-9e52-45b3-b0c7-f029023121e9","displayName":"Privacy","description":"Privacy","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"98e76d3e-9e52-45b3-b0c7-f029023121e9","childCategoryIds":["82d173f9-ba0b-4b09-bbb8-68cba4916162"],"platforms":"macOS,windows10","technologies":"mdm"},{"id":"990880db-3f64-4436-ab4a-d7d5181dfa5d","displayName":"Personal Profile","description":"Device Restriction Personal Profile","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise","technologies":"android"},{"id":"992a8a1e-428e-41cb-948e-4e5da86105fa","displayName":"Device Guard","description":"Device Guard","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"992a8a1e-428e-41cb-948e-4e5da86105fa","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager"},{"id":"99b4ac32-50b5-4659-a7a1-94bc708ae71a","displayName":"Device Health Attestation Service","description":"Administrative Templates Device Health Attestation Service","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"99ba9e42-9872-4a03-a615-fc4a4cebc067","displayName":"Active Directory","description":"Administrative Templates Active Directory","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"99d68d97-63b7-4f49-83dd-1ad3b3281d0d","displayName":"Diagnostic Submission","description":"Managed Settings Diagnostic Submission","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"99dfe848-181d-480a-bd20-3f93f04b6f5c","displayName":"Locked- Down Intranet Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Locked- Down Intranet Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9a2bfe77-7e03-4a24-a9fa-c42a225a28b8","displayName":"Intelligent Services","description":"Microsoft Excel 2016\\Intelligent Services","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9a7843b4-6ec1-47c4-906b-75b8866e97c2","displayName":"Maps","description":"Maps","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"9a7843b4-6ec1-47c4-906b-75b8866e97c2","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9a79d480-8cb4-47b5-95c7-5da56eea5bb8","displayName":"Handwriting personalization","description":"Administrative Templates Regional and Language Options Handwriting personalization","helpText":null,"parentCategoryId":"7f363efe-1ea5-4eb8-baf7-8c34456b43fc","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9aaa7ee2-727d-426f-8a2b-6b10a4cd084f","displayName":"RSS Feeds","description":"Administrative Templates RSS Feeds","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9ad70461-c727-40da-8484-250369b6a119","displayName":"Client Coexistence","description":"Administrative Templates\\System\\App-V\\Client Coexistence","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9b0b8f3b-8e08-4083-9e2b-2e6bfeb01f83","displayName":"Kerberos","description":"Administrative Templates\\System\\Kerberos","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9b2ad6d8-8837-4c50-89d5-7507b69c7dec","displayName":"Miscellaneous","description":"Microsoft Office 2016\\Miscellaneous","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["5f048379-3a42-43f0-9fd5-d269f292aa35"],"platforms":"windows10","technologies":"mdm"},{"id":"9b74c5a8-98f8-49f0-b4eb-51e071d75776","displayName":"Task Scheduler","description":"Task Scheduler","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"9b74c5a8-98f8-49f0-b4eb-51e071d75776","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9b894b32-3697-4a83-9731-3db2a35455ad","displayName":"Cursors","description":"Administrative Templates Cursors","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9ba1b877-865a-4104-8376-b43a0c75b04b","displayName":"LDAP","description":"Accounts > LDAP","helpText":null,"parentCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","rootCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"9bad0513-ac85-431c-86d9-9e3167f9b403","displayName":"Locked-Down Intranet Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Locked-Down Intranet Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9c6a5b09-3fc4-4cf9-916f-d3a20496fd90","displayName":"Remote Desktop","description":"Remote Desktop Command","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"9c6a5b09-3fc4-4cf9-916f-d3a20496fd90","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"9c815001-eace-4aa6-a929-14af0a46aaf5","displayName":"Windows Shutdown Performance Diagnostics","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Windows Shutdown Performance Diagnostics","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9caa3b08-b545-4c21-a3b7-b5d2302c1a81","displayName":"Disable Items in User Interface","description":"Microsoft Publisher 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":["441d6cc4-e51f-453e-a44d-8394509415be","907fd656-2a80-4f34-8615-a3acb11a2b95"],"platforms":"windows10","technologies":"mdm"},{"id":"9d14bbed-327d-4c38-ac02-6b916909bdd9","displayName":"Microsoft Edge","description":"Microsoft Edge Apple","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"9d14bbed-327d-4c38-ac02-6b916909bdd9","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"9d26f3a1-6a54-4043-bda2-bfeb84e80524","displayName":"System","description":"Administrative Templates\\Windows Components\\Event Log Service\\System","helpText":null,"parentCategoryId":"fcddcc0b-7cf8-4ebc-a818-d10689603263","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9d6a14ba-11f5-423d-afc0-8d30be1153c1","displayName":"Link-Layer Topology Discovery","description":"Administrative Templates\\Network\\Link-Layer Topology Discovery","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9dbd66e3-4544-4ca8-a118-272c874bc684","displayName":"Local Security Authority","description":"Administrative Templates Local Security Authority","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9e857bed-81f8-4dfc-b049-c93eb68b4064","displayName":"Microsoft User Experience Virtualization","description":"Administrative Templates\\Windows Components\\Microsoft User Experience Virtualization","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["8028dead-8f13-4fe3-9998-ba1e841324d7","3afbcb74-88c5-4a41-bdc2-82c117b4e82e"],"platforms":"windows10","technologies":"mdm"},{"id":"9e882396-4a1c-4d06-a62d-8d910ded8e7d","displayName":"Restricted/Permitted snap-ins","description":"Administrative Templates\\Windows Components\\Microsoft Management Console\\Restricted/Permitted snap-ins","helpText":null,"parentCategoryId":"c483faac-cebf-448a-8f90-e8a125c0c4af","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["3d32fb39-ff23-48d9-9890-c8625d2d21e9","6355e85b-aeef-49e8-b8c9-5d6cd9a39985"],"platforms":"windows10","technologies":"mdm"},{"id":"9ecb05b7-e942-4b60-9040-d612385f5c67","displayName":"Calendar","description":"Microsoft Project 2016\\Project Options\\Calendar","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9f2e0190-516b-4e5b-94e7-f4ba7e4581f3","displayName":"Locked- Down Restricted Sites Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Locked- Down Restricted Sites Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","displayName":"User Rights","description":"User Rights","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"9fa124da-acc8-4f4a-a75d-732cd5f91bfd","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"9fd0e8e2-191f-4ac0-82b8-46cdfb5eddf8","displayName":"Accessories","description":"Administrative Templates Accessories","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a004deb8-6f52-4411-8d94-41563a8203fc","displayName":"Quarantine","description":"Administrative Templates Microsoft Defender Antivirus Quarantine","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a01c03d4-ec76-4c01-b982-de71620feb19","displayName":"Printing","description":"Printing","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a01c03d4-ec76-4c01-b982-de71620feb19","childCategoryIds":["174ffe92-3770-4688-aa21-85b7535cf374","429c4b85-a2b4-46ed-afa0-6c89c08a5544"],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","displayName":"Microsoft App Store","description":"Microsoft App Store","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a0c9f0b7-aa25-4e9c-a393-516145847b8b","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a0f1f801-7fce-427c-b5e2-6c6b30065fa5","displayName":"MpEngine","description":"Administrative Templates\\Windows Components\\Microsoft Defender Antivirus\\MpEngine","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a126378d-a916-476e-ad91-e3bd82fd3a48","displayName":"Notification bar","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Notification bar","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a18508d1-fd74-4955-8032-3bd9219a0944","displayName":"Fixed Data Drives","description":"Administrative Templates BitLocker Drive Encryption Fixed Data Drives","helpText":null,"parentCategoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a185940c-7899-4ab6-867d-7559352cf8d2","displayName":"OneNote Options","description":"Microsoft OneNote 2016\\OneNote Options","helpText":null,"parentCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":["1ae8c95a-5748-4647-80f8-b447e60601a2","44774d3d-387b-4fa7-8de4-d82b039c06d1","1979a12b-2a72-438d-9de7-320d1b38e777","c492dd55-8876-4b1b-b620-615cc9b65ef8","a87f9d6a-0c84-4cad-839f-e912c6006c12","fa471a57-af7b-4ccf-b6ba-4c57a7230498","acfe6c36-66ab-4a3e-86b0-a178377427d2","1bfef2c3-a561-4e7a-8f0f-0944bc79c20f","ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","84de2eed-843c-401b-a3fd-e21be88f2365","4a7b0e92-ba43-46aa-96e8-c5839dbcb524","25a84f2d-dbac-457e-b734-bc2605305f2b","ab8301d6-b122-4d40-868a-d00d3c0f1916","c02141e6-0725-4f6f-9138-83d10c6bc104","e4e72b9b-db0e-4a97-9d90-a21d87a4d9bf"],"platforms":"windows10","technologies":"mdm"},{"id":"a1d83497-da94-407f-bbc5-9f65ebc5f9fb","displayName":"Windows Mobility Center","description":"Administrative Templates\\Windows Components\\Windows Mobility Center","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a1fbe395-3b60-475f-8a34-3710d6b2e09f","displayName":"Browsing","description":"Administrative Templates Internet Explorer Internet Settings Advanced settings Browsing","helpText":null,"parentCategoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a20fe651-0f0a-4ddd-9d8b-273f17c89e22","displayName":"Custom","description":"Microsoft PowerPoint 2016\\Disable Items in User Interface\\Custom","helpText":null,"parentCategoryId":"e5cbbf8a-45b9-44c8-bce1-c5c2416c998a","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a2230bb9-81a5-4e95-bc7f-0fbc9ecb5de4","displayName":"Instant Search","description":"Administrative Templates\\Windows Components\\Instant Search","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a24e6384-a862-4d0e-8f6c-eb99e5f6a9db","displayName":"Windows Resource Exhaustion Detection and Resolution","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Windows Resource Exhaustion Detection and Resolution","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a24f4ab6-289a-450a-b438-1c4bb1214942","displayName":"App-V","description":"Administrative Templates\\System\\App-V","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["ea812d2c-1cf9-4132-9b33-12bb7ac17dbd","9ad70461-c727-40da-8484-250369b6a119","48f508a5-5a2c-4d20-8d89-2d352a209907","3800661e-5841-4499-8d4e-914527435f59","1f5d8243-cb7e-4b52-a12f-5f0e070d2769","0ef80736-8b59-4c6a-8bdc-e2b246b30e92","8caf4546-4ed8-4e8a-b9e7-5ab48c13b709","0236af48-9ce0-44d5-b085-de2323d7348e"],"platforms":"windows10","technologies":"mdm"},{"id":"a25a7a02-4bac-411b-9d02-10cb3297cb17","displayName":"Microsoft Edge","description":"Microsoft Edge","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":["43057320-7058-46d5-86f9-a56c80bbf8b9","fb1e99d0-b921-4b19-9842-17e3e7987528","45a89c1f-0a34-4f78-b28f-d30b623fa423","b3c8c6d9-28bb-475a-9353-4a0e657b33c7","1043e7ed-8651-44b2-b918-7230c0b75a6c","ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","81c518f1-522e-4957-b850-e8a66d2ab215","526e363a-84db-4256-a13c-e01c8c646e26","d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","2e241b46-e5ae-41d7-a559-fe40819e86f4","d17b08e6-de3b-445b-ab14-1d47e62efdcf","05811ceb-2954-426c-8afa-2a53f02480cc","2af24920-f611-4f03-99a6-205773869ae6","6d529e48-5477-4ceb-8ff7-c6e959a0e24f","5bd0eaf1-1818-44e8-9168-fc75c5739cc8","92d69c43-75ac-49b1-a3ef-9350079eef86","66615d2a-fec9-47f1-8eaf-9813e30cc023","dfab5866-1712-4bbf-8edf-5b080b315b9b","3edb2860-b77b-4240-af16-fb34d45d6ba1","ae78ab75-2d0d-418c-be6f-9e64642de4e2","3ba8106d-4b2f-4775-939d-1cc8703a41dc","fe845e81-5993-4a65-b22a-decfc5928c65","16ea64a1-563e-43cc-b34a-728c8e7cd13c","08c5f391-e156-4a72-bbb9-3670f2f63a56","120b24dd-c04a-4291-8f24-9c48fcdc1434","5e8e9c7f-1988-45cd-b5ca-78d939e3d49e","3fbd3b29-bafd-4adf-89e4-3be612dee275","8bcf8b08-35a3-49b7-8760-5fe3b767d6a6","fddc444c-3591-4a50-865b-d8993b798e12","3abaf4c2-d5db-4b3b-a461-b1a208231b36","8aa3383a-efac-4ec4-841d-06e3e18646d8","eb6409fc-fb52-413d-ae4b-eff017b52b30","c6099521-a05f-480a-8562-7e71318e2cda","00d7396c-cadc-4d29-86ba-fe4df2ecb110","08677354-6f67-455e-a430-4d8d2fbabe84","76e34834-6d47-4e06-b14c-aa2888cdce27","ef8760ac-a77c-4055-a812-a95bfbf9c00a"],"platforms":"android,iOS,macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"a279f35f-cd71-4489-b0c3-545ea1aa229d","displayName":"Local Security Authority","description":"Local Security Authority","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a279f35f-cd71-4489-b0c3-545ea1aa229d","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a2806db0-3cea-4a1a-8c1c-f9e1fdfd316b","displayName":"Disable Items in User Interface","description":"Microsoft Excel 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":["3b7e16e7-171f-4169-8904-c8483b06700d","3fa63a9d-e22d-4fc8-8464-a13b56461115"],"platforms":"windows10","technologies":"mdm"},{"id":"a28dd311-46e8-4868-89ab-d3745c0bca21","displayName":"Security","description":"Administrative Templates Event Log Service Security","helpText":null,"parentCategoryId":"f14fcb64-a868-4531-a3b4-c3cdf03c2b99","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a321fc04-d0cb-45ec-a6bf-51d60249922d","displayName":"Automatic Picture Download Settings","description":"Microsoft Outlook 2016\\Security\\Automatic Picture Download Settings","helpText":null,"parentCategoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a33fb618-0ad1-40a3-b94b-49c90c49ea03","displayName":"RemoteFX for Windows Server 2008 R2","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Remote Session Environment\\RemoteFX for Windows Server 2008 R2","helpText":null,"parentCategoryId":"ce572b49-4d47-47b6-b787-ac1252753581","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a34ade49-964d-407c-9f60-2e8cd9dfef05","displayName":"Smart Card","description":"Administrative Templates Smart Card","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","displayName":"Programmatic Security","description":"Microsoft Outlook 2016\\Security\\Security Form Settings\\Programmatic Security","helpText":null,"parentCategoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["e94d8ce3-d08e-4ee6-83e9-5f89aa37a6bf"],"platforms":"windows10","technologies":"mdm"},{"id":"a37dba52-d558-47fb-9d46-a5d3bdc5fdd7","displayName":"Windows Remote Management (WinRM)","description":"Administrative Templates\\Windows Components\\Windows Remote Management (WinRM)","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["c919e047-97fc-489f-ab0e-bcb070e36c55","023116df-a32c-43b0-a384-d6fe7ad9fabe"],"platforms":"windows10","technologies":"mdm"},{"id":"a3e48951-624d-4fee-b470-d17ce16e6b0c","displayName":"Secure Boot","description":"Secure Boot","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a3e48951-624d-4fee-b470-d17ce16e6b0c","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a3ea4da3-445e-41c0-ac4d-c9ad2467ec26","displayName":"Features","description":"Microsoft Defender Features","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"a3ec7cde-bca6-4e3e-9f7e-f66a43196924","displayName":"Windows Backup And Restore","description":"Windows Backup And Restore","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a3ec7cde-bca6-4e3e-9f7e-f66a43196924","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a40e47b0-5b27-4e4d-b2ef-42f20540e812","displayName":"Graph settings","description":"Microsoft Office 2016\\Graph settings","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a42e2248-d2dc-4476-a92d-d152fd67e04b","displayName":"Audio Accessory","description":"Declarative Device Management preview Audio Accessory","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS","technologies":"appleRemoteManagement"},{"id":"a4877a42-7e62-4216-a477-0b35357ab313","displayName":"Remote Desktop Connection Client","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Connection Client","helpText":null,"parentCategoryId":"572bc940-42d4-4e00-ac55-012e9b90f6df","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["728890f5-bddd-4b69-a1b6-efb221d902d4"],"platforms":"windows10","technologies":"mdm"},{"id":"a4bffc2b-76af-48d3-acdf-8566e51ef163","displayName":"Restricted Sites Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Restricted Sites Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a4f5cedd-a8f7-4def-b8b6-8fbf9ce9e0d8","displayName":"Windows System Responsiveness Performance Diagnostics","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Windows System Responsiveness Performance Diagnostics","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a4fb2510-977f-42ff-9033-6f1eb98f141b","displayName":"Device Lock","description":"Device Lock","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a4fb2510-977f-42ff-9033-6f1eb98f141b","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a5060182-4d22-412b-bd0e-3a1e009b36c6","displayName":"Client Interface","description":"Administrative Templates Microsoft Defender Antivirus Client Interface","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a51a8665-045d-482d-b68b-2128959c8b31","displayName":"WWAN UI Settings","description":"Administrative Templates\\Network\\WWAN Service\\WWAN UI Settings","helpText":null,"parentCategoryId":"fc8f887c-cfd9-4bea-bfac-2214d06dba99","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a53581a1-e9d7-4ba4-9dea-cea90d40cca1","displayName":"Work Folders","description":"Administrative Templates\\Windows Components\\Work Folders","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a5607145-2bd3-4473-a8ee-d7fa5c2f2675","displayName":"Fax","description":"Microsoft Office 2016\\Services\\Fax","helpText":null,"parentCategoryId":"478ed057-8ee7-4dd2-8276-06dad8f85397","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a561e59a-09b7-4106-a6fa-0b82036a5b49","displayName":"RD Gateway","description":"Administrative Templates Remote Desktop Services RD Gateway","helpText":null,"parentCategoryId":"c48917c1-fd99-405f-b1d2-9dfec169e5d8","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a57b27b6-48e0-42b2-812a-2be86c113a0c","displayName":"Application Compatibility Settings","description":"Administrative Templates Distributed COM Application Compatibility Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a57f0abc-605b-433e-b7da-45ee127188cd","displayName":"Event Logging","description":"Administrative Templates\\Windows Components\\Event Logging","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a5a38799-7bf1-4b83-86fe-62729cd9ed9d","displayName":"Password manager","description":"Google Google Chrome Password manager","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a5a56a36-6d60-4f74-a3c6-d82ed979b24a","displayName":"Reporting","description":"Administrative Templates Microsoft Defender Antivirus Reporting","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a5aea816-9c1d-4a85-a2ab-33e3d1c26a8c","displayName":"Co-authoring","description":"Microsoft Office 2016\\Collaboration Settings\\Co-authoring","helpText":null,"parentCategoryId":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a5ce858b-74c2-4663-9b3e-068d31349a13","displayName":"Cryptography","description":"Microsoft Word 2016\\Word Options\\Security\\Cryptography","helpText":null,"parentCategoryId":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","displayName":"Lanman Workstation","description":"Lanman Workstation","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a6780c5d-05e0-4047-a6a7-aa7fc4804163","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a69e7a98-5af7-4834-bae1-2a1047663a71","displayName":"Desktop","description":"Administrative Templates\\Desktop\\Desktop","helpText":null,"parentCategoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a6e0cee7-34a0-4ca2-b4da-f819a057b532","displayName":"Synchronization","description":"Microsoft Office 2016\\Business Data\\Synchronization","helpText":null,"parentCategoryId":"44541a16-c3a2-4be1-ba42-4fc15bde4c46","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","displayName":"Wireless Display","description":"Wireless Display","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a6e15085-a3a9-41dd-9a6a-65c8a26c616d","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a6fe8038-136b-4d50-bf04-8e232409c0d2","displayName":"Web Content Filter","description":"Web > Web Content Filter","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a6fe8038-136b-4d50-bf04-8e232409c0d2","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"a754c9bd-2116-4dd6-9014-07f914869145","displayName":"Proxies","description":"Proxies","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a754c9bd-2116-4dd6-9014-07f914869145","childCategoryIds":["b8ed9eb3-17de-4091-b08b-7adb2fe13271","906df5cd-1d9e-49d0-ab32-cf5c5a041974"],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"a77e6e83-a02e-4a51-a27e-6437ea42aeb5","displayName":"Human Presence","description":"Human Presence","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a77e6e83-a02e-4a51-a27e-6437ea42aeb5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a787672d-4a33-455b-a2db-e340eb35a5c8","displayName":"WSL container","description":"Windows Subsystem for Linux WSL container","helpText":null,"parentCategoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","rootCategoryId":"57514d69-d9b1-469a-9b54-b5e94320c2a1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a788a6e5-ab3f-41e5-96c8-ee59627dcb4d","displayName":"Workgroup Administrator...","description":"Microsoft Access 2016\\Tools | Security\\Workgroup Administrator...","helpText":null,"parentCategoryId":"607a1c39-a3db-496f-8db6-c99d67f5f76c","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a79b2d36-7dea-4a84-81ef-27f99296bccf","displayName":"Authentication","description":"Authentication","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","childCategoryIds":["f35cc803-3a06-4262-b38b-a5295321f756","c3fdc01d-0648-4dcb-855d-7afe78bf1d89","7b6ddf4e-7136-4fde-adbf-38e6bdfcc962","5995d2ad-5ec7-49d2-ada2-d9c2b57746ba"],"platforms":"iOS,macOS,windows10","technologies":"mdm,appleRemoteManagement"},{"id":"a7b038e5-3af5-41fe-919e-e8befe83a9a5","displayName":"SmartScreen settings","description":"Microsoft Edge - Default Settings (users can override)\\SmartScreen settings","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a7b1c291-6bec-499b-9018-6120950cd5a6","displayName":"App Control for Business","description":"App Control for Business","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a7b1c291-6bec-499b-9018-6120950cd5a6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a7d55d90-e1d1-4577-8bfd-fe2641bce461","displayName":"User Interface Options","description":"Microsoft Visio 2016\\Visio Options\\General\\User Interface Options","helpText":null,"parentCategoryId":"f106d9e2-60ce-4e16-b74d-bd9ef401d7ba","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a7e7529f-1030-41da-8b4d-024e1c08bbac","displayName":"Windows Standby Resume Performance Diagnostics","description":"Administrative Templates Windows Standby Resume Performance Diagnostics","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a809df26-b5db-4af9-b247-a539ada4e869","displayName":"Add or Remove Programs","description":"Administrative Templates\\Control Panel\\Add or Remove Programs","helpText":null,"parentCategoryId":"7a3a7335-4837-4bc5-9282-448402a05d89","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a877a2ff-f144-421f-814c-593e972a8a20","displayName":"Password manager and protection","description":"Microsoft Edge - Default Settings (users can override)\\Password manager and protection","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a87f9d6a-0c84-4cad-839f-e912c6006c12","displayName":"Send to OneNote","description":"Microsoft OneNote 2016\\OneNote Options\\Send to OneNote","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","displayName":"Microsoft Office 2016","description":"Microsoft Office 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["042ab9cf-9524-4dd4-b049-4d5f4ff7053f","2d6891a4-ee83-4e55-8e23-09513e1306e4","af14a55b-d79b-4299-946c-b7582412b748","bc633a5a-c712-49a6-9f56-775ca9321df4","5cd6dc4f-b231-449f-bc10-16041b73356a","eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","adf11731-7089-4e2e-8dde-4bd9ef86b067","449201b6-5002-42d1-85ed-d288fb6552da","cc29afc6-309c-4a0d-86f6-60081ae7cd4c","72a7524b-11c5-4695-9fcf-6cf30c8ba2b9","eb947c30-3c43-4d34-a566-a842a1a142f3","6aeb1df3-d796-4c5b-921d-9f3970a754cc","866eedbc-ffd9-457d-b02b-7b163d55c4bd","44541a16-c3a2-4be1-ba42-4fc15bde4c46","da04d4b8-bd11-439e-9663-5fd2399d9cc1","760376f3-6b74-4992-89eb-aa41d6190e94","5b1be2c5-9939-4b2e-b29b-b22069455c90","94ce8206-be22-496c-aa72-f3560e2a5c8d","2f56761a-8e8b-4788-a589-a73ab91818e6","05a6f86f-dab7-4888-97a1-db3457f00974","055293ad-c585-40c0-b66c-76ff5cc0a332","9b2ad6d8-8837-4c50-89d5-7507b69c7dec","8b0e5a63-c309-430b-8521-7bd21e715b90","59c9b1c4-1757-4cf3-9b27-954dafe016d5","7a8b936d-b4b0-408f-bec5-3c97050730f8","42d8353a-a135-4c2d-8d06-c6cf9961c6c5","9865907f-b775-4d36-9578-a016c5105dfe","b94cbc54-e565-44f2-a27a-a63b2514d8bf","4e0d279d-5ddd-4c4e-8590-6ed92129444d","5bf4c2ba-be08-4cda-bf33-d10707580d78","23c09e06-5bee-4b20-a391-36549bf0f620","8084033c-156a-4d1b-ab0b-159541810459","0696109e-045f-486a-9a6b-ab7877887bed","1942922a-cba9-44c8-871f-3d915c62bd06","33fb4f49-5c7f-472c-a0f3-e05646a55902","4aec010d-487a-4752-8e66-aedb9e4fbb5a","92be4fc7-8095-441c-b52b-9861c21bc337","50b4bc60-802c-477a-9366-80e09154595f","e86f24d3-8531-4298-b064-692ea795b1d9","a40e47b0-5b27-4e4d-b2ef-42f20540e812","478ed057-8ee7-4dd2-8276-06dad8f85397","6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","2d5a483f-b408-426d-9234-2883eae20afb"],"platforms":"windows10","technologies":"mdm"},{"id":"a92d0868-54e7-4a4f-a9f0-87bb1b81af3a","displayName":"Save","description":"Microsoft Excel 2016\\Excel Options\\Save","helpText":null,"parentCategoryId":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","displayName":"Security","description":"Microsoft Outlook 2016\\Security","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["a321fc04-d0cb-45ec-a6bf-51d60249922d","1720d60f-40a6-471c-8e4c-efbacaf46997","c3db5686-3bb2-437c-8906-60da1a1fa844","d4e5541e-ab77-4e6c-8046-1fb80ee705ad"],"platforms":"windows10","technologies":"mdm"},{"id":"a9edc695-b4a9-4111-b07d-627f934f5a1a","displayName":"Trust Center","description":"Microsoft Access 2016\\Application Settings\\Security\\Trust Center","helpText":null,"parentCategoryId":"23fd467e-24f8-4200-8b19-c6c11afa8926","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":["12ad5ec7-346d-4b8b-9eba-d826cdb61c31"],"platforms":"windows10","technologies":"mdm"},{"id":"aa67f0c0-4eb0-492f-a528-decd3e256a22","displayName":"Hardware Buttons","description":"Administrative Templates\\Windows Components\\Tablet PC\\Hardware Buttons","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"aad0d3ef-88f5-4b22-831b-27093eafbc64","displayName":"Users and Accounts","description":"Device Restriction User and Accounts","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise","technologies":"android"},{"id":"ab2be8b5-5912-4909-8d8b-e66edf4ab097","displayName":"Logging","description":"FS Logix Logging","helpText":null,"parentCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ab33bc0d-aea2-440a-a3c3-bf0fb84b98ce","displayName":"Consistent Mime Handling","description":"Administrative Templates Internet Explorer Security Features Consistent Mime Handling","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ab6aa2f6-87bf-4a06-a206-e0902af3e4bc","displayName":"WWAN Media Cost","description":"Administrative Templates\\Network\\WWAN Service\\WWAN Media Cost","helpText":null,"parentCategoryId":"fc8f887c-cfd9-4bea-bfac-2214d06dba99","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ab754829-54a1-4082-abfa-56bae0b07ff3","displayName":"Presentation Settings","description":"Administrative Templates\\Windows Components\\Presentation Settings","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ab8301d6-b122-4d40-868a-d00d3c0f1916","displayName":"Other","description":"Microsoft OneNote 2016\\OneNote Options\\Other","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"abf781d7-1179-4f24-8d01-5611db14eddc","displayName":"Touch Input","description":"Administrative Templates Touch Input","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ac014aea-e417-46ad-a4a5-9a1fb1030882","displayName":"Locked- Down Internet Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Locked- Down Internet Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ac0a894c-173a-48fc-b961-901f28463c77","displayName":"Direct Access Client Experience Settings","description":"Administrative Templates Direct Access Client Experience Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ac2d7c6b-7321-42b4-8dd1-d69e15c5f3f6","displayName":"User Profiles","description":"Administrative Templates User Profiles","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ac821e49-1996-4d6c-99d4-9c3c3e4737b6","displayName":"Related Website Sets Settings","description":"Google Google Chrome Related Website Sets Settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"acabc66f-5faf-4a13-af32-322ccfc1a5b3","displayName":"Sleeping Tabs settings","description":"Microsoft Edge - Default Settings (users can override)\\Sleeping Tabs settings","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"acb49e73-5a6a-479b-9d58-c3cd7f632e9b","displayName":"Restricted Permitted snap-ins","description":"Administrative Templates Microsoft Management Console Restricted Permitted snap-ins","helpText":null,"parentCategoryId":"07c023d3-0899-40af-a04f-805876d99a9b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["756d2b0b-5f06-45e7-b5c5-c066deb5ed2f"],"platforms":"windows10","technologies":"mdm"},{"id":"acbc106b-796a-4ba3-ab5f-c130530ad455","displayName":"Earned Value options for Project1","description":"Microsoft Project 2016\\Project Options\\Calculation\\Calculation options for 'Project1'\\Earned Value options for Project1","helpText":null,"parentCategoryId":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"acbc98d1-689b-4f9c-9c5a-e6bbf305e654","displayName":"Operating System Drives","description":"Administrative Templates BitLocker Drive Encryption Operating System Drives","helpText":null,"parentCategoryId":"0d37dddd-6575-485c-92dd-37a3c23edbf9","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"accec716-3bf1-4a33-882d-3538d32fcbbc","displayName":"Browsing","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Settings\\Advanced settings\\Browsing","helpText":null,"parentCategoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"acfe6c36-66ab-4a3e-86b0-a178377427d2","displayName":"Save","description":"Microsoft OneNote 2016\\OneNote Options\\Save","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ad100c6c-9a9a-42cf-8f42-b31c406c1a56","displayName":"Security Intelligence Updates","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Security Intelligence Updates","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ad1ecbf4-75da-4dc1-9354-7d00c0e2af72","displayName":"Allday","description":"Allday","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"ad1ecbf4-75da-4dc1-9354-7d00c0e2af72","childCategoryIds":[],"platforms":"android,iOS","technologies":"exchangeOnline"},{"id":"ad47f904-ede2-4b12-849e-bf751d88abf5","displayName":"Display","description":"Administrative Templates Display","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ad84cea3-5664-4e42-a9d6-1446828bea45","displayName":"Microsoft Defender Exploit Guard","description":"Administrative Templates Microsoft Defender Antivirus Microsoft Defender Exploit Guard","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["210b9c4d-e72a-45a4-97d3-339a6b30c49c","72f61c7d-e5d2-4170-baf3-c953c1082e19"],"platforms":"windows10","technologies":"mdm"},{"id":"ad9610c6-d1c5-4c7a-9e74-58b810dd759d","displayName":"Save","description":"Microsoft Visio 2016\\Visio Options\\Save","helpText":null,"parentCategoryId":"f106d9e2-60ce-4e16-b74d-bd9ef401d7ba","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["2eed22da-106f-4c93-9a45-5ce803b50233","73415dea-0103-4427-83c5-6c97bf81af1d"],"platforms":"windows10","technologies":"mdm"},{"id":"adc4eb7f-0f34-4f43-b361-dc42363eccab","displayName":"Mp Engine","description":"Administrative Templates Microsoft Defender Antivirus Mp Engine","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"adf11731-7089-4e2e-8dde-4bd9ef86b067","displayName":"What's New","description":"Microsoft Office 2016\\What's New","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ae78ab75-2d0d-418c-be6f-9e64642de4e2","displayName":"Sleeping Tabs settings","description":"Microsoft Edge\\Sleeping Tabs settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"ae89907b-f0c0-4e8f-ab59-dc5514e0a2ff","displayName":"Signature Status dialog box","description":"Microsoft Outlook 2016\\Security\\Cryptography\\Signature Status dialog box","helpText":null,"parentCategoryId":"1720d60f-40a6-471c-8e4c-efbacaf46997","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"af14a55b-d79b-4299-946c-b7582412b748","displayName":"Tools | Options | General | Service Options...","description":"Microsoft Office 2016\\Tools | Options | General | Service Options...","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["91041ad3-e0a6-43fd-bc7b-ad4c7dda5765","5838ed03-2902-4931-92cf-e349ab09c9b8","6c142a01-47fa-422d-8135-29e81bc970cc"],"platforms":"windows10","technologies":"mdm"},{"id":"af351b0c-3d9e-4b18-957b-8179e4eaba15","displayName":"Safe Browsing settings","description":"Google Google Chrome - Default Settings users can override Safe Browsing settings","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"af9b2941-29f9-4ee5-ae09-215f4e242943","displayName":"AutoCorrect Options","description":"Microsoft Visio 2016\\Visio Options\\Proofing\\AutoCorrect Options","helpText":null,"parentCategoryId":"8495c82c-f273-4bcc-8886-6751103a9c7b","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","displayName":"Microsoft One Note 2016","description":"Microsoft One Note 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":["b135b86c-b0f4-4cb5-94f4-a6c7ae2013d9","a185940c-7899-4ab6-867d-7559352cf8d2"],"platforms":"windows10","technologies":"mdm"},{"id":"b03bfdc7-f42a-400e-935b-2b07fc71a7f1","displayName":"Mime Sniffing Safety Feature","description":"Administrative Templates Internet Explorer Security Features Mime Sniffing Safety Feature","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b135b86c-b0f4-4cb5-94f4-a6c7ae2013d9","displayName":"Custom","description":"Microsoft One Note 2016 Disable Items in User Interface Custom","helpText":null,"parentCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b1393de2-587f-4516-a35d-58098f2be3c9","displayName":"WLAN Media Cost","description":"Administrative Templates\\Network\\WLAN Service\\WLAN Media Cost","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b13e38a0-6ad6-4a1f-b53f-d8ca94847586","displayName":"SNMP","description":"Administrative Templates\\Network\\SNMP","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b1585568-da15-41fc-a1d0-5d0b194de84c","displayName":"Locked-Down Internet Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Locked-Down Internet Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b161cf66-abfa-4a36-a9ac-c20ca60594e0","displayName":"Exchange ActiveSync","description":"Microsoft Outlook 2016\\Account Settings\\Exchange ActiveSync","helpText":null,"parentCategoryId":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b206e4ef-a288-4fb7-a7ee-4a30b4df3b98","displayName":"Server Settings","description":"Microsoft Word 2016\\Miscellaneous\\Server Settings","helpText":null,"parentCategoryId":"320ccaa3-a391-4d29-a9c4-594561f4104d","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b221d3c2-e05a-4210-bf9c-2d7c7c0fd35a","displayName":"SSL Configuration Settings","description":"Administrative Templates\\Network\\SSL Configuration Settings","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b237a91d-a442-4a7e-8169-1bd6c798f490","displayName":"Profiles","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Profiles","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b260992a-8216-4bfa-b60a-4eeea1f356c9","displayName":"News and interests","description":"Feeds","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"b260992a-8216-4bfa-b60a-4eeea1f356c9","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b2b85670-5475-4148-ab3d-c4c86b4d5af0","displayName":"PKCS imported certificate","description":"PKCS imported certificate","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"b2b85670-5475-4148-ab3d-c4c86b4d5af0","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b32726b3-b0e9-465b-86f8-b61ad8af52f0","displayName":"Default Applications","description":"Managed Settings Default Applications","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"b3282777-8e27-4029-b153-6f6e5b86b53c","displayName":"HomeGroup","description":"Administrative Templates\\Windows Components\\HomeGroup","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b382d980-7459-4850-a45e-75dd99488972","displayName":"Software Update Settings","description":"Declarative Device Management preview Software Update Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"b3b2fc04-4b88-4a1c-8370-04573019eebe","displayName":"LAPS","description":"Administrative Templates\\LAPS","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b3b30966-47ac-4b54-a75a-04418d5c6153","displayName":"Dev Tunnel Settings","description":"Visual Studio Dev Tunnel Settings","helpText":null,"parentCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","rootCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b3c8c6d9-28bb-475a-9353-4a0e657b33c7","displayName":"PDF Reader","description":"Microsoft Edge PDF Reader","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"b3e317cd-c580-478e-885c-666ce3079e78","displayName":"Outlook Social Connector","description":"Microsoft Outlook 2016\\Outlook Social Connector","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b40b8f80-c0e6-4494-8085-f90cadc167a9","displayName":"Temporary folders","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Temporary folders","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b40cfb22-8f17-4317-bcbb-c1c871497446","displayName":"Location and Sensors","description":"Administrative Templates Location and Sensors","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b4272e06-316f-4f9a-a198-93f4168f0c78","displayName":"Corrupted File Recovery","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Corrupted File Recovery","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b46f4e70-d3d1-4177-8e22-62f806d4568c","displayName":"Other","description":"Google Google Chrome Other","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b473c6fa-a971-4e5d-ad15-2c27c17c5d3e","displayName":"Power BI","description":"Microsoft Excel 2016\\Power BI","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b485695b-0fae-41ae-861c-3030769b28df","displayName":"Safe Browsing settings","description":"Google Google Chrome Safe Browsing settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","displayName":"Security Features","description":"Administrative Templates Internet Explorer Security Features","helpText":null,"parentCategoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["ab33bc0d-aea2-440a-a3c3-bf0fb84b98ce","e6911a08-946f-4b70-99cb-2a8b92c461e0","622c83ff-f780-47e6-8b9c-bf82552e3f04","853d5a82-91e4-4c53-8338-fd1a3d9b542c","3bbaff1b-7d59-4b9c-ab53-c235d72b2fb0","b03bfdc7-f42a-400e-935b-2b07fc71a7f1","4560c525-12a1-4536-9cca-338330e58389","17bc9899-d157-4eac-a949-810b4a841e28","18296501-4825-47ea-835d-66a01aba9384"],"platforms":"windows10","technologies":"mdm"},{"id":"b49cb414-bdfb-49d4-af5d-176ded4f9591","displayName":"User Profiles","description":"Administrative Templates\\System\\User Profiles","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b5006d56-dc0b-4a07-95ee-d6d6e3000f9f","displayName":"Time Providers","description":"Administrative Templates\\System\\Windows Time Service\\Time Providers","helpText":null,"parentCategoryId":"bd04d2ce-3275-496c-8cc1-e17ab19888a3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b5169b74-41be-460a-9402-b13b6c22582b","displayName":"Microsoft Office","description":"Microsoft Office > Microsoft Office","helpText":null,"parentCategoryId":"522c3302-7a25-4904-a274-66cef9fd6aa0","rootCategoryId":"522c3302-7a25-4904-a274-66cef9fd6aa0","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"b5234c18-e555-409e-9550-59b89d1672f1","displayName":"Window Frame Coloring","description":"Administrative Templates\\Windows Components\\Desktop Window Manager\\Window Frame Coloring","helpText":null,"parentCategoryId":"be6b97de-f120-4d89-b7c9-b548d061bac8","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b524d6e2-75bc-4409-ae3d-07605707d7ee","displayName":"Pen UX Behaviors","description":"Administrative Templates Pen UX Behaviors","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b5b6e80d-463d-4e54-aec0-e3a0d3b3cb20","displayName":"Windows Power Shell","description":"Administrative Templates Windows Power Shell","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b62de64d-03ed-4e09-be5c-5cc93e34ea47","displayName":"iSCSI Security","description":"Administrative Templates\\System\\iSCSI\\iSCSI Security","helpText":null,"parentCategoryId":"363982dd-fc96-49ce-a499-f6401f2c212b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b6650a16-32bc-4344-ac98-8f20486c6b0b","displayName":"Cellular Private Network","description":"Cellular Private Network","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"b6650a16-32bc-4344-ac98-8f20486c6b0b","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"b6733d23-eadc-486a-abfc-62b78698a16c","displayName":"General","description":"Device Restriction General","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise,aosp","technologies":"android"},{"id":"b6ad9576-be4c-46b9-a3a6-13a03ff1fed7","displayName":"Managed Menu Extras","description":"User Experience > Managed Menu Extras","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"b6bb653a-73f0-42f4-b097-1ce556310904","displayName":"Scripted Diagnostics","description":"Administrative Templates Scripted Diagnostics","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b6cafb2c-81be-40cf-90d8-788f713f7099","displayName":"Replace as you type","description":"Microsoft Word 2016\\Word Options\\Proofing\\AutoFormat as you type\\Replace as you type","helpText":null,"parentCategoryId":"4dae3032-1f16-4ace-911b-a957db0b8089","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b6d13875-fd8e-41a0-a712-3dab8b75b93f","displayName":"App Package Deployment","description":"Administrative Templates App Package Deployment","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b74f852c-d19b-4a22-a44a-431f7a72a4d6","displayName":"Scripted Window Security Restrictions","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\Scripted Window Security Restrictions","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b77a3a7b-6fab-4240-b5c3-852aa78781d5","displayName":"Endpoint Detection and Response (EDR) preferences","description":"Microsoft Defender > Endpoint Detection and Response (EDR) preferences","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"b792508d-da03-4174-bcf1-666d128ee8ad","displayName":"AutoFormat as you type","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Proofing\\AutoFormat as you type","helpText":null,"parentCategoryId":"e2610f41-9a95-47e5-9fc9-572e26dc6baa","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b7bde490-eac6-4f57-8808-e0786b8191a1","displayName":"Remote FX for Windows Server 2008 R2","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Remote Session Environment Remote FX for Windows Server 2008 R2","helpText":null,"parentCategoryId":"5f28f9ff-58f8-43af-9692-3d06e083bbd9","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b811c4fe-7ff0-4bd1-a454-0918d4e2f896","displayName":"Web Rtc settings","description":"Google Google Chrome Web Rtc settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b8158968-c839-4d37-9eb8-887bd6fd7402","displayName":"Disable Items in User Interface","description":"Microsoft Access 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":["dba1a547-e288-45ac-8553-27a3b564699e","55eebd7c-beb9-48b6-907f-df4997e18bdb"],"platforms":"windows10","technologies":"mdm"},{"id":"b83cafe6-7d8b-4e3b-890d-ce50e548cfc6","displayName":"Win RM Service","description":"Administrative Templates Windows Remote Management Win RM Win RM Service","helpText":null,"parentCategoryId":"364787de-93e4-4fd6-9608-dce1ad8f88c2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b85d9c04-4923-4fdf-a425-424686d47859","displayName":"Siri Settings","description":"Declarative Device Management preview Siri Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"b8adcde1-500a-430f-8636-f97eaae2a2c6","displayName":"Japanese Find","description":"Microsoft Word 2016\\Japanese Find","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b8ed9eb3-17de-4091-b08b-7adb2fe13271","displayName":"Network Proxy Configuration","description":"Proxies > Network Proxy Configuration","helpText":null,"parentCategoryId":"a754c9bd-2116-4dd6-9014-07f914869145","rootCategoryId":"a754c9bd-2116-4dd6-9014-07f914869145","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"b90fb0dc-b8c1-4fc3-b9f9-dfbda4b3f03d","displayName":"General","description":"Microsoft Excel 2016\\Excel Options\\Advanced\\Web Options...\\General","helpText":null,"parentCategoryId":"3503e1ba-8168-4b55-92b1-84613292cadc","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b9201072-3681-4e95-ad90-869e6166b129","displayName":"Client Coexistence","description":"Administrative Templates App-V Client Coexistence","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b92241c7-e419-4dc7-b373-08e595c1db1d","displayName":"Operating system","description":"Operating system","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"b92241c7-e419-4dc7-b373-08e595c1db1d","childCategoryIds":[],"platforms":"windows10","technologies":"windowsOsRecovery"},{"id":"b94cbc54-e565-44f2-a27a-a63b2514d8bf","displayName":"DLP","description":"Microsoft Office 2016\\DLP","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b96b63eb-0292-4a73-85d7-c68d330c109e","displayName":"Extensions","description":"Microsoft Edge - Default Settings (users can override)\\ Extensions","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b9aafd85-b42a-4742-bbba-770b93678a52","displayName":"Locked-Down Trusted Sites Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Locked-Down Trusted Sites Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"b9ab4d39-9e28-4897-aa34-0201a35ea989","displayName":"Right-to-left","description":"Microsoft Outlook 2016\\Outlook Options\\Right-to-left","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ba1d333c-e19b-4470-bbab-d040a633c3a3","displayName":"IME","description":"Administrative Templates\\Windows Components\\IME","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ba7097b2-cd24-4394-9b3e-2c281ed30ae5","displayName":"Windows Media Digital Rights Management","description":"Administrative Templates\\Windows Components\\Windows Media Digital Rights Management","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ba7686de-e6ee-4af9-b1a5-265b03e08367","displayName":"Microsoft PowerPoint 2016","description":"Microsoft PowerPoint 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["ceacf7fa-fa6e-434d-a381-e20e5245d180","da92dfd6-a29e-42a0-92ed-276bb6904455","28ab8eed-623a-4e9b-813e-13256472dbaf","e5cbbf8a-45b9-44c8-bce1-c5c2416c998a","f5babdb3-c718-4675-b977-6c7bc7e6f886","da1503cb-e474-4545-8e77-cdd577f34a08"],"platforms":"windows10","technologies":"mdm"},{"id":"bb54b081-5004-4f05-a46c-f5b948f57b82","displayName":"NTFS","description":"Administrative Templates Filesystem NTFS","helpText":null,"parentCategoryId":"cc13d92c-673f-4af7-9748-50342fc8795a","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","displayName":"System Configuration","description":"System Configuration","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":["768d9aa4-7407-4ed9-b97f-2385b8cadb47","8cefd936-362e-4a24-bc76-e078b6fd13fa","cb33668b-933f-4424-8d2d-8bdf0e61bddd","0d4d90ab-7ad8-4524-ade0-bc01aa7b71a3","5401711f-292a-487a-be18-f99593a0477c","dec8381a-0a61-406b-842b-fc6ae9930795","853f4181-42e8-411c-91cf-c06968c0a543","8c75a12d-664d-43ba-a3aa-5259425f9b37"],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"bbe51018-a17d-46c4-9517-ff45c54d8d18","displayName":"DNS Settings","description":"Networking > DNS Settings","helpText":null,"parentCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","rootCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"bc4f0cce-a5cc-44c9-9e50-b504e09e7eb1","displayName":"KDC","description":"Administrative Templates\\System\\KDC","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bc58391f-664c-42dd-9d18-269e65f324a7","displayName":"Miscellaneous","description":"Microsoft Excel 2016\\Miscellaneous","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":["183628a3-d0a5-47de-b444-e132d634ca38"],"platforms":"windows10","technologies":"mdm"},{"id":"bc633a5a-c712-49a6-9f56-775ca9321df4","displayName":"Downloading Framework Components","description":"Microsoft Office 2016\\Downloading Framework Components","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bc65521d-e48a-4e95-899f-49df827808ca","displayName":"File Locations","description":"Microsoft Word 2016\\Word Options\\Advanced\\File Locations","helpText":null,"parentCategoryId":"83087772-6560-4488-a1c5-bb6e4889e868","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bce24fbf-4caf-449f-a210-5dd31a368b22","displayName":"Removed policies","description":"Google Google Chrome - Default Settings users can override Removed policies","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bd04d2ce-3275-496c-8cc1-e17ab19888a3","displayName":"Windows Time Service","description":"Administrative Templates\\System\\Windows Time Service","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["b5006d56-dc0b-4a07-95ee-d6d6e3000f9f"],"platforms":"windows10","technologies":"mdm"},{"id":"bd1bf2cb-c806-479b-a68c-af9dffd438c9","displayName":"Security","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Security","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bd1dad69-5cbe-415e-8565-e87b15cd4431","displayName":"General","description":"Microsoft Access 2016\\Application Settings\\General","helpText":null,"parentCategoryId":"d0a3bbad-8ed0-4545-8249-9e464a13e1b7","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bd5533e1-f1ee-4994-8a79-cffe02b12d5c","displayName":"FileVault Recovery Key Escrow","description":"FileVault > FileVault Recovery Key Escrow","helpText":null,"parentCategoryId":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","rootCategoryId":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"bd63ba46-330b-4c49-bfb7-114e1d0cf5e4","displayName":"Compatibility View","description":"Administrative Templates Internet Explorer Compatibility View","helpText":null,"parentCategoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bd69fa31-677f-4d3d-bd4c-91ab1cd0dcb4","displayName":"General","description":"Microsoft Word 2016\\Word Options\\General","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bd7d2b68-118d-40ee-9dfd-39b2a22a2082","displayName":"Windows Connect Now","description":"Administrative Templates\\Network\\Windows Connect Now","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bd8dacbf-ab7b-4a93-8294-7db61b9d49b4","displayName":"DNS Client","description":"Administrative Templates\\Network\\DNS Client","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bdc32a5e-2bce-46b1-9838-ed557b1e287e","displayName":"Cryptography","description":"Cryptography","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"bdc32a5e-2bce-46b1-9838-ed557b1e287e","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"be6b97de-f120-4d89-b7c9-b548d061bac8","displayName":"Desktop Window Manager","description":"Administrative Templates\\Windows Components\\Desktop Window Manager","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["b5234c18-e555-409e-9550-59b89d1672f1"],"platforms":"windows10","technologies":"mdm"},{"id":"be6ca30a-cd4d-40f1-a9f8-d2ea8809cb5e","displayName":"Windows Time Service","description":"Administrative Templates Windows Time Service","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["13f025df-7d3f-4ecd-bd38-d7af7853b66e"],"platforms":"windows10","technologies":"mdm"},{"id":"be9bdbec-b52e-4174-9c5b-cf765dee855b","displayName":"Store","description":"Administrative Templates Store","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bec8c55d-5aee-4d87-a17d-34d5b3b78f19","displayName":"Editing Options","description":"Microsoft Visio 2016\\Visio Options\\Advanced\\Editing Options","helpText":null,"parentCategoryId":"957a5b24-ed7a-4f84-9d73-7b6131367396","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"bedf20d1-1f5a-4840-8458-6d0fa974b664","displayName":"Net Logon","description":"Administrative Templates\\System\\Net Logon","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["7f4d325e-bff8-4d91-8313-614243e55e6d"],"platforms":"windows10","technologies":"mdm"},{"id":"bf8e3e9c-f7e7-4a43-8898-2caf7b01d987","displayName":"System Security","description":"Device Restriction System Security","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise","technologies":"android"},{"id":"c00d6468-cac3-429c-ada5-ba3adf4982a8","displayName":"Accessibility","description":"User Experience > Accessibility","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"c01c7d3f-ace1-48bf-abce-e8a02ba877ab","displayName":"ActiveX Installer Service","description":"Administrative Templates ActiveX Installer Service","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c0204a51-a73c-46a6-8626-deeadcabe6ac","displayName":"Licensing","description":"Licensing","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"c0204a51-a73c-46a6-8626-deeadcabe6ac","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c02141e6-0725-4f6f-9138-83d10c6bc104","displayName":"Backup","description":"Microsoft OneNote 2016\\OneNote Options\\Backup","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c08e929f-742a-4cd8-a7e6-9a3d170fe020","displayName":"Disk Quotas","description":"Administrative Templates\\System\\Disk Quotas","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c0ea0178-ad93-4596-94b2-9d7d1bbe8789","displayName":"Windows Apps","description":"Administrative Templates Microsoft User Experience Virtualization Windows Apps","helpText":null,"parentCategoryId":"53ba922e-db4d-489c-b5ab-dbc4b8321206","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c14c2e8b-0081-46e0-89ac-48ade3b83408","displayName":"Remote Desktop","description":"Remote Desktop","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"c14c2e8b-0081-46e0-89ac-48ade3b83408","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c20ba4a5-483d-417c-bd96-de3cd83303e1","displayName":"Maintenance Scheduler","description":"Administrative Templates\\Windows Components\\Maintenance Scheduler","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c26b2f10-f2c0-45f2-955c-5379dd12f206","displayName":"Compatibility View","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Compatibility View","helpText":null,"parentCategoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c3857f91-3df8-472f-9b5a-b10778c715c0","displayName":"Google Chrome - Default Settings users can override","description":"Google Google Chrome - Default Settings users can override","helpText":null,"parentCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":["20ceae56-e189-46ec-a440-791ce7454017","54f2e032-bdcc-4877-b7a0-973d0a7c1653","d97d6d8f-0a1a-4160-89aa-d624a36954a2","af351b0c-3d9e-4b18-957b-8179e4eaba15","12142994-4b30-486c-bab1-9206528b2b96","de643352-007f-4a47-8c83-d75a79516b39","962a2377-ad9a-4654-a526-a77c14152fd7","bce24fbf-4caf-449f-a210-5dd31a368b22","6d6b289c-c1e9-4004-b5ab-3123920cf10d"],"platforms":"windows10","technologies":"mdm"},{"id":"c3ab8d44-b353-4a8a-a526-ffd743fb7ff8","displayName":"Miscellaneous","description":"Microsoft Access 2016\\Miscellaneous","helpText":null,"parentCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c3b5e77d-c00d-4578-84c9-289362ad0b00","displayName":"Save","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Save","helpText":null,"parentCategoryId":"da92dfd6-a29e-42a0-92ed-276bb6904455","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c3db5686-3bb2-437c-8906-60da1a1fa844","displayName":"Trust Center","description":"Microsoft Outlook 2016\\Security\\Trust Center","helpText":null,"parentCategoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c3dfb294-a7c0-48af-b705-59c4e257d48c","displayName":"Declarative Device Management (DDM)","description":"Declarative Device Management (DDM)","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":["15be55d8-7477-4274-9b09-b775bce68416","11d26400-1d13-4dd6-ab4b-cb323494b127","42a6198f-bdec-402e-b619-315400b65488","83febe72-a64f-4051-9071-1efae1ea9a15","a42e2248-d2dc-4476-a92d-d152fd67e04b","b85d9c04-4923-4fdf-a425-424686d47859","b382d980-7459-4850-a45e-75dd99488972","6b83806b-eb3e-4224-b082-d6f2c8ab3eb9","8c86f511-1729-4fe9-b0b2-111d9044e1ba","d9654cb3-57c8-487c-90a5-454e15336731","7d9e5b9b-84e7-473c-b6ca-a1629448df55","e0ab6868-4b53-4310-b665-f7c979941db7","dba26132-cba6-4178-93c3-f02476532f08","ddb64e9d-34b9-44f4-9980-a6623f14e445","2cdd4a96-23c1-4419-b88c-41bbaa119e68"],"platforms":"iOS,macOS,visionOS,tvOS","technologies":"mdm,appleRemoteManagement"},{"id":"c3fdc01d-0648-4dcb-855d-7afe78bf1d89","displayName":"Identification (Deprecated)","description":"Authentication > Identification","helpText":null,"parentCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","rootCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"c400a917-cdff-4e15-a70f-59b82df4c038","displayName":"Attachment Security","description":"Microsoft Outlook 2016\\Security\\Security Form Settings\\Attachment Security","helpText":null,"parentCategoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c4665793-15ea-44c9-bd0a-d542b3915fe0","displayName":"Remediation","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Remediation","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c483faac-cebf-448a-8f90-e8a125c0c4af","displayName":"Microsoft Management Console","description":"Administrative Templates\\Windows Components\\Microsoft Management Console","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["9e882396-4a1c-4d06-a62d-8d910ded8e7d"],"platforms":"windows10","technologies":"mdm"},{"id":"c48917c1-fd99-405f-b1d2-9dfec169e5d8","displayName":"Remote Desktop Services","description":"Administrative Templates Remote Desktop Services","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["0456dcd5-c003-4a8b-80e6-61bacf854330","4c604a0e-9339-4c01-9536-b689bd0abe5f","62bbe0df-b9b2-453f-a2f1-ee66291d4956","3a901a80-e2b6-470c-9658-d66ba5458370","a561e59a-09b7-4106-a6fa-0b82036a5b49"],"platforms":"windows10","technologies":"mdm"},{"id":"c492dd55-8876-4b1b-b620-615cc9b65ef8","displayName":"Versions and Recyle Bin","description":"Microsoft OneNote 2016\\OneNote Options\\Versions and Recyle Bin","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c4ce54b8-e555-4447-9791-dd8e9dbb86b0","displayName":"Tenant Lockdown","description":"Tenant Lockdown","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"c4ce54b8-e555-4447-9791-dd8e9dbb86b0","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","displayName":"Exchange","description":"Microsoft Outlook 2016\\Account Settings\\Exchange","helpText":null,"parentCategoryId":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["82ecfab7-b76a-4cec-8e76-859db4599ac2","e35a83ff-7c5b-48d4-9ba3-a57849c6b5f5"],"platforms":"windows10","technologies":"mdm"},{"id":"c4e48b1b-6d88-434f-a717-d5bab28eb245","displayName":"Wi-Fi Connection","description":"Wi-Fi Connection","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"c4e48b1b-6d88-434f-a717-d5bab28eb245","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c6099521-a05f-480a-8562-7e71318e2cda","displayName":"Printing","description":"Microsoft Edge\\Printing","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"c64ee570-d51c-4286-9a47-367b833754e4","displayName":"Store","description":"Administrative Templates\\Windows Components\\Store","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c67c9e69-6e69-4b63-868c-3b3df5d17e47","displayName":"Disable Items in User Interface","description":"Microsoft Visio 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","4e4deef0-4528-47d5-8869-4143c506f18b"],"platforms":"windows10","technologies":"mdm"},{"id":"c6a912c5-0334-40fb-8dc5-f2d2547b8071","displayName":"Removable Storage Access","description":"Administrative Templates Removable Storage Access","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,microsoftSense"},{"id":"c6b72060-8ecb-41d8-8625-2984dd756d4a","displayName":"Free/Busy Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Calendar Options\\Free/Busy Options","helpText":null,"parentCategoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c6c1120b-988c-4581-a21c-b9786a821242","displayName":"Miscellaneous","description":"Microsoft Publisher 2016\\Miscellaneous","helpText":null,"parentCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c72d9f00-d625-43ec-add4-514891035839","displayName":"Web Service","description":"Microsoft Office 2016\\Business Data\\Web Service","helpText":null,"parentCategoryId":"44541a16-c3a2-4be1-ba42-4fc15bde4c46","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c7aba693-8132-4b9f-9a69-dbaaa0ecc03d","displayName":"Publisher Options","description":"Microsoft Publisher 2016\\Publisher Options","helpText":null,"parentCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","rootCategoryId":"0483f5bb-0aaa-4f99-9a5e-b05bbfd70524","childCategoryIds":["51e0cebb-cac4-4905-9b31-539295e4b85b","1a0386fd-354b-441e-a0d6-1523c209dae7","6d1e32eb-61f7-4907-b9fe-b83fda8ad67d","69f3ad9d-871d-42b3-8e10-07dc076a4d32","038b49c9-4f13-4ace-be8d-bd076bffa23e"],"platforms":"windows10","technologies":"mdm"},{"id":"c7c1ed5a-a2ec-4237-bbf1-d5723f94d033","displayName":"System Preferences","description":"Preferences > System Preferences","helpText":null,"parentCategoryId":"187e5f4f-a789-4487-a848-7bf0f41597c7","rootCategoryId":"187e5f4f-a789-4487-a848-7bf0f41597c7","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"c7c32942-a139-4d7e-a19e-3495d5e372e7","displayName":"Networking","description":"Administrative Templates\\Windows Components\\Windows Media Player\\Networking","helpText":null,"parentCategoryId":"22ebd92b-80b6-493d-99d8-3c72f1a0827e","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c805d788-1950-4ed1-adfb-771f12564a0c","displayName":"Exclusions","description":"Administrative Templates Microsoft Defender Antivirus Exclusions","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c859dc1a-fdeb-4591-af97-79d078ee715b","displayName":"Event Forwarding","description":"Administrative Templates Event Forwarding","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c87ae066-cc1a-44c9-8645-1db2359f7484","displayName":"Layer-2 priority value","description":"Administrative Templates Qo S Packet Scheduler Layer-2 priority value","helpText":null,"parentCategoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c8cdd1a5-3f43-47c5-a775-d27bba4411f5","displayName":"File Block Settings","description":"Microsoft Word 2016\\Word Options\\Security\\Trust Center\\File Block Settings","helpText":null,"parentCategoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c919e047-97fc-489f-ab0e-bcb070e36c55","displayName":"WinRM Client","description":"Administrative Templates\\Windows Components\\Windows Remote Management (WinRM)\\WinRM Client","helpText":null,"parentCategoryId":"a37dba52-d558-47fb-9d46-a5d3bdc5fdd7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c945edd8-c865-4932-806d-83752e3f46ad","displayName":"Microsoft Edge Web View2","description":"Microsoft Edge Web View2","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"c945edd8-c865-4932-806d-83752e3f46ad","childCategoryIds":["13cc3b63-a150-4cf2-8d76-309975603c8e"],"platforms":"windows10","technologies":"mdm"},{"id":"c95a5920-ad56-4668-a6ad-19c3eb428557","displayName":"Lanman Workstation","description":"Administrative Templates\\Network\\Lanman Workstation","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c99d6f15-7bbe-45f2-a6e3-a4bd583e1905","displayName":"Auto Play Policies","description":"Administrative Templates Auto Play Policies","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c9a65baa-de10-4818-97a2-b61babb28060","displayName":"Microsoft Defender Antivirus","description":"Administrative Templates Microsoft Defender Antivirus","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["8212ba6e-101d-4ee8-8ca2-c4cd2cddba96","428f107c-2167-4bc2-9293-8f1d6728a0c5","adc4eb7f-0f34-4f43-b361-dc42363eccab","cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","2c43699e-90b5-4da6-9689-fe5ad3b25ac9","94b5c25e-3af3-4c08-b738-a0527f91dc22","8a03aebc-9249-4917-a1c3-2957717d9123","c805d788-1950-4ed1-adfb-771f12564a0c","a5a56a36-6d60-4f74-a3c6-d82ed979b24a","a5060182-4d22-412b-bd0e-3a1e009b36c6","ad84cea3-5664-4e42-a9d6-1446828bea45","a004deb8-6f52-4411-8d94-41563a8203fc","09c02465-dc11-457e-9eac-19fc542e4cda"],"platforms":"windows10","technologies":"mdm"},{"id":"c9ab1080-67a7-4d6c-8213-056d4eb08ea0","displayName":"Credential Providers","description":"Credential Providers","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"c9ab1080-67a7-4d6c-8213-056d4eb08ea0","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"c9ce70f5-a64b-442f-ac96-992eedf6a5df","displayName":"Device and Driver Compatibility","description":"Administrative Templates\\Windows Components\\Device and Driver Compatibility","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ca1aedf4-b951-45f5-a77c-dec776a82e21","displayName":"General i SCSI","description":"Administrative Templatesi SCSI General i SCSI","helpText":null,"parentCategoryId":"3f693856-7cbb-4a1c-93be-0d05aa41059f","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","displayName":"Full Disk Encryption","description":"Full Disk Encryption","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"ca48a8ac-4f14-475a-9e32-08b5ed4fa667","childCategoryIds":["5b327ef8-f9fb-4e10-ba9e-8a8ca9bf4ed9","3f56adc1-2207-4033-a6e2-07f64c08e3ff","bd5533e1-f1ee-4994-8a79-cffe02b12d5c"],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"cae68a5f-9d1e-44e8-a34b-6a390b88c451","displayName":"Credentials Delegation","description":"Administrative Templates\\System\\Credentials Delegation","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cb1e177e-8f06-4a69-8215-ec1e91c19e30","displayName":"Notifications","description":"Notifications","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"cb1e177e-8f06-4a69-8215-ec1e91c19e30","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cb33668b-933f-4424-8d2d-8bdf0e61bddd","displayName":"System Extensions","description":"System Configuration > System Extensions","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"macOS","technologies":"mdm"},{"id":"cb6472c8-3e22-4029-af98-8a97f03a5a44","displayName":"PST Settings","description":"Microsoft Outlook 2016\\Miscellaneous\\PST Settings","helpText":null,"parentCategoryId":"f5a1a387-6665-4527-b532-88a64a76e732","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cb8e8500-0336-4277-b3d9-9177cc967dcf","displayName":"Text Input","description":"Text Input","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"cb8e8500-0336-4277-b3d9-9177cc967dcf","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cb98f9d4-d921-4a8b-a763-cf69ce2ada62","displayName":"Notifications","description":"Administrative Templates\\Start Menu and Taskbar\\Notifications","helpText":null,"parentCategoryId":"5161db41-7947-49ea-b9b3-dd92539e6783","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cbb98485-6a36-47b8-b450-7821e08507ac","displayName":"Web Options - General","description":"Microsoft Access 2016\\Application Settings\\Web Options...\\General","helpText":null,"parentCategoryId":"d0a3bbad-8ed0-4545-8249-9e464a13e1b7","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cbc9f1e5-a0bb-4b54-9064-1b8c04e4fa2b","displayName":"Network Inspection System","description":"Administrative Templates Microsoft Defender Antivirus Network Inspection System","helpText":null,"parentCategoryId":"c9a65baa-de10-4818-97a2-b61babb28060","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cc13d92c-673f-4af7-9748-50342fc8795a","displayName":"Filesystem","description":"Administrative Templates Filesystem","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["bb54b081-5004-4f05-a46c-f5b948f57b82"],"platforms":"windows10","technologies":"mdm"},{"id":"cc29afc6-309c-4a0d-86f6-60081ae7cd4c","displayName":"Collaboration Settings","description":"Microsoft Office 2016\\Collaboration Settings","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["a5aea816-9c1d-4a85-a2ab-33e3d1c26a8c","1b97e23d-996f-4b8e-9abf-53cfa0fc8917","2806d29a-7c7a-4ff0-baa2-4a0044425ea6"],"platforms":"windows10","technologies":"mdm"},{"id":"cc388035-b49c-493e-a598-14b0d0de4359","displayName":"Dock","description":"User Experience > Dock","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"cc50f179-0c39-4486-a555-de5a6e6ed365","displayName":"Trust Center","description":"Microsoft Project 2016\\Project Options\\Security\\Trust Center","helpText":null,"parentCategoryId":"623d41fb-000e-41d8-b955-373f8c700def","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cc8a93d5-503f-4d46-ac42-65e169642237","displayName":"Cursors","description":"Administrative Templates\\Windows Components\\Tablet PC\\Cursors","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cc9231e6-ed1b-4680-aff4-bc72f16733c0","displayName":"Temporary folders","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Temporary folders","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ccc826ef-d0ea-4241-8b8c-d23a0f78d2cd","displayName":"Offline Files","description":"Administrative Templates Offline Files","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ccea1cb0-55cd-4597-bfb1-e2d38b8a53ac","displayName":"Mobile Accounts","description":"Accounts > Mobile Accounts","helpText":null,"parentCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","rootCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"cd16477e-7cff-4c24-ba7a-cc4342779f4b","displayName":"Trusted Sites Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Trusted Sites Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cd1855c4-f7d1-4bed-8d6e-b8c1aab72007","displayName":"Security","description":"Microsoft Excel 2016\\Excel Options\\Security","helpText":null,"parentCategoryId":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":["7490c4fd-c326-42f7-9908-006504616d4c","27ccaa0b-8755-4116-a0e3-b5d21d68ab65"],"platforms":"windows10","technologies":"mdm"},{"id":"cd5d4069-6a72-41fa-ad0d-ef78de5c5a68","displayName":"WWAN Service","description":"Administrative Templates WWAN Service","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["eefc9ae4-b9ae-4d77-8b68-359b9e5ec6f7","edf3754c-b22d-4946-a744-4773240a5883"],"platforms":"windows10","technologies":"mdm"},{"id":"cd9fbd32-93e5-4cbc-a51f-a2212cb9d1c2","displayName":"Desktop App Installer","description":"Administrative Templates Desktop App Installer","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ce0b1189-57ea-4444-a93e-e4be17160f18","displayName":"Windows Installer","description":"Administrative Templates\\Windows Components\\Windows Installer","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ce3ba7d1-c101-4ab6-bf2a-0c683e921bf8","displayName":"Uncategorized","description":"Microsoft Edge\\ Uncategorized","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"android,iOS,macOS,windows10","technologies":"mobileApplicationManagement"},{"id":"ce572b49-4d47-47b6-b787-ac1252753581","displayName":"Remote Session Environment","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Remote Session Environment","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["a33fb618-0ad1-40a3-b94b-49c90c49ea03"],"platforms":"windows10","technologies":"mdm"},{"id":"ceacf7fa-fa6e-434d-a381-e20e5245d180","displayName":"Co-authoring","description":"Microsoft PowerPoint 2016\\Collaboration Settings\\Co-authoring","helpText":null,"parentCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cebd5934-9dfe-4278-966d-b9d880cb30e7","displayName":"Windows Shutdown Performance Diagnostics","description":"Administrative Templates Windows Shutdown Performance Diagnostics","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","displayName":"Windows Components","description":"Administrative Templates\\Windows Components","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["1fa3b0c3-e453-4ef3-80aa-a7474d8eb354","49d75a11-64c6-43d1-bc25-0ab156ff4216","78906e32-f4fb-453b-939b-05717ffaae59","9e857bed-81f8-4dfc-b049-c93eb68b4064","a37dba52-d558-47fb-9d46-a5d3bdc5fdd7","be6b97de-f120-4d89-b7c9-b548d061bac8","c483faac-cebf-448a-8f90-e8a125c0c4af","4479c9b6-8e08-424f-a20a-2058126dc048","5d19c257-8b7e-4071-9303-19317c94d7f7","ab754829-54a1-4082-abfa-56bae0b07ff3","b3282777-8e27-4029-b153-6f6e5b86b53c","fd16aa29-dae5-49b5-910e-88f3078ce2da","1638d9ec-63d5-4d6b-b1b6-4b0402268e36","176ed477-020a-41af-8859-0605c2caad98","35525ba9-da99-460e-afd3-ba86506b0ba3","60a3188c-7ee3-40db-8f9f-33648dc74555","70063d93-03f0-462e-9943-b0241b88d54d","d11e32cf-ac55-401a-a81a-232adc304afc","572bc940-42d4-4e00-ac55-012e9b90f6df","5a92aaed-3c64-4074-bacf-91dc1896d6f1","67b48a23-9bc3-48f5-bf6e-c9b3cd7000e4","a1d83497-da94-407f-bbc5-9f65ebc5f9fb","c20ba4a5-483d-417c-bd96-de3cd83303e1","ce0b1189-57ea-4444-a93e-e4be17160f18","f60cd3c8-a91b-4542-b09f-129dfc7e589c","1219a9c2-dccb-445f-9f90-8e86e2de22d6","1ed81d90-7326-4d0b-8934-b0a8bdddc5ce","69ec00d9-5698-4b8b-ad54-8d9a537a0fa9","71f9795f-defc-4b03-a2b4-31e129b6f861","7444c3f0-214b-45ea-9b8e-f74b81543644","7574a907-5608-491f-8011-c57d487457f4","a2230bb9-81a5-4e95-bc7f-0fbc9ecb5de4","a53581a1-e9d7-4ba4-9dea-cea90d40cca1","c64ee570-d51c-4286-9a47-367b833754e4","c9ce70f5-a64b-442f-ac96-992eedf6a5df","e9aff162-feb0-400a-aa68-8dd8deb93275","0101d1d0-1e54-47b0-a749-62c6bd7ab3da","0cc63077-26e9-4fbd-a343-fd88102efd7e","22ebd92b-80b6-493d-99d8-3c72f1a0827e","5915e06c-9b74-4c5e-86de-93e67ae183de","865a5fd9-f9be-496d-acb4-cd7cdb03e19f","8ccb6340-4f25-4bda-a527-127d269b3cbf","ba1d333c-e19b-4470-bbab-d040a633c3a3","d4bdfec1-2e40-49d2-b8f2-e5b15f072b10","7f431009-e8fe-460e-b247-06c838c8a914","2e57e23c-4847-4864-8e8e-5f6add1f7a84","3f8299b3-6803-4576-be08-7c311d04b8b9","50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","d9b7efad-fe18-4c98-925b-c4a5db0f2815","2dc7de59-a2b5-4f4a-96a4-597927af0617","4fc4d2f3-35ee-43ec-a033-ef78da571e70","569c6b8d-9491-471b-9960-17e3ac60734a","a57f0abc-605b-433e-b7da-45ee127188cd","ba7097b2-cd24-4394-9b3e-2c281ed30ae5","3181c361-f4f0-44ff-82cc-24aac8075843","fcddcc0b-7cf8-4ebc-a818-d10689603263","ffb6de77-8f2d-4b45-9cd4-00bb75cd496c"],"platforms":"windows10","technologies":"mdm"},{"id":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","displayName":"Networking","description":"Networking","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","childCategoryIds":["e95335ec-2704-47ab-8b40-f602b31eeb9d","06a85f5b-2614-4467-91cf-4a64d0c9326f","70b5da13-9c31-4857-890d-b7eb223729c3","5c722b3f-9d77-428a-b859-3fb556162cd6","bbe51018-a17d-46c4-9517-ff45c54d8d18","224dc683-c0e0-4783-8ba8-8f02c76d161d"],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"cf968979-f316-47cb-a207-bf9ef28cd1aa","displayName":"DSCP value of non-conforming packets","description":"Administrative Templates Qo S Packet Scheduler DSCP value of non-conforming packets","helpText":null,"parentCategoryId":"0937f5ff-aabc-49a9-a94f-6f98c4702580","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","displayName":"Google","description":"Google","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":["36c83fb3-c18c-472b-b39e-617c2f8a7fbd","c3857f91-3df8-472f-9b5a-b10778c715c0"],"platforms":"windows10","technologies":"mdm"},{"id":"d0a1763a-5cdf-4672-8596-435ec1d94b54","displayName":"Search Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Search Options","helpText":null,"parentCategoryId":"1b59bea5-b6db-4a37-9fdd-5bc2e141a61d","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d0a3bbad-8ed0-4545-8249-9e464a13e1b7","displayName":"Application Settings","description":"Microsoft Access 2016\\Application Settings","helpText":null,"parentCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":["23fd467e-24f8-4200-8b19-c6c11afa8926","bd1dad69-5cbe-415e-8565-e87b15cd4431","33b9194b-4027-4c23-b662-52f25db7f839","cbb98485-6a36-47b8-b450-7821e08507ac"],"platforms":"windows10","technologies":"mdm"},{"id":"d0e46713-238c-42b7-a996-653cf952c367","displayName":"Home Group","description":"Administrative Templates Home Group","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d0ff97aa-cf53-460e-be82-2c521a56eec6","displayName":"Outlook Options","description":"Microsoft Outlook 2016\\Outlook Options","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["114356a4-dfc9-44e9-9a62-f1d601d48445","d6bd7b5c-b0ba-4cc1-bcaa-48b0f48e416b","1b59bea5-b6db-4a37-9fdd-5bc2e141a61d","93a20c17-1e34-4778-8c95-91a46980ea75","f2bf77fd-37df-448b-8959-6478abf96f6f","fa6bfb01-34f6-4c54-89b9-f7e717e6d394","5e3f61b6-52b7-4c74-a101-33c1cf34a749","fcc8ad48-a1e7-4cba-adae-7c916cbbc897","b9ab4d39-9e28-4897-aa34-0201a35ea989","e87c8824-e7c4-4fca-a3c1-0376d45d7f9f"],"platforms":"windows10","technologies":"mdm"},{"id":"d11e32cf-ac55-401a-a81a-232adc304afc","displayName":"Event Forwarding","description":"Administrative Templates\\Windows Components\\Event Forwarding","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d17b08e6-de3b-445b-ab14-1d47e62efdcf","displayName":"HTTP authentication","description":"Microsoft Edge\\HTTP authentication","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d1e2bb0d-6c0e-4f40-9f2e-52055edc14b5","displayName":"Customize Ribbon","description":"Microsoft Excel 2016\\Excel Options\\Customize Ribbon","helpText":null,"parentCategoryId":"1b6ac108-26b0-44f4-95a1-f848d1e90d76","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d2191717-e304-46f7-bcc0-55e6477026c9","displayName":"Exclusion Settings","description":"Microsoft Defender Exclusion Settings","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"linux","technologies":"microsoftSense"},{"id":"d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","displayName":"Schedule View","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Calendar Options\\Schedule View","helpText":null,"parentCategoryId":"decab1d2-3474-4727-87c0-d0bc648f2458","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","displayName":"Security Page","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page","helpText":null,"parentCategoryId":"586c5c5a-15cd-4592-beae-1709c6daf5b7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["ecfb5fea-26cc-494b-9e5e-88b5e51a5be0","40605d4b-d999-4235-9a5a-59fad165ec51","1aef6e33-cb5c-4ad5-b433-c198750bbc98","b1585568-da15-41fc-a1d0-5d0b194de84c","b9aafd85-b42a-4742-bbba-770b93678a52","cd16477e-7cff-4c24-ba7a-cc4342779f4b","76f2d08c-0a3f-4f4e-ad04-51aa16aea0bf","80f5fb2f-e74a-4533-81aa-a92163f49e16","a4bffc2b-76af-48d3-acdf-8566e51ef163","9bad0513-ac85-431c-86d9-9e3167f9b403"],"platforms":"windows10","technologies":"mdm"},{"id":"d2f1d28a-682d-49e9-bb71-0782e4a06c1b","displayName":"Task Manager","description":"Task Manager","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"d2f1d28a-682d-49e9-bb71-0782e4a06c1b","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d33133b4-77df-429a-9580-ed70f7da676d","displayName":"Edit options for Microsoft Project","description":"Microsoft Project 2016\\Project Options\\Edit\\Edit options for Microsoft Project","helpText":null,"parentCategoryId":"5bd8c27a-0141-4bbf-93f7-214b2389ff2d","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d39f73b0-9d26-4d4c-a8b0-d1b720890d2e","displayName":"MK Protocol Security Restriction","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Security Features\\MK Protocol Security Restriction","helpText":null,"parentCategoryId":"6776f6fa-8836-408c-b91c-1e444e0cba5c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d40a32e1-ab3e-4cbc-aa03-4766792e563e","displayName":"Performance Profiles Configuration","description":"Microsoft Defender Performance Profiles Configuration","helpText":null,"parentCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","rootCategoryId":"48b8705b-58a8-4504-ab7a-2704980f4577","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement,microsoftSense"},{"id":"d4943981-47b2-4a86-848b-860e8ca47381","displayName":"Microsoft Edge Update","description":"Microsoft Edge Update","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":["2c7e8e8e-47fe-48ba-8cb4-55ce296edced","46eaa2b7-341b-4e39-be21-c3ea09dd5778","43fc9dcc-1e66-4108-bded-2d005eeb7ccb","78497707-c3e4-400b-a6bc-1813c3689fdc","ff543267-540e-4e37-a1e9-daf6a5e16ba7"],"platforms":"windows10","technologies":"mdm"},{"id":"d4ad9168-8c49-45d6-a7e5-86ba990fff3e","displayName":"Privacy Sandbox policies","description":"Google Google Chrome Privacy Sandbox policies","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d4bdfec1-2e40-49d2-b8f2-e5b15f072b10","displayName":"Event Viewer","description":"Administrative Templates\\Windows Components\\Event Viewer","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d4bf78d5-f6da-463d-85a3-d763e6fbe32b","displayName":"Delete Browsing History","description":"Administrative Templates Internet Explorer Delete Browsing History","helpText":null,"parentCategoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d4c9d046-a8c0-46f0-bd62-bc4d1614e891","displayName":"Windows Connection Manager","description":"Administrative Templates Windows Connection Manager","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","displayName":"Security Form Settings","description":"Microsoft Outlook 2016\\Security\\Security Form Settings","helpText":null,"parentCategoryId":"a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["e11f4bd4-9041-49c9-9b8c-163827d606ce","a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","c400a917-cdff-4e15-a70f-59b82df4c038"],"platforms":"windows10","technologies":"mdm"},{"id":"d512207c-854d-482d-8e52-26637eef24e3","displayName":"Parameters","description":"Administrative Templates\\Network\\TCPIP Settings\\Parameters","helpText":null,"parentCategoryId":"3a28f10c-cb75-4f85-871b-87eb9dcd883c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d52dd970-febb-4891-8eb7-1c8616cfb6cb","displayName":"Desktop Window Manager","description":"Administrative Templates Desktop Window Manager","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["349c31c1-9b5b-42c8-91f2-aa41f4a36a71"],"platforms":"windows10","technologies":"mdm"},{"id":"d5585700-13a0-4ab4-9b19-4c15c1ead170","displayName":"Notification Settings","description":"Administrative Templates\\System\\Power Management\\Notification Settings","helpText":null,"parentCategoryId":"62b373da-c112-40f4-9047-9cc3e8d8ab13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d59dfcc1-6c35-41de-bfb6-de94b8120ca5","displayName":"Predefined","description":"Microsoft Outlook 2016\\Disable Items in User Interface\\Predefined","helpText":null,"parentCategoryId":"7652894d-4667-443f-b925-b1686a942729","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d5acd615-cfd9-46b4-89fa-424ac0a9e1f2","displayName":"KDC","description":"Administrative Templates KDC","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d5b3cab7-d486-4f74-8525-6bd740b950bc","displayName":"Customizable Error Messages","description":"Microsoft Visio 2016\\Customizable Error Messages","helpText":null,"parentCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d5d99ca9-9995-4724-bc46-fd07f362898c","displayName":"Cellular","description":"Cellular","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"d5d99ca9-9995-4724-bc46-fd07f362898c","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d6595bc3-dd73-44a3-8b32-d57af6e40208","displayName":"Windows Location Provider","description":"Administrative Templates\\Windows Components\\Location and Sensors\\Windows Location Provider","helpText":null,"parentCategoryId":"7f431009-e8fe-460e-b247-06c838c8a914","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d679b407-a753-40aa-bc9f-175f363b0eff","displayName":"File locations","description":"Microsoft Project 2016\\Project Options\\Save\\File locations","helpText":null,"parentCategoryId":"6ad0e199-ff50-4e86-b22f-b55ef4ff2329","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d68abc4d-559a-4339-be48-c41a77a87034","displayName":"Passcode","description":"Security > Passcode","helpText":null,"parentCategoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","rootCategoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"d6bd7b5c-b0ba-4cc1-bcaa-48b0f48e416b","displayName":"Spelling","description":"Microsoft Outlook 2016\\Outlook Options\\Spelling","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d79c9f9a-f469-4f39-a66a-6f7d5ee77e81","displayName":"Language | Set Proofing Language...","description":"Microsoft Word 2016\\Review Tab\\Language | Set Proofing Language...","helpText":null,"parentCategoryId":"1fddd12c-a630-47f0-9633-638808e228f9","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d804205d-6c12-4f40-86a0-aa5a5355370f","displayName":"Files","description":"Microsoft Word 2016\\Word Options\\Advanced\\Web Options...\\Files","helpText":null,"parentCategoryId":"2108b443-384c-4bb3-9b9f-acb4a754a86a","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d875dca1-dc97-4cc5-9df3-c50b813622a3","displayName":"NS Extension Management","description":"App Management > NS Extension Management","helpText":null,"parentCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","rootCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"d8f06fcf-7328-43ac-b5b7-f7166b5333de","displayName":"Finder","description":"User Experience > Finder","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"d9432f48-3072-4171-9031-4ebead394151","displayName":"Accessibility settings","description":"Google Google Chrome Accessibility settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d9654cb3-57c8-487c-90a5-454e15336731","displayName":"External Intelligence Settings","description":"Declarative Device Management preview External Intelligence Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"d9678af8-c0c7-401a-a0a5-3e7f5b1253ce","displayName":"Kiosk Mode settings","description":"Microsoft Edge\\Kiosk Mode settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d97d6d8f-0a1a-4160-89aa-d624a36954a2","displayName":"Default search provider","description":"Google Google Chrome - Default Settings users can override Default search provider","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d982a1ef-84be-4832-99d4-8b71a4644b74","displayName":"Network Connections","description":"Administrative Templates Network Connections","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d99ac221-1000-44d8-9ab4-5cdac69562ed","displayName":"Quarantine","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Quarantine","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d9b5c806-099f-4be8-96e4-1152e99cbf26","displayName":"Check Accessibility","description":"Microsoft Excel 2016\\File tab\\Check Accessibility","helpText":null,"parentCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d9b7efad-fe18-4c98-925b-c4a5db0f2815","displayName":"Windows Error Reporting","description":"Administrative Templates\\Windows Components\\Windows Error Reporting","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["23e93393-4a75-44e6-9693-208eedb06976","e781bfae-233f-463f-a85b-7299ce5a87c5"],"platforms":"windows10","technologies":"mdm"},{"id":"d9d5f333-9402-4459-8ef1-e29330cac8be","displayName":"Live Share Settings","description":"Visual Studio Live Share Settings","helpText":null,"parentCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","rootCategoryId":"859f3bfb-70f6-447a-822e-680ac98e91ce","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"d9f5ccc9-5180-43b7-9c81-89ac3364ce00","displayName":"File Share Shadow Copy Provider","description":"Administrative Templates File Share Shadow Copy Provider","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"da04d4b8-bd11-439e-9663-5fd2399d9cc1","displayName":"Readiness Toolkit","description":"Microsoft Office 2016\\Readiness Toolkit","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"da1503cb-e474-4545-8e77-cdd577f34a08","displayName":"Miscellaneous","description":"Microsoft PowerPoint 2016\\Miscellaneous","helpText":null,"parentCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["7aeaf6f8-5511-4216-9483-28f432a5a08f"],"platforms":"windows10","technologies":"mdm"},{"id":"da78ddbc-fc94-48f9-8808-4b160d6f1d50","displayName":"First- Party Sets Settings","description":"Google Google Chrome First- Party Sets Settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"da92dfd6-a29e-42a0-92ed-276bb6904455","displayName":"PowerPoint Options","description":"Microsoft PowerPoint 2016\\PowerPoint Options","helpText":null,"parentCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["77ca5e78-a1fe-456e-9814-034b1ea2658d","e2610f41-9a95-47e5-9fc9-572e26dc6baa","76b233cc-f977-4305-b02f-deef6667251d","85810387-3320-4056-bae2-953beeb246f7","c3b5e77d-c00d-4578-84c9-289362ad0b00","f5007db5-6ee6-4bbd-a391-9727902aad6d","f66fb7e4-a968-4969-b627-f99aaad0dfc3"],"platforms":"windows10","technologies":"mdm"},{"id":"daa2ea69-8026-465a-942c-75eb0396d5b9","displayName":"Autonomous Single App Mode","description":"App Management > Autonomous Single App Mode","helpText":null,"parentCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","rootCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","childCategoryIds":[],"platforms":"macOS","technologies":"mdm"},{"id":"dab7104a-b79c-4318-afb0-5d5cfed9caa9","displayName":"Previous Versions","description":"Administrative Templates Previous Versions","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dad3971c-b07b-461b-8ead-6eda80ee57e1","displayName":"Network","description":"Administrative Templates\\Network","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["fd49df1b-bfad-4ed5-85c2-046a32fa8782","4ad00da1-5ed6-47d8-aef3-70f5bcbbbc77","bd7d2b68-118d-40ee-9dfd-39b2a22a2082","de5640ce-1975-407e-a1b6-7eaa164cd159","01f2fac4-fdab-4391-bebe-ebdf6d8fcc77","76c8131a-62fe-4134-aeac-d999f01911ed","8a409581-8ea5-493c-9e9e-2190f66381c3","bd8dacbf-ab7b-4a93-8294-7db61b9d49b4","82a9c23f-2c09-4479-9cd3-e7f185d7676f","f2345e03-bcd9-48fc-9c52-11ae06ba625a","b13e38a0-6ad6-4a1f-b53f-d8ca94847586","1b1be733-8615-4738-8797-c159d4d484be","618e0144-c57c-45e1-8b55-94dd3d9fec33","30fcb92f-4d0c-4dbf-95d0-a86350e9efc6","9d6a14ba-11f5-423d-afc0-8d30be1153c1","c95a5920-ad56-4668-a6ad-19c3eb428557","1cda8821-d9e2-485e-8d78-1829593d41ca","3a28f10c-cb75-4f85-871b-87eb9dcd883c","fc8f887c-cfd9-4bea-bfac-2214d06dba99","b221d3c2-e05a-4210-bf9c-2d7c7c0fd35a","b1393de2-587f-4516-a35d-58098f2be3c9"],"platforms":"windows10","technologies":"mdm"},{"id":"daf3f2c8-f6a5-40bd-96b3-2c6a28931614","displayName":"Shutdown Options","description":"Administrative Templates Shutdown Options","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","displayName":"Internet Formatting","description":"Microsoft Outlook 2016\\Outlook Options\\Mail Format\\Internet Formatting","helpText":null,"parentCategoryId":"f2bf77fd-37df-448b-8959-6478abf96f6f","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["25df12bc-5ebd-4db2-8930-5d27690f3e60"],"platforms":"windows10","technologies":"mdm"},{"id":"db47f067-f435-4095-8b98-aa3805bc0050","displayName":"Schedule","description":"Microsoft Project 2016\\Project Options\\Schedule","helpText":null,"parentCategoryId":"1266b519-e436-4698-8ff4-442acc97efd4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["3b2806c8-bd29-44b5-b3e0-b2c54a6008f3","304a579b-ff3b-4897-8bb8-5a1dda45356f"],"platforms":"windows10","technologies":"mdm"},{"id":"dba1a547-e288-45ac-8553-27a3b564699e","displayName":"Custom","description":"Microsoft Access 2016\\Disable Items in User Interface\\Custom","helpText":null,"parentCategoryId":"b8158968-c839-4d37-9eb8-887bd6fd7402","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dba26132-cba6-4178-93c3-f02476532f08","displayName":"Keyboard Settings","description":"Declarative Device Management preview Keyboard Settings","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"dbb76878-34a9-4f87-bbc6-4de7ea223ff4","displayName":"Windows File Protection","description":"Administrative Templates\\System\\Windows File Protection","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dbbe5cb3-fe2e-4d28-8918-24d075a91676","displayName":"PKCS certificate","description":"PKCS certificate","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"dbbe5cb3-fe2e-4d28-8918-24d075a91676","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dc049161-17c6-411e-906b-a871b33651cd","displayName":"Proofing","description":"Microsoft Word 2016\\Word Options\\Proofing","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["e95db55a-8337-416d-a61f-e60f55cc0d13","4dae3032-1f16-4ace-911b-a957db0b8089"],"platforms":"windows10","technologies":"mdm"},{"id":"dc16dbf0-aac8-4ff3-a546-1ddb55650f47","displayName":"Programs","description":"Administrative Templates Programs","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dc270c70-1cf4-4d98-ad26-8c2d441173f1","displayName":"Parental Controls Content Filter","description":"Parental Controls > Parental Controls Content Filter","helpText":null,"parentCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","rootCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"dd68a290-1ba7-470f-afca-339f443a767c","displayName":"MDM Options","description":"Managed Settings MDM Options","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"dd85b339-dd41-4d4e-a6a4-3efb86c14b5d","displayName":"Calculation options for 'Project1'","description":"Microsoft Project 2016\\Project Options\\Calculation\\Calculation options for 'Project1'","helpText":null,"parentCategoryId":"20ed0d61-bbf7-421e-8926-0921c7ff7e75","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":["acbc106b-796a-4ba3-ab5f-c130530ad455"],"platforms":"windows10","technologies":"mdm"},{"id":"dd9a3dad-5851-4899-a5c1-c23318986846","displayName":"File Classification Infrastructure","description":"Administrative Templates File Classification Infrastructure","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dd9e4ae2-a432-4c48-a73a-52c75c3e5279","displayName":"Trusted Certificate","description":"Trusted Certificate","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"dd9e4ae2-a432-4c48-a73a-52c75c3e5279","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ddb64e9d-34b9-44f4-9980-a6623f14e445","displayName":"Custom Profile","description":"Declarative Device Management preview Custom Profile","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"visionOS,tvOS","technologies":"appleRemoteManagement"},{"id":"ddcc8634-edc3-40ef-a444-45f806439c18","displayName":"Application Defaults","description":"Application Defaults","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"ddcc8634-edc3-40ef-a444-45f806439c18","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"de5640ce-1975-407e-a1b6-7eaa164cd159","displayName":"Network Connectivity Status Indicator","description":"Administrative Templates\\Network\\Network Connectivity Status Indicator","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"de643352-007f-4a47-8c83-d75a79516b39","displayName":"Deprecated policies","description":"Google Google Chrome - Default Settings users can override Deprecated policies","helpText":null,"parentCategoryId":"c3857f91-3df8-472f-9b5a-b10778c715c0","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"de8dd733-3bb6-4ce5-9f93-475caac1862c","displayName":"Application","description":"Administrative Templates\\Windows Components\\Event Log Service\\Application","helpText":null,"parentCategoryId":"fcddcc0b-7cf8-4ebc-a818-d10689603263","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"de9a9583-d660-4bdc-83bc-404c8c488267","displayName":"Memory Dump","description":"Memory Dump","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"de9a9583-d660-4bdc-83bc-404c8c488267","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dea96bde-003b-46fa-a960-baf62289c57d","displayName":"Delete Browsing History","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Delete Browsing History","helpText":null,"parentCategoryId":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"deadde1d-7e7f-4577-bd6e-fc237c3854c5","displayName":"Group Policy","description":"Administrative Templates\\System\\Group Policy","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dec8381a-0a61-406b-842b-fc6ae9930795","displayName":"Lock Screen Message","description":"System Configuration > Lock Screen Message","helpText":null,"parentCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","rootCategoryId":"bb995a00-4ed7-49aa-aef2-a6d2c341ee37","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"decab1d2-3474-4727-87c0-d0bc648f2458","displayName":"Calendar Options","description":"Microsoft Outlook 2016\\Outlook Options\\Preferences\\Calendar Options","helpText":null,"parentCategoryId":"1b59bea5-b6db-4a37-9fdd-5bc2e141a61d","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["d2b665cb-d82b-4d14-8cc2-d9b69e5c51a5","826db7fb-889b-4a99-80a6-38347ba37f21","c6b72060-8ecb-41d8-8625-2984dd756d4a","2592e8ea-5eb0-482b-b41e-eab92f33ac07","34c07941-8f52-43ad-b0ca-a7284655afb4"],"platforms":"windows10","technologies":"mdm"},{"id":"df0be435-d790-485a-b355-6f00eae29511","displayName":"Device Guard","description":"Administrative Templates\\System\\Device Guard","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"df357f0c-78fe-4aee-a465-f3da7499077e","displayName":"Proofing Data Collection","description":"Microsoft Office 2016\\Tools | Options | Spelling\\Proofing Data Collection","helpText":null,"parentCategoryId":"6b7aefda-7b74-48eb-9f8a-37bcc14ce3e1","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dfab5866-1712-4bbf-8edf-5b080b315b9b","displayName":"Manageability","description":"Microsoft Edge\\Manageability","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"dfd5d749-c68c-448f-ab3f-851c09f09df4","displayName":"Auto Save Options","description":"Microsoft Project 2016\\Project Options\\Save\\Auto Save Options","helpText":null,"parentCategoryId":"6ad0e199-ff50-4e86-b22f-b55ef4ff2329","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"dfede24d-d1c8-4e20-82a3-89e1b52057d5","displayName":"Locked- Down Local Machine Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Locked- Down Local Machine Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e00ff1f8-a2d1-4d3b-bb07-f58b38b8d5d7","displayName":"MSS (Legacy)","description":"Administrative Templates\\MSS (Legacy)","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e042b102-b12c-48d1-86ef-f6d296da5b95","displayName":"Server Manager","description":"Administrative Templates Server Manager","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e06fb472-94c1-4dd9-afdf-6bb2ddaa3dc6","displayName":"Client Interface","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Client Interface","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","displayName":"FSLogix","description":"FSLogix","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":["ab2be8b5-5912-4909-8d8b-e66edf4ab097","0b4f28d5-fc68-43a4-92cb-9a47c2a8ebf9","f2d139ed-a314-48b7-b700-4d11adfcc309","5c645a3e-bc39-44e9-8786-4c82e0553d22"],"platforms":"windows10","technologies":"mdm"},{"id":"e0ab6868-4b53-4310-b665-f7c979941db7","displayName":"Safari Browser","description":"Declarative Device Management preview Safari Browser","helpText":null,"parentCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","rootCategoryId":"c3dfb294-a7c0-48af-b705-59c4e257d48c","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"appleRemoteManagement"},{"id":"e0dfe97e-348d-4d30-a6a1-e0de1989236e","displayName":"Other","description":"Microsoft Office 2016\\Language Preferences\\Other","helpText":null,"parentCategoryId":"eb947c30-3c43-4d34-a566-a842a1a142f3","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e0e10e94-325c-49e6-ab48-4f146254395f","displayName":"Form Region Settings","description":"Microsoft Outlook 2016\\Form Region Settings","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e11f4bd4-9041-49c9-9b8c-163827d606ce","displayName":"Custom Form Security","description":"Microsoft Outlook 2016\\Security\\Security Form Settings\\Custom Form Security","helpText":null,"parentCategoryId":"d4e5541e-ab77-4e6c-8046-1fb80ee705ad","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e13ec567-e29c-4ca0-b599-e8c43587f10a","displayName":"Tools | Local Project Cache","description":"Microsoft Project 2016\\Project Options\\Save\\Tools | Local Project Cache","helpText":null,"parentCategoryId":"6ad0e199-ff50-4e86-b22f-b55ef4ff2329","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e1a2f289-40d8-4e7c-b0a6-cd36f0ee9111","displayName":"InfoPath Integration","description":"Microsoft Outlook 2016\\InfoPath Integration","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e21bab5b-308d-4dcd-b6bb-a019e7347373","displayName":"Explorer Frame Pane","description":"Administrative Templates\\Windows Components\\File Explorer\\Explorer Frame Pane","helpText":null,"parentCategoryId":"35525ba9-da99-460e-afd3-ba86506b0ba3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e2610f41-9a95-47e5-9fc9-572e26dc6baa","displayName":"Proofing","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Proofing","helpText":null,"parentCategoryId":"da92dfd6-a29e-42a0-92ed-276bb6904455","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["b792508d-da03-4174-bcf1-666d128ee8ad"],"platforms":"windows10","technologies":"mdm"},{"id":"e2a41bef-2f82-409e-9d20-0fe335390f60","displayName":"Microsoft Excel 2016","description":"Microsoft Excel 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":["bc58391f-664c-42dd-9d18-269e65f324a7","1b6ac108-26b0-44f4-95a1-f848d1e90d76","d9b5c806-099f-4be8-96e4-1152e99cbf26","9a2bfe77-7e03-4a24-a9fa-c42a225a28b8","a2806db0-3cea-4a1a-8c1c-f9e1fdfd316b","28831364-ca54-4f31-acca-1aa0c7a7d3d2","b473c6fa-a971-4e5d-ad15-2c27c17c5d3e","5b832259-c30b-43bb-b249-9d3ea4d5b028"],"platforms":"windows10","technologies":"mdm"},{"id":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","displayName":"Delivery Optimization","description":"Delivery Optimization","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e2ec9af6-6143-4cd8-952c-1b3e849ee0dc","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e344b25a-2046-4e70-a3b9-1a418613861f","displayName":"Miscellaneous","description":"Microsoft Project 2016\\Miscellaneous","helpText":null,"parentCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e35a83ff-7c5b-48d4-9ba3-a57849c6b5f5","displayName":"Offline Address Book","description":"Microsoft Outlook 2016\\Account Settings\\Exchange\\Offline Address Book","helpText":null,"parentCategoryId":"c4dbc05f-da1e-440d-8beb-91bf9dad1875","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e36863b6-3232-4a29-be02-32ee67cc48b9","displayName":"External Content","description":"Microsoft Excel 2016\\Excel Options\\Security\\Trust Center\\External Content","helpText":null,"parentCategoryId":"7490c4fd-c326-42f7-9908-006504616d4c","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e3a7d1a6-ab02-4c88-86d9-0b541c033d13","displayName":"Federated Authentication","description":"Federated Authentication","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e3a7d1a6-ab02-4c88-86d9-0b541c033d13","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e3ca94a7-e506-4133-8fae-41931dc863a5","displayName":"Disk Diagnostic","description":"Administrative Templates Disk Diagnostic","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e42edcd8-fcb0-4255-a774-c78b34f0b0c9","displayName":"Desktop","description":"User Experience > Desktop","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"e4e72b9b-db0e-4a97-9d90-a21d87a4d9bf","displayName":"E-mail","description":"Microsoft OneNote 2016\\OneNote Options\\E-mail","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e50acc0f-d177-4803-aa31-fc97eeb60ff2","displayName":"MSI Corrupted File Recovery","description":"Administrative Templates MSI Corrupted File Recovery","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e50b312c-2bb3-4565-9212-080dba8d3d85","displayName":"Handwriting personalization","description":"Administrative Templates\\Control Panel\\Regional and Language Options\\Handwriting personalization","helpText":null,"parentCategoryId":"18db3d59-661b-47ec-900a-bf75495ca598","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e522c142-5666-4090-a7f4-1da1487f5384","displayName":"Co-authoring","description":"Microsoft Word 2016\\Collaboration Settings\\Co-authoring","helpText":null,"parentCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e5cbbf8a-45b9-44c8-bce1-c5c2416c998a","displayName":"Disable Items in User Interface","description":"Microsoft PowerPoint 2016\\Disable Items in User Interface","helpText":null,"parentCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":["7e0626c6-bc98-4f59-a6ee-1560e27bc9bd","a20fe651-0f0a-4ddd-9d8b-273f17c89e22"],"platforms":"windows10","technologies":"mdm"},{"id":"e6231142-3d39-44a7-9522-6a3357bd439f","displayName":"Personalization","description":"Administrative Templates\\Control Panel\\Personalization","helpText":null,"parentCategoryId":"7a3a7335-4837-4bc5-9282-448402a05d89","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e63361ad-a54b-4557-acc7-02c272a3e58d","displayName":"Smart cut and paste","description":"Microsoft Word 2016\\Word Options\\Advanced\\Smart cut and paste","helpText":null,"parentCategoryId":"83087772-6560-4488-a1c5-bb6e4889e868","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e6911a08-946f-4b70-99cb-2a8b92c461e0","displayName":"Restrict ActiveX Install","description":"Administrative Templates Internet Explorer Security Features Restrict ActiveX Install","helpText":null,"parentCategoryId":"b491424f-100c-4f84-9b9c-8573b2ff9ac7","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e6b767af-2ce1-4c91-9360-15abbb0bf3bc","displayName":"Remote FX USB Device Redirection","description":"Administrative Templates Remote FX USB Device Redirection","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e6f727b7-f474-4010-b214-83149ffdac2b","displayName":"Miscellaneous","description":"Microsoft Visio 2016\\Miscellaneous","helpText":null,"parentCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e6fa2ec7-3f19-44d9-b88c-1561fb554d4b","displayName":"DNS Client","description":"Administrative Templates DNS Client","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e73ddc98-e465-43b0-bfd8-8a18cd9d4830","displayName":"Exploit Guard","description":"Exploit Guard","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e73ddc98-e465-43b0-bfd8-8a18cd9d4830","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager"},{"id":"e740736f-75f9-481d-990c-02018abc2ea5","displayName":"Local Security Authority","description":"Administrative Templates System Local Security Authority","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e781bfae-233f-463f-a85b-7299ce5a87c5","displayName":"Consent","description":"Administrative Templates\\Windows Components\\Windows Error Reporting\\Consent","helpText":null,"parentCategoryId":"d9b7efad-fe18-4c98-925b-c4a5db0f2815","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e7ae2b99-0479-475f-af5c-96457121fcd0","displayName":"Windows Hello For Business","description":"Windows Hello For Business","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e7ae2b99-0479-475f-af5c-96457121fcd0","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager"},{"id":"e7cc16d8-f74f-4cd7-890d-9b4082a19c39","displayName":"Reporting","description":"Administrative Templates App-V Reporting","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e7dccaa6-2b16-4dd3-b835-83ca641d0c80","displayName":"Accessibility Settings","description":"Managed Settings Accessibility Settings","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","displayName":"Defender","description":"Defender","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e8400c82-34c8-4d6e-bbf9-85220f3205ea","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"e8514a44-e44c-47af-a714-7697ebb2baf7","displayName":"Pen Flicks Learning","description":"Administrative Templates\\Windows Components\\Tablet PC\\Pen Flicks Learning","helpText":null,"parentCategoryId":"50369ef0-e9a8-48c0-a8fa-ff00b0cd0ac1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e865337e-db9f-4d4c-b9fe-35030792c942","displayName":"Microsoft Outlook 2016","description":"Microsoft Outlook 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["3f216590-fb12-4f8e-924f-2a6895d94126","e0e10e94-325c-49e6-ab48-4f146254395f","d0ff97aa-cf53-460e-be82-2c521a56eec6","fb721630-fc42-465b-ba22-ab670698c8b5","92d9620c-92b6-45ec-b7d6-2f9ed0751e78","f77040df-7dd2-4916-b6a0-5ef962686d4e","b3e317cd-c580-478e-885c-666ce3079e78","e1a2f289-40d8-4e7c-b0a6-cd36f0ee9111","a9b83120-15ad-4c9d-bb0d-4ff75c2f9453","75ad885f-6118-4508-a2fd-bb26be931c3f","7652894d-4667-443f-b925-b1686a942729","ee62e9fc-14c8-4f24-aa7e-89524087a802","2938509f-7d8c-4d5f-ad8a-10018ad3a0e8","f5a1a387-6665-4527-b532-88a64a76e732"],"platforms":"windows10","technologies":"mdm"},{"id":"e86f24d3-8531-4298-b064-692ea795b1d9","displayName":"Diagnostics","description":"Microsoft Office 2016 Diagnostics","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e87c8824-e7c4-4fca-a3c1-0376d45d7f9f","displayName":"Compose Messages","description":"Microsoft Outlook 2016\\Outlook Options\\Mail\\Compose Messages","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e8ce968b-91cb-4301-ba98-b37d42bc5213","displayName":"Automatically as you type","description":"Microsoft Word 2016\\Word Options\\Proofing\\AutoFormat as you type\\Automatically as you type","helpText":null,"parentCategoryId":"4dae3032-1f16-4ace-911b-a957db0b8089","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e905d6cf-7820-48d4-86e0-b55fa991a5ad","displayName":"Profile Removal Password","description":"Managed Devices > Profile Removal Password","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e905d6cf-7820-48d4-86e0-b55fa991a5ad","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"e94d8ce3-d08e-4ee6-83e9-5f89aa37a6bf","displayName":"Trusted Add-ins","description":"Microsoft Outlook 2016\\Security\\Security Form Settings\\Programmatic Security\\Trusted Add-ins","helpText":null,"parentCategoryId":"a36b9aa4-52d0-44a4-bc2c-eec26d2a53ec","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e95335ec-2704-47ab-8b40-f602b31eeb9d","displayName":"Content Caching","description":"Networking > Content Caching","helpText":null,"parentCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","rootCategoryId":"cf5f7f94-cb88-497e-9599-f0985d9ff3cb","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"e95db55a-8337-416d-a61f-e60f55cc0d13","displayName":"AutoCorrect","description":"Microsoft Word 2016\\Word Options\\Proofing\\AutoCorrect","helpText":null,"parentCategoryId":"dc049161-17c6-411e-906b-a871b33651cd","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e972d9fe-a9b7-4a65-a88f-0958fab19584","displayName":"App runtime","description":"Administrative Templates App runtime","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e9aff162-feb0-400a-aa68-8dd8deb93275","displayName":"Windows Logon Options","description":"Administrative Templates\\Windows Components\\Windows Logon Options","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","displayName":"Power","description":"Power","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"e9cd3225-7b0e-485e-99f8-7ec8dd3977a1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ea70bf7e-63c2-4f75-aacc-fd638c8a3f5f","displayName":"Session Time Limits","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Session Time Limits","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ea812d2c-1cf9-4132-9b33-12bb7ac17dbd","displayName":"Publishing","description":"Administrative Templates\\System\\App-V\\Publishing","helpText":null,"parentCategoryId":"a24f4ab6-289a-450a-b438-1c4bb1214942","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ea9a092f-dd93-41d4-9bbb-118de1213578","displayName":"Integration","description":"Administrative Templates App-V Integration","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eb54e1fc-5780-445c-b9e3-9ceb7a4360d7","displayName":"IME (Japanese)","description":"Microsoft Office 2016\\IME (Japanese)","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eb5baf57-86c8-4bfa-ac3a-53025686e37c","displayName":"Reporting","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Reporting","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eb6409fc-fb52-413d-ae4b-eff017b52b30","displayName":"Experimentation","description":"Microsoft Edge\\ Experimentation","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eb947c30-3c43-4d34-a566-a842a1a142f3","displayName":"Language Preferences","description":"Microsoft Office 2016\\Language Preferences","helpText":null,"parentCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["0f6020d9-278b-4284-894a-bc4a70c8cf32","e0dfe97e-348d-4d30-a6a1-e0de1989236e","3512a9f5-d692-4a1f-aedd-1bd431ae893e"],"platforms":"windows10","technologies":"mdm"},{"id":"ec8a2b7c-d8dd-49d8-af2a-3ae0ca8eac02","displayName":"Security","description":"Microsoft Word 2016\\Word Options\\Security","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["5f7e1206-359d-49d7-82c3-f6b6a6eddf65","a5ce858b-74c2-4663-9b3e-068d31349a13"],"platforms":"windows10","technologies":"mdm"},{"id":"ecfb5fea-26cc-494b-9e5e-88b5e51a5be0","displayName":"Internet Zone","description":"Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel\\Security Page\\Internet Zone","helpText":null,"parentCategoryId":"d2da164d-dd77-4489-b67f-d7fbdb19cde2","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ed137c3d-d7bc-48f3-ad86-ff194fc6820d","displayName":"Calculation options for Microsoft Project","description":"Microsoft Project 2016\\Project Options\\Calculation\\Calculation options for Microsoft Project","helpText":null,"parentCategoryId":"20ed0d61-bbf7-421e-8926-0921c7ff7e75","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ed24097d-3bb7-459c-83fb-f0090d1ad8dd","displayName":"Speech","description":"Speech","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"ed24097d-3bb7-459c-83fb-f0090d1ad8dd","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eda31027-9270-4959-801b-397fa05512e2","displayName":"Restrictions","description":"Restrictions","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"eda31027-9270-4959-801b-397fa05512e2","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"edba50d5-da3c-48cb-8e50-381ad0bfaaaf","displayName":"Exclusions","description":"Administrative Templates\\ Windows Components\\ Microsoft Defender Antivirus\\ Exclusions","helpText":null,"parentCategoryId":"49d75a11-64c6-43d1-bc25-0ab156ff4216","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"edd1e620-09e1-47ea-abc8-1e241a174ed9","displayName":"Locale Services","description":"Administrative Templates Locale Services","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"edf3754c-b22d-4946-a744-4773240a5883","displayName":"WWAN Media Cost","description":"Administrative Templates WWAN Service WWAN Media Cost","helpText":null,"parentCategoryId":"cd5d4069-6a72-41fa-ad0d-ef78de5c5a68","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ee62e9fc-14c8-4f24-aa7e-89524087a802","displayName":"Customizable Error Messages","description":"Microsoft Outlook 2016\\Customizable Error Messages","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eec07ad3-24ef-4502-8125-9fc988650a7c","displayName":"Settings","description":"Settings","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"eec07ad3-24ef-4502-8125-9fc988650a7c","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eef9e433-0ca1-40b0-9a5d-c0ba1f8f0510","displayName":"General","description":"Microsoft Office 2016\\Tools | Options | General | Web Options...\\General","helpText":null,"parentCategoryId":"2d5a483f-b408-426d-9234-2883eae20afb","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"eefc9ae4-b9ae-4d77-8b68-359b9e5ec6f7","displayName":"WWAN UI Settings","description":"Administrative Templates WWAN Service WWAN UI Settings","helpText":null,"parentCategoryId":"cd5d4069-6a72-41fa-ad0d-ef78de5c5a68","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ef6a4e8c-07b2-4f55-9e94-5701cb2268b1","displayName":"Edge Workspaces settings","description":"Microsoft Edge Edge Workspaces settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"ef7328b1-c666-40fe-a933-57b14bc77dd3","displayName":"Wallpaper","description":"Managed Settings Wallpaper","helpText":null,"parentCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","rootCategoryId":"8ff93a7a-503c-4955-89be-900d475b7c5e","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"ef8760ac-a77c-4055-a812-a95bfbf9c00a","displayName":"Native Messaging","description":"Microsoft Edge\\Native Messaging","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"ef8b8f2d-7791-4c44-a4f2-e39051f2e715","displayName":"Above Lock","description":"Above Lock","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"ef8b8f2d-7791-4c44-a4f2-e39051f2e715","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"efabaf11-42e4-48ab-81ca-4514199d239b","displayName":"Scripting","description":"Administrative Templates App-V Scripting","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"efb8c441-bad5-4e2f-b07c-5ac299cf3d22","displayName":"Trust Center","description":"Microsoft Office 2016\\Security Settings\\Trust Center","helpText":null,"parentCategoryId":"50b4bc60-802c-477a-9366-80e09154595f","rootCategoryId":"a8aa0d8c-19f2-4e71-acb8-68da2dbf73df","childCategoryIds":["135e4013-43b8-4227-99fd-54ddeac4e329","24f6d328-64e7-4490-be38-452ac3b61f6f","517e55f5-729f-4b4d-9555-33baa95a0e5a"],"platforms":"windows10","technologies":"mdm"},{"id":"effee722-f6ec-440e-a892-bf645bc341ff","displayName":"Reboot","description":"Reboot","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"effee722-f6ec-440e-a892-bf645bc341ff","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f00e9baf-9bbf-48e4-aaac-57410730f016","displayName":"Sign-in settings","description":"Google Google Chrome Sign-in settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f0190b73-0d5c-410e-bce1-e03aa1f62ed4","displayName":"Security Settings","description":"Microsoft Office 2016 (Machine)\\Security Settings","helpText":null,"parentCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":["fa8e7b34-c736-47ec-be83-a9f1960d5281"],"platforms":"windows10","technologies":"mdm"},{"id":"f019963f-f4ed-4429-b6e3-babfb24c36a8","displayName":"Parental Controls Application Restrictions","description":"Parental Controls > Parental Controls Application Restrictions","helpText":null,"parentCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","rootCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","displayName":"Connectivity","description":"Connectivity","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f03f9f2f-f8ba-4c94-ad5f-95ada256c8c6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"f10138ba-123a-43bc-8031-4458ba327374","displayName":"Mixed Reality","description":"Mixed Reality","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f10138ba-123a-43bc-8031-4458ba327374","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f106d9e2-60ce-4e16-b74d-bd9ef401d7ba","displayName":"Visio Options","description":"Microsoft Visio 2016\\Visio Options","helpText":null,"parentCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["ad9610c6-d1c5-4c7a-9e74-58b810dd759d","2ea63962-4cac-4a5c-9181-e6a364489db0","8495c82c-f273-4bcc-8886-6751103a9c7b","2764869c-54a3-462b-bc72-c580621ab6bb","957a5b24-ed7a-4f84-9d73-7b6131367396","a7d55d90-e1d1-4577-8bfd-fe2641bce461"],"platforms":"windows10","technologies":"mdm"},{"id":"f125d7cd-a333-4f24-a5f4-99fc289c6d22","displayName":"Package Management","description":"Administrative Templates App-V Package Management","helpText":null,"parentCategoryId":"788355e5-e113-4b17-ada9-fb5ef38bffa1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f1278d6b-60ec-4369-88cf-21df47caaec6","displayName":"Remote Procedure Call","description":"Administrative Templates Remote Procedure Call","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f14014f5-a401-41e3-8a97-1a9e3c5e3614","displayName":"App Store","description":"App Store > App Store","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f14014f5-a401-41e3-8a97-1a9e3c5e3614","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"f14074a2-de74-48df-b273-48791217ef4d","displayName":"Security Settings","description":"Administrative Templates\\System\\Service Control Manager Settings\\Security Settings","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f1455024-7de9-448f-8d8f-a42db2af0a35","displayName":"Printer Redirection","description":"Administrative Templates Remote Desktop Services Remote Desktop Session Host Printer Redirection","helpText":null,"parentCategoryId":"62bbe0df-b9b2-453f-a2f1-ee66291d4956","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f14fcb64-a868-4531-a3b4-c3cdf03c2b99","displayName":"Event Log Service","description":"Administrative Templates Event Log Service","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["55a61bb8-e023-4741-8213-99995c5902e5","fecd321b-9a48-4f97-bbed-b335f9ccebdb","a28dd311-46e8-4868-89ab-d3745c0bca21","1a2a4fc8-c54b-4906-a422-7dd51a196211"],"platforms":"windows10","technologies":"mdm"},{"id":"f2345e03-bcd9-48fc-9c52-11ae06ba625a","displayName":"Background Intelligent Transfer Service (BITS)","description":"Administrative Templates\\Network\\Background Intelligent Transfer Service (BITS)","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f26fe4c2-d073-4e51-90bf-61c4bbdeb4f2","displayName":"Privacy","description":"Administrative Templates Internet Explorer Privacy","helpText":null,"parentCategoryId":"005ddf8f-da22-4b23-ab02-289f8f6c7960","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f29a5e42-24f5-47fb-bdcf-9ed9418035ee","displayName":"AutoArchive","description":"Microsoft Outlook 2016\\Outlook Options\\Other\\AutoArchive","helpText":null,"parentCategoryId":"5e3f61b6-52b7-4c74-a101-33c1cf34a749","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f2bf77fd-37df-448b-8959-6478abf96f6f","displayName":"Mail Format","description":"Microsoft Outlook 2016\\Outlook Options\\Mail Format","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["db2ed2fd-1ab5-4ef9-a76c-7b0baacc67ad","88b16683-81f2-450a-9bf2-42f582e0b748","91bf761c-1a1e-4a3a-adbf-27288ea7b0b3"],"platforms":"windows10","technologies":"mdm"},{"id":"f2d139ed-a314-48b7-b700-4d11adfcc309","displayName":"Cloud Cache Service","description":"FS Logix Cloud Cache Service","helpText":null,"parentCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","rootCategoryId":"e099d9e1-4ffa-42ed-a250-5fd7875469f2","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f3027ba5-9a2f-42c6-9872-ec21f726929c","displayName":"Early Launch Antimalware","description":"Administrative Templates Early Launch Antimalware","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f3264346-fdc4-4e23-9a2a-dcfc34022e59","displayName":"Printer Redirection","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Printer Redirection","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f34e3da0-b440-43dc-a368-4fd39646a9c5","displayName":"Trust Center","description":"Microsoft Visio 2016\\Visio Options\\Security\\Trust Center","helpText":null,"parentCategoryId":"2ea63962-4cac-4a5c-9181-e6a364489db0","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":["75f9bfd8-8ee2-47b0-b080-a4d179724ca8"],"platforms":"windows10","technologies":"mdm"},{"id":"f350f9a2-3a91-4d6d-90ed-7e3849b0d5f1","displayName":"Device password","description":"Device Restriction Device password","helpText":null,"parentCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","rootCategoryId":"89519fc9-9b38-4401-8767-b0a047cae515","childCategoryIds":[],"platforms":"androidEnterprise,aosp","technologies":"android"},{"id":"f35cc803-3a06-4262-b38b-a5295321f756","displayName":"Extensible Single Sign On Kerberos","description":"Authentication > Extensible Single Sign On Kerberos","helpText":null,"parentCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","rootCategoryId":"a79b2d36-7dea-4a84-81ef-27f99296bccf","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm"},{"id":"f36a78cf-46cf-418e-a98e-032f6cfad224","displayName":"App Management","description":"App Management","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f36a78cf-46cf-418e-a98e-032f6cfad224","childCategoryIds":["d875dca1-dc97-4cc5-9df3-c50b813622a3","7b4e3f58-fb7a-4e6b-8f39-35d1cd90f508","daa2ea69-8026-465a-942c-75eb0396d5b9","8efd284f-5a56-4da8-8821-f51984ff954d"],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"f4a8384f-9e4e-4fc6-9ee2-28fa5260347a","displayName":"Smart Card","description":"Security > Smart Card","helpText":null,"parentCategoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","rootCategoryId":"62cb63bd-d3ef-4cff-9b4a-e7bbf4657173","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"f4d4e062-0bcb-496e-b8d0-7e67cefe05c0","displayName":"Windows Media Player","description":"Administrative Templates Windows Media Player","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["2f85405a-7472-44ce-8c05-b59bb54912d5","902a93e8-8beb-46c5-ba26-4e2bf6161e22","7f461268-0fb6-4247-b6db-52515d42a20e"],"platforms":"windows10","technologies":"mdm"},{"id":"f4eaa5be-1498-482e-abe6-de4fed7e3302","displayName":"Programs","description":"Administrative Templates\\Control Panel\\Programs","helpText":null,"parentCategoryId":"7a3a7335-4837-4bc5-9282-448402a05d89","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f4f0dfd7-4638-4173-8b3b-0f08608bf330","displayName":"Active Directory","description":"Administrative Templates\\Desktop\\Active Directory","helpText":null,"parentCategoryId":"6b8ac32e-6bda-4eb4-b9e3-3d39ad8ce623","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f4fd69bc-8622-411d-91bb-0e214f8fb112","displayName":"Logon","description":"Administrative Templates\\System\\Logon","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f5007db5-6ee6-4bbd-a391-9727902aad6d","displayName":"General","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\General","helpText":null,"parentCategoryId":"da92dfd6-a29e-42a0-92ed-276bb6904455","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f52d9745-eaf4-4e39-84b2-6b32c3b15aa3","displayName":"IPv6 Transition Technologies","description":"Administrative Templates\\Network\\TCPIP Settings\\IPv6 Transition Technologies","helpText":null,"parentCategoryId":"3a28f10c-cb75-4f85-871b-87eb9dcd883c","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f59804be-7fc6-43c3-9baa-942aab85be84","displayName":"Display","description":"Microsoft Visio 2016\\Visio Options\\Advanced\\Display","helpText":null,"parentCategoryId":"957a5b24-ed7a-4f84-9d73-7b6131367396","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f59f7502-cd01-4ea7-9925-2231f88596f0","displayName":"Dma Guard","description":"Dma Guard","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f59f7502-cd01-4ea7-9925-2231f88596f0","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"f5a1a387-6665-4527-b532-88a64a76e732","displayName":"Miscellaneous","description":"Microsoft Outlook 2016\\Miscellaneous","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":["ffb0a109-2507-42b3-b26f-9f667f2d5029","cb6472c8-3e22-4029-af98-8a97f03a5a44"],"platforms":"windows10","technologies":"mdm"},{"id":"f5babdb3-c718-4675-b977-6c7bc7e6f886","displayName":"Check Accessibility","description":"Microsoft PowerPoint 2016\\File Tab\\Check Accessibility","helpText":null,"parentCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f5e39798-0511-462f-b859-f892fdde4328","displayName":"iSCSI Target Discovery","description":"Administrative Templates\\System\\iSCSI\\iSCSI Target Discovery","helpText":null,"parentCategoryId":"363982dd-fc96-49ce-a499-f6401f2c212b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f60cd3c8-a91b-4542-b09f-129dfc7e589c","displayName":"Internet Explorer","description":"Administrative Templates\\Windows Components\\Internet Explorer","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["dea96bde-003b-46fa-a960-baf62289c57d","6776f6fa-8836-408c-b91c-1e444e0cba5c","accec716-3bf1-4a33-882d-3538d32fcbbc","c26b2f10-f2c0-45f2-955c-5379dd12f206","586c5c5a-15cd-4592-beae-1709c6daf5b7","7a85e72a-a755-4903-b1fd-4939049380f4"],"platforms":"windows10","technologies":"mdm"},{"id":"f62e0f2a-4363-4246-8057-1dc811fe4360","displayName":"System","description":"System","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f62e0f2a-4363-4246-8057-1dc811fe4360","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"f66e6bf2-a437-4d36-b46c-e965b31a5d4f","displayName":"Local Network Access settings","description":"Google Google Chrome Local Network Access settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f66fb7e4-a968-4969-b627-f99aaad0dfc3","displayName":"Customize Ribbon","description":"Microsoft PowerPoint 2016\\PowerPoint Options\\Customize Ribbon","helpText":null,"parentCategoryId":"da92dfd6-a29e-42a0-92ed-276bb6904455","rootCategoryId":"ba7686de-e6ee-4af9-b1a5-265b03e08367","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f69e6993-2e88-4938-bfe5-cea9ab21a858","displayName":"Windows Remote Shell","description":"Administrative Templates Windows Remote Shell","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f71e7e3a-482a-4760-b7f9-0403b2b6f7d8","displayName":"Parental Controls Time Limits","description":"Parental Controls > Parental Controls Time Limits","helpText":null,"parentCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","rootCategoryId":"82a437a8-6be8-4003-a951-951999e86db8","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","displayName":"Windows Defender Security Center","description":"Windows Defender Security Center","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f72e61e9-7e84-4c6d-8057-fa0a4f79cbea","childCategoryIds":[],"platforms":"windows10","technologies":"mdm,configManager,microsoftSense"},{"id":"f7486553-9e63-4d63-9423-56e5ffe48700","displayName":"Google Cast","description":"Google Google Chrome Google Cast","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f77040df-7dd2-4916-b6a0-5ef962686d4e","displayName":"Meeting Workspace","description":"Microsoft Outlook 2016\\Meeting Workspace","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f783d1ea-2f9b-4fcb-96cc-fb455cfe69f9","displayName":"Fault Tolerant Heap","description":"Administrative Templates\\System\\Troubleshooting and Diagnostics\\Fault Tolerant Heap","helpText":null,"parentCategoryId":"424a0e73-8002-42e3-b47d-2062fc17c3b3","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f8a973d8-b5d6-4d3e-9e82-63f61107fd0c","displayName":"Windows Licensing","description":"Windows Licensing","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f8a973d8-b5d6-4d3e-9e82-63f61107fd0c","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f8bb78a3-d1e4-4c5d-8b0a-904a83830519","displayName":"Shared Folders","description":"Administrative Templates\\Shared Folders","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f8f4d337-4c55-4518-91c4-f7f77703d843","displayName":"Software Update","description":"System Updates > Software Update","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"f8f4d337-4c55-4518-91c4-f7f77703d843","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"f926f6e3-1bd6-4259-ae7c-e14108568882","displayName":"Microsoft Support Diagnostic Tool","description":"Administrative Templates Microsoft Support Diagnostic Tool","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f96201d4-894e-4a72-87fb-22146039a802","displayName":"Device Health Attestation Service","description":"Administrative Templates\\System\\Device Health Attestation Service","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"f9e53433-d8d9-4eaf-bdf3-d32de60d686e","displayName":"Customize Ribbon","description":"Microsoft Word 2016\\Word Options\\Customize Ribbon","helpText":null,"parentCategoryId":"31070051-859e-4d27-9df3-c07b8a2d2179","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fa20bbc3-d25d-4a7f-a349-9b211d186e21","displayName":"Subscribed Calendars","description":"Accounts Subscribed Calendars","helpText":null,"parentCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","rootCategoryId":"952bb5bd-fd1f-44d0-b3af-2201977fc87f","childCategoryIds":[],"platforms":"iOS","technologies":"mdm,appleRemoteManagement"},{"id":"fa2722a8-dcfd-4e14-a429-2b0041642c77","displayName":"Network settings","description":"Google Google Chrome Network settings","helpText":null,"parentCategoryId":"36c83fb3-c18c-472b-b39e-617c2f8a7fbd","rootCategoryId":"d097ffb0-1ceb-4384-9d96-0ced6bd08c31","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","displayName":"Windows App","description":"Windows App","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"fa45b2a8-738c-4bac-acc8-7e5bcd6ea6cb","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fa471a57-af7b-4ccf-b6ba-4c57a7230498","displayName":"Editing","description":"Microsoft OneNote 2016\\OneNote Options\\Editing","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fa6bfb01-34f6-4c54-89b9-f7e717e6d394","displayName":"Customize Ribbon","description":"Microsoft Outlook 2016\\Outlook Options\\Customize Ribbon","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fa8e7b34-c736-47ec-be83-a9f1960d5281","displayName":"IE Security","description":"Microsoft Office 2016 (Machine)\\Security Settings\\IE Security","helpText":null,"parentCategoryId":"f0190b73-0d5c-410e-bce1-e03aa1f62ed4","rootCategoryId":"32cd9bf8-5833-4e78-9bfd-beaa9d3a38a4","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","displayName":"Microsoft Word 2016","description":"Microsoft Word 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":["1fddd12c-a630-47f0-9633-638808e228f9","73bc2db9-d37f-4add-a64d-a8239273edb3","b8adcde1-500a-430f-8636-f97eaae2a2c6","12f9c95a-3ff1-49ef-bc8e-8d2b5ef4b06e","e522c142-5666-4090-a7f4-1da1487f5384","320ccaa3-a391-4d29-a9c4-594561f4104d","31070051-859e-4d27-9df3-c07b8a2d2179","740e7a10-3774-4a1c-9970-6907e0f0b848"],"platforms":"windows10","technologies":"mdm"},{"id":"fb1e99d0-b921-4b19-9842-17e3e7987528","displayName":"Edge Website Typo Protection settings","description":"Microsoft Edge Edge Website Typo Protection settings","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"fb721630-fc42-465b-ba22-ab670698c8b5","displayName":"Search Folders","description":"Microsoft Outlook 2016\\Search Folders","helpText":null,"parentCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fc8f887c-cfd9-4bea-bfac-2214d06dba99","displayName":"WWAN Service","description":"Administrative Templates\\Network\\WWAN Service","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["a51a8665-045d-482d-b68b-2128959c8b31","ab6aa2f6-87bf-4a06-a206-e0902af3e4bc"],"platforms":"windows10","technologies":"mdm"},{"id":"fca9261c-1e93-467d-90cf-ba9108e4cb2e","displayName":"Restricted Sites Zone","description":"Administrative Templates Internet Explorer Internet Control Panel Security Page Restricted Sites Zone","helpText":null,"parentCategoryId":"8d503574-f93a-4277-a30d-19895d46dd13","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fcc8ad48-a1e7-4cba-adae-7c916cbbc897","displayName":"Delegates","description":"Microsoft Outlook 2016\\Outlook Options\\Delegates","helpText":null,"parentCategoryId":"d0ff97aa-cf53-460e-be82-2c521a56eec6","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fcddcc0b-7cf8-4ebc-a818-d10689603263","displayName":"Event Log Service","description":"Administrative Templates\\Windows Components\\Event Log Service","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":["de8dd733-3bb6-4ce5-9f93-475caac1862c","8dca6b5f-ff9c-44c8-9822-008acef616aa","9d26f3a1-6a54-4043-bda2-bfeb84e80524","66448b13-cc0a-4ffe-9ad5-62c4821dc77f"],"platforms":"windows10","technologies":"mdm"},{"id":"fd16aa29-dae5-49b5-910e-88f3078ce2da","displayName":"Push To Install","description":"Administrative Templates\\Windows Components\\Push To Install","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fd3717c1-dcf8-4038-b7f7-4ad3359a9d32","displayName":"Xsan Preferences","description":"Xsan > Xsan Preferences","helpText":null,"parentCategoryId":"811f63f1-1619-4b48-b8f0-3d388729bd47","rootCategoryId":"811f63f1-1619-4b48-b8f0-3d388729bd47","childCategoryIds":[],"platforms":"macOS","technologies":"mdm,appleRemoteManagement"},{"id":"fd49df1b-bfad-4ed5-85c2-046a32fa8782","displayName":"Lanman Server","description":"Administrative Templates\\Network\\Lanman Server","helpText":null,"parentCategoryId":"dad3971c-b07b-461b-8ead-6eda80ee57e1","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fddc444c-3591-4a50-865b-d8993b798e12","displayName":"Cast","description":"Microsoft Edge\\Cast","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"fe3cb879-8869-4163-91d7-e432abd75da8","displayName":"Scheduled Maintenance","description":"Administrative Templates Scheduled Maintenance","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fe52de11-190e-4429-96c1-106b22724456","displayName":"Device and Resource Redirection","description":"Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Device and Resource Redirection","helpText":null,"parentCategoryId":"66e289cf-85cb-425f-94a1-54777950f78b","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fe54701d-42bd-47f0-9c49-26ff6a928b32","displayName":"Protected View","description":"Microsoft Excel 2016\\Excel Options\\Security\\Trust Center\\Protected View","helpText":null,"parentCategoryId":"7490c4fd-c326-42f7-9908-006504616d4c","rootCategoryId":"e2a41bef-2f82-409e-9d20-0fe335390f60","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fe65603b-1980-446b-ae17-516eb885c6be","displayName":"Tablet PC Pen Training","description":"Administrative Templates Tablet PC Pen Training","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fe786056-6f4a-4d16-bff4-5fbb640308d2","displayName":"Trusted Locations","description":"Microsoft Word 2016\\Word Options\\Security\\Trust Center\\Trusted Locations","helpText":null,"parentCategoryId":"5f7e1206-359d-49d7-82c3-f6b6a6eddf65","rootCategoryId":"fab15a0f-3aff-44b3-b1f3-6788bd60070f","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fe7c8652-17d4-40a7-869c-f7cfc3454402","displayName":"Show indicators and Option butons for","description":"Microsoft Project 2016\\Project Options\\Interface\\Show indicators and Option butons for","helpText":null,"parentCategoryId":"84b7f123-e849-40f9-914b-4b97b57bd3b4","rootCategoryId":"0e864f4a-d9e7-48f5-abe6-c7f92773921a","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fe845e81-5993-4a65-b22a-decfc5928c65","displayName":"Proxy server","description":"Microsoft Edge\\Proxy server","helpText":null,"parentCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","rootCategoryId":"a25a7a02-4bac-411b-9d02-10cb3297cb17","childCategoryIds":[],"platforms":"macOS,windows10","technologies":"mdm,mobileApplicationManagement"},{"id":"fea97af7-df89-4fde-8e2b-f8e7f7b6b741","displayName":"Scareware Blocker settings","description":"Microsoft Edge - Default Settings users can override Scareware Blocker settings","helpText":null,"parentCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","rootCategoryId":"43593f1a-6e4d-44a9-b1d4-99b375a9baa6","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fecd321b-9a48-4f97-bbed-b335f9ccebdb","displayName":"Application","description":"Administrative Templates Event Log Service Application","helpText":null,"parentCategoryId":"f14fcb64-a868-4531-a3b4-c3cdf03c2b99","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fed4ebaf-ec71-4fb0-be3e-4c7a6bb1af77","displayName":"Predefined","description":"Microsoft Visio 2016\\Disable Items in User Interface\\Predefined","helpText":null,"parentCategoryId":"c67c9e69-6e69-4b63-868c-3b3df5d17e47","rootCategoryId":"5e9bf104-334e-4056-bb4b-d6d072a92cb7","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ff543267-540e-4e37-a1e9-daf6a5e16ba7","displayName":"Proxy Server","description":"Microsoft Edge Update\\Proxy Server","helpText":null,"parentCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","rootCategoryId":"d4943981-47b2-4a86-848b-860e8ca47381","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ff87ffcb-a827-4d2b-90fc-e5789ef6d3e0","displayName":"E-mail","description":"Microsoft Outlook 2016\\Account Settings\\E-mail","helpText":null,"parentCategoryId":"92d9620c-92b6-45ec-b7d6-2f9ed0751e78","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ff90bf4b-0583-4761-a1c4-5aa4b50c5872","displayName":"Notifications","description":"User Experience > Notifications","helpText":null,"parentCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","rootCategoryId":"84affc4e-1473-43e6-9df0-0fe7e1e84c4b","childCategoryIds":[],"platforms":"iOS,macOS","technologies":"mdm,appleRemoteManagement"},{"id":"ffb0a109-2507-42b3-b26f-9f667f2d5029","displayName":"Miscellaneous","description":"Microsoft Outlook 2016\\Miscellaneous\\Miscellaneous","helpText":null,"parentCategoryId":"f5a1a387-6665-4527-b532-88a64a76e732","rootCategoryId":"e865337e-db9f-4d4c-b9fe-35030792c942","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","displayName":"Microsoft Access 2016","description":"Microsoft Access 2016","helpText":null,"parentCategoryId":"00000000-0000-0000-0000-000000000000","rootCategoryId":"ffb238b0-ab9f-46f5-9b85-580f49c1a2b6","childCategoryIds":["607a1c39-a3db-496f-8db6-c99d67f5f76c","6730f0be-a129-4b48-942f-e4ddf69fee66","b8158968-c839-4d37-9eb8-887bd6fd7402","d0a3bbad-8ed0-4545-8249-9e464a13e1b7","c3ab8d44-b353-4a8a-a526-ffd743fb7ff8"],"platforms":"windows10","technologies":"mdm"},{"id":"ffb6de77-8f2d-4b45-9cd4-00bb75cd496c","displayName":"App Package Deployment","description":"Administrative Templates\\Windows Components\\App Package Deployment","helpText":null,"parentCategoryId":"cef993dc-bf18-44f7-8e9f-465ef1a0f144","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ffd1a98f-0fac-47fe-813f-7510d0dacbc3","displayName":"Windows Resource Exhaustion Detection and Resolution","description":"Administrative Templates Windows Resource Exhaustion Detection and Resolution","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"ffe3b0a1-62e6-4a31-ad9a-a213472fb7ef","displayName":"Audio and Video","description":"Microsoft OneNote 2016\\OneNote Options\\Audio and Video","helpText":null,"parentCategoryId":"a185940c-7899-4ab6-867d-7559352cf8d2","rootCategoryId":"afc4a9d5-81df-4077-bb80-bd46dcd0d0d1","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"},{"id":"fff51673-04b8-4277-98ef-4baffbd8d192","displayName":"Windows Calendar","description":"Administrative Templates Windows Calendar","helpText":null,"parentCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","rootCategoryId":"48be5f9d-4941-4189-8015-dd78f87aacd5","childCategoryIds":[],"platforms":"windows10","technologies":"mdm"}] diff --git a/public/languageList.json b/public/languageList.json new file mode 100644 index 000000000000..fe6f901b3089 --- /dev/null +++ b/public/languageList.json @@ -0,0 +1,604 @@ +[ + { + "language": "Arabic", + "Geographic area": "Saudi Arabia", + "tag": "ar-SA", + "languageTag": "Arabic (ar-SA)", + "LCID": "1025" + }, + { + "language": "Arabic", + "Geographic area": "Algeria", + "tag": "ar-DZ", + "languageTag": "Arabic (ar-DZ)", + "LCID": "5121" + }, + { + "language": "Arabic", + "Geographic area": "Egypt", + "tag": "ar-EG", + "languageTag": "Arabic (ar-EG)", + "LCID": "3073" + }, + { + "language": "Arabic", + "Geographic area": "Bahrain", + "tag": "ar-BH", + "languageTag": "Arabic (ar-BH)", + "LCID": "15361" + }, + { + "language": "Arabic", + "Geographic area": "Iraq", + "tag": "ar-IQ", + "languageTag": "Arabic (ar-IQ)", + "LCID": "2049" + }, + { + "language": "Arabic", + "Geographic area": "Jordan", + "tag": "ar-JO", + "languageTag": "Arabic (ar-JO)", + "LCID": "11265" + }, + { + "language": "Arabic", + "Geographic area": "Kuwait", + "tag": "ar-KW", + "languageTag": "Arabic (ar-KW)", + "LCID": "13313" + }, + { + "language": "Arabic", + "Geographic area": "Lebanon", + "tag": "ar-LB", + "languageTag": "Arabic (ar-LB)", + "LCID": "12289" + }, + { + "language": "Arabic", + "Geographic area": "Libya", + "tag": "ar-LY", + "languageTag": "Arabic (ar-LY)", + "LCID": "4097" + }, + { + "language": "Arabic", + "Geographic area": "Morocco", + "tag": "ar-MA", + "languageTag": "Arabic (ar-MA)", + "LCID": "6145" + }, + { + "language": "Arabic", + "Geographic area": "Oman", + "tag": "ar-OM", + "languageTag": "Arabic (ar-OM)", + "LCID": "8193" + }, + { + "language": "Arabic", + "Geographic area": "Qatar", + "tag": "ar-QA", + "languageTag": "Arabic (ar-QA)", + "LCID": "16385" + }, + { + "language": "Arabic", + "Geographic area": "Syria", + "tag": "ar-SY", + "languageTag": "Arabic (ar-SY)", + "LCID": "10241" + }, + { + "language": "Arabic", + "Geographic area": "Tunisia", + "tag": "ar-TN", + "languageTag": "Arabic (ar-TN)", + "LCID": "7169" + }, + { + "language": "Arabic", + "Geographic area": "UAE", + "tag": "ar-AE", + "languageTag": "Arabic (ar-AE)", + "LCID": "14337" + }, + { + "language": "Arabic", + "Geographic area": "Yemen", + "tag": "ar-YE", + "languageTag": "Arabic (ar-YE)", + "LCID": "9217" + }, + { + "language": "Bulgarian", + "Geographic area": "Bulgaria", + "tag": "bg-BG", + "languageTag": "Bulgarian (bg-BG)", + "LCID": "1026" + }, + { + "language": "Chinese (Simplified)", + "Geographic area": "People's Republic of China", + "tag": "zh-CN", + "languageTag": "Chinese (Simplified) (zh-CN)", + "LCID": "2052" + }, + { + "language": "Chinese", + "Geographic area": "Taiwan", + "tag": "zh-TW", + "languageTag": "Chinese (zh-TW)", + "LCID": "1028" + }, + { + "language": "Chinese", + "Geographic area": "Hong Kong SAR", + "tag": "zh-HK", + "languageTag": "Chinese (zh-HK)", + "LCID": "3076" + }, + { + "language": "Croatian", + "Geographic area": "Croatia", + "tag": "hr-HR", + "languageTag": "Croatian (hr-HR)", + "LCID": "1050" + }, + { + "language": "Czech", + "Geographic area": "Czech Republic", + "tag": "cs-CZ", + "languageTag": "Czech (cs-CZ)", + "LCID": "1029" + }, + { + "language": "Danish", + "Geographic area": "Denmark", + "tag": "da-DK", + "languageTag": "Danish (da-DK)", + "LCID": "1030" + }, + { + "language": "Dutch", + "Geographic area": "Belgium", + "tag": "nl-BE", + "languageTag": "Dutch (nl-BE)", + "LCID": "2067" + }, + { + "language": "Dutch", + "Geographic area": "Netherlands", + "tag": "nl-NL", + "languageTag": "Dutch (nl-NL)", + "LCID": "1043" + }, + { + "language": "English", + "Geographic area": "United States", + "tag": "en-US", + "languageTag": "English (en-US)", + "LCID": "1033" + }, + { + "language": "English", + "Geographic area": "Australia", + "tag": "en-AU", + "languageTag": "English (en-AU)", + "LCID": "3081" + }, + { + "language": "English", + "Geographic area": "United Kingdom", + "tag": "en-GB", + "languageTag": "English (en-GB)", + "LCID": "2057" + }, + { + "language": "English", + "Geographic area": "New Zealand", + "tag": "en-NZ", + "languageTag": "English (en-NZ)", + "LCID": "5129" + }, + { + "language": "English", + "Geographic area": "Canada", + "tag": "en-CA", + "languageTag": "English (en-CA)", + "LCID": "4105" + }, + { + "language": "English", + "Geographic area": "South Africa", + "tag": "en-ZA", + "languageTag": "English (en-ZA)", + "LCID": "7177" + }, + { + "language": "English", + "Geographic area": "Singapore", + "tag": "en-SG", + "languageTag": "English (en-SG)", + "LCID": "4100" + }, + { + "language": "Estonian", + "Geographic area": "Estonia", + "tag": "et-EE", + "languageTag": "Estonian (et-EE)", + "LCID": "1061" + }, + { + "language": "Finnish", + "Geographic area": "Finland", + "tag": "fi-FI", + "languageTag": "Finnish (fi-FI)", + "LCID": "1035" + }, + { + "language": "French", + "Geographic area": "France", + "tag": "fr-FR", + "languageTag": "French (fr-FR)", + "LCID": "1036" + }, + { + "language": "French", + "Geographic area": "Canada", + "tag": "fr-CA", + "languageTag": "French (fr-CA)", + "LCID": "3084" + }, + { + "language": "French", + "Geographic area": "Switzerland", + "tag": "fr-CH", + "languageTag": "French (fr-CH)", + "LCID": "4108" + }, + { + "language": "German", + "Geographic area": "Germany", + "tag": "de-DE", + "languageTag": "German (de-DE)", + "LCID": "1031" + }, + { + "language": "German", + "Geographic area": "Switzerland", + "tag": "de-CH", + "languageTag": "German (de-CH)", + "LCID": "2055" + }, + { + "language": "Greek", + "Geographic area": "Greece", + "tag": "el-GR", + "languageTag": "Greek (el-GR)", + "LCID": "1032" + }, + { + "language": "Hebrew", + "Geographic area": "Israel", + "tag": "he-IL", + "languageTag": "Hebrew (he-IL)", + "LCID": "1037" + }, + { + "language": "Hindi", + "Geographic area": "India", + "tag": "hi-IN", + "languageTag": "Hindi (hi-IN)", + "LCID": "1081" + }, + { + "language": "Hungarian", + "Geographic area": "Hungary", + "tag": "hu-HU", + "languageTag": "Hungarian (hu-HU)", + "LCID": "1038" + }, + { + "language": "Indonesian", + "Geographic area": "Indonesia", + "tag": "id-ID", + "languageTag": "Indonesian (id-ID)", + "LCID": "1057" + }, + { + "language": "Italian", + "Geographic area": "Italy", + "tag": "it-IT", + "languageTag": "Italian (it-IT)", + "LCID": "1040" + }, + { + "language": "Japanese", + "Geographic area": "Japan", + "tag": "ja-JP", + "languageTag": "Japanese (ja-JP)", + "LCID": "1041" + }, + { + "language": "Kazakh", + "Geographic area": "Kazakhstan", + "tag": "kk-KZ", + "languageTag": "Kazakh (kk-KZ)", + "LCID": "1087" + }, + { + "language": "Korean", + "Geographic area": "Korea", + "tag": "ko-KR", + "languageTag": "Korean (ko-KR)", + "LCID": "1042" + }, + { + "language": "Latvian", + "Geographic area": "Latvia", + "tag": "lv-LV", + "languageTag": "Latvian (lv-LV)", + "LCID": "1062" + }, + { + "language": "Lithuanian", + "Geographic area": "Lithuania", + "tag": "lt-LT", + "languageTag": "Lithuanian (lt-LT)", + "LCID": "1063" + }, + { + "language": "Malay", + "Geographic area": "Malaysia", + "tag": "ms-MY", + "languageTag": "Malay (ms-MY)", + "LCID": "1086" + }, + { + "language": "Norwegian (Bokmål)", + "Geographic area": "Norway", + "tag": "nb-NO", + "languageTag": "Norwegian (Bokmål) (nb-NO)", + "LCID": "1044" + }, + { + "language": "Persian", + "Geographic area": "Iran", + "tag": "fa-IR", + "languageTag": "Persian (fa-IR)", + "LCID": "1065" + }, + { + "language": "Polish", + "Geographic area": "Poland", + "tag": "pl-PL", + "languageTag": "Polish (pl-PL)", + "LCID": "1045" + }, + { + "language": "Portuguese", + "Geographic area": "Brazil", + "tag": "pt-BR", + "languageTag": "Portuguese (pt-BR)", + "LCID": "1046" + }, + { + "language": "Portuguese", + "Geographic area": "Portugal", + "tag": "pt-PT", + "languageTag": "Portuguese (pt-PT)", + "LCID": "2070" + }, + { + "language": "Romanian", + "Geographic area": "Romania", + "tag": "ro-RO", + "languageTag": "Romanian (ro-RO)", + "LCID": "1048" + }, + { + "language": "Russian", + "Geographic area": "Russia", + "tag": "ru-RU", + "languageTag": "Russian (ru-RU)", + "LCID": "1049" + }, + { + "language": "Serbian (Latin)", + "Geographic area": "Serbia", + "tag": "sr-latn-RS", + "languageTag": "Serbian (Latin) (sr-latn-RS)", + "LCID": "2074" + }, + { + "language": "Slovak", + "Geographic area": "Slovakia", + "tag": "sk-SK", + "languageTag": "Slovak (sk-SK)", + "LCID": "1051" + }, + { + "language": "Slovenian", + "Geographic area": "Slovenia", + "tag": "sl-SI", + "languageTag": "Slovenian (sl-SI)", + "LCID": "1060" + }, + { + "language": "Spanish", + "Geographic area": "Spain", + "tag": "es-ES", + "languageTag": "Spanish (es-ES)", + "LCID": "3082" + }, + { + "language": "Spanish", + "Geographic area": "Argentina", + "tag": "es-AR", + "languageTag": "Spanish (es-AR)", + "LCID": "11274" + }, + { + "language": "Spanish", + "Geographic area": "Bolivia", + "tag": "es-BO", + "languageTag": "Spanish (es-BO)", + "LCID": "16394" + }, + { + "language": "Spanish", + "Geographic area": "Chile", + "tag": "es-CL", + "languageTag": "Spanish (es-CL)", + "LCID": "13322" + }, + { + "language": "Spanish", + "Geographic area": "Colombia", + "tag": "es-CO", + "languageTag": "Spanish (es-CO)", + "LCID": "9226" + }, + { + "language": "Spanish", + "Geographic area": "Costa Rica", + "tag": "es-CR", + "languageTag": "Spanish (es-CR)", + "LCID": "5130" + }, + { + "language": "Spanish", + "Geographic area": "Dominican Republic", + "tag": "es-DO", + "languageTag": "Spanish (es-DO)", + "LCID": "7178" + }, + { + "language": "Spanish", + "Geographic area": "Ecuador", + "tag": "es-EC", + "languageTag": "Spanish (es-EC)", + "LCID": "12298" + }, + { + "language": "Spanish", + "Geographic area": "El Salvador", + "tag": "es-SV", + "languageTag": "Spanish (es-SV)", + "LCID": "17418" + }, + { + "language": "Spanish", + "Geographic area": "Guatemala", + "tag": "es-GT", + "languageTag": "Spanish (es-GT)", + "LCID": "4106" + }, + { + "language": "Spanish", + "Geographic area": "Honduras", + "tag": "es-HN", + "languageTag": "Spanish (es-HN)", + "LCID": "18442" + }, + { + "language": "Spanish", + "Geographic area": "Mexico", + "tag": "es-MX", + "languageTag": "Spanish (es-MX)", + "LCID": "2058" + }, + { + "language": "Spanish", + "Geographic area": "Nicaragua", + "tag": "es-NI", + "languageTag": "Spanish (es-NI)", + "LCID": "19466" + }, + { + "language": "Spanish", + "Geographic area": "Panama", + "tag": "es-PA", + "languageTag": "Spanish (es-PA)", + "LCID": "6154" + }, + { + "language": "Spanish", + "Geographic area": "Paraguay", + "tag": "es-PY", + "languageTag": "Spanish (es-PY)", + "LCID": "15370" + }, + { + "language": "Spanish", + "Geographic area": "Peru", + "tag": "es-PE", + "languageTag": "Spanish (es-PE)", + "LCID": "10250" + }, + { + "language": "Spanish", + "Geographic area": "Uruguay", + "tag": "es-UY", + "languageTag": "Spanish (es-UY)", + "LCID": "14346" + }, + { + "language": "Spanish", + "Geographic area": "Venezuela", + "tag": "es-VE", + "languageTag": "Spanish (es-VE)", + "LCID": "8202" + }, + { + "language": "Swedish", + "Geographic area": "Sweden", + "tag": "sv-SE", + "languageTag": "Swedish (sv-SE)", + "LCID": "1053" + }, + { + "language": "Thai", + "Geographic area": "Thailand", + "tag": "th-TH", + "languageTag": "Thai (th-TH)", + "LCID": "1054" + }, + { + "language": "Turkish", + "Geographic area": "Turkey", + "tag": "tr-TR", + "languageTag": "Turkish (tr-TR)", + "LCID": "1055" + }, + { + "language": "Ukrainian", + "Geographic area": "Ukraine", + "tag": "uk-UA", + "languageTag": "Ukrainian (uk-UA)", + "LCID": "1058" + }, + { + "language": "Urdu", + "Geographic area": "Pakistan", + "tag": "ur-PK", + "languageTag": "Urdu (ur-PK)", + "LCID": "1056" + }, + { + "language": "Vietnamese", + "Geographic area": "Vietnam", + "tag": "vi-VN", + "languageTag": "Vietnamese (vi-VN)", + "LCID": "1066" + }, + { + "language": "Welsh", + "Geographic area": "Wales", + "tag": "cy-GB", + "languageTag": "Welsh (cy-GB)", + "LCID": "1106" + } +] \ No newline at end of file diff --git a/public/logo.png b/public/logo.png new file mode 100644 index 000000000000..4c080e46ea18 Binary files /dev/null and b/public/logo.png differ diff --git a/public/manifest.json b/public/manifest.json index d207413841e6..3650aa895891 100644 --- a/public/manifest.json +++ b/public/manifest.json @@ -1,18 +1,26 @@ { - "name": "CIPP", "short_name": "CIPP", + "name": "CIPP - CyberDrain Improved Partner Portal", "icons": [ { - "src": "/android-chrome-192x192.png", + "src": "favicon.ico", + "sizes": "64x64 32x32 24x24 16x16", + "type": "image/x-icon" + }, + { + "src": "android-chrome-192x192.png", "sizes": "192x192", "type": "image/png" }, { - "src": "/android-chrome-512x512.png", + "src": "android-chrome-512x512.png", "sizes": "512x512", "type": "image/png" } ], + "start_url": "/", + "scope": "/", + "display": "standalone", "theme_color": "#ffffff", "background_color": "#ffffff" } diff --git a/public/mockServiceWorker.js b/public/mockServiceWorker.js new file mode 100644 index 000000000000..b17fcd650c0a --- /dev/null +++ b/public/mockServiceWorker.js @@ -0,0 +1,349 @@ +/* eslint-disable */ +/* tslint:disable */ + +/** + * Mock Service Worker. + * @see https://github.com/mswjs/msw + * - Please do NOT modify this file. + */ + +const PACKAGE_VERSION = '2.12.14' +const INTEGRITY_CHECKSUM = '4db4a41e972cec1b64cc569c66952d82' +const IS_MOCKED_RESPONSE = Symbol('isMockedResponse') +const activeClientIds = new Set() + +addEventListener('install', function () { + self.skipWaiting() +}) + +addEventListener('activate', function (event) { + event.waitUntil(self.clients.claim()) +}) + +addEventListener('message', async function (event) { + const clientId = Reflect.get(event.source || {}, 'id') + + if (!clientId || !self.clients) { + return + } + + const client = await self.clients.get(clientId) + + if (!client) { + return + } + + const allClients = await self.clients.matchAll({ + type: 'window', + }) + + switch (event.data) { + case 'KEEPALIVE_REQUEST': { + sendToClient(client, { + type: 'KEEPALIVE_RESPONSE', + }) + break + } + + case 'INTEGRITY_CHECK_REQUEST': { + sendToClient(client, { + type: 'INTEGRITY_CHECK_RESPONSE', + payload: { + packageVersion: PACKAGE_VERSION, + checksum: INTEGRITY_CHECKSUM, + }, + }) + break + } + + case 'MOCK_ACTIVATE': { + activeClientIds.add(clientId) + + sendToClient(client, { + type: 'MOCKING_ENABLED', + payload: { + client: { + id: client.id, + frameType: client.frameType, + }, + }, + }) + break + } + + case 'CLIENT_CLOSED': { + activeClientIds.delete(clientId) + + const remainingClients = allClients.filter((client) => { + return client.id !== clientId + }) + + // Unregister itself when there are no more clients + if (remainingClients.length === 0) { + self.registration.unregister() + } + + break + } + } +}) + +addEventListener('fetch', function (event) { + const requestInterceptedAt = Date.now() + + // Bypass navigation requests. + if (event.request.mode === 'navigate') { + return + } + + // Opening the DevTools triggers the "only-if-cached" request + // that cannot be handled by the worker. Bypass such requests. + if ( + event.request.cache === 'only-if-cached' && + event.request.mode !== 'same-origin' + ) { + return + } + + // Bypass all requests when there are no active clients. + // Prevents the self-unregistered worked from handling requests + // after it's been terminated (still remains active until the next reload). + if (activeClientIds.size === 0) { + return + } + + const requestId = crypto.randomUUID() + event.respondWith(handleRequest(event, requestId, requestInterceptedAt)) +}) + +/** + * @param {FetchEvent} event + * @param {string} requestId + * @param {number} requestInterceptedAt + */ +async function handleRequest(event, requestId, requestInterceptedAt) { + const client = await resolveMainClient(event) + const requestCloneForEvents = event.request.clone() + const response = await getResponse( + event, + client, + requestId, + requestInterceptedAt, + ) + + // Send back the response clone for the "response:*" life-cycle events. + // Ensure MSW is active and ready to handle the message, otherwise + // this message will pend indefinitely. + if (client && activeClientIds.has(client.id)) { + const serializedRequest = await serializeRequest(requestCloneForEvents) + + // Clone the response so both the client and the library could consume it. + const responseClone = response.clone() + + sendToClient( + client, + { + type: 'RESPONSE', + payload: { + isMockedResponse: IS_MOCKED_RESPONSE in response, + request: { + id: requestId, + ...serializedRequest, + }, + response: { + type: responseClone.type, + status: responseClone.status, + statusText: responseClone.statusText, + headers: Object.fromEntries(responseClone.headers.entries()), + body: responseClone.body, + }, + }, + }, + responseClone.body ? [serializedRequest.body, responseClone.body] : [], + ) + } + + return response +} + +/** + * Resolve the main client for the given event. + * Client that issues a request doesn't necessarily equal the client + * that registered the worker. It's with the latter the worker should + * communicate with during the response resolving phase. + * @param {FetchEvent} event + * @returns {Promise} + */ +async function resolveMainClient(event) { + const client = await self.clients.get(event.clientId) + + if (activeClientIds.has(event.clientId)) { + return client + } + + if (client?.frameType === 'top-level') { + return client + } + + const allClients = await self.clients.matchAll({ + type: 'window', + }) + + return allClients + .filter((client) => { + // Get only those clients that are currently visible. + return client.visibilityState === 'visible' + }) + .find((client) => { + // Find the client ID that's recorded in the + // set of clients that have registered the worker. + return activeClientIds.has(client.id) + }) +} + +/** + * @param {FetchEvent} event + * @param {Client | undefined} client + * @param {string} requestId + * @param {number} requestInterceptedAt + * @returns {Promise} + */ +async function getResponse(event, client, requestId, requestInterceptedAt) { + // Clone the request because it might've been already used + // (i.e. its body has been read and sent to the client). + const requestClone = event.request.clone() + + function passthrough() { + // Cast the request headers to a new Headers instance + // so the headers can be manipulated with. + const headers = new Headers(requestClone.headers) + + // Remove the "accept" header value that marked this request as passthrough. + // This prevents request alteration and also keeps it compliant with the + // user-defined CORS policies. + const acceptHeader = headers.get('accept') + if (acceptHeader) { + const values = acceptHeader.split(',').map((value) => value.trim()) + const filteredValues = values.filter( + (value) => value !== 'msw/passthrough', + ) + + if (filteredValues.length > 0) { + headers.set('accept', filteredValues.join(', ')) + } else { + headers.delete('accept') + } + } + + return fetch(requestClone, { headers }) + } + + // Bypass mocking when the client is not active. + if (!client) { + return passthrough() + } + + // Bypass initial page load requests (i.e. static assets). + // The absence of the immediate/parent client in the map of the active clients + // means that MSW hasn't dispatched the "MOCK_ACTIVATE" event yet + // and is not ready to handle requests. + if (!activeClientIds.has(client.id)) { + return passthrough() + } + + // Notify the client that a request has been intercepted. + const serializedRequest = await serializeRequest(event.request) + const clientMessage = await sendToClient( + client, + { + type: 'REQUEST', + payload: { + id: requestId, + interceptedAt: requestInterceptedAt, + ...serializedRequest, + }, + }, + [serializedRequest.body], + ) + + switch (clientMessage.type) { + case 'MOCK_RESPONSE': { + return respondWithMock(clientMessage.data) + } + + case 'PASSTHROUGH': { + return passthrough() + } + } + + return passthrough() +} + +/** + * @param {Client} client + * @param {any} message + * @param {Array} transferrables + * @returns {Promise} + */ +function sendToClient(client, message, transferrables = []) { + return new Promise((resolve, reject) => { + const channel = new MessageChannel() + + channel.port1.onmessage = (event) => { + if (event.data && event.data.error) { + return reject(event.data.error) + } + + resolve(event.data) + } + + client.postMessage(message, [ + channel.port2, + ...transferrables.filter(Boolean), + ]) + }) +} + +/** + * @param {Response} response + * @returns {Response} + */ +function respondWithMock(response) { + // Setting response status code to 0 is a no-op. + // However, when responding with a "Response.error()", the produced Response + // instance will have status code set to 0. Since it's not possible to create + // a Response instance with status code 0, handle that use-case separately. + if (response.status === 0) { + return Response.error() + } + + const mockedResponse = new Response(response.body, response) + + Reflect.defineProperty(mockedResponse, IS_MOCKED_RESPONSE, { + value: true, + enumerable: true, + }) + + return mockedResponse +} + +/** + * @param {Request} request + */ +async function serializeRequest(request) { + return { + url: request.url, + mode: request.mode, + method: request.method, + headers: Object.fromEntries(request.headers.entries()), + cache: request.cache, + credentials: request.credentials, + destination: request.destination, + integrity: request.integrity, + redirect: request.redirect, + referrer: request.referrer, + referrerPolicy: request.referrerPolicy, + body: await request.arrayBuffer(), + keepalive: request.keepalive, + } +} diff --git a/public/mstile-310x310.png b/public/mstile-310x310.png deleted file mode 100644 index 8553cf0fe093..000000000000 Binary files a/public/mstile-310x310.png and /dev/null differ diff --git a/public/permissionsList.json b/public/permissionsList.json new file mode 100644 index 000000000000..8ec55a707b7e --- /dev/null +++ b/public/permissionsList.json @@ -0,0 +1,7993 @@ +[ + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read access reviews, reviewers, decisions and settings in the organization, without a signed-in user.", + "displayName": "Read all access reviews", + "id": "d07a8cc0-3d51-4b77-b3b0-32704d1f69fa", + "isEnabled": true, + "origin": "Application", + "value": "AccessReview.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings in the organization, without a signed-in user.", + "displayName": "Manage all access reviews", + "id": "ef5f7d5c-338f-44b0-86c3-351f46c8bb5f", + "isEnabled": true, + "origin": "Application", + "value": "AccessReview.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings in the organization for group and app memberships, without a signed-in user.", + "displayName": "Manage access reviews for group and app memberships", + "id": "18228521-a591-40f1-b215-5fad4488c117", + "isEnabled": true, + "origin": "Application", + "value": "AccessReview.ReadWrite.Membership" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read all acronyms without a signed-in user.", + "displayName": "Read all acronyms", + "id": "8c0aed2c-0c61-433d-b63c-6370ddc73248", + "isEnabled": true, + "origin": "Application", + "value": "Acronym.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read administrative units and administrative unit membership without a signed-in user.", + "displayName": "Read all administrative units", + "id": "134fd756-38ce-4afd-ba33-e9623dbe66c2", + "isEnabled": true, + "origin": "Application", + "value": "AdministrativeUnit.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership without a signed-in user.", + "displayName": "Read and write all administrative units", + "id": "5eb59dd3-1da2-4329-8733-9dabdc435916", + "isEnabled": true, + "origin": "Application", + "value": "AdministrativeUnit.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read terms of use agreements, without a signed in user.", + "displayName": "Read all terms of use agreements", + "id": "2f3e6f8c-093b-4c57-a58b-ba5ce494a169", + "isEnabled": true, + "origin": "Application", + "value": "Agreement.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write terms of use agreements, without a signed in user.", + "displayName": "Read and write all terms of use agreements", + "id": "c9090d00-6101-42f0-a729-c41074260d47", + "isEnabled": true, + "origin": "Application", + "value": "Agreement.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read terms of use acceptance statuses, without a signed in user.", + "displayName": "Read all terms of use acceptance statuses", + "id": "d8e4ec18-f6c0-4620-8122-c8b1f2bf400e", + "isEnabled": true, + "origin": "Application", + "value": "AgreementAcceptance.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the API connectors used in user authentication flows, without a signed-in user.", + "displayName": "Read API connectors for authentication flows", + "id": "b86848a7-d5b1-41eb-a9b4-54a4e6306e97", + "isEnabled": true, + "origin": "Application", + "value": "APIConnectors.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, create and manage the API connectors used in user authentication flows, without a signed-in user.", + "displayName": "Read and write API connectors for authentication flows", + "id": "1dfe531a-24a6-4f1b-80f4-7a0dc5a0a171", + "isEnabled": true, + "origin": "Application", + "value": "APIConnectors.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read apps in the app catalogs without a signed-in user.", + "displayName": "Read all app catalogs", + "id": "e12dae10-5a57-4817-b79d-dfbec5348930", + "isEnabled": true, + "origin": "Application", + "value": "AppCatalog.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update, and delete apps in the app catalogs without a signed-in user.", + "displayName": "Read and write to all app catalogs", + "id": "dc149144-f292-421e-b185-5953f2e98d7f", + "isEnabled": true, + "origin": "Application", + "value": "AppCatalog.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the remote desktop security configuration for all apps in your organization, without a signed-in user.", + "displayName": "Read and write the remote desktop security configuration for all apps", + "id": "3be0012a-cc4e-426b-895b-f9c836bf6381", + "isEnabled": true, + "origin": "Application", + "value": "Application-RemoteDesktopConfig.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all applications and service principals without a signed-in user.", + "displayName": "Read all applications", + "id": "9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30", + "isEnabled": true, + "origin": "Application", + "value": "Application.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update and delete applications and service principals without a signed-in user. Does not allow management of consent grants.", + "displayName": "Read and write all applications", + "id": "1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9", + "isEnabled": true, + "origin": "Application", + "value": "Application.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create other applications, and fully manage those applications (read, update, update application secrets and delete), without a signed-in user.  It cannot update any apps that it is not an owner of.", + "displayName": "Manage apps that this app creates or owns", + "id": "18a4783c-866b-4cc7-a460-3d5e5662c884", + "isEnabled": true, + "origin": "Application", + "value": "Application.ReadWrite.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, without a signed-in user.", + "displayName": "Manage app permission grants and app role assignments", + "id": "06b708a9-e830-4db3-a914-8e69da51d44f", + "isEnabled": true, + "origin": "Application", + "value": "AppRoleAssignment.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read attack simulation and training data for an organization without a signed-in user.", + "displayName": "Read attack simulation data of an organization", + "id": "93283d0a-6322-4fa8-966b-8c121624760d", + "isEnabled": true, + "origin": "Application", + "value": "AttackSimulation.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, create, and update attack simulation and training data for an organization without a signed-in user.", + "displayName": "Read, create, and update all attack simulation data of an organization", + "id": "e125258e-8c8a-42a8-8f55-ab502afa52f3", + "isEnabled": true, + "origin": "Application", + "value": "AttackSimulation.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and query your audit log activities, without a signed-in user.", + "displayName": "Read all audit log data", + "id": "b0afded3-3588-46d8-8b3d-9842eff778da", + "isEnabled": true, + "origin": "Application", + "value": "AuditLog.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the authentication context information in your organization without a signed-in user.", + "displayName": "Read all authentication context information", + "id": "381f742f-e1f8-4309-b4ab-e3d91ae4c5c1", + "isEnabled": true, + "origin": "Application", + "value": "AuthenticationContext.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and update the authentication context information in your organization without a signed-in user.", + "displayName": "Read and write all authentication context information", + "id": "a88eef72-fed0-4bf7-a2a9-f19df33f8b83", + "isEnabled": true, + "origin": "Application", + "value": "AuthenticationContext.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the billing configuration on all applications without a signed-in user. ", + "displayName": "Read and write application billing configuration", + "id": "9e8be751-7eee-4c09-bcfd-d64f6b087fd8", + "isEnabled": true, + "origin": "Application", + "value": "BillingConfiguration.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read Bookings appointments, businesses, customers, services, and staff without a signed-in user. ", + "displayName": "Read all Bookings related resources.", + "id": "6e98f277-b046-4193-a4f2-6bf6a78cd491", + "isEnabled": true, + "origin": "Application", + "value": "Bookings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read and write Bookings appointments and customers, and additionally allows reading businesses, services, and staff without a signed-in user. ", + "displayName": "Read and write all Bookings related resources.", + "id": "9769393e-5a9f-4302-9e3d-7e018ecb64a7", + "isEnabled": true, + "origin": "Application", + "value": "BookingsAppointment.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read all bookmarks without a signed-in user.", + "displayName": "Read all bookmarks", + "id": "be95e614-8ef3-49eb-8464-1c9503433b86", + "isEnabled": true, + "origin": "Application", + "value": "Bookmark.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read all browser site lists configured for your organization, without a signed-in user.", + "displayName": "Read all browser site lists for your organization", + "id": "c5ee1f21-fc7f-4937-9af0-c91648ff9597", + "isEnabled": true, + "origin": "Application", + "value": "BrowserSiteLists.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read and write all browser site lists configured for your organization, without a signed-in user.", + "displayName": "Read and write all browser site lists for your organization", + "id": "8349ca94-3061-44d5-9bfb-33774ea5e4f9", + "isEnabled": true, + "origin": "Application", + "value": "BrowserSiteLists.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the configurations of business scenarios it owns, without a signed-in user.", + "displayName": "Read all business scenario configurations this app creates or owns", + "id": "acc0fc4d-2cd6-4194-8700-1768d8423d86", + "isEnabled": true, + "origin": "Application", + "value": "BusinessScenarioConfig.Read.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, without a signed-in user.", + "displayName": "Read and write all business scenario configurations this app creates or owns", + "id": "bbea195a-4c47-4a4f-bff2-cba399e11698", + "isEnabled": true, + "origin": "Application", + "value": "BusinessScenarioConfig.ReadWrite.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the data associated with the business scenarios it owns, without a signed-in user.", + "displayName": "Read data for all business scenarios this app creates or owns", + "id": "6c0257fd-cffe-415b-8239-2d0d70fdaa9c", + "isEnabled": true, + "origin": "Application", + "value": "BusinessScenarioData.Read.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to fully manage the data associated with the business scenarios it owns, without a signed-in user.", + "displayName": "Read and write data for all business scenarios this app creates or owns", + "id": "f2d21f22-5d80-499e-91cc-0a8a4ce16f54", + "isEnabled": true, + "origin": "Application", + "value": "BusinessScenarioData.ReadWrite.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read events of all calendars without a signed-in user.", + "displayName": "Read calendars in all mailboxes", + "id": "798ee544-9d2d-430c-a058-570e29e34338", + "isEnabled": true, + "origin": "Application", + "value": "Calendars.Read" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read events of all calendars, except for properties such as body, attachments, and extensions, without a signed-in user.", + "displayName": "Read basic details of calendars in all mailboxes ", + "id": "8ba4a692-bc31-4128-9094-475872af8a53", + "isEnabled": true, + "origin": "Application", + "value": "Calendars.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update, and delete events of all calendars without a signed-in user.", + "displayName": "Read and write calendars in all mailboxes", + "id": "ef54d2bf-783f-4e0f-bca1-3210c0444d99", + "isEnabled": true, + "origin": "Application", + "value": "Calendars.ReadWrite" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read call event information for all users in your organizatio, without a signed-in user.", + "displayName": "Read all call events", + "id": "1abb026f-7572-49f6-9ddd-ad61cbba181e", + "isEnabled": true, + "origin": "Application", + "value": "CallEvents.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all PSTN and direct routing call log data without a signed-in user.", + "displayName": "Read PSTN and direct routing call log data", + "id": "a2611786-80b3-417e-adaa-707d4261a5f0", + "isEnabled": true, + "origin": "Application", + "value": "CallRecord-PstnCalls.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read call records for all calls and online meetings without a signed-in user.", + "displayName": "Read all call records", + "id": "45bbb07e-7321-4fd7-a8f6-3ff27e6a81c8", + "isEnabled": true, + "origin": "Application", + "value": "CallRecords.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to get direct access to media streams in a call, without a signed-in user.", + "displayName": "Access media streams in a call as an app", + "id": "a7a681dc-756e-4909-b988-f160edc6655f", + "isEnabled": true, + "origin": "Application", + "value": "Calls.AccessMedia.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to place outbound calls to a single user and transfer calls to users in your organization’s directory, without a signed-in user.", + "displayName": "Initiate outgoing 1 to 1 calls from the app", + "id": "284383ee-7f6e-4e40-a2a8-e85dcb029101", + "isEnabled": true, + "origin": "Application", + "value": "Calls.Initiate.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to place outbound calls to multiple users and add participants to meetings in your organization, without a signed-in user.", + "displayName": "Initiate outgoing group calls from the app", + "id": "4c277553-8a09-487b-8023-29ee378d8324", + "isEnabled": true, + "origin": "Application", + "value": "Calls.InitiateGroupCall.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to join group calls and scheduled meetings in your organization, without a signed-in user.  The app will be joined with the privileges of a directory user to meetings in your organization.", + "displayName": "Join group calls and meetings as an app", + "id": "f6b49018-60ab-4f81-83bd-22caeabfed2d", + "isEnabled": true, + "origin": "Application", + "value": "Calls.JoinGroupCall.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to anonymously join group calls and scheduled meetings in your organization, without a signed-in user.  The app will be joined as a guest to meetings in your organization.", + "displayName": "Join group calls and meetings as a guest", + "id": "fd7ccf6b-3d28-418b-9701-cd10f5cd2fd4", + "isEnabled": true, + "origin": "Application", + "value": "Calls.JoinGroupCallAsGuest.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Create channels in any team, without a signed-in user.", + "displayName": "Create channels", + "id": "f3a65bd4-b703-46df-8f7e-0174fea562aa", + "isEnabled": true, + "origin": "Application", + "value": "Channel.Create" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Delete channels in any team, without a signed-in user.", + "displayName": "Delete channels", + "id": "6a118a39-1227-45d4-af0c-ea7b40d210bc", + "isEnabled": true, + "origin": "Application", + "value": "Channel.Delete.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read all channel names and channel descriptions, without a signed-in user.", + "displayName": "Read the names and descriptions of all channels", + "id": "59a6b24b-4225-4393-8165-ebaec5f55d7a", + "isEnabled": true, + "origin": "Application", + "value": "Channel.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read the members of all channels, without a signed-in user.", + "displayName": "Read the members of all channels", + "id": "3b55498e-47ec-484f-8136-9013221c06a9", + "isEnabled": true, + "origin": "Application", + "value": "ChannelMember.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Add and remove members from all channels, without a signed-in user. Also allows changing a member's role, for example from owner to non-owner.", + "displayName": "Add and remove members from all channels", + "id": "35930dcf-aceb-4bd1-b99a-8ffed403c974", + "isEnabled": true, + "origin": "Application", + "value": "ChannelMember.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all channel messages in Microsoft Teams", + "displayName": "Read all channel messages", + "id": "7b2449af-6ccd-4f4d-9f78-e550c193f0d1", + "isEnabled": true, + "origin": "Application", + "value": "ChannelMessage.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to update Microsoft Teams channel messages by patching a set of Data Loss Prevention (DLP) policy violation properties to handle the output of DLP processing.", + "displayName": "Flag channel messages for violating policy", + "id": "4d02b0cc-d90b-441f-8d82-4fb55c34d6bb", + "isEnabled": true, + "origin": "Application", + "value": "ChannelMessage.UpdatePolicyViolation.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read all channel names, channel descriptions, and channel settings, without a signed-in user.", + "displayName": "Read the names, descriptions, and settings of all channels", + "id": "c97b873f-f59f-49aa-8a0e-52b32d762124", + "isEnabled": true, + "origin": "Application", + "value": "ChannelSettings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read and write the names, descriptions, and settings of all channels, without a signed-in user.", + "displayName": "Read and write the names, descriptions, and settings of all channels", + "id": "243cded2-bd16-4fd6-a953-ff8177894c3d", + "isEnabled": true, + "origin": "Application", + "value": "ChannelSettings.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create chats without a signed-in user. ", + "displayName": "Create chats", + "id": "d9c48af6-9ad9-47ad-82c3-63757137b9af", + "isEnabled": true, + "origin": "Application", + "value": "Chat.Create" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to delete and recover deleted chats, without a signed-in user.", + "displayName": "Delete and recover deleted chats", + "id": "9c7abde0-eacd-4319-bf9e-35994b1a1717", + "isEnabled": true, + "origin": "Application", + "value": "Chat.ManageDeletion.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all 1-to-1 or group chat messages in Microsoft Teams.", + "displayName": "Read all chat messages", + "id": "6b7d71aa-70aa-4810-a8d9-5d9fb2830017", + "isEnabled": true, + "origin": "Application", + "value": "Chat.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all one-to-one or group chat messages in Microsoft Teams for chats where the associated Teams application is installed, without a signed-in user.", + "displayName": "Read all chat messages for chats where the associated Teams application is installed.", + "id": "1c1b4c8e-3cc7-4c58-8470-9b92c9d5848b", + "isEnabled": true, + "origin": "Application", + "value": "Chat.Read.WhereInstalled" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read names and members of all one-to-one and group chats in Microsoft Teams, without a signed-in user.", + "displayName": "Read names and members of all chat threads", + "id": "b2e060da-3baf-4687-9611-f4ebc0f0cbde", + "isEnabled": true, + "origin": "Application", + "value": "Chat.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read names and members of all one-to-one and group chats in Microsoft Teams where the associated Teams application is installed, without a signed-in user.", + "displayName": "Read names and members of all chat threads where the associated Teams application is installed.", + "id": "818ba5bd-5b3e-4fe0-bbe6-aa4686669073", + "isEnabled": true, + "origin": "Application", + "value": "Chat.ReadBasic.WhereInstalled" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read and write all chat messages in Microsoft Teams, without a signed-in user.", + "displayName": "Read and write all chat messages", + "id": "294ce7c9-31ba-490a-ad7d-97a7d075e4ed", + "isEnabled": true, + "origin": "Application", + "value": "Chat.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all chat messages in Microsoft Teams for chats where the associated Teams application is installed, without a signed-in user.", + "displayName": "Read and write all chat messages for chats where the associated Teams application is installed.", + "id": "ad73ce80-f3cd-40ce-b325-df12c33df713", + "isEnabled": true, + "origin": "Application", + "value": "Chat.ReadWrite.WhereInstalled" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to update Microsoft Teams 1-to-1 or group chat messages by patching a set of Data Loss Prevention (DLP) policy violation properties to handle the output of DLP processing.", + "displayName": "Flag chat messages for violating policy", + "id": "7e847308-e030-4183-9899-5235d7270f58", + "isEnabled": true, + "origin": "Application", + "value": "Chat.UpdatePolicyViolation.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read the members of all chats, without a signed-in user.", + "displayName": "Read the members of all chats", + "id": "a3410be2-8e48-4f32-8454-c29a7465209d", + "isEnabled": true, + "origin": "Application", + "value": "ChatMember.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the members of all chats where the associated Teams application is installed, without a signed-in user.", + "displayName": "Read the members of all chats where the associated Teams application is installed.", + "id": "93e7c9e4-54c5-4a41-b796-f2a5adaacda7", + "isEnabled": true, + "origin": "Application", + "value": "ChatMember.Read.WhereInstalled" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Add and remove members from all chats, without a signed-in user.", + "displayName": "Add and remove members from all chats", + "id": "57257249-34ce-4810-a8a2-a03adf0c5693", + "isEnabled": true, + "origin": "Application", + "value": "ChatMember.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to add and remove members from all chats where the associated Teams application is installed, without a signed-in user.", + "displayName": "Add and remove members from all chats where the associated Teams application is installed.", + "id": "e32c2cd9-0124-4e44-88fc-772cd98afbdb", + "isEnabled": true, + "origin": "Application", + "value": "ChatMember.ReadWrite.WhereInstalled" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all one-to-one and group chats messages in Microsoft Teams, without a signed-in user.", + "displayName": "Read all chat messages", + "id": "b9bb2381-47a4-46cd-aafb-00cb12f68504", + "isEnabled": true, + "origin": "Application", + "value": "ChatMessage.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all details of discovered cloud apps in the organization, without a signed-in user.", + "displayName": "Read all discovered cloud applications data", + "id": "64a59178-dad3-4673-89db-84fdcd622fec", + "isEnabled": true, + "origin": "Application", + "value": "CloudApp-Discovery.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the properties of Cloud PCs, without a signed-in user.", + "displayName": "Read Cloud PCs", + "id": "a9e09520-8ed4-4cde-838e-4fdea192c227", + "isEnabled": true, + "origin": "Application", + "value": "CloudPC.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the properties of Cloud PCs, without a signed-in user.", + "displayName": "Read and write Cloud PCs", + "id": "3b4349e1-8cf5-45a3-95b7-69d1751d3e6a", + "isEnabled": true, + "origin": "Application", + "value": "CloudPC.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read consent requests and approvals without a signed-in user.", + "displayName": "Read all consent requests", + "id": "1260ad83-98fb-4785-abbb-d6cc1806fd41", + "isEnabled": true, + "origin": "Application", + "value": "ConsentRequest.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read app consent requests and approvals, and deny or approve those requests without a signed-in user.", + "displayName": "Read and write all consent requests", + "id": "9f1b81a7-0223-4428-bfa4-0bcb5535f27d", + "isEnabled": true, + "origin": "Application", + "value": "ConsentRequest.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all contacts in all mailboxes without a signed-in user.", + "displayName": "Read contacts in all mailboxes", + "id": "089fe4d0-434a-44c5-8827-41ba8a0b17f5", + "isEnabled": true, + "origin": "Application", + "value": "Contacts.Read" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update, and delete all contacts in all mailboxes without a signed-in user.", + "displayName": "Read and write contacts in all mailboxes", + "id": "6918b873-d17a-4dc1-b314-35f528134491", + "isEnabled": true, + "origin": "Application", + "value": "Contacts.ReadWrite" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem without a signed-in user.", + "displayName": "Read cross-tenant basic information", + "id": "cac88765-0581-4025-9725-5ebc13f729ee", + "isEnabled": true, + "origin": "Application", + "value": "CrossTenantInformation.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.", + "displayName": "Read all shared cross-tenant user profiles and export their data", + "id": "8b919d44-6192-4f3d-8a3b-f86f8069ae3c", + "isEnabled": true, + "origin": "Application", + "value": "CrossTenantUserProfileSharing.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.", + "displayName": "Read all shared cross-tenant user profiles and export or delete their data", + "id": "306785c5-c09b-4ba0-a4ee-023f3da165cb", + "isEnabled": true, + "origin": "Application", + "value": "CrossTenantUserProfileSharing.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's custom authentication extensions without a signed-in user.", + "displayName": "Read all custom authentication extensions", + "id": "88bb2658-5d9e-454f-aacd-a3933e079526", + "isEnabled": true, + "origin": "Application", + "value": "CustomAuthenticationExtension.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read or write your organization's custom authentication extensions without a signed-in user.", + "displayName": "Read and write all custom authentication extensions", + "id": "c2667967-7050-4e7e-b059-4cbbb3811d03", + "isEnabled": true, + "origin": "Application", + "value": "CustomAuthenticationExtension.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows custom authentication extensions associated with the app to receive HTTP requests triggered by an authentication event. The request can include information about a user, client and resource service principals, and other information about the authentication.", + "displayName": "Receive custom authentication extension HTTP requests", + "id": "214e810f-fda8-4fd7-a475-29461495eb00", + "isEnabled": true, + "origin": "Application", + "value": "CustomAuthenticationExtension.Receive.Payload" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read custom security attribute assignments for all principals in the tenant without a signed in user.", + "displayName": "Read custom security attribute assignments", + "id": "3b37c5a4-1226-493d-bec3-5d6c6b866f3f", + "isEnabled": true, + "origin": "Application", + "value": "CustomSecAttributeAssignment.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write custom security attribute assignments for all principals in the tenant without a signed in user.", + "displayName": "Read and write custom security attribute assignments", + "id": "de89b5e4-5b8f-48eb-8925-29c2b33bd8bd", + "isEnabled": true, + "origin": "Application", + "value": "CustomSecAttributeAssignment.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all audit logs for events that contain information about custom security attributes, without a signed-in user.", + "displayName": "Read all custom security attribute audit logs", + "id": "2a4f026d-e829-4e84-bdbf-d981a2703059", + "isEnabled": true, + "origin": "Application", + "value": "CustomSecAttributeAuditLogs.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read custom security attribute definitions for the tenant without a signed in user.", + "displayName": "Read custom security attribute definitions", + "id": "b185aa14-d8d2-42c1-a685-0f5596613624", + "isEnabled": true, + "origin": "Application", + "value": "CustomSecAttributeDefinition.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write custom security attribute definitions for the tenant without a signed in user.", + "displayName": "Read and write custom security attribute definitions", + "id": "12338004-21f4-4896-bf5e-b75dfaf1016d", + "isEnabled": true, + "origin": "Application", + "value": "CustomSecAttributeDefinition.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups without a signed-in user.", + "displayName": "Read Delegated Admin relationships with customers", + "id": "f6e9e124-4586-492f-adc0-c6f96e4823fd", + "isEnabled": true, + "origin": "Application", + "value": "DelegatedAdminRelationship.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers and role assignments to security groups for active Delegated Admin relationships without a signed-in user.", + "displayName": "Manage Delegated Admin relationships with customers", + "id": "cc13eba4-8cd8-44c6-b4d4-f93237adce58", + "isEnabled": true, + "origin": "Application", + "value": "DelegatedAdminRelationship.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all delegated permission grants, without a signed-in user.", + "displayName": "Read all delegated permission grants", + "id": "81b4724a-58aa-41c1-8a55-84ef97466587", + "isEnabled": true, + "origin": "Application", + "value": "DelegatedPermissionGrant.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), without a signed-in user.", + "displayName": "Manage all delegated permission grants", + "id": "8e8e4742-1d95-4f68-9d56-6ee75648c72a", + "isEnabled": true, + "origin": "Application", + "value": "DelegatedPermissionGrant.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's devices' configuration information without a signed-in user.", + "displayName": "Read all devices", + "id": "7438b122-aefc-4978-80ed-43db9fcc7715", + "isEnabled": true, + "origin": "Application", + "value": "Device.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers.", + "displayName": "Read and write devices", + "id": "1138cb37-bd11-4084-a2b7-9f71582aeddb", + "isEnabled": true, + "origin": "Application", + "value": "Device.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read device local credential properties including passwords, without a signed-in user.", + "displayName": "Read device local credential passwords", + "id": "884b599e-4d48-43a5-ba94-15c414d00588", + "isEnabled": true, + "origin": "Application", + "value": "DeviceLocalCredential.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read device local credential properties excluding passwords, without a signed-in user.", + "displayName": "Read device local credential properties", + "id": "db51be59-e728-414b-b800-e0f010df1a79", + "isEnabled": true, + "origin": "Application", + "value": "DeviceLocalCredential.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.", + "displayName": "Read Microsoft Intune apps", + "id": "7a6ee1e7-141e-4cec-ae74-d9db155731ff", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementApps.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.", + "displayName": "Read and write Microsoft Intune apps", + "id": "78145de6-330d-4800-a6ce-494ff2d33d07", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementApps.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.", + "displayName": "Read Microsoft Intune device configuration and policies", + "id": "dc377aa6-52d8-4e23-b271-2a7ae04cedf3", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementConfiguration.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.", + "displayName": "Read and write Microsoft Intune device configuration and policies", + "id": "9241abd9-d0e6-425a-bd4f-47ba86e767a4", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementConfiguration.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune, without a signed-in user.", + "displayName": "Perform user-impacting remote actions on Microsoft Intune devices", + "id": "5b07b0dd-2377-4e44-a38d-703f09a0dc3c", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementManagedDevices.PrivilegedOperations.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the properties of devices managed by Microsoft Intune, without a signed-in user.", + "displayName": "Read Microsoft Intune devices", + "id": "2f51be20-0bb4-4fed-bf7b-db946066c75e", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementManagedDevices.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the properties of devices managed by Microsoft Intune, without a signed-in user. Does not allow high impact operations such as remote wipe and password reset on the device’s owner", + "displayName": "Read and write Microsoft Intune devices", + "id": "243333ab-4d21-40cb-a475-36241daa0842", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementManagedDevices.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.", + "displayName": "Read Microsoft Intune RBAC settings", + "id": "58ca0d9a-1575-47e1-a3cb-007ef2e4583b", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementRBAC.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.", + "displayName": "Read and write Microsoft Intune RBAC settings", + "id": "e330c4f0-4170-414e-a55a-2f022ec2b57b", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementRBAC.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.", + "displayName": "Read Microsoft Intune configuration", + "id": "06a5fe6d-c49d-46a7-b082-56b1b14103c7", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementServiceConfig.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.", + "displayName": "Read and write Microsoft Intune configuration", + "id": "5ac13192-7ace-4fcf-b828-1a26f28068ee", + "isEnabled": true, + "origin": "Application", + "value": "DeviceManagementServiceConfig.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user.", + "displayName": "Read directory data", + "id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61", + "isEnabled": true, + "origin": "Application", + "value": "Directory.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write data in your organization's directory, such as users, and groups, without a signed-in user. Does not allow user or group deletion.", + "displayName": "Read and write directory data", + "id": "19dbc75e-c2e2-444c-a770-ec69d8559fc7", + "isEnabled": true, + "origin": "Application", + "value": "Directory.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage restricted resources based on the other permissions granted to the app, without a signed-in user.", + "displayName": "Manage restricted resources in the directory", + "id": "f20584af-9290-4153-9280-ff8bb2c0ea7f", + "isEnabled": true, + "origin": "Application", + "value": "Directory.Write.Restricted" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all Azure AD recommendations, without a signed-in user. ", + "displayName": "Read all Azure AD recommendations", + "id": "ae73097b-cb2a-4447-b064-5d80f6093921", + "isEnabled": true, + "origin": "Application", + "value": "DirectoryRecommendations.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and update all Azure AD recommendations, without a signed-in user. ", + "displayName": "Read and update all Azure AD recommendations", + "id": "0e9eea12-4f01-45f6-9b8d-3ea4c8144158", + "isEnabled": true, + "origin": "Application", + "value": "DirectoryRecommendations.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all domain properties without a signed-in user.", + "displayName": "Read domains", + "id": "dbb9058a-0e50-45d7-ae91-66909b5d4664", + "isEnabled": true, + "origin": "Application", + "value": "Domain.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all domain properties without a signed in user.  Also allows the app to add,  verify and remove domains.", + "displayName": "Read and write domains", + "id": "7e05723c-0bb0-42da-be95-ae9f08a6e53c", + "isEnabled": true, + "origin": "Application", + "value": "Domain.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects without a signed-in user.", + "displayName": "Read all eDiscovery objects", + "id": "50180013-6191-4d1e-a373-e590ff4e66af", + "isEnabled": true, + "origin": "Application", + "value": "eDiscovery.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects without a signed-in user.", + "displayName": "Read and write all eDiscovery objects", + "id": "b2620db1-3bf7-4c5b-9cb9-576d29eac736", + "isEnabled": true, + "origin": "Application", + "value": "eDiscovery.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read the state and settings of all Microsoft education apps.", + "displayName": "Read Education app settings", + "id": "7c9db06a-ec2d-4e7b-a592-5a1e30992566", + "isEnabled": true, + "origin": "Application", + "value": "EduAdministration.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Manage the state and settings of all Microsoft education apps.", + "displayName": "Manage education app settings", + "id": "9bc431c3-b8bc-4a8d-a219-40f10f92eff6", + "isEnabled": true, + "origin": "Application", + "value": "EduAdministration.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all class assignments with grades for all users without a signed-in user.", + "displayName": "Read all class assignments with grades", + "id": "4c37e1b6-35a1-43bf-926a-6f30f2cdf585", + "isEnabled": true, + "origin": "Application", + "value": "EduAssignments.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all class assignments without grades for all users without a signed-in user.", + "displayName": "Read all class assignments without grades", + "id": "6e0a958b-b7fc-4348-b7c4-a6ab9fd3dd0e", + "isEnabled": true, + "origin": "Application", + "value": "EduAssignments.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update and delete all class assignments with grades for all users without a signed-in user.", + "displayName": "Create, read, update and delete all class assignments with grades", + "id": "0d22204b-6cad-4dd0-8362-3e3f2ae699d9", + "isEnabled": true, + "origin": "Application", + "value": "EduAssignments.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update and delete all class assignments without grades for all users without a signed-in user.", + "displayName": "Create, read, update and delete all class assignments without grades", + "id": "f431cc63-a2de-48c4-8054-a34bc093af84", + "isEnabled": true, + "origin": "Application", + "value": "EduAssignments.ReadWriteBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all modules and resources, without a signed-in user.", + "displayName": "Read all class modules and resources", + "id": "6cdb464c-3a03-40f8-900b-4cb7ea1da9c0", + "isEnabled": true, + "origin": "Application", + "value": "EduCurricula.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all modules and resources, without a signed-in user.", + "displayName": "Read and write all class modules and resources", + "id": "6a0c2318-d59d-4c7d-bf2e-5f3902dc2593", + "isEnabled": true, + "origin": "Application", + "value": "EduCurricula.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the structure of schools and classes in the organization's roster and education-specific information about all users to be read.", + "displayName": "Read the organization's roster", + "id": "e0ac9e1b-cb65-4fc5-87c5-1a8bc181f648", + "isEnabled": true, + "origin": "Application", + "value": "EduRoster.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read a limited subset of properties from both the structure of schools and classes in the organization's roster and education-specific information about all users. Includes name, status, role, email address and photo.", + "displayName": "Read a limited subset of the organization's roster", + "id": "0d412a8c-a06c-439f-b3ec-8abcf54d2f96", + "isEnabled": true, + "origin": "Application", + "value": "EduRoster.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the structure of schools and classes in the organization's roster and education-specific information about all users to be read and written.", + "displayName": "Read and write the organization's roster", + "id": "d1808e82-ce13-47af-ae0d-f9b254e6d58a", + "isEnabled": true, + "origin": "Application", + "value": "EduRoster.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read access packages and related entitlement management resources without a signed-in user.", + "displayName": "Read all entitlement management resources", + "id": "c74fd47d-ed3c-45c3-9a9e-b8676de685d2", + "isEnabled": true, + "origin": "Application", + "value": "EntitlementManagement.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write access packages and related entitlement management resources without a signed-in user.", + "displayName": "Read and write all entitlement management resources", + "id": "9acd699f-1e81-4958-b001-93b1d2506e19", + "isEnabled": true, + "origin": "Application", + "value": "EntitlementManagement.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's authentication event listeners without a signed-in user.", + "displayName": "Read all authentication event listeners", + "id": "b7f6385c-6ce6-4639-a480-e23c42ed9784", + "isEnabled": true, + "origin": "Application", + "value": "EventListener.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read or write your organization's authentication event listeners without a signed-in user.", + "displayName": "Read and write all authentication event listeners", + "id": "0edf5e9e-4ce8-468a-8432-d08631d18c43", + "isEnabled": true, + "origin": "Application", + "value": "EventListener.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all external connections without a signed-in user.", + "displayName": "Read all external connections", + "id": "1914711b-a1cb-4793-b019-c2ce0ed21b8c", + "isEnabled": true, + "origin": "Application", + "value": "ExternalConnection.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all external connections without a signed-in user.", + "displayName": "Read and write all external connections", + "id": "34c37bc0-2b40-4d5e-85e1-2365cd256d79", + "isEnabled": true, + "origin": "Application", + "value": "ExternalConnection.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write external connections without a signed-in user. The app can only read and write external connections that it is authorized to, or it can create new external connections. ", + "displayName": "Read and write external connections", + "id": "f431331c-49a6-499f-be1c-62af19c34a9d", + "isEnabled": true, + "origin": "Application", + "value": "ExternalConnection.ReadWrite.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all external items without a signed-in user.", + "displayName": "Read all external items", + "id": "7a7cffad-37d2-4f48-afa4-c6ab129adcc2", + "isEnabled": true, + "origin": "Application", + "value": "ExternalItem.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allow the app to read or write items in all external datasets that the app is authorized to access", + "displayName": "Read and write items in external datasets", + "id": "38c3d6ee-69ee-422f-b954-e17819665354", + "isEnabled": true, + "origin": "Application", + "value": "ExternalItem.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write external items without a signed-in user. The app can only read external items of the connection that it is authorized to.", + "displayName": "Read and write external items", + "id": "8116ae0f-55c2-452d-9944-d18420f5b2c8", + "isEnabled": true, + "origin": "Application", + "value": "ExternalItem.ReadWrite.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all files in all site collections without a signed in user.", + "displayName": "Read files in all site collections", + "id": "01d4889c-1287-42c6-ac1f-5d1e02578ef6", + "isEnabled": true, + "origin": "Application", + "value": "Files.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, create, update and delete all files in all site collections without a signed in user. ", + "displayName": "Read and write files in all site collections", + "id": "75359482-378d-4052-8f01-80520e7db3cd", + "isEnabled": true, + "origin": "Application", + "value": "Files.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create groups without a signed-in user.", + "displayName": "Create groups", + "id": "bf7b1a76-6e77-406b-b258-bf5c7720e98f", + "isEnabled": true, + "origin": "Application", + "value": "Group.Create" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read group properties and memberships, and read conversations for all groups, without a signed-in user.", + "displayName": "Read all groups", + "id": "5b567255-7703-4780-807c-7be8301ae99b", + "isEnabled": true, + "origin": "Application", + "value": "Group.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create groups, read all group properties and memberships, update group properties and memberships, and delete groups. Also allows the app to read and write conversations. All of these operations can be performed by the app without a signed-in user.", + "displayName": "Read and write all groups", + "id": "62a82d76-70ea-41e2-9197-370581804d09", + "isEnabled": true, + "origin": "Application", + "value": "Group.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read memberships and basic group properties for all groups without a signed-in user.", + "displayName": "Read all group memberships", + "id": "98830695-27a2-44f7-8c18-0c3ebc9698f6", + "isEnabled": true, + "origin": "Application", + "value": "GroupMember.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to list groups, read basic properties, read and update the membership of the groups this app has access to without a signed-in user. Group properties and owners cannot be updated and groups cannot be deleted.", + "displayName": "Read and write all group memberships", + "id": "dbaae8cf-10b5-4b86-a4a1-f871c94c6695", + "isEnabled": true, + "origin": "Application", + "value": "GroupMember.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization’s identity (authentication) providers’ properties without a signed in user.", + "displayName": "Read identity providers", + "id": "e321f0bb-e7f7-481e-bb28-e3b0b32d4bd0", + "isEnabled": true, + "origin": "Application", + "value": "IdentityProvider.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization’s identity (authentication) providers’ properties without a signed in user.", + "displayName": "Read and write identity providers", + "id": "90db2b9a-d928-4d33-a4dd-8442ae3d41e4", + "isEnabled": true, + "origin": "Application", + "value": "IdentityProvider.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the identity risk event information for your organization without a signed in user.", + "displayName": "Read all identity risk event information", + "id": "6e472fd1-ad78-48da-a0f0-97ab2c6b769e", + "isEnabled": true, + "origin": "Application", + "value": "IdentityRiskEvent.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and update identity risk detection information for your organization without a signed-in user. Update operations include confirming risk event detections. ", + "displayName": "Read and write all risk detection information", + "id": "db06fb33-1953-4b7b-a2ac-f1e2c854f7ae", + "isEnabled": true, + "origin": "Application", + "value": "IdentityRiskEvent.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all risky service principal information for your organization, without a signed-in user.", + "displayName": "Read all identity risky service principal information", + "id": "607c7344-0eed-41e5-823a-9695ebe1b7b0", + "isEnabled": true, + "origin": "Application", + "value": "IdentityRiskyServicePrincipal.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and update identity risky service principal for your organization, without a signed-in user.", + "displayName": "Read and write all identity risky service principal information", + "id": "cb8d6980-6bcb-4507-afec-ed6de3a2d798", + "isEnabled": true, + "origin": "Application", + "value": "IdentityRiskyServicePrincipal.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the identity risky user information for your organization without a signed in user.", + "displayName": "Read all identity risky user information", + "id": "dc5007c0-2d7d-4c42-879c-2dab87571379", + "isEnabled": true, + "origin": "Application", + "value": "IdentityRiskyUser.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and update identity risky user information for your organization without a signed-in user.  Update operations include dismissing risky users.", + "displayName": "Read and write all risky user information", + "id": "656f6061-f9fe-4807-9708-6a2e0934df76", + "isEnabled": true, + "origin": "Application", + "value": "IdentityRiskyUser.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's user flows, without a signed-in user.", + "displayName": "Read all identity user flows", + "id": "1b0c317f-dd31-4305-9932-259a8b6e8099", + "isEnabled": true, + "origin": "Application", + "value": "IdentityUserFlow.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read or write your organization's user flows, without a signed-in user.", + "displayName": "Read and write all identity user flows", + "id": "65319a09-a2be-469d-8782-f6b07debf789", + "isEnabled": true, + "origin": "Application", + "value": "IdentityUserFlow.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read data connectors without a signed-in user.", + "displayName": "View data connector definitions", + "id": "7ab52c2f-a2ee-4d98-9ebc-725e3934aae2", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-DataConnector.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write data connectors without a signed-in user.", + "displayName": "Manage data connector definitions", + "id": "eda0971c-482e-4345-b28f-69c309cb8a34", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-DataConnector.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to upload data files to a data connector without a signed-in user.", + "displayName": "Upload files to a data connector", + "id": "9334c44b-a7c6-4350-8036-6bf8e02b4c1f", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-DataConnector.Upload" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read inbound data flows without a signed-in user.", + "displayName": "View inbound flow definitions", + "id": "305f6ba2-049a-4b1b-88bb-fe7e08758a00", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-InboundFlow.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write inbound data flows without a signed-in user.", + "displayName": "Manage inbound flow definitions", + "id": "e688c61f-d4c6-4d64-a197-3bcf6ba1d6ad", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-InboundFlow.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read reference definitions without a signed-in user.", + "displayName": "View reference definitions", + "id": "6ee891c3-74a4-4148-8463-0c834375dfaf", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-ReferenceDefinition.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read current and previous IndustryData runs without a signed-in user.", + "displayName": "View current and previous runs", + "id": "f6f5d10b-3024-4d1d-b674-aae4df4a1a73", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-Run.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read source system definitions without a signed-in user.", + "displayName": "View source system definitions", + "id": "bc167a60-39fe-4865-8b44-78400fc6ed03", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-SourceSystem.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write source system definitions without a signed-in user.", + "displayName": "Manage source system definitions", + "id": "7d866958-e06e-4dd6-91c6-a086b3f5cfeb", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-SourceSystem.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read time period definitions without a signed-in user.", + "displayName": "Read time period definitions", + "id": "7c55c952-b095-4c23-a522-022bce4cc1e3", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-TimePeriod.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write time period definitions without a signed-in user.", + "displayName": "Manage time period definitions", + "id": "7afa7744-a782-4a32-b8c2-e3db637e8de7", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData-TimePeriod.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read basic service and resource information without a signed-in user.", + "displayName": "View basic service and resource information", + "id": "4f5ac95f-62fd-472c-b60f-125d24ca0bc5", + "isEnabled": true, + "origin": "Application", + "value": "IndustryData.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all configurations applicable to users for protecting organizational data, without a signed-in user.", + "displayName": "Read all configurations for protecting organizational data applicable to users", + "id": "14f49b9f-4bf2-4d24-b80e-b27ec58409bd", + "isEnabled": true, + "origin": "Application", + "value": "InformationProtectionConfig.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to sign digests for data without a signed-in user.", + "displayName": "Sign digests for data", + "id": "cbe6c7e4-09aa-4b8d-b3c3-2dbb59af4b54", + "isEnabled": true, + "origin": "Application", + "value": "InformationProtectionContent.Sign.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create protected content without a signed-in user. ", + "displayName": "Create protected content", + "id": "287bd98c-e865-4e8c-bade-1a85523195b9", + "isEnabled": true, + "origin": "Application", + "value": "InformationProtectionContent.Write.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read published sensitivity labels and label policy settings for the entire organization or a specific user, without a signed in user.", + "displayName": "Read all published labels and label policies for an organization.", + "id": "19da66cb-0fb0-4390-b071-ebc76a349482", + "isEnabled": true, + "origin": "Application", + "value": "InformationProtectionPolicy.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all insights related to guest activity, without a signed-in user.", + "displayName": "Read all insights related to guest activity", + "id": "e93bd8c0-c267-45ea-9722-9d3376a7e302", + "isEnabled": true, + "origin": "Application", + "value": "Insights-GuestActivity.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all insights related to guest activity, without a signed-in user.", + "displayName": "Read and write all insights related to guest activity", + "id": "681ded65-ad9c-4d3d-8f7d-962f84cc13d8", + "isEnabled": true, + "origin": "Application", + "value": "Insights-GuestActivity.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read data for all assignments in the organization's directory, without a signed-in user.", + "displayName": "Read all assignments", + "id": "535e6066-2894-49ef-ab33-e2c6d064bb81", + "isEnabled": true, + "origin": "Application", + "value": "LearningAssignedCourse.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, update, read and delete all assignments in the organization's directory, without a signed-in user.", + "displayName": "Read and write all assignments", + "id": "236c1cbd-1187-427f-b0f5-b1852454973b", + "isEnabled": true, + "origin": "Application", + "value": "LearningAssignedCourse.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all learning content in the organization's directory, without a signed-in user.", + "displayName": "Read all learning content", + "id": "8740813e-d8aa-4204-860e-2a0f8f84dbc8", + "isEnabled": true, + "origin": "Application", + "value": "LearningContent.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage all learning content in the organization's directory, without a signed-in user.", + "displayName": "Manage all learning content", + "id": "444d6fcb-b738-41e5-b103-ac4f2a2628a3", + "isEnabled": true, + "origin": "Application", + "value": "LearningContent.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read data for all self-initiated courses in the organization's directory, without a signed-in user.", + "displayName": "Read all self-initiated courses", + "id": "467524fc-ed22-4356-a910-af61191e3503", + "isEnabled": true, + "origin": "Application", + "value": "LearningSelfInitiatedCourse.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, update, read and delete all self-initiated courses in the organization's directory, without a signed-in user.", + "displayName": "Read and write all self-initiated courses", + "id": "7654ed61-8965-4025-846a-0856ec02b5b0", + "isEnabled": true, + "origin": "Application", + "value": "LearningSelfInitiatedCourse.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to manage license assignments for users and groups, without a signed-in user.", + "displayName": "Manage all license assignments", + "id": "5facf0c1-8979-4e95-abcf-ff3d079771c0", + "isEnabled": true, + "origin": "Application", + "value": "LicenseAssignment.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources without a signed-in user.", + "displayName": "Read all lifecycle workflows resources", + "id": "7c67316a-232a-4b84-be22-cea2c0906404", + "isEnabled": true, + "origin": "Application", + "value": "LifecycleWorkflows.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources without a signed-in user.", + "displayName": "Read and write all lifecycle workflows resources", + "id": "5c505cf4-8424-4b8e-aa14-ee06e3bb23e3", + "isEnabled": true, + "origin": "Application", + "value": "LifecycleWorkflows.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read mail in all mailboxes without a signed-in user.", + "displayName": "Read mail in all mailboxes", + "id": "810c84a8-4a9e-49e6-bf7d-12d183f40d01", + "isEnabled": true, + "origin": "Application", + "value": "Mail.Read" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read basic mail properties in all mailboxes without a signed-in user. Includes all properties except body, previewBody, attachments and any extended properties.", + "displayName": "Read basic mail in all mailboxes", + "id": "6be147d2-ea4f-4b5a-a3fa-3eab6f3c140a", + "isEnabled": true, + "origin": "Application", + "value": "Mail.ReadBasic" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read basic mail properties in all mailboxes without a signed-in user. Includes all properties except body, previewBody, attachments and any extended properties.", + "displayName": "Read basic mail in all mailboxes", + "id": "693c5e45-0940-467d-9b8a-1022fb9d42ef", + "isEnabled": true, + "origin": "Application", + "value": "Mail.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail.", + "displayName": "Read and write mail in all mailboxes", + "id": "e2a3a72e-5f79-4c64-b1b1-878b674786c9", + "isEnabled": true, + "origin": "Application", + "value": "Mail.ReadWrite" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to send mail as any user without a signed-in user.", + "displayName": "Send mail as any user", + "id": "b633e1c5-b582-4048-a93e-9f11b44c7e96", + "isEnabled": true, + "origin": "Application", + "value": "Mail.Send" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read user's mailbox settings without a signed-in user. Does not include permission to send mail.", + "displayName": "Read all user mailbox settings", + "id": "40f97065-369a-49f4-947c-6a255697ae91", + "isEnabled": true, + "origin": "Application", + "value": "MailboxSettings.Read" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update, and delete user's mailbox settings without a signed-in user. Does not include permission to send mail.", + "displayName": "Read and write all user mailbox settings", + "id": "6931bccd-447a-43d1-b442-00a195474933", + "isEnabled": true, + "origin": "Application", + "value": "MailboxSettings.ReadWrite" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the memberships of hidden groups and administrative units without a signed-in user.", + "displayName": "Read all hidden memberships", + "id": "658aa5d8-239f-45c4-aa12-864f4fc7e490", + "isEnabled": true, + "origin": "Application", + "value": "Member.Read.Hidden" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all multi-tenant organization details and tenants, without a signed-in user.", + "displayName": "Read all multi-tenant organization details and tenants", + "id": "4f994bc0-31bb-44bb-b480-7a7c1be8c02e", + "isEnabled": true, + "origin": "Application", + "value": "MultiTenantOrganization.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read multi-tenant organization basic details and active tenants, without a signed-in user.", + "displayName": "Read multi-tenant organization basic details and active tenants", + "id": "f9c2b2a7-3895-4b2e-80f6-c924b456e50b", + "isEnabled": true, + "origin": "Application", + "value": "MultiTenantOrganization.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all multi-tenant organization details and tenants, without a signed-in user.", + "displayName": "Read and write all multi-tenant organization details and tenants", + "id": "920def01-ca61-4d2d-b3df-105b46046a70", + "isEnabled": true, + "origin": "Application", + "value": "MultiTenantOrganization.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's network access braches, without a signed-in user.", + "displayName": "Read properties of all branches for network access", + "id": "39ae4a24-1ef0-49e8-9d63-2a66f5c39edd", + "isEnabled": true, + "origin": "Application", + "value": "NetworkAccessBranch.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's network access braches, without a signed-in user.", + "displayName": "Read and write properties of all branches for network access", + "id": "8137102d-ec16-4191-aaf8-7aeda8026183", + "isEnabled": true, + "origin": "Application", + "value": "NetworkAccessBranch.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's network access policies, without a signed-in user.", + "displayName": "Read all security and routing policies for network access", + "id": "8a3d36bf-cb46-4bcc-bec9-8d92829dab84", + "isEnabled": true, + "origin": "Application", + "value": "NetworkAccessPolicy.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's network access policies, without a signed-in user.", + "displayName": "Read and write all security and routing policies for network access", + "id": "f0c341be-8348-4989-8e43-660324294538", + "isEnabled": true, + "origin": "Application", + "value": "NetworkAccessPolicy.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all the OneNote notebooks in your organization, without a signed-in user.", + "displayName": "Read all OneNote notebooks", + "id": "3aeca27b-ee3a-4c2b-8ded-80376e2134a4", + "isEnabled": true, + "origin": "Application", + "value": "Notes.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all the OneNote notebooks in your organization, without a signed-in user.", + "displayName": "Read and write all OneNote notebooks", + "id": "0c458cef-11f3-48c2-a568-c66751c238c0", + "isEnabled": true, + "origin": "Application", + "value": "Notes.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read online meeting artifacts in your organization, without a signed-in user.", + "displayName": "Read online meeting artifacts", + "id": "df01ed3b-eb61-4eca-9965-6b3d789751b2", + "isEnabled": true, + "origin": "Application", + "value": "OnlineMeetingArtifact.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all recordings of all online meetings, without a signed-in user.", + "displayName": "Read all recordings of online meetings.", + "id": "a4a08342-c95d-476b-b943-97e100569c8d", + "isEnabled": true, + "origin": "Application", + "value": "OnlineMeetingRecording.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read online meeting details in your organization, without a signed-in user.", + "displayName": "Read online meeting details", + "id": "c1684f21-1984-47fa-9d61-2dc8c296bb70", + "isEnabled": true, + "origin": "Application", + "value": "OnlineMeetings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and create online meetings as an application in your organization.", + "displayName": "Read and create online meetings", + "id": "b8bb2037-6e08-44ac-a4ea-4674e010e2a4", + "isEnabled": true, + "origin": "Application", + "value": "OnlineMeetings.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all transcripts of all online meetings, without a signed-in user.", + "displayName": "Read all transcripts of online meetings.", + "id": "a4a80d8d-d283-4bd8-8504-555ec3870630", + "isEnabled": true, + "origin": "Application", + "value": "OnlineMeetingTranscript.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all on-premises directory synchronization information for the organization, without a signed-in user.", + "displayName": "Read all on-premises directory synchronization information", + "id": "bb70e231-92dc-4729-aff5-697b3f04be95", + "isEnabled": true, + "origin": "Application", + "value": "OnPremDirectorySynchronization.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all on-premises directory synchronization information for the organization, without a signed-in user.", + "displayName": "Read and write all on-premises directory synchronization information", + "id": "c22a92cc-79bf-4bb1-8b6c-e0a05d3d80ce", + "isEnabled": true, + "origin": "Application", + "value": "OnPremDirectorySynchronization.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, view, update and delete on-premises published resources, on-premises agents and agent groups, as part of a hybrid identity configuration, without a signed in user.", + "displayName": "Manage on-premises published resources", + "id": "0b57845e-aa49-4e6f-8109-ce654fffa618", + "isEnabled": true, + "origin": "Application", + "value": "OnPremisesPublishingProfiles.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.", + "displayName": "Read organization information", + "id": "498476ce-e0fe-48b0-b801-37ba7e2685c6", + "isEnabled": true, + "origin": "Application", + "value": "Organization.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.", + "displayName": "Read and write organization information", + "id": "292d869f-3427-49a8-9dab-8c70152b74e9", + "isEnabled": true, + "origin": "Application", + "value": "Organization.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all organizational contacts without a signed-in user. These contacts are managed by the organization and are different from a user's personal contacts.", + "displayName": "Read organizational contacts", + "id": "e1a88a34-94c4-4418-be12-c87b00e26bea", + "isEnabled": true, + "origin": "Application", + "value": "OrgContact.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read organization-wide apps and services settings, without a signed-in user.", + "displayName": "Read organization-wide apps and services settings", + "id": "56c84fa9-ea1f-4a15-90f2-90ef41ece2c9", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-AppsAndServices.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write organization-wide apps and services settings, without a signed-in user.", + "displayName": "Read and write organization-wide apps and services settings", + "id": "4a8e4191-c1c8-45f8-b801-f9a1a5ee6ad3", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-AppsAndServices.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read organization-wide Dynamics customer voice settings, without a signed-in user.", + "displayName": "Read organization-wide Dynamics customer voice settings", + "id": "c18ae2dc-d9f3-4495-a93f-18980a0e159f", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-DynamicsVoice.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write organization-wide Dynamics customer voice settings, without a signed-in user.", + "displayName": "Read and write organization-wide Dynamics customer voice settings", + "id": "c3f1cc32-8bbd-4ab6-bd33-f270e0d9e041", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-DynamicsVoice.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read organization-wide Microsoft Forms settings, without a signed-in user.", + "displayName": "Read organization-wide Microsoft Forms settings", + "id": "434d7c66-07c6-4b1f-ab21-417cf2cdaaca", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-Forms.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write organization-wide Microsoft Forms settings, without a signed-in user.", + "displayName": "Read and write organization-wide Microsoft Forms settings", + "id": "2cb92fee-97a3-4034-8702-24a6f5d0d1e9", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-Forms.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read organization-wide Microsoft 365 apps installation settings, without a signed-in user.", + "displayName": "Read organization-wide Microsoft 365 apps installation settings", + "id": "6cdf1fb1-b46f-424f-9493-07247caa22e2", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-Microsoft365Install.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings, without a signed-in user. ", + "displayName": "Read and write organization-wide Microsoft 365 apps installation settings", + "id": "83f7232f-763c-47b2-a097-e35d2cbe1da5", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-Microsoft365Install.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read organization-wide Microsoft To Do settings, without a signed-in user.", + "displayName": "Read organization-wide Microsoft To Do settings", + "id": "e4d9cd09-d858-4363-9410-abb96737f0cf", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-Todo.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write organization-wide Microsoft To Do settings, without a signed-in user.", + "displayName": "Read and write organization-wide Microsoft To Do settings", + "id": "5febc9da-e0d0-4576-bd13-ae70b2179a39", + "isEnabled": true, + "origin": "Application", + "value": "OrgSettings-Todo.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read any user's scored list of relevant people, without a signed-in user. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).", + "displayName": "Read all users' relevant people lists", + "id": "b528084d-ad10-4598-8b93-929746b4d7d6", + "isEnabled": true, + "origin": "Application", + "value": "People.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read tenant-wide people settings without a signed-in user.", + "displayName": "Read all tenant-wide people settings", + "id": "ef02f2e7-e22d-4c77-8614-8f765683b86e", + "isEnabled": true, + "origin": "Application", + "value": "PeopleSettings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and write tenant-wide people settings without a signed-in user.", + "displayName": "Read and write all tenant-wide people settings", + "id": "b6890674-9dd5-4e42-bb15-5af07f541ae1", + "isEnabled": true, + "origin": "Application", + "value": "PeopleSettings.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read company places (conference rooms and room lists) for calendar events and other applications, without a signed-in user.", + "displayName": "Read all company places", + "id": "913b9306-0ce1-42b8-9137-6a7df690a760", + "isEnabled": true, + "origin": "Application", + "value": "Place.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all your organization's policies without a signed in user.", + "displayName": "Read your organization's policies", + "id": "246dd0d5-5bd0-4def-940b-0421030a5b68", + "isEnabled": true, + "origin": "Application", + "value": "Policy.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's conditional access policies, without a signed-in user.", + "displayName": "Read your organization's conditional access policies", + "id": "37730810-e9ba-4e46-b07e-8ca78d182097", + "isEnabled": true, + "origin": "Application", + "value": "Policy.Read.ConditionalAccess" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization’s identity protection policy without a signed-in user. ", + "displayName": "Read your organization’s identity protection policy", + "id": "b21b72f6-4e6a-4533-9112-47eea9f97b28", + "isEnabled": true, + "origin": "Application", + "value": "Policy.Read.IdentityProtection" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read policies related to consent and permission grants for applications, without a signed-in user.", + "displayName": "Read consent and permission grant policies", + "id": "9e640839-a198-48fb-8b9a-013fd6f6cbcd", + "isEnabled": true, + "origin": "Application", + "value": "Policy.Read.PermissionGrant" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's directory access review default policy without a signed-in user.", + "displayName": "Read and write your organization's directory access review default policy", + "id": "77c863fd-06c0-47ce-a7eb-49773e89d319", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.AccessReview" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", + "displayName": "Read and write your organization's application configuration policies", + "id": "be74164b-cff1-491c-8741-e671cb536e13", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.ApplicationConfiguration" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all authentication flow policies for the tenant, without a signed-in user.", + "displayName": "Read and write authentication flow policies", + "id": "25f85f3c-f66c-4205-8cd5-de92dd7f0cec", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.AuthenticationFlows" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all authentication method policies for the tenant, without a signed-in user. ", + "displayName": "Read and write all authentication method policies ", + "id": "29c18626-4985-4dcd-85c0-193eef327366", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.AuthenticationMethod" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's authorization policy without a signed in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.", + "displayName": "Read and write your organization's authorization policy", + "id": "fb221be6-99f2-473f-bd32-01c6a0e9ca3b", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.Authorization" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's conditional access policies, without a signed-in user.", + "displayName": "Read and write your organization's conditional access policies", + "id": "01c0a623-fc9b-48e9-b794-0756f8e8f067", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.ConditionalAccess" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's consent requests policy without a signed-in user.", + "displayName": "Read and write your organization's consent request policy", + "id": "999f8c63-0a38-4f1b-91fd-ed1947bdd1a9", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.ConsentRequest" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's cross tenant access policies without a signed-in user.", + "displayName": "Read and write your organization's cross tenant access policies", + "id": "338163d7-f101-4c92-94ba-ca46fe52447c", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.CrossTenantAccess" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and update the organization's external identities policy without a signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.", + "displayName": "Read and write your organization's external identities policy", + "id": "03cc4f92-788e-4ede-b93f-199424d144a5", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.ExternalIdentities" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write feature rollout policies without a signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.", + "displayName": "Read and write feature rollout policies", + "id": "2044e4f1-e56c-435b-925c-44cd8f6ba89a", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.FeatureRollout" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization’s identity protection policy without a signed-in user.", + "displayName": "Read and write your organization’s identity protection policy ", + "id": "2dcf8603-09eb-4078-b1ec-d30a1a76b873", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.IdentityProtection" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage policies related to consent and permission grants for applications, without a signed-in user.", + "displayName": "Manage consent and permission grant policies", + "id": "a402ca1c-2696-4531-972d-6e5ee4aa11ea", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.PermissionGrant" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's security defaults policy, without a signed-in user.", + "displayName": "Read and write your organization's security defaults policy", + "id": "1c6e93a6-28e2-4cbb-9f64-1a46a821124d", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.SecurityDefaults" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write your organization's trust framework policies without a signed in user.", + "displayName": "Read and write your organization's trust framework policies", + "id": "79a677f7-b79d-40d0-a36a-3e6f8688dd7a", + "isEnabled": true, + "origin": "Application", + "value": "Policy.ReadWrite.TrustFramework" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all presence information and write activity and availability of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, time zone and location.", + "displayName": "Read and write presence information for all users", + "id": "83cded22-8297-4ff6-a7fa-e97e9545a259", + "isEnabled": true, + "origin": "Application", + "value": "Presence.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read printers without a signed-in user. ", + "displayName": "Read printers", + "id": "9709bb33-4549-49d4-8ed9-a8f65e45bb0f", + "isEnabled": true, + "origin": "Application", + "value": "Printer.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and update printers without a signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.", + "displayName": "Read and update printers", + "id": "f5b3f73d-6247-44df-a74c-866173fddab0", + "isEnabled": true, + "origin": "Application", + "value": "Printer.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to perform advanced operations like redirecting a print job to another printer without a signed-in user. Also allows the application to read and update the metadata of print jobs.", + "displayName": "Perform advanced operations on print jobs", + "id": "58a52f47-9e36-4b17-9ebe-ce4ef7f3e6c8", + "isEnabled": true, + "origin": "Application", + "value": "PrintJob.Manage.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read the metadata and document content of print jobs without a signed-in user. ", + "displayName": "Read print jobs", + "id": "ac6f956c-edea-44e4-bd06-64b1b4b9aec9", + "isEnabled": true, + "origin": "Application", + "value": "PrintJob.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read the metadata of print jobs without a signed-in user. Does not allow access to print job document content.", + "displayName": "Read basic information for print jobs", + "id": "fbf67eee-e074-4ef7-b965-ab5ce1c1f689", + "isEnabled": true, + "origin": "Application", + "value": "PrintJob.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and update the metadata and document content of print jobs without a signed-in user.", + "displayName": "Read and write print jobs", + "id": "5114b07b-2898-4de7-a541-53b0004e2e13", + "isEnabled": true, + "origin": "Application", + "value": "PrintJob.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and update the metadata of print jobs without a signed-in user. Does not allow access to print job document content.", + "displayName": "Read and write basic information for print jobs", + "id": "57878358-37f4-4d3a-8c20-4816e0d457b1", + "isEnabled": true, + "origin": "Application", + "value": "PrintJob.ReadWriteBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read tenant-wide print settings without a signed-in user.", + "displayName": "Read tenant-wide print settings", + "id": "b5991872-94cf-4652-9765-29535087c6d8", + "isEnabled": true, + "origin": "Application", + "value": "PrintSettings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and update print task definitions without a signed-in user. ", + "displayName": "Read, write and update print task definitions", + "id": "456b71a7-0ee0-4588-9842-c123fcc8f664", + "isEnabled": true, + "origin": "Application", + "value": "PrintTaskDefinition.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles in your organization, without a signed-in user.", + "displayName": "Read privileged access to Azure AD roles", + "id": "4cdc2547-9148-4295-8d11-be0db1391d6b", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAccess.Read.AzureAD" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.", + "displayName": "Read privileged access to Azure AD groups", + "id": "01e37dc9-c035-40bd-b438-b2879c4870a6", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAccess.Read.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read time-based assignment and just-in-time elevation of user privileges to audit Azure resources in your organization, without a signed-in user.", + "displayName": "Read privileged access to Azure resources", + "id": "5df6fe86-1be0-44eb-b916-7bd443a71236", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAccess.Read.AzureResources" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles in your organization, without a signed-in user.", + "displayName": "Read and write privileged access to Azure AD roles", + "id": "854d9ab1-6657-4ec8-be45-823027bcd009", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAccess.ReadWrite.AzureAD" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.", + "displayName": "Read and write privileged access to Azure AD groups", + "id": "2f6817f8-7b12-4f0f-bc18-eeaf60705a9e", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAccess.ReadWrite.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to request and manage time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) in your organization, without a signed-in user.", + "displayName": "Read and write privileged access to Azure resources", + "id": "6f9d5abc-2db6-400b-a267-7de22a40fb87", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAccess.ReadWrite.AzureResources" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read time-based assignment schedules for access to Azure AD groups, without a signed-in user.", + "displayName": "Read assignment schedules for access to Azure AD groups", + "id": "cd4161cb-f098-48f8-a884-1eda9a42434c", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAssignmentSchedule.Read.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, without a signed-in user.", + "displayName": "Read, create, and delete assignment schedules for access to Azure AD groups", + "id": "41202f2c-f7ab-45be-b001-85c9728b9d69", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, without a signed-in user.", + "displayName": "Read eligibility schedules for access to Azure AD groups", + "id": "edb419d6-7edc-42a3-9345-509bfdf5d87c", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedEligibilitySchedule.Read.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, without a signed-in user.", + "displayName": "Read, create, and delete eligibility schedules for access to Azure AD groups", + "id": "618b6020-bca8-4de6-99f6-ef445fa4d857", + "isEnabled": true, + "origin": "Application", + "value": "PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read programs and program controls in the organization, without a signed-in user.", + "displayName": "Read all programs", + "id": "eedb7fdd-7539-4345-a38b-4839e4a84cbd", + "isEnabled": true, + "origin": "Application", + "value": "ProgramControl.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, update, delete and perform actions on programs and program controls in the organization, without a signed-in user.", + "displayName": "Manage all programs", + "id": "60a901ed-09f7-4aa5-a16e-7dd3d6f9de36", + "isEnabled": true, + "origin": "Application", + "value": "ProgramControl.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read all question and answers, without a signed-in user.", + "displayName": "Read all Question and Answers ", + "id": "ee49e170-1dd1-4030-b44c-61ad6e98f743", + "isEnabled": true, + "origin": "Application", + "value": "QnA.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read any data from Records Management, such as configuration, labels, and policies without the signed in user.", + "displayName": "Read Records Management configuration, labels and policies", + "id": "ac3a2b8e-03a3-4da9-9ce0-cbe28bf1accd", + "isEnabled": true, + "origin": "Application", + "value": "RecordsManagement.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies without the signed in user.", + "displayName": "Read and write Records Management configuration, labels and policies", + "id": "eb158f57-df43-4751-8b21-b8932adb3d34", + "isEnabled": true, + "origin": "Application", + "value": "RecordsManagement.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read all service usage reports without a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.", + "displayName": "Read all usage reports", + "id": "230c1aed-a721-4c5d-9cb4-a90514e508ef", + "isEnabled": true, + "origin": "Application", + "value": "Reports.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all admin report settings, such as whether to display concealed information in reports, without a signed-in user.", + "displayName": "Read all admin report settings", + "id": "ee353f83-55ef-4b78-82da-555bfa2b4b95", + "isEnabled": true, + "origin": "Application", + "value": "ReportSettings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and update all admin report settings, such as whether to display concealed information in reports, without a signed-in user.", + "displayName": "Read and write all admin report settings", + "id": "2a60023f-3219-47ad-baa4-40e17cd02a1d", + "isEnabled": true, + "origin": "Application", + "value": "ReportSettings.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all resource specific permissions granted on user accounts, without a signed-in user.", + "displayName": "Read all resource specific permissions granted on user accounts", + "id": "acfca4d5-f49f-40ed-9648-84068b474c73", + "isEnabled": true, + "origin": "Application", + "value": "ResourceSpecificPermissionGrant.ReadForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the active role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.", + "displayName": "Read all active role assignments and role schedules for your company's directory", + "id": "d5fe8ce8-684c-4c83-a52c-46e882ce4be1", + "isEnabled": true, + "origin": "Application", + "value": "RoleAssignmentSchedule.Read.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.", + "displayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", + "id": "dd199f4a-f148-40a4-a2ec-f0069cc799ec", + "isEnabled": true, + "origin": "Application", + "value": "RoleAssignmentSchedule.ReadWrite.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.", + "displayName": "Read all eligible role assignments and role schedules for your company's directory", + "id": "ff278e11-4a33-4d0c-83d2-d01dc58929a5", + "isEnabled": true, + "origin": "Application", + "value": "RoleEligibilitySchedule.Read.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.", + "displayName": "Read, update, and delete all eligible role assignments and schedules for your company's directory", + "id": "fee28b28-e1f3-4841-818e-2704dc62245f", + "isEnabled": true, + "origin": "Application", + "value": "RoleEligibilitySchedule.ReadWrite.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read role-based access control (RBAC) settings for all RBAC providers without a signed-in user. This includes reading role definitions and role assignments.", + "displayName": "Read role management data for all RBAC providers", + "id": "c7fbd983-d9aa-4fa7-84b8-17382c103bc4", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagement.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, without a signed-in user.", + "displayName": "Read Cloud PC RBAC settings", + "id": "031a549a-bb80-49b6-8032-2068448c6a3c", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagement.Read.CloudPC" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes reading directory role templates, directory roles and memberships.", + "displayName": "Read all directory RBAC settings", + "id": "483bed4a-2ad3-4361-a73b-c83ccdbdc53c", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagement.Read.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the role-based access control (RBAC) configuration for your organization's Exchange Online service, without a signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", + "displayName": "Read Exchange Online RBAC configuration", + "id": "c769435f-f061-4d0b-8ff1-3d39870e5f85", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagement.Read.Exchange" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, without a signed-in user. This includes reading and managing Cloud PC role definitions and memberships.", + "displayName": "Read and write all Cloud PC RBAC settings", + "id": "274d0592-d1b6-44bd-af1d-26d259bcb43a", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagement.ReadWrite.CloudPC" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.", + "displayName": "Read and write all directory RBAC settings", + "id": "9e3f62cf-ca93-4989-b6ce-bf83c28f9fe8", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagement.ReadWrite.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, without a signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", + "displayName": "Read and write Exchange Online RBAC configuration", + "id": "025d3225-3f02-4882-b4c0-cd5b541a4e80", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagement.ReadWrite.Exchange" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", + "displayName": "Read all alert data for your company's directory", + "id": "ef31918f-2d50-4755-8943-b8638c0a077e", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagementAlert.Read.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and manage all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", + "displayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory", + "id": "11059518-d6a6-4851-98ed-509268489c4a", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagementAlert.ReadWrite.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read policies in Privileged Identity Management for Groups, without a signed-in user.", + "displayName": "Read all policies in PIM for Groups", + "id": "69e67828-780e-47fd-b28c-7b27d14864e6", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagementPolicy.Read.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.", + "displayName": "Read all policies for privileged role assignments of your company's directory", + "id": "fdc4c997-9942-4479-bfcb-75a36d1138df", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagementPolicy.Read.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, without a signed-in user.", + "displayName": "Read, update, and delete all policies in PIM for Groups", + "id": "b38dcc4d-a239-4ed6-aa84-6c65b284f97c", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagementPolicy.ReadWrite.AzureADGroup" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.", + "displayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", + "id": "31e08e0a-d3f7-4ca2-ac39-7343fb83e8ad", + "isEnabled": true, + "origin": "Application", + "value": "RoleManagementPolicy.ReadWrite.Directory" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.", + "displayName": "Read all schedule items", + "id": "7b2ebf90-d836-437f-b90d-7b62722c4456", + "isEnabled": true, + "origin": "Application", + "value": "Schedule.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.", + "displayName": "Read and write all schedule items", + "id": "b7760610-0545-4e8a-9ec3-cce9e63db01c", + "isEnabled": true, + "origin": "Application", + "value": "Schedule.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read search configurations, without a signed-in user.", + "displayName": "Read your organization's search configuration", + "id": "ada977a5-b8b1-493b-9a91-66c206d76ecf", + "isEnabled": true, + "origin": "Application", + "value": "SearchConfiguration.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write search configurations, without a signed-in user.", + "displayName": "Read and write your organization's search configuration", + "id": "0e778b85-fefa-466d-9eec-750569d92122", + "isEnabled": true, + "origin": "Application", + "value": "SearchConfiguration.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read security actions, without a signed-in user.", + "displayName": "Read your organization's security actions", + "id": "5e0edab9-c148-49d0-b423-ac253e121825", + "isEnabled": true, + "origin": "Application", + "value": "SecurityActions.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read or update security actions, without a signed-in user.", + "displayName": "Read and update your organization's security actions", + "id": "f2bf083f-0179-402a-bedb-b2784de8a49b", + "isEnabled": true, + "origin": "Application", + "value": "SecurityActions.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all security alerts, without a signed-in user.", + "displayName": "Read all security alerts", + "id": "472e4a4d-bb4a-4026-98d1-0b0d74cb74a5", + "isEnabled": true, + "origin": "Application", + "value": "SecurityAlert.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write to all security alerts, without a signed-in user.", + "displayName": "Read and write to all security alerts", + "id": "ed4fca05-be46-441f-9803-1873825f8fdb", + "isEnabled": true, + "origin": "Application", + "value": "SecurityAlert.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read email metadata and security detection details, without a signed-in user. ", + "displayName": "Read metadata and detection details for all emails in your organization", + "id": "b48f7ac2-044d-4281-b02f-75db744d6f5f", + "isEnabled": true, + "origin": "Application", + "value": "SecurityAnalyzedMessage.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read email metadata and security detection details, and execute remediation actions like deleting an email, without a signed-in user.", + "displayName": "Read metadata, detection details, and execute remediation actions on all emails in your organization", + "id": "04c55753-2244-4c25-87fc-704ab82a4f69", + "isEnabled": true, + "origin": "Application", + "value": "SecurityAnalyzedMessage.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization’s security events without a signed-in user.", + "displayName": "Read your organization’s security events", + "id": "bf394140-e372-4bf9-a898-299cfc7564e5", + "isEnabled": true, + "origin": "Application", + "value": "SecurityEvents.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization’s security events without a signed-in user. Also allows the app to update editable properties in security events.", + "displayName": "Read and update your organization’s security events", + "id": "d903a879-88e0-4c09-b0c9-82f6a1333f84", + "isEnabled": true, + "origin": "Application", + "value": "SecurityEvents.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all security incidents, without a signed-in user.", + "displayName": "Read all security incidents", + "id": "45cc0394-e837-488b-a098-1918f48d186c", + "isEnabled": true, + "origin": "Application", + "value": "SecurityIncident.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write to all security incidents, without a signed-in user.", + "displayName": "Read and write to all security incidents", + "id": "34bf0e97-1971-4929-b999-9e2442d941d7", + "isEnabled": true, + "origin": "Application", + "value": "SecurityIncident.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.", + "displayName": "Read service health", + "id": "79c261e0-fe76-4144-aad5-bdc68fbe4037", + "isEnabled": true, + "origin": "Application", + "value": "ServiceHealth.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your tenant's service announcement messages, without a signed-in user. Messages may include information about new or changed features.", + "displayName": "Read service messages", + "id": "1b620472-6534-4fe6-9df2-4680e8aa28ec", + "isEnabled": true, + "origin": "Application", + "value": "ServiceMessage.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read service principal endpoints", + "displayName": "Read service principal endpoints", + "id": "5256681e-b7f6-40c0-8447-2d9db68797a0", + "isEnabled": true, + "origin": "Application", + "value": "ServicePrincipalEndpoint.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to update service principal endpoints", + "displayName": "Read and update service principal endpoints", + "id": "89c8469c-83ad-45f7-8ff2-6e3d4285709e", + "isEnabled": true, + "origin": "Application", + "value": "ServicePrincipalEndpoint.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read the tenant-level settings of SharePoint and OneDrive, without a signed-in user.", + "displayName": "Read SharePoint and OneDrive tenant settings", + "id": "83d4163d-a2d8-4d3b-9695-4ae3ca98f888", + "isEnabled": true, + "origin": "Application", + "value": "SharePointTenantSettings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive, without a signed-in user.", + "displayName": "Read and change SharePoint and OneDrive tenant settings", + "id": "19b94e34-907c-4f43-bde9-38b1909ed408", + "isEnabled": true, + "origin": "Application", + "value": "SharePointTenantSettings.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all the short notes without a signed-in user.", + "displayName": "Read all users' short notes", + "id": "0c7d31ec-31ca-4f58-b6ec-9950b6b0de69", + "isEnabled": true, + "origin": "Application", + "value": "ShortNotes.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, create, edit, and delete all the short notes without a signed-in user.", + "displayName": "Read, create, edit, and delete all users' short notes", + "id": "842c284c-763d-4a97-838d-79787d129bab", + "isEnabled": true, + "origin": "Application", + "value": "ShortNotes.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to have full control of all site collections without a signed in user.", + "displayName": "Have full control of all site collections", + "id": "a82116e5-55eb-4c41-a434-62fe8a61c773", + "isEnabled": true, + "origin": "Application", + "value": "Sites.FullControl.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create or delete document libraries and lists in all site collections without a signed in user.", + "displayName": "Create, edit, and delete items and lists in all site collections", + "id": "0c0bf378-bf22-4481-8f81-9e89a9b4960a", + "isEnabled": true, + "origin": "Application", + "value": "Sites.Manage.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read documents and list items in all site collections without a signed in user.", + "displayName": "Read items in all site collections ", + "id": "332a536c-c7ef-4017-ab91-336970924f0d", + "isEnabled": true, + "origin": "Application", + "value": "Sites.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update, and delete documents and list items in all site collections without a signed in user.", + "displayName": "Read and write items in all site collections", + "id": "9492366f-7969-46a4-8d15-ed1a20078fff", + "isEnabled": true, + "origin": "Application", + "value": "Sites.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allow the application to access a subset of site collections without a signed in user.  The specific site collections and the permissions granted will be configured in SharePoint Online.", + "displayName": "Access selected site collections", + "id": "883ea226-0bf2-4a8f-9f9d-92c9162a727d", + "isEnabled": true, + "origin": "Application", + "value": "Sites.Selected" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read subject rights requests without a signed-in user.", + "displayName": "Read all subject rights requests", + "id": "ee1460f0-368b-4153-870a-4e1ca7e72c42", + "isEnabled": true, + "origin": "Application", + "value": "SubjectRightsRequest.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write subject rights requests without a signed in user.", + "displayName": "Read and write all subject rights requests", + "id": "8387eaa4-1a3c-41f5-b261-f888138e6041", + "isEnabled": true, + "origin": "Application", + "value": "SubjectRightsRequest.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read Azure AD synchronization information, without a signed-in user.", + "displayName": "Read all Azure AD synchronization data. ", + "id": "5ba43d2f-fa88-4db2-bd1c-a67c5f0fb1ce", + "isEnabled": true, + "origin": "Application", + "value": "Synchronization.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to configure the Azure AD synchronization service, without a signed-in user.", + "displayName": "Read and write all Azure AD synchronization data. ", + "id": "9b50c33d-700f-43b1-b2eb-87e89b703581", + "isEnabled": true, + "origin": "Application", + "value": "Synchronization.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to upload bulk user data to the identity synchronization service, without a signed-in user.", + "displayName": "Upload user data to the identity synchronization service", + "id": "db31e92a-b9ea-4d87-bf6a-75a37a9ca35a", + "isEnabled": true, + "origin": "Application", + "value": "SynchronizationData-User.Upload" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all users’ tasks and task lists in your organization, without a signed-in user.", + "displayName": "Read all users’ tasks and tasklist", + "id": "f10e1f91-74ed-437f-a6fd-d6ae88e26c1f", + "isEnabled": true, + "origin": "Application", + "value": "Tasks.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create, read, update and delete all users’ tasks and task lists in your organization, without a signed-in user", + "displayName": "Read and write all users’ tasks and tasklists", + "id": "44e666d1-d276-445b-a5fc-8815eeb81d55", + "isEnabled": true, + "origin": "Application", + "value": "Tasks.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create teams without a signed-in user. ", + "displayName": "Create teams", + "id": "23fc2474-f741-46ce-8465-674744c5c361", + "isEnabled": true, + "origin": "Application", + "value": "Team.Create" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Get a list of all teams, without a signed-in user.", + "displayName": "Get a list of all teams", + "id": "2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e", + "isEnabled": true, + "origin": "Application", + "value": "Team.ReadBasic.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read the members of all teams, without a signed-in user.", + "displayName": "Read the members of all teams", + "id": "660b7406-55f1-41ca-a0ed-0b035e182f3e", + "isEnabled": true, + "origin": "Application", + "value": "TeamMember.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Add and remove members from all teams, without a signed-in user. Also allows changing a team member's role, for example from owner to non-owner.", + "displayName": "Add and remove members from all teams", + "id": "0121dc95-1b9f-4aed-8bac-58c5ac466691", + "isEnabled": true, + "origin": "Application", + "value": "TeamMember.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Add and remove members from all teams, without a signed-in user. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.", + "displayName": "Add and remove members with non-owner role for all teams", + "id": "4437522e-9a86-4a41-a7da-e380edd4a97d", + "isEnabled": true, + "origin": "Application", + "value": "TeamMember.ReadWriteNonOwnerRole.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all users' teamwork activity feed, without a signed-in user.", + "displayName": "Read all users' teamwork activity feed", + "id": "70dec828-f620-4914-aa83-a29117306807", + "isEnabled": true, + "origin": "Application", + "value": "TeamsActivity.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.", + "displayName": "Send a teamwork activity to any user", + "id": "a267235f-af13-44dc-8385-c1dc93023186", + "isEnabled": true, + "origin": "Application", + "value": "TeamsActivity.Send" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the Teams apps that are installed in any chat, without a signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Read installed Teams apps for all chats", + "id": "cc7e7635-2586-41d6-adaa-a8d3bcad5ee5", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadForChat.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the Teams apps that are installed in any team, without a signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Read installed Teams apps for all teams", + "id": "1f615aea-6bf9-4b05-84bd-46388e138537", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadForTeam.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the Teams apps that are installed for any user, without a signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Read installed Teams apps for all users", + "id": "9ce09611-f4f7-4abd-a629-a05450422a97", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any chat, without a signed-in user. Gives the ability to manage permission grants for accessing those specific chats' data.", + "displayName": "Manage installation and permission grants of Teams apps for all chats", + "id": "6e74eff9-4a21-45d6-bc03-3a20f61f8281", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteAndConsentForChat.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Gives the ability to manage permission grants for accessing those specific teams' data.", + "displayName": "Manage installation and permission grants of Teams apps for all teams", + "id": "b0c13be0-8e20-4bc5-8c55-963c23a39ce9", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteAndConsentForTeam.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any user account, without a signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.", + "displayName": "Manage installation and permission grants of Teams apps in a user account", + "id": "32ca478f-f89e-41d0-aaf8-101deb7da510", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteAndConsentForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any chat, without a signed-in user, and manage its permission grants for accessing those specific chats' data.", + "displayName": "Allow the Teams app to manage itself and its permission grants for all chats", + "id": "ba1ba90b-2d8f-487e-9f16-80728d85bb5c", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForChat.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any team, without a signed-in user, and manage its permission grants for accessing those specific teams' data.", + "displayName": "Allow the Teams app to manage itself and its permission grants for all teams", + "id": "1e4be56c-312e-42b8-a2c9-009600d732c0", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any user account, without a signed-in user, and manage its permission grants for accessing those specific users' data.", + "displayName": "Allow the Teams app to manage itself and its permission grants in all user accounts", + "id": "a87076cf-6abd-4e56-8559-4dbdf41bef96", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any chat, without a signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Manage Teams apps for all chats", + "id": "9e19bae1-2623-4c4f-ab6e-2664615ff9a0", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteForChat.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Manage Teams apps for all teams", + "id": "5dad17ba-f6cc-4954-a5a2-a0dcc95154f0", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteForTeam.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps for any user, without a signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Manage Teams apps for all users", + "id": "74ef0291-ca83-4d02-8c7e-d2391e6a444f", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for any chat, without a signed-in user.", + "displayName": "Allow the Teams app to manage itself for all chats", + "id": "73a45059-f39c-4baf-9182-4954ac0e55cf", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteSelfForChat.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in any team, without a signed-in user.", + "displayName": "Allow the Teams app to manage itself for all teams", + "id": "9f67436c-5415-4e7f-8ac1-3014a7132630", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteSelfForTeam.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself to any user, without a signed-in user.", + "displayName": "Allow the app to manage itself for all users", + "id": "908de74d-f8b2-4d6b-a9ed-2a17b3b78179", + "isEnabled": true, + "origin": "Application", + "value": "TeamsAppInstallation.ReadWriteSelfForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read all team's settings, without a signed-in user.", + "displayName": "Read all teams' settings", + "id": "242607bd-1d2c-432c-82eb-bdb27baa23ab", + "isEnabled": true, + "origin": "Application", + "value": "TeamSettings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read and change all teams' settings, without a signed-in user.", + "displayName": "Read and change all teams' settings", + "id": "bdd80a03-d9bc-451d-b7c4-ce7c63fe3c8f", + "isEnabled": true, + "origin": "Application", + "value": "TeamSettings.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create tabs in any team in Microsoft Teams, without a signed-in user. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.", + "displayName": "Create tabs in Microsoft Teams.", + "id": "49981c42-fd7b-4530-be03-e77b21aed25e", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.Create" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read the names and settings of tabs inside any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs. ", + "displayName": "Read tabs in Microsoft Teams.", + "id": "46890524-499a-4bb2-ad64-1476b4f3e1cf", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Read and write tabs in any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs.", + "displayName": "Read and write tabs in Microsoft Teams.", + "id": "a96d855f-016b-47d7-b51c-1218a98d791c", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for any chat, without a signed-in user.", + "displayName": "Allow the Teams app to manage all tabs for all chats", + "id": "fd9ce730-a250-40dc-bd44-8dc8d20f39ea", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.ReadWriteForChat.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in any team, without a signed-in user.", + "displayName": "Allow the Teams app to manage all tabs for all teams", + "id": "6163d4f4-fbf8-43da-a7b4-060fe85ed148", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.ReadWriteForTeam.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for any user, without a signed-in user.", + "displayName": "Allow the app to manage all tabs for all users", + "id": "425b4b59-d5af-45c8-832f-bb0b7402348a", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.ReadWriteForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for any chat, without a signed-in user.", + "displayName": "Allow the Teams app to manage only its own tabs for all chats", + "id": "9f62e4a2-a2d6-4350-b28b-d244728c4f86", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.ReadWriteSelfForChat.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in any team, without a signed-in user.", + "displayName": "Allow the Teams app to manage only its own tabs for all teams", + "id": "91c32b81-0ef0-453f-a5c7-4ce2e562f449", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.ReadWriteSelfForTeam.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for any user, without a signed-in user.", + "displayName": "Allow the Teams app to manage only its own tabs for all users", + "id": "3c42dec6-49e8-4a0a-b469-36cff0d9da93", + "isEnabled": true, + "origin": "Application", + "value": "TeamsTab.ReadWriteSelfForUser.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all available Teams Templates, without a signed-user.", + "displayName": "Read all available Teams Templates", + "id": "6323133e-1f6e-46d4-9372-ac33a0870636", + "isEnabled": true, + "origin": "Application", + "value": "TeamTemplates.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create chat and channel messages, without a signed in user. The app specifies which user appears as the sender, and can backdate the message to appear as if it was sent long ago. The messages can be sent to any chat or channel in the organization.", + "displayName": "Create chat and channel messages with anyone's identity and with any timestamp", + "id": "dfb0dd15-61de-45b2-be36-d6a69fba3c79", + "isEnabled": true, + "origin": "Application", + "value": "Teamwork.Migrate.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the Teams app settings without a signed-in user.", + "displayName": "Read Teams app settings", + "id": "475ebe88-f071-4bd7-af2b-642952bd4986", + "isEnabled": true, + "origin": "Application", + "value": "TeamworkAppSettings.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the Teams app settings without a signed-in user.", + "displayName": "Read and write Teams app settings", + "id": "ab5b445e-8f10-45f4-9c79-dd3f8062cc4e", + "isEnabled": true, + "origin": "Application", + "value": "TeamworkAppSettings.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allow the app to read the management data for Teams devices, without a signed-in user.", + "displayName": "Read Teams devices", + "id": "0591bafd-7c1c-4c30-a2a5-2b9aacb1dfe8", + "isEnabled": true, + "origin": "Application", + "value": "TeamworkDevice.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allow the app to read and write the management data for Teams devices, without a signed-in user.", + "displayName": "Read and write Teams devices", + "id": "79c02f5b-bd4f-4713-bc2c-a8a4a66e127b", + "isEnabled": true, + "origin": "Application", + "value": "TeamworkDevice.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read tags in Teams without a signed-in user.", + "displayName": "Read tags in Teams", + "id": "b74fd6c4-4bde-488e-9695-eeb100e4907f", + "isEnabled": true, + "origin": "Application", + "value": "TeamworkTag.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write tags in Teams without a signed-in user.", + "displayName": "Read and write tags in Teams", + "id": "a3371ca5-911d-46d6-901c-42c8c7a937d8", + "isEnabled": true, + "origin": "Application", + "value": "TeamworkTag.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all term store data, without a signed-in user. This includes all sets, groups and terms in the term store.", + "displayName": "Read all term store data", + "id": "ea047cc2-df29-4f3e-83a3-205de61501ca", + "isEnabled": true, + "origin": "Application", + "value": "TermStore.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, edit or write all term store data, without a signed-in user. This includes all sets, groups and terms in the term store.", + "displayName": "Read and write all term store data", + "id": "f12eb8d6-28e3-46e6-b2c0-b7e4dc69fc95", + "isEnabled": true, + "origin": "Application", + "value": "TermStore.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows an app to read your organization's threat assessment requests, without a signed-in user.", + "displayName": "Read threat assessment requests", + "id": "f8f035bb-2cce-47fb-8bf5-7baf3ecbee48", + "isEnabled": true, + "origin": "Application", + "value": "ThreatAssessment.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to run hunting queries, without a signed-in user.", + "displayName": "Run hunting queries", + "id": "dd98c7f5-2d42-42d3-a0e4-633161547251", + "isEnabled": true, + "origin": "Application", + "value": "ThreatHunting.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all the indicators for your organization, without a signed-in user.", + "displayName": "Read all threat indicators", + "id": "197ee4e9-b993-4066-898f-d6aecc55125b", + "isEnabled": true, + "origin": "Application", + "value": "ThreatIndicators.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), without a signed-in user.  It cannot update any threat indicators it does not own.", + "displayName": "Manage threat indicators this app creates or owns", + "id": "21792b6c-c986-4ffc-85de-df9da54b52fa", + "isEnabled": true, + "origin": "Application", + "value": "ThreatIndicators.ReadWrite.OwnedBy" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read threat intellgence information, such as indicators, observations, and and articles, without a signed in user.", + "displayName": "Read all Threat Intelligence Information", + "id": "e0b77adb-e790-44a3-b0a0-257d06303687", + "isEnabled": true, + "origin": "Application", + "value": "ThreatIntelligence.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's threat submissions and to view threat submission policies without a signed-in user.", + "displayName": "Read all of the organization's threat submissions", + "id": "86632667-cd15-4845-ad89-48a88e8412e1", + "isEnabled": true, + "origin": "Application", + "value": "ThreatSubmission.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's threat submissions and threat submission policies without a signed-in user. Also allows the app to create new threat submissions without a signed-in user.", + "displayName": "Read and write all of the organization's threat submissions", + "id": "d72bdbf4-a59b-405c-8b04-5995895819ac", + "isEnabled": true, + "origin": "Application", + "value": "ThreatSubmission.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read your organization's threat submission policies without a signed-in user. Also allows the app to create new threat submission polices without a signed-in user.", + "displayName": "Read and write all of the organization's threat submission policies", + "id": "926a6798-b100-4a20-a22f-a4918f13951d", + "isEnabled": true, + "origin": "Application", + "value": "ThreatSubmissionPolicy.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read trust framework key set properties without a signed-in user.", + "displayName": "Read trust framework key sets", + "id": "fff194f1-7dce-4428-8301-1badb5518201", + "isEnabled": true, + "origin": "Application", + "value": "TrustFrameworkKeySet.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write trust framework key set properties without a signed-in user.", + "displayName": "Read and write trust framework key sets", + "id": "4a771c9a-1cf2-4609-b88e-3d3e02d539cd", + "isEnabled": true, + "origin": "Application", + "value": "TrustFrameworkKeySet.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, without a signed-in user.", + "displayName": "Read all users' lifecycle information", + "id": "8556a004-db57-4d7a-8b82-97a13428e96f", + "isEnabled": true, + "origin": "Application", + "value": "User-LifeCycleInfo.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, without a signed-in user.", + "displayName": "Read and write all users' lifecycle information", + "id": "925f1248-0f97-47b9-8ec8-538c54e01325", + "isEnabled": true, + "origin": "Application", + "value": "User-LifeCycleInfo.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to enable and disable users' accounts, without a signed-in user.", + "displayName": "Enable and disable user accounts", + "id": "3011c876-62b7-4ada-afa2-506cbbecc68c", + "isEnabled": true, + "origin": "Application", + "value": "User.EnableDisableAccount.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).", + "displayName": "Export user's data", + "id": "405a51b5-8d8d-430b-9842-8be4b0e9f324", + "isEnabled": true, + "origin": "Application", + "value": "User.Export.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to invite guest users to the organization, without a signed-in user.", + "displayName": "Invite guest users to the organization", + "id": "09850681-111b-4a89-9bed-3f2cae46d706", + "isEnabled": true, + "origin": "Application", + "value": "User.Invite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read, update and delete identities that are associated with a user's account, without a signed in user. This controls the identities users can sign-in with.", + "displayName": "Manage all users' identities", + "id": "c529cfca-c91b-489c-af2b-d92990b66ce6", + "isEnabled": true, + "origin": "Application", + "value": "User.ManageIdentities.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read user profiles without a signed in user.", + "displayName": "Read all users' full profiles", + "id": "df021288-bdef-4463-88db-98f22de89214", + "isEnabled": true, + "origin": "Application", + "value": "User.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and update user profiles without a signed in user.", + "displayName": "Read and write all users' full profiles", + "id": "741f803b-c850-494e-b5df-cde7c675a1ca", + "isEnabled": true, + "origin": "Application", + "value": "User.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": " Allows the app to read authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", + "displayName": " Read all users' authentication methods", + "id": "38d9df27-64da-44fd-b7c5-a6fbac20248f", + "isEnabled": true, + "origin": "Application", + "value": "UserAuthenticationMethod.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and write authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods", + "displayName": "Read and write all users' authentication methods ", + "id": "50483e42-d915-4231-9639-7fdb7fd190e5", + "isEnabled": true, + "origin": "Application", + "value": "UserAuthenticationMethod.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to send, read, update and delete user’s notifications, without a signed-in user.", + "displayName": "Deliver and manage all user's notifications", + "id": "4e774092-a092-48d1-90bd-baad67c7eb47", + "isEnabled": true, + "origin": "Application", + "value": "UserNotification.ReadWrite.CreatedByApp" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all users' shift schedule preferences without a signed-in user.", + "displayName": "Read all user shift preferences", + "id": "de023814-96df-4f53-9376-1e2891ef5a18", + "isEnabled": true, + "origin": "Application", + "value": "UserShiftPreferences.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage all users' shift schedule preferences without a signed-in user.", + "displayName": "Read and write all user shift preferences", + "id": "d1eec298-80f3-49b0-9efb-d90e224798ac", + "isEnabled": true, + "origin": "Application", + "value": "UserShiftPreferences.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read virtual appointments for all users, without a signed-in user. The app must also be authorized to access an individual user’s data by the online meetings application access policy.", + "displayName": "Read all virtual appointments for users, as authorized by online meetings application access policy", + "id": "d4f67ec2-59b5-4bdc-b4af-d78f6f9c1954", + "isEnabled": true, + "origin": "Application", + "value": "VirtualAppointment.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the application to read and write virtual appointments for all users, without a signed-in user. The app must also be authorized to access an individual user’s data by the online meetings application access policy.", + "displayName": "Read-write all virtual appointments for users, as authorized by online meetings app access policy", + "id": "bf46a256-f47d-448f-ab78-f226fff08d40", + "isEnabled": true, + "origin": "Application", + "value": "VirtualAppointment.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read all virtual events without a signed-in user.", + "displayName": "Read all users' virtual events", + "id": "1dccb351-c4e4-4e09-a8d1-7a9ecbf027cc", + "isEnabled": true, + "origin": "Application", + "value": "VirtualEvent.Read.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to read and write all Windows update deployment settings for the organization without a signed-in user.", + "displayName": "Read and write all Windows update deployment settings", + "id": "7dd1be58-6e76-4401-bf8d-31d1e8180d5b", + "isEnabled": true, + "origin": "Application", + "value": "WindowsUpdates.ReadWrite.All" + }, + { + "allowedMemberTypes": ["Application"], + "description": "Allows the app to manage workforce integrations to synchronize data from Microsoft Teams Shifts, without a signed-in user.", + "displayName": "Read and write workforce integrations", + "id": "202bf709-e8e6-478e-bcfd-5d63c50b68e3", + "isEnabled": true, + "origin": "Application", + "value": "WorkforceIntegration.ReadWrite.All" + }, + { + "description": "Allows the app to read access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization.", + "displayName": "Read all access reviews that user can access", + "id": "ebfcd32b-babb-40f4-a14b-42706e83bd28", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read information on access reviews, reviewers, decisions and settings that you have access to.", + "userConsentDisplayName": "Read access reviews that you can access", + "value": "AccessReview.Read.All" + }, + { + "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization.", + "displayName": "Manage all access reviews that user can access", + "id": "e4aa47b9-9a69-4109-82ed-36ec70d85ff1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update and perform action on access reviews, reviewers, decisions and settings that you have access to.", + "userConsentDisplayName": "Manage access reviews that you can access", + "value": "AccessReview.ReadWrite.All" + }, + { + "description": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings for group and app memberships that the signed-in user has access to in the organization.", + "displayName": "Manage access reviews for group and app memberships", + "id": "5af8c3f5-baca-439a-97b0-ea58a435e269", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update and perform action on access reviews, reviewers, decisions and settings that you have access to.", + "userConsentDisplayName": "Manage access reviews for group and app memberships", + "value": "AccessReview.ReadWrite.Membership" + }, + { + "description": "Allows an app to read all acronyms that the signed-in user can access.", + "displayName": "Read all acronyms that the user can access", + "id": "9084c10f-a2d6-4713-8732-348def50fe02", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all acronyms you can access.", + "userConsentDisplayName": "Read all acronyms that you have access to", + "value": "Acronym.Read.All" + }, + { + "description": "Allows the app to read administrative units and administrative unit membership on behalf of the signed-in user.", + "displayName": "Read administrative units", + "id": "3361d15d-be43-4de6-b441-3c746d05163d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read administrative units and administrative unit membership on your behalf.", + "userConsentDisplayName": "Read administrative units", + "value": "AdministrativeUnit.Read.All" + }, + { + "description": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership on behalf of the signed-in user.", + "displayName": "Read and write administrative units", + "id": "7b8a2d34-6b3f-4542-a343-54651608ad81", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership on your behalf.", + "userConsentDisplayName": "Read and write administrative units", + "value": "AdministrativeUnit.ReadWrite.All" + }, + { + "description": "Allows the app to read terms of use agreements on behalf of the signed-in user.", + "displayName": "Read all terms of use agreements", + "id": "af2819c9-df71-4dd3-ade7-4d7c9dc653b7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read terms of use agreements on your behalf.", + "userConsentDisplayName": "Read all terms of use agreements", + "value": "Agreement.Read.All" + }, + { + "description": "Allows the app to read and write terms of use agreements on behalf of the signed-in user.", + "displayName": "Read and write all terms of use agreements", + "id": "ef4b5d93-3104-4664-9053-a5c49ab44218", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write terms of use agreements on your behalf.", + "userConsentDisplayName": "Read and write all terms of use agreements", + "value": "Agreement.ReadWrite.All" + }, + { + "description": "Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.", + "displayName": "Read user terms of use acceptance statuses", + "id": "0b7643bb-5336-476f-80b5-18fbfbc91806", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your terms of use acceptance statuses.", + "userConsentDisplayName": "Read your terms of use acceptance statuses", + "value": "AgreementAcceptance.Read" + }, + { + "description": "Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.", + "displayName": "Read terms of use acceptance statuses that user can access", + "id": "a66a5341-e66e-4897-9d52-c2df58c2bfb9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read terms of use acceptance statuses on your behalf.", + "userConsentDisplayName": "Read all terms of use acceptance statuses", + "value": "AgreementAcceptance.Read.All" + }, + { + "description": "Allows the app to read the signed-in user's activity statistics, such as how much time the user has spent on emails, in meetings, or in chat sessions.", + "displayName": "Read user activity statistics", + "id": "e03cf23f-8056-446a-8994-7d93dfc8b50e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your activity statistics, such as how much time you've spent on emails, in meetings, or in chat sessions.", + "userConsentDisplayName": "Read your activity statistics", + "value": "Analytics.Read" + }, + { + "description": "Allows the app to read the API connectors used in user authentication flows, on behalf of the signed-in user.", + "displayName": "Read API connectors for authentication flows", + "id": "1b6ff35f-31df-4332-8571-d31ea5a4893f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the API connectors used in user authentication flows, on your behalf.", + "userConsentDisplayName": "Read API connectors for authentication flows", + "value": "APIConnectors.Read.All" + }, + { + "description": "Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user.", + "displayName": "Read and write API connectors for authentication flows", + "id": "c67b52c5-7c69-48b6-9d48-7b3af3ded914", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, create and manage the API connectors used in user authentication flows, on your behalf.", + "userConsentDisplayName": "Read and write API connectors for authentication flows", + "value": "APIConnectors.ReadWrite.All" + }, + { + "description": "Allows the app to read the apps in the app catalogs.", + "displayName": "Read all app catalogs", + "id": "88e58d74-d3df-44f3-ad47-e89edf4472e4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read apps in the app catalogs.", + "userConsentDisplayName": "Read all app catalogs", + "value": "AppCatalog.Read.All" + }, + { + "description": "Allows the app to create, read, update, and delete apps in the app catalogs.", + "displayName": "Read and write to all app catalogs", + "id": "1ca167d5-1655-44a1-8adf-1414072e1ef9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create, read, update, and delete apps in the app catalogs.", + "userConsentDisplayName": "Read and write to all app catalogs", + "value": "AppCatalog.ReadWrite.All" + }, + { + "description": "Allows the app to submit application packages to the catalog and cancel submissions that are pending review on behalf of the signed-in user.", + "displayName": "Submit application packages to the catalog and cancel pending submissions", + "id": "3db89e36-7fa6-4012-b281-85f3d9d9fd2e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to submit application packages to the catalog and cancel submissions that are pending review on your behalf.", + "userConsentDisplayName": "Submit application packages to your organization's catalog and cancel pending submissions", + "value": "AppCatalog.Submit" + }, + { + "description": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.", + "displayName": "Read the trusted certificate authority configuration for applications", + "id": "af281d3a-030d-4122-886e-146fb30a0413", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on your behalf.", + "userConsentDisplayName": "Read the trusted certificate authority configuration for applications", + "value": "AppCertTrustConfiguration.Read.All" + }, + { + "description": "Allows the app to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.", + "displayName": "Read and write the trusted certificate authority configuration for applications", + "id": "4bae2ed4-473e-4841-a493-9829cfd51d48", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on your behalf.", + "userConsentDisplayName": "Read and write the trusted certificate authority configuration for applications", + "value": "AppCertTrustConfiguration.ReadWrite.All" + }, + { + "description": "Allows the app to read and write other apps' remote desktop security configuration, on behalf of the signed-in user.", + "displayName": "Read and write the remote desktop security configuration for apps", + "id": "ffa91d43-2ad8-45cc-b592-09caddeb24bb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write other apps' remote desktop security configuration, on your behalf.", + "userConsentDisplayName": "Read and write the remote desktop security configuration for apps", + "value": "Application-RemoteDesktopConfig.ReadWrite.All" + }, + { + "description": "Allows the app to read applications and service principals on behalf of the signed-in user.", + "displayName": "Read applications", + "id": "c79f8feb-a9db-4090-85f9-90d820caa0eb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read applications and service principals on your behalf.", + "userConsentDisplayName": "Read applications", + "value": "Application.Read.All" + }, + { + "description": "Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants.", + "displayName": "Read and write all applications", + "id": "bdfbf15f-ee85-4955-8675-146e8e5296b5", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create, read, update and delete applications and service principals on your behalf. Does not allow management of consent grants.", + "userConsentDisplayName": "Read and write applications", + "value": "Application.ReadWrite.All" + }, + { + "description": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on behalf of the signed-in user.", + "displayName": "Manage app permission grants and app role assignments", + "id": "84bccea3-f856-4a8a-967b-dbe0a3d53a64", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on your behalf.", + "userConsentDisplayName": "Manage app permission grants and app role assignments", + "value": "AppRoleAssignment.ReadWrite.All" + }, + { + "description": "Allows the app to read attack simulation and training data for an organization for the signed-in user.", + "displayName": "Read attack simulation data of an organization", + "id": "104a7a4b-ca76-4677-b7e7-2f4bc482f381", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read attack simulation and training data for an organization on your behalf.", + "userConsentDisplayName": "Read attack simulation data of an organization", + "value": "AttackSimulation.Read.All" + }, + { + "description": "Allows the app to read, create, and update attack simulation and training data for an organization for the signed-in user.", + "displayName": "Read, create, and update attack simulation data of an organization", + "id": "27608d7c-2c66-4cad-a657-951d575f5a60", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, create, and update attack simulation and training data for an organization on your behalf.", + "userConsentDisplayName": "Read, create, and update attack simulation data of an organization", + "value": "AttackSimulation.ReadWrite.All" + }, + { + "description": "Allows the app to read and query your audit log activities, on behalf of the signed-in user.", + "displayName": "Read audit log data", + "id": "e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and query your audit log activities, on your behalf.", + "userConsentDisplayName": "Read audit log data", + "value": "AuditLog.Read.All" + }, + { + "description": "Allows the app to read all authentication context information in your organization on behalf of the signed-in user.", + "displayName": "Read all authentication context information", + "id": "57b030f1-8c35-469c-b0d9-e4a077debe70", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all authentication context information in your organization on your behalf.", + "userConsentDisplayName": "Read all authentication context information", + "value": "AuthenticationContext.Read.All" + }, + { + "description": "Allows the app to read and update all authentication context information in your organization on behalf of the signed-in user.", + "displayName": "Read and write all authentication context information", + "id": "ba6d575a-1344-4516-b777-1404f5593057", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and update all authentication context information in your organization on your behalf.", + "userConsentDisplayName": "Read and write all authentication context information", + "value": "AuthenticationContext.ReadWrite.All" + }, + { + "description": "Allows the app to read and write the billing configuration on all applications on behalf of the signed-in user. ", + "displayName": "Read and write application billing configuration", + "id": "2bf6d319-dfca-4c22-9879-f88dcfaee6be", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the billing configuration on all applications on your behalf", + "userConsentDisplayName": "Read and write application billing configuration", + "value": "BillingConfiguration.ReadWrite.All" + }, + { + "description": "Allows the app to read BitLocker keys on behalf of the signed-in user, for their owned devices. Allows read of the recovery key.", + "displayName": "Read BitLocker keys", + "id": "b27a61ec-b99c-4d6a-b126-c4375d08ae30", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read BitLocker keys for your owned devices. Allows read of the recovery key.", + "userConsentDisplayName": "Read your BitLocker keys", + "value": "BitlockerKey.Read.All" + }, + { + "description": "Allows the app to read basic BitLocker key properties on behalf of the signed-in user, for their owned devices. Does not allow read of the recovery key itself.", + "displayName": "Read BitLocker keys basic information", + "id": "5a107bfc-4f00-4e1a-b67e-66451267bc68", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read basic BitLocker key properties for your owned devices. Does not allow read of the recovery key itself.", + "userConsentDisplayName": "Read your BitLocker keys basic information", + "value": "BitlockerKey.ReadBasic.All" + }, + { + "description": "Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.", + "displayName": "Manage bookings information", + "id": "7f36b48e-542f-4d3b-9bcb-8406f0ab9fdb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on your behalf.", + "userConsentDisplayName": "Manage bookings information", + "value": "Bookings.Manage.All" + }, + { + "description": "Allows an app to read bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.", + "displayName": "Read bookings information", + "id": "33b1df99-4b29-4548-9339-7a7b83eaeebc", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read bookings appointments, businesses, customers, services, and staff on your behalf.", + "userConsentDisplayName": "Read bookings information", + "value": "Bookings.Read.All" + }, + { + "description": "Allows an app to read and write bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user. Does not allow create, delete and publish of booking businesses.", + "displayName": "Read and write bookings information", + "id": "948eb538-f19d-4ec5-9ccc-f059e1ea4c72", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read and write Bookings appointments, businesses, customers, services, and staff on your behalf. Does not allow create, delete and publish of booking businesses.", + "userConsentDisplayName": "Read and write bookings information", + "value": "Bookings.ReadWrite.All" + }, + { + "description": "Allows an app to read and write bookings appointments and customers, and additionally allows read businesses information, services, and staff on behalf of the signed-in user.", + "displayName": "Read and write booking appointments", + "id": "02a5a114-36a6-46ff-a102-954d89d9ab02", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read and write bookings appointments and customers, and additionally allows read businesses information, services, and staff on your behalf.", + "userConsentDisplayName": "Read and write booking appointments", + "value": "BookingsAppointment.ReadWrite.All" + }, + { + "description": "Allows an app to read all bookmarks that the signed-in user can access.", + "displayName": "Read all bookmarks that the user can access", + "id": "98b17b35-f3b1-4849-a85f-9f13733002f0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all bookmarks you can access.", + "userConsentDisplayName": "Read all bookmarks that you have access to", + "value": "Bookmark.Read.All" + }, + { + "description": "Allows an app to read the browser site lists configured for your organization, on behalf of the signed-in user.", + "displayName": "Read browser site lists for your organization", + "id": "fb9be2b7-a7fc-4182-aec1-eda4597c43d5", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read the browser site lists configured for your organization, on your behalf.", + "userConsentDisplayName": "Read browser site lists for your organization", + "value": "BrowserSiteLists.Read.All" + }, + { + "description": "Allows an app to read and write the browser site lists configured for your organization, on behalf of the signed-in user.", + "displayName": "Read and write browser site lists for your organization", + "id": "83b34c85-95bf-497b-a04e-b58eca9d49d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read and write the browser site lists configured for your organization, on your behalf.", + "userConsentDisplayName": "Read and write browser site lists for your organization", + "value": "BrowserSiteLists.ReadWrite.All" + }, + { + "description": "Allows the app to read the configurations of your organization's business scenarios, on behalf of the signed-in user.", + "displayName": "Read business scenario configurations", + "id": "d16480b2-e469-4118-846b-d3d177327bee", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the configurations of your organization's business scenarios, on your behalf.", + "userConsentDisplayName": "Read business scenario configurations", + "value": "BusinessScenarioConfig.Read.All" + }, + { + "description": "Allows the app to read the configurations of business scenarios it owns, on behalf of the signed-in user.", + "displayName": "Read business scenario configurations this app creates or owns", + "id": "c47e7b6e-d6f1-4be9-9ffd-1e00f3e32892", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the configurations of business scenarios it owns, on your behalf.", + "userConsentDisplayName": "Read business scenario configurations this app creates or owns", + "value": "BusinessScenarioConfig.Read.OwnedBy" + }, + { + "description": "Allows the app to read and write the configurations of your organization's business scenarios, on behalf of the signed-in user.", + "displayName": "Read and write business scenario configurations", + "id": "755e785b-b658-446f-bb22-5a46abd029ea", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the configurations of your organization's business scenarios, on your behalf.", + "userConsentDisplayName": "Read and write business scenario configurations", + "value": "BusinessScenarioConfig.ReadWrite.All" + }, + { + "description": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, on behalf of the signed-in user.", + "displayName": "Read and write business scenario configurations this app creates or owns", + "id": "b3b7fcff-b4d4-4230-bf6f-90bd91285395", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, on your behalf.", + "userConsentDisplayName": "Read and write business scenario configurations this app creates or owns", + "value": "BusinessScenarioConfig.ReadWrite.OwnedBy" + }, + { + "description": "Allows the app to read all data associated with the business scenarios it owns. Data access will be attributed to the signed-in user.", + "displayName": "Read all data for business scenarios this app creates or owns", + "id": "25b265c4-5d34-4e44-952d-b567f6d3b96d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all data associated with the business scenarios it owns. Data access will be attributed to you.", + "userConsentDisplayName": "Read data for business scenarios this app creates or owns", + "value": "BusinessScenarioData.Read.OwnedBy" + }, + { + "description": "Allows the app to fully manage all data associated with the business scenarios it owns. Data access and changes will be attributed to the signed-in user.", + "displayName": "Read and write all data for business scenarios this app creates or owns", + "id": "19932d57-2952-4c60-8634-3655c79fc527", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to fully manage all data associated with the business scenarios it owns. These changes will be attributed to you.", + "userConsentDisplayName": "Read and write data for business scenarios this app creates or owns", + "value": "BusinessScenarioData.ReadWrite.OwnedBy" + }, + { + "description": "Allows the app to read events in user calendars . ", + "displayName": "Read user calendars ", + "id": "465a38f9-76ea-45b9-9f34-9e8b0d4b0b42", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read events in your calendars. ", + "userConsentDisplayName": "Read your calendars ", + "value": "Calendars.Read" + }, + { + "description": "Allows the app to read events in all calendars that the user can access, including delegate and shared calendars.", + "displayName": "Read user and shared calendars", + "id": "2b9c4092-424d-4249-948d-b43879977640", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read events in all calendars that you can access, including delegate and shared calendars. ", + "userConsentDisplayName": "Read calendars you can access", + "value": "Calendars.Read.Shared" + }, + { + "description": "Allows the app to read events in user calendars, except for properties such as body, attachments, and extensions.", + "displayName": "Read basic details of user calendars", + "id": "662d75ba-a364-42ad-adee-f5f880ea4878", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read events in your calendars, except for properties such as body, attachments, and extensions.", + "userConsentDisplayName": "Read basic details of your calendars", + "value": "Calendars.ReadBasic" + }, + { + "description": "Allows the app to create, read, update, and delete events in user calendars. ", + "displayName": "Have full access to user calendars ", + "id": "1ec239c2-d7c9-4623-a91a-a9775856bb36", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create and delete events in your calendars. ", + "userConsentDisplayName": "Have full access to your calendars ", + "value": "Calendars.ReadWrite" + }, + { + "description": "Allows the app to create, read, update and delete events in all calendars in the organization user has permissions to access. This includes delegate and shared calendars.", + "displayName": "Read and write user and shared calendars", + "id": "12466101-c9b8-439a-8589-dd09ee67e8e9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create and delete events in all calendars in your organization you have permissions to access. This includes delegate and shared calendars.", + "userConsentDisplayName": "Read and write to your and shared calendars", + "value": "Calendars.ReadWrite.Shared" + }, + { + "description": "Create channels in any team, on behalf of the signed-in user.", + "displayName": "Create channels", + "id": "101147cf-4178-4455-9d58-02b5c164e759", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Create channels in any team, on your behalf.", + "userConsentDisplayName": "Create channels", + "value": "Channel.Create" + }, + { + "description": "Delete channels in any team, on behalf of the signed-in user.", + "displayName": "Delete channels", + "id": "cc83893a-e232-4723-b5af-bd0b01bcfe65", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Delete channels in any team, on your behalf.", + "userConsentDisplayName": "Delete channels", + "value": "Channel.Delete.All" + }, + { + "description": "Read channel names and channel descriptions, on behalf of the signed-in user.", + "displayName": "Read the names and descriptions of channels", + "id": "9d8982ae-4365-4f57-95e9-d6032a4c0b87", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read channel names and channel descriptions, on your behalf.", + "userConsentDisplayName": "Read the names and descriptions of channels", + "value": "Channel.ReadBasic.All" + }, + { + "description": "Read the members of channels, on behalf of the signed-in user.", + "displayName": "Read the members of channels", + "id": "2eadaff8-0bce-4198-a6b9-2cfc35a30075", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read the members of channels, on your behalf.", + "userConsentDisplayName": "Read the members of teams and channels", + "value": "ChannelMember.Read.All" + }, + { + "description": "Add and remove members from channels, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.", + "displayName": "Add and remove members from channels", + "id": "0c3e411a-ce45-4cd1-8f30-f99a3efa7b11", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Add and remove members from channels, on your behalf. Also allows changing a member's role, for example from owner to non-owner.", + "userConsentDisplayName": "Add and remove members from teams and channels", + "value": "ChannelMember.ReadWrite.All" + }, + { + "description": "Allows an app to edit channel messages in Microsoft Teams, on behalf of the signed-in user.", + "displayName": "Edit user's channel messages", + "id": "2b61aa8a-6d36-4b2f-ac7b-f29867937c53", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to edit channel messages in Microsoft Teams, on your behalf.", + "userConsentDisplayName": "Edit your channel messages", + "value": "ChannelMessage.Edit" + }, + { + "description": "Allows an app to read a channel's messages in Microsoft Teams, on behalf of the signed-in user.", + "displayName": "Read user channel messages", + "id": "767156cb-16ae-4d10-8f8b-41b657c8c8c8", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read a channel's messages in Microsoft Teams, on your behalf.", + "userConsentDisplayName": "Read your channel messages", + "value": "ChannelMessage.Read.All" + }, + { + "description": "Allows the app to read and write channel messages, on behalf of the signed-in user. This doesn't allow the app to edit the policyViolation of a channel message.", + "displayName": "Read and write user channel messages", + "id": "5922d31f-46c8-4404-9eaf-2117e390a8a4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write channel messages, on your behalf. This doesn't allow the app to edit the policyViolation of a channel message.", + "userConsentDisplayName": "Read and write user channel messages", + "value": "ChannelMessage.ReadWrite" + }, + { + "description": "Allows an app to send channel messages in Microsoft Teams, on behalf of the signed-in user.", + "displayName": "Send channel messages", + "id": "ebf0f66e-9fb1-49e4-a278-222f76911cf4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to send channel messages in Microsoft Teams, on your behalf.", + "userConsentDisplayName": "Send channel messages", + "value": "ChannelMessage.Send" + }, + { + "description": "Read all channel names, channel descriptions, and channel settings, on behalf of the signed-in user.", + "displayName": "Read the names, descriptions, and settings of channels", + "id": "233e0cf1-dd62-48bc-b65b-b38fe87fcf8e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read all channel names, channel descriptions, and channel settings, on your behalf.", + "userConsentDisplayName": "Read the names, descriptions, and settings of channels", + "value": "ChannelSettings.Read.All" + }, + { + "description": "Read and write the names, descriptions, and settings of all channels, on behalf of the signed-in user.", + "displayName": "Read and write the names, descriptions, and settings of channels", + "id": "d649fb7c-72b4-4eec-b2b4-b15acf79e378", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read and write the names, descriptions, and settings of all channels, on your behalf.", + "userConsentDisplayName": "Read and write the names, descriptions, and settings of channels", + "value": "ChannelSettings.ReadWrite.All" + }, + { + "description": "Allows the app to create chats on behalf of the signed-in user.", + "displayName": "Create chats", + "id": "38826093-1258-4dea-98f0-00003be2b8d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create chats on your behalf. ", + "userConsentDisplayName": "Create chats", + "value": "Chat.Create" + }, + { + "description": "Allows the app to delete and recover deleted chats, on behalf of the signed-in user.", + "displayName": "Delete and recover deleted chats", + "id": "bb64e6fc-6b6d-4752-aea0-dd922dbba588", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to delete and recover deleted chats, on your behalf.", + "userConsentDisplayName": "Delete and recover deleted chats", + "value": "Chat.ManageDeletion.All" + }, + { + "description": "Allows an app to read 1 on 1 or group chats threads, on behalf of the signed-in user.", + "displayName": "Read user chat messages", + "id": "f501c180-9344-439a-bca0-6cbf209fd270", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read your 1 on 1 or group chat messages in Microsoft Teams, on your behalf.", + "userConsentDisplayName": "Read your chat messages", + "value": "Chat.Read" + }, + { + "description": "Allows an app to read the members and descriptions of one-to-one and group chat threads, on behalf of the signed-in user.", + "displayName": "Read names and members of user chat threads", + "id": "9547fcb5-d03f-419d-9948-5928bbf71b0f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read the members and descriptions of one-to-one and group chat threads, on your behalf.", + "userConsentDisplayName": "Read names and members of your chat threads", + "value": "Chat.ReadBasic" + }, + { + "description": "Allows an app to read and write 1 on 1 or group chats threads, on behalf of the signed-in user.", + "displayName": "Read and write user chat messages", + "id": "9ff7295e-131b-4d94-90e1-69fde507ac11", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read and write your 1 on 1 or group chat messages in Microsoft Teams, on your behalf.", + "userConsentDisplayName": "Read and write your chat messages", + "value": "Chat.ReadWrite" + }, + { + "description": "Read the members of chats, on behalf of the signed-in user.", + "displayName": "Read the members of chats", + "id": "c5a9e2b1-faf6-41d4-8875-d381aa549b24", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read the members of chats, on your behalf.", + "userConsentDisplayName": "Read the members of chats", + "value": "ChatMember.Read" + }, + { + "description": "Add and remove members from chats, on behalf of the signed-in user.", + "displayName": "Add and remove members from chats", + "id": "dea13482-7ea6-488f-8b98-eb5bbecf033d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Add and remove members from chats, on your behalf.", + "userConsentDisplayName": "Add and remove members from chats", + "value": "ChatMember.ReadWrite" + }, + { + "description": "Allows an app to read one-to-one and group chat messages, on behalf of the signed-in user.", + "displayName": "Read user chat messages", + "id": "cdcdac3a-fd45-410d-83ef-554db620e5c7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read one-to-one or group chat messages in Microsoft Teams, on your behalf.", + "userConsentDisplayName": "Read user chat messages", + "value": "ChatMessage.Read" + }, + { + "description": "Allows an app to send one-to-one and group chat messages in Microsoft Teams, on behalf of the signed-in user.", + "displayName": "Send user chat messages", + "id": "116b7235-7cc6-461e-b163-8e55691d839e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to send one-to-one and group chat messages in Microsoft Teams, on your behalf.", + "userConsentDisplayName": "Send chat messages", + "value": "ChatMessage.Send" + }, + { + "description": "Allows the app to read details of discovered cloud apps in the organization, on behalf of the signed in user.", + "displayName": "Read discovered cloud applications data", + "id": "ad46d60e-1027-4b75-af88-7c14ccf43a19", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read details of discovered cloud apps in the organization, on your behalf.", + "userConsentDisplayName": "Read discovered cloud application data", + "value": "CloudApp-Discovery.Read.All" + }, + { + "description": "Allows the app to read the properties of Cloud PCs on behalf of the signed-in user.", + "displayName": "Read Cloud PCs", + "id": "5252ec4e-fd40-4d92-8c68-89dd1d3c6110", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the properties of Cloud PCs, on your behalf.", + "userConsentDisplayName": "Read Cloud PCs", + "value": "CloudPC.Read.All" + }, + { + "description": "Allows the app to read and write the properties of Cloud PCs on behalf of the signed-in user.", + "displayName": "Read and write Cloud PCs", + "id": "9d77138f-f0e2-47ba-ab33-cd246c8b79d1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the properties of Cloud PCs, on your behalf.", + "userConsentDisplayName": "Read and write Cloud PCs", + "value": "CloudPC.ReadWrite.All" + }, + { + "description": "Allows the app to read consent requests and approvals on behalf of the signed-in user.", + "displayName": "Read consent requests", + "id": "f3bfad56-966e-4590-a536-82ecf548ac1e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read consent requests and approvals, on your behalf.", + "userConsentDisplayName": "Read consent requests", + "value": "ConsentRequest.Read.All" + }, + { + "description": "Allows the app to read app consent requests and approvals, and deny or approve those requests on behalf of the signed-in user.", + "displayName": "Read and write consent requests", + "id": "497d9dfa-3bd1-481a-baab-90895e54568c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read app consent requests for your approval, and deny or approve those request on your behalf.", + "userConsentDisplayName": "Read and write consent requests", + "value": "ConsentRequest.ReadWrite.All" + }, + { + "description": "Allows the app to read user contacts. ", + "displayName": "Read user contacts ", + "id": "ff74d97f-43af-4b68-9f2a-b77ee6968c5d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read contacts in your contact folders. ", + "userConsentDisplayName": "Read your contacts ", + "value": "Contacts.Read" + }, + { + "description": "Allows the app to read contacts a user has permissions to access, including their own and shared contacts.", + "displayName": "Read user and shared contacts", + "id": "242b9d9e-ed24-4d09-9a52-f43769beb9d4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read contacts you have permissions to access, including your own and shared contacts.", + "userConsentDisplayName": "Read your and shared contacts", + "value": "Contacts.Read.Shared" + }, + { + "description": "Allows the app to create, read, update, and delete user contacts. ", + "displayName": "Have full access to user contacts ", + "id": "d56682ec-c09e-4743-aaf4-1a3aac4caa21", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create and delete contacts in your contact folders. ", + "userConsentDisplayName": "Have full access of your contacts ", + "value": "Contacts.ReadWrite" + }, + { + "description": "Allows the app to create, read, update, and delete contacts a user has permissions to, including their own and shared contacts.", + "displayName": "Read and write user and shared contacts", + "id": "afb6c84b-06be-49af-80bb-8f3f77004eab", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create, and delete contacts you have permissions to access, including your own and shared contacts.", + "userConsentDisplayName": "Read and write to your and shared contacts", + "value": "Contacts.ReadWrite.Shared" + }, + { + "description": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user.", + "displayName": "Read cross-tenant basic information", + "id": "81594d25-e88e-49cf-ac8c-fecbff49f994", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on your behalf.", + "userConsentDisplayName": "Read cross-tenant basic information", + "value": "CrossTenantInformation.ReadBasic.All" + }, + { + "description": "Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.", + "displayName": "Read shared cross-tenant user profile and export data", + "id": "cb1ba48f-d22b-4325-a07f-74135a62ee41", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to list and query shared user profile information associated with the current tenant on your behalf.  It also permits the application to export your external user data (e.g. customer content or system-generated logs), associated with the current tenant on your behalf.", + "userConsentDisplayName": "Read shared cross-tenant user profile and export data", + "value": "CrossTenantUserProfileSharing.Read" + }, + { + "description": "Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.", + "displayName": "Read all shared cross-tenant user profiles and export their data", + "id": "759dcd16-3c90-463c-937e-abf89f991c18", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on your behalf.  It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on your behalf.", + "userConsentDisplayName": "Read any shared cross-tenant user profiles and export data", + "value": "CrossTenantUserProfileSharing.Read.All" + }, + { + "description": "Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.", + "displayName": "Read shared cross-tenant user profile and export or delete data", + "id": "eed0129d-dc60-4f30-8641-daf337a39ffd", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to list and query shared user profile information associated with the current tenant on your behalf.  It also permits the application to export and remove your external user data (e.g. customer content or system-generated logs), associated with the current tenant on your behalf.", + "userConsentDisplayName": "Read shared cross-tenant user profile and export or delete data", + "value": "CrossTenantUserProfileSharing.ReadWrite" + }, + { + "description": "Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.", + "displayName": "Read all shared cross-tenant user profiles and export or delete their data", + "id": "64dfa325-cbf8-48e3-938d-51224a0cac01", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on your behalf.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on your behalf.", + "userConsentDisplayName": "Read any shared cross-tenant user profiles and export or delete data", + "value": "CrossTenantUserProfileSharing.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization's custom authentication extensions on behalf of the signed-in user.", + "displayName": "Read your oganization's custom authentication extensions", + "id": "b2052569-c98c-4f36-a5fb-43e5c111e6d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's custom authentication extensions on your behalf.", + "userConsentDisplayName": "Read your organization's custom authentication extensions", + "value": "CustomAuthenticationExtension.Read.All" + }, + { + "description": "Allows the app to read or write your organization's custom authentication extensions on behalf of the signed-in user.", + "displayName": "Read and write your organization's custom authentication extensions", + "id": "8dfcf82f-15d0-43b3-bc78-a958a13a5792", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read or write your organization's custom authentication extensions on your behalf.", + "userConsentDisplayName": "Read and write your organization's custom authentication extensions", + "value": "CustomAuthenticationExtension.ReadWrite.All" + }, + { + "description": "Allows the app to read custom security attribute assignments for all principals in the tenant on behalf of a signed in user.", + "displayName": "Read custom security attribute assignments", + "id": "b46ffa80-fe3d-4822-9a1a-c200932d54d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read custom security attribute assignments for all principals in the tenant on your behalf.", + "userConsentDisplayName": "Read custom security attribute assignments", + "value": "CustomSecAttributeAssignment.Read.All" + }, + { + "description": "Allows the app to read and write custom security attribute assignments for all principals in the tenant on behalf of a signed in user.", + "displayName": "Read and write custom security attribute assignments", + "id": "ca46335e-8453-47cd-a001-8459884efeae", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write custom security attribute assignments for all principals in the tenant on your behalf.", + "userConsentDisplayName": "Read and write custom security attribute assignments", + "value": "CustomSecAttributeAssignment.ReadWrite.All" + }, + { + "description": "Allows the app to read audit logs for events that contain information about custom security attributes, on behalf of the signed-in user.", + "displayName": "Read custom security attribute audit logs", + "id": "1fcdeaab-b519-44dd-bffc-ed1fd15a24e0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read custom security attributes audit logs on your behalf.", + "userConsentDisplayName": "Read custom security attribute audit logs", + "value": "CustomSecAttributeAuditLogs.Read.All" + }, + { + "description": "Allows the app to read custom security attribute definitions for the tenant on behalf of a signed in user.", + "displayName": "Read custom security attribute definitions", + "id": "ce026878-a0ff-4745-a728-d4fedd086c07", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read custom security attribute definitions for the tenant on your behalf.", + "userConsentDisplayName": "Read custom security attribute definitions", + "value": "CustomSecAttributeDefinition.Read.All" + }, + { + "description": "Allows the app to read and write custom security attribute definitions for the tenant on behalf of a signed in user.", + "displayName": "Read and write custom security attribute definitions", + "id": "8b0160d4-5743-482b-bb27-efc0a485ca4a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write custom security attribute definitions for the tenant on your behalf.", + "userConsentDisplayName": "Read and write custom security attribute definitions", + "value": "CustomSecAttributeDefinition.ReadWrite.All" + }, + { + "description": "Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on behalf of the signed-in user.", + "displayName": "Read Delegated Admin relationships with customers", + "id": "0c0064ea-477b-4130-82a5-4c2cc4ff68aa", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read details of Delegated Admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on your behalf.", + "userConsentDisplayName": "Read Delegated Admin relationships with customers", + "value": "DelegatedAdminRelationship.Read.All" + }, + { + "description": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers as well as role assignments to security groups for active Delegated Admin relationships on behalf of the signed-in user.", + "displayName": "Manage Delegated Admin relationships with customers", + "id": "885f682f-a990-4bad-a642-36736a74b0c7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers and role assignments to security groups for active Delegated Admin relationships on your behalf.", + "userConsentDisplayName": "Manage Delegated Admin relationships with customers", + "value": "DelegatedAdminRelationship.ReadWrite.All" + }, + { + "description": "Allows the app to read delegated permission grants, on behalf of the signed in user.", + "displayName": "Read delegated permission grants", + "id": "a197cdc4-a8e8-4d49-9d35-4ca7c83887b4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read delegated permission grants, on your behalf.", + "userConsentDisplayName": "Read delegated permission grants", + "value": "DelegatedPermissionGrant.Read.All" + }, + { + "description": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on behalf of the signed in user.", + "displayName": "Manage all delegated permission grants", + "id": "41ce6ca6-6826-4807-84f1-1c82854f7ee5", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on your behalf. ", + "userConsentDisplayName": "Manage all delegated permission grants", + "value": "DelegatedPermissionGrant.ReadWrite.All" + }, + { + "description": "Allows the app to launch another app or communicate with another app on a user's device on behalf of the signed-in user.", + "displayName": "Communicate with user devices", + "id": "bac3b9c2-b516-4ef4-bd3b-c2ef73d8d804", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to launch another app or communicate with another app on a device that you own.", + "userConsentDisplayName": "Communicate with your other devices", + "value": "Device.Command" + }, + { + "description": "Allows the app to read a user's list of devices on behalf of the signed-in user.", + "displayName": "Read user devices", + "id": "11d4cd79-5ba5-460f-803f-e22c8ab85ccd", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to see your list of devices.", + "userConsentDisplayName": "View your list of devices", + "value": "Device.Read" + }, + { + "description": "Allows the app to read your organization's devices' configuration information on behalf of the signed-in user.", + "displayName": "Read all devices", + "id": "951183d1-1a61-466f-a6d1-1fde911bfd95", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read devices' configuration information on your behalf.", + "userConsentDisplayName": "Read all devices", + "value": "Device.Read.All" + }, + { + "description": "Allows the app to read device local credential properties including passwords, on behalf of the signed-in user.", + "displayName": "Read device local credential passwords", + "id": "280b3b69-0437-44b1-bc20-3b2fca1ee3e9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read device local credential properties including passwords, on your behalf.", + "userConsentDisplayName": "Read device local credential passwords", + "value": "DeviceLocalCredential.Read.All" + }, + { + "description": "Allows the app to read device local credential properties excluding passwords, on behalf of the signed-in user.", + "displayName": "Read device local credential properties", + "id": "9917900e-410b-4d15-846e-42a357488545", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read device local credential properties excluding passwords, on your behalf.", + "userConsentDisplayName": "Read device local credential properties", + "value": "DeviceLocalCredential.ReadBasic.All" + }, + { + "description": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", + "displayName": "Read Microsoft Intune apps", + "id": "4edf5f54-4666-44af-9de9-0144fb4b6e8c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", + "userConsentDisplayName": "Read Microsoft Intune apps", + "value": "DeviceManagementApps.Read.All" + }, + { + "description": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", + "displayName": "Read and write Microsoft Intune apps", + "id": "7b3f05d5-f68c-4b8d-8c59-a2ecd12f24af", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.", + "userConsentDisplayName": "Read and write Microsoft Intune apps", + "value": "DeviceManagementApps.ReadWrite.All" + }, + { + "description": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", + "displayName": "Read Microsoft Intune Device Configuration and Policies", + "id": "f1493658-876a-4c87-8fa7-edb559b3476a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", + "userConsentDisplayName": "Read Microsoft Intune Device Configuration and Policies", + "value": "DeviceManagementConfiguration.Read.All" + }, + { + "description": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", + "displayName": "Read and write Microsoft Intune Device Configuration and Policies", + "id": "0883f392-0a7a-443d-8c76-16a6d39c7b63", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.", + "userConsentDisplayName": "Read and write Microsoft Intune Device Configuration and Policies", + "value": "DeviceManagementConfiguration.ReadWrite.All" + }, + { + "description": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.", + "displayName": "Perform user-impacting remote actions on Microsoft Intune devices", + "id": "3404d2bf-2b13-457e-a330-c24615765193", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.", + "userConsentDisplayName": "Perform user-impacting remote actions on Microsoft Intune devices", + "value": "DeviceManagementManagedDevices.PrivilegedOperations.All" + }, + { + "description": "Allows the app to read the properties of devices managed by Microsoft Intune.", + "displayName": "Read Microsoft Intune devices", + "id": "314874da-47d6-4978-88dc-cf0d37f0bb82", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the properties of devices managed by Microsoft Intune.", + "userConsentDisplayName": "Read devices Microsoft Intune devices", + "value": "DeviceManagementManagedDevices.Read.All" + }, + { + "description": "Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device’s owner.", + "displayName": "Read and write Microsoft Intune devices", + "id": "44642bfe-8385-4adc-8fc6-fe3cb2c375c3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device’s owner.", + "userConsentDisplayName": "Read and write Microsoft Intune devices", + "value": "DeviceManagementManagedDevices.ReadWrite.All" + }, + { + "description": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", + "displayName": "Read Microsoft Intune RBAC settings", + "id": "49f0cc30-024c-4dfd-ab3e-82e137ee5431", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", + "userConsentDisplayName": "Read Microsoft Intune RBAC settings", + "value": "DeviceManagementRBAC.Read.All" + }, + { + "description": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", + "displayName": "Read and write Microsoft Intune RBAC settings", + "id": "0c5e8a55-87a6-4556-93ab-adc52c4d862d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.", + "userConsentDisplayName": "Read and write Microsoft Intune RBAC settings", + "value": "DeviceManagementRBAC.ReadWrite.All" + }, + { + "description": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration.", + "displayName": "Read Microsoft Intune configuration", + "id": "8696daa5-bce5-4b2e-83f9-51b6defc4e1e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration.", + "userConsentDisplayName": "Read Microsoft Intune configuration", + "value": "DeviceManagementServiceConfig.Read.All" + }, + { + "description": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration.", + "displayName": "Read and write Microsoft Intune configuration", + "id": "662ed50a-ac44-4eef-ad86-62eed9be2a29", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration.", + "userConsentDisplayName": "Read and write Microsoft Intune configuration", + "value": "DeviceManagementServiceConfig.ReadWrite.All" + }, + { + "description": "Allows the app to have the same access to information in the directory as the signed-in user.", + "displayName": "Access directory as the signed in user", + "id": "0e263e50-5827-48a4-b97c-d940288653c7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to have the same access to information in your work or school directory as you do.", + "userConsentDisplayName": "Access the directory as you", + "value": "Directory.AccessAsUser.All" + }, + { + "description": "Allows the app to read data in your organization's directory, such as users, groups and apps.", + "displayName": "Read directory data", + "id": "06da0dbc-49e2-44d2-8312-53f166ab848a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read data in your organization's directory.", + "userConsentDisplayName": "Read directory data", + "value": "Directory.Read.All" + }, + { + "description": "Allows the app to read and write data in your organization's directory, such as users, and groups. It does not allow the app to delete users or groups, or reset user passwords.", + "displayName": "Read and write directory data", + "id": "c5366453-9fb0-48a5-a156-24f0c49a4b84", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write data in your organization's directory, such as other users, groups. It does not allow the app to delete users or groups, or reset user passwords.", + "userConsentDisplayName": "Read and write directory data", + "value": "Directory.ReadWrite.All" + }, + { + "description": "Allows the app to manage restricted resources based on the other permissions granted to the app, on behalf of the signed-in user.", + "displayName": "Manage restricted resources in the directory", + "id": "cba5390f-ed6a-4b7f-b657-0efc2210ed20", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage restricted resources based on the other permissions granted to the app, on your behalf.", + "userConsentDisplayName": "Manage restricted resources in the directory", + "value": "Directory.Write.Restricted" + }, + { + "description": "Allows the app to read Azure AD recommendations, on behalf of the signed-in user.", + "displayName": "Read Azure AD recommendations", + "id": "34d3bd24-f6a6-468c-b67c-0c365c1d6410", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read Azure AD recommendations, on your behalf.", + "userConsentDisplayName": "Read Azure AD recommendations", + "value": "DirectoryRecommendations.Read.All" + }, + { + "description": "Allows the app to read and update Azure AD recommendations, on behalf of the signed-in user. ", + "displayName": "Read and update Azure AD recommendations", + "id": "f37235e8-90a0-4189-93e2-e55b53867ccd", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and update Azure AD recommendations, on your behalf.", + "userConsentDisplayName": "Read and update Azure AD recommendations", + "value": "DirectoryRecommendations.ReadWrite.All" + }, + { + "description": "Allows the app to read all domain properties on behalf of the signed-in user.", + "displayName": "Read domains.", + "id": "2f9ee017-59c1-4f1d-9472-bd5529a7b311", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all domain properties on your behalf.", + "userConsentDisplayName": "Read domains.", + "value": "Domain.Read.All" + }, + { + "description": "Allows the app to read and write all domain properties on behalf of the signed-in user. Also allows the app to add, verify and remove domains.", + "displayName": "Read and write domains", + "id": "0b5d694c-a244-4bde-86e6-eb5cd07730fe", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write all domain properties on your behalf. Also allows the app to add, verify and remove domains.", + "userConsentDisplayName": "Read and write domains", + "value": "Domain.ReadWrite.All" + }, + { + "description": "Allows the app to have the same access to mailboxes as the signed-in user via Exchange ActiveSync.", + "displayName": "Access mailboxes via Exchange ActiveSync", + "id": "ff91d191-45a0-43fd-b837-bd682c4a0b0f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app full access to your mailboxes on your behalf.", + "userConsentDisplayName": "Access your mailboxes", + "value": "EAS.AccessAsUser.All" + }, + { + "description": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.", + "displayName": "Read all eDiscovery objects", + "id": "99201db3-7652-4d5a-809a-bdb94f85fe3c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects on your behalf.", + "userConsentDisplayName": "Read all eDiscovery objects", + "value": "eDiscovery.Read.All" + }, + { + "description": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.", + "displayName": "Read and write all eDiscovery objects", + "id": "acb8f680-0834-4146-b69e-4ab1b39745ad", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on your behalf.", + "userConsentDisplayName": "Read and write all eDiscovery objects", + "value": "eDiscovery.ReadWrite.All" + }, + { + "description": "Read the state and settings of all Microsoft education apps on behalf of the user.", + "displayName": "Read education app settings", + "id": "8523895c-6081-45bf-8a5d-f062a2f12c9f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view the state and settings of all Microsoft education apps on your behalf.", + "userConsentDisplayName": "View your education app settings", + "value": "EduAdministration.Read" + }, + { + "description": "Manage the state and settings of all Microsoft education apps on behalf of the user.", + "displayName": "Manage education app settings", + "id": "63589852-04e3-46b4-bae9-15d5b1050748", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage the state and settings of all Microsoft education apps on your behalf.", + "userConsentDisplayName": "Manage your education app settings", + "value": "EduAdministration.ReadWrite" + }, + { + "description": "Allows the app to read assignments and their grades on behalf of the user.", + "displayName": "Read users' class assignments and their grades", + "id": "091460c9-9c4a-49b2-81ef-1f3d852acce2", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view your assignments on your behalf including grades.", + "userConsentDisplayName": "View your assignments and grades", + "value": "EduAssignments.Read" + }, + { + "description": "Allows the app to read assignments without grades on behalf of the user.", + "displayName": "Read users' class assignments without grades", + "id": "c0b0103b-c053-4b2e-9973-9f3a544ec9b8", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view your assignments on your behalf without seeing grades.", + "userConsentDisplayName": "View your assignments without grades", + "value": "EduAssignments.ReadBasic" + }, + { + "description": "Allows the app to read and write assignments and their grades on behalf of the user.", + "displayName": "Read and write users' class assignments and their grades", + "id": "2f233e90-164b-4501-8bce-31af2559a2d3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view and modify your assignments on your behalf including  grades.", + "userConsentDisplayName": "View and modify your assignments and grades", + "value": "EduAssignments.ReadWrite" + }, + { + "description": "Allows the app to read and write assignments without grades on behalf of the user.", + "displayName": "Read and write users' class assignments without grades", + "id": "2ef770a1-622a-47c4-93ee-28d6adbed3a0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view and modify your assignments on your behalf without seeing grades.", + "userConsentDisplayName": "View and modify your assignments without grades", + "value": "EduAssignments.ReadWriteBasic" + }, + { + "description": "Allows the app to read the user's modules and resources on behalf of the signed-in user.", + "displayName": "Read the user's class modules and resources", + "id": "484859e8-b9e2-4e92-b910-84db35dadd29", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read modules and resources on your behalf.", + "userConsentDisplayName": "Read your class modules and resources", + "value": "EduCurricula.Read" + }, + { + "description": "Allows the app to read and write user's modules and resources on behalf of the signed-in user.", + "displayName": "Read and write the user's class modules and resources", + "id": "4793c53b-df34-44fd-8d26-d15c517732f5", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write modules and resources on your behalf.", + "userConsentDisplayName": "Read and write your class modules and resources", + "value": "EduCurricula.ReadWrite" + }, + { + "description": "Allows the app to read the structure of schools and classes in an organization's roster and education-specific information about users to be read on behalf of the user.", + "displayName": "Read users' view of the roster", + "id": "a4389601-22d9-4096-ac18-36a927199112", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view information about schools and classes in your organization and education-related information about you and other users on your behalf.", + "userConsentDisplayName": "View your school, class and user information", + "value": "EduRoster.Read" + }, + { + "description": "Allows the app to read a limited subset of the properties from the structure of schools and classes in an organization's roster and a limited subset of properties about users to be read on behalf of the user. Includes name, status, education role, email address and photo.", + "displayName": "Read a limited subset of users' view of the roster", + "id": "5d186531-d1bf-4f07-8cea-7c42119e1bd9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view minimal  information about both schools and classes in your organization and education-related information about you and other users on your behalf.", + "userConsentDisplayName": "View a limited subset of your school, class and user information", + "value": "EduRoster.ReadBasic" + }, + { + "description": "Allows the app to read and write the structure of schools and classes in an organization's roster and education-specific information about users to be read and written on behalf of the user.", + "displayName": "Read and write users' view of the roster", + "id": "359e19a6-e3fa-4d7f-bcab-d28ec592b51e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view and modify information about schools and classes in your organization and education-related information about you and other users on your behalf.", + "userConsentDisplayName": "View and modify your school, class and user information", + "value": "EduRoster.ReadWrite" + }, + { + "description": "Allows the app to read your users' primary email address", + "displayName": "View users' email address", + "id": "64a6cdd6-aab1-4aaf-94b8-3cc8405e90d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your primary email address", + "userConsentDisplayName": "View your email address", + "value": "email" + }, + { + "description": "Allows the app to read access packages and related entitlement management resources on behalf of the signed-in user.", + "displayName": "Read all entitlement management resources", + "id": "5449aa12-1393-4ea2-a7c7-d0e06c1a56b2", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read access packages and related entitlement management resources that you have access to.", + "userConsentDisplayName": "Read all entitlement management resources", + "value": "EntitlementManagement.Read.All" + }, + { + "description": "Allows the app to request access to and management of access packages and related entitlement management resources on behalf of the signed-in user.", + "displayName": "Read and write entitlement management resources", + "id": "ae7a573d-81d7-432b-ad44-4ed5c9d89038", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to request access to and management of access packages and related entitlement management resources that you have access to.", + "userConsentDisplayName": "Read and write entitlement management resources", + "value": "EntitlementManagement.ReadWrite.All" + }, + { + "description": "Allows the app to manage self-service entitlement management resources on behalf of the signed-in user. This includes operations such as requesting access and approving access of others.", + "displayName": "Read and write entitlement management resources related to self-service operations", + "id": "e9fdcbbb-8807-410f-b9ec-8d5468c7c2ac", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create and manage self-service entitlement management resources that you have access to. This includes operations such as requesting access and approving access for others.", + "userConsentDisplayName": "Read and write self-service entitlement management resources", + "value": "EntitlementMgmt-SubjectAccess.ReadWrite" + }, + { + "description": "Allows the app to read your organization's authentication event listeners on behalf of the signed-in user.", + "displayName": "Read your organization's authentication event listeners", + "id": "f7dd3bed-5eec-48da-bc73-1c0ef50bc9a1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's authentication event listeners on your behalf.", + "userConsentDisplayName": "Read your organization's authentication event listeners", + "value": "EventListener.Read.All" + }, + { + "description": "Allows the app to read or write your organization's authentication event listeners on behalf of the signed-in user.", + "displayName": "Read and write your organization's authentication event listeners", + "id": "d11625a6-fe21-4fc6-8d3d-063eba5525ad", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read or write your organization's authentication event listeners on your behalf.", + "userConsentDisplayName": "Read and write your organization's authentication event listeners", + "value": "EventListener.ReadWrite.All" + }, + { + "description": "Allows the app to have the same access to mailboxes as the signed-in user via Exchange Web Services.", + "displayName": "Access mailboxes as the signed-in user via Exchange Web Services", + "id": "9769c687-087d-48ac-9cb3-c37dde652038", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app full access to your mailboxes on your behalf.", + "userConsentDisplayName": "Access your mailboxes", + "value": "EWS.AccessAsUser.All" + }, + { + "description": "Allows the app to read all external connections on behalf of a signed-in user. The signed-in user must be an administrator.", + "displayName": "Read all external connections", + "id": "a38267a5-26b6-4d76-9493-935b7599116b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all external connections on your behalf. The signed-in user must be an administrator.", + "userConsentDisplayName": "Read all external connections", + "value": "ExternalConnection.Read.All" + }, + { + "description": "Allows the app to read and write all external connections on behalf of a signed-in user. The signed-in user must be an administrator.", + "displayName": "Read and write all external connections", + "id": "bbbbd9b3-3566-4931-ac37-2b2180d9e334", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write all external connections on your behalf. The signed-in user must be an administrator.", + "userConsentDisplayName": "Read and write all external connections", + "value": "ExternalConnection.ReadWrite.All" + }, + { + "description": "Allows the app to read and write settings of external connections on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read and write settings of connections that it is authorized to.", + "displayName": "Read and write external connections", + "id": "4082ad95-c812-4f02-be92-780c4c4f1830", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write external connections on your behalf. The signed-in user must be an administrator. The app can only read and write external connections that it is authorized to, or it can create new external connections. ", + "userConsentDisplayName": "Read and write external connections", + "value": "ExternalConnection.ReadWrite.OwnedBy" + }, + { + "description": "Allow the app to read external datasets and content, on behalf of the signed-in user.", + "displayName": "Read items in external datasets", + "id": "922f9392-b1b7-483c-a4be-0089be7704fb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read external datasets and content that you have access to.", + "userConsentDisplayName": "Read items in external datasets", + "value": "ExternalItem.Read.All" + }, + { + "description": "Allows the app to read and write all external items on behalf of a signed-in user. The signed-in user must be an administrator.", + "displayName": "Read and write all external items", + "id": "b02c54f8-eb48-4c50-a9f0-a149e5a2012f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write all external items on your behalf. The signed-in user must be an administrator.", + "userConsentDisplayName": "Read and write all external items", + "value": "ExternalItem.ReadWrite.All" + }, + { + "description": "Allows the app to read and write external items on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read external items of the connection that it is authorized to.", + "displayName": "Read and write external items", + "id": "4367b9d7-cee7-4995-853c-a0bdfe95c1f9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write external items on your behalf. The signed-in user must be an administrator. The app can only read external items of the connection that it is authorized to.", + "userConsentDisplayName": "Read and write external items", + "value": "ExternalItem.ReadWrite.OwnedBy" + }, + { + "description": "Allows the app to read your family information, members and their basic profile.", + "displayName": "Read your family info", + "id": "3a1e4806-a744-4c70-80fc-223bf8582c46", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your family information, members and their basic profile.", + "userConsentDisplayName": "Read your family info", + "value": "Family.Read" + }, + { + "description": "Allows the app to read the signed-in user's files.", + "displayName": "Read user files", + "id": "10465720-29dd-4523-a11a-6a75c743c9d9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your files.", + "userConsentDisplayName": "Read your files", + "value": "Files.Read" + }, + { + "description": "Allows the app to read all files the signed-in user can access.", + "displayName": "Read all files that user can access", + "id": "df85f4d6-205c-4ac5-a5ea-6bf408dba283", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all files you can access.", + "userConsentDisplayName": "Read all files that you have access to", + "value": "Files.Read.All" + }, + { + "description": "(Preview) Allows the app to read files that the user selects. The app has access for several hours after the user selects a file.", + "displayName": "Read files that the user selects (preview)", + "id": "5447fe39-cb82-4c1a-b977-520e67e724eb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "(Preview) Allows the app to read files that you select. After you select a file, the app has access to the file for several hours.", + "userConsentDisplayName": "Read selected files", + "value": "Files.Read.Selected" + }, + { + "description": "Allows the app to read, create, update and delete the signed-in user's files.", + "displayName": "Have full access to user files", + "id": "5c28f0bf-8a70-41f1-8ab2-9032436ddb65", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, create, update, and delete your files.", + "userConsentDisplayName": "Have full access to your files", + "value": "Files.ReadWrite" + }, + { + "description": "Allows the app to read, create, update and delete all files the signed-in user can access.", + "displayName": "Have full access to all files user can access", + "id": "863451e7-0667-486c-a5d6-d135439485f0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, create, update and delete all files that you can access.", + "userConsentDisplayName": "Have full access to all files you have access to", + "value": "Files.ReadWrite.All" + }, + { + "description": "(Preview) Allows the app to read, create, update and delete files in the application's folder.", + "displayName": "Have full access to the application's folder (preview)", + "id": "8019c312-3263-48e6-825e-2b833497195b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "(Preview) Allows the app to read, create, update and delete files in the application's folder.", + "userConsentDisplayName": "Have full access to the application's folder", + "value": "Files.ReadWrite.AppFolder" + }, + { + "description": "(Preview) Allows the app to read and write files that the user selects. The app has access for several hours after the user selects a file.", + "displayName": "Read and write files that the user selects (preview)", + "id": "17dde5bd-8c17-420f-a486-969730c1b827", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "(Preview) Allows the app to read and write files that you select. After you select a file, the app has access to the file for several hours.", + "userConsentDisplayName": "Read and write selected files", + "value": "Files.ReadWrite.Selected" + }, + { + "description": "Allows the app to read and write financials data on behalf of the signed-in user.", + "displayName": "Read and write financials data", + "id": "f534bf13-55d4-45a9-8f3c-c92fe64d6131", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write financials data on your behalf.", + "userConsentDisplayName": "Read and write financials data", + "value": "Financials.ReadWrite.All" + }, + { + "description": "Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access. ", + "displayName": "Read all groups", + "id": "5f8c59db-677d-491f-a6b8-5f174b11ec1d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to list groups, and to read their properties and all group memberships on your behalf. Also allows the app to read calendar, conversations, files, and other group content for all groups you can access. ", + "userConsentDisplayName": "Read all groups", + "value": "Group.Read.All" + }, + { + "description": "Allows the app to create groups and read all group properties and memberships on behalf of the signed-in user. Additionally allows group owners to manage their groups and allows group members to update group content.", + "displayName": "Read and write all groups", + "id": "4e46008b-f24c-477d-8fff-7bb4ec7aafe0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create groups and read all group properties and memberships on your behalf. Additionally allows the app to manage your groups and to update group content for groups you are a member of.", + "userConsentDisplayName": "Read and write all groups", + "value": "Group.ReadWrite.All" + }, + { + "description": "Allows the app to list groups, read basic group properties and read membership of all groups the signed-in user has access to.", + "displayName": "Read group memberships", + "id": "bc024368-1153-4739-b217-4326f2e966d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to list groups, read basic group properties and read membership of all your groups.", + "userConsentDisplayName": "Read group memberships", + "value": "GroupMember.Read.All" + }, + { + "description": "Allows the app to list groups, read basic properties, read and update the membership of the groups the signed-in user has access to. Group properties and owners cannot be updated and groups cannot be deleted.", + "displayName": "Read and write group memberships", + "id": "f81125ac-d3b7-4573-a3b2-7099cc39df9e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to list groups, read basic properties, read and update the membership of your groups. Group properties and owners cannot be updated and groups cannot be deleted.", + "userConsentDisplayName": "Read and write group memberships", + "value": "GroupMember.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization’s identity (authentication) providers’ properties on behalf of the user.", + "displayName": "Read identity providers", + "id": "43781733-b5a7-4d1b-98f4-e8edff23e1a9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization’s identity (authentication) providers’ properties on your behalf.", + "userConsentDisplayName": "Read identity providers", + "value": "IdentityProvider.Read.All" + }, + { + "description": "Allows the app to read and write your organization’s identity (authentication) providers’ properties on behalf of the user.", + "displayName": "Read and write identity providers", + "id": "f13ce604-1677-429f-90bd-8a10b9f01325", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization’s identity (authentication) providers’ properties on your behalf.", + "userConsentDisplayName": "Read and write identity providers", + "value": "IdentityProvider.ReadWrite.All" + }, + { + "description": "Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user. ", + "displayName": "Read identity risk event information", + "id": "8f6a01e7-0391-4ee5-aa22-a3af122cef27", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user. ", + "userConsentDisplayName": "Read identity risk event information", + "value": "IdentityRiskEvent.Read.All" + }, + { + "description": "Allows the app to read and update identity risk event information for all users in your organization on behalf of the signed-in user. Update operations include confirming risk event detections. ", + "displayName": "Read and write risk event information", + "id": "9e4862a5-b68f-479e-848a-4e07e25c9916", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and update identity risk event information for all users in your organization on your behalf. Update operations include confirming risk event detections. ", + "userConsentDisplayName": "Read and write risk event information", + "value": "IdentityRiskEvent.ReadWrite.All" + }, + { + "description": "Allows the app to read all identity risky service principal information for your organization, on behalf of the signed-in user.", + "displayName": "Read all identity risky service principal information", + "id": "ea5c4ab0-5a73-4f35-8272-5d5337884e5d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all identity risky service principal information for your organization, on your behalf.", + "userConsentDisplayName": "Read all identity risky service principal information", + "value": "IdentityRiskyServicePrincipal.Read.All" + }, + { + "description": "Allows the app to read and update identity risky service principal information for all service principals in your organization, on behalf of the signed-in user. Update operations include dismissing risky service principals.", + "displayName": "Read and write all identity risky service principal information", + "id": "bb6f654c-d7fd-4ae3-85c3-fc380934f515", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and update identity risky service principal information for all service principals in your organization, on your behalf. Update operations include dismissing risky service principals.", + "userConsentDisplayName": "Read and write all identity risky service principal information", + "value": "IdentityRiskyServicePrincipal.ReadWrite.All" + }, + { + "description": "Allows the app to read identity risky user information for all users in your organization on behalf of the signed-in user.", + "displayName": "Read identity risky user information", + "id": "d04bb851-cb7c-4146-97c7-ca3e71baf56c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read identity risky user information for all users in your organization on behalf of the signed-in user.", + "userConsentDisplayName": "Read identity risky user information", + "value": "IdentityRiskyUser.Read.All" + }, + { + "description": "Allows the app to read and update identity risky user information for all users in your organization on behalf of the signed-in user. Update operations include dismissing risky users.", + "displayName": "Read and write risky user information", + "id": "e0a7cdbb-08b0-4697-8264-0069786e9674", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and update identity risky user information for all users in your organization on your behalf. Update operations include dismissing risky users.", + "userConsentDisplayName": "Read and write identity risky user information", + "value": "IdentityRiskyUser.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization's user flows, on behalf of the signed-in user.", + "displayName": "Read all identity user flows", + "id": "2903d63d-4611-4d43-99ce-a33f3f52e343", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's user flows, on your behalf.", + "userConsentDisplayName": "Read all identity user flows", + "value": "IdentityUserFlow.Read.All" + }, + { + "description": "Allows the app to read or write your organization's user flows, on behalf of the signed-in user.", + "displayName": "Read and write all identity user flows", + "id": "281892cc-4dbf-4e3a-b6cc-b21029bb4e82", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read or write your organization's user flows, on your behalf.", + "userConsentDisplayName": "Read and write all identity user flows", + "value": "IdentityUserFlow.ReadWrite.All" + }, + { + "description": "Allows the app to have the same access to mailboxes as the signed-in user via IMAP protocol.", + "displayName": "Read and write access to mailboxes via IMAP.", + "id": "652390e4-393a-48de-9484-05f9b1212954", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.", + "userConsentDisplayName": "Read and write access to your mail.", + "value": "IMAP.AccessAsUser.All" + }, + { + "description": "Allows the app to read data connectors on behalf of the signed-in user.", + "displayName": "View data connector definitions", + "id": "d19c0de5-7ecb-4aba-b090-da35ebcd5425", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read data connectors on your behalf.", + "userConsentDisplayName": "View data connector definitions", + "value": "IndustryData-DataConnector.Read.All" + }, + { + "description": "Allows the app to read and write data connectors on behalf of the signed-in user.", + "displayName": "Manage data connector definitions", + "id": "5ce933ac-3997-4280-aed0-cc072e5c062a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write data connectors on your behalf.", + "userConsentDisplayName": "Manage data connector definitions", + "value": "IndustryData-DataConnector.ReadWrite.All" + }, + { + "description": "Allows the app to upload data files to a data connector on behalf of the signed-in user.", + "displayName": "Upload files to a data connector", + "id": "fc47391d-ab2c-410f-9059-5600f7af660d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to upload data files to a data connector on your behalf.", + "userConsentDisplayName": "Upload files to a data connector", + "value": "IndustryData-DataConnector.Upload" + }, + { + "description": "Allows the app to read inbound data flows on behalf of the signed-in user.", + "displayName": "View inbound flow definitions", + "id": "cb0774da-a605-42af-959c-32f438fb38f4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read inbound data flows on your behalf.", + "userConsentDisplayName": "View inbound flow definitions", + "value": "IndustryData-InboundFlow.Read.All" + }, + { + "description": "Allows the app to read and write inbound data flows on behalf of the signed-in user.", + "displayName": "Manage inbound flow definitions", + "id": "97044676-2cec-40ee-bd70-38df444c9e70", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write inbound data flows on your behalf.", + "userConsentDisplayName": "Manage inbound flow definitions", + "value": "IndustryData-InboundFlow.ReadWrite.All" + }, + { + "description": "Allows the app to read reference definitions on behalf of the signed-in user.", + "displayName": "View reference definitions", + "id": "a3f96ffe-cb84-40a8-ac85-582d7ef97c2a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read reference definitions on your behalf.", + "userConsentDisplayName": "View reference definitions", + "value": "IndustryData-ReferenceDefinition.Read.All" + }, + { + "description": "Allows the app to read current and previous IndustryData runs on behalf of the signed-in user.", + "displayName": "View current and previous runs", + "id": "92685235-50c4-4702-b2c8-36043db6fa79", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read current and previous IndustryData runs on your behalf.", + "userConsentDisplayName": "View current and previous runs", + "value": "IndustryData-Run.Read.All" + }, + { + "description": "Allows the app to read source system definitions on behalf of the signed-in user.", + "displayName": "View source system definitions", + "id": "49b7016c-89ae-41e7-bd6f-b7170c5490bf", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read source system definitions on your behalf.", + "userConsentDisplayName": "View source system definitions", + "value": "IndustryData-SourceSystem.Read.All" + }, + { + "description": "Allows the app to read and write source system definitions on behalf of the signed-in user.", + "displayName": "Manage source system definitions", + "id": "9599f005-05d6-4ea7-b1b1-4929768af5d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write source system definitions on your behalf.", + "userConsentDisplayName": "Manage source system definitions", + "value": "IndustryData-SourceSystem.ReadWrite.All" + }, + { + "description": "Allows the app to read time period definitions on behalf of the signed-in user.", + "displayName": "Read time period definitions", + "id": "c9d51f28-8ccd-42b2-a836-fd8fe9ebf2ae", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read time period definitions on your behalf.", + "userConsentDisplayName": "Read time period definitions", + "value": "IndustryData-TimePeriod.Read.All" + }, + { + "description": "Allows the app to read and write time period definitions on behalf of the signed-in user.", + "displayName": "Manage time period definitions", + "id": "b6d56528-3032-4f9d-830f-5a24a25e6661", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write time period definitions on your behalf.", + "userConsentDisplayName": "Manage time period definitions", + "value": "IndustryData-TimePeriod.ReadWrite.All" + }, + { + "description": "Allows the app to read basic Industry Data service and resource information on behalf of the signed-in user.", + "displayName": "Read basic Industry Data service and resource definitions", + "id": "60382b96-1f5e-46ea-a544-0407e489e588", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read Industry Data basic service and resource information on your behalf.", + "userConsentDisplayName": "Read basic Industry Data service and resource definitions", + "value": "IndustryData.ReadBasic.All" + }, + { + "description": "Allows the app to read the configurations applicable to the signed-in user for protecting organizational data, on behalf of the signed-in user.", + "displayName": "Read configurations for protecting organizational data applicable to the user", + "id": "12f4bffb-b598-413c-984b-db99728f8b54", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the configurations applicable to you for protecting organizational data, on your behalf.", + "userConsentDisplayName": "Read configurations for protecting organizational data applicable to you", + "value": "InformationProtectionConfig.Read" + }, + { + "description": "Allows an app to read information protection sensitivity labels and label policy settings, on behalf of the signed-in user.", + "displayName": "Read user sensitivity labels and label policies.", + "id": "4ad84827-5578-4e18-ad7a-86530b12f884", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read information protection sensitivity labels and label policy settings, on behalf of the signed-in user.", + "userConsentDisplayName": "Read user sensitivity labels and label policies.", + "value": "InformationProtectionPolicy.Read" + }, + { + "description": "Allows the app to read insights related to guest activity, on behalf of the signed-in user.", + "displayName": "Read insights related to guest activity", + "id": "bdd9425e-296d-4e4b-9c15-0a288b4b12e1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read insights related to guest activity, on your behalf.", + "userConsentDisplayName": "Read insights related to guest activity", + "value": "Insights-GuestActivity.Read.All" + }, + { + "description": "Allows the app to read and write insights related to guest activity, on behalf of the signed-in user.", + "displayName": "Read and write insights related to guest activity", + "id": "7e23346e-6931-45b2-b04e-6332b3905b8a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write insights related to guest activity, on your behalf.", + "userConsentDisplayName": "Read and write insights related to guest activity", + "value": "Insights-GuestActivity.ReadWrite.All" + }, + { + "description": "Allows the app to read data for the learner's assignments in the organization's directory, on behalf of the signed-in user.", + "displayName": "Read user's assignments", + "id": "ac08cdae-e845-41db-adf9-5899a0ec9ef6", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read data for your assignments in the organization's directory, on your behalf.", + "userConsentDisplayName": "Read your assignments", + "value": "LearningAssignedCourse.Read" + }, + { + "description": "Allows the app to read learning content in the organization's directory, on behalf of the signed-in user.", + "displayName": "Read learning content", + "id": "ea4c1fd9-6a9f-4432-8e5d-86e06cc0da77", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read learning content in the organization's directory, on your behalf.", + "userConsentDisplayName": "Read learning content", + "value": "LearningContent.Read.All" + }, + { + "description": "Allows the app to manage learning content in the organization's directory, on behalf of the signed-in user.", + "displayName": "Manage learning content", + "id": "53cec1c4-a65f-4981-9dc1-ad75dbf1c077", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage learning content in the organization's directory, on your behalf.", + "userConsentDisplayName": "Manage learning content", + "value": "LearningContent.ReadWrite.All" + }, + { + "description": "Allows the app to read data for the learning provider in the organization's directory, on behalf of the signed-in user.", + "displayName": "Read learning provider", + "id": "dd8ce36f-9245-45ea-a99e-8ac398c22861", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read data for the learning provider in the organization's directory, on your behalf.", + "userConsentDisplayName": "Read learning provider", + "value": "LearningProvider.Read" + }, + { + "description": "Allows the app to create, update, read, and delete data for the learning provider in the organization's directory, on behalf of the signed-in user.", + "displayName": "Manage learning provider", + "id": "40c2eb57-abaf-49f5-9331-e90fd01f7130", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create, update, read, and delete data for the learning provider in the organization's directory, on your behalf.", + "userConsentDisplayName": "Manage learning provider", + "value": "LearningProvider.ReadWrite" + }, + { + "description": "Allows the app to read data for the learner's self-initiated courses in the organization's directory, on behalf of the signed-in user.", + "displayName": "Read user's self-initiated courses", + "id": "f6403ef7-4a96-47be-a190-69ba274c3f11", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read data for your self-initiated courses in the organization's directory, on your behalf.", + "userConsentDisplayName": "Read your self-initiated courses", + "value": "LearningSelfInitiatedCourse.Read" + }, + { + "description": "Allows an app to manage license assignments for users and groups, on behalf of the signed-in user.", + "displayName": "Manage all license assignments", + "id": "f55016cc-149c-447e-8f21-7cf3ec1d6350", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage all license assignments, on your behalf.", + "userConsentDisplayName": "Manage all license assignments", + "value": "LicenseAssignment.ReadWrite.All" + }, + { + "description": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.", + "displayName": "Read all lifecycle workflows resources", + "id": "9bcb9916-765a-42af-bf77-02282e26b01a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on your behalf.", + "userConsentDisplayName": "Read all lifecycle workflows resources", + "value": "LifecycleWorkflows.Read.All" + }, + { + "description": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.", + "displayName": "Read and write all lifecycle workflows resources", + "id": "84b9d731-7db8-4454-8c90-fd9e95350179", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources on your behalf.", + "userConsentDisplayName": "Read and write all lifecycle workflows resources", + "value": "LifecycleWorkflows.ReadWrite.All" + }, + { + "description": "Allows the app to read the signed-in user's mailbox.", + "displayName": "Read user mail ", + "id": "570282fd-fa5c-430d-a7fd-fc8dc98a9dca", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read email in your mailbox. ", + "userConsentDisplayName": "Read your mail ", + "value": "Mail.Read" + }, + { + "description": "Allows the app to read mail a user can access, including their own and shared mail.", + "displayName": "Read user and shared mail", + "id": "7b9103a5-4610-446b-9670-80643382c1fa", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read mail you can access, including shared mail.", + "userConsentDisplayName": "Read mail you can access", + "value": "Mail.Read.Shared" + }, + { + "description": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.", + "displayName": "Read user basic mail", + "id": "a4b8392a-d8d1-4954-a029-8e668a39a170", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.", + "userConsentDisplayName": "Read user basic mail", + "value": "Mail.ReadBasic" + }, + { + "description": "Allows the app to read mail the signed-in user can access, including their own and shared mail, except for body, bodyPreview, uniqueBody, attachments, extensions, and any extended properties.", + "displayName": "Read user and shared basic mail", + "id": "b11fa0e7-fdb7-4dc9-b1f1-59facd463480", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read mail you can access, including shared mail except body, previewBody, uniqueBody, attachments, extensions, and any extended properties. ", + "userConsentDisplayName": "Read basic mail you can access", + "value": "Mail.ReadBasic.Shared" + }, + { + "description": "Allows the app to create, read, update, and delete email in user mailboxes. Does not include permission to send mail. ", + "displayName": "Read and write access to user mail ", + "id": "024d486e-b451-40bb-833d-3e66d98c5c73", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail. ", + "userConsentDisplayName": "Read and write access to your mail ", + "value": "Mail.ReadWrite" + }, + { + "description": "Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail.", + "displayName": "Read and write user and shared mail", + "id": "5df07973-7d5d-46ed-9847-1271055cbd51", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create, and delete mail you have permission to access, including your own and shared mail. Does not allow the app to send mail on your behalf.", + "userConsentDisplayName": "Read and write mail you can access", + "value": "Mail.ReadWrite.Shared" + }, + { + "description": "Allows the app to send mail as users in the organization. ", + "displayName": "Send mail as a user ", + "id": "e383f46e-2787-4529-855e-0e479a3ffac0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to send mail as you. ", + "userConsentDisplayName": "Send mail as you ", + "value": "Mail.Send" + }, + { + "description": "Allows the app to send mail as the signed-in user, including sending on-behalf of others.", + "displayName": "Send mail on behalf of others", + "id": "a367ab51-6b49-43bf-a716-a1fb06d2a174", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to send mail as you or on-behalf of someone else.", + "userConsentDisplayName": "Send mail on behalf of others or yourself", + "value": "Mail.Send.Shared" + }, + { + "description": "Allows the app to the read user's mailbox settings. Does not include permission to send mail.", + "displayName": "Read user mailbox settings", + "id": "87f447af-9fa4-4c32-9dfa-4a57a73d18ce", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your mailbox settings.", + "userConsentDisplayName": "Read your mailbox settings", + "value": "MailboxSettings.Read" + }, + { + "description": "Allows the app to create, read, update, and delete user's mailbox settings. Does not include permission to send mail.", + "displayName": "Read and write user mailbox settings", + "id": "818c620a-27a9-40bd-a6a5-d96f7d610b4b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create, and delete your mailbox settings.", + "userConsentDisplayName": "Read and write to your mailbox settings", + "value": "MailboxSettings.ReadWrite" + }, + { + "description": "Allows the app to read all managed tenant information on behalf of the signed-in user.", + "displayName": "Read all managed tenant information", + "id": "dc34164e-6c4a-41a0-be89-3ae2fbad7cd3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all managed tenant information on your behalf.", + "userConsentDisplayName": "Read all managed tenant information", + "value": "ManagedTenants.Read.All" + }, + { + "description": "Allows the app to read and write all managed tenant information on behalf of the signed-in user.", + "displayName": "Read and write all managed tenant information", + "id": "b31fa710-c9b3-4d9e-8f5e-8036eecddab9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write all managed tenant information on your behalf.", + "userConsentDisplayName": "Read and write all managed tenant information", + "value": "ManagedTenants.ReadWrite.All" + }, + { + "description": "Allows the app to read the memberships of hidden groups and administrative units on behalf of the signed-in user, for those hidden groups and administrative units that the signed-in user has access to.", + "displayName": "Read hidden memberships", + "id": "f6a3db3e-f7e8-4ed2-a414-557c8c9830be", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the memberships of hidden groups or administrative units on your behalf, for those hidden groups or adminstrative units that you have access to.", + "userConsentDisplayName": "Read your hidden memberships", + "value": "Member.Read.Hidden" + }, + { + "description": "Allows the app to read multi-tenant organization details and tenants on behalf of the signed-in user.", + "displayName": "Read multi-tenant organization details and tenants", + "id": "526aa72a-5878-49fe-bf4e-357973af9b06", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read multi-tenant organization details and tenants on your behalf.", + "userConsentDisplayName": "Read multi-tenant organization details and tenants", + "value": "MultiTenantOrganization.Read.All" + }, + { + "description": "Allows the app to read multi-tenant organization basic details and active tenants on behalf of the signed-in user.", + "displayName": "Read multi-tenant organization basic details and active tenants", + "id": "225db56b-15b2-4daa-acb3-0eec2bbe4849", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read multi-tenant organization basic details and active tenants on your behalf.", + "userConsentDisplayName": "Read multi-tenant organization basic details and active tenants", + "value": "MultiTenantOrganization.ReadBasic.All" + }, + { + "description": "Allows the app to read and write multi-tenant organization details and tenants on behalf of the signed-in user.", + "displayName": "Read and write multi-tenant organization details and tenants", + "id": "77af1528-84f3-4023-8d90-d219cd433108", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write multi-tenant organization details and tenants on your behalf.", + "userConsentDisplayName": "Read and write multi-tenant organization details and tenants", + "value": "MultiTenantOrganization.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization's branches for network access on behalf of the signed-in user.", + "displayName": "Read properties of branches for network access", + "id": "4051c7fc-b429-4804-8d80-8f1f8c24a6f7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's branches for network access on your behalf.", + "userConsentDisplayName": "Read properties of branches for network access", + "value": "NetworkAccessBranch.Read.All" + }, + { + "description": "Allows the app to read and write your organization's branches for network access on behalf of the signed-in user.", + "displayName": "Read and write properties of branches for network access", + "id": "b8a36cc2-b810-461a-baa4-a7281e50bd5c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's branches for network access on your behalf.", + "userConsentDisplayName": "Read and write properties of branches for network access", + "value": "NetworkAccessBranch.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization's security and routing network access policies on behalf of the signed-in user.", + "displayName": "Read security and routing policies for network access", + "id": "ba22922b-752c-446f-89d7-a2d92398fceb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's security and routing network access policies on your behalf.", + "userConsentDisplayName": "Read security and routing policies for network access", + "value": "NetworkAccessPolicy.Read.All" + }, + { + "description": "Allows the app to read and write your organization's security and routing network access policies on behalf of the signed-in user.", + "displayName": "Read and write security and routing policies for network access", + "id": "b1fbad0f-ef6e-42ed-8676-bca7fa3e7291", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's security and routing network access policies on your behalf.", + "userConsentDisplayName": "Read and write security and routing policies for network access", + "value": "NetworkAccessPolicy.ReadWrite.All" + }, + { + "description": "Allows the app to read the titles of OneNote notebooks and sections and to create new pages, notebooks, and sections on behalf of the signed-in user.", + "displayName": "Create user OneNote notebooks", + "id": "9d822255-d64d-4b7a-afdb-833b9a97ed02", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to view the titles of your OneNote notebooks and sections and to create new pages, notebooks, and sections on your behalf.", + "userConsentDisplayName": "Create your OneNote notebooks", + "value": "Notes.Create" + }, + { + "description": "Allows the app to read OneNote notebooks on behalf of the signed-in user.", + "displayName": "Read user OneNote notebooks", + "id": "371361e4-b9e2-4a3f-8315-2a301a3b0a3d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read OneNote notebooks on your behalf.", + "userConsentDisplayName": "Read your OneNote notebooks", + "value": "Notes.Read" + }, + { + "description": "Allows the app to read OneNote notebooks that the signed-in user has access to in the organization.", + "displayName": "Read all OneNote notebooks that user can access", + "id": "dfabfca6-ee36-4db2-8208-7a28381419b3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all the OneNote notebooks that you have access to.", + "userConsentDisplayName": "Read all OneNote notebooks that you can access", + "value": "Notes.Read.All" + }, + { + "description": "Allows the app to read, share, and modify OneNote notebooks on behalf of the signed-in user.", + "displayName": "Read and write user OneNote notebooks", + "id": "615e26af-c38a-4150-ae3e-c3b0d4cb1d6a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, share, and modify OneNote notebooks on your behalf.", + "userConsentDisplayName": "Read and write your OneNote notebooks", + "value": "Notes.ReadWrite" + }, + { + "description": "Allows the app to read, share, and modify OneNote notebooks that the signed-in user has access to in the organization.", + "displayName": "Read and write all OneNote notebooks that user can access", + "id": "64ac0503-b4fa-45d9-b544-71a463f05da0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, share, and modify all the OneNote notebooks that you have access to.", + "userConsentDisplayName": "Read and write all OneNote notebooks that you can access", + "value": "Notes.ReadWrite.All" + }, + { + "description": "This is deprecated! Do not use! This permission no longer has any effect. You can safely consent to it. No additional privileges will be granted to the app.", + "displayName": "Limited notebook access (deprecated)", + "id": "ed68249d-017c-4df5-9113-e684c7f8760b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "This permission no longer has any effect. You can safely consent to it. No additional privileges will be granted to the app.", + "userConsentDisplayName": "Limited access to your OneNote notebooks for this app (preview)", + "value": "Notes.ReadWrite.CreatedByApp" + }, + { + "description": "Allows the app to deliver its notifications on behalf of signed-in users. Also allows the app to read, update, and delete the user's notification items for this app.", + "displayName": "Deliver and manage user notifications for this app", + "id": "89497502-6e42-46a2-8cb2-427fd3df970a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to deliver its notifications, on your behalf. Also allows the app to read, update, and delete your notification items for this app.", + "userConsentDisplayName": "Deliver and manage your notifications for this app", + "value": "Notifications.ReadWrite.CreatedByApp" + }, + { + "description": "Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.", + "displayName": "Maintain access to data you have given it access to", + "id": "7427e0e9-2fba-42fe-b0c0-848c9e6a8182", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions.", + "userConsentDisplayName": "Maintain access to data you have given it access to", + "value": "offline_access" + }, + { + "description": "Allows the app to read online meeting artifacts on behalf of the signed-in user.", + "displayName": "Read user's online meeting artifacts", + "id": "110e5abb-a10c-4b59-8b55-9b4daa4ef743", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read online meeting artifacts on your behalf.", + "userConsentDisplayName": "Read user's online meeting artifacts", + "value": "OnlineMeetingArtifact.Read.All" + }, + { + "description": "Allows the app to read all recordings of online meetings, on behalf of the signed-in user.", + "displayName": "Read all recordings of online meetings.", + "id": "190c2bb6-1fdd-4fec-9aa2-7d571b5e1fe3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all recordings of online meetings, on your behalf. ", + "userConsentDisplayName": "Read all recordings of online meetings. ", + "value": "OnlineMeetingRecording.Read.All" + }, + { + "description": "Allows the app to read online meeting details on behalf of the signed-in user.", + "displayName": "Read user's online meetings", + "id": "9be106e1-f4e3-4df5-bdff-e4bc531cbe43", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read online meeting details on your behalf.", + "userConsentDisplayName": "Read your online meetings", + "value": "OnlineMeetings.Read" + }, + { + "description": "Allows the app to read and create online meetings on behalf of the signed-in user.", + "displayName": "Read and create user's online meetings", + "id": "a65f2972-a4f8-4f5e-afd7-69ccb046d5dc", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and create online meetings on your behalf.", + "userConsentDisplayName": "Read and create your online meetings", + "value": "OnlineMeetings.ReadWrite" + }, + { + "description": "Allows the app to read all transcripts of online meetings, on behalf of the signed-in user.", + "displayName": "Read all transcripts of online meetings. ", + "id": "30b87d18-ebb1-45db-97f8-82ccb1f0190c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all transcripts of online meetings, on your behalf.", + "userConsentDisplayName": "Read all transcripts of online meetings.", + "value": "OnlineMeetingTranscript.Read.All" + }, + { + "description": "Allows the app to read all on-premises directory synchronization information for the organization, on behalf of the signed-in user.", + "displayName": "Read all on-premises directory synchronization information", + "id": "f6609722-4100-44eb-b747-e6ca0536989d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all on-premises directory synchronization information for the organization, on your behalf.", + "userConsentDisplayName": "Read all on-premises directory synchronization information", + "value": "OnPremDirectorySynchronization.Read.All" + }, + { + "description": "Allows the app to read and write all on-premises directory synchronization information for the organization, on behalf of the signed-in user.", + "displayName": "Read and write all on-premises directory synchronization information", + "id": "c2d95988-7604-4ba1-aaed-38a5f82a51c7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write all on-premises directory synchronization information for the organization, on your behalf.", + "userConsentDisplayName": "Read and write all on-premises directory synchronization information", + "value": "OnPremDirectorySynchronization.ReadWrite.All" + }, + { + "description": "Allows the app to manage hybrid identity service configuration by creating, viewing, updating and deleting on-premises published resources, on-premises agents and agent groups, on behalf of the signed-in user.", + "displayName": "Manage on-premises published resources", + "id": "8c4d5184-71c2-4bf8-bb9d-bc3378c9ad42", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage hybrid identity service configuration by creating, viewing, updating and deleting on-premises published resources, on-premises agents and agent groups, on your behalf.", + "userConsentDisplayName": "Manage on-premises published resources", + "value": "OnPremisesPublishingProfiles.ReadWrite.All" + }, + { + "description": "Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.", + "displayName": "Sign users in", + "id": "37f7f235-527c-4136-accd-4a02d197296e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows you to sign in to the app with your work or school account and allows the app to read your basic profile information.", + "userConsentDisplayName": "Sign in as you", + "value": "openid" + }, + { + "description": "Allows the app to read the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information.", + "displayName": "Read organization information", + "id": "4908d5b9-3fb2-4b1e-9336-1888b7937185", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the organization and related resources, on your behalf. Related resources include things like subscribed skus and tenant branding information.", + "userConsentDisplayName": "Read organization information", + "value": "Organization.Read.All" + }, + { + "description": "Allows the app to read and write the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information.", + "displayName": "Read and write organization information", + "id": "46ca0847-7e6b-426e-9775-ea810a948356", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the organization and related resources, on your behalf. Related resources include things like subscribed skus and tenant branding information.", + "userConsentDisplayName": "Read and write organization information", + "value": "Organization.ReadWrite.All" + }, + { + "description": "Allows the app to read all organizational contacts on behalf of the signed-in user.  These contacts are managed by the organization and are different from a user's personal contacts.", + "displayName": "Read organizational contacts", + "id": "08432d1b-5911-483c-86df-7980af5cdee0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all organizational contacts on your behalf.  These contacts are managed by the organization and are different from your personal contacts.", + "userConsentDisplayName": "Read organizational contacts", + "value": "OrgContact.Read.All" + }, + { + "description": "Allows the app to read organization-wide apps and services settings on behalf of the signed-in user.", + "displayName": "Read organization-wide apps and services settings", + "id": "1e9b7a7e-4d64-44ff-acf5-2e9651c1519f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read organization-wide apps and services settings on your behalf.", + "userConsentDisplayName": "Read organization-wide apps and services settings", + "value": "OrgSettings-AppsAndServices.Read.All" + }, + { + "description": "Allows the app to read and write organization-wide apps and services settings on behalf of the signed-in user.", + "displayName": "Read and write organization-wide apps and services settings", + "id": "c167b0e7-47c0-48e8-9eee-9892f58018fa", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write organization-wide apps and services settings on your behalf.", + "userConsentDisplayName": "Read and write organization-wide apps and services settings", + "value": "OrgSettings-AppsAndServices.ReadWrite.All" + }, + { + "description": "Allows the app to read organization-wide Dynamics customer voice settings on behalf of the signed-in user.", + "displayName": "Read organization-wide Dynamics customer voice settings", + "id": "9862d930-5aec-4a98-8d4f-7277a8db9bcb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read organization-wide Dynamics customer voice settings on your behalf.", + "userConsentDisplayName": "Read organization-wide dynamics customer voice settings", + "value": "OrgSettings-DynamicsVoice.Read.All" + }, + { + "description": "Allows the app to read and write organization-wide Dynamics customer voice settings on behalf of the signed-in user.", + "displayName": "Read and write organization-wide Dynamics customer voice settings", + "id": "4cea26fb-6967-4234-82c4-c044414743f8", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write organization-wide Dynamics customer voice settings on your behalf.", + "userConsentDisplayName": "Read and write organization-wide Dynamics customer voice settings", + "value": "OrgSettings-DynamicsVoice.ReadWrite.All" + }, + { + "description": "Allows the app to read organization-wide Microsoft Forms settings on behalf of the signed-in user.", + "displayName": "Read organization-wide Microsoft Forms settings", + "id": "210051a0-1ffc-435c-ae76-02d226d05752", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read organization-wide Microsoft Forms settings on your behalf.", + "userConsentDisplayName": "Read organization-wide Microsoft Forms settings", + "value": "OrgSettings-Forms.Read.All" + }, + { + "description": "Allows the app to read and write organization-wide Microsoft Forms settings on behalf of the signed-in user.", + "displayName": "Read and write organization-wide Microsoft Forms settings", + "id": "346c19ff-3fb2-4e81-87a0-bac9e33990c1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write organization-wide Microsoft Forms settings on your behalf.", + "userConsentDisplayName": "Read and write organization-wide Microsoft Forms settings", + "value": "OrgSettings-Forms.ReadWrite.All" + }, + { + "description": "Allows the app to read organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user.", + "displayName": "Read organization-wide Microsoft 365 apps installation settings", + "id": "8cbdb9f6-9c2e-451a-814d-ec606e5d0212", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read organization-wide Microsoft 365 apps installation settings on your behalf.", + "userConsentDisplayName": "Read organization-wide Microsoft 365 apps installation settings", + "value": "OrgSettings-Microsoft365Install.Read.All" + }, + { + "description": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user.", + "displayName": "Read and write organization-wide Microsoft 365 apps installation settings", + "id": "1ff35e91-19eb-42d8-aa2d-cc9891127ae5", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings on your behalf.", + "userConsentDisplayName": "Read and write organization-wide Microsoft 365 apps installation settings", + "value": "OrgSettings-Microsoft365Install.ReadWrite.All" + }, + { + "description": "Allows the app to read organization-wide Microsoft To Do settings on behalf of the signed-in user.", + "displayName": "Read organization-wide Microsoft To Do settings", + "id": "7ff96f41-f022-45ba-acd8-ef3f03063d6b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read organization-wide Microsoft To Do settings on your behalf.", + "userConsentDisplayName": "Read organization-wide Microsoft To Do settings", + "value": "OrgSettings-Todo.Read.All" + }, + { + "description": "Allows the app to read and write organization-wide Microsoft To Do settings on behalf of the signed-in user.", + "displayName": "Read and write organization-wide Microsoft To Do settings", + "id": "087502c2-5263-433e-abe3-8f77231a0627", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write organization-wide Microsoft To Do settings on your behalf.", + "userConsentDisplayName": "Read and write organization-wide Microsoft To Do settings", + "value": "OrgSettings-Todo.ReadWrite.All" + }, + { + "description": "Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).", + "displayName": "Read users' relevant people lists", + "id": "ba47897c-39ec-4d83-8086-ee8256fa737d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read a list of people in the order that's most relevant to you. This includes your local contacts, your contacts from social networking, people listed in your organization's directory, and people from recent communications.", + "userConsentDisplayName": "Read your relevant people list", + "value": "People.Read" + }, + { + "description": "Allows the app to read a scored list of relevant people of the signed-in user or other users in the signed-in user's organization. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).", + "displayName": "Read all users' relevant people lists", + "id": "b89f9189-71a5-4e70-b041-9887f0bc7e4a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read a list of people in the order that is most relevant to you. Allows the app to read a list of people in the order that is most relevant to another user in your organization. These can include local contacts, contacts from social networking, people listed in your organization’s directory, and people from recent communications.", + "userConsentDisplayName": "Read all users’ relevant people lists", + "value": "People.Read.All" + }, + { + "description": "Allows the application to read tenant-wide people settings on behalf of the signed-in user.", + "displayName": "Read tenant-wide people settings", + "id": "ec762c5f-388b-4b16-8693-ac1efbc611bc", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read tenant-wide people settings on your behalf.", + "userConsentDisplayName": "Read tenant-wide people settings", + "value": "PeopleSettings.Read.All" + }, + { + "description": "Allows the application to read and write tenant-wide people settings on behalf of the signed-in user.", + "displayName": "Read and write tenant-wide people settings", + "id": "e67e6727-c080-415e-b521-e3f35d5248e9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and write tenant-wide people settings on your behalf.", + "userConsentDisplayName": "Read and write tenant-wide people settings", + "value": "PeopleSettings.ReadWrite.All" + }, + { + "description": "Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.", + "displayName": "Read all company places", + "id": "cb8f45a0-5c2e-4ea1-b803-84b870a7d7ec", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on your behalf.", + "userConsentDisplayName": "Read all company places", + "value": "Place.Read.All" + }, + { + "description": "Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.", + "displayName": "Read and write organization places", + "id": "4c06a06a-098a-4063-868e-5dfee3827264", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on your behalf.", + "userConsentDisplayName": "Read and write organization places", + "value": "Place.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization's policies on behalf of the signed-in user.", + "displayName": "Read your organization's policies", + "id": "572fea84-0151-49b2-9301-11cb16974376", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's policies on your behalf.", + "userConsentDisplayName": "Read your organization's policies", + "value": "Policy.Read.All" + }, + { + "description": "Allows the app to read your organization's conditional access policies on behalf of the signed-in user.", + "displayName": "Read your organization's conditional access policies", + "id": "633e0fce-8c58-4cfb-9495-12bbd5a24f7c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's conditional access policies on your behalf.", + "userConsentDisplayName": "Read your organization's conditional access policies", + "value": "Policy.Read.ConditionalAccess" + }, + { + "description": "Allows the app to read your organization’s identity protection policy on behalf of the signed-in user. ", + "displayName": "Read your organization’s identity protection policy", + "id": "d146432f-b803-4ed4-8d42-ba74193a6ede", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization’s identity protection policy on your behalf.", + "userConsentDisplayName": "Read your organization’s identity protection policy", + "value": "Policy.Read.IdentityProtection" + }, + { + "description": "Allows the app to read policies related to consent and permission grants for applications, on behalf of the signed-in user.", + "displayName": "Read consent and permission grant policies", + "id": "414de6ea-2d92-462f-b120-6e2a809a6d01", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read policies related to consent and permission grants for applications, on your behalf.", + "userConsentDisplayName": "Read consent and permission grant policies", + "value": "Policy.Read.PermissionGrant" + }, + { + "description": "Allows the app to read and write your organization's directory access review default policy on behalf of the signed-in user.", + "displayName": "Read and write your organization's directory access review default policy", + "id": "4f5bc9c8-ea54-4772-973a-9ca119cb0409", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's directory access review default policy on your behalf.", + "userConsentDisplayName": "Read and write your organization's directory access review default policy", + "value": "Policy.ReadWrite.AccessReview" + }, + { + "description": "Allows the app to read and write your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", + "displayName": "Read and write your organization's application configuration policies", + "id": "b27add92-efb2-4f16-84f5-8108ba77985c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's application configuration policies on your behalf. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", + "userConsentDisplayName": "Read and write your organization's application configuration policies", + "value": "Policy.ReadWrite.ApplicationConfiguration" + }, + { + "description": "Allows the app to read and write the authentication flow policies, on behalf of the signed-in user. ", + "displayName": "Read and write authentication flow policies", + "id": "edb72de9-4252-4d03-a925-451deef99db7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the authentication flow policies for your tenant, on your behalf.", + "userConsentDisplayName": "Read and write your authentication flow policies", + "value": "Policy.ReadWrite.AuthenticationFlows" + }, + { + "description": "Allows the app to read and write the authentication method policies, on behalf of the signed-in user. ", + "displayName": "Read and write authentication method policies", + "id": "7e823077-d88e-468f-a337-e18f1f0e6c7c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the authentication method policies for your tenant, on your behalf.", + "userConsentDisplayName": "Read and write your authentication method policies ", + "value": "Policy.ReadWrite.AuthenticationMethod" + }, + { + "description": "Allows the app to read and write your organization's authorization policy on behalf of the signed-in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.", + "displayName": "Read and write your organization's authorization policy", + "id": "edd3c878-b384-41fd-95ad-e7407dd775be", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's authorization policy on your behalf. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.", + "userConsentDisplayName": "Read and write your organization's authorization policy", + "value": "Policy.ReadWrite.Authorization" + }, + { + "description": "Allows the app to read and write your organization's conditional access policies on behalf of the signed-in user.", + "displayName": "Read and write your organization's conditional access policies", + "id": "ad902697-1014-4ef5-81ef-2b4301988e8c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's conditional access policies on your behalf.", + "userConsentDisplayName": "Read and write your organization's conditional access policies", + "value": "Policy.ReadWrite.ConditionalAccess" + }, + { + "description": "Allows the app to read and write your organization's consent requests policy on behalf of the signed-in user.", + "displayName": "Read and write consent request policy", + "id": "4d135e65-66b8-41a8-9f8b-081452c91774", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's consent request policy on your behalf.", + "userConsentDisplayName": "Read and write consent request policy", + "value": "Policy.ReadWrite.ConsentRequest" + }, + { + "description": "Allows the app to read and write your organization's cross tenant access policies on behalf of the signed-in user.", + "displayName": "Read and write your organization's cross tenant access policies", + "id": "014b43d0-6ed4-4fc6-84dc-4b6f7bae7d85", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's cross tenant access policies on your behalf.", + "userConsentDisplayName": "Read and write your organization's cross tenant access policies", + "value": "Policy.ReadWrite.CrossTenantAccess" + }, + { + "description": "Allows the app to read and write your organization's device configuration policies on behalf of the signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.", + "displayName": "Read and write your organization's device configuration policies", + "id": "40b534c3-9552-4550-901b-23879c90bcf9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's device configuration policies on your behalf. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.", + "userConsentDisplayName": "Read and write your organization's device configuration policies", + "value": "Policy.ReadWrite.DeviceConfiguration" + }, + { + "description": "Allows the application to read and update the organization's external identities policy on behalf of the signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.", + "displayName": "Read and write your organization's external identities policy", + "id": "b5219784-1215-45b5-b3f1-88fe1081f9c0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and update the organization's external identities policy on your behalf. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.", + "userConsentDisplayName": "Read and write your organization's external identities policy", + "value": "Policy.ReadWrite.ExternalIdentities" + }, + { + "description": "Allows the app to read and write your organization's feature rollout policies on behalf of the signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.", + "displayName": "Read and write your organization's feature rollout policies", + "id": "92a38652-f13b-4875-bc77-6e1dbb63e1b2", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's feature rollout policies on your behalf. Includes abilities to assign and remove users and groups to rollout of a specific feature.", + "userConsentDisplayName": "Read and write your organization's feature rollout policies", + "value": "Policy.ReadWrite.FeatureRollout" + }, + { + "description": "Allows the app to read and write your organization’s identity protection policy on behalf of the signed-in user.", + "displayName": "Read and write your organization’s identity protection policy ", + "id": "7256e131-3efb-4323-9854-cf41c6021770", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization’s identity protection policy on your behalf.", + "userConsentDisplayName": "Read and write your organization’s identity protection policy.", + "value": "Policy.ReadWrite.IdentityProtection" + }, + { + "description": "Allows the app to read and write your organization's mobility management policies on behalf of the signed-in user. For example, a mobility management policy can set the enrollment scope for a given mobility management application.", + "displayName": "Read and write your organization's mobility management policies", + "id": "a8ead177-1889-4546-9387-f25e658e2a79", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's mobility management policies on your behalf. For example, a mobility management policy can set the enrollment scope for a given mobility management application.", + "userConsentDisplayName": "Read and write your organization's mobility management policies", + "value": "Policy.ReadWrite.MobilityManagement" + }, + { + "description": "Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user.", + "displayName": "Manage consent and permission grant policies", + "id": "2672f8bb-fd5e-42e0-85e1-ec764dd2614e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user.", + "userConsentDisplayName": "Manage consent and permission grant policies", + "value": "Policy.ReadWrite.PermissionGrant" + }, + { + "description": "Allows the app to read and write your organization's security defaults policy on behalf of the signed-in user.", + "displayName": "Read and write your organization's security defaults policy", + "id": "0b2a744c-2abf-4f1e-ad7e-17a087e2be99", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's security defaults policy on your behalf.", + "userConsentDisplayName": "Read and write your organization's security defaults policy", + "value": "Policy.ReadWrite.SecurityDefaults" + }, + { + "description": "Allows the app to read and write your organization's trust framework policies on behalf of the signed-in user.", + "displayName": "Read and write your organization's trust framework policies", + "id": "cefba324-1a70-4a6e-9c1d-fd670b7ae392", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your organization's trust framework policies on your behalf.", + "userConsentDisplayName": "Read and write trust framework policies", + "value": "Policy.ReadWrite.TrustFramework" + }, + { + "description": "Allows the app to have the same access to mailboxes as the signed-in user via POP protocol.", + "displayName": "Read and write access to mailboxes via POP.", + "id": "d7b7f2d9-0f45-4ea1-9d42-e50810c06991", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.", + "userConsentDisplayName": "Read and write access to your mail.", + "value": "POP.AccessAsUser.All" + }, + { + "description": "Allows the app to read presence information on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", + "displayName": "Read user's presence information", + "id": "76bc735e-aecd-4a1d-8b4c-2b915deabb79", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your presence information on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", + "userConsentDisplayName": "Read your presence information", + "value": "Presence.Read" + }, + { + "description": "Allows the app to read presence information of all users in the directory on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", + "displayName": "Read presence information of all users in your organization", + "id": "9c7a330d-35b3-4aa1-963d-cb2b9f927841", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read presence information of all users in the directory on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", + "userConsentDisplayName": "Read presence information of all users in your organization", + "value": "Presence.Read.All" + }, + { + "description": "Allows the app to read the presence information and write activity and availability on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", + "displayName": "Read and write a user's presence information", + "id": "8d3c54a7-cf58-4773-bf81-c0cd6ad522bb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the presence information and write activity and availability on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.", + "userConsentDisplayName": "Read and write your presence information", + "value": "Presence.ReadWrite" + }, + { + "description": "Allows the application to read print connectors on behalf of the signed-in user.", + "displayName": "Read print connectors", + "id": "d69c2d6d-4f72-4f99-a6b9-663e32f8cf68", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read print connectors on your behalf.", + "userConsentDisplayName": "Read print connectors", + "value": "PrintConnector.Read.All" + }, + { + "description": "Allows the application to read and write print connectors on behalf of the signed-in user. ", + "displayName": "Read and write print connectors", + "id": "79ef9967-7d59-4213-9c64-4b10687637d8", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and write print connectors on your behalf.", + "userConsentDisplayName": "Read and write print connectors", + "value": "PrintConnector.ReadWrite.All" + }, + { + "description": "Allows the application to create (register) printers on behalf of the signed-in user. ", + "displayName": "Register printers  ", + "id": "90c30bed-6fd1-4279-bf39-714069619721", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to create (register) printers on your behalf. ", + "userConsentDisplayName": "Register printers  ", + "value": "Printer.Create" + }, + { + "description": "Allows the application to create (register), read, update, and delete (unregister) printers on behalf of the signed-in user. ", + "displayName": "Register, read, update, and unregister printers", + "id": "93dae4bd-43a1-4a23-9a1a-92957e1d9121", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to create (register), read, update, and delete (unregister) printers on your behalf.  ", + "userConsentDisplayName": "Register, read, update, and unregister printers", + "value": "Printer.FullControl.All" + }, + { + "description": "Allows the application to read printers on behalf of the signed-in user. ", + "displayName": "Read printers", + "id": "3a736c8a-018e-460a-b60c-863b2683e8bf", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read printers on your behalf. ", + "userConsentDisplayName": "Read printers", + "value": "Printer.Read.All" + }, + { + "description": "Allows the application to read and update printers on behalf of the signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.", + "displayName": "Read and update printers", + "id": "89f66824-725f-4b8f-928e-e1c5258dc565", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and update printers on your behalf. Does not allow creating (registering) or deleting (unregistering) printers.", + "userConsentDisplayName": "Read and update printers", + "value": "Printer.ReadWrite.All" + }, + { + "description": "Allows the application to read printer shares on behalf of the signed-in user. ", + "displayName": "Read printer shares", + "id": "ed11134d-2f3f-440d-a2e1-411efada2502", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read printer shares on your behalf. ", + "userConsentDisplayName": "Read printer shares", + "value": "PrinterShare.Read.All" + }, + { + "description": "Allows the application to read basic information about printer shares on behalf of the signed-in user. Does not allow reading access control information.", + "displayName": "Read basic information about printer shares", + "id": "5fa075e9-b951-4165-947b-c63396ff0a37", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read basic information about printer shares on your behalf.", + "userConsentDisplayName": "Read basic information about printer shares", + "value": "PrinterShare.ReadBasic.All" + }, + { + "description": "Allows the application to read and update printer shares on behalf of the signed-in user. ", + "displayName": "Read and write printer shares", + "id": "06ceea37-85e2-40d7-bec3-91337a46038f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and update printer shares on your behalf. ", + "userConsentDisplayName": "Read and update printer shares", + "value": "PrinterShare.ReadWrite.All" + }, + { + "description": "Allows the application to create print jobs on behalf of the signed-in user and upload document content to print jobs that the signed-in user created.", + "displayName": "Create print jobs", + "id": "21f0d9c0-9f13-48b3-94e0-b6b231c7d320", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to create print jobs on your behalf and upload document content to print jobs that you created.", + "userConsentDisplayName": "Create your print jobs", + "value": "PrintJob.Create" + }, + { + "description": "Allows the application to read the metadata and document content of print jobs that the signed-in user created.", + "displayName": "Read user's print jobs", + "id": "248f5528-65c0-4c88-8326-876c7236df5e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read the metadata and document content of print jobs that you created.", + "userConsentDisplayName": "Read your print jobs", + "value": "PrintJob.Read" + }, + { + "description": "Allows the application to read the metadata and document content of print jobs on behalf of the signed-in user. ", + "displayName": "Read print jobs", + "id": "afdd6933-a0d8-40f7-bd1a-b5d778e8624b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read the metadata and document content of print jobs on your behalf. ", + "userConsentDisplayName": "Read print jobs", + "value": "PrintJob.Read.All" + }, + { + "description": "Allows the application to read the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.", + "displayName": "Read basic information of user's print jobs", + "id": "6a71a747-280f-4670-9ca0-a9cbf882b274", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read the metadata of print jobs that you created. Does not allow access to print job document content.", + "userConsentDisplayName": "Read basic information of your print jobs", + "value": "PrintJob.ReadBasic" + }, + { + "description": "Allows the application to read the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.", + "displayName": "Read basic information of print jobs", + "id": "04ce8d60-72ce-4867-85cf-6d82f36922f3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read the metadata of print jobs on your behalf. Does not allow access to print job document content.", + "userConsentDisplayName": "Read basic information of print jobs", + "value": "PrintJob.ReadBasic.All" + }, + { + "description": "Allows the application to read and update the metadata and document content of print jobs that the signed-in user created.", + "displayName": "Read and write user's print jobs", + "id": "b81dd597-8abb-4b3f-a07a-820b0316ed04", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and update the metadata and document content of print jobs that you created.", + "userConsentDisplayName": "Read and update your print jobs", + "value": "PrintJob.ReadWrite" + }, + { + "description": "Allows the application to read and update the metadata and document content of print jobs on behalf of the signed-in user. ", + "displayName": "Read and write print jobs", + "id": "036b9544-e8c5-46ef-900a-0646cc42b271", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and update the metadata and document content of print jobs on your behalf. ", + "userConsentDisplayName": "Read and update print jobs", + "value": "PrintJob.ReadWrite.All" + }, + { + "description": "Allows the application to read and update the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.", + "displayName": "Read and write basic information of user's print jobs", + "id": "6f2d22f2-1cb6-412c-a17c-3336817eaa82", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and update the metadata of print jobs that you created. Does not allow access to print job document content.", + "userConsentDisplayName": "Read and write basic information of your print jobs", + "value": "PrintJob.ReadWriteBasic" + }, + { + "description": "Allows the application to read and update the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.", + "displayName": "Read and write basic information of print jobs", + "id": "3a0db2f6-0d2a-4c19-971b-49109b19ad3d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and update the metadata of print jobs on your behalf. Does not allow access to print job document content.", + "userConsentDisplayName": "Read and write basic information of print jobs", + "value": "PrintJob.ReadWriteBasic.All" + }, + { + "description": "Allows the application to read tenant-wide print settings on behalf of the signed-in user.", + "displayName": "Read tenant-wide print settings", + "id": "490f32fd-d90f-4dd7-a601-ff6cdc1a3f6c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read tenant-wide print settings on your behalf.", + "userConsentDisplayName": "Read tenant-wide print settings", + "value": "PrintSettings.Read.All" + }, + { + "description": "Allows the application to read and write tenant-wide print settings on behalf of the signed-in user.", + "displayName": "Read and write tenant-wide print settings", + "id": "9ccc526a-c51c-4e5c-a1fd-74726ef50b8f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and write tenant-wide print settings on your behalf.", + "userConsentDisplayName": "Read and write tenant-wide print settings", + "value": "PrintSettings.ReadWrite.All" + }, + { + "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles, on behalf of the signed-in user.", + "displayName": "Read privileged access to Azure AD", + "id": "b3a539c9-59cb-4ad5-825a-041ddbdc2bdb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles, on your behalf.", + "userConsentDisplayName": "Read privileged access to Azure AD", + "value": "PrivilegedAccess.Read.AzureAD" + }, + { + "description": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.", + "displayName": "Read privileged access to Azure AD groups", + "id": "d329c81c-20ad-4772-abf9-3f6fdb7e5988", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on your behalf.", + "userConsentDisplayName": "Read privileged access to Azure AD groups", + "value": "PrivilegedAccess.Read.AzureADGroup" + }, + { + "description": "Allows the app to read time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) on behalf of the signed-in user.", + "displayName": "Read privileged access to Azure resources", + "id": "1d89d70c-dcac-4248-b214-903c457af83a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) on your behalf.", + "userConsentDisplayName": "Read privileged access to your Azure resources", + "value": "PrivilegedAccess.Read.AzureResources" + }, + { + "description": "Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on behalf of signed-in users.", + "displayName": "Read and write privileged access to Azure AD", + "id": "3c3c74f5-cdaa-4a97-b7e0-4e788bfcfb37", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on your behalf.", + "userConsentDisplayName": "Read and write privileged access to Azure AD", + "value": "PrivilegedAccess.ReadWrite.AzureAD" + }, + { + "description": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.", + "displayName": "Read and write privileged access to Azure AD groups", + "id": "32531c59-1f32-461f-b8df-6f8a3b89f73b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on your behalf.", + "userConsentDisplayName": "Read and write privileged access to Azure AD groups", + "value": "PrivilegedAccess.ReadWrite.AzureADGroup" + }, + { + "description": "Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage Azure resources (like subscriptions, resource groups, storage, compute) on behalf of the signed-in users.", + "displayName": "Read and write privileged access to Azure resources", + "id": "a84a9652-ffd3-496e-a991-22ba5529156a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage  your Azure resources (like your subscriptions, resource groups, storage, compute) on your behalf.", + "userConsentDisplayName": "Read and write privileged access to Azure resources", + "value": "PrivilegedAccess.ReadWrite.AzureResources" + }, + { + "description": "Allows the app to read time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.", + "displayName": "Read assignment schedules for access to Azure AD groups", + "id": "02a32cc4-7ab5-4b58-879a-0586e0f7c495", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read time-based assignment schedules for access to Azure AD groups, on your behalf.", + "userConsentDisplayName": "Read assignment schedules for access to Azure AD groups", + "value": "PrivilegedAssignmentSchedule.Read.AzureADGroup" + }, + { + "description": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.", + "displayName": "Read, create, and delete assignment schedules for access to Azure AD groups", + "id": "06dbc45d-6708-4ef0-a797-f797ee68bf4b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on your behalf.", + "userConsentDisplayName": "Read, create, and delete assignment schedules for access to Azure AD groups", + "value": "PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup" + }, + { + "description": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.", + "displayName": "Read eligibility schedules for access to Azure AD groups", + "id": "8f44f93d-ecef-46ae-a9bf-338508d44d6b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, on your behalf.", + "userConsentDisplayName": "Read eligibility schedules for access to Azure AD groups", + "value": "PrivilegedEligibilitySchedule.Read.AzureADGroup" + }, + { + "description": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.", + "displayName": "Read, create, and delete eligibility schedules for access to Azure AD groups", + "id": "ba974594-d163-484e-ba39-c330d5897667", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on your behalf.", + "userConsentDisplayName": "Read, create, and delete eligibility schedules for access to Azure AD groups", + "value": "PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup" + }, + { + "description": "Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)", + "displayName": "View users' basic profile", + "id": "14dad69e-099b-42c9-810b-d002981feec1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to see your basic profile (e.g., name, picture, user name, email address)", + "userConsentDisplayName": "View your basic profile", + "value": "profile" + }, + { + "description": "Allows the app to read programs and program controls that the signed-in user has access to in the organization.", + "displayName": "Read all programs that user can access", + "id": "c492a2e1-2f8f-4caa-b076-99bbf6e40fe4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read information on programs and program controls that you have access to.", + "userConsentDisplayName": "Read programs that you can access", + "value": "ProgramControl.Read.All" + }, + { + "description": "Allows the app to read, update, delete and perform actions on programs and program controls that the signed-in user has access to in the organization.", + "displayName": "Manage all programs that user can access", + "id": "50fd364f-9d93-4ae1-b170-300e87cccf84", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update and perform action on programs and program controls that you have access to.", + "userConsentDisplayName": "Manage programs that you can access", + "value": "ProgramControl.ReadWrite.All" + }, + { + "description": "Allows an app to read all question and answer sets that the signed-in user can access.", + "displayName": "Read all Questions and Answers that the user can access.", + "id": "f73fa04f-b9a5-4df9-8843-993ce928925e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all question and answer sets that you can access.", + "userConsentDisplayName": "Read all Questions and Answers that you can access.", + "value": "QnA.Read.All" + }, + { + "description": "Allows the application to read any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.", + "displayName": "Read Records Management configuration, labels, and policies", + "id": "07f995eb-fc67-4522-ad66-2b8ca8ea3efd", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read any data from Records Management, such as configuration, labels and policies on your behalf.", + "userConsentDisplayName": "Read Records Management configuration, labels, and policies", + "value": "RecordsManagement.Read.All" + }, + { + "description": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.", + "displayName": "Read and write Records Management configuration, labels, and policies", + "id": "f2833d75-a4e6-40ab-86d4-6dfe73c97605", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on your behalf.", + "userConsentDisplayName": "Read and write Records Management configuration, labels, and policies", + "value": "RecordsManagement.ReadWrite.All" + }, + { + "description": "Allows an app to read all service usage reports on behalf of the signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.", + "displayName": "Read all usage reports", + "id": "02e97553-ed7b-43d0-ab3c-f8bace0d040c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read all service usage reports on your behalf. Services that provide usage reports include Office 365 and Azure Active Directory.", + "userConsentDisplayName": "Read all usage reports", + "value": "Reports.Read.All" + }, + { + "description": "Allows the app to read admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user", + "displayName": "Read admin report settings", + "id": "84fac5f4-33a9-4100-aa38-a20c6d29e5e7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read admin report settings, such as whether to display concealed information in reports, on your behalf.", + "userConsentDisplayName": "Read admin report settings", + "value": "ReportSettings.Read.All" + }, + { + "description": "Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user.", + "displayName": "Read and write admin report settings", + "id": "b955410e-7715-4a88-a940-dfd551018df3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on your behalf.", + "userConsentDisplayName": "Read and write admin report settings", + "value": "ReportSettings.ReadWrite.All" + }, + { + "description": "Allows the app to read the resource specific permissions granted on a user account, on behalf of the signed-in user.", + "displayName": "Read resource specific permissions granted on a user account", + "id": "f1d91a8f-88e7-4774-8401-b668d5bca0c5", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the resource specific permission granted on your account, on your behalf.", + "userConsentDisplayName": "Read resource specific permissions granted on your user account", + "value": "ResourceSpecificPermissionGrant.ReadForUser" + }, + { + "description": "Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.", + "displayName": "Read all active role assignments for your company's directory", + "id": "344a729c-0285-42c6-9014-f12b9b8d6129", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes reading directory role templates, and directory roles.", + "userConsentDisplayName": "Read all active role assignments for your company's directory", + "value": "RoleAssignmentSchedule.Read.Directory" + }, + { + "description": "Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships.", + "displayName": "Read, update, and delete all active role assignments for your company's directory", + "id": "8c026be3-8e26-4774-9372-8d5d6f21daff", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships.", + "userConsentDisplayName": "Read, update, and delete all active role assignments for your company's directory", + "value": "RoleAssignmentSchedule.ReadWrite.Directory" + }, + { + "description": "Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.", + "displayName": "Read all eligible role assignments for your company's directory", + "id": "eb0788c2-6d4e-4658-8c9e-c0fb8053f03d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes reading directory role templates, and directory roles.", + "userConsentDisplayName": "Read all eligible role assignments for your company's directory", + "value": "RoleEligibilitySchedule.Read.Directory" + }, + { + "description": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.", + "displayName": "Read, update, and delete all eligible role assignments for your company's directory", + "id": "62ade113-f8e0-4bf9-a6ba-5acb31db32fd", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.", + "userConsentDisplayName": "Read, update, and delete all eligible role assignments for your company's directory", + "value": "RoleEligibilitySchedule.ReadWrite.Directory" + }, + { + "description": "Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on behalf of the signed-in user. This includes reading role definitions and role assignments.", + "displayName": "Read role management data for all RBAC providers", + "id": "48fec646-b2ba-4019-8681-8eb31435aded", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on your behalf. This includes reading role definitions and role assignments.", + "userConsentDisplayName": "Read role management data for all RBAC providers", + "value": "RoleManagement.Read.All" + }, + { + "description": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user.  This includes reading Cloud PC role definitions and role assignments.", + "displayName": "Read Cloud PC RBAC settings", + "id": "9619b88a-8a25-48a7-9571-d23be0337a79", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, on your behalf.  This includes reading Cloud PC role definitions and role assignments.", + "userConsentDisplayName": "Read Cloud PC RBAC settings", + "value": "RoleManagement.Read.CloudPC" + }, + { + "description": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, directory roles and memberships.", + "displayName": "Read directory RBAC settings", + "id": "741c54c3-0c1e-44a1-818b-3f97ab4e8c83", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on your behalf. This includes reading directory role templates, directory roles and memberships.", + "userConsentDisplayName": "Read directory RBAC settings", + "value": "RoleManagement.Read.Directory" + }, + { + "description": "Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", + "displayName": "Read Exchange Online RBAC configuration", + "id": "3bc15058-7858-4141-b24f-ae43b4e80b52", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on your behalf. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", + "userConsentDisplayName": "Read Exchange Online RBAC configuration", + "value": "RoleManagement.Read.Exchange" + }, + { + "description": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user. This includes reading and managing Cloud PC role definitions and role assignments.", + "displayName": "Read and write Cloud PC RBAC settings", + "id": "501d06f8-07b8-4f18-b5c6-c191a4af7a82", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on your behalf. This includes reading and managing Cloud PC role definitions and memberships.", + "userConsentDisplayName": "Read and write Cloud PC RBAC settings", + "value": "RoleManagement.ReadWrite.CloudPC" + }, + { + "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.", + "displayName": "Read and write directory RBAC settings", + "id": "d01b97e9-cbc0-49fe-810a-750afd5527a3", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on your behalf. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.", + "userConsentDisplayName": "Read and write directory RBAC settings", + "value": "RoleManagement.ReadWrite.Directory" + }, + { + "description": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", + "displayName": "Read and write Exchange Online RBAC configuration", + "id": "c1499fe0-52b1-4b22-bed2-7a244e0e879f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on your behalf. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.", + "userConsentDisplayName": "Read and write Exchange Online RBAC configuration", + "value": "RoleManagement.ReadWrite.Exchange" + }, + { + "description": "Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", + "displayName": "Read all alert data for your company's directory", + "id": "cce71173-f76d-446e-97ff-efb2d82e11b1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on your behalf. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", + "userConsentDisplayName": "Read all alert data for your company's directory", + "value": "RoleManagementAlert.Read.Directory" + }, + { + "description": "Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", + "displayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory", + "id": "435644c6-a5b1-40bf-8f52-fe8e5b53e19c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on your behalf. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.", + "userConsentDisplayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory", + "value": "RoleManagementAlert.ReadWrite.Directory" + }, + { + "description": "Allows the app to read policies in Privileged Identity Management for Groups, on behalf of the signed-in user.", + "displayName": "Read all policies in PIM for Groups", + "id": "7e26fdff-9cb1-4e56-bede-211fe0e420e8", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read policies in Privileged Identity Management for Groups, on your behalf.", + "userConsentDisplayName": "Read all policies in PIM for Groups", + "value": "RoleManagementPolicy.Read.AzureADGroup" + }, + { + "description": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.", + "displayName": "Read all policies for privileged role assignments of your company's directory", + "id": "3de2cdbe-0ff5-47d5-bdee-7f45b4749ead", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on your behalf.", + "userConsentDisplayName": "Read all policies for privileged role assignments of your company's directory", + "value": "RoleManagementPolicy.Read.Directory" + }, + { + "description": "Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, on behalf of the signed-in user.", + "displayName": "Read, update, and delete all policies in PIM for Groups", + "id": "0da165c7-3f15-4236-b733-c0b0f6abe41d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, on your behalf.", + "userConsentDisplayName": "Read, update, and delete all policies in PIM for Groups", + "value": "RoleManagementPolicy.ReadWrite.AzureADGroup" + }, + { + "description": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.", + "displayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", + "id": "1ff1be21-34eb-448c-9ac9-ce1f506b2a68", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on your behalf.", + "userConsentDisplayName": "Read, update, and delete all policies for privileged role assignments of your company's directory", + "value": "RoleManagementPolicy.ReadWrite.Directory" + }, + { + "description": "Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.", + "displayName": "Read user schedule items", + "id": "fccf6dd8-5706-49fa-811f-69e2e1b585d0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on your behalf.", + "userConsentDisplayName": "Read your schedule items", + "value": "Schedule.Read.All" + }, + { + "description": "Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.", + "displayName": "Read and write user schedule items", + "id": "63f27281-c9d9-4f29-94dd-6942f7f1feb0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on your behalf.", + "userConsentDisplayName": "Read and write your schedule items", + "value": "Schedule.ReadWrite.All" + }, + { + "description": "Allows the app to read search configuration, on behalf of the signed-in user.", + "displayName": "Read your organization's search configuration", + "id": "7d307522-aa38-4cd0-bd60-90c6f0ac50bd", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read search configuration, on your behalf.", + "userConsentDisplayName": "Read your organization's search configuration", + "value": "SearchConfiguration.Read.All" + }, + { + "description": "Allows the app to read and write search configuration, on behalf of the signed-in user.", + "displayName": "Read and write your organization's search configuration", + "id": "b1a7d408-cab0-47d2-a2a5-a74a3733600d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write search configuration, on your behalf.", + "userConsentDisplayName": "Read and write your organization's search configuration", + "value": "SearchConfiguration.ReadWrite.All" + }, + { + "description": "Allows the app to read security actions, on behalf of the signed-in user.", + "displayName": "Read your organization's security actions", + "id": "1638cddf-07a4-4de2-8645-69c96cacad73", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read security actions, on your behalf.", + "userConsentDisplayName": "Read your organization's security actions", + "value": "SecurityActions.Read.All" + }, + { + "description": "Allows the app to read or update security actions, on behalf of the signed-in user.", + "displayName": "Read and update your organization's security actions", + "id": "dc38509c-b87d-4da0-bd92-6bec988bac4a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and update security actions, on your behalf.", + "userConsentDisplayName": "Read and update your organization's security actions", + "value": "SecurityActions.ReadWrite.All" + }, + { + "description": "Allows the app to read all security alerts, on behalf of the signed-in user.", + "displayName": "Read all security alerts", + "id": "bc257fb8-46b4-4b15-8713-01e91bfbe4ea", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all security alerts that you have access to.", + "userConsentDisplayName": "Read all alerts", + "value": "SecurityAlert.Read.All" + }, + { + "description": "Allows the app to read and write to all security alerts, on behalf of the signed-in user.", + "displayName": "Read and write to all security alerts", + "id": "471f2a7f-2a42-4d45-a2bf-594d0838070d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write all alerts that you have access to.", + "userConsentDisplayName": "Read and write all alerts", + "value": "SecurityAlert.ReadWrite.All" + }, + { + "description": "Read email metadata and security detection details on behalf of the signed in user.", + "displayName": "Read metadata and detection details for emails in your organization", + "id": "53e6783e-b127-4a35-ab3a-6a52d80a9077", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read email metadata and security detection details on your behalf.", + "userConsentDisplayName": "Read metadata and detection details for emails in your organization", + "value": "SecurityAnalyzedMessage.Read.All" + }, + { + "description": "Read email metadata, security detection details, and execute remediation actions like deleting an email, on behalf of the signed in user.", + "displayName": "Read metadata, detection details, and execute remediation actions on emails in your organization", + "id": "48eb8c83-6e58-46e7-a6d3-8805822f5940", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read email metadata, security detection details, and execute remediation actions like deleting an email, on your behalf.", + "userConsentDisplayName": "Read metadata, detection details, and execute remediation actions on emails in your organization", + "value": "SecurityAnalyzedMessage.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization’s security events on behalf of the signed-in user.", + "displayName": "Read your organization’s security events", + "id": "64733abd-851e-478a-bffb-e47a14b18235", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization’s security events on your behalf.", + "userConsentDisplayName": "Read your organization’s security events", + "value": "SecurityEvents.Read.All" + }, + { + "description": "Allows the app to read your organization’s security events on behalf of the signed-in user. Also allows the app to update editable properties in security events on behalf of the signed-in user.", + "displayName": "Read and update your organization’s security events", + "id": "6aedf524-7e1c-45a7-bd76-ded8cab8d0fc", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization’s security events on your behalf. Also allows you to update editable properties in security events.", + "userConsentDisplayName": "Read and update your organization’s security events", + "value": "SecurityEvents.ReadWrite.All" + }, + { + "description": "Allows the app to read security incidents, on behalf of the signed-in user.", + "displayName": "Read incidents", + "id": "b9abcc4f-94fc-4457-9141-d20ce80ec952", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all security incidents that you have access to.", + "userConsentDisplayName": "Read security incidents", + "value": "SecurityIncident.Read.All" + }, + { + "description": "Allows the app to read and write security incidents, on behalf of the signed-in user.", + "displayName": "Read and write to incidents", + "id": "128ca929-1a19-45e6-a3b8-435ec44a36ba", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write to all security incidents that you have access to.", + "userConsentDisplayName": "Read and write to security incidents", + "value": "SecurityIncident.ReadWrite.All" + }, + { + "description": "Allows the app to read your tenant's service health information on behalf of the signed-in user. Health information may include service issues or service health overviews.", + "displayName": "Read service health", + "id": "55896846-df78-47a7-aa94-8d3d4442ca7f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your tenant's service health information on your behalf.Health information may include service issues or service health overviews.", + "userConsentDisplayName": "Read service health", + "value": "ServiceHealth.Read.All" + }, + { + "description": "Allows the app to read your tenant's service announcement messages on behalf of the signed-in user. Messages may include information about new or changed features.", + "displayName": "Read service announcement messages", + "id": "eda39fa6-f8cf-4c3c-a909-432c683e4c9b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your tenant's service announcement messages on your behalf. Messages may include information about new or changed features.", + "userConsentDisplayName": "Read service messages", + "value": "ServiceMessage.Read.All" + }, + { + "description": "Allows the app to update service announcement messages' user status on behalf of the signed-in user. The message status can be marked as read, archive, or favorite.", + "displayName": "Update user status on service announcement messages", + "id": "636e1b0b-1cc2-4b1c-9aa9-4eeed9b9761b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to update service announcement messages' status on your behalf. Your status for messages can be marked as read, archive, or favorite.", + "userConsentDisplayName": "Update your user status on service announcement messages", + "value": "ServiceMessageViewpoint.Write" + }, + { + "description": "Allows the app to read service principal endpoints", + "displayName": "Read service principal endpoints", + "id": "9f9ce928-e038-4e3b-8faf-7b59049a8ddc", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read service principal endpoints", + "userConsentDisplayName": "Read service principal endpoints", + "value": "ServicePrincipalEndpoint.Read.All" + }, + { + "description": "Allows the app to update service principal endpoints", + "displayName": "Read and update service principal endpoints", + "id": "7297d82c-9546-4aed-91df-3d4f0a9b3ff0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to update service principal endpoints", + "userConsentDisplayName": "Read and update service principal endpoints", + "value": "ServicePrincipalEndpoint.ReadWrite.All" + }, + { + "description": "Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user.", + "displayName": "Read SharePoint and OneDrive tenant settings", + "id": "2ef70e10-5bfd-4ede-a5f6-67720500b258", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read the tenant-level settings in SharePoint and OneDrive on your behalf.", + "userConsentDisplayName": "Read SharePoint and OneDrive tenant settings", + "value": "SharePointTenantSettings.Read.All" + }, + { + "description": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on behalf of the signed-in user.", + "displayName": "Read and change SharePoint and OneDrive tenant settings", + "id": "aa07f155-3612-49b8-a147-6c590df35536", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on your behalf.", + "userConsentDisplayName": "Read and change SharePoint and OneDrive tenant settings", + "value": "SharePointTenantSettings.ReadWrite.All" + }, + { + "description": "Allows the app to read all the short notes a sign-in user has access to.", + "displayName": "Read short notes of the signed-in user", + "id": "50f66e47-eb56-45b7-aaa2-75057d9afe08", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your short notes.", + "userConsentDisplayName": "Read your short notes", + "value": "ShortNotes.Read" + }, + { + "description": "Allows the app to read, create, edit, and delete short notes of a signed-in user.", + "displayName": "Read, create, edit, and delete short notes of the signed-in user", + "id": "328438b7-4c01-4c07-a840-e625a749bb89", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, create, edit, and delete your short notes.", + "userConsentDisplayName": "Read, create, edit, and delete your short notes", + "value": "ShortNotes.ReadWrite" + }, + { + "description": "Allows the application to have full control of all site collections on behalf of the signed-in user.", + "displayName": "Have full control of all site collections", + "id": "5a54b8b3-347c-476d-8f8e-42d5c7424d29", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allow the application to have full control of all site collections on your behalf.", + "userConsentDisplayName": "Have full control of all your site collections", + "value": "Sites.FullControl.All" + }, + { + "description": "Allows the application to create or delete document libraries and lists in all site collections on behalf of the signed-in user.", + "displayName": "Create, edit, and delete items and lists in all site collections", + "id": "65e50fdc-43b7-4915-933e-e8138f11f40a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allow the application to create or delete document libraries and lists in all site collections on your behalf.", + "userConsentDisplayName": "Create, edit, and delete items and lists in all your site collections", + "value": "Sites.Manage.All" + }, + { + "description": "Allows the application to read documents and list items in all site collections on behalf of the signed-in user", + "displayName": "Read items in all site collections", + "id": "205e70e5-aba6-4c52-a976-6d2d46c48043", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allow the application to read documents and list items in all site collections on your behalf", + "userConsentDisplayName": "Read items in all site collections", + "value": "Sites.Read.All" + }, + { + "description": "Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user.", + "displayName": "Edit or delete items in all site collections", + "id": "89fe6a52-be36-487e-b7d8-d061c450a026", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allow the application to edit or delete documents and list items in all site collections on your behalf.", + "userConsentDisplayName": "Edit or delete items in all site collections", + "value": "Sites.ReadWrite.All" + }, + { + "description": "Allows the app to be able to send emails from the user’s mailbox using the SMTP AUTH client submission protocol.", + "displayName": "Send emails from mailboxes using SMTP AUTH.", + "id": "258f6531-6087-4cc4-bb90-092c5fb3ed3f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to send emails on your behalf from your mailbox.", + "userConsentDisplayName": "Access to sending emails from your mailbox.", + "value": "SMTP.Send" + }, + { + "description": "Allows the app to read subject rights requests on behalf of the signed-in user", + "displayName": "Read subject rights requests", + "id": "9c3af74c-fd0f-4db4-b17a-71939e2a9d77", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read subject rights requests on your behalf.", + "userConsentDisplayName": "Read data subject requests", + "value": "SubjectRightsRequest.Read.All" + }, + { + "description": "Allows the app to read and write subject rights requests on behalf of the signed-in user", + "displayName": "Read and write subject rights requests", + "id": "2b8fcc74-bce1-4ae3-a0e8-60c53739299d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write subject rights requests on your behalf.", + "userConsentDisplayName": "Read and write data subject requests", + "value": "SubjectRightsRequest.ReadWrite.All" + }, + { + "description": "Allows the app to read all webhook subscriptions on behalf of the signed-in user.", + "displayName": "Read all webhook subscriptions ", + "id": "5f88184c-80bb-4d52-9ff2-757288b2e9b7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all webhook subscriptions on your behalf.", + "userConsentDisplayName": "Read all webhook subscriptions ", + "value": "Subscription.Read.All" + }, + { + "description": "Allows the app to read Azure AD synchronization information, on behalf of the signed-in user.", + "displayName": "Read all Azure AD synchronization data", + "id": "7aa02aeb-824f-4fbe-a3f7-611f751f5b55", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read Azure AD synchronization information, on your behalf.", + "userConsentDisplayName": "Read all Azure AD synchronization data", + "value": "Synchronization.Read.All" + }, + { + "description": "Allows the app to configure the Azure AD synchronization service, on behalf of the signed-in user.", + "displayName": "Read and write all Azure AD synchronization data", + "id": "7bb27fa3-ea8f-4d67-a916-87715b6188bd", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to configure the Azure AD synchronization service, on your behalf.", + "userConsentDisplayName": "Read and write all Azure AD synchronization data", + "value": "Synchronization.ReadWrite.All" + }, + { + "description": "Allows the app to upload bulk user data to the identity synchronization service, on behalf of the signed-in user.", + "displayName": "Upload user data to the identity synchronization service", + "id": "1a2e7420-4e92-4d2b-94cb-fb2952e9ddf7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to upload bulk user data to the identity synchronization service, on your behalf.", + "userConsentDisplayName": "Bulk upload user data to identity synchronization service", + "value": "SynchronizationData-User.Upload" + }, + { + "description": "Allows the app to read the signed-in user’s tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything.", + "displayName": "Read user's tasks and task lists", + "id": "f45671fb-e0fe-4b4b-be20-3d3ce43f1bcb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your tasks and task lists, including any shared with you. Doesn't include permission to create, delete, or update anything.", + "userConsentDisplayName": "Read your tasks and task lists", + "value": "Tasks.Read" + }, + { + "description": "Allows the app to read tasks a user has permissions to access, including their own and shared tasks.", + "displayName": "Read user and shared tasks", + "id": "88d21fd4-8e5a-4c32-b5e2-4a1c95f34f72", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read tasks you have permissions to access, including your own and shared tasks.", + "userConsentDisplayName": "Read your and shared tasks", + "value": "Tasks.Read.Shared" + }, + { + "description": "Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.", + "displayName": "Create, read, update, and delete user’s tasks and task lists", + "id": "2219042f-cab5-40cc-b0d2-16b1540b4c5f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create, read, update, and delete your tasks and task lists, including any shared with you.", + "userConsentDisplayName": "Create, read, update, and delete your tasks and task lists", + "value": "Tasks.ReadWrite" + }, + { + "description": "Allows the app to create, read, update, and delete tasks a user has permissions to, including their own and shared tasks.", + "displayName": "Read and write user and shared tasks", + "id": "c5ddf11b-c114-4886-8558-8a4e557cd52b", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update, create, and delete tasks you have permissions to access, including your own and shared tasks.", + "userConsentDisplayName": "Read and write to your and shared tasks", + "value": "Tasks.ReadWrite.Shared" + }, + { + "description": "Allows the app to create teams on behalf of the signed-in user.", + "displayName": "Create teams", + "id": "7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create teams on your behalf. ", + "userConsentDisplayName": "Create teams", + "value": "Team.Create" + }, + { + "description": "Read the names and descriptions of teams, on behalf of the signed-in user.", + "displayName": "Read the names and descriptions of teams", + "id": "485be79e-c497-4b35-9400-0e3fa7f2a5d4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read the names and descriptions of teams, on your behalf.", + "userConsentDisplayName": "Read the names and descriptions of teams", + "value": "Team.ReadBasic.All" + }, + { + "description": "Read the members of teams, on behalf of the signed-in user.", + "displayName": "Read the members of teams", + "id": "2497278c-d82d-46a2-b1ce-39d4cdde5570", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read the members of teams, on your behalf.", + "userConsentDisplayName": "Read the members of teams", + "value": "TeamMember.Read.All" + }, + { + "description": "Add and remove members from teams, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.", + "displayName": "Add and remove members from teams", + "id": "4a06efd2-f825-4e34-813e-82a57b03d1ee", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Add and remove members from teams, on your behalf. Also allows changing a member's role, for example from owner to non-owner.", + "userConsentDisplayName": "Add and remove members from teams and channels", + "value": "TeamMember.ReadWrite.All" + }, + { + "description": "Add and remove members from all teams, on behalf of the signed-in user. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.", + "displayName": "Add and remove members with non-owner role for all teams", + "id": "2104a4db-3a2f-4ea0-9dba-143d457dc666", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Add and remove members from all teams, on your behalf. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.", + "userConsentDisplayName": "Add and remove members with non-owner role for all teams", + "value": "TeamMember.ReadWriteNonOwnerRole.All" + }, + { + "description": "Allows the app to read the signed-in user's teamwork activity feed.", + "displayName": "Read user's teamwork activity feed", + "id": "0e755559-83fb-4b44-91d0-4cc721b9323e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your teamwork activity feed.", + "userConsentDisplayName": "Read your teamwork activity feed", + "value": "TeamsActivity.Read" + }, + { + "description": "Allows the app to create new notifications in users' teamwork activity feeds on behalf of the signed in user. These notifications may not be discoverable or be held or governed by compliance policies.", + "displayName": "Send a teamwork activity as the user", + "id": "7ab1d787-bae7-4d5d-8db6-37ea32df9186", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create new activities in your teamwork activity feed, and send new activities to other users' activity feed, on your behalf.", + "userConsentDisplayName": "Send a teamwork activity", + "value": "TeamsActivity.Send" + }, + { + "description": "Allows the app to read the Teams apps that are installed in chats the signed-in user can access. Does not give the ability to read application-specific settings.", + "displayName": "Read installed Teams apps in chats", + "id": "bf3fbf03-f35f-4e93-963e-47e4d874c37a", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the Teams apps that are installed in chats that you can access. Does not give the ability to read application-specific settings.", + "userConsentDisplayName": "Read installed Teams apps in chats", + "value": "TeamsAppInstallation.ReadForChat" + }, + { + "description": "Allows the app to read the Teams apps that are installed in teams the signed-in user can access. Does not give the ability to read application-specific settings.", + "displayName": "Read installed Teams apps in teams", + "id": "5248dcb1-f83b-4ec3-9f4d-a4428a961a72", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the Teams apps that are installed in teams that you can access. Does not give the ability to read application-specific settings.", + "userConsentDisplayName": "Read installed Teams apps in teams", + "value": "TeamsAppInstallation.ReadForTeam" + }, + { + "description": "Allows the app to read the Teams apps that are installed for the signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Read user's installed Teams apps", + "id": "c395395c-ff9a-4dba-bc1f-8372ba9dca84", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the Teams apps that are installed for you. Does not give the ability to read application-specific settings.", + "userConsentDisplayName": "Read your installed Teams apps", + "value": "TeamsAppInstallation.ReadForUser" + }, + { + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.", + "displayName": "Manage installed Teams apps in chats", + "id": "e1408a66-8f82-451b-a2f3-3c3e38f7413f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.", + "userConsentDisplayName": "Manage installation and permission grants of Teams apps in chats", + "value": "TeamsAppInstallation.ReadWriteAndConsentForChat" + }, + { + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.", + "displayName": "Manage installed Teams apps in teams", + "id": "946349d5-2a9d-4535-abc0-7beeacaedd1d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.", + "userConsentDisplayName": "Manage installation and permission grants of Teams apps in teams", + "value": "TeamsAppInstallation.ReadWriteAndConsentForTeam" + }, + { + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in user accounts, on behalf of the signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.", + "displayName": "Manage installation and permission grants of Teams apps in users' personal scope", + "id": "2da62c49-dfbd-40df-ba16-fef3529d391c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps for your account, on your behalf. Gives the ability to manage permission grants for accessing your data.", + "userConsentDisplayName": "Manage installation and permission grants of Teams apps on your user account", + "value": "TeamsAppInstallation.ReadWriteAndConsentForUser" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access, and manage its permission grants for accessing those specific chats' data.", + "displayName": "Allow the Teams app to manage itself and its permission grants in chats", + "id": "a0e0e18b-8fb2-458f-8130-da2d7cab9c75", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access, and manage its permission grants for accessing those specific chats' data.", + "userConsentDisplayName": "Allow the Teams app to manage itself and its permission grants in chats", + "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForChat" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in teams the signed-in user can access, and manage its permission grants for accessing those specific teams' data.", + "displayName": "Allow the Teams app to manage itself and its permission grants in teams", + "id": "4a6bbf29-a0e1-4a4d-a7d1-cef17f772975", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in teams the signed-in user can access, and manage its permission grants for accessing those specific teams' data.", + "userConsentDisplayName": "Allow the Teams app to manage itself and its permission grants in teams", + "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForTeam" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in user accounts, and manage its permission grants for accessing those specific users' data, on behalf of the signed-in user.", + "displayName": "Allow the Teams app to manage itself and its permission grants in user accounts", + "id": "7a349935-c54d-44ab-ab66-1b460d315be7", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in your account, and manage its permission grants for accessing your data, on your behalf.", + "userConsentDisplayName": "Allow the Teams app to manage itself and its permission grants on your user account", + "value": "TeamsAppInstallation.ReadWriteAndConsentSelfForUser" + }, + { + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Does not give the ability to read application-specific settings.", + "displayName": "Manage installed Teams apps in chats", + "id": "aa85bf13-d771-4d5d-a9e6-bca04ce44edf", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats you can access. Does not give the ability to read application-specific settings.", + "userConsentDisplayName": "Manage installed Teams apps in chats", + "value": "TeamsAppInstallation.ReadWriteForChat" + }, + { + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings.", + "displayName": "Manage installed Teams apps in teams", + "id": "2e25a044-2580-450d-8859-42eeb6e996c0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams you can access. Does not give the ability to read application-specific settings.", + "userConsentDisplayName": "Manage installed Teams apps in teams", + "value": "TeamsAppInstallation.ReadWriteForTeam" + }, + { + "description": "Allows the app to read, install, upgrade, and uninstall Teams apps installed for the signed-in user. Does not give the ability to read application-specific settings.", + "displayName": "Manage user's installed Teams apps", + "id": "093f8818-d05f-49b8-95bc-9d2a73e9a43c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps installed for you. Does not give the ability to read application-specific settings.", + "userConsentDisplayName": "Manage your installed Teams apps", + "value": "TeamsAppInstallation.ReadWriteForUser" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access.", + "displayName": "Allow the Teams app to manage itself in chats", + "id": "0ce33576-30e8-43b7-99e5-62f8569a4002", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats you can access.", + "userConsentDisplayName": "Allow the Teams app to manage itself in chats", + "value": "TeamsAppInstallation.ReadWriteSelfForChat" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself to teams the signed-in user can access.", + "displayName": "Allow the app to manage itself in teams", + "id": "0f4595f7-64b1-4e13-81bc-11a249df07a9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself to teams you can access.", + "userConsentDisplayName": "Allow the Teams app to manage itself in teams", + "value": "TeamsAppInstallation.ReadWriteSelfForTeam" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall itself for the signed-in user.", + "displayName": "Allow the Teams app to manage itself for a user", + "id": "207e0cb1-3ce7-4922-b991-5a760c346ebc", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for you.", + "userConsentDisplayName": "Allow the Teams app to manage itself for you", + "value": "TeamsAppInstallation.ReadWriteSelfForUser" + }, + { + "description": "Read all teams' settings, on behalf of the signed-in user.", + "displayName": "Read teams' settings", + "id": "48638b3c-ad68-4383-8ac4-e6880ee6ca57", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read all teams' settings, on your behalf.", + "userConsentDisplayName": "Read teams' settings", + "value": "TeamSettings.Read.All" + }, + { + "description": "Read and change all teams' settings, on behalf of the signed-in user.", + "displayName": "Read and change teams' settings", + "id": "39d65650-9d3e-4223-80db-a335590d027e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read and change all teams' settings, on your behalf.", + "userConsentDisplayName": "Read and change teams' settings", + "value": "TeamSettings.ReadWrite.All" + }, + { + "description": "Allows the app to create tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.", + "displayName": "Create tabs in Microsoft Teams.", + "id": "a9ff19c2-f369-4a95-9a25-ba9d460efc8e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create tabs in any team in Microsoft Teams, on your behalf. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.", + "userConsentDisplayName": "Create tabs in Microsoft Teams.", + "value": "TeamsTab.Create" + }, + { + "description": "Read the names and settings of tabs inside any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs.", + "displayName": "Read tabs in Microsoft Teams.", + "id": "59dacb05-e88d-4c13-a684-59f1afc8cc98", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read the names and settings of tabs inside any team in Microsoft Teams, on your behalf. This does not give access to the content inside the tabs.", + "userConsentDisplayName": "Read tabs in Microsoft Teams.", + "value": "TeamsTab.Read.All" + }, + { + "description": "Read and write tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs.", + "displayName": "Read and write tabs in Microsoft Teams.", + "id": "b98bfd41-87c6-45cc-b104-e2de4f0dafb9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read and write tabs in any team in Microsoft Teams, on your behalf. This does not give access to the content inside the tabs.", + "userConsentDisplayName": "Read and write tabs in Microsoft Teams.", + "value": "TeamsTab.ReadWrite.All" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in chats the signed-in user can access.", + "displayName": "Allow the Teams app to manage all tabs in chats", + "id": "ee928332-e9c2-4747-b4a0-f8c164b68de6", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in chats you can access.", + "userConsentDisplayName": "Allow the Teams app to manage all tabs in chats", + "value": "TeamsTab.ReadWriteForChat" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs to teams the signed-in user can access.", + "displayName": "Allow the Teams app to manage all tabs in teams", + "id": "c975dd04-a06e-4fbb-9704-62daad77bb49", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs to teams you can access.", + "userConsentDisplayName": "Allow the app to manage all tabs in teams", + "value": "TeamsTab.ReadWriteForTeam" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for the signed-in user.", + "displayName": "Allow the Teams app to manage all tabs for a user", + "id": "c37c9b61-7762-4bff-a156-afc0005847a0", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for you.", + "userConsentDisplayName": "Allow the Teams app to manage all tabs for you", + "value": "TeamsTab.ReadWriteForUser" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in chats the signed-in user can access.", + "displayName": "Allow the Teams app to manage only its own tabs in chats", + "id": "0c219d04-3abf-47f7-912d-5cca239e90e6", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in chats you can access.", + "userConsentDisplayName": "Allow the Teams app to manage only its own tabs in chats", + "value": "TeamsTab.ReadWriteSelfForChat" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs to teams the signed-in user can access.", + "displayName": "Allow the Teams app to manage only its own tabs in teams", + "id": "f266662f-120a-4314-b26a-99b08617c7ef", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs to teams you can access.", + "userConsentDisplayName": "Allow the Teams app to manage only its own tabs in teams", + "value": "TeamsTab.ReadWriteSelfForTeam" + }, + { + "description": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for the signed-in user.", + "displayName": "Allow the Teams app to manage only its own tabs for a user", + "id": "395dfec1-a0b9-465f-a783-8250a430cb8c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for you.", + "userConsentDisplayName": "Allow the Teams app to manage only its own tabs for you", + "value": "TeamsTab.ReadWriteSelfForUser" + }, + { + "description": "Allows the app to read the available Teams templates, on behalf of the signed-in user.", + "displayName": "Read available Teams templates", + "id": "cd87405c-5792-4f15-92f7-debc0db6d1d6", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Read available Teams templates, on your behalf.", + "userConsentDisplayName": "Read available Teams templates", + "value": "TeamTemplates.Read" + }, + { + "description": "Allows the app to read the Teams app settings on behalf of the signed-in user.", + "displayName": "Read Teams app settings", + "id": "44e060c4-bbdc-4256-a0b9-dcc0396db368", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the Teams app settings on your behalf.", + "userConsentDisplayName": "Read Teams app settings", + "value": "TeamworkAppSettings.Read.All" + }, + { + "description": "Allows the app to read and write the Teams app settings on behalf of the signed-in user.", + "displayName": "Read and write Teams app settings", + "id": "87c556f0-2bd9-4eed-bd74-5dd8af6eaf7e", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the Teams app settings on your behalf.", + "userConsentDisplayName": "Read and write Teams app settings", + "value": "TeamworkAppSettings.ReadWrite.All" + }, + { + "description": "Allow the app to read the management data for Teams devices on behalf of the signed-in user.", + "displayName": "Read Teams devices", + "id": "b659488b-9d28-4208-b2be-1c6652b3c970", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allow the app to read the management data for Teams devices on your behalf.", + "userConsentDisplayName": "Read Teams devices", + "value": "TeamworkDevice.Read.All" + }, + { + "description": "Allow the app to read and write the management data for Teams devices on behalf of the signed-in user.", + "displayName": "Read and write Teams devices", + "id": "ddd97ecb-5c31-43db-a235-0ee20e635c40", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allow the app to read and write the management data for Teams devices on your behalf.", + "userConsentDisplayName": "Read and write Teams devices", + "value": "TeamworkDevice.ReadWrite.All" + }, + { + "description": "Allows the app to read tags in Teams, on behalf of the signed-in user.", + "displayName": "Read tags in Teams", + "id": "57587d0b-8399-45be-b207-8050cec54575", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read tags in Teams, on your behalf.", + "userConsentDisplayName": "Read tags in Teams", + "value": "TeamworkTag.Read" + }, + { + "description": "Allows the app to read and write tags in Teams, on behalf of the signed-in user.", + "displayName": "Read and write tags in Teams", + "id": "539dabd7-b5b6-4117-b164-d60cd15a8671", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write tags in Teams, on your behalf.", + "userConsentDisplayName": "Read and write tags in Teams", + "value": "TeamworkTag.ReadWrite" + }, + { + "description": "Allows the app to read the term store data that the signed-in user has access to. This includes all sets, groups and terms in the term store.", + "displayName": "Read term store data", + "id": "297f747b-0005-475b-8fef-c890f5152b38", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the term store data that you have access to. This includes all sets, groups and terms in the term store.", + "userConsentDisplayName": "Read term store data", + "value": "TermStore.Read.All" + }, + { + "description": "Allows the app to read or modify data that the signed-in user has access to. This includes all sets, groups and terms in the term store.", + "displayName": "Read and write term store data", + "id": "6c37c71d-f50f-4bff-8fd3-8a41da390140", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read or modify data that you have access to. This includes all sets, groups and terms in the term store.", + "userConsentDisplayName": "Read and write term store data", + "value": "TermStore.ReadWrite.All" + }, + { + "description": "Allows an app to read your organization's threat assessment requests on behalf of the signed-in user. Also allows the app to create new requests to assess threats received by your organization on behalf of the signed-in user.", + "displayName": "Read and write threat assessment requests", + "id": "cac97e40-6730-457d-ad8d-4852fddab7ad", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows an app to read your organization's threat assessment requests on your behalf. Also allows the app to create new requests to assess threats received by your organization on your behalf.", + "userConsentDisplayName": "Read and write threat assessment requests", + "value": "ThreatAssessment.ReadWrite.All" + }, + { + "description": "Allows the app to run hunting queries, on behalf of the signed-in user.", + "displayName": "Run hunting queries", + "id": "b152eca8-ea73-4a48-8c98-1a6742673d99", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to run hunting queries that you can execute.", + "userConsentDisplayName": "Run hunting queries", + "value": "ThreatHunting.Read.All" + }, + { + "description": "Allows the app to read all the indicators for your organization, on behalf of the signed-in user.", + "displayName": "Read all threat indicators", + "id": "9cc427b4-2004-41c5-aa22-757b755e9796", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read all the indicators for your organization, on your behalf.", + "userConsentDisplayName": "Read all threat indicators", + "value": "ThreatIndicators.Read.All" + }, + { + "description": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), on behalf of the signed-in user.  It cannot update any threat indicators it does not own.", + "displayName": "Manage threat indicators this app creates or owns", + "id": "91e7d36d-022a-490f-a748-f8e011357b42", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), on your behalf.  It cannot update any threat indicators that it is not an owner of.", + "userConsentDisplayName": "Manage threat indicators this app creates or owns", + "value": "ThreatIndicators.ReadWrite.OwnedBy" + }, + { + "description": "Allows the app to read threat intelligence information, such as indicators, observations, and articles, on behalf of the signed-in user.", + "displayName": "Read all threat intelligence information", + "id": "f266d9c0-ccb9-4fb8-a228-01ac0d8d6627", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read threat intelligence information, such as indicators, observations, and articles, on your behalf.", + "userConsentDisplayName": "Read threat intelligence Information", + "value": "ThreatIntelligence.Read.All" + }, + { + "description": "Allows the app to read the threat submissions and threat submission policies owned by the signed-in user.", + "displayName": "Read threat submissions", + "id": "fd5353c6-26dd-449f-a565-c4e16b9fce78", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the threat submissions and threat submission policies that you own on your behalf.", + "userConsentDisplayName": "Read threat submissions", + "value": "ThreatSubmission.Read" + }, + { + "description": "Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user.", + "displayName": "Read all threat submissions", + "id": "7083913a-4966-44b6-9886-c5822a5fd910", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's threat submissions and threat submission policies on your behalf.", + "userConsentDisplayName": "Read all threat submissions", + "value": "ThreatSubmission.Read.All" + }, + { + "description": "Allows the app to read the threat submissions and threat submission policies owned by the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user.", + "displayName": "Read and write threat submissions", + "id": "68a3156e-46c9-443c-b85c-921397f082b5", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the threat submissions and threat submission policies that you own. Also allows the app to create new threat submissions on your behalf.", + "userConsentDisplayName": "Read and write threat submissions", + "value": "ThreatSubmission.ReadWrite" + }, + { + "description": "Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user.", + "displayName": "Read and write all threat submissions", + "id": "8458e264-4eb9-4922-abe9-768d58f13c7f", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's threat submissions and threat submission policies on your behalf. Also allows the app to create new threat submissions on your behalf.", + "userConsentDisplayName": "Read and write all threat submissions", + "value": "ThreatSubmission.ReadWrite.All" + }, + { + "description": "Allows the app to read your organization's threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submission policies on behalf of the signed-in user.", + "displayName": "Read and write all threat submission policies", + "id": "059e5840-5353-4c68-b1da-666a033fc5e8", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your organization's threat submission policies on your behalf. Also allows the app to create new threat submission policies on your behalf.", + "userConsentDisplayName": "Read and write all threat submission policies", + "value": "ThreatSubmissionPolicy.ReadWrite.All" + }, + { + "description": "Allows the app to read trust framework key set properties on behalf of the signed-in user.", + "displayName": "Read trust framework key sets", + "id": "7ad34336-f5b1-44ce-8682-31d7dfcd9ab9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read trust framework key sets, on your behalf.", + "userConsentDisplayName": "Read trust framework key sets", + "value": "TrustFrameworkKeySet.Read.All" + }, + { + "description": "Allows the app to read and write trust framework key set properties on behalf of the signed-in user.", + "displayName": "Read and write trust framework key sets", + "id": "39244520-1e7d-4b4a-aee0-57c65826e427", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read or write trust framework key sets, on your behalf.", + "userConsentDisplayName": "Read and write trust framework key sets", + "value": "TrustFrameworkKeySet.ReadWrite.All" + }, + { + "description": "Allows the app to read basic unified group properties, memberships and owners of the group the signed-in guest is a member of.", + "displayName": "Read unified group memberships as guest", + "id": "73e75199-7c3e-41bb-9357-167164dbb415", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read basic unified group properties, memberships and owners of the group you are a member of.", + "userConsentDisplayName": "Read unified group memberships as guest", + "value": "UnifiedGroupMember.Read.AsGuest" + }, + { + "description": "Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", + "displayName": "Read all users' lifecycle information", + "id": "ed8d2a04-0374-41f1-aefe-da8ac87ccc87", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", + "userConsentDisplayName": "Read all users' lifecycle information", + "value": "User-LifeCycleInfo.Read.All" + }, + { + "description": "Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", + "displayName": "Read and write all users' lifecycle information", + "id": "7ee7473e-bd4b-4c9f-987c-bd58481f5fa2", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.", + "userConsentDisplayName": "Read and write all users' lifecycle information", + "value": "User-LifeCycleInfo.ReadWrite.All" + }, + { + "description": "Allows the app to enable and disable users' accounts, on behalf of the signed-in user.", + "displayName": "Enable and disable user accounts", + "id": "f92e74e7-2563-467f-9dd0-902688cb5863", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to enable and disable users' accounts, on your behalf.", + "userConsentDisplayName": "Enable and disable user accounts", + "value": "User.EnableDisableAccount.All" + }, + { + "description": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).", + "displayName": "Export user's data", + "id": "405a51b5-8d8d-430b-9842-8be4b0e9f324", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).", + "userConsentDisplayName": "Export user's data", + "value": "User.Export.All" + }, + { + "description": "Allows the app to invite guest users to the organization, on behalf of the signed-in user.", + "displayName": "Invite guest users to the organization", + "id": "63dd7cd9-b489-4adf-a28c-ac38b9a0f962", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to invite guest users to the organization, on your behalf.", + "userConsentDisplayName": "Invite guest users to the organization", + "value": "User.Invite.All" + }, + { + "description": "Allows the app to read, update and delete identities that are associated with a user's account that the signed-in user has access to. This controls the identities users can sign-in with.", + "displayName": "Manage user identities", + "id": "637d7bec-b31e-4deb-acc9-24275642a2c9", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read, update and delete identities that are associated with a user's account that you have access to. This controls the identities users can sign-in with.", + "userConsentDisplayName": "Manage user identities", + "value": "User.ManageIdentities.All" + }, + { + "description": "Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.", + "displayName": "Sign in and read user profile", + "id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.", + "userConsentDisplayName": "Sign you in and read your profile", + "value": "User.Read" + }, + { + "description": "Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.", + "displayName": "Read all users' full profiles", + "id": "a154be20-db9c-4678-8ab7-66f6cc099a59", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on your behalf.", + "userConsentDisplayName": "Read all users' full profiles", + "value": "User.Read.All" + }, + { + "description": "Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address and photo.", + "displayName": "Read all users' basic profiles", + "id": "b340eb25-3456-403f-be2f-af7a0d370277", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read a basic set of profile properties of other users in your organization on your behalf. Includes display name, first and last name, email address and photo.", + "userConsentDisplayName": "Read all users' basic profiles", + "value": "User.ReadBasic.All" + }, + { + "description": "Allows the app to read your profile. It also allows the app to update your profile information on your behalf.", + "displayName": "Read and write access to user profile", + "id": "b4e74841-8e56-480b-be8b-910348b18b4c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your profile, and discover your group membership, reports and manager. It also allows the app to update your profile information on your behalf.", + "userConsentDisplayName": "Read and update your profile", + "value": "User.ReadWrite" + }, + { + "description": "Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.", + "displayName": "Read and write all users' full profiles", + "id": "204e0828-b5ca-4ad8-b9f3-f32a958e7cc4", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, on your behalf.", + "userConsentDisplayName": "Read and write all users' full profiles", + "value": "User.ReadWrite.All" + }, + { + "description": "Allows the app to read and report the signed-in user's activity in the app.", + "displayName": "Read and write app activity to users' activity feed", + "id": "47607519-5fb1-47d9-99c7-da4b48f369b1", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and report your activity in the app.", + "userConsentDisplayName": "Read and write app activity to your activity feed", + "value": "UserActivity.ReadWrite.CreatedByApp" + }, + { + "description": "Allows the app to read the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods.", + "displayName": "Read user authentication methods.", + "id": "1f6b61c5-2f65-4135-9c9f-31c0f8d32b52", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read your authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like your passwords, or to sign-in or otherwise use your authentication methods.", + "userConsentDisplayName": "Read your authentication methods.", + "value": "UserAuthenticationMethod.Read" + }, + { + "description": "Allows the app to read authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", + "displayName": "Read all users' authentication methods", + "id": "aec28ec7-4d02-4e8c-b864-50163aea77eb", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read authentication methods of all users you have access to in your organization. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", + "userConsentDisplayName": "Read all users' authentication methods", + "value": "UserAuthenticationMethod.Read.All" + }, + { + "description": "Allows the app to read and write the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods. ", + "displayName": "Read and write user authentication methods", + "id": "48971fc1-70d7-4245-af77-0beb29b53ee2", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write your authentication methods, including phone numbers and Authenticator app settings.This does not allow the app to see secret information like your passwords, or to sign-in or otherwise use your authentication methods.", + "userConsentDisplayName": "Read and write your authentication methods", + "value": "UserAuthenticationMethod.ReadWrite" + }, + { + "description": " Allows the app to read and write authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", + "displayName": "Read and write all users' authentication methods.", + "id": "b7887744-6746-4312-813d-72daeaee7e2d", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write authentication methods of all users you have access to in your organization. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.", + "userConsentDisplayName": "Read and write all users' authentication methods", + "value": "UserAuthenticationMethod.ReadWrite.All" + }, + { + "description": "Allows the app to send, read, update and delete user’s notifications.", + "displayName": "Deliver and manage user's notifications", + "id": "26e2f3e8-b2a1-47fc-9620-89bb5b042024", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to send, read, update and delete your app-specific notifications.", + "userConsentDisplayName": "Deliver and manage your notifications", + "value": "UserNotification.ReadWrite.CreatedByApp" + }, + { + "description": "Allows the app to report the signed-in user's app activity information to Microsoft Timeline.", + "displayName": "Write app activity to users' timeline", + "id": "367492fc-594d-4972-a9b5-0d58c622c91c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to report your app activity information to Microsoft Timeline.", + "userConsentDisplayName": "Write app activity to your timeline", + "value": "UserTimelineActivity.Write.CreatedByApp" + }, + { + "description": "Allows an application to read virtual appointments for the signed-in user. Only an organizer or participant user can read their virtual appointments.  ", + "displayName": "Read a user's virtual appointments", + "id": "27470298-d3b8-4b9c-aad4-6334312a3eac", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read virtual appointments on your behalf.  ", + "userConsentDisplayName": "Read your virtual appointments ", + "value": "VirtualAppointment.Read" + }, + { + "description": "Allows an application to read and write virtual appointments for the signed-in user. Only an organizer or participant user can read and write their virtual appointments. ", + "displayName": "Read and write a user's virtual appointments  ", + "id": "2ccc2926-a528-4b17-b8bb-860eed29d64c", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write virtual appointments on your behalf.  ", + "userConsentDisplayName": "Read and write your virtual appointments", + "value": "VirtualAppointment.ReadWrite" + }, + { + "description": "Allows the app to read virtual events created by the you", + "displayName": "Read your virtual events", + "id": "6b616635-ae58-433a-a918-8c45e4f304dc", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read virtual events created by the you", + "userConsentDisplayName": "Read your virtual events", + "value": "VirtualEvent.Read" + }, + { + "description": "Allows the app to read and write all Windows update deployment settings for the organization on behalf of the signed-in user.", + "displayName": "Read and write all Windows update deployment settings", + "id": "11776c0c-6138-4db3-a668-ee621bea2555", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read and write all Windows update deployment settings for the organization on your behalf.", + "userConsentDisplayName": "Read and write all Windows update deployment settings", + "value": "WindowsUpdates.ReadWrite.All" + }, + { + "description": "Allows the app to read workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user.", + "displayName": "Read workforce integrations", + "id": "f1ccd5a7-6383-466a-8db8-1a656f7d06fa", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to read workforce integrations, to synchronize data from Microsoft Teams Shifts, on your behalf.", + "userConsentDisplayName": "Read workforce integrations", + "value": "WorkforceIntegration.Read.All" + }, + { + "description": "Allows the app to manage workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user.", + "displayName": "Read and write workforce integrations", + "id": "08c4b377-0d23-4a8b-be2a-23c1c1d88545", + "isEnabled": true, + "origin": "Delegated", + "userConsentDescription": "Allows the app to manage workforce integrations, to synchronize data from Microsoft Teams Shifts, on your behalf.", + "userConsentDisplayName": "Read and write workforce integrations", + "value": "WorkforceIntegration.ReadWrite.All" + }, + { + "description": "Read and Modify Tenant-Acquired Telephone Number Details", + "displayName": "Read and Modify Tenant-Acquired Telephone Number Details", + "id": "424b07a8-1209-4d17-9fe4-9018a93a1024", + "isEnabled": true, + "Origin": "Delegated", + "userConsentDescription": "Allows the app to read and modify your tenant's acquired telephone number details on behalf of the signed-in admin user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.", + "userConsentDisplayName": "Allows the app to read and modify your tenant's acquired telephone number details on behalf of the signed-in admin user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.", + "value": "TeamsTelephoneNumber.ReadWrite.All" + }, + { + "description": "Read and Modify Tenant-Acquired Telephone Number Details", + "displayName": "Read and Modify Tenant-Acquired Telephone Number Details", + "id": "0a42382f-155c-4eb1-9bdc-21548ccaa387", + "isEnabled": true, + "Origin": "Application", + "userConsentDescription": "Allows the app to read your tenant's acquired telephone number details, without a signed-in user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.", + "userConsentDisplayName": "Allows the app to read your tenant's acquired telephone number details, without a signed-in user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.", + "value": "TeamsTelephoneNumber.ReadWrite.All" + } +] diff --git a/public/reportImages/board.jpg b/public/reportImages/board.jpg new file mode 100644 index 000000000000..05c3e51ddc34 Binary files /dev/null and b/public/reportImages/board.jpg differ diff --git a/public/reportImages/city.jpg b/public/reportImages/city.jpg new file mode 100644 index 000000000000..155439cf30f2 Binary files /dev/null and b/public/reportImages/city.jpg differ diff --git a/public/reportImages/glasses.jpg b/public/reportImages/glasses.jpg new file mode 100644 index 000000000000..b41d200ea650 Binary files /dev/null and b/public/reportImages/glasses.jpg differ diff --git a/public/reportImages/image-not-found.png b/public/reportImages/image-not-found.png new file mode 100644 index 000000000000..5887b1871858 Binary files /dev/null and b/public/reportImages/image-not-found.png differ diff --git a/public/reportImages/laptop.jpg b/public/reportImages/laptop.jpg new file mode 100644 index 000000000000..31a14fc4383e Binary files /dev/null and b/public/reportImages/laptop.jpg differ diff --git a/public/reportImages/soc.jpg b/public/reportImages/soc.jpg new file mode 100644 index 000000000000..f8da4eba5139 Binary files /dev/null and b/public/reportImages/soc.jpg differ diff --git a/public/reportImages/working.jpg b/public/reportImages/working.jpg new file mode 100644 index 000000000000..c979c21b1ea0 Binary files /dev/null and b/public/reportImages/working.jpg differ diff --git a/public/robots.txt b/public/robots.txt new file mode 100644 index 000000000000..e9e57dc4d41b --- /dev/null +++ b/public/robots.txt @@ -0,0 +1,3 @@ +# https://www.robotstxt.org/robotstxt.html +User-agent: * +Disallow: diff --git a/public/safari-pinned-tab.svg b/public/safari-pinned-tab.svg deleted file mode 100644 index 372cf4e79eb9..000000000000 --- a/public/safari-pinned-tab.svg +++ /dev/null @@ -1,37 +0,0 @@ - - - - -Created by potrace 1.14, written by Peter Selinger 2001-2017 - - - - - - - - diff --git a/public/secureScore.json b/public/secureScore.json new file mode 100644 index 000000000000..3e59bbd95d5d --- /dev/null +++ b/public/secureScore.json @@ -0,0 +1,3421 @@ +[ + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_admin_accounts_separate_unassigned_cloud_only", + "title": "Ensure Administrative accounts are separate and cloud-only" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_admin_consent_workflow", + "title": "Ensure the admin consent workflow is enabled" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_custom_banned_passwords", + "title": "Ensure custom banned passwords lists are used" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_limited_administrative_roles", + "title": "Ensure \u0027Microsoft Azure Management\u0027 is limited to administrative roles" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_linkedin_connection_disables", + "title": "Ensure \u0027LinkedIn account connections\u0027 is disabled" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_managed_approved_public_groups_only", + "title": "Ensure that only organizationally managed/approved public groups exist" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_password_protection", + "title": "Ensure password protection is enabled for on-prem Active Directory" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_phishing_MFA_strength", + "title": "Ensure \u0027Phishing-resistant MFA strength\u0027 is required for Administrators" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_sign_in_freq_session_timeout", + "title": "Ensure Sign-in frequency is enabled and browser sessions are not persistent for Administrative users" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "aad_third_party_apps", + "title": "Ensure third party integrated applications are not allowed" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_AccountsWithNonDefaultPrimaryGroup", + "title": "Accounts with non-default Primary Group ID" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_AccountWithLeakedCredentials", + "title": "Change password for accounts with leaked credentials" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_AdAccountWithPotentiallyLeakedCredentials", + "title": "Change password for on-prem account with potentially leaked credentials" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSCertificateTemplateArbitraryAppPolicies", + "title": "Prevent Certificate Enrollment with arbitrary Application Policies (ESC15)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSCertificateTemplateEnrolementSuppliesSubject", + "title": "Prevent users to request a certificate valid for arbitrary users based on the certificate template (ESC1)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_AdcsComputersWithNoMdiSensorInstalled", + "title": "Install Defender for Identity Sensor on ADCS servers " + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSInsecureCertificateEnrollmentIisEndpoints", + "title": "Edit insecure certificate enrollment IIS endpoints (ESC8)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSMisconfiguredCertificateAuthorityAcl", + "title": "Edit misconfigured Certificate Authority ACL (ESC7)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSMisconfiguredCertificateTemplateAcl", + "title": "Edit misconfigured certificate templates ACL (ESC4)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSMisconfiguredCertificateTemplateEku", + "title": "Edit overly permissive Certificate Template with privileged EKU (Any purpose EKU or No EKU) (ESC2)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSMisconfiguredCertificateTemplateEnrollmentAgent", + "title": "Edit misconfigured enrollment agent certificate template (ESC3)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSMisconfiguredCertificateTemplateOwner", + "title": "Edit misconfigured certificate templates owner (ESC4)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSMisconfiguredRpcEnrollmentSigning", + "title": "Enforce encryption for RPC certificate enrollment interface (ESC8)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ADCSSanSpecifiedByUserEnabled", + "title": "Edit vulnerable Certificate Authority setting (ESC6)" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_AdfsComputersWithNoMdiSensorInstalled", + "title": "Install Defender for Identity Sensor on ADFS servers " + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_AdminSDHolder", + "title": "Remove access rights on suspicious accounts with the Admin SDHolder permission" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_AzureSsoAccountOldPasswords", + "title": "Change password for Entra seamless SSO account" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_BuiltinAdministratorAccountWithOldPassword", + "title": "Change password of built-in domain Administrator account" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_BuiltinGuestAccountIsEnabled", + "title": "Built-in Active Directory Guest account is enabled" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_BuiltinKrbtgtAccountWithOldPassword", + "title": "Change password for krbtgt account" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ClearText", + "title": "Stop clear text credentials exposure" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_CyberArk_DormantPriviledgedAccounts", + "title": "Remove stale CyberArk Identity privileged accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_CyberArk_HighNumberOfPriviledgedIdentityAccounts", + "title": "High number of CyberArk Identity accounts with a privileged role assigned" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_CyberArk_HighNumberOfSystemAdmins", + "title": "Limit the number of CyberArk Identity accounts with system admin role" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_CyberArk_MFAforPriviledgedUserAccounts", + "title": "Assign multi-factor authentication for CyberArk Identity privileged user accounts " + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_CyberArk_PriviledgedUserAccountsWithOldPasswords", + "title": "Change password for CyberArk Identity privileged User accounts " + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_DefenderForIdentityIsNotInstalled", + "title": "Start your Defender for Identity deployment, installing Sensors on Domain Controllers and other eligible servers." + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_DnsAdminsGroupWithUnsafePermissions", + "title": "Unsafe permissions on the DnsAdmins group" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_DomainControllerLocalUsers", + "title": "Remove local admins on identity assets" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_DomainControllersWithOldPassword", + "title": "Change Domain Controller computer account old password" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_DormantAccounts", + "title": "Remove dormant accounts from sensitive groups" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_EntraConnectAccountsOldPasswords", + "title": "Rotate password for Entra Connect AD DS Connector account" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_EntraConnectAccountsWithConnectorAccountAsDefaultAdmin", + "title": "Replace Enterprise or Domain Admin account for Entra Connect AD DS Connector account" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_EntraConnectAccountUnnecessaryReplicationPermission", + "title": "Remove unnecessary replication permissions for Entra Connect AD DS Connector Account" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_EntraConnectComputersWithNoMdiSensorInstalled", + "title": "Install Defender for Identity Sensor on Entra Connect servers" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_EntraConnectSensitiveAccountsWithUnsafePermissions", + "title": "Remove unsafe permissions on sensitive Entra Connect accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_ExposedPasswordsInADAttributes", + "title": "Remove discoverable passwords in Active Directory account attributes" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_GroupManagedServiceAccountWithUnrecommendedPasswordChangeInterval", + "title": "Set a valid password rotation interval for gMSA" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_GroupPolicyAbnormalModificationAssignment", + "title": "GPO can be modified by unprivileged accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_GroupPolicyAssignsUnprivilegedIdentitiesToElevatedLocalGroups", + "title": "GPO assigns unprivileged identities to local groups with elevated privileges" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_GroupPolicyPasswordInPreferences", + "title": "Reversible passwords found in GPOs" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_HoneyToken", + "title": "Set a honeytoken account" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_InactiveServiceAccounts", + "title": "Remove stale service accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_KerberosDelegations", + "title": "Modify unsecure Kerberos delegations to prevent impersonation" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "high", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_NonAdminDCSyncAccounts", + "title": "Remove non-admin accounts with DCSync permissions " + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Okta_Dormant", + "title": "Remove dormant Okta privileged accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Okta_HighNumberOfNonSuperAdminPrivilegedUserAccounts", + "title": "High number of Okta accounts with privileged role assigned" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Okta_HighNumberOfSuperAdmins", + "title": "Limit the Number of Okta Super Admins Accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Okta_SensitiveAccountWithOldPassword", + "title": "Change password for Okta privileged User accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Okta_SensitiveAccountWithoutFactorsAssigned", + "title": "Assign multi-factor authentication for Okta privileged user accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Okta_SensitiveApiToken", + "title": "Highly Privileged Okta Api Token" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_PathRisk", + "title": "Reduce lateral movement path risk to sensitive entities" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Ping_Dormant", + "title": "Remove stale PingOne privileged accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Ping_HighNumberOfNonSuperAdminPrivilegedUserAccounts", + "title": "High number of PingOne accounts with a privileged role assigned" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Ping_HighNumberOfSuperAdmins", + "title": "Limit the number of PingOne accounts with organization admin role" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Ping_SensitiveAccountWithOldPassword", + "title": "Change password for PingOne privileged User accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Ping_SensitiveAccountWithoutFactorsAssigned", + "title": "Assign multi-factor authentication for PingOne privileged user accounts" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_PrintSpooler", + "title": "Disable Print spooler service on domain controllers" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_PrivilegedAccountsWithDelegationAllowed", + "title": "Ensure privileged accounts are not delegated" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_PwdLAPS", + "title": "Protect and manage local admin passwords with Microsoft LAPS" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Sensor", + "title": "Install Defender for Identity Sensor on all Domain Controllers" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_SIDHistory", + "title": "Remove unsecure SID history attributes from entities" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "Medium", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_SingleManagedServiceAccountsWithOldPassword", + "title": "Rotate old password for sMSA and set up valid rotation interval in the GPO" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_UnsecureAccount", + "title": "Resolve unsecure account attributes" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_UnsecureDomain", + "title": "Resolve unsecure domain configurations" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_Vpn", + "title": "Configure VPN integration" + }, + { + "service": "Azure ATP", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AATP_WeakCipher", + "title": "Stop weak cipher usage" + }, + { + "service": "Admincenter", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "admincenter_owned_apps_and_services", + "title": "Ensure \u0027User owned apps and services\u0027 is restricted" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AdminMFAV2", + "title": "Ensure multifactor authentication is enabled for all users in administrative roles" + }, + { + "service": "AppG", + "tier": "Core", + "userImpact": "moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AppG_regulate_access_to_sensitive_data", + "title": "Regulate cloud app access to sensitive data" + }, + { + "service": "AppG", + "tier": "Core", + "userImpact": "moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "AppG_unusual_activity_with_priority_account", + "title": "Regulate apps with priority account consent" + }, + { + "service": "AzureAD", + "tier": "Advanced", + "userImpact": "Moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "BlockLegacyAuthentication", + "title": "Enable Conditional Access policies to block legacy authentication" + }, + { + "service": "EXO", + "tier": "Advanced", + "userImpact": "Moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "CustomerLockBoxEnabled", + "title": "Ensure the customer lockbox feature is enabled" + }, + { + "service": "MIP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "dlp_datalossprevention", + "title": "Ensure DLP policies are enabled" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_individualsharing", + "title": "Ensure \u0027External sharing\u0027 of calendars is not available" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_mailboxaudit", + "title": "Ensure mailbox auditing for all users is Enabled" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_mailtipsenabled", + "title": "Ensure MailTips are enabled for end users" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_oauth2clientprofileenabled", + "title": "Ensure modern authentication for Exchange Online is enabled" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_outlookaddins", + "title": "Ensure users installing Outlook add-ins is not allowed" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_SPF_records_for_all_domains", + "title": "Ensure that SPF records are published for all Exchange Domains" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_storageproviderrestricted", + "title": "Ensure additional storage providers are restricted in Outlook on the web" + }, + { + "service": "EXO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "exo_transportrulesallowlistdomains", + "title": "Ensure Spam confidence level (SCL) is configured in mail transport rules with specific domains" + }, + { + "service": "FORMS", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "forms_phishing_protection", + "title": "Ensure internal phishing protection for Forms is enabled" + }, + { + "service": "AzureAD", + "tier": "Defense In Depth", + "userImpact": "Moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "IntegratedApps", + "title": "Ensure user consent to apps accessing company data on their behalf is not allowed" + }, + { + "service": "MCAS", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mcas_mda_enabled", + "title": "Ensure Microsoft Defender for Cloud Apps is enabled and configured" + }, + { + "service": "MCAS", + "tier": "Advanced", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "McasFirewallLogUpload", + "title": "Deploy a log collector to discover shadow IT activity" + }, + { + "service": "MDA_Atlassian", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Atlassian_EnableTwoFactorAuth", + "title": "Enable multi-factor authentication (MFA)" + }, + { + "service": "MDA_Atlassian", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Atlassian_ForceSSO", + "title": "Enable Single Sing On (SSO)" + }, + { + "service": "MDA_Atlassian", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Atlassian_InactiveTimeoutMins", + "title": "Enable session timeout for web users" + }, + { + "service": "MDA_Atlassian", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Atlassian_mobile_access", + "title": "Atlassian mobile app security - App access requirement" + }, + { + "service": "MDA_Atlassian", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Atlassian_mobile_dataprotection", + "title": "Atlassian mobile app security - App data protection" + }, + { + "service": "MDA_Atlassian", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Atlassian_mobile_UsersAffected", + "title": "Atlassian mobile app security - Users that are affected by policies" + }, + { + "service": "MDA_Atlassian", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Atlassian_passwordExpiry", + "title": "Enable Password expiration policies" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_EnableTwoFactorAuth", + "title": "Enable multi-factor authentication (MFA)" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_ForceSSO", + "title": "Enable Single Sign on (SSO)" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_InactiveTimeoutMins", + "title": "Enable session timeout for web users" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_LoginFailLockoutSecs", + "title": "Enhance \u0027login maximum attempts\u0027 - Lockout timer" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_LoginFailMaxAttempts", + "title": "Enhance \u0027login maximum attempts\u0027 - Number of attempts" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_MinimumLength", + "title": "Enable password minimum length" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_MinimumNumeric", + "title": "Enable password minimum numeric characters" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_MinimumSpecialCharacters", + "title": "Enable password minimum special characters" + }, + { + "service": "MDA_CitrixSF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_CitrixSF_PasswordMaxAgeDays", + "title": "Enable password expiration policies" + }, + { + "service": "MDA_DocuSign", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_DocuSign_EnhancedPassword", + "title": "Enhance password requirements" + }, + { + "service": "MDA_DocuSign", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_DocuSign_PasswordExpires", + "title": "Password expiry requirements" + }, + { + "service": "MDA_DocuSign", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_DocuSign_SessionTimeout", + "title": "Enable session timeout for web users" + }, + { + "service": "MDA_Dropbox", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Dropbox_InactiveTimeoutMins", + "title": "Enable web session timeout for web users" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_DependencyInsights", + "title": "Disable \u0027Allow members to view dependency insights\u0027" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_EmailNotificationRestrictedToVerifiedOrApprovedDomains", + "title": "Enabled \u0027email notification delivery for this enterprise is restricted to verified or approved domains\u0027" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_IPallowListConfigurationForOrgResources", + "title": "Enforce IP allow list configuration for org resources" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_OutsideCollabInvitation", + "title": "Disable \u0027Allow repository administrators to invite outside collaborators to repositories for this organization" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_PrivateRepositoryForkingSetting", + "title": "Disable private repository forking" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_PublicRepoCreation", + "title": "Disable \u0027Members will be able to create public repositories, visible to anyone\u0027" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_RepoTransferOrDeletion", + "title": "Disable \u0027members with admin permissions for repositories can delete or transfer repositories\u0027" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_RepoVisibility_change", + "title": "Disable \u0027Allow members to change repository visibilities for this organization\u0027" + }, + { + "service": "MDA_GitHub", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_GitHub_SAML", + "title": "Enable single sign on (SSO)" + }, + { + "service": "MDA_Google", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Google_EnableTwoFactorAuth", + "title": "Enable multi-factor authentication (MFA)" + }, + { + "service": "MDA_NetDocuments", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_NetDocuments_SSO", + "title": "Adopt SSO (Single sign on) in netDocuments" + }, + { + "service": "MDA_Okta", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Okta_EnhancedPassword", + "title": "Enhance password requirements" + }, + { + "service": "MDA_Okta", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Okta_MFA", + "title": "Enable multi-factor authentication" + }, + { + "service": "MDA_Okta", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Okta_PasswordExpires", + "title": "Password expiry requirements" + }, + { + "service": "MDA_Okta", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Okta_SessionTimeout", + "title": "Enable session timeout for web users" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_disableProtocolSecurity", + "title": "Remote Site" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableAdminLoginAsAnyUser", + "title": "Disable Administrators Can Log In As Any User" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableCacheAndAutocomplete", + "title": "Disable Caching and Autocomplete on Login Page via Session settings" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableClickjackNonsetupSFDC", + "title": "Enable clickjack protection for non-Setup for Salesforce pages" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableClickjackNonsetupUser", + "title": "Enable clickjack protection for customer VisualForce pages with standard headers" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableClickjackNonsetupUserHeaderless", + "title": "Enable clickjack protection for customer VisualForce pages with headers disabled" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableClickjackSetup", + "title": "Enable clickjack protection for Setup pages" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableContentSniffingProtection", + "title": "Enable Content Sniffing protection" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableCSPOnEmail", + "title": "Enable Content Security Policy protection for email templates" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableCSRFOnGet", + "title": "Enable CSRF protection on GET requests on non-setup pages" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableCSRFOnPost", + "title": "Enable CSRF protection on POST requests on non-setup pages" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableMultipleSamlConfigs", + "title": "Require identity verification during multi-factor authentication (MFA) registration" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enableSMSIdentity", + "title": "Let users verify their identity by text (SMS)" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_enforceIpRangesEveryRequest", + "title": "Enforce login IP ranges on every request" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_forceLogoutOnSessionTimeout", + "title": "Force logout on session timeout" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_forceRelogin", + "title": "Force (admin) relogin after Login-As-User" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_identityConfirmationOnEmailChange", + "title": "Require identity verification for change of email address" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_lockSessionsToDomain", + "title": "Lock sessions to the domain in which they were first used" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_maxLoginAttempts", + "title": "Maximum invalid login attempts" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_minimumPasswordLifetime", + "title": "Require a minimum 1 day password lifetime" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_complexity", + "title": "Password complexity requirement" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_expiration", + "title": "User passwords expire in 90 days or less" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_historyRestriction", + "title": "Enforce password history" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_lockoutInterval", + "title": "Lockout effective period" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_minimumPasswordLength", + "title": "Minimum password length" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_obscureSecretAnswer", + "title": "Obscure secret answer for password resets" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_questionRestriction", + "title": "Password question requirement" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_password_sessionTimeout", + "title": "Session timeout" + }, + { + "service": "MDA_SF", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SF_requireHttpOnly", + "title": "Require HttpOnly attribute" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_authenticateMultifactor", + "title": "Enable multi-factor authentication" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_authRequiredJson2", + "title": "Enable enforcing JSONv2 requests with basic authorization" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_authRequiredSOAP", + "title": "Enable enforcing SOAP requests with basic authorization" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_authRequiredUnl", + "title": "Enable unload request authorization" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_cauthRequiredScriptedProcessor", + "title": "Enable script request authorization" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_concourseOnmessageEnforceSameOrigin", + "title": "Enable URL allow list for cross-origin iframe communication" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_enablePasswordPolicy", + "title": "Enable Password Reset Policy Checks" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_highSecurity", + "title": "Enable high security plugin" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_httpCacheControl", + "title": "Set default cache-control HTTP header value to private" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_loginNoBlankPassword", + "title": "Disable password-less authentication" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_roleManagement", + "title": "Enable Contextual Security: Role Management plugin" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_scriptCcsiIsPublic", + "title": "Set client-callable script includes to private" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_scriptSecureAjaxgliderecord", + "title": "Apply access control rule (ACL) validation when server-side records are accessed using GlideAjax APIs within a client script" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_scriptUseSandbox", + "title": "Enable client generated scripts sandbox" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_smDefaultMode", + "title": "Enable default deny with new ACL rules" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_sncUserLockoutCheck", + "title": "Enable managing failed login attempts" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_soapRequireContentTypeXml", + "title": "Enable SOAP content type checking" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_soapStrictSecurity", + "title": "Enable SOAP request strict security" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_systemSecurity", + "title": "Activate security jump start (ACL rules) plugin" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_uiSessionTimeout", + "title": "Enable session activity timeout" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_useCsrfToken", + "title": "Enable anti-CSRF token" + }, + { + "service": "MDA_SNOW", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_SNOW_userCookieMaxLifeSpanInDays", + "title": "Enable absolute session timeout" + }, + { + "service": "MDA_Workplace", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Workplace_SSO", + "title": "Adopt SSO (Single sign on) in Workplace by Meta" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_AdminPassChange", + "title": "Block admins to set passwords" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_BlockAccountAssumption", + "title": "Block account assumption" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_bypassIPrestrictions", + "title": "Block customers to bypass IP restrictions" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_EmailNotificationsforPassChange", + "title": "Send a notification on password change for admins, agents, and end users" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_enableapp", + "title": "Admins and agents can use the Zendesk Support mobile app" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_IPrestrictions", + "title": "Enable IP restrictions" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_MFA", + "title": "Enable and adopt two-factor authentication (2FA)" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_sessionexpiry", + "title": "Enable session timeout for users" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_SSO", + "title": "Enable external Authentication (google or microsoft or SSO)" + }, + { + "service": "MDA_Zendesk", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zendesk_ZanAuth", + "title": "Enable Zendesk authentication" + }, + { + "service": "MDA_Zoom", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zoom_BlockDomains", + "title": "Block users in specific domains from joining meetings and webinars" + }, + { + "service": "MDA_Zoom", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zoom_MeetingE2eEncryption", + "title": "Enforce end to end encryption in all Zoom meetings" + }, + { + "service": "MDA_Zoom", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zoom_MFA", + "title": "Enable multi-factor authentication" + }, + { + "service": "MDA_Zoom", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zoom_PasswordReq", + "title": "Enhance password requirements" + }, + { + "service": "MDA_Zoom", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zoom_SessionTimeoutClient", + "title": "Enable session timeout for client users" + }, + { + "service": "MDA_Zoom", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MDA_Zoom_SessionTimeoutWeb", + "title": "Enable session timeout for web users" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_allowedsenderscombined", + "title": "Ensure that no sender domains are allowed for anti-spam policies" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_antiphishingpolicies", + "title": "Ensure that an anti-phishing policy has been created" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_atpprotection", + "title": "Turn on Microsoft Defender for Office 365 in SharePoint, OneDrive, and Microsoft Teams" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_autoforwardingmode", + "title": "Set automatic email forwarding rules to be system controlled" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_blockmailforward", + "title": "Ensure all forms of mail forwarding are blocked and/or disabled" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_bulkspamaction", + "title": "Set action to take on bulk spam detection" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_bulkthreshold", + "title": "Set the email bulk complaint level (BCL) threshold to be 6 or lower" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_commonattachmentsfilter", + "title": "Ensure the Common Attachment Types Filter is enabled" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_connectionfilter", + "title": "Don\u0027t add allowed IP addresses in the connection filter policy " + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_enabledomainstoprotect", + "title": "Enable impersonated domain protection" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_enablemailboxintelligence", + "title": "Ensure that mailbox intelligence is enabled" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_highconfidencephishaction", + "title": "Set action to take on high confidence phishing detection" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_highconfidencespamaction", + "title": "Set action to take on high confidence spam detection" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_mailboxintelligenceprotection", + "title": "Ensure that intelligence for impersonation protection is enabled" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_mailboxintelligenceprotectionaction", + "title": "Move messages that are detected as impersonated users by mailbox intelligence" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_phishthresholdlevel", + "title": "Set the phishing email level threshold at 2 or higher" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_phisspamacation", + "title": "Set action to take on phishing detection" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_quarantineretentionperiod", + "title": "Retain spam in quarantine for 30 days" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_recipientexternallimitperhour", + "title": "Set maximum number of external recipients that a user can email per hour" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_recipientinternallimitperhour", + "title": "Set maximum number of internal recipients that a user can send to within an hour" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_recipientlimitperday", + "title": "Set a daily message limit" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_safeattachmentpolicy", + "title": "Ensure Safe Attachments policy is enabled" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_safeattachments", + "title": "Turn on Safe Attachments in block mode" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_safedocuments", + "title": "Turn on Safe Documents for Office Clients" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_safelinksforemail", + "title": "Create Safe Links policies for email messages" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_safelinksforOfficeApps", + "title": "Ensure Safe Links for Office Applications is Enabled" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_similardomainssafetytips", + "title": "Enable the domain impersonation safety tip" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_similaruserssafetytips", + "title": "Enable the user impersonation safety tip" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_spam_notifications_only_for_admins", + "title": "Ensure Exchange Online Spam Policies are set to notify administrators" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_spamaction", + "title": "Set action to take on spam detection" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_targeteddomainprotectionaction", + "title": "Quarantine messages that are detected from impersonated domains" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_targeteduserprotectionaction", + "title": "Quarantine messages that are detected from impersonated users" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_targetedusersprotection", + "title": "Enable impersonated user protection" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_thresholdreachedaction", + "title": "Block users who reached the message limit" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_unusualcharacterssafetytips", + "title": "Enable the user impersonation unusual characters safety tip " + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_zapmalware", + "title": "Create zero-hour auto purge policies for malware" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_zapphish", + "title": "Create zero-hour auto purge policies for phishing messages" + }, + { + "service": "MDO", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mdo_zapspam", + "title": "Create zero-hour auto purge policies for spam messages" + }, + { + "service": "MS Teams", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "meeting_anonymousstartmeeting_v1", + "title": "Restrict anonymous users from starting Teams meetings" + }, + { + "service": "MS Teams", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "meeting_autoadmitusers_v1", + "title": "Only invited users should be automatically admitted to Teams meetings" + }, + { + "service": "MS Teams", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "meeting_designatedpresenter_v1", + "title": "Configure which users are allowed to present in Teams meetings" + }, + { + "service": "MS Teams", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "meeting_externalrequestcontrol_v1", + "title": "Limit external participants from having control in a Teams meeting" + }, + { + "service": "MS Teams", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "meeting_pstnusersbypasslobby_v1", + "title": "Restrict dial-in users from bypassing a meeting lobby " + }, + { + "service": "MS Teams", + "tier": "Core", + "userImpact": "low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "meeting_restrictanonymousjoin_v1", + "title": "Restrict anonymous users from joining meetings" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "MFARegistrationV2", + "title": "Ensure multifactor authentication is enabled for all users" + }, + { + "service": "MIP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mip_autosensitivitylabelspolicies", + "title": "Ensure that Auto-labeling data classification policies are set up and used" + }, + { + "service": "MIP", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mip_DLP_policies_Teams", + "title": "Ensure DLP policies are enabled for Microsoft Teams" + }, + { + "service": "MIP", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mip_management_API_enabled_four_workloads", + "title": "Ensure Office 365 Management Activity API is Enabled for some workloads (see description)" + }, + { + "service": "MIP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mip_purviewlabelconsent", + "title": "Extend M365 sensitivity labeling to assets in Microsoft Purview data map" + }, + { + "service": "MIP", + "tier": "Core", + "userImpact": null, + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mip_search_auditlog", + "title": "Ensure Microsoft 365 audit log search is Enabled" + }, + { + "service": "MIP", + "tier": "Core", + "userImpact": "High", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "mip_sensitivitylabelspolicies", + "title": "Publish M365 sensitivity label data classification policies" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "OneAdmin", + "title": "Designate more than one global admin" + }, + { + "service": "AzureAD", + "tier": "Core", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "PasswordHashSync", + "title": "Ensure that password hash sync is enabled for hybrid deployments" + }, + { + "service": "AzureAD", + "tier": "Defense In Depth", + "userImpact": "Moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "PWAgePolicyNew", + "title": "Ensure the \u0027Password expiration policy\u0027 is set to \u0027Set passwords to never expire (recommended)\u0027" + }, + { + "service": "AzureAD", + "tier": "Defense In Depth", + "userImpact": "Low", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "RoleOverlap", + "title": "Use least privileged administrative roles" + }, + { + "service": "AzureAD", + "tier": "Defense In Depth", + "userImpact": "Moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "SelfServicePasswordReset", + "title": "Ensure \u0027Self service password reset enabled\u0027 is set to \u0027All\u0027" + }, + { + "service": "AzureAD", + "tier": "Advanced", + "userImpact": "Moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "SigninRiskPolicy", + "title": "Enable Microsoft Entra ID Identity Protection sign-in risk policies" + }, + { + "service": "SPO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "spo_block_onedrive_sync_unmanaged_devices", + "title": "Block OneDrive for Business sync from unmanaged devices" + }, + { + "service": "SPO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "spo_external_sharing_managed", + "title": "Ensure SharePoint external sharing is managed through domain whitelist/blacklists" + }, + { + "service": "SPO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "spo_external_users_sharing", + "title": "Ensure that SharePoint guest users cannot share items they don\u0027t own" + }, + { + "service": "SPO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "spo_idle_session_timeout", + "title": "Sign out inactive users in SharePoint Online" + }, + { + "service": "SPO", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "spo_legacy_auth", + "title": "Ensure modern authentication for SharePoint applications is required" + }, + { + "service": "SWAY", + "tier": "Core", + "userImpact": "Unknown", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "sway_block_sharing_with_outside_users", + "title": "Ensure that Sways cannot be shared with people outside of your organization" + }, + { + "service": "AzureAD", + "tier": "Advanced", + "userImpact": "Moderate", + "vendorInformation": { + "provider": "SecureScore", + "providerVersion": null, + "subProvider": null, + "vendor": "Microsoft" + }, + "id": "UserRiskPolicy", + "title": "Enable Microsoft Entra ID Identity Protection user risk policies" + } +] diff --git a/public/sponsors/RoB-light.png b/public/sponsors/RoB-light.png new file mode 100644 index 000000000000..788811e2d3e2 Binary files /dev/null and b/public/sponsors/RoB-light.png differ diff --git a/public/sponsors/RoB-light.svg b/public/sponsors/RoB-light.svg new file mode 100644 index 000000000000..0673b2a8a449 --- /dev/null +++ b/public/sponsors/RoB-light.svg @@ -0,0 +1,17 @@ + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/public/sponsors/RoB.png b/public/sponsors/RoB.png new file mode 100644 index 000000000000..37da39dea601 Binary files /dev/null and b/public/sponsors/RoB.png differ diff --git a/public/sponsors/RoB.svg b/public/sponsors/RoB.svg new file mode 100644 index 000000000000..d188e1eb541b --- /dev/null +++ b/public/sponsors/RoB.svg @@ -0,0 +1,25 @@ + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/public/sponsors/augmentt-dark.png b/public/sponsors/augmentt-dark.png new file mode 100644 index 000000000000..e642669ef13f Binary files /dev/null and b/public/sponsors/augmentt-dark.png differ diff --git a/public/sponsors/augmentt-light.png b/public/sponsors/augmentt-light.png new file mode 100644 index 000000000000..53415a0d3f37 Binary files /dev/null and b/public/sponsors/augmentt-light.png differ diff --git a/public/sponsors/domotz-dark.png b/public/sponsors/domotz-dark.png new file mode 100644 index 000000000000..ac26f6f0f6ad Binary files /dev/null and b/public/sponsors/domotz-dark.png differ diff --git a/public/sponsors/domotz-light.png b/public/sponsors/domotz-light.png new file mode 100644 index 000000000000..dab40b067807 Binary files /dev/null and b/public/sponsors/domotz-light.png differ diff --git a/public/sponsors/huntress_teal.png b/public/sponsors/huntress_teal.png new file mode 100644 index 000000000000..40f6df3d3e55 Binary files /dev/null and b/public/sponsors/huntress_teal.png differ diff --git a/public/sponsors/ninjaone.png b/public/sponsors/ninjaone.png new file mode 100644 index 000000000000..cb3e1df2ec1c Binary files /dev/null and b/public/sponsors/ninjaone.png differ diff --git a/public/sponsors/ninjaone_white.png b/public/sponsors/ninjaone_white.png new file mode 100644 index 000000000000..3c67eb6f6f56 Binary files /dev/null and b/public/sponsors/ninjaone_white.png differ diff --git a/public/sponsors/relentless-dark.png b/public/sponsors/relentless-dark.png new file mode 100644 index 000000000000..b234ac7c7903 Binary files /dev/null and b/public/sponsors/relentless-dark.png differ diff --git a/public/sponsors/relentless-light.png b/public/sponsors/relentless-light.png new file mode 100644 index 000000000000..5884597febe7 Binary files /dev/null and b/public/sponsors/relentless-light.png differ diff --git a/public/sponsors/rewst.png b/public/sponsors/rewst.png new file mode 100644 index 000000000000..f1c2a948afb1 Binary files /dev/null and b/public/sponsors/rewst.png differ diff --git a/public/sponsors/rewst_dark.png b/public/sponsors/rewst_dark.png new file mode 100644 index 000000000000..38135052133e Binary files /dev/null and b/public/sponsors/rewst_dark.png differ diff --git a/public/sw.js b/public/sw.js new file mode 100644 index 000000000000..a5b7af04ecf4 --- /dev/null +++ b/public/sw.js @@ -0,0 +1,8 @@ +// Minimal service worker to satisfy Chrome's installability criteria. +// This does NOT cache anything or provide offline support — it simply +// passes all requests through to the network so Chrome treats the site +// as an installable web app. + +self.addEventListener('install', () => self.skipWaiting()) +self.addEventListener('activate', (event) => event.waitUntil(self.clients.claim())) +self.addEventListener('fetch', () => {}) diff --git a/public/version.json b/public/version.json new file mode 100644 index 000000000000..682cb83714dc --- /dev/null +++ b/public/version.json @@ -0,0 +1,3 @@ +{ + "version": "10.8.3" +} \ No newline at end of file diff --git a/public/version_latest.txt b/public/version_latest.txt deleted file mode 100644 index 798e38995c4d..000000000000 --- a/public/version_latest.txt +++ /dev/null @@ -1 +0,0 @@ -6.3.0 diff --git a/scripts/skip-export-build-traces.mjs b/scripts/skip-export-build-traces.mjs new file mode 100644 index 000000000000..dc20a9dbc6f9 --- /dev/null +++ b/scripts/skip-export-build-traces.mjs @@ -0,0 +1,41 @@ +// Workaround for a Next.js 16 build-time waste on `output: 'export'` builds. +// +// Next traces server-side file dependencies with @vercel/nft ("Collecting build traces") on every +// webpack build. For a static export there is NO server runtime, so that trace is never used — yet it +// costs roughly HALF the build wall-clock (measured ~256s; the single biggest serial phase, and on a +// 2-core CI runner it stacks on top of static generation). Next 14 let you skip it with +// `outputFileTracing: false`; Next 15+ removed that option and ships no replacement. +// +// This idempotently patches the installed Next build to gate the NFT step on `config.output !== 'export'` +// — exactly what the old flag did. It's safe: the trace result is never consumed for an export build +// (only `output: 'standalone'` reads it), and Next already does `await buildTracesPromise` where an +// unset (undefined) promise is a no-op. Run it immediately before `next build`. Re-running is harmless. +// Remove once Next skips build traces for `output: 'export'` upstream (track: vercel/next.js). +import { readFileSync, writeFileSync } from "node:fs"; +import { createRequire } from "node:module"; + +const require = createRequire(import.meta.url); + +let target; +try { + target = require.resolve("next/dist/build/index.js"); +} catch { + console.warn("[skip-export-traces] next/dist/build/index.js not resolvable — skipping (build still works)"); + process.exit(0); +} + +const NEEDLE = "!isGenerateMode && !buildTracesPromise) {"; +const PATCHED = "!isGenerateMode && !buildTracesPromise && config.output !== 'export') {"; + +let src = readFileSync(target, "utf8"); +if (src.includes(PATCHED)) { + console.log("[skip-export-traces] already patched — Next will skip build traces for output: export"); +} else if (src.includes(NEEDLE)) { + writeFileSync(target, src.replace(NEEDLE, PATCHED)); + console.log("[skip-export-traces] patched: Next will skip @vercel/nft build traces for output: export"); +} else { + console.warn( + "[skip-export-traces] WARNING: patch site not found — Next internals changed for this version. " + + "Build proceeds unpatched (just slower). Re-verify the gate in next/dist/build/index.js." + ); +} diff --git a/src/App.jsx b/src/App.jsx deleted file mode 100644 index 422ebac60c62..000000000000 --- a/src/App.jsx +++ /dev/null @@ -1,90 +0,0 @@ -import React, { Suspense } from 'react' -import { BrowserRouter, Route, Routes, Navigate, useLocation } from 'react-router-dom' -import { PrivateRoute, FullScreenLoading, ErrorBoundary } from 'src/components/utilities' -import 'src/scss/style.scss' -import { Helmet, HelmetProvider } from 'react-helmet-async' -import Skeleton from 'react-loading-skeleton' -import TimeAgo from 'javascript-time-ago' -import en from 'javascript-time-ago/locale/en.json' -TimeAgo.addDefaultLocale(en) -import { library } from '@fortawesome/fontawesome-svg-core' -import { fas } from '@fortawesome/free-solid-svg-icons' -import routes from 'src/routes' -import importsMap from './importsMap' - -library.add(fas) - -const dynamicImport = (path) => { - return importsMap[path] || null -} - -const DefaultLayout = React.lazy(() => import('./layout/DefaultLayout')) -const Page401 = React.lazy(() => import('./views/pages/page401/Page401')) -const Page403 = React.lazy(() => import('./views/pages/page403/Page403')) -const Page404 = React.lazy(() => import('./views/pages/page404/Page404')) -const Page500 = React.lazy(() => import('./views/pages/page500/Page500')) -const PageLogOut = React.lazy(() => import('src/views/pages/LogoutRedirect/PageLogOut')) -const Login = React.lazy(() => import('./views/pages/login/Login')) -const Logout = React.lazy(() => import('./views/pages/login/Logout')) -//we loop through the routes array, dynamicly create the component by using dynamicImport, add the component to the route array as 'component' key. - -const App = () => { - return ( - - - }> - - CIPP - - - } /> - } /> - } /> - } /> - } /> - } /> - } /> - - - - } - > - {routes.map((route, idx) => { - const allowedRoles = route.allowedRoles - const Routecomponent = dynamicImport(route.path) - //console.log('route', route) - //console.log('Routecomponent', Routecomponent) - return ( - route.component && ( - - }> - - - - - - } - /> - ) - ) - })} - } /> - - } /> - - - - - ) -} - -export default App diff --git a/src/App.test.js b/src/App.test.js deleted file mode 100644 index 8499039707b1..000000000000 --- a/src/App.test.js +++ /dev/null @@ -1,14 +0,0 @@ -import React from 'react' -import { shallow } from 'enzyme/build' -import App from './App' -import Dashboard from './views/dashboard/Dashboard.js' - -it('mounts App without crashing', () => { - const wrapper = shallow() - wrapper.unmount() -}) - -it('mounts Dashboard without crashing', () => { - const wrapper = shallow() - wrapper.unmount() -}) diff --git a/src/_nav.jsx b/src/_nav.jsx deleted file mode 100644 index bc1505aa763e..000000000000 --- a/src/_nav.jsx +++ /dev/null @@ -1,893 +0,0 @@ -import React from 'react' -import { CNavGroup, CNavItem, CNavTitle } from '@coreui/react' -import { FontAwesomeIcon } from '@fortawesome/react-fontawesome' -import { - faHome, - faWrench, - faChartBar, - faBook, - faTablet, - faShieldAlt, - faExchangeAlt, - faHdd, - faLink, - faUsers, - faWindowRestore, - faKey, - faBus, - faExclamationTriangle, - faUserShield, - faEnvelope, - faToolbox, - faDownload, -} from '@fortawesome/free-solid-svg-icons' - -const _nav = [ - { - component: CNavItem, - name: 'Dashboard', - section: 'Dashboard', - to: '/home', - icon: , - }, - { - component: CNavTitle, - name: 'Identity Management', - }, - { - component: CNavGroup, - section: 'Identity Management', - name: 'Administration', - to: '/identity/administration', - icon: , - items: [ - { - component: CNavItem, - name: 'Users', - to: '/identity/administration/users', - }, - { - component: CNavItem, - name: 'Risky Users', - to: '/identity/administration/risky-users', - }, - { - component: CNavItem, - name: 'Groups', - to: '/identity/administration/groups', - }, - { - component: CNavItem, - name: 'Devices', - to: '/identity/administration/devices', - }, - { - component: CNavItem, - name: 'Deploy Group Template', - to: '/identity/administration/deploy-group-template', - }, - { - component: CNavItem, - name: 'Group Templates', - to: '/identity/administration/group-templates', - }, - { - component: CNavItem, - name: 'Deleted Items', - to: '/identity/administration/deleted-items', - }, - { - component: CNavItem, - name: 'Roles', - to: '/identity/administration/roles', - }, - { - component: CNavItem, - name: 'JIT Admin', - to: '/identity/administration/jit-admin', - }, - { - component: CNavItem, - name: 'Offboarding Wizard', - to: '/identity/administration/offboarding-wizard', - }, - ], - }, - { - component: CNavGroup, - name: 'Reports', - section: 'Identity Management', - to: '/identity/reports', - icon: , - items: [ - { - component: CNavItem, - name: 'MFA Report', - to: '/identity/reports/mfa-report', - }, - { - component: CNavItem, - name: 'Inactive Users', - to: '/identity/reports/inactive-users-report', - }, - { - component: CNavItem, - name: 'Sign-in Report', - to: '/identity/reports/signin-report', - }, - { - component: CNavItem, - name: 'AAD Connect Report', - to: '/identity/reports/azure-ad-connect-report', - }, - { - component: CNavItem, - name: 'Risk Detections', - to: '/identity/reports/risk-detections', - }, - ], - }, - { - component: CNavTitle, - name: 'Tenant Administration', - }, - { - component: CNavGroup, - name: 'Administration', - section: 'Tenant Administration', - to: '/tenant/administration', - icon: , - items: [ - { - component: CNavItem, - name: 'Tenants', - to: '/tenant/administration/tenants', - }, - { - component: CNavItem, - name: 'Alert Configuration', - to: '/tenant/administration/alert-configuration', - }, - { - component: CNavItem, - name: 'Audit Logs', - to: '/tenant/administration/audit-logs', - }, - { - component: CNavItem, - name: 'Enterprise Applications', - to: '/tenant/administration/enterprise-apps', - }, - { - component: CNavItem, - name: 'Secure Score', - to: '/tenant/administration/securescore', - }, - { - component: CNavItem, - name: 'App Consent Requests', - to: '/tenant/administration/app-consent-requests', - }, - { - component: CNavItem, - name: 'Authentication Methods', - to: '/tenant/administration/authentication-methods', - }, - { - component: CNavItem, - name: 'Tenant Onboarding', - to: '/tenant/administration/tenant-onboarding', - }, - { - component: CNavItem, - name: 'Tenant Offboarding', - to: '/tenant/administration/tenant-offboarding-wizard', - }, - { - component: CNavItem, - name: 'Partner Relationships', - to: '/tenant/administration/partner-relationships', - }, - ], - }, - { - component: CNavGroup, - name: 'Configuration Backup', - section: 'Tenant Administration', - to: '/cipp/gdap', - icon: , - items: [ - { - component: CNavItem, - name: 'Backup Wizard', - to: '/tenant/backup/backup-wizard', - }, - { - component: CNavItem, - name: 'Restore Wizard', - to: '/tenant/backup/restore-wizard', - }, - ], - }, - { - component: CNavGroup, - name: 'Tools', - section: 'Tenant Administration', - to: '/tenant/administration', - icon: , - items: [ - { - component: CNavItem, - name: 'Graph Explorer', - to: '/tenant/administration/graph-explorer', - }, - { - component: CNavItem, - name: 'Application Approval', - to: '/tenant/administration/appapproval', - }, - { - component: CNavItem, - name: 'IP Database', - to: '/tenant/tools/geoiplookup', - }, - { - component: CNavItem, - name: 'Tenant Lookup', - to: '/tenant/administration/tenantlookup', - }, - { - component: CNavItem, - name: 'Individual Domain Check', - to: '/tenant/standards/individual-domains', - }, - { - component: CNavItem, - name: 'BPA Report Builder', - to: '/tenant/tools/bpa-report-builder', - }, - ], - }, - { - component: CNavGroup, - name: 'Standards', - section: 'Tenant Administration', - to: '/tenant/standards', - icon: , - items: [ - { - component: CNavItem, - name: 'Edit Standards', - to: '/tenant/standards/list-applied-standards', - }, - { - component: CNavItem, - name: 'List Standards', - to: '/tenant/standards/list-standards', - }, - { - component: CNavItem, - name: 'Best Practice Analyser', - to: '/tenant/standards/bpa-report', - }, - { - component: CNavItem, - name: 'Domains Analyser', - to: '/tenant/standards/domains-analyser', - }, - ], - }, - { - component: CNavGroup, - name: 'Conditional Access', - section: 'Tenant Administration', - to: '/tenant/administration', - icon: , - items: [ - { - component: CNavItem, - name: 'CA Policies', - to: '/tenant/conditional/list-policies', - }, - { - component: CNavItem, - name: 'Deploy CA Policies', - to: '/tenant/conditional/deploy', - }, - { - component: CNavItem, - name: 'CA Policy Tester', - to: '/tenant/conditional/test-policy', - }, - { - component: CNavItem, - name: 'CA Vacation Mode', - to: '/tenant/conditional/deploy-vacation', - }, - { - component: CNavItem, - name: 'CA Templates', - to: '/tenant/conditional/list-template', - }, - { - component: CNavItem, - name: 'Named Locations', - to: '/tenant/conditional/list-named-locations', - }, - { - component: CNavItem, - name: 'Deploy Named Locations', - to: '/tenant/conditional/deploy-named-location', - }, - ], - }, - { - component: CNavGroup, - name: 'GDAP Management', - section: 'Tenant Administration', - to: '/cipp/gdap', - icon: , - items: [ - { - component: CNavItem, - name: 'Invite Wizard', - to: '/tenant/administration/gdap-invite-wizard', - }, - { - component: CNavItem, - name: 'Invite List', - to: '/tenant/administration/gdap-invites', - }, - { - component: CNavItem, - name: 'GDAP Relationships', - to: '/tenant/administration/gdap-relationships', - }, - { - component: CNavItem, - name: 'Role Wizard', - to: '/tenant/administration/gdap-role-wizard', - }, - { - component: CNavItem, - name: 'GDAP Roles', - to: '/tenant/administration/gdap-roles', - }, - ], - }, - { - component: CNavGroup, - name: 'Reports', - section: 'Tenant Administration', - to: '/tenant/reports', - icon: , - items: [ - { - component: CNavItem, - name: 'Licence Report', - to: '/tenant/administration/list-licenses', - }, - { - component: CNavItem, - name: 'Consented Applications', - to: '/tenant/administration/application-consent', - }, - { - component: CNavItem, - name: 'Service Health', - to: '/tenant/administration/service-health', - }, - ], - }, - { - component: CNavTitle, - name: 'Security & Compliance', - }, - { - component: CNavGroup, - name: 'Incidents & Alerts', - section: 'Security & Compliance', - to: '/security/incidents', - icon: , - items: [ - { - component: CNavItem, - name: 'Incidents', - to: '/security/incidents/list-incidents', - }, - { - component: CNavItem, - name: 'Alerts', - to: '/security/incidents/list-alerts', - }, - ], - }, - { - component: CNavGroup, - name: 'Defender', - section: 'Security & Compliance', - to: '/security/defender', - icon: , - items: [ - { - component: CNavItem, - name: 'Defender Status', - to: '/security/defender/list-defender', - }, - { - component: CNavItem, - name: 'Defender Deployment', - to: '/security/defender/deployment', - }, - { - component: CNavItem, - name: 'Vulnerabilities', - to: '/security/defender/list-defender-tvm', - }, - ], - }, - { - component: CNavGroup, - name: 'Reports', - section: 'Security & Compliance', - to: '/security/reports', - icon: , - items: [ - { - component: CNavItem, - name: 'Device Compliance', - to: '/security/reports/list-device-compliance', - }, - ], - }, - { - component: CNavTitle, - name: 'Intune', - }, - { - component: CNavGroup, - name: 'Applications', - section: 'Intune', - to: '/endpoint/applications', - icon: , - items: [ - { - component: CNavItem, - name: 'Applications', - to: '/endpoint/applications/list', - }, - { - component: CNavItem, - name: 'Application Queue', - to: '/endpoint/applications/queue', - }, - { - component: CNavItem, - name: 'Add Choco App', - to: '/endpoint/applications/add-choco-app', - }, - { - component: CNavItem, - name: 'Add Store App', - to: '/endpoint/applications/add-winget-app', - }, - { - component: CNavItem, - name: 'Add Office App', - to: '/endpoint/applications/add-office-app', - }, - { - component: CNavItem, - name: 'Add MSP App', - to: '/endpoint/applications/add-rmm-app', - }, - ], - }, - { - component: CNavGroup, - name: 'Autopilot', - section: 'Intune', - to: '/endpoint/autopilot', - icon: , - items: [ - { - component: CNavItem, - name: 'Autopilot Devices', - to: '/endpoint/autopilot/list-devices', - }, - { - component: CNavItem, - name: 'Add Autopilot Device', - to: '/endpoint/autopilot/add-device', - }, - { - component: CNavItem, - name: 'Profiles', - to: '/endpoint/autopilot/list-profiles', - }, - { - component: CNavItem, - name: 'Add Profile', - to: '/endpoint/autopilot/add-profile', - }, - { - component: CNavItem, - name: 'Status Pages', - to: '/endpoint/autopilot/list-status-pages', - }, - { - component: CNavItem, - name: 'Add Status Page', - to: '/endpoint/autopilot/add-status-page', - }, - ], - }, - { - component: CNavGroup, - name: 'Device Management', - section: 'Intune', - to: '/endpoint/MEM', - icon: , - items: [ - { - component: CNavItem, - name: 'Devices', - to: '/endpoint/reports/devices', - }, - { - component: CNavItem, - name: 'Configuration Policies', - to: '/endpoint/MEM/list-policies', - }, - { - component: CNavItem, - name: 'Compliance Policies', - to: '/endpoint/MEM/list-compliance-policies', - }, - { - component: CNavItem, - name: 'Protection Policies', - to: '/endpoint/MEM/list-appprotection-policies', - }, - { - component: CNavItem, - name: 'Apply Policy', - to: '/endpoint/MEM/add-policy', - }, - { - component: CNavItem, - name: 'Policy Templates', - to: '/endpoint/MEM/list-templates', - }, - { - component: CNavItem, - name: 'Add Policy Template', - to: '/endpoint/MEM/add-policy-template', - }, - ], - }, - { - component: CNavTitle, - name: 'Teams & Sharepoint', - }, - { - component: CNavGroup, - name: 'OneDrive', - section: 'Teams & Sharepoint', - to: '/teams-share/onedrive', - icon: , - items: [ - { - component: CNavItem, - name: 'OneDrive', - to: '/teams-share/onedrive/list', - }, - ], - }, - { - component: CNavGroup, - name: 'SharePoint', - section: 'Teams & Sharepoint', - to: '/teams-share/sharepoint', - icon: , - items: [ - { - component: CNavItem, - name: 'SharePoint', - to: '/teams-share/sharepoint/list-sharepoint', - }, - ], - }, - { - component: CNavGroup, - name: 'Teams', - section: 'Teams & Sharepoint', - to: '/teams-share/teams', - icon: , - items: [ - { - component: CNavItem, - name: 'Teams', - to: '/teams-share/teams/list-team', - }, - { - component: CNavItem, - name: 'Add Team', - to: '/teams-share/teams/add-team', - }, - { - component: CNavItem, - name: 'Teams Activity', - to: '/teams-share/teams/teams-activity', - }, - { - component: CNavItem, - name: 'Business Voice', - to: '/teams-share/teams/business-voice', - }, - ], - }, - { - component: CNavTitle, - name: 'Email & Exchange', - }, - { - component: CNavGroup, - name: 'Administration', - section: 'Email & Exchange', - to: '/email/Administration', - icon: , - items: [ - { - component: CNavItem, - name: 'Mailboxes', - to: '/email/administration/mailboxes', - }, - { - component: CNavItem, - name: 'Deleted Mailboxes', - to: '/email/administration/deleted-mailboxes', - }, - { - component: CNavItem, - name: 'Mailbox Rules', - to: '/email/administration/mailbox-rules', - }, - { - component: CNavItem, - name: 'Contacts', - to: '/email/administration/contacts', - }, - { - component: CNavItem, - name: 'Quarantine', - to: '/email/administration/quarantine', - }, - { - component: CNavItem, - name: 'Tenant Allow/Block Lists', - to: '/email/administration/tenant-allow-block-lists', - }, - ], - }, - { - component: CNavGroup, - name: 'Tools', - section: 'Email & Exchange', - to: '/email/tools', - icon: , - items: [ - { - component: CNavItem, - name: 'Mailbox Restore Wizard', - to: '/email/tools/mailbox-restore-wizard', - }, - { - component: CNavItem, - name: 'Mailbox Restores', - to: '/email/tools/mailbox-restores', - }, - { - component: CNavItem, - name: 'Mail Test', - to: '/email/tools/mail-test', - }, - { - component: CNavItem, - name: 'Message Viewer', - to: '/email/tools/message-viewer', - }, - ], - }, - { - component: CNavGroup, - name: 'Transport', - section: 'Email & Exchange', - to: '/email/Transport', - icon: , - items: [ - { - component: CNavItem, - name: 'Transport rules', - to: '/email/transport/list-rules', - }, - { - component: CNavItem, - name: 'Deploy Transport rule', - to: '/email/transport/deploy-rules', - }, - { - component: CNavItem, - name: 'Transport Templates', - to: '/email/transport/list-templates', - }, - { - component: CNavItem, - name: 'Connectors', - to: '/email/connectors/list-connectors', - }, - { - component: CNavItem, - name: 'Deploy Connector Templates', - to: '/email/connectors/deploy-connector', - }, - { - component: CNavItem, - name: 'Connector Templates', - to: '/email/connectors/list-connector-templates', - }, - ], - }, - { - component: CNavGroup, - name: 'Spamfilter', - section: 'Email & Exchange', - to: '/email/spamfilter', - icon: , - items: [ - { - component: CNavItem, - name: 'Spamfilter', - to: '/email/spamfilter/list-spamfilter', - }, - { - component: CNavItem, - name: 'Apply Spamfilter Template', - to: '/email/spamfilter/deploy', - }, - { - component: CNavItem, - name: 'Templates', - to: '/email/spamfilter/list-templates', - }, - ], - }, - { - component: CNavGroup, - name: 'Resource Management', - section: 'Email & Exchange', - to: '/resources/management', - icon: , - items: [ - { - component: CNavItem, - name: 'Rooms', - to: '/resources/management/list-rooms', - }, - { - component: CNavItem, - name: 'Room Lists', - to: '/resources/management/room-lists', - }, - ], - }, - { - component: CNavGroup, - name: 'Reports', - section: 'Email & Exchange', - to: '/email/reports', - icon: , - items: [ - { - component: CNavItem, - name: 'Mailbox Statistics', - to: '/email/reports/mailbox-statistics', - }, - { - component: CNavItem, - name: 'Mailbox Client Access Settings', - to: '/email/reports/mailbox-cas-settings', - }, - { - component: CNavItem, - name: 'Message Trace', - to: '/email/reports/message-trace', - }, - { - component: CNavItem, - name: 'Anti-Phishing Filters', - to: '/email/reports/antiphishing-filters', - }, - { - component: CNavItem, - name: 'Malware Filters', - to: '/email/reports/malware-filters', - }, - { - component: CNavItem, - name: 'Safe Links Filters', - to: '/email/reports/safelinks-filters', - }, - { - component: CNavItem, - name: 'Safe Attachments Filters', - to: '/email/reports/safeattachments-filters', - }, - { - component: CNavItem, - name: 'Shared Mailbox with Enabled Account', - to: '/email/reports/SharedMailboxEnabledAccount', - }, - ], - }, - { - component: CNavTitle, - name: 'Settings', - }, - { - component: CNavGroup, - name: 'CIPP', - section: 'Settings', - to: '/cipp/cipp', - icon: , - items: [ - { - component: CNavItem, - name: 'Application Settings', - to: '/cipp/settings', - }, - { - component: CNavItem, - name: 'Extensions Settings', - to: '/cipp/extensions', - }, - { - component: CNavItem, - name: 'Extension Sync', - to: '/cipp/extension-sync', - }, - { - component: CNavItem, - name: 'User Settings', - to: '/cipp/user-settings', - }, - { - component: CNavItem, - name: 'Scheduler', - to: '/cipp/scheduler', - }, - { - component: CNavItem, - name: 'Logbook', - to: '/cipp/logs', - }, - { - component: CNavItem, - name: 'Statistics', - to: '/cipp/statistics', - }, - { - component: CNavItem, - name: 'SAM Setup Wizard', - to: '/cipp/setup', - }, - { - component: CNavItem, - name: 'Log Out', - to: '/logout', - }, - ], - }, -] - -export default _nav diff --git a/src/api/ApiCall.jsx b/src/api/ApiCall.jsx new file mode 100644 index 000000000000..579161a8225a --- /dev/null +++ b/src/api/ApiCall.jsx @@ -0,0 +1,316 @@ +import { useInfiniteQuery, useMutation, useQuery, useQueryClient } from "@tanstack/react-query"; +import axios, { isAxiosError } from "axios"; +import { useDispatch } from "react-redux"; +import { showToast } from "../store/toasts"; +import { getCippError } from "../utils/get-cipp-error"; +import { buildVersionedHeaders } from "../utils/cippVersion"; + +const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"); +const wildcardToRegExp = (pattern) => + new RegExp(`^${pattern.split("*").map(escapeRegExp).join(".*")}$`); +const matchesWildcardPattern = (queryKey, pattern) => wildcardToRegExp(pattern).test(queryKey); + +export function ApiGetCall(props) { + const { + url, + queryKey, + relatedQueryKeys, + waiting = true, + retry = 3, + data, + bulkRequest = false, + toast = false, + onResult, + staleTime = 300000, + refetchOnWindowFocus = false, + refetchOnMount = true, + refetchOnReconnect = true, + keepPreviousData = false, + refetchInterval = false, + responseType = "json", + convertToDataUrl = false, + } = props; + const queryClient = useQueryClient(); + const dispatch = useDispatch(); + const MAX_RETRIES = retry; + const HTTP_STATUS_TO_NOT_RETRY = [302, 401, 403, 404, 500]; + const retryFn = (failureCount, error) => { + let returnRetry = true; + if (failureCount >= MAX_RETRIES) { + returnRetry = false; + } + if (isAxiosError(error) && HTTP_STATUS_TO_NOT_RETRY.includes(error.response?.status ?? 0)) { + if ( + error.response?.status === 302 && + error.response?.headers.get("location").includes("/.auth/login/aad") + ) { + queryClient.invalidateQueries({ queryKey: ["authmecipp"] }); + } + returnRetry = false; + } + if (returnRetry === false && toast) { + dispatch( + showToast({ + message: `${getCippError(error)}`, + title: `${ + error.config?.params?.tenantFilter ? error.config?.params?.tenantFilter : "" + } Error`, + }), + ); + } + return returnRetry; + }; + + const queryInfo = useQuery({ + enabled: waiting, + queryKey: [queryKey], + queryFn: async ({ signal }) => { + if (bulkRequest && Array.isArray(data)) { + const results = []; + for (let i = 0; i < data.length; i++) { + const element = data[i]; + const response = await axios.get(url, { + signal: signal, + params: element, + headers: await buildVersionedHeaders(), + }); + results.push(response.data); + if (onResult) { + onResult(response.data); // Emit each result as it arrives + } + } + if (relatedQueryKeys) { + const clearKeys = Array.isArray(relatedQueryKeys) ? relatedQueryKeys : [relatedQueryKeys]; + setTimeout(() => { + // Separate wildcard patterns from exact keys + const wildcardPatterns = clearKeys.filter((key) => key.includes("*")); + const exactKeys = clearKeys.filter((key) => !key.includes("*")); + + // Use single predicate call for all wildcard patterns + if (wildcardPatterns.length > 0) { + queryClient.invalidateQueries({ + predicate: (query) => { + if (!query.queryKey || !query.queryKey[0]) return false; + const queryKeyStr = String(query.queryKey[0]); + return wildcardPatterns.some((pattern) => + matchesWildcardPattern(queryKeyStr, pattern), + ); + }, + }); + } + + // Handle exact keys + exactKeys.forEach((key) => { + queryClient.invalidateQueries({ queryKey: [key] }); + }); + }, 1000); + } + return results; + } else { + const response = await axios.get(url, { + signal: url === "/api/tenantFilter" ? null : signal, + params: data, + headers: await buildVersionedHeaders(), + responseType: responseType, + }); + + let responseData = response.data; + + // Convert blob to data URL if requested + if (convertToDataUrl && responseType === "blob" && response.data) { + responseData = await new Promise((resolve) => { + const reader = new FileReader(); + reader.onloadend = () => resolve(reader.result); + reader.readAsDataURL(response.data); + }); + } + + if (onResult) { + onResult(responseData); // Emit each result as it arrives + } + if (relatedQueryKeys) { + const clearKeys = Array.isArray(relatedQueryKeys) ? relatedQueryKeys : [relatedQueryKeys]; + setTimeout(() => { + // Separate wildcard patterns from exact keys + const wildcardPatterns = clearKeys.filter((key) => key.includes("*")); + const exactKeys = clearKeys.filter((key) => !key.includes("*")); + + // Use single predicate call for all wildcard patterns + if (wildcardPatterns.length > 0) { + queryClient.invalidateQueries({ + predicate: (query) => { + if (!query.queryKey || !query.queryKey[0]) return false; + const queryKeyStr = String(query.queryKey[0]); + return wildcardPatterns.some((pattern) => + matchesWildcardPattern(queryKeyStr, pattern), + ); + }, + }); + } + + // Handle exact keys + exactKeys.forEach((key) => { + queryClient.invalidateQueries({ queryKey: [key] }); + }); + }, 1000); + } + return responseData; + } + }, + staleTime: staleTime, + refetchOnWindowFocus: refetchOnWindowFocus, + refetchOnMount: refetchOnMount, + refetchOnReconnect: refetchOnReconnect, + keepPreviousData: keepPreviousData, + refetchInterval: refetchInterval, + retry: retryFn, + }); + return queryInfo; +} + +export function ApiPostCall({ relatedQueryKeys, onResult }) { + const queryClient = useQueryClient(); + + const mutation = useMutation({ + mutationFn: async (props) => { + const { url, data, bulkRequest } = props; + if (bulkRequest && Array.isArray(data)) { + const results = []; + for (let i = 0; i < data.length; i++) { + let element = data[i]; + const response = await axios.post(url, element, { + headers: await buildVersionedHeaders(), + }); + results.push(response.data); + if (onResult) { + onResult(response.data); // Emit each result as it arrives + } + } + return results; + } else { + const response = await axios.post(url, data, { headers: await buildVersionedHeaders() }); + if (onResult) { + onResult(response.data); // Emit each result as it arrives + } + return response; + } + }, + onSuccess: () => { + if (relatedQueryKeys) { + const clearKeys = Array.isArray(relatedQueryKeys) ? relatedQueryKeys : [relatedQueryKeys]; + setTimeout(() => { + if (relatedQueryKeys === "*") { + console.log("Invalidating all queries"); + queryClient.invalidateQueries(); + } else { + // Separate wildcard patterns from exact keys + const wildcardPatterns = clearKeys.filter((key) => key.includes("*")); + const exactKeys = clearKeys.filter((key) => !key.includes("*")); + + // Use single predicate call for all wildcard patterns + if (wildcardPatterns.length > 0) { + queryClient.invalidateQueries({ + predicate: (query) => { + if (!query.queryKey || !query.queryKey[0]) return false; + const queryKeyStr = String(query.queryKey[0]); + const matches = wildcardPatterns.some((pattern) => + matchesWildcardPattern(queryKeyStr, pattern), + ); + + // Debug logging for each query check + if (matches) { + console.log("Invalidating query:", { + queryKey: query.queryKey, + queryKeyStr, + matchedPattern: wildcardPatterns.find((pattern) => + matchesWildcardPattern(queryKeyStr, pattern), + ), + }); + } + + return matches; + }, + }); + } + + // Handle exact keys + exactKeys.forEach((key) => { + queryClient.invalidateQueries({ queryKey: [key] }); + }); + } + }, 1000); + } + }, + }); + + return mutation; +} + +export function ApiGetCallWithPagination({ + url, + queryKey, + retry = 3, + data, + toast = false, + waiting = true, +}) { + const dispatch = useDispatch(); + const queryClient = useQueryClient(); + const MAX_RETRIES = retry; + const HTTP_STATUS_TO_NOT_RETRY = [302, 401, 403, 404, 500]; + + const retryFn = (failureCount, error) => { + let returnRetry = true; + if (failureCount >= MAX_RETRIES) { + returnRetry = false; + } + if (isAxiosError(error) && HTTP_STATUS_TO_NOT_RETRY.includes(error.response?.status ?? 0)) { + if ( + error.response?.status === 302 && + error.response?.headers.get("location").includes("/.auth/login/aad") + ) { + queryClient.invalidateQueries({ queryKey: ["authmecipp"] }); + } + returnRetry = false; + } + + if (returnRetry === false && toast) { + dispatch( + showToast({ + message: getCippError(error), + title: "Error", + toastError: error, + }), + ); + } + return returnRetry; + }; + + const queryInfo = useInfiniteQuery({ + queryKey: [queryKey], + enabled: waiting, + queryFn: async ({ pageParam = null, signal }) => { + const response = await axios.get(url, { + signal: signal, + params: { ...data, ...pageParam }, + headers: await buildVersionedHeaders(), + }); + return response.data; + }, + getNextPageParam: (lastPage) => { + if ( + data?.noPagination || + data?.manualPagination === false || + data?.tenantFilter === "AllTenants" + ) { + return undefined; + } + return lastPage?.Metadata?.nextLink ? { nextLink: lastPage.Metadata.nextLink } : undefined; + }, + staleTime: 300000, + refetchOnWindowFocus: false, + retry: retryFn, + }); + + return queryInfo; +} diff --git a/src/assets/images/CIPP.png b/src/assets/images/CIPP.png deleted file mode 100644 index cf279633a13f..000000000000 Binary files a/src/assets/images/CIPP.png and /dev/null differ diff --git a/src/assets/images/CIPP_Dark.png b/src/assets/images/CIPP_Dark.png deleted file mode 100644 index c270631a0d48..000000000000 Binary files a/src/assets/images/CIPP_Dark.png and /dev/null differ diff --git a/src/assets/images/avatars/0.jpg b/src/assets/images/avatars/0.jpg deleted file mode 100644 index 7eb8194d40cd..000000000000 Binary files a/src/assets/images/avatars/0.jpg and /dev/null differ diff --git a/src/assets/images/logo-square.png b/src/assets/images/logo-square.png deleted file mode 100644 index 81eff1991d19..000000000000 Binary files a/src/assets/images/logo-square.png and /dev/null differ diff --git a/src/assets/images/logo.png b/src/assets/images/logo.png deleted file mode 100644 index 8caed1332233..000000000000 Binary files a/src/assets/images/logo.png and /dev/null differ diff --git a/src/components/BECRemediationReportButton.js b/src/components/BECRemediationReportButton.js new file mode 100644 index 000000000000..bd0255fdb1fc --- /dev/null +++ b/src/components/BECRemediationReportButton.js @@ -0,0 +1,902 @@ +import { useState } from 'react' +import { + Button, + Tooltip, + Dialog, + DialogTitle, + DialogContent, + DialogActions, + Box, + Typography, + IconButton, + CircularProgress, +} from '@mui/material' +import { PictureAsPdf, Download, Close } from '@mui/icons-material' +import { PDFViewer, PDFDownloadLink } from '@react-pdf/renderer' +import { useReportVariables } from './CippPdf/useReportVariables' +import { useBrandingSettings } from './CippPdf/useBrandingSettings' +import { + AlertBox, + Bold, + Bullet, + BulletList, + ClearBox, + ContentPage, + CoverMeta, + InfoBox, + Note, + Paragraph, + ReportDocument, + Section, + StatRow, +} from './CippPdf' + +// BEC Remediation PDF Document Component +// Exported so the branding preview can render this report against sample data, and so tests can +// render it to a real PDF. +export const BECRemediationReportDocument = ({ + userData, + becData, + brandingSettings, + tenantName, + remediationData, + variables, +}) => { + const currentDate = new Date().toLocaleDateString('en-US', { + year: 'numeric', + month: 'long', + day: 'numeric', + }) + + + // Helper function to format dates + const formatDate = (dateString) => { + if (!dateString) return 'N/A' + try { + return new Date(dateString).toLocaleString('en-US', { + year: 'numeric', + month: 'short', + day: 'numeric', + hour: '2-digit', + minute: '2-digit', + }) + } catch { + return dateString + } + } + + const formatSafelistValue = (value) => { + if (!value) return 'unchanged' + return Array.isArray(value) ? value.join(', ') || 'unchanged' : String(value) + } + + // Calculate statistics + const stats = { + newRules: becData?.NewRules?.length || 0, + ruleChanges: becData?.InboxRuleChanges?.length || 0, + newUsers: becData?.NewUsers?.length || 0, + newApps: becData?.AddedApps?.length || 0, + permissionChanges: becData?.MailboxPermissionChanges?.length || 0, + mfaDevices: becData?.MFADevices?.length || 0, + passwordChanges: becData?.ChangedPasswords?.length || 0, + trustedSenders: becData?.TrustedSenders?.length || 0, + blockedSenders: becData?.BlockedSenders?.length || 0, + safelistChanges: becData?.SafelistChanges?.length || 0, + intuneDevices: becData?.IntuneDevices?.length || 0, + } + + const intuneWindowStart = (() => { + const extractedAt = becData?.ExtractedAt ? new Date(becData.ExtractedAt) : new Date() + if (Number.isNaN(extractedAt.getTime())) { + return new Date(Date.now() - 7 * 24 * 60 * 60 * 1000) + } + return new Date(extractedAt.getTime() - 7 * 24 * 60 * 60 * 1000) + })() + + const recentIntuneDevices = (becData?.IntuneDevices || []).filter((device) => { + if (!device?.enrolledDateTime) return false + const enrolled = new Date(device.enrolledDateTime) + if (Number.isNaN(enrolled.getTime())) return false + return enrolled >= intuneWindowStart + }) + stats.recentIntuneDevices = recentIntuneDevices.length + + const sortedIntuneDevices = [...(becData?.IntuneDevices || [])].sort((a, b) => { + const aTime = a?.enrolledDateTime ? new Date(a.enrolledDateTime).getTime() : 0 + const bTime = b?.enrolledDateTime ? new Date(b.enrolledDateTime).getTime() : 0 + return bTime - aTime + }) + + // Determine threat level + const calculateThreatLevel = () => { + let threatScore = 0 + if (stats.newRules > 0) threatScore += 3 + if (stats.ruleChanges > 0) threatScore += 3 + if (stats.permissionChanges > 0) threatScore += 2 + if (stats.newApps > 0) threatScore += 2 + if (stats.newUsers > 5) threatScore += 1 + if (stats.safelistChanges > 0) threatScore += 2 + + // Check for suspicious rules (RSS folder moves) + const hasSuspiciousRules = becData?.NewRules?.some((rule) => rule.MoveToFolder?.includes('RSS')) + if (hasSuspiciousRules) threatScore += 5 + + if (threatScore >= 7) return { level: 'High', color: '#742A2A' } + if (threatScore >= 4) return { level: 'Medium', color: '#744210' } + return { level: 'Low', color: '#22543D' } + } + + const threatLevel = calculateThreatLevel() + + return ( + + } + > + {/* EXECUTIVE SUMMARY PAGE */} + + +
+ + This report documents the findings of a Business Email Compromise (BEC) investigation + performed for the user account{' '} + {userData?.userPrincipalName} within{' '} + {tenantName}. The investigation analyzed + suspicious activity indicators including mailbox rules, permission changes, new + applications, and authentication patterns over a 7-day period. + + + + Business Email Compromise is a sophisticated scam targeting organizations that regularly + perform wire transfers or have established relationships with foreign suppliers. + Attackers compromise legitimate email accounts through social engineering or computer + intrusion techniques to conduct unauthorized fund transfers, steal sensitive + information, or impersonate executives. + +
+ +
+ + + + + {threatLevel.level === 'High' && + 'HIGH RISK: Multiple indicators of compromise detected. Immediate remediation actions are strongly recommended. This account shows patterns consistent with active Business Email Compromise attacks.'} + {threatLevel.level === 'Medium' && + 'MEDIUM RISK: Suspicious activity patterns detected. Review findings and consider implementing recommended security measures. Some indicators suggest potential unauthorized access.'} + {threatLevel.level === 'Low' && + 'LOW RISK: Minimal suspicious activity detected. The findings show standard user behavior with no significant indicators of compromise. Continue monitoring as a precautionary measure.'} + +
+ +
+ {becData?.ExtractResult || 'Unknown'} + + Last 7 days ending {becData?.ExtractedAt ? formatDate(becData.ExtractedAt) : 'N/A'} + +
+ + + {/* UNDERSTANDING BEC PAGE */} + + +
+ + Business Email Compromise (BEC) is a type of cyberattack where criminals gain + unauthorized access to a business email account. Once inside, attackers can: + + + + Read sensitive + emails to learn about business operations, financial processes, and key + relationships. + + Send fraudulent + emails appearing to come from company leadership requesting wire transfers or + sensitive data. + + Intercept + legitimate invoices and alter payment information to redirect funds to + attacker-controlled accounts. + + Create email rules to + automatically delete or hide messages, preventing detection. + + +
+ +
+ + Attackers typically gain access to email accounts through: + + + + Deceptive emails that trick + users into providing their login credentials on fake websites. + + Automated attempts to + log in using common passwords across many accounts. + + Using usernames and + passwords leaked from other breached websites. + + Software that captures + keystrokes or steals stored passwords from compromised devices. + + +
+ +
+ + This analysis was initiated because suspicious activity was detected or reported for + this user account. The investigation examines multiple indicators that might suggest + account compromise, including unusual mailbox rules, unexpected permission changes, new + application authorizations, and abnormal sign-in patterns. Early detection is critical + to minimize potential damage and prevent financial loss or data theft. + +
+ + + {/* DETAILED FINDINGS PAGE */} + + + {/* Check 1: Mailbox Rules */} +
+ + Attackers often create email rules to automatically forward, delete, or hide messages. + This prevents victims from seeing evidence of fraudulent activity. Suspicious rules + may move emails to obscure folders like "RSS Subscriptions" or forward them to + external addresses. + + + {stats.newRules > 0 && ( + <> + + The following mailbox rules were detected. Review each rule carefully to determine + if it was created by the user or by an attacker. Rules that forward emails or move + them to unusual folders are particularly suspicious. + + + {becData.NewRules.slice(0, 10).map((rule, index) => ( + + Description: {rule.Description || 'No description available'} + {'\n'} + {rule.MoveToFolder && `Moves to: ${rule.MoveToFolder}`} + {rule.ForwardTo && `\nForwards to: ${rule.ForwardTo}`} + {rule.DeleteMessage && '\nDeletes messages'} + {rule.RecentlyChanged && '\nCreated or changed in the last 7 days'} + + ))} + {becData.NewRules.length > 10 && ( + + ... and {becData.NewRules.length - 10} more rules (see JSON export for full list) + + )} + + )} + {stats.ruleChanges > 0 && ( + <> + + The audit log recorded inbox rules being created, changed or removed on this + mailbox. Rules that were removed after use are a common way for attackers to cover + their tracks. + + + {becData.InboxRuleChanges.slice(0, 10).map((change, index) => ( + + Date: {change.Date || 'Unknown'} + {'\n'} + By: {change.UserKey || 'Unknown'} + {change.Parameters && `\nParameters: ${change.Parameters}`} + + ))} + {becData.InboxRuleChanges.length > 10 && ( + + ... and {becData.InboxRuleChanges.length - 10} more changes (see JSON export for + full list) + + )} + + )} + {stats.newRules === 0 && stats.ruleChanges === 0 && ( + + No mailbox rules were detected that match suspicious patterns. This is a positive + indicator. + + )} +
+ + + {/* CHECK 2: NEW USERS */} + + +
+ + Attackers sometimes create new user accounts to maintain persistent access or to use + as staging accounts for fraudulent activities. Reviewing recently created users helps + identify unauthorized account creation. + + + {stats.newUsers > 0 ? ( + <> + + The following users were created in the last 7 days. Verify that each account + creation was authorized and legitimate. + + + {becData.NewUsers.slice(0, 8).map((user, index) => ( + + Email: {user.userPrincipalName || 'N/A'} + {'\n'} + Created: {formatDate(user.createdDateTime)} + + ))} + {becData.NewUsers.length > 8 && ( + + ... and {becData.NewUsers.length - 8} more users (see JSON export for full list) + + )} + + ) : ( + + No new user accounts were created during the analysis period. + + )} +
+ + {/* Check 3: New Applications */} +
+ + Attackers may authorize malicious or suspicious third-party applications to access + your email and data. These applications can read emails, send messages, and access + files without the user's explicit knowledge. + + + {stats.newApps > 0 ? ( + <> + + New applications were granted access during the analysis period. Review each + application to ensure it was authorized and is from a trusted publisher. + + + {becData.AddedApps.slice(0, 6).map((app, index) => ( + + Publisher: {app.publisher || 'Unknown'} + {'\n'} + App ID: {app.appId || 'N/A'} + {'\n'} + Created: {formatDate(app.createdDateTime)} + + ))} + {becData.AddedApps.length > 6 && ( + + ... and {becData.AddedApps.length - 6} more apps (see JSON export for full list) + + )} + + ) : ( + + No new applications were authorized during the analysis period. + + )} +
+ + + {/* CHECK 4, 5, 6: PERMISSIONS, MFA, PASSWORDS */} + + + {/* Check 4: Mailbox Permission Changes */} +
+ + Unauthorized changes to mailbox permissions can allow attackers to grant themselves or + accomplices access to read, send, or manage emails. This is a common technique to + maintain persistent access. + + + {stats.permissionChanges > 0 ? ( + <> + + Mailbox permission changes were detected. Verify that each change was authorized + and necessary for legitimate business purposes. + + + {becData.MailboxPermissionChanges.slice(0, 5).map((change, index) => ( + + User: {change.UserKey || 'Unknown'} + {'\n'} + Target: {change.ObjectId || 'N/A'} + {'\n'} + Permissions: {change.Permissions || 'Unknown'} + + ))} + {becData.MailboxPermissionChanges.length > 5 && ( + + ... and {becData.MailboxPermissionChanges.length - 5} more changes + + )} + + ) : ( + + No mailbox permission changes were detected during the analysis period. + + )} +
+ + {/* Check 5: MFA Devices */} +
+ + Multi-factor authentication (MFA) devices provide an additional layer of security. + Reviewing registered MFA methods helps identify if attackers have added unauthorized + devices to bypass security controls. + + + {stats.mfaDevices > 0 ? ( + <> + + ℹ {stats.mfaDevices} MFA device(s) registered. Verify each device belongs to the + user. + + + {becData.MFADevices.slice(0, 5).map((device, index) => ( + + Display Name: {device.displayName || 'N/A'} + {'\n'} + Registered: {formatDate(device.createdDateTime)} + + ))} + + ) : ( + + No multi-factor authentication devices are registered. MFA is highly recommended to + prevent unauthorized access. + + )} +
+ + {/* Check 6: Password Changes */} +
+ + Attackers often change passwords to lock out legitimate users. Reviewing recent + password changes in the tenant helps identify if the compromised account's password + was changed or if other accounts were affected. + + + {stats.passwordChanges > 0 ? ( + <> + + ℹ {stats.passwordChanges} password change(s) detected in the tenant during the + analysis period. + + + {becData.ChangedPasswords.slice(0, 5).map((user, index) => ( + + Email: {user.userPrincipalName || 'N/A'} + {'\n'} + Last Password Change: {formatDate(user.lastPasswordChangeDateTime)} + + ))} + + ) : ( + + ℹ No password changes detected during the analysis period. + + )} +
+ + {/* Check 7: Trusted & Blocked Senders */} +
+ + Attackers may add their own domain to the Trusted Senders list so their fraudulent + messages bypass spam filtering, or add finance/security domains to the Blocked + Senders list so warnings and alerts are hidden from the victim in the Junk Email + folder. + + + {stats.safelistChanges > 0 && ( + <> + + The audit log recorded changes to the Trusted/Blocked Senders and Domains list on + this mailbox. Review each change carefully. + + + {becData.SafelistChanges.slice(0, 10).map((change, index) => ( + + Date: {formatDate(change.Date)} + {'\n'} + Trusted: {formatSafelistValue(change.Trusted)} + {'\n'} + Blocked: {formatSafelistValue(change.Blocked)} + + ))} + + )} + + {stats.trustedSenders > 0 && ( + {becData.TrustedSenders.slice(0, 15).join(', ')} + )} + + {stats.blockedSenders > 0 && ( + {becData.BlockedSenders.slice(0, 15).join(', ')} + )} + + {stats.trustedSenders === 0 && stats.blockedSenders === 0 && stats.safelistChanges === 0 && ( + + No trusted or blocked sender/domain entries were found on this mailbox. + + )} +
+ + {/* Check 8: Intune Devices */} +
+ + Newly enrolled Intune devices can indicate an attacker standing up a VM or BYOD + endpoint under the compromised identity, including paths that re-register Windows + Hello for Business. Review devices enrolled during the analysis window first. + + + {becData?.IntuneDevicesError ? ( + + {becData.IntuneDevicesError} + {'\n'} + An empty device list here does not mean the user has no Intune devices. + + ) : stats.intuneDevices > 0 ? ( + <> + + ℹ {stats.intuneDevices} Intune-managed device(s) associated with this user + {stats.recentIntuneDevices > 0 + ? `, including ${stats.recentIntuneDevices} enrolled in the last 7 days.` + : '. None were enrolled in the last 7 days.'} + + + {sortedIntuneDevices.slice(0, 5).map((device, index) => ( + + OS: {device.operatingSystem || 'N/A'} + {device.osVersion ? ` ${device.osVersion}` : ''} + {'\n'} + Enrolled: {formatDate(device.enrolledDateTime)} + {'\n'} + Compliance: {device.complianceState || 'N/A'} + {'\n'} + Enrollment Type: {device.deviceEnrollmentType || 'N/A'} + {device.serialNumber ? `\nSerial: ${device.serialNumber}` : ''} + + ))} + + ) : ( + + No Intune-managed devices were found for this user. + + )} +
+ + + {/* RECOMMENDATIONS PAGE */} + + +
+ + Based on the investigation findings, the following actions should be taken immediately: + + + + Change the user's + password immediately to prevent further unauthorized access. + + Sign out the user from + all active sessions to terminate any attacker access. + + Delete any + mailbox rules that forward, redirect, or hide emails, especially those moving + messages to unusual folders. + + Remove any MFA + devices that the user doesn't recognize and re-register legitimate devices. + + Review and revoke any + unauthorized mailbox permissions or application consents. + + Continue monitoring the + account for suspicious activity for at least 30 days. + + +
+ +
+ + To prevent future Business Email Compromise attacks, implement these security best + practices: + + + + {' '} + Require MFA for all users, especially those with administrative privileges or access + to financial systems. + + {' '} + Educate employees about phishing, social engineering, and how to identify suspicious + emails. Regular training significantly reduces successful attacks. + + Use + email security solutions that detect and block phishing, malware, and suspicious + attachments. + + {' '} + Restrict access based on location, device compliance, and risk level to prevent + unauthorized sign-ins. + + Regularly review + audit logs for suspicious activities such as unusual sign-in patterns, rule + creation, or permission changes. + + Implement + multi-person approval processes for wire transfers and payment changes to prevent + fraudulent transactions. + + +
+ +
+ + Share these key points with the affected user to help prevent future compromises: + + + + + Never click on links or open attachments in unexpected emails, even if they appear + to come from known contacts. + + + Always verify unusual requests for money transfers or sensitive information through + a separate communication channel (phone call, in person). + + + Use strong, unique passwords for each account and consider using a password manager. + + + Be cautious when authorizing new applications or granting permissions to third-party + services. + + + Report suspicious emails or activities to your IT security team immediately. + + +
+ + + {/* COMPLIANCE & DOCUMENTATION PAGE */} + + +
+ + This report supports compliance and documentation requirements for various security + frameworks and regulatory standards: + + + + Demonstrates incident + detection, analysis, and response procedures (Controls A.16.1.1 - A.16.1.7). + + Provides evidence of + security incident monitoring, analysis, and documentation (AC.L2-3.1.12, + AU.L2-3.3.1). + + Documents detective and + responsive controls for security incidents (CC7.3, CC7.4). + + Aligns with Detect (DE.AE, + DE.CM) and Respond (RS.AN, RS.MI) functions. + + Demonstrates security breach + detection and potential data breach assessment (Articles 32, 33). + + +
+ +
+ + This investigation and resulting documentation provide an audit trail for security + incident response: + + + + Investigation Date: {formatDate(becData?.ExtractedAt)} + {'\n'} + Analyzed User: {userData?.userPrincipalName} + {'\n'} + Organization: {tenantName} + {'\n'} + Analysis Period: 7 days + {'\n'} + Audit Log Status: {becData?.ExtractResult || 'Unknown'} + + + + Threat Level: {threatLevel.level} + {'\n'} + Mailbox Rules Found: {stats.newRules} + {'\n'} + Rule Changes: {stats.ruleChanges} + {'\n'} + Permission Changes: {stats.permissionChanges} + {'\n'} + New Applications: {stats.newApps} + {'\n'} + New Users: {stats.newUsers} + {'\n'} + MFA Devices: {stats.mfaDevices} + {'\n'} + Password Changes: {stats.passwordChanges} + {'\n'} + Trusted Senders: {stats.trustedSenders} + {'\n'} + Blocked Senders: {stats.blockedSenders} + {'\n'} + Safelist Changes: {stats.safelistChanges} + {'\n'} + Intune Devices: {stats.intuneDevices} + {'\n'} + Recent Intune Enrollments (7d): {stats.recentIntuneDevices} + +
+ +
+ + This report should be retained according to your organization's document retention + policy and regulatory requirements. Typical retention periods range from 3-7 years + depending on applicable compliance frameworks. Store this document securely with + restricted access as it contains sensitive security information. + +
+ +
+ + For more information about Business Email Compromise and cybersecurity best practices: + + + + + FBI IC3: Internet Crime Complaint Center (ic3.gov) + + + CISA: Cybersecurity & Infrastructure Security Agency (cisa.gov) + + + Microsoft Security: Business Email Compromise resources + + +
+ + + ) +} + +// Main Button Component +export const BECRemediationReportButton = ({ userData, becData, tenantName }) => { + const [dialogOpen, setDialogOpen] = useState(false) + const [isGenerating, setIsGenerating] = useState(false) + + // Check if we have the necessary data + const hasData = userData && becData && !becData.Waiting + + const brandingSettings = useBrandingSettings() + const variables = useReportVariables() + + const handleOpenDialog = () => { + setDialogOpen(true) + } + + const handleCloseDialog = () => { + setDialogOpen(false) + } + + if (!hasData) { + return null // Don't show button if data isn't ready + } + + return ( + <> + + + + + + + + + BEC Remediation Report Preview + + + + + + + + {hasData && ( + + + + )} + + + + + } + fileName={`BEC_Report_${userData?.userPrincipalName}_${new Date().toISOString().split('T')[0]}.pdf`} + style={{ textDecoration: 'none' }} + > + {({ loading }) => ( + + )} + + + + + ) +} \ No newline at end of file diff --git a/src/components/CSVReader.jsx b/src/components/CSVReader.jsx new file mode 100644 index 000000000000..be3f6f67f02a --- /dev/null +++ b/src/components/CSVReader.jsx @@ -0,0 +1,163 @@ +import React, { useState, useEffect } from "react"; +import { useCSVReader, lightenDarkenColor, formatFileSize } from "react-papaparse"; +import { Box, Typography, useTheme } from "@mui/material"; +import { CloudUpload } from "@mui/icons-material"; + +/* + * These colors define our remove button states. The light version is + * calculated rather than hardcoded - a small touch that ensures + * consistent color relationships no matter what base color we use. + * + * Sometimes it's these little details that make a component feel polished. + */ +const DEFAULT_REMOVE_HOVER_COLOR = "#A01919"; +const REMOVE_HOVER_COLOR_LIGHT = lightenDarkenColor(DEFAULT_REMOVE_HOVER_COLOR, 40); + +/* + * This component has evolved from a simple file input to a polished + * upload zone that maintains state between wizard steps. It's a good + * example of how components grow with requirements while trying to + * keep their core purpose clear. + * + * The journey to this version taught us about: + * - Proper event handling with third-party libraries + * - State persistence in multi-step forms + * - The value of simple solutions (sessionStorage vs complex state) + */ +export default function CSVReader({ config, onDrop, onRemove }) { + const { CSVReader } = useCSVReader(); + const [zoneHover, setZoneHover] = useState(false); + const [removeHoverColor, setRemoveHoverColor] = useState(DEFAULT_REMOVE_HOVER_COLOR); + const [storedFile, setStoredFile] = useState(null); + const theme = useTheme(); + + /* + * On mount, we check sessionStorage for file details. This lets us + * restore the preview when users navigate back to this step. + * + * It's a simple solution that works well - sometimes the best + * approaches don't need complex state management. The fact that + * it "just works" is a feature, not a bug. + */ + useEffect(() => { + const fileName = sessionStorage.getItem('csvFileName'); + const fileSize = sessionStorage.getItem('csvFileSize'); + if (fileName && fileSize) { + console.log('Restoring file preview:', fileName); + setStoredFile({ + name: fileName, + size: parseInt(fileSize, 10) + }); + } + }, []); + + return ( + { + console.log('File accepted:', file.name); + onDrop(results.data); + setZoneHover(false); + setStoredFile(file); + // Store file details for persistence between steps + sessionStorage.setItem('csvFileName', file.name); + sessionStorage.setItem('csvFileSize', file.size.toString()); + }} + onDragOver={(event) => { + event.preventDefault(); + setZoneHover(true); + }} + onDragLeave={(event) => { + event.preventDefault(); + setZoneHover(false); + }} + > + {({ getRootProps, acceptedFile, ProgressBar, getRemoveFileProps, Remove }) => ( + + {(acceptedFile || storedFile) ? ( + + + + + + {acceptedFile?.name || storedFile?.name} + + + {formatFileSize(acceptedFile?.size || storedFile?.size)} + + + + + {acceptedFile && } + + {/* + * The remove button's event handling taught us about working with + * third-party libraries. Instead of fighting the library's patterns, + * we adapted to work with them. A good reminder that sometimes + * the best solution is to follow the path of least resistance. + */} + { + console.log('Removing file'); + setStoredFile(null); + sessionStorage.removeItem('csvFileName'); + sessionStorage.removeItem('csvFileSize'); + // Notify parent that file was removed + onRemove?.(); + } + })} + > + + + + ) : ( + + + + Drop CSV file here + + + or click to browse + + + )} + + )} + + ); +} \ No newline at end of file diff --git a/src/components/CippAllTenants/AllTenantsDashboard.jsx b/src/components/CippAllTenants/AllTenantsDashboard.jsx new file mode 100644 index 000000000000..5ca488bc2ce3 --- /dev/null +++ b/src/components/CippAllTenants/AllTenantsDashboard.jsx @@ -0,0 +1,594 @@ +import { Box, Card, CardContent, CardHeader, Divider, Stack, Typography } from '@mui/material' +import { Grid } from '@mui/system' +import Link from 'next/link' +import { Button } from '@mui/material' +import { + BuildingOffice2Icon, + DevicePhoneMobileIcon, + EnvelopeIcon, + UsersIcon, +} from '@heroicons/react/24/outline' +import { getCippError } from '../../utils/get-cipp-error' +import { CippInfoBar } from '../CippCards/CippInfoBar' +import { useAllTenantsDashboard } from './useAllTenantsDashboard' +import { + AllTenantsBandHeading, + AllTenantsBarList, + AllTenantsMeterList, + AllTenantsRowList, + AllTenantsTrendChart, + AllTenantsStatTile, + severityColor, +} from './AllTenantsPrimitives' + +/** Card shell that renders its own fetch error inline rather than blanking the section. */ +const DashboardCard = ({ title, subheader, api, children, action }) => { + const isError = Array.isArray(api) ? api.some((item) => item?.isError) : api?.isError + const error = Array.isArray(api) ? api.find((item) => item?.isError)?.error : api?.error + + return ( + + + + + {isError ? ( + + {getCippError(error)} + + ) : ( + children + )} + + + ) +} + +export const AllTenantsDashboard = () => { + const { + tenantCount, + tenants, + alignmentApi, + failedTestsApi, + domainsApi, + countsApi, + logsApi, + secureScoreApi, + delegation, + alignment, + tests, + mail, + cache, + logs, + secureScore, + attention, + } = useAllTenantsDashboard() + + // Four items exactly — CippInfoBar lays out md:3 across and its divider rules target the 3rd and + // 4th cells. Each tile links to the list page behind its number. + const scaleLinks = { + Users: '/identity/administration/users', + Mailboxes: '/email/administration/mailboxes', + 'Managed devices': '/endpoint/MEM/devices', + } + + const portfolioBarItems = [ + { + name: 'Tenants', + data: tenantCount.toLocaleString(), + icon: , + toolTip: 'Tenants under management. Select to open the tenant list.', + link: '/tenant/administration/tenants', + }, + ...cache.scale.map((item) => ({ + name: item.label, + data: item.value.toLocaleString(), + icon: + item.label === 'Users' ? ( + + ) : item.label === 'Mailboxes' ? ( + + ) : ( + + ), + toolTip: `${item.average.toLocaleString()} per tenant on average. Select to open the list.`, + link: scaleLinks[item.label], + })), + ] + + const alignmentBuckets = [ + { label: '90% and above', value: alignment.buckets.strong, severity: 'ok' }, + { label: '75 – 89%', value: alignment.buckets.good, severity: 'info' }, + { label: '50 – 74%', value: alignment.buckets.weak, severity: 'warning' }, + { label: 'Below 50%', value: alignment.buckets.poor, severity: 'critical' }, + ] + + return ( + + {/* ----------------------------------------------------------- portfolio */} + + + + {!countsApi.isLoading && !cache.hasData && ( + + No cached collections were returned. The nightly cache job may not have run yet. + + )} + + + {/* ------------------------------------------------------------ security */} + + + + + + View + + } + > + + + + {secureScore.average}% + + + across {secureScore.scored} tenants + + + {secureScore.delta !== null && secureScore.delta !== undefined && ( + + 0 + ? 'ok' + : secureScore.delta < 0 + ? 'critical' + : 'neutral' + ), + }} + > + {secureScore.delta > 0 ? '▲' : secureScore.delta < 0 ? '▼' : '■'}{' '} + {Math.abs(secureScore.delta)} pts + + + over {secureScore.trend.length} days + + + )} + + + {secureScore.scored > 0 ? ( + <> + + 0 ? 'ok' : 'info' + } + /> + + + + + Best + + + {secureScore.best?.name} + + + {secureScore.best?.percent}% + + + + + Worst + + + {secureScore.worst?.name} + + + {secureScore.worst?.percent}% + + + + + ) : ( + !secureScoreApi.isLoading && ( + + No cached secure scores yet. + + ) + )} + + + + + + View + + } + > + + + + {tests.identityTenantCount} + + + of {tenantCount} tenants failing +
+ an identity check + + + + {tests.identityRows.length > 0 ? ( + + + Most widespread + + {tests.identityRows.map((row) => ( + + + {row.label} + + + {row.tenantCount} + + + ))} + + ) : ( + !failedTestsApi.isLoading && ( + + No failing identity checks. + + ) + )} + + + + + + View + + } + > + {mail.meters.length ? ( + + ) : ( + !domainsApi.isLoading && ( + + No analysed domains yet. + + ) + )} + + + + + View + + } + > + + + + {alignment.average}% + + + portfolio average + + + + ({ + label: bucket.label, + total: bucket.value, + segments: [{ value: bucket.value, severity: bucket.severity }], + }))} + /> + {alignment.lowest.length > 0 && ( + + + Lowest scoring + + + {alignment.lowest.map((item) => ( + + + {item.name} + + + {item.score}% + + + ))} + + + )} + + + + + + {/* ---------------------------------------------------------- operations */} + + + + + + + + + + + + + + + + + + + + + + + + + + + + + {delegation.noAutoExtendSoon > 0 && ( + + + {delegation.noAutoExtendSoon} expiring without auto-extend + + + {delegation.urgent + .filter((item) => !item.hasAutoExtend) + .slice(0, 3) + .map((item) => item.name) + .join(' · ')} + + + )} + + + + + + + + + + + {cache.freshness.fresh} + + + fresh + + + + + {cache.freshness.stale} + + + stale + + + + + {cache.freshness.missing} + + + never cached + + + + + + + + + + + + + + ) +} diff --git a/src/components/CippAllTenants/AllTenantsPrimitives.jsx b/src/components/CippAllTenants/AllTenantsPrimitives.jsx new file mode 100644 index 000000000000..dd3f075ac3fb --- /dev/null +++ b/src/components/CippAllTenants/AllTenantsPrimitives.jsx @@ -0,0 +1,411 @@ +import { + Box, + Card, + Chip, + LinearProgress, + Skeleton, + Stack, + Tooltip, + Typography, +} from '@mui/material' +import { useTheme } from '@mui/material/styles' +import Link from 'next/link' +import { + Area, + AreaChart, + CartesianGrid, + ResponsiveContainer, + Tooltip as RechartsTooltip, + XAxis, + YAxis, +} from 'recharts' + +// Shared severity vocabulary for the All Tenants dashboard. Kept separate from the primary accent +// so a card's colour always encodes state, never branding. +export const SEVERITY_COLORS = { + critical: 'error.main', + warning: 'warning.main', + ok: 'success.main', + info: 'info.main', + neutral: 'divider', +} + +export const severityColor = (severity) => SEVERITY_COLORS[severity] ?? SEVERITY_COLORS.neutral + +const CHIP_COLOR = { + critical: 'error', + warning: 'warning', + ok: 'success', + info: 'info', + neutral: 'default', +} + +/** + * KPI tile with a severity stripe down the left edge, so the thing needing attention reads at a + * glance without parsing the number first. Pass `link` to make the whole tile navigate to the page + * where the number can be dug into. + */ +export const AllTenantsStatTile = ({ + value, + label, + meta, + severity = 'neutral', + isFetching, + link, +}) => { + const tile = ( + + + {isFetching ? : value} + + + {isFetching ? : label} + + {(meta || isFetching) && ( + + {isFetching ? : meta} + + )} + + ) + + if (!link) return tile + + return ( + + {tile} + + ) +} + +/** + * Rows of `label — stacked bar — value`. Segments are drawn proportionally to `max` so bars stay + * comparable across rows rather than each normalising to its own total. + */ +export const AllTenantsBarList = ({ rows = [], max, isFetching, emptyText = 'No data' }) => { + if (isFetching) { + return ( + + {[0, 1, 2, 3].map((key) => ( + + ))} + + ) + } + + if (!rows.length) { + return ( + + {emptyText} + + ) + } + + const scale = max ?? Math.max(...rows.map((row) => row.total ?? 0), 1) + + return ( + + {rows.map((row) => ( + + + {row.label} + + + {(row.segments ?? []).map((segment, index) => ( + + + + ))} + + + {row.total} + + + ))} + + ) +} + +/** + * Severity-striped rows with an optional status chip. Used wherever a card is a short worklist + * rather than a chart. + */ +export const AllTenantsRowList = ({ rows = [], isFetching, emptyText = 'Nothing to report' }) => { + if (isFetching) { + return ( + + {[0, 1, 2].map((key) => ( + + ))} + + ) + } + + if (!rows.length) { + return ( + + {emptyText} + + ) + } + + return ( + + {rows.map((row, index) => ( + + + + {row.name} + + {row.detail && ( + // component="div" matters: caption renders as a by default, and noWrap's + // overflow/text-overflow do nothing on an inline element — the text would run under + // the chip instead of truncating. + + {row.detail} + + )} + + {row.chipLabel && ( + + )} + + ))} + + ) +} + +/** Labelled percentage meters, for pass-rate style measures. */ +export const AllTenantsMeterList = ({ meters = [], isFetching }) => { + if (isFetching) { + return ( + + {[0, 1, 2, 3].map((key) => ( + + ))} + + ) + } + + return ( + + {meters.map((meter) => ( + + + + {meter.label} + + + {meter.percent}% + + + + {meter.caption && ( + + {meter.caption} + + )} + + ))} + + ) +} + +/** + * Compact trend area chart, built on recharts to match the charts on the Worker Health page. + * + * The Y axis is scaled to the series' own range (padded, never narrower than 10 points) rather than + * a full 0-100, so small real movements stay legible instead of flattening into a straight line. + */ +export const AllTenantsTrendChart = ({ + points = [], + severity = 'ok', + height = 150, + unit = '%', + isFetching, +}) => { + const theme = useTheme() + + if (isFetching) { + return + } + + if (points.length < 2) { + return ( + + + Not enough history yet for a trend + + + ) + } + + const values = points.map((point) => point.percent) + const lo = Math.min(...values) + const hi = Math.max(...values) + const mid = (lo + hi) / 2 + const span = Math.max(hi - lo, 10) + const min = Math.max(0, Math.floor(mid - span / 2 - span * 0.2)) + const max = Math.min(100, Math.ceil(mid + span / 2 + span * 0.2)) + + const stroke = + { + critical: theme.palette.error.main, + warning: theme.palette.warning.main, + ok: theme.palette.success.main, + info: theme.palette.info.main, + }[severity] ?? theme.palette.primary.main + + return ( + + {/* numeric height, recharts warns before its first measure when both sizes are percentages */} + + + + + + [`${value}${unit}`, 'Average']} + contentStyle={{ + backgroundColor: theme.palette.background.paper, + border: `1px solid ${theme.palette.divider}`, + borderRadius: 4, + }} + /> + + + + + ) +} + +/** Band heading that separates the dashboard into Portfolio / Security / Operations. */ +export const AllTenantsBandHeading = ({ title, description }) => ( + + {title} + + {description} + + +) diff --git a/src/components/CippAllTenants/AllTenantsSecureScore.jsx b/src/components/CippAllTenants/AllTenantsSecureScore.jsx new file mode 100644 index 000000000000..65fb1c01fb1e --- /dev/null +++ b/src/components/CippAllTenants/AllTenantsSecureScore.jsx @@ -0,0 +1,287 @@ +import { useMemo } from 'react' +import { + Box, + Card, + CardContent, + CardHeader, + Divider, + LinearProgress, + Skeleton, + Stack, + Typography, +} from '@mui/material' +import { Grid } from '@mui/system' +import Link from 'next/link' +import { + ArrowTrendingDownIcon, + ArrowTrendingUpIcon, + EyeIcon, + ExclamationTriangleIcon, + ShieldCheckIcon, + TrophyIcon, +} from '@heroicons/react/24/outline' +import { ApiGetCall } from '../../api/ApiCall.jsx' +import { getCippError } from '../../utils/get-cipp-error' +import { CippInfoBar } from '../CippCards/CippInfoBar' +import { CippDataTable } from '../CippTable/CippDataTable' +import { AllTenantsTrendChart, severityColor } from './AllTenantsPrimitives' +import { asArray, deriveSecureScoreSummary } from './useAllTenantsDashboard' + +/** + * Estate-wide secure score, rendered by the secure score tabs when the tenant selector is on + * AllTenants: the summary on Tenant Overview, the per-tenant table on Table Overview. Built from + * the nightly-cache report rather than live Graph calls, and shares its query key with the All + * Tenants dashboard card — both tabs and the dashboard resolve from one request. + */ +const useSecureScoreReport = () => { + const reportApi = ApiGetCall({ + url: '/api/ListSecureScoreReport', + data: { tenantFilter: 'AllTenants', includeHistory: 'true' }, + queryKey: 'AllTenantsDashboard-SecureScore', + }) + + const rows = useMemo(() => asArray(reportApi.data), [reportApi.data]) + const summary = useMemo(() => deriveSecureScoreSummary(rows), [rows]) + + return { reportApi, rows, summary } +} + +const scoreSeverity = (value) => (value >= 75 ? 'ok' : value >= 50 ? 'warning' : 'critical') + +/** + * Ranked tenant rows with a score bar; each row links to that tenant's own secure score view via + * the tenantFilter query param, which the tenant selector picks up. + */ +const LeaderboardCard = ({ title, subheader, rows, isFetching }) => ( + + + + + {isFetching ? ( + + {[0, 1, 2, 3, 4].map((key) => ( + + ))} + + ) : rows.length === 0 ? ( + + No scored tenants yet + + ) : ( + + {rows.map((row) => ( + + + #{row.rank} + + + + {row.name} + + + + + {row.percent}% + + + ))} + + )} + + +) + +const ReportError = ({ error }) => ( + + + + {getCippError(error)} + + + +) + +export const AllTenantsSecureScoreSummary = () => { + const { reportApi, summary } = useSecureScoreReport() + + if (reportApi.isError) return + + const deltaLabel = + summary.delta === null ? '—' : `${summary.delta > 0 ? '+' : ''}${summary.delta} pts` + + const infoBarItems = [ + { + name: 'Portfolio average', + data: `${summary.average}%`, + icon: , + toolTip: `Average of each tenant's latest cached score, across ${summary.scored} tenants`, + }, + { + name: summary.trend.length > 1 ? `Change over ${summary.trend.length} days` : 'Change', + data: deltaLabel, + icon: summary.delta < 0 ? : , + color: summary.delta < 0 ? 'error' : summary.delta > 0 ? 'success' : 'primary', + toolTip: 'Movement of the portfolio average across the retained history window', + }, + { + name: 'Highest', + data: summary.best ? `${summary.best.percent}%` : '—', + icon: , + color: 'success', + toolTip: summary.best + ? `${summary.best.name} — ${summary.best.current} of ${summary.best.max} points` + : 'No scored tenants yet', + }, + { + name: 'Lowest', + data: summary.worst ? `${summary.worst.percent}%` : '—', + icon: , + color: 'error', + toolTip: summary.worst + ? `${summary.worst.name} — ${summary.worst.current} of ${summary.worst.max} points` + : 'No scored tenants yet', + }, + ] + + // Ranks are estate-wide (1 = best). The boards never overlap: bottom takes the worst five, + // top takes whatever best tenants remain on estates smaller than ten. + const bottomRows = summary.ranked.slice(0, 5).map((row, index) => ({ + ...row, + rank: summary.ranked.length - index, + })) + const topRows = summary.ranked + .slice(Math.max(5, summary.ranked.length - 5)) + .reverse() + .map((row, index) => ({ ...row, rank: index + 1 })) + + return ( + + + + + + + + + + 0 ? 'ok' : 'info'} + /> + + + + + + + + + + + + ) +} + +export const AllTenantsSecureScoreTable = () => { + const { reportApi, rows } = useSecureScoreReport() + + if (reportApi.isError) return + + if (!reportApi.isLoading && rows.length === 0) { + return ( + + + + No cached secure scores yet. Scores appear after the nightly cache job has run. + + + + ) + } + + return ( + reportApi.refetch()} + simpleColumns={[ + 'TenantName', + 'Tenant', + 'PercentageScore', + 'CurrentScore', + 'MaxScore', + 'CapturedAt', + ]} + defaultSorting={[{ id: 'PercentageScore', desc: false }]} + actions={[ + { + label: 'View tenant secure score', + link: '/tenant/administration/securescore?tenantFilter=[Tenant]', + icon: , + }, + ]} + /> + ) +} diff --git a/src/components/CippAllTenants/AllTenantsTestResults.jsx b/src/components/CippAllTenants/AllTenantsTestResults.jsx new file mode 100644 index 000000000000..3c0b517ca832 --- /dev/null +++ b/src/components/CippAllTenants/AllTenantsTestResults.jsx @@ -0,0 +1,259 @@ +import { useMemo, useState } from 'react' +import { + Button, + Card, + CardContent, + Skeleton, + Stack, + Typography, +} from '@mui/material' +import { Grid } from '@mui/system' +import { EyeIcon } from '@heroicons/react/24/outline' +import { ApiGetCall } from '../../api/ApiCall.jsx' +import { getCippError } from '../../utils/get-cipp-error' +import { CippDataTable } from '../CippTable/CippDataTable' +import { CippTestDetailOffCanvas } from '../CippTestDetail/CippTestDetailOffCanvas' +import { AllTenantsStatTile } from './AllTenantsPrimitives' +import { asArray } from './useAllTenantsDashboard' + +/** + * Detail pane for one test result row. The estate-wide list is fetched summaryOnly (no + * ResultMarkdown/ResultDataJson), so the full row — a PartitionKey+RowKey point read — is fetched + * here on demand, only when a row is opened. + */ +const LazyTestDetail = ({ row }) => { + const detailApi = ApiGetCall({ + url: '/api/ListTestResultsTenants', + data: { tenantFilter: row.Tenant, testId: row.RowKey }, + queryKey: `TestResultDetail-${row.Tenant}-${row.RowKey}`, + }) + + if (detailApi.isLoading) { + return ( + + + + + + ) + } + + if (detailApi.isError) { + return ( + + {getCippError(detailApi.error)} + + ) + } + + const detail = asArray(detailApi.data)[0] + return +} + +const RISK_FILTERS = [ + { + filterName: 'High Risk', + value: [{ id: 'Risk', value: 'High' }], + type: 'column', + }, + { + filterName: 'Medium Risk', + value: [{ id: 'Risk', value: 'Medium' }], + type: 'column', + }, + { + filterName: 'Low Risk', + value: [{ id: 'Risk', value: 'Low' }], + type: 'column', + }, +] + +const TRIAGE_FILTERS = [ + { + filterName: 'Failed', + value: [{ id: 'Status', value: 'Failed' }], + type: 'column', + }, + { + filterName: 'Investigate', + value: [{ id: 'Status', value: 'Investigate' }], + type: 'column', + }, + ...RISK_FILTERS, +] + +const ALL_STATUS_FILTERS = [ + { + filterName: 'Failed', + value: [{ id: 'Status', value: 'Failed' }], + type: 'column', + }, + { + filterName: 'Passed', + value: [{ id: 'Status', value: 'Passed' }], + type: 'column', + }, + { + filterName: 'Investigate', + value: [{ id: 'Status', value: 'Investigate' }], + type: 'column', + }, + { + filterName: 'Skipped', + value: [{ id: 'Status', value: 'Skipped' }], + type: 'column', + }, + ...RISK_FILTERS, +] + +/** + * Cross-tenant test results for one test type, rendered by the Identity / Devices / Custom + * dashboard tabs when the tenant selector is on AllTenants. + * + * Reads precomputed results from the CippTestResults table — no live Graph calls. The scale + * levers, learned the hard way on large estates: rows come back summaryOnly (no result blobs), + * only Failed/Investigate rows are returned by default (rowStatus) while the tiles stay accurate + * via server-side counts over every status (includeCounts), and the per-row detail off-canvas + * lazily fetches the full single row. "Show all results" opts into the full row set. + */ +export const AllTenantsTestResults = ({ testType, title, perTenantPath }) => { + const [showAll, setShowAll] = useState(false) + + const reportApi = ApiGetCall({ + url: '/api/ListTestResultsTenants', + data: { + tenantFilter: 'AllTenants', + testType, + summaryOnly: 'true', + includeCounts: 'true', + ...(showAll ? {} : { rowStatus: 'Failed,Investigate' }), + }, + queryKey: `AllTenants-TestResults-${testType}-${showAll ? 'all' : 'triage'}`, + }) + + const rows = useMemo(() => asArray(reportApi.data), [reportApi.data]) + const counts = reportApi.data?.Counts + + const stats = useMemo(() => { + const passed = Number(counts?.Passed ?? 0) + const failed = Number(counts?.Failed ?? 0) + const decided = passed + failed + return { + failed, + totalResults: Number(counts?.TotalResults ?? 0), + tenantsFailing: Number(counts?.TenantsFailing ?? 0), + tenantsTotal: Number(counts?.TenantsWithResults ?? 0), + highRisk: Number(counts?.HighRiskFailed ?? 0), + passRate: decided > 0 ? Math.round((passed / decided) * 100) : null, + } + }, [counts]) + + if (reportApi.isError) { + return ( + + + + {getCippError(reportApi.error)} + + + + ) + } + + return ( + + + + + + + + + + + + + = 90 + ? 'ok' + : stats.passRate >= 70 + ? 'warning' + : 'critical' + } + value={stats.passRate === null ? '—' : `${stats.passRate}%`} + label="Pass rate" + meta="Passed vs failed" + /> + + + + setShowAll((current) => !current)} + > + {showAll ? 'Show failed & investigate only' : 'Show all results'} + + } + simpleColumns={[ + 'TenantName', + 'Name', + 'Suite', + 'Status', + 'Risk', + 'Category', + 'LastRun', + ]} + filters={showAll ? ALL_STATUS_FILTERS : TRIAGE_FILTERS} + offCanvas={{ + size: 'lg', + children: (row) => , + }} + offCanvasOnRowClick={true} + actions={ + perTenantPath + ? [ + { + label: 'View tenant dashboard', + link: `${perTenantPath}?tenantFilter=[Tenant]`, + icon: , + }, + ] + : [] + } + maxHeightOffset="600px" + /> + + ) +} diff --git a/src/components/CippAllTenants/useAllTenantsDashboard.js b/src/components/CippAllTenants/useAllTenantsDashboard.js new file mode 100644 index 000000000000..5d3882102119 --- /dev/null +++ b/src/components/CippAllTenants/useAllTenantsDashboard.js @@ -0,0 +1,545 @@ +import { useMemo } from 'react' +import { ApiGetCall } from '../../api/ApiCall.jsx' + +// Some CIPP endpoints return a bare array, others wrap in { Results: [...] }. Normalise both. +export const asArray = (payload) => { + if (Array.isArray(payload)) return payload + if (Array.isArray(payload?.Results)) return payload.Results + return [] +} + +const daysUntil = (value) => { + if (!value) return null + const end = new Date(value) + if (Number.isNaN(end.getTime())) return null + return Math.floor((end.getTime() - Date.now()) / 86400000) +} + +const hoursSince = (value) => { + if (!value) return null + const then = new Date(value) + if (Number.isNaN(then.getTime())) return null + return (Date.now() - then.getTime()) / 3600000 +} + +const percent = (part, total) => (total > 0 ? Math.round((part / total) * 100) : 0) + +/** + * Latest-score summary plus portfolio trend from ListSecureScoreReport rows. Pure so the dashboard + * card and the full-page All Tenants secure score view derive identical numbers from one shape. + * `displayNameByDomain` is only a fallback — the endpoint already resolves TenantName for tenants + * it still knows about. + */ +export const deriveSecureScoreSummary = (rows, displayNameByDomain = new Map()) => { + const empty = { + average: 0, + best: null, + worst: null, + scored: 0, + trend: [], + delta: null, + ranked: [], + } + if (!rows.length) return empty + + const scored = rows.filter((row) => Number(row?.MaxScore) > 0) + if (!scored.length) return empty + + const withNames = scored.map((row) => ({ + tenant: row.Tenant, + name: row.TenantName || displayNameByDomain.get(row.Tenant) || row.Tenant, + percent: Number(row.PercentageScore ?? 0), + current: Number(row.CurrentScore ?? 0), + max: Number(row.MaxScore ?? 0), + })) + + const sorted = [...withNames].sort((a, b) => a.percent - b.percent) + + // Portfolio trend: average the per-tenant percentage for each captured day. Each day is averaged + // only over the tenants that actually reported it, so a tenant that started reporting mid-window + // does not drag the earlier points down. + const byDate = new Map() + scored.forEach((row) => { + ;(row.History ?? []).forEach((point) => { + const date = String(point?.Date ?? '').slice(0, 10) + if (!date) return + const entry = byDate.get(date) ?? { total: 0, count: 0 } + entry.total += Number(point?.PercentageScore ?? 0) + entry.count += 1 + byDate.set(date, entry) + }) + }) + + const trend = [...byDate.entries()] + .sort((a, b) => a[0].localeCompare(b[0])) + .map(([date, value]) => ({ + date, + percent: value.count ? Math.round((value.total / value.count) * 10) / 10 : 0, + })) + + const delta = + trend.length > 1 + ? Math.round((trend[trend.length - 1].percent - trend[0].percent) * 10) / 10 + : null + + return { + average: Math.round(withNames.reduce((sum, row) => sum + row.percent, 0) / withNames.length), + worst: sorted[0], + best: sorted[sorted.length - 1], + scored: withNames.length, + trend, + delta, + // Every scored tenant, worst first — the full-page view's leaderboards slice this. + ranked: sorted, + } +} + +// Headline collections for the Portfolio info bar. Three, so that with the tenant count they fill +// CippInfoBar's four-across grid exactly — its divider rules assume four items. Each tile links +// through to the corresponding list page. +const SCALE_TYPES = [ + { type: 'Users', label: 'Users' }, + { type: 'Mailboxes', label: 'Mailboxes' }, + { type: 'ManagedDevices', label: 'Managed devices' }, +] + +/** + * Every read the All Tenants dashboard performs, plus the derivations each card needs. + * + * Deliberately built only from endpoints that a baseline `readonly` user can call, and only from + * data that was reduced to a number before the request arrived (test results, alignment scores, + * cache count rows). Nothing here hydrates per-user or per-device records across the estate. + */ + +export const useAllTenantsDashboard = () => { + const tenantsApi = ApiGetCall({ + url: '/api/ListTenants', + queryKey: 'AllTenantsDashboard-Tenants', + waiting: true, + }) + + const alignmentApi = ApiGetCall({ + url: '/api/ListTenantAlignment', + queryKey: 'AllTenantsDashboard-Alignment', + waiting: true, + }) + + // summaryOnly projects away ResultMarkdown/ResultDataJson server-side — this card only counts + // rows, and those two columns are unbounded blobs that otherwise dominate the payload. + const failedTestsApi = ApiGetCall({ + url: '/api/ListTestResultsTenants', + data: { status: 'Failed', summaryOnly: 'true' }, + queryKey: 'AllTenantsDashboard-FailedTests', + waiting: true, + }) + + const domainsApi = ApiGetCall({ + url: '/api/ListDomainAnalyser', + data: { tenantFilter: 'AllTenants' }, + queryKey: 'AllTenantsDashboard-Domains', + waiting: true, + }) + + // countsOnly reads the pre-computed '-Count' rows, so this stays a single table query + // regardless of how many tenants exist. + const countsApi = ApiGetCall({ + url: '/api/ListDBCache', + data: { tenantFilter: 'AllTenants', countsOnly: 'true' }, + queryKey: 'AllTenantsDashboard-Counts', + waiting: true, + }) + + // ListLogs defaults to today's partition when no date is supplied, which keeps this cheap. + const logsApi = ApiGetCall({ + url: '/api/ListLogs', + data: { Filter: 'True', Severity: 'Error,Critical' }, + queryKey: 'AllTenantsDashboard-Logs', + waiting: true, + }) + + // Score fields only — the endpoint projects away controlScores, which is ~15 KB per cached record. + // includeHistory adds the retained daily scores for the trend line; those rows have to be read to + // find the latest anyway, so the only cost is three more numbers per day per tenant. + const secureScoreApi = ApiGetCall({ + url: '/api/ListSecureScoreReport', + data: { tenantFilter: 'AllTenants', includeHistory: 'true' }, + queryKey: 'AllTenantsDashboard-SecureScore', + waiting: true, + }) + + const tenants = useMemo( + () => asArray(tenantsApi.data).filter((tenant) => tenant?.customerId !== 'AllTenants'), + [tenantsApi.data] + ) + + const tenantCount = tenants.length + + const displayNameByDomain = useMemo(() => { + const map = new Map() + tenants.forEach((tenant) => { + if (tenant?.defaultDomainName) { + map.set(tenant.defaultDomainName, tenant.displayName || tenant.defaultDomainName) + } + }) + return map + }, [tenants]) + + /* ---------------------------------------------------------------- delegation */ + + const delegation = useMemo(() => { + const buckets = { expired: 0, week: 0, month: 0, quarter: 0, healthy: 0 } + const urgent = [] + let noAutoExtendSoon = 0 + + tenants.forEach((tenant) => { + const days = daysUntil(tenant?.relationshipEnd) + if (days === null) { + buckets.healthy += 1 + return + } + if (days < 0) buckets.expired += 1 + else if (days <= 7) buckets.week += 1 + else if (days <= 30) buckets.month += 1 + else if (days <= 90) buckets.quarter += 1 + else buckets.healthy += 1 + + if (days <= 30) { + if (!tenant?.hasAutoExtend) noAutoExtendSoon += 1 + urgent.push({ + name: tenant.displayName || tenant.defaultDomainName, + days, + hasAutoExtend: !!tenant?.hasAutoExtend, + }) + } + }) + + urgent.sort((a, b) => a.days - b.days) + + return { + buckets, + urgent, + noAutoExtendSoon, + expiringSoon: buckets.expired + buckets.week + buckets.month, + } + }, [tenants]) + + /* ---------------------------------------------------------------- alignment */ + + const alignment = useMemo(() => { + const rows = asArray(alignmentApi.data) + const byTenant = new Map() + let pendingDeviations = 0 + const pendingByTenant = new Map() + + // ListTenantAlignment serialises camelCase on the wire even though the PowerShell object that + // builds it is PascalCase. Accept both so this keeps working if that ever normalises. + rows.forEach((row) => { + const key = row?.tenantFilter ?? row?.TenantFilter + if (!key) return + const score = Number( + row?.combinedAlignmentScore ?? + row?.CombinedScore ?? + row?.alignmentScore ?? + row?.AlignmentScore ?? + 0 + ) + const existing = byTenant.get(key) ?? { total: 0, count: 0 } + byTenant.set(key, { + total: existing.total + score, + count: existing.count + 1, + }) + + const pending = Number(row?.pendingDeviationsCount ?? row?.PendingDeviationsCount ?? 0) + if (pending > 0) { + pendingDeviations += pending + pendingByTenant.set(key, (pendingByTenant.get(key) ?? 0) + pending) + } + }) + + const scores = [] + byTenant.forEach((value, key) => { + scores.push({ + tenant: key, + name: displayNameByDomain.get(key) ?? key, + score: value.count ? Math.round(value.total / value.count) : 0, + }) + }) + + const buckets = { strong: 0, good: 0, weak: 0, poor: 0 } + scores.forEach(({ score }) => { + if (score >= 90) buckets.strong += 1 + else if (score >= 75) buckets.good += 1 + else if (score >= 50) buckets.weak += 1 + else buckets.poor += 1 + }) + + const average = scores.length + ? Math.round(scores.reduce((sum, item) => sum + item.score, 0) / scores.length) + : 0 + + return { + scores, + buckets, + average, + lowest: [...scores].sort((a, b) => a.score - b.score).slice(0, 4), + pendingDeviations, + pendingTenantCount: pendingByTenant.size, + } + }, [alignmentApi.data, displayNameByDomain]) + + /* ------------------------------------------------------------- test results */ + + const tests = useMemo(() => { + const rows = asArray(failedTestsApi.data) + const identityChecks = new Map() + const highRiskTenants = new Set() + let high = 0 + + rows.forEach((row) => { + if (String(row?.Risk ?? '').toLowerCase() === 'high') { + high += 1 + if (row?.Tenant) highRiskTenants.add(row.Tenant) + } + + if (String(row?.TestType ?? '').toLowerCase() === 'identity' && row?.Name) { + const tenantSet = identityChecks.get(row.Name) ?? new Set() + if (row?.Tenant) tenantSet.add(row.Tenant) + identityChecks.set(row.Name, tenantSet) + } + }) + + const identityRows = [...identityChecks.entries()] + .map(([label, tenantSet]) => ({ label, tenantCount: tenantSet.size })) + .sort((a, b) => b.tenantCount - a.tenantCount) + .slice(0, 4) + + const identityTenantCount = new Set( + rows + .filter((row) => String(row?.TestType ?? '').toLowerCase() === 'identity' && row?.Tenant) + .map((row) => row.Tenant) + ).size + + return { + identityRows, + identityTenantCount, + high, + highRiskTenantCount: highRiskTenants.size, + } + }, [failedTestsApi.data]) + + /* ------------------------------------------------------------ mail hygiene */ + + const mail = useMemo(() => { + const rows = asArray(domainsApi.data) + const total = rows.length + if (!total) return { total: 0, meters: [] } + + const spf = rows.filter((row) => row?.SPFPassAll).length + const dkim = rows.filter((row) => row?.DKIMEnabled).length + const dmarc = rows.filter((row) => + ['quarantine', 'reject'].includes(String(row?.DMARCActionPolicy ?? '').toLowerCase()) + ).length + const dnssec = rows.filter((row) => row?.DNSSECPresent).length + + const meter = (label, value) => { + const pct = percent(value, total) + return { + label, + percent: pct, + caption: `${value} of ${total} domains`, + severity: pct >= 80 ? 'ok' : pct >= 50 ? 'warning' : 'critical', + } + } + + return { + total, + meters: [ + meter('SPF valid', spf), + meter('DKIM signing', dkim), + meter('DMARC enforced', dmarc), + meter('DNSSEC', dnssec), + ], + } + }, [domainsApi.data]) + + /* ------------------------------------------------------ scale and freshness */ + + const cache = useMemo(() => { + const rows = asArray(countsApi.data) + + const totals = new Map() + const tenantOldest = new Map() + + rows.forEach((row) => { + const type = row?.Type + const count = Number(row?.Count ?? 0) + if (type) totals.set(type, (totals.get(type) ?? 0) + count) + + const age = hoursSince(row?.LastRefresh) + if (row?.Tenant && age !== null) { + const current = tenantOldest.get(row.Tenant) + if (current === undefined || age > current) tenantOldest.set(row.Tenant, age) + } + }) + + const scale = SCALE_TYPES.map(({ type, label }) => ({ + label, + value: totals.get(type) ?? 0, + average: tenantCount ? Math.round((totals.get(type) ?? 0) / tenantCount) : 0, + })) + + let fresh = 0 + let stale = 0 + let missing = 0 + const staleTenants = [] + + // A tenant the cache has never written has no rows at all, so absence is the signal here — + // iterate the tenant list rather than the returned rows. + tenants.forEach((tenant) => { + const domain = tenant?.defaultDomainName + const age = domain ? tenantOldest.get(domain) : undefined + const name = tenant?.displayName || domain + if (age === undefined) { + missing += 1 + staleTenants.push({ + name, + detail: 'No cached collections found', + severity: 'critical', + }) + } else if (age > 72) { + stale += 1 + staleTenants.push({ + name, + detail: `Oldest collection ${Math.round(age / 24)} days old`, + severity: 'critical', + }) + } else if (age > 30) { + stale += 1 + staleTenants.push({ + name, + detail: `Oldest collection ${Math.round(age)} hours old`, + severity: 'warning', + }) + } else { + fresh += 1 + } + }) + + return { + scale, + hasData: rows.length > 0, + freshness: { fresh, stale, missing }, + staleTenants: staleTenants.slice(0, 5), + } + }, [countsApi.data, tenants, tenantCount]) + + /* ------------------------------------------------------------ secure score */ + + const secureScore = useMemo( + () => deriveSecureScoreSummary(asArray(secureScoreApi.data), displayNameByDomain), + [secureScoreApi.data, displayNameByDomain] + ) + + /* -------------------------------------------------------------------- logs */ + + const logs = useMemo(() => { + const rows = asArray(logsApi.data).filter((row) => + ['error', 'critical'].includes(String(row?.Severity ?? '').toLowerCase()) + ) + + const byTenant = new Map() + rows.forEach((row) => { + const tenant = row?.Tenant + if (!tenant || tenant === 'CIPP') return + const entry = byTenant.get(tenant) ?? { count: 0, latest: null } + entry.count += 1 + if (!entry.latest) entry.latest = row?.Message + byTenant.set(tenant, entry) + }) + + const offenders = [...byTenant.entries()] + .map(([tenant, value]) => ({ + tenant, + name: displayNameByDomain.get(tenant) ?? tenant, + count: value.count, + latest: value.latest, + })) + .sort((a, b) => b.count - a.count) + + return { total: rows.length, offenders, tenantCount: byTenant.size } + }, [logsApi.data, displayNameByDomain]) + + /* --------------------------------------------------- tenants needing attention */ + + const attention = useMemo(() => { + const rows = [] + + tenants.forEach((tenant) => { + const name = tenant?.displayName || tenant?.defaultDomainName + const status = String(tenant?.delegatedPrivilegeStatus ?? '').toLowerCase() + if (status && !status.includes('delegatedadminprivileges')) { + rows.push({ + key: `${tenant.customerId}-delegation`, + name, + detail: `Delegated privilege status: ${tenant.delegatedPrivilegeStatus}`, + severity: 'critical', + chipLabel: 'Delegation', + }) + } else if (tenant?.RequiresRefresh) { + rows.push({ + key: `${tenant.customerId}-refresh`, + name, + detail: 'Cached tenant details are stale and need a refresh', + severity: 'warning', + chipLabel: 'Needs refresh', + }) + } + }) + + logs.offenders.slice(0, 3).forEach((offender) => { + // The count goes in the chip rather than the detail, so the detail line is free to carry the + // actual message — repeating "Errors logged" on every row said nothing the stripe didn't. + rows.push({ + key: `${offender.tenant}-errors`, + name: offender.name, + detail: offender.latest || 'Logged an error today', + severity: 'critical', + chipLabel: `${offender.count} error${offender.count === 1 ? '' : 's'}`, + }) + }) + + const order = { critical: 0, warning: 1, ok: 2 } + rows.sort((a, b) => (order[a.severity] ?? 3) - (order[b.severity] ?? 3)) + + return { rows: rows.slice(0, 6), total: rows.length } + }, [tenants, logs.offenders]) + + const isLoading = + tenantsApi.isLoading || + alignmentApi.isLoading || + failedTestsApi.isLoading || + domainsApi.isLoading || + countsApi.isLoading || + logsApi.isLoading || + secureScoreApi.isLoading + + return { + tenantCount, + tenants: tenantsApi, + alignmentApi, + failedTestsApi, + domainsApi, + countsApi, + logsApi, + secureScoreApi, + delegation, + alignment, + tests, + mail, + cache, + logs, + secureScore, + attention, + isLoading, + } +} diff --git a/src/components/CippBaselines/CippBaselineStandardDialog.jsx b/src/components/CippBaselines/CippBaselineStandardDialog.jsx new file mode 100644 index 000000000000..f9119a757656 --- /dev/null +++ b/src/components/CippBaselines/CippBaselineStandardDialog.jsx @@ -0,0 +1,221 @@ +import { useMemo, useState } from 'react' +import { + Box, + Button, + Card, + CardActions, + CardContent, + Chip, + Dialog, + DialogActions, + DialogContent, + DialogTitle, + InputAdornment, + Stack, + TextField, + Tooltip, + Typography, +} from '@mui/material' +import { Grid } from '@mui/system' +import { Add, Check, Search } from '@mui/icons-material' + +const impactColors = { + 'Low Impact': 'info', + 'Medium Impact': 'warning', + 'High Impact': 'error', +} + +// Browse-and-add picker for V3 standard definitions: search, category filter chips, and one +// card per standard with its metadata slice (impact, secure score, recommended-by). +export const CippBaselineStandardDialog = ({ + open, + onClose, + catalog, + selectedStandards, + onToggle, +}) => { + const [search, setSearch] = useState('') + const [category, setCategory] = useState('All') + + const categories = useMemo( + () => ['All', ...new Set(catalog.map((standard) => standard.cat))], + [catalog] + ) + + const filtered = catalog.filter((standard) => { + if (category !== 'All' && standard.cat !== category) return false + if (!search) return true + const query = search.toLowerCase() + return ( + standard.label.toLowerCase().includes(query) || + (standard.helpText ?? '').toLowerCase().includes(query) || + (standard.tag ?? []).some((tag) => tag.toLowerCase().includes(query)) + ) + }) + + const selectedCount = selectedStandards.length + + const handleClose = () => { + setSearch('') + setCategory('All') + onClose() + } + + return ( + + Add Standards to Stage + + + setSearch(event.target.value)} + InputProps={{ + startAdornment: ( + + + + ), + }} + /> + + {categories.map((entry) => ( + setCategory(entry)} + /> + ))} + + + {filtered.map((standard) => { + // Multi-instance standards count 'Name#n' keys; each click adds another instance. + const instanceCount = selectedStandards.filter( + (key) => key.split('#')[0] === standard.name + ).length + const isSelected = instanceCount > 0 + return ( + + + + + {standard.label} + + + {standard.cat} + + + + {standard.secureScoreImpact > 0 && ( + + + + )} + {(standard.recommendedBy ?? []).map((source) => ( + + ))} + + + {standard.helpText} + + + + + + + + ) + })} + {filtered.length === 0 && ( + + + No standards match this search. + + + )} + + + + + + + {selectedCount} standard{selectedCount === 1 ? '' : 's'} in this + stage + + + + + + ) +} + +export default CippBaselineStandardDialog diff --git a/src/components/CippBaselines/CippBaselineStandardItem.jsx b/src/components/CippBaselines/CippBaselineStandardItem.jsx new file mode 100644 index 000000000000..a2ac421247cd --- /dev/null +++ b/src/components/CippBaselines/CippBaselineStandardItem.jsx @@ -0,0 +1,412 @@ +import { useEffect } from 'react' +import { + Accordion, + AccordionDetails, + AccordionSummary, + Box, + Button, + Chip, + Divider, + IconButton, + Stack, + Tooltip, + Typography, +} from '@mui/material' +import { Grid } from '@mui/system' +import { AutoFixHigh, Delete, ExpandMore } from '@mui/icons-material' +import { useWatch } from 'react-hook-form' +import CippFormComponent from '../CippComponents/CippFormComponent' +import CippBaselineStandardSettings from './CippBaselineStandardSettings' +import { useM365Licenses } from '../../utils/m365-licenses-data' +import { getServicePlanFriendlyName } from '../../utils/get-cipp-service-plan-name' + +const impactColors = { + 'Low Impact': 'info', + 'Medium Impact': 'warning', + 'High Impact': 'error', +} + +// Unwrap autoComplete option objects ({label, value}) to their raw value. +const unwrap = (value) => + value && typeof value === 'object' && 'value' in value ? value.value : value + +const resolveToken = (token, values) => unwrap(values?.[token]) + +// Render a §5 `expected` template from the configured variable values. Type-preserving for +// exact `%token%` strings, string-replacing for embedded tokens — mirrors the engine's +// render step. +export const renderExpectedValue = (template, values) => { + if (typeof template === 'string') { + const exact = template.match(/^%(\w+)%$/) + if (exact) { + const value = resolveToken(exact[1], values) + return value === undefined ? template : value + } + return template.replace(/%(\w+)%/g, (match, token) => { + const value = resolveToken(token, values) + return value === undefined ? match : value + }) + } + if (Array.isArray(template)) { + return template.map((item) => renderExpectedValue(item, values)) + } + if (template && typeof template === 'object') { + return Object.fromEntries( + Object.entries(template).map(([key, value]) => [ + key, + renderExpectedValue(value, values), + ]) + ) + } + return template +} + +// One standard inside a stage: summary row with state chips, details with the standard's +// configurable variables (from the V3 definition), the per-delta action posture, and a live +// preview of the expected value the engine will enforce. +export const CippBaselineStandardItem = ({ + standard, + formControl, + expanded, + onToggle, + onRemove, + instanceId, + savedConfig, +}) => { + // Multi-instance standards use 'Name#' keys so each instance keeps its own config. + // Legacy keys were positional counters; new ones are opaque ids - only number the + // legacy ones, the id itself means nothing to a user. + const fieldBase = instanceId ?? standard.name + const instanceSuffix = fieldBase.includes('#') + ? fieldBase.split('#')[1] + : null + const instanceNumber = /^\d+$/.test(instanceSuffix ?? '') + ? Number(instanceSuffix) + 1 + : null + const watched = useWatch({ control: formControl.control, name: fieldBase }) + // Identity-carrying standards (CA/Intune templates via instanceIdentity, manual tasks + // via taskName) title as '